Publicite et delta
Résolu32 réponses
Des publicités intrusives apparaissent en bas de l'écran et des pages d'enquêtes s'ouvrent lors des recherches, ce qui gêne l'utilisation du PC et nécessite une intervention. Plusieurs conseils recommandent d'utiliser ZHPFix en mode administrateur, d'importer un script spécifique et de lancer le nettoyage pour supprimer les composants indésirables (Delta, Babylon, Boxore, DeltaSearch, etc.), puis de redémarrer et d'examiner le rapport. En cas de persistance, des vérifications complémentaires impliquent la suppression d'extensions problématiques, la purge des données locales de navigation et la vérification des éléments de démarrage ou des tâches planifiées associées, puis un nouveau diagnostic.
-
Contributeur sécuritéAu fait passe en résolu ;)
-
merci encore, c'est chouette se que vous faites.
-
Contributeur sécurité:)
Je te souhaite bon surf et bonne continuation
-
# DelFix v10.4 - Rapport créé le 25/09/2013 à 07:18:37
# Mis à jour le 19/07/2013 par Xplode
# Nom d'utilisateur : Vincent - PC-DE-VINCENT
# Système d'exploitation : Windows Vista (TM) Home Premium Service Pack 2 (32 bits)
~ Suppression des outils de désinfection ...
~ Purge de la restauration système ...
Supprimé : RP #251 [Installed sysTPL | 09/10/2013 19:28:08]
Supprimé : RP #252 [Installed QuickEngine | 09/11/2013 11:15:28]
Supprimé : RP #254 [Configured ASUS Ai Charger | 09/11/2013 11:20:57]
Supprimé : RP #255 [Installation du package de pilote logiciel : Kaspersky Lab Service réseau | 09/17/2013 19:17:02]
Supprimé : RP #256 [Point de contrôle planifié | 09/18/2013 11:35:41]
Supprimé : RP #257 [Windows Update | 09/19/2013 06:51:40]
Supprimé : RP #258 [Point de contrôle planifié | 09/21/2013 14:14:35]
Supprimé : RP #259 [Windows Update | 09/21/2013 14:57:48]
Supprimé : RP #260 [Removed Ask Toolbar. | 09/22/2013 06:18:24]
Supprimé : RP #261 [Removed Ask Toolbar. | 09/22/2013 06:19:47]
Supprimé : RP #262 [Removed Ask Toolbar. | 09/22/2013 06:22:18]
Supprimé : RP #263 [Removed Ask Toolbar. | 09/22/2013 06:22:50]
Supprimé : RP #264 [Removed Ask Toolbar. | 09/22/2013 08:03:27]
Supprimé : RP #265 [Removed Boxore Client | 09/22/2013 09:46:26]
Supprimé : RP #266 [Installed Java 7 Update 40 | 09/22/2013 17:09:50]
Supprimé : RP #267 [Point de contrôle planifié | 09/23/2013 20:39:34]
Supprimé : RP #268 [Windows Update | 09/24/2013 19:30:57]
Supprimé : RP #270 [P | 09/24/2013 20:20:00]
Nouveau point de restauration créé !
########## - EOF - ########## -
Contributeur sécurité:)
Pas de souci
-
je crois que je verrai tout ça demain, merci encore.
-
Contributeur sécurité:)
1)Désinstallation des outils de désinfection
Télécharges Delfix ici https://www.commentcamarche.net/telecharger/securite/7111-delfix/
Exécutes le en tant qu'administrateur(si tu es sous xp double clic sur le fichier téléchargé) puis une fois sur l'interface coches les cases suivantes
-supprimer les outils de désinfections
-purger la restauration du système
Cliques ensuite sur Exécuter puis patientes pendant le processus de suppression.
Le rapport sera enregistré dans le presse-papier et sur le disque dur (C:\DelFix.txt).
Poste le rapport
2)N'oublies pas de mettre à jour java adobe reader et flashplayer pour IE (chrome l'intègre déjà)
Un lien utile à lire https://www.commentcamarche.net/faq/13362-mettre-a-jour-son-pc-contre-les-failles-de-securite
N'oublies pas aussi de maintenir Windows à jour via Windows update
3)Pour permettre de mettre à jour tes logiciels je te conseille d'utiliser Filehippo update checker
Tu peux le télécharger ici https://www.commentcamarche.net/telecharger/utilitaires/9771-filehippo-app-manager/
Pour l'installation de filehippo décoches seulement mettre l'icône dans la barre de lancement rapide
4)Pour nettoyer les fichiers temporaires (attention pas de nettoyage registre ) tu peux utiliser Ccleaner avec tuto pour bien le configurer (https://www.commentcamarche.net/telecharger/utilitaires/5647-ccleaner/
Lien du téléchargement https://www.commentcamarche.net/telecharger/utilitaires/5647-ccleaner/
Tu peux aussi utiliser le nettoyeur de disque windows
N'oublies pas de défragmenter de temps en temps ton disque dur soit par le biais de l'utilitaire soit par le biais d'un logiciel tiers comme par exemple Deffagler ou auslogic Disk Defrag
Oublies les genres de nettoyeurs comme Tuneup ,Glary et autre nettoyeurs miracles ils ne te feront que ralentir ta machine et nettoyer plus blanc que blanc peut provoquer de graves dysfonctionnements
5)Sécurise tes navigateurs par exemple avec WOT et simple adblock pour Internet explorer
Pour télécharger WOT pour ie c'est par ici https://chrome.google.com/webstore/detail/wot-web-of-trust-website/bhmmomiinigofkjcapegjjndpbikblnp
Pour simple adblock c'est par ici http://simple-adblock.com/downloadpage/ (cliques sur Download Installer et pas le lien en dessous !)
Pour chrome(si tu possèdes Chrome)
Wot disponible ici https://chrome.google.com/webstore/detail/wot-web-of-trust-website/bhmmomiinigofkjcapegjjndpbikblnp?hl=fr
Adblock disponible ici https://www.commentcamarche.net/telecharger/web-internet/2555-adblock-plus-pour-chrome/
Lien du téléchargement pour wot sur firefox
https://addons.mozilla.org/fr/firefox/addon/wot-safe-browsing-tool/
Lien pour télécharger adblock +
https://addons.mozilla.org/fr/firefox/addon/adblock-plus/?src=ss
6)Fais attention à ce que tu télécharges où et comment
Evites si possible de télécharger sur O1net,tom's guide,télécharger.com et Softonic et compagnie car ils repackent les logiciels avec des programmes potientellement indésirables
A lire
http://www.stoppublicites.fr/
https://www.malekal.com/adwares-pup-protection/
7)Pourquoi faut-il éviter de télécharger sur du p2p
Les risques sont gros la machine risque de devenir un pc zombie
Un peu de lecture concernant les dangers et le risque
https://forum.malekal.com/viewtopic.php?t=3208&start=
https://forum.malekal.com/viewtopic.php?t=893&start=
-
je pense pas.
-
Contributeur sécurité:)
Plus de problèmes?
-
Rapport de ZHPFix 2013.9.23.9 par Nicolas Coolman, Update du 23/09/2013
Fichier d'export Registre :
Run by Vincent at 24/09/2013 22:20:08
High Elevated Privileges : OK
Windows Vista Home Premium Edition, 32-bit Service Pack 2 (Build 6002)
Corbeille vidée
========== Processus mémoire ==========
SUPPRIMÉ: Memory Process: C:\Users\Vincent\AppData\Local\Temp\APNStub.exe
SUPPRIMÉ: Memory Process: C:\Users\Vincent\AppData\Local\Temp\BoxoreInstaller.exe
SUPPRIMÉ: Memory Process: C:\Users\Vincent\AppData\Local\Temp\LollipopInstaller_amonetize_14633.exe
SUPPRIMÉ: Memory Process: C:\Users\Vincent\AppData\Local\Temp\uninst1.exe
========== Modules mémoire ==========
SUPPRIMÉ: Memory Module: C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
SUPPRIMÉ: Memory Module: C:\Program Files\Microsoft\BingBar\7.2.241.0\BingExt.dll
========== Clés du Registre ==========
SUPPRIMÉ: SearchScopes :{29F2C9C9-A1E0-4C7F-AB8A-2D8870AA8068}
SUPPRIMÉ: [HKLM\Software\Classes\Installer\Products\\3E9A223DB85706D47A4C568CF83D870D]
SUPPRIMÉ: [HKLM\Software\Classes\Installer\Features\3E9A223DB85706D47A4C568CF83D870D]
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\MyPC Backup
SUPPRIMÉ: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ecdf796-c2dc-4d79-a620-cce0c0a66cc9}
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0E12F736682067FDE4D1158D5940A82E
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1A24B5BB8521B03E0C8D908F5ABC0AE6
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2B0D56C4F4C46D844A57FFED6F0D2852
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\49D4375FE41653242AEA4C969E4E65E0
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6AA0923513360135B272E8289C5F13FA
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6F7467AF8F29C134CBBAB394ECCFDE96
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\922525DCC5199162F8935747CA3D8E59
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BCDA179D619B91648538E3394CAC94CC
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D677B1A9671D4D4004F6F2A4469E86EA
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DD1402A9DD4215A43ABDE169A41AFA0E
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E36E114A0EAD2AD46B381D23AD69CDDF
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EF8E618DB3AEDFBB384561B5C548F65E
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5
SUPPRIMÉ: HKLM\Software\Classes\Interface\{7C28CEF1-A4A6-4B6A-8B97-C44F1267753C}
SUPPRIMÉ: HKLM\Software\Classes\TypeLib\{D8CAF2DF-52D3-42CF-9DDB-F4FF828DB4F8}
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CA0054A5AB3EFFE4CB5660E44A1E7DCC
========== Valeurs du Registre ==========
SUPPRIMÉ [HKLM\Software\Microsoft\Internet Explorer\Toolbar]:{2318C2B1-4965-11d4-9B18-009027A5CD4F}
========== Dossiers ==========
SUPPRIMÉ: c:\users\vincent\appdata\local\software
SUPPRIMÉ: c:\users\vincent\appdata\local\google\chrome\user data\default\extensions\pbpohikckhbcljgombipcdoinkaedlfa
========== Fichiers ==========
SUPPRIMÉ:* c:\users\vincent\appdata\local\temp\apnstub.exe
SUPPRIMÉ:* c:\users\vincent\appdata\local\temp\boxoreinstaller.exe
SUPPRIMÉ: c:\users\vincent\appdata\local\temp\lollipopinstaller_amonetize_14633.exe
SUPPRIMÉ:* c:\users\vincent\appdata\local\temp\uninst1.exe
SUPPRIMÉ:*** c:\program files\google\google toolbar\googletoolbar_32.dll
SUPPRIMÉ:*** c:\program files\microsoft\bingbar\7.2.241.0\bingext.dll
SUPPRIMÉ: C:\Windows\Installer\{D322A9E3-758B-4D60-A7C4-65C88FD378D0}\icon_installer_ico
SUPPRIMÉ: C:\Users\Vincent\AppData\Local\Temp\GoogleToolbarInstaller1.log
SUPPRIMÉ:* c:\users\vincent\appdata\local\temp\googletoolbarinstaller1.log
SUPPRIMÉ: C:\Users\Vincent\AppData\Local\Temp\GoogleToolbarInstaller2.log
SUPPRIMÉ:* c:\users\vincent\appdata\local\temp\googletoolbarinstaller2.log
========== Tache planifiée ==========
SUPPRIMÉ: 4908
SUPPRIMÉ: BoxSoftwareUpdate
========== Restauration Système ==========
Point de restauration du système créé avec succès
========== Récapitulatif ==========
4 : Processus mémoire
2 : Modules mémoire
22 : Clés du Registre
1 : Valeurs du Registre
2 : Dossiers
11 : Fichiers
2 : Tache planifiée
1 : Restauration Système
End of clean in 00mn 20s
========== Chemin de fichier rapport ==========
C:\Users\Vincent\AppData\Roaming\ZHP\ZHPFix[R1].txt - 24/09/2013 22:20:13 [5100] -
Contributeur sécuritéOui rassure toi je te prépare le final
Pense à vider la quarantaine de Mbam(onglet quarantaine>tout supprimer)
Attention script personnalisé à ne pas reproduire sur un autre ordinateur risque de plantage !
* Copies uniquement les lignes indiquées en gras ci-dessous dans le presse papier(tu surlignes avec la souris puis clic droit copier de Script ZHPFix jusqu'à la fin soit sysrestore)
Script ZHPFix
[MD5.00000000000000000000000000000000] [APT] [4908] (...) -- C:\Users\Vincent\AppData\Local\Temp\launchie.vbs \\B (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [BoxSoftwareUpdate] (...) -- C:\ProgramData\BoxUpdChk\updchk.exe (.not file.) [0]
O45 - LFCP:[MD5.F222F47DFA6F985FAEA2D4B6A206C3ED] - 22/09/2013 - 07:06:47 ---A- - C:\Windows\Prefetch\PRICEPEEP2.EXE-7EE0C279.pf =>Adware.PricePeep
O45 - LFCP:[MD5.75E1A82CB48375E4C2B198637E916C0C] - 22/09/2013 - 07:06:52 ---A- - C:\Windows\Prefetch\DELTA BABYLON.EXE-0D15539B.pf =>Toolbar.Babylon
O45 - LFCP:[MD5.9E304F403ECC496E5295DB5E89F11B23] - 22/09/2013 - 07:06:53 ---A- - C:\Windows\Prefetch\BOXORE.EXE-055F8C61.pf =>Adware.Boxore
O45 - LFCP:[MD5.66B541989EF08F0FC046037FA4C47318] - 22/09/2013 - 07:06:54 ---A- - C:\Windows\Prefetch\BOXOREINSTALLER.EXE-DF33A450.pf =>Adware.Boxore
O45 - LFCP:[MD5.B0FF80649988EAE6DDF7D67D9A97CA55] - 22/09/2013 - 07:07:12 ---A- - C:\Windows\Prefetch\DSEARCHLINK.EXE-F457985B.pf =>Toolbar.DeltaSearch
O45 - LFCP:[MD5.E7B6262DC8CF44C9420A6D164774295D] - 22/09/2013 - 07:07:20 ---A- - C:\Windows\Prefetch\OPTIMIZERPRO.EXE-7F5E7D2A.pf =>PUP.OptimizerPro
O45 - LFCP:[MD5.75318131D87A0355390CC0989BD71134] - 22/09/2013 - 07:07:24 ---A- - C:\Windows\Prefetch\BABMAINT.EXE-6E4A9A3A.pf =>Hijacker.BabSolution
O45 - LFCP:[MD5.0F0A5334F7A905738DB0111DE6BD2D59] - 22/09/2013 - 07:07:24 ---A- - C:\Windows\Prefetch\OPTIMIZER_PRO.EXE-A0A8777E.pf =>PUP.OptimizerPro
O45 - LFCP:[MD5.A9AD849E0905D60A017196BA5718B214] - 22/09/2013 - 07:07:24 ---A- - C:\Windows\Prefetch\OPTIMIZER_PRO.TMP-296A02CF.pf =>PUP.OptimizerPro
O45 - LFCP:[MD5.F1433BCB280F09A44632C2DDA7501FC5] - 22/09/2013 - 07:07:38 ---A- - C:\Windows\Prefetch\MYDELTATB.EXE-33807579.pf =>Toolbar.DeltaSearch
O45 - LFCP:[MD5.96347E33B0F18B9CFFFCA9689817BEEC] - 22/09/2013 - 07:07:42 ---A- - C:\Windows\Prefetch\OPTIMIZERPRO.EXE-2091C0B9.pf =>PUP.OptimizerPro
O45 - LFCP:[MD5.5136B876C6E642F3DAE3464CAFFFAD89] - 22/09/2013 - 09:22:31 ---A- - C:\Windows\Prefetch\BITGUARD.EXE-B86860C0.pf =>PUP.BitGuard
O69 - SBI: SearchScopes [HKCU] 7F95E841DF9F4C60AED129EF20BBCABC - (WiseConvert 1.5 B2 Customized Web Search) - http://search.conduit.com =>Toolbar.Conduit
O69 - SBI: SearchScopes [HKCU] {29F2C9C9-A1E0-4C7F-AB8A-2D8870AA8068} - (Ask Search) - http://www.search.ask.com/?o=10148&l=dis =>Toolbar.Ask
[MD5.CE755676AE6D27A1EFEEFB0F3C70A929] [SPRF][10/05/2013] (.Ask.com - AskStub Application.) -- C:\Users\Vincent\AppData\Local\Temp\APNStub.exe [358600]
[MD5.32DCED18FFFEA0035E4FA975CA0AE8BE] [SPRF][22/04/2013] (.The Software Group - Software Update Setup.) -- C:\Users\Vincent\AppData\Local\Temp\BoxoreInstaller.exe [620656] =>Adware.Boxore
[MD5.1D19460D6D8D7B4B8691C464A7CB97E5] [SPRF][12/06/2013] (.il--lop-lp---o - Pas de description.) -- C:\Users\Vincent\AppData\Local\Temp\LollipopInstaller_amonetize_14633.exe [347136] =>Adware.Lollipop
[MD5.3C74C26999F2060BC6302448F173A342] [SPRF][28/08/2013] (.Babylon Ltd. - Uninstaller Application.) -- C:\Users\Vincent\AppData\Local\Temp\uninst1.exe [340464] =>Toolbar.Babylon
O90 - PUC: "3E9A223DB85706D47A4C568CF83D870D" . (.Bing Bar.) -- C:\Windows\Installer\{D322A9E3-758B-4D60-A7C4-65C88FD378D0}\icon_installer_ico =>Toolbar.Bing
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\MyPC Backup] =>PUP.MyPCBackup^
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ecdf796-c2dc-4d79-a620-cce0c0a66cc9}] =>Toolbar.Babylon
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0E12F736682067FDE4D1158D5940A82E] =>Toolbar.Ask
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1A24B5BB8521B03E0C8D908F5ABC0AE6] =>Toolbar.Ask
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2B0D56C4F4C46D844A57FFED6F0D2852] =>Toolbar.Ask
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\49D4375FE41653242AEA4C969E4E65E0] =>Toolbar.Ask
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6AA0923513360135B272E8289C5F13FA] =>Toolbar.Ask
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6F7467AF8F29C134CBBAB394ECCFDE96] =>Toolbar.Ask
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\922525DCC5199162F8935747CA3D8E59] =>Toolbar.Ask
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BCDA179D619B91648538E3394CAC94CC] =>Toolbar.Ask
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D677B1A9671D4D4004F6F2A4469E86EA] =>Toolbar.Ask
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DD1402A9DD4215A43ABDE169A41AFA0E] =>Toolbar.Ask
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E36E114A0EAD2AD46B381D23AD69CDDF] =>Toolbar.Ask
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EF8E618DB3AEDFBB384561B5C548F65E] =>Toolbar.Ask
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375] =>Toolbar.Tarma
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5] =>Toolbar.Tarma
[HKLM\Software\Classes\Interface\{7C28CEF1-A4A6-4B6A-8B97-C44F1267753C}] =>PUP.WebConnect
[HKLM\Software\Classes\TypeLib\{D8CAF2DF-52D3-42CF-9DDB-F4FF828DB4F8}] =>PUP.WebConnect
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CA0054A5AB3EFFE4CB5660E44A1E7DCC] =>Adware.Boxore^
[HKLM\Software\Microsoft\Internet Explorer\Toolbar]:{2318C2B1-4965-11d4-9B18-009027A5CD4F} =>Toolbar.Google^
C:\Users\Vincent\AppData\Local\Software =>Adware.Boxore
C:\Users\Vincent\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbpohikckhbcljgombipcdoinkaedlfa =>Spyware.SmartDisplay
C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll =>Toolbar.Google^
C:\Program Files\Microsoft\BingBar\7.2.241.0\BingExt.dll =>Toolbar.Bing^
C:\Windows\Prefetch\PRICEPEEP2.EXE-7EE0C279.pf =>Adware.PricePeep^
C:\Windows\Prefetch\DELTA BABYLON.EXE-0D15539B.pf =>Toolbar.Babylon^
C:\Windows\Prefetch\BOXORE.EXE-055F8C61.pf =>Adware.Boxore^
C:\Windows\Prefetch\BOXOREINSTALLER.EXE-DF33A450.pf =>Adware.Boxore^
C:\Windows\Prefetch\DSEARCHLINK.EXE-F457985B.pf =>Toolbar.DeltaSearch^
C:\Windows\Prefetch\OPTIMIZERPRO.EXE-7F5E7D2A.pf =>PUP.OptimizerPro^
C:\Windows\Prefetch\BABMAINT.EXE-6E4A9A3A.pf =>Hijacker.BabSolution^
C:\Windows\Prefetch\OPTIMIZER_PRO.EXE-A0A8777E.pf =>PUP.OptimizerPro^
C:\Windows\Prefetch\OPTIMIZER_PRO.TMP-296A02CF.pf =>PUP.OptimizerPro^
C:\Windows\Prefetch\MYDELTATB.EXE-33807579.pf =>Toolbar.DeltaSearch^
C:\Windows\Prefetch\OPTIMIZERPRO.EXE-2091C0B9.pf =>PUP.OptimizerPro^
C:\Windows\Prefetch\BITGUARD.EXE-B86860C0.pf =>PUP.BitGuard^
C:\Users\Vincent\AppData\Local\Temp\BoxoreInstaller.exe =>Adware.Boxore^
C:\Users\Vincent\AppData\Local\Temp\LollipopInstaller_amonetize_14633.exe =>Adware.Lollipop^
C:\Users\Vincent\AppData\Local\Temp\uninst1.exe =>Toolbar.Babylon^
C:\Windows\Installer\{D322A9E3-758B-4D60-A7C4-65C88FD378D0}\icon_installer_ico =>Toolbar.Bing^
C:\Users\Vincent\AppData\Local\Temp\GoogleToolbarInstaller1.log =>Toolbar.Babylon
C:\Users\Vincent\AppData\Local\Temp\GoogleToolbarInstaller2.log =>Toolbar.Babylon
Sysrestore
* Lance ZHPFix (icône seringue)en tant qu'administrateur(si tu es sous Vista/7/8)sinon double clique sur l'icône en forme de seringue puis clique sur OK pour continuer.
* Cliques sur importer(Dans certains cas le script se colle automatiquement dans la zone de script et ne nécessite pas de cliquer sur le bouton "IMPORTER".)
* Si tu ne vois pas les lignes clic droit dans l'encadré puis coller
* Clique sur le bouton GO pour lancer le nettoyage, et laisse l'outil travailler.
* Zhpfix te proposera de vider la corbeille si tu le souhaites cliques sur oui si tu ne le souhaites pas cliques sur non
* Redémarre le PC et poste le rapport C:\ZHP\ZHPFixReport.txt
Si problème il y a il existe toujours une solution
N'oubliez pas de mettre votre sujet en résolu -
Bonsoir, As-tu regardé le rapport?
-
Contributeur sécuritéOn continue après manger
-
-
Contributeur sécuritéOk refais moi un zhpdiag :)
-
j'ai pas décocher ask, je ne l'ai pas trouvé!
-
Contributeur sécuritéMets à jour java (n'oublies pas de décocher Ask)
https://www.commentcamarche.net/telecharger/developpement/12917-java-runtime-environment/
-
-
Contributeur sécuritéRapport incomplet
Héberge le sur cjoint
-
~ Rapport de ZHPDiag v2013.9.22.41 - Nicolas Coolman (22/09/2013)
~ Lancé par Vincent (22/09/2013 16:26:04)
~ Adresse du Site Web https://nicolascoolman.webs.com/
~ Traduit par Nicolas Coolman
~ Etat de la version :
~ Liste blanche : Désactivée par l'utilisateur
~ Elévation des Privilèges : OK
~ User Account Control (UAC): Deactivate by program
---\\ Navigateurs Internet
MSIE: Internet Explorer v9.0.8112.16421 (Defaut)
---\\ Informations sur les produits Windows
~ Langage: Français
Windows Vista Home Premium Edition, 32-bit Service Pack 2 (Build 6002)
Windows Server License Manager Script : OK
~ Vista, OEM_COA_SLP channel
Windows ID Activation : OK
~ Windows Partial Key : 234J7
Windows License : OK
Windows Automatic Updates : OK
---\\ Logiciels de protection du système
Kaspersky Anti-Virus v14.0.0.4651
Malwarebytes Anti-Malware version 1.75.0.1300
---\\ Logiciels d'optimisation du système
---\\ Logiciels de partage PeerToPeer
---\\ Surveillance de Logiciels
Adobe Flash Player 11 ActiveX
Adobe Reader X
Java 7 Update 25
---\\ Informations sur le système
~ Processor: x86 Family 6 Model 42 Stepping 7, GenuineIntel
~ Operating System: 32 Bits
Boot mode: Normal (Normal boot)
Total RAM: 3490 MB (53% free)
System Restore: Activé (Enable)
System drive C: has 200 GB (68%) free of 290 GB
---\\ Mode de connexion au système
~ Computer Name: PC-DE-VINCENT
~ User Name: Vincent
~ All Users Names: Vincent, Administrateur,
~ Unselected Option: None
Logged in as Administrator
---\\ Variables d'environnement
~ System Unit : C:\
~ %AppData% : C:\Users\Vincent\AppData\Roaming\
~ %Desktop% : C:\Users\Vincent\Desktop\
~ %Favorites% : C:\Users\Vincent\Favorites\
~ %LocalAppData% : C:\Users\Vincent\AppData\Local\
~ %StartMenu% : C:\Users\Vincent\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\
---\\ Enumération des unités disques
C:\ Hard drive, Flash drive, Thumb drive (Free 200 Go of 290 Go)
D:\ Hard drive, Flash drive, Thumb drive (Free 1 Go of 8 Go)
E:\ CD-ROM drive (Not Inserted)
F:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
G:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
H:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
I:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
Q:\ Hard drive, Flash drive, Thumb drive (Free 0 Go of 0 Go)
---\\ Etat du Centre de Sécurité Windows
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK
~ Security Center: 30 Scanned in 00mn 00s
---\\ Recherche particulière de fichiers génériques
[MD5.D07D4C3038F3578FFCE1C0237F2A1253] - (.Microsoft Corporation - Explorateur Windows.) (.10/04/2009 - 22:27:38.) -- C:\Windows\Explorer.exe [2926592]
[MD5.101BA3EA053480BB5D957EF37C06B5ED] - (.Microsoft Corporation - Application de démarrage de Windows.) (.21/01/2008 - 03:23:42.) -- C:\Windows\System32\Wininit.exe [96768]
[MD5.21A5424935A32080A58DD40F2712212C] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.31/07/2013 - 10:52:44.) -- C:\Windows\System32\wininet.dll [1129472]
[MD5.898E7C06A350D4A1A64A9EA264D55452] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.10/04/2009 - 22:28:14.) -- C:\Windows\System32\Winlogon.exe [314368]
[MD5.3911B972B55FEA0478476B2E777B29FA] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.21/04/2011 - 14:58:27.) -- C:\Windows\system32\Drivers\AFD.sys [273408]
[MD5.1F05B78AB91C9075565A9D8A4B880BC4] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.10/04/2009 - 22:32:28.) -- C:\Windows\system32\Drivers\atapi.sys [19944]
[MD5.7ADD03E75BEB9E6DD102C3081D29840A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.21/01/2008 - 03:23:51.) -- C:\Windows\system32\Drivers\Cdfs.sys [70144]
[MD5.6B4BFFB9BECD728097024276430DB314] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.10/04/2009 - 20:39:18.) -- C:\Windows\system32\Drivers\Cdrom.sys [67072]
[MD5.622C41A07CA7E6DD91770F50D532CB6C] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.14/04/2011 - 15:59:03.) -- C:\Windows\system32\Drivers\DfsC.sys [75264]
[MD5.062452B7FFD68C8C042A6261FE8DFF4A] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.10/04/2009 - 20:42:44.) -- C:\Windows\system32\Drivers\HDAudBus.sys [561152]
[MD5.22D56C8184586B7A1F6FA60BE5F5A2BD] - (.Microsoft Corporation - Pilote de port i8042.) (.21/01/2008 - 03:23:20.) -- C:\Windows\system32\Drivers\i8042prt.sys [54784]
[MD5.8793643A67B42CEC66490B2A0CF92D68] - (.Microsoft Corporation - IP Network Address Translator.) (.21/01/2008 - 03:24:25.) -- C:\Windows\system32\Drivers\IpNat.sys [100864]
[MD5.1E94971C4B446AB2290DEB71D01CF0C2] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.29/04/2011 - 14:24:40.) -- C:\Windows\system32\Drivers\MRxSmb.sys [106496]
[MD5.ECD64230A59CBD93C85F1CD1CAB9F3F6] - (.Microsoft Corporation - MBT Transport driver.) (.10/04/2009 - 20:45:38.) -- C:\Windows\system32\Drivers\netBT.sys [185856]
[MD5.2C1121F2B87E9A6B12485DF53CD848C7] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.03/03/2013 - 20:07:52.) -- C:\Windows\system32\Drivers\ntfs.sys [1082232]
[MD5.8A79FDF04A73428597E2CAF9D0D67850] - (.Microsoft Corporation - Pilote de port parallèle.) (.21/01/2008 - 03:23:01.) -- C:\Windows\system32\Drivers\Parport.sys [79360]
[MD5.A214ADBAF4CB47DD2728859EF31F26B0] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.21/01/2008 - 03:24:55.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [76288]
[MD5.FBC0BACD9C3D7F6956853F64A66E252D] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.21/01/2008 - 03:23:01.) -- C:\Windows\system32\Drivers\rdpdr.sys [248832]
[MD5.7B75299A4D201D6A6533603D6914AB04] - (.Microsoft Corporation - SMB Transport driver.) (.10/04/2009 - 20:45:24.) -- C:\Windows\system32\Drivers\smb.sys [66560]
[MD5.76B06EB8A01FC8624D699E7045303E54] - (.Microsoft Corporation - TDI Translation Driver.) (.10/04/2009 - 20:45:58.) -- C:\Windows\system32\Drivers\tdx.sys [72192]
[MD5.786DB5771F05EF300390399F626BF30A] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.21/08/2012 - 12:47:42.) -- C:\Windows\system32\Drivers\volsnap.sys [224640]
~ Generic Processes: Scanned in 00mn 10s
---\\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 1/2069
~ Mes musiques (My Musics) : 1/48
~ Mes Videos (My Videos) : 1/10
~ Mes Favoris (My Favorites) : 1/22
~ Mes Documents (My Documents) : 43/199
~ Mon Bureau (My Desktop) : 1/2450
~ Menu demarrer (Programs) : 1/23
~ Hidden Files: Scanned in 00mn 08s
---\\ Processus lancés
[MD5.A1D3DA313CC7306EB0E7FE6FA5BB2AA2] - (.Kaspersky Lab ZAO - Kaspersky Anti-Virus.) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\avpui.exe [984768] [PID.2192]
[MD5.6582A15F11F722FEBE603004A73CBD77] - (.LogMeIn Inc. - Hamachi Client Application.) -- C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe [2255184] [PID.2208]
[MD5.D1D5DAB39DCB4BE0359943738D87409B] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe [532040] [PID.2916]
[MD5.0D392EDE3B97E0B3131B2F63EF1DB94E] - (.Microsoft Corporation - Windows Defender User Interface.) -- C:\Program Files\Windows Defender\MSASCui.exe [1008184] [PID.3680]
[MD5.1F3E0219EC13A4D94B6876993B35B0AD] - (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [10127976] [PID.3696]
[MD5.7DA77557B339A4CDC6EAB9327331E321] - (.Intel Corporation - igfxTray Module.) -- C:\Windows\System32\igfxtray.exe [142616] [PID.3740]
[MD5.0B92113765B45B1C0458593A6B87D379] - (.Intel Corporation - hkcmd Module.) -- C:\Windows\System32\hkcmd.exe [177432] [PID.3804]
[MD5.B7480BA5924D07D5797C834E4B158EEB] - (.Intel Corporation - persistence Module.) -- C:\Windows\System32\igfxpers.exe [176408] [PID.3836]
[MD5.D658AB1B55127D18DCFBCAC8CAAEA522] - (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files\HP\HP Software Update\hpwuschd2.exe [49208] [PID.3876]
[MD5.2D75851551D18878FADC21E166DEA3FA] - (.ASUSTek Computer Inc. - AiChargerAP MFC Application.) -- C:\Program Files\ASUS\ASUS Ai Charger\AiChargerAP.exe [547984] [PID.3900]
[MD5.D63797E8E7781EE1500A810CB6194FA6] - (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe [253816] [PID.3916]
[MD5.7186F28DD62BC390E870B1817B8E2699] - (.Microsoft Corp. - Bing Desktop Application.) -- C:\Program Files\Microsoft\BingDesktop\BingDesktop.exe [2249352] [PID.3924]
[MD5.B141F8F8B0FF37FFC51F9B71EE7A641B] - (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe [19875432] [PID.3944]
[MD5.94D9BCEB597D91C3CD23A0BE5D124865] - (.Microsoft Corp. - BDExtHost.exe.) -- C:\Program Files\Microsoft\BingDesktop\BDExtHost.exe [206984] [PID.3564]
[MD5.6483AF99D9E868E568357FF1AB052C1C] - (.Microsoft Corp. - BDAppHost.exe.) -- C:\Program Files\Microsoft\BingDesktop\BDAppHost.exe [153224] [PID.1704]
[MD5.F0018D2171F7C103EFD8020AE264A4CE] - (.Microsoft Corp. - BDRuntimeHost.exe.) -- C:\Program Files\Microsoft\BingDesktop\BDRuntimeHost.exe [349832] [PID.3668]
[MD5.534A3CB0847BA114F0D8A5F2BB2EF6D0] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe [887432] [PID.4420]
[MD5.AA9CBDCD4675A48755DDA3A73BE3E283] - (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe [757400] [PID.3872]
[MD5.4C820B50704EB1B259E63672EC55B122] - (.Kaspersky Lab ZAO - WebToolBar component.) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\klwtblfs.exe [138944] [PID.4384]
[MD5.9A3A9C55E58B3AE097B226680C74742C] - (.Adobe Systems Incorporated - Adobe® Flash® Player Installer/Uninstaller.) -- C:\Windows\system32\Macromed\Flash\FlashUtil32_11_8_800_175_ActiveX.exe [815496] [PID.4904]
[MD5.6080A176D09435FC8E6E800996656E18] - (.Microsoft Corporation - Console IME.) -- C:\Windows\system32\conime.exe [69120] [PID.4956]
[MD5.8982EC3DB2D9F57DF89D20BAF8B9230B] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [7998976] [PID.4876]
[MD5.67A95B9D129ED5399E7965CD09CF30E7] - (.Logitech Inc. - Logitech User mode UMVPF service.) -- C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe [450848] [PID.1248]
[MD5.862BB4CBC05D80C5B45BE430E5EF872F] - (.Microsoft Corporation - Service de gestion des licences Microsoft.) -- C:\Windows\system32\SLsvc.exe [3408896] [PID.1392]
[MD5.ADDA5E1951B90D3D23C56D3CF0622ADC] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [65640] [PID.168]
[MD5.E26D04CECD6C7C71CFBB3F335875BC31] - (.Kaspersky Lab ZAO - Kaspersky Anti-Virus.) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\avp.exe [214512] [PID.964]
[MD5.65608C44E71D7BA056C9EFCD8A00A7FE] - (.Microsoft Corp. - Bing Desktop updating service.) -- C:\Program Files\Microsoft\BingDesktop\BingDesktopUpdater.exe [173192] [PID.1708]
[MD5.176825151F2F93415BCB37C29AF11A3D] - (.LogMeIn Inc. - Hamachi Client Tunneling Engine.) -- C:\Program Files\LogMeIn Hamachi\hamachi-2.exe [1440080] [PID.1464]
[MD5.65085456FD9A74D7F1A999520C299ECB] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376] [PID.2176]
[MD5.E0D7732F2D2E24B2DB3F67B6750295B8] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [701512] [PID.2316]
[MD5.19D34534176E62F35DDB7DC7B7FF2A87] - (.Microsoft Corporation - Microsoft Application Virtualization Virtua.) -- C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe [207528] [PID.2604]
[MD5.1AEBDC693C74EA55FE05D51FA6573EBC] - (.Microsoft Corporation - Microsoft Application Virtualization Client.) -- C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe [523944] [PID.2788]
[MD5.FD557A50A65E44041CD2FCEF4BEB04DB] - (.Microsoft Corporation - Microsoft Office Client Virtualization Serv.) -- C:\Program Files\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.exe [822504] [PID.3116]
[MD5.B800EEC15851597405784126C407188C] - (.Microsoft Corporation - wpffontcache_v0400.exe.) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [754856] [PID.5528]
~ Processes Running: Scanned in 00mn 17s
---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
C:\Users\Vincent\AppData\Local\Google\Chrome\User Data\Default\Preferences
~ Google Browser: 0 Scanned in 00mn 00s
---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
P2 - FPN: [HKLM] [@java.com/DTPlugin,version=10.25.2] - (.Oracle Corporation - NPRuntime Script Plug-in Library for Java(TM) Deploy.) -- C:\Windows\system32\npDeployJava1.dll
P2 - FPN: [HKLM] [@java.com/JavaPlugin,version=10.25.2] - (.Oracle Corporation - Next Generation Java Plug-in 10.25.2 for Mozilla browsers.) -- C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll
P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 5.1.20513.0.) -- c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll
P2 - FPN: [HKLM] [@microsoft.com/SharePoint,version=14.0] - (.Microsoft Corporation - The plug-in allows you to open and edit files using Microsoft Office a.) -- C:\Program Files\Microsoft Office\Office14\NPSPWRAP.dll
P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll
P2 - FPN: [HKLM] [@videolan.org/vlc,version=2.0.5] - (.VideoLAN - VLC media player Web Plugin 2.0.2.) -- C:\Program Files\VideoLAN\VLC\npvlc.dll =>.VideoLAN
P2 - FPN: [HKLM] [Adobe Reader] - (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 10.1.8.) -- C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll
~ Firefox Browser: 9 Scanned in 00mn 00s
---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?gws_rd=ssl
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.microsoft.com/fr-fr/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.microsoft.com/fr-fr/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm
R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 10.1.8.) (No version) -- (.not file.)
~ IE Browser: 7 Scanned in 00mn 00s
---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Proxy management: Scanned in 00mn 00s
---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"
~ Keys: Scanned in 00mn 00s
---\\ Hosts file redirection (O1)
~ Le fichier hosts est sain (The hosts file is clean).
~ Hosts File: Scanned in 00mn 00s
~ Nombre de lignes (Lines number): 20
---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: ContentBlockerBrowserHelperObject - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} . (.Kaspersky Lab ZAO - Content Blocker Plugin.) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll
O2 - BHO: VirtualKeyboardBrowserHelperObject - {73455575-E40C-433C-9784-C78DC7761455} . (.Kaspersky Lab ZAO - Virtual Keyboard Plugin.) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll =>Toolbar.Google
O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} . (.Microsoft Corporation. - Extensions du client Bing.) -- C:\Program Files\Microsoft\BingBar\7.2.241.0\BingExt.dll =>Toolbar.Bing
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre7\bin\jp2ssv.dll
O2 - BHO: link filter bho - {E33CF602-D945-461A-83F0-819F76A199F8} . (.Kaspersky Lab ZAO - URL Advisor Plugin.) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\IEExt\UrlAdvisor\klwtbbho.dll
~ BHO: 14 Scanned in 00mn 00s
---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar: Google Toolbar - [HKLM]{2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll =>Toolbar.Google
O3 - Toolbar: Bing Bar - [HKLM]{8dcb7100-df86-4384-8842-8fa844297b3f} . (.Microsoft Corporation. - Extensions du client Bing.) -- C:\Program Files\Microsoft\BingBar\7.2.241.0\BingExt.dll =>Toolbar.Bing
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{2318C2B1-4965-11D4-9B18-009027A5CD4F} Clé orpheline
~ Toolbar: Scanned in 00mn 00s
---\\ Autres liens utilisateurs (O4)
O4 - GS\Desktop [Public]: Achat de consommables - HP Deskjet 1050 J410 series.lnk . (.Hewlett-Packard Co. - DesktopSureSupply.) -- C:\Program Files\HP\HP Deskjet 1050 J410 series\Bin\hpqDTSS.exe
O4 - GS\Desktop [Public]: Adobe Reader X.lnk . (.Adobe Systems Incorporated - Adobe Reader.) -- C:\Program Files\Adobe\Reader 10.0\Reader\AcroRd32.exe
O4 - GS\Desktop [Public]: HP Deskjet 1050 J410 series Scan.lnk . (.Hewlett-Packard Co. - HPScan.) -- C:\Program Files\HP\HP Deskjet 1050 J410 series\Bin\HPScan.exe
O4 - GS\Desktop [Public]: HP Deskjet 1050 J410 series.lnk . (.Hewlett-Packard Co. - HP Printer Software.) -- C:\Program Files\HP\HP Deskjet 1050 J410 series\Bin\HP Deskjet 1050 J410 series.exe
O4 - GS\Desktop [Public]: HP Photo Creations.lnk . (.Visan / RocketLife - PhotoProduct.exe.) -- C:\Program Files\HP Photo Creations\PhotoProduct.exe
O4 - GS\Desktop [Public]: Kaspersky Anti-Virus.lnk . (.Kaspersky Lab ZAO - Kaspersky Anti-Virus.) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\avpui.exe
O4 - GS\Desktop [Public]: Malwarebytes Anti-Malware.lnk . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
O4 - GS\Desktop [Public]: VLC media player.lnk . (.VideoLAN - VLC media player 2.0.5.) -- C:\Program Files\VideoLAN\VLC\vlc.exe =>.VideoLAN
O4 - GS\Desktop [Public]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag Setup.) -- C:\Program Files\ZHPDiag\ZHPhep.exe =>.Nicolas Coolman
O4 - GS\Desktop [Public]: ZHPFix.lnk . (.Nicolas Coolman - ZHPDiag Setup.) -- C:\Program Files\ZHPDiag\ZHPFix\ZHPhep.exe =>.Nicolas Coolman
O4 - GS\Program [Public]: Adobe Reader X.lnk . (...) -- C:\Windows\Installer\{AC76BA86-7AD7-1036-7B44-AA1000000001}\SC_Reader.ico
O4 - GS\Program [Public]: Media Center.lnk . (.Microsoft Corporation - Media Center.) -- C:\Windows\ehome\ehshell.exe
O4 - GS\Program [Public]: Microsoft Office 2010.lnk . (...) -- C:\Windows\Installer\{95140000-0070-0000-0000-0000000FF1CE}\oobeicon.exe
O4 - GS\Program [Public]: Visionneuse Microsoft PowerPoint .lnk . (...) -- C:\Windows\Installer\{95140000-00AF-040C-0000-0000000FF1CE}\ppvwicon.exe
O4 - GS\Program [Public]: Windows Calendar.lnk . (.Microsoft Corporation - Calendrier Windows.) -- C:\Program Files\Windows Calendar\WinCal.exe =>.Microsoft Corporation
O4 - GS\Program [Public]: Windows Collaboration.lnk . (.Microsoft Corporation - Windows Meeting Space.) -- C:\Program Files\Windows Collaboration\WinCollab.exe =>.Microsoft Corporation
O4 - GS\Program [Public]: Windows Contacts.lnk . (.Microsoft Corporation - Windows Contacts.) -- C:\Program Files\Windows Mail\wab.exe =>.Microsoft Corporation
O4 - GS\Program [Public]: Windows Defender.lnk . (.Microsoft Corporation - Windows Defender User Interface.) -- C:\Program Files\Windows Defender\MSASCui.exe
O4 - GS\Program [Public]: Windows DVD Maker.lnk . (.Microsoft Corporation - Création de DVD Windows.) -- C:\Program Files\Movie Maker\DVDMaker.exe =>.Microsoft Corporation
O4 - GS\Program [Public]: Windows Live.lnk - Clé orpheline
O4 - GS\Program [Public]: Windows Mail.lnk . (.Microsoft Corporation - Windows Mail.) -- C:\Program Files\Windows Mail\WinMail.exe =>.Microsoft Corporation
O4 - GS\Program [Public]: Windows Movie Maker.lnk . (.Microsoft Corporation - Windows Movie Maker.) -- C:\Program Files\Movie Maker\MOVIEMK.exe =>.Microsoft Corporation
O4 - GS\Program [Public]: Windows Photo Gallery.lnk . (.Microsoft Corporation - Galerie de photos Windows.) -- C:\Program Files\Windows Photo Gallery\WindowsPhotoGallery.exe =>.Microsoft Corporation
O4 - GS\Program [Public]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag Setup.) -- C:\Program Files\ZHPDiag\ZHPhep.exe =>.Nicolas Coolman
O4 - GS\Accessories [Public]: Calculator.lnk . (.Microsoft Corporation - Calculatrice de Windows.) -- C:\Windows\System32\calc.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Mobility Center.lnk . (.Microsoft Corporation - Centre de mobilité Windows.) -- C:\Windows\System32\mblctr.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: NetworkProjection.lnk . (.Microsoft Corporation - Connect to a Network Projector.) -- C:\Windows\System32\NetProj.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Paint.lnk . (.Microsoft Corporation - Paint.) -- C:\Windows\System32\mspaint.exe
O4 - GS\Accessories [Public]: Remote Desktop Connection.lnk . (.Microsoft Corporation - Connexion Bureau à distance.) -- C:\Windows\System32\mstsc.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Sidebar.lnk . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Snipping Tool.lnk . (.Microsoft Corporation - Outil Capture.) -- C:\Windows\System32\SnippingTool.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Sound Recorder.lnk . (.Microsoft Corporation - Magnétophone Windows.) -- C:\Windows\System32\SoundRecorder.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Sync Center.lnk . (.Microsoft Corporation - Microsoft Sync Center.) -- C:\Windows\System32\mobsync.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Welcome Center.lnk . (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Wordpad.lnk . (.Microsoft Corporation - Application Windows Wordpad.) -- C:\Program Files\Windows NT\Accessories\wordpad.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: Backup.lnk . (.Microsoft Corporation - Sauvegarde Microsoft® Windows.) -- C:\Windows\System32\sdclt.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: Character Map.lnk . (.Microsoft Corporation - Table des caractères.) -- C:\Windows\System32\charmap.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: dfrgui.lnk . (.Microsoft Corporation - Défragmenteur de disque Microsoft®.) -- C:\Windows\System32\dfrgui.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: Disk Cleanup.lnk . (.Microsoft Corporation - Gestionnaire de nettoyage de disque pour Wi.) -- C:\Windows\System32\cleanmgr.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: migwiz.lnk . (.Microsoft Corporation - Transfert de fichiers et paramètres Windows.) -- C:\Windows\System32\migwiz\migwiz.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: System Information.lnk . (.Microsoft Corporation - Informations système.) -- C:\Windows\System32\msinfo32.exe
O4 - GS\SystemTools [Public]: System Restore.lnk . (.Microsoft Corporation - Restauration du système de Microsoft® Windo.) -- C:\Windows\System32\rstrui.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: Task Scheduler.lnk . (...) -- C:\Windows\System32\taskschd.msc
O4 - GS\QuickLaunch [Vincent]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - GS\QuickLaunch [Vincent]: Skype.lnk . (...) -- C:\Windows\Installer\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}\SkypeIcon.exe
O4 - GS\Program [Vincent]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - GS\Program [Vincent]: Windows Mail.lnk . (.Microsoft Corporation - Windows Mail.) -- C:\Program Files\Windows Mail\WinMail.exe =>.Microsoft Corporation
O4 - GS\Program [Vincent]: Windows Media Player.lnk . (.Microsoft Corporation - Windows Media Player.) -- C:\Program Files\Windows Media Player\wmplayer.exe =>.Microsoft Corporation
O4 - GS\Accessories [Vincent]: Command Prompt.lnk . (.Microsoft Corporation - Interpréteur de commandes Windows.) -- C:\Windows\System32\cmd.exe =>.Microsoft Corporation
O4 - GS\Accessories [Vincent]: Notepad.lnk . (.Microsoft Corporation - Bloc-notes.) -- C:\Windows\System32\notepad.exe =>.Microsoft Corporation
O4 - GS\Accessories [Vincent]: Run.lnk - Clé orpheline
O4 - GS\Accessories [Vincent]: Windows Explorer.lnk . (.Microsoft Corporation - Explorateur Windows.) -- C:\Windows\explorer.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Vincent]: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - GS\SendTo [Vincent]: Skype.lnk . (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe
O4 - GS\Desktop [Vincent]: 0830111VHA1SCX - Raccourci.lnk . (...) -- C:\Users\Vincent\Documents\0830111VHA1SCX.odt
O4 - GS\Desktop [Vincent]: karina et pierre salsa.MP4.lnk . (...) -- C:\Users\Vincent\Downloads\karina et pierre salsa.MP4
O4 - GS\Desktop [Vincent]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - GS\Desktop [Vincent]: ordo lunette.jpg - Raccourci.lnk . (...) -- C:\Users\Vincent\Documents\ordo lunette.jpg
O4 - GS\Desktop [Vincent]: ordo.jpg.lnk . (...) -- C:\Users\Vincent\Documents\ordo.jpg
O4 - GS\Desktop [Vincent]: OTL - Raccourci.lnk . (...) -- C:\Users\Vincent\Downloads\OTL.exe (.not file.)
O4 - GS\Desktop [Vincent]: Skype.lnk . (...) -- C:\Windows\Installer\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}\SkypeIcon.exe
O4 - GS\Desktop [Vincent]: Windows Media Player.lnk . (.Microsoft Corporation - Windows Media Player.) -- C:\Program Files\Windows Media Player\wmplayer.exe =>.Microsoft Corporation
~ Global Startup: 64 Scanned in 00mn 04s
---\\ Applications lancées au démarrage du sytème (O4)
O4 - HKLM\..\Run: [Windows Defender] . (.Microsoft Corporation - Windows Defender User Interface.) -- C:\Program Files\Windows Defender\MSASCui.exe
O4 - HKLM\..\Run: [RTHDVCPL] . (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe =>.Realtek Semiconductor Corp
O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe =>.Adobe Systems Incorporated
O4 - HKLM\..\Run: [HP Software Update] . (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe =>.Hewlett-Packard Co
O4 - HKLM\..\Run: [ASUS Ai Charger] . (.ASUSTek Computer Inc. - AiChargerAP MFC Application.) -- C:\Program Files\ASUS\ASUS Ai Charger\AiChargerAP.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe =>.Oracle Corporation
O4 - HKLM\..\Run: [BingDesktop] . (.Microsoft Corp. - Bing Desktop Application.) -- C:\Program Files\Microsoft\BingDesktop\BingDesktop.exe
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] . (.LogMeIn Inc. - Hamachi Client Application.) -- C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe
O4 - HKCU\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] oobefldr.dll
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-20\..\Run: [WindowsWelcomeCenter] oobefldr.dll
O4 - HKUS\S-1-5-21-125579280-2051084559-3401484795-1000\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe
~ Application: Scanned in 00mn 00s
---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: Clavier virtuel - {0C4CC089-D306-440D-9772-464E226F6539} . (...) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\kbrd.ico
O9 - Extra button: Analyse des liens - {CCF151D8-D089-449F-A5A4-D9909053F20F} . (...) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\logo.ico
~ IE Extra Buttons: Scanned in 00mn 00s
---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll =>.Microsoft Corporation
O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll
~ Winsock: 6 Scanned in 00mn 00s
---\\ Objets ActiveX (Downloaded Program Files)(O16)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} ((no name)) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
~ Objets ActiveX: Scanned in 00mn 00s
---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{3300A925-D03A-4C1D-9FD5-C0D7A502BE86}: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CCS\Services\Tcpip\..\{3300A925-D03A-4C1D-9FD5-C0D7A502BE86}: DhcpDomain = lan
O17 - HKLM\System\CS1\Services\Tcpip\..\{3300A925-D03A-4C1D-9FD5-C0D7A502BE86}: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CS1\Services\Tcpip\..\{3300A925-D03A-4C1D-9FD5-C0D7A502BE86}: DhcpDomain = lan
O17 - HKLM\System\CS2\Services\Tcpip\..\{3300A925-D03A-4C1D-9FD5-C0D7A502BE86}: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CS2\Services\Tcpip\..\{3300A925-D03A-4C1D-9FD5-C0D7A502BE86}: DhcpDomain = lan
O17 - HKLM\System\CS3\Services\Tcpip\..\{3300A925-D03A-4C1D-9FD5-C0D7A502BE86}: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CS3\Services\Tcpip\..\{3300A925-D03A-4C1D-9FD5-C0D7A502BE86}: DhcpDomain = lan
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254
~ Domain: Scanned in 00mn 00s
---\\ Protocole additionnel (O18)
O18 - Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\system32\mshtml.dll =>.Microsoft Corporation
O18 - Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll
~ Protocole Additionnel: Scanned in 00mn 00s
---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\Windows\System32\igfxdev.dll
~ Winlogon: Scanned in 00mn 00s
---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Contrôleur de site Web.) -- C:\Windows\System32\webcheck.dll
~ SSODL: 1 Scanned in 00mn 00s
---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\Windows\System32\browseui.dll
~ STS/SSO: Scanned in 00mn 00s
---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Kaspersky Anti-Virus Service (avp) . (.Kaspersky Lab ZAO - Kaspersky Anti-Virus.) - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\avp.exe
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe =>.Google Inc
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) . (.LogMeIn Inc. - Hamachi Client Tunneling Engine.) - C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: (MBAMScheduler) . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
O23 - Service: (MBAMService) . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: (UMVPFSrv) . (.Logitech Inc. - Logitech User mode UMVPF service.) - C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
~ Services: 8 Scanned in 00mn 08s
---\\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(...) - (.not file.)
O24 - Desktop General: BackupWallPaper - .(...) - C:\Users\Vincent\AppData\Local\Microsoft\BingDesktop\themes\2013-09-22.jpg
O24 - Desktop General: WallPaper - .(...) - C:\Users\Vincent\AppData\Local\Microsoft\BingDesktop\themes\2013-09-22.jpg
~ Desktop Component: 4 Scanned in 00mn 00s
---\\ Enumère les données de BootExecute (BEX) (O34)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
~ BEX: 1 Scanned in 00mn 00s
---\\ Tâches planifiées en automatique (O39)
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\Adobe Flash Player Updater.job [1002]
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job [1054]
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job [1058]
[MD5.00000000000000000000000000000000] [APT] [4908] (...) -- C:\Users\Vincent\AppData\Local\Temp\launchie.vbs \\B (.not file.) [0]
[MD5.24A0876D07EF356DCBC1D7A7929354AB] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [257416]
[MD5.00000000000000000000000000000000] [APT] [BoxSoftwareUpdate] (...) -- C:\ProgramData\BoxUpdChk\updchk.exe (.not file.) [0]
[MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe [136176]
[MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe [136176]
[MD5.C39790BA091F3F9EC7DFE5C2E4598DF0] [APT] [HPCustParticipation HP Deskjet 1050 J410 series] (.Hewlett-Packard Co..) -- C:\Program Files\HP\HP Deskjet 1050 J410 series\Bin\HPCustPartic.exe [2551656]
[MD5.CEC66E3CA216A4783C6FC54B4FE36DBD] [APT] [ProgramRefresh-ATFST] (...) -- C:\Program Files\File Type Assistant\tsasetup.exe [1492080]
[MD5.88B6D362E111D87CBCA6CA94E152B7C6] [APT] [ProgramUpdateCheck] (.Trusted Software ApS.) -- C:\Program Files\File Type Assistant\TSAssist.exe [2749632]
~ Scheduled Task: 13 Scanned in 00mn 04s
---\\ Composants installés (ActiveSetup Installed Components) (O40)
O40 - ASIC: Microsoft Windows Media Player - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll =>.Microsoft Corporation
O40 - ASIC: Internet Explorer - >{26923b43-4d38-484f-9b9e-de460746276c} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\system32\ie4uinit.exe
O40 - ASIC: Browser Customizations - >{60B49E34-C7CC-11D0-8953-00A0C90347FF} . (.Microsoft Corporation - Personnalisation d'IEAK.) -- C:\Windows\system32\iedkcs32.dll
O40 - ASIC: Microsoft Windows Media Player 11.0 - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\System32\wmpdxm.dll =>.Microsoft Corporation
O40 - ASIC: Themes Setup - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\Windows\System32\themeui.dll
O40 - ASIC: Microsoft Windows Mail 7 - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Windows Mail.) -- C:\Program Files\Windows Mail\WinMail.exe =>.Microsoft Corporation
O40 - ASIC: Browsing Enhancements - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\Windows\System32\msieftp.dll
O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll =>.Microsoft Corporation
O40 - ASIC: Windows Desktop Update - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll
O40 - ASIC: Web Platform Customizations - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe
O40 - ASIC: (no name) - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\system32\mscories.dll
~ Active Setup: 11 Scanned in 00mn 00s
---\\ Pilotes lancés au démarrage du système (O41)
O41 - Driver: (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys
O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys
O41 - Driver: C:\Windows\System32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys
O41 - Driver: (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\Windows\System32\DRIVERS\i8042prt.sys
O41 - Driver: (kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\Windows\System32\DRIVERS\kbdclass.sys
O41 - Driver: (KLIF) . (.Kaspersky Lab ZAO - Klif Mini-Filter [fre_wlh_x86].) - C:\Windows\System32\DRIVERS\klif.sys
O41 - Driver: (KLIM6) . (.Kaspersky Lab ZAO - Kaspersky Lab Intermediate Network Driver.) - C:\Windows\System32\DRIVERS\klim6.sys
O41 - Driver: (klpd) . (.Kaspersky Lab ZAO - KLPD [fre_wnet_x86].) - C:\Windows\System32\DRIVERS\klpd.sys
O41 - Driver: (kltdi) . (.Kaspersky Lab ZAO - Network filtering component.) - C:\Windows\System32\DRIVERS\kltdi.sys
O41 - Driver: (kneps) . (.Kaspersky Lab ZAO - KNEPS Power.) - C:\Windows\System32\DRIVERS\kneps.sys
O41 - Driver: (mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\Windows\System32\DRIVERS\mouclass.sys
O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys
O41 - Driver: (netbt) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys
O41 - Driver: (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys
O41 - Driver: C:\Windows\System32\drivers\pacer.sys (PSched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys
O41 - Driver: (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\Windows\System32\DRIVERS\rasacd.sys
O41 - Driver: (rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\Windows\System32\DRIVERS\rdbss.sys
O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys
O41 - Driver: (RDPENCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys
O41 - Driver: (Serial) . (.Microsoft Corporation - Pilote de périphérique série.) - C:\Windows\System32\DRIVERS\serial.sys
O41 - Driver: C:\Windows\System32\tcpipcfg.dll (Smb) . (.Microsoft Corporation - SMB Transport driver.) - C:\Windows\System32\DRIVERS\smb.sys
O41 - Driver: C:\Windows\System32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys
O41 - Driver: (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\Windows\System32\DRIVERS\termdd.sys
O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys
O41 - Driver: (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys
~ Drivers: 100 Scanned in 00mn 13s
---\\ Logiciels installés (O42)
O42 - Logiciel: ASUS Ai Charger - (.ASUSTeK Computer Inc..) [HKLM] -- {7FB64E72-9B0E-4460-A821-040C341E414A}
O42 - Logiciel: Adobe Flash Player 11 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX
O42 - Logiciel: Adobe Reader X (10.1.8) - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-AA1000000001}
O42 - Logiciel: Bing Bar - (.Microsoft Corporation.) [HKLM] -- {D322A9E3-758B-4D60-A7C4-65C88FD378D0} =>Toolbar.Bing
O42 - Logiciel: Bing Bureau - (.Microsoft Corporation.) [HKLM] -- {7D095455-D971-4D4C-9EFD-9AF6A6584F3A}
O42 - Logiciel: File Type Assistant - (...) [HKLM] -- Trusted Software Assistant_is1
O42 - Logiciel: Fraps (remove only) - (...) [HKLM] -- Fraps
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {18455581-E099-4BA8-BC6B-F34B2F06600C} =>Toolbar.Google
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {2318C2B1-4965-11d4-9B18-009027A5CD4F} =>Toolbar.Google
O42 - Logiciel: HP Deskjet 1050 J410 series - Enquête sur l'amélioration du produit - (.Hewlett-Packard Co..) [HKLM] -- {0B461C2C-29AC-4FBB-B925-CF7641D370BE}
O42 - Logiciel: HP Deskjet 1050 J410 series Aide - (.Hewlett Packard.) [HKLM] -- {5C90D8CF-F12A-41C6-9007-3B651A1F0D78}
O42 - Logiciel: HP Photo Creations - (.HP Photo Creations Powered by RocketLife.) [HKLM] -- HP Photo Creations
O42 - Logiciel: HP Update - (.Hewlett-Packard.) [HKLM] -- {B0069CFA-5BB9-4C03-B1C6-89CE290E5AFE}
O42 - Logiciel: Intel(R) Processor Graphics - (.Intel Corporation.) [HKLM] -- {F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}
O42 - Logiciel: Java 7 Update 25 - (.Oracle.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83217025FF}
O42 - Logiciel: Kaspersky Anti-Virus - (.Kaspersky Lab.) [HKLM] -- InstallWIX_{6F6873E3-5C92-4049-B511-231A138DD090}
O42 - Logiciel: Kaspersky Anti-Virus - (.Kaspersky Lab.) [HKLM] -- {6F6873E3-5C92-4049-B511-231A138DD090}
O42 - Logiciel: LogMeIn Hamachi - (.LogMeIn, Inc..) [HKLM] -- LogMeIn Hamachi
O42 - Logiciel: LogMeIn Hamachi - (.LogMeIn, Inc..) [HKLM] -- {0ACC2993-2058-4BE7-9A92-9DCDAA9B3412}
O42 - Logiciel: Logiciel de base du périphérique HP Deskjet 1050 J410 series - (.Hewlett-Packard Co..) [HKLM] -- {21D2DB5B-C7C1-4BFD-B74A-C85A5A1B0184} =>.Hewlett-Packard Co
O42 - Logiciel: Malwarebytes Anti-Malware version 1.75.0.1300 - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware_is1
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
O42 - Logiciel: Minecraft Note Block Studio version 3.1.3 - (.David Norgren.) [HKLM] -- {85725958-E3A1-4D0F-862B-4CE4EDC71A5E}_is1
O42 - Logiciel: MyPC Backup - (.MyPC Backup.) [HKLM] -- MyPC Backup =>PUP.MyPCBackup
O42 - Logiciel: Realtek Ethernet Controller Driver - (.Realtek.) [HKLM] -- {8833FFB6-5B0C-4764-81AA-06DFEED9A476}
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}
O42 - Logiciel: Skype Free Download Packages - (...) [HKCU] -- Skype Free Download Packages
O42 - Logiciel: Skype(TM) 6.6 - (.Skype Technologies S.A..) [HKLM] -- {4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}
O42 - Logiciel: VLC media player 2.0.5 - (.VideoLAN.) [HKLM] -- VLC media player =>.VideoLAN
O42 - Logiciel: Visionneuse Microsoft PowerPoint - (.Microsoft Corporation.) [HKLM] -- {95140000-00AF-040C-0000-0000000FF1CE}
~ Logic: 55 Scanned in 00mn 00s
---\\ HKCU & HKLM Software Keys
[HKCU\Software\5d53dfdde538eb46]
[HKCU\Software\ASUS]
[HKCU\Software\Adobe]
[HKCU\Software\AppDataLow\Software\JavaSoft]
[HKCU\Software\AppDataLow]
[HKCU\Software\Bitberry]
[HKCU\Software\Classes]
[HKCU\Software\FIXIO PC Utilities]
[HKCU\Software\FileTypeAssistant]
[HKCU\Software\Fraps3]
[HKCU\Software\FreeToLoad]
[HKCU\Software\Google]
[HKCU\Software\HP]
[HKCU\Software\IM Providers]
[HKCU\Software\Intel]
[HKCU\Software\JavaSoft]
[HKCU\Software\KasperskyLab]
[HKCU\Software\Macromedia]
[HKCU\Software\Malwarebytes' Anti-Malware]
[HKCU\Software\MozillaPlugins]
[HKCU\Software\Mozilla]
[HKCU\Software\Netscape]
[HKCU\Software\Pixelife]
[HKCU\Software\Policies]
[HKCU\Software\Qtrax]
[HKCU\Software\Realtek]
[HKCU\Software\Skype]
[HKCU\Software\Software]
[HKCU\Software\Trolltech]
[HKCU\Software\Visan]
[HKCU\Software\WinRAR SFX]
[HKCU\Software\Wow6432Node]
[HKCU\Software\ZebHelpProcess Helper]
[HKCU\Software\file.org]
[HKCU\Software\nuevos-programas.com]
[HKLM\Software\ASUS]
[HKLM\Software\Adobe]
[HKLM\Software\AdwCleaner]
[HKLM\Software\BrowserChoice]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\DTS]
[HKLM\Software\Dolby]
[HKLM\Software\Google]
[HKLM\Software\HP]
[HKLM\Software\Hewlett-Packard]
[HKLM\Software\IM Providers]
[HKLM\Software\Intel]
[HKLM\Software\JavaSoft]
[HKLM\Software\JreMetrics]
[HKLM\Software\KasperskyLab]
[HKLM\Software\Knowles]
[HKLM\Software\Licenses]
[HKLM\Software\LogMeIn, Inc.]
[HKLM\Software\Logitech]
[HKLM\Software\Macromedia]
[HKLM\Software\Malwarebytes' Anti-Malware (Trial)]
[HKLM\Software\Malwarebytes' Anti-Malware]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\ODBC]
[HKLM\Software\Policies]
[HKLM\Software\RTLSetup]
[HKLM\Software\Realtek Semiconductor Corp.]
[HKLM\Software\Realtek]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\RocketLife]
[HKLM\Software\SRS Labs]
[HKLM\Software\Skype]
[HKLM\Software\Software]
[HKLM\Software\SonicFocus]
[HKLM\Software\Sonic]
[HKLM\Software\VideoLAN]
[HKLM\Software\Visan]
[HKLM\Software\WOW6432Node]
[HKLM\Software\Waves Audio]
~ Key Software: 105 Scanned in 00mn 00s
---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 14/09/2012 - 15:12:53 - [114,489] ----D C:\Program Files\Adobe
O43 - CFD: 18/09/2012 - 17:43:57 - [0,864] ----D C:\Program Files\ASUS
O43 - CFD: 27/07/2013 - 08:43:48 - [386,304] ----D C:\Program Files\Common Files
O43 - CFD: 15/09/2012 - 10:17:51 - [0] R---D C:\Program Files\Fichiers communs
O43 - CFD: 21/09/2013 - 22:14:01 - [7,813] ----D C:\Program Files\File Type Assistant
O43 - CFD: 23/02/2013 - 12:20:17 - [0] ----D C:\Program Files\FinalMediaPlayer
O43 - CFD: 23/07/2013 - 09:19:56 - [17,949] ----D C:\Program Files\Google
O43 - CFD: 14/09/2012 - 21:57:55 - [43,154] ----D C:\Program Files\HP
O43 - CFD: 14/09/2012 - 21:58:07 - [0,352] ----D C:\Program Files\HP Photo Creations
O43 - CFD: 18/09/2012 - 17:43:56 - [10,602] --H-D C:\Program Files\InstallShield Installation Information
O43 - CFD: 15/09/2012 - 10:34:23 - [4,243] ----D C:\Program Files\Intel
O43 - CFD: 19/09/2013 - 08:57:14 - [5,037] ----D C:\Program Files\Internet Explorer
O43 - CFD: 15/07/2013 - 19:34:59 - [122,485] ----D C:\Program Files\Java
O43 - CFD: 09/09/2013 - 09:09:01 - [133,165] ----D C:\Program Files\Kaspersky Lab
O43 - CFD: 24/08/2013 - 07:15:02 - [3,827] ----D C:\Program Files\LogMeIn Hamachi
O43 - CFD: 22/09/2013 - 11:50:14 - [13,264] ----D C:\Program Files\Malwarebytes' Anti-Malware
O43 - CFD: 27/07/2013 - 08:35:46 - [71,005] ----D C:\Program Files\Microsoft
O43 - CFD: 21/09/2013 - 16:59:07 - [10,024] ----D C:\Program Files\Microsoft Application Virtualization Client
O43 - CFD: 02/11/2006 - 14:37:34 - [89,117] ----D C:\Program Files\Microsoft Games
O43 - CFD: 15/09/2012 - 11:16:48 - [40,253] ----D C:\Program Files\Microsoft Office
O43 - CFD: 06/08/2013 - 06:57:50 - [40,851] ----D C:\Program Files\Microsoft Silverlight
O43 - CFD: 14/09/2012 - 15:19:18 - [0,023] ----D C:\Program Files\Microsoft.NET
O43 - CFD: 20/09/2013 - 16:50:29 - [6,263] ----D C:\Program Files\Minecraft Note Block Studio
O43 - CFD: 14/09/2012 - 15:07:04 - [94,740] ----D C:\Program Files\Movie Maker
O43 - CFD: 23/02/2013 - 00:15:02 - [0] ----D C:\Program Files\Mozilla Firefox
O43 - CFD: 02/11/2006 - 14:37:34 - [0,025] ----D C:\Program Files\MSBuild
O43 - CFD: 14/09/2012 - 15:14:11 - [63,464] ----D C:\Program Files\MSECache
O43 - CFD: 15/09/2012 - 10:32:39 - [34,325] ----D C:\Program Files\Realtek
O43 - CFD: 02/11/2006 - 14:37:34 - [36,910] ----D C:\Program Files\Reference Assemblies
O43 - CFD: 21/08/2013 - 19:48:04 - [19,224] R---D C:\Program Files\Skype
O43 - CFD: 22/09/2013 - 10:20:12 - [0] ----D C:\Program Files\sysTPL
O43 - CFD: 15/09/2012 - 10:32:17 - [0] --H-D C:\Program Files\Temp
O43 - CFD: 02/11/2006 - 15:01:55 - [0] --H-D C:\Program Files\Uninstall Information
O43 - CFD: 22/09/2013 - 08:14:59 - [0,048] ----D C:\Program Files\Uninstaller
O43 - CFD: 23/02/2013 - 00:19:26 - [94,419] ----D C:\Program Files\VideoLAN
O43 - CFD: 22/09/2013 - 11:47:57 - [0] ----D C:\Program Files\VideoPlayer
O43 - CFD: 15/09/2012 - 10:59:23 - [0,970] ----D C:\Program Files\Windows Calendar
O43 - CFD: 15/09/2012 - 10:59:23 - [2,610] ----D C:\Program Files\Windows Collaboration
O43 - CFD: 15/09/2012 - 10:59:22 - [4,283] ----D C:\Program Files\Windows Defender
O43 - CFD: 16/07/2013 - 10:24:17 - [6,757] ----D C:\Program Files\Windows Journal
O43 - CFD: 14/09/2012 - 15:07:08 - [8,694] ----D C:\Program Files\Windows Mail =>.Microsoft Corporation
O43 - CFD: 14/09/2012 - 15:07:08 - [4,290] ----D C:\Program Files\Windows Media Player =>.Microsoft Corporation
O43 - CFD: 15/09/2012 - 10:17:51 - [7,589] ----D C:\Program Files\Windows NT
O43 - CFD: 15/09/2012 - 10:59:23 - [12,902] ----D C:\Program Files\Windows Photo Gallery
O43 - CFD: 14/09/2012 - 15:07:06 - [0,128] ----D C:\Program Files\Windows Portable Devices
O43 - CFD: 15/09/2012 - 10:59:23 - [6,795] ----D C:\Program Files\Windows Sidebar
O43 - CFD: 05/07/2013 - 17:51:00 - [0,000] ----D C:\Program Files\WinRAR
O43 - CFD: 22/09/2013 - 16:26:57 - [16,954] ----D C:\Program Files\ZHPDiag =>.Nicolas Coolman
O43 - CFD: 14/09/2012 - 15:13:01 - [3,811] ----D C:\Program Files\Common Files\Adobe
O43 - CFD: 15/09/2012 - 11:16:49 - [0,095] ----D C:\Program Files\Common Files\DESIGNER
O43 - CFD: 18/09/2012 - 17:43:39 - [3,045] ----D C:\Program Files\Common Files\InstallShield
O43 - CFD: 15/09/2012 - 10:34:25 - [11,436] ----D C:\Program Files\Common Files\Intel
O43 - CFD: 10/05/2013 - 17:36:12 - [1,189] ----D C:\Program Files\Common Files\Java
O43 - CFD: 10/05/2013 - 17:34:28 - [1,210] ----D C:\Program Files\Common Files\logishrd
O43 - CFD: 22/09/2013 - 08:08:05 - [316,081] ----D C:\Program Files\Common Files\microsoft shared
O43 - CFD: 02/11/2006 - 13:18:33 - [0,003] ----D C:\Program Files\Common Files\Services
O43 - CFD: 07/05/2013 - 21:01:52 - [1,904] ----D C:\Program Files\Common Files\Skype
O43 - CFD: 02/11/2006 - 13:18:33 - [39,198] ----D C:\Program Files\Common Files\SpeechEngines
O43 - CFD: 14/09/2012 - 14:34:59 - [8,333] ----D C:\Program Files\Common Files\System
O43 - CFD: 27/07/2013 - 08:43:48 - [0] ----D C:\Program Files\Common Files\Windows Live
O43 - CFD: 15/09/2012 - 19:54:00 - [234,943] ----D C:\ProgramData\Adobe
O43 - CFD: 02/11/2006 - 15:02:03 - [0] --H-D C:\ProgramData\Application Data
O43 - CFD: 15/09/2012 - 10:17:51 - [0] --H-D C:\ProgramData\Bureau
O43 - CFD: 24/09/2012 - 18:49:39 - [0,018] ----D C:\ProgramData\ClubSanDisk
O43 - CFD: 02/11/2006 - 15:02:03 - [0] --H-D C:\ProgramData\Desktop
O43 - CFD: 02/11/2006 - 15:02:03 - [0] --H-D C:\ProgramData\Documents
O43 - CFD: 15/09/2012 - 10:17:51 - [0] --H-D C:\ProgramData\Favoris
O43 - CFD: 02/11/2006 - 15:02:03 - [0] --H-D C:\ProgramData\Favorites
O43 - CFD: 23/07/2013 - 09:20:00 - [0,012] ----D C:\ProgramData\Google
O43 - CFD: 14/09/2012 - 22:00:17 - [46,558] ----D C:\ProgramData\HP
O43 - CFD: 14/09/2012 - 22:01:07 - [2,487] ----D C:\ProgramData\HP Photo Creations
O43 - CFD: 22/09/2013 - 16:23:49 - [640,629] ----D C:\ProgramData\Kaspersky Lab
O43 - CFD: 28/02/2013 - 18:41:16 - [7,220] ----D C:\ProgramData\Malwarebytes
O43 - CFD: 15/09/2012 - 10:17:51 - [0] --H-D C:\ProgramData\Menu Démarrer
O43 - CFD: 27/07/2013 - 08:51:31 - [-1086,863] -S--D C:\ProgramData\Microsoft
O43 - CFD: 11/11/2012 - 21:12:51 - [0,048] ----D C:\ProgramData\Microsoft Help
O43 - CFD: 15/09/2012 - 10:17:51 - [0] --H-D C:\ProgramData\Modèles
O43 - CFD: 21/08/2013 - 19:48:10 - [31,708] ----D C:\ProgramData\Skype
O43 - CFD: 02/11/2006 - 15:02:03 - [0] --H-D C:\ProgramData\Start Menu
O43 - CFD: 15/12/2012 - 16:27:17 - [0,000] ----D C:\ProgramData\Sun
O43 - CFD: 23/02/2013 - 11:28:55 - [0] ---AD C:\ProgramData\TEMP
O43 - CFD: 02/11/2006 - 15:02:04 - [0] --H-D C:\ProgramData\Templates
O43 - CFD: 18/09/2012 - 14:06:25 - [0] ----D C:\ProgramData\VirtualizedApplications
O43 - CFD: 08/07/2013 - 23:25:42 - [0] ----D C:\Users\Vincent\AppData\Roaming\.allfight
O43 - CFD: 30/08/2013 - 14:49:38 - [0] ----D C:\Users\Vincent\AppData\Roaming\.ascentia
O43 - CFD: 09/07/2013 - 18:29:22 - [0,528] ----D C:\Users\Vincent\AppData\Roaming\.hardfight
O43 - CFD: 13/07/2013 - 11:20:10 - [63,658] ----D C:\Users\Vincent\AppData\Roaming\.ironfight
O43 - CFD: 10/09/2013 - 20:35:04 - [136,707] ----D C:\Users\Vincent\AppData\Roaming\.iyc
O43 - CFD: 31/08/2013 - 20:50:09 - [63,674] ----D C:\Users\Vincent\AppData\Roaming\.knockfight
O43 - CFD: 22/09/2013 - 16:24:14 - [-1847,543] ----D C:\Users\Vincent\AppData\Roaming\.minecraft
O43 - CFD: 31/08/2013 - 20:56:18 - [74,596] ----D C:\Users\Vincent\AppData\Roaming\.UltimaCraft
O43 - CFD: 05/07/2013 - 17:25:43 - [1,063] ----D C:\Users\Vincent\AppData\Roaming\1O1L1I1PtF1F1C1N
O43 - CFD: 14/09/2012 - 15:14:27 - [19,822] ----D C:\Users\Vincent\AppData\Roaming\Adobe
O43 - CFD: 07/04/2013 - 11:09:17 - [0,079] ----D C:\Users\Vincent\AppData\Roaming\Ether
O43 - CFD: 07/04/2013 - 11:09:20 - [0,238] ----D C:\Users\Vincent\AppData\Roaming\EtherMobs
O43 - CFD: 05/06/2013 - 16:10:06 - [2,270] ----D C:\Users\Vincent\AppData\Roaming\ftblauncher
O43 - CFD: 14/09/2012 - 15:11:34 - [0] ----D C:\Users\Vincent\AppData\Roaming\Google
O43 - CFD: 14/09/2012 - 21:57:53 - [0] ----D C:\Users\Vincent\AppData\Roaming\HpUpdate
O43 - CFD: 15/09/2012 - 10:18:16 - [0] ----D C:\Users\Vincent\AppData\Roaming\Identities
O43 - CFD: 15/09/2012 - 20:03:46 - [0,082] ----D C:\Users\Vincent\AppData\Roaming\Macromedia
O43 - CFD: 28/02/2013 - 18:41:24 - [52,986] ----D C:\Users\Vincent\AppData\Roaming\Malwarebytes
O43 - CFD: 02/11/2006 - 14:37:34 - [0] ----D C:\Users\Vincent\AppData\Roaming\Media Center Programs
O43 - CFD: 08/09/2013 - 20:00:17 - [43,804] -S--D C:\Users\Vincent\AppData\Roaming\Microsoft
O43 - CFD: 07/04/2013 - 11:33:30 - [1,060] ----D C:\Users\Vincent\AppData\Roaming\mods
O43 - CFD: 16/01/2013 - 23:10:32 - [0,000] ----D C:\Users\Vincent\AppData\Roaming\mozilla
O43 - CFD: 07/04/2013 - 11:09:11 - [1,039] ----D C:\Users\Vincent\AppData\Roaming\olimpyam
O43 - CFD: 22/09/2013 - 16:25:23 - [13,181] ----D C:\Users\Vincent\AppData\Roaming\Skype
O43 - CFD: 12/09/2013 - 21:25:28 - [4,533] ----D C:\Users\Vincent\AppData\Roaming\SoftGrid Client
O43 - CFD: 10/09/2013 - 20:13:27 - [8,511] ----D C:\Users\Vincent\AppData\Roaming\System
O43 - CFD: 07/04/2013 - 11:09:13 - [0,321] ----D C:\Users\Vincent\AppData\Roaming\textures
O43 - CFD: 15/09/2012 - 11:29:09 - [0] ----D C:\Users\Vincent\AppData\Roaming\TP
O43 - CFD: 14/09/2013 - 18:29:36 - [0,078] ----D C:\Users\Vincent\AppData\Roaming\vlc
O43 - CFD: 22/06/2013 - 12:00:45 - [0,000] ----D C:\Users\Vincent\AppData\Roaming\WinRAR
O43 - CFD: 23/07/2013 - 09:20:24 - [15,385] ----D C:\Users\Vincent\AppData\Local\Adobe
O43 - CFD: 15/09/2012 - 10:18:07 - [0] ----D C:\Users\Vincent\AppData\Local\Application Data
O43 - CFD: 22/09/2013 - 08:12:51 - [0,012] ----D C:\Users\Vincent\AppData\Local\avgchrome
O43 - CFD: 11/06/2013 - 19:11:04 - [25,589] ----D C:\Users\Vincent\AppData\Local\Downloaded Installations
O43 - CFD: 02/07/2013 - 06:56:29 - [0,006] ----D C:\Users\Vincent\AppData\Local\FileTypeAssistant
O43 - CFD: 18/09/2012 - 20:56:54 - [0,684] ----D C:\Users\Vincent\AppData\Local\Google
O43 - CFD: 15/09/2012 - 10:18:07 - [0] ----D C:\Users\Vincent\AppData\Local\Historique
O43 - CFD: 11/02/2013 - 20:11:54 - [0,044] ----D C:\Users\Vincent\AppData\Local\HP
O43 - CFD: 22/09/2013 - 15:08:04 - [0,691] ----D C:\Users\Vincent\AppData\Local\LogMeIn Hamachi
O43 - CFD: 27/07/2013 - 08:36:19 - [821,29
- 1
- 2