Virus sweetpacks
Bonsoir,
Je pense avoir un virus sur mon pc et je ne sais pas comment m'en debarasser. Je possede pourtant bitdefender.
Merci de votre aide.
Je pense avoir un virus sur mon pc et je ne sais pas comment m'en debarasser. Je possede pourtant bitdefender.
Merci de votre aide.
20 réponses
Résumé de la discussion
Une suspicion de virus sur PC persiste malgré Bitdefender, et les échanges tournent autour d’un possible adware ou logiciel potentiellement indésirable qui échappe aux détections initiales. Plusieurs interventions recommandent des outils de nettoyage comme ADWCleaner et Malwarebytes, avec des rapports de suppression de PUP et SweetIM, et exigent le téléchargement uniquement depuis les sites éditeurs. D’autres tentent des outils comme JRT et partagent des procédures de démarrage en mode sans échec, des scans complets et des suppressions manuelles de fichiers et clés de registre détectés. En cas de limitations, il est important de recouper les résultats entre plusieurs outils et de surveiller les répertoires temporaires et les éléments de démarrage pour éviter les réinfections.
-
http://cjoint.com/?CKcoEy4DhMS
https://www.cjoint.com/c/CKcoE4YzmsG -
non.... décidément, j'ai voulu aller trop vite....
-
cjoint ne fonctionne plus ?
-
Bonjour,
Avec un peu de retard... j'ai fait tourné OTL en mode sans échec-
-
Oups !!!
OTL logfile created on: 02/11/2013 10:53:09 - Run 3
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Franck\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16721)
Locale: 0000040c | Country: France | Language: FRA | Date Format: dd/MM/yyyy
5,91 Gb Total Physical Memory | 4,87 Gb Available Physical Memory | 82,36% Memory free
11,82 Gb Paging File | 10,79 Gb Available in Paging File | 91,24% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 293,03 Gb Total Space | 213,19 Gb Free Space | 72,75% Space Free | Partition Type: NTFS
Drive D: | 380,60 Gb Total Space | 380,47 Gb Free Space | 99,96% Space Free | Partition Type: NTFS
Computer Name: FRANCK-PC | User Name: Franck | Logged in as Administrator.
Boot Mode: SafeMode | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
[color=#E56717]========== Processes (All) ==========[/color]
PRC - [2013/10/29 10:15:43 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Franck\Desktop\OTL.exe
[color=#E56717]========== Modules (All) ==========[/color]
MOD - [2013/10/29 10:15:43 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Franck\Desktop\OTL.exe
MOD - [2013/08/29 02:50:30 | 001,292,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ntdll.dll
MOD - [2013/08/29 02:48:17 | 000,640,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\advapi32.dll
MOD - [2013/08/02 02:50:42 | 000,274,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\KernelBase.dll
MOD - [2013/08/02 02:50:41 | 001,114,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\kernel32.dll
MOD - [2013/07/26 02:55:59 | 012,872,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\shell32.dll
MOD - [2013/07/26 02:55:59 | 000,180,224 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\shdocvw.dll
MOD - [2013/07/09 05:52:33 | 000,663,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\rpcrt4.dll
MOD - [2013/07/09 05:52:10 | 000,175,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\wintrust.dll
MOD - [2013/07/09 05:46:31 | 001,166,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\crypt32.dll
MOD - [2013/06/06 05:57:01 | 000,025,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\lpk.dll
MOD - [2012/11/22 05:45:03 | 000,626,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\usp10.dll
MOD - [2012/06/02 05:40:42 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\secur32.dll
MOD - [2012/06/02 05:34:09 | 000,096,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\sspicli.dll
MOD - [2012/05/05 08:46:52 | 000,043,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\srclient.dll
MOD - [2011/12/16 08:52:58 | 000,690,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msvcrt.dll
MOD - [2011/08/27 05:26:27 | 000,571,904 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\oleaut32.dll
MOD - [2011/05/24 11:40:05 | 000,064,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\devobj.dll
MOD - [2011/05/24 11:39:38 | 000,145,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\cfgmgr32.dll
MOD - [2010/11/20 13:21:38 | 000,269,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\Wldap32.dll
MOD - [2010/11/20 13:21:36 | 001,128,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\vssapi.dll
MOD - [2010/11/20 13:21:26 | 000,172,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\spp.dll
MOD - [2010/11/20 13:21:20 | 000,350,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\shlwapi.dll
MOD - [2010/11/20 13:21:16 | 001,667,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\setupapi.dll
MOD - [2010/11/20 13:20:58 | 000,988,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\propsys.dll
MOD - [2010/11/20 13:20:50 | 001,414,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ole32.dll
MOD - [2010/11/20 13:20:50 | 000,090,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\olepro32.dll
MOD - [2010/11/20 13:19:46 | 000,034,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msasn1.dll
MOD - [2010/11/20 13:18:24 | 000,485,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\comdlg32.dll
MOD - [2010/11/20 13:18:04 | 000,295,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\apphelp.dll
MOD - [2010/11/20 13:16:52 | 000,320,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\winspool.drv
MOD - [2010/11/20 13:08:58 | 000,833,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\user32.dll
MOD - [2010/11/20 13:08:52 | 000,311,296 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\gdi32.dll
MOD - [2010/11/20 13:08:52 | 000,119,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\imm32.dll
MOD - [2010/11/20 12:55:10 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll
MOD - [2009/07/14 02:16:17 | 000,056,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\vsstrace.dll
MOD - [2009/07/14 02:16:17 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\version.dll
MOD - [2009/07/14 02:16:13 | 000,092,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\sechost.dll
MOD - [2009/07/14 02:16:12 | 000,031,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\profapi.dll
MOD - [2009/07/14 02:16:12 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\psapi.dll
MOD - [2009/07/14 02:16:11 | 000,121,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ntmarta.dll
MOD - [2009/07/14 02:15:43 | 000,828,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msctf.dll
MOD - [2009/07/14 02:15:07 | 000,036,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\cryptbase.dll
MOD - [2009/07/14 02:15:03 | 000,522,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\clbcatq.dll
MOD - [2009/07/14 02:14:57 | 000,070,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\atl.dll
MOD - [2009/07/14 02:14:10 | 000,095,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msscript.ocx
MOD - [2009/07/14 02:11:24 | 000,245,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\uxtheme.dll
[color=#E56717]========== Services (All) ==========[/color]
SRV:[b]64bit:[/b] - File not found [On_Demand | Stopped] -- C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe coreFrameworkHost.exe -- (Amsp)
SRV:[b]64bit:[/b] - [2013/07/09 06:46:20 | 000,184,320 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\cryptsvc.dll -- (CryptSvc)
SRV:[b]64bit:[/b] - [2013/07/04 13:57:22 | 000,259,584 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\WebClnt.dll -- (WebClient)
SRV:[b]64bit:[/b] - [2013/05/27 06:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\mpsvc.dll -- (WinDefend)
SRV:[b]64bit:[/b] - [2013/03/19 06:53:58 | 000,230,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wwansvc.dll -- (WwanSvc)
SRV:[b]64bit:[/b] - [2013/02/27 06:47:10 | 000,070,144 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appinfo.dll -- (Appinfo)
SRV:[b]64bit:[/b] - [2013/01/13 20:58:28 | 001,175,552 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\FntCache.dll -- (FontCache)
SRV:[b]64bit:[/b] - [2012/10/03 18:44:21 | 000,303,104 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\nlasvc.dll -- (NlaSvc)
SRV:[b]64bit:[/b] - [2012/10/03 18:42:16 | 000,569,344 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\iphlpsvc.dll -- (iphlpsvc)
SRV:[b]64bit:[/b] - [2012/07/26 04:08:14 | 000,084,992 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\WUDFSvc.dll -- (wudfsvc)
SRV:[b]64bit:[/b] - [2012/07/15 13:55:02 | 001,255,736 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\Wat\WatAdminSvc.exe -- (WatAdminSvc)
SRV:[b]64bit:[/b] - [2012/07/14 12:43:02 | 000,053,224 | ---- | M] (BitDefender S.R.L.) [Auto | Stopped] -- C:\Program Files\BitDefender\BitDefender 2011\updatesrv.exe -- (Updatesrv)
SRV:[b]64bit:[/b] - [2012/07/14 12:40:58 | 002,660,624 | ---- | M] (BitDefender S.R.L.) [Auto | Stopped] -- C:\Program Files\BitDefender\BitDefender 2011\vsserv.exe -- (VSSERV)
SRV:[b]64bit:[/b] - [2012/07/04 23:13:27 | 000,136,704 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\browser.dll -- (Browser)
SRV:[b]64bit:[/b] - [2012/06/02 23:19:43 | 002,428,952 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\wuaueng.dll -- (wuauserv)
SRV:[b]64bit:[/b] - [2012/05/01 06:40:20 | 000,209,920 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\profsvc.dll -- (ProfSvc)
SRV:[b]64bit:[/b] - [2012/02/11 07:36:02 | 000,559,104 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\spoolsv.exe -- (Spooler)
SRV:[b]64bit:[/b] - [2011/11/17 07:33:55 | 000,031,232 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\lsass.exe -- (VaultSvc)
SRV:[b]64bit:[/b] - [2011/11/17 07:33:55 | 000,031,232 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\lsass.exe -- (SamSs)
SRV:[b]64bit:[/b] - [2011/11/17 07:33:55 | 000,031,232 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\lsass.exe -- (ProtectedStorage)
SRV:[b]64bit:[/b] - [2011/11/17 07:33:55 | 000,031,232 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\lsass.exe -- (Netlogon)
SRV:[b]64bit:[/b] - [2011/11/17 07:33:55 | 000,031,232 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\lsass.exe -- (KeyIso)
SRV:[b]64bit:[/b] - [2011/11/17 07:33:55 | 000,031,232 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\lsass.exe -- (EFS)
SRV:[b]64bit:[/b] - [2011/05/24 12:42:55 | 000,404,480 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\umpnpmgr.dll -- (PlugPlay)
SRV:[b]64bit:[/b] - [2011/05/11 11:53:24 | 001,007,208 | ---- | M] (NVIDIA Corporation) [Auto | Stopped] -- C:\Windows\SysNative\nvvsvc.exe -- (NVSvc)
SRV:[b]64bit:[/b] - [2011/05/04 14:44:45 | 000,183,296 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\dnsrslvr.dll -- (Dnscache)
SRV:[b]64bit:[/b] - [2011/05/04 06:19:28 | 000,591,872 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\SearchIndexer.exe -- (WSearch)
SRV:[b]64bit:[/b] - [2011/05/02 22:27:50 | 001,517,328 | ---- | M] (Intel(R) Corporation) [Auto | Stopped] -- C:\Program Files\Intel\WiFi\bin\EvtEng.exe -- (EvtEng)
SRV:[b]64bit:[/b] - [2011/05/02 22:13:54 | 000,340,240 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe -- (MyWiFiDHCPDNS)
SRV:[b]64bit:[/b] - [2011/05/02 22:10:26 | 000,844,560 | ---- | M] (Intel(R) Corporation) [Auto | Stopped] -- C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe -- (RegSrvc)
SRV:[b]64bit:[/b] - [2011/03/28 20:11:06 | 002,292,096 | ---- | M] (Microsoft Corp.) [Auto | Stopped] -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE -- (wlidsvc)
SRV:[b]64bit:[/b] - [2011/03/04 00:57:58 | 000,379,520 | ---- | M] (ASUSTeK Computer Inc.) [Auto | Stopped] -- C:\Windows\SysNative\FBAgent.exe -- (AFBAgent)
SRV:[b]64bit:[/b] - [2010/11/30 06:18:06 | 000,467,248 | ---- | M] (BitDefender) [On_Demand | Stopped] -- C:\Program Files\Common Files\BitDefender\BitDefender Arrakis Server\bin\arrakis3.exe -- (Update Server)
SRV:[b]64bit:[/b] - [2010/11/20 14:27:30 | 002,018,304 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\WsmSvc.dll -- (WinRM)
SRV:[b]64bit:[/b] - [2010/11/20 14:27:30 | 001,646,080 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wevtsvc.dll -- (eventlog)
SRV:[b]64bit:[/b] - [2010/11/20 14:27:30 | 000,580,096 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\wiaservc.dll -- (stisvc)
SRV:[b]64bit:[/b] - [2010/11/20 14:27:30 | 000,444,416 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\winhttp.dll -- (WinHttpAutoProxySvc)
SRV:[b]64bit:[/b] - [2010/11/20 14:27:30 | 000,118,784 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\wkssvc.dll -- (LanmanWorkstation)
SRV:[b]64bit:[/b] - [2010/11/20 14:27:30 | 000,117,248 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wpdbusenum.dll -- (WPDBusEnum)
SRV:[b]64bit:[/b] - [2010/11/20 14:27:28 | 001,743,360 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\sysmain.dll -- (SysMain)
SRV:[b]64bit:[/b] - [2010/11/20 14:27:28 | 000,680,960 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\termsrv.dll -- (TermService)
SRV:[b]64bit:[/b] - [2010/11/20 14:27:28 | 000,367,104 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wcncsvc.dll -- (wcncsvc)
SRV:[b]64bit:[/b] - [2010/11/20 14:27:28 | 000,316,928 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\tapisrv.dll -- (TapiSrv)
SRV:[b]64bit:[/b] - [2010/11/20 14:27:28 | 000,236,032 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\srvsvc.dll -- (LanmanServer)
SRV:[b]64bit:[/b] - [2010/11/20 14:27:28 | 000,092,672 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\TabSvc.dll -- (TabletInputService)
SRV:[b]64bit:[/b] - [2010/11/20 14:27:26 | 001,110,016 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\schedsvc.dll -- (Schedule)
SRV:[b]64bit:[/b] - [2010/11/20 14:27:26 | 000,512,000 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\rpcss.dll -- (RpcSs)
SRV:[b]64bit:[/b] - [2010/11/20 14:27:26 | 000,512,000 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\rpcss.dll -- (DcomLaunch)
SRV:[b]64bit:[/b] - [2010/11/20 14:27:26 | 000,370,688 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\shsvcs.dll -- (ShellHWDetection)
SRV:[b]64bit:[/b] - [2010/11/20 14:27:26 | 000,344,064 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\rasmans.dll -- (RasMan)
SRV:[b]64bit:[/b] - [2010/11/20 14:27:26 | 000,170,496 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\sdrsvc.dll -- (SDRSVC)
SRV:[b]64bit:[/b] - [2010/11/20 14:27:26 | 000,121,856 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\SessEnv.dll -- (SessionEnv)
SRV:[b]64bit:[/b] - [2010/11/20 14:27:26 | 000,030,720 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\seclogon.dll -- (seclogon)
SRV:[b]64bit:[/b] - [2010/11/20 14:27:24 | 001,389,056 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\pla.dll -- (pla)
SRV:[b]64bit:[/b] - [2010/11/20 14:27:24 | 000,849,920 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\qmgr.dll -- (BITS)
SRV:[b]64bit:[/b] - [2010/11/20 14:27:24 | 000,476,160 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\QAGENTRT.DLL -- (napagent)
SRV:[b]64bit:[/b] - [2010/11/20 14:27:24 | 000,187,904 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\provsvc.dll -- (HomeGroupProvider)
SRV:[b]64bit:[/b] - [2010/11/20 14:27:00 | 000,828,416 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\MPSSVC.dll -- (MpsSvc)
SRV:[b]64bit:[/b] - [2010/11/20 14:26:52 | 000,084,992 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\Mcx2Svc.dll -- (Mcx2Svc)
SRV:[b]64bit:[/b] - [2010/11/20 14:26:48 | 000,232,448 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\ListSvc.dll -- (HomeGroupListener)
SRV:[b]64bit:[/b] - [2010/11/20 14:26:44 | 000,090,624 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\KMSVC.DLL -- (hkmsvc)
SRV:[b]64bit:[/b] - [2010/11/20 14:26:40 | 000,501,248 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\IPSECSVC.DLL -- (PolicyAgent)
SRV:[b]64bit:[/b] - [2010/11/20 14:26:38 | 000,853,504 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\IKEEXT.DLL -- (IKEEXT)
SRV:[b]64bit:[/b] - [2010/11/20 14:26:30 | 000,777,728 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\gpsvc.dll -- (gpsvc)
SRV:[b]64bit:[/b] - [2010/11/20 14:26:08 | 000,252,416 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\dot3svc.dll -- (dot3svc)
SRV:[b]64bit:[/b] - [2010/11/20 14:26:08 | 000,162,816 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\dps.dll -- (DPS)
SRV:[b]64bit:[/b] - [2010/11/20 14:26:06 | 000,317,952 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\dhcpcore.dll -- (Dhcp)
SRV:[b]64bit:[/b] - [2010/11/20 14:25:50 | 000,080,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\certprop.dll -- (SCPolicySvc)
SRV:[b]64bit:[/b] - [2010/11/20 14:25:50 | 000,080,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\certprop.dll -- (CertPropSvc)
SRV:[b]64bit:[/b] - [2010/11/20 14:25:46 | 000,705,024 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\BFE.DLL -- (BFE)
SRV:[b]64bit:[/b] - [2010/11/20 14:25:46 | 000,114,688 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AxInstSv.dll -- (AxInstSV)
SRV:[b]64bit:[/b] - [2010/11/20 14:25:44 | 000,679,424 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\audiosrv.dll -- (AudioSrv)
SRV:[b]64bit:[/b] - [2010/11/20 14:25:44 | 000,679,424 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\audiosrv.dll -- (AudioEndpointBuilder)
SRV:[b]64bit:[/b] - [2010/11/20 14:25:34 | 001,525,248 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Program Files\Windows Media Player\wmpnetwk.exe -- (WMPNetworkSvc)
SRV:[b]64bit:[/b] - [2010/11/20 14:25:30 | 001,504,256 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wbengine.exe -- (wbengine)
SRV:[b]64bit:[/b] - [2010/11/20 14:25:28 | 001,600,512 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\VSSVC.exe -- (VSS)
SRV:[b]64bit:[/b] - [2010/11/20 14:25:26 | 000,533,504 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\vds.exe -- (vds)
SRV:[b]64bit:[/b] - [2010/11/20 14:25:06 | 003,524,608 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\sppsvc.exe -- (sppsvc)
SRV:[b]64bit:[/b] - [2010/11/20 14:25:00 | 000,128,000 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\msiexec.exe -- (msiserver)
SRV:[b]64bit:[/b] - [2010/11/20 14:24:48 | 000,689,152 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\FXSSVC.exe -- (Fax)
SRV:[b]64bit:[/b] - [2010/09/23 02:10:10 | 000,057,184 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Live\Mesh\wlcrasvc.exe -- (wlcrasvc)
SRV:[b]64bit:[/b] - [2010/09/17 09:32:56 | 000,241,488 | ---- | M] (Trend Micro Inc.) [On_Demand | Stopped] -- C:\Program Files\Trend Micro\Titanium\TiMiniService.exe -- (TiMiniService)
SRV:[b]64bit:[/b] - [2010/04/17 00:07:42 | 000,134,928 | ---- | M] (Intel(R) Corporation) [Auto | Stopped] -- C:\Program Files\Intel\TurboBoost\TurboBoost.exe -- (TurboBoost)
SRV:[b]64bit:[/b] - [2010/01/09 20:34:24 | 004,925,184 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE -- (osppsvc)
SRV:[b]64bit:[/b] - [2009/07/14 02:41:58 | 000,097,280 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\wscsvc.dll -- (wscsvc)
SRV:[b]64bit:[/b] - [2009/07/14 02:41:57 | 000,012,288 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wpcsvc.dll -- (WPCSvc)
SRV:[b]64bit:[/b] - [2009/07/14 02:41:56 | 000,886,784 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\wlansvc.dll -- (Wlansvc)
SRV:[b]64bit:[/b] - [2009/07/14 02:41:56 | 000,381,952 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\w32time.dll -- (W32Time)
SRV:[b]64bit:[/b] - [2009/07/14 02:41:56 | 000,353,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\upnphost.dll -- (upnphost)
SRV:[b]64bit:[/b] - [2009/07/14 02:41:56 | 000,242,688 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wbem\WMIsvc.dll -- (Winmgmt)
SRV:[b]64bit:[/b] - [2009/07/14 02:41:56 | 000,237,568 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wecsvc.dll -- (Wecsvc)
SRV:[b]64bit:[/b] - [2009/07/14 02:41:56 | 000,202,240 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wbiosrvc.dll -- (WbioSrvc)
SRV:[b]64bit:[/b] - [2009/07/14 02:41:56 | 000,163,840 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\umpo.dll -- (Power)
SRV:[b]64bit:[/b] - [2009/07/14 02:41:56 | 000,090,624 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wdi.dll -- (WdiSystemHost)
SRV:[b]64bit:[/b] - [2009/07/14 02:41:56 | 000,090,624 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wdi.dll -- (WdiServiceHost)
SRV:[b]64bit:[/b] - [2009/07/14 02:41:56 | 000,084,480 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wercplsupport.dll -- (wercplsupport)
SRV:[b]64bit:[/b] - [2009/07/14 02:41:56 | 000,076,800 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wersvc.dll -- (WerSvc)
SRV:[b]64bit:[/b] - [2009/07/14 02:41:56 | 000,040,960 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\WcsPlugInService.dll -- (WcsPlugInService)
SRV:[b]64bit:[/b] - [2009/07/14 02:41:56 | 000,038,912 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\uxsms.dll -- (UxSms)
SRV:[b]64bit:[/b] - [2009/07/14 02:41:55 | 000,119,808 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\trkwks.dll -- (TrkWks)
SRV:[b]64bit:[/b] - [2009/07/14 02:41:55 | 000,065,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\tbssvc.dll -- (TBS)
SRV:[b]64bit:[/b] - [2009/07/14 02:41:55 | 000,044,544 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\themeservice.dll -- (Themes)
SRV:[b]64bit:[/b] - [2009/07/14 02:41:54 | 000,524,288 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\swprv.dll -- (swprv)
SRV:[b]64bit:[/b] - [2009/07/14 02:41:54 | 000,193,024 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\ssdpsrv.dll -- (SSDPSRV)
SRV:[b]64bit:[/b] - [2009/07/14 02:41:54 | 000,075,264 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\sstpsvc.dll -- (SstpSvc)
SRV:[b]64bit:[/b] - [2009/07/14 02:41:54 | 000,065,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\sppuinotify.dll -- (sppuinotify)
SRV:[b]64bit:[/b] - [2009/07/14 02:41:54 | 000,029,184 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\sensrsvc.dll -- (SensrSvc)
SRV:[b]64bit:[/b] - [2009/07/14 02:41:53 | 000,438,784 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\p2psvc.dll -- (p2psvc)
SRV:[b]64bit:[/b] - [2009/07/14 02:41:53 | 000,327,168 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\pnrpsvc.dll -- (PNRPsvc)
SRV:[b]64bit:[/b] - [2009/07/14 02:41:53 | 000,327,168 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\pnrpsvc.dll -- (p2pimsvc)
SRV:[b]64bit:[/b] - [2009/07/14 02:41:53 | 000,242,688 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\qwave.dll -- (QWAVE)
SRV:[b]64bit:[/b] - [2009/07/14 02:41:53 | 000,190,976 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\SCardSvr.dll -- (SCardSvr)
SRV:[b]64bit:[/b] - [2009/07/14 02:41:53 | 000,186,368 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\pcasvc.dll -- (PcaSvc)
SRV:[b]64bit:[/b] - [2009/07/14 02:41:53 | 000,159,232 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\regsvc.dll -- (RemoteRegistry)
SRV:[b]64bit:[/b] - [2009/07/14 02:41:53 | 000,099,328 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\rasauto.dll -- (RasAuto)
SRV:[b]64bit:[/b] - [2009/07/14 02:41:53 | 000,067,072 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\RpcEpMap.dll -- (RpcEptMapper)
SRV:[b]64bit:[/b] - [2009/07/14 02:41:53 | 000,064,512 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\Sens.dll -- (SENS)
SRV:[b]64bit:[/b] - [2009/07/14 02:41:53 | 000,025,600 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\nsisvc.dll -- (nsi)
SRV:[b]64bit:[/b] - [2009/07/14 02:41:53 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\pnrpauto.dll -- (PNRPAutoReg)
SRV:[b]64bit:[/b] - [2009/07/14 02:41:52 | 000,459,776 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\netprofm.dll -- (netprofm)
SRV:[b]64bit:[/b] - [2009/07/14 02:41:52 | 000,360,448 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\netman.dll -- (Netman)
SRV:[b]64bit:[/b] - [2009/07/14 02:41:28 | 000,368,640 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\msdtckrm.dll -- (KtmRm)
SRV:[b]64bit:[/b] - [2009/07/14 02:41:27 | 000,097,792 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\mprdim.dll -- (RemoteAccess)
SRV:[b]64bit:[/b] - [2009/07/14 02:41:26 | 000,067,584 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\mmcss.dll -- (THREADORDER)
SRV:[b]64bit:[/b] - [2009/07/14 02:41:26 | 000,067,584 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\mmcss.dll -- (MMCSS)
SRV:[b]64bit:[/b] - [2009/07/14 02:41:18 | 000,300,032 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\lltdsvc.dll -- (lltdsvc)
SRV:[b]64bit:[/b] - [2009/07/14 02:41:18 | 000,023,552 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\lmhsvc.dll -- (lmhosts)
SRV:[b]64bit:[/b] - [2009/07/14 02:41:11 | 000,156,672 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\iscsiexe.dll -- (MSiSCSI)
SRV:[b]64bit:[/b] - [2009/07/14 02:41:10 | 000,359,424 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\ipnathlp.dll -- (SharedAccess)
SRV:[b]64bit:[/b] - [2009/07/14 02:41:09 | 000,101,888 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\IPBusEnum.dll -- (IPBusEnum)
SRV:[b]64bit:[/b] - [2009/07/14 02:41:00 | 000,038,912 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\hidserv.dll -- (hidserv)
SRV:[b]64bit:[/b] - [2009/07/14 02:40:52 | 000,034,816 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\FDResPub.dll -- (FDResPub)
SRV:[b]64bit:[/b] - [2009/07/14 02:40:52 | 000,016,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\fdPHost.dll -- (fdPHost)
SRV:[b]64bit:[/b] - [2009/07/14 02:40:50 | 000,402,944 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\es.dll -- (EventSystem)
SRV:[b]64bit:[/b] - [2009/07/14 02:40:35 | 000,111,104 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\eapsvc.dll -- (EapHost)
SRV:[b]64bit:[/b] - [2009/07/14 02:40:28 | 000,291,328 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\defragsvc.dll -- (defragsvc)
SRV:[b]64bit:[/b] - [2009/07/14 02:40:13 | 000,083,968 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\bthserv.dll -- (bthserv)
SRV:[b]64bit:[/b] - [2009/07/14 02:40:10 | 000,100,864 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\bdesvc.dll -- (BDESVC)
SRV:[b]64bit:[/b] - [2009/07/14 02:40:01 | 000,072,192 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\aelupsvc.dll -- (AeLookupSvc)
SRV:[b]64bit:[/b] - [2009/07/14 02:40:01 | 000,032,256 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appidsvc.dll -- (AppIDSvc)
SRV:[b]64bit:[/b] - [2009/07/14 02:39:55 | 000,203,264 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wbem\WmiApSrv.exe -- (wmiApSrv)
SRV:[b]64bit:[/b] - [2009/07/14 02:39:48 | 000,040,960 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\UI0Detect.exe -- (UI0Detect)
SRV:[b]64bit:[/b] - [2009/07/14 02:39:41 | 000,014,336 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\snmptrap.exe -- (SNMPTRAP)
SRV:[b]64bit:[/b] - [2009/07/14 02:39:21 | 000,141,824 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\msdtc.exe -- (MSDTC)
SRV:[b]64bit:[/b] - [2009/07/14 02:39:15 | 000,010,240 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\Locator.exe -- (RpcLocator)
SRV:[b]64bit:[/b] - [2009/07/14 02:39:06 | 000,009,728 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\dllhost.exe -- (COMSysApp)
SRV:[b]64bit:[/b] - [2009/07/14 02:38:55 | 000,079,360 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\alg.exe -- (ALG)
SRV - [2013/10/25 15:44:39 | 000,257,416 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2013/07/09 05:46:31 | 000,140,288 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\cryptsvc.dll -- (CryptSvc)
SRV - [2013/07/04 12:57:28 | 000,205,824 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\WebClnt.dll -- (WebClient)
SRV - [2013/04/04 14:50:32 | 000,701,512 | ---- | M] (Malwarebytes Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2013/04/04 14:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)
SRV - [2013/02/28 17:45:16 | 000,161,384 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2012/08/21 17:52:54 | 000,194,032 | ---- | M] (Google) [On_Demand | Stopped] -- C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe -- (gusvc)
SRV - [2012/03/08 17:32:24 | 001,492,840 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe -- (fsssvc)
SRV - [2011/05/11 10:22:24 | 000,378,472 | ---- | M] (NVIDIA Corporation) [Auto | Stopped] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
SRV - [2011/05/10 19:47:00 | 002,009,704 | ---- | M] (NVIDIA Corporation) [Auto | Stopped] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe -- (nvUpdatusService)
SRV - [2011/05/04 05:28:31 | 000,427,520 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysWow64\SearchIndexer.exe -- (WSearch)
SRV - [2011/04/13 03:33:21 | 000,135,664 | ---- | M] (Google Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe -- (gupdatem)
SRV - [2011/04/13 03:33:21 | 000,135,664 | ---- | M] (Google Inc.) [Auto | Stopped] -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe -- (gupdate)
SRV - [2010/11/20 14:25:24 | 000,194,048 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\servicing\TrustedInstaller.exe -- (TrustedInstaller)
SRV - [2010/11/20 14:24:44 | 000,696,832 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\ehome\ehrecvr.exe -- (ehRecvr)
SRV - [2010/11/20 13:21:40 | 001,175,040 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\WsmSvc.dll -- (WinRM)
SRV - [2010/11/20 13:21:38 | 000,351,232 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWow64\winhttp.dll -- (WinHttpAutoProxySvc)
SRV - [2010/11/20 13:21:36 | 000,276,992 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\wcncsvc.dll -- (wcncsvc)
SRV - [2010/11/20 13:21:30 | 000,242,176 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\tapisrv.dll -- (TapiSrv)
SRV - [2010/11/20 13:21:20 | 000,328,192 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysWOW64\shsvcs.dll -- (ShellHWDetection)
SRV - [2010/11/20 13:21:10 | 000,113,664 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\SessEnv.dll -- (SessionEnv)
SRV - [2010/11/20 13:20:58 | 000,165,376 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\provsvc.dll -- (HomeGroupProvider)
SRV - [2010/11/20 13:20:56 | 001,508,864 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\pla.dll -- (pla)
SRV - [2010/11/20 13:18:32 | 000,254,464 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysWOW64\dhcpcore.dll -- (Dhcp)
SRV - [2010/11/20 13:17:24 | 000,073,216 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWow64\msiexec.exe -- (msiserver)
SRV - [2010/11/05 02:53:04 | 000,042,856 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe -- (FontCache3.0.0.0)
SRV - [2010/11/05 02:52:16 | 000,856,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe -- (idsvc)
SRV - [2010/03/18 13:27:14 | 000,138,576 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_64)
SRV - [2010/03/18 12:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2010/01/09 20:18:00 | 000,149,352 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\microsoft shared\Source Engine\OSE.EXE -- (ose)
SRV - [2009/12/15 18:39:38 | 000,096,896 | ---- | M] (ASUS) [Auto | Stopped] -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe -- (ATKGFNEXSrv)
SRV - [2009/07/14 02:39:09 | 000,127,488 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\ehome\ehsched.exe -- (ehSched)
SRV - [2009/07/14 02:16:20 | 000,010,752 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\wpcsvc.dll -- (WPCSvc)
SRV - [2009/07/14 02:16:18 | 000,076,288 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\wdi.dll -- (WdiSystemHost)
SRV - [2009/07/14 02:16:18 | 000,076,288 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\wdi.dll -- (WdiServiceHost)
SRV - [2009/07/14 02:16:18 | 000,032,768 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\WcsPlugInService.dll -- (WcsPlugInService)
SRV - [2009/07/14 02:16:17 | 000,266,752 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\upnphost.dll -- (upnphost)
SRV - [2009/07/14 02:16:13 | 000,049,664 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysWOW64\Sens.dll -- (SENS)
SRV - [2009/07/14 02:16:12 | 000,210,944 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\qwave.dll -- (QWAVE)
SRV - [2009/07/14 02:16:03 | 000,360,448 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\netprofm.dll -- (netprofm)
SRV - [2009/07/14 02:15:41 | 000,075,264 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysWOW64\mprdim.dll -- (RemoteAccess)
SRV - [2009/07/14 02:15:24 | 000,049,152 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\hidserv.dll -- (hidserv)
SRV - [2009/07/14 02:15:19 | 000,271,360 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysWOW64\es.dll -- (EventSystem)
SRV - [2009/07/14 02:14:28 | 000,020,992 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\perfhost.exe -- (PerfHost)
SRV - [2009/07/14 02:14:18 | 000,007,168 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWow64\dllhost.exe -- (COMSysApp)
SRV - [2009/06/16 01:30:42 | 000,084,536 | ---- | M] (ASUS) [Auto | Stopped] -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe -- (ASLDRService)
SRV - [2009/06/10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2009/06/10 21:39:58 | 000,089,920 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_64)
[color=#E56717]========== Driver Services (All) ==========[/color]
DRV:[b]64bit:[/b] - [2013/09/14 02:10:19 | 000,497,152 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\afd.sys -- (AFD)
DRV:[b]64bit:[/b] - [2013/09/08 03:30:37 | 001,903,552 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tcpip.sys -- (TCPIP6)
DRV:[b]64bit:[/b] - [2013/09/08 03:30:37 | 001,903,552 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\tcpip.sys -- (Tcpip)
DRV:[b]64bit:[/b] - [2013/08/01 13:09:36 | 000,983,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dxgkrnl.sys -- (DXGKrnl)
DRV:[b]64bit:[/b] - [2013/07/12 11:41:35 | 000,185,344 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbvideo.sys -- (usbvideo)
DRV:[b]64bit:[/b] - [2013/07/12 11:41:12 | 000,100,864 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbcir.sys -- (usbcir)
DRV:[b]64bit:[/b] - [2013/07/04 11:11:35 | 000,140,800 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mrxdav.sys -- (MRxDAV)
DRV:[b]64bit:[/b] - [2013/06/25 23:55:52 | 000,785,624 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\Wdf01000.sys -- (Wdf01000)
DRV:[b]64bit:[/b] - [2013/06/15 05:32:16 | 000,039,936 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tssecsrv.sys -- (tssecsrv)
DRV:[b]64bit:[/b] - [2013/04/12 15:45:08 | 001,656,680 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\ntfs.sys -- (Ntfs)
DRV:[b]64bit:[/b] - [2013/04/04 14:50:32 | 000,025,928 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector)
DRV:[b]64bit:[/b] - [2013/01/24 07:01:01 | 000,223,752 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\fvevol.sys -- (fvevol)
DRV:[b]64bit:[/b] - [2012/10/03 17:07:26 | 000,045,568 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Stopped] -- C:\Windows\SysNative\drivers\tcpipreg.sys -- (tcpipreg)
DRV:[b]64bit:[/b] - [2012/08/22 19:12:40 | 000,950,128 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\ndis.sys -- (NDIS)
DRV:[b]64bit:[/b] - [2012/07/26 03:26:45 | 000,087,040 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WUDFPf.sys -- (WudfPf)
DRV:[b]64bit:[/b] - [2012/07/26 03:26:06 | 000,198,656 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WUDFRd.sys -- (WUDFRd)
DRV:[b]64bit:[/b] - [2012/07/14 12:40:07 | 000,431,176 | ---- | M] (BitDefender) [File_System | Boot | Stopped] -- C:\Windows\SysNative\drivers\bdfsfltr.sys -- (bdfsfltr)
DRV:[b]64bit:[/b] - [2012/07/06 21:07:42 | 000,552,960 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bthport.sys -- (BTHPORT)
DRV:[b]64bit:[/b] - [2012/06/02 06:50:10 | 000,458,704 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\cng.sys -- (CNG)
DRV:[b]64bit:[/b] - [2012/06/02 06:48:16 | 000,151,920 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\ksecpkg.sys -- (KSecPkg)
DRV:[b]64bit:[/b] - [2012/06/02 06:48:16 | 000,095,600 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\ksecdd.sys -- (KSecDD)
DRV:[b]64bit:[/b] - [2012/04/28 04:55:21 | 000,210,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpwd.sys -- (RDPWD)
DRV:[b]64bit:[/b] - [2012/03/17 08:58:57 | 000,075,120 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\partmgr.sys -- (partmgr)
DRV:[b]64bit:[/b] - [2012/03/08 17:40:52 | 000,048,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\fssfltr.sys -- (fssfltr)
DRV:[b]64bit:[/b] - [2012/03/01 07:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:[b]64bit:[/b] - [2012/02/17 05:57:32 | 000,023,552 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tdtcp.sys -- (TDTCP)
DRV:[b]64bit:[/b] - [2011/07/09 03:46:28 | 000,288,768 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mrxsmb10.sys -- (mrxsmb10)
DRV:[b]64bit:[/b] - [2011/06/02 18:32:50 | 000,401,896 | ---- | M] (ASMedia Technology Inc) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\asmtxhci.sys -- (asmtxhci)
DRV:[b]64bit:[/b] - [2011/06/02 18:32:50 | 000,128,488 | ---- | M] (ASMedia Technology Inc) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\asmthub3.sys -- (asmthub3)
DRV:[b]64bit:[/b] - [2011/05/10 19:47:00 | 013,050,088 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nvlddmkm.sys -- (nvlddmkm)
DRV:[b]64bit:[/b] - [2011/05/10 19:47:00 | 000,025,960 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\nvpciflt.sys -- (nvpciflt)
DRV:[b]64bit:[/b] - [2011/05/04 14:43:12 | 000,090,624 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bowser.sys -- (bowser)
DRV:[b]64bit:[/b] - [2011/05/01 22:33:06 | 008,593,920 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\NETwNs64.sys -- (NETwNs64)
DRV:[b]64bit:[/b] - [2011/04/29 04:06:10 | 000,467,456 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\srv.sys -- (srv)
DRV:[b]64bit:[/b] - [2011/04/29 04:05:49 | 000,410,112 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\srv2.sys -- (srv2)
DRV:[b]64bit:[/b] - [2011/04/29 04:05:37 | 000,168,448 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\srvnet.sys -- (srvnet)
DRV:[b]64bit:[/b] - [2011/04/28 04:54:56 | 000,080,384 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\BTHUSB.SYS -- (BTHUSB)
DRV:[b]64bit:[/b] - [2011/04/27 03:40:40 | 000,158,208 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mrxsmb.sys -- (mrxsmb)
DRV:[b]64bit:[/b] - [2011/04/27 03:39:37 | 000,128,000 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mrxsmb20.sys -- (mrxsmb20)
DRV:[b]64bit:[/b] - [2011/04/12 22:18:08 | 000,142,632 | ---- | M] (ELAN Microelectronics Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ETD.sys -- (ETD)
DRV:[b]64bit:[/b] - [2011/03/25 04:29:26 | 000,343,040 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\usbhub.sys -- (usbhub)
DRV:[b]64bit:[/b] - [2011/03/25 04:29:14 | 000,098,816 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\usbccgp.sys -- (usbccgp)
DRV:[b]64bit:[/b] - [2011/03/25 04:29:04 | 000,052,736 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\usbehci.sys -- (usbehci)
DRV:[b]64bit:[/b] - [2011/03/25 04:29:04 | 000,025,600 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbohci.sys -- (usbohci)
DRV:[b]64bit:[/b] - [2011/03/25 04:29:03 | 000,030,720 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbuhci.sys -- (usbuhci)
DRV:[b]64bit:[/b] - [2011/03/11 07:41:34 | 000,166,272 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nvstor.sys -- (nvstor)
DRV:[b]64bit:[/b] - [2011/03/11 07:41:34 | 000,148,352 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nvraid.sys -- (nvraid)
DRV:[b]64bit:[/b] - [2011/03/11 07:41:26 | 000,410,496 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaStorV.sys -- (iaStorV)
DRV:[b]64bit:[/b] - [2011/03/11 07:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:[b]64bit:[/b] - [2011/03/11 07:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:[b]64bit:[/b] - [2011/03/11 05:37:16 | 000,091,648 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\USBSTOR.SYS -- (USBSTOR)
DRV:[b]64bit:[/b] - [2011/01/27 01:57:12 | 012,273,408 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
DRV:[b]64bit:[/b] - [2011/01/13 12:58:30 | 000,413,800 | ---- | M] (Realtek ) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:[b]64bit:[/b] - [2010/11/29 13:14:36 | 001,186,272 | ---- | M] (BitDefender) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\avckf.sys -- (avckf)
DRV:[b]64bit:[/b] - [2010/11/29 13:14:30 | 000,591,968 | ---- | M] (BitDefender) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\avc3.sys -- (avc3)
DRV:[b]64bit:[/b] - [2010/11/20 14:34:04 | 000,295,808 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\volsnap.sys -- (volsnap)
DRV:[b]64bit:[/b] - [2010/11/20 14:34:02 | 000,363,392 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\volmgrx.sys -- (volmgrx)
DRV:[b]64bit:[/b] - [2010/11/20 14:34:02 | 000,215,936 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vhdmp.sys -- (vhdmp)
DRV:[b]64bit:[/b] - [2010/11/20 14:34:02 | 000,071,552 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\volmgr.sys -- (volmgr)
DRV:[b]64bit:[/b] - [2010/11/20 14:33:58 | 000,063,360 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\termdd.sys -- (TermDD)
DRV:[b]64bit:[/b] - [2010/11/20 14:33:56 | 000,103,808 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sbp2port.sys -- (sbp2port)
DRV:[b]64bit:[/b] - [2010/11/20 14:33:54 | 000,213,888 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\rdyboost.sys -- (rdyboost)
DRV:[b]64bit:[/b] - [2010/11/20 14:33:50 | 000,184,704 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\pci.sys -- (pci)
DRV:[b]64bit:[/b] - [2010/11/20 14:33:46 | 000,366,976 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\msrpc.sys -- (MsRPC)
DRV:[b]64bit:[/b] - [2010/11/20 14:33:46 | 000,273,792 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\msiscsi.sys -- (iScsiPrt)
DRV:[b]64bit:[/b] - [2010/11/20 14:33:46 | 000,155,008 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mpio.sys -- (mpio)
DRV:[b]64bit:[/b] - [2010/11/20 14:33:46 | 000,140,672 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\msdsm.sys -- (msdsm)
DRV:[b]64bit:[/b] - [2010/11/20 14:33:46 | 000,031,104 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\msahci.sys -- (msahci)
DRV:[b]64bit:[/b] - [2010/11/20 14:33:44 | 000,094,592 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\mountmgr.sys -- (mountmgr)
DRV:[b]64bit:[/b] - [2010/11/20 14:33:38 | 000,014,720 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\hwpolicy.sys -- (hwpolicy)
DRV:[b]64bit:[/b] - [2010/11/20 14:33:36 | 000,289,664 | ---- | M] (Microsoft Corporation) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\fltMgr.sys -- (FltMgr)
DRV:[b]64bit:[/b] - [2010/11/20 14:33:36 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:[b]64bit:[/b] - [2010/11/20 14:32:48 | 000,334,208 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\acpi.sys -- (ACPI)
DRV:[b]64bit:[/b] - [2010/11/20 12:07:06 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:[b]64bit:[/b] - [2010/11/20 12:07:06 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV:[b]64bit:[/b] - [2010/11/20 11:52:38 | 000,088,576 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\wanarp.sys -- (Wanarpv6)
DRV:[b]64bit:[/b] - [2010/11/20 11:52:38 | 000,088,576 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\wanarp.sys -- (WANARP)
DRV:[b]64bit:[/b] - [2010/11/20 11:52:36 | 000,164,352 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ndiswan.sys -- (NdisWan)
DRV:[b]64bit:[/b] - [2010/11/20 11:52:36 | 000,129,536 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rasl2tp.sys -- (Rasl2tp)
DRV:[b]64bit:[/b] - [2010/11/20 11:52:34 | 000,111,104 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\raspptp.sys -- (PptpMiniport)
DRV:[b]64bit:[/b] - [2010/11/20 11:52:22 | 000,131,584 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\pacer.sys -- (Psched)
DRV:[b]64bit:[/b] - [2010/11/20 11:52:22 | 000,057,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ndproxy.sys -- (NDProxy)
DRV:[b]64bit:[/b] - [2010/11/20 11:52:20 | 000,082,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ipfltdrv.sys -- (IpFilterDriver)
DRV:[b]64bit:[/b] - [2010/11/20 11:51:52 | 000,125,440 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tunnel.sys -- (tunnel)
DRV:[b]64bit:[/b] - [2010/11/20 11:50:10 | 000,056,832 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ndisuio.sys -- (Ndisuio)
DRV:[b]64bit:[/b] - [2010/11/20 11:44:58 | 000,229,888 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\1394ohci.sys -- (1394ohci)
DRV:[b]64bit:[/b] - [2010/11/20 11:44:38 | 000,048,640 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\umbus.sys -- (umbus)
DRV:[b]64bit:[/b] - [2010/11/20 11:44:24 | 000,350,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HdAudio.sys -- (HdAudAddService)
DRV:[b]64bit:[/b] - [2010/11/20 11:43:58 | 000,041,984 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\winusb.sys -- (WinUsb)
DRV:[b]64bit:[/b] - [2010/11/20 11:43:50 | 000,030,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\hidusb.sys -- (HidUsb)
DRV:[b]64bit:[/b] - [2010/11/20 11:43:44 | 000,122,368 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\hdaudbus.sys -- (HDAudBus)
DRV:[b]64bit:[/b] - [2010/11/20 11:34:02 | 000,014,336 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sffp_sd.sys -- (sffp_sd)
DRV:[b]64bit:[/b] - [2010/11/20 11:33:26 | 000,033,280 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\kbdhid.sys -- (kbdhid)
DRV:[b]64bit:[/b] - [2010/11/20 11:33:18 | 000,038,912 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\CompositeBus.sys -- (CompositeBus)
DRV:[b]64bit:[/b] - [2010/11/20 11:14:38 | 000,061,440 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\appid.sys -- (AppID)
DRV:[b]64bit:[/b] - [2010/11/20 11:10:00 | 000,029,696 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\scfilter.sys -- (scfilter)
DRV:[b]64bit:[/b] - [2010/11/20 11:04:54 | 000,078,848 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\IPMIDrv.sys -- (IPMIDRV)
DRV:[b]64bit:[/b] - [2010/11/20 10:30:44 | 000,012,800 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\acpipmi.sys -- (AcpiPmi)
DRV:[b]64bit:[/b] - [2010/11/20 10:27:56 | 000,309,248 | ---- | M] (Microsoft Corporation) [File_System | System | Stopped] -- C:\Windows\SysNative\drivers\rdbss.sys -- (rdbss)
DRV:[b]64bit:[/b] - [2010/11/20 10:26:34 | 000,102,400 | ---- | M] (Microsoft Corporation) [File_System | System | Stopped] -- C:\Windows\SysNative\drivers\dfsc.sys -- (DfsC)
DRV:[b]64bit:[/b] - [2010/11/20 10:26:12 | 000,328,192 | ---- | M] (Microsoft Corporation) [File_System | Disabled | Stopped] -- C:\Windows\SysNative\drivers\udfs.sys -- (udfs)
DRV:[b]64bit:[/b] - [2010/11/20 10:25:16 | 000,753,664 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\http.sys -- (HTTP)
DRV:[b]64bit:[/b] - [2010/11/20 10:23:22 | 000,261,632 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\netbt.sys -- (NetBT)
DRV:[b]64bit:[/b] - [2010/11/20 10:21:58 | 000,119,296 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\tdx.sys -- (tdx)
DRV:[b]64bit:[/b] - [2010/11/20 10:19:22 | 000,147,456 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\cdrom.sys -- (cdrom)
DRV:[b]64bit:[/b] - [2010/10/14 17:28:16 | 000,317,440 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud)
DRV:[b]64bit:[/b] - [2010/09/22 02:59:38 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64)
DRV:[b]64bit:[/b] - [2010/09/17 09:52:28 | 000,144,464 | ---- | M] (Trend Micro Inc.) [Kernel | Auto | Stopped] -- C:\Windows\SysNative\drivers\tmcomm.sys -- (tmcomm)
DRV:[b]64bit:[/b] - [2010/09/17 09:52:28 | 000,105,552 | ---- | M] (Trend Micro Inc.) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\tmtdi.sys -- (tmtdi)
DRV:[b]64bit:[/b] - [2010/09/17 09:52:28 | 000,090,704 | ---- | M] (Trend Micro Inc.) [Kernel | Auto | Stopped] -- C:\Windows\SysNative\drivers\tmactmon.sys -- (tmactmon)
DRV:[b]64bit:[/b] - [2010/09/17 09:52:28 | 000,067,664 | ---- | M] (Trend Micro Inc.) [Kernel | Auto | Stopped] -- C:\Windows\SysNative\drivers\tmevtmgr.sys -- (tmevtmgr)
DRV:[b]64bit:[/b] - [2010/09/13 11:24:26 | 000,437,272 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)
DRV:[b]64bit:[/b] - [2010/08/20 17:42:04 | 000,099,408 | ---- | M] (BitDefender) [Kernel | System | Stopped] -- C:\Program Files\Common Files\BitDefender\BitDefender Firewall\bdfwfpf.sys -- (bdfwfpf)
DRV:[b]64bit:[/b] - [2010/08/20 14:42:08 | 000,088,144 | ---- | M] (BitDefender) [Kernel | System | Stopped] -- c:\program files\common files\bitdefender\bitdefender firewall\bdfndisf6.sys -- (Bdfndisf)
DRV:[b]64bit:[/b] - [2010/05/13 15:52:08 | 000,162,896 | ----
-
-
re
ok refais OTL sous les mêmes conditions
-
J'ai réussi....
Voici le résultat:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.7 (10.15.2013:3)
OS: Windows 7 Home Premium x64
Ran by Franck on 30/10/2013 at 11:25:47,07
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL
~~~ Registry Keys
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\iminstaller
Successfully deleted: [Registry Key] HKEY_USERS\.DEFAULT\Software\SearchProtect
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{22222222-2222-2222-2222-220222702296}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{22222222-2222-2222-2222-220322122257}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{22222222-2222-2222-2222-220222702296}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{22222222-2222-2222-2222-220322122257}
~~~ Files
Successfully deleted: [File] "C:\Users\Franck\appdata\locallow\microsoft\silverlight\outofbrowser\index\portal.qtrax.com"
Successfully deleted: [File] "C:\Users\Franck\appdata\locallow\SkwConfig.bin"
~~~ Folders
Successfully deleted: [Folder] "C:\ProgramData\big fish games"
Successfully deleted: [Folder] "C:\ProgramData\software"
Successfully deleted: [Folder] "C:\Users\Franck\appdata\local\cre"
Successfully deleted: [Folder] "C:\Users\Franck\appdata\local\software"
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{019EFC31-05BB-4E47-BBA2-ED960D4305C0}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{01CEE0B4-7BA2-4954-BBA4-6DA5AA4CAD0B}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{01E9AA1C-4567-4101-B258-C3EBC128EE31}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{02DB9E95-EC49-42D0-BBCB-CDD06D8163B2}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{03A2822E-FB50-4CDD-8091-4578AF533F34}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{0980AB34-5FDE-463D-BA6D-3F146C9FF92F}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{0AD5973A-4235-44A6-A71A-A4CE963E2907}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{0AE0EF7D-11F4-4EFC-B264-48D2B5DE30E7}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{0DFB0817-9F5E-463D-BBD1-A44703C19168}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{0F383655-EDB4-4309-B7DE-827C1334CADF}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{129BCA9E-3CF7-4788-9F6E-AF69106D5EDB}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{14D1AE61-91DE-4CFB-9EE8-C39A8AC53782}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{166EE9BC-5F53-4375-8E7D-9D2F17000312}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{18557289-1D00-4AEB-8773-75456FC3EC8B}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{18F87CF6-0DDC-44C4-A0BE-837C8FE29D73}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{1B669338-ED97-4F15-AE2B-421849685F38}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{1C1F0475-3CB4-4405-98DC-3473BF2EBFAB}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{216E7931-FB90-42D6-8FCF-567C754EFFE1}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{2240E6B1-534B-431D-BA50-3FC2C163A906}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{243E6355-9EA4-488E-8C8D-EBCBAB099498}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{279B92FB-93D7-4AFC-A756-8AF35ECECAA4}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{27F21BBC-AB76-4F87-AAB0-2BE041C9F705}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{27F3EFF8-C135-4BDD-B6F3-6BC398D4480B}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{2B03F8F3-9CA6-4264-A7EE-B749A0DA2517}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{2BC5ED54-A2CC-4503-A79B-F0B25602C0F7}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{2DB376C2-C5EC-44DA-897F-BA91C4BB5825}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{2EB817C3-C6E5-4A86-8671-D0B3B92BD065}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{337082D4-6DD0-4839-B40F-B3D325BADBDE}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{3EB00072-0692-4B26-B8E1-129E591E2338}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{3F912A95-3B99-44D1-A02A-78863FFE05A0}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{3FF7C192-2772-482B-88F8-3E8D9BF9E36D}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{4085C18F-07BB-4CF8-944D-AF36C9BE81D0}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{410810E4-CDB1-475C-B623-5F27CF5F6104}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{414C5D76-7ABE-43B2-ACCC-C889A0D8E2DD}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{4203E784-B451-4825-AB5C-B06B2C3A7C0B}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{44CCBF40-C5A6-4217-B729-4E4AF90AD93C}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{493907E4-0EA2-4704-AE31-85C0577BBFC4}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{4B551553-1B54-4933-B86F-5F201E8E0723}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{4CA49D70-2F08-49D8-B2AE-E506114D9F28}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{4CCBF72B-07EE-45CD-B591-F34C9432C964}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{4DC2D51A-37CD-4442-AB66-C7E8B99269D0}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{504B05D7-DA4C-42B2-AB58-E831DE9A65F5}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{56B2C121-AA06-4877-AB9C-34E958819D71}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{573C5768-24C7-46BD-B437-026C2B56A2CE}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{598041C7-DD7B-499E-BB4A-11336AAE4F5A}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{5C4059C5-8963-44A0-AA35-4845D732888A}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{5CB7D08E-20ED-4EAA-9A88-A5F68F52CD35}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{5E4035FA-D296-4EC5-94D0-C239EC1AE83C}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{5E46EFE8-611A-4DC1-AB44-29678EC05FBD}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{5E805907-2720-4116-BFA0-4B53BC6094D4}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{5F6F5FBC-A640-4290-AA7A-B400615B82C5}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{5FA4B2CE-DC69-468C-93FC-BD7E6DB004CC}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{64FF5B2F-FC59-45D0-B2DC-744EBFE12D03}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{659BF3A5-3F97-4F67-BD0D-A2F9C909A76F}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{65A70831-0647-4B9B-84BC-2471F9FA17C6}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{66CB1BC6-0F1D-42E1-AC9D-4A9DFD9BE598}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{684C1FDB-12BF-49FD-8121-DA2D1C2D9FD8}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{6886AC8C-9C5F-40E4-8261-60A93514C404}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{688A1397-1CE3-462C-A947-8613249D59F3}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{6CF63169-D16E-45DB-9B28-60AB1DC408E5}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{6D5AC9D4-592E-474A-B8E4-0CDC87B90ACE}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{6F42F013-C03D-4166-A1F9-4C53304D7D85}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{70256E70-92FE-4859-A434-8303B5228713}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{70EBAF83-B375-4B40-A1E6-830C2BEFC3A9}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{7424318F-5812-4276-BFD1-B8F97E87C715}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{7525D211-09BA-4289-8CFB-28E83FD9DAEA}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{77F4A363-5383-46BE-8862-48DB0C9D584C}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{792B8215-7723-44C9-968D-BB2CA63326F0}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{7B8E713B-F812-41BE-BCBA-884CDF87C9F1}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{7D220377-F97C-4006-9E9F-B2C2C28F88AE}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{7E010AC4-0342-47CA-BCF8-7A5C8EEBE302}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{7E3A09B7-64D8-4268-AF40-C66DB2ADBF9E}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{7FD02C3B-8544-4298-9E06-180351C9CA80}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{80DB783D-5DD9-472F-AAD8-8B8E30275D51}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{81364D7C-06ED-4D64-B65F-42787C25FD4F}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{8560DC05-31BC-40A7-96BF-F2952754052A}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{8778D5C5-9FE3-4A79-8FD8-451B92753B3B}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{87A80741-B1DE-4CA0-8D63-37CBCE87C0D7}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{87C527D8-0401-4B15-B642-6D5140E3D323}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{8B449B5A-CD35-4176-915C-37BF68785B05}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{8B8C7568-B59D-43A7-8540-B939CEA808F2}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{8D74C768-34E8-4A1F-83C1-BB2C6C83E998}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{8DF259AE-CB92-4DA3-82BE-5A8805C89F4D}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{8FC51D41-07D9-45D5-84AA-F23B7F185632}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{955FA388-F286-4ECF-BB36-F6AC75F76B1B}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{9AC959A8-DCCA-404A-A359-95DAC6519F89}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{9E7022CB-5AF2-4B67-ACB6-14E120DA1D59}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{9EB1F066-0366-4361-9584-F5D454E9971A}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{A040BCE5-E1A9-4788-8792-6B60CE2F192E}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{A3BC0147-8E77-45DD-AA79-8D08348B5060}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{A41594DF-465A-402D-8DF8-15CAC0B4E0D0}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{A7805DDA-01E4-41B8-8D52-3661C1A47CB6}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{A9BDE722-4A29-462C-9929-0FBEF79A63AC}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{AA2A610B-CBD4-43EB-8E0C-6D93A204BFA2}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{AE46ABB4-CD81-4831-9DB6-5BFC52D522EF}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{B07D47E5-361A-4696-990A-47EF83074B2D}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{B1761717-CF86-46CC-83FC-2A50C3A97B42}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{B5446E05-9B88-4EF6-A1B1-96DB3352F499}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{B8D78769-6D79-4D52-8AB5-8E74ECB7D28E}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{BBA40505-0F0C-41CD-91B5-BD7BC0040354}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{BBA61F07-6197-460C-959C-D51F0CF8D033}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{BCF31578-3EF2-41A3-BF21-0AC5CC17D2E1}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{BE885EE9-0FDD-42E2-886F-28E7006A2E81}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{C0A8B07E-75A6-498B-AD12-47A754D89FF2}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{C231DDDD-C7D8-431E-A72F-34F23C4A36D3}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{C4919903-4A5D-42BE-B54A-476B1146D5B7}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{C5D40FAE-3D68-429F-9443-99927ACF8265}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{C5EC3BCA-F3A2-4F81-9AED-6E4DB56D616F}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{C601FF5A-E15F-4BF2-8904-BB15C4491C59}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{CC028CBC-0BFE-4CE6-BCCA-8A9F12984883}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{CFB3FEC4-D674-4051-8E8B-D2EE20318B08}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{D3AAD617-7AA4-4EB1-BD27-1F5A1122177B}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{D6197675-C1DB-4AF2-B19B-734004A2013B}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{D946BA29-2706-4C81-8304-21B67532D7C8}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{D9B3F0D6-C686-44C6-9E75-DA41DE718B95}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{DA28109A-1471-40C0-972B-D54C2D130DBE}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{DA5438EC-3F73-4757-A96C-6411AD1748F4}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{E1C69B4B-E6D4-4682-BF37-DBD17244EF36}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{E4DF6227-640E-4EB3-A21A-5998E16F1748}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{E853A093-406F-4692-B049-DC5B67A844D3}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{EC13A976-FF7F-4713-AAAD-6893FEF65080}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{ECD3EF49-AB83-4E48-B51B-E5DF4998C013}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{ED38F5A4-E313-41E0-A044-60FF695D0154}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{F0ADD4E7-70D1-45EE-8E4C-D332E8620387}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{F0C29423-F78F-4F53-B09E-48CDF3E8AEA3}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{F336C072-68E6-4815-AB7D-519C6DBC347E}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{F4A38C2F-3CEB-49A0-B0F2-9EE86397E400}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{F8A356E0-193B-42D9-ADDD-3C1CCD4F69F9}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{F8AA5796-5B77-4791-BA8C-DC2B474CF7D3}
Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{FB3593B3-1078-4F91-988A-A3ECF31CF86C}
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 30/10/2013 at 11:27:43,36
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -
Comment aller en Mode sans échec :
Attention !!! : NE JAMAIS DEMARRER EN MODE SANS ECHEC AVEC L'UTILITAIRE MSCONFIG !!!!
▶ Redémarres ton ordi
▶ Tapote la touche F8 immédiatement, (F4,F5, ou suppr sur certains PC) juste après le "Bip"
▶ Tu verras un écran avec options de démarrage apparaître
▶ Choisis la première option : Sans Échec, et valide avec "Entrée"
▶ Choisis ton compte habituel
-
Je te paraître ignorant mais on fait comment ?
-
relance-le en mode sans echec
-
ok... moi aussi je vais arrêter pour ce soir après Malwarebytes... merci dans tous les cas
-
-
bonjour,
voici le rapport après Malwarebytes:
Malwarebytes Anti-Malware (Essai) 1.75.0.1300
www.malwarebytes.org
Version de la base de données: v2013.10.28.11
Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 10.0.9200.16721
Franck :: FRANCK-PC [administrateur]
Protection: Activé
29/10/2013 08:58:57
mbam-log-2013-10-29 (08-58-57).txt
Type d'examen: Examen complet (C:\|D:\|)
Options d'examen activées: Mémoire | Démarrage | Registre | Système de fichiers | Heuristique/Extra | Heuristique/Shuriken | PUP | PUM
Options d'examen désactivées: P2P
Elément(s) analysé(s): 394265
Temps écoulé: 1 heure(s), 6 minute(s), 8 seconde(s)
Processus mémoire détecté(s): 0
(Aucun élément nuisible détecté)
Module(s) mémoire détecté(s): 0
(Aucun élément nuisible détecté)
Clé(s) du Registre détectée(s): 1
HKLM\SOFTWARE\SWEETIM (PUP.Optional.SweetIM.A) -> Mis en quarantaine et supprimé avec succès.
Valeur(s) du Registre détectée(s): 1
HKLM\Software\SweetIM|simapp_id (PUP.Optional.SweetIM.A) -> Données: {2748EF81-4BAE-11E2-B0C4-5404A6087A82} -> Mis en quarantaine et supprimé avec succès.
Elément(s) de données du Registre détecté(s): 0
(Aucun élément nuisible détecté)
Dossier(s) détecté(s): 0
(Aucun élément nuisible détecté)
Fichier(s) détecté(s): 15
C:\Users\Enfants\AppData\Local\Temp\SecondStepInstaller.exe (PUP.Optional.Conduit.A) -> Mis en quarantaine et supprimé avec succès.
C:\Users\Enfants\AppData\Local\Temp\AU\AutoUpdate.zip (PUP.Optional.Conduit.A) -> Mis en quarantaine et supprimé avec succès.
C:\Users\Enfants\AppData\Local\Temp\AU\SPUpdater.exe (PUP.Optional.Conduit.A) -> Mis en quarantaine et supprimé avec succès.
C:\Users\Enfants\Downloads\FlvMPlayer.exe (PUP.Optional.Solimba) -> Mis en quarantaine et supprimé avec succès.
C:\Users\Enfants\Downloads\installer_minecraft_French.exe (PUP.Optional.Vittalia) -> Mis en quarantaine et supprimé avec succès.
C:\Users\Franck\.frostwire5\updates\frostwire-5.5.6.windows.exe (PUP.Optional.OpenCandy) -> Mis en quarantaine et supprimé avec succès.
C:\Users\Franck\AppData\Local\Temp\mgsqlite3.7z (PUP.Optional.SweetIM) -> Mis en quarantaine et supprimé avec succès.
C:\Users\Franck\AppData\Local\Temp\mgsqlite3.dll (PUP.Optional.SweetIM) -> Mis en quarantaine et supprimé avec succès.
C:\Users\Franck\AppData\Local\Temp\SweetIESetup.exe (PUP.Optional.SweetPacks.A) -> Mis en quarantaine et supprimé avec succès.
C:\Users\Franck\AppData\Local\Temp\SweetIESetup.exe.7z (PUP.Optional.SweetPacks.A) -> Mis en quarantaine et supprimé avec succès.
C:\Users\Franck\AppData\Local\Temp\nsn3759.tmp\SPtool.dll (PUP.Optional.SearchProtect.A) -> Mis en quarantaine et supprimé avec succès.
C:\Users\Franck\AppData\Local\Temp\nsr14FB.tmp\SPtool.dll (PUP.Optional.SearchProtect.A) -> Mis en quarantaine et supprimé avec succès.
C:\Users\Public\AutoUpdate.exe (PUP.Optional.Conduit.A) -> Mis en quarantaine et supprimé avec succès.
C:\Windows\Installer\478572.msi (PUP.Optional.SweetIM) -> Mis en quarantaine et supprimé avec succès.
C:\Windows\Installer\478578.msi (PUP.Optional.SweetIM) -> Mis en quarantaine et supprimé avec succès.
(fin) -
voici les liens cjoint après OTL:
http://cjoint.com/?CJDkSS4GRZP
https://www.cjoint.com/c/CJDkUb5CuMs -
-
-
-
oui oui bien sur.....si je te réponds plus c'est que je suis parti dormir , auquel cas on continuera demain :)
-
ok... là j'attends le résultat de Malwarebytes
-
tu l'as bien executé clic droit "executer en tant qu'administrateur" ?
sinon retente en mode sans echec quand tu pourras
-
l'écran restait sur checking startup pendant plus 10mn... et il ne se passait rien
-
comment tu n'as pas reussi ?
-
je n'ai pas réussi avec JRT; je suis donc passé au suivant.
-
ok passe JRT selon ces consignes : http://www.security-helpzone.com/gen-hackman/tutos-canneds/junkware-removal-tool/
puis Malwarebytes selon celles-ci : https://www.security-helpzone.com/2013/04/17/malwarebytes-anti-malware-mbam-detecteur-generaliste-de-menaces/
et enfin OTL pour diagnostiquer et trouver d'autres eventuelles saletés : http://www.security-helpzone.com/gen-hackman/tutos-canneds/otl-2/
-
# AdwCleaner v3.010 - Rapport créé le 29/10/2013 à 00:06:49
# Mis à jour le 20/10/2013 par Xplode
# Système d'exploitation : Windows 7 Home Premium Service Pack 1 (64 bits)
# Nom d'utilisateur : Franck - FRANCK-PC
# Exécuté depuis : C:\Users\Franck\Downloads\adwcleaner (1).exe
# Option : Nettoyer
***** [ Services ] *****
Service Supprimé : CltMngSvc
[#] Service Supprimé : IBUpdaterService
***** [ Fichiers / Dossiers ] *****
Dossier Supprimé : C:\Kreapixel
Dossier Supprimé : C:\Searchprotect
Dossier Supprimé : C:\ProgramData\Babylon
Dossier Supprimé : C:\ProgramData\Partner
Dossier Supprimé : C:\ProgramData\SweetIM
Dossier Supprimé : C:\ProgramData\Tarma Installer
Dossier Supprimé : C:\Program Files (x86)\allsearch
Dossier Supprimé : C:\Program Files (x86)\Conduit
Dossier Supprimé : C:\Program Files (x86)\Iminent
Dossier Supprimé : C:\Program Files (x86)\Searchprotect
Dossier Supprimé : C:\Program Files (x86)\Services x86
Dossier Supprimé : C:\Program Files (x86)\SweetIM
Dossier Supprimé : C:\Program Files (x86)\Vittalia
Dossier Supprimé : C:\Program Files (x86)\Yontoo
Dossier Supprimé : C:\Program Files (x86)\Plus-HD-1.3
Dossier Supprimé : C:\Windows\Installer\{A0C9DF2B-89B5-4483-8983-18A68200F1B4}
Dossier Supprimé : C:\Windows\SysWOW64\ARFC
Dossier Supprimé : C:\Windows\SysWOW64\jmdp
Dossier Supprimé : C:\Windows\SysWOW64\WNLT
Dossier Supprimé : C:\Users\Franck\AppData\Local\Conduit
Dossier Supprimé : C:\Users\Franck\AppData\Local\lollipop
Dossier Supprimé : C:\Users\Franck\AppData\Local\Searchprotect
Dossier Supprimé : C:\Users\Franck\AppData\Local\Services x86
Dossier Supprimé : C:\Users\Franck\AppData\LocalLow\Conduit
Dossier Supprimé : C:\Users\Franck\AppData\LocalLow\SweetIM
Dossier Supprimé : C:\Users\Franck\AppData\LocalLow\Toolbar4
Dossier Supprimé : C:\Users\Franck\AppData\Roaming\Babylon
Dossier Supprimé : C:\Users\Franck\AppData\Roaming\cacaoweb
Dossier Supprimé : C:\Users\Franck\AppData\Roaming\WebPlayerBdd
Dossier Supprimé : C:\Users\Franck\AppData\Roaming\Mozilla\Firefox\Profiles\x10gylbp.default\Smartbar
Dossier Supprimé : C:\Users\Franck\AppData\Roaming\Mozilla\Firefox\Profiles\x10gylbp.default\SweetPacksToolbarData
Dossier Supprimé : C:\Users\Franck\AppData\Roaming\Mozilla\Firefox\Profiles\x10gylbp.default\CT3128284
Dossier Supprimé : C:\Program Files (x86)\Software
Dossier Supprimé : C:\Users\Franck\AppData\Roaming\Mozilla\Firefox\Profiles\x10gylbp.default\Extensions\{8e5025c2-8ea3-430d-80b8-a14151068a6d}
Dossier Supprimé : C:\Users\Franck\AppData\Roaming\Mozilla\Firefox\Profiles\x10gylbp.default\Extensions\cacaoweb@cacaoweb.org
Dossier Supprimé : C:\Users\Franck\AppData\Roaming\Mozilla\Firefox\Profiles\x10gylbp.default\Extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com
Dossier Supprimé : C:\Users\Franck\AppData\Roaming\Mozilla\Firefox\Profiles\x10gylbp.default\Extensions\{8e5025c2-8ea3-430d-80b8-a14151068a6d}
Dossier Supprimé : C:\Users\Franck\AppData\Local\Google\Chrome\User Data\Default\Extensions\cnmdgidklhhnmppphpohildcefnaaflp
Dossier Supprimé : C:\Users\Enfants\AppData\Local\Google\Chrome\User Data\Default\Extensions\niapdbllcanepiiimjjndipklodoedlc
Dossier Supprimé : C:\Users\Enfants\AppData\Local\Google\Chrome\User Data\Default\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj
Dossier Supprimé : C:\Users\Franck\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl
[!] Dossier Supprimé : C:\Users\Franck\AppData\Local\Google\Chrome\User Data\Default\Extensions\cnmdgidklhhnmppphpohildcefnaaflp
Fichier Supprimé : C:\Users\Franck\AppData\Roaming\Mozilla\Firefox\Profiles\x10gylbp.default\Extensions\{EEE6C361-6118-11DC-9C72-001320C79847}.xpi
Fichier Supprimé : C:\Users\Franck\AppData\Roaming\Mozilla\Firefox\Profiles\x10gylbp.default\Extensions\plugin@yontoo.com.xpi
Fichier Supprimé : C:\END
Fichier Supprimé : C:\Windows\System32\dmwu.exe
Fichier Supprimé : C:\Windows\System32\ImhxxpComm.dll
Fichier Supprimé : C:\Users\Franck\AppData\Roaming\Mozilla\Firefox\Profiles\x10gylbp.default\invalidprefs.js
Fichier Supprimé : C:\Users\Franck\AppData\Roaming\Mozilla\Firefox\Profiles\x10gylbp.default\searchplugins\conduit-search.xml
Fichier Supprimé : C:\Users\Franck\AppData\Roaming\Mozilla\Firefox\Profiles\x10gylbp.default\searchplugins\MyStart Search.xml
Fichier Supprimé : C:\Users\Franck\AppData\Roaming\Mozilla\Firefox\Profiles\x10gylbp.default\searchplugins\MyStart.xml
Fichier Supprimé : C:\Users\Enfants\AppData\Roaming\Mozilla\Firefox\Profiles\4cgandh1.default\searchplugins\MyStart.xml
Fichier Supprimé : C:\Users\Franck\AppData\Roaming\Mozilla\Firefox\Profiles\x10gylbp.default\searchplugins\SweetIm.xml
Fichier Supprimé : C:\Users\Franck\AppData\Roaming\Mozilla\Firefox\Profiles\x10gylbp.default\searchplugins\Sweetpacks Search.xml
Fichier Supprimé : C:\Users\Franck\AppData\Roaming\Mozilla\Firefox\Profiles\x10gylbp.default\user.js
Fichier Supprimé : C:\Users\Franck\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_igdhbblpcellaljokkpfhcjlagemhgjl_0.localstorage
Fichier Supprimé : C:\Users\Franck\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_igdhbblpcellaljokkpfhcjlagemhgjl_0.localstorage-journal
Fichier Supprimé : C:\Users\Franck\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_search.conduit.com_0.localstorage-journal
Fichier Supprimé : C:\Windows\Tasks\Plus-HD-1.3-chromeinstaller.job
Fichier Supprimé : C:\Windows\System32\Tasks\Plus-HD-1.3-chromeinstaller
Fichier Supprimé : C:\Windows\Tasks\Plus-HD-1.3-codedownloader.job
Fichier Supprimé : C:\Windows\System32\Tasks\Plus-HD-1.3-codedownloader
Fichier Supprimé : C:\Windows\Tasks\Plus-HD-1.3-enabler.job
Fichier Supprimé : C:\Windows\System32\Tasks\Plus-HD-1.3-enabler
Fichier Supprimé : C:\Windows\Tasks\Plus-HD-1.3-firefoxinstaller.job
Fichier Supprimé : C:\Windows\System32\Tasks\Plus-HD-1.3-firefoxinstaller
Fichier Supprimé : C:\Windows\Tasks\Plus-HD-1.3-updater.job
Fichier Supprimé : C:\Windows\System32\Tasks\Plus-HD-1.3-updater
***** [ Raccourcis ] *****
***** [ Registre ] *****
Valeur Supprimée : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [webbooster@iminent.com]
Valeur Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [cacaoweb]
Clé Supprimée : HKLM\SOFTWARE\Classes\AmiBs.Installer
Clé Supprimée : HKLM\SOFTWARE\Classes\AmiBs.Installer.1
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\YontooIEClient.DLL
Clé Supprimée : HKLM\SOFTWARE\Classes\Applications\ilividsetup.exe
Clé Supprimée : HKLM\SOFTWARE\Classes\MediaPlayer.GraphicsUtils
Clé Supprimée : HKLM\SOFTWARE\Classes\MediaPlayer.GraphicsUtils.1
Clé Supprimée : HKLM\SOFTWARE\Classes\MgMediaPlayer.GifAnimator
Clé Supprimée : HKLM\SOFTWARE\Classes\MgMediaPlayer.GifAnimator.1
Clé Supprimée : HKLM\SOFTWARE\Classes\Prod.cap
Clé Supprimée : HKLM\SOFTWARE\Classes\sim-packages
Clé Supprimée : HKLM\SOFTWARE\Classes\speedupmypc
Clé Supprimée : HKLM\SOFTWARE\Classes\SWEETIE.IEToolbar
Clé Supprimée : HKLM\SOFTWARE\Classes\SWEETIE.IEToolbar.1
Clé Supprimée : HKLM\SOFTWARE\Classes\sweetim_urlsearchhook.toolbarurlsearchhook
Clé Supprimée : HKLM\SOFTWARE\Classes\sweetim_urlsearchhook.toolbarurlsearchhook.1
Clé Supprimée : HKLM\SOFTWARE\Classes\Toolbar3.SearchProviderManager
Clé Supprimée : HKLM\SOFTWARE\Classes\Toolbar3.SearchProviderManager.1
Clé Supprimée : HKLM\SOFTWARE\Classes\Toolbar3.sweetie
Clé Supprimée : HKLM\SOFTWARE\Classes\Toolbar3.sweetie.1
Clé Supprimée : HKLM\SOFTWARE\Classes\YontooIEClient.Api
Clé Supprimée : HKLM\SOFTWARE\Classes\YontooIEClient.Api.1
Clé Supprimée : HKLM\SOFTWARE\Classes\YontooIEClient.Layers
Clé Supprimée : HKLM\SOFTWARE\Classes\YontooIEClient.Layers.1
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\BingBar_RASMANCS
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\boxore_RASAPI32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\boxore_RASMANCS
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\BundleSweetIMSetup_RASAPI32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\BundleSweetIMSetup_RASMANCS
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASAPI32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASMANCS
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\iLividSetup_RASAPI32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\iLividSetup_RASMANCS
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASAPI32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASMANCS
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\IminentSetup_RASAPI32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\IminentSetup_RASMANCS
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\sweetim_rasapi32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\sweetim_rasmancs
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\sweetpacksupdatemanager_rasapi32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\SweetPacksUpdateManager_RASMANCS
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\wajamupdater_rasapi32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\wajamupdater_rasmancs
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\SweetIM.exe
Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [SweetIM]
Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [Sweetpacks Communicator]
Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs [C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgHelperApp.exe]
Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs [C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarProxy.dll]
Clé Supprimée : HKLM\SOFTWARE\Classes\CrossriderApp0027096.BHO
Clé Supprimée : HKLM\SOFTWARE\Classes\CrossriderApp0027096.BHO.1
Clé Supprimée : HKLM\SOFTWARE\Classes\CrossriderApp0027096.Sandbox
Clé Supprimée : HKLM\SOFTWARE\Classes\CrossriderApp0027096.Sandbox.1
Clé Supprimée : HKLM\SOFTWARE\Classes\CrossriderApp0031257.BHO
Clé Supprimée : HKLM\SOFTWARE\Classes\CrossriderApp0031257.BHO.1
Clé Supprimée : HKLM\SOFTWARE\Classes\CrossriderApp0031257.Sandbox
Clé Supprimée : HKLM\SOFTWARE\Classes\CrossriderApp0031257.Sandbox.1
Clé Supprimée : HKLM\SOFTWARE\Classes\TBSB02681.IEToolbar
Clé Supprimée : HKLM\SOFTWARE\Classes\TBSB02681.IEToolbar.1
Clé Supprimée : HKLM\SOFTWARE\Classes\TBSB02681.TBSB02681
Clé Supprimée : HKLM\SOFTWARE\Classes\TBSB02681.TBSB02681.3
Clé Supprimée : HKLM\SOFTWARE\Classes\Toolbar3.TBSB02681
Clé Supprimée : HKLM\SOFTWARE\Classes\Toolbar3.TBSB02681.1
Clé Supprimée : HKLM\SOFTWARE\Classes\Toolbar.CT3128284
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{CFDAFE39-20CE-451D-BD45-A37452F39CF0}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{0F6E720A-1A6B-40E1-A294-1D4D19F156C8}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{7E84186E-B5DE-4226-8A66-6E49C6B511B4}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{82AC53B4-164C-4B07-A016-437A8388B81A}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{8E5025C2-8EA3-430D-80B8-A14151068A6D}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{99066096-8989-4612-841F-621A01D54AD7}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{A4A0CB15-8465-4F58-A7E5-73084EA2A064}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{A6FEED89-3BCD-4D19-9DC2-3E613A80A2A4}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{B24D9234-CFC5-46D2-95C5-0DE695A7895E}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{CDB982ED-F9D6-4E3B-B94B-96F705D35AD1}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{D433A9D0-8267-40CB-8AD5-24F22FA5373F}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{EEE6C35B-6118-11DC-9C72-001320C79847}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{EEE6C35C-6118-11DC-9C72-001320C79847}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{EEE6C35D-6118-11DC-9C72-001320C79847}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{FE9271F2-6EFD-44B0-A826-84C829536E93}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110211701196}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110311121157}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{0FA32667-9A8A-4E9C-902F-CA3323180003}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{6B458F62-592F-4B25-8967-E6A350A59328}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{A439801C-961D-452C-AB42-7848E9CBD289}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D54C859C-6066-4F31-8FE0-2AAEDCAE67D7}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{EEE6C358-6118-11DC-9C72-001320C79847}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{EEE6C359-6118-11DC-9C72-001320C79847}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{EEE6C35A-6118-11DC-9C72-001320C79847}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{F4EBB1E2-21F3-4786-8CF4-16EC5925867F}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{FCC9CDD3-EFFF-11D1-A9F0-00A0244AC403}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550255705596}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550355125557}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660266706696}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660366126657}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{4D3B167E-5FD8-4276-8FD7-9DF19C1E4D19}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{D372567D-67C1-4B29-B3F0-159B52B3E967}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{EEE6C35E-6118-11DC-9C72-001320C79847}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{EEE6C35F-6118-11DC-9C72-001320C79847}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440244704496}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440344124457}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0F6E720A-1A6B-40E1-A294-1D4D19F156C8}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5025C2-8EA3-430D-80B8-A14151068A6D}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B24D9234-CFC5-46D2-95C5-0DE695A7895E}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110211701196}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311121157}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8E5025C2-8EA3-430D-80B8-A14151068A6D}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{B24D9234-CFC5-46D2-95C5-0DE695A7895E}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{CDB982ED-F9D6-4E3B-B94B-96F705D35AD1}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35B-6118-11DC-9C72-001320C79847}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35C-6118-11DC-9C72-001320C79847}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110211701196}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{8E5025C2-8EA3-430D-80B8-A14151068A6D}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{B24D9234-CFC5-46D2-95C5-0DE695A7895E}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{CDB982ED-F9D6-4E3B-B94B-96F705D35AD1}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35B-6118-11DC-9C72-001320C79847}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35C-6118-11DC-9C72-001320C79847}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110211701196}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110211701196}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110311121157}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48D2-9061-8BBD4899EB08}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EEE6C367-6118-11DC-9C72-001320C79847}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{11111111-1111-1111-1111-110211701196}
Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{8E5025C2-8EA3-430D-80B8-A14151068A6D}]
Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{CDB982ED-F9D6-4E3B-B94B-96F705D35AD1}]
Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{EEE6C35B-6118-11DC-9C72-001320C79847}]
Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{8E5025C2-8EA3-430D-80B8-A14151068A6D}]
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110311121157}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{0FA32667-9A8A-4E9C-902F-CA3323180003}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{6B458F62-592F-4B25-8967-E6A350A59328}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{EEE6C358-6118-11DC-9C72-001320C79847}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{EEE6C359-6118-11DC-9C72-001320C79847}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{EEE6C35A-6118-11DC-9C72-001320C79847}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{FCC9CDD3-EFFF-11D1-A9F0-00A0244AC403}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550255705596}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550355125557}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660266706696}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660366126657}
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311121157}
Clé Supprimée : HKCU\Software\Conduit
Clé Supprimée : HKCU\Software\IM
Clé Supprimée : HKCU\Software\wnlt
Clé Supprimée : HKCU\Software\AppDataLow\Software\smartbar
Clé Supprimée : HKLM\Software\PIP
Clé Supprimée : HKLM\Software\Services x86
Clé Supprimée : HKLM\Software\Plus-HD-1.3
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{77236F9C-987C-40EC-832B-5BD6181E4846}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A0C9DF2B-89B5-4483-8983-18A68200F1B4}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{c3e85ee9-5892-4142-b537-bceb3dac4c3d}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\allsearch
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchTheWebARP
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Services x86
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Vittalia
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\wnlt
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Plus-HD-1.3
Clé Supprimée : [x64] HKLM\SOFTWARE\Tarma Installer
Clé Supprimée : [x64] HKLM\SOFTWARE\wnlt
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}
Donnée Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC32Loader.dll
Donnée Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll
Clé Supprimée : HKLM\Software\Classes\Installer\Features\9EE58E3C298524145B73CBBED3CAC4D3
Clé Supprimée : HKLM\Software\Classes\Installer\Features\B2FD9C0A5B9838449838816A28001F4B
Clé Supprimée : HKLM\Software\Classes\Installer\Products\9EE58E3C298524145B73CBBED3CAC4D3
Clé Supprimée : HKLM\Software\Classes\Installer\Products\B2FD9C0A5B9838449838816A28001F4B
***** [ Navigateurs ] *****
-\\ Internet Explorer v10.0.9200.16720
Paramètre Restauré : HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls [Tabs]
-\\ Mozilla Firefox v13.0.1 (fr)
[ Fichier : C:\Users\Franck\AppData\Roaming\Mozilla\Firefox\Profiles\x10gylbp.default\prefs.js ]
Ligne Supprimée : user_pref("CT3128284.1000082.isDisplayHidden", "true");
Ligne Supprimée : user_pref("CT3128284.1000082.isPlayDisplay", "true");
Ligne Supprimée : user_pref("CT3128284.1000082.state", "{\"state\":\"stopped\",\"text\":\"RMC\",\"description\":\"RMC\",\"url\":\"hxxp://vipicecast.yacast.net/rmc\"}");
Ligne Supprimée : user_pref("CT3128284.1000234.TWC_TMP_city", "PARIS");
Ligne Supprimée : user_pref("CT3128284.1000234.TWC_TMP_country", "FR");
Ligne Supprimée : user_pref("CT3128284.1000234.TWC_country", "FRANCE");
Ligne Supprimée : user_pref("CT3128284.1000234.TWC_locId", "FRXX0076");
Ligne Supprimée : user_pref("CT3128284.1000234.TWC_location", "Paris, France");
Ligne Supprimée : user_pref("CT3128284.1000234.TWC_region", "FR");
Ligne Supprimée : user_pref("CT3128284.1000234.TWC_temp_dis", "c");
Ligne Supprimée : user_pref("CT3128284.1000234.TWC_wind_dis", "kmh");
Ligne Supprimée : user_pref("CT3128284.1000234.weatherData", "{\"icon\":\"32.png\",\"temperature\":\"20°C\",\"temperatureClear\":\"20°C\",\"highTemperature\":\"21°C\",\"lowTemperature\":\"11°C\",\"feelsLike\":\"20°C\",[...]
Ligne Supprimée : user_pref("CT3128284.3128284a129638404769606799000000paramsGK0.enc", "eyJ1cGRhdGVSZXFUaW1lIjoxMzc4NjQyNzE2MTk5LCJ1cGRhdGVSZXNwVGltZSI6MTM3ODY0MjcxNjUzOSwiZGF0YSI6eyJzZXR0aW5ncyI6eyJpY29uIjoiaHR0cDovL3[...]
Ligne Supprimée : user_pref("CT3128284.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
Ligne Supprimée : user_pref("CT3128284.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"true\"}");
Ligne Supprimée : user_pref("CT3128284.FirstTime", "true");
Ligne Supprimée : user_pref("CT3128284.FirstTimeFF3", "true");
Ligne Supprimée : user_pref("CT3128284.LoginRevertSettingsEnabled", true);
Ligne Supprimée : user_pref("CT3128284.RSS_Pub_Config.enc", "eyJzZXR0aW5ncyI6eyJpY29uIjoiaHR0cDovL3N0b3JhZ2UuY29uZHVpdC5jb20vYmFua2ltYWdlcy9pY29uc0dhbGxlcnkvMjQvNDY2OTM4MDYzMzY2NDUyNjYxOS5wbmciLCJjb21wb25lbnRJZCI6IjEyO[...]
Ligne Supprimée : user_pref("CT3128284.RSSapp3128284a129638404769606799000000embeddedVersion.enc", "Mi40LjA=");
Ligne Supprimée : user_pref("CT3128284.RSSapp3128284a129638404769606799000000lastReportTime.enc", "MTM3ODY0MjcxNjU2MSA=");
Ligne Supprimée : user_pref("CT3128284.RSSapp3128284a129638404769606799000000newFeeds.enc", "bmV3RmVlZHM=");
Ligne Supprimée : user_pref("CT3128284.RevertSettingsEnabled", true);
Ligne Supprimée : user_pref("CT3128284.SearchAppState.enc", "Mg==");
Ligne Supprimée : user_pref("CT3128284.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?SSPV=SP_FFWSP01&ctid=CT3128284&SearchSource=2&CUI=SB_CUI&q=");
Ligne Supprimée : user_pref("CT3128284.UserID", "UN56285467426647834");
Ligne Supprimée : user_pref("CT3128284.addressBarTakeOverEnabledInHidden", "true");
Ligne Supprimée : user_pref("CT3128284.browser.search.defaultthis.engineName", true);
Ligne Supprimée : user_pref("CT3128284.countryCode", "FR");
Ligne Supprimée : user_pref("CT3128284.defaultSearch", "true");
Ligne Supprimée : user_pref("CT3128284.enableAlerts", "always");
Ligne Supprimée : user_pref("CT3128284.enableFix404ByUser", "TRUE");
Ligne Supprimée : user_pref("CT3128284.enableSearchFromAddressBar", "true");
Ligne Supprimée : user_pref("CT3128284.firstTimeDialogOpened", "true");
Ligne Supprimée : user_pref("CT3128284.fixPageNotFoundError", "true");
Ligne Supprimée : user_pref("CT3128284.fixPageNotFoundErrorByUser", "true");
Ligne Supprimée : user_pref("CT3128284.fixPageNotFoundErrorInHidden", "true");
Ligne Supprimée : user_pref("CT3128284.fixUrls", true);
Ligne Supprimée : user_pref("CT3128284.fullUserID", "UN56285467426647834.UP.20130908142551");
Ligne Supprimée : user_pref("CT3128284.installId", "conduitinstaller.exe");
Ligne Supprimée : user_pref("CT3128284.installType", "conduitnsisintegration");
Ligne Supprimée : user_pref("CT3128284.isCheckedStartAsHidden", true);
Ligne Supprimée : user_pref("CT3128284.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
Ligne Supprimée : user_pref("CT3128284.isFirstTimeToolbarLoading", "false");
Ligne Supprimée : user_pref("CT3128284.isPerformedSmartBarTransition", "true");
Ligne Supprimée : user_pref("CT3128284.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
Ligne Supprimée : user_pref("CT3128284.keyword", true);
Ligne Supprimée : user_pref("CT3128284.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"hxxp://search.conduit.com/?ctid=CT3128284&octid=CT3128284&SearchSource=15&CUI=UN56285467426647834&SSPV=&Lay=1&UM=\"}");
Ligne Supprimée : user_pref("CT3128284.lastVersion", "10.20.0.513");
Ligne Supprimée : user_pref("CT3128284.mam_gk_appStateReportTime.enc", "MTM3ODY0MjcyNTU3MA==");
Ligne Supprimée : user_pref("CT3128284.mam_gk_appState_CouponBuddy.enc", "b2Zm");
Ligne Supprimée : user_pref("CT3128284.mam_gk_appState_Easytobook.enc", "b2Zm");
Ligne Supprimée : user_pref("CT3128284.mam_gk_appState_Easytobook_targeted.enc", "b2Zm");
Ligne Supprimée : user_pref("CT3128284.mam_gk_appState_PriceGong.enc", "b2Zm");
Ligne Supprimée : user_pref("CT3128284.mam_gk_appState_WindowShopper.enc", "b2Zm");
Ligne Supprimée : user_pref("CT3128284.mam_gk_appsData.enc", "eyJhcHBzIjpbeyJpZCI6IlByaWNlR29uZyIsInVybCI6Imh0dHA6Ly9wcmljZWdvbmcuY29uZHVpdGFwcHMuY29tL01BTS92MS9odG1sX2NvbXAuaHRtbCIsInNjcmlwdFVybCI6bnVsbCwib3B0aW9uc0Rp[...]
Ligne Supprimée : user_pref("CT3128284.mam_gk_appsDefaultEnabled.enc", "ZmFsc2U=");
Ligne Supprimée : user_pref("CT3128284.mam_gk_calledSetupService.enc", "MQ==");
Ligne Supprimée : user_pref("CT3128284.mam_gk_configuration.enc", "eyJjb25maWd1cmF0aW9uIjpbeyJpZCI6IkVhc3l0b2Jvb2tfdGFyZ2V0ZWQiLCJjcml0ZXJpYXMiOlt7ImNyaXRlcmlhSWQiOiIzOThmZjhkMS02YzRmLTQ5OTAtYWM5Ny03NTNlYzkxYmI0YzYiLCJ[...]
Ligne Supprimée : user_pref("CT3128284.mam_gk_currentVersion.enc", "MS4xMC40LjA=");
Ligne Supprimée : user_pref("CT3128284.mam_gk_eventsCache.enc", "eyJmZDFlODdmNS1lMTA0LTQ2MmMtYThmMS03ZDNmMzZlNzJmYWUiOnsidG9waWMiOiJzZW5kVXNhZ2UiLCJkYXRhIjp7ImNhdGVnb3J5IjoiV2VsY29tZSIsImFjdGlvbiI6IlZpZXciLCJsYWJlbCI6I[...]
Ligne Supprimée : user_pref("CT3128284.mam_gk_existingUsersRecoveryDone.enc", "MQ==");
Ligne Supprimée : user_pref("CT3128284.mam_gk_first_time.enc", "MQ==");
Ligne Supprimée : user_pref("CT3128284.mam_gk_gadgetOpen.enc", "MA==");
Ligne Supprimée : user_pref("CT3128284.mam_gk_lastLoginTime.enc", "MTM3ODY0MjcxODgyNQ==");
Ligne Supprimée : user_pref("CT3128284.mam_gk_localization.enc", "eyJkbWJveDEiOnsiVGV4dCI6IlByb21vXG5kdSBqb3VyIn0sImRtYm94MiI6eyJUZXh0IjoiTGl2cmFpc29uXG5ncmF0dWl0ZSJ9LCJkbWJ1bGxldDEiOnsiVGV4dCI6IkVjb25vbWlzZXogZGUgbOKA[...]
Ligne Supprimée : user_pref("CT3128284.mam_gk_mamEnabled.enc", "ZmFsc2U=");
Ligne Supprimée : user_pref("CT3128284.mam_gk_new_welcome_experience.enc", "MQ==");
Ligne Supprimée : user_pref("CT3128284.mam_gk_pgUnloadedOnce.enc", "dHJ1ZQ==");
Ligne Supprimée : user_pref("CT3128284.mam_gk_settings1.10.4.0.enc", "eyJTdGF0dXMiOiJzdWNjZWVkZWQiLCJEYXRhIjp7ImludGVydmFsIjoyNDAsInN0YW1wIjoiNDZfMCIsImlzVGVzdCI6dHJ1ZSwiVXNlckNvdW50cnlDb2RlIjoiRlIiLCJpc1dlbGNvbWVFeHBl[...]
Ligne Supprimée : user_pref("CT3128284.mam_gk_showWelcomeGadget.enc", "dHJ1ZQ==");
Ligne Supprimée : user_pref("CT3128284.mam_gk_userId.enc", "NGUwZjhjMTctNmVmZi00MTJmLTk3MzAtNzBjMDE0YjE2MzNi");
Ligne Supprimée : user_pref("CT3128284.mam_gk_user_approval_interacted.enc", "MA==");
Ligne Supprimée : user_pref("CT3128284.mam_gk_welcomeDialogMode.enc", "MA==");
Ligne Supprimée : user_pref("CT3128284.migrateAppsAndComponents", true);
Ligne Supprimée : user_pref("CT3128284.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"hxxp%3A%2F%2Fwww.sweetpacks-search.com%2F%3Fbarid%3D%26src%3D10%26\",\"EB_MAIN_FRAME_TITLE\":\"\",\"EB_TO[...]
Ligne Supprimée : user_pref("CT3128284.newSettings", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
Ligne Supprimée : user_pref("CT3128284.openThankYouPage", "false");
Ligne Supprimée : user_pref("CT3128284.openUninstallPage", "true");
Ligne Supprimée : user_pref("CT3128284.originalSearchAddressUrl", "hxxp://search.conduit.com/ResultsExt.aspx?SSPV=SP_FFWSP01&ctid=CT3128284&SearchSource=2&CUI=SB_CUI&q=");
Ligne Supprimée : user_pref("CT3128284.revertSettingsEnabled", "false");
Ligne Supprimée : user_pref("CT3128284.search.searchAppId", "129638404645388048");
Ligne Supprimée : user_pref("CT3128284.search.searchCount", "0");
Ligne Supprimée : user_pref("CT3128284.searchInNewTabEnabledByUser", "true");
Ligne Supprimée : user_pref("CT3128284.searchInNewTabEnabledInHidden", "true");
Ligne Supprimée : user_pref("CT3128284.searchSuggestEnabledByUser", "true");
Ligne Supprimée : user_pref("CT3128284.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
Ligne Supprimée : user_pref("CT3128284.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
Ligne Supprimée : user_pref("CT3128284.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\"}");
Ligne Supprimée : user_pref("CT3128284.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT3128284\"}");
Ligne Supprimée : user_pref("CT3128284.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://01NETcom.OurToolbar.com//xpi\"}");
Ligne Supprimée : user_pref("CT3128284.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"01NET.com \"}");
Ligne Supprimée : user_pref("CT3128284.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");
Ligne Supprimée : user_pref("CT3128284.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data\":\"2\"}");
Ligne Supprimée : user_pref("CT3128284.serviceLayer_services_Configuration_lastUpdate", "1383001307861");
Ligne Supprimée : user_pref("CT3128284.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1378642832043");
Ligne Supprimée : user_pref("CT3128284.serviceLayer_services_appsMetadata_lastUpdate", "1378642720408");
Ligne Supprimée : user_pref("CT3128284.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1378642831355");
Ligne Supprimée : user_pref("CT3128284.serviceLayer_services_location_lastUpdate", "1378642832143");
Ligne Supprimée : user_pref("CT3128284.serviceLayer_services_login_10.13.511.4_lastUpdate", "1371378106470");
Ligne Supprimée : user_pref("CT3128284.serviceLayer_services_login_10.16.2.509_lastUpdate", "1378642831260");
Ligne Supprimée : user_pref("CT3128284.serviceLayer_services_login_10.19.2.505_lastUpdate", "1379239760538");
Ligne Supprimée : user_pref("CT3128284.serviceLayer_services_login_10.20.0.513_lastUpdate", "1383001308077");
Ligne Supprimée : user_pref("CT3128284.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1378642831445");
Ligne Supprimée : user_pref("CT3128284.serviceLayer_services_searchAPI_lastUpdate", "1383001307234");
Ligne Supprimée : user_pref("CT3128284.serviceLayer_services_serviceMap_lastUpdate", "1383001307773");
Ligne Supprimée : user_pref("CT3128284.serviceLayer_services_toolbarContextMenu_lastUpdate", "1378642831160");
Ligne Supprimée : user_pref("CT3128284.serviceLayer_services_toolbarSettings_lastUpdate", "1383001307349");
Ligne Supprimée : user_pref("CT3128284.serviceLayer_services_translation_lastUpdate", "1383001307316");
Ligne Supprimée : user_pref("CT3128284.settingsINI", true);
Ligne Supprimée : user_pref("CT3128284.shouldFirstTimeDialog", "false");
Ligne Supprimée : user_pref("CT3128284.showToolbarPermission", "false");
Ligne Supprimée : user_pref("CT3128284.smartbar.CTID", "CT3128284");
Ligne Supprimée : user_pref("CT3128284.smartbar.Uninstall", "0");
Ligne Supprimée : user_pref("CT3128284.smartbar.homepage", true);
Ligne Supprimée : user_pref("CT3128284.smartbar.toolbarName", "01NET.com ");
Ligne Supprimée : user_pref("CT3128284.toolbarBornServerTime", "11-3-2013");
Ligne Supprimée : user_pref("CT3128284.toolbarCurrentServerTime", "29-10-2013");
Ligne Supprimée : user_pref("CT3128284.toolbarLoginClientTime", "Sat Jun 29 2013 11:44:36 GMT+0200");
Ligne Supprimée : user_pref("CT3128284.twitter_v1.8.0_twitter_app_open_t_f.enc", "ZmFsc2U=");
Ligne Supprimée : user_pref("CT3128284_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1383001305314,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");
Ligne Supprimée : user_pref("Smartbar.ConduitHomepagesList", "hxxp://search.conduit.com/?ctid=CT3128284&octid=CT3128284&SearchSource=61&CUI=SB_CUI&UP=SP55EBA8E4-C698-4FB3-8BE4-E4E93AB75873&SSPV=SP_FFWSP01");
Ligne Supprimée : user_pref("Smartbar.ConduitSearchEngineList", "01NET.com Customized Web Search");
Ligne Supprimée : user_pref("Smartbar.ConduitSearchUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?SSPV=SP_FFWSP01&ctid=CT3128284&SearchSource=2&CUI=SB_CUI&q=");
Ligne Supprimée : user_pref("Smartbar.keywordURLSelectedCTID", "CT3128284");
Ligne Supprimée : user_pref("browser.search.defaultenginename", "01NET.com Customized Web Search");
Ligne Supprimée : user_pref("browser.search.selectedEngine", "Sweetpacks Search");
Ligne Supprimée : user_pref("browser.startup.homepage", "hxxp://www.sweetpacks-search.com/?barid=&src=10&");
Ligne Supprimée : user_pref("extensions.a217e8200a3b343dfb9518ec01d483d7fb98c68091f3f41a1bb1c692cf84781e9com27096.27096.internaldb.Resources_meta.value", "%7B%22cssSlider.css%22%3A%7B%22id%22%3A341894%2C%22ver%22%3A80%[...]
Ligne Supprimée : user_pref("extensions.a217e8200a3b343dfb9518ec01d483d7fb98c68091f3f41a1bb1c692cf84781e9com27096.27096.internaldb.Resources_queue.value", "%7B%22cssSlider.css%22%3A%7B%22id%22%3A341894%2C%22ver%22%3A80[...]
Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.InstallationThankYouPage", false);
Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.InstallationTime", 1382999844);
Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.active", true);
Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.addressbar", "NA");
Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.addressbarenhanced", "");
Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.asyncdb_dbWasSet", true);
Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.asyncinternaldb_dbWasSet", true);
Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.backgroundver", 2);
Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.certdomaininstaller", "");
Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.changeprevious", false);
Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.cookie.InstallationTime.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.cookie.InstallationTime.value", "1382999844");
Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.description", "Turn YouTube videos to High Definition by default");
Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.domain", "");
Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.enablesearch", false);
Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.homepage", "");
Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.iframe", false);
Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.internaldb.InstallerIdentifiers.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.internaldb.InstallerIdentifiers.value", "%7B%22installer_bic%22%3A%225C2D35F8EDAF4A6D98BF422F2A193[...]
Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.internaldb.Resources_appVer.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.internaldb.Resources_appVer.value", "82");
Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.internaldb.Resources_lastVersion.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.internaldb.Resources_lastVersion.value", "1");
Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.internaldb.Resources_meta.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.internaldb.Resources_meta.value", "%7B%7D");
Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.internaldb.Resources_nextCheck.expiration", "Tue Oct 29 2013 06:01:49 GMT+0100");
Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.internaldb.Resources_nextCheck.value", "true");
Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.internaldb.Resources_queue.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.internaldb.Resources_queue.value", "%7B%7D");
Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.internaldb.installer.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.internaldb.installer.value", "%7B%22InstallerIdentifiers%22%3A%7B%22installer_bic%22%3A%225C2D35F8[...]
Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.lastDailyReport", "1382999843877");
Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.lastUpdate", "1382999843621");
Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.manifesturl", "");
Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.name", "Plus-HD-1.3");
Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.newtab", "");
Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.opensearch", "");
Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.pluginsurl", "hxxps://w9u6a2p6.ssl.hwcdn.net/plugin/apps/31257/plugins/092/ff/plugins.json");
Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.pluginsversion", 76);
Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.publisher", "Plus HD");
Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.searchstatus", 0);
Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.setnewtab", false);
Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.thankyou", "");
Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.updateinterval", 360);
Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.ver", 82);
Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.apps", "31257");
Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.bic", "13e03258a959577af45b85a018d0873e");
Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.cid", 31257);
Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.firstrun", false);
Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.hadappinstalled", true);
Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.installationdate", 1382999830);
Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.modetype", "production");
Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.reportInstall", true);
Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.statsDailyCounter", 1);
Ligne Supprimée : user_pref("extensions.crossrider.bic", "13e03258a959577af45b85a018d0873e");
Ligne Supprimée : user_pref("extentions.y2layers.defaultEnableAppsList", "DropDownDeals,buzzdock,YontooNewOffers");
Ligne Supprimée : user_pref("extentions.y2layers.installId", "e1ef4eac-0997-4605-847c-d4bae6115c58");
Ligne Supprimée : user_pref("keyword.URL", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3128284&SearchSource=2&CUI=UN56285467426647834&UM=&q=");
Ligne Supprimée : user_pref("smartbar.addressBarOwnerCTID", "CT3128284");
Ligne Supprimée : user_pref("smartbar.conduitHomepageList", "hxxp://search.conduit.com/?SSPV=SP_FFWSP01&ctid=CT3128284&SearchSource=13&CUI=SB_CUI,hxxp://search.conduit.com/?ctid=CT3128284&octid=CT3128284&SearchSource=6[...]
Ligne Supprimée : user_pref("smartbar.conduitSearchAddressUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?SSPV=SP_FFWSP01&ctid=CT3128284&SearchSource=2&CUI=SB_CUI&q=,hxxp://search.conduit.com/ResultsExt.aspx?ctid=[...]
Ligne Supprimée : user_pref("smartbar.machineId", "ZGGL8OAUP9HE9HWF1+AE6Y4T2YYVIGO+XGMQXYGLFGCZT/+1CRQIR47SQELW2YYDOYZSFK37EEJ6B+1FQXUWJQ");
Ligne Supprimée : user_pref("smartbar.originalHomepage", "chrome://branding/locale/browserconfig.properties");
Ligne Supprimée : user_pref("smartbar.originalSearchAddressUrl", "");
Ligne Supprimée : user_pref("smartbar.originalSearchEngine", false);
Ligne Supprimée : user_pref("sweetim.toolbar.RevertDialog.enable", "false");
Ligne Supprimée : user_pref("sweetim.toolbar.UserSelectedSaveSettings", "true");
Ligne Supprimée : user_pref("sweetim.toolbar.Visibility.VisibilityGuardLastUnHide", "0");
Ligne Supprimée : user_pref("sweetim.toolbar.Visibility.enable", "true");
Ligne Supprimée : user_pref("sweetim.toolbar.Visibility.intervaldays", "7");
Ligne Supprimée : user_pref("sweetim.toolbar.cda.DisableOveride.enable", "true");
Ligne Supprimée : user_pref("sweetim.toolbar.cda.HideOveride.enable", "true");
Ligne Supprimée : user_pref("sweetim.toolbar.cda.RemoveOveride.enable", "true");
Ligne Supprimée : user_pref("sweetim.toolbar.cda.returnValue", "hide");
Ligne Supprimée : user_pref("sweetim.toolbar.dialogs.0.enable", "true");
Ligne Supprimée : user_pref("sweetim.toolbar.dialogs.0.handler", "chrome://sim_toolbar_package/content/optionsdialog-handler.js");
Ligne Supprimée : user_pref("sweetim.toolbar.dialogs.0.height", "335");
Ligne Supprimée : user_pref("sweetim.toolbar.dialogs.0.id", "id_options_dialog");
Ligne Supprimée : user_pref("sweetim.toolbar.dialogs.0.title", "$string.config.label;");
Ligne Supprimée : user_pref("sweetim.toolbar.dialogs.0.url", "hxxp://www.sweetim.com/simffbar/options_remote_ff.asp?lang=$locale_id;&toolbar_version=$ITEM_VERSION;&crg=$cargo;");
Ligne Supprimée : user_pref("sweetim.toolbar.dialogs.0.width", "761");
Ligne Supprimée : user_pref("sweetim.toolbar.dialogs.1.enable", "true");
Ligne Supprimée : user_pref("sweetim.toolbar.dialogs.1.handler", "chrome://sim_toolbar_package/content/exampledialog-handler.js");
Ligne Supprimée : user_pref("sweetim.toolbar.dialogs.1.height", "300");
Ligne Supprimée : user_pref("sweetim.toolbar.dialogs.1.id", "id_example_dialog");
Ligne Supprimée : user_pref("sweetim.toolbar.dialogs.1.title", "Example (unit-test) dialog");
Ligne Supprimée : user_pref("sweetim.toolbar.dialogs.1.url", "chrome://sim_toolbar_package/content/exampledialog.html");
Ligne Supprimée : user_pref("sweetim.toolbar.dialogs.1.width", "500");
Ligne Supprimée : user_pref("sweetim.toolbar.dialogs.2.enable", "true");
Ligne Supprimée : user_pref("sweetim.toolbar.dialogs.2.handler", "chrome://sim_toolbar_package/content/cdadialog-handler.js");
Ligne Supprimée : user_pref("sweetim.toolbar.dialogs.2.height", "150");
Ligne Supprimée : user_pref("sweetim.toolbar.dialogs.2.id", "id_dialog_hide_disable_remove");
Ligne Supprimée : user_pref("sweetim.toolbar.dialogs.2.title", "Option Dialog");
Ligne Supprimée : user_pref("sweetim.toolbar.dialogs.2.url", "hxxp://www.sweetim.com/simffbar/simcdadialog.asp");
Ligne Supprimée : user_pref("sweetim.toolbar.dialogs.2.width", "530");
Ligne Supprimée : user_pref("sweetim.toolbar.dnscatch.domain-blacklist", ".*.sweetim.com/.*|.*.facebook.com/.*|.*.google.com/.*|.*.google.co.in/.*|.*.google.com.br/.*|.*.google.es/.*|.*.youtube.com/.*|.*.yahoo.com/.*|.[...]
Ligne Supprimée : user_pref("sweetim.toolbar.highlight.colors", "#FFFF00,#00FFE4,#5AFF00,#0087FF,#FFCC00,#FF00F0");
Ligne Supprimée : user_pref("sweetim.toolbar.keywordUrlGuard.enable", "false");
Ligne Supprimée : user_pref("sweetim.toolbar.logger.ConsoleHandler.MinReportLevel", "7");
Ligne Supprimée : user_pref("sweetim.toolbar.logger.FileHandler.FileName", "ff-toolbar.log");
Ligne Supprimée : user_pref("sweetim.toolbar.logger.FileHandler.MaxFileSize", "200000");
Ligne Supprimée : user_pref("sweetim.toolbar.logger.FileHandler.MinReportLevel", "7");
Ligne Supprimée : user_pref("sweetim.toolbar.mode.debug", "false");
Ligne Supprimée : user_pref("sweetim.toolbar.newtab.created", "false");
Ligne Supprimée : user_pref("sweetim.toolbar.newtab.enable", "false");
Ligne Supprimée : user_pref("sweetim.toolbar.previous.keyword.URL", "");
Ligne Supprimée : user_pref("sweetim.toolbar.rc.url", "hxxp://www.sweetim.com/simffbar/rc.html?toolbar_version=$ITEM_VERSION;&crg=$cargo;");
Ligne Supprimée : user_pref("sweetim.toolbar.scripts.0.addcontextdiv", "true");
Ligne Supprimée : user_pref("sweetim.toolbar.scripts.0.callback", "simVerification");
Ligne Supprimée : user_pref("sweetim.toolbar.scripts.0.domain-blacklist", "");
Ligne Supprimée : user_pref("sweetim.toolbar.scripts.0.domain-whitelist", "hxxp://(www.|apps.)?facebook\\.com.*");
Ligne Supprimée : user_pref("sweetim.toolbar.scripts.0.elementid", "id_script_sim_fb");
Ligne Supprimée : user_pref("sweetim.toolbar.scripts.0.enable", "false");
Ligne Supprimée : user_pref("sweetim.toolbar.scripts.0.id", "id_script_fb");
Ligne Supprimée : user_pref("sweetim.toolbar.scripts.0.url", "hxxp://sc.sweetim.com/apps/in/fb/infb.js");
Ligne Supprimée : user_pref("sweetim.toolbar.scripts.1.addcontextdiv", "true");
Ligne Supprimée : user_pref("sweetim.toolbar.scripts.1.callback", "simVerification");
Ligne Supprimée : user_pref("sweetim.toolbar.scripts.1.domain-blacklist", "");
Ligne Supprimée : user_pref("sweetim.toolbar.scripts.1.domain-whitelist", "hxxps://(www.|apps.)?facebook\\.com.*");
Ligne Supprimée : user_pref("sweetim.toolbar.scripts.1.elementid", "id_script_sim_fb");
Ligne Supprimée : user_pref("sweetim.toolbar.scripts.1.enable", "false");
Ligne Supprimée : user_pref("sweetim.toolbar.scripts.1.id", "id_script_fb_hxxpS");
Ligne Supprimée : user_pref("sweetim.toolbar.scripts.1.url", "hxxps://sc.sweetim.com/apps/in/fb/infb.js");
Ligne Supprimée : user_pref("sweetim.toolbar.scripts.2.addcontextdiv", "false");
Ligne Supprimée : user_pref("sweetim.toolbar.scripts.2.callback", "");
Ligne Supprimée : user_pref("sweetim.toolbar.scripts.2.domain-blacklist", ".*.google..*|.*.bing..*|.*.live..*|.*.msn..*|.*.yahoo..*|.*.youtube.com.*|.*ask.com.*|.*.sweetim.com.*");
Ligne Supprimée : user_pref("sweetim.toolbar.scripts.2.domain-whitelist", "");
Ligne Supprimée : user_pref("sweetim.toolbar.scripts.2.elementid", "id_predict_include_script");
Ligne Supprimée : user_pref("sweetim.toolbar.scripts.2.enable", "false");
Ligne Supprimée : user_pref("sweetim.toolbar.scripts.2.id", "id_script_prad");
Ligne Supprimée : user_pref("sweetim.toolbar.scripts.2.url", "hxxp://cdn1.certified-apps.com/scripts/shared/enable.js?si=3104&tid=chff1"); < -
c'est le rapport de nettoyage qu il me faut si tu lis bien
-
salut ce n'et pas un virus c'est un adware , et les antivirus ne detectent pas ce genre de petits trucs malfaisants :D
Télécharge et enregistre (lien direct) http://general-changelog-team.fr/fr/downloads/finish/20-outils-de-xplode/2-adwcleaner ADWCleaner sur ton bureau :
Lance le,(Pour vista/7/8 => clic droit "executer en tant qu'administrateur") puis clique sur scan
une fois fait , clique sur nettoyer et poste C:\Adwcleaner[Sx].txt
