Malwarebytes a détecté 2 "Rogue.Multiple"
Bonjour,
j'ai effectué un scan avec Mbam parce que j'avais une "toolbar", j'ai donc réinitialisé Firefox et apres le scan, mbam m'a indiqué la présence de 2 Rogue.Multiple .
J'ai mis les fichiers en quarantaine et je tiens le rapport mbam à votre disposition .
Merci de m'indiquer la démarche à suivre pour m'en débarrasser .
Config: Windows 8.1 64 bit
j'ai effectué un scan avec Mbam parce que j'avais une "toolbar", j'ai donc réinitialisé Firefox et apres le scan, mbam m'a indiqué la présence de 2 Rogue.Multiple .
J'ai mis les fichiers en quarantaine et je tiens le rapport mbam à votre disposition .
Merci de m'indiquer la démarche à suivre pour m'en débarrasser .
Config: Windows 8.1 64 bit
17 réponses
-
ok,
Télécharge Delfix sur ton bureau :
https://toolslib.net/downloads/viewdownload/2-delfix/
ou
Coche les cases suivantes :=> Réactive l'Uac (juste pour Vista, Seven et W8)
=> Supprimer les outils de désinfection (coché par défaut)
=> Purger la restauration système
* Clique ensuite sur Exécuter puis patiente pendant le processus de suppression.
* Lorsque les procédures seront terminées, l'outil va se fermer et disparaître du bureau
* Un rapport est sauvegardé dans le presse-papier : il te suffit de faire un clic droit et "coller" dans ta prochaine réponse pour me poster le rapport
** le rapport est stocké à cet emplacement : C:\DelFix.txt
Attention : Le rapport est unique et est supprimé à chaque fois que l'on ré-exécute une ou plusieurs options de DelFix.
Note :
Delfix ne désinstalle pas MBAM, à toi de voir si tu souhaites le conserver ou désinstaller.
* fais une mise à jour de ton antivirus, lance un scan complet de ton pc, tiens moi au courant du résultat :-)
-
heu c'est fait, j'ai redémarré le pc et il n'y a plus de problèmes ; aussi bien sur Firefox que dans le pc lui mm
-
pas si vite, on n'a pas terminé !
redémarre le pc et donne moi des nouvelles de son fonctionnement avant de régler quelques bricoles restantes !
-
D'après Mbam, il n'y a plus de pb je te remercie beaucoup pour ton aide je suppose que c'est réglé, merci encore :)
-
super,
redémarre le pc,
lance MBAM !
/!\Utilisateur de Vista, Windows 7 et W8 : Clique droit sur le logo de Malwarebytes' Anti-Malware, « exécuter en tant qu'Administrateur »
Dans l'onglet paramètres, choisis la langue souhaitée
. Dans l'onglet « tableau de bord, vérifie bien que ta version soit à jour
. si le pare-feu demande l'autorisation de se connecter pour malwarebytes, acceptes
. Une fois la mise à jour terminée
Dans l'onglet "examen", coche la case "Examen personnalisé" et sélectionne ton disque sur le quel est installé Windows, puis examiner maintenant,
Sélectionne "recherche de rootkit", puis la partition ou le disque sur le quel est installé Windows (C: par exemple)
puis sur "lancer l'examen"
. Le scan démarre.
il va durer un certain temps, donc laisse le faire.
. Le scan démarre.
. A la fin de l'analyse, un message s'affiche : L'examen terminé avec succès.
Normalement, les infections trouvées sont déplacées automatiquement dans la quarantaine.
Clique sur voir le journal détaillé,
Puis exporter, enregistre son rapport en format .txt sur ton bureau,
Héberge-le sur Cjoint et copie et colle son lien sur ton prochain message.
-
-
* /!\ Avertissement /!\,
* ce script est seulement valable pour ce pc, en cours du nettoyage, à ne pas utiliser sur un autre pc, risque de plantage !
* Lance ZHPFix via le raccourci sur ton Bureau, l'icône est sous forme de seringue.
/!\Utilisateur de Vista, Seven et W8 :
* Clique droit sur le logo de ZHPfix, « exécuter en tant qu'Administrateur »
Clique sur « importer »
Tu vas voir apparaitre un message d'avertissement, clique sur Ok.
* * Copie ( Ctrl + C ) et colle ( Ctrl + V ) les lignes suivantes en gras dans la fenêtre de Zhpfix :
---------------------------------------------------------
Script Zhpfix
[MD5.00000000000000000000000000000000] [APT] [{007906A4-6615-489F-ACC7-B8174D00604E}] (...) -- C:\Program Files (x86)\WSE_Vosteran\uninstall.exe (.not file.) [0]
O51 - MPSK:{54cfb00e-900a-11e4-8262-382c4a0d3741}\AutoRun\command. (...) -- F:\Startme.exe (.not file.)
EmptyPrefetch
ShortcutFix
Emptytemp
EmptyClsid
----------------------------------------------------------
- Clique sur le bouton « GO » pour lancer le nettoyage,
- confirme le nettoyage
- Héberge le rapport ZHPFIX.txt sur
https://www.cjoint.com/
puis copie/colle le lien fourni dans ta prochaine réponse sur le forum.
Tuto en bas de cette page :
https://nicolascoolman.eu
-
-
super,
* Télécharge et enregistre ZHPDiag sur ton bureau :
https://nicolascoolman.eu
ou :
https://www.commentcamarche.net/telecharger/utilitaires/24803-zhpdiag/
* Laisse toi guider lors de l'installation, il se lancera automatiquement à la fin.
/!\Utilisateur de Vista, Seven et W8 :
* Clique droit sur le logo de ZHPdiag, « exécuter en tant qu'Administrateur »
=> L'icône est sous forme de parchemin.
* Clique sur « complet »
* Laisse travailler l'outil, même s'il semble bloqué !
* Enregistre le rapport sur ton Bureau à l'aide de l'icône représentant une disquette
* Héberge le rapport ZHPDiag.txt sur :
https://www.cjoint.com/ à lire => https://www.commentcamarche.net/faq/29493-utiliser-cjoint-pour-heberger-des-fichiers
, puis copie/colle le lien fourni dans ta prochaine réponse sur le forum
tuto zhpdiag :
https://nicolascoolman.eu
-
Voici le rapport de nettoyage de ADWC :
# AdwCleaner v4.107 - Rapport créé le 11/01/2015 à 18:01:00
# Mis à jour le 07/01/2015 par Xplode
# Database : 2015-01-11.1 [Live]
# Système d'exploitation : Windows 8.1 (64 bits)
# Nom d'utilisateur : gho06_000 - PC-DXLO
# Exécuté depuis : C:\Users\gho06_000\Desktop\adwcleaner_4.107.exe
# Option : Nettoyer
***** [ Services ] *****
Service Supprimé : WindowsMangerProtect
Service Supprimé : IHProtect Service
***** [ Fichiers / Dossiers ] *****
Dossier Supprimé : C:\ProgramData\WindowsMangerProtect
Dossier Supprimé : C:\Program Files (x86)\XTab
Dossier Supprimé : C:\Users\GHO06_~1\AppData\Local\Temp\Dynamo Combo
Dossier Supprimé : C:\Users\gho06_000\Documents\Optimizer Pro
***** [ Tâches planifiées ] *****
***** [ Raccourcis ] *****
***** [ Registre ] *****
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Clé Supprimée : HKCU\Software\CoinisRS
Clé Supprimée : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Clé Supprimée : HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}
Clé Supprimée : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Clé Supprimée : HKLM\SOFTWARE\{6791A2F3-FC80-475C-A002-C014AF797E9C}
Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\fra1.ib.adnxs.com
***** [ Navigateurs ] *****
-\\ Internet Explorer v11.0.9600.17416
-\\ Mozilla Firefox v34.0.5 (x86 fr)
*************************
AdwCleaner[R0].txt - [1639 octets] - [11/01/2015 17:50:08]
AdwCleaner[R1].txt - [1699 octets] - [11/01/2015 18:00:10]
AdwCleaner[S0].txt - [1588 octets] - [11/01/2015 18:01:00]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1648 octets] ########## -
ok,
relance ADWC, clique sur nettoyer,
poste son rapport après le redémarrage du pc !
-
Voici le rapport ADWcleaner:
# AdwCleaner v4.107 - Rapport créé le 11/01/2015 à 17:50:08
# Mis à jour le 07/01/2015 par Xplode
# Database : 2015-01-11.1 [Live]
# Système d'exploitation : Windows 8.1 (64 bits)
# Nom d'utilisateur : gho06_000 - PC-DXLO
# Exécuté depuis : C:\Users\gho06_000\Desktop\adwcleaner_4.107.exe
# Option : Scanner
***** [ Services ] *****
Service Présent : WindowsMangerProtect
Service Présent : IHProtect Service
***** [ Fichiers / Dossiers ] *****
Dossier Présent : C:\Program Files (x86)\XTab
Dossier Présent : C:\ProgramData\WindowsMangerProtect
Dossier Présent : C:\Users\GHO06_~1\AppData\Local\Temp\Dynamo Combo
Dossier Présent : C:\Users\gho06_000\Documents\Optimizer Pro
***** [ Tâches planifiées ] *****
***** [ Raccourcis ] *****
***** [ Registre ] *****
Clé Présente : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Clé Présente : HKCU\Software\CoinisRS
Clé Présente : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\fra1.ib.adnxs.com
Clé Présente : [x64] HKCU\Software\CoinisRS
Clé Présente : HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}
Clé Présente : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Clé Présente : HKLM\SOFTWARE\{6791A2F3-FC80-475C-A002-C014AF797E9C}
Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
***** [ Navigateurs ] *****
-\\ Internet Explorer v11.0.9600.17416
-\\ Mozilla Firefox v34.0.5 (x86 fr)
*************************
AdwCleaner[R0].txt - [1495 octets] - [11/01/2015 17:50:08]
########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [1555 octets] ########## -
impec :-)
? Télécharger et enregistre ADWcleaner sur ton bureau (de Xplode) ici :
https://toolslib.net/downloads/viewdownload/1-adwcleaner/
ou ici
http://www.bleepingcomputer.com/download/adwcleaner/dl/125/
Note : si tu as déjà une version d'ADWC sur ton pc, pour avoir la dernière version de l'outil, il faudrait désinstaller celle-ci et le rétélécharger.
Lance le
Accepte le contrat de licence d'utilisation
clique sur scanner
Patiente jusqu'à la fin,
Une fois le scan terminé, clique sur le rapport
Copie et colle la totalité du rapport sur ton prochain message
-
-
ok,
je vois ce que c'est !
/!\ à lire :
de plus en plus de programmes proposent l'installation des barres d'outils (Toolbars, case précochée), donc n'oublie pas d'utiliser le mode d'installation personnalisé et décocher la/les cases correspondantes pendant l'installation.
De plus de ceci, évite fortement les sites comme 01net (en voie de guérison !), CNET, Clubic, BrotherSoft ou Softonic, les logiciels gratuits et libres sont repackés avec leurs barres d'outils ou ajouter des extensions à ton navigateur !
Pour les tuto diffusés par Tuto4pc, Eorezo, Agence exclusif .. etc (quelque soit son nom puisqu'on le change sans arrêt !
Il faut bien lire le contrat de licence d'utilisation avant l'installation !!!
https://forum.security-x.fr/securite-generale/tuto4pc-et-accord-de-licence/
pour t'entrainer et ne plus ta faire avoir, regarde cette page :
https://forum.security-x.fr/tutoriels-317/s
Télécharge et enregistre Zhpcleaner sur ton bureau :
https://nicolascoolman.eu
[*] Fais un clique droit dessus, lance le en tant qu'administrateur !
[*] Accepte le contrat de licence d'utilisation finale (CLUF),
[*] Clique sur "réparation"
[*] Clique sur rapport (normalement le rapport s'affiche)
[*] Enregistre le rapport sur ton bureau
[*] Héberge son rapport de modification qui se trouve sur le Bureau :
https://www.cjoint.com/ à lire => https://www.commentcamarche.net/faq/29493-utiliser-cjoint-pour-heberger-des-fichiers
, puis copie/colle le lien fourni dans ta prochaine réponse sur le forum </gras>
Note :
- Cet outil ne nécessite pas d'installation !
- Le rapport se trouve également dans ce répertoire "%AppData%".
-
Merci pour ta réponse.
Voici le rapport:Malwarebytes Anti-Malware
www.malwarebytes.org
Date de l'examen: 11/01/2015
Heure de l'examen: 16:32:46
Fichier journal: journal mbam.txt
Administrateur: Oui
Version: 2.00.4.1028
Base de données Malveillants: v2015.01.11.08
Base de données Rootkits: v2015.01.07.01
Licence: Gratuit
Protection contre les malveillants: Désactivé(e)
Protection contre les sites Web malveillants: Désactivé(e)
Auto-protection: Désactivé(e)
Système d'exploitation: Windows 8.1
Processeur: x64
Système de fichiers: NTFS
Utilisateur: gho06_000
Type d'examen: Examen "Menaces"
Résultat: Terminé
Objets analysés: 324359
Temps écoulé: 16 min, 27 sec
Mémoire: Activé(e)
Démarrage: Activé(e)
Système de fichiers: Activé(e)
Archives: Activé(e)
Rootkits: Désactivé(e)
Heuristique: Activé(e)
PUP: Activé(e)
PUM: Activé(e)
Processus: 2
PUP.Optional.WindowsProtectManger.A, C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe, 6152, , [9391a2546c1db0869135c00361a0ca36]
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\ProtectService.exe, 6212, , [b3715a9c6029f93d3301aa5bd52d0ef2]
Modules: 2
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\msvcp110.dll, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\msvcr110.dll, , [c65e9165a9e084b28b393f2a6f94d927],
Clés du Registre: 48
PUP.Optional.WindowsProtectManger.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\WindowsMangerProtect, , [9391a2546c1db0869135c00361a0ca36],
PUP.Optional.XTab.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\IHProtect Service, , [b3715a9c6029f93d3301aa5bd52d0ef2],
PUP.Optional.DynamoCombo.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Util Dynamo Combo, , [899bb93d2d5c122465ed956ce220f10f],
PUP.Optional.DynamoCombo.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Update Dynamo Combo, , [6eb69a5cdaaffe388ec4649d9c66b54b],
PUP.Optional.Vosteran, HKLM\SOFTWARE\CLASSES\APPID\{4CB3598A-82E8-4D1F-983F-061238AE696E}, , [8a9ae90db8d163d3e09f8c55a75b18e8],
PUP.Optional.Vosteran, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{4CB3598A-82E8-4D1F-983F-061238AE696E}, , [8a9ae90db8d163d3e09f8c55a75b18e8],
PUP.Optional.BrowseFox.A, HKLM\SOFTWARE\CLASSES\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}, , [c26225d14445cb6b6de441de40c3b050],
PUP.Optional.BrowseFox.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}, , [c26225d14445cb6b6de441de40c3b050],
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, , [988c1fd723660e281b2cdb0f72901fe1],
PUP.Optional.SupTab.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}, , [988c1fd723660e281b2cdb0f72901fe1],
PUP.Optional.SupTab.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{917CAAE9-DD47-4025-936E-1414F07DF5B8}, , [988c1fd723660e281b2cdb0f72901fe1],
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{917CAAE9-DD47-4025-936E-1414F07DF5B8}, , [988c1fd723660e281b2cdb0f72901fe1],
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}, , [988c1fd723660e281b2cdb0f72901fe1],
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, , [988c1fd723660e281b2cdb0f72901fe1],
PUP.Optional.DynamoCombo.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{986c37a1-7b65-476f-80dc-54f80bd4b0d6}, , [a77d8e684f3a5cda197b18c929d9f907],
PUP.Optional.DynamoCombo.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{53F00938-0214-4C62-B6D8-9E2034314EBB}, , [a77d8e684f3a5cda197b18c929d9f907],
PUP.Optional.DynamoCombo.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{41C6BFC5-C528-41E6-A2F0-E12E221F6FDD}, , [a77d8e684f3a5cda197b18c929d9f907],
PUP.Optional.DynamoCombo.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{41C6BFC5-C528-41E6-A2F0-E12E221F6FDD}, , [a77d8e684f3a5cda197b18c929d9f907],
PUP.Optional.DynamoCombo.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{53F00938-0214-4C62-B6D8-9E2034314EBB}, , [a77d8e684f3a5cda197b18c929d9f907],
PUP.Optional.DynamoCombo.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{986C37A1-7B65-476F-80DC-54F80BD4B0D6}, , [a77d8e684f3a5cda197b18c929d9f907],
PUP.Optional.XTab.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\XTab, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.Sanbreel.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\{228c1c19-dcaa-4969-9dee-95888fe6a45e}Gw64, , [22026294e3a61a1c362c2c590af90af6],
PUP.Optional.Sanbreel.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\{8d9208df-94f9-4c96-a224-97b37b0df94e}Gw64, , [0420ad49d1b82313ef73473ec04305fb],
PUP.Optional.Sanbreel.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\{ef3f84a6-599c-4148-a8eb-9aa938299b3e}Gw64, , [48dc7a7c9decfa3c5b075e270af9f10f],
PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, , [69bb4caa3b4e3df994a1339d758fbc44],
PUP.Optional.DynamoCombo.A, HKLM\SOFTWARE\WOW6432NODE\Dynamo Combo, , [70b44caa692051e5dcfdff6b36cd1de3],
PUP.Optional.IHProtect.A, HKLM\SOFTWARE\WOW6432NODE\IHProtect, , [22029660f891d06614afafba2ed50bf5],
PUP.Optional.WPM.A, HKLM\SOFTWARE\WOW6432NODE\supWindowsMangerProtect, , [4ada47af5a2f6accec9ec222fe0615eb],
PUP.Optional.SweetPage.A, HKLM\SOFTWARE\WOW6432NODE\sweet-pageSoftware, , [899b90667a0f4de91cf2469356ae649c],
PUP.Optional.Qone8, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, , [3ce83fb7d5b46acc0134ce02b0549070],
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\SUPTAB, , [b07437bfbdcc8aac392f146b39cae020],
PUP.Optional.WindowsMangerProtect.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\EVENTLOG\APPLICATION\WindowsMangerProtect, , [d450ab4babde26108f03e490c93a0df3],
PUP.Optional.DynamoCombo.A, HKU\S-1-5-21-3069730046-3999965852-1943127693-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Dynamo Combo, , [39eb13e398f1f0463d9d8edc996a8d73],
PUP.Optional.Vosteran.A, HKU\S-1-5-21-3069730046-3999965852-1943127693-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Vosteran, , [b96b9264d6b31026707591d850b3f010],
PUP.Optional.Vosteran.A, HKU\S-1-5-21-3069730046-3999965852-1943127693-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Vosteran Browser, , [cf5529cd23660135ffd40edfb64e4ab6],
PUP.Optional.InstallCore.A, HKU\S-1-5-21-3069730046-3999965852-1943127693-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE\1I1T1Q1S, , [af7517dfdcad85b1e0b15856917235cb],
PUP.Optional.InstallCore.A, HKU\S-1-5-21-3069730046-3999965852-1943127693-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE, , [b2726690d0b993a3a1066e56e32135cb],
PUP.Optional.Qone8, HKU\S-1-5-21-3069730046-3999965852-1943127693-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, , [b3716b8b1673290dec48923e0afa29d7],
PUP.Optional.FastStart.A, HKU\S-1-5-21-3069730046-3999965852-1943127693-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MOZILLA\EXTENDS, , [30f40ceacdbc989e4e3127553fc45ba5],
PUP.Optional.SweetPage.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\sweet-page uninstall, , [c85c27cf0782a294fcbe64f5bc47857b],
PUP.Optional.DynamoCombo.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}, , [ce569b5b800948ee9ee3d88fd52e4db3],
PUP.Optional.DynamoCombo.A, HKLM\SOFTWARE\CLASSES\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}, , [ce569b5b800948ee9ee3d88fd52e4db3],
PUP.Optional.DynamoCombo.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}, , [ce569b5b800948ee9ee3d88fd52e4db3],
PUP.Optional.DynamoCombo.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}, , [ce569b5b800948ee9ee3d88fd52e4db3],
PUP.Optional.DynamoCombo.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}, , [ce569b5b800948ee9ee3d88fd52e4db3],
PUP.Optional.DynamoCombo.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}, , [ce569b5b800948ee9ee3d88fd52e4db3],
PUP.Optional.DynamoCombo.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}, , [ce569b5b800948ee9ee3d88fd52e4db3],
PUP.Optional.DynamoCombo.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}, , [ce569b5b800948ee9ee3d88fd52e4db3],
Valeurs du Registre: 7
PUP.Optional.Vosteran, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY|AppPath, C:\Program Files (x86)\WSE_Vosteran\\, , [2df754a2fd8ca59169cd688731d3d52b]
PUP.Optional.FFToolbar.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|fftoolbar2014@etech.com, C:\Users\gho06_000\AppData\Roaming\Mozilla\Firefox\Profiles\1uemixzz.default-1419933958821\extensions\fftoolbar2014@etech.com, , [80a49e5899f00630ce8f77f2bc475aa6]
PUP.Optional.FastStart.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|faststartff@gmail.com, C:\Users\gho06_000\AppData\Roaming\Mozilla\Firefox\Profiles\1uemixzz.default-1419933958821\extensions\faststartff@gmail.com, , [f232688e0e7b7eb86f35c51e0afa06fa]
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\SUPTAB|ptid, cor, , [b07437bfbdcc8aac392f146b39cae020]
PUP.Optional.InstallCore.A, HKU\S-1-5-21-3069730046-3999965852-1943127693-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE|tb, 0V1D1S1R1D0V1O, , [b2726690d0b993a3a1066e56e32135cb]
PUP.Optional.Vosteran, HKU\S-1-5-21-3069730046-3999965852-1943127693-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472F-A0FF-E1416B8B2E3A}, Vosteran, , [5fc532c4ea9ff4425347eb04e123946c]
PUP.Optional.FastStart.A, HKU\S-1-5-21-3069730046-3999965852-1943127693-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MOZILLA\EXTENDS|appid, faststartff@gmail.com, , [30f40ceacdbc989e4e3127553fc45ba5]
Données du Registre: 12
PUP.Optional.SweetPage.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, https://www.google.com/webhp?gws_rd=ssl{searchTerms}, Bon: (www.google.com), Mauvais: (https://www.google.com/webhp?gws_rd=ssl{searchTerms}),,[fe26f0067f0a5ed8d4cbd8b8ae570ff1]
PUP.Optional.SweetPage.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, http://delta-searches.com/?type=hp&ts=1420989475&from=cor&uid=HGSTXHTS541010A9E680_JA1003BVKKUHZKKKUHZKX Bon: (www.google.com), Mauvais: (http://delta-searches.com/?type=hp&ts=1420989475&from=cor&uid=HGSTXHTS541010A9E680_JA1003BVKKUHZKKKUHZKX[77ad6f87e4a50f27930b4f41e223fa06]
PUP.Optional.SweetPage.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, http://delta-searches.com/?type=hp&ts=1420989475&from=cor&uid=HGSTXHTS541010A9E680_JA1003BVKKUHZKKKUHZKX Bon: (www.google.com), Mauvais: (http://delta-searches.com/?type=hp&ts=1420989475&from=cor&uid=HGSTXHTS541010A9E680_JA1003BVKKUHZKKKUHZKX[d15354a2abdeca6c7d23bdd343c2e719]
PUP.Optional.SweetPage.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, https://www.google.com/webhp?gws_rd=ssl{searchTerms}, Bon: (www.google.com), Mauvais: (https://www.google.com/webhp?gws_rd=ssl{searchTerms}),,[fd2727cf7316e6502c6b8401699c8e72]
PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Bon: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Mauvais: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),,[7aaab244fb8eae882d0df99762a3867a]
PUP.Optional.SweetPage.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, https://www.google.com/webhp?gws_rd=ssl{searchTerms}, Bon: (www.google.com), Mauvais: (https://www.google.com/webhp?gws_rd=ssl{searchTerms}),,[35ef49ad8cfd1323554a8a062ed74db3]
PUP.Optional.SweetPage.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, http://delta-searches.com/?type=hp&ts=1420989475&from=cor&uid=HGSTXHTS541010A9E680_JA1003BVKKUHZKKKUHZKX Bon: (www.google.com), Mauvais: (http://delta-searches.com/?type=hp&ts=1420989475&from=cor&uid=HGSTXHTS541010A9E680_JA1003BVKKUHZKKKUHZKX[da4a03f3fe8bc6705549f59b5da89c64]
PUP.Optional.SweetPage.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, http://delta-searches.com/?type=hp&ts=1420989475&from=cor&uid=HGSTXHTS541010A9E680_JA1003BVKKUHZKKKUHZKX Bon: (www.google.com), Mauvais: (http://delta-searches.com/?type=hp&ts=1420989475&from=cor&uid=HGSTXHTS541010A9E680_JA1003BVKKUHZKKKUHZKX[cd57ac4ab4d57fb7f2ae96faa065e61a]
PUP.Optional.SweetPage.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, https://www.google.com/webhp?gws_rd=ssl{searchTerms}, Bon: (www.google.com), Mauvais: (https://www.google.com/webhp?gws_rd=ssl{searchTerms}),,[ef35985e7a0f2a0c2e697114e32223dd]
PUP.Optional.Qone8, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Bon: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Mauvais: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),,[ed37c630bdcc0f27ab8fd8b86a9bfc04]
PUP.Optional.SweetPage.A, HKU\S-1-5-21-3069730046-3999965852-1943127693-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, http://delta-searches.com/?type=hp&ts=1420989475&from=cor&uid=HGSTXHTS541010A9E680_JA1003BVKKUHZKKKUHZKX Bon: (www.google.com), Mauvais: (http://delta-searches.com/?type=hp&ts=1420989475&from=cor&uid=HGSTXHTS541010A9E680_JA1003BVKKUHZKKKUHZKX[c0648d699aef2313712a365ab64ff60a]
PUP.Optional.SweetPage.A, HKU\S-1-5-21-3069730046-3999965852-1943127693-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, http://delta-searches.com/?type=hp&ts=1420989475&from=cor&uid=HGSTXHTS541010A9E680_JA1003BVKKUHZKKKUHZKX Bon: (www.google.com), Mauvais: (http://delta-searches.com/?type=hp&ts=1420989475&from=cor&uid=HGSTXHTS541010A9E680_JA1003BVKKUHZKKKUHZKX[29fbe6100584d1655b3f434dd530758b]
Dossiers: 121
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\image, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\img, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\img\weather, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\js, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\en-US, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\es-419, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\es-ES, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\fr-BE, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\fr-CA, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\fr-CH, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\fr-FR, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\fr-LU, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\it-CH, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\it-IT, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\pl, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\pt, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\pt-BR, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\ru, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\ru-MO, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\tr-TR, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\vi-VI, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\zh-CN, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\zh-TW, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.Vosteran.A, C:\Users\gho06_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Vosteran, , [45df579f9aefd6602b06a2c9e41fca36],
Rogue.Multiple, C:\ProgramData\1078601655, , [0b1946b0206986b0e5a9968dcb388977],
PUP.Optional.WPM.A, C:\ProgramData\WindowsMangerProtect, , [f62e46b0127791a5945358f261a22ed2],
PUP.Optional.WPM.A, C:\ProgramData\WindowsMangerProtect\update, , [f62e46b0127791a5945358f261a22ed2],
PUP.Optional.SweetPage.A, C:\Users\gho06_000\AppData\Roaming\sweet-page, , [c85c27cf0782a294fcbe64f5bc47857b],
PUP.Optional.SweetPage.A, C:\Users\gho06_000\AppData\Roaming\sweet-page\images, , [c85c27cf0782a294fcbe64f5bc47857b],
PUP.Optional.SweetPage.A, C:\Users\gho06_000\AppData\Roaming\sweet-page\images\code, , [c85c27cf0782a294fcbe64f5bc47857b],
PUP.Optional.Vosteran, C:\Users\gho06_000\AppData\Local\Vosteran, , [6db753a3038675c16c65025f0df63fc1],
PUP.Optional.Vosteran, C:\Users\gho06_000\AppData\Local\Vosteran\Application, , [6db753a3038675c16c65025f0df63fc1],
PUP.Optional.Vosteran, C:\Users\gho06_000\AppData\Local\Vosteran\Application\31.0.1650.23, , [6db753a3038675c16c65025f0df63fc1],
PUP.Optional.Vosteran, C:\Users\gho06_000\AppData\Local\Vosteran\Application\31.0.1650.23\Extensions, , [6db753a3038675c16c65025f0df63fc1],
PUP.Optional.Vosteran, C:\Users\gho06_000\AppData\Local\Vosteran\Application\31.0.1650.23\Installer, , [6db753a3038675c16c65025f0df63fc1],
PUP.Optional.Vosteran, C:\Users\gho06_000\AppData\Local\Vosteran\Application\31.0.1650.23\Locales, , [6db753a3038675c16c65025f0df63fc1],
PUP.Optional.Vosteran, C:\Users\gho06_000\AppData\Local\Vosteran\Application\31.0.1650.23\VisualElements, , [6db753a3038675c16c65025f0df63fc1],
PUP.Optional.Vosteran, C:\Users\gho06_000\AppData\Local\Vosteran\User Data, , [6db753a3038675c16c65025f0df63fc1],
PUP.Optional.Vosteran, C:\Users\gho06_000\AppData\Local\Vosteran\User Data\Default, , [6db753a3038675c16c65025f0df63fc1],
PUP.Optional.Vosteran, C:\Users\gho06_000\AppData\Local\Vosteran\User Data\Default\GPUCache, , [6db753a3038675c16c65025f0df63fc1],
PUP.Optional.Vosteran, C:\Users\gho06_000\AppData\Local\Vosteran\User Data\Default\Cache, , [6db753a3038675c16c65025f0df63fc1],
PUP.Optional.Vosteran, C:\Users\gho06_000\AppData\Local\Vosteran\User Data\Default\Extension State, , [6db753a3038675c16c65025f0df63fc1],
PUP.Optional.Vosteran, C:\Users\gho06_000\AppData\Local\Vosteran\User Data\Default\Extensions, , [6db753a3038675c16c65025f0df63fc1],
PUP.Optional.Vosteran, C:\Users\gho06_000\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac, , [6db753a3038675c16c65025f0df63fc1],
PUP.Optional.Vosteran, C:\Users\gho06_000\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0, , [6db753a3038675c16c65025f0df63fc1],
PUP.Optional.Vosteran, C:\Users\gho06_000\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\app, , [6db753a3038675c16c65025f0df63fc1],
PUP.Optional.Vosteran, C:\Users\gho06_000\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\app\spots, , [6db753a3038675c16c65025f0df63fc1],
PUP.Optional.Vosteran, C:\Users\gho06_000\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\app\spots\facebook, , [6db753a3038675c16c65025f0df63fc1],
PUP.Optional.Vosteran, C:\Users\gho06_000\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\app\spots\facebook\images, , [6db753a3038675c16c65025f0df63fc1],
PUP.Optional.Vosteran, C:\Users\gho06_000\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\app\spots\facebook\images\carousel, , [6db753a3038675c16c65025f0df63fc1],
PUP.Optional.Vosteran, C:\Users\gho06_000\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\app\spots\facebook\images\carousel\screenshots, , [6db753a3038675c16c65025f0df63fc1],
PUP.Optional.Vosteran, C:\Users\gho06_000\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\app\spots\gallery, , [6db753a3038675c16c65025f0df63fc1],
PUP.Optional.Vosteran, C:\Users\gho06_000\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\app\spots\gallery\data, , [6db753a3038675c16c65025f0df63fc1],
PUP.Optional.Vosteran, C:\Users\gho06_000\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\app\spots\gallery\images, , [6db753a3038675c16c65025f0df63fc1],
PUP.Optional.Vosteran, C:\Users\gho06_000\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\app\spots\gallery\images\blackfriday, , [6db753a3038675c16c65025f0df63fc1],
PUP.Optional.Vosteran, C:\Users\gho06_000\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\app\spots\weather, , [6db753a3038675c16c65025f0df63fc1],
PUP.Optional.Vosteran, C:\Users\gho06_000\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\app\spots\weather\images, , [6db753a3038675c16c65025f0df63fc1],
PUP.Optional.Vosteran, C:\Users\gho06_000\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\css, , [6db753a3038675c16c65025f0df63fc1],
PUP.Optional.Vosteran, C:\Users\gho06_000\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\img, , [6db753a3038675c16c65025f0df63fc1],
PUP.Optional.Vosteran, C:\Users\gho06_000\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\img\about, , [6db753a3038675c16c65025f0df63fc1],
PUP.Optional.Vosteran, C:\Users\gho06_000\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\img\apps, , [6db753a3038675c16c65025f0df63fc1],
PUP.Optional.Vosteran, C:\Users\gho06_000\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\img\clean, , [6db753a3038675c16c65025f0df63fc1],
PUP.Optional.Vosteran, C:\Users\gho06_000\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\img\discovery, , [6db753a3038675c16c65025f0df63fc1],
PUP.Optional.Vosteran, C:\Users\gho06_000\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\img\favorites, , [6db753a3038675c16c65025f0df63fc1],
PUP.Optional.Vosteran, C:\Users\gho06_000\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\img\ftue, , [6db753a3038675c16c65025f0df63fc1],
PUP.Optional.Vosteran, C:\Users\gho06_000\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\img\icons, , [6db753a3038675c16c65025f0df63fc1],
PUP.Optional.Vosteran, C:\Users\gho06_000\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\img\icons\pageAction, , [6db753a3038675c16c65025f0df63fc1],
PUP.Optional.Vosteran, C:\Users\gho06_000\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\img\image-upload, , [6db753a3038675c16c65025f0df63fc1],
PUP.Optional.Vosteran, C:\Users\gho06_000\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\img\loaders, , [6db753a3038675c16c65025f0df63fc1],
PUP.Optional.Vosteran, C:\Users\gho06_000\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\img\notifications, , [6db753a3038675c16c65025f0df63fc1],
PUP.Optional.Vosteran, C:\Users\gho06_000\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\img\phone, , [6db753a3038675c16c65025f0df63fc1],
PUP.Optional.Vosteran, C:\Users\gho06_000\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\img\review-gifs, , [6db753a3038675c16c65025f0df63fc1],
PUP.Optional.Vosteran, C:\Users\gho06_000\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\img\review-gifs\cat, , [6db753a3038675c16c65025f0df63fc1],
PUP.Optional.Vosteran, C:\Users\gho06_000\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\img\search, , [6db753a3038675c16c65025f0df63fc1],
PUP.Optional.Vosteran, C:\Users\gho06_000\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\img\themes, , [6db753a3038675c16c65025f0df63fc1],
PUP.Optional.Vosteran, C:\Users\gho06_000\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\img\themes\bubbles, , [6db753a3038675c16c65025f0df63fc1],
PUP.Optional.Vosteran, C:\Users\gho06_000\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\img\themes\buttons, , [6db753a3038675c16c65025f0df63fc1],
PUP.Optional.Vosteran, C:\Users\gho06_000\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\img\themes\city, , [6db753a3038675c16c65025f0df63fc1],
PUP.Optional.Vosteran, C:\Users\gho06_000\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\img\themes\clean, , [6db753a3038675c16c65025f0df63fc1],
PUP.Optional.Vosteran, C:\Users\gho06_000\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\img\themes\disco, , [6db753a3038675c16c65025f0df63fc1],
PUP.Optional.Vosteran, C:\Users\gho06_000\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\img\themes\fishing, , [6db753a3038675c16c65025f0df63fc1],
PUP.Optional.Vosteran, C:\Users\gho06_000\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\img\themes\forest, , [6db753a3038675c16c65025f0df63fc1],
PUP.Optional.Vosteran, C:\Users\gho06_000\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\img\themes\mountains, , [6db753a3038675c16c65025f0df63fc1],
PUP.Optional.Vosteran, C:\Users\gho06_000\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\img\themes\planets, , [6db753a3038675c16c65025f0df63fc1],
PUP.Optional.Vosteran, C:\Users\gho06_000\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\img\themes\sea, , [6db753a3038675c16c65025f0df63fc1],
PUP.Optional.Vosteran, C:\Users\gho06_000\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\img\themes\space, , [6db753a3038675c16c65025f0df63fc1],
PUP.Optional.Vosteran, C:\Users\gho06_000\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\img\themes\strips, , [6db753a3038675c16c65025f0df63fc1],
PUP.Optional.Vosteran, C:\Users\gho06_000\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\img\themes\sunset, , [6db753a3038675c16c65025f0df63fc1],
PUP.Optional.Vosteran, C:\Users\gho06_000\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\img\user, , [6db753a3038675c16c65025f0df63fc1],
PUP.Optional.Vosteran, C:\Users\gho06_000\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\js, , [6db753a3038675c16c65025f0df63fc1],
PUP.Optional.Vosteran, C:\Users\gho06_000\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\lib, , [6db753a3038675c16c65025f0df63fc1],
PUP.Optional.Vosteran, C:\Users\gho06_000\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\locales, , [6db753a3038675c16c65025f0df63fc1],
PUP.Optional.Vosteran, C:\Users\gho06_000\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\_locales, , [6db753a3038675c16c65025f0df63fc1],
PUP.Optional.Vosteran, C:\Users\gho06_000\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\_locales\ar, , [6db753a3038675c16c65025f0df63fc1],
PUP.Optional.Vosteran, C:\Users\gho06_000\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\_locales\de, , [6db753a3038675c16c65025f0df63fc1],
PUP.Optional.Vosteran, C:\Users\gho06_000\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\_locales\en, , [6db753a3038675c16c65025f0df63fc1],
PUP.Optional.Vosteran, C:\Users\gho06_000\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\_locales\es, , [6db753a3038675c16c65025f0df63fc1],
PUP.Optional.Vosteran, C:\Users\gho06_000\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\_locales\fr, , [6db753a3038675c16c65025f0df63fc1],
PUP.Optional.Vosteran, C:\Users\gho06_000\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\_locales\he, , [6db753a3038675c16c65025f0df63fc1],
PUP.Optional.Vosteran, C:\Users\gho06_000\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\_locales\it, , [6db753a3038675c16c65025f0df63fc1],
PUP.Optional.Vosteran, C:\Users\gho06_000\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\_locales\ja, , [6db753a3038675c16c65025f0df63fc1],
PUP.Optional.Vosteran, C:\Users\gho06_000\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\_locales\nl, , [6db753a3038675c16c65025f0df63fc1],
PUP.Optional.Vosteran, C:\Users\gho06_000\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\_locales\pl, , [6db753a3038675c16c65025f0df63fc1],
PUP.Optional.Vosteran, C:\Users\gho06_000\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\_locales\pt_BR, , [6db753a3038675c16c65025f0df63fc1],
PUP.Optional.Vosteran, C:\Users\gho06_000\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\_locales\ru, , [6db753a3038675c16c65025f0df63fc1],
PUP.Optional.Vosteran, C:\Users\gho06_000\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\_locales\tr, , [6db753a3038675c16c65025f0df63fc1],
PUP.Optional.Vosteran, C:\Users\gho06_000\AppData\Local\Vosteran\User Data\Default\Extensions\Temp, , [6db753a3038675c16c65025f0df63fc1],
PUP.Optional.Vosteran, C:\Users\gho06_000\AppData\Local\Vosteran\User Data\Default\JumpListIcons, , [6db753a3038675c16c65025f0df63fc1],
PUP.Optional.Vosteran, C:\Users\gho06_000\AppData\Local\Vosteran\User Data\Default\JumpListIconsOld, , [6db753a3038675c16c65025f0df63fc1],
PUP.Optional.Vosteran, C:\Users\gho06_000\AppData\Local\Vosteran\User Data\Default\User StyleSheets, , [6db753a3038675c16c65025f0df63fc1],
PUP.Optional.Vosteran, C:\Users\gho06_000\AppData\Local\Vosteran\User Data\pnacl, , [6db753a3038675c16c65025f0df63fc1],
PUP.Optional.DynamoCombo.A, C:\Program Files (x86)\Dynamo Combo, , [ce569b5b800948ee9ee3d88fd52e4db3],
PUP.Optional.DynamoCombo.A, C:\Program Files (x86)\Dynamo Combo\bin, , [ce569b5b800948ee9ee3d88fd52e4db3],
PUP.Optional.DynamoCombo.A, C:\Program Files (x86)\Dynamo Combo\bin\plugins, , [ce569b5b800948ee9ee3d88fd52e4db3],
PUP.Optional.DynamoCombo.A, C:\Program Files (x86)\Dynamo Combo\bin\TEMP, , [ce569b5b800948ee9ee3d88fd52e4db3],
PUP.Optional.IHProtectUpDate.A, C:\ProgramData\IHProtectUpDate, , [f430fafc0683d561163476f222e153ad],
PUP.Optional.IHProtectUpDate.A, C:\ProgramData\IHProtectUpDate\update, , [f430fafc0683d561163476f222e153ad],
Fichiers: 137
PUP.Optional.WindowsProtectManger.A, C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe, , [9391a2546c1db0869135c00361a0ca36],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\ProtectService.exe, , [b3715a9c6029f93d3301aa5bd52d0ef2],
PUP.Optional.DynamoCombo.A, C:\Program Files (x86)\Dynamo Combo\bin\utilDynamoCombo.exe, , [899bb93d2d5c122465ed956ce220f10f],
PUP.Optional.DynamoCombo.A, C:\Program Files (x86)\Dynamo Combo\updateDynamoCombo.exe, , [6eb69a5cdaaffe388ec4649d9c66b54b],
PUP.Optional.SupTab.A, C:\Program Files (x86)\XTab\SupTab.dll, , [988c1fd723660e281b2cdb0f72901fe1],
PUP.Optional.DynamoCombo.A, C:\Program Files (x86)\Dynamo Combo\DynamoComboBHO.dll, , [a77d8e684f3a5cda197b18c929d9f907],
PUP.Optional.SupTab.A, C:\Users\gho06_000\AppData\Local\Temp\158AF40F-387C-4D75-B9F1-9186769876B9mp\tmp\STab_Down.exe, , [d54fcc2ad0b9ec4afc7b570e867aa957],
PUP.Optional.XTab.A, C:\Users\gho06_000\AppData\Local\Temp\158AF40F-387C-4D75-B9F1-9186769876B9mp\tmp\STab_v4.0.exe, , [2afae70f4f3a320447ed5da8a65c817f],
PUP.Optional.WindowsProtectManger.A, C:\Users\gho06_000\AppData\Local\Temp\158AF40F-387C-4D75-B9F1-9186769876B9mp\tmp\wpm_v20.0.0.1337.exe, , [c55f0fe70386ab8ba422853eff02c33d],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\uninstall.exe, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\install.data, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\msvcp110.dll, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\msvcr110.dll, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\about.png, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\about_bk.png, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\btn.png, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\btn_apply.png, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\close.png, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\conf.xml, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\conf_back.png, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\input_bk.png, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\logo.png, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\main.xml, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\radio_1.png, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\radio_2.png, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\rigth_arrow.png, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\settings.png, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\data.html, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\indexIE.html, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\indexIE8.html, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\main.css, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\ver.txt, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\img\arrow.png, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\img\default_add_logo.png, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\img\default_add_logo_hover.png, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\img\default_logo.png, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\img\googlelogo.png, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\img\googlelogo2.png, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\img\google_trends.png, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\img\icon128.png, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\img\icon16.png, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\img\icon48.png, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\img\loading.gif, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\img\logo32.ico, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\img\weather\0.png, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\js\common.js, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\js\ga.js, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\js\ie8.js, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\js\jquery-1.11.0.min.js, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\js\jquery.autocomplete.js, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\js\js.js, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\js\library.js, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\js\xagainit-ie8.js, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\js\xagainit.js, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\js\xagainit2.0.js, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\en-US\messages.json, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\es-419\messages.json, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\es-ES\messages.json, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\fr-BE\messages.json, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\fr-CA\messages.json, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\fr-CH\messages.json, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\fr-FR\messages.json, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\fr-LU\messages.json, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\it-CH\messages.json, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\it-IT\messages.json, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\pl\messages.json, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\pt\messages.json, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\pt-BR\messages.json, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\ru\messages.json, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\ru-MO\messages.json, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\tr-TR\messages.json, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\vi-VI\messages.json, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\zh-CN\messages.json, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\zh-TW\messages.json, , [c65e9165a9e084b28b393f2a6f94d927],
PUP.Optional.Vosteran.A, C:\Users\gho06_000\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Vosteran.lnk, , [2ef6cc2a0683fc3a55dbb0bb5aa9dc24],
PUP.Optional.Vosteran.A, C:\Users\gho06_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Vosteran\Vosteran.lnk, , [45df579f9aefd6602b06a2c9e41fca36],
PUP.Optional.Sanbreel.A, C:\Windows\System32\drivers\{228c1c19-dcaa-4969-9dee-95888fe6a45e}Gw64.sys, , [22026294e3a61a1c362c2c590af90af6],
PUP.Optional.Sanbreel.A, C:\Windows\System32\drivers\{8d9208df-94f9-4c96-a224-97b37b0df94e}Gw64.sys, , [0420ad49d1b82313ef73473ec04305fb],
PUP.Optional.Sanbreel.A, C:\Windows\System32\drivers\{ef3f84a6-599c-4148-a8eb-9aa938299b3e}Gw64.sys, , [48dc7a7c9decfa3c5b075e270af9f10f],
Rogue.Multiple, C:\ProgramData\1078601655\BITF6F7.tmp, , [0b1946b0206986b0e5a9968dcb388977],
PUP.Optional.WPM.A, C:\ProgramData\WindowsMangerProtect\update\conf, , [f62e46b0127791a5945358f261a22ed2],
PUP.Optional.SweetPage.A, C:\Users\gho06_000\AppData\Roaming\sweet-page\294.json, , [c85c27cf0782a294fcbe64f5bc47857b],
PUP.Optional.SweetPage.A, C:\Users\gho06_000\AppData\Roaming\sweet-page\MessageBox.xml, , [c85c27cf0782a294fcbe64f5bc47857b],
PUP.Optional.SweetPage.A, C:\Users\gho06_000\AppData\Roaming\sweet-page\un.ini, , [c85c27cf0782a294fcbe64f5bc47857b],
PUP.Optional.SweetPage.A, C:\Users\gho06_000\AppData\Roaming\sweet-page\uninstallDlg2.xml, , [c85c27cf0782a294fcbe64f5bc47857b],
PUP.Optional.SweetPage.A, C:\Users\gho06_000\AppData\Roaming\sweet-page\UninstallManager.exe, , [c85c27cf0782a294fcbe64f5bc47857b],
PUP.Optional.SweetPage.A, C:\Users\gho06_000\AppData\Roaming\sweet-page\images\bg.png, , [c85c27cf0782a294fcbe64f5bc47857b],
PUP.Optional.SweetPage.A, C:\Users\gho06_000\AppData\Roaming\sweet-page\images\bg1.png, , [c85c27cf0782a294fcbe64f5bc47857b],
PUP.Optional.SweetPage.A, C:\Users\gho06_000\AppData\Roaming\sweet-page\images\bk_shadow.png, , [c85c27cf0782a294fcbe64f5bc47857b],
PUP.Optional.SweetPage.A, C:\Users\gho06_000\AppData\Roaming\sweet-page\images\button.png, , [c85c27cf0782a294fcbe64f5bc47857b],
PUP.Optional.SweetPage.A, C:\Users\gho06_000\AppData\Roaming\sweet-page\images\button1.png, , [c85c27cf0782a294fcbe64f5bc47857b],
PUP.Optional.SweetPage.A, C:\Users\gho06_000\AppData\Roaming\sweet-page\images\checkbox.png, , [c85c27cf0782a294fcbe64f5bc47857b],
PUP.Optional.SweetPage.A, C:\Users\gho06_000\AppData\Roaming\sweet-page\images\checkbox_select.png, , [c85c27cf0782a294fcbe64f5bc47857b],
PUP.Optional.SweetPage.A, C:\Users\gho06_000\AppData\Roaming\sweet-page\images\checked.png, , [c85c27cf0782a294fcbe64f5bc47857b],
PUP.Optional.SweetPage.A, C:\Users\gho06_000\AppData\Roaming\sweet-page\images\close.png, , [c85c27cf0782a294fcbe64f5bc47857b],
PUP.Optional.SweetPage.A, C:\Users\gho06_000\AppData\Roaming\sweet-page\images\loading_bg.png, , [c85c27cf0782a294fcbe64f5bc47857b],
PUP.Optional.SweetPage.A, C:\Users\gho06_000\AppData\Roaming\sweet-page\images\loading_light.png, , [c85c27cf0782a294fcbe64f5bc47857b],
PUP.Optional.SweetPage.A, C:\Users\gho06_000\AppData\Roaming\sweet-page\images\min.png, , [c85c27cf0782a294fcbe64f5bc47857b],
PUP.Optional.SweetPage.A, C:\Users\gho06_000\AppData\Roaming\sweet-page\images\scrollbar.bmp, , [c85c27cf0782a294fcbe64f5bc47857b],
PUP.Optional.SweetPage.A, C:\Users\gho06_000\AppData\Roaming\sweet-page\images\Thumbs.db, , [c85c27cf0782a294fcbe64f5bc47857b],
PUP.Optional.SweetPage.A, C:\Users\gho06_000\AppData\Roaming\sweet-page\images\unchecked.png, , [c85c27cf0782a294fcbe64f5bc47857b],
PUP.Optional.SweetPage.A, C:\Users\gho06_000\AppData\Roaming\sweet-page\images\code\code1.jpg, , [c85c27cf0782a294fcbe64f5bc47857b],
PUP.Optional.SweetPage.A, C:\Users\gho06_000\AppData\Roaming\sweet-page\images\code\code2.jpg, , [c85c27cf0782a294fcbe64f5bc47857b],
PUP.Optional.SweetPage.A, C:\Users\gho06_000\AppData\Roaming\sweet-page\images\code\code3.jpg, , [c85c27cf0782a294fcbe64f5bc47857b],
PUP.Optional.SweetPage.A, C:\Users\gho06_000\AppData\Roaming\sweet-page\images\code\code4.jpg, , [c85c27cf0782a294fcbe64f5bc47857b],
PUP.Optional.SweetPage.A, C:\Users\gho06_000\AppData\Roaming\sweet-page\images\code\code5.jpg, , [c85c27cf0782a294fcbe64f5bc47857b],
PUP.Optional.SweetPage.A, C:\Users\gho06_000\AppData\Roaming\sweet-page\images\code\code6.jpg, , [c85c27cf0782a294fcbe64f5bc47857b],
PUP.Optional.SweetPage.A, C:\Users\gho06_000\AppData\Roaming\sweet-page\images\code\Thumbs.db, , [c85c27cf0782a294fcbe64f5bc47857b],
PUP.Optional.DynamoCombo.A, C:\Program Files (x86)\Dynamo Combo\ccbonclchokkgohppbnobaohohhldpap.crx, , [ce569b5b800948ee9ee3d88fd52e4db3],
PUP.Optional.DynamoCombo.A, C:\Program Files (x86)\Dynamo Combo\bin\sqlite3.dll, , [ce569b5b800948ee9ee3d88fd52e4db3],
PUP.Optional.DynamoCombo.A, C:\Program Files (x86)\Dynamo Combo\bin\7za.exe, , [ce569b5b800948ee9ee3d88fd52e4db3],
PUP.Optional.DynamoCombo.A, C:\Program Files (x86)\Dynamo Combo\bin\8d9208df94f94c96a22464.dll, , [ce569b5b800948ee9ee3d88fd52e4db3],
PUP.Optional.DynamoCombo.A, C:\Program Files (x86)\Dynamo Combo\bin\BrowserAdapter.7z, , [ce569b5b800948ee9ee3d88fd52e4db3],
PUP.Optional.DynamoCombo.A, C:\Program Files (x86)\Dynamo Combo\bin\DynamoCombo.BrowserAdapter.exe, , [ce569b5b800948ee9ee3d88fd52e4db3],
PUP.Optional.DynamoCombo.A, C:\Program Files (x86)\Dynamo Combo\bin\DynamoCombo.BrowserAdapter64.exe, , [ce569b5b800948ee9ee3d88fd52e4db3],
PUP.Optional.DynamoCombo.A, C:\Program Files (x86)\Dynamo Combo\bin\DynamoCombo.PurBrowse64.exe, , [ce569b5b800948ee9ee3d88fd52e4db3],
PUP.Optional.DynamoCombo.A, C:\Program Files (x86)\Dynamo Combo\bin\DynamoCombo.PurBrowseG.zip, , [ce569b5b800948ee9ee3d88fd52e4db3],
PUP.Optional.DynamoCombo.A, C:\Program Files (x86)\Dynamo Combo\bin\ef3f84a6599c4148a8eb.dll, , [ce569b5b800948ee9ee3d88fd52e4db3],
PUP.Optional.DynamoCombo.A, C:\Program Files (x86)\Dynamo Combo\bin\ef3f84a6599c4148a8eb64.dll, , [ce569b5b800948ee9ee3d88fd52e4db3],
PUP.Optional.DynamoCombo.A, C:\Program Files (x86)\Dynamo Combo\bin\utilDynamoCombo.InstallState, , [ce569b5b800948ee9ee3d88fd52e4db3],
PUP.Optional.DynamoCombo.A, C:\Program Files (x86)\Dynamo Combo\bin\{228c1c19-dcaa-4969-9dee-95888fe6a45e}.dll, , [ce569b5b800948ee9ee3d88fd52e4db3],
PUP.Optional.DynamoCombo.A, C:\Program Files (x86)\Dynamo Combo\bin\{228c1c19-dcaa-4969-9dee-95888fe6a45e}64.dll, , [ce569b5b800948ee9ee3d88fd52e4db3],
PUP.Optional.DynamoCombo.A, C:\Program Files (x86)\Dynamo Combo\bin\{8d9208df-94f9-4c96-a224-97b37b0df94e}.dll, , [ce569b5b800948ee9ee3d88fd52e4db3],
PUP.Optional.DynamoCombo.A, C:\Program Files (x86)\Dynamo Combo\bin\{8d9208df-94f9-4c96-a224-97b37b0df94e}64.dll, , [ce569b5b800948ee9ee3d88fd52e4db3],
PUP.Optional.DynamoCombo.A, C:\Program Files (x86)\Dynamo Combo\bin\{ef3f84a6-599c-4148-a8eb-9aa938299b3e}.dll, , [ce569b5b800948ee9ee3d88fd52e4db3],
PUP.Optional.DynamoCombo.A, C:\Program Files (x86)\Dynamo Combo\bin\{ef3f84a6-599c-4148-a8eb-9aa938299b3e}64.dll, , [ce569b5b800948ee9ee3d88fd52e4db3],
PUP.Optional.DynamoCombo.A, C:\Program Files (x86)\Dynamo Combo\bin\plugins\DynamoCombo.BOAS.dll, , [ce569b5b800948ee9ee3d88fd52e4db3],
PUP.Optional.DynamoCombo.A, C:\Program Files (x86)\Dynamo Combo\bin\plugins\DynamoCombo.Bromon.dll, , [ce569b5b800948ee9ee3d88fd52e4db3],
PUP.Optional.DynamoCombo.A, C:\Program Files (x86)\Dynamo Combo\bin\plugins\DynamoCombo.BroStats.dll, , [ce569b5b800948ee9ee3d88fd52e4db3],
PUP.Optional.DynamoCombo.A, C:\Program Files (x86)\Dynamo Combo\bin\plugins\DynamoCombo.BrowserAdapter.dll, , [ce569b5b800948ee9ee3d88fd52e4db3],
PUP.Optional.DynamoCombo.A, C:\Program Files (x86)\Dynamo Combo\bin\plugins\DynamoCombo.CompatibilityChecker.dll, , [ce569b5b800948ee9ee3d88fd52e4db3],
PUP.Optional.DynamoCombo.A, C:\Program Files (x86)\Dynamo Combo\bin\plugins\DynamoCombo.ExpExt.dll, , [ce569b5b800948ee9ee3d88fd52e4db3],
PUP.Optional.DynamoCombo.A, C:\Program Files (x86)\Dynamo Combo\bin\plugins\DynamoCombo.FFUpdate.dll, , [ce569b5b800948ee9ee3d88fd52e4db3],
PUP.Optional.DynamoCombo.A, C:\Program Files (x86)\Dynamo Combo\bin\plugins\DynamoCombo.GCUpdate.dll, , [ce569b5b800948ee9ee3d88fd52e4db3],
PUP.Optional.DynamoCombo.A, C:\Program Files (x86)\Dynamo Combo\bin\plugins\DynamoCombo.IEUpdate.dll, , [ce569b5b800948ee9ee3d88fd52e4db3],
PUP.Optional.DynamoCombo.A, C:\Program Files (x86)\Dynamo Combo\bin\plugins\DynamoCombo.PurBrowseG.dll, , [ce569b5b800948ee9ee3d88fd52e4db3],
PUP.Optional.IHProtectUpDate.A, C:\ProgramData\IHProtectUpDate\update\conf, , [f430fafc0683d561163476f222e153ad],
Secteurs physiques: 0
(Aucun élément malicieux detecté)
(end)
PS: j'ai pas précisé le présence d'un certain nb de pup ...
En attente de la suite... -
bonjour,
copie et colle la totalité du rapport de MBAM sur ton prochain message
