Problème de pc, super lents

Geoffrey3613 -

Bonjour, il y a 5 ans en 2008 a peux près j'ai eu un pc acheter a electro dépôts un Packard Bell acheter a 500€ :
Fabricant: Pachard Bell
Modèle: imedia S1800
Evaluation: 3,4
Processeur: Intel(R) Celeron(R) CPU 450 @ 2.20GHz 2.19GHz
Mémoire installée: 3,00 Go
Type de système: Système d'exploitation 64 bits
Windows 7 Edition Familiale Premium Service Pack 1
Voila donc le problème et 1 mois après l'avoirs acheter je télécharger n'importe quoi des jeux des cracks etc... et un jours il était super lent je ne pouvais plus jouer a des jeux comme le premier jours (les Fps était faible) internet et lent tout et lent.
J'ai reformater le pc a peux près 5 fois de puis il y a jamais eu de changement.
J'ai entendu parler de bootnet qui était un virus super répendu qui envoier des spams ou je sais plus éxactement.
Donc j'ai besoin d'aide SVP merci

Afficher la suite

A voir également

Problème de pc, super lents
Downloader for pc - Télécharger - Téléchargement & Transfert
Reinitialiser pc - Guide
Nettoyer pc lent - Guide
Super copie pour pc - Télécharger - Gestion de fichiers
Temperature pc - Guide

24 réponses

Résumé de la discussion

La problématique centrale concerne un PC Packard Bell iMedia S1800 sous Windows 7 64 bits qui devient extrêmement lent après l’installation de jeux et cracks, un mois après l’achat. Plusieurs éléments de la discussion soulignent une possible infection majeure et la référence à Bootnet, avec reformats répétés et lenteurs persistantes, et les réponses évoquent l’utilisation d’outils de désinfection comme ZHPDiag. Le fil inclut ensuite un rapport ZHPDiag détaillé, montrant des éléments potentiellement indésirables, des extensions de navigateur et des programmes susceptibles d’intercepter les recherches et les pages web. En cas de poursuite, le rapport signale des composants tels que Whilokii et CrossRider, des extensions et des redirections Qvo6, apportant une nuance utile sur les pistes de désinfection.

Réponse 1 / 24 - Meilleure réponse
La meilleure réponse est la réponse qui a été validée par nos équipes.
spiralio
Je ne voudrais pas "polluer" votre sujet. Simplement "Bravo!". C'est vraiment du bon travail ( que je serais incapable de faire)
2
1. lilidurhone Contributeur sécurité
  
  :)
  
  C est pas du spam
  
  Merci
  
  0
2. Geoffrey3613 Auteur
  
  ~ Rapport de ZHPDiag v2013.10.25.66 - Nicolas Coolman (25/10/2013)
  ~ Lancé par geoffrey (26/10/2013 10:50:04)
  ~ Adresse du Site Web https://nicolascoolman.webs.com/
  ~ Forums gratuits d'Assistance à la désinfection : https://nicolascoolman.webs.com/
  ~ Traduit par Nicolas Coolman
  ~ Etat de la version :
  ~ Liste blanche : Activée par le programme
  ~ Elévation des Privilèges : OK
  ~ User Account Control (UAC): Activate by user
  
  ---\\ Navigateurs Internet
  MSIE: Internet Explorer v10.0.9200.16721
  MFIE: Mozilla Firefox 22.0
  GCIE: Google Chrome v30.0.1599.101 (Defaut)
  
  ---\\ Informations sur les produits Windows
  ~ Langage: Français
  Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)
  Windows Server License Manager Script : OK
  ~ Windows(R) 7, OEM_SLP channel
  System Locked Preinstallation (OEM_SLP) : OK
  Windows ID Activation : OK
  ~ Windows Partial Key : 7QJB7
  Windows License : OK
  ~ Windows Remaining Initializations Number : 3
  Software Protection Service (Protection logicielle) : OK
  Windows Automatic Updates : OK
  Windows Activation Technologies : OK
  
  ---\\ Logiciels de protection du système
  avast! Free Antivirus v8.0.1497.0
  Windows Defender W7
  
  ---\\ Logiciels d'optimisation du système
  
  ---\\ Logiciels de partage PeerToPeer
  
  ---\\ Surveillance de Logiciels
  Adobe Flash Player 11 Plugin
  Adobe Reader XI
  Java 7 Update 25
  
  ---\\ Informations sur le système
  ~ Processor: Intel64 Family 6 Model 22 Stepping 1, GenuineIntel
  ~ Operating System: 64 Bits
  Boot mode: Normal (Normal boot)
  Total RAM: 3037 MB (53% free)
  System Restore: Activé (Enable)
  System drive C: has 27 GB (19%) free of 140 GB
  
  ---\\ Mode de connexion au système
  ~ Computer Name: WENZ-PC
  ~ User Name: geoffrey
  ~ All Users Names: WENZ, nathalie, hugo, HomeGroupUser$, geoffrey, Administrateur,
  ~ Unselected Option: None
  Logged in as Administrator
  
  ---\\ Variables d'environnement
  ~ System Unit : C:\
  ~ %AppZHP% : C:\Users\geoffrey\AppData\Roaming\ZHP\
  ~ %AppData% : C:\Users\geoffrey\AppData\Roaming\
  ~ %Desktop% : C:\Users\geoffrey\Desktop\
  ~ %Favorites% : C:\Users\geoffrey\Favorites\
  ~ %LocalAppData% : C:\Users\geoffrey\AppData\Local\
  ~ %StartMenu% : C:\Users\geoffrey\AppData\Roaming\Microsoft\Windows\Start Menu\
  ~ %Windir% : C:\Windows\
  ~ %System% : C:\Windows\System32\
  
  ---\\ Enumération des unités disques
  C: Hard drive, Flash drive, Thumb drive (Free 27 Go of 140 Go)
  D: Hard drive, Flash drive, Thumb drive (Free 128 Go of 141 Go)
  E: CD-ROM drive (Free 0 Go of 0 Go)
  F: Floppy drive, Flash card reader, USB Key (Free 3 Go of 14 Go)
  H: Floppy drive, Flash card reader, USB Key (Not Inserted)
  I: Floppy drive, Flash card reader, USB Key (Not Inserted)
  J: Floppy drive, Flash card reader, USB Key (Not Inserted)
  L: Floppy drive, Flash card reader, USB Key (Not Inserted)
  
  ---\\ Etat du Centre de Sécurité Windows
  [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
  ~ Security Center: 41 Legitimates Filtered in 00mn 00s
  
  ---\\ Recherche particulière de fichiers génériques
  [MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorateur Windows.) (.25/02/2011 - 07:19:30.) -- C:\Windows\Explorer.exe [2871808]
  [MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 - 02:39:52.) -- C:\Windows\System32\Wininit.exe [129024]
  [MD5.D28B35DE88D27EFB27DF4B1E8319E3C0] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.22/09/2013 - 23:55:10.) -- C:\Windows\System32\wininet.dll [2241024]
  [MD5.1151B1BAA6F350B1DB6598E0FEA7C457] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.20/11/2010 - 14:25:30.) -- C:\Windows\System32\Winlogon.exe [390656]
  [MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Bibliothèque de licences.) (.20/11/2010 - 14:27:26.) -- C:\Windows\System32\sppcomapi.dll [232448]
  [MD5.314C17917AC8523EC77A710215012A65] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.14/09/2013 - 02:10:19.) -- C:\Windows\system32\Drivers\AFD.sys [497152]
  [MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 - 02:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128]
  [MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/07/2009 - 00:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160]
  [MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.20/11/2010 - 10:19:21.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456]
  [MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.20/11/2010 - 10:26:32.) -- C:\Windows\system32\Drivers\DfsC.sys [102400]
  [MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.20/11/2010 - 11:43:43.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368]
  [MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) (.14/07/2009 - 00:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472]
  [MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.14/07/2009 - 01:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224]
  [MD5.A5D9106A73DC88564C825D317CAC68AC] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.27/04/2011 - 03:40:40.) -- C:\Windows\system32\Drivers\MRxSmb.sys [158208]
  [MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) (.20/11/2010 - 10:23:20.) -- C:\Windows\system32\Drivers\netBT.sys [261632]
  [MD5.B98F8C6E31CD07B2E6F71F7F648E38C0] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.12/04/2013 - 15:45:08.) -- C:\Windows\system32\Drivers\ntfs.sys [1656680]
  [MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/07/2009 - 01:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280]
  [MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.20/11/2010 - 11:52:35.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [129536]
  [MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.14/07/2009 - 01:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184]
  [MD5.DDAD5A7AB24D8B65F8D724F5C20FD806] - (.Microsoft Corporation - TDI Translation Driver.) (.20/11/2010 - 10:21:56.) -- C:\Windows\system32\Drivers\tdx.sys [119296]
  [MD5.0D08D2F3B3FF84E433346669B5E0F639] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.20/11/2010 - 14:34:02.) -- C:\Windows\system32\Drivers\volsnap.sys [295808]
  ~ Generic Processes: Scanned in 00mn 00s
  
  ---\\ Etat des fichiers cachés (Caché/Total)
  ~ Mes images (My Pictures) : 1/8
  ~ Mes musiques (My Musics) : 5/26
  ~ Mes Videos (My Videos) : 1/23
  ~ Mes Favoris (My Favorites) : 1/26
  ~ Mes Documents (My Documents) : 1/2
  ~ Mon Bureau (My Desktop) : 1/365
  ~ Menu demarrer (Programs) : 1/23
  ~ Hidden Files: Scanned in 00mn 01s
  
  ---\\ Processus lancés
  [MD5.CBC7D8E5416AD30CF16DC2FD4A6AA399] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe [4858968] [PID.2360]
  [MD5.3CD9C60B23D870700F63AD4755364902] - (.LogMeIn Inc. - Hamachi Client Application.) -- C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [2345296] [PID.2168]
  [MD5.3E399A1328181C2A352472369DE2A93A] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [844752] [PID.692]
  [MD5.CC82669653807DFC27DF3B73ECE5EECD] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [8135168] [PID.2768]
  [MD5.9330941C8F6DF417F6DBBE998DB6687E] - (.AVAST Software - avast! Service.) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808] [PID.1184]
  [MD5.ADDA5E1951B90D3D23C56D3CF0622ADC] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [65640] [PID.1504]
  [MD5.30E3850F303EAE5C364782EA78579CC9] - (.Apple Inc. - MobileDeviceService.) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [55624] [PID.1692]
  [MD5.816FD5A6F3C2F3D600900096632FC60E] - (.Acer Incorporated - Global Registration Service.) -- C:\Program Files (x86)\Packard Bell\Registration\GregHSRW.exe [1150496] [PID.1444]
  [MD5.A06EFD4965F8A3F97A8C9A291D032678] - (.Pas de propriétaire - Inkjet Printer/Scanner/Fax Extended Servey.) -- C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.exe [116104] [PID.2076]
  [MD5.F9EC9ACD504D823D9B9CA98A4F8D3CA2] - (.Acer Group - Updater Service.) -- C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe [243232] [PID.3008]
  ~ Processes Running: Scanned in 00mn 00s
  
  ---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
  C:\Users\geoffrey\AppData\Local\Google\Chrome\User Data\Default\Preferences
  G2 - GCE: Preference [User Data\Default] [iaimhpklononapfjngelgdokckfjekfc] Whilokii v.1.0.0 (Désactivé) =>PUP.Whilokii
  G2 - GCE: Preference [User Data\Default] [lechbfhppigdgmodjlmcbiebfpogaeli] savvEnsharee v.5.10 (Activé) =>Adware.SaveShare
  G2 - GCE: Preference [User Data\Default] [pbpohikckhbcljgombipcdoinkaedlfa] Smart Display v.1.6 (Activé) =>Spyware.SmartDisplay
  ~ Google Browser: 19 Legitimates Filtered in 00mn 25s
  
  ---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
  C:\Users\geoffrey\AppData\Roaming\Mozilla\Firefox\Profiles\utk92q2b.default\prefs.js
  M2 - MFEP: prefs.js [geoffrey - utk92q2b.default\7125a285-7e68-47aa-9d72-e81874f4d47e@d3fcdb92-135d-4a8a-8cf6-11e3b57c5fda.com] [] Plus-HD-2.3 v (..) =>Adware.PlusHD
  M2 - MFEP: prefs.js [geoffrey - utk92q2b.default\jid1-FCM5fDwCW5M3AQ@jetpack] [] Smart Display v1.2 (..) =>Spyware.SmartDisplay
  P2 - FPN: [HKCU] [pandonetworks.com/PandoWebPlugin] - (...) -- C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (.not file.)
  ~ Firefox Browser: 20 Legitimates Filtered in 00mn 00s
  
  ---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
  R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.do
  R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.do
  ~ IE Browser: 16 Legitimates Filtered in 00mn 00s
  
  ---\\ Internet Explorer, Proxy Management (R5)
  R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
  R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
  R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
  R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
  R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
  ~ Proxy management: Scanned in 00mn 00s
  
  ---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
  F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
  F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
  F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
  ~ Keys: Scanned in 00mn 00s
  
  ---\\ Hosts file redirection (O1)
  ~ Le fichier hosts est sain (The hosts file is clean).
  ~ Hosts File: Scanned in 00mn 00s
  ~ Nombre de lignes (Lines number): 21
  
  ---\\ Internet Explorer Toolbars (O3)
  O3 - Toolbar: (no name) [64Bits] - [HKLM]{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} Clé orpheline
  O3 - Toolbar: Google Toolbar [64Bits] - [HKLM]{2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll =>Toolbar.Google
  O3 - Toolbar\WebBrowser: (no name) [64Bits] - [HKCU]{2318C2B1-4965-11D4-9B18-009027A5CD4F} Clé orpheline
  ~ Toolbar: Scanned in 00mn 00s
  
  ---\\ Autres liens utilisateurs (O4)
  O4 - GS\Desktop [Public]: FlvPlayer.lnk . (...) -- C:\Program Files (x86)\FLVPlayer\FLVPlayerApp.exe
  O4 - GS\Desktop [Public]: Google SketchUp 8.lnk . (.Google, Inc. - SketchUp Application.) -- C:\Program Files (x86)\Google\Google SketchUp 8\SketchUp.exe
  O4 - GS\Desktop [Public]: RollerCoaster Tycoon 3.lnk . (.Frontier Developments Ltd - RollerCoaster Tycoon® 3.) -- C:\Program Files (x86)\Atari\RollerCoaster Tycoon 3\RCT3plus.exe
  O4 - GS\Program [Public]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
  O4 - GS\QuickLaunch [WENZ]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe http://www.qvo6.com =>Hijacker.Qvo6
  O4 - GS\QuickLaunch [WENZ]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe http://www.qvo6.com =>Hijacker.Qvo6
  O4 - GS\QuickLaunch [WENZ]: Packard Bell Games.lnk . (.WildTangent, Inc. - GameConsole.) -- C:\Program Files (x86)\Packard Bell Games\Packard Bell Game Console\GameConsole-wt.exe
  O4 - GS\QuickLaunch [WENZ]: qvo6.lnk . (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe http://www.qvo6.com =>Hijacker.Qvo6
  O4 - GS\QuickLaunch [WENZ]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) -- C:\Users\geoffrey\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent
  O4 - GS\TaskBar [WENZ]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe http://www.qvo6.com =>Hijacker.Qvo6
  O4 - GS\TaskBar [WENZ]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe http://www.qvo6.com =>Hijacker.Qvo6
  O4 - GS\TaskBar [WENZ]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) -- C:\Users\geoffrey\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent
  O4 - GS\Program [WENZ]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe http://www.qvo6.com =>Hijacker.Qvo6
  O4 - GS\SystemTools [WENZ]: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe http://www.qvo6.com =>Hijacker.Qvo6
  O4 - GS\Desktop [WENZ]: Auslogics DiskDefrag.lnk . (.Auslogics - Disk Defrag.) -- C:\Program Files (x86)\Auslogics\DiskDefrag\DiskDefrag.exe
  O4 - GS\Desktop [WENZ]: Internet Checkers.lnk - Clé orpheline
  O4 - GS\Desktop [WENZ]: Media Player Classic - HC.lnk . (.MPC-HC Team - Media Player Classic - Home Cinema.) -- C:\Program Files (x86)\XP Codec Pack\mpc-hc\mpc-hc.exe
  O4 - GS\Desktop [WENZ]: Microsoft Works.lnk . (...) -- C:\Windows\Installer\{A3088CD2-612B-11D3-AF43-00C04F443448}\FB931E91.exe
  O4 - GS\Desktop [WENZ]: Packard Bell Games.lnk . (.WildTangent, Inc. - GameConsole.) -- C:\Program Files (x86)\Packard Bell Games\Packard Bell Game Console\GameConsole-wt.exe
  O4 - GS\Desktop [WENZ]: Solitaire.lnk - Clé orpheline
  O4 - GS\Desktop [WENZ]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) -- C:\Users\geoffrey\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent
  O4 - GS\QuickLaunch [nathalie]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  O4 - GS\QuickLaunch [nathalie]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
  O4 - GS\TaskBar [nathalie]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  O4 - GS\TaskBar [nathalie]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
  O4 - GS\Program [nathalie]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
  O4 - GS\SystemTools [nathalie]: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
  O4 - GS\Desktop [nathalie]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  O4 - GS\QuickLaunch [hugo]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  O4 - GS\QuickLaunch [hugo]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
  O4 - GS\QuickLaunch [hugo]: Packard Bell Games.lnk . (.WildTangent, Inc. - GameConsole.) -- C:\Program Files (x86)\Packard Bell Games\Packard Bell Game Console\GameConsole-wt.exe
  O4 - GS\TaskBar [hugo]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
  O4 - GS\Program [hugo]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
  O4 - GS\SystemTools [hugo]: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
  O4 - GS\QuickLaunch [geoffrey]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  O4 - GS\QuickLaunch [geoffrey]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
  O4 - GS\TaskBar [geoffrey]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  O4 - GS\Program [geoffrey]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
  O4 - GS\SystemTools [geoffrey]: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
  O4 - GS\Desktop [geoffrey]: Earthquake - Raccourci.lnk . (.Blizzard Entertainment - World of Warcraft Retail.) -- C:\Users\geoffrey\Desktop\Earthquake\Earthquake.exe
  O4 - GS\Desktop [geoffrey]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  O4 - GS\Desktop [geoffrey]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) -- C:\Users\geoffrey\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent
  ~ Global Startup: 124 Legitimates Filtered in 00mn 04s
  
  ---\\ Applications lancées au démarrage du sytème (O4)
  O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\Windows\system32\hkcmd.exe
  O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\Windows\system32\igfxpers.exe
  O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\Windows\system32\igfxtray.exe
  O4 - HKCU\..\Run: [SearchProtection] C:\Users\geoffrey\AppData\Roaming\Search Protection\SearchProtection.exe (.not file.) =>Toolbar.Conduit
  O4 - HKCU\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe =>Toolbar.Google
  O4 - HKLM\..\Wow6432Node\Run: [avast] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\avastUI.exe
  O4 - HKLM\..\Wow6432Node\Run: [tuto4pc_fr_62] Clé orpheline =>PUP.Eorezo
  O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation
  O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation
  O4 - HKUS\S-1-5-18\..\RunOnce: [SPReview] . (.Microsoft Corporation - SP Reviewer.) -- C:\Windows\System32\SPReview\SPReview.exe =>.Microsoft Corporation
  O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation
  O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation
  O4 - HKUS\S-1-5-21-3201979416-3185207537-2710416600-1004\..\Run: [SearchProtection] C:\Users\geoffrey\AppData\Roaming\Search Protection\SearchProtection.exe (.not file.) =>Toolbar.Conduit
  O4 - HKUS\S-1-5-21-3201979416-3185207537-2710416600-1004\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe =>Toolbar.Google
  ~ Application: Scanned in 00mn 00s
  
  ---\\ Modification Domaine/Adresses DNS (O17)
  O17 - HKLM\System\CCS\Services\Tcpip\..\{FA4AA3A3-DDC3-45F2-9645-FF26903C23FA}: DhcpNameServer = 192.168.1.1 192.168.1.1
  O17 - HKLM\System\CS1\Services\Tcpip\..\{FA4AA3A3-DDC3-45F2-9645-FF26903C23FA}: DhcpNameServer = 192.168.1.1 192.168.1.1
  O17 - HKLM\System\CS2\Services\Tcpip\..\{FA4AA3A3-DDC3-45F2-9645-FF26903C23FA}: DhcpNameServer = 192.168.1.1 192.168.1.1
  O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 192.168.1.1
  ~ Domain: Scanned in 00mn 00s
  
  ---\\ Protocole additionnel (O18)
  O18 - Handler: wlmailhtml [64Bits] - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} . (...) --
  O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation
  ~ Protocole Additionnel: Scanned in 00mn 00s
  
  ---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
  O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\Windows\System32\igfxdev.dll
  ~ Winlogon: Scanned in 00mn 00s
  
  ---\\ Liste des services NT non Microsoft et non désactivés (O23)
  O23 - Service: Update Whilokii (Update Whilokii) . (.Whilokii - Whilokii.) - C:\Program Files (x86)\Whilokii\updateWhilokii.exe =>PUP.Whilokii
  O23 - Service: Updater Service (Updater Service) . (.Acer Group - Updater Service.) - C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe
  ~ Services: 11 Legitimates Filtered in 00mn 11s
  
  ---\\ HKCU & HKLM Software Keys
  [HKCU\Software\Pando Networks]
  [HKLM\Software\Wow6432Node\BonanzaDealsLive] =>Adware.BonanzaDeals
  [HKLM\Software\Wow6432Node\Pando Networks]
  [HKLM\Software\Wow6432Node\Whilokii] =>PUP.Whilokii
  ~ Key Software: 219 Legitimates Filtered in 00mn 01s
  
  ---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
  O43 - CFD: 25/10/2013 - 17:52:06 - [0] ----D C:\Program Files (x86)\BonanzaDealsLive =>Adware.BonanzaDeals
  O43 - CFD: 25/10/2013 - 18:27:41 - [0,015] ----D C:\Program Files (x86)\MyPC Backup =>PUP.MyPCBackup
  O43 - CFD: 11/10/2013 - 23:18:21 - [0] ----D C:\Program Files (x86)\Pando Networks
  O43 - CFD: 25/10/2013 - 11:32:34 - [0,515] ----D C:\Program Files (x86)\Whilokii =>PUP.Whilokii
  O43 - CFD: 23/10/2013 - 22:24:56 - [0] ----D C:\ProgramData\Babylon =>Toolbar.Babylon
  O43 - CFD: 25/10/2013 - 17:52:06 - [0,079] ----D C:\ProgramData\BonanzaDealsLive =>Adware.BonanzaDeals
  O43 - CFD: 07/08/2013 - 20:10:09 - [0] ----D C:\Users\geoffrey\AppData\Roaming\Reg
  ~ Program Folder: 171 Legitimates Filtered in 00mn 31s
  
  ---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
  O44 - LFC:[MD5.02DC0F457C2CC6E23F073F94BAC1A871] - 12/10/2013 - 01:25:25 ---A- . (...) -- C:\Windows\wininit.ini [61]
  O44 - LFC:[MD5.27812D8E0D1A1AAEE47189A4B4AB0CF0] - 23/10/2013 - 21:25:20 ---A- . (.Systweak Inc., (www.systweak.com) - Regclean Pro.) -- C:\Windows\SysNative\roboot64.exe [20312] =>Rogue.RegistryPowerCleaner
  O44 - LFC:[MD5.27812D8E0D1A1AAEE47189A4B4AB0CF0] - 23/10/2013 - 21:25:20 ---A- . (.Systweak Inc., (www.systweak.com) - Regclean Pro.) -- C:\Windows\System32\roboot64.exe [20312] =>Rogue.RegistryPowerCleaner
  ~ Files: 100 Legitimates Filtered in 00mn 21s
  
  ---\\ Derniers fichiers créés dans Windows Prefetcher (O45)
  O45 - LFCP:[MD5.3008E5BB74C040A7A6951F65ABE6787A] - 23/10/2013 - 21:24:49 ---A- - C:\Windows\Prefetch\WAJAM_VALIDATE.EXE-C7AEBE1C.pf =>Toolbar.Wajam
  O45 - LFCP:[MD5.57C2E35D56A6FA6AF1F7B4347CD50668] - 23/10/2013 - 21:25:02 ---A- - C:\Windows\Prefetch\DOKOTB.EXE-C0C91AEE.pf
  O45 - LFCP:[MD5.2768823528CA9000019887E0BE9516A1] - 23/10/2013 - 21:25:02 ---A- - C:\Windows\Prefetch\WHILOKII_IS.EXE-72B27CC5.pf =>PUP.Whilokii
  O45 - LFCP:[MD5.1716515EA8354B014D428BD9FBAF4425] - 23/10/2013 - 21:25:11 ---A- - C:\Windows\Prefetch\BD.EXE-47B87377.pf
  O45 - LFCP:[MD5.4F0B0977CDD9A28C30AC8ECF1C1BE829] - 23/10/2013 - 21:25:17 ---A- - C:\Windows\Prefetch\UNINST.EXE-C5B87011.pf
  O45 - LFCP:[MD5.63CCFBDCC0D6E20508F8089274093223] - 23/10/2013 - 21:25:19 ---A- - C:\Windows\Prefetch\SQLITE3.EXE-F988031F.pf
  O45 - LFCP:[MD5.115FCB1FFEA26E7A1942FE99BB4AAA7B] - 23/10/2013 - 21:25:22 ---A- - C:\Windows\Prefetch\RCPSETUP_ADPPI_ADPPI.EXE-6279987B.pf
  O45 - LFCP:[MD5.F86190AF3504C2978963DA93CAF49A39] - 23/10/2013 - 21:25:22 ---A- - C:\Windows\Prefetch\RCPSETUP_ADPPI_ADPPI.TMP-2D4F5F2F.pf
  O45 - LFCP:[MD5.54A3524A614A2CA4B7002D37A83767E0] - 23/10/2013 - 21:25:33 ---A- - C:\Windows\Prefetch\BONANZADEALSLIVE.EXE-91518192.pf =>Adware.BonanzaDeals
  O45 - LFCP:[MD5.63C8252015AC096791AEA498CBC31C3B] - 23/10/2013 - 21:25:33 ---A- - C:\Windows\Prefetch\CLOUD_BACKUP_SETUP_INTL.EXE-46E095F2.pf
  O45 - LFCP:[MD5.AFA8B34439996A104108BBB2CE9D05C5] - 23/10/2013 - 21:25:47 ---A- - C:\Windows\Prefetch\BONANZADEALSLIVE.EXE-918DAA3F.pf =>Adware.BonanzaDeals
  O45 - LFCP:[MD5.FF82D1BAE96EDD99C5A2F79E051F8D35] - 23/10/2013 - 21:25:52 ---A- - C:\Windows\Prefetch\677681~1.EXE-CEA79D1F.pf
  O45 - LFCP:[MD5.BBBBC653425381646F53B36ACA2A5D7C] - 23/10/2013 - 21:26:02 ---A- - C:\Windows\Prefetch\UPDATEWHILOKII.EXE-F72E37F5.pf =>PUP.Whilokii
  O45 - LFCP:[MD5.35A5C9443209A8FA46429ADA37DE101F] - 25/10/2013 - 16:52:51 ---A- - C:\Windows\Prefetch\MYPC BACKUP.EXE-B5EA9514.pf =>PUP.MyPCBackup
  O45 - LFCP:[MD5.C3944F150868404E938951582215CA4B] - 25/10/2013 - 19:50:25 ---A- - C:\Windows\Prefetch\BONANZADEALSLIVE.EXE-67A98E0D.pf =>Adware.BonanzaDeals
  O45 - LFCP:[MD5.F9B84643A6C80684A782260020F32446] - 26/10/2013 - 01:19:52 ---A- - C:\Windows\Prefetch\CHKRZM.EXE-8FC0DC2D.pf
  ~ Prefetcher: 153 Legitimates Filtered in 00mn 01s
  
  ---\\ Enumération des clés de registre StartupReg (SMSR) (O53)
  O53 - SMSR:HKLM\...\startupreg\24x7HELP [Key] . (...) -- C:\Program Files (x86)\24x7Help\App24x7Help.exe (.not file.) =>PUP.24x7Help
  O53 - SMSR:HKLM\...\startupreg\Boxore Client [Key] . (...) -- C:\Program Files (x86)\Boxore\BoxoreClient\boxore.exe (.not file.) =>Adware.Boxore
  O53 - SMSR:HKLM\...\startupreg\Browser Infrastructure Helper [Key] . (...) -- C:\Users\WENZ\AppData\Local\Smartbar\Application\Smartbar.exe (.not file.) =>Hijacker.SmartBar
  O53 - SMSR:HKLM\...\startupreg\ConduitFloatingPlugin_biahaobfpkgeiomkihcdgknebbhadonc [Key] . (...) -- C:\Program Files (x86)\Conduit\CT3307695\plugins\TBVerifier.dll (.not file.)
  O53 - SMSR:HKLM\...\startupreg\Desk 365 [Key] . (...) -- C:\Program Files (x86)\Desk 365\desk365.exe (.not file.) =>Hijacker.22Find
  O53 - SMSR:HKLM\...\startupreg\Iminent [Key] . (...) -- C:\Program Files (x86)\Iminent\Iminent.exe (.not file.) =>Adware.IMBooster
  O53 - SMSR:HKLM\...\startupreg\IminentMessenger [Key] . (...) -- C:\Program Files (x86)\Iminent\Iminent.Messengers.exe (.not file.) =>Adware.IMBooster
  O53 - SMSR:HKLM\...\startupreg\lollipop [Key] . (...) -- c:\users\wenz\appdata\local\lollipop\lollipop.exe (.not file.) =>Adware.Lollipop
  O53 - SMSR:HKLM\...\startupreg\NTRedirect [Key] . (...) -- C:\Users\WENZ\AppData\Roaming\BabSolution\Shared\enhancedNT.dll (.not file.) =>Hijacker.BabSolution
  O53 - SMSR:HKLM\...\startupreg\offerbox [Key] . (...) -- C:\Program Files (x86)\OfferBox\OfferBox.exe (.not file.) =>PUP.OfferBox
  O53 - SMSR:HKLM\...\startupreg\PCFixSpeed [Key] . (...) -- C:\Program Files (x86)\PCFixSpeed\PCFixTray.exe (.not file.) =>PUP.PCFixSpeed
  O53 - SMSR:HKLM\...\startupreg\SearchProtect [Key] . (...) -- C:\Users\WENZ\AppData\Roaming\SearchProtect\bin\cltmng.exe (.not file.) =>Toolbar.Conduit
  O53 - SMSR:HKLM\...\startupreg\SearchProtectAll [Key] . (...) -- C:\Program Files (x86)\SearchProtect\bin\cltmng.exe (.not file.) =>Toolbar.Conduit
  O53 - SMSR:HKLM\...\startupreg\SuperCopier2.exe [Key] . (...) -- C:\Program Files (x86)\SuperCopier2\SuperCopier2.exe (.not file.)
  O53 - SMSR:HKLM\...\startupreg\tuto4pc_fr_62 [Key] . (...) -- C:\Program Files (x86)\tuto4pc_fr_62\tuto4pc_fr_62.exe (.not file.) =>PUP.Eorezo
  ~ SMSR Keys: 29 Legitimates Filtered in 00mn 00s
  
  ---\\ Enumération des clés de registre PoliciesSystem (MWPS) (O55)
  O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
  O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
  ~ MWPS: 16 Legitimates Filtered in 00mn 00s
  
  ---\\ Enumération des clés de registre PoliciesExplorer (MWPE) (O56)
  O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1
  ~ MWPE Keys: 3 Legitimates Filtered in 00mn 00s
  
  ---\\ Liste des pilotes du système (SDL) (O58)
  O58 - SDL:[MD5.286193DC28CFB4CEB8D378E20A0850A9] - 30/08/2013 - 08:48:10 ---A- . (...) -- C:\Windows\System32\Drivers\aswRvrt.sys [65336]
  ~ Drivers: 16 Legitimates Filtered in 00mn 00s
  
  ---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61)
  O61 - LFC: 25/10/2013 - 10:52:24 ---A- . (...) -- C:\Users\geoffrey\AppData\Roaming\D2Info0 [117]
  O61 - LFC: 25/10/2013 - 10:52:24 ---A- . (...) -- C:\Users\geoffrey\AppData\Roaming\app\Jerakine_lang.dat [5077]
  O61 - LFC: 26/10/2013 - 10:52:07 ---A- . (...) -- C:\Users\geoffrey\AppData\Local\Google\Chrome\User Data\Certificate Revocation Lists [260408]
  O61 - LFC: 26/10/2013 - 10:52:14 ---A- . (...) -- C:\Users\geoffrey\AppData\Local\Google\Chrome\User Data\Local State [44204]
  O61 - LFC: 26/10/2013 - 10:52:32 ---A- . (...) -- C:\Users\geoffrey\AppData\Roaming\ZHP\Log.txt [41380] =>.Nicolas Coolman
  O61 - LFC: 26/10/2013 - 10:52:32 ---A- . (...) -- C:\Users\geoffrey\AppData\Roaming\ZHP\TestsZHPDiag.txt [2936] =>.Nicolas Coolman
  ~ 8 Fichiers temporaires (Temporary files)
  ~ Files: 290 Legitimates Filtered in 00mn 36s
  
  ---\\ Liste des outils de désinfection (LATC) (O63)
  O63 - Logiciel: ZHPDiag 2013 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 =>.Nicolas Coolman
  ~ ADS: Scanned in 00mn 00s
  
  ---\\ Associations Shell Spawning (O67)
  O67 - Shell Spawning: <.html> <ChromeHTML>[HKCU\..\open\Command] (.Not Key.)
  ~ FASS Keys: 19 Legitimates Filtered in 00mn 00s
  
  ---\\ Menu de démarrage Internet (SMI) (O68)
  O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
  O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  O68 - StartMenuInternet: <Google Chrome.BTNYCY4CGGSFGEPYEPPKF7JTXE> <Google Chrome>[HKLM\..\Shell\open\Command] (...) -- C:\Users\geoffrey\AppData\Local\Google\Chrome\Application\chrome.exe" http://www.qvo6.com =>Hijacker.Qvo6
  O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
  ~ Keys: Scanned in 00mn 00s
  
  ---\\ Recherche d'infection sur les navigateurs internet (SBI) (O69)
  O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - https://www.bing.com/?toHttps=1&redig=69DA0EF8272048D9864AF4DB37211DE8
  O69 - SBI: SearchScopes [HKCU] {4AA8D98D-83D2-3B0B-23B0-667AAFFB4606} - (Google) - https://www.google.com/?gws_rd=ssl
  O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} - (Google) - https://www.google.com/?gws_rd=ssl
  O69 - SBI: SearchScopes [HKCU] {B7A052D6-433A-42CB-9165-87E9BD100337} - (Yahoo! Search) - https://fr.search.yahoo.com/
  ~ Keys: Scanned in 00mn 00s
  
  ---\\ Recherche particulière à la racine du système (SPRF) (O84)
  [MD5.D07444BDB22757545CD2FA91654F2FD0] [SPRF][24/08/2013] (...) -- C:\Users\geoffrey\AppData\Local\Temp\Quarantine.exe [328019]
  [MD5.3C74C26999F2060BC6302448F173A342] [SPRF][28/08/2013] (.Babylon Ltd. - Uninstaller Application.) -- C:\Users\geoffrey\AppData\Local\Temp\uninst1.exe [340464] =>Toolbar.Babylon
  [MD5.ACE60E0F5AC7401EFC4A179A29FD3463] [SPRF][22/10/2013] (.Pas de propriétaire - Minecraft Launcher.) -- C:\Users\geoffrey\Desktop\Minecraft.exe [356352]
  ~ Files: 4 Legitimates Filtered in 00mn 00s
  
  ---\\ Recherche des packages WindowsInstaller (WIS) (O93) (NTFS)
  [MD5.6DDD32F0CFCD67822CE86664C6CC89F4] [WIS][17/08/2013] (.ReSoft Ltd. - Shopping Helper Smartbar.) -- C:\Windows\Installer\18c20c.msi [9158656] =>Hijacker.SmartBar
  ~ WIS: 72 Legitimates Filtered in 00mn 19s
  
  ---\\ Etat général des services not Microsoft (EGS) (SR=Running, SS=Stopped)
  SS - | Demand 09/10/2009 169312 | (AdobeActiveFileMonitor8.0) . (.Adobe Systems Incorporated.) - c:\Program Files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe
  SR - | Auto 11/05/2013 65640 | (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
  SS - | Demand 10/10/2013 257416 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
  SS - | Demand 10/07/1658 0 | (AIDA64Driver) . (...) - C:\Program Files (x86)\FinalWire\AIDA64 Extreme Edition\kerneld.x64
  SR - | Auto 07/09/2013 55624 | (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
  SR - | Auto 30/08/2013 46808 | (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
  SR - | Auto 30/08/2011 462184 | (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe
  SS - | Demand 03/08/2013 867080 | (FLEXnet Licensing Service) . (.Acresso Software Inc..) - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
  SS - | Demand 10/10/2009 238328 | (GameConsoleService) . (.WildTangent, Inc..) - C:\Program Files (x86)\Packard Bell Games\Packard Bell Game Console\GameConsoleService.exe
  SR - | Auto 28/08/2009 1150496 | (Greg_Service) . (.Acer Incorporated.) - C:\Program Files (x86)\Packard Bell\Registration\GregHSRW.exe
  SS - | Auto 08/08/2013 116648 | (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
  SS - | Demand 08/08/2013 116648 | (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
  SS - | Demand 08/08/2013 194032 | (gusvc) . (.Google.) - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
  SR - | Auto 01/10/2013 2746704 | (Hamachi2Svc) . (.LogMeIn Inc..) - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
  SR - | Auto 10/02/2009 116104 | (IJPLMSVC) . (...) - C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.exe
  SS - | Demand 23/10/2013 641352 | (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe
  SS - | Demand 18/06/2013 117144 | (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
  SS - | Demand 15/01/2010 935208 | (Nero BackItUp Scheduler 4.0) . (.Nero AG.) - C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
  SS - | Auto 05/09/2013 171680 | (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe
  SS - | Auto 05/10/2013 65304 | (Update Whilokii) . (.Whilokii.) - C:\Program Files (x86)\Whilokii\updateWhilokii.exe =>PUP.Whilokii
  SR - | Auto 29/01/2010 243232 | (Updater Service) . (.Acer Group.) - C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe
  SR - | Auto 14/07/2009 27136 | C:\Program Files (x86)\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
  SR - | Auto 10/07/1658 0 | (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe =>.Microsoft Corporation
  SR - | Auto 14/07/2009 27136 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
  ~ Services: Scanned in 00mn 23s
  
  ---\\ Recherche d'infection sur le Master Boot Record (MBR)(O80)
  Run by geoffrey at 26/10/2013 10:54:25
  ~ OS 64 not supported by MBR tool
  ~ MBR: 0 Legitimates Filtered in 00mn 00s
  
  ---\\ Recherche d'infection sur le Master Boot Record (MBRCheck)(O80)
  Written by ad13, http://ad13.geekstog
  Run by geoffrey at 26/10/2013 10:54:27
  
  ********* Dump file Name *********
  C:\PhysicalDisk0_MBR.bin
  ~ MBR: Scanned in 00mn 02s
  
  ---\\ Scan Additionnel (O88)
  Database Version : 12960 - (25/10/2013)
  Clés trouvées (Keys found) : 25
  Valeurs trouvées (Values found) : 3
  Dossiers trouvés (Folders found) : 7
  Fichiers trouvés (Files found) : 8
  
  [HKLM\Software\Google\Chrome\Extensions\iaimhpklononapfjngelgdokckfjekfc] =>PUP.Whilokii^
  [HKLM\Software\Google\Chrome\Extensions\lechbfhppigdgmodjlmcbiebfpogaeli] =>Adware.SaveShare^
  [HKLM\Software\Google\Chrome\Extensions\pbpohikckhbcljgombipcdoinkaedlfa] =>Spyware.SmartDisplay^
  [HKLM\SYSTEM\CurrentControlSet\Services\Update Whilokii] =>PUP.Whilokii^
  [HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\24x7HELP] =>PUP.24x7Help^
  [HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\Boxore Client] =>Adware.Boxore^
  [HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\Browser Infrastructure Helper] =>Hijacker.SmartBar^
  [HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\Desk 365] =>Hijacker.22Find^
  [HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\Iminent] =>Adware.IMBooster^
  [HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\IminentMessenger] =>Adware.IMBooster^
  [HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\lollipop] =>Adware.Lollipop^
  [HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\NTRedirect] =>Hijacker.BabSolution^
  [HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\offerbox] =>PUP.OfferBox^
  [HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\PCFixSpeed] =>PUP.PCFixSpeed^
  [HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\SearchProtect] =>Toolbar.Conduit^
  [HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\SearchProtectAll] =>Toolbar.Conduit^
  [HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\tuto4pc_fr_62] =>PUP.Eorezo^
  [HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}] =>PUP.V9Software
  [HKLM\Software\Classes\Prod.cap] =>Toolbar.Babylon
  [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375] =>PUP.Tarma
  [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5] =>PUP.Tarma
  [HKLM\Software\Classes\CLSID\{11111111-1111-1111-1111-110311341126}] =>PUP.CrossRider
  [HKLM\Software\Classes\CLSID\{22222222-2222-2222-2222-220322342226}] =>PUP.CrossRider
  [HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311341126}] =>PUP.CrossRider
  [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CA0054A5AB3EFFE4CB5660E44A1E7DCC] =>Adware.Boxore^
  [HKLM\Software\Microsoft\Internet Explorer\Toolbar]:{2318C2B1-4965-11d4-9B18-009027A5CD4F} =>Toolbar.Google^
  [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:SearchProtection =>Toolbar.Conduit^
  [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:tuto4pc_fr_62 =>PUP.Eorezo^
  C:\Users\geoffrey\AppData\Roaming\Mozilla\Firefox\Profiles\utk92q2b.default\7125a285-7e68-47aa-9d72-e81874f4d47e@d3fcdb92-135d-4a8a-8cf6-11e3b57c5fda.com =>Adware.PlusHD^
  C:\Users\geoffrey\AppData\Roaming\Mozilla\Firefox\Profiles\utk92q2b.default\jid1-FCM5fDwCW5M3AQ@jetpack =>Spyware.SmartDisplay^
  C:\Program Files (x86)\BonanzaDealsLive =>Adware.BonanzaDeals^
  C:\Program Files (x86)\MyPC Backup =>PUP.MyPCBackup^
  C:\Program Files (x86)\Whilokii =>PUP.Whilokii^
  C:\ProgramData\Babylon =>Toolbar.Babylon^
  C:\ProgramData\BonanzaDealsLive =>Adware.BonanzaDeals^
  C:\Users\geoffrey\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaimhpklononapfjngelgdokckfjekfc =>PUP.Whilokii^
  C:\Users\geoffrey\AppData\Local\Google\Chrome\User Data\Default\Extensions\lechbfhppigdgmodjlmcbiebfpogaeli =>Adware.SaveShare^
  C:\Users\geoffrey\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbpohikckhbcljgombipcdoinkaedlfa =>Spyware.SmartDisplay^
  [HKLM\Software\Wow6432Node\BonanzaDealsLive] =>Adware.BonanzaDeals^
  [HKLM\Software\Wow6432Node\Whilokii] =>PUP.Whilokii^
  C:\Users\geoffrey\AppData\Local\Temp\uninst1.exe =>Toolbar.Babylon^
  C:\Windows\Installer\18c20c.msi =>Hijacker.SmartBar^
  ~ Additionnel Scan: 341576 Items scanned in 00mn 55s
  
  ---\\ Récapitulatif des détections trouvées sur votre station
  ~ http://nicolascoolman.webs.com/apps/blog/show/33413667-pup-whilokii =>PUP.Whilokii
  ~ http://nicolascoolman.webs.com/apps/blog/show/31929570-adware-saveshare =>Adware.SaveShare
  ~ http://nicolascoolman.webs.com/apps/blog/show/32662245-spyware-smartdisplay =>Spyware.SmartDisplay
  ~ http://nicolascoolman.webs.com/apps/blog/show/28138048-adware-plushd =>Adware.PlusHD
  ~ http://nicolascoolman.webs.com/apps/blog/show/32384220-toolbar-google =>Toolbar.Google
  ~ http://nicolascoolman.webs.com/apps/blog/show/26631242-hijacker-qvo6 =>Hijacker.Qvo6
  ~ http://nicolascoolman.webs.com/apps/blog/show/29507721-toolbar-conduit =>Toolbar.Conduit
  ~ http://nicolascoolman.webs.com/apps/blog/show/27469224-pup-eorezo =>PUP.EoRezo
  ~ http://nicolascoolman.webs.com/apps/blog/show/32816468-adware-bonanzadeals =>Adware.BonanzaDeals
  ~ http://nicolascoolman.webs.com/apps/blog/show/32174815-pup-mypcbackup =>PUP.MyPCBackup
  ~ http://nicolascoolman.webs.com/apps/blog/show/26627369-toolbar-babylon =>Toolbar.Babylon
  ~ http://nicolascoolman.webs.com/apps/blog/show/29295819-rogue-registrypowercleaner =>Rogue.RegistryPowerCleaner
  ~ http://nicolascoolman.webs.com/apps/blog/show/27379491-toolbar-wajam =>Toolbar.Wajam
  ~ http://nicolascoolman.webs.com/apps/blog/show/33002268-pup-24x7help =>PUP.24x7Help
  ~ http://nicolascoolman.webs.com/apps/blog/show/26626977-adware-boxore =>Adware.Boxore
  ~ http://nicolascoolman.webs.com/apps/blog/show/26990375-hijacker-smartbar =>Hijacker.SmartBar
  ~ http://nicolascoolman.webs.com/apps/blog/show/26630379-hijacker-22find =>Hijacker.22Find
  ~ http://nicolascoolman.webs.com/apps/blog/show/26684723-adware-imbooster =>Adware.IMBooster
  ~ http://nicolascoolman.webs.com/apps/blog/show/26630902-adware-lollipop =>Adware.Lollipop
  ~ http://nicolascoolman.webs.com/apps/blog/show/26678994-hijacker-babsolution =>Hijacker.BabSolution
  ~ http://nicolascoolman.webs.com/apps/blog/show/28606910-pup-offerbox =>PUP.OfferBox
  ~ http://nicolascoolman.webs.com/apps/blog/show/33519836-pup-pcfixspeed =>PUP.PCFixSpeed
  ~ http://nicolascoolman.webs.com/apps/blog/show/27672211-pup-v9software =>PUP.V9Software
  ~ http://nicolascoolman.webs.com/apps/blog/show/29637859-toolbar-tarma =>PUP.Tarma
  ~ http://nicolascoolman.webs.com/apps/blog/show/27583526-pup-crossrider =>PUP.CrossRider
  ~ MSI: 25 link(s) detected in 00mn 55s
  
  ~ 1611 Legitimates filtered by white list
  End of the scan (568 lines in 05mn 18s)(0)
  
  0
Réponse 2 / 24
ellana29460
Ton matériel est juste vieux.

Ton Intel Celeron a pris du plomb dans l'aile (c'est du a son age), et il ne sera plus jamais aussi performant qu'avant.

En plus avec 3go de RAM, tes jeux devaient déjà pas être super fluides, non?

Si tu as un cd de Windows xp et une clé d'activation légale, xp prendra moins de RAM et sollicitera moins ton processeur, donc tu bénéficiera de plus de puissance pour jouer a tes jeux (obtenus LÉGALEMENT, conformément aux regles de ce forum).

sinon, tu peux optimiser le démarrage de Windows 7 (ce qui aura pour effet qu'il démarrera plus vite, et consommera moins de RAM.
0
1. Geoffrey3613 Auteur
  
  J'ai déja plein de chose faite pour que mon pc soit plus rapide comme Msconfig, ready boot sur clé usb, plein de choses baisser comme les résolution etc.. mais mon pc et tout de meme très lent.
  
  0
2. Geoffrey3613 Auteur
  
  Est non je n'ai pas reçu de CD windows avec.
  
  0
Réponse 3 / 24
spiralio
Bonjour, ton pc s'est vraiment mis à ralentir au bout de combien de temps? Plus d'un mois quand même, non?
0
Réponse 4 / 24
spiralio
Je suis d'accord avec toi sur l'ancienneté du pc et l'éventuel changement d'OS.
Enfin un disque XP ça coûte cher et l'on n'en trouve plus beaucoup...
J'ai eu aussi des pc anciens mais qui n'avaient pas de tels symptômes. Je soupçonne quelques pbs "matériels" aussi.
Il faudrait peut être faire un diagnostic avec AIDA64 et un ou deux autres outils?
Evidemment, on ne peut transformer cet ordi en bête de course mais s'il n'y a pas trop de dégats ( genre barrette mémoire HS... ) on peut peut-être le revigorer un peu...
0
1. Geoffrey3613 Auteur
  
  C'est bon j'ai télécharger AIDA64 je doit faire quoi maintenan ?
  
  0
2. spiralio
  
  Oui d'accord...
  Mais as-tu fait une vérification de tes barrettes RAM par exemple.
  Je n'ose même pas poser le question, je suppose que tu as bien nettoyé l'intérieur du PC
  Autre chose, il ne chauffe pas trop?
  Pas de problèmes de ventilateurs ( principal, au niveau du processeur, de la carte graphique, etc.
  Un test avec AID64 nous permettrait de vérifier pas mal de choses.
  Pas maintenant car cela prendrait trop de temps, je bosse tout à l'heure :(
  
  0
3. spiralio
  
  Juste quelques petites vérif pour le moment car je gratte tout à l'heure
  AIDA est installé?
  
  0
4. spiralio
  
  Toujours là ;)
  
  0
5. spiralio
  
  Bon, à ce soir peut-être...
  
  0
Vous n’avez pas trouvé la réponse que vous recherchez ?

La communauté CCM répond en moyenne en moins de 2h.

Posez votre question
Réponse 5 / 24
lilidurhone Contributeur sécurité
Le mot cr@ck vous a pas interpellé?!!

* Télécharge ZHPDiag (de Nicolas Coolman)
https://www.zebulon.fr/telechargements/securite/systeme/zhpdiag.html ou https://www.commentcamarche.net/telecharger/utilitaires/24803-zhpdiag/

* Au cas où le premier lien ne marcherai pas, clique sur celui de dessous
ftp://zebulon.fr/ZHPDiag2.exe

* Laisse toi guider lors de l'installation, il se lancera automatiquement à la fin.

* Surtout, n'oublie pas d'installer son icône sur le bureau l'icône est en forme de parchemin
https://www.cjoint.com/13sp/CIvuQfap3YY_zhpdiag.png

* A l'ouverture du logiciel il te sera proposé deux options "rechercher" et "configurer"

* Cliques sur configurer

* Options puis tous

* Clique sur l'icône représentant une loupe + (« Lancer le diagnostic »)

* Enregistre le rapport sur ton Bureau à l'aide de l'icône représentant une disquette

* Pour héberger le rapport, rends toi sur cjoint.com
* Clique sur choisissez un fichier va chercher le rapport dans ton PC.

* Le rapport est sauvegardé dans C:\ZHP\ZHPDiag.txt

* Une fois le rapport trouvé, sélectionne le, et clique sur Ouvrir

* Choisis le type de diffusion(je te conseille privée 4 jours il sera détruit)

* Puis cliques sur créer le lien cjoint

* Une fois que tu auras obtenu le lien copies colle dans ta prochaine réponse

* Pour t'aider http://www.pc-infopratique.com/forum-informatique/tutoriel-heberger-rapport-vt-67934.html
0
1. spiralio
  
  Ben non, moi je ne suis pas vraiment un crack. Pourtant, ce n'est pas faute d'essayer ;)
  
  0
2. Geoffrey3613 Auteur
  
  Tien https://www.cjoint.com/?3Juw6lQvZvl
  
  0
Réponse 6 / 24
lilidurhone Contributeur sécurité
Tu as dû installer des logiciels potentiellement indésirables

Pour éviter ce genre de problème :

- Ne télécharge aucun programme proposé dans des publicités ou sur des sites suspects. A noter que certains sites connus comme O1net, Softronic, Tuto4PC, etc modifient parfois les programmes proposés au téléchargement pour y ajouter des logiciels publicitaires ==> Préfère toujours le téléchargement directement sur le site de l'éditeur.

- Au cours de l'installation d'un programme gratuit, lis bien attentivement et décoche tous les programmes additionnels qui sont proposés, en particulier les barres d'outils.

Pour ton information lis ces dossier sur les Programmes Potentiellement Indésirables et Les Barres d'Outils ce n'est pas obligatoires

* Télécharge cet outil simple d'utlisation

http://general-changelog-team.fr/fr/downloads/viewdownload/20-outils-de-xplode/2-adwcleaner (de Xplode) sur ton bureau.

* Si problème avec le 1er lien prends le ici https://www.commentcamarche.net/telecharger/securite/2759-adwcleaner/

* Lance le (Sous vista/seven/8 clic droit dessus,et sur exécuter en tant qu'administrateur)si tu es sous xp double cliques dessus

* Cliques sur scanner
* Poste le rapport de recherche C:\Adwcleaner[R]

* Note le rapport de recherche est également sauvegardé sous C:\Adwcleaner[R1]
0
1. Geoffrey3613 Auteur
  
  Le scanne et fait j'ai enregistrer le rapport je clique désinstallé ?
  
  0
Réponse 7 / 24
lilidurhone Contributeur sécurité
Non "nettoyer"
0
1. Geoffrey3613 Auteur
  
  bon j'ai toujours mon probleme :(
  
  0
Réponse 8 / 24
lilidurhone Contributeur sécurité
Je le sais!!

J'attends mon rapport
0
1. Geoffrey3613 Auteur
  
  De Zhpdiag ?
  ~ Rapport de ZHPDiag v2013.10.20.55 - Nicolas Coolman (20/10/2013)
  ~ Lancé par geoffrey (20/10/2013 22:50:12)
  ~ Adresse du Site Web https://nicolascoolman.webs.com/
  ~ Forums gratuits d'Assistance à la désinfection : https://nicolascoolman.webs.com/
  ~ Traduit par Nicolas Coolman
  ~ Etat de la version :
  ~ Liste blanche : Activée par le programme
  ~ Elévation des Privilèges : OK
  ~ User Account Control (UAC): Deactivate by program
  
  ---\\ Navigateurs Internet
  MSIE: Internet Explorer v10.0.9200.16721
  MFIE: Mozilla Firefox 22.0
  GCIE: Google Chrome v30.0.1599.101 (Defaut)
  
  ---\\ Informations sur les produits Windows
  ~ Langage: Français
  Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)
  Windows Server License Manager Script : OK
  ~ Windows(R) 7, OEM_SLP channel
  System Locked Preinstallation (OEM_SLP) : OK
  Windows ID Activation : OK
  ~ Windows Partial Key : 7QJB7
  Windows License : OK
  ~ Windows Remaining Initializations Number : 3
  Software Protection Service (Protection logicielle) : OK
  Windows Automatic Updates : OK
  Windows Activation Technologies : OK
  
  ---\\ Logiciels de protection du système
  avast! Free Antivirus v8.0.1497.0
  Windows Defender W7
  
  ---\\ Logiciels d'optimisation du système
  
  ---\\ Logiciels de partage PeerToPeer
  
  ---\\ Surveillance de Logiciels
  Adobe Flash Player 11 Plugin
  Adobe Reader XI
  Java 7 Update 25
  
  ---\\ Informations sur le système
  ~ Processor: Intel64 Family 6 Model 22 Stepping 1, GenuineIntel
  ~ Operating System: 64 Bits
  Boot mode: Normal (Normal boot)
  Total RAM: 3037 MB (56% free)
  System Restore: Activé (Enable)
  System drive C: has 32 GB (22%) free of 140 GB
  
  ---\\ Mode de connexion au système
  ~ Computer Name: WENZ-PC
  ~ User Name: geoffrey
  ~ All Users Names: WENZ, nathalie, hugo, HomeGroupUser$, geoffrey, Administrateur,
  ~ Unselected Option: None
  Logged in as Administrator
  
  ---\\ Variables d'environnement
  ~ System Unit : C:\
  ~ %AppZHP% : C:\Users\geoffrey\AppData\Roaming\ZHP\
  ~ %AppData% : C:\Users\geoffrey\AppData\Roaming\
  ~ %Desktop% : C:\Users\geoffrey\Desktop\
  ~ %Favorites% : C:\Users\geoffrey\Favorites\
  ~ %LocalAppData% : C:\Users\geoffrey\AppData\Local\
  ~ %StartMenu% : C:\Users\geoffrey\AppData\Roaming\Microsoft\Windows\Start Menu\
  ~ %Windir% : C:\Windows\
  ~ %System% : C:\Windows\System32\
  
  ---\\ Enumération des unités disques
  C: Hard drive, Flash drive, Thumb drive (Free 32 Go of 140 Go)
  D: Hard drive, Flash drive, Thumb drive (Free 132 Go of 141 Go)
  E: CD-ROM drive (Free 0 Go of 0 Go)
  H: Floppy drive, Flash card reader, USB Key (Not Inserted)
  I: Floppy drive, Flash card reader, USB Key (Not Inserted)
  J: Floppy drive, Flash card reader, USB Key (Not Inserted)
  L: Floppy drive, Flash card reader, USB Key (Not Inserted)
  
  ---\\ Etat du Centre de Sécurité Windows
  [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
  ~ Security Center: 41 Legitimates Filtered in 00mn 00s
  
  ---\\ Recherche particulière de fichiers génériques
  [MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorateur Windows.) (.25/02/2011 - 07:19:30.) -- C:\Windows\Explorer.exe [2871808]
  [MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 - 02:39:52.) -- C:\Windows\System32\Wininit.exe [129024]
  [MD5.D28B35DE88D27EFB27DF4B1E8319E3C0] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.22/09/2013 - 23:55:10.) -- C:\Windows\System32\wininet.dll [2241024]
  [MD5.1151B1BAA6F350B1DB6598E0FEA7C457] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.20/11/2010 - 14:25:30.) -- C:\Windows\System32\Winlogon.exe [390656]
  [MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Bibliothèque de licences.) (.20/11/2010 - 14:27:26.) -- C:\Windows\System32\sppcomapi.dll [232448]
  [MD5.314C17917AC8523EC77A710215012A65] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.14/09/2013 - 02:10:19.) -- C:\Windows\system32\Drivers\AFD.sys [497152]
  [MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 - 02:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128]
  [MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/07/2009 - 00:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160]
  [MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.20/11/2010 - 10:19:21.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456]
  [MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.20/11/2010 - 10:26:32.) -- C:\Windows\system32\Drivers\DfsC.sys [102400]
  [MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.20/11/2010 - 11:43:43.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368]
  [MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) (.14/07/2009 - 00:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472]
  [MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.14/07/2009 - 01:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224]
  [MD5.A5D9106A73DC88564C825D317CAC68AC] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.27/04/2011 - 03:40:40.) -- C:\Windows\system32\Drivers\MRxSmb.sys [158208]
  [MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) (.20/11/2010 - 10:23:20.) -- C:\Windows\system32\Drivers\netBT.sys [261632]
  [MD5.B98F8C6E31CD07B2E6F71F7F648E38C0] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.12/04/2013 - 15:45:08.) -- C:\Windows\system32\Drivers\ntfs.sys [1656680]
  [MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/07/2009 - 01:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280]
  [MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.20/11/2010 - 11:52:35.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [129536]
  [MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.14/07/2009 - 01:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184]
  [MD5.DDAD5A7AB24D8B65F8D724F5C20FD806] - (.Microsoft Corporation - TDI Translation Driver.) (.20/11/2010 - 10:21:56.) -- C:\Windows\system32\Drivers\tdx.sys [119296]
  [MD5.0D08D2F3B3FF84E433346669B5E0F639] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.20/11/2010 - 14:34:02.) -- C:\Windows\system32\Drivers\volsnap.sys [295808]
  ~ Generic Processes: Scanned in 00mn 00s
  
  ---\\ Etat des fichiers cachés (Caché/Total)
  ~ Mes images (My Pictures) : 1/8
  ~ Mes musiques (My Musics) : 5/24
  ~ Mes Videos (My Videos) : 1/23
  ~ Mes Favoris (My Favorites) : 1/26
  ~ Mes Documents (My Documents) : 1/2
  ~ Mon Bureau (My Desktop) : 1/365
  ~ Menu demarrer (Programs) : 1/22
  ~ Hidden Files: Scanned in 00mn 00s
  
  ---\\ Processus lancés
  [MD5.CBC7D8E5416AD30CF16DC2FD4A6AA399] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe [4858968] [PID.1864]
  [MD5.3E399A1328181C2A352472369DE2A93A] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [844752] [PID.1368]
  [MD5.85DCE59FE46EDA6FF3901C78DA57AA3D] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [8112640] [PID.1408]
  [MD5.9330941C8F6DF417F6DBBE998DB6687E] - (.AVAST Software - avast! Service.) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808] [PID.1216]
  [MD5.ADDA5E1951B90D3D23C56D3CF0622ADC] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [65640] [PID.1492]
  [MD5.4FE5C6D40664AE07BE5105874357D2ED] - (.Apple Inc. - MobileDeviceService.) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [57008] [PID.1524]
  [MD5.816FD5A6F3C2F3D600900096632FC60E] - (.Acer Incorporated - Global Registration Service.) -- C:\Program Files (x86)\Packard Bell\Registration\GregHSRW.exe [1150496] [PID.1616]
  [MD5.A06EFD4965F8A3F97A8C9A291D032678] - (.Pas de propriétaire - Inkjet Printer/Scanner/Fax Extended Servey.) -- C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.exe [116104] [PID.1648]
  [MD5.B1EC2CAA074A857BF98CA990E576BC2D] - (.Whilokii - Whilokii.) -- C:\Program Files (x86)\Whilokii\updateWhilokii.exe [65304] [PID.1812] =>PUP.Whilokii
  [MD5.F9EC9ACD504D823D9B9CA98A4F8D3CA2] - (.Acer Group - Updater Service.) -- C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe [243232] [PID.1968]
  ~ Processes Running: Scanned in 00mn 00s
  
  ---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
  C:\Users\geoffrey\AppData\Local\Google\Chrome\User Data\Default\Preferences
  G2 - GCE: Preference [User Data\Default] [iaimhpklononapfjngelgdokckfjekfc] Whilokii v.1.0.0 (Désactivé) =>PUP.Whilokii
  G2 - GCE: Preference [User Data\Default] [lechbfhppigdgmodjlmcbiebfpogaeli] savvEnsharee v.5.10 (Activé) =>Adware.SaveShare
  G2 - GCE: Preference [User Data\Default] [pbpohikckhbcljgombipcdoinkaedlfa] Smart Display v.1.6 (Activé) =>Spyware.SmartDisplay
  ~ Google Browser: 19 Legitimates Filtered in 00mn 17s
  
  ---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
  C:\Users\geoffrey\AppData\Roaming\Mozilla\Firefox\Profiles\utk92q2b.default\prefs.js
  M3 - MFPP: Plugins - [geoffrey] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\qvo6.xml =>Hijacker.Qvo6
  M2 - MFEP: prefs.js [geoffrey - utk92q2b.default\7125a285-7e68-47aa-9d72-e81874f4d47e@d3fcdb92-135d-4a8a-8cf6-11e3b57c5fda.com] [] Plus-HD-2.3 v (..) =>Adware.PlusHD
  M2 - MFEP: prefs.js [geoffrey - utk92q2b.default\jid1-FCM5fDwCW5M3AQ@jetpack] [] Smart Display v1.2 (..) =>Spyware.SmartDisplay
  P2 - FPN: [HKCU] [pandonetworks.com/PandoWebPlugin] - (...) -- C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (.not file.)
  ~ Firefox Browser: 11 Legitimates Filtered in 00mn 00s
  
  ---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
  R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.qvo6.com =>Hijacker.Qvo6
  R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.qvo6.com =>Hijacker.Qvo6
  ~ IE Browser: 16 Legitimates Filtered in 00mn 00s
  
  ---\\ Internet Explorer, Proxy Management (R5)
  R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
  R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
  R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
  R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
  R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
  ~ Proxy management: Scanned in 00mn 00s
  
  ---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
  F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
  F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
  F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
  ~ Keys: Scanned in 00mn 00s
  
  ---\\ Hosts file redirection (O1)
  ~ Le fichier hosts est sain (The hosts file is clean).
  ~ Hosts File: Scanned in 00mn 00s
  ~ Nombre de lignes (Lines number): 21
  
  ---\\ Browser Helper Objects de navigateur (O2)
  O2 - BHO: Whilokii [64Bits] - {204df522-9a96-4a72-abb0-60f7a216d6d2} . (.Whilokii - Whilokii.) -- C:\Program Files (x86)\Whilokii\Whilokiibho.dll =>PUP.Whilokii
  O2 - BHO: Adblock Plus for IE Browser Helper Object [64Bits] - {FFCB3198-32F3-4E8B-9539-4324694ED664} . (.Adblock Plus - Adblock Plus Module.) -- C:\Program Files (x86)\Adblock Plus for IE\AdblockPlus32.dll
  O2 - BHO: CrossriderApp0033426 [64Bits] - {11111111-1111-1111-1111-110311341126} Clé orpheline =>PUP.CrossRider
  O2 - BHO: (no name) [64Bits] - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} Clé orpheline
  ~ BHO: 13 Legitimates Filtered in 00mn 00s
  
  ---\\ Internet Explorer Toolbars (O3)
  O3 - Toolbar: (no name) [64Bits] - [HKLM]{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} Clé orpheline
  O3 - Toolbar: Google Toolbar [64Bits] - [HKLM]{2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll =>Toolbar.Google
  O3 - Toolbar\WebBrowser: (no name) [64Bits] - [HKCU]{2318C2B1-4965-11D4-9B18-009027A5CD4F} Clé orpheline
  ~ Toolbar: Scanned in 00mn 00s
  
  ---\\ Autres liens utilisateurs (O4)
  O4 - GS\Desktop [Public]: FlvPlayer.lnk . (...) -- C:\Program Files (x86)\FLVPlayer\FLVPlayerApp.exe
  O4 - GS\Desktop [Public]: Google SketchUp 8.lnk . (.Google, Inc. - SketchUp Application.) -- C:\Program Files (x86)\Google\Google SketchUp 8\SketchUp.exe
  O4 - GS\Desktop [Public]: RollerCoaster Tycoon 3.lnk . (.Frontier Developments Ltd - RollerCoaster Tycoon® 3.) -- C:\Program Files (x86)\Atari\RollerCoaster Tycoon 3\RCT3plus.exe
  O4 - GS\Program [Public]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe http://www.qvo6.com =>Hijacker.Qvo6
  O4 - GS\QuickLaunch [WENZ]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe http://www.qvo6.com =>Hijacker.Qvo6
  O4 - GS\QuickLaunch [WENZ]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe http://www.qvo6.com =>Hijacker.Qvo6
  O4 - GS\QuickLaunch [WENZ]: Packard Bell Games.lnk . (.WildTangent, Inc. - GameConsole.) -- C:\Program Files (x86)\Packard Bell Games\Packard Bell Game Console\GameConsole-wt.exe
  O4 - GS\QuickLaunch [WENZ]: qvo6.lnk . (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe http://www.qvo6.com =>Hijacker.Qvo6
  O4 - GS\QuickLaunch [WENZ]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) -- C:\Users\geoffrey\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent
  O4 - GS\TaskBar [WENZ]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe http://www.qvo6.com =>Hijacker.Qvo6
  O4 - GS\TaskBar [WENZ]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe http://www.qvo6.com =>Hijacker.Qvo6
  O4 - GS\TaskBar [WENZ]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) -- C:\Users\geoffrey\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent
  O4 - GS\Program [WENZ]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe http://www.qvo6.com =>Hijacker.Qvo6
  O4 - GS\SystemTools [WENZ]: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe http://www.qvo6.com =>Hijacker.Qvo6
  O4 - GS\SendTo [WENZ]: Desk 365.lnk . (...) -- C:\Program Files (x86)\Desk 365\desk365.exe (.not file.) =>Hijacker.22Find
  O4 - GS\Desktop [WENZ]: Auslogics DiskDefrag.lnk . (.Auslogics - Disk Defrag.) -- C:\Program Files (x86)\Auslogics\DiskDefrag\DiskDefrag.exe
  O4 - GS\Desktop [WENZ]: Internet Checkers.lnk - Clé orpheline
  O4 - GS\Desktop [WENZ]: Media Player Classic - HC.lnk . (.MPC-HC Team - Media Player Classic - Home Cinema.) -- C:\Program Files (x86)\XP Codec Pack\mpc-hc\mpc-hc.exe
  O4 - GS\Desktop [WENZ]: Microsoft Works.lnk . (...) -- C:\Windows\Installer\{A3088CD2-612B-11D3-AF43-00C04F443448}\FB931E91.exe
  O4 - GS\Desktop [WENZ]: Packard Bell Games.lnk . (.WildTangent, Inc. - GameConsole.) -- C:\Program Files (x86)\Packard Bell Games\Packard Bell Game Console\GameConsole-wt.exe
  O4 - GS\Desktop [WENZ]: Solitaire.lnk - Clé orpheline
  O4 - GS\Desktop [WENZ]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) -- C:\Users\geoffrey\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent
  O4 - GS\QuickLaunch [nathalie]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  O4 - GS\QuickLaunch [nathalie]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
  O4 - GS\TaskBar [nathalie]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  O4 - GS\TaskBar [nathalie]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
  O4 - GS\Program [nathalie]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
  O4 - GS\SystemTools [nathalie]: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
  O4 - GS\Desktop [nathalie]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  O4 - GS\QuickLaunch [hugo]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  O4 - GS\QuickLaunch [hugo]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
  O4 - GS\QuickLaunch [hugo]: Packard Bell Games.lnk . (.WildTangent, Inc. - GameConsole.) -- C:\Program Files (x86)\Packard Bell Games\Packard Bell Game Console\GameConsole-wt.exe
  O4 - GS\TaskBar [hugo]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
  O4 - GS\Program [hugo]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
  O4 - GS\SystemTools [hugo]: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
  O4 - GS\QuickLaunch [geoffrey]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  O4 - GS\QuickLaunch [geoffrey]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
  O4 - GS\TaskBar [geoffrey]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  O4 - GS\Program [geoffrey]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
  O4 - GS\SystemTools [geoffrey]: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
  O4 - GS\Desktop [geoffrey]: Earthquake - Raccourci.lnk . (.Blizzard Entertainment - World of Warcraft Retail.) -- C:\Users\geoffrey\Desktop\Earthquake\Earthquake.exe
  O4 - GS\Desktop [geoffrey]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  O4 - GS\Desktop [geoffrey]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) -- C:\Users\geoffrey\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent
  ~ Global Startup: 124 Legitimates Filtered in 00mn 03s
  
  ---\\ Applications lancées au démarrage du sytème (O4)
  O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\Windows\system32\hkcmd.exe
  O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\Windows\system32\igfxpers.exe
  O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\Windows\system32\igfxtray.exe
  O4 - HKCU\..\Run: [SearchProtection] C:\Users\geoffrey\AppData\Roaming\Search Protection\SearchProtection.exe (.not file.) =>Toolbar.Conduit
  O4 - HKCU\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe =>Toolbar.Google
  O4 - HKLM\..\Wow6432Node\Run: [avast] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\avastUI.exe
  O4 - HKLM\..\Wow6432Node\Run: [tuto4pc_fr_62] Clé orpheline =>PUP.Eorezo
  O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation
  O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation
  O4 - HKUS\S-1-5-18\..\RunOnce: [SPReview] . (.Microsoft Corporation - SP Reviewer.) -- C:\Windows\System32\SPReview\SPReview.exe =>.Microsoft Corporation
  O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation
  O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation
  O4 - HKUS\S-1-5-21-3201979416-3185207537-2710416600-1004\..\Run: [SearchProtection] C:\Users\geoffrey\AppData\Roaming\Search Protection\SearchProtection.exe (.not file.) =>Toolbar.Conduit
  O4 - HKUS\S-1-5-21-3201979416-3185207537-2710416600-1004\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe =>Toolbar.Google
  ~ Application: Scanned in 00mn 00s
  
  ---\\ Modification Domaine/Adresses DNS (O17)
  O17 - HKLM\System\CCS\Services\Tcpip\..\{FA4AA3A3-DDC3-45F2-9645-FF26903C23FA}: DhcpNameServer = 192.168.1.1 192.168.1.1
  O17 - HKLM\System\CS1\Services\Tcpip\..\{FA4AA3A3-DDC3-45F2-9645-FF26903C23FA}: DhcpNameServer = 192.168.1.1 192.168.1.1
  O17 - HKLM\System\CS2\Services\Tcpip\..\{FA4AA3A3-DDC3-45F2-9645-FF26903C23FA}: DhcpNameServer = 192.168.1.1 192.168.1.1
  O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 192.168.1.1
  ~ Domain: Scanned in 00mn 00s
  
  ---\\ Protocole additionnel (O18)
  O18 - Handler: wlmailhtml [64Bits] - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} . (...) --
  O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation
  ~ Protocole Additionnel: Scanned in 00mn 00s
  
  ---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
  O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\Windows\System32\igfxdev.dll
  ~ Winlogon: Scanned in 00mn 00s
  
  ---\\ Liste des services NT non Microsoft et non désactivés (O23)
  O23 - Service: Service DealPly Live (dealplylive) (dealplylive) . (.DealPly Technologies Ltd - DealPlyLive Update.) - C:\Program Files (x86)\DealPlyLive\Update\DealPlyLive.exe =>PUP.DealPly
  O23 - Service: Update Whilokii (Update Whilokii) . (.Whilokii - Whilokii.) - C:\Program Files (x86)\Whilokii\updateWhilokii.exe =>PUP.Whilokii
  O23 - Service: Updater Service (Updater Service) . (.Acer Group - Updater Service.) - C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe
  ~ Services: 11 Legitimates Filtered in 00mn 10s
  
  ---\\ Tâches planifiées en automatique (O39)
  O39 - APT:Automatic Planified Task - C:\Windows\Tasks\Dealply.job [286] =>PUP.DealPly
  O39 - APT:Automatic Planified Task - C:\Windows\Tasks\DealPlyLiveUpdateTaskMachineCore.job [898] =>PUP.DealPly
  O39 - APT:Automatic Planified Task - C:\Windows\Tasks\DealPlyLiveUpdateTaskMachineUA.job [902] =>PUP.DealPly
  O39 - APT:Automatic Planified Task - C:\Windows\Tasks\Plus-HD-2.3-chromeinstaller.job [1900] =>Adware.PlusHD
  O39 - APT:Automatic Planified Task - C:\Windows\Tasks\Plus-HD-2.3-codedownloader.job [1192] =>Adware.PlusHD
  O39 - APT:Automatic Planified Task - C:\Windows\Tasks\Plus-HD-2.3-enabler.job [1092] =>Adware.PlusHD
  O39 - APT:Automatic Planified Task - C:\Windows\Tasks\Plus-HD-2.3-firefoxinstaller.job [1824] =>Adware.PlusHD
  O39 - APT:Automatic Planified Task - C:\Windows\Tasks\Plus-HD-2.3-updater.job [1288] =>Adware.PlusHD
  [MD5.C34968C46A99BBD6248D30F9F1B778C2] [APT] [BoxSoftwareUpdate] (...) -- C:\ProgramData\BoxUpdChk\updchk.exe [177152]
  [MD5.00000000000000000000000000000000] [APT] [Dealply] (...) -- C:\Users\geoffrey\AppData\Roaming\Dealply\UPDATE~1\UPDATE~1.exe (.not file.) [0] =>PUP.DealPly
  [MD5.9FCD1448C709C227BA6A146B681CC869] [APT] [DealPlyLiveUpdateTaskMachineCore] (.DealPly Technologies Ltd.) -- C:\Program Files (x86)\DealPlyLive\Update\DealPlyLive.exe [148000] =>PUP.DealPly
  [MD5.9FCD1448C709C227BA6A146B681CC869] [APT] [DealPlyLiveUpdateTaskMachineUA] (.DealPly Technologies Ltd.) -- C:\Program Files (x86)\DealPlyLive\Update\DealPlyLive.exe [148000] =>PUP.DealPly
  [MD5.00000000000000000000000000000000] [APT] [Desk 365 RunAsStdUser] (...) -- C:\Program Files (x86)\Desk 365\desk365.exe (.not file.) [0] =>Hijacker.22Find
  [MD5.00000000000000000000000000000000] [APT] [EPUpdater] (...) -- C:\Users\geoffrey\AppData\Roaming\BABSOL~1\Shared\BabMaint.exe (.not file.) [0] =>Hijacker.BabSolution
  [MD5.00000000000000000000000000000000] [APT] [Plus-HD-2.3-chromeinstaller] (...) -- C:\Program Files (x86)\Plus-HD-2.3\Plus-HD-2.3-chromeinstaller.exe (.not file.) [0] =>Adware.PlusHD
  [MD5.00000000000000000000000000000000] [APT] [Plus-HD-2.3-codedownloader] (...) -- C:\Program Files (x86)\Plus-HD-2.3\Plus-HD-2.3-codedownloader.exe (.not file.) [0] =>Adware.PlusHD
  [MD5.00000000000000000000000000000000] [APT] [Plus-HD-2.3-enabler] (...) -- C:\Program Files (x86)\Plus-HD-2.3\Plus-HD-2.3-enabler.exe (.not file.) [0] =>Adware.PlusHD
  [MD5.00000000000000000000000000000000] [APT] [Plus-HD-2.3-firefoxinstaller] (...) -- C:\Program Files (x86)\Plus-HD-2.3\Plus-HD-2.3-firefoxinstaller.exe (.not file.) [0] =>Adware.PlusHD
  [MD5.00000000000000000000000000000000] [APT] [Plus-HD-2.3-updater] (...) -- C:\Program Files (x86)\Plus-HD-2.3\Plus-HD-2.3-updater.exe (.not file.) [0] =>Adware.PlusHD
  ~ Scheduled Task: 36 Legitimates Filtered in 00mn 07s
  
  ---\\ Logiciels installés (O42)
  O42 - Logiciel: Whilokii 1.0.0 - (.Whilokii.) [HKLM][64Bits] -- Whilokii =>PUP.Whilokii
  ~ Logic: 152 Legitimates Filtered in 00mn 01s
  
  ---\\ HKCU & HKLM Software Keys
  [HKCU\Software\5d08fd1e26de446]
  [HKCU\Software\BonanzaDealsLive] =>Adware.BonanzaDeals
  [HKCU\Software\Boxore] =>Adware.Boxore
  [HKCU\Software\DealPlyLive] =>PUP.DealPly
  [HKCU\Software\Iminent] =>Adware.IMBooster
  [HKCU\Software\Pando Networks]
  [HKLM\Software\DomaIQ] =>Adware.DomaIQ
  [HKLM\Software\Wow6432Node\5d08fd1e26de446]
  [HKLM\Software\Wow6432Node\BonanzaDealsLive] =>Adware.BonanzaDeals
  [HKLM\Software\Wow6432Node\Boxore] =>Adware.Boxore
  [HKLM\Software\Wow6432Node\Conduit] =>Toolbar.Conduit
  [HKLM\Software\Wow6432Node\DataMngr] =>PUP.Datamngr
  [HKLM\Software\Wow6432Node\DealPlyLive] =>PUP.DealPly
  [HKLM\Software\Wow6432Node\Delta]
  [HKLM\Software\Wow6432Node\Iminent] =>Adware.IMBooster
  [HKLM\Software\Wow6432Node\Pando Networks]
  [HKLM\Software\Wow6432Node\TUTO4PC] =>PUP.Eorezo
  [HKLM\Software\Wow6432Node\Tutorials] =>Spyware.AgenceExclusive
  [HKLM\Software\Wow6432Node\Whilokii] =>PUP.Whilokii
  ~ Key Software: 240 Legitimates Filtered in 00mn 01s
  
  ---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
  O43 - CFD: 20/10/2013 - 16:37:32 - [0] ----D C:\Program Files (x86)\BonanzaDealsLive =>Adware.BonanzaDeals
  O43 - CFD: 10/09/2013 - 22:03:25 - [0,883] ----D C:\Program Files (x86)\Conduit
  O43 - CFD: 12/10/2013 - 20:45:27 - [3,749] ----D C:\Program Files (x86)\DealPlyLive =>PUP.DealPly
  O43 - CFD: 20/10/2013 - 19:48:41 - [0,015] ----D C:\Program Files (x86)\MyPC Backup =>PUP.MyPCBackup
  O43 - CFD: 11/10/2013 - 23:18:21 - [0] ----D C:\Program Files (x86)\Pando Networks
  O43 - CFD: 17/10/2013 - 23:58:01 - [0,753] ----D C:\Program Files (x86)\Whilokii =>PUP.Whilokii
  O43 - CFD: 08/09/2013 - 02:11:43 - [0] ----D C:\ProgramData\Babylon =>Toolbar.Babylon
  O43 - CFD: 09/10/2013 - 22:52:06 - [0,510] ----D C:\ProgramData\BonanzaDealsLive =>Adware.BonanzaDeals
  O43 - CFD: 05/10/2013 - 10:08:00 - [0,169] ----D C:\ProgramData\BoxUpdChk
  O43 - CFD: 12/10/2013 - 20:45:27 - [0,788] ----D C:\ProgramData\DealPlyLive =>PUP.DealPly
  O43 - CFD: 12/10/2013 - 01:34:05 - [0,147] ----D C:\ProgramData\DSearchLink =>Toolbar.DeltaSearch
  O43 - CFD: 08/09/2013 - 02:11:41 - [0,002] ----D C:\ProgramData\IBUpdaterService =>Adware.InstallBrain
  O43 - CFD: 07/08/2013 - 20:10:09 - [0] ----D C:\Users\geoffrey\AppData\Roaming\Reg
  ~ Program Folder: 176 Legitimates Filtered in 00mn 43s
  
  ---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
  O44 - LFC:[MD5.27812D8E0D1A1AAEE47189A4B4AB0CF0] - 12/10/2013 - 01:00:00 ---A- . (.Systweak Inc., (www.systweak.com) - Regclean Pro.) -- C:\Windows\SysNative\roboot64.exe [20312] =>Rogue.RegistryPowerCleaner
  O44 - LFC:[MD5.27812D8E0D1A1AAEE47189A4B4AB0CF0] - 12/10/2013 - 01:00:00 ---A- . (.Systweak Inc., (www.systweak.com) - Regclean Pro.) -- C:\Windows\System32\roboot64.exe [20312] =>Rogue.RegistryPowerCleaner
  O44 - LFC:[MD5.02DC0F457C2CC6E23F073F94BAC1A871] - 12/10/2013 - 01:25:25 ---A- . (...) -- C:\Windows\wininit.ini [61]
  ~ Files: 99 Legitimates Filtered in 00mn 24s
  
  ---\\ Derniers fichiers créés dans Windows Prefetcher (O45)
  O45 - LFCP:[MD5.F621C6D2023FFF3DC51B5FF334206239] - 13/10/2013 - 14:22:09 ---A- - C:\Windows\Prefetch\SETCC1C.TMP-3E0BE9A3.pf
  O45 - LFCP:[MD5.1746EEA79208183526D1D04358E6D09D] - 20/10/2013 - 17:40:04 ---A- - C:\Windows\Prefetch\PACKARD BELL.SCR-63E3B79C.pf
  O45 - LFCP:[MD5.38977C424793EB4F49C9A3BF0A563B10] - 20/10/2013 - 19:50:04 ---A- - C:\Windows\Prefetch\DEALPLYLIVEHANDLER.EXE-C0B57938.pf =>PUP.DealPly
  O45 - LFCP:[MD5.CF5716E91069F80B1026256BE529B07E] - 20/10/2013 - 21:50:02 ---A- - C:\Windows\Prefetch\DEALPLYLIVE.EXE-EC78F127.pf =>PUP.DealPly
  ~ Prefetcher: 153 Legitimates Filtered in 00mn 01s
  
  ---\\ Enumération des clés de registre StartupReg (SMSR) (O53)
  O53 - SMSR:HKLM\...\startupreg\24x7HELP [Key] . (...) -- C:\Program Files (x86)\24x7Help\App24x7Help.exe (.not file.) =>PUP.24x7Help
  O53 - SMSR:HKLM\...\startupreg\Boxore Client [Key] . (...) -- C:\Program Files (x86)\Boxore\BoxoreClient\boxore.exe (.not file.) =>Adware.Boxore
  O53 - SMSR:HKLM\...\startupreg\Browser Infrastructure Helper [Key] . (...) -- C:\Users\WENZ\AppData\Local\Smartbar\Application\Smartbar.exe (.not file.) =>Hijacker.SmartBar
  O53 - SMSR:HKLM\...\startupreg\ConduitFloatingPlugin_biahaobfpkgeiomkihcdgknebbhadonc [Key] . (.Conduit Ltd. - Conduit Toolbar Verifier.) -- C:\Program Files (x86)\Conduit\CT3307695\plugins\TBVerifier.dll =>Toolbar.Conduit
  O53 - SMSR:HKLM\...\startupreg\Desk 365 [Key] . (...) -- C:\Program Files (x86)\Desk 365\desk365.exe (.not file.) =>Hijacker.22Find
  O53 - SMSR:HKLM\...\startupreg\Iminent [Key] . (...) -- C:\Program Files (x86)\Iminent\Iminent.exe (.not file.) =>Adware.IMBooster
  O53 - SMSR:HKLM\...\startupreg\IminentMessenger [Key] . (...) -- C:\Program Files (x86)\Iminent\Iminent.Messengers.exe (.not file.) =>Adware.IMBooster
  O53 - SMSR:HKLM\...\startupreg\lollipop [Key] . (...) -- c:\users\wenz\appdata\local\lollipop\lollipop.exe (.not file.) =>Adware.Lollipop
  O53 - SMSR:HKLM\...\startupreg\NTRedirect [Key] . (...) -- C:\Users\WENZ\AppData\Roaming\BabSolution\Shared\enhancedNT.dll (.not file.) =>Hijacker.BabSolution
  O53 - SMSR:HKLM\...\startupreg\offerbox [Key] . (...) -- C:\Program Files (x86)\OfferBox\OfferBox.exe (.not file.) =>PUP.OfferBox
  O53 - SMSR:HKLM\...\startupreg\PCFixSpeed [Key] . (...) -- C:\Program Files (x86)\PCFixSpeed\PCFixTray.exe (.not file.) =>PUP.PCFixSpeed
  O53 - SMSR:HKLM\...\startupreg\SearchProtect [Key] . (...) -- C:\Users\WENZ\AppData\Roaming\SearchProtect\bin\cltmng.exe (.not file.) =>Toolbar.Conduit
  O53 - SMSR:HKLM\...\startupreg\SearchProtectAll [Key] . (...) -- C:\Program Files (x86)\SearchProtect\bin\cltmng.exe (.not file.) =>Toolbar.Conduit
  O53 - SMSR:HKLM\...\startupreg\SuperCopier2.exe [Key] . (...) -- C:\Program Files (x86)\SuperCopier2\SuperCopier2.exe (.not file.)
  O53 - SMSR:HKLM\...\startupreg\tuto4pc_fr_62 [Key] . (...) -- C:\Program Files (x86)\tuto4pc_fr_62\tuto4pc_fr_62.exe (.not file.) =>PUP.Eorezo
  ~ SMSR Keys: 28 Legitimates Filtered in 00mn 00s
  
  ---\\ Enumération des clés de registre PoliciesSystem (MWPS) (O55)
  O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
  O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
  ~ MWPS: 16 Legitimates Filtered in 00mn 00s
  
  ---\\ Enumération des clés de registre PoliciesExplorer (MWPE) (O56)
  O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1
  ~ MWPE Keys: 3 Legitimates Filtered in 00mn 00s
  
  ---\\ Liste des pilotes du système (SDL) (O58)
  O58 - SDL:[MD5.286193DC28CFB4CEB8D378E20A0850A9] - 30/08/2013 - 08:48:10 ---A- . (...) -- C:\Windows\System32\Drivers\aswRvrt.sys [65336]
  ~ Drivers: 16 Legitimates Filtered in 00mn 00s
  
  ---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61)
  O61 - LFC: 17/10/2013 - 22:52:52 ---A- . (...) -- C:\Users\geoffrey\Downloads\dallas-2012-s02e13-french-hdtv.torrent [29160]
  O61 - LFC: 17/10/2013 - 22:52:52 ---A- . (...) -- C:\Users\geoffrey\Downloads\dallas-2012-s02e14-french-hdtv.torrent [29340]
  O61 - LFC: 17/10/2013 - 22:52:52 ---A- . (...) -- C:\Users\geoffrey\Downloads\dallas-2012-s02e15-final-french-hdtv.torrent [29272]
  O61 - LFC: 17/10/2013 - 22:52:53 ---A- . (...) -- C:\Users\geoffrey\Downloads\monstres-academy-monsters-university-french-dvdrip-2013 (1).torrent [57522]
  O61 - LFC: 17/10/2013 - 22:52:53 ---A- . (...) -- C:\Users\geoffrey\Downloads\monstres-academy-monsters-university-french-dvdrip-2013.torrent [57522]
  O61 - LFC: 17/10/2013 - 22:52:53 ---A- . (...) -- C:\Users\geoffrey\Downloads\wallpaper.zip [1627516]
  O61 - LFC: 19/10/2013 - 22:52:53 ---A- . (...) -- C:\Users\geoffrey\Downloads\Extras.Txt [64184]
  O61 - LFC: 19/10/2013 - 22:52:53 ---A- . (...) -- C:\Users\geoffrey\Downloads\OTL.Txt [135642]
  O61 - LFC: 20/10/2013 - 22:52:20 ---A- . (...) -- C:\Users\geoffrey\AppData\Local\Google\Chrome\User Data\Certificate Revocation Lists [257529]
  O61 - LFC: 20/10/2013 - 22:52:27 ---A- . (...) -- C:\Users\geoffrey\AppData\Local\Google\Chrome\User Data\Local State [44152]
  O61 - LFC: 20/10/2013 - 22:52:37 ---A- . (...) -- C:\Users\geoffrey\AppData\Roaming\app\Jerakine_lang.dat [4859]
  O61 - LFC: 20/10/2013 - 22:52:38 ---A- . (...) -- C:\Users\geoffrey\AppData\Roaming\D2Info0 [121]
  O61 - LFC: 20/10/2013 - 22:52:52 ---A- . (...) -- C:\Users\geoffrey\AppData\Roaming\ZHP\Log.txt [20039] =>.Nicolas Coolman
  O61 - LFC: 20/10/2013 - 22:52:52 ---A- . (...) -- C:\Users\geoffrey\AppData\Roaming\ZHP\TestsZHPDiag.txt [2936] =>.Nicolas Coolman
  ~ 19 Fichiers temporaires (Temporary files)
  ~ Files: 560 Legitimates Filtered in 00mn 42s
  
  ---\\ Liste des outils de désinfection (LATC) (O63)
  O63 - Logiciel: ZHPDiag 2013 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 =>.Nicolas Coolman
  ~ ADS: Scanned in 00mn 00s
  
  ---\\ Associations Shell Spawning (O67)
  O67 - Shell Spawning: <.html> <ChromeHTML>[HKCU\..\open\Command] (.Not Key.)
  ~ FASS Keys: 19 Legitimates Filtered in 00mn 00s
  
  ---\\ Menu de démarrage Internet (SMI) (O68)
  O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\Shell\open\Command] (...) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe http://www.qvo6.com =>Hijacker.Qvo6
  O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  O68 - StartMenuInternet: <Google Chrome.BTNYCY4CGGSFGEPYEPPKF7JTXE> <Google Chrome>[HKLM\..\Shell\open\Command] (...) -- C:\Users\geoffrey\AppData\Local\Google\Chrome\Application\chrome.exe" http://www.qvo6.com =>Hijacker.Qvo6
  O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (...) -- C:\Program Files\Internet Explorer\iexplore.exe http://www.qvo6.com =>Hijacker.Qvo6
  ~ Keys: Scanned in 00mn 00s
  
  ---\\ Recherche d'infection sur les navigateurs internet (SBI) (O69)
  O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - https://www.bing.com/?toHttps=1&redig=69DA0EF8272048D9864AF4DB37211DE8
  O69 - SBI: SearchScopes [HKCU] {4AA8D98D-83D2-3B0B-23B0-667AAFFB4606} - (Google) - https://www.google.com/?gws_rd=ssl
  O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} - (Google) - https://www.google.com/?gws_rd=ssl
  O69 - SBI: SearchScopes [HKCU] {B7A052D6-433A-42CB-9165-87E9BD100337} - (Yahoo! Search) - https://fr.search.yahoo.com/
  ~ Keys: Scanned in 00mn 00s
  
  ---\\ Recherche particulière à la racine du système (SPRF) (O84)
  [MD5.D07444BDB22757545CD2FA91654F2FD0] [SPRF][24/08/2013] (...) -- C:\Users\geoffrey\AppData\Local\Temp\Quarantine.exe [328019]
  [MD5.3C74C26999F2060BC6302448F173A342] [SPRF][28/08/2013] (.Babylon Ltd. - Uninstaller Application.) -- C:\Users\geoffrey\AppData\Local\Temp\uninst1.exe [340464] =>Toolbar.Babylon
  [MD5.057004342121728CAB0234A323B965B4] [SPRF][05/10/2013] (.Pas de propriétaire - Minecraft Launcher.) -- C:\Users\geoffrey\Desktop\Minecraft.exe [353280]
  ~ Files: 4 Legitimates Filtered in 00mn 00s
  
  ---\\ Export de clés de registre aléatoires (O91)
  [HKCU\Software\5d08fd1e26de446]:HPCHREGEXP0="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41YG65LTMswjv2p+BbY"
  [HKCU\Software\5d08fd1e26de446]:HPCHREGEXP10="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tcC7Z7DtYJweyl/WTcdvz1SHs="
  [HKCU\Software\5d08fd1e26de446]:HPCHREGEXP11="FO81jovjQUF+5S6+hb1oqXHuCob28bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4PgTyj"
  [HKCU\Software\5d08fd1e26de446]:HPCHREGEXP12="FO81jovjQUF+5S6+hb1oqXHuCobi7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4bnTyj"
  [HKCU\Software\5d08fd1e26de446]:HPCHREGEXP13="FO81jovjQUF+5S6+hb1oqXHuCobh7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4YnTyj"
  [HKCU\Software\5d08fd1e26de446]:HPCHREGEXP14="FO81jovjQUF+5S6+hb1oqXHuCobp+7vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Qizyj"
  [HKCU\Software\5d08fd1e26de446]:HPCHREGEXP15="FO81jovjQUF+5S6+hb1oqXHuCobq77vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Tnzyj"
  [HKCU\Software\5d08fd1e26de446]:HPCHREGEXP16="FO81jovjQUF+5S6+hb1oqXHuCob097vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Nhzyj"
  [HKCU\Software\5d08fd1e26de446]:HPCHREGEXP17="FO81jovjQUF+5S6+hf10qXWkH4avttjOR1OpbXMX8/9twJ1l7X6A6gb39opYC7RPf4sPz/Povw=="
  [HKCU\Software\5d08fd1e26de446]:HPCHREGEXP18="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tLEKdLRvlB0/un51uaSb37CTxXxQ=="
  [HKCU\Software\5d08fd1e26de446]:HPCHREGEXP19="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tQErZ7DtYJweyl/WTcdvz1SHs="
  [HKCU\Software\5d08fd1e26de446]:HPCHREGEXP1="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4xVGKVIf4gfxf+09lCuO/D3C39T"
  [HKCU\Software\5d08fd1e26de446]:HPCHREGEXP20="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4BXFa57DtYJweyl/WTcdvz1SHs="
  [HKCU\Software\5d08fd1e26de446]:HPCHREGEXP21="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tWErh7DtYJweyl/WTcdvz1SHs="
  [HKCU\Software\5d08fd1e26de446]:HPCHREGEXP22="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4BJDb57DtUNx/uau1udeL2y"
  [HKCU\Software\5d08fd1e26de446]:HPCHREGEXP23="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xMCbJVf4gcwfmjyRaRev62TA=="
  [HKCU\Software\5d08fd1e26de446]:HPCHREGEXP24="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41WAbh7DtYJweyl/WTcdvz1SHs="
  [HKCU\Software\5d08fd1e26de446]:HPCHREGEXP25="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr59cC6RITcQA/LOk51eFZvbqOn8agH+n2A=="
  [HKCU\Software\5d08fd1e26de446]:HPCHREGEXP26="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4JYAYsKUNEN0uqau1udeL2y"
  [HKCU\Software\5d08fd1e26de446]:HPCHREGEXP27="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4pXEbZJQMAI/LO18FmAdvvESDIWgjyj"
  [HKCU\Software\5d08fd1e26de446]:HPCHREGEXP2="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tcFaNGf4gfxf+09lCuO/D3C39T"
  [HKCU\Software\5d08fd1e26de446]:HPCHREGEXP3="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41MHLlIUMAN0v2uyRaRev62TA=="
  [HKCU\Software\5d08fd1e26de446]:HPCHREGEXP4="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES/lBx/Gn+WTcdvz1SHs="
  [HKCU\Software\5d08fd1e26de446]:HPCHREGEXP5="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES8IDzMLo9lefO7k="
  [HKCU\Software\5d08fd1e26de446]:HPCHREGEXP6="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4dWFbZURsQew/aau1udeL2y"
  [HKCU\Software\5d08fd1e26de446]:HPCHREGEXP7="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4hWFaRCQtcPyMLo9lefO7k="
  [HKCU\Software\5d08fd1e26de446]:HPCHREGEXP8="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tYFbJURsQew/aau1udeL2y"
  [HKCU\Software\5d08fd1e26de446]:HPCHREGEXP9="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5pXFosKUMAN0v2uyRaRev62TA=="
  [HKCU\Software\5d08fd1e26de446]:HPFFREGEXP0="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41YG65LTMswjv2p+BbY"
  [HKCU\Software\5d08fd1e26de446]:HPFFREGEXP10="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tcC7Z7DtYJweyl/WTcdvz1SHs="
  [HKCU\Software\5d08fd1e26de446]:HPFFREGEXP11="FO81jovjQUF+5S6+hb1oqXHuCob28bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4PgTyj"
  [HKCU\Software\5d08fd1e26de446]:HPFFREGEXP12="FO81jovjQUF+5S6+hb1oqXHuCobi7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4bnTyj"
  [HKCU\Software\5d08fd1e26de446]:HPFFREGEXP13="FO81jovjQUF+5S6+hb1oqXHuCobh7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4YnTyj"
  [HKCU\Software\5d08fd1e26de446]:HPFFREGEXP14="FO81jovjQUF+5S6+hb1oqXHuCobp+7vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Qizyj"
  [HKCU\Software\5d08fd1e26de446]:HPFFREGEXP15="FO81jovjQUF+5S6+hb1oqXHuCobq77vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Tnzyj"
  [HKCU\Software\5d08fd1e26de446]:HPFFREGEXP16="FO81jovjQUF+5S6+hb1oqXHuCob097vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Nhzyj"
  [HKCU\Software\5d08fd1e26de446]:HPFFREGEXP17="FO81jovjQUF+5S6+hf10qXWkH4avttjOR1OpbXMX8/9twJ1l7X6A6gb39opYC7RPf4sPz/Povw=="
  [HKCU\Software\5d08fd1e26de446]:HPFFREGEXP18="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tLEKdLRvlB0/un51uaSb37CTxXxQ=="
  [HKCU\Software\5d08fd1e26de446]:HPFFREGEXP19="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tQErZ7DtYJweyl/WTcdvz1SHs="
  [HKCU\Software\5d08fd1e26de446]:HPFFREGEXP1="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4xVGKVIf4gfxf+09lCuO/D3C39T"
  [HKCU\Software\5d08fd1e26de446]:HPFFREGEXP20="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4BXFa57DtYJweyl/WTcdvz1SHs="
  [HKCU\Software\5d08fd1e26de446]:HPFFREGEXP21="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tWErh7DtYJweyl/WTcdvz1SHs="
  [HKCU\Software\5d08fd1e26de446]:HPFFREGEXP22="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4BJDb57DtUNx/uau1udeL2y"
  [HKCU\Software\5d08fd1e26de446]:HPFFREGEXP23="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xMCbJVf4gcwfmjyRaRev62TA=="
  [HKCU\Software\5d08fd1e26de446]:HPFFREGEXP24="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41WAbh7DtYJweyl/WTcdvz1SHs="
  [HKCU\Software\5d08fd1e26de446]:HPFFREGEXP25="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr59cC6RITcQA/LOk51eFZvbqOn8agH+n2A=="
  [HKCU\Software\5d08fd1e26de446]:HPFFREGEXP26="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4JYAYsKUNEN0uqau1udeL2y"
  [HKCU\Software\5d08fd1e26de446]:HPFFREGEXP27="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4pXEbZJQMAI/LO18FmAdvvESDIWgjyj"
  [HKCU\Software\5d08fd1e26de446]:HPFFREGEXP2="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tcFaNGf4gfxf+09lCuO/D3C39T"
  [HKCU\Software\5d08fd1e26de446]:HPFFREGEXP3="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41MHLlIUMAN0v2uyRaRev62TA=="
  [HKCU\Software\5d08fd1e26de446]:HPFFREGEXP4="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES/lBx/Gn+WTcdvz1SHs="
  [HKCU\Software\5d08fd1e26de446]:HPFFREGEXP5="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES8IDzMLo9lefO7k="
  [HKCU\Software\5d08fd1e26de446]:HPFFREGEXP6="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4dWFbZURsQew/aau1udeL2y"
  [HKCU\Software\5d08fd1e26de446]:HPFFREGEXP7="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4hWFaRCQtcPyMLo9lefO7k="
  [HKCU\Software\5d08fd1e26de446]:HPFFREGEXP8="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tYFbJURsQew/aau1udeL2y"
  [HKCU\Software\5d08fd1e26de446]:HPFFREGEXP9="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5pXFosKUMAN0v2uyRaRev62TA=="
  [HKCU\Software\5d08fd1e26de446]:HPIEREGEXP0="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41YG65LTMswjv2p+BbY"
  [HKCU\Software\5d08fd1e26de446]:HPIEREGEXP10="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tcC7Z7DtYJweyl/WTcdvz1SHs="
  [HKCU\Software\5d08fd1e26de446]:HPIEREGEXP11="FO81jovjQUF+5S6+hb1oqXHuCob28bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4PgTyj"
  [HKCU\Software\5d08fd1e26de446]:HPIEREGEXP12="FO81jovjQUF+5S6+hb1oqXHuCobi7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4bnTyj"
  [HKCU\Software\5d08fd1e26de446]:HPIEREGEXP13="FO81jovjQUF+5S6+hb1oqXHuCobh7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4YnTyj"
  [HKCU\Software\5d08fd1e26de446]:HPIEREGEXP14="FO81jovjQUF+5S6+hb1oqXHuCobp+7vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Qizyj"
  [HKCU\Software\5d08fd1e26de446]:HPIEREGEXP15="FO81jovjQUF+5S6+hb1oqXHuCobq77vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Tnzyj"
  [HKCU\Software\5d08fd1e26de446]:HPIEREGEXP16="FO81jovjQUF+5S6+hb1oqXHuCob097vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Nhzyj"
  [HKCU\Software\5d08fd1e26de446]:HPIEREGEXP17="FO81jovjQUF+5S6+hf10qXWkH4avttjOR1OpbXMX8/9twJ1l7X6A6gb39opYC7RPf4sPz/Povw=="
  [HKCU\Software\5d08fd1e26de446]:HPIEREGEXP18="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tLEKdLRvlB0/un51uaSb37CTxXxQ=="
  [HKCU\Software\5d08fd1e26de446]:HPIEREGEXP19="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tQErZ7DtYJweyl/WTcdvz1SHs="
  [HKCU\Software\5d08fd1e26de446]:HPIEREGEXP1="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4xVGKVIf4gfxf+09lCuO/D3C39T"
  [HKCU\Software\5d08fd1e26de446]:HPIEREGEXP20="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4BXFa57DtYJweyl/WTcdvz1SHs="
  [HKCU\Software\5d08fd1e26de446]:HPIEREGEXP21="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tWErh7DtYJweyl/WTcdvz1SHs="
  [HKCU\Software\5d08fd1e26de446]:HPIEREGEXP22="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4BJDb57DtUNx/uau1udeL2y"
  [HKCU\Software\5d08fd1e26de446]:HPIEREGEXP23="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xMCbJVf4gcwfmjyRaRev62TA=="
  [HKCU\Software\5d08fd1e26de446]:HPIEREGEXP24="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41WAbh7DtYJweyl/WTcdvz1SHs="
  [HKCU\Software\5d08fd1e26de446]:HPIEREGEXP25="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr59cC6RITcQA/LOk51eFZvbqOn8agH+n2A=="
  [HKCU\Software\5d08fd1e26de446]:HPIEREGEXP26="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4JYAYsKUNEN0uqau1udeL2y"
  [HKCU\Software\5d08fd1e26de446]:HPIEREGEXP27="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4pXEbZJQMAI/LO18FmAdvvESDIWgjyj"
  [HKCU\Software\5d08fd1e26de446]:HPIEREGEXP2="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tcFaNGf4gfxf+09lCuO/D3C39T"
  [HKCU\Software\5d08fd1e26de446]:HPIEREGEXP3="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41MHLlIUMAN0v2uyRaRev62TA=="
  [HKCU\Software\5d08fd1e26de446]:HPIEREGEXP4="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES/lBx/Gn+WTcdvz1SHs="
  [HKCU\Software\5d08fd1e26de446]:HPIEREGEXP5="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES8IDzMLo9lefO7k="
  [HKCU\Software\5d08fd1e26de446]:HPIEREGEXP6="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4dWFbZURsQew/aau1udeL2y"
  [HKCU\Software\5d08fd1e26de446]:HPIEREGEXP7="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4hWFaRCQtcPyMLo9lefO7k="
  [HKCU\Software\5d08fd1e26de446]:HPIEREGEXP8="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tYFbJURsQew/aau1udeL2y"
  [HKCU\Software\5d08fd1e26de446]:HPIEREGEXP9="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5pXFosKUMAN0v2uyRaRev62TA=="
  [HKCU\Software\5d08fd1e26de446]:KWFFREGEXP0="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41YG65LTMswjv2p+BbY"
  [HKCU\Software\5d08fd1e26de446]:KWFFREGEXP10="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tcC7Z7DtYJweyl/WTcdvz1SHs="
  [HKCU\Software\5d08fd1e26de446]:KWFFREGEXP11="FO81jovjQUF+5S6+hb1oqXHuCob28bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4PgTyj"
  [HKCU\Software\5d08fd1e26de446]:KWFFREGEXP12="FO81jovjQUF+5S6+hb1oqXHuCobi7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4bnTyj"
  [HKCU\Software\5d08fd1e26de446]:KWFFREGEXP13="FO81jovjQUF+5S6+hb1oqXHuCobh7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4YnTyj"
  [HKCU\Software\5d08fd1e26de446]:KWFFREGEXP14="FO81jovjQUF+5S6+hb1oqXHuCobp+7vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Qizyj"
  [HKCU\Software\5d08fd1e26de446]:KWFFREGEXP15="FO81jovjQUF+5S6+hb1oqXHuCobq77vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Tnzyj"
  [HKCU\Software\5d08fd1e26de446]:KWFFREGEXP16="FO81jovjQUF+5S6+hb1oqXHuCob097vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Nhzyj"
  [HKCU\Software\5d08fd1e26de446]:KWFFREGEXP17="FO81jovjQUF+5S6+hf10qXWkH4avttjOR1OpbXMX8/9twJ1l7X6A6gb39opYC7RPf4sPz/Povw=="
  [HKCU\Software\5d08fd1e26de446]:KWFFREGEXP18="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tLEKdLRvlB0/un51uaSb37CTxXxQ=="
  [HKCU\Software\5d08fd1e26de446]:KWFFREGEXP19="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tQErZ7DtYJweyl/WTcdvz1SHs="
  [HKCU\Software\5d08fd1e26de446]:KWFFREGEXP1="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4xVGKVIf4gfxf+09lCuO/D3C39T"
  [HKCU\Software\5d08fd1e26de446]:KWFFREGEXP20="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4BXFa57DtYJweyl/WTcdvz1SHs="
  [HKCU\Software\5d08fd1e26de446]:KWFFREGEXP21="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tWErh7DtYJweyl/WTcdvz1SHs="
  [HKCU\Software\5d08fd1e26de446]:KWFFREGEXP22="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4BJDb57DtUNx/uau1udeL2y"
  [HKCU\Software\5d08fd1e26de446]:KWFFREGEXP23="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xMCbJVf4gcwfmjyRaRev62TA=="
  [HKCU\Software\5d08fd1e26de446]:KWFFREGEXP24="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41WAbh7DtYJweyl/WTcdvz1SHs="
  [HKCU\Software\5d08fd1e26de446]:KWFFREGEXP25="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr59cC6RITcQA/LOk51eFZvbqOn8agH+n2A=="
  [HKCU\Software\5d08fd1e26de446]:KWFFREGEXP26="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4JYAYsKUNEN0uqau1udeL2y"
  [HKCU\Software\5d08fd1e26de446]:KWFFREGEXP27="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4pXEbZJQMAI/LO18FmAdvvESDIWgjyj"
  [HKCU\Software\5d08fd1e26de446]:KWFFREGEXP2="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tcFaNGf4gfxf+09lCuO/D3C39T"
  [HKCU\Software\5d08fd1e26de446]:KWFFREGEXP3="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41MHLlIUMAN0v2uyRaRev62TA=="
  [HKCU\Software\5d08fd1e26de446]:KWFFREGEXP4="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES/lBx/Gn+WTcdvz1SHs="
  [HKCU\Software\5d08fd1e26de446]:KWFFREGEXP5="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES8IDzMLo9lefO7k="
  [HKCU\Software\5d08fd1e26de446]:KWFFREGEXP6="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4dWFbZURsQew/aau1udeL2y"
  [HKCU\Software\5d08fd1e26de446]:KWFFREGEXP7="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4hWFaRCQtcPyMLo9lefO7k="
  [HKCU\Software\5d08fd1e26de446]:KWFFREGEXP8="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tYFbJURsQew/aau1udeL2y"
  [HKCU\Software\5d08fd1e26de446]:KWFFREGEXP9="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5pXFosKUMAN0v2uyRaRev62TA=="
  [HKCU\Software\5d08fd1e26de446]:NTCHREGEXP0="FO81jovjQUF+5S6+haV7vGe3TMfw8oqWAhSaKzFS9OtdgZ1j5X+B4jW/459R"
  [HKCU\Software\5d08fd1e26de446]:NTCHREGEXP1="FO81jovjQUF+5S6+hbF0tnG4Tc/u94SDBhydJTxS8+ldnZRi5niE4Dm49Yxb"
  [HKCU\Software\5d08fd1e26de446]:NTCHREGEXP2="FO81jovjQUF+5S6+hbF/tG24SsHn9oyWDBuXLj1U8e1fjIJv8XSE4Dy75IlV"
  [HKCU\Software\5d08fd1e26de446]:NTFFREGEXP0="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41YG65LTMswjv2p+BbY"
  [HKCU\Software\5d08fd1e26de446]:NTFFREGEXP10="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tcC7Z7DtYJweyl/WTcdvz1SHs="
  [HKCU\Software\5d08fd1e26de446]:NTFFREGEXP11="FO81jovjQUF+5S6+hb1oqXHuCob28bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4PgTyj"
  [HKCU\Software\5d08fd1e26de446]:NTFFREGEXP12="FO81jovjQUF+5S6+hb1oqXHuCobi7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4bnTyj"
  [HKCU\Software\5d08fd1e26de446]:NTFFREGEXP13="FO81jovjQUF+5S6+hb1oqXHuCobh7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4YnTyj"
  [HKCU\Software\5d08fd1e26de446]:NTFFREGEXP14="FO81jovjQUF+5S6+hb1oqXHuCobp+7vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Qizyj"
  [HKCU\Software\5d08fd1e26de446]:NTFFREGEXP15="FO81jovjQUF+5S6+hb1oqXHuCobq77vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Tnzyj"
  [HKCU\Software\5d08fd1e26de446]:NTFFREGEXP16="FO81jovjQUF+5S6+hb1oqXHuCob097vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Nhzyj"
  [HKCU\Software\5d08fd1e26de446]:NTFFREGEXP17="FO81jovjQUF+5S6+hf10qXWkH4avttjOR1OpbXMX8/9twJ1l7X6A6gb39opYC7RPf4sPz/Povw=="
  [HKCU\Software\5d08fd1e26de446]:NTFFREGEXP18="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tLEKdLRvlB0/un51uaSb37CTxXxQ=="
  [HKCU\Software\5d08fd1e26de446]:NTFFREGEXP19="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tQErZ7DtYJweyl/WTcdvz1SHs="
  [HKCU\Software\5d08fd1e26de446]:NTFFREGEXP1="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4xVGKVIf4gfxf+09lCuO/D3C39T"
  [HKCU\Software\5d08fd1e26de446]:NTFFREGEXP20="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4BXFa57DtYJweyl/WTcdvz1SHs="
  [HKCU\Software\5d08fd1e26de446]:NTFFREGEXP21="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tWErh7DtYJweyl/WTcdvz1SHs="
  [HKCU\Software\5d08fd1e26de446]:NTFFREGEXP22="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4BJDb57DtUNx/uau1udeL2y"
  [HKCU\Software\5d08fd1e26de446]:NTFFREGEXP23="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xMCbJVf4gcwfmjyRaRev62TA=="
  [HKCU\Software\5d08fd1e26de446]:NTFFREGEXP24="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41WAbh7DtYJweyl/WTcdvz1SHs="
  [HKCU\Software\5d08fd1e26de446]:NTFFREGEXP25="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr59cC6RITcQA/LOk51eFZvbqOn8agH+n2A=="
  [HKCU\Software\5d08fd1e26de446]:NTFFREGEXP26="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4JYAYsKUNEN0uqau1udeL2y"
  [HKCU\Software\5d08fd1e26de446]:NTFFREGEXP27="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4pXEbZJQMAI/LO18FmAdvvESDIWgjyj"
  [HKCU\Software\5d08fd1e26de446]:NTFFREGEXP2="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tcFaNGf4gfxf+09lCuO/D3C39T"
  [HKCU\Software\5d08fd1e26de446]:NTFFREGEXP3="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41MHLlIUMAN0v2uyRaRev62TA=="
  [HKCU\Software\5d08fd1e26de446]:NTFFREGEXP4="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES/lBx/Gn+WTcdvz1SHs="
  [HKCU\Software\5d08fd1e26de446]:NTFFREGEXP5="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES8IDzMLo9lefO7k="
  [HKCU\Software\5d08fd1e26de446]:NTFFREGEXP6="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4dWFbZURsQew/aau1udeL2y"
  [HKCU\Software\5d08fd1e26de446]:NTFFREGEXP7="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4hWFaRCQtcPyMLo9lefO7k="
  [HKCU\Software\5d08fd1e26de446]:NTFFREGEXP8="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tYFbJURsQew/aau1udeL2y"
  [HKCU\Software\5d08fd1e26de446]:NTFFREGEXP9="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5pXFosKUMAN0v2uyRaRev62TA=="
  [HKCU\Software\5d08fd1e26de446]:SECHREGEXP0="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41YG65LTMswjv2p+BbY"
  [HKCU\Software\5d08fd1e26de446]:SECHREGEXP10="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tcC7Z7DtYJweyl/WTcdvz1SHs="
  [HKCU\Software\5d08fd1e26de446]:SECHREGEXP11="FO81jovjQUF+5S6+hb1oqXHuCob28bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4PgTyj"
  [HKCU\Software\5d08fd1e26de446]:SECHREGEXP12="FO81jovjQUF+5S6+hb1oqXHuCobi7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4bnTyj"
  [HKCU\Software\5d08fd1e26de446]:SECHREGEXP13="FO81jovjQUF+5S6+hb1oqXHuCobh7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4YnTyj"
  [HKCU\Software\5d08fd1e26de446]:SECHREGEXP14="FO81jovjQUF+5S6+hb1oqXHuCobp+7vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Qizyj"
  [HKCU\Software\5d08fd1e26de446]:SECHREGEXP15="FO81jovjQUF+5S6+hb1oqXHuCobq77vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Tnzyj"
  [HKCU\Software\5d08fd1e26de446]:SECHREGEXP16="FO81jovjQUF+5S6+hb1oqXHuCob097vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Nhzyj"
  [HKCU\Software\5d08fd1e26de446]:SECHREGEXP17="FO81jovjQUF+5S6+hf10qXWkH4avttjOR1OpbXMX8/9twJ1l7X6A6gb39opYC7RPf4sPz/Povw=="
  [HKCU\Software\5d08fd1e26de446]:SECHREGEXP18="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tLEKdLRvlB0/un51uaSb37CTxXxQ=="
  [HKCU\Software\5d08fd1e26de446]:SECHREGEXP19="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tQErZ7DtYJweyl/WTcdvz1SHs="
  [HKCU\Software\5d08fd1e26de446]:SECHREGEXP1="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4xVGKVIf4gfxf+09lCuO/D3C39T"
  [HKCU\Software\5d08fd1e26de446]:SECHREGEXP20="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4BXFa57DtYJweyl/WTcdvz1SHs="
  [HKCU\Software\5d08fd1e26de446]:SECHREGEXP21="FO81jovjQ
  
  0
Réponse 9 / 24
lilidurhone Contributeur sécurité
Celui d'adwcleaner option "nettoyer"!
0
1. Geoffrey3613 Auteur
  
  # AdwCleaner v3.010 - Rapport créé le 22/10/2013 à 12:29:07
  # Mis à jour le 20/10/2013 par Xplode
  # Système d'exploitation : Windows 7 Home Premium Service Pack 1 (64 bits)
  # Nom d'utilisateur : geoffrey - WENZ-PC
  # Exécuté depuis : C:\Users\geoffrey\Downloads\adwcleaner.exe
  # Option : Nettoyer
  
  ***** [ Services ] *****
  
  ***** [ Fichiers / Dossiers ] *****
  
  Dossier Supprimé : C:\ProgramData\Babylon
  Dossier Supprimé : C:\ProgramData\BonanzaDealsLive
  Dossier Supprimé : C:\Program Files (x86)\BonanzaDealsLive
  Dossier Supprimé : C:\Program Files (x86)\MyPC Backup
  Dossier Supprimé : C:\Program Files (x86)\Whilokii
  Dossier Supprimé : C:\Users\WENZ\AppData\Local\BonanzaDealsLive
  Dossier Supprimé : C:\Users\WENZ\AppData\Local\Temp\Whilokii
  Dossier Supprimé : C:\Users\WENZ\AppData\Roaming\Systweak
  Dossier Supprimé : C:\Users\WENZ\AppData\Local\Google\Chrome\User Data\Default\Extensions\eooncjejnppfjjklapaamhcdmjbilmde
  Dossier Supprimé : C:\Users\WENZ\AppData\Local\Google\Chrome\User Data\Default\Extensions\ifohbjbgfchkkfhphahclmkpgejiplfo
  Dossier Supprimé : C:\Users\geoffrey\AppData\Local\Google\Chrome\User Data\Default\Extensions\omfoidjpeklpjhlhabhcomekbkclkbec
  Dossier Supprimé : C:\Users\hugo\AppData\Local\Google\Chrome\User Data\Default\Extensions\omfoidjpeklpjhlhabhcomekbkclkbec
  Dossier Supprimé : C:\Users\geoffrey\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbpohikckhbcljgombipcdoinkaedlfa
  Dossier Supprimé : C:\Users\WENZ\AppData\Local\Google\Chrome\User Data\Default\Extensions\pialekdjmfmckiccfkgbbgphficjdekh
  Fichier Supprimé : C:\Windows\System32\roboot64.exe
  
  ***** [ Raccourcis ] *****
  
  ***** [ Registre ] *****
  
  Clé Supprimée : HKLM\SOFTWARE\Classes\Prod.cap
  Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\BonanzaDealsLive.exe
  Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
  Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{204DF522-9A96-4A72-ABB0-60F7A216D6D2}
  Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{806785D0-375F-4C2C-92E3-B8EE65D28E83}
  Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{AB4DA692-F26B-403C-AF8F-FD87D121F8F1}
  Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{8B0295E2-967E-439E-9560-807D9F625B57}
  Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{204DF522-9A96-4A72-ABB0-60F7A216D6D2}
  Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{AB4DA692-F26B-403C-AF8F-FD87D121F8F1}
  Clé Supprimée : HKCU\Software\BonanzaDealsLive
  Clé Supprimée : HKLM\Software\BonanzaDealsLive
  Clé Supprimée : HKLM\Software\systweak
  Clé Supprimée : HKLM\Software\Whilokii
  
  ***** [ Navigateurs ] *****
  
  -\\ Internet Explorer v10.0.9200.16720
  
  -\\ Mozilla Firefox v22.0 (fr)
  
  [ Fichier : C:\Users\WENZ\AppData\Roaming\Mozilla\Firefox\Profiles\qjpqjhk3.default\prefs.js ]
  
  [ Fichier : C:\Users\nathalie\AppData\Roaming\Mozilla\Firefox\Profiles\pjhi1iqd.default\prefs.js ]
  
  [ Fichier : C:\Users\geoffrey\AppData\Roaming\Mozilla\Firefox\Profiles\utk92q2b.default\prefs.js ]
  
  -\\ Google Chrome v30.0.1599.101
  
  [ Fichier : C:\Users\WENZ\AppData\Local\Google\Chrome\User Data\Default\preferences ]
  
  [ Fichier : C:\Users\geoffrey\AppData\Local\Google\Chrome\User Data\Default\preferences ]
  
  [ Fichier : C:\Users\hugo\AppData\Local\Google\Chrome\User Data\Default\preferences ]
  
  *************************
  
  AdwCleaner[R0].txt - [34169 octets] - [21/10/2013 10:43:21]
  AdwCleaner[R1].txt - [3768 octets] - [22/10/2013 12:26:41]
  AdwCleaner[S0].txt - [32901 octets] - [21/10/2013 10:46:07]
  AdwCleaner[S1].txt - [3624 octets] - [22/10/2013 12:29:07]
  
  ########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [3684 octets] ##########
  
  0
Réponse 10 / 24
lilidurhone Contributeur sécurité
Bien refais un zhpdiag
0
1. Geoffrey3613 Auteur
  
  ~ Rapport de ZHPDiag v2013.10.20.55 - Nicolas Coolman (20/10/2013)
  ~ Lancé par geoffrey (22/10/2013 16:13:00)
  ~ Adresse du Site Web https://nicolascoolman.webs.com/
  ~ Forums gratuits d'Assistance à la désinfection : https://nicolascoolman.webs.com/
  ~ Traduit par Nicolas Coolman
  ~ Etat de la version :
  ~ Liste blanche : Activée par le programme
  ~ Elévation des Privilèges : OK
  ~ User Account Control (UAC):
  
  ---\\ Navigateurs Internet
  MSIE: Internet Explorer v10.0.9200.16721
  MFIE: Mozilla Firefox 22.0
  GCIE: Google Chrome v30.0.1599.101 (Defaut)
  
  ---\\ Informations sur les produits Windows
  ~ Langage: Français
  Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)
  Windows Server License Manager Script : OK
  ~ Windows(R) 7, OEM_SLP channel
  System Locked Preinstallation (OEM_SLP) : OK
  Windows ID Activation : OK
  ~ Windows Partial Key : 7QJB7
  Windows License : OK
  ~ Windows Remaining Initializations Number : 3
  Software Protection Service (Protection logicielle) : OK
  Windows Automatic Updates : OK
  Windows Activation Technologies : OK
  
  ---\\ Logiciels de protection du système
  avast! Free Antivirus v8.0.1497.0
  Windows Defender W7
  
  ---\\ Logiciels d'optimisation du système
  
  ---\\ Logiciels de partage PeerToPeer
  
  ---\\ Surveillance de Logiciels
  Adobe Flash Player 11 Plugin
  Adobe Reader XI
  Java 7 Update 25
  
  ---\\ Informations sur le système
  ~ Processor: Intel64 Family 6 Model 22 Stepping 1, GenuineIntel
  ~ Operating System: 64 Bits
  Boot mode: Normal (Normal boot)
  Total RAM: 3037 MB (47% free)
  System Restore: Activé (Enable)
  System drive C: has 31 GB (21%) free of 140 GB
  
  ---\\ Mode de connexion au système
  ~ Computer Name: WENZ-PC
  ~ User Name: geoffrey
  ~ All Users Names: WENZ, nathalie, hugo, HomeGroupUser$, geoffrey, Administrateur,
  ~ Unselected Option: None
  Logged in as Administrator
  
  ---\\ Variables d'environnement
  ~ System Unit : C:\
  ~ %AppZHP% : C:\Users\geoffrey\AppData\Roaming\ZHP\
  ~ %AppData% : C:\Users\geoffrey\AppData\Roaming\
  ~ %Desktop% : C:\Users\geoffrey\Desktop\
  ~ %Favorites% : C:\Users\geoffrey\Favorites\
  ~ %LocalAppData% : C:\Users\geoffrey\AppData\Local\
  ~ %StartMenu% : C:\Users\geoffrey\AppData\Roaming\Microsoft\Windows\Start Menu\
  ~ %Windir% : C:\Windows\
  ~ %System% : C:\Windows\System32\
  
  ---\\ Enumération des unités disques
  C: Hard drive, Flash drive, Thumb drive (Free 31 Go of 140 Go)
  D: Hard drive, Flash drive, Thumb drive (Free 132 Go of 141 Go)
  E: CD-ROM drive (Free 0 Go of 0 Go)
  F: Floppy drive, Flash card reader, USB Key (Free 4 Go of 14 Go)
  H: Floppy drive, Flash card reader, USB Key (Not Inserted)
  I: Floppy drive, Flash card reader, USB Key (Not Inserted)
  J: Floppy drive, Flash card reader, USB Key (Not Inserted)
  L: Floppy drive, Flash card reader, USB Key (Not Inserted)
  
  ---\\ Etat du Centre de Sécurité Windows
  [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
  ~ Security Center: 41 Legitimates Filtered in 00mn 00s
  
  ---\\ Recherche particulière de fichiers génériques
  [MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorateur Windows.) (.25/02/2011 - 07:19:30.) -- C:\Windows\Explorer.exe [2871808]
  [MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 - 02:39:52.) -- C:\Windows\System32\Wininit.exe [129024]
  [MD5.D28B35DE88D27EFB27DF4B1E8319E3C0] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.22/09/2013 - 23:55:10.) -- C:\Windows\System32\wininet.dll [2241024]
  [MD5.1151B1BAA6F350B1DB6598E0FEA7C457] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.20/11/2010 - 14:25:30.) -- C:\Windows\System32\Winlogon.exe [390656]
  [MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Bibliothèque de licences.) (.20/11/2010 - 14:27:26.) -- C:\Windows\System32\sppcomapi.dll [232448]
  [MD5.314C17917AC8523EC77A710215012A65] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.14/09/2013 - 02:10:19.) -- C:\Windows\system32\Drivers\AFD.sys [497152]
  [MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 - 02:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128]
  [MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/07/2009 - 00:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160]
  [MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.20/11/2010 - 10:19:21.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456]
  [MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.20/11/2010 - 10:26:32.) -- C:\Windows\system32\Drivers\DfsC.sys [102400]
  [MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.20/11/2010 - 11:43:43.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368]
  [MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) (.14/07/2009 - 00:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472]
  [MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.14/07/2009 - 01:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224]
  [MD5.A5D9106A73DC88564C825D317CAC68AC] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.27/04/2011 - 03:40:40.) -- C:\Windows\system32\Drivers\MRxSmb.sys [158208]
  [MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) (.20/11/2010 - 10:23:20.) -- C:\Windows\system32\Drivers\netBT.sys [261632]
  [MD5.B98F8C6E31CD07B2E6F71F7F648E38C0] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.12/04/2013 - 15:45:08.) -- C:\Windows\system32\Drivers\ntfs.sys [1656680]
  [MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/07/2009 - 01:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280]
  [MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.20/11/2010 - 11:52:35.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [129536]
  [MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.14/07/2009 - 01:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184]
  [MD5.DDAD5A7AB24D8B65F8D724F5C20FD806] - (.Microsoft Corporation - TDI Translation Driver.) (.20/11/2010 - 10:21:56.) -- C:\Windows\system32\Drivers\tdx.sys [119296]
  [MD5.0D08D2F3B3FF84E433346669B5E0F639] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.20/11/2010 - 14:34:02.) -- C:\Windows\system32\Drivers\volsnap.sys [295808]
  ~ Generic Processes: Scanned in 00mn 01s
  
  ---\\ Etat des fichiers cachés (Caché/Total)
  ~ Mes images (My Pictures) : 1/8
  ~ Mes musiques (My Musics) : 5/24
  ~ Mes Videos (My Videos) : 1/23
  ~ Mes Favoris (My Favorites) : 1/26
  ~ Mes Documents (My Documents) : 1/2
  ~ Mon Bureau (My Desktop) : 1/365
  ~ Menu demarrer (Programs) : 1/23
  ~ Hidden Files: Scanned in 00mn 10s
  
  ---\\ Processus lancés
  [MD5.CBC7D8E5416AD30CF16DC2FD4A6AA399] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe [4858968] [PID.1572]
  [MD5.BDCF298015FC44EDE23EF8FDB126B696] - (.BitTorrent Inc. - µTorrent.) -- C:\Users\geoffrey\AppData\Roaming\uTorrent\uTorrent.exe [1130576] [PID.3884] =>P2P.BitTorrent
  [MD5.C155A13687144076286989EF078112C2] - (.Nicolas Coolman - ZHPDiag Setup.) -- C:\Program Files (x86)\ZHPDiag\ZHPFix\ZHPhep.exe [1917440] [PID.2804]
  [MD5.3E399A1328181C2A352472369DE2A93A] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [844752] [PID.4188]
  [MD5.85DCE59FE46EDA6FF3901C78DA57AA3D] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [8112640] [PID.2732]
  [MD5.9330941C8F6DF417F6DBBE998DB6687E] - (.AVAST Software - avast! Service.) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808] [PID.1200]
  [MD5.ADDA5E1951B90D3D23C56D3CF0622ADC] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [65640] [PID.1764]
  [MD5.4FE5C6D40664AE07BE5105874357D2ED] - (.Apple Inc. - MobileDeviceService.) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [57008] [PID.1804]
  [MD5.816FD5A6F3C2F3D600900096632FC60E] - (.Acer Incorporated - Global Registration Service.) -- C:\Program Files (x86)\Packard Bell\Registration\GregHSRW.exe [1150496] [PID.1984]
  [MD5.A06EFD4965F8A3F97A8C9A291D032678] - (.Pas de propriétaire - Inkjet Printer/Scanner/Fax Extended Servey.) -- C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.exe [116104] [PID.1280]
  [MD5.F9EC9ACD504D823D9B9CA98A4F8D3CA2] - (.Acer Group - Updater Service.) -- C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe [243232] [PID.1744]
  ~ Processes Running: Scanned in 00mn 02s
  
  ---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
  C:\Users\geoffrey\AppData\Local\Google\Chrome\User Data\Default\Preferences
  G2 - GCE: Preference [User Data\Default] [lechbfhppigdgmodjlmcbiebfpogaeli] savvEnsharee v.5.10 (Activé) =>Adware.SaveShare
  G2 - GCE: Preference [User Data\Default] [pbpohikckhbcljgombipcdoinkaedlfa] Smart Display v.1.6 (Activé) =>Spyware.SmartDisplay
  ~ Google Browser: 18 Legitimates Filtered in 00mn 27s
  
  ---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
  C:\Users\geoffrey\AppData\Roaming\Mozilla\Firefox\Profiles\utk92q2b.default\prefs.js
  M2 - MFEP: prefs.js [geoffrey - utk92q2b.default\7125a285-7e68-47aa-9d72-e81874f4d47e@d3fcdb92-135d-4a8a-8cf6-11e3b57c5fda.com] [] Plus-HD-2.3 v (..) =>Adware.PlusHD
  M2 - MFEP: prefs.js [geoffrey - utk92q2b.default\jid1-FCM5fDwCW5M3AQ@jetpack] [] Smart Display v1.2 (..) =>Spyware.SmartDisplay
  P2 - FPN: [HKCU] [pandonetworks.com/PandoWebPlugin] - (...) -- C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (.not file.)
  ~ Firefox Browser: 10 Legitimates Filtered in 00mn 00s
  
  ---\\ Internet Explorer, Proxy Management (R5)
  R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
  R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
  R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
  R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
  R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
  ~ Proxy management: Scanned in 00mn 00s
  
  ---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
  F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
  F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
  F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
  ~ Keys: Scanned in 00mn 00s
  
  ---\\ Hosts file redirection (O1)
  ~ Le fichier hosts est sain (The hosts file is clean).
  ~ Hosts File: Scanned in 00mn 00s
  ~ Nombre de lignes (Lines number): 21
  
  ---\\ Internet Explorer Toolbars (O3)
  O3 - Toolbar: (no name) [64Bits] - [HKLM]{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} Clé orpheline
  O3 - Toolbar: Google Toolbar [64Bits] - [HKLM]{2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll =>Toolbar.Google
  O3 - Toolbar\WebBrowser: (no name) [64Bits] - [HKCU]{2318C2B1-4965-11D4-9B18-009027A5CD4F} Clé orpheline
  ~ Toolbar: Scanned in 00mn 00s
  
  ---\\ Autres liens utilisateurs (O4)
  O4 - GS\Desktop [Public]: FlvPlayer.lnk . (...) -- C:\Program Files (x86)\FLVPlayer\FLVPlayerApp.exe
  O4 - GS\Desktop [Public]: Google SketchUp 8.lnk . (.Google, Inc. - SketchUp Application.) -- C:\Program Files (x86)\Google\Google SketchUp 8\SketchUp.exe
  O4 - GS\Desktop [Public]: RollerCoaster Tycoon 3.lnk . (.Frontier Developments Ltd - RollerCoaster Tycoon® 3.) -- C:\Program Files (x86)\Atari\RollerCoaster Tycoon 3\RCT3plus.exe
  O4 - GS\Program [Public]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
  O4 - GS\QuickLaunch [WENZ]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe http://www.qvo6.com =>Hijacker.Qvo6
  O4 - GS\QuickLaunch [WENZ]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe http://www.qvo6.com =>Hijacker.Qvo6
  O4 - GS\QuickLaunch [WENZ]: Packard Bell Games.lnk . (.WildTangent, Inc. - GameConsole.) -- C:\Program Files (x86)\Packard Bell Games\Packard Bell Game Console\GameConsole-wt.exe
  O4 - GS\QuickLaunch [WENZ]: qvo6.lnk . (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe http://www.qvo6.com =>Hijacker.Qvo6
  O4 - GS\QuickLaunch [WENZ]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) -- C:\Users\geoffrey\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent
  O4 - GS\TaskBar [WENZ]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe http://www.qvo6.com =>Hijacker.Qvo6
  O4 - GS\TaskBar [WENZ]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe http://www.qvo6.com =>Hijacker.Qvo6
  O4 - GS\TaskBar [WENZ]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) -- C:\Users\geoffrey\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent
  O4 - GS\Program [WENZ]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe http://www.qvo6.com =>Hijacker.Qvo6
  O4 - GS\SystemTools [WENZ]: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe http://www.qvo6.com =>Hijacker.Qvo6
  O4 - GS\SendTo [WENZ]: Desk 365.lnk . (...) -- C:\Program Files (x86)\Desk 365\desk365.exe (.not file.) =>Hijacker.22Find
  O4 - GS\Desktop [WENZ]: Auslogics DiskDefrag.lnk . (.Auslogics - Disk Defrag.) -- C:\Program Files (x86)\Auslogics\DiskDefrag\DiskDefrag.exe
  O4 - GS\Desktop [WENZ]: Internet Checkers.lnk - Clé orpheline
  O4 - GS\Desktop [WENZ]: Media Player Classic - HC.lnk . (.MPC-HC Team - Media Player Classic - Home Cinema.) -- C:\Program Files (x86)\XP Codec Pack\mpc-hc\mpc-hc.exe
  O4 - GS\Desktop [WENZ]: Microsoft Works.lnk . (...) -- C:\Windows\Installer\{A3088CD2-612B-11D3-AF43-00C04F443448}\FB931E91.exe
  O4 - GS\Desktop [WENZ]: Packard Bell Games.lnk . (.WildTangent, Inc. - GameConsole.) -- C:\Program Files (x86)\Packard Bell Games\Packard Bell Game Console\GameConsole-wt.exe
  O4 - GS\Desktop [WENZ]: Solitaire.lnk - Clé orpheline
  O4 - GS\Desktop [WENZ]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) -- C:\Users\geoffrey\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent
  O4 - GS\QuickLaunch [nathalie]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  O4 - GS\QuickLaunch [nathalie]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
  O4 - GS\TaskBar [nathalie]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  O4 - GS\TaskBar [nathalie]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
  O4 - GS\Program [nathalie]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
  O4 - GS\SystemTools [nathalie]: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
  O4 - GS\Desktop [nathalie]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  O4 - GS\QuickLaunch [hugo]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  O4 - GS\QuickLaunch [hugo]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
  O4 - GS\QuickLaunch [hugo]: Packard Bell Games.lnk . (.WildTangent, Inc. - GameConsole.) -- C:\Program Files (x86)\Packard Bell Games\Packard Bell Game Console\GameConsole-wt.exe
  O4 - GS\TaskBar [hugo]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
  O4 - GS\Program [hugo]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
  O4 - GS\SystemTools [hugo]: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
  O4 - GS\QuickLaunch [geoffrey]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  O4 - GS\QuickLaunch [geoffrey]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
  O4 - GS\TaskBar [geoffrey]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  O4 - GS\Program [geoffrey]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
  O4 - GS\SystemTools [geoffrey]: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
  O4 - GS\Desktop [geoffrey]: Earthquake - Raccourci.lnk . (.Blizzard Entertainment - World of Warcraft Retail.) -- C:\Users\geoffrey\Desktop\Earthquake\Earthquake.exe
  O4 - GS\Desktop [geoffrey]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  O4 - GS\Desktop [geoffrey]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) -- C:\Users\geoffrey\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent
  ~ Global Startup: 124 Legitimates Filtered in 00mn 08s
  
  ---\\ Applications lancées au démarrage du sytème (O4)
  O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\Windows\system32\hkcmd.exe
  O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\Windows\system32\igfxpers.exe
  O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\Windows\system32\igfxtray.exe
  O4 - HKCU\..\Run: [SearchProtection] C:\Users\geoffrey\AppData\Roaming\Search Protection\SearchProtection.exe (.not file.) =>Toolbar.Conduit
  O4 - HKCU\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe =>Toolbar.Google
  O4 - HKLM\..\Wow6432Node\Run: [avast] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\avastUI.exe
  O4 - HKLM\..\Wow6432Node\Run: [tuto4pc_fr_62] Clé orpheline =>PUP.Eorezo
  O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation
  O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation
  O4 - HKUS\S-1-5-18\..\RunOnce: [SPReview] . (.Microsoft Corporation - SP Reviewer.) -- C:\Windows\System32\SPReview\SPReview.exe =>.Microsoft Corporation
  O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation
  O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation
  O4 - HKUS\S-1-5-21-3201979416-3185207537-2710416600-1004\..\Run: [SearchProtection] C:\Users\geoffrey\AppData\Roaming\Search Protection\SearchProtection.exe (.not file.) =>Toolbar.Conduit
  O4 - HKUS\S-1-5-21-3201979416-3185207537-2710416600-1004\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe =>Toolbar.Google
  ~ Application: Scanned in 00mn 00s
  
  ---\\ Modification Domaine/Adresses DNS (O17)
  O17 - HKLM\System\CCS\Services\Tcpip\..\{FA4AA3A3-DDC3-45F2-9645-FF26903C23FA}: DhcpNameServer = 192.168.1.1 192.168.1.1
  O17 - HKLM\System\CS1\Services\Tcpip\..\{FA4AA3A3-DDC3-45F2-9645-FF26903C23FA}: DhcpNameServer = 192.168.1.1 192.168.1.1
  O17 - HKLM\System\CS2\Services\Tcpip\..\{FA4AA3A3-DDC3-45F2-9645-FF26903C23FA}: DhcpNameServer = 192.168.1.1 192.168.1.1
  O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 192.168.1.1
  ~ Domain: Scanned in 00mn 00s
  
  ---\\ Protocole additionnel (O18)
  O18 - Handler: wlmailhtml [64Bits] - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} . (...) --
  O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation
  ~ Protocole Additionnel: Scanned in 00mn 00s
  
  ---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
  O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\Windows\System32\igfxdev.dll
  ~ Winlogon: Scanned in 00mn 00s
  
  ---\\ HKCU & HKLM Software Keys
  [HKCU\Software\Pando Networks]
  [HKLM\Software\Wow6432Node\Pando Networks]
  ~ Key Software: 213 Legitimates Filtered in 00mn 01s
  
  ---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
  O43 - CFD: 11/10/2013 - 23:18:21 - [0] ----D C:\Program Files (x86)\Pando Networks
  O43 - CFD: 07/08/2013 - 20:10:09 - [0] ----D C:\Users\geoffrey\AppData\Roaming\Reg
  ~ Program Folder: 161 Legitimates Filtered in 01mn 29s
  
  ---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
  O44 - LFC:[MD5.02DC0F457C2CC6E23F073F94BAC1A871] - 12/10/2013 - 01:25:25 ---A- . (...) -- C:\Windows\wininit.ini [61]
  ~ Files: 98 Legitimates Filtered in 00mn 40s
  
  ---\\ Enumération des clés de registre StartupReg (SMSR) (O53)
  O53 - SMSR:HKLM\...\startupreg\24x7HELP [Key] . (...) -- C:\Program Files (x86)\24x7Help\App24x7Help.exe (.not file.) =>PUP.24x7Help
  O53 - SMSR:HKLM\...\startupreg\Boxore Client [Key] . (...) -- C:\Program Files (x86)\Boxore\BoxoreClient\boxore.exe (.not file.) =>Adware.Boxore
  O53 - SMSR:HKLM\...\startupreg\Browser Infrastructure Helper [Key] . (...) -- C:\Users\WENZ\AppData\Local\Smartbar\Application\Smartbar.exe (.not file.) =>Hijacker.SmartBar
  O53 - SMSR:HKLM\...\startupreg\ConduitFloatingPlugin_biahaobfpkgeiomkihcdgknebbhadonc [Key] . (...) -- C:\Program Files (x86)\Conduit\CT3307695\plugins\TBVerifier.dll (.not file.)
  O53 - SMSR:HKLM\...\startupreg\Desk 365 [Key] . (...) -- C:\Program Files (x86)\Desk 365\desk365.exe (.not file.) =>Hijacker.22Find
  O53 - SMSR:HKLM\...\startupreg\Iminent [Key] . (...) -- C:\Program Files (x86)\Iminent\Iminent.exe (.not file.) =>Adware.IMBooster
  O53 - SMSR:HKLM\...\startupreg\IminentMessenger [Key] . (...) -- C:\Program Files (x86)\Iminent\Iminent.Messengers.exe (.not file.) =>Adware.IMBooster
  O53 - SMSR:HKLM\...\startupreg\lollipop [Key] . (...) -- c:\users\wenz\appdata\local\lollipop\lollipop.exe (.not file.) =>Adware.Lollipop
  O53 - SMSR:HKLM\...\startupreg\NTRedirect [Key] . (...) -- C:\Users\WENZ\AppData\Roaming\BabSolution\Shared\enhancedNT.dll (.not file.) =>Hijacker.BabSolution
  O53 - SMSR:HKLM\...\startupreg\offerbox [Key] . (...) -- C:\Program Files (x86)\OfferBox\OfferBox.exe (.not file.) =>PUP.OfferBox
  O53 - SMSR:HKLM\...\startupreg\PCFixSpeed [Key] . (...) -- C:\Program Files (x86)\PCFixSpeed\PCFixTray.exe (.not file.) =>PUP.PCFixSpeed
  O53 - SMSR:HKLM\...\startupreg\SearchProtect [Key] . (...) -- C:\Users\WENZ\AppData\Roaming\SearchProtect\bin\cltmng.exe (.not file.) =>Toolbar.Conduit
  O53 - SMSR:HKLM\...\startupreg\SearchProtectAll [Key] . (...) -- C:\Program Files (x86)\SearchProtect\bin\cltmng.exe (.not file.) =>Toolbar.Conduit
  O53 - SMSR:HKLM\...\startupreg\SuperCopier2.exe [Key] . (...) -- C:\Program Files (x86)\SuperCopier2\SuperCopier2.exe (.not file.)
  O53 - SMSR:HKLM\...\startupreg\tuto4pc_fr_62 [Key] . (...) -- C:\Program Files (x86)\tuto4pc_fr_62\tuto4pc_fr_62.exe (.not file.) =>PUP.Eorezo
  ~ SMSR Keys: 28 Legitimates Filtered in 00mn 00s
  
  ---\\ Enumération des clés de registre PoliciesSystem (MWPS) (O55)
  O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
  O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
  ~ MWPS: 16 Legitimates Filtered in 00mn 00s
  
  ---\\ Enumération des clés de registre PoliciesExplorer (MWPE) (O56)
  O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1
  ~ MWPE Keys: 3 Legitimates Filtered in 00mn 00s
  
  ---\\ Liste des pilotes du système (SDL) (O58)
  O58 - SDL:[MD5.286193DC28CFB4CEB8D378E20A0850A9] - 30/08/2013 - 08:48:10 ---A- . (...) -- C:\Windows\System32\Drivers\aswRvrt.sys [65336]
  ~ Drivers: 16 Legitimates Filtered in 00mn 05s
  
  ---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61)
  O61 - LFC: 22/10/2013 - 16:17:37 ---A- . (...) -- C:\Users\geoffrey\AppData\Local\Google\Chrome\User Data\Certificate Revocation Lists [258212]
  O61 - LFC: 22/10/2013 - 16:17:50 ---A- . (...) -- C:\Users\geoffrey\AppData\Local\Google\Chrome\User Data\Local State [44256]
  O61 - LFC: 22/10/2013 - 16:18:06 ---A- . (...) -- C:\Users\geoffrey\AppData\Roaming\app\Jerakine_lang.dat [5077]
  O61 - LFC: 22/10/2013 - 16:18:07 ---A- . (...) -- C:\Users\geoffrey\AppData\Roaming\D2Info0 [117]
  O61 - LFC: 22/10/2013 - 16:18:13 ---A- . (...) -- C:\Users\geoffrey\AppData\Roaming\ZHP\TestsZHPDiag.txt [2936] =>.Nicolas Coolman
  O61 - LFC: 22/10/2013 - 16:18:14 ---A- . (...) -- C:\Users\geoffrey\Downloads\monstres-academy-monsters-university-french-dvdrip-2013 (2).torrent [57522]
  ~ 7 Fichiers temporaires (Temporary files)
  ~ Files: 229 Legitimates Filtered in 00mn 50s
  
  ---\\ Liste des outils de désinfection (LATC) (O63)
  O63 - Logiciel: ZHPDiag 2013 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 =>.Nicolas Coolman
  ~ ADS: Scanned in 00mn 00s
  
  ---\\ Associations Shell Spawning (O67)
  O67 - Shell Spawning: <.html> <ChromeHTML>[HKCU\..\open\Command] (.Not Key.)
  ~ FASS Keys: 19 Legitimates Filtered in 00mn 00s
  
  ---\\ Menu de démarrage Internet (SMI) (O68)
  O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
  O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  O68 - StartMenuInternet: <Google Chrome.BTNYCY4CGGSFGEPYEPPKF7JTXE> <Google Chrome>[HKLM\..\Shell\open\Command] (...) -- C:\Users\geoffrey\AppData\Local\Google\Chrome\Application\chrome.exe" http://www.qvo6.com =>Hijacker.Qvo6
  O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
  ~ Keys: Scanned in 00mn 00s
  
  ---\\ Recherche d'infection sur les navigateurs internet (SBI) (O69)
  O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - https://www.bing.com/?toHttps=1&redig=69DA0EF8272048D9864AF4DB37211DE8
  O69 - SBI: SearchScopes [HKCU] {4AA8D98D-83D2-3B0B-23B0-667AAFFB4606} - (Google) - https://www.google.com/?gws_rd=ssl
  O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} - (Google) - https://www.google.com/?gws_rd=ssl
  O69 - SBI: SearchScopes [HKCU] {B7A052D6-433A-42CB-9165-87E9BD100337} - (Yahoo! Search) - https://fr.search.yahoo.com/
  ~ Keys: Scanned in 00mn 00s
  
  ---\\ Recherche particulière à la racine du système (SPRF) (O84)
  [MD5.D07444BDB22757545CD2FA91654F2FD0] [SPRF][24/08/2013] (...) -- C:\Users\geoffrey\AppData\Local\Temp\Quarantine.exe [328019]
  [MD5.3C74C26999F2060BC6302448F173A342] [SPRF][28/08/2013] (.Babylon Ltd. - Uninstaller Application.) -- C:\Users\geoffrey\AppData\Local\Temp\uninst1.exe [340464] =>Toolbar.Babylon
  [MD5.ACE60E0F5AC7401EFC4A179A29FD3463] [SPRF][22/10/2013] (.Pas de propriétaire - Minecraft Launcher.) -- C:\Users\geoffrey\Desktop\Minecraft.exe [356352]
  ~ Files: 4 Legitimates Filtered in 00mn 00s
  
  ---\\ Recherche des packages WindowsInstaller (WIS) (O93) (NTFS)
  [MD5.6DDD32F0CFCD67822CE86664C6CC89F4] [WIS][17/08/2013] (.ReSoft Ltd. - Shopping Helper Smartbar.) -- C:\Windows\Installer\18c20c.msi [9158656] =>Hijacker.SmartBar
  ~ WIS: 69 Legitimates Filtered in 00mn 13s
  
  ---\\ Etat général des services not Microsoft (EGS) (SR=Running, SS=Stopped)
  SS - | Demand 09/10/2009 169312 | (AdobeActiveFileMonitor8.0) . (.Adobe Systems Incorporated.) - c:\Program Files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe
  SR - | Auto 11/05/2013 65640 | (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
  SS - | Demand 10/10/2013 257416 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
  SS - | Demand 10/07/1658 0 | (AIDA64Driver) . (...) - C:\Program Files (x86)\FinalWire\AIDA64 Extreme Edition\kerneld.x64
  SR - | Auto 21/12/2012 57008 | (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
  SR - | Auto 30/08/2013 46808 | (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
  SS - | Demand 03/08/2013 867080 | (FLEXnet Licensing Service) . (.Acresso Software Inc..) - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
  SS - | Demand 10/10/2009 238328 | (GameConsoleService) . (.WildTangent, Inc..) - C:\Program Files (x86)\Packard Bell Games\Packard Bell Game Console\GameConsoleService.exe
  SR - | Auto 28/08/2009 1150496 | (Greg_Service) . (.Acer Incorporated.) - C:\Program Files (x86)\Packard Bell\Registration\GregHSRW.exe
  SS - | Auto 08/08/2013 116648 | (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
  SS - | Demand 08/08/2013 116648 | (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
  SS - | Demand 08/08/2013 194032 | (gusvc) . (.Google.) - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
  SR - | Auto 01/10/2013 2746704 | (Hamachi2Svc) . (.LogMeIn Inc..) - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
  SR - | Auto 10/02/2009 116104 | (IJPLMSVC) . (...) - C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.exe
  SS - | Demand 31/05/2013 641352 | (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe
  SS - | Demand 18/06/2013 117144 | (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
  SS - | Demand 15/01/2010 935208 | (Nero BackItUp Scheduler 4.0) . (.Nero AG.) - C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
  SS - | Auto 05/09/2013 171680 | (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe
  SR - | Auto 29/01/2010 243232 | (Updater Service) . (.Acer Group.) - C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe
  SR - | Auto 14/07/2009 27136 | C:\Program Files (x86)\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
  SR - | Auto 10/07/1658 0 | (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe =>.Microsoft Corporation
  SR - | Auto 14/07/2009 27136 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
  ~ Services: Scanned in 00mn 16s
  
  ---\\ Recherche d'infection sur le Master Boot Record (MBR)(O80)
  Run by geoffrey at 22/10/2013 16:20:35
  ~ OS 64 not supported by MBR tool
  ~ MBR: 0 Legitimates Filtered in 00mn 00s
  
  ---\\ Recherche d'infection sur le Master Boot Record (MBRCheck)(O80)
  Written by ad13, http://ad13.geekstog
  Run by geoffrey at 22/10/2013 16:20:37
  
  ********* Dump file Name *********
  C:\PhysicalDisk0_MBR.bin
  ~ MBR: Scanned in 00mn 02s
  
  ---\\ Scan Additionnel (O88)
  Database Version : 12960 - (20/10/2013)
  Clés trouvées (Keys found) : 21
  Valeurs trouvées (Values found) : 3
  Dossiers trouvés (Folders found) : 2
  Fichiers trouvés (Files found) : 5
  
  [HKLM\Software\Google\Chrome\Extensions\lechbfhppigdgmodjlmcbiebfpogaeli] =>Adware.SaveShare^
  [HKLM\Software\Google\Chrome\Extensions\pbpohikckhbcljgombipcdoinkaedlfa] =>Spyware.SmartDisplay^
  [HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\24x7HELP] =>PUP.24x7Help^
  [HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\Boxore Client] =>Adware.Boxore^
  [HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\Browser Infrastructure Helper] =>Hijacker.SmartBar^
  [HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\Desk 365] =>Hijacker.22Find^
  [HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\Iminent] =>Adware.IMBooster^
  [HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\IminentMessenger] =>Adware.IMBooster^
  [HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\lollipop] =>Adware.Lollipop^
  [HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\NTRedirect] =>Hijacker.BabSolution^
  [HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\offerbox] =>PUP.OfferBox^
  [HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\PCFixSpeed] =>PUP.PCFixSpeed^
  [HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\SearchProtect] =>Toolbar.Conduit^
  [HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\SearchProtectAll] =>Toolbar.Conduit^
  [HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\tuto4pc_fr_62] =>PUP.Eorezo^
  [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375] =>PUP.Tarma
  [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5] =>PUP.Tarma
  [HKLM\Software\Classes\CLSID\{11111111-1111-1111-1111-110311341126}] =>PUP.CrossRider
  [HKLM\Software\Classes\CLSID\{22222222-2222-2222-2222-220322342226}] =>PUP.CrossRider
  [HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311341126}] =>PUP.CrossRider
  [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CA0054A5AB3EFFE4CB5660E44A1E7DCC] =>Adware.Boxore^
  [HKLM\Software\Microsoft\Internet Explorer\Toolbar]:{2318C2B1-4965-11d4-9B18-009027A5CD4F} =>Toolbar.Google^
  [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:SearchProtection =>Toolbar.Conduit^
  [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:tuto4pc_fr_62 =>PUP.Eorezo^
  C:\Users\geoffrey\AppData\Roaming\Mozilla\Firefox\Profiles\utk92q2b.default\7125a285-7e68-47aa-9d72-e81874f4d47e@d3fcdb92-135d-4a8a-8cf6-11e3b57c5fda.com =>Adware.PlusHD^
  C:\Users\geoffrey\AppData\Roaming\Mozilla\Firefox\Profiles\utk92q2b.default\jid1-FCM5fDwCW5M3AQ@jetpack =>Spyware.SmartDisplay^
  C:\Users\geoffrey\AppData\Local\Google\Chrome\User Data\Default\Extensions\lechbfhppigdgmodjlmcbiebfpogaeli =>Adware.SaveShare^
  C:\Users\geoffrey\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbpohikckhbcljgombipcdoinkaedlfa =>Spyware.SmartDisplay^
  C:\Users\geoffrey\AppData\Local\Temp\uninst1.exe =>Toolbar.Babylon^
  C:\Windows\Installer\18c20c.msi =>Hijacker.SmartBar^
  ~ Additionnel Scan: 317838 Items scanned in 00mn 50s
  
  ---\\ Récapitulatif des détections trouvées sur votre station
  ~ http://nicolascoolman.webs.com/apps/blog/show/31929570-adware-saveshare =>Adware.SaveShare
  ~ http://nicolascoolman.webs.com/apps/blog/show/32662245-spyware-smartdisplay =>Spyware.SmartDisplay
  ~ http://nicolascoolman.webs.com/apps/blog/show/28138048-adware-plushd =>Adware.PlusHD
  ~ http://nicolascoolman.webs.com/apps/blog/show/32384220-toolbar-google =>Toolbar.Google
  ~ http://nicolascoolman.webs.com/apps/blog/show/26631242-hijacker-qvo6 =>Hijacker.Qvo6
  ~ http://nicolascoolman.webs.com/apps/blog/show/26630379-hijacker-22find =>Hijacker.22Find
  ~ http://nicolascoolman.webs.com/apps/blog/show/29507721-toolbar-conduit =>Toolbar.Conduit
  ~ http://nicolascoolman.webs.com/apps/blog/show/27469224-pup-eorezo =>PUP.EoRezo
  ~ http://nicolascoolman.webs.com/apps/blog/show/33002268-pup-24x7help =>PUP.24x7Help
  ~ http://nicolascoolman.webs.com/apps/blog/show/26626977-adware-boxore =>Adware.Boxore
  ~ http://nicolascoolman.webs.com/apps/blog/show/26990375-hijacker-smartbar =>Hijacker.SmartBar
  ~ http://nicolascoolman.webs.com/apps/blog/show/26684723-adware-imbooster =>Adware.IMBooster
  ~ http://nicolascoolman.webs.com/apps/blog/show/26630902-adware-lollipop =>Adware.Lollipop
  ~ http://nicolascoolman.webs.com/apps/blog/show/26678994-hijacker-babsolution =>Hijacker.BabSolution
  ~ http://nicolascoolman.webs.com/apps/blog/show/28606910-pup-offerbox =>PUP.OfferBox
  ~ http://nicolascoolman.webs.com/apps/blog/show/33519836-pup-pcfixspeed =>PUP.PCFixSpeed
  ~ http://nicolascoolman.webs.com/apps/blog/show/26627369-toolbar-babylon =>Toolbar.Babylon
  ~ http://nicolascoolman.webs.com/apps/blog/show/29637859-toolbar-tarma =>PUP.Tarma
  ~ http://nicolascoolman.webs.com/apps/blog/show/27583526-pup-crossrider =>PUP.CrossRider
  ~ MSI: 19 link(s) detected in 00mn 50s
  
  ~ 1436 Legitimates filtered by white list
  End of the scan (505 lines in 08mn 28s)(0)
  
  0
Réponse 11 / 24
lilidurhone Contributeur sécurité
On va faire un scan généralisé pour voir si d'autres infections ne se cachent pas

Attention le scan peut durer assez longtemps environ 2h voire plus suivant la capacité des disques durs

* Télécharge MalwareBytes' anti-malware sur le bureau
https://www.commentcamarche.net/telecharger/securite/14361-malwarebytes-anti-malware/

* Cliques droit sur l'icône Download_mbam-setup.exe afin de l'exécuter en tant qu'admin pour lancer le processus d'installation

* Si le pare-feu demande l'autorisation de se connecter pour malwareBytes, accepte

* Décoche pour la version d'essai pour malwarebytes pro

* Il va se mettre à jour une fois faite

* Va dans l'onglet recherche

* Sélectionne exécuter un examen complet

* Clique sur rechercher

* Le scan démarre

* A la fin de l'analyse, le message s'affiche: L'examen s'est terminé normalement.

* Clique sur afficher les résultats pour afficher les objets trouvés

* Clique sur OK pour poursuivre

* Si des malwares ont été détectés, cliquer sur afficher les résultats

* Sélectionne tout (ou laisser coché)

* Clique sur tout supprimer

* MalwareBytes va détruire les fichiers et les clés de registre et en mettre une
copie dans la quarantaine

* Malwarebytes va ouvrir le bloc-note et y copier le rapport

* Redémarre le PC

* Une fois redémarré, double-clique sur MalwareBytes

* Va dans l'onglet rapport/log

* Clique dessus pour l'afficher une fois affiché, cliquer sur édition
en haut du bloc-note puis sur sélectionner tout

* Reviens sur édition, puis sur copier et reviens
sur le forum dans ta réponse

* Clic droit dans le cadre de la réponse et coller

Bonne chance
0
1. Geoffrey3613 Auteur
  
  Malwarebytes Anti-Malware 1.75.0.1300
  www.malwarebytes.org
  
  Version de la base de données: v2013.10.25.02
  
  Windows 7 Service Pack 1 x64 NTFS
  Internet Explorer 10.0.9200.16721
  geoffrey :: WENZ-PC [administrateur]
  
  25/10/2013 10:24:53
  mbam-log-2013-10-25 (10-24-53).txt
  
  Type d'examen: Examen complet (C:\|D:\|)
  Options d'examen activées: Mémoire | Démarrage | Registre | Système de fichiers | Heuristique/Extra | Heuristique/Shuriken | PUP | PUM
  Options d'examen désactivées: P2P
  Elément(s) analysé(s): 461976
  Temps écoulé: 59 minute(s), 31 seconde(s)
  
  Processus mémoire détecté(s): 0
  (Aucun élément nuisible détecté)
  
  Module(s) mémoire détecté(s): 0
  (Aucun élément nuisible détecté)
  
  Clé(s) du Registre détectée(s): 12
  HKCR\AppID\{CA5CAA63-B27C-4963-9BEC-CB16A36D56F8} (PUP.Optional.MySearchDial.A) -> Mis en quarantaine et supprimé avec succès.
  HKCR\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3} (PUP.Optional.BrowseFox.A) -> Mis en quarantaine et supprimé avec succès.
  HKCR\CLSID\{204df522-9a96-4a72-abb0-60f7a216d6d2} (Adware.Whilokii) -> Mis en quarantaine et supprimé avec succès.
  HKCR\TypeLib\{8B0295E2-967E-439E-9560-807D9F625B57} (Adware.Whilokii) -> Mis en quarantaine et supprimé avec succès.
  HKCR\Interface\{AB4DA692-F26B-403C-AF8F-FD87D121F8F1} (Adware.Whilokii) -> Mis en quarantaine et supprimé avec succès.
  HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{204DF522-9A96-4A72-ABB0-60F7A216D6D2} (Adware.Whilokii) -> Mis en quarantaine et supprimé avec succès.
  HKCR\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23} (PUP.Optional.BrowseFox.A) -> Mis en quarantaine et supprimé avec succès.
  HKCR\CLSID\{806785D0-375F-4C2C-92E3-B8EE65D28E83} (PUP.Optional.BonanzaDeals.A) -> Mis en quarantaine et supprimé avec succès.
  HKCR\CLSID\{D40753C7-8A59-4C1F-BE88-C300F4624D5B} (PUP.Optional.MySearchDial.A) -> Mis en quarantaine et supprimé avec succès.
  HKCR\TypeLib\{C292AD0A-C11F-479B-B8DB-743E72D283B0} (PUP.Optional.MySearchDial.A) -> Mis en quarantaine et supprimé avec succès.
  HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\BONANZADEALSLIVE.EXE (PUP.Optional.BonanzaDeals.A) -> Mis en quarantaine et supprimé avec succès.
  HKLM\SOFTWARE\BonanzaDealsLive (PUP.Optional.BonanzaDeals.A) -> Mis en quarantaine et supprimé avec succès.
  
  Valeur(s) du Registre détectée(s): 0
  (Aucun élément nuisible détecté)
  
  Elément(s) de données du Registre détecté(s): 0
  (Aucun élément nuisible détecté)
  
  Dossier(s) détecté(s): 7
  C:\ProgramData\BonanzaDealsLive (PUP.Optional.BonanzaDeals.A) -> Mis en quarantaine et supprimé avec succès.
  C:\ProgramData\BonanzaDealsLive\Update (PUP.Optional.BonanzaDeals.A) -> Mis en quarantaine et supprimé avec succès.
  C:\ProgramData\BonanzaDealsLive\Update\Log (PUP.Optional.BonanzaDeals.A) -> Mis en quarantaine et supprimé avec succès.
  C:\Users\WENZ\AppData\Local\BonanzaDealsLive (PUP.Optional.BonanzaDeals.A) -> Mis en quarantaine et supprimé avec succès.
  C:\Users\WENZ\AppData\Local\BonanzaDealsLive\CrashReports (PUP.Optional.BonanzaDeals.A) -> Mis en quarantaine et supprimé avec succès.
  C:\Program Files (x86)\BonanzaDealsLive (PUP.Optional.BonanzaDeals.A) -> Mis en quarantaine et supprimé avec succès.
  C:\Program Files (x86)\BonanzaDealsLive\CrashReports (PUP.Optional.BonanzaDeals.A) -> Mis en quarantaine et supprimé avec succès.
  
  Fichier(s) détecté(s): 122
  C:\Program Files (x86)\Whilokii\WhilokiiBHO.dll (Adware.Whilokii) -> Mis en quarantaine et supprimé avec succès.
  C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\DealPlyLive.exe.vir (PUP.Optional.DealPly.A) -> Mis en quarantaine et supprimé avec succès.
  C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\DealPlyLive.exe.vir (PUP.Optional.DealPly.A) -> Mis en quarantaine et supprimé avec succès.
  C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\DealPlyLiveBroker.exe.vir (PUP.Optional.DealPly.A) -> Mis en quarantaine et supprimé avec succès.
  C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\DealPlyLiveHandler.exe.vir (PUP.Optional.DealPly.A) -> Mis en quarantaine et supprimé avec succès.
  C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\DealPlyLiveOnDemand.exe.vir (PUP.Optional.DealPly.A) -> Mis en quarantaine et supprimé avec succès.
  C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdate.dll.vir (PUP.Optional.DealPly.A) -> Mis en quarantaine et supprimé avec succès.
  C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_am.dll.vir (PUP.Optional.DealPly.A) -> Mis en quarantaine et supprimé avec succès.
  C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_ar.dll.vir (PUP.Optional.DealPly.A) -> Mis en quarantaine et supprimé avec succès.
  C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_bg.dll.vir (PUP.Optional.DealPly.A) -> Mis en quarantaine et supprimé avec succès.
  C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_bn.dll.vir (PUP.Optional.DealPly.A) -> Mis en quarantaine et supprimé avec succès.
  C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_ca.dll.vir (PUP.Optional.DealPly.A) -> Mis en quarantaine et supprimé avec succès.
  C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_cs.dll.vir (PUP.Optional.DealPly.A) -> Mis en quarantaine et supprimé avec succès.
  C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_da.dll.vir (PUP.Optional.DealPly.A) -> Mis en quarantaine et supprimé avec succès.
  C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_de.dll.vir (PUP.Optional.DealPly.A) -> Mis en quarantaine et supprimé avec succès.
  C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_el.dll.vir (PUP.Optional.DealPly.A) -> Mis en quarantaine et supprimé avec succès.
  C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_en-GB.dll.vir (PUP.Optional.DealPly.A) -> Mis en quarantaine et supprimé avec succès.
  C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_en.dll.vir (PUP.Optional.DealPly.A) -> Mis en quarantaine et supprimé avec succès.
  C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_es-419.dll.vir (PUP.Optional.DealPly.A) -> Mis en quarantaine et supprimé avec succès.
  C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_es.dll.vir (PUP.Optional.DealPly.A) -> Mis en quarantaine et supprimé avec succès.
  C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_et.dll.vir (PUP.Optional.DealPly.A) -> Mis en quarantaine et supprimé avec succès.
  C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_fa.dll.vir (PUP.Optional.DealPly.A) -> Mis en quarantaine et supprimé avec succès.
  C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_fi.dll.vir (PUP.Optional.DealPly.A) -> Mis en quarantaine et supprimé avec succès.
  C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_fil.dll.vir (PUP.Optional.DealPly.A) -> Mis en quarantaine et supprimé avec succès.
  C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_fr.dll.vir (PUP.Optional.DealPly.A) -> Mis en quarantaine et supprimé avec succès.
  C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_gu.dll.vir (PUP.Optional.DealPly.A) -> Mis en quarantaine et supprimé avec succès.
  C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_hi.dll.vir (PUP.Optional.DealPly.A) -> Mis en quarantaine et supprimé avec succès.
  C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_hr.dll.vir (PUP.Optional.DealPly.A) -> Mis en quarantaine et supprimé avec succès.
  C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_hu.dll.vir (PUP.Optional.DealPly.A) -> Mis en quarantaine et supprimé avec succès.
  C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_id.dll.vir (PUP.Optional.DealPly.A) -> Mis en quarantaine et supprimé avec succès.
  C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_is.dll.vir (PUP.Optional.DealPly.A) -> Mis en quarantaine et supprimé avec succès.
  C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_it.dll.vir (PUP.Optional.DealPly.A) -> Mis en quarantaine et supprimé avec succès.
  C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_iw.dll.vir (PUP.Optional.DealPly.A) -> Mis en quarantaine et supprimé avec succès.
  C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_ja.dll.vir (PUP.Optional.DealPly.A) -> Mis en quarantaine et supprimé avec succès.
  C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_kn.dll.vir (PUP.Optional.DealPly.A) -> Mis en quarantaine et supprimé avec succès.
  C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_ko.dll.vir (PUP.Optional.DealPly.A) -> Mis en quarantaine et supprimé avec succès.
  C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_lt.dll.vir (PUP.Optional.DealPly.A) -> Mis en quarantaine et supprimé avec succès.
  C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_lv.dll.vir (PUP.Optional.DealPly.A) -> Mis en quarantaine et supprimé avec succès.
  C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_ml.dll.vir (PUP.Optional.DealPly.A) -> Mis en quarantaine et supprimé avec succès.
  C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_mr.dll.vir (PUP.Optional.DealPly.A) -> Mis en quarantaine et supprimé avec succès.
  C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_ms.dll.vir (PUP.Optional.DealPly.A) -> Mis en quarantaine et supprimé avec succès.
  C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_nl.dll.vir (PUP.Optional.DealPly.A) -> Mis en quarantaine et supprimé avec succès.
  C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_no.dll.vir (PUP.Optional.DealPly.A) -> Mis en quarantaine et supprimé avec succès.
  C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_pl.dll.vir (PUP.Optional.DealPly.A) -> Mis en quarantaine et supprimé avec succès.
  C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_pt-BR.dll.vir (PUP.Optional.DealPly.A) -> Mis en quarantaine et supprimé avec succès.
  C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_pt-PT.dll.vir (PUP.Optional.DealPly.A) -> Mis en quarantaine et supprimé avec succès.
  C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_ro.dll.vir (PUP.Optional.DealPly.A) -> Mis en quarantaine et supprimé avec succès.
  C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_ru.dll.vir (PUP.Optional.DealPly.A) -> Mis en quarantaine et supprimé avec succès.
  C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_sk.dll.vir (PUP.Optional.DealPly.A) -> Mis en quarantaine et supprimé avec succès.
  C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_sl.dll.vir (PUP.Optional.DealPly.A) -> Mis en quarantaine et supprimé avec succès.
  C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_sr.dll.vir (PUP.Optional.DealPly.A) -> Mis en quarantaine et supprimé avec succès.
  C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_sv.dll.vir (PUP.Optional.DealPly.A) -> Mis en quarantaine et supprimé avec succès.
  C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_sw.dll.vir (PUP.Optional.DealPly.A) -> Mis en quarantaine et supprimé avec succès.
  C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_ta.dll.vir (PUP.Optional.DealPly.A) -> Mis en quarantaine et supprimé avec succès.
  C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_te.dll.vir (PUP.Optional.DealPly.A) -> Mis en quarantaine et supprimé avec succès.
  C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_th.dll.vir (PUP.Optional.DealPly.A) -> Mis en quarantaine et supprimé avec succès.
  C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_tr.dll.vir (PUP.Optional.DealPly.A) -> Mis en quarantaine et supprimé avec succès.
  C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_uk.dll.vir (PUP.Optional.DealPly.A) -> Mis en quarantaine et supprimé avec succès.
  C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_ur.dll.vir (PUP.Optional.DealPly.A) -> Mis en quarantaine et supprimé avec succès.
  C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_vi.dll.vir (PUP.Optional.DealPly.A) -> Mis en quarantaine et supprimé avec succès.
  C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_zh-CN.dll.vir (PUP.Optional.DealPly.A) -> Mis en quarantaine et supprimé avec succès.
  C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_zh-TW.dll.vir (PUP.Optional.DealPly.A) -> Mis en quarantaine et supprimé avec succès.
  C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\npGoogleUpdate3.dll.vir (PUP.Optional.DealPly.A) -> Mis en quarantaine et supprimé avec succès.
  C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\psmachine.dll.vir (PUP.Optional.DealPly.A) -> Mis en quarantaine et supprimé avec succès.
  C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\psuser.dll.vir (PUP.Optional.DealPly.A) -> Mis en quarantaine et supprimé avec succès.
  C:\AdwCleaner\Quarantine\C\ProgramData\DSearchLink\DSearchLink.exe.vir (PUP.Optional.Delta.A) -> Mis en quarantaine et supprimé avec succès.
  C:\AdwCleaner\Quarantine\C\Users\WENZ\AppData\Local\Temp\eIntaller\EFF4038CCACA409cA00FCA5B0007BE8A\eGdpSvc.exe.vir (PUP.Optional.Wsys.A) -> Mis en quarantaine et supprimé avec succès.
  C:\AdwCleaner\Quarantine\C\Users\WENZ\AppData\Local\Temp\eIntaller\EFF4038CCACA409cA00FCA5B0007BE8A\eXQ.exe.vir (PUP.Optional.Wilsys.A) -> Mis en quarantaine et supprimé avec succès.
  C:\AdwCleaner\Quarantine\C\Users\WENZ\AppData\Roaming\OpenCandy\925119B70CD74AEBBE8DBF8F7C3062D8\Ignite_DLMgr_249.exe.vir (PUP.Optional.OpenCandy.A) -> Mis en quarantaine et supprimé avec succès.
  C:\AdwCleaner\Quarantine\C\Users\WENZ\AppData\Roaming\OpenCandy\B7CD3F41E2BA4BF1B4FA53E24FF15F0D\Ignite_DLMgr_249.exe.vir (PUP.Optional.OpenCandy.A) -> Mis en quarantaine et supprimé avec succès.
  C:\Program Files (x86)\FLVPlayer\Uninstall\Uninstall.exe (PUP.Optional.InstallCore.A) -> Mis en quarantaine et supprimé avec succès.
  C:\Users\geoffrey\Downloads\setup Fraps 3.4.7.1308.exe.exe (PUP.Optional.Installex) -> Mis en quarantaine et supprimé avec succès.
  C:\Users\hugo\AppData\Local\Temp\cltmng.exe (PUP.Optional.Conduit.A) -> Mis en quarantaine et supprimé avec succès.
  C:\Users\nathalie\AppData\Local\Temp\cltmng.exe (PUP.Optional.Conduit.A) -> Mis en quarantaine et supprimé avec succès.
  C:\Users\WENZ\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2XY5HFBO\IminentMinibarIE[1].exe (PUP.Optional.Iminent.A) -> Mis en quarantaine et supprimé avec succès.
  C:\Users\WENZ\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2XY5HFBO\stublogic[1].exe (PUP.Optional.Conduit.A) -> Mis en quarantaine et supprimé avec succès.
  C:\Users\WENZ\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IVUIDYNX\iminent[1].msi (PUP.Optional.Iminent) -> Mis en quarantaine et supprimé avec succès.
  C:\Users\WENZ\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IVUIDYNX\statisticsstub[1].exe (PUP.Optional.Conduit.A) -> Mis en quarantaine et supprimé avec succès.
  C:\Users\WENZ\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\R8EAE892\MinibarFirefox[1].exe (PUP.Optional.Iminent.A) -> Mis en quarantaine et supprimé avec succès.
  C:\Users\WENZ\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\R8EAE892\wajam_install[1].exe (PUP.Optional.Wajam.A) -> Mis en quarantaine et supprimé avec succès.
  C:\Users\WENZ\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YTAQ3U4Q\checktbexist[1].exe (PUP.Optional.Conduit.A) -> Mis en quarantaine et supprimé avec succès.
  C:\Users\WENZ\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YTAQ3U4Q\component_libcef_1.1364.1123[1].exe (PUP.Optional.Desk365.A) -> Mis en quarantaine et supprimé avec succès.
  C:\Users\WENZ\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YTAQ3U4Q\MinibarChrome[1].exe (PUP.Optional.Iminent.A) -> Mis en quarantaine et supprimé avec succès.
  C:\Users\WENZ\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YTAQ3U4Q\SPSetup[1].exe (PUP.Optional.Conduit.A) -> Mis en quarantaine et supprimé avec succès.
  C:\Users\WENZ\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\8IYHA9F8\01net_Winamp_Full[1].exe (PUP.Optional.Conduit.A) -> Mis en quarantaine et supprimé avec succès.
  C:\Users\WENZ\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I09SU1X5\iTunes[1].exe (PUP.Optional.Solimba) -> Mis en quarantaine et supprimé avec succès.
  C:\Users\WENZ\AppData\Local\Temp\ICReinstall_FlvPlayerSetup (5).exe (PUP.Optional.BundleInstaller.A) -> Mis en quarantaine et supprimé avec succès.
  C:\Users\WENZ\AppData\Local\Temp\ICReinstall_FlvPlayerSetup (6).exe (PUP.Optional.BundleInstaller.A) -> Mis en quarantaine et supprimé avec succès.
  C:\Users\WENZ\AppData\Local\Temp\55832F6F-BAB0-7891-9464-2B06D78DE833\Latest\BExternal.dll (PUP.Optional.Babylon.A) -> Mis en quarantaine et supprimé avec succès.
  C:\Users\WENZ\AppData\Local\Temp\GUM1C75.tmp\BonanzaDealsLive.exe (PUP.Optional.BonanzaDeals.A) -> Mis en quarantaine et supprimé avec succès.
  C:\Users\WENZ\AppData\Local\Temp\GUM1C75.tmp\BonanzaDealsLiveBroker.exe (PUP.Optional.BonanzaDeals.A) -> Mis en quarantaine et supprimé avec succès.
  C:\Users\WENZ\AppData\Local\Temp\GUM1C75.tmp\BonanzaDealsLiveHandler.exe (PUP.Optional.BonanzaDeals.A) -> Mis en quarantaine et supprimé avec succès.
  C:\Users\WENZ\AppData\Local\Temp\GUM1C75.tmp\BonanzaDealsLiveOnDemand.exe (PUP.Optional.BonanzaDeals.A) -> Mis en quarantaine et supprimé avec succès.
  C:\Users\WENZ\AppData\Local\Temp\GUM1C75.tmp\goopdate.dll (PUP.Optional.BonanzaDeals.A) -> Mis en quarantaine et supprimé avec succès.
  C:\Users\WENZ\AppData\Local\Temp\GUM1C75.tmp\npGoogleUpdate3.dll (PUP.Optional.BonanzaDeals.A) -> Mis en quarantaine et supprimé avec succès.
  C:\Users\WENZ\AppData\Local\Temp\GUM1C75.tmp\psmachine.dll (PUP.Optional.BonanzaDeals.A) -> Mis en quarantaine et supprimé avec succès.
  C:\Users\WENZ\AppData\Local\Temp\GUM1C75.tmp\psuser.dll (PUP.Optional.BonanzaDeals.A) -> Mis en quarantaine et supprimé avec succès.
  C:\Users\WENZ\AppData\Local\Temp\{7FC0565F-5744-4260-AA30-727F96001D92}\files\BonanzaDealsIE.dll (PUP.Optional.BonanzaDeals.A) -> Mis en quarantaine et supprimé avec succès.
  C:\Users\WENZ\Downloads\01net_Revo_Uninstaller.exe (PUP.Optional.Conduit.A) -> Mis en quarantaine et supprimé avec succès.
  C:\Users\WENZ\Downloads\01net_Winamp_Full.exe (PUP.Optional.Conduit.A) -> Mis en quarantaine et supprimé avec succès.
  C:\Users\WENZ\Downloads\Auslogics Disk Defrag.exe (PUP.Optional.Firseria) -> Mis en quarantaine et supprimé avec succès.
  C:\Users\WENZ\Downloads\Flash_Player_Pro_Setup.exe (PUP.Optional.IBryte.A) -> Mis en quarantaine et supprimé avec succès.
  C:\Users\WENZ\Downloads\FLVPlayerSetup (1).exe (PUP.Optional.InstallCore) -> Mis en quarantaine et supprimé avec succès.
  C:\Users\WENZ\Downloads\FLVPlayerSetup (2).exe (PUP.Optional.InstallCore) -> Mis en quarantaine et supprimé avec succès.
  C:\Users\WENZ\Downloads\FlvPlayerSetup (3).exe (PUP.Optional.BundleInstaller.A) -> Mis en quarantaine et supprimé avec succès.
  C:\Users\WENZ\Downloads\FlvPlayerSetup (4).exe (PUP.Optional.BundleInstaller.A) -> Mis en quarantaine et supprimé avec succès.
  C:\Users\WENZ\Downloads\FlvPlayerSetup (5).exe (PUP.Optional.BundleInstaller.A) -> Mis en quarantaine et supprimé avec succès.
  C:\Users\WENZ\Downloads\FlvPlayerSetup (6).exe (PUP.Optional.BundleInstaller.A) -> Mis en quarantaine et supprimé avec succès.
  C:\Users\WENZ\Downloads\FlvPlayerSetup (7).exe (PUP.Optional.BundleInstaller.A) -> Mis en quarantaine et supprimé avec succès.
  C:\Users\WENZ\Downloads\FlvPlayerSetup (8).exe (PUP.Optional.BundleInstaller.A) -> Mis en quarantaine et supprimé avec succès.
  C:\Users\WENZ\Downloads\FlvPlayerSetup.exe (PUP.Optional.BundleInstaller.A) -> Mis en quarantaine et supprimé avec succès.
  C:\Users\WENZ\Downloads\iTunes.exe (PUP.Optional.Solimba) -> Mis en quarantaine et supprimé avec succès.
  C:\Users\WENZ\Downloads\Setup (1).exe (PUP.Optional.Domalq) -> Mis en quarantaine et supprimé avec succès.
  C:\Users\WENZ\Downloads\Setup (2).exe (PUP.Optional.DomaIQ) -> Mis en quarantaine et supprimé avec succès.
  C:\Users\WENZ\Downloads\setup.exe (PUP.Optional.AirInstaller) -> Mis en quarantaine et supprimé avec succès.
  C:\Users\WENZ\Downloads\SoftonicDownloader_pour_google-sketchup.exe (PUP.Optional.Softonic) -> Mis en quarantaine et supprimé avec succès.
  C:\Users\WENZ\Downloads\uTorrent-3.3.exe (PUP.Optional.InstallCore) -> Mis en quarantaine et supprimé avec succès.
  C:\Users\WENZ\Downloads\winamp563_full_emusic-7plus_fr-fr.exe (PUP.Optional.OpenCandy) -> Mis en quarantaine et supprimé avec succès.
  C:\Windows\Temp\Optimizer_Pro.exe (PUP.Optional.OptimizerPro.A) -> Mis en quarantaine et supprimé avec succès.
  C:\Users\WENZ\SendTo\Desk 365.lnk (PUP.Optional.Desk365.A) -> Mis en quarantaine et supprimé avec succès.
  C:\Users\WENZ\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_pflphaooapbgpeakohlggbpidpppgdff_0.localstorage (PUP.Optional.FunMoods.A) -> Mis en quarantaine et supprimé avec succès.
  C:\ProgramData\BonanzaDealsLive\Update\Log\BonanzaDealsLive.log (PUP.Optional.BonanzaDeals.A) -> Mis en quarantaine et supprimé avec succès.
  
  (fin)
  
  0
2. Geoffrey3613 Auteur
  
  J'ai l'impression que mon PC et déja un peux plus rapide !
  
  0
Réponse 12 / 24
lilidurhone Contributeur sécurité
Refais un zhpdiag
0
Réponse 13 / 24
lilidurhone Contributeur sécurité
Désinstalles ta version d'adwcleaner puis retélécharges le
0
1. Geoffrey3613 Auteur
  
  Ses bon je fait ''scanner"' ?
  
  0
Réponse 14 / 24
lilidurhone Contributeur sécurité
Oui
0
1. Geoffrey3613 Auteur
  
  # AdwCleaner v3.010 - Rapport créé le 26/10/2013 à 18:55:13
  # Mis à jour le 20/10/2013 par Xplode
  # Système d'exploitation : Windows 7 Home Premium Service Pack 1 (64 bits)
  # Nom d'utilisateur : geoffrey - WENZ-PC
  # Exécuté depuis : C:\Users\geoffrey\Downloads\adwcleaner.exe
  # Option : Nettoyer
  
  ***** [ Services ] *****
  
  [#] Service Supprimé : update whilokii
  
  ***** [ Fichiers / Dossiers ] *****
  
  Dossier Supprimé : C:\ProgramData\Babylon
  Dossier Supprimé : C:\ProgramData\BonanzaDealsLive
  Dossier Supprimé : C:\Program Files (x86)\BonanzaDealsLive
  Dossier Supprimé : C:\Program Files (x86)\MetaCrawler
  Dossier Supprimé : C:\Program Files (x86)\MyPC Backup
  Dossier Supprimé : C:\Program Files (x86)\Whilokii
  Dossier Supprimé : C:\Users\WENZ\AppData\Local\BonanzaDealsLive
  Dossier Supprimé : C:\Users\WENZ\AppData\Roaming\MetaCrawler
  Dossier Supprimé : C:\Users\WENZ\AppData\Roaming\Systweak
  Fichier Supprimé : C:\Windows\System32\roboot64.exe
  
  ***** [ Raccourcis ] *****
  
  ***** [ Registre ] *****
  
  Clé Supprimée : HKLM\SOFTWARE\Classes\Prod.cap
  Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\BonanzaDealsLive.exe
  Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
  Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{806785D0-375F-4C2C-92E3-B8EE65D28E83}
  Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
  Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{AB4DA692-F26B-403C-AF8F-FD87D121F8F1}
  Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
  Clé Supprimée : HKLM\Software\BonanzaDealsLive
  Clé Supprimée : HKLM\Software\systweak
  Clé Supprimée : HKLM\Software\Whilokii
  
  ***** [ Navigateurs ] *****
  
  -\\ Internet Explorer v10.0.9200.16720
  
  Paramètre Restauré : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
  Paramètre Restauré : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
  
  -\\ Mozilla Firefox v22.0 (fr)
  
  [ Fichier : C:\Users\WENZ\AppData\Roaming\Mozilla\Firefox\Profiles\qjpqjhk3.default\prefs.js ]
  
  [ Fichier : C:\Users\nathalie\AppData\Roaming\Mozilla\Firefox\Profiles\pjhi1iqd.default\prefs.js ]
  
  [ Fichier : C:\Users\geoffrey\AppData\Roaming\Mozilla\Firefox\Profiles\utk92q2b.default\prefs.js ]
  
  -\\ Google Chrome v30.0.1599.101
  
  [ Fichier : C:\Users\WENZ\AppData\Local\Google\Chrome\User Data\Default\preferences ]
  
  [ Fichier : C:\Users\geoffrey\AppData\Local\Google\Chrome\User Data\Default\preferences ]
  
  [ Fichier : C:\Users\hugo\AppData\Local\Google\Chrome\User Data\Default\preferences ]
  
  *************************
  
  AdwCleaner[R0].txt - [34169 octets] - [21/10/2013 10:43:21]
  AdwCleaner[R1].txt - [3768 octets] - [22/10/2013 12:26:41]
  AdwCleaner[R2].txt - [1577 octets] - [22/10/2013 12:34:50]
  AdwCleaner[R3].txt - [3411 octets] - [26/10/2013 18:52:38]
  AdwCleaner[S0].txt - [32901 octets] - [21/10/2013 10:46:07]
  AdwCleaner[S1].txt - [3768 octets] - [22/10/2013 12:29:07]
  AdwCleaner[S2].txt - [1638 octets] - [22/10/2013 12:37:04]
  AdwCleaner[S3].txt - [3131 octets] - [26/10/2013 18:55:13]
  
  ########## EOF - C:\AdwCleaner\AdwCleaner[S3].txt - [3191 octets] ##########
  
  0
Réponse 15 / 24
lilidurhone Contributeur sécurité
Bien

Refais un zhpdiag
0
1. Geoffrey3613 Auteur
  
  ~ Rapport de ZHPDiag v2013.10.25.66 - Nicolas Coolman (25/10/2013)
  ~ Lancé par geoffrey (27/10/2013 13:41:33)
  ~ Adresse du Site Web https://nicolascoolman.webs.com/
  ~ Forums gratuits d'Assistance à la désinfection : https://nicolascoolman.webs.com/
  ~ Traduit par Nicolas Coolman
  ~ Etat de la version :
  ~ Liste blanche : Activée par le programme
  ~ Elévation des Privilèges : OK
  ~ User Account Control (UAC):
  
  ---\\ Navigateurs Internet
  MSIE: Internet Explorer v10.0.9200.16721
  MFIE: Mozilla Firefox 22.0
  GCIE: Google Chrome v30.0.1599.101 (Defaut)
  
  ---\\ Informations sur les produits Windows
  ~ Langage: Français
  Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)
  Windows Server License Manager Script : OK
  ~ Windows(R) 7, OEM_SLP channel
  System Locked Preinstallation (OEM_SLP) : OK
  Windows ID Activation : OK
  ~ Windows Partial Key : 7QJB7
  Windows License : OK
  ~ Windows Remaining Initializations Number : 3
  Software Protection Service (Protection logicielle) : OK
  Windows Automatic Updates : OK
  Windows Activation Technologies : OK
  
  ---\\ Logiciels de protection du système
  avast! Free Antivirus v8.0.1497.0
  Windows Defender W7
  
  ---\\ Logiciels d'optimisation du système
  
  ---\\ Logiciels de partage PeerToPeer
  
  ---\\ Surveillance de Logiciels
  Adobe Flash Player 11 Plugin
  Adobe Reader XI
  Java 7 Update 25
  
  ---\\ Informations sur le système
  ~ Processor: Intel64 Family 6 Model 22 Stepping 1, GenuineIntel
  ~ Operating System: 64 Bits
  Boot mode: Normal (Normal boot)
  Total RAM: 3037 MB (57% free)
  System Restore: Activé (Enable)
  System drive C: has 23 GB (16%) free of 140 GB
  
  ---\\ Mode de connexion au système
  ~ Computer Name: WENZ-PC
  ~ User Name: geoffrey
  ~ All Users Names: WENZ, nathalie, hugo, HomeGroupUser$, geoffrey, Administrateur,
  ~ Unselected Option: O1,O39,O40,O41,O42,O43,O44,O45,O46,O47,O48,O49,O50,O51,O52,O53,O54,O55,O56,O57,O58,O59,O60,O61,O62,O63,O64,O65,O66,O67,O68,O69,O80,O81,O82,O83,O84,O85,O86,O87,O88,O89, O2,O90,O91,O92,NTFS,O36,O4G, O4
  Logged in as Administrator
  
  ---\\ Variables d'environnement
  ~ System Unit : C:\
  ~ %AppZHP% : C:\Users\geoffrey\AppData\Roaming\ZHP\
  ~ %AppData% : C:\Users\geoffrey\AppData\Roaming\
  ~ %Desktop% : C:\Users\geoffrey\Desktop\
  ~ %Favorites% : C:\Users\geoffrey\Favorites\
  ~ %LocalAppData% : C:\Users\geoffrey\AppData\Local\
  ~ %StartMenu% : C:\Users\geoffrey\AppData\Roaming\Microsoft\Windows\Start Menu\
  ~ %Windir% : C:\Windows\
  ~ %System% : C:\Windows\System32\
  
  ---\\ Enumération des unités disques
  C: Hard drive, Flash drive, Thumb drive (Free 23 Go of 140 Go)
  D: Hard drive, Flash drive, Thumb drive (Free 126 Go of 141 Go)
  E: CD-ROM drive (Not Inserted)
  F: Floppy drive, Flash card reader, USB Key (Free 5 Go of 14 Go)
  H: Floppy drive, Flash card reader, USB Key (Not Inserted)
  I: Floppy drive, Flash card reader, USB Key (Not Inserted)
  J: Floppy drive, Flash card reader, USB Key (Not Inserted)
  L: Floppy drive, Flash card reader, USB Key (Not Inserted)
  
  ---\\ Etat du Centre de Sécurité Windows
  [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
  ~ Security Center: 41 Legitimates Filtered in 00mn 00s
  
  ---\\ Recherche particulière de fichiers génériques
  [MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorateur Windows.) (.25/02/2011 - 07:19:30.) -- C:\Windows\Explorer.exe [2871808]
  [MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 - 02:39:52.) -- C:\Windows\System32\Wininit.exe [129024]
  [MD5.D28B35DE88D27EFB27DF4B1E8319E3C0] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.22/09/2013 - 23:55:10.) -- C:\Windows\System32\wininet.dll [2241024]
  [MD5.1151B1BAA6F350B1DB6598E0FEA7C457] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.20/11/2010 - 14:25:30.) -- C:\Windows\System32\Winlogon.exe [390656]
  [MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Bibliothèque de licences.) (.20/11/2010 - 14:27:26.) -- C:\Windows\System32\sppcomapi.dll [232448]
  [MD5.314C17917AC8523EC77A710215012A65] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.14/09/2013 - 02:10:19.) -- C:\Windows\system32\Drivers\AFD.sys [497152]
  [MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 - 02:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128]
  [MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/07/2009 - 00:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160]
  [MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.20/11/2010 - 10:19:21.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456]
  [MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.20/11/2010 - 10:26:32.) -- C:\Windows\system32\Drivers\DfsC.sys [102400]
  [MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.20/11/2010 - 11:43:43.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368]
  [MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) (.14/07/2009 - 00:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472]
  [MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.14/07/2009 - 01:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224]
  [MD5.A5D9106A73DC88564C825D317CAC68AC] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.27/04/2011 - 03:40:40.) -- C:\Windows\system32\Drivers\MRxSmb.sys [158208]
  [MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) (.20/11/2010 - 10:23:20.) -- C:\Windows\system32\Drivers\netBT.sys [261632]
  [MD5.B98F8C6E31CD07B2E6F71F7F648E38C0] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.12/04/2013 - 15:45:08.) -- C:\Windows\system32\Drivers\ntfs.sys [1656680]
  [MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/07/2009 - 01:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280]
  [MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.20/11/2010 - 11:52:35.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [129536]
  [MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.14/07/2009 - 01:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184]
  [MD5.DDAD5A7AB24D8B65F8D724F5C20FD806] - (.Microsoft Corporation - TDI Translation Driver.) (.20/11/2010 - 10:21:56.) -- C:\Windows\system32\Drivers\tdx.sys [119296]
  [MD5.0D08D2F3B3FF84E433346669B5E0F639] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.20/11/2010 - 14:34:02.) -- C:\Windows\system32\Drivers\volsnap.sys [295808]
  ~ Generic Processes: Scanned in 00mn 04s
  
  ---\\ Etat des fichiers cachés (Caché/Total)
  ~ Mes images (My Pictures) : 1/8
  ~ Mes musiques (My Musics) : 7/30
  ~ Mes Videos (My Videos) : 1/23
  ~ Mes Favoris (My Favorites) : 1/26
  ~ Mes Documents (My Documents) : 1/2
  ~ Mon Bureau (My Desktop) : 1/366
  ~ Menu demarrer (Programs) : 1/23
  ~ Hidden Files: Scanned in 00mn 04s
  
  ---\\ Processus lancés
  [MD5.CBC7D8E5416AD30CF16DC2FD4A6AA399] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe [4858968] [PID.10440]
  [MD5.3E399A1328181C2A352472369DE2A93A] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [844752] [PID.8304]
  [MD5.CC82669653807DFC27DF3B73ECE5EECD] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [8135168] [PID.10372]
  [MD5.9330941C8F6DF417F6DBBE998DB6687E] - (.AVAST Software - avast! Service.) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808] [PID.1188]
  [MD5.ADDA5E1951B90D3D23C56D3CF0622ADC] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [65640] [PID.1724]
  [MD5.30E3850F303EAE5C364782EA78579CC9] - (.Apple Inc. - MobileDeviceService.) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [55624] [PID.1784]
  [MD5.816FD5A6F3C2F3D600900096632FC60E] - (.Acer Incorporated - Global Registration Service.) -- C:\Program Files (x86)\Packard Bell\Registration\GregHSRW.exe [1150496] [PID.2124]
  [MD5.A06EFD4965F8A3F97A8C9A291D032678] - (.Pas de propriétaire - Inkjet Printer/Scanner/Fax Extended Servey.) -- C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.exe [116104] [PID.2160]
  [MD5.F9EC9ACD504D823D9B9CA98A4F8D3CA2] - (.Acer Group - Updater Service.) -- C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe [243232] [PID.2476]
  ~ Processes Running: Scanned in 00mn 00s
  
  ---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
  C:\Users\geoffrey\AppData\Local\Google\Chrome\User Data\Default\Preferences
  G2 - GCE: Preference [User Data\Default] [lechbfhppigdgmodjlmcbiebfpogaeli] savvEnsharee v.5.10 (Activé) =>Adware.SaveShare
  G2 - GCE: Preference [User Data\Default] [pbpohikckhbcljgombipcdoinkaedlfa] Smart Display v.1.6 (Activé) =>Spyware.SmartDisplay
  ~ Google Browser: 18 Legitimates Filtered in 00mn 42s
  
  ---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
  C:\Users\geoffrey\AppData\Roaming\Mozilla\Firefox\Profiles\utk92q2b.default\prefs.js
  M2 - MFEP: prefs.js [geoffrey - utk92q2b.default\7125a285-7e68-47aa-9d72-e81874f4d47e@d3fcdb92-135d-4a8a-8cf6-11e3b57c5fda.com] [] Plus-HD-2.3 v (..) =>Adware.PlusHD
  M2 - MFEP: prefs.js [geoffrey - utk92q2b.default\jid1-FCM5fDwCW5M3AQ@jetpack] [] Smart Display v1.2 (..) =>Spyware.SmartDisplay
  P2 - FPN: [HKCU] [pandonetworks.com/PandoWebPlugin] - (...) -- C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (.not file.)
  ~ Firefox Browser: 20 Legitimates Filtered in 00mn 02s
  
  ---\\ Internet Explorer, Proxy Management (R5)
  R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
  R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
  R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
  R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
  R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
  ~ Proxy management: Scanned in 00mn 00s
  
  ---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
  F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
  F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
  F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
  ~ Keys: Scanned in 00mn 00s
  
  ---\\ Internet Explorer Toolbars (O3)
  O3 - Toolbar: (no name) [64Bits] - [HKLM]{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} Clé orpheline
  O3 - Toolbar: Google Toolbar [64Bits] - [HKLM]{2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll =>Toolbar.Google
  O3 - Toolbar\WebBrowser: (no name) [64Bits] - [HKCU]{2318C2B1-4965-11D4-9B18-009027A5CD4F} Clé orpheline
  ~ Toolbar: Scanned in 00mn 00s
  
  ---\\ Modification Domaine/Adresses DNS (O17)
  O17 - HKLM\System\CCS\Services\Tcpip\..\{FA4AA3A3-DDC3-45F2-9645-FF26903C23FA}: DhcpNameServer = 192.168.1.1 192.168.1.1
  O17 - HKLM\System\CS1\Services\Tcpip\..\{FA4AA3A3-DDC3-45F2-9645-FF26903C23FA}: DhcpNameServer = 192.168.1.1 192.168.1.1
  O17 - HKLM\System\CS2\Services\Tcpip\..\{FA4AA3A3-DDC3-45F2-9645-FF26903C23FA}: DhcpNameServer = 192.168.1.1 192.168.1.1
  O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 192.168.1.1
  ~ Domain: Scanned in 00mn 00s
  
  ---\\ Protocole additionnel (O18)
  O18 - Handler: wlmailhtml [64Bits] - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} . (...) --
  O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation
  ~ Protocole Additionnel: Scanned in 00mn 00s
  
  ---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
  O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\Windows\System32\igfxdev.dll
  ~ Winlogon: Scanned in 00mn 00s
  
  ---\\ Récapitulatif des détections trouvées sur votre station
  ~ http://nicolascoolman.webs.com/apps/blog/show/31929570-adware-saveshare =>Adware.SaveShare
  ~ http://nicolascoolman.webs.com/apps/blog/show/32662245-spyware-smartdisplay =>Spyware.SmartDisplay
  ~ http://nicolascoolman.webs.com/apps/blog/show/28138048-adware-plushd =>Adware.PlusHD
  ~ http://nicolascoolman.webs.com/apps/blog/show/32384220-toolbar-google =>Toolbar.Google
  ~ MSI: 4 link(s) detected in 00mn 00s
  
  ~ 101 Legitimates filtered by white list
  End of the scan (214 lines in 01mn 40s)(0)
  
  0
Réponse 16 / 24
lilidurhone Contributeur sécurité
Incomplet
Full option
0
1. Geoffrey3613 Auteur
  
  Dsl normalement la ses bo
  
  ~ Rapport de ZHPDiag v2013.10.25.66 - Nicolas Coolman (25/10/2013)
  ~ Lancé par geoffrey (27/10/2013 21:21:42)
  ~ Adresse du Site Web https://nicolascoolman.webs.com/
  ~ Forums gratuits d'Assistance à la désinfection : https://nicolascoolman.webs.com/
  ~ Traduit par Nicolas Coolman
  ~ Etat de la version :
  ~ Liste blanche : Activée par le programme
  ~ Elévation des Privilèges : OK
  ~ User Account Control (UAC): Activate by user
  
  ---\\ Navigateurs Internet
  MSIE: Internet Explorer v10.0.9200.16721
  MFIE: Mozilla Firefox 22.0
  GCIE: Google Chrome v30.0.1599.101 (Defaut)
  
  ---\\ Informations sur les produits Windows
  ~ Langage: Français
  Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)
  Windows Server License Manager Script : OK
  ~ Windows(R) 7, OEM_SLP channel
  System Locked Preinstallation (OEM_SLP) : OK
  Windows ID Activation : OK
  ~ Windows Partial Key : 7QJB7
  Windows License : OK
  ~ Windows Remaining Initializations Number : 3
  Software Protection Service (Protection logicielle) : OK
  Windows Automatic Updates : OK
  Windows Activation Technologies : OK
  
  ---\\ Logiciels de protection du système
  avast! Free Antivirus v8.0.1497.0
  Windows Defender W7
  
  ---\\ Logiciels d'optimisation du système
  
  ---\\ Logiciels de partage PeerToPeer
  
  ---\\ Surveillance de Logiciels
  Adobe Flash Player 11 Plugin
  Adobe Reader XI
  Java 7 Update 25
  
  ---\\ Informations sur le système
  ~ Processor: Intel64 Family 6 Model 22 Stepping 1, GenuineIntel
  ~ Operating System: 64 Bits
  Boot mode: Normal (Normal boot)
  Total RAM: 3037 MB (55% free)
  System Restore: Activé (Enable)
  System drive C: has 25 GB (17%) free of 140 GB
  
  ---\\ Mode de connexion au système
  ~ Computer Name: WENZ-PC
  ~ User Name: geoffrey
  ~ All Users Names: WENZ, nathalie, hugo, HomeGroupUser$, geoffrey, Administrateur,
  ~ Unselected Option: None
  Logged in as Administrator
  
  ---\\ Variables d'environnement
  ~ System Unit : C:\
  ~ %AppZHP% : C:\Users\geoffrey\AppData\Roaming\ZHP\
  ~ %AppData% : C:\Users\geoffrey\AppData\Roaming\
  ~ %Desktop% : C:\Users\geoffrey\Desktop\
  ~ %Favorites% : C:\Users\geoffrey\Favorites\
  ~ %LocalAppData% : C:\Users\geoffrey\AppData\Local\
  ~ %StartMenu% : C:\Users\geoffrey\AppData\Roaming\Microsoft\Windows\Start Menu\
  ~ %Windir% : C:\Windows\
  ~ %System% : C:\Windows\System32\
  
  ---\\ Enumération des unités disques
  C: Hard drive, Flash drive, Thumb drive (Free 25 Go of 140 Go)
  D: Hard drive, Flash drive, Thumb drive (Free 124 Go of 141 Go)
  E: CD-ROM drive (Not Inserted)
  H: Floppy drive, Flash card reader, USB Key (Not Inserted)
  I: Floppy drive, Flash card reader, USB Key (Not Inserted)
  J: Floppy drive, Flash card reader, USB Key (Not Inserted)
  L: Floppy drive, Flash card reader, USB Key (Not Inserted)
  
  ---\\ Etat du Centre de Sécurité Windows
  [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
  ~ Security Center: 41 Legitimates Filtered in 00mn 00s
  
  ---\\ Recherche particulière de fichiers génériques
  [MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorateur Windows.) (.25/02/2011 - 07:19:30.) -- C:\Windows\Explorer.exe [2871808]
  [MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 - 02:39:52.) -- C:\Windows\System32\Wininit.exe [129024]
  [MD5.D28B35DE88D27EFB27DF4B1E8319E3C0] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.22/09/2013 - 23:55:10.) -- C:\Windows\System32\wininet.dll [2241024]
  [MD5.1151B1BAA6F350B1DB6598E0FEA7C457] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.20/11/2010 - 14:25:30.) -- C:\Windows\System32\Winlogon.exe [390656]
  [MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Bibliothèque de licences.) (.20/11/2010 - 14:27:26.) -- C:\Windows\System32\sppcomapi.dll [232448]
  [MD5.314C17917AC8523EC77A710215012A65] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.14/09/2013 - 02:10:19.) -- C:\Windows\system32\Drivers\AFD.sys [497152]
  [MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 - 02:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128]
  [MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/07/2009 - 00:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160]
  [MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.20/11/2010 - 10:19:21.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456]
  [MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.20/11/2010 - 10:26:32.) -- C:\Windows\system32\Drivers\DfsC.sys [102400]
  [MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.20/11/2010 - 11:43:43.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368]
  [MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) (.14/07/2009 - 00:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472]
  [MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.14/07/2009 - 01:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224]
  [MD5.A5D9106A73DC88564C825D317CAC68AC] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.27/04/2011 - 03:40:40.) -- C:\Windows\system32\Drivers\MRxSmb.sys [158208]
  [MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) (.20/11/2010 - 10:23:20.) -- C:\Windows\system32\Drivers\netBT.sys [261632]
  [MD5.B98F8C6E31CD07B2E6F71F7F648E38C0] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.12/04/2013 - 15:45:08.) -- C:\Windows\system32\Drivers\ntfs.sys [1656680]
  [MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/07/2009 - 01:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280]
  [MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.20/11/2010 - 11:52:35.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [129536]
  [MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.14/07/2009 - 01:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184]
  [MD5.DDAD5A7AB24D8B65F8D724F5C20FD806] - (.Microsoft Corporation - TDI Translation Driver.) (.20/11/2010 - 10:21:56.) -- C:\Windows\system32\Drivers\tdx.sys [119296]
  [MD5.0D08D2F3B3FF84E433346669B5E0F639] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.20/11/2010 - 14:34:02.) -- C:\Windows\system32\Drivers\volsnap.sys [295808]
  ~ Generic Processes: Scanned in 00mn 00s
  
  ---\\ Etat des fichiers cachés (Caché/Total)
  ~ Mes images (My Pictures) : 1/8
  ~ Mes musiques (My Musics) : 7/30
  ~ Mes Videos (My Videos) : 1/23
  ~ Mes Favoris (My Favorites) : 1/26
  ~ Mes Documents (My Documents) : 1/2
  ~ Mon Bureau (My Desktop) : 1/366
  ~ Menu demarrer (Programs) : 1/23
  ~ Hidden Files: Scanned in 00mn 01s
  
  ---\\ Processus lancés
  [MD5.CBC7D8E5416AD30CF16DC2FD4A6AA399] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe [4858968] [PID.3664]
  [MD5.3E399A1328181C2A352472369DE2A93A] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [844752] [PID.3480]
  [MD5.CC82669653807DFC27DF3B73ECE5EECD] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [8135168] [PID.4456]
  [MD5.9330941C8F6DF417F6DBBE998DB6687E] - (.AVAST Software - avast! Service.) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808] [PID.1164]
  [MD5.ADDA5E1951B90D3D23C56D3CF0622ADC] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [65640] [PID.1800]
  [MD5.30E3850F303EAE5C364782EA78579CC9] - (.Apple Inc. - MobileDeviceService.) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [55624] [PID.1852]
  [MD5.816FD5A6F3C2F3D600900096632FC60E] - (.Acer Incorporated - Global Registration Service.) -- C:\Program Files (x86)\Packard Bell\Registration\GregHSRW.exe [1150496] [PID.1984]
  [MD5.A06EFD4965F8A3F97A8C9A291D032678] - (.Pas de propriétaire - Inkjet Printer/Scanner/Fax Extended Servey.) -- C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.exe [116104] [PID.1400]
  [MD5.F9EC9ACD504D823D9B9CA98A4F8D3CA2] - (.Acer Group - Updater Service.) -- C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe [243232] [PID.2212]
  ~ Processes Running: Scanned in 00mn 01s
  
  ---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
  C:\Users\geoffrey\AppData\Local\Google\Chrome\User Data\Default\Preferences
  G2 - GCE: Preference [User Data\Default] [lechbfhppigdgmodjlmcbiebfpogaeli] savvEnsharee v.5.10 (Activé) =>Adware.SaveShare
  G2 - GCE: Preference [User Data\Default] [pbpohikckhbcljgombipcdoinkaedlfa] Smart Display v.1.6 (Activé) =>Spyware.SmartDisplay
  ~ Google Browser: 18 Legitimates Filtered in 00mn 28s
  
  ---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
  C:\Users\geoffrey\AppData\Roaming\Mozilla\Firefox\Profiles\utk92q2b.default\prefs.js
  M2 - MFEP: prefs.js [geoffrey - utk92q2b.default\7125a285-7e68-47aa-9d72-e81874f4d47e@d3fcdb92-135d-4a8a-8cf6-11e3b57c5fda.com] [] Plus-HD-2.3 v (..) =>Adware.PlusHD
  M2 - MFEP: prefs.js [geoffrey - utk92q2b.default\jid1-FCM5fDwCW5M3AQ@jetpack] [] Smart Display v1.2 (..) =>Spyware.SmartDisplay
  P2 - FPN: [HKCU] [pandonetworks.com/PandoWebPlugin] - (...) -- C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (.not file.)
  ~ Firefox Browser: 20 Legitimates Filtered in 00mn 00s
  
  ---\\ Internet Explorer, Proxy Management (R5)
  R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
  R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
  R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
  R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
  R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
  ~ Proxy management: Scanned in 00mn 00s
  
  ---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
  F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
  F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
  F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
  ~ Keys: Scanned in 00mn 00s
  
  ---\\ Hosts file redirection (O1)
  ~ Le fichier hosts est sain (The hosts file is clean).
  ~ Hosts File: Scanned in 00mn 00s
  ~ Nombre de lignes (Lines number): 21
  
  ---\\ Internet Explorer Toolbars (O3)
  O3 - Toolbar: (no name) [64Bits] - [HKLM]{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} Clé orpheline
  O3 - Toolbar: Google Toolbar [64Bits] - [HKLM]{2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll =>Toolbar.Google
  O3 - Toolbar\WebBrowser: (no name) [64Bits] - [HKCU]{2318C2B1-4965-11D4-9B18-009027A5CD4F} Clé orpheline
  ~ Toolbar: Scanned in 00mn 00s
  
  ---\\ Autres liens utilisateurs (O4)
  O4 - GS\Desktop [Public]: FlvPlayer.lnk . (...) -- C:\Program Files (x86)\FLVPlayer\FLVPlayerApp.exe
  O4 - GS\Desktop [Public]: Google SketchUp 8.lnk . (.Google, Inc. - SketchUp Application.) -- C:\Program Files (x86)\Google\Google SketchUp 8\SketchUp.exe
  O4 - GS\Desktop [Public]: RollerCoaster Tycoon 3.lnk . (.Frontier Developments Ltd - RollerCoaster Tycoon® 3.) -- C:\Program Files (x86)\Atari\RollerCoaster Tycoon 3\RCT3plus.exe
  O4 - GS\Program [Public]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
  O4 - GS\QuickLaunch [WENZ]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe http://www.qvo6.com =>Hijacker.Qvo6
  O4 - GS\QuickLaunch [WENZ]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe http://www.qvo6.com =>Hijacker.Qvo6
  O4 - GS\QuickLaunch [WENZ]: Packard Bell Games.lnk . (.WildTangent, Inc. - GameConsole.) -- C:\Program Files (x86)\Packard Bell Games\Packard Bell Game Console\GameConsole-wt.exe
  O4 - GS\QuickLaunch [WENZ]: qvo6.lnk . (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe http://www.qvo6.com =>Hijacker.Qvo6
  O4 - GS\QuickLaunch [WENZ]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) -- C:\Users\geoffrey\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent
  O4 - GS\TaskBar [WENZ]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe http://www.qvo6.com =>Hijacker.Qvo6
  O4 - GS\TaskBar [WENZ]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe http://www.qvo6.com =>Hijacker.Qvo6
  O4 - GS\TaskBar [WENZ]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) -- C:\Users\geoffrey\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent
  O4 - GS\Program [WENZ]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe http://www.qvo6.com =>Hijacker.Qvo6
  O4 - GS\SystemTools [WENZ]: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe http://www.qvo6.com =>Hijacker.Qvo6
  O4 - GS\Desktop [WENZ]: Auslogics DiskDefrag.lnk . (.Auslogics - Disk Defrag.) -- C:\Program Files (x86)\Auslogics\DiskDefrag\DiskDefrag.exe
  O4 - GS\Desktop [WENZ]: Internet Checkers.lnk - Clé orpheline
  O4 - GS\Desktop [WENZ]: Media Player Classic - HC.lnk . (.MPC-HC Team - Media Player Classic - Home Cinema.) -- C:\Program Files (x86)\XP Codec Pack\mpc-hc\mpc-hc.exe
  O4 - GS\Desktop [WENZ]: Microsoft Works.lnk . (...) -- C:\Windows\Installer\{A3088CD2-612B-11D3-AF43-00C04F443448}\FB931E91.exe
  O4 - GS\Desktop [WENZ]: Packard Bell Games.lnk . (.WildTangent, Inc. - GameConsole.) -- C:\Program Files (x86)\Packard Bell Games\Packard Bell Game Console\GameConsole-wt.exe
  O4 - GS\Desktop [WENZ]: Solitaire.lnk - Clé orpheline
  O4 - GS\Desktop [WENZ]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) -- C:\Users\geoffrey\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent
  O4 - GS\QuickLaunch [nathalie]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  O4 - GS\QuickLaunch [nathalie]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
  O4 - GS\TaskBar [nathalie]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  O4 - GS\TaskBar [nathalie]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
  O4 - GS\Program [nathalie]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
  O4 - GS\SystemTools [nathalie]: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
  O4 - GS\Desktop [nathalie]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  O4 - GS\QuickLaunch [hugo]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  O4 - GS\QuickLaunch [hugo]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
  O4 - GS\QuickLaunch [hugo]: Packard Bell Games.lnk . (.WildTangent, Inc. - GameConsole.) -- C:\Program Files (x86)\Packard Bell Games\Packard Bell Game Console\GameConsole-wt.exe
  O4 - GS\TaskBar [hugo]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
  O4 - GS\Program [hugo]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
  O4 - GS\SystemTools [hugo]: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
  O4 - GS\QuickLaunch [geoffrey]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  O4 - GS\QuickLaunch [geoffrey]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
  O4 - GS\TaskBar [geoffrey]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  O4 - GS\Program [geoffrey]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
  O4 - GS\SystemTools [geoffrey]: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
  O4 - GS\Desktop [geoffrey]: Earthquake - Raccourci.lnk . (.Blizzard Entertainment - World of Warcraft Retail.) -- C:\Users\geoffrey\Desktop\Earthquake\Earthquake.exe
  O4 - GS\Desktop [geoffrey]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  O4 - GS\Desktop [geoffrey]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) -- C:\Users\geoffrey\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent
  ~ Global Startup: 125 Legitimates Filtered in 00mn 05s
  
  ---\\ Applications lancées au démarrage du sytème (O4)
  O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\Windows\system32\hkcmd.exe
  O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\Windows\system32\igfxpers.exe
  O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\Windows\system32\igfxtray.exe
  O4 - HKCU\..\Run: [SearchProtection] C:\Users\geoffrey\AppData\Roaming\Search Protection\SearchProtection.exe (.not file.) =>Toolbar.Conduit
  O4 - HKCU\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe =>Toolbar.Google
  O4 - HKLM\..\Wow6432Node\Run: [avast] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\avastUI.exe
  O4 - HKLM\..\Wow6432Node\Run: [tuto4pc_fr_62] Clé orpheline =>PUP.Eorezo
  O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation
  O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation
  O4 - HKUS\S-1-5-18\..\RunOnce: [SPReview] . (.Microsoft Corporation - SP Reviewer.) -- C:\Windows\System32\SPReview\SPReview.exe =>.Microsoft Corporation
  O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation
  O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation
  O4 - HKUS\S-1-5-21-3201979416-3185207537-2710416600-1004\..\Run: [SearchProtection] C:\Users\geoffrey\AppData\Roaming\Search Protection\SearchProtection.exe (.not file.) =>Toolbar.Conduit
  O4 - HKUS\S-1-5-21-3201979416-3185207537-2710416600-1004\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe =>Toolbar.Google
  ~ Application: Scanned in 00mn 00s
  
  ---\\ Modification Domaine/Adresses DNS (O17)
  O17 - HKLM\System\CCS\Services\Tcpip\..\{FA4AA3A3-DDC3-45F2-9645-FF26903C23FA}: DhcpNameServer = 192.168.1.1 192.168.1.1
  O17 - HKLM\System\CS1\Services\Tcpip\..\{FA4AA3A3-DDC3-45F2-9645-FF26903C23FA}: DhcpNameServer = 192.168.1.1 192.168.1.1
  O17 - HKLM\System\CS2\Services\Tcpip\..\{FA4AA3A3-DDC3-45F2-9645-FF26903C23FA}: DhcpNameServer = 192.168.1.1 192.168.1.1
  O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 192.168.1.1
  ~ Domain: Scanned in 00mn 00s
  
  ---\\ Protocole additionnel (O18)
  O18 - Handler: wlmailhtml [64Bits] - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} . (...) --
  O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation
  ~ Protocole Additionnel: Scanned in 00mn 00s
  
  ---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
  O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\Windows\System32\igfxdev.dll
  ~ Winlogon: Scanned in 00mn 00s
  
  ---\\ HKCU & HKLM Software Keys
  [HKCU\Software\Pando Networks]
  [HKLM\Software\Wow6432Node\Pando Networks]
  ~ Key Software: 213 Legitimates Filtered in 00mn 01s
  
  ---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
  O43 - CFD: 11/10/2013 - 22:18:21 - [0] ----D C:\Program Files (x86)\Pando Networks
  O43 - CFD: 07/08/2013 - 19:10:09 - [0] ----D C:\Users\geoffrey\AppData\Roaming\Reg
  ~ Program Folder: 167 Legitimates Filtered in 01mn 05s
  
  ---\\ Derniers fichiers créés dans Windows Prefetcher (O45)
  O45 - LFCP:[MD5.3008E5BB74C040A7A6951F65ABE6787A] - 23/10/2013 - 21:24:49 ---A- - C:\Windows\Prefetch\WAJAM_VALIDATE.EXE-C7AEBE1C.pf =>Toolbar.Wajam
  O45 - LFCP:[MD5.57C2E35D56A6FA6AF1F7B4347CD50668] - 23/10/2013 - 21:25:02 ---A- - C:\Windows\Prefetch\DOKOTB.EXE-C0C91AEE.pf
  O45 - LFCP:[MD5.2768823528CA9000019887E0BE9516A1] - 23/10/2013 - 21:25:02 ---A- - C:\Windows\Prefetch\WHILOKII_IS.EXE-72B27CC5.pf =>PUP.Whilokii
  O45 - LFCP:[MD5.1716515EA8354B014D428BD9FBAF4425] - 23/10/2013 - 21:25:11 ---A- - C:\Windows\Prefetch\BD.EXE-47B87377.pf
  O45 - LFCP:[MD5.4F0B0977CDD9A28C30AC8ECF1C1BE829] - 23/10/2013 - 21:25:17 ---A- - C:\Windows\Prefetch\UNINST.EXE-C5B87011.pf
  O45 - LFCP:[MD5.63CCFBDCC0D6E20508F8089274093223] - 23/10/2013 - 21:25:19 ---A- - C:\Windows\Prefetch\SQLITE3.EXE-F988031F.pf
  O45 - LFCP:[MD5.115FCB1FFEA26E7A1942FE99BB4AAA7B] - 23/10/2013 - 21:25:22 ---A- - C:\Windows\Prefetch\RCPSETUP_ADPPI_ADPPI.EXE-6279987B.pf
  O45 - LFCP:[MD5.F86190AF3504C2978963DA93CAF49A39] - 23/10/2013 - 21:25:22 ---A- - C:\Windows\Prefetch\RCPSETUP_ADPPI_ADPPI.TMP-2D4F5F2F.pf
  O45 - LFCP:[MD5.54A3524A614A2CA4B7002D37A83767E0] - 23/10/2013 - 21:25:33 ---A- - C:\Windows\Prefetch\BONANZADEALSLIVE.EXE-91518192.pf =>Adware.BonanzaDeals
  O45 - LFCP:[MD5.63C8252015AC096791AEA498CBC31C3B] - 23/10/2013 - 21:25:33 ---A- - C:\Windows\Prefetch\CLOUD_BACKUP_SETUP_INTL.EXE-46E095F2.pf
  O45 - LFCP:[MD5.AFA8B34439996A104108BBB2CE9D05C5] - 23/10/2013 - 21:25:47 ---A- - C:\Windows\Prefetch\BONANZADEALSLIVE.EXE-918DAA3F.pf =>Adware.BonanzaDeals
  O45 - LFCP:[MD5.FF82D1BAE96EDD99C5A2F79E051F8D35] - 23/10/2013 - 21:25:52 ---A- - C:\Windows\Prefetch\677681~1.EXE-CEA79D1F.pf
  O45 - LFCP:[MD5.BBBBC653425381646F53B36ACA2A5D7C] - 23/10/2013 - 21:26:02 ---A- - C:\Windows\Prefetch\UPDATEWHILOKII.EXE-F72E37F5.pf =>PUP.Whilokii
  O45 - LFCP:[MD5.35A5C9443209A8FA46429ADA37DE101F] - 25/10/2013 - 16:52:51 ---A- - C:\Windows\Prefetch\MYPC BACKUP.EXE-B5EA9514.pf =>PUP.MyPCBackup
  O45 - LFCP:[MD5.C3944F150868404E938951582215CA4B] - 25/10/2013 - 19:50:25 ---A- - C:\Windows\Prefetch\BONANZADEALSLIVE.EXE-67A98E0D.pf =>Adware.BonanzaDeals
  O45 - LFCP:[MD5.8A087E64FC85039F5C88FDB6E35F0647] - 27/10/2013 - 00:27:58 ---A- - C:\Windows\Prefetch\CHKRZM.EXE-8FC0DC2D.pf
  ~ Prefetcher: 153 Legitimates Filtered in 00mn 02s
  
  ---\\ Clé de registre Shell MountPoints2 (MPKS) (O51)
  O51 - MPSK:{48363f05-fc1a-11e2-b301-806e6f6e6963}\AutoRun\command. (...) -- E:\Autorun.exe (.not file.)
  ~ Keys: Scanned in 00mn 00s
  
  ---\\ Enumération des clés de registre StartupReg (SMSR) (O53)
  O53 - SMSR:HKLM\...\startupreg\24x7HELP [Key] . (...) -- C:\Program Files (x86)\24x7Help\App24x7Help.exe (.not file.) =>PUP.24x7Help
  O53 - SMSR:HKLM\...\startupreg\Boxore Client [Key] . (...) -- C:\Program Files (x86)\Boxore\BoxoreClient\boxore.exe (.not file.) =>Adware.Boxore
  O53 - SMSR:HKLM\...\startupreg\Browser Infrastructure Helper [Key] . (...) -- C:\Users\WENZ\AppData\Local\Smartbar\Application\Smartbar.exe (.not file.) =>Hijacker.SmartBar
  O53 - SMSR:HKLM\...\startupreg\ConduitFloatingPlugin_biahaobfpkgeiomkihcdgknebbhadonc [Key] . (...) -- C:\Program Files (x86)\Conduit\CT3307695\plugins\TBVerifier.dll (.not file.)
  O53 - SMSR:HKLM\...\startupreg\Desk 365 [Key] . (...) -- C:\Program Files (x86)\Desk 365\desk365.exe (.not file.) =>Hijacker.22Find
  O53 - SMSR:HKLM\...\startupreg\Iminent [Key] . (...) -- C:\Program Files (x86)\Iminent\Iminent.exe (.not file.) =>Adware.IMBooster
  O53 - SMSR:HKLM\...\startupreg\IminentMessenger [Key] . (...) -- C:\Program Files (x86)\Iminent\Iminent.Messengers.exe (.not file.) =>Adware.IMBooster
  O53 - SMSR:HKLM\...\startupreg\lollipop [Key] . (...) -- c:\users\wenz\appdata\local\lollipop\lollipop.exe (.not file.) =>Adware.Lollipop
  O53 - SMSR:HKLM\...\startupreg\NTRedirect [Key] . (...) -- C:\Users\WENZ\AppData\Roaming\BabSolution\Shared\enhancedNT.dll (.not file.) =>Hijacker.BabSolution
  O53 - SMSR:HKLM\...\startupreg\offerbox [Key] . (...) -- C:\Program Files (x86)\OfferBox\OfferBox.exe (.not file.) =>PUP.OfferBox
  O53 - SMSR:HKLM\...\startupreg\PCFixSpeed [Key] . (...) -- C:\Program Files (x86)\PCFixSpeed\PCFixTray.exe (.not file.) =>PUP.PCFixSpeed
  O53 - SMSR:HKLM\...\startupreg\SearchProtect [Key] . (...) -- C:\Users\WENZ\AppData\Roaming\SearchProtect\bin\cltmng.exe (.not file.) =>Toolbar.Conduit
  O53 - SMSR:HKLM\...\startupreg\SearchProtectAll [Key] . (...) -- C:\Program Files (x86)\SearchProtect\bin\cltmng.exe (.not file.) =>Toolbar.Conduit
  O53 - SMSR:HKLM\...\startupreg\SuperCopier2.exe [Key] . (...) -- C:\Program Files (x86)\SuperCopier2\SuperCopier2.exe (.not file.)
  O53 - SMSR:HKLM\...\startupreg\tuto4pc_fr_62 [Key] . (...) -- C:\Program Files (x86)\tuto4pc_fr_62\tuto4pc_fr_62.exe (.not file.) =>PUP.Eorezo
  ~ SMSR Keys: 29 Legitimates Filtered in 00mn 00s
  
  ---\\ Enumération des clés de registre PoliciesSystem (MWPS) (O55)
  O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
  O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
  ~ MWPS: 16 Legitimates Filtered in 00mn 00s
  
  ---\\ Enumération des clés de registre PoliciesExplorer (MWPE) (O56)
  O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1
  ~ MWPE Keys: 3 Legitimates Filtered in 00mn 00s
  
  ---\\ Liste des pilotes du système (SDL) (O58)
  O58 - SDL:[MD5.286193DC28CFB4CEB8D378E20A0850A9] - 30/08/2013 - 08:48:10 ---A- . (...) -- C:\Windows\System32\Drivers\aswRvrt.sys [65336]
  ~ Drivers: 16 Legitimates Filtered in 00mn 00s
  
  ---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61)
  O61 - LFC: 26/10/2013 - 21:24:47 ---A- . (...) -- C:\Users\geoffrey\AppData\Local\Google\Chrome\User Data\Certificate Revocation Lists [260408]
  O61 - LFC: 26/10/2013 - 21:25:21 ---A- . (...) -- C:\Users\geoffrey\AppData\Roaming\ZHP\ZHPADSReport.txt [351] =>.Nicolas Coolman
  O61 - LFC: 26/10/2013 - 21:25:21 ---A- . (...) -- C:\Users\geoffrey\Downloads\adwcleaner.exe [1060070]
  O61 - LFC: 27/10/2013 - 21:24:55 ---A- . (...) -- C:\Users\geoffrey\AppData\Local\Google\Chrome\User Data\Local State [44228]
  O61 - LFC: 27/10/2013 - 21:25:07 ---A- . (...) -- C:\Users\geoffrey\AppData\Roaming\D2Info0 [117]
  O61 - LFC: 27/10/2013 - 21:25:07 ---A- . (...) -- C:\Users\geoffrey\AppData\Roaming\app\Jerakine_lang.dat [5077]
  O61 - LFC: 27/10/2013 - 21:25:21 ---A- . (...) -- C:\Users\geoffrey\AppData\Roaming\ZHP\Log.txt [63005] =>.Nicolas Coolman
  O61 - LFC: 27/10/2013 - 21:25:21 ---A- . (...) -- C:\Users\geoffrey\AppData\Roaming\ZHP\TestsZHPDiag.txt [2936] =>.Nicolas Coolman
  O61 - LFC: 27/10/2013 - 21:25:21 ---A- . (...) -- C:\Users\geoffrey\AppData\Roaming\ZHP\ZHPDiag.txt [13142] =>.Nicolas Coolman
  ~ 11 Fichiers temporaires (Temporary files)
  ~ Files: 518 Legitimates Filtered in 00mn 46s
  
  ---\\ Liste des outils de désinfection (LATC) (O63)
  O63 - Logiciel: ZHPDiag 2013 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 =>.Nicolas Coolman
  ~ ADS: Scanned in 00mn 00s
  
  ---\\ Associations Shell Spawning (O67)
  O67 - Shell Spawning: <.html> <ChromeHTML>[HKCU\..\open\Command] (.Not Key.)
  ~ FASS Keys: 19 Legitimates Filtered in 00mn 00s
  
  ---\\ Menu de démarrage Internet (SMI) (O68)
  O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
  O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  O68 - StartMenuInternet: <Google Chrome.BTNYCY4CGGSFGEPYEPPKF7JTXE> <Google Chrome>[HKLM\..\Shell\open\Command] (...) -- C:\Users\geoffrey\AppData\Local\Google\Chrome\Application\chrome.exe" http://www.qvo6.com =>Hijacker.Qvo6
  O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
  ~ Keys: Scanned in 00mn 00s
  
  ---\\ Recherche d'infection sur les navigateurs internet (SBI) (O69)
  O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - https://www.bing.com/?toHttps=1&redig=69DA0EF8272048D9864AF4DB37211DE8
  O69 - SBI: SearchScopes [HKCU] {4AA8D98D-83D2-3B0B-23B0-667AAFFB4606} - (Google) - https://www.google.com/?gws_rd=ssl
  O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} - (Google) - https://www.google.com/?gws_rd=ssl
  O69 - SBI: SearchScopes [HKCU] {B7A052D6-433A-42CB-9165-87E9BD100337} - (Yahoo! Search) - https://fr.search.yahoo.com/
  ~ Keys: Scanned in 00mn 00s
  
  ---\\ Recherche particulière à la racine du système (SPRF) (O84)
  [MD5.D07444BDB22757545CD2FA91654F2FD0] [SPRF][24/08/2013] (...) -- C:\Users\geoffrey\AppData\Local\Temp\Quarantine.exe [328019]
  [MD5.3C74C26999F2060BC6302448F173A342] [SPRF][28/08/2013] (.Babylon Ltd. - Uninstaller Application.) -- C:\Users\geoffrey\AppData\Local\Temp\uninst1.exe [340464] =>Toolbar.Babylon
  [MD5.ACE60E0F5AC7401EFC4A179A29FD3463] [SPRF][22/10/2013] (.Pas de propriétaire - Minecraft Launcher.) -- C:\Users\geoffrey\Desktop\Minecraft.exe [356352]
  ~ Files: 4 Legitimates Filtered in 00mn 00s
  
  ---\\ Recherche des packages WindowsInstaller (WIS) (O93) (NTFS)
  [MD5.6DDD32F0CFCD67822CE86664C6CC89F4] [WIS][17/08/2013] (.ReSoft Ltd. - Shopping Helper Smartbar.) -- C:\Windows\Installer\18c20c.msi [9158656] =>Hijacker.SmartBar
  ~ WIS: 75 Legitimates Filtered in 00mn 22s
  
  ---\\ Etat général des services not Microsoft (EGS) (SR=Running, SS=Stopped)
  SS - | Demand 09/10/2009 169312 | (AdobeActiveFileMonitor8.0) . (.Adobe Systems Incorporated.) - c:\Program Files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe
  SR - | Auto 11/05/2013 65640 | (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
  SS - | Demand 10/10/2013 257416 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
  SS - | Demand 10/07/1658 0 | (AIDA64Driver) . (...) - C:\Program Files (x86)\FinalWire\AIDA64 Extreme Edition\kerneld.x64
  SR - | Auto 07/09/2013 55624 | (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
  SR - | Auto 30/08/2013 46808 | (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
  SR - | Auto 30/08/2011 462184 | (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe
  SS - | Demand 03/08/2013 867080 | (FLEXnet Licensing Service) . (.Acresso Software Inc..) - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
  SS - | Demand 10/10/2009 238328 | (GameConsoleService) . (.WildTangent, Inc..) - C:\Program Files (x86)\Packard Bell Games\Packard Bell Game Console\GameConsoleService.exe
  SR - | Auto 28/08/2009 1150496 | (Greg_Service) . (.Acer Incorporated.) - C:\Program Files (x86)\Packard Bell\Registration\GregHSRW.exe
  SS - | Auto 08/08/2013 116648 | (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
  SS - | Demand 08/08/2013 116648 | (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
  SS - | Demand 08/08/2013 194032 | (gusvc) . (.Google.) - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
  SR - | Auto 01/10/2013 2746704 | (Hamachi2Svc) . (.LogMeIn Inc..) - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
  SR - | Auto 10/02/2009 116104 | (IJPLMSVC) . (...) - C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.exe
  SS - | Demand 23/10/2013 641352 | (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe
  SS - | Demand 18/06/2013 117144 | (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
  SS - | Demand 15/01/2010 935208 | (Nero BackItUp Scheduler 4.0) . (.Nero AG.) - C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
  SS - | Auto 05/09/2013 171680 | (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe
  SR - | Auto 29/01/2010 243232 | (Updater Service) . (.Acer Group.) - C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe
  SR - | Auto 14/07/2009 27136 | C:\Program Files (x86)\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
  SR - | Auto 10/07/1658 0 | (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe =>.Microsoft Corporation
  SR - | Auto 14/07/2009 27136 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
  ~ Services: Scanned in 00mn 26s
  
  ---\\ Recherche d'infection sur le Master Boot Record (MBR)(O80)
  Run by geoffrey at 27/10/2013 21:27:37
  ~ OS 64 not supported by MBR tool
  ~ MBR: 0 Legitimates Filtered in 00mn 00s
  
  ---\\ Recherche d'infection sur le Master Boot Record (MBRCheck)(O80)
  Written by ad13, http://ad13.geekstog
  Run by geoffrey at 27/10/2013 21:27:39
  
  ********* Dump file Name *********
  C:\PhysicalDisk0_MBR.bin
  ~ MBR: Scanned in 00mn 02s
  
  ---\\ Scan Additionnel (O88)
  Database Version : 12960 - (25/10/2013)
  Clés trouvées (Keys found) : 21
  Valeurs trouvées (Values found) : 3
  Dossiers trouvés (Folders found) : 2
  Fichiers trouvés (Files found) : 5
  
  [HKLM\Software\Google\Chrome\Extensions\lechbfhppigdgmodjlmcbiebfpogaeli] =>Adware.SaveShare^
  [HKLM\Software\Google\Chrome\Extensions\pbpohikckhbcljgombipcdoinkaedlfa] =>Spyware.SmartDisplay^
  [HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\24x7HELP] =>PUP.24x7Help^
  [HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\Boxore Client] =>Adware.Boxore^
  [HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\Browser Infrastructure Helper] =>Hijacker.SmartBar^
  [HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\Desk 365] =>Hijacker.22Find^
  [HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\Iminent] =>Adware.IMBooster^
  [HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\IminentMessenger] =>Adware.IMBooster^
  [HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\lollipop] =>Adware.Lollipop^
  [HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\NTRedirect] =>Hijacker.BabSolution^
  [HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\offerbox] =>PUP.OfferBox^
  [HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\PCFixSpeed] =>PUP.PCFixSpeed^
  [HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\SearchProtect] =>Toolbar.Conduit^
  [HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\SearchProtectAll] =>Toolbar.Conduit^
  [HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\tuto4pc_fr_62] =>PUP.Eorezo^
  [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375] =>PUP.Tarma
  [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5] =>PUP.Tarma
  [HKLM\Software\Classes\CLSID\{11111111-1111-1111-1111-110311341126}] =>PUP.CrossRider
  [HKLM\Software\Classes\CLSID\{22222222-2222-2222-2222-220322342226}] =>PUP.CrossRider
  [HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311341126}] =>PUP.CrossRider
  [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CA0054A5AB3EFFE4CB5660E44A1E7DCC] =>Adware.Boxore^
  [HKLM\Software\Microsoft\Internet Explorer\Toolbar]:{2318C2B1-4965-11d4-9B18-009027A5CD4F} =>Toolbar.Google^
  [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:SearchProtection =>Toolbar.Conduit^
  [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:tuto4pc_fr_62 =>PUP.Eorezo^
  C:\Users\geoffrey\AppData\Roaming\Mozilla\Firefox\Profiles\utk92q2b.default\7125a285-7e68-47aa-9d72-e81874f4d47e@d3fcdb92-135d-4a8a-8cf6-11e3b57c5fda.com =>Adware.PlusHD^
  C:\Users\geoffrey\AppData\Roaming\Mozilla\Firefox\Profiles\utk92q2b.default\jid1-FCM5fDwCW5M3AQ@jetpack =>Spyware.SmartDisplay^
  C:\Users\geoffrey\AppData\Local\Google\Chrome\User Data\Default\Extensions\lechbfhppigdgmodjlmcbiebfpogaeli =>Adware.SaveShare^
  C:\Users\geoffrey\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbpohikckhbcljgombipcdoinkaedlfa =>Spyware.SmartDisplay^
  C:\Users\geoffrey\AppData\Local\Temp\uninst1.exe =>Toolbar.Babylon^
  C:\Windows\Installer\18c20c.msi =>Hijacker.SmartBar^
  ~ Additionnel Scan: 342679 Items scanned in 01mn 11s
  
  ---\\ Récapitulatif des détections trouvées sur votre station
  ~ http://nicolascoolman.webs.com/apps/blog/show/31929570-adware-saveshare =>Adware.SaveShare
  ~ http://nicolascoolman.webs.com/apps/blog/show/32662245-spyware-smartdisplay =>Spyware.SmartDisplay
  ~ http://nicolascoolman.webs.com/apps/blog/show/28138048-adware-plushd =>Adware.PlusHD
  ~ http://nicolascoolman.webs.com/apps/blog/show/32384220-toolbar-google =>Toolbar.Google
  ~ http://nicolascoolman.webs.com/apps/blog/show/26631242-hijacker-qvo6 =>Hijacker.Qvo6
  ~ http://nicolascoolman.webs.com/apps/blog/show/29507721-toolbar-conduit =>Toolbar.Conduit
  ~ http://nicolascoolman.webs.com/apps/blog/show/27469224-pup-eorezo =>PUP.EoRezo
  ~ http://nicolascoolman.webs.com/apps/blog/show/27379491-toolbar-wajam =>Toolbar.Wajam
  ~ http://nicolascoolman.webs.com/apps/blog/show/33413667-pup-whilokii =>PUP.Whilokii
  ~ http://nicolascoolman.webs.com/apps/blog/show/32816468-adware-bonanzadeals =>Adware.BonanzaDeals
  ~ http://nicolascoolman.webs.com/apps/blog/show/32174815-pup-mypcbackup =>PUP.MyPCBackup
  ~ http://nicolascoolman.webs.com/apps/blog/show/33002268-pup-24x7help =>PUP.24x7Help
  ~ http://nicolascoolman.webs.com/apps/blog/show/26626977-adware-boxore =>Adware.Boxore
  ~ http://nicolascoolman.webs.com/apps/blog/show/26990375-hijacker-smartbar =>Hijacker.SmartBar
  ~ http://nicolascoolman.webs.com/apps/blog/show/26630379-hijacker-22find =>Hijacker.22Find
  ~ http://nicolascoolman.webs.com/apps/blog/show/26684723-adware-imbooster =>Adware.IMBooster
  ~ http://nicolascoolman.webs.com/apps/blog/show/26630902-adware-lollipop =>Adware.Lollipop
  ~ http://nicolascoolman.webs.com/apps/blog/show/26678994-hijacker-babsolution =>Hijacker.BabSolution
  ~ http://nicolascoolman.webs.com/apps/blog/show/28606910-pup-offerbox =>PUP.OfferBox
  ~ http://nicolascoolman.webs.com/apps/blog/show/33519836-pup-pcfixspeed =>PUP.PCFixSpeed
  ~ http://nicolascoolman.webs.com/apps/blog/show/26627369-toolbar-babylon =>Toolbar.Babylon
  ~ http://nicolascoolman.webs.com/apps/blog/show/29637859-toolbar-tarma =>PUP.Tarma
  ~ http://nicolascoolman.webs.com/apps/blog/show/27583526-pup-crossrider =>PUP.CrossRider
  ~ MSI: 23 link(s) detected in 01mn 11s
  
  ~ 1751 Legitimates filtered by white list
  End of the scan (530 lines in 07mn 09s)(0)
  
  0
Réponse 17 / 24
lilidurhone Contributeur sécurité
Mets à jour

Avast
Java 7 Update 25

https://www.commentcamarche.net/telecharger/developpement/12917-java-runtime-environment/
0
1. Geoffrey3613 Auteur
  
  Voila c'est bon
  
  0
Réponse 18 / 24
lilidurhone Contributeur sécurité
Refais un zhpdiag
0
1. Geoffrey3613 Auteur
  
  ~ Rapport de ZHPDiag v2013.10.25.66 - Nicolas Coolman (25/10/2013)
  ~ Lancé par geoffrey (28/10/2013 17:56:42)
  ~ Adresse du Site Web https://nicolascoolman.webs.com/
  ~ Forums gratuits d'Assistance à la désinfection : https://nicolascoolman.webs.com/
  ~ Traduit par Nicolas Coolman
  ~ Etat de la version :
  ~ Liste blanche : Activée par le programme
  ~ Elévation des Privilèges : OK
  ~ User Account Control (UAC): Deactivate by program
  
  ---\\ Navigateurs Internet
  MSIE: Internet Explorer v10.0.9200.16721
  MFIE: Mozilla Firefox 22.0
  GCIE: Google Chrome v30.0.1599.101 (Defaut)
  
  ---\\ Informations sur les produits Windows
  ~ Langage: Français
  Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)
  Windows Server License Manager Script : OK
  ~ Windows(R) 7, OEM_SLP channel
  System Locked Preinstallation (OEM_SLP) : OK
  Windows ID Activation : OK
  ~ Windows Partial Key : 7QJB7
  Windows License : OK
  ~ Windows Remaining Initializations Number : 3
  Software Protection Service (Protection logicielle) : OK
  Windows Automatic Updates : OK
  Windows Activation Technologies : OK
  
  ---\\ Logiciels de protection du système
  avast! Free Antivirus v8.0.1497.0
  Windows Defender W7
  
  ---\\ Logiciels d'optimisation du système
  
  ---\\ Logiciels de partage PeerToPeer
  
  ---\\ Surveillance de Logiciels
  Adobe Flash Player 11 Plugin
  Adobe Reader XI
  Java 7 Update 45
  
  ---\\ Informations sur le système
  ~ Processor: Intel64 Family 6 Model 22 Stepping 1, GenuineIntel
  ~ Operating System: 64 Bits
  Boot mode: Normal (Normal boot)
  Total RAM: 3037 MB (50% free)
  System Restore: Activé (Enable)
  System drive C: has 20 GB (13%) free of 140 GB
  
  ---\\ Mode de connexion au système
  ~ Computer Name: WENZ-PC
  ~ User Name: geoffrey
  ~ All Users Names: WENZ, nathalie, hugo, HomeGroupUser$, geoffrey, Administrateur,
  ~ Unselected Option: None
  Logged in as Administrator
  
  ---\\ Variables d'environnement
  ~ System Unit : C:\
  ~ %AppZHP% : C:\Users\geoffrey\AppData\Roaming\ZHP\
  ~ %AppData% : C:\Users\geoffrey\AppData\Roaming\
  ~ %Desktop% : C:\Users\geoffrey\Desktop\
  ~ %Favorites% : C:\Users\geoffrey\Favorites\
  ~ %LocalAppData% : C:\Users\geoffrey\AppData\Local\
  ~ %StartMenu% : C:\Users\geoffrey\AppData\Roaming\Microsoft\Windows\Start Menu\
  ~ %Windir% : C:\Windows\
  ~ %System% : C:\Windows\System32\
  
  ---\\ Enumération des unités disques
  C: Hard drive, Flash drive, Thumb drive (Free 20 Go of 140 Go)
  D: Hard drive, Flash drive, Thumb drive (Free 123 Go of 141 Go)
  E: CD-ROM drive (Not Inserted)
  F: Floppy drive, Flash card reader, USB Key (Free 4 Go of 14 Go)
  H: Floppy drive, Flash card reader, USB Key (Not Inserted)
  I: Floppy drive, Flash card reader, USB Key (Not Inserted)
  J: Floppy drive, Flash card reader, USB Key (Not Inserted)
  L: Floppy drive, Flash card reader, USB Key (Not Inserted)
  
  ---\\ Etat du Centre de Sécurité Windows
  [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
  ~ Security Center: 41 Legitimates Filtered in 00mn 00s
  
  ---\\ Recherche particulière de fichiers génériques
  [MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorateur Windows.) (.25/02/2011 - 07:19:30.) -- C:\Windows\Explorer.exe [2871808]
  [MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 - 02:39:52.) -- C:\Windows\System32\Wininit.exe [129024]
  [MD5.D28B35DE88D27EFB27DF4B1E8319E3C0] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.22/09/2013 - 23:55:10.) -- C:\Windows\System32\wininet.dll [2241024]
  [MD5.1151B1BAA6F350B1DB6598E0FEA7C457] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.20/11/2010 - 14:25:30.) -- C:\Windows\System32\Winlogon.exe [390656]
  [MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Bibliothèque de licences.) (.20/11/2010 - 14:27:26.) -- C:\Windows\System32\sppcomapi.dll [232448]
  [MD5.314C17917AC8523EC77A710215012A65] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.14/09/2013 - 02:10:19.) -- C:\Windows\system32\Drivers\AFD.sys [497152]
  [MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 - 02:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128]
  [MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/07/2009 - 00:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160]
  [MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.20/11/2010 - 10:19:21.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456]
  [MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.20/11/2010 - 10:26:32.) -- C:\Windows\system32\Drivers\DfsC.sys [102400]
  [MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.20/11/2010 - 11:43:43.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368]
  [MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) (.14/07/2009 - 00:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472]
  [MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.14/07/2009 - 01:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224]
  [MD5.A5D9106A73DC88564C825D317CAC68AC] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.27/04/2011 - 03:40:40.) -- C:\Windows\system32\Drivers\MRxSmb.sys [158208]
  [MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) (.20/11/2010 - 10:23:20.) -- C:\Windows\system32\Drivers\netBT.sys [261632]
  [MD5.B98F8C6E31CD07B2E6F71F7F648E38C0] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.12/04/2013 - 15:45:08.) -- C:\Windows\system32\Drivers\ntfs.sys [1656680]
  [MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/07/2009 - 01:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280]
  [MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.20/11/2010 - 11:52:35.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [129536]
  [MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.14/07/2009 - 01:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184]
  [MD5.DDAD5A7AB24D8B65F8D724F5C20FD806] - (.Microsoft Corporation - TDI Translation Driver.) (.20/11/2010 - 10:21:56.) -- C:\Windows\system32\Drivers\tdx.sys [119296]
  [MD5.0D08D2F3B3FF84E433346669B5E0F639] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.20/11/2010 - 14:34:02.) -- C:\Windows\system32\Drivers\volsnap.sys [295808]
  ~ Generic Processes: Scanned in 00mn 00s
  
  ---\\ Etat des fichiers cachés (Caché/Total)
  ~ Mes images (My Pictures) : 1/8
  ~ Mes musiques (My Musics) : 7/30
  ~ Mes Videos (My Videos) : 1/23
  ~ Mes Favoris (My Favorites) : 1/26
  ~ Mes Documents (My Documents) : 1/2
  ~ Mon Bureau (My Desktop) : 1/367
  ~ Menu demarrer (Programs) : 1/23
  ~ Hidden Files: Scanned in 00mn 01s
  
  ---\\ Processus lancés
  [MD5.CBC7D8E5416AD30CF16DC2FD4A6AA399] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe [4858968] [PID.11184]
  [MD5.5B6E8E09BE6401A7E022F52FDFCB2FF8] - (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336] [PID.12140]
  [MD5.3E399A1328181C2A352472369DE2A93A] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [844752] [PID.11280]
  [MD5.CC82669653807DFC27DF3B73ECE5EECD] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [8135168] [PID.5504]
  [MD5.9330941C8F6DF417F6DBBE998DB6687E] - (.AVAST Software - avast! Service.) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808] [PID.1160]
  [MD5.ADDA5E1951B90D3D23C56D3CF0622ADC] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [65640] [PID.1516]
  [MD5.30E3850F303EAE5C364782EA78579CC9] - (.Apple Inc. - MobileDeviceService.) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [55624] [PID.1628]
  [MD5.816FD5A6F3C2F3D600900096632FC60E] - (.Acer Incorporated - Global Registration Service.) -- C:\Program Files (x86)\Packard Bell\Registration\GregHSRW.exe [1150496] [PID.1812]
  [MD5.A06EFD4965F8A3F97A8C9A291D032678] - (.Pas de propriétaire - Inkjet Printer/Scanner/Fax Extended Servey.) -- C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.exe [116104] [PID.2020]
  [MD5.F9EC9ACD504D823D9B9CA98A4F8D3CA2] - (.Acer Group - Updater Service.) -- C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe [243232] [PID.1456]
  ~ Processes Running: Scanned in 00mn 00s
  
  ---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
  C:\Users\geoffrey\AppData\Local\Google\Chrome\User Data\Default\Preferences
  G2 - GCE: Preference [User Data\Default] [lechbfhppigdgmodjlmcbiebfpogaeli] savvEnsharee v.5.10 (Activé) =>Adware.SaveShare
  G2 - GCE: Preference [User Data\Default] [pbpohikckhbcljgombipcdoinkaedlfa] Smart Display v.1.6 (Activé) =>Spyware.SmartDisplay
  ~ Google Browser: 18 Legitimates Filtered in 00mn 25s
  
  ---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
  C:\Users\geoffrey\AppData\Roaming\Mozilla\Firefox\Profiles\utk92q2b.default\prefs.js
  M2 - MFEP: prefs.js [geoffrey - utk92q2b.default\7125a285-7e68-47aa-9d72-e81874f4d47e@d3fcdb92-135d-4a8a-8cf6-11e3b57c5fda.com] [] Plus-HD-2.3 v (..) =>Adware.PlusHD
  M2 - MFEP: prefs.js [geoffrey - utk92q2b.default\jid1-FCM5fDwCW5M3AQ@jetpack] [] Smart Display v1.2 (..) =>Spyware.SmartDisplay
  P2 - FPN: [HKCU] [pandonetworks.com/PandoWebPlugin] - (...) -- C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (.not file.)
  ~ Firefox Browser: 20 Legitimates Filtered in 00mn 00s
  
  ---\\ Internet Explorer, Proxy Management (R5)
  R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
  R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
  R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
  R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
  R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
  ~ Proxy management: Scanned in 00mn 00s
  
  ---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
  F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
  F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
  F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
  ~ Keys: Scanned in 00mn 00s
  
  ---\\ Hosts file redirection (O1)
  ~ Le fichier hosts est sain (The hosts file is clean).
  ~ Hosts File: Scanned in 00mn 00s
  ~ Nombre de lignes (Lines number): 21
  
  ---\\ Internet Explorer Toolbars (O3)
  O3 - Toolbar: (no name) [64Bits] - [HKLM]{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} Clé orpheline
  O3 - Toolbar: Google Toolbar [64Bits] - [HKLM]{2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll =>Toolbar.Google
  O3 - Toolbar\WebBrowser: (no name) [64Bits] - [HKCU]{2318C2B1-4965-11D4-9B18-009027A5CD4F} Clé orpheline
  ~ Toolbar: Scanned in 00mn 00s
  
  ---\\ Autres liens utilisateurs (O4)
  O4 - GS\Desktop [Public]: FlvPlayer.lnk . (...) -- C:\Program Files (x86)\FLVPlayer\FLVPlayerApp.exe
  O4 - GS\Desktop [Public]: Google SketchUp 8.lnk . (.Google, Inc. - SketchUp Application.) -- C:\Program Files (x86)\Google\Google SketchUp 8\SketchUp.exe
  O4 - GS\Desktop [Public]: RollerCoaster Tycoon 3.lnk . (.Frontier Developments Ltd - RollerCoaster Tycoon® 3.) -- C:\Program Files (x86)\Atari\RollerCoaster Tycoon 3\RCT3plus.exe
  O4 - GS\Program [Public]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
  O4 - GS\QuickLaunch [WENZ]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe http://www.qvo6.com =>Hijacker.Qvo6
  O4 - GS\QuickLaunch [WENZ]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe http://www.qvo6.com =>Hijacker.Qvo6
  O4 - GS\QuickLaunch [WENZ]: Packard Bell Games.lnk . (.WildTangent, Inc. - GameConsole.) -- C:\Program Files (x86)\Packard Bell Games\Packard Bell Game Console\GameConsole-wt.exe
  O4 - GS\QuickLaunch [WENZ]: qvo6.lnk . (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe http://www.qvo6.com =>Hijacker.Qvo6
  O4 - GS\QuickLaunch [WENZ]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) -- C:\Users\geoffrey\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent
  O4 - GS\TaskBar [WENZ]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe http://www.qvo6.com =>Hijacker.Qvo6
  O4 - GS\TaskBar [WENZ]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe http://www.qvo6.com =>Hijacker.Qvo6
  O4 - GS\TaskBar [WENZ]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) -- C:\Users\geoffrey\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent
  O4 - GS\Program [WENZ]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe http://www.qvo6.com =>Hijacker.Qvo6
  O4 - GS\SystemTools [WENZ]: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe http://www.qvo6.com =>Hijacker.Qvo6
  O4 - GS\Desktop [WENZ]: Auslogics DiskDefrag.lnk . (.Auslogics - Disk Defrag.) -- C:\Program Files (x86)\Auslogics\DiskDefrag\DiskDefrag.exe
  O4 - GS\Desktop [WENZ]: Internet Checkers.lnk - Clé orpheline
  O4 - GS\Desktop [WENZ]: Media Player Classic - HC.lnk . (.MPC-HC Team - Media Player Classic - Home Cinema.) -- C:\Program Files (x86)\XP Codec Pack\mpc-hc\mpc-hc.exe
  O4 - GS\Desktop [WENZ]: Microsoft Works.lnk . (...) -- C:\Windows\Installer\{A3088CD2-612B-11D3-AF43-00C04F443448}\FB931E91.exe
  O4 - GS\Desktop [WENZ]: Packard Bell Games.lnk . (.WildTangent, Inc. - GameConsole.) -- C:\Program Files (x86)\Packard Bell Games\Packard Bell Game Console\GameConsole-wt.exe
  O4 - GS\Desktop [WENZ]: Solitaire.lnk - Clé orpheline
  O4 - GS\Desktop [WENZ]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) -- C:\Users\geoffrey\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent
  O4 - GS\QuickLaunch [nathalie]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  O4 - GS\QuickLaunch [nathalie]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
  O4 - GS\TaskBar [nathalie]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  O4 - GS\TaskBar [nathalie]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
  O4 - GS\Program [nathalie]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
  O4 - GS\SystemTools [nathalie]: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
  O4 - GS\Desktop [nathalie]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  O4 - GS\QuickLaunch [hugo]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  O4 - GS\QuickLaunch [hugo]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
  O4 - GS\QuickLaunch [hugo]: Packard Bell Games.lnk . (.WildTangent, Inc. - GameConsole.) -- C:\Program Files (x86)\Packard Bell Games\Packard Bell Game Console\GameConsole-wt.exe
  O4 - GS\TaskBar [hugo]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
  O4 - GS\Program [hugo]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
  O4 - GS\SystemTools [hugo]: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
  O4 - GS\QuickLaunch [geoffrey]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  O4 - GS\QuickLaunch [geoffrey]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
  O4 - GS\TaskBar [geoffrey]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  O4 - GS\Program [geoffrey]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
  O4 - GS\SystemTools [geoffrey]: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
  O4 - GS\Desktop [geoffrey]: Earthquake - Raccourci.lnk . (.Blizzard Entertainment - World of Warcraft Retail.) -- C:\Users\geoffrey\Desktop\Earthquake\Earthquake.exe
  O4 - GS\Desktop [geoffrey]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  O4 - GS\Desktop [geoffrey]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) -- C:\Users\geoffrey\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent
  ~ Global Startup: 125 Legitimates Filtered in 00mn 12s
  
  ---\\ Applications lancées au démarrage du sytème (O4)
  O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\Windows\system32\hkcmd.exe
  O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\Windows\system32\igfxpers.exe
  O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\Windows\system32\igfxtray.exe
  O4 - HKCU\..\Run: [SearchProtection] C:\Users\geoffrey\AppData\Roaming\Search Protection\SearchProtection.exe (.not file.) =>Toolbar.Conduit
  O4 - HKCU\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe =>Toolbar.Google
  O4 - HKLM\..\Wow6432Node\Run: [avast] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\avastUI.exe
  O4 - HKLM\..\Wow6432Node\Run: [tuto4pc_fr_62] Clé orpheline =>PUP.Eorezo
  O4 - HKLM\..\Wow6432Node\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe =>.Oracle Corporation
  O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation
  O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation
  O4 - HKUS\S-1-5-18\..\RunOnce: [SPReview] . (.Microsoft Corporation - SP Reviewer.) -- C:\Windows\System32\SPReview\SPReview.exe =>.Microsoft Corporation
  O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation
  O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation
  O4 - HKUS\S-1-5-21-3201979416-3185207537-2710416600-1004\..\Run: [SearchProtection] C:\Users\geoffrey\AppData\Roaming\Search Protection\SearchProtection.exe (.not file.) =>Toolbar.Conduit
  O4 - HKUS\S-1-5-21-3201979416-3185207537-2710416600-1004\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe =>Toolbar.Google
  ~ Application: Scanned in 00mn 00s
  
  ---\\ Modification Domaine/Adresses DNS (O17)
  O17 - HKLM\System\CCS\Services\Tcpip\..\{FA4AA3A3-DDC3-45F2-9645-FF26903C23FA}: DhcpNameServer = 192.168.1.1 192.168.1.1
  O17 - HKLM\System\CS1\Services\Tcpip\..\{FA4AA3A3-DDC3-45F2-9645-FF26903C23FA}: DhcpNameServer = 192.168.1.1 192.168.1.1
  O17 - HKLM\System\CS2\Services\Tcpip\..\{FA4AA3A3-DDC3-45F2-9645-FF26903C23FA}: DhcpNameServer = 192.168.1.1 192.168.1.1
  O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 192.168.1.1
  ~ Domain: Scanned in 00mn 00s
  
  ---\\ Protocole additionnel (O18)
  O18 - Handler: wlmailhtml [64Bits] - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} . (...) --
  O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation
  ~ Protocole Additionnel: Scanned in 00mn 00s
  
  ---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
  O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\Windows\System32\igfxdev.dll
  ~ Winlogon: Scanned in 00mn 00s
  
  ---\\ HKCU & HKLM Software Keys
  [HKCU\Software\Pando Networks]
  [HKLM\Software\Wow6432Node\Pando Networks]
  ~ Key Software: 216 Legitimates Filtered in 00mn 01s
  
  ---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
  O43 - CFD: 11/10/2013 - 22:18:21 - [0] ----D C:\Program Files (x86)\Pando Networks
  O43 - CFD: 28/10/2013 - 13:08:02 - [-331,085] ----D C:\Program Files (x86)\Winter Sports 2011
  O43 - CFD: 07/08/2013 - 19:10:09 - [0] ----D C:\Users\geoffrey\AppData\Roaming\Reg
  ~ Program Folder: 170 Legitimates Filtered in 00mn 45s
  
  ---\\ Derniers fichiers créés dans Windows Prefetcher (O45)
  O45 - LFCP:[MD5.3008E5BB74C040A7A6951F65ABE6787A] - 23/10/2013 - 21:24:49 ---A- - C:\Windows\Prefetch\WAJAM_VALIDATE.EXE-C7AEBE1C.pf =>Toolbar.Wajam
  O45 - LFCP:[MD5.57C2E35D56A6FA6AF1F7B4347CD50668] - 23/10/2013 - 21:25:02 ---A- - C:\Windows\Prefetch\DOKOTB.EXE-C0C91AEE.pf
  O45 - LFCP:[MD5.2768823528CA9000019887E0BE9516A1] - 23/10/2013 - 21:25:02 ---A- - C:\Windows\Prefetch\WHILOKII_IS.EXE-72B27CC5.pf =>PUP.Whilokii
  O45 - LFCP:[MD5.1716515EA8354B014D428BD9FBAF4425] - 23/10/2013 - 21:25:11 ---A- - C:\Windows\Prefetch\BD.EXE-47B87377.pf
  O45 - LFCP:[MD5.4F0B0977CDD9A28C30AC8ECF1C1BE829] - 23/10/2013 - 21:25:17 ---A- - C:\Windows\Prefetch\UNINST.EXE-C5B87011.pf
  O45 - LFCP:[MD5.63CCFBDCC0D6E20508F8089274093223] - 23/10/2013 - 21:25:19 ---A- - C:\Windows\Prefetch\SQLITE3.EXE-F988031F.pf
  O45 - LFCP:[MD5.115FCB1FFEA26E7A1942FE99BB4AAA7B] - 23/10/2013 - 21:25:22 ---A- - C:\Windows\Prefetch\RCPSETUP_ADPPI_ADPPI.EXE-6279987B.pf
  O45 - LFCP:[MD5.F86190AF3504C2978963DA93CAF49A39] - 23/10/2013 - 21:25:22 ---A- - C:\Windows\Prefetch\RCPSETUP_ADPPI_ADPPI.TMP-2D4F5F2F.pf
  O45 - LFCP:[MD5.54A3524A614A2CA4B7002D37A83767E0] - 23/10/2013 - 21:25:33 ---A- - C:\Windows\Prefetch\BONANZADEALSLIVE.EXE-91518192.pf =>Adware.BonanzaDeals
  O45 - LFCP:[MD5.63C8252015AC096791AEA498CBC31C3B] - 23/10/2013 - 21:25:33 ---A- - C:\Windows\Prefetch\CLOUD_BACKUP_SETUP_INTL.EXE-46E095F2.pf
  O45 - LFCP:[MD5.AFA8B34439996A104108BBB2CE9D05C5] - 23/10/2013 - 21:25:47 ---A- - C:\Windows\Prefetch\BONANZADEALSLIVE.EXE-918DAA3F.pf =>Adware.BonanzaDeals
  O45 - LFCP:[MD5.FF82D1BAE96EDD99C5A2F79E051F8D35] - 23/10/2013 - 21:25:52 ---A- - C:\Windows\Prefetch\677681~1.EXE-CEA79D1F.pf
  O45 - LFCP:[MD5.BBBBC653425381646F53B36ACA2A5D7C] - 23/10/2013 - 21:26:02 ---A- - C:\Windows\Prefetch\UPDATEWHILOKII.EXE-F72E37F5.pf =>PUP.Whilokii
  O45 - LFCP:[MD5.35A5C9443209A8FA46429ADA37DE101F] - 25/10/2013 - 16:52:51 ---A- - C:\Windows\Prefetch\MYPC BACKUP.EXE-B5EA9514.pf =>PUP.MyPCBackup
  O45 - LFCP:[MD5.C3944F150868404E938951582215CA4B] - 25/10/2013 - 19:50:25 ---A- - C:\Windows\Prefetch\BONANZADEALSLIVE.EXE-67A98E0D.pf =>Adware.BonanzaDeals
  O45 - LFCP:[MD5.8A087E64FC85039F5C88FDB6E35F0647] - 27/10/2013 - 00:27:58 ---A- - C:\Windows\Prefetch\CHKRZM.EXE-8FC0DC2D.pf
  ~ Prefetcher: 154 Legitimates Filtered in 00mn 01s
  
  ---\\ Clé de registre Shell MountPoints2 (MPKS) (O51)
  O51 - MPSK:{48363f05-fc1a-11e2-b301-806e6f6e6963}\AutoRun\command. (...) -- E:\Autorun.exe (.not file.)
  ~ Keys: Scanned in 00mn 00s
  
  ---\\ Enumération des clés de registre StartupReg (SMSR) (O53)
  O53 - SMSR:HKLM\...\startupreg\24x7HELP [Key] . (...) -- C:\Program Files (x86)\24x7Help\App24x7Help.exe (.not file.) =>PUP.24x7Help
  O53 - SMSR:HKLM\...\startupreg\Boxore Client [Key] . (...) -- C:\Program Files (x86)\Boxore\BoxoreClient\boxore.exe (.not file.) =>Adware.Boxore
  O53 - SMSR:HKLM\...\startupreg\Browser Infrastructure Helper [Key] . (...) -- C:\Users\WENZ\AppData\Local\Smartbar\Application\Smartbar.exe (.not file.) =>Hijacker.SmartBar
  O53 - SMSR:HKLM\...\startupreg\ConduitFloatingPlugin_biahaobfpkgeiomkihcdgknebbhadonc [Key] . (...) -- C:\Program Files (x86)\Conduit\CT3307695\plugins\TBVerifier.dll (.not file.)
  O53 - SMSR:HKLM\...\startupreg\Desk 365 [Key] . (...) -- C:\Program Files (x86)\Desk 365\desk365.exe (.not file.) =>Hijacker.22Find
  O53 - SMSR:HKLM\...\startupreg\Iminent [Key] . (...) -- C:\Program Files (x86)\Iminent\Iminent.exe (.not file.) =>Adware.IMBooster
  O53 - SMSR:HKLM\...\startupreg\IminentMessenger [Key] . (...) -- C:\Program Files (x86)\Iminent\Iminent.Messengers.exe (.not file.) =>Adware.IMBooster
  O53 - SMSR:HKLM\...\startupreg\lollipop [Key] . (...) -- c:\users\wenz\appdata\local\lollipop\lollipop.exe (.not file.) =>Adware.Lollipop
  O53 - SMSR:HKLM\...\startupreg\NTRedirect [Key] . (...) -- C:\Users\WENZ\AppData\Roaming\BabSolution\Shared\enhancedNT.dll (.not file.) =>Hijacker.BabSolution
  O53 - SMSR:HKLM\...\startupreg\offerbox [Key] . (...) -- C:\Program Files (x86)\OfferBox\OfferBox.exe (.not file.) =>PUP.OfferBox
  O53 - SMSR:HKLM\...\startupreg\PCFixSpeed [Key] . (...) -- C:\Program Files (x86)\PCFixSpeed\PCFixTray.exe (.not file.) =>PUP.PCFixSpeed
  O53 - SMSR:HKLM\...\startupreg\SearchProtect [Key] . (...) -- C:\Users\WENZ\AppData\Roaming\SearchProtect\bin\cltmng.exe (.not file.) =>Toolbar.Conduit
  O53 - SMSR:HKLM\...\startupreg\SearchProtectAll [Key] . (...) -- C:\Program Files (x86)\SearchProtect\bin\cltmng.exe (.not file.) =>Toolbar.Conduit
  O53 - SMSR:HKLM\...\startupreg\SuperCopier2.exe [Key] . (...) -- C:\Program Files (x86)\SuperCopier2\SuperCopier2.exe (.not file.)
  O53 - SMSR:HKLM\...\startupreg\tuto4pc_fr_62 [Key] . (...) -- C:\Program Files (x86)\tuto4pc_fr_62\tuto4pc_fr_62.exe (.not file.) =>PUP.Eorezo
  ~ SMSR Keys: 29 Legitimates Filtered in 00mn 00s
  
  ---\\ Enumération des clés de registre PoliciesSystem (MWPS) (O55)
  O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
  O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
  ~ MWPS: 16 Legitimates Filtered in 00mn 00s
  
  ---\\ Enumération des clés de registre PoliciesExplorer (MWPE) (O56)
  O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1
  ~ MWPE Keys: 3 Legitimates Filtered in 00mn 00s
  
  ---\\ Liste des pilotes du système (SDL) (O58)
  O58 - SDL:[MD5.A3769020F7E8A70FD3E824C050F33306] - 24/02/2010 - 11:20:40 ---A- . (.Protect Software GmbH - ProtectDisc x64/x86 Hybrid Driver.) -- C:\Windows\System32\Drivers\acedrv11.sys [191616]
  ~ Drivers: 16 Legitimates Filtered in 00mn 00s
  
  ---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61)
  O61 - LFC: 26/10/2013 - 17:59:18 ---A- . (...) -- C:\Users\geoffrey\AppData\Local\Google\Chrome\User Data\Certificate Revocation Lists [260408]
  O61 - LFC: 26/10/2013 - 17:59:59 ---A- . (...) -- C:\Users\geoffrey\Downloads\adwcleaner.exe [1060070]
  O61 - LFC: 27/10/2013 - 17:59:58 ---A- . (...) -- C:\Users\geoffrey\AppData\Roaming\ZHP\ZHPADSReport.txt [351] =>.Nicolas Coolman
  O61 - LFC: 27/10/2013 - 17:59:59 ---A- . (...) -- C:\Users\geoffrey\AppData\Roaming\ZHP\ZHPDiag.txt [40859] =>.Nicolas Coolman
  O61 - LFC: 28/10/2013 - 17:59:29 ---A- . (...) -- C:\Users\geoffrey\AppData\Local\Google\Chrome\User Data\Local State [44228]
  O61 - LFC: 28/10/2013 - 17:59:40 ---A- . (...) -- C:\Users\geoffrey\AppData\Roaming\app\Jerakine_lang.dat [5079]
  O61 - LFC: 28/10/2013 - 17:59:41 ---A- . (...) -- C:\Users\geoffrey\AppData\Roaming\D2Info0 [117]
  O61 - LFC: 28/10/2013 - 17:59:58 ---A- . (...) -- C:\Users\geoffrey\AppData\Roaming\ZHP\Log.txt [84630] =>.Nicolas Coolman
  O61 - LFC: 28/10/2013 - 17:59:58 ---A- . (...) -- C:\Users\geoffrey\AppData\Roaming\ZHP\TestsZHPDiag.txt [2936] =>.Nicolas Coolman
  ~ 12 Fichiers temporaires (Temporary files)
  ~ Files: 659 Legitimates Filtered in 00mn 53s
  
  ---\\ Liste des outils de désinfection (LATC) (O63)
  O63 - Logiciel: ZHPDiag 2013 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 =>.Nicolas Coolman
  ~ ADS: Scanned in 00mn 00s
  
  ---\\ Associations Shell Spawning (O67)
  O67 - Shell Spawning: <.html> <ChromeHTML>[HKCU\..\open\Command] (.Not Key.)
  ~ FASS Keys: 19 Legitimates Filtered in 00mn 00s
  
  ---\\ Menu de démarrage Internet (SMI) (O68)
  O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
  O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  O68 - StartMenuInternet: <Google Chrome.BTNYCY4CGGSFGEPYEPPKF7JTXE> <Google Chrome>[HKLM\..\Shell\open\Command] (...) -- C:\Users\geoffrey\AppData\Local\Google\Chrome\Application\chrome.exe" http://www.qvo6.com =>Hijacker.Qvo6
  O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
  ~ Keys: Scanned in 00mn 00s
  
  ---\\ Recherche d'infection sur les navigateurs internet (SBI) (O69)
  O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - https://www.bing.com/?toHttps=1&redig=69DA0EF8272048D9864AF4DB37211DE8
  O69 - SBI: SearchScopes [HKCU] {4AA8D98D-83D2-3B0B-23B0-667AAFFB4606} - (Google) - https://www.google.com/?gws_rd=ssl
  O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} - (Google) - https://www.google.com/?gws_rd=ssl
  O69 - SBI: SearchScopes [HKCU] {B7A052D6-433A-42CB-9165-87E9BD100337} - (Yahoo! Search) - https://fr.search.yahoo.com/
  ~ Keys: Scanned in 00mn 00s
  
  ---\\ Recherche particulière à la racine du système (SPRF) (O84)
  [MD5.D07444BDB22757545CD2FA91654F2FD0] [SPRF][24/08/2013] (...) -- C:\Users\geoffrey\AppData\Local\Temp\Quarantine.exe [328019]
  [MD5.3C74C26999F2060BC6302448F173A342] [SPRF][28/08/2013] (.Babylon Ltd. - Uninstaller Application.) -- C:\Users\geoffrey\AppData\Local\Temp\uninst1.exe [340464] =>Toolbar.Babylon
  [MD5.ACE60E0F5AC7401EFC4A179A29FD3463] [SPRF][22/10/2013] (.Pas de propriétaire - Minecraft Launcher.) -- C:\Users\geoffrey\Desktop\Minecraft.exe [356352]
  ~ Files: 4 Legitimates Filtered in 00mn 00s
  
  ---\\ Recherche des packages WindowsInstaller (WIS) (O93) (NTFS)
  [MD5.6DDD32F0CFCD67822CE86664C6CC89F4] [WIS][17/08/2013] (.ReSoft Ltd. - Shopping Helper Smartbar.) -- C:\Windows\Installer\18c20c.msi [9158656] =>Hijacker.SmartBar
  ~ WIS: 75 Legitimates Filtered in 00mn 22s
  
  ---\\ Etat général des services not Microsoft (EGS) (SR=Running, SS=Stopped)
  SS - | Demand 09/10/2009 169312 | (AdobeActiveFileMonitor8.0) . (.Adobe Systems Incorporated.) - c:\Program Files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe
  SR - | Auto 11/05/2013 65640 | (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
  SS - | Demand 10/10/2013 257416 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
  SS - | Demand 10/07/1658 0 | (AIDA64Driver) . (...) - C:\Program Files (x86)\FinalWire\AIDA64 Extreme Edition\kerneld.x64
  SR - | Auto 07/09/2013 55624 | (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
  SR - | Auto 30/08/2013 46808 | (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
  SR - | Auto 30/08/2011 462184 | (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe
  SS - | Demand 03/08/2013 867080 | (FLEXnet Licensing Service) . (.Acresso Software Inc..) - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
  SS - | Demand 10/10/2009 238328 | (GameConsoleService) . (.WildTangent, Inc..) - C:\Program Files (x86)\Packard Bell Games\Packard Bell Game Console\GameConsoleService.exe
  SR - | Auto 28/08/2009 1150496 | (Greg_Service) . (.Acer Incorporated.) - C:\Program Files (x86)\Packard Bell\Registration\GregHSRW.exe
  SS - | Auto 08/08/2013 116648 | (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
  SS - | Demand 08/08/2013 116648 | (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
  SS - | Demand 08/08/2013 194032 | (gusvc) . (.Google.) - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
  SR - | Auto 01/10/2013 2746704 | (Hamachi2Svc) . (.LogMeIn Inc..) - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
  SR - | Auto 10/02/2009 116104 | (IJPLMSVC) . (...) - C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.exe
  SS - | Demand 23/10/2013 641352 | (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe
  SS - | Demand 18/06/2013 117144 | (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
  SS - | Demand 15/01/2010 935208 | (Nero BackItUp Scheduler 4.0) . (.Nero AG.) - C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
  SS - | Auto 05/09/2013 171680 | (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe
  SR - | Auto 29/01/2010 243232 | (Updater Service) . (.Acer Group.) - C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe
  SR - | Auto 14/07/2009 27136 | C:\Program Files (x86)\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
  SR - | Auto 10/07/1658 0 | (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe =>.Microsoft Corporation
  SR - | Auto 14/07/2009 27136 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
  ~ Services: Scanned in 00mn 25s
  
  ---\\ Recherche d'infection sur le Master Boot Record (MBR)(O80)
  Run by geoffrey at 28/10/2013 18:01:51
  ~ OS 64 not supported by MBR tool
  ~ MBR: 0 Legitimates Filtered in 00mn 00s
  
  ---\\ Recherche d'infection sur le Master Boot Record (MBRCheck)(O80)
  Written by ad13, http://ad13.geekstog
  Run by geoffrey at 28/10/2013 18:01:53
  
  ********* Dump file Name *********
  C:\PhysicalDisk0_MBR.bin
  ~ MBR: Scanned in 00mn 02s
  
  ---\\ Scan Additionnel (O88)
  Database Version : 12960 - (25/10/2013)
  Clés trouvées (Keys found) : 21
  Valeurs trouvées (Values found) : 3
  Dossiers trouvés (Folders found) : 2
  Fichiers trouvés (Files found) : 5
  
  [HKLM\Software\Google\Chrome\Extensions\lechbfhppigdgmodjlmcbiebfpogaeli] =>Adware.SaveShare^
  [HKLM\Software\Google\Chrome\Extensions\pbpohikckhbcljgombipcdoinkaedlfa] =>Spyware.SmartDisplay^
  [HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\24x7HELP] =>PUP.24x7Help^
  [HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\Boxore Client] =>Adware.Boxore^
  [HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\Browser Infrastructure Helper] =>Hijacker.SmartBar^
  [HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\Desk 365] =>Hijacker.22Find^
  [HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\Iminent] =>Adware.IMBooster^
  [HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\IminentMessenger] =>Adware.IMBooster^
  [HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\lollipop] =>Adware.Lollipop^
  [HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\NTRedirect] =>Hijacker.BabSolution^
  [HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\offerbox] =>PUP.OfferBox^
  [HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\PCFixSpeed] =>PUP.PCFixSpeed^
  [HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\SearchProtect] =>Toolbar.Conduit^
  [HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\SearchProtectAll] =>Toolbar.Conduit^
  [HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\tuto4pc_fr_62] =>PUP.Eorezo^
  [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375] =>PUP.Tarma
  [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5] =>PUP.Tarma
  [HKLM\Software\Classes\CLSID\{11111111-1111-1111-1111-110311341126}] =>PUP.CrossRider
  [HKLM\Software\Classes\CLSID\{22222222-2222-2222-2222-220322342226}] =>PUP.CrossRider
  [HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311341126}] =>PUP.CrossRider
  [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CA0054A5AB3EFFE4CB5660E44A1E7DCC] =>Adware.Boxore^
  [HKLM\Software\Microsoft\Internet Explorer\Toolbar]:{2318C2B1-4965-11d4-9B18-009027A5CD4F} =>Toolbar.Google^
  [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:SearchProtection =>Toolbar.Conduit^
  [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:tuto4pc_fr_62 =>PUP.Eorezo^
  C:\Users\geoffrey\AppData\Roaming\Mozilla\Firefox\Profiles\utk92q2b.default\7125a285-7e68-47aa-9d72-e81874f4d47e@d3fcdb92-135d-4a8a-8cf6-11e3b57c5fda.com =>Adware.PlusHD^
  C:\Users\geoffrey\AppData\Roaming\Mozilla\Firefox\Profiles\utk92q2b.default\jid1-FCM5fDwCW5M3AQ@jetpack =>Spyware.SmartDisplay^
  C:\Users\geoffrey\AppData\Local\Google\Chrome\User Data\Default\Extensions\lechbfhppigdgmodjlmcbiebfpogaeli =>Adware.SaveShare^
  C:\Users\geoffrey\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbpohikckhbcljgombipcdoinkaedlfa =>Spyware.SmartDisplay^
  C:\Users\geoffrey\AppData\Local\Temp\uninst1.exe =>Toolbar.Babylon^
  C:\Windows\Installer\18c20c.msi =>Hijacker.SmartBar^
  ~ Additionnel Scan: 343119 Items scanned in 01mn 26s
  
  ---\\ Récapitulatif des détections trouvées sur votre station
  ~ http://nicolascoolman.webs.com/apps/blog/show/31929570-adware-saveshare =>Adware.SaveShare
  ~ http://nicolascoolman.webs.com/apps/blog/show/32662245-spyware-smartdisplay =>Spyware.SmartDisplay
  ~ http://nicolascoolman.webs.com/apps/blog/show/28138048-adware-plushd =>Adware.PlusHD
  ~ http://nicolascoolman.webs.com/apps/blog/show/32384220-toolbar-google =>Toolbar.Google
  ~ http://nicolascoolman.webs.com/apps/blog/show/26631242-hijacker-qvo6 =>Hijacker.Qvo6
  ~ http://nicolascoolman.webs.com/apps/blog/show/29507721-toolbar-conduit =>Toolbar.Conduit
  ~ http://nicolascoolman.webs.com/apps/blog/show/27469224-pup-eorezo =>PUP.EoRezo
  ~ http://nicolascoolman.webs.com/apps/blog/show/27379491-toolbar-wajam =>Toolbar.Wajam
  ~ http://nicolascoolman.webs.com/apps/blog/show/33413667-pup-whilokii =>PUP.Whilokii
  ~ http://nicolascoolman.webs.com/apps/blog/show/32816468-adware-bonanzadeals =>Adware.BonanzaDeals
  ~ http://nicolascoolman.webs.com/apps/blog/show/32174815-pup-mypcbackup =>PUP.MyPCBackup
  ~ http://nicolascoolman.webs.com/apps/blog/show/33002268-pup-24x7help =>PUP.24x7Help
  ~ http://nicolascoolman.webs.com/apps/blog/show/26626977-adware-boxore =>Adware.Boxore
  ~ http://nicolascoolman.webs.com/apps/blog/show/26990375-hijacker-smartbar =>Hijacker.SmartBar
  ~ http://nicolascoolman.webs.com/apps/blog/show/26630379-hijacker-22find =>Hijacker.22Find
  ~ http://nicolascoolman.webs.com/apps/blog/show/26684723-adware-imbooster =>Adware.IMBooster
  ~ http://nicolascoolman.webs.com/apps/blog/show/26630902-adware-lollipop =>Adware.Lollipop
  ~ http://nicolascoolman.webs.com/apps/blog/show/26678994-hijacker-babsolution =>Hijacker.BabSolution
  ~ http://nicolascoolman.webs.com/apps/blog/show/28606910-pup-offerbox =>PUP.OfferBox
  ~ http://nicolascoolman.webs.com/apps/blog/show/33519836-pup-pcfixspeed =>PUP.PCFixSpeed
  ~ http://nicolascoolman.webs.com/apps/blog/show/26627369-toolbar-babylon =>Toolbar.Babylon
  ~ http://nicolascoolman.webs.com/apps/blog/show/29637859-toolbar-tarma =>PUP.Tarma
  ~ http://nicolascoolman.webs.com/apps/blog/show/27583526-pup-crossrider =>PUP.CrossRider
  ~ MSI: 23 link(s) detected in 01mn 26s
  
  ~ 1900 Legitimates filtered by white list
  End of the scan (534 lines in 06mn 38s)(0)
  
  0
Réponse 19 / 24
lilidurhone Contributeur sécurité
Attention script personnalisé à ne pas reproduire sur un autre ordinateur risque de plantage !

* Désactive le temps du nettoyage avast(clic droit sur la boule orange>gestion des agents>désactiver pour 10 minutes)

* Copies uniquement les lignes indiquées en gras ci-dessous dans le presse papier soit le bloc note(tu surlignes avec la souris puis clic droit copier de Script ZHPFix jusqu'à la fin soit Emptytemp)

Script ZHPFix
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
G2 - GCE: Preference [User Data\Default] [lechbfhppigdgmodjlmcbiebfpogaeli] savvEnsharee v.5.10 (Activé) =>Adware.SaveShare
G2 - GCE: Preference [User Data\Default] [pbpohikckhbcljgombipcdoinkaedlfa] Smart Display v.1.6 (Activé) =>Spyware.SmartDisplay
M2 - MFEP: prefs.js [geoffrey - utk92q2b.default\7125a285-7e68-47aa-9d72-e81874f4d47e@d3fcdb92-135d-4a8a-8cf6-11e3b57c5fda.com] [] Plus-HD-2.3 v (..) =>Adware.PlusHD
M2 - MFEP: prefs.js [geoffrey - utk92q2b.default\jid1-FCM5fDwCW5M3AQ@jetpack] [] Smart Display v1.2 (..) =>Spyware.SmartDisplay
P2 - FPN: [HKCU] [pandonetworks.com/PandoWebPlugin] - (...) -- C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (.not file.)
[HKCU\Software\Pando Networks]
[HKLM\Software\Wow6432Node\Pando Networks]
O43 - CFD: 11/10/2013 - 22:18:21 - [0] ----D C:\Program Files (x86)\Pando Networks
O45 - LFCP:[MD5.BBBBC653425381646F53B36ACA2A5D7C] - 23/10/2013 - 21:26:02 ---A- - C:\Windows\Prefetch\UPDATEWHILOKII.EXE-F72E37F5.pf =>PUP.Whilokii
O45 - LFCP:[MD5.35A5C9443209A8FA46429ADA37DE101F] - 25/10/2013 - 16:52:51 ---A- - C:\Windows\Prefetch\MYPC BACKUP.EXE-B5EA9514.pf =>PUP.MyPCBackup
O45 - LFCP:[MD5.C3944F150868404E938951582215CA4B] - 25/10/2013 - 19:50:25 ---A- - C:\Windows\Prefetch\BONANZADEALSLIVE.EXE-67A98E0D.pf =>Adware.BonanzaDeals
O45 - LFCP:[MD5.AFA8B34439996A104108BBB2CE9D05C5] - 23/10/2013 - 21:25:47 ---A- - C:\Windows\Prefetch\BONANZADEALSLIVE.EXE-918DAA3F.pf =>Adware.BonanzaDeals
O45 - LFCP:[MD5.54A3524A614A2CA4B7002D37A83767E0] - 23/10/2013 - 21:25:33 ---A- - C:\Windows\Prefetch\BONANZADEALSLIVE.EXE-91518192.pf =>Adware.BonanzaDeals
O45 - LFCP:[MD5.3008E5BB74C040A7A6951F65ABE6787A] - 23/10/2013 - 21:24:49 ---A- - C:\Windows\Prefetch\WAJAM_VALIDATE.EXE-C7AEBE1C.pf =>Toolbar.Wajam
O45 - LFCP:[MD5.57C2E35D56A6FA6AF1F7B4347CD50668] - 23/10/2013 - 21:25:02 ---A- - C:\Windows\Prefetch\DOKOTB.EXE-C0C91AEE.pf
O45 - LFCP:[MD5.2768823528CA9000019887E0BE9516A1] - 23/10/2013 - 21:25:02 ---A- - C:\Windows\Prefetch\WHILOKII_IS.EXE-72B27CC5.pf =>PUP.Whilokii
[HKLM\Software\Google\Chrome\Extensions\lechbfhppigdgmodjlmcbiebfpogaeli] =>Adware.SaveShare^
[HKLM\Software\Google\Chrome\Extensions\pbpohikckhbcljgombipcdoinkaedlfa] =>Spyware.SmartDisplay^
[HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\24x7HELP] =>PUP.24x7Help^
[HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\Boxore Client] =>Adware.Boxore^
[HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\Browser Infrastructure Helper] =>Hijacker.SmartBar^
[HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\Desk 365] =>Hijacker.22Find^
[HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\Iminent] =>Adware.IMBooster^
[HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\IminentMessenger] =>Adware.IMBooster^
[HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\lollipop] =>Adware.Lollipop^
[HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\NTRedirect] =>Hijacker.BabSolution^
[HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\offerbox] =>PUP.OfferBox^
[HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\PCFixSpeed] =>PUP.PCFixSpeed^
[HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\SearchProtect] =>Toolbar.Conduit^
[HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\SearchProtectAll] =>Toolbar.Conduit^
[HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\tuto4pc_fr_62] =>PUP.Eorezo^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375] =>PUP.Tarma
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5] =>PUP.Tarma
[HKLM\Software\Classes\CLSID\{11111111-1111-1111-1111-110311341126}] =>PUP.CrossRider
[HKLM\Software\Classes\CLSID\{22222222-2222-2222-2222-220322342226}] =>PUP.CrossRider
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311341126}] =>PUP.CrossRider
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CA0054A5AB3EFFE4CB5660E44A1E7DCC] =>Adware.Boxore^
[HKLM\Software\Microsoft\Internet Explorer\Toolbar]:{2318C2B1-4965-11d4-9B18-009027A5CD4F} =>Toolbar.Google^
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:SearchProtection =>Toolbar.Conduit^
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:tuto4pc_fr_62 =>PUP.Eorezo^
C:\Users\geoffrey\AppData\Roaming\Mozilla\Firefox\Profiles\utk92q2b.default\7125a285-7e68-47aa-9d72-e81874f4d47e@d3fcdb92-135d-4a8a-8cf6-11e3b57c5fda.com =>Adware.PlusHD^
C:\Users\geoffrey\AppData\Roaming\Mozilla\Firefox\Profiles\utk92q2b.default\jid1-FCM5fDwCW5M3AQ@jetpack =>Spyware.SmartDisplay^
C:\Users\geoffrey\AppData\Local\Google\Chrome\User Data\Default\Extensions\lechbfhppigdgmodjlmcbiebfpogaeli =>Adware.SaveShare^
C:\Users\geoffrey\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbpohikckhbcljgombipcdoinkaedlfa =>Spyware.SmartDisplay^
C:\Users\geoffrey\AppData\Local\Temp\uninst1.exe =>Toolbar.Babylon^
C:\Windows\Installer\18c20c.msi =>Hijacker.SmartBar^
[MD5.6DDD32F0CFCD67822CE86664C6CC89F4] [WIS][17/08/2013] (.ReSoft Ltd. - Shopping Helper Smartbar.) -- C:\Windows\Installer\18c20c.msi [9158656] =>Hijacker.SmartBar
O68 - StartMenuInternet: <Google Chrome.BTNYCY4CGGSFGEPYEPPKF7JTXE> <Google Chrome>[HKLM\..\Shell\open\Command] (...) -- C:\Users\geoffrey\AppData\Local\Google\Chrome\Application\chrome.exe" http://www.qvo6.com =>Hijacker.Qvo6
O53 - SMSR:HKLM\...\startupreg\24x7HELP [Key] . (...) -- C:\Program Files (x86)\24x7Help\App24x7Help.exe (.not file.) =>PUP.24x7Help
O53 - SMSR:HKLM\...\startupreg\Boxore Client [Key] . (...) -- C:\Program Files (x86)\Boxore\BoxoreClient\boxore.exe (.not file.) =>Adware.Boxore
O53 - SMSR:HKLM\...\startupreg\Browser Infrastructure Helper [Key] . (...) -- C:\Users\WENZ\AppData\Local\Smartbar\Application\Smartbar.exe (.not file.) =>Hijacker.SmartBar
O53 - SMSR:HKLM\...\startupreg\ConduitFloatingPlugin_biahaobfpkgeiomkihcdgknebbhadonc [Key] . (...) -- C:\Program Files (x86)\Conduit\CT3307695\plugins\TBVerifier.dll (.not file.)
O53 - SMSR:HKLM\...\startupreg\Desk 365 [Key] . (...) -- C:\Program Files (x86)\Desk 365\desk365.exe (.not file.) =>Hijacker.22Find
O53 - SMSR:HKLM\...\startupreg\Iminent [Key] . (...) -- C:\Program Files (x86)\Iminent\Iminent.exe (.not file.) =>Adware.IMBooster
O53 - SMSR:HKLM\...\startupreg\IminentMessenger [Key] . (...) -- C:\Program Files (x86)\Iminent\Iminent.Messengers.exe (.not file.) =>Adware.IMBooster
O53 - SMSR:HKLM\...\startupreg\lollipop [Key] . (...) -- c:\users\wenz\appdata\local\lollipop\lollipop.exe (.not file.) =>Adware.Lollipop
O53 - SMSR:HKLM\...\startupreg\NTRedirect [Key] . (...) -- C:\Users\WENZ\AppData\Roaming\BabSolution\Shared\enhancedNT.dll (.not file.) =>Hijacker.BabSolution
O53 - SMSR:HKLM\...\startupreg\offerbox [Key] . (...) -- C:\Program Files (x86)\OfferBox\OfferBox.exe (.not file.) =>PUP.OfferBox
O53 - SMSR:HKLM\...\startupreg\PCFixSpeed [Key] . (...) -- C:\Program Files (x86)\PCFixSpeed\PCFixTray.exe (.not file.) =>PUP.PCFixSpeed
O53 - SMSR:HKLM\...\startupreg\SearchProtect [Key] . (...) -- C:\Users\WENZ\AppData\Roaming\SearchProtect\bin\cltmng.exe (.not file.) =>Toolbar.Conduit
O53 - SMSR:HKLM\...\startupreg\SearchProtectAll [Key] . (...) -- C:\Program Files (x86)\SearchProtect\bin\cltmng.exe (.not file.) =>Toolbar.Conduit
O53 - SMSR:HKLM\...\startupreg\SuperCopier2.exe [Key] . (...) -- C:\Program Files (x86)\SuperCopier2\SuperCopier2.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\tuto4pc_fr_62 [Key] . (...) -- C:\Program Files (x86)\tuto4pc_fr_62\tuto4pc_fr_62.exe (.not file.) =>PUP.Eorezo
ShortcutFix
Sysrestore
Emptytemp

* Lance ZHPFix (icône seringue)en tant qu'administrateur(si tu es sous Vista/7/8)sinon double clique sur l'icône en forme de seringue puis clique sur OK pour continuer.

* Cliques sur importer(Dans certains cas le script se colle automatiquement dans la zone de script et ne nécessite pas de cliquer sur le bouton "IMPORTER".)

* Si tu ne vois pas les lignes clic droit dans l'encadré puis coller

* Clique sur le bouton GO pour lancer le nettoyage, et laisse l'outil travailler.

* Zhpfix te proposera de vider la corbeille si tu le souhaites cliques sur oui si tu ne le souhaites pas cliques sur non

* Redémarre le PC et poste le rapport C:\ZHP\ZHPFixReport.txt
0
1. Geoffrey3613 Auteur
  
  Je trouve pas les ligne en gras.
  J'ai sa :
  [HKLM\Software\Google\Chrome\Extensions\lechbfhppigdgmodjlmcbiebfpogaeli] =>Adware.SaveShare^
  [HKLM\Software\Google\Chrome\Extensions\pbpohikckhbcljgombipcdoinkaedlfa] =>Spyware.SmartDisplay^
  [HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\24x7HELP] =>PUP.24x7Help^
  [HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\Boxore Client] =>Adware.Boxore^
  [HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\Browser Infrastructure Helper] =>Hijacker.SmartBar^
  [HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\Desk 365] =>Hijacker.22Find^
  [HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\Iminent] =>Adware.IMBooster^
  [HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\IminentMessenger] =>Adware.IMBooster^
  [HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\lollipop] =>Adware.Lollipop^
  [HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\NTRedirect] =>Hijacker.BabSolution^
  [HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\offerbox] =>PUP.OfferBox^
  [HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\PCFixSpeed] =>PUP.PCFixSpeed^
  [HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\SearchProtect] =>Toolbar.Conduit^
  [HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\SearchProtectAll] =>Toolbar.Conduit^
  [HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\tuto4pc_fr_62] =>PUP.Eorezo^
  [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375] =>PUP.Tarma
  [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5] =>PUP.Tarma
  [HKLM\Software\Classes\CLSID\{11111111-1111-1111-1111-110311341126}] =>PUP.CrossRider
  [HKLM\Software\Classes\CLSID\{22222222-2222-2222-2222-220322342226}] =>PUP.CrossRider
  [HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311341126}] =>PUP.CrossRider
  [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CA0054A5AB3EFFE4CB5660E44A1E7DCC] =>Adware.Boxore^
  [HKLM\Software\Microsoft\Internet Explorer\Toolbar]:{2318C2B1-4965-11d4-9B18-009027A5CD4F} =>Toolbar.Google^
  [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:SearchProtection =>Toolbar.Conduit^
  [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:tuto4pc_fr_62 =>PUP.Eorezo^
  C:\Users\geoffrey\AppData\Roaming\Mozilla\Firefox\Profiles\utk92q2b.default\7125a285-7e68-47aa-9d72-e81874f4d47e@d3fcdb92-135d-4a8a-8cf6-11e3b57c5fda.com =>Adware.PlusHD^
  C:\Users\geoffrey\AppData\Roaming\Mozilla\Firefox\Profiles\utk92q2b.default\jid1-FCM5fDwCW5M3AQ@jetpack =>Spyware.SmartDisplay^
  C:\Users\geoffrey\AppData\Local\Google\Chrome\User Data\Default\Extensions\lechbfhppigdgmodjlmcbiebfpogaeli =>Adware.SaveShare^
  C:\Users\geoffrey\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbpohikckhbcljgombipcdoinkaedlfa =>Spyware.SmartDisplay^
  C:\Users\geoffrey\AppData\Local\Temp\uninst1.exe =>Toolbar.Babylon^
  C:\Windows\Installer\18c20c.msi =>Hijacker.SmartBar^
  ~ Additionnel Scan: 343128 Items scanned in 01mn 04s
  
  0
Réponse 20 / 24
lilidurhone Contributeur sécurité
https://forums.commentcamarche.net/forum/affich-28927896-probleme-de-pc-super-lents#49
0
1. Geoffrey3613 Auteur
  
  Ah j'ai mal compris donc j'ai copier coller dans un nouveau fichier texte ( bloc note ) maintenan je lance ZhpFix ?
  
  0
2. Geoffrey3613 Auteur
  
  Rapport de ZHPFix 2013.10.21.17 par Nicolas Coolman, Update du 21/10/2013
  Fichier d'export Registre :
  Run by geoffrey at 03/11/2013 12:12:03
  High Elevated Privileges : OK
  Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)
  
  Corbeille vidée (00mn 45s)
  Réparation des raccourcis navigateur
  
  ========== Processus mémoire ==========
  SUPPRIMÉ: Memory Process: C:\Users\geoffrey\AppData\Local\Temp\uninst1.exe
  
  ========== Clés du Registre ==========
  SUPPRIMÉ: Mozilla Plugin: pandonetworks.com/PandoWebPlugin
  SUPPRIMÉ: HKCU\Software\Pando Networks
  SUPPRIMÉ: HKLM\Software\Wow6432Node\Pando Networks
  SUPPRIMÉ:* HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\24x7HELP
  SUPPRIMÉ:* HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\Boxore Client
  SUPPRIMÉ:* HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\Browser Infrastructure Helper
  SUPPRIMÉ:* HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\Desk 365
  SUPPRIMÉ:* HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\Iminent
  SUPPRIMÉ:* HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\IminentMessenger
  SUPPRIMÉ:* HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\lollipop
  SUPPRIMÉ:* HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\NTRedirect
  SUPPRIMÉ:* HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\offerbox
  SUPPRIMÉ:* HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\PCFixSpeed
  SUPPRIMÉ:* HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\SearchProtect
  SUPPRIMÉ:* HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\SearchProtectAll
  SUPPRIMÉ:* HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\tuto4pc_fr_62
  SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375
  SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5
  SUPPRIMÉ:* HKLM\Software\Classes\CLSID\{11111111-1111-1111-1111-110311341126}
  SUPPRIMÉ:* HKLM\Software\Classes\CLSID\{22222222-2222-2222-2222-220322342226}
  SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311341126}
  SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CA0054A5AB3EFFE4CB5660E44A1E7DCC
  SUPPRIMÉ:* StartupReg: ConduitFloatingPlugin_biahaobfpkgeiomkihcdgknebbhadonc
  SUPPRIMÉ:* StartupReg: SuperCopier2.exe
  
  ========== Valeurs du Registre ==========
  SUPPRIMÉ [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:SearchProtection
  
  ========== Eléments de donnée du Registre ==========
  REMPLACÉ Value NoActiveDesktopChanges : Good (0) - Bad (1)
  SUPPRIMÉ: StartMenuInternet: C:\Users\geoffrey\AppData\Local\Google\Chrome\Application\chrome.exe" http://www.qvo6.com
  
  ========== Préférences navigateur ==========
  SUPPRIMÉ Folder Chrome: C:\Users\geoffrey\AppData\Local\Google\Chrome\User Data\Default\Extensions\lechbfhppigdgmodjlmcbiebfpogaeli
  
  ========== Dossiers ==========
  SUPPRIMÉ: C:\Users\geoffrey\AppData\Local\Google\Chrome\User Data\Default\Extensions\lechbfhppigdgmodjlmcbiebfpogaeli
  SUPPRIMÉ: C:\Users\geoffrey\AppData\Roaming\Mozilla\Firefox\Profiles\utk92q2b.default\extensions\7125a285-7e68-47aa-9d72-e81874f4d47e@d3fcdb92-135d-4a8a-8cf6-11e3b57c5fda.com
  SUPPRIMÉ: C:\Users\geoffrey\AppData\Roaming\Mozilla\Firefox\Profiles\utk92q2b.default\extensions\jid1-FCM5fDwCW5M3AQ@jetpack
  SUPPRIMÉ: C:\Program Files (x86)\Pando Networks
  SUPPRIMÉS Temporaires Windows (41) (0 octets)
  
  ========== Fichiers ==========
  SUPPRIMÉ: c:\users\geoffrey\appdata\local\google\chrome\user data\default\preferences
  SUPPRIMÉ: C:\Windows\Installer\18c20c.msi
  SUPPRIMÉS Temporaires Windows (0) (0 octets)
  
  ========== Restauration Système ==========
  Point de restauration du système créé avec succès
  
  ========== Récapitulatif ==========
  1 : Processus mémoire
  24 : Clés du Registre
  1 : Valeurs du Registre
  2 : Eléments de donnée du Registre
  5 : Dossiers
  3 : Fichiers
  1 : Préférences navigateur
  1 : Restauration Système
  
  End of clean in 01mn 22s
  
  ========== Chemin de fichier rapport ==========
  C:\Users\geoffrey\AppData\Roaming\ZHP\ZHPFix[R1].txt - 03/11/2013 12:12:49 [4210]
  
  0
- 1
- 2
Suivant

Newsletters