Aller au contenu

zurlinden

Membres
 Afficher le profil  Afficher son activité

  • Compteur de contenus

    106

  • Inscription

  • Dernière visite

  • Jours gagnés

    1

 Type de contenu 

Tout ce qui a été posté par zurlinden

  1. zurlinden
    salut Bernard: j'ai refait ttes les manips et réinitialisé google chrome avec les paramètres initiaux, et le problème semble être résolu! merci encore pour tout
  2. zurlinden
    j(ai refait toute la procédure: apres avoir passé malware byte, adcleaner zhp diag, il y a du mieux, je peux utiliser google chrome normalement, mais si je redémarre l'ordi, les problèmes reviennet:o( je crois que j'ai mal fait qq chose, mais je ne sais pas quoi: zhp fix ne me seret à rien, car je ne sais pas ce qu'il faut faire:o( je crois que je vais abandonner ( je dois zapper une étape: notament pour charger zhp; je n'y arrive pas depuis le tableau que tu m'as fourni mais c'est vrai que je suis un nul en micro info etc.. merci qd même de m'avoir consacré de ton temps
  3. zurlinden
    désolé, c'est encore moi: en +, j'ai récupéré une nouvelle "saleté" qui s'ouvre en même temps que webssearhes: c'est " http://www.trovi.com/?gd=&ctid=CT3331617&octid=EB_ORIGINAL_CTID&ISID=M1AF0537E-415E-4DC3-960D-B48777E067F6&SearchSource=55&CUI=&UM=6&UP=SP89E6D382-6BE3-4981-AAEC-21C401DA1162&SSPV=
  4. zurlinden
    j'ai fini, mais le probl semble persister; j'ai sans doute fait des fausses manips:o( je n'ai pas su utiliser ZHPFIX, et j'ai tjrs ce moteur de recherche webssearches qui s'ouvre d'office qd j'ouvre google chrome:o( je recommence tout )
  5. zurlinden
    ~ Rapport de ZHPDiag v2014.11.10.162 - Nicolas Coolman (10/11/2014) ~ Lancé par martial (12/11/2014 13:03:30) ~ Adresse du Site Web http://nicolascoolman.fr ~ Adresse du Forum http://forum.nicolascoolman.fr ~ Traduit par Nicolas Coolman ~ Etat de la version : Version à jour. ~ Liste blanche : Désactivée par l'utilisateur ~ Elévation des Privilèges : OK ~ User Account Control (UAC): Activate by user ---\\ Navigateurs Internet MSIE: Internet Explorer v11.0.9600.17416 GCIE: Google Chrome v38.0.2125.111 (Defaut) ---\\ Informations sur les produits Windows ~ Langage: Français Windows 8.1, 64-bit (Build 9600) Windows Server License Manager Script : OK ~ Windows® Operating System, OEM_DM channel Windows ID Activation : OK ~ Windows Partial Key : 4RDHT Windows License : OK ~ Windows Remaining Initializations Number : 999 Software Protection Service (Protection logicielle) : OK Windows Automatic Updates : OK Windows Activation Technologies : OK ---\\ Logiciels de protection du système Avira Free Antivirus v14.0.7.306 Malwarebytes Anti-Malware version 2.0.3.1025 Windows Defender W8 (Deactivate) ---\\ Logiciels d'optimisation du système CCleaner v4.19 ---\\ Logiciels de partage PeerToPeer ---\\ Surveillance de Logiciels ---\\ Informations sur le système ~ Processor: Intel64 Family 6 Model 58 Stepping 9, GenuineIntel ~ Operating System: 64 Bits Boot mode: Normal (Normal boot) Total RAM: 8144 MB (76% free) System Restore: Activé (Enable) System drive C: has 407 GB (88%) free of 457 GB ---\\ Mode de connexion au système ~ Computer Name: PC-BALOU ~ User Name: martial ~ All Users Names: UpdatusUser, martial, HomeGroupUser$, Administrateur, ~ Unselected Option: None Logged in as Administrator ---\\ Variables d'environnement ~ System Unit : C:\ ~ %AppZHP% : C:\Users\martial\AppData\Roaming\ZHP\ ~ %AppData% : C:\Users\martial\AppData\Roaming\ ~ %Desktop% : C:\Users\martial\Desktop\ ~ %Favorites% : C:\Users\martial\Favorites\ ~ %LocalAppData% : C:\Users\martial\AppData\Local\ ~ %StartMenu% : C:\Users\martial\AppData\Roaming\Microsoft\Windows\Start Menu\ ~ %Windir% : C:\Windows\ ~ %System% : C:\Windows\System32\ ---\\ Enumération des unités disques C: Hard drive, Flash drive, Thumb drive (Free 407 Go of 457 Go) D: Hard drive, Flash drive, Thumb drive (Free 457 Go of 458 Go) E: CD-ROM drive (Not Inserted) ---\\ Etat du Centre de Sécurité Windows [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK [HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK ~ Security Center: 49 Scanned in 00mn 00s ---\\ Recherche particulière de fichiers génériques [MD5.ACDBE1ED38167C8B01B8F63161BB2CEA] - (.Microsoft Corporation - Explorateur Windows.) (.23/08/2014 - 08:48:28.) -- C:\Windows\Explorer.exe [2374784] [MD5.48CFA7BE561A7BE144C29BB912055016] - (.Microsoft Corporation - Application de démarrage de Windows.) (.22/08/2013 - 10:58:29.) -- C:\Windows\System32\Wininit.exe [144384] [MD5.BF1FC65A307B31939ADF7F976FDE033C] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.31/10/2014 - 04:45:17.) -- C:\Windows\System32\wininet.dll [2365440] [MD5.306EB21E5B480AE9065EA55AC8C35936] - (.Microsoft Corporation - Application d’ouverture de session Windows.) (.22/02/2014 - 10:45:48.) -- C:\Windows\System32\Winlogon.exe [562176] [MD5.AFCAB4DC692CCE37E283B00E2D7B438F] - (.Microsoft Corporation - Bibliothèque de licences.) (.21/12/2013 - 09:54:07.) -- C:\Windows\System32\sppcomapi.dll [447488] [MD5.374E27295F0A9DCAA8FC96370F9BEEA5] - (.Microsoft Corporation - Pilote de fonction connexe pour WinSock.) (.30/05/2014 - 04:03:03.) -- C:\Windows\system32\Drivers\AFD.sys [563200] [MD5.74B14192CF79A72F7536B27CB8814FBD] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.22/08/2013 - 13:43:41.) -- C:\Windows\system32\Drivers\atapi.sys [26464] [MD5.2FA6510E33F7DEFEC03658B74101A9B9] - (.Microsoft Corporation - CD-ROM File System Driver.) (.22/08/2013 - 12:40:15.) -- C:\Windows\system32\Drivers\Cdfs.sys [88576] [MD5.C6796EA22B513E3457514D92DCDB1A3D] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.22/08/2013 - 09:46:35.) -- C:\Windows\system32\Drivers\Cdrom.sys [164352] [MD5.A03F362C5557E238CBFA914689C77248] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.06/03/2014 - 10:22:50.) -- C:\Windows\system32\Drivers\DfsC.sys [134144] [MD5.D4B7ED39C7900384D9E5C1283F1E7926] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.24/07/2014 - 12:45:39.) -- C:\Windows\system32\Drivers\HDAudBus.sys [76800] [MD5.84CFC5EFA97D0C965EDE1D56F116A541] - (.Microsoft Corporation - Pilote de port i8042.) (.22/08/2013 - 12:39:15.) -- C:\Windows\system32\Drivers\i8042prt.sys [107520] [MD5.B7342B3C58E91107F6E946A93D9D4EFD] - (.Microsoft Corporation - IP Network Address Translator.) (.14/02/2014 - 20:07:49.) -- C:\Windows\system32\Drivers\IpNat.sys [142848] [MD5.7A1A3F213CDB3363D179D5014272025D] - (.Microsoft Corporation - Minirdr SMB Windows NT.) (.30/04/2014 - 07:41:46.) -- C:\Windows\system32\Drivers\MRxSmb.sys [402432] [MD5.0217532E19A748F0E5D569307363D5FD] - (.Microsoft Corporation - MBT Transport driver.) (.22/08/2013 - 12:37:02.) -- C:\Windows\system32\Drivers\netBT.sys [282624] [MD5.038C77D577900EE39410662478BB0D50] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.24/07/2014 - 16:07:52.) -- C:\Windows\system32\Drivers\ntfs.sys [2009920] [MD5.764B1121867B2D9B31C491668AC72B2B] - (.Microsoft Corporation - Pilote de port parallèle.) (.22/08/2013 - 12:40:02.) -- C:\Windows\system32\Drivers\Parport.sys [94208] [MD5.BBB6272B7F46C4640A8CDB8A70C3450F] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.22/08/2013 - 12:35:51.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [120832] [MD5.680C1DAE268B6FB67FA21B389A8B79EF] - (.Microsoft Corporation - Redirecteur de périphérique de Microsoft RDP.) (.14/11/2013 - 08:16:40.) -- C:\Windows\system32\Drivers\rdpdr.sys [195584] [MD5.FFF28F9F6823EB1756C60F1649560BBF] - (.Microsoft Corporation - TDI Translation Driver.) (.22/08/2013 - 14:25:35.) -- C:\Windows\system32\Drivers\tdx.sys [107520] [MD5.64CA2B4A49A8EAF495E435623ECCE7DB] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.19/06/2014 - 03:13:36.) -- C:\Windows\system32\Drivers\volsnap.sys [310080] ~ Generic Processes: Scanned in 00mn 00s ---\\ Etat des fichiers cachés (Caché/Total) ~ Mes images (My Pictures) : 2/10 ~ Mes Favoris (My Favorites) : 1/7 ~ Mes Documents (My Documents) : 1/14 ~ Mon Bureau (My Desktop) : 2/78 ~ Menu demarrer (Programs) : 1/34 ~ Hidden Files: Scanned in 00mn 00s ---\\ Processus lancés [MD5.F89773DFA9B8C95A3AC2AF1E7D99E483] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe [7229752] [PID.2868] [MD5.280B64F6BFCEDE6D67D261EB808AA617] - (.Acer Incorporated - Hotkey Utility.) -- C:\Program Files (x86)\Acer\Hotkey Utility\HotkeyUtility.exe [524944] [PID.3708] [MD5.BEFFB2D021E7FA9E92249F3997930A68] - (.Acer - ArcServer.) -- C:\Program Files (x86)\Acer Remote\ArcServer.exe [522144] [PID.4116] [MD5.5909C378DF9132FC91F50AF70A53455A] - (.Avira Operations GmbH & Co. KG - Avira.) -- C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [124208] [PID.4880] [MD5.749949494676218FFA99501F4AA22ECC] - (.OpenOffice.org - OpenOffice.org 3.4.1.) -- C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe [10376704] [PID.4108] [MD5.4EE367B8B1964160A1F1B80095183D3A] - (.OpenOffice.org - OpenOffice.org 3.4.1.) -- C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin [10368512] [PID.4692] [MD5.7175C3425FC9AB6ABAEAF56863303DD7] - (.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe [164864] [PID.3940] [MD5.E659E38D2D51DF5817C91D7386920C7E] - (.CyberLink - MediaEspresso DeviceDetector.) -- C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe [995856] [PID.1664] [MD5.66A4A7C7802E0968E07647999FFC87E2] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [854344] [PID.2080] [MD5.158A3FE93DC82C0EACBFA9D65383850A] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [8125440] [PID.1452] ~ Processes Running: Scanned in 00mn 00s ---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2) C:\Users\martial\AppData\Local\Google\Chrome\User Data\Default\Preferences ---\\ Liste des dossiers d'extension Google Chrome ~ Google Lines Browser: 0 Scanned in 00mn 01s ---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3) C:\Users\martial\AppData\Roaming\Mozilla\Firefox\Profiles\aD85jArH.default\prefs.js (.not file.) M2 - MFEP: prefs.js [martial - aD85jArH.default\abs@avira.com] [] Avira Browser Safety v1.4.0 (..) ~ Firefox Browser: 1 Scanned in 00mn 00s ---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4) R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = www.google.com R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = www.google.com R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = www.google.com R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = www.google.com R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk R3 - URLSearchHook: Microsoft Url Search Hook [64Bits] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (11.00.9600.17351 (winblue_r3.140925-1500)) -- C:\Windows\SysWOW64\ieframe.dll ~ IE Browser: 16 Scanned in 00mn 00s ---\\ Internet Explorer, Proxy Management (R5) R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll ~ Proxy management: Scanned in 00mn 00s ---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs F2 - REG:system.ini: USERINIT=C:\WINDOWS\System32\Userinit.exe, F2 - REG:system.ini: Shell=C:\Windows\explorer.exe F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe ~ Keys: Scanned in 00mn 00s ---\\ Hosts file redirection (O1) O1 - Hosts: 54.204.28.26 nikdaiaidiiiogaidkkekcmokcgcdeac ~ Nombre lignes détournées 1/23 (Hosts file redirected) ~ Hosts File: Scanned in 00mn 00s ---\\ Browser Helper Objects de navigateur (O2) O2 - BHO: E-Web Print [64Bits] - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} . (.SEIKO EPSON CORPORATION - ewps_tb.) -- C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll O2 - BHO: SkypeIEPluginBHO [64Bits] - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} . (.Microsoft Corporation - Skype Click to Call IE Add-on.) -- C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll ~ BHO: 3 Scanned in 00mn 00s ---\\ Applications lancées au démarrage du système (O4) O4 - HKLM\..\Run: [RTHDVCPL] . (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe =>.Realtek Semiconductor Corp O4 - HKLM\..\Run: [installerLauncher] C:\Program Files\Common Files\Bitdefender\SetupInformation\{6F57816A-791A-4159-A75F-CFD0C7EA4FBF}\setuplauncher.exe (.not file.) O4 - HKCU\..\Run: [sony PC Companion] . (.Sony - Sony PC Companion.) -- C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe O4 - HKCU\..\Run: [CCleaner Monitoring] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner64.exe =>.Piriform Ltd O4 - HKCU\..\Run: [EPLTarget\P0000000000000000] . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_IATIIKE.exe =>.Epson Seiko Corporation O4 - HKLM\..\Wow6432Node\Run: [avgnt] . (.Avira Operations GmbH & Co. KG - Avira system tray application.) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe O4 - HKLM\..\Wow6432Node\Run: [Avira Systray] . (.Avira Operations GmbH & Co. KG - Avira.) -- C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe O4 - HKUS\.DEFAULT\..\Run: [bitdefender Wallet Agent] C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe (.not file.) O4 - HKUS\.DEFAULT\..\Run: [bitdefender Wallet] C:\Program Files\Bitdefender\Bitdefender\pwdmanui.exe (.not file.) O4 - HKUS\.DEFAULT\..\Run: [bitdefender Agent de l'application Wallet] C:\Program Files\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe (.not file.) O4 - HKUS\S-1-5-18\..\Run: [bitdefender Wallet Agent] C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe (.not file.) O4 - HKUS\S-1-5-18\..\Run: [bitdefender Wallet] C:\Program Files\Bitdefender\Bitdefender\pwdmanui.exe (.not file.) O4 - HKUS\S-1-5-18\..\Run: [bitdefender Agent de l'application Wallet] C:\Program Files\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe (.not file.) O4 - HKUS\S-1-5-21-3778166341-1465188008-936229986-1001\..\Run: [sony PC Companion] . (.Sony - Sony PC Companion.) -- C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe O4 - HKUS\S-1-5-21-3778166341-1465188008-936229986-1001\..\Run: [CCleaner Monitoring] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner64.exe =>.Piriform Ltd O4 - HKUS\S-1-5-21-3778166341-1465188008-936229986-1001\..\Run: [EPLTarget\P0000000000000000] . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_IATIIKE.exe =>.Epson Seiko Corporation ~ Application: Scanned in 00mn 00s ---\\ Invisibilité de l'icône d'options IE dans le panneau de Configuration (O5) O5 - control.ini: [HKLM\..\Control Panel] inetcpl.cpl=no ~ IE Control Panel: 1 Scanned in 00mn 00s ---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9) O9 - Extra button: Skype Click to Call settings [64Bits] - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} . (...) -- c:\program files (x86)\skype\toolbars\internet explorer x64\icon.ico ~ IE Extra Buttons: Scanned in 00mn 00s ---\\ Winsock hijacker (Layered Service Provider) (O10) O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d’affectation de noms de messagerie.) -- C:\WINDOWS\system32\napinsp.dll O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\WINDOWS\system32\pnrpnsp.dll O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\WINDOWS\system32\pnrpnsp.dll O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\WINDOWS\system32\NLAapi.dll O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll =>.Microsoft Corporation O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS\system32\winrnr.dll ~ Winsock: 6 Scanned in 00mn 00s ---\\ Modification Domaine/Adresses DNS (O17) O17 - HKLM\System\CCS\Services\Tcpip\..\{3EAD6CDF-D505-4FFC-B3C8-31B02CB49FF0}: DhcpNameServer = 192.168.1.254 O17 - HKLM\System\CCS\Services\Tcpip\..\{3EAD6CDF-D505-4FFC-B3C8-31B02CB49FF0}: DhcpDomain = bouyguesbox.fr O17 - HKLM\System\CS1\Services\Tcpip\..\{3EAD6CDF-D505-4FFC-B3C8-31B02CB49FF0}: DhcpNameServer = 192.168.1.254 O17 - HKLM\System\CS1\Services\Tcpip\..\{3EAD6CDF-D505-4FFC-B3C8-31B02CB49FF0}: DhcpDomain = bouyguesbox.fr O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254 ~ Domain: Scanned in 00mn 00s ---\\ Protocole additionnel (O18) O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft ®.) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation ~ Protocole Additionnel: Scanned in 00mn 00s ---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21) O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. ~ SSODL: 1 Scanned in 00mn 00s ---\\ Liste des services NT non Microsoft et non désactivés (O23) O23 - Service: Avira Planificateur (AntiVirSchedulerService) . (.Avira Operations GmbH & Co. KG - Antivirus Host Framework Service.) - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe O23 - Service: Avira Protection temps réel (AntiVirService) . (.Avira Operations GmbH & Co. KG - Antivirus Host Framework Service.) - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe O23 - Service: Avira Service Host (Avira.OE.ServiceHost) . (.Avira Operations GmbH & Co. KG - Avira.OE.ServiceHost.) - C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe O23 - Service: CCDMonitorService (CCDMonitorService) . (.Acer Incorporated - CCD Monitor Service.) - C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe O23 - Service: Epson Scanner Service (EpsonScanSvc) . (.Seiko Epson Corporation - Epson Scanner Service (64bit).) - C:\Windows\system32\EscSvc64.exe O23 - Service: GamesAppIntegrationService (GamesAppIntegrationService) . (.WildTangent - WildTangent Games App Integration Service.) - C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google Inc O23 - Service: IconMan_R (IconMan_R) . (.Realsil Microelectronics Inc. - Realtek Card Reader Patch Tool..) - C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe O23 - Service: Intel® Capability Licensing Service Interface (Intel® Capability Licensing Service Interface) . (.Intel® Corporation - Intel® Capability Licensing Service Inter.) - C:\Program Files\Intel\iCLS Client\HeciServer.exe O23 - Service: Intel® PROSet Monitoring Service (Intel® PROSet Monitoring Service) . (.Intel Corporation - Intel® PROSet Monitoring Service.) - C:\Windows\system32\IProsetMonitor.exe O23 - Service: Intel® Dynamic Application Loader Host Interface Service (jhi_service) . (.Intel Corporation - Intel® Dynamic Application Loader Host In.) - C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe O23 - Service: Intel® Management and Security Application Local Manageme (LMS) . (.Intel Corporation - Local Manageability Service.) - C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe O23 - Service: (MBAMScheduler) . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe O23 - Service: (MBAMService) . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe O23 - Service: Nero Update (NAUpdate) . (.Nero AG - NeroUpdate.) - c:\Program Files (x86)\Nero\Update\NASvc.exe O23 - Service: NVIDIA Display Driver Service (nvsvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 327.0.) - C:\WINDOWS\system32\nvvsvc.exe O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files (x86)\Skype\Updater\Updater.exe O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) . (.NVIDIA Corporation - Stereo Vision Control Panel API Server.) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe O23 - Service: Intel® Management and Security Application User Notificat (UNS) . (.Intel Corporation - User Notification Service.) - C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe ~ Services: 19 Scanned in 00mn 03s ---\\ Enumération Active Desktop & MHTML Editor (O24) O24 - Default MHTML Editor: Last - .(...) - (.not file.) ~ Desktop Component: 4 Scanned in 00mn 00s ---\\ Enumère les données de BootExecute (BEX) (O34) O34 - HKLM BootExecute: (autocheck autochk *) - File not found ~ BEX: 1 Scanned in 00mn 00s ---\\ Tâches planifiées en automatique (O39) [MD5.F368AE5801EE103008BA34773F83ECCE] [APT] [ALU] (...) -- C:\Program Files (x86)\Acer\Live Updater\updater.exe [3368008] [MD5.B690DE3B3D28AD45112BE310780DBE8D] [APT] [ALUAgent] (...) -- C:\Program Files (x86)\Acer\Live Updater\liveupdater_agent.exe [40008] [MD5.947835240308F523C9D980C89D35E76D] [APT] [CCleanerSkipUAC] (.Piriform Ltd.) -- C:\Program Files\CCleaner\CCleaner.exe [4825880] [MD5.E659E38D2D51DF5817C91D7386920C7E] [APT] [DeviceDetector] (.CyberLink.) -- C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe [995856] [MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [116648] [MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [116648] [MD5.280B64F6BFCEDE6D67D261EB808AA617] [APT] [Hotkey Utility] (.Acer Incorporated.) -- C:\Program Files (x86)\Acer\Hotkey Utility\HotkeyUtility.exe [524944] [MD5.7A69532E7D92A0B31E9A55DE1D1CF7E2] [APT] [Power Management] (.Acer Incorporated.) -- C:\Program Files\Acer\Acer Power Management\ePowerTray.exe [5303368] [MD5.00000000000000000000000000000000] [APT] [spyHunter4Startup] (...) -- C:\Program Files\Enigma Software Group\SpyHunter\Spyhunter4.exe (.not file.) [0] =>Crapware.SpyHunter O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job [1090] O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore [1090] O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job [1094] O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA [1094] ~ Scheduled Task: 12 Scanned in 00mn 01s ---\\ Composants installés (ActiveSetup Installed Components) (O40) O40 - ASIC: Microsoft Windows Media Player [64Bits] - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll =>.Microsoft Corporation O40 - ASIC: Microsoft Windows Media Player 12.0 [64Bits] - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\SysWOW64\wmpdxm.dll =>.Microsoft Corporation O40 - ASIC: Microsoft Windows [64Bits] - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Windows Mail.) -- C:\Program Files (x86)\Windows Mail\WinMail.exe =>.Microsoft Corporation O40 - ASIC: Browsing Enhancements [64Bits] - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\Windows\System32\msieftp.dll O40 - ASIC: Microsoft Windows Media Player [64Bits] - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll =>.Microsoft Corporation O40 - ASIC: Web Platform Customizations [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe O40 - ASIC: (no name) [64Bits] - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\System32\mscories.dll ~ Active Setup: 7 Scanned in 00mn 00s ---\\ Pilotes lancés au démarrage du système (O41) O41 - Driver: C:\Windows\System32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Pilote de fonction connexe pour WinSock.) - C:\Windows\system32\drivers\afd.sys O41 - Driver: C:\Windows\System32\drivers\ahcache.sys (ahcache) . (.Microsoft Corporation - Application Compatibility Cache.) - C:\Windows\System32\DRIVERS\ahcache.sys O41 - Driver: (avipbb) . (.Avira Operations GmbH & Co. KG - Avira Driver for Security Enhancement.) - C:\Windows\system32\DRIVERS\avipbb.sys O41 - Driver: (avkmgr) . (.Avira Operations GmbH & Co. KG - Avira Manager Driver.) - C:\Windows\system32\DRIVERS\avkmgr.sys O41 - Driver: (BasicDisplay) . (.Microsoft Corporation - Microsoft Basic Display Driver.) - C:\Windows\system32\drivers\BasicDisplay.sys O41 - Driver: (BasicRender) . (.Microsoft Corporation - Microsoft Basic Render Driver.) - C:\Windows\system32\drivers\BasicRender.sys O41 - Driver: cdrom.inf (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\system32\drivers\cdrom.sys O41 - Driver: C:\Windows\System32\drivers\dam.sys (dam) . (.Microsoft Corporation - DAM Kernel Driver.) - C:\Windows\System32\drivers\dam.sys O41 - Driver: C:\Windows\System32\wkssvc.dll (Dfsc) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys O41 - Driver: mssmbios.inf (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\system32\drivers\mssmbios.sys O41 - Driver: netnb.inf (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys O41 - Driver: C:\Windows\System32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys O41 - Driver: npsvctrig.inf (npsvctrig) . (.Microsoft Corporation - Named pipe service triggers.) - C:\Windows\system32\drivers\npsvctrig.sys O41 - Driver: C:\Windows\System32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys O41 - Driver: C:\Windows\System32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\system32\DRIVERS\pacer.sys O41 - Driver: C:\Windows\System32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) - C:\Windows\System32\DRIVERS\rdbss.sys O41 - Driver: C:\Windows\System32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\system32\DRIVERS\tdx.sys ~ Drivers: 34 Scanned in 00mn 00s ---\\ Logiciels installés (O42) O42 - Logiciel: Acer Docs - (.Acer Incorporated.) [HKLM][64Bits] -- {CA4FE8B0-298C-4E5D-A486-F33B126D6A0A} O42 - Logiciel: Acer Power Management - (.Acer Incorporated.) [HKLM][64Bits] -- {91F52DE4-B789-42B0-9311-A349F10E5479} O42 - Logiciel: Acer Recovery Management - (.Acer Incorporated.) [HKLM][64Bits] -- {07F2005A-8CAC-4A4B-83A2-DA98A722CA61} O42 - Logiciel: Acer Remote - (.Acer Inc..) [HKLM][64Bits] -- Acer Remote1.0 O42 - Logiciel: AcerCloud Portal - (.Acer Incorporated.) [HKLM][64Bits] -- {A5AD0B17-F34D-49BE-A157-C8B3D52ACD13} O42 - Logiciel: Avira Free Antivirus v14.0.7.306 - (.Avira.) [HKLM][64Bits] -- Avira AntiVir Desktop O42 - Logiciel: Avira v1.1.25.25607 - (.Avira Operations GmbH & Co. KG.) [HKLM][64Bits] -- {9480d4af-12b9-4e56-8034-4031ef6ab39d} O42 - Logiciel: Avira v1.1.25.25607 - (.Avira Operations GmbH & Co. KG.) [HKLM][64Bits] -- {D2763B4E-5BF4-468B-BB00-9B3B121E0FB2} O42 - Logiciel: CCleaner - (.Piriform.) [HKLM][64Bits] -- CCleaner O42 - Logiciel: Canaux de jeu - (.WildTangent, Inc..) [HKLM][64Bits] -- WildTangentGameProvider-acer-genres O42 - Logiciel: Canaux de jeu - (.WildTangent, Inc..) [HKLM][64Bits] -- WildTangentGameProvider-acer-main O42 - Logiciel: Casino Classic - (...) [HKLM][64Bits] -- casinoclassic O42 - Logiciel: CyberLink MediaEspresso 6.5 - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{E3739848-5329-48E3-8D28-5BBD6E8BE384} O42 - Logiciel: CyberLink MediaEspresso 6.5 - (.CyberLink Corp..) [HKLM][64Bits] -- {E3739848-5329-48E3-8D28-5BBD6E8BE384} O42 - Logiciel: EPSON Printer Finder - (.SEIKO EPSON CORPORATION.) [HKLM][64Bits] -- {B8ECD0D3-AE08-4891-B6C7-32F96B75EB6C} O42 - Logiciel: EPSON Scan - (.Seiko Epson Corporation.) [HKLM][64Bits] -- EPSON Scanner O42 - Logiciel: EPSON XP-302 303 305 306 Series Printer Uninstall - (.SEIKO EPSON Corporation.) [HKLM][64Bits] -- EPSON XP-302 303 305 306 Series O42 - Logiciel: Epson Connect Printer Setup - (.SEIKO EPSON CORPORATION.) [HKLM][64Bits] -- {D9B1D51B-EB56-410D-AEB5-1CCFAC4B6C8C} O42 - Logiciel: Epson E-Web Print - (.SEIKO EPSON CORPORATION.) [HKLM][64Bits] -- {896667C8-53F8-47B8-B6B0-B113B10F05BC} O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM][64Bits] -- Google Chrome O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} O42 - Logiciel: Hotkey Utility - (.Acer Incorporated.) [HKLM][64Bits] -- {A6DC88AD-501A-44BC-884D-57435F972E2C} O42 - Logiciel: Identity Card - (.Acer Incorporated.) [HKLM][64Bits] -- {3D9CB654-99AD-4301-89C6-0D12A790767C} O42 - Logiciel: Intel® Management Engine Components - (.Intel Corporation.) [HKLM][64Bits] -- {65153EA5-8B6E-43B6-857B-C6E4FC25798A} O42 - Logiciel: Intel® Network Connections 17.2.153.0 - (.Intel.) [HKLM][64Bits] -- PROSetDX O42 - Logiciel: Intel® Network Connections 17.2.153.0 - (.Intel.) [HKLM][64Bits] -- {858C1B33-C3D5-4377-B77B-1E2F338C7F66} O42 - Logiciel: Intel® Rapid Storage Technology - (.Intel Corporation.) [HKLM][64Bits] -- {3E29EE6C-963A-4aae-86C1-DC237C4A49FC} O42 - Logiciel: Intel® Trusted Connect Service Client - (.Intel Corporation.) [HKLM][64Bits] -- {F4404AFD-2EF3-40C1-8C09-29E5F3B6972B} O42 - Logiciel: Jeux WildTangent - (.WildTangent.) [HKLM][64Bits] -- WildTangent wildgames Master Uninstall O42 - Logiciel: Live Updater - (.Acer Incorporated.) [HKLM][64Bits] -- {EE26E302-876A-48D9-9058-3129E5B99999} O42 - Logiciel: Ludi - (...) [HKLM][64Bits] -- Ludi O42 - Logiciel: Malwarebytes Anti-Malware version 2.0.3.1025 - (.Malwarebytes Corporation.) [HKLM][64Bits] -- Malwarebytes Anti-Malware_is1 O42 - Logiciel: NVIDIA Logiciel système PhysX 9.12.1031 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX O42 - Logiciel: NVIDIA PhysX - (.NVIDIA Corporation.) [HKLM][64Bits] -- {8B922CF8-8A6C-41CE-A858-F1755D7F5D29} O42 - Logiciel: NVIDIA Pilote 3D Vision 327.02 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision O42 - Logiciel: NVIDIA Pilote audio HD : 1.3.26.4 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver O42 - Logiciel: NVIDIA Pilote du contrôleur 3D Vision 311.06 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB O42 - Logiciel: NVIDIA Pilote graphique 327.02 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver O42 - Logiciel: NVIDIA Stereoscopic 3D Driver - (.NVIDIA Corporation.) [HKLM][64Bits] -- NVIDIAStereo O42 - Logiciel: Nero BackItUp - (.Nero AG.) [HKLM][64Bits] -- {DA2D3078-A58C-45E8-8EE0-18B8BE6B34F7} O42 - Logiciel: Nero BackItUp 12 Essentials OEM.a01 - (.Nero AG.) [HKLM][64Bits] -- {4CA8F973-6377-4ABF-9ED5-CC2323B3C000} O42 - Logiciel: Nero BackItUp Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {EF0D1292-8FC1-41BE-9740-DBC134F66415} O42 - Logiciel: Nero ControlCenter - (.Nero AG.) [HKLM][64Bits] -- {ABC88553-8770-4B97-B43E-5A90647A5B63} O42 - Logiciel: Nero ControlCenter Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {C994C746-C6D0-4EBA-B09E-DF7B18381B69} O42 - Logiciel: Nero Core Components - (.Nero AG.) [HKLM][64Bits] -- {BEBEE34D-84A2-4EDD-8BEA-96CC54371263} O42 - Logiciel: Nero Launcher - (.Nero AG.) [HKLM][64Bits] -- {0E4630AF-0AB7-440E-A978-1A78FC4F43B9} O42 - Logiciel: Nero RescueAgent - (.Nero AG.) [HKLM][64Bits] -- {A2D43081-CF7B-4637-A9F3-E2651AA5C4A8} O42 - Logiciel: Nero RescueAgent Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {0B311221-05A5-4766-8D03-7A6446794156} O42 - Logiciel: Nero Update - (.Nero AG.) [HKLM][64Bits] -- {65BB0407-4CC8-4DC7-952E-3EEFDF05602A} O42 - Logiciel: Office Addin - (.Acer.) [HKLM][64Bits] -- {6D2BBE1D-E600-4695-BA37-0B0E605542CC} O42 - Logiciel: Office Addin 2003 - (.Acer.) [HKLM][64Bits] -- {1FCC073B-CC01-4443-AD20-E559F66E6E83} O42 - Logiciel: OpenOffice.org 3.4.1 - (.Apache Software Foundation.) [HKLM][64Bits] -- {9F1F2AEA-C72A-4DD6-991E-C5506A5625E4} O42 - Logiciel: PokerStars.fr - (.PokerStars.fr.) [HKLM][64Bits] -- PokerStars.fr O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC} O42 - Logiciel: Realtek USB 2.0 Card Reader - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {96AE7E41-E34E-47D0-AC07-1091A8127911} O42 - Logiciel: Revo Uninstaller 1.95 - (.VS Revo Group.) [HKLM][64Bits] -- Revo Uninstaller O42 - Logiciel: Shared C Run-time for x64 - (.McAfee.) [HKLM][64Bits] -- {EF79C448-6946-4D71-8134-03407888C054} O42 - Logiciel: Skype Click to Call - (.Microsoft Corporation.) [HKLM][64Bits] -- {6D1221A9-17BF-4EC0-81F2-27D30EC30701} O42 - Logiciel: Skype™ 6.21 - (.Skype Technologies S.A..) [HKLM][64Bits] -- {24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7} O42 - Logiciel: Software Updater - (.SEIKO EPSON CORPORATION.) [HKLM][64Bits] -- {B307472F-7BD9-4040-9255-CE6D6A1196A3} O42 - Logiciel: Sony Mobile Update Engine - (.Sony Mobile Communications AB.) [HKLM][64Bits] -- Update Engine O42 - Logiciel: Sony PC Companion 2.10.211 - (.Sony.) [HKLM][64Bits] -- {F09EF8F2-0976-42C1-8D9D-8DF78337C6E3} O42 - Logiciel: Spotify - (.Spotify AB.) [HKLM][64Bits] -- Spotify O42 - Logiciel: Update Installer for WildTangent Games App - (.WildTangent.) [HKLM][64Bits] -- {2FA94A64-C84E-49d1-97DD-7BF06C7BBFB2}.WildTangent Games App O42 - Logiciel: Visual Studio 2005 Tools pour Office Second Edition Runtime - (.Microsoft Corporation.) [HKLM][64Bits] -- Microsoft Visual Studio 2005 Tools for Office Runtime O42 - Logiciel: Visual Studio 2012 x64 Redistributables - (.AVG Technologies.) [HKLM][64Bits] -- {8C775E70-A791-4DA8-BCC3-6AB7136F4484} O42 - Logiciel: Visual Studio 2012 x86 Redistributables - (.AVG Technologies CZ, s.r.o..) [HKLM][64Bits] -- {98EFF19A-30AB-4E4B-B943-F06B1C63EBF8} O42 - Logiciel: Visual Studio Tools for the Office system 3.0 Runtime - (.Microsoft Corporation.) [HKLM][64Bits] -- {8FB53850-246A-3507-8ADE-0060093FFEA6} O42 - Logiciel: Visual Studio Tools for the Office system 3.0 Runtime Service Pack 1 (KB949 - (.Microsoft Corporation.) [HKLM][64Bits] -- {8FB53850-246A-3507-8ADE-0060093FFEA6}.KB949258 O42 - Logiciel: WildTangent Games App - (.WildTangent.) [HKLM][64Bits] -- {70B446D1-E03B-4ab0-9B3C-0832142C9AA8}.WildTangent Games App-acer O42 - Logiciel: clear.fi SDK - Video 2 - (.CyberLink Corp..) [HKLM][64Bits] -- {EBA33CAD-E071-48d5-A168-FBA4EEB42E93} O42 - Logiciel: clear.fi SDK- Movie 2 - (.CyberLink Corp..) [HKLM][64Bits] -- {35DA427D-BB23-49B8-9AFD-CFFCFE3B708D} O42 - Logiciel: sysTPL - (.Tlapia.) [HKLM][64Bits] -- {4B74BC31-B353-4B8F-8CBE-DAB4FF326FF1} ~ Logic: 46 Scanned in 00mn 00s ---\\ HKCU & HKLM Software Keys [HKCU\Software\AppDataLow] [HKCU\Software\Avira] [HKCU\Software\Bane Games] [HKCU\Software\Borland] [HKCU\Software\Citrix] [HKCU\Software\Classes] [HKCU\Software\Clients] [HKCU\Software\Cyberlink] [HKCU\Software\DQ Team] [HKCU\Software\EPSON Software Updater] [HKCU\Software\EPSON] [HKCU\Software\Ecommfactory] [HKCU\Software\GameHouse] [HKCU\Software\Google] [HKCU\Software\IM Providers] [HKCU\Software\JavaSoft] [HKCU\Software\Licenses] [HKCU\Software\Local AppWizard-Generated Applications] [HKCU\Software\Ludi] [HKCU\Software\MGS] [HKCU\Software\Macromedia] [HKCU\Software\Malwarebytes' Anti-Malware] [HKCU\Software\MozillaPlugins] [HKCU\Software\Mozilla] [HKCU\Software\NVIDIA Corporation] [HKCU\Software\OEM] [HKCU\Software\OpenOffice.org] [HKCU\Software\Piriform] [HKCU\Software\Policies] [HKCU\Software\Realtek] [HKCU\Software\RegisteredApplications] [HKCU\Software\SEIKO EPSON CORPORATION] [HKCU\Software\Skype] [HKCU\Software\Software] [HKCU\Software\Sony] [HKCU\Software\Trolltech] [HKCU\Software\VB and VBA Program Settings] [HKCU\Software\VSRevoGroup] [HKCU\Software\WildTangent] [HKCU\Software\WinRAR SFX] [HKCU\Software\Wow6432Node] [HKCU\Software\ZebHelpProcess Helper] [HKCU\Software\sysTPL] [HKLM\Software\AGEIA Technologies] [HKLM\Software\ATI Technologies] [HKLM\Software\AVG] [HKLM\Software\BitDefender Parental Control] [HKLM\Software\Borland] [HKLM\Software\Classes] [HKLM\Software\Clearfi] [HKLM\Software\Clients] [HKLM\Software\CyberLink] [HKLM\Software\DTS] [HKLM\Software\Dolby] [HKLM\Software\EPSON] [HKLM\Software\EnigmaSoftwareGroup] [HKLM\Software\Google] [HKLM\Software\IM Providers] [HKLM\Software\Intel] [HKLM\Software\Khronos] [HKLM\Software\Knowles] [HKLM\Software\Logitech] [HKLM\Software\Macromedia] [HKLM\Software\McAfee.com] [HKLM\Software\Mozilla] [HKLM\Software\NVIDIA Corporation] [HKLM\Software\ODBC] [HKLM\Software\OEM] [HKLM\Software\Piriform] [HKLM\Software\Policies] [HKLM\Software\Realtek Semiconductor Corp.] [HKLM\Software\Realtek] [HKLM\Software\RegisteredApplications] [HKLM\Software\SRS Labs] [HKLM\Software\SonicFocus] [HKLM\Software\Sony Mobile] [HKLM\Software\Waves Audio] [HKLM\Software\Wow6432Node\AGEIA Technologies] [HKLM\Software\Wow6432Node\AdwCleaner] [HKLM\Software\Wow6432Node\Avg] [HKLM\Software\Wow6432Node\Avira] [HKLM\Software\Wow6432Node\Borland] [HKLM\Software\Wow6432Node\Classes] [HKLM\Software\Wow6432Node\Clearfi] [HKLM\Software\Wow6432Node\Clients] [HKLM\Software\Wow6432Node\CyberLink] [HKLM\Software\Wow6432Node\EPSON] [HKLM\Software\Wow6432Node\Google] [HKLM\Software\Wow6432Node\IM Providers] [HKLM\Software\Wow6432Node\Intel] [HKLM\Software\Wow6432Node\JavaSoft] [HKLM\Software\Wow6432Node\Khronos] [HKLM\Software\Wow6432Node\Licenses] [HKLM\Software\Wow6432Node\Macromedia] [HKLM\Software\Wow6432Node\Malwarebytes' Anti-Malware (Trial)] [HKLM\Software\Wow6432Node\Malwarebytes' Anti-Malware] [HKLM\Software\Wow6432Node\MozillaPlugins] [HKLM\Software\Wow6432Node\Mozilla] [HKLM\Software\Wow6432Node\NVIDIA Corporation] [HKLM\Software\Wow6432Node\Nero] [HKLM\Software\Wow6432Node\ODBC] [HKLM\Software\Wow6432Node\OEM] [HKLM\Software\Wow6432Node\OpenOffice.org] [HKLM\Software\Wow6432Node\Policies] [HKLM\Software\Wow6432Node\Realtek Semiconductor Corp.] [HKLM\Software\Wow6432Node\Realtek] [HKLM\Software\Wow6432Node\RegisteredApplications] [HKLM\Software\Wow6432Node\SIEN SA] [HKLM\Software\Wow6432Node\Skype] [HKLM\Software\Wow6432Node\Software] [HKLM\Software\Wow6432Node\Sony Mobile] [HKLM\Software\Wow6432Node\Sony] [HKLM\Software\Wow6432Node\TuneUp] [HKLM\Software\Wow6432Node\X-AVCSD] [HKLM\Software\Wow6432Node] ~ Key Software: 236 Scanned in 00mn 00s ---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43) O43 - CFD: 09/10/2013 - 19:53:19 - [] ----D C:\Program Files (x86)\Acer O43 - CFD: 04/07/2013 - 21:57:00 - [] ----D C:\Program Files (x86)\Acer Remote O43 - CFD: 04/07/2013 - 21:57:02 - [] ---AD C:\Program Files (x86)\Acer Remote Demo O43 - CFD: 26/06/2014 - 16:42:49 - [] ----D C:\Program Files (x86)\Advanced Disk Recovery O43 - CFD: 04/07/2013 - 22:09:55 - [0] ----D C:\Program Files (x86)\AGEIA Technologies O43 - CFD: 11/02/2014 - 21:06:00 - [] ----D C:\Program Files (x86)\AVG O43 - CFD: 06/11/2014 - 21:39:21 - [] ----D C:\Program Files (x86)\Avira O43 - CFD: 15/03/2014 - 14:00:46 - [] ----D C:\Program Files (x86)\Citrix O43 - CFD: 06/11/2014 - 20:28:28 - [] ----D C:\Program Files (x86)\Common Files O43 - CFD: 01/03/2013 - 07:20:02 - [] ----D C:\Program Files (x86)\CyberLink O43 - CFD: 21/11/2013 - 19:28:53 - [0] ----D C:\Program Files (x86)\DsNET Corp O43 - CFD: 23/11/2013 - 16:26:52 - [] ----D C:\Program Files (x86)\epson O43 - CFD: 14/09/2014 - 08:48:15 - [] ----D C:\Program Files (x86)\EPSON Software O43 - CFD: 24/11/2013 - 10:24:38 - [] ----D C:\Program Files (x86)\Google O43 - CFD: 25/06/2014 - 16:19:43 - [] --H-D C:\Program Files (x86)\InstallShield Installation Information O43 - CFD: 04/07/2013 - 22:12:43 - [] ----D C:\Program Files (x86)\Intel O43 - CFD: 12/11/2014 - 11:44:06 - [] ----D C:\Program Files (x86)\Internet Explorer O43 - CFD: 22/11/2013 - 20:24:13 - [] ----D C:\Program Files (x86)\Ludi O43 - CFD: 12/11/2014 - 12:00:47 - [] ----D C:\Program Files (x86)\Malwarebytes Anti-Malware O43 - CFD: 04/07/2013 - 22:23:33 - [] ----D C:\Program Files (x86)\Microsoft Office O43 - CFD: 22/08/2013 - 16:36:30 - [] ----D C:\Program Files (x86)\Microsoft.NET O43 - CFD: 21/11/2013 - 19:04:15 - [] ----D C:\Program Files (x86)\Mozilla Firefox O43 - CFD: 14/02/2014 - 20:04:51 - [] ----D C:\Program Files (x86)\MSBuild O43 - CFD: 01/03/2013 - 07:18:53 - [] ----D C:\Program Files (x86)\Nero O43 - CFD: 14/02/2014 - 20:18:24 - [] ----D C:\Program Files (x86)\NVIDIA Corporation O43 - CFD: 05/10/2013 - 08:15:22 - [] ----D C:\Program Files (x86)\OEM O43 - CFD: 06/10/2013 - 10:41:52 - [] ----D C:\Program Files (x86)\OpenOffice.org 3 O43 - CFD: 12/09/2014 - 20:04:44 - [] ----D C:\Program Files (x86)\PokerStars.FR O43 - CFD: 04/07/2013 - 22:13:56 - [] ----D C:\Program Files (x86)\Realtek O43 - CFD: 14/02/2014 - 20:04:51 - [] ----D C:\Program Files (x86)\Reference Assemblies O43 - CFD: 06/11/2014 - 20:28:28 - [] R---D C:\Program Files (x86)\Skype O43 - CFD: 06/11/2014 - 21:46:35 - [] ----D C:\Program Files (x86)\Software O43 - CFD: 16/06/2014 - 17:36:17 - [] ----D C:\Program Files (x86)\Sony O43 - CFD: 16/06/2014 - 17:42:20 - [] ----D C:\Program Files (x86)\Sony Mobile O43 - CFD: 04/07/2013 - 22:16:43 - [] ----D C:\Program Files (x86)\Spotify O43 - CFD: 04/07/2013 - 22:14:08 - [0] --H-D C:\Program Files (x86)\Temp O43 - CFD: 21/11/2013 - 19:27:57 - [] ----D C:\Program Files (x86)\VS Revo Group O43 - CFD: 26/02/2014 - 16:49:22 - [] ----D C:\Program Files (x86)\WildGames O43 - CFD: 08/07/2014 - 17:34:33 - [] ----D C:\Program Files (x86)\WildTangent Games O43 - CFD: 12/11/2014 - 11:44:08 - [] ----D C:\Program Files (x86)\Windows Defender O43 - CFD: 14/11/2013 - 08:13:28 - [] ----D C:\Program Files (x86)\Windows Mail =>.Microsoft Corporation O43 - CFD: 26/04/2014 - 11:29:53 - [] ----D C:\Program Files (x86)\Windows Media Player =>.Microsoft Corporation O43 - CFD: 26/04/2014 - 11:29:53 - [] ----D C:\Program Files (x86)\Windows Multimedia Platform O43 - CFD: 22/08/2013 - 16:36:30 - [] ----D C:\Program Files (x86)\Windows NT O43 - CFD: 14/11/2013 - 08:13:28 - [] ----D C:\Program Files (x86)\Windows Photo Viewer O43 - CFD: 26/04/2014 - 11:29:53 - [] ----D C:\Program Files (x86)\Windows Portable Devices O43 - CFD: 14/02/2014 - 20:18:27 - [] -SH-D C:\Program Files (x86)\Windows Sidebar O43 - CFD: 22/08/2013 - 16:36:30 - [] ----D C:\Program Files (x86)\WindowsPowerShell O43 - CFD: 12/11/2014 - 13:03:13 - [] ----D C:\Program Files (x86)\ZHPDiag =>.Nicolas Coolman O43 - CFD: 30/09/2014 - 17:38:36 - [] ----D C:\Program Files (x86)\Common Files\Bitdefender O43 - CFD: 22/11/2013 - 17:03:12 - [] ----D C:\Program Files (x86)\Common Files\Borland Shared O43 - CFD: 04/07/2013 - 22:13:54 - [] ----D C:\Program Files (x86)\Common Files\InstallShield O43 - CFD: 10/07/2014 - 19:22:35 - [] ----D C:\Program Files (x86)\Common Files\logishrd O43 - CFD: 14/02/2014 - 20:18:23 - [] ----D C:\Program Files (x86)\Common Files\Microsoft Shared O43 - CFD: 01/03/2013 - 07:18:36 - [] ----D C:\Program Files (x86)\Common Files\Nero O43 - CFD: 04/07/2013 - 22:11:23 - [] ----D C:\Program Files (x86)\Common Files\postureAgent O43 - CFD: 22/08/2013 - 16:36:33 - [] ----D C:\Program Files (x86)\Common Files\Services O43 - CFD: 06/11/2014 - 20:28:28 - [] ----D C:\Program Files (x86)\Common Files\Skype O43 - CFD: 14/11/2013 - 08:13:28 - [] ----D C:\Program Files (x86)\Common Files\System O43 - CFD: 04/07/2013 - 22:35:23 - [] ----D C:\ProgramData\Acer O43 - CFD: 22/08/2013 - 15:45:52 - [] -SH-D C:\ProgramData\Application Data O43 - CFD: 09/02/2014 - 14:00:39 - [] ----D C:\ProgramData\AVG O43 - CFD: 30/09/2014 - 17:43:45 - [] ----D C:\ProgramData\AVG2014 O43 - CFD: 05/11/2014 - 13:52:24 - [] ----D C:\ProgramData\Avira O43 - CFD: 30/09/2014 - 17:49:27 - [] ----D C:\ProgramData\BDLogging O43 - CFD: 16/02/2014 - 18:11:48 - [] ----D C:\ProgramData\BlueStacks O43 - CFD: 05/10/2013 - 08:02:58 - [] -SH-D C:\ProgramData\Bureau O43 - CFD: 24/02/2014 - 18:05:24 - [] ----D C:\ProgramData\CasualForge O43 - CFD: 09/10/2013 - 19:49:15 - [] ----D C:\ProgramData\clear.fi O43 - CFD: 04/07/2013 - 22:28:21 - [] ----D C:\ProgramData\CLSK O43 - CFD: 14/02/2014 - 20:33:27 - [] --H-D C:\ProgramData\Common Files O43 - CFD: 13/10/2013 - 18:39:05 - [] ----D C:\ProgramData\CyberLink O43 - CFD: 22/08/2013 - 15:45:52 - [] -SH-D C:\ProgramData\Desktop O43 - CFD: 22/08/2013 - 15:45:52 - [] -SH-D C:\ProgramData\Documents O43 - CFD: 12/11/2014 - 12:12:23 - [] ----D C:\ProgramData\ekqCqxGVcE O43 - CFD: 23/11/2013 - 16:26:00 - [] ----D C:\ProgramData\EPSON O43 - CFD: 25/02/2014 - 18:08:28 - [] ----D C:\ProgramData\GameHouse O43 - CFD: 04/07/2013 - 22:28:24 - [] ----D C:\ProgramData\install_clap O43 - CFD: 04/07/2013 - 22:12:43 - [] ----D C:\ProgramData\Intel O43 - CFD: 12/11/2014 - 12:00:46 - [] ----D C:\ProgramData\Malwarebytes O43 - CFD: 21/12/2013 - 19:47:20 - [] ----D C:\ProgramData\McAfee O43 - CFD: 05/10/2013 - 08:02:58 - [] -SH-D C:\ProgramData\Menu Démarrer O43 - CFD: 30/09/2014 - 17:43:45 - [] ----D C:\ProgramData\MFAData O43 - CFD: 18/10/2013 - 17:03:20 - [] ----D C:\ProgramData\MGS O43 - CFD: 14/02/2014 - 20:18:29 - [] -S--D C:\ProgramData\Microsoft O43 - CFD: 05/10/2013 - 08:02:58 - [] -SH-D C:\ProgramData\Modèles O43 - CFD: 01/03/2013 - 07:18:36 - [] ----D C:\ProgramData\Nero O43 - CFD: 21/12/2013 - 19:47:01 - [] ----D C:\ProgramData\Norton O43 - CFD: 21/12/2013 - 19:30:53 - [] ----D C:\ProgramData\NortonInstaller O43 - CFD: 12/11/2014 - 12:43:26 - [] ----D C:\ProgramData\NVIDIA O43 - CFD: 14/02/2014 - 20:12:55 - [] ----D C:\ProgramData\NVIDIA Corporation O43 - CFD: 05/10/2013 - 08:58:07 - [] ----D C:\ProgramData\OEM O43 - CFD: 05/10/2013 - 08:15:08 - [] ----D C:\ProgramData\OEM_YAHOO O43 - CFD: 06/11/2014 - 21:39:24 - [] ----D C:\ProgramData\Package Cache O43 - CFD: 16/02/2014 - 18:21:02 - [] ----D C:\ProgramData\PlayFirst O43 - CFD: 14/02/2014 - 20:18:29 - [] ----D C:\ProgramData\PRICache O43 - CFD: 14/02/2014 - 20:19:22 - [] ----D C:\ProgramData\regid.1991-06.com.microsoft O43 - CFD: 06/11/2014 - 20:28:27 - [] ----D C:\ProgramData\Skype O43 - CFD: 16/06/2014 - 17:36:17 - [] ----D C:\ProgramData\Sony O43 - CFD: 16/06/2014 - 17:42:20 - [] ----D C:\ProgramData\Sony Mobile O43 - CFD: 22/08/2013 - 15:45:52 - [] -SH-D C:\ProgramData\Start Menu O43 - CFD: 04/07/2013 - 22:24:39 - [] ----D C:\ProgramData\Symantec O43 - CFD: 04/07/2013 - 22:28:24 - [] ----D C:\ProgramData\Temp O43 - CFD: 22/08/2013 - 15:45:52 - [] -SH-D C:\ProgramData\Templates O43 - CFD: 22/02/2014 - 20:19:58 - [] ----D C:\ProgramData\Wild Tangent O43 - CFD: 16/02/2014 - 18:17:23 - [] ----D C:\ProgramData\WildTangent O43 - CFD: 11/02/2014 - 18:06:54 - [] -SH-D C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308} O43 - CFD: 09/10/2013 - 19:45:12 - [] ----D C:\Users\martial\AppData\Roaming\acer O43 - CFD: 05/10/2013 - 08:15:16 - [0] ----D C:\Users\martial\AppData\Roaming\AcerRemote O43 - CFD: 05/10/2013 - 08:14:43 - [] ----D C:\Users\martial\AppData\Roaming\Adobe O43 - CFD: 09/02/2014 - 13:58:47 - [] ----D C:\Users\martial\AppData\Roaming\AVG O43 - CFD: 05/11/2014 - 13:51:54 - [] ----D C:\Users\martial\AppData\Roaming\Avira O43 - CFD: 24/02/2014 - 18:05:24 - [] ----D C:\Users\martial\AppData\Roaming\CasualForge O43 - CFD: 27/02/2014 - 19:19:49 - [] ----D C:\Users\martial\AppData\Roaming\DanceOfDeath O43 - CFD: 09/11/2013 - 13:04:04 - [] ----D C:\Users\martial\AppData\Roaming\Google O43 - CFD: 14/02/2014 - 20:32:09 - [] ----D C:\Users\martial\AppData\Roaming\Identities O43 - CFD: 20/02/2014 - 21:19:37 - [] ----D C:\Users\martial\AppData\Roaming\Jewel Match 3 O43 - CFD: 08/07/2014 - 17:41:20 - [] ----D C:\Users\martial\AppData\Roaming\Legacy Games O43 - CFD: 05/10/2013 - 08:14:43 - [] ----D C:\Users\martial\AppData\Roaming\Macromedia O43 - CFD: 17/02/2014 - 18:37:39 - [] ----D C:\Users\martial\AppData\Roaming\Magic Academy O43 - CFD: 09/02/2014 - 11:40:58 - [] ----D C:\Users\martial\AppData\Roaming\Malwarebytes O43 - CFD: 14/02/2014 - 20:33:07 - [] -S--D C:\Users\martial\AppData\Roaming\Microsoft O43 - CFD: 05/11/2014 - 13:52:37 - [] ----D C:\Users\martial\AppData\Roaming\Mozilla O43 - CFD: 16/02/2014 - 18:11:46 - [] ----D C:\Users\martial\AppData\Roaming\NVIDIA O43 - CFD: 06/10/2013 - 10:43:24 - [] ----D C:\Users\martial\AppData\Roaming\OpenOffice.org O43 - CFD: 16/02/2014 - 18:21:02 - [] ----D C:\Users\martial\AppData\Roaming\PlayFirst O43 - CFD: 01/11/2014 - 19:26:42 - [] ----D C:\Users\martial\AppData\Roaming\QuickScan O43 - CFD: 08/11/2014 - 00:41:02 - [] ----D C:\Users\martial\AppData\Roaming\Skype O43 - CFD: 23/02/2014 - 18:22:11 - [] ----D C:\Users\martial\AppData\Roaming\Specialbit O43 - CFD: 07/02/2014 - 20:57:49 - [] ----D C:\Users\martial\AppData\Roaming\TuneUp Software O43 - CFD: 04/03/2014 - 16:56:06 - [] ----D C:\Users\martial\AppData\Roaming\Valusoft O43 - CFD: 16/02/2014 - 18:15:35 - [] ----D C:\Users\martial\AppData\Roaming\WildTangent O43 - CFD: 12/11/2014 - 13:03:38 - [] ----D C:\Users\martial\AppData\Roaming\ZHP =>.Nicolas Coolman O43 - CFD: 09/10/2013 - 19:53:48 - [] ----D C:\Users\martial\AppData\Local\Acer O43 - CFD: 09/10/2013 - 19:51:58 - [] ----D C:\Users\martial\AppData\Local\AcerCloud O43 - CFD: 14/02/2014 - 20:17:04 - [] -SH-D C:\Users\martial\AppData\Local\Application Data O43 - CFD: 15/03/2014 - 14:00:38 - [] ----D C:\Users\martial\AppData\Local\Citrix O43 - CFD: 10/10/2013 - 17:58:46 - [] ----D C:\Users\martial\AppData\Local\clear.fi O43 - CFD: 09/10/2013 - 19:48:40 - [] ----D C:\Users\martial\AppData\Local\ClearfiMedia O43 - CFD: 09/10/2013 - 19:44:51 - [] ----D C:\Users\martial\AppData\Local\ClearfiPhoto O43 - CFD: 09/02/2014 - 11:03:49 - [0] ----D C:\Users\martial\AppData\Local\CrashDumps O43 - CFD: 13/10/2013 - 18:38:58 - [] ----D C:\Users\martial\AppData\Local\Cyberlink O43 - CFD: 06/03/2014 - 08:33:41 - [0] ----D C:\Users\martial\AppData\Local\Diagnostics O43 - CFD: 09/10/2013 - 19:51:04 - [] ----D C:\Users\martial\AppData\Local\Doc O43 - CFD: 05/11/2014 - 17:04:47 - [0] ----D C:\Users\martial\AppData\Local\ElevatedDiagnostics O43 - CFD: 26/04/2014 - 11:38:19 - [] -SH-D C:\Users\martial\AppData\Local\EmieSiteList O43 - CFD: 26/04/2014 - 11:38:19 - [] -SH-D C:\Users\martial\AppData\Local\EmieUserList O43 - CFD: 23/11/2013 - 19:41:50 - [] ----D C:\Users\martial\AppData\Local\Google O43 - CFD: 14/02/2014 - 20:17:04 - [] -SH-D C:\Users\martial\AppData\Local\Historique O43 - CFD: 06/10/2013 - 09:35:52 - [] ----D C:\Users\martial\AppData\Local\Ludi O43 - CFD: 07/02/2014 - 20:56:15 - [] ----D C:\Users\martial\AppData\Local\MFAData O43 - CFD: 14/02/2014 - 20:32:11 - [] ----D C:\Users\martial\AppData\Local\Microsoft O43 - CFD: 16/02/2014 - 15:57:00 - [] ----D C:\Users\martial\AppData\Local\Packages O43 - CFD: 11/11/2014 - 19:24:44 - [] ----D C:\Users\martial\AppData\Local\PokerStars.FR O43 - CFD: 21/11/2013 - 19:04:00 - [] ----D C:\Users\martial\AppData\Local\Programs O43 - CFD: 10/07/2014 - 19:28:51 - [] ----D C:\Users\martial\AppData\Local\Skype O43 - CFD: 06/11/2014 - 21:46:35 - [] ----D C:\Users\martial\AppData\Local\Software O43 - CFD: 23/02/2014 - 21:15:08 - [] ----D C:\Users\martial\AppData\Local\Tales of Lagoona O43 - CFD: 12/11/2014 - 13:03:15 - [] ----D C:\Users\martial\AppData\Local\Temp O43 - CFD: 14/02/2014 - 20:17:04 - [] -SH-D C:\Users\martial\AppData\Local\Temporary Internet Files O43 - CFD: 10/02/2014 - 15:04:39 - [] ----D C:\Users\martial\AppData\Local\VirtualStore O43 - CFD: 17/02/2014 - 18:39:32 - [] ----D C:\Users\martial\AppData\Local\Wild Tangent O43 - CFD: 22/08/2013 - 16:36:32 - [] R---D C:\Users\martial\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility O43 - CFD: 22/08/2013 - 16:36:32 - [] R---D C:\Users\martial\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories O43 - CFD: 15/09/2014 - 15:49:42 - [] R---D C:\Users\martial\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools O43 - CFD: 14/02/2014 - 19:28:56 - [0] ----D C:\Users\martial\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games O43 - CFD: 12/11/2014 - 12:42:23 - [] ----D C:\Users\martial\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome O43 - CFD: 14/02/2014 - 20:19:22 - [] ----D C:\Users\martial\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ludi O43 - CFD: 22/08/2013 - 16:36:32 - [] ----D C:\Users\martial\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance O43 - CFD: 14/02/2014 - 20:19:22 - [] ----D C:\Users\martial\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PokerStars.FR O43 - CFD: 14/02/2014 - 20:19:22 - [] ----D C:\Users\martial\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller O43 - CFD: 15/09/2014 - 15:49:42 - [] R---D C:\Users\martial\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup O43 - CFD: 14/02/2014 - 20:17:33 - [] R---D C:\Users\martial\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools ~ Program Folder: 173 Scanned in 00mn 00s ---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44) O44 - LFC:[MD5.D18149850795E7203610CEE9491515F1] - 04/11/2014 - 01:10:18 ---A- . (.Microsoft Corporation - General Telemetry.) -- C:\Windows\System32\generaltel.dll [304128] O44 - LFC:[MD5.91BB0DDA472733457072DA61178FA48E] - 05/11/2014 - 00:38:37 ---A- . (.Microsoft Corporation - Program Compatibility Data Updater.) -- C:\Windows\System32\aepdu.dll [228864] O44 - LFC:[MD5.93AF83F7B7C48DB1ACDD8E769CD93D84] - 05/11/2014 - 13:41:56 ---A- . (...) -- C:\bdlog.txt [3386] O44 - LFC:[MD5.AF61774060F277FE45CBD3A9A8E7D45A] - 05/11/2014 - 13:51:03 ---A- . (.Avira Operations GmbH & Co. KG - Avira Driver for Security Enhancement.) -- C:\Windows\System32\Drivers\avipbb.sys [131608] O44 - LFC:[MD5.390184FAD8FCC1B6DA25AEBAE928C3B6] - 05/11/2014 - 13:51:03 ---A- . (.Avira Operations GmbH & Co. KG - Avira Manager Driver.) -- C:\Windows\System32\Drivers\avkmgr.sys [28600] O44 - LFC:[MD5.1B87A1F2FA5B91AC1A7D171B8D952441] - 05/11/2014 - 13:51:03 ---A- . (.Avira Operations GmbH & Co. KG - Avira Minifilter Driver.) -- C:\Windows\System32\Drivers\avgntflt.sys [119272] O44 - LFC:[MD5.CFF660F4E0F66724E3B0D921C1A1A880] - 05/11/2014 - 13:51:59 ---A- . (.Avira Operations GmbH & Co. KG - Avira WFP Network Driver.) -- C:\Windows\System32\Drivers\avnetflt.sys [43064] O44 - LFC:[MD5.3B32CAA07D672F8A2E0DF5CB3A873F45] - 06/11/2014 - 21:58:03 ---A- . (...) -- C:\Windows\System32\Drivers\EsgScanner.sys [22704] O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 06/11/2014 - 21:58:46 ---A- . (...) -- C:\autoexec.bat [0] O44 - LFC:[MD5.18783696066FAE75C118A68BD67BA34B] - 08/11/2014 - 16:51:25 ---A- . (...) -- C:\Windows\System32\PerfStringBackup.INI [1824010] O44 - LFC:[MD5.9C7AD91DE72D107EC29F0A83AAD84DD5] - 08/11/2014 - 16:51:25 ---A- . (...) -- C:\Windows\System32\perfc009.dat [135394] O44 - LFC:[MD5.72408D081F095B847B21AE53A64A1C90] - 08/11/2014 - 16:51:25 ---A- . (...) -- C:\Windows\System32\perfc00C.dat [159206] O44 - LFC:[MD5.8A7F05AF9DF2E16ED8AE045A5C59514B] - 08/11/2014 - 16:51:25 ---A- . (...) -- C:\Windows\System32\perfh009.dat [722278] O44 - LFC:[MD5.EF4FB389A26FDD0C94D38B6BCAA3B14B] - 08/11/2014 - 16:51:25 ---A- . (...) -- C:\Windows\System32\perfh00C.dat [811108] O44 - LFC:[MD5.A92EF73B02686B7E6F070B486512DB88] - 11/11/2014 - 23:07:51 ---A- . (...) -- C:\Windows\System32\ApnDatabase.xml [389176] O44 - LFC:[MD5.9C55CE9707B3CA29A6505BCDCC546390] - 11/11/2014 - 23:07:51 ---A- . (.Microsoft Corporation - Microsoft Fax API Support DLL.) -- C:\Windows\System32\FXSAPI.dll [275968] O44 - LFC:[MD5.6C118AEDD15FDBEAECC0E85C64B5B86B] - 11/11/2014 - 23:07:51 ---A- . (.Microsoft Corporation - Microsoft Fax Server Extended COM Client In.) -- C:\Windows\System32\FXSCOMEX.dll [615424] O44 - LFC:[MD5.5416C603B6C85CF0698E8A2A1D28BAA2] - 11/11/2014 - 23:07:52 ---A- . (.Microsoft Corporation - DLL d’objets PrintUI.) -- C:\Windows\System32\puiobj.dll [448512] O44 - LFC:[MD5.7F23E38C5B6448F91439E4066645191E] - 11/11/2014 - 23:07:52 ---A- . (.Microsoft Corporation - FWP/IPsec Kernel-Mode API.) -- C:\Windows\System32\Drivers\FWPKCLNT.SYS [428864] O44 - LFC:[MD5.50E96089F9BE352621997143A56C8E76] - 11/11/2014 - 23:07:52 ---A- . (.Microsoft Corporation - Fournisseur d’impression de rendu côté clie.) -- C:\Windows\System32\win32spl.dll [822272] O44 - LFC:[MD5.8758F5DEBD2B950B2D56ED11F9E0B38F] - 11/11/2014 - 23:07:52 ---A- . (.Microsoft Corporation - NTFS Utility DLL.) -- C:\Windows\System32\untfs.dll [545792] O44 - LFC:[MD5.E3FCE2A6B3533D99A3B498504DF9CC47] - 11/11/2014 - 23:07:52 ---A- . (.Microsoft Corporation - Network I/O Subsystem.) -- C:\Windows\System32\Drivers\netio.sys [474432] O44 - LFC:[MD5.66732C13628BDB1AB0D6FD46027327C2] - 11/11/2014 - 23:07:52 ---A- . (.Microsoft Corporation - Pilote de classe de stockage de masse USB.) -- C:\Windows\System32\Drivers\USBSTOR.SYS [148800] O44 - LFC:[MD5.9CE162EB9057CF079736F4DD00FC0D6C] - 11/11/2014 - 23:07:52 ---A- . (.Microsoft Corporation - Service WSMan.) -- C:\Windows\System32\WsmSvc.dll [2480128] O44 - LFC:[MD5.C88B63FE96DB4BCED65DD442BC8E77F5] - 11/11/2014 - 23:07:53 ---A- . (.Microsoft Corporation - DLL de spouleur local.) -- C:\Windows\System32\localspl.dll [1053184] O44 - LFC:[MD5.CA729FCE295895515A09BD6FF7903DC8] - 11/11/2014 - 23:07:53 ---A- . (.Microsoft Corporation - DLL source et récepteur MPEG4 Media Foundat.) -- C:\Windows\System32\mfmp4srcsnk.dll [836176] O44 - LFC:[MD5.A208498C5CD750A1743C1AC8162A810F] - 11/11/2014 - 23:07:53 ---A- . (.Microsoft Corporation - Media Foundation Media Engine DLL.) -- C:\Windows\System32\MFMediaEngine.dll [941568] O44 - LFC:[MD5.CCB3A2BB60FE5073F2DEA63FE83CF8FE] - 11/11/2014 - 23:07:53 ---A- . (.Microsoft Corporation - Pilote TCP/IP.) -- C:\Windows\System32\Drivers\tcpip.sys [2497344] O44 - LFC:[MD5.1907823D5ACFD75D1D8C0D4318299726] - 11/11/2014 - 23:07:54 ---A- . (.Microsoft Corporation - System Settings Handlers Implementation.) -- C:\Windows\System32\SettingsHandlers.dll [2714112] O44 - LFC:[MD5.C4306ADC38939CAC60EA38AAD9F170C0] - 11/11/2014 - 23:07:54 ---A- . (.Microsoft Corporation - TWINUI.) -- C:\Windows\System32\twinui.dll [13424128] O44 - LFC:[MD5.1D303CE5BCBD5B80BBA08321F28A3F86] - 11/11/2014 - 23:07:55 ---A- . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll [21197152] O44 - LFC:[MD5.BCE66E78D388875B87286CA091E7075F] - 11/11/2014 - 23:07:55 ---A- . (.Microsoft Corporation - NT Kernel & System.) -- C:\Windows\System32\ntoskrnl.exe [7484224] O44 - LFC:[MD5.9F87516BF76C40B41D831F7D729A6044] - 11/11/2014 - 23:07:58 ---A- . (.Microsoft Corporation - Audio Engine.) -- C:\Windows\System32\AudioEng.dll [482872] O44 - LFC:[MD5.8085F95BB18A171E7221D2831BC08BC2] - 11/11/2014 - 23:07:58 ---A- . (.Microsoft Corporation - Audio Ks Endpoint.) -- C:\Windows\System32\AUDIOKSE.dll [394120] O44 - LFC:[MD5.84549E8C8BF76B293A7E625A98D4BCF9] - 11/11/2014 - 23:07:58 ---A- . (.Microsoft Corporation - Gestionnaire de liaisons d’objets2.) -- C:\Windows\System32\packager.dll [81408] O44 - LFC:[MD5.7F70B1044272982AAEA7C16E83424770] - 11/11/2014 - 23:07:58 ---A- . (.Microsoft Corporation - Générateur de points de terminaison du serv.) -- C:\Windows\System32\AudioEndpointBuilder.dll [226304] O44 - LFC:[MD5.DFDFDE2EA4B5CD0606BA6E56ECEE502D] - 11/11/2014 - 23:07:58 ---A- . (.Microsoft Corporation - Isolation graphique de périphérique audio W.) -- C:\Windows\System32\audiodg.exe [272248] O44 - LFC:[MD5.BB93DAAAE9006598935192B9CB65E475] - 11/11/2014 - 23:07:58 ---A- . (.Microsoft Corporation - Media Foundation Crash Dump Encryption DLL.) -- C:\Windows\System32\EncDump.dll [108432] O44 - LFC:[MD5.B31C4917EC5EADE24A90DDAF37EA00E0] - 11/11/2014 - 23:07:58 ---A- . (.Microsoft Corporation - Pilote Win32 multi-utilisateurs.) -- C:\Windows\System32\win32k.sys [4182016] O44 - LFC:[MD5.C0484CA5C7F87E38909746B63C7FC868] - 11/11/2014 - 23:07:58 ---A- . (.Microsoft Corporation - Service Audio Windows.) -- C:\Windows\System32\audiosrv.dll [911360] O44 - LFC:[MD5.9C88C9397B44B76E5C9A44B8E2CE53A1] - 11/11/2014 - 23:07:58 ---A- . (.Microsoft Corporation - Session audio.) -- C:\Windows\System32\AudioSes.dll [500016] O44 - LFC:[MD5.93645AEBE163230A2ED5050C14AE6603] - 11/11/2014 - 23:07:59 ---A- . (.Microsoft Corporation - MSXML 3.0.) -- C:\Windows\System32\msxml3.dll [2149376] O44 - LFC:[MD5.668417ED63F9FBE7DD8D7A54B04279DA] - 11/11/2014 - 23:09:29 ---A- . (.Microsoft Corporation - File Risk Estimation.) -- C:\Windows\System32\winshfhc.dll [14336] O44 - LFC:[MD5.4AD874CDC812EC156265E451B6B09DAB] - 11/11/2014 - 23:09:30 ---A- . (.Microsoft Corporation - Microsoft Network Realtime Inspection Drive.) -- C:\Windows\System32\Drivers\WdNisDrv.sys [114496] O44 - LFC:[MD5.0359607177E5E9F6041136CC0A5CB0B6] - 11/11/2014 - 23:09:30 ---A- . (.Microsoft Corporation - Microsoft antimalware boot driver.) -- C:\Windows\System32\Drivers\WdBoot.sys [35320] O44 - LFC:[MD5.DE8D12B4C3F55FA2C5E9774314F6C58A] - 11/11/2014 - 23:09:31 ---A- . (.Microsoft Corporation - Microsoft antimalware file system filter dr.) -- C:\Windows\System32\Drivers\WdFilter.sys [258368] O44 - LFC:[MD5.F0A117D19873FCDF801F082F33BFBB6C] - 11/11/2014 - 23:09:32 ---A- . (.Microsoft Corporation - DLL client de l’API uilisateur de Windows m.) -- C:\Windows\System32\user32.dll [1519488] O44 - LFC:[MD5.4D94560FD4982BB52C1FE64AE38E1A9F] - 11/11/2014 - 23:10:10 ---A- . (.Microsoft Corporation - Windows Update Application Launcher.) -- C:\Windows\System32\wuapp.exe [35840] O44 - LFC:[MD5.5D67074419BBFDCA587C2E2A93743E8A] - 11/11/2014 - 23:10:10 ---A- . (.Microsoft Corporation - Windows Update Vista Web Control.) -- C:\Windows\System32\wuwebv.dll [140288] O44 - LFC:[MD5.2E66E7D4F1E39F7048A231AA60FD2532] - 11/11/2014 - 23:10:10 ---A- . (.Microsoft Corporation - Windows Update WUDriver Stub.) -- C:\Windows\System32\wudriver.dll [95744] O44 - LFC:[MD5.4A112AD7D9C7289FE9945D05E97019D0] - 11/11/2014 - 23:10:10 ---A- . (.Microsoft Corporation - Windows Update Wu exports.) -- C:\Windows\System32\wuaext.dll [17408] O44 - LFC:[MD5.70AC0FA699C9420CB282CCF72993C2E1] - 11/11/2014 - 23:10:10 ---A- . (.Microsoft Corporation - Windows Update client proxy stub 2.) -- C:\Windows\System32\wups2.dll [51712] O44 - LFC:[MD5.CCE7F88AD038494253B485EC1B144EB3] - 11/11/2014 - 23:10:10 ---A- . (.Microsoft Corporation - Windows Update client proxy stub.) -- C:\Windows\System32\wups.dll [60416] O44 - LFC:[MD5.EA2DF5520D3623F353F43809A2F88086] - 11/11/2014 - 23:10:10 ---A- . (.Microsoft Corporation - Windows Update.) -- C:\Windows\System32\wuauclt.exe [55776] O44 - LFC:[MD5.BCC10D47920E83EAC8F2E7E2D414692E] - 11/11/2014 - 23:10:11 ---A- . (.Microsoft Corporation - API du client Windows Update.) -- C:\Windows\System32\wuapi.dll [894976] O44 - LFC:[MD5.DCD090318EC800CF6275C6835900B0C6] - 11/11/2014 - 23:10:11 ---A- . (.Microsoft Corporation - Agent de mise à jour automatique Windows Up.) -- C:\Windows\System32\wuaueng.dll [3557376] O44 - LFC:[MD5.2585412FC573F298FCBFD6759F8C4C0F] - 11/11/2014 - 23:10:11 ---A- . (.Microsoft Corporation - Expérience utilisateur du client Windows Up.) -- C:\Windows\System32\wucltux.dll [1714176] O44 - LFC:[MD5.E67B019D23320AA0C5F1E6DE5D30546A] - 11/11/2014 - 23:10:11 ---A- . (.Microsoft Corporation - Windows Update Modern WuApp.) -- C:\Windows\System32\WUSettingsProvider.dll [407552] O44 - LFC:[MD5.D1A2E993DB1867C79177CCC9DB6337D0] - 11/11/2014 - 23:10:14 ---A- . (.Microsoft Corporation - Interface utilisateur de consentement pour.) -- C:\Windows\System32\consent.exe [116032] O44 - LFC:[MD5.034ED41F13D9C1845C1E081F05B640DB] - 11/11/2014 - 23:10:14 ---A- . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll [110080] O44 - LFC:[MD5.D5B41A0C38408814A3E9BAC8C82B2E5B] - 11/11/2014 - 23:10:15 ---A- . (.Microsoft Corporation - Interface utilisateur d’authentification Wi.) -- C:\Windows\System32\authui.dll [2773504] O44 - LFC:[MD5.D0C15BC83B3D0AF4F9B1D70216D91794] - 11/11/2014 - 23:10:15 ---A- . (.Microsoft Corporation - Windows® installer.) -- C:\Windows\System32\msihnd.dll [428032] O44 - LFC:[MD5.EF745B98D81B8C462DB99FC8B5C4322A] - 11/11/2014 - 23:10:16 ---A- . (.Microsoft Corporation - Windows Installer.) -- C:\Windows\System32\msi.dll [3320320] O44 - LFC:[MD5.9A108C0A3092110F4651B3AFB9CC7B3D] - 11/11/2014 - 23:10:17 ---A- . (.Microsoft Corporation - Pas de description.) -- C:\Windows\System32\oleaut32.dll [789184] O44 - LFC:[MD5.A8484FB640E044858BA19FB4F13DD4CE] - 11/11/2014 - 23:11:01 ---A- . (.Microsoft Corporation - DLL des événements d’audit de la sécurité.) -- C:\Windows\System32\msaudite.dll [154112] O44 - LFC:[MD5.D7B23B3154508256C9F434EF9B65B91D] - 11/11/2014 - 23:11:01 ---A- . (.Microsoft Corporation - UMRDP Display Driver.) -- C:\Windows\System32\rdpudd.dll [131584] O44 - LFC:[MD5.488CEA4F1B4D2446FFB7A94E3CB385FE] - 11/11/2014 - 23:11:02 ---A- . (.Microsoft Corporation - Client Microsoft® Active Directory Certific.) -- C:\Windows\System32\certcli.dll [445440] O44 - LFC:[MD5.91E59FCB3B32DD84E5DCDA2EA1583807] - 11/11/2014 - 23:11:02 ---A- . (.Microsoft Corporation - DLL du schéma d’audit de sécurité.) -- C:\Windows\System32\adtschema.dll [736768] O44 - LFC:[MD5.949E590B76018E4523FC71CE510ED9ED] - 11/11/2014 - 23:11:02 ---A- . (.Microsoft Corporation - DLL serveur LSA.) -- C:\Windows\System32\lsasrv.dll [1441792] O44 - LFC:[MD5.4E1207CE16E615B0B7A70DC889F4500E] - 11/11/2014 - 23:11:02 ---A- . (.Microsoft Corporation - Kernel Cryptography, Next Generation.) -- C:\Windows\System32\Drivers\cng.sys [563976] O44 - LFC:[MD5.6D2EE96150E35B9EA49F2B481DE0369A] - 11/11/2014 - 23:11:02 ---A- . (.Microsoft Corporation - Kernel Security Support Provider Interface.) -- C:\Windows\System32\Drivers\ksecpkg.sys [177472] O44 - LFC:[MD5.9F08A6608F98B5407E7DDBCF306573EF] - 11/11/2014 - 23:11:02 ---A- . (.Microsoft Corporation - Microsoft RDP Video Miniport driver.) -- C:\Windows\System32\Drivers\rdpvideominiport.sys [27456] O44 - LFC:[MD5.3D2D2EA099D98FE6B94C7D8C7992C08C] - 11/11/2014 - 23:11:02 ---A- . (.Microsoft Corporation - Microsoft RemoteFX VM Transport.) -- C:\Windows\System32\rfxvmt.dll [40448] O44 - LFC:[MD5.1D25CC0A9C480C5D56A5A6CF2B5DEB99] - 11/11/2014 - 23:11:03 ---A- . (.Microsoft Corporation - DLL RDPCore TS.) -- C:\Windows\System32\rdpcorets.dll [3547648] O44 - LFC:[MD5.622928F5A8045F8122F10561D6C35ED0] - 11/11/2014 - 23:11:25 ---A- . (.Microsoft Corporation - Microsoft SChannel Provider.) -- C:\Windows\System32\ncryptsslp.dll [104336] O44 - LFC:[MD5.6DE50D5592C6EE18C87B0C2EEEDC1621] - 11/11/2014 - 23:11:26 ---A- . (.Microsoft Corporation - DPAPI Server.) -- C:\Windows\System32\dpapisrv.dll [185856] O44 - LFC:[MD5.F0CE4A653EEBA09509EAF93AE2226FA9] - 11/11/2014 - 23:11:26 ---A- . (.Microsoft Corporation - Fournisseur de sécurité TLS/SSL.) -- C:\Windows\System32\schannel.dll [426496] O44 - LFC:[MD5.D92FB5770CBDE049A4732B76A77F6864] - 12/11/2014 - 06:52:15 ---A- . (.Microsoft Corporation - Outil de suppression de logiciels malveilla.) -- C:\Windows\System32\MRT.exe [103374192] O44 - LFC:[MD5.90BEF43F252292F7B94B85E5ED4AF73B] - 12/11/2014 - 11:46:28 ---A- . (...) -- C:\Windows\System32\FNTCACHE.DAT [362744] O44 - LFC:[MD5.5C3669B71657F22E67A1D4BD49D2CBE7] - 12/11/2014 - 12:00:46 ---A- . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\Drivers\mbam.sys [25816] O44 - LFC:[MD5.D3311B31C470E7681B14D9B014CBF9ED] - 12/11/2014 - 12:00:46 ---A- . (.Malwarebytes Corporation - Malwarebytes Chameleon Protection Driver.) -- C:\Windows\System32\Drivers\mbamchameleon.sys [93400] O44 - LFC:[MD5.D1F2D4DF0A5D3B700794E26356A55B44] - 12/11/2014 - 12:00:46 ---A- . (.Malwarebytes Corporation - Malwarebytes Web Access Control.) -- C:\Windows\System32\Drivers\mwac.sys [64216] O44 - LFC:[MD5.56CA369CAD9DFA16773785FB4B92CB0A] - 12/11/2014 - 12:42:53 ---A- . (...) -- C:\Windows\WindowsUpdate.log [1930010] O44 - LFC:[MD5.69CC3CE5DBF408B6A7C4E01A806429B6] - 12/11/2014 - 12:43:15 ---A- . (...) -- C:\Windows\PFRO.log [125284] O44 - LFC:[MD5.26C43960C99EE861A5D0EDC4DCF3B1C3] - 12/11/2014 - 12:45:12 ---A- . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\Drivers\MBAMSwissArmy.sys [129752] O44 - LFC:[MD5.E08DBAAD53DC1B1DFBE95C880EAD194B] - 12/11/2014 - 12:45:21 -S-A- . (...) -- C:\Windows\bootstat.dat [67584] O44 - LFC:[MD5.E9732E0EE8F516FFB69BB01A38F3806A] - 12/11/2014 - 13:02:10 ---A- . (...) -- C:\PhysicalDisk0_MBR.bin [512] O44 - LFC:[MD5.A7B22A0542D02AB67A0A0D3107DD53F0] - 30/10/2014 - 12:25:26 ----- . (.Microsoft Corporation - Microsoft Malware Protection Signature Upda.) -- C:\Windows\System32\MpSigStub.exe [275080] O44 - LFC:[MD5.BC3B7CCE855F9A8E7BC96F7062229A02] - 31/10/2014 - 04:20:27 ---A- . (.Microsoft Corporation - Microsoft SmartScreen Filter.) -- C:\Windows\System32\ieapfltr.dll [799232] O44 - LFC:[MD5.559E084EEBE44864493B2903433F19B3] - 31/10/2014 - 04:32:27 ---A- . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll [1550336] O44 - LFC:[MD5.161BC2E883A8D8759A4DCF2A85AF9128] - 31/10/2014 - 04:42:04 ---A- . (.Microsoft Corporation - IE plugin image decoder support DLL.) -- C:\Windows\System32\imgutil.dll [51200] O44 - LFC:[MD5.62D54F4673A6208C8CC147758122B3C3] - 31/10/2014 - 04:44:32 ---A- . (.Microsoft Corporation - ActiveX Interface Marshaling Library.) -- C:\Windows\System32\actxprxy.dll [2865152] O44 - LFC:[MD5.BF1FC65A307B31939ADF7F976FDE033C] - 31/10/2014 - 04:45:17 ---A- . (.Microsoft Corporation - Extensions Internet pour Win32.) -- C:\Windows\System32\wininet.dll [2365440] O44 - LFC:[MD5.BED4D30B7FF094E368333CE2D1CE3195] - 31/10/2014 - 04:59:36 ---A- . (.Microsoft Corporation - Navigateur Internet.) -- C:\Windows\System32\ieframe.dll [14390272] O44 - LFC:[MD5.62E2FCF45F349DE6CAFB3AA7E1D81DA4] - 31/10/2014 - 05:03:02 ---A- . (.Microsoft Corporation - Panneau de configuration Internet.) -- C:\Windows\System32\inetcpl.cpl [2124288] O44 - LFC:[MD5.200CEA827BDC503F00C0AED0EA227D49] - 31/10/2014 - 05:05:35 ---A- . (.Microsoft Corporation - Microsoft Feeds Manager.) -- C:\Windows\System32\msfeeds.dll [800768] O44 - LFC:[MD5.FD7C8FAC461BED1FEEB808E477D884D4] - 31/10/2014 - 05:05:52 ---A- . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe [716800] O44 - LFC:[MD5.9CD8D475F462F82E6FD8BFCA7186ACD4] - 31/10/2014 - 05:06:46 ---A- . (.Microsoft Corporation - Personnalisation d’IEAK.) -- C:\Windows\System32\iedkcs32.dll [372736] O44 - LFC:[MD5.853BB696932E4C48EE7034BFF1209A5A] - 31/10/2014 - 05:08:57 ---A- . (.Microsoft Corporation - Contrôleur de site Web.) -- C:\Windows\System32\webcheck.dll [262144] O44 - LFC:[MD5.46B5DD7C4B1851F59E48302185E076DF] - 31/10/2014 - 05:15:11 ---A- . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\System32\inetcomm.dll [1032704] O44 - LFC:[MD5.DD8FD33C108F14681A410067AB21DDF3] - 31/10/2014 - 05:19:49 ---A- . (.Microsoft Corporation - Object Control Viewer.) -- C:\Windows\System32\occache.dll [152064] O44 - LFC:[MD5.AF28C90094C4C50F083599C10D2DC072] - 31/10/2014 - 05:23:46 ---A- . (.Microsoft Corporation - Objets homologues Internet Explorer.) -- C:\Windows\System32\iepeers.dll [145408] O44 - LFC:[MD5.2CEACC509889A095828F27115257408D] - 31/10/2014 - 05:24:25 ---A- . (.Microsoft Corporation - Microsoft® HTML Editing Component.) -- C:\Windows\System32\mshtmled.dll [92160] O44 - LFC:[MD5.9E20A052D83A81AEC35B2EA29F32637A] - 31/10/2014 - 05:24:48 ---A- . (.Microsoft Corporation - Device Inventory Library.) -- C:\Windows\System32\devinv.dll [391168] O44 - LFC:[MD5.85E97591864F3125C5B08FB44E0E8078] - 31/10/2014 - 05:24:57 ---A- . (.Microsoft Corporation - Synchronisation en arrière-plan des flux Mi.) -- C:\Windows\System32\msfeedsbs.dll [60416] O44 - LFC:[MD5.3721721151DB49457B0FD35E0C04594C] - 31/10/2014 - 05:25:24 ---A- . (.Microsoft Corporation - DLL de gestion d'utilisateur local et de co.) -- C:\Windows\System32\msrating.dll [199680] O44 - LFC:[MD5.A348DEFC16B6FBC88B7D61C3B861BCB1] - 31/10/2014 - 05:28:58 ---A- . (.Microsoft Corporation - Moteur d'installation.) -- C:\Windows\System32\inseng.dll [107520] O44 - LFC:[MD5.00FB2FB8C27C834CF575BC415B80F995] - 31/10/2014 - 05:29:17 ---A- . (.Microsoft Corporation - TDC ActiveX Control.) -- C:\Windows\System32\tdc.ocx [87552] O44 - LFC:[MD5.8AE1AC97407CD82D8389390C21430579] - 31/10/2014 - 05:29:50 ---A- . (.Microsoft Corporation - IE Sysprep Provider.) -- C:\Windows\System32\iesysprep.dll [111616] O44 - LFC:[MD5.C9AB2198141844D3DF96B4552CE9D5AB] - 31/10/2014 - 05:30:28 ---A- . (.Microsoft Corporation - JavaScript Performance Collection Agent.) -- C:\Windows\System32\JavaScriptCollectionAgent.dll [77824] O44 - LFC:[MD5.D66D11191B48007179B0A77DC0717267] - 31/10/2014 - 05:40:07 ---A- . (.Microsoft Corporation - DLL du Gestionnaire de licences Microsoft®.) -- C:\Windows\System32\licmgr10.dll [33280] O44 - LFC:[MD5.22ED46DE0E684749DA1BD703526FAA26] - 31/10/2014 - 05:49:39 ---A- . (.Microsoft Corporation - Application Experience Program Inventory Co.) -- C:\Windows\System32\aeinv.dll [537088] O44 - LFC:[MD5.079FEE6FC11A74E4309B6A10931C1CB2] - 31/10/2014 - 05:50:11 ---A- . (.Microsoft Corporation - Microsoft ® JScript.) -- C:\Windows\System32\jscript9.dll [6040064] O44 - LFC:[MD5.DE58DE2C6C8439B7174D6D3568AA4A80] - 31/10/2014 - 05:50:44 ---A- . (.Microsoft Corporation - Microsoft ® JScript Diagnostics.) -- C:\Windows\System32\jscript9diag.dll [814080] O44 - LFC:[MD5.E40D3696BE4852956669C285038B37A6] - 31/10/2014 - 05:51:25 ---A- . (.Microsoft Corporation - IE ETW Collector Service.) -- C:\Windows\System32\ieetwcollector.exe [114688] O44 - LFC:[MD5.0D03DAD6BB183156C70F863D0F2FA55A] - 31/10/2014 - 05:51:31 ---A- . (.Microsoft Corporation - Microsoft ® JScript.) -- C:\Windows\System32\jscript.dll [812544] O44 - LFC:[MD5.1C3C54FA2D620DF3093F356A56EC5957] - 31/10/2014 - 05:51:37 ---A- . (.Microsoft Corporation - Outil d’installation sans assistance d’IE 7.) -- C:\Windows\System32\ieUnatt.exe [144384] O44 - LFC:[MD5.F0A53129AE95A895EC8C4DC36E1797A2] - 31/10/2014 - 05:52:22 ---A- . (.Microsoft Corporation - Composant Microsoft Office 2000.) -- C:\Windows\System32\hlink.dll [108544] O44 - LFC:[MD5.587DEBB59F5F14C9610966FB14A33607] - 31/10/2014 - 05:53:06 ---A- . (.Microsoft Corporation - Moteur de l’interface utilisateur d’Interne.) -- C:\Windows\System32\ieui.dll [633856] O44 - LFC:[MD5.F00E643D9244F31ECF5DE8A98C2C5FC6] - 31/10/2014 - 05:53:32 ---A- . (.Microsoft Corporation - Application Experience Program Cache.) -- C:\Windows\System32\aepic.dll [98816] O44 - LFC:[MD5.CDC8A85EB301A8CBE55A81A1D55AF5E5] - 31/10/2014 - 05:54:13 ---A- . (.Microsoft Corporation - ADVPACK.) -- C:\Windows\System32\IEAdvpack.dll [132096] O44 - LFC:[MD5.6A7F8D139610E5F3F158182778EF9275] - 31/10/2014 - 05:56:53 ---A- . (.Microsoft Corporation - Traitement de RunOnce complet avec interfac.) -- C:\Windows\System32\iernonce.dll [34304] O44 - LFC:[MD5.F79E5258AF040A8AD83C7C1273A071C3] - 31/10/2014 - 05:57:38 ---A- . (.Microsoft Corporation - JScript Proxy Auto-Configuration.) -- C:\Windows\System32\jsproxy.dll [54784] O44 - LFC:[MD5.70576D76A11DD5AE54E719297A315F90] - 31/10/2014 - 06:04:28 ---A- . (.Microsoft Corporation - DAC for Trident DOM.) -- C:\Windows\System32\MshtmlDac.dll [88064] O44 - LFC:[MD5.22CBDB8810CBED0B4F5E4BE69D7E2AE8] - 31/10/2014 - 06:05:11 ---A- . (.Microsoft Corporation - Utilitaire à l’exécution pour Internet Expl.) -- C:\Windows\System32\iertutil.dll [2884096] O44 - LFC:[MD5.2E475D2FCE0125FA0C486DB9D59E739B] - 31/10/2014 - 06:05:50 ---A- . (.Microsoft Corporation - Convertisseur Microsoft HTML.) -- C:\Windows\System32\html.iec [417280] O44 - LFC:[MD5.A7F53772ECAE2F44B455D14F71179940] - 31/10/2014 - 06:06:00 ---A- . (.Microsoft Corporation - IE ETW Collector Proxy Stub Resources.) -- C:\Windows\System32\ieetwproxystub.dll [48640] O44 - LFC:[MD5.258C3082AD82C1AAD335DA3FE2D3EB25] - 31/10/2014 - 06:06:09 ---A- . (.Microsoft Corporation - Microsoft ® VBScript.) -- C:\Windows\System32\vbscript.dll [580096] O44 - LFC:[MD5.F54E1190251EB245183BF16D6C315613] - 31/10/2014 - 06:06:21 ---A- . (.Microsoft Corporation - Internet Shortcut Shell Extension DLL.) -- C:\Windows\System32\url.dll [237568] O44 - LFC:[MD5.E99E2E88BFE584184AE92B1F8995CE93] - 31/10/2014 - 06:06:45 ---A- . (.Microsoft Corporation - IOD Version Map.) -- C:\Windows\System32\iesetup.dll [66560] O44 - LFC:[MD5.66585D645C4E23A0FD5124BD714AE020] - 31/10/2014 - 06:08:00 ---A- . (.Microsoft Corporation - Microsoft Feeds Synchronization.) -- C:\Windows\System32\msfeedssync.exe [12800] O44 - LFC:[MD5.6096209CB47D61499C3608B9C25B073C] - 31/10/2014 - 06:09:37 ---A- . (.Microsoft Corporation - IE PNG plugin image decoder.) -- C:\Windows\System32\pngfilt.dll [64512] O44 - LFC:[MD5.CA2F3153EF3BCB0BD3A8984C933DF604] - 31/10/2014 - 06:10:13 ---A- . (.Microsoft Corporation - Wizard.) -- C:\Windows\System32\iexpress.exe [167424] O44 - LFC:[MD5.A3871DED5ED88F59C0D1396761708F81] - 31/10/2014 - 06:12:05 ---A- . (.Microsoft Corporation - Hôte des applications HTML de Microsoft®.) -- C:\Windows\System32\mshta.exe [13824] O44 - LFC:[MD5.4B9C652BD0FD95A9E6123913C35519D6] - 31/10/2014 - 06:12:41 ---A- . (.Microsoft Corporation - Auto-extracteur de fichier CAB Win32.) -- C:\Windows\System32\wextract.exe [143872] O44 - LFC:[MD5.6432F143CDC9D73BD2BF832CAB2EDC01] - 31/10/2014 - 06:28:02 ---A- . (.Microsoft Corporation - Visionneuse HTML Microsoft ®.) -- C:\Windows\System32\mshtml.dll [25110016] ~ Files: 138 Scanned in 00mn 01s ---\\ Derniers fichiers créés dans Windows Prefetcher (O45) O45 - LFCP:[MD5.E937B5B3537D1C72A909031791ED9538] - 06/11/2014 - 22:16:30 ---A- - C:\Windows\Prefetch\ANYPROTECT.EXE-53752276.pf =>PUP.AnyProtect O45 - LFCP:[MD5.71C33680E99333AB0F9687BF9A4B7450] - 06/11/2014 - 21:55:05 ---A- - C:\Windows\Prefetch\OPTIMIZERPRO.EXE-FA03D2EB.pf =>PUP.OptimizerPro O45 - LFCP:[MD5.CB2C36DABDB61DBC5FF1E1DD7392583F] - 06/11/2014 - 21:46:50 ---A- - C:\Windows\Prefetch\OPTIMIZERPRO.TMP-59C3CD82.pf =>PUP.OptimizerPro O45 - LFCP:[MD5.ED1CF88B57A7AE42503A408C5A902038] - 06/11/2014 - 21:57:56 ---A- - C:\Windows\Prefetch\SPYHUNTER-INSTALLER.EXE-5D978319.pf =>Crapware.SpyHunter O45 - LFCP:[MD5.46545593698FDA66619B97C575B267FF] - 06/11/2014 - 21:58:39 ---A- - C:\Windows\Prefetch\SPYHUNTER4.EXE-3B4E3201.pf =>Crapware.SpyHunter O45 - LFCP:[MD5.E4E656598EDD1C6BB823FF03588F80BD] - 09/11/2014 - 15:50:06 ---A- - C:\Windows\Prefetch\VOPACKAGE.EXE-B450D873.pf =>Adware.Downware O45 - LFCP:[MD5.713965DB0B22467DEE0EFF930210C953] - 06/11/2014 - 21:46:39 ---A- - C:\Windows\Prefetch\VOPACKAGE.EXE-FE35E1E4.pf =>Adware.Downware ~ Prefetcher: 7 Scanned in 00mn 00s ---\\ Déni du service (Local Security Authority) (O48) O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l’Éditeur de configuration de sécurité Windows.) -- C:\Windows\System32\scecli.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Package de sécurité Kerberos.) -- C:\Windows\System32\kerberos.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Fournisseur de sécurité TLS/SSL.) -- C:\Windows\System32\schannel.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Digest Access.) -- C:\Windows\System32\wdigest.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Web Service Security Package.) -- C:\Windows\System32\tspkg.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Pku2u Security Package.) -- C:\Windows\System32\pku2u.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Live Security Package.) -- C:\Windows\System32\livessp.dll ~ LSA: 9 Scanned in 00mn 00s ---\\ Contrôle du Safe Boot (CSB) (O49) O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\BasicDisplay.sys . (.Microsoft Corporation - Microsoft Basic Display Driver.) -- C:\Windows\System32\Drivers\BasicDisplay.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\BasicRender.sys . (.Microsoft Corporation - Microsoft Basic Render Driver.) -- C:\Windows\System32\Drivers\BasicRender.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dxgkrnl.sys . (.Microsoft Corporation - DirectX Graphics Kernel.) -- C:\Windows\System32\Drivers\dxgkrnl.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\FsDepends.sys . (.Microsoft Corporation - File System Dependency Manager Mini Filter Driver.) -- C:\Windows\System32\Drivers\FsDepends.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\System32\Drivers\sermouse.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgrx.sys . (.Microsoft Corporation - Pilote d’extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\BasicDisplay.sys . (.Microsoft Corporation - Microsoft Basic Display Driver.) -- C:\Windows\System32\Drivers\BasicDisplay.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\BasicRender.sys . (.Microsoft Corporation - Microsoft Basic Render Driver.) -- C:\Windows\System32\Drivers\BasicRender.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dxgkrnl.sys . (.Microsoft Corporation - DirectX Graphics Kernel.) -- C:\Windows\System32\Drivers\dxgkrnl.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\FsDepends.sys . (.Microsoft Corporation - File System Dependency Manager Mini Filter Driver.) -- C:\Windows\System32\Drivers\FsDepends.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\System32\Drivers\ipnat.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\nsiproxy.sys . (.Microsoft Corporation - NSI Proxy.) -- C:\Windows\System32\Drivers\nsiproxy.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpencdd.sys . (...) -- C:\Windows\System32\Drivers\rdpencdd.sys (.not file.) O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\System32\Drivers\sermouse.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgrx.sys . (.Microsoft Corporation - Pilote d’extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys ~ CSB: 17 Scanned in 00mn 00s ---\\ Recherche d'infection sur les pilotes (HKLM)(TDSD) (O52) O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm O52 - TDSD: \Drivers32\"vidc.i420"="lvcod64.dll" . (.Logitech Inc. - Video Codec.) -- C:\Windows\System32\lvcod64.dll O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm ~ TDSD: 3 Scanned in 00mn 00s ---\\ Enumération des clés de registre SecurityProviders (MCSP) (O54) O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll ~ MSCP: 2 Scanned in 00mn 00s ---\\ Enumération des clés de registre PoliciesSystem (MWPS) (O55) O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1 O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1 O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=1 O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=1 O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1 O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=5 O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0 O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0 O55 - MWPS:[HKLM\...\Policies\System] - "EnableCursorSuppression"=1 O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=3 O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0 O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=0 O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=0 O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0 O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1 O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1 O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0 O55 - MWPS:[HKLM\...\Policies\System] - "EnableLinkedConnections"=1 ~ MWPS: 18 Scanned in 00mn 00s ---\\ Enumération des clés de registre PoliciesExplorer (MWPE) (O56) O56 - MWPE:[HKLM\...\policies\Explorer] - "ForceActiveDesktopOn"=0 O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1 O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktop"=1 ~ MWPE Keys: 3 Scanned in 00mn 00s ---\\ Liste des pilotes du système (SDL) (O58) O58 - SDL:22/08/2013 - 13:43:41 ---A- . (.LSI - LSI 3ware SCSI Storport Driver.) -- C:\Windows\System32\Drivers\3ware.sys [108896] O58 - SDL:22/08/2013 - 13:43:41 ---A- . (.PMC-Sierra - PMC-Sierra Storport Driver For SPC8x6G SAS/SATA controller.) -- C:\Windows\System32\Drivers\adp80xx.sys [782176] O58 - SDL:22/08/2013 - 13:43:41 ---A- . (.Advanced Micro Devices - AHCI 1.3 Device Driver.) -- C:\Windows\System32\Drivers\amdsata.sys [79200] O58 - SDL:22/08/2013 - 13:43:41 ---A- . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller Driver for Windows -.) -- C:\Windows\System32\Drivers\amdsbs.sys [259424] O58 - SDL:22/08/2013 - 13:43:40 ---A- . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\Windows\System32\Drivers\amdxata.sys [25952] O58 - SDL:22/08/2013 - 13:43:41 ---A- . (.PMC-Sierra, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\System32\Drivers\arcsas.sys [114016] O58 - SDL:25/09/2014 - 17:27:21 ---A- . (.Avira Operations GmbH & Co. KG - Avira Minifilter Driver.) -- C:\Windows\System32\Drivers\avgntflt.sys [119272] =>.Avira Operations GmbH O58 - SDL:25/09/2014 - 17:27:21 ---A- . (.Avira Operations GmbH & Co. KG - Avira Driver for Security Enhancement.) -- C:\Windows\System32\Drivers\avipbb.sys [131608] =>.Avira Operations GmbH O58 - SDL:25/09/2014 - 17:27:21 ---A- . (.Avira Operations GmbH & Co. KG - Avira Manager Driver.) -- C:\Windows\System32\Drivers\avkmgr.sys [28600] =>.Avira Operations GmbH O58 - SDL:05/11/2014 - 13:51:59 ---A- . (.Avira Operations GmbH & Co. KG - Avira WFP Network Driver.) -- C:\Windows\System32\Drivers\avnetflt.sys [43064] =>.Avira Operations GmbH O58 - SDL:13/08/2013 - 00:25:46 ---A- . (.Windows ® Win 7 DDK provider - BCM Function 2 Device Driver.) -- C:\Windows\System32\Drivers\bcmfn2.sys [17624] O58 - SDL:22/08/2013 - 13:43:41 ---A- . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.) -- C:\Windows\System32\Drivers\bxvbda.sys [531296] O58 - SDL:12/07/2012 - 22:46:14 ---A- . (.Intel Corporation - Intel® Gigabit Adapter NDIS 6.x driver.) -- C:\Windows\System32\Drivers\e1c63x64.sys [498032] O58 - SDL:06/11/2014 - 21:58:03 ---A- . (...) -- C:\Windows\System32\Drivers\EsgScanner.sys [22704] O58 - SDL:22/08/2013 - 13:43:45 ---A- . (.Broadcom Corporation - Broadcom NetXtreme II 10 GigE VBD.) -- C:\Windows\System32\Drivers\evbda.sys [3357024] O58 - SDL:16/06/2014 - 17:42:34 ---A- . (.Sony Ericsson Mobile Communications - SEMC USB Flash Driver Filter.) -- C:\Windows\System32\Drivers\ggflt.sys [14448] O58 - SDL:16/06/2014 - 17:42:34 ---A- . (.Sony Ericsson Mobile Communications - SEMC USB Flash Driver.) -- C:\Windows\System32\Drivers\ggsemc.sys [27760] O58 - SDL:02/07/2012 - 08:16:02 ---A- . (.Intel Corporation - Intel® Management Engine Interface.) -- C:\Windows\System32\Drivers\HECIx64.sys [62784] O58 - SDL:22/08/2013 - 13:43:45 ---A- . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Driver.) -- C:\Windows\System32\Drivers\HpSAMD.sys [64352] O58 - SDL:30/07/2013 - 19:47:35 ---A- . (.Intel Corporation - Intel® Serial IO GPIO Controller Driver.) -- C:\Windows\System32\Drivers\iaLPSSi_GPIO.sys [24568] O58 - SDL:25/07/2013 - 20:05:39 ---A- . (.Intel Corporation - Intel® Serial IO I2C Controller Driver.) -- C:\Windows\System32\Drivers\iaLPSSi_I2C.sys [99320] O58 - SDL:09/07/2012 - 20:02:20 ---A- . (.Intel Corporation - NDIS 6.30 Advanced Networking Services..) -- C:\Windows\System32\Drivers\iANSW60e.sys [151960] O58 - SDL:09/07/2012 - 12:43:12 ---A- . (.Intel Corporation - Intel Rapid Storage Technology driver - x64.) -- C:\Windows\System32\Drivers\iaStorA.sys [645952] O58 - SDL:10/08/2013 - 01:39:30 ---A- . (.Intel Corporation - Intel Rapid Storage Technology driver (inbox) - x64.) -- C:\Windows\System32\Drivers\iaStorAV.sys [651248] O58 - SDL:22/08/2013 - 13:43:45 ---A- . (.Intel Corporation - Intel Matrix Storage Manager driver - x64.) -- C:\Windows\System32\Drivers\iaStorV.sys [412000] O58 - SDL:06/06/2012 - 08:19:32 ---A- . (.Intel Corporation - Intel® Network Adapter Diagnostic Driver.) -- C:\Windows\System32\Drivers\iqvw64e.sys [33640] O58 - SDL:22/08/2013 - 13:43:44 ---A- . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\System32\Drivers\lsi_sas.sys [109408] O58 - SDL:22/08/2013 - 13:43:45 ---A- . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\Windows\System32\Drivers\lsi_sas2.sys [93536] O58 - SDL:22/08/2013 - 13:43:44 ---A- . (.LSI Corporation - LSI SAS Gen3 Driver (StorPort).) -- C:\Windows\System32\Drivers\lsi_sas3.sys [81760] O58 - SDL:22/08/2013 - 13:43:45 ---A- . (.LSI Corporation - LSI SSS PCIe/Flash Driver (StorPort).) -- C:\Windows\System32\Drivers\lsi_sss.sys [82784] O58 - SDL:26/10/2012 - 15:42:22 ---A- . (.Logitech Inc. - Logitech Kernel Audio Improvement Filter Driver.) -- C:\Windows\System32\Drivers\lvrs64.sys [351520] O58 - SDL:26/10/2012 - 15:42:22 ---A- . (.Logitech Inc. - Logitech USB Video Class Driver.) -- C:\Windows\System32\Drivers\lvuvc64.sys [4758176] O58 - SDL:01/10/2014 - 11:11:12 ---A- . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\Drivers\mbam.sys [25816] O58 - SDL:01/10/2014 - 11:11:16 ---A- . (.Malwarebytes Corporation - Malwarebytes Chameleon Protection Driver.) -- C:\Windows\System32\Drivers\mbamchameleon.sys [93400] O58 - SDL:12/11/2014 - 12:45:12 ---A- . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\Drivers\MBAMSwissArmy.sys [129752] O58 - SDL:22/08/2013 - 13:43:45 ---A- . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows.) -- C:\Windows\System32\Drivers\megasas.sys [56672] O58 - SDL:22/08/2013 - 13:43:45 ---A- . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\System32\Drivers\megasr.sys [575840] O58 - SDL:22/08/2013 - 13:43:49 ---A- . (.Marvell Semiconductor, Inc. - Marvell Flash Controller Driver.) -- C:\Windows\System32\Drivers\mvumis.sys [63840] O58 - SDL:01/10/2014 - 11:11:30 ---A- . (.Malwarebytes Corporation - Malwarebytes Web Access Control.) -- C:\Windows\System32\Drivers\mwac.sys [64216] O58 - SDL:05/09/2013 - 02:46:46 ---A- . (.NVIDIA Corporation - NVIDIA HDMI Audio Driver.) -- C:\Windows\System32\Drivers\nvhda64v.sys [196384] O58 - SDL:05/09/2013 - 02:46:52 ---A- . (.NVIDIA Corporation - NVIDIA Windows Kernel Mode Driver, Version 327.02.) -- C:\Windows\System32\Drivers\nvlddmkm.sys [11273504] O58 - SDL:22/08/2013 - 13:43:31 ---A- . (.NVIDIA Corporation - NVIDIA® nForce RAID Driver.) -- C:\Windows\System32\Drivers\nvraid.sys [150368] O58 - SDL:22/08/2013 - 13:43:32 ---A- . (.NVIDIA Corporation - NVIDIA® nForce Sata Performance Driver.) -- C:\Windows\System32\Drivers\nvstor.sys [168288] O58 - SDL:10/07/2012 - 11:30:44 ---A- . (.Realtek Semiconductor Corp. - Realtek® High Definition Audio Function Driver.) -- C:\Windows\System32\Drivers\RTKVHD64.sys [4083600] O58 - SDL:15/06/2012 - 06:50:46 ---A- . (.Realtek Semiconductor Corp. - Realtek USB Mass Storage Driver for 2K/XP/Vista/Win7/Win8.) -- C:\Windows\System32\Drivers\RtsUVStor.sys [315536] O58 - SDL:22/08/2013 - 16:35:09 ---A- . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\Windows\System32\Drivers\secdrv.sys [23040] O58 - SDL:22/08/2013 - 13:43:31 ---A- . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\System32\Drivers\sisraid2.sys [44896] O58 - SDL:22/08/2013 - 13:43:32 ---A- . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\System32\Drivers\sisraid4.sys [81760] O58 - SDL:22/08/2013 - 13:43:32 ---A- . (.Promise Technology, Inc. - Promise SuperTrak EX Series Driver for Windows x64.) -- C:\Windows\System32\Drivers\stexstor.sys [31072] O58 - SDL:22/08/2013 - 13:43:34 ---A- . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\System32\Drivers\viaide.sys [19808] O58 - SDL:22/08/2013 - 13:43:34 ---A- . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\Windows\System32\Drivers\vsmraid.sys [168800] O58 - SDL:22/08/2013 - 13:43:34 ---A- . (.VIA Corporation - VIA StorX RAID Controller Driver.) -- C:\Windows\System32\Drivers\VSTXRAID.SYS [305504] ~ Drivers: 52 Scanned in 00mn 00s ---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61) O61 - LFC: 05/11/2014 - 13:03:44 ---A- . (...) -- C:\Users\martial\Downloads\avira_free_antivirus_fr (1).exe [151223664] O61 - LFC: 05/11/2014 - 13:03:44 ---A- . (...) -- C:\Users\martial\Downloads\avira_free_antivirus_fr.exe [151223664] O61 - LFC: 06/11/2014 - 13:03:44 ---A- . (...) -- C:\Users\martial\Downloads\581_Flash_Player (1).exe [14765488] O61 - LFC: 06/11/2014 - 13:03:44 ---A- . (...) -- C:\Users\martial\Downloads\581_Flash_Player (2).exe [14765488] O61 - LFC: 06/11/2014 - 13:03:44 ---A- . (...) -- C:\Users\martial\Downloads\581_Flash_Player.exe [14765488] O61 - LFC: 06/11/2014 - 13:03:44 ---A- . (...) -- C:\Users\martial\Downloads\Adobe-Flash-Player-11-9 (1).exe [86272] O61 - LFC: 06/11/2014 - 13:03:44 ---A- . (...) -- C:\Users\martial\Downloads\Adobe-Flash-Player-11-9.exe [86264] O61 - LFC: 06/11/2014 - 13:03:44 ---A- . (.Enigma Software Group USA, LLC..) -- C:\Users\martial\Downloads\SpyHunter-Installer.exe [2998656] =>Crapware.SpyHunter O61 - LFC: 06/11/2014 - 13:03:44 ---A- . (.paupertas.) -- C:\Users\martial\Downloads\Adobe Flash Player IE.exe [550472] O61 - LFC: 08/11/2014 - 13:03:43 ---A- . (...) -- C:\Users\martial\AppData\Local\Microsoft\Windows\Sqm\Manifest\Sqm10248.bin [269992] O61 - LFC: 09/11/2014 - 13:03:43 ---A- . (...) -- C:\Users\martial\AppData\Local\Microsoft\Windows\INetCache\IE\DJFWKULN\Setup[1].exe [590322] O61 - LFC: 09/11/2014 - 13:03:44 ---A- . (...) -- C:\Users\martial\AppData\Local\Temp\Quarantine.exe [601088] O61 - LFC: 12/11/2014 - 13:03:43 ---A- . (...) -- C:\Users\martial\AppData\Local\Google\Chrome\User Data\nacl_validation_cache.bin [236] O61 - LFC: 12/11/2014 - 13:03:44 ---A- . (...) -- C:\Users\martial\Downloads\adwcleaner_4.101.exe [2140160] O61 - LFC: 12/11/2014 - 13:03:44 ---A- . (.Malwarebytes Corporation.) -- C:\Users\martial\Downloads\mbam-setup-2.0.3.1025.exe [19828376] O61 - LFC: 12/11/2014 - 13:03:44 ---A- . (.Nicolas Coolman.) -- C:\Users\martial\Downloads\ZHPDiag2 (1).exe [6863575] =>.Nicolas Coolman O61 - LFC: 12/11/2014 - 13:03:44 ---A- . (.Nicolas Coolman.) -- C:\Users\martial\Downloads\ZHPDiag2.exe [6860008] =>.Nicolas Coolman ~ 46 Fichiers temporaires (Temporary files) ~ Files: 17 Scanned in 00mn 00s ---\\ Liste des outils de désinfection (LATC) (O63) O63 - Logiciel: ZHPDiag 2014 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 =>.Nicolas Coolman ~ ADS: Scanned in 00mn 00s ---\\ Associations Shell Spawning (O67) O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe =>.Microsoft Corporation O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.com> <comfile>[HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.evt> <evtfile>[HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d’événements.) -- C:\Windows\System32\eventvwr.exe O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.html> <htmlfile>[HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\IEXPLORE.exe O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe O67 - Shell Spawning: <.scr> <scrfile>[HKLM\..\open\Command] (...) -- "%1" /S O67 - Shell Spawning: <.html> <ChromeHTML>[HKCU\..\open\Command] (.Not Key.) ~ FASS Keys: 11 Scanned in 00mn 00s ---\\ Menu de démarrage Internet (SMI) (O68) O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\Shell\open\Command] (...) -- Chrome.exe (.not file.) O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (...) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe ~ Keys: Scanned in 00mn 00s ---\\ Recherche d'infection sur les navigateurs internet (SBI) (O69) O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - http://www.bing.com O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} - (Google) - http://www.google.com ~ Keys: Scanned in 00mn 00s ---\\ Enumère les fichiers Crack & Keygen (CKF) (O82) C:\ProgramData\MGS\cache\t\txt_desc_crackerjack1.16123cfe8301e551be2c69830fa7135d.dat =>.Crack,Keygen C:\Users\All Users\MGS\cache\t\txt_desc_crackerjack1.16123cfe8301e551be2c69830fa7135d.dat =>.Crack,Keygen C:\ProgramData\MGS\cache\t\txt_desc_crackerjack1.16123cfe8301e551be2c69830fa7135d.dat =>.Crack,Keygen C:\Users\All Users\MGS\cache\t\txt_desc_crackerjack1.16123cfe8301e551be2c69830fa7135d.dat =>.Crack,Keygen ~ Files: Scanned in 00mn 08s ---\\ Enumère les service demarrés par Svchost (SSS) (O83) O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d’application.) -- C:\Windows\System32\aelupsvc.dll [208896] O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes à puce Microsoft.) -- C:\Windows\System32\certprop.dll [155136] O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes à puce Microsoft.) -- C:\Windows\System32\certprop.dll [155136] O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\System32\srvsvc.dll [324096] O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\System32\gpsvc.dll [1261056] O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\ikeext.dll [1063424] O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur un réseau IPv4..) -- C:\Windows\System32\iphlpsvc.dll [914432] O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d’ouverture de session secondaire.) -- C:\Windows\system32\seclogon.dll [30720] O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll [110080] O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\System32\iscsiexe.dll [150528] O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll [107008] O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\System32\schedsvc.dll [1212928] O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll [220672] O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédias.) -- C:\Windows\System32\mmcss.dll [70656] O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\System32\browser.dll [134144] O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll [220160] O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à distance.) -- C:\Windows\System32\sessenv.dll [324096] O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll [81408] O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\Windows\System32\kmsvc.dll [97792] O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\Windows\System32\bdesvc.dll [339456] O83 - Search Svchost Services: lfsvc (lfsvc) . (.Microsoft Corporation - Service d’infrastructure de localisation Windows.) -- C:\Windows\System32\GeofenceMonitorService.dll [491520] O83 - Search Svchost Services: wlidsvc (wlidsvc) . (.Microsoft Corporation - Service de compte Microsoft®.) -- C:\Windows\System32\wlidsvc.dll [1576960] O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\Windows\System32\themeservice.dll [50688] O83 - Search Svchost Services: DsmSvc (DsmSvc) . (.Microsoft Corporation - Gestionnaire d’installation de périphérique.) -- C:\Windows\System32\DeviceSetupManager.dll [201728] O83 - Search Svchost Services: NcaSvc (NcaSvc) . (.Microsoft Corporation - Service Assistant Connectivité réseau Microsoft.) -- C:\Windows\System32\ncasvc.dll [164352] O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’accès distant.) -- C:\Windows\System32\rasauto.dll [101376] O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire des connexions d’accès à distance.) -- C:\Windows\System32\rasmans.dll [534528] O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll [223744] O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements système (SENS).) -- C:\Windows\System32\sens.dll [71680] O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l’application d’assistance à Microsoft NAT.) -- C:\Windows\System32\ipnathlp.dll [433664] O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows.) -- C:\Windows\System32\tapisrv.dll [306688] O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Update.) -- C:\Windows\System32\wuaueng.dll [3557376] O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière-plan.) -- C:\Windows\System32\qmgr.dll [1017856] O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [629760] ~ Services: 34 Scanned in 00mn 00s ---\\ Recherche particulière à la racine du système (SPRF) (O84) [MD5.A47DB00A570F2117DDAA38E0C0A57DB8] [sPRF][30/09/2014] (...) -- C:\ProgramData\1412095489.bdinstall.bin [523170] [MD5.F8395F824DAA8FBD981C0D88C5686FDE] [sPRF][05/11/2014] (...) -- C:\ProgramData\1415191279.bdinstall.bin [255068] [MD5.FB69AC5E39728E4607A2405DAA7C92B9] [sPRF][25/03/2013] (.EA Digital Illusions CE AB - Battlefield Play4Free Updater.) -- C:\Windows\Downloaded Program Files\BP4FUpdater.dll [260520] [MD5.29A4A6FBFA37BC6C1CEC77E3F7551B64] [sPRF][25/03/2013] (.EA Digital Illusions CE AB - Battlefield Play4Free Updater.) -- C:\Windows\Downloaded Program Files\BP4FUpdater.exe [1034664] ~ Files: 4 Scanned in 00mn 00s ---\\ Enumère les données de la clé NameSpace (MNS) (O92) O92 - MNS: - {1CF1260C-4DD0-4ebb-811F-33C572699FDE} O92 - MNS: - {374DE290-123F-4565-9164-39C4925E467B} O92 - MNS: - {3ADD1653-EB32-4cb0-BBD7-DFA0ABB5ACCA} O92 - MNS: - {A0953C92-50DC-43bf-BE83-3742FED03C9C} O92 - MNS: - {A8CDFF1C-4878-43be-B5FD-F8091C1C60D0} O92 - MNS: - {B4BFCC3A-DB2C-424C-B029-7FE99A87C641} ~ MNS: 6 Scanned in 00mn 00s ---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped) SS - | Demand 08/07/2014 203344 | (GamesAppService) . (.WildTangent, Inc..) - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe SS - | Auto 06/10/2013 116648 | (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe SS - | Demand 06/10/2013 116648 | (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe SS - | Auto 03/04/2014 315008 | (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe SS - | Demand 04/02/2013 155824 | (Sony PC Companion) . (.Avanquest Software.) - C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe SS - | Demand 22/08/2013 37768 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe SR - | Auto 25/09/2014 431920 | (AntiVirSchedulerService) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe SR - | Auto 25/09/2014 431920 | (AntiVirService) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe SR - | Auto 22/10/2014 164656 | (Avira.OE.ServiceHost) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe SR - | Auto 10/07/2013 2650696 | (CCDMonitorService) . (.Acer Incorporated.) - C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe SR - | Demand 18/01/2013 660040 | (ePowerSvc) . (.Acer Incorporated.) - C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe SR - | Auto 12/12/2011 135824 | (EpsonScanSvc) . (.Seiko Epson Corporation.) - C:\Windows\system32\EscSvc64.exe SR - | Auto 08/07/2014 227904 | (GamesAppIntegrationService) . (.WildTangent.) - C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe SR - | Auto 13/07/2012 2451456 | (IconMan_R) . (.Realsil Microelectronics Inc..) - C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe SR - | Auto 20/04/2012 635104 | (Intel® Capability Licensing Service Interface) . (.Intel® Corporation.) - C:\Program Files\Intel\iCLS Client\HeciServer.exe SR - | Auto 05/06/2012 190824 | (Intel® PROSet Monitoring Service) . (.Intel Corporation.) - C:\Windows\system32\IProsetMonitor.exe SR - | Auto 17/07/2012 165760 | (jhi_service) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe SR - | Auto 17/07/2012 276864 | (LMS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe SR - | Auto 01/10/2014 1871160 | (MBAMScheduler) . (.Malwarebytes Corporation.) - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe SR - | Auto 01/10/2014 968504 | (MBAMService) . (.Malwarebytes Corporation.) - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe SR - | Auto 14/07/2012 769432 | (NAUpdate) . (.Nero AG.) - c:\Program Files (x86)\Nero\Update\NASvc.exe SR - | Auto 29/08/2013 920864 | (nvsvc) . (.NVIDIA Corporation.) - C:\WINDOWS\system32\nvvsvc.exe SR - | Auto 29/08/2013 414496 | (Stereo Service) . (.NVIDIA Corporation.) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe SR - | Auto 17/07/2012 364416 | (UNS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe SR - | Demand 10/07/1658 0 | (WdNisSvc) . (...) - C:\Program Files (x86)\Windows Defender\NisSrv.exe SR - | Demand 10/07/1658 0 | (WinDefend) . (...) - C:\Program Files (x86)\Windows Defender\MsMpEng.exe SR - | Auto 10/07/1658 0 | (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe =>.Microsoft Corporation ~ Services: Scanned in 00mn 05s ---\\ Recherche d'infection sur le Master Boot Record (MBR)(O80) Run by martial at 12/11/2014 13:04:02 ~ OS 64 not supported by MBR tool ~ MBR: 0 Scanned in 00mn 00s ---\\ Recherche d'infection sur le Master Boot Record (MBRCheck)(O80) Written by ad13, http://ad13.geekstog Run by martial at 12/11/2014 13:04:04 ********* Dump file Name ********* C:\PhysicalDisk0_MBR.bin ~ MBR: Scanned in 00mn 02s ---\\ Scan Additionnel (O88) Database Version : 13026 - (10/11/2014) Clés trouvées (Keys found) : 0 Valeurs trouvées (Values found) : 0 Dossiers trouvés (Folders found) : 2 Fichiers trouvés (Files found) : 0 C:\Program Files (x86)\Software =>Adware.Boxore C:\Users\martial\AppData\Local\Software =>Adware.Boxore ~ Additionnel Scan: 211410 Items scanned in 00mn 11s ---\\ Informations complémentaires sur les modules ~ http://nicolascoolman.fr/r5-internet-explorer-proxy-management-iepm/ =>.Internet Explorer, Proxy Management (R5) ~ http://nicolascoolman.fr/o2-browser-helper-objects-de-navigateur/ =>.Browser Helper Objects de navigateur (O2) ~ http://nicolascoolman.fr/o4-applications-demarrees-par-le-registre/ =>.Applications lancées au démarrage du système (O4) ~ AMI: 3 Scanned in 00mn 00s ---\\ Récapitulatif des détections trouvées sur votre station http://nicolascoolman.fr/crapware-spyhunter =>Crapware.SpyHunter http://nicolascoolman.fr/pup-anyprotect =>PUP.AnyProtect http://nicolascoolman.fr/pup-optimizerpro =>PUP.OptimizerPro http://nicolascoolman.fr/adware-downware =>Adware.Downware http://nicolascoolman.fr/adware-boxore =>Adware.Boxore ~ MSI: 5 link(s) detected in 00mn 00s End of the scan (1237 lines in 00mn 48s)(4)
  6. zurlinden
    idem:o( je n'arrive pas à publier rapport AdwCleaner:o( mais je continue
  7. zurlinden
    Salut Bernard; mes excuses pour le retard, mais je n'ai pas eu le temps de m'occuper de mon problème avant aujourd'hui:o( j'ai fait le nécessaire avec Malewaresbytes anti malware; il a détecté une foule de problème que j'ai supprimés, mais je n'arrive pas à publier le rapport ( je continue donc avec AdwCleaner )
  8. zurlinden
    merci Bernard, je fais tout ça dés que je reviens du travail et te tiens informé @+
  9. zurlinden
    Bonjour, depuis hier, mon PC semble être infecté par un tas de logiciels malveillants, et il est rés lent. j'ai installé hier un antivirus gratuit, "avira", et depuis, c'est la panique; je ne sais pas si c'est en relation:o( j'ai eu des tas de logiciels qui se sont installés et que je n'avais pas sollicités; genre alarme, nettoyage PC, éradication malwares, plus des tas de fenêtres de pub qui s'ouvrent intempestivement. en plus, qd j'ouvre chrome, je suis dirigé vers un moteur de recherche du nom de "webssearches" ?? j'ai fait un scan avec avira, il a detecté un tas de saletés qu j'ai supprimées: j'ai désinstallé avec Revo ininstaller ce que j'ai pu, mais le problème subsiste: Pouvez vous faire qq chose pour moi?? Je vous remercie par avance: euhhhhhhhhhh, je précise que je n'y connais pas grd chose en info et en micro ;o))) @+ et merci d'avance
  10. zurlinden
    je fais cela dés demain et te tiens au courant: merci encore et bonne soirée
  11. zurlinden
    désolé mais qd je fais ce que tu me dis, je n'arrive pas à ouvrir de fenêtre qui correspond à ce qui figure ds le lien que tu m'as indiqué pour désinstaller avira ( alors, j'ai réussi qd même à trouver où était avira et je l'ai désinstallé avec c cleaner ! et j'ai téléchargé AVG, gratui pdt uin mois! dommage car avira me convenait bien avant mes problèmes d'échec de mise à jour: en ts les cas, merci ppour tout cordialement
  12. zurlinden
    impossible de localiser AVIRA; pourtant il est là car je fais un scan avec pour l'instant; je ne comprends pas:o( qd je veux faire une mise à jour d'AVIRA, j'ai ce message d'erreur ???????????????????????????????????? Avira Free Antivirus Updater Complete product update Creation time: dimanche 9 février 2014 12:59:23 Operating system: Windows 8 () [6.2.9200] 64 bit Product information: Product version: 14.0.2.286 Updater: C:\Program Files (x86)\Avira\AntiVir Desktop\update.exe 14.0.2.246 Update resource: C:\Program Files (x86)\Avira\AntiVir Desktop\updaterc.dll 14.0.2.180 Library: C:\Program Files (x86)\Avira\AntiVir Desktop\update.dll 1.0.0.9 Plugin: C:\Program Files (x86)\Avira\AntiVir Desktop\updext.dll 14.0.2.254 GUI: C:\Program Files (x86)\Avira\AntiVir Desktop\updgui.dll 14.0.2.254 Temp Directory: C:\ProgramData\Avira\AntiVir Desktop\TEMP\UPDATE\ Backup folder: C:\ProgramData\Avira\AntiVir Desktop\BACKUP\ Installation Directory: C:\Program Files (x86)\Avira\AntiVir Desktop\ Updater folder: C:\Program Files (x86)\Avira\AntiVir Desktop\ AppData folder: C:\ProgramData\Avira\AntiVir Desktop\ Connection settings: - Connection type: Web server - Transfer type: Existing connection -Proxy settings: System settings used 12:59:23 [uPD] [iNFO] Checking whether newer files are available. 12:59:23 [uPD] [iNFO] Select update server 'http://23.200.87.143/update'. 12:59:23 [uPD] [iNFO] Downloading of 'http://23.200.87.143/update/idx/master.idx' to 'C:\ProgramData\Avira\AntiVir Desktop\TEMP\UPDATE\idx\master.idx'. 12:59:23 [uPDLIB] [ERROR] Download manager: Server returned status 'bad request' while downloading the file http://23.200.87.143/update/idx/master.idx 12:59:23 [uPDLIB] [ERROR] Retrying... 12:59:23 [uPD] [iNFO] Downloading of 'http://23.200.87.143/update/idx/master.idx' to 'C:\ProgramData\Avira\AntiVir Desktop\TEMP\UPDATE\idx\master.idx'. 12:59:23 [uPDLIB] [ERROR] Download manager: Server returned status 'bad request' while downloading the file http://23.200.87.143/update/idx/master.idx 12:59:23 [uPDLIB] [ERROR] Retrying... 12:59:23 [uPD] [iNFO] Downloading of 'http://23.200.87.143/update/idx/master.idx' to 'C:\ProgramData\Avira\AntiVir Desktop\TEMP\UPDATE\idx\master.idx'. 12:59:23 [uPDLIB] [ERROR] Download manager: Server returned status 'bad request' while downloading the file http://23.200.87.143/update/idx/master.idx 12:59:23 [uPD] [iNFO] Select update server 'http://23.200.87.166/update'. 12:59:23 [uPD] [iNFO] Downloading of 'http://23.200.87.166/update/idx/master.idx' to 'C:\ProgramData\Avira\AntiVir Desktop\TEMP\UPDATE\idx\master.idx'. 12:59:23 [uPDLIB] [ERROR] Download manager: Server returned status 'bad request' while downloading the file http://23.200.87.166/update/idx/master.idx 12:59:23 [uPDLIB] [ERROR] Retrying... 12:59:23 [uPD] [iNFO] Downloading of 'http://23.200.87.166/update/idx/master.idx' to 'C:\ProgramData\Avira\AntiVir Desktop\TEMP\UPDATE\idx\master.idx'. 12:59:23 [uPDLIB] [ERROR] Download manager: Server returned status 'bad request' while downloading the file http://23.200.87.166/update/idx/master.idx 12:59:23 [uPDLIB] [ERROR] Retrying... 12:59:23 [uPD] [iNFO] Downloading of 'http://23.200.87.166/update/idx/master.idx' to 'C:\ProgramData\Avira\AntiVir Desktop\TEMP\UPDATE\idx\master.idx'. 12:59:23 [uPDLIB] [ERROR] Download manager: Server returned status 'bad request' while downloading the file http://23.200.87.166/update/idx/master.idx 12:59:23 [uPD] [iNFO] Select update server 'http://87.248.221.253/update'. 12:59:23 [uPD] [iNFO] Downloading of 'http://87.248.221.253/update/idx/master.idx' to 'C:\ProgramData\Avira\AntiVir Desktop\TEMP\UPDATE\idx\master.idx'. 12:59:23 [uPDLIB] [ERROR] Download manager: Server returned status 'bad request' while downloading the file http://87.248.221.253/update/idx/master.idx 12:59:23 [uPDLIB] [ERROR] Retrying... 12:59:23 [uPD] [iNFO] Downloading of 'http://87.248.221.253/update/idx/master.idx' to 'C:\ProgramData\Avira\AntiVir Desktop\TEMP\UPDATE\idx\master.idx'. 12:59:23 [uPDLIB] [ERROR] Download manager: Server returned status 'bad request' while downloading the file http://87.248.221.253/update/idx/master.idx 12:59:23 [uPDLIB] [ERROR] Retrying... 12:59:23 [uPD] [iNFO] Downloading of 'http://87.248.221.253/update/idx/master.idx' to 'C:\ProgramData\Avira\AntiVir Desktop\TEMP\UPDATE\idx\master.idx'. 12:59:23 [uPDLIB] [ERROR] Download manager: Server returned status 'bad request' while downloading the file http://87.248.221.253/update/idx/master.idx 12:59:23 [uPD] [iNFO] Select update server 'http://87.248.221.254/update'. 12:59:23 [uPD] [iNFO] Downloading of 'http://87.248.221.254/update/idx/master.idx' to 'C:\ProgramData\Avira\AntiVir Desktop\TEMP\UPDATE\idx\master.idx'. 12:59:24 [uPDLIB] [ERROR] Download manager: Server returned status 'bad request' while downloading the file http://87.248.221.254/update/idx/master.idx 12:59:24 [uPDLIB] [ERROR] Retrying... 12:59:24 [uPD] [iNFO] Downloading of 'http://87.248.221.254/update/idx/master.idx' to 'C:\ProgramData\Avira\AntiVir Desktop\TEMP\UPDATE\idx\master.idx'. 12:59:24 [uPDLIB] [ERROR] Download manager: Server returned status 'bad request' while downloading the file http://87.248.221.254/update/idx/master.idx 12:59:24 [uPDLIB] [ERROR] Retrying... 12:59:24 [uPD] [iNFO] Downloading of 'http://87.248.221.254/update/idx/master.idx' to 'C:\ProgramData\Avira\AntiVir Desktop\TEMP\UPDATE\idx\master.idx'. 12:59:24 [uPDLIB] [ERROR] Download manager: Server returned status 'bad request' while downloading the file http://87.248.221.254/update/idx/master.idx 12:59:24 [uPDLIB] [ERROR] No other server, update aborted 12:59:24 [uPD] [ERROR] Generation of update structure failed. UpdateLib delivers error 537. Summary: ******** 0 Files downloaded 0 Files installed dimanche 9 février 2014 12:59:24 The update failed!
  13. zurlinden
    j'ai refait une analyse rapide avec antimalware... et il restait 2 infections: qd je veux copier le rapport, ça ne donne rien, que des graffitis du genre au dessus ( désolé :
  14. zurlinden
    j'ai fait ce que tu m'as dit, mais pour le rapport, il y a dû y avoir un probl car ça donne ça:o(( j'ai supprimé 147 infections si j'ai bonne mémoire! dernière question; si je veux désinstaller AVIRa, je ne le vois nulle part ( j'ai essayé avec REVO UNINSTALLER, et CCLEANER, mais je ne le vois pas; pourtant il est tjrs là, car l'icone parapluie est tjrs là, et il me donne des alertes par moment ( que faire?? s'il faut, je refais une analyse avec MALWARE BYTES et je copie le rapport avant de réparer?? merci ÿþM#a#l#w#a#r#e#b#y#t#e#s# #A#n#t#i#-#M#a#l#w#a#r#e# #(#E#s#s#a#i#)# #1#.#7#5#.#0#.#1#3#0#0#r#l#.#9# #(#P#U#P#.#O#p#t#i#o#n#a#l#.#S#a#v#e#S#e#n#s#e#.#A#)# #-#># #M#i#s# #e#n# #q#u#a#r#a#n#t#a#i#n#e# #e#t# #s#u#p#p#r#i#m#é# #a#v#e#c# #s#u#c#c#è#s#.#t#e#.#P#r#o#c#e#s#s#L#a#u#n#c#h#e#r#.#1#.#0# #(#P#U#P#.#O#p#t#i#o#n#a#l#.#S#a#v#e#S#e#n#s#e#.#A#)# #-#># #M#i#s# #e#n# #q#u#a#r#a#n#t#a#i#n#e# #e#t# #s#u#p#p#r#i#m#é# #a#v#e#c# #s#u#c#c#è#s#.# #-#># #M#i#s# #e#n# #q#u#a#r#a#n#t#a#i#n#e# #e#t# #s#u#p#p#r#i#m#é# #a#v#e#c# #s#u#c#c#è#s#.#e#r#\#1#.#7#.#0#.#0# #(#P#U#P#.#O#p#t#i#o#n#a#l#.#A#d#w#a#r#e#P#l#u#g#i#n#)# #-#># #M#i#s# #e#n# #q#u#a#r#a#n#t#a#i#n#e# #e#t# #s#u#p#p#r#i#m#é# #a#v#e#c# #s#u#c#c#è#s#.#n#e# #e#t# #s#u#p#p#r#i#m#é# #a#v#e#c# #s#u#c#c#è#s#.# #s#u#c#c#è#s#.#x#e#.#v#i#r# #(#P#U#P#.#O#p#t#i#o#n#a#l#.#C#o#n#d#u#i#t#.#A#)# #-#># #M#i#s# #e#n# #q#u#a#r#a#n#t#a#i#n#e# #e#t# #s#u#p#p#r#i#m#é# #a#v#e#c# #s#u#c#c#è#s#.#r#a#n#t#a#i#n#e# #e#t# #s#u#p#p#r#i#m#é# #a#v#e#c# #s#u#c#c#è#s#.#e#k#c#m#o#k#c#g#c#d#e#a#c#\#1#.#0#_#0#\#b#a#c#k#g#r#o#u#n#d#.#h#t#m#l# #(#P#U#P#.#O#p#t#i#o#n#a#l#.#D#i#s#c#o#u#n#t#D#r#a#g#o#n#)# #-#># #M#i#s# #e#n# #q#u#a#r#a#n#t#a#i#n#e# #e#t# #s#u#p#p#r#i#m#é# #a#v#e#c# #s#u#c#c#è#s#.#p#A#P#I#_#b#g#.#j#s# #(#P#U#P#.#O#p#t#i#o#n#a#l#.#D#i#s#c#o#u#n#t#D#r#a#g#o#n#)# #-#># #M#i#s# #e#n# #q#u#a#r#a#n#t#a#i#n#e# #e#t# #s#u#p#p#r#i#m#é# #a#v#e#c# #s#u#c#c#è#s#.#a#r#a#n#t#a#i#n#e# #e#t# #s#u#p#p#r#i#m#é# #a#v#e#c# #s#u#c#c#è#s#.#f#a#u#l#t#\#E#x#t#e#n#s#i#o#n#s#\#n#i#k#d#a#i#a#i#d#i#i#i#o#g#a#i#d#k#k#e#k#c#m#o#k#c#g#c#d#e#a#c#\#1#.#0#_#0#\#f#r#a#m#e#w#o#r#k#\#i#n#i#t#i#a#l#i#z#e#.#j#s# #(#P#U#P#.#O#p#t#i#o#n#a#l#.#D#i#s#c#o#u#n#t#D#r#a#g#o#n#)# #-#># #M#i#s# #e#n# #q#u#a#r#a#n#t#a#i#n#e# #e#t# #s#u#p#p#r#i#m#é# #a#v#e#c# #s#u#c#c#è#s#.# #(#P#U#P#.#O#p#t#i#o#n#a#l#.#D#i#s#c#o#u#n#t#D#r#a#g#o#n#)# #-#># #M#i#s# #e#n# #q#u#a#r#a#n#t#a#i#n#e# #e#t# #s#u#p#p#r#i#m#é# #a#v#e#c# #s#u#c#c#è#s#.#a#i#n#e# #e#t# #s#u#p#p#r#i#m#é# #a#v#e#c# #s#u#c#c#è#s#.#a#t#a#\#D#e#f#a#u#l#t#\#E#x#t#e#n#s#i#o#n#s#\#n#i#k#d#a#i#a#i#d#i#i#i#o#g#a#i#d#k#k#e#k#c#m#o#k#c#g#c#d#e#a#c#\#1#.#0#_#0#\#f#r#a#m#e#w#o#r#k#-#u#i#\#r#e#m#o#t#e#_#p#o#p#u#p#_#h#o#s#t#.#j#s# #(#P#U#P#.#O#p#t#i#o#n#a#l#.#D#i#s#c#o#u#n#t#D#r#a#g#o#n#)# #-#># #M#i#s# #e#n# #q#u#a#r#a#n#t#a#i#n#e# #e#t# #s#u#p#p#r#i#m#é# #a#v#e#c# #s#u#c#c#è#s#.# 2#0#1#4#/#0#2#/#0#9# #1#1#:#4#1#:#0#3# #+#0#1#0#0# #P#C#-#B#A#L#O#U# #m#a#r#t#i#a#l# #M#E#S#S#A#G#E# #S#t#a#r#t#i#n#g# #p#r#o#t#e#c#t#i#o#n#
  15. zurlinden
    encore moi:o) pour une raison que j'ignore, je me retrouve avec 2 antivirus AVG et AVIRA; j'ai désinstallé AV, et conservé AVIRA, que je pensais avoir désisntallé avant d'avoir mes problèmes: mais chaque fois que je tente une mise à jour d'AVIRA, j'ai une mention d'erreur, et un rapport que je poste ci dessous: que dois je faire, et si pas possible de mettre à jour AVIRA(cause windows8??), quel antivirus gratui me conseillez vous, et depuis quel site le télécharger). pour info, depuis que j'ai fait ce que vous m avez indiqué, tt semble être rentré ds l'ordre s'agissant des fenêtres de pub: encore merci les champions!!
  16. zurlinden
    voilà je pense avoir fait ce que vous m aviez demandé: j'attends de connaître votre"verdict" ), et s'il y a d'autres manip à faire: pour info, je suis sous windows 8, et mon antivirus est AVG car je n'ai pas pu remettre AVIRA dont j'étais satisfait en ts les cas, merci encore à vous : bon dimanche
  17. zurlinden
    JE N AVAIS PAS FAIT COMME IL FALLAIT car jAVAIS FAIT RECHERCHER SANS AVOIR FAIT CONFIGURER:o( DONC J'AI REFAIT CORRECTEMENT ET çA DONNE çA MAINTENANT ~ Rapport de ZHPDiag v2014.2.6.4 - Nicolas Coolman (06/02/2014) ~ Lancé par martial (09/02/2014 10:41:27) ~ Adresse du Site Web http://nicolascoolman.webs.com ~ Forums gratuits d'Assistance à la désinfection : http://nicolascoolman.webs.com/apps/links/ ~ Traduit par Nicolas Coolman ~ Etat de la version : ~ Liste blanche : Activée par le programme ~ Elévation des Privilèges : OK ~ User Account Control (UAC): Activate by user ---\\ Navigateurs Internet MSIE: Internet Explorer v10.0.9200.16750 GCIE: Google Chrome v32.0.1700.107 (Defaut) ---\\ Informations sur les produits Windows ~ Langage: Français Windows 8, 64-bit (Build 9200) Windows Server License Manager Script : OK ~ ion : Windows® Operating System, OEM_DM channel Windows ID Activation : OK ~ Windows Partial Key : 4RDHT Windows License : OK ~ Windows Remaining Initializations Number : 999 Software Protection Service (Protection logicielle) : OK Windows Automatic Updates : OK Windows Activation Technologies : OK ---\\ Logiciels de protection du système AVG 2014 v14.0.3697 Windows Defender W8 ---\\ Logiciels d'optimisation du système CCleaner v4.10 =>Piriform Ltd ---\\ Logiciels de partage PeerToPeer ---\\ Surveillance de Logiciels ---\\ Informations sur le système ~ Processor: Intel64 Family 6 Model 58 Stepping 9, GenuineIntel ~ Operating System: 64 Bits Boot mode: Normal (Normal boot) Total RAM: 8144 MB (72% free) System Restore: Activé (Enable) System drive C: has 399 GB (87%) free of 458 GB ---\\ Mode de connexion au système ~ Computer Name: PC-BALOU ~ User Name: martial ~ All Users Names: martial, HomeGroupUser$, Administrateur, ~ Unselected Option: O45,O61,O62,O65,O66,O80,O82,O89 Logged in as Administrator ---\\ Variables d'environnement ~ System Unit : C:\ ~ %AppZHP% : C:\Users\martial\AppData\Roaming\ZHP\ ~ %AppData% : C:\Users\martial\AppData\Roaming\ ~ %Desktop% : C:\Users\martial\Desktop\ ~ %Favorites% : C:\Users\martial\Favorites\ ~ %LocalAppData% : C:\Users\martial\AppData\Local\ ~ %StartMenu% : C:\Users\martial\AppData\Roaming\Microsoft\Windows\Start Menu\ ~ %Windir% : C:\Windows\ ~ %System% : C:\Windows\System32\ ---\\ Enumération des unités disques C: Hard drive, Flash drive, Thumb drive (Free 399 Go of 458 Go) D: Hard drive, Flash drive, Thumb drive (Free 457 Go of 458 Go) E: CD-ROM drive (Not Inserted) ---\\ Etat du Centre de Sécurité Windows [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified ~ Security Center: 41 Legitimates Filtered in 00mn 00s ---\\ Recherche particulière de fichiers génériques [MD5.0E8E6463F81C80AFBED533E0F1F8895D] - (.Microsoft Corporation - Explorateur Windows.) (.01/06/2013 - 12:34:21.) -- C:\Windows\Explorer.exe [2391280] [MD5.FE9AB232B56A12224E8A3F3F9878C9A3] - (.Microsoft Corporation - Application de démarrage de Windows.) (.26/07/2012 - 04:08:50.) -- C:\Windows\System32\Wininit.exe [132608] [MD5.E7099336BF7531B6FCC920DCB5101259] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.25/10/2013 - 07:19:22.) -- C:\Windows\System32\wininet.dll [2241536] [MD5.BCF2036A0DD579E47C008C133550283E] - (.Microsoft Corporation - Application d’ouverture de session Windows.) (.11/10/2012 - 06:46:58.) -- C:\Windows\System32\Winlogon.exe [517120] [MD5.9448F5740A037EC0C18F0E9177232DD0] - (.Microsoft Corporation - Bibliothèque de licences.) (.26/07/2012 - 04:07:20.) -- C:\Windows\System32\sppcomapi.dll [273408] [MD5.7C0E0EDF18D6CC565D7BFBB451709FA5] - (.Microsoft Corporation - Pilote de fonction connexe pour WinSock.) (.04/09/2013 - 04:11:23.) -- C:\Windows\system32\Drivers\AFD.sys [576512] [MD5.A721FF570C2387E383BDDEA9632863C9] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.26/07/2012 - 06:00:48.) -- C:\Windows\system32\Drivers\atapi.sys [25840] [MD5.990B1BABE6E81FB18E65A87EBEFB1772] - (.Microsoft Corporation - CD-ROM File System Driver.) (.26/07/2012 - 03:30:10.) -- C:\Windows\system32\Drivers\Cdfs.sys [108544] [MD5.339BFF85D788268752DA8C9644B188EE] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.26/07/2012 - 03:26:36.) -- C:\Windows\system32\Drivers\Cdrom.sys [174080] [MD5.09D9EB9E7898F8E6561473A20CC808B9] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.26/07/2012 - 03:26:53.) -- C:\Windows\system32\Drivers\DfsC.sys [118784] [MD5.7D87B5B6C7188D553E11B59DC7F0B111] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.20/09/2012 - 07:08:44.) -- C:\Windows\system32\Drivers\HDAudBus.sys [71168] [MD5.C9E9CBF73AFFBFE3E801EFB516787BA3] - (.Microsoft Corporation - Pilote de port i8042.) (.26/07/2012 - 03:28:51.) -- C:\Windows\system32\Drivers\i8042prt.sys [112640] [MD5.3969B9C218DD3FAA9F4ED2FFC3651C02] - (.Microsoft Corporation - IP Network Address Translator.) (.26/07/2012 - 03:23:01.) -- C:\Windows\system32\Drivers\IpNat.sys [145920] [MD5.93179D48066918323628CB016D8C94DC] - (.Microsoft Corporation - Minirdr SMB Windows NT.) (.05/02/2013 - 23:29:09.) -- C:\Windows\system32\Drivers\MRxSmb.sys [370688] [MD5.7CEC25C682D319D484630B3952C31A11] - (.Microsoft Corporation - MBT Transport driver.) (.26/07/2012 - 03:24:28.) -- C:\Windows\system32\Drivers\netBT.sys [331776] [MD5.76929F4A69E425911A63B407E26C2589] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.02/02/2013 - 11:54:54.) -- C:\Windows\system32\Drivers\ntfs.sys [1933544] [MD5.4563DAF8C6A740AD7F501E219BD10766] - (.Microsoft Corporation - Pilote de port parallèle.) (.26/07/2012 - 03:29:53.) -- C:\Windows\system32\Drivers\Parport.sys [105984] [MD5.A14D625C5AEE5FFE0F47D1A1D419FAAE] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.26/07/2012 - 03:23:17.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [124928] [MD5.B2A3AD74FF2E2FFA73AF2567108231B3] - (.Microsoft Corporation - Redirecteur de périphérique de Microsoft RDP.) (.26/07/2012 - 03:25:18.) -- C:\Windows\system32\Drivers\rdpdr.sys [179712] [MD5.73DC722CE5DF26D7638CE2446F2655C7] - (.Microsoft Corporation - TDI Translation Driver.) (.26/07/2012 - 06:26:47.) -- C:\Windows\system32\Drivers\tdx.sys [117248] [MD5.78A5BBA3819FFFC62FFEC3E2220D102D] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.01/06/2013 - 12:26:33.) -- C:\Windows\system32\Drivers\volsnap.sys [327936] ~ Generic Processes: Scanned in 00mn 00s ---\\ Etat des fichiers cachés (Caché/Total) ~ Mes images (My Pictures) : 2/5 ~ Mes Videos (My Videos) : 1/2 ~ Mes Favoris (My Favorites) : 1/14 ~ Mes Documents (My Documents) : 1/15 ~ Mon Bureau (My Desktop) : 2/46 ~ Menu demarrer (Programs) : 1/76 ~ Hidden Files: Scanned in 00mn 00s ---\\ Processus lancés [MD5.85BCCCE4A932C1EFB08EA84444031491] - (...) -- C:\Program Files (x86)\View-Password\ViewPassword152_wd.exe [92672] [PID.3336] =>PUP.ViewPassword [MD5.280B64F6BFCEDE6D67D261EB808AA617] - (.Acer Incorporated - Hotkey Utility.) -- C:\Program Files (x86)\Acer\Hotkey Utility\HotkeyUtility.exe [524944] [PID.4464] [MD5.58920E6A409046BA06548D9D139CE0F0] - (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe [20584608] [PID.2108] [MD5.BEFFB2D021E7FA9E92249F3997930A68] - (.Acer - ArcServer.) -- C:\Program Files (x86)\Acer Remote\ArcServer.exe [522144] [PID.4392] [MD5.C850CA110CB798851BFD47F60E8B4B2D] - (.OpenOffice.org - OpenOffice.org Writer.) -- C:\Program Files (x86)\OpenOffice.org 3\program\swriter.exe [103936] [PID.4372] [MD5.749949494676218FFA99501F4AA22ECC] - (.OpenOffice.org - OpenOffice.org 3.4.1.) -- C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe [10376704] [PID.4400] [MD5.4EE367B8B1964160A1F1B80095183D3A] - (.OpenOffice.org - OpenOffice.org 3.4.1.) -- C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin [10368512] [PID.4416] [MD5.1DEE34C2698609FCA287D794BA29CE02] - (.Tlapia - sysTPL.) -- C:\Program Files (x86)\sysTPL\sysTPL.exe [1244440] [PID.4192] [MD5.DD231039B13EC2ABDE315D76E658EF0E] - (.Avira Operations GmbH & Co. KG - Antivirus System Tray Tool (Desktop).) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600] [PID.1164] [MD5.643F7A81B4FC27845886AB9650AD2C61] - (.AVG Technologies CZ, s.r.o. - AVG User Interface.) -- C:\Program Files (x86)\AVG\AVG2014\avgui.exe [4956176] [PID.1076] [MD5.0CED501E811F5C4745415FCC000CE043] - (.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe [164864] [PID.5232] [MD5.5640B4C10682FBC39C86C8C7A8392B5E] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [866632] [PID.1196] [MD5.47D7F5E049E3FAA24176FB92859C552B] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [8333824] [PID.2572] ~ Processes Running: Scanned in 00mn 00s ---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2) C:\Users\martial\AppData\Local\Google\Chrome\User Data\Default\Preferences G1 - GCS: Preference [user Data\Default] http://search.conduit.com G2 - GCE: Preference [user Data\Default] [licjnkifamhpbaefhdpacpmihicfbomb] PricePeep v.2.2.0.9 (Activé) =>Adware.PricePeep G2 - GCE: Preference [user Data\Default] [nikdaiaidiiiogaidkkekcmokcgcdeac] Discount Dragon v.1.0, (Activé) =>PUP.DiscountDragon G2 - GCE: Preference [user Data\Default] [nkeimhogjdpnpccoofpliimaahmaaome] Hangout Services v.1.0 (Activé) G2 - GCE: Preference [user Data\Default] [pbpohikckhbcljgombipcdoinkaedlfa] Smart Display v.1.6 (Activé) =>Spyware.SmartDisplay ~ Google Browser: 33 Legitimates Filtered in 00mn 06s ---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4) R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://do-search.com =>PUP.DoSearches R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://do-search.com =>PUP.DoSearches R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://do-search.com =>PUP.DoSearches R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://do-search.com =>PUP.DoSearches R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://do-search.com =>PUP.DoSearches R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://do-search.com =>PUP.DoSearches ~ IE Browser: 17 Legitimates Filtered in 00mn 00s ---\\ Internet Explorer, Proxy Management (R5) R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:8877 =>Hijacker.Proxy R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll ~ Proxy management: Scanned in 00mn 00s ---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe, F2 - REG:system.ini: Shell=C:\Windows\explorer.exe F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe ~ Keys: Scanned in 00mn 00s ---\\ Hosts file redirection (O1) O1 - Hosts: 54.204.28.26 nikdaiaidiiiogaidkkekcmokcgcdeac =>PUP.DiscountDragon ~ Hosts File: Scanned in 00mn 00s ~ Nombre de lignes (Lines number): 23 ---\\ Browser Helper Objects de navigateur (O2) O2 - BHO: RightSurf [64Bits] - {88be1aa9-6740-461c-9e3e-f35eb8fa741c} . (.RightSurf - RightSurf.) -- C:\Program Files (x86)\RightSurf\RightSurfbho.dll =>PUP.RightSurf O2 - BHO: Discount Dragon BHO [64Bits] - {EA34C851-D481-49F5-A356-3A8B0A8F3B7E} . (.Pas de propriétaire - FrameworkBHO.) -- C:\Program Files (x86)\Discount Dragon\FrameworkBHO.dll =>PUP.DiscountDragon ~ BHO: 8 Legitimates Filtered in 00mn 00s ---\\ Autres liens utilisateurs (O4) O4 - GS\Desktop [Public]: 3D Vision Photo Viewer.lnk . (.NVIDIA Corporation - NVIDIA 3D Vision Photo Viewer.) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvstview.exe O4 - GS\Desktop [Public]: Acer Remote.lnk . (.Acer - ArcServer.) -- C:\Program Files (x86)\Acer Remote\ArcServer.exe O4 - GS\Desktop [Public]: Advanced Disk Recovery.lnk . (.Systweak Software, (www.systweak.com) - Advanced Disk Recovery - UAC Launcher.) -- C:\Program Files (x86)\Advanced Disk Recovery\HighestAvailable.exe O4 - GS\Desktop [Public]: Casino Classic.lnk . (.Microgaming Systems - Game Launcher.) -- C:\Microgaming\Casino\casinoclassic\casinogame.exe O4 - GS\Desktop [Public]: Demo Acer Remote.lnk . (...) -- C:\Program Files (x86)\Acer Remote Demo\Acer Remote_demo.mp4 O4 - GS\Desktop [Public]: EPSON Scan.lnk . (.SEIKO EPSON CORP. - EPSON Scan.) -- C:\Windows\twain_32\escndv\escndv.exe O4 - GS\Desktop [Public]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe O4 - GS\Desktop [Public]: Help and Support.lnk - Clé orpheline O4 - GS\Program [Public]: Desktop.lnk - Clé orpheline O4 - GS\QuickLaunch [martial]: Advanced Disk Recovery.lnk . (.Systweak Software, (www.systweak.com) - Advanced Disk Recovery - UAC Launcher.) -- C:\Program Files (x86)\Advanced Disk Recovery\HighestAvailable.exe O4 - GS\QuickLaunch [martial]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe O4 - GS\QuickLaunch [martial]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe O4 - GS\TaskBar [martial]: Acer Docs.lnk . (...) -- C:\Program Files (x86)\Acer\AcerCloud Docs\AcerCloud Docs.exe O4 - GS\TaskBar [martial]: Acer Media.lnk . (.Acer Incorporated - Acer Media.) -- C:\Program Files (x86)\Acer\clear.fi Media\ClearfiMedia.exe O4 - GS\TaskBar [martial]: Acer Photo.lnk . (.Acer Incorporated - Acer Photo.) -- C:\Program Files (x86)\Acer\clear.fi Photo\ClearfiPhoto.exe O4 - GS\TaskBar [martial]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe O4 - GS\TaskBar [martial]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe O4 - GS\TaskBar [martial]: Lanceur d'applications Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe O4 - GS\Program [martial]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe O4 - GS\Desktop [martial]: Lanceur d'applications Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe O4 - GS\Desktop [martial]: Ludi.lnk - Clé orpheline O4 - GS\Desktop [martial]: PokerStars.fr.lnk . (.PokerStars - PokerStars Update.) -- C:\Program Files (x86)\PokerStars.FR\PokerStarsUpdate.exe ~ Global Startup: 54 Legitimates Filtered in 00mn 00s ---\\ Applications lancées au démarrage du sytème (O4) O4 - GS\Startup [Public]: Acer Remote.lnk . (.Acer - ArcServer.) -- C:\Program Files (x86)\Acer Remote\ArcServer.exe O4 - GS\Startup [martial]: OpenOffice.org 3.4.1.lnk . (...) -- C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe O4 - GS\Startup [martial]: PricePeepUpdater.lnk . (...) -- C:\Program Files (x86)\PricePeep\PricePeepUpdater.exe (.not file.) =>Adware.PricePeep O4 - HKLM\..\Run: [RTHDVCPL] . (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe =>.Realtek Semiconductor Corp O4 - HKCU\..\Run: [EPLTarget\P0000000000000000] . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIIKE.exe =>.Epson Seiko Corporation O4 - HKCU\..\Run: [skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe =>.Skype Technologies S.A. O4 - HKLM\..\Wow6432Node\Run: [sysTPL] . (.Tlapia - sysTPL.) -- C:\Program Files (x86)\sysTPL\sysTPL.exe O4 - HKLM\..\Wow6432Node\Run: [fst_fr_78] Clé orpheline =>PUA.FSTfr9 O4 - HKLM\..\Wow6432Node\Run: [avgnt] . (.Avira Operations GmbH & Co. KG - Antivirus System Tray Tool (Desktop).) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe O4 - HKLM\..\Wow6432Node\Run: [AVG_UI] . (.AVG Technologies CZ, s.r.o. - AVG User Interface.) -- C:\Program Files (x86)\AVG\AVG2014\avgui.exe O4 - HKLM\..\Wow6432Node\RunOnce: [Discount Dragon-repairJob] . (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\wscript.exe =>PUP.DiscountDragon O4 - HKUS\S-1-5-21-3778166341-1465188008-936229986-1001\..\Run: [EPLTarget\P0000000000000000] . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIIKE.exe =>.Epson Seiko Corporation O4 - HKUS\S-1-5-21-3778166341-1465188008-936229986-1001\..\Run: [skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe =>.Skype Technologies S.A. ~ Application: Scanned in 00mn 00s ---\\ Modification Domaine/Adresses DNS (O17) O17 - HKLM\System\CCS\Services\Tcpip\..\{3EAD6CDF-D505-4FFC-B3C8-31B02CB49FF0}: DhcpNameServer = 192.168.1.254 O17 - HKLM\System\CCS\Services\Tcpip\..\{3EAD6CDF-D505-4FFC-B3C8-31B02CB49FF0}: DhcpDomain = bouyguesbox.fr O17 - HKLM\System\CS1\Services\Tcpip\..\{3EAD6CDF-D505-4FFC-B3C8-31B02CB49FF0}: DhcpNameServer = 192.168.1.254 O17 - HKLM\System\CS1\Services\Tcpip\..\{3EAD6CDF-D505-4FFC-B3C8-31B02CB49FF0}: DhcpDomain = bouyguesbox.fr O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254 ~ Domain: Scanned in 00mn 00s ---\\ Protocole additionnel (O18) O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft ®.) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation ~ Protocole Additionnel: Scanned in 00mn 00s ---\\ Liste des services NT non Microsoft et non désactivés (O23) O23 - Service: SaveSenseLive Service (savesenselive) (savesenselive) . (.SaveSense - SaveSenseLive Update.) - C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe =>PUP.SaveSense O23 - Service: Update RightSurf (Update RightSurf) . (...) - C:\Program Files (x86)\RightSurf\updateRightSurf.exe =>PUP.RightSurf O23 - Service: Util RightSurf (Util RightSurf) . (...) - C:\Program Files (x86)\RightSurf\bin\utilRightSurf.exe =>PUP.RightSurf O23 - Service: View Password (ViewPassword) . (...) - C:\Program Files (x86)\View-Password\ViewPassword152.exe =>PUP.ViewPassword O23 - Service: WajamUpdaterV3 (WajamUpdaterV3) . (...) - C:\Program Files (x86)\Wajam\Updater\WajamUpdaterV3.exe (.not file.) =>PUP.Wajam ~ Services: 24 Legitimates Filtered in 00mn 02s ---\\ Tâches planifiées en automatique (O39) O39 - APT:Automatic Planified Task - C:\Windows\Tasks\bench-S-1-5-21-3778166341-1465188008-936229986-1001.job [366] =>PUP.GiganticSavings O39 - APT:Automatic Planified Task - C:\Windows\Tasks\bench-sys.job [366] =>PUP.GiganticSavings O39 - APT:Automatic Planified Task - C:\Windows\Tasks\SaveSense.job [318] =>Hijacker.iHaveNet O39 - APT:Automatic Planified Task - C:\Windows\Tasks\SaveSenseLiveUpdateTaskMachineCore.job [948] =>PUP.SaveSense O39 - APT:Automatic Planified Task - C:\Windows\Tasks\SaveSenseLiveUpdateTaskMachineUA.job [952] =>PUP.SaveSense O39 - APT:Automatic Planified Task - C:\Windows\Tasks\View Password Update.job [426] O39 - APT:Automatic Planified Task - C:\Windows\Tasks\View Password_wd.job [420] [MD5.2064E97CF3396C4EC5A497CE49E4515F] [APT] [bench-S-1-5-21-3778166341-1465188008-936229986-1001] (...) -- C:\Program Files (x86)\Bench\Updater\updater.exe [254456] =>PUP.GiganticSavings [MD5.2064E97CF3396C4EC5A497CE49E4515F] [APT] [bench-sys] (...) -- C:\Program Files (x86)\Bench\Updater\updater.exe [254456] =>PUP.GiganticSavings [MD5.00000000000000000000000000000000] [APT] [saveSense] (...) -- C:\Users\martial\AppData\Roaming\SAVESE~1\UPDATE~1\UPDATE~1.exe (.not file.) [0] =>PUP.SaveSense [MD5.C495D8665A32539660625182D23D5C59] [APT] [saveSenseLiveUpdateTaskMachineCore] (.SaveSense.) -- C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe [146920] =>PUP.SaveSense [MD5.C495D8665A32539660625182D23D5C59] [APT] [saveSenseLiveUpdateTaskMachineUA] (.SaveSense.) -- C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe [146920] =>PUP.SaveSense [MD5.4D6ECC299B8D1E62FB993111F32E53A8] [APT] [View Password Update] (...) -- C:\Program Files (x86)\View-Password\View-Password.exe [245248] [MD5.85BCCCE4A932C1EFB08EA84444031491] [APT] [View Password_wd] (...) -- C:\Program Files (x86)\View-Password\ViewPassword152_wd.exe [92672] =>PUP.ViewPassword [MD5.00000000000000000000000000000000] [APT] [{7D9DB445-CDF2-402D-8C76-408B14284FAD}] (...) -- C:\Users\martial\Desktop\avira_free_antivirus_fr.exe (.not file.) [0] ~ Scheduled Task: 60 Legitimates Filtered in 00mn 01s ---\\ Logiciels installés (O42) O42 - Logiciel: Boxore Client - (.Boxore OU.) [HKLM][64Bits] -- {903CFFD8-85BF-4A51-8A6D-4BBBCA346A6E} =>Adware.Boxore O42 - Logiciel: Casino Classic - (...) [HKLM][64Bits] -- casinoclassic O42 - Logiciel: Discount Dragon - (.Smart Apps.) [HKLM][64Bits] -- 38900_Discount Dragon =>PUP.DiscountDragon O42 - Logiciel: PokerStars.fr - (.PokerStars.fr.) [HKLM][64Bits] -- PokerStars.fr O42 - Logiciel: RightSurf - (.RightSurf.) [HKLM][64Bits] -- RightSurf =>PUP.RightSurf O42 - Logiciel: SaveSense - (.SaveSense.) [HKCU][64Bits] -- SaveSense =>PUP.SaveSense O42 - Logiciel: View Password - (.View Password.) [HKLM][64Bits] -- 76c4cae9-491a-4726-b03c-2402f21abf4a ~ Logic: 35 Legitimates Filtered in 00mn 00s ---\\ HKCU & HKLM Software Keys [HKCU\Software\Ecommfactory] [HKCU\Software\MGS] [HKCU\Software\RightSurf] =>PUP.RightSurf [HKCU\Software\SaveSenseLive] =>PUP.SaveSense [HKLM\Software\Wow6432Node\Discount Dragon] =>PUP.DiscountDragon [HKLM\Software\Wow6432Node\RightSurf] =>PUP.RightSurf [HKLM\Software\Wow6432Node\SaveSenseLive] =>PUP.SaveSense ~ Key Software: 251 Legitimates Filtered in 00mn 00s ---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43) O43 - CFD: 21/12/2013 - 19:53:24 - [1,964] ----D C:\Program Files (x86)\AskPartnerNetwork O43 - CFD: 07/02/2014 - 20:29:22 - [1,038] ----D C:\Program Files (x86)\Discount Dragon =>PUP.DiscountDragon O43 - CFD: 06/02/2014 - 21:44:24 - [119,341] ----D C:\Program Files (x86)\PokerStars.FR O43 - CFD: 07/02/2014 - 20:38:02 - [2,728] ----D C:\Program Files (x86)\RightSurf =>PUP.RightSurf O43 - CFD: 07/02/2014 - 19:50:02 - [3,431] ----D C:\Program Files (x86)\SaveSenseLive =>PUP.SaveSense O43 - CFD: 07/02/2014 - 19:53:01 - [0,667] ----D C:\Program Files (x86)\View-Password O43 - CFD: 21/12/2013 - 19:53:16 - [0] ----D C:\ProgramData\APN O43 - CFD: 18/10/2013 - 17:03:20 - [-890,689] ----D C:\ProgramData\MGS O43 - CFD: 05/10/2013 - 08:15:08 - [0] ----D C:\ProgramData\OEM_YAHOO O43 - CFD: 07/02/2014 - 19:50:01 - [0] ----D C:\ProgramData\SaveSenseLive =>PUP.SaveSense O43 - CFD: 07/02/2014 - 20:29:23 - [1,083] ----D C:\Users\martial\AppData\Local\Discount Dragon =>PUP.DiscountDragon O43 - CFD: 09/10/2013 - 19:51:04 - [35,079] ----D C:\Users\martial\AppData\Local\Doc O43 - CFD: 08/02/2014 - 20:40:54 - [3,975] ----D C:\Users\martial\AppData\Local\PokerStars.FR O43 - CFD: 05/10/2013 - 20:23:04 - [0,003] ----D C:\Users\martial\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PokerStars.FR O43 - CFD: 07/02/2014 - 19:49:50 - [0,001] ----D C:\Users\martial\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SaveSense =>PUP.SaveSense O43 - CFD: 07/02/2014 - 19:53:15 - [0,002] ----D C:\Users\martial\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Start Lollipop =>Adware.Lollipop ~ Program Folder: 148 Legitimates Filtered in 00mn 00s ---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44) O44 - LFC:[MD5.06BFB1C90F001458F8D39C1879076597] - 09/02/2014 - 10:20:25 ---A- . (...) -- C:\Windows\win.ini [618] ~ Files: 12 Legitimates Filtered in 00mn 01s ---\\ Clé de registre Shell MountPoints2 (MPKS) (O51) O51 - MPSK:{d76a96c1-3c02-11e3-be78-7427ea4db901}\AutoRun\command. (...) -- F:\Startme.exe (.not file.) ~ Keys: Scanned in 00mn 00s ---\\ Enumération des clés de registre PoliciesSystem (MWPS) (O55) O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0 O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0 O55 - MWPS:[HKLM\...\Policies\System] - "EnableLinkedConnections"=1 ~ MWPS: 20 Legitimates Filtered in 00mn 00s ---\\ Enumération des clés de registre PoliciesExplorer (MWPE) (O56) O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1 ~ MWPE Keys: 10 Legitimates Filtered in 00mn 00s ---\\ Liste des pilotes du système (SDL) (O58) O58 - SDL:[MD5.4E85355B94CFCB67C135F6521A4895A7] - 26/07/2012 - 06:00:55 ---A- . (.Promise Technology, Inc. - Promise SuperTrak EX Series Driver for Windows x64.) -- C:\Windows\System32\Drivers\stexstor.sys [30960] ~ Drivers: 20 Legitimates Filtered in 00mn 00s ---\\ Liste des outils de désinfection (LATC) (O63) O63 - Logiciel: ZHPDiag 2014 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 =>.Nicolas Coolman ~ ADS: Scanned in 00mn 00s ---\\ Associations Shell Spawning (O67) O67 - Shell Spawning: <.html> <ChromeHTML>[HKCU\..\open\Command] (.Not Key.) ~ FASS Keys: 11 Legitimates Filtered in 00mn 00s ---\\ Menu de démarrage Internet (SMI) (O68) O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe ~ Keys: Scanned in 00mn 00s ---\\ Recherche d'infection sur les navigateurs internet (SBI) (O69) O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} - (Google) - http://www.google.com ~ Keys: Scanned in 00mn 00s ---\\ Enumère les codes produits des logiciels (PUC) (O90) O90 - PUC: "2A8EBFD6FBDCE3543BC4232F20CFEEC4" . (.Software Updater.) -- C:\Windows\Installer\{6DFBE8A2-CDBF-453E-B34C-32F202FCEE4C}\icon.ico O90 - PUC: "33B1C8585D3C77347BB7E1F233C8F766" . (..) -- C:\Windows\Installer\{858C1B33-C3D5-4377-B77B-1E2F338C7F66}\ARPPRODUCTICON.exe O90 - PUC: "8DFFC309FB5815A4A8D6B4BBAC43A6E6" . (.Boxore Client.) -- C:\Windows\Installer\{903CFFD8-85BF-4A51-8A6D-4BBBCA346A6E}\boxore.ico =>Adware.Boxore ~ Update Products: 44 Legitimates Filtered in 00mn 00s ---\\ Recherche des packages WindowsInstaller (WIS) (O93) (NTFS) [MD5.A3AEEC9A9B6984F2E22B90FDC9A23AB8] [WIS][21/12/2013] (.Skype Technologies S.A. - Skype.) -- C:\Windows\Installer\1151bb.msi [24993792] [MD5.FD27033962C87183E39F38DB982AB9A3] [WIS][07/02/2014] (.Boxore OU - Boxore Client Installer.) -- C:\Windows\Installer\60aa9.msi [1896448] =>Adware.Boxore ~ WIS: 46 Legitimates Filtered in 00mn 01s ---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped) SS - | Disabled 09/12/2013 1011768 | (AntiVirWebService) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe SS - | Demand 12/10/2010 206072 | (GamesAppService) . (.WildTangent, Inc..) - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe SS - | Auto 06/10/2013 116648 | (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe SS - | Demand 06/10/2013 116648 | (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe SS - | Auto 07/02/2014 146920 | (savesenselive) . (.SaveSense.) - C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe =>PUP.SaveSense SS - | Demand 07/02/2014 146920 | (savesenselivem) . (.SaveSense.) - C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe =>PUP.SaveSense SS - | Auto 23/10/2013 172192 | (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe SS - | Auto 10/07/1658 0 | (WajamUpdaterV3) . (...) - C:\Program Files (x86)\Wajam\Updater\WajamUpdaterV3.exe =>PUP.Wajam SS - | Demand 20/09/2012 29696 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe SR - | Auto 09/12/2013 440376 | (AntiVirSchedulerService) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe SR - | Auto 09/12/2013 440376 | (AntiVirService) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe SR - | Auto 24/09/2013 1358944 | (avgfws) . (.AVG Technologies CZ, s.r.o..) - C:\Program Files (x86)\AVG\AVG2014\avgfws.exe SR - | Auto 11/11/2013 3478544 | (AVGIDSAgent) . (.AVG Technologies CZ, s.r.o..) - C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe SR - | Auto 24/09/2013 348008 | (avgwd) . (.AVG Technologies CZ, s.r.o..) - C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe SR - | Auto 10/07/2013 2650696 | (CCDMonitorService) . (.Acer Incorporated.) - C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe SR - | Demand 18/01/2013 660040 | (ePowerSvc) . (.Acer Incorporated.) - C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe SR - | Auto 12/12/2011 135824 | (EpsonScanSvc) . (.Seiko Epson Corporation.) - C:\Windows\system32\EscSvc64.exe SR - | Auto 13/07/2012 2451456 | (IconMan_R) . (.Realsil Microelectronics Inc..) - C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe SR - | Auto 20/04/2012 635104 | (Intel® Capability Licensing Service Interface) . (.Intel® Corporation.) - C:\Program Files\Intel\iCLS Client\HeciServer.exe SR - | Auto 05/06/2012 190824 | (Intel® PROSet Monitoring Service) . (.Intel Corporation.) - C:\Windows\system32\IProsetMonitor.exe SR - | Auto 17/07/2012 165760 | (jhi_service) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe SR - | Auto 17/07/2012 276864 | (LMS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe SR - | Auto 14/07/2012 769432 | (NAUpdate) . (.Nero AG.) - c:\Program Files (x86)\Nero\Update\NASvc.exe SR - | Auto 30/01/2013 884512 | (nvsvc) . (.NVIDIA Corporation.) - C:\Windows\system32\nvvsvc.exe SR - | Auto 30/01/2013 383264 | (Stereo Service) . (.NVIDIA Corporation.) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe SR - | Auto 29/01/2014 399640 | (sysTPLMonitor.exe) . (.Tlapia.) - C:\Program Files (x86)\sysTPL\sysTPLMonitor.exe SR - | Auto 29/01/2014 400664 | (sysTPLService.exe) . (.Tlapia.) - C:\Program Files (x86)\sysTPL\sysTPLService.exe SR - | Auto 17/07/2012 364416 | (UNS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe SR - | Auto 07/02/2014 80160 | (Update RightSurf) . (...) - C:\Program Files (x86)\RightSurf\updateRightSurf.exe =>PUP.RightSurf SR - | Auto 07/02/2014 80160 | (Util RightSurf) . (...) - C:\Program Files (x86)\RightSurf\bin\utilRightSurf.exe =>PUP.RightSurf SR - | Auto 07/02/2014 178176 | (ViewPassword) . (...) - C:\Program Files (x86)\View-Password\ViewPassword152.exe =>PUP.ViewPassword SR - | Demand 10/07/1658 0 | (WinDefend) . (...) - C:\Program Files (x86)\Windows Defender\MsMpEng.exe SR - | Auto 10/07/1658 0 | (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe =>.Microsoft Corporation ~ Services: Scanned in 00mn 01s ---\\ Scan Additionnel (O88) Database Version : 13030 - (06/02/2014) Clés trouvées (Keys found) : 19 Valeurs trouvées (Values found) : 3 Dossiers trouvés (Folders found) : 11 Fichiers trouvés (Files found) : 25 [HKLM\Software\Google\Chrome\Extensions\licjnkifamhpbaefhdpacpmihicfbomb] =>Adware.PricePeep^ [HKLM\Software\Google\Chrome\Extensions\nikdaiaidiiiogaidkkekcmokcgcdeac] =>PUP.DiscountDragon^ [HKLM\Software\Google\Chrome\Extensions\pbpohikckhbcljgombipcdoinkaedlfa] =>Spyware.SmartDisplay^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{88BE1AA9-6740-461C-9E3E-F35EB8FA741C}] =>PUP.RightSurf^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EA34C851-D481-49F5-A356-3A8B0A8F3B7E}] =>PUP.DiscountDragon^ [HKLM\SYSTEM\CurrentControlSet\Services\savesenselive) (savesenselive] =>PUP.SaveSense^ [HKLM\SYSTEM\CurrentControlSet\Services\Update RightSurf] =>PUP.RightSurf^ [HKLM\SYSTEM\CurrentControlSet\Services\Util RightSurf] =>PUP.RightSurf^ [HKLM\SYSTEM\CurrentControlSet\Services\ViewPassword] =>PUP.ViewPassword^ [HKLM\SYSTEM\CurrentControlSet\Services\WajamUpdaterV3] =>PUP.Wajam^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{903CFFD8-85BF-4A51-8A6D-4BBBCA346A6E}] =>Adware.Boxore^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\38900_Discount Dragon] =>PUP.DiscountDragon^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\RightSurf] =>PUP.RightSurf^ [HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\SaveSense] =>PUP.SaveSense^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\1C875DDE39636004CA8CDAEC335B4160] =>Adware.PredictAd [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\38D5CDD0A851B3940A43CC50ABBA251C] =>Adware.Boxore^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AAC05EAA51DC78A41A1DCE3B31038584] =>Adware.Boxore^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BA71D41F6CC0B6247B05D473850A8AEA] =>Adware.Boxore^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CA0054A5AB3EFFE4CB5660E44A1E7DCC] =>Adware.Boxore^ [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:fst_fr_78 =>PUA.FSTfr9^ [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]:Discount Dragon-repairJob =>PUP.DiscountDragon^ C:\Users\martial\AppData\Local\Google\Chrome\User Data\Default\Extensions\licjnkifamhpbaefhdpacpmihicfbomb =>Adware.PricePeep^ C:\Users\martial\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikdaiaidiiiogaidkkekcmokcgcdeac =>PUP.DiscountDragon^ C:\Users\martial\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbpohikckhbcljgombipcdoinkaedlfa =>Spyware.SmartDisplay^ C:\Program Files (x86)\Discount Dragon =>PUP.DiscountDragon^ C:\Program Files (x86)\RightSurf =>PUP.RightSurf^ C:\Program Files (x86)\SaveSenseLive =>PUP.SaveSense^ C:\ProgramData\SaveSenseLive =>PUP.SaveSense^ C:\Users\martial\AppData\Local\Discount Dragon =>PUP.DiscountDragon^ C:\Users\martial\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SaveSense =>PUP.SaveSense^ C:\Users\martial\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Start Lollipop =>Adware.Lollipop^ C:\Program Files (x86)\AskPartnerNetwork =>Toolbar.Ask C:\Program Files (x86)\View-Password\ViewPassword152_wd.exe =>PUP.ViewPassword^ C:\Windows\Tasks\bench-S-1-5-21-3778166341-1465188008-936229986-1001.job =>PUP.GiganticSavings^ C:\Windows\Tasks\bench-sys.job =>PUP.GiganticSavings^ C:\Windows\Tasks\SaveSense.job =>Hijacker.iHaveNet^ C:\Windows\Tasks\SaveSenseLiveUpdateTaskMachineCore.job =>PUP.SaveSense^ C:\Windows\Tasks\SaveSenseLiveUpdateTaskMachineUA.job =>PUP.SaveSense^ C:\Program Files (x86)\Bench\Updater\updater.exe =>PUP.GiganticSavings^ C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe =>PUP.SaveSense^ [HKCU\Software\RightSurf] =>PUP.RightSurf^ [HKCU\Software\SaveSenseLive] =>PUP.SaveSense^ [HKLM\Software\Wow6432Node\Discount Dragon] =>PUP.DiscountDragon^ [HKLM\Software\Wow6432Node\RightSurf] =>PUP.RightSurf^ [HKLM\Software\Wow6432Node\SaveSenseLive] =>PUP.SaveSense^ C:\Windows\Installer\60aa9.msi =>Adware.Boxore^ C:\Users\martial\AppData\Local\Temp\BoxoreInstaller.exe =>Adware.Boxore C:\Users\martial\AppData\Local\Temp\nspCD20.exe =>Toolbar.Conduit C:\Users\martial\AppData\Local\Temp\nspE638.exe =>Toolbar.Conduit C:\Users\martial\AppData\Local\Temp\nsuCB6A.exe =>Toolbar.Conduit C:\Users\martial\AppData\Local\Temp\nszE4A1.exe =>Toolbar.Conduit C:\Users\martial\AppData\Local\Temp\Umbrella.exe173a2a =>Adware.IMBooster ~ Additionnel Scan: 184974 Items scanned in 00mn 11s ---\\ Récapitulatif des détections trouvées sur votre station ~ http://nicolascoolman.webs.com/apps/blog/show/35740148-pup-viewpassword =>PUP.ViewPassword ~ http://nicolascoolman.webs.com/apps/blog/show/32662245-spyware-smartdisplay =>Spyware.SmartDisplay ~ http://nicolascoolman.webs.com/apps/blog/show/33477786-pup-dosearches =>PUP.DoSearches ~ http://nicolascoolman.webs.com/apps/blog/show/27232411-hijacker-proxy =>Hijacker.Proxy ~ http://nicolascoolman.webs.com/apps/blog/show/41196115-pup-rightsurf =>PUP.RightSurf ~ http://nicolascoolman.webs.com/apps/blog/show/34014358-pua-fstfr9 =>PUA.FSTfr9 ~ http://nicolascoolman.webs.com/apps/blog/show/36853930-pup-savesense =>PUP.SaveSense ~ http://nicolascoolman.webs.com/apps/blog/show/27379491-toolbar-wajam =>PUP.Wajam ~ http://nicolascoolman.webs.com/apps/blog/show/37514218-pup-giganticsavings =>PUP.GiganticSavings ~ http://nicolascoolman.webs.com/apps/blog/show/33336602-hijacker-ihavenet =>Hijacker.iHavenet ~ http://nicolascoolman.webs.com/apps/blog/show/26626977-adware-boxore =>Adware.Boxore ~ http://nicolascoolman.webs.com/apps/blog/show/26630902-adware-lollipop =>Adware.Lollipop ~ http://nicolascoolman.webs.com/apps/blog/show/27229962-adware-predictad =>Adware.PredictAd ~ http://nicolascoolman.webs.com/apps/blog/show/28927746-toolbar-ask =>Toolbar.Ask ~ http://nicolascoolman.webs.com/apps/blog/show/29507721-toolbar-conduit =>Toolbar.Conduit ~ http://nicolascoolman.webs.com/apps/blog/show/26684723-adware-imbooster =>Adware.IMBooster ~ MSI: 16 link(s) detected in 00mn 11s ~ 936 Legitimates filtered by white list End of the scan (521 lines in 00mn 32s)(0)
  18. zurlinden
    rapport junkware removal tools ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 6.1.1 (02.04.2014:1) OS: Windows 8 x64 Ran by martial on 09/02/2014 at 10:25:48,06 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services Failed to stop: [service] Util RightSurf Failed to stop: [service] Update RightSurf Successfully stopped: [service] savesenselive Failed to delete: [service] savesenselive Successfully stopped: [service] savesenselivem Failed to delete: [service] savesenselivem ~~~ Registry Values Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\\Start Page Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Start Page Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\\Default_Page_URL ~~~ Registry Keys Failed to delete: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3} Failed to delete: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{998745A3-2AE4-488D-8092-B98FB20A00C2} Failed to delete: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{A18D16ED-27B2-4B83-B70C-15E73F099546} Failed to delete: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{BEE7E029-5037-4DAD-A2DB-82E397AB1A44} Failed to delete: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{C1424421-D274-491E-9D47-11C8D8CB5F9A} Failed to delete: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3} Failed to delete: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{998745A3-2AE4-488D-8092-B98FB20A00C2} Failed to delete: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{A18D16ED-27B2-4B83-B70C-15E73F099546} Failed to delete: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{BEE7E029-5037-4DAD-A2DB-82E397AB1A44} Failed to delete: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{C1424421-D274-491E-9D47-11C8D8CB5F9A} Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-3778166341-1465188008-936229986-1001\Software\wajam Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\installer\upgradecodes\1c875dde39636004ca8cdaec335b4160 Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3} Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{998745A3-2AE4-488D-8092-B98FB20A00C2} Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{A18D16ED-27B2-4B83-B70C-15E73F099546} Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{BEE7E029-5037-4DAD-A2DB-82E397AB1A44} Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{C1424421-D274-491E-9D47-11C8D8CB5F9A} Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3} Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\CLSID\{998745A3-2AE4-488D-8092-B98FB20A00C2} Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\CLSID\{A18D16ED-27B2-4B83-B70C-15E73F099546} Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\CLSID\{BEE7E029-5037-4DAD-A2DB-82E397AB1A44} Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\CLSID\{C1424421-D274-491E-9D47-11C8D8CB5F9A} Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{AA9A4890-4262-4441-8977-E2FFCBFB706C} Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{71e129ff-6c2a-4984-818c-7e2c998b8d99} Failed to delete: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{71e129ff-6c2a-4984-818c-7e2c998b8d99} Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{88be1aa9-6740-461c-9e3e-f35eb8fa741c} Failed to delete: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{88be1aa9-6740-461c-9e3e-f35eb8fa741c} Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\microsoft\Internet Explorer\SearchScopes\{AA9A4890-4262-4441-8977-E2FFCBFB706C} Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{AA9A4890-4262-4441-8977-E2FFCBFB706C} ~~~ Files Failed to delete: [File] C:\Windows\Tasks\SaveSenseLiveUpdateTaskMachineCore.job Failed to delete: [File] C:\Windows\Tasks\SaveSenseLiveUpdateTaskMachineUA.job ~~~ Folders Failed to delete: [Folder] "C:\ProgramData\apn" Failed to delete: [Folder] "C:\ProgramData\savesenselive" Successfully deleted: [Folder] "C:\Users\martial\AppData\Roaming\savesense" Successfully deleted: [Folder] "C:\Users\martial\appdata\local\savesense" Successfully deleted: [Folder] "C:\Users\martial\appdata\local\savesenselive" Successfully deleted: [Folder] "C:\Users\martial\appdata\local\software" Failed to delete: [Folder] "C:\Program Files (x86)\RightSurf" Failed to delete: [Folder] "C:\Program Files (x86)\savesenselive" Failed to delete: [Folder] "C:\Windows\syswow64\ai_recyclebin" ~~~ Chrome Successfully deleted: [Folder] C:\Users\martial\appdata\local\Google\Chrome\User Data\Default\Extensions\licjnkifamhpbaefhdpacpmihicfbomb ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 09/02/2014 at 10:29:43,84 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ rapport ZHP DIAG ~ Rapport de ZHPDiag v2014.2.6.4 - Nicolas Coolman (06/02/2014) ~ Lancé par martial (09/02/2014 10:36:11) ~ Adresse du Site Web http://nicolascoolman.webs.com ~ Forums gratuits d'Assistance à la désinfection : http://nicolascoolman.webs.com/apps/links/ ~ Traduit par Nicolas Coolman ~ Etat de la version : ~ Liste blanche : Activée par le programme ~ Elévation des Privilèges : OK ~ User Account Control (UAC): Activate by user ---\\ Navigateurs Internet MSIE: Internet Explorer v10.0.9200.16750 GCIE: Google Chrome v32.0.1700.107 (Defaut) ---\\ Informations sur les produits Windows ~ Langage: Français Windows 8, 64-bit (Build 9200) Windows Server License Manager Script : OK ~ ion : Windows® Operating System, OEM_DM channel Windows ID Activation : OK ~ Windows Partial Key : 4RDHT Windows License : OK ~ Windows Remaining Initializations Number : 999 Software Protection Service (Protection logicielle) : OK Windows Automatic Updates : OK Windows Activation Technologies : OK ---\\ Logiciels de protection du système AVG 2014 v14.0.3697 Windows Defender W8 ---\\ Logiciels d'optimisation du système CCleaner v4.10 =>Piriform Ltd ---\\ Logiciels de partage PeerToPeer ---\\ Surveillance de Logiciels ---\\ Informations sur le système ~ Processor: Intel64 Family 6 Model 58 Stepping 9, GenuineIntel ~ Operating System: 64 Bits Boot mode: Normal (Normal boot) Total RAM: 8144 MB (74% free) System Restore: Activé (Enable) System drive C: has 399 GB (87%) free of 458 GB ---\\ Mode de connexion au système ~ Computer Name: PC-BALOU ~ User Name: martial ~ All Users Names: martial, HomeGroupUser$, Administrateur, ~ Unselected Option: O45,O61,O62,O65,O66,O80,O82,O89 Logged in as Administrator ---\\ Variables d'environnement ~ System Unit : C:\ ~ %AppZHP% : C:\Users\martial\AppData\Roaming\ZHP\ ~ %AppData% : C:\Users\martial\AppData\Roaming\ ~ %Desktop% : C:\Users\martial\Desktop\ ~ %Favorites% : C:\Users\martial\Favorites\ ~ %LocalAppData% : C:\Users\martial\AppData\Local\ ~ %StartMenu% : C:\Users\martial\AppData\Roaming\Microsoft\Windows\Start Menu\ ~ %Windir% : C:\Windows\ ~ %System% : C:\Windows\System32\ ---\\ Enumération des unités disques C: Hard drive, Flash drive, Thumb drive (Free 399 Go of 458 Go) D: Hard drive, Flash drive, Thumb drive (Free 457 Go of 458 Go) E: CD-ROM drive (Not Inserted) ---\\ Etat du Centre de Sécurité Windows [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified ~ Security Center: 41 Legitimates Filtered in 00mn 00s ---\\ Recherche particulière de fichiers génériques [MD5.0E8E6463F81C80AFBED533E0F1F8895D] - (.Microsoft Corporation - Explorateur Windows.) (.01/06/2013 - 12:34:21.) -- C:\Windows\Explorer.exe [2391280] [MD5.FE9AB232B56A12224E8A3F3F9878C9A3] - (.Microsoft Corporation - Application de démarrage de Windows.) (.26/07/2012 - 04:08:50.) -- C:\Windows\System32\Wininit.exe [132608] [MD5.E7099336BF7531B6FCC920DCB5101259] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.25/10/2013 - 07:19:22.) -- C:\Windows\System32\wininet.dll [2241536] [MD5.BCF2036A0DD579E47C008C133550283E] - (.Microsoft Corporation - Application d’ouverture de session Windows.) (.11/10/2012 - 06:46:58.) -- C:\Windows\System32\Winlogon.exe [517120] [MD5.9448F5740A037EC0C18F0E9177232DD0] - (.Microsoft Corporation - Bibliothèque de licences.) (.26/07/2012 - 04:07:20.) -- C:\Windows\System32\sppcomapi.dll [273408] [MD5.7C0E0EDF18D6CC565D7BFBB451709FA5] - (.Microsoft Corporation - Pilote de fonction connexe pour WinSock.) (.04/09/2013 - 04:11:23.) -- C:\Windows\system32\Drivers\AFD.sys [576512] [MD5.A721FF570C2387E383BDDEA9632863C9] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.26/07/2012 - 06:00:48.) -- C:\Windows\system32\Drivers\atapi.sys [25840] [MD5.990B1BABE6E81FB18E65A87EBEFB1772] - (.Microsoft Corporation - CD-ROM File System Driver.) (.26/07/2012 - 03:30:10.) -- C:\Windows\system32\Drivers\Cdfs.sys [108544] [MD5.339BFF85D788268752DA8C9644B188EE] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.26/07/2012 - 03:26:36.) -- C:\Windows\system32\Drivers\Cdrom.sys [174080] [MD5.09D9EB9E7898F8E6561473A20CC808B9] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.26/07/2012 - 03:26:53.) -- C:\Windows\system32\Drivers\DfsC.sys [118784] [MD5.7D87B5B6C7188D553E11B59DC7F0B111] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.20/09/2012 - 07:08:44.) -- C:\Windows\system32\Drivers\HDAudBus.sys [71168] [MD5.C9E9CBF73AFFBFE3E801EFB516787BA3] - (.Microsoft Corporation - Pilote de port i8042.) (.26/07/2012 - 03:28:51.) -- C:\Windows\system32\Drivers\i8042prt.sys [112640] [MD5.3969B9C218DD3FAA9F4ED2FFC3651C02] - (.Microsoft Corporation - IP Network Address Translator.) (.26/07/2012 - 03:23:01.) -- C:\Windows\system32\Drivers\IpNat.sys [145920] [MD5.93179D48066918323628CB016D8C94DC] - (.Microsoft Corporation - Minirdr SMB Windows NT.) (.05/02/2013 - 23:29:09.) -- C:\Windows\system32\Drivers\MRxSmb.sys [370688] [MD5.7CEC25C682D319D484630B3952C31A11] - (.Microsoft Corporation - MBT Transport driver.) (.26/07/2012 - 03:24:28.) -- C:\Windows\system32\Drivers\netBT.sys [331776] [MD5.76929F4A69E425911A63B407E26C2589] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.02/02/2013 - 11:54:54.) -- C:\Windows\system32\Drivers\ntfs.sys [1933544] [MD5.4563DAF8C6A740AD7F501E219BD10766] - (.Microsoft Corporation - Pilote de port parallèle.) (.26/07/2012 - 03:29:53.) -- C:\Windows\system32\Drivers\Parport.sys [105984] [MD5.A14D625C5AEE5FFE0F47D1A1D419FAAE] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.26/07/2012 - 03:23:17.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [124928] [MD5.B2A3AD74FF2E2FFA73AF2567108231B3] - (.Microsoft Corporation - Redirecteur de périphérique de Microsoft RDP.) (.26/07/2012 - 03:25:18.) -- C:\Windows\system32\Drivers\rdpdr.sys [179712] [MD5.73DC722CE5DF26D7638CE2446F2655C7] - (.Microsoft Corporation - TDI Translation Driver.) (.26/07/2012 - 06:26:47.) -- C:\Windows\system32\Drivers\tdx.sys [117248] [MD5.78A5BBA3819FFFC62FFEC3E2220D102D] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.01/06/2013 - 12:26:33.) -- C:\Windows\system32\Drivers\volsnap.sys [327936] ~ Generic Processes: Scanned in 00mn 00s ---\\ Etat des fichiers cachés (Caché/Total) ~ Mes images (My Pictures) : 2/5 ~ Mes Favoris (My Favorites) : 1/7 ~ Mes Documents (My Documents) : 1/7 ~ Mon Bureau (My Desktop) : 2/23 ~ Menu demarrer (Programs) : 1/38 ~ Hidden Files: Scanned in 00mn 00s ---\\ Processus lancés [MD5.85BCCCE4A932C1EFB08EA84444031491] - (...) -- C:\Program Files (x86)\View-Password\ViewPassword152_wd.exe [92672] [PID.3336] =>PUP.ViewPassword [MD5.280B64F6BFCEDE6D67D261EB808AA617] - (.Acer Incorporated - Hotkey Utility.) -- C:\Program Files (x86)\Acer\Hotkey Utility\HotkeyUtility.exe [524944] [PID.4464] [MD5.58920E6A409046BA06548D9D139CE0F0] - (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe [20584608] [PID.2108] [MD5.BEFFB2D021E7FA9E92249F3997930A68] - (.Acer - ArcServer.) -- C:\Program Files (x86)\Acer Remote\ArcServer.exe [522144] [PID.4392] [MD5.C850CA110CB798851BFD47F60E8B4B2D] - (.OpenOffice.org - OpenOffice.org Writer.) -- C:\Program Files (x86)\OpenOffice.org 3\program\swriter.exe [103936] [PID.4372] [MD5.749949494676218FFA99501F4AA22ECC] - (.OpenOffice.org - OpenOffice.org 3.4.1.) -- C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe [10376704] [PID.4400] [MD5.4EE367B8B1964160A1F1B80095183D3A] - (.OpenOffice.org - OpenOffice.org 3.4.1.) -- C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin [10368512] [PID.4416] [MD5.1DEE34C2698609FCA287D794BA29CE02] - (.Tlapia - sysTPL.) -- C:\Program Files (x86)\sysTPL\sysTPL.exe [1244440] [PID.4192] [MD5.DD231039B13EC2ABDE315D76E658EF0E] - (.Avira Operations GmbH & Co. KG - Antivirus System Tray Tool (Desktop).) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600] [PID.1164] [MD5.643F7A81B4FC27845886AB9650AD2C61] - (.AVG Technologies CZ, s.r.o. - AVG User Interface.) -- C:\Program Files (x86)\AVG\AVG2014\avgui.exe [4956176] [PID.1076] [MD5.0CED501E811F5C4745415FCC000CE043] - (.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe [164864] [PID.5232] [MD5.5640B4C10682FBC39C86C8C7A8392B5E] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [866632] [PID.1196] [MD5.47D7F5E049E3FAA24176FB92859C552B] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [8333824] [PID.2572] ~ Processes Running: Scanned in 00mn 00s ---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2) C:\Users\martial\AppData\Local\Google\Chrome\User Data\Default\Preferences G1 - GCS: Preference [user Data\Default] http://search.conduit.com G2 - GCE: Preference [user Data\Default] [licjnkifamhpbaefhdpacpmihicfbomb] PricePeep v.2.2.0.9 (Activé) =>Adware.PricePeep G2 - GCE: Preference [user Data\Default] [nikdaiaidiiiogaidkkekcmokcgcdeac] Discount Dragon v.1.0, (Activé) =>PUP.DiscountDragon G2 - GCE: Preference [user Data\Default] [nkeimhogjdpnpccoofpliimaahmaaome] Hangout Services v.1.0 (Activé) G2 - GCE: Preference [user Data\Default] [pbpohikckhbcljgombipcdoinkaedlfa] Smart Display v.1.6 (Activé) =>Spyware.SmartDisplay ~ Google Browser: 17 Legitimates Filtered in 00mn 06s ---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4) R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://do-search.com =>PUP.DoSearches R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://do-search.com =>PUP.DoSearches R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://do-search.com =>PUP.DoSearches R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://do-search.com =>PUP.DoSearches R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://do-search.com =>PUP.DoSearches R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://do-search.com =>PUP.DoSearches ~ IE Browser: 17 Legitimates Filtered in 00mn 00s ---\\ Internet Explorer, Proxy Management (R5) R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:8877 =>Hijacker.Proxy R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll ~ Proxy management: Scanned in 00mn 00s ---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe, F2 - REG:system.ini: Shell=C:\Windows\explorer.exe F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe ~ Keys: Scanned in 00mn 00s ---\\ Hosts file redirection (O1) O1 - Hosts: 54.204.28.26 nikdaiaidiiiogaidkkekcmokcgcdeac =>PUP.DiscountDragon ~ Hosts File: Scanned in 00mn 00s ~ Nombre de lignes (Lines number): 23 ---\\ Browser Helper Objects de navigateur (O2) O2 - BHO: RightSurf [64Bits] - {88be1aa9-6740-461c-9e3e-f35eb8fa741c} . (.RightSurf - RightSurf.) -- C:\Program Files (x86)\RightSurf\RightSurfbho.dll =>PUP.RightSurf O2 - BHO: Discount Dragon BHO [64Bits] - {EA34C851-D481-49F5-A356-3A8B0A8F3B7E} . (.Pas de propriétaire - FrameworkBHO.) -- C:\Program Files (x86)\Discount Dragon\FrameworkBHO.dll =>PUP.DiscountDragon ~ BHO: 4 Legitimates Filtered in 00mn 00s ---\\ Autres liens utilisateurs (O4) O4 - GS\Desktop [Public]: 3D Vision Photo Viewer.lnk . (.NVIDIA Corporation - NVIDIA 3D Vision Photo Viewer.) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvstview.exe O4 - GS\Desktop [Public]: Acer Remote.lnk . (.Acer - ArcServer.) -- C:\Program Files (x86)\Acer Remote\ArcServer.exe O4 - GS\Desktop [Public]: Advanced Disk Recovery.lnk . (.Systweak Software, (www.systweak.com) - Advanced Disk Recovery - UAC Launcher.) -- C:\Program Files (x86)\Advanced Disk Recovery\HighestAvailable.exe O4 - GS\Desktop [Public]: Casino Classic.lnk . (.Microgaming Systems - Game Launcher.) -- C:\Microgaming\Casino\casinoclassic\casinogame.exe O4 - GS\Desktop [Public]: Demo Acer Remote.lnk . (...) -- C:\Program Files (x86)\Acer Remote Demo\Acer Remote_demo.mp4 O4 - GS\Desktop [Public]: EPSON Scan.lnk . (.SEIKO EPSON CORP. - EPSON Scan.) -- C:\Windows\twain_32\escndv\escndv.exe O4 - GS\Desktop [Public]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe O4 - GS\Desktop [Public]: Help and Support.lnk - Clé orpheline O4 - GS\Program [Public]: Desktop.lnk - Clé orpheline O4 - GS\QuickLaunch [martial]: Advanced Disk Recovery.lnk . (.Systweak Software, (www.systweak.com) - Advanced Disk Recovery - UAC Launcher.) -- C:\Program Files (x86)\Advanced Disk Recovery\HighestAvailable.exe O4 - GS\QuickLaunch [martial]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe O4 - GS\QuickLaunch [martial]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe O4 - GS\TaskBar [martial]: Acer Docs.lnk . (...) -- C:\Program Files (x86)\Acer\AcerCloud Docs\AcerCloud Docs.exe O4 - GS\TaskBar [martial]: Acer Media.lnk . (.Acer Incorporated - Acer Media.) -- C:\Program Files (x86)\Acer\clear.fi Media\ClearfiMedia.exe O4 - GS\TaskBar [martial]: Acer Photo.lnk . (.Acer Incorporated - Acer Photo.) -- C:\Program Files (x86)\Acer\clear.fi Photo\ClearfiPhoto.exe O4 - GS\TaskBar [martial]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe O4 - GS\TaskBar [martial]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe O4 - GS\TaskBar [martial]: Lanceur d'applications Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe O4 - GS\Program [martial]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe O4 - GS\Desktop [martial]: Lanceur d'applications Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe O4 - GS\Desktop [martial]: Ludi.lnk - Clé orpheline O4 - GS\Desktop [martial]: PokerStars.fr.lnk . (.PokerStars - PokerStars Update.) -- C:\Program Files (x86)\PokerStars.FR\PokerStarsUpdate.exe ~ Global Startup: 54 Legitimates Filtered in 00mn 01s ---\\ Applications lancées au démarrage du sytème (O4) O4 - GS\Startup [Public]: Acer Remote.lnk . (.Acer - ArcServer.) -- C:\Program Files (x86)\Acer Remote\ArcServer.exe O4 - GS\Startup [martial]: OpenOffice.org 3.4.1.lnk . (...) -- C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe O4 - GS\Startup [martial]: PricePeepUpdater.lnk . (...) -- C:\Program Files (x86)\PricePeep\PricePeepUpdater.exe (.not file.) =>Adware.PricePeep O4 - HKLM\..\Run: [RTHDVCPL] . (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe =>.Realtek Semiconductor Corp O4 - HKCU\..\Run: [EPLTarget\P0000000000000000] . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIIKE.exe =>.Epson Seiko Corporation O4 - HKCU\..\Run: [skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe =>.Skype Technologies S.A. O4 - HKLM\..\Wow6432Node\Run: [sysTPL] . (.Tlapia - sysTPL.) -- C:\Program Files (x86)\sysTPL\sysTPL.exe O4 - HKLM\..\Wow6432Node\Run: [fst_fr_78] Clé orpheline =>PUA.FSTfr9 O4 - HKLM\..\Wow6432Node\Run: [avgnt] . (.Avira Operations GmbH & Co. KG - Antivirus System Tray Tool (Desktop).) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe O4 - HKLM\..\Wow6432Node\Run: [AVG_UI] . (.AVG Technologies CZ, s.r.o. - AVG User Interface.) -- C:\Program Files (x86)\AVG\AVG2014\avgui.exe O4 - HKLM\..\Wow6432Node\RunOnce: [Discount Dragon-repairJob] . (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\wscript.exe =>PUP.DiscountDragon O4 - HKUS\S-1-5-21-3778166341-1465188008-936229986-1001\..\Run: [EPLTarget\P0000000000000000] . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIIKE.exe =>.Epson Seiko Corporation O4 - HKUS\S-1-5-21-3778166341-1465188008-936229986-1001\..\Run: [skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe =>.Skype Technologies S.A. ~ Application: Scanned in 00mn 00s ---\\ Modification Domaine/Adresses DNS (O17) O17 - HKLM\System\CCS\Services\Tcpip\..\{3EAD6CDF-D505-4FFC-B3C8-31B02CB49FF0}: DhcpNameServer = 192.168.1.254 O17 - HKLM\System\CCS\Services\Tcpip\..\{3EAD6CDF-D505-4FFC-B3C8-31B02CB49FF0}: DhcpDomain = bouyguesbox.fr O17 - HKLM\System\CS1\Services\Tcpip\..\{3EAD6CDF-D505-4FFC-B3C8-31B02CB49FF0}: DhcpNameServer = 192.168.1.254 O17 - HKLM\System\CS1\Services\Tcpip\..\{3EAD6CDF-D505-4FFC-B3C8-31B02CB49FF0}: DhcpDomain = bouyguesbox.fr O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254 ~ Domain: Scanned in 00mn 00s ---\\ Protocole additionnel (O18) O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft ®.) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation ~ Protocole Additionnel: Scanned in 00mn 00s ---\\ Liste des services NT non Microsoft et non désactivés (O23) O23 - Service: SaveSenseLive Service (savesenselive) (savesenselive) . (.SaveSense - SaveSenseLive Update.) - C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe =>PUP.SaveSense O23 - Service: Update RightSurf (Update RightSurf) . (...) - C:\Program Files (x86)\RightSurf\updateRightSurf.exe =>PUP.RightSurf O23 - Service: Util RightSurf (Util RightSurf) . (...) - C:\Program Files (x86)\RightSurf\bin\utilRightSurf.exe =>PUP.RightSurf O23 - Service: View Password (ViewPassword) . (...) - C:\Program Files (x86)\View-Password\ViewPassword152.exe =>PUP.ViewPassword O23 - Service: WajamUpdaterV3 (WajamUpdaterV3) . (...) - C:\Program Files (x86)\Wajam\Updater\WajamUpdaterV3.exe (.not file.) =>PUP.Wajam ~ Services: 24 Legitimates Filtered in 00mn 03s ---\\ Tâches planifiées en automatique (O39) O39 - APT:Automatic Planified Task - C:\Windows\Tasks\bench-S-1-5-21-3778166341-1465188008-936229986-1001.job [366] =>PUP.GiganticSavings O39 - APT:Automatic Planified Task - C:\Windows\Tasks\bench-sys.job [366] =>PUP.GiganticSavings O39 - APT:Automatic Planified Task - C:\Windows\Tasks\SaveSense.job [318] =>Hijacker.iHaveNet O39 - APT:Automatic Planified Task - C:\Windows\Tasks\SaveSenseLiveUpdateTaskMachineCore.job [948] =>PUP.SaveSense O39 - APT:Automatic Planified Task - C:\Windows\Tasks\SaveSenseLiveUpdateTaskMachineUA.job [952] =>PUP.SaveSense O39 - APT:Automatic Planified Task - C:\Windows\Tasks\View Password Update.job [426] O39 - APT:Automatic Planified Task - C:\Windows\Tasks\View Password_wd.job [420] [MD5.2064E97CF3396C4EC5A497CE49E4515F] [APT] [bench-S-1-5-21-3778166341-1465188008-936229986-1001] (...) -- C:\Program Files (x86)\Bench\Updater\updater.exe [254456] =>PUP.GiganticSavings [MD5.2064E97CF3396C4EC5A497CE49E4515F] [APT] [bench-sys] (...) -- C:\Program Files (x86)\Bench\Updater\updater.exe [254456] =>PUP.GiganticSavings [MD5.00000000000000000000000000000000] [APT] [saveSense] (...) -- C:\Users\martial\AppData\Roaming\SAVESE~1\UPDATE~1\UPDATE~1.exe (.not file.) [0] =>PUP.SaveSense [MD5.C495D8665A32539660625182D23D5C59] [APT] [saveSenseLiveUpdateTaskMachineCore] (.SaveSense.) -- C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe [146920] =>PUP.SaveSense [MD5.C495D8665A32539660625182D23D5C59] [APT] [saveSenseLiveUpdateTaskMachineUA] (.SaveSense.) -- C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe [146920] =>PUP.SaveSense [MD5.4D6ECC299B8D1E62FB993111F32E53A8] [APT] [View Password Update] (...) -- C:\Program Files (x86)\View-Password\View-Password.exe [245248] [MD5.85BCCCE4A932C1EFB08EA84444031491] [APT] [View Password_wd] (...) -- C:\Program Files (x86)\View-Password\ViewPassword152_wd.exe [92672] =>PUP.ViewPassword [MD5.00000000000000000000000000000000] [APT] [{7D9DB445-CDF2-402D-8C76-408B14284FAD}] (...) -- C:\Users\martial\Desktop\avira_free_antivirus_fr.exe (.not file.) [0] ~ Scheduled Task: 30 Legitimates Filtered in 00mn 03s ---\\ Logiciels installés (O42) O42 - Logiciel: Boxore Client - (.Boxore OU.) [HKLM][64Bits] -- {903CFFD8-85BF-4A51-8A6D-4BBBCA346A6E} =>Adware.Boxore O42 - Logiciel: Casino Classic - (...) [HKLM][64Bits] -- casinoclassic O42 - Logiciel: Discount Dragon - (.Smart Apps.) [HKLM][64Bits] -- 38900_Discount Dragon =>PUP.DiscountDragon O42 - Logiciel: PokerStars.fr - (.PokerStars.fr.) [HKLM][64Bits] -- PokerStars.fr O42 - Logiciel: RightSurf - (.RightSurf.) [HKLM][64Bits] -- RightSurf =>PUP.RightSurf O42 - Logiciel: SaveSense - (.SaveSense.) [HKCU][64Bits] -- SaveSense =>PUP.SaveSense O42 - Logiciel: View Password - (.View Password.) [HKLM][64Bits] -- 76c4cae9-491a-4726-b03c-2402f21abf4a ~ Logic: 35 Legitimates Filtered in 00mn 00s ---\\ HKCU & HKLM Software Keys [HKCU\Software\Ecommfactory] [HKCU\Software\MGS] [HKCU\Software\RightSurf] =>PUP.RightSurf [HKCU\Software\SaveSenseLive] =>PUP.SaveSense [HKLM\Software\Wow6432Node\Discount Dragon] =>PUP.DiscountDragon [HKLM\Software\Wow6432Node\RightSurf] =>PUP.RightSurf [HKLM\Software\Wow6432Node\SaveSenseLive] =>PUP.SaveSense ~ Key Software: 251 Legitimates Filtered in 00mn 00s ---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43) O43 - CFD: 21/12/2013 - 19:53:24 - [1,964] ----D C:\Program Files (x86)\AskPartnerNetwork O43 - CFD: 07/02/2014 - 20:29:22 - [1,038] ----D C:\Program Files (x86)\Discount Dragon =>PUP.DiscountDragon O43 - CFD: 06/02/2014 - 21:44:24 - [119,341] ----D C:\Program Files (x86)\PokerStars.FR O43 - CFD: 07/02/2014 - 20:38:02 - [2,728] ----D C:\Program Files (x86)\RightSurf =>PUP.RightSurf O43 - CFD: 07/02/2014 - 19:50:02 - [3,431] ----D C:\Program Files (x86)\SaveSenseLive =>PUP.SaveSense O43 - CFD: 07/02/2014 - 19:53:01 - [0,667] ----D C:\Program Files (x86)\View-Password O43 - CFD: 21/12/2013 - 19:53:16 - [0] ----D C:\ProgramData\APN O43 - CFD: 18/10/2013 - 17:03:20 - [-890,689] ----D C:\ProgramData\MGS O43 - CFD: 05/10/2013 - 08:15:08 - [0] ----D C:\ProgramData\OEM_YAHOO O43 - CFD: 07/02/2014 - 19:50:01 - [0] ----D C:\ProgramData\SaveSenseLive =>PUP.SaveSense O43 - CFD: 07/02/2014 - 20:29:23 - [1,083] ----D C:\Users\martial\AppData\Local\Discount Dragon =>PUP.DiscountDragon O43 - CFD: 09/10/2013 - 19:51:04 - [35,079] ----D C:\Users\martial\AppData\Local\Doc O43 - CFD: 08/02/2014 - 20:40:54 - [3,975] ----D C:\Users\martial\AppData\Local\PokerStars.FR O43 - CFD: 05/10/2013 - 20:23:04 - [0,003] ----D C:\Users\martial\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PokerStars.FR O43 - CFD: 07/02/2014 - 19:49:50 - [0,001] ----D C:\Users\martial\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SaveSense =>PUP.SaveSense O43 - CFD: 07/02/2014 - 19:53:15 - [0,002] ----D C:\Users\martial\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Start Lollipop =>Adware.Lollipop ~ Program Folder: 148 Legitimates Filtered in 00mn 03s ---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44) O44 - LFC:[MD5.06BFB1C90F001458F8D39C1879076597] - 09/02/2014 - 10:20:25 ---A- . (...) -- C:\Windows\win.ini [618] ~ Files: 12 Legitimates Filtered in 00mn 26s ---\\ Clé de registre Shell MountPoints2 (MPKS) (O51) O51 - MPSK:{d76a96c1-3c02-11e3-be78-7427ea4db901}\AutoRun\command. (...) -- F:\Startme.exe (.not file.) ~ Keys: Scanned in 00mn 00s ---\\ Enumération des clés de registre PoliciesSystem (MWPS) (O55) O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0 O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0 O55 - MWPS:[HKLM\...\Policies\System] - "EnableLinkedConnections"=1 ~ MWPS: 20 Legitimates Filtered in 00mn 00s ---\\ Enumération des clés de registre PoliciesExplorer (MWPE) (O56) O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1 ~ MWPE Keys: 5 Legitimates Filtered in 00mn 00s ---\\ Liste des pilotes du système (SDL) (O58) O58 - SDL:[MD5.4E85355B94CFCB67C135F6521A4895A7] - 26/07/2012 - 06:00:55 ---A- . (.Promise Technology, Inc. - Promise SuperTrak EX Series Driver for Windows x64.) -- C:\Windows\System32\Drivers\stexstor.sys [30960] ~ Drivers: 20 Legitimates Filtered in 00mn 01s ---\\ Liste des outils de désinfection (LATC) (O63) O63 - Logiciel: ZHPDiag 2014 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 =>.Nicolas Coolman ~ ADS: Scanned in 00mn 00s ---\\ Associations Shell Spawning (O67) O67 - Shell Spawning: <.html> <ChromeHTML>[HKCU\..\open\Command] (.Not Key.) ~ FASS Keys: 11 Legitimates Filtered in 00mn 00s ---\\ Menu de démarrage Internet (SMI) (O68) O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe ~ Keys: Scanned in 00mn 00s ---\\ Recherche d'infection sur les navigateurs internet (SBI) (O69) O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} - (Google) - http://www.google.com ~ Keys: Scanned in 00mn 00s ---\\ Enumère les codes produits des logiciels (PUC) (O90) O90 - PUC: "2A8EBFD6FBDCE3543BC4232F20CFEEC4" . (.Software Updater.) -- C:\Windows\Installer\{6DFBE8A2-CDBF-453E-B34C-32F202FCEE4C}\icon.ico O90 - PUC: "33B1C8585D3C77347BB7E1F233C8F766" . (..) -- C:\Windows\Installer\{858C1B33-C3D5-4377-B77B-1E2F338C7F66}\ARPPRODUCTICON.exe O90 - PUC: "8DFFC309FB5815A4A8D6B4BBAC43A6E6" . (.Boxore Client.) -- C:\Windows\Installer\{903CFFD8-85BF-4A51-8A6D-4BBBCA346A6E}\boxore.ico =>Adware.Boxore ~ Update Products: 44 Legitimates Filtered in 00mn 00s ---\\ Recherche des packages WindowsInstaller (WIS) (O93) (NTFS) [MD5.A3AEEC9A9B6984F2E22B90FDC9A23AB8] [WIS][21/12/2013] (.Skype Technologies S.A. - Skype.) -- C:\Windows\Installer\1151bb.msi [24993792] [MD5.FD27033962C87183E39F38DB982AB9A3] [WIS][07/02/2014] (.Boxore OU - Boxore Client Installer.) -- C:\Windows\Installer\60aa9.msi [1896448] =>Adware.Boxore ~ WIS: 46 Legitimates Filtered in 00mn 04s ---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped) SS - | Disabled 09/12/2013 1011768 | (AntiVirWebService) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe SS - | Demand 12/10/2010 206072 | (GamesAppService) . (.WildTangent, Inc..) - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe SS - | Auto 06/10/2013 116648 | (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe SS - | Demand 06/10/2013 116648 | (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe SS - | Auto 07/02/2014 146920 | (savesenselive) . (.SaveSense.) - C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe =>PUP.SaveSense SS - | Demand 07/02/2014 146920 | (savesenselivem) . (.SaveSense.) - C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe =>PUP.SaveSense SS - | Auto 23/10/2013 172192 | (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe SS - | Auto 10/07/1658 0 | (WajamUpdaterV3) . (...) - C:\Program Files (x86)\Wajam\Updater\WajamUpdaterV3.exe =>PUP.Wajam SS - | Demand 20/09/2012 29696 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe SR - | Auto 09/12/2013 440376 | (AntiVirSchedulerService) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe SR - | Auto 09/12/2013 440376 | (AntiVirService) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe SR - | Auto 24/09/2013 1358944 | (avgfws) . (.AVG Technologies CZ, s.r.o..) - C:\Program Files (x86)\AVG\AVG2014\avgfws.exe SR - | Auto 11/11/2013 3478544 | (AVGIDSAgent) . (.AVG Technologies CZ, s.r.o..) - C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe SR - | Auto 24/09/2013 348008 | (avgwd) . (.AVG Technologies CZ, s.r.o..) - C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe SR - | Auto 10/07/2013 2650696 | (CCDMonitorService) . (.Acer Incorporated.) - C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe SR - | Demand 18/01/2013 660040 | (ePowerSvc) . (.Acer Incorporated.) - C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe SR - | Auto 12/12/2011 135824 | (EpsonScanSvc) . (.Seiko Epson Corporation.) - C:\Windows\system32\EscSvc64.exe SR - | Auto 13/07/2012 2451456 | (IconMan_R) . (.Realsil Microelectronics Inc..) - C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe SR - | Auto 20/04/2012 635104 | (Intel® Capability Licensing Service Interface) . (.Intel® Corporation.) - C:\Program Files\Intel\iCLS Client\HeciServer.exe SR - | Auto 05/06/2012 190824 | (Intel® PROSet Monitoring Service) . (.Intel Corporation.) - C:\Windows\system32\IProsetMonitor.exe SR - | Auto 17/07/2012 165760 | (jhi_service) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe SR - | Auto 17/07/2012 276864 | (LMS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe SR - | Auto 14/07/2012 769432 | (NAUpdate) . (.Nero AG.) - c:\Program Files (x86)\Nero\Update\NASvc.exe SR - | Auto 30/01/2013 884512 | (nvsvc) . (.NVIDIA Corporation.) - C:\Windows\system32\nvvsvc.exe SR - | Auto 30/01/2013 383264 | (Stereo Service) . (.NVIDIA Corporation.) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe SR - | Auto 29/01/2014 399640 | (sysTPLMonitor.exe) . (.Tlapia.) - C:\Program Files (x86)\sysTPL\sysTPLMonitor.exe SR - | Auto 29/01/2014 400664 | (sysTPLService.exe) . (.Tlapia.) - C:\Program Files (x86)\sysTPL\sysTPLService.exe SR - | Auto 17/07/2012 364416 | (UNS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe SR - | Auto 07/02/2014 80160 | (Update RightSurf) . (...) - C:\Program Files (x86)\RightSurf\updateRightSurf.exe =>PUP.RightSurf SR - | Auto 07/02/2014 80160 | (Util RightSurf) . (...) - C:\Program Files (x86)\RightSurf\bin\utilRightSurf.exe =>PUP.RightSurf SR - | Auto 07/02/2014 178176 | (ViewPassword) . (...) - C:\Program Files (x86)\View-Password\ViewPassword152.exe =>PUP.ViewPassword SR - | Demand 10/07/1658 0 | (WinDefend) . (...) - C:\Program Files (x86)\Windows Defender\MsMpEng.exe SR - | Auto 10/07/1658 0 | (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe =>.Microsoft Corporation ~ Services: Scanned in 00mn 05s ---\\ Scan Additionnel (O88) Database Version : 13030 - (06/02/2014) Clés trouvées (Keys found) : 19 Valeurs trouvées (Values found) : 3 Dossiers trouvés (Folders found) : 11 Fichiers trouvés (Files found) : 25 [HKLM\Software\Google\Chrome\Extensions\licjnkifamhpbaefhdpacpmihicfbomb] =>Adware.PricePeep^ [HKLM\Software\Google\Chrome\Extensions\nikdaiaidiiiogaidkkekcmokcgcdeac] =>PUP.DiscountDragon^ [HKLM\Software\Google\Chrome\Extensions\pbpohikckhbcljgombipcdoinkaedlfa] =>Spyware.SmartDisplay^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{88BE1AA9-6740-461C-9E3E-F35EB8FA741C}] =>PUP.RightSurf^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EA34C851-D481-49F5-A356-3A8B0A8F3B7E}] =>PUP.DiscountDragon^ [HKLM\SYSTEM\CurrentControlSet\Services\savesenselive) (savesenselive] =>PUP.SaveSense^ [HKLM\SYSTEM\CurrentControlSet\Services\Update RightSurf] =>PUP.RightSurf^ [HKLM\SYSTEM\CurrentControlSet\Services\Util RightSurf] =>PUP.RightSurf^ [HKLM\SYSTEM\CurrentControlSet\Services\ViewPassword] =>PUP.ViewPassword^ [HKLM\SYSTEM\CurrentControlSet\Services\WajamUpdaterV3] =>PUP.Wajam^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{903CFFD8-85BF-4A51-8A6D-4BBBCA346A6E}] =>Adware.Boxore^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\38900_Discount Dragon] =>PUP.DiscountDragon^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\RightSurf] =>PUP.RightSurf^ [HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\SaveSense] =>PUP.SaveSense^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\1C875DDE39636004CA8CDAEC335B4160] =>Adware.PredictAd [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\38D5CDD0A851B3940A43CC50ABBA251C] =>Adware.Boxore^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AAC05EAA51DC78A41A1DCE3B31038584] =>Adware.Boxore^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BA71D41F6CC0B6247B05D473850A8AEA] =>Adware.Boxore^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CA0054A5AB3EFFE4CB5660E44A1E7DCC] =>Adware.Boxore^ [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:fst_fr_78 =>PUA.FSTfr9^ [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]:Discount Dragon-repairJob =>PUP.DiscountDragon^ C:\Users\martial\AppData\Local\Google\Chrome\User Data\Default\Extensions\licjnkifamhpbaefhdpacpmihicfbomb =>Adware.PricePeep^ C:\Users\martial\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikdaiaidiiiogaidkkekcmokcgcdeac =>PUP.DiscountDragon^ C:\Users\martial\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbpohikckhbcljgombipcdoinkaedlfa =>Spyware.SmartDisplay^ C:\Program Files (x86)\Discount Dragon =>PUP.DiscountDragon^ C:\Program Files (x86)\RightSurf =>PUP.RightSurf^ C:\Program Files (x86)\SaveSenseLive =>PUP.SaveSense^ C:\ProgramData\SaveSenseLive =>PUP.SaveSense^ C:\Users\martial\AppData\Local\Discount Dragon =>PUP.DiscountDragon^ C:\Users\martial\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SaveSense =>PUP.SaveSense^ C:\Users\martial\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Start Lollipop =>Adware.Lollipop^ C:\Program Files (x86)\AskPartnerNetwork =>Toolbar.Ask C:\Program Files (x86)\View-Password\ViewPassword152_wd.exe =>PUP.ViewPassword^ C:\Windows\Tasks\bench-S-1-5-21-3778166341-1465188008-936229986-1001.job =>PUP.GiganticSavings^ C:\Windows\Tasks\bench-sys.job =>PUP.GiganticSavings^ C:\Windows\Tasks\SaveSense.job =>Hijacker.iHaveNet^ C:\Windows\Tasks\SaveSenseLiveUpdateTaskMachineCore.job =>PUP.SaveSense^ C:\Windows\Tasks\SaveSenseLiveUpdateTaskMachineUA.job =>PUP.SaveSense^ C:\Program Files (x86)\Bench\Updater\updater.exe =>PUP.GiganticSavings^ C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe =>PUP.SaveSense^ [HKCU\Software\RightSurf] =>PUP.RightSurf^ [HKCU\Software\SaveSenseLive] =>PUP.SaveSense^ [HKLM\Software\Wow6432Node\Discount Dragon] =>PUP.DiscountDragon^ [HKLM\Software\Wow6432Node\RightSurf] =>PUP.RightSurf^ [HKLM\Software\Wow6432Node\SaveSenseLive] =>PUP.SaveSense^ C:\Windows\Installer\60aa9.msi =>Adware.Boxore^ C:\Users\martial\AppData\Local\Temp\BoxoreInstaller.exe =>Adware.Boxore C:\Users\martial\AppData\Local\Temp\nspCD20.exe =>Toolbar.Conduit C:\Users\martial\AppData\Local\Temp\nspE638.exe =>Toolbar.Conduit C:\Users\martial\AppData\Local\Temp\nsuCB6A.exe =>Toolbar.Conduit C:\Users\martial\AppData\Local\Temp\nszE4A1.exe =>Toolbar.Conduit C:\Users\martial\AppData\Local\Temp\Umbrella.exe173a2a =>Adware.IMBooster ~ Additionnel Scan: 184974 Items scanned in 00mn 12s ---\\ Récapitulatif des détections trouvées sur votre station ~ http://nicolascoolman.webs.com/apps/blog/show/35740148-pup-viewpassword =>PUP.ViewPassword ~ http://nicolascoolman.webs.com/apps/blog/show/32662245-spyware-smartdisplay =>Spyware.SmartDisplay ~ http://nicolascoolman.webs.com/apps/blog/show/33477786-pup-dosearches =>PUP.DoSearches ~ http://nicolascoolman.webs.com/apps/blog/show/27232411-hijacker-proxy =>Hijacker.Proxy ~ http://nicolascoolman.webs.com/apps/blog/show/41196115-pup-rightsurf =>PUP.RightSurf ~ http://nicolascoolman.webs.com/apps/blog/show/34014358-pua-fstfr9 =>PUA.FSTfr9 ~ http://nicolascoolman.webs.com/apps/blog/show/36853930-pup-savesense =>PUP.SaveSense ~ http://nicolascoolman.webs.com/apps/blog/show/27379491-toolbar-wajam =>PUP.Wajam ~ http://nicolascoolman.webs.com/apps/blog/show/37514218-pup-giganticsavings =>PUP.GiganticSavings ~ http://nicolascoolman.webs.com/apps/blog/show/33336602-hijacker-ihavenet =>Hijacker.iHavenet ~ http://nicolascoolman.webs.com/apps/blog/show/26626977-adware-boxore =>Adware.Boxore ~ http://nicolascoolman.webs.com/apps/blog/show/26630902-adware-lollipop =>Adware.Lollipop ~ http://nicolascoolman.webs.com/apps/blog/show/27229962-adware-predictad =>Adware.PredictAd ~ http://nicolascoolman.webs.com/apps/blog/show/28927746-toolbar-ask =>Toolbar.Ask ~ http://nicolascoolman.webs.com/apps/blog/show/29507721-toolbar-conduit =>Toolbar.Conduit ~ http://nicolascoolman.webs.com/apps/blog/show/26684723-adware-imbooster =>Adware.IMBooster ~ MSI: 16 link(s) detected in 00mn 12s ~ 897 Legitimates filtered by white list End of the scan (520 lines in 01mn 11s)(0)
  19. zurlinden
    merci pour les infos: je m'attaque à cela dés demain matin: bonne soirée et encore merci; je vous tiens au courant )
  20. zurlinden
    bonjour hier j'ai voulu désinstaller avira car ttes les mises à jour échouaient ;o( qd j'ai voulu le télécharger à nouveau depuis 01.net, j'ai eu la mention "avira n'est pas compatible avec windows 8; (alors que la première fois que je l'ai téléchargé, il n y avait pas eu de problème) je me suis donc rabattu sur AVG? (toujours téléchargé depuis 01.net) et depuis, problèmes en cascades: absences des petites fenêtres où je dois taper mon mot de passe sur les sites de jeux où je jouais avant sans problème( king.com par exemple) et fenêtres de pub intempestives et ordi lent ( j'avais déjà eu un problème de ce genre il y a qq mois et vous m'aviez bien aidé. que puis je faire SVP?? merci d'avance pour votre aide
  21. zurlinden
    Appolo bsr: merci pour les renseignements cordialement
  22. zurlinden
    bjr; Mon PC a été infecté récemment et grâce à ZEBULON, le problème est résolu; (un grand merci encore à vous tous): maintenant, se pose la question de savoir comment faire pour éviter que cela recommence; alors quelques conseils de votre part concernant la protection de mon PC seraient les bienvenus: Pour l'instant, j'ai MAC AFFEE comme antivirus, (fourni avec PC lors de l'achat), mais bientôt, je devrai passer en "payant"; alors que me conseillez vous comme anti virus gratuit et autres logiciels ou applis pour protéger mon ordi?? merci de vos réponses et bonne soirée cordialement
  23. zurlinden
    re bjr!! ne cherche plus BERNARD53, j'ai trouvé comment faire:o) j'ai fait ttes les manips et tt à l'air ok! j'ai même trouvé comment récupérer mes petites cases en haut à droite! ) donc maintenant, je suppose que je n'ai plus qu'à désinstaller les appli que j'avais installéesADW CLEANER? ZHPDIAG ZHPFIX ET cOMPAGNIE,, j'ai revo uninstaller , puis je utiliser ce logiciel pour tout désinstaller?? merci @+
  24. zurlinden
    bjr; j'ai fait la première partie (réinitialisatrion des navigateurs): mais pour la réiniotialisation des paramètres, je suis sous windows 8, et je ne trouve pas de fenêtre où taper "recherche". par ailleurs, qd j'utilise google chrome, je ne peux plus decsendre la page sur laquelle je suis en allant avec la souris sur la petite case -, qu'il y avait en haut à droite de l'écran, à côté de la croix rouge, car depuis le début de mes problèmes, les petites cases ont disparues; je suis obligé de fermer l'onglet sur lequel je suis pour accéder à autre chose: (j'ai regardé si cela venait du plein écran, F11, mais non) ce qui est trés bizarre c'est que qd j'utilise IExplorer, le problème n'existe pas, les petites cases en haut à droite sont présentes et fonctionnent ( merci encore! je reviendrai pour voir comment taper cmd et faire les manip indiquées ci dessus bonne journée et encore merci de votre aide à tous
  25. zurlinden
    je veux pas crier victoire trop tôt, mais à priori, je n'ai plus de fenêtre de pub ;o) j'ai encore qq anomalies, du genre onglets à ouvrie pour arriver là où je vais sur certains sites de jeux, alors qu'avant, j'y accédais plus rapidement, mais sinon, ça va beaucoup mieux!! merci à tous; puis je désinstaller les appli que vous m avez faits installer? en ts les cas, merci à ts pour le coup de main: je suivrai encore qq joours mon post pour voir si vous avez d'autres manip à me faire faire; bonne soirée à tous et merci encore de votre aide cordialement zurlinden
×
×
  • Créer...