Aller au contenu

  • Pas encore inscrit ?

    Pourquoi ne pas vous inscrire ? C'est simple, rapide et gratuit.
    Pour en savoir plus, lisez Les avantages de l'inscription... et la Charte de Zébulon.
    De plus, les messages que vous postez en tant qu'invité restent invisibles tant qu'un modérateur ne les a pas validés. Inscrivez-vous, ce sera un gain de temps pour tout le monde, vous, les helpeurs et les modérateurs ! :wink:

[Résolu] PC qui rame, qui plante...

sylviane

Par sylviane
dans Analyses et éradication malwares

 Partager

Messages recommandés

Pierre13 Godlike Member

Pierre13

Posté(e)
Posté(e) (modifié)

Bonjour

 

Pas étonnant que le PC rame...

Infos sur les infections présentes :

---\\ Récapitulatif des détections trouvées sur votre station~ http://nicolascoolman.webs.com/apps/blog/show/26684723-adware-imbooster  =>Adware.IMBooster~ http://nicolascoolman.webs.com/apps/blog/show/27146838-adware-mywebsearch   =>Adware.MyWebSearch~ http://nicolascoolman.webs.com/apps/blog/show/40528410-pup-nextlive   =>PUP.NextLive~ http://nicolascoolman.webs.com/apps/blog/show/28060597-pup-dealply   =>PUP.DealPly~ http://nicolascoolman.webs.com/apps/blog/show/27752690-pup-yourfiledownloader   =>PUP.YourFileDownloader~ http://nicolascoolman.webs.com/apps/blog/show/29216159-pup-sweetim   =>PUP.SweetIM~ http://nicolascoolman.webs.com/apps/blog/show/29507721-toolbar-conduit   =>Toolbar.Conduit~ http://nicolascoolman.webs.com/apps/blog/show/29790567-adware-installcore   =>Adware.InstallCore~ http://nicolascoolman.webs.com/apps/blog/show/27490404-adware-searchcore   =>Adware.SearchCore~ http://nicolascoolman.webs.com/apps/blog/show/26627641-spyware-agenceexclusive   =>Spyware.AgenceExclusive~ http://nicolascoolman.webs.com/apps/blog/show/35115580-pup-vittalia   =>PUP.Vittalia~ http://nicolascoolman.webs.com/apps/blog/show/28136809-hijacker-holasearch   =>Hijacker.HolaSearch~ http://nicolascoolman.webs.com/apps/blog/show/27469224-pup-eorezo   =>PUP.EoRezo~ http://nicolascoolman.webs.com/apps/blog/show/27583992-pup-datamngr   =>PUP.Datamngr~ http://nicolascoolman.webs.com/apps/blog/show/32174815-pup-mypcbackup   =>PUP.MyPCBackup~ http://nicolascoolman.webs.com/apps/blog/show/26627369-toolbar-babylon  =>PUP.Babylon~ http://nicolascoolman.webs.com/apps/blog/show/28927746-toolbar-ask   =>Toolbar.Ask~ http://nicolascoolman.webs.com/apps/blog/show/28000037-pup-rewardsarcade    =>PUP.RewardsArcade~ http://nicolascoolman.webs.com/apps/blog/show/30234464-pup-toparcadehits   =>PUP.ToparcadeHits~ http://nicolascoolman.webs.com/apps/blog/show/26611092-adware-bandoo  =>Adware.Bandoo~ http://nicolascoolman.webs.com/apps/blog/show/29637859-toolbar-tarma   =>PUP.Tarma~ http://nicolascoolman.webs.com/apps/blog/show/28204239-pup-optimizerpro   =>PUP.OptimizerPro


Faire ce qui suit d'ans l'ordre :


 


Désactive l'antivirus.
Si tu ne sais pas comment faire, reporte-toi à cet article.
Tuto officiel sur cette page.

Scan:


    

  • 
Télécharger RogueKiller de Tigzy sur le bureau.
    • 

  • Lancer l'outil avec un clic droit sur le fichier et choisir Exécuter en tant qu'administrateur.

    RogueKiller_V7.png
      

    • Patienter le temps du Prescan...
      • 

    • A la fin de l'analyse, cliquer sur Rapport.
      • 

    

    • 

  • Poster le contenu du rapport.
    • 




Suppression:


    

  • Relancer RogueKiller avec un clic droit sur le fichier et choisir Exécuter en tant qu'administrateur.

    • 

  • Patienter le temps du Prescan...
    • 

  • Cliquer sur Suppression.
    • 

  • A la fin du nettoyage, cliquer sur Rapport.

    • 



 



			
				


	Modifié  par Pierre13
	
	

			
		


		
			

				
					
						

	
	
		

			
				
				

					
				

			
			
			
		

	


					
				
				
			

		

		
			

		
	


	
    


	



					
					
					
				

					

					
					







	

	

	

		

			

				


	
		sylviane
	

				
				
					
						
Mega Power Member
					
				
			

		

		

			

				


sylviane
			

			

			    Posté(e) 
				
			

		

	

	
	

		




	

		

			

				
    
					
						
  • Auteur
    • 
					
					
					
					
					
				

			

			
		


		

		   
		   Posté(e) 
		   
			
			
				
				
			
		

	


	

    

	

		
		

			

Merci..... flowerz.gif


 


le rapport


 


RogueKiller V8.8.2 [Jan 17 2014] par Tigzy
mail : tigzyRK<at>gmail<dot>com
Remontees : http://www.adlice.com/forum/
Site Web : http://www.sur-la-toile.com/RogueKiller/
Blog : http://www.adlice.com

Systeme d'exploitation : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Demarrage : Mode normal
Utilisateur : Sylvie [Droits d'admin]
Mode : Recherche -- Date : 01/18/2014 09:03:27
| ARK || FAK || MBR |

¤¤¤ Processus malicieux : 2 ¤¤¤
[sUSP PATH][DLL] rundll32.exe -- C:\Users\Sylvie\AppData\Roaming\newnext.me\nengine.dll [-] -> rundll32.exe TUÉ [TermProc]
[sUSP PATH] mdhpSUN.exe -- C:\ProgramData\Easybits Magic Desktop for HP\mdhpSUN.exe [7] -> TUÉ [TermProc]

¤¤¤ Entrees de registre : 5 ¤¤¤
[RUN][sUSP PATH] HKCU\[...]\Run : NextLive (C:\Windows\SysWOW64\rundll32.exe "C:\Users\Sylvie\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l [7][-][x]) -> TROUVÉ
[RUN][sUSP PATH] HKUS\S-1-5-21-3836418221-792524372-853743043-1001\[...]\Run : NextLive (C:\Windows\SysWOW64\rundll32.exe "C:\Users\Sylvie\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l [7][-][x]) -> TROUVÉ
[RUN][sUSP PATH] HKLM\[...]\Wow6432Node\[...]\Run : Magic Desktop for HP notification ("C:\ProgramData\Easybits Magic Desktop for HP\mdhpSUN.exe" [7]) -> TROUVÉ
[HJ DESK][PUM] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> TROUVÉ
[HJ DESK][PUM] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> TROUVÉ

¤¤¤ Tâches planifiées : 0 ¤¤¤

¤¤¤ Entrées Startup : 0 ¤¤¤

¤¤¤ Navigateurs web : 0 ¤¤¤

¤¤¤ Addons navigateur : 0 ¤¤¤

¤¤¤ Fichiers / Dossiers particuliers: ¤¤¤

¤¤¤ Driver : [NON CHARGE 0x0] ¤¤¤

¤¤¤ Ruches Externes: ¤¤¤

¤¤¤ Infection :  ¤¤¤

¤¤¤ Fichier HOSTS: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts




¤¤¤ MBR Verif: ¤¤¤

+++++ PhysicalDrive0: (\\.\PHYSICALDRIVE0 @ IDE) ST31000524AS +++++
--- User ---
[MBR] 454bb6fa05de815d5a8200f8eec2ee85
[bSP] c052fbc5b53663e6f03bce375bf9610e : Windows Vista/7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 100 Mo
1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 206848 | Size: 941421 Mo
2 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 1928237056 | Size: 12346 Mo
User = LL1 ... OK!
User = LL2 ... OK!

+++++ PhysicalDrive1: (\\.\PHYSICALDRIVE1 @ USB) Generic Flash Disk USB Device +++++
--- User ---
[MBR] 1bbf472c8d2fa24964474783217e919f
[bSP] 963968fb6a36152e0e8c4e8f98959628 : Empty MBR Code
Partition table:
0 - [ACTIVE] FAT16 (0x06) [VISIBLE] Offset (sectors): 32 | Size: 1919 Mo
User = LL1 ... OK!
Error reading LL2 MBR! ([0x32] Cette demande n?est pas prise en charge. )

Termine : << RKreport[0]_S_01182014_090327.txt >>


 


2eme rapport apres supppression


 


RogueKiller V8.8.2 [Jan 17 2014] par Tigzy
mail : tigzyRK<at>gmail<dot>com
Remontees : http://www.adlice.com/forum/
Site Web : http://www.sur-la-toile.com/RogueKiller/
Blog : http://www.adlice.com

Systeme d'exploitation : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Demarrage : Mode normal
Utilisateur : Sylvie [Droits d'admin]
Mode : Suppression -- Date : 01/18/2014 09:04:55
| ARK || FAK || MBR |

¤¤¤ Processus malicieux : 2 ¤¤¤
[sUSP PATH][DLL] rundll32.exe -- C:\Users\Sylvie\AppData\Roaming\newnext.me\nengine.dll [-] -> rundll32.exe TUÉ [TermProc]
[sUSP PATH] mdhpSUN.exe -- C:\ProgramData\Easybits Magic Desktop for HP\mdhpSUN.exe [7] -> TUÉ [TermProc]

¤¤¤ Entrees de registre : 5 ¤¤¤
[RUN][sUSP PATH] HKCU\[...]\Run : NextLive (C:\Windows\SysWOW64\rundll32.exe "C:\Users\Sylvie\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l [7][-][x]) -> SUPPRIMÉ
[RUN][sUSP PATH] HKUS\S-1-5-21-3836418221-792524372-853743043-1001\[...]\Run : NextLive (C:\Windows\SysWOW64\rundll32.exe "C:\Users\Sylvie\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l [7][-][x]) -> [0x2] Le fichier spécifié est introuvable.
[RUN][sUSP PATH] HKLM\[...]\Wow6432Node\[...]\Run : Magic Desktop for HP notification ("C:\ProgramData\Easybits Magic Desktop for HP\mdhpSUN.exe" [7]) -> SUPPRIMÉ
[HJ DESK][PUM] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> REMPLACÉ (0)
[HJ DESK][PUM] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> REMPLACÉ (0)

¤¤¤ Tâches planifiées : 0 ¤¤¤

¤¤¤ Entrées Startup : 0 ¤¤¤

¤¤¤ Navigateurs web : 0 ¤¤¤

¤¤¤ Addons navigateur : 0 ¤¤¤

¤¤¤ Fichiers / Dossiers particuliers: ¤¤¤

¤¤¤ Driver : [NON CHARGE 0x0] ¤¤¤

¤¤¤ Ruches Externes: ¤¤¤

¤¤¤ Infection :  ¤¤¤

¤¤¤ Fichier HOSTS: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts




¤¤¤ MBR Verif: ¤¤¤

+++++ PhysicalDrive0: (\\.\PHYSICALDRIVE0 @ IDE) ST31000524AS +++++
--- User ---
[MBR] 454bb6fa05de815d5a8200f8eec2ee85
[bSP] c052fbc5b53663e6f03bce375bf9610e : Windows Vista/7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 100 Mo
1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 206848 | Size: 941421 Mo
2 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 1928237056 | Size: 12346 Mo
User = LL1 ... OK!
User = LL2 ... OK!

+++++ PhysicalDrive1: (\\.\PHYSICALDRIVE1 @ USB) Generic Flash Disk USB Device +++++
--- User ---
[MBR] 1bbf472c8d2fa24964474783217e919f
[bSP] 963968fb6a36152e0e8c4e8f98959628 : Empty MBR Code
Partition table:
0 - [ACTIVE] FAT16 (0x06) [VISIBLE] Offset (sectors): 32 | Size: 1919 Mo
User = LL1 ... OK!
Error reading LL2 MBR! ([0x32] Cette demande n?est pas prise en charge. )

Termine : << RKreport[0]_D_01182014_090455.txt >>
RKreport[0]_S_01182014_090327.txt








			
		


		
			

				
					
						

	
	
		

			
				
				

					
				

			
			
			
		

	


					
				
				
			

		

		
	


	
    


	



					
					
					
				

					

					
					







	

	

	

		

			

				


	
		Pierre13
	

				
				
					
						
Godlike Member
					
				
			

		

		

			

				


Pierre13
			

			

			    Posté(e) 
				
			

		

	

	
	

		




	

		

			

				
    
					
					
					
					
					
				

			

			
		


		

		   
		   Posté(e) 
		   
			
			
				
				
			
		

	


	

    

	

		
		

			

Re,


 


Ok pour les rapports icon_Super.gif


 


Ensuite, faire ce qui est indiqué sur cette page et poster les rapports au fur et à mesure.

Note très importante :

Lancer les outils les uns après les autres et surtout pas en même temps.



			
		


		
			

				
					
						

	
	
		

			
				
				

					
				

			
			
			
		

	


					
				
				
			

		

		
			

		
	


	
    


	



					
					
					
				

					

					
					






					
					
					
				

					

					
					






					
					
					
				

					

					
					







	

	

	

		

			

				


	
		sylviane
	

				
				
					
						
Mega Power Member
					
				
			

		

		

			

				


sylviane
			

			

			    Posté(e) 
				
			

		

	

	
	

		




	

		

			

				
    
					
						
  • Auteur
    • 
					
					
					
					
					
				

			

			
		


		

		   
		   Posté(e) 
		   
			
			
				
				
			
		

	


	

    

	

		
		

			

je n'y arrive pas.... Et je ne sais meme pas leque je dois lancer car ça m'ouvre plein d'utiltaire. J'aii meme une nouvelle barre "my search dial"


 


 


Obligée de partir (courses.. lol)


 


Je ferais tout en revenant


 


Merci beaucoup en attendant



			
		


		
			

				
					
						

	
	
		

			
				
				

					
				

			
			
			
		

	


					
				
				
			

		

		
	


	
    


	



					
					
					
				

					

					
					







	

	

	

		

			

				


	
		Pierre13
	

				
				
					
						
Godlike Member
					
				
			

		

		

			

				


Pierre13
			

			

			    Posté(e) 
				
			

		

	

	
	

		




	

		

			

				
    
					
					
					
					
					
				

			

			
		


		

		   
		   Posté(e) 
		   
			
			
				
				
			
		

	


	

    

	

		
		

			

Ok...


On va donc faire un pré nettoyage qui va faciliter la suite :


 




  • 


    arrow-10.gifSuis cette procédure dans l'ordre indiqué :

    Désactiver l'antivirus avant de procéder !

    1) ZHPFix :

        Ferme toutes les applications ouvertes
        Double-clique sur ZHPFix, raccourci installé par ZHPDiag sur le Bureau
        Important:
        Sous Vista et Windows 7/8 : il faut lancer le fichier par clic-droit -> Exécuter en tant qu'administrateur.
        Copie les lignes ci-dessous dans la fenêtre




    ----------------------------------------------------------

Script ZHPFix
ShortcutFix
M3 - MFPP: Plugins - [sylvie] -- C:\Users\Sylvie\AppData\Roaming\Mozilla\Firefox\Profiles\e5oxldt4.default-1386923021842\searchplugins\iminent.xml =>Adware.IMBooster 
M3 - MFPP: Plugins - [sylvie] -- C:\Users\Sylvie\AppData\Roaming\Mozilla\Firefox\Profiles\e5oxldt4.default-1386923021842\searchplugins\Mysearchdial.xml =>Adware.MyWebSearch 
M3 - MFPP: Plugins - [sylvie] -- C:\Users\Sylvie\AppData\Roaming\Mozilla\Firefox\Profiles\ve989z81.default-1386916631236\searchplugins\Mysearchdial.xml =>Adware.MyWebSearch 
M2 - MFEP: prefs.js [sylvie - e5oxldt4.default-1386923021842\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}] [] MySearchDial NewTab v (..) =>Adware.MyWebSearch 
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://start.mysearchdial.com =>Adware.MyWebSearch 
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://start.mysearchdial.com =>Adware.MyWebSearch 
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://start.mysearchdial.com =>Adware.MyWebSearch 
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = 
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs,Tabs = http://start.mysearchdial.com =>Adware.MyWebSearch 
O4 - HKCU\..\Run: [NextLive] . (.NewNextDotMe - NewNext Helper Engine.) -- C:\Users\Sylvie\AppData\Roaming\newnext.me\nengine.dll =>PUP.NextLive 
O4 - HKUS\S-1-5-21-3836418221-792524372-853743043-1001\..\Run: [NextLive] . (.NewNextDotMe - NewNext Helper Engine.) -- C:\Users\Sylvie\AppData\Roaming\newnext.me\nengine.dll =>PUP.NextLive 
[MD5.00000000000000000000000000000000] [APT] [DealPlyUpdate] (...) -- C:\Program Files (x86)\DealPly\DealPlyUpdate.exe (.not file.)   [0]  =>PUP.DealPly 
[MD5.00000000000000000000000000000000] [APT] [YourFile DownloaderUpdate] (...) -- C:\Program Files (x86)\YourFileDownloader\YourFileUpdater.exe (.not file.)   [0]  =>PUP.YourFileDownloader 
[MD5.00000000000000000000000000000000] [APT] [YourFile Update] (...) -- C:\Program Files (x86)\YourFileDownloader\YourFileUpdater.exe (.not file.)   [0]  =>PUP.YourFileDownloader 
[MD5.00000000000000000000000000000000] [APT] [{EA0511DC-6FFF-4534-893D-A765AB5C2E98}] (...) -- C:\Users\Sylvie\Desktop\BundleSweetIMSetup.exe (.not file.)   [0]  =>PUP.SweetIM 
[HKCU\Software\IminentToolbar] =>Adware.IMBooster 
[HKCU\Software\InstallCore] =>Adware.InstallCore 
[HKCU\Software\SearchCore for Browsers] =>Adware.SearchCore 
[HKCU\Software\TutoTag] =>Spyware.AgenceExclusive 
[HKCU\Software\Tutorials] =>Spyware.AgenceExclusive 
[HKCU\Software\Vittalia] =>PUP.Vittalia 
[HKCU\Software\holasearch LTD] =>Hijacker.HolaSearch 
[HKCU\Software\tuto4pc] =>PUP.Eorezo 
[HKLM\Software\SearchCore for Browsers] =>Adware.SearchCore 
[HKLM\Software\Wow6432Node\DataMngr] =>PUP.Datamngr 
[HKLM\Software\Wow6432Node\Iminent] =>Adware.IMBooster 
[HKLM\Software\Wow6432Node\Vittalia] =>PUP.Vittalia 
O43 - CFD: 05/10/2013 - 17:26:34 - [19,067] ----D C:\Program Files (x86)\Fix-It Registry Optimizer    => Infection Rogue (Rogue.FixRegistryErrors) 
O43 - CFD: 26/12/2013 - 08:38:51 - [0,015] ----D C:\Program Files (x86)\MyPC Backup =>PUP.MyPCBackup 
O43 - CFD: 05/08/2013 - 16:06:13 - [0] ----D C:\ProgramData\Babylon =>PUP.Babylon 
O43 - CFD: 03/01/2014 - 18:42:02 - [0,259] ----D C:\Users\Sylvie\AppData\Roaming\IminentToolbar =>Adware.IMBooster 
O43 - CFD: 18/01/2014 - 07:18:19 - [1,228] ----D C:\Users\Sylvie\AppData\Roaming\newnext.me =>PUP.NextLive 
O43 - CFD: 03/01/2014 - 18:40:50 - [1,224] ----D C:\Users\Sylvie\AppData\Local\genienext    => PUP.NextLive 
O69 - SBI: prefs.js [sylvie - e5oxldt4.default-1386923021842] user_pref("extensions.mysearchdial.aflt", "irmsd1202aw"); =>Adware.MyWebSearch 
O69 - SBI: prefs.js [sylvie - e5oxldt4.default-1386923021842] user_pref("extensions.mysearchdial.appId", "{CA5CAA63-B27C-4963-9BEC-CB16A36D56F8}"); =>Adware.MyWebSearch 
O69 - SBI: prefs.js [sylvie - e5oxldt4.default-1386923021842] user_pref("extensions.mysearchdial.cd", "2XzuyEtN2Y1L1QzutB0CyEtCtAzzzyyCtAtAzy0E0D0E0BzytN0D0Tzu0SyBtByDtN1L2XzutBtFtBtFtCyEtFtCt[...] =>Adware.MyWebSearch 
O69 - SBI: prefs.js [sylvie - e5oxldt4.default-1386923021842] user_pref("extensions.mysearchdial.cr", "1149703674"); =>Adware.MyWebSearch 
O69 - SBI: prefs.js [sylvie - e5oxldt4.default-1386923021842] user_pref("extensions.mysearchdial.dfltLng", ""); =>Adware.MyWebSearch 
O69 - SBI: prefs.js [sylvie - e5oxldt4.default-1386923021842] user_pref("extensions.mysearchdial.dfltSrch", true); =>Adware.MyWebSearch 
O69 - SBI: prefs.js [sylvie - e5oxldt4.default-1386923021842] user_pref("extensions.mysearchdial.dnsErr", true); =>Adware.MyWebSearch 
O69 - SBI: prefs.js [sylvie - e5oxldt4.default-1386923021842] user_pref("extensions.mysearchdial.excTlbr", false); =>Adware.MyWebSearch 
O69 - SBI: prefs.js [sylvie - e5oxldt4.default-1386923021842] user_pref("extensions.mysearchdial.hmpg", true); =>Adware.MyWebSearch 
O69 - SBI: prefs.js [sylvie - e5oxldt4.default-1386923021842] user_pref("extensions.mysearchdial.hmpgUrl", "http://start.mysearchdial.com/?f=1&a=irmsd1202aw&cd=2XzuyEtN2Y1L1QzutB0CyEtCtAzzzyyC[...] =>Adware.MyWebSearch 
O69 - SBI: prefs.js [sylvie - e5oxldt4.default-1386923021842] user_pref("extensions.mysearchdial.id", "2C413896339EDEB9"); =>Adware.MyWebSearch 
O69 - SBI: prefs.js [sylvie - e5oxldt4.default-1386923021842] user_pref("extensions.mysearchdial.instlDay", "16065"); =>Adware.MyWebSearch 
O69 - SBI: prefs.js [sylvie - e5oxldt4.default-1386923021842] user_pref("extensions.mysearchdial.instlRef", ""); =>Adware.MyWebSearch 
O69 - SBI: prefs.js [sylvie - e5oxldt4.default-1386923021842] user_pref("extensions.mysearchdial.newTabUrl", "http://start.mysearchdial.com/?f=2&a=irmsd1202aw&cd=2XzuyEtN2Y1L1QzutB0CyEtCtAzzzy[...] =>Adware.MyWebSearch 
O69 - SBI: prefs.js [sylvie - e5oxldt4.default-1386923021842] user_pref("extensions.mysearchdial.prdct", "mysearchdial"); =>Adware.MyWebSearch 
O69 - SBI: prefs.js [sylvie - e5oxldt4.default-1386923021842] user_pref("extensions.mysearchdial.prtnrId", "mysearchdial"); =>Adware.MyWebSearch 
O69 - SBI: prefs.js [sylvie - e5oxldt4.default-1386923021842] user_pref("extensions.mysearchdial.srchPrvdr", "Mysearchdial"); =>Adware.MyWebSearch 
O69 - SBI: prefs.js [sylvie - e5oxldt4.default-1386923021842] user_pref("extensions.mysearchdial.tlbrId", "base"); =>Adware.MyWebSearch 
O69 - SBI: prefs.js [sylvie - e5oxldt4.default-1386923021842] user_pref("extensions.mysearchdial.tlbrSrchUrl", "http://start.mysearchdial.com/?f=3&a=irmsd1202aw&cd=2XzuyEtN2Y1L1QzutB0CyEtCtAzz[...] =>Adware.MyWebSearch 
O69 - SBI: prefs.js [sylvie - e5oxldt4.default-1386923021842] user_pref("extensions.mysearchdial.vrsn", "1.8.21.0"); =>Adware.MyWebSearch 
O69 - SBI: prefs.js [sylvie - e5oxldt4.default-1386923021842] user_pref("extensions.mysearchdial.vrsni", "1.8.21.0"); =>Adware.MyWebSearch 
O69 - SBI: prefs.js [sylvie - e5oxldt4.default-1386923021842] user_pref("extensions.mysearchdial_i.hmpg", true); =>Adware.MyWebSearch 
O69 - SBI: prefs.js [sylvie - e5oxldt4.default-1386923021842] user_pref("extensions.mysearchdial_i.newTab", false); =>Adware.MyWebSearch 
O69 - SBI: prefs.js [sylvie - e5oxldt4.default-1386923021842] user_pref("extensions.mysearchdial_i.smplGrp", "none"); =>Adware.MyWebSearch 
O69 - SBI: prefs.js [sylvie - e5oxldt4.default-1386923021842] user_pref("extensions.mysearchdial_i.vrsnTs", "1.8.21.08:29:40"); =>Adware.MyWebSearch 
O69 - SBI: prefs.js [sylvie - ve989z81.default-1386916631236] user_pref("browser.search.defaultenginename", "Mysearchdial"); =>Adware.MyWebSearch 
O69 - SBI: SearchScopes [HKCU] {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} - (Mysearchdial) - http://start.mysearchdial.com =>Adware.MyWebSearch 
O69 - SBI: SearchScopes [HKCU] {77AA745B-F4F8-45DA-9B14-61D2D95054C8} - (Hola Search) - http://www.holasearch.com =>Hijacker.HolaSearch 
O69 - SBI: SearchScopes [HKCU] {7C2D2819-94C6-EE4A-4830-79DD1CFFA093} - (Search the web (Babylon)) - http://search.babylon.com =>Adware.IMBooster 
O69 - SBI: SearchScopes [HKCU] {9BB47C17-9C68-4BB3-B188-DD9AF0FD2421} - (Web Search) - http://www.searchqu.com =>PUP.Datamngr 
[HKLM\Software\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}]   =>Adware.IMBooster 
[HKLM\Software\Wow6432Node\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}]   =>Adware.IMBooster 
[HKLM\Software\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}]   =>Adware.IMBooster 
[HKLM\Software\Wow6432Node\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}]   =>Adware.IMBooster 
[HKLM\Software\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}]   =>Adware.IMBooster 
[HKLM\Software\Wow6432Node\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}]   =>Adware.IMBooster 
[HKLM\Software\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}]   =>Adware.IMBooster 
[HKLM\Software\Wow6432Node\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}]   =>Adware.IMBooster 
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ecdf796-c2dc-4d79-a620-cce0c0a66cc9}]   =>PUP.Babylon 
[HKLM\Software\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}]   =>PUP.RewardsArcade 
[HKLM\Software\Wow6432Node\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}]   =>PUP.RewardsArcade 
[HKLM\Software\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}]   =>PUP.RewardsArcade 
[HKLM\Software\Wow6432Node\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}]   =>PUP.RewardsArcade 
[HKLM\Software\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}]   =>PUP.RewardsArcade 
[HKLM\Software\Wow6432Node\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}]   =>PUP.RewardsArcade 
[HKLM\Software\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}]   =>PUP.RewardsArcade 
[HKLM\Software\Wow6432Node\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}]   =>PUP.RewardsArcade 
[HKLM\Software\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}]   =>PUP.RewardsArcade 
[HKLM\Software\Wow6432Node\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}]   =>PUP.RewardsArcade 
[HKLM\Software\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}]   =>PUP.RewardsArcade 
[HKLM\Software\Wow6432Node\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}]   =>PUP.RewardsArcade 
[HKLM\Software\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}]   =>PUP.RewardsArcade 
[HKLM\Software\Wow6432Node\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}]   =>PUP.RewardsArcade 
[HKLM\Software\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}]   =>PUP.RewardsArcade 
[HKLM\Software\Wow6432Node\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}]   =>PUP.RewardsArcade 
[HKLM\Software\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}]   =>PUP.RewardsArcade 
[HKLM\Software\Wow6432Node\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}]   =>PUP.RewardsArcade 
[HKLM\Software\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}]   =>PUP.RewardsArcade 
[HKLM\Software\Wow6432Node\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}]   =>PUP.RewardsArcade 
[HKLM\Software\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}]   =>PUP.RewardsArcade 
[HKLM\Software\Wow6432Node\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}]   =>PUP.RewardsArcade 
[HKLM\Software\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}]   =>PUP.RewardsArcade 
[HKLM\Software\Wow6432Node\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}]   =>PUP.RewardsArcade 
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199}]   =>Adware.IMBooster 
[HKLM\Software\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}]   =>PUP.RewardsArcade 
[HKLM\Software\Wow6432Node\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}]   =>PUP.RewardsArcade 
[HKLM\Software\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}]   =>PUP.RewardsArcade 
[HKLM\Software\Wow6432Node\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}]   =>PUP.RewardsArcade 
[HKLM\Software\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}]   =>PUP.RewardsArcade 
[HKLM\Software\Wow6432Node\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}]   =>PUP.RewardsArcade 
[HKLM\Software\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}]   =>PUP.RewardsArcade 
[HKLM\Software\Wow6432Node\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}]   =>PUP.RewardsArcade 
[HKLM\Software\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}]   =>PUP.RewardsArcade 
[HKLM\Software\Wow6432Node\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}]   =>PUP.RewardsArcade 
[HKLM\Software\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}]   =>PUP.RewardsArcade 
[HKLM\Software\Wow6432Node\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}]   =>PUP.RewardsArcade 
[HKLM\Software\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}]   =>PUP.RewardsArcade 
[HKLM\Software\Wow6432Node\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}]   =>PUP.RewardsArcade 
[HKLM\Software\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}]   =>PUP.RewardsArcade 
[HKLM\Software\Wow6432Node\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}]   =>PUP.RewardsArcade 
[HKLM\Software\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}]   =>PUP.ToparcadeHits 
[HKLM\Software\Wow6432Node\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}]   =>PUP.ToparcadeHits 
[HKLM\Software\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}]   =>PUP.RewardsArcade 
[HKLM\Software\Wow6432Node\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}]   =>PUP.RewardsArcade 
[HKLM\Software\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}]   =>PUP.RewardsArcade 
[HKLM\Software\Wow6432Node\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}]   =>PUP.RewardsArcade 
[HKLM\Software\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}]   =>PUP.RewardsArcade 
[HKLM\Software\Wow6432Node\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}]   =>PUP.RewardsArcade 
[HKLM\Software\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}]   =>PUP.RewardsArcade 
[HKLM\Software\Wow6432Node\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}]   =>PUP.RewardsArcade 
[HKLM\Software\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}]   =>PUP.RewardsArcade 
[HKLM\Software\Wow6432Node\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}]   =>PUP.RewardsArcade 
[HKLM\Software\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}]   =>PUP.RewardsArcade 
[HKLM\Software\Wow6432Node\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}]   =>PUP.RewardsArcade 
[HKLM\Software\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}]   =>PUP.RewardsArcade 
[HKLM\Software\Wow6432Node\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}]   =>PUP.RewardsArcade 
[HKLM\Software\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}]   =>PUP.RewardsArcade 
[HKLM\Software\Wow6432Node\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}]   =>PUP.RewardsArcade 
[HKLM\Software\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}]   =>PUP.RewardsArcade 
[HKLM\Software\Wow6432Node\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}]   =>PUP.RewardsArcade 
[HKLM\Software\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}]   =>PUP.RewardsArcade 
[HKLM\Software\Wow6432Node\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}]   =>PUP.RewardsArcade 
[HKLM\Software\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}]   =>PUP.RewardsArcade 
[HKLM\Software\Wow6432Node\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}]   =>PUP.RewardsArcade 
[HKLM\Software\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}]   =>PUP.RewardsArcade 
[HKLM\Software\Wow6432Node\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}]   =>PUP.RewardsArcade 
[HKLM\Software\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}]   =>PUP.RewardsArcade 
[HKLM\Software\Wow6432Node\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}]   =>PUP.RewardsArcade 
[HKLM\Software\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}]   =>PUP.RewardsArcade 
[HKLM\Software\Wow6432Node\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}]   =>PUP.RewardsArcade 
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48d2-9061-8BBD4899EB08}]   =>Adware.IMBooster 
[HKLM\Software\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}]   =>PUP.RewardsArcade 
[HKLM\Software\Wow6432Node\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}]   =>PUP.RewardsArcade 
[HKLM\Software\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}]   =>PUP.RewardsArcade 
[HKLM\Software\Wow6432Node\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}]   =>PUP.RewardsArcade 
[HKLM\Software\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}]   =>PUP.RewardsArcade 
[HKLM\Software\Wow6432Node\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}]   =>PUP.RewardsArcade 
[HKLM\Software\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}]   =>PUP.RewardsArcade 
[HKLM\Software\Wow6432Node\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}]   =>PUP.RewardsArcade 
[HKLM\Software\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}]   =>PUP.RewardsArcade 
[HKLM\Software\Wow6432Node\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}]   =>PUP.RewardsArcade 
[HKLM\Software\Wow6432Node\Microsoft\Tracing\YourFile_RASAPI32]   =>PUP.YourFileDownloader 
[HKLM\Software\Wow6432Node\Microsoft\Tracing\YourFileUpdater_RASAPI32]   =>PUP.YourFileDownloader 
[HKLM\Software\Wow6432Node\Microsoft\Tracing\YourFileUpdater_RASMANCS]   =>PUP.YourFileDownloader 
[HKLM\Software\Wow6432Node\DataMngr]   =>Adware.Bandoo 
[HKLM\Software\Wow6432Node\Iminent]   =>Adware.IMBooster 
[HKCU\Software\Tuto4pc]   =>PUP.Eorezo 
[HKCU\Software\Tutorials]   =>Spyware.AgenceExclusive 
[HKLM\Software\Wow6432Node\Microsoft\Tracing\Iminent_RASAPI32]   =>Adware.Bandoo 
[HKLM\Software\Wow6432Node\Microsoft\Tracing\Iminent_RASMANCS]   =>Adware.Bandoo 
[HKLM\Software\Classes\Prod.cap]   =>PUP.Babylon 
[HKCU\Software\InstallCore]   =>Adware.InstallCore 
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375]   =>PUP.Tarma 
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5]   =>PUP.Tarma 
[HKLM\Software\Google\Chrome\Extensions\pflphaooapbgpeakohlggbpidpppgdff]   =>Adware.MyWebSearch 
[HKLM\Software\Wow6432Node\Google\Chrome\Extensions\pflphaooapbgpeakohlggbpidpppgdff]   =>Adware.MyWebSearch 
[HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}]   =>PUP.OptimizerPro 
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:NextLive   =>PUP.NextLive^ 
[HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks]:{84FF7BD6-B47F-46F8-9130-01B2696B36CB}   =>Adware.IMBooster 
C:\Users\Sylvie\AppData\Roaming\Mozilla\Firefox\Profiles\e5oxldt4.default-1386923021842\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}   =>Adware.MyWebSearch^ 
C:\Program Files (x86)\MyPC Backup   =>PUP.MyPCBackup^ 
C:\ProgramData\Babylon   =>PUP.Babylon^ 
C:\Users\Sylvie\AppData\Roaming\IminentToolbar   =>Adware.IMBooster^ 
C:\Users\Sylvie\AppData\Roaming\newnext.me   =>PUP.NextLive^ 
C:\Program Files (x86)\Optimizer Pro   =>PUP.OptimizerPro 
C:\Program Files (x86)\Fix-It Registry Optimizer   =>Rogue.FixRegistryErrors 
C:\Users\Sylvie\AppData\LocalLow\holasearch   =>Hijacker.HolaSearch 
[HKCU\Software\IminentToolbar]   =>Adware.IMBooster^ 
[HKCU\Software\SearchCore for Browsers]   =>Adware.SearchCore^ 
[HKCU\Software\TutoTag]   =>Spyware.AgenceExclusive^ 
[HKCU\Software\Vittalia]   =>PUP.Vittalia^ 
[HKCU\Software\holasearch LTD]   =>Hijacker.HolaSearch^ 
[HKCU\Software\tuto4pc]   =>PUP.Eorezo^ 
[HKLM\Software\SearchCore for Browsers]   =>Adware.SearchCore^ 
[HKLM\Software\Wow6432Node\Vittalia]   =>PUP.Vittalia^ 
O43 - CFD: 20/08/2013 - 04:09:08 - [0] ----D C:\ProgramData\boost_interprocess    => boost.org 
O44 - LFC:[MD5.E90B2EF505C72F2B96D6C8395C218911] - 18/01/2014 - 07:16:05 ---A- . (...) -- C:\Windows\error.log   [4340]    => Fichiers de rapport (Log) 
[MD5.006CC8260405E231C2006A0CEA2127FD] [sPRF][15/01/2014] (.Robert Simpson, et al. - System.Data.SQLite Interop Assembly.) -- C:\Users\Sylvie\AppData\Local\Temp\System.Data.SQLite.dll   [1053184]    => Temporary file not necessary 
[MD5.254E8F9BA44E9F55416B0E51DBFF3C5F] - (.AVG Secure Search - ToolbarU Application.) -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.3.0\ToolbarUpdater.exe   [1598128] [PID.3900]  =>Toolbar.AVGSearch 
M3 - MFPP: Plugins - [sylvie] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\SearchResults.xml    => Toolbar.Agent 
O23 - Service:  (vToolbarUpdater15.3.0) . (.AVG Secure Search - ToolbarU Application.) - C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.3.0\ToolbarUpdater.exe =>Toolbar.AVGSearch 
[HKCU\Software\Conduit] =>Toolbar.Conduit 
[HKCU\Software\Softonic] =>Toolbar.Conduit 
[HKLM\Software\Wow6432Node\Conduit] =>Toolbar.Conduit 
O69 - SBI: SearchScopes [HKCU] {41934766-20B3-4209-AD17-44FD2A8CE270} - (Ask Search) - http://websearch.ask.com =>Toolbar.Ask 
O69 - SBI: SearchScopes [HKCU] {D944BB61-2E34-4DBF-A683-47E505C587DC} - (eBay) - http://rover.ebay.com =>Toolbar.eBay 
SR - | Auto 26/06/2013 1598128 |  (vToolbarUpdater15.3.0) . (.AVG Secure Search.) - C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.3.0\ToolbarUpdater.exe =>Toolbar.AVGSearch 
[HKLM\SYSTEM\CurrentControlSet\Services\vToolbarUpdater15.3.0]   =>Toolbar.AVGSearch^ 
[HKLM\Software\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}]   =>Toolbar.AVGSearch 
[HKLM\Software\Wow6432Node\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}]   =>Toolbar.AVGSearch 
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2421}]   =>Toolbar.Conduit 
[HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2421}]   =>Toolbar.Conduit 
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2421}]   =>Toolbar.Conduit 
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C9A6357B-25CC-4BCF-96C1-78736985D412}]   =>Toolbar.Orange 
[HKLM\Software\Wow6432Node\Microsoft\Tracing\BingBar_RASMANCS]   =>Toolbar.Bing 
[HKCU\Software\Softonic]   =>Toolbar.Conduit 
[HKLM\Software\Wow6432Node\Microsoft\Tracing\BingBar_RASAPI32]   =>Toolbar.Bing 
[HKLM\Software\Wow6432Node\Microsoft\Tracing\apnstub_RASAPI32]   =>Toolbar.Ask 
[HKLM\Software\Wow6432Node\Microsoft\Tracing\apnstub_RASMANCS]   =>Toolbar.Ask 
C:\Program Files (x86)\Common Files\AVG Secure Search   =>Toolbar.AVGSearch 
C:\ProgramData\AVG Secure Search   =>Toolbar.AVGSearch 
C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.3.0\ToolbarUpdater.exe   =>Toolbar.AVGSearch^ 
[HKCU\Software\Conduit]   =>Toolbar.Conduit^ 
[HKLM\Software\Wow6432Node\Conduit]   =>Toolbar.Conduit^ 
FirewallRaz
EmptyTemp
EmptyFlash
Proxyfix
Sysrestore

    ----------------------------------------------------------
   Cliquer sur IMPORTER., cela devrait coller le contenu du presse papier dans la fenêtre ZHPFix.

    Le script doit automatiquement apparaitre dans ZHPFix.

    Clique sur le bouton GO pour lancer le nettoyage

    Valide par Oui la désinstallation des programmes si demandé.
    Laisse l'outil travailler. Si un redémarrage est demandé, accepte et redémarre le PC
    Le rapport ZHPFixReport.txt s'affiche. Copie-colle le contenu de ce rapport dans ta réponse.
    Le rapport ZHPFixReport.txt est enregistré sous C:\ZHP\ZHPFix.txt
Redémarrer le PC ensuite.

Essayer ensuite de passer les outils indiqués  sur cette page et poster les rapports au fur et à mesure.
 @+ Tard...



			
		


		
			

				
					
						

	
	
		

			
				
				

					
				

			
			
			
		

	


					
				
				
			

		

		
			

		
	


	
    


	



					
					
					
				

					

					
					







	

	

	

		

			

				


	
		sylviane
	

				
				
					
						
Mega Power Member
					
				
			

		

		

			

				


sylviane
			

			

			    Posté(e) 
				
			

		

	

	
	

		




	

		

			

				
    
					
						
  • Auteur
    • 
					
					
					
					
					
				

			

			
		


		

		   
		   Posté(e) 
		   
			
			
				
				
			
		

	


	

    

	

		
		

			
Rapport de ZHPFix 2014.1.17.2 par Nicolas Coolman, Update du 17/01/2014
Fichier d'export Registre :
Run by Sylvie at 18/01/2014 13:48:49
High Elevated Privileges : OK
Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)

Corbeille vidée (00mn 02s)
Réparation des raccourcis navigateur

========== Valeurs du Registre ==========
Aucune Valeur Standard Profile: FirewallRaz :
Aucune Valeur Domain Profile: FirewallRaz :
ProxyFix : Configuration proxy supprimée avec succès
SUPPRIMÉ ProxyServer Value
SUPPRIMÉ ProxyEnable Value
SUPPRIMÉ EnableHttp1_1 Value
SUPPRIMÉ ProxyHttp1.1 Value
SUPPRIMÉ ProxyOverride Value

========== Eléments de donnée du Registre ==========
SUPPRIMÉ: R0 - Main,Start Page = KCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page
SUPPRIMÉ: R0 - Main,Start Page = KLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page
SUPPRIMÉ: R0 - Main,Start Page = KLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page
SUPPRIMÉ: R1 Search Page =

========== Préférences navigateur ==========
ABSENT Mozilla Pref: user_pref("extensions.mysearchdial.aflt", "irmsd1202aw");
SUPPRIMÉ Mozilla Pref: user_pref("extensions.mysearchdial.appId", "{CA5CAA63-B27C-4963-9BEC-CB16A36D56F8}");
ABSENT Mozilla Pref: user_pref("extensions.mysearchdial.cd", "2XzuyEtN2Y1L1QzutB0CyEtCtAzzzyyCtAtAzy0E0D0E0BzytN0D0Tzu0SyBtByDtN1L2XzutBtFtBtFtCyEtFtCt[...]
ABSENT Mozilla Pref: user_pref("extensions.mysearchdial.cr", "1149703674");
SUPPRIMÉ Mozilla Pref: user_pref("extensions.mysearchdial.dfltLng", "");
SUPPRIMÉ Mozilla Pref: user_pref("extensions.mysearchdial.dfltSrch", true);
SUPPRIMÉ Mozilla Pref: user_pref("extensions.mysearchdial.dnsErr", true);
SUPPRIMÉ Mozilla Pref: user_pref("extensions.mysearchdial.excTlbr", false);
SUPPRIMÉ Mozilla Pref: user_pref("extensions.mysearchdial.hmpg", true);
ABSENT Mozilla Pref: user_pref("extensions.mysearchdial.hmpgUrl", "http://start.mysearc...B0CyEtCtAzzzyyC[...]
SUPPRIMÉ Mozilla Pref: user_pref("extensions.mysearchdial.id", "2C413896339EDEB9");
ABSENT Mozilla Pref: user_pref("extensions.mysearchdial.instlDay", "16065");
SUPPRIMÉ Mozilla Pref: user_pref("extensions.mysearchdial.instlRef", "");
ABSENT Mozilla Pref: user_pref("extensions.mysearchdial.newTabUrl", "http://start.mysearc...utB0CyEtCtAzzzy[...]
SUPPRIMÉ Mozilla Pref: user_pref("extensions.mysearchdial.prdct", "mysearchdial");
SUPPRIMÉ Mozilla Pref: user_pref("extensions.mysearchdial.prtnrId", "mysearchdial");
SUPPRIMÉ Mozilla Pref: user_pref("extensions.mysearchdial.srchPrvdr", "Mysearchdial");
SUPPRIMÉ Mozilla Pref: user_pref("extensions.mysearchdial.tlbrId", "base");
ABSENT Mozilla Pref: user_pref("extensions.mysearchdial.tlbrSrchUrl", "http://start.mysearc...QzutB0CyEtCtAzz[...]
SUPPRIMÉ Mozilla Pref: user_pref("extensions.mysearchdial.vrsn", "1.8.21.0");
SUPPRIMÉ Mozilla Pref: user_pref("extensions.mysearchdial.vrsni", "1.8.21.0");
SUPPRIMÉ Mozilla Pref: user_pref("extensions.mysearchdial_i.hmpg", true);
SUPPRIMÉ Mozilla Pref: user_pref("extensions.mysearchdial_i.newTab", false);
SUPPRIMÉ Mozilla Pref: user_pref("extensions.mysearchdial_i.smplGrp", "none");
ABSENT Mozilla Pref: user_pref("extensions.mysearchdial_i.vrsnTs", "1.8.21.08:29:40");
SUPPRIMÉ Mozilla Pref: user_pref("browser.search.defaultenginename", "Mysearchdial");

========== Dossiers ==========
SUPPRIMÉ Redémarrage:** C:\Program Files (x86)\MyPC Backup
SUPPRIMÉ Redémarrage:** c:\program files (x86)\optimizer pro
SUPPRIMÉS Temporaires Windows (4)
SUPPRIMÉS Flash Cookies (0)

========== Fichiers ==========
SUPPRIMÉS Temporaires Windows (2) (0 octets)
SUPPRIMÉS Flash Cookies (0) (0 octets)

========== Restauration Système ==========
Point de restauration du système créé avec succès


========== Récapitulatif ==========
8 : Valeurs du Registre
4 : Eléments de donnée du Registre
4 : Dossiers
2 : Fichiers
26 : Préférences navigateur
1 : Restauration Système


End of clean in 00mn 12s

========== Chemin de fichier rapport ==========
C:\Users\Sylvie\AppData\Roaming\ZHP\ZHPFix[R1].txt - 18/01/2014 09:58:59 [12816]
C:\Users\Sylvie\AppData\Roaming\ZHP\ZHPFix[R2].txt - 18/01/2014 13:42:39 [4352]
C:\Users\Sylvie\AppData\Roaming\ZHP\ZHPFix[R3].txt - 18/01/2014 13:48:52 [4213]


			
		


		
			

				
					
						

	
	
		

			
				
				

					
				

			
			
			
		

	


					
				
				
			

		

		
	


	
    


	



					
					
					
				

					

					
					







	

	

	

		

			

				


	
		Pierre13
	

				
				
					
						
Godlike Member
					
				
			

		

		

			

				


Pierre13
			

			

			    Posté(e) 
				
			

		

	

	
	

		




	

		

			

				
    
					
					
					
					
					
				

			

			
		


		

		   
		   Posté(e) 
		   
			
			
				
				
			
		

	


	

    

	

		
		

			

Re,


 


Tu as lancé ZHPFix plusieurs fois ?


 


C:\Users\Sylvie\AppData\Roaming\ZHP\ZHPFix[R1].txt - 18/01/2014 09:58:59 [12816]
C:\Users\Sylvie\AppData\Roaming\ZHP\ZHPFix[R2].txt - 18/01/2014 13:42:39 [4352]
C:\Users\Sylvie\AppData\Roaming\ZHP\ZHPFix[R3].txt - 18/01/2014 13:48:52 [4213]


 


Pourquoi ?


J'ai besoin du 1er rapport C:\Users\Sylvie\AppData\Roaming\ZHP\ZHPFix[R1].txt - 18/01/2014 09:58:59 [12816]



			
		


		
			

				
					
						

	
	
		

			
				
				

					
				

			
			
			
		

	


					
				
				
			

		

		
			

		
	


	
    


	



					
					
					
				
			
			



		

	


	
		

			


	
	

		

	
	
	
	
	
		
	

			
				
				

	
		

			
Rejoindre la conversation

			

	
				
					Vous pouvez publier maintenant et vous inscrire plus tard.
				
				Si vous avez un compte, connectez-vous maintenant pour publier avec votre compte.
				
					
Remarque : votre message nécessitera l’approbation d’un modérateur avant de pouvoir être visible.
				
			

	
		

	




	
	
		
	
		
	
		
	
	
		
		
	
	

		

		


	
		Invité
	


		

			
				
					
				
					
						
    
							
  • 
								


	
	
	
	

								
							
    • 
						

					
				
					
				
			
			
				
					
						
							
						
						



    

		
		

			
		

		
			
 Répondre à ce sujet…

		
		

			

				
					×
					  Collé en tant que texte enrichi.   Coller en tant que texte brut à la place
				
			

		

		

			

				  Seulement 75 émoticônes maximum sont autorisées.
			

		

		

			

				×
				  Votre lien a été automatiquement intégré.   Afficher plutôt comme un lien
			

		

		

			

			

		

		

			

				×
				  Votre contenu précédent a été rétabli.   Vider l’éditeur
			

		

		

			

				×
				  Vous ne pouvez pas directement coller des images. Envoyez-les depuis votre ordinateur ou insérez-les depuis une URL.
			

		

		
	

		
	

	

	

		

			×
			
		

		

	



						
					
				
					
				
					
				
			
			
    
				
					
						
					
						
					
						
							
  • 
								


    
	

    

								
							
    • 
						
					
				
				
					
  • 

	

    • 
				
			

		

	



			
		

	

	
		

			

				
					


    
          Partager
    

    

				
				
                

                


				
			

		

	







	

		
			
				Aller sur la liste des sujets
			
		
	

	




						


	

		
    
			
				
					
					
  • 

    
    
    
        
            En ligne récemment
        
        
          0 membre est en ligne
        
    
    
    
    
        
      
            
                
    • Aucun utilisateur enregistré regarde cette page.
      • 
            
        
    
        
    
    

    • 
				
			
		

	


					

					


					

				

			

			
		

		
		


	

		×
		

			
				

					
				

			

			

			

			
		

	






	

		×
		

			
    
				
  • Créer...
    •