Forum d'Entraide Informatique (FEI)

Bonsoir, je vous explique mon problème..
Dans ma promo un virus de clé tourne.. une fois la clé usb branchée je met des fichiers dessus, elle me les met en raccourcis..
et depuis ce virus de clé des pub n'arrêtent pas d'apparaitre..
J'ai eu aussi une baisse d'autonomie de mon pc (il est passé de 6h à 3h voire 2h30) et pour cela j'ai fait un nettoyage de l'ordi sans infecter  mes fichiers, et mon autonomie est revenu à la normale (je préfère vous le dire on ne sait jamais)
Merci d'avance pour votre aide

Bonsoir,



Passe UsbFix en Recherche et poste le rapport : http://www.forum-entraide-informatique. ... o-tutoriel

Gabriel.

D'accord merci, par contre la pour le moment le site est en maintenance

Re,

Ah oui zut, prends-le ici alors : http://general-changelog-team.fr/fr/dow ... /79-usbfix

Gabriel.

Voici le rapport:


############################## | UsbFix V 7.163 | [Recherche]

Utilisateur: Cecilia (Administrateur) # CECILIA
Mis à jour le 02/02/2014 par El Desaparecido - Team SosVirus
Lancé à 19:24:43 | 05/02/2014

Site Web : http://www.usbfix.net
Changelog : http://www.usbfix.net/maj/
Support : http://www.sosvirus.net/
Upload Malware : http://www.sosvirus.net/upload_malware.php
Contact : http://www.usbfix.net/contact/

PC: Hewlett-Packard (1894)
CPU: Intel(R) Core(TM) i5-3337U CPU @ 1.80GHz
RAM - [Total : 3992 Mo| Free : 898 Mo]
Bios: Insyde
Boot: Normal boot

OS: Microsoft Windows 8 (6.2.9200 64-Bit)
WB: Windows Internet Explorer : 10.0.9200.16750
WB: Google Chrome : 32.0.1700.107

SC: Security Center [Enabled]
WU: Windows Update [Enabled]
AV: Windows Defender [(!) Disabled | Updated]
AV: Norton Internet Security [(!) Disabled | Updated]
AS: Windows Defender [(!) Disabled | Updated]
AS: Norton Internet Security [(!) Disabled | Updated]
FW: Norton Internet Security [Enabled]
FW: Windows FireWall [(!) Disabled]

C:\ (%systemdrive%) - Disque fixe # 219 Go (159 Go libre(s) - 73%) [OS] # NTFS
D:\ - Disque fixe # 217 Go (217 Go libre(s) - 100%) [Thia] # NTFS
E:\ - Disque fixe # 29 Go (3 Go libre(s) - 12%) [RECOVERY] # NTFS
F:\ - Disque amovible # 4 Go (3 Go libre(s) - 79%) [CEC' IFSI] # FAT32
G:\ - Disque amovible # 8 Go (7 Go libre(s) - 97%) [DADAEVA CHL] # FAT32

################## | Processus Actif |

C:\Windows\system32\csrss.exe (ID: 492 |ParentID: 380)
C:\Windows\system32\wininit.exe (ID: 548 |ParentID: 380)
C:\Windows\system32\services.exe (ID: 656 |ParentID: 548)
C:\Windows\system32\lsass.exe (ID: 664 |ParentID: 548)
C:\Windows\system32\svchost.exe (ID: 776 |ParentID: 656)
C:\Windows\system32\svchost.exe (ID: 832 |ParentID: 656)
C:\Windows\System32\svchost.exe (ID: 884 |ParentID: 656)
C:\Windows\system32\svchost.exe (ID: 916 |ParentID: 656)
C:\Windows\system32\svchost.exe (ID: 956 |ParentID: 656)
C:\Windows\System32\svchost.exe (ID: 1004 |ParentID: 656)
C:\Program Files\IDT\WDM\STacSV64.exe (ID: 328 |ParentID: 656)
C:\Windows\system32\Hpservice.exe (ID: 1112 |ParentID: 656)
C:\Windows\system32\svchost.exe (ID: 1280 |ParentID: 656)
C:\Windows\System32\spoolsv.exe (ID: 1452 |ParentID: 656)
C:\Windows\system32\svchost.exe (ID: 1524 |ParentID: 656)
C:\Windows\system32\svchost.exe (ID: 1552 |ParentID: 656)
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (ID: 1704 |ParentID: 656)
C:\Windows\system32\svchost.exe (ID: 1740 |ParentID: 656)
C:\Program Files (x86)\MyPC Backup\BackupStack.exe (ID: 1760 |ParentID: 656)
C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe (ID: 1852 |ParentID: 656)
C:\Program Files\Bonjour\mDNSResponder.exe (ID: 1876 |ParentID: 656)
C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe (ID: 1944 |ParentID: 656)
C:\Windows\system32\dashost.exe (ID: 2012 |ParentID: 1004)
C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe (ID: 2040 |ParentID: 656)
C:\Program Files\Intel\iCLS Client\HeciServer.exe (ID: 1208 |ParentID: 656)
C:\Windows\SysWOW64\irstrtsv.exe (ID: 1272 |ParentID: 656)
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (ID: 1596 |ParentID: 656)
C:\Windows\system32\svchost.exe (ID: 1904 |ParentID: 656)
C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe (ID: 2632 |ParentID: 656)
C:\Windows\system32\wbem\wmiprvse.exe (ID: 2816 |ParentID: 776)
C:\Windows\system32\svchost.exe (ID: 3080 |ParentID: 656)
C:\Windows\system32\SearchIndexer.exe (ID: 2576 |ParentID: 656)
C:\Windows\system32\wbem\wmiprvse.exe (ID: 4420 |ParentID: 776)
C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe (ID: 4888 |ParentID: 656)
C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe (ID: 6632 |ParentID: 656)
C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe (ID: 6704 |ParentID: 656)
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (ID: 6760 |ParentID: 656)
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (ID: 7136 |ParentID: 656)
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (ID: 7396 |ParentID: 656)
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe (ID: 5608 |ParentID: 656)
C:\ProgramData\WPM\wprotectmanager.exe (ID: 32 |ParentID: 656)
C:\Program Files (x86)\Desk 365\deskSvc.exe (ID: 8920 |ParentID: 656)
C:\Windows\system32\taskhost.exe (ID: 3332 |ParentID: 656)
C:\Windows\system32\csrss.exe (ID: 5588 |ParentID: 4392)
C:\Windows\System32\WinLogon.exe (ID: 3968 |ParentID: 4392)
C:\Windows\System32\dwm.exe (ID: 5132 |ParentID: 3968)
C:\Windows\system32\taskhostex.exe (ID: 3828 |ParentID: 656)
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (ID: 3676 |ParentID: 656)
C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\LiveComm.exe (ID: 8832 |ParentID: 776)
C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe (ID: 10084 |ParentID: 1004)
C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\TabTip32.exe (ID: 6984 |ParentID: 10084)
C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE (ID: 2600 |ParentID: 7040)
C:\Windows\System32\RuntimeBroker.exe (ID: 6988 |ParentID: 776)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (ID: 8860 |ParentID: 6784)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (ID: 9512 |ParentID: 8860)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (ID: 10180 |ParentID: 8860)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (ID: 4060 |ParentID: 8860)
C:\Windows\System32\hkcmd.exe (ID: 6044 |ParentID: 6016)
C:\Windows\System32\igfxpers.exe (ID: 8800 |ParentID: 6016)
C:\Program Files\IDT\WDM\sttray64.exe (ID: 6484 |ParentID: 6016)
C:\Program Files (x86)\Desk 365\desk365.exe (ID: 5400 |ParentID: 6016)
C:\Program Files (x86)\MyPC Backup\MyPC Backup.exe (ID: 2936 |ParentID: 6016)
C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe (ID: 9268 |ParentID: 4320)
C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe (ID: 7836 |ParentID: 4320)
C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe (ID: 1100 |ParentID: 4320)
C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe (ID: 5860 |ParentID: 4320)
C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe (ID: 8256 |ParentID: 656)
C:\Program Files (x86)\Absolute Software\Absolute Reminder\AbsoluteReminder.exe (ID: 6288 |ParentID: 656)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (ID: 12772 |ParentID: 8860)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (ID: 2168 |ParentID: 8860)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (ID: 11800 |ParentID: 8860)
C:\Windows\system32\wwahost.exe (ID: 13092 |ParentID: 776)
C:\Windows\explorer.exe (ID: 7740 |ParentID: 3968)
C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\NIS.exe (ID: 13216 |ParentID: 656)
C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\NIS.exe (ID: 12456 |ParentID: 13216)
C:\Program Files\Internet Explorer\iexplore.exe (ID: 728 |ParentID: 7740)
C:\Program Files (x86)\Speed Test (4354)\BackgroundHost64.exe (ID: 12724 |ParentID: 776)
C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbarUser_32.exe (ID: 5516 |ParentID: 728)
C:\Program Files (x86)\Free Games 111\BackgroundHost64.exe (ID: 8020 |ParentID: 776)
C:\Program Files\Adblock Plus for IE\AdblockPlusEngine.exe (ID: 1224 |ParentID: 10168)
C:\Windows\System32\Macromed\Flash\FlashUtil_ActiveX.exe (ID: 11912 |ParentID: 776)
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE (ID: 7384 |ParentID: 728)
C:\Program Files (x86)\OpenOffice 4\program\simpress.exe (ID: 13200 |ParentID: 7740)
C:\Program Files (x86)\OpenOffice 4\program\soffice.exe (ID: 5936 |ParentID: 13200)
C:\Program Files (x86)\OpenOffice 4\program\soffice.bin (ID: 1840 |ParentID: 5936)
C:\Program Files (x86)\BrowseSmart\updateBrowseSmart.exe (ID: 16832 |ParentID: 656)
C:\Program Files (x86)\BrowseSmart\bin\utilBrowseSmart.exe (ID: 16856 |ParentID: 656)
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE (ID: 11908 |ParentID: 728)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (ID: 19844 |ParentID: 8860)
C:\Windows\System32\WUDFHost.exe (ID: 8848 |ParentID: 1004)
C:\Windows\system32\SearchProtocolHost.exe (ID: 19224 |ParentID: 2576)
C:\Windows\system32\SearchFilterHost.exe (ID: 1480 |ParentID: 2576)

################## | Regedit Run |

04 - HKCU\..\Run : [Desk 365] "C:\Program Files (x86)\Desk 365\desk365.exe" /autorun
04 - HKLM\..\Run : [BtTray] "C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe"
04 - HKLM\..\Run : [RemoteControl10] "C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe"
04 - HKLM\..\Run : [HP Quick Launch] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
04 - HKLM\..\Run : [HP CoolSense] C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe -byrunkey
04 - HKLM\..\Run : [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
04 - HKLM\..\RunOnce : []
04 - HKLM64\..\Run : [IgfxTray] C:\Windows\system32\igfxtray.exe
04 - HKLM64\..\Run : [HotKeysCmds] C:\Windows\system32\hkcmd.exe
04 - HKLM64\..\Run : [Persistence] C:\Windows\system32\igfxpers.exe
04 - HKLM64\..\Run : [SysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe
04 - HKLM64\..\Run : [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
04 - HKU\S-1-5-21-212777830-1526706429-352470138-1001\..\Run : [Desk 365] "C:\Program Files (x86)\Desk 365\desk365.exe" /autorun

################## | Recherche générique |

Présent! G:\iTunesHelper.vbe
Présent! G:\9.lnk
Présent! G:\dp3.lnk
Présent! G:\chloé océane.lnk
Présent! G:\SSVT.lnk

################## | Registre |


################## | Vaccin |

F:\Autorun.inf - Vaccin créé par UsbFix (El Desaparecido)

################## | E.O.F | http://www.usbfix.net - http://www.sosvirus.net |

Re,

OK, passe-le en suppression et poste le rapport.

Gabriel.

Re,
Voilà c'est fait

############################## | UsbFix V 7.163 | [Suppression]

Utilisateur: Cecilia (Administrateur) # CECILIA
Mis à jour le 02/02/2014 par El Desaparecido - Team SosVirus
Lancé à 19:41:19 | 05/02/2014

Site Web : http://www.usbfix.net
Changelog : http://www.usbfix.net/maj/
Support : http://www.sosvirus.net/
Upload Malware : http://www.sosvirus.net/upload_malware.php
Contact : http://www.usbfix.net/contact/

PC: Hewlett-Packard (1894)
CPU: Intel(R) Core(TM) i5-3337U CPU @ 1.80GHz
RAM - [Total : 3992 Mo| Free : 2998 Mo]
Bios: Insyde
Boot: Normal boot

OS: Microsoft Windows 8 (6.2.9200 64-Bit)
WB: Windows Internet Explorer : 10.0.9200.16750
WB: Google Chrome : 32.0.1700.107

SC: Security Center [Enabled]
WU: Windows Update [Enabled]
AV: Windows Defender [(!) Disabled | Updated]
AV: Norton Internet Security [(!) Disabled | Updated]
AS: Windows Defender [(!) Disabled | Updated]
AS: Norton Internet Security [(!) Disabled | Updated]
FW: Norton Internet Security [Enabled]
FW: Windows FireWall [(!) Disabled]

C:\ (%systemdrive%) - Disque fixe # 219 Go (160 Go libre(s) - 73%) [OS] # NTFS
D:\ - Disque fixe # 217 Go (217 Go libre(s) - 100%) [Thia] # NTFS
E:\ - Disque fixe # 29 Go (3 Go libre(s) - 12%) [RECOVERY] # NTFS
F:\ - Disque amovible # 4 Go (3 Go libre(s) - 79%) [CEC' IFSI] # FAT32
G:\ - Disque amovible # 8 Go (7 Go libre(s) - 97%) [DADAEVA CHL] # FAT32

################## | Processus Actif |

C:\Windows\system32\csrss.exe (ID: 500 |ParentID: 404)
C:\Windows\system32\wininit.exe (ID: 556 |ParentID: 404)
C:\Windows\system32\csrss.exe (ID: 572 |ParentID: 564)
C:\Windows\system32\winlogon.exe (ID: 640 |ParentID: 564)
C:\Windows\system32\services.exe (ID: 672 |ParentID: 556)
C:\Windows\system32\lsass.exe (ID: 680 |ParentID: 556)
C:\Windows\system32\svchost.exe (ID: 788 |ParentID: 672)
C:\Windows\system32\svchost.exe (ID: 828 |ParentID: 672)
C:\Windows\System32\svchost.exe (ID: 892 |ParentID: 672)
C:\Windows\system32\svchost.exe (ID: 924 |ParentID: 672)
C:\Windows\system32\dwm.exe (ID: 992 |ParentID: 640)
C:\Windows\system32\svchost.exe (ID: 1004 |ParentID: 672)
C:\Windows\System32\svchost.exe (ID: 364 |ParentID: 672)
C:\Program Files\IDT\WDM\STacSV64.exe (ID: 808 |ParentID: 672)
C:\Windows\system32\Hpservice.exe (ID: 1168 |ParentID: 672)
C:\Windows\system32\svchost.exe (ID: 1304 |ParentID: 672)
C:\Program Files (x86)\Desk 365\deskSvc.exe (ID: 1444 |ParentID: 672)
C:\ProgramData\WPM\wprotectmanager.exe (ID: 1552 |ParentID: 672)
C:\Windows\System32\spoolsv.exe (ID: 1668 |ParentID: 672)
C:\Windows\system32\svchost.exe (ID: 1700 |ParentID: 672)
C:\Windows\system32\svchost.exe (ID: 1720 |ParentID: 672)
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (ID: 1904 |ParentID: 672)
C:\Windows\system32\svchost.exe (ID: 1968 |ParentID: 672)
C:\Program Files (x86)\MyPC Backup\BackupStack.exe (ID: 1988 |ParentID: 672)
C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe (ID: 1196 |ParentID: 672)
C:\Program Files\Bonjour\mDNSResponder.exe (ID: 124 |ParentID: 672)
C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe (ID: 1420 |ParentID: 672)
C:\Windows\system32\dashost.exe (ID: 1580 |ParentID: 364)
C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe (ID: 1292 |ParentID: 672)
C:\Program Files\Intel\iCLS Client\HeciServer.exe (ID: 2100 |ParentID: 672)
C:\Windows\SysWOW64\irstrtsv.exe (ID: 2148 |ParentID: 672)
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (ID: 2176 |ParentID: 672)
C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\NIS.exe (ID: 2212 |ParentID: 672)
C:\Windows\system32\svchost.exe (ID: 2300 |ParentID: 672)
C:\Program Files (x86)\BrowseSmart\updateBrowseSmart.exe (ID: 2372 |ParentID: 672)
C:\Program Files (x86)\BrowseSmart\bin\utilBrowseSmart.exe (ID: 2528 |ParentID: 672)
C:\Program Files (x86)\Wajam\Updater\WajamUpdaterV3.exe (ID: 2608 |ParentID: 672)
C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe (ID: 2884 |ParentID: 672)
C:\Windows\servicing\TrustedInstaller.exe (ID: 2952 |ParentID: 672)
C:\Windows\system32\wbem\wmiprvse.exe (ID: 3004 |ParentID: 788)
C:\Windows\system32\svchost.exe (ID: 3052 |ParentID: 672)
C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.2.9200.16683_none_62280e15510f8e79\TiWorker.exe (ID: 3164 |ParentID: 788)
C:\Windows\system32\taskhostex.exe (ID: 3880 |ParentID: 672)
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (ID: 3888 |ParentID: 672)
C:\Windows\Explorer.EXE (ID: 2064 |ParentID: 3244)
C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\NIS.exe (ID: 2624 |ParentID: 2212)
C:\Windows\system32\taskeng.exe (ID: 2676 |ParentID: 924)
C:\Windows\system32\runonce.exe (ID: 3492 |ParentID: 2064)
C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE (ID: 3560 |ParentID: 3252)
C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe (ID: 4248 |ParentID: 364)
C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\TabTip32.exe (ID: 4276 |ParentID: 4248)
C:\Program Files (x86)\Desk 365\desk365.exe (ID: 4332 |ParentID: 1444)
C:\Windows\System32\WUDFHost.exe (ID: 4464 |ParentID: 364)
C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe (ID: 4576 |ParentID: 672)

################## | Regedit Run |

04 - HKCU\..\Run : [Desk 365] "C:\Program Files (x86)\Desk 365\desk365.exe" /autorun
04 - HKLM\..\Run : [BtTray] "C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe"
04 - HKLM\..\Run : [RemoteControl10] "C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe"
04 - HKLM\..\Run : [HP Quick Launch] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
04 - HKLM\..\Run : [HP CoolSense] C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe -byrunkey
04 - HKLM\..\Run : [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
04 - HKLM\..\RunOnce : []
04 - HKLM64\..\Run : [IgfxTray] C:\Windows\system32\igfxtray.exe
04 - HKLM64\..\Run : [HotKeysCmds] C:\Windows\system32\hkcmd.exe
04 - HKLM64\..\Run : [Persistence] C:\Windows\system32\igfxpers.exe
04 - HKLM64\..\Run : [SysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe
04 - HKLM64\..\Run : [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
04 - HKU\S-1-5-21-212777830-1526706429-352470138-1001\..\Run : [Desk 365] "C:\Program Files (x86)\Desk 365\desk365.exe" /autorun

################## | Recherche générique |

Supprimé! G:\iTunesHelper.vbe
Supprimé! G:\9.lnk
Supprimé! G:\dp3.lnk
Supprimé! G:\chloé océane.lnk
Supprimé! G:\SSVT.lnk

(!) Fichiers temporaires supprimés.

################## | Registre |

Réparé ! HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System|EnableLUA - 1
Réparé ! HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System|ConsentPromptBehaviorAdmin - 5

################## | Listing |

[16/12/2013 - 13:09:23 | SHD] - C:\$Recycle.Bin
[15/12/2013 - 12:04:35 | D] - C:\$SysReset
[04/08/2012 - 00:21:36 | SHD] - C:\Boot
[26/07/2012 - 04:44:30 | RASH | 389 Ko] - C:\bootmgr
[02/06/2012 - 15:30:55 | N | 0 Ko] - C:\BOOTNXT
[04/08/2012 - 00:21:37 | RASH | 8 Ko] - C:\BOOTSECT.BAK
[26/07/2012 - 08:22:08 | SHD] - C:\Documents and Settings
[05/02/2014 - 19:40:20 | ASH | 3270468 Ko] - C:\hiberfil.sys
[19/04/2013 - 09:39:08 | D] - C:\HP
[03/08/2012 - 23:39:51 | D] - C:\inetpub
[19/04/2013 - 09:23:53 | D] - C:\Intel
[05/02/2014 - 19:40:23 | ASH | 720896 Ko] - C:\pagefile.sys
[26/07/2012 - 08:33:46 | D] - C:\PerfLogs
[09/01/2014 - 19:31:31 | D] - C:\Program Files
[04/02/2014 - 18:31:28 | D] - C:\Program Files (x86)
[24/01/2014 - 23:26:02 | HD] - C:\ProgramData
[27/09/2013 - 11:38:47 | D] - C:\sources
[05/02/2014 - 19:40:26 | ASH | 262144 Ko] - C:\swapfile.sys
[19/04/2013 - 20:02:52 | D] - C:\SWSetup
[05/02/2014 - 18:33:44 | SHD] - C:\System Volume Information
[15/12/2013 - 11:57:14 | D] - C:\SYSTEM.SAV
[05/02/2014 - 19:23:58 | D] - C:\UsbFix
[05/02/2014 - 19:44:04 | A | 8 Ko | 14A8EAF6BE875C7B3E6F5D66E9B1A9CD] - C:\UsbFix [Clean 2] CECILIA.txt
[05/02/2014 - 19:30:22 | N | 10 Ko | 27D5326DEDF45F0731C67E016F693934] - C:\UsbFix [Scan 1] CECILIA.txt
[15/12/2013 - 11:52:27 | D] - C:\Users
[19/12/2013 - 22:57:22 | D] - C:\Windows
[15/12/2013 - 16:46:14 | D] - C:\Windows.old
[14/09/2013 - 18:32:18 | SHD] - D:\$RECYCLE.BIN
[05/02/2014 - 18:33:24 | SHD] - D:\System Volume Information
[14/09/2013 - 18:32:19 | SHD] - E:\$RECYCLE.BIN
[19/04/2013 - 10:47:49 | RSHD] - E:\boot
[26/07/2012 - 20:44:32 | RASH | 389 Ko] - E:\bootmgr
[26/07/2012 - 21:57:10 | N | 1319 Ko] - E:\bootmgr.efi
[19/04/2013 - 10:47:49 | D] - E:\EFI
[19/04/2013 - 10:47:49 | D] - E:\FactoryUpdate
[19/04/2013 - 10:47:49 | D] - E:\hp
[15/12/2013 - 20:49:35 | RSHD] - E:\preload
[07/08/2013 - 14:05:44 | SD] - E:\recovery
[19/04/2013 - 10:47:49 | D] - E:\RM_Reserve
[05/02/2014 - 18:33:24 | SHD] - E:\System Volume Information
[15/12/2013 - 18:09:40 | N | 23 Ko] - F:\Analyse de pratique N°3.odt
[09/01/2014 - 08:53:48 | D] - F:\cm_ifsi_résiience
[07/01/2014 - 22:08:48 | D] - F:\IFSI
[05/12/2013 - 16:03:00 | N | 1743 Ko] - F:\Physio rénale 2013 2014 présentiel.pdf
[05/12/2013 - 15:58:58 | N | 2292 Ko] - F:\Fonction motrice présentiel.pdf
[28/11/2013 - 08:42:40 | N | 2867 Ko] - F:\GenetiqueMédicale-IFSI-2013-2014.pdf
[09/01/2014 - 13:44:40 | N | 4912 Ko] - F:\GenetiqueMédicale-IFSI-2013-2014.pptx
[29/12/2013 - 12:48:28 | N | 3393 Ko] - F:\Stromae - Tous Les Mêmes.mp3
[29/12/2013 - 12:59:50 | N | 4251 Ko] - F:\Robin Thicke - Blurred Lines ft. T.I., Pharrell.mp3
[29/12/2013 - 13:07:48 | N | 3644 Ko] - F:\PSY - GENTLEMAN M_V.mp3
[29/12/2013 - 12:56:22 | N | 3887 Ko] - F:\Eminem - The Monster ft. Rihanna ( Lyrics On-Screen ).mp3
[29/12/2013 - 12:57:14 | N | 3286 Ko] - F:\Pitbull Feat. Ke$ha Timber [LYRICS].mp3
[01/11/2013 - 11:15:58 | N | 3978 Ko] - F:\Daddy Yankee - Limbo.mp3
[18/11/2013 - 18:28:48 | N | 4728 Ko] - F:\Slipknot - Psychosocial (Full Version).mp3
[29/12/2013 - 12:43:40 | N | 3344 Ko] - F:\Vitaa - Game Over ft. Maître Gims.mp3
[01/11/2013 - 11:32:30 | N | 3865 Ko] - F:\Daddy Yankee - La Despedida.mp3
[01/11/2013 - 11:19:08 | N | 3896 Ko] - F:\Daddy Yankee - Lovumba.mp3
[10/01/2014 - 19:17:36 | D] - F:\Nouveau dossier
[16/01/2014 - 17:33:06 | N | 456 Ko] - F:\Persone handicapées.docx
[19/04/2013 - 20:33:48 | D] - G:\musique ?
[19/04/2013 - 20:34:26 | D] - G:\photo ?
[02/05/2013 - 13:09:10 | D] - G:\dp3
[24/05/2013 - 11:00:18 | D] - G:\chloé océane
[30/05/2013 - 13:58:22 | D] - G:\SSVT
[10/06/2013 - 18:31:28 | N | 45 Ko] - G:\9.7 x 8.5.jpg
[28/11/2013 - 15:09:20 | D] - G:\Arnaud

################## | Vaccin |

D:\Autorun.inf - Vaccin créé par UsbFix (El Desaparecido)
E:\Autorun.inf - Vaccin créé par UsbFix (El Desaparecido)
F:\Autorun.inf - Vaccin créé par UsbFix (El Desaparecido)
G:\Autorun.inf - Vaccin créé par UsbFix (El Desaparecido)

################## | E.O.F | http://www.usbfix.net - http://www.sosvirus.net |

Re,

Les fichiers sont toujours en raccourcis ?

Gabriel.

Re,

Non il n'y a plus de raccourcis!
Merci beaucoup!!!!!

Re,

Bien.

Souhaites-tu en profiter pour vérifier si ton PC n'est pas infecté par d'autres éléments ?

Gabriel.

Re,

aah bah oui ça serait vraiment super, merci

Re,

D'accord.

Fais un diagnostic de ton PC avec ZHPDiag et poste le rapport hébergé : http://www.forum-entraide-informatique. ... g-tutoriel

Gabriel.

Re,

Voici le rapport: (je le met en plusieurs message car ça dépasse le format demandé)



~ Rapport de ZHPDiag v2014.1.25.26 - Nicolas Coolman (25/01/2014)
~ Lancé par Cecilia (05/02/2014 20:17:52)
~ Adresse du Site Web http://nicolascoolman.webs.com
~ Forums gratuits d'Assistance à la désinfection : http://nicolascoolman.webs.com/apps/links/
~ Traduit par Nicolas Coolman
~ Etat de la version :
~ Liste blanche : Désactivée par l'utilisateur
~ Elévation des Privilèges : OK
~ User Account Control (UAC): Activate by user


---\\ Navigateurs Internet
MSIE: Internet Explorer v10.0.9200.16750 (Defaut)
GCIE: Google Chrome v32.0.1700.107

---\\ Informations sur les produits Windows
~ Langage: Français
Windows 8, 64-bit (Build 9200)
Windows Server License Manager Script : OK
~ ion : Windows(R) Operating System, OEM_DM channel
Windows ID Activation : OK
~ Windows Partial Key : F3G7T
Windows License : OK
~ Windows Remaining Initializations Number : 998
Software Protection Service (Protection logicielle) : OK
Windows Automatic Updates : OK
Windows Activation Technologies : OK

---\\ Logiciels de protection du système
Norton Internet Security v21.1.0.18
Windows Defender W8

---\\ Logiciels d'optimisation du système

---\\ Logiciels de partage PeerToPeer

---\\ Surveillance de Logiciels
Adobe Flash Player 12 Plugin
Adobe Reader XI

---\\ Informations sur le système
~ Processor: Intel64 Family 6 Model 58 Stepping 9, GenuineIntel
~ Operating System: 64 Bits
Boot mode: Normal (Normal boot)
Total RAM: 3992 MB (37% free)
System Restore: Activé (Enable)
System drive C: has 160 GB (73%) free of 219 GB

---\\ Mode de connexion au système
~ Computer Name: CECILIA
~ User Name: Cecilia
~ All Users Names: HomeGroupUser$, Cecilia, Administrateur,
~ Unselected Option: None
Logged in as Administrator

---\\ Variables d'environnement
~ System Unit : C:\
~ %AppZHP% : C:\Users\Cecilia\AppData\Roaming\ZHP\
~ %AppData% : C:\Users\Cecilia\AppData\Roaming\
~ %Desktop% : C:\Users\Cecilia\Desktop\
~ %Favorites% : C:\Users\Cecilia\Favorites\
~ %LocalAppData% : C:\Users\Cecilia\AppData\Local\
~ %StartMenu% : C:\Users\Cecilia\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\

---\\ Enumération des unités disques
C: Hard drive, Flash drive, Thumb drive (Free 160 Go of 219 Go)
D: Hard drive, Flash drive, Thumb drive (Free 217 Go of 217 Go)
E: Hard drive, Flash drive, Thumb drive (Free 3 Go of 29 Go)
F: Floppy drive, Flash card reader, USB Key (Free 3 Go of 4 Go)



---\\ Etat du Centre de Sécurité Windows
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK
~ Security Center: 41 Scanned in 00mn 00s



---\\ Recherche particulière de fichiers génériques
[MD5.0E8E6463F81C80AFBED533E0F1F8895D] - (.Microsoft Corporation - Explorateur Windows.) (.01/06/2013 - 12:34:21.) -- C:\Windows\Explorer.exe [2391280]
[MD5.FE9AB232B56A12224E8A3F3F9878C9A3] - (.Microsoft Corporation - Application de démarrage de Windows.) (.26/07/2012 - 04:08:50.) -- C:\Windows\System32\Wininit.exe [132608]
[MD5.E7099336BF7531B6FCC920DCB5101259] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.25/10/2013 - 07:19:22.) -- C:\Windows\System32\wininet.dll [2241536]
[MD5.BCF2036A0DD579E47C008C133550283E] - (.Microsoft Corporation - Application d’ouverture de session Windows.) (.19/04/2013 - 18:14:42.) -- C:\Windows\System32\Winlogon.exe [517120]
[MD5.9448F5740A037EC0C18F0E9177232DD0] - (.Microsoft Corporation - Bibliothèque de licences.) (.26/07/2012 - 04:07:20.) -- C:\Windows\System32\sppcomapi.dll [273408]
[MD5.7C0E0EDF18D6CC565D7BFBB451709FA5] - (.Microsoft Corporation - Pilote de fonction connexe pour WinSock.) (.04/09/2013 - 04:11:23.) -- C:\Windows\system32\Drivers\AFD.sys [576512]
[MD5.A721FF570C2387E383BDDEA9632863C9] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.26/07/2012 - 06:00:48.) -- C:\Windows\system32\Drivers\atapi.sys [25840]
[MD5.990B1BABE6E81FB18E65A87EBEFB1772] - (.Microsoft Corporation - CD-ROM File System Driver.) (.26/07/2012 - 03:30:10.) -- C:\Windows\system32\Drivers\Cdfs.sys [108544]
[MD5.339BFF85D788268752DA8C9644B188EE] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.26/07/2012 - 03:26:36.) -- C:\Windows\system32\Drivers\Cdrom.sys [174080]
[MD5.09D9EB9E7898F8E6561473A20CC808B9] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.26/07/2012 - 03:26:53.) -- C:\Windows\system32\Drivers\DfsC.sys [118784]
[MD5.7D87B5B6C7188D553E11B59DC7F0B111] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.01/12/2012 - 05:08:28.) -- C:\Windows\system32\Drivers\HDAudBus.sys [71168]
[MD5.C9E9CBF73AFFBFE3E801EFB516787BA3] - (.Microsoft Corporation - Pilote de port i8042.) (.26/07/2012 - 03:28:51.) -- C:\Windows\system32\Drivers\i8042prt.sys [112640]
[MD5.3969B9C218DD3FAA9F4ED2FFC3651C02] - (.Microsoft Corporation - IP Network Address Translator.) (.26/07/2012 - 03:23:01.) -- C:\Windows\system32\Drivers\IpNat.sys [145920]
[MD5.93179D48066918323628CB016D8C94DC] - (.Microsoft Corporation - Minirdr SMB Windows NT.) (.05/02/2013 - 23:29:09.) -- C:\Windows\system32\Drivers\MRxSmb.sys [370688]
[MD5.7CEC25C682D319D484630B3952C31A11] - (.Microsoft Corporation - MBT Transport driver.) (.26/07/2012 - 03:24:28.) -- C:\Windows\system32\Drivers\netBT.sys [331776]
[MD5.76929F4A69E425911A63B407E26C2589] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.02/02/2013 - 11:54:54.) -- C:\Windows\system32\Drivers\ntfs.sys [1933544]
[MD5.4563DAF8C6A740AD7F501E219BD10766] - (.Microsoft Corporation - Pilote de port parallèle.) (.26/07/2012 - 03:29:53.) -- C:\Windows\system32\Drivers\Parport.sys [105984]
[MD5.A14D625C5AEE5FFE0F47D1A1D419FAAE] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.26/07/2012 - 03:23:17.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [124928]
[MD5.B2A3AD74FF2E2FFA73AF2567108231B3] - (.Microsoft Corporation - Redirecteur de périphérique de Microsoft RDP.) (.26/07/2012 - 03:25:18.) -- C:\Windows\system32\Drivers\rdpdr.sys [179712]
[MD5.73DC722CE5DF26D7638CE2446F2655C7] - (.Microsoft Corporation - TDI Translation Driver.) (.26/07/2012 - 06:26:47.) -- C:\Windows\system32\Drivers\tdx.sys [117248]
[MD5.78A5BBA3819FFFC62FFEC3E2220D102D] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.01/06/2013 - 12:26:33.) -- C:\Windows\system32\Drivers\volsnap.sys [327936]
~ Generic Processes: Scanned in 00mn 00s



---\\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 2/1808
~ Mes musiques (My Musics) : 1/87
~ Mes Videos (My Videos) : 1/20
~ Mes Favoris (My Favorites) : 1/86
~ Mes Documents (My Documents) : 1/4492
~ Mon Bureau (My Desktop) : 4/684
~ Menu demarrer (Programs) : 1/62
~ Hidden Files: Scanned in 00mn 00s



---\\ Processus lancés
[MD5.C87442B6D17912785DC143CEDCA508C9] - (.Symantec Corporation - Norton Internet Security.) -- C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\NIS.exe [275696] [PID.2212]
[MD5.DB314CFF0FB931BEEF9AA53B4DBABDC5] - (.Microsoft Corporation - Touch Keyboard and Handwriting Panel Helper.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\TabTip32.exe [21064] [PID.4276]
[MD5.B7F55E2AE978D3D34F7876EE5D689AAE] - (.CyberLink - YouCam Mirage.) -- C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe [136488] [PID.4576]
[MD5.656DFDB81019B8A11EFB05D974701AFD] - (.IVT Corporation - Bluetooth Application.) -- C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe [371976] [PID.3364]
[MD5.A2221900B57AEC20577996744FA4A56A] - (.CyberLink Corp. - PowerDVD RC Service.) -- C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [93296] [PID.5032]
[MD5.6198A9BC15ED77F318D5DDD1918CF1D1] - (.Hewlett-Packard Development Company, L.P. - HP Message Service.) -- C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [581024] [PID.3104]
[MD5.9F3655267BA37004F519ABDDB3AEE244] - (.Hewlett-Packard Development Company, L.P. - HP CoolSense.) -- C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe [1342008] [PID.3972]
[MD5.E4F6125ED5185F8FA37CC4F449B85526] - (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\IEXPLORE.exe [770608] [PID.5940]
[MD5.1ACCA74287FE5D7449FBB2B9F0C83341] - (.Google Inc. - Google Toolbar Broker.) -- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbarUser_32.exe [309328] [PID.6052] =Toolbar.Google
[MD5.F1CB88B90F5CE1A6D2BCDE90E2100ECC] - (.Apache Software Foundation - OpenOffice Writer.) -- C:\Program Files (x86)\OpenOffice 4\program\swriter.exe [103936] [PID.4360]
[MD5.55F18BE55D04A5CC961B0A013B2B8FD7] - (.Apache Software Foundation - OpenOffice 4.0.1.) -- C:\Program Files (x86)\OpenOffice 4\program\soffice.exe [9837056] [PID.7128]
[MD5.0AC5756636A90E33559439295B25FA94] - (.Apache Software Foundation - OpenOffice 4.0.1.) -- C:\Program Files (x86)\OpenOffice 4\program\soffice.bin [9828864] [PID.4340]
[MD5.CA25CAEEBDBE25D85565877219F684F8] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [8339968] [PID.4720]
~ Processes Running: Scanned in 00mn 00s



---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
C:\Users\Cecilia\AppData\Local\Google\Chrome\User Data\Default\Preferences
G1 - GCS: Preference [User Data\Default] http://www.nationzoom.com =Hijacker.NationZoom
G0 - GCSP: Preference [User Data\Default][HomePage] http://www.nationzoom.com =Hijacker.NationZoom
G2 - GCE: Preference [User Data\Default] [ahfgeienlihckogmohjhadlkjgocpleb] Google00A0Store v.0.2 (Activé)
G2 - GCE: Preference [User Data\Default] [aohghmighlieiainnegkcijnfilokake] Documents Google v.0.5 (Activé)
G2 - GCE: Preference [User Data\Default] [apdfllckaahabafndbhieahigkjlhalf] Google00A0Drive v.6.3 (Activé)
G2 - GCE: Preference [User Data\Default] [blpcfgokakmgnkcojhhkbfbldkacnbeo] YouTube v.4.2.6 (Activé)
G2 - GCE: Preference [User Data\Default] [coobgpohoikkiipiblmjeljniedjpjpf] Recherche Google v.0.0.0.20 (Activé)
G2 - GCE: Preference [User Data\Default] [eemcgdkfndhakfknompkggombfjjjeno] Bookmark Manager v.0.1 (Activé)
G2 - GCE: Preference [User Data\Default] [ennkphjdgehloodpbhlhldgbnhmacadg] Settings v.0.2 (Activé)
G2 - GCE: Preference [User Data\Default] [gfdkimpbcpahaombhbimeihdjnejgicl] Feedback v.1.0 (Activé)
G2 - GCE: Preference [User Data\Default] [ifohbjbgfchkkfhphahclmkpgejiplfo] Lightning Newtab v.1.1.8.4, (Activé) =PUP.Elex
G2 - GCE: Preference [User Data\Default] [ippenodjaoidmkkfdlmdhofiebnpjddb] BrowseSmart v.1.0.0 (Activé) =PUP.BrowseSmart
G2 - GCE: Preference [User Data\Default] [jljheddigenhleadfofeccneimcmlefp] Speed Test 127 v.3.0.0.0 (Désactivé)
G2 - GCE: Preference [User Data\Default] [jpmbfleldcgkldadpdinhjjopdfpjfjp] Wajam v.1.34 (Désactivé) =PUP.Wajam
G2 - GCE: Preference [User Data\Default] [lbgfiglojokgabdbhegbpjgojgppppgf] Free Games 111 v.3.0.0.0 (Désactivé)
G2 - GCE: Preference [User Data\Default] [mfehgcgbbipciphmccgaenjidiccnmng] Cloud Print v.0.1 (Activé)
G2 - GCE: Preference [User Data\Default] [mgndgikekgjfcpckkfioiadnlibdjbkf] Chrome v.0.1 (Activé)
G2 - GCE: Preference [User Data\Default] [mkfokfffehpeedafpekjeddnmnjhmcmk] Norton Identity Protection v.2013.4.7.3 (Désactivé)
G2 - GCE: Preference [User Data\Default] [nkeimhogjdpnpccoofpliimaahmaaome] Hangout Services v.1.0 (Activé)
G2 - GCE: Preference [User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] Google Wallet v.0.0.6.0 (Activé)
G2 - GCE: Preference [User Data\Default] [pjkljhegncpnkpknbcohdijeoejaedia] Gmail v.7 (Activé)
~ Google Browser: 40 Scanned in 00mn 07s



---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll
~ Firefox Browser: 1 Scanned in 00mn 00s



---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.nationzoom.com =Hijacker.NationZoom
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.nationzoom.com =Hijacker.NationZoom
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.nationzoom.com =Hijacker.NationZoom
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.nationzoom.com =Hijacker.NationZoom
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.nationzoom.com =Hijacker.NationZoom
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.nationzoom.com =Hijacker.NationZoom
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = aboutnoadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = aboutsecurityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.nationzoom.com =Hijacker.NationZoom
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs,Tabs = http://start.mysearchdial.com =Adware.MyWebSearch
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.nationzoom.com =Hijacker.NationZoom
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.nationzoom.com =Hijacker.NationZoom
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.nationzoom.com =Hijacker.NationZoom
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = aboutnoadd-ons
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = aboutsecurityrisk
R3 - URLSearchHook: Microsoft Url Search Hook [64Bits] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (10.00.9200.16384 (win8_rtm.120725-1247)) -- C:\Windows\SysWOW64\ieframe.dll
~ IE Browser: 17 Scanned in 00mn 00s



---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Proxy management: Scanned in 00mn 00s



---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
~ Keys: Scanned in 00mn 00s



---\\ Hosts file redirection (O1)
~ Le fichier hosts est sain (The hosts file is clean).
~ Hosts File: Scanned in 00mn 00s
~ Nombre de lignes (Lines number): 21



---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: Speed Test (4354) [64Bits] - {11C8C9C0-D918-44C0-8B5E-D297DA42F2C7} . (.Pas de propriétaire - ScriptHost.) -- C:\Program Files (x86)\Speed Test (4354)\ScriptHost.dll =Adware.ScriptHost
O2 - BHO: Norton Identity Protection [64Bits] - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} . (.Symantec Corporation - coIEPlugIn.) -- C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\coIEPlg.dll
O2 - BHO: Norton Vulnerability Protection [64Bits] - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} . (.Symantec Corporation - IPS Browser Helper DLL.) -- C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\IPS\IPSBHO.dll
O2 - BHO: Wajam IE BHO [64Bits] - {A7A6995D-6EE1-4FD1-A258-49395D5BF99C} . (.Wajam - Wajam Internet Explorer Add-on.) -- C:\Program Files (x86)\Wajam\IE\priam_bho.dll =PUP.Wajam
O2 - BHO: Google Toolbar Helper [64Bits] - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Google Toolbar.) -- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll =Toolbar.Google
O2 - BHO: Free Games 111 [64Bits] - {C45EC9F0-8333-465D-9728-074BD41985C9} . (.BestOffers - ScriptHost.) -- C:\Program Files (x86)\Free Games 111\ScriptHost.dll
O2 - BHO: HP Network Check Helper [64Bits] - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} . (.Hewlett-Packard - HP Network Check IE Plug-in.) -- C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll
O2 - BHO: SWEETIE [64Bits] - {EEE6C35C-6118-11DC-9C72-001320C79847} . (.SweetIM Technologies Ltd. - SweetPacks Toolbar module for Internet Expl.) -- C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll =PUP.SweetIM
O2 - BHO: mysearchdial Helper Object [64Bits] - {EF5625A3-37AB-4BDB-9875-2A3D91CD0DFD} . (.Ironsource Israel (2011) LTD - Pas de description.) -- C:\Program Files (x86)\Mysearchdial\1.8.21.0\bh\mysearchdial.dll =Adware.MyWebSearch
O2 - BHO: BrowseSmart [64Bits] - {ffbb88a9-c663-4b9b-9170-70fa0a5a2786} . (.BrowseSmart - BrowseSmart.) -- C:\Program Files (x86)\BrowseSmart\BrowseSmartBHO.dll =PUP.BrowseSmart
O2 - BHO: Adblock Plus for IE Browser Helper Object [64Bits] - {FFCB3198-32F3-4E8B-9539-4324694ED664} . (.Adblock Plus - Adblock Plus Module.) -- C:\Program Files\Adblock Plus for IE\AdblockPlus32.dll
~ BHO: 32 Scanned in 00mn 00s



---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar: Google Toolbar - [HKLM]{2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll =Toolbar.Google
O3 - Toolbar: Norton Toolbar - [HKLM]{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} . (.Symantec Corporation - coIEPlugIn.) -- C:\Program Files (x86)\Norton Internet Security\Engine64\21.1.0.18\coIEPlg.dll
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{EEE6C35B-6118-11DC-9C72-001320C79847} Clé orpheline
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{2318C2B1-4965-11D4-9B18-009027A5CD4F} Clé orpheline
~ Toolbar: Scanned in 00mn 00s



---\\ Autres liens utilisateurs (O4)
O4 - GS\Desktop [Public]: Adobe Reader XI.lnk . (.Adobe Systems Incorporated - Adobe Reader.) -- C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe
O4 - GS\Desktop [Public]: ClipGrab.lnk . (...) -- C:\Program Files (x86)\ClipGrab\ClipGrab.exe
O4 - GS\Desktop [Public]: Connected Music powered by Universal Music Group.lnk . (...) -- C:\Program Files (x86)\Connected Music powered by Universal Music Group\Connected Music powered by Universal Music Group.exe
O4 - GS\Desktop [Public]: eBay.lnk . (...) -- C:\Program Files (x86)\Hewlett-Packard\Shared\WizLink.exe =Toolbar.eBay
O4 - GS\Desktop [Public]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe http://www.nationzoom.com =Hijacker.NationZoom
O4 - GS\Desktop [Public]: HP Games.lnk . (.WildTangent - WildTangent Games App.) -- C:\Program Files (x86)\WildTangent Games\App\GameConsole-wt.exe
O4 - GS\Desktop [Public]: Norton Internet Security.lnk . (.Symantec Corporation - Norton Protection Center UI Stub.) -- C:\Program Files (x86)\Norton Internet Security\Engine64\21.1.0.18\uiStub.exe
O4 - GS\Desktop [Public]: OpenOffice 4.0.1.lnk . (.Apache Software Foundation - OpenOffice 4.0.1.) -- C:\Program Files (x86)\OpenOffice 4\program\soffice.exe
O4 - GS\Desktop [Public]: Photos Snapfish.lnk . (...) -- C:\Program Files (x86)\Hewlett-Packard\Shared\WizLink.exe
O4 - GS\Desktop [Public]: VLC media player.lnk . (.VideoLAN - VLC media player 2.1.2.) -- C:\Program Files (x86)\VideoLAN\VLC\vlc.exe =.VideoLAN
O4 - GS\Program [Public]: Adobe Reader XI.lnk . (...) -- C:\Windows\Installer\{AC76BA86-7AD7-1036-7B44-AB0000000001}\SC_Reader.ico
O4 - GS\Program [Public]: Browser Choice.lnk . (...) -- C:\Windows\BrowserChoice\html\default.html
O4 - GS\Program [Public]: Connected Music powered by Meridian.lnk . (.Meridian Audio Ltd - HP Connected Music.) -- C:\Program Files (x86)\HPConnectedMusic\HPConnectedMusic.exe
O4 - GS\Program [Public]: Connected Music powered by Universal Music Group.lnk . (...) -- C:\Program Files (x86)\Connected Music powered by Universal Music Group\Connected Music powered by Universal Music Group.exe
O4 - GS\Program [Public]: Desktop.lnk - Clé orpheline
O4 - GS\Program [Public]: Microsoft Office.lnk . (...) -- C:\windows\Installer\{95140000-0070-0000-0000-0000000FF1CE}\oobeicon.exe
O4 - GS\Program [Public]: Movie Maker.lnk . (.Microsoft Corporation - Movie Maker.) -- C:\Program Files (x86)\Windows Live\Photo Gallery\MovieMaker.exe =.Microsoft Corporation
O4 - GS\Program [Public]: Photo Gallery.lnk . (.Microsoft Corporation - Photo Gallery.) -- C:\Program Files (x86)\Windows Live\Photo Gallery\WLXPhotoGallery.exe =.Microsoft Corporation
O4 - GS\Program [Public]: Windows Store.lnk . (...) -- C:\Windows\WinStore\WinStore.htm
O4 - GS\Accessories [Public]: Calculator.lnk . (.Microsoft Corporation - Calculatrice de Windows.) -- C:\Windows\system32\calc.exe =.Microsoft Corporation
O4 - GS\Accessories [Public]: Math Input Panel.lnk . (...) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\mip.exe (.not file.)
O4 - GS\Accessories [Public]: Paint.lnk . (.Microsoft Corporation - Paint.) -- C:\Windows\system32\mspaint.exe =.Microsoft Corporation
O4 - GS\Accessories [Public]: Remote Desktop Connection.lnk . (.Microsoft Corporation - Connexion Bureau à distance.) -- C:\Windows\system32\mstsc.exe =.Microsoft Corporation
O4 - GS\Accessories [Public]: Snipping Tool.lnk . (.Microsoft Corporation - Outil Capture d’écran.) -- C:\Windows\system32\SnippingTool.exe =.Microsoft Corporation
O4 - GS\Accessories [Public]: Sound Recorder.lnk . (.Microsoft Corporation - Magnétophone Windows.) -- C:\Windows\system32\SoundRecorder.exe =.Microsoft Corporation
O4 - GS\Accessories [Public]: Steps Recorder.lnk . (.Microsoft Corporation - Enregistreur d’actions.) -- C:\Windows\system32\psr.exe =.Microsoft Corporation
O4 - GS\Accessories [Public]: Sticky Notes.lnk . (.Microsoft Corporation - Pense-bête.) -- C:\Windows\system32\StikyNot.exe =.Microsoft Corporation
O4 - GS\Accessories [Public]: Windows Fax and Scan.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) -- C:\Windows\system32\WFS.exe =.Microsoft Corporation
O4 - GS\Accessories [Public]: Windows Media Player.lnk . (.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe =.Microsoft Corporation
O4 - GS\Accessories [Public]: Wordpad.lnk . (.Microsoft Corporation - Application Windows Wordpad.) -- C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe =.Microsoft Corporation
O4 - GS\Accessories [Public]: XPS Viewer.lnk . (.Microsoft Corporation - Visionneuse XPS.) -- C:\Windows\system32\xpsrchvw.exe =.Microsoft Corporation
O4 - GS\SystemTools [Public]: Character Map.lnk . (.Microsoft Corporation - Table des caractères.) -- C:\Windows\system32\charmap.exe =.Microsoft Corporation
O4 - GS\QuickLaunch [Cecilia]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe http://www.nationzoom.com =Hijacker.NationZoom
O4 - GS\QuickLaunch [Cecilia]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe http://www.nationzoom.com =Hijacker.NationZoom
O4 - GS\TaskBar [Cecilia]: CyberLink Media Suite.lnk . (.CyberLink Corp. - CyberLink PowerStarter Main Program.) -- C:\Program Files (x86)\CyberLink\Media Suite\PS.exe
O4 - GS\TaskBar [Cecilia]: CyberLink YouCam.lnk . (.CyberLink Corp. - YouCam.) -- C:\Program Files (x86)\CyberLink\YouCam\Youcam_webcam_camera_video.exe
O4 - GS\TaskBar [Cecilia]: File Explorer.lnk . (...) -- C:\Users\Cecilia\AppData\Roaming\Microsoft\Windows\Libraries
O4 - GS\TaskBar [Cecilia]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe http://www.nationzoom.com =Hijacker.NationZoom
O4 - GS\TaskBar [Cecilia]: HP Utility Center.lnk . (.Hewlett-Packard Development Company, L.P. - HP Utility Center.) -- C:\HP\Data\HPUC\HPPU.exe
O4 - GS\TaskBar [Cecilia]: HPConnectedRemoteMgmtUI.lnk . (.Hewlett-Packard - HPConnectedRemoteMgmtUI.) -- C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteMgmtUI.exe
O4 - GS\TaskBar [Cecilia]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe http://www.nationzoom.com =Hijacker.NationZoom
O4 - GS\Program [Cecilia]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe http://www.nationzoom.com =Hijacker.NationZoom
O4 - GS\Program [Cecilia]: SkyDrive.lnk . (.Microsoft Corporation - Microsoft SkyDrive Setup.) -- C:\Program Files (x86)\Microsoft SkyDrive\SkyDriveSetup.exe =.Microsoft Corporation
O4 - GS\Accessories [Cecilia]: Notepad.lnk . (.Microsoft Corporation - Bloc-notes.) -- C:\Windows\system32\notepad.exe =.Microsoft Corporation
O4 - GS\SendTo [Cecilia]: Desk 365.lnk . (.337 Technology Limited. - Desk 365 application.) -- C:\Program Files (x86)\Desk 365\desk365.exe =Hijacker.22Find
O4 - GS\Desktop [Cecilia]: RocketPDF.lnk . (.Krzysztof Kowalczyk - RocketPDF.) -- C:\Program Files (x86)\RocketPDF\RocketPDF.exe
O4 - GS\Desktop [Cecilia]: UsbFix.lnk . (...) -- C:\UsbFix\UsbFix.exe
O4 - GS\Desktop [Cecilia]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag Setup.) -- C:\Program Files (x86)\ZHPDiag\ZHPhep.exe =.Nicolas Coolman
O4 - GS\Desktop [Cecilia]: ZHPFix.lnk . (.Nicolas Coolman - ZHPDiag Setup.) -- C:\Program Files (x86)\ZHPDiag\ZHPFix\ZHPhep.exe =.Nicolas Coolman
~ Global Startup: 50 Scanned in 00mn 00s



---\\ Applications lancées au démarrage du sytème (O4)
O4 - GS\Startup [Cecilia]: MyPC Backup.lnk . (.MyPCBackup.com - MyPC Backup.) -- C:\Program Files (x86)\MyPC Backup\MyPC Backup.exe =PUP.MyPCBackup
O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [SysTrayApp] . (.IDT, Inc. - IDT PC Audio.) -- C:\Program Files\IDT\WDM\sttray64.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files (x86)\Synaptics\SynTP\SynTPEnh.exe (.not file.)
O4 - HKCU\..\Run: [Desk 365] . (.337 Technology Limited. - Desk 365 application.) -- C:\Program Files (x86)\Desk 365\desk365.exe =Hijacker.22Find
O4 - HKLM\..\Wow6432Node\Run: [BtTray] . (.IVT Corporation - Bluetooth Application.) -- C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe
O4 - HKLM\..\Wow6432Node\Run: [RemoteControl10] . (.CyberLink Corp. - PowerDVD RC Service.) -- C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
O4 - HKLM\..\Wow6432Node\Run: [HP Quick Launch] . (.Hewlett-Packard Development Company, L.P. - HP Message Service.) -- C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
O4 - HKLM\..\Wow6432Node\Run: [HP CoolSense] . (.Hewlett-Packard Development Company, L.P. - HP CoolSense.) -- C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe
O4 - HKLM\..\Wow6432Node\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe =.Adobe Systems Incorporated
O4 - HKUS\S-1-5-21-212777830-1526706429-352470138-1001\..\Run: [Desk 365] . (.337 Technology Limited. - Desk 365 application.) -- C:\Program Files (x86)\Desk 365\desk365.exe =Hijacker.22Find
~ Application: Scanned in 00mn 00s

---\\ Invisibilité de l'icône d'options IE dans le panneau de Configuration (O5)
O5 - control.ini: [HKLM\..\Control Panel] inetcpl.cpl=no
~ IE Control Panel: 1 Scanned in 00mn 00s



---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d’affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll =.Microsoft Corporation
O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll
O10 - WLSP:\000000000007\Winsock LSP File . (.Apple Inc. - Bonjour Namespace Provider.) -- C:\Program Files (x86)\Bonjour\mdnsNSP.dll
O10 - WLSP:\000000000008\Winsock LSP File . (.Microsoft Corporation - Windows Sockets Helper DLL.) -- C:\Windows\system32\wshbth.dll
~ Winsock: 8 Scanned in 00mn 00s



---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{59BC81E2-7496-409E-B548-06CE4EEC54A2}: DhcpNameServer = 10.0.0.254
O17 - HKLM\System\CCS\Services\Tcpip\..\{FF9B9D05-25EC-4DF7-BA79-EA1F4E9D8CA9}: DhcpNameServer = 89.2.0.1 89.2.0.2
O17 - HKLM\System\CCS\Services\Tcpip\..\{59BC81E2-7496-409E-B548-06CE4EEC54A2}: DhcpDomain = mon.domaine
O17 - HKLM\System\CS1\Services\Tcpip\..\{59BC81E2-7496-409E-B548-06CE4EEC54A2}: DhcpNameServer = 10.0.0.254
O17 - HKLM\System\CS1\Services\Tcpip\..\{FF9B9D05-25EC-4DF7-BA79-EA1F4E9D8CA9}: DhcpNameServer = 89.2.0.1 89.2.0.2
O17 - HKLM\System\CS1\Services\Tcpip\..\{59BC81E2-7496-409E-B548-06CE4EEC54A2}: DhcpDomain = mon.domaine
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 89.2.0.1 89.2.0.2
~ Domain: Scanned in 00mn 00s



---\\ Protocole additionnel (O18)
O18 - Handler: wlpg [64Bits] - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (...) --
O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =.Microsoft Corporation
~ Protocole Additionnel: Scanned in 00mn 00s



---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\Windows\System32\igfxdev.dll
~ Winlogon: Scanned in 00mn 00s



---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
~ SSODL: 1 Scanned in 00mn 00s



---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Computer Backup (MyPC Backup) (BackupStack) . (.Just Develop It - Backup Stack.) - C:\Program Files (x86)\MyPC Backup\BackupStack.exe =PUP.MyPCBackup
O23 - Service: BlueSoleilCS (BlueSoleilCS) . (.IVT Corporation - Bluetooth Application.) - C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe
O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Desk 365 service (desksvc) . (.337 Technology Limited. - dsk service.) - C:\Program Files (x86)\Desk 365\deskSvc.exe =Hijacker.22Find
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =.Google Inc
O23 - Service: HP Support Assistant Service (HP Support Assistant Service) . (.Hewlett-Packard Company - HP Support Assistant Service.) - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe =.Hewlett-Packard Co
O23 - Service: HP Connected Remote Service (HPConnectedRemote) . (.Hewlett-Packard - HPConnectedRemoteService.) - C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe
O23 - Service: oem23.inf (hpsrv) . (.Hewlett-Packard Company - HpService.) - C:\Windows\System32\Hpservice.exe
O23 - Service: HPWMISVC (HPWMISVC) . (.Hewlett-Packard Development Company, L.P. - HP Quick Launch WMI Service.) - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
O23 - Service: Technologie de stockage Intel(R) Rapid (IAStorDataMgrSvc) . (.Intel Corporation - IAStorDataSvc.) - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: IconMan_R (IconMan_R) . (.Realsil Microelectronics Inc. - Realtek Card Reader Patch Tool..) - C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
O23 - Service: Intel(R) Capability Licensing Service Interface (Intel(R) Capability Licensing Service Interface) . (.Intel(R) Corporation - Intel(R) Capability Licensing Service Inter.) - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) Rapid Start Technology Service (irstrtsv) . (.Intel Corporation - Intel(R) Rapid Start Technology Service.) - C:\Windows\SysWOW64\irstrtsv.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) . (.Intel Corporation - Intel(R) Dynamic Application Loader Host In.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: Intel(R) Management and Security Application Local Manageme (LMS) . (.Intel Corporation - Local Manageability Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Norton Internet Security (NIS) . (.Symantec Corporation - Norton Internet Security.) - C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\NIS.exe
O23 - Service: C:\Windows\System32\stlang64.dll (STacSV) . (.IDT, Inc. - IDT PC Audio.) - C:\Program Files\IDT\WDM\STacSV64.exe
O23 - Service: Intel(R) Management and Security Application User Notificat (UNS) . (.Intel Corporation - User Notification Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: Update BrowseSmart (Update BrowseSmart) . (...) - C:\Program Files (x86)\BrowseSmart\updateBrowseSmart.exe =PUP.BrowseSmart
O23 - Service: Util BrowseSmart (Util BrowseSmart) . (...) - C:\Program Files (x86)\BrowseSmart\bin\utilBrowseSmart.exe =PUP.BrowseSmart
O23 - Service: WajamUpdaterV3 (WajamUpdaterV3) . (.Wajam - Auto-updater.) - C:\Program Files (x86)\Wajam\Updater\WajamUpdaterV3.exe =PUP.Wajam
O23 - Service: Wpm Service (Wpm) . (.Cherished Technololgy LIMITED - WPM Service.) - C:\ProgramData\WPM\wprotectmanager.exe =PUP.WpManager
~ Services: 23 Scanned in 00mn 04s



---\\ Enumération Active Desktop MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(...) - (.not file.)
~ Desktop Component: 4 Scanned in 00mn 00s



---\\ Enumère les données de BootExecute (BEX) (O34)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
~ BEX: 1 Scanned in 00mn 00s



---\\ Tâches planifiées en automatique (O39)
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\Adobe Flash Player Updater.job [1002]
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job [1082]
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job [1086]
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\MySearchDial.job [316] =Adware.MyWebSearch
[MD5.C8C6C0D659734FDBF63F6F421A5416BC] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [257928]
[MD5.9E195DD48C0341CEB109B5DC567854E1] [APT] [Desk 365 RunAsStdUser] (.337 Technology Limited..) -- C:\Program Files (x86)\Desk 365\desk365.exe [1013808] =Hijacker.22Find
[MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [116648]
[MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [116648]
[MD5.B7F55E2AE978D3D34F7876EE5D689AAE] [APT] [MirageAgent] (.CyberLink.) -- C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe [136488]
[MD5.CCFEE663F7DD308FFC47CD29D0861C17] [APT] [MySearchDial] (...) -- C:\Users\Cecilia\AppData\Roaming\MYSEAR~1\UPDATE~1\UPDATE~1.exe [106496] =Adware.MyWebSearch
[MD5.5971A95EA3A5A0086C3419B5F3C60223] [APT] [Norton WSC Integration] (.Symantec Corporation.) -- C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\WSCStub.exe [163944]
[MD5.0AE2C218A9AB6C16D79160CCE55B35FC] [APT] [HP Support Assistant Quick Start] (.Hewlett-Packard Company.) -- C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [525728]
[MD5.0AE2C218A9AB6C16D79160CCE55B35FC] [APT] [PC Health Analysis] (.Hewlett-Packard Company.) -- C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [525728]
[MD5.DDFD05786536EF7AA540CC490A9DE3CE] [APT] [Update Check] (.Hewlett-Packard Company.) -- C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe [592288]
[MD5.A0BE4F14B497E5120165F4E8130EDE93] [APT] [Norton Error Analyzer] (.Symantec Corporation.) -- C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\SymErr.exe [52560]
[MD5.A0BE4F14B497E5120165F4E8130EDE93] [APT] [Norton Error Processor] (.Symantec Corporation.) -- C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\SymErr.exe [52560]
~ Scheduled Task: 34 Scanned in 00mn 01s



---\\ Composants installés (ActiveSetup Installed Components) (O40)
O40 - ASIC: Microsoft Windows Media Player [64Bits] - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll =.Microsoft Corporation
O40 - ASIC: Microsoft Windows Media Player 12.0 [64Bits] - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\SysWOW64\wmpdxm.dll =.Microsoft Corporation
O40 - ASIC: Themes Setup [64Bits] - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\Windows\System32\themeui.dll
O40 - ASIC: Microsoft Windows [64Bits] - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Windows Mail.) -- C:\Program Files (x86)\Windows Mail\WinMail.exe =.Microsoft Corporation
O40 - ASIC: Browsing Enhancements [64Bits] - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\Windows\System32\msieftp.dll
O40 - ASIC: Microsoft Windows Media Player [64Bits] - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll =.Microsoft Corporation
O40 - ASIC: Windows Desktop Update [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll
O40 - ASIC: Web Platform Customizations [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe
O40 - ASIC: (no name) [64Bits] - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\System32\mscories.dll
~ Active Setup: 9 Scanned in 00mn 00s



---\\ Pilotes lancés au démarrage du système (O41)
O41 - Driver: C:\Windows\System32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Pilote de fonction connexe pour WinSock.) - C:\Windows\system32\drivers\afd.sys
O41 - Driver: (BasicDisplay) . (.Microsoft Corporation - Microsoft Basic Display Driver.) - C:\Windows\system32\drivers\BasicDisplay.sys
O41 - Driver: (BasicRender) . (.Microsoft Corporation - Microsoft Basic Render Driver.) - C:\Windows\system32\drivers\BasicRender.sys
O41 - Driver: (BHDrvx64) . (.Symantec Corporation - BASH Driver.) - C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\BASHDefs\20131002.001\BHDrvx64.sys
O41 - Driver: (ccSet_NIS) . (.Symantec Corporation - Common Client Settings Driver.) - C:\Windows\system32\drivers\NISx64\1501000.012\ccSetx64.sys
O41 - Driver: cdrom.inf (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\system32\drivers\cdrom.sys
O41 - Driver: C:\Windows\System32\drivers\dam.sys (dam) . (.Microsoft Corporation - DAM Kernel Driver.) - C:\Windows\System32\drivers\dam.sys
O41 - Driver: C:\Windows\System32\wkssvc.dll (Dfsc) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys
O41 - Driver: C:\Windows\System32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\System32\drivers\discache.sys
O41 - Driver: (eeCtrl) . (.Symantec Corporation - Symantec Eraser Control Driver.) - C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys
O41 - Driver: (IDSVia64) . (.Symantec Corporation - IDS Core Driver.) - C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\IPSDefs\20130930.001\IDSVia64.sys
O41 - Driver: mssmbios.inf (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\system32\drivers\mssmbios.sys
O41 - Driver: netnb.inf (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys
O41 - Driver: C:\Windows\System32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys
O41 - Driver: npsvctrig.inf (npsvctrig) . (.Microsoft Corporation - Named pipe service triggers.) - C:\Windows\system32\drivers\npsvctrig.sys
O41 - Driver: C:\Windows\System32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys
O41 - Driver: C:\Windows\System32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\system32\DRIVERS\pacer.sys
O41 - Driver: C:\Windows\System32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) - C:\Windows\System32\DRIVERS\rdbss.sys
O41 - Driver: (SRTSPX) . (.Symantec Corporation - Symantec AutoProtect.) - C:\Windows\system32\drivers\NISx64\1501000.012\SRTSPX64.sys
O41 - Driver: (SymIRON) . (.Symantec Corporation - Iron Driver.) - C:\Windows\system32\drivers\NISx64\1501000.012\Ironx64.sys
O41 - Driver: (SymNetS) . (.Symantec Corporation - Network Security Driver.) - C:\Windows\system32\Drivers\NISx64\1501000.012\SYMNETS.sys
O41 - Driver: C:\Windows\System32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\system32\DRIVERS\tdx.sys
O41 - Driver: C:\Windows\System32\drivers\vwififlt.sys (vwififlt) . (.Microsoft Corporation - Virtual WiFi Filter Driver.) - C:\Windows\system32\DRIVERS\vwififlt.sys
O41 - Driver: C:\Windows\System32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\system32\DRIVERS\wanarp.sys
~ Drivers: 48 Scanned in 00mn 00s



---\\ Logiciels installés (O42)
O42 - Logiciel: 4 Elements II - (.WildTangent.) [HKLM][64Bits] -- WTA-6613da58-9f08-47c4-8f92-6ea9b02c117c
O42 - Logiciel: Absolute Reminder - (.Absolute Software.) [HKLM][64Bits] -- {40F4FF7A-B214-4453-B973-080B09CED019}
O42 - Logiciel: Adblock Plus for IE (32-bit and 64-bit) - (.Eyeo GmbH.) [HKLM][64Bits] -- {C23EE7CE-C1A3-4F94-A8F0-9E0AC9C6DE6E}
O42 - Logiciel: Adblock Plus for IE - (...) [HKLM][64Bits] -- {fd97d1e2-368a-4cd9-af63-8eeff938044a}
O42 - Logiciel: Adobe Flash Player 12 Plugin - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player Plugin
O42 - Logiciel: Adobe Reader XI (11.0.06) - Français - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-7AD7-1036-7B44-AB0000000001}
O42 - Logiciel: Adobe Shockwave Player 11.6 - (.Adobe Systems, Inc..) [HKLM][64Bits] -- Adobe Shockwave Player
O42 - Logiciel: Airport Mania - (.WildTangent.) [HKLM][64Bits] -- WTA-7dd56a0e-7cbd-4469-8751-9443b6963cd7
O42 - Logiciel: Azteca - (.WildTangent.) [HKLM][64Bits] -- WTA-992a8268-ffa4-4e7b-abad-1733e65915d5
O42 - Logiciel: Bejeweled 3 - (.WildTangent.) [HKLM][64Bits] -- WTA-b9a0dff5-63dc-4a8d-afe8-17f4db57ce1a
O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM][64Bits] -- {6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}
O42 - Logiciel: Bounce Symphony - (.WildTangent.) [HKLM][64Bits] -- WTA-547c8def-db61-4683-bbbc-24665e83a38f
O42 - Logiciel: BrowseSmart - (.BrowseSmart.) [HKLM][64Bits] -- BrowseSmart =PUP.BrowseSmart
O42 - Logiciel: Build-a-lot - (.WildTangent.) [HKLM][64Bits] -- WTA-aa2fa262-ce03-4352-b041-cceccc87a119
O42 - Logiciel: ClipGrab 3.3.0.4 - (.Philipp Schmieder Medien.) [HKLM][64Bits] -- {8A1033B0-EF33-4FB5-97A1-C47A7DCDD7E6}_is1
O42 - Logiciel: Connected Music powered by Universal Music Group version 1.0 - (.Snowite.) [HKLM][64Bits] -- {46037DC7-F927-46DF-935F-D6F122BDD34B}_is1
O42 - Logiciel: CyberLink Media Suite 10 - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{1FBF6C24-C1fD-4101-A42B-0C564F9E8E79}
O42 - Logiciel: CyberLink Media Suite 10 - (.CyberLink Corp..) [HKLM][64Bits] -- {1FBF6C24-C1fD-4101-A42B-0C564F9E8E79}
O42 - Logiciel: CyberLink PhotoDirector - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{4862344A-A39C-4897-ACD4-A1BED5163C5A}
O42 - Logiciel: CyberLink PhotoDirector - (.CyberLink Corp..) [HKLM][64Bits] -- {4862344A-A39C-4897-ACD4-A1BED5163C5A}
O42 - Logiciel: CyberLink PowerDVD - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}
O42 - Logiciel: CyberLink PowerDVD - (.CyberLink Corp..) [HKLM][64Bits] -- {DEC235ED-58A4-4517-A278-C41E8DAEAB3B}
O42 - Logiciel: CyberLink PowerDirector 10 - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}
O42 - Logiciel: CyberLink PowerDirector 10 - (.CyberLink Corp..) [HKLM][64Bits] -- {B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}
O42 - Logiciel: CyberLink YouCam - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}
O42 - Logiciel: CyberLink YouCam - (.CyberLink Corp..) [HKLM][64Bits] -- {01FB4998-33C4-4431-85ED-079E3EEFE75D}
O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM][64Bits] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF}
O42 - Logiciel: Desk 365 - (.337 Technology Limited..) [HKLM][64Bits] -- Desk 365 =Hijacker.22Find
O42 - Logiciel: Energy Star - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {FC0ADA4D-8FA5-4452-8AFF-F0A0BAC97EF7}
O42 - Logiciel: FATE: The Cursed King - (.WildTangent.) [HKLM][64Bits] -- WTA-2dab5906-2c05-4fab-a9f7-bdb7179cb951
O42 - Logiciel: Final Drive Fury - (.WildTangent.) [HKLM][64Bits] -- WTA-2914867f-1e51-47d7-a99d-c7969307b583
O42 - Logiciel: Free Games 111 - (.BestOffers.) [HKLM][64Bits] -- Free Games 111
O42 - Logiciel: Galerie de photos - (.Microsoft Corporation.) [HKLM][64Bits] -- {FE8DFDD0-A543-4A83-B7A9-C411138194D5}
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM][64Bits] -- Google Chrome
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM][64Bits] -- {18455581-E099-4BA8-BC6B-F34B2F06600C} =Toolbar.Google
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM][64Bits] -- {2318C2B1-4965-11d4-9B18-009027A5CD4F} =Toolbar.Google
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
O42 - Logiciel: HP 3D DriveGuard - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {D878BE22-3270-4909-B1E1-91C8EF8D3234}
O42 - Logiciel: HP Connected Music (Meridian - installer) - (.Meridian Audio Ltd.) [HKLM][64Bits] -- StartHPConnectedMusic
O42 - Logiciel: HP Connected Music (Meridian - player) - (.Meridian Audio Ltd.) [HKCU][64Bits] -- HPConnectedMusic
O42 - Logiciel: HP Connected Remote - (.Hewlett-Packard.) [HKLM][64Bits] -- {F243A34B-AB7F-4065-B770-B85B767C247C}
O42 - Logiciel: HP CoolSense - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {8704FEEF-A6A8-4E7E-B124-BD6122C66E2C}
O42 - Logiciel: HP Customer Experience Enhancements - (.Hewlett-Packard.) [HKLM][64Bits] -- {07FA4960-B038-49EB-891B-9F95930AA544}
O42 - Logiciel: HP Documentation - (.Hewlett-Packard.) [HKLM][64Bits] -- {73A33079-D1A0-4469-8903-C4A48B4975E2}
O42 - Logiciel: HP Games - (.WildTangent.) [HKLM][64Bits] -- WildTangent hp Master Uninstall
O42 - Logiciel: HP Postscript Converter - (.Hewlett-Packard.) [HKLM][64Bits] -- {6E14E6D6-3175-4E1A-B934-CAB5A86367CD}
O42 - Logiciel: HP Quick Launch - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {E5823036-6F09-4D0A-B05C-E2BAA129288A}
O42 - Logiciel: HP Recovery Manager - (.Hewlett-Packard.) [HKLM][64Bits] -- {528AB81B-D65A-4AB0-A2B6-82B51A087D01}
O42 - Logiciel: HP Registration Service - (.Hewlett-Packard.) [HKLM][64Bits] -- {C2E428EB-116E-41C0-9E84-B22DE9CCA42F}
O42 - Logiciel: HP Support Assistant - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {EE202411-2C26-49E8-9784-1BC1DBF7DE96} =.Hewlett-Packard Co
O42 - Logiciel: HP Utility Center - (.Hewlett-Packard.) [HKLM][64Bits] -- {0C57987A-A03A-4B95-A309-D23F78F406CA}
O42 - Logiciel: HP Wireless Button Driver - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {941DE69D-6CEE-4171-8F1F-3D7E352AA498}
O42 - Logiciel: Hewlett-Packard ACLM.NET v1.2.1.1 - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {6F340107-F9AA-47C6-B54C-C3A19F11553F}
O42 - Logiciel: HiDef Media Player 1.1.12 - (.HiDefMedia.) [HKLM][64Bits] -- HiDef Media Player
O42 - Logiciel: Hoyle Card Games - (.WildTangent.) [HKLM][64Bits] -- WTA-0356f8e6-1bbf-4c61-83bf-c83e2099f08f
O42 - Logiciel: IDT Audio - (.IDT.) [HKLM][64Bits] -- {E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}
O42 - Logiciel: Intel(R) Control Center - (.Intel Corporation.) [HKLM][64Bits] -- {F8A9085D-4C7A-41a9-8A77-C8998A96C421}
O42 - Logiciel: Intel(R) Management Engine Components - (.Intel Corporation.) [HKLM][64Bits] -- {65153EA5-8B6E-43B6-857B-C6E4FC25798A}
O42 - Logiciel: Intel(R) Processor Graphics - (.Intel Corporation.) [HKLM][64Bits] -- {F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}
O42 - Logiciel: Intel(R) Rapid Start Technology - (.Intel Corporation.) [HKLM][64Bits] -- 3D073343-CEEB-4ce7-85AC-A69A7631B5D6
O42 - Logiciel: Intel(R) Rapid Storage Technology - (.Intel Corporation.) [HKLM][64Bits] -- {3E29EE6C-963A-4aae-86C1-DC237C4A49FC}
O42 - Logiciel: Intel(R) SDK for OpenCL - CPU Only Runtime Package - (.Intel Corporation.) [HKLM][64Bits] -- {FCB3772C-B7D0-4933-B1A9-3707EBACC573}
O42 - Logiciel: Intel® Trusted Connect Service Client - (.Intel Corporation.) [HKLM][64Bits] -- {F4404AFD-2EF3-40C1-8C09-29E5F3B6972B}
O42 - Logiciel: Internet Explorer Toolbar 4.9 by SweetPacks - (.SweetIM Technologies Ltd..) [HKLM][64Bits] -- {F4E33CE5-A7AB-4F68-A7E7-F0AA84EF2D9E} =PUP.SweetIM
O42 - Logiciel: Jeux WildTangent - (.WildTangent.) [HKLM][64Bits] -- WildTangent wildgames Master Uninstall
O42 - Logiciel: Jewel Match 3 - (.WildTangent.) [HKLM][64Bits] -- WTA-2523dd50-dcce-4d35-a0c9-0ef378883b04
O42 - Logiciel: John Deere Drive Green - (.WildTangent.) [HKLM][64Bits] -- WTA-80c8a4ba-0d11-4801-825f-7dfca5b1c696
O42 - Logiciel: Letters from Nowhere 2 - (.WildTangent.) [HKLM][64Bits] -- WTA-2e925e4d-a9b1-49d6-9243-3b5dc5256a68
O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM][64Bits] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}
O42 - Logiciel: MSVCRT110 - (.Microsoft.) [HKLM][64Bits] -- {8E14DDC8-EA60-4E18-B3E3-1937104D5BDA}
O42 - Logiciel: MSVCRT110_amd64 - (.Microsoft.) [HKLM][64Bits] -- {F842F8B0-6942-4930-821F-543E976B2C66}
O42 - Logiciel: Mah Jong Medley - (.WildTangent.) [HKLM][64Bits] -- WTA-312b2b7d-6473-4608-8aee-ebeca6cc808c
O42 - Logiciel: MyPC Backup - (.MyPC Backup.) [HKLM][64Bits] -- MyPC Backup =PUP.MyPCBackup
O42 - Logiciel: Mysearchdial - (.Mysearchdial.) [HKLM][64Bits] -- mysearchdial =Adware.MyWebSearch
O42 - Logiciel: Mystery of Mortlake Mansion - (.WildTangent.) [HKLM][64Bits] -- WTA-34cf2e8a-b107-4e34-a142-c21e2eb62453
O42 - Logiciel: Norton Internet Security - (.Symantec Corporation.) [HKLM][64Bits] -- NIS
O42 - Logiciel: OpenOffice 4.0.1 - (.Apache Software Foundation.) [HKLM][64Bits] -- {8D5D54B8-3D29-4AB4-8DA8-1868DAF941D8}
O42 - Logiciel: Penguins! - (.WildTangent.) [HKLM][64Bits] -- WTA-2a34f375-57d6-4e72-abe3-62c365048bfc
O42 - Logiciel: Polar Bowler - (.WildTangent.) [HKLM][64Bits] -- WTA-7716170b-5554-4571-a423-105b596e16f9
O42 - Logiciel: Polar Golfer - (.WildTangent.) [HKLM][64Bits] -- WTA-d8e49e4b-8838-4a8f-83dc-eda07257cc16
O42 - Logiciel: Ralink Bluetooth Stack64 - (.Ralink Corporation.) [HKLM][64Bits] -- {95DF815D-BE2D-9118-F549-39794C5869CF}
O42 - Logiciel: Ralink RT3290 802.11bgn Wi-Fi Adapter - (.Ralink.) [HKLM][64Bits] -- {8FC4F1DD-F7FD-4766-804D-3C8FF1D309AF}
O42 - Logiciel: Realtek Ethernet Controller Driver - (.Realtek.) [HKLM][64Bits] -- {8833FFB6-5B0C-4764-81AA-06DFEED9A476}
O42 - Logiciel: Realtek PCIE Card Reader - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {C1594429-8296-4652-BF54-9DBE4932A44C}
O42 - Logiciel: Roads of Rome 3 - (.WildTangent.) [HKLM][64Bits] -- WTA-667bb35b-979b-4721-afb4-daef5167e155
O42 - Logiciel: RocketPDF - (.RocketPDF.) [HKLM][64Bits] -- RocketPDF
O42 - Logiciel: Speed Test (4354) - (.Speed Analysis.) [HKLM][64Bits] -- Speed Test (4354) =PUP.SpeedAnalysis
O42 - Logiciel: Synaptics Pointing Device Driver - (.Synaptics Incorporated.) [HKLM][64Bits] -- SynTPDeinstKey
O42 - Logiciel: The Treasures of Mystery Island: The Ghost Ship - (.WildTangent.) [HKLM][64Bits] -- WTA-0f0060d5-d34e-43a9-a49f-66b929808434
O42 - Logiciel: Update Installer for WildTangent Games App - (.WildTangent.) [HKLM][64Bits] -- {2FA94A64-C84E-49d1-97DD-7BF06C7BBFB2}.WildTangent Games App
O42 - Logiciel: VLC media player 2.1.2 - (.VideoLAN.) [HKLM][64Bits] -- VLC media player =.VideoLAN
O42 - Logiciel: WPM17.8.0.3325 - (.Cherished Technololgy LIMITED.) [HKLM][64Bits] -- WPM =PUP.WpManager
O42 - Logiciel: Wajam - (.Wajam.) [HKLM][64Bits] -- Wajam =PUP.Wajam
O42 - Logiciel: WildTangent Games App - (.WildTangent.) [HKLM][64Bits] -- {70B446D1-E03B-4ab0-9B3C-0832142C9AA8}.WildTangent Games App-hp
O42 - Logiciel: Zuma's Revenge - (.WildTangent.) [HKLM][64Bits] -- WTA-d24e6a91-0edd-470b-b16f-8449d4a80b7e
O42 - Logiciel: swMSM - (.Adobe Systems, Inc.) [HKLM][64Bits] -- {612C34C7-5E90-47D8-9B5C-0F717DD82726}
~ Logic: 77 Scanned in 00mn 00s



---\\ HKCU HKLM Software Keys
[HKCU\Software\AdblockPlus]
[HKCU\Software\Adobe]
[HKCU\Software\AppDataLow\Software\Adobe]
[HKCU\Software\AppDataLow]
[HKCU\Software\BrowseSmart] =PUP.BrowseSmart
[HKCU\Software\Classes]
[HKCU\Software\CyberLink]
[HKCU\Software\Google]
[HKCU\Software\Hewlett-Packard]
[HKCU\Software\IM]
[HKCU\Software\ImInstaller]
[HKCU\Software\IncrediMail]
[HKCU\Software\InstallCore] =Adware.InstallCore
[HKCU\Software\Intel]
[HKCU\Software\Lake]
[HKCU\Software\Macromedia]
[HKCU\Software\Mine]
[HKCU\Software\MozillaPlugins]
[HKCU\Software\Mozilla]
[HKCU\Software\Netscape]
[HKCU\Software\Norton]
[HKCU\Software\OpenOffice]
[HKCU\Software\Philipp Schmieder]
[HKCU\Software\Policies]
[HKCU\Software\RegisteredApplications]
[HKCU\Software\SweetIM] =PUP.SweetIM
[HKCU\Software\Symantec]
[HKCU\Software\Synaptics]
[HKCU\Software\TeleCharger]
[HKCU\Software\Trolltech]
[HKCU\Software\Usbfix]
[HKCU\Software\WNLT] =Adware.IncrediBar
[HKCU\Software\Wajam] =PUP.Wajam
[HKCU\Software\Wow6432Node]
[HKCU\Software\ZebHelpProcess Helper]
[HKCU\Software\mysearchdial] =Adware.MyWebSearch
[HKLM\Software\ATI Technologies]
[HKLM\Software\Adblock Plus for IE]
[HKLM\Software\Apple Inc.]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\CyberLink]
[HKLM\Software\HPQ]
[HKLM\Software\Hewlett-Packard]
[HKLM\Software\IDT]
[HKLM\Software\InstalledOptions]
[HKLM\Software\Intel]
[HKLM\Software\Khronos]
[HKLM\Software\LFL]
[HKLM\Software\Macromedia]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Norton]
[HKLM\Software\ODBC]
[HKLM\Software\Policies]
[HKLM\Software\RTLSetup]
[HKLM\Software\Realtek]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\SRS Labs]
[HKLM\Software\SweetIM] =PUP.SweetIM
[HKLM\Software\Symantec]
[HKLM\Software\Synaptics]
[HKLM\Software\Wow6432Node\Adobe]
[HKLM\Software\Wow6432Node\AppDataLow]
[HKLM\Software\Wow6432Node\Apple Inc.]
[HKLM\Software\Wow6432Node\BSPACode]
[HKLM\Software\Wow6432Node\BrowseSmart] =PUP.BrowseSmart
[HKLM\Software\Wow6432Node\Caphyon]
[HKLM\Software\Wow6432Node\Classes]
[HKLM\Software\Wow6432Node\Clients]
[HKLM\Software\Wow6432Node\CyberLink]
[HKLM\Software\Wow6432Node\Google]
[HKLM\Software\Wow6432Node\Hewlett-Packard]
[HKLM\Software\Wow6432Node\HiDefMedia]
[HKLM\Software\Wow6432Node\IDT]
[HKLM\Software\Wow6432Node\IVT Corporation]
[HKLM\Software\Wow6432Node\InstallCore] =Adware.InstallCore
[HKLM\Software\Wow6432Node\Intel]
[HKLM\Software\Wow6432Node\Khronos]
[HKLM\Software\Wow6432Node\LFL]
[HKLM\Software\Wow6432Node\Lake]
[HKLM\Software\Wow6432Node\Macromedia]
[HKLM\Software\Wow6432Node\MozillaPlugins]
[HKLM\Software\Wow6432Node\Mozilla]
[HKLM\Software\Wow6432Node\Norton]
[HKLM\Software\Wow6432Node\ODBC]
[HKLM\Software\Wow6432Node\OpenOffice]
[HKLM\Software\Wow6432Node\Policies]
[HKLM\Software\Wow6432Node\Ralink Corporation]
[HKLM\Software\Wow6432Node\Ralink]
[HKLM\Software\Wow6432Node\Realtek Semiconductor Corp.]
[HKLM\Software\Wow6432Node\Realtek]
[HKLM\Software\Wow6432Node\RegisteredApplications]
[HKLM\Software\Wow6432Node\SweetIM] =PUP.SweetIM
[HKLM\Software\Wow6432Node\Symantec]
[HKLM\Software\Wow6432Node\V9]
[HKLM\Software\Wow6432Node\VideoLAN]
[HKLM\Software\Wow6432Node\WildTangent]
[HKLM\Software\Wow6432Node\deskSvc]
[HKLM\Software\Wow6432Node\hdcode]
[HKLM\Software\Wow6432Node\nationzoomSoftware] =Hijacker.NationZoom
[HKLM\Software\Wow6432Node\supWPM] =PUP.WpManager
[HKLM\Software\Wow6432Node]
~ Key Software: 279 Scanned in 00mn 00s



---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 19/04/2013 - 09:51:00 - [0,965] ----D C:\Program Files (x86)\Absolute Software
O43 - CFD: 15/12/2013 - 17:22:56 - [120,944] ----D C:\Program Files (x86)\Adobe
O43 - CFD: 19/04/2013 - 09:28:19 - [0,602] ----D C:\Program Files (x86)\Bonjour
O43 - CFD: 01/02/2014 - 12:27:27 - [2,891] ----D C:\Program Files (x86)\BrowseSmart =PUP.BrowseSmart
O43 - CFD: 04/02/2014 - 18:31:32 - [55,898] ----D C:\Program Files (x86)\ClipGrab
O43 - CFD: 15/12/2013 - 17:22:56 - [55,677] ----D C:\Program Files (x86)\Common Files
O43 - CFD: 30/11/2012 - 20:58:59 - [2,557] ----D C:\Program Files (x86)\Connected Music powered by Universal Music Group
O43 - CFD: 19/04/2013 - 09:47:04 - [2045,392] ----D C:\Program Files (x86)\CyberLink
O43 - CFD: 05/02/2014 - 19:43:27 - [10,063] ----D C:\Program Files (x86)\Desk 365 =Hijacker.22Find
O43 - CFD: 08/01/2014 - 12:26:18 - [3,060] ----D C:\Program Files (x86)\Free Games 111
O43 - CFD: 15/12/2013 - 17:23:47 - [500,082] ----D C:\Program Files (x86)\Google
O43 - CFD: 19/04/2013 - 09:53:22 - [376,502] ----D C:\Program Files (x86)\Hewlett-Packard
O43 - CFD: 24/01/2014 - 23:25:57 - [78,294] ----D C:\Program Files (x86)\HiDefMedia
O43 - CFD: 19/04/2013 - 09:38:04 - [610,396] ----D C:\Program Files (x86)\HP Games
O43 - CFD: 30/11/2012 - 20:58:51 - [0,720] ----D C:\Program Files (x86)\HPConnectedMusic
O43 - CFD: 19/04/2013 - 09:45:47 - [131,635] --H-D C:\Program Files (x86)\InstallShield Installation Information
O43 - CFD: 19/04/2013 - 09:31:29 - [192,448] ----D C:\Program Files (x86)\Intel
O43 - CFD: 16/01/2014 - 21:58:14 - [4,634] ----D C:\Program Files (x86)\Internet Explorer
O43 - CFD: 30/11/2012 - 20:50:39 - [6,085] ----D C:\Program Files (x86)\Microsoft Office
O43 - CFD: 30/11/2012 - 20:54:47 - [5,306] ----D C:\Program Files (x86)\Microsoft SkyDrive =.Microsoft Corporation
O43 - CFD: 30/11/2012 - 20:55:24 - [1,745] ----D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
O43 - CFD: 26/07/2012 - 09:12:59 - [0,023] ----D C:\Program Files (x86)\Microsoft.NET
O43 - CFD: 03/08/2012 - 23:37:58 - [0,025] ----D C:\Program Files (x86)\MSBuild
O43 - CFD: 16/01/2014 - 21:59:31 - [28,125] ----D C:\Program Files (x86)\MyPC Backup =PUP.MyPCBackup
O43 - CFD: 15/12/2013 - 17:11:27 - [2,654] ----D C:\Program Files (x86)\Mysearchdial =Adware.MyWebSearch
O43 - CFD: 05/02/2014 - 18:32:41 - [504,128] ----D C:\Program Files (x86)\Norton Internet Security
O43 - CFD: 19/04/2013 - 09:51:27 - [18,678] ----D C:\Program Files (x86)\NortonInstaller
O43 - CFD: 15/12/2013 - 11:57:29 - [1,580] R---D C:\Program Files (x86)\Online Services
O43 - CFD: 15/12/2013 - 17:04:36 - [316,939] ----D C:\Program Files (x86)\OpenOffice 4
O43 - CFD: 19/04/2013 - 09:28:52 - [16,219] ----D C:\Program Files (x86)\Ralink Corporation
O43 - CFD: 19/04/2013 - 09:26:58 - [16,863] ----D C:\Program Files (x86)\Realtek
O43 - CFD: 03/08/2012 - 23:37:58 - [36,536] ----D C:\Program Files (x86)\Reference Assemblies
O43 - CFD: 08/01/2014 - 12:26:19 - [4,781] ----D C:\Program Files (x86)\RocketPDF
O43 - CFD: 08/01/2014 - 12:26:19 - [2,984] ----D C:\Program Files (x86)\Speed Test (4354) =Adware.ScriptHost
O43 - CFD: 15/12/2013 - 17:18:51 - [4,607] ----D C:\Program Files (x86)\SweetIM =PUP.SweetIM
O43 - CFD: 19/04/2013 - 09:52:27 - [2,444] ----D C:\Program Files (x86)\SymSilent
O43 - CFD: 15/12/2013 - 17:05:09 - [98,590] ----D C:\Program Files (x86)\VideoLAN
O43 - CFD: 15/12/2013 - 17:12:41 - [1,336] ----D C:\Program Files (x86)\Wajam =PUP.Wajam
O43 - CFD: 19/04/2013 - 09:38:30 - [0,441] ----D C:\Program Files (x86)\WildGames
O43 - CFD: 19/04/2013 - 09:38:40 - [31,933] ----D C:\Program Files (x86)\WildTangent Games
O43 - CFD: 16/01/2014 - 21:58:14 - [1,038] ----D C:\Program Files (x86)\Windows Defender
O43 - CFD: 30/11/2012 - 20:55:22 - [86,758] ----D C:\Program Files (x86)\Windows Live
O43 - CFD: 16/01/2014 - 21:58:14 - [5,466] ----D C:\Program Files (x86)\Windows Mail =.Microsoft Corporation
O43 - CFD: 16/01/2014 - 21:58:14 - [3,494] ----D C:\Program Files (x86)\Windows Media Player =.Microsoft Corporation
O43 - CFD: 26/07/2012 - 09:13:01 - [0,209] ----D C:\Program Files (x86)\Windows Multimedia Platform
O43 - CFD: 26/07/2012 - 09:12:59 - [7,243] ----D C:\Program Files (x86)\Windows NT
O43 - CFD: 16/01/2014 - 21:58:14 - [5,226] ----D C:\Program Files (x86)\Windows Photo Viewer
O43 - CFD: 26/07/2012 - 09:13:01 - [0,209] ----D C:\Program Files (x86)\Windows Portable Devices
O43 - CFD: 26/07/2012 - 09:12:59 - [0] -SH-D C:\Program Files (x86)\Windows Sidebar
O43 - CFD: 05/02/2014 - 20:13:50 - [17,260] ----D C:\Program Files (x86)\ZHPDiag =.Nicolas Coolman
O43 - CFD: 15/12/2013 - 17:22:58 - [6,301] ----D C:\Program Files (x86)\Common Files\Adobe
O43 - CFD: 19/04/2013 - 09:34:27 - [0,221] ----D C:\Program Files (x86)\Common Files\Intel Corporation
O43 - CFD: 19/12/2013 - 22:57:15 - [37,551] ----D C:\Program Files (x86)\Common Files\Microsoft Shared
O43 - CFD: 30/11/2012 - 20:47:32 - [1,416] ----D C:\Program Files (x86)\Common Files\Nikon
O43 - CFD: 19/04/2013 - 09:24:53 - [0,185] ----D C:\Program Files (x86)\Common Files\postureAgent
O43 - CFD: 26/07/2012 - 09:13:01 - [0,003] ----D C:\Program Files (x86)\Common Files\Services
O43 - CFD: 05/02/2014 - 20:16:47 - [0,594] ----D C:\Program Files (x86)\Common Files\Symantec Shared
O43 - CFD: 16/01/2014 - 21:58:14 - [9,406] ----D C:\Program Files (x86)\Common Files\System
O43 - CFD: 30/11/2012 - 20:54:27 - [0] ----D C:\Program Files (x86)\Common Files\Windows Live
O43 - CFD: 15/12/2013 - 18:26:15 - [147,431] ----D C:\ProgramData\Adobe
O43 - CFD: 19/04/2013 - 09:28:18 - [2,558] ----D C:\ProgramData\Apple
O43 - CFD: 26/07/2012 - 08:22:08 - [0] -SH-D C:\ProgramData\Application Data
O43 - CFD: 15/12/2013 - 11:52:06 - [0] -SH-D C:\ProgramData\Bureau
O43 - CFD: 29/12/2013 - 14:48:30 - [0,118] ----D C:\ProgramData\CyberLink
O43 - CFD: 26/07/2012 - 08:22:08 - [0] -SH-D C:\ProgramData\Desktop
O43 - CFD: 26/07/2012 - 08:22:08 - [0] -SH-D C:\ProgramData\Documents
O43 - CFD: 15/12/2013 - 17:23:24 - [0,519] ----D C:\ProgramData\Google
O43 - CFD: 15/12/2013 - 11:54:22 - [8,344] ----D C:\ProgramData\Hewlett-Packard
O43 - CFD: 19/04/2013 - 09:40:14 - [0,066] ----D C:\ProgramData\install_clap
O43 - CFD: 19/04/2013 - 09:24:43 - [0,018] ----D C:\ProgramData\Intel
O43 - CFD: 15/12/2013 - 11:52:06 - [0] -SH-D C:\ProgramData\Menu Démarrer
O43 - CFD: 18/12/2013 - 19:05:49 - [-1739,863] -S--D C:\ProgramData\Microsoft
O43 - CFD: 30/11/2012 - 20:54:34 - [0] ----D C:\ProgramData\Microsoft SkyDrive =.Microsoft Corporation
O43 - CFD: 15/12/2013 - 11:52:06 - [0] -SH-D C:\ProgramData\Modèles
O43 - CFD: 15/12/2013 - 11:55:23 - [234,513] ----D C:\ProgramData\Norton
O43 - CFD: 19/04/2013 - 09:51:27 - [18,109] ----D C:\ProgramData\NortonInstaller
O43 - CFD: 09/01/2014 - 19:31:29 - [2,886] ----D C:\ProgramData\Package Cache
O43 - CFD: 20/12/2013 - 12:20:08 - [0,048] ----D C:\ProgramData\PRICache
O43 - CFD: 19/04/2013 - 09:28:54 - [5,047] ----D C:\ProgramData\Ralink Bluetooth Stack
O43 - CFD: 19/04/2013 - 09:28:24 - [7,075] ----D C:\ProgramData\Ralink Driver
O43 - CFD: 19/04/2013 - 18:04:28 - [0,001] ----D C:\ProgramData\regid.1991-06.com.microsoft
O43 - CFD: 26/07/2012 - 08:22:08 - [0] -SH-D C:\ProgramData\Start Menu
O43 - CFD: 19/04/2013 - 09:32:20 - [0,002] ----D C:\ProgramData\Synaptics
O43 - CFD: 19/04/2013 - 09:45:48 - [1,428] ----D C:\ProgramData\Temp
O43 - CFD: 26/07/2012 - 08:22:08 - [0] -SH-D C:\ProgramData\Templates
O43 - CFD: 19/04/2013 - 09:33:32 - [-703,464] ----D C:\ProgramData\WildTangent
O43 - CFD: 24/01/2014 - 23:26:03 - [0,471] ----D C:\ProgramData\WPM =PUP.WpManager
O43 - CFD: 30/11/2012 - 21:00:02 - [39,643] ----D C:\ProgramData\{9BF4D58B-C6D6-467B-BC5A-FD0C1278F4AF}
O43 - CFD: 15/12/2013 - 17:24:18 - [0,075] ----D C:\Users\Cecilia\AppData\Roaming\Adobe
O43 - CFD: 17/01/2014 - 09:20:41 - [0,939] ----D C:\Users\Cecilia\AppData\Roaming\CyberLink
O43 - CFD: 24/01/2014 - 23:26:40 - [12,784] ----D C:\Users\Cecilia\AppData\Roaming\Desk 365 =Hijacker.22Find
O43 - CFD: 08/01/2014 - 12:26:18 - [1,070] ----D C:\Users\Cecilia\AppData\Roaming\freegames111
O43 - CFD: 16/12/2013 - 22:28:48 - [0,007] ----D C:\Users\Cecilia\AppData\Roaming\Google
O43 - CFD: 15/12/2013 - 16:14:16 - [0,257] ----D C:\Users\Cecilia\AppData\Roaming\Hewlett-Packard
O43 - CFD: 15/12/2013 - 12:01:09 - [0] ----D C:\Users\Cecilia\AppData\Roaming\hpqlog
O43 - CFD: 27/01/2014 - 22:54:46 - [0,003] ----D C:\Users\Cecilia\AppData\Roaming\IDT
O43 - CFD: 15/12/2013 - 16:26:40 - [0,008] ----D C:\Users\Cecilia\AppData\Roaming\Macromedia
O43 - CFD: 15/12/2013 - 17:24:18 - [1,958] -S--D C:\Users\Cecilia\AppData\Roaming\Microsoft
O43 - CFD: 08/01/2014 - 12:26:18 - [0,475] ----D C:\Users\Cecilia\AppData\Roaming\Mozilla
O43 - CFD: 15/12/2013 - 17:11:30 - [0,174] ----D C:\Users\Cecilia\AppData\Roaming\mysearchdial =Adware.MyWebSearch
O43 - CFD: 15/12/2013 - 17:05:50 - [12,306] ----D C:\Users\Cecilia\AppData\Roaming\OpenOffice
O43 - CFD: 08/01/2014 - 12:27:02 - [0,089] ----D C:\Users\Cecilia\AppData\Roaming\RocketPDF
O43 - CFD: 08/01/2014 - 12:26:19 - [1,150] ----D C:\Users\Cecilia\AppData\Roaming\speedtest4354
O43 - CFD: 15/12/2013 - 11:56:37 - [0] ----D C:\Users\Cecilia\AppData\Roaming\Synaptics
O43 - CFD: 05/02/2014 - 11:43:32 - [0,083] ----D C:\Users\Cecilia\AppData\Roaming\vlc
O43 - CFD: 17/01/2014 - 09:22:28 - [0] ----D C:\Users\Cecilia\AppData\Roaming\WebApp
O43 - CFD: 05/02/2014 - 20:18:08 - [0,349] ----D C:\Users\Cecilia\AppData\Roaming\ZHP =.Nicolas Coolman
O43 - CFD: 15/12/2013 - 11:56:36 - [0] ----D C:\Users\Cecilia\AppData\Local\Absolute_Software
O43 - CFD: 15/12/2013 - 17:24:18 - [17,841] ----D C:\Users\Cecilia\AppData\Local\Adobe
O43 - CFD: 15/12/2013 - 11:53:00 - [0] -SH-D C:\Users\Cecilia\AppData\Local\Application Data
O43 - CFD: 15/12/2013 - 11:56:14 - [6,234] ----D C:\Users\Cecilia\AppData\Local\assembly
O43 - CFD: 15/12/2013 - 11:58:01 - [0,002] ----D C:\Users\Cecilia\AppData\Local\bluesoleil
O43 - CFD: 17/01/2014 - 09:20:42 - [0,007] ----D C:\Users\Cecilia\AppData\Local\CyberLink
O43 - CFD: 19/01/2014 - 11:19:59 - [0] ----D C:\Users\Cecilia\AppData\Local\Diagnostics
O43 - CFD: 17/12/2013 - 15:16:35 - [506,090] ----D C:\Users\Cecilia\AppData\Local\Google
O43 - CFD: 09/01/2014 - 14:42:16 - [0,001] ----D C:\Users\Cecilia\AppData\Local\Hewlett-Packard
O43 - CFD: 15/12/2013 - 11:53:00 - [0] -SH-D C:\Users\Cecilia\AppData\Local\Historique
O43 - CFD: 04/02/2014 - 18:48:48 - [76,265] ----D C:\Users\Cecilia\AppData\Local\HPConnectedMusic
O43 - CFD: 08/01/2014 - 17:26:44 - [855,363] ----D C:\Users\Cecilia\AppData\Local\Microsoft
O43 - CFD: 15/12/2013 - 11:57:31 - [1205,162] ----D C:\Users\Cecilia\AppData\Local\Packages
O43 - CFD: 05/02/2014 - 20:13:27 - [19,779] ----D C:\Users\Cecilia\AppData\Local\Temp
O43 - CFD: 15/12/2013 - 11:53:00 - [0] -SH-D C:\Users\Cecilia\AppData\Local\Temporary Internet Files
O43 - CFD: 15/12/2013 - 11:55:34 - [0] ----D C:\Users\Cecilia\AppData\Local\VirtualStore
O43 - CFD: 15/12/2013 - 17:11:34 - [0,054] ----D C:\Users\Cecilia\AppData\Local\Wajam =PUP.Wajam
O43 - CFD: 26/07/2012 - 09:13:00 - [0,004] R---D C:\Users\Cecilia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
O43 - CFD: 26/07/2012 - 09:13:00 - [0,001] R---D C:\Users\Cecilia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 20/12/2013 - 12:20:11 - [0] R---D C:\Users\Cecilia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 26/07/2012 - 09:13:00 - [0] ----D C:\Users\Cecilia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 08/01/2014 - 12:28:11 - [0,002] ----D C:\Users\Cecilia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup =PUP.MyPCBackup
O43 - CFD: 08/01/2014 - 12:26:20 - [0,002] ----D C:\Users\Cecilia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RocketPDF
O43 - CFD: 08/01/2014 - 12:28:11 - [0,001] R---D C:\Users\Cecilia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
O43 - CFD: 26/07/2012 - 09:13:00 - [0,005] R---D C:\Users\Cecilia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
O43 - CFD: 15/12/2013 - 17:11:35 - [0,006] ----D C:\Users\Cecilia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wajam =PUP.Wajam
~ Program Folder: 133 Scanned in 00mn 00s



---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.F0B2E59C988FA5F0AD6D55AA08182FDF] - 05/02/2014 - 14:21:45 ---A- . (...) -- C:\Windows\WindowsUpdate.log [1431436]
O44 - LFC:[MD5.7846ED59291A134CC5DD017C6EC7B433] - 05/02/2014 - 18:33:12 ---A- . (...) -- C:\Windows\System32\Drivers\SYMEVENT64x86.CAT [8222]
O44 - LFC:[MD5.E16E2431516D904CED3946AD3FF8C86B] - 05/02/2014 - 18:33:12 ---A- . (...) -- C:\Windows\System32\Drivers\SYMEVENT64x86.INF [854]
O44 - LFC:[MD5.97E11C50CE52277B377396EA8838E539] - 05/02/2014 - 18:33:12 ---A- . (.Symantec Corporation - Symantec Event Library.) -- C:\Windows\System32\Drivers\SYMEVENT64x86.SYS [177752]
O44 - LFC:[MD5.994801F99836C9730871B3772758782D] - 05/02/2014 - 19:22:05 ---A- . (...) -- C:\Windows\setupact.log [49206]
O44 - LFC:[MD5.27D5326DEDF45F0731C67E016F693934] - 05/02/2014 - 19:30:22 ----- . (...) -- C:\UsbFix [Scan 1] CECILIA.txt [10204]
O44 - LFC:[MD5.B20D60319389E20C503A082EF5BB3997] - 05/02/2014 - 19:40:19 ---A- . (...) -- C:\Windows\PFRO.log [25884]
O44 - LFC:[MD5.DBE0FBBFAADF06C30EFE5E073B6D55A0] - 05/02/2014 - 19:42:25 -S-A- . (...) -- C:\Windows\bootstat.dat [67584]
O44 - LFC:[MD5.4A5C508256B279D36BCFE1DB0FE95254] - 05/02/2014 - 19:44:06 ---A- . (...) -- C:\UsbFix [Clean 2] CECILIA.txt [11113]
O44 - LFC:[MD5.F218A464D3B8E464D1178035C248D301] - 05/02/2014 - 19:46:04 ---A- . (...) -- C:\Windows\System32\PerfStringBackup.INI [1997848]
O44 - LFC:[MD5.F82D5CDA92346D047BB1A9E67B600C44] - 05/02/2014 - 19:46:04 ---A- . (...) -- C:\Windows\System32\perfc009.dat [158770]
O44 - LFC:[MD5.ED6700911F231EB5C4B0AAD16FBCE203] - 05/02/2014 - 19:46:04 ---A- . (...) -- C:\Windows\System32\perfc00C.dat [188684]
O44 - LFC:[MD5.3BA114DF556D19D35351D13C1506EFE9] - 05/02/2014 - 19:46:04 ---A- . (...) -- C:\Windows\System32\perfh009.dat [775758]
O44 - LFC:[MD5.8B37A28EF6BEDC3A0CE804D50BCAFB37] - 05/02/2014 - 19:46:04 ---A- . (...) -- C:\Windows\System32\perfh00C.dat [875886]
O44 - LFC:[MD5.BF619EAC0CDF3F68D496EA9344137E8B] - 05/02/2014 - 20:15:43 ---A- . (...) -- C:\PhysicalDisk0_MBR.bin [512]
~ Files: 15 Scanned in 00mn 01s

---\\ Derniers fichiers créés dans Windows Prefetcher (O45)
O45 - LFCP:[MD5.51370483925BDC8B195511D5F60CCBA2] - 02/02/2014 - 13:29:14 ---A- - C:\Windows\Prefetch\AgCx_SC2.db
O45 - LFCP:[MD5.E5604F999BB82411CCABC566D460233F] - 03/02/2014 - 14:49:39 ---A- - C:\Windows\Prefetch\dynreservedpri.db
O45 - LFCP:[MD5.8DDC6EDD7C356B6A33DF123167C6E772] - 04/02/2014 - 23:23:19 ---A- - C:\Windows\Prefetch\AgGlUAD_P_S-1-5-21-212777830-1526706429-352470138-1001.db
O45 - LFCP:[MD5.6D3192F67F8C9228DD706658DFACDDB5] - 04/02/2014 - 23:23:19 ---A- - C:\Windows\Prefetch\AgGlUAD_S-1-5-21-212777830-1526706429-352470138-1001.db
O45 - LFCP:[MD5.944839869398D373E4D933327E2C7B7B] - 05/02/2014 - 08:27:15 ---A- - C:\Windows\Prefetch\AgCx_SC1.db.trx
O45 - LFCP:[MD5.E0CD8928D087C1D0E3912486F13B8938] - 05/02/2014 - 08:28:15 ---A- - C:\Windows\Prefetch\AgCx_SC1.db
O45 - LFCP:[MD5.4551EAF07C7306E62363F6689D037521] - 05/02/2014 - 17:56:53 ---A- - C:\Windows\Prefetch\AgCx_SC5.db
O45 - LFCP:[MD5.9991B880158271E36B10D4DE6E9A2106] - 05/02/2014 - 19:28:01 ---A- - C:\Windows\Prefetch\AgRobust.db
O45 - LFCP:[MD5.7F10861D66A424900AD22011B1B87D83] - 05/02/2014 - 19:28:02 ---A- - C:\Windows\Prefetch\AgGlGlobalHistory.db
O45 - LFCP:[MD5.0BD3B3994FAB8C40CAFC137682C8D4BD] - 05/02/2014 - 19:28:06 ---A- - C:\Windows\Prefetch\AgGlFaultHistory.db
O45 - LFCP:[MD5.56E78E93C79ADAA61246F73A3E725900] - 05/02/2014 - 19:28:07 ---A- - C:\Windows\Prefetch\AgGlFgAppHistory.db
O45 - LFCP:[MD5.A89E57AA20B8555C6965888D5643CE51] - 05/02/2014 - 19:39:52 ---A- - C:\Windows\Prefetch\PfSvPerfStats.bin
O45 - LFCP:[MD5.5A85E7F9B80756D32AA5EEE530B2A66F] - 05/02/2014 - 19:44:03 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-7E22277C.pf
O45 - LFCP:[MD5.E9ACAE270B0A1804B4E45C077EB01D3D] - 05/02/2014 - 19:44:14 ---A- - C:\Windows\Prefetch\THUMBNAILEXTRACTIONHOST.EXE-C3FB8861.pf
O45 - LFCP:[MD5.28C7E7A19F9E5C0AABE90F84BE53E65E] - 05/02/2014 - 19:44:17 ---A- - C:\Windows\Prefetch\IGFXTRAY.EXE-21BDFE68.pf
O45 - LFCP:[MD5.5B6C353EFA5441A7FD9C4BC28C1A9E18] - 05/02/2014 - 19:44:19 ---A- - C:\Windows\Prefetch\SYNTPENH.EXE-2DD080ED.pf
O45 - LFCP:[MD5.9A30ED35D11AB8B8719287182704A046] - 05/02/2014 - 19:44:20 ---A- - C:\Windows\Prefetch\DESK365.EXE-6062C485.pf =Hijacker.22Find
O45 - LFCP:[MD5.3AB36ABFE0311FF3B07760EEA9BCC45D] - 05/02/2014 - 19:44:22 ---A- - C:\Windows\Prefetch\RUNONCE.EXE-E874B0D0.pf
O45 - LFCP:[MD5.BAABF3CD12A85A5BE63411E680CA0324] - 05/02/2014 - 19:44:27 ---A- - C:\Windows\Prefetch\HKCMD.EXE-15DC91D5.pf
O45 - LFCP:[MD5.88DB6984CAC44ED541A897248186525D] - 05/02/2014 - 19:44:27 ---A- - C:\Windows\Prefetch\IGFXPERS.EXE-82C794F2.pf
O45 - LFCP:[MD5.C9DE09FAFC2BFCB28EA00346BD396B5D] - 05/02/2014 - 19:44:28 ---A- - C:\Windows\Prefetch\STTRAY64.EXE-D84D4C46.pf
O45 - LFCP:[MD5.E315DB3CFBFAB856EC2389DEA7BF7A10] - 05/02/2014 - 19:44:29 ---A- - C:\Windows\Prefetch\MYPC BACKUP.EXE-D2D9F9B9.pf =PUP.MyPCBackup
O45 - LFCP:[MD5.9CE778CB6D67D63FDC8B91BBE20646B0] - 05/02/2014 - 19:44:30 ---A- - C:\Windows\Prefetch\HPMSGSVC.EXE-D38F7EA6.pf
O45 - LFCP:[MD5.A160EF0E37B6E0F0F0AD193CB9AF41C3] - 05/02/2014 - 19:44:30 ---A- - C:\Windows\Prefetch\PDVD10SERV.EXE-99C8A7B5.pf
O45 - LFCP:[MD5.3FE08504C2403E6DE435B933EE664AF0] - 05/02/2014 - 19:44:39 ---A- - C:\Windows\Prefetch\WMIADAP.EXE-7D63BB4C.pf
O45 - LFCP:[MD5.A48FB84C8FDB08A4E0A75EA351638204] - 05/02/2014 - 19:44:41 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-6AA5D6C5.pf
O45 - LFCP:[MD5.016CDDBFEDDEF70BF4AA6022C9CE5E7E] - 05/02/2014 - 19:45:06 ---A- - C:\Windows\Prefetch\BACKGROUNDHOST64.EXE-CCAD9555.pf
O45 - LFCP:[MD5.335AB14BE6BE9A689FBD99D1602FAF32] - 05/02/2014 - 19:45:06 ---A- - C:\Windows\Prefetch\GOOGLETOOLBARUSER_32.EXE-992C17DF.pf =Toolbar.Google
O45 - LFCP:[MD5.3B800856F62F9554B0A52C6BF67BFEFD] - 05/02/2014 - 19:45:06 ---A- - C:\Windows\Prefetch\IEXPLORE.EXE-7A9337F2.pf
O45 - LFCP:[MD5.24CAB8B2096D8BF4E2D879162B7CFD48] - 05/02/2014 - 19:45:07 ---A- - C:\Windows\Prefetch\ADBLOCKPLUSENGINE.EXE-F6F7EC97.pf
O45 - LFCP:[MD5.F07A2EB40C02AAD3DE4B1F0BCAD8A4D5] - 05/02/2014 - 19:45:07 ---A- - C:\Windows\Prefetch\BACKGROUNDHOST64.EXE-81D372C5.pf
O45 - LFCP:[MD5.CE0A8F020BFB8292DA757A56921C9A36] - 05/02/2014 - 19:46:08 ---A- - C:\Windows\Prefetch\RUNTIMEBROKER.EXE-17E2786F.pf
O45 - LFCP:[MD5.48EDDA5669F3355FBCA8CE82124C813B] - 05/02/2014 - 19:46:36 ---A- - C:\Windows\Prefetch\EDHELPER64.EXE-DE10E69B.pf
O45 - LFCP:[MD5.29D8F13179DABD3E294673E0E93BC0B3] - 05/02/2014 - 19:48:36 ---A- - C:\Windows\Prefetch\CLTLMH.EXE-8C9C4C2D.pf
O45 - LFCP:[MD5.0330E081C487A6B314074B109115EB18] - 05/02/2014 - 19:49:11 ---A- - C:\Windows\Prefetch\SWRITER.EXE-D8AD49B1.pf
O45 - LFCP:[MD5.7943BE811CE1D8A185CB485B879D09E6] - 05/02/2014 - 19:49:28 ---A- - C:\Windows\Prefetch\SIMPRESS.EXE-DC88F597.pf
O45 - LFCP:[MD5.F87FEE11C7E29963B997F9FC96D49FF4] - 05/02/2014 - 19:49:28 ---A- - C:\Windows\Prefetch\SOFFICE.BIN-4DEC791F.pf
O45 - LFCP:[MD5.C8687CA4FBC2241E37D193BC6F274516] - 05/02/2014 - 19:49:28 ---A- - C:\Windows\Prefetch\SOFFICE.EXE-5A5E6044.pf
O45 - LFCP:[MD5.40B6C263522B28D6D7DC11E159E5176D] - 05/02/2014 - 19:51:48 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-EE2FB4D9.pf
O45 - LFCP:[MD5.24F2E538D25262F0954B3E2E0D51A1B3] - 05/02/2014 - 19:52:02 ---A- - C:\Windows\Prefetch\WUDFHOST.EXE-0D78D366.pf
O45 - LFCP:[MD5.44B9C7900D19BB6BD6351BE5D65E1678] - 05/02/2014 - 19:55:37 ---A- - C:\Windows\Prefetch\TASKHOST.EXE-985C34E6.pf
O45 - LFCP:[MD5.319D7CACCF38578E14EA6C12C3AD6EFA] - 05/02/2014 - 19:55:44 ---A- - C:\Windows\Prefetch\TASKHOST.EXE-29D61DAB.pf
O45 - LFCP:[MD5.FB633316D767B0B5E3F8BDF71ABCC5A8] - 05/02/2014 - 19:55:49 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-C1C2EFBE.pf
O45 - LFCP:[MD5.9E9BAA1D5A0DF429DB8F5787625D2A6A] - 05/02/2014 - 19:56:31 ---A- - C:\Windows\Prefetch\UPDATER.EXE-51C503F7.pf
O45 - LFCP:[MD5.E176CAA21C58AB62546342F3A5C3DAB5] - 05/02/2014 - 19:58:16 ---A- - C:\Windows\Prefetch\SETTINGSYNCHOST.EXE-DD400067.pf
O45 - LFCP:[MD5.D1567FE9E347F55D3D8FDA3775C544C2] - 05/02/2014 - 19:58:37 ---A- - C:\Windows\Prefetch\Layout.ini
O45 - LFCP:[MD5.D0A2DDEF652D1B44BB2F6ECD2536ED07] - 05/02/2014 - 20:07:33 ---A- - C:\Windows\Prefetch\IGFXSRVC.EXE-F41E6E8E.pf
O45 - LFCP:[MD5.01BCD71C7E838654FFA048F9F7701140] - 05/02/2014 - 20:08:45 ---A- - C:\Windows\Prefetch\SYMERR.EXE-F478DD93.pf
O45 - LFCP:[MD5.EA68B00057586C43AA542263B82BA197] - 05/02/2014 - 20:11:00 ---A- - C:\Windows\Prefetch\UPDATE~1.EXE-9F95A3F1.pf
O45 - LFCP:[MD5.B98977DD05BED3F73EE4479078847AC6] - 05/02/2014 - 20:11:37 ---A- - C:\Windows\Prefetch\IEXPLORE.EXE-F4FB5D2F.pf
O45 - LFCP:[MD5.37FC6A8B4FF6AD54CDDC35AB5C3262FF] - 05/02/2014 - 20:11:39 ---A- - C:\Windows\Prefetch\AUDIODG.EXE-9848A323.pf
O45 - LFCP:[MD5.5B2592AA265C939F88918A04A34C5DE2] - 05/02/2014 - 20:12:00 ---A- - C:\Windows\Prefetch\FLASHPLAYERUPDATESERVICE.EXE-E0E5E52F.pf
O45 - LFCP:[MD5.F41E67A84C75BBC3EAF488CA570C8B07] - 05/02/2014 - 20:13:02 ---A- - C:\Windows\Prefetch\ZHPDIAG2.EXE-7EE85E55.pf
O45 - LFCP:[MD5.C1003AFA2BA4042A8E5E84A8316123AF] - 05/02/2014 - 20:13:02 ---A- - C:\Windows\Prefetch\ZHPDIAG2.TMP-B7D834D7.pf
O45 - LFCP:[MD5.33D9E89ED5F15F91EA7EE4FE7476BAEF] - 05/02/2014 - 20:13:48 ---A- - C:\Windows\Prefetch\ZHPHEP.EXE-5F2753B1.pf
O45 - LFCP:[MD5.E18746624869EA41337DC85274A78143] - 05/02/2014 - 20:13:58 ---A- - C:\Windows\Prefetch\ZHPDIAG.EXE-C7289479.pf
O45 - LFCP:[MD5.9679FC5285E8FC7A41589D404BC9148A] - 05/02/2014 - 20:15:05 ---A- - C:\Windows\Prefetch\LADS.EXE-BC89FD22.pf
O45 - LFCP:[MD5.0AEA8A66C6E761203F0C7E4619A6F989] - 05/02/2014 - 20:15:34 ---A- - C:\Windows\Prefetch\NSLOOKUP.EXE-EB35EDAD.pf
O45 - LFCP:[MD5.1ED79CF36ED8D4D95BBE6FF714446470] - 05/02/2014 - 20:15:43 ---A- - C:\Windows\Prefetch\MBRCHECK.EXE-52282269.pf
O45 - LFCP:[MD5.FB9609ED97E26D7DC92452049F11753F] - 05/02/2014 - 20:16:13 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-38926D07.pf
O45 - LFCP:[MD5.CC40E61F012834023F6F999A912C5D29] - 05/02/2014 - 20:16:17 ---A- - C:\Windows\Prefetch\NOTEPAD.EXE-F0516D55.pf
O45 - LFCP:[MD5.E0117C431F78E55F921B5325ADDD8E8B] - 05/02/2014 - 20:16:17 ---A- - C:\Windows\Prefetch\SEARCHFILTERHOST.EXE-10E4267C.pf
O45 - LFCP:[MD5.D22124456FD4287194F7D160A20DD10F] - 05/02/2014 - 20:16:17 ---A- - C:\Windows\Prefetch\SEARCHPROTOCOLHOST.EXE-C6CFE2A8.pf
O45 - LFCP:[MD5.89DA510B9AB02E1A91BEF9D22042234A] - 05/02/2014 - 20:17:53 ---A- - C:\Windows\Prefetch\CMD.EXE-2EB3E6E2.pf
O45 - LFCP:[MD5.336B53685E633F54140A803B2CF00CC2] - 05/02/2014 - 20:17:53 ---A- - C:\Windows\Prefetch\CONHOST.EXE-F98A1078.pf
O45 - LFCP:[MD5.2F059413F464DCDB7344970758178D5E] - 05/02/2014 - 20:17:53 ---A- - C:\Windows\Prefetch\CSCRIPT.EXE-E9FF6526.pf
O45 - LFCP:[MD5.47F75CAB68DF27D63769C8E8B54FC4B6] - 05/02/2014 - 20:17:54 ---A- - C:\Windows\Prefetch\PV.EXE-D9D90B9C.pf
O45 - LFCP:[MD5.FF7AC12CCBC7E1DDB676F9F712E6D0F8] - 05/02/2014 - 20:18:02 ---A- - C:\Windows\Prefetch\SPPSVC.EXE-7B160CA5.pf
O45 - LFCP:[MD5.FFA028A55626A3CB44D1FDF1E25E5130] - 05/02/2014 - 20:18:02 ---A- - C:\Windows\Prefetch\SUBINACL.EXE-D08B2113.pf
O45 - LFCP:[MD5.755677C06C7446BAEFA36073C3BBEFAC] - 05/02/2014 - 20:18:02 ---A- - C:\Windows\Prefetch\WMIPRVSE.EXE-0C8A533A.pf
O45 - LFCP:[MD5.A9E2CD1484866FD3F178DE666DE78368] - 05/02/2014 - 20:18:08 ---A- - C:\Windows\Prefetch\MPCMDRUN.EXE-6520183E.pf
O45 - LFCP:[MD5.AA1589E6E1FFDE8808A8F47BD4DB46D3] - 05/02/2014 - 20:18:08 ---A- - C:\Windows\Prefetch\SCHTASKS.EXE-0AD36442.pf
O45 - LFCP:[MD5.6DFD22EF6CC2705E5CB38B519CF22AF7] - 05/02/2014 - 20:18:08 ---A- - C:\Windows\Prefetch\WSCSTUB.EXE-22AA8EB0.pf
O45 - LFCP:[MD5.C0478E2A380A107F4C5AF40C3E5E9A16] - 05/02/2014 - 20:18:10 ---A- - C:\Windows\Prefetch\GOOGLEUPDATE.EXE-62E5E10F.pf
O45 - LFCP:[MD5.00F79D25D0C2A563CAE06305BC7815B4] - 05/02/2014 - 20:18:10 ---A- - C:\Windows\Prefetch\SVCHOST.EXE-5B401A7E.pf
O45 - LFCP:[MD5.931170C0C6FB2DC6C6BA2803EF4A3306] - 05/02/2014 - 20:18:10 ---A- - C:\Windows\Prefetch\TASKENG.EXE-23205583.pf
O45 - LFCP:[MD5.0EC5160A9578D5272217B7D4EA30E70B] - 20/01/2014 - 16:53:49 ---A- - C:\Windows\Prefetch\AgCx_SC4.db
O45 - LFCP:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 21/06/2186 - 17:28:55 ----D - C:\Windows\Prefetch\ReadyBoot
~ Prefetcher: 78 Scanned in 00mn 00s



---\\ Déni du service (Local Security Authority) (O48)
O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll
O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l’Éditeur de configuration de sécurité Windows.) -- C:\Windows\System32\scecli.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Package de sécurité Kerberos.) -- C:\Windows\System32\kerberos.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Fournisseur de sécurité TLS/SSL.) -- C:\Windows\System32\schannel.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Digest Access.) -- C:\Windows\System32\wdigest.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Web Service Security Package.) -- C:\Windows\System32\tspkg.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Pku2u Security Package.) -- C:\Windows\System32\pku2u.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Live Security Package.) -- C:\Windows\System32\livessp.dll
~ LSA: 9 Scanned in 00mn 00s



---\\ Contrôle du Safe Boot (CSB) (O49)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\BasicDisplay.sys . (.Microsoft Corporation - Microsoft Basic Display Driver.) -- C:\Windows\System32\Drivers\BasicDisplay.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\BasicRender.sys . (.Microsoft Corporation - Microsoft Basic Render Driver.) -- C:\Windows\System32\Drivers\BasicRender.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dxgkrnl.sys . (.Microsoft Corporation - DirectX Graphics Kernel.) -- C:\Windows\System32\Drivers\dxgkrnl.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\FsDepends.sys . (.Microsoft Corporation - File System Dependency Manager Mini Filter Driver.) -- C:\Windows\System32\Drivers\FsDepends.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\System32\Drivers\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgrx.sys . (.Microsoft Corporation - Pilote d’extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\BasicDisplay.sys . (.Microsoft Corporation - Microsoft Basic Display Driver.) -- C:\Windows\System32\Drivers\BasicDisplay.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\BasicRender.sys . (.Microsoft Corporation - Microsoft Basic Render Driver.) -- C:\Windows\System32\Drivers\BasicRender.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dxgkrnl.sys . (.Microsoft Corporation - DirectX Graphics Kernel.) -- C:\Windows\System32\Drivers\dxgkrnl.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\FsDepends.sys . (.Microsoft Corporation - File System Dependency Manager Mini Filter Driver.) -- C:\Windows\System32\Drivers\FsDepends.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\System32\Drivers\ipnat.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\nsiproxy.sys . (.Microsoft Corporation - NSI Proxy.) -- C:\Windows\System32\Drivers\nsiproxy.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpencdd.sys . (...) -- C:\Windows\System32\Drivers\rdpencdd.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\System32\Drivers\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgrx.sys . (.Microsoft Corporation - Pilote d’extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys
~ CSB: 17 Scanned in 00mn 00s



---\\ Recherche d'infection sur les pilotes (HKLM)(TDSD) (O52)
O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
~ TDSD: 2 Scanned in 00mn 00s



---\\ Enumération des clés de registre SecurityProviders (MCSP) (O54)
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll
~ MSCP: 2 Scanned in 00mn 00s

Re,

Non non... Faut l'héberger comme demandé.

Gabriel.

---\\ Liste des pilotes du système (SDL) (O58)
O58 - SDL:[MD5.E890C46E4754F0DF51BAFCC8D2E07498] - 26/07/2012 - 03:26:46 ---A- . (.Microsoft Corporation - 1394 OpenHCI Driver.) -- C:\Windows\System32\Drivers\1394ohci.sys [226304]
O58 - SDL:[MD5.4F18D4C7EA14F11A7211F60D553C03DB] - 26/07/2012 - 06:00:49 ---A- . (.LSI - LSI 3ware SCSI Storport Driver.) -- C:\Windows\System32\Drivers\3ware.sys [106736]
O58 - SDL:[MD5.BE14A19386CC6711D2225D2B242AAC53] - 23/08/2012 - 08:45:42 ---A- . (.Hewlett-Packard Company - HP Accelerometer.) -- C:\Windows\System32\Drivers\Accelerometer.sys [42400]
O58 - SDL:[MD5.975AABEB243B800C23626D6B652C5A9C] - 01/12/2012 - 05:08:28 ---A- . (.Microsoft Corporation - Pilote ACPI pour NT.) -- C:\Windows\System32\Drivers\acpi.sys [425192]
O58 - SDL:[MD5.DC968C37822117E576B933F34A2D130C] - 26/07/2012 - 06:00:57 ---A- . (.Microsoft Corporation - ACPIEx Driver.) -- C:\Windows\System32\Drivers\acpiex.sys [77040]
O58 - SDL:[MD5.0CA9F7C3A78227C21A0A7854E245CFB2] - 26/07/2012 - 03:27:16 ---A- . (.Microsoft Corporation - ACPI Processor Aggregator Device Driver.) -- C:\Windows\System32\Drivers\acpipagr.sys [10240]
O58 - SDL:[MD5.8EB8DA03B142D3DD1EB9ED8107A76C43] - 26/07/2012 - 03:27:33 ---A- . (.Microsoft Corporation - ACPI Power Metering Driver.) -- C:\Windows\System32\Drivers\acpipmi.sys [12288]
O58 - SDL:[MD5.CBCE725C5D86ABA7D2604E22951AA9B8] - 26/07/2012 - 03:27:37 ---A- . (.Microsoft Corporation - ACPI Wake Alarm.) -- C:\Windows\System32\Drivers\acpitime.sys [10752]
O58 - SDL:[MD5.93C6388592B99925C1D1576E465BC80F] - 26/07/2012 - 06:00:49 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\Drivers\adp94xx.sys [492272]
O58 - SDL:[MD5.D27763E0247292654E7F7D16444C7C72] - 26/07/2012 - 06:00:48 ---A- . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\System32\Drivers\adpahci.sys [340720]
O58 - SDL:[MD5.67B90070FF48F794AF19F9FCF0080D75] - 26/07/2012 - 06:00:49 ---A- . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver (X64).) -- C:\Windows\System32\Drivers\adpu320.sys [184048]
O58 - SDL:[MD5.7C0E0EDF18D6CC565D7BFBB451709FA5] - 04/09/2013 - 04:11:23 ---A- . (.Microsoft Corporation - Pilote de fonction connexe pour WinSock.) -- C:\Windows\System32\Drivers\afd.sys [576512]
O58 - SDL:[MD5.69B93F623B130976243ECA3D84CC99CA] - 26/07/2012 - 03:23:11 ---A- . (.Microsoft Corporation - RAS Agile Vpn Miniport Call Manager.) -- C:\Windows\System32\Drivers\agilevpn.sys [68608]
O58 - SDL:[MD5.01590377A5AB19E792528C628A2A68F9] - 26/07/2012 - 06:00:49 ---A- . (.Microsoft Corporation - Filtre AGP 440 NT.) -- C:\Windows\System32\Drivers\AGP440.sys [63216]
O58 - SDL:[MD5.5A81054B824004B1ECC04F0034A1CDF9] - 19/04/2013 - 18:18:28 ---A- . (.Microsoft Corporation - Processor Device Driver.) -- C:\Windows\System32\Drivers\amdk8.sys [90624]
O58 - SDL:[MD5.B849D453E644FAB9BC8EF6DC8CA9C4C6] - 19/04/2013 - 18:18:28 ---A- . (.Microsoft Corporation - Processor Device Driver.) -- C:\Windows\System32\Drivers\amdppm.sys [88064]
O58 - SDL:[MD5.35A0EB5AECB0FA3C41A2FB514A562304] - 26/07/2012 - 06:00:49 ---A- . (.Advanced Micro Devices - AHCI 1.2 Device Driver.) -- C:\Windows\System32\Drivers\amdsata.sys [76016]
O58 - SDL:[MD5.00452671904F5EE94B50BF0219C97164] - 26/07/2012 - 06:00:49 ---A- . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller Driver for Windows -.) -- C:\Windows\System32\Drivers\amdsbs.sys [258288]
O58 - SDL:[MD5.EA3FFE53E92E59C87E3ECA9BEB20D9B7] - 26/07/2012 - 06:00:48 ---A- . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\Windows\System32\Drivers\amdxata.sys [26352]
O58 - SDL:[MD5.83B3682CE922FB0F415734B26D9D6233] - 26/07/2012 - 03:25:12 ---A- . (.Microsoft Corporation - AppID Driver.) -- C:\Windows\System32\Drivers\appid.sys [79360]
O58 - SDL:[MD5.E933401B392387F4BE34DE8BAF1722A7] - 26/07/2012 - 06:00:49 ---A- . (.PMC-Sierra, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\System32\Drivers\arc.sys [104688]
O58 - SDL:[MD5.07CA323EF2E8247A568AB0F3662AD644] - 26/07/2012 - 06:00:48 ---A- . (.PMC-Sierra, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\System32\Drivers\arcsas.sys [108272]
O58 - SDL:[MD5.74DBAEC35366C4EE7670428808715A6A] - 26/07/2012 - 03:28:25 ---A- . (.Microsoft Corporation - MS Remote Access serial network driver.) -- C:\Windows\System32\Drivers\asyncmac.sys [26624]
O58 - SDL:[MD5.A721FF570C2387E383BDDEA9632863C9] - 26/07/2012 - 06:00:48 ---A- . (.Microsoft Corporation - ATAPI IDE Miniport Driver.) -- C:\Windows\System32\Drivers\atapi.sys [25840]
O58 - SDL:[MD5.B7B95223BE0F4A5121E56A7ACBEB29B8] - 26/07/2012 - 06:00:49 ---A- . (.Microsoft Corporation - ATAPI Driver Extension.) -- C:\Windows\System32\Drivers\ataport.sys [190704]
O58 - SDL:[MD5.81703BC5D68DEDBB086C2368FBE7B334] - 26/07/2012 - 03:29:08 ---A- . (.Microsoft Corporation - Microsoft Basic Display Driver.) -- C:\Windows\System32\Drivers\BasicDisplay.sys [48640]
O58 - SDL:[MD5.5EC68164E14D25675C98BBB5F09E8606] - 26/07/2012 - 03:28:52 ---A- . (.Microsoft Corporation - Microsoft Basic Render Driver.) -- C:\Windows\System32\Drivers\BasicRender.sys [29696]
O58 - SDL:[MD5.04F5D7396FE6414150FEEDB60FDAC670] - 19/04/2013 - 18:14:42 ---A- . (.Microsoft Corporation - Battery Class Driver.) -- C:\Windows\System32\Drivers\battc.sys [33512]
O58 - SDL:[MD5.9E7AEA59776D904607985AFFE7E5E183] - 26/07/2012 - 03:30:19 ---A- . (.Microsoft Corporation - BEEP Driver.) -- C:\Windows\System32\Drivers\beep.sys [7680]
O58 - SDL:[MD5.22177DD062F6696A98FAFF6BB0A82C98] - 15/06/2012 - 12:52:28 ---A- . (.Ralink Corporation. - Bluelet Audio Driver.) -- C:\Windows\System32\Drivers\blueletaudio.sys [34912]
O58 - SDL:[MD5.3699C834017C8BF46C216EE407758012] - 10/07/2012 - 16:28:20 ---A- . (.Ralink Corporation - AddOn Audio SCO Driver.) -- C:\Windows\System32\Drivers\BlueletSCOAudio.sys [35936]
O58 - SDL:[MD5.B17AC10B47C7FCB44D22A1F06415840E] - 26/07/2012 - 03:28:01 ---A- . (.Microsoft Corporation - NT Lan Manager Datagram Receiver Driver.) -- C:\Windows\System32\Drivers\bowser.sys [101888]
O58 - SDL:[MD5.98487487D6B3797CA927E9D7B030AE13] - 26/07/2012 - 03:23:17 ---A- . (.Microsoft Corporation - MAC Bridge Driver.) -- C:\Windows\System32\Drivers\bridge.sys [129536]
O58 - SDL:[MD5.1CD7C6C5B2CA70AD9589FBE166CDBE61] - 27/11/2012 - 04:57:32 ---A- . (.Microsoft Corporation - Microsoft Bluetooth Audio Multiprofile Manager.) -- C:\Windows\System32\Drivers\BtaMPM.sys [18432]
O58 - SDL:[MD5.34AAF6FD68B8403E76F0D08A8C1C1DA3] - 15/06/2012 - 10:22:02 ---A- . (.IVT Corporation - Bluetooth Audio Bus Driver.) -- C:\Windows\System32\Drivers\BtAudioBus.sys [23136]
O58 - SDL:[MD5.6695200F455E251F0BCC9CE4D0978D59] - 01/06/2013 - 04:08:57 ---A- . (.Microsoft Corporation - HID de contrôle à distance audio/vidéo Bluetooth.) -- C:\Windows\System32\Drivers\BthAvrcpTg.sys [37632]
O58 - SDL:[MD5.A8B20D852B07AE19A13B5D47EC4E4C3B] - 09/01/2013 - 04:58:34 ---A- . (.Microsoft Corporation - Extension de bus Bluetooth.) -- C:\Windows\System32\Drivers\bthenum.sys [51712]
O58 - SDL:[MD5.616EB8748C988AEE98D93DA141C3D3B4] - 26/07/2012 - 03:26:13 ---A- . (.Microsoft Corporation - Bluetooth Hands-Free Audio and Call Control HID Enumerator.) -- C:\Windows\System32\Drivers\bthhfenum.sys [51200]
O58 - SDL:[MD5.DCB4EBD928A6FB368BE6CAE522412DE1] - 27/11/2012 - 04:55:44 ---A- . (.Microsoft Corporation - Minipilote HID mains libres Bluetooth.) -- C:\Windows\System32\Drivers\BthhfHid.sys [29952]
O58 - SDL:[MD5.42201C346F0B8C458E1E9CDE04D68A2C] - 26/07/2012 - 03:25:02 ---A- . (.Microsoft Corporation - Bluetooth LE Bus Enumerator.) -- C:\Windows\System32\Drivers\BthLEEnum.sys [202752]
O58 - SDL:[MD5.033916CE8784A848B9A3D686B7F66D97] - 26/07/2012 - 03:25:11 ---A- . (.Microsoft Corporation - Bluetooth Communications Driver.) -- C:\Windows\System32\Drivers\bthmodem.sys [65536]
O58 - SDL:[MD5.091BB978E9504D0AD14586929431A957] - 26/07/2012 - 03:23:42 ---A- . (.Microsoft Corporation - Bluetooth Personal Area Networking.) -- C:\Windows\System32\Drivers\bthpan.sys [119808]
O58 - SDL:[MD5.13795CAA34239D97A7211E7F9D96E012] - 01/03/2013 - 05:55:37 ---A- . (.Microsoft Corporation - Pilote de bus Bluetooth.) -- C:\Windows\System32\Drivers\bthport.sys [1175040]
O58 - SDL:[MD5.1F715957F5236D30B6020A19A4271F6A] - 09/01/2013 - 04:59:16 ---A- . (.Microsoft Corporation - Pilote de Miniport Bluetooth.) -- C:\Windows\System32\Drivers\BTHUSB.SYS [74752]
O58 - SDL:[MD5.9C09D5F1257F1748A4EAB0E8584FAF61] - 19/07/2012 - 16:47:40 ---A- . (.Ralink Corporation - Bluetooth L2CAP_SCO Interface Profile Driver.) -- C:\Windows\System32\Drivers\BtL2caScoIf.sys [56904]
O58 - SDL:[MD5.87AB5BB072A3F128541D5B815F82FFDD] - 01/12/2012 - 05:08:27 ---A- . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.) -- C:\Windows\System32\Drivers\bxvbda.sys [533224]
O58 - SDL:[MD5.990B1BABE6E81FB18E65A87EBEFB1772] - 26/07/2012 - 03:30:10 ---A- . (.Microsoft Corporation - CD-ROM File System Driver.) -- C:\Windows\System32\Drivers\cdfs.sys [108544]
O58 - SDL:[MD5.339BFF85D788268752DA8C9644B188EE] - 26/07/2012 - 03:26:36 ---A- . (.Microsoft Corporation - SCSI CD-ROM Driver.) -- C:\Windows\System32\Drivers\cdrom.sys [174080]
O58 - SDL:[MD5.F64B7D1A37CC1D5F421D5359EEC81E2E] - 26/07/2012 - 03:27:06 ---A- . (.Microsoft Corporation - Consumer IR Class Driver for eHome.) -- C:\Windows\System32\Drivers\circlass.sys [45056]
O58 - SDL:[MD5.09039F3D5A23483010AA6F5FE388F3C4] - 29/06/2013 - 06:43:16 ---A- . (.Microsoft Corporation - SCSI Class System Dll.) -- C:\Windows\System32\Drivers\Classpnp.sys [327512]
O58 - SDL:[MD5.9905168708DB68849B879B5548F68AB3] - 26/07/2012 - 05:57:54 ---A- . (.Microsoft Corporation - Common Log File System Driver.) -- C:\Windows\System32\Drivers\clfs.sys [361200]
O58 - SDL:[MD5.2DC8538A2260647484A6C921CA837313] - 26/07/2012 - 03:29:20 ---A- . (.Microsoft Corporation - Control Method Battery Driver.) -- C:\Windows\System32\Drivers\CmBatt.sys [25600]
O58 - SDL:[MD5.E708BFF0473EC6B271EA46B65B16CA56] - 19/04/2013 - 18:14:42 ---A- . (.Microsoft Corporation - Kernel Cryptography, Next Generation.) -- C:\Windows\System32\Drivers\cng.sys [562392]
O58 - SDL:[MD5.0E5B1E9E7122EDAAF1F6CE047965CA92] - 26/07/2012 - 03:28:03 ---A- . (.Microsoft Corporation - Multi-Transport Composite Bus Enumerator.) -- C:\Windows\System32\Drivers\CompositeBus.sys [36352]
O58 - SDL:[MD5.D9CB0782AF819548072AA45B70F8B22D] - 26/07/2012 - 06:26:45 ---A- . (.Microsoft Corporation - Console Driver.) -- C:\Windows\System32\Drivers\condrv.sys [33792]
O58 - SDL:[MD5.07C872F13ACC81A5F10DEC6CF37BF9A8] - 30/08/2013 - 06:43:40 ---A- . (.Microsoft Corporation - Crash Dump Driver.) -- C:\Windows\System32\Drivers\crashdmp.sys [61784]
O58 - SDL:[MD5.FAEF4C245BE832DB41B15DAAC336AFB7] - 16/08/2013 - 06:41:13 ---A- . (.Microsoft Corporation - DAM Kernel Driver.) -- C:\Windows\System32\Drivers\dam.sys [58200]
O58 - SDL:[MD5.09D9EB9E7898F8E6561473A20CC808B9] - 26/07/2012 - 03:26:53 ---A- . (.Microsoft Corporation - DFS Namespace Client Driver.) -- C:\Windows\System32\Drivers\dfsc.sys [118784]
O58 - SDL:[MD5.3C736FAE17BA6F91BA37594AAB139CD0] - 26/07/2012 - 03:28:23 ---A- . (.Microsoft Corporation - System Indexer/Cache Driver.) -- C:\Windows\System32\Drivers\discache.sys [50688]
O58 - SDL:[MD5.AE3786294CC246A5403783E1B86A0168] - 13/10/2013 - 21:49:43 ---A- . (.Microsoft Corporation - PnP Disk Driver.) -- C:\Windows\System32\Drivers\disk.sys [100696]
O58 - SDL:[MD5.AAF40EB125BED7271F05289873EC4EDB] - 26/07/2012 - 06:00:49 ---A- . (.Microsoft Corporation - Crash Dump Disk Driver.) -- C:\Windows\System32\Drivers\Diskdump.sys [36592]

O58 - SDL:[MD5.5088EFDE9EAF321551917D9E606254BE] - 26/07/2012 - 03:30:33 ---A- . (.Microsoft Corporation - Boot Over USB Dump Driver.) -- C:\Windows\System32\Drivers\Dmpusbstor.sys [16384]
O58 - SDL:[MD5.82A7C72593793FE1EADA7A305BD1567A] - 26/07/2012 - 03:25:57 ---A- . (.Microsoft Corporation - Dynamic Memory.) -- C:\Windows\System32\Drivers\dmvsc.sys [33280]
O58 - SDL:[MD5.946ECE07334A74373FAFBFAA063E62F2] - 19/04/2013 - 18:14:42 ---A- . (.Microsoft Corporation - Microsoft Trusted Audio Drivers.) -- C:\Windows\System32\Drivers\drmk.sys [111616]
O58 - SDL:[MD5.9C7C183F937951AE17C5B8B3259CF3FF] - 19/04/2013 - 18:14:42 ---A- . (.Microsoft Corporation - Microsoft Trusted Audio Drivers.) -- C:\Windows\System32\Drivers\drmkaud.sys [5632]
O58 - SDL:[MD5.15AFD3118600205B013550C8E81A0D92] - 26/07/2012 - 05:57:54 ---A- . (.Microsoft Corporation - ATAPI Dump Driver.) -- C:\Windows\System32\Drivers\Dumpata.sys [34032]
O58 - SDL:[MD5.CB9EAD11F3312C77CE9B7F29B59C3A39] - 01/12/2012 - 05:09:24 ---A- . (.Microsoft Corporation - Bitlocker Drive Encryption Crashdump Filter.) -- C:\Windows\System32\Drivers\dumpfve.sys [62488]
O58 - SDL:[MD5.DD7B107B2BB3EE845F57315EF4ECAC9A] - 29/06/2013 - 07:15:47 ---A- . (.Microsoft Corporation - SD Crashdump Port Driver.) -- C:\Windows\System32\Drivers\dumpsd.sys [125784]
O58 - SDL:[MD5.E6AF4DF1817953D73C519B17CF849756] - 19/09/2013 - 08:32:10 ---A- . (.Microsoft Corporation - DirectX Graphics Kernel.) -- C:\Windows\System32\Drivers\dxgkrnl.sys [1455448]
O58 - SDL:[MD5.28619B6E5A37F71AE1145643949CFA60] - 10/01/2013 - 02:40:38 ---A- . (.Microsoft Corporation - DirectX Graphics MMS.) -- C:\Windows\System32\Drivers\dxgmms1.sys [303848]
O58 - SDL:[MD5.66D60BD9A4C05616ABECA2A901475098] - 26/07/2012 - 06:00:51 ---A- . (.Microsoft Corporation - Enhanced Storage Class driver for IEEE 1667 devices.) -- C:\Windows\System32\Drivers\EhStorClass.sys [81136]
O58 - SDL:[MD5.A61D0F543024E458C0FE32352E1978E2] - 26/07/2012 - 06:00:51 ---A- . (.Microsoft Corporation - Microsoft driver for storage devices supporting IEEE 1667 and T.) -- C:\Windows\System32\Drivers\EhStorTcgDrv.sys [113904]
O58 - SDL:[MD5.D790D058D67582DB9C84C2D33695FE6B] - 26/07/2012 - 03:27:13 ---A- . (.Microsoft Corporation - Error Device Driver.) -- C:\Windows\System32\Drivers\errdev.sys [10240]
O58 - SDL:[MD5.5AB97B3282D7D6114949D1EB5C8598E4] - 01/12/2012 - 05:08:27 ---A- . (.Broadcom Corporation - Broadcom NetXtreme II 10 GigE VBD.) -- C:\Windows\System32\Drivers\evbda.sys [3265256]
O58 - SDL:[MD5.7A4D6FEB8C52B3FE855E4DCDF9107E03] - 26/07/2012 - 03:30:22 ---A- . (.Microsoft Corporation - Microsoft Extended FAT File System.) -- C:\Windows\System32\Drivers\exfat.sys [194560]
O58 - SDL:[MD5.60996602A7111FD2D086E803F33E4282] - 26/07/2012 - 05:59:32 ---A- . (.Microsoft Corporation - Fast FAT File System Driver.) -- C:\Windows\System32\Drivers\fastfat.sys [210672]
O58 - SDL:[MD5.73B2D11DF0B6E03A0CB0323218ACB3E4] - 26/07/2012 - 03:30:15 ---A- . (.Microsoft Corporation - Floppy Disk Controller Driver.) -- C:\Windows\System32\Drivers\fdc.sys [30720]
O58 - SDL:[MD5.88A9EBACD1058ABB237A6B4E96E7F397] - 26/07/2012 - 05:59:32 ---A- . (.Microsoft Corporation - FileInfo Filter Driver.) -- C:\Windows\System32\Drivers\fileinfo.sys [71920]
O58 - SDL:[MD5.9E4EE3A0B00FF7D5F42A4AF9744CBA02] - 26/07/2012 - 03:29:09 ---A- . (.Microsoft Corporation - File Trace Filter Driver.) -- C:\Windows\System32\Drivers\filetrace.sys [34816]
O58 - SDL:[MD5.B1D4C168FF7B8579E3745888658FFB1D] - 26/07/2012 - 03:30:15 ---A- . (.Microsoft Corporation - Floppy Driver.) -- C:\Windows\System32\Drivers\flpydisk.sys [24576]
O58 - SDL:[MD5.B33EC133AE4E6C1881D2302D93D2467D] - 26/07/2012 - 06:26:46 ---A- . (.Microsoft Corporation - Gestionnaire de filtres de système de fichiers Microsoft.) -- C:\Windows\System32\Drivers\fltMgr.sys [374512]
O58 - SDL:[MD5.A5F7873A39E4E9FAAAE59B7E9E36B705] - 26/07/2012 - 05:59:32 ---A- . (.Microsoft Corporation - File System Dependency Manager Mini Filter Driver.) -- C:\Windows\System32\Drivers\fsdepends.sys [57584]
O58 - SDL:[MD5.A6DD7D491F587F4BC13FB972977DC8E8] - 26/07/2012 - 06:26:46 ---A- . (.Microsoft Corporation - File System Recognizer Driver.) -- C:\Windows\System32\Drivers\fs_rec.sys [25328]
O58 - SDL:[MD5.C1646A95EAC515F60CDB2A7A8A013C1E] - 21/08/2013 - 07:39:29 ---A- . (.Microsoft Corporation - BitLocker Drive Encryption Driver.) -- C:\Windows\System32\Drivers\fvevol.sys [465240]
O58 - SDL:[MD5.36E2B5A5AC7688FFB3270F57103507D2] - 02/03/2013 - 10:59:36 ---A- . (.Microsoft Corporation - FWP/IPsec Kernel-Mode API.) -- C:\Windows\System32\Drivers\FWPKCLNT.SYS [411880]
O58 - SDL:[MD5.A969D92973DFA895E7776B4BFE36DBB2] - 19/04/2013 - 18:18:28 ---A- . (.Microsoft Corporation - Processor Driver.) -- C:\Windows\System32\Drivers\fxppm.sys [22528]
O58 - SDL:[MD5.52BC441E07A827EBAB70CDC7EAEDB28D] - 26/07/2012 - 06:00:52 ---A- . (.Microsoft Corporation - Filtre AGPv3.0 générique Microsoft pour plateformes de processe.) -- C:\Windows\System32\Drivers\GAGP30KX.SYS [66800]
O58 - SDL:[MD5.7D87B5B6C7188D553E11B59DC7F0B111] - 01/12/2012 - 05:08:28 ---A- . (.Microsoft Corporation - High Definition Audio Bus Driver.) -- C:\Windows\System32\Drivers\hdaudbus.sys [71168]
O58 - SDL:[MD5.630555943E5A3FE21010CE91EC7FC84F] - 26/06/2013 - 03:59:34 ---A- . (.Microsoft Corporation - High Definition Audio Function Driver.) -- C:\Windows\System32\Drivers\HdAudio.sys [341504]
O58 - SDL:[MD5.772A1DEEDFDBC244183B5C805D1B7D85] - 03/07/2012 - 00:16:02 ---A- . (.Intel Corporation - Intel(R) Management Engine Interface.) -- C:\Windows\System32\Drivers\HECIx64.sys [62784]
O58 - SDL:[MD5.3F76BBA53D65E85A7F53E7A71082082C] - 26/07/2012 - 03:28:45 ---A- . (.Microsoft Corporation - Hid Battery Driver.) -- C:\Windows\System32\Drivers\hidbatt.sys [27136]
O58 - SDL:[MD5.085F150D002B7F0153D3C06DDF33A143] - 09/04/2013 - 03:34:30 ---A- . (.Microsoft Corporation - Pilote de miniport Bluetooth pour les périphériques HID.) -- C:\Windows\System32\Drivers\hidbth.sys [95744]
O58 - SDL:[MD5.2C2A9A4D53DC90A5195BB51F0A4B1E21] - 29/06/2013 - 04:07:13 ---A- . (.Microsoft Corporation - Hid Class Library.) -- C:\Windows\System32\Drivers\hidclass.sys [83968]
O58 - SDL:[MD5.CC4A07E51D89575CAB6F4EB590D87CD4] - 20/11/2012 - 05:54:31 ---A- . (.Microsoft Corporation - I2C HID Miniport Driver.) -- C:\Windows\System32\Drivers\hidi2c.sys [39936]
O58 - SDL:[MD5.DC96F7DACB777CDEAEF9958A50BFDA06] - 26/07/2012 - 03:29:06 ---A- . (.Microsoft Corporation - Infrared Miniport Driver for Input Devices.) -- C:\Windows\System32\Drivers\hidir.sys [46080]
O58 - SDL:[MD5.346DEF1A9DB0B4133CE0FA38AAF565C0] - 29/06/2013 - 04:08:18 ---A- . (.Microsoft Corporation - Hid Parsing Library.) -- C:\Windows\System32\Drivers\hidparse.sys [32768]
O58 - SDL:[MD5.012C354B4AB48E9A7A657DF39E3A2073] - 04/05/2013 - 05:48:26 ---A- . (.Microsoft Corporation - USB Miniport Driver for Input Devices.) -- C:\Windows\System32\Drivers\hidusb.sys [27648]
O58 - SDL:[MD5.0C28C65207A2BD4C737A5BCDAB26A430] - 23/08/2012 - 08:45:42 ---A- . (.Hewlett-Packard Company - HP Disk Filter - SATA/RAID.) -- C:\Windows\System32\Drivers\hpdskflt.sys [29600]
O58 - SDL:[MD5.64DB7A8D97CA53DCCF93D0A1E08342CF] - 26/07/2012 - 06:00:52 ---A- . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Driver.) -- C:\Windows\System32\Drivers\HpSAMD.sys [64752]
O58 - SDL:[MD5.F4A91D985EB9D1D2717D538F3424603C] - 15/03/2013 - 01:17:18 ---A- . (.Microsoft Corporation - HTTP Pile du protocole.) -- C:\Windows\System32\Drivers\http.sys [861184]
O58 - SDL:[MD5.2A98301068801700906C06649860FE94] - 26/07/2012 - 05:57:57 ---A- . (.Microsoft Corporation - Hardware Policy Driver.) -- C:\Windows\System32\Drivers\hwpolicy.sys [24816]
O58 - SDL:[MD5.DC76901D82097C9E297F20C287CB9A27] - 26/07/2012 - 03:27:01 ---A- . (.Microsoft Corporation - Microsoft VMBus Synthetic Keyboard Driver.) -- C:\Windows\System32\Drivers\hyperkbd.sys [11776]
O58 - SDL:[MD5.716413AB3CA12DE0A7222D28C1C9352C] - 26/07/2012 - 03:29:03 ---A- . (.Microsoft Corporation - Microsoft VMBus Video Device Miniport Driver.) -- C:\Windows\System32\Drivers\HyperVideo.sys [24576]
O58 - SDL:[MD5.C9E9CBF73AFFBFE3E801EFB516787BA3] - 26/07/2012 - 03:28:51 ---A- . (.Microsoft Corporation - Pilote de port i8042.) -- C:\Windows\System32\Drivers\i8042prt.sys [112640]
O58 - SDL:[MD5.C02FC4C6C411C85F209EBD0EBBF8CAE9] - 29/09/2012 - 10:37:04 ---A- . (.Intel Corporation - Intel Rapid Storage Technology driver - x64.) -- C:\Windows\System32\Drivers\iaStorA.sys [650808]
O58 - SDL:[MD5.5E394EBD26FD68AA9300332C46BEDD62] - 26/07/2012 - 06:00:52 ---A- . (.Intel Corporation - Intel Matrix Storage Manager driver - x64.) -- C:\Windows\System32\Drivers\iaStorV.sys [411888]
O58 - SDL:[MD5.A1CF07D24EDCDC6870535471654D957C] - 02/11/2012 - 11:56:00 ---A- . (.Intel Corporation - Intel Graphics Kernel Mode Driver.) -- C:\Windows\System32\Drivers\igdkmd64.sys [5343584]
O58 - SDL:[MD5.24847A06B84339FEEDE5CABF3D27D320] - 26/07/2012 - 06:00:52 ---A- . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\System32\Drivers\iirsp.sys [45296]
O58 - SDL:[MD5.F5495B38BFB9149925F54F65AB40EFBF] - 20/06/2012 - 07:40:52 ---A- . (.Intel(R) Corporation - Intel(R) Display Audio Driver.) -- C:\Windows\System32\Drivers\IntcDAud.sys [342528]
O58 - SDL:[MD5.4F37726CF764CA18A8A84F85EF3A7F24] - 26/07/2012 - 06:00:52 ---A- . (.Microsoft Corporation - Intel PCI IDE Driver.) -- C:\Windows\System32\Drivers\intelide.sys [18672]
O58 - SDL:[MD5.E15CDF68DD73423F15D4AC404793AF0D] - 19/04/2013 - 18:18:28 ---A- . (.Microsoft Corporation - Processor Device Driver.) -- C:\Windows\System32\Drivers\intelppm.sys [89088]
O58 - SDL:[MD5.8FCA66234A0933D796BB780B7953BAB9] - 26/07/2012 - 03:23:03 ---A- . (.Microsoft Corporation - IP FILTER DRIVER.) -- C:\Windows\System32\Drivers\ipfltdrv.sys [89088]
O58 - SDL:[MD5.6E98A046A12AA113F8898AA5D612BD6E] - 26/07/2012 - 03:28:18 ---A- . (.Microsoft Corporation - PILOT IPMI WMI.) -- C:\Windows\System32\Drivers\IPMIDrv.sys [78336]
O58 - SDL:[MD5.3969B9C218DD3FAA9F4ED2FFC3651C02] - 26/07/2012 - 03:23:01 ---A- . (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\System32\Drivers\ipnat.sys [145920]
O58 - SDL:[MD5.C86B3666FFF4632B910EA37A2D89F9FA] - 26/07/2012 - 03:26:20 ---A- . (.Microsoft Corporation - IRDA Protocol Driver.) -- C:\Windows\System32\Drivers\irda.sys [121856]
O58 - SDL:[MD5.25CD7C4BB2863FFC2B0B311F0AEBF77C] - 26/07/2012 - 03:27:55 ---A- . (.Microsoft Corporation - Infra-Red Bus Enumerator.) -- C:\Windows\System32\Drivers\irenum.sys [17920]
O58 - SDL:[MD5.4D9B9A794F22415B8C3E0CCFBE61BC7A] - 21/07/2012 - 02:09:40 ---A- . (.Intel Corporation - Intel(R) Rapid Start Technology Driver.) -- C:\Windows\System32\Drivers\irstrtdv.sys [43800]
O58 - SDL:[MD5.D940C5BB9DC92E588533C19ABCC3D2C2] - 26/07/2012 - 06:00:52 ---A- . (.Microsoft Corporation - Pilote de bus PNP ISA.) -- C:\Windows\System32\Drivers\isapnp.sys [22256]
O58 - SDL:[MD5.84E24744627E1547B02699D1DAE4BF0E] - 02/10/2012 - 09:58:14 ---A- . (.Ralink Corporation - Bluetooth Filter Driver.) -- C:\Windows\System32\Drivers\IvtUrbBtFlt.sys [48608]
O58 - SDL:[MD5.8FBD94B69D6423E20ABCD59D86368B21] - 26/07/2012 - 06:00:52 ---A- . (.Microsoft Corporation - Pilote de la classe Clavier.) -- C:\Windows\System32\Drivers\kbdclass.sys [48368]
O58 - SDL:[MD5.E88C932ABDF8185A62C8F2FC7B051FB6] - 26/07/2012 - 03:28:49 ---A- . (.Microsoft Corporation - Pilote de filtre clavier HID.) -- C:\Windows\System32\Drivers\kbdhid.sys [29184]
O58 - SDL:[MD5.FB6C185092E18011EF49989425C2AA87] - 26/07/2012 - 03:27:41 ---A- . (.Microsoft Corporation - Microsoft Kernel Debugger Network Miniport.) -- C:\Windows\System32\Drivers\kdnic.sys [18432]
O58 - SDL:[MD5.36C27EA76685391BC5CAA1FA25E29FBF] - 02/02/2013 - 08:25:52 ---A- . (.Microsoft Corporation - Kernel CSA Library.) -- C:\Windows\System32\Drivers\ks.sys [297984]
O58 - SDL:[MD5.DFA480F6DED551464F3A5B959F437800] - 01/12/2012 - 05:08:30 ---A- . (.Microsoft Corporation - Kernel Security Support Provider Interface.) -- C:\Windows\System32\Drivers\ksecdd.sys [100072]
O58 - SDL:[MD5.127FB0AAD232BAAD2C9BBACD374F4FC5] - 19/04/2013 - 18:14:42 ---A- . (.Microsoft Corporation - Kernel Security Support Provider Interface Packages.) -- C:\Windows\System32\Drivers\ksecpkg.sys [172264]
O58 - SDL:[MD5.81492FEEBF2F26455B00EE8DBAE8A1B0] - 26/07/2012 - 03:28:58 ---A- . (.Microsoft Corporation - Kernel Streaming WOW Thunk Service.) -- C:\Windows\System32\Drivers\ksthunk.sys [21376]
O58 - SDL:[MD5.CEEFD29FC551F289810B0B9381B321DC] - 26/07/2012 - 03:24:02 ---A- . (.Microsoft Corporation - Link-Layer Topology Mapper I/O Driver.) -- C:\Windows\System32\Drivers\lltdio.sys [60416]
O58 - SDL:[MD5.022CDD12161B063D7852B1075BF3FFF2] - 26/07/2012 - 06:00:52 ---A- . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\System32\Drivers\lsi_sas.sys [108784]
O58 - SDL:[MD5.07AD59D669B996F29F91817F0ECFA34F] - 26/07/2012 - 06:00:52 ---A- . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\Windows\System32\Drivers\lsi_sas2.sys [92400]
O58 - SDL:[MD5.216FB796AA4E252ACCE93B1BCB80B5EC] - 26/07/2012 - 06:00:52 ---A- . (.LSI Corporation - LSI Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\System32\Drivers\lsi_scsi.sys [116976]
O58 - SDL:[MD5.5E80530AF37102488EE980B4A92AF99F] - 26/07/2012 - 06:00:52 ---A- . (.LSI Corporation - LSI SSS PCIe/Flash Driver (StorPort).) -- C:\Windows\System32\Drivers\lsi_sss.sys [81136]
O58 - SDL:[MD5.2BDC5D711FA61307CE6190D47C956368] - 26/07/2012 - 03:29:14 ---A- . (.Microsoft Corporation - Pilote de filtre de virtualisation de fichier LUA.) -- C:\Windows\System32\Drivers\luafv.sys [134144]
O58 - SDL:[MD5.17537EA21802970C81045D26D4536F34] - 26/07/2012 - 03:29:05 ---A- . (.Microsoft Corporation - Medium changer class driver.) -- C:\Windows\System32\Drivers\mcd.sys [22016]
O58 - SDL:[MD5.9B0D829C3BE4E7472DB9DD2B79908E3C] - 26/07/2012 - 06:00:52 ---A- . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows.) -- C:\Windows\System32\Drivers\megasas.sys [51952]
O58 - SDL:[MD5.ECC3F54C7AFC318271C4F0B4606D8DB0] - 26/07/2012 - 06:00:52 ---A- . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\System32\Drivers\MegaSR.sys [353008]
O58 - SDL:[MD5.780098AD5DA8A4822E2563984C85EF7B] - 26/07/2012 - 03:30:07 ---A- . (.Microsoft Corporation - Pilote de périphérique modem.) -- C:\Windows\System32\Drivers\modem.sys [40448]
O58 - SDL:[MD5.EA8EAD3F5B762F889CC7F3966625B48B] - 01/03/2013 - 05:56:18 ---A- . (.Microsoft Corporation - Monitor Driver.) -- C:\Windows\System32\Drivers\monitor.sys [30720]
O58 - SDL:[MD5.618446B98C79776654340CE27C73485E] - 26/07/2012 - 06:00:55 ---A- . (.Microsoft Corporation - Pilote de la classe Souris.) -- C:\Windows\System32\Drivers\mouclass.sys [45808]
O58 - SDL:[MD5.C0ADEBED913295803B579ED288936CBB] - 02/03/2013 - 03:15:53 ---A- . (.Microsoft Corporation - Pilote de filtre souris HID.) -- C:\Windows\System32\Drivers\mouhid.sys [26112]
O58 - SDL:[MD5.89D263DBF08119CE16273991C120D6DD] - 26/07/2012 - 06:26:45 ---A- . (.Microsoft Corporation - Gestionnaire des points de montage.) -- C:\Windows\System32\Drivers\mountmgr.sys [93936]
O58 - SDL:[MD5.4CCBBD4944777CA100B9A6C2F149A46F] - 31/10/2013 - 04:42:19 ---A- . (.Microsoft Corporation - Microsoft Protection Service Driver.) -- C:\Windows\System32\Drivers\mpsdrv.sys [74752]
O58 - SDL:[MD5.3D70147F55F1EC84EB9139ED7FFE48BC] - 26/07/2012 - 03:26:02 ---A- . (.Microsoft Corporation - Windows NT WebDav Minirdr.) -- C:\Windows\System32\Drivers\mrxdav.sys [141312]
O58 - SDL:[MD5.93179D48066918323628CB016D8C94DC] - 05/02/2013 - 23:29:09 ---A- . (.Microsoft Corporation - Minirdr SMB Windows NT.) -- C:\Windows\System32\Drivers\mrxsmb.sys [370688]
O58 - SDL:[MD5.06D5F2FA3C61E8EA91648EA8E9F99FD3] - 26/07/2012 - 03:23:06 ---A- . (.Microsoft Corporation - Longhorn SMB Downlevel SubRdr.) -- C:\Windows\System32\Drivers\mrxsmb10.sys [279552]
O58 - SDL:[MD5.5C7DD2E5759FFCCD2C7341C1B90F2B26] - 05/02/2013 - 23:28:36 ---A- . (.Microsoft Corporation - Longhorn SMB 2.0 Redirector.) -- C:\Windows\System32\Drivers\mrxsmb20.sys [215552]
O58 - SDL:[MD5.3886F1F2A4D2900ABAA7E4486BEEE6A2] - 26/07/2012 - 06:26:46 ---A- . (.Microsoft Corporation - Mailslot driver.) -- C:\Windows\System32\Drivers\msfs.sys [26112]
O58 - SDL:[MD5.FC2B8B06BDBD3B6457F5A3DA9AD2410E] - 09/07/2013 - 09:04:07 ---A- . (.Microsoft Corporation - GPIO Class Extension Driver.) -- C:\Windows\System32\Drivers\msgpioclx.sys [120144]
O58 - SDL:[MD5.C32A7A39B960A42BA9D4FBE47213CA03] - 10/01/2013 - 02:53:32 ---A- . (.Microsoft Corporation - GPIO Button Driver.) -- C:\Windows\System32\Drivers\msgpiowin32.sys [28904]
O58 - SDL:[MD5.D3857A767B91A061B408CCAB02DA4F40] - 26/07/2012 - 03:29:25 ---A- . (.Microsoft Corporation - Pass-through HID to KMDF Filter Driver.) -- C:\Windows\System32\Drivers\mshidkmdf.sys [8704]
O58 - SDL:[MD5.839B48910FB1E887635C48F3EC11A05E] - 26/07/2012 - 03:29:14 ---A- . (.Microsoft Corporation - Pilote direct pour interface HID-UMDF.) -- C:\Windows\System32\Drivers\mshidumdf.sys [10752]
O58 - SDL:[MD5.55C0DB741E3AB7463242B185B1C2997C] - 26/07/2012 - 06:00:55 ---A- . (.Microsoft Corporation - ISA Driver.) -- C:\Windows\System32\Drivers\msisadrv.sys [17136]
O58 - SDL:[MD5.69C8BF0BC2B0EA10F130F4D3104DC2EF] - 19/04/2013 - 18:18:28 ---A- . (.Microsoft Corporation - Microsoft iSCSI Initiator Driver.) -- C:\Windows\System32\Drivers\msiscsi.sys [277736]
O58 - SDL:[MD5.509809566E49F4411055864EA8D437CD] - 26/07/2012 - 03:28:55 ---A- . (.Microsoft Corporation - MS KS Server.) -- C:\Windows\System32\Drivers\mskssrv.sys [11008]
O58 - SDL:[MD5.63145201D6458E4958E572E7D6FC2604] - 26/07/2012 - 03:23:53 ---A- . (.Microsoft Corporation - Pilote de protocole LLDP (Link Layer Discovery Protocol) Micros.) -- C:\Windows\System32\Drivers\mslldp.sys [68608]
O58 - SDL:[MD5.99D526E803DB6D7FF290FD98B6204641] - 26/07/2012 - 03:28:56 ---A- . (.Microsoft Corporation - MS Proxy Clock.) -- C:\Windows\System32\Drivers\mspclock.sys [7168]
O58 - SDL:[MD5.06FA77C3E2A491ADCD704C5E73006269] - 26/07/2012 - 03:28:57 ---A- . (.Microsoft Corporation - MS Proxy Quality Manager.) -- C:\Windows\System32\Drivers\mspqm.sys [6912]
O58 - SDL:[MD5.E134EC4DE11CF78CB01432D180710D84] - 26/07/2012 - 06:26:46 ---A- . (.Microsoft Corporation - Kernel Remote Procedure Call Provider.) -- C:\Windows\System32\Drivers\msrpc.sys [390896]
O58 - SDL:[MD5.B5AECF12F09DEE97C9FCAA5BA016CE1E] - 26/07/2012 - 05:59:34 ---A- . (.Microsoft Corporation - System Management BIOS Driver.) -- C:\Windows\System32\Drivers\mssmbios.sys [37616]
O58 - SDL:[MD5.72D66A05E0F99F2528F6C6204FD22AA1] - 26/07/2012 - 03:27:37 ---A- . (.Microsoft Corporation - WDM Tee/Communication Transform Filter.) -- C:\Windows\System32\Drivers\mstee.sys [8192]
O58 - SDL:[MD5.8AAAE399FC255FA105D4158CBA289001] - 26/07/2012 - 03:26:11 ---A- . (.Microsoft Corporation - Pilote HID multipoint Microsoft.) -- C:\Windows\System32\Drivers\MTConfig.sys [14848]
O58 - SDL:[MD5.3BCB702F3E6CC622DCAFCAA45D7CDE0A] - 26/07/2012 - 05:59:34 ---A- . (.Microsoft Corporation - Multiple UNC Provider Driver.) -- C:\Windows\System32\Drivers\mup.sys [83696]
O58 - SDL:[MD5.3A1E095277BBD406CEA8EA6B76950664] - 26/07/2012 - 06:00:55 ---A- . (.Marvell Semiconductor, Inc. - Marvell Flash Controller Driver.) -- C:\Windows\System32\Drivers\mvumis.sys [64240]
O58 - SDL:[MD5.A10E176F3B2BF83EDE7B5C4658C93B66] - 16/06/2013 - 23:41:31 ---A- . (.Microsoft Corporation - Pilote NDIS 6.30.) -- C:\Windows\System32\Drivers\ndis.sys [997632]
O58 - SDL:[MD5.39C8A1D9D46F5E83A016BCAB72455284] - 26/07/2012 - 03:27:30 ---A- . (.Microsoft Corporation - Microsoft NDIS Packet Capture Filter Driver.) -- C:\Windows\System32\Drivers\ndiscap.sys [46592]
O58 - SDL:[MD5.762941932B7E4C588E48A577BA9D6440] - 26/07/2012 - 03:25:01 ---A- . (.Microsoft Corporation - Microsoft Network Adapter Multiplexor.) -- C:\Windows\System32\Drivers\NdisImPlatform.sys [126464]
O58 - SDL:[MD5.7A6F8A6D0E01432EBA294EF29CDD0FA7] - 01/12/2012 - 05:09:11 ---A- . (.Microsoft Corporation - NDIS 3.0 connection wrapper driver.) -- C:\Windows\System32\Drivers\ndistapi.sys [25088]
O58 - SDL:[MD5.79AB68BB3FFF974AD4F41FA559F4EC67] - 26/07/2012 - 03:26:21 ---A- . (.Microsoft Corporation - Pilote d’E/S du mode utilisateur NDIS.) -- C:\Windows\System32\Drivers\ndisuio.sys [58880]
O58 - SDL:[MD5.62C7DBF4F9301F76CF87D4B9D8F57BF8] - 26/07/2012 - 03:23:14 ---A- . (.Microsoft Corporation - MS PPP Framing Driver (Strong Encryption).) -- C:\Windows\System32\Drivers\ndiswan.sys [174080]
O58 - SDL:[MD5.3730942D7DB2F8BB5F84542B7FF6F650] - 09/04/2013 - 03:33:41 ---A- . (.Microsoft Corporation - NDIS Proxy.) -- C:\Windows\System32\Drivers\ndproxy.sys [60416]
O58 - SDL:[MD5.D3F60A4345FCA9C1BE68AD7D0D6DE770] - 26/07/2012 - 03:23:42 ---A- . (.Microsoft Corporation - Windows Network Data Usage Monitoring Driver.) -- C:\Windows\System32\Drivers\Ndu.sys [97792]
O58 - SDL:[MD5.7C203A76394F9AE68F69EEE5F9612C4A] - 26/07/2012 - 03:28:19 ---A- . (.Microsoft Corporation - NetBIOS interface driver.) -- C:\Windows\System32\Drivers\netbios.sys [46080]
O58 - SDL:[MD5.7CEC25C682D319D484630B3952C31A11] - 26/07/2012 - 03:24:28 ---A- . (.Microsoft Corporation - MBT Transport driver.) -- C:\Windows\System32\Drivers\netbt.sys [331776]
O58 - SDL:[MD5.8379D073110F059415B90B7CDCAF836A] - 19/04/2013 - 18:14:42 ---A- . (.Microsoft Corporation - Network I/O Subsystem.) -- C:\Windows\System32\Drivers\netio.sys [441576]
O58 - SDL:[MD5.080417AC9E51B2B29656EC26B62E87F1] - 15/04/2013 - 07:02:04 ---A- . (.Ralink Technology, Corp. - Ralink 802.11 Wireless Adapter Driver.) -- C:\Windows\System32\Drivers\netr28x.sys [2482960]
O58 - SDL:[MD5.12DD2800E4EEA37DC9AE256AD62423B4] - 26/07/2012 - 06:00:55 ---A- . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\System32\Drivers\nfrd960.sys [52464]
O58 - SDL:[MD5.17E19A742FB30C002F8B43575451DBE1] - 26/07/2012 - 06:26:46 ---A- . (.Microsoft Corporation - NPFS Driver.) -- C:\Windows\System32\Drivers\npfs.sys [49152]
O58 - SDL:[MD5.8ED299C30792544264E558BEA79F0947] - 26/07/2012 - 03:27:33 ---A- . (.Microsoft Corporation - Named pipe service triggers.) -- C:\Windows\System32\Drivers\npsvctrig.sys [23552]
O58 - SDL:[MD5.689B3B1E95C70ABF7AFF29F9406EF1E0] - 26/07/2012 - 06:26:47 ---A- . (.Microsoft Corporation - NSI Proxy.) -- C:\Windows\System32\Drivers\nsiproxy.sys [34304]
O58 - SDL:[MD5.76929F4A69E425911A63B407E26C2589] - 02/02/2013 - 11:54:54 ---A- . (.Microsoft Corporation - Pilote du système de fichiers NT.) -- C:\Windows\System32\Drivers\ntfs.sys [1933544]
O58 - SDL:[MD5.4163ADE07DB51843AE31F65B94F5398D] - 26/07/2012 - 06:26:46 ---A- . (.Microsoft Corporation - NULL Driver.) -- C:\Windows\System32\Drivers\null.sys [5632]
O58 - SDL:[MD5.D6D34118263412D3AAA8348A9572B7F2] - 26/07/2012 - 06:00:55 ---A- . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\System32\Drivers\nvraid.sys [150256]
O58 - SDL:[MD5.27AFC428D1D32ABD04A86763A4EDDEA9] - 26/07/2012 - 06:00:55 ---A- . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\System32\Drivers\nvstor.sys [168176]
O58 - SDL:[MD5.051CFB5107BAAE510419BDC41F8C4036] - 26/07/2012 - 06:00:55 ---A- . (.Microsoft Corporation - Filtre AGP NForce NT.) -- C:\Windows\System32\Drivers\NV_AGP.SYS [125168]
O58 - SDL:[MD5.43D7388A90A4C6EA346A4D6FF0377479] - 26/07/2012 - 03:25:11 ---A- . (.Microsoft Corporation - Pilote de miniport WiFi natif.) -- C:\Windows\System32\Drivers\nwifi.sys [427520]
O58 - SDL:[MD5.EB8034147D4820CD31BFCB11A2A652DF] - 26/07/2012 - 03:23:06 ---A- . (.Microsoft Corporation - Planificateur de paquets QoS.) -- C:\Windows\System32\Drivers\pacer.sys [145408]
O58 - SDL:[MD5.4563DAF8C6A740AD7F501E219BD10766] - 26/07/2012 - 03:29:53 ---A- . (.Microsoft Corporation - Pilote de port parallèle.) -- C:\Windows\System32\Drivers\parport.sys [105984]
O58 - SDL:[MD5.D6ACCF9F2EEEEA711C14EFD976E573F3] - 10/01/2013 - 02:29:56 ---A- . (.Microsoft Corporation - Partition Management Driver.) -- C:\Windows\System32\Drivers\partmgr.sys [91880]
O58 - SDL:[MD5.4A003E8F718C1E6A2050CA98CD53E3E2] - 26/07/2012 - 06:00:55 ---A- . (.Microsoft Corporation - Énumérateur Plug-and-Play PCI pour NT.) -- C:\Windows\System32\Drivers\pci.sys [234224]
O58 - SDL:[MD5.F9908D274D458220F91E89B54D78D837] - 26/07/2012 - 06:00:55 ---A- . (.Microsoft Corporation - Generic PCI IDE Bus Driver.) -- C:\Windows\System32\Drivers\pciide.sys [14064]
O58 - SDL:[MD5.77354E5354C4036A24F218F47558243D] - 26/07/2012 - 06:00:55 ---A- . (.Microsoft Corporation - PCI IDE Bus Driver Extension.) -- C:\Windows\System32\Drivers\pciidex.sys [49904]
O58 - SDL:[MD5.84D19CB6102627932DCB5DFDF89FE269] - 26/07/2012 - 05:59:34 ---A- . (.Microsoft Corporation - Pilote de bus PCMCIA.) -- C:\Windows\System32\Drivers\pcmcia.sys [237808]
O58 - SDL:[MD5.CEBBAD5391C2644560C55628A40BFD27] - 26/07/2012 - 05:58:00 ---A- . (.Microsoft Corporation - Performance Counters for Windows Driver.) -- C:\Windows\System32\Drivers\pcw.sys [52464]
O58 - SDL:[MD5.0698DEDEAD6A00AD0D468C687D830FBF] - 02/03/2013 - 11:39:38 ---A- . (.Microsoft Corporation - Power Dependency Coordinator Driver.) -- C:\Windows\System32\Drivers\pdc.sys [69864]
O58 - SDL:[MD5.61FE70659CD43E07F94DA4DC31DEC493] - 09/04/2013 - 03:32:02 ---A- . (.Microsoft Corporation - Protected Environment Authentication and Authorization Export D.) -- C:\Windows\System32\Drivers\PEAuth.sys [805376]
O58 - SDL:[MD5.857433889008F86728E8C099C740729D] - 28/09/2013 - 04:35:36 ---A- . (.Microsoft Corporation - Port Class (Class Driver for Port/Miniport Devices).) -- C:\Windows\System32\Drivers\portcls.sys [288768]
O58 - SDL:[MD5.DD979EB6A7212F60E4AFBE96EDC7AE6D] - 19/04/2013 - 18:18:28 ---A- . (.Microsoft Corporation - Processor Device Driver.) -- C:\Windows\System32\Drivers\processr.sys [87552]
O58 - SDL:[MD5.13D47BB0CCA2FC51BD15F8E85C6A078E] - 26/07/2012 - 03:29:00 ---A- . (.Microsoft Corporation - Pilote du support de Microsoft Quality Windows Audio Video Expe.) -- C:\Windows\System32\Drivers\qwavedrv.sys [46592]
O58 - SDL:[MD5.873C60F8178100557740A832FCE10B5F] - 26/07/2012 - 03:29:50 ---A- . (.Microsoft Corporation - RAS Automatic Connection Driver.) -- C:\Windows\System32\Drivers\rasacd.sys [16384]
O58 - SDL:[MD5.A14D625C5AEE5FFE0F47D1A1D419FAAE] - 26/07/2012 - 03:23:17 ---A- . (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) -- C:\Windows\System32\Drivers\rasl2tp.sys [124928]
O58 - SDL:[MD5.00695B9C2DB6111064499C529E90C042] - 26/07/2012 - 03:24:56 ---A- . (.Microsoft Corporation - RAS PPPoE mini-port/call-manager driver.) -- C:\Windows\System32\Drivers\raspppoe.sys [81920]
O58 - SDL:[MD5.362D47E5B4D67270DE4B8606036F4ADD] - 26/07/2012 - 03:23:14 ---A- . (.Microsoft Corporation - Peer-to-Peer Tunneling Protocol.) -- C:\Windows\System32\Drivers\raspptp.sys [114176]
O58 - SDL:[MD5.A7F24D8CD1956B0A1FDCB86CC5114DE4] - 26/07/2012 - 03:23:59 ---A- . (.Microsoft Corporation - RAS SSTP Miniport Call Manager.) -- C:\Windows\System32\Drivers\rassstp.sys [92672]
O58 - SDL:[MD5.CA03D642ACE58E1BA54E4B383F91CD69] - 04/05/2013 - 05:47:02 ---A- . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire tampon de lecteur red.) -- C:\Windows\System32\Drivers\rdbss.sys [427520]
O58 - SDL:[MD5.CA7DF5EC95D8DE0DD24BE7FF97369F68] - 26/07/2012 - 03:28:19 ---A- . (.Microsoft Corporation - Microsoft RDP Bus Device driver.) -- C:\Windows\System32\Drivers\rdpbus.sys [22528]
O58 - SDL:[MD5.B2A3AD74FF2E2FFA73AF2567108231B3] - 26/07/2012 - 03:25:18 ---A- . (.Microsoft Corporation - Redirecteur de périphérique de Microsoft RDP.) -- C:\Windows\System32\Drivers\rdpdr.sys [179712]
O58 - SDL:[MD5.57F4787E4602A3FCA719C0A33137C6DA] - 19/04/2013 - 18:05:59 ---A- . (.Microsoft Corporation - Microsoft RDP Video Miniport driver.) -- C:\Windows\System32\Drivers\rdpvideominiport.sys [27880]
O58 - SDL:[MD5.B3CB0721E81E30419CE7D837EF4EA151] - 26/07/2012 - 03:23:24 ---A- . (.Microsoft Corporation - Pilote de pile RDP Terminal.) -- C:\Windows\System32\Drivers\rdpwd.sys [208384]
O58 - SDL:[MD5.62C1F8A0685FE07E998AA296C4F697C4] - 26/07/2012 - 05:59:35 ---A- . (.Microsoft Corporation - ReadyBoost Driver.) -- C:\Windows\System32\Drivers\rdyboost.sys [217328]
O58 - SDL:[MD5.CCBFCABDFE2BC22F0645CEAADDB36004] - 01/03/2013 - 05:56:33 ---A- . (.Microsoft Corporation - Bluetooth RFCOMM Driver.) -- C:\Windows\System32\Drivers\rfcomm.sys [156672]
O58 - SDL:[MD5.1BEF8DE70AFB9DD3847616FAD187B874] - 26/07/2012 - 03:25:01 ---A- . (.Microsoft Corporation - Reliable Multicast Transport.) -- C:\Windows\System32\Drivers\rmcast.sys [146944]
O58 - SDL:[MD5.4365FAA7D0B5076AFEBDED7D275D742D] - 26/07/2012 - 03:27:53 ---A- . (.Microsoft Corporation - Remote NDIS Miniport.) -- C:\Windows\System32\Drivers\RNDISMP.sys [32768]
O58 - SDL:[MD5.FB582B72D33DCF1E6E4F2336E69160BF] - 26/07/2012 - 03:30:23 ---A- . (.Microsoft Corporation - Legacy Non-Pnp Modem Device Driver.) -- C:\Windows\System32\Drivers\rootmdm.sys [11776]
O58 - SDL:[MD5.E04E770DD198B9399640717145E79EBF] - 26/07/2012 - 03:24:06 ---A- . (.Microsoft Corporation - Link-Layer Topology Responder Driver for NDIS 6.) -- C:\Windows\System32\Drivers\rspndr.sys [78848]
O58 - SDL:[MD5.34DA0D14F5C3F1883A331AFB975AB434] - 01/08/2012 - 00:04:12 ---A- . (.Realtek - Realtek 8101E/8168/8169 NDIS 6.30 64-bit Driver.) -- C:\Windows\System32\Drivers\Rt630x64.sys [690832]
O58 - SDL:[MD5.642FE16CC7DE75870729C5C800E507D7] - 02/10/2012 - 15:44:02 ---A- . (.Ralink Technology, Corp. - Ralink Bluetooth Adapter.) -- C:\Windows\System32\Drivers\rtbth.sys [692832]
O58 - SDL:[MD5.FFA2C811E65EC0989861BB4AD91B93A1] - 19/09/2012 - 23:10:02 ---A- . (.Realtek Semiconductor Corp. - Realtek Pcie CardReader Driver for 2K/XP/Vista/Win7/Win8.) -- C:\Windows\System32\Drivers\RtsBaStor.sys [298128]
O58 - SDL:[MD5.9C7B28CE0D136DB226E24DB3BC817F92] - 26/07/2012 - 05:58:00 ---A- . (.Microsoft Corporation - SBP-2 Protocol Driver.) -- C:\Windows\System32\Drivers\sbp2port.sys [107760]
O58 - SDL:[MD5.5D7733A12756B267FCA021672B26BC9E] - 26/07/2012 - 03:28:05 ---A- . (.Microsoft Corporation - Pilote de filtre de lecteur de carte à puce Microsoft.) -- C:\Windows\System32\Drivers\scfilter.sys [36864]
O58 - SDL:[MD5.5FADE733D99A65C5A4C300D6A89817BD] - 26/07/2012 - 06:00:56 ---A- . (.Microsoft Corporation - SCSI Port Driver.) -- C:\Windows\System32\Drivers\scsiport.sys [172784]
O58 - SDL:[MD5.F58B030A0664385C707B8C1C63682041] - 29/06/2013 - 07:15:54 ---A- . (.Microsoft Corporation - Pilote du bus numérique sécurisé (SD).) -- C:\Windows\System32\Drivers\sdbus.sys [195416]
O58 - SDL:[MD5.BB107AA9980B0DA4E19A3A90C3BD4460] - 19/04/2013 - 18:14:42 ---A- . (.Microsoft Corporation - Pilote de classe de stockage SD.) -- C:\Windows\System32\Drivers\sdstor.sys [56552]
O58 - SDL:[MD5.3EA8A16169C26AFBEB544E0E48421186] - 26/07/2012 - 09:11:43 ---A- . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\Windows\System32\Drivers\secdrv.sys [23040]
O58 - SDL:[MD5.87C46B239A7EEF30FDFDD5E9BD46130C] - 26/07/2012 - 03:26:46 ---A- . (.Microsoft Corporation - Serial Class Extension.) -- C:\Windows\System32\Drivers\SerCx.sys [62976]
O58 - SDL:[MD5.7A1F9347C85FD55E39B8A76B3A25C5AD] - 26/07/2012 - 03:30:14 ---A- . (.Microsoft Corporation - Serial Port Enumerator.) -- C:\Windows\System32\Drivers\serenum.sys [23040]
O58 - SDL:[MD5.F640A0A218BBF857F1D04A15D7D939F6] - 26/07/2012 - 03:30:01 ---A- . (.Microsoft Corporation - Pilote de périphérique série.) -- C:\Windows\System32\Drivers\serial.sys [76800]
O58 - SDL:[MD5.F1A5F56B2620B862CC28FF96A0A6DAAB] - 26/07/2012 - 03:29:50 ---A- . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\System32\Drivers\sermouse.sys [27136]
O58 - SDL:[MD5.7EE65419B29302C795714FF8073969A1] - 26/07/2012 - 03:29:47 ---A- . (.Microsoft Corporation - SCSI Floppy Driver.) -- C:\Windows\System32\Drivers\sfloppy.sys [16896]
O58 - SDL:[MD5.2560721D6F16D5B611C36A3A9D28C1B2] - 26/07/2012 - 06:00:55 ---A- . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\System32\Drivers\sisraid2.sys [44784]
O58 - SDL:[MD5.3AA8FDE1DBF65BB8B88B053529554A0D] - 26/07/2012 - 06:00:56 ---A- . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\System32\Drivers\sisraid4.sys [81648]
O58 - SDL:[MD5.2EE7FFC2A5BA50C378E511B75DB67436] - 28/09/2012 - 20:05:58 ---A- . (.Synaptics Incorporated - Synaptics SMBus Driver.) -- C:\Windows\System32\Drivers\Smb_driver_AMDASF.sys [41272]
O58 - SDL:[MD5.E3A8D21F07C7D4D26972F1A34952E188] - 28/09/2012 - 20:06:00 ---A- . (.Synaptics Incorporated - Synaptics SMBus Driver.) -- C:\Windows\System32\Drivers\Smb_driver_Intel.sys [44344]
O58 - SDL:[MD5.A94CBC3633AE6A7DD4C3032C65AC5193] - 26/07/2012 - 03:29:57 ---A- . (.Microsoft Corporation - Smart Card Driver Library.) -- C:\Windows\System32\Drivers\smclib.sys [20480]
O58 - SDL:[MD5.9110193D93960E38B8692E4519C75D72] - 05/10/2013 - 07:10:20 ---A- . (.Microsoft Corporation - Storage Spaces Driver.) -- C:\Windows\System32\Drivers\spaceport.sys [285016]
O58 - SDL:[MD5.3D8679C8DF52EB26EB7583A4E0A29202] - 26/07/2012 - 03:26:43 ---A- . (.Microsoft Corporation - SPB Class Extension.) -- C:\Windows\System32\Drivers\SpbCx.sys [59392]
O58 - SDL:[MD5.0F1FCD575A03ABDE13FCA9D0ADE4DDA6] - 26/07/2012 - 03:25:30 ---A- . (.Microsoft Corporation - Server driver.) -- C:\Windows\System32\Drivers\srv.sys [416768]
O58 - SDL:[MD5.56218A571ECF8D55E0CDFF8DF2546CF1] - 09/04/2013 - 03:33:05 ---A- . (.Microsoft Corporation - Pilote de serveur SMB 2.0.) -- C:\Windows\System32\Drivers\srv2.sys [623104]
O58 - SDL:[MD5.14FC338B80CFF7E04215133B568D15C4] - 09/04/2013 - 03:31:14 ---A- . (.Microsoft Corporation - Server Network driver.) -- C:\Windows\System32\Drivers\srvnet.sys [247808]
O58 - SDL:[MD5.955FFE2B1D74A9E0E3E0E558E6A17F3B] - 28/10/2013 - 01:12:10 ---A- . (.DEVGURU Co., LTD.(http://www.devguru.co.kr) - SAMSUNG USB Composite Device Driver (MSS Ver.3).) -- C:\Windows\System32\Drivers\ssudbus.sys [107288]
O58 - SDL:[MD5.BB94A5E2CEE5FD83BA5A72A37AECADDF] - 28/10/2013 - 01:12:12 ---A- . (.DEVGURU Co., LTD.(http://www.devguru.co.kr) - SAMSUNG Android Modem Device Driver (MSS Ver.3).) -- C:\Windows\System32\Drivers\ssudmdm.sys [204568]
O58 - SDL:[MD5.4E85355B94CFCB67C135F6521A4895A7] - 26/07/2012 - 06:00:55 ---A- . (.Promise Technology, Inc. - Promise SuperTrak EX Series Driver for Windows x64.) -- C:\Windows\System32\Drivers\stexstor.sys [30960]
O58 - SDL:[MD5.B240874B2CA0CD02E8CD11E140B14C57] - 02/03/2013 - 11:57:46 ---A- . (.Microsoft Corporation - MS AHCI Storport Miniport Driver.) -- C:\Windows\System32\Drivers\storahci.sys [77544]
O58 - SDL:[MD5.091607B272C5E7BE2DCEF2D5463A407B] - 02/03/2013 - 11:57:46 ---A- . (.Microsoft Corporation - Microsoft Storage Port Driver.) -- C:\Windows\System32\Drivers\storport.sys [332520]
O58 - SDL:[MD5.543CD3CC0E05B8D8815E0D4F040B6F59] - 26/07/2012 - 05:50:20 ---A- . (.Microsoft Corporation - Storage VSC Driver.) -- C:\Windows\System32\Drivers\storvsc.sys [37992]
O58 - SDL:[MD5.45B0ED14D5F8B76C4EF5ABEC7B978425] - 26/07/2012 - 03:28:40 ---A- . (.Microsoft Corporation - WDM CODEC Class Device Driver 2.0.) -- C:\Windows\System32\Drivers\stream.sys [69120]
O58 - SDL:[MD5.A883937A943DCE237B19E4A5558FCBE6] - 25/10/2012 - 07:53:18 ---A- . (.IDT, Inc. - IDT PC Audio.) -- C:\Windows\System32\Drivers\stwrt64.sys [543744]
O58 - SDL:[MD5.4AFD66AAE74FFB5986BC240744DC5FC9] - 26/07/2012 - 06:00:57 ---A- . (.Microsoft Corporation - Plug and Play Software Device Enumerator.) -- C:\Windows\System32\Drivers\swenum.sys [13680]
O58 - SDL:[MD5.97E11C50CE52277B377396EA8838E539] - 05/02/2014 - 18:33:12 ---A- . (.Symantec Corporation - Symantec Event Library.) -- C:\Windows\System32\Drivers\SYMEVENT64x86.SYS [177752]
O58 - SDL:[MD5.A8221D197013C4D9BC39622A18895600] - 28/09/2012 - 20:06:00 ---A- . (.Synaptics Incorporated - Synaptics Touchpad Driver.) -- C:\Windows\System32\Drivers\SynTP.sys [458040]
O58 - SDL:[MD5.E4561AFA8FB48C301F6D35DE252B7185] - 26/07/2012 - 03:29:13 ---A- . (.Microsoft Corporation - SCSI Tape Class Driver.) -- C:\Windows\System32\Drivers\tape.sys [29184]
O58 - SDL:[MD5.E8FC8A832352B6F79D84EBB74495DFB2] - 26/07/2012 - 05:59:34 ---A- . (.Microsoft Corporation - Export driver for kernel mode TPM API.) -- C:\Windows\System32\Drivers\tbs.sys [20720]
O58 - SDL:[MD5.37D85E873C9531A2F88DD9C63D3F8A9E] - 01/08/2013 - 11:41:31 ---A- . (.Microsoft Corporation - Pilote TCP/IP.) -- C:\Windows\System32\Drivers\tcpip.sys [2233688]
O58 - SDL:[MD5.8F2A13A5DF99D72FDDE87F502A66F989] - 26/07/2012 - 03:23:13 ---A- . (.Microsoft Corporation - TCP/IP Registry Compatibility Driver.) -- C:\Windows\System32\Drivers\tcpipreg.sys [45056]
O58 - SDL:[MD5.749AFA28C01233E93F59BD31B2B088B1] - 26/07/2012 - 06:26:47 ---A- . (.Microsoft Corporation - TDI Wrapper.) -- C:\Windows\System32\Drivers\tdi.sys [29696]
O58 - SDL:[MD5.73DC722CE5DF26D7638CE2446F2655C7] - 26/07/2012 - 06:26:47 ---A- . (.Microsoft Corporation - TDI Translation Driver.) -- C:\Windows\System32\Drivers\tdx.sys [117248]

Re,

Stop... http://www.forum-entraide-informatique. ... m-tutoriel

Gabriel.

J'arrête de vous envoyé le rapport?

Je dois faire ce que vous m'avez envoyé?

Re,

Oui faut l'héberger.

Gabriel.

Re,

http://cjoint.com/?3BfuLtqvmQV

http://cjoint.com/data3/3BfuLtqvmQV.htm

Re,

Voilà c'est mieux.

Passe AdwCleaner et poste le rapport : http://www.forum-entraide-informatique. ... -de-xplode

Gabriel.

Re,
voici

# AdwCleaner v3.018 - Rapport créé le 05/02/2014 à 20:57:01
# Mis à jour le 28/01/2014 par Xplode
# Système d'exploitation : Windows 8 (64 bits)
# Nom d'utilisateur : Cecilia - CECILIA
# Exécuté depuis : C:\Users\Cecilia\Downloads\adwcleaner.exe
# Option : Nettoyer

***** [ Services ] *****

Service Supprimé : BackupStack
Service Supprimé : desksvc

***** [ Fichiers / Dossiers ] *****

Dossier Supprimé : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Desk 365
Dossier Supprimé : C:\Program Files (x86)\Desk 365
Dossier Supprimé : C:\Program Files (x86)\MyPC Backup
Dossier Supprimé : C:\Program Files (x86)\Mysearchdial
Dossier Supprimé : C:\Program Files (x86)\SweetIM
Dossier Supprimé : C:\Program Files (x86)\Wajam
Dossier Supprimé : C:\Windows\SysWOW64\ARFC
Dossier Supprimé : C:\Windows\SysWOW64\jmdp
Dossier Supprimé : C:\Windows\SysWOW64\WNLT
Dossier Supprimé : C:\Users\Cecilia\AppData\Local\Wajam
Dossier Supprimé : C:\Users\Cecilia\AppData\Local\Temp\AirInstaller
Dossier Supprimé : C:\Users\Cecilia\AppData\Local\Temp\Desk365
Dossier Supprimé : C:\Users\Cecilia\AppData\LocalLow\Mysearchdial
Dossier Supprimé : C:\Users\Cecilia\AppData\LocalLow\SweetIM
Dossier Supprimé : C:\Users\Cecilia\AppData\Roaming\Desk 365
Dossier Supprimé : C:\Users\Cecilia\AppData\Roaming\Mysearchdial
Dossier Supprimé : C:\Users\Cecilia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup
Dossier Supprimé : C:\Users\Cecilia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wajam
Dossier Supprimé : C:\Users\Cecilia\AppData\Local\Google\Chrome\User Data\Default\Extensions\cekcjpgehmohobmdiikfnopibipmgnml
Dossier Supprimé : C:\Users\Cecilia\AppData\Local\Google\Chrome\User Data\Default\Extensions\ifohbjbgfchkkfhphahclmkpgejiplfo
Dossier Supprimé : C:\Users\Cecilia\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp
Fichier Supprimé : C:\Users\Public\Desktop\eBay.lnk
Fichier Supprimé : C:\Users\Cecilia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk
Fichier Supprimé : C:\Windows\System32\Tasks\Desk 365 RunAsStdUser
Fichier Supprimé : C:\Windows\Tasks\MySearchDial.job
Fichier Supprimé : C:\Windows\System32\Tasks\MySearchDial

***** [ Raccourcis ] *****


***** [ Registre ] *****

Clé Supprimée : HKLM\SOFTWARE\Google\Chrome\Extensions\ifohbjbgfchkkfhphahclmkpgejiplfo
Clé Supprimée : HKLM\SOFTWARE\Google\Chrome\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp
Valeur Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Desk 365]
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\AddonsFramework.DLL
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\ButtonSite.DLL
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\priam_bho.DLL
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\ScriptHost.DLL
Clé Supprimée : HKLM\SOFTWARE\Classes\escort.escortIEPane
Clé Supprimée : HKLM\SOFTWARE\Classes\escort.escortIEPane.1
Clé Supprimée : HKLM\SOFTWARE\Classes\esrv.mysearchdialESrvc
Clé Supprimée : HKLM\SOFTWARE\Classes\esrv.mysearchdialESrvc.1
Clé Supprimée : HKLM\SOFTWARE\Classes\mysearchdial.mysearchdialappCore
Clé Supprimée : HKLM\SOFTWARE\Classes\mysearchdial.mysearchdialappCore.1
Clé Supprimée : HKLM\SOFTWARE\Classes\mysearchdial.mysearchdialdskBnd
Clé Supprimée : HKLM\SOFTWARE\Classes\mysearchdial.mysearchdialdskBnd.1
Clé Supprimée : HKLM\SOFTWARE\Classes\mysearchdial.mysearchdialHlpr
Clé Supprimée : HKLM\SOFTWARE\Classes\mysearchdial.mysearchdialHlpr.1
Clé Supprimée : HKLM\SOFTWARE\Classes\protector_dll.protectorbho
Clé Supprimée : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1
Clé Supprimée : HKLM\SOFTWARE\Classes\SWEETIE.IEToolbar
Clé Supprimée : HKLM\SOFTWARE\Classes\SWEETIE.IEToolbar.1
Clé Supprimée : HKLM\SOFTWARE\Classes\sweetim_urlsearchhook.toolbarurlsearchhook
Clé Supprimée : HKLM\SOFTWARE\Classes\sweetim_urlsearchhook.toolbarurlsearchhook.1
Clé Supprimée : HKLM\SOFTWARE\Classes\Toolbar3.sweetie
Clé Supprimée : HKLM\SOFTWARE\Classes\Toolbar3.sweetie.1
Clé Supprimée : HKLM\SOFTWARE\Classes\wajam.WajamBHO
Clé Supprimée : HKLM\SOFTWARE\Classes\wajam.WajamBHO.1
Clé Supprimée : HKLM\SOFTWARE\Classes\wajam.WajamDownloader
Clé Supprimée : HKLM\SOFTWARE\Classes\wajam.WajamDownloader.1
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\mypc backup
Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs [C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgHelperApp.exe]
Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs [C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarProxy.dll]
Clé Supprimée : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\DeskSvc
Clé Supprimée : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WajamUpdater
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{18B9B16E-716F-43DF-A6AD-512C7D2EB983}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{19975B78-1907-4DD6-A437-4C48120F46A4}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{1FAEE6D5-34F4-42AA-8025-3FD8F3EC4634}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{562B9316-C08A-444A-9482-62080DD851AE}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{562B9317-C08A-444A-9482-62080DD851AE}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{3004627E-F8E9-4E8B-909D-316753CBA923}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{431532BD-0AE1-4ABC-BE8C-919F3D1332E2}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{4ED063C9-4A0B-4B44-A9DC-23AFF424A0D3}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{5D64294B-1341-4FE7-B6D8-7C36828D4DD5}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{82E74373-58AB-47EB-B0F0-A1D82BB8EB5C}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{C358B3D0-B911-41E3-A276-E7D43A6BA56D}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{EEE6C35B-6118-11DC-9C72-001320C79847}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{EEE6C35C-6118-11DC-9C72-001320C79847}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{EEE6C35D-6118-11DC-9C72-001320C79847}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{EF5625A3-37AB-4BDB-9875-2A3D91CD0DFD}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{045F91B3-695F-423A-98C7-8DE3C47AA020}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{1348BD1B-C32A-41A7-9BD4-5377AA1AB925}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{395AFE6E-8308-48DB-89BE-ED5F4AA3D3EC}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{431532BD-0AE1-4ABC-BE8C-919F3D1332E2}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{43969E3F-3E7C-4911-A8F1-79C6CA6AC731}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{43B390F0-6BA2-45CA-ABF2-5DB0CEE9B49D}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{94CADA2E-1D3F-419F-8A3D-06C58EDF53C8}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{9E52EB8B-8DD9-4605-AD36-D352BCD482F2}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{A1440EC3-F0FA-407A-B811-DE6668C06D29}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{B9A84AD0-5777-46FD-8B8F-1EBD06750FBC}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{C1995F88-1C7F-40D7-B0FA-6F107F6308B8}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{C815E3DA-0823-49B0-9270-D1771D58B317}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{E4A994B0-5550-4680-A4C6-B9470B888069}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{EEE6C358-6118-11DC-9C72-001320C79847}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{EEE6C359-6118-11DC-9C72-001320C79847}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{EEE6C35A-6118-11DC-9C72-001320C79847}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{095BFD3C-4602-4FE1-96F1-AEFAFBFD067D}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{EEE6C35E-6118-11DC-9C72-001320C79847}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{EEE6C35F-6118-11DC-9C72-001320C79847}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EF5625A3-37AB-4BDB-9875-2A3D91CD0DFD}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3004627E-F8E9-4E8B-909D-316753CBA923}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35B-6118-11DC-9C72-001320C79847}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35C-6118-11DC-9C72-001320C79847}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EF5625A3-37AB-4BDB-9875-2A3D91CD0DFD}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3004627E-F8E9-4E8B-909D-316753CBA923}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35B-6118-11DC-9C72-001320C79847}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35C-6118-11DC-9C72-001320C79847}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EF5625A3-37AB-4BDB-9875-2A3D91CD0DFD}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{219046AE-358F-4CF1-B1FD-2B4DE83642A8}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EEE6C367-6118-11DC-9C72-001320C79847}
Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{77AA745B-F4F8-45DA-9B14-61D2D95054C8}
Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{3004627E-F8E9-4E8B-909D-316753CBA923}]
Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{EEE6C35B-6118-11DC-9C72-001320C79847}]
Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{EEE6C35B-6118-11DC-9C72-001320C79847}]
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{045F91B3-695F-423A-98C7-8DE3C47AA020}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{1348BD1B-C32A-41A7-9BD4-5377AA1AB925}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{395AFE6E-8308-48DB-89BE-ED5F4AA3D3EC}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{431532BD-0AE1-4ABC-BE8C-919F3D1332E2}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{43969E3F-3E7C-4911-A8F1-79C6CA6AC731}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{43B390F0-6BA2-45CA-ABF2-5DB0CEE9B49D}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{94CADA2E-1D3F-419F-8A3D-06C58EDF53C8}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{9E52EB8B-8DD9-4605-AD36-D352BCD482F2}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{A1440EC3-F0FA-407A-B811-DE6668C06D29}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{B9A84AD0-5777-46FD-8B8F-1EBD06750FBC}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{C1995F88-1C7F-40D7-B0FA-6F107F6308B8}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{C815E3DA-0823-49B0-9270-D1771D58B317}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{E4A994B0-5550-4680-A4C6-B9470B888069}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{EEE6C358-6118-11DC-9C72-001320C79847}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{EEE6C359-6118-11DC-9C72-001320C79847}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{EEE6C35A-6118-11DC-9C72-001320C79847}
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{77AA745B-F4F8-45DA-9B14-61D2D95054C8}
Clé Supprimée : HKCU\Software\IM
Clé Supprimée : HKCU\Software\ImInstaller
Clé Supprimée : HKCU\Software\InstallCore
Clé Supprimée : HKCU\Software\mysearchdial
Clé Supprimée : HKCU\Software\Wajam
Clé Supprimée : HKCU\Software\wnlt
Clé Supprimée : HKLM\Software\Desksvc
Clé Supprimée : HKLM\Software\InstallCore
Clé Supprimée : HKLM\Software\mysearchdial
Clé Supprimée : HKLM\Software\V9
Clé Supprimée : HKLM\Software\Wajam
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{F4E33CE5-A7AB-4F68-A7E7-F0AA84EF2D9E}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Desk 365
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\mysearchdial
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Wajam
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MyPC Backup
Clé Supprimée : HKLM\Software\Classes\Installer\Features\5EC33E4FBA7A86F47A7E0FAA48FED2E9
Clé Supprimée : HKLM\Software\Classes\Installer\Products\5EC33E4FBA7A86F47A7E0FAA48FED2E9

***** [ Navigateurs ] *****

-\\ Internet Explorer v10.0.9200.16537

Paramètre Restauré : HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls [Tabs]

-\\ Google Chrome v32.0.1700.107

[ Fichier : C:\Users\Cecilia\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [15774 octets] - [05/02/2014 20:55:29]
AdwCleaner[S0].txt - [14794 octets] - [05/02/2014 20:57:01]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [14855 octets] ##########

Re,

OK, fais un nouveau rapport ZHPDiag et pense bien à héberger le rapport.

Gabriel.

Bonjour,

Voici le liens du rapport;

http://cjoint.com/?3BgjdcjhzKF

http://cjoint.com/data3/3BgjdcjhzKF.htm

Juste pour vous dire que j'ai encore des pubs
(c'est des pubs qui sont sur la page, il y en a une en bas a droite, une toute à gauche, en bas etc..)

Bonsoir,

Fais ZHPFix comme ceci avec ces lignes, et poste le rapport.

Gabriel.

Bonjour,

Je suis allée sur ZHPFix j'ai cliqué sur configurer, mais après je sais pas où il faut cliquer

Bonjour,

Il faut que tu regardes le tutoriel : http://www.forum-entraide-informatique. ... x-tutoriel

Gabriel.

Bonjour,

Désolée de pas avoir répondu avant, j'étais parti un week-end à Londres, fin bref

dans le tutoriel il est noté *
"2.Collez les lignes de script précédemment copiées dans le presse-papier (Ctrl +C) fournies par le helper en cliquant sur Importer (Sous Windows 8, elles peuvent être déjà importées"

Mais je ne sais pas quel script faut-il prendre..
Merci

Bonjour,

C'est pas grave, j'espère que tu as passé un bon week-end.

Ce sont toutes les lignes qui sont à l'intérieur de ce lien : https://dl.dropboxusercontent.com/u/328 ... hil3na.txt

Gabriel.

Re,

Oui merci

Voici le rapport:

Rapport de ZHPFix 2014.1.17.2 par Nicolas Coolman, Update du 17/01/2014
Fichier d'export Registre :
Run by Cecilia at 10/02/2014 18:47:59
High Elevated Privileges : OK
Windows 8 Home Premium Edition, 64-bit (Build 9200)

Corbeille vidée (00mn 07s)
Dossier Prefetcher vidé

========== Logiciels ==========
ABSENT Uninstall Process: c:\program files (x86)\speed test (4354)\uninst.exe
ABSENT Uninstall Process: c:\programdata\wpm\wprotectmanager.exe

========== Clés du Registre ==========
SUPPRIMÉ Logiciel Key: [HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Speed Test (4354)]
SUPPRIMÉ: CLSID BHO: {ffbb88a9-c663-4b9b-9170-70fa0a5a2786}
SUPPRIMÉ: Service: Update BrowseSmart
SUPPRIMÉ: Service: Util BrowseSmart
SUPPRIMÉ: Service: WajamUpdaterV3
SUPPRIMÉ: HKCU\Software\BrowseSmart
SUPPRIMÉ: HKLM\Software\Wow6432Node\BrowseSmart
SUPPRIMÉ: HKLM\Software\Wow6432Node\SweetIM
SUPPRIMÉ: HKLM\Software\Wow6432Node\nationzoomSoftware
SUPPRIMÉ: HKLM\Software\Wow6432Node\supWPM
SUPPRIMÉ: SearchScopes :{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\BrowseSmart
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D15DAF33C220F91468A1D7D57C31ACD7
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D6D0EB9FDBD90C04D92A7E729058F10D
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A189D17A469616C4688D23E192996267
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\98CC8BF5A4A6E6C4ABF7051DDAB8B058
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7FFA128C2B0FF414D805FC5627883401
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D3BA76A44C779424889063D5098ED2D6
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\397C771A7BCAC904697C3EC629ED33ED
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\351716A953E21214898904032EAE2E81
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2E6768B6932D112438F047C54D180635
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\02F47BF73B948514FAACADD8CBBDF37D
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\080D9F5E1E95FEE4794CE438E635239E
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\A97CEC23332751B47BA4B95BAA50C9D0
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1E264E0A5959A1C46BA9175A878B12EA
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E4748F9A4181FCE46A23C13B517B9420
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\69D6A6B2ED56AF24EA6335EAD6E91CA4
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7E7F552EF334C802D75A55F0F6344722
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\86EDC790504E1834DBC20C9A04328FD2
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\97C3D0F82E712E241A2F969F45E3351C
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9E7F556BF224D804D96A96F0F6344789
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BF4F885EDEE45644EB1E0C99E0162399
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CE21F3FD57B244142880EF15A165A156
SUPPRIMÉ: SearchScopes :{D944BB61-2E34-4DBF-A683-47E505C587DC}

========== Eléments de donnée du Registre ==========
SUPPRIMÉ: R0 - Main,Start Page = KCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page
SUPPRIMÉ: R0 - Main,Start Page = KLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page
SUPPRIMÉ: R0 - Main,Start Page = KLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page
SUPPRIMÉ: R1 Search Page =
SUPPRIMÉ: StartMenuInternet: C:\Program Files\Internet Explorer\iexplore.exe http://www.nationzoom.com

========== Préférences navigateur ==========
SUPPRIMÉ Folder Chrome C:\Users\Cecilia\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbgfiglojokgabdbhegbpjgojgppppgf
SUPPRIMÉ Folder Chrome C:\Users\Cecilia\AppData\Local\Google\Chrome\User Data\Default\Extensions\ippenodjaoidmkkfdlmdhofiebnpjddb

========== Dossiers ==========
Aucun dossiers CLSID Local utilisateur vide

========== Fichiers ==========
SUPPRIMÉ: c:\users\cecilia\appdata\local\temp\preferences
SUPPRIMÉ: c:\users\cecilia\appdata\local\google\chrome\user data\default\preferences
SUPPRIMÉ: c:\program files (x86)\browsesmart\browsesmartbho.dll
SUPPRIMÉ: c:\users\public\desktop\google chrome.lnk
SUPPRIMÉ: c:\users\cecilia\appdata\roaming\microsoft\internet explorer\quick launch\google chrome.lnk
SUPPRIMÉ: c:\users\cecilia\appdata\roaming\microsoft\internet explorer\quick launch\launch internet explorer browser.lnk
SUPPRIMÉ: c:\users\cecilia\appdata\roaming\microsoft\internet explorer\quick launch\user pinned\taskbar\google chrome.lnk
SUPPRIMÉ: c:\users\cecilia\appdata\roaming\microsoft\internet explorer\quick launch\user pinned\taskbar\internet explorer.lnk
SUPPRIMÉ: c:\users\cecilia\appdata\roaming\microsoft\windows\start menu\programs\internet explorer.lnk
SUPPRIMÉ: c:\users\cecilia\appdata\roaming\microsoft\windows\sendto\desk 365.lnk
SUPPRIMÉ Redémarrage: c:\program files (x86)\browsesmart\updatebrowsesmart.exe
SUPPRIMÉ: c:\windows\prefetch\desk365.exe-6062c485.pf
SUPPRIMÉ: c:\windows\prefetch\mypc backup.exe-d2d9f9b9.pf
SUPPRIMÉ: c:\users\cecilia\appdata\local\google\chrome\user data\default\local extension settings\ippenodjaoidmkkfdlmdhofiebnpjddb\log.old
SUPPRIMÉ: c:\users\cecilia\appdata\local\google\chrome\user data\default\local extension settings\ippenodjaoidmkkfdlmdhofiebnpjddb\current
SUPPRIMÉ: c:\users\cecilia\appdata\local\google\chrome\user data\default\local extension settings\ippenodjaoidmkkfdlmdhofiebnpjddb\log
SUPPRIMÉ: c:\users\cecilia\appdata\local\google\chrome\user data\default\local storage\chrome-extension_ippenodjaoidmkkfdlmdhofiebnpjddb_0.localstorage
SUPPRIMÉ: c:\users\cecilia\appdata\local\google\chrome\user data\default\local storage\chrome-extension_ippenodjaoidmkkfdlmdhofiebnpjddb_0.localstorage-journal
SUPPRIMÉ: c:\users\cecilia\appdata\local\google\chrome\user data\default\local storage\http_static.browsesmart00.browsesmart.net_0.localstorage
SUPPRIMÉ: c:\users\cecilia\appdata\local\google\chrome\user data\default\local storage\http_static.browsesmart00.browsesmart.net_0.localstorage-journal
SUPPRIMÉ: c:\users\cecilia\appdata\local\google\chrome\user data\default\local storage\https_api.browsesmart.net_0.localstorage
SUPPRIMÉ: c:\users\cecilia\appdata\local\google\chrome\user data\default\local storage\https_api.browsesmart.net_0.localstorage-journal
SUPPRIMÉ: C:\Users\Cecilia\AppData\LocalLow\SkwConfig.bin
SUPPRIMÉ: C:\Windows\Installer\12add7a.msi
SUPPRIMÉS Temporaires Windows (0) (0 octets)
SUPPRIMÉS Flash Cookies (0) (0 octets)

========== Restauration Système ==========
Point de restauration du système créé avec succès


========== Récapitulatif ==========
34 : Clés du Registre
5 : Eléments de donnée du Registre
1 : Dossiers
26 : Fichiers
2 : Logiciels
2 : Préférences navigateur
1 : Restauration Système


End of clean in 00mn 38s

========== Chemin de fichier rapport ==========
C:\Users\Cecilia\AppData\Roaming\ZHP\ZHPFix[R1].txt - 10/02/2014 18:48:07 [7840]

Re,

Fais un examen complet sur tous les disques avec MBAM. Tu supprimeras tous les éléments détectés et me posteras le rapport : http://www.forum-entraide-informatique. ... m-tutoriel

Gabriel.

Re,

voici le rapport

Malwarebytes Anti-Malware (Essai) 1.75.0.1300
http://www.malwarebytes.org

Version de la base de données: v2014.02.10.04

Windows 8 x64 NTFS
Internet Explorer 10.0.9200.16750
Cecilia :: CECILIA [administrateur]

Protection: Activé

10/02/2014 19:19:26
mbam-log-2014-02-10 (19-19-26).txt

Type d'examen: Examen complet (C:\|D:\|E:\|)
Options d'examen activées: Mémoire | Démarrage | Registre | Système de fichiers | Heuristique/Extra | Heuristique/Shuriken | PUP | PUM
Options d'examen désactivées: P2P
Elément(s) analysé(s): 487094
Temps écoulé: 58 minute(s), 15 seconde(s)

Processus mémoire détecté(s): 2
C:\Program Files (x86)\BrowseSmart\updateBrowseSmart.exe (PUP.Optional.BrowseSmart.A) - 1936 - Suppression au redémarrage.
C:\Program Files (x86)\BrowseSmart\bin\utilBrowseSmart.exe (PUP.Optional.BrowseSmart.A) - 2184 - Suppression au redémarrage.

Module(s) mémoire détecté(s): 0
(Aucun élément nuisible détecté)

Clé(s) du Registre détectée(s): 30
HKCR\AppID\{CA5CAA63-B27C-4963-9BEC-CB16A36D56F8} (PUP.Optional.MySearchDial.A) - Mis en quarantaine et supprimé avec succès.
HKCR\CLSID\{D40753C7-8A59-4C1F-BE88-C300F4624D5B} (PUP.Optional.MySearchDial.A) - Mis en quarantaine et supprimé avec succès.
HKCR\TypeLib\{C292AD0A-C11F-479B-B8DB-743E72D283B0} (PUP.Optional.MySearchDial.A) - Mis en quarantaine et supprimé avec succès.
HKCR\CLSID\{ffbb88a9-c663-4b9b-9170-70fa0a5a2786} (PUP.Optional.BrowseSmart.A) - Mis en quarantaine et supprimé avec succès.
HKCR\TypeLib\{b463ecd2-e5d8-4178-80c4-ec7c7e72f9ac} (PUP.Optional.BrowseSmart.A) - Mis en quarantaine et supprimé avec succès.
HKCR\Interface\{392DE650-A1E6-4FB3-A5A4-21285DE225BD} (PUP.Optional.BrowseSmart.A) - Mis en quarantaine et supprimé avec succès.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{FFBB88A9-C663-4B9B-9170-70FA0A5A2786} (PUP.Optional.BrowseSmart.A) - Mis en quarantaine et supprimé avec succès.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{FFBB88A9-C663-4B9B-9170-70FA0A5A2786} (PUP.Optional.BrowseSmart.A) - Mis en quarantaine et supprimé avec succès.
HKCR\Typelib\{FBC322D5-407E-4854-8C0B-555B951FD8E3} (PUP.Optional.MySearchDial.A) - Mis en quarantaine et supprimé avec succès.
HKCR\Interface\{0400EBCA-042C-4000-AA89-9713FBEDB671} (PUP.Optional.MySearchDial.A) - Mis en quarantaine et supprimé avec succès.
HKCR\TypeLib\{08BB1B53-9220-44C1-B29B-7795C8E5965D} (PUP.Optional.BesttoolBars) - Mis en quarantaine et supprimé avec succès.
HKCR\Free Games 111.BackgroundHostObject (PUP.Optional.FreeGames.A) - Mis en quarantaine et supprimé avec succès.
HKCR\Free Games 111.BackgroundHostObject.1 (PUP.Optional.FreeGames.A) - Mis en quarantaine et supprimé avec succès.
HKCR\Free Games 111.Navbar (PUP.Optional.FreeGames.A) - Mis en quarantaine et supprimé avec succès.
HKCR\Free Games 111.Navbar.1 (PUP.Optional.FreeGames.A) - Mis en quarantaine et supprimé avec succès.
HKCR\Free Games 111.ScriptHostObject (PUP.Optional.FreeGames.A) - Mis en quarantaine et supprimé avec succès.
HKCR\Free Games 111.ScriptHostObject.1 (PUP.Optional.FreeGames.A) - Mis en quarantaine et supprimé avec succès.
HKCR\Free Games 111.Tool (PUP.Optional.FreeGames.A) - Mis en quarantaine et supprimé avec succès.
HKCR\Free Games 111.Tool.1 (PUP.Optional.FreeGames.A) - Mis en quarantaine et supprimé avec succès.
HKLM\SOFTWARE\Google\Chrome\Extensions\lbgfiglojokgabdbhegbpjgojgppppgf (PUP.Optional.FreeGames.A) - Mis en quarantaine et supprimé avec succès.
HKCR\TypeLib\{FD58258C-84A6-4DEF-9793-019BE7F491A7} (PUP.Optional.FreeGames.A) - Mis en quarantaine et supprimé avec succès.
HKCR\CLSID\{16F7ED3A-ECD8-46C7-8FD3-E4A8C79884D7} (PUP.Optional.FreeGames.A) - Mis en quarantaine et supprimé avec succès.
HKCR\TypeLib\{38D7B10F-7131-4677-ACE1-B8A071D29901} (PUP.Optional.FreeGames.A) - Mis en quarantaine et supprimé avec succès.
HKCR\CLSID\{C099CD7B-A94C-4229-B6F7-76D3494C88D8} (PUP.Optional.FreeGames.A) - Mis en quarantaine et supprimé avec succès.
HKCR\TypeLib\{E150D1BB-AC3A-4E9A-B93F-983DFF23FF84} (PUP.Optional.FreeGames.A) - Mis en quarantaine et supprimé avec succès.
HKCR\CLSID\{C45EC9F0-8333-465D-9728-074BD41985C9} (PUP.Optional.FreeGames.A) - Mis en quarantaine et supprimé avec succès.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C45EC9F0-8333-465D-9728-074BD41985C9} (PUP.Optional.FreeGames.A) - Mis en quarantaine et supprimé avec succès.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{C45EC9F0-8333-465D-9728-074BD41985C9} (PUP.Optional.FreeGames.A) - Mis en quarantaine et supprimé avec succès.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{C45EC9F0-8333-465D-9728-074BD41985C9} (PUP.Optional.FreeGames.A) - Mis en quarantaine et supprimé avec succès.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Free Games 111 (PUP.Optional.FreeGames.A) - Mis en quarantaine et supprimé avec succès.

Valeur(s) du Registre détectée(s): 0
(Aucun élément nuisible détecté)

Elément(s) de données du Registre détecté(s): 0
(Aucun élément nuisible détecté)

Dossier(s) détecté(s): 4
C:\Users\Cecilia\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbgfiglojokgabdbhegbpjgojgppppgf (PUP.Optional.FreeGames.A) - Mis en quarantaine et supprimé avec succès.
C:\Users\Cecilia\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbgfiglojokgabdbhegbpjgojgppppgf\3.0.0.0_0 (PUP.Optional.FreeGames.A) - Mis en quarantaine et supprimé avec succès.
C:\Users\Cecilia\AppData\Roaming\freegames111 (PUP.Optional.FreeGames.A) - Mis en quarantaine et supprimé avec succès.
C:\Program Files (x86)\Free Games 111 (PUP.Optional.FreeGames.A) - Mis en quarantaine et supprimé avec succès.

Fichier(s) détecté(s): 98
C:\Program Files (x86)\BrowseSmart\updateBrowseSmart.exe (PUP.Optional.BrowseSmart.A) - Suppression au redémarrage.
C:\Program Files (x86)\BrowseSmart\bin\utilBrowseSmart.exe (PUP.Optional.BrowseSmart.A) - Suppression au redémarrage.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Mysearchdial\1.8.21.0\mysearchdialApp.dll.vir (PUP.Optional.MySearchDial.A) - Mis en quarantaine et supprimé avec succès.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Mysearchdial\1.8.21.0\mysearchdialEng.dll.vir (PUP.Optional.MySearchDial.A) - Mis en quarantaine et supprimé avec succès.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Mysearchdial\1.8.21.0\mysearchdialsrv.exe.vir (PUP.Optional.MySearchDial.A) - Mis en quarantaine et supprimé avec succès.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Mysearchdial\1.8.21.0\mysearchdialTlbr.dll.vir (PUP.Optional.MySearchDial.A) - Mis en quarantaine et supprimé avec succès.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Mysearchdial\1.8.21.0\bh\mysearchdial.dll.vir (PUP.Optional.MySearchDial.A) - Mis en quarantaine et supprimé avec succès.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\ClearHist.exe.vir (PUP.Optional.SweetIM) - Mis en quarantaine et supprimé avec succès.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgcommon.dll.vir (PUP.Optional.SweetIM) - Mis en quarantaine et supprimé avec succès.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgconfig.dll.vir (PUP.Optional.SweetIM) - Mis en quarantaine et supprimé avec succès.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgHelper.dll.vir (PUP.Optional.SweetIM) - Mis en quarantaine et supprimé avec succès.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgHelperApp.exe.vir (PUP.Optional.SweetIM) - Mis en quarantaine et supprimé avec succès.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mghooking.dll.vir (PUP.Optional.SweetIM) - Mis en quarantaine et supprimé avec succès.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mglogger.dll.vir (PUP.Optional.SweetIM) - Mis en quarantaine et supprimé avec succès.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgsimcommon.dll.vir (PUP.Optional.SweetIM) - Mis en quarantaine et supprimé avec succès.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll.vir (PUP.Optional.SweetPacks) - Mis en quarantaine et supprimé avec succès.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarProxy.dll.vir (PUP.Optional.SweetIM) - Mis en quarantaine et supprimé avec succès.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgxml_wrapper.dll.vir (PUP.Optional.SweetIM) - Mis en quarantaine et supprimé avec succès.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Wajam\IE\priam_bho.dll.vir (PUP.Optional.Wajam) - Mis en quarantaine et supprimé avec succès.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Wajam\Updater\update.exe.vir (PUP.Optional.Wajam) - Mis en quarantaine et supprimé avec succès.
C:\AdwCleaner\Quarantine\C\Users\Cecilia\AppData\Local\Temp\Desk365\eInstall\eInstall.exe.vir (PUP.Optional.Desk365.A) - Mis en quarantaine et supprimé avec succès.
C:\AdwCleaner\Quarantine\C\Windows\SysWOW64\jmdp\lmrn.dll.vir (PUP.Optional.Sweetpacks) - Mis en quarantaine et supprimé avec succès.
C:\Program Files (x86)\Free Games 111\AddonsFramework.Typelib.dll (PUP.Optional.BesttoolBars) - Mis en quarantaine et supprimé avec succès.
C:\Program Files (x86)\Free Games 111\AddonsFramework.Typelib64.dll (PUP.Optional.BesttoolBars) - Mis en quarantaine et supprimé avec succès.
C:\Users\Cecilia\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AGUOHMXE\SkywalkerSetup[1].exe (PUP.Optional.Sweetpacks) - Mis en quarantaine et supprimé avec succès.
C:\Users\Cecilia\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GKYMYLJZ\air_nationzoom_20131128171513[1].exe (PUP.Optional.SkyTech.A) - Mis en quarantaine et supprimé avec succès.
C:\Users\Cecilia\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GKYMYLJZ\RocketPDFSetup.exe (PUP.Optional.InstallBrain) - Mis en quarantaine et supprimé avec succès.
C:\Users\Cecilia\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XRHR02SA\Setup[1].exe (PUP.Optional.BrowseSmart.A) - Mis en quarantaine et supprimé avec succès.
C:\Users\Cecilia\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XRHR02SA\wajam_install[1].exe (PUP.Optional.Wajam) - Mis en quarantaine et supprimé avec succès.
C:\Users\Cecilia\AppData\Roaming\freegames111\install_helper.exe (Trojan.BProtector) - Mis en quarantaine et supprimé avec succès.
C:\Users\Cecilia\AppData\Roaming\ZHP\Quarantine\BrowseSmart.DIR\updateBrowseSmart.exe (PUP.Optional.BrowseSmart.A) - Mis en quarantaine et supprimé avec succès.
C:\Users\Cecilia\AppData\Roaming\ZHP\Quarantine\BrowseSmart.DIR\bin\utilBrowseSmart.exe (PUP.Optional.BrowseSmart.A) - Mis en quarantaine et supprimé avec succès.
C:\Users\Cecilia\AppData\Roaming\ZHP\Quarantine\BrowseSmart.DIR\BrowseSmart\updateBrowseSmart.exe (PUP.Optional.BrowseSmart.A) - Mis en quarantaine et supprimé avec succès.
C:\Users\Cecilia\AppData\Roaming\ZHP\Quarantine\BrowseSmart.DIR\BrowseSmart\bin\utilBrowseSmart.exe (PUP.Optional.BrowseSmart.A) - Mis en quarantaine et supprimé avec succès.
C:\Users\Cecilia\AppData\Roaming\ZHP\Quarantine\speedtest4354.DIR\install_helper.exe (Trojan.BProtector) - Mis en quarantaine et supprimé avec succès.
C:\Users\Cecilia\Downloads\install_flashplayer11x32_mssd_aaa_aih (1).exe (PUP.Optional.InstallCore) - Mis en quarantaine et supprimé avec succès.
C:\Users\Cecilia\Downloads\RocketPDFSetup.exe (PUP.Optional.InstallBrain) - Mis en quarantaine et supprimé avec succès.
C:\Users\Cecilia\Downloads\setup.exe (PUP.Optional.AirInstaller) - Mis en quarantaine et supprimé avec succès.
C:\Users\Cecilia\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtab.crx (PUP.Optional.NewTab.A) - Mis en quarantaine et supprimé avec succès.
C:\Users\Cecilia\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_pflphaooapbgpeakohlggbpidpppgdff_0.localstorage (PUP.Optional.FunMoods.A) - Mis en quarantaine et supprimé avec succès.
C:\Users\Cecilia\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbgfiglojokgabdbhegbpjgojgppppgf\3.0.0.0_0\background.html (PUP.Optional.FreeGames.A) - Mis en quarantaine et supprimé avec succès.
C:\Users\Cecilia\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbgfiglojokgabdbhegbpjgojgppppgf\3.0.0.0_0\button.js (PUP.Optional.FreeGames.A) - Mis en quarantaine et supprimé avec succès.
C:\Users\Cecilia\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbgfiglojokgabdbhegbpjgojgppppgf\3.0.0.0_0\ci.bg.pack.js (PUP.Optional.FreeGames.A) - Mis en quarantaine et supprimé avec succès.
C:\Users\Cecilia\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbgfiglojokgabdbhegbpjgojgppppgf\3.0.0.0_0\ci.browser.helper.js (PUP.Optional.FreeGames.A) - Mis en quarantaine et supprimé avec succès.
C:\Users\Cecilia\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbgfiglojokgabdbhegbpjgojgppppgf\3.0.0.0_0\ci.content.pack.js (PUP.Optional.FreeGames.A) - Mis en quarantaine et supprimé avec succès.
C:\Users\Cecilia\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbgfiglojokgabdbhegbpjgojgppppgf\3.0.0.0_0\content.js (PUP.Optional.FreeGames.A) - Mis en quarantaine et supprimé avec succès.
C:\Users\Cecilia\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbgfiglojokgabdbhegbpjgojgppppgf\3.0.0.0_0\icon128.ico (PUP.Optional.FreeGames.A) - Mis en quarantaine et supprimé avec succès.
C:\Users\Cecilia\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbgfiglojokgabdbhegbpjgojgppppgf\3.0.0.0_0\icon128.png (PUP.Optional.FreeGames.A) - Mis en quarantaine et supprimé avec succès.
C:\Users\Cecilia\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbgfiglojokgabdbhegbpjgojgppppgf\3.0.0.0_0\icon16.ico (PUP.Optional.FreeGames.A) - Mis en quarantaine et supprimé avec succès.
C:\Users\Cecilia\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbgfiglojokgabdbhegbpjgojgppppgf\3.0.0.0_0\icon16.png (PUP.Optional.FreeGames.A) - Mis en quarantaine et supprimé avec succès.
C:\Users\Cecilia\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbgfiglojokgabdbhegbpjgojgppppgf\3.0.0.0_0\icon18.ico (PUP.Optional.FreeGames.A) - Mis en quarantaine et supprimé avec succès.
C:\Users\Cecilia\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbgfiglojokgabdbhegbpjgojgppppgf\3.0.0.0_0\icon18.png (PUP.Optional.FreeGames.A) - Mis en quarantaine et supprimé avec succès.
C:\Users\Cecilia\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbgfiglojokgabdbhegbpjgojgppppgf\3.0.0.0_0\icon24.ico (PUP.Optional.FreeGames.A) - Mis en quarantaine et supprimé avec succès.
C:\Users\Cecilia\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbgfiglojokgabdbhegbpjgojgppppgf\3.0.0.0_0\icon24.png (PUP.Optional.FreeGames.A) - Mis en quarantaine et supprimé avec succès.
C:\Users\Cecilia\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbgfiglojokgabdbhegbpjgojgppppgf\3.0.0.0_0\icon32.ico (PUP.Optional.FreeGames.A) - Mis en quarantaine et supprimé avec succès.
C:\Users\Cecilia\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbgfiglojokgabdbhegbpjgojgppppgf\3.0.0.0_0\icon32.png (PUP.Optional.FreeGames.A) - Mis en quarantaine et supprimé avec succès.
C:\Users\Cecilia\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbgfiglojokgabdbhegbpjgojgppppgf\3.0.0.0_0\icon48.ico (PUP.Optional.FreeGames.A) - Mis en quarantaine et supprimé avec succès.
C:\Users\Cecilia\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbgfiglojokgabdbhegbpjgojgppppgf\3.0.0.0_0\icon48.png (PUP.Optional.FreeGames.A) - Mis en quarantaine et supprimé avec succès.
C:\Users\Cecilia\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbgfiglojokgabdbhegbpjgojgppppgf\3.0.0.0_0\jquery-1.9.1.min.js (PUP.Optional.FreeGames.A) - Mis en quarantaine et supprimé avec succès.
C:\Users\Cecilia\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbgfiglojokgabdbhegbpjgojgppppgf\3.0.0.0_0\jquery.uuid.js (PUP.Optional.FreeGames.A) - Mis en quarantaine et supprimé avec succès.
C:\Users\Cecilia\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbgfiglojokgabdbhegbpjgojgppppgf\3.0.0.0_0\manifest.json (PUP.Optional.FreeGames.A) - Mis en quarantaine et supprimé avec succès.
C:\Users\Cecilia\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbgfiglojokgabdbhegbpjgojgppppgf\3.0.0.0_0\popup.js (PUP.Optional.FreeGames.A) - Mis en quarantaine et supprimé avec succès.
C:\Users\Cecilia\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbgfiglojokgabdbhegbpjgojgppppgf\3.0.0.0_0\rjs.js (PUP.Optional.FreeGames.A) - Mis en quarantaine et supprimé avec succès.
C:\Users\Cecilia\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbgfiglojokgabdbhegbpjgojgppppgf\3.0.0.0_0\settings.json (PUP.Optional.FreeGames.A) - Mis en quarantaine et supprimé avec succès.
C:\Users\Cecilia\AppData\Roaming\freegames111\DeskTopIcon.ico (PUP.Optional.FreeGames.A) - Mis en quarantaine et supprimé avec succès.
C:\Users\Cecilia\AppData\Roaming\freegames111\freegames111.crx (PUP.Optional.FreeGames.A) - Mis en quarantaine et supprimé avec succès.
C:\Users\Cecilia\AppData\Roaming\freegames111\freegames111.xpi (PUP.Optional.FreeGames.A) - Mis en quarantaine et supprimé avec succès.
C:\Users\Cecilia\AppData\Roaming\freegames111\install_helper.exe (PUP.Optional.FreeGames.A) - Mis en quarantaine et supprimé avec succès.
C:\Program Files (x86)\Free Games 111\background.html (PUP.Optional.FreeGames.A) - Mis en quarantaine et supprimé avec succès.
C:\Program Files (x86)\Free Games 111\BackgroundHost.exe (PUP.Optional.FreeGames.A) - Mis en quarantaine et supprimé avec succès.
C:\Program Files (x86)\Free Games 111\BackgroundHost64.exe (PUP.Optional.FreeGames.A) - Mis en quarantaine et supprimé avec succès.
C:\Program Files (x86)\Free Games 111\button.js (PUP.Optional.FreeGames.A) - Mis en quarantaine et supprimé avec succès.
C:\Program Files (x86)\Free Games 111\ButtonSite.dll (PUP.Optional.FreeGames.A) - Mis en quarantaine et supprimé avec succès.
C:\Program Files (x86)\Free Games 111\ButtonSite64.dll (PUP.Optional.FreeGames.A) - Mis en quarantaine et supprimé avec succès.
C:\Program Files (x86)\Free Games 111\config.xml (PUP.Optional.FreeGames.A) - Mis en quarantaine et supprimé avec succès.
C:\Program Files (x86)\Free Games 111\content.js (PUP.Optional.FreeGames.A) - Mis en quarantaine et supprimé avec succès.
C:\Program Files (x86)\Free Games 111\icon128.ico (PUP.Optional.FreeGames.A) - Mis en quarantaine et supprimé avec succès.
C:\Program Files (x86)\Free Games 111\icon128.png (PUP.Optional.FreeGames.A) - Mis en quarantaine et supprimé avec succès.
C:\Program Files (x86)\Free Games 111\icon16.ico (PUP.Optional.FreeGames.A) - Mis en quarantaine et supprimé avec succès.
C:\Program Files (x86)\Free Games 111\icon16.png (PUP.Optional.FreeGames.A) - Mis en quarantaine et supprimé avec succès.
C:\Program Files (x86)\Free Games 111\icon18.ico (PUP.Optional.FreeGames.A) - Mis en quarantaine et supprimé avec succès.
C:\Program Files (x86)\Free Games 111\icon18.png (PUP.Optional.FreeGames.A) - Mis en quarantaine et supprimé avec succès.
C:\Program Files (x86)\Free Games 111\icon24.ico (PUP.Optional.FreeGames.A) - Mis en quarantaine et supprimé avec succès.
C:\Program Files (x86)\Free Games 111\icon24.png (PUP.Optional.FreeGames.A) - Mis en quarantaine et supprimé avec succès.
C:\Program Files (x86)\Free Games 111\icon32.ico (PUP.Optional.FreeGames.A) - Mis en quarantaine et supprimé avec succès.
C:\Program Files (x86)\Free Games 111\icon32.png (PUP.Optional.FreeGames.A) - Mis en quarantaine et supprimé avec succès.
C:\Program Files (x86)\Free Games 111\icon48.ico (PUP.Optional.FreeGames.A) - Mis en quarantaine et supprimé avec succès.
C:\Program Files (x86)\Free Games 111\icon48.png (PUP.Optional.FreeGames.A) - Mis en quarantaine et supprimé avec succès.
C:\Program Files (x86)\Free Games 111\jquery-1.9.1.min.js (PUP.Optional.FreeGames.A) - Mis en quarantaine et supprimé avec succès.
C:\Program Files (x86)\Free Games 111\json2.min.js (PUP.Optional.FreeGames.A) - Mis en quarantaine et supprimé avec succès.
C:\Program Files (x86)\Free Games 111\options.htm (PUP.Optional.FreeGames.A) - Mis en quarantaine et supprimé avec succès.
C:\Program Files (x86)\Free Games 111\rjs.js (PUP.Optional.FreeGames.A) - Mis en quarantaine et supprimé avec succès.
C:\Program Files (x86)\Free Games 111\ScriptHost.dll (PUP.Optional.FreeGames.A) - Mis en quarantaine et supprimé avec succès.
C:\Program Files (x86)\Free Games 111\ScriptHost64.dll (PUP.Optional.FreeGames.A) - Mis en quarantaine et supprimé avec succès.
C:\Program Files (x86)\Free Games 111\uninst.exe (PUP.Optional.FreeGames.A) - Mis en quarantaine et supprimé avec succès.
C:\Program Files (x86)\Free Games 111\uninstall.exe (PUP.Optional.FreeGames.A) - Mis en quarantaine et supprimé avec succès.
C:\Program Files (x86)\Free Games 111\updater.js (PUP.Optional.FreeGames.A) - Mis en quarantaine et supprimé avec succès.
C:\Program Files (x86)\Free Games 111\updaterWrapper.js (PUP.Optional.FreeGames.A) - Mis en quarantaine et supprimé avec succès.

(fin)

je me suis trompée ça c'est le rapport d'analyse

voici le rapport

http://cjoint.com/?3BkuzNIF0oc



http://cjoint.com/data3/3BkuzNIF0oc.htm


+

2014/02/10 19:15:29 +0100 CECILIA Cecilia MESSAGE Starting protection
2014/02/10 19:15:29 +0100 CECILIA Cecilia MESSAGE Protection started successfully
2014/02/10 19:15:29 +0100 CECILIA Cecilia MESSAGE Starting IP protection
2014/02/10 19:15:43 +0100 CECILIA Cecilia MESSAGE IP Protection started successfully
2014/02/10 19:15:48 +0100 CECILIA Cecilia MESSAGE Starting database refresh
2014/02/10 19:15:48 +0100 CECILIA Cecilia MESSAGE Stopping IP protection
2014/02/10 19:15:49 +0100 CECILIA Cecilia MESSAGE IP Protection stopped successfully
2014/02/10 19:15:52 +0100 CECILIA Cecilia MESSAGE Database refreshed successfully
2014/02/10 19:15:52 +0100 CECILIA Cecilia MESSAGE Starting IP protection
2014/02/10 19:15:54 +0100 CECILIA Cecilia MESSAGE IP Protection started successfully
2014/02/10 19:53:07 +0100 CECILIA Cecilia MESSAGE Executing scheduled update: Daily
2014/02/10 19:53:17 +0100 CECILIA Cecilia MESSAGE Scheduled update executed successfully: database updated from version v2014.02.10.04 to version v2014.02.10.05
2014/02/10 19:53:17 +0100 CECILIA Cecilia MESSAGE Starting database refresh
2014/02/10 19:53:18 +0100 CECILIA Cecilia MESSAGE Stopping IP protection
2014/02/10 19:53:19 +0100 CECILIA Cecilia MESSAGE IP Protection stopped successfully
2014/02/10 19:53:21 +0100 CECILIA Cecilia MESSAGE Database refreshed successfully
2014/02/10 19:53:21 +0100 CECILIA Cecilia MESSAGE Starting IP protection
2014/02/10 19:53:23 +0100 CECILIA Cecilia MESSAGE IP Protection started successfully
2014/02/10 20:21:41 +0100 CECILIA (null) MESSAGE Starting protection
2014/02/10 20:21:41 +0100 CECILIA (null) MESSAGE Protection started successfully
2014/02/10 20:21:41 +0100 CECILIA (null) MESSAGE Starting IP protection
2014/02/10 20:21:43 +0100 CECILIA (null) MESSAGE IP Protection started successfully

Re,

Fais un nouveau ZHPDiag pour voir si tout est OK. Après on finalisera.

Gabriel.

re,

voici

http://cjoint.com/?3BkvtEhm6sX

http://cjoint.com/data3/3BkvtEhm6sX.htm

Re,

Refais ZHPFix avec ces lignes, et poste le rapport.

Gabriel.