Comment suprimer le backdoor:MSIL/bladabindi.AARésolu/Fermé

Question

Bonjour,
mon antivirus a decteté le backdoor suivant et je stress vraiment, quelqu'un pourrais m'aider pour l'éradiquer gratuitement, merci

cordialement

Utilisateur anonyme · Accepted Answer

Bonsoir laulaudu26700

Pour de plus amples informations, fait ceci stp

Ouvre ce lien et télécharge ZHPDiag de Nicolas Coolman : 

https://www.zebulon.fr/telechargements/securite/systeme/zhpdiag.html

Ou

https://www.commentcamarche.net/telecharger/utilitaires/24803-zhpdiag/

en bas de la page ZHP avec un numéro de version.
 
Une fois le téléchargement achevé, 

Double-clique sur l'icône pour lancer le programme.  Sous Vista ; Seven ou Windows 8 clic droit «  exécuter en tant que administrateur » 

 
Dans la fenêtre ZHPDiag qui vient de s'ouvrir,  clique sur "Configurer"

Clique sur  la loupe  en bas à gauche sans signe pour lancer l'analyse.

Clique sur  OUI  à la question "Voulez-vous un rapport full options"

Laisse l'outil travailler, il peut être assez long. 

Un rapport s'ouvre. Ce rapport se trouve également sur ton bureau 

Pour transmettre le rapport clique sur ce lien: 
http://pjjoint.malekal.com/

Si problème utilise un des suivants

https://forums-fec.be/upload 
 https://www.cjoint.com/


Regarde sur le bureau
 
Sélectionne le fichier ZHPDiag.txt. 

Clique sur "Cliquez ici pour déposer le fichier". 

Un lien de cette forme : 

http://www.cijoint.com/cjlink.php?file=cj200905/cijSKAP5fU.txt 

est ajouté dans la page. 

Copie ce lien dans ta réponse.

Merci

@+

Utilisateur anonyme · Answer

salut;
 tu "devrais" poser ta question dans "forum" et "sécurité système" , tu aurais plus de chance d'être aidé par des pros " Contibuteur sécurité " ceci dit , tu peut peut-être trouver ton bonheur içi :

https://forums.commentcamarche.net/forum/affich-28586766-virus-a-bord-backdoor-msil-bladablindi-aa#q=backdoor%3AMSIL%2Fbladabindi.AA&cur=1&url=%2F

et bien sur :
NE PAS PAS SUR LES "...01.net" et autres saletés de "softonic" bourés de virus, de barres de recherche ...
regarde içi dans la barre de recherche de CCM si t'as besoin de quelque chose :)
ET FAIS GAFFE à CE QUE TU COCHE OU PAS DANS LES PROGRAMMES !

laulaudu26700 · Answer

Le probleme c'est que il dit qu'on doit brancher une clé usb, est ce obligatoire?

laulaudu26700 · Answer

Ah oui et j'ai un cd, pour reinstaler window 7 sur le pc,est ce que sa éradique le virus?

Utilisateur anonyme · Answer

de rien ! je fais au mieux :) donne moi des nouvelles stp :)

laulaudu26700 · Answer

Quand je réanalyse avec malwarebyte anti malware, il me detecte 2 backdoors, mais je les supprime et me dise qu'il sont suppimé mais quand je refais un test, ils sont toujours la :/

Utilisateur anonyme · Answer

salut,
c'est quoi tes deux "mojangs"? j'connais pas ce mot là  moi!
si tu peux les mettre ici, qu'on voie de quoi ça cause ! 

tu peux aussi aller dans "Démarrer" "panneau de configuration" "Ajout/Suppression de Programmes" , à mon avis t'as un programme avec un virus, tu peux recopier ici tes nom de programmes qu'on jette un oeil ( pas besoin de mettre les trucs "windows" ou "microsoft" ;
t'aurais pas télévhargé un truc sur un site bourré de virus comme "softonic" ou 01.net" par hasard ? 
 autre question, t'as fait une mise à jour de MBAM
 AUTRE QUESTION : as-tu ENFIN mis adw cleaner ?
https://www.commentcamarche.net/telecharger/securite/2759-adwcleaner/#q=adw+cleaner&cur=1&url=%2F
pour adwclearner , tu garde ton anti-virus microsoft security essentials; il vient en complément .

lilidurhone · Answer

Hello

Il serait temps de transférer ce sujet dans la section virus sécurité afin qu'un vrai expert en désinfection prenne le relais

Car là c'est du n'importe quoi on passe les outils sans avoir fait un seul diagnostic!!!!


Si ça plaît pas pas grave mais faites qu'il soit pris en charge

Utilisateur anonyme · Answer

Bonjour

Utilisation de l'outil ZHPFix : 

* Copie  tout le texte présent dans l'encadré ci-dessous (tu le sélectionnes avec ta souris / Clique droit dessus et choisis "copier" ou fait Ctrl+C ) 
-------------------------------------------------------------------------------------------------


G2 - GCE: Preference [User Data\Default] [algmakeomkafjglfhpomolfhjppoojff] Pricora v.1.24.79, (Activé)   
G2 - GCE: Preference [User Data\Default] [iefogiieekeeeeaiklglonbockmhmkgd] Plus-HD-2.5 v.1.24.52, (Activé)   
M2 - MFEP: prefs.js [patrice - sqlfju13.default-1376418979694\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com] [] Plus-HD-2.5 v (..)   
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:8879;https=127.0.0.1:8879  
O2 - BHO: visualbee Helper Object [64Bits] - {66F57190-01EB-45A6-8260-7895267209F7} . (...) -- C:\Program Files (x86)\visualbee\visualbee\1.8.9.1\bh\visualbee.dll (.not file.)   
O4 - HKLM\..\Wow6432Node\Run: [tuto4pc_fr_43] Clé orpheline   
[MD5.00000000000000000000000000000000] [APT] [Desk 365 RunAsStdUser] (...) -- C:\Program Files (x86)\Desk 365\desk365.exe (.not file.)   [0]   
[MD5.00000000000000000000000000000000] [APT] [{950A656A-BD4C-4B06-BA3A-A4BE09938ED9}] (...) -- C:\Program Files (x86)\sweetpacks bundle uninstaller\uninstaller.exe (.not file.)   [0]   
[MD5.00000000000000000000000000000000] [APT] [{DEDC09C4-EDF4-4466-9214-D3C4DC760C26}] (...) -- C:\Program Files (x86)\Babylon\Babylon-Pro\Utils\uninstbb.exe (.not file.)   [0]   
O42 - Logiciel: Plus-HD-2.5 - (.Plus HD.) [HKLM][64Bits] -- Plus-HD-2.5   
O42 - Logiciel: WebAdSystem - (.KalityWeb.) [HKLM][64Bits] -- {1eeb7942-b46a-450f-b3e2-97bee17c2660}   
O42 - Logiciel: WebAdSystem - (.KalityWeb.) [HKLM][64Bits] -- {ECCD84AC-A835-4BB0-A9B8-57BE03E365D6}   
[HKCU\Software\AppDataLow\Software\Plus-HD-2.5]   
[HKCU\Software\UpToDown]     
[HKLM\Software\Wow6432Node\svchost]     
O43 - CFD: 21/07/2013 - 23:47:33 - [0,194] ----D C:\Program Files (x86)\PlayerSide   
O43 - CFD: 30/06/2013 - 19:49:32 - [7,251] ----D C:\Program Files (x86)\Plus-HD-2.5   
O43 - CFD: 29/08/2013 - 23:36:22 - [0,471] ----D C:\Program Files (x86)\SaveShare   
O43 - CFD: 22/06/2013 - 23:41:24 - [0] ----D C:\Program Files (x86)\SweetPacks   
O43 - CFD: 21/07/2013 - 23:47:30 - [0,243] ----D C:\Users\patrice\AppData\Local\playerside Air   
O43 - CFD: 10/08/2013 - 22:10:06 - [0] ----D C:\Users\patrice\AppData\Local\Updater19962   
O61 - LFC: 04/09/2013 - 15:00:37 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\background.html   [1567]     
O61 - LFC: 04/09/2013 - 15:00:37 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\crossriderManifest.json   [400]   
O61 - LFC: 04/09/2013 - 15:00:37 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensionData\manifest.xml   [1699]     
O61 - LFC: 04/09/2013 - 15:00:37 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensionData\plugins.json   [11152]     
O61 - LFC: 04/09/2013 - 15:00:37 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensionData\plugins\101_cortica_m.js   [751]     
O61 - LFC: 04/09/2013 - 15:00:37 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensionData\plugins\102_dealply_m.js   [1768]   
O61 - LFC: 04/09/2013 - 15:00:37 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensionData\plugins\103_intext_5_m.js   [3057]     
O61 - LFC: 04/09/2013 - 15:00:37 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensionData\plugins\104_jollywallet_m.js   [165884]    
O61 - LFC: 04/09/2013 - 15:00:37 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensionData\plugins\105_corticas_m.js   [640]     
O61 - LFC: 04/09/2013 - 15:00:37 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensionData\plugins\107_coupish_m.js   [2325]     
O61 - LFC: 04/09/2013 - 15:00:37 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensionData\plugins\108_icm_m.js   [4272]     
O61 - LFC: 04/09/2013 - 15:00:37 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensionData\plugins\116_ads_only_5_m.js   [2952]    
O61 - LFC: 04/09/2013 - 15:00:37 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensionData\plugins\117_coupons_intext_ads_5_m.js   [3180]     
O61 - LFC: 04/09/2013 - 15:00:37 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensionData\plugins\119_similar_web_m.js   [5235]    
O61 - LFC: 04/09/2013 - 15:00:37 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensionData\plugins\120_luck_m.js   [1247]     
O61 - LFC: 04/09/2013 - 15:00:37 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensionData\plugins\123_intext_adv_m.js   [916]     
O61 - LFC: 04/09/2013 - 15:00:37 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensionData\plugins\124_superfish_no_search_no_coupons_m.js   [798]     
O61 - LFC: 04/09/2013 - 15:00:37 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensionData\plugins\125_arcadi2_m.js   [930]     
O61 - LFC: 04/09/2013 - 15:00:37 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensionData\plugins\126_revizer_ws_m.js   [1131]     
O61 - LFC: 04/09/2013 - 15:00:37 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensionData\plugins\127_revizer_p_m.js   [1152]     
O61 - LFC: 04/09/2013 - 15:00:37 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensionData\plugins\128_superfish_pricora_m.js   [771]  
O61 - LFC: 04/09/2013 - 15:00:37 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensionData\plugins\129_widdit_m.js   [593]     
O61 - LFC: 04/09/2013 - 15:00:37 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensionData\plugins\135_arcadi3_m.js   [930]     
O61 - LFC: 04/09/2013 - 15:00:37 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensionData\plugins\138_getdeal_m.js   [1424]     
O61 - LFC: 04/09/2013 - 15:00:37 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensionData\plugins\13_CrossriderAppUtils.js   [5955]  
O61 - LFC: 04/09/2013 - 15:00:37 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensionData\plugins\141_corticas_ru_m.js.js   [720]    
O61 - LFC: 04/09/2013 - 15:00:37 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensionData\plugins\142_intext_fa_m.js   [819]     
O61 - LFC: 04/09/2013 - 15:00:37 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensionData\plugins\14_CrossriderUtils.js   [12369]   
O61 - LFC: 04/09/2013 - 15:00:37 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensionData\plugins\155_ibario_pops_m.js   [747]     
O61 - LFC: 04/09/2013 - 15:00:37 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensionData\plugins\158_50onred_ads_only_no_fb_m.js   [3045]     
O61 - LFC: 04/09/2013 - 15:00:37 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensionData\plugins\159_cortica_rollover_m.js   [783]    
O61 - LFC: 04/09/2013 - 15:00:37 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensionData\plugins\17_jQuery.js   [79982]     
O61 - LFC: 04/09/2013 - 15:00:37 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensionData\plugins\19_CHAppAPIWrapper.js   [6327]    
O61 - LFC: 04/09/2013 - 15:00:37 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensionData\plugins\1_base.js   [6753]     
O61 - LFC: 04/09/2013 - 15:00:37 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensionData\plugins\21_debug.js   [3644]     
O61 - LFC: 04/09/2013 - 15:00:37 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensionData\plugins\22_resources.js   [9082]     
O61 - LFC: 04/09/2013 - 15:00:37 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensionData\plugins\28_initializer.js   [664]     
O61 - LFC: 04/09/2013 - 15:00:37 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensionData\plugins\47_resources_background.js   [7720]     
O61 - LFC: 04/09/2013 - 15:00:37 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensionData\plugins\4_jquery_1_7_1.js   [94180]     
O61 - LFC: 04/09/2013 - 15:00:37 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensionData\plugins\64_appApiMessage.js   [2332]    
O61 - LFC: 04/09/2013 - 15:00:37 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensionData\plugins\72_appApiValidation.js   [23223]    
O61 - LFC: 04/09/2013 - 15:00:37 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensionData\plugins\78_CrossriderInfo.js   [2220]   
O61 - LFC: 04/09/2013 - 15:00:37 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensionData\plugins\80_CHPopupAppAPI.js   [194]    
O61 - LFC: 04/09/2013 - 15:00:37 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensionData\plugins\87_ginyas_wrapper.js   [20341] 
O61 - LFC: 04/09/2013 - 15:00:37 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensionData\plugins\91_monetizationLoader.js.js   [141432]     
O61 - LFC: 04/09/2013 - 15:00:37 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensionData\plugins\92_superfish_m.js   [695]     
O61 - LFC: 04/09/2013 - 15:00:37 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensionData\plugins\93_superfish_no_coupons_m.js   [1371]     
O61 - LFC: 04/09/2013 - 15:00:37 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensionData\plugins\97_resourceApiWrapper.js   [3299]    
O61 - LFC: 04/09/2013 - 15:00:37 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensionData\userCode\background.js   [394]     
O61 - LFC: 04/09/2013 - 15:00:37 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensionData\userCode\extension.js   [39143]     
O61 - LFC: 04/09/2013 - 15:00:37 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\icons\actions\1.png   [396]     
O61 - LFC: 04/09/2013 - 15:00:37 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\icons\icon128.png   [62905]     
O61 - LFC: 04/09/2013 - 15:00:37 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\icons\icon16.png   [891]     
O61 - LFC: 04/09/2013 - 15:00:37 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\icons\icon48.png   [4883]     
O61 - LFC: 04/09/2013 - 15:00:37 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\js\api\chrome.js   [11475]     
O61 - LFC: 04/09/2013 - 15:00:37 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\js\api\cookie.js   [11793]     
O61 - LFC: 04/09/2013 - 15:00:37 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\js\api\message.js   [3346]     
O61 - LFC: 04/09/2013 - 15:00:37 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\js\api\pageAction.js   [1737]     
O61 - LFC: 04/09/2013 - 15:00:37 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\js\api\pageActionBG.js   [2473]     
O61 - LFC: 04/09/2013 - 15:00:37 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\js\background.js   [28838]     
O61 - LFC: 04/09/2013 - 15:00:37 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\js\lib\app_api.js   [6349]     
O61 - LFC: 04/09/2013 - 15:00:37 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\js\lib\bg_app_api.js   [4458]     
O61 - LFC: 04/09/2013 - 15:00:37 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\js\lib\consts.js   [288]     
O61 - LFC: 04/09/2013 - 15:00:37 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\js\lib\cookie_store.js   [5905]     
O61 - LFC: 04/09/2013 - 15:00:37 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\js\lib\crossriderAPI.js   [11366]   
O61 - LFC: 04/09/2013 - 15:00:37 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\js\lib\delegate.js   [2002]     
O61 - LFC: 04/09/2013 - 15:00:37 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\js\lib\events.js   [5757]     
O61 - LFC: 04/09/2013 - 15:00:37 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\js\lib\extensionDataStore.js   [5717]     
O61 - LFC: 04/09/2013 - 15:00:37 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\js\lib\installer.js   [295]     
O61 - LFC: 04/09/2013 - 15:00:37 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\js\lib\logFile.js   [775]     
O61 - LFC: 04/09/2013 - 15:00:37 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\js\lib\logging.js   [944]     
O61 - LFC: 04/09/2013 - 15:00:37 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\js\lib\onBGDocumentLoad.js   [480]     
O61 - LFC: 04/09/2013 - 15:00:37 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\js\lib\popupResource
ewPopup.js   [40]     
O61 - LFC: 04/09/2013 - 15:00:37 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\js\lib\popupResource\popup.js   [45]     
O61 - LFC: 04/09/2013 - 15:00:37 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\js\libeports.js   [4841]     
O61 - LFC: 04/09/2013 - 15:00:37 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\js\lib\storageWrapper.js   [491]     
O61 - LFC: 04/09/2013 - 15:00:37 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\js\lib\updateManager.js   [5665]     
O61 - LFC: 04/09/2013 - 15:00:37 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\js\lib\util.js   [5142]     
O61 - LFC: 04/09/2013 - 15:00:37 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\js\lib\xhr.js   [2478]     
O61 - LFC: 04/09/2013 - 15:00:37 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\js\main.js   [8452]     
O61 - LFC: 04/09/2013 - 15:00:37 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\manifest.json   [1424]     
O61 - LFC: 04/09/2013 - 15:00:37 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\popup.html   [139]     
O61 - LFC: 04/09/2013 - 15:00:38 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\algmakeomkafjglfhpomolfhjppoojff\CURRENT   [16]     
O61 - LFC: 04/09/2013 - 15:00:38 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\algmakeomkafjglfhpomolfhjppoojff\MANIFEST-000141   [169]     
O61 - LFC: 04/09/2013 - 16:04:27 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_algmakeomkafjglfhpomolfhjppoojff_0\3   [429056]     
O61 - LFC: 04/09/2013 - 16:04:31 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_algmakeomkafjglfhpomolfhjppoojff_0\3-journal   [3608]     
O61 - LFC: 04/09/2013 - 16:04:32 ---A- . (...) -- C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\algmakeomkafjglfhpomolfhjppoojff\LOG   [272]     
O64 - Services: CurCS - ??\??\???? - Pas de propriétaire (esgiguard)  .(...) - LEGACY_ESGIGUARD   
[MD5.9FF765D961D3C51E709781AA4061C5BB] [SPRF][29/08/2013] (...) -- C:\Users\patrice\AppData\Local\Temp\SHSetup.exe   [46974032]   
[MD5.F61F9B3A8BD981B324176B248049ED23] [WIS][10/06/2013] (.KalityWeb - WebAdSystem.) -- C:\Windows\Installer\2221796.msi   [1159168]   
[HKLM\Software\Google\Chrome\Extensions\algmakeomkafjglfhpomolfhjppoojff]    
[HKLM\Software\Google\Chrome\Extensions\iefogiieekeeeeaiklglonbockmhmkgd]    
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{66F57190-01EB-45A6-8260-7895267209F7}]    
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Plus-HD-2.5]    
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{1eeb7942-b46a-450f-b3e2-97bee17c2660}]    
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{ECCD84AC-A835-4BB0-A9B8-57BE03E365D6}]    
[HKLM\Software\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}]    
[HKLM\Software\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}]    
[HKLM\Software\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}]    
[HKLM\Software\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}]    
[HKLM\Software\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}]    
[HKLM\Software\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}]    
[HKLM\Software\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}]    
[HKLM\Software\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}]    
[HKLM\Software\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}]    
[HKLM\Software\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}]    
[HKLM\Software\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}]    
[HKLM\Software\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}]    
[HKLM\Software\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}]    
[HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\omigaplussvc]    
[HKLM\Software\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}]    
[HKLM\Software\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}]    
[HKLM\Software\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}]    
[HKLM\Software\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}]    
[HKLM\Software\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}]    
[HKLM\Software\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}]    
[HKLM\Software\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}]    
[HKLM\Software\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}]    
[HKLM\Software\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}]    
[HKLM\Software\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}]    
[HKLM\Software\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}]    
[HKLM\Software\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}]    
[HKLM\Software\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}]    
[HKLM\Software\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}]    
[HKLM\Software\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}]    
[HKLM\Software\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}]    
[HKLM\Software\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}]    
[HKLM\Software\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}]    
[HKLM\Software\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}]    
[HKLM\Software\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}]    
[HKLM\Software\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}]    
[HKLM\Software\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}]    
[HKLM\Software\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}]    
[HKLM\Software\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}]    
[HKLM\Software\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}]    
[HKLM\Software\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}]    
[HKLM\Software\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}]    
[HKLM\Software\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}]    
[HKLM\Software\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}]    
[HKLM\Software\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}]    
[HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\eSafeSvc]    
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{66F57190-01EB-45A6-8260-7895267209F7}]    
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{66F57190-01EB-45A6-8260-7895267209F7}]    
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{66F57190-01EB-45A6-8260-7895267209F7}]    
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110311341138}]    
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110311531129}]    
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{21111111-1111-1111-1111-110111991162}]    
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:tuto4pc_fr_43    
C:\Users\patrice\AppData\Roaming\Mozilla\Firefox\Profiles\sqlfju13.default-1376418979694\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com    
C:\Program Files (x86)\PlayerSide    
C:\Program Files (x86)\Plus-HD-2.5    
C:\Program Files (x86)\SaveShare    
C:\Program Files (x86)\SweetPacks    
C:\Users\patrice\AppData\Local\playerside Air    
C:\Users\patrice\AppData\Local\Updater19962    
C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff    
C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\iefogiieekeeeeaiklglonbockmhmkgd    
[HKCU\Software\AppDataLow\Software\Plus-HD-2.5]    
C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\crossriderManifest.json    
C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensionData\plugins\102_dealply_m.js    
C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensionData\plugins\128_superfish_pricora_m.js    
C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensionData\plugins\13_CrossriderAppUtils.js    
C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensionData\plugins\14_CrossriderUtils.js    
C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensionData\plugins\78_CrossriderInfo.js    
C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\js\lib\crossriderAPI.js    
C:\Users\patrice\AppData\Local\Temp\SHSetup.exe    
C:\Windows\Installer\2221796.msi    
C:\Users\patrice\AppData\Roaming\Mozilla\Firefox\Profiles\fgh2dyav.default\prefs.js (.not file.) 
O4 - GS\Programs: Create Amazing Presentations.lnk - Clé orpheline 
O4 - GS\Desktop: Corbeille - Raccourci.lnk - Clé orpheline 
[MD5.00000000000000000000000000000000] [APT] [{19CDBA0B-6AE8-4CB6-8097-A44E2930C561}] (...) -- C:\Program Files (x86)\Bible\OlbDel.exe (.not file.)   [0] 
[MD5.00000000000000000000000000000000] [APT] [{4CDFA995-3908-4984-BDAC-4B6AC69AE4ED}] (...) -- C:\Users\patrice\Downloads\DofusInstaller (1).exe (.not file.)   [0] 
[MD5.00000000000000000000000000000000] [APT] [{5C4C9367-F454-4A46-8F17-70978B23DADD}] (...) -- C:\Users\patrice\Downloads\Setup_www.laboitakados.com (1).exe (.not file.)   [0] 
[MD5.00000000000000000000000000000000] [APT] [{5C7D0E6A-75C8-4A18-A355-FB30903C3F61}] (...) -- C:\Users\patrice\Desktop\PayPal Money Generator V2.7.exe (.not file.)   [0] 
[MD5.00000000000000000000000000000000] [APT] [{646510B1-2713-45FB-993B-CF4E2E5FC563}] (...) -- C:\Users\patrice\Downloads\BubblehitSDM.exe (.not file.)   [0] 
[MD5.00000000000000000000000000000000] [APT] [{75BFD38F-DB84-429B-951D-5858A9DF98D2}] (...) -- C:\Users\patrice\Downloads\BubblehitSDM (1).exe (.not file.)   [0] 
[MD5.00000000000000000000000000000000] [APT] [{ED7E8875-4751-4B06-A34E-869D5273166D}] (...) -- C:\Users\patrice\Downloads\proxygrabberv2.exe (.not file.)   [0] 
[HKCU\Software\BareDeSurf]     
[HKLM\Software\Wow6432Node\Vittalia]     
O43 - CFD: 17/07/2013 - 23:41:47 - [0,000] ----D C:\Users\patrice\AppData\Local\Jrim_Software 
G1 - GCS: Preference [User Data\Default] http://www2.delta-search.com   
O2 - BHO: Google Toolbar Helper [64Bits] - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Google Toolbar.) -- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll   
O3 - Toolbar: Google Toolbar [64Bits] - [HKLM]{2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll   
O3 - Toolbar\WebBrowser: (no name) [64Bits] - [HKCU]{2318C2B1-4965-11D4-9B18-009027A5CD4F} Clé orpheline    
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM][64Bits] -- {18455581-E099-4BA8-BC6B-F34B2F06600C}   
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM][64Bits] -- {2318C2B1-4965-11d4-9B18-009027A5CD4F}   
[HKLM\Software\Wow6432Node\VBMZ]     
[MD5.60FB52C07D89635DDEBDA4B51DF05196] [WIS][05/04/2013] (.Google Inc. - Google Toolbar for Internet Explorer.) -- C:\Windows\Installer\e787e.msi   [28160]   
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4D91-8333-CF10577473F7}]    
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{18455581-E099-4BA8-BC6B-F34B2F06600C}]    
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{2318C2B1-4965-11d4-9B18-009027A5CD4F}]    
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0E12F736682067FDE4D1158D5940A82E]    
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1A24B5BB8521B03E0C8D908F5ABC0AE6]    
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2B0D56C4F4C46D844A57FFED6F0D2852]    
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\49D4375FE41653242AEA4C969E4E65E0]    
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6AA0923513360135B272E8289C5F13FA]    
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6F7467AF8F29C134CBBAB394ECCFDE96]    
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\922525DCC5199162F8935747CA3D8E59]    
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BCDA179D619B91648538E3394CAC94CC]    
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D677B1A9671D4D4004F6F2A4469E86EA]    
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DD1402A9DD4215A43ABDE169A41AFA0E]    
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E36E114A0EAD2AD46B381D23AD69CDDF]    
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EF8E618DB3AEDFBB384561B5C548F65E]    
[HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\HssSrv]    
[HKLM\Software\Wow6432Node\VBMZ]    
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375]    
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5]    
[HKLM\Software\Microsoft\Internet Explorer\Toolbar]:{2318C2B1-4965-11d4-9B18-009027A5CD4F}    
C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll    
C:\Windows\Installer\e787e.msi    
O42 - Logiciel: Java 7 Update 17 - (.Oracle.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F83217017FF}     
 O42 - Logiciel: Java 6 Update 20 (64-bit) - (.Sun Microsystems, Inc..) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F86416020FF}     
FirewallRAZ
Emptytemp
EmptyCLSID


--------------------------------------------------------------------------------------------
* Lance ZHPFix à partir du raccourci sur ton Bureau (si tu es sous Windows Vista ou Windows 7, fais le par un clic-droit --> Exécuter en tant qu'administrateur) 

* Clique sur l'icone représentant le presse-papier ("coller le presse-papier") 
le script doit automatiquement apparaitre dans ZHPFix, sinon, colle-le (Ctrl+v) 
* Clique sur le bouton GO pour lancer le nettoyage 
* Copie/colle la totalité du rapport dans ta prochaine réponse.

-> laisse travailler l'outil et ne touche à rien ... 


-> S'il t'est demandé de redémarrer le PC pour finir le nettoyage, fais le ! 

Une fois terminé, un nouveau rapport s'affiche : poste le contenu de ce dernier dans ta prochaine réponse ... 

( ce rapport est en outre sauvegardé dans ce dossier  C:/ZHP/ZHPFix(R1) 



@+

laulaudu26700 · Answer

Rapport de ZHPFix 2013.8.28.2 par Nicolas Coolman, Update du 28/08/2013
Fichier d'export Registre : C:\ZHP\ZHPExportRegistry-06-09-2013-17-22-14.txt
Run by patrice at 06/09/2013 17:22:13
High Elevated Privileges : OK
Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)

Corbeille vidée

========== Logiciel(s) ==========
ABSENT Uninstall Process: c:\program files (x86)\plus-hd-2.5\uninstall.exe
SUPPRIME WebAdSystem
ABSENT Software Key: {ECCD84AC-A835-4BB0-A9B8-57BE03E365D6}
SUPPRIME Google Toolbar for Internet Explorer
SUPPRIME Java 7 Update 17
ABSENT Software Key: {26A24AE4-039D-4CA4-87B4-2F86416020FF}

========== Processus mémoire ==========
SUPPRIME Memory Process: C:\Users\patrice\AppData\Local\Temp\SHSetup.exe

========== Clé(s) du Registre ==========
SUPPRIME [HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Plus-HD-2.5]
SUPPRIME [HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{18455581-E099-4BA8-BC6B-F34B2F06600C}]
SUPPRIME [HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{26A24AE4-039D-4CA4-87B4-2F83217017FF}]
SUPPRIME Key: CLSID BHO: {66F57190-01EB-45A6-8260-7895267209F7}
SUPPRIME Key: HKCU\Software\AppDataLow\Software\Plus-HD-2.5
SUPPRIME Key: HKCU\Software\UpToDown
SUPPRIME Key: HKLM\Software\Wow6432Node\svchost
ERREUR Key: Service Legacy: LEGACY_ESGIGUARD
ABSENT Key: HKLM\Software\Google\Chrome\Extensions\algmakeomkafjglfhpomolfhjppoojff
ABSENT Key: HKLM\Software\Google\Chrome\Extensions\iefogiieekeeeeaiklglonbockmhmkgd
ABSENT Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{66F57190-01EB-45A6-8260-7895267209F7}
ABSENT Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Plus-HD-2.5
ABSENT Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{1eeb7942-b46a-450f-b3e2-97bee17c2660}
ABSENT Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{ECCD84AC-A835-4BB0-A9B8-57BE03E365D6}
SUPPRIME Key*: HKLM\Software\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
SUPPRIME Key*: HKLM\Software\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
SUPPRIME Key*: HKLM\Software\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
SUPPRIME Key*: HKLM\Software\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
SUPPRIME Key*: HKLM\Software\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
SUPPRIME Key*: HKLM\Software\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
SUPPRIME Key*: HKLM\Software\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
SUPPRIME Key*: HKLM\Software\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
SUPPRIME Key*: HKLM\Software\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
SUPPRIME Key*: HKLM\Software\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
SUPPRIME Key*: HKLM\Software\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
SUPPRIME Key*: HKLM\Software\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
SUPPRIME Key*: HKLM\Software\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
SUPPRIME Key: HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\omigaplussvc
SUPPRIME Key*: HKLM\Software\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
SUPPRIME Key*: HKLM\Software\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
SUPPRIME Key*: HKLM\Software\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
SUPPRIME Key*: HKLM\Software\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
SUPPRIME Key*: HKLM\Software\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
SUPPRIME Key*: HKLM\Software\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
SUPPRIME Key*: HKLM\Software\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
SUPPRIME Key*: HKLM\Software\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
SUPPRIME Key*: HKLM\Software\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
SUPPRIME Key*: HKLM\Software\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
SUPPRIME Key*: HKLM\Software\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
SUPPRIME Key*: HKLM\Software\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
SUPPRIME Key*: HKLM\Software\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
SUPPRIME Key*: HKLM\Software\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
SUPPRIME Key*: HKLM\Software\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
SUPPRIME Key*: HKLM\Software\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
SUPPRIME Key*: HKLM\Software\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
SUPPRIME Key*: HKLM\Software\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
SUPPRIME Key*: HKLM\Software\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
SUPPRIME Key*: HKLM\Software\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
SUPPRIME Key*: HKLM\Software\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
SUPPRIME Key*: HKLM\Software\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
SUPPRIME Key*: HKLM\Software\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
SUPPRIME Key*: HKLM\Software\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
SUPPRIME Key*: HKLM\Software\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
SUPPRIME Key*: HKLM\Software\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
SUPPRIME Key*: HKLM\Software\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
SUPPRIME Key*: HKLM\Software\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
SUPPRIME Key*: HKLM\Software\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
SUPPRIME Key*: HKLM\Software\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
SUPPRIME Key: HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\eSafeSvc
SUPPRIME Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{66F57190-01EB-45A6-8260-7895267209F7}
SUPPRIME Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{66F57190-01EB-45A6-8260-7895267209F7}
ABSENT Key: HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{66F57190-01EB-45A6-8260-7895267209F7}
SUPPRIME Key: HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110311341138}
SUPPRIME Key: HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110311531129}
SUPPRIME Key: HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{21111111-1111-1111-1111-110111991162}
SUPPRIME Key: HKCU\Software\BareDeSurf
SUPPRIME Key: HKLM\Software\Wow6432Node\Vittalia
ABSENT Key: CLSID BHO: {AA58ED58-01DD-4d91-8333-CF10577473F7}
SUPPRIME Key: HKLM\Software\Wow6432Node\VBMZ
ABSENT Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4D91-8333-CF10577473F7}
ABSENT Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{18455581-E099-4BA8-BC6B-F34B2F06600C}
ABSENT Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{2318C2B1-4965-11d4-9B18-009027A5CD4F}
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0E12F736682067FDE4D1158D5940A82E
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1A24B5BB8521B03E0C8D908F5ABC0AE6
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2B0D56C4F4C46D844A57FFED6F0D2852
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\49D4375FE41653242AEA4C969E4E65E0
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6AA0923513360135B272E8289C5F13FA
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6F7467AF8F29C134CBBAB394ECCFDE96
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\922525DCC5199162F8935747CA3D8E59
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BCDA179D619B91648538E3394CAC94CC
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D677B1A9671D4D4004F6F2A4469E86EA
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DD1402A9DD4215A43ABDE169A41AFA0E
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E36E114A0EAD2AD46B381D23AD69CDDF
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EF8E618DB3AEDFBB384561B5C548F65E
SUPPRIME Key: HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\HssSrv
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5

========== Valeur(s) du Registre ==========
SUPPRIME RunValue: tuto4pc_fr_43
ABSENT [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:tuto4pc_fr_43
ABSENT Toolbar: {2318C2B1-4965-11d4-9B18-009027A5CD4F}
SUPPRIME Toolbar: {2318C2B1-4965-11D4-9B18-009027A5CD4F}
ABSENT [HKLM\Software\Microsoft\Internet Explorer\Toolbar]:{2318C2B1-4965-11d4-9B18-009027A5CD4F}
ABSENT Valeur Domain Profile: FirewallRaz : 
SUPPRIME FirewallRaz (None) : {DB403606-89E8-4523-904A-C40BF539EA04}
SUPPRIME FirewallRaz (None) : {FEAD7D0A-E2BF-4DC0-92A2-3BB18AC6C956}
SUPPRIME FirewallRaz (Public) : {84EC59A9-0BF1-459E-80DE-CC408BCD7961}
SUPPRIME FirewallRaz (Public) : {6A536287-E0B1-4755-917C-92966A20A457}
SUPPRIME FirewallRaz (Domain) : NetPres-In-TCP-NoScope
SUPPRIME FirewallRaz (Domain) : NetPres-Out-TCP-NoScope
SUPPRIME FirewallRaz (None) : NetPres-WSD-In-UDP
SUPPRIME FirewallRaz (None) : NetPres-WSD-Out-UDP
SUPPRIME FirewallRaz (Public) : NetPres-In-TCP
SUPPRIME FirewallRaz (Public) : NetPres-Out-TCP
SUPPRIME FirewallRaz (None) : {03C38D5F-2C0D-4BB8-A658-F28A166735B1}
SUPPRIME FirewallRaz (None) : {FAB5CC42-E455-4F56-AD2C-A98B54A3A163}
SUPPRIME FirewallRaz (None) : {7B62528D-A762-4BEA-AC13-754CA38B6525}
SUPPRIME FirewallRaz (None) : {4FD85CB9-5269-4FDC-B28F-10AB3E6DE713}
SUPPRIME FirewallRaz (None) : {E9570737-5C3A-4471-8227-5B448DA7F8B9}
SUPPRIME FirewallRaz (Public) : {54DAD65B-83FB-4B03-BB6F-ACDE8AEE004C}
SUPPRIME FirewallRaz (Public) : {23EF92B9-7F7B-43A7-821A-E0CD81026795}
SUPPRIME FirewallRaz (Public) : {0FAC3CE9-DA8E-4D89-83B5-1E7A5E4B8946}
SUPPRIME FirewallRaz (Public) : {B2CF7B04-60DD-4262-9D9F-00BDBF9C66F9}
SUPPRIME FirewallRaz (Public) : {B7CDBB77-8C56-4162-AB86-AA3718A3F2C6}
SUPPRIME FirewallRaz (Public) : {EEF7BEC6-3594-4E06-A450-EEE07D842F02}
SUPPRIME FirewallRaz (Public) : {AFA94BAD-CCDD-480A-9EC1-A8AC72ABF9FF}
SUPPRIME FirewallRaz (Public) : {595E18D9-C54D-4231-BA1E-C65BD91C9F9C}
SUPPRIME FirewallRaz (Public) : {9F31FCD8-95D7-4DC1-B113-20206E108593}
SUPPRIME FirewallRaz (Public) : {84D10C8D-92F3-4B2C-ABBF-F91E690DEC2C}

========== Elément(s) de donnée du Registre ==========
SUPPRIME R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer

========== Préférences navigateur ==========
SUPPRIME Folder Chrome: C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff
SUPPRIME Folder Chrome: C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\iefogiieekeeeeaiklglonbockmhmkgd
ABSENT Chrome File: C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Preferences

========== Dossier(s) ==========
Aucun dossiers CLSID Local utilisateur vide

========== Fichier(s) ==========
SUPPRIME File: c:\users\patrice\appdata\local\google\chrome\user data\default\preferences 
ABSENT File: c:\program files (x86)\visualbee\visualbee\1.8.9.1\bh\visualbee.dll
ABSENT File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\background.html
ABSENT File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\crossridermanifest.json
ABSENT File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensiondata\manifest.xml
ABSENT File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensiondata\plugins.json
ABSENT File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensiondata\plugins\101_cortica_m.js
ABSENT File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensiondata\plugins\102_dealply_m.js
ABSENT File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensiondata\plugins\103_intext_5_m.js
ABSENT File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensiondata\plugins\104_jollywallet_m.js
ABSENT File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensiondata\plugins\105_corticas_m.js
ABSENT File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensiondata\plugins\107_coupish_m.js
ABSENT File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensiondata\plugins\108_icm_m.js
ABSENT File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensiondata\plugins\116_ads_only_5_m.js
ABSENT File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensiondata\plugins\117_coupons_intext_ads_5_m.js
ABSENT File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensiondata\plugins\119_similar_web_m.js
ABSENT File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensiondata\plugins\120_luck_m.js
ABSENT File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensiondata\plugins\123_intext_adv_m.js
ABSENT File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensiondata\plugins\124_superfish_no_search_no_coupons_m.js
ABSENT File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensiondata\plugins\125_arcadi2_m.js
ABSENT File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensiondata\plugins\126_revizer_ws_m.js
ABSENT File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensiondata\plugins\127_revizer_p_m.js
ABSENT File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensiondata\plugins\128_superfish_pricora_m.js
ABSENT File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensiondata\plugins\129_widdit_m.js
ABSENT File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensiondata\plugins\135_arcadi3_m.js
ABSENT File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensiondata\plugins\138_getdeal_m.js
ABSENT File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensiondata\plugins\13_crossriderapputils.js
ABSENT File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensiondata\plugins\141_corticas_ru_m.js.js
ABSENT File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensiondata\plugins\142_intext_fa_m.js
ABSENT File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensiondata\plugins\14_crossriderutils.js
ABSENT File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensiondata\plugins\155_ibario_pops_m.js
ABSENT File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensiondata\plugins\158_50onred_ads_only_no_fb_m.js
ABSENT File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensiondata\plugins\159_cortica_rollover_m.js
ABSENT File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensiondata\plugins\17_jquery.js
ABSENT File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensiondata\plugins\19_chappapiwrapper.js
ABSENT File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensiondata\plugins\1_base.js
ABSENT File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensiondata\plugins\21_debug.js
ABSENT File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensiondata\plugins\22_resources.js
ABSENT File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensiondata\plugins\28_initializer.js
ABSENT File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensiondata\plugins\47_resources_background.js
ABSENT File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensiondata\plugins\4_jquery_1_7_1.js
ABSENT File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensiondata\plugins\64_appapimessage.js
ABSENT File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensiondata\plugins\72_appapivalidation.js
ABSENT File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensiondata\plugins\78_crossriderinfo.js
ABSENT File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensiondata\plugins\80_chpopupappapi.js
ABSENT File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensiondata\plugins\87_ginyas_wrapper.js
ABSENT File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensiondata\plugins\91_monetizationloader.js.js
ABSENT File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensiondata\plugins\92_superfish_m.js
ABSENT File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensiondata\plugins\93_superfish_no_coupons_m.js
ABSENT File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensiondata\plugins\97_resourceapiwrapper.js
ABSENT File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensiondata\usercode\background.js
ABSENT File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensiondata\usercode\extension.js
ABSENT File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\icons\actions\1.png
ABSENT File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\icons\icon128.png
ABSENT File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\icons\icon16.png
ABSENT File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\icons\icon48.png
ABSENT File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\js\api\chrome.js
ABSENT File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\js\api\cookie.js
ABSENT File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\js\api\message.js
ABSENT File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\js\api\pageaction.js
ABSENT File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\js\api\pageactionbg.js
ABSENT File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\js\background.js
ABSENT File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\js\lib\app_api.js
ABSENT File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\js\lib\bg_app_api.js
ABSENT File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\js\lib\consts.js
ABSENT File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\js\lib\cookie_store.js
ABSENT File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\js\lib\crossriderapi.js
ABSENT File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\js\lib\delegate.js
ABSENT File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\js\lib\events.js
ABSENT File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\js\lib\extensiondatastore.js
ABSENT File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\js\lib\installer.js
ABSENT File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\js\lib\logfile.js
ABSENT File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\js\lib\logging.js
ABSENT File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\js\lib\onbgdocumentload.js
ABSENT File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\js\lib\popupresource
ewpopup.js
ABSENT File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\js\lib\popupresource\popup.js
ABSENT File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\js\libeports.js
ABSENT File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\js\lib\storagewrapper.js
ABSENT File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\js\lib\updatemanager.js
ABSENT File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\js\lib\util.js
ABSENT File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\js\lib\xhr.js
ABSENT File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\js\main.js
ABSENT File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\manifest.json
ABSENT File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\popup.html
SUPPRIME File: c:\users\patrice\appdata\local\google\chrome\user data\default\local extension settings\algmakeomkafjglfhpomolfhjppoojff\current 
ABSENT File: c:\users\patrice\appdata\local\google\chrome\user data\default\local extension settings\algmakeomkafjglfhpomolfhjppoojff\manifest-000141
SUPPRIME File: c:\users\patrice\appdata\local\google\chrome\user data\default\databases\chrome-extension_algmakeomkafjglfhpomolfhjppoojff_0\3 
ABSENT File: c:\users\patrice\appdata\local\google\chrome\user data\default\databases\chrome-extension_algmakeomkafjglfhpomolfhjppoojff_0\3-journal
SUPPRIME File: c:\users\patrice\appdata\local\google\chrome\user data\default\local extension settings\algmakeomkafjglfhpomolfhjppoojff\log 
SUPPRIME File*: c:\users\patrice\appdata\local	emp\shsetup.exe
ABSENT Folder/File: c:\windows\installer\2221796.msi
ABSENT Folder/File: c:\users\patrice\appdataoaming\mozilla\firefox\profiles\sqlfju13.default-1376418979694\***@***
ABSENT Folder/File: c:\program files (x86)\playerside
ABSENT Folder/File: c:\users\patrice\appdata\local\playerside air
ABSENT Folder/File: c:\users\patrice\appdata\local\updater19962
ABSENT Folder/File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff
ABSENT Folder/File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\iefogiieekeeeeaiklglonbockmhmkgd
ABSENT Folder/File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\crossridermanifest.json
ABSENT Folder/File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensiondata\plugins\102_dealply_m.js
ABSENT Folder/File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensiondata\plugins\128_superfish_pricora_m.js
ABSENT Folder/File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensiondata\plugins\13_crossriderapputils.js
ABSENT Folder/File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensiondata\plugins\14_crossriderutils.js
ABSENT Folder/File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\extensiondata\plugins\78_crossriderinfo.js
ABSENT Folder/File: c:\users\patrice\appdata\local\google\chrome\user data\default\extensions\algmakeomkafjglfhpomolfhjppoojff\1.24.79_0\js\lib\crossriderapi.js
ABSENT Folder/File: c:\users\patrice\appdata\local	emp\shsetup.exe
ABSENT Folder/File: c:\users\patrice\appdataoaming\mozilla\firefox\profiles\fgh2dyav.default\prefs.js (.not file.)
SUPPRIME File: c:\users\patrice\appdataoaming\microsoft\windows\start menu\programs\create amazing presentations.lnk 
SUPPRIME File: c:\users\patrice\desktop\corbeille - raccourci.lnk 
ABSENT Folder/File: c:\windows\installer\e787e.msi
SUPPRIME Temporaires Windows

========== Tache planifiée ==========
SUPPRIME Task: Desk 365 RunAsStdUser
SUPPRIME Task: {950A656A-BD4C-4B06-BA3A-A4BE09938ED9}
SUPPRIME Task: {DEDC09C4-EDF4-4466-9214-D3C4DC760C26}
SUPPRIME Task: {19CDBA0B-6AE8-4CB6-8097-A44E2930C561}
SUPPRIME Task: {4CDFA995-3908-4984-BDAC-4B6AC69AE4ED}
SUPPRIME Task: {5C4C9367-F454-4A46-8F17-70978B23DADD}
SUPPRIME Task: {5C7D0E6A-75C8-4A18-A355-FB30903C3F61}
SUPPRIME Task: {646510B1-2713-45FB-993B-CF4E2E5FC563}
SUPPRIME Task: {75BFD38F-DB84-429B-951D-5858A9DF98D2}
SUPPRIME Task: {ED7E8875-4751-4B06-A34E-869D5273166D}


========== Récapitulatif ==========
1 : Processus mémoire
87 : Clé(s) du Registre
31 : Valeur(s) du Registre
1 : Elément(s) de donnée du Registre
1 : Dossier(s)
110 : Fichier(s)
6 : Logiciel(s)
3 : Préférences navigateur
10 : Tache planifiée


End of clean in 02mn 24s

========== Chemin de fichier rapport ==========
C:\ZHP\ZHPFix[R1].txt - 06/09/2013 17:22:14 [29572]






par contre pendant le nettoyage il ya un truc qui me proposer de supprimer windows installer et j'ai dis non, je sais pas si sa change quelque chose voila sur ce merci de m'aider a +

Utilisateur anonyme · Answer

Re

Relance une analyse avec ton antivirus .
Tiens moi au courant;merci
@+

laulaudu26700 · Answer

Ok

laulaudu26700 · Answer

Mon antivirus na rien detecter

Utilisateur anonyme · Answer

Bonjour 

Pour vérifier les mises à jour logiciels à appliquer sur ton PC
https://www.flexera.com/products/operations/software-vulnerability-management.html
Divers liens te seront proposés pour les logiciels non à jour.


@+

laulaudu26700 · Answer

re guillaume escuse moi du temp que je te repond mais je n'etais pas chez moi donc la je vais verifier les Maj

laulaudu26700 · Answer

Status / Currently Processing:
There might be problems loading the Java Applet in your browser.

Le probleme c'est que lorsque je reboot mon pc il me propose de l'installer je met oui mais rien ne se passe, donc je peux pas faire ce scan sans java?

Utilisateur anonyme · Answer

Bonsoir

Installe Java et ensuite tu procèdes à ce contrôle.

@+

laulaudu26700 · Answer

Congratulations, the scan that just completed of your PC did not detect any insecure programs

Je pense que mes logiciel sont mis a jour

Utilisateur anonyme · Answer

Re

C'est une bonne réponse ;-))

Je te propose donc de finaliser ce sujet;on désinstalle tous les outils utilisés hormis MBAM.

Télécharge DelFix de Xplode

Lance le.
Tu as 5 choix :

 Réactiver l'UAC
 Supprimer les outils de désinfection (cocher par défaut)
Effectuer une sauvegarde du registre
 Purger la restauration de système
Réinitialisation des paramètres usine

Tu coches ceux qui sont en gras 
et tu exécutes
Le rapport se trouve ici généralement
C:\DelFix.txt 



Le reste de la sécurité : http://forum.malekal.com/comment-securiser-son-ordinateur.html

@+

laulaudu26700 · Answer

c'est bon et je t'envois le rapport? En tous cas merci pour ton aide :)

Utilisateur anonyme · Answer

Bonjour

Oui tu peux poster le rapport;merci

@+

laulaudu26700 · Answer

# DelFix v10.4 - Rapport créé le 13/09/2013 à 07:58:03
# Mis à jour le 19/07/2013 par Xplode
# Nom d'utilisateur : patrice - PATRICE-HP
# Système d'exploitation : Windows 7 Home Premium Service Pack 1 (64 bits)

~ Activation de l'UAC ... OK

~ Suppression des outils de désinfection ...

Supprimé : C:\USBFix
Supprimé : C:\ZHP
Supprimé : C:\Program Files (x86)\ZHPDiag
Supprimé : C:\PhysicalDisk0_MBR.bin
Supprimé : C:\Users\patrice\Desktop\ZHPFixReport.txt
Supprimé : C:\Users\Public\Desktop\ZHPDiag.lnk
Supprimé : C:\Users\Public\Desktop\ZHPFix.lnk
Supprimé : C:\Users\patrice\Downloads\adwcleaner(1).exe
Supprimé : C:\Users\patrice\Downloads\AdwCleaner-3.002(1).exe
Supprimé : C:\Users\patrice\Downloads\AdwCleaner-3.002.exe
Supprimé : C:\Users\patrice\Downloads\AdwCleaner.exe
Supprimé : C:\Users\patrice\Downloads\Extras.Txt
Supprimé : C:\Users\patrice\Downloads\JRT.exe
Supprimé : C:\Users\patrice\Downloads\OTL.Txt
Supprimé : C:\Users\patrice\Downloads\OTL.exe
Supprimé : C:\Users\patrice\Downloads\UsbFix.exe
Supprimé : C:\Users\patrice\Downloads\ZHPDiag2.exe
Supprimée : HKLM\SOFTWARE\OldTimer Tools
Supprimée : HKLM\SOFTWARE\AdwCleaner
Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ZHPDiag_is1

~ Purge de la restauration système ...

Supprimé : RP #128 [WebAdSystem | 09/06/2013 15:20:05]
Supprimé : RP #129 [Windows Update | 09/07/2013 18:09:01]
Supprimé : RP #130 [Windows Update | 09/12/2013 08:19:28]
Supprimé : RP #131 [Windows Update | 09/12/2013 09:19:36]
Supprimé : RP #132 [Installed Java 7 Update 25 | 09/12/2013 22:02:08]
Supprimé : RP #133 [Removed Java 7 Update 25 | 09/12/2013 22:06:58]
Supprimé : RP #134 [Installed Java 7 Update 25 | 09/12/2013 22:07:30]
Supprimé : RP #135 [Installed Java 7 Update 40 | 09/12/2013 22:11:34]

Nouveau point de restauration créé !

########## - EOF - ##########

Utilisateur anonyme · Answer

Bonsoir

Et bien voilà un sujet résolu ;-))

@+

Comment suprimer le backdoor:MSIL/bladabindi.AA

23 réponses

Discussions similaires

Newsletters