Adpunisher

Merci Electricien 69!
(Désolé mon français écrit n'est pas très bon!! Je suis Argentine)
Je n'ai pas pu encore le faire, car mon ordi ne connecte plus à internet.
J'ai wifi parce que je lui utilise avec mon portable et tablet mais je n'arrive pas à connecter mon ordi.
- Crois tu que c'est lié au virus?
J'ai essayée par toutes les chemins classiques de connexion et cet impossible... Je ne vois même pas le réseau.
- As tu un conseil à me donner?

Merci encore!!!

Hola!

Desolée je suis en retard avec ma reponse!!!
J'ai peux reconnecter mon ordi a internet, ça c'est fait!
Après une heure et demi j'ai installée ZHPdiag... mmmmm... et en fin j'ai mon rapport :
https://www.cjoint.com/c/EEEtBlVYJCs

J'attend la suit ;) ;) ...
Merci

Holà!
Voilà https://www.cjoint.com/c/EEFomlTRipC

# AdwCleaner v4.205 - Logfile created 31/05/2015 at 20:50:26
# Updated 21/05/2015 by Xplode
# Database : 2015-05-25.3 [Server]
# Operating system : Windows 7 Professional Service Pack 1 (x64)
# Username : Olivier.Nechad - NECHAD-LAPTOP
# Running from : C:\Users\olivier.nechad\Downloads\adwcleaner_4.205.exe
# Option : Scan

• • • • • [ Services ] *****
        • [ Files / Folders ] *****

File Found : C:\Users\olivier.nechad\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_websearch.goodforsearch.info_0.localstorage
File Found : C:\Users\olivier.nechad\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_websearch.goodforsearch.info_0.localstorage-journal
File Found : C:\Users\olivier.nechad\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.reimageplus.com_0.localstorage
File Found : C:\Users\olivier.nechad\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.reimageplus.com_0.localstorage-journal
File Found : C:\Users\olivier.nechad\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.tangojhb.co.za_0.localstorage
File Found : C:\Users\olivier.nechad\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.tangojhb.co.za_0.localstorage-journal
Folder Found : C:\ProgramData\{d4048835-46d8-1da2-d404-4883546d20d5}
Folder Found : C:\ProgramData\mfblihoajhfldhnkglcmlbhkomloaffp
Folder Found : C:\Users\olivier.nechad\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaahlfahldnilidgnlikdckbfehhca
Folder Found : C:\Users\olivier.nechad\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck
Folder Found : C:\Users\olivier.nechad\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck
Folder Found : C:\Users\olivier.nechad\AppData\Local\Google\Chrome\User Data\Default\Extensions\fcfenmboojpjinhpgggodefccipikbpd

• • • • • [ Scheduled tasks ] *****
        • [ Shortcuts ] *****
        • [ Registry ] *****

Data Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - *.local
Data Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyServer] - 127.0.0.1:8080
Key Found : HKCU\Software\AppDataLow\{4A0F38A9-FE55-4B89-B73F-E60FDC0F72E9}
Key Found : HKCU\Software\Google\Chrome\Extensions\fcfenmboojpjinhpgggodefccipikbpd
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{10ECCE17-29B5-4880-A8F5-EAD298611484}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Key Found : HKLM\SOFTWARE\{12A61307-94CD-4F8E-94BC-918E511FAA81}
Key Found : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Key Found : HKLM\SOFTWARE\{4A0F38A9-FE55-4B89-B73F-E60FDC0F72E9}
Key Found : HKLM\SOFTWARE\Classes\AppID\{28FF42B8-A0DA-4BE5-9B81-E26DD59B350A}
Key Found : HKLM\SOFTWARE\Classes\AppID\{C007DADD-132A-624C-088E-59EE6CF0711F}
Key Found : HKLM\SOFTWARE\Classes\AppID\REI_AxControl.DLL
Key Found : HKLM\SOFTWARE\Classes\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Key Found : HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
Key Found : HKLM\SOFTWARE\Classes\Interface\{9BB31AD8-5DB2-459E-A901-DEA536F23BA4}
Key Found : HKLM\SOFTWARE\Classes\Interface\{BD51A48E-EB5F-4454-8774-EF962DF64546}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{398121FE-8082-4764-BD05-A21A334B7FDC}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{EB559340-3A8F-4456-B24D-160098054EF0}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{FA6468D2-FAA4-4951-A53B-2A5CF9CC0A36}
Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\aaaaahlfahldnilidgnlikdckbfehhca
Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\eofcbnmajmjmplflapaojjnihcjkigck
Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\eofcbnmajmjmplflapaojjnihcjkigck
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{37476589-E48E-439E-A706-56189E2ED4C4}_is1
Key Found : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\IePluginService
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{9BB31AD8-5DB2-459E-A901-DEA536F23BA4}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{BD51A48E-EB5F-4454-8774-EF962DF64546}
Key Found : [x64] HKLM\SOFTWARE\Google\Chrome\Extensions\aaaaahlfahldnilidgnlikdckbfehhca
Key Found : [x64] HKLM\SOFTWARE\Reimage
Key Found : HKU\.DEFAULT\Software\AskPartnerNetwork
Value Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [DefaultConnectionSettings]
Value Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [SavedLegacySettings]

• • • • • [ Web browsers ] *****

-\\ Internet Explorer v11.0.9600.17041

Setting Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL] - hxxp://www.qone8.com/web/?type=ds&ts=1397808342&from=ild&uid=TOSHIBAXMK5061GSY_41DBT4IATXX41DBT4IAT&q={searchTerms}
Setting Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL] - hxxp://start.qone8.com/?type=hp&ts=1397808342&from=ild&uid=TOSHIBAXMK5061GSY_41DBT4IATXX41DBT4IAT
Setting Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page] - hxxp://start.qone8.com/?type=hp&ts=1397808342&from=ild&uid=TOSHIBAXMK5061GSY_41DBT4IATXX41DBT4IAT
Setting Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page] - hxxp://www.qone8.com/web/?type=ds&ts=1397808342&from=ild&uid=TOSHIBAXMK5061GSY_41DBT4IATXX41DBT4IAT&q={searchTerms}

-\\ Google Chrome v42.0.2311.90

[C:\Users\olivier.nechad\AppData\Local\Google\Chrome\User Data\Default\Preferences] - Found [Extension] : eofcbnmajmjmplflapaojjnihcjkigck
[C:\Users\olivier.nechad\AppData\Local\Google\Chrome\User Data\Default\Preferences] - Found [Extension] : aaaaahlfahldnilidgnlikdckbfehhca
[C:\Users\olivier.nechad\AppData\Local\Google\Chrome\User Data\Default\Preferences] - Found [Extension] : fcfenmboojpjinhpgggodefccipikbpd
[C:\Users\olivier.nechad\AppData\Local\Google\Chrome\User Data\Default\Preferences] - Found [Extension] : eofcbnmajmjmplflapaojjnihcjkigck
[C:\Users\olivier.nechad\AppData\Local\Google\Chrome\User Data\Default\Preferences] - Found [Homepage] : hxxp://www.search.ask.com/?gct=hp

AdwCleaner[R0].txt - [6729 bytes] - [31/05/2015 20:50:26]

########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [6788 bytes] ##########

Ouuuaaaauuuu .... C'est très grave doc ?
Il va à survivre ???
;) ;)

~ ZHPCleaner v2015.5.31.264 by Nicolas Coolman (2015\05\31)
~ Run by Olivier.Nechad (Administrator) (31/05/2015 14:06:16)
~ Forum : https://nicolascoolman.eu
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version : Version OK
~ Type : Repair
~ Report : C:\Users\olivier.nechad\Desktop\ZHPCleaner.txt
~ Quarantine : C:\Users\olivier.nechad\AppData\Roaming\ZHP\ZHPCleaner_Quarantine.txt
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
~ Windows 7, 64-bit Service Pack 1 (Build 7601)


---\\ Services (2)
CLOSED : ReimageRealTimeProtector (PUP.ReimageRepair)
CLOSED : SpyHunter 4 Service (Crapware.SpyHunter)


---\\ Browser internet (6)
DELETED data: HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyHttp1.1 [Bad : 1] (Hijacker.Proxy)
DELETED data: HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyOverride [Bad : <-loopback>] (Hijacker.Proxy)
DELETED data: HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer [Bad : http=127.0.0.1:55893;https=127.0.0.1:55893] (Hijacker.Proxy)
DELETED data: HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable [Bad : 0] (Hijacker.Proxy)
DELETED data: HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings [Bad : Port=55893 <-Loopback>] (Hijacker.Proxy)
DELETED data: HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings [Bad : Port=55893 <-Loopback>] (Hijacker.Proxy)


---\\ Hosts file (0)
~ No malicious items found.


---\\ Scheduled automatic tasks. (2)
DELETED task: [ReimageUpdater] [C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe (Not File) ] (PUP.ReimageRepair)
DELETED task: [SpyHunter4Startup] [C:\Program Files\Enigma Software Group\SpyHunter\Spyhunter4.exe (Not File) ] (Crapware.SpyHunter)


---\\ Explorer ( File, Folder) (40)
MOVED file: C:\Users\olivier.nechad\Desktop\SpyHunter.lnk [Bad : C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter4.exe] (Crapware.SpyHunter)
MOVED file: C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe [Reimage® - Reimage Real Time Protection] (PUP.ReimageRepair)
MOVED file: C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe [Enigma Software Group USA, LLC. - Service scanner interface] (Crapware.SpyHunter)
MOVED file: C:\Users\olivier.nechad\Downloads\ReimageRepair.exe [Reimage® - Reimage Downloader] (PUP.ReimageRepair)
MOVED file: C:\Users\olivier.nechad\Downloads\SpyHunter-Installer (1).exe [Enigma Software Group USA, LLC. - Enigma Installer] (PUP.EnigmaSoftware)
MOVED file: C:\Users\olivier.nechad\Downloads\SpyHunter-Installer (2).exe [Enigma Software Group USA, LLC. - Enigma Installer] (PUP.EnigmaSoftware)
MOVED file: C:\Users\olivier.nechad\Downloads\SpyHunter-installer (3).exe [Enigma Software Group USA, LLC. - Enigma Installer] (PUP.EnigmaSoftware)
MOVED file: C:\Users\olivier.nechad\Downloads\SpyHunter-Installer.exe [Enigma Software Group USA, LLC. - Enigma Installer] (PUP.EnigmaSoftware)
MOVED file: C:\Users\OLIVIE~1.NEC\AppData\Local\Temp\ReimagePackage.exe [Reimage® - Reimage Package] (PUP.ReimageRepair)
MOVED file: C:\Users\OLIVIE~1.NEC\AppData\Local\Temp\ReiSysUpdate.exe [Reimage® - Reimage System Update] (PUP.ReimageRepair)
MOVED file*: C:\Users\olivier.nechad\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_www.superfish.com_0.localstorage (PUP.SpecialSavings)
MOVED file*: C:\Users\olivier.nechad\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_www.superfish.com_0.localstorage-journal (PUP.SpecialSavings)
MOVED file*: C:\Users\olivier.nechad\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_websearch.goodforsearch.info_0.localstorage (Hijacker.SimpleSearches)
MOVED file*: C:\Users\olivier.nechad\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_websearch.goodforsearch.info_0.localstorage-journal (Hijacker.SimpleSearches)
MOVED file*: C:\Users\olivier.nechad\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.reimageplus.com_0.localstorage (PUP.ReimageRepair)
MOVED file*: C:\Users\olivier.nechad\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.reimageplus.com_0.localstorage-journal (PUP.ReimageRepair)
MOVED file: C:\Users\OLIVIE~1.NEC\AppData\Local\Temp\reimage.log (PUP.ReimageRepair)
MOVED file: C:\Windows\Reimage.ini (PUP.ReimageRepair)
MOVED file: C:\Windows\System32\Drivers\EsgScanner.sys (PUP.EnigmaSoftware)
MOVED file: C:\Users\olivier.nechad\AppData\Roaming\appdataFr3.bin (PUP.Optional)
MOVED file: C:\END (PUP.Conduit)
MOVED folder: C:\Program Files (x86)\bestadblocker (PUP.Adblocker)
MOVED folder: C:\Program Files (x86)\BetterMarkIt-soft (PUP.BetterMarkit)
MOVED folder: C:\Program Files (x86)\RRanDoMaPrIce (Adware.Multiplug)
MOVED folder: C:\Program Files (x86)\RRegUlaaraDeals (Adware.Multiplug)
MOVED folder: C:\Program Files (x86)\SalePlluse (Adware.Multiplug)
MOVED folder: C:\Program Files (x86)\SalePlus (Adware.Multiplug)
MOVED folder: C:\Program Files (x86)\Search Extensions (PUP.RocketTab)
MOVED folder: C:\Program Files (x86)\SShopDrOp (Adware.Multiplug)
MOVED folder: C:\Program Files\Enigma Software Group (PUP.EnigmaSoftware)
MOVED folder: C:\Program Files\Reimage (PUP.ReimageRepair)
MOVED folder: C:\ProgramData\2825013784572919320 (Adware.CrossRider)
MOVED folder: C:\ProgramData\APN (Toolbar.Ask)
MOVED folder: C:\ProgramData\IePluginService (Trojan.SProtector)
MOVED folder: C:\ProgramData\Red AdBlocker (PUP.Adblocker)
MOVED folder: C:\ProgramData\Reimage Protector (PUP.ReimageRepair)
MOVED folder: C:\Users\olivier.nechad\AppData\Roaming\Enigma Software Group (PUP.EnigmaSoftware)
MOVED folder: C:\Users\olivier.nechad\AppData\Roaming\RHEng (PUP.Conduit)
MOVED folder: C:\Users\olivier.nechad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter (Crapware.SpyHunter)
MOVED folder: C:\sh4ldr (Crapware.SpyHunter)


---\\ Registry ( Key, Value, Data) (59)
DELETED key: [X64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} [https://www.google.com/webhp?gws_rd=ssl[...]] [qone8] (Hijacker.Qone8)
DELETED key: [X64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} http://www.qone8.com/web/?type=ds&ts=1397808342&from=ild&uid=TOSHIBAXMK5061GSY_41DBT4IATXX41DBT4IAT&q={searchTerms} (Hijacker.Qone8)
DELETED key*: HKCU\Software\WajIEnhance [] (PUP.Wajam)
DELETED key*: HKLM\SYSTEM\CurrentControlSet\Services\ReimageRealTimeProtector [C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe (Not File)] (PUP.ReimageRepair)
DELETED key*: HKLM\SYSTEM\CurrentControlSet\Services\SpyHunter 4 Service [C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe (Not File)] (Crapware.SpyHunter)
DELETED key*: [X64] HKLM\SOFTWARE\Wow6432Node\e59bc5ed-551a-b2b3-8762-28524e16b08a [] (Adware.CrossRider)
DELETED key: [X64] HKLM\SYSTEM\CurrentControlSet\Services\ReimageRealTimeProtector [C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe (Not File)] (PUP.ReimageRepair)
DELETED key: [X64] HKLM\SYSTEM\CurrentControlSet\Services\SpyHunter 4 Service [C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe (Not File)] (Crapware.SpyHunter)
DELETED key*: HKEY_USERS\S-1-5-21-4082451240-2834497003-798440645-2299\Software\1ClickDownload [] (PUP.1ClickDownloader)
DELETED key*: HKEY_USERS\S-1-5-21-4082451240-2834497003-798440645-2299\Software\Reimage [] (PUP.ReimageRepair)
DELETED key*: HKEY_USERS\S-1-5-21-4082451240-2834497003-798440645-2299\Software\Search Extensions [] (PUP.RocketTab)
DELETED key*: HKEY_USERS\S-1-5-21-4082451240-2834497003-798440645-2299\Software\Wajam [] (PUP.Wajam)
DELETED key: HKEY_USERS\S-1-5-21-4082451240-2834497003-798440645-2299\Software\WajIEnhance [] (PUP.Wajam)
DELETED key: HKCU\Software\1ClickDownload [] (PUP.1ClickDownloader)
DELETED key: HKCU\Software\Reimage [] (PUP.ReimageRepair)
DELETED key: HKCU\Software\Search Extensions [] (PUP.RocketTab)
DELETED key: HKCU\Software\Wajam [] (PUP.Wajam)
DELETED key*: HKCU\Software\AppDataLow\{12DA0E6F-5543-440C-BAA2-28BF01070AFA} [] (Adware.Graftor)
DELETED key*: HKCU\Software\AppDataLow\Software\better_markit [] (PUP.BetterMarkit)
DELETED key*: HKCU\Software\AppDataLow\Software\Crossrider [] (Adware.CrossRider)
DELETED key*: [X64] HKLM\SOFTWARE\Classes\P2a6f47fd_8fe4_4375_84e6_2a37c9e6624b_.P2a6f47fd_8fe4_4375_84e6_2a37c9e6624b_ [bestadblocker] (Adware.BestADBlocker)
DELETED key*: [X64] HKLM\SOFTWARE\Classes\P2a6f47fd_8fe4_4375_84e6_2a37c9e6624b_.P2a6f47fd_8fe4_4375_84e6_2a37c9e6624b_.9 [bestadblocker] (Adware.BestADBlocker)
DELETED key*: [X64] HKLM\SOFTWARE\Classes\Pf6b3e36b_7ac7_468a_8636_45495a9e17aa_.Pf6b3e36b_7ac7_468a_8636_45495a9e17aa_ [SalePlus] (Adware.Multiplug)
DELETED key*: [X64] HKLM\SOFTWARE\Classes\Pf6b3e36b_7ac7_468a_8636_45495a9e17aa_.Pf6b3e36b_7ac7_468a_8636_45495a9e17aa_.9 [SalePlus] (Adware.Multiplug)
DELETED key*: [X64] HKLM\SOFTWARE\Classes\REI_AxControl.ReiEngine [ReiEngine Class] (PUP.GetLiveSupport)
DELETED key*: [X64] HKLM\SOFTWARE\Classes\REI_AxControl.ReiEngine.1 [ReiEngine Class] (PUP.GetLiveSupport)
DELETED key*: [X64] HKLM\SOFTWARE\Classes\TorntvDownloader [] (Hijacker.TornTV)
DELETED key*: [X64] HKLM\SOFTWARE\Classes\CLSID\{265d605d-d43a-45e3-a985-340d5412b55c} [RRegUlaaraDeals] (Adware.Multiplug)
DELETED key*: [X64] HKLM\SOFTWARE\Classes\CLSID\{2a6f47fd-8fe4-4375-84e6-2a37c9e6624b} [bestadblocker] (Adware.BestADBlocker)
DELETED key*: [X64] HKLM\SOFTWARE\Classes\CLSID\{4cc330c8-0c61-401b-b239-71b0f7239d49} [SShopDrOp] (Adware.Multiplug)
DELETED key*: [X64] HKLM\SOFTWARE\Classes\CLSID\{f6b3e36b-7ac7-468a-8636-45495a9e17aa} [SalePlus] (Adware.Multiplug)
DELETED key*: [X64] HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\Wpm [] (PUP.WpManager)
DELETED key*: [X64] HKLM\SOFTWARE\EnigmaSoftwareGroup [] (PUP.EnigmaSoftware)
DELETED key*: [X64] HKLM\SOFTWARE\Reimage [] (PUP.ReimageRepair)
DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Tracing\Torntv Downloader_RASAPI32 [] (Hijacker.TornTV)
DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Tracing\Torntv Downloader_RASMANCS [] (Hijacker.TornTV)
DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Reimage Protector [Reimage] (PUP.ReimageRepair)
DELETED key^: [X64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ContentExplorer.exe [] (PUP.ContentExplorer)
DELETED key^: [X64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\donutleads.exe [] (PUP.DonutQuotes)
DELETED key^: [X64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\donutquotes.exe [] (PUP.DonutQuotes)
DELETED key^: [X64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\pastaleads.exe [] (Adware.PastaLeads)
DELETED key^: [X64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\pastaquotes.exe [] (Adware.PastaQuotes)
DELETED key^: [X64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\wajaminternetenhancer.exe [] (PUP.Wajam)
DELETED key^: [X64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\WajamInternetEnhancerApp.exe [] (PUP.Wajam)
DELETED key^: [X64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\WajamInternetEnhancerAppservice.exe [] (PUP.Wajam)
DELETED key^: [X64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\wajaminternetenhancerservice.exe [] (PUP.Wajam)
DELETED key*: [X64] HKLM\SOFTWARE\Wow6432Node\Uniblue [] (PUP.UniblueSystem)
DELETED key*: [X64] HKLM\SOFTWARE\Wow6432Node\Wpm [] (PUP.WpManager)
DELETED key*: [X64] HKLM\SOFTWARE\Wow6432Node\{12DA0E6F-5543-440C-BAA2-28BF01070AFA} [] (Adware.Graftor)
DELETED key*: [X64] HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5} [ITool] (Toolbar.Ask)
DELETED key*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SpyHunter [Enigma Software Group, LLC] (Crapware.SpyHunter)
DELETED key*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}{aa13d4c2} [PortRevel] (Adware.Graftor)
DELETED key*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{AD11DADE-C597-45D9-D8C5-1D2EB0B89613} [Fauxbar] (Adware.Multiplug)
DELETED key*: [X64] HKLM\SOFTWARE\Classes\CLSID\{10ECCE17-29B5-4880-A8F5-EAD298611484} [ReiEngine Class] (PUP.ReimageRepair)
DELETED key: [X64] HKLM\SOFTWARE\Classes\CLSID\{10ECCE17-29B5-4880-A8F5-EAD298611484}\InprocServer32 [C:\Program Files\Reimage\Reimage Repair\REI_Axcontrol.dll (Not File)] (PUP.ReimageRepair)
DELETED key: [X64] HKLM\SOFTWARE\Classes\CLSID\{2a6f47fd-8fe4-4375-84e6-2a37c9e6624b}\InprocServer32 [C:\Program Files (x86)\bestadblocker\b5uzONEr6qViqc.x64.dll (Not File)] (Adware.BestADBlocker)
DELETED key*: [X64] HKLM\SOFTWARE\Classes\CLSID\{801B440B-1EE3-49B0-B05D-2AB076D4E8CB} [CompReg Class] (PUP.ReimageRepair)
DELETED key: [X64] HKLM\SOFTWARE\Classes\CLSID\{801B440B-1EE3-49B0-B05D-2AB076D4E8CB}\InprocServer32 [C:\Program Files\Reimage\Reimage Repair\REI_Axcontrol.dll (Not File)] (PUP.ReimageRepair)
DELETED key: [X64] HKLM\SOFTWARE\Classes\CLSID\{f6b3e36b-7ac7-468a-8636-45495a9e17aa}\InprocServer32 [C:\Program Files (x86)\SalePlus\dpM74B3tT9UXLj.x64.dll (Not File)] (Adware.Multiplug)


---\\ Result of repair
~ Repair carried out successfully
~ Browser not found (Mozilla Firefox)
~ Browser not found (Opera Software)
~ The system has been restarted.


---\\ Statistics
~ Items scanned : 3182
~ Items found : 0
~ Items cancelled : 0
~ Items repaired : 109


End of clean at 14:07:04
===================
ZHPCleaner-[R]-31052015-14_07_04.txt
ZHPCleaner-[S]-31052015-14_03_44.txt

Je ne comprendre pas, c'est pour au tant ceux qui j'ai fait... Je ressaye ...

# AdwCleaner v4.205 - Logfile created 31/05/2015 at 21:30:14
# Updated 21/05/2015 by Xplode
# Database : 2015-05-31.1 [Server]
# Operating system : Windows 7 Professional Service Pack 1 (x64)
# Username : Olivier.Nechad - NECHAD-LAPTOP
# Running from : C:\Users\olivier.nechad\Downloads\adwcleaner_4.205.exe
# Option : Cleaning

• • • • • [ Services ] *****
        • [ Files / Folders ] *****
        • [ Scheduled tasks ] *****
        • [ Shortcuts ] *****
        • [ Registry ] *****
        • [ Web browsers ] *****

-\\ Internet Explorer v11.0.9600.17041


-\\ Google Chrome v42.0.2311.90

[C:\Users\olivier.nechad\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://websearch.goodforsearch.info/?l=1&q={searchTerms}&pid=21162&r=2015/04/27&hid=14339698980781408164&lg=EN&cc=ZA&unqvl=86

AdwCleaner[R0].txt - [6903 bytes] - [31/05/2015 20:50:26]
AdwCleaner[R1].txt - [1131 bytes] - [31/05/2015 21:29:04]
AdwCleaner[S0].txt - [6364 bytes] - [31/05/2015 21:11:08]
AdwCleaner[S1].txt - [1059 bytes] - [31/05/2015 21:30:14]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [1118 bytes] ##########

Desolée panne d'électricité hier soir, après mon dernier message!!!!!

Donc j'ai fait encore Zhpdiag:

---\\ Information on the system
~ Processor: Intel64 Family 6 Model 42 Stepping 7, GenuineIntel
~ Operating System: 64 Bits
Boot mode: Normal (Normal boot)
Total RAM: 8072.9 MB (73% free)
System Restore: Activé (Enable)
System drive C: has 77 GB (16%) free of 466 GB

---\\ Connection to the system mode
~ Computer Name: NECHAD-LAPTOP
~ User Name: Olivier.Nechad
~ All Users Names: LocalAdmin-A, Guest, Administrator,
~ Unselected Option: None
Logged in as Administrator

---\\ Environment variables
~ System Unit : C:\
~ %AppZHP% : C:\Users\olivier.nechad\AppData\Roaming\ZHP\
~ %AppData% : C:\Users\olivier.nechad\AppData\Roaming\
~ %Desktop% : C:\Users\olivier.nechad\Desktop\
~ %Favorites% : C:\Users\olivier.nechad\Favorites\
~ %LocalAppData% : C:\Users\olivier.nechad\AppData\Local\
~ %StartMenu% : C:\Users\olivier.nechad\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\

---\\ Enumeration of the disk units
C: Hard drive, Flash drive, Thumb drive (Free 77 Go of 466 Go)
E: CD-ROM drive (Not Inserted)



---\\ State of the Windows Security Center
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowMyGames: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : Out Of Date
~ Security Center: 49 Scanned in 00mn AMs



---\\ Search Generic System Files
[MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Windows Explorer.) (.25/02/2011 - 08:19:30 AM.) -- C:\Windows\Explorer.exe [2871808]
[MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Windows Start-Up Application.) (.14/07/2009 - 03:39:52 AM.) -- C:\Windows\System32\Wininit.exe [129024]
[MD5.F220BA78AB542C70211D73AE4729B2CD] - (.Microsoft Corporation - Internet Extensions for Win32.) (.06/03/2014 - 08:22:40 AM.) -- C:\Windows\System32\wininet.dll [2260480]
[MD5.1151B1BAA6F350B1DB6598E0FEA7C457] - (.Microsoft Corporation - Windows Logon Application.) (.20/11/2010 - 05:25:32 AM.) -- C:\Windows\System32\Winlogon.exe [390656]
[MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Software Licensing Library.) (.20/11/2010 - 05:27:28 AM.) -- C:\Windows\System32\sppcomapi.dll [232448]
[MD5.79059559E89D06E8B80CE2944BE20228] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.28/09/2013 - 03:09:10 AM.) -- C:\Windows\system32\Drivers\AFD.sys [497152]
[MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 - 03:52:21 AM.) -- C:\Windows\system32\Drivers\atapi.sys [24128]
[MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/07/2009 - 01:19:47 AM.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160]
[MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.20/11/2010 - 01:19:22 AM.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456]
[MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.20/11/2010 - 01:26:34 AM.) -- C:\Windows\system32\Drivers\DfsC.sys [102400]
[MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.20/11/2010 - 02:43:44 AM.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368]
[MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - i8042 Port Driver.) (.14/07/2009 - 01:19:57 AM.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472]
[MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.14/07/2009 - 02:10:03 AM.) -- C:\Windows\system32\Drivers\IpNat.sys [116224]
[MD5.A5D9106A73DC88564C825D317CAC68AC] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.27/04/2011 - 04:40:40 AM.) -- C:\Windows\system32\Drivers\MRxSmb.sys [158208]
[MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) (.20/11/2010 - 01:23:22 AM.) -- C:\Windows\system32\Drivers\netBT.sys [261632]
[MD5.1A29A59A4C5BA6F8C85062A613B7E2B2] - (.Microsoft Corporation - NT File System Driver.) (.24/01/2014 - 04:37:55 AM.) -- C:\Windows\system32\Drivers\ntfs.sys [1684928]
[MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Parallel Port Driver.) (.14/07/2009 - 02:00:41 AM.) -- C:\Windows\system32\Drivers\Parport.sys [97280]
[MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.20/11/2010 - 02:52:36 AM.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [129536]
[MD5.1B6163C503398B23FF8B939C67747683] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.20/11/2010 - 03:06:42 AM.) -- C:\Windows\system32\Drivers\rdpdr.sys [165888]
[MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.14/07/2009 - 02:09:09 AM.) -- C:\Windows\system32\Drivers\smb.sys [93184]
[MD5.DDAD5A7AB24D8B65F8D724F5C20FD806] - (.Microsoft Corporation - TDI Translation Driver.) (.20/11/2010 - 01:21:58 AM.) -- C:\Windows\system32\Drivers\tdx.sys [119296]
[MD5.0D08D2F3B3FF84E433346669B5E0F639] - (.Microsoft Corporation - Volume Shadow Copy Driver.) (.20/11/2010 - 05:34:04 AM.) -- C:\Windows\system32\Drivers\volsnap.sys [295808]
~ Generic Processes: Scanned in 00mn AMs



---\\ Hidden files state (Hidden/Total)
~ Mes images (My Pictures) : 1/4918
~ Mes musiques (My Musics) : 1/947
~ Mes Videos (My Videos) : 1/614
~ Mes Favoris (My Favorites) : 1/81
~ Mes Documents (My Documents) : 1/1109
~ Mon Bureau (My Desktop) : 2/714
~ Menu demarrer (Programs) : 1/24
~ Hidden Files: Scanned in 06mn AMs



---\\ Process running
[MD5.87644A0DA4A15F5F3FEEB1D6056E83E7] - (.TomTom - MyDrive Connect.) -- C:\Program Files (x86)\MyDrive Connect\MyDriveConnect.exe [1792376] [PID.3324]
[MD5.EC58C1A9A3281CE0C8FCC05BDBFECB37] - (.Apple Inc. - iCloud.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [43816] [PID.3340]
[MD5.105C276BB7B43501225C419B062096D0] - (.Apple Inc. - iCloud Photos.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [43816] [PID.3348]
[MD5.334725C0DB429BF71F43CCEFEA1376A4] - (.Apple Inc. - iCloud Drive.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe [43816] [PID.3360]
[MD5.7F96635487E368B4C94F82957784DFEF] - (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe [31282304] [PID.3368]
[MD5.4275C55AA440DC08EA0267AED31D9654] - (.Apple Inc. - Apple Push.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [60712] [PID.3764]
[MD5.1C86D0C84FF3870A3E13808B853C040A] - (.Apple Inc. - AirPort Base Station Agent.) -- C:\Program Files (x86)\AirPort\APAgent.exe [771360] [PID.4052]
[MD5.34D296AFC913E302953C70463EF09A48] - (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe [96056] [PID.4068]
[MD5.65C6AA484AD2287D20541C7735989437] - (.Avast Software s.r.o. - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\avastui.exe [5515496] [PID.3484]
[MD5.86C0F1EF2107907364CB63027C9FC6AE] - (.Microsoft Corporation - SCNotification.) -- C:\Windows\CCM\SCNotification.exe [642232] [PID.1040]
[MD5.9252A687BD9F43A5F738C652B00CAF0A] - (.Apple Inc. - iCloud Photos Downloader.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreamsDownloader.exe [43816] [PID.6632]
[MD5.CE9806603D3C635EA6E0BB79FE916D2E] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [812872] [PID.6840]
[MD5.F3198BA5BA8CC86D3F2DEA8C2ACA7385] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [8212992] [PID.4676]
[MD5.54236E79A44F909612391C8A2D70D512] - (.Avast Software s.r.o. - avast! Service.) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336] [PID.1264]
[MD5.FC5B75CA6A1DA31EDD4F8D53F5540B98] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [81088] [PID.1556]
[MD5.FECA9F830A5C6BAB9978E6781A26AE2B] - (.Microsoft Corporation - Updates Skype Click to Call.) -- C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1394816] [PID.1780]
[MD5.5B33709F7FE59BB625F113EED86AFC5C] - (.Microsoft Corporation - Phone Number Recognition (PNR) module.) -- C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1772672] [PID.1836]
[MD5.506708142BC63DABA64F2D3AD1DCD5BF] - (.Google Inc. - Google Installer.) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [116648] [PID.1464]
[MD5.83FF82FE209E7997067B375DAD6CF23D] - (.Intel Corporation - Intel(R) Integrated Clock Controller Servic.) -- C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [169752] [PID.3220]
[MD5.713B289020B0C72DBAE93EB1EC79B28B] - (.Intel Corporation - Local Manageability Service.) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [327672] [PID.4284]
[MD5.F0EDD898A6B56C69BD92A06146E8ED98] - (.Intel Corporation - User Notification Service.) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2595832] [PID.4212]
~ Processes Running: Scanned in 01mn AMs



---\\ Google Chrome, Start,Search,Extensions (G0,G1,G2)
C:\Users\Olivier.Nechad\AppData\Local\Google\Chrome\User Data\Default\Preferences
G2 - GCE: Preference [User Data\Default] [aapocclcgogkmnckokdopfmhonfmgoek] Google Slides v.0.9 (Activé)
G2 - GCE: Preference [User Data\Default] [ahfgeienlihckogmohjhadlkjgocpleb] Web Store v.0.2 (Activé)
G2 - GCE: Preference [User Data\Default] [aohghmighlieiainnegkcijnfilokake] Google Docs v.0.9 (Activé)
G2 - GCE: Preference [User Data\Default] [apdfllckaahabafndbhieahigkjlhalf] Google Drive v.6.4 (Activé)
G2 - GCE: Preference [User Data\Default] [blpcfgokakmgnkcojhhkbfbldkacnbeo] YouTube v.4.2.7 (Activé)
G2 - GCE: Preference [User Data\Default] [coobgpohoikkiipiblmjeljniedjpjpf] Google Search v.0.0.0.30 (Activé)
G2 - GCE: Preference [User Data\Default] [eemcgdkfndhakfknompkggombfjjjeno] Bookmark Manager v.0.1 (Activé)
G2 - GCE: Preference [User Data\Default] [ennkphjdgehloodpbhlhldgbnhmacadg] Settings v.0.2 (Activé)
G2 - GCE: Preference [User Data\Default] [gfdkimpbcpahaombhbimeihdjnejgicl] Feedback v.1.0 (Activé)
G2 - GCE: Preference [User Data\Default] [gomekmidlodglbbmalcneegieacbdmki] Avast Online Security v.10.2.0.190, (Désactivé)
G2 - GCE: Preference [User Data\Default] [kmendfapggjehodndflmmgagdbamhnfd] CryptoTokenExtension v.0.9.20 (Activé)
G2 - GCE: Preference [User Data\Default] [lifbcibllhkdhoafpjfnlhfpfgnpldfl] Skype Click to Call v.7.4.0.9058, (Désactivé)
G2 - GCE: Preference [User Data\Default] [lojpenhmoajbiciapkjkiekmobleogjc] Default Placeholder Extensions v.35.2.1, (Activé)
G2 - GCE: Preference [User Data\Default] [mfehgcgbbipciphmccgaenjidiccnmng] Cloud Print v.0.1 (Activé)
G2 - GCE: Preference [User Data\Default] [mgndgikekgjfcpckkfioiadnlibdjbkf] Chrome v.0.1 (Activé)
G2 - GCE: Preference [User Data\Default] [mhjfbmdgcfjbbpaeojofohoefgiehjai] Chrome PDF Viewer v.1, (Activé)
G2 - GCE: Preference [User Data\Default] [nbpagnldghgfoolbancepceaanlmhfmd] Hotword triggering v.0.0.1.4 (Activé)
G2 - GCE: Preference [User Data\Default] [neajdppkdcdipfabeoofebfddakdcjhd] Google Network Speech v.1.0 (Activé)
G2 - GCE: Preference [User Data\Default] [nkeimhogjdpnpccoofpliimaahmaaome] Google+ Hangouts v.1.0 (Activé)
G2 - GCE: Preference [User Data\Default] [pafkbggdmjlpgkdkcbjmhmfcdpncadgh] Google Now v.1.2.0.1 (Activé)
G2 - GCE: Preference [User Data\Default] [pjkljhegncpnkpknbcohdijeoejaedia] Gmail v.8.1 (Activé)

---\\ Google Chrome Extension Folder
G2 - EXT: C:\Users\olivier.nechad\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [Google Slides]
G2 - EXT: C:\Users\olivier.nechad\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [Google Docs]
G2 - EXT: C:\Users\olivier.nechad\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [Google Drive]
G2 - EXT: C:\Users\olivier.nechad\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [YouTube]
G2 - EXT: C:\Users\olivier.nechad\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [Google Search]
G2 - EXT: C:\Users\olivier.nechad\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [Avast Online Security]
G2 - EXT: C:\Users\olivier.nechad\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [Skype Click to Call]
G2 - EXT: C:\Users\olivier.nechad\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [Gmail]
G2 - EXT: C:\Users\olivier.nechad\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [__MSG_appName__]
G2 - EXT: C:\Users\olivier.nechad\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [__MSG_appName__]
G2 - EXT: C:\Users\olivier.nechad\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [__MSG_appName__]
G2 - EXT: C:\Users\olivier.nechad\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [__MSG_appName__]
G2 - EXT: C:\Users\olivier.nechad\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [__MSG_appName__]
G2 - EXT: C:\Users\olivier.nechad\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [__MSG_appName__]
~ Google Lines Browser: 45 Scanned in 05mn AMs



---\\ Mozilla Firefox,Plugins,Start,Search,Extensions (P2,M0,M1,M2,M3)
P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 5.1.30214.0.) -- c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll
P2 - FPN: [HKLM] [@microsoft.com/OfficeAuthz,version=14.0] - (.Microsoft Corporation - Office Authorization plug-in for NPAPI browsers.) -- C:\Program Files\Microsoft Office\Office14\NPAUTHZ.dll
~ Firefox Browser: 2 Scanned in 00mn AMs



---\\ Internet Explorer Extensions, Start, Search (R4,R3,R0,R1)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?gws_rd=ssl
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?gws_rd=ssl
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?gws_rd=ssl
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/?gws_rd=ssl
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = https://www.google.com/?gws_rd=ssl
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/?gws_rd=ssl
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.google.com/?gws_rd=ssl
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.google.com/?gws_rd=ssl
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/?gws_rd=ssl
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R3 - URLSearchHook: Microsoft Url Search Hook [64Bits] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Internet Browser.) (11.00.9600.17041 (winblue_gdr.140305-1710)) -- C:\Windows\SysWOW64\ieframe.dll
R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1
R4 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1
~ IE Browser: 16 Scanned in 00mn AMs



---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Proxy management: Scanned in 00mn AMs



---\\ Line Analysis F0, F1, F2, F3 - IniFiles, Auto loading programs
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
~ Keys: Scanned in 00mn AMs



---\\ Hosts file redirection (O1)
~ Le fichier hôte est sain (The hosts file is clean) (0)
~ Hosts File: Scanned in 00mn AMs



---\\ Browser Helper Objects (O2)
O2 - BHO: Groove GFS Browser Helper [64Bits] - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} . (.Microsoft Corporation - Microsoft SharePoint Workspace Extensions.) -- C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.dll
O2 - BHO: Java(tm) Plug-In SSV Helper [64Bits] - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files (x86)\Java\jre1.8.0_40\bin\ssv.dll
O2 - BHO: avast! Online Security [64Bits] - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.Avast Software s.r.o. - IE Webrep plugin.) -- C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: SkypeIEPluginBHO [64Bits] - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} . (.Microsoft Corporation - Skype Click to Call IE Add-on.) -- C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: URLRedirectionBHO [64Bits] - {B4F3A835-0E21-4959-BA22-42B3008E02FF} . (.Microsoft Corporation - Microsoft Office Document Cache Handler.) -- C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper [64Bits] - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files (x86)\Java\jre1.8.0_40\bin\jp2ssv.dll
~ BHO: 10 Scanned in 00mn AMs



---\\ Other User Links (O4)
O4 - GS\Desktop [Public]: Vuze.lnk . (.Azureus Software, Inc - Vuze Launcher.) -- C:\Program Files (x86)\Vuze\Azureus.exe =>P2P.Azureus
O4 - GS\Program [Public]: Vuze.lnk . (.Azureus Software, Inc - Vuze Launcher.) -- C:\Program Files (x86)\Vuze\Azureus.exe =>P2P.Azureus
~ Global Startup: 2 Scanned in 01mn AMs



---\\ Auto loading programs from Registry and folders (O4)
O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKCU\..\Run: [DellSystemDetect] . (.Dell - Dell System Detect.) -- C:\Users\olivier.nechad\AppData\Local\Apps\2.0\E281WR0Q.810\KN826B5M.ZRM\dell..tion_0f612f649c4a10af_0005.0005_9914611622934cec\DellSystemDetect.exe
O4 - HKCU\..\Run: [HP Officejet Pro 8600 (NET)] . (.Hewlett-Packard Co. - ScanToPCActivationApp.) -- C:\Program Files\HP\HP Officejet Pro 8600\Bin\ScanToPCActivationApp.exe =>.Hewlett-Packard Co
O4 - HKCU\..\Run: [MyDriveConnect.exe] . (.TomTom - MyDrive Connect.) -- C:\Program Files (x86)\MyDrive Connect\MyDriveConnect.exe
O4 - HKCU\..\Run: [iCloudServices] . (.Apple Inc. - iCloud.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
O4 - HKCU\..\Run: [ApplePhotoStreams] . (.Apple Inc. - iCloud Photos.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
O4 - HKCU\..\Run: [iCloudDrive] . (.Apple Inc. - iCloud Drive.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe
O4 - HKCU\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe =>.Skype Technologies S.A.
O4 - HKLM\..\Wow6432Node\Run: [IMSS] . (.Intel Corporation - PIcon startup utility.) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe
O4 - HKLM\..\Wow6432Node\Run: [BCSSync] . (.Microsoft Corporation - Microsoft Office 2010 component.) -- C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe =>.Microsoft Corporation
O4 - HKLM\..\Wow6432Node\Run: [AirPort Base Station Agent] . (.Apple Inc. - AirPort Base Station Agent.) -- C:\Program Files (x86)\AirPort\APAgent.exe
O4 - HKLM\..\Wow6432Node\Run: [HP Software Update] . (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe =>.Hewlett-Packard Co
O4 - HKLM\..\Wow6432Node\Run: [DivXMediaServer] C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe (.not file.)
O4 - HKLM\..\Wow6432Node\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe =>.Adobe Systems Incorporated
O4 - HKLM\..\Wow6432Node\Run: [AvastUI.exe] . (.Avast Software s.r.o. - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Windows Desktop Gadgets.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Windows Desktop Gadgets.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-21-4082451240-2834497003-798440645-2299\..\Run: [DellSystemDetect] . (.Dell - Dell System Detect.) -- C:\Users\olivier.nechad\AppData\Local\Apps\2.0\E281WR0Q.810\KN826B5M.ZRM\dell..tion_0f612f649c4a10af_0005.0005_9914611622934cec\DellSystemDetect.exe
O4 - HKUS\S-1-5-21-4082451240-2834497003-798440645-2299\..\Run: [HP Officejet Pro 8600 (NET)] . (.Hewlett-Packard Co. - ScanToPCActivationApp.) -- C:\Program Files\HP\HP Officejet Pro 8600\Bin\ScanToPCActivationApp.exe =>.Hewlett-Packard Co
O4 - HKUS\S-1-5-21-4082451240-2834497003-798440645-2299\..\Run: [MyDriveConnect.exe] . (.TomTom - MyDrive Connect.) -- C:\Program Files (x86)\MyDrive Connect\MyDriveConnect.exe
O4 - HKUS\S-1-5-21-4082451240-2834497003-798440645-2299\..\Run: [iCloudServices] . (.Apple Inc. - iCloud.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
O4 - HKUS\S-1-5-21-4082451240-2834497003-798440645-2299\..\Run: [ApplePhotoStreams] . (.Apple Inc. - iCloud Photos.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
O4 - HKUS\S-1-5-21-4082451240-2834497003-798440645-2299\..\Run: [iCloudDrive] . (.Apple Inc. - iCloud Drive.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe
O4 - HKUS\S-1-5-21-4082451240-2834497003-798440645-2299\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe =>.Skype Technologies S.A.
~ Application: Scanned in 00mn AMs



---\\ IE Options icon not visible in Control Panel (O5)
O5 - control.ini: [HKLM\..\Control Panel] inetcpl.cpl=no
~ IE Control Panel: 1 Scanned in 00mn AMs



---\\ Extra buttons on main IE button toolbar, or extra items in IE 'Tools' menu (O9)
O9 - Extra button: Se&nd to OneNote [64Bits] - {2670000A-7350-4f3c-8081-5663EE0C6C49} . (.Microsoft Corporation - Microsoft OneNote Internet Explorer Add-in.) -- C:\Program Files (x86)\MICROS~1\Office14\ONBttnIE.dll =>.Microsoft Corporation
O9 - Extra button: OneNote Lin&ked Notes [64Bits] - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} . (.Microsoft Corporation - Microsoft OneNote Internet Explorer Add-in.) -- C:\Program Files (x86)\MICROS~1\Office14\ONBTTN~1.dll =>.Microsoft Corporation
O9 - Extra button: Skype Click to Call settings [64Bits] - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} . (...) -- c:\program files (x86)\skype\toolbars\internet explorer x64\icon.ico
~ IE Extra Buttons: Scanned in 00mn AMs



---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - E-mail Naming Shim Provider.) -- C:\Windows\system32\napinsp.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - PNRP Name Space Provider.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - PNRP Name Space Provider.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Windows Sockets Helper DLL.) -- C:\Windows\system32\wshbth.dll
O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - Microsoft Windows Sockets 2.0 Service Provider.) -- C:\Windows\system32\mswsock.dll
O10 - WLSP:\000000000007\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll
O10 - WLSP:\000000000008\Winsock LSP File . (.Apple Inc. - Bonjour Namespace Provider.) -- C:\Program Files (x86)\Bonjour\mdnsNSP.dll
~ Winsock: 8 Scanned in 00mn AMs



---\\ Site in Trusted Zone (O15)
O15 - Trusted Zone: [HKCU\...\Domains] *.dell.com
~ IE Zone Confiance: Scanned in 00mn AMs



---\\ Lop.com/Domain Hijackers (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{AC24EBBF-823B-41AF-A537-B24AF89A8482}: DhcpNameServer = 192.168.1.1 0.0.0.0
O17 - HKLM\System\CCS\Services\Tcpip\..\{B7DCFCAB-D245-49C3-A11E-757360EC0F35}: DhcpNameServer = 172.20.10.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{6A2CB6B7-3FE4-4BEE-B470-21EC49DA39D9}: DhcpDomain = easigas.co.za
O17 - HKLM\System\CS1\Services\Tcpip\..\{AC24EBBF-823B-41AF-A537-B24AF89A8482}: DhcpNameServer = 192.168.1.1 0.0.0.0
O17 - HKLM\System\CS1\Services\Tcpip\..\{B7DCFCAB-D245-49C3-A11E-757360EC0F35}: DhcpNameServer = 172.20.10.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{6A2CB6B7-3FE4-4BEE-B470-21EC49DA39D9}: DhcpDomain = easigas.co.za
O17 - HKLM\System\CS2\Services\Tcpip\..\{AC24EBBF-823B-41AF-A537-B24AF89A8482}: DhcpNameServer = 192.168.1.1 0.0.0.0
O17 - HKLM\System\CS2\Services\Tcpip\..\{B7DCFCAB-D245-49C3-A11E-757360EC0F35}: DhcpNameServer = 172.20.10.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{6A2CB6B7-3FE4-4BEE-B470-21EC49DA39D9}: DhcpDomain = easigas.co.za
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = easigas.co.za
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 0.0.0.0
~ Domain: Scanned in 00mn AMs



---\\ Extra protocols (O18)
O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\Windows\System32\mshtml.dll
O18 - Filter: text/xml [64Bits] - {807573E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.dll =>.Microsoft Corporation
~ Protocole Additionnel: Scanned in 00mn AMs



---\\ AppInit_DLLs Registry value Autorun (O20)
O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\Windows\System32\igfxdev.dll
~ Winlogon: Scanned in 00mn AMs



---\\ ShellServiceObjectDelayLoad (O21)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
~ SSODL: 1 Scanned in 00mn AMs



---\\ Non Microsoft non disabled Windows XP/NT/2000 Services (O23)
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Apple Mobile Device Service (Apple Mobile Device Service) . (.Apple Inc. - MobileDeviceService.) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Avast Antivirus (avast! Antivirus) . (.Avast Software s.r.o. - avast! Service.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Bonjour Service (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Google Update Service (gupdate) (gupdate) . (.Google Inc. - Google Installer.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: HP SI Service (HPSIService) . (.HP - HP Smart-Install Service.) - C:\Windows\system32\HPSIsvc.exe
O23 - Service: Intel(R) Management and Security Application Local Manageme (LMS) . (.Intel Corporation - Local Manageability Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: Intel(R) Management and Security Application User Notificat (UNS) . (.Intel Corporation - User Notification Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
~ Services: 9 Scanned in 12mn AMs



---\\ Windows Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(...) - (.not file.)
~ Desktop Component: 4 Scanned in 00mn AMs



---\\ BootExecute (BEX) (O34)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
~ BEX: 1 Scanned in 00mn AMs



---\\ Task Planned Automatically (039)
[MD5.3E04F1E482357B1FC8B088197C3D9FF8] [APT] [Adobe Acrobat Update Task] (.Adobe Systems Incorporated.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152]
[MD5.B04A4810C6CC205F9DC72DC22E4AB236] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [268464]
[MD5.E516D7811B24812819A3BAC8AD350510] [APT] [Apple Diagnostics] (.Apple Inc..) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\EReporter.exe [43816]
[MD5.C50B830CA9BCD63754928CD6C0E2B114] [APT] [avast! Emergency Update] (.Avast Software s.r.o..) -- C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [1298688]
[MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [116648]
[MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [116648]
[MD5.00000000000000000000000000000000] [APT] [{1195A1D9-8021-42C5-B007-B0694FAD7BD7}] (...) -- F:\DRVR_Network_Intel_A08-NNGMH_setup_ZPE.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{36769FA8-7D42-4C9C-9879-18502FA7350C}] (...) -- F:\dell_controlvault_a08_r308492.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{587E0820-73E8-4C73-9988-F8AE42D57F8D}] (...) -- C:\Users\Olivier.Nechad\Downloads\ZHPDiag2.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{6D060D98-24B9-4758-B918-D0073582351F}] (...) -- C:\Users\Olivier.Nechad\Downloads\ZHPDiag2-2015.5.25.52 (1).exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{949923CC-3D79-449C-A9C3-BBA9082E6A59}] (...) -- C:\Users\Olivier.Nechad\Downloads\ZHPDiag2.exe (.not file.) [0]
[MD5.C155A13687144076286989EF078112C2] [APT] [{C9F42686-92F7-40A6-8228-3059CA4F6ECD}] (.Nicolas Coolman.) -- C:\Program Files (x86)\ZHPDiag\ZHPFix\ZHPhep.exe [1917440]
[MD5.52F88E4C589BC8C8D45CF0FC6FFD6BDA] [APT] [SyncBackFree Olivier] (.2BrightSparks Pte Ltd.) -- C:\Program Files (x86)\2BrightSparks\SyncBackFree\SyncBackFree.exe [15395880]
[MD5.34EBD4FF6A24D86BB4716D6AFCC1A89B] [APT] [AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [561984]
O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\Tasks\Adobe Flash Player Updater.job [830]
O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Tasks\Adobe Flash Player Updater [830]
O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job [894]
O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore [894]
O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job [898]
O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA [898]
~ Scheduled Task: 20 Scanned in 06mn AMs



---\\ ActiveSetup Installed Components (O40)
O40 - ASIC: Microsoft Windows Media Player [64Bits] - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Resources.) -- C:\Windows\System32\wmploc.dll =>.Microsoft Corporation
O40 - ASIC: Microsoft Windows Media Player 12.0 [64Bits] - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\SysWOW64\wmpdxm.dll =>.Microsoft Corporation
O40 - ASIC: Themes Setup [64Bits] - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - Windows Theme API.) -- C:\Windows\System32\themeui.dll
O40 - ASIC: Internet Explorer [64Bits] - {2D46B6DC-2207-486B-B523-A557E6D54B47} . (.Microsoft Corporation - Windows Command Processor.) -- C:\Windows\system32\cmd.exe
O40 - ASIC: Microsoft Windows [64Bits] - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Windows Mail.) -- C:\Program Files (x86)\Windows Mail\WinMail.exe =>.Microsoft Corporation
O40 - ASIC: Browsing Enhancements [64Bits] - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Microsoft Internet Explorer FTP Folder Shell Extension.) -- C:\Windows\System32\msieftp.dll
O40 - ASIC: Microsoft Windows Media Player [64Bits] - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Windows Media Player Resources.) -- C:\Windows\System32\wmploc.dll =>.Microsoft Corporation
O40 - ASIC: Windows Desktop Update [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - Windows Shell Common Dll.) -- C:\Windows\System32\shell32.dll
O40 - ASIC: Web Platform Customizations [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - IE Per-User Initialization Utility.) -- C:\Windows\System32\ie4uinit.exe
O40 - ASIC: (no name) [64Bits] - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\system32\mscories.dll
~ Active Setup: 10 Scanned in 00mn AMs



---\\ Drivers launched at startup (O41)
O41 - Driver: C:\Windows\System32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys
O41 - Driver: (aswRdr) . (.Avast Software s.r.o. - avast! WFP Redirect Driver.) - C:\Windows\system32\drivers\aswRdr2.sys
O41 - Driver: (aswSnx) . (.Avast Software s.r.o. - avast! Virtualization Driver.) - C:\Windows\system32\drivers\aswSnx.sys
O41 - Driver: (aswSP) . (.Avast Software s.r.o. - avast! self protection module.) - C:\Windows\system32\drivers\aswSP.sys
O41 - Driver: (blbdrive) . (.Microsoft Corporation - BLB Drive Driver.) - C:\Windows\System32\DRIVERS\blbdrive.sys
O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys
O41 - Driver: C:\Windows\System32\cscsvc.dll (CSC) . (.Microsoft Corporation - Windows Client Side Caching Driver.) - C:\Windows\System32\drivers\csc.sys
O41 - Driver: C:\Windows\System32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys
O41 - Driver: C:\Windows\System32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\System32\drivers\discache.sys
O41 - Driver: (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\system32\drivers\mssmbios.sys
O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys
O41 - Driver: C:\Windows\System32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys
O41 - Driver: C:\Windows\System32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys
O41 - Driver: C:\Windows\System32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - QoS Packet Scheduler.) - C:\Windows\System32\DRIVERS\pacer.sys
O41 - Driver: C:\Windows\System32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\Windows\System32\DRIVERS\rdbss.sys
O41 - Driver: C:\Windows\System32\DRIVERS\RDPCDD.sys (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys
O41 - Driver: C:\Windows\System32\drivers\RDPENCDD.sys (RDPENCDD) . (.Microsoft Corporation - RDP Encoder Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys
O41 - Driver: C:\Windows\System32\drivers\RdpRefMp.sys (RDPREFMP) . (.Microsoft Corporation - RDP Reflector Driver Miniport.) - C:\Windows\System32\drivers\rdprefmp.sys
O41 - Driver: (Serial) . (.Microsoft Corporation - Serial Device Driver.) - C:\Windows\System32\DRIVERS\serial.sys
O41 - Driver: C:\Windows\System32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys
O41 - Driver: (TermDD) . (.Microsoft Corporation - Remote Desktop Server Driver.) - C:\Windows\system32\drivers\termdd.sys
O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys
O41 - Driver: (vwififlt) . (.Microsoft Corporation - Virtual WiFi Filter Driver.) - C:\Windows\System32\DRIVERS\vwififlt.sys
O41 - Driver: C:\Windows\System32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys
O41 - Driver: (WfpLwf) . (.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - C:\Windows\System32\DRIVERS\wfplwf.sys
~ Drivers: 75 Scanned in 00mn AMs



---\\ Software installed (O42)
O42 - Logiciel: Adobe Flash Player 17 ActiveX - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player ActiveX
O42 - Logiciel: Adobe Reader XI (11.0.11) - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-7AD7-1033-7B44-AB0000000001}
O42 - Logiciel: Adobe Refresh Manager - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-0804-1033-1959-001802114130}
O42 - Logiciel: AirPort - (.Apple Inc..) [HKLM][64Bits] -- {AA68AAAE-41F0-40B5-8896-5947F5FD6889}
O42 - Logiciel: Apple Application Support (32-bit) - (.Apple Inc..) [HKLM][64Bits] -- {AFA1153A-F547-409B-B837-3A0D6C5A3FEC}
O42 - Logiciel: Apple Application Support (64-bit) - (.Apple Inc..) [HKLM][64Bits] -- {D7B824DE-DA32-4772-9E5E-39C5158136A7}
O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM][64Bits] -- {C4123106-B685-48E6-B9BD-E4F911841EB4}
O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM][64Bits] -- {789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE} =>.Apple Inc
O42 - Logiciel: Avast Free Antivirus - (.AVAST Software.) [HKLM][64Bits] -- Avast
O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM][64Bits] -- {6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}
O42 - Logiciel: Dell System Detect - (.Dell.) [HKCU][64Bits] -- 9204f5692a8faf3b
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM][64Bits] -- Google Chrome
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {60EC980A-BDA2-4CB6-A427-B07A5498B4CA}
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
O42 - Logiciel: HP FWUpdateEDO2 - (.Hewlett-Packard.) [HKLM][64Bits] -- {415FA9AD-DA10-4ABE-97B6-5051D4795C90}
O42 - Logiciel: HP LaserJet Professional P1100-P1560-P1600 Series - (...) [HKLM][64Bits] -- HP LaserJet Professional P1100-P1560-P1600 Series
O42 - Logiciel: HP Officejet Pro 8600 Basic Device Software - (.Hewlett-Packard Co..) [HKLM][64Bits] -- {2D5E3D2B-919F-407C-8757-E64827518BB6} =>.Hewlett-Packard Co
O42 - Logiciel: HP Officejet Pro 8600 Help - (.Hewlett Packard.) [HKLM][64Bits] -- {B6F5C6D8-C443-4B55-932F-AE11B5743FC4} =>.Hewlett-Packard Co
O42 - Logiciel: HP Update - (.Hewlett-Packard.) [HKLM][64Bits] -- {912D30CF-F39E-4B31-AD9A-123C6B794EE2}
O42 - Logiciel: I.R.I.S. OCR - (.HP.) [HKLM][64Bits] -- {CA6BCA2F-EDEB-408F-850B-31404BE16A61}
O42 - Logiciel: Intel(R) Management Engine Components - (.Intel Corporation.) [HKLM][64Bits] -- {65153EA5-8B6E-43B6-857B-C6E4FC25798A}
O42 - Logiciel: Intel(R) Network Connections Drivers - (.Intel.) [HKLM][64Bits] -- PROSet
O42 - Logiciel: Intel(R) Processor Graphics - (.Intel Corporation.) [HKLM][64Bits] -- {F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}
O42 - Logiciel: Intel(R) SDK for OpenCL - CPU Only Runtime Package - (.Intel Corporation.) [HKLM][64Bits] -- {FCB3772C-B7D0-4933-B1A9-3707EBACC573}
O42 - Logiciel: Java 8 Update 40 - (.Oracle Corporation.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F83218040F0}
O42 - Logiciel: Microsoft Policy Platform - (.Microsoft Corporation.) [HKLM][64Bits] -- {90D295B8-BA08-487E-B904-0E624209A410}
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM][64Bits] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
O42 - Logiciel: MyDriveConnect 3.3.0.1756 - (.TomTom.) [HKLM][64Bits] -- MyDriveConnect
O42 - Logiciel: Search YouTube - (."".) [HKLM][64Bits] -- {45606A90-3363-3A3B-1C15-C40E77F4DAA0} =>PUP.SearchYouTube
O42 - Logiciel: Skype Click to Call - (.Microsoft Corporation.) [HKLM][64Bits] -- {6D1221A9-17BF-4EC0-81F2-27D30EC30701}
O42 - Logiciel: Skype(TM) 7.4 - (.Skype Technologies S.A..) [HKLM][64Bits] -- {24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}
O42 - Logiciel: SyncBackFree - (.2BrightSparks.) [HKLM][64Bits] -- SyncBackFree_is1
O42 - Logiciel: VC80CRTRedist - 8.0.50727.6195 - (.DivX, Inc.) [HKLM][64Bits] -- {933B4015-4618-4716-A828-5289FC03165F}
O42 - Logiciel: VLC media player - (.VideoLAN.) [HKLM][64Bits] -- VLC media player =>.VideoLAN
O42 - Logiciel: Visual Studio C++ 10.0 Runtime - (.TomTom International B.V..) [HKLM][64Bits] -- {4412F224-3849-4461-A3E9-DEEF8D252790}
O42 - Logiciel: Vuze - (.Azureus Software, Inc..) [HKLM][64Bits] -- 8461-7759-5462-8226 =>P2P.Azureus
O42 - Logiciel: Windows Driver Package - Intel (NETwNs64) net (08/22/2013 15.9.1.2) - (.Intel.) [HKLM][64Bits] -- 4366DCA050B272626F1B40732D28F9E6A4562ECD
O42 - Logiciel: Windows Firewall Configuration Provider - (.Microsoft Corporation.) [HKLM][64Bits] -- {109A5A16-E09E-4B82-A784-D1780F1190D6}
O42 - Logiciel: iCloud - (.Apple Inc..) [HKLM][64Bits] -- {309768A4-A2BB-4930-A5A2-8169678C9B4C}
O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM][64Bits] -- {93F2A022-6C37-48B8-B241-FFABD9F60C30}
~ Logic: 37 Scanned in 04mn AMs



---\\ HKCU & HKLM Software Keys
[HKCU\Software\2BrightSparks]
[HKCU\Software\AVAST Software]
[HKCU\Software\Adobe]
[HKCU\Software\AppDataLow\Software\Adobe]
[HKCU\Software\AppDataLow\Software\JavaSoft]
[HKCU\Software\AppDataLow]
[HKCU\Software\Apple Computer, Inc.]
[HKCU\Software\Apple Inc.]
[HKCU\Software\Azureus] =>P2P.Azureus
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\DRPSu Updater]
[HKCU\Software\DivXNetworks]
[HKCU\Software\Google]
[HKCU\Software\HP]
[HKCU\Software\Hewlett-Packard]
[HKCU\Software\IM Providers]
[HKCU\Software\Intel]
[HKCU\Software\JavaSoft]
[HKCU\Software\Local AppWizard-Generated Applications]
[HKCU\Software\Macromedia]
[HKCU\Software\Magnet]
[HKCU\Software\Marvell]
[HKCU\Software\MozillaPlugins]
[HKCU\Software\Mozilla]
[HKCU\Software\Netscape]
[HKCU\Software\ODBC]
[HKCU\Software\Policies]
[HKCU\Software\RICOH]
[HKCU\Software\Skype]
[HKCU\Software\TeamViewer]
[HKCU\Software\TomTom]
[HKCU\Software\Trolltech]
[HKCU\Software\WebApp]
[HKCU\Software\Wow6432Node]
[HKCU\Software\ZebHelpProcess Helper]
[HKCU\Software\ej-technologies]
[HKLM\Software\ATI Technologies]
[HKLM\Software\Apple Computer, Inc.]
[HKLM\Software\Apple Inc.]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\DivX]
[HKLM\Software\GEAR Software]
[HKLM\Software\Google]
[HKLM\Software\HP]
[HKLM\Software\IM Providers]
[HKLM\Software\Intel]
[HKLM\Software\Khronos]
[HKLM\Software\Macromedia]
[HKLM\Software\Marvell]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\ODBC]
[HKLM\Software\Policies]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\Sonic]
[HKLM\Software\Wow6432Node\2BrightSparks]
[HKLM\Software\Wow6432Node\AVAST Software]
[HKLM\Software\Wow6432Node\Adobe]
[HKLM\Software\Wow6432Node\AdwCleaner]
[HKLM\Software\Wow6432Node\Apple Inc.]
[HKLM\Software\Wow6432Node\Azureus] =>P2P.Azureus
[HKLM\Software\Wow6432Node\Classes]
[HKLM\Software\Wow6432Node\Clients]
[HKLM\Software\Wow6432Node\DivX]
[HKLM\Software\Wow6432Node\Google]
[HKLM\Software\Wow6432Node\Hewlett-Packard]
[HKLM\Software\Wow6432Node\HewlettPackard]
[HKLM\Software\Wow6432Node\IM Providers]
[HKLM\Software\Wow6432Node\Intel]
[HKLM\Software\Wow6432Node\JavaSoft]
[HKLM\Software\Wow6432Node\JreMetrics]
[HKLM\Software\Wow6432Node\Khronos]
[HKLM\Software\Wow6432Node\Macromedia]
[HKLM\Software\Wow6432Node\MozillaPlugins]
[HKLM\Software\Wow6432Node\Mozilla]
[HKLM\Software\Wow6432Node\ODBC]
[HKLM\Software\Wow6432Node\Policies]
[HKLM\Software\Wow6432Node\RegisteredApplications]
[HKLM\Software\Wow6432Node\Skype]
[HKLM\Software\Wow6432Node\SymNRT]
[HKLM\Software\Wow6432Node\TeamViewer]
[HKLM\Software\Wow6432Node\TomTom]
[HKLM\Software\Wow6432Node\VideoLAN]
[HKLM\Software\Wow6432Node\ej-technologies]
[HKLM\Software\Wow6432Node\magnet]
[HKLM\Software\Wow6432Node]
~ Key Software: 166 Scanned in 04mn AMs



---\\ Contents of the Common Files folders (O43)
O43 - CFD: 28/02/2014 - 11:47:36 AM - [] ----D C:\Program Files (x86)\2BrightSparks
O43 - CFD: 28/02/2014 - 09:29:22 AM - [] ----D C:\Program Files (x86)\Adobe
O43 - CFD: 12/04/2014 - 04:20:06 PM - [] ----D C:\Program Files (x86)\AirPort
O43 - CFD: 28/02/2014 - 11:20:36 AM - [] ----D C:\Program Files (x86)\Apple Software Update =>.Apple Inc
O43 - CFD: 28/02/2014 - 11:19:43 AM - [] ----D C:\Program Files (x86)\Bonjour
O43 - CFD: 15/05/2015 - 08:40:07 PM - [] ----D C:\Program Files (x86)\Common Files
O43 - CFD: 15/05/2015 - 08:55:43 PM - [0] ----D C:\Program Files (x86)\DivX
O43 - CFD: 18/05/2015 - 06:10:26 PM - [] ----D C:\Program Files (x86)\Fauxbar
O43 - CFD: 28/02/2014 - 08:44:43 AM - [] ---AD C:\Program Files (x86)\GBS6.1.3
O43 - CFD: 19/05/2015 - 04:19:00 PM - [] ----D C:\Program Files (x86)\Google
O43 - CFD: 06/04/2014 - 03:53:21 PM - [] ----D C:\Program Files (x86)\HP
O43 - CFD: 28/02/2014 - 10:07:17 AM - [] ----D C:\Program Files (x86)\Intel
O43 - CFD: 14/04/2014 - 07:17:40 PM - [] ----D C:\Program Files (x86)\Internet Explorer
O43 - CFD: 01/05/2015 - 08:29:53 PM - [] ----D C:\Program Files (x86)\iTunes
O43 - CFD: 15/03/2015 - 11:05:05 AM - [] ----D C:\Program Files (x86)\Java
O43 - CFD: 28/02/2014 - 11:02:55 AM - [] ----D C:\Program Files (x86)\Microsoft Analysis Services
O43 - CFD: 31/05/2014 - 05:22:20 PM - [0] ----D C:\Program Files (x86)\Microsoft Lync
O43 - CFD: 28/02/2014 - 11:04:58 AM - [] ----D C:\Program Files (x86)\Microsoft Office
O43 - CFD: 16/03/2014 - 01:41:02 PM - [] ----D C:\Program Files (x86)\Microsoft Silverlight
O43 - CFD: 28/02/2014 - 11:04:58 AM - [] ----D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
O43 - CFD: 28/02/2014 - 11:04:58 AM - [] ----D C:\Program Files (x86)\Microsoft Sync Framework
O43 - CFD: 28/02/2014 - 11:05:12 AM - [] ----D C:\Program Files (x86)\Microsoft Synchronization Services
O43 - CFD: 28/02/2014 - 11:03:38 AM - [] ----D C:\Program Files (x86)\Microsoft Visual Studio 8
O43 - CFD: 02/03/2014 - 02:54:43 PM - [] ----D C:\Program Files (x86)\Microsoft.NET
O43 - CFD: 28/02/2014 - 11:05:27 AM - [] ----D C:\Program Files (x86)\MSBuild
O43 - CFD: 21/09/2014 - 03:37:51 PM - [] ----D C:\Program Files (x86)\MyDrive Connect
O43 - CFD: 18/05/2015 - 01:50:26 PM - [0] ----D C:\Program Files (x86)\PathInstance
O43 - CFD: 14/07/2009 - 07:32:38 AM - [] ----D C:\Program Files (x86)\Reference Assemblies
O43 - CFD: 18/05/2015 - 06:10:26 PM - [] ----D C:\Program Files (x86)\Search YouTube =>PUP.SearchYouTube
O43 - CFD: 31/05/2015 - 08:52:27 PM - [] R---D C:\Program Files (x86)\Skype
O43 - CFD: 21/09/2014 - 03:37:54 PM - [] ----D C:\Program Files (x86)\TomTom International B.V
O43 - CFD: 14/07/2009 - 06:57:06 AM - [0] --H-D C:\Program Files (x86)\Uninstall Information
O43 - CFD: 28/02/2014 - 11:48:40 AM - [] ----D C:\Program Files (x86)\VideoLAN
O43 - CFD: 07/09/2014 - 07:09:11 PM - [] ----D C:\Program Files (x86)\Vuze =>P2P.Azureus
O43 - CFD: 02/03/2014 - 03:27:34 PM - [] ----D C:\Program Files (x86)\Windows Defender
O43 - CFD: 28/02/2014 - 10:47:31 AM - [] ----D C:\Program Files (x86)\Windows Mail =>.Microsoft Corporation
O43 - CFD: 02/03/2014 - 03:27:44 PM - [] ----D C:\Program Files (x86)\Windows Media Player =>.Microsoft Corporation
O43 - CFD: 14/07/2009 - 07:32:38 AM - [] ----D C:\Program Files (x86)\Windows NT
O43 - CFD: 28/02/2014 - 10:47:31 AM - [] ----D C:\Program Files (x86)\Windows Photo Viewer
O43 - CFD: 28/02/2014 - 10:47:31 AM - [] ----D C:\Program Files (x86)\Windows Portable Devices
O43 - CFD: 28/02/2014 - 10:47:31 AM - [] ----D C:\Program Files (x86)\Windows Sidebar
O43 - CFD: 01/06/2015 - 02:19:41 PM - [] ----D C:\Program Files (x86)\ZHPDiag =>.Nicolas Coolman
O43 - CFD: 14/05/2014 - 07:13:59 PM - [] ----D C:\Program Files (x86)\Common Files\Adobe
O43 - CFD: 08/03/2015 - 04:03:10 PM - [] ----D C:\Program Files (x86)\Common Files\Apple
O43 - CFD: 28/02/2014 - 11:05:11 AM - [] ----D C:\Program Files (x86)\Common Files\DESIGNER
O43 - CFD: 15/05/2015 - 08:55:38 PM - [] ----D C:\Program Files (x86)\Common Files\DivX Shared
O43 - CFD: 15/03/2015 - 11:04:27 AM - [] ----D C:\Program Files (x86)\Common Files\Java
O43 - CFD: 06/03/2014 - 03:12:21 AM - [] ----D C:\Program Files (x86)\Common Files\microsoft shared
O43 - CFD: 28/02/2014 - 09:59:53 AM - [] ----D C:\Program Files (x86)\Common Files\postureAgent
O43 - CFD: 14/07/2009 - 05:20:08 AM - [] ----D C:\Program Files (x86)\Common Files\Services
O43 - CFD: 11/11/2014 - 05:09:46 PM - [] ----D C:\Program Files (x86)\Common Files\Skype
O43 - CFD: 14/07/2009 - 05:20:08 AM - [] ----D C:\Program Files (x86)\Common Files\SpeechEngines
O43 - CFD: 02/03/2014 - 08:40:39 PM - [] ----D C:\Program Files (x86)\Common Files\System
O43 - CFD: 27/11/2014 - 08:42:28 PM - [] ----D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
O43 - CFD: 03/03/2014 - 06:32:06 PM - [] ----D C:\ProgramData\Adobe
O43 - CFD: 28/02/2014 - 11:20:27 AM - [] ----D C:\ProgramData\Apple
O43 - CFD: 28/02/2014 - 11:28:32 AM - [] ----D C:\ProgramData\Apple Computer
O43 - CFD: 14/07/2009 - 07:08:56 AM - [] -SH-D C:\ProgramData\Application Data
O43 - CFD: 18/05/2015 - 12:55:13 PM - [] ----D C:\ProgramData\AVAST Software
O43 - CFD: 09/03/2014 - 06:45:53 PM - [] ----D C:\ProgramData\Azureus =>P2P.Azureus
O43 - CFD: 14/07/2009 - 07:08:56 AM - [] -SH-D C:\ProgramData\Desktop
O43 - CFD: 15/05/2015 - 08:55:43 PM - [] ----D C:\ProgramData\DivX
O43 - CFD: 14/07/2009 - 07:08:56 AM - [] -SH-D C:\ProgramData\Documents
O43 - CFD: 01/05/2015 - 08:30:54 PM - [] ----D C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7
O43 - CFD: 14/07/2009 - 07:08:56 AM - [] -SH-D C:\ProgramData\Favorites
O43 - CFD: 28/02/2014 - 08:44:42 AM - [] ----D C:\ProgramData\GroupPolicy
O43 - CFD: 01/03/2014 - 09:51:40 AM - [] ----D C:\ProgramData\HP
O43 - CFD: 28/02/2014 - 10:07:23 AM - [] ----D C:\ProgramData\Intel
O43 - CFD: 08/05/2014 - 08:54:35 AM - [] -S--D C:\ProgramData\Microsoft
O43 - CFD: 10/04/2014 - 07:54:13 PM - [] ----D C:\ProgramData\Microsoft Help
O43 - CFD: 15/03/2015 - 11:05:34 AM - [] ----D C:\ProgramData\Oracle
O43 - CFD: 28/02/2014 - 02:45:10 PM - [] ----D C:\ProgramData\RICOH
O43 - CFD: 18/05/2015 - 03:02:23 PM - [] ----D C:\ProgramData\Skype
O43 - CFD: 14/07/2009 - 07:08:56 AM - [] -SH-D C:\ProgramData\Start Menu
O43 - CFD: 28/02/2014 - 11:17:05 AM - [] ----D C:\ProgramData\Sun
O43 - CFD: 14/07/2009 - 07:08:56 AM - [] -SH-D C:\ProgramData\Templates
O43 - CFD: 28/02/2014 - 11:47:37 AM - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\2BrightSparks
O43 - CFD: 28/02/2014 - 08:11:35 AM - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 28/02/2014 - 10:51:46 AM - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 18/05/2015 - 01:07:51 PM - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
O43 - CFD: 14/07/2009 - 09:12:56 AM - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
O43 - CFD: 18/04/2014 - 09:09:35 AM - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
O43 - CFD: 07/09/2014 - 06:40:53 PM - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
O43 - CFD: 02/02/2015 - 05:43:18 PM - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud
O43 - CFD: 28/02/2014 - 09:59:59 AM - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
O43 - CFD: 01/05/2015 - 08:31:01 PM - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
O43 - CFD: 15/10/2014 - 09:14:30 PM - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
O43 - CFD: 14/07/2009 - 06:57:09 AM - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 28/02/2014 - 11:05:47 AM - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
O43 - CFD: 16/03/2014 - 01:22:42 PM - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
O43 - CFD: 08/05/2014 - 08:52:04 AM - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft System Center 2012 R2
O43 - CFD: 28/02/2014 - 11:05:47 AM - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SharePoint
O43 - CFD: 11/11/2014 - 05:09:47 PM - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
O43 - CFD: 14/07/2009 - 06:54:24 AM - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
O43 - CFD: 14/07/2009 - 09:12:48 AM - [0] R-H-D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC
O43 - CFD: 21/09/2014 - 03:37:54 PM - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TomTom
O43 - CFD: 31/05/2014 - 04:02:56 PM - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
O43 - CFD: 01/06/2015 - 02:19:45 PM - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP =>.Nicolas Coolman
O43 - CFD: 28/02/2014 - 11:47:48 AM - [] ----D C:\Users\olivier.nechad\AppData\Roaming\2BrightSparks
O43 - CFD: 28/02/2014 - 03:28:53 PM - [] ----D C:\Users\olivier.nechad\AppData\Roaming\Adobe
O43 - CFD: 24/09/2014 - 08:14:02 PM - [] ----D C:\Users\olivier.nechad\AppData\Roaming\Apple Computer
O43 - CFD: 24/05/2014 - 08:58:22 PM - [] ----D C:\Users\olivier.nechad\AppData\Roaming\ArchiFacile
O43 - CFD: 18/05/2015 - 01:48:37 PM - [] ----D C:\Users\olivier.nechad\AppData\Roaming\AVAST Software
O43 - CFD: 02/05/2015 - 01:55:27 PM - [] ----D C:\Users\olivier.nechad\AppData\Roaming\Azureus =>P2P.Azureus
O43 - CFD: 15/05/2015 - 08:44:07 PM - [] ----D C:\Users\olivier.nechad\AppData\Roaming\DivX
O43 - CFD: 18/05/2015 - 03:12:08 PM - [] ----D C:\Users\olivier.nechad\AppData\Roaming\Dropbox
O43 - CFD: 28/02/2014 - 10:58:39 AM - [] ----D C:\Users\olivier.nechad\AppData\Roaming\DRPSu
O43 - CFD: 19/10/2014 - 09:15:08 PM - [] ----D C:\Users\olivier.nechad\AppData\Roaming\dvdcss
O43 - CFD: 22/09/2014 - 01:13:39 AM - [] ----D C:\Users\olivier.nechad\AppData\Roaming\HpUpdate
O43 - CFD: 28/02/2014 - 08:44:50 AM - [] ----D C:\Users\olivier.nechad\AppData\Roaming\Identities
O43 - CFD: 28/02/2014 - 09:30:12 AM - [] ----D C:\Users\olivier.nechad\AppData\Roaming\Macromedia
O43 - CFD: 14/07/2009 - 09:12:48 AM - [0] ----D C:\Users\olivier.nechad\AppData\Roaming\Media Center Programs
O43 - CFD: 06/10/2014 - 11:55:12 AM - [] -S--D C:\Users\olivier.nechad\AppData\Roaming\Microsoft
O43 - CFD: 01/06/2015 - 02:11:18 PM - [] ----D C:\Users\olivier.nechad\AppData\Roaming\Skype
O43 - CFD: 12/04/2014 - 08:43:35 PM - [] ----D C:\Users\olivier.nechad\AppData\Roaming\TeamViewer
O43 - CFD: 31/05/2015 - 12:25:32 AM - [] ----D C:\Users\olivier.nechad\AppData\Roaming\vlc
O43 - CFD: 01/06/2015 - 02:20:53 PM - [] ----D C:\Users\olivier.nechad\AppData\Roaming\ZHP =>.Nicolas Coolman
O43 - CFD: 28/02/2014 - 11:47:48 AM - [] ----D C:\Users\olivier.nechad\AppData\Local\2BrightSparks
O43 - CFD: 04/02/2015 - 03:57:31 PM - [] ----D C:\Users\olivier.nechad\AppData\Local\4A8B2242-376A-49D9-B59E-058FC6A4DAC5.aplzod
O43 - CFD: 07/09/2014 - 06:29:15 PM - [] ----D C:\Users\olivier.nechad\AppData\Local\Adobe
O43 - CFD: 12/04/2014 - 04:20:06 PM - [] ----D C:\Users\olivier.nechad\AppData\Local\Apple
O43 - CFD: 24/09/2014 - 07:44:53 PM - [] ----D C:\Users\olivier.nechad\AppData\Local\Apple Computer
O43 - CFD: 24/09/2014 - 07:54:55 PM - [] ----D C:\Users\olivier.nechad\AppData\Local\Apple Inc
O43 - CFD: 28/02/2014 - 08:44:30 AM - [] -SH-D C:\Users\olivier.nechad\AppData\Local\Application Data
O43 - CFD: 28/02/2014 - 09:17:43 AM - [] ----D C:\Users\olivier.nechad\AppData\Local\Apps
O43 - CFD: 15/03/2014 - 03:09:41 PM - [0] ----D C:\Users\olivier.nechad\AppData\Local\Deployment
O43 - CFD: 30/05/2015 - 07:02:28 PM - [] ----D C:\Users\olivier.nechad\AppData\Local\Diagnostics
O43 - CFD: 18/05/2015 - 01:21:38 PM - [0] ----D C:\Users\olivier.nechad\AppData\Local\e3d47e20-dcde-46a4-97d4-af0101cd1cae
O43 - CFD: 30/05/2015 - 06:22:54 PM - [] ----D C:\Users\olivier.nechad\AppData\Local\ElevatedDiagnostics
O43 - CFD: 14/04/2014 - 07:22:48 PM - [] -SH-D C:\Users\olivier.nechad\AppData\Local\EmieSiteList
O43 - CFD: 14/04/2014 - 07:22:48 PM - [] -SH-D C:\Users\olivier.nechad\AppData\Local\EmieUserList
O43 - CFD: 19/05/2015 - 09:02:10 AM - [] ----D C:\Users\olivier.nechad\AppData\Local\Google
O43 - CFD: 28/02/2014 - 08:44:30 AM - [] -SH-D C:\Users\olivier.nechad\AppData\Local\History
O43 - CFD: 01/03/2014 - 10:54:18 AM - [] ----D C:\Users\olivier.nechad\AppData\Local\HP
O43 - CFD: 29/01/2015 - 05:07:33 PM - [] ----D C:\Users\olivier.nechad\AppData\Local\Microsoft
O43 - CFD: 18/04/2014 - 07:01:09 PM - [] ----D C:\Users\olivier.nechad\AppData\Local\Microsoft Help
O43 - CFD: 28/02/2014 - 10:57:29 AM - [] ----D C:\Users\olivier.nechad\AppData\Local\Programs
O43 - CFD: 02/03/2014 - 08:58:09 PM - [] ----D C:\Users\olivier.nechad\AppData\Local\Skype
O43 - CFD: 01/06/2015 - 02:19:50 PM - [] ----D C:\Users\olivier.nechad\AppData\Local\Temp
O43 - CFD: 28/02/2014 - 08:44:30 AM - [] -SH-D C:\Users\olivier.nechad\AppData\Local\Temporary Internet Files
O43 - CFD: 21/09/2014 - 03:37:55 PM - [] ----D C:\Users\olivier.nechad\AppData\Local\TomTom
O43 - CFD: 21/05/2014 - 08:10:35 PM - [] ----D C:\Users\olivier.nechad\AppData\Local\VirtualStore
O43 - CFD: 14/07/2009 - 06:54:32 AM - [] R---D C:\Users\olivier.nechad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 02/03/2014 - 03:46:17 PM - [] R---D C:\Users\olivier.nechad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 28/02/2014 - 09:18:13 AM - [] ----D C:\Users\olivier.nechad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dell
O43 - CFD: 14/07/2009 - 06:49:38 AM - [] R---D C:\Users\olivier.nechad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 02/03/2014 - 03:46:17 PM - [] R---D C:\Users\olivier.nechad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
~ Program Folder: 147 Scanned in 00mn AMs



---\\ Last modified or created files under Windows and System32 (O44)
O44 - LFC:[MD5.405A1BAFF75516CFB24B76383B336707] - 01/06/2015 - 02:11:14 PM -S-A- . (...) -- C:\Windows\bootstat.dat [67584]
O44 - LFC:[MD5.516BDEA05EBE52B54946B664A7522B09] - 01/06/2015 - 02:11:24 PM ---A- . (...) -- C:\Windows\WindowsUpdate.log [1122556]
O44 - LFC:[MD5.3AFDE6109C72CBAAB13127B0B0AF0269] - 01/06/2015 - 02:13:10 PM ---A- . (...) -- C:\Windows\System32\PerfStringBackup.INI [783834]
O44 - LFC:[MD5.6AF57E5A21F8AD46C7BEE2782D5FA58E] - 01/06/2015 - 02:13:10 PM ---A- . (...) -- C:\Windows\System32\perfc009.dat [126396]
O44 - LFC:[MD5.5DA479F907BC274CE9F19F7276A5249E] - 01/06/2015 - 02:13:10 PM ---A- . (...) -- C:\Windows\System32\perfh009.dat [667898]
O44 - LFC:[MD5.3B4AC2DBFC86F7247C1FF1FAF2860530] - 18/05/2015 - 01:06:07 PM ---A- . (.Avast Software s.r.o. - avast! Virtualization Driver.) -- C:\Windows\System32\Drivers\aswSnx.sys [1047320]
O44 - LFC:[MD5.2169B4B1EFAA3453A4DA732F1F94C1E1] - 18/05/2015 - 01:06:24 PM ---A- . (.Avast Software s.r.o. - avast! Screen Saver stub.) -- C:\Windows\avastSS.scr [43112]
O44 - LFC:[MD5.B5B4C90E9F52DA8586F1E5461AD90A5D] - 18/05/2015 - 01:06:26 PM ---A- . (...) -- C:\Windows\System32\Drivers\aswHwid.sys [29168]
O44 - LFC:[MD5.07E32DFCA422A2920482D762D01957EC] - 18/05/2015 - 01:06:26 PM ---A- . (...) -- C:\Windows\System32\Drivers\aswRvrt.sys [65736]
O44 - LFC:[MD5.91782404718C6352C26B3242BAC3F0F1] - 18/05/2015 - 01:06:26 PM ---A- . (...) -- C:\Windows\System32\Drivers\aswVmm.sys [272248]
O44 - LFC:[MD5.6E53278ECCFFBC2ACC2A5006745ED4BB] - 18/05/2015 - 01:06:26 PM ---A- . (.Avast Software s.r.o. - Stream Filter.) -- C:\Windows\System32\Drivers\aswStm.sys [137288]
O44 - LFC:[MD5.300CB8E510855189CAD0B72FFB5590CB] - 18/05/2015 - 01:06:26 PM ---A- . (.Avast Software s.r.o. - avast! File System Minifilter for Windows 2.) -- C:\Windows\System32\Drivers\aswMonFlt.sys [89944]
O44 - LFC:[MD5.6D37D8DB30D086739507C5F6E542656A] - 18/05/2015 - 01:06:26 PM ---A- . (.Avast Software s.r.o. - avast! WFP Redirect Driver.) -- C:\Windows\System32\Drivers\aswRdr2.sys [93528]
O44 - LFC:[MD5.B1368BE5F6BA529E0886F4DA2361BD2D] - 18/05/2015 - 01:06:26 PM ---A- . (.Avast Software s.r.o. - avast! self protection module.) -- C:\Windows\System32\Drivers\aswSP.sys [442264]
O44 - LFC:[MD5.9CA2FDD44F7C1F8AC1652F6C2638CFED] - 18/05/2015 - 01:06:26 PM ---A- . (.Avast Software s.r.o. - avast! start-up scanner.) -- C:\Windows\System32\aswBoot.exe [364472]
O44 - LFC:[MD5.2A66E81AE941E54A237490FC35D387C8] - 19/05/2015 - 07:33:02 AM ---A- . (...) -- C:\Windows\epplauncher.mif [1945]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 19/05/2015 - 09:10:33 AM ---A- . (...) -- C:\autoexec.bat [0]
O44 - LFC:[MD5.5EBA878DAE83B7AEF83AD2088172E1A7] - 19/05/2015 - 09:15:04 PM ---A- . (...) -- C:\Windows\PFRO.log [58492]
O44 - LFC:[MD5.FAE710F88A52B0E155E5C8B3F8A28848] - 30/05/2015 - 07:23:43 PM ---A- . (...) -- C:\PhysicalDisk0_MBR.bin [512]
O44 - LFC:[MD5.D1A11414C7BE968C31ACFE49337F3949] - 31/05/2015 - 09:32:10 PM ---A- . (...) -- C:\Windows\setupact.log [34443]
O44 - LFC:[MD5.0EAAC1ACD907428F7331E2B9BA6070F8] - 31/05/2015 - 09:35:58 PM ---A- . (...) -- C:\Windows\SMSCFG.ini [566]
~ Files: 21 Scanned in 11mn AMs



---\\ Latest files created in Windows Prefetcher (O45)
O45 - LFCP:[MD5.9DA491CAA339F605388B0987938B41D3] - 31/05/2015 - 09:36:31 PM ---A- - C:\Windows\Prefetch\UPDATETRUSTEDSITES.EXE-50B100D0.pf =>Hijacker.DSite
~ Prefetcher: 1 Scanned in 00mn AMs



---\\ Operations and functions at Windows Explorer startup (O46)
O46 - SEH:ShellExecuteHooks - Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL
O46 - SEH:ShellExecuteHooks - Groove GFS Stub Execution Hook [64Bits] - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL
~ ShellExecuteHooks: Scanned in 00mn AMs



---\\ Local Security Authority-LSA Deny (O48)
O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft

OK ! c'est fait!!!

http://www.cjoint.com/c/EFbpTufxhle

Euuu, merci je te fait trop travailler!!!

https://www.cjoint.com/c/EFbrnD7Ee5e

Alors Electricien 69
Non... je n'est plus la pub pour le moment, les pages sont arrêter de s'ouvrir toutes seules et je n'est plus les mots en gras.

Juste, Avast a chaque page que j'ouvre me sorte un message comme quoi il à détecté une truc suspecte. N'importe quoi j'ouvre me dit la même chose.
C'est un problème lie a notre ancien problème, ou juste un réglage de Avast???

Voila, dans le temps de t'écrire cet message il s'ouvert 3 fois !!! (Ok, je prendre long temps pour écrire en français... lol )

https://www.cjoint.com/c/EFbuQulfkJe

Pareille que hier, les virus de avant sont partis mais avast n'arrête pas de me envoyer des messages chaque 2 min.

Je te copie ceux que disse le message :

URL: http://veterance.net/sync/?q=C6qUojwFpjgFqTw9pjs7pdn9rHn4pjg7tMZPhd9FqdrHpjg4pdU5rdC5rjnEpdw7qchGheDUojw8rdkFqdw4rHYErShEAen0rTwFqTsMDMlGojUMgNr0rihPBNq9ojsEtMl5Dd8NDdwHtMqLDe49CNU0eUwMB6qPhd97rdwMAe4Uojs4qjwGqTC8rTgGqda8qdg8pdsMWy4ZBek0k7x7hkV9n708Cy0KCGh9geDXAen0ra&amse=c9311q&xname=AdPunisher
Infection: URL:Mal
Process: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

En fait ils changes de nom mais je crois que ce toujours le même, voici un autre
message:

URL: http://filesonlinehere.com/sync/?q=C6qUojwFpjgFqTw9pjs7pdn9rHn4pjg7tMZPhd9FqdrHpjg4pdU5rdC5rjnEpdw7qchGheDUojw8rdkFqdw4rHYErShEAen0rTwFqTsMDMlGojUMgNr0rihPBNq9ojsEtMl5Dd8NDdwHtMqLDe49CNU0eUwMB6qPhd97rdwMAe4Uojs4qjwGqTC8rTgGqda8qdg8pdsMWy4ZBek0k7x7hkV9n708Cy0KCGh9geDXAen0ra&amse=c9311q&xname=AdPunisher
Infection: URL:Mal
Process: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Holà!
J'ai testé toute la journée et ça marche!!! Je n'est plus de avertissement d'avast.
Je suis heureuse !
Dit Electricien69, on as finis ??

# DelFix v1.010 - Logfile created 04/06/2015 at 10:10:56
# Updated 26/04/2015 by Xplode
# Username : Olivier.Nechad - NECHAD-LAPTOP
# Operating System : Windows 7 Professional Service Pack 1 (64 bits)

~ Removing disinfection tools ...

Deleted : C:\AdwCleaner
Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP
Deleted : C:\Program Files (x86)\ZHPDiag
Deleted : C:\PhysicalDisk0_MBR.bin
Deleted : C:\Users\olivier.nechad\Desktop\ZHPCleaner.lnk
Deleted : C:\Users\olivier.nechad\Desktop\ZHPCleaner.txt
Deleted : C:\Users\olivier.nechad\Desktop\ZHPDiag.lnk
Deleted : C:\Users\olivier.nechad\Desktop\ZHPDiag.txt
Deleted : C:\Users\olivier.nechad\Desktop\ZHPDiag2.txt
Deleted : C:\Users\olivier.nechad\Desktop\ZHPFix.lnk
Deleted : C:\Users\olivier.nechad\Desktop\ZHPFixReport.txt
Deleted : C:\Users\olivier.nechad\Desktop\ZHPFix[R1].txt
Deleted : C:\Users\olivier.nechad\Downloads\adwcleaner_4.205.exe
Deleted : C:\Users\olivier.nechad\Downloads\ZHPCleaner.exe
Deleted : C:\Users\olivier.nechad\Downloads\ZHPDiag2-2015.5.25.52.exe
Deleted : C:\Users\olivier.nechad\Downloads\ZHPDiag2-2015.5.31.53.exe
Deleted : HKLM\SOFTWARE\AdwCleaner
Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ZHPDiag_is1

~ Cleaning system restore ...

Deleted : RP #126 [Scheduled Checkpoint | 05/18/2015 14:00:41]
Deleted : RP #127 [Windows Update | 05/18/2015 17:44:30]
Deleted : RP #128 [Scheduled Checkpoint | 05/25/2015 22:00:00]
Deleted : RP #129 [Restore Operation | 05/30/2015 15:54:30]
Deleted : RP #130 [Windows Update | 05/31/2015 02:44:18]

New restore point created !

########## - EOF - ##########

Bonjour

Alors il ne trouve aucun virus, aucun module complémentaire néfaste, aucun problème sur le réseau.
Dis que au niveau du GrimeFighter mon ordi est encombre. Mais comment j'ai la version gratuite je ne peux pas le réparer!
C'est grave ça? Ou je peux vivre avec?
Parce que sinon je le sente très bien à l'ordi...
Merci !

Ok! merci beaucoup. Tu as étais très gentil et sympa!!!
Merci encore... et si tu va chez moi embrasse Buenos Aires de ma parte!!! Je habite Johannesburg actuellement!

Electricien 69 ... est tu par la? J'ai besoin de te poser une question!!

Hola! Comment ca va?
c'est une questions sur un ordi et je voudriez savoir si il y existe une solutions ou pas pour lui!!!
Je peux développer ...???

Ok! Je vais!

Cette un ordinateur portable HP 2009, Windows Vista.

Liste des choses que ne marche plus chez lui:
- certains touches du clavier ne marche plus, mais ils sont mort peu a peu.
- deux portes USB ne marche plus
- Porte HDMI ne marche plus
-Le son ne marche plus
- Extrêmement lent pour demander
- et surement des autres choses que ne marche pas et je ne sais pas!!

Oui... je sais il est pourri !!! mais je l'aime, je me suis habitué a travailler avec et je voudriez savoir si il y a une façons de lui réparer un petit peu ou définitivement je lui donne sa retrait!!!
J'aimerai avoir ton avis si possible!!
Merci!