Fenêtres publicitaires qui s'ouvrent, sous Google Chrome !
Résolu/Fermé
Chany04
Messages postés
9
Date d'inscription
vendredi 5 juillet 2013
Statut
Membre
Dernière intervention
6 juillet 2013
-
5 juil. 2013 à 19:42
yoann090 Messages postés 9180 Date d'inscription mercredi 12 août 2009 Statut Contributeur sécurité Dernière intervention 13 avril 2016 - 6 juil. 2013 à 23:46
yoann090 Messages postés 9180 Date d'inscription mercredi 12 août 2009 Statut Contributeur sécurité Dernière intervention 13 avril 2016 - 6 juil. 2013 à 23:46
A voir également:
- Fenêtres publicitaires qui s'ouvrent, sous Google Chrome !
- Dns google - Guide
- Google maps satellite - Guide
- Google earth - Télécharger - 3D
- Créer un compte google - Guide
- Google meet pour pc - Télécharger - Messagerie
4 réponses
yoann090
Messages postés
9180
Date d'inscription
mercredi 12 août 2009
Statut
Contributeur sécurité
Dernière intervention
13 avril 2016
1 687
Modifié par yoann090 le 5/07/2013 à 19:52
Modifié par yoann090 le 5/07/2013 à 19:52
Bonjour, tu as énormément d'adware dans ton pc.
* Télécharge AdwCleaner ( d'Xplode ) sur ton bureau :
-Lance le, clique sur [Suppression] puis patiente le temps du scan.
Une fois le scan fini, un rapport s'ouvrira. Poste moi son contenu dans ta prochaine réponse.
* Télécharge AdwCleaner ( d'Xplode ) sur ton bureau :
-Lance le, clique sur [Suppression] puis patiente le temps du scan.
Une fois le scan fini, un rapport s'ouvrira. Poste moi son contenu dans ta prochaine réponse.
SMETH
Messages postés
35
Date d'inscription
lundi 25 mars 2013
Statut
Membre
Dernière intervention
5 juillet 2013
1
5 juil. 2013 à 20:54
5 juil. 2013 à 20:54
Tu mets en bas du truc qui te demande d'executer juste en bas y'a une case soit tu la decoche ou tu la decoche pas
yoann090
Messages postés
9180
Date d'inscription
mercredi 12 août 2009
Statut
Contributeur sécurité
Dernière intervention
13 avril 2016
1 687
5 juil. 2013 à 22:36
5 juil. 2013 à 22:36
Tu as resolu ton probleme ?
Chany04
Messages postés
9
Date d'inscription
vendredi 5 juillet 2013
Statut
Membre
Dernière intervention
6 juillet 2013
5 juil. 2013 à 22:54
5 juil. 2013 à 22:54
Ouiiii grand énorme géant merci à vous !! Pour l'instant aucune fenêtre ne s'est ouverte. Et dire que ça fait presque 2ans que j'ai ce problème sans l'avoir résolu :/ la honte !
Bref, Merci ! :)
Bref, Merci ! :)
yoann090
Messages postés
9180
Date d'inscription
mercredi 12 août 2009
Statut
Contributeur sécurité
Dernière intervention
13 avril 2016
1 687
Modifié par yoann090 le 5/07/2013 à 23:03
Modifié par yoann090 le 5/07/2013 à 23:03
De rien.
Il ne faut pas hesiter à demander :)
Pendant qu on y est tu veux qu on approfondisse les recherches pour voir s il n y a rien d autre a enlever ?
Tu peux deja refaire un ZHPDiag
Il ne faut pas hesiter à demander :)
Pendant qu on y est tu veux qu on approfondisse les recherches pour voir s il n y a rien d autre a enlever ?
Tu peux deja refaire un ZHPDiag
Chany04
Messages postés
9
Date d'inscription
vendredi 5 juillet 2013
Statut
Membre
Dernière intervention
6 juillet 2013
6 juil. 2013 à 00:06
6 juil. 2013 à 00:06
Alors après avoir refait un ZHPDiag, voici le rapport :
Rapport de ZHPDiag v2013.7.5.7 par Nicolas Coolman, Update du 2013-07-05
Run by usqger at 2013-07-05 22:50:51
WebSite: https://nicolascoolman.webs.com/
State : Version à jour.
WhiteList : Disable
High Elevated Privileges : OK
UAC : Deactivate by program
---\\ Web Browser
MSIE: Internet Explorer v10.0.9200.16618
GCIE: Google Chrome v27.0.1453.116 (Defaut)
OBIE: Safari v5.34.57.2
---\\ Windows Product Information
~ Langage: Français
Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)
Windows Server License Manager Script : OK
~ Windows(R) 7, OEM_SLP channel
System Locked Preinstallation (OEM_SLP) : OK
Windows ID Activation : OK
~ Windows Partial Key : 3Q6C9
Windows License : OK
~ Windows Remaining Initializations Number : 2
Software Protection Service (Protection logicielle) : OK
Windows Automatic Updates : OK
Windows Activation Technologies : OK
---\\ System Protection
Microsoft Security Client FR-FR Language Pack v2.1.1116.0
Windows Defender W7
---\\ System Optimizer
---\\ Peer To Peer (P2P)
---\\ Software Update
Adobe Flash Player 11 Plugin
Java 7 Update 21
---\\ System Information
~ Processor: Intel64 Family 6 Model 23 Stepping 10, GenuineIntel
~ Operating System: 64 Bits
Boot mode: Normal (Normal boot)
Total RAM: 3998 MB (53% free)
System Restore: Activé (Enable)
System drive C: has 141 GB (49%) free of 285 GB
---\\ Logged in mode
~ Computer Name: USQGER-PC
~ User Name: usqger
~ All Users Names: usqger, HomeGroupUser$, Administrateur,
~ Unselected Option: O45,O61,O62,O65,O66,O80,O82,O89
Logged in as Administrator
---\\ Environnement Variables
~ System Unit : C:\
~ %AppData% : C:\Users\usqger\AppData\Roaming\
~ %Desktop% : C:\Users\usqger\Desktop\
~ %Favorites% : C:\Users\usqger\Favorites\
~ %LocalAppData% : C:\Users\usqger\AppData\Local\
~ %StartMenu% : C:\Users\usqger\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\
---\\ DOS/Devices
C:\ Hard drive, Flash drive, Thumb drive (Free 141 Go of 285 Go)
D:\ Hard drive, Flash drive, Thumb drive (Free 2 Go of 13 Go)
E:\ CD-ROM drive (Not Inserted)
---\\ Security Center & Tools Informations
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK
~ Security Center: 32 Scanned in 00mn 00s
---\\ Recherche particulière de fichiers génériques
[MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorateur Windows.) (.2011-02-25 - 07:19:30.) -- C:\Windows\Explorer.exe [2871808]
[MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de démarrage de Windows.) (.2009-07-14 - 02:39:52.) -- C:\Windows\System32\Wininit.exe [129024]
[MD5.12716D987D475B051F35895659159705] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.2013-05-17 - 01:59:03.) -- C:\Windows\System32\wininet.dll [2241024]
[MD5.1151B1BAA6F350B1DB6598E0FEA7C457] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.2010-11-20 - 14:25:30.) -- C:\Windows\System32\Winlogon.exe [390656]
[MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Bibliothèque de licences.) (.2010-11-20 - 14:27:26.) -- C:\Windows\System32\sppcomapi.dll [232448]
[MD5.1C7857B62DE5994A75B054A9FD4C3825] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.2011-12-28 - 04:59:24.) -- C:\Windows\system32\Drivers\AFD.sys [498688]
[MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.2009-07-14 - 02:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128]
[MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.2009-07-14 - 00:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160]
[MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.2010-11-20 - 10:19:21.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456]
[MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.2010-11-20 - 10:26:32.) -- C:\Windows\system32\Drivers\DfsC.sys [102400]
[MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.2010-11-20 - 11:43:43.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368]
[MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) (.2009-07-14 - 00:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472]
[MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.2009-07-14 - 01:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224]
[MD5.A5D9106A73DC88564C825D317CAC68AC] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.2011-04-27 - 03:40:40.) -- C:\Windows\system32\Drivers\MRxSmb.sys [158208]
[MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) (.2010-11-20 - 10:23:20.) -- C:\Windows\system32\Drivers\netBT.sys [261632]
[MD5.B98F8C6E31CD07B2E6F71F7F648E38C0] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.2013-04-12 - 15:45:08.) -- C:\Windows\system32\Drivers\ntfs.sys [1656680]
[MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parallèle.) (.2009-07-14 - 01:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280]
[MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.2010-11-20 - 11:52:35.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [129536]
[MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.2009-07-14 - 01:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184]
[MD5.DDAD5A7AB24D8B65F8D724F5C20FD806] - (.Microsoft Corporation - TDI Translation Driver.) (.2010-11-20 - 10:21:56.) -- C:\Windows\system32\Drivers\tdx.sys [119296]
[MD5.0D08D2F3B3FF84E433346669B5E0F639] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.2010-11-20 - 14:34:02.) -- C:\Windows\system32\Drivers\volsnap.sys [295808]
~ Generic Processes: Scanned in 00mn 00s
---\\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 2/12
~ Mes musiques (My Musics) : 1/681
~ Mes Videos (My Videos) : 21/25
~ Mes Favoris (My Favorites) : 1/21
~ Mes Documents (My Documents) : 1/677
~ Mon Bureau (My Desktop) : 27/5949
~ Menu demarrer (Programs) : 1/50
~ Hidden Files: Scanned in 00mn 07s
---\\ Processus lancés
[MD5.9157189DC07511ECBBE1D2615D8A2FED] - (.Hewlett-Packard - HP Advisor.) -- C:\Program Files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe [1668664] [PID.2144]
[MD5.A605FA7299047381701A09B96C677721] - (.PC Remote - PC Remote Server.) -- C:\Program Files (x86)\PC Remote\PC Remote\PCRemote.exe [884376] [PID.3168]
[MD5.2FB81DD6DAAD0C123D5C4D00A2BF8094] - (.Pas de propriétaire - Viber.) -- C:\Users\usqger\AppData\Local\Viber\Viber.exe [906240] [PID.3252]
[MD5.32C26797AB646074A2BB562F9D10ADB5] - (.Microsoft Corporation - Microsoft Office OneNote Quick Launcher.) -- C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.exe [97680] [PID.3364]
[MD5.A2814FED5A47B00BBC99AC58F93B9337] - (.CyberLink Corp. - HP QuickPlay Resident Program.) -- C:\Program Files (x86)\HP\QuickPlay\QPService.exe [468264] [PID.3672]
[MD5.0771A5C3B78967F9F83C1C429334AD2A] - (. Hewlett-Packard Development Company, L.P. - Quick Launch Buttons.) -- C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe [320056] [PID.3700]
[MD5.5516C26A6AF8EB4E2CAB48EC98A74398] - (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe [54576] [PID.3720]
[MD5.8E53B67FA3816E854B07C5DC66E10730] - (.RealNetworks, Inc. - RealNetworks Scheduler.) -- C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe [296056] [PID.3784]
[MD5.D63797E8E7781EE1500A810CB6194FA6] - (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816] [PID.3892]
[MD5.3B01B800A43CF3FAF5AAA78315BC2148] - (.Nullsoft, Inc. - Winamp Agent.) -- C:\Program Files (x86)\Winamp\winampa.exe [74752] [PID.3988]
[MD5.A9F9D081518AC03A51C1195986076F42] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392] [PID.4016]
[MD5.0DE3C7622EC33126579B1742260F08C2] - (.Pas de propriétaire - HpqToaster Module.) -- C:\Program Files (x86)\Hewlett-Packard\Shared\hpqToaster.exe [632888] [PID.628]
[MD5.5521928AA79079565B7CB8FCE6806131] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [825808] [PID.2992]
[MD5.7E436B07C60B3A1D992648526732DB4F] - (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe [19604072] [PID.3348]
[MD5.E5A7EA8C5C063943231A071789956893] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [7667712] [PID.932]
[MD5.4FE5C6D40664AE07BE5105874357D2ED] - (.Apple Inc. - MobileDeviceService.) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [57008] [PID.1928]
[MD5.83D8BE94E1CBCBE2EA8372DB1A95A159] - (.Hewlett-Packard Company - LightScribe Service.) -- C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [73728] [PID.1356]
[MD5.C5052FB77AA42ED440F9F6B4E37145A9] - (.Nero AG - Nero BackItUp.) -- C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBService.exe [869672] [PID.1988]
[MD5.498EB62A160674E793FA40FD65390625] - (.Pas de propriétaire - RichVideo Module.) -- C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [247152] [PID.2056]
[MD5.09C87F376507122A5FE1CBE06E015512] - (.Google Inc. - Google Crash Handler.) -- C:\Program Files (x86)\Google\Update\1.3.21.149\GoogleCrashHandler.exe [239496] [PID.2284]
[MD5.9B7EDD3FE7C211C36E921D34D18A3A0A] - (.Hewlett-Packard Company - HP Software Framework WMI Service.) -- C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe [1001376] [PID.3128]
[MD5.F9A79C5B27037821112C50A9C8FB367A] - (.Hewlett-Packard Development Company, L.P. - Com for QLB application.) -- C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [228408] [PID.3872]
~ Processes Running: Scanned in 00mn 01s
---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
C:\Users\usqger\AppData\Local\Google\Chrome\User Data\Default\Preferences
G2 - GCE: Preference [User Data\Default] [ahfgeienlihckogmohjhadlkjgocpleb] Store v.0.2 (Activé)
G2 - GCE: Preference [User Data\Default] [eemcgdkfndhakfknompkggombfjjjeno] Bookmark Manager v.0.1 (Activé)
G2 - GCE: Preference [User Data\Default] [ennkphjdgehloodpbhlhldgbnhmacadg] Settings v.0.2 (Activé)
G2 - GCE: Preference [User Data\Default] [jfmjfhklogoienhpfnppmbcbjfjnkonk] RealPlayer HTML5Video Downloader Extension v.1.5 (Désactivé)
G2 - GCE: Preference [User Data\Default] [lifbcibllhkdhoafpjfnlhfpfgnpldfl] Skype Click to Call v.5.9.0.9216 (Désactivé)
G2 - GCE: Preference [User Data\Default] [mfehgcgbbipciphmccgaenjidiccnmng] Cloud Print v.0.1 (Activé)
G2 - GCE: Preference [User Data\Default] [mgndgikekgjfcpckkfioiadnlibdjbkf] Chrome v.0.1 (Activé)
~ Google Browser: 7 Scanned in 00mn 11s
---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
C:\Users\usqger\AppData\Roaming\Mozilla\Firefox\Profiles\extensions\prefs.js (.not file.)
C:\Users\usqger\AppData\Roaming\Mozilla\Firefox\Profiles\[opt]rs0\prefs.js
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll
P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 5.1.20125.0.) -- c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll
P2 - FPN: [HKCU] [@Skype Limited.com/Facebook Video Calling Plugin] - (.Skype Limited - Facebook Video Calling Plugin.) -- C:\Users\usqger\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll
~ Firefox Browser: 3 Scanned in 00mn 00s
---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?gws_rd=ssl
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.microsoft.com/fr-fr/
R0 - HKCU\SOFTWARE\Classes\Software\Microsoft\Internet Explorer\Main,Start Page = http://ww25.allssearch.com/ =>Adware.SocialSkinz
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = https://www.microsoft.com/fr-fr/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.microsoft.com/fr-fr/
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm
R3 - URLSearchHook: Microsoft Url Search Hook [64Bits] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (10.00.9200.16521 (win8_gdr_soc_ie.130216-2100)) -- C:\Windows\SysWOW64\ieframe.dll
R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1
R4 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1
~ IE Browser: 16 Scanned in 00mn 00s
---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Proxy management: Scanned in 00mn 00s
---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
~ Keys: Scanned in 00mn 00s
---\\ Redirection du fichier Hosts (O1)
~ Le fichier hosts est sain (The hosts file is clean).
~ Hosts File: Scanned in 00mn 00s
~ Nombre de lignes (Lines number): 0
---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: HP Print Enhancer [64Bits] - {0347C33E-8762-4905-BF09-768834316C61} . (.Hewlett-Packard Co. - HP Smart Web Printing add-on for Internet E.) -- C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer [64Bits] - {3049C3E9-B461-4BC5-8870-4C09146192CA} . (.RealPlayer - RealPlayer Download and Record Plugin.) -- C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
O2 - BHO: Groove GFS Browser Helper [64Bits] - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} . (.Microsoft Corporation - GrooveShellExtensions Module.) -- C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In SSV Helper [64Bits] - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live ID [64Bits] - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corp. - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Messenger Companion Helper [64Bits] - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} . (.Microsoft Corporation - Windows Live Messenger Companion Core.) -- C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
O2 - BHO: SkypeIEPluginBHO [64Bits] - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} . (.Skype Technologies S.A. - Skype Click to Call for Internet Explorer.) -- C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper [64Bits] - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O2 - BHO: HP Network Check Helper [64Bits] - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} . (.Hewlett-Packard - HP Network Check IE Plug-in.) -- C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll
O2 - BHO: HP Smart BHO Class [64Bits] - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} . (.Hewlett-Packard Co. - HP Smart Web Printing add-on for Internet E.) -- C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
~ BHO: 10 Scanned in 00mn 00s
---\\ Applications démarrées par registre & par dossier (O4)
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files (x86)\Synaptics\SynTP\SynTPEnh.exe (.not file.)
O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [SysTrayApp] . (.IDT, Inc. - IDT PC Audio.) -- C:\Program Files\IDT\WDM\sttray64.exe
O4 - HKLM\..\Run: [MSC] . (.Microsoft Corporation - Microsoft Security Client User Interface.) -- c:\Program Files\Microsoft Security Client\msseces.exe
O4 - HKCU\..\Run: [HPADVISOR] . (.Hewlett-Packard - HP Advisor.) -- C:\Program Files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe
O4 - HKCU\..\Run: [Facebook Update] . (.Facebook Inc. - Programme d'installation de Facebook.) -- C:\Users\usqger\AppData\Local\Facebook\Update\FacebookUpdate.exe
O4 - HKCU\..\Run: [MobileDocuments] C:\Program Files (x86)\Common Files\Apple\Internet Services\ubd.exe (.not file.)
O4 - HKCU\..\Run: [Akamai NetSession Interface] C:\Users\usqger\AppData\Local\Akamai\netsession_win.exe (.not file.)
O4 - HKCU\..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] . (.Nero AG - Nero Home.) -- C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexStoreSvr.exe
O4 - HKCU\..\Run: [PC Remote Server] . (.PC Remote - PC Remote Server.) -- C:\Program Files (x86)\PC Remote\PC Remote\PCRemote.exe
O4 - HKCU\..\Run: [Viber] . (.Pas de propriétaire - Viber.) -- C:\Users\usqger\AppData\Local\Viber\Viber.exe
O4 - HKLM\..\Wow6432Node\Run: [QPService] . (.CyberLink Corp. - HP QuickPlay Resident Program.) -- C:\Program Files (x86)\HP\QuickPlay\QPService.exe
O4 - HKLM\..\Wow6432Node\Run: [UCam_Menu] . (.CyberLink Corp. - MUI StartMenu Application.) -- C:\Program Files (x86)\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe
O4 - HKLM\..\Wow6432Node\Run: [QlbCtrl.exe] . (. Hewlett-Packard Development Company, L.P. - Quick Launch Buttons.) -- C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe
O4 - HKLM\..\Wow6432Node\Run: [UpdatePRCShortCut] . (.CyberLink Corp. - MUI StartMenu Application.) -- C:\Program Files (x86)\Hewlett-Packard\Recovery\MUITransfer\MUIStartMenu.exe
O4 - HKLM\..\Wow6432Node\Run: [HP Software Update] . (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Wow6432Node\Run: [WirelessAssistant] . (.Hewlett-Packard - HP Wireless Assistant Main Program.) -- C:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
O4 - HKLM\..\Wow6432Node\Run: [GrooveMonitor] . (.Microsoft Corporation - GrooveMonitor Utility.) -- C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe
O4 - HKLM\..\Wow6432Node\Run: [AppleSyncNotifier] . (.Apple Inc. - AppleSyncNotifier.) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe
O4 - HKLM\..\Wow6432Node\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
O4 - HKLM\..\Wow6432Node\Run: [TkBellExe] . (.RealNetworks, Inc. - RealNetworks Scheduler.) -- c:\program files (x86)\real\realplayer\Update\realsched.exe
O4 - HKLM\..\Wow6432Node\Run: [NBKeyScan] . (.Nero AG - Nero BackItUp.) -- C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBKeyScan.exe
O4 - HKLM\..\Wow6432Node\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
O4 - HKLM\..\Wow6432Node\Run: [WinampAgent] . (.Nullsoft, Inc. - Winamp Agent.) -- C:\Program Files (x86)\Winamp\winampa.exe
O4 - HKLM\..\Wow6432Node\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe
O4 - HKLM\..\Wow6432Node\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files (x86)\QuickTime\QTTask.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe
O4 - HKUS\S-1-5-21-3156846314-1895714274-2719764697-1000\..\Run: [HPADVISOR] . (.Hewlett-Packard - HP Advisor.) -- C:\Program Files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe
O4 - HKUS\S-1-5-21-3156846314-1895714274-2719764697-1000\..\Run: [Facebook Update] . (.Facebook Inc. - Programme d'installation de Facebook.) -- C:\Users\usqger\AppData\Local\Facebook\Update\FacebookUpdate.exe
O4 - HKUS\S-1-5-21-3156846314-1895714274-2719764697-1000\..\Run: [MobileDocuments] C:\Program Files (x86)\Common Files\Apple\Internet Services\ubd.exe (.not file.)
O4 - HKUS\S-1-5-21-3156846314-1895714274-2719764697-1000\..\Run: [Akamai NetSession Interface] C:\Users\usqger\AppData\Local\Akamai\netsession_win.exe (.not file.)
O4 - HKUS\S-1-5-21-3156846314-1895714274-2719764697-1000\..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] . (.Nero AG - Nero Home.) -- C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexStoreSvr.exe
O4 - HKUS\S-1-5-21-3156846314-1895714274-2719764697-1000\..\Run: [PC Remote Server] . (.PC Remote - PC Remote Server.) -- C:\Program Files (x86)\PC Remote\PC Remote\PCRemote.exe
O4 - HKUS\S-1-5-21-3156846314-1895714274-2719764697-1000\..\Run: [Viber] . (.Pas de propriétaire - Viber.) -- C:\Users\usqger\AppData\Local\Viber\Viber.exe
~ Application: Scanned in 00mn 00s
---\\ Autres liens utilisateurs (O4)
O4 - GS\TaskBar: Adobe Photoshop CS5.lnk . (.Adobe Systems, Incorporated - Adobe Photoshop CS5.) -- C:\Program Files (x86)\Adobe\Adobe Photoshop CS5 Portable\Adobe Photoshop CS5.exe
O4 - GS\TaskBar: CopyTrans Manager (Gratuit).lnk . (.WindSolutions - CopyTrans Manager.) -- C:\Users\usqger\AppData\Roaming\WindSolutions\CopyTransControlCenter\Applications\CopyTransManager.exe
O4 - GS\TaskBar: DiskAid.lnk . (...) -- C:\Program Files (x86)\DigiDNA\DiskAid\DiskAid.exe
O4 - GS\TaskBar: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O4 - GS\TaskBar: HPAdvisor.lnk . (.Hewlett-Packard - HP Advisor.) -- C:\Program Files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe
O4 - GS\TaskBar: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - GS\TaskBar: Power2Go.lnk . (.CyberLink Corp. - Power2Go.) -- C:\Program Files (x86)\CyberLink\Power2Go\Power2Go.exe
O4 - GS\TaskBar: Safari.lnk . (...) -- C:\Windows\Installer\{C779648B-410E-4BBA-B75B-5815BCEFE71D}\SafariIco.exe
O4 - GS\TaskBar: Windows Explorer.lnk . (.Microsoft Corporation - Explorateur Windows.) -- C:\Windows\explorer.exe
O4 - GS\TaskBar: Windows Live Movie Maker.lnk . (.Microsoft Corporation - Windows Live Movie Maker.) -- C:\Program Files (x86)\Windows Live\Photo Gallery\MovieMaker.exe
O4 - GS\TaskBar: Windows Media Player.lnk . (.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O4 - GS\Programs: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - GS\Programs: Viber.lnk . (...) -- C:\Users\usqger\AppData\Local\Viber\Viber.exe
O4 - GS\QuickLaunch: Apple Safari.lnk . (...) -- C:\Windows\Installer\{C779648B-410E-4BBA-B75B-5815BCEFE71D}\SafariIco.exe
O4 - GS\QuickLaunch: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - GS\QuickLaunch: Microsoft Office Outlook.lnk . (.Microsoft Corporation - Microsoft Office Outlook.) -- C:\Program Files (x86)\Microsoft Office\Office12\OUTLOOK.exe
O4 - GS\QuickLaunch: Nero Home.lnk . (.Nero AG - Nero Home.) -- C:\Program Files (x86)\Nero\Nero8\Nero Home\NeroHome.exe
O4 - GS\QuickLaunch: Nero StartSmart.lnk . (.Nero AG - Nero StartSmart 8 Application.) -- C:\Program Files (x86)\Nero\Nero8\Nero StartSmart\NeroStartSmart.exe
O4 - GS\QuickLaunch: Viber.lnk . (...) -- C:\Users\usqger\AppData\Local\Viber\Viber.exe
O4 - GS\QuickLaunch: WildTangent Games App - hp.lnk . (.WildTangent - WildTangent Games App.) -- C:\Program Files (x86)\WildTangent Games\App\GameConsole-wt.exe
O4 - GS\Accessories: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - GS\Accessories: Private Character Editor.lnk . (.Microsoft Corporation - Éditeur de caractères privés.) -- C:\Windows\system32\eudcedit.exe
O4 - GS\SendTo: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) -- C:\Windows\system32\WFS.exe
O4 - GS\SendTo: Format Factory.lnk . (.Free Time - FormatFactory.) -- C:\Program Files (x86)\FreeTime\FormatFactory\FormatFactory.exe
O4 - GS\SendTo: Skype.lnk . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe
O4 - GS\Desktop: Freecell - Raccourci.lnk - Clé orpheline
O4 - GS\Desktop: Solitaire - Raccourci.lnk - Clé orpheline
O4 - GS\Desktop: Spider Solitaire - Raccourci.lnk - Clé orpheline
~ Global Startup: Scanned in 00mn 02s
---\\ Invisibilité de l'icône d'options IE dans le panneau de Configuration (O5)
O5 - control.ini: [HKLM\..\Control Panel] inetcpl.cpl=no
~ IE Control Panel: 1 Scanned in 00mn 00s
---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll
O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll
O10 - WLSP:\000000000007\Winsock LSP File . (.Apple Inc. - Bonjour Namespace Provider.) -- C:\Program Files (x86)\Bonjour\mdnsNSP.dll
O10 - WLSP:\000000000008\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll
O10 - WLSP:\000000000009\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll
~ Winsock: 9 Scanned in 00mn 00s
---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{4A9D51E7-123C-482E-9953-08269987FF92}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{AB346EA4-9522-464B-BCE8-F8D148F217B1}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{4A9D51E7-123C-482E-9953-08269987FF92}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{AB346EA4-9522-464B-BCE8-F8D148F217B1}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{4A9D51E7-123C-482E-9953-08269987FF92}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{AB346EA4-9522-464B-BCE8-F8D148F217B1}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
~ Domain: Scanned in 00mn 00s
---\\ Protocole additionnel (O18)
O18 - Handler: wlpg [64Bits] - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (...) --
O18 - Filter: text/xml [64Bits] - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.dll
~ Protocole Additionnel: Scanned in 00mn 00s
---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\Windows\System32\igfxdev.dll
~ Winlogon: Scanned in 00mn 00s
---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
~ SSODL: 1 Scanned in 00mn 00s
---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: Andrea ST Filters Service (AESTFilters) . (.Andrea Electronics Corporation - Andrea filters APO access service (64-bit).) - C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\AESTSr64.exe
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) . (.LSI Corporation - LSI Soft Modem Call Progress Service.) - C:\Program Files\LSI SoftModem\agr64svc.exe
O23 - Service: Apple Mobile Device (Apple Mobile Device) . (.Apple Inc. - MobileDeviceService.) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: HP Support Assistant Service (HP Support Assistant Service) . (.Hewlett-Packard Company - HP Support Assistant Service.) - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
O23 - Service: LightScribeService Direct Disc Labeling (LightScribeService) . (.Hewlett-Packard Company - LightScribe Service.) - C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Nero BackItUp Scheduler 3 (Nero BackItUp Scheduler 3) . (.Nero AG - Nero BackItUp.) - C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) . (.Pas de propriétaire - RichVideo Module.) - C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: Audio Service (STacSV) . (.IDT, Inc. - IDT PC Audio.) - C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\STacSV64.exe
~ Services: 11 Scanned in 00mn 04s
---\\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(...) - (.not file.)
~ Desktop Component: 4 Scanned in 00mn 00s
---\\ BootExecute (O34)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
~ BEX: 1 Scanned in 00mn 00s
---\\ Tâches planifiées en automatique (O39)
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\Adobe Flash Player Updater.job [1002]
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3156846314-1895714274-2719764697-1000Core.job [1078]
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3156846314-1895714274-2719764697-1000UA.job [1100]
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job [1064]
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job [1068]
[MD5.9915504F602D277EE47FD843A677FD15] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [256904]
[MD5.9EB925EDC8CF1C3D06E50E9348B54A0A] [APT] [FacebookUpdateTaskUserS-1-5-21-3156846314-1895714274-2719764697-1000Core] (.Facebook Inc..) -- C:\Users\usqger\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096]
[MD5.9EB925EDC8CF1C3D06E50E9348B54A0A] [APT] [FacebookUpdateTaskUserS-1-5-21-3156846314-1895714274-2719764697-1000UA] (.Facebook Inc..) -- C:\Users\usqger\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096]
[MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [116648]
[MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [116648]
[MD5.D412AC27FE3C9F8BC19741DAC0E0329D] [APT] [RealUpgradeLogonTaskS-1-5-21-3156846314-1895714274-2719764697-1000] (.RealNetworks, Inc..) -- C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [178800]
[MD5.D412AC27FE3C9F8BC19741DAC0E0329D] [APT] [RealUpgradeScheduledTaskS-1-5-21-3156846314-1895714274-2719764697-1000] (.RealNetworks, Inc..) -- C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [178800]
[MD5.00000000000000000000000000000000] [APT] [Your File Updater] (...) -- C:\Program Files (x86)\YourFileDownloader\YourFileUpdater.exe (.not file.) [0] =>PUP.YourFileDownloader
[MD5.5521928AA79079565B7CB8FCE6806131] [APT] [{9855A1E1-5153-4EDA-9CA4-5CF7B3890933}] (.Google Inc..) -- c:\program files (x86)\google\chrome\application\chrome.exe [825808]
[MD5.00000000000000000000000000000000] [APT] [{A1001EE2-35FD-473E-9870-18856DFAC401}] (...) -- c:\users\usqger\appdata\local\google\chrome\application\chrome.exe (.not file.) [0]
[MD5.5521928AA79079565B7CB8FCE6806131] [APT] [{A1687005-6750-4066-9BD2-5A13A629FE1C}] (.Google Inc..) -- c:\program files (x86)\google\chrome\application\chrome.exe [825808]
[MD5.00000000000000000000000000000000] [APT] [{E16E0529-0AEE-41B8-A96D-717ACEE787B7}] (...) -- C:\Users\usqger\Desktop\Serah v1.0\serah_setup.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{E848C6FF-7152-497D-B0D8-30DB6BEF6EE7}] (...) -- C:\Users\usqger\Desktop\AV Voice Changer Diamond Edition 5.0 Full\VCS_Diamond50.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{EE0547DF-98FE-46C6-83FF-BFFDF2366EA0}] (...) -- C:\Users\usqger\Desktop\PhotoshopCS3Portable\PhotoshopSetup.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{FA83D1CF-6924-410B-8924-BA13F2047930}] (...) -- C:\Users\usqger\Downloads\PhotoshopCS3Portable\PhotoshopPortable.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{FC7F2588-C993-4437-BAE4-C50586BC561F}] (...) -- C:\Users\usqger\Desktop\PhotoshopCS3Portable\PhotoshopPortable.exe (.not file.) [0]
[MD5.34EBD4FF6A24D86BB4716D6AFCC1A89B] [APT] [AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [561984]
[MD5.0AE2C218A9AB6C16D79160CCE55B35FC] [APT] [HP Support Assistant Quick Start] (.Hewlett-Packard Company.) -- C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [525728]
[MD5.0AE2C218A9AB6C16D79160CCE55B35FC] [APT] [PC Health Analysis] (.Hewlett-Packard Company.) -- C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [525728]
[MD5.0AE2C218A9AB6C16D79160CCE55B35FC] [APT] [PC Health Analysis Install] (.Hewlett-Packard Company.) -- C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [525728]
[MD5.28E1A34ED1B810BC2F4734F2DBFF2A76] [APT] [Update Check] (.Hewlett-Packard Company.) -- C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe [615736]
~ Scheduled Task: 27 Scanned in 00mn 05s
---\\ Composants installés (ActiveSetup Installed Components) (O40)
O40 - ASIC: Microsoft Windows Media Player [64Bits] - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll
O40 - ASIC: Microsoft Windows Media Player 12.0 [64Bits] - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\SysWOW64\wmpdxm.dll
O40 - ASIC: Themes Setup [64Bits] - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\Windows\System32\themeui.dll
O40 - ASIC: Internet Explorer [64Bits] - {2D46B6DC-2207-486B-B523-A557E6D54B47} . (.Microsoft Corporation - Interpréteur de commandes Windows.) -- C:\Windows\system32\cmd.exe
O40 - ASIC: Microsoft Windows [64Bits] - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Windows Mail.) -- C:\Program Files (x86)\Windows Mail\WinMail.exe
O40 - ASIC: Browsing Enhancements [64Bits] - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\Windows\System32\msieftp.dll
O40 - ASIC: Microsoft Windows Media Player [64Bits] - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll
O40 - ASIC: Windows Desktop Update [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll
O40 - ASIC: Web Platform Customizations [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe
O40 - ASIC: (no name) [64Bits] - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\system32\mscories.dll
~ Active Setup: 10 Scanned in 00mn 00s
---\\ Pilotes lancés au démarrage (O41)
O41 - Driver: C:\Windows\System32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys
O41 - Driver: (blbdrive) . (.Microsoft Corporation - BLB Drive Driver.) - C:\Windows\system32\DRIVERS\blbdrive.sys
O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys
O41 - Driver: C:\Windows\System32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys
O41 - Driver: C:\Windows\System32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\System32\drivers\discache.sys
O41 - Driver: (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\system32\drivers\mssmbios.sys
O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys
O41 - Driver: C:\Windows\System32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys
O41 - Driver: C:\Windows\System32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys
O41 - Driver: C:\Windows\System32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys
O41 - Driver: C:\Windows\System32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) - C:\Windows\System32\DRIVERS\rdbss.sys
O41 - Driver: C:\Windows\System32\DRIVERS\RDPCDD.sys (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys
O41 - Driver: C:\Windows\System32\drivers\RDPENCDD.sys (RDPENCDD) . (.Microsoft Corporation - RDP Encoder Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys
O41 - Driver: C:\Windows\System32\drivers\RdpRefMp.sys (RDPREFMP) . (.Microsoft Corporation - RDP Reflector Driver Miniport.) - C:\Windows\System32\drivers\rdprefmp.sys
O41 - Driver: (Serial) . (.Microsoft Corporation - Pilote de périphérique série.) - C:\Windows\system32\DRIVERS\serial.sys
O41 - Driver: C:\Windows\System32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys
O41 - Driver: (TermDD) . (.Microsoft Corporation - Remote Desktop Server Driver.) - C:\Windows\system32\drivers\termdd.sys
O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys
O41 - Driver: (vwififlt) . (.Microsoft Corporation - Virtual WiFi Filter Driver.) - C:\Windows\System32\DRIVERS\vwififlt.sys
O41 - Driver: C:\Windows\System32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys
O41 - Driver: (WfpLwf) . (.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - C:\Windows\System32\DRIVERS\wfplwf.sys
~ Drivers: 63 Scanned in 00mn 00s
---\\ Logiciels installés (O42)
O42 - Logiciel: Acrobat.com - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {287ECFA4-719A-2143-A09B-D6A12DE54E40}
O42 - Logiciel: Adobe Anchor Service CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {90176341-0A8B-4CCC-A78D-F862228A6B95}
O42 - Logiciel: Adobe Asset Services CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {8BC84ECC-EA87-49C0-93C0-2B5DF62745CD}
O42 - Logiciel: Adobe Bridge CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {68CF6DD2-8BA3-4A70-81D8-7CC5F24C9BA2}
O42 - Logiciel: Adobe Bridge Start Meeting - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {7F3A2319-79CF-4701-95FB-034E99281808}
O42 - Logiciel: Adobe CMaps - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {A2B242BD-FF8D-4840-9DAA-9170EABEC59C}
O42 - Logiciel: Adobe Camera Raw 4.0 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {183B7569-90FB-4C56-9761-0EEB002CAB83}
O42 - Logiciel: Adobe Default Language CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {B9B35331-B7E4-4E5C-BF4C-7BC87856124D}
O42 - Logiciel: Adobe Device Central CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {20B83B31-09C4-4F0E-9774-EF8A12A0A527}
O42 - Logiciel: Adobe Dreamweaver CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe_435a6af7459cb02a9c1138113a26e93
O42 - Logiciel: Adobe Dreamweaver CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {F01D5ED5-D53A-4468-B428-149DC2CB3110}
O42 - Logiciel: Adobe ExtendScript Toolkit 2 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {4DF98D0B-637E-42B4-B9D6-EB7693D2FBF8}
O42 - Logiciel: Adobe Extension Manager CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {2A539CD9-0F75-4875-9A32-E06DD93C4114}
O42 - Logiciel: Adobe Flash Player 11 ActiveX - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player ActiveX
O42 - Logiciel: Adobe Flash Player 11 Plugin - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player Plugin
O42 - Logiciel: Adobe Help Viewer CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {733D84D6-AAFD-4368-A1D0-F2734F6B9082}
O42 - Logiciel: Adobe PDF Library Files - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {D2559B88-CC9D-4B48-81BB-F492BAA9C48C}
O42 - Logiciel: Adobe Photoshop CS5 Portable - (.Adobe.) [HKLM][64Bits] -- {61172A5D-60AA-43BE-958F-90451024E768}_is1
O42 - Logiciel: Adobe SVG Viewer 3.0 - (.Adobe Systems, Inc..) [HKLM][64Bits] -- Adobe SVG Viewer
O42 - Logiciel: Adobe Setup - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {3A12C952-61D5-4C3B-B68B-8CFBE47E22F1}
O42 - Logiciel: Adobe Type Support - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {8E6808E2-613D-4FCD-81A2-6C8FA8E03312}
O42 - Logiciel: Adobe Update Manager CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {D1C59F81-66FD-4E8E-B9F7-F4B2442D5222}
O42 - Logiciel: Adobe Version Cue CS3 Client - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {41C3C974-EC5E-494C-AFE6-E31D92E2E6CB}
O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM][64Bits] -- {5D09C772-ECB3-442B-9CC6-B4341C78FDC2}
O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM][64Bits] -- {2F72F540-1F60-4266-9506-952B21D6640D}
O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM][64Bits] -- {C6579A65-9CAE-4B31-8B6B-3306E0630A66}
O42 - Logiciel: Barn Yarn Collector's Edition - (.WildTangent.) [HKLM][64Bits] -- WTA-0c085747-6621-4f00-b236-c85682c12a23
O42 - Logiciel: Big City Adventures Paris - (.WildTangent.) [HKLM][64Bits] -- WTA-1c408e46-aad7-4724-9f6d-0fd91fb1f7bd
O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM][64Bits] -- {6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}
O42 - Logiciel: Brink of Consciousness: Lonely Hearts Murders - (.WildTangent.) [HKLM][64Bits] -- WTA-7100de58-bc0b-4a0a-bc9b-7805e25aee0d
O42 - Logiciel: Chiavetta Internet - (.Huawei Technologies Co.,Ltd.) [HKLM][64Bits] -- Chiavetta Internet
O42 - Logiciel: Complément Messenger - (.Microsoft Corporation.) [HKLM][64Bits] -- {6E5324C1-84FC-4F76-9A3A-C65E07F80EE6}
O42 - Logiciel: CopyTrans Suite - (...) [HKLM][64Bits] -- CopyTrans Suite
O42 - Logiciel: CopyTrans Suite désinstallation uniquement - (.WindSolutions.) [HKCU][64Bits] -- CopyTrans Suite
O42 - Logiciel: CyberLink DVD Suite - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}
O42 - Logiciel: CyberLink DVD Suite - (.CyberLink Corp..) [HKLM][64Bits] -- {1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}
O42 - Logiciel: CyberLink YouCam - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}
O42 - Logiciel: CyberLink YouCam - (.CyberLink Corp..) [HKLM][64Bits] -- {01FB4998-33C4-4431-85ED-079E3EEFE75D}
O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM][64Bits] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF}
O42 - Logiciel: Dark Lore Mysteries: The Hunt For Truth - (.WildTangent.) [HKLM][64Bits] -- WTA-48c68e87-bcc3-4f60-89b2-062830c1d933
O42 - Logiciel: DiskAid 5.08 - (.DigiDNA.) [HKLM][64Bits] -- DiskAid_is1
O42 - Logiciel: Détection de l'application Winamp - (.Nullsoft, Inc.) [HKCU][64Bits] -- Winamp Detect
O42 - Logiciel: Easter Eggztravaganza 2 - (.WildTangent.) [HKLM][64Bits] -- WTA-379dac36-9f8c-42c1-b27c-d510eb0931a7
O42 - Logiciel: Facebook Video Calling 1.2.0.287 - (.Skype Limited.) [HKLM][64Bits] -- {B92C5909-1D37-4C51-8397-A28BB28E5DC3}
O42 - Logiciel: Farm Mystery - (.WildTangent.) [HKLM][64Bits] -- WTA-cc383743-f1eb-4675-8695-a00b642d1631
O42 - Logiciel: Forbidden Secrets Alien Town - (.WildTangent.) [HKLM][64Bits] -- WTA-e1f3cddc-f7e2-4532-98dc-e5926eea68ef
O42 - Logiciel: FormatFactory 2.60 - (.Free Time.) [HKLM][64Bits] -- FormatFactory
O42 - Logiciel: Gardenscapes 2 Collector's Edition - (.WildTangent.) [HKLM][64Bits] -- WTA-fb2d5320-db37-4a45-9e58-c11a1635a6d2
O42 - Logiciel: Girls With Secrets - (.WildTangent.) [HKLM][64Bits] -- WTA-8b077fb9-3eaa-47d6-ac1c-bc5e75f381e7
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM][64Bits] -- Google Chrome
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
O42 - Logiciel: Google Earth - (.Google.) [HKLM][64Bits] -- {1B30DAC0-DE51-11E2-9A5B-B8AC6F98CCE3}
O42 - Logiciel: HP Advisor - (.Hewlett-Packard.) [HKLM][64Bits] -- {B53E61D7-7C80-40DF-82D2-CF5390D6D20A}
O42 - Logiciel: HP DVD Play 3.7 - (.Hewlett-Packard.) [HKLM][64Bits] -- {45D707E9-F3C4-11D9-A373-0050BAE317E1}
O42 - Logiciel: HP Games - (.WildTangent.) [HKLM][64Bits] -- WildTangent hp Master Uninstall
O42 - Logiciel: HP Quick Launch Buttons - (.Hewlett-Packard.) [HKLM][64Bits] -- {34D2AB40-150D-475D-AE32-BD23FB5EE355}
O42 - Logiciel: HP Setup - (.Hewlett-Packard.) [HKLM][64Bits] -- {F3B912F5-EB57-45AA-B3D1-EB532BCF6EF8}
O42 - Logiciel: HP Smart Web Printing - (.Hewlett-Packard.) [HKLM][64Bits] -- HP Smart Web Printing
O42 - Logiciel: HP Support Assistant - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {EE202411-2C26-49E8-9784-1BC1DBF7DE96}
O42 - Logiciel: HP Update - (.Hewlett-Packard.) [HKLM][64Bits] -- {D46D081B-F60E-467E-A7C4-117B70D76731}
O42 - Logiciel: HP User Guides 0148 - (.Hewlett-Packard.) [HKLM][64Bits] -- {9D3318E1-5A9F-4A95-A7A1-7E045403AE34}
O42 - Logiciel: HP Wireless Assistant - (.Hewlett-Packard.) [HKLM][64Bits] -- {54CC7901-804D-4155-B353-21F0CC9112AB}
O42 - Logiciel: Hewlett-Packard ACLM.NET v1.2.1.1 - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {6F340107-F9AA-47C6-B54C-C3A19F11553F}
O42 - Logiciel: IDT Audio - (.IDT.) [HKLM][64Bits] -- {E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}
O42 - Logiciel: In Search of the Lost Temple - (.WildTangent.) [HKLM][64Bits] -- WTA-3e83593d-9e9b-442a-961c-f6fc481acc95
O42 - Logiciel: Intel(R) Graphics Media Accelerator Driver - (.Intel Corporation.) [HKLM][64Bits] -- HDMI
O42 - Logiciel: Java 7 Update 21 - (.Oracle.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F83217021FF}
O42 - Logiciel: JavaFX 2.1.1 - (.Oracle Corporation.) [HKLM][64Bits] -- {1111706F-666A-4037-7777-211328764D10}
O42 - Logiciel: Jeux WildTangent - (.WildTangent.) [HKLM][64Bits] -- WildTangent wildgames Master Uninstall
O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM][64Bits] -- {1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}
O42 - Logiciel: LSI HDA Modem - (.LSI Corporation.) [HKLM][64Bits] -- LSI Soft Modem
O42 - Logiciel: LabelPrint - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}
O42 - Logiciel: LabelPrint - (.CyberLink Corp..) [HKLM][64Bits] -- {C59C179C-668D-49A9-B6EA-0121CCFC1243}
O42 - Logiciel: LightScribe System Software - (.LightScribe.) [HKLM][64Bits] -- {82EF29B1-9B60-4142-A155-0599216DD053}
O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM][64Bits] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}
O42 - Logiciel: MSVCRT_amd64 - (.Microsoft.) [HKLM][64Bits] -- {D0B44725-3666-492D-BEF6-587A14BD9BD9}
O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM][64Bits] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM][64Bits] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
O42 - Logiciel: Microsoft Antimalware Service FR-FR Language Pack - (.Microsoft Corporation.) [HKLM][64Bits] -- {32E9C1A5-0FDA-4483-987D-DBABF9CC1DD8}
O42 - Logiciel: Microsoft Security Client - (.Microsoft Corporation.) [HKLM][64Bits] -- {D954C6C2-544B-4091-A47F-11E77162883E}
O42 - Logiciel: Microsoft Security Client FR-FR Language Pack - (.Microsoft Corporation.) [HKLM][64Bits] -- {DC911ADF-7B60-40F2-A112-FB1EB6402D07}
O42 - Logiciel: Microsoft Security Essentials - (.Microsoft Corporation.) [HKLM][64Bits] -- Microsoft Security Client
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM][64Bits] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
O42 - Logiciel: Microsoft Works - (.Microsoft Corporation.) [HKLM][64Bits] -- {3B160861-7250-451E-B5EE-8B92BF30A710}
O42 - Logiciel: Microsoft XNA Framework Redistributable 4.0 - (.Microsoft Corporation.) [HKLM][64Bits] -- {2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}
O42 - Logiciel: Motor Town: Soul of the Machine - (.WildTangent.) [HKLM][64Bits] -- WTA-c1963036-a51e-4ab4-a619-a774407035b8
O42 - Logiciel: Murder She Wrote 2 - (.WildTangent.) [HKLM][64Bits] -- WTA-0112bbac-ecaa-43ac-9d08-7bbf06a2c5c1
O42 - Logiciel: Nero 8 - (.Nero AG.) [HKLM][64Bits] -- {5FCCD531-1B38-4A94-924C-127F722F1036}
O42 - Logiciel: OpenAL - (...) [HKLM][64Bits] -- OpenAL
O42 - Logiciel: PC Remote - (.PC Remote.) [HKLM][64Bits] -- {B44AF2D8-9A5D-4653-AF10-F1697C98019F}
O42 - Logiciel: Power2Go - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}
O42 - Logiciel: Power2Go - (.CyberLink Corp..) [HKLM][64Bits] -- {40BF1E83-20EB-11D8-97C5-0009C5020658}
O42 - Logiciel: PowerDirector - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}
O42 - Logiciel: PowerDirector - (.CyberLink Corp..) [HKLM][64Bits] -- {CB099890-1D5F-11D5-9EA9-0050BAE317E1}
O42 - Logiciel: PowerRecover - (.CyberLink Corp..) [HKLM][64Bits] -- {44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5}
O42 - Logiciel: QLBCASL - (.Hewlett-Packard.) [HKLM][64Bits] -- {F1D7AC58-554A-4A58-B784-B61558B1449A}
O42 - Logiciel: QuickTime - (.Apple Inc..) [HKLM][64Bits] -- {B67BAFBA-4C9F-48FA-9496-933E3B255044}
O42 - Logiciel: RealPlayer - (.RealNetworks.) [HKLM][64Bits] -- RealPlayer 15.0
O42 - Logiciel: RealUpgrade 1.1 - (.RealNetworks, Inc..) [HKLM][64Bits] -- {28C2DED6-325B-4CC7-983A-1777C8F7FBAB}
O42 - Logiciel: Realtek 8136 8168 8169 Ethernet Driver - (.Realtek.) [HKLM][64Bits] -- {8833FFB6-5B0C-4764-81AA-06DFEED9A476}
O42 - Logiciel: Realtek USB 2.0 Card Reader - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {96AE7E41-E34E-47D0-AC07-1091A8127911}
O42 - Logiciel: SHOUTcast DSP Plug-in v2 - (...) [HKLM][64Bits] -- SHOUTcast
O42 - Logiciel: Safari - (.Apple Inc..) [HKLM][64Bits] -- {C779648B-410E-4BBA-B75B-5815BCEFE71D}
O42 - Logiciel: Sandra Fleming Chronicles: Crystal Skulls - (.WildTangent.) [HKLM][64Bits] -- WTA-46977124-f5f5-4538-8426-06c1b802c7f3
O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM][64Bits] -- KB931906
O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM][64Bits] -- {0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
O42 - Logiciel: Skype Click to Call - (.Skype Technologies S.A..) [HKLM][64Bits] -- {B6CF2967-C81E-40C0-9815-C05774FEF120}
O42 - Logiciel: Skype(TM) 6.5 - (.Skype Technologies S.A..) [HKLM][64Bits] -- {4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}
O42 - Logiciel: Synaptics Pointing Device Driver - (.Synaptics Incorporated.) [HKLM][64Bits] -- SynTPDeinstKey
O42 - Logiciel: The Lake House: Children of Silence - (.WildTangent.) [HKLM][64Bits] -- WTA-36f84047-acc1-41de-bf5b-fb622c84c5cf
O42 - Logiciel: Update Installer for WildTangent Games App - (.WildTangent.) [HKLM][64Bits] -- {2FA94A64-C84E-49d1-97DD-7BF06C7BBFB2}.WildTangent Games App
O42 - Logiciel: VCRedistSetup - (.Nero AG.) [HKLM][64Bits] -- {3921A67A-5AB1-4E48-9444-C71814CF3027}
O42 - Logiciel: Viber - (.Viber Media Inc.) [HKCU][64Bits] -- Viber
O42 - Logiciel: WebPlayerV2 - (.Kreapixel.) [HKLM][64Bits] -- {7D41BC10-F03E-41EB-8E2D-B7006948332F} =>Adware.SocialSkinz
O42 - Logiciel: WildTangent Games App (HP Games) - (.WildTangent.) [HKLM][64Bits] -- {70B446D1-E03B-4ab0-9B3C-0832142C9AA8}.WildTangent Games App-hp
O42 - Logiciel: WinRAR 4.00 (32 bits) - (.win.rar GmbH.) [HKLM][64Bits] -- WinRAR archiver
O42 - Logiciel: Winamp - (.Nullsoft, Inc.) [HKLM][64Bits] -- Winamp
O42 - Logiciel: Windows Media Player Firefox Plugin - (.Microsoft Corp.) [HKLM][64Bits] -- {69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}
O42 - Logiciel: ffdshow v1.2.4422 [2012-04-09] - (...) [HKLM][64Bits] -- ffdshow_is1
O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM][64Bits] -- {76FF0F03-B707-4332-B5D1-A56C8303514E}
O42 - Logiciel: muvee Reveal - (.muvee Technologies Pte Ltd.) [HKLM][64Bits] -- {293F900D-3743-A8CC-46AD-5AFBFF8E29CF}
O42 - Logiciel: neroxml - (.Nero AG.) [HKLM][64Bits] -- {56C049BE-79E9-4502-BEA7-9754A3E60F9B}
~ Logic: 233 Scanned in 00mn 00s
---\\ HKCU & HKLM Software Keys
[HKCU\Software\AIST]
[HKCU\Software\AUTORUN]
[HKCU\Software\Adobe]
[HKCU\Software\Ahead]
[HKCU\Software\AppDataLow\Software\Adobe]
[HKCU\Software\AppDataLow\Software\JavaSoft]
[HKCU\Software\AppDataLow]
[HKCU\Software\Apple Computer, Inc.]
[HKCU\Software\Apple Inc.]
[HKCU\Software\Audacity]
[HKCU\Software\Auralog]
[HKCU\Software\BearShare] =>PUP.BearShare
[HKCU\Software\Binary Noise]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\CyberLink]
[HKCU\Software\Facebook]
[HKCU\Software\FreeTime]
[HKCU\Software\GNU]
[HKCU\Software\Gabest]
[HKCU\Software\GameHouse]
[HKCU\Software\Google]
[HKCU\Software\Haali]
[HKCU\Software\Hewlett-Packard]
[HKCU\Software\HipSoft]
[HKCU\Software\HookNetwork]
[HKCU\Software\IM Providers]
[HKCU\Software\Intel]
[HKCU\Software\JavaSoft]
[HKCU\Software\Licenses]
[HKCU\Software\LightScribe]
[HKCU\Software\MAGIX AG]
[HKCU\Software\Macromedia]
[HKCU\Software\Magix]
[HKCU\Software\MainConcept (Muvee Consumer)]
[HKCU\Software\MainConcept (Muvee)]
[HKCU\Software\MainConcept (Muvee2)]
[HKCU\Software\MozillaPlugins]
[HKCU\Software\Mozilla]
[HKCU\Software\NeroDigital]
[HKCU\Software\Nero]
[HKCU\Software\Netscape]
[HKCU\Software\ODBC]
[HKCU\Software\PC Remote]
[HKCU\Software\Policies]
[HKCU\Software\RealNetworks]
[HKCU\Software\RegisteredApplications]
[HKCU\Software\Server]
[HKCU\Software\SkypeRS]
[HKCU\Software\Skype]
[HKCU\Software\SweetIM] =>PUP.SweetIM
[HKCU\Software\Synaptics]
[HKCU\Software\SynergeticSoft]
[HKCU\Software\TeamViewer]
[HKCU\Software\Trolltech]
[HKCU\Software\VB and VBA Program Settings]
[HKCU\Software\ValuSoft]
[HKCU\Software\WinRAR SFX]
[HKCU\Software\WinRAR]
[HKCU\Software\Winamp]
[HKCU\Software\Wow6432Node]
[HKCU\Software\ZebHelpProcess Helper]
[HKCU\Software\ej-technologies]
[HKCU\Software\itb]
[HKLM\Software\ATI Technologies]
[HKLM\Software\Agere]
[HKLM\Software\Apple Computer, Inc.]
[HKLM\Software\Apple Inc.]
[HKLM\Software\Audible]
[HKLM\Software\CXT]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\GEAR Software]
[HKLM\Software\HPQ]
[HKLM\Software\HaaliMkx]
[HKLM\Software\Hewlett-Packard]
[HKLM\Software\Huawei technologies]
[HKLM\Software\IDT]
[HKLM\Software\IM Providers]
[HKLM\Software\InstalledOptions]
[HKLM\Software\Intel]
[HKLM\Software\JavaSoft]
[HKLM\Software\LSI]
[HKLM\Software\Macromedia]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\ODBC]
[HKLM\Software\Policies]
[HKLM\Software\RTLSetup]
[HKLM\Software\Realtek Semiconductor Corp.]
[HKLM\Software\Realtek]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\Sonic]
[HKLM\Software\Symantec]
[HKLM\Software\Synaptics]
[HKLM\Software\Windows]
[HKLM\Software\Wow6432Node\Adobe]
[HKLM\Software\Wow6432Node\AdwCleaner]
[HKLM\Software\Wow6432Node\Ahead]
[HKLM\Software\Wow6432Node\Apple Computer, Inc.]
[HKLM\Software\Wow6432Node\Apple Inc.]
[HKLM\Software\Wow6432Node\Audible]
[HKLM\Software\Wow6432Node\Avg]
[HKLM\Software\Wow6432Node\AviSynth]
[HKLM\Software\Wow6432Node\BearShareMediabarTb] =>PUP.BearShare
[HKLM\Software\Wow6432Node\CDDB]
[HKLM\Software\Wow6432Node\Caphyon]
[HKLM\Software\Wow6432Node\Classes]
[HKLM\Software\Wow6432Node\Clients]
[HKLM\Software\Wow6432Node\Cyberlink]
[HKLM\Software\Wow6432Node\GNU]
[HKLM\Software\Wow6432Node\Google]
[HKLM\Software\Wow6432Node\HPQLOG]
[HKLM\Software\Wow6432Node\HPQ]
[HKLM\Software\Wow6432Node\HP]
[HKLM\Software\Wow6432Node\Hewlett-Packard]
[HK
Rapport de ZHPDiag v2013.7.5.7 par Nicolas Coolman, Update du 2013-07-05
Run by usqger at 2013-07-05 22:50:51
WebSite: https://nicolascoolman.webs.com/
State : Version à jour.
WhiteList : Disable
High Elevated Privileges : OK
UAC : Deactivate by program
---\\ Web Browser
MSIE: Internet Explorer v10.0.9200.16618
GCIE: Google Chrome v27.0.1453.116 (Defaut)
OBIE: Safari v5.34.57.2
---\\ Windows Product Information
~ Langage: Français
Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)
Windows Server License Manager Script : OK
~ Windows(R) 7, OEM_SLP channel
System Locked Preinstallation (OEM_SLP) : OK
Windows ID Activation : OK
~ Windows Partial Key : 3Q6C9
Windows License : OK
~ Windows Remaining Initializations Number : 2
Software Protection Service (Protection logicielle) : OK
Windows Automatic Updates : OK
Windows Activation Technologies : OK
---\\ System Protection
Microsoft Security Client FR-FR Language Pack v2.1.1116.0
Windows Defender W7
---\\ System Optimizer
---\\ Peer To Peer (P2P)
---\\ Software Update
Adobe Flash Player 11 Plugin
Java 7 Update 21
---\\ System Information
~ Processor: Intel64 Family 6 Model 23 Stepping 10, GenuineIntel
~ Operating System: 64 Bits
Boot mode: Normal (Normal boot)
Total RAM: 3998 MB (53% free)
System Restore: Activé (Enable)
System drive C: has 141 GB (49%) free of 285 GB
---\\ Logged in mode
~ Computer Name: USQGER-PC
~ User Name: usqger
~ All Users Names: usqger, HomeGroupUser$, Administrateur,
~ Unselected Option: O45,O61,O62,O65,O66,O80,O82,O89
Logged in as Administrator
---\\ Environnement Variables
~ System Unit : C:\
~ %AppData% : C:\Users\usqger\AppData\Roaming\
~ %Desktop% : C:\Users\usqger\Desktop\
~ %Favorites% : C:\Users\usqger\Favorites\
~ %LocalAppData% : C:\Users\usqger\AppData\Local\
~ %StartMenu% : C:\Users\usqger\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\
---\\ DOS/Devices
C:\ Hard drive, Flash drive, Thumb drive (Free 141 Go of 285 Go)
D:\ Hard drive, Flash drive, Thumb drive (Free 2 Go of 13 Go)
E:\ CD-ROM drive (Not Inserted)
---\\ Security Center & Tools Informations
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK
~ Security Center: 32 Scanned in 00mn 00s
---\\ Recherche particulière de fichiers génériques
[MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorateur Windows.) (.2011-02-25 - 07:19:30.) -- C:\Windows\Explorer.exe [2871808]
[MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de démarrage de Windows.) (.2009-07-14 - 02:39:52.) -- C:\Windows\System32\Wininit.exe [129024]
[MD5.12716D987D475B051F35895659159705] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.2013-05-17 - 01:59:03.) -- C:\Windows\System32\wininet.dll [2241024]
[MD5.1151B1BAA6F350B1DB6598E0FEA7C457] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.2010-11-20 - 14:25:30.) -- C:\Windows\System32\Winlogon.exe [390656]
[MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Bibliothèque de licences.) (.2010-11-20 - 14:27:26.) -- C:\Windows\System32\sppcomapi.dll [232448]
[MD5.1C7857B62DE5994A75B054A9FD4C3825] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.2011-12-28 - 04:59:24.) -- C:\Windows\system32\Drivers\AFD.sys [498688]
[MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.2009-07-14 - 02:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128]
[MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.2009-07-14 - 00:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160]
[MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.2010-11-20 - 10:19:21.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456]
[MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.2010-11-20 - 10:26:32.) -- C:\Windows\system32\Drivers\DfsC.sys [102400]
[MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.2010-11-20 - 11:43:43.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368]
[MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) (.2009-07-14 - 00:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472]
[MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.2009-07-14 - 01:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224]
[MD5.A5D9106A73DC88564C825D317CAC68AC] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.2011-04-27 - 03:40:40.) -- C:\Windows\system32\Drivers\MRxSmb.sys [158208]
[MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) (.2010-11-20 - 10:23:20.) -- C:\Windows\system32\Drivers\netBT.sys [261632]
[MD5.B98F8C6E31CD07B2E6F71F7F648E38C0] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.2013-04-12 - 15:45:08.) -- C:\Windows\system32\Drivers\ntfs.sys [1656680]
[MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parallèle.) (.2009-07-14 - 01:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280]
[MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.2010-11-20 - 11:52:35.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [129536]
[MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.2009-07-14 - 01:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184]
[MD5.DDAD5A7AB24D8B65F8D724F5C20FD806] - (.Microsoft Corporation - TDI Translation Driver.) (.2010-11-20 - 10:21:56.) -- C:\Windows\system32\Drivers\tdx.sys [119296]
[MD5.0D08D2F3B3FF84E433346669B5E0F639] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.2010-11-20 - 14:34:02.) -- C:\Windows\system32\Drivers\volsnap.sys [295808]
~ Generic Processes: Scanned in 00mn 00s
---\\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 2/12
~ Mes musiques (My Musics) : 1/681
~ Mes Videos (My Videos) : 21/25
~ Mes Favoris (My Favorites) : 1/21
~ Mes Documents (My Documents) : 1/677
~ Mon Bureau (My Desktop) : 27/5949
~ Menu demarrer (Programs) : 1/50
~ Hidden Files: Scanned in 00mn 07s
---\\ Processus lancés
[MD5.9157189DC07511ECBBE1D2615D8A2FED] - (.Hewlett-Packard - HP Advisor.) -- C:\Program Files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe [1668664] [PID.2144]
[MD5.A605FA7299047381701A09B96C677721] - (.PC Remote - PC Remote Server.) -- C:\Program Files (x86)\PC Remote\PC Remote\PCRemote.exe [884376] [PID.3168]
[MD5.2FB81DD6DAAD0C123D5C4D00A2BF8094] - (.Pas de propriétaire - Viber.) -- C:\Users\usqger\AppData\Local\Viber\Viber.exe [906240] [PID.3252]
[MD5.32C26797AB646074A2BB562F9D10ADB5] - (.Microsoft Corporation - Microsoft Office OneNote Quick Launcher.) -- C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.exe [97680] [PID.3364]
[MD5.A2814FED5A47B00BBC99AC58F93B9337] - (.CyberLink Corp. - HP QuickPlay Resident Program.) -- C:\Program Files (x86)\HP\QuickPlay\QPService.exe [468264] [PID.3672]
[MD5.0771A5C3B78967F9F83C1C429334AD2A] - (. Hewlett-Packard Development Company, L.P. - Quick Launch Buttons.) -- C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe [320056] [PID.3700]
[MD5.5516C26A6AF8EB4E2CAB48EC98A74398] - (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe [54576] [PID.3720]
[MD5.8E53B67FA3816E854B07C5DC66E10730] - (.RealNetworks, Inc. - RealNetworks Scheduler.) -- C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe [296056] [PID.3784]
[MD5.D63797E8E7781EE1500A810CB6194FA6] - (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816] [PID.3892]
[MD5.3B01B800A43CF3FAF5AAA78315BC2148] - (.Nullsoft, Inc. - Winamp Agent.) -- C:\Program Files (x86)\Winamp\winampa.exe [74752] [PID.3988]
[MD5.A9F9D081518AC03A51C1195986076F42] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392] [PID.4016]
[MD5.0DE3C7622EC33126579B1742260F08C2] - (.Pas de propriétaire - HpqToaster Module.) -- C:\Program Files (x86)\Hewlett-Packard\Shared\hpqToaster.exe [632888] [PID.628]
[MD5.5521928AA79079565B7CB8FCE6806131] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [825808] [PID.2992]
[MD5.7E436B07C60B3A1D992648526732DB4F] - (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe [19604072] [PID.3348]
[MD5.E5A7EA8C5C063943231A071789956893] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [7667712] [PID.932]
[MD5.4FE5C6D40664AE07BE5105874357D2ED] - (.Apple Inc. - MobileDeviceService.) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [57008] [PID.1928]
[MD5.83D8BE94E1CBCBE2EA8372DB1A95A159] - (.Hewlett-Packard Company - LightScribe Service.) -- C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [73728] [PID.1356]
[MD5.C5052FB77AA42ED440F9F6B4E37145A9] - (.Nero AG - Nero BackItUp.) -- C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBService.exe [869672] [PID.1988]
[MD5.498EB62A160674E793FA40FD65390625] - (.Pas de propriétaire - RichVideo Module.) -- C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [247152] [PID.2056]
[MD5.09C87F376507122A5FE1CBE06E015512] - (.Google Inc. - Google Crash Handler.) -- C:\Program Files (x86)\Google\Update\1.3.21.149\GoogleCrashHandler.exe [239496] [PID.2284]
[MD5.9B7EDD3FE7C211C36E921D34D18A3A0A] - (.Hewlett-Packard Company - HP Software Framework WMI Service.) -- C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe [1001376] [PID.3128]
[MD5.F9A79C5B27037821112C50A9C8FB367A] - (.Hewlett-Packard Development Company, L.P. - Com for QLB application.) -- C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [228408] [PID.3872]
~ Processes Running: Scanned in 00mn 01s
---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
C:\Users\usqger\AppData\Local\Google\Chrome\User Data\Default\Preferences
G2 - GCE: Preference [User Data\Default] [ahfgeienlihckogmohjhadlkjgocpleb] Store v.0.2 (Activé)
G2 - GCE: Preference [User Data\Default] [eemcgdkfndhakfknompkggombfjjjeno] Bookmark Manager v.0.1 (Activé)
G2 - GCE: Preference [User Data\Default] [ennkphjdgehloodpbhlhldgbnhmacadg] Settings v.0.2 (Activé)
G2 - GCE: Preference [User Data\Default] [jfmjfhklogoienhpfnppmbcbjfjnkonk] RealPlayer HTML5Video Downloader Extension v.1.5 (Désactivé)
G2 - GCE: Preference [User Data\Default] [lifbcibllhkdhoafpjfnlhfpfgnpldfl] Skype Click to Call v.5.9.0.9216 (Désactivé)
G2 - GCE: Preference [User Data\Default] [mfehgcgbbipciphmccgaenjidiccnmng] Cloud Print v.0.1 (Activé)
G2 - GCE: Preference [User Data\Default] [mgndgikekgjfcpckkfioiadnlibdjbkf] Chrome v.0.1 (Activé)
~ Google Browser: 7 Scanned in 00mn 11s
---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
C:\Users\usqger\AppData\Roaming\Mozilla\Firefox\Profiles\extensions\prefs.js (.not file.)
C:\Users\usqger\AppData\Roaming\Mozilla\Firefox\Profiles\[opt]rs0\prefs.js
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll
P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 5.1.20125.0.) -- c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll
P2 - FPN: [HKCU] [@Skype Limited.com/Facebook Video Calling Plugin] - (.Skype Limited - Facebook Video Calling Plugin.) -- C:\Users\usqger\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll
~ Firefox Browser: 3 Scanned in 00mn 00s
---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?gws_rd=ssl
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.microsoft.com/fr-fr/
R0 - HKCU\SOFTWARE\Classes\Software\Microsoft\Internet Explorer\Main,Start Page = http://ww25.allssearch.com/ =>Adware.SocialSkinz
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = https://www.microsoft.com/fr-fr/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.microsoft.com/fr-fr/
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm
R3 - URLSearchHook: Microsoft Url Search Hook [64Bits] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (10.00.9200.16521 (win8_gdr_soc_ie.130216-2100)) -- C:\Windows\SysWOW64\ieframe.dll
R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1
R4 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1
~ IE Browser: 16 Scanned in 00mn 00s
---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Proxy management: Scanned in 00mn 00s
---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
~ Keys: Scanned in 00mn 00s
---\\ Redirection du fichier Hosts (O1)
~ Le fichier hosts est sain (The hosts file is clean).
~ Hosts File: Scanned in 00mn 00s
~ Nombre de lignes (Lines number): 0
---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: HP Print Enhancer [64Bits] - {0347C33E-8762-4905-BF09-768834316C61} . (.Hewlett-Packard Co. - HP Smart Web Printing add-on for Internet E.) -- C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer [64Bits] - {3049C3E9-B461-4BC5-8870-4C09146192CA} . (.RealPlayer - RealPlayer Download and Record Plugin.) -- C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
O2 - BHO: Groove GFS Browser Helper [64Bits] - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} . (.Microsoft Corporation - GrooveShellExtensions Module.) -- C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In SSV Helper [64Bits] - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live ID [64Bits] - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corp. - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Messenger Companion Helper [64Bits] - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} . (.Microsoft Corporation - Windows Live Messenger Companion Core.) -- C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
O2 - BHO: SkypeIEPluginBHO [64Bits] - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} . (.Skype Technologies S.A. - Skype Click to Call for Internet Explorer.) -- C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper [64Bits] - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O2 - BHO: HP Network Check Helper [64Bits] - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} . (.Hewlett-Packard - HP Network Check IE Plug-in.) -- C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll
O2 - BHO: HP Smart BHO Class [64Bits] - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} . (.Hewlett-Packard Co. - HP Smart Web Printing add-on for Internet E.) -- C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
~ BHO: 10 Scanned in 00mn 00s
---\\ Applications démarrées par registre & par dossier (O4)
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files (x86)\Synaptics\SynTP\SynTPEnh.exe (.not file.)
O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [SysTrayApp] . (.IDT, Inc. - IDT PC Audio.) -- C:\Program Files\IDT\WDM\sttray64.exe
O4 - HKLM\..\Run: [MSC] . (.Microsoft Corporation - Microsoft Security Client User Interface.) -- c:\Program Files\Microsoft Security Client\msseces.exe
O4 - HKCU\..\Run: [HPADVISOR] . (.Hewlett-Packard - HP Advisor.) -- C:\Program Files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe
O4 - HKCU\..\Run: [Facebook Update] . (.Facebook Inc. - Programme d'installation de Facebook.) -- C:\Users\usqger\AppData\Local\Facebook\Update\FacebookUpdate.exe
O4 - HKCU\..\Run: [MobileDocuments] C:\Program Files (x86)\Common Files\Apple\Internet Services\ubd.exe (.not file.)
O4 - HKCU\..\Run: [Akamai NetSession Interface] C:\Users\usqger\AppData\Local\Akamai\netsession_win.exe (.not file.)
O4 - HKCU\..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] . (.Nero AG - Nero Home.) -- C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexStoreSvr.exe
O4 - HKCU\..\Run: [PC Remote Server] . (.PC Remote - PC Remote Server.) -- C:\Program Files (x86)\PC Remote\PC Remote\PCRemote.exe
O4 - HKCU\..\Run: [Viber] . (.Pas de propriétaire - Viber.) -- C:\Users\usqger\AppData\Local\Viber\Viber.exe
O4 - HKLM\..\Wow6432Node\Run: [QPService] . (.CyberLink Corp. - HP QuickPlay Resident Program.) -- C:\Program Files (x86)\HP\QuickPlay\QPService.exe
O4 - HKLM\..\Wow6432Node\Run: [UCam_Menu] . (.CyberLink Corp. - MUI StartMenu Application.) -- C:\Program Files (x86)\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe
O4 - HKLM\..\Wow6432Node\Run: [QlbCtrl.exe] . (. Hewlett-Packard Development Company, L.P. - Quick Launch Buttons.) -- C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe
O4 - HKLM\..\Wow6432Node\Run: [UpdatePRCShortCut] . (.CyberLink Corp. - MUI StartMenu Application.) -- C:\Program Files (x86)\Hewlett-Packard\Recovery\MUITransfer\MUIStartMenu.exe
O4 - HKLM\..\Wow6432Node\Run: [HP Software Update] . (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Wow6432Node\Run: [WirelessAssistant] . (.Hewlett-Packard - HP Wireless Assistant Main Program.) -- C:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
O4 - HKLM\..\Wow6432Node\Run: [GrooveMonitor] . (.Microsoft Corporation - GrooveMonitor Utility.) -- C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe
O4 - HKLM\..\Wow6432Node\Run: [AppleSyncNotifier] . (.Apple Inc. - AppleSyncNotifier.) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe
O4 - HKLM\..\Wow6432Node\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
O4 - HKLM\..\Wow6432Node\Run: [TkBellExe] . (.RealNetworks, Inc. - RealNetworks Scheduler.) -- c:\program files (x86)\real\realplayer\Update\realsched.exe
O4 - HKLM\..\Wow6432Node\Run: [NBKeyScan] . (.Nero AG - Nero BackItUp.) -- C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBKeyScan.exe
O4 - HKLM\..\Wow6432Node\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
O4 - HKLM\..\Wow6432Node\Run: [WinampAgent] . (.Nullsoft, Inc. - Winamp Agent.) -- C:\Program Files (x86)\Winamp\winampa.exe
O4 - HKLM\..\Wow6432Node\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe
O4 - HKLM\..\Wow6432Node\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files (x86)\QuickTime\QTTask.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe
O4 - HKUS\S-1-5-21-3156846314-1895714274-2719764697-1000\..\Run: [HPADVISOR] . (.Hewlett-Packard - HP Advisor.) -- C:\Program Files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe
O4 - HKUS\S-1-5-21-3156846314-1895714274-2719764697-1000\..\Run: [Facebook Update] . (.Facebook Inc. - Programme d'installation de Facebook.) -- C:\Users\usqger\AppData\Local\Facebook\Update\FacebookUpdate.exe
O4 - HKUS\S-1-5-21-3156846314-1895714274-2719764697-1000\..\Run: [MobileDocuments] C:\Program Files (x86)\Common Files\Apple\Internet Services\ubd.exe (.not file.)
O4 - HKUS\S-1-5-21-3156846314-1895714274-2719764697-1000\..\Run: [Akamai NetSession Interface] C:\Users\usqger\AppData\Local\Akamai\netsession_win.exe (.not file.)
O4 - HKUS\S-1-5-21-3156846314-1895714274-2719764697-1000\..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] . (.Nero AG - Nero Home.) -- C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexStoreSvr.exe
O4 - HKUS\S-1-5-21-3156846314-1895714274-2719764697-1000\..\Run: [PC Remote Server] . (.PC Remote - PC Remote Server.) -- C:\Program Files (x86)\PC Remote\PC Remote\PCRemote.exe
O4 - HKUS\S-1-5-21-3156846314-1895714274-2719764697-1000\..\Run: [Viber] . (.Pas de propriétaire - Viber.) -- C:\Users\usqger\AppData\Local\Viber\Viber.exe
~ Application: Scanned in 00mn 00s
---\\ Autres liens utilisateurs (O4)
O4 - GS\TaskBar: Adobe Photoshop CS5.lnk . (.Adobe Systems, Incorporated - Adobe Photoshop CS5.) -- C:\Program Files (x86)\Adobe\Adobe Photoshop CS5 Portable\Adobe Photoshop CS5.exe
O4 - GS\TaskBar: CopyTrans Manager (Gratuit).lnk . (.WindSolutions - CopyTrans Manager.) -- C:\Users\usqger\AppData\Roaming\WindSolutions\CopyTransControlCenter\Applications\CopyTransManager.exe
O4 - GS\TaskBar: DiskAid.lnk . (...) -- C:\Program Files (x86)\DigiDNA\DiskAid\DiskAid.exe
O4 - GS\TaskBar: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O4 - GS\TaskBar: HPAdvisor.lnk . (.Hewlett-Packard - HP Advisor.) -- C:\Program Files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe
O4 - GS\TaskBar: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - GS\TaskBar: Power2Go.lnk . (.CyberLink Corp. - Power2Go.) -- C:\Program Files (x86)\CyberLink\Power2Go\Power2Go.exe
O4 - GS\TaskBar: Safari.lnk . (...) -- C:\Windows\Installer\{C779648B-410E-4BBA-B75B-5815BCEFE71D}\SafariIco.exe
O4 - GS\TaskBar: Windows Explorer.lnk . (.Microsoft Corporation - Explorateur Windows.) -- C:\Windows\explorer.exe
O4 - GS\TaskBar: Windows Live Movie Maker.lnk . (.Microsoft Corporation - Windows Live Movie Maker.) -- C:\Program Files (x86)\Windows Live\Photo Gallery\MovieMaker.exe
O4 - GS\TaskBar: Windows Media Player.lnk . (.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O4 - GS\Programs: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - GS\Programs: Viber.lnk . (...) -- C:\Users\usqger\AppData\Local\Viber\Viber.exe
O4 - GS\QuickLaunch: Apple Safari.lnk . (...) -- C:\Windows\Installer\{C779648B-410E-4BBA-B75B-5815BCEFE71D}\SafariIco.exe
O4 - GS\QuickLaunch: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - GS\QuickLaunch: Microsoft Office Outlook.lnk . (.Microsoft Corporation - Microsoft Office Outlook.) -- C:\Program Files (x86)\Microsoft Office\Office12\OUTLOOK.exe
O4 - GS\QuickLaunch: Nero Home.lnk . (.Nero AG - Nero Home.) -- C:\Program Files (x86)\Nero\Nero8\Nero Home\NeroHome.exe
O4 - GS\QuickLaunch: Nero StartSmart.lnk . (.Nero AG - Nero StartSmart 8 Application.) -- C:\Program Files (x86)\Nero\Nero8\Nero StartSmart\NeroStartSmart.exe
O4 - GS\QuickLaunch: Viber.lnk . (...) -- C:\Users\usqger\AppData\Local\Viber\Viber.exe
O4 - GS\QuickLaunch: WildTangent Games App - hp.lnk . (.WildTangent - WildTangent Games App.) -- C:\Program Files (x86)\WildTangent Games\App\GameConsole-wt.exe
O4 - GS\Accessories: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - GS\Accessories: Private Character Editor.lnk . (.Microsoft Corporation - Éditeur de caractères privés.) -- C:\Windows\system32\eudcedit.exe
O4 - GS\SendTo: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) -- C:\Windows\system32\WFS.exe
O4 - GS\SendTo: Format Factory.lnk . (.Free Time - FormatFactory.) -- C:\Program Files (x86)\FreeTime\FormatFactory\FormatFactory.exe
O4 - GS\SendTo: Skype.lnk . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe
O4 - GS\Desktop: Freecell - Raccourci.lnk - Clé orpheline
O4 - GS\Desktop: Solitaire - Raccourci.lnk - Clé orpheline
O4 - GS\Desktop: Spider Solitaire - Raccourci.lnk - Clé orpheline
~ Global Startup: Scanned in 00mn 02s
---\\ Invisibilité de l'icône d'options IE dans le panneau de Configuration (O5)
O5 - control.ini: [HKLM\..\Control Panel] inetcpl.cpl=no
~ IE Control Panel: 1 Scanned in 00mn 00s
---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll
O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll
O10 - WLSP:\000000000007\Winsock LSP File . (.Apple Inc. - Bonjour Namespace Provider.) -- C:\Program Files (x86)\Bonjour\mdnsNSP.dll
O10 - WLSP:\000000000008\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll
O10 - WLSP:\000000000009\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll
~ Winsock: 9 Scanned in 00mn 00s
---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{4A9D51E7-123C-482E-9953-08269987FF92}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{AB346EA4-9522-464B-BCE8-F8D148F217B1}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{4A9D51E7-123C-482E-9953-08269987FF92}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{AB346EA4-9522-464B-BCE8-F8D148F217B1}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{4A9D51E7-123C-482E-9953-08269987FF92}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{AB346EA4-9522-464B-BCE8-F8D148F217B1}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
~ Domain: Scanned in 00mn 00s
---\\ Protocole additionnel (O18)
O18 - Handler: wlpg [64Bits] - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (...) --
O18 - Filter: text/xml [64Bits] - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.dll
~ Protocole Additionnel: Scanned in 00mn 00s
---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\Windows\System32\igfxdev.dll
~ Winlogon: Scanned in 00mn 00s
---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
~ SSODL: 1 Scanned in 00mn 00s
---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: Andrea ST Filters Service (AESTFilters) . (.Andrea Electronics Corporation - Andrea filters APO access service (64-bit).) - C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\AESTSr64.exe
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) . (.LSI Corporation - LSI Soft Modem Call Progress Service.) - C:\Program Files\LSI SoftModem\agr64svc.exe
O23 - Service: Apple Mobile Device (Apple Mobile Device) . (.Apple Inc. - MobileDeviceService.) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: HP Support Assistant Service (HP Support Assistant Service) . (.Hewlett-Packard Company - HP Support Assistant Service.) - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
O23 - Service: LightScribeService Direct Disc Labeling (LightScribeService) . (.Hewlett-Packard Company - LightScribe Service.) - C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Nero BackItUp Scheduler 3 (Nero BackItUp Scheduler 3) . (.Nero AG - Nero BackItUp.) - C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) . (.Pas de propriétaire - RichVideo Module.) - C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: Audio Service (STacSV) . (.IDT, Inc. - IDT PC Audio.) - C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\STacSV64.exe
~ Services: 11 Scanned in 00mn 04s
---\\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(...) - (.not file.)
~ Desktop Component: 4 Scanned in 00mn 00s
---\\ BootExecute (O34)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
~ BEX: 1 Scanned in 00mn 00s
---\\ Tâches planifiées en automatique (O39)
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\Adobe Flash Player Updater.job [1002]
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3156846314-1895714274-2719764697-1000Core.job [1078]
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3156846314-1895714274-2719764697-1000UA.job [1100]
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job [1064]
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job [1068]
[MD5.9915504F602D277EE47FD843A677FD15] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [256904]
[MD5.9EB925EDC8CF1C3D06E50E9348B54A0A] [APT] [FacebookUpdateTaskUserS-1-5-21-3156846314-1895714274-2719764697-1000Core] (.Facebook Inc..) -- C:\Users\usqger\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096]
[MD5.9EB925EDC8CF1C3D06E50E9348B54A0A] [APT] [FacebookUpdateTaskUserS-1-5-21-3156846314-1895714274-2719764697-1000UA] (.Facebook Inc..) -- C:\Users\usqger\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096]
[MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [116648]
[MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [116648]
[MD5.D412AC27FE3C9F8BC19741DAC0E0329D] [APT] [RealUpgradeLogonTaskS-1-5-21-3156846314-1895714274-2719764697-1000] (.RealNetworks, Inc..) -- C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [178800]
[MD5.D412AC27FE3C9F8BC19741DAC0E0329D] [APT] [RealUpgradeScheduledTaskS-1-5-21-3156846314-1895714274-2719764697-1000] (.RealNetworks, Inc..) -- C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [178800]
[MD5.00000000000000000000000000000000] [APT] [Your File Updater] (...) -- C:\Program Files (x86)\YourFileDownloader\YourFileUpdater.exe (.not file.) [0] =>PUP.YourFileDownloader
[MD5.5521928AA79079565B7CB8FCE6806131] [APT] [{9855A1E1-5153-4EDA-9CA4-5CF7B3890933}] (.Google Inc..) -- c:\program files (x86)\google\chrome\application\chrome.exe [825808]
[MD5.00000000000000000000000000000000] [APT] [{A1001EE2-35FD-473E-9870-18856DFAC401}] (...) -- c:\users\usqger\appdata\local\google\chrome\application\chrome.exe (.not file.) [0]
[MD5.5521928AA79079565B7CB8FCE6806131] [APT] [{A1687005-6750-4066-9BD2-5A13A629FE1C}] (.Google Inc..) -- c:\program files (x86)\google\chrome\application\chrome.exe [825808]
[MD5.00000000000000000000000000000000] [APT] [{E16E0529-0AEE-41B8-A96D-717ACEE787B7}] (...) -- C:\Users\usqger\Desktop\Serah v1.0\serah_setup.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{E848C6FF-7152-497D-B0D8-30DB6BEF6EE7}] (...) -- C:\Users\usqger\Desktop\AV Voice Changer Diamond Edition 5.0 Full\VCS_Diamond50.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{EE0547DF-98FE-46C6-83FF-BFFDF2366EA0}] (...) -- C:\Users\usqger\Desktop\PhotoshopCS3Portable\PhotoshopSetup.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{FA83D1CF-6924-410B-8924-BA13F2047930}] (...) -- C:\Users\usqger\Downloads\PhotoshopCS3Portable\PhotoshopPortable.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{FC7F2588-C993-4437-BAE4-C50586BC561F}] (...) -- C:\Users\usqger\Desktop\PhotoshopCS3Portable\PhotoshopPortable.exe (.not file.) [0]
[MD5.34EBD4FF6A24D86BB4716D6AFCC1A89B] [APT] [AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [561984]
[MD5.0AE2C218A9AB6C16D79160CCE55B35FC] [APT] [HP Support Assistant Quick Start] (.Hewlett-Packard Company.) -- C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [525728]
[MD5.0AE2C218A9AB6C16D79160CCE55B35FC] [APT] [PC Health Analysis] (.Hewlett-Packard Company.) -- C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [525728]
[MD5.0AE2C218A9AB6C16D79160CCE55B35FC] [APT] [PC Health Analysis Install] (.Hewlett-Packard Company.) -- C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [525728]
[MD5.28E1A34ED1B810BC2F4734F2DBFF2A76] [APT] [Update Check] (.Hewlett-Packard Company.) -- C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe [615736]
~ Scheduled Task: 27 Scanned in 00mn 05s
---\\ Composants installés (ActiveSetup Installed Components) (O40)
O40 - ASIC: Microsoft Windows Media Player [64Bits] - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll
O40 - ASIC: Microsoft Windows Media Player 12.0 [64Bits] - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\SysWOW64\wmpdxm.dll
O40 - ASIC: Themes Setup [64Bits] - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\Windows\System32\themeui.dll
O40 - ASIC: Internet Explorer [64Bits] - {2D46B6DC-2207-486B-B523-A557E6D54B47} . (.Microsoft Corporation - Interpréteur de commandes Windows.) -- C:\Windows\system32\cmd.exe
O40 - ASIC: Microsoft Windows [64Bits] - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Windows Mail.) -- C:\Program Files (x86)\Windows Mail\WinMail.exe
O40 - ASIC: Browsing Enhancements [64Bits] - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\Windows\System32\msieftp.dll
O40 - ASIC: Microsoft Windows Media Player [64Bits] - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll
O40 - ASIC: Windows Desktop Update [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll
O40 - ASIC: Web Platform Customizations [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe
O40 - ASIC: (no name) [64Bits] - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\system32\mscories.dll
~ Active Setup: 10 Scanned in 00mn 00s
---\\ Pilotes lancés au démarrage (O41)
O41 - Driver: C:\Windows\System32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys
O41 - Driver: (blbdrive) . (.Microsoft Corporation - BLB Drive Driver.) - C:\Windows\system32\DRIVERS\blbdrive.sys
O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys
O41 - Driver: C:\Windows\System32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys
O41 - Driver: C:\Windows\System32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\System32\drivers\discache.sys
O41 - Driver: (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\system32\drivers\mssmbios.sys
O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys
O41 - Driver: C:\Windows\System32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys
O41 - Driver: C:\Windows\System32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys
O41 - Driver: C:\Windows\System32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys
O41 - Driver: C:\Windows\System32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) - C:\Windows\System32\DRIVERS\rdbss.sys
O41 - Driver: C:\Windows\System32\DRIVERS\RDPCDD.sys (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys
O41 - Driver: C:\Windows\System32\drivers\RDPENCDD.sys (RDPENCDD) . (.Microsoft Corporation - RDP Encoder Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys
O41 - Driver: C:\Windows\System32\drivers\RdpRefMp.sys (RDPREFMP) . (.Microsoft Corporation - RDP Reflector Driver Miniport.) - C:\Windows\System32\drivers\rdprefmp.sys
O41 - Driver: (Serial) . (.Microsoft Corporation - Pilote de périphérique série.) - C:\Windows\system32\DRIVERS\serial.sys
O41 - Driver: C:\Windows\System32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys
O41 - Driver: (TermDD) . (.Microsoft Corporation - Remote Desktop Server Driver.) - C:\Windows\system32\drivers\termdd.sys
O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys
O41 - Driver: (vwififlt) . (.Microsoft Corporation - Virtual WiFi Filter Driver.) - C:\Windows\System32\DRIVERS\vwififlt.sys
O41 - Driver: C:\Windows\System32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys
O41 - Driver: (WfpLwf) . (.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - C:\Windows\System32\DRIVERS\wfplwf.sys
~ Drivers: 63 Scanned in 00mn 00s
---\\ Logiciels installés (O42)
O42 - Logiciel: Acrobat.com - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {287ECFA4-719A-2143-A09B-D6A12DE54E40}
O42 - Logiciel: Adobe Anchor Service CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {90176341-0A8B-4CCC-A78D-F862228A6B95}
O42 - Logiciel: Adobe Asset Services CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {8BC84ECC-EA87-49C0-93C0-2B5DF62745CD}
O42 - Logiciel: Adobe Bridge CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {68CF6DD2-8BA3-4A70-81D8-7CC5F24C9BA2}
O42 - Logiciel: Adobe Bridge Start Meeting - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {7F3A2319-79CF-4701-95FB-034E99281808}
O42 - Logiciel: Adobe CMaps - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {A2B242BD-FF8D-4840-9DAA-9170EABEC59C}
O42 - Logiciel: Adobe Camera Raw 4.0 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {183B7569-90FB-4C56-9761-0EEB002CAB83}
O42 - Logiciel: Adobe Default Language CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {B9B35331-B7E4-4E5C-BF4C-7BC87856124D}
O42 - Logiciel: Adobe Device Central CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {20B83B31-09C4-4F0E-9774-EF8A12A0A527}
O42 - Logiciel: Adobe Dreamweaver CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe_435a6af7459cb02a9c1138113a26e93
O42 - Logiciel: Adobe Dreamweaver CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {F01D5ED5-D53A-4468-B428-149DC2CB3110}
O42 - Logiciel: Adobe ExtendScript Toolkit 2 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {4DF98D0B-637E-42B4-B9D6-EB7693D2FBF8}
O42 - Logiciel: Adobe Extension Manager CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {2A539CD9-0F75-4875-9A32-E06DD93C4114}
O42 - Logiciel: Adobe Flash Player 11 ActiveX - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player ActiveX
O42 - Logiciel: Adobe Flash Player 11 Plugin - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player Plugin
O42 - Logiciel: Adobe Help Viewer CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {733D84D6-AAFD-4368-A1D0-F2734F6B9082}
O42 - Logiciel: Adobe PDF Library Files - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {D2559B88-CC9D-4B48-81BB-F492BAA9C48C}
O42 - Logiciel: Adobe Photoshop CS5 Portable - (.Adobe.) [HKLM][64Bits] -- {61172A5D-60AA-43BE-958F-90451024E768}_is1
O42 - Logiciel: Adobe SVG Viewer 3.0 - (.Adobe Systems, Inc..) [HKLM][64Bits] -- Adobe SVG Viewer
O42 - Logiciel: Adobe Setup - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {3A12C952-61D5-4C3B-B68B-8CFBE47E22F1}
O42 - Logiciel: Adobe Type Support - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {8E6808E2-613D-4FCD-81A2-6C8FA8E03312}
O42 - Logiciel: Adobe Update Manager CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {D1C59F81-66FD-4E8E-B9F7-F4B2442D5222}
O42 - Logiciel: Adobe Version Cue CS3 Client - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {41C3C974-EC5E-494C-AFE6-E31D92E2E6CB}
O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM][64Bits] -- {5D09C772-ECB3-442B-9CC6-B4341C78FDC2}
O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM][64Bits] -- {2F72F540-1F60-4266-9506-952B21D6640D}
O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM][64Bits] -- {C6579A65-9CAE-4B31-8B6B-3306E0630A66}
O42 - Logiciel: Barn Yarn Collector's Edition - (.WildTangent.) [HKLM][64Bits] -- WTA-0c085747-6621-4f00-b236-c85682c12a23
O42 - Logiciel: Big City Adventures Paris - (.WildTangent.) [HKLM][64Bits] -- WTA-1c408e46-aad7-4724-9f6d-0fd91fb1f7bd
O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM][64Bits] -- {6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}
O42 - Logiciel: Brink of Consciousness: Lonely Hearts Murders - (.WildTangent.) [HKLM][64Bits] -- WTA-7100de58-bc0b-4a0a-bc9b-7805e25aee0d
O42 - Logiciel: Chiavetta Internet - (.Huawei Technologies Co.,Ltd.) [HKLM][64Bits] -- Chiavetta Internet
O42 - Logiciel: Complément Messenger - (.Microsoft Corporation.) [HKLM][64Bits] -- {6E5324C1-84FC-4F76-9A3A-C65E07F80EE6}
O42 - Logiciel: CopyTrans Suite - (...) [HKLM][64Bits] -- CopyTrans Suite
O42 - Logiciel: CopyTrans Suite désinstallation uniquement - (.WindSolutions.) [HKCU][64Bits] -- CopyTrans Suite
O42 - Logiciel: CyberLink DVD Suite - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}
O42 - Logiciel: CyberLink DVD Suite - (.CyberLink Corp..) [HKLM][64Bits] -- {1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}
O42 - Logiciel: CyberLink YouCam - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}
O42 - Logiciel: CyberLink YouCam - (.CyberLink Corp..) [HKLM][64Bits] -- {01FB4998-33C4-4431-85ED-079E3EEFE75D}
O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM][64Bits] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF}
O42 - Logiciel: Dark Lore Mysteries: The Hunt For Truth - (.WildTangent.) [HKLM][64Bits] -- WTA-48c68e87-bcc3-4f60-89b2-062830c1d933
O42 - Logiciel: DiskAid 5.08 - (.DigiDNA.) [HKLM][64Bits] -- DiskAid_is1
O42 - Logiciel: Détection de l'application Winamp - (.Nullsoft, Inc.) [HKCU][64Bits] -- Winamp Detect
O42 - Logiciel: Easter Eggztravaganza 2 - (.WildTangent.) [HKLM][64Bits] -- WTA-379dac36-9f8c-42c1-b27c-d510eb0931a7
O42 - Logiciel: Facebook Video Calling 1.2.0.287 - (.Skype Limited.) [HKLM][64Bits] -- {B92C5909-1D37-4C51-8397-A28BB28E5DC3}
O42 - Logiciel: Farm Mystery - (.WildTangent.) [HKLM][64Bits] -- WTA-cc383743-f1eb-4675-8695-a00b642d1631
O42 - Logiciel: Forbidden Secrets Alien Town - (.WildTangent.) [HKLM][64Bits] -- WTA-e1f3cddc-f7e2-4532-98dc-e5926eea68ef
O42 - Logiciel: FormatFactory 2.60 - (.Free Time.) [HKLM][64Bits] -- FormatFactory
O42 - Logiciel: Gardenscapes 2 Collector's Edition - (.WildTangent.) [HKLM][64Bits] -- WTA-fb2d5320-db37-4a45-9e58-c11a1635a6d2
O42 - Logiciel: Girls With Secrets - (.WildTangent.) [HKLM][64Bits] -- WTA-8b077fb9-3eaa-47d6-ac1c-bc5e75f381e7
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM][64Bits] -- Google Chrome
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
O42 - Logiciel: Google Earth - (.Google.) [HKLM][64Bits] -- {1B30DAC0-DE51-11E2-9A5B-B8AC6F98CCE3}
O42 - Logiciel: HP Advisor - (.Hewlett-Packard.) [HKLM][64Bits] -- {B53E61D7-7C80-40DF-82D2-CF5390D6D20A}
O42 - Logiciel: HP DVD Play 3.7 - (.Hewlett-Packard.) [HKLM][64Bits] -- {45D707E9-F3C4-11D9-A373-0050BAE317E1}
O42 - Logiciel: HP Games - (.WildTangent.) [HKLM][64Bits] -- WildTangent hp Master Uninstall
O42 - Logiciel: HP Quick Launch Buttons - (.Hewlett-Packard.) [HKLM][64Bits] -- {34D2AB40-150D-475D-AE32-BD23FB5EE355}
O42 - Logiciel: HP Setup - (.Hewlett-Packard.) [HKLM][64Bits] -- {F3B912F5-EB57-45AA-B3D1-EB532BCF6EF8}
O42 - Logiciel: HP Smart Web Printing - (.Hewlett-Packard.) [HKLM][64Bits] -- HP Smart Web Printing
O42 - Logiciel: HP Support Assistant - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {EE202411-2C26-49E8-9784-1BC1DBF7DE96}
O42 - Logiciel: HP Update - (.Hewlett-Packard.) [HKLM][64Bits] -- {D46D081B-F60E-467E-A7C4-117B70D76731}
O42 - Logiciel: HP User Guides 0148 - (.Hewlett-Packard.) [HKLM][64Bits] -- {9D3318E1-5A9F-4A95-A7A1-7E045403AE34}
O42 - Logiciel: HP Wireless Assistant - (.Hewlett-Packard.) [HKLM][64Bits] -- {54CC7901-804D-4155-B353-21F0CC9112AB}
O42 - Logiciel: Hewlett-Packard ACLM.NET v1.2.1.1 - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {6F340107-F9AA-47C6-B54C-C3A19F11553F}
O42 - Logiciel: IDT Audio - (.IDT.) [HKLM][64Bits] -- {E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}
O42 - Logiciel: In Search of the Lost Temple - (.WildTangent.) [HKLM][64Bits] -- WTA-3e83593d-9e9b-442a-961c-f6fc481acc95
O42 - Logiciel: Intel(R) Graphics Media Accelerator Driver - (.Intel Corporation.) [HKLM][64Bits] -- HDMI
O42 - Logiciel: Java 7 Update 21 - (.Oracle.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F83217021FF}
O42 - Logiciel: JavaFX 2.1.1 - (.Oracle Corporation.) [HKLM][64Bits] -- {1111706F-666A-4037-7777-211328764D10}
O42 - Logiciel: Jeux WildTangent - (.WildTangent.) [HKLM][64Bits] -- WildTangent wildgames Master Uninstall
O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM][64Bits] -- {1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}
O42 - Logiciel: LSI HDA Modem - (.LSI Corporation.) [HKLM][64Bits] -- LSI Soft Modem
O42 - Logiciel: LabelPrint - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}
O42 - Logiciel: LabelPrint - (.CyberLink Corp..) [HKLM][64Bits] -- {C59C179C-668D-49A9-B6EA-0121CCFC1243}
O42 - Logiciel: LightScribe System Software - (.LightScribe.) [HKLM][64Bits] -- {82EF29B1-9B60-4142-A155-0599216DD053}
O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM][64Bits] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}
O42 - Logiciel: MSVCRT_amd64 - (.Microsoft.) [HKLM][64Bits] -- {D0B44725-3666-492D-BEF6-587A14BD9BD9}
O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM][64Bits] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM][64Bits] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
O42 - Logiciel: Microsoft Antimalware Service FR-FR Language Pack - (.Microsoft Corporation.) [HKLM][64Bits] -- {32E9C1A5-0FDA-4483-987D-DBABF9CC1DD8}
O42 - Logiciel: Microsoft Security Client - (.Microsoft Corporation.) [HKLM][64Bits] -- {D954C6C2-544B-4091-A47F-11E77162883E}
O42 - Logiciel: Microsoft Security Client FR-FR Language Pack - (.Microsoft Corporation.) [HKLM][64Bits] -- {DC911ADF-7B60-40F2-A112-FB1EB6402D07}
O42 - Logiciel: Microsoft Security Essentials - (.Microsoft Corporation.) [HKLM][64Bits] -- Microsoft Security Client
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM][64Bits] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
O42 - Logiciel: Microsoft Works - (.Microsoft Corporation.) [HKLM][64Bits] -- {3B160861-7250-451E-B5EE-8B92BF30A710}
O42 - Logiciel: Microsoft XNA Framework Redistributable 4.0 - (.Microsoft Corporation.) [HKLM][64Bits] -- {2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}
O42 - Logiciel: Motor Town: Soul of the Machine - (.WildTangent.) [HKLM][64Bits] -- WTA-c1963036-a51e-4ab4-a619-a774407035b8
O42 - Logiciel: Murder She Wrote 2 - (.WildTangent.) [HKLM][64Bits] -- WTA-0112bbac-ecaa-43ac-9d08-7bbf06a2c5c1
O42 - Logiciel: Nero 8 - (.Nero AG.) [HKLM][64Bits] -- {5FCCD531-1B38-4A94-924C-127F722F1036}
O42 - Logiciel: OpenAL - (...) [HKLM][64Bits] -- OpenAL
O42 - Logiciel: PC Remote - (.PC Remote.) [HKLM][64Bits] -- {B44AF2D8-9A5D-4653-AF10-F1697C98019F}
O42 - Logiciel: Power2Go - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}
O42 - Logiciel: Power2Go - (.CyberLink Corp..) [HKLM][64Bits] -- {40BF1E83-20EB-11D8-97C5-0009C5020658}
O42 - Logiciel: PowerDirector - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}
O42 - Logiciel: PowerDirector - (.CyberLink Corp..) [HKLM][64Bits] -- {CB099890-1D5F-11D5-9EA9-0050BAE317E1}
O42 - Logiciel: PowerRecover - (.CyberLink Corp..) [HKLM][64Bits] -- {44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5}
O42 - Logiciel: QLBCASL - (.Hewlett-Packard.) [HKLM][64Bits] -- {F1D7AC58-554A-4A58-B784-B61558B1449A}
O42 - Logiciel: QuickTime - (.Apple Inc..) [HKLM][64Bits] -- {B67BAFBA-4C9F-48FA-9496-933E3B255044}
O42 - Logiciel: RealPlayer - (.RealNetworks.) [HKLM][64Bits] -- RealPlayer 15.0
O42 - Logiciel: RealUpgrade 1.1 - (.RealNetworks, Inc..) [HKLM][64Bits] -- {28C2DED6-325B-4CC7-983A-1777C8F7FBAB}
O42 - Logiciel: Realtek 8136 8168 8169 Ethernet Driver - (.Realtek.) [HKLM][64Bits] -- {8833FFB6-5B0C-4764-81AA-06DFEED9A476}
O42 - Logiciel: Realtek USB 2.0 Card Reader - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {96AE7E41-E34E-47D0-AC07-1091A8127911}
O42 - Logiciel: SHOUTcast DSP Plug-in v2 - (...) [HKLM][64Bits] -- SHOUTcast
O42 - Logiciel: Safari - (.Apple Inc..) [HKLM][64Bits] -- {C779648B-410E-4BBA-B75B-5815BCEFE71D}
O42 - Logiciel: Sandra Fleming Chronicles: Crystal Skulls - (.WildTangent.) [HKLM][64Bits] -- WTA-46977124-f5f5-4538-8426-06c1b802c7f3
O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM][64Bits] -- KB931906
O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM][64Bits] -- {0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
O42 - Logiciel: Skype Click to Call - (.Skype Technologies S.A..) [HKLM][64Bits] -- {B6CF2967-C81E-40C0-9815-C05774FEF120}
O42 - Logiciel: Skype(TM) 6.5 - (.Skype Technologies S.A..) [HKLM][64Bits] -- {4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}
O42 - Logiciel: Synaptics Pointing Device Driver - (.Synaptics Incorporated.) [HKLM][64Bits] -- SynTPDeinstKey
O42 - Logiciel: The Lake House: Children of Silence - (.WildTangent.) [HKLM][64Bits] -- WTA-36f84047-acc1-41de-bf5b-fb622c84c5cf
O42 - Logiciel: Update Installer for WildTangent Games App - (.WildTangent.) [HKLM][64Bits] -- {2FA94A64-C84E-49d1-97DD-7BF06C7BBFB2}.WildTangent Games App
O42 - Logiciel: VCRedistSetup - (.Nero AG.) [HKLM][64Bits] -- {3921A67A-5AB1-4E48-9444-C71814CF3027}
O42 - Logiciel: Viber - (.Viber Media Inc.) [HKCU][64Bits] -- Viber
O42 - Logiciel: WebPlayerV2 - (.Kreapixel.) [HKLM][64Bits] -- {7D41BC10-F03E-41EB-8E2D-B7006948332F} =>Adware.SocialSkinz
O42 - Logiciel: WildTangent Games App (HP Games) - (.WildTangent.) [HKLM][64Bits] -- {70B446D1-E03B-4ab0-9B3C-0832142C9AA8}.WildTangent Games App-hp
O42 - Logiciel: WinRAR 4.00 (32 bits) - (.win.rar GmbH.) [HKLM][64Bits] -- WinRAR archiver
O42 - Logiciel: Winamp - (.Nullsoft, Inc.) [HKLM][64Bits] -- Winamp
O42 - Logiciel: Windows Media Player Firefox Plugin - (.Microsoft Corp.) [HKLM][64Bits] -- {69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}
O42 - Logiciel: ffdshow v1.2.4422 [2012-04-09] - (...) [HKLM][64Bits] -- ffdshow_is1
O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM][64Bits] -- {76FF0F03-B707-4332-B5D1-A56C8303514E}
O42 - Logiciel: muvee Reveal - (.muvee Technologies Pte Ltd.) [HKLM][64Bits] -- {293F900D-3743-A8CC-46AD-5AFBFF8E29CF}
O42 - Logiciel: neroxml - (.Nero AG.) [HKLM][64Bits] -- {56C049BE-79E9-4502-BEA7-9754A3E60F9B}
~ Logic: 233 Scanned in 00mn 00s
---\\ HKCU & HKLM Software Keys
[HKCU\Software\AIST]
[HKCU\Software\AUTORUN]
[HKCU\Software\Adobe]
[HKCU\Software\Ahead]
[HKCU\Software\AppDataLow\Software\Adobe]
[HKCU\Software\AppDataLow\Software\JavaSoft]
[HKCU\Software\AppDataLow]
[HKCU\Software\Apple Computer, Inc.]
[HKCU\Software\Apple Inc.]
[HKCU\Software\Audacity]
[HKCU\Software\Auralog]
[HKCU\Software\BearShare] =>PUP.BearShare
[HKCU\Software\Binary Noise]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\CyberLink]
[HKCU\Software\Facebook]
[HKCU\Software\FreeTime]
[HKCU\Software\GNU]
[HKCU\Software\Gabest]
[HKCU\Software\GameHouse]
[HKCU\Software\Google]
[HKCU\Software\Haali]
[HKCU\Software\Hewlett-Packard]
[HKCU\Software\HipSoft]
[HKCU\Software\HookNetwork]
[HKCU\Software\IM Providers]
[HKCU\Software\Intel]
[HKCU\Software\JavaSoft]
[HKCU\Software\Licenses]
[HKCU\Software\LightScribe]
[HKCU\Software\MAGIX AG]
[HKCU\Software\Macromedia]
[HKCU\Software\Magix]
[HKCU\Software\MainConcept (Muvee Consumer)]
[HKCU\Software\MainConcept (Muvee)]
[HKCU\Software\MainConcept (Muvee2)]
[HKCU\Software\MozillaPlugins]
[HKCU\Software\Mozilla]
[HKCU\Software\NeroDigital]
[HKCU\Software\Nero]
[HKCU\Software\Netscape]
[HKCU\Software\ODBC]
[HKCU\Software\PC Remote]
[HKCU\Software\Policies]
[HKCU\Software\RealNetworks]
[HKCU\Software\RegisteredApplications]
[HKCU\Software\Server]
[HKCU\Software\SkypeRS]
[HKCU\Software\Skype]
[HKCU\Software\SweetIM] =>PUP.SweetIM
[HKCU\Software\Synaptics]
[HKCU\Software\SynergeticSoft]
[HKCU\Software\TeamViewer]
[HKCU\Software\Trolltech]
[HKCU\Software\VB and VBA Program Settings]
[HKCU\Software\ValuSoft]
[HKCU\Software\WinRAR SFX]
[HKCU\Software\WinRAR]
[HKCU\Software\Winamp]
[HKCU\Software\Wow6432Node]
[HKCU\Software\ZebHelpProcess Helper]
[HKCU\Software\ej-technologies]
[HKCU\Software\itb]
[HKLM\Software\ATI Technologies]
[HKLM\Software\Agere]
[HKLM\Software\Apple Computer, Inc.]
[HKLM\Software\Apple Inc.]
[HKLM\Software\Audible]
[HKLM\Software\CXT]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\GEAR Software]
[HKLM\Software\HPQ]
[HKLM\Software\HaaliMkx]
[HKLM\Software\Hewlett-Packard]
[HKLM\Software\Huawei technologies]
[HKLM\Software\IDT]
[HKLM\Software\IM Providers]
[HKLM\Software\InstalledOptions]
[HKLM\Software\Intel]
[HKLM\Software\JavaSoft]
[HKLM\Software\LSI]
[HKLM\Software\Macromedia]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\ODBC]
[HKLM\Software\Policies]
[HKLM\Software\RTLSetup]
[HKLM\Software\Realtek Semiconductor Corp.]
[HKLM\Software\Realtek]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\Sonic]
[HKLM\Software\Symantec]
[HKLM\Software\Synaptics]
[HKLM\Software\Windows]
[HKLM\Software\Wow6432Node\Adobe]
[HKLM\Software\Wow6432Node\AdwCleaner]
[HKLM\Software\Wow6432Node\Ahead]
[HKLM\Software\Wow6432Node\Apple Computer, Inc.]
[HKLM\Software\Wow6432Node\Apple Inc.]
[HKLM\Software\Wow6432Node\Audible]
[HKLM\Software\Wow6432Node\Avg]
[HKLM\Software\Wow6432Node\AviSynth]
[HKLM\Software\Wow6432Node\BearShareMediabarTb] =>PUP.BearShare
[HKLM\Software\Wow6432Node\CDDB]
[HKLM\Software\Wow6432Node\Caphyon]
[HKLM\Software\Wow6432Node\Classes]
[HKLM\Software\Wow6432Node\Clients]
[HKLM\Software\Wow6432Node\Cyberlink]
[HKLM\Software\Wow6432Node\GNU]
[HKLM\Software\Wow6432Node\Google]
[HKLM\Software\Wow6432Node\HPQLOG]
[HKLM\Software\Wow6432Node\HPQ]
[HKLM\Software\Wow6432Node\HP]
[HKLM\Software\Wow6432Node\Hewlett-Packard]
[HK
yoann090
Messages postés
9180
Date d'inscription
mercredi 12 août 2009
Statut
Contributeur sécurité
Dernière intervention
13 avril 2016
1 687
6 juil. 2013 à 00:26
6 juil. 2013 à 00:26
Heberge le stp il ne passe pas en entier
Chany04
Messages postés
9
Date d'inscription
vendredi 5 juillet 2013
Statut
Membre
Dernière intervention
6 juillet 2013
6 juil. 2013 à 00:33
6 juil. 2013 à 00:33
yoann090
Messages postés
9180
Date d'inscription
mercredi 12 août 2009
Statut
Contributeur sécurité
Dernière intervention
13 avril 2016
1 687
6 juil. 2013 à 23:46
6 juil. 2013 à 23:46
Re,
Il y a des trucs qu'Adwcleaner doit encore supprimer.
Repasse le une fois en suppression (en démarrant ton pc en mode sans echec avec prise en charge réseau)
Il y a des trucs qu'Adwcleaner doit encore supprimer.
Repasse le une fois en suppression (en démarrant ton pc en mode sans echec avec prise en charge réseau)
Modifié par yoann090 le 5/07/2013 à 19:51
Adobe Reader 9.5.5 MUI
Java 6 Update 14
Met à jour Firefox ou désinstalles le si tu ne l'utilise plus.
5 juil. 2013 à 20:05
5 juil. 2013 à 20:07
Passe à Adwcleaner ;)
5 juil. 2013 à 20:37
# AdwCleaner v2.304 - Rapport
créé le 05/07/2013 à 19:30:03
# Mis à jour le 03/07/2013
par Xplode
# Système d'exploitation :
Windows 7 Home Premium
Service Pack 1 (64 bits)
# Nom d'utilisateur : usqger
- USQGER-PC
# Mode de démarrage : Normal
# Exécuté depuis : C:\Users
\usqger\Downloads
\adwcleaner.exe
# Option [Suppression]
***** [Services] *****
Arrêté & Supprimé :
IBUpdaterService
Arrêté & Supprimé : MAJTuto
***** [Fichiers / Dossiers]
*****
Dossier Supprimé : C:\Program
Files (x86)\1ClickDownload
Dossier Supprimé : C:\Program
Files (x86)\allsearch
Dossier Supprimé : C:\Program
Files (x86)\Gophoto.it
Dossier Supprimé : C:\Program
Files (x86)\Iminent
Dossier Supprimé : C:\Program
Files (x86)\PCtuto
Dossier Supprimé : C:\Program
Files (x86)\Services x86
Dossier Supprimé : C:\Program
Files (x86)\service-x86
Dossier Supprimé : C:\Program
Files (x86)\TornTV.com
Dossier Supprimé : C:\Program
Files (x86)\vShare
Dossier Supprimé : C:\Program
Files\Babylon
Dossier Supprimé : C:
\ProgramData\Babylon
Dossier Supprimé : C:
\ProgramData
\boost_interprocess
Dossier Supprimé : C:
\ProgramData\IBUpdaterService
Dossier Supprimé : C:\Users
\usqger\AppData\Local
\comnetwork
Dossier Supprimé : C:\Users
\usqger\AppData\Local\EoJet
Dossier Supprimé : C:\Users
\usqger\AppData\Local\Google
\Chrome\User Data\Default
\Extensions
\cfcbmgbfdbijmjgjihagbomfbjfj
mgon
Dossier Supprimé : C:\Users
\usqger\AppData\Local\Google
\Chrome\User Data\Default
\Extensions
\cnmdgidklhhnmppphpohildcefna
aflp
Dossier Supprimé : C:\Users
\usqger\AppData\Local\Google
\Chrome\User Data\Default
\Extensions
\pfmopbbadnfoelckkcmjjeaaegjp
jjbk
Dossier Supprimé : C:\Users
\usqger\AppData\Local
\Kreapixel
Dossier Supprimé : C:\Users
\usqger\AppData\Local\MAJTuto
Dossier Supprimé : C:\Users
\usqger\AppData\Local
\PackageAware
Dossier Supprimé : C:\Users
\usqger\AppData\Local\PCtuto
Dossier Supprimé : C:\Users
\usqger\AppData\Local
\service-x86
Dossier Supprimé : C:\Users
\usqger\AppData\Local\Temp
\boost_interprocess
Dossier Supprimé : C:\Users
\usqger\AppData\LocalLow
\Bandoo
Dossier Supprimé : C:\Users
\usqger\AppData\LocalLow
\searchquband
Dossier Supprimé : C:\Users
\usqger\AppData\LocalLow
\vShare
Dossier Supprimé : C:\Users
\usqger\AppData\Roaming
\Babylon
Dossier Supprimé : C:\Users
\usqger\AppData\Roaming
\Bandoo
Dossier Supprimé : C:\Users
\usqger\AppData\Roaming\file
scout
Dossier Supprimé : C:\Users
\usqger\AppData\Roaming\iWin
Dossier Supprimé : C:\Users
\usqger\AppData\Roaming
\Microsoft\Windows\Start
Menu\Programs\TornTV.com
Dossier Supprimé : C:\Users
\usqger\AppData\Roaming
\PCtuto
Dossier Supprimé : C:\Users
\usqger\AppData\Roaming
\PerformerSoft
Dossier Supprimé : C:\Users
\usqger\AppData\Roaming
\SpeedanAlysis
Dossier Supprimé : C:\Users
\usqger\AppData\Roaming
\WebPlayerBdd
Dossier Supprimé : C:\Users
\usqger\AppData\Roaming
\yourfiledownloader
Fichier Supprimé : C:
\ProgramData\Microsoft
\Windows\Start Menu\Programs
\eBay.lnk
Fichier Supprimé : C:
\ProgramData\Microsoft
\Windows\Start Menu\Programs
\WebPlayerV2.lnk
Fichier Supprimé : C:\user.js
Fichier Supprimé : C:\Users
\usqger\AppData\Local\Temp
\Searchqu.ini
Fichier Supprimé : C:\Users
\usqger\AppData\Local\Temp
\searchqutoolbar-manifest.xml
Fichier Supprimé : C:\Users
\usqger\AppData\Local\Temp
\SetupDataMngr_Searchqu.exe
Fichier Supprimé : C:\Users
\usqger\AppData\Roaming
\Microsoft\Windows\Start
Menu\Programs\WebPlayerV2.lnk
***** [Registre] *****
Clé Supprimée : HKCU
\Software\1ClickDownload
Clé Supprimée : HKCU
\Software\AppDataLow
\Software\Crossrider
Clé Supprimée : HKCU
\Software\AppDataLow
\Software\searchqutoolbar
Clé Supprimée : HKCU
\Software\AppDataLow
\Software\Services x86
Clé Supprimée : HKCU
\Software\AppDataLow
\Software\service-x86
Clé Supprimée : HKCU
\Software\BabylonToolbar
Clé Supprimée : HKCU
\Software\Cr_Installer
Clé Supprimée : HKCU
\Software\DataMngr
Clé Supprimée : HKCU
\Software\DataMngr_Toolbar
Clé Supprimée : HKCU
\Software\Iminent
Clé Supprimée : HKCU
\Software
\InstalledBrowserExtensions
Clé Supprimée : HKCU
\Software\Microsoft\Windows
\CurrentVersion\Ext\Settings
\{043C5167-00BB-4324-AF7E-
62013FAEDACF}
Clé Supprimée : HKCU
\Software\Microsoft\Windows
\CurrentVersion\Ext\Settings
\{11111111-1111-1111-1111-
110211701196}
Clé Supprimée : HKCU
\Software\Microsoft\Windows
\CurrentVersion\Ext\Settings
\{11111111-1111-1111-1111-
110211971101}
Clé Supprimée : HKCU
\Software\Microsoft\Windows
\CurrentVersion\Ext\Settings
\{293A63F7-C3B6-423A-9845-
901AC0A7EE6E}
Clé Supprimée : HKCU
\Software\Microsoft\Windows
\CurrentVersion\Ext\Settings
\{98889811-442D-49DD-99D7-
DC866BE87DBC}
Clé Supprimée : HKCU
\Software\Microsoft\Windows
\CurrentVersion\Ext\Settings
\{99079A25-328F-4BD4-BE04-
00955ACAA0A7}
Clé Supprimée : HKCU
\Software\Microsoft\Windows
\CurrentVersion\Ext\Settings
\{B939CF93-F2CB-443D-956C-
DC523D85C9DB}
Clé Supprimée : HKCU
\Software\Microsoft\Windows
\CurrentVersion\Ext\Settings
\{C2D64FF7-0AB8-4263-89C9-
EA3B0F8F050C}
Clé Supprimée : HKCU
\Software\Microsoft\Windows
\CurrentVersion\Ext\Settings
\{EEE6C35C-6118-11DC-9C72-
001320C79847}
Clé Supprimée : HKCU
\Software\Microsoft\Windows
\CurrentVersion\Ext\Stats
\{043C5167-00BB-4324-AF7E-
62013FAEDACF}
Clé Supprimée : HKCU
\Software\Microsoft\Windows
\CurrentVersion\Ext\Stats
\{11111111-1111-1111-1111-
110211701196}
Clé Supprimée : HKCU
\Software\Microsoft\Windows
\CurrentVersion\Ext\Stats
\{11111111-1111-1111-1111-
110211971101}
Clé Supprimée : HKCU
\Software\Microsoft\Windows
\CurrentVersion\Ext\Stats
\{293A63F7-C3B6-423A-9845-
901AC0A7EE6E}
Clé Supprimée : HKCU
\Software\Microsoft\Windows
\CurrentVersion\Ext\Stats
\{3B7599DF-3D5D-4EF5-BF51-
9C2EDA788E83}
Clé Supprimée : HKCU
\Software\Microsoft\Windows
\CurrentVersion\Ext\Stats
\{99079A25-328F-4BD4-BE04-
00955ACAA0A7}
Clé Supprimée : HKCU
\Software\Microsoft\Windows
\CurrentVersion\Ext\Stats
\{B939CF93-F2CB-443D-956C-
DC523D85C9DB}
Clé Supprimée : HKCU
\Software\Microsoft\Windows
\CurrentVersion\Ext\Stats
\{C2D64FF7-0AB8-4263-89C9-
EA3B0F8F050C}
Clé Supprimée : HKCU
\Software\PCTuto
Clé Supprimée : HKCU
\Software\Softonic
Clé Supprimée : HKCU
\Software\vShare
Clé Supprimée : HKCU
\Software\YahooPartnerToolbar
Clé Supprimée : HKCU
\Software\YourFileDownloader
Clé Supprimée : HKCU
\Software\53578dd1bc68b843
Clé Supprimée : HKCU
\Software\Microsoft\Internet
Explorer\SearchScopes
\{0ECDF796-C2DC-4D79-A620-
CCE0C0A66CC9}
Clé Supprimée : HKCU
\Software\Microsoft\Internet
Explorer\SearchScopes
\{9BB47C17-9C68-4BB3-B188-
DD9AF0FD2101}
Clé Supprimée : HKCU
\Software\Microsoft\Internet
Explorer\SearchScopes
\{9BB47C17-9C68-4BB3-B188-
DD9AF0FD22}
Clé Supprimée : HKLM
\Software\Babylon
Clé Supprimée : HKLM
\Software\Bandoo
Clé Supprimée : HKLM
\SOFTWARE\Classes
\1ClicktorrentFile
Clé Supprimée : HKLM
\SOFTWARE\Classes
\1ClicktorrentFile1
Clé Supprimée : HKLM
\SOFTWARE\Classes\AppID
\{1301A8A5-3DFB-4731-A162-
B357D00C9644}
Clé Supprimée : HKLM
\SOFTWARE\Classes\AppID
\{18B9B16E-716F-43DF-A6AD-
512C7D2EB983}
Clé Supprimée : HKLM
\SOFTWARE\Classes\AppID
\{5B1881D1-D9C7-46DF-B041-
1E593282C7D0}
Clé Supprimée : HKLM
\SOFTWARE\Classes\AppID
\{608D3067-77E8-463D-9084-
908966806826}
Clé Supprimée : HKLM
\SOFTWARE\Classes\AppID
\{6536801B-F50C-449B-9476-
093DFD3789E3}
Clé Supprimée : HKLM
\SOFTWARE\Classes\AppID
\{759F1421-4D31-4C1F-8C51-
E4956A037676}
Clé Supprimée : HKLM
\SOFTWARE\Classes\AppID
\{AC662AF2-4601-4A68-84DF-
A3FE83F1A5F9}
Clé Supprimée : HKLM
\SOFTWARE\Classes\AppID
\{BDB69379-802F-4EAF-B541-
F8DE92DD98DB}
Clé Supprimée : HKLM
\SOFTWARE\Classes\AppID
\{C26644C4-2A12-4CA6-8F2E-
0EDE6CF018F3}
Clé Supprimée : HKLM
\SOFTWARE\Classes\AppID
\{D97A8234-F2A2-4AD4-91D5-
FECDB2C553AF}
Clé Supprimée : HKLM
\SOFTWARE\Classes\AppID
\{EA28B360-05E0-4F93-8150-
02891F1D8D3C}
Clé Supprimée : HKLM
\SOFTWARE\Classes\AppID
\BabylonHelper.EXE
Clé Supprimée : HKLM
\SOFTWARE\Classes\AppID
\BandooCore.EXE
Clé Supprimée : HKLM
\SOFTWARE\Classes\AppID
\BrowserConnection.dll
Clé Supprimée : HKLM
\SOFTWARE\Classes\AppID
\DNSBHO.dll
Clé Supprimée : HKLM
\SOFTWARE\Classes\AppID
\PCTutoBHO.DLL
Clé Supprimée : HKLM
\SOFTWARE\Classes\AppID
\PropertySync.EXE
Clé Supprimée : HKLM
\SOFTWARE\Classes
\BandooCore.BandooCore
Clé Supprimée : HKLM
\SOFTWARE\Classes
\BandooCore.BandooCore.1
Clé Supprimée : HKLM
\SOFTWARE\Classes
\BandooCore.ResourcesMngr
Clé Supprimée : HKLM
\SOFTWARE\Classes
\BandooCore.ResourcesMngr.1
Clé Supprimée : HKLM
\SOFTWARE\Classes
\BandooCore.SettingsMngr
Clé Supprimée : HKLM
\SOFTWARE\Classes
\BandooCore.SettingsMngr.1
Clé Supprimée : HKLM
\SOFTWARE\Classes
\BandooCore.StatisticMngr
Clé Supprimée : HKLM
\SOFTWARE\Classes
\BandooCore.StatisticMngr.1
Clé Supprimée : HKLM
\SOFTWARE\Classes
\BrowserConnection.Loader
Clé Supprimée : HKLM
\SOFTWARE\Classes
\BrowserConnection.Loader.1
Clé Supprimée : HKLM
\SOFTWARE\Classes
\CrossriderApp0027096.BHO
Clé Supprimée : HKLM
\SOFTWARE\Classes
\CrossriderApp0027096.BHO.1
Clé Supprimée : HKLM
\SOFTWARE\Classes
\CrossriderApp0027096.Sandbox
Clé Supprimée : HKLM
\SOFTWARE\Classes
\CrossriderApp0027096.Sandbox
.1
Clé Supprimée : HKLM
\SOFTWARE\Classes
\CrossriderApp0029701.BHO
Clé Supprimée : HKLM
\SOFTWARE\Classes
\CrossriderApp0029701.BHO.1
Clé Supprimée : HKLM
\SOFTWARE\Classes
\CrossriderApp0029701.Sandbox
Clé Supprimée : HKLM
\SOFTWARE\Classes
\CrossriderApp0029701.Sandbox
.1
Clé Supprimée : HKLM
\SOFTWARE\Classes\DnsBHO.BHO
Clé Supprimée : HKLM
\SOFTWARE\Classes
\DnsBHO.BHO.1
Clé Supprimée : HKLM
\SOFTWARE\Classes\oneclick
Clé Supprimée : HKLM
\SOFTWARE\Classes\oneclickmg
Clé Supprimée : HKLM
\SOFTWARE\Classes
\PCTutoBHO.PCTBHO
Clé Supprimée : HKLM
\SOFTWARE\Classes
\PCTutoBHO.PCTBHO.1
Clé Supprimée : HKLM
\SOFTWARE\Classes\Prod.cap
Clé Supprimée : HKLM
\SOFTWARE\Classes\PROTOCOLS
\Handler\vsharechrome
Clé Supprimée : HKLM
\SOFTWARE\Classes\TypeLib
\{05E242CB-338E-4A4F-A726-
80BAB386D079}
Clé Supprimée : HKLM
\SOFTWARE\Classes\TypeLib
\{0BF73E27-2734-4F7B-925A-
4BBB1457F5FA}
Clé Supprimée : HKLM
\SOFTWARE\Classes\TypeLib
\{2BF2028E-3F3C-4C05-AB45-
B2F1DCFE0759}
Clé Supprimée : HKLM
\SOFTWARE\Classes\TypeLib
\{3E315C81-442B-431C-AEC8-
ED189699EC24}
Clé Supprimée : HKLM
\SOFTWARE\Classes\TypeLib
\{44444444-4444-4444-4444-
440244704496}
Clé Supprimée : HKLM
\SOFTWARE\Classes\TypeLib
\{8F5F1CB6-EA9E-40AF-A5CA-
C7FD63CC1971}
Clé Supprimée : HKLM
\SOFTWARE\Classes\TypeLib
\{DB538320-D3C5-433C-BCA9-
C4081A054FCF}
Clé Supprimée : HKLM
\SOFTWARE\Classes
\vShare.IMedixProtocol
Clé Supprimée : HKLM
\SOFTWARE\Classes
\vShare.IMedixProtocol.1
Clé Supprimée : HKLM
\SOFTWARE\Classes
\vShare.PugiObj
Clé Supprimée : HKLM
\SOFTWARE\Classes
\vShare.PugiObj.1
Clé Supprimée : HKLM
\SOFTWARE\Classes
\vShare.ScriptHelpers
Clé Supprimée : HKLM
\SOFTWARE\Classes
\vShare.ScriptHelpers.1
Clé Supprimée : HKLM
\Software\DataMngr
Clé Supprimée : HKLM
\Software\Iminent
Clé Supprimée : HKLM
\SOFTWARE\Microsoft\Tracing
\Babylon_RASAPI32
Clé Supprimée : HKLM
\SOFTWARE\Microsoft\Tracing
\Babylon_RASMANCS
Clé Supprimée : HKLM
\SOFTWARE\Microsoft\Tracing
\BabylonTC_RASAPI32
Clé Supprimée : HKLM
\SOFTWARE\Microsoft\Tracing
\BabylonTC_RASMANCS
Clé Supprimée : HKLM
\SOFTWARE\Microsoft\Tracing
\datamngrUI_RASAPI32
Clé Supprimée : HKLM
\SOFTWARE\Microsoft\Tracing
\datamngrUI_RASMANCS
Clé Supprimée : HKLM
\SOFTWARE\Microsoft\Tracing
\Iminent_RASAPI32
Clé Supprimée : HKLM
\SOFTWARE\Microsoft\Tracing
\Iminent_RASMANCS
Clé Supprimée : HKLM
\SOFTWARE\Microsoft\Tracing
\MyBabylontb_RASAPI32
Clé Supprimée : HKLM
\SOFTWARE\Microsoft\Tracing
\MyBabylontb_RASMANCS
Clé Supprimée : HKLM
\SOFTWARE\Microsoft\Tracing
\SearchquMediaBar_RASAPI32
Clé Supprimée : HKLM
\SOFTWARE\Microsoft\Tracing
\SearchquMediaBar_RASMANCS
Clé Supprimée : HKLM
\SOFTWARE\Microsoft\Tracing
\SweetIM_RASAPI32
Clé Supprimée : HKLM
\SOFTWARE\Microsoft\Tracing
\SweetIM_RASMANCS
Clé Supprimée : HKLM
\SOFTWARE\Microsoft\Tracing
\SweetPacksUpdateManager_RASA
PI32
Clé Supprimée : HKLM
\SOFTWARE\Microsoft\Tracing
\SweetPacksUpdateManager_RASM
ANCS
Clé Supprimée : HKLM
\SOFTWARE\Microsoft\Windows
\CurrentVersion\Ext
\PreApproved\{11111111-1111-
1111-1111-110211701196}
Clé Supprimée : HKLM
\SOFTWARE\Microsoft\Windows
\CurrentVersion\Ext
\PreApproved\{11111111-1111-
1111-1111-110211971101}
Clé Supprimée : HKLM
\SOFTWARE\Microsoft\Windows
\CurrentVersion\Ext
\PreApproved\{3B7599DF-3D5D-
4EF5-BF51-9C2EDA788E83}
Clé Supprimée : HKLM
\SOFTWARE\Microsoft\Windows
\CurrentVersion\Ext
\PreApproved\{6087829B-114F-
42A1-A72B-B4AEDCEA4E5B}
Clé Supprimée : HKLM
\Software\PCTuto
Clé Supprimée : HKLM
\Software\Services x86
Clé Supprimée : HKLM
\Software\service-x86
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\53578dd1bc68b843
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\CLSID\{02054E11-
5113-4BE3-8153-AA8DFB5D3761}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\CLSID\{043C5167-
00BB-4324-AF7E-62013FAEDACF}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\CLSID\{11111111-
1111-1111-1111-110211701196}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\CLSID\{11111111-
1111-1111-1111-110211971101}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\CLSID\{22222222-
2222-2222-2222-220222702296}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\CLSID\{27F69C85-
64E1-43CE-98B5-3C9F22FB408E}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\CLSID\{293A63F7-
C3B6-423A-9845-901AC0A7EE6E}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\CLSID\{3B7599DF-
3D5D-4EF5-BF51-9C2EDA788E83}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\CLSID\{3F3A4B8A-
86FC-43A4-BB00-6D7EBE9D4484}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\CLSID\{761F6A83-
F007-49E4-8EAC-CDB6808EF06F}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\CLSID\{97D69524-
BB57-4185-9C7F-5F05593B771A}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\CLSID\{99079A25-
328F-4BD4-BE04-00955ACAA0A7}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\CLSID\{B543EF05-
9758-464E-9F37-4C28525B4A4C}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\CLSID\{B939CF93-
F2CB-443D-956C-DC523D85C9DB}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\CLSID\{BB76A90B-
2B4C-4378-8506-9A2B6E16943C}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\CLSID\{C2D64FF7-
0AB8-4263-89C9-EA3B0F8F050C}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\CLSID\{C3AB94A4-
BFD0-4BBA-A331-DE504F07D2DB}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface\{021B4049
-F57D-4565-A693-FD3B04786BFA}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface\{0362AA09
-808D-48E9-B360-FB51A8CBCE09}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface\{06844020
-CD0B-3D3D-A7FE-371153013E49}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface\{06DE5702
-44CF-4B79-B4EF-3DDF653358F5}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface
\{0ADC01BB-303B-3F8E-93DA-
12C140E85460}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface
\{10D3722F-23E6-3901-B6C1-
FF6567121920}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface
\{1675E62B-F911-3B7B-A046-
EB57261212F3}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface\{192929F2
-9273-3894-91B0-F54671C4C861}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface\{20ED5AF7
-D9C4-409E-9EB3-D2A44A77FB6D}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface
\{2932897E-3036-43D9-8A64-
B06447992065}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface\{2DE92D29
-A042-3C37-BFF8-07C7D8893EFA}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface\{32B80AD6
-1214-45F4-994E-78A5D482C000}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface
\{3A8E103F-B2B7-3BEF-B3B0-
88E29B2420E4}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface
\{43969E3F-3E7C-4911-A8F1-
79C6CA6AC731}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface
\{477F210A-2A86-4666-9C4B-
1189634D2C84}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface\{478CE5D3
-D38E-3FFE-8DBE-8C4A0F1C4D8D}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface
\{48B7DA4E-69ED-39E3-BAD5-
3E3EFF22CFB0}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface\{55555555
-5555-5555-5555-550255705596}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface\{5982F405
-44E4-3BBB-BAC4-CF8141CBBC5C}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface\{5D8C3CC3
-3C05-38A1-B244-924A23115FE9}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface
\{641593AF-D9FD-30F7-B783-
36E16F7A2E08}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface\{66666666
-6666-6666-6666-660266706696}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface
\{711FC48A-1356-3932-94D8-
A8B733DBC7E4}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface
\{72227B7F-1F02-3560-95F5-
592E68BACC0C}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface\{7B5E8CE3
-4722-4C0E-A236-A6FF731BEF37}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface\{890D4F59
-5ED0-3CB4-8E0E-74A5A86E7ED0}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface
\{8C68913C-AC3C-4494-8B9C-
984D87C85003}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface\{8D019513
-083F-4AA5-933F-7D43A6DA82C4}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface\{923F6FB8
-A390-370E-A0D2-DD505432481D}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface
\{9BBB26EF-B178-35D6-9D3D-
B485F4279FE5}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface\{A62DDBE0
-8D2A-339A-B089-8CBCC5CD322A}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface
\{A82AD04D-0B8E-3A49-947B-
6A69A8A9C96D}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface\{ADEB3CC9
-A05D-4FCC-BD09-9025456AA3EA}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface\{B06D4521
-D09C-3F41-8E39-9D784CCA2A75}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface\{C06DAD42
-6F39-4CE1-83CC-9A8B9105E556}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface\{C2E799D0
-43A5-3477-8A98-FC5F3677F35C}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface
\{C815E3DA-0823-49B0-9270-
D1771D58B317}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface
\{D16107CD-2AD5-46A8-BA59-
303B7C32C500}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface
\{D25B101F-8188-3B43-9D85-
201F372BC205}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface\{D2BA7595
-5E44-3F1E-880F-03B3139FA5ED}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface\{D35F5C81
-17D9-3E1C-A1FC-4472542E1D25}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface
\{D8FA96CA-B250-312C-AF34-
4FF1DD72589D}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface\{DAFC1E63
-3359-416D-9BC2-E7DCA6F7B0F3}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface\{DC5E5C44
-80FD-3697-9E65-9F286D92F3E7}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface
\{E1B4C9DE-D741-385F-981E-
6745FACE6F01}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface\{E2ED56B6
-35FC-4484-9530-EC87FB458E78}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface\{E7B623F5
-9715-3F9F-A671-D1485A39F8A2}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface
\{ED916A7B-7C68-3198-B87D-
2DABC30A5587}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface\{EFA1BDB2
-BB3D-3D9A-8EB5-D0D22E0F64F4}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface
\{F4CBF4DD-F8FE-35BA-BB7E-
68304DAAB70B}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface
\{FC32005D-E27C-32E0-ADFA-
152F598B75E7}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface\{FF871E51
-2655-4D06-AED5-745962A96B32}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node\Google
\Chrome\Extensions
\cfcbmgbfdbijmjgjihagbomfbjfj
mgon
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node\Google
\Chrome\Extensions
\jcdgjdiieiljkfkdcloehkohchhp
ekkn
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node\Google
\Chrome\Extensions
\pfmopbbadnfoelckkcmjjeaaegjp
jjbk
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node\Google
\Chrome\Extensions
\pmlghpafmmnmmkjdhacccolfgnki
boco
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Microsoft\Internet Explorer
\Low Rights\ElevationPolicy
\{11111111-1111-1111-1111-
110211971101}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Microsoft\Internet Explorer
\Low Rights\ElevationPolicy
\{21111111-1111-1111-1111-
110211971101}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Microsoft\Internet Explorer
\Low Rights\ElevationPolicy
\{424624F4-C5DD-4E1D-BDD0-
1E9C9B7799CC}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Microsoft\Internet Explorer
\Low Rights\ElevationPolicy
\{628F3201-34D0-49C0-BB9A-
82A26AEFB291}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Microsoft\Internet Explorer
\Low Rights\ElevationPolicy
\{68B81CCD-A80C-4060-8947-
5AE69ED01199}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Microsoft\Internet Explorer
\Low Rights\ElevationPolicy
\{7F000001-DB8E-F89C-2FEC-
49BF726F8C12}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Microsoft\Internet Explorer
\Low Rights\ElevationPolicy
\{9C8A3CA5-889E-4554-BEEC-
EC0876E4E96A}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Microsoft\Internet Explorer
\Low Rights\ElevationPolicy
\{C2D64FF7-0AB8-4263-89C9-
EA3B0F8F050C}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Microsoft\Internet Explorer
\Low Rights\ElevationPolicy
\{E6B969FB-6D33-48D2-9061-
8BBD4899EB08}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Microsoft\Internet Explorer
\Low Rights\ElevationPolicy
\{F9189560-573A-4FDE-B055-
AE7B0F4CF080}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Microsoft\Internet Explorer
\SearchScopes\{9BB47C17-9C68
-4BB3-B188-DD9AF0FD2101}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Microsoft\Internet Explorer
\SearchScopes\{9BB47C17-9C68
-4BB3-B188-DD9AF0FD22}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Microsoft\Windows
\CurrentVersion\Explorer
\Browser Helper Objects
\{043C5167-00BB-4324-AF7E-
62013FAEDACF}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Microsoft\Windows
\CurrentVersion\Explorer
\Browser Helper Objects
\{11111111-1111-1111-1111-
110211701196}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Microsoft\Windows
\CurrentVersion\Explorer
\Browser Helper Objects
\{11111111-1111-1111-1111-
110211971101}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Microsoft\Windows
\CurrentVersion\Explorer
\Browser Helper Objects
\{293A63F7-C3B6-423A-9845-
901AC0A7EE6E}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Microsoft\Windows
\CurrentVersion\Explorer
\Browser Helper Objects
\{B939CF93-F2CB-443D-956C-
DC523D85C9DB}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Microsoft\Windows
\CurrentVersion\Explorer
\Browser Helper Objects
\{C2D64FF7-0AB8-4263-89C9-
EA3B0F8F050C}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Microsoft\Windows
\CurrentVersion\Uninstall
\{77236F9C-987C-40EC-832B-
5BD6181E4846}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Microsoft\Windows
\CurrentVersion\Uninstall
\PCTuto Maj_is1
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Microsoft\Windows
\CurrentVersion\Uninstall
\PcTuto_is1
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Microsoft\Windows
\CurrentVersion\Uninstall
\SearchTheWebARP
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Microsoft\Windows
\CurrentVersion\Uninstall
\Services x86
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Microsoft\Windows
\CurrentVersion\Uninstall
\service-x86
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Microsoft\Windows
\CurrentVersion\Uninstall
\UpdatePCTuto_is1
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Microsoft\Windows
\CurrentVersion\Uninstall
\Updater Service
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Microsoft\Windows
\CurrentVersion\Uninstall
\vShare
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Microsoft\Windows
\CurrentVersion\Uninstall
\Wincore MediaBar
Clé Supprimée : HKLM
\Software\YourFileDownloader
Clé Supprimée : HKLM
\SOFTWARE\Classes\CLSID
\{B939CF93-F2CB-443D-956C-
DC523D85C9DB}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{021B4049-F57D-4565-A693-
FD3B04786BFA}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{0362AA09-808D-48E9-B360-
FB51A8CBCE09}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{06844020-CD0B-3D3D-A7FE-
371153013E49}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{06DE5702-44CF-4B79-B4EF-
3DDF653358F5}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{0ADC01BB-303B-3F8E-93DA-
12C140E85460}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{10D3722F-23E6-3901-B6C1-
FF6567121920}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{1675E62B-F911-3B7B-A046-
EB57261212F3}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{192929F2-9273-3894-91B0-
F54671C4C861}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{20ED5AF7-D9C4-409E-9EB3-
D2A44A77FB6D}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{2932897E-3036-43D9-8A64-
B06447992065}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{2DE92D29-A042-3C37-BFF8-
07C7D8893EFA}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{32B80AD6-1214-45F4-994E-
78A5D482C000}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{3A8E103F-B2B7-3BEF-B3B0-
88E29B2420E4}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{43969E3F-3E7C-4911-A8F1-
79C6CA6AC731}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{477F210A-2A86-4666-9C4B-
1189634D2C84}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{478CE5D3-D38E-3FFE-8DBE-
8C4A0F1C4D8D}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{4897BBA6-48D9-468C-8EFA-
846275D7701B}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{48B7DA4E-69ED-39E3-BAD5-
3E3EFF22CFB0}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{55555555-5555-5555-5555-
550255705596}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{5982F405-44E4-3BBB-BAC4-
CF8141CBBC5C}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{5D8C3CC3-3C05-38A1-B244-
924A23115FE9}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{641593AF-D9FD-30F7-B783-
36E16F7A2E08}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{66666666-6666-6666-6666-
660266706696}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{711FC48A-1356-3932-94D8-
A8B733DBC7E4}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{72227B7F-1F02-3560-95F5-
592E68BACC0C}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{7B5E8CE3-4722-4C0E-A236-
A6FF731BEF37}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{890D4F59-5ED0-3CB4-8E0E-
74A5A86E7ED0}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{8C68913C-AC3C-4494-8B9C-
984D87C85003}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{8D019513-083F-4AA5-933F-
7D43A6DA82C4}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{923F6FB8-A390-370E-A0D2-
DD505432481D}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{9BBB26EF-B178-35D6-9D3D-
B485F4279FE5}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{A62DDBE0-8D2A-339A-B089-
8CBCC5CD322A}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{A82AD04D-0B8E-3A49-947B-
6A69A8A9C96D}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{ADEB3CC9-A05D-4FCC-BD09-
9025456AA3EA}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{B06D4521-D09C-3F41-8E39-
9D784CCA2A75}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{C06DAD42-6F39-4CE1-83CC-
9A8B9105E556}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{C2E799D0-43A5-3477-8A98-
FC5F3677F35C}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{C815E3DA-0823-49B0-9270-
D1771D58B317}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{D16107CD-2AD5-46A8-BA59-
303B7C32C500}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{D25B101F-8188-3B43-9D85-
201F372BC205}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{D2BA7595-5E44-3F1E-880F-
03B3139FA5ED}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{D35F5C81-17D9-3E1C-A1FC-
4472542E1D25}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{D8FA96CA-B250-312C-AF34-
4FF1DD72589D}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{DAFC1E63-3359-416D-9BC2-
E7DCA6F7B0F3}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{DC5E5C44-80FD-3697-9E65-
9F286D92F3E7}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{E1B4C9DE-D741-385F-981E-
6745FACE6F01}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{E2ED56B6-35FC-4484-9530-
EC87FB458E78}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{E7B623F5-9715-3F9F-A671-
D1485A39F8A2}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{ED916A7B-7C68-3198-B87D-
2DABC30A5587}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{EFA1BDB2-BB3D-3D9A-8EB5-
D0D22E0F64F4}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{F4CBF4DD-F8FE-35BA-BB7E-
68304DAAB70B}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{FC32005D-E27C-32E0-ADFA-
152F598B75E7}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{FF871E51-2655-4D06-AED5-
745962A96B32}
Clé Supprimée : HKLM
\SOFTWARE\DataMngr
Clé Supprimée : HKLM
\SOFTWARE\Microsoft\Internet
Explorer\Low Rights
\ElevationPolicy\{424624F4-
C5DD-4E1D-BDD0-1E9C9B7799CC}
Clé Supprimée : HKLM
\SOFTWARE\Microsoft\Internet
Explorer\Low Rights
\ElevationPolicy\{7F000001-
DB8E-F89C-2FEC-49BF726F8C12}
Clé Supprimée : HKLM
\SOFTWARE\Microsoft\Internet
Explorer\Low Rights
\ElevationPolicy\{9C8A3CA5-
889E-4554-BEEC-EC0876E4E96A}
Clé Supprimée : HKLM
\SOFTWARE\Microsoft\Internet
Explorer\Low Rights
\ElevationPolicy\{F9189560-
573A-4FDE-B055-AE7B0F4CF080}
Clé Supprimée : HKLM
\SOFTWARE\Microsoft\Internet
Explorer\SearchScopes
\{9BB47C17-9C68-4BB3-B188-
DD9AF0FD2101}
Clé Supprimée : HKLM
\SOFTWARE\Microsoft\Internet
Explorer\SearchScopes
\{9BB47C17-9C68-4BB3-B188-
DD9AF0FD22}
Clé Supprimée : HKLM
\SOFTWARE\Microsoft\Windows
\CurrentVersion\Explorer
\Browser Helper Objects
\{B939CF93-F2CB-443D-956C-
DC523D85C9DB}
Donnée Supprimée : [x64]
HKLM\..\Windows
[AppInit_DLLs] = C:
\PROGRA~2\BEARSH~1\MediaBar
\Datamngr\x64\datamngr.dll
Donnée Supprimée : [x64]
HKLM\..\Windows
[AppInit_DLLs] = C:
\PROGRA~2\BEARSH~1\MediaBar
\Datamngr\x64\IEBHO.dll
Valeur Supprimée : HKCU
\Software\Microsoft\Internet
Explorer\Toolbar\WebBrowser
[{043C5167-00BB-4324-AF7E-
62013FAEDACF}]
Valeur Supprimée : HKCU
\Software\Mozilla\Firefox
\Extensions
[speedanalysis@SpeedAnalysis.
com]
Valeur Supprimée : HKLM
\SOFTWARE\Microsoft\Windows
\CurrentVersion\Run
[comnetwork]
Valeur Supprimée : HKLM
\SOFTWARE\Microsoft\Windows
\CurrentVersion\Run
[DataMngr]
Valeur Supprimée : HKLM
\SOFTWARE\Microsoft\Windows
\CurrentVersion\Run [PcTuto]
Valeur Supprimée : HKLM
\SOFTWARE\Mozilla\Firefox
\Extensions
[speedanalysis@SpeedAnalysis.
com]
Valeur Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Microsoft\Internet Explorer
\Toolbar [{043C5167-00BB-
4324-AF7E-62013FAEDACF}]
Valeur Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Microsoft\Internet Explorer
\Toolbar [{C2D64FF7-0AB8-
4263-89C9-EA3B0F8F050C}]
Valeur Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Microsoft\Internet Explorer
\Toolbar [10]
Valeur Supprimée : HKLM
\SOFTWARE\Microsoft\Internet
Explorer\Toolbar [10]
***** [Navigateurs] *****
-\\ Internet Explorer
v10.0.9200.16611
Remplacé : [HKCU\Software
\Microsoft\Internet Explorer
\Main - Start Page] =
hxxp://www2.delta-
search.com/?
affID=119776&babsrc=HP_ss&mnt
rId=8AC8001E64782DBB -->
hxxp://www.google.com
-\\ Google Chrome
v27.0.1453.116
Fichier : C:\Users\usqger
\AppData\Local\Google\Chrome
\User Data\Default
\Preferences
Supprimée [l.2958] : homepage
= "hxxp://www2.delta-
search.com/?
affID=119776&babsrc=HP_ss&mnt
rId=8AC8001E64782DBB",
Supprimée [l.3650] :
urls_to_restore_on_startup =
[ "hxxp://www2.delta-
search.com/?
affID=119776&babsrc=HP_ss&mnt
rI[...]
*************************
AdwCleaner[S1].txt - [30895
octets] - [05/07/2013
19:30:03]
########## EOF - C:
\AdwCleaner[S1].txt - [30956
octets] ##########
5 juil. 2013 à 20:38