Nationzoom
Fermé
Claryss
Messages postés
6
Date d'inscription
mardi 19 février 2013
Statut
Membre
Dernière intervention
3 janvier 2014
-
3 janv. 2014 à 18:05
H.A.W.X Messages postés 1037 Date d'inscription mardi 26 février 2013 Statut Membre Dernière intervention 3 mai 2015 - 3 janv. 2014 à 20:23
H.A.W.X Messages postés 1037 Date d'inscription mardi 26 février 2013 Statut Membre Dernière intervention 3 mai 2015 - 3 janv. 2014 à 20:23
10 réponses
H.A.W.X
Messages postés
1037
Date d'inscription
mardi 26 février 2013
Statut
Membre
Dernière intervention
3 mai 2015
72
3 janv. 2014 à 18:06
3 janv. 2014 à 18:06
Bonsoir,
On va faire un scan global pour déterminer ou est l'infection :)
~ http://www.sosvirus.net/farbar-recovery-scan-tool-canned-speech-frst-t995.html#p6274
J'attends tes rapports ;)
On va faire un scan global pour déterminer ou est l'infection :)
~ http://www.sosvirus.net/farbar-recovery-scan-tool-canned-speech-frst-t995.html#p6274
J'attends tes rapports ;)
Claryss
Messages postés
6
Date d'inscription
mardi 19 février 2013
Statut
Membre
Dernière intervention
3 janvier 2014
3 janv. 2014 à 18:23
3 janv. 2014 à 18:23
Là je ne comprends pas bien..., déjà on me déconseille de le télécharger, ce dont je ne m'occupe pas et par la suite je vois qu'il veut me réinstaller nationzoom...
H.A.W.X
Messages postés
1037
Date d'inscription
mardi 26 février 2013
Statut
Membre
Dernière intervention
3 mai 2015
72
3 janv. 2014 à 18:33
3 janv. 2014 à 18:33
Tu tombe surs quel page stp ?
Claryss
Messages postés
6
Date d'inscription
mardi 19 février 2013
Statut
Membre
Dernière intervention
3 janvier 2014
3 janv. 2014 à 18:43
3 janv. 2014 à 18:43
J'ai essayer de télécharger avec le lien que tu m'as donné...
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question
H.A.W.X
Messages postés
1037
Date d'inscription
mardi 26 février 2013
Statut
Membre
Dernière intervention
3 mai 2015
72
3 janv. 2014 à 18:45
3 janv. 2014 à 18:45
Ce n'est pas précis comme réponse :(
Colle moi l'url de ta barre d'adresse stp
Colle moi l'url de ta barre d'adresse stp
Claryss
Messages postés
6
Date d'inscription
mardi 19 février 2013
Statut
Membre
Dernière intervention
3 janvier 2014
3 janv. 2014 à 18:56
3 janv. 2014 à 18:56
http://www.sosvirus.net/farbar-recovery-scan-tool-canned-speech-frst-t995.html#p6274
H.A.W.X
Messages postés
1037
Date d'inscription
mardi 26 février 2013
Statut
Membre
Dernière intervention
3 mai 2015
72
3 janv. 2014 à 19:03
3 janv. 2014 à 19:03
Et bien cette page est entièrement sans dangé, il suffit que tu lises et tu faces :)
Qu'es ce que tu ne comprend pas ?
Qu'es ce que tu ne comprend pas ?
Claryss
Messages postés
6
Date d'inscription
mardi 19 février 2013
Statut
Membre
Dernière intervention
3 janvier 2014
3 janv. 2014 à 19:17
3 janv. 2014 à 19:17
Voilà j'ai réussi...
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 03-01-2014
Ran by Denise (administrator) on DENISE-PC on 03-01-2014 19:11:59
Running from C:\Users\Denise\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: French Standard
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Microsoft Corporation) C:\Windows\System32\StikyNot.exe
(IncrediMail, Ltd.) C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
(Dropbox, Inc.) C:\Users\Denise\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Sun Microsystems, Inc.) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(IncrediMail, Ltd.) C:\Program Files (x86)\IncrediMail\Bin\ImApp.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Microsoft Corporation) K:\Films\Microsoft-Word-2007-portable\Microsoft Word 2007 portable\Microsoft Word 2007.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(BitTorrent Inc.) C:\Users\Denise\AppData\Roaming\uTorrent\uTorrent.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil64_11_9_900_170_ActiveX.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [MSC] - C:\Program Files\Microsoft Security Client\msseces.exe [1266912 2013-10-23] (Microsoft Corporation)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59280 2012-10-11] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2012-10-25] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [252848 2012-07-03] (Sun Microsystems, Inc.)
HKLM-x32\...\Run: [HP Software Update] - C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe [49208 2011-10-28] (Hewlett-Packard)
HKLM-x32\...\Run: [] - [x]
HKCU\...\Run: [swg] - C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2012-12-11] (Google Inc.)
HKCU\...\Run: [RESTART_STICKY_NOTES] - C:\Windows\System32\StikyNot.exe [427520 2009-07-14] (Microsoft Corporation)
HKCU\...\Run: [IncrediMail] - C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe [367016 2014-01-02] (IncrediMail, Ltd.)
Startup: C:\Users\Denise\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Denise\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = https://www.msn.com/fr-fr?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x14A60E431EE0CD01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = fr
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/toolbar/ie8/sidebar.html
URLSearchHook: HKCU - (No Name) - {05eeb91a-aef7-4f8a-978f-fb83e7b03f8e} - No File
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
SearchScopes: HKCU - DefaultScope {051C9CFC-1D5B-49A1-AC16-DA6565A1E010} URL = https://www.google.com{searchTerms}
SearchScopes: HKCU - {051C9CFC-1D5B-49A1-AC16-DA6565A1E010} URL = https://www.google.com{searchTerms}
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\smart web printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Programme d'aide de l'Assistant de connexion au compte Microsoft - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\smart web printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKCU - No Name - {05EEB91A-AEF7-4F8A-978F-FB83E7B03F8E} - No File
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll No File
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll No File
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1
FireFox:
========
FF ProfilePath: C:\Users\Denise\AppData\Roaming\Mozilla\Firefox\Profiles\xnqpyh2j.default
FF Homepage: hxxp://www.orange.fr/portail
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1206147.dll (Adobe Systems, Inc.)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.17.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.17.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazon-france.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\cnrtl-tlfi-fr.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-france.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-france.xml
FF Extension: Supreme Savings - C:\Users\Denise\AppData\Roaming\Mozilla\Firefox\Profiles\xnqpyh2j.default\Extensions\crossriderapp19962@crossrider.com
FF Extension: FrameFox - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{D6F4FFAF-E3C9-4f3d-AD5B-F78CD969D7BF}
FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF HKCU\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
Chrome:
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
==================== Services (Whitelisted) =================
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2013-10-23] (Microsoft Corporation)
R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [348376 2013-10-23] (Microsoft Corporation)
S3 WajamUpdater; "C:\Program Files (x86)\Wajam\Updater\WajamUpdater.exe" [x]
==================== Drivers (Whitelisted) ====================
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [248240 2013-09-27] (Microsoft Corporation)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-07-17] ()
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [134944 2013-09-27] (Microsoft Corporation)
R3 Sftfs; C:\Windows\System32\DRIVERS\Sftfswin7.sys [768680 2013-06-26] (Microsoft Corporation)
R3 Sftplay; C:\Windows\System32\DRIVERS\Sftplaywin7.sys [273576 2013-06-26] (Microsoft Corporation)
R3 Sftredir; C:\Windows\System32\DRIVERS\Sftredirwin7.sys [29352 2013-06-26] (Microsoft Corporation)
R3 Sftvol; C:\Windows\System32\DRIVERS\Sftvolwin7.sys [23208 2013-06-26] (Microsoft Corporation)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-01-03 19:11 - 2014-01-03 19:12 - 00012717 _____ C:\Users\Denise\Desktop\FRST.txt
2014-01-03 19:11 - 2014-01-03 19:11 - 00000000 ____D C:\FRST
2014-01-03 19:08 - 2014-01-03 19:08 - 01931750 _____ (Farbar) C:\Users\Denise\Desktop\FRST64.exe
2014-01-03 16:56 - 2014-01-03 16:56 - 00001802 _____ C:\sc-cleaner.txt
2014-01-03 16:55 - 2014-01-03 16:55 - 00406264 _____ (Bleeping Computer, LLC) C:\Users\Denise\Desktop\sc-cleaner.exe
2014-01-03 16:52 - 2014-01-03 16:53 - 01233962 _____ C:\Users\Denise\Desktop\adwcleaner(1).exe
2014-01-03 15:22 - 2014-01-03 16:54 - 00000000 ____D C:\AdwCleaner
2014-01-03 15:22 - 2014-01-03 15:22 - 01233962 _____ C:\Users\Denise\Desktop\adwcleaner.exe
2014-01-03 15:10 - 2014-01-03 15:10 - 00001960 _____ C:\Windows\PFRO.log
2014-01-02 14:37 - 2014-01-02 14:37 - 00013141 _____ C:\Users\Denise\Desktop\50 Photo Projects.pdf.torrent
2013-12-31 14:21 - 2013-12-31 14:21 - 00008868 _____ C:\Users\Denise\Documents\CD 2 gravé.dxp
2013-12-28 16:27 - 2014-01-03 16:57 - 00000336 _____ C:\Windows\setupact.log
2013-12-28 16:27 - 2013-12-28 16:27 - 00000000 _____ C:\Windows\setuperr.log
2013-12-26 17:49 - 2013-12-26 17:49 - 00000831 _____ C:\Users\Public\Desktop\CCleaner.lnk
2013-12-26 14:56 - 2013-12-26 14:56 - 00000000 ____D C:\Windows\fr
2013-12-26 14:54 - 2013-12-26 14:54 - 00000000 ____D C:\Program Files\Windows Live
2013-12-26 14:54 - 2013-02-05 22:06 - 00057840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fssfltr.sys
2013-12-26 12:41 - 2013-12-26 17:35 - 00000000 ____D C:\Users\Denise\AppData\Roaming\Skype
2013-12-26 12:41 - 2013-12-26 17:35 - 00000000 ____D C:\ProgramData\Skype
2013-12-19 10:26 - 2013-12-19 10:26 - 00018549 _____ C:\Users\Denise\Desktop\Glaces.Et.Desserts.Glaces.French.Pdf.torrent
2013-12-15 15:04 - 2013-12-15 15:04 - 00047546 _____ C:\Users\Denise\Desktop\Promos Samsung FR - Votre participation à la promotion.htm
2013-12-15 15:04 - 2013-12-15 15:04 - 00000000 ____D C:\Users\Denise\Desktop\Promos Samsung FR - Votre participation à la promotion_fichiers
2013-12-11 20:35 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2013-12-11 20:35 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2013-12-11 20:35 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2013-12-11 20:35 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2013-12-11 20:34 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-11 20:34 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-11 20:34 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-12-11 20:34 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-12-11 20:34 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-11 20:34 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-11 20:34 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-11 20:34 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-11 20:34 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-11 20:34 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-12-11 20:34 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-11 20:34 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-11 20:34 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-11 20:34 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-11 20:34 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-11 20:34 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-12-11 20:34 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-12-11 20:34 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-11 20:34 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-12-11 20:34 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-12-11 20:34 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-12-11 20:34 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-11 20:34 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-11 20:34 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-12-11 20:34 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-12-11 20:34 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-11 20:34 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-11 20:34 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-11 20:34 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-12-11 20:34 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-12-11 20:34 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-12-11 10:50 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-12-11 10:50 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-12-11 10:50 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-12-11 10:50 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-12-11 10:50 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2013-12-11 10:50 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2013-12-11 10:50 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-12-11 10:50 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-12-11 10:50 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2013-12-11 10:49 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2013-12-11 10:49 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2013-12-11 10:49 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2013-12-11 10:49 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2013-12-11 10:49 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2013-12-11 10:49 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2013-12-11 10:49 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2013-12-11 10:49 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2013-12-11 10:49 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2013-12-11 10:49 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2013-12-07 12:21 - 2013-12-07 12:22 - 00000000 ____D C:\Windows\SysWOW64\Adobe
2013-12-07 08:13 - 2013-12-07 08:13 - 00387564 _____ C:\Users\Denise\Documents\Auchan - Compte utilisateur.htm
2013-12-07 08:13 - 2013-12-07 08:13 - 00000000 ____D C:\Users\Denise\Documents\Auchan - Compte utilisateur_fichiers
==================== One Month Modified Files and Folders =======
2014-01-03 19:12 - 2014-01-03 19:11 - 00012717 _____ C:\Users\Denise\Desktop\FRST.txt
2014-01-03 19:11 - 2014-01-03 19:11 - 00000000 ____D C:\FRST
2014-01-03 19:11 - 2012-12-22 11:22 - 00000000 ____D C:\Users\Denise\AppData\Roaming\uTorrent
2014-01-03 19:08 - 2014-01-03 19:08 - 01931750 _____ (Farbar) C:\Users\Denise\Desktop\FRST64.exe
2014-01-03 18:41 - 2012-12-11 23:17 - 01648105 _____ C:\Windows\WindowsUpdate.log
2014-01-03 18:26 - 2012-12-22 09:38 - 00001002 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-03 18:24 - 2012-12-11 23:30 - 00001068 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-01-03 17:04 - 2009-07-14 05:45 - 00022064 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-03 17:04 - 2009-07-14 05:45 - 00022064 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-03 16:58 - 2013-11-23 17:18 - 00000000 ___RD C:\Users\Denise\Dropbox
2014-01-03 16:58 - 2013-11-23 17:13 - 00000000 ____D C:\Users\Denise\AppData\Roaming\Dropbox
2014-01-03 16:57 - 2013-12-28 16:27 - 00000336 _____ C:\Windows\setupact.log
2014-01-03 16:57 - 2012-12-11 23:30 - 00001064 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-01-03 16:57 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-03 16:56 - 2014-01-03 16:56 - 00001802 _____ C:\sc-cleaner.txt
2014-01-03 16:55 - 2014-01-03 16:55 - 00406264 _____ (Bleeping Computer, LLC) C:\Users\Denise\Desktop\sc-cleaner.exe
2014-01-03 16:54 - 2014-01-03 15:22 - 00000000 ____D C:\AdwCleaner
2014-01-03 16:53 - 2014-01-03 16:52 - 01233962 _____ C:\Users\Denise\Desktop\adwcleaner(1).exe
2014-01-03 16:42 - 2012-12-11 23:22 - 00001014 _____ C:\Users\Denise\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-01-03 15:22 - 2014-01-03 15:22 - 01233962 _____ C:\Users\Denise\Desktop\adwcleaner.exe
2014-01-03 15:10 - 2014-01-03 15:10 - 00001960 _____ C:\Windows\PFRO.log
2014-01-03 14:56 - 2012-12-11 23:22 - 00000000 ___RD C:\Users\Denise\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-03 14:10 - 2013-01-07 12:50 - 00000000 ___RD C:\Users\Denise\A...Réduire photos
2014-01-02 14:37 - 2014-01-02 14:37 - 00013141 _____ C:\Users\Denise\Desktop\50 Photo Projects.pdf.torrent
2013-12-31 14:24 - 2013-01-07 09:14 - 00000000 ____D C:\Users\Denise\AppData\Roaming\SoftGrid Client
2013-12-31 14:21 - 2013-12-31 14:21 - 00008868 _____ C:\Users\Denise\Documents\CD 2 gravé.dxp
2013-12-30 01:58 - 2012-12-11 23:31 - 00102256 _____ C:\Users\Denise\AppData\Local\GDIPFONTCACHEV1.DAT
2013-12-28 16:27 - 2013-12-28 16:27 - 00000000 _____ C:\Windows\setuperr.log
2013-12-27 10:41 - 2012-12-11 23:31 - 00000000 ____D C:\Users\Denise\AppData\Roaming\vlc
2013-12-26 20:35 - 2012-12-22 09:43 - 00000000 ____D C:\Users\Denise\AppData\Roaming\HpUpdate
2013-12-26 18:13 - 2012-12-11 23:13 - 00000000 ____D C:\Windows\Panther
2013-12-26 17:49 - 2013-12-26 17:49 - 00000831 _____ C:\Users\Public\Desktop\CCleaner.lnk
2013-12-26 17:49 - 2012-12-11 23:30 - 00000000 ____D C:\Program Files\CCleaner
2013-12-26 17:35 - 2013-12-26 12:41 - 00000000 ____D C:\Users\Denise\AppData\Roaming\Skype
2013-12-26 17:35 - 2013-12-26 12:41 - 00000000 ____D C:\ProgramData\Skype
2013-12-26 17:07 - 2012-12-11 23:30 - 00000000 ____D C:\Users\Denise\AppData\Local\Google
2013-12-26 17:01 - 2013-11-23 17:18 - 00001029 _____ C:\Users\Denise\Desktop\Dropbox.lnk
2013-12-26 17:01 - 2013-11-23 17:15 - 00000000 ____D C:\Users\Denise\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2013-12-26 16:24 - 2012-12-11 16:43 - 00000000 ____D C:\Program Files (x86)\Windows Live
2013-12-26 15:45 - 2012-12-11 16:41 - 00000000 ____D C:\Users\Denise\AppData\Local\Windows Live
2013-12-26 14:56 - 2013-12-26 14:56 - 00000000 ____D C:\Windows\fr
2013-12-26 14:54 - 2013-12-26 14:54 - 00000000 ____D C:\Program Files\Windows Live
2013-12-22 12:54 - 2012-12-11 23:21 - 00000000 ____D C:\Users\Denise
2013-12-19 10:26 - 2013-12-19 10:26 - 00018549 _____ C:\Users\Denise\Desktop\Glaces.Et.Desserts.Glaces.French.Pdf.torrent
2013-12-17 16:26 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2013-12-16 08:34 - 2013-09-03 13:33 - 00001075 _____ C:\Users\Public\Desktop\VLC media player.lnk
2013-12-15 15:13 - 2013-01-08 08:10 - 00000000 ____D C:\Users\Denise\Documents\Divers à garder
2013-12-15 15:04 - 2013-12-15 15:04 - 00047546 _____ C:\Users\Denise\Desktop\Promos Samsung FR - Votre participation à la promotion.htm
2013-12-15 15:04 - 2013-12-15 15:04 - 00000000 ____D C:\Users\Denise\Desktop\Promos Samsung FR - Votre participation à la promotion_fichiers
2013-12-14 10:34 - 2013-01-02 19:20 - 00000000 ____D C:\Users\Denise\Blog cuisine
2013-12-14 03:02 - 2013-07-16 12:29 - 00000000 ____D C:\Windows\system32\MRT
2013-12-14 03:00 - 2013-01-04 13:43 - 90708896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-12-12 12:43 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-12-12 09:23 - 2011-04-12 10:16 - 00704916 _____ C:\Windows\system32\perfh00C.dat
2013-12-12 09:23 - 2011-04-12 10:16 - 00130964 _____ C:\Windows\system32\perfc00C.dat
2013-12-12 09:23 - 2009-07-14 06:13 - 01551488 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-12 07:31 - 2009-07-14 05:45 - 00391480 _____ C:\Windows\system32\FNTCACHE.DAT
2013-12-11 09:26 - 2012-12-22 09:38 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-12-11 09:26 - 2012-12-22 09:38 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-12-11 09:26 - 2012-12-22 09:38 - 00003940 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-12-07 12:50 - 2013-04-22 10:09 - 00001009 _____ C:\Users\Denise\Desktop\Papanasi.odt - Raccourci.lnk
2013-12-07 12:22 - 2013-12-07 12:21 - 00000000 ____D C:\Windows\SysWOW64\Adobe
2013-12-07 08:13 - 2013-12-07 08:13 - 00387564 _____ C:\Users\Denise\Documents\Auchan - Compte utilisateur.htm
2013-12-07 08:13 - 2013-12-07 08:13 - 00000000 ____D C:\Users\Denise\Documents\Auchan - Compte utilisateur_fichiers
2013-12-06 10:26 - 2013-11-26 13:55 - 00000000 ____D C:\Users\Denise\Desktop\Recettes
Some content of TEMP:
====================
C:\Users\Denise\AppData\Local\Temp\31264uninstall.exe
C:\Users\Denise\AppData\Local\Temp\BackupSetup.exe
C:\Users\Denise\AppData\Local\Temp\Mobogenie_Setup_2.1.23_515.exe
C:\Users\Denise\AppData\Local\Temp\nceobazluyzkmw.exe
C:\Users\Denise\AppData\Local\Temp\OptimizerPro.exe
C:\Users\Denise\AppData\Local\Temp\smt_nationzoom_20131128171426.exe
C:\Users\Denise\AppData\Local\Temp\Sqlite3.dll
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-12-30 00:33
==================== End Of Log ============================
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 03-01-2014
Ran by Denise (administrator) on DENISE-PC on 03-01-2014 19:11:59
Running from C:\Users\Denise\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: French Standard
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Microsoft Corporation) C:\Windows\System32\StikyNot.exe
(IncrediMail, Ltd.) C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
(Dropbox, Inc.) C:\Users\Denise\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Sun Microsystems, Inc.) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(IncrediMail, Ltd.) C:\Program Files (x86)\IncrediMail\Bin\ImApp.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Microsoft Corporation) K:\Films\Microsoft-Word-2007-portable\Microsoft Word 2007 portable\Microsoft Word 2007.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(BitTorrent Inc.) C:\Users\Denise\AppData\Roaming\uTorrent\uTorrent.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil64_11_9_900_170_ActiveX.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [MSC] - C:\Program Files\Microsoft Security Client\msseces.exe [1266912 2013-10-23] (Microsoft Corporation)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59280 2012-10-11] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2012-10-25] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [252848 2012-07-03] (Sun Microsystems, Inc.)
HKLM-x32\...\Run: [HP Software Update] - C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe [49208 2011-10-28] (Hewlett-Packard)
HKLM-x32\...\Run: [] - [x]
HKCU\...\Run: [swg] - C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2012-12-11] (Google Inc.)
HKCU\...\Run: [RESTART_STICKY_NOTES] - C:\Windows\System32\StikyNot.exe [427520 2009-07-14] (Microsoft Corporation)
HKCU\...\Run: [IncrediMail] - C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe [367016 2014-01-02] (IncrediMail, Ltd.)
Startup: C:\Users\Denise\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Denise\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = https://www.msn.com/fr-fr?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x14A60E431EE0CD01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = fr
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/toolbar/ie8/sidebar.html
URLSearchHook: HKCU - (No Name) - {05eeb91a-aef7-4f8a-978f-fb83e7b03f8e} - No File
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
SearchScopes: HKCU - DefaultScope {051C9CFC-1D5B-49A1-AC16-DA6565A1E010} URL = https://www.google.com{searchTerms}
SearchScopes: HKCU - {051C9CFC-1D5B-49A1-AC16-DA6565A1E010} URL = https://www.google.com{searchTerms}
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\smart web printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Programme d'aide de l'Assistant de connexion au compte Microsoft - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\smart web printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKCU - No Name - {05EEB91A-AEF7-4F8A-978F-FB83E7B03F8E} - No File
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll No File
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll No File
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1
FireFox:
========
FF ProfilePath: C:\Users\Denise\AppData\Roaming\Mozilla\Firefox\Profiles\xnqpyh2j.default
FF Homepage: hxxp://www.orange.fr/portail
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1206147.dll (Adobe Systems, Inc.)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.17.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.17.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazon-france.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\cnrtl-tlfi-fr.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-france.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-france.xml
FF Extension: Supreme Savings - C:\Users\Denise\AppData\Roaming\Mozilla\Firefox\Profiles\xnqpyh2j.default\Extensions\crossriderapp19962@crossrider.com
FF Extension: FrameFox - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{D6F4FFAF-E3C9-4f3d-AD5B-F78CD969D7BF}
FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF HKCU\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
Chrome:
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
==================== Services (Whitelisted) =================
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2013-10-23] (Microsoft Corporation)
R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [348376 2013-10-23] (Microsoft Corporation)
S3 WajamUpdater; "C:\Program Files (x86)\Wajam\Updater\WajamUpdater.exe" [x]
==================== Drivers (Whitelisted) ====================
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [248240 2013-09-27] (Microsoft Corporation)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-07-17] ()
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [134944 2013-09-27] (Microsoft Corporation)
R3 Sftfs; C:\Windows\System32\DRIVERS\Sftfswin7.sys [768680 2013-06-26] (Microsoft Corporation)
R3 Sftplay; C:\Windows\System32\DRIVERS\Sftplaywin7.sys [273576 2013-06-26] (Microsoft Corporation)
R3 Sftredir; C:\Windows\System32\DRIVERS\Sftredirwin7.sys [29352 2013-06-26] (Microsoft Corporation)
R3 Sftvol; C:\Windows\System32\DRIVERS\Sftvolwin7.sys [23208 2013-06-26] (Microsoft Corporation)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-01-03 19:11 - 2014-01-03 19:12 - 00012717 _____ C:\Users\Denise\Desktop\FRST.txt
2014-01-03 19:11 - 2014-01-03 19:11 - 00000000 ____D C:\FRST
2014-01-03 19:08 - 2014-01-03 19:08 - 01931750 _____ (Farbar) C:\Users\Denise\Desktop\FRST64.exe
2014-01-03 16:56 - 2014-01-03 16:56 - 00001802 _____ C:\sc-cleaner.txt
2014-01-03 16:55 - 2014-01-03 16:55 - 00406264 _____ (Bleeping Computer, LLC) C:\Users\Denise\Desktop\sc-cleaner.exe
2014-01-03 16:52 - 2014-01-03 16:53 - 01233962 _____ C:\Users\Denise\Desktop\adwcleaner(1).exe
2014-01-03 15:22 - 2014-01-03 16:54 - 00000000 ____D C:\AdwCleaner
2014-01-03 15:22 - 2014-01-03 15:22 - 01233962 _____ C:\Users\Denise\Desktop\adwcleaner.exe
2014-01-03 15:10 - 2014-01-03 15:10 - 00001960 _____ C:\Windows\PFRO.log
2014-01-02 14:37 - 2014-01-02 14:37 - 00013141 _____ C:\Users\Denise\Desktop\50 Photo Projects.pdf.torrent
2013-12-31 14:21 - 2013-12-31 14:21 - 00008868 _____ C:\Users\Denise\Documents\CD 2 gravé.dxp
2013-12-28 16:27 - 2014-01-03 16:57 - 00000336 _____ C:\Windows\setupact.log
2013-12-28 16:27 - 2013-12-28 16:27 - 00000000 _____ C:\Windows\setuperr.log
2013-12-26 17:49 - 2013-12-26 17:49 - 00000831 _____ C:\Users\Public\Desktop\CCleaner.lnk
2013-12-26 14:56 - 2013-12-26 14:56 - 00000000 ____D C:\Windows\fr
2013-12-26 14:54 - 2013-12-26 14:54 - 00000000 ____D C:\Program Files\Windows Live
2013-12-26 14:54 - 2013-02-05 22:06 - 00057840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fssfltr.sys
2013-12-26 12:41 - 2013-12-26 17:35 - 00000000 ____D C:\Users\Denise\AppData\Roaming\Skype
2013-12-26 12:41 - 2013-12-26 17:35 - 00000000 ____D C:\ProgramData\Skype
2013-12-19 10:26 - 2013-12-19 10:26 - 00018549 _____ C:\Users\Denise\Desktop\Glaces.Et.Desserts.Glaces.French.Pdf.torrent
2013-12-15 15:04 - 2013-12-15 15:04 - 00047546 _____ C:\Users\Denise\Desktop\Promos Samsung FR - Votre participation à la promotion.htm
2013-12-15 15:04 - 2013-12-15 15:04 - 00000000 ____D C:\Users\Denise\Desktop\Promos Samsung FR - Votre participation à la promotion_fichiers
2013-12-11 20:35 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2013-12-11 20:35 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2013-12-11 20:35 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2013-12-11 20:35 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2013-12-11 20:34 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-11 20:34 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-11 20:34 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-12-11 20:34 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-12-11 20:34 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-11 20:34 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-11 20:34 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-11 20:34 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-11 20:34 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-11 20:34 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-12-11 20:34 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-11 20:34 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-11 20:34 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-11 20:34 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-11 20:34 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-11 20:34 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-12-11 20:34 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-12-11 20:34 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-11 20:34 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-12-11 20:34 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-12-11 20:34 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-12-11 20:34 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-11 20:34 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-11 20:34 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-12-11 20:34 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-12-11 20:34 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-11 20:34 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-11 20:34 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-11 20:34 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-12-11 20:34 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-12-11 20:34 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-12-11 10:50 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-12-11 10:50 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-12-11 10:50 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-12-11 10:50 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-12-11 10:50 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2013-12-11 10:50 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2013-12-11 10:50 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-12-11 10:50 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-12-11 10:50 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2013-12-11 10:49 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2013-12-11 10:49 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2013-12-11 10:49 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2013-12-11 10:49 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2013-12-11 10:49 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2013-12-11 10:49 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2013-12-11 10:49 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2013-12-11 10:49 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2013-12-11 10:49 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2013-12-11 10:49 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2013-12-07 12:21 - 2013-12-07 12:22 - 00000000 ____D C:\Windows\SysWOW64\Adobe
2013-12-07 08:13 - 2013-12-07 08:13 - 00387564 _____ C:\Users\Denise\Documents\Auchan - Compte utilisateur.htm
2013-12-07 08:13 - 2013-12-07 08:13 - 00000000 ____D C:\Users\Denise\Documents\Auchan - Compte utilisateur_fichiers
==================== One Month Modified Files and Folders =======
2014-01-03 19:12 - 2014-01-03 19:11 - 00012717 _____ C:\Users\Denise\Desktop\FRST.txt
2014-01-03 19:11 - 2014-01-03 19:11 - 00000000 ____D C:\FRST
2014-01-03 19:11 - 2012-12-22 11:22 - 00000000 ____D C:\Users\Denise\AppData\Roaming\uTorrent
2014-01-03 19:08 - 2014-01-03 19:08 - 01931750 _____ (Farbar) C:\Users\Denise\Desktop\FRST64.exe
2014-01-03 18:41 - 2012-12-11 23:17 - 01648105 _____ C:\Windows\WindowsUpdate.log
2014-01-03 18:26 - 2012-12-22 09:38 - 00001002 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-03 18:24 - 2012-12-11 23:30 - 00001068 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-01-03 17:04 - 2009-07-14 05:45 - 00022064 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-03 17:04 - 2009-07-14 05:45 - 00022064 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-03 16:58 - 2013-11-23 17:18 - 00000000 ___RD C:\Users\Denise\Dropbox
2014-01-03 16:58 - 2013-11-23 17:13 - 00000000 ____D C:\Users\Denise\AppData\Roaming\Dropbox
2014-01-03 16:57 - 2013-12-28 16:27 - 00000336 _____ C:\Windows\setupact.log
2014-01-03 16:57 - 2012-12-11 23:30 - 00001064 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-01-03 16:57 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-03 16:56 - 2014-01-03 16:56 - 00001802 _____ C:\sc-cleaner.txt
2014-01-03 16:55 - 2014-01-03 16:55 - 00406264 _____ (Bleeping Computer, LLC) C:\Users\Denise\Desktop\sc-cleaner.exe
2014-01-03 16:54 - 2014-01-03 15:22 - 00000000 ____D C:\AdwCleaner
2014-01-03 16:53 - 2014-01-03 16:52 - 01233962 _____ C:\Users\Denise\Desktop\adwcleaner(1).exe
2014-01-03 16:42 - 2012-12-11 23:22 - 00001014 _____ C:\Users\Denise\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-01-03 15:22 - 2014-01-03 15:22 - 01233962 _____ C:\Users\Denise\Desktop\adwcleaner.exe
2014-01-03 15:10 - 2014-01-03 15:10 - 00001960 _____ C:\Windows\PFRO.log
2014-01-03 14:56 - 2012-12-11 23:22 - 00000000 ___RD C:\Users\Denise\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-03 14:10 - 2013-01-07 12:50 - 00000000 ___RD C:\Users\Denise\A...Réduire photos
2014-01-02 14:37 - 2014-01-02 14:37 - 00013141 _____ C:\Users\Denise\Desktop\50 Photo Projects.pdf.torrent
2013-12-31 14:24 - 2013-01-07 09:14 - 00000000 ____D C:\Users\Denise\AppData\Roaming\SoftGrid Client
2013-12-31 14:21 - 2013-12-31 14:21 - 00008868 _____ C:\Users\Denise\Documents\CD 2 gravé.dxp
2013-12-30 01:58 - 2012-12-11 23:31 - 00102256 _____ C:\Users\Denise\AppData\Local\GDIPFONTCACHEV1.DAT
2013-12-28 16:27 - 2013-12-28 16:27 - 00000000 _____ C:\Windows\setuperr.log
2013-12-27 10:41 - 2012-12-11 23:31 - 00000000 ____D C:\Users\Denise\AppData\Roaming\vlc
2013-12-26 20:35 - 2012-12-22 09:43 - 00000000 ____D C:\Users\Denise\AppData\Roaming\HpUpdate
2013-12-26 18:13 - 2012-12-11 23:13 - 00000000 ____D C:\Windows\Panther
2013-12-26 17:49 - 2013-12-26 17:49 - 00000831 _____ C:\Users\Public\Desktop\CCleaner.lnk
2013-12-26 17:49 - 2012-12-11 23:30 - 00000000 ____D C:\Program Files\CCleaner
2013-12-26 17:35 - 2013-12-26 12:41 - 00000000 ____D C:\Users\Denise\AppData\Roaming\Skype
2013-12-26 17:35 - 2013-12-26 12:41 - 00000000 ____D C:\ProgramData\Skype
2013-12-26 17:07 - 2012-12-11 23:30 - 00000000 ____D C:\Users\Denise\AppData\Local\Google
2013-12-26 17:01 - 2013-11-23 17:18 - 00001029 _____ C:\Users\Denise\Desktop\Dropbox.lnk
2013-12-26 17:01 - 2013-11-23 17:15 - 00000000 ____D C:\Users\Denise\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2013-12-26 16:24 - 2012-12-11 16:43 - 00000000 ____D C:\Program Files (x86)\Windows Live
2013-12-26 15:45 - 2012-12-11 16:41 - 00000000 ____D C:\Users\Denise\AppData\Local\Windows Live
2013-12-26 14:56 - 2013-12-26 14:56 - 00000000 ____D C:\Windows\fr
2013-12-26 14:54 - 2013-12-26 14:54 - 00000000 ____D C:\Program Files\Windows Live
2013-12-22 12:54 - 2012-12-11 23:21 - 00000000 ____D C:\Users\Denise
2013-12-19 10:26 - 2013-12-19 10:26 - 00018549 _____ C:\Users\Denise\Desktop\Glaces.Et.Desserts.Glaces.French.Pdf.torrent
2013-12-17 16:26 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2013-12-16 08:34 - 2013-09-03 13:33 - 00001075 _____ C:\Users\Public\Desktop\VLC media player.lnk
2013-12-15 15:13 - 2013-01-08 08:10 - 00000000 ____D C:\Users\Denise\Documents\Divers à garder
2013-12-15 15:04 - 2013-12-15 15:04 - 00047546 _____ C:\Users\Denise\Desktop\Promos Samsung FR - Votre participation à la promotion.htm
2013-12-15 15:04 - 2013-12-15 15:04 - 00000000 ____D C:\Users\Denise\Desktop\Promos Samsung FR - Votre participation à la promotion_fichiers
2013-12-14 10:34 - 2013-01-02 19:20 - 00000000 ____D C:\Users\Denise\Blog cuisine
2013-12-14 03:02 - 2013-07-16 12:29 - 00000000 ____D C:\Windows\system32\MRT
2013-12-14 03:00 - 2013-01-04 13:43 - 90708896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-12-12 12:43 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-12-12 09:23 - 2011-04-12 10:16 - 00704916 _____ C:\Windows\system32\perfh00C.dat
2013-12-12 09:23 - 2011-04-12 10:16 - 00130964 _____ C:\Windows\system32\perfc00C.dat
2013-12-12 09:23 - 2009-07-14 06:13 - 01551488 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-12 07:31 - 2009-07-14 05:45 - 00391480 _____ C:\Windows\system32\FNTCACHE.DAT
2013-12-11 09:26 - 2012-12-22 09:38 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-12-11 09:26 - 2012-12-22 09:38 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-12-11 09:26 - 2012-12-22 09:38 - 00003940 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-12-07 12:50 - 2013-04-22 10:09 - 00001009 _____ C:\Users\Denise\Desktop\Papanasi.odt - Raccourci.lnk
2013-12-07 12:22 - 2013-12-07 12:21 - 00000000 ____D C:\Windows\SysWOW64\Adobe
2013-12-07 08:13 - 2013-12-07 08:13 - 00387564 _____ C:\Users\Denise\Documents\Auchan - Compte utilisateur.htm
2013-12-07 08:13 - 2013-12-07 08:13 - 00000000 ____D C:\Users\Denise\Documents\Auchan - Compte utilisateur_fichiers
2013-12-06 10:26 - 2013-11-26 13:55 - 00000000 ____D C:\Users\Denise\Desktop\Recettes
Some content of TEMP:
====================
C:\Users\Denise\AppData\Local\Temp\31264uninstall.exe
C:\Users\Denise\AppData\Local\Temp\BackupSetup.exe
C:\Users\Denise\AppData\Local\Temp\Mobogenie_Setup_2.1.23_515.exe
C:\Users\Denise\AppData\Local\Temp\nceobazluyzkmw.exe
C:\Users\Denise\AppData\Local\Temp\OptimizerPro.exe
C:\Users\Denise\AppData\Local\Temp\smt_nationzoom_20131128171426.exe
C:\Users\Denise\AppData\Local\Temp\Sqlite3.dll
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-12-30 00:33
==================== End Of Log ============================
H.A.W.X
Messages postés
1037
Date d'inscription
mardi 26 février 2013
Statut
Membre
Dernière intervention
3 mai 2015
72
3 janv. 2014 à 19:52
3 janv. 2014 à 19:52
Il m'en manque stp addition.txt :)
Claryss
Messages postés
6
Date d'inscription
mardi 19 février 2013
Statut
Membre
Dernière intervention
3 janvier 2014
3 janv. 2014 à 20:14
3 janv. 2014 à 20:14
Je ne comprends pas, j'ai fait un copier-coller de toute la liste...
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 03-01-2014
Ran by Denise at 2014-01-03 19:12:50
Running from C:\Users\Denise\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Microsoft Security Essentials (Enabled - Up to date) {641105E6-77ED-3F35-A304-765193BCB75F}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Microsoft Security Essentials (Enabled - Up to date) {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}
==================== Installed Programs ======================
µTorrent (HKCU Version: 3.3.2.30303 - BitTorrent Inc.)
64 Bit HP CIO Components Installer (Version: 7.2.8 - Hewlett-Packard) Hidden
Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Photoshop Lightroom 4.4 64-bit (Version: 4.4.1 - Adobe)
Adobe Reader X (10.1.8) - Français (x32 Version: 10.1.8 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.0 (x32 Version: 12.0.6.147 - Adobe Systems, Inc.)
Apple Application Support (x32 Version: 2.3 - Apple Inc.)
Apple Software Update (x32 Version: 2.1.3.127 - Apple Inc.)
B010 (x32 Version: 140.0.344.000 - Hewlett-Packard) Hidden
BufferChm (x32 Version: 140.0.212.000 - Hewlett-Packard) Hidden
CCleaner (Version: 4.09 - Piriform)
CDBurnerXP (Version: 4.4.0.2905 - CDBurnerXP)
CDBurnerXP (x32 Version: 4.5.2.4214 - CDBurnerXP)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Destinations (x32 Version: 140.0.167.000 - Hewlett-Packard) Hidden
DeviceDiscovery (x32 Version: 140.0.212.000 - Hewlett-Packard) Hidden
Dropbox (HKCU Version: 2.4.10 - Dropbox, Inc.)
FILEminimizer Pictures (x32 Version: - balesio AG)
FlashPlayer (x32 Version: 1.6.8 - Tuguu SL)
Galerie de photos (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden
Google Toolbar for Internet Explorer (x32 Version: 7.4.3607.2246 - Google Inc.)
Google Update Helper (x32 Version: 1.3.21.123 - Google Inc.) Hidden
GPBaseService2 (x32 Version: 140.0.211.000 - Hewlett-Packard) Hidden
gPhotoShow v1.6.4 (x32 Version: - Gianpaolo Bottin)
HP Customer Participation Program 14.0 (Version: 14.0 - HP)
HP Imaging Device Functions 14.0 (Version: 14.0 - HP)
HP Photosmart B010 All-In-One Driver Software 14.0 Rel. 7 (Version: 14.0 - HP)
HP Smart Web Printing 4.60 (Version: 4.60 - HP)
HP Solution Center 14.0 (Version: 14.0 - HP)
HP Update (x32 Version: 5.005.000.001 - Hewlett-Packard)
HPDiagnosticAlert (x32 Version: 1.00.0000 - Microsoft) Hidden
HPPhotoGadget (x32 Version: 140.0.524.000 - Hewlett-Packard) Hidden
HPProductAssistant (x32 Version: 140.0.212.000 - Hewlett-Packard) Hidden
HPSSupply (x32 Version: 140.0.211.000 - Hewlett-Packard) Hidden
IncrediMail (x32 Version: 6.3.9.5274 - IncrediMail) Hidden
IncrediMail 2.0 (x32 Version: 6.3.9.5274 - IncrediMail Ltd.)
Java 7 Update 17 (x32 Version: 7.0.170 - Oracle)
Java 7 Update 25 (64-bit) (Version: 7.0.250 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.0 - Sun Microsystems, Inc.) Hidden
Junk Mail filter update (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
LibreOffice 3.3 (x32 Version: 3.3.6 - LibreOffice)
MarketResearch (x32 Version: 140.0.212.000 - Hewlett-Packard) Hidden
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile FRA Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Camera Codec Pack (Version: 16.4.1734.1104 - Microsoft Corporation)
Microsoft Digital Image Library 9 - Blocker (x32 Version: 9.00.0000 - Microsoft Corporation) Hidden
Microsoft Office « Démarrer en un clic » 2010 (Version: 14.0.6122.5000 - Microsoft Corporation) Hidden
Microsoft Office « Démarrer en un clic » 2010 (x32 Version: 14.0.6122.5000 - Microsoft Corporation)
Microsoft Office Starter 2010 - Français (x32 Version: 14.0.6129.5001 - Microsoft Corporation)
Microsoft Photo Premium 10 (x32 Version: 10.0.0706 - Microsoft Corporation)
Microsoft Photo Premium 10 (x32 Version: 10.0.0706 - Microsoft Corporation) Hidden
Microsoft Picture It! Library 10 (x32 Version: 10.0.0706 - Microsoft Corporation) Hidden
Microsoft Security Client (Version: 4.4.0304.0 - Microsoft Corporation) Hidden
Microsoft Security Essentials (Version: 4.4.304.0 - Microsoft Corporation)
Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)
Module linguistique Microsoft .NET Framework 4 Client Profile FRA (Version: 4.0.30319 - Microsoft Corporation)
Movie Maker (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Mozilla Firefox 22.0 (x86 fr) (x32 Version: 22.0 - Mozilla)
Mozilla Maintenance Service (x32 Version: 22.0 - Mozilla)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden
MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0 - Microsoft Corporation)
Objectif Tarot 4 (x32 Version: 4.0 - Daniel Bonniot)
Photo Common (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Photo Gallery (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Photo Notifier and Animation Creator (x32 Version: 1.0.0.1009 - IncrediMail Ltd.)
Photo Notifier and Animation Creator (x32 Version: 1.0.0.1009 - Nom de votre société) Hidden
PhotoFiltre 7 (HKCU Version: - )
Photorécit 3 pour Windows (x32 Version: 3.0.1115.15 - Microsoft Corporation)
Picasa 3 (x32 Version: 3.9 - Google, Inc.)
PS_AIO_07_B010_SW_Min (x32 Version: 140.0.224.000 - Hewlett-Packard) Hidden
QuickTime (x32 Version: 7.73.80.64 - Apple Inc.)
Realtek Ethernet Controller Driver (x32 Version: 7.52.203.2012 - Realtek)
Scan (x32 Version: 140.0.80.000 - Hewlett-Packard) Hidden
Shop for HP Supplies (Version: 14.0 - HP)
SmartWebPrinting (x32 Version: 140.0.186.000 - Hewlett-Packard) Hidden
SolutionCenter (x32 Version: 140.0.214.000 - Hewlett-Packard) Hidden
Status (x32 Version: 140.0.256.000 - Hewlett-Packard) Hidden
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Toolbox (x32 Version: 140.0.428.000 - Hewlett-Packard) Hidden
TrayApp (x32 Version: 140.0.212.000 - Hewlett-Packard) Hidden
Tuto µTorrent1.0.0.0 (x32 Version: - PCTuto)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3 - Microsoft Corporation)
VLC media player 2.1.2 (x32 Version: 2.1.2 - VideoLAN)
WebReg (x32 Version: 140.0.212.017 - Hewlett-Packard) Hidden
Windows Live (x32 Version: 16.4.3508.0205 - Microsoft Corporation)
Windows Live (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Communications Platform (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Family Safety (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Family Safety (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4311.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
WordBiz 1.8.7 (x32 Version: - )
==================== Restore Points =========================
25-12-2013 17:36:47 Windows Update
26-12-2013 11:33:09 RegClean Pro jeu., déc. 26, 13 12:33
26-12-2013 13:49:59 Windows Live Essentials
26-12-2013 13:50:44 DirectX est installé
26-12-2013 13:51:23 DirectX est installé
26-12-2013 13:52:05 DirectX est installé
26-12-2013 13:53:48 WLSetup
26-12-2013 16:32:19 Removed Skype(TM) 6.3
29-12-2013 11:31:49 Windows Update
02-01-2014 11:52:10 Windows Update
02-01-2014 17:23:48 Sauvegarde Windows
03-01-2014 13:47:55 Uniblue SpeedUpMyPC installation
==================== Hosts content: ==========================
2009-07-14 03:34 - 2013-05-20 15:15 - 00001108 ____A C:\Windows\system32\Drivers\etc\hosts
0.0.0.0 boxore.com
0.0.0.0 www.boxore.com
0.0.0.0 boxore.org
0.0.0.0 www.boxore.org
0.0.0.0 boxore.net
0.0.0.0 www.boxore.net
0.0.0.0 dlmanager.com
0.0.0.0 www.dlmanager.com
0.0.0.0 dlmanager.org
0.0.0.0 www.dlmanager.org
0.0.0.0 dlmanager.net
0.0.0.0 www.dlmanager.net
==================== Scheduled Tasks (whitelisted) =============
Task: {07CCF9A6-36F5-4F6B-A85B-614D076FDD51} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {0C4FCC97-0098-44D5-B4FB-4C6C1F11CE06} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-12-17] (Piriform Ltd)
Task: {11FCAD94-CAD8-4716-B975-65E14DEA4F75} - System32\Tasks\Updater19962.exe => C:\Users\Denise\AppData\Local\Updater19962\Updater19962.exe [2013-10-15] (Innovative Apps) <==== ATTENTION
Task: {12694149-9F18-4C08-9344-70F8FFC25917} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-12-11] (Google Inc.)
Task: {17163883-C36E-493F-84E0-B62CE25E184D} - \SoftwareUpdateTaskMachineUA No Task File
Task: {1B3D7B28-3287-4BD0-B1A2-4BEBEC94B7D5} - \LaunchApp No Task File
Task: {24AC6281-72FC-40F0-AF0C-E14A77E1CBB3} - \DuuquUpdateTaskMachineCore No Task File
Task: {281DCB8B-424B-49A6-9698-2C0D108A179D} - \Plus-HD-3.5-chromeinstaller No Task File
Task: {2CD54587-E9D3-4EC4-9849-978F810516F9} - \Plus-HD-3.5-enabler No Task File
Task: {3C80BD78-AD5D-406E-A2CD-58FEAD1DDCF6} - System32\Tasks\{CEA295EE-DDC4-4FC4-83FC-A110D3A19DCF} => Iexplore.exe http://ui.skype.com/ui/0/6.3.73.105.457/fr/abandoninstall?page=tsWLM
Task: {3CB10C67-A9D1-4316-B7A5-758503D227BF} - \Plus-HD-3.5-codedownloader No Task File
Task: {6B8FF63A-7BDE-4B3E-B505-41CECF98D9D0} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {AB9511E9-8BBB-4429-88F4-031F7022D0EB} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-11] (Adobe Systems Incorporated)
Task: {BDBFF124-E1DC-42A4-B492-F632893DBCFF} - \Plus-HD-3.5-updater No Task File
Task: {D17C2996-4843-4FE0-AB9F-8D6C4AA44258} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-12-11] (Google Inc.)
Task: {DBB19467-9861-4F99-976D-41C635B52341} - System32\Tasks\{C6700621-9FCC-4AD3-B9B8-FA096990B6D9} => C:\Program Files (x86)\WordBiz\WordBiz.exe [2012-12-16] (Internet Scrabble Club)
Task: {EC728F4A-205C-41D6-8CBF-B8E80A652126} - \Plus-HD-3.5-firefoxinstaller No Task File
Task: {F0E5B05C-06D9-4A9D-8A6F-42C2B3B167D6} - \SoftwareUpdateTaskMachineCore No Task File
Task: {F7CC9D9D-B939-4707-85FF-0E89CFB81C8A} - \DuuquUpdateTaskMachineUA No Task File
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) =============
2014-01-02 17:39 - 2014-01-02 17:39 - 00033128 _____ () C:\Program Files (x86)\IncrediMail\Bin\IMHttpComm.dll
2014-01-02 17:39 - 2014-01-02 17:39 - 00072104 _____ () C:\Program Files (x86)\IncrediMail\Bin\wlessfp1.dll
2014-01-02 17:39 - 2014-01-02 17:39 - 00268712 _____ () C:\Program Files (x86)\IncrediMail\Bin\ImLookExU.dll
2012-12-27 16:40 - 2012-12-27 16:40 - 00109040 _____ () C:\Program Files (x86)\IncrediMail\Bin\pmc.dll
2014-01-02 17:39 - 2014-01-02 17:39 - 00133544 _____ () C:\Program Files (x86)\IncrediMail\Bin\ImComUtlU.dll
2013-08-23 20:01 - 2013-08-23 20:01 - 25100288 _____ () C:\Users\Denise\AppData\Roaming\Dropbox\bin\libcef.dll
2014-01-02 17:39 - 2014-01-02 17:39 - 00080296 _____ () C:\Program Files (x86)\IncrediMail\bin\ImAppRU.dll
==================== Alternate Data Streams (whitelisted) =========
==================== Safe Mode (whitelisted) ===================
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (01/03/2014 07:12:08 PM) (Source: SideBySide) (User: )
Description: La création du contexte d'activation a échoué pour « Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1 ».
Assembly dépendant Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0" introuvable.
Utilisez sxstrace.exe pour un diagnostic détaillé.
Error: (01/03/2014 07:11:55 PM) (Source: SideBySide) (User: )
Description: La création du contexte d'activation a échoué pour « Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1 ».
Assembly dépendant Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0" introuvable.
Utilisez sxstrace.exe pour un diagnostic détaillé.
Error: (01/03/2014 07:11:55 PM) (Source: SideBySide) (User: )
Description: La création du contexte d'activation a échoué pour « Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1 ».
Assembly dépendant Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0" introuvable.
Utilisez sxstrace.exe pour un diagnostic détaillé.
Error: (01/03/2014 07:09:31 PM) (Source: SideBySide) (User: )
Description: La création du contexte d'activation a échoué pour « Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1 ».
Assembly dépendant Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0" introuvable.
Utilisez sxstrace.exe pour un diagnostic détaillé.
Error: (01/03/2014 07:08:52 PM) (Source: SideBySide) (User: )
Description: La création du contexte d'activation a échoué pour « Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1 ».
Assembly dépendant Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0" introuvable.
Utilisez sxstrace.exe pour un diagnostic détaillé.
Error: (01/03/2014 07:08:52 PM) (Source: SideBySide) (User: )
Description: La création du contexte d'activation a échoué pour « Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1 ».
Assembly dépendant Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0" introuvable.
Utilisez sxstrace.exe pour un diagnostic détaillé.
Error: (01/03/2014 07:06:38 PM) (Source: SideBySide) (User: )
Description: La création du contexte d'activation a échoué pour « Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1 ».
Assembly dépendant Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0" introuvable.
Utilisez sxstrace.exe pour un diagnostic détaillé.
Error: (01/03/2014 07:05:48 PM) (Source: SideBySide) (User: )
Description: La création du contexte d'activation a échoué pour « Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1 ».
Assembly dépendant Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0" introuvable.
Utilisez sxstrace.exe pour un diagnostic détaillé.
Error: (01/03/2014 07:05:48 PM) (Source: SideBySide) (User: )
Description: La création du contexte d'activation a échoué pour « Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1 ».
Assembly dépendant Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0" introuvable.
Utilisez sxstrace.exe pour un diagnostic détaillé.
Error: (01/03/2014 07:05:48 PM) (Source: SideBySide) (User: )
Description: La création du contexte d'activation a échoué pour « Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1 ».
Assembly dépendant Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0" introuvable.
Utilisez sxstrace.exe pour un diagnostic détaillé.
System errors:
=============
Error: (01/03/2014 04:58:00 PM) (Source: Disk) (User: )
Description: Le pilote a détecté une erreur du contrôleur sur \Device\Harddisk5\DR5.
Error: (01/03/2014 04:57:58 PM) (Source: Disk) (User: )
Description: Le pilote a détecté une erreur du contrôleur sur \Device\Harddisk3\DR3.
Error: (01/03/2014 04:57:56 PM) (Source: Disk) (User: )
Description: Le pilote a détecté une erreur du contrôleur sur \Device\Harddisk6\DR6.
Error: (01/03/2014 04:57:54 PM) (Source: Disk) (User: )
Description: Le pilote a détecté une erreur du contrôleur sur \Device\Harddisk4\DR4.
Error: (01/03/2014 04:57:27 PM) (Source: atikmdag) (User: )
Description: Display is not active
Error: (01/03/2014 04:57:27 PM) (Source: atikmdag) (User: )
Description: CPLIB :: General - Invalid Parameter
Error: (01/03/2014 04:48:16 PM) (Source: atikmdag) (User: )
Description: Display is not active
Error: (01/03/2014 04:48:16 PM) (Source: atikmdag) (User: )
Description: CPLIB :: General - Invalid Parameter
Error: (01/03/2014 03:10:36 PM) (Source: Service Control Manager) (User: )
Description: Le service Software Update Service (supdate) n'a pas pu démarrer en raison de l'erreur :
%%2
Error: (01/03/2014 03:10:23 PM) (Source: atikmdag) (User: )
Description: Display is not active
Microsoft Office Sessions:
=========================
Error: (01/03/2014 07:12:08 PM) (Source: SideBySide)(User: )
Description: Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"C:\Program Files (x86)\IncrediMail\Bin\MFC80U.DLL
Error: (01/03/2014 07:11:55 PM) (Source: SideBySide)(User: )
Description: Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"C:\Program Files (x86)\IncrediMail\Bin\MFC80U.DLL
Error: (01/03/2014 07:11:55 PM) (Source: SideBySide)(User: )
Description: Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"C:\Program Files (x86)\IncrediMail\Bin\MFC80U.DLL
Error: (01/03/2014 07:09:31 PM) (Source: SideBySide)(User: )
Description: Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"C:\Program Files (x86)\IncrediMail\Bin\MFC80U.DLL
Error: (01/03/2014 07:08:52 PM) (Source: SideBySide)(User: )
Description: Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"C:\Program Files (x86)\IncrediMail\Bin\MFC80U.DLL
Error: (01/03/2014 07:08:52 PM) (Source: SideBySide)(User: )
Description: Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"C:\Program Files (x86)\IncrediMail\Bin\MFC80U.DLL
Error: (01/03/2014 07:06:38 PM) (Source: SideBySide)(User: )
Description: Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"C:\Program Files (x86)\IncrediMail\Bin\MFC80U.DLL
Error: (01/03/2014 07:05:48 PM) (Source: SideBySide)(User: )
Description: Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"C:\Program Files (x86)\IncrediMail\Bin\MFC80U.DLL
Error: (01/03/2014 07:05:48 PM) (Source: SideBySide)(User: )
Description: Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"C:\Program Files (x86)\IncrediMail\Bin\MFC80U.DLL
Error: (01/03/2014 07:05:48 PM) (Source: SideBySide)(User: )
Description: Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"C:\Program Files (x86)\IncrediMail\Bin\MFC80U.DLL
==================== Memory info ===========================
Percentage of memory in use: 23%
Total physical RAM: 7934.12 MB
Available physical RAM: 6046.63 MB
Total Pagefile: 15866.41 MB
Available Pagefile: 13729.07 MB
Total Virtual: 8192 MB
Available Virtual: 8191.8 MB
==================== Drives ================================
Drive c: (WINDOWS 7) (Fixed) (Total:465.66 GB) (Free:286.28 GB) NTFS
Drive d: (DONNEES) (Fixed) (Total:465.76 GB) (Free:241.2 GB) NTFS
Drive k: (MEMUP 500GB) (Fixed) (Total:465.53 GB) (Free:271.59 GB) FAT32
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: C5B434A1)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=466 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: C5B434AA)
Partition 1: (Not Active) - (Size=466 GB) - (Type=07 NTFS)
========================================================
Disk: 2 (Size: 466 GB) (Disk ID: 000B939E)
Partition 1: (Not Active) - (Size=466 GB) - (Type=0C)
==================== End Of Log ============================
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 03-01-2014
Ran by Denise at 2014-01-03 19:12:50
Running from C:\Users\Denise\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Microsoft Security Essentials (Enabled - Up to date) {641105E6-77ED-3F35-A304-765193BCB75F}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Microsoft Security Essentials (Enabled - Up to date) {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}
==================== Installed Programs ======================
µTorrent (HKCU Version: 3.3.2.30303 - BitTorrent Inc.)
64 Bit HP CIO Components Installer (Version: 7.2.8 - Hewlett-Packard) Hidden
Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Photoshop Lightroom 4.4 64-bit (Version: 4.4.1 - Adobe)
Adobe Reader X (10.1.8) - Français (x32 Version: 10.1.8 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.0 (x32 Version: 12.0.6.147 - Adobe Systems, Inc.)
Apple Application Support (x32 Version: 2.3 - Apple Inc.)
Apple Software Update (x32 Version: 2.1.3.127 - Apple Inc.)
B010 (x32 Version: 140.0.344.000 - Hewlett-Packard) Hidden
BufferChm (x32 Version: 140.0.212.000 - Hewlett-Packard) Hidden
CCleaner (Version: 4.09 - Piriform)
CDBurnerXP (Version: 4.4.0.2905 - CDBurnerXP)
CDBurnerXP (x32 Version: 4.5.2.4214 - CDBurnerXP)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Destinations (x32 Version: 140.0.167.000 - Hewlett-Packard) Hidden
DeviceDiscovery (x32 Version: 140.0.212.000 - Hewlett-Packard) Hidden
Dropbox (HKCU Version: 2.4.10 - Dropbox, Inc.)
FILEminimizer Pictures (x32 Version: - balesio AG)
FlashPlayer (x32 Version: 1.6.8 - Tuguu SL)
Galerie de photos (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden
Google Toolbar for Internet Explorer (x32 Version: 7.4.3607.2246 - Google Inc.)
Google Update Helper (x32 Version: 1.3.21.123 - Google Inc.) Hidden
GPBaseService2 (x32 Version: 140.0.211.000 - Hewlett-Packard) Hidden
gPhotoShow v1.6.4 (x32 Version: - Gianpaolo Bottin)
HP Customer Participation Program 14.0 (Version: 14.0 - HP)
HP Imaging Device Functions 14.0 (Version: 14.0 - HP)
HP Photosmart B010 All-In-One Driver Software 14.0 Rel. 7 (Version: 14.0 - HP)
HP Smart Web Printing 4.60 (Version: 4.60 - HP)
HP Solution Center 14.0 (Version: 14.0 - HP)
HP Update (x32 Version: 5.005.000.001 - Hewlett-Packard)
HPDiagnosticAlert (x32 Version: 1.00.0000 - Microsoft) Hidden
HPPhotoGadget (x32 Version: 140.0.524.000 - Hewlett-Packard) Hidden
HPProductAssistant (x32 Version: 140.0.212.000 - Hewlett-Packard) Hidden
HPSSupply (x32 Version: 140.0.211.000 - Hewlett-Packard) Hidden
IncrediMail (x32 Version: 6.3.9.5274 - IncrediMail) Hidden
IncrediMail 2.0 (x32 Version: 6.3.9.5274 - IncrediMail Ltd.)
Java 7 Update 17 (x32 Version: 7.0.170 - Oracle)
Java 7 Update 25 (64-bit) (Version: 7.0.250 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.0 - Sun Microsystems, Inc.) Hidden
Junk Mail filter update (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
LibreOffice 3.3 (x32 Version: 3.3.6 - LibreOffice)
MarketResearch (x32 Version: 140.0.212.000 - Hewlett-Packard) Hidden
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile FRA Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Camera Codec Pack (Version: 16.4.1734.1104 - Microsoft Corporation)
Microsoft Digital Image Library 9 - Blocker (x32 Version: 9.00.0000 - Microsoft Corporation) Hidden
Microsoft Office « Démarrer en un clic » 2010 (Version: 14.0.6122.5000 - Microsoft Corporation) Hidden
Microsoft Office « Démarrer en un clic » 2010 (x32 Version: 14.0.6122.5000 - Microsoft Corporation)
Microsoft Office Starter 2010 - Français (x32 Version: 14.0.6129.5001 - Microsoft Corporation)
Microsoft Photo Premium 10 (x32 Version: 10.0.0706 - Microsoft Corporation)
Microsoft Photo Premium 10 (x32 Version: 10.0.0706 - Microsoft Corporation) Hidden
Microsoft Picture It! Library 10 (x32 Version: 10.0.0706 - Microsoft Corporation) Hidden
Microsoft Security Client (Version: 4.4.0304.0 - Microsoft Corporation) Hidden
Microsoft Security Essentials (Version: 4.4.304.0 - Microsoft Corporation)
Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)
Module linguistique Microsoft .NET Framework 4 Client Profile FRA (Version: 4.0.30319 - Microsoft Corporation)
Movie Maker (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Mozilla Firefox 22.0 (x86 fr) (x32 Version: 22.0 - Mozilla)
Mozilla Maintenance Service (x32 Version: 22.0 - Mozilla)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden
MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0 - Microsoft Corporation)
Objectif Tarot 4 (x32 Version: 4.0 - Daniel Bonniot)
Photo Common (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Photo Gallery (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Photo Notifier and Animation Creator (x32 Version: 1.0.0.1009 - IncrediMail Ltd.)
Photo Notifier and Animation Creator (x32 Version: 1.0.0.1009 - Nom de votre société) Hidden
PhotoFiltre 7 (HKCU Version: - )
Photorécit 3 pour Windows (x32 Version: 3.0.1115.15 - Microsoft Corporation)
Picasa 3 (x32 Version: 3.9 - Google, Inc.)
PS_AIO_07_B010_SW_Min (x32 Version: 140.0.224.000 - Hewlett-Packard) Hidden
QuickTime (x32 Version: 7.73.80.64 - Apple Inc.)
Realtek Ethernet Controller Driver (x32 Version: 7.52.203.2012 - Realtek)
Scan (x32 Version: 140.0.80.000 - Hewlett-Packard) Hidden
Shop for HP Supplies (Version: 14.0 - HP)
SmartWebPrinting (x32 Version: 140.0.186.000 - Hewlett-Packard) Hidden
SolutionCenter (x32 Version: 140.0.214.000 - Hewlett-Packard) Hidden
Status (x32 Version: 140.0.256.000 - Hewlett-Packard) Hidden
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Toolbox (x32 Version: 140.0.428.000 - Hewlett-Packard) Hidden
TrayApp (x32 Version: 140.0.212.000 - Hewlett-Packard) Hidden
Tuto µTorrent1.0.0.0 (x32 Version: - PCTuto)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3 - Microsoft Corporation)
VLC media player 2.1.2 (x32 Version: 2.1.2 - VideoLAN)
WebReg (x32 Version: 140.0.212.017 - Hewlett-Packard) Hidden
Windows Live (x32 Version: 16.4.3508.0205 - Microsoft Corporation)
Windows Live (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Communications Platform (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Family Safety (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Family Safety (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4311.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
WordBiz 1.8.7 (x32 Version: - )
==================== Restore Points =========================
25-12-2013 17:36:47 Windows Update
26-12-2013 11:33:09 RegClean Pro jeu., déc. 26, 13 12:33
26-12-2013 13:49:59 Windows Live Essentials
26-12-2013 13:50:44 DirectX est installé
26-12-2013 13:51:23 DirectX est installé
26-12-2013 13:52:05 DirectX est installé
26-12-2013 13:53:48 WLSetup
26-12-2013 16:32:19 Removed Skype(TM) 6.3
29-12-2013 11:31:49 Windows Update
02-01-2014 11:52:10 Windows Update
02-01-2014 17:23:48 Sauvegarde Windows
03-01-2014 13:47:55 Uniblue SpeedUpMyPC installation
==================== Hosts content: ==========================
2009-07-14 03:34 - 2013-05-20 15:15 - 00001108 ____A C:\Windows\system32\Drivers\etc\hosts
0.0.0.0 boxore.com
0.0.0.0 www.boxore.com
0.0.0.0 boxore.org
0.0.0.0 www.boxore.org
0.0.0.0 boxore.net
0.0.0.0 www.boxore.net
0.0.0.0 dlmanager.com
0.0.0.0 www.dlmanager.com
0.0.0.0 dlmanager.org
0.0.0.0 www.dlmanager.org
0.0.0.0 dlmanager.net
0.0.0.0 www.dlmanager.net
==================== Scheduled Tasks (whitelisted) =============
Task: {07CCF9A6-36F5-4F6B-A85B-614D076FDD51} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {0C4FCC97-0098-44D5-B4FB-4C6C1F11CE06} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-12-17] (Piriform Ltd)
Task: {11FCAD94-CAD8-4716-B975-65E14DEA4F75} - System32\Tasks\Updater19962.exe => C:\Users\Denise\AppData\Local\Updater19962\Updater19962.exe [2013-10-15] (Innovative Apps) <==== ATTENTION
Task: {12694149-9F18-4C08-9344-70F8FFC25917} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-12-11] (Google Inc.)
Task: {17163883-C36E-493F-84E0-B62CE25E184D} - \SoftwareUpdateTaskMachineUA No Task File
Task: {1B3D7B28-3287-4BD0-B1A2-4BEBEC94B7D5} - \LaunchApp No Task File
Task: {24AC6281-72FC-40F0-AF0C-E14A77E1CBB3} - \DuuquUpdateTaskMachineCore No Task File
Task: {281DCB8B-424B-49A6-9698-2C0D108A179D} - \Plus-HD-3.5-chromeinstaller No Task File
Task: {2CD54587-E9D3-4EC4-9849-978F810516F9} - \Plus-HD-3.5-enabler No Task File
Task: {3C80BD78-AD5D-406E-A2CD-58FEAD1DDCF6} - System32\Tasks\{CEA295EE-DDC4-4FC4-83FC-A110D3A19DCF} => Iexplore.exe http://ui.skype.com/ui/0/6.3.73.105.457/fr/abandoninstall?page=tsWLM
Task: {3CB10C67-A9D1-4316-B7A5-758503D227BF} - \Plus-HD-3.5-codedownloader No Task File
Task: {6B8FF63A-7BDE-4B3E-B505-41CECF98D9D0} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {AB9511E9-8BBB-4429-88F4-031F7022D0EB} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-11] (Adobe Systems Incorporated)
Task: {BDBFF124-E1DC-42A4-B492-F632893DBCFF} - \Plus-HD-3.5-updater No Task File
Task: {D17C2996-4843-4FE0-AB9F-8D6C4AA44258} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-12-11] (Google Inc.)
Task: {DBB19467-9861-4F99-976D-41C635B52341} - System32\Tasks\{C6700621-9FCC-4AD3-B9B8-FA096990B6D9} => C:\Program Files (x86)\WordBiz\WordBiz.exe [2012-12-16] (Internet Scrabble Club)
Task: {EC728F4A-205C-41D6-8CBF-B8E80A652126} - \Plus-HD-3.5-firefoxinstaller No Task File
Task: {F0E5B05C-06D9-4A9D-8A6F-42C2B3B167D6} - \SoftwareUpdateTaskMachineCore No Task File
Task: {F7CC9D9D-B939-4707-85FF-0E89CFB81C8A} - \DuuquUpdateTaskMachineUA No Task File
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) =============
2014-01-02 17:39 - 2014-01-02 17:39 - 00033128 _____ () C:\Program Files (x86)\IncrediMail\Bin\IMHttpComm.dll
2014-01-02 17:39 - 2014-01-02 17:39 - 00072104 _____ () C:\Program Files (x86)\IncrediMail\Bin\wlessfp1.dll
2014-01-02 17:39 - 2014-01-02 17:39 - 00268712 _____ () C:\Program Files (x86)\IncrediMail\Bin\ImLookExU.dll
2012-12-27 16:40 - 2012-12-27 16:40 - 00109040 _____ () C:\Program Files (x86)\IncrediMail\Bin\pmc.dll
2014-01-02 17:39 - 2014-01-02 17:39 - 00133544 _____ () C:\Program Files (x86)\IncrediMail\Bin\ImComUtlU.dll
2013-08-23 20:01 - 2013-08-23 20:01 - 25100288 _____ () C:\Users\Denise\AppData\Roaming\Dropbox\bin\libcef.dll
2014-01-02 17:39 - 2014-01-02 17:39 - 00080296 _____ () C:\Program Files (x86)\IncrediMail\bin\ImAppRU.dll
==================== Alternate Data Streams (whitelisted) =========
==================== Safe Mode (whitelisted) ===================
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (01/03/2014 07:12:08 PM) (Source: SideBySide) (User: )
Description: La création du contexte d'activation a échoué pour « Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1 ».
Assembly dépendant Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0" introuvable.
Utilisez sxstrace.exe pour un diagnostic détaillé.
Error: (01/03/2014 07:11:55 PM) (Source: SideBySide) (User: )
Description: La création du contexte d'activation a échoué pour « Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1 ».
Assembly dépendant Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0" introuvable.
Utilisez sxstrace.exe pour un diagnostic détaillé.
Error: (01/03/2014 07:11:55 PM) (Source: SideBySide) (User: )
Description: La création du contexte d'activation a échoué pour « Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1 ».
Assembly dépendant Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0" introuvable.
Utilisez sxstrace.exe pour un diagnostic détaillé.
Error: (01/03/2014 07:09:31 PM) (Source: SideBySide) (User: )
Description: La création du contexte d'activation a échoué pour « Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1 ».
Assembly dépendant Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0" introuvable.
Utilisez sxstrace.exe pour un diagnostic détaillé.
Error: (01/03/2014 07:08:52 PM) (Source: SideBySide) (User: )
Description: La création du contexte d'activation a échoué pour « Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1 ».
Assembly dépendant Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0" introuvable.
Utilisez sxstrace.exe pour un diagnostic détaillé.
Error: (01/03/2014 07:08:52 PM) (Source: SideBySide) (User: )
Description: La création du contexte d'activation a échoué pour « Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1 ».
Assembly dépendant Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0" introuvable.
Utilisez sxstrace.exe pour un diagnostic détaillé.
Error: (01/03/2014 07:06:38 PM) (Source: SideBySide) (User: )
Description: La création du contexte d'activation a échoué pour « Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1 ».
Assembly dépendant Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0" introuvable.
Utilisez sxstrace.exe pour un diagnostic détaillé.
Error: (01/03/2014 07:05:48 PM) (Source: SideBySide) (User: )
Description: La création du contexte d'activation a échoué pour « Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1 ».
Assembly dépendant Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0" introuvable.
Utilisez sxstrace.exe pour un diagnostic détaillé.
Error: (01/03/2014 07:05:48 PM) (Source: SideBySide) (User: )
Description: La création du contexte d'activation a échoué pour « Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1 ».
Assembly dépendant Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0" introuvable.
Utilisez sxstrace.exe pour un diagnostic détaillé.
Error: (01/03/2014 07:05:48 PM) (Source: SideBySide) (User: )
Description: La création du contexte d'activation a échoué pour « Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1 ».
Assembly dépendant Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0" introuvable.
Utilisez sxstrace.exe pour un diagnostic détaillé.
System errors:
=============
Error: (01/03/2014 04:58:00 PM) (Source: Disk) (User: )
Description: Le pilote a détecté une erreur du contrôleur sur \Device\Harddisk5\DR5.
Error: (01/03/2014 04:57:58 PM) (Source: Disk) (User: )
Description: Le pilote a détecté une erreur du contrôleur sur \Device\Harddisk3\DR3.
Error: (01/03/2014 04:57:56 PM) (Source: Disk) (User: )
Description: Le pilote a détecté une erreur du contrôleur sur \Device\Harddisk6\DR6.
Error: (01/03/2014 04:57:54 PM) (Source: Disk) (User: )
Description: Le pilote a détecté une erreur du contrôleur sur \Device\Harddisk4\DR4.
Error: (01/03/2014 04:57:27 PM) (Source: atikmdag) (User: )
Description: Display is not active
Error: (01/03/2014 04:57:27 PM) (Source: atikmdag) (User: )
Description: CPLIB :: General - Invalid Parameter
Error: (01/03/2014 04:48:16 PM) (Source: atikmdag) (User: )
Description: Display is not active
Error: (01/03/2014 04:48:16 PM) (Source: atikmdag) (User: )
Description: CPLIB :: General - Invalid Parameter
Error: (01/03/2014 03:10:36 PM) (Source: Service Control Manager) (User: )
Description: Le service Software Update Service (supdate) n'a pas pu démarrer en raison de l'erreur :
%%2
Error: (01/03/2014 03:10:23 PM) (Source: atikmdag) (User: )
Description: Display is not active
Microsoft Office Sessions:
=========================
Error: (01/03/2014 07:12:08 PM) (Source: SideBySide)(User: )
Description: Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"C:\Program Files (x86)\IncrediMail\Bin\MFC80U.DLL
Error: (01/03/2014 07:11:55 PM) (Source: SideBySide)(User: )
Description: Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"C:\Program Files (x86)\IncrediMail\Bin\MFC80U.DLL
Error: (01/03/2014 07:11:55 PM) (Source: SideBySide)(User: )
Description: Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"C:\Program Files (x86)\IncrediMail\Bin\MFC80U.DLL
Error: (01/03/2014 07:09:31 PM) (Source: SideBySide)(User: )
Description: Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"C:\Program Files (x86)\IncrediMail\Bin\MFC80U.DLL
Error: (01/03/2014 07:08:52 PM) (Source: SideBySide)(User: )
Description: Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"C:\Program Files (x86)\IncrediMail\Bin\MFC80U.DLL
Error: (01/03/2014 07:08:52 PM) (Source: SideBySide)(User: )
Description: Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"C:\Program Files (x86)\IncrediMail\Bin\MFC80U.DLL
Error: (01/03/2014 07:06:38 PM) (Source: SideBySide)(User: )
Description: Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"C:\Program Files (x86)\IncrediMail\Bin\MFC80U.DLL
Error: (01/03/2014 07:05:48 PM) (Source: SideBySide)(User: )
Description: Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"C:\Program Files (x86)\IncrediMail\Bin\MFC80U.DLL
Error: (01/03/2014 07:05:48 PM) (Source: SideBySide)(User: )
Description: Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"C:\Program Files (x86)\IncrediMail\Bin\MFC80U.DLL
Error: (01/03/2014 07:05:48 PM) (Source: SideBySide)(User: )
Description: Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"C:\Program Files (x86)\IncrediMail\Bin\MFC80U.DLL
==================== Memory info ===========================
Percentage of memory in use: 23%
Total physical RAM: 7934.12 MB
Available physical RAM: 6046.63 MB
Total Pagefile: 15866.41 MB
Available Pagefile: 13729.07 MB
Total Virtual: 8192 MB
Available Virtual: 8191.8 MB
==================== Drives ================================
Drive c: (WINDOWS 7) (Fixed) (Total:465.66 GB) (Free:286.28 GB) NTFS
Drive d: (DONNEES) (Fixed) (Total:465.76 GB) (Free:241.2 GB) NTFS
Drive k: (MEMUP 500GB) (Fixed) (Total:465.53 GB) (Free:271.59 GB) FAT32
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: C5B434A1)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=466 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: C5B434AA)
Partition 1: (Not Active) - (Size=466 GB) - (Type=07 NTFS)
========================================================
Disk: 2 (Size: 466 GB) (Disk ID: 000B939E)
Partition 1: (Not Active) - (Size=466 GB) - (Type=0C)
==================== End Of Log ============================
H.A.W.X
Messages postés
1037
Date d'inscription
mardi 26 février 2013
Statut
Membre
Dernière intervention
3 mai 2015
72
3 janv. 2014 à 20:23
3 janv. 2014 à 20:23
Cette fois c'est bon ;)
~ http://sosvirus.net/viewtopic.php?f=281&t=546&p=3291#p3291
~ http://sosvirus.net/viewtopic.php?f=281&t=546&p=3291#p3291
