Speed up

comment se debarrasser de speed up j'ai essayer tous les moyens il se reinstalle
je viens de refaire une analyse et voila leresultat

~ Rapport de ZHPDiag v2014.7.3.101 - Nicolas Coolman (03/07/2014)
~ Lancé par arlette (04/07/2014 19:26:41)
~ Adresse du Site Web https://nicolascoolman.eu
~ Adresse du Forum https://nicolascoolman.eu
~ Traduit par Nicolas Coolman
~ Etat de la version : Version à jour.
~ Liste blanche : Activée par le programme
~ Elévation des Privilèges : OK
~ User Account Control (UAC): Deactivate by user


---\\ Navigateurs Internet
MSIE: Internet Explorer v9.0.8112.16421
GCIE: Google Chrome v35.0.1916.153 (Defaut)

---\\ Informations sur les produits Windows
~ Langage: Français
Windows Vista (TM) Home Premium, 32-bit Service Pack 2 (Build 6002)
Windows Server License Manager Script : OK
~ Windows Operating System - Vista, OEM_COA_NSLP channel
Windows ID Activation : OK
~ Windows Partial Key : 7YBRM
Windows License : OK
Windows Automatic Updates : OK

---\\ Logiciels de protection du système
Malwarebytes Anti-Malware version 1.75.0.1300
Microsoft Security Client v2.1.1116.0

---\\ Logiciels d'optimisation du système
CCleaner v3.14

---\\ Logiciels de partage PeerToPeer

---\\ Surveillance de Logiciels
Adobe Flash Player 13 Plugin
Adobe Reader 9.5.5 - Français
Java 7 Update 45

---\\ Informations sur le système
~ Processor: x86 Family 15 Model 104 Stepping 1, AuthenticAMD
~ Operating System: 32 Bits
Boot mode: Normal (Normal boot)
Total RAM: 2046 MB (26% free)
System Restore: Activé (Enable)
System drive C: has 5 GB (8%) free of 51 GB

---\\ Mode de connexion au système
~ Computer Name: PC-DE-ARLETTE
~ User Name: arlette
~ All Users Names: arlette, Administrateur,
~ Unselected Option: O45,O61,O62,O65,O66,O80,O82,O89
Logged in as Administrator

---\\ Variables d'environnement
~ System Unit : C:\
~ %AppZHP% : C:\Users\arlette\AppData\Roaming\ZHP\
~ %AppData% : C:\Users\arlette\AppData\Roaming\
~ %Desktop% : C:\Users\arlette\Desktop\
~ %Favorites% : C:\Users\arlette\Favorites\
~ %LocalAppData% : C:\Users\arlette\AppData\Local\
~ %StartMenu% : C:\Users\arlette\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\

---\\ Enumération des unités disques
C: Hard drive, Flash drive, Thumb drive (Free 5 Go of 51 Go)
D: Hard drive, Flash drive, Thumb drive (Free 2 Go of 5 Go)
E: Hard drive, Flash drive, Thumb drive (Free 27 Go of 93 Go)
F: CD-ROM drive (Not Inserted)



---\\ Etat du Centre de Sécurité Windows
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: Modified
~ Security Center: 50 Legitimates Filtered in 00mn 00s



---\\ Recherche particulière de fichiers génériques
[MD5.D07D4C3038F3578FFCE1C0237F2A1253] - (.Microsoft Corporation - Explorateur Windows.) (.11/04/2009 - 07:27:36.) -- C:\Windows\Explorer.exe [2926592]
[MD5.101BA3EA053480BB5D957EF37C06B5ED] - (.Microsoft Corporation - Application de démarrage de Windows.) (.19/01/2008 - 08:33:37.) -- C:\Windows\System32\Wininit.exe [96768]
[MD5.CFD26829131439B71D0109F9D5345573] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.28/05/2014 - 17:32:59.) -- C:\Windows\System32\wininet.dll [1129472]
[MD5.898E7C06A350D4A1A64A9EA264D55452] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.11/04/2009 - 07:28:13.) -- C:\Windows\System32\Winlogon.exe [314368]
[MD5.3911B972B55FEA0478476B2E777B29FA] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.21/04/2011 - 14:58:27.) -- C:\Windows\system32\Drivers\AFD.sys [273408]
[MD5.1F05B78AB91C9075565A9D8A4B880BC4] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.11/04/2009 - 07:32:26.) -- C:\Windows\system32\Drivers\atapi.sys [19944]
[MD5.7ADD03E75BEB9E6DD102C3081D29840A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.19/01/2008 - 06:28:02.) -- C:\Windows\system32\Drivers\Cdfs.sys [70144]
[MD5.6B4BFFB9BECD728097024276430DB314] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.11/04/2009 - 05:39:17.) -- C:\Windows\system32\Drivers\Cdrom.sys [67072]
[MD5.622C41A07CA7E6DD91770F50D532CB6C] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.14/04/2011 - 15:59:03.) -- C:\Windows\system32\Drivers\DfsC.sys [75264]
[MD5.062452B7FFD68C8C042A6261FE8DFF4A] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.11/04/2009 - 05:42:42.) -- C:\Windows\system32\Drivers\HDAudBus.sys [561152]
[MD5.22D56C8184586B7A1F6FA60BE5F5A2BD] - (.Microsoft Corporation - Pilote de port i8042.) (.19/01/2008 - 06:49:18.) -- C:\Windows\system32\Drivers\i8042prt.sys [54784]
[MD5.8793643A67B42CEC66490B2A0CF92D68] - (.Microsoft Corporation - IP Network Address Translator.) (.19/01/2008 - 06:56:28.) -- C:\Windows\system32\Drivers\IpNat.sys [100864]
[MD5.1E94971C4B446AB2290DEB71D01CF0C2] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.29/04/2011 - 14:24:40.) -- C:\Windows\system32\Drivers\MRxSmb.sys [106496]
[MD5.ECD64230A59CBD93C85F1CD1CAB9F3F6] - (.Microsoft Corporation - MBT Transport driver.) (.11/04/2009 - 05:45:37.) -- C:\Windows\system32\Drivers\netBT.sys [185856]
[MD5.2C1121F2B87E9A6B12485DF53CD848C7] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.03/03/2013 - 20:07:52.) -- C:\Windows\system32\Drivers\ntfs.sys [1082232]
[MD5.0FA9B5055484649D63C303FE404E5F4D] - (.Microsoft Corporation - Pilote de port parallèle.) (.02/11/2006 - 09:51:30.) -- C:\Windows\system32\Drivers\Parport.sys [79360]
[MD5.A214ADBAF4CB47DD2728859EF31F26B0] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.19/01/2008 - 06:56:34.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [76288]
[MD5.E8BD98D46F2ED77132BA927FCCB47D8B] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.02/11/2006 - 10:03:00.) -- C:\Windows\system32\Drivers\rdpdr.sys [242688]
[MD5.7B75299A4D201D6A6533603D6914AB04] - (.Microsoft Corporation - SMB Transport driver.) (.11/04/2009 - 05:45:22.) -- C:\Windows\system32\Drivers\smb.sys [66560]
[MD5.76B06EB8A01FC8624D699E7045303E54] - (.Microsoft Corporation - TDI Translation Driver.) (.11/04/2009 - 05:45:56.) -- C:\Windows\system32\Drivers\tdx.sys [72192]
[MD5.786DB5771F05EF300390399F626BF30A] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.21/08/2012 - 12:47:42.) -- C:\Windows\system32\Drivers\volsnap.sys [224640]
~ Generic Processes: Scanned in 00mn 00s



---\\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 0/1434
~ Mes musiques (My Musics) : 3/608
~ Mes Videos (My Videos) : 1/106
~ Mes Favoris (My Favorites) : 1/169
~ Mes Documents (My Documents) : 6/2120
~ Mon Bureau (My Desktop) : 2/1021
~ Menu demarrer (Programs) : 1/33
~ Hidden Files: Scanned in 00mn 00s



---\\ Processus lancés
[MD5.D6136DEFFF8EB6AD98F401ED43853EB9] - (.Realtek Semiconductor - HD Audio Control Panel.) -- C:\Windows\RtHDVCpl.exe [4702208] [PID.3072]
[MD5.4EB0C6C3EF4D8885CF2B5D0062F31E44] - (.Pas de propriétaire - DivX Update.) -- C:\Program Files\DivX\DivX Update\DivXUpdate.exe [1259376] [PID.3096]
[MD5.5B6E8E09BE6401A7E022F52FDFCB2FF8] - (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336] [PID.3172]
[MD5.F6158734F1E24C6C510155CF0D363911] - (.RealNetworks, Inc. - RealNetworks Scheduler.) -- C:\Program Files\Real\RealPlayer\Update\realsched.exe [295512] [PID.3180]
[MD5.E754386A083BCB72A4EC7CC1869B715B] - (.Systweak - Advanced System Protector.) -- C:\Program Files\Advanced System Protector\AdvancedSystemProtector.exe [6598384] [PID.3236] =>PUP.AdvancedSystemProtector
[MD5.C6B3E2702322614DC9BF37E8077978BE] - (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe [21446272] [PID.3260]
[MD5.534A3CB0847BA114F0D8A5F2BB2EF6D0] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe [887432] [PID.208]
[MD5.1E1922213E51D13B90AF609B5B32625C] - (.Yahoo! Inc. - Yahoo! Messenger Tray.) -- C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe [79160] [PID.3784]
[MD5.A5FCD42334CCC682DA1882A54338686C] - (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [860488] [PID.2392]
[MD5.2E0B0A051FFAA86E358465BB0880D453] - (.Microsoft Corporation - Windows Update.) -- C:\Windows\system32\wuauclt.exe [53784] [PID.2352]
[MD5.7DCE7A74764EB7C67D21A32BC579453D] - (.Oracle Corporation - Java(TM) Update Checker.) -- C:\Program Files\Common Files\Java\Java Update\jucheck.exe [507264] [PID.1276]
[MD5.6080A176D09435FC8E6E800996656E18] - (.Microsoft Corporation - Console IME.) -- C:\Windows\system32\conime.exe [69120] [PID.3328]
[MD5.5F2323DC1376BC8F6EDE875782E11B0C] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [8074240] [PID.6048]
[MD5.CFCE43B70CA0CC4DCC8ADB62B792B173] - (.Microsoft Corporation - Antimalware Service Executable.) -- C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe [11736] [PID.928]
[MD5.9408356C027BADCA7505EAC3A8F6958E] - (.AMD - AMD External Events Service Module.) -- C:\Windows\system32\atiesrxx.exe [173500] [PID.1028]
[MD5.862BB4CBC05D80C5B45BE430E5EF872F] - (.Microsoft Corporation - Service de gestion des licences Microsoft.) -- C:\Windows\system32\SLsvc.exe [3408896] [PID.1288]
[MD5.17D906419AE68FF444E7898D792070B4] - (.AMD - AMD External Events Client Module.) -- C:\Windows\system32\atieclxx.exe [300472] [PID.1428]
[MD5.23C3A0680042C0D1DE1F360F8B62BC57] - (.Microsoft Corporation - Infrastructure d'extensibilité pour les ser.) -- C:\Windows\system32\WLANExt.exe [74240] [PID.1748]
[MD5.F2C4C247B76FDDD8BF634B854F1C064B] - (.Lexmark International, Inc. - Lexmark Connect Service Executable.) -- C:\Windows\system32\spool\DRIVERS\W32X86\3\lxdnserv.exe [91240] [PID.1548]
[MD5.E10338BDD4590EAD8E36C1122430EF69] - (.Pas de propriétaire - Printer Communication System.) -- C:\Windows\system32\lxdncoms.exe [586708] [PID.1972]
[MD5.65085456FD9A74D7F1A999520C299ECB] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376] [PID.444]
[MD5.96EFEC24346A8EB1157E80523079ADDC] - (...) -- C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe [39056] [PID.2148]
[MD5.DD0042F0C3B606A6A8B92D49AFB18AD6] - (.Yahoo! Inc. - AutoUpater Service Module.) -- C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe [602392] [PID.2640]
~ Processes Running: Scanned in 00mn 06s



---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
C:\Users\arlette\AppData\Local\Google\Chrome\User Data\Default\Preferences
G2 - GCE: Preference [User Data\Default] [kbjlipmgfoamgjaogmbihaffnpkpjajp] Bubble Dock v.1.0.0.130 (Désactivé) =>PUP.BubbleDock
G2 - GCE: Preference [User Data\Default] [neajdppkdcdipfabeoofebfddakdcjhd] Google Network Speech v.1.0 (Activé)
G2 - GCE: Preference [User Data\Default] [nkeimhogjdpnpccoofpliimaahmaaome] Hangout Services v.1.0 (Activé)
G2 - GCE: Preference [User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] Google Wallet v.0.0.6.1 (Activé)
G2 - GCE: Preference [User Data\Default] [pafkbggdmjlpgkdkcbjmhmfcdpncadgh] Google Now v.1.2.0.1 (Activé)

---\\ Liste des dossiers d'extension Google Chrome
~ Google Lines Browser: 15 Legitimates Filtered in 00mn 08s



---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\SOFTWARE\Classes\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.rpidity.com =>Adware.Boxore
R4 - HKCU\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,Enabled = 1
~ IE Browser: 13 Legitimates Filtered in 00mn 00s



---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Proxy management: Scanned in 00mn 00s



---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"
~ Keys: Scanned in 00mn 00s



---\\ Hosts file redirection (O1)
~ Le fichier hosts est sain (The hosts file is clean).
~ Hosts File: Scanned in 00mn 00s
~ Nombre de lignes (Lines number): 20



---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: Deeal - {70C53538-9F82-42BC-A327-74F7A46E700C} . (.Deeal - ScriptHost.) -- C:\Program Files\Deeal\ScriptHost.dll =>PUP.DeealFr
~ BHO: 18 Legitimates Filtered in 00mn 01s



---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar: Veoh Web Player Video Finder - [HKLM]{0FBB9689-D3D7-4f7a-A2E2-585B10099BFC} . (...) -- C:\Program Files\Veoh Networks\VeohWebPlayer\VeohIEToolbar.dll
O3 - Toolbar: Canon Easy-WebPrint EX - [HKLM]{759D9886-0C6F-4498-BAB6-4A5F47C6C72F} . (.CANON INC. - Easy-WebPrint EX.) -- C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{1017A80C-6F09-4548-A84D-EDD6AC9525F0} Clé orpheline
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{CD90BF73-20F6-44EF-993D-BB920303BD2E} Clé orpheline
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{759D9886-0C6F-4498-BAB6-4A5F47C6C72F} Clé orpheline
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{47833539-D0C5-4125-9FA8-0819E2EAAC93} Clé orpheline
~ Toolbar: Scanned in 00mn 00s



---\\ Autres liens utilisateurs (O4)
O4 - GS\Desktop [Public]: System Speedup.lnk . (.System Speedup - System Speedup.) -- C:\Program Files\System Speedup\SystemSpeedup.exe =>PUP.SystemSpeedup
~ Global Startup: 1 Legitimates Filtered in 00mn 04s



---\\ Applications lancées au démarrage du système (O4)
O4 - HKLM\..\Run: [MSC] . (.Microsoft Corporation - Microsoft Security Client User Interface.) -- C:\Program Files\Microsoft Security Client\msseces.exe
O4 - HKLM\..\Run: [RtHDVCpl] . (.Realtek Semiconductor - HD Audio Control Panel.) -- C:\Windows\RtHDVCpl.exe =>.Realtek Semiconductor Corp
O4 - HKLM\..\Run: [Skytel] . (.Realtek Semiconductor Corp. - Realtek Voice Manager.) -- C:\Windows\Skytel.exe =>.Realtek Semiconductor Corp
O4 - HKLM\..\Run: [DivXUpdate] . (.Pas de propriétaire - DivX Update.) -- C:\Program Files\DivX\DivX Update\DivXUpdate.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
O4 - HKLM\..\Run: [ROC_ROC_NT] C:\Program Files\AVG Secure Search\ROC_ROC_NT.exe (.not file.) =>Toolbar.AVGSearch
O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe =>.Adobe Systems Incorporated
O4 - HKLM\..\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe =>.Oracle Corporation
O4 - HKLM\..\Run: [TkBellExe] . (.RealNetworks, Inc. - RealNetworks Scheduler.) -- C:\Program Files\Real\RealPlayer\update\realsched.exe =>.RealNetworks, Inc
O4 - HKLM\..\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files\QuickTime\QTTask.exe
O4 - HKLM\..\Run: [Advanced System Protector_startup] . (.Systweak - Advanced System Protector.) -- C:\Program Files\Advanced System Protector\AdvancedSystemProtector.exe =>PUP.AdvancedSystemProtector
O4 - HKCU\..\Run: [Messenger (Yahoo!)] . (.Yahoo! Inc. - Yahoo! Messenger.) -- C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
O4 - HKCU\..\Run: [Easy Driver Pro] C:\Program Files\Probit Software\Easy Driver Pro\DPLauncher.exe (.not file.) =>PUP.ProbitSoftware
O4 - HKCU\..\Run: [Facebook Update] . (.Facebook Inc. - Programme d'installation de Facebook.) -- C:\Users\arlette\AppData\Local\Facebook\Update\FacebookUpdate.exe
O4 - HKCU\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe =>.Skype Technologies S.A.
O4 - HKUS\.DEFAULT\..\Run: [msnmsgr] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe
O4 - HKUS\S-1-5-18\..\Run: [msnmsgr] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] Clé orpheline
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-20\..\Run: [WindowsWelcomeCenter] Clé orpheline
O4 - HKUS\S-1-5-21-3920009863-3822589848-3610209861-1000\..\Run: [Messenger (Yahoo!)] . (.Yahoo! Inc. - Yahoo! Messenger.) -- C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
O4 - HKUS\S-1-5-21-3920009863-3822589848-3610209861-1000\..\Run: [Easy Driver Pro] C:\Program Files\Probit Software\Easy Driver Pro\DPLauncher.exe (.not file.) =>PUP.ProbitSoftware
O4 - HKUS\S-1-5-21-3920009863-3822589848-3610209861-1000\..\Run: [Facebook Update] . (.Facebook Inc. - Programme d'installation de Facebook.) -- C:\Users\arlette\AppData\Local\Facebook\Update\FacebookUpdate.exe
O4 - HKUS\S-1-5-21-3920009863-3822589848-3610209861-1000\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe =>.Skype Technologies S.A.
~ Application: Scanned in 00mn 01s



---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (...) -- C:\Program Files\Microsoft Office\Office12\REFBARH.ICO
~ IE Extra Buttons: Scanned in 00mn 00s



---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - Broken Internet access because of LSP provider (.not file.) -- mswsock.dll
~ Winsock: 7 Legitimates Filtered in 00mn 00s



---\\ Objets ActiveX (Downloaded Program Files)(O16)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} ((no name)) - http://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} ((no name)) - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
~ Objets ActiveX: Scanned in 00mn 00s



---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{C21798ED-FC7C-42BD-92D8-8ACD475D1430}: DhcpNameServer = 212.27.40.240 212.27.40.241
O17 - HKLM\System\CCS\Services\Tcpip\..\{FFFC74FC-5349-4E91-9322-24B51BAC2EFB}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{C21798ED-FC7C-42BD-92D8-8ACD475D1430}: DhcpNameServer = 212.27.40.240 212.27.40.241
O17 - HKLM\System\CS1\Services\Tcpip\..\{FFFC74FC-5349-4E91-9322-24B51BAC2EFB}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{C21798ED-FC7C-42BD-92D8-8ACD475D1430}: DhcpNameServer = 212.27.40.240 212.27.40.241
O17 - HKLM\System\CS2\Services\Tcpip\..\{FFFC74FC-5349-4E91-9322-24B51BAC2EFB}: DhcpNameServer = 212.27.40.241 212.27.40.240
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
~ Domain: Scanned in 00mn 00s



---\\ Protocole additionnel (O18)
O18 - Handler: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} . (.Microsoft Corporation - Windows Live Mail.) -- C:\Program Files\Windows Live\Mail\mailcomm.dll =>.Microsoft Corporation
O18 - Filter: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.dll =>.Microsoft Corporation
~ Protocole Additionnel: Scanned in 00mn 00s



---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\Windows\System32\browseui.dll
~ STS/SSO: Scanned in 00mn 00s



---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: (vToolbarUpdater13.2.0) . (...) - C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\13.2.0\ToolbarUpdater.exe (.not file.) =>Toolbar.AVGSearch
~ Services: 8 Legitimates Filtered in 00mn 05s



---\\ Tâches planifiées en automatique (O39)
[MD5.00000000000000000000000000000000] [APT] [At1] (...) -- C:\ProgramData\0sP2e0Xs.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [At10] (...) -- C:\ProgramData\0sP2e0Xs.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [At11] (...) -- C:\ProgramData\0sP2e0Xs.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [At12] (...) -- C:\ProgramData\0sP2e0Xs.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [At13] (...) -- C:\ProgramData\0sP2e0Xs.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [At14] (...) -- C:\ProgramData\0sP2e0Xs.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [At15] (...) -- C:\ProgramData\0sP2e0Xs.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [At16] (...) -- C:\ProgramData\0sP2e0Xs.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [At17] (...) -- C:\ProgramData\0sP2e0Xs.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [At18] (...) -- C:\ProgramData\0sP2e0Xs.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [At19] (...) -- C:\ProgramData\0sP2e0Xs.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [At2] (...) -- C:\ProgramData\0sP2e0Xs.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [At20] (...) -- C:\ProgramData\0sP2e0Xs.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [At21] (...) -- C:\ProgramData\0sP2e0Xs.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [At22] (...) -- C:\ProgramData\0sP2e0Xs.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [At23] (...) -- C:\ProgramData\0sP2e0Xs.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [At24] (...) -- C:\ProgramData\0sP2e0Xs.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [At25] (...) -- C:\ProgramData\0sP2e0Xs.exe_ (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [At26] (...) -- C:\ProgramData\0sP2e0Xs.exe_ (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [At27] (...) -- C:\ProgramData\0sP2e0Xs.exe_ (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [At28] (...) -- C:\ProgramData\0sP2e0Xs.exe_ (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [At29] (...) -- C:\ProgramData\0sP2e0Xs.exe_ (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [At3] (...) -- C:\ProgramData\0sP2e0Xs.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [At30] (...) -- C:\ProgramData\0sP2e0Xs.exe_ (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [At31] (...) -- C:\ProgramData\0sP2e0Xs.exe_ (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [At32] (...) -- C:\ProgramData\0sP2e0Xs.exe_ (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [At33] (...) -- C:\ProgramData\0sP2e0Xs.exe_ (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [At34] (...) -- C:\ProgramData\0sP2e0Xs.exe_ (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [At35] (...) -- C:\ProgramData\0sP2e0Xs.exe_ (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [At36] (...) -- C:\ProgramData\0sP2e0Xs.exe_ (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [At37] (...) -- C:\ProgramData\0sP2e0Xs.exe_ (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [At38] (...) -- C:\ProgramData\0sP2e0Xs.exe_ (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [At39] (...) -- C:\ProgramData\0sP2e0Xs.exe_ (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [At4] (...) -- C:\ProgramData\0sP2e0Xs.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [At40] (...) -- C:\ProgramData\0sP2e0Xs.exe_ (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [At41] (...) -- C:\ProgramData\0sP2e0Xs.exe_ (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [At42] (...) -- C:\ProgramData\0sP2e0Xs.exe_ (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [At43] (...) -- C:\ProgramData\0sP2e0Xs.exe_ (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [At44] (...) -- C:\ProgramData\0sP2e0Xs.exe_ (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [At45] (...) -- C:\ProgramData\0sP2e0Xs.exe_ (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [At46] (...) -- C:\ProgramData\0sP2e0Xs.exe_ (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [At47] (...) -- C:\ProgramData\0sP2e0Xs.exe_ (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [At48] (...) -- C:\ProgramData\0sP2e0Xs.exe_ (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [At5] (...) -- C:\ProgramData\0sP2e0Xs.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [At6] (...) -- C:\ProgramData\0sP2e0Xs.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [At7] (...) -- C:\ProgramData\0sP2e0Xs.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [At8] (...) -- C:\ProgramData\0sP2e0Xs.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [At9] (...) -- C:\ProgramData\0sP2e0Xs.exe (.not file.) [0]
[MD5.4A0F795E79856FCE2768BD2FE58CD3DB] [APT] [System Speedup] (.System Speedup.) -- C:\Program Files\System Speedup\SystemSpeedup.exe [7833952] =>PUP.SystemSpeedup
[MD5.00000000000000000000000000000000] [APT] [TaskUserUpdate_wp] (...) -- C:\Users\arlette\AppData\Roaming\~ukslksn.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [WIN-fdfEfEfAfC] (...) -- C:\Users\arlette\AppData\Roaming\~ojhemvy.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{09EB0CE6-F89E-4756-AF43-756A9315AA9E}] (...) -- C:\Program Files\DivX\DivXPlayerUninstall.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{951691F3-C9EB-4D49-ADF9-5FD108D5568C}] (...) -- C:\Windows\system32\Macromed\Flash\FlashUtil10o_ActiveX.exe (.not file.) [0]
O39 - APT: - (..) -- C:\Windows\System32\Tasks\Adobe Flash Player Updater [1002]
O39 - APT: At1 - (...) -- C:\Windows\Tasks\At1.job [336]
O39 - APT: At1 - (...) -- C:\Windows\System32\Tasks\At1 [336]
O39 - APT: At10 - (...) -- C:\Windows\Tasks\At10.job [336]
O39 - APT: At10 - (...) -- C:\Windows\System32\Tasks\At10 [336]
O39 - APT: At11 - (...) -- C:\Windows\Tasks\At11.job [336]
O39 - APT: At11 - (...) -- C:\Windows\System32\Tasks\At11 [336]
O39 - APT: At12 - (...) -- C:\Windows\Tasks\At12.job [336]
O39 - APT: At12 - (...) -- C:\Windows\System32\Tasks\At12 [336]
O39 - APT: At13 - (...) -- C:\Windows\Tasks\At13.job [336]
O39 - APT: At13 - (...) -- C:\Windows\System32\Tasks\At13 [336]
O39 - APT: At14 - (...) -- C:\Windows\Tasks\At14.job [336]
O39 - APT: At14 - (...) -- C:\Windows\System32\Tasks\At14 [336]
O39 - APT: At15 - (...) -- C:\Windows\Tasks\At15.job [336]
O39 - APT: At15 - (...) -- C:\Windows\System32\Tasks\At15 [336]
O39 - APT: At16 - (...) -- C:\Windows\Tasks\At16.job [336]
O39 - APT: At16 - (...) -- C:\Windows\System32\Tasks\At16 [336]
O39 - APT: At17 - (...) -- C:\Windows\Tasks\At17.job [336]
O39 - APT: At17 - (...) -- C:\Windows\System32\Tasks\At17 [336]
O39 - APT: At18 - (...) -- C:\Windows\Tasks\At18.job [336]
O39 - APT: At18 - (...) -- C:\Windows\System32\Tasks\At18 [336]
O39 - APT: At19 - (...) -- C:\Windows\Tasks\At19.job [336]
O39 - APT: At19 - (...) -- C:\Windows\System32\Tasks\At19 [336]
O39 - APT: At2 - (...) -- C:\Windows\Tasks\At2.job [336]
O39 - APT: At2 - (...) -- C:\Windows\System32\Tasks\At2 [336]
O39 - APT: At20 - (...) -- C:\Windows\Tasks\At20.job [336]
O39 - APT: At20 - (...) -- C:\Windows\System32\Tasks\At20 [336]
O39 - APT: At21 - (...) -- C:\Windows\Tasks\At21.job [336]
O39 - APT: At21 - (...) -- C:\Windows\System32\Tasks\At21 [336]
O39 - APT: At22 - (...) -- C:\Windows\Tasks\At22.job [336]
O39 - APT: At22 - (...) -- C:\Windows\System32\Tasks\At22 [336]
O39 - APT: At23 - (...) -- C:\Windows\Tasks\At23.job [336]
O39 - APT: At23 - (...) -- C:\Windows\System32\Tasks\At23 [336]
O39 - APT: At24 - (...) -- C:\Windows\Tasks\At24.job [336]
O39 - APT: At24 - (...) -- C:\Windows\System32\Tasks\At24 [336]
O39 - APT: At25 - (...) -- C:\Windows\Tasks\At25.job [338]
O39 - APT: At25 - (...) -- C:\Windows\System32\Tasks\At25 [338]
O39 - APT: At26 - (...) -- C:\Windows\Tasks\At26.job [338]
O39 - APT: At26 - (...) -- C:\Windows\System32\Tasks\At26 [338]
O39 - APT: At27 - (...) -- C:\Windows\Tasks\At27.job [338]
O39 - APT: At27 - (...) -- C:\Windows\System32\Tasks\At27 [338]
O39 - APT: At28 - (...) -- C:\Windows\Tasks\At28.job [338]
O39 - APT: At28 - (...) -- C:\Windows\System32\Tasks\At28 [338]
O39 - APT: At29 - (...) -- C:\Windows\Tasks\At29.job [338]
O39 - APT: At29 - (...) -- C:\Windows\System32\Tasks\At29 [338]
O39 - APT: At3 - (...) -- C:\Windows\Tasks\At3.job [336]
O39 - APT: At3 - (...) -- C:\Windows\System32\Tasks\At3 [336]
O39 - APT: At30 - (...) -- C:\Windows\Tasks\At30.job [338]
O39 - APT: At30 - (...) -- C:\Windows\System32\Tasks\At30 [338]
O39 - APT: At31 - (...) -- C:\Windows\Tasks\At31.job [338]
O39 - APT: At31 - (...) -- C:\Windows\System32\Tasks\At31 [338]
O39 - APT: At32 - (...) -- C:\Windows\Tasks\At32.job [338]
O39 - APT: At32 - (...) -- C:\Windows\System32\Tasks\At32 [338]
O39 - APT: At33 - (...) -- C:\Windows\Tasks\At33.job [338]
O39 - APT: At33 - (...) -- C:\Windows\System32\Tasks\At33 [338]
O39 - APT: At34 - (...) -- C:\Windows\Tasks\At34.job [338]
O39 - APT: At34 - (...) -- C:\Windows\System32\Tasks\At34 [338]
O39 - APT: At35 - (...) -- C:\Windows\Tasks\At35.job [338]
O39 - APT: At35 - (...) -- C:\Windows\System32\Tasks\At35 [338]
O39 - APT: At36 - (...) -- C:\Windows\Tasks\At36.job [338]
O39 - APT: At36 - (...) -- C:\Windows\System32\Tasks\At36 [338]
O39 - APT: At37 - (...) -- C:\Windows\Tasks\At37.job [338]
O39 - APT: At37 - (...) -- C:\Windows\System32\Tasks\At37 [338]
O39 - APT: At38 - (...) -- C:\Windows\Tasks\At38.job [338]
O39 - APT: At38 - (...) -- C:\Windows\System32\Tasks\At38 [338]
O39 - APT: At39 - (...) -- C:\Windows\Tasks\At39.job [338]
O39 - APT: At39 - (...) -- C:\Windows\System32\Tasks\At39 [338]
O39 - APT: At4 - (...) -- C:\Windows\Tasks\At4.job [336]
O39 - APT: At4 - (...) -- C:\Windows\System32\Tasks\At4 [336]
O39 - APT: At40 - (...) -- C:\Windows\Tasks\At40.job [338]
O39 - APT: At40 - (...) -- C:\Windows\System32\Tasks\At40 [338]
O39 - APT: At41 - (...) -- C:\Windows\Tasks\At41.job [338]
O39 - APT: At41 - (...) -- C:\Windows\System32\Tasks\At41 [338]
O39 - APT: At42 - (...) -- C:\Windows\Tasks\At42.job [338]
O39 - APT: At42 - (...) -- C:\Windows\System32\Tasks\At42 [338]
O39 - APT: At43 - (...) -- C:\Windows\Tasks\At43.job [338]
O39 - APT: At43 - (...) -- C:\Windows\System32\Tasks\At43 [338]
O39 - APT: At44 - (...) -- C:\Windows\Tasks\At44.job [338]
O39 - APT: At44 - (...) -- C:\Windows\System32\Tasks\At44 [338]
O39 - APT: At45 - (...) -- C:\Windows\Tasks\At45.job [338]
O39 - APT: At45 - (...) -- C:\Windows\System32\Tasks\At45 [338]
O39 - APT: At46 - (...) -- C:\Windows\Tasks\At46.job [338]
O39 - APT: At46 - (...) -- C:\Windows\System32\Tasks\At46 [338]
O39 - APT: At47 - (...) -- C:\Windows\Tasks\At47.job [338]
O39 - APT: At47 - (...) -- C:\Windows\System32\Tasks\At47 [338]
O39 - APT: At48 - (...) -- C:\Windows\Tasks\At48.job [338]
O39 - APT: At48 - (...) -- C:\Windows\System32\Tasks\At48 [338]
O39 - APT: At5 - (...) -- C:\Windows\Tasks\At5.job [336]
O39 - APT: At5 - (...) -- C:\Windows\System32\Tasks\At5 [336]
O39 - APT: At6 - (...) -- C:\Windows\Tasks\At6.job [336]
O39 - APT: At6 - (...) -- C:\Windows\System32\Tasks\At6 [336]
O39 - APT: At7 - (...) -- C:\Windows\Tasks\At7.job [336]
O39 - APT: At7 - (...) -- C:\Windows\System32\Tasks\At7 [336]
O39 - APT: At8 - (...) -- C:\Windows\Tasks\At8.job [336]
O39 - APT: At8 - (...) -- C:\Windows\System32\Tasks\At8 [336]
O39 - APT: At9 - (...) -- C:\Windows\Tasks\At9.job [336]
O39 - APT: At9 - (...) -- C:\Windows\System32\Tasks\At9 [336]
O39 - APT: - (..) -- C:\Windows\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3920009863-3822589848-3610209861-1000Core [914]
O39 - APT: - (..) -- C:\Windows\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3920009863-3822589848-3610209861-1000UA [936]
O39 - APT: - (..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore [1054]
O39 - APT: - (..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA [1058]
~ Scheduled Task: 124 Legitimates Filtered in 00mn 18s



---\\ Logiciels installés (O42)
O42 - Logiciel: Advanced System Protector - (.Systweak Software.) [HKLM] -- 00212D92-C5D8-4ff4-AE50-B20F0F85C40A_Systweak_Ad~B9F029BF_is1 =>PUP.AdvancedSystemProtector
O42 - Logiciel: Akamai NetSession Interface - (...) [HKCU] -- Akamai
O42 - Logiciel: Deeal - (.Kreapixel inc..) [HKLM] -- Deeal =>PUP.DeealFr
O42 - Logiciel: SweetIM for Messenger 2.7 - (.SweetIM Technologies Ltd..) [HKLM] -- {EC87E256-B0A4-4A41-8682-AB57FF21196D} =>PUP.SweetIM
O42 - Logiciel: System Speedup - (.systemspeedup.com.) [HKLM] -- System Speedup_is1 =>PUP.SystemSpeedup
~ Logic: 17 Legitimates Filtered in 00mn 01s



---\\ HKCU & HKLM Software Keys
[HKCU\Software\D04F77E5C40825197C3F6E60D2727A23]
[HKCU\Software\Novisoft]
[HKCU\Software\System Speedup] =>PUP.SystemSpeedup
[HKLM\Software\System Speedup] =>PUP.SystemSpeedup
[HKLM\Software\WinU]
~ Key Software: 297 Legitimates Filtered in 00mn 01s



---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 04/07/2014 - 18:19:41 - [] ----D C:\Program Files\Advanced System Protector =>PUP.AdvancedSystemProtector
O43 - CFD: 02/07/2014 - 19:57:46 - [] ----D C:\Program Files\Deeal =>PUP.DeealFr
O43 - CFD: 04/07/2014 - 18:18:38 - [] ----D C:\Program Files\System Speedup =>PUP.SystemSpeedup
O43 - CFD: 16/01/2014 - 11:41:16 - [] -SH-D C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
O43 - CFD: 04/07/2014 - 18:18:09 - [] ----D C:\Users\arlette\AppData\Roaming\betadeeal =>PUP.DeealFr
O43 - CFD: 04/07/2014 - 19:06:59 - [] ----D C:\Users\arlette\AppData\Roaming\System Speedup =>PUP.SystemSpeedup
O43 - CFD: 07/12/2012 - 07:50:44 - [] ----D C:\Users\arlette\AppData\Roaming\VA
O43 - CFD: 04/07/2014 - 18:10:18 - [] ----D C:\Users\arlette\AppData\Roaming\wp_update =>PUP.WpManager
~ Program Folder: 236 Legitimates Filtered in 00mn 01s



---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.0065E911F966A71A115D9A52FF3DFC99] - 04/07/2014 - 17:19:24 ---A- . (...) -- C:\Windows\System32\sasnative32.exe [17136]
O44 - LFC:[MD5.7AA0A0DEAA5485B234100CA976434EA3] - 04/07/2014 - 18:09:18 ---A- . (...) -- C:\Windows\KernelMessage [104094]
O44 - LFC:[MD5.422E4663955FD60EEC9F64F4FCCF9679] - 30/06/2014 - 16:34:02 ---A- . (.System Speedup - System Speedup.) -- C:\Windows\System32\roboot.exe [18272] =>PUP.SystemSpeedup
~ Files: 13 Legitimates Filtered in 00mn 06s



---\\ Contrôle du Safe Boot (CSB) (O49)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\10299032.sys . (...) -- C:\Windows\System32\Drivers\10299032.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\78471908.sys . (...) -- C:\Windows\System32\Drivers\78471908.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\10299032.sys . (...) -- C:\Windows\System32\Drivers\10299032.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\78471908.sys . (...) -- C:\Windows\System32\Drivers\78471908.sys (.not file.)
~ CSB: 17 Legitimates Filtered in 00mn 00s



---\\ Clé de registre Shell MountPoints2 (MPKS) (O51)
O51 - MPSK:{2cdb8bad-e18b-11dd-a8c5-001d60485cb8}\AutoRun\command. (...) -- H:\VMC_PBStarter.exe (.not file.)
O51 - MPSK:{2cdb8bb6-e18b-11dd-a8c5-001d60485cb8}\AutoRun\command. (...) -- H:\VMC_PBStarter.exe (.not file.)
O51 - MPSK:{351ccd85-f05f-11de-84a8-001d60485cb8}\AutoRun\command. (...) -- G:\launcher.exe (.not file.)
O51 - MPSK:{b7b15566-e0ea-11dd-be2e-001d60485cb8}\AutoRun\command - Clé orpheline
O51 - MPSK:{dfd1d675-d73e-11de-afa1-001d60485cb8}\AutoRun\command. (...) -- G:\NokiaPCIA_Autorun.exe (.not file.)
~ Keys: Scanned in 00mn 00s



---\\ Enumération des clés de registre StartupReg (SMSR) (O53)
O53 - SMSR:HKLM\...\startupreg\BboxUpdate [Key] . (.TechCity Solutions France - eStantAutoRunV.) -- C:\Program Files\BboxUpdate\eStantAutoRunV.exe
O53 - SMSR:HKLM\...\startupreg\VeohPlugin [Key] . (...) -- C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe (.not file.) =>Adware.SocialSkinz
~ SMSR Keys: 19 Legitimates Filtered in 00mn 00s



---\\ Enumération des clés de registre PoliciesSystem (MWPS) (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=0
O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
~ MWPS: 18 Legitimates Filtered in 00mn 00s



---\\ Enumération des clés de registre PoliciesExplorer (MWPE) (O56)
O56 - MWPE:[HKCU\...\policies\Explorer] - "HideSCAHealth"=1
~ MWPE Keys: 2 Legitimates Filtered in 00mn 00s



---\\ Liste des pilotes du système (SDL) (O58)
O58 - SDL:31/07/2007 - 01:39:00 ---A- . (.ATK0100 - ATK0100 ACPI Utility.) -- C:\Windows\System32\Drivers\ATKACPI.sys [7680]
O58 - SDL:21/07/2011 - 11:22:40 ---A- . (.Avira GmbH - Avira Minifilter Driver.) -- C:\Windows\System32\Drivers\avgntflt.sys [66616]
O58 - SDL:21/07/2011 - 11:22:41 ---A- . (.Avira GmbH - Avira Driver for Security Enhancement.) -- C:\Windows\System32\Drivers\avipbb.sys [138192]
O58 - SDL:25/05/2007 - 11:33:04 ---A- . (...) -- C:\Windows\System32\Drivers\BisonCam.sys [753328]
O58 - SDL:02/11/2006 - 10:51:34 ---A- . (.Emulex - Storport Miniport Driver for LightPulse HBAs.) -- C:\Windows\System32\Drivers\elxstor.sys [316520]
O58 - SDL:02/11/2006 - 10:50:07 ---A- . (.Integrated Technology Express, Inc. - ITE IT8211 ATA/ATAPI SCSI miniport.) -- C:\Windows\System32\Drivers\iteatapi.sys [35944]
O58 - SDL:02/11/2006 - 10:50:09 ---A- . (.Integrated Technology Express, Inc. - ITE IT8212 ATA RAID SCSI miniport.) -- C:\Windows\System32\Drivers\iteraid.sys [35944]
O58 - SDL:24/02/2007 - 14:42:22 ---A- . (.REDC - RICOH SD Driver.) -- C:\Windows\System32\Drivers\rimmptsk.sys [39936]
O58 - SDL:23/01/2007 - 16:40:20 ---A- . (.REDC - RICOH MS Driver.) -- C:\Windows\System32\Drivers\rimsptsk.sys [42496]
O58 - SDL:07/07/2008 - 12:12:48 ---A- . (.Pas de propriétaire - ST-VIBU STV Camera Driver (WDM Main Driver).) -- C:\Windows\System32\Drivers\SPC630.sys [489472]
O58 - SDL:07/07/2008 - 12:12:48 ---A- . (.Pas de propriétaire - ST-VIBU STV Camera Driver (DS Mini Driver).) -- C:\Windows\System32\Drivers\SPC630m.sys [7680]
O58 - SDL:17/06/2010 - 14:28:02 ---A- . (.Avira GmbH - AVIRA SnapShot Driver.) -- C:\Windows\System32\Drivers\ssmdrv.sys [28520]
O58 - SDL:25/10/2007 - 16:26:10 ---A- . (...) -- C:\Windows\System32\Drivers\StarOpen.sys [5632]
O58 - SDL:02/11/2006 - 10:51:25 ---A- . (.ULi Electronics Inc. - ULi SATA Controller Driver.) -- C:\Windows\System32\Drivers\uliahci.sys [235112]
O58 - SDL:02/11/2006 - 10:50:35 ---A- . (.Promise Technology, Inc. - Promise Ultra/Sata Series Driver for Win2003.) -- C:\Windows\System32\Drivers\ulsata.sys [98408]
O58 - SDL:02/11/2006 - 10:50:45 ---A- . (.Promise Technology, Inc. - Promise SATAII150 Series Windows Drivers.) -- C:\Windows\System32\Drivers\ulsata2.sys [115816]
O58 - SDL:02/11/2006 - 08:09:42 ---A- . (...) -- C:\Windows\System32\ANSI.SYS [9029]
O58 - SDL:02/11/2006 - 08:09:45 ---A- . (...) -- C:\Windows\System32\country.sys [27097]
O58 - SDL:26/08/2009 - 12:45:10 ---A- . (...) -- C:\Windows\System32\epmntdrv.sys [14216]
O58 - SDL:16/09/2009 - 16:55:00 ---A- . (...) -- C:\Windows\System32\EuGdiDrv.sys [8456]
O58 - SDL:31/03/2009 - 08:39:36 ---A- . (...) -- C:\Windows\System32\FsUsbExDisk.Sys [36608]
O58 - SDL:02/11/2006 - 08:09:41 ---A- . (...) -- C:\Windows\System32\HIMEM.SYS [4768]
O58 - SDL:02/11/2006 - 08:09:44 ---A- . (...) -- C:\Windows\System32\KEY01.SYS [42809]
O58 - SDL:02/11/2006 - 08:09:44 ---A- . (...) -- C:\Windows\System32\KEYBOARD.SYS [42537]
O58 - SDL:02/11/2006 - 08:09:29 ---A- . (...) -- C:\Windows\System32\NTDOS.SYS [27866]
O58 - SDL:02/11/2006 - 08:09:35 ---A- . (...) -- C:\Windows\System32\NTDOS404.SYS [29146]
O58 - SDL:02/11/2006 - 08:09:38 ---A- . (...) -- C:\Windows\System32\NTDOS411.SYS [29370]
O58 - SDL:02/11/2006 - 08:09:40 ---A- . (...) -- C:\Windows\System32\NTDOS412.SYS [29274]
O58 - SDL:02/11/2006 - 08:09:31 ---A- . (...) -- C:\Windows\System32\NTDOS804.SYS [29146]
O58 - SDL:02/11/2006 - 08:09:20 ---A- . (...) -- C:\Windows\System32\NTIO.SYS [33952]
O58 - SDL:02/11/2006 - 08:09:23 ---A- . (...) -- C:\Windows\System32\NTIO404.SYS [34672]
O58 - SDL:02/11/2006 - 08:09:24 ---A- . (...) -- C:\Windows\System32\NTIO411.SYS [35776]
O58 - SDL:02/11/2006 - 08:09:26 ---A- . (...) -- C:\Windows\System32\NTIO412.SYS [35536]
O58 - SDL:02/11/2006 - 08:09:22 ---A- . (...) -- C:\Windows\System32\NTIO804.SYS [34672]
~ Drivers: 90 Legitimates Filtered in 00mn 22s



---\\ Liste des outils de désinfection (LATC) (O63)
O63 - Logiciel: ZHPDiag 2014 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 =>.Nicolas Coolman
~ ADS: Scanned in 00mn 00s



---\\ Associations Shell Spawning (O67)
O67 - Shell Spawning: <.html> <ChromeHTML>[HKCU\..\open\Command] (.Not Key.)
~ FASS Keys: 12 Legitimates Filtered in 00mn 00s



---\\ Menu de démarrage Internet (SMI) (O68)
O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
~ Keys: Scanned in 00mn 00s



---\\ Recherche d'infection sur les navigateurs internet (SBI) (O69)
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - https://www.bing.com/?toHttps=1&redig=69DA0EF8272048D9864AF4DB37211DE8
O69 - SBI: SearchScopes [HKCU] {0F36E18A-6296-4333-9D99-269AAFE3D111}_Chercher Malin - (Chercher Malin) - http://www.cherchermalin.com
~ Keys: Scanned in 00mn 00s



---\\ Recherche particulière à la racine du système (SPRF) (O84)
[MD5.D41D8CD98F00B204E9800998ECF8427E] [SPRF][14/01/2013] (...) -- C:\ProgramData\g5q76t.dat [0]
[MD5.98161DC6255C6BE7FFA89BEA634E2A6E] [SPRF][13/06/2014] (...) -- C:\ProgramData\uninstall_Deeal.exe [431104] =>PUP.DeealFr
[MD5.C6D448B8FF39D9C8AB7EF45DB9D67639] [SPRF][24/01/2012] (...) -- C:\Users\arlette\AppData\Roaming\c5n8dayqfvxcw4u0.dat [8]
~ Files: 6 Legitimates Filtered in 00mn 01s



---\\ Enumère les codes produits des logiciels (PUC) (O90)
O90 - PUC: "4EEB31C8EC7E64E4DB31F814AD0DF0FE" . (.SweetIM Toolbar for Internet Explorer 3.4.) -- C:\Windows\Installer\{8C13BEE4-E7CE-4E46-BD13-8F41DAD00FEF}\ARPPRODUCTICON.exe =>PUP.SweetIM
O90 - PUC: "652E78CE4A0B14A46828BA75FF1291D6" . (.SweetIM for Messenger 2.7.) -- C:\Windows\Installer\{EC87E256-B0A4-4A41-8682-AB57FF21196D}\ARPPRODUCTICON.exe =>PUP.SweetIM
~ Update Products: 2 Legitimates Filtered in 00mn 00s



---\\ Export de clés de registre aléatoires (O91)
[HKCU\Software\D04F77E5C40825197C3F6E60D2727A23]:FRun="0"
[HKCU\Software\D04F77E5C40825197C3F6E60D2727A23]:O'ld="Qshw'bx!Qsnudbuhno"
[HKCU\Software\D04F77E5C40825197C3F6E60D2727A23]:Q'ui="B;]Qsnfs'lE'u']qshw'bx/dyd"
~ Export Key Software: Scanned in 00mn 00s



---\\ Recherche des packages WindowsInstaller (WIS) (O93) (NTFS)
[MD5.59DE97E2EB88494D6FF0D70BC16A2AD1] [WIS][23/11/2012] (.Babylon Ltd - Babylon Chrome Toolbar.) -- C:\Windows\Installer\b56efdb.msi [34304] =>PUP.Babylon
[MD5.A1CCC386B4653ED5E4DBEDBF64F65FB6] [WIS][22/11/2013] (.Kreapixel - Webplayer.) -- C:\Windows\Installer\efa9da9.msi [20992] =>Adware.SocialSkinz
~ WIS: 2 Legitimates Filtered in 00mn 22s



---\\ Recherche de clés de registre CLSID (O101)
[HKCR\CLSID\{70C53538-9F82-42BC-A327-74F7A46E700C}] (Deeal) =>PUP.DeealFr
~ BCK: 6929 Legitimates Filtered in 00mn 17s



---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)
SS - | Demand 13/05/2014 257712 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
SS - | Demand 05/04/2010 79132 | (Autodesk Licensing Service) . (.Autodesk.) - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
SS - | Auto 15/01/2013 116648 | (gupdate) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe
SS - | Demand 15/01/2013 116648 | (gupdatem) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe
SS - | Demand 29/05/2009 234864 | (maconfservice) . (.CybelSoft.) - C:\Program Files\ma-config.com\maconfservice.exe
SS - | Auto 04/04/2013 701512 | (MBAMService) . (.Malwarebytes Corporation.) - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
SS - | Auto 23/10/2013 172192 | (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files\Skype\Updater\Updater.exe
SS - | Auto 10/07/1658 0 | (vToolbarUpdater13.2.0) . (...) - C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\13.2.0\ToolbarUpdater.exe =>Toolbar.AVGSearch
SR - | Auto 09/04/2009 173500 | (AMD External Events Utility) . (.AMD.) - C:\Windows\System32\atiesrxx.exe
SR - | Auto 28/02/2008 91240 | (lxdnCATSCustConnectService) . (.Lexmark International, Inc..) - C:\Windows\system32\spool\DRIVERS\W32X86\3\lxdnserv.exe
SR - | Auto 28/02/2008 586708 | (lxdn_device) . (...) - C:\Windows\system32\lxdncoms.exe
SR - | Auto 04/04/2013 418376 | (MBAMScheduler) . (.Malwarebytes Corporation.) - C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
SR - | Auto 27/04/2011 11736 | (MsMpSvc) . (.Microsoft Corporation.) - C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe
SR - | Auto 14/08/2013 39056 | (RealNetworks Downloader Resolver Service) . (...) - C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe
SR - | Auto 19/01/2008 21504 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
SR - | Auto 09/11/2008 602392 | (YahooAUService) . (.Yahoo! Inc..) - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
~ Services: Scanned in 00mn 22s



---\\ Scan Additionnel (O88)
Database Version : 13026 - (03/07/2014)
Clés trouvées (Keys found) : 45
Valeurs trouvées (Values found) : 3
Dossiers trouvés (Folders found) : 7
Fichiers trouvés (Files found) : 8

[HKLM\Software\Google\Chrome\Extensions\kbjlipmgfoamgjaogmbihaffnpkpjajp] =>PUP.BubbleDock^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{70C53538-9F82-42BC-A327-74F7A46E700C}] =>PUP.DeealFr^
[HKLM\SYSTEM\CurrentControlSet\Services\vToolbarUpdater13.2.0] =>Toolbar.AVGSearch^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\00212D92-C5D8-4ff4-AE50-B20F0F85C40A_Systweak_Ad~B9F029BF_is1] =>PUP.AdvancedSystemProtector^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Deeal] =>PUP.DeealFr^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{EC87E256-B0A4-4A41-8682-AB57FF21196D}] =>PUP.SweetIM^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\System Speedup_is1] =>PUP.SystemSpeedup^
[HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\VeohPlugin] =>Adware.SocialSkinz^
[HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{8c13bee4-e7ce-4e46-bd13-8f41dad00fef}] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{8c13bee4-e7ce-4e46-bd13-8f41dad00fef}] =>PUP.SweetIM
[HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{ec87e256-b0a4-4a41-8682-ab57ff21196d}] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5D19F074C042AD34BAB463D4175A062E] =>PUP.SweetIM
[HKLM\Software\Classes\CLSID\{43969E3F-3E7C-4911-A8F1-79C6CA6AC731}] =>Adware.Adkubru
[HKLM\Software\Classes\Interface\{43969E3F-3E7C-4911-A8F1-79C6CA6AC731}] =>Adware.Adkubru
[HKLM\Software\Classes\Installer\Features\4eeb31c8ec7e64e4db31f814ad0df0fe] =>PUP.SweetIM
[HKLM\Software\Classes\Installer\Products\4eeb31c8ec7e64e4db31f814ad0df0fe] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\4eeb31c8ec7e64e4db31f814ad0df0fe] =>PUP.SweetIM
[HKLM\Software\Classes\Installer\Features\652e78ce4a0b14a46828ba75ff1291d6] =>PUP.SweetIM
[HKLM\Software\Classes\Installer\Products\652e78ce4a0b14a46828ba75ff1291d6] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\652e78ce4a0b14a46828ba75ff1291d6] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E337925F629CF4C4FB08F3D9674DD839] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1AC67655DD68F8240B2860F2D511EBD8] =>PUP.SweetIM
[HKLM\Software\Classes\ScriptHost.Tool.1] =>Toolbar.Agent
[HKLM\Software\Classes\ScriptHost.Tool] =>Toolbar.Agent
[HKLM\Software\Classes\AppID\{562B9316-C08A-444A-9482-62080DD851AE}] =>Toolbar.Freecorder
[HKLM\Software\Classes\AppID\AddonsFramework.DLL] =>Toolbar.Freecorder
[HKLM\Software\Classes\AppID\ButtonSite.DLL] =>Toolbar.Freecorder
[HKLM\Software\Classes\AppID\ScriptHost.DLL] =>Toolbar.Freecorder
[HKLM\Software\Classes\AppID\{18B9B16E-716F-43DF-A6AD-512C7D2EB983}] =>Toolbar.Freecorder
[HKLM\Software\Classes\AppID\{19975B78-1907-4DD6-A437-4C48120F46A4}] =>Toolbar.Freecorder
[HKLM\Software\Classes\AppID\{562B9317-C08A-444A-9482-62080DD851AE}] =>Toolbar.Freecorder
[HKLM\Software\Classes\Interface\{045F91B3-695F-423A-98C7-8DE3C47AA020}] =>Toolbar.Freecorder
[HKLM\Software\Classes\Interface\{1348BD1B-C32A-41A7-9BD4-5377AA1AB925}] =>Toolbar.Freecorder
[HKLM\Software\Classes\Interface\{395AFE6E-8308-48DB-89BE-ED5F4AA3D3EC}] =>Toolbar.Freecorder
[HKLM\Software\Classes\Interface\{43B390F0-6BA2-45CA-ABF2-5DB0CEE9B49D}] =>Toolbar.Freecorder
[HKLM\Software\Classes\Interface\{93CF54F5-CFAA-4440-B588-8ED0DFAD5C21}] =>Toolbar.Freecorder
[HKLM\Software\Classes\Interface\{94CADA2E-1D3F-419F-8A3D-06C58EDF53C8}] =>Toolbar.Freecorder
[HKLM\Software\Classes\Interface\{9E52EB8B-8DD9-4605-AD36-D352BCD482F2}] =>Toolbar.Freecorder
[HKLM\Software\Classes\Interface\{A1440EC3-F0FA-407A-B811-DE6668C06D29}] =>Toolbar.Freecorder
[HKLM\Software\Classes\Interface\{B9A84AD0-5777-46FD-8B8F-1EBD06750FBC}] =>Toolbar.Freecorder
[HKLM\Software\Classes\Interface\{C1995F88-1C7F-40D7-B0FA-6F107F6308B8}] =>Toolbar.Freecorder
[HKLM\Software\Classes\Interface\{C815E3DA-0823-49B0-9270-D1771D58B317}] =>Toolbar.Freecorder
[HKLM\Software\Classes\Interface\{D3BC53E7-0437-4C97-90EE-2CD6FF47FB14}] =>Toolbar.Freecorder
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110011441179}] =>PUP.CrossRider
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110311541197}] =>PUP.CrossRider
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:ROC_ROC_NT =>Toolbar.AVGSearch^
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:Easy Driver Pro =>PUP.ProbitSoftware^
C:\Users\arlette\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbjlipmgfoamgjaogmbihaffnpkpjajp =>PUP.BubbleDock^
C:\Program Files\Advanced System Protector =>PUP.AdvancedSystemProtector^
C:\Program Files\Deeal =>PUP.DeealFr^
C:\Program Files\System Speedup =>PUP.SystemSpeedup^
C:\Users\arlette\AppData\Roaming\betadeeal =>PUP.DeealFr^
C:\Users\arlette\AppData\Roaming\System Speedup =>PUP.SystemSpeedup^
C:\Users\arlette\AppData\Roaming\wp_update =>PUP.WpManager^
C:\Program Files\Advanced System Protector\AdvancedSystemProtector.exe =>PUP.AdvancedSystemProtector^
C:\Program Files\System Speedup\SystemSpeedup.exe =>PUP.SystemSpeedup^
[HKCU\Software\System Speedup] =>PUP.SystemSpeedup^
[HKLM\Software\System Speedup] =>PUP.SystemSpeedup^
C:\ProgramData\uninstall_Deeal.exe =>PUP.DeealFr^
C:\Windows\Installer\b56efdb.msi =>PUP.Babylon^
C:\Windows\Installer\efa9da9.msi =>Adware.SocialSkinz^
[HKCR\CLSID\{70C53538-9F82-42BC-A327-74F7A46E700C}] (Deeal) =>PUP.DeealFr^
~ Additionnel Scan: 313276 Items scanned in 01mn 32s



---\\ Informations complémentaires sur les modules
~ https://nicolascoolman.eu =>.Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
~ https://nicolascoolman.eu =>.Internet Explorer, Proxy Management (R5)
~ https://nicolascoolman.eu =>.Browser Helper Objects de navigateur (O2)
~ https://nicolascoolman.eu =>.Internet Explorer Toolbars (O3)
~ https://nicolascoolman.eu =>.Applications lancées au démarrage du système (O4)
~ https://nicolascoolman.eu =>.Clé de registre Shell MountPoints2 (MPKS) (O51)
~ AMI: 6 Legitimates Filtered in 00mn 00s



---\\ Récapitulatif des détections trouvées sur votre station
https://nicolascoolman.eu =>PUP.AdvancedSystemProtector
https://nicolascoolman.eu =>PUP.BubbleDock
https://nicolascoolman.eu =>Adware.Boxore
https://nicolascoolman.eu =>PUP.SystemSpeedup
https://nicolascoolman.eu =>PUP.ProbitSoftware
https://nicolascoolman.eu =>PUP.SweetIM
https://nicolascoolman.eu =>PUP.WpManager
https://nicolascoolman.eu =>Adware.SocialSkinz
https://nicolascoolman.eu =>PUP.Babylon
https://nicolascoolman.eu =>PUP.CrossRider
~ MSI: 10 link(s) detected in 00mn 00s



~ 1009 Legitimates filtered by white list
End of the scan (758 lines in 04mn 23s)(0)