tech-connect.bizRésolu/Fermé

Question

Bonjour,
 Je suis infecté par tech-connect.biz.
j'ai utilisé ad-aware ,  malwarebytes, adw cleaner, ccleaner
 je l'ai toujours sur Internet explorer
 quelqu'un connait-il un moyen pour le  supprimer?
merci

Destrio5 · Answer

Bonjour,

--> Télécharge Farbar Recovery Scan Tool (de Farbar) sur ton Bureau.

Attention : tu dois prendre la version compatible avec ton système : 32 ou 64 bits.

32 ou 64 bits - Comment savoir ?

--> Ferme toutes les applications en cours.
--> Lance FRST (Sous Windows Vista/7/8/10, clic droit sur FRST > Exécuter en tant qu'administrateur).
--> Coche la case Addition.txt.
--> Clique sur Analyser.
--> Une fois le scan terminé, deux rapports FRST.txt et Addition.txt seront présents sur le Bureau.
--> Héberge les deux rapports sur pjjoint.malekal.com et copie-colle les liens fournis dans ta prochaine réponse.

titanchois · Answer

Bonjour et merci pour la réponse,
 j'ai 64 bits W10
Mozilla était infecté , mais désinstallé et réinstallé , il est  parti, mai  je l'ai toujours sur  Ie
 je ferai ce que tu me dis un peu plus tard, car obligé de m'absenter..
 Merci encore

titanchois · Answer

Rebonjour, voici les liens.

 https://pjjoint.malekal.com/files.php?id=20160914_j12u12l14w6v12
https://pjjoint.malekal.com/files.php?id=20160914_o10y13u15c6x15

comme j'utilise Tor , je me suis rendu compte que lui aussi, je l'ai alors supprimé
J'ai désactivé Internet explorer, , mais je remarque que mon ordi a trés ralenti. et aussi à chaque redémarrage , j'ai des probs avec mes applis par défaut  etc...
Merci si tu as une réponse, bonne journée..

Destrio5 · Answer

tech-connect.biz se met dans les raccourcis. Exemple avec une infection du même genre : http://static.commentcamarche.net/www.commentcamarche.net/faq/images/NjWpHL3k-malavida-22find-7-s-.png Désinstalle Ad-Aware et Spybot, tu as déjà Avast et Malwarebytes Anti-Malware. Multiplier les antivirus / antimalwares ralentit le PC et ne sert à rien. "Mozilla Firefox 46.0 (x86 fr)" --> Ton navigateur n'est pas à jour, on est à la version 48.0.2 (et la 49 arrive la semaine prochaine) : https://www.commentcamarche.net/telecharger/web-internet/9879-securite-firefox-deux-failles-graves-corrigees-en-urgence/ Etant donné que tu as un Windows 10 64 bits, tu peux prendre la version 64 bits (x64) de Firefox. Le format .docx pour les rapports ne m'a pas arrangé, c'est plus lisible pour moi en .txt avec le Bloc-notes. --> Ouvre le Bloc-notes. --> Copie-colle le texte en gras ci-dessous dans le Bloc-notes : start CreateRestorePoint: CloseProcesses: Tcpip\..\Interfaces\{0d1db32c-f52b-4a62-b00a-e9923bfe55ce}: [DhcpNameServer] 172.20.10.1 Tcpip\..\Interfaces\{4c68d347-1c97-4c04-bb87-6d28a65706c3}: [NameServer] 77.234.40.79 FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\defaults\pref\1648143675.js [2016-09-13] <==== ATTENTION (Pointe vers un fichier *.cfg) FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\1648143675.cfg [2016-09-13] <==== ATTENTION S3 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [22704 2016-09-13] () C:\Users\Daniel\AppData\Local\{377095FD-11D9-4E6F-9007-E0346A4523AD} C:\Users\Daniel\AppData\Local\{4889A01E-50A0-41CB-8FCD-932C5D319C58} C:\Users\Daniel\AppData\Local\{56CEF7DD-929D-41C2-9177-A826EF682FEC} C:\WINDOWS\system32\Drivers\EsgScanner.sys C:\Users\Daniel\Downloads\SpyHunter-Installer.exe C:\Users\Daniel\AppData\Local\{740D2DA7-AD9A-4AB0-9D5C-6D030E003D6E} C:\Users\Daniel\AppData\Local\{C52868BD-B610-4C0C-9879-BB652220F14E} C:\Users\Daniel\AppData\Local\{8670C529-1471-4706-BBEE-8ACC80F81E8D} C:\Users\Daniel\AppData\Local\{C6D9FA5E-D6F0-4A43-A0CB-78BB26733AFE} C:\Users\Daniel\AppData\Local\{E33975E7-AA19-45B2-BD81-6D11E4203920} C:\Users\Daniel\AppData\Local\{93FF3D33-7B55-4C23-A84C-41C8480B2762} C:\Users\Daniel\AppData\Local\{8703A307-ACE3-498F-AC9E-F7FA7375D080} C:\Users\Daniel\AppData\Local\{ADE34A60-068E-4AF1-88A6-332B76951EBC} C:\Users\Daniel\AppData\Local\{4764709F-C2B0-406A-98BA-1C40C5440CF4} C:\Users\Daniel\AppData\Local\{144D7E9A-070B-463B-AD41-02EB6F56E06E} C:\Users\Daniel\AppData\Local\{867EB4F6-294C-4C6D-B088-E4749CFD510F} C:\Users\Daniel\AppData\Local\{36E77D18-DA10-4043-8587-46B433825E63} C:\Users\Daniel\AppData\Local\{776A60E4-880C-4F95-B30C-DE0582B57EE9} C:\Users\Daniel\AppData\Local\{7DE7E784-A0BE-4012-A75A-BCED32B50E6D} C:\Users\Daniel\AppData\Local\{A0C6ED81-E8A7-49E1-B766-06C8581AF393} C:\Users\Daniel\AppData\Local\{5D5B49D6-F42B-42DA-8D75-A05424EE51F9} C:\Users\Daniel\AppData\Local\{727D1893-1F33-477E-ADF5-65DEB199CEB4} C:\Users\Daniel\AppData\Local\{C8B5F4F0-B200-4AE2-A933-033B2B0DC39B} C:\Users\Daniel\AppData\Local\{CB12380D-CE73-472D-BEC4-C9B9F9D48B15} C:\Users\Daniel\AppData\Local\{5745BDF2-A275-48D3-9CF4-101346E66F64} C:\Users\Daniel\AppData\Local\{6C390CF0-97AF-4EBD-9475-D379B3688A92} C:\Users\Daniel\AppData\Local\{997D0071-864A-4731-A9B5-A92420653FF7} C:\Users\Daniel\AppData\Local\{2FBE0251-7813-4082-878E-04A8FDF6449A} C:\Users\Daniel\AppData\Local\{ED6EF279-ABC4-4CDF-A839-B3C23C414893} C:\Users\Daniel\AppData\Local\{259965D4-F10F-48F7-8F20-137E9D06BA74} C:\Users\Daniel\AppData\Local\{1E8703FA-E1E9-4050-ABB6-FAF33484A01A} C:\Users\Daniel\AppData\Local\{572ED88F-0D3B-4871-94B3-C42CAC013B3A} C:\Users\Daniel\AppData\Local\{A735C32E-A31F-413A-B7F7-7F26DF4456BF} C:\Users\Daniel\AppData\Local\{8129458D-EEB7-4E31-878F-8B7468379FB9} C:\Users\Daniel\AppData\Local\{133BE4AC-FB15-42AB-8919-FA8B5A5D70DC} C:\Users\Daniel\AppData\Local\{9C64136B-B24A-42C7-A691-8D420775CAC8} C:\Users\Daniel\AppData\Local\{73E83EE7-852B-478B-96E7-51412EEC5B2F} C:\Users\Daniel\AppData\Local\{594A8CA4-6D1F-45CA-A368-DCFB63036B48} C:\Users\Daniel\AppData\Local\{78A0CA5D-387D-4B05-A690-B6F62DDCDDF6} C:\Users\Daniel\AppData\Local\{9E3D33C2-7742-4FE9-B492-A5BBDC477FF3} C:\Users\Daniel\AppData\Local\{3A6796F5-EF93-4251-BF95-B7672FBDA966} C:\Users\Daniel\AppData\Local\{1CB69F3B-E432-4145-ACB4-1C70A513256C} C:\Users\Daniel\AppData\Local\{265386E1-E6CB-4D8C-9A6F-AC9E85A7F260} C:\Users\Daniel\AppData\Local\{0BD78237-749F-4D7E-9F40-F5E30E8F1CBC} C:\Users\Daniel\AppData\Local\{A368B568-3D6D-4D7E-80BC-50A9CB4F20D0} C:\Users\Daniel\AppData\Local\{EF9CD6AB-7021-419C-8894-8D339C72055C} C:\Users\Daniel\AppData\Local\{C13622B4-2728-4494-A9BC-B707B582DFF6} C:\Users\Daniel\AppData\Local\{7AA5CF45-0F0B-4B35-AAE1-3DD81D049A68} C:\Users\Daniel\AppData\Local\{FDC69BC4-E3FA-4671-9228-A750639B7823} C:\Users\Daniel\AppData\Local\{BA783D17-C3F6-4474-8261-BEADEAA76297} C:\Users\Daniel\AppData\Local\{F849452B-58FC-4ADA-BD5D-FEE13782B70A} C:\Users\Daniel\AppData\Local\{A62B5585-96B1-472E-B0D3-E0469E5A3DAB} Task: {5BA07E2A-866C-4C33-B3CB-ACEF9882630C} - System32\Tasks\{F70037E7-28B9-4D71-9C26-4E23BAF2B628} => pcalua.exe -a C:\Users\Daniel\AppData\Local\Temp\Temp1_AiCharger_V10006_XpVistaWin7.zip\V1.00.06\Setup.exe <==== ATTENTION Task: {DD4CAC4F-8382-462F-93AA-28DDF484953A} - System32\Tasks\{27BAE1BD-66F6-4096-A9ED-76F1DBFA72F4} => pcalua.exe -a "C:\Users\Daniel\AppData\Local\Temp\Temp1_Install_Flash_Player_10_ActiveX.zip\Install Flash Player 10 ActiveX.exe" <==== ATTENTION ShortcutWithArgument: C:\Users\Daniel\Desktop\SWLE dynasty exchange.lnk -> C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> "hxxp://tech-connect.biz/?ssid=1473705933&a=1107267&src=sh&uuid=ed5675fd-5b50-4783-823e-490795f16b24,1473705861128" ShortcutWithArgument: C:\Users\Daniel\Desktop\SWLE Your Profile.lnk -> C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> "hxxp://tech-connect.biz/?ssid=1473705933&a=1107267&src=sh&uuid=ed5675fd-5b50-4783-823e-490795f16b24,1473705861128" ShortcutWithArgument: C:\Users\Daniel\Desktop\ENTRETIEN\Mozilla Firefox.lnk -> C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> "hxxp://tech-connect.biz/?ssid=1473705933&a=1107267&src=sh&uuid=ed5675fd-5b50-4783-823e-490795f16b24,1473705861128" ShortcutWithArgument: C:\Users\Daniel\Desktop\Bureautique\Avast SafeZone Browser.lnk -> C:\Program Files\AVAST Software\SZBrowser\launcher.exe (Avast Software) -> "hxxp://tech-connect.biz/?ssid=1473705933&a=1107267&src=sh&uuid=ed5675fd-5b50-4783-823e-490795f16b24,1473705861128" ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast SafeZone Browser.lnk -> C:\Program Files\AVAST Software\SZBrowser\launcher.exe (Avast Software) -> "hxxp://tech-connect.biz/?ssid=1473705933&a=1107267&src=sh&uuid=ed5675fd-5b50-4783-823e-490795f16b24,1473705861128" AlternateDataStreams: C:\ProgramData\Temp:FCA8C9CD [116] Reg: reg delete "HKU\S-1-5-21-872265599-3300476396-1577062780-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Virtual DJ Packages" /f Reg: reg delete "HKU\S-1-5-21-872265599-3300476396-1577062780-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Virtual DJ Packages" /f RemoveProxy: EmptyTemp: end --> Enregistre le fichier dans le dossier Téléchargements (au même endroit que le programme FRST) sous le nom fixlist.txt --> Lance FRST (Sous Windows Vista/7/8/10, clic droit sur FRST > Exécuter en tant qu'administrateur). --> Clique sur Corriger. Patiente le temps de la correction. Note : si l'outil a besoin d'un redémarrage, laisse le système redémarrer normalement, l'outil terminera son travail. --> Une fois la correction terminée, un rapport Fixlog.txt remplacera le fichier fixlist. --> Héberge le rapport sur pjjoint.malekal.com et copie-colle le lien fourni dans ta prochaine réponse.

titanchois · Answer

Merci encore , et excuse-moi pour le temps de réponse, je suis en Nlle Calédonie et décalage horaire oblige...
Mozilla , j'avais réinstallé un vieux fichier que j'avais dans un dossier.
je désinstallerai les spybot plus tard..
le lien après correction..
https://pjjoint.malekal.com/files.php?id=20160914_n15o6f911p6
mais com!ment saurais-je que je n'ai plus cette infection ?
 et c'est de ma faute !
Merci pour ton temps et ton savoir passé ici

Destrio5 · Answer

"et excuse-moi pour le temps de réponse, je suis en Nlle Calédonie et décalage horaire oblige"

--> Ne t'inquiète pas pour ça, j'avais vu pour le pays étant modérateur.

"mais com!ment saurais-je que je n'ai plus cette infection ?"

--> Tu peux vérifier manuellement dans les propriétés des raccourcis de tes navigateurs. Vois-tu encore tech-connect.biz ?

Je voudrais un nouveau rapport d'analyse FRST (et Addition) s'il te plaît (pour vérifier).

titanchois · Answer

Rebonjour, voici addition et FRST.... il y en a 1 km ! Résultats de l'Analyse supplémentaire de Farbar Recovery Scan Tool (x64) Version: 16-09-2016 Exécuté par Daniel (16-09-2016 10:01:08) Exécuté depuis C:\Users\Daniel\Downloads Windows 10 Home Version 1511 (X64) (2015-11-17 19:59:41) Mode d'amorçage: Normal ========================================================== ==================== Comptes: ============================= Administrateur (S-1-5-21-872265599-3300476396-1577062780-500 - Administrator - Disabled) Daniel (S-1-5-21-872265599-3300476396-1577062780-1001 - Administrator - Enabled) => C:\Users\Daniel DefaultAccount (S-1-5-21-872265599-3300476396-1577062780-503 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-872265599-3300476396-1577062780-1003 - Limited - Enabled) Invité (S-1-5-21-872265599-3300476396-1577062780-501 - Limited - Disabled) ==================== Centre de sécurité ======================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.) AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AV: Avast Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B} AS: Spybot - Search and Destroy (Disabled - Up to date) {A16C3F68-9280-E053-1818-342707FECF4D} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Avast Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736} ==================== Programmes installés ====================== (Seuls les logiciels publicitaires ('adware') avec la marque 'caché' ('Hidden') sont susceptibles d'être ajoutés au fichier fixlist.txt pour qu'ils ne soient plus masqués. Les programmes publicitaires devront être désinstallés manuellement.) Ad-Aware Antivirus (HKLM\...\{36036827-FA38-4A74-8333-26BC4EEC9308}_AdAwareUpdater) (Version: 11.12.945.9202 - Lavasoft) Ad-Aware Web Companion (x32 Version: 1.1.987.2028 - Lavasoft) Hidden AdAwareInstaller (Version: 11.12.945.9202 - Lavasoft) Hidden AdAwareUpdater (Version: 11.12.945.9202 - Lavasoft) Hidden Adobe Flash Player 23 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 23.0.0.162 - Adobe Systems Incorporated) Adobe Photoshop CS5 (HKLM-x32\...\{15FEDA5F-141C-4127-8D7E-B962D1742728}) (Version: 12.0 - Adobe Systems Incorporated) Adobe Shockwave Player 12.2 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.2.4.194 - Adobe Systems, Inc.) Advanced Office Password Recovery (remove only) (HKLM-x32\...\Advanced Office Password Recovery) (Version: 4.15 - Elcomsoft Co.Ltd.) Alcor Micro USB Card Reader (HKLM-x32\...\InstallShield_{878CADF7-5BD6-4A29-A6F4-AC51C0CE8068}) (Version: 1.8.17.26026 - Alcor Micro Corp.) Alcor Micro USB Card Reader (x32 Version: 1.8.17.26026 - Alcor Micro Corp.) Hidden Ansel (Version: 372.54 - NVIDIA Corporation) Hidden AntimalwareEngine (Version: 3.0.129.0 - Lavasoft) Hidden Apple Application Support (32 bits) (HKLM-x32\...\{D4B07658-F443-4445-A261-E643996E139D}) (Version: 4.3.2 - Apple Inc.) Apple Application Support (64 bits) (HKLM\...\{A6B0442B-E159-444B-B49D-6B9AC531EAE3}) (Version: 4.3.2 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{6F085FCD-4B6A-4F63-AF23-B74629C40797}) (Version: 9.3.0.15 - Apple Inc.) Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.) Assistant de traduction IdiomaX (HKLM-x32\...\IdiomaX Assistant 4.0) (Version: 4.0 - IdiomaX LLC.) ASUS Ai Charger (HKLM-x32\...\{7FB64E72-9B0E-4460-A821-040C341E414A}) (Version: 1.03.00 - ASUSTeK Computer Inc.) ASUS AI Recovery (HKLM-x32\...\{38253529-D97D-4901-AE53-5CC9736D3A2E}) (Version: 1.0.13 - ASUS) ASUS FancyStart (HKLM-x32\...\{2B81872B-A054-48DA-BE3B-FA5C164C303A}) (Version: 1.1.0 - ASUSTeK Computer Inc.) ASUS LifeFrame3 (HKLM-x32\...\{1DBD1F12-ED93-49C0-A7CC-56CBDE488158}) (Version: 3.0.21 - ASUS) ASUS Live Update (HKLM-x32\...\{E657B243-9AD4-4ECC-BE81-4CCF8D667FD0}) (Version: 2.5.9 - ASUS) ASUS Power4Gear Hybrid (HKLM\...\{9B6239BF-4E85-4590-8D72-51E30DB1A9AA}) (Version: 1.1.44 - ASUS) ASUS SmartLogon (HKLM-x32\...\{64452561-169F-4A36-A2FF-B5E118EC65F5}) (Version: 1.0.0011 - ASUS) ASUS Splendid Video Enhancement Technology (HKLM-x32\...\{0969AF05-4FF6-4C00-9406-43599238DE0D}) (Version: 1.02.0031 - ASUS) ASUS Video Magic (HKLM-x32\...\InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}) (Version: 6.0.4710 - CyberLink Corp.) ASUS Video Magic (x32 Version: 6.0.4710 - CyberLink Corp.) Hidden ASUS Virtual Camera (HKLM-x32\...\{EC8BD21F-0CA0-4BBF-97D9-4A52B30041A1}) (Version: 1.0.21 - asus) ASUS_Screensaver (HKLM-x32\...\ASUS_Screensaver) (Version: - ) AsusVibe2.0 (HKLM-x32\...\Asus Vibe2.0) (Version: 2.0.4.617 - ASUSTEK) Atheros Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 7.0 - Atheros) ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0008 - ASUS) Audacity 2.1.0 (HKLM-x32\...\Audacity_is1) (Version: 2.1.0 - Audacity Team) Audacity 2.1.2 (HKLM-x32\...\Audacity®_is1) (Version: 2.1.2 - Audacity Team) Auslogics Disk Defrag (HKLM-x32\...\{DF6A13C0-77DF-41FE-BD05-6D5201EB0CE7}_is1) (Version: 7.0.0.0 - Auslogics Labs Pty Ltd) Autoclics version Autoclics_4.1.0 (HKLM-x32\...\{4565939C-AABE-46B5-A128-E5CD330B1373}_is1) (Version: Autoclics_4.1.0 - Ady) Avanquest update (HKLM-x32\...\{76E41F43-59D2-4F30-BA42-9A762EE1E8DE}) (Version: 1.34 - Avanquest Software) Avast Antivirus Gratuit (HKLM-x32\...\avast) (Version: 12.3.2280 - AVAST Software) AVI-FLV-MP4-WMV Converter 2.2 (HKLM-x32\...\AVI-FLV-MP4-WMV Converter_is1) (Version: - Auvisoft, Inc.) Bluetooth Win7 Suite (64) (HKLM\...\{230D1595-57DA-4933-8C4E-375797EBB7E1}) (Version: 7.2.0.65 - Atheros Communications) Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.) Canon MP210 series (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP210_series) (Version: - ) CCleaner (HKLM\...\CCleaner) (Version: 5.21 - Piriform) CDex - Open Source Digital Audio CD Extractor (HKLM-x32\...\CDex) (Version: 1.70.4.2009 - Georgy Berdyshev) Control ActiveX de Windows Live Mesh para conexiones remotas (HKLM-x32\...\{04668DF2-D32F-4555-9C7E-35523DCD6544}) (Version: 15.4.5722.2 - Microsoft Corporation) Contrôle ActiveX Windows Live Mesh pour connexions à distance (HKLM-x32\...\{55D003F4-9599-44BF-BA9E-95D060730DD3}) (Version: 15.4.5722.2 - Microsoft Corporation) Controlo ActiveX do Windows Live Mesh para Ligações Remotas (HKLM-x32\...\{E54EEB5D-41ED-40FE-B4A8-8565DB81469B}) (Version: 15.4.5722.2 - Microsoft Corporation) D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden DirectX 9 Runtime (x32 Version: 1.00.0000 - Sonic Solutions) Hidden DJ ProMixer Free Home Edition version 2.0 (HKLM-x32\...\{4A76BCAE-68EF-4595-AC08-5F8AE76E82DE}_is1) (Version: 2.0 - DigitalMultiSoft) Dropbox (HKLM-x32\...\Dropbox) (Version: 10.4.25 - Dropbox, Inc.) Dropbox Update Helper (x32 Version: 1.3.47.1 - Dropbox, Inc.) Hidden DVD Shrink 3.2 (HKLM-x32\...\DVD Shrink_is1) (Version: - DVD Shrink) DVD Shrink version 4.2 (HKLM-x32\...\{CE0C52A9-0C1C-4289-875A-8FB81BB9A367}_is1) (Version: 4.2 - DVDShrink) EasyCleaner (HKLM-x32\...\{F5346614-B7C4-4E94-826A-E2363155233D}) (Version: 2.0.6.380 - ToniArts) ETDWare PS/2-x64 7.0.5.16_WHQL (HKLM\...\Elantech) (Version: 7.0.5.16 - ELAN Microelectronics Corp.) Expert PDF 7 Professional (HKLM-x32\...\{FC279721-37A6-4777-AFD8-7A56681EBA14}) (Version: 7.0.1980.0 - Avanquest software) ExpressGate Cloud (HKLM-x32\...\InstallShield_{499DED08-6FA8-4749-8E94-8526CC9D1CA8}) (Version: 2.1.88.405 - Asus) ExpressGate Cloud (x32 Version: 2.1.88.405 - Asus) Hidden Fast Boot (HKLM\...\{13F4A7F3-EABC-4261-AF6B-1317777F0755}) (Version: 1.0.9 - ASUS) Free PDF to Word Doc Converter v1.1 (HKLM-x32\...\Free PDF to Word Doc Converter_is1) (Version: 1.1 - www.hellopdf.com) French App Name (HKLM-x32\...\com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.8 - Adobe Systems Incorporated) French App Name (x32 Version: 1.8 - Adobe Systems Incorporated) Hidden Fresco Logic USB3.0 Host Controller (HKLM\...\{5B9F1BB4-4C06-41E8-877D-B458742B0D0A}) (Version: 3.0.116.3 - Fresco Logic Inc.) Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Game Park Console (HKLM-x32\...\{E71E60C1-533E-45A5-8D80-E475E88D2B17}_is1) (Version: 6.2.1.1 - Oberon Media, Inc.) Glary Utilities 5.59 (HKLM-x32\...\Glary Utilities 5) (Version: 5.59.0.80 - Glarysoft Ltd) Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google) HP Deskjet 1050 J410 series Aide (HKLM-x32\...\{5C90D8CF-F12A-41C6-9007-3B651A1F0D78}) (Version: 140.0.66.66 - Hewlett Packard) HP Support Solutions Framework (HKLM-x32\...\{FC3C2B77-6800-48C6-A15D-9D1031130C16}) (Version: 11.51.0049 - Hewlett-Packard Company) HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard) iCloud (HKLM\...\{724A887F-2B55-4306-B6F9-8F0E7A04B1B5}) (Version: 5.2.2.87 - Apple Inc.) Incomedia WebSite X5 v11 - Evolution (HKLM-x32\...\{EC4C85CF-8A29-4506-A0A3-78D1B2FA557B}_is1) (Version: 11.0.1.12 - Incomedia s.r.l.) InPixio Photo (HKLM-x32\...\{5F0C0CD8-77B1-4C3E-9F01-5AF10D85DBB4}) (Version: 6.03.0 - Avanquest Software) Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.3347 - Intel Corporation) Intel(R) Turbo Boost Technology Monitor 2.0 (HKLM\...\{B77EFA0B-9BD3-4122-9F9A-15A963B5EA24}) (Version: 2.1.23.0 - Intel) iTunes (HKLM\...\{6DBC2AD3-28FC-4691-8A96-9049420C1DEC}) (Version: 12.4.3.1 - Apple Inc.) IZArc 3.4.1.6 (HKLM-x32\...\IZArc 3.4.1.6_is1) (Version: 3.4.1.6 - Ivan Zahariev) IZArc 4.2 (HKLM-x32\...\{97C82B44-D408-4F14-9252-47FC1636D23E}_is1) (Version: 4.2 - Ivan Zahariev) Java 8 Update 101 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180101F0}) (Version: 8.0.1010.13 - Oracle Corporation) Java 8 Update 102 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180102F0}) (Version: 8.0.1020.14 - Oracle Corporation) Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version: - ) LavasoftTcpService (x32 Version: 2.3.4.2 - Lavasoft) Hidden Logiciel de base du périphérique HP Deskjet 1050 J410 series (HKLM\...\{635F63A6-9FC8-4101-B109-00698C6F3A91}) (Version: 28.0.1313.0 - Hewlett-Packard Co.) MailWasher (HKLM-x32\...\{5BD3A5C5-F663-4606-944E-3857D79F75E3}) (Version: 7.8.10 - Firetrust) MailWasher Free 6.52 Fr (HKLM-x32\...\MailWasher Free 6.52 Fr) (Version: - ) Malwarebytes Anti-Malware version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes) Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation) Microsoft Office « Démarrer en un clic » 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation) Microsoft Office Famille et Étudiant 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft Publisher 98 (HKLM-x32\...\MSPUB5) (Version: - ) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50428.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft SQL Server Compact 3.5 SP2 ENU (HKLM-x32\...\{3A9FC03D-C685-4831-94CF-4EDFD3749497}) (Version: 3.5.8080.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation) Mises à jour NVIDIA 2.11.4.0 (Version: 2.11.4.0 - NVIDIA Corporation) Hidden Module linguistique Microsoft Visual Studio 2010 Tools pour Office Runtime (x64) - FRA (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - FRA) (Version: 10.0.50903 - Microsoft Corporation) Mozilla Firefox 48.0.2 (x86 fr) (HKLM-x32\...\Mozilla Firefox 48.0.2 (x86 fr)) (Version: 48.0.2 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 48.0.2.6079 - Mozilla) MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) Nuance PDF Reader (HKLM-x32\...\{B480904D-F73F-4673-B034-8A5F492C9184}) (Version: 6.00.0041 - Nuance Communications, Inc.) NVIDIA GeForce Experience 2.11.4.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.11.4.0 - NVIDIA Corporation) NVIDIA Logiciel système PhysX 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation) NVIDIA Pilote graphique 372.54 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 372.54 - NVIDIA Corporation) OpenOffice 4.1.1 (HKLM-x32\...\{121727D5-FDF3-4723-BA57-EB383440ED72}) (Version: 4.11.9775 - Apache Software Foundation) Paint Shop Pro 7 Anniversary Edition (HKLM-x32\...\{D6DE02C7-1F47-11D4-9515-00105AE4B89A}) (Version: 7.0.4.0000 - Jasc Software Inc | Editions WSKA ) Pale Moon 26.4.1 (x86 en-US) (HKLM-x32\...\Pale Moon 26.4.1 (x86 en-US)) (Version: 26.4.1 - Moonchild Productions) Panneau de configuration NVIDIA 372.54 (Version: 372.54 - NVIDIA Corporation) Hidden PDF Settings CS5 (x32 Version: 10.0 - Adobe Systems Incorporated) Hidden Pdf995 (HKLM-x32\...\Pdf995) (Version: - ) Pluzzed version 0.9 (HKLM-x32\...\{139495F2-4CCF-40A1-BE46-25614610AF29}_is1) (Version: 0.9 - czmaster) QuickTime 7 (HKLM-x32\...\{FF59BD75-466A-4D5A-AD23-AAD87C5FD44C}) (Version: 7.79.80.95 - Apple Inc.) Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden RealDownloader (x32 Version: 18.1.4.137 - RealNetworks, Inc.) Hidden RealDownloader (x32 Version: 18.1.4.144 - RealNetworks) Hidden RealNetworks - Microsoft Visual C++ 2008 Runtime (x32 Version: 9.0 - RealNetworks, Inc) Hidden RealNetworks - Microsoft Visual C++ 2010 Runtime (Version: 10.0 - RealNetworks, Inc) Hidden RealNetworks - Microsoft Visual C++ 2010 Runtime (x32 Version: 10.0 - RealNetworks, Inc) Hidden RealPlayer (RealTimes) (HKLM-x32\...\RealPlayer 18.1) (Version: 18.1.4 - RealNetworks) Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.41.216.2011 - Realtek) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7535 - Realtek Semiconductor Corp.) RealUpgrade 1.1 (x32 Version: 1.1.0 - RealNetworks, Inc.) Hidden Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group) Revo Uninstaller 2.0.0 (HKLM\...\{A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97}_is1) (Version: 2.0.0 - VS Revo Group, Ltd.) Roxio Creator 2010 (HKLM-x32\...\{89A15676-78AE-4D51-BF5B-DEE3E0D46C94}) (Version: 12.0 - Roxio) Roxio File Backup (Version: 1.3.0 - Roxio) Hidden SafeZone Stable 1.51.2220.53 (x32 Version: 1.51.2220.53 - Avast Software) Hidden Scanner Mouse (HKLM-x32\...\{034B2BAC-C151-41E1-A7E8-7A02C77A2457}) (Version: 1.7.0 - Dacuda) Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft) SHIELD Streaming (Version: 7.1.0280 - NVIDIA Corporation) Hidden SHIELD Wireless Controller Driver (Version: 2.11.4.0 - NVIDIA Corporation) Hidden Skype™ 7.27 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.27.101 - Skype Technologies S.A.) SmartSound Quicktracks Plugin (HKLM-x32\...\InstallShield_{4A7FDA4D-F4D7-4A49-934A-066D59A43C7E}) (Version: 3.0.8.0 - SmartSound Software Inc) SmartSound Quicktracks Plugin (x32 Version: 3.0.8.0 - SmartSound Software Inc) Hidden SonicMaster (HKLM-x32\...\{09BCB9CE-964B-4BDA-AE46-B5A0ABEF1D3F}) (Version: 1.00.0000 - Virage Logic, Corp.) Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.5.43 - Safer-Networking Ltd.) Stellar Phoenix Windows Data Recovery - Home (HKLM-x32\...\Stellar Phoenix Windows Data Recovery - Home_is1) (Version: 6.0.0.1 - Stellar Information Technology Pvt Ltd) SuperCopier2 (HKLM-x32\...\SuperCopier2) (Version: - ) swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden syncables desktop SE (HKLM-x32\...\{341697D8-9923-445E-B42A-529E5A99CB7A}) (Version: 5.5.746.11492 - syncables) SyncBackFree (HKLM-x32\...\SyncBackFree_is1) (Version: 7.0.14.0 - 2BrightSparks) TVO version 3.73_RecTV (HKLM-x32\...\{0886B9CF-BFF9-42E6-BFDC-4C882A91E02A}_is1) (Version: 3.73_RecTV - ) Ugrib RC1 (HKLM-x32\...\Ugrib_is1) (Version: Release Candidate 0.2.4 - GRIB.US) Unlocker 1.9.2 (HKLM\...\Unlocker) (Version: 1.9.2 - Cedrick Collomb) UpdateService (x32 Version: 1.0.0 - RealNetworks, Inc.) Hidden vc2012_redist (x32 Version: 1.0.0.0 - Realnetworks) Hidden VD64Inst (Version: 1.00.0000 - Roxio, Inc.) Hidden VeryPDF PDF2Word v3.0 (HKLM-x32\...\VeryPDF PDF2Word v3.0_is1) (Version: - VeryPDF.com Inc) Video Downloader (x32 Version: 1.2.0 - RealNetworks) Hidden Virtual DJ Packages (HKU\S-1-5-21-872265599-3300476396-1577062780-1001\...\Virtual DJ Packages) (Version: - ) <==== ATTENTION VirtualDJ Home FREE (HKLM-x32\...\{731CCCF4-E02D-4B0E-BE9B-DF2D54D40564}) (Version: 7.4.6 - Atomix Productions) VLC media player (HKLM\...\VLC media player) (Version: 2.2.4 - VideoLAN) VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.4 - VideoLAN) Vulkan Run Time Libraries 1.0.11.1 (HKLM\...\VulkanRT1.0.11.1) (Version: 1.0.11.1 - LunarG, Inc.) Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3508.1109 - Microsoft Corporation) Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen (HKLM-x32\...\{C32CE55C-12BA-4951-8797-0967FDEF556F}) (Version: 15.4.5722.2 - Microsoft Corporation) Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}) (Version: 15.4.5722.2 - Microsoft Corporation) Windows Live Mesh ActiveX control for remote connections (HKLM-x32\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation) Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{C63A1E60-B6A4-440B-89A5-1FC6E4AC1C94}) (Version: 15.4.5722.2 - Microsoft Corporation) WinFlash (HKLM-x32\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 2.31.1 - ASUS) WinRAR 5.40 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.40.0 - win.rar GmbH) WinRAR 5.40 beta 1 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.40.1 - win.rar GmbH) Wireless Console 3 (HKLM-x32\...\{20FDF948-C8ED-4543-A539-F7F4AEF5AFA2}) (Version: 3.0.19 - ASUS) Youtube Downloader HD v. 2.9.9.23 (HKLM-x32\...\Youtube Downloader HD_is1) (Version: - YoutubeDownloaderHD.com) Στοιχείο ελέγχου ActiveX του Windows Live Mesh για απομακρυσμένες συνδέσεις (HKLM-x32\...\{F665F3B8-01B4-46A9-8E47-FF8DC2208C9F}) (Version: 15.4.5722.2 - Microsoft Corporation) Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Основные компоненты Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Почта Windows Live (x32 Version: 15.4.3502.0922 - Корпорация Майкрософт) Hidden Фотоальбом Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Элемент управления Windows Live Mesh ActiveX для удаленных подключений (HKLM-x32\...\{BCB0D6F7-7EAB-4009-A6F2-8E0E7F317773}) (Version: 15.4.5722.2 - Microsoft Corporation) גלריית התמונות של Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden פקד ActiveX של Windows Live Mesh עבור חיבורים מרוחקים (HKLM-x32\...\{9D4C7DFA-CBBB-4F06-BDAC-94D831406DF0}) (Version: 15.4.5722.2 - Microsoft Corporation) بريد Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden عنصر تحكم ActiveX الخاص بـ Windows Live Mesh للاتصالات البعيدة (HKLM-x32\...\{E18B30AA-6E2D-480C-B918-AF61009F4010}) (Version: 15.4.5722.2 - Microsoft Corporation) معرض صور Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden 適用遠端連線的 Windows Live Mesh ActiveX 控制項 (HKLM-x32\...\{622DE1BE-9EDE-49D3-B349-29D64760342A}) (Version: 15.4.5722.2 - Microsoft Corporation) ==================== Personnalisé CLSID (Avec liste blanche): ========================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) CustomCLSID: HKU\S-1-5-21-872265599-3300476396-1577062780-1001_Classes\CLSID\{57B13C80-C59C-4981-8870-4A209C1B7589}\InprocServer32 -> C:\Program Files\Roxio 2010\Virtual Drive 10\DC_ShellExt64.dll (Sonic Solutions) CustomCLSID: HKU\S-1-5-21-872265599-3300476396-1577062780-1001_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\Daniel\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\FileCoAuth.exe (Microsoft Corporation) ==================== Tâches planifiées (Avec liste blanche) ============= (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) Task: {01C995FF-D178-4E7B-AC4A-9E950006A207} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\Windows\ehome\mcupdate.exe Task: {0837D897-84CB-4E30-A8DD-807937A81DFC} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\Windows\ehome\mcupdate.exe Task: {0997B900-2075-42B2-8DE6-2743DEC92CFC} - System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-872265599-3300476396-1577062780-1001 => C:\Program Files (x86)\RealNetworks\RealDownloader\RealUpgrade.exe [2016-05-13] (RealNetworks, Inc.) Task: {09B0A199-C41F-4777-B793-96E3D0C208F6} - \Microsoft\Windows\Setup\gwx efreshgwxconfigandcontent -> Pas de fichier <==== ATTENTION Task: {0CBDECE3-245B-444D-B4B4-99F82640DEAF} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe [2016-03-21] (Safer-Networking Ltd.) Task: {0E8AA252-BF32-45DA-9F59-6F81EC6F24F2} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\Windows\ehome\ehrec.exe Task: {0F1FC558-90E6-41AA-8D37-4FBE69053762} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\Windows\ehome\MCUpdate.exe Task: {126FD854-8E41-46A5-82FB-9F6F2B50309D} - System32\Tasks\{6A998A58-AA55-419A-9EA3-902FDD1300FC} => pcalua.exe -a "D:\Paint Shop Pro 7\ar500fra.exe" -d "D:\Paint Shop Pro 7" Task: {148318FC-5974-4508-A415-B3AFD16E5DDB} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\Windows\ehome\ehPrivJob.exe Task: {1824D99B-DFE2-4AD6-86D2-267D7283A87E} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe [2016-03-21] (Safer-Networking Ltd.) Task: {1E66AE9F-71E4-44DE-AF6C-0939692F6288} - System32\Tasks\ASUS Patch 10430001 => C:\Windows\AsPatch10430001.exe [2010-07-29] () Task: {227F4791-4909-40F1-866E-DC09A04506E3} - System32\Tasks\ASUS SmartLogon Console Sensor => C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe [2010-11-16] (ASUS) Task: {232714FB-6BED-40A8-8F5A-D39FD96C9996} - System32\Tasks\Apple Diagnostics => C:\Program Files (x86)\Common Files\Apple\Internet Services\EReporter.exe [2016-07-08] (Apple Inc.) Task: {2429E2BC-1966-47C4-BAC2-38E4D4E60914} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-08-06] (Piriform Ltd) Task: {255A84C4-5793-41A1-8749-20B1D1996D71} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Pas de fichier <==== ATTENTION Task: {26AA273E-F11C-48D5-B7F1-5B715F9E2AD7} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2016-08-20] (Dropbox, Inc.) Task: {29308477-8F7E-4D4F-92D5-F1534E61B6F5} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\Windows\ehome\ehPrivJob.exe Task: {2B86BBFE-9CB1-44E6-9408-3A5F070494F3} - System32\Tasks\SafeZone scheduled Autoupdate 1462678697 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe [2016-08-09] (Avast Software) Task: {33B000BB-BE94-49FE-B3F1-2BA6FD6F2E4C} - System32\Tasks\GlaryInitialize 5 => C:\Program Files (x86)\Glary Utilities 5\Initialize.exe [2016-09-05] (Glarysoft Ltd) Task: {35691046-7055-4BBF-831E-4ADEACC161AF} - System32\Tasks\{2180E461-15CD-43AE-A94E-45F305690233} => pcalua.exe -a "F:\WEB 5 FULL\wsx5_full_fr.exe" -d "F:\WEB 5 FULL" Task: {35C813A3-4F3E-4849-82E9-614605786DC5} - System32\Tasks\{C1997626-4A64-47EA-8558-672DFF3A5F64} => F:\sauvegarde_1\caleuro\CAL_EURO\CAL_EURO.EXE Task: {36CCC6CF-5706-4583-8A74-3AE79DD65A79} - System32\Tasks\{71CEBF81-268F-426F-85D2-5F5FE5AFBDFC} => F:\sauvegarde_1\caleuro\CAL_EURO\CAL_EURO.EXE Task: {372F8C3F-8469-4A4C-A837-E6F84AEC3DDC} - System32\Tasks\{43F45B36-33E7-4A91-B9EA-B36D3DED56AF} => F:\sauvegarde_1\caleuro\CAL_EURO\CAL_EURO.EXE Task: {3C9616B2-742C-4820-AFAE-F3D2459E9677} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\Windows\ehome\ehPrivJob.exe Task: {3D966D87-5FE5-4FBC-8E90-DB0F48E454DB} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\Windows\ehome\ehPrivJob.exe Task: {3E3E65EA-6693-4ACC-947D-206853F50D65} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\Windows\ehome\ehPrivJob.exe Task: {42145BE5-4059-431F-919A-1A381C5966DE} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\Windows\ehome\mcupdate.exe Task: {4301CE25-1FC8-4293-9BF8-C445A9381B98} - System32\Tasks\ASUS P4G => C:\Program Files\P4G\BatteryLife.exe [2011-03-08] (ASUS) Task: {4861F04A-79E0-4B4B-A33B-B3C292858D10} - System32\Tasks\{13D15674-D30A-4E67-9222-0E88F4BFA5E9} => Firefox.exe hxxp://ui.skype.com/ui/0/7.26.0.101/fr/abandoninstall?source=lightinstaller&page=tsMain Task: {4D4F799E-7B11-480D-9B32-357239447874} - \Microsoft\Windows\Setup\gwx efreshgwxcontent -> Pas de fichier <==== ATTENTION Task: {56D6B4C0-14B7-48EC-AB20-F8C5FB9CD1D2} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2016-08-20] (Dropbox, Inc.) Task: {572CD30E-8ABF-476D-A09E-C530DF225F1C} - System32\Tasks\{6A6FE471-10E4-4B36-9AEC-6A478124631B} => pcalua.exe -a E:\ACMSETUP.EXE -d E:\ Task: {58C3F7A9-123B-43D5-80DC-89AF91999B41} - System32\Tasks\{12C20031-D984-438B-BED0-0894B1FCCDC8} => F:\sauvegarde_1\caleuro\CAL_EURO\CAL_EURO.EXE Task: {5BBFAF24-74F2-4A5D-952F-8BADCB689031} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Pas de fichier <==== ATTENTION Task: {5FE02568-A928-4370-8C24-7A70C2BD3037} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe [2015-06-16] (Safer-Networking Ltd.) Task: {618ECD91-FCA9-4439-8931-928BC4FB9702} - System32\Tasks\{A8F7F67D-CE40-49D1-9F84-F8CFBD7A1D49} => C:\Program Files (x86)\PDFCreator\PDFCreator.exe Task: {6306E65C-033E-4826-8CDF-23D14E72DBAE} - System32\Tasks\AdobeAAMUpdater-1.0-MicrosoftAccount-titanchois@hotmail.com => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-03-06] (Adobe Systems Incorporated) Task: {6D511AA6-D944-42D8-AAC8-B873A71FC006} - System32\Tasks\{2D1FC4C6-B45D-415F-85E0-9381376B47B0} => pcalua.exe -a C:\Users\Daniel\Desktop\Bureautique\PDF\PDFCreator-0_9_3_GPLGhostscript.exe -d C:\Users\Daniel\Desktop\Bureautique\PDF Task: {6FECF9BE-AED8-4627-80ED-91FF5361960F} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\Windows\ehome\ehPrivJob.exe Task: {70AE8FB0-BB49-4B28-82E7-BE101B38F66C} - System32\Tasks\{7D5FEECE-8014-4A29-9459-E5F5DE2FF38D} => F:\sauvegarde_1\caleuro\CAL_EURO\CAL_EURO.EXE Task: {770BA2DD-4E91-425F-9C9E-FC3499C762C9} - System32\Tasks\{FF1403A9-6F69-4849-9B73-AEE7DC7105CC} => pcalua.exe -a F:\Websitex5evolution_fr.exe\WebsiteX5Evolution_fr.exe -d F:\Websitex5evolution_fr.exe Task: {773492A6-4F08-4DAF-9C1B-778BC17ACAED} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\Windows\ehome\ehPrivJob.exe Task: {774F4BA6-7604-45F0-AA20-240FA75D2D33} - System32\Tasks\Ad-Aware Update (Weekly) => C:\Program Files (x86)\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe Task: {783C0DB0-EF0F-407C-A146-8F5FED24D33B} - System32\Tasks\RealDownloader Update Check => C:\Program Files (x86)\RealNetworks\RealDownloader\downloader2.exe [2016-07-05] () Task: {78588675-6CF3-4E50-B5B1-1EC34EAA2F6B} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\Windows\ehome\ehPrivJob.exe Task: {7DDF9673-8D0B-4652-B795-1BEAD1206B65} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\Windows\ehome\ehPrivJob.exe Task: {81BA090B-495B-47DD-966D-806D66E3BC71} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2016-09-13] (Microsoft Corporation) Task: {889614F8-D359-40B9-9488-4761D48E2F53} - \Microsoft\Windows\Setup\GWXTriggers efreshgwxconfig-B -> Pas de fichier <==== ATTENTION Task: {8E357E84-7972-43A2-BE6E-7C91C79E96EF} - \Microsoft\Windows\Setup\gwx efreshgwxconfig -> Pas de fichier <==== ATTENTION Task: {9B406E11-7D87-4F8F-A377-E262F75B6BBB} - System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-872265599-3300476396-1577062780-1001 => C:\Program Files (x86)\RealNetworks\RealDownloader ecordingmanager.exe [2016-05-13] (RealNetworks, Inc.) Task: {9C19DFC5-CFB8-4830-AD6B-70DF83B1080E} - System32\Tasks\{4DDCBCFC-33D8-41D1-AE75-499D2B462A77} => Firefox.exe hxxp://ui.skype.com/ui/0/6.14.0.104/fr/go/help.faq.installer?LastError=1618 Task: {9CCA4C1B-FC78-4C0F-91E7-D4E23DC9E5FF} - System32\Tasks\ATKOSD2 => C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [2010-08-18] (ASUS) Task: {9D6C3669-0B0F-4CE4-ACF8-6DC0B6BC2BC0} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Pas de fichier <==== ATTENTION Task: {A0D2BCE3-220A-4E55-A113-80CED75088BE} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-09-14] (Adobe Systems Incorporated) Task: {AA921623-B84A-4EC8-A6DA-5D46323FC6D9} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\Windows\ehome\ehPrivJob.exe Task: {AAD11801-4040-4B5D-829A-9B8D6101D4D1} - System32\Tasks\{E786276E-2E8B-4E7C-B9B5-CBA53829A0B8} => F:\sauvegarde_1\caleuro\CAL_EURO\CAL_EURO.EXE Task: {AB628DB7-D09D-4FC5-BEB7-D1DDC412A114} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe Task: {B3DA7732-72F1-4F7A-8A39-DF240074854B} - System32\Tasks\AdobeAAMUpdater-1.0-Daniel_PC-Daniel => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-03-06] (Adobe Systems Incorporated) Task: {BA70379C-4057-4201-AE24-A12367AEC311} - System32\Tasks\ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2010-08-03] (ASUS) Task: {BCE1722F-EF81-4ECB-A2EA-A2D83E3CE376} - System32\Tasks\DeviceDetector => C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe Task: {BDDDDF78-8603-43CE-890E-4BD991DA271C} - System32\Tasks\{2DF2B0D5-C083-4F73-8B50-5208A5DEB410} => F:\sauvegarde_1\caleuro\CAL_EURO\CAL_EURO.EXE Task: {BE7898B9-DFB4-44CB-A4FF-42BB007F7573} - System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-872265599-3300476396-1577062780-1001 => C:\Program Files (x86)\RealNetworks\RealDownloader\RealUpgrade.exe [2016-05-13] (RealNetworks, Inc.) Task: {BF2D6828-239A-4345-9DEF-03B905E19AD0} - System32\Tasks\ASUS Live Update => C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe [2007-12-01] () Task: {C28ACE45-220D-4B34-97B7-B8DC2D171C69} - System32\Tasks\{024D4890-A44D-4E7E-A34F-8ACB3AD2B192} => F:\sauvegarde_1\caleuro\CAL_EURO\CAL_EURO.EXE Task: {C3FC91E1-3A36-4AAC-8788-B7E7C6007C3E} - System32\Tasks\{6C4EBEED-5F77-470B-BFE9-E259C3E9C1F2} => pcalua.exe -a C:\Windows\system32\pcwrun.exe -c "C:\Program Files (x86)\PDFCreator\PDFCreator.exe" Task: {C778374C-94FE-41B0-B705-5FC952201AC0} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\Windows\ehome\mcupdate.exe Task: {C8605388-8290-4DB6-BDDB-7CE2F447E437} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Pas de fichier <==== ATTENTION Task: {C92AD4E0-BBBB-4CB3-A5C1-122CAFED39AB} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2016-09-09] (AVAST Software) Task: {CCDD08A5-0AAA-413E-9D75-84DFC2AC7471} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Pas de fichier <==== ATTENTION Task: {CCE7C6B1-0BDC-40B6-BB4E-27E9E5382197} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2015-06-24] (Realtek Semiconductor) Task: {CF484050-7DE8-43B3-BF85-4EF35C143C08} - System32\Tasks\{D766735A-44C4-43A8-AD27-C84F995FFDDE} => Firefox.exe hxxp://ui.skype.com/ui/0/6.22.0.107/fr/abandoninstall?page=tsProgressBar Task: {D6043D1C-720F-4B4A-B20D-DD992D5A5773} - System32\Tasks\{72C538C4-CA00-4E05-A9E3-DEB1DF503E12} => F:\sauvegarde_1\caleuro\CAL_EURO\CAL_EURO.EXE Task: {D8A2EFED-22AC-441D-B022-C4284386A2F5} - System32\Tasks\{1BB0E704-2FC9-49DD-8382-1CD2BD71DF30} => pcalua.exe -a "C:\Program Files (x86)\ASUS\AI Recovery\InstallTool.exe" -d "C:\Program Files (x86)\ASUS\AI Recovery" Task: {D974B021-811E-4690-A0C8-238BD340F0B0} - System32\Tasks\{78F18FAC-6FB3-490C-80EF-1B735CB8D05C} => pcalua.exe -a "C:\Program Files (x86)\iTunes\iTunes.exe" Task: {DB93B3F3-A645-4127-A2CD-492ECA90A039} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2016-02-23] (Apple Inc.) Task: {DD548504-31EE-43FF-A573-1E9BCB56DC76} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\Windows\ehome\ehrec.exe Task: {DD7897D1-277E-40D8-AB69-C19273681159} - System32\Tasks\GU5SkipUAC => C:\Program Files (x86)\Glary Utilities 5\Integrator.exe [2016-09-05] (Glarysoft Ltd) Task: {E3AB6ABA-447A-449E-8571-D533DBF365E6} - System32\Tasks\{275E17F5-B056-4C63-9534-CBA5B3F71883} => pcalua.exe -a C:\Users\Daniel\Desktop\PDF\PDFCreator-0_9_3_GPLGhostscript.exe -d C:\Users\Daniel\Desktop\PDF Task: {E4FCBA69-89B8-4474-B8C8-7F4F374F85B7} - System32\Tasks\{EB933AEE-458F-4AE7-A232-0A2AA446B995} => pcalua.exe -a "C:\Program Files (x86)\VS Revo Group\Revo Uninstaller\Revouninstaller.exe" -d "C:\Program Files (x86)\VS Revo Group\Revo Uninstaller" -c -hunter Task: {E91404B7-C19E-499F-ACDF-F97FA46D7DC9} - System32\Tasks\RtHDVBg => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2015-06-24] (Realtek Semiconductor) Task: {E959E007-A71C-4952-8EA8-22DE146D6227} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\Windows\ehome\ehPrivJob.exe Task: {EF40FDBE-85DB-483B-B495-5EF69877505B} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Pas de fichier <==== ATTENTION Task: {EFADEB0D-93D9-41B8-BC27-FACE004D1991} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Pas de fichier <==== ATTENTION Task: {F0496437-71B1-4E96-9E9C-3BC2F52CDE46} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\Windows\ehome\mcupdate.exe Task: {F551654E-9D19-403A-8B70-ADB0BD8CBD90} - System32\Tasks\{D4303E5D-2F7F-40AB-A3C9-83E848767388} => F:\sauvegarde_1\caleuro\CAL_EURO\CAL_EURO.EXE Task: {FACB8164-0888-403B-B4E6-7F59329EA90F} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\Windows\ehome\ehPrivJob.exe Task: {FBC8485F-A585-489F-8E2C-C65FEABC1BEF} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\Windows\ehome\mcupdate.exe Task: {FFEE4F98-789F-4BC5-9EBF-91D4AC658C46} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\Windows\ehome\ehPrivJob.exe (Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.) Task: C:\WINDOWS\Tasks\Ad-Aware Update (Weekly).job => C:\Program Files (x86)\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe ==================== Raccourcis ============================= (Les éléments sont susceptibles d'être inscrits dans le fichier fixlist.txt afin d'être supprimés ou restaurés.) Shortcut: C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VirtualDJ\Online Help.lnk -> hxxp://www.virtualdj.com/wiki/ Shortcut: C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VirtualDJ\www.virtualdj.com.lnk -> hxxp://www.virtualdj.com/ ShortcutWithArgument: C:\Users\Daniel\Favorites\IdiomaX sur le Web\Conjugaison de verbes.lnk -> C:\Windows\System32 undll32.exe (Microsoft Corporation) -> "C:\Program Files (x86)\Common Files\IdiomaX Shared\Cat 6.0\ComInterCat.dll",CallUrl hxxp://idiomax.com/Fr/conjugate.asp ShortcutWithArgument: C:\Users\Daniel\Favorites\IdiomaX sur le Web\Consultation de dictionnaires.lnk -> C:\Windows\System32 undll32.exe (Microsoft Corporation) -> "C:\Program Files (x86)\Common Files\IdiomaX Shared\Cat 6.0\ComInterCat.dll",CallUrl hxxp://idiomax.com/Fr/dictionary.asp ShortcutWithArgument: C:\Users\Daniel\Favorites\IdiomaX sur le Web\Traduction humaine de documents.lnk -> C:\Windows\System32 undll32.exe (Microsoft Corporation) -> "C:\Program Files (x86)\Common Files\IdiomaX Shared\Cat 6.0\ComInterCat.dll",CallUrl hxxp://idiomax.com/Fr/HumanTrdA.htm ShortcutWithArgument: C:\Users\Daniel\Favorites\IdiomaX sur le Web\Téléchargement de dictionnaires de traduction.lnk -> C:\Windows\System32 undll32.exe (Microsoft Corporation) -> "C:\Program Files (x86)\Common Files\IdiomaX Shared\Cat 6.0\ComInterCat.dll",CallUrl hxxp://idiomax.com/Fr/down_trandic40.asp ShortcutWithArgument: C:\Users\Daniel\Desktop\SWLE dynasty exchange.lnk -> C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> "hxxp://tech-connect.biz/?ssid=1473705933&a=1107267&src=sh&uuid=ed5675fd-5b50-4783-823e-490795f16b24,1473705861128" ShortcutWithArgument: C:\Users\Daniel\Desktop\SWLE Your Profile.lnk -> C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> "hxxp://tech-connect.biz/?ssid=1473705933&a=1107267&src=sh&uuid=ed5675fd-5b50-4783-823e-490795f16b24,1473705861128" ==================== Modules chargés (Avec liste blanche) ============== 2015-10-30 18:18 - 2015-10-30 18:18 - 00185856 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll 2015-11-18 06:08 - 2016-08-11 23:27 - 00134712 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2014-09-09 16:33 - 2009-11-04 13:18 - 00189440 _____ () C:\WINDOWS\system32\spool\PRTPROCS\x64\lxebdrpp.dll 2016-07-18 20:22 - 2016-07-18 20:22 - 00732056 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.12.945.9202\AdAwareService.exe 2016-07-18 20:26 - 2016-07-18 20:26 - 00146184 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.12.945.9202\boost_filesystem-vc140-mt-1_61.dll 2016-07-18 20:27 - 2016-07-18 20:27 - 00030464 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.12.945.9202\boost_system-vc140-mt-1_61.dll 2016-07-18 20:26 - 2016-07-18 20:26 - 00068872 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.12.945.9202\boost_date_time-vc140-mt-1_61.dll 2016-07-18 20:26 - 2016-07-18 20:26 - 11625208 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.12.945.9202\AdAwareServiceKernel.dll 2016-07-18 20:26 - 2016-07-18 20:26 - 03420880 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.12.945.9202\RCF.dll 2016-07-18 20:27 - 2016-07-18 20:27 - 00124672 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.12.945.9202\boost_thread-vc140-mt-1_61.dll 2016-07-18 20:27 - 2016-07-18 20:27 - 01005824 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.12.945.9202\boost_regex-vc140-mt-1_61.dll 2016-07-18 20:26 - 2016-07-18 20:26 - 00040192 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.12.945.9202\boost_chrono-vc140-mt-1_61.dll 2016-07-18 20:26 - 2016-07-18 20:26 - 00986864 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.12.945.9202\AdAwareActivation.dll 2016-07-18 20:26 - 2016-07-18 20:26 - 00623360 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.12.945.9202\AdAwareApplicationUpdater.dll 2016-07-18 20:26 - 2016-07-18 20:26 - 00837872 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.12.945.9202\AdAwareGamingMode.dll 2016-07-18 20:26 - 2016-07-18 20:26 - 00111336 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.12.945.9202\AdAwareReset.dll 2016-07-18 20:26 - 2016-07-18 20:26 - 00134368 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.12.945.9202\AdAwareTime.dll 2016-07-18 20:26 - 2016-07-18 20:26 - 01049856 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.12.945.9202\AdAwareDefinitionsUpdater.dll 2016-07-18 20:26 - 2016-07-18 20:26 - 00901392 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.12.945.9202\AdAwareDefinitionsUpdaterScheduler.dll 2016-07-18 20:26 - 2016-07-18 20:26 - 01104624 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.12.945.9202\AdAwareIgnoreList.dll 2016-07-18 20:26 - 2016-07-18 20:26 - 00268016 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.12.945.9202\AdAwareQuarantine.dll 2016-07-18 20:26 - 2016-07-18 20:26 - 01630464 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.12.945.9202\AdAwareAntiMalwareEngine.dll 2016-07-18 20:26 - 2016-07-18 20:26 - 00226048 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.12.945.9202\AdAwareAntiRootkitEngine.dll 2016-07-18 20:26 - 2016-07-18 20:26 - 01179384 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.12.945.9202\AdAwareScannerHistory.dll 2016-07-18 20:26 - 2016-07-18 20:26 - 01377512 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.12.945.9202\AdAwareScanner.dll 2016-07-18 20:27 - 2016-07-18 20:27 - 00039680 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.12.945.9202\boost_timer-vc140-mt-1_61.dll 2016-07-18 20:26 - 2016-07-18 20:26 - 01025784 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.12.945.9202\AdAwareScannerScheduler.dll 2016-07-18 20:26 - 2016-07-18 20:26 - 01205504 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.12.945.9202\AdAwareRealTimeProtection.dll 2016-07-18 20:26 - 2016-07-18 20:26 - 02663672 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.12.945.9202\AdAwareIncompatibles.dll 2016-07-18 20:26 - 2016-07-18 20:26 - 01520872 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.12.945.9202\AdAwareAntiSpam.dll 2016-07-18 20:26 - 2016-07-18 20:26 - 01457904 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.12.945.9202\AdAwareAntiPhishing.dll 2016-07-18 20:26 - 2016-07-18 20:26 - 03464440 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.12.945.9202\AdAwareParentalControl.dll 2016-07-18 20:26 - 2016-07-18 20:26 - 03124472 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.12.945.9202\AdAwareWebProtection.dll 2016-07-18 20:26 - 2016-07-18 20:26 - 01327864 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.12.945.9202\AdAwareEmailProtection.dll 2016-07-18 20:26 - 2016-07-18 20:26 - 00073480 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.12.945.9202\boost_iostreams-vc140-mt-1_61.dll 2016-07-18 20:26 - 2016-07-18 20:26 - 01905408 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.12.945.9202\AdAwareNetworkProtection.dll 2016-07-18 20:26 - 2016-07-18 20:26 - 01031912 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.12.945.9202\AdAwarePromo.dll 2016-07-18 20:26 - 2016-07-18 20:26 - 00467688 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.12.945.9202\AdAwareFeedback.dll 2016-07-18 20:26 - 2016-07-18 20:26 - 03159808 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.12.945.9202\AdAwareThreatWorkAlliance.dll 2016-07-18 20:26 - 2016-07-18 20:26 - 01313512 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.12.945.9202\AdAwarePinCode.dll 2016-07-18 20:26 - 2016-07-18 20:26 - 01033960 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.12.945.9202\AdAwareNotice.dll 2016-07-18 20:26 - 2016-07-18 20:26 - 01597680 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.12.945.9202\AdAwareAvcEngine.dll 2016-07-18 20:26 - 2016-07-18 20:26 - 01170704 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.12.945.9202\AdAwareRealTimeProtectionHistory.dll 2016-07-18 20:26 - 2016-07-18 20:26 - 00535280 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.12.945.9202\AdAwareStatistics.dll 2010-08-21 12:47 - 2010-08-21 12:47 - 00077312 _____ () C:\ExpressGateUtil\VAWinService.exe 2016-08-27 19:55 - 2016-06-15 07:03 - 00367552 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\MessageBus.dll 2016-08-27 19:55 - 2016-06-15 07:03 - 00288192 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamBase.dll 2016-08-27 19:55 - 2016-06-15 07:03 - 01147328 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\libprotobuf.dll 2016-08-27 19:55 - 2016-06-15 07:03 - 03611584 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Poco.dll 2016-05-13 15:13 - 2016-05-13 15:13 - 00032544 _____ () C:\Program Files (x86)\Real\UpdateService\RealPlayerUpdateSvc.exe 2016-07-13 06:40 - 2016-07-01 15:48 - 02656408 _____ () C:\WINDOWS\system32\CoreUIComponents.dll 2010-04-03 13:21 - 2008-10-01 17:08 - 00011264 _____ () C:\Program Files (x86)\ASUS\Splendid\GLCDdll.dll 2010-07-15 10:11 - 2010-07-15 10:11 - 00031360 _____ () C:\Program Files\P4G\DevMng.dll 2016-07-13 06:40 - 2016-07-01 15:48 - 02656408 _____ () C:\WINDOWS\System32\CoreUIComponents.dll 2016-08-27 19:56 - 2016-06-15 07:03 - 02665920 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvMdnsPlugin.dll 2016-08-27 19:56 - 2016-06-15 07:03 - 01988544 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvPortForwardPlugin.dll 2016-08-27 19:56 - 2016-06-15 07:03 - 01840576 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\RtspPlugin.dll 2016-08-27 19:55 - 2016-06-15 07:03 - 00207296 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\RtspServer.dll 2016-08-27 19:55 - 2016-06-15 07:03 - 00034240 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_system-vc120-mt-1_58.dll 2016-08-27 19:55 - 2016-06-15 07:03 - 00920000 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_regex-vc120-mt-1_58.dll 2015-12-18 20:48 - 2015-12-07 15:14 - 00093696 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll 2016-07-13 06:42 - 2016-07-01 14:48 - 00472064 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll 2016-07-13 06:41 - 2016-07-01 14:27 - 07992832 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll 2016-07-13 06:40 - 2016-07-01 14:21 - 00591360 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll 2016-07-13 06:41 - 2016-07-01 14:22 - 02483200 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll 2016-07-13 06:41 - 2016-07-01 14:24 - 04089856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll 2015-06-01 21:00 - 2015-06-01 21:00 - 00102912 _____ () C:\Windows\System32\IccLibDll_x64.dll 2016-07-18 20:26 - 2016-07-18 20:26 - 09571552 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.12.945.9202\AdAwareTray.exe 2016-07-18 20:26 - 2016-07-18 20:26 - 00539392 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.12.945.9202\boost_locale-vc140-mt-1_61.dll 2016-07-18 20:26 - 2016-07-18 20:26 - 02485992 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.12.945.9202\HtmlFramework.dll 2016-07-18 20:26 - 2016-07-18 20:26 - 00871672 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.12.945.9202\AdAwareTrayDefaultSkin.dll 2010-08-13 11:52 - 2010-08-13 11:52 - 00021504 _____ () C:\ExpressGateUtil\VAWinAgent.exe 2009-07-21 11:50 - 2009-07-21 11:50 - 00084464 _____ () C:\Program Files (x86)\Roxio 2010\5.0\CPMonitor.exe 2016-08-06 03:52 - 2016-08-06 03:52 - 00069632 _____ () C:\Program Files\CCleaner\lang\lang-1036.dll 2016-09-14 14:32 - 2000-01-01 11:00 - 02967552 _____ () D:\Tor Browser\Browser\TorBrowser\Tor or.exe 2016-04-19 07:49 - 2016-04-19 07:51 - 00144384 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe 2016-07-05 18:18 - 2016-07-05 18:18 - 00714992 _____ () C:\Program Files (x86)\RealNetworks\RealDownloader\downloader2.exe 2016-09-09 20:52 - 2016-09-09 20:52 - 00169064 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll 2016-09-16 00:37 - 2016-09-16 00:37 - 03085624 _____ () C:\Program Files\AVAST Software\Avast\defs\16091500\algo.dll 2016-09-09 20:52 - 2016-09-09 20:52 - 00482928 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll 2016-03-18 22:56 - 2016-03-18 22:56 - 00080184 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll 2016-07-05 15:23 - 2016-07-05 15:23 - 01041208 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll 2010-08-13 11:52 - 2010-08-13 11:52 - 00151552 _____ () C:\ExpressGateUtil\libexpat.dll 2010-08-13 11:52 - 2010-08-13 11:52 - 00057344 _____ () C:\ExpressGateUtil etProfileDatabase.DLL 2016-05-13 15:13 - 2016-05-13 15:13 - 00037688 _____ () C:\Program Files (x86)\Real\UpdateService\DL2UpdatePlugin.dll 2016-05-13 15:13 - 2016-05-13 15:13 - 00039224 _____ () C:\Program Files (x86)\Real\UpdateService\RealDownloaderUpdatePlugin.dll 2016-05-13 15:13 - 2016-05-13 15:13 - 00037192 _____ () C:\Program Files (x86)\Real\UpdateService\VideoDLUpdatePlugin.dll 2015-12-16 12:52 - 2014-05-13 12:04 - 00109400 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl 2015-12-16 12:52 - 2014-05-13 12:04 - 00167768 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl 2016-08-11 10:38 - 2016-08-11 10:38 - 00061952 _____ () C:\Program Files (x86)\Firetrust\MailWasher\MWPBridgeDLL.dll 2016-08-11 10:38 - 2016-08-11 10:38 - 06077440 _____ () C:\Program Files (x86)\Firetrust\MailWasher\MWPappDLL.dll 2014-10-12 03:41 - 2014-10-12 03:41 - 00061952 _____ () C:\Program Files (x86)\Firetrust\MailWasher\FTBridge.dll 2016-01-20 17:44 - 2016-01-20 17:44 - 00272384 _____ () C:\Program Files (x86)\Firetrust\MailWasher\FTClientNode.dll 2016-08-04 19:24 - 2016-08-04 19:24 - 00324608 _____ () C:\Program Files (x86)\Firetrust\MailWasher\MWPHeaderParser.dll 2016-06-27 15:46 - 2016-06-27 15:46 - 48936448 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll 2016-07-13 20:02 - 2015-04-28 15:22 - 01498112 _____ () C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\DAQExp.dll 2016-07-13 20:02 - 2014-05-19 17:19 - 00137728 _____ () C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\CBSCreateVC.dll 2016-09-14 21:42 - 2016-08-24 15:43 - 00035792 _____ () C:\Program Files (x86)\Dropbox\Client\_multiprocessing.pyd 2016-09-14 21:42 - 2016-08-24 15:43 - 00145864 _____ () C:\Program Files (x86)\Dropbox\Client\pyexpat.pyd 2016-09-14 21:42 - 2016-08-24 15:43 - 00019408 _____ () C:\Program Files (x86)\Dropbox\Client\faulthandler.pyd 2016-09-14 21:42 - 2016-08-24 15:43 - 00116688 _____ () C:\Program Files (x86)\Dropbox\Client\pywintypes27.dll 2016-09-14 21:42 - 2016-08-24 15:43 - 00100296 _____ () C:\Program Files (x86)\Dropbox\Client\_ctypes.pyd 2016-09-14 21:42 - 2016-08-24 15:43 - 00018888 _____ () C:\Program Files (x86)\Dropbox\Client\select.pyd 2016-09-14 21:42 - 2016-09-13 00:11 - 00019760 _____ () C:\Program Files (x86)\Dropbox\Client ornado.speedups.pyd 2016-09-14 21:42 - 2016-08-24 15:43 - 00694224 _____ () C:\Program Files (x86)\Dropbox\Client\unicodedata.pyd 2016-09-14 21:42 - 2016-09-13 00:11 - 00020816 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._constant_time.pyd 2016-09-14 21:42 - 2016-08-24 15:43 - 00123856 _____ () C:\Program Files (x86)\Dropbox\Client\_cffi_backend.pyd 2016-09-14 21:42 - 2016-09-13 00:11 - 01682760 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._openssl.pyd 2016-09-14 21:42 - 2016-09-13 00:11 - 00020808 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._padding.pyd 2016-09-14 21:42 - 2016-08-24 15:45 - 00105928 _____ () C:\Program Files (x86)\Dropbox\Client\win32api.pyd 2016-09-14 21:42 - 2016-09-13 00:11 - 00021312 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.crt.compiled._winffi_crt.pyd 2016-09-14 21:42 - 2016-09-13 00:11 - 00052024 _____ () C:\Program Files (x86)\Dropbox\Client\psutil._psutil_windows.pyd 2016-09-14 21:42 - 2016-09-13 00:11 - 00038696 _____ () C:\Program Files (x86)\Dropbox\Client\fastpath.pyd 2016-09-14 21:42 - 2016-08-24 15:43 - 00392144 _____ () C:\Program Files (x86)\Dropbox\Client\pythoncom27.dll 2016-09-14 21:42 - 2016-08-24 15:45 - 00020936 _____ () C:\Program Files (x86)\Dropbox\Client\mmapfile.pyd 2016-09-14 21:42 - 2016-08-24 15:45 - 00024528 _____ () C:\Program Files (x86)\Dropbox\Client\win32event.pyd 2016-09-14 21:42 - 2016-08-24 15:45 - 00116176 _____ () C:\Program Files (x86)\Dropbox\Client\win32security.pyd 2016-09-14 21:42 - 2016-09-13 00:11 - 00381752 _____ () C:\Program Files (x86)\Dropbox\Client\win32com.shell.shell.pyd 2016-09-14 21:42 - 2016-08-24 15:45 - 00124880 _____ () C:\Program Files (x86)\Dropbox\Client\win32file.pyd 2016-09-14 21:42 - 2016-09-13 00:11 - 00025424 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.kernel32.compiled._winffi_kernel32.pyd 2016-09-14 21:42 - 2016-08-24 15:45 - 00024016 _____ () C:\Program Files (x86)\Dropbox\Client\win32clipboard.pyd 2016-09-14 21:42 - 2016-08-24 15:45 - 00175560 _____ () C:\Program Files (x86)\Dropbox\Client\win32gui.pyd 2016-09-14 21:42 - 2016-08-24 15:45 - 00030160 _____ () C:\Program Files (x86)\Dropbox\Client\win32pipe.pyd 2016-09-14 21:42 - 2016-08-24 15:45 - 00043472 _____ () C:\Program Files (x86)\Dropbox\Client\win32process.pyd 2016-09-14 21:42 - 2016-08-24 15:45 - 00048592 _____ () C:\Program Files (x86)\Dropbox\Client\win32service.pyd 2016-09-14 21:42 - 2016-08-24 15:45 - 00057808 _____ () C:\Program Files (x86)\Dropbox\Client\win32evtlog.pyd 2016-09-14 21:42 - 2016-08-24 15:45 - 00024016 _____ () C:\Program Files (x86)\Dropbox\Client\win32profile.pyd 2016-09-14 21:42 - 2016-09-13 00:11 - 00246592 _____ () C:\Program Files (x86)\Dropbox\Client\breakpad.client.windows.handler.pyd 2016-09-14 21:42 - 2016-09-13 00:11 - 00026456 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox.infinite.win.compiled._driverinstallation.pyd 2016-09-14 21:42 - 2016-08-24 15:45 - 00028616 _____ () C:\Program Files (x86)\Dropbox\Client\win32ts.pyd 2016-09-14 21:42 - 2016-08-24 15:43 - 00144848 _____ () C:\Program Files (x86)\Dropbox\Client\_elementtree.pyd 2016-09-14 21:42 - 2016-08-24 15:44 - 00241104 _____ () C:\Program Files (x86)\Dropbox\Client\_jpegtran.pyd 2016-09-14 21:42 - 2016-09-13 00:11 - 00023376 _____ () C:\Program Files (x86)\Dropbox\Client\winscreenshot.compiled._CaptureScreenshot.pyd 2016-09-14 21:42 - 2016-09-13 00:11 - 00020800 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.iphlpapi._winffi_iphlpapi.pyd 2016-09-14 21:42 - 2016-09-13 00:11 - 00019776 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.winerror._winffi_winerror.pyd 2016-09-14 21:42 - 2016-09-13 00:11 - 00020800 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.wininet._winffi_wininet.pyd 2016-09-14 21:42 - 2016-09-13 00:11 - 00020280 _____ () C:\Program Files (x86)\Dropbox\Client\cpuid.compiled._cpuid.pyd 2016-09-14 21:42 - 2016-08-24 15:45 - 00350152 _____ () C:\Program Files (x86)\Dropbox\Client\winxpgui.pyd 2016-09-14 21:42 - 2016-09-13 00:11 - 00022352 _____ () C:\Program Files (x86)\Dropbox\Client\winverifysignature.compiled._VerifySignature.pyd 2016-09-14 21:42 - 2016-09-13 00:11 - 00024392 _____ () C:\Program Files (x86)\Dropbox\Client\librsyncffi.compiled._librsyncffi.pyd 2016-09-14 21:42 - 2016-08-24 15:41 - 00036296 _____ () C:\Program Files (x86)\Dropbox\Client\librsync.dll 2016-09-14 21:42 - 2016-09-13 00:11 - 00031568 _____ () C:\Program Files (x86)\Dropbox\Client\enterprise_data.compiled._enterprise_data.pyd 2016-09-14 21:42 - 2016-09-13 00:05 - 00293392 _____ () C:\Program Files (x86)\Dropbox\Client\EnterpriseDataAdapter.dll 2016-09-14 21:42 - 2016-09-13 00:11 - 00084280 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox_sqlite_ext.DLL 2016-09-14 21:42 - 2016-09-13 00:11 - 01826096 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtCore.pyd 2016-09-14 21:42 - 2016-08-24 15:43 - 00083912 _____ () C:\Program Files (x86)\Dropbox\Client\sip.pyd 2016-09-14 21:42 - 2016-09-13 00:11 - 00531248 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtNetwork.pyd 2016-09-14 21:42 - 2016-09-13 00:11 - 03928880 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWidgets.pyd 2016-09-14 21:42 - 2016-09-13 00:11 - 01972528 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtGui.pyd 2016-09-14 21:42 - 2016-09-13 00:11 - 00133424 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebKit.pyd 2016-09-14 21:42 - 2016-09-13 00:11 - 00224056 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebKitWidgets.pyd 2016-09-14 21:42 - 2016-09-13 00:11 - 00207672 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtPrintSupport.pyd 2016-09-14 21:42 - 2016-09-13 00:11 - 00020288 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.user32._winffi_user32.pyd 2016-09-14 21:42 - 2016-08-24 15:45 - 00060880 _____ () C:\Program Files (x86)\Dropbox\Client\win32print.pyd 2016-09-14 21:42 - 2016-09-13 00:11 - 00037192 _____ () C:\Program Files (x86)\Dropbox\Client\windisplaytoast.compiled._DisplayToast.pyd 2016-09-14 21:42 - 2016-09-13 00:11 - 00024904 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.winhttp.compiled._winffi_winhttp.pyd 2016-09-14 21:42 - 2016-09-13 00:11 - 00546096 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtQuick.pyd 2016-09-14 21:42 - 2016-09-13 00:11 - 00357680 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtQml.pyd 2016-09-14 21:42 - 2016-09-13 00:11 - 00042808 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebChannel.pyd 2016-09-14 21:42 - 2016-09-13 00:11 - 00168760 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebEngineWidgets.pyd 2016-09-05 14:27 - 2016-09-05 14:27 - 00086992 _____ () C:\Program Files (x86)\Glary Utilities 5\zlib1.dll 2016-09-14 14:30 - 2000-01-01 11:00 - 00092599 _____ () D:\Tor Browser\Browser\libssp-0.dll 2016-09-14 14:31 - 2000-01-01 11:00 - 00719217 _____ () D:\Tor Browser\Browser\TorBrowser\Tor\libevent-2-0-5.dll 2016-09-14 14:31 - 2000-01-01 11:00 - 00092599 _____ () D:\Tor Browser\Browser\TorBrowser\Tor\libssp-0.dll 2016-09-14 14:32 - 2000-01-01 11:00 - 00107520 _____ () D:\Tor Browser\Browser\TorBrowser\Tor\zlib1.dll 2016-09-14 14:31 - 2000-01-01 11:00 - 00523262 _____ () D:\Tor Browser\Browser\TorBrowser\Tor\libgcc_s_sjlj-1.dll 2016-05-13 14:20 - 2016-05-13 14:20 - 01382048 _____ () C:\Program Files (x86)\RealNetworks\RealDownloader\cpprest100_1_2.dll 2016-06-21 00:31 - 2016-06-21 00:31 - 00654608 _____ () c:\program files (x86) eal ealplayer\RPDS\Lib 1api.dll 2016-07-05 18:18 - 2016-07-05 18:18 - 00077552 _____ () C:\Program Files (x86)\RealNetworks\RealDownloader\dtvhooks.dll ==================== Alternate Data Streams (Avec liste blanche) ========= (Si un élément est inclus dans le fichier fixlist.txt, seul le flux de données additionnel (ADS - Alternate Data Stream) sera supprimé.) ==================== Mode sans échec (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le "AlternateShell" sera restauré.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\LavasoftAdAwareService11 => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\LavasoftAdAwareService11 => ""="Service" ==================== Association (Avec liste blanche) =============== (Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé.) ==================== Internet Explorer sites de confiance/sensibles =============== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre.) IE restricted site: HKU\.DEFAULT\...\007guard.com -> install.007guard.com IE restricted site: HKU\.DEFAULT\...\008i.com -> 008i.com IE restricted site: HKU\.DEFAULT\...\008k.com -> www.008k.com IE restricted site: HKU\.DEFAULT\...\00hq.com -> www.00hq.com IE restricted site: HKU\.DEFAULT\...\010402.com -> 010402.com IE restricted site: HKU\.DEFAULT\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com IE restricted site: HKU\.DEFAULT\...\0scan.com -> www.0scan.com IE restricted site: HKU\.DEFAULT\...\1-2005-search.com -> www.1-2005-search.com IE restricted site: HKU\.DEFAULT\...\1-domains-registrations.com -> www.1-domains-registrations.com IE restricted site: HKU\.DEFAULT\...\1000gratisproben.com -> www.1000gratisproben.com IE restricted site: HKU\.DEFAULT\...\1001namen.com -> www.1001namen.com IE restricted site: HKU\.DEFAULT\...\100888290cs.com -> mir.100888290cs.com IE restricted site: HKU\.DEFAULT\...\100sexlinks.com -> www.100sexlinks.com IE restricted site: HKU\.DEFAULT\...\10sek.com -> www.10sek.com IE restric

Destrio5 · Answer

Les rapports sont trop longs pour être postés directement ici, il est coupé à la fin, c'est pour cela qu'il faut l'héberger sur pjjoint.malekal.com comme tu as fait la première fois.

titanchois · Answer

oui, excuses, iln faut que j'arrête l'apéro, je recommence tout !

titanchois · Answer

avec mes excuses, il est 14h38 repas arrosé !

https://pjjoint.malekal.com/files.php?id=20160916_v7z12l7w12h11
https://pjjoint.malekal.com/files.php?id=FRST_20160916_s12y7e14m8t11
merci de ton implication

titanchois · Answer

Bonjour
Merci pour tout, je pense que c'est bon , je ne vois plus rien apparaitre.
Bonne continuiation

Destrio5 · Answer

D'après le rapport Addition, il reste les raccourcis "SWLE dynasty exchange" et "SWLE Your Profile" infectés par tech-connect.biz sur le Bureau.

"Platform: Windows 10 Home Version 1511 (X64)"

--> Windows Update ne te propose pas l'Anniversary Update (1607) ? C'est une grosse mis à jour, attention si tu es limité niveau téléchargement.

Tu as toujours deux antivirus. 

https://forum.malekal.com/viewtopic.php?t=4650&start=

titanchois · Answer

Bonjour, 
Par sécurité, J'ai supprimé tous les raccourcis SWLE. j'en avais 4
Je peux repasser un coup de  fix.list ?
Non, pas de proposition de mise à jour Win
Je supprimerai aussi un antivirus , normalement je n'utilise qu'avast
Merci et bon dimanche

Destrio5 · Answer

"Je peux repasser un coup de fix.list ?"

--> Je n'en vois pas vraiment l'utilité.


Pour finir :
  

---> Télécharge DelFix sur ton Bureau puis lance-le.     

 Coche Purger la restauration système et laisse Supprimer les outils de désinfection coché.     
 Clique sur Exécuter.     
 Poste le rapport.  


==Prévention==    

Adware Prevention permet de t'entraîner à ne pas accepter de PUPs / adwares lors d'installations de logiciels :
https://security-x.fr/~guigui0001/

https://www.malekal.com/adwares-pup-protection/

Un dossier sur la prévention et sécurité sur Internet est disponible ici.

titanchois · Answer

Voilà, tout supprimé !
IX DelFix v1.013 - Rapport créé le 17/09/2016 à 18:28:59
# Mis à jour le 17/04/2016 par Xplode
# Nom d'utilisateur : Daniel - DANIEL_PC
# Système d'exploitation : Windows 10 Home  (64 bits)

~ Suppression des outils de désinfection ...

Supprimé : C:\FRST
Supprimé : C:\AdwCleaner
Supprimé : C:\Users\Daniel\Downloads\FRST-OlderVersion
Supprimé : C:\Users\Daniel\Downloads\Addition.txt
Supprimé : C:\Users\Daniel\Downloads\adwcleaner_5.035.exe
Supprimé : C:\Users\Daniel\Downloads\adwcleaner_6.010(1).exe
Supprimé : C:\Users\Daniel\Downloads\adwcleaner_6.010(2).exe
Supprimé : C:\Users\Daniel\Downloads\adwcleaner_6.010.exe
Supprimé : C:\Users\Daniel\Downloads\FRST.txt
Supprimé : C:\Users\Daniel\Downloads\FRST64.exe
Supprimé : C:\Users\Daniel\Downloads\ZHPCleaner.exe
Supprimée : HKLM\SOFTWARE\AdwCleaner

~ Purge de la restauration système ...

Supprimé : RP #50 [Windows Update | 09/01/2016 14:07:03]
Supprimé : RP #51 [Point de contrôle planifié | 09/08/2016 21:33:28]
Supprimé : RP #52 [Programme d’installation pour les modules Windows | 09/12/2016 23:11:10]
Supprimé : RP #54 [Restore Point Created by FRST | 09/14/2016 12:25:10]
Supprimé : RP #55 [Programme d’installation pour les modules Windows | 09/16/2016 08:46:31]
Supprimé : RP #56 [Sauvegarde Windows | 09/16/2016 21:17:41]
Supprimé : RP #57 [Sauvegarde Windows | 09/16/2016 21:21:29]

Nouveau point de restauration créé !

########## - EOF - ##########

titanchois · Answer

Encore !
J'ai un DD externe en sauvegarde ... les fichiers sont ils infectés ?

Destrio5 · Answer

Ok pour DelFix.

"J'ai un DD externe en sauvegarde ... les fichiers sont ils infectés ?"

--> Non.

Bonne fin de journée ;)

titanchois · Answer

Trop tard! j'ai tout supprimé..
 En tout cas merci pour tout et bravo.

Tech-connect.biz

18 réponses

Discussions similaires

Newsletters