[MD5.C48B0F913C944D736A455191ECD8FF45] - (.Lavasoft - Ad-Aware Service Application.) -- C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe [1181328] [PID.1372] [MD5.C2009C6A452BD07B30D773349589B762] - (.AVAST Software - avast! firewall service.) -- C:\Program Files\Alwil Software\Avast5\afwServ.exe [137960] [PID.1240] [MD5.C2009C6A452BD07B30D773349589B762] - (.AVAST Software - avast! firewall service.) -- C:\Program Files\Alwil Software\Avast5\afwServ.exe [137960] [PID.1240] [MD5.C9A1A096EADB859353E89571E189CE51] - (.Lavasoft - Ad-Aware Tray Application.) -- C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe [789392] [PID.2508] G1 - GCS: Preference [User Data\Default] http://search.babylon.com =>Toolbar.Babylon G2 - GCE: Preference [User Data\Default] [ahfgeienlihckogmohjhadlkjgocpleb] Store v.0.2 (Activé) G2 - GCE: Preference [User Data\Default] [eemcgdkfndhakfknompkggombfjjjeno] Bookmark Manager v.0.1 (Activé) G2 - GCE: Preference [User Data\Default] [ennkphjdgehloodpbhlhldgbnhmacadg] Settings v.0.2 (Activé) G2 - GCE: Preference [User Data\Default] [mfehgcgbbipciphmccgaenjidiccnmng] Cloud Print v.0.1 (Activé) G2 - GCE: Preference [User Data\Default] [mgndgikekgjfcpckkfioiadnlibdjbkf] Chrome v.0.1 (Activé) M3 - MFPP: Plugins - [Henri Rigo] -- C:\Documents and Settings\Henri Rigo\Application Data\Mozilla\Firefox\Profiles\zt0e7d6r.default\searchplugins\BrowserDefender.xml M2 - MFEP: prefs.js [Henri Rigo - zt0e7d6r.default\{28D35620-51D9-11DE-9D13-2DB156D89593}] [] MediaBar v3.1 (..) M2 - MFEP: prefs.js [Henri Rigo - zt0e7d6r.default\{635abd67-4fe9-1b23-4f01-e679fa7484c1}] [yahoo.ytff] Yahoo! Toolbar v2.6.0.20130418072822 (..) O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - IE Webrep plugin.) -- C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll O3 - Toolbar: avast! WebRep - [HKLM]{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - IE Webrep plugin.) -- C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll O4 - HKLM\..\Run: [LaunchApp] Clé orpheline O4 - HKLM\..\Run: [avast] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\Alwil Software\Avast5\avastUI.exe O4 - HKCU\..\RunOnce: [AutoLaunch] . (...) -- C:\Program Files\Lavasoft\Ad-Aware\AutoLaunch.exe O4 - HKUS\S-1-5-21-835628050-3989791027-534086509-1005\..\RunOnce: [AutoLaunch] . (...) -- C:\Program Files\Lavasoft\Ad-Aware\AutoLaunch.exe O4 - GS\Programs: SUPER ©.lnk . (...) -- C:\Program Files\eRightSoft\SUPER\SUPER.exe (.not file.) O4 - GS\Programs: Objectif Tarot.lnk . (...) -- C:\Program Files\Objective Tarot\ObjectifTarot.exe (.not file.) O9 - Extra button: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} -- Clé orpheline O9 - Extra button: Créer un Favori de l'appareil mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} -- Clé orpheline O9 - Extra button: PC Confidential - {53F6FCCD-9E22-4d71-86EA-6E43136192AB} -- Clé orpheline O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} ((no name)) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1210277237710 O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} ((no name)) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab O23 - Service: avast! Antivirus (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe O23 - Service: avast! Firewall (avast! Firewall) . (.AVAST Software - avast! firewall service.) - C:\Program Files\Alwil Software\Avast5\afwServ.exe O23 - Service: Lavasoft Ad-Aware Service (Lavasoft Ad-Aware Service) . (.Lavasoft - Ad-Aware Service Application.) - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe O34 - HKLM BootExecute: (autocheck autochk *) - File not found O34 - HKLM BootExecute: (lsdelete) - File not found O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\Ad-Aware Update (Daily 1).job [492] O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\Ad-Aware Update (Daily 2).job [492] O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\Ad-Aware Update (Daily 3).job [492] O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\Ad-Aware Update (Daily 4).job [492] O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\Ad-Aware Update (Weekly).job [492] O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\avast! Emergency Update.job [366] O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\PCConfidential.job [416] [MD5.8DD1655354D0891FE7EA1B8A5FD2EBE2] [APT] [Ad-Aware Update (Daily 1)] (.Lavasoft.) -- C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [823928] [MD5.8DD1655354D0891FE7EA1B8A5FD2EBE2] [APT] [Ad-Aware Update (Daily 2)] (.Lavasoft.) -- C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [823928] [MD5.8DD1655354D0891FE7EA1B8A5FD2EBE2] [APT] [Ad-Aware Update (Daily 3)] (.Lavasoft.) -- C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [823928] [MD5.8DD1655354D0891FE7EA1B8A5FD2EBE2] [APT] [Ad-Aware Update (Daily 4)] (.Lavasoft.) -- C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [823928] [MD5.8DD1655354D0891FE7EA1B8A5FD2EBE2] [APT] [Ad-Aware Update (Weekly)] (.Lavasoft.) -- C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [823928] [MD5.5CE2C1433B9B634591F0A1C4C1203A0B] [APT] [avast! Emergency Update] (.AVAST Software.) -- C:\Program Files\Alwil Software\Avast5\AvastEmUpdate.exe [251784] O41 - Driver: (PCLEPCI) . (. - .) - C:\WINDOWS\system32\drivers\pclepci.sys (.not file.) O42 - Logiciel: Ad-Aware - (.Lavasoft.) [HKLM] -- Ad-Aware O42 - Logiciel: Ad-Aware - (.Lavasoft.) [HKLM] -- {DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF} O42 - Logiciel: Java(TM) 7 Update 4 - (.Oracle.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83217004FF} O42 - Logiciel: J2SE Runtime Environment 5.0 Update 10 - (.Sun Microsystems, Inc..) [HKLM] -- {3248F0A8-6813-11D6-A77B-00B0D0150100} O45 - LFCP:[MD5.09F2073CAF155D95DD3EDBC9C05626DF] - 25/06/2013 - 06:04:01 ---A- - C:\WINDOWS\Prefetch\AD-AWARE.EXE-02FDAFAE.pf O45 - LFCP:[MD5.B1D1D3E76931B36ABF96162A555F88E1] - 26/06/2013 - 07:44:13 ---A- - C:\WINDOWS\Prefetch\AD-AWAREADMIN.EXE-08F79ADD.pf O47 - AAKE:Key Export SP - "C:\Program Files\Zattoo\zattood.exe" [Disabled] .(...) -- C:\Program Files\Zattoo\zattood.exe (.not file.) O47 - AAKE:Key Export SP - "C:\Program Files\Zattoo\Zattoo1.exe" [Enabled] .(...) -- C:\Program Files\Zattoo\Zattoo1.exe (.not file.) O47 - AAKE:Key Export SP - "C:\Program Files\POST-NET\Post-Net.exe" [Enabled] .(...) -- C:\Program Files\POST-NET\Post-Net.exe (.not file.) O47 - AAKE:Key Export SP - "C:\Program Files\Download Guru\Download Guru.exe" [Enabled] .(...) -- C:\Program Files\Download Guru\Download Guru.exe (.not file.) O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\WINDOWS\system32\Drivers\vgasave.sys (.not file.) O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpdd.sys . (...) -- C:\WINDOWS\system32\Drivers\rdpdd.sys (.not file.) O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\WINDOWS\system32\Drivers\vgasave.sys (.not file.) O64 - Services: CurCS - 09/05/2013 - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (avast! Antivirus) .(.AVAST Software - avast! Service.) - LEGACY_AVAST!_ANTIVIRUS O64 - Services: CurCS - 09/05/2013 - C:\Program Files\Alwil Software\Avast5\afwServ.exe (avast! Firewall) .(.AVAST Software - avast! firewall service.) - LEGACY_AVAST!_FIREWALL O64 - Services: CurCS - 19/04/2011 - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe (Lavasoft Ad-Aware Service) .(.Lavasoft - Ad-Aware Service Application.) - LEGACY_LAVASOFT_AD-AWARE_SERVICE O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - http://www.bing.com O69 - SBI: SearchScopes [HKCU] {50EF0F12-5084-49C7-AFF6-99FA5C3C4E45} - (eBay) - http://rover.ebay.com O69 - SBI: SearchScopes [HKCU] {513185D9-D3EF-47F0-BE8E-DBDBA5D945C7} - (Yahoo! Search) - http://fr.search.yahoo.com O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} - (@ieframe.dll,-12512) - http://www.bing.com O69 - SBI: SearchScopes [HKCU] {8E09C979-A4D0-4819-ABDF-8FAF04ADD8BF} - (Yahoo!) - http://fr.search.yahoo.com O69 - SBI: SearchScopes [HKCU] {9D5BD211-422C-4164-9298-BB4186A30F31} - (Bing) - http://www.bing.com O69 - SBI: SearchScopes [HKCU] {9E55402B-B6DF-4188-B561-3EC4C7A09216} - (Flickr) - http://www.flickr.com O69 - SBI: SearchScopes [HKCU] {C9646295-CF81-49BB-B403-80F6C78C6F30} - (01net) - http://www.01net.com O69 - SBI: SearchScopes [HKUS\.DEFAULT] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (@ieframe.dll,-12512) - http://search.live.com O69 - SBI: SearchScopes [HKUS\S-1-5-18] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (@ieframe.dll,-12512) - http://search.live.com [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0F6E720A-1A6B-40E1-A294-1D4D19F156C8}] =>Toolbar.Agent [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{0F6E720A-1A6B-40E1-A294-1D4D19F156C8}] =>Toolbar.Agent [HKLM\Software\Classes\CLSID\{0F6E720A-1A6B-40E1-A294-1D4D19F156C8}] =>Toolbar.Agent [HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0F6E720A-1A6B-40E1-A294-1D4D19F156C8}] =>Toolbar.Agent [HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\freeCompressor] =>Adware.SPointer [HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\ItsLabel] =>PUP.ItsLabel [HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\PCTuto] =>Spyware.AgenceExclusive [HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\RelevantKnowledge] =>Adware.RelevantKnowledge [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\00E944CB89111313EAF35A0553F547F9] =>PUP.Dealio [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\53F55AF3F4049ED3FA6EA6F88E414E24] =>PUP.Dealio [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\68E4BF4B11615E03C97732FD581AB607] =>PUP.Dealio [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8CE3DDAB2D152683FBCEB4866BCD2B0F] =>PUP.Dealio [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AF6CE16AFEA5C9A39B766468A8B35C21] =>PUP.Dealio [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FB1E44269B58F433A8C8E671E37CFDCF] =>PUP.Dealio [HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Yahoo! Companion] =>Toolbar.Yahoo [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0FF2AEFF45EEA0A48A4B33C1973B6094] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\305B09CE8C53A214DB58887F62F25536] =>PUP.SweetIM^ C:\Program Files\Registry Winner =>Rogue.RegistryWinner C:\Program Files\Mozilla Firefox\Extensions\pdfforge@mybrowserbar.com =>Toolbar.Agent C:\Program Files\Mozilla Firefox\Extensions\wtxpcom@mybrowserbar.com =>PUP.Dealio C:\Documents and Settings\Henri Rigo\Application Data\Mozilla\Firefox\Profiles\zt0e7d6r.default\iMeshMediabarTb =>PUP.iMesh O90 - PUC: "68AB67CA7DA76301B744AA0100000010" . (.Adobe Reader X (10.1.7) - Français.) -- C:\WINDOWS\Installer\{AC76BA86-7AD7-1036-7B44-AA1000000001}\SC_Reader.ico SR - | Auto 09/05/2013 46808 | (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe SR - | Auto 09/05/2013 137960 | (avast! Firewall) . (.AVAST Software.) - C:\Program Files\Alwil Software\Avast5\afwServ.exe SR - | Auto 19/04/2011 1181328 | (Lavasoft Ad-Aware Service) . (.Lavasoft.) - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe SysRestore FirewallRAZ EmptyCLSID EmptyTemp EmptyFlash