Script ZHPFix EmptyPrefetch FirewallRaz PROXYFix EmptyTemp EmptyFlash EmptyClsid SysRestore M3 - MFPP: Plugins - [utilisateur] -- C:\Users\utilisateur\AppData\Roaming\Mozilla\Firefox\Profiles\e7q0l2g2.default\searchplugins\trovi-search.xml =>Hijacker.Trovigo M2 - MFEP: RegExtension {b64982b1-d112-42b5-b1e4-d3867c4533f8} . (...) -- C:\ProgramData\Browser Manager\2.3.796.11\{16cdff19-861d-48e3-a751-d99a27784753}\FirefoxExtension (.not file.) =>PUP.Babylon M2 - MFEP: prefs.js [utilisateur - e7q0l2g2.default\cacaoweb@cacaoweb.org] [] cacaoweb v1.0.34 (..) =>PUP.CacaoWeb P2 - FPN: [HKLM] [@staging.google.com/globalUpdate Update;version=10] - (...) -- C:\Program Files\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll (.not file.) P2 - FPN: [HKLM] [@staging.google.com/globalUpdate Update;version=4] - (...) -- C:\Program Files\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll (.not file.) R3 - URLSearchHook: (no name) - {84FF7BD6-B47F-46F8-9130-01B2696B36CB} . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 11.0.9.) (No version) -- (.not file.) R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = <-loopback> =>Hijacker.Proxy O2 - BHO: 092950600ea001325d04029365df3cb90063831 - {11111111-1111-1111-1111-110611381131} Clé orpheline O2 - BHO: (no name) - {84FF7BD6-B47F-46F8-9130-01B2696B36CB} Clé orpheline O3 - Toolbar: (no name) - [HKLM]{98889811-442D-49dd-99D7-DC866BE87DBC} Clé orpheline O4 - GS\Program [utilisateur]: iLivid App.lnk . (...) -- C:\Users\utilisateur\AppData\Local\iLivid App\iLivid.exe (.not file.) =>Adware.Bandoo O4 - HKCU\..\Run: [cacaoweb] . (...) -- C:\Users\utilisateur\AppData\Roaming\cacaoweb\cacaoweb.exe =>PUP.CacaoWeb O4 - HKCU\..\Run: [iLivid] C:\Users\utilisateur\AppData\Local\iLivid\iLivid.exe (.not file.) =>Adware.Bandoo O4 - HKUS\S-1-5-21-1272866688-2175832573-1930769751-1000\..\Run: [cacaoweb] . (...) -- C:\Users\utilisateur\AppData\Roaming\cacaoweb\cacaoweb.exe =>PUP.CacaoWeb O4 - HKUS\S-1-5-21-1272866688-2175832573-1930769751-1000\..\Run: [iLivid] C:\Users\utilisateur\AppData\Local\iLivid\iLivid.exe (.not file.) =>Adware.Bandoo O23 - Service: IePlugin Services (IePluginServices) . (.Cherished Technololgy LIMITED - IePlugin Service.) - C:\ProgramData\IePluginServices\PluginService.exe =>PUP.IePluginService O23 - Service: Protect Monitor (ProtectMonitor) . (...) - C:\monitorsvc.exe O23 - Service: VDSYIEc (VDSYIEc) . (.Acute Angle Solutions - Meteoroids Service.) - C:\ProgramData\ZNPhpUZ\VDSYIEc.exe =>PUP.Meteoroids O36 - AppCertDlls: (x64) . (...) -- c:\program files\movies toolbar\datamngr\x64\apcrtldr.dll (Not file) =>PUP.MoviesToolbar O39 - APT: - (..) -- C:\Windows\Tasks\409dc49e-8f20-4d52-bc0b-734067644dbe-1.job [2754] =>PUP.CrossRider O39 - APT: - (..) -- C:\Windows\Tasks\409dc49e-8f20-4d52-bc0b-734067644dbe-2.job [2094] =>PUP.CrossRider O39 - APT: - (..) -- C:\Windows\Tasks\409dc49e-8f20-4d52-bc0b-734067644dbe-3.job [3798] =>PUP.CrossRider O39 - APT: - (..) -- C:\Windows\Tasks\409dc49e-8f20-4d52-bc0b-734067644dbe-4.job [3798] =>PUP.CrossRider O39 - APT: - (..) -- C:\Windows\Tasks\409dc49e-8f20-4d52-bc0b-734067644dbe-5.job [2430] =>PUP.CrossRider O39 - APT: - (..) -- C:\Windows\Tasks\409dc49e-8f20-4d52-bc0b-734067644dbe-6.job [3454] =>PUP.CrossRider O39 - APT: - (..) -- C:\Windows\Tasks\409dc49e-8f20-4d52-bc0b-734067644dbe-7.job [3118] =>PUP.CrossRider O39 - APT: - (..) -- C:\Windows\Tasks\APSnotifierPP1.job [366] =>PUP.AnyProtect O39 - APT: - (..) -- C:\Windows\System32\Tasks\APSnotifierPP1 [366] =>PUP.AnyProtect O39 - APT: - (..) -- C:\Windows\Tasks\APSnotifierPP2.job [364] =>PUP.AnyProtect O39 - APT: - (..) -- C:\Windows\System32\Tasks\APSnotifierPP2 [364] =>PUP.AnyProtect O39 - APT: - (..) -- C:\Windows\Tasks\APSnotifierPP3.job [364] =>PUP.AnyProtect O39 - APT: - (..) -- C:\Windows\System32\Tasks\APSnotifierPP3 [364] =>PUP.AnyProtect O39 - APT: - (..) -- C:\Windows\Tasks\Dealply.job [308] =>PUP.DealPly O41 - Driver: (pcwatch) . (...) - C:\Windows\system32\Drivers\pcwatch.sys =>PUP.WebProtect O42 - Logiciel: Windows iLivid Toolbar - (.Bandoo Media, Inc.) [HKLM] -- Windows Searchqu Toolbar =>PUP.Datamngr [HKCU\Software\AnyProtect] =>PUP.AnyProtect [HKCU\Software\AppDataLow\Software\BlockAndSurf] =>PUP.BlockAndSurf [HKCU\Software\AppDataLow\Software\Crossrider] =>PUP.CrossRider [HKCU\Software\AppDataLow\Software\DynConIE] =>PUP.DynConIE [HKCU\Software\AppDataLow\Software\HQVP1.9V25.09] =>PUP.CrossRider [HKCU\Software\AppDataLow\Software\Smartbar] =>Hijacker.SmartBar [HKCU\Software\AppDataLow\Software\searchqutoolbar] =>PUP.Datamngr [HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}] [HKCU\Software\BabSolution] =>Hijacker.BabSolution [HKCU\Software\Boxore] =>Adware.Boxore [HKCU\Software\Complitly] =>Adware.PredictAd [HKCU\Software\Cr_Installer] =>PUP.CrossRider [HKCU\Software\HQVP1.9V25.09] =>PUP.CrossRider [HKCU\Software\InstallCore] =>Adware.InstallCore [HKCU\Software\InstalledBrowserExtensions] =>Adware.VidSaver [HKCU\Software\Optimizer Pro] =>PUP.OptimizerPro [HKCU\Software\PCTRunner] =>PUP.WebProtect [HKCU\Software\SupHpUISoft] =>PUP.CrossRider [HKCU\Software\TutoTag] =>PUP.AgenceExclusive [HKCU\Software\aed9d8b03db842] =>PUP.Babylon [HKCU\Software\cacaoweb] =>PUP.CacaoWeb [HKCU\Software\freesofttoday] =>Adware.FreeSoftToday [HKCU\Software\globalUpdate] [HKCU\Software\iLivid] =>Adware.Bandoo [HKLM\Software\AedgePerformanceBCN] =>Adware.SPointer [HKLM\Software\Babylon] =>PUP.Babylon [HKLM\Software\Boxore] =>Adware.Boxore [HKLM\Software\GlobalUpdate] [HKLM\Software\HQVP1.9V25.09-nv] =>PUP.CrossRider [HKLM\Software\HQVP1.9V25.09] =>PUP.CrossRider [HKLM\Software\Iminent] =>Adware.IMBooster [HKLM\Software\InstallCore] =>Adware.InstallCore [HKLM\Software\InstalledBrowserExtensions] =>Adware.VidSaver [HKLM\Software\PCDRunner] =>PUP.WebProtect [HKLM\Software\PCTRunner] =>PUP.WebProtect [HKLM\Software\SPPDCOM] =>Rogue.PCSpeedUp [HKLM\Software\SimplyGen] =>Adware.PredictAd [HKLM\Software\SupDp] =>PUP.SupTab [HKLM\Software\Tarma Installer] =>PUP.Tarma [HKLM\Software\Tutorials] =>PUP.AgenceExclusive [HKLM\Software\Vittalia] =>PUP.Vittalia [HKLM\Software\Wpm] =>PUP.WpManager [HKLM\Software\iLividSRTB] =>Adware.Bandoo [HKLM\Software\mystartsearchSoftware] =>PUP.StartSearch [HKLM\Software\supTab] =>PUP.SupTab [HKLM\Software\supWPM] =>PUP.WpManager [HKLM\Software\supWindowsMangerProtect] =>PUP.Fuyu O43 - CFD: 29/11/2011 - 13:52:50 - [] ----D C:\Program Files\Complitly =>Adware.PredictAd O43 - CFD: 25/08/2013 - 00:43:00 - [] ----D C:\Program Files\DealPly =>PUP.DealPly O43 - CFD: 05/04/2013 - 23:38:21 - [] ----D C:\Program Files\DomaIQ Uninstaller =>Adware.DomaIQ O43 - CFD: 25/09/2014 - 12:17:59 - [] ----D C:\Program Files\globalUpdate O43 - CFD: 25/09/2014 - 19:25:09 - [] ----D C:\Program Files\HQVP1.9V25.09 =>PUP.CrossRider O43 - CFD: 16/07/2014 - 13:41:15 - [0] ----D C:\Program Files\Movies Toolbar =>PUP.MoviesToolbar O43 - CFD: 25/09/2014 - 19:27:53 - [] ----D C:\Program Files\Optimizer Pro =>PUP.OptimizerPro O43 - CFD: 16/10/2014 - 00:16:36 - [] ----D C:\Program Files\PCTRunner =>PUP.WebProtect O43 - CFD: 27/09/2014 - 23:14:55 - [] ----D C:\Program Files\Search Extensions =>PUP.RocketTab O43 - CFD: 05/09/2014 - 09:21:36 - [] ----D C:\Program Files\SearchProtect =>PUP.SearchProtect O43 - CFD: 27/09/2014 - 23:21:08 - [] ----D C:\Program Files\Software O43 - CFD: 18/10/2014 - 14:49:41 - [] ----D C:\Program Files\SupTab =>PUP.SupTab O43 - CFD: 16/07/2014 - 13:41:15 - [] ----D C:\Program Files\SweetIM =>PUP.SweetIM O43 - CFD: 12/05/2014 - 20:09:04 - [] ----D C:\Program Files\Webplayer setup =>Adware.SocialSkinz O43 - CFD: 03/11/2011 - 22:18:38 - [] ----D C:\Program Files\Windows iLivid Toolbar =>Adware.Bandoo O43 - CFD: 10/12/2012 - 09:46:49 - [] ----D C:\Program Files\~BabylonToolbar =>PUP.Babylon O43 - CFD: 05/04/2013 - 23:11:07 - [0] ----D C:\ProgramData\Babylon =>PUP.Babylon O43 - CFD: 25/09/2014 - 12:18:32 - [] ----D C:\ProgramData\IePluginServices =>PUP.IePluginService O43 - CFD: 05/10/2014 - 12:32:23 - [] ----D C:\ProgramData\Meteoroids =>PUP.Meteoroids O43 - CFD: 14/01/2013 - 23:14:02 - [] ----D C:\ProgramData\Software =>Adware.Boxore O43 - CFD: 10/11/2012 - 17:47:47 - [] ----D C:\ProgramData\SweetIM =>PUP.SweetIM O43 - CFD: 26/08/2013 - 17:13:19 - [] ----D C:\ProgramData\Tarma Installer =>PUP.Tarma O43 - CFD: 25/09/2014 - 12:18:25 - [] ----D C:\ProgramData\WindowsMangerProtect =>PUP.Fuyu O43 - CFD: 16/07/2014 - 13:40:59 - [] ----D C:\ProgramData\WPM =>PUP.WpManager O43 - CFD: 10/12/2012 - 15:37:55 - [] ----D C:\ProgramData\~Browser Manager O43 - CFD: 05/04/2013 - 23:11:07 - [] ----D C:\Users\utilisateur\AppData\Roaming\Babylon =>PUP.Babylon O43 - CFD: 16/10/2014 - 11:06:01 - [] ----D C:\Users\utilisateur\AppData\Roaming\cacaoweb =>PUP.CacaoWeb O43 - CFD: 25/09/2014 - 12:38:29 - [] ----D C:\Users\utilisateur\AppData\Roaming\mystartsearch =>PUP.StartSearch O43 - CFD: 16/07/2014 - 13:40:59 - [0] ----D C:\Users\utilisateur\AppData\Roaming\SupTab =>PUP.SupTab O43 - CFD: 18/11/2013 - 23:53:10 - [] ----D C:\Users\utilisateur\AppData\Roaming\WebPlayerBdd =>Adware.SocialSkinz O43 - CFD: 07/05/2014 - 22:13:59 - [] ----D C:\Users\utilisateur\AppData\Local\com O43 - CFD: 25/09/2014 - 12:17:59 - [] ----D C:\Users\utilisateur\AppData\Local\globalUpdate O43 - CFD: 03/11/2011 - 22:17:04 - [] ----D C:\Users\utilisateur\AppData\Local\Ilivid Player =>Adware.Bandoo O43 - CFD: 15/10/2014 - 20:04:06 - [] ----D C:\Users\utilisateur\AppData\Local\Meteoroids =>PUP.Meteoroids O43 - CFD: 11/11/2013 - 18:50:09 - [] ----D C:\Users\utilisateur\AppData\Local\Mobogenie =>PUP.Mobogenie O43 - CFD: 30/08/2014 - 16:49:43 - [] ----D C:\Users\utilisateur\AppData\Local\SearchProtect =>PUP.SearchProtect O43 - CFD: 25/09/2014 - 12:16:12 - [] ----D C:\Users\utilisateur\AppData\Local\Software O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\pcwatch.sys . (...) -- C:\Windows\System32\Drivers\pcwatch.sys (.not file.) =>PUP.WebProtect O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\pcwatch.sys . (...) -- C:\Windows\System32\Drivers\pcwatch.sys (.not file.) =>PUP.WebProtect O50 - IFEO:Image File Execution Options - bitguard.exe - tasklist.exe =>PUP.BitGuard O50 - IFEO:Image File Execution Options - bprotect.exe - tasklist.exe O50 - IFEO:Image File Execution Options - bpsvc.exe - tasklist.exe O50 - IFEO:Image File Execution Options - browserdefender.exe - tasklist.exe =>Hijacker.Eazel O50 - IFEO:Image File Execution Options - browserprotect.exe - tasklist.exe =>Hijacker.Eazel O50 - IFEO:Image File Execution Options - browsersafeguard.exe - tasklist.exe =>PUP.BrowserSafeguard O50 - IFEO:Image File Execution Options - DatamngrCoordinator.exe - tasklist.exe =>PUP.Datamngr O50 - IFEO:Image File Execution Options - dprotectsvc.exe - tasklist.exe =>Trojan.Staser O50 - IFEO:Image File Execution Options - jumpflip - tasklist.exe =>PUP.JumpFlip O50 - IFEO:Image File Execution Options - protectedsearch.exe - tasklist.exe =>Spyware.ProtectedSearch O50 - IFEO:Image File Execution Options - searchinstaller.exe - tasklist.exe O50 - IFEO:Image File Execution Options - searchprotection.exe - tasklist.exe =>PUP.SearchProtect O50 - IFEO:Image File Execution Options - searchprotector.exe - tasklist.exe =>PUP.SearchProtect O50 - IFEO:Image File Execution Options - searchsettings.exe - tasklist.exe =>Adware.SearchSettings O50 - IFEO:Image File Execution Options - searchsettings64.exe - tasklist.exe =>Adware.SearchSettings O50 - IFEO:Image File Execution Options - snapdo.exe - tasklist.exe =>Hijacker.SmartBar O50 - IFEO:Image File Execution Options - stinst32.exe - tasklist.exe O50 - IFEO:Image File Execution Options - stinst64.exe - tasklist.exe O50 - IFEO:Image File Execution Options - umbrella.exe - tasklist.exe =>Adware.IMBooster O50 - IFEO:Image File Execution Options - utiljumpflip.exe - tasklist.exe =>PUP.JumpFlip O50 - IFEO:Image File Execution Options - volaro - tasklist.exe =>Trojan.Vonteera O50 - IFEO:Image File Execution Options - vonteera - tasklist.exe =>Trojan.Vonteera O50 - IFEO:Image File Execution Options - websteroids.exe - tasklist.exe =>PUP.TubeDimmer O50 - IFEO:Image File Execution Options - websteroidsservice.exe - tasklist.exe =>PUP.TubeDimmer O51 - MPSK:{ef3362cd-b5bf-11e1-a7e2-6c626df514c1}\AutoRun\command. (...) -- E:\DPFMate.exe (.not file.) O51 - MPSK:{ef3362ee-b5bf-11e1-a7e2-6c626df514c1}\AutoRun\command. (...) -- E:\DPFMate.exe (.not file.) O58 - SDL:02/01/1601 - 23:00:00 ---A- . (...) -- C:\Windows\System32\Drivers\pcwatch.sys [20480] =>PUP.WebProtect O64 - Services: CurCS - 26/11/1744 - C:\Windows\system32\Drivers\pcwatch.sys (pcwatch) .(...) - LEGACY_PCWATCH =>PUP.WebProtect O69 - SBI: SearchScopes [HKCU] {43334B02-6D94-2C41-4153-611EA7D87DE2} - (Nation Search) - http://search.nation.com =>PUP.NationSearch O69 - SBI: SearchScopes [HKCU] {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} - (Ask.com) - http://dts.search.ask.com O90 - PUC: "9EE58E3C298524145B73CBBED3CAC4D3" . (.Internet Explorer Toolbar 4.6 by SweetPacks.) -- C:\Windows\Installer\{C3E85EE9-5892-4142-B537-BCEB3DAC4C3D}\ARPPRODUCTICON.exe =>PUP.SweetIM O90 - PUC: "B2FD9C0A5B9838449838816A28001F4B" . (.SweetIM for Messenger 3.7.) -- C:\Windows\Installer\{A0C9DF2B-89B5-4483-8983-18A68200F1B4}\ARPPRODUCTICON.exe =>PUP.SweetIM [HKCU\Software\aed9d8b03db842\history\{16cdff19-861d-48e3-a751-d99a27784753}2.3.762.17]:guid="{16cdff19-861d-48e3-a751-d99a27784753}" =>PUP.Babylon [HKCU\Software\aed9d8b03db842\history\{16cdff19-861d-48e3-a751-d99a27784753}2.3.762.17]:version="2.3.762.17" =>PUP.Babylon [HKCU\Software\aed9d8b03db842\history\{16cdff19-861d-48e3-a751-d99a27784753}2.3.796.11]:guid="{16cdff19-861d-48e3-a751-d99a27784753}" =>PUP.Babylon [HKCU\Software\aed9d8b03db842\history\{16cdff19-861d-48e3-a751-d99a27784753}2.3.796.11]:version="2.3.796.11" =>PUP.Babylon [HKCU\Software\aed9d8b03db842\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1125.80]:guid="{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}" =>Hijacker.Eazel [HKCU\Software\aed9d8b03db842\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1125.80]:version="2.6.1125.80" =>Hijacker.Eazel [HKCU\Software\aed9d8b03db842] =>PUP.Babylon^ HKLM\SOFTWARE\Microsoft\Tracing\Babylon_RASAPI32 =>PUP.Babylon HKLM\SOFTWARE\Microsoft\Tracing\Babylon_RASMANCS =>PUP.Babylon HKLM\SOFTWARE\Microsoft\Tracing\BackupStack_RASAPI32 =>PUP.MyPCBackup HKLM\SOFTWARE\Microsoft\Tracing\BackupStack_RASMANCS =>PUP.MyPCBackup HKLM\SOFTWARE\Microsoft\Tracing\boxore_RASAPI32 =>Adware.Boxore HKLM\SOFTWARE\Microsoft\Tracing\boxore_RASMANCS =>Adware.Boxore HKLM\SOFTWARE\Microsoft\Tracing\Color My Facebook_RASAPI32 =>PUP.ColorMyFacebook HKLM\SOFTWARE\Microsoft\Tracing\Color My Facebook_RASMANCS =>PUP.ColorMyFacebook HKLM\SOFTWARE\Microsoft\Tracing\datamngrUI_RASAPI32 =>PUP.Datamngr HKLM\SOFTWARE\Microsoft\Tracing\datamngrUI_RASMANCS =>PUP.Datamngr HKLM\SOFTWARE\Microsoft\Tracing\DomaIQ10_RASAPI32 =>Adware.DomaIQ HKLM\SOFTWARE\Microsoft\Tracing\DomaIQ10_RASMANCS =>Adware.DomaIQ HKLM\SOFTWARE\Microsoft\Tracing\iLividMediaBar_RASAPI32 =>Adware.Bandoo HKLM\SOFTWARE\Microsoft\Tracing\iLividMediaBar_RASMANCS =>Adware.Bandoo HKLM\SOFTWARE\Microsoft\Tracing\iLividSetupV1_RASAPI32 =>Adware.Bandoo HKLM\SOFTWARE\Microsoft\Tracing\iLividSetupV1_RASMANCS =>Adware.Bandoo HKLM\SOFTWARE\Microsoft\Tracing\iLividSetup_RASAPI32 =>Adware.Bandoo HKLM\SOFTWARE\Microsoft\Tracing\iLividSetup_RASMANCS =>Adware.Bandoo HKLM\SOFTWARE\Microsoft\Tracing\IminentSetup_2-KFRPtAWP-1__RASAPI32 =>Adware.IMBooster HKLM\SOFTWARE\Microsoft\Tracing\IminentSetup_2-KFRPtAWP-1__RASMANCS =>Adware.IMBooster HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASAPI32 =>Adware.IMBooster HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASMANCS =>Adware.IMBooster HKLM\SOFTWARE\Microsoft\Tracing\InstTracker_RASAPI32 =>Adware.PredictAd HKLM\SOFTWARE\Microsoft\Tracing\InstTracker_RASMANCS =>Adware.PredictAd HKLM\SOFTWARE\Microsoft\Tracing\LookThisUpUninstall_RASAPI32 =>PUP.LookThisUp HKLM\SOFTWARE\Microsoft\Tracing\LookThisUpUninstall_RASMANCS =>PUP.LookThisUp HKLM\SOFTWARE\Microsoft\Tracing\LookThisUp_RASAPI32 =>PUP.LookThisUp HKLM\SOFTWARE\Microsoft\Tracing\LookThisUp_RASMANCS =>PUP.LookThisUp HKLM\SOFTWARE\Microsoft\Tracing\MegaBrowse_RASAPI32 =>PUP.MegaBrowse HKLM\SOFTWARE\Microsoft\Tracing\MegaBrowse_RASMANCS =>PUP.MegaBrowse HKLM\SOFTWARE\Microsoft\Tracing\MyBabylonTB_RASAPI32 =>PUP.Babylon HKLM\SOFTWARE\Microsoft\Tracing\MyBabylonTB_RASMANCS =>PUP.Babylon HKLM\SOFTWARE\Microsoft\Tracing\NewPlayerUpdater_RASAPI32 =>Adware.NewPlayer HKLM\SOFTWARE\Microsoft\Tracing\NewPlayerUpdater_RASMANCS =>Adware.NewPlayer HKLM\SOFTWARE\Microsoft\Tracing\NewPlayer_RASAPI32 =>Adware.NewPlayer HKLM\SOFTWARE\Microsoft\Tracing\NewPlayer_RASMANCS =>Adware.NewPlayer HKLM\SOFTWARE\Microsoft\Tracing\SearchquMediaBar_RASAPI32 =>PUP.Datamngr HKLM\SOFTWARE\Microsoft\Tracing\SearchquMediaBar_RASMANCS =>PUP.Datamngr HKLM\SOFTWARE\Microsoft\Tracing\SetupDataMngr_searchqu_RASAPI32 =>PUP.Datamngr HKLM\SOFTWARE\Microsoft\Tracing\SetupDataMngr_searchqu_RASMANCS =>PUP.Datamngr HKLM\SOFTWARE\Microsoft\Tracing\Supreme Savings_RASAPI32 =>PUP.RewardsArcade HKLM\SOFTWARE\Microsoft\Tracing\Supreme Savings_RASMANCS =>PUP.RewardsArcade HKLM\SOFTWARE\Microsoft\Tracing\sweetimsetup_RASAPI32 =>PUP.SweetIM HKLM\SOFTWARE\Microsoft\Tracing\sweetimsetup_RASMANCS =>PUP.SweetIM HKLM\SOFTWARE\Microsoft\Tracing\SweetIM_RASAPI32 =>PUP.SweetIM HKLM\SOFTWARE\Microsoft\Tracing\SweetIM_RASMANCS =>PUP.SweetIM HKLM\SOFTWARE\Microsoft\Tracing\SweetPacksUpdateManager_RASAPI32 =>PUP.SweetIM HKLM\SOFTWARE\Microsoft\Tracing\SweetPacksUpdateManager_RASMANCS =>PUP.SweetIM HKLM\SOFTWARE\Microsoft\Tracing\updateMegaBrowse_RASAPI32 =>PUP.MegaBrowse HKLM\SOFTWARE\Microsoft\Tracing\updateMegaBrowse_RASMANCS =>PUP.MegaBrowse HKLM\SOFTWARE\Microsoft\Tracing\utilMegaBrowse_RASAPI32 =>PUP.MegaBrowse HKLM\SOFTWARE\Microsoft\Tracing\utilMegaBrowse_RASMANCS =>PUP.MegaBrowse HKLM\SOFTWARE\Microsoft\Tracing\VAFPlayer_RASAPI32 =>PUP.VAFPlayer HKLM\SOFTWARE\Microsoft\Tracing\VAFPlayer_RASMANCS =>PUP.VAFPlayer HKLM\SOFTWARE\Microsoft\Tracing\Widestream6-setup_RASAPI32 =>Adware.SPointer HKLM\SOFTWARE\Microsoft\Tracing\Widestream6-setup_RASMANCS =>Adware.SPointer HKLM\SOFTWARE\Microsoft\Tracing\YontooSetup-Silent-13BC_RASAPI32 =>Adware.Yontoo HKLM\SOFTWARE\Microsoft\Tracing\YontooSetup-Silent-13BC_RASMANCS =>Adware.Yontoo [HKLM\SYSTEM\CurrentControlSet\Services\IePluginServices] =>PUP.IePluginService^ [HKLM\SYSTEM\CurrentControlSet\Services\VDSYIEc] =>PUP.Meteoroids^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Windows Searchqu Toolbar] =>PUP.Datamngr^ [HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}] =>Adware.Bandoo [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}] =>Adware.Yontoo [HKCU\Software\Boxore] =>Adware.Boxore [HKCU\Software\cacaoweb] =>PUP.CacaoWeb [HKCU\Software\Cr_Installer] =>PUP.CrossRider [HKCU\Software\ilivid] =>Adware.Bandoo [HKCU\Software\AppDataLow\Software\searchqutoolbar] =>Adware.Bandoo [HKCU\Software\Complitly] =>Adware.PredictAd [HKLM\Software\Classes\Prod.cap] =>PUP.Babylon [HKCU\Software\InstallCore] =>Adware.InstallCore [HKCU\Software\AppDataLow\Software\Crossrider] =>PUP.CrossRider [HKCU\Software\InstalledBrowserExtensions\] =>PUP.CrossRider [HKCU\Software\InstalledBrowserExtensions] =>PUP.CrossRider [HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}] =>PUP.OptimizerPro [HKLM\Software\Classes\Iminent] =>Adware.IMBooster [HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110011381147}] =>PUP.CrossRider [HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110111991162}] =>PUP.CrossRider [HKLM\Software\Classes\CLSID\{22222222-2222-2222-2222-220622382231}] =>PUP.CrossRider [HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{11111111-1111-1111-1111-110011381147}] =>PUP.CrossRider [HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{11111111-1111-1111-1111-110111991162}] =>PUP.CrossRider [HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{21111111-1111-1111-1111-110011381147}] =>PUP.CrossRider [HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{21111111-1111-1111-1111-110111991162}] =>PUP.CrossRider [HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{31111111-1111-1111-1111-110111991162}] =>PUP.CrossRider [HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110611381131}] =>PUP.CrossRider [HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\SweetIM.exe] =>PUP.SweetIM [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110011381147}] =>PUP.CrossRider [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110111991162}] =>PUP.CrossRider [HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}] =>Adware.Bandoo^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CA0054A5AB3EFFE4CB5660E44A1E7DCC] =>Adware.Boxore^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\02F47BF73B948514FAACADD8CBBDF37D] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\07D5290CDBDAE4242926B8E6CA650501] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\080D9F5E1E95FEE4794CE438E635239E] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08E33F7B61DEFF24BB9673ED7D467636] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0E3D8A5B48622A445A7DF73FEFF32C3F] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0FF2AEFF45EEA0A48A4B33C1973B6094] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\12BF94BD06C95F343A77631402B9556A] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1E264E0A5959A1C46BA9175A878B12EA] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2124D8A8CF720FD44866190AF560228E] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\27A325ACED8CA4743A30127638591ADB] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2E6768B6932D112438F047C54D180635] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\305B09CE8C53A214DB58887F62F25536] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\34EDDB1BFB3A2D448845F3EFD0F15A43] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\350D17402BD84234EAF7D32F08172D7C] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\351716A953E21214898904032EAE2E81] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\397C771A7BCAC904697C3EC629ED33ED] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3EE8C5F419057E1478A654868CEE60B5] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\427EA997C413D1D47907CBFC7B2DB432] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4318DF19719275242801CBE292063A4C] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\45FC115D1FEAEF849A4E1610D6EC8BF0] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\46A5861A389ADB844AF89E31BC9DF0A1] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4735D908D66E1BA46B6C2D7185A12B2B] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\49B0E1A6FF50BBE4289E4E23DE6EA0C7] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4CCCAC049F34D0540AAC13011398BEDB] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5C4389D0BFB302C479DE4178BD5D9EBA] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5D2B09BDEF4FE54418E6F3373CDBC7AC] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\61B65D3397A1FBF4CB1571B5E4F6B5B0] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\68E8A05C60DD9254591DBD16C94EDDBF] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\697E782CF574CC34CBB9566440BA12BC] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\69D6A6B2ED56AF24EA6335EAD6E91CA4] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6AE27A8613CF7EA4782F2886F67295E5] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\75D5168E5E176C24981B4E5DBD991078] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\76D8378E2DDAED3428720A631F6E3BF0] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7CE172051F585E04187BCB97570BFA74] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7FFA128C2B0FF414D805FC5627883401] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\86A901BA5265452499DCBF719C378EE3] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\86EDC790504E1834DBC20C9A04328FD2] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8724E58E6C7D00C48A0D4F3345EB2C26] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\88ABD1CD5C40EC84789A7F6EF86DAC5E] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\97C3D0F82E712E241A2F969F45E3351C] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\980289C22F80A7C4BB9323DC61255E4E] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\98CC8BF5A4A6E6C4ABF7051DDAB8B058] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9A001B259DB7D694E818BE29B973992C] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9A4B7EF3789F871419D9302583B20C15] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9E7F556BF224D804D96A96F0F6344789] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A189D17A469616C4688D23E192996267] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A6C53B0F76C44004A8F36716213017DB] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AB676B0E1B9EFA049B9F7DDDA9645734] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B31BBB0B825EDEF45AB0FE7099C68C81] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B471D8D7319336B4CA89374ED0D7B806] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B59F2D8189784CC46A4597F2842480B0] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BAE2EC163C6A68A48921573E0E7E199D] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BC30043663AA2CA4DA1DAA9CA5FDCC75] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BD746FB95FB8E5B45BF66BE54D5FD91F] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BF4F885EDEE45644EB1E0C99E0162399] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C06C6662FA5B04646829E4A460857770] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CCF399FCD6D2D3F46BF02A1378654FC9] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CE21F3FD57B244142880EF15A165A156] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CEEB3E14ABE8270419B0FD762E18F7C6] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D149C1355C98DE24E82CEFBD996FE06A] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D15DAF33C220F91468A1D7D57C31ACD7] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D3BA76A44C779424889063D5098ED2D6] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D6D0EB9FDBD90C04D92A7E729058F10D] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DB59FDB786388EA4D897F3EE715683AC] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DB8DAD19CFBCC2049A4477183787E8C5] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E1C820A74ED67374BA048B52CB3C3804] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E4748F9A4181FCE46A23C13B517B9420] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EC65F200D112357449C8B1BC3CFA03D0] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ED1B5E9A3BDB51349BF96E842C062D98] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F327D0C73C0973644A21E8CC852267A0] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FA96423FE2B98E248A3B23548D1E22D9] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FDC83385E6C239F4C876A77A37DF581D] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FECBC2BC14DA6CD459BD59A041709836] =>PUP.SweetIM^ [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:cacaoweb =>PUP.CacaoWeb^ [HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks]:{84FF7BD6-B47F-46F8-9130-01B2696B36CB} =>Adware.IMBooster C:\Users\utilisateur\AppData\Roaming\Mozilla\Firefox\Profiles\EP: RegExtension {b64982b1-d112-42b5-b1e4-d3867c4533f8} . (...) -- C:\extensions\ProgramData\Browser Manager\2.3.796.11\{16cdff19-861d-48e3-a751-d99a27784753}\FirefoxExtension (.not file.) =>PUP.Babylon^ C:\Users\utilisateur\AppData\Roaming\Mozilla\Firefox\Profiles\e7q0l2g2.default\extensions\cacaoweb@cacaoweb.org =>PUP.CacaoWeb^ C:\Program Files\Complitly =>Adware.PredictAd^ C:\Program Files\DealPly =>PUP.DealPly^ C:\Program Files\DomaIQ Uninstaller =>Adware.DomaIQ^ C:\Program Files\HQVP1.9V25.09 =>PUP.CrossRider^ C:\Program Files\Movies Toolbar =>PUP.MoviesToolbar^ C:\Program Files\Optimizer Pro =>PUP.OptimizerPro^ C:\Program Files\PCTRunner =>PUP.WebProtect^ C:\Program Files\Search Extensions =>PUP.RocketTab^ C:\Program Files\SearchProtect =>PUP.SearchProtect^ C:\Program Files\SupTab =>PUP.SupTab^ C:\Program Files\SweetIM =>PUP.SweetIM^ C:\Program Files\Webplayer setup =>Adware.SocialSkinz^ C:\Program Files\Windows iLivid Toolbar =>Adware.Bandoo^ C:\Program Files\~BabylonToolbar =>PUP.Babylon^ C:\ProgramData\Babylon =>PUP.Babylon^ C:\ProgramData\IePluginServices =>PUP.IePluginService^ C:\ProgramData\Meteoroids =>PUP.Meteoroids^ C:\ProgramData\Software =>Adware.Boxore^ C:\ProgramData\SweetIM =>PUP.SweetIM^ C:\ProgramData\Tarma Installer =>PUP.Tarma^ C:\ProgramData\WindowsMangerProtect =>PUP.Fuyu^ C:\ProgramData\WPM =>PUP.WpManager^ C:\Users\utilisateur\AppData\Roaming\Babylon =>PUP.Babylon^ C:\Users\utilisateur\AppData\Roaming\cacaoweb =>PUP.CacaoWeb^ C:\Users\utilisateur\AppData\Roaming\mystartsearch =>PUP.StartSearch^ C:\Users\utilisateur\AppData\Roaming\SupTab =>PUP.SupTab^ C:\Users\utilisateur\AppData\Roaming\WebPlayerBdd =>Adware.SocialSkinz^ C:\Users\utilisateur\AppData\Local\Ilivid Player =>Adware.Bandoo^ C:\Users\utilisateur\AppData\Local\Meteoroids =>PUP.Meteoroids^ C:\Users\utilisateur\AppData\Local\Mobogenie =>PUP.Mobogenie^ C:\Users\utilisateur\AppData\Local\SearchProtect =>PUP.SearchProtect^ C:\Program Files\Software =>Adware.Boxore C:\Users\utilisateur\AppData\Local\Software =>Adware.Boxore C:\Users\utilisateur\AppData\Local\Temp\Iminent =>Adware.IMBooster C:\Windows\Tasks\409dc49e-8f20-4d52-bc0b-734067644dbe-1.job =>PUP.CrossRider^ C:\Windows\Tasks\409dc49e-8f20-4d52-bc0b-734067644dbe-2.job =>PUP.CrossRider^ C:\Windows\Tasks\409dc49e-8f20-4d52-bc0b-734067644dbe-3.job =>PUP.CrossRider^ C:\Windows\Tasks\409dc49e-8f20-4d52-bc0b-734067644dbe-4.job =>PUP.CrossRider^ C:\Windows\Tasks\409dc49e-8f20-4d52-bc0b-734067644dbe-5.job =>PUP.CrossRider^ C:\Windows\Tasks\409dc49e-8f20-4d52-bc0b-734067644dbe-6.job =>PUP.CrossRider^ C:\Windows\Tasks\409dc49e-8f20-4d52-bc0b-734067644dbe-7.job =>PUP.CrossRider^ C:\Windows\Tasks\APSnotifierPP1.job =>PUP.AnyProtect^ C:\Windows\System32\Tasks\APSnotifierPP1 =>PUP.AnyProtect^ C:\Windows\Tasks\APSnotifierPP2.job =>PUP.AnyProtect^ C:\Windows\System32\Tasks\APSnotifierPP2 =>PUP.AnyProtect^ C:\Windows\Tasks\APSnotifierPP3.job =>PUP.AnyProtect^ C:\Windows\System32\Tasks\APSnotifierPP3 =>PUP.AnyProtect^ C:\Windows\Tasks\Dealply.job =>PUP.DealPly^ [HKCU\Software\AnyProtect] =>PUP.AnyProtect^ [HKCU\Software\AppDataLow\Software\BlockAndSurf] =>PUP.BlockAndSurf^ [HKCU\Software\AppDataLow\Software\DynConIE] =>PUP.DynConIE^ [HKCU\Software\AppDataLow\Software\HQVP1.9V25.09] =>PUP.CrossRider^ [HKCU\Software\AppDataLow\Software\Smartbar] =>Hijacker.SmartBar^ [HKCU\Software\BabSolution] =>Hijacker.BabSolution^ [HKCU\Software\HQVP1.9V25.09] =>PUP.CrossRider^ [HKCU\Software\Optimizer Pro] =>PUP.OptimizerPro^ [HKCU\Software\PCTRunner] =>PUP.WebProtect^ [HKCU\Software\SupHpUISoft] =>PUP.CrossRider^ [HKCU\Software\TutoTag] =>PUP.AgenceExclusive^ [HKCU\Software\freesofttoday] =>Adware.FreeSoftToday^ [HKCU\Software\iLivid] =>Adware.Bandoo^ [HKLM\Software\AedgePerformanceBCN] =>Adware.SPointer^ [HKLM\Software\Babylon] =>PUP.Babylon^ [HKLM\Software\Boxore] =>Adware.Boxore^ [HKLM\Software\HQVP1.9V25.09-nv] =>PUP.CrossRider^ [HKLM\Software\HQVP1.9V25.09] =>PUP.CrossRider^ [HKLM\Software\Iminent] =>Adware.IMBooster^ [HKLM\Software\InstallCore] =>Adware.InstallCore^ [HKLM\Software\InstalledBrowserExtensions] =>Adware.VidSaver^ [HKLM\Software\PCDRunner] =>PUP.WebProtect^ [HKLM\Software\PCTRunner] =>PUP.WebProtect^ [HKLM\Software\SPPDCOM] =>Rogue.PCSpeedUp^ [HKLM\Software\SimplyGen] =>Adware.PredictAd^ [HKLM\Software\SupDp] =>PUP.SupTab^ [HKLM\Software\Tarma Installer] =>PUP.Tarma^ [HKLM\Software\Tutorials] =>PUP.AgenceExclusive^ [HKLM\Software\Vittalia] =>PUP.Vittalia^ [HKLM\Software\Wpm] =>PUP.WpManager^ [HKLM\Software\iLividSRTB] =>Adware.Bandoo^ [HKLM\Software\mystartsearchSoftware] =>PUP.StartSearch^ [HKLM\Software\supTab] =>PUP.SupTab^ [HKLM\Software\supWPM] =>PUP.WpManager^ [HKLM\Software\supWindowsMangerProtect] =>PUP.Fuyu^ [HKCU\Software\aed9d8b03db842\history\{16cdff19-861d-48e3-a751-d99a27784753}2.3.762.17]:guid="{16cdff19-861d-48e3-a751-d99a27784753}" =>PUP.Babylon^ [HKCU\Software\aed9d8b03db842\history\{16cdff19-861d-48e3-a751-d99a27784753}2.3.796.11]:guid="{16cdff19-861d-48e3-a751-d99a27784753}" =>PUP.Babylon^ [HKCU\Software\aed9d8b03db842\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1125.80]:guid="{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}" =>Hijacker.Eazel^ [HKCU\Software\aed9d8b03db842] =>PUP.Babylon^^ R0 - HKCU\SOFTWARE\Classes\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.chatzum.com O2 - BHO: (no name) - {95B7759C-8C7F-4BF1-B163-73684A933233} Clé orpheline O3 - Toolbar\WebBrowser: (no name) - [HKCU]{2318C2B1-4965-11D4-9B18-009027A5CD4F} Clé orpheline O3 - Toolbar\WebBrowser: (no name) - [HKCU]{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} Clé orpheline O39 - APT: - (..) -- C:\Windows\Tasks\AVG-Secure-Search-Update_0814tb_rel.job [366] O39 - APT: - (..) -- C:\Windows\Tasks\AVG-Secure-Search-Update_0814tb_rmv.job [366] [HKCU\Software\APNDTX] [HKCU\Software\AppDataLow\Software\ConduitSearchScopes] [HKCU\Software\AppDataLow\Software\Conduit] [HKCU\Software\ChatZum Toolbar] [HKCU\Software\Conduit] [HKCU\Software\Softonic] [HKLM\Software\ChatZum Toolbar] [HKLM\Software\Conduit] O43 - CFD: 26/08/2014 - 23:15:13 - [] ----D C:\Program Files\AVG Security Toolbar O43 - CFD: 15/07/2012 - 01:54:40 - [] ----D C:\Program Files\ChatZum Toolbar O43 - CFD: 11/11/2013 - 18:42:53 - [] ----D C:\Program Files\Conduit O43 - CFD: 25/08/2013 - 04:00:28 - [] ----D C:\Program Files\Force Download Toolbar O43 - CFD: 16/07/2014 - 13:41:15 - [0] ----D C:\ProgramData\Conduit O43 - CFD: 11/11/2013 - 19:01:50 - [0] ----D C:\Users\utilisateur\AppData\Local\Conduit O69 - SBI: SearchScopes [HKCU] {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} - (Trovi search) - http://search.conduit.com O69 - SBI: SearchScopes [HKCU] {96bd48dd-741b-41ae-ac4a-aff96ba00f7e} - (ChatZum Search) - http://search.chatzum.com O69 - SBI: SearchScopes [HKCU] {BC31D260-A19A-4AD6-847F-0668CDCB1166} - (Force Download Customized Web Search) - http://search.conduit.com HKLM\SOFTWARE\Microsoft\Tracing\nation_softonic_yahoo_801_RASAPI32 HKLM\SOFTWARE\Microsoft\Tracing\nation_softonic_yahoo_801_RASMANCS HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_pour_firefox_RASAPI32 HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_pour_firefox_RASMANCS HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_pour_poster-designer_RASAPI32 HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_pour_poster-designer_RASMANCS HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_pour_the-sims-2-homecrafter-plus_RASAPI32 HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_pour_the-sims-2-homecrafter-plus_RASMANCS [HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{96bd48dd-741b-41ae-ac4a-aff96ba00f7e}] [HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}] [HKCU\Software\ChatZum Toolbar] [HKCU\Software\AppDataLow\Software\ConduitSearchScopes] [HKCU\Software\Softonic] [HKLM\Software\Classes\Toolbar.CT2494504] [HKLM\Software\Classes\CLSID\{3c471948-f874-49f5-b338-4f214a2ee0b1}] C:\Program Files\AVG Security Toolbar C:\Program Files\ChatZum Toolbar C:\Program Files\Conduit C:\Program Files\Force Download Toolbar C:\ProgramData\Conduit C:\Users\utilisateur\AppData\Local\Conduit C:\Users\utilisateur\AppData\LocalLow\Conduit C:\Windows\Tasks\AVG-Secure-Search-Update_0814tb_rel.job C:\Windows\Tasks\AVG-Secure-Search-Update_0814tb_rmv.job [HKCU\Software\APNDTX] [HKCU\Software\AppDataLow\Software\Conduit] [HKCU\Software\Conduit] [HKLM\Software\Conduit] O43 - CFD: 15/02/2013 - 14:42:19 - [] ----D C:\Users\utilisateur\AppData\Local\TempInsight Software O2 - BHO: (no name) - {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} Clé orpheline O4 - HKLM\..\Run: [ConvertAd] C:\Users\utilisateur\AppData\Local\ConvertAd\ConvertAd.exe (.not file.) [HKCU\Software\IM] [HKCU\Software\ImInstaller] O43 - CFD: 12/05/2014 - 20:23:19 - [0] ----D C:\Program Files\predm O43 - CFD: 25/09/2014 - 19:27:19 - [] ----D C:\ProgramData\McAfee Security Scan O43 - CFD: 28/09/2014 - 01:13:49 - [] ----D C:\ProgramData\Wincert O43 - CFD: 25/09/2014 - 12:39:54 - [0] ----D C:\Users\utilisateur\AppData\Roaming\ap_logs O43 - CFD: 03/11/2011 - 22:13:17 - [0] ----D C:\Users\utilisateur\AppData\Local\PackageAware O51 - MPSK:{d9dc3f8d-33eb-11e3-ba52-6c626df514c1}\AutoRun\command. (...) -- E:\Startme.exe (.not file.) O51 - MPSK:{d9dc40b5-33eb-11e3-ba52-6c626df514c1}\AutoRun\command. (...) -- E:\Startme.exe (.not file.) O61 - LFC: 19/10/2014 - 00:03:39 ---A- . (...) -- C:\Users\utilisateur\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpexd9fz.dll [43008] O61 - LFC: 19/10/2014 - 00:03:39 ---A- . (...) -- C:\Users\utilisateur\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmps6p3l4.dll [43008] O61 - LFC: 19/10/2014 - 00:03:40 ---A- . (...) -- C:\Users\utilisateur\AppData\Local\Temp\_MEI34762\PyWinTypes27.dll [110080] O61 - LFC: 19/10/2014 - 00:03:40 ---A- . (...) -- C:\Users\utilisateur\AppData\Local\Temp\_MEI34762\pythoncom27.dll [364544] O61 - LFC: 19/10/2014 - 00:03:40 ---A- . (.Microsoft Corporation.) -- C:\Users\utilisateur\AppData\Local\Temp\_MEI34762\gdi32.dll [287744] O61 - LFC: 19/10/2014 - 00:03:40 ---A- . (.Microsoft Corporation.) -- C:\Users\utilisateur\AppData\Local\Temp\_MEI34762\kernel32.dll [990208] O61 - LFC: 19/10/2014 - 00:03:40 ---A- . (.Microsoft Corporation.) -- C:\Users\utilisateur\AppData\Local\Temp\_MEI34762\mfc90.dll [1156600] O61 - LFC: 19/10/2014 - 00:03:40 ---A- . (.Microsoft Corporation.) -- C:\Users\utilisateur\AppData\Local\Temp\_MEI34762\mfc90u.dll [1162744] O61 - LFC: 19/10/2014 - 00:03:40 ---A- . (.Microsoft Corporation.) -- C:\Users\utilisateur\AppData\Local\Temp\_MEI34762\mfcm90.dll [59904] O61 - LFC: 19/10/2014 - 00:03:40 ---A- . (.Microsoft Corporation.) -- C:\Users\utilisateur\AppData\Local\Temp\_MEI34762\mfcm90u.dll [59904] O61 - LFC: 19/10/2014 - 00:03:40 ---A- . (.Microsoft Corporation.) -- C:\Users\utilisateur\AppData\Local\Temp\_MEI34762\msvcp100.dll [421200] O61 - LFC: 19/10/2014 - 00:03:40 ---A- . (.Microsoft Corporation.) -- C:\Users\utilisateur\AppData\Local\Temp\_MEI34762\msvcr100.dll [773968] O61 - LFC: 19/10/2014 - 00:03:40 ---A- . (.Microsoft Corporation.) -- C:\Users\utilisateur\AppData\Local\Temp\_MEI34762\psapi.dll [23040] O61 - LFC: 19/10/2014 - 00:03:40 ---A- . (.Microsoft Corporation.) -- C:\Users\utilisateur\AppData\Local\Temp\_MEI34762\shell32.dll [8462848] O61 - LFC: 19/10/2014 - 00:03:40 ---A- . (.Python Software Foundation.) -- C:\Users\utilisateur\AppData\Local\Temp\_MEI34762\python27.dll [2449920] O61 - LFC: 19/10/2014 - 00:03:40 ---A- . (.wxWidgets development team.) -- C:\Users\utilisateur\AppData\Local\Temp\_MEI34762\wxbase294u_net_vc90.dll [154112] O61 - LFC: 19/10/2014 - 00:03:40 ---A- . (.wxWidgets development team.) -- C:\Users\utilisateur\AppData\Local\Temp\_MEI34762\wxbase294u_vc90.dll [1985024] O61 - LFC: 19/10/2014 - 00:03:40 ---A- . (.wxWidgets development team.) -- C:\Users\utilisateur\AppData\Local\Temp\_MEI34762\wxmsw294u_adv_vc90.dll [1234944] O61 - LFC: 19/10/2014 - 00:03:40 ---A- . (.wxWidgets development team.) -- C:\Users\utilisateur\AppData\Local\Temp\_MEI34762\wxmsw294u_core_vc90.dll [4598272] O61 - LFC: 19/10/2014 - 00:03:40 ---A- . (.wxWidgets development team.) -- C:\Users\utilisateur\AppData\Local\Temp\_MEI34762\wxmsw294u_html_vc90.dll [595968] O61 - LFC: 19/10/2014 - 00:03:40 ---A- . (.wxWidgets development team.) -- C:\Users\utilisateur\AppData\Local\Temp\_MEI34762\wxmsw294u_webview_vc90.dll [91648] R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 O5 - control.ini: [HKLM\..\Control Panel] inetcpl.cpl=no O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0 O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0 O67 - Shell Spawning: <.html> [HKCU\..\open\Command] (.Not Key.) [HKLM\Software\Software] [HKCU\Software\MCAFEE]