Publicité
Publicité
Format du document : text/plain
Prévisualisation
Script ZHPFix
M3 - MFPP: Plugins - [bernadette] -- C:\Users\bernadette\AppData\Roaming\Mozilla\Firefox\Profiles\9452pa2w.default\searchplugins\kiwee-toolbar.xml =>PUP.Kiwee
M2 - MFEP: prefs.js [bernadette - 7oe8revc.default\116] [] LyricsContainer v1.116 (..) =>Adware.AddLyrics
M2 - MFEP: prefs.js [bernadette - 7oe8revc.default\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}] [] MySearchDial NewTab v1.116 (..) =>Adware.MyWebSearch
O4 - GS\QuickLaunch [bernadette]: iLivid.lnk . (...) -- C:\Users\bernadette\AppData\Local\iLivid\iLivid.exe (.not file.) =>Adware.Bandoo
O4 - HKLM\..\Run: [startertv_fr_6] Cl� orpheline =>Adware.StarterTV
O42 - Logiciel: SweetIM for Messenger 3.3 - (.SweetIM Technologies Ltd..) [HKLM] -- {1D301950-EA2F-4882-9AA0-49467756842A} =>PUP.SweetIM
[HKCU\Software\AppDataLow\Software\toolbarcleaner]
[HKCU\Software\ToolbarCleaner]
[HKCU\Software\ToolbarCleaneroptions]
O43 - CFD: 12/02/2014 - 07:02:59 - [1,750] ----D C:\Program Files\alot
O43 - CFD: 26/07/2013 - 18:24:03 - [0] ----D C:\Program Files\majtuto4pc_fr_a1 =>PUP.Eorezo
O43 - CFD: 10/06/2013 - 12:52:58 - [0] ----D C:\ProgramData\Datamngr =>PUP.Datamngr
O43 - CFD: 29/06/2013 - 17:57:43 - [0] ----D C:\Users\bernadette\AppData\Local\Software
O61 - LFC: 11/02/2014 - 10:21:11 ---A- . (...) -- C:\Users\bernadette\AppData\Local\Google\Chrome\User Data(11)\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.0.0.0_0\images\YoutubeDownloader.png [2641] =>PUP.SoftwareEngine
O90 - PUC: "059103D1F2AE2884A90A9464776548A2" . (.SweetIM for Messenger 3.3.) -- C:\Windows\Installer\{1D301950-EA2F-4882-9AA0-49467756842A}\ARPPRODUCTICON.exe =>PUP.SweetIM
[MD5.B3B2BFED2245A803AA66FDB9B1D2C87B] [WIS][12/02/2011] (.Secure Digital Services - Widestream6.) -- C:\Windows\Installer\14ef068.msi [3019264] =>Adware.SPointer
[MD5.EAB636FC3898970F2DDC9DA7C4EE2C87] [WIS][29/06/2013] (.Boxore OU - Boxore Client Installer.) -- C:\Windows\Installer\1e17fdd.msi [474112] =>Adware.Boxore
[MD5.35B2ACFD4F746D3032F1ED4DAA2B6F1C] [WIS][30/05/2012] (.Babylon Ltd - BabylonObjectInstaller.) -- C:\Windows\Installer\f433c.msi [29696] =>PUP.Babylon
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{1D301950-EA2F-4882-9AA0-49467756842A}] =>PUP.SweetIM^
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}] =>Hijacker.SmartBar
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5D19F074C042AD34BAB463D4175A062E] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E337925F629CF4C4FB08F3D9674DD839] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1AC67655DD68F8240B2860F2D511EBD8] =>PUP.SweetIM
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{14CEEAFF-96DD-4101-AE37-D5ECDC23C3F6}] =>Adware.CometSystems
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{14CEEAFF-96DD-4101-AE37-D5ECDC23C3F6}] =>Adware.CometSystems
[HKLM\Software\Classes\CLSID\{14CEEAFF-96DD-4101-AE37-D5ECDC23C3F6}] =>Adware.CometSystems
[HKLM\Software\Classes\agcore.Config.AGConfig] =>Adware.BHO
[HKLM\Software\Classes\agcore.Search.Search] =>Adware.BHO
[HKLM\Software\Classes\agcore.Text.JSON] =>Adware.BHO
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:startertv_fr_6 =>Adware.StarterTV^
C:\Users\bernadette\AppData\Roaming\Mozilla\Firefox\Profiles\7oe8revc.default\extensions\116 =>Adware.AddLyrics^
C:\Users\bernadette\AppData\Roaming\Mozilla\Firefox\Profiles\7oe8revc.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8} =>Adware.MyWebSearch^
C:\Program Files\majtuto4pc_fr_a1 =>PUP.Eorezo^
C:\ProgramData\Datamngr =>PUP.Datamngr^
C:\Program Files\alot =>Adware.CometSystems
C:\Users\bernadette\AppData\Local\Software =>Adware.Boxore
C:\Users\bernadette\AppData\LocalLow\alot =>Adware.CometSystems
C:\Windows\Installer\14ef068.msi =>Adware.SPointer^
C:\Windows\Installer\1e17fdd.msi =>Adware.Boxore^
C:\Windows\Installer\f433c.msi =>PUP.Babylon^
SS - | Demand 10/11/2011 167264 | (AVG Security Toolbar Service) . (...) - C:\Program Files\AVG\AVGLS9\Toolbar\ToolbarBroker.exe =>Toolbar.AVGSearch
[HKLM\Software\Classes\CLSID\{BD5843ED-13C4-4EFF-ACE9-56CEE22BC087}] =>Toolbar.AVGSearch
O42 - Logiciel: UseNeXT - (.Aviteo Ltd.) [HKLM] -- UseNeXT_is1
[HKCU\Software\eMule]
O43 - CFD: 12/09/2009 - 07:44:42 - [4,899] ----D C:\Program Files\UseNeXT
O43 - CFD: 27/09/2009 - 11:33:02 - [0] ----D C:\ProgramData\eMule
O43 - CFD: 27/09/2009 - 11:32:55 - [0,029] ----D C:\Users\bernadette\AppData\Roaming\eMule
O43 - CFD: 07/02/2010 - 21:10:41 - [0,015] ----D C:\Users\bernadette\AppData\Roaming\UseNeXT
O43 - CFD: 09/04/2011 - 08:44:11 - [0,705] ----D C:\Users\bernadette\AppData\Local\eMule
[MD5.00000000000000000000000000000000] [APT] [{72B3D3E6-6A22-48DC-AFC0-0532C1AF73B2}] (...) -- E:\Install.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{C667A965-5AD9-49BF-90E2-784E8A04849C}] (...) -- E:\Setup.exe (.not file.) [0]
Spybot - Search & Destroy v2.2.25
[MD5.AF49D1C79EA49A7833017F290EE63B82] - (.Safer-Networking Ltd. - Spybot - Search & Destroy tray access.) -- C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe [5624784] [PID.4704]
[MD5.98EF79CC2B07398AC525F9EA1AE0366F] - (.Safer-Networking Ltd. - Spybot-S&D 2 Scanner Service.) -- C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe [3921880] [PID.2920]
[MD5.14BF6B3AB327D519ED007CDDC56F6900] - (.Safer-Networking Ltd. - Spybot-S&D 2 Background update service.) -- C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe [1042272] [PID.3560]
[MD5.820EBE67AB99F033FDE25B2692157991] - (.Safer-Networking Ltd. - Windows Security Center integration..) -- C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe [171416] [PID.3920]
O4 - GS\Desktop [Public]: Spybot-S&D Start Center.lnk . (.Safer-Networking Ltd. - Start Center.) -- C:\Program Files\Spybot - Search & Destroy 2\SDWelcome.exe
O4 - GS\Program [Public]: Spybot-S&D Start Center.lnk . (.Safer-Networking Ltd. - Start Center.) -- C:\Program Files\Spybot - Search & Destroy 2\SDWelcome.exe
O4 - GS\QuickLaunch [bernadette]: Meteo en France.lnk - Cl� orpheline
O4 - GS\Accessories [bernadette]: Run.lnk - Cl� orpheline
O4 - HKLM\..\Run: [SDTray] . (.Safer-Networking Ltd. - Spybot - Search & Destroy tray access.) -- C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] Cl� orpheline
O4 - HKUS\S-1-5-20\..\Run: [WindowsWelcomeCenter] Cl� orpheline
O20 - Winlogon Notify: SDWinLogon . (...) -- SDWinLogon.dll
O23 - Service: Spybot-S&D 2 Scanner Service (SDScannerService) . (.Safer-Networking Ltd. - Spybot-S&D 2 Scanner Service.) - C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe
O23 - Service: Spybot-S&D 2 Updating Service (SDUpdateService) . (.Safer-Networking Ltd. - Spybot-S&D 2 Background update service.) - C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe
O23 - Service: Spybot-S&D 2 Security Center Service (SDWSCService) . (.Safer-Networking Ltd. - Windows Security Center integration..) - C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\Check for updates (Spybot - Search & Destroy).job [644]
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-530105195-3453216333-1639095337-1000Core.job [1094]
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-530105195-3453216333-1639095337-1000UA.job [1116]
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\Refresh immunization (Spybot - Search & Destroy).job [616]
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\Scan the system (Spybot - Search & Destroy).job [446]
[MD5.0074AFB0570FC1A6AC9771D0133DF44A] [APT] [Check for updates (Spybot - Search & Destroy)] (.Safer-Networking Ltd..) -- C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe [3907304]
[MD5.9EB925EDC8CF1C3D06E50E9348B54A0A] [APT] [FacebookUpdateTaskUserS-1-5-21-530105195-3453216333-1639095337-1000Core] (.Facebook Inc..) -- C:\Users\bernadette\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096]
[MD5.9EB925EDC8CF1C3D06E50E9348B54A0A] [APT] [FacebookUpdateTaskUserS-1-5-21-530105195-3453216333-1639095337-1000UA] (.Facebook Inc..) -- C:\Users\bernadette\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096]
[MD5.DF474E01CFC5F28CA952B0DBD6B132A9] [APT] [Refresh immunization (Spybot - Search & Destroy)] (.Safer-Networking Ltd..) -- C:\Program Files\Spybot - Search & Destroy 2\SDImmunize.exe [3633312]
[MD5.00000000000000000000000000000000] [APT] [SBW_UpdateTask_Time_333232383933393631392d3437415a556c2a3223346c41] (...) -- C:\ProgramData\SpeedBit\sbhe.js" sbu.exe (.not file.) [0]
[MD5.CDEB46FE688F062D3033209B29755203] [APT] [Scan the system (Spybot - Search & Destroy)] (.Safer-Networking Ltd..) -- C:\Program Files\Spybot - Search & Destroy 2\SDScan.exe [3885120]
[MD5.00000000000000000000000000000000] [APT] [{08490496-A4C6-4B62-B257-2C9423084C4D}] (...) -- C:\Users\bernadette\Desktop\Atomix Virtual DJ Pro 5.2\Virtual.DJ.v5.2.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{338275A5-EFC7-4728-B973-24064184F8F5}] (...) -- C:\Users\bernadette\AppData\Local\Temp\Magentic\MAGENT~1\bin\mgsetup.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{35E092AF-1CD8-4243-A9C3-0A769E3D1CBD}] (...) -- C:\Users\bernadette\AppData\Local\Temp\_ir_sf_temp_0\SetupHelper.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{F998C212-BE46-4B8A-AE96-644369503EC4}] (...) -- C:\Users\bernadette\Downloads\grand_theft_auto_vice_city_ultimatevicecity.exe (.not file.) [0]
O42 - Logiciel: Photo Notifier and Animation Creator - (.IncrediMail Ltd..) [HKLM] -- Photo Notifier and Animation Creator
O42 - Logiciel: PhotoMail Maker - (.IncrediMail Ltd..) [HKLM] -- PhotoMail
O42 - Logiciel: Spybot - Search & Destroy - (.Safer-Networking Ltd..) [HKLM] -- {B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1
[HKCU\Software\IncrediMail]
O43 - CFD: 11/02/2014 - 10:51:57 - [260,450] ----D C:\Program Files\Spybot - Search & Destroy 2
O43 - CFD: 23/12/2009 - 22:38:22 - [0] ----D C:\ProgramData\IM
O43 - CFD: 23/12/2009 - 22:36:55 - [0,012] ----D C:\ProgramData\IncrediMail
O43 - CFD: 09/02/2014 - 16:56:24 - [76,812] ----D C:\ProgramData\Spybot - Search & Destroy
O43 - CFD: 09/04/2011 - 08:52:21 - [12,655] ----D C:\Users\bernadette\AppData\Local\IM
O44 - LFC:[MD5.55CEF8FE478E41C8EBCF7B27AF991A3F] - 09/02/2014 - 15:17:18 ---A- . (.Safer Networking Limited - Pas de description.) -- C:\Windows\System32\sdnclean.exe [18968]
O44 - LFC:[MD5.CEAF98D916D2B75B8704BEE7680EE0B5] - 12/02/2014 - 07:05:48 ---A- . (...) -- C:\Windows\System32\agent.log [0]
O45 - LFCP:[MD5.0744457C53C77009629249D596E6158F] - 10/02/2014 - 10:41:03 ---A- - C:\Windows\Prefetch\REVOUNINSTALLER_1-95_FR_39528-491E5D5B.pf
O45 - LFCP:[MD5.A9D14ACAB6965D778649AF35FE3A4E98] - 10/02/2014 - 10:46:35 ---A- - C:\Windows\Prefetch\SSVAGENT.EXE-B762C14C.pf
O45 - LFCP:[MD5.768E0B9D8939FFB5A2347EAD0230039C] - 10/02/2014 - 11:01:20 ---A- - C:\Windows\Prefetch\GOOGLE-CHROME_32_FR_257658.EX-B66F2B04.pf
O45 - LFCP:[MD5.E182920FAD372C0353A6230F7531E33F] - 10/02/2014 - 11:03:45 ---A- - C:\Windows\Prefetch\32.0.1700.107_CHROME_INSTALLE-61BE03DF.pf
O45 - LFCP:[MD5.700A662393808C5BF89CCD7319A000B6] - 10/02/2014 - 11:03:56 ---A- - C:\Windows\Prefetch\SETUP.EXE-0E8D753E.pf
O45 - LFCP:[MD5.73BF3E11A45B291F30291BBE8BB3422F] - 10/02/2014 - 11:05:50 ---A- - C:\Windows\Prefetch\GOOGLEUPDATEONDEMAND.EXE-A2BB6A3D.pf
O45 - LFCP:[MD5.B67E0969FE6FCA313DA82FFCAA4A9613] - 10/02/2014 - 19:05:59 ---A- - C:\Windows\Prefetch\CDR.EXE-3BD2B944.pf
O45 - LFCP:[MD5.43787F483D9674D79D93C7465AC78AB6] - 10/02/2014 - 19:40:36 ---A- - C:\Windows\Prefetch\WELCOME.EXE-D5564EBB.pf
O45 - LFCP:[MD5.D28AFBE26E471FDBAF34D97AE67ED6A6] - 11/02/2014 - 09:59:34 ---A- - C:\Windows\Prefetch\ADWARE-REMOVAL-TOOL-V3.7.EXE-20BC13C8.pf
O45 - LFCP:[MD5.B1C173D8985F87716D5F31D76BF9FE79] - 11/02/2014 - 10:08:59 ---A- - C:\Windows\Prefetch\WLRMDR.EXE-C2B47318.pf
O45 - LFCP:[MD5.4D599DF023E96C9CCE2FB503BB8CCDB1] - 11/02/2014 - 10:12:05 ---A- - C:\Windows\Prefetch\ARTP2.EXE-E0AE0CA1.pf
O45 - LFCP:[MD5.0040D7F9CD2FB3FF7565FB7EA4E9E64D] - 11/02/2014 - 10:12:07 ---A- - C:\Windows\Prefetch\HIDCHK.EXE-353BD79D.pf
O45 - LFCP:[MD5.8F6B55554209FB060ED10508D6CFFDFB] - 11/02/2014 - 10:13:02 ---A- - C:\Windows\Prefetch\ARTP3.EXE-F403C726.pf
O45 - LFCP:[MD5.125594642DB4378A0B92A5E1E4A26030] - 11/02/2014 - 10:46:32 ---A- - C:\Windows\Prefetch\SETUP.EXE-A829C80F.pf
O45 - LFCP:[MD5.2586F179A875C65EC0F08EEED711D37A] - 11/02/2014 - 10:50:17 ---A- - C:\Windows\Prefetch\SDUPDATE.EXE-6088ACA6.pf
O45 - LFCP:[MD5.534051A74E873106CE6DB7183103D4D2] - 11/02/2014 - 10:51:51 ---A- - C:\Windows\Prefetch\SDDISABLEPROXY.EXE-5CB986AD.pf
O45 - LFCP:[MD5.63A0ABF29782C76FCBFE754EA98C3558] - 11/02/2014 - 10:51:58 ---A- - C:\Windows\Prefetch\SPYBOTSD2-TRANSLATION-FRX.EXE-38E33A0B.pf
O45 - LFCP:[MD5.379CC67C9D68CA7F3A7867C674EFD1D5] - 11/02/2014 - 10:53:30 ---A- - C:\Windows\Prefetch\SDSCAN.EXE-BF26E2D8.pf
O45 - LFCP:[MD5.324956EABDF1D4628115ACFB631BC488] - 11/02/2014 - 11:49:51 ---A- - C:\Windows\Prefetch\SDCLEANER.EXE-5B0A0089.pf
O45 - LFCP:[MD5.81D3F4F820F5CB012C48B2451C1B7861] - 11/02/2014 - 11:54:03 ---A- - C:\Windows\Prefetch\SDWELCOME.EXE-801D675B.pf
O45 - LFCP:[MD5.CB6B22B746557F9D7A0335ABE3AB5C6E] - 11/02/2014 - 16:03:26 ---A- - C:\Windows\Prefetch\RADIOSURE.EXE-AECB41AD.pf
O45 - LFCP:[MD5.6592256BC7C1A81EF2B59FA25F98C36E] - 12/02/2014 - 07:07:02 ---A- - C:\Windows\Prefetch\DGDERSVC.EXE-D4DF3B32.pf
O45 - LFCP:[MD5.FB8AB4BDAD01B472813F6C50F094D1D7] - 12/02/2014 - 07:07:02 ---A- - C:\Windows\Prefetch\NTOSBOOT-B00DFAAD.pf
O45 - LFCP:[MD5.B311796EBB2EB8CE27405D489B58B62D] - 12/02/2014 - 07:10:08 ---A- - C:\Windows\Prefetch\SSUPDATE.EXE-DD5D0649.pf
O45 - LFCP:[MD5.5278C22D3B7B1F811B2F0569EA27DB8D] - 12/02/2014 - 07:18:52 ---A- - C:\Windows\Prefetch\AM_DELTA_PATCH_1.165.3681.0.E-936FA06E.pf
O45 - LFCP:[MD5.6C4196ECDD05754989F4766A70E4EB79] - 12/02/2014 - 07:35:37 ---A- - C:\Windows\Prefetch\SETUP.EXE-85C5E0EA.pf
O45 - LFCP:[MD5.70FDD1F6B7098D615E2CF4FA1CC13B84] - 12/02/2014 - 07:57:04 ---A- - C:\Windows\Prefetch\FIREFOX SETUP STUB 27.0.EXE-675F61B6.pf
O45 - LFCP:[MD5.B038F65DFB8DBA2F4614FE692F4696DB] - 12/02/2014 - 07:57:50 ---A- - C:\Windows\Prefetch\SETUP-STUB.EXE-66EDAEB2.pf
O45 - LFCP:[MD5.F2BBC568CE14958D1F45676CC6384968] - 12/02/2014 - 07:58:40 ---A- - C:\Windows\Prefetch\DOWNLOAD.EXE-ABD4BBA4.pf
O45 - LFCP:[MD5.047E5C492A6A01671FF4E595D9C472CB] - 12/02/2014 - 07:59:13 ---A- - C:\Windows\Prefetch\SETUP.EXE-D4211955.pf
O45 - LFCP:[MD5.2895B6E136E5179CF9AF16BB0021E5B0] - 12/02/2014 - 07:59:46 ---A- - C:\Windows\Prefetch\NS4A2C.TMP-7C0C3F5F.pf
O45 - LFCP:[MD5.3E01ED83375D0AA843EA35231F79DA40] - 12/02/2014 - 07:59:47 ---A- - C:\Windows\Prefetch\MAINTENANCESERVICE_INSTALLER.-F43399FA.pf
O45 - LFCP:[MD5.F190383A23F137A8A2F12B74D262A3DB] - 12/02/2014 - 07:59:47 ---A- - C:\Windows\Prefetch\NS4839.TMP-8BF5A6C5.pf
O45 - LFCP:[MD5.E49F6DCE1A910E719E8918CBE7A9A232] - 12/02/2014 - 08:06:01 ---A- - C:\Windows\Prefetch\FACEBOOKUPDATE.EXE-F00DD0AF.pf
O45 - LFCP:[MD5.FFFD7D40D7B2D6D86A3B70DDC04871C9] - 12/02/2014 - 08:34:50 ---A- - C:\Windows\Prefetch\AgGlUAD_P_S-1-5-21-530105195-3453216333-1639095337-1000.db
O45 - LFCP:[MD5.6FAD8A3E7CB6741A3BB5995A2A1DC6A8] - 12/02/2014 - 08:34:50 ---A- - C:\Windows\Prefetch\AgGlUAD_S-1-5-21-530105195-3453216333-1639095337-1000.db
O45 - LFCP:[MD5.096694FE750AF1760E1383896D630128] - 12/02/2014 - 09:41:22 ---A- - C:\Windows\Prefetch\FLASHUTIL32_12_0_0_44_ACTIVEX-EA44AA25.pf
O47 - AAKE:Key Export SP - "C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe" [Enabled] .(.Safer-Networking Ltd..) -- C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe" [Enabled] .(.Safer-Networking Ltd..) -- C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe" [Enabled] .(.Safer-Networking Ltd..) -- C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe" [Enabled] .(.Safer-Networking Ltd..) -- C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe
O51 - MPSK:{0a38d12b-ab37-11de-8479-001d72e6ff59}\AutoRun\command. (...) -- F:\setup_vmc_lite.exe (.not file.)
O51 - MPSK:{0a38d12c-ab37-11de-8479-001d72e6ff59}\AutoRun\command. (...) -- F:\setup_vmc_lite.exe (.not file.)
O51 - MPSK:{127d9ba9-09df-11de-a67e-001d72e6ff59}\AutoRun\command. (...) -- H:\setup_vmc_lite.exe (.not file.)
O51 - MPSK:{127d9baa-09df-11de-a67e-001d72e6ff59}\AutoRun\command. (...) -- H:\setup_vmc_lite.exe (.not file.)
O51 - MPSK:{1b6f4dd1-0d63-11de-a18a-001d72e6ff59}\AutoRun\command. (...) -- F:\setup_vmc_lite.exe (.not file.)
O51 - MPSK:{bbdef6e2-0c93-11e3-9af4-001d72e6ff59}\AutoRun\command. (...) -- H:\LGAutoRun.exe (.not file.)
O51 - MPSK:{fd3c665d-2f3a-11de-92e8-cc58d9063759}\AutoRun\command. (...) -- F:\setup_vmc_lite.exe (.not file.)
O61 - LFC: 09/02/2014 - 10:21:32 ---A- . (.Google Inc..) -- C:\Users\bernadette\AppData\Local\Temp\GoogleUpdate.exe1d5c04 [116648]
O61 - LFC: 09/02/2014 - 10:21:32 ---A- . (.Google Inc..) -- C:\Users\bernadette\AppData\Local\Temp\goopdate.dll1d5c23 [847752]
O61 - LFC: 10/02/2014 - 10:21:32 ---A- . (...) -- C:\Users\bernadette\AppData\Local\Temp\jinstall.cfg [1191]
O61 - LFC: 11/02/2014 - 10:21:32 ---A- . (...) -- C:\Users\bernadette\AppData\Local\Temp\wmplog00.sqm [1700]
O61 - LFC: 11/02/2014 - 10:21:32 ---A- . (...) -- C:\Users\bernadette\AppData\Local\Temp\wmplog01.sqm [1964]
O61 - LFC: 12/02/2014 - 10:21:31 ---A- . (...) -- C:\Users\bernadette\AppData\Local\Temp\bernadette.bmp [31832]
O61 - LFC: 12/02/2014 - 10:21:31 ---A- . (...) -- C:\Users\bernadette\AppData\Local\Temp\eDatasecurity\FileList.txt [72]
O61 - LFC: 12/02/2014 - 10:21:32 ---A- . (...) -- C:\Users\bernadette\AppData\Local\Temp\__cclog.txt [104]
O87 - FAEL: "{2DDD4459-4509-406C-8286-082BDFD0C43B}" | In - Public - P6 - FALSE | .(.Pas de propri�taire - IncrediMail Installer.) -- C:\Users\bernadette\AppData\Local\IM\Runtime\IncrediMail_Install.exe
O87 - FAEL: "{E2345DCF-2C88-4197-BF05-7E5713728B9A}" | In - Public - P17 - FALSE | .(.Pas de propri�taire - IncrediMail Installer.) -- C:\Users\bernadette\AppData\Local\IM\Runtime\IncrediMail_Install.exe
SR - | Auto 15/10/2013 3921880 | (SDScannerService) . (.Safer-Networking Ltd..) - C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe
SR - | Auto 20/09/2013 1042272 | (SDUpdateService) . (.Safer-Networking Ltd..) - C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe
SR - | Auto 13/09/2013 171416 | (SDWSCService) . (.Safer-Networking Ltd..) - C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe
[MD5.00000000000000000000000000000000] [APT] [{72B3D3E6-6A22-48DC-AFC0-0532C1AF73B2}] (...) -- E:\Install.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{C667A965-5AD9-49BF-90E2-784E8A04849C}] (...) -- E:\Setup.exe (.not file.) [0]
FirewallRaz
PROXYFix
EmptyTemp
EmptyFlash
EmptyClsid
M3 - MFPP: Plugins - [bernadette] -- C:\Users\bernadette\AppData\Roaming\Mozilla\Firefox\Profiles\9452pa2w.default\searchplugins\kiwee-toolbar.xml =>PUP.Kiwee
M2 - MFEP: prefs.js [bernadette - 7oe8revc.default\116] [] LyricsContainer v1.116 (..) =>Adware.AddLyrics
M2 - MFEP: prefs.js [bernadette - 7oe8revc.default\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}] [] MySearchDial NewTab v1.116 (..) =>Adware.MyWebSearch
O4 - GS\QuickLaunch [bernadette]: iLivid.lnk . (...) -- C:\Users\bernadette\AppData\Local\iLivid\iLivid.exe (.not file.) =>Adware.Bandoo
O4 - HKLM\..\Run: [startertv_fr_6] Cl� orpheline =>Adware.StarterTV
O42 - Logiciel: SweetIM for Messenger 3.3 - (.SweetIM Technologies Ltd..) [HKLM] -- {1D301950-EA2F-4882-9AA0-49467756842A} =>PUP.SweetIM
[HKCU\Software\AppDataLow\Software\toolbarcleaner]
[HKCU\Software\ToolbarCleaner]
[HKCU\Software\ToolbarCleaneroptions]
O43 - CFD: 12/02/2014 - 07:02:59 - [1,750] ----D C:\Program Files\alot
O43 - CFD: 26/07/2013 - 18:24:03 - [0] ----D C:\Program Files\majtuto4pc_fr_a1 =>PUP.Eorezo
O43 - CFD: 10/06/2013 - 12:52:58 - [0] ----D C:\ProgramData\Datamngr =>PUP.Datamngr
O43 - CFD: 29/06/2013 - 17:57:43 - [0] ----D C:\Users\bernadette\AppData\Local\Software
O61 - LFC: 11/02/2014 - 10:21:11 ---A- . (...) -- C:\Users\bernadette\AppData\Local\Google\Chrome\User Data(11)\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.0.0.0_0\images\YoutubeDownloader.png [2641] =>PUP.SoftwareEngine
O90 - PUC: "059103D1F2AE2884A90A9464776548A2" . (.SweetIM for Messenger 3.3.) -- C:\Windows\Installer\{1D301950-EA2F-4882-9AA0-49467756842A}\ARPPRODUCTICON.exe =>PUP.SweetIM
[MD5.B3B2BFED2245A803AA66FDB9B1D2C87B] [WIS][12/02/2011] (.Secure Digital Services - Widestream6.) -- C:\Windows\Installer\14ef068.msi [3019264] =>Adware.SPointer
[MD5.EAB636FC3898970F2DDC9DA7C4EE2C87] [WIS][29/06/2013] (.Boxore OU - Boxore Client Installer.) -- C:\Windows\Installer\1e17fdd.msi [474112] =>Adware.Boxore
[MD5.35B2ACFD4F746D3032F1ED4DAA2B6F1C] [WIS][30/05/2012] (.Babylon Ltd - BabylonObjectInstaller.) -- C:\Windows\Installer\f433c.msi [29696] =>PUP.Babylon
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{1D301950-EA2F-4882-9AA0-49467756842A}] =>PUP.SweetIM^
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}] =>Hijacker.SmartBar
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5D19F074C042AD34BAB463D4175A062E] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E337925F629CF4C4FB08F3D9674DD839] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1AC67655DD68F8240B2860F2D511EBD8] =>PUP.SweetIM
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{14CEEAFF-96DD-4101-AE37-D5ECDC23C3F6}] =>Adware.CometSystems
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{14CEEAFF-96DD-4101-AE37-D5ECDC23C3F6}] =>Adware.CometSystems
[HKLM\Software\Classes\CLSID\{14CEEAFF-96DD-4101-AE37-D5ECDC23C3F6}] =>Adware.CometSystems
[HKLM\Software\Classes\agcore.Config.AGConfig] =>Adware.BHO
[HKLM\Software\Classes\agcore.Search.Search] =>Adware.BHO
[HKLM\Software\Classes\agcore.Text.JSON] =>Adware.BHO
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:startertv_fr_6 =>Adware.StarterTV^
C:\Users\bernadette\AppData\Roaming\Mozilla\Firefox\Profiles\7oe8revc.default\extensions\116 =>Adware.AddLyrics^
C:\Users\bernadette\AppData\Roaming\Mozilla\Firefox\Profiles\7oe8revc.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8} =>Adware.MyWebSearch^
C:\Program Files\majtuto4pc_fr_a1 =>PUP.Eorezo^
C:\ProgramData\Datamngr =>PUP.Datamngr^
C:\Program Files\alot =>Adware.CometSystems
C:\Users\bernadette\AppData\Local\Software =>Adware.Boxore
C:\Users\bernadette\AppData\LocalLow\alot =>Adware.CometSystems
C:\Windows\Installer\14ef068.msi =>Adware.SPointer^
C:\Windows\Installer\1e17fdd.msi =>Adware.Boxore^
C:\Windows\Installer\f433c.msi =>PUP.Babylon^
SS - | Demand 10/11/2011 167264 | (AVG Security Toolbar Service) . (...) - C:\Program Files\AVG\AVGLS9\Toolbar\ToolbarBroker.exe =>Toolbar.AVGSearch
[HKLM\Software\Classes\CLSID\{BD5843ED-13C4-4EFF-ACE9-56CEE22BC087}] =>Toolbar.AVGSearch
O42 - Logiciel: UseNeXT - (.Aviteo Ltd.) [HKLM] -- UseNeXT_is1
[HKCU\Software\eMule]
O43 - CFD: 12/09/2009 - 07:44:42 - [4,899] ----D C:\Program Files\UseNeXT
O43 - CFD: 27/09/2009 - 11:33:02 - [0] ----D C:\ProgramData\eMule
O43 - CFD: 27/09/2009 - 11:32:55 - [0,029] ----D C:\Users\bernadette\AppData\Roaming\eMule
O43 - CFD: 07/02/2010 - 21:10:41 - [0,015] ----D C:\Users\bernadette\AppData\Roaming\UseNeXT
O43 - CFD: 09/04/2011 - 08:44:11 - [0,705] ----D C:\Users\bernadette\AppData\Local\eMule
[MD5.00000000000000000000000000000000] [APT] [{72B3D3E6-6A22-48DC-AFC0-0532C1AF73B2}] (...) -- E:\Install.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{C667A965-5AD9-49BF-90E2-784E8A04849C}] (...) -- E:\Setup.exe (.not file.) [0]
Spybot - Search & Destroy v2.2.25
[MD5.AF49D1C79EA49A7833017F290EE63B82] - (.Safer-Networking Ltd. - Spybot - Search & Destroy tray access.) -- C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe [5624784] [PID.4704]
[MD5.98EF79CC2B07398AC525F9EA1AE0366F] - (.Safer-Networking Ltd. - Spybot-S&D 2 Scanner Service.) -- C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe [3921880] [PID.2920]
[MD5.14BF6B3AB327D519ED007CDDC56F6900] - (.Safer-Networking Ltd. - Spybot-S&D 2 Background update service.) -- C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe [1042272] [PID.3560]
[MD5.820EBE67AB99F033FDE25B2692157991] - (.Safer-Networking Ltd. - Windows Security Center integration..) -- C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe [171416] [PID.3920]
O4 - GS\Desktop [Public]: Spybot-S&D Start Center.lnk . (.Safer-Networking Ltd. - Start Center.) -- C:\Program Files\Spybot - Search & Destroy 2\SDWelcome.exe
O4 - GS\Program [Public]: Spybot-S&D Start Center.lnk . (.Safer-Networking Ltd. - Start Center.) -- C:\Program Files\Spybot - Search & Destroy 2\SDWelcome.exe
O4 - GS\QuickLaunch [bernadette]: Meteo en France.lnk - Cl� orpheline
O4 - GS\Accessories [bernadette]: Run.lnk - Cl� orpheline
O4 - HKLM\..\Run: [SDTray] . (.Safer-Networking Ltd. - Spybot - Search & Destroy tray access.) -- C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] Cl� orpheline
O4 - HKUS\S-1-5-20\..\Run: [WindowsWelcomeCenter] Cl� orpheline
O20 - Winlogon Notify: SDWinLogon . (...) -- SDWinLogon.dll
O23 - Service: Spybot-S&D 2 Scanner Service (SDScannerService) . (.Safer-Networking Ltd. - Spybot-S&D 2 Scanner Service.) - C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe
O23 - Service: Spybot-S&D 2 Updating Service (SDUpdateService) . (.Safer-Networking Ltd. - Spybot-S&D 2 Background update service.) - C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe
O23 - Service: Spybot-S&D 2 Security Center Service (SDWSCService) . (.Safer-Networking Ltd. - Windows Security Center integration..) - C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\Check for updates (Spybot - Search & Destroy).job [644]
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-530105195-3453216333-1639095337-1000Core.job [1094]
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-530105195-3453216333-1639095337-1000UA.job [1116]
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\Refresh immunization (Spybot - Search & Destroy).job [616]
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\Scan the system (Spybot - Search & Destroy).job [446]
[MD5.0074AFB0570FC1A6AC9771D0133DF44A] [APT] [Check for updates (Spybot - Search & Destroy)] (.Safer-Networking Ltd..) -- C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe [3907304]
[MD5.9EB925EDC8CF1C3D06E50E9348B54A0A] [APT] [FacebookUpdateTaskUserS-1-5-21-530105195-3453216333-1639095337-1000Core] (.Facebook Inc..) -- C:\Users\bernadette\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096]
[MD5.9EB925EDC8CF1C3D06E50E9348B54A0A] [APT] [FacebookUpdateTaskUserS-1-5-21-530105195-3453216333-1639095337-1000UA] (.Facebook Inc..) -- C:\Users\bernadette\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096]
[MD5.DF474E01CFC5F28CA952B0DBD6B132A9] [APT] [Refresh immunization (Spybot - Search & Destroy)] (.Safer-Networking Ltd..) -- C:\Program Files\Spybot - Search & Destroy 2\SDImmunize.exe [3633312]
[MD5.00000000000000000000000000000000] [APT] [SBW_UpdateTask_Time_333232383933393631392d3437415a556c2a3223346c41] (...) -- C:\ProgramData\SpeedBit\sbhe.js" sbu.exe (.not file.) [0]
[MD5.CDEB46FE688F062D3033209B29755203] [APT] [Scan the system (Spybot - Search & Destroy)] (.Safer-Networking Ltd..) -- C:\Program Files\Spybot - Search & Destroy 2\SDScan.exe [3885120]
[MD5.00000000000000000000000000000000] [APT] [{08490496-A4C6-4B62-B257-2C9423084C4D}] (...) -- C:\Users\bernadette\Desktop\Atomix Virtual DJ Pro 5.2\Virtual.DJ.v5.2.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{338275A5-EFC7-4728-B973-24064184F8F5}] (...) -- C:\Users\bernadette\AppData\Local\Temp\Magentic\MAGENT~1\bin\mgsetup.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{35E092AF-1CD8-4243-A9C3-0A769E3D1CBD}] (...) -- C:\Users\bernadette\AppData\Local\Temp\_ir_sf_temp_0\SetupHelper.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{F998C212-BE46-4B8A-AE96-644369503EC4}] (...) -- C:\Users\bernadette\Downloads\grand_theft_auto_vice_city_ultimatevicecity.exe (.not file.) [0]
O42 - Logiciel: Photo Notifier and Animation Creator - (.IncrediMail Ltd..) [HKLM] -- Photo Notifier and Animation Creator
O42 - Logiciel: PhotoMail Maker - (.IncrediMail Ltd..) [HKLM] -- PhotoMail
O42 - Logiciel: Spybot - Search & Destroy - (.Safer-Networking Ltd..) [HKLM] -- {B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1
[HKCU\Software\IncrediMail]
O43 - CFD: 11/02/2014 - 10:51:57 - [260,450] ----D C:\Program Files\Spybot - Search & Destroy 2
O43 - CFD: 23/12/2009 - 22:38:22 - [0] ----D C:\ProgramData\IM
O43 - CFD: 23/12/2009 - 22:36:55 - [0,012] ----D C:\ProgramData\IncrediMail
O43 - CFD: 09/02/2014 - 16:56:24 - [76,812] ----D C:\ProgramData\Spybot - Search & Destroy
O43 - CFD: 09/04/2011 - 08:52:21 - [12,655] ----D C:\Users\bernadette\AppData\Local\IM
O44 - LFC:[MD5.55CEF8FE478E41C8EBCF7B27AF991A3F] - 09/02/2014 - 15:17:18 ---A- . (.Safer Networking Limited - Pas de description.) -- C:\Windows\System32\sdnclean.exe [18968]
O44 - LFC:[MD5.CEAF98D916D2B75B8704BEE7680EE0B5] - 12/02/2014 - 07:05:48 ---A- . (...) -- C:\Windows\System32\agent.log [0]
O45 - LFCP:[MD5.0744457C53C77009629249D596E6158F] - 10/02/2014 - 10:41:03 ---A- - C:\Windows\Prefetch\REVOUNINSTALLER_1-95_FR_39528-491E5D5B.pf
O45 - LFCP:[MD5.A9D14ACAB6965D778649AF35FE3A4E98] - 10/02/2014 - 10:46:35 ---A- - C:\Windows\Prefetch\SSVAGENT.EXE-B762C14C.pf
O45 - LFCP:[MD5.768E0B9D8939FFB5A2347EAD0230039C] - 10/02/2014 - 11:01:20 ---A- - C:\Windows\Prefetch\GOOGLE-CHROME_32_FR_257658.EX-B66F2B04.pf
O45 - LFCP:[MD5.E182920FAD372C0353A6230F7531E33F] - 10/02/2014 - 11:03:45 ---A- - C:\Windows\Prefetch\32.0.1700.107_CHROME_INSTALLE-61BE03DF.pf
O45 - LFCP:[MD5.700A662393808C5BF89CCD7319A000B6] - 10/02/2014 - 11:03:56 ---A- - C:\Windows\Prefetch\SETUP.EXE-0E8D753E.pf
O45 - LFCP:[MD5.73BF3E11A45B291F30291BBE8BB3422F] - 10/02/2014 - 11:05:50 ---A- - C:\Windows\Prefetch\GOOGLEUPDATEONDEMAND.EXE-A2BB6A3D.pf
O45 - LFCP:[MD5.B67E0969FE6FCA313DA82FFCAA4A9613] - 10/02/2014 - 19:05:59 ---A- - C:\Windows\Prefetch\CDR.EXE-3BD2B944.pf
O45 - LFCP:[MD5.43787F483D9674D79D93C7465AC78AB6] - 10/02/2014 - 19:40:36 ---A- - C:\Windows\Prefetch\WELCOME.EXE-D5564EBB.pf
O45 - LFCP:[MD5.D28AFBE26E471FDBAF34D97AE67ED6A6] - 11/02/2014 - 09:59:34 ---A- - C:\Windows\Prefetch\ADWARE-REMOVAL-TOOL-V3.7.EXE-20BC13C8.pf
O45 - LFCP:[MD5.B1C173D8985F87716D5F31D76BF9FE79] - 11/02/2014 - 10:08:59 ---A- - C:\Windows\Prefetch\WLRMDR.EXE-C2B47318.pf
O45 - LFCP:[MD5.4D599DF023E96C9CCE2FB503BB8CCDB1] - 11/02/2014 - 10:12:05 ---A- - C:\Windows\Prefetch\ARTP2.EXE-E0AE0CA1.pf
O45 - LFCP:[MD5.0040D7F9CD2FB3FF7565FB7EA4E9E64D] - 11/02/2014 - 10:12:07 ---A- - C:\Windows\Prefetch\HIDCHK.EXE-353BD79D.pf
O45 - LFCP:[MD5.8F6B55554209FB060ED10508D6CFFDFB] - 11/02/2014 - 10:13:02 ---A- - C:\Windows\Prefetch\ARTP3.EXE-F403C726.pf
O45 - LFCP:[MD5.125594642DB4378A0B92A5E1E4A26030] - 11/02/2014 - 10:46:32 ---A- - C:\Windows\Prefetch\SETUP.EXE-A829C80F.pf
O45 - LFCP:[MD5.2586F179A875C65EC0F08EEED711D37A] - 11/02/2014 - 10:50:17 ---A- - C:\Windows\Prefetch\SDUPDATE.EXE-6088ACA6.pf
O45 - LFCP:[MD5.534051A74E873106CE6DB7183103D4D2] - 11/02/2014 - 10:51:51 ---A- - C:\Windows\Prefetch\SDDISABLEPROXY.EXE-5CB986AD.pf
O45 - LFCP:[MD5.63A0ABF29782C76FCBFE754EA98C3558] - 11/02/2014 - 10:51:58 ---A- - C:\Windows\Prefetch\SPYBOTSD2-TRANSLATION-FRX.EXE-38E33A0B.pf
O45 - LFCP:[MD5.379CC67C9D68CA7F3A7867C674EFD1D5] - 11/02/2014 - 10:53:30 ---A- - C:\Windows\Prefetch\SDSCAN.EXE-BF26E2D8.pf
O45 - LFCP:[MD5.324956EABDF1D4628115ACFB631BC488] - 11/02/2014 - 11:49:51 ---A- - C:\Windows\Prefetch\SDCLEANER.EXE-5B0A0089.pf
O45 - LFCP:[MD5.81D3F4F820F5CB012C48B2451C1B7861] - 11/02/2014 - 11:54:03 ---A- - C:\Windows\Prefetch\SDWELCOME.EXE-801D675B.pf
O45 - LFCP:[MD5.CB6B22B746557F9D7A0335ABE3AB5C6E] - 11/02/2014 - 16:03:26 ---A- - C:\Windows\Prefetch\RADIOSURE.EXE-AECB41AD.pf
O45 - LFCP:[MD5.6592256BC7C1A81EF2B59FA25F98C36E] - 12/02/2014 - 07:07:02 ---A- - C:\Windows\Prefetch\DGDERSVC.EXE-D4DF3B32.pf
O45 - LFCP:[MD5.FB8AB4BDAD01B472813F6C50F094D1D7] - 12/02/2014 - 07:07:02 ---A- - C:\Windows\Prefetch\NTOSBOOT-B00DFAAD.pf
O45 - LFCP:[MD5.B311796EBB2EB8CE27405D489B58B62D] - 12/02/2014 - 07:10:08 ---A- - C:\Windows\Prefetch\SSUPDATE.EXE-DD5D0649.pf
O45 - LFCP:[MD5.5278C22D3B7B1F811B2F0569EA27DB8D] - 12/02/2014 - 07:18:52 ---A- - C:\Windows\Prefetch\AM_DELTA_PATCH_1.165.3681.0.E-936FA06E.pf
O45 - LFCP:[MD5.6C4196ECDD05754989F4766A70E4EB79] - 12/02/2014 - 07:35:37 ---A- - C:\Windows\Prefetch\SETUP.EXE-85C5E0EA.pf
O45 - LFCP:[MD5.70FDD1F6B7098D615E2CF4FA1CC13B84] - 12/02/2014 - 07:57:04 ---A- - C:\Windows\Prefetch\FIREFOX SETUP STUB 27.0.EXE-675F61B6.pf
O45 - LFCP:[MD5.B038F65DFB8DBA2F4614FE692F4696DB] - 12/02/2014 - 07:57:50 ---A- - C:\Windows\Prefetch\SETUP-STUB.EXE-66EDAEB2.pf
O45 - LFCP:[MD5.F2BBC568CE14958D1F45676CC6384968] - 12/02/2014 - 07:58:40 ---A- - C:\Windows\Prefetch\DOWNLOAD.EXE-ABD4BBA4.pf
O45 - LFCP:[MD5.047E5C492A6A01671FF4E595D9C472CB] - 12/02/2014 - 07:59:13 ---A- - C:\Windows\Prefetch\SETUP.EXE-D4211955.pf
O45 - LFCP:[MD5.2895B6E136E5179CF9AF16BB0021E5B0] - 12/02/2014 - 07:59:46 ---A- - C:\Windows\Prefetch\NS4A2C.TMP-7C0C3F5F.pf
O45 - LFCP:[MD5.3E01ED83375D0AA843EA35231F79DA40] - 12/02/2014 - 07:59:47 ---A- - C:\Windows\Prefetch\MAINTENANCESERVICE_INSTALLER.-F43399FA.pf
O45 - LFCP:[MD5.F190383A23F137A8A2F12B74D262A3DB] - 12/02/2014 - 07:59:47 ---A- - C:\Windows\Prefetch\NS4839.TMP-8BF5A6C5.pf
O45 - LFCP:[MD5.E49F6DCE1A910E719E8918CBE7A9A232] - 12/02/2014 - 08:06:01 ---A- - C:\Windows\Prefetch\FACEBOOKUPDATE.EXE-F00DD0AF.pf
O45 - LFCP:[MD5.FFFD7D40D7B2D6D86A3B70DDC04871C9] - 12/02/2014 - 08:34:50 ---A- - C:\Windows\Prefetch\AgGlUAD_P_S-1-5-21-530105195-3453216333-1639095337-1000.db
O45 - LFCP:[MD5.6FAD8A3E7CB6741A3BB5995A2A1DC6A8] - 12/02/2014 - 08:34:50 ---A- - C:\Windows\Prefetch\AgGlUAD_S-1-5-21-530105195-3453216333-1639095337-1000.db
O45 - LFCP:[MD5.096694FE750AF1760E1383896D630128] - 12/02/2014 - 09:41:22 ---A- - C:\Windows\Prefetch\FLASHUTIL32_12_0_0_44_ACTIVEX-EA44AA25.pf
O47 - AAKE:Key Export SP - "C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe" [Enabled] .(.Safer-Networking Ltd..) -- C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe" [Enabled] .(.Safer-Networking Ltd..) -- C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe" [Enabled] .(.Safer-Networking Ltd..) -- C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe" [Enabled] .(.Safer-Networking Ltd..) -- C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe
O51 - MPSK:{0a38d12b-ab37-11de-8479-001d72e6ff59}\AutoRun\command. (...) -- F:\setup_vmc_lite.exe (.not file.)
O51 - MPSK:{0a38d12c-ab37-11de-8479-001d72e6ff59}\AutoRun\command. (...) -- F:\setup_vmc_lite.exe (.not file.)
O51 - MPSK:{127d9ba9-09df-11de-a67e-001d72e6ff59}\AutoRun\command. (...) -- H:\setup_vmc_lite.exe (.not file.)
O51 - MPSK:{127d9baa-09df-11de-a67e-001d72e6ff59}\AutoRun\command. (...) -- H:\setup_vmc_lite.exe (.not file.)
O51 - MPSK:{1b6f4dd1-0d63-11de-a18a-001d72e6ff59}\AutoRun\command. (...) -- F:\setup_vmc_lite.exe (.not file.)
O51 - MPSK:{bbdef6e2-0c93-11e3-9af4-001d72e6ff59}\AutoRun\command. (...) -- H:\LGAutoRun.exe (.not file.)
O51 - MPSK:{fd3c665d-2f3a-11de-92e8-cc58d9063759}\AutoRun\command. (...) -- F:\setup_vmc_lite.exe (.not file.)
O61 - LFC: 09/02/2014 - 10:21:32 ---A- . (.Google Inc..) -- C:\Users\bernadette\AppData\Local\Temp\GoogleUpdate.exe1d5c04 [116648]
O61 - LFC: 09/02/2014 - 10:21:32 ---A- . (.Google Inc..) -- C:\Users\bernadette\AppData\Local\Temp\goopdate.dll1d5c23 [847752]
O61 - LFC: 10/02/2014 - 10:21:32 ---A- . (...) -- C:\Users\bernadette\AppData\Local\Temp\jinstall.cfg [1191]
O61 - LFC: 11/02/2014 - 10:21:32 ---A- . (...) -- C:\Users\bernadette\AppData\Local\Temp\wmplog00.sqm [1700]
O61 - LFC: 11/02/2014 - 10:21:32 ---A- . (...) -- C:\Users\bernadette\AppData\Local\Temp\wmplog01.sqm [1964]
O61 - LFC: 12/02/2014 - 10:21:31 ---A- . (...) -- C:\Users\bernadette\AppData\Local\Temp\bernadette.bmp [31832]
O61 - LFC: 12/02/2014 - 10:21:31 ---A- . (...) -- C:\Users\bernadette\AppData\Local\Temp\eDatasecurity\FileList.txt [72]
O61 - LFC: 12/02/2014 - 10:21:32 ---A- . (...) -- C:\Users\bernadette\AppData\Local\Temp\__cclog.txt [104]
O87 - FAEL: "{2DDD4459-4509-406C-8286-082BDFD0C43B}" | In - Public - P6 - FALSE | .(.Pas de propri�taire - IncrediMail Installer.) -- C:\Users\bernadette\AppData\Local\IM\Runtime\IncrediMail_Install.exe
O87 - FAEL: "{E2345DCF-2C88-4197-BF05-7E5713728B9A}" | In - Public - P17 - FALSE | .(.Pas de propri�taire - IncrediMail Installer.) -- C:\Users\bernadette\AppData\Local\IM\Runtime\IncrediMail_Install.exe
SR - | Auto 15/10/2013 3921880 | (SDScannerService) . (.Safer-Networking Ltd..) - C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe
SR - | Auto 20/09/2013 1042272 | (SDUpdateService) . (.Safer-Networking Ltd..) - C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe
SR - | Auto 13/09/2013 171416 | (SDWSCService) . (.Safer-Networking Ltd..) - C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe
[MD5.00000000000000000000000000000000] [APT] [{72B3D3E6-6A22-48DC-AFC0-0532C1AF73B2}] (...) -- E:\Install.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{C667A965-5AD9-49BF-90E2-784E8A04849C}] (...) -- E:\Setup.exe (.not file.) [0]
FirewallRaz
PROXYFix
EmptyTemp
EmptyFlash
EmptyClsid