cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

Script ZHPFix
G1 - GCS: Preference [User Data\Default] http://www.sweet-page.com =>PUP.SweetPage
G0 - GCSP: Preference [User Data\Default][HomePage] http://start.mysearchdial.com =>Adware.MyWebSearch
G2 - GCE: Preference [User Data\Default] [cgejfnajlimkpioopfmbegonlgealihn] FTdownloader V6.0 v.1.26.85, (Activ�) =>Adware.Downware
G2 - GCE: Preference [User Data\Default] [ifohbjbgfchkkfhphahclmkpgejiplfo] Lightning Newtab v.1.1.8.4, (Activ�) =>PUP.Elex
G2 - GCE: Preference [User Data\Default] [igdhbblpcellaljokkpfhcjlagemhgjl] Iminent v.8.1.2.3, (Activ�) =>Adware.IMBooster
G2 - GCE: Preference [User Data\Default] [jjflmfkjppbmejlfbhlpgjnomdoefkfa] Plus-HD-4.9 v.1.26.38, (Activ�) =>Adware.PlusHD
G2 - GCE: Preference [User Data\Default] [jpmbfleldcgkldadpdinhjjopdfpjfjp] Wajam v.1.34 (Activ�) =>PUP.Wajam
G2 - GCE: Preference [User Data\Default] [kbjlipmgfoamgjaogmbihaffnpkpjajp] Bubble Dock v.1.0.0.130 (D�sactiv�) =>PUP.BubbleDock
G2 - GCE: Preference [User Data\Default] [ndabehhdchlmpligpihaanhnkcbbbppp] Allin1Convert v.5.41.2.15020, (Activ�) =>Adware.Allin1Convert
G2 - EXT: C:\Users\perrin\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgejfnajlimkpioopfmbegonlgealihn [FTdownloader V6.0] =>Adware.Downware
G2 - EXT: C:\Users\perrin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ifohbjbgfchkkfhphahclmkpgejiplfo [Lightning Newtab] =>PUP.Elex
G2 - EXT: C:\Users\perrin\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl [Iminent] =>Adware.IMBooster
G2 - EXT: C:\Users\perrin\AppData\Local\Google\Chrome\User Data\Default\Extensions\jjflmfkjppbmejlfbhlpgjnomdoefkfa [Plus-HD-4.9] =>Adware.PlusHD
G2 - EXT: C:\Users\perrin\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp [Wajam] =>PUP.Wajam
G2 - EXT: C:\Users\perrin\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbjlipmgfoamgjaogmbihaffnpkpjajp [Bubble Dock] =>PUP.BubbleDock
G2 - EXT: C:\Users\perrin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndabehhdchlmpligpihaanhnkcbbbppp [Allin1Convert] =>Adware.Allin1Convert
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.sweet-page.com =>PUP.SweetPage
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.sweet-page.com =>PUP.SweetPage
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.sweet-page.com =>PUP.SweetPage
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.sweet-page.com =>PUP.SweetPage
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.sweet-page.com =>PUP.SweetPage
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.sweet-page.com =>PUP.SweetPage
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.sweet-page.com =>PUP.SweetPage
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.sweet-page.com =>PUP.SweetPage
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.sweet-page.com =>PUP.SweetPage
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs,Tabs = http://start.mysearchdial.com =>Adware.MyWebSearch
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.sweet-page.com =>PUP.SweetPage
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.sweet-page.com =>PUP.SweetPage
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.sweet-page.com =>PUP.SweetPage
O2 - BHO: Bubble Dock SurfMatch [64Bits] - {23AF19F7-1D5B-442c-B14C-3D1081953C94} . (.Nosibay - Bubble Dock.) -- C:\Program Files (x86)\Nosibay\Bubble Dock\extensions\axSurfMatch.dll =>PUP.BubbleDock
O2 - BHO: CrossriderApp0045918 [64Bits] - {11111111-1111-1111-1111-110411591118} Cl� orpheline =>PUP.CrossRider
O4 - GS\QuickLaunch [perrin]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe http://www.sweet-page.com =>PUP.SweetPage
O4 - GS\QuickLaunch [perrin]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe http://www.sweet-page.com =>PUP.SweetPage
O4 - GS\TaskBar [perrin]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe http://www.sweet-page.com =>PUP.SweetPage
O4 - GS\Program [perrin]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe http://www.sweet-page.com =>PUP.SweetPage
O4 - GS\SystemTools [perrin]: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe http://www.sweet-page.com =>PUP.SweetPage
O4 - GS\Startup [perrin]: MyPC Backup.lnk . (.MyPCBackup.com - MyPC Backup.) -- C:\Program Files (x86)\MyPC Backup\MyPC Backup.exe =>PUP.MyPCBackup
O4 - HKCU\..\Run: [LiveSupport] C:\Program Files (x86)\LiveSupport\LiveSupport.exe (.not file.) =>PUP.LiveSupport
O4 - HKCU\..\Run: [NextLive] . (.NewNextDotMe - NewNext Helper Engine.) -- C:\Users\perrin\AppData\Roaming\newnext.me\nengine.dll =>PUP.NextLive
O4 - HKLM\..\Wow6432Node\Run: [mobilegeni daemon] C:\Program Files (x86)\Mobogenie\DaemonProcess.exe (.not file.) =>PUP.Mobogenie
O4 - HKUS\S-1-5-21-2273269632-3193362600-2166663518-1000\..\Run: [LiveSupport] C:\Program Files (x86)\LiveSupport\LiveSupport.exe (.not file.) =>PUP.LiveSupport
O4 - HKUS\S-1-5-21-2273269632-3193362600-2166663518-1000\..\Run: [NextLive] . (.NewNextDotMe - NewNext Helper Engine.) -- C:\Users\perrin\AppData\Roaming\newnext.me\nengine.dll =>PUP.NextLive
O23 - Service: Computer Backup (MyPC Backup) (BackupStack) . (.Just Develop It - Backup Stack.) - C:\Program Files (x86)\MyPC Backup\BackupStack.exe =>PUP.MyPCBackup
[MD5.00000000000000000000000000000000] [APT] [Desk 365 RunAsStdUser] (...) -- C:\Program Files (x86)\Desk 365\desk365.exe (.not file.) [0] =>Hijacker.22Find
[MD5.00000000000000000000000000000000] [APT] [Express FilesUpdate] (...) -- C:\Program Files (x86)\ExpressFiles\EFUpdater.exe (.not file.) [0] =>Adware.ExpressFiles
[MD5.00000000000000000000000000000000] [APT] [FTdownloader V6.0-chromeinstaller] (...) -- C:\Program Files (x86)\FTdownloader V6.0\FTdownloader V6.0-chromeinstaller.exe (.not file.) [0] =>Adware.Downware
[MD5.00000000000000000000000000000000] [APT] [FTdownloader V6.0-updater] (...) -- C:\Program Files (x86)\FTdownloader V6.0\FTdownloader V6.0-updater.exe (.not file.) [0] =>Adware.Downware
O39 - APT: FTdownloader V6.0-chromeinstaller - (...) -- C:\Windows\Tasks\FTdownloader V6.0-chromeinstaller.job [1956] =>PUP.CrossRider
O39 - APT: FTdownloader V6.0-chromeinstaller - (...) -- C:\Windows\System32\Tasks\FTdownloader V6.0-chromeinstaller [1956] =>PUP.CrossRider
O39 - APT: FTdownloader V6.0-updater - (...) -- C:\Windows\Tasks\FTdownloader V6.0-updater.job [1334] =>PUP.CrossRider
O39 - APT: FTdownloader V6.0-updater - (...) -- C:\Windows\System32\Tasks\FTdownloader V6.0-updater [1334] =>PUP.CrossRider
O42 - Logiciel: FTdownloader V6.0 - (.installdaddy.) [HKLM][64Bits] -- FTdownloader V6.0 =>Adware.Downware
O42 - Logiciel: Iminent - (.Iminent.) [HKLM][64Bits] -- {CF687AD3-80CD-431E-A50F-25DD8F9C96C3} =>Adware.IMBooster
O42 - Logiciel: MyPC Backup - (.MyPC Backup.) [HKLM][64Bits] -- MyPC Backup =>PUP.MyPCBackup
O42 - Logiciel: Webplayer - (.Kreapixel.) [HKLM][64Bits] -- {F750DB0E-D452-3108-63C9-FE16BC686741} =>Adware.SocialSkinz
[HKCU\Software\AppDataLow\Software\Crossrider] =>PUP.CrossRider
[HKCU\Software\AppDataLow\Software\Plus-HD-4.9] =>Adware.PlusHD
[HKCU\Software\AppDataLow\Software\Smartbar] =>Hijacker.SmartBar
[HKCU\Software\InstallCore] =>Adware.InstallCore
[HKCU\Software\LiveSupport] =>PUP.LiveSupport
[HKCU\Software\ParetoLogic] =>PUP.Paretologic
[HKCU\Software\lollipop] =>Adware.Lollipop
[HKLM\Software\DomaIQ] =>Adware.DomaIQ
[HKLM\Software\Wow6432Node\InstallCore] =>Adware.InstallCore
[HKLM\Software\Wow6432Node\ParetoLogic] =>PUP.Paretologic
[HKLM\Software\Wow6432Node\supWPM] =>PUP.WpManager
[HKLM\Software\Wow6432Node\sweet-pageSoftware] =>PUP.SweetPage
O43 - CFD: 31/10/2013 - 12:50:29 - [] ----D C:\Program Files (x86)\MyPC Backup =>PUP.MyPCBackup
O43 - CFD: 31/10/2013 - 00:22:14 - [] ----D C:\Program Files (x86)\Webplayer
O43 - CFD: 31/10/2013 - 01:42:33 - [0] ----D C:\Program Files (x86)\Common Files\Umbrella
O43 - CFD: 31/10/2013 - 01:40:50 - [0] ----D C:\ProgramData\Iminent =>Adware.IMBooster
O43 - CFD: 06/09/2013 - 22:08:47 - [] ----D C:\ProgramData\InstallMate =>PUP.Tarma
O43 - CFD: 03/01/2014 - 15:37:39 - [] ----D C:\ProgramData\WPM =>PUP.WpManager
O43 - CFD: 24/06/2013 - 17:34:06 - [] ----D C:\Users\perrin\AppData\Roaming\0A1Q1B1P1T1C1R1M1P1B
O43 - CFD: 31/10/2013 - 01:40:50 - [0] ----D C:\Users\perrin\AppData\Roaming\Iminent =>Adware.IMBooster
O43 - CFD: 09/07/2014 - 16:42:08 - [] ----D C:\Users\perrin\AppData\Roaming\newnext.me =>PUP.NextLive
O43 - CFD: 31/10/2013 - 01:41:10 - [0] ----D C:\Users\perrin\AppData\Roaming\Nosibay =>PUP.BubbleDock
O43 - CFD: 31/10/2013 - 00:20:48 - [] ----D C:\Users\perrin\AppData\Roaming\Webplayer
O43 - CFD: 03/01/2014 - 15:35:34 - [] ----D C:\Users\perrin\AppData\Local\genienext =>PUP.NextLive
O43 - CFD: 03/01/2014 - 15:38:20 - [0] ----D C:\Users\perrin\AppData\Local\Lollipop =>Adware.Lollipop
O43 - CFD: 03/01/2014 - 15:37:58 - [] ----D C:\Users\perrin\AppData\Local\Mobogenie =>PUP.Mobogenie
O43 - CFD: 11/06/2013 - 20:29:19 - [] ----D C:\Users\perrin\AppData\Local\Software
O43 - CFD: 26/10/2013 - 17:48:43 - [] ----D C:\Users\perrin\AppData\Local\Wajam =>PUP.Wajam
O43 - CFD: 01/11/2013 - 12:39:01 - [0] ----D C:\Users\perrin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bubble Dock =>PUP.BubbleDock
O43 - CFD: 08/01/2014 - 22:02:22 - [0] ----D C:\Users\perrin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FTDownloader.com =>Adware.Downware
O61 - LFC: 09/07/2014 - 16:48:14 ---A- . (...) -- C:\Users\perrin\AppData\Roaming\newnext.me\cache\spark.bin [649] =>PUP.NextLive
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (...) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe http://www.sweet-page.com =>PUP.SweetPage
O69 - SBI: SearchScopes [HKCU] {2938EDF0-40A9-C7AB-E6DC-5F2FE5AE67AB} - (Mysearchdial) - http://start.mysearchdial.com =>Adware.MyWebSearch
O69 - SBI: SearchScopes [HKCU] {33BB0A4E-99AF-4226-BDF6-49120163DE86} [DefaultScope] - (sweet-page) - http://www.sweet-page.com =>PUP.SweetPage
O90 - PUC: "3DA786FCDC08E1345AF052DDF8C9693C" . (.Iminent.) -- C:\Windows\Installer\{CF687AD3-80CD-431E-A50F-25DD8F9C96C3}\imbooster.ico =>Adware.IMBooster
O90 - PUC: "70BB52E0BE26F67478CFA64F62BA50E9" . (.Boxore Client.) -- C:\Windows\Installer\{0E25BB07-62EB-476F-87FC-6AF426AB059E}\boxore.ico =>Adware.Boxore
[MD5.0471F2345D5ACCA53DBB0AA4463A9EB8] [WIS][30/10/2013] (.Kreapixel - Webplayer.) -- C:\Windows\Installer\3c3a0f.msi [21504] =>Adware.SocialSkinz
HKLM\SOFTWARE\Microsoft\Tracing\BackupStack_RASAPI32 =>PUP.MyPCBackup
HKLM\SOFTWARE\Microsoft\Tracing\BackupStack_RASMANCS =>PUP.MyPCBackup
HKLM\SOFTWARE\Microsoft\Tracing\FTDownloader_RASAPI32 =>Adware.Downware
HKLM\SOFTWARE\Microsoft\Tracing\FTDownloader_RASMANCS =>Adware.Downware
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Iminent_RASAPI32 =>Adware.IMBooster
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Iminent_RASMANCS =>Adware.IMBooster
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\YontooSetup-Silent-0900_RASAPI32 =>Adware.Yontoo
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\YontooSetup-Silent-0900_RASMANCS =>Adware.Yontoo
[HKCR\CLSID\{11111111-1111-1111-1111-110411591118}] (Plus-HD-4.9) =>Adware.PlusHD
[HKCR\CLSID\{22222222-2222-2222-2222-220422592218}] (CrossriderApp0045918.Sandbox) =>PUP.CrossRider
SS - | Auto 19/09/2013 38440 | (BackupStack) . (.Just Develop It.) - C:\Program Files (x86)\MyPC Backup\BackupStack.exe =>PUP.MyPCBackup
[HKLM\Software\Google\Chrome\Extensions\cgejfnajlimkpioopfmbegonlgealihn] =>Adware.Downware^
[HKLM\Software\Google\Chrome\Extensions\ifohbjbgfchkkfhphahclmkpgejiplfo] =>PUP.Elex^
[HKLM\Software\Google\Chrome\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl] =>Adware.IMBooster^
[HKLM\Software\Google\Chrome\Extensions\jjflmfkjppbmejlfbhlpgjnomdoefkfa] =>Adware.PlusHD^
[HKLM\Software\Google\Chrome\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp] =>PUP.Wajam^
[HKLM\Software\Google\Chrome\Extensions\kbjlipmgfoamgjaogmbihaffnpkpjajp] =>PUP.BubbleDock^
[HKLM\Software\Google\Chrome\Extensions\ndabehhdchlmpligpihaanhnkcbbbppp] =>Adware.Allin1Convert^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{23AF19F7-1D5B-442C-B14C-3D1081953C94}] =>PUP.BubbleDock^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110411591118}] =>PUP.CrossRider^
[HKLM\SYSTEM\CurrentControlSet\Services\MyPC Backup) (BackupStack] =>PUP.MyPCBackup^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\FTdownloader V6.0] =>Adware.Downware^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{CF687AD3-80CD-431E-A50F-25DD8F9C96C3}] =>Adware.IMBooster^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\MyPC Backup] =>PUP.MyPCBackup^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{F750DB0E-D452-3108-63C9-FE16BC686741}] =>Adware.SocialSkinz^
[HKLM\Software\Classes\AppID\{01994268-3C10-4044-A1EA-7A9C1B739A11}] =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Classes\AppID\{01994268-3C10-4044-A1EA-7A9C1B739A11}] =>Adware.IMBooster
[HKLM\Software\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}] =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}] =>Adware.IMBooster
[HKLM\Software\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}] =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}] =>Adware.IMBooster
[HKLM\Software\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}] =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}] =>Adware.IMBooster
[HKLM\Software\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}] =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}] =>Adware.IMBooster
[HKLM\Software\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}] =>PUP.RewardsArcade
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{23AF19F7-1D5B-442c-B14C-3D1081953C94}] =>Adware.SPointer
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{23AF19F7-1D5B-442c-B14C-3D1081953C94}] =>Adware.SPointer
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{23AF19F7-1D5B-442c-B14C-3D1081953C94}] =>Adware.SPointer
[HKLM\Software\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}] =>PUP.RewardsArcade
[HKLM\Software\Classes\TypeLib\{2BF2028E-3F3C-4C05-AB45-B2F1DCFE0759}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}] =>PUP.RewardsArcade
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}] =>PUP.V9Software
[HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}] =>PUP.V9Software
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}] =>PUP.V9Software
[HKLM\Software\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{4897bba6-48d9-468c-8efa-846275d7701b}] =>Adware.SocialSkinz
[HKLM\Software\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{C58D664A-3DBC-4925-AE74-0382007DF113}] =>Adware.IMBooster
[HKLM\Software\Classes\Interface\{C776D7F4-BA85-4B75-AAFC-3A0A11FE6E36}] =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Classes\Interface\{C776D7F4-BA85-4B75-AAFC-3A0A11FE6E36}] =>Adware.IMBooster
[HKLM\Software\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}] =>PUP.RewardsArcade
[HKLM\Software\Classes\TypeLib\{DB538320-D3C5-433C-BCA9-C4081A054FCF}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}] =>PUP.RewardsArcade
[HKLM\Software\Classes\AppID\esrv.EXE] =>PUP.Babylon
[HKLM\Software\Classes\SpeedUpMyPC] =>PUP.SpeedUpMyPC
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\1C875DDE39636004CA8CDAEC335B4160] =>Adware.PredictAd
[HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\HssSrv] =>Trojan.Adclicker
[HKCU\Software\lollipop] =>Adware.Lollipop
[HKLM\Software\Wow6432Node\Microsoft\Tracing\Iminent_RASAPI32] =>Adware.Bandoo
[HKLM\Software\Wow6432Node\Microsoft\Tracing\Iminent_RASMANCS] =>Adware.Bandoo
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SearchTheWebARP] =>Adware.IMBooster
[HKCU\Software\InstallCore] =>Adware.InstallCore
[HKLM\Software\Wow6432Node\InstallCore] =>Adware.InstallCore
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375] =>PUP.Tarma
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5] =>PUP.Tarma
[HKCU\Software\AppDataLow\Software\Crossrider] =>PUP.CrossRider
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\F1057DD419AED0B468AD8888429E139A] =>Adware.IMBooster
[HKCU\Software\ParetoLogic] =>PUP.Paretologic
[HKLM\Software\Wow6432Node\ParetoLogic] =>PUP.Paretologic
[HKLM\Software\Google\Chrome\Extensions\pflphaooapbgpeakohlggbpidpppgdff] =>Adware.MyWebSearch
[HKLM\Software\Wow6432Node\Google\Chrome\Extensions\ifohbjbgfchkkfhphahclmkpgejiplfo] =>PUP.Elex
[HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\eSafeSvc] =>PUP.eSafeSecurity
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{62D82EC1-0D3A-DF54-8E3E-07E1337A5311}] =>Adware.SaveShare
[HKLM\Software\Classes\iminent] =>Adware.IMBooster
[HKLM\Software\Classes\CLSID\{11111111-1111-1111-1111-110411591118}] =>PUP.CrossRider
[HKLM\Software\Classes\CLSID\{22222222-2222-2222-2222-220422592218}] =>PUP.CrossRider
[HKLM\Software\Wow6432Node\Classes\iminent] =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Classes\CLSID\{22222222-2222-2222-2222-220422592218}] =>PUP.CrossRider
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BA71D41F6CC0B6247B05D473850A8AEA] =>Adware.Boxore^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CA0054A5AB3EFFE4CB5660E44A1E7DCC] =>Adware.Boxore^
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:LiveSupport =>PUP.LiveSupport^
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:mobilegeni daemon =>PUP.Mobogenie^
C:\Users\perrin\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgejfnajlimkpioopfmbegonlgealihn =>Adware.Downware^
C:\Users\perrin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ifohbjbgfchkkfhphahclmkpgejiplfo =>PUP.Elex^
C:\Users\perrin\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl =>Adware.IMBooster^
C:\Users\perrin\AppData\Local\Google\Chrome\User Data\Default\Extensions\jjflmfkjppbmejlfbhlpgjnomdoefkfa =>Adware.PlusHD^
C:\Users\perrin\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp =>PUP.Wajam^
C:\Users\perrin\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbjlipmgfoamgjaogmbihaffnpkpjajp =>PUP.BubbleDock^
C:\Users\perrin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndabehhdchlmpligpihaanhnkcbbbppp =>Adware.Allin1Convert^
C:\Program Files (x86)\MyPC Backup =>PUP.MyPCBackup^
C:\ProgramData\Iminent =>Adware.IMBooster^
C:\ProgramData\InstallMate =>PUP.Tarma^
C:\ProgramData\WPM =>PUP.WpManager^
C:\Users\perrin\AppData\Roaming\Iminent =>Adware.IMBooster^
C:\Users\perrin\AppData\Roaming\newnext.me =>PUP.NextLive^
C:\Users\perrin\AppData\Roaming\Nosibay =>PUP.BubbleDock^
C:\Users\perrin\AppData\Local\genienext =>PUP.NextLive^
C:\Users\perrin\AppData\Local\Lollipop =>Adware.Lollipop^
C:\Users\perrin\AppData\Local\Mobogenie =>PUP.Mobogenie^
C:\Users\perrin\AppData\Local\Wajam =>PUP.Wajam^
C:\Users\perrin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bubble Dock =>PUP.BubbleDock^
C:\Users\perrin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FTDownloader.com =>Adware.Downware^
C:\Program Files (x86)\Common Files\Umbrella =>Adware.IMBooster
C:\Users\perrin\AppData\Local\Software =>Adware.Boxore
C:\Windows\Tasks\FTdownloader V6.0-chromeinstaller.job =>PUP.CrossRider^
C:\Windows\System32\Tasks\FTdownloader V6.0-chromeinstaller =>PUP.CrossRider^
C:\Windows\Tasks\FTdownloader V6.0-updater.job =>PUP.CrossRider^
C:\Windows\System32\Tasks\FTdownloader V6.0-updater =>PUP.CrossRider^
[HKCU\Software\AppDataLow\Software\Plus-HD-4.9] =>Adware.PlusHD^
[HKCU\Software\AppDataLow\Software\Smartbar] =>Hijacker.SmartBar^
[HKCU\Software\LiveSupport] =>PUP.LiveSupport^
[HKLM\Software\DomaIQ] =>Adware.DomaIQ^
[HKLM\Software\Wow6432Node\supWPM] =>PUP.WpManager^
[HKLM\Software\Wow6432Node\sweet-pageSoftware] =>PUP.SweetPage^
C:\Windows\Installer\3c3a0f.msi =>Adware.SocialSkinz^
[HKCR\CLSID\{11111111-1111-1111-1111-110411591118}] (Plus-HD-4.9) =>Adware.PlusHD^
[HKCR\CLSID\{22222222-2222-2222-2222-220422592218}] (CrossriderApp0045918.Sandbox) =>PUP.CrossRider^
O4 - HKCU\..\Run: [Hoolapp Android] C:\Users\perrin\AppData\Roaming\HOOLAP~1\Hoolapp.exe (.not file.)
O4 - HKCU\..\Run: [Steam] . (.Valve Corporation - Steam Client Bootstrapper (buildbot_winslav.) -- C:\Program Files (x86)\Steam\steam.exe
O4 - HKUS\S-1-5-21-2273269632-3193362600-2166663518-1000\..\Run: [Hoolapp Android] C:\Users\perrin\AppData\Roaming\HOOLAP~1\Hoolapp.exe (.not file.)
O4 - HKUS\S-1-5-21-2273269632-3193362600-2166663518-1000\..\Run: [Steam] . (.Valve Corporation - Steam Client Bootstrapper (buildbot_winslav.) -- C:\Program Files (x86)\Steam\steam.exe
[MD5.00000000000000000000000000000000] [APT] [Hoolapp For Android] (...) -- C:\Users\perrin\AppData\Roaming\HOOLAP~1\UPDATE~1\UPDATE~1.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{EB66CC4F-EC92-44EE-BD85-CF120110E9BD}] (...) -- C:\Users\perrin\Sony Online Entertainment\Installed Games\PlanetSide 2\Uninstaller.exe (.not file.) [0]
[HKCU\Software\Hoolapp]
O43 - CFD: 15/10/2013 - 08:28:59 - [] ----D C:\Program Files (x86)\GUMD1B6.tmp
O43 - CFD: 14/06/2013 - 20:15:12 - [] ----D C:\Users\perrin\AppData\Roaming\HoolappForAndroid
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\CleanHlp.sys . (...) -- C:\Windows\System32\Drivers\CleanHlp.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\CleanHlp.sys . (...) -- C:\Windows\System32\Drivers\CleanHlp.sys (.not file.)
R3 - URLSearchHook: (no name) [64Bits] - {53903846-3fb3-467b-a1bb-f3049e1a89a9} . (.Adobe Systems - A plugin to detect whether the Adobe Creative Cloud is installed on th.) (No version) -- (.not file.)
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} Cl� orpheline
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{53903846-3FB3-467B-A1BB-F3049E1A89A9} Cl� orpheline
[HKCU\Software\AppDataLow\Software\BMFTV_bar]
[HKCU\Software\Conduit] =>Toolbar.Conduit
[HKCU\Software\Softonic] =>Toolbar.Conduit
O69 - SBI: SearchScopes [HKCU] {BD117E98-F200-4DFB-A636-7B0DCF0F74FB} - (Hotspot Shield Customized Web Search) - http://search.conduit.com
[MD5.0E4185F75C1394897DB73CCC3368CA4B] [WIS][11/06/2012] (.Microsoft Corporation - Bing Bar.) -- C:\Windows\Installer\10823bd.msi [475136] =>Toolbar.Bing
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\BingBar_RASAPI32 =>Toolbar.Bing
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\BingBar_RASMANCS =>Toolbar.Bing
[HKLM\Software\Classes\Interface\{431532BD-0AE1-4ABC-BE8C-919F3D1332E2}] =>Toolbar.Wajam
[HKLM\Software\Wow6432Node\Microsoft\Tracing\BingBar_RASMANCS] =>Toolbar.Bing
[HKLM\Software\Wow6432Node\Google\Chrome\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp] =>Toolbar.Wajam
[HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WajamUpdater] =>Toolbar.Wajam
[HKCU\Software\Softonic] =>Toolbar.Conduit
[HKCU\Software\AppDataLow\Software\BMFTV_bar] =>Toolbar.BMFTVbar
[HKLM\Software\Wow6432Node\Microsoft\Tracing\BingBar_RASAPI32] =>Toolbar.Bing
[HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]:{53903846-3FB3-467B-A1BB-F3049E1A89A9} =>Toolbar.BMFTVbar
[HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks]:{53903846-3FB3-467B-A1BB-F3049E1A89A9} =>Toolbar.BMFTVbar
C:\Users\perrin\AppData\LocalLow\BMFTV_bar =>Toolbar.BMFTVbar
[HKCU\Software\Conduit] =>Toolbar.Conduit^
C:\Windows\Installer\10823bd.msi =>Toolbar.Bing^
O42 - Logiciel: CCleaner Packages - (...) [HKCU][64Bits] -- CCleaner Packages
EmptyPrefetch
FirewallRaz
PROXYFix
EmptyTemp
EmptyFlash
EmptyClsid
SysRestore

Publicité


Signaler le contenu de ce document

Publicité