RogueKiller V12.8.5.0 (x64) [Dec 12 2016] (Gratuit) par Adlice Software email : http://www.adlice.com/contact/ Remontées : http://forum.adlice.com Site web : http://www.adlice.com/fr/download/roguekiller/ Blog : http://www.adlice.com Système d'exploitation : Windows 10 (10.0.14393) 64 bits version Démarré en : Mode normal Utilisateur : Baptiste [Administrateur] Démarré depuis : C:\Program Files\RogueKiller\RogueKiller64.exe Mode : Scan -- Date : 12/13/2016 20:00:11 (Durée : 00:34:50) ¤¤¤ Processus : 0 ¤¤¤ ¤¤¤ Registre : 6 ¤¤¤ [PUM.HomePage] (X64) HKEY_USERS\S-1-5-21-567590480-3619365830-3895239365-1001\Software\Microsoft\Internet Explorer\Main | Start Page : http://oem15.msn.com/?pc=NMTE -> Trouvé(e) [PUM.HomePage] (X86) HKEY_USERS\S-1-5-21-567590480-3619365830-3895239365-1001\Software\Microsoft\Internet Explorer\Main | Start Page : http://oem15.msn.com/?pc=NMTE -> Trouvé(e) [PUM.HomePage] (X64) HKEY_USERS\S-1-5-21-567590480-3619365830-3895239365-1001\Software\Microsoft\Internet Explorer\Main | Default_Page_URL : http://oem15.msn.com/?pc=NMTE -> Trouvé(e) [PUM.HomePage] (X86) HKEY_USERS\S-1-5-21-567590480-3619365830-3895239365-1001\Software\Microsoft\Internet Explorer\Main | Default_Page_URL : http://oem15.msn.com/?pc=NMTE -> Trouvé(e) [Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules | {5B835281-8F71-4D9A-821C-B7E83D44A32D} : v2.25|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Public|App=C:\Users\Baptiste\AppData\Local\Temp\7zSC72C.tmp\SymNRT.exe|Name=Norton Removal Tool| [x] -> Trouvé(e) [Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules | {DBADDABE-1196-4774-B280-3ECA4D30672B} : v2.25|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Public|App=C:\Users\Baptiste\AppData\Local\Temp\7zSC72C.tmp\SymNRT.exe|Name=Norton Removal Tool| [x] -> Trouvé(e) ¤¤¤ Tâches : 0 ¤¤¤ ¤¤¤ Fichiers : 0 ¤¤¤ ¤¤¤ WMI : 0 ¤¤¤ ¤¤¤ Fichier Hosts : 0 ¤¤¤ ¤¤¤ Antirootkit : 0 (Driver: Chargé) ¤¤¤ ¤¤¤ Navigateurs web : 0 ¤¤¤ ¤¤¤ Vérification MBR : ¤¤¤ +++++ PhysicalDrive0: TOSHIBA THNSNJ128G8NY +++++ --- User --- [MBR] e1b3b2612d8af818636d69bb71220cb0 [BSP] 9d223293f64ddfcdb84b119903e3ea5b : Empty MBR Code Partition table: 0 - [MAN-MOUNT] EFI system partition | Offset (sectors): 2048 | Size: 300 MB 1 - [MAN-MOUNT] Microsoft reserved partition | Offset (sectors): 616448 | Size: 128 MB 2 - Basic data partition | Offset (sectors): 878592 | Size: 120775 MB 3 - [SYSTEM][MAN-MOUNT] Basic data partition | Offset (sectors): 248225792 | Size: 900 MB User = LL1 ... OK User = LL2 ... OK +++++ PhysicalDrive1: WDC WD10JPVX-22JC3T0 +++++ --- User --- [MBR] fd6346caac684af98d69e86f5e1ac0bc [BSP] cb2880de334a69bcd8a28451aeec8d64 : Empty MBR Code Partition table: 0 - Basic data partition | Offset (sectors): 2048 | Size: 935066 MB 1 - [SYSTEM][MAN-MOUNT] Basic data partition | Offset (sectors): 1915017216 | Size: 18802 MB User = LL1 ... OK User = LL2 ... OK