---------- | AdsFix | g3n-h@ckm@n | V4_22.10.17.3 ----- Vista | 7 | 8 | 8.1 | 10 - 32/64 bits ----- Start 20:21:48 - 22/10/2017 Mis a jour le : 22/10/2017 | 20.05 (GMT) par g3n-h@ckm@n Contact : http://www.sosvirus.net Assistance : http://www.sosvirus.net/forum-virus-securite.html Feedbacks : http://www.sosvirus.net/feedbacks-t75915.html Facebook : https://www.facebook.com/AdsFixAntiAdware C:\Users\sophie\Desktop\AdsFix.exe Boot: SafeMode with network [sophie (Administrator)] - [SOPHIE-PC] - (france [040C]) SID = S-1-5-21-1393878847-3825134562-3829623230-1000 || [736f70686965205e5e] PC : SAMSUNG ELECTRONICS CO., LTD. - R720 - Processor : X64 - 2094 - Intel(R) Core(TM)2 Duo CPU T6500 @ 2.10GHz Bios : Phoenix Technologies Ltd. - 09/21/2009 - V.01LT.M012.20090921.JIP CoreTemp : 47 C CPU #1 value:0 % CPU #2 value:0 % Total Overall CPU Usage value:0 % Systeme : Windows 7 Home Premium (32 bits) HomePremium Service Pack 1 Memoire RAM = Total (MB) : 3109 | Libre (MB) : 2577 Pagefile = Total (MB) : 6215 | Libre (MB) : 5740 Virtuelle = Total (MB) : 2097 | Libre (MB) : 1902 C:\ -> [Fixed] | [] | Total : 225.33 Go | Free : 185.52 Go -> NTFS [SATA] D:\ -> [Fixed] | [] | Total : 225.33 Go | Free : 213.7 Go -> NTFS [SATA] Sauvegarde du registre , pour restaurer : Cliquer sur Options & Restaurer le registre (C:\AdsFix\Save\Registry [22.10.2017 @ 20_21_40]) ou un element Restauration de fichiers ou dossiers supprimes par erreur : Cliquer sur Options & Restaurer Fichiers ou dossiers, Selectionner un element >> "Restaurer" ---------- | Mises a jour Windows Prochaine recherche : 2017-10-22 21:16:46 ---------- | Navigateurs IE : 9.0.8112.16737 (© Microsoft Corporation. Tous droits réservés.) FF : 56.0.1.6484 (©Firefox and Mozilla Developers; available under the MPL 2 license.) ---------- | Security (atcav : 3) AV : Avast Antivirus Enabled AS : Avast Antivirus Enabled FW : WMI : OK WU: Windows Update Service [Auto(2)] = non en cours AS: Windows Defender [Manual(3)] = non en cours FW: Windows FireWall Service [Auto(2)] = en cours WMI: Windows Management Instrumentation (System Information) [Auto(2)] = en cours ---------- | FlashPlayer ---------- | Processes closed 1492 | [Owner : sophie |Parent : 1368(explorer.exe)] - (.AVAST Software - Avast Antivirus.) - (17.7.3660.226) = C:\Program Files\AVAST Software\Avast\AvastUI.exe ---------- | Tasks Suppression : Install_NSS Suppression : C:\windows\System32\Tasks\SmartDefrag_Startup (.-.) ( C:\Program Files\IObit\Smart Defrag\SmartDefrag.exe -> /STARTUP) Suppression : C:\windows\System32\Tasks\SmartDefrag_Update (.-.) ( C:\Program Files\IObit\Smart Defrag\AutoUpdate.exe -> /autorun) Suppression : C:\windows\System32\Tasks\{09CD81C8-60DD-4972-B265-6780F05B0C65} (.-.) ( C:\windows\system32\pcalua.exe -> "C:\Users\sophie\AppData\Roaming\IObit\IObit Uninstaller\Install_PintoStartMenutemp.exe" "C:\Users\sophie\AppData\Roaming\IObit\IObit Uninstaller") Suppression : C:\windows\System32\Tasks\{350779EF-5AFC-4F6A-BBC6-33BE02538E0A} (.-.) ( C:\Users\sophie\Downloads\Adaware_Installer.exe ->) Suppression : C:\windows\System32\Tasks\{B27B9C2A-E55E-43CA-BC66-B1040EB8BC93} (.-.) ( C:\windows\system32\pcalua.exe -> C:\Users\sophie\AppData\Local\Temp\jre-8u60-windowsu.exe C:\windows\system32 -c /installmethod=jau FAMILYUPGRADE=1) Suppression : C:\windows\System32\Tasks\{C487719C-93DF-4B48-BD48-B9C6F96F7F24} (.-.) ( C:\windows\system32\pcalua.exe -> C:\Users\sophie\AppData\Local\Temp\jre-8u60-windowsu.exe C:\windows\system32 -c /installmethod=jau FAMILYUPGRADE=1) ---------- | Services Suppression : IUFileFilter : \??\C:\Program Files\IObit\IObit Uninstaller\drivers\win7_x86\IUFileFilter.sys Suppression : SDScannerService : "C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe" ---------- | AppCertDlls | AppInit_DLLs ---------- | DNSapi.dll C:\windows\System32\dnsapi.dll : \drivers\etc\hosts ---------- | Hosts ---------- | SafeBoot ---------- | Winsock ---------- | DNS ---------- | Registre Suppression : HKU\S-1-5-21-1393878847-3825134562-3829623230-1000\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\HD-Quality-v3 Suppression : HKLM\SOFTWARE\Classes\.disabled : Spybot2.DisabledFile Suppression : HKLM\SOFTWARE\Classes\.sbe : Spybot2.SBEFile Suppression : HKLM\SOFTWARE\Classes\.sbs : Spybot2.SBSFile Suppression : HKLM\SOFTWARE\Classes\.sds : Spybot2.SDSFile Suppression : HKLM\SOFTWARE\Classes\.uti : Spybot2.UTIFile Suppression : HKLM\SOFTWARE\Classes\// : Suppression : HKLM\SOFTWARE\Classes\Spybot2.DisabledFile : Disabled shortcut Suppression : HKLM\SOFTWARE\Classes\SpybotFilesScanner : Suppression : HKLM\SOFTWARE\Classes\TuneUp.TUUtilityTools : TuneUp Utilities Tools Suppression : HKLM\SOFTWARE\Classes\TuneUp.TUUtilityTools.1 : TuneUp Utilities Tools Suppression : HKLM\SOFTWARE\Classes\TuneUp.UtilitiesSvc.1 : TuneUp Utilities Service Suppression : HKLM\SOFTWARE\Classes\TuneUp.UtilitiesSvcTools.1 : TuneUp Utilities Tools Suppression : HKLM\SOFTWARE\Classes\AppID\IESurfMatch.DLL : # Suppression : HKLM\SOFTWARE\Classes\AppID\{B1DBD7F1-13D4-4FBE-8CC1-7BF878C10CDA} : IESurfMatch # Suppression : HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer Suppression : HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-18\SOFTWARE\TBSB02188 Suppression : HKU\S-1-5-21-1393878847-3825134562-3829623230-1000\SOFTWARE\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-1393878847-3825134562-3829623230-1000\SOFTWARE\TBSB01620 Suppression : HKLM\SOFTWARE\Classes\CLSID\{02849255-07CD-4C09-97D7-017DA2AE45AA} Suppression : HKLM\SOFTWARE\Classes\CLSID\{2509ABBC-871E-42e5-A27B-F7DA394B1897} Suppression : HKLM\SOFTWARE\Classes\CLSID\{44176360-2BBF-4EC1-93CE-384B8681A0BC} : C:\Program Files\Spybot - Search & Destroy 2\SDECon32.dll # Suppression : HKLM\SOFTWARE\Classes\CLSID\{FCA02D56-BF9D-4591-AD41-E59AF763C64A} Suppression : [HKU\S-1-5-21-1393878847-3825134562-3829623230-1000\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost]~[Akamai] : Akamai Suppression : [HKU\S-1-5-21-1393878847-3825134562-3829623230-1000\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION]~[Smartbar.exe] Suppression : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION]~[ValueApps.exe] Suppression : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\Spybot - Search & Destroy 2 Suppression : HKLM\SYSTEM\ControlSet002\Services\Eventlog\Application\Spybot - Search & Destroy 2 Suppression : HKU\S-1-5-18\SOFTWARE\Safer Networking Limited Suppression : HKU\S-1-5-21-1393878847-3825134562-3829623230-1000\SOFTWARE\Chromium Suppression : HKU\S-1-5-21-1393878847-3825134562-3829623230-1000\SOFTWARE\Safer Networking Limited Suppression : HKLM\SOFTWARE\Digital River Suppression : HKLM\SOFTWARE\IObit Suppression : HKLM\SOFTWARE\Safer Networking Limited Suppression : [HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]~[DefaultScope] : {0633EE93-D776-472f-A0FF-E1416B8B2E3A} Suppression : [HKU\S-1-5-21-1393878847-3825134562-3829623230-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]~[DefaultScope] Suppression : [HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]~[DefaultScope] Suppression : [HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]~[DefaultScope] Suppression : HKU\S-1-5-21-1393878847-3825134562-3829623230-1000\SOFTWARE\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\1702587a_0 : {0.0.0.00000000}.{3c778aea-81e8-444d-8076-36dcfe137e89}|\Device\HarddiskVolume3\Program Files\Spybot - Search & Destroy 2\SDWelcome.exe%b{00000000-0000-0000-0000-000000000000} Suppression : HKU\S-1-5-21-1393878847-3825134562-3829623230-1000\SOFTWARE\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\2065d11_0 : {0.0.0.00000000}.{72a64191-135b-4a7f-b5f3-1a0c4e94e6eb}|\Device\HarddiskVolume3\Program Files\AxBx\VirusKeeper 2017 Free Edition\VirusKeeper.exe%b{00000000-0000-0000-0000-000000000000} Suppression : HKU\S-1-5-21-1393878847-3825134562-3829623230-1000\SOFTWARE\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\2dd0f39f_0 : {0.0.0.00000000}.{3c778aea-81e8-444d-8076-36dcfe137e89}|\Device\HarddiskVolume3\Program Files\Spybot - Search & Destroy 2\SDSettings.exe%b{00000000-0000-0000-0000-000000000000} Suppression : HKU\S-1-5-21-1393878847-3825134562-3829623230-1000\SOFTWARE\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\309b49a7_0 : {0.0.0.00000000}.{3c778aea-81e8-444d-8076-36dcfe137e89}|\Device\HarddiskVolume3\Program Files\OfferBox\OfferBox.exe%b{00000000-0000-0000-0000-000000000000} Suppression : HKU\S-1-5-21-1393878847-3825134562-3829623230-1000\SOFTWARE\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\3f585c81_0 : {0.0.0.00000000}.{3c778aea-81e8-444d-8076-36dcfe137e89}|\Device\HarddiskVolume3\Program Files\Spybot - Search & Destroy 2\SDFiles.exe%b{00000000-0000-0000-0000-000000000000} Suppression : HKU\S-1-5-21-1393878847-3825134562-3829623230-1000\SOFTWARE\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\8e6692c0_0 : {0.0.0.00000000}.{72a64191-135b-4a7f-b5f3-1a0c4e94e6eb}|\Device\HarddiskVolume3\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe%b{00000000-0000-0000-0000-000000000000} Suppression : HKU\S-1-5-21-1393878847-3825134562-3829623230-1000\SOFTWARE\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\921f4a09_0 : {0.0.0.00000000}.{3c778aea-81e8-444d-8076-36dcfe137e89}|\Device\HarddiskVolume3\Program Files\Spybot - Search & Destroy 2\SDRootAlyzer.exe%b{00000000-0000-0000-0000-000000000000} Suppression : HKU\S-1-5-21-1393878847-3825134562-3829623230-1000\SOFTWARE\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\9a0c09b1_0 : {0.0.0.00000000}.{3c778aea-81e8-444d-8076-36dcfe137e89}|\Device\HarddiskVolume3\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe%b{00000000-0000-0000-0000-000000000000} Suppression : HKU\S-1-5-21-1393878847-3825134562-3829623230-1000\SOFTWARE\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\a2d5b3b3_0 : {0.0.0.00000000}.{3c778aea-81e8-444d-8076-36dcfe137e89}|\Device\HarddiskVolume3\Program Files\Spybot - Search & Destroy 2\SDScan.exe%b{00000000-0000-0000-0000-000000000000} Suppression : HKU\S-1-5-21-1393878847-3825134562-3829623230-1000\SOFTWARE\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\ba77c948_0 : {0.0.0.00000000}.{3c778aea-81e8-444d-8076-36dcfe137e89}|\Device\HarddiskVolume3\Program Files\Spybot - Search & Destroy 2\SDCleaner.exe%b{00000000-0000-0000-0000-000000000000} Suppression : HKU\S-1-5-21-1393878847-3825134562-3829623230-1000\SOFTWARE\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\c5fbdc6e_0 : {0.0.0.00000000}.{3c778aea-81e8-444d-8076-36dcfe137e89}|\Device\HarddiskVolume3\Program Files\Spybot - Search & Destroy 2\SDTray.exe%b{00000000-0000-0000-0000-000000000000} Suppression : HKU\S-1-5-21-1393878847-3825134562-3829623230-1000\SOFTWARE\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\cd3bde7b_0 : {0.0.0.00000000}.{3c778aea-81e8-444d-8076-36dcfe137e89}|\Device\HarddiskVolume3\Program Files\FLVPlayer\FLVPlayer.exe%b{00000000-0000-0000-0000-000000000000} Suppression : HKU\S-1-5-21-1393878847-3825134562-3829623230-1000\SOFTWARE\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\d1786470_0 : {0.0.0.00000000}.{3c778aea-81e8-444d-8076-36dcfe137e89}|\Device\HarddiskVolume3\Program Files\Spybot - Search & Destroy 2\SDSysRepair.exe%b{00000000-0000-0000-0000-000000000000} Suppression : HKU\S-1-5-21-1393878847-3825134562-3829623230-1000\SOFTWARE\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\e2b1d77c_0 : {0.0.0.00000000}.{3c778aea-81e8-444d-8076-36dcfe137e89}|\Device\HarddiskVolume3\Program Files\Spybot - Search & Destroy 2\SDImmunize.exe%b{00000000-0000-0000-0000-000000000000} Suppression : HKU\S-1-5-21-1393878847-3825134562-3829623230-1000\SOFTWARE\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\f97a8f03_0 : {0.0.0.00000000}.{3c778aea-81e8-444d-8076-36dcfe137e89}|\Device\HarddiskVolume3\Program Files\Spybot - Search & Destroy 2\SDDelFile.exe%b{00000000-0000-0000-0000-000000000000} Suppression : HKLM\Software\Classes\Installer\Features\843B1BCDE49CD6D4C80ED7D95AFC66E3 : gm_o_Winexplorerext Suppression : HKLM\Software\Classes\Installer\Features\8898ac96c6c158248bfabd87a0e624fa : SMLBIZ Suppression : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\32DF3C84BE725644F83A492D57170E27 : 02:\Software\Duuqu\FrameFox\name Suppression : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\91CD2F9AE8EDCC04C915F8BC70CCBB50 : 02:\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{26B19FA4-E8A1-4A1B-A163-1A1E46F830DD}\ Suppression : [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders]~[C:\Program Files\EPSON Software\Download Navigator\] [X] Suppression : [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders]~[C:\Program Files\EPSON Software\Download Navigator\_img\] [X] Suppression : HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Smart Defrag_is1 : (Smart Defrag 5) "C:\Program Files\IObit\Smart Defrag\unins000.exe" -> C:\Program Files\IObit\Smart Defrag\ Suppression : HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1 : (Spybot - Search & Destroy) "C:\Program Files\Spybot - Search & Destroy 2\unins000.exe" -> C:\Program Files\Spybot - Search & Destroy 2\ Suppression : HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\IObit Malware Fighter : "C:\Program Files\IObit\IObit Malware Fighter\IMF.exe" /autostart Suppression : HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Security Reviver_startup : "C:\Program Files\Security Reviver\SecRev.exe" autolaunch Suppression : [HKLM\SYSTEM\CurrentControlSet\Services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]~[C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe] : C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe:*:Enabled:Spybot-S&D 2 Tray Icon Suppression : [HKLM\SYSTEM\ControlSet002\Services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]~[C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe] : C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe:*:Enabled:Spybot-S&D 2 Tray Icon Suppression : [HKLM\SYSTEM\CurrentControlSet\Services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]~[C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe] : C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe:*:Enabled:Spybot-S&D 2 Updater Suppression : HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\SmartDefrag_Startup Suppression : HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{09CD81C8-60DD-4972-B265-6780F05B0C65} Suppression : HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{350779EF-5AFC-4F6A-BBC6-33BE02538E0A} Suppression : HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1ECB4978-3FB3-41A5-A123-FE4A8AB558A9} : \{09CD81C8-60DD-4972-B265-6780F05B0C65} Suppression : HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{1ECB4978-3FB3-41A5-A123-FE4A8AB558A9} : \{09CD81C8-60DD-4972-B265-6780F05B0C65} Suppression : HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5915C8B0-B70B-462A-8603-62FEADF3A800} : \SmartDefrag_Update Suppression : HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{5915C8B0-B70B-462A-8603-62FEADF3A800} : \SmartDefrag_Update Suppression : HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7363B3CE-3D02-480D-AF25-831C3A16C72A} : \{350779EF-5AFC-4F6A-BBC6-33BE02538E0A} Suppression : HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{7363B3CE-3D02-480D-AF25-831C3A16C72A} : \{350779EF-5AFC-4F6A-BBC6-33BE02538E0A} Suppression : HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{89BEF1D5-F16D-451A-8F38-061A646A8C93} : \SmartDefrag_Startup Suppression : HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{89BEF1D5-F16D-451A-8F38-061A646A8C93} : \SmartDefrag_Startup ---------- | Dossiers | Fichiers Suppression : C:\Program Files\IObit Reboot : C:\Program Files\Spybot - Search & Destroy 2 Suppression : C:\Program Files\Common Files\AV\Spybot - Search and Destroy Suppression : C:\Program Files\Common Files\IObit Suppression : C:\Users\Public\Desktop\Smart Defrag 5.lnk (.-.) C:\Program Files\IObit\Smart Defrag\SmartDefrag.exe Suppression : C:\ProgramData\Microsoft\Internet Explorer\Quick Launch\Spybot-S&D Start Center.lnk (.-.) C:\Program Files\Spybot - Search & Destroy 2\SDWelcome.exe Suppression : C:\ProgramData\Microsoft\Internet Explorer\Quick Launch\System Scan.lnk (.-.) C:\Program Files\Spybot - Search & Destroy 2\SDScan.exe Suppression : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk (.-.) C:\Program Files\Spybot - Search & Destroy 2\SDWelcome.exe Suppression : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2\Spybot-S&D Start Center.lnk (.-.) Suppression : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2\Uninstall Spybot-S&D.lnk (.-.) Suppression : C:\Users\sophie\AppData\Local\Chromium Suppression : C:\Users\sophie\AppData\Local\CrashRpt Suppression : C:\Users\sophie\AppData\LocalLow\ADSRemoval Suppression : C:\Users\sophie\AppData\LocalLow\IObit Suppression : C:\Users\sophie\AppData\LocalLow\Unity\WebPlayer Suppression : C:\Users\sophie\AppData\Roaming\IObit Suppression : C:\Users\sophie\AppData\Roaming\ProductData Suppression : C:\Users\sophie\Downloads\setup.exe (Copyright © 2006-2017 AxBx. .-.VirusKeeper 2017 Free Edition ) Suppression : C:\Users\Public\Documents\Avanquest Software Suppression : C:\ProgramData\360Quarant Suppression : C:\ProgramData\Avanquest Software Suppression : C:\ProgramData\IObit Suppression : C:\ProgramData\ProductData Suppression : C:\ProgramData\Spybot - Search & Destroy Suppression : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2 Suppression : C:\windows\System32\Config\Systemprofile\AppData\Roaming\IObit\Advanced SystemCare V8 Suppression : C:\windows\System32\Config\Systemprofile\AppData\Roaming\IObit\Driver Booster Suppression : C:\Users\sophie\AppData\Local\{0EC9AC8C-DDB3-4812-A805-49FBCEA7DD38} (.-.) Suppression : C:\Users\sophie\AppData\Local\{39AA6F06-33BF-4D71-9550-33DF63392F5C} (.-.) Suppression : C:\Users\sophie\AppData\Local\{72B4EE43-1DA2-4F5D-B891-149B6B8182D2} (.-.) Suppression : C:\Users\sophie\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico (.-.) Suppression : C:\Users\sophie\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{6A1806CD-94D4-4689-BA73-E35EA1EA9990}.ico (.-.) Suppression : C:\Users\sophie\AppData\Roaming\pdfconverter (.-.) Suppression : C:\windows\IObit Suppression : C:\windows\SYSTEM32\GROUPPOLICY\MACHINE\Registry.pol (.-.) Suppression : C:\Users\sophie\AppData\Local\TroubleshooterConfig.json (.-.) Suppression : C:\Users\sophie\AppData\Roaming\SuYZkvrV.tmp (.-.) Suppression : C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe (© 2009-2013 Safer-Networking Ltd. All rights reserved..-.Spybot - Search & Destroy) SDFSSvc.exe Suppression : C:\Users\sophie\AppData\Roaming\.# Suppression : C:\windows\System32\Config\Systemprofile\AppData\Roaming\360safe Suppression : C:\windows\System32\Drivers\etc\hp.bak (.-.) ---------- | AdsFix | g3n-h@ckm@n | V4_22.10.17.3 ----- Vista | 7 | 8 | 8.1 | 10 - 32/64 bits ----- Start 04:58:06 - 23/10/2017 Mis a jour le : 22/10/2017 | 20.05 (GMT) par g3n-h@ckm@n Contact : http://www.sosvirus.net Assistance : http://www.sosvirus.net/forum-virus-securite.html Feedbacks : http://www.sosvirus.net/feedbacks-t75915.html Facebook : https://www.facebook.com/AdsFixAntiAdware C:\Users\sophie\Desktop\AdsFix.exe Boot: Normal boot [sophie (Administrator)] - [SOPHIE-PC] - (france [040C]) SID = S-1-5-21-1393878847-3825134562-3829623230-1000 || [736f70686965205e5e] PC : SAMSUNG ELECTRONICS CO., LTD. - R720 - Processor : X64 - 2094 - Intel(R) Core(TM)2 Duo CPU T6500 @ 2.10GHz Bios : Phoenix Technologies Ltd. - 09/21/2009 - V.01LT.M012.20090921.JIP CoreTemp : 48 C CPU #1 value:0 % CPU #2 value:11 % Total Overall CPU Usage value:5 % Systeme : Windows 7 Home Premium (32 bits) HomePremium Service Pack 1 Memoire RAM = Total (MB) : 3109 | Libre (MB) : 1985 Pagefile = Total (MB) : 6215 | Libre (MB) : 5144 Virtuelle = Total (MB) : 2097 | Libre (MB) : 1882 C:\ -> [Fixed] | [] | Total : 225.33 Go | Free : 188.08 Go -> NTFS [SATA] D:\ -> [Fixed] | [] | Total : 225.33 Go | Free : 213.7 Go -> NTFS [SATA] Sauvegarde du registre , pour restaurer : Cliquer sur Options & Restaurer le registre (C:\AdsFix\Save\Registry [23.10.2017 @ 04_57_58]) ou un element Restauration de fichiers ou dossiers supprimes par erreur : Cliquer sur Options & Restaurer Fichiers ou dossiers, Selectionner un element >> "Restaurer" ---------- | Mises a jour Windows Prochaine recherche : 2017-10-23 03:06:21 Windows Is Activated ---------- | Navigateurs IE : 9.0.8112.16737 (© Microsoft Corporation. Tous droits réservés.) FF : 56.0.1.6484 (©Firefox and Mozilla Developers; available under the MPL 2 license.) ---------- | Security (atcav : 0) FW : WMI : OK WU: Windows Update Service [Auto(2)] = en cours AS: Windows Defender [Manual(3)] = non en cours FW: Windows FireWall Service [Auto(2)] = en cours WMI: Windows Management Instrumentation (System Information) [Auto(2)] = en cours ---------- | FlashPlayer ---------- | Processes closed 936 | [Owner : Système |Parent : 580(services.exe)] - (.AMD - AMD External Events Service Module.) - (6.14.11.1122) = C:\Windows\System32\atiesrxx.exe 1448 | [Owner : Système |Parent : 936()] - (.AMD - AMD External Events Client Module.) - (6.14.11.1122) = C:\Windows\System32\atieclxx.exe 1908 | [Owner : Système |Parent : 580(services.exe)] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - (1.824.23.7067) = C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe 1816 | [Owner : Système |Parent : 580(services.exe)] - (.ClanServers Hosting LLC - GSInGameService.) - (1.5.0.0) = C:\Program Files\GameTracker\GSInGameService.exe ---------- | Tasks Suppression : Install_NSS Suppression : AVG EUpdate Task Suppression : AVGPCTuneUp_Task_BkGndMaintenance Suppression : CreateChoiceProcessTask Suppression : Driver Booster SkipUAC (sophie) Suppression : Minecraft Checksum Validator ---------- | Services Suppression : SDUpdateService : "C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe" ---------- | AppCertDlls | AppInit_DLLs ---------- | DNSapi.dll C:\windows\System32\dnsapi.dll : \drivers\etc\hosts ---------- | Hosts ---------- | SafeBoot ---------- | Winsock ---------- | DNS ---------- | Registre Suppression : HKLM\SOFTWARE\Classes\.sbi : Spybot2.SBIFile Suppression : HKLM\SOFTWARE\Classes\.sdsb : Spybot2.SDSBFile Suppression : HKLM\SOFTWARE\Classes\.uts : Spybot2.UTSFile Suppression : HKLM\SOFTWARE\Classes\Spybot2.SBEFile : Spybot ignore list Suppression : HKLM\SOFTWARE\Classes\TuneUp.UtilitiesSvc : TuneUp Utilities Service Suppression : HKU\S-1-5-21-1393878847-3825134562-3829623230-1000\SOFTWARE\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-1393878847-3825134562-3829623230-1000\SOFTWARE\TBSB02188 Suppression : HKU\S-1-5-21-1393878847-3825134562-3829623230-1000\SOFTWARE\Chromium Suppression : [HKU\S-1-5-21-1393878847-3825134562-3829623230-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]~[DefaultScope] : {0633EE93-D776-472f-A0FF-E1416B8B2E3A} Suppression : HKU\S-1-5-21-1393878847-3825134562-3829623230-1000\SOFTWARE\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\207bd1b5_0 : {0.0.0.00000000}.{3c778aea-81e8-444d-8076-36dcfe137e89}|\Device\HarddiskVolume3\Program Files\RegClean Pro\RegCleanPro.exe%b{00000000-0000-0000-0000-000000000000} Suppression : [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders]~[C:\Program Files\EPSON Software\] [X] Suppression : HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Spybot-S&D Cleaning : "C:\Program Files\Spybot - Search & Destroy 2\SDCleaner.exe" /autoclean Suppression : HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\TrojanScanner : C:\Program Files\Trojan Remover\Trjscan.exe /boot Suppression : [HKLM\SYSTEM\CurrentControlSet\Services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]~[C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe] : C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe:*:Enabled:Spybot-S&D 2 Scanner Service Suppression : [HKLM\SYSTEM\ControlSet002\Services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]~[C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe] : C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe:*:Enabled:Spybot-S&D 2 Scanner Service ---------- | Dossiers | Fichiers ---------- | AdsFix | g3n-h@ckm@n | V4_22.10.17.3 ----- Vista | 7 | 8 | 8.1 | 10 - 32/64 bits ----- Start 09:07:18 - 23/10/2017 Mis a jour le : 22/10/2017 | 20.05 (GMT) par g3n-h@ckm@n Contact : http://www.sosvirus.net Assistance : http://www.sosvirus.net/forum-virus-securite.html Feedbacks : http://www.sosvirus.net/feedbacks-t75915.html Facebook : https://www.facebook.com/AdsFixAntiAdware C:\Users\sophie\Desktop\AdsFix.exe Boot: Normal boot [sophie (Administrator)] - [SOPHIE-PC] - (france [040C]) SID = S-1-5-21-1393878847-3825134562-3829623230-1000 || [736f70686965205e5e] PC : SAMSUNG ELECTRONICS CO., LTD. - R720 - Processor : X64 - 2094 - Intel(R) Core(TM)2 Duo CPU T6500 @ 2.10GHz Bios : Phoenix Technologies Ltd. - 09/21/2009 - V.01LT.M012.20090921.JIP CoreTemp : 48 C CPU #1 value:0 % CPU #2 value:0 % Total Overall CPU Usage value:0 % Systeme : Windows 7 Home Premium (32 bits) HomePremium Service Pack 1 Memoire RAM = Total (MB) : 3109 | Libre (MB) : 1946 Pagefile = Total (MB) : 6215 | Libre (MB) : 5099 Virtuelle = Total (MB) : 2097 | Libre (MB) : 1884 C:\ -> [Fixed] | [] | Total : 225.33 Go | Free : 188 Go -> NTFS [SATA] D:\ -> [Fixed] | [] | Total : 225.33 Go | Free : 213.7 Go -> NTFS [SATA] Sauvegarde du registre , pour restaurer : Cliquer sur Options & Restaurer le registre (C:\AdsFix\Save\Registry [23.10.2017 @ 09_07_12]) ou un element Restauration de fichiers ou dossiers supprimes par erreur : Cliquer sur Options & Restaurer Fichiers ou dossiers, Selectionner un element >> "Restaurer" ---------- | Mises a jour Windows Prochaine recherche : 2017-10-23 03:06:21 Windows Is Activated ---------- | Navigateurs IE : 9.0.8112.16737 (© Microsoft Corporation. Tous droits réservés.) FF : 56.0.1.6484 (©Firefox and Mozilla Developers; available under the MPL 2 license.) ---------- | Security (atcav : 0) FW : WMI : OK WU: Windows Update Service [Auto(2)] = en cours AS: Windows Defender [Manual(3)] = non en cours FW: Windows FireWall Service [Auto(2)] = en cours WMI: Windows Management Instrumentation (System Information) [Auto(2)] = en cours ---------- | FlashPlayer ---------- | Processes closed 3220 | [Owner : Système |Parent : 580(services.exe)] - (.ClanServers Hosting LLC - GSInGameService.) - (1.5.0.0) = C:\Program Files\GameTracker\GSInGameService.exe 1508 | [Owner : sophie |Parent : 956(taskeng.exe)] - (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) - (1.824.23.7067) = C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe ---------- | Tasks ---------- | Services ---------- | AppCertDlls | AppInit_DLLs ---------- | DNSapi.dll C:\windows\System32\dnsapi.dll : \drivers\etc\hosts ---------- | Hosts ---------- | SafeBoot ---------- | Winsock ---------- | DNS ---------- | Registre Suppression : HKLM\SOFTWARE\Classes\TuneUp.UtilitiesSvcTools : TuneUp Utilities Tools Suppression : [HKU\S-1-5-21-1393878847-3825134562-3829623230-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]~[DefaultScope] : {0633EE93-D776-472f-A0FF-E1416B8B2E3A} Suppression : [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders]~[C:\Program Files\EPSON Software\Download Navigator\_html\] [X] Suppression : [HKLM\SYSTEM\CurrentControlSet\Services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]~[C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe] : C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe:*:Enabled:Spybot-S&D 2 Background update service Suppression : [HKLM\SYSTEM\ControlSet002\Services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]~[C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe] : C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe:*:Enabled:Spybot-S&D 2 Background update service ---------- | Dossiers | Fichiers ---------- | AdsFix | g3n-h@ckm@n | V4_22.10.17.3 ----- Vista | 7 | 8 | 8.1 | 10 - 32/64 bits ----- Start 18:13:46 - 23/10/2017 Mis a jour le : 22/10/2017 | 20.05 (GMT) par g3n-h@ckm@n Contact : http://www.sosvirus.net Assistance : http://www.sosvirus.net/forum-virus-securite.html Feedbacks : http://www.sosvirus.net/feedbacks-t75915.html Facebook : https://www.facebook.com/AdsFixAntiAdware C:\Users\sophie\Desktop\AdsFix.exe Boot: Normal boot [sophie (Administrator)] - [SOPHIE-PC] - (francais [040C]) SID = S-1-5-21-1393878847-3825134562-3829623230-1000 || [736f70686965205e5e] PC : SAMSUNG ELECTRONICS CO., LTD. - R720 - Processor : X64 - 2094 - Intel(R) Core(TM)2 Duo CPU T6500 @ 2.10GHz Bios : Phoenix Technologies Ltd. - 09/21/2009 - V.01LT.M012.20090921.JIP CoreTemp : 47 C CPU #1 value:0 % CPU #2 value:0 % Total Overall CPU Usage value:0 % Systeme : Windows 7 Home Premium (32 bits) HomePremium Service Pack 1 Memoire RAM = Total (MB) : 3109 | Libre (MB) : 2216 Pagefile = Total (MB) : 6215 | Libre (MB) : 5241 Virtuelle = Total (MB) : 2097 | Libre (MB) : 1856 C:\ -> [Fixed] | [] | Total : 225.33 Go | Free : 188.2 Go -> NTFS [SATA] D:\ -> [Fixed] | [] | Total : 225.33 Go | Free : 213.7 Go -> NTFS [SATA] Sauvegarde du registre , pour restaurer : Cliquer sur Options & Restaurer le registre (C:\AdsFix\Save\Registry [23.10.2017 @ 18_13_39]) ou un element Restauration de fichiers ou dossiers supprimes par erreur : Cliquer sur Options & Restaurer Fichiers ou dossiers, Selectionner un element >> "Restaurer" ---------- | Mises a jour Windows Prochaine recherche : 2017-10-23 20:21:37 Windows Is Activated ---------- | Navigateurs IE : 9.0.8112.16737 (© Microsoft Corporation. Tous droits réservés.) FF : 56.0.1.6484 (©Firefox and Mozilla Developers; available under the MPL 2 license.) ---------- | Security (atcav : 0) AV : Avast Antivirus Disabled AS : Avast Antivirus Disabled FW : WMI : OK WU: Windows Update Service [Auto(2)] = en cours AS: Windows Defender [Manual(3)] = non en cours FW: Windows FireWall Service [Auto(2)] = en cours WMI: Windows Management Instrumentation (System Information) [Auto(2)] = en cours ---------- | FlashPlayer ---------- | Processes closed 936 | [Owner : Système |Parent : 576(services.exe)] - (.AMD - AMD External Events Service Module.) - (6.14.11.1122) = C:\Windows\System32\atiesrxx.exe 1432 | [Owner : Système |Parent : 936()] - (.AMD - AMD External Events Client Module.) - (6.14.11.1122) = C:\Windows\System32\atieclxx.exe 1960 | [Owner : Système |Parent : 576(services.exe)] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - (1.824.23.7067) = C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe 1996 | [Owner : Système |Parent : 576(services.exe)] - (.Adobe Systems, Incorporated - Adobe Genuine Software Integrity Service.) - (4.4.0.652) = C:\Program Files\Common Files\Adobe\AdobeGCClient\AGSService.exe 1700 | [Owner : Système |Parent : 576(services.exe)] - (.ClanServers Hosting LLC - GSInGameService.) - (1.5.0.0) = C:\Program Files\GameTracker\GSInGameService.exe 2904 | [Owner : sophie |Parent : 2384(taskeng.exe)] - (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) - (1.824.23.7067) = C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe ---------- | Tasks ---------- | Services ---------- | AppCertDlls | AppInit_DLLs ---------- | DNSapi.dll C:\windows\System32\dnsapi.dll : \drivers\etc\hosts ---------- | Hosts ---------- | SafeBoot ---------- | Winsock ---------- | DNS ---------- | Registre Suppression : HKU\S-1-5-21-1393878847-3825134562-3829623230-1000\SOFTWARE\Chromium ---------- | Dossiers | Fichiers ---------- | AdsFix | g3n-h@ckm@n | V4_22.10.17.3 ----- Vista | 7 | 8 | 8.1 | 10 - 32/64 bits ----- Start 17:43:01 - 26/10/2017 Mis a jour le : 22/10/2017 | 20.05 (GMT) par g3n-h@ckm@n Contact : http://www.sosvirus.net Assistance : http://www.sosvirus.net/forum-virus-securite.html Feedbacks : http://www.sosvirus.net/feedbacks-t75915.html Facebook : https://www.facebook.com/AdsFixAntiAdware C:\Users\sophie\Desktop\AdsFix.exe Boot: Normal boot [sophie (Administrator)] - [SOPHIE-PC] - (french [040C]) SID = S-1-5-21-1393878847-3825134562-3829623230-1000 || [736f70686965205e5e] PC : SAMSUNG ELECTRONICS CO., LTD. - R720 - Processor : X64 - 2094 - Intel(R) Core(TM)2 Duo CPU T6500 @ 2.10GHz Bios : Phoenix Technologies Ltd. - 09/21/2009 - V.01LT.M012.20090921.JIP CoreTemp : 37 C CPU #1 value:0 % CPU #2 value:0 % Total Overall CPU Usage value:0 % Systeme : Windows 7 Home Premium (32 bits) HomePremium Service Pack 1 Memoire RAM = Total (MB) : 3109 | Libre (MB) : 2006 Pagefile = Total (MB) : 6215 | Libre (MB) : 5174 Virtuelle = Total (MB) : 2097 | Libre (MB) : 1883 C:\ -> [Fixed] | [] | Total : 225.33 Go | Free : 187.72 Go -> NTFS [SATA] D:\ -> [Fixed] | [] | Total : 225.33 Go | Free : 213.7 Go -> NTFS [SATA] Sauvegarde du registre , pour restaurer : Cliquer sur Options & Restaurer le registre (C:\AdsFix\Save\Registry [26.10.2017 @ 17_42_53]) ou un element Restauration de fichiers ou dossiers supprimes par erreur : Cliquer sur Options & Restaurer Fichiers ou dossiers, Selectionner un element >> "Restaurer" ---------- | Mises a jour Windows Prochaine recherche : 2017-10-26 19:24:57 Windows Is Activated ---------- | Navigateurs IE : 9.0.8112.16737 (© Microsoft Corporation. Tous droits réservés.) FF : 56.0.1.6484 (©Firefox and Mozilla Developers; available under the MPL 2 license.) ---------- | Security (atcav : 3) FW : WMI : OK WU: Windows Update Service [Auto(2)] = en cours AS: Windows Defender [Manual(3)] = non en cours FW: Windows FireWall Service [Auto(2)] = en cours WMI: Windows Management Instrumentation (System Information) [Auto(2)] = en cours ---------- | FlashPlayer ---------- | Processes closed 936 | [Owner : Système |Parent : 584(services.exe)] - (.AMD - AMD External Events Service Module.) - (6.14.11.1122) = C:\Windows\System32\atiesrxx.exe 1312 | [Owner : Système |Parent : 936()] - (.AMD - AMD External Events Client Module.) - (6.14.11.1122) = C:\Windows\System32\atieclxx.exe 1940 | [Owner : Système |Parent : 584(services.exe)] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - (1.824.23.7067) = C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe 1968 | [Owner : Système |Parent : 584(services.exe)] - (.Adobe Systems, Incorporated - Adobe Genuine Software Integrity Service.) - (4.4.0.652) = C:\Program Files\Common Files\Adobe\AdobeGCClient\AGSService.exe 312 | [Owner : Système |Parent : 584(services.exe)] - (.ClanServers Hosting LLC - GSInGameService.) - (1.5.0.0) = C:\Program Files\GameTracker\GSInGameService.exe ---------- | Tasks ---------- | Services ---------- | AppCertDlls | AppInit_DLLs ---------- | DNSapi.dll C:\windows\System32\dnsapi.dll : \drivers\etc\hosts ---------- | Hosts ---------- | SafeBoot ---------- | Winsock ---------- | DNS ---------- | Registre ---------- | AdsFix | g3n-h@ckm@n | V4_22.10.17.3 ----- Vista | 7 | 8 | 8.1 | 10 - 32/64 bits ----- Start 14:17:28 - 28/10/2017 Mis a jour le : 22/10/2017 | 20.05 (GMT) par g3n-h@ckm@n Contact : http://www.sosvirus.net Assistance : http://www.sosvirus.net/forum-virus-securite.html Feedbacks : http://www.sosvirus.net/feedbacks-t75915.html Facebook : https://www.facebook.com/AdsFixAntiAdware C:\Users\sophie\Desktop\AdsFix.exe Boot: SafeMode [sophie (Administrator)] - [SOPHIE-PC] - (francais [040C]) SID = S-1-5-21-1393878847-3825134562-3829623230-1000 || [736f70686965205e5e] PC : SAMSUNG ELECTRONICS CO., LTD. - R720 - Processor : X64 - 2094 - Intel(R) Core(TM)2 Duo CPU T6500 @ 2.10GHz Bios : Phoenix Technologies Ltd. - 09/21/2009 - V.01LT.M012.20090921.JIP CoreTemp : 46 C CPU #1 value:0 % CPU #2 value:0 % Total Overall CPU Usage value:0 % Systeme : Windows 7 Home Premium (32 bits) HomePremium Service Pack 1 Memoire RAM = Total (MB) : 3109 | Libre (MB) : 2387 Pagefile = Total (MB) : 6215 | Libre (MB) : 5536 Virtuelle = Total (MB) : 2097 | Libre (MB) : 1902 C:\ -> [Fixed] | [] | Total : 225.33 Go | Free : 187.87 Go -> NTFS [SATA] D:\ -> [Fixed] | [] | Total : 225.33 Go | Free : 213.7 Go -> NTFS [SATA] Sauvegarde du registre , pour restaurer : Cliquer sur Options & Restaurer le registre (C:\AdsFix\Save\Registry [28.10.2017 @ 14_17_22]) ou un element Restauration de fichiers ou dossiers supprimes par erreur : Cliquer sur Options & Restaurer Fichiers ou dossiers, Selectionner un element >> "Restaurer" ---------- | Mises a jour Windows Prochaine recherche : 2017-10-27 20:24:10 ---------- | Navigateurs IE : 9.0.8112.16737 (© Microsoft Corporation. Tous droits réservés.) FF : 56.0.2.6506 (©Firefox and Mozilla Developers; available under the MPL 2 license.) ---------- | Security (atcav : 3) AV : Avast Antivirus Enabled AS : Avast Antivirus Enabled FW : WMI : OK WU: Windows Update Service [Auto(2)] = non en cours AS: Windows Defender [Manual(3)] = non en cours FW: Windows FireWall Service [Auto(2)] = non en cours WMI: Windows Management Instrumentation (System Information) [Auto(2)] = en cours ---------- | FlashPlayer ---------- | Processes closed 1572 | [Owner : sophie |Parent : 1040(explorer.exe)] - (.AVAST Software - Avast Antivirus.) - (17.7.3660.244) = C:\Program Files\AVAST Software\Avast\avastui.exe ---------- | Tasks ---------- | Services ---------- | AppCertDlls | AppInit_DLLs ---------- | DNSapi.dll C:\windows\System32\dnsapi.dll : \drivers\etc\hosts ---------- | Hosts ---------- | SafeBoot ---------- | Winsock ---------- | DNS ---------- | Registre Suppression : HKU\S-1-5-21-1393878847-3825134562-3829623230-1000\SOFTWARE\Chromium ---------- | Dossiers | Fichiers ---------- | AdsFix | g3n-h@ckm@n | V4_22.10.17.3 ----- Vista | 7 | 8 | 8.1 | 10 - 32/64 bits ----- Start 20:20:17 - 28/10/2017 Mis a jour le : 22/10/2017 | 20.05 (GMT) par g3n-h@ckm@n Contact : http://www.sosvirus.net Assistance : http://www.sosvirus.net/forum-virus-securite.html Feedbacks : http://www.sosvirus.net/feedbacks-t75915.html Facebook : https://www.facebook.com/AdsFixAntiAdware C:\Users\sophie\Desktop\AdsFix.exe Boot: SafeMode with network [sophie (Administrator)] - [SOPHIE-PC] - (francais [040C]) SID = S-1-5-21-1393878847-3825134562-3829623230-1000 || [736f70686965205e5e] PC : SAMSUNG ELECTRONICS CO., LTD. - R720 - Processor : X64 - 2094 - Intel(R) Core(TM)2 Duo CPU T6500 @ 2.10GHz Bios : Phoenix Technologies Ltd. - 09/21/2009 - V.01LT.M012.20090921.JIP CoreTemp : 50 C CPU #1 value:0 % CPU #2 value:0 % Total Overall CPU Usage value:0 % Systeme : Windows 7 Home Premium (32 bits) HomePremium Service Pack 1 Memoire RAM = Total (MB) : 3109 | Libre (MB) : 2546 Pagefile = Total (MB) : 6215 | Libre (MB) : 5730 Virtuelle = Total (MB) : 2097 | Libre (MB) : 1897 C:\ -> [Fixed] | [] | Total : 225.33 Go | Free : 187.88 Go -> NTFS [SATA] D:\ -> [Fixed] | [] | Total : 225.33 Go | Free : 213.7 Go -> NTFS [SATA] Sauvegarde du registre , pour restaurer : Cliquer sur Options & Restaurer le registre (C:\AdsFix\Save\Registry [28.10.2017 @ 20_20_10]) ou un element Restauration de fichiers ou dossiers supprimes par erreur : Cliquer sur Options & Restaurer Fichiers ou dossiers, Selectionner un element >> "Restaurer" ---------- | Mises a jour Windows Prochaine recherche : 2017-10-28 22:25:46 ---------- | Navigateurs IE : 9.0.8112.16737 (© Microsoft Corporation. Tous droits réservés.) FF : 56.0.2.6506 (©Firefox and Mozilla Developers; available under the MPL 2 license.) ---------- | Security (atcav : 3) AV : Avast Antivirus Enabled AS : Avast Antivirus Enabled FW : WMI : OK WU: Windows Update Service [Auto(2)] = non en cours AS: Windows Defender [Manual(3)] = non en cours FW: Windows FireWall Service [Auto(2)] = en cours WMI: Windows Management Instrumentation (System Information) [Auto(2)] = en cours ---------- | FlashPlayer ---------- | Processes closed 1112 | [Owner : sophie |Parent : 1420(explorer.exe)] - (.AVAST Software - Avast Antivirus.) - (17.7.3660.244) = C:\Program Files\AVAST Software\Avast\avastui.exe ---------- | Tasks ---------- | Services ---------- | AppCertDlls | AppInit_DLLs ---------- | DNSapi.dll C:\windows\System32\dnsapi.dll : \drivers\etc\hosts ---------- | Hosts ---------- | SafeBoot ---------- | Winsock ---------- | DNS ---------- | Registre Suppression : HKU\S-1-5-21-1393878847-3825134562-3829623230-1000\SOFTWARE\Chromium Suppression : [HKU\S-1-5-21-1393878847-3825134562-3829623230-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]~[DefaultScope] : {0633EE93-D776-472f-A0FF-E1416B8B2E3A} ---------- | Dossiers | Fichiers