~ Rapport de ZHPDiag v2015.3.5.26 - Nicolas Coolman (01/03/2015) ~ Lancé par Fabio (08/03/2015 00:32:35) ~ Facebook : https://www.facebook.com/nicolascoolman1 ~ Adresse du Forum http://forum.nicolascoolman.fr ~ Traduit par Nicolas Coolman ~ Etat de la version : Nouvelle version disponible ~ Liste blanche : Activée par le programme ~ Elévation des Privilèges : OK ~ User Account Control (UAC): ---\\ Navigateurs Internet MSIE: Internet Explorer v9.0.8112.16421 OPIE: Opera Stable v27.0.1689.76 (Defaut) ---\\ Informations sur les produits Windows ~ Langage: Français Windows Server License Manager Script : OK ~ Windows Operating System - Vista, OEM_SLP channel System Locked Preinstallation (OEM_SLP) : OK Windows ID Activation : OK ~ Windows Partial Key : 44MV3 Windows License : OK Windows Automatic Updates : OK Windows Vista (TM) Home Basic, 32-bit Service Pack 2 (Build 6002) ---\\ Logiciels de protection du système Spybot - Search & Destroy v1.6.2 ---\\ Logiciels d'optimisation du système CCleaner v4.04 ---\\ Logiciels de partage PeerToPeer ---\\ Surveillance de Logiciels Adobe Flash Player 16 NPAPI Adobe Reader X Java 7 Update 6 ---\\ Informations sur le système ~ Processor: x86 Family 17 Model 3 Stepping 1, AuthenticAMD ~ Operating System: 32 Bits Boot mode: Normal (Normal boot) Total RAM: 2812 MB (33% free) System Restore: Activé (Enable) System drive C: has 16 GB (10%) free of 149 GB ---\\ Mode de connexion au système ~ Computer Name: PC-DE-FABIO ~ User Name: Fabio ~ All Users Names: Fabio, Enculé, Adminsav, Administrateur, ~ Unselected Option: O45,O61,O62,O65,O66,O80,O82,O89 Logged in as Administrator ---\\ Variables d'environnement ~ System Unit : C:\ ~ %AppZHP% : C:\Users\Fabio\AppData\Roaming\ZHP\ ~ %AppData% : C:\Users\Fabio\AppData\Roaming\ ~ %Desktop% : C:\Users\Fabio\Desktop\ ~ %Favorites% : C:\Users\Fabio\Favorites\ ~ %LocalAppData% : C:\Users\Fabio\AppData\Local\ ~ %StartMenu% : C:\Users\Fabio\AppData\Roaming\Microsoft\Windows\Start Menu\ ~ %Windir% : C:\Windows\ ~ %System% : C:\Windows\System32\ ---\\ Enumération des unités disques C: Hard drive, Flash drive, Thumb drive (Free 16 Go of 149 Go) D: CD-ROM drive (Not Inserted) E: CD-ROM drive (Not Inserted) F: CD-ROM drive (Not Inserted) G: CD-ROM drive (Not Inserted) H: Floppy drive, Flash card reader, USB Key (Free 0 Go of 15 Go) ---\\ Etat du Centre de Sécurité Windows [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowPrinters: Modified [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : Out Of Date ~ Security Center: 42 Legitimates Filtered in 00mn 00s ---\\ Recherche particulière de fichiers génériques [MD5.D07D4C3038F3578FFCE1C0237F2A1253] - (.Microsoft Corporation - Explorateur Windows.) (.10/04/2009 - 22:27:38.) -- C:\Windows\Explorer.exe [2926592] [MD5.101BA3EA053480BB5D957EF37C06B5ED] - (.Microsoft Corporation - Application de démarrage de Windows.) (.21/01/2008 - 03:33:13.) -- C:\Windows\System32\Wininit.exe [96768] [MD5.6839F14A2507D9273BD13565DD880377] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.25/07/2013 - 03:26:10.) -- C:\Windows\System32\wininet.dll [1129472] [MD5.898E7C06A350D4A1A64A9EA264D55452] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.10/04/2009 - 22:28:14.) -- C:\Windows\System32\Winlogon.exe [314368] [MD5.3911B972B55FEA0478476B2E777B29FA] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.21/04/2011 - 14:58:27.) -- C:\Windows\system32\Drivers\AFD.sys [273408] [MD5.1F05B78AB91C9075565A9D8A4B880BC4] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.10/04/2009 - 22:32:28.) -- C:\Windows\system32\Drivers\atapi.sys [19944] [MD5.7ADD03E75BEB9E6DD102C3081D29840A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.21/01/2008 - 03:33:23.) -- C:\Windows\system32\Drivers\Cdfs.sys [70144] [MD5.6B4BFFB9BECD728097024276430DB314] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.10/04/2009 - 20:39:18.) -- C:\Windows\system32\Drivers\Cdrom.sys [67072] [MD5.622C41A07CA7E6DD91770F50D532CB6C] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.14/04/2011 - 15:59:03.) -- C:\Windows\system32\Drivers\DfsC.sys [75264] [MD5.062452B7FFD68C8C042A6261FE8DFF4A] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.10/04/2009 - 20:42:44.) -- C:\Windows\system32\Drivers\HDAudBus.sys [561152] [MD5.22D56C8184586B7A1F6FA60BE5F5A2BD] - (.Microsoft Corporation - Pilote de port i8042.) (.21/01/2008 - 03:32:45.) -- C:\Windows\system32\Drivers\i8042prt.sys [54784] [MD5.8793643A67B42CEC66490B2A0CF92D68] - (.Microsoft Corporation - IP Network Address Translator.) (.21/01/2008 - 03:34:06.) -- C:\Windows\system32\Drivers\IpNat.sys [100864] [MD5.1E94971C4B446AB2290DEB71D01CF0C2] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.29/04/2011 - 14:24:40.) -- C:\Windows\system32\Drivers\MRxSmb.sys [106496] [MD5.ECD64230A59CBD93C85F1CD1CAB9F3F6] - (.Microsoft Corporation - MBT Transport driver.) (.10/04/2009 - 20:45:38.) -- C:\Windows\system32\Drivers\netBT.sys [185856] [MD5.2C1121F2B87E9A6B12485DF53CD848C7] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.03/03/2013 - 20:07:52.) -- C:\Windows\system32\Drivers\ntfs.sys [1082232] [MD5.8A79FDF04A73428597E2CAF9D0D67850] - (.Microsoft Corporation - Pilote de port parallèle.) (.21/01/2008 - 03:32:22.) -- C:\Windows\system32\Drivers\Parport.sys [79360] [MD5.A214ADBAF4CB47DD2728859EF31F26B0] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.21/01/2008 - 03:34:44.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [76288] [MD5.FBC0BACD9C3D7F6956853F64A66E252D] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.21/01/2008 - 03:32:22.) -- C:\Windows\system32\Drivers\rdpdr.sys [248832] [MD5.7B75299A4D201D6A6533603D6914AB04] - (.Microsoft Corporation - SMB Transport driver.) (.10/04/2009 - 20:45:24.) -- C:\Windows\system32\Drivers\smb.sys [66560] [MD5.76B06EB8A01FC8624D699E7045303E54] - (.Microsoft Corporation - TDI Translation Driver.) (.10/04/2009 - 20:45:58.) -- C:\Windows\system32\Drivers\tdx.sys [72192] [MD5.786DB5771F05EF300390399F626BF30A] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.21/08/2012 - 12:47:42.) -- C:\Windows\system32\Drivers\volsnap.sys [224640] ~ Generic Processes: Scanned in 00mn 01s ---\\ Etat des fichiers cachés (Caché/Total) ~ Mes images (My Pictures) : 7/117 ~ Mes musiques (My Musics) : 57/441 ~ Mes Videos (My Videos) : 1/10 ~ Mes Favoris (My Favorites) : 1/24 ~ Mes Documents (My Documents) : 3/9928 ~ Mon Bureau (My Desktop) : 10/1221 ~ Menu demarrer (Programs) : 2/41 ~ Hidden Files: Scanned in 00mn 14s ---\\ Processus lancés [MD5.20CB286C4591EEA68778CA6626D70D47] - (.Synaptics Incorporated - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1791272] [PID.1508] [MD5.AFD15F701B550037FFDDE6B18171479D] - (.Analog Devices, Inc. - SMax4PNP.) -- C:\Program Files\Analog Devices\Core\smax4pnp.exe [1314816] [PID.1572] [MD5.10247055758850D4D0E9469322A93D42] - (.Synaptics Incorporated - Synaptics Pointing Device Helper.) -- C:\Program Files\Synaptics\SynTP\SynTPHelper.exe [103720] [PID.1972] [MD5.5D165F4948BD6B8D8663FD6106B53A1D] - (.Opera Software - Opera Internet Browser.) -- C:\Program Files\Opera\27.0.1689.76\opera.exe [51366008] [PID.1528] [MD5.DF085A41E6CC782F9A50377776207D25] - (...) -- C:\Program Files\Opera\27.0.1689.76\opera_crashreporter.exe [552056] [PID.2440] [MD5.4AE30CDE7CD3853809895914B23605A7] - (...) -- C:\Program Files\RomStation\RomStation.exe [1927168] [PID.552] [MD5.E62ED5A7A2F21C5F377F924A33E12792] - (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner.exe [3643160] [PID.2236] [MD5.31219D86E2F75A91E2CB2F981D193C0E] - (.Iminent - Iminent.) -- C:\Program Files\Iminent\Iminent.exe [445416] [PID.5616] =>Adware.IMBooster [MD5.BBA5F685CC03C5B4D43DC1EFB7ACC653] - (.Samsung Electronics Co., Ltd. - Kies TrayAgent Application.) -- C:\Program Files\Samsung\Kies\KiesTrayAgent.exe [3524536] [PID.4280] [MD5.6080A176D09435FC8E6E800996656E18] - (.Microsoft Corporation - Console IME.) -- C:\windows\system32\conime.exe [69120] [PID.3912] [MD5.331F2281EF2094D8A23AF219FD9E759A] - (.Samsung - Kies.) -- C:\Program Files\Samsung\Kies\Kies.exe [960440] [PID.5736] [MD5.35F8A4C2ED66BDDC29C961419DEF147D] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [8184320] [PID.5480] [MD5.96B2E3CB4F0E2D54E4D00FE43725F66F] - (.AuthenTec, Inc. - AFSS Service.) -- c:\Program Files\Fingerprint Sensor\AtService.exe [1185016] [PID.844] [MD5.E4ED5D392AA1135981B41A0826AE1379] - (.ATI Technologies Inc. - ATI External Event Utility EXE Module.) -- C:\windows\system32\Ati2evxx.exe [733184] [PID.908] [MD5.862BB4CBC05D80C5B45BE430E5EF872F] - (.Microsoft Corporation - Service de gestion des licences Microsoft.) -- C:\windows\system32\SLsvc.exe [3408896] [PID.1212] [MD5.C0BEB56ED79B59B7B33D0AA6C38A0BA6] - (.Hewlett-Packard Company - HpService.) -- C:\windows\system32\Hpservice.exe [26168] [PID.1368] [MD5.23C3A0680042C0D1DE1F360F8B62BC57] - (.Microsoft Corporation - Infrastructure d'extensibilité pour les ser.) -- C:\windows\system32\WLANExt.exe [74240] [PID.1776] [MD5.2E20D1A28D6B7759B0431AE6BFAE788F] - (.ActivIdentity - ActivIdentity Cache Server.) -- c:\Program Files\ActivIdentity\ActivClient\accoca.exe [185896] [PID.1964] [MD5.84E3A1046596D7BF2D002892FAA985DE] - (.ActivIdentity - ActivIdentity Event Service.) -- c:\Program Files\ActivIdentity\ActivClient\acevents.exe [93736] [PID.404] [MD5.4C72FDD915D62EAEF149BD9C73AB9CF4] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [81088] [PID.416] [MD5.4DC6B0772D1698F04FC79053A21C8260] - (.Andrea Electronics Corporation - Andrea filters APO access service (32-bit).) -- C:\windows\system32\AEADISRV.exe [90112] [PID.436] [MD5.9C9D3B7A05445B1AB2DF4D0C4D6B77E8] - (.Agere Systems - Agere Soft Modem Call Progress Service.) -- C:\Program Files\LSI SoftModem\agrsmsvc.exe [14336] [PID.604] [MD5.CFA09ACFE8C5CE0C4B7594F8B6575512] - (.Nuance Communications, Inc. - Dragon NaturallySpeaking Service.) -- C:\Program Files\Common Files\Nuance\dgnsvc.exe [310232] [PID.1652] [MD5.15AB846886C225FFF0376F3CEF21188F] - (.Teruten - FsUsbDevice.) -- C:\windows\system32\FsUsbExService.exe [233472] [PID.1076] [MD5.01D44146D21B4457CE5D158C74EB2921] - (.France Telecom SA - Orange Connection Kit.) -- C:\Program Files\Common Files\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe [69632] [PID.1348] [MD5.213822072085B5BBAD9AF30AB577D817] - (.InterVideo - RegMgr Module.) -- C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe [112152] [PID.2176] [MD5.3E3AC2BE7467EB3AFE1131154A886C6C] - (.PDF Complete Inc - Dispatcher.) -- C:\Program Files\PDF Complete\pdfsvc.exe [777240] [PID.2256] [MD5.A6A7AD767BF5141665F5C675F671B3E1] - (.Protexis Inc. - PsiService PsiService.) -- C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe [185632] [PID.2304] [MD5.AA9EF0B395097F24D289F64445B2FD2E] - (.Hewlett-Packard - HP Health Check Service.) -- c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [94208] [PID.4024] [MD5.1615458FB71003B4ED7AD1F26C3A4047] - (.Hewlett-Packard Company - LightScribe Service.) -- C:\Program Files\Common Files\LightScribe\LSSrvc.exe [79136] [PID.3040] [MD5.C7FBDD1ED42F82BFA35167A5C9803EA3] - (.Microsoft Corporation - PresentationFontCache.exe.) -- C:\windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe [43904] [PID.5828] ~ Processes Running: Scanned in 00mn 04s ---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4) R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.fr R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = preserve R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.msn.fr ~ IE Browser: 14 Legitimates Filtered in 00mn 00s ---\\ Internet Explorer, Proxy Management (R5) R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll ~ Proxy management: Scanned in 00mn 00s ---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe, F2 - REG:system.ini: Shell=C:\Windows\explorer.exe F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl" ~ Keys: Scanned in 00mn 00s ---\\ Hosts file redirection (O1) ~ Le fichier hôte est sain (The hosts file is clean) (15098) ~ Hosts File: Scanned in 00mn 22s ---\\ Browser Helper Objects de navigateur (O2) O2 - BHO: IObit Toolbar - {0BDA0769-FD72-49F4-9266-E1FB004F4D8F} . (.Spigot, Inc. - Widgi Toolbar for Internet Explorer.) -- C:\Program Files\IObit Toolbar\IE\7.0\iobitToolbarIE.dll =>PUP.Dealio O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\ConduitEngine\ConduitEngine.dll =>Toolbar.Conduit O2 - BHO: Groove GFS Browser Helper - {4DB74D06-491C-440D-305E-012400990F3E} . (...) -- C:\windows\system32\coomuid.dll O2 - BHO: IMinent WebBooster - {A09AB6EB-31B5-454C-97EC-9B294D92EE2A} . (.Iminent - Iminent BHO.) -- C:\Program Files\Iminent\Iminent.WebBooster.InternetExplorer.dll =>Adware.IMBooster ~ BHO: 22 Legitimates Filtered in 00mn 00s ---\\ Internet Explorer Toolbars (O3) O3 - Toolbar: (no name) - [HKLM]{0BF43445-2F28-4351-9252-17FE6E806AA0} Clé orpheline O3 - Toolbar: Conduit Engine - [HKLM]{30F9B915-B755-4826-820B-08FBA6BD249D} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\ConduitEngine\ConduitEngine.dll =>Toolbar.Conduit O3 - Toolbar: (no name) - [HKLM]{D4027C7F-154A-4066-A1AD-4243D8127440} Clé orpheline O3 - Toolbar: IObit Toolbar - [HKLM]{0BDA0769-FD72-49F4-9266-E1FB004F4D8F} . (.Spigot, Inc. - Widgi Toolbar for Internet Explorer.) -- C:\Program Files\IObit Toolbar\IE\7.0\iobitToolbarIE.dll =>PUP.Dealio O3 - Toolbar\WebBrowser: (no name) - [HKCU]{EF79F67A-6AD7-4715-A0F8-932FCA442023} Clé orpheline ~ Toolbar: Scanned in 00mn 00s ---\\ Applications lancées au démarrage du système (O4) O4 - HKLM\..\Run: [SynTPEnh] . (.Synaptics Incorporated - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe =>.Adobe Systems Incorporated O4 - HKLM\..\Run: [SoundMAXPnP] . (.Analog Devices, Inc. - SMax4PNP.) -- C:\Program Files\Analog Devices\Core\smax4pnp.exe O4 - HKLM\..\Run: [ORAHSSSessionManager] . (.France Telecom SA - Orange Connection Kit.) -- C:\Program Files\Orange\Connexion Internet Orange\SessionManager\SessionManager.exe O4 - HKCU\..\Run: [Google Update] Clé orpheline O4 - HKUS\.DEFAULT\..\Run: [Advanced SystemCare 6] C:\Program Files\IObit\Advanced SystemCare 6\ASCTray.exe (.not file.) O4 - HKUS\S-1-5-18\..\Run: [Advanced SystemCare 6] C:\Program Files\IObit\Advanced SystemCare 6\ASCTray.exe (.not file.) O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-20\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter O4 - HKUS\.DEFAULT\..\RunOnce: [FlashPlayerUpdate] C:\windows\system32\Macromed\Flash\FlashUtil32_11_7_700_224_ActiveX.exe (.not file.) O4 - HKUS\S-1-5-18\..\RunOnce: [FlashPlayerUpdate] C:\windows\system32\Macromed\Flash\FlashUtil32_11_7_700_224_ActiveX.exe (.not file.) O4 - HKUS\S-1-5-21-46301255-144469182-408411990-1020\..\Run: [Google Update] Clé orpheline ~ Application: Scanned in 00mn 00s ---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9) O9 - Extra button: @C:\Program Files\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} . (.Microsoft Corporation - Windows Live Messenger Companion core resources.) -- C:\Program Files\Windows Live\Companion\companionres.dll O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} . (.Microsoft Corporation - Windows Live Writer Blog This Extension.) -- C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (...) -- C:\Program Files\Microsoft Office\Office12\REFBARH.ICO O9 - Extra button: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} -- Clé orpheline ~ IE Extra Buttons: Scanned in 00mn 00s ---\\ Winsock hijacker (Layered Service Provider) (O10) O10 - Broken Internet access because of LSP provider (.not file.) -- mswsock.dll ~ Winsock: 6 Legitimates Filtered in 00mn 00s ---\\ Site dans la Zone de confiance d'Internet Explorer (O15) O15 - Trusted Zone: [HKCU\...\Domains\www] http.samsungsetup.com ~ IE Zone Confiance: Scanned in 00mn 01s ---\\ Protocole additionnel (O18) O18 - Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (.Microsoft Corporation - Windows Live Album Download Protocol Handle.) -- C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll O18 - Filter: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.dll =>.Microsoft Corporation ~ Protocole Additionnel: Scanned in 00mn 00s ---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22) O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\Windows\System32\browseui.dll ~ STS/SSO: Scanned in 00mn 00s ---\\ Liste des services NT non Microsoft et non désactivés (O23) O23 - Service: Google Update Service (gupdate) (‮etadpug) . (...) - C:\Program Files\Google\Desktop\Install\{68d51afc-81f9-043c-c299-9124f21ee9e9}\ \...\‮ﯹ๛\{68d51afc-81f9-043c-c299-9124f21ee9e9}\GoogleUpdate.exe (.not file.) ~ Services: 17 Legitimates Filtered in 00mn 05s ---\\ Logiciels installés (O42) O42 - Logiciel: BitLord 2.3 - (.House of Life.) [HKLM] -- BitLord =>Adware.WhenUSave O42 - Logiciel: Conduit Engine - (.Conduit Ltd..) [HKLM] -- conduitEngine =>Toolbar.Conduit O42 - Logiciel: Iminent - (.Iminent.) [HKLM] -- {4BD8E034-E0F4-4509-A753-467A8E854CD8} =>Adware.IMBooster O42 - Logiciel: W32Tran8x 4.1 - (...) [HKLM] -- W32Tran8x 4.1 ~ Logic: 11 Legitimates Filtered in 00mn 01s ---\\ HKCU & HKLM Software Keys [HKCU\Software\APN PIP] [HKCU\Software\FileScout] =>PUP.FileScout [HKCU\Software\Iminent] =>Adware.IMBooster [HKCU\Software\InstallCore] =>Adware.InstallCore [HKCU\Software\PIP] [HKCU\Software\Sami Khawam] [HKCU\Software\Search Settings] =>Adware.SearchSettings [HKCU\Software\Softonic] =>Toolbar.Conduit [HKCU\Software\StartSearch] =>PUP.StartSearch [HKCU\Software\YahooPartnerToolbar] [HKLM\Software\ActivCard] [HKLM\Software\Conduit] =>Toolbar.Conduit [HKLM\Software\GSC] [HKLM\Software\GamesBarSetup] =>Adware.GamesBar [HKLM\Software\Iminent] =>Adware.IMBooster [HKLM\Software\PIP] [HKLM\Software\Sami Khawam] [HKLM\Software\Search Settings] =>Adware.SearchSettings [HKLM\Software\Tarma Installer] =>PUP.Tarma ~ Key Software: 372 Legitimates Filtered in 00mn 01s ---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43) O43 - CFD: 16/05/2013 - 07:36:34 - [] ----D C:\Program Files\BitLord 2 =>Adware.WhenUSave O43 - CFD: 18/06/2011 - 18:32:48 - [] ----D C:\Program Files\ConduitEngine =>Toolbar.Conduit O43 - CFD: 24/12/2012 - 17:44:22 - [] ----D C:\Program Files\File Scout =>PUP.FileScout O43 - CFD: 10/05/2011 - 08:49:27 - [] ----D C:\Program Files\GamesBar =>Adware.GamesBar O43 - CFD: 04/04/2012 - 19:39:55 - [] ----D C:\Program Files\Iminent =>Adware.IMBooster O43 - CFD: 01/09/2012 - 18:05:19 - [] ----D C:\Program Files\W32Tran8x 4.1 O43 - CFD: 15/06/2012 - 12:06:59 - [] ----D C:\ProgramData\CR2007 O43 - CFD: 04/04/2012 - 19:40:18 - [] ----D C:\ProgramData\Iminent =>Adware.IMBooster O43 - CFD: 20/06/2012 - 11:12:16 - [] ----D C:\ProgramData\InstallMate =>PUP.Tarma O43 - CFD: 04/04/2012 - 19:39:02 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Iminent =>Adware.IMBooster O43 - CFD: 25/05/2013 - 11:18:44 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Razor 1911 O43 - CFD: 01/09/2012 - 18:38:26 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TI Tools O43 - CFD: 01/09/2012 - 18:04:25 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\W32Tran8x 4.1 O43 - CFD: 23/11/2013 - 19:17:38 - [] ----D C:\Users\Fabio\AppData\Roaming\BitLord =>Adware.WhenUSave O43 - CFD: 11/06/2013 - 14:13:35 - [] ----D C:\Users\Fabio\AppData\Roaming\File Scout =>PUP.FileScout O43 - CFD: 04/04/2012 - 19:40:51 - [] --H-D C:\Users\Fabio\AppData\Roaming\Iminent =>Adware.IMBooster O43 - CFD: 13/06/2013 - 13:13:33 - [] ----D C:\Users\Fabio\AppData\Roaming\ZombieGrinder O43 - CFD: 19/03/2012 - 07:51:41 - [] --H-D C:\Users\Fabio\AppData\Local\APN O43 - CFD: 23/01/2013 - 15:42:12 - [] ----D C:\Users\Fabio\AppData\Local\jetbitorrent O43 - CFD: 29/08/2012 - 14:40:09 - [] ----D C:\Users\Fabio\AppData\Local\vghd O43 - CFD: 09/07/2014 - 18:50:29 - [] --H-D C:\Users\Fabio\AppData\Local\{0AD09597-2EF2-47DA-992F-219A6B479790} O43 - CFD: 16/05/2013 - 07:36:34 - [] ----D C:\Users\Fabio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BitLord =>Adware.WhenUSave ~ 84 Dossier CLSID vide (CLSID Empty Folder) ~ Program Folder: 403 Legitimates Filtered in 00mn 03s ---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44) O44 - LFC:[MD5.1628EDF588DDF69761B80E1675B2580D] - 07/03/2015 - 18:21:45 --HA- . (...) -- C:\Windows\nss203F.tmp [478] ~ Files: 13 Legitimates Filtered in 00mn 03s ---\\ Clé de registre Shell MountPoints2 (MPSK) (O51) O51 - MPSK:{204ad3ca-bffa-11e2-9cd3-e837314d1338}\AutoRun\command. (...) -- E:\Autorun.exe (.not file.) O51 - MPSK:{58b566bb-c006-11e2-b30b-ff4b9b548b25}\AutoRun\command. (...) -- F:\INSTALL.exe (.not file.) ~ Keys: Scanned in 00mn 00s ---\\ Enumération des clés de registre StartupReg (SMSR) (O53) O53 - SMSR:HKLM\...\startupreg\BitTorrent [Key] . (...) -- C:\Program Files\BitTorrent\BitTorrent.exe (.not file.) =>P2P.BitTorrent O53 - SMSR:HKLM\...\startupreg\EA Core [Key] . (...) -- C:\Program Files\Electronic Arts\EADM\Core.exe (.not file.) O53 - SMSR:HKLM\...\startupreg\PDFPrint [Key] . (.Geek Software GmbH - PDF24 Creator.) -- C:\Program Files\PDF24\pdf24.exe ~ SMSR Keys: 31 Legitimates Filtered in 00mn 00s ---\\ Enumération des clés de registre PoliciesSystem (MWPS) (O55) O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0 O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0 ~ MWPS: 15 Legitimates Filtered in 00mn 00s ---\\ Enumération des clés de registre PoliciesExplorer (MWPE) (O56) O56 - MWPE:[HKLM\...\policies\Explorer] - "AllowLegacyWebView"=1 O56 - MWPE:[HKLM\...\policies\Explorer] - "AllowUnhashedWebView"=1 ~ MWPE Keys: 3 Legitimates Filtered in 00mn 00s ---\\ Liste des pilotes du système (SDL) (O58) O58 - SDL:18/05/2009 - 16:32:58 ---A- . (.Analog Devices, Inc. - High Definition Audio Function Driver.) -- C:\Windows\System32\Drivers\ADIHdAud.sys [381440] O58 - SDL:28/03/2012 - 21:11:02 ---A- . (.Devguru Co., Ltd - Device Error Recovery SDK(x86).) -- C:\Windows\System32\Drivers\dgderdrv.sys [20032] O58 - SDL:18/05/2013 - 22:45:26 ---A- . (.DT Soft Ltd - DAEMON Tools Virtual Bus Driver.) -- C:\Windows\System32\Drivers\dtsoftbus01.sys [242240] O58 - SDL:21/01/2008 - 03:32:48 ---A- . (.Emulex - Storport Miniport Driver for LightPulse HBAs.) -- C:\Windows\System32\Drivers\elxstor.sys [342584] O58 - SDL:02/11/2006 - 10:50:07 ---A- . (.Integrated Technology Express, Inc. - ITE IT8211 ATA/ATAPI SCSI miniport.) -- C:\Windows\System32\Drivers\iteatapi.sys [35944] O58 - SDL:02/11/2006 - 10:50:09 ---A- . (.Integrated Technology Express, Inc. - ITE IT8212 ATA RAID SCSI miniport.) -- C:\Windows\System32\Drivers\iteraid.sys [35944] O58 - SDL:09/10/2008 - 14:42:42 ---A- . (.Windows (R) Codename Longhorn DDK provider - KMWDFilter Driver from UASSOFT.COM.) -- C:\Windows\System32\Drivers\KMWDFILTER.sys [17408] O58 - SDL:20/07/2012 - 11:12:36 ---A- . (.ManyCam LLC - ManyCam Virtual Microphone.) -- C:\Windows\System32\Drivers\mcaudrv.sys [25088] O58 - SDL:20/07/2012 - 11:11:58 ---A- . (.ManyCam LLC - ManyCam Virtual Webcam.) -- C:\Windows\System32\Drivers\mcvidrv.sys [34432] O58 - SDL:18/05/2013 - 22:58:22 ---A- . (.Duplex Secure Ltd. - SCSI Pass Through Direct Host.) -- C:\Windows\System32\Drivers\sptd.sys [466008] O58 - SDL:04/06/2012 - 08:59:20 ---A- . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG USB Composite Device Driver (MSS Ver.3).) -- C:\Windows\System32\Drivers\ssudbus.sys [80824] O58 - SDL:04/06/2012 - 08:59:20 ---A- . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG Android Modem Device Driver (MSS Ver.3).) -- C:\Windows\System32\Drivers\ssudmdm.sys [181432] O58 - SDL:04/06/2012 - 08:59:20 ---A- . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG USB Mobile Logging Device Driver (MSS Ver.3).) -- C:\Windows\System32\Drivers\ssudserd.sys [181432] O58 - SDL:14/01/2013 - 11:26:00 ---A- . (.The OpenVPN Project - TAP-Windows Virtual Network Driver.) -- C:\Windows\System32\Drivers\tap0901.sys [31360] O58 - SDL:21/01/2008 - 03:32:45 ---A- . (.ULi Electronics Inc. - ULi SATA Controller Driver.) -- C:\Windows\System32\Drivers\uliahci.sys [238648] O58 - SDL:02/11/2006 - 10:50:35 ---A- . (.Promise Technology, Inc. - Promise Ultra/Sata Series Driver for Win2003.) -- C:\Windows\System32\Drivers\ulsata.sys [98408] O58 - SDL:21/01/2008 - 03:32:49 ---A- . (.Promise Technology, Inc. - Promise SATAII150 Series Windows Drivers.) -- C:\Windows\System32\Drivers\ulsata2.sys [115816] O58 - SDL:02/05/2008 - 09:58:14 ---A- . (.Windows (R) Codename Longhorn DDK provider - Filter Driver for the Toaster Stack.) -- C:\Windows\System32\Drivers\usbser_lowerflt.sys [8064] O58 - SDL:02/05/2008 - 09:58:28 ---A- . (.Windows (R) Codename Longhorn DDK provider - Filter Driver for the Toaster Stack.) -- C:\Windows\System32\Drivers\usbser_lowerfltj.sys [8064] O58 - SDL:02/11/2006 - 08:09:42 ---A- . (...) -- C:\Windows\System32\ANSI.SYS [9029] O58 - SDL:02/11/2006 - 08:09:45 ---A- . (...) -- C:\Windows\System32\country.sys [27097] O58 - SDL:24/06/2010 - 14:00:14 ---A- . (...) -- C:\Windows\System32\FsUsbExDisk.Sys [36608] O58 - SDL:02/11/2006 - 08:09:41 ---A- . (...) -- C:\Windows\System32\HIMEM.SYS [4768] O58 - SDL:02/11/2006 - 08:09:44 ---A- . (...) -- C:\Windows\System32\KEY01.SYS [42809] O58 - SDL:02/11/2006 - 08:09:44 ---A- . (...) -- C:\Windows\System32\KEYBOARD.SYS [42537] O58 - SDL:02/11/2006 - 08:09:29 ---A- . (...) -- C:\Windows\System32\NTDOS.SYS [27866] O58 - SDL:02/11/2006 - 08:09:35 ---A- . (...) -- C:\Windows\System32\NTDOS404.SYS [29146] O58 - SDL:02/11/2006 - 08:09:38 ---A- . (...) -- C:\Windows\System32\NTDOS411.SYS [29370] O58 - SDL:02/11/2006 - 08:09:40 ---A- . (...) -- C:\Windows\System32\NTDOS412.SYS [29274] O58 - SDL:02/11/2006 - 08:09:31 ---A- . (...) -- C:\Windows\System32\NTDOS804.SYS [29146] O58 - SDL:02/11/2006 - 08:09:20 ---A- . (...) -- C:\Windows\System32\NTIO.SYS [33952] O58 - SDL:02/11/2006 - 08:09:23 ---A- . (...) -- C:\Windows\System32\NTIO404.SYS [34672] O58 - SDL:02/11/2006 - 08:09:24 ---A- . (...) -- C:\Windows\System32\NTIO411.SYS [35776] O58 - SDL:02/11/2006 - 08:09:26 ---A- . (...) -- C:\Windows\System32\NTIO412.SYS [35536] O58 - SDL:02/11/2006 - 08:09:22 ---A- . (...) -- C:\Windows\System32\NTIO804.SYS [34672] ~ Drivers: 93 Legitimates Filtered in 00mn 05s ---\\ Liste des outils de désinfection (LATC) (O63) O63 - Logiciel: ZHPDiag 2015 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 =>.Nicolas Coolman ~ ADS: Scanned in 00mn 00s ---\\ Liste les services legacy du registre (LALS) (O64) O64 - Services: CurCS - 21/01/2008 - C:\Windows\System32\drivers\vsmraid.sys (vsmraid) .(.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) - LEGACY_VSMRAID ~ Legacy: 147 Legitimates Filtered in 00mn 00s ---\\ Associations Shell Spawning (O67) O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Opera Software - Opera Internet Browser.) -- C:\Program Files\Opera\Launcher.exe O67 - Shell Spawning: <.html> [HKCU\..\open\Command] (.Opera Software - Opera Internet Browser.) -- C:\Program Files\Opera\Launcher.exe ~ FASS Keys: 11 Legitimates Filtered in 00mn 00s ---\\ Menu de démarrage Internet (SMI) (O68) O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Performersoft LLC - Jet.) -- C:\Users\Fabio\AppData\Local\Performersoft\Application\jet.exe =>PUP.PerformerSoft O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Opera Software - Opera Internet Browser.) -- C:\Program Files\Opera\Launcher.exe ~ Keys: Scanned in 00mn 00s ---\\ Recherche d'infection sur les navigateurs internet (SBI) (O69) O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - () - http://search.live.com O69 - SBI: SearchScopes [HKCU] {0689F850-A4CE-4E27-BA07-EC4D8D39FAEF} [DefaultScope] - (Search The Web (privitize)) - http://searchou.com =>Adware.IMBooster O69 - SBI: SearchScopes [HKCU] {1F096B29-E9DA-4D64-8D63-936BE7762CC5} - (Search the web (Babylon)) - http://search.babylon.com =>PUP.Babylon O69 - SBI: SearchScopes [HKCU] {2E62321F-CB5F-492C-A81D-3788D1A5D207} - (Yahoo! Search) - http://fr.search.yahoo.com O69 - SBI: SearchScopes [HKCU] {86F919B3-5890-4479-A1EE-6FA06023C71B} - (Google) - http://www.google.com O69 - SBI: SearchScopes [HKCU] {BFFED5CA-8BDF-47CC-AED0-23F4E6D77732} - (SearchTheWeb) - http://search.iminent.com =>Adware.IMBooster ~ Keys: Scanned in 00mn 00s ---\\ Recherche dans la clé de registre Feature Controls (IFC) (O81) O81 - IFC: Internet Feature Controls [HKUS\.DEFAULT] [FEATURE_BROWSER_EMULATION] -- svchost.exe =>Rootkit.TDSS O81 - IFC: Internet Feature Controls [HKUS\S-1-5-18] [FEATURE_BROWSER_EMULATION] -- svchost.exe =>Rootkit.TDSS ~ Keys: Scanned in 00mn 00s ---\\ Recherche particulière à la racine du système (SPRF) (O84) [MD5.0641A46F1E58529A42EAD4573A3A0861] [SPRF][22/04/2011] (...) -- C:\ProgramData\BD61E308AC.sys [8] [MD5.D56930E8A7EE2B6E5BA08E167D27D085] [SPRF][23/05/2012] (...) -- C:\ProgramData\KGyGaAvL.sys [2828] [MD5.A9BDABD0D4E9D054FE534DB3A770E5DA] [SPRF][17/12/2004] (.None - VisualBoyAdvance emulator.) -- C:\Users\Fabio\Desktop\VisualBoyAdvance.exe [1306764] ~ Files: 3 Legitimates Filtered in 00mn 00s ---\\ Enumère les codes produits des logiciels (PUC) (O90) O90 - PUC: "430E8DB44F0E90547A3564A7E858C48D" . (.Iminent.) -- C:\windows\Installer\{4BD8E034-E0F4-4509-A753-467A8E854CD8}\imbooster.ico =>Adware.IMBooster O90 - PUC: "7B4E008375439D242BD2C2ABAADE0F1A" . (.IObit Toolbar v7.0.) -- C:\windows\Installer\{3800E4B7-3457-42D9-B22D-2CBAAAEDF0A1}\ARPPRODUCTICON.exe =>PUP.Dealio ~ Update Products: 2 Legitimates Filtered in 00mn 00s ---\\ Recherche des packages WindowsInstaller (WIS) (O93) (NTFS) [MD5.FEA7DA12468999C349BDBE21FCC0F7C1] [WIS][04/04/2012] (.Iminent - Iminent.) -- C:\Windows\Installer\235e0bc.msi [1476608] =>Adware.IMBooster [MD5.4D46C4EB5DECDBD1C30788C1B569B37D] [WIS][21/04/2013] (.Spigot, Inc. - Widgi Toolbar.) -- C:\Windows\Installer\68b88.msi [1432064] =>PUP.Dealio ~ WIS: 2 Legitimates Filtered in 00mn 05s ---\\ Recherche de clés de registre CLSID (O101) [HKCR\CLSID\{01A602A0-D0B9-445B-8081-719E4177C4A7}] (Iminent.Mediator.Communication.DataContracts.ShowControlCenterCommand) =>Adware.IMBooster [HKCR\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}] (Iminent.Mediator.Communication.MediatorServiceProxy) =>Adware.IMBooster [HKCR\CLSID\{02C9C7B0-C7C8-4AAC-A9E4-55295BF60F8F}] (Iminent.Mediator.Communication.DataContracts.GetLoginStatusCommand) =>Adware.IMBooster [HKCR\CLSID\{0398B101-6DA7-473F-A290-17D2FBC88CC0}] (Iminent.Mediator.Communication.DataContracts.CheckLoginStatusCommand) =>Adware.IMBooster [HKCR\CLSID\{0BDA0769-FD72-49F4-9266-E1FB004F4D8F}] (IObit Toolbar) =>PUP.Dealio [HKCR\CLSID\{0CC36196-8589-4B80-A771-D659411D7F90}] (Iminent.Mediator.Communication.DataContracts.GetCreditCommand) =>Adware.IMBooster [HKCR\CLSID\{143D96F9-EB64-48B3-B192-91C2C41A1F43}] (Iminent.Mediator.Communication.ServerResult) =>Adware.IMBooster [HKCR\CLSID\{14F7D91F-F669-45C9-9F42-BACBFDB86EAD}] (Iminent.Mediator.LightContent) =>Adware.IMBooster [HKCR\CLSID\{187A6488-6E71-4A2A-B118-7BEFBFE58257}] (Iminent.Mediator.Communication.DataContracts.GetVariableCommand) =>Adware.IMBooster [HKCR\CLSID\{2D065204-A024-4C39-8A38-EE7078EC7ACF}] (Iminent.Mediator.Communication.DataContracts.SetVariableCommand) =>Adware.IMBooster [HKCR\CLSID\{30F5476C-677B-4DB0-B397-51F5BFD86840}] (Iminent.Mediator.Communication.DataContracts.GetInstallationContextCommand) =>Adware.IMBooster [HKCR\CLSID\{351798B1-C1D2-45AB-92B4-4D6C2D6AB5AF}] (Iminent.Mediator.Communication.DataContracts.PlayContentCommand) =>Adware.IMBooster [HKCR\CLSID\{3AEA1BEF-6195-46F4-ACA2-0ED14F7EFA1B}] (Iminent.Mediator.Communication.DataContracts.LoadContentCommandResult) =>Adware.IMBooster [HKCR\CLSID\{3D7F9AC3-BAC3-4E51-81D7-D121D79E550A}] (Iminent.Mediator.Communication.ContractBase) =>Adware.IMBooster [HKCR\CLSID\{4498C5E9-93C6-4142-B6BE-F0C6DC48B77A}] (Iminent.Mediator.Communication.DataContracts.LoadContentCommand) =>Adware.IMBooster [HKCR\CLSID\{479BF2D6-E362-4A99-B1AB-BC764D7B97AE}] (Iminent.Business.Tinyfying.ViralLinkArgs) =>Adware.IMBooster [HKCR\CLSID\{492A108F-51D0-4BD8-899D-AD4AB2893064}] (Iminent.Mediator.Communication.DataContracts.PostContentCallback) =>Adware.IMBooster [HKCR\CLSID\{4B6D6E60-FBD2-4E79-BF4B-886BC98F1797}] (Iminent.Business.Tinyfying.TinyUrlArgs) =>Adware.IMBooster [HKCR\CLSID\{60893E02-2E5B-43F9-A93A-BAD60C2DF6EF}] (Iminent.Mediator.Communication.DataContracts.WarmUpCommand) =>Adware.IMBooster [HKCR\CLSID\{6D39931F-451E-4BDD-BAF4-37FB96DBBA5D}] (Iminent.Mediator.Communication.DataContracts.RecycleViewsCommand) =>Adware.IMBooster [HKCR\CLSID\{76C684D2-C35D-4284-976A-D862F53ADB81}] (Iminent.Mediator.Communication.ServerCommand) =>Adware.IMBooster [HKCR\CLSID\{796D822A-C3F9-4A97-BAAB-42FE7628EA63}] (Iminent.Business.Tinyfying.LinkToPromoteArgs) =>Adware.IMBooster [HKCR\CLSID\{79EF3691-EC1A-4705-A01A-D2E36EC11758}] (Iminent.Mediator.Communication.DataContracts.ShowPluginWindowCommand) =>Adware.IMBooster [HKCR\CLSID\{82F41418-8E64-47EB-A7F1-4702A974D289}] (Iminent.Mediator.Communication.DataContracts.LogoutCommand) =>Adware.IMBooster [HKCR\CLSID\{85D920CE-63A7-46DC-8992-41D1D2E07FAD}] (Iminent.Mediator.Communication.DataContracts.LoginCommand) =>Adware.IMBooster [HKCR\CLSID\{895ED5E8-ABB4-40C3-A0CA-2571964268E2}] (Iminent.Mediator.Communication.ClientCallback) =>Adware.IMBooster [HKCR\CLSID\{8AAC123A-1959-4A45-BFC5-E2D50783098A}] (Iminent.Mediator.Communication.DataContracts.WelcomeCommand) =>Adware.IMBooster [HKCR\CLSID\{A07956CD-81F8-4A03-B524-5D87E690DC83}] (Iminent.Mediator.Communication.DataContracts.MyAccountCommand) =>Adware.IMBooster [HKCR\CLSID\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}] (IMinent WebBooster (BHO)) =>Adware.IMBooster [HKCR\CLSID\{B5E3B26B-6E5C-4865-A63D-58D04B10E245}] (Iminent.Mediator.Communication.DataContracts.InstallationContextResult) =>Adware.IMBooster [HKCR\CLSID\{B84D2DC5-42B2-4E5E-BF61-7B48152FF8EF}] (Iminent.Mediator.Communication.DataContracts.ShowBrowserWindowCommand) =>Adware.IMBooster [HKCR\CLSID\{B89D5309-0367-4494-A92F-3D4C94F88307}] (Iminent.Mediator.Communication.DataContracts.UserContentChangedCallback) =>Adware.IMBooster [HKCR\CLSID\{C014EBF8-8854-448B-B5A4-557C4090EDCE}] (Iminent.Mediator.Communication.DataContracts.GetVariableResult) =>Adware.IMBooster [HKCR\CLSID\{C31191DB-2F64-464C-B97C-6AC81ACB7AAC}] (Iminent.Mediator.Communication.DataContracts.GameOverCallback) =>Adware.IMBooster [HKCR\CLSID\{C342C7A7-F622-4EF3-8B7F-ABB9FBE73F14}] (Iminent.Mediator.Communication.DataContracts.VariableChangedCallback) =>Adware.IMBooster [HKCR\CLSID\{C4765B07-BC2F-477B-925C-B2BF24887823}] (Iminent.Mediator.Communication.DataContracts.LoginStatusChangedCallback) =>Adware.IMBooster [HKCR\CLSID\{C875C0A1-09E3-48D5-9F8E-BD337796FD14}] (Iminent.Business.Tinyfying.RawDataArgs) =>Adware.IMBooster [HKCR\CLSID\{CD126DA6-FF5B-4181-AC13-54A62240D2FA}] (Iminent.Mediator.Communication.DataContracts.CleanCacheCommand) =>Adware.IMBooster [HKCR\CLSID\{DD438708-AAB4-422D-A322-B619589F5680}] (Iminent.Business.Tinyfying.DownloadArgs) =>Adware.IMBooster [HKCR\CLSID\{E812AE43-7799-4E67-8CF8-4104297A2D16}] (Iminent.Mediator.Communication.DataContracts.MergeIdentityCommand) =>Adware.IMBooster [HKCR\CLSID\{F0BAAEC7-9AE0-49FF-9C4B-86E774FF397F}] (Iminent.Mediator.LightUri) =>Adware.IMBooster [HKCR\CLSID\{F92193FD-2243-4401-9ACC-49FF30885898}] (Iminent.Mediator.Communication.DataContracts.AddToUserContentCommand) =>Adware.IMBooster [HKCR\CLSID\{FD21B8A2-910B-45AC-9C10-45E6A8B84984}] (Iminent.Mediator.Communication.DataContracts.GetLoginStatusResult) =>Adware.IMBooster ~ BCK: 6857 Legitimates Filtered in 00mn 27s ---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped) SS - | Demand 07/03/2015 267440 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe SS - | Demand 05/12/2008 222512 | (Com4QLBEx) . (.Hewlett-Packard Development Company, L.P..) - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe SS - | Demand 09/05/2011 136120 | (gusvc) . (.Google.) - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe SS - | Demand 23/10/2008 223232 | (hpqwmiex) . (.Hewlett-Packard Development Company, L.P..) - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe SS - | Demand 03/04/2005 69632 | (IDriverT) . (.Macrovision Corporation.) - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe SS - | Demand 07/12/2010 3979632 | (npggsvc) . (.INCA Internet Co., Ltd..) - C:\windows\system32\GameMon.des SS - | Demand 08/04/2008 1112560 | (RoxMediaDB10) . (.Sonic Solutions.) - c:\Program Files\Common Files\Roxio Shared\10.0\SharedCOM\RoxMediaDB10.exe SS - | Auto 26/01/2009 1153368 | (SBSDWSCService) . (.Safer Networking Ltd..) - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe SS - | Auto 23/10/2013 172192 | (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files\Skype\Updater\Updater.exe SS - | Demand 24/03/2008 74384 | (stllssvr) . (.MicroVision Development, Inc..) - c:\Program Files\Common Files\SureThing Shared\stllssvr.exe SS - | Auto 22/07/1658 0 | (‮etadpug) . (...) - C:\Program Files\Google\Desktop\Install\{68d51afc-81f9-043c-c299-9124f21ee9e9}\ \...\‮ﯹ๛\{68d51afc-81f9-043c-c299-9124f21ee9e9}\GoogleUpdate.exe SR - | Auto 28/11/2007 185896 | (accoca) . (.ActivIdentity.) - c:\Program Files\ActivIdentity\ActivClient\accoca.exe SR - | Auto 03/12/2014 81088 | (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe SR - | Auto 15/07/2008 90112 | (AEADIFilters) . (.Andrea Electronics Corporation.) - C:\Windows\System32\AEADISRV.exe SR - | Auto 26/08/2008 14336 | (AgereModemAudio) . (.Agere Systems.) - C:\Program Files\LSI SoftModem\agrsmsvc.exe SR - | Auto 10/03/2009 733184 | (Ati External Event Utility) . (.ATI Technologies Inc..) - C:\Windows\System32\Ati2evxx.exe SR - | Auto 03/10/2008 1185016 | (ATService) . (.AuthenTec, Inc..) - c:\Program Files\Fingerprint Sensor\AtService.exe SR - | Auto 14/08/2012 310232 | (DragonSvc) . (.Nuance Communications, Inc..) - C:\Program Files\Common Files\Nuance\dgnsvc.exe SR - | Auto 24/06/2010 233472 | (FsUsbExService) . (.Teruten.) - C:\windows\system32\FsUsbExService.exe SR - | Auto 03/03/2010 69632 | C:\Program Files\COMMON~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe (FTRTSVC) . (.France Telecom SA.) - C:\Program Files\Common Files\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe SR - | Auto 04/12/2008 94208 | (HP Health Check Service) . (.Hewlett-Packard.) - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe SR - | Auto 13/05/2011 26168 | (hpsrv) . (.Hewlett-Packard Company.) - C:\Windows\System32\Hpservice.exe SR - | Auto 04/01/2007 112152 | (IviRegMgr) . (.InterVideo.) - C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe SR - | Auto 10/01/2009 79136 | (LightScribeService) . (.Hewlett-Packard Company.) - C:\Program Files\Common Files\LightScribe\LSSrvc.exe SR - | Auto 08/08/2008 777240 | (pdfcDispatcher) . (.PDF Complete Inc.) - C:\Program Files\PDF Complete\pdfsvc.exe SR - | Auto 24/07/2007 185632 | (PSI_SVC_2) . (.Protexis Inc..) - C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe ~ Services: Scanned in 00mn 28s ---\\ Liste des émulateurs de CD/DVD (MBR Hook) O58 - SDL:18/05/2013 - 22:58:22 ---A- . (.Duplex Secure Ltd. - SCSI Pass Through Direct Host.) -- C:\Windows\System32\Drivers\sptd.sys [466008] ~ Emulateurs: Scanned in 00mn 28s ---\\ Scan Additionnel (O88) Database Version : 13008 - (01/03/2015) Clés trouvées (Keys found) : 239 Valeurs trouvées (Values found) : 1 Dossiers trouvés (Folders found) : 18 Fichiers trouvés (Files found) : 48 [HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0BDA0769-FD72-49F4-9266-E1FB004F4D8F}] =>PUP.Dealio^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}] =>Toolbar.Conduit^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}] =>Adware.IMBooster^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\BitLord] =>Adware.WhenUSave^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\conduitEngine] =>Toolbar.Conduit^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{4BD8E034-E0F4-4509-A753-467A8E854CD8}] =>Adware.IMBooster^ [HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\BitTorrent] =>P2P.BitTorrent^ [HKLM\Software\Classes\AppID\{01994268-3C10-4044-A1EA-7A9C1B739A11}] =>Adware.IMBooster [HKLM\Software\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}] =>PUP.Funmoods [HKLM\Software\Classes\CLSID\{01A602A0-D0B9-445B-8081-719E4177C4A7}] =>Adware.IMBooster [HKLM\Software\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}] =>Adware.Agent [HKLM\Software\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}] =>Adware.IMBooster [HKLM\Software\Classes\CLSID\{02C9C7B0-C7C8-4AAC-A9E4-55295BF60F8F}] =>Adware.IMBooster [HKLM\Software\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}] =>Adware.IMBooster [HKLM\Software\Classes\CLSID\{0398B101-6DA7-473F-A290-17D2FBC88CC0}] =>Adware.IMBooster [HKLM\Software\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}] =>Adware.IMBooster [HKLM\Software\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}] =>Adware.IMBooster [HKLM\Software\Classes\CLSID\{0CC36196-8589-4B80-A771-D659411D7F90}] =>Adware.IMBooster [HKLM\Software\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}] =>PUP.RewardsArcade [HKLM\Software\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}] =>Toolbar.Agent [HKLM\Software\Classes\CLSID\{143D96F9-EB64-48B3-B192-91C2C41A1F43}] =>Adware.IMBooster [HKLM\Software\Classes\CLSID\{14F7D91F-F669-45C9-9F42-BACBFDB86EAD}] =>Adware.IMBooster [HKLM\Software\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}] =>PUP.RewardsArcade [HKLM\Software\Classes\CLSID\{187A6488-6E71-4A2A-B118-7BEFBFE58257}] =>Adware.IMBooster [HKLM\Software\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}] =>PUP.RewardsArcade [HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{1F096B29-E9DA-4D64-8D63-936BE7762CC5}] =>PUP.Babylon [HKLM\Software\Classes\CLSID\{26C9BBE4-6D45-4AB6-A5B4-E068C9F5EF6D}] =>Adware.IMBooster [HKLM\Software\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}] =>PUP.RewardsArcade [HKLM\Software\Classes\TypeLib\{2BF2028E-3F3C-4C05-AB45-B2F1DCFE0759}] =>PUP.RewardsArcade [HKLM\Software\Classes\CLSID\{2D065204-A024-4C39-8A38-EE7078EC7ACF}] =>Adware.IMBooster [HKLM\Software\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}] =>PUP.RewardsArcade [HKLM\Software\Classes\CLSID\{30F5476C-677B-4DB0-B397-51F5BFD86840}] =>Adware.IMBooster [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{30F9B915-B755-4826-820B-08FBA6BD249D}] =>Toolbar.Conduit [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{30F9B915-B755-4826-820B-08FBA6BD249D}] =>Toolbar.Conduit [HKLM\Software\Classes\CLSID\{30F9B915-B755-4826-820B-08FBA6BD249D}] =>Toolbar.Conduit [HKLM\Software\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}] =>PUP.RewardsArcade [HKLM\Software\Classes\CLSID\{351798B1-C1D2-45AB-92B4-4D6C2D6AB5AF}] =>Adware.IMBooster [HKLM\Software\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}] =>PUP.RewardsArcade [HKLM\Software\Classes\CLSID\{3AEA1BEF-6195-46F4-ACA2-0ED14F7EFA1B}] =>Adware.IMBooster [HKLM\Software\Classes\CLSID\{3D7F9AC3-BAC3-4E51-81D7-D121D79E550A}] =>Adware.IMBooster [HKLM\Software\Classes\CLSID\{4498C5E9-93C6-4142-B6BE-F0C6DC48B77A}] =>Adware.IMBooster [HKLM\Software\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}] =>PUP.RewardsArcade [HKLM\Software\Classes\CLSID\{479BF2D6-E362-4A99-B1AB-BC764D7B97AE}] =>Adware.IMBooster [HKLM\Software\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}] =>PUP.RewardsArcade [HKLM\Software\Classes\CLSID\{492A108F-51D0-4BD8-899D-AD4AB2893064}] =>Adware.IMBooster [HKLM\Software\Classes\CLSID\{4B6D6E60-FBD2-4E79-BF4B-886BC98F1797}] =>Adware.IMBooster [HKLM\Software\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}] =>PUP.RewardsArcade [HKLM\Software\Classes\CLSID\{5C176BA0-6FC0-4EBD-8ACF-24AC592506B6}] =>Adware.IMBooster [HKLM\Software\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}] =>PUP.RewardsArcade [HKLM\Software\Classes\CLSID\{60893E02-2E5B-43F9-A93A-BAD60C2DF6EF}] =>Adware.IMBooster [HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291}] =>Adware.SocialSkinz [HKLM\Software\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}] =>PUP.RewardsArcade [HKLM\Software\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}] =>PUP.Whitesmoke [HKLM\Software\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}] =>PUP.Whitesmoke [HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199}] =>Adware.IMBooster [HKLM\Software\Classes\CLSID\{6D39931F-451E-4BDD-BAF4-37FB96DBBA5D}] =>Adware.IMBooster [HKLM\Software\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}] =>PUP.RewardsArcade [HKLM\Software\Classes\CLSID\{76C684D2-C35D-4284-976A-D862F53ADB81}] =>Adware.IMBooster [HKLM\Software\Classes\CLSID\{796D822A-C3F9-4A97-BAAB-42FE7628EA63}] =>Adware.IMBooster [HKLM\Software\Classes\CLSID\{79EF3691-EC1A-4705-A01A-D2E36EC11758}] =>Adware.IMBooster [HKLM\Software\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}] =>PUP.RewardsArcade [HKLM\Software\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}] =>PUP.Babylon [HKLM\Software\Classes\CLSID\{82F41418-8E64-47EB-A7F1-4702A974D289}] =>Adware.IMBooster [HKLM\Software\Classes\CLSID\{85D920CE-63A7-46DC-8992-41D1D2E07FAD}] =>Adware.IMBooster [HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{86D4B82A-ABED-442A-BE86-96357B70F4FE}] =>Toolbar.Ask [HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}] =>Adware.Yontoo [HKLM\Software\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}] =>PUP.RewardsArcade [HKLM\Software\Classes\CLSID\{895ED5E8-ABB4-40C3-A0CA-2571964268E2}] =>Adware.IMBooster [HKLM\Software\Classes\CLSID\{8AAC123A-1959-4A45-BFC5-E2D50783098A}] =>Adware.IMBooster [HKLM\Software\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}] =>PUP.RewardsArcade [HKLM\Software\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}] =>Toolbar.Ask [HKLM\Software\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}] =>PUP.RewardsArcade [HKLM\Software\Classes\CLSID\{A07956CD-81F8-4A03-B524-5D87E690DC83}] =>Adware.IMBooster [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}] =>Adware.IMBooster [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}] =>Adware.IMBooster [HKLM\Software\Classes\CLSID\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}] =>Adware.IMBooster [HKLM\Software\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}] =>PUP.RewardsArcade [HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{A76AA284-E52D-47E6-9E4F-B85DBF8E35C3}] =>Adware.IMBooster [HKLM\Software\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}] =>PUP.RewardsArcade [HKLM\Software\Classes\TypeLib\{A9CAF365-EA35-45DA-BD8B-2EFA09D374AC}] =>Adware.IMBooster [HKLM\Software\Classes\Interface\{ACA608DB-A210-4253-B799-3FD24E9A7BF5}] =>Adware.IMBooster [HKLM\Software\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}] =>PUP.RewardsArcade [HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}] =>Toolbar.Conduit [HKLM\Software\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}] =>PUP.RewardsArcade [HKLM\Software\Classes\CLSID\{B5E3B26B-6E5C-4865-A63D-58D04B10E245}] =>Adware.IMBooster [HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{B82A7D5E-4371-4FBB-97E3-1A7C6646A933}] =>Toolbar.Agent [HKLM\Software\Classes\CLSID\{B84D2DC5-42B2-4E5E-BF61-7B48152FF8EF}] =>Adware.IMBooster [HKLM\Software\Classes\CLSID\{B89D5309-0367-4494-A92F-3D4C94F88307}] =>Adware.IMBooster [HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{BFFED5CA-8BDF-47CC-AED0-23F4E6D77732}] =>Adware.IMBooster [HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{BFFED5CA-8BDF-47CC-AED0-23F4E6D77732}] =>Adware.IMBooster [HKLM\Software\Classes\CLSID\{C014EBF8-8854-448B-B5A4-557C4090EDCE}] =>Adware.IMBooster [HKLM\Software\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}] =>PUP.RewardsArcade [HKLM\Software\Classes\CLSID\{C31191DB-2F64-464C-B97C-6AC81ACB7AAC}] =>Adware.IMBooster [HKLM\Software\Classes\CLSID\{C342C7A7-F622-4EF3-8B7F-ABB9FBE73F14}] =>Adware.IMBooster [HKLM\Software\Classes\CLSID\{C4765B07-BC2F-477B-925C-B2BF24887823}] =>Adware.IMBooster [HKLM\Software\Classes\Interface\{C58D664A-3DBC-4925-AE74-0382007DF113}] =>Adware.IMBooster [HKLM\Software\Classes\Interface\{C776D7F4-BA85-4B75-AAFC-3A0A11FE6E36}] =>Adware.IMBooster [HKLM\Software\Classes\CLSID\{C875C0A1-09E3-48D5-9F8E-BD337796FD14}] =>Toolbar.Conduit [HKLM\Software\Classes\CLSID\{CD126DA6-FF5B-4181-AC13-54A62240D2FA}] =>Adware.IMBooster [HKLM\Software\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}] =>PUP.RewardsArcade [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}] =>Toolbar.Avira [HKLM\Software\Classes\CLSID\{D8F01233-2DE6-4EE7-8988-37263F00651B}] =>Toolbar.Conduit [HKLM\Software\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}] =>PUP.RewardsArcade [HKLM\Software\Classes\TypeLib\{DB538320-D3C5-433C-BCA9-C4081A054FCF}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}] =>PUP.RewardsArcade [HKLM\Software\Classes\CLSID\{DD438708-AAB4-422D-A322-B619589F5680}] =>Toolbar.Conduit [HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}] =>Adware.Yontoo [HKLM\Software\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}] =>PUP.RewardsArcade [HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48d2-9061-8BBD4899EB08}] =>Adware.IMBooster [HKLM\Software\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}] =>PUP.RewardsArcade [HKLM\Software\Classes\CLSID\{E812AE43-7799-4E67-8CF8-4104297A2D16}] =>Adware.IMBooster [HKLM\Software\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}] =>PUP.RewardsArcade [HKLM\Software\Classes\CLSID\{F0BAAEC7-9AE0-49FF-9C4B-86E774FF397F}] =>Adware.IMBooster [HKLM\Software\Classes\Prod.cap] =>PUP.ClaroSearch [HKLM\Software\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}] =>PUP.RewardsArcade [HKLM\Software\Classes\CLSID\{F92193FD-2243-4401-9ACC-49FF30885898}] =>Adware.IMBooster [HKLM\Software\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}] =>PUP.RewardsArcade [HKLM\Software\Classes\CLSID\{FD21B8A2-910B-45AC-9C10-45E6A8B84984}] =>Adware.IMBooster [HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\BabylonToolbar] =>PUP.Babylon [HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\conduitEngine] =>Toolbar.Conduit [HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\facemoods] =>Adware.Facemoods [HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\IMBoosterARP] =>Adware.IMBooster [HKLM\Software\Classes\Conduit.Engine] =>Toolbar.Conduit [HKLM\Software\Classes\GenericAskToolbar.ToolbarWnd] =>Toolbar.Ask [HKLM\Software\Classes\GenericAskToolbar.ToolbarWnd.1] =>Toolbar.Ask [HKLM\Software\Google\Chrome\Extensions\elhjaoldnkkbifioodjndkijecdeinld] =>Toolbar.Conduit [HKLM\Software\Google\Chrome\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl] =>Adware.IMBooster [HKLM\Software\Classes\Installer\Features\430E8DB44F0E90547A3564A7E858C48D] =>Adware.IMBooster [HKLM\Software\Classes\Installer\Products\430E8DB44F0E90547A3564A7E858C48D] =>Adware.IMBooster [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\430E8DB44F0E90547A3564A7E858C48D] =>Adware.IMBooster [HKLM\Software\Classes\CLSID\{08C06D61-F1F3-4799-86F8-BE1A89362C85}] =>Toolbar.Orange [HKCU\Software\APN PIP] =>Toolbar.Ask [HKCU\Software\AppDataLow\Software\conduitEngine] =>Toolbar.Conduit [HKLM\Software\conduitEngine] =>Toolbar.Conduit [HKCU\Software\AppDataLow\Software\ConduitSearchScopes] =>Toolbar.Conduit [HKLM\Software\GamesBarSetup] =>Adware.GamesBar [HKCU\Software\Iminent] =>Adware.IMBooster [HKLM\Software\Iminent] =>Adware.IMBooster [HKCU\Software\PIP] =>Toolbar.Ask [HKLM\Software\PIP] =>Toolbar.Ask [HKCU\Software\Search Settings] =>PUP.Dealio [HKCU\Software\AppDataLow\Software\Search Settings] =>PUP.Dealio [HKLM\Software\Search Settings] =>PUP.Dealio [HKCU\Software\Softonic] =>Toolbar.Conduit [HKCU\Software\StartSearch] =>Hijacker.Agent [HKLM\Software\Tarma Installer] =>PUP.Tarma [HKCU\Software\AppDataLow\Toolbar] =>Toolbar.Conduit [HKLM\Software\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}] =>PUP.Babylon [HKCU\Software\InstallCore] =>Adware.InstallCore [HKLM\Software\Classes\AppID\secman.DLL] =>PUP.Babylon [HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\1ClickDownload] =>PUP.1ClickDownloader [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375] =>PUP.Tarma [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5] =>PUP.Tarma [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02478D38-C3F9-4EFB-9B51-7695ECA05670}] =>Toolbar.Yahoo [HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}] =>Toolbar.Yahoo [HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670}] =>Toolbar.Yahoo [HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\PC Performer_is1] =>Rogue.PCPerformer [HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\1ClickDownload] =>PUP.1ClickDownloader [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ED1CAE30F47D14B41B5FC8FA53658044] =>PUP.Dealio [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\00E944CB89111313EAF35A0553F547F9] =>PUP.Dealio [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\30C16B15B255BD349A1157B8A83E2AF9] =>PUP.Dealio [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\53F55AF3F4049ED3FA6EA6F88E414E24] =>PUP.Dealio [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\68E4BF4B11615E03C97732FD581AB607] =>PUP.Dealio [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8CE3DDAB2D152683FBCEB4866BCD2B0F] =>PUP.Dealio [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AF6CE16AFEA5C9A39B766468A8B35C21] =>PUP.Dealio [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FB1E44269B58F433A8C8E671E37CFDCF] =>PUP.Dealio [HKLM\Software\Classes\Installer\Features\7B4E008375439D242BD2C2ABAADE0F1A] =>Toolbar.IOBit [HKLM\Software\Classes\Installer\Products\7B4E008375439D242BD2C2ABAADE0F1A] =>Toolbar.IOBit [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\7B4E008375439D242BD2C2ABAADE0F1A] =>Toolbar.IOBit [HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{3800E4B7-3457-42D9-B22D-2CBAAAEDF0A1}] =>Toolbar.IOBit [HKLM\Software\Classes\AppID\PropertySync.EXE] =>Toolbar.Freecorder [HKLM\Software\Classes\AppID\{18B9B16E-716F-43DF-A6AD-512C7D2EB983}] =>Toolbar.Freecorder [HKCU\Software\AppDataLow\Software\findlyrics] =>Adware.AddLyrics [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\F1057DD419AED0B468AD8888429E139A] =>Adware.IMBooster [HKLM\Software\Google\Chrome\Extensions\jmhhdaimhfblnamlcdijbaakkifakade] =>Adware.AddLyrics [HKLM\Software\Google\Chrome\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk] =>PUP.Dealio [HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{79A765E1-C399-405B-85AF-466F52E918B0}] =>Adware.SimilarSites [HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88}] =>Toolbar.Yahoo [HKLM\Software\Classes\iminent] =>Adware.IMBooster [HKLM\Software\Classes\Iminent.Business.Tinyfying.DownloadArgs] =>Adware.IMBooster [HKLM\Software\Classes\Iminent.Business.Tinyfying.LinkToPromoteArgs] =>Adware.IMBooster [HKLM\Software\Classes\Iminent.Business.Tinyfying.RawDataArgs] =>Adware.IMBooster [HKLM\Software\Classes\Iminent.Business.Tinyfying.TinyUrlArgs] =>Adware.IMBooster [HKLM\Software\Classes\Iminent.Business.Tinyfying.ViralLinkArgs] =>Adware.IMBooster [HKLM\Software\Classes\Iminent.Mediator.Communication.ClientCallback] =>Adware.IMBooster [HKLM\Software\Classes\Iminent.Mediator.Communication.ContractBase] =>Adware.IMBooster [HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.AddToUserContentCommand] =>Adware.IMBooster [HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.CheckLoginStatusCommand] =>Adware.IMBooster [HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.CleanCacheCommand] =>Adware.IMBooster [HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.GameOverCallback] =>Adware.IMBooster [HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.GetCreditCommand] =>Adware.IMBooster [HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.GetInstallationContextCommand] =>Adware.IMBooster [HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.GetLoginStatusCommand] =>Adware.IMBooster [HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.GetLoginStatusResult] =>Adware.IMBooster [HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.GetVariableCommand] =>Adware.IMBooster [HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.GetVariableResult] =>Adware.IMBooster [HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.InstallationContextResult] =>Adware.IMBooster [HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.LoadContentCommand] =>Adware.IMBooster [HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.LoadContentCommandResult] =>Adware.IMBooster [HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.LoginCommand] =>Adware.IMBooster [HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.LoginStatusChangedCallback] =>Adware.IMBooster [HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.LogoutCommand] =>Adware.IMBooster [HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.MergeIdentityCommand] =>Adware.IMBooster [HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.MyAccountCommand] =>Adware.IMBooster [HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.PlayContentCommand] =>Adware.IMBooster [HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.PostContentCallback] =>Adware.IMBooster [HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.RecycleViewsCommand] =>Adware.IMBooster [HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.SetVariableCommand] =>Adware.IMBooster [HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.ShowBrowserWindowCommand] =>Adware.IMBooster [HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.ShowControlCenterCommand] =>Adware.IMBooster [HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.ShowPluginWindowCommand] =>Adware.IMBooster [HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.UserContentChangedCallback] =>Adware.IMBooster [HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.VariableChangedCallback] =>Adware.IMBooster [HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.WarmUpCommand] =>Adware.IMBooster [HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.WelcomeCommand] =>Adware.IMBooster [HKLM\Software\Classes\Iminent.Mediator.Communication.ServerCommand] =>Adware.IMBooster [HKLM\Software\Classes\Iminent.Mediator.Communication.ServerResult] =>Adware.IMBooster [HKLM\Software\Classes\Iminent.Mediator.LightContent] =>Adware.IMBooster [HKLM\Software\Classes\Iminent.Mediator.LightUri] =>Adware.IMBooster [HKLM\Software\Classes\Iminent.Mediator.MediatorServiceProxy] =>Adware.IMBooster [HKLM\Software\Classes\IminentWebBooster.ActiveContentHandle.1] =>Adware.IMBooster [HKLM\Software\Classes\IminentWebBooster.ActiveContentHandler] =>Adware.IMBooster [HKLM\Software\Classes\IminentWebBooster.BrowserHelperObject] =>Adware.IMBooster [HKLM\Software\Classes\IminentWebBooster.BrowserHelperObject.1] =>Adware.IMBooster [HKLM\Software\Classes\IminentWebBooster.ScriptExtender] =>Adware.IMBooster [HKLM\Software\Classes\IminentWebBooster.ScriptExtender.1] =>Adware.IMBooster [HKLM\Software\Classes\IminentWebBooster.TinyUrlHandler] =>Adware.IMBooster [HKLM\Software\Classes\IminentWebBooster.TinyUrlHandler.1] =>Adware.IMBooster [HKLM\Software\Classes\Toolbar.CT2849852] =>Toolbar.Conduit [HKLM\Software\Classes\AppID\Iminent.WebBooster.InternetExplorer.DLL] =>Adware.IMBooster [HKLM\Software\Microsoft\Internet Explorer\Toolbar]:{30F9B915-B755-4826-820B-08FBA6BD249D} =>Toolbar.Conduit^ C:\Program Files\BitLord 2 =>Adware.WhenUSave^ C:\Program Files\ConduitEngine =>Toolbar.Conduit^ C:\Program Files\File Scout =>PUP.FileScout^ C:\Program Files\GamesBar =>Adware.GamesBar^ C:\Program Files\Iminent =>Adware.IMBooster^ C:\ProgramData\Iminent =>Adware.IMBooster^ C:\ProgramData\InstallMate =>PUP.Tarma^ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Iminent =>Adware.IMBooster^ C:\Users\Fabio\AppData\Roaming\BitLord =>Adware.WhenUSave^ C:\Users\Fabio\AppData\Roaming\File Scout =>PUP.FileScout^ C:\Users\Fabio\AppData\Roaming\Iminent =>Adware.IMBooster^ C:\Users\Fabio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BitLord =>Adware.WhenUSave^ C:\Program Files\IObit Toolbar =>PUP.Dealio C:\Users\Fabio\AppData\Local\vghd =>Adware.VirtualGirl C:\Users\Fabio\AppData\LocalLow\BabylonToolbar =>PUP.Babylon C:\Users\Fabio\AppData\LocalLow\Conduit =>Toolbar.Conduit C:\Users\Fabio\AppData\LocalLow\ConduitEngine =>Toolbar.Conduit C:\Users\Fabio\AppData\LocalLow\Search Settings =>PUP.Dealio C:\Program Files\Iminent\Iminent.exe =>Adware.IMBooster^ [HKCU\Software\FileScout] =>PUP.FileScout^ [HKLM\Software\Conduit] =>Toolbar.Conduit^ C:\Windows\Installer\235e0bc.msi =>Adware.IMBooster^ C:\Windows\Installer\68b88.msi =>PUP.Dealio^ [HKCR\CLSID\{01A602A0-D0B9-445B-8081-719E4177C4A7}] (Iminent.Mediator.Communication.DataContracts.ShowControlCenterCommand) =>Adware.IMBooster^ [HKCR\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}] (Iminent.Mediator.Communication.MediatorServiceProxy) =>Adware.IMBooster^ [HKCR\CLSID\{02C9C7B0-C7C8-4AAC-A9E4-55295BF60F8F}] (Iminent.Mediator.Communication.DataContracts.GetLoginStatusCommand) =>Adware.IMBooster^ [HKCR\CLSID\{0398B101-6DA7-473F-A290-17D2FBC88CC0}] (Iminent.Mediator.Communication.DataContracts.CheckLoginStatusCommand) =>Adware.IMBooster^ [HKCR\CLSID\{0BDA0769-FD72-49F4-9266-E1FB004F4D8F}] (IObit Toolbar) =>PUP.Dealio^ [HKCR\CLSID\{0CC36196-8589-4B80-A771-D659411D7F90}] (Iminent.Mediator.Communication.DataContracts.GetCreditCommand) =>Adware.IMBooster^ [HKCR\CLSID\{143D96F9-EB64-48B3-B192-91C2C41A1F43}] (Iminent.Mediator.Communication.ServerResult) =>Adware.IMBooster^ [HKCR\CLSID\{14F7D91F-F669-45C9-9F42-BACBFDB86EAD}] (Iminent.Mediator.LightContent) =>Adware.IMBooster^ [HKCR\CLSID\{187A6488-6E71-4A2A-B118-7BEFBFE58257}] (Iminent.Mediator.Communication.DataContracts.GetVariableCommand) =>Adware.IMBooster^ [HKCR\CLSID\{2D065204-A024-4C39-8A38-EE7078EC7ACF}] (Iminent.Mediator.Communication.DataContracts.SetVariableCommand) =>Adware.IMBooster^ [HKCR\CLSID\{30F5476C-677B-4DB0-B397-51F5BFD86840}] (Iminent.Mediator.Communication.DataContracts.GetInstallationContextCommand) =>Adware.IMBooster^ [HKCR\CLSID\{351798B1-C1D2-45AB-92B4-4D6C2D6AB5AF}] (Iminent.Mediator.Communication.DataContracts.PlayContentCommand) =>Adware.IMBooster^ [HKCR\CLSID\{3AEA1BEF-6195-46F4-ACA2-0ED14F7EFA1B}] (Iminent.Mediator.Communication.DataContracts.LoadContentCommandResult) =>Adware.IMBooster^ [HKCR\CLSID\{3D7F9AC3-BAC3-4E51-81D7-D121D79E550A}] (Iminent.Mediator.Communication.ContractBase) =>Adware.IMBooster^ [HKCR\CLSID\{4498C5E9-93C6-4142-B6BE-F0C6DC48B77A}] (Iminent.Mediator.Communication.DataContracts.LoadContentCommand) =>Adware.IMBooster^ [HKCR\CLSID\{479BF2D6-E362-4A99-B1AB-BC764D7B97AE}] (Iminent.Business.Tinyfying.ViralLinkArgs) =>Adware.IMBooster^ [HKCR\CLSID\{492A108F-51D0-4BD8-899D-AD4AB2893064}] (Iminent.Mediator.Communication.DataContracts.PostContentCallback) =>Adware.IMBooster^ [HKCR\CLSID\{4B6D6E60-FBD2-4E79-BF4B-886BC98F1797}] (Iminent.Business.Tinyfying.TinyUrlArgs) =>Adware.IMBooster^ [HKCR\CLSID\{60893E02-2E5B-43F9-A93A-BAD60C2DF6EF}] (Iminent.Mediator.Communication.DataContracts.WarmUpCommand) =>Adware.IMBooster^ [HKCR\CLSID\{6D39931F-451E-4BDD-BAF4-37FB96DBBA5D}] (Iminent.Mediator.Communication.DataContracts.RecycleViewsCommand) =>Adware.IMBooster^ [HKCR\CLSID\{76C684D2-C35D-4284-976A-D862F53ADB81}] (Iminent.Mediator.Communication.ServerCommand) =>Adware.IMBooster^ [HKCR\CLSID\{796D822A-C3F9-4A97-BAAB-42FE7628EA63}] (Iminent.Business.Tinyfying.LinkToPromoteArgs) =>Adware.IMBooster^ [HKCR\CLSID\{79EF3691-EC1A-4705-A01A-D2E36EC11758}] (Iminent.Mediator.Communication.DataContracts.ShowPluginWindowCommand) =>Adware.IMBooster^ [HKCR\CLSID\{82F41418-8E64-47EB-A7F1-4702A974D289}] (Iminent.Mediator.Communication.DataContracts.LogoutCommand) =>Adware.IMBooster^ [HKCR\CLSID\{85D920CE-63A7-46DC-8992-41D1D2E07FAD}] (Iminent.Mediator.Communication.DataContracts.LoginCommand) =>Adware.IMBooster^ [HKCR\CLSID\{895ED5E8-ABB4-40C3-A0CA-2571964268E2}] (Iminent.Mediator.Communication.ClientCallback) =>Adware.IMBooster^ [HKCR\CLSID\{8AAC123A-1959-4A45-BFC5-E2D50783098A}] (Iminent.Mediator.Communication.DataContracts.WelcomeCommand) =>Adware.IMBooster^ [HKCR\CLSID\{A07956CD-81F8-4A03-B524-5D87E690DC83}] (Iminent.Mediator.Communication.DataContracts.MyAccountCommand) =>Adware.IMBooster^ [HKCR\CLSID\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}] (IMinent WebBooster (BHO)) =>Adware.IMBooster^ [HKCR\CLSID\{B5E3B26B-6E5C-4865-A63D-58D04B10E245}] (Iminent.Mediator.Communication.DataContracts.InstallationContextResult) =>Adware.IMBooster^ [HKCR\CLSID\{B84D2DC5-42B2-4E5E-BF61-7B48152FF8EF}] (Iminent.Mediator.Communication.DataContracts.ShowBrowserWindowCommand) =>Adware.IMBooster^ [HKCR\CLSID\{B89D5309-0367-4494-A92F-3D4C94F88307}] (Iminent.Mediator.Communication.DataContracts.UserContentChangedCallback) =>Adware.IMBooster^ [HKCR\CLSID\{C014EBF8-8854-448B-B5A4-557C4090EDCE}] (Iminent.Mediator.Communication.DataContracts.GetVariableResult) =>Adware.IMBooster^ [HKCR\CLSID\{C31191DB-2F64-464C-B97C-6AC81ACB7AAC}] (Iminent.Mediator.Communication.DataContracts.GameOverCallback) =>Adware.IMBooster^ [HKCR\CLSID\{C342C7A7-F622-4EF3-8B7F-ABB9FBE73F14}] (Iminent.Mediator.Communication.DataContracts.VariableChangedCallback) =>Adware.IMBooster^ [HKCR\CLSID\{C4765B07-BC2F-477B-925C-B2BF24887823}] (Iminent.Mediator.Communication.DataContracts.LoginStatusChangedCallback) =>Adware.IMBooster^ [HKCR\CLSID\{C875C0A1-09E3-48D5-9F8E-BD337796FD14}] (Iminent.Business.Tinyfying.RawDataArgs) =>Adware.IMBooster^ [HKCR\CLSID\{CD126DA6-FF5B-4181-AC13-54A62240D2FA}] (Iminent.Mediator.Communication.DataContracts.CleanCacheCommand) =>Adware.IMBooster^ [HKCR\CLSID\{DD438708-AAB4-422D-A322-B619589F5680}] (Iminent.Business.Tinyfying.DownloadArgs) =>Adware.IMBooster^ [HKCR\CLSID\{E812AE43-7799-4E67-8CF8-4104297A2D16}] (Iminent.Mediator.Communication.DataContracts.MergeIdentityCommand) =>Adware.IMBooster^ [HKCR\CLSID\{F0BAAEC7-9AE0-49FF-9C4B-86E774FF397F}] (Iminent.Mediator.LightUri) =>Adware.IMBooster^ [HKCR\CLSID\{F92193FD-2243-4401-9ACC-49FF30885898}] (Iminent.Mediator.Communication.DataContracts.AddToUserContentCommand) =>Adware.IMBooster^ [HKCR\CLSID\{FD21B8A2-910B-45AC-9C10-45E6A8B84984}] (Iminent.Mediator.Communication.DataContracts.GetLoginStatusResult) =>Adware.IMBooster^ ~ Additionnel Scan: 411626 Items scanned in 01mn 29s ---\\ Informations complémentaires sur les modules ~ http://nicolascoolman.fr/r5-internet-explorer-proxy-management-iepm/ =>.Internet Explorer, Proxy Management (R5) ~ http://nicolascoolman.fr/o2-browser-helper-objects-de-navigateur/ =>.Browser Helper Objects de navigateur (O2) ~ http://nicolascoolman.fr/o3-internet-explorer-toolbars/ =>.Internet Explorer Toolbars (O3) ~ http://nicolascoolman.fr/o4-applications-demarrees-par-le-registre/ =>.Applications lancées au démarrage du système (O4) ~ http://nicolascoolman.fr/o51-mountpoints2-shell-key-mpsk/ =>.Clé de registre Shell MountPoints2 (MPSK) (O51) ~ AMI: 5 Legitimates Filtered in 00mn 00s ---\\ Récapitulatif des détections trouvées sur votre station http://nicolascoolman.fr/adware-imbooster =>Adware.IMBooster http://nicolascoolman.fr/pup-dealio =>PUP.Dealio http://nicolascoolman.fr/toolbar-conduit =>Toolbar.Conduit http://nicolascoolman.fr/adware-whenusave =>Adware.WhenUSave http://nicolascoolman.fr/pup-filescout =>PUP.FileScout http://nicolascoolman.fr/adware-installcore =>Adware.InstallCore http://nicolascoolman.fr/adware-searchsettings =>Adware.SearchSettings http://nicolascoolman.fr/pup-startsearch =>PUP.StartSearch http://nicolascoolman.fr/adware-gamesbar =>Adware.GamesBar http://nicolascoolman.fr/pup-tarma =>PUP.Tarma http://www.nicolascoolman.fr/blog/ =>PUP.PerformerSoft http://nicolascoolman.fr/pup-babylon =>PUP.Babylon http://nicolascoolman.fr/rootkit-tdss =>Rootkit.TDSS http://nicolascoolman.fr/pup-funmoods =>PUP.Funmoods http://www.nicolascoolman.fr/blog/ =>Adware.Agent http://nicolascoolman.fr/pup-rewardsarcade =>PUP.RewardsArcade http://www.nicolascoolman.fr/blog/ =>Toolbar.Agent http://nicolascoolman.fr/adware-socialskinz =>Adware.SocialSkinz http://nicolascoolman.fr/pup-whitesmoke =>PUP.Whitesmoke http://nicolascoolman.fr/toolbar-ask =>Toolbar.Ask http://nicolascoolman.fr/adware-yontoo =>Adware.Yontoo http://nicolascoolman.fr/pup-clarosearch =>PUP.ClaroSearch http://nicolascoolman.fr/adware-facemoods =>Adware.Facemoods http://www.nicolascoolman.fr/blog/ =>Hijacker.Agent http://nicolascoolman.fr/pup-1clickdownloader =>PUP.1ClickDownloader http://www.nicolascoolman.fr/blog/ =>Toolbar.Yahoo http://www.nicolascoolman.fr/blog/ =>Rogue.PCPerformer http://www.nicolascoolman.fr/blog/ =>Toolbar.IOBit http://www.nicolascoolman.fr/blog/ =>Toolbar.Freecorder http://nicolascoolman.fr/adware-addlyrics =>Adware.AddLyrics http://nicolascoolman.fr/adware-similarsites =>Adware.SimilarSites http://nicolascoolman.fr/adware-virtualgirl =>Adware.VirtualGirl ~ MSI: 32 link(s) detected in 00mn 00s ~ 1147 Legitimates filtered by white list End of the scan (921 lines in 03mn 45s)(0.8)