Publicité
Publicité
Format du document : text/plain
Prévisualisation
Script ZHPFix
ShortcutFix
[MD5.B4DCBE080AC61C576CF6F3A71C975B46] - (.BrowserSafeguard - BrowserSafeguard.) -- C:\Program Files (x86)\Browsersafeguard\BrowserSafeguard.exe [414720] [PID.932] =>PUP.BrowserSafeguard
G1 - GCS: Preference [User Data\Default] http://www.nationzoom.com =>Hijacker.NationZoom
G2 - GCE: Preference [User Data\Default] [jpmbfleldcgkldadpdinhjjopdfpjfjp] Wajam v.1.24 (Désactivé) =>PUP.Wajam
G2 - GCE: Preference [User Data\Default] [pkndmigholgfjlniaohblojbhgjbkakn] Lightning speedDial v.1.1.7, (Activé) => PUP.Elex
M2 - MFEP: prefs.js [Régine - uzr526rl.default\crossriderapp12767@crossrider.com] [] Tiger Savings v (..) =>PUP.SpecialSavings
M2 - MFEP: prefs.js [Régine - uzr526rl.default\d8222698-19e5-4827-b79e-0a077ea8eb7a@7b662f6d-3899-41e4-8864-6393447568da.com] [] Plus-HD-3.5 v (..) =>Adware.PlusHD
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = <-loopback> =>Hijacker.Proxy
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:49164;https=127.0.0.1:49164 =>Hijacker.Proxy
O4 - HKLM\..\Wow6432Node\Run: [BrowserSafeguard] . (.BrowserSafeguard - BrowserSafeguard.) -- C:\Program Files (x86)\Browsersafeguard\BrowserSafeguard.exe =>PUP.BrowserSafeguard
[MD5.F5169F01183957B52325F638C1075170] [APT] [BrowserSafeguard Update Task] (...) -- C:\Program Files (x86)\Browsersafeguard\uninstall.BrowserSafeguard.exe [3341312] =>PUP.BrowserSafeguard
O42 - Logiciel: BrowserSafeguard with RocketTab - (.Browsersafeguard.) [HKLM][64Bits] -- Browsersafeguard =>PUP.BrowserSafeguard
[HKCU\Software\BrowsersafeguardInstalled] =>PUP.BrowserSafeguard
[HKLM\Software\Wow6432Node\VBMZ] =>PUP.Duuqu
[HKLM\Software\Wow6432Node\Wpm] =>PUP.WpManager
O43 - CFD: 23/01/2014 - 16:40:21 - [4,812] ----D C:\Program Files (x86)\Browsersafeguard =>PUP.BrowserSafeguard
O45 - LFCP:[MD5.DD050ED30A58A452DA719E283793DB08] - 09/01/2014 - 19:09:07 ---A- - C:\Windows\Prefetch\WAJAM_VALIDATE.EXE-803E1CAC.pf =>PUP.Wajam
O45 - LFCP:[MD5.E33DB4D3D392175F0DDE17D2DD1CEE7E] - 09/01/2014 - 19:12:58 ---A- - C:\Windows\Prefetch\MYSEARCHDIALSRV.EXE-2317CE73.pf =>Adware.MyWebSearch
O45 - LFCP:[MD5.2D1CD555D5D9ECEC04EDD6D7D801F351] - 09/01/2014 - 19:13:21 ---A- - C:\Windows\Prefetch\MYSEARCHDIAL.EXE-5FE067F0.pf =>Adware.MyWebSearch
O45 - LFCP:[MD5.F5503B4A95832A1D59C11171D0B7E74A] - 13/01/2014 - 13:04:26 ---A- - C:\Windows\Prefetch\PLUS-HD-3.5-BG.EXE-7B7D37FC.pf =>Adware.PlusHD
O45 - LFCP:[MD5.68257ECE37AC628AD05270D45172C887] - 13/01/2014 - 13:04:26 ---A- - C:\Windows\Prefetch\TIGER SAVINGS-BG.EXE-C655F148.pf =>PUP.SpecialSavings
O45 - LFCP:[MD5.1FA97705310B94B455F5B05175ECFDCA] - 13/01/2014 - 13:04:26 ---A- - C:\Windows\Prefetch\TIGER SAVINGS.EXE-B360520A.pf =>PUP.SpecialSavings
O45 - LFCP:[MD5.405B1446B8CAD4F77441F0F5AC7B7AA7] - 22/01/2014 - 23:57:09 ---A- - C:\Windows\Prefetch\FILESCOUT.EXE-48ABF15C.pf =>PUP.FileScout
O45 - LFCP:[MD5.CCC8B5FE396D0481A0B556E2269746AE] - 23/01/2014 - 17:41:59 ---A- - C:\Windows\Prefetch\SOFTWARECRASHHANDLER.EXE-65628C2F.pf => Adware.Boxore
O69 - SBI: SearchScopes [HKCU] {497E9B95-90CC-FC21-C379-1708CEBCAF51} - (Babylon) - http://search.babylon.com =>PUP.Babylon
[MD5.32DCED18FFFEA0035E4FA975CA0AE8BE] [SPRF][22/04/2013] (.The Software Group - Software Update Setup.) -- C:\Users\Régine\AppData\Local\Temp\BoxoreInstaller.exe [620656] =>Adware.Boxore
[MD5.DDF2B3B21619A2A953C480EEEF708758] [SPRF][23/01/2014] (.Avcsobpovdbvd - Wbrkkalout.) -- C:\Users\Régine\AppData\Local\Temp\plus-hd-2-5.exe [4638344] =>Adware.PlusHD
[MD5.C5F704CF8DB66999C8E2EEB12EF20773] [SPRF][23/01/2014] (...) -- C:\Users\Régine\AppData\Local\Temp\vbmz10.exe [93376] =>PUP.Duuqu
[HKLM\Software\Google\Chrome\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp] =>PUP.Wajam^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Browsersafeguard] =>PUP.BrowserSafeguard^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375] =>PUP.Tarma
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5] =>PUP.Tarma
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CA0054A5AB3EFFE4CB5660E44A1E7DCC] =>Adware.Boxore^
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:BrowserSafeguard =>PUP.BrowserSafeguard^
C:\Users\Régine\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp =>PUP.Wajam^
C:\Users\Régine\AppData\Roaming\Mozilla\Firefox\Profiles\uzr526rl.default\extensions\crossriderapp12767@crossrider.com =>PUP.SpecialSavings^
C:\Users\Régine\AppData\Roaming\Mozilla\Firefox\Profiles\uzr526rl.default\extensions\d8222698-19e5-4827-b79e-0a077ea8eb7a@7b662f6d-3899-41e4-8864-6393447568da.com =>Adware.PlusHD^
C:\Program Files (x86)\Browsersafeguard =>PUP.BrowserSafeguard^
C:\Users\Régine\AppData\Local\Software =>Adware.Boxore
C:\Program Files (x86)\Browsersafeguard\BrowserSafeguard.exe =>PUP.BrowserSafeguard^
C:\Program Files (x86)\Browsersafeguard\uninstall.BrowserSafeguard.exe =>PUP.BrowserSafeguard^
[HKCU\Software\BrowsersafeguardInstalled] =>PUP.BrowserSafeguard^
[HKLM\Software\Wow6432Node\Wpm] =>PUP.WpManager^
C:\Users\Régine\AppData\Local\Temp\BoxoreInstaller.exe =>Adware.Boxore^
C:\Users\Régine\AppData\Local\Temp\plus-hd-2-5.exe =>Adware.PlusHD^
C:\Users\Régine\AppData\Local\Temp\vbmz10.exe =>PUP.Duuqu^
O69 - SBI: SearchScopes [HKCU] {1A9E1FAF-D1E9-4150-8426-83BDDD8DC7B5} - (01NET.com Customized Web Search) - http://search.conduit.com => Toolbar.Conduit*
O69 - SBI: SearchScopes [HKCU] {49EA9282-E481-4B1F-A1B2-99852116B949} - (Ask Search) - http://websearch.ask.com =>Toolbar.Ask
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{151867D5-7359-40AF-8764-66E58D06283C}] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Microsoft\Tracing\BingBar_RASAPI32] =>Toolbar.Bing
[HKLM\Software\Wow6432Node\VBMZ] =>Toolbar.Conduit
O4 - GS\Program [Public]: IncrediMail.lnk . (.IncrediMail, Ltd. - IncrediMail Application.) -- C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe => Messaging.Incredimail
O4 - GS\QuickLaunch [Régine]: IncrediMail 2.0.lnk . (.IncrediMail, Ltd. - IncrediMail Application.) -- C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe => Messaging.Incredimail
O4 - GS\TaskBar [Régine]: IncrediMail.lnk . (.IncrediMail, Ltd. - IncrediMail Application.) -- C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe => Messaging.Incredimail
O4 - GS\Program [Régine]: Create Amazing Presentations.lnk - Clé orpheline => Orphean Key not necessary
O4 - GS\Desktop [Régine]: Create Amazing Presentations.lnk - Clé orpheline => Orphean Key not necessary
[MD5.74B81A458DF4098CE6FA8FF15EBD42B3] [APT] [{C84DEA6A-2B22-4077-91AA-829427ABE97F}] (...) -- C:\Program Files (x86)\IncrediMail\Bin\ImSetup.exe [121256] => Messaging.Incredimail
[MD5.00000000000000000000000000000000] [APT] [{CC8DE6CD-DCB1-4B74-A31E-7C01B5BBBC45}] (...) -- C:\Users\Régine\Documents\IncrediBackup_install FRANCAIS.exe (.not file.) [0] => Fichier absent
O42 - Logiciel: IncrediMail - (.IncrediMail.) [HKLM][64Bits] -- {2CF22C94-1369-4C04-9A5F-A4BC6D91B508} => Messaging.Incredimail
O42 - Logiciel: IncrediMail 2.0 - (.IncrediMail Ltd..) [HKLM][64Bits] -- IncrediMail => Messaging.Incredimail
[HKCU\Software\IncrediMail] => Messaging.Incredimail
O43 - CFD: 28/05/2012 - 12:50:02 - [26,510] ----D C:\Program Files (x86)\IncrediMail => Messaging.Incredimail
O43 - CFD: 23/01/2014 - 16:59:06 - [0] ----D C:\ProgramData\IePluginService => Empty Folder not necessary
O43 - CFD: 30/01/2012 - 23:55:37 - [0] ----D C:\ProgramData\IM => Messaging.IncrediMail
O43 - CFD: 30/01/2012 - 23:53:22 - [6,702] ----D C:\ProgramData\IncrediMail => Messaging.Incredimail
O43 - CFD: 15/10/2012 - 15:48:08 - [1076,968] ----D C:\Users\Régine\AppData\Local\IM => Messaging.IncrediMail
O45 - LFCP:[MD5.94A2FF222D4AAD3C23AC1075136BD9C3] - 09/01/2014 - 19:08:57 ---A- - C:\Windows\Prefetch\GOOGLEEARTHWIN.EXE-35C179AA.pf => Fichier du dossier Prefetcher
O45 - LFCP:[MD5.C9DE0A2C4675D33F682946F7555EB4D7] - 09/01/2014 - 19:13:25 ---A- - C:\Windows\Prefetch\GOOGLEEARTHWIN [1].EXE-7766ACDF.pf => Fichier du dossier Prefetcher
O45 - LFCP:[MD5.240A0C023A41B002D120A0563FE5F94F] - 12/01/2014 - 22:14:59 ---A- - C:\Windows\Prefetch\SKYF2C3.TMP-A50C3185.pf => Fichier du dossier Prefetcher
O45 - LFCP:[MD5.B4D85A888547FD341325C36EC0805CC9] - 12/01/2014 - 23:14:00 ---A- - C:\Windows\Prefetch\MOE.EXE-618B6F1F.pf => Fichier du dossier Prefetcher
O45 - LFCP:[MD5.AF57D439CA312ACC39868B6211404E53] - 12/01/2014 - 23:14:00 ---A- - C:\Windows\Prefetch\WLSYNC.EXE-EF11F612.pf => Fichier du dossier Prefetcher
O45 - LFCP:[MD5.BDE720152FA87B2C0C81C2123E67FF9B] - 13/01/2014 - 22:10:15 ---A- - C:\Windows\Prefetch\ECBL-NXBP.EXE-3CE79B1C.pf => Fichier du dossier Prefetcher
O45 - LFCP:[MD5.9A246D393788B33FC60EC7D10A845359] - 14/01/2014 - 22:35:01 ---A- - C:\Windows\Prefetch\WORDVIEW.EXE-02D848A5.pf => Fichier du dossier Prefetcher
O45 - LFCP:[MD5.8F399EFD4799670117099900109CE6D3] - 16/01/2014 - 03:32:46 ---A- - C:\Windows\Prefetch\CXAUDMSG64.EXE-E7C3E733.pf => Fichier du dossier Prefetcher
O45 - LFCP:[MD5.D6778BFFE25DC9A6ED7395102EEF90EB] - 16/01/2014 - 03:32:46 ---A- - C:\Windows\Prefetch\DSIWMIS.EXE-60D6FE8C.pf => Fichier du dossier Prefetcher
O45 - LFCP:[MD5.268A253E34A7CEAD106F9F5E651CC29B] - 16/01/2014 - 12:13:00 ---A- - C:\Windows\Prefetch\UPDATE~1.EXE-BDB17456.pf => Fichier du dossier Prefetcher
O45 - LFCP:[MD5.BFD85B81F985004F7AAC4770926C22AA] - 23/01/2014 - 11:55:32 ---A- - C:\Windows\Prefetch\IMBPP.EXE-7DDC38F4.pf => Messaging.Incredimail
O45 - LFCP:[MD5.AC84712A1646876996C626B86C5D416B] - 23/01/2014 - 15:29:53 ---A- - C:\Windows\Prefetch\IMLPP.EXE-87D7D106.pf => Messaging.Incredimail
O45 - LFCP:[MD5.511F3FC6C967FBEA5AD0FE78C718C79C] - 23/01/2014 - 15:29:54 ---A- - C:\Windows\Prefetch\IMAPP.EXE-FCDCA9BF.pf => Messaging.Incredimail
O45 - LFCP:[MD5.252D8FD5D5EDD4DCEF1DABCDCD0F5E45] - 23/01/2014 - 15:29:57 ---A- - C:\Windows\Prefetch\INCMAIL.EXE-160A50B5.pf => Messaging.Incredimail
O45 - LFCP:[MD5.672E32FC16A63F79C4EA4AEDE280AA03] - 23/01/2014 - 18:19:41 ---A- - C:\Windows\Prefetch\CNMSEAT.EXE-9439FE89.pf => Fichier du dossier Prefetcher
O51 - MPSK:{a1fa462c-f1d3-11e1-ac06-95e4f33d6882}\AutoRun\command. (...) -- D:\SFRLauncher.exe (.not file.) => Fichier absent
O51 - MPSK:{e0bfa281-c525-11e1-80f4-60d8190eabeb}\AutoRun\command. (...) -- D:\SFRLauncher.exe (.not file.) => Fichier absent
O51 - MPSK:{e0bfa293-c525-11e1-80f4-60d8190eabeb}\AutoRun\command. (...) -- E:\SFRLauncher.exe (.not file.) => Fichier absent
O61 - LFC: 23/01/2014 - 18:34:24 ---A- . (...) -- C:\Users\Régine\AppData\Local\IM\content.xml [29220] => Messaging.Incredimail
[MD5.9F81FEA4D9046DBC6566CF9233388EE6] [SPRF][09/01/2014] (.Setup © - Setup.) -- C:\Users\Régine\AppData\Local\Temp\35580uninstall.exe [306688] => Temporary file not necessary
[MD5.858D895AD40DE9779E78C39A116F9553] [SPRF][23/01/2014] (...) -- C:\Users\Régine\AppData\Local\Temp\BackupSetup.exe [10355400] => Temporary file not necessary
[MD5.39955B34B26E332C4580FFDCA097630B] [SPRF][20/01/2014] (.Pas de propriétaire - GetCC.) -- C:\Users\Régine\AppData\Local\Temp\GetCC.dll [4608] => Temporary file not necessary
[MD5.466C4732BC4B126B94B0E69C6B5A2348] [SPRF][20/01/2014] (.Pas de propriétaire - SendMsg.) -- C:\Users\Régine\AppData\Local\Temp\SendMsg.dll [9216] => Temporary file not necessary
[MD5.5405413FFF79B8D9C747AA900F60F082] [SPRF][09/01/2014] (...) -- C:\Users\Régine\AppData\Local\Temp\Sqlite3.dll [599419] => Temporary file not necessary
[MD5.006CC8260405E231C2006A0CEA2127FD] [SPRF][23/01/2014] (.Robert Simpson, et al. - System.Data.SQLite Interop Assembly.) -- C:\Users\Régine\AppData\Local\Temp\System.Data.SQLite.dll [1053184] => Temporary file not necessary
[MD5.006CC8260405E231C2006A0CEA2127FD] [SPRF][23/01/2014] (.Robert Simpson, et al. - System.Data.SQLite Interop Assembly.) -- C:\Users\Régine\AppData\Local\Temp\System.Data.SQLite29495.dll [1053184] => Temporary file not necessary
O87 - FAEL: "{1DDFB615-5D4E-4EBB-A42D-92D651A09F9B}" |In - Private - P6 - FALSE | .(...) -- C:\Users\Régine\Downloads\HiYo_Install(1).exe (.not file.) => Fichier absent
O87 - FAEL: "{1BE2DA58-9CA3-4DE3-9ED9-5CAA7D1B8AD6}" |In - Private - P17 - FALSE | .(...) -- C:\Users\Régine\Downloads\HiYo_Install(1).exe (.not file.) => Fichier absent
O87 - FAEL: "{CA31C7B4-0039-4FD3-880E-2B782B049974}" |In - Public - P6 - FALSE | .(...) -- C:\Users\Régine\Downloads\incredimail_install(4).exe (.not file.) => Messaging.Incredimail
O87 - FAEL: "{ECC00D43-7841-4C0B-B1DB-16B0DF23CE93}" |In - Public - P17 - FALSE | .(...) -- C:\Users\Régine\Downloads\incredimail_install(4).exe (.not file.) => Messaging.Incredimail
O87 - FAEL: "{F051DF6D-0C07-4294-BD96-0B4C788A000F}" |In - Public - P6 - FALSE | .(...) -- C:\Users\Régine\Downloads\incredimail_install(5).exe (.not file.) => Messaging.Incredimail
O87 - FAEL: "{67C75D2B-E64E-4585-8A1F-D96B0101EC67}" |In - Public - P17 - FALSE | .(...) -- C:\Users\Régine\Downloads\incredimail_install(5).exe (.not file.) => Messaging.Incredimail
O87 - FAEL: "{180C57E3-2085-45F0-AA63-90909D23AE21}" |In - Public - P6 - FALSE | .(...) -- C:\Users\Régine\AppData\Local\Temp\ImInstaller\IncrediBackup_installer.exe (.not file.) => Fichier absent
O87 - FAEL: "{C31A445B-C78B-4E03-920A-F95CD0436D0E}" |In - Public - P17 - FALSE | .(...) -- C:\Users\Régine\AppData\Local\Temp\ImInstaller\IncrediBackup_installer.exe (.not file.) => Fichier absent
O87 - FAEL: "{F29E3FA3-BB3A-4D85-9AEB-5BDBDAD748E7}" | In - Public - P6 - FALSE | .(.IncrediMail, Ltd. - IncrediMail Application.) -- C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe => Messaging.Incredimail
O87 - FAEL: "{CC7CBAB6-DBF3-4816-BB8B-34F0EC433A1A}" | In - Public - P17 - FALSE | .(.IncrediMail, Ltd. - IncrediMail Application.) -- C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe => Messaging.Incredimail
O87 - FAEL: "{8AFBF742-047F-4997-BEC6-C239111DD15B}" | In - Public - P6 - FALSE | .(.IncrediMail, Ltd. - IncrediMail Tray Application.) -- C:\Program Files (x86)\IncrediMail\Bin\ImApp.exe => Messaging.Incredimail
O87 - FAEL: "{53897C9A-7083-4251-91A3-52D07CA5E737}" | In - Public - P17 - FALSE | .(.IncrediMail, Ltd. - IncrediMail Tray Application.) -- C:\Program Files (x86)\IncrediMail\Bin\ImApp.exe => Messaging.Incredimail
O87 - FAEL: "{2392A231-A47C-46F5-B4E1-B74E8AD46D2B}" | In - Public - P6 - FALSE | .(.IncrediMail, Ltd. - IncrediMail Content Importer.) -- C:\Program Files (x86)\IncrediMail\Bin\ImpCnt.exe => Messaging.Incredimail
O87 - FAEL: "{5F8C2E27-6F47-498A-B32C-090833C3FA46}" | In - Public - P17 - FALSE | .(.IncrediMail, Ltd. - IncrediMail Content Importer.) -- C:\Program Files (x86)\IncrediMail\Bin\ImpCnt.exe => Messaging.Incredimail
O87 - FAEL: "{060B07C0-62EF-4BFA-8AF3-CE5FD41C4249}" |In - Private - P6 - FALSE | .(...) -- C:\Users\Régine\AppData\Local\Temp\ImInstaller\IncrediBackup_installer.exe (.not file.) => Fichier absent
O87 - FAEL: "{8CBCA3E3-D39E-47A9-8051-5C9C0FCF4998}" |In - Private - P17 - FALSE | .(...) -- C:\Users\Régine\AppData\Local\Temp\ImInstaller\IncrediBackup_installer.exe (.not file.) => Fichier absent
O87 - FAEL: "{DCCDCA9A-59B7-4880-B1F2-DE14EBA7B5FE}" | In - Private - P6 - FALSE | .(.IncrediMail, Ltd. - IncrediMail Content Importer.) -- C:\Program Files (x86)\IncrediMail\Bin\ImpCnt.exe => Messaging.Incredimail
O87 - FAEL: "{13CF2BD6-ADD5-4BA0-8B29-18F9D5FBC572}" | In - Private - P17 - FALSE | .(.IncrediMail, Ltd. - IncrediMail Content Importer.) -- C:\Program Files (x86)\IncrediMail\Bin\ImpCnt.exe => Messaging.Incredimail
O87 - FAEL: "{49D4CB3E-673F-4C81-A72A-DCDCA4787657}" | In - Private - P17 - FALSE | .(.IncrediMail, Ltd. - IncrediMail Content Importer.) -- C:\Program Files (x86)\IncrediMail\Bin\ImpCnt.exe => Messaging.Incredimail
O87 - FAEL: "{B1A639CA-A0F1-4ECA-8DD5-50FFD73C1E4D}" | In - Private - P6 - FALSE | .(.IncrediMail, Ltd. - IncrediMail Content Importer.) -- C:\Program Files (x86)\IncrediMail\Bin\ImpCnt.exe => Messaging.Incredimail
O87 - FAEL: "{3D618617-5314-4099-A468-67540C75329B}" | In - Private - P17 - FALSE | .(.IncrediMail, Ltd. - IncrediMail Content Importer.) -- C:\Program Files (x86)\IncrediMail\Bin\ImpCnt.exe => Messaging.Incredimail
O87 - FAEL: "{0E19456F-9B0C-4AB7-A539-EC634E8D4ACD}" | In - Private - P6 - FALSE | .(.IncrediMail, Ltd. - IncrediMail Content Importer.) -- C:\Program Files (x86)\IncrediMail\Bin\ImpCnt.exe => Messaging.Incredimail
O87 - FAEL: "{6ED49EA2-D80A-4C8D-91DA-66BB66A0743F}" | In - Private - P17 - FALSE | .(.IncrediMail, Ltd. - IncrediMail Content Importer.) -- C:\Program Files (x86)\IncrediMail\Bin\ImpCnt.exe => Messaging.Incredimail
O87 - FAEL: "{D51AC3B8-28C4-4113-A8BE-030FCC74AEE0}" | In - Private - P6 - FALSE | .(.IncrediMail, Ltd. - IncrediMail Tray Application.) -- C:\Program Files (x86)\IncrediMail\Bin\ImApp.exe => Messaging.Incredimail
O87 - FAEL: "{A210C4AE-DCCF-433C-BE8C-8BF279361661}" | In - Private - P17 - FALSE | .(.IncrediMail, Ltd. - IncrediMail Tray Application.) -- C:\Program Files (x86)\IncrediMail\Bin\ImApp.exe => Messaging.Incredimail
O87 - FAEL: "{71B00CDD-2A8C-491F-BE78-287B8F0D3504}" | In - Private - P6 - FALSE | .(.IncrediMail, Ltd. - IncrediMail Application.) -- C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe => Messaging.Incredimail
O87 - FAEL: "{B757D39E-DECF-4328-B6DE-1D9B1E8C1EAD}" | In - Private - P17 - FALSE | .(.IncrediMail, Ltd. - IncrediMail Application.) -- C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe => Messaging.Incredimail
O87 - FAEL: "TCP Query User{E37493F8-C5FE-44CF-BE19-A6D716132D7A}E:\programmation\qtchat\release\qtchat.exe" |In - Public - P6 - TRUE | .(...) -- E:\programmation\qtchat\release\qtchat.exe (.not file.) => Fichier absent
O87 - FAEL: "UDP Query User{44823339-CF28-4006-8630-458A16074A94}E:\programmation\qtchat\release\qtchat.exe" |In - Public - P17 - TRUE | .(...) -- E:\programmation\qtchat\release\qtchat.exe (.not file.) => Fichier absent
O90 - PUC: "49C22FC2963140C4A9F54ACBD6195B80" . (.IncrediMail.) -- C:\Windows\Installer\{2CF22C94-1369-4C04-9A5F-A4BC6D91B508}\ARPPRODUCTICON.exe => Messaging.Incredimail
[MD5.C84C35B3ED26F11A04F50874B40AA5E8] [WIS][06/11/2013] (.IncrediMail - IncrediMail.) -- C:\Windows\Installer\11a58584.msi [2687488] => Messaging.Incredimail
ShortcutFix
[MD5.B4DCBE080AC61C576CF6F3A71C975B46] - (.BrowserSafeguard - BrowserSafeguard.) -- C:\Program Files (x86)\Browsersafeguard\BrowserSafeguard.exe [414720] [PID.932] =>PUP.BrowserSafeguard
G1 - GCS: Preference [User Data\Default] http://www.nationzoom.com =>Hijacker.NationZoom
G2 - GCE: Preference [User Data\Default] [jpmbfleldcgkldadpdinhjjopdfpjfjp] Wajam v.1.24 (Désactivé) =>PUP.Wajam
G2 - GCE: Preference [User Data\Default] [pkndmigholgfjlniaohblojbhgjbkakn] Lightning speedDial v.1.1.7, (Activé) => PUP.Elex
M2 - MFEP: prefs.js [Régine - uzr526rl.default\crossriderapp12767@crossrider.com] [] Tiger Savings v (..) =>PUP.SpecialSavings
M2 - MFEP: prefs.js [Régine - uzr526rl.default\d8222698-19e5-4827-b79e-0a077ea8eb7a@7b662f6d-3899-41e4-8864-6393447568da.com] [] Plus-HD-3.5 v (..) =>Adware.PlusHD
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = <-loopback> =>Hijacker.Proxy
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:49164;https=127.0.0.1:49164 =>Hijacker.Proxy
O4 - HKLM\..\Wow6432Node\Run: [BrowserSafeguard] . (.BrowserSafeguard - BrowserSafeguard.) -- C:\Program Files (x86)\Browsersafeguard\BrowserSafeguard.exe =>PUP.BrowserSafeguard
[MD5.F5169F01183957B52325F638C1075170] [APT] [BrowserSafeguard Update Task] (...) -- C:\Program Files (x86)\Browsersafeguard\uninstall.BrowserSafeguard.exe [3341312] =>PUP.BrowserSafeguard
O42 - Logiciel: BrowserSafeguard with RocketTab - (.Browsersafeguard.) [HKLM][64Bits] -- Browsersafeguard =>PUP.BrowserSafeguard
[HKCU\Software\BrowsersafeguardInstalled] =>PUP.BrowserSafeguard
[HKLM\Software\Wow6432Node\VBMZ] =>PUP.Duuqu
[HKLM\Software\Wow6432Node\Wpm] =>PUP.WpManager
O43 - CFD: 23/01/2014 - 16:40:21 - [4,812] ----D C:\Program Files (x86)\Browsersafeguard =>PUP.BrowserSafeguard
O45 - LFCP:[MD5.DD050ED30A58A452DA719E283793DB08] - 09/01/2014 - 19:09:07 ---A- - C:\Windows\Prefetch\WAJAM_VALIDATE.EXE-803E1CAC.pf =>PUP.Wajam
O45 - LFCP:[MD5.E33DB4D3D392175F0DDE17D2DD1CEE7E] - 09/01/2014 - 19:12:58 ---A- - C:\Windows\Prefetch\MYSEARCHDIALSRV.EXE-2317CE73.pf =>Adware.MyWebSearch
O45 - LFCP:[MD5.2D1CD555D5D9ECEC04EDD6D7D801F351] - 09/01/2014 - 19:13:21 ---A- - C:\Windows\Prefetch\MYSEARCHDIAL.EXE-5FE067F0.pf =>Adware.MyWebSearch
O45 - LFCP:[MD5.F5503B4A95832A1D59C11171D0B7E74A] - 13/01/2014 - 13:04:26 ---A- - C:\Windows\Prefetch\PLUS-HD-3.5-BG.EXE-7B7D37FC.pf =>Adware.PlusHD
O45 - LFCP:[MD5.68257ECE37AC628AD05270D45172C887] - 13/01/2014 - 13:04:26 ---A- - C:\Windows\Prefetch\TIGER SAVINGS-BG.EXE-C655F148.pf =>PUP.SpecialSavings
O45 - LFCP:[MD5.1FA97705310B94B455F5B05175ECFDCA] - 13/01/2014 - 13:04:26 ---A- - C:\Windows\Prefetch\TIGER SAVINGS.EXE-B360520A.pf =>PUP.SpecialSavings
O45 - LFCP:[MD5.405B1446B8CAD4F77441F0F5AC7B7AA7] - 22/01/2014 - 23:57:09 ---A- - C:\Windows\Prefetch\FILESCOUT.EXE-48ABF15C.pf =>PUP.FileScout
O45 - LFCP:[MD5.CCC8B5FE396D0481A0B556E2269746AE] - 23/01/2014 - 17:41:59 ---A- - C:\Windows\Prefetch\SOFTWARECRASHHANDLER.EXE-65628C2F.pf => Adware.Boxore
O69 - SBI: SearchScopes [HKCU] {497E9B95-90CC-FC21-C379-1708CEBCAF51} - (Babylon) - http://search.babylon.com =>PUP.Babylon
[MD5.32DCED18FFFEA0035E4FA975CA0AE8BE] [SPRF][22/04/2013] (.The Software Group - Software Update Setup.) -- C:\Users\Régine\AppData\Local\Temp\BoxoreInstaller.exe [620656] =>Adware.Boxore
[MD5.DDF2B3B21619A2A953C480EEEF708758] [SPRF][23/01/2014] (.Avcsobpovdbvd - Wbrkkalout.) -- C:\Users\Régine\AppData\Local\Temp\plus-hd-2-5.exe [4638344] =>Adware.PlusHD
[MD5.C5F704CF8DB66999C8E2EEB12EF20773] [SPRF][23/01/2014] (...) -- C:\Users\Régine\AppData\Local\Temp\vbmz10.exe [93376] =>PUP.Duuqu
[HKLM\Software\Google\Chrome\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp] =>PUP.Wajam^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Browsersafeguard] =>PUP.BrowserSafeguard^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375] =>PUP.Tarma
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5] =>PUP.Tarma
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CA0054A5AB3EFFE4CB5660E44A1E7DCC] =>Adware.Boxore^
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:BrowserSafeguard =>PUP.BrowserSafeguard^
C:\Users\Régine\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp =>PUP.Wajam^
C:\Users\Régine\AppData\Roaming\Mozilla\Firefox\Profiles\uzr526rl.default\extensions\crossriderapp12767@crossrider.com =>PUP.SpecialSavings^
C:\Users\Régine\AppData\Roaming\Mozilla\Firefox\Profiles\uzr526rl.default\extensions\d8222698-19e5-4827-b79e-0a077ea8eb7a@7b662f6d-3899-41e4-8864-6393447568da.com =>Adware.PlusHD^
C:\Program Files (x86)\Browsersafeguard =>PUP.BrowserSafeguard^
C:\Users\Régine\AppData\Local\Software =>Adware.Boxore
C:\Program Files (x86)\Browsersafeguard\BrowserSafeguard.exe =>PUP.BrowserSafeguard^
C:\Program Files (x86)\Browsersafeguard\uninstall.BrowserSafeguard.exe =>PUP.BrowserSafeguard^
[HKCU\Software\BrowsersafeguardInstalled] =>PUP.BrowserSafeguard^
[HKLM\Software\Wow6432Node\Wpm] =>PUP.WpManager^
C:\Users\Régine\AppData\Local\Temp\BoxoreInstaller.exe =>Adware.Boxore^
C:\Users\Régine\AppData\Local\Temp\plus-hd-2-5.exe =>Adware.PlusHD^
C:\Users\Régine\AppData\Local\Temp\vbmz10.exe =>PUP.Duuqu^
O69 - SBI: SearchScopes [HKCU] {1A9E1FAF-D1E9-4150-8426-83BDDD8DC7B5} - (01NET.com Customized Web Search) - http://search.conduit.com => Toolbar.Conduit*
O69 - SBI: SearchScopes [HKCU] {49EA9282-E481-4B1F-A1B2-99852116B949} - (Ask Search) - http://websearch.ask.com =>Toolbar.Ask
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{151867D5-7359-40AF-8764-66E58D06283C}] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Microsoft\Tracing\BingBar_RASAPI32] =>Toolbar.Bing
[HKLM\Software\Wow6432Node\VBMZ] =>Toolbar.Conduit
O4 - GS\Program [Public]: IncrediMail.lnk . (.IncrediMail, Ltd. - IncrediMail Application.) -- C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe => Messaging.Incredimail
O4 - GS\QuickLaunch [Régine]: IncrediMail 2.0.lnk . (.IncrediMail, Ltd. - IncrediMail Application.) -- C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe => Messaging.Incredimail
O4 - GS\TaskBar [Régine]: IncrediMail.lnk . (.IncrediMail, Ltd. - IncrediMail Application.) -- C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe => Messaging.Incredimail
O4 - GS\Program [Régine]: Create Amazing Presentations.lnk - Clé orpheline => Orphean Key not necessary
O4 - GS\Desktop [Régine]: Create Amazing Presentations.lnk - Clé orpheline => Orphean Key not necessary
[MD5.74B81A458DF4098CE6FA8FF15EBD42B3] [APT] [{C84DEA6A-2B22-4077-91AA-829427ABE97F}] (...) -- C:\Program Files (x86)\IncrediMail\Bin\ImSetup.exe [121256] => Messaging.Incredimail
[MD5.00000000000000000000000000000000] [APT] [{CC8DE6CD-DCB1-4B74-A31E-7C01B5BBBC45}] (...) -- C:\Users\Régine\Documents\IncrediBackup_install FRANCAIS.exe (.not file.) [0] => Fichier absent
O42 - Logiciel: IncrediMail - (.IncrediMail.) [HKLM][64Bits] -- {2CF22C94-1369-4C04-9A5F-A4BC6D91B508} => Messaging.Incredimail
O42 - Logiciel: IncrediMail 2.0 - (.IncrediMail Ltd..) [HKLM][64Bits] -- IncrediMail => Messaging.Incredimail
[HKCU\Software\IncrediMail] => Messaging.Incredimail
O43 - CFD: 28/05/2012 - 12:50:02 - [26,510] ----D C:\Program Files (x86)\IncrediMail => Messaging.Incredimail
O43 - CFD: 23/01/2014 - 16:59:06 - [0] ----D C:\ProgramData\IePluginService => Empty Folder not necessary
O43 - CFD: 30/01/2012 - 23:55:37 - [0] ----D C:\ProgramData\IM => Messaging.IncrediMail
O43 - CFD: 30/01/2012 - 23:53:22 - [6,702] ----D C:\ProgramData\IncrediMail => Messaging.Incredimail
O43 - CFD: 15/10/2012 - 15:48:08 - [1076,968] ----D C:\Users\Régine\AppData\Local\IM => Messaging.IncrediMail
O45 - LFCP:[MD5.94A2FF222D4AAD3C23AC1075136BD9C3] - 09/01/2014 - 19:08:57 ---A- - C:\Windows\Prefetch\GOOGLEEARTHWIN.EXE-35C179AA.pf => Fichier du dossier Prefetcher
O45 - LFCP:[MD5.C9DE0A2C4675D33F682946F7555EB4D7] - 09/01/2014 - 19:13:25 ---A- - C:\Windows\Prefetch\GOOGLEEARTHWIN [1].EXE-7766ACDF.pf => Fichier du dossier Prefetcher
O45 - LFCP:[MD5.240A0C023A41B002D120A0563FE5F94F] - 12/01/2014 - 22:14:59 ---A- - C:\Windows\Prefetch\SKYF2C3.TMP-A50C3185.pf => Fichier du dossier Prefetcher
O45 - LFCP:[MD5.B4D85A888547FD341325C36EC0805CC9] - 12/01/2014 - 23:14:00 ---A- - C:\Windows\Prefetch\MOE.EXE-618B6F1F.pf => Fichier du dossier Prefetcher
O45 - LFCP:[MD5.AF57D439CA312ACC39868B6211404E53] - 12/01/2014 - 23:14:00 ---A- - C:\Windows\Prefetch\WLSYNC.EXE-EF11F612.pf => Fichier du dossier Prefetcher
O45 - LFCP:[MD5.BDE720152FA87B2C0C81C2123E67FF9B] - 13/01/2014 - 22:10:15 ---A- - C:\Windows\Prefetch\ECBL-NXBP.EXE-3CE79B1C.pf => Fichier du dossier Prefetcher
O45 - LFCP:[MD5.9A246D393788B33FC60EC7D10A845359] - 14/01/2014 - 22:35:01 ---A- - C:\Windows\Prefetch\WORDVIEW.EXE-02D848A5.pf => Fichier du dossier Prefetcher
O45 - LFCP:[MD5.8F399EFD4799670117099900109CE6D3] - 16/01/2014 - 03:32:46 ---A- - C:\Windows\Prefetch\CXAUDMSG64.EXE-E7C3E733.pf => Fichier du dossier Prefetcher
O45 - LFCP:[MD5.D6778BFFE25DC9A6ED7395102EEF90EB] - 16/01/2014 - 03:32:46 ---A- - C:\Windows\Prefetch\DSIWMIS.EXE-60D6FE8C.pf => Fichier du dossier Prefetcher
O45 - LFCP:[MD5.268A253E34A7CEAD106F9F5E651CC29B] - 16/01/2014 - 12:13:00 ---A- - C:\Windows\Prefetch\UPDATE~1.EXE-BDB17456.pf => Fichier du dossier Prefetcher
O45 - LFCP:[MD5.BFD85B81F985004F7AAC4770926C22AA] - 23/01/2014 - 11:55:32 ---A- - C:\Windows\Prefetch\IMBPP.EXE-7DDC38F4.pf => Messaging.Incredimail
O45 - LFCP:[MD5.AC84712A1646876996C626B86C5D416B] - 23/01/2014 - 15:29:53 ---A- - C:\Windows\Prefetch\IMLPP.EXE-87D7D106.pf => Messaging.Incredimail
O45 - LFCP:[MD5.511F3FC6C967FBEA5AD0FE78C718C79C] - 23/01/2014 - 15:29:54 ---A- - C:\Windows\Prefetch\IMAPP.EXE-FCDCA9BF.pf => Messaging.Incredimail
O45 - LFCP:[MD5.252D8FD5D5EDD4DCEF1DABCDCD0F5E45] - 23/01/2014 - 15:29:57 ---A- - C:\Windows\Prefetch\INCMAIL.EXE-160A50B5.pf => Messaging.Incredimail
O45 - LFCP:[MD5.672E32FC16A63F79C4EA4AEDE280AA03] - 23/01/2014 - 18:19:41 ---A- - C:\Windows\Prefetch\CNMSEAT.EXE-9439FE89.pf => Fichier du dossier Prefetcher
O51 - MPSK:{a1fa462c-f1d3-11e1-ac06-95e4f33d6882}\AutoRun\command. (...) -- D:\SFRLauncher.exe (.not file.) => Fichier absent
O51 - MPSK:{e0bfa281-c525-11e1-80f4-60d8190eabeb}\AutoRun\command. (...) -- D:\SFRLauncher.exe (.not file.) => Fichier absent
O51 - MPSK:{e0bfa293-c525-11e1-80f4-60d8190eabeb}\AutoRun\command. (...) -- E:\SFRLauncher.exe (.not file.) => Fichier absent
O61 - LFC: 23/01/2014 - 18:34:24 ---A- . (...) -- C:\Users\Régine\AppData\Local\IM\content.xml [29220] => Messaging.Incredimail
[MD5.9F81FEA4D9046DBC6566CF9233388EE6] [SPRF][09/01/2014] (.Setup © - Setup.) -- C:\Users\Régine\AppData\Local\Temp\35580uninstall.exe [306688] => Temporary file not necessary
[MD5.858D895AD40DE9779E78C39A116F9553] [SPRF][23/01/2014] (...) -- C:\Users\Régine\AppData\Local\Temp\BackupSetup.exe [10355400] => Temporary file not necessary
[MD5.39955B34B26E332C4580FFDCA097630B] [SPRF][20/01/2014] (.Pas de propriétaire - GetCC.) -- C:\Users\Régine\AppData\Local\Temp\GetCC.dll [4608] => Temporary file not necessary
[MD5.466C4732BC4B126B94B0E69C6B5A2348] [SPRF][20/01/2014] (.Pas de propriétaire - SendMsg.) -- C:\Users\Régine\AppData\Local\Temp\SendMsg.dll [9216] => Temporary file not necessary
[MD5.5405413FFF79B8D9C747AA900F60F082] [SPRF][09/01/2014] (...) -- C:\Users\Régine\AppData\Local\Temp\Sqlite3.dll [599419] => Temporary file not necessary
[MD5.006CC8260405E231C2006A0CEA2127FD] [SPRF][23/01/2014] (.Robert Simpson, et al. - System.Data.SQLite Interop Assembly.) -- C:\Users\Régine\AppData\Local\Temp\System.Data.SQLite.dll [1053184] => Temporary file not necessary
[MD5.006CC8260405E231C2006A0CEA2127FD] [SPRF][23/01/2014] (.Robert Simpson, et al. - System.Data.SQLite Interop Assembly.) -- C:\Users\Régine\AppData\Local\Temp\System.Data.SQLite29495.dll [1053184] => Temporary file not necessary
O87 - FAEL: "{1DDFB615-5D4E-4EBB-A42D-92D651A09F9B}" |In - Private - P6 - FALSE | .(...) -- C:\Users\Régine\Downloads\HiYo_Install(1).exe (.not file.) => Fichier absent
O87 - FAEL: "{1BE2DA58-9CA3-4DE3-9ED9-5CAA7D1B8AD6}" |In - Private - P17 - FALSE | .(...) -- C:\Users\Régine\Downloads\HiYo_Install(1).exe (.not file.) => Fichier absent
O87 - FAEL: "{CA31C7B4-0039-4FD3-880E-2B782B049974}" |In - Public - P6 - FALSE | .(...) -- C:\Users\Régine\Downloads\incredimail_install(4).exe (.not file.) => Messaging.Incredimail
O87 - FAEL: "{ECC00D43-7841-4C0B-B1DB-16B0DF23CE93}" |In - Public - P17 - FALSE | .(...) -- C:\Users\Régine\Downloads\incredimail_install(4).exe (.not file.) => Messaging.Incredimail
O87 - FAEL: "{F051DF6D-0C07-4294-BD96-0B4C788A000F}" |In - Public - P6 - FALSE | .(...) -- C:\Users\Régine\Downloads\incredimail_install(5).exe (.not file.) => Messaging.Incredimail
O87 - FAEL: "{67C75D2B-E64E-4585-8A1F-D96B0101EC67}" |In - Public - P17 - FALSE | .(...) -- C:\Users\Régine\Downloads\incredimail_install(5).exe (.not file.) => Messaging.Incredimail
O87 - FAEL: "{180C57E3-2085-45F0-AA63-90909D23AE21}" |In - Public - P6 - FALSE | .(...) -- C:\Users\Régine\AppData\Local\Temp\ImInstaller\IncrediBackup_installer.exe (.not file.) => Fichier absent
O87 - FAEL: "{C31A445B-C78B-4E03-920A-F95CD0436D0E}" |In - Public - P17 - FALSE | .(...) -- C:\Users\Régine\AppData\Local\Temp\ImInstaller\IncrediBackup_installer.exe (.not file.) => Fichier absent
O87 - FAEL: "{F29E3FA3-BB3A-4D85-9AEB-5BDBDAD748E7}" | In - Public - P6 - FALSE | .(.IncrediMail, Ltd. - IncrediMail Application.) -- C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe => Messaging.Incredimail
O87 - FAEL: "{CC7CBAB6-DBF3-4816-BB8B-34F0EC433A1A}" | In - Public - P17 - FALSE | .(.IncrediMail, Ltd. - IncrediMail Application.) -- C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe => Messaging.Incredimail
O87 - FAEL: "{8AFBF742-047F-4997-BEC6-C239111DD15B}" | In - Public - P6 - FALSE | .(.IncrediMail, Ltd. - IncrediMail Tray Application.) -- C:\Program Files (x86)\IncrediMail\Bin\ImApp.exe => Messaging.Incredimail
O87 - FAEL: "{53897C9A-7083-4251-91A3-52D07CA5E737}" | In - Public - P17 - FALSE | .(.IncrediMail, Ltd. - IncrediMail Tray Application.) -- C:\Program Files (x86)\IncrediMail\Bin\ImApp.exe => Messaging.Incredimail
O87 - FAEL: "{2392A231-A47C-46F5-B4E1-B74E8AD46D2B}" | In - Public - P6 - FALSE | .(.IncrediMail, Ltd. - IncrediMail Content Importer.) -- C:\Program Files (x86)\IncrediMail\Bin\ImpCnt.exe => Messaging.Incredimail
O87 - FAEL: "{5F8C2E27-6F47-498A-B32C-090833C3FA46}" | In - Public - P17 - FALSE | .(.IncrediMail, Ltd. - IncrediMail Content Importer.) -- C:\Program Files (x86)\IncrediMail\Bin\ImpCnt.exe => Messaging.Incredimail
O87 - FAEL: "{060B07C0-62EF-4BFA-8AF3-CE5FD41C4249}" |In - Private - P6 - FALSE | .(...) -- C:\Users\Régine\AppData\Local\Temp\ImInstaller\IncrediBackup_installer.exe (.not file.) => Fichier absent
O87 - FAEL: "{8CBCA3E3-D39E-47A9-8051-5C9C0FCF4998}" |In - Private - P17 - FALSE | .(...) -- C:\Users\Régine\AppData\Local\Temp\ImInstaller\IncrediBackup_installer.exe (.not file.) => Fichier absent
O87 - FAEL: "{DCCDCA9A-59B7-4880-B1F2-DE14EBA7B5FE}" | In - Private - P6 - FALSE | .(.IncrediMail, Ltd. - IncrediMail Content Importer.) -- C:\Program Files (x86)\IncrediMail\Bin\ImpCnt.exe => Messaging.Incredimail
O87 - FAEL: "{13CF2BD6-ADD5-4BA0-8B29-18F9D5FBC572}" | In - Private - P17 - FALSE | .(.IncrediMail, Ltd. - IncrediMail Content Importer.) -- C:\Program Files (x86)\IncrediMail\Bin\ImpCnt.exe => Messaging.Incredimail
O87 - FAEL: "{49D4CB3E-673F-4C81-A72A-DCDCA4787657}" | In - Private - P17 - FALSE | .(.IncrediMail, Ltd. - IncrediMail Content Importer.) -- C:\Program Files (x86)\IncrediMail\Bin\ImpCnt.exe => Messaging.Incredimail
O87 - FAEL: "{B1A639CA-A0F1-4ECA-8DD5-50FFD73C1E4D}" | In - Private - P6 - FALSE | .(.IncrediMail, Ltd. - IncrediMail Content Importer.) -- C:\Program Files (x86)\IncrediMail\Bin\ImpCnt.exe => Messaging.Incredimail
O87 - FAEL: "{3D618617-5314-4099-A468-67540C75329B}" | In - Private - P17 - FALSE | .(.IncrediMail, Ltd. - IncrediMail Content Importer.) -- C:\Program Files (x86)\IncrediMail\Bin\ImpCnt.exe => Messaging.Incredimail
O87 - FAEL: "{0E19456F-9B0C-4AB7-A539-EC634E8D4ACD}" | In - Private - P6 - FALSE | .(.IncrediMail, Ltd. - IncrediMail Content Importer.) -- C:\Program Files (x86)\IncrediMail\Bin\ImpCnt.exe => Messaging.Incredimail
O87 - FAEL: "{6ED49EA2-D80A-4C8D-91DA-66BB66A0743F}" | In - Private - P17 - FALSE | .(.IncrediMail, Ltd. - IncrediMail Content Importer.) -- C:\Program Files (x86)\IncrediMail\Bin\ImpCnt.exe => Messaging.Incredimail
O87 - FAEL: "{D51AC3B8-28C4-4113-A8BE-030FCC74AEE0}" | In - Private - P6 - FALSE | .(.IncrediMail, Ltd. - IncrediMail Tray Application.) -- C:\Program Files (x86)\IncrediMail\Bin\ImApp.exe => Messaging.Incredimail
O87 - FAEL: "{A210C4AE-DCCF-433C-BE8C-8BF279361661}" | In - Private - P17 - FALSE | .(.IncrediMail, Ltd. - IncrediMail Tray Application.) -- C:\Program Files (x86)\IncrediMail\Bin\ImApp.exe => Messaging.Incredimail
O87 - FAEL: "{71B00CDD-2A8C-491F-BE78-287B8F0D3504}" | In - Private - P6 - FALSE | .(.IncrediMail, Ltd. - IncrediMail Application.) -- C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe => Messaging.Incredimail
O87 - FAEL: "{B757D39E-DECF-4328-B6DE-1D9B1E8C1EAD}" | In - Private - P17 - FALSE | .(.IncrediMail, Ltd. - IncrediMail Application.) -- C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe => Messaging.Incredimail
O87 - FAEL: "TCP Query User{E37493F8-C5FE-44CF-BE19-A6D716132D7A}E:\programmation\qtchat\release\qtchat.exe" |In - Public - P6 - TRUE | .(...) -- E:\programmation\qtchat\release\qtchat.exe (.not file.) => Fichier absent
O87 - FAEL: "UDP Query User{44823339-CF28-4006-8630-458A16074A94}E:\programmation\qtchat\release\qtchat.exe" |In - Public - P17 - TRUE | .(...) -- E:\programmation\qtchat\release\qtchat.exe (.not file.) => Fichier absent
O90 - PUC: "49C22FC2963140C4A9F54ACBD6195B80" . (.IncrediMail.) -- C:\Windows\Installer\{2CF22C94-1369-4C04-9A5F-A4BC6D91B508}\ARPPRODUCTICON.exe => Messaging.Incredimail
[MD5.C84C35B3ED26F11A04F50874B40AA5E8] [WIS][06/11/2013] (.IncrediMail - IncrediMail.) -- C:\Windows\Installer\11a58584.msi [2687488] => Messaging.Incredimail