shortcut_module_29_06_2014_12_51

Document joint : DFDp6mC9I56_shortcut_module_29_06_2014_12_51_42.txt

Cliquez pour partager vos propres fichiers

Format du document : text/plain

Prévisualisation

�� | Shortcut_Module | g3n-h@ckm@n | 29.06.2014.1

�� Vista | 7 | 8 | 8.1 - 32/64 bits �� - Start 01:52:58 - 29/06/2014

Mis � jour le : 29/06/2014 | 00.05 par g3n-h@ckm@n

Contact : http://www.sosvirus.net
Assistance : http://www.sosvirus.net/forum-virus-securite.html
Feedbacks : http://www.sosvirus.net/feedbacks-t75915.html

Boot: Normal boot

Syst�me : Windows 7 Home Premium (64 bits) HomePremium Service Pack 1

M�moire RAM = Total (MB) : 3145 | Libre (MB) : 1579
Pagefile = Total (MB) : 6288 | Libre (MB) : 3758
Virtuelle = Total (MB) : 4194 | Libre (MB) : 4025

Registre sauvegard� , pour restaurer : C:\Shortcut_Module\Save\Clean\ERDNT.exe

�� | Mises � jour Windows

Aucune mise � jour d�tect�e !!!

�� | Navigateurs

IE : 11.0.9600.17126 (� Microsoft Corporation. Tous droits r�serv�s.)
FF : 30.0.0.5269 (�Firefox and Mozilla Developers; available under the MPL 2 license.)
GC : 35.0.1916.153 (Copyright 2012 Google Inc. All rights reserved.)

�� | Security

AM : Malwarebytes' Anti-Malware (1.0.0.532) [2014.04.17.01]
FW : avast! Antivirus Disabled
WMI : OK
WU: Windows Update Service [Auto(2)] = Arr�t�
AS: Windows Defender [Auto(2)] = Arr�t�
FW: Windows FireWall Service [Auto(2)] = Arr�t�

Mise en veille supprim�e !

�� | FlashPlayer

ActiveX : 13.0.0.214
Plugin : 13.0.0.214

�� | Processus tu�s

876 | [Owner : Syst�me |Parent : 612] - (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 337.88.) - (8.17.13.3788) = C:\Windows\System32\nvvsvc.exe
900 | [Owner : Syst�me |Parent : 612] - (.NVIDIA Corporation - Stereo Vision Control Panel API Server.) - (7.17.13.3788) = C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
1380 | [Owner : Syst�me |Parent : 876] - (.NVIDIA Corporation - NVIDIA User Experience Driver Component.) - (8.17.13.3788) = C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
1388 | [Owner : Syst�me |Parent : 876] - (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 337.88.) - (8.17.13.3788) = C:\Windows\System32\nvvsvc.exe
1608 | [Owner : Syst�me |Parent : 612] - (.Microsoft Corporation - Application sous-syst�me spouleur.) - (6.1.7601.17777) = C:\Windows\System32\spoolsv.exe
1756 | [Owner : Syst�me |Parent : 612] - (.ArcSoft Inc. - ArcSoft Connect Service.) - (1.1.0.47) = C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
1788 | [Owner : Syst�me |Parent : 612] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - (1.701.3.3014) = C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
1808 | [Owner : Syst�me |Parent : 612] - (.Andrea Electronics Corporation - Andrea filters APO access service (64-bit).) - (1.0.64.12) = C:\Windows\System32\AEADISRV.EXE
1856 | [Owner : Syst�me |Parent : 612] - (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) - (7.0.0.0) = C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50STB.EXE
1892 | [Owner : Syst�me |Parent : 612] - (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) - (7.0.0.0) = C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RPB.EXE
1952 | [Owner : Syst�me |Parent : 612] - (.Malwarebytes Corporation - Malwarebytes Anti-Exploit Service.) - (0.10.3.100) = C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae-svc.exe
1980 | [Owner : Syst�me |Parent : 612] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - (3.0.2.0) = C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
1540 | [Owner : Syst�me |Parent : 612] - (.NVIDIA Corporation - NVIDIA Network Service.) - (1.0.5.16) = C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
2056 | [Owner : Syst�me |Parent : 612] - (.NVIDIA Corporation - NVIDIA Streamer Service.) - (2.1.214.0) = C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
2180 | [Owner : Syst�me |Parent : 612] - (.Ulead Systems, Inc. - ULCDRSvr.) - (1.0.0.4) = C:\Program Files (x86)\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
2212 | [Owner : Syst�me |Parent : 612] - (.Microsoft Corporation - Microsoft� Windows Live ID Service.) - (6.500.3165.0) = C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
2532 | [Owner : Syst�me |Parent : 2212] - (.Microsoft Corporation - Microsoft� Windows Live ID Service Monitor.) - (6.500.3165.0) = C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
1344 | [Owner : Syst�me |Parent : 612] - (.Microsoft Corporation - Indexeur Microsoft Windows Search.) - (7.0.7601.17610) = C:\Windows\System32\SearchIndexer.exe
2620 | [Owner : SERVICE R�SEAU |Parent : 2056] - (.NVIDIA Corporation - NVIDIA Streamer Service.) - (2.1.214.0) = C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
2600 | [Owner : SERVICE R�SEAU |Parent : 492] - (.Microsoft Corporation - H�te de la fen�tre de la console.) - (6.1.7601.18229) = C:\Windows\System32\conhost.exe
2476 | [Owner : SERVICE R�SEAU |Parent : 612] - (.Microsoft Corporation - Service Partage r�seau du Lecteur Windows Media.) - (12.0.7601.17514) = C:\Program Files\Windows Media Player\wmpnetwk.exe
968 | [Owner : bullshit |Parent : 612] - (.Microsoft Corporation - Processus h�te pour T�ches Windows.) - (6.1.7601.18010) = C:\Windows\System32\taskhost.exe
2952 | [Owner : bullshit |Parent : 1504] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - (1.0.0.532) = C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
3248 | [Owner : bullshit |Parent : 2420] - (.Microsoft Corporation - Explorateur Windows.) - (6.1.7601.17567) = C:\Windows\explorer.exe
1028 | [Owner : bullshit |Parent : 3832] - (.NVIDIA Corporation - NVIDIA GeForce Experience Backend.) - (14.6.22.1) = C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
3560 | [Owner : bullshit |Parent : 3248] - (.Analog Devices, Inc. - SoundMAX Audio Settings (32-bit).) - (6.0.7200.24) = C:\Program Files (x86)\Analog Devices\SoundMAX\SoundMAX.exe
3084 | [Owner : bullshit |Parent : 3248] - (.Logitech, Inc. - Logitech SetPoint Event Manager (UNICODE).) - (6.32.7.0) = C:\Program Files\Logitech\SetPointP\SetPoint.exe
2780 | [Owner : bullshit |Parent : 3248] - (.Valve Corporation - Steam Client Bootstrapper.) - (2.25.32.45) = C:\Program Files (x86)\Steam\Steam.exe
884 | [Owner : bullshit |Parent : 1380] - (.NVIDIA Corporation - NVIDIA Settings.) - (7.17.13.3788) = C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
2320 | [Owner : bullshit |Parent : 3080] - (.Analog Devices, Inc. - SMax4PNP.) - (6.1.6000.99) = C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe
3572 | [Owner : bullshit |Parent : 3080] - (.Leadtek Research Inc. - WinFast DTV Schedule.) - (1.1.0.3) = C:\Program Files\WinFast\WFDTV\DTVSchdl.exe
1468 | [Owner : bullshit |Parent : 3080] - (.ArcSoft Inc. - ArcSoft Connect Daemon.) - (1.1.0.49) = C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
564 | [Owner : Syst�me |Parent : 2056] - (.NVIDIA Corporation - NVIDIA Streamer Service.) - (2.1.214.0) = C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
3592 | [Owner : Syst�me |Parent : 576] - (.Microsoft Corporation - H�te de la fen�tre de la console.) - (6.1.7601.18229) = C:\Windows\System32\conhost.exe
1464 | [Owner : bullshit |Parent : 3080] - (.Malwarebytes Corporation - Malwarebytes Anti-Exploit.) - (0.10.3.100) = C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae.exe
2796 | [Owner : bullshit |Parent : 1468] - (.ArcSoft Inc. - ArcSoft Connect Notifier.) - (1.1.0.48) = C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ArcCon.ac
4880 | [Owner : bullshit |Parent : 3248] - (.Dropbox, Inc. - Dropbox.) - (2.8.2.0) = C:\Users\bullshit\AppData\Roaming\Dropbox\bin\Dropbox.exe
4240 | [Owner : bullshit |Parent : 3084] - (.Logitech, Inc. - Logitech KHAL Main Process.) - (5.33.14.0) = C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.exe
5112 | [Owner : bullshit |Parent : 748] - (.Microsoft Corporation - Sink to receive asynchronous callbacks for WMI client application.) - (6.1.7600.16385) = C:\Windows\System32\wbem\unsecapp.exe
2564 | [Owner : Syst�me |Parent : 612] - (.Valve Corporation - Steam Client Service.) - (2.25.32.45) = C:\Program Files (x86)\Common Files\Steam\SteamService.exe
5636 | [Owner : bullshit |Parent : 3248] - (.Mozilla Corporation - Firefox.) - (30.0.0.5269) = C:\Program Files (x86)\Mozilla Firefox\firefox.exe
5736 | [Owner : bullshit |Parent : 5636] - (.Mozilla Corporation - Plugin Container for Firefox.) - (30.0.0.5269) = C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
3628 | [Owner : bullshit |Parent : 5736] - (.Adobe Systems, Inc. - Adobe Flash Player 13.0 r0.) - (13.0.0.214) = C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe
2524 | [Owner : bullshit |Parent : 3628] - (.Adobe Systems, Inc. - Adobe Flash Player 13.0 r0.) - (13.0.0.214) = C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe
4168 | [Owner : bullshit |Parent : 496] - (.Microsoft Corporation - Moteur du Planificateur de t�ches.) - (6.1.7601.17514) = C:\Windows\System32\taskeng.exe
2780 | [Owner : bullshit |Parent : 3248] - (.Valve Corporation - Steam Client Bootstrapper.) - (2.25.32.45) = C:\Program Files (x86)\Steam\Steam.exe
5636 | [Owner : bullshit |Parent : 3248] - (.Mozilla Corporation - Firefox.) - (30.0.0.5269) = C:\Program Files (x86)\Mozilla Firefox\firefox.exe

�� | Processus d�marr�s

368 | [Owner : Syst�me |Parent : 4] - (.Microsoft Corporation - Gestionnaire de sessions Windows.) - (6.1.7601.18229) = C:\Windows\System32\smss.exe
492 | [Owner : Syst�me |Parent : 444] - (.Microsoft Corporation - Processus d�ex�cution client-serveur.) - (6.1.7600.16385) = C:\Windows\System32\csrss.exe
556 | [Owner : Syst�me |Parent : 444] - (.Microsoft Corporation - Application de d�marrage de Windows.) - (6.1.7600.16385) = C:\Windows\System32\wininit.exe
576 | [Owner : Syst�me |Parent : 564] - (.Microsoft Corporation - Processus d�ex�cution client-serveur.) - (6.1.7600.16385) = C:\Windows\System32\csrss.exe
612 | [Owner : Syst�me |Parent : 556] - (.Microsoft Corporation - Applications Services et Contr�leur.) - (6.1.7600.16385) = C:\Windows\System32\services.exe
632 | [Owner : Syst�me |Parent : 556] - (.Microsoft Corporation - Local Security Authority Process.) - (6.1.7601.18443) = C:\Windows\System32\lsass.exe
640 | [Owner : Syst�me |Parent : 556] - (.Microsoft Corporation - Service du gestionnaire de session locale.) - (6.1.7601.17514) = C:\Windows\System32\lsm.exe
748 | [Owner : Syst�me |Parent : 612] - (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.1.7600.16385) = C:\Windows\System32\svchost.exe
812 | [Owner : Syst�me |Parent : 564] - (.Microsoft Corporation - Application d�ouverture de session Windows.) - (6.1.7601.18409) = C:\Windows\System32\winlogon.exe
944 | [Owner : SERVICE R�SEAU |Parent : 612] - (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.1.7600.16385) = C:\Windows\System32\svchost.exe
128 | [Owner : SERVICE LOCAL |Parent : 612] - (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.1.7600.16385) = C:\Windows\System32\svchost.exe
304 | [Owner : Syst�me |Parent : 612] - (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.1.7600.16385) = C:\Windows\System32\svchost.exe
408 | [Owner : SERVICE LOCAL |Parent : 612] - (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.1.7600.16385) = C:\Windows\System32\svchost.exe
496 | [Owner : Syst�me |Parent : 612] - (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.1.7600.16385) = C:\Windows\System32\svchost.exe
1092 | [Owner : Syst�me |Parent : 612] - (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.1.7600.16385) = C:\Windows\System32\svchost.exe
1208 | [Owner : SERVICE R�SEAU |Parent : 612] - (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.1.7600.16385) = C:\Windows\System32\svchost.exe
1288 | [Owner : Syst�me |Parent : 612] - (.AVAST Software - avast! Service.) - (9.0.2018.391) = C:\Program Files\Antivirus\Avast\AvastSvc.exe
1652 | [Owner : SERVICE LOCAL |Parent : 612] - (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.1.7600.16385) = C:\Windows\System32\svchost.exe
1924 | [Owner : SERVICE LOCAL |Parent : 612] - (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.1.7600.16385) = C:\Windows\System32\svchost.exe
1504 | [Owner : Syst�me |Parent : 612] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - (3.0.2.0) = C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
3236 | [Owner : SERVICE R�SEAU |Parent : 612] - (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.1.7600.16385) = C:\Windows\System32\svchost.exe
3704 | [Owner : Syst�me |Parent : 612] - (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.1.7600.16385) = C:\Windows\System32\svchost.exe
3964 | [Owner : bullshit |Parent : 304] - (.Microsoft Corporation - Gestionnaire de fen�tres du Bureau.) - (6.1.7600.16385) = C:\Windows\System32\dwm.exe
3772 | [Owner : bullshit |Parent : 3080] - (.AVAST Software - avast! Antivirus.) - (9.0.2018.401) = C:\Program Files\Antivirus\Avast\avastui.exe
4636 | [Owner : SERVICE R�SEAU |Parent : 748] - (.Microsoft Corporation - WMI Provider Host.) - (6.1.7601.17514) = C:\Windows\System32\wbem\WmiPrvSE.exe
4344 | [Owner : SERVICE LOCAL |Parent : 612] - (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.1.7600.16385) = C:\Windows\System32\svchost.exe
5276 | [Owner : Syst�me |Parent : 612] - (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.1.7600.16385) = C:\Windows\System32\svchost.exe
3764 | [Owner : SERVICE LOCAL |Parent : 128] - (.Microsoft Corporation - Isolation graphique de p�riph�rique audio Windows .) - (6.1.7601.17514) = C:\Windows\System32\audiodg.exe
2988 | [Owner : bullshit |Parent : 5692] - (. - Shortcut_Module.) - (29.6.2014.1) = C:\Users\bullshit\Desktop\Shortcut_Module.exe
6088 | [Owner : bullshit |Parent : 2988] - (. - Shortcut_Module_Protect.) - (1.0.0.0) = C:\Shortcut_Module\Protect_Module.exe

�� | RUN

04 - HKLM\..\Run : [WinFastDTV] C:\Program Files\WinFast\WFDTV\DTVSchdl.exe
04 - HKLM64\..\Run : [EvtMgr6] C:\Program Files\Logitech\SetPointP\SetPoint.exe /launchGaming
04 - HKU\S-1-5-21-1531804078-1903872509-239892045-1001\..\Run : [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun

�� | Services

Service en fonctionnement : WINDEFEND
Service stopp� : WINDEFEND
Service en fonctionnement : MMCSS
Service en fonctionnement : Dhcp
Service stopp� : Dhcp
Service en fonctionnement : TcpIp
Service en fonctionnement : SSDPSRV
Service en fonctionnement : MPSSvc
Service stopp� : MPSSvc
Service en fonctionnement : LanmanServer
Service en fonctionnement : DNScache
Service stopp� : DNScache
Supprim� avec succ�s : HKLM\..\ControlSet007\Services\APNMCP : "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe"

�� | Hosts

C:\Windows\System32\Drivers\etc\hosts : Remis a z�ro avec succ�s

�� | Registre

Supprim� avec succ�s : HKLM\Software\Classes\Applications\iLividSetupV1[1].exe :
Supprim� avec succ�s : HKU\S-1-5-21-1531804078-1903872509-239892045-1001\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-1531804078-1903872509-239892045-1001\Software\SweetIM
Supprim� avec succ�s : HKLM\Software\Classes\Interface\{DAF611F6-C2A6-41E8-B9A9-AFC0EFFDA9ED} : 2014.04.17.01
�� | Shortcut_Module | g3n-h@ckm@n | 29.06.2014.1

�� Vista | 7 | 8 | 8.1 - 32/64 bits �� - Start 02:33:02 - 29/06/2014

Mis � jour le : 29/06/2014 | 00.05 par g3n-h@ckm@n

Contact : http://www.sosvirus.net
Assistance : http://www.sosvirus.net/forum-virus-securite.html
Feedbacks : http://www.sosvirus.net/feedbacks-t75915.html

Boot: Normal boot

Syst�me : Windows 7 Home Premium (64 bits) HomePremium Service Pack 1

M�moire RAM = Total (MB) : 3145 | Libre (MB) : 1540
Pagefile = Total (MB) : 6288 | Libre (MB) : 4494
Virtuelle = Total (MB) : 4194 | Libre (MB) : 4025

Registre sauvegard� , pour restaurer : C:\Shortcut_Module\Save\Clean\ERDNT.exe

�� | Mises � jour Windows

Aucune mise � jour d�tect�e !!!

�� | Navigateurs

IE : 11.0.9600.17126 (� Microsoft Corporation. Tous droits r�serv�s.)
FF : 30.0.0.5269 (�Firefox and Mozilla Developers; available under the MPL 2 license.)
GC : 35.0.1916.153 (Copyright 2012 Google Inc. All rights reserved.)

�� | Security

AM : Malwarebytes' Anti-Malware (1.0.0.532) [2014.04.17.01]
FW : avast! Antivirus Disabled
WMI : OK
WU: Windows Update Service [Auto(2)] = Arr�t�
AS: Windows Defender [Auto(2)] = Arr�t�
FW: Windows FireWall Service [Auto(2)] = Arr�t�

Mise en veille supprim�e !

�� | FlashPlayer

ActiveX : 13.0.0.214
Plugin : 13.0.0.214

�� | Processus tu�s

880 | [Owner : Syst�me |Parent : 612] - (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 337.88.) - (8.17.13.3788) = C:\Windows\System32\nvvsvc.exe
904 | [Owner : Syst�me |Parent : 612] - (.NVIDIA Corporation - Stereo Vision Control Panel API Server.) - (7.17.13.3788) = C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
1364 | [Owner : Syst�me |Parent : 880] - (.NVIDIA Corporation - NVIDIA User Experience Driver Component.) - (8.17.13.3788) = C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
1372 | [Owner : Syst�me |Parent : 880] - (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 337.88.) - (8.17.13.3788) = C:\Windows\System32\nvvsvc.exe
1624 | [Owner : Syst�me |Parent : 612] - (.Microsoft Corporation - Application sous-syst�me spouleur.) - (6.1.7601.17777) = C:\Windows\System32\spoolsv.exe
1764 | [Owner : Syst�me |Parent : 612] - (.ArcSoft Inc. - ArcSoft Connect Service.) - (1.1.0.47) = C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
1796 | [Owner : Syst�me |Parent : 612] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - (1.701.3.3014) = C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
1824 | [Owner : Syst�me |Parent : 612] - (.Andrea Electronics Corporation - Andrea filters APO access service (64-bit).) - (1.0.64.12) = C:\Windows\System32\AEADISRV.EXE
1868 | [Owner : Syst�me |Parent : 612] - (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) - (7.0.0.0) = C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50STB.EXE
1904 | [Owner : Syst�me |Parent : 612] - (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) - (7.0.0.0) = C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RPB.EXE
1960 | [Owner : Syst�me |Parent : 612] - (.Malwarebytes Corporation - Malwarebytes Anti-Exploit Service.) - (0.10.3.100) = C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae-svc.exe
1988 | [Owner : Syst�me |Parent : 612] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - (3.0.2.0) = C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
1524 | [Owner : Syst�me |Parent : 612] - (.NVIDIA Corporation - NVIDIA Network Service.) - (1.0.5.16) = C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
1508 | [Owner : Syst�me |Parent : 612] - (.NVIDIA Corporation - NVIDIA Streamer Service.) - (2.1.214.0) = C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
2180 | [Owner : Syst�me |Parent : 612] - (.Ulead Systems, Inc. - ULCDRSvr.) - (1.0.0.4) = C:\Program Files (x86)\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
2216 | [Owner : Syst�me |Parent : 612] - (.Microsoft Corporation - Microsoft� Windows Live ID Service.) - (6.500.3165.0) = C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
2540 | [Owner : Syst�me |Parent : 2216] - (.Microsoft Corporation - Microsoft� Windows Live ID Service Monitor.) - (6.500.3165.0) = C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
3040 | [Owner : bullshit |Parent : 612] - (.Microsoft Corporation - Processus h�te pour T�ches Windows.) - (6.1.7601.18010) = C:\Windows\System32\taskhost.exe
1356 | [Owner : bullshit |Parent : 1412] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - (1.0.0.532) = C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
2588 | [Owner : bullshit |Parent : 2520] - (.Microsoft Corporation - Explorateur Windows.) - (6.1.7601.17567) = C:\Windows\explorer.exe
2996 | [Owner : bullshit |Parent : 2588] - (.Analog Devices, Inc. - SoundMAX Audio Settings (32-bit).) - (6.0.7200.24) = C:\Program Files (x86)\Analog Devices\SoundMAX\SoundMAX.exe
1472 | [Owner : bullshit |Parent : 2588] - (.Logitech, Inc. - Logitech SetPoint Event Manager (UNICODE).) - (6.32.7.0) = C:\Program Files\Logitech\SetPointP\SetPoint.exe
3104 | [Owner : bullshit |Parent : 2588] - (.NVIDIA Corporation - NVIDIA GeForce Experience Backend.) - (14.6.22.1) = C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
3152 | [Owner : Syst�me |Parent : 696] - (.Microsoft Corporation - Moteur du Planificateur de t�ches.) - (6.1.7601.17514) = C:\Windows\System32\taskeng.exe
3328 | [Owner : bullshit |Parent : 2588] - (.Valve Corporation - Steam Client Bootstrapper.) - (2.25.32.45) = C:\Program Files (x86)\Steam\Steam.exe
3500 | [Owner : bullshit |Parent : 1472] - (.Logitech, Inc. - Logitech KHAL Main Process.) - (5.33.14.0) = C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.exe
3616 | [Owner : bullshit |Parent : 3452] - (.Analog Devices, Inc. - SMax4PNP.) - (6.1.6000.99) = C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe
3648 | [Owner : bullshit |Parent : 1364] - (.NVIDIA Corporation - NVIDIA Settings.) - (7.17.13.3788) = C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
3664 | [Owner : bullshit |Parent : 3452] - (.Leadtek Research Inc. - WinFast DTV Schedule.) - (1.1.0.3) = C:\Program Files\WinFast\WFDTV\DTVSchdl.exe
3676 | [Owner : bullshit |Parent : 3452] - (.ArcSoft Inc. - ArcSoft Connect Daemon.) - (1.1.0.49) = C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
3824 | [Owner : bullshit |Parent : 3676] - (.ArcSoft Inc. - ArcSoft Connect Notifier.) - (1.1.0.48) = C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ArcCon.ac
4040 | [Owner : bullshit |Parent : 3452] - (.Malwarebytes Corporation - Malwarebytes Anti-Exploit.) - (0.10.3.100) = C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae.exe
3248 | [Owner : Syst�me |Parent : 612] - (.Microsoft Corporation - Indexeur Microsoft Windows Search.) - (7.0.7601.17610) = C:\Windows\System32\SearchIndexer.exe
4316 | [Owner : bullshit |Parent : 2588] - (.Dropbox, Inc. - Dropbox.) - (2.8.2.0) = C:\Users\bullshit\AppData\Roaming\Dropbox\bin\Dropbox.exe
5072 | [Owner : bullshit |Parent : 752] - (.Microsoft Corporation - Sink to receive asynchronous callbacks for WMI client application.) - (6.1.7600.16385) = C:\Windows\System32\wbem\unsecapp.exe
6048 | [Owner : SERVICE R�SEAU |Parent : 612] - (.Microsoft Corporation - Service Partage r�seau du Lecteur Windows Media.) - (12.0.7601.17514) = C:\Program Files\Windows Media Player\wmpnetwk.exe
3224 | [Owner : SERVICE R�SEAU |Parent : 612] - (.Microsoft Corporation - Service de la plateforme de protection logicielle Microsoft.) - (6.1.7601.17514) = C:\Windows\System32\sppsvc.exe

�� | Processus d�marr�s

368 | [Owner : Syst�me |Parent : 4] - (.Microsoft Corporation - Gestionnaire de sessions Windows.) - (6.1.7601.18229) = C:\Windows\System32\smss.exe
492 | [Owner : Syst�me |Parent : 444] - (.Microsoft Corporation - Processus d�ex�cution client-serveur.) - (6.1.7600.16385) = C:\Windows\System32\csrss.exe
556 | [Owner : Syst�me |Parent : 444] - (.Microsoft Corporation - Application de d�marrage de Windows.) - (6.1.7600.16385) = C:\Windows\System32\wininit.exe
580 | [Owner : Syst�me |Parent : 564] - (.Microsoft Corporation - Processus d�ex�cution client-serveur.) - (6.1.7600.16385) = C:\Windows\System32\csrss.exe
612 | [Owner : Syst�me |Parent : 556] - (.Microsoft Corporation - Applications Services et Contr�leur.) - (6.1.7600.16385) = C:\Windows\System32\services.exe
632 | [Owner : Syst�me |Parent : 556] - (.Microsoft Corporation - Local Security Authority Process.) - (6.1.7601.18443) = C:\Windows\System32\lsass.exe
640 | [Owner : Syst�me |Parent : 556] - (.Microsoft Corporation - Service du gestionnaire de session locale.) - (6.1.7601.17514) = C:\Windows\System32\lsm.exe
752 | [Owner : Syst�me |Parent : 612] - (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.1.7600.16385) = C:\Windows\System32\svchost.exe
812 | [Owner : Syst�me |Parent : 564] - (.Microsoft Corporation - Application d�ouverture de session Windows.) - (6.1.7601.18409) = C:\Windows\System32\winlogon.exe
948 | [Owner : SERVICE R�SEAU |Parent : 612] - (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.1.7600.16385) = C:\Windows\System32\svchost.exe
120 | [Owner : SERVICE LOCAL |Parent : 612] - (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.1.7600.16385) = C:\Windows\System32\svchost.exe
324 | [Owner : Syst�me |Parent : 612] - (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.1.7600.16385) = C:\Windows\System32\svchost.exe
508 | [Owner : SERVICE LOCAL |Parent : 612] - (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.1.7600.16385) = C:\Windows\System32\svchost.exe
696 | [Owner : Syst�me |Parent : 612] - (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.1.7600.16385) = C:\Windows\System32\svchost.exe
1076 | [Owner : SERVICE LOCAL |Parent : 120] - (.Microsoft Corporation - Isolation graphique de p�riph�rique audio Windows .) - (6.1.7601.17514) = C:\Windows\System32\audiodg.exe
1112 | [Owner : Syst�me |Parent : 612] - (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.1.7600.16385) = C:\Windows\System32\svchost.exe
1212 | [Owner : SERVICE R�SEAU |Parent : 612] - (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.1.7600.16385) = C:\Windows\System32\svchost.exe
1284 | [Owner : Syst�me |Parent : 612] - (.AVAST Software - avast! Service.) - (9.0.2018.391) = C:\Program Files\Antivirus\Avast\AvastSvc.exe
1660 | [Owner : SERVICE LOCAL |Parent : 612] - (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.1.7600.16385) = C:\Windows\System32\svchost.exe
1936 | [Owner : SERVICE LOCAL |Parent : 612] - (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.1.7600.16385) = C:\Windows\System32\svchost.exe
1412 | [Owner : Syst�me |Parent : 612] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - (3.0.2.0) = C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
2136 | [Owner : SERVICE LOCAL |Parent : 612] - (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.1.7600.16385) = C:\Windows\System32\svchost.exe
1744 | [Owner : bullshit |Parent : 324] - (.Microsoft Corporation - Gestionnaire de fen�tres du Bureau.) - (6.1.7600.16385) = C:\Windows\System32\dwm.exe
4012 | [Owner : bullshit |Parent : 3452] - (.AVAST Software - avast! Antivirus.) - (9.0.2018.401) = C:\Program Files\Antivirus\Avast\avastui.exe
3320 | [Owner : SERVICE R�SEAU |Parent : 612] - (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.1.7600.16385) = C:\Windows\System32\svchost.exe
4424 | [Owner : SERVICE R�SEAU |Parent : 752] - (.Microsoft Corporation - WMI Provider Host.) - (6.1.7601.17514) = C:\Windows\System32\wbem\WmiPrvSE.exe
5460 | [Owner : Syst�me |Parent : 752] - (.Microsoft Corporation - WMI Provider Host.) - (6.1.7601.17514) = C:\Windows\System32\wbem\WmiPrvSE.exe
5892 | [Owner : SERVICE LOCAL |Parent : 612] - (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.1.7600.16385) = C:\Windows\System32\svchost.exe
5944 | [Owner : bullshit |Parent : 2588] - (. - Shortcut_Module.) - (29.6.2014.1) = C:\Users\bullshit\Desktop\Shortcut_Module.exe
3524 | [Owner : Syst�me |Parent : 612] - (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.1.7600.16385) = C:\Windows\System32\svchost.exe
1676 | [Owner : bullshit |Parent : 5944] - (. - Shortcut_Module_Protect.) - (1.0.0.0) = C:\Shortcut_Module\Protect_Module.exe

�� | RUN

04 - HKLM\..\Run : [WinFastDTV] C:\Program Files\WinFast\WFDTV\DTVSchdl.exe
04 - HKLM64\..\Run : [EvtMgr6] C:\Program Files\Logitech\SetPointP\SetPoint.exe /launchGaming
04 - HKU\S-1-5-21-1531804078-1903872509-239892045-1001\..\Run : [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun

�� | Services

Service en fonctionnement : WINDEFEND
Service stopp� : WINDEFEND
Service en fonctionnement : MMCSS
Service en fonctionnement : Dhcp
Service en fonctionnement : TcpIp
Service en fonctionnement : WinHttpAutoProxysvc
Service stopp� : WinHttpAutoProxysvc
Service en fonctionnement : SSDPSRV
Service en fonctionnement : MPSSvc
Service stopp� : MPSSvc
Service en fonctionnement : LanmanServer
Service en fonctionnement : DNScache
Service stopp� : DNScache

�� | Hosts

C:\Windows\System32\Drivers\etc\hosts : Remis a z�ro avec succ�s

�� | Registre

Supprim� avec succ�s : HKLM64\Software\Classes\Interface\{DAF611F6-C2A6-41E8-B9A9-AFC0EFFDA9ED} : 2014.04.17.01
�� | Shortcut_Module | g3n-h@ckm@n | 29.06.2014.2

�� Vista | 7 | 8 | 8.1 - 32/64 bits �� - Start 12:00:09 - 29/06/2014

Mis � jour le : 29/06/2014 | 04.15 par g3n-h@ckm@n

Contact : http://www.sosvirus.net
Assistance : http://www.sosvirus.net/forum-virus-securite.html
Feedbacks : http://www.sosvirus.net/feedbacks-t75915.html

Boot: Normal boot

Syst�me : Windows 7 Home Premium (64 bits) HomePremium Service Pack 1

M�moire RAM = Total (MB) : 3145 | Libre (MB) : 1573
Pagefile = Total (MB) : 6288 | Libre (MB) : 4479
Virtuelle = Total (MB) : 4194 | Libre (MB) : 4015

Registre sauvegard� , pour restaurer : C:\Shortcut_Module\Save\Clean\ERDNT.exe

�� | Mises � jour Windows

Aucune mise � jour d�tect�e !!!

�� | Navigateurs

IE : 11.0.9600.17126 (� Microsoft Corporation. Tous droits r�serv�s.)
FF : 30.0.0.5269 (�Firefox and Mozilla Developers; available under the MPL 2 license.)
GC : 35.0.1916.153 (Copyright 2012 Google Inc. All rights reserved.)

�� | Security

AS : avast! Antivirus Enabled
AM : Malwarebytes' Anti-Malware (1.0.0.532) [2014.04.17.01]
FW : avast! Antivirus Disabled
WMI : OK
WU: Windows Update Service [Auto(2)] = Arr�t�
AS: Windows Defender [Auto(2)] = Arr�t�
FW: Windows FireWall Service [Auto(2)] = Arr�t�

Mise en veille supprim�e !

�� | FlashPlayer

ActiveX : 13.0.0.214
Plugin : 13.0.0.214

�� | Processus tu�s

884 | [Owner : Syst�me |Parent : 620] - (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 337.88.) - (8.17.13.3788) = C:\Windows\System32\nvvsvc.exe
908 | [Owner : Syst�me |Parent : 620] - (.NVIDIA Corporation - Stereo Vision Control Panel API Server.) - (7.17.13.3788) = C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
1336 | [Owner : Syst�me |Parent : 884] - (.NVIDIA Corporation - NVIDIA User Experience Driver Component.) - (8.17.13.3788) = C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
1344 | [Owner : Syst�me |Parent : 884] - (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 337.88.) - (8.17.13.3788) = C:\Windows\System32\nvvsvc.exe
1624 | [Owner : Syst�me |Parent : 620] - (.Microsoft Corporation - Application sous-syst�me spouleur.) - (6.1.7601.17777) = C:\Windows\System32\spoolsv.exe
1744 | [Owner : Syst�me |Parent : 620] - (.ArcSoft Inc. - ArcSoft Connect Service.) - (1.1.0.47) = C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
1780 | [Owner : Syst�me |Parent : 620] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - (1.701.3.3014) = C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
1800 | [Owner : Syst�me |Parent : 620] - (.Andrea Electronics Corporation - Andrea filters APO access service (64-bit).) - (1.0.64.12) = C:\Windows\System32\AEADISRV.EXE
1848 | [Owner : Syst�me |Parent : 620] - (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) - (7.0.0.0) = C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50STB.EXE
1888 | [Owner : Syst�me |Parent : 620] - (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) - (7.0.0.0) = C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RPB.EXE
1960 | [Owner : Syst�me |Parent : 620] - (.Malwarebytes Corporation - Malwarebytes Anti-Exploit Service.) - (0.10.3.100) = C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae-svc.exe
1988 | [Owner : Syst�me |Parent : 620] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - (3.0.2.0) = C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
1516 | [Owner : Syst�me |Parent : 620] - (.NVIDIA Corporation - NVIDIA Network Service.) - (1.0.5.16) = C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
1532 | [Owner : Syst�me |Parent : 620] - (.NVIDIA Corporation - NVIDIA Streamer Service.) - (2.1.214.0) = C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
2184 | [Owner : Syst�me |Parent : 620] - (.Ulead Systems, Inc. - ULCDRSvr.) - (1.0.0.4) = C:\Program Files (x86)\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
2212 | [Owner : Syst�me |Parent : 620] - (.Microsoft Corporation - Microsoft� Windows Live ID Service.) - (6.500.3165.0) = C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
2564 | [Owner : Syst�me |Parent : 2212] - (.Microsoft Corporation - Microsoft� Windows Live ID Service Monitor.) - (6.500.3165.0) = C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
1416 | [Owner : Syst�me |Parent : 620] - (.Microsoft Corporation - Indexeur Microsoft Windows Search.) - (7.0.7601.17610) = C:\Windows\System32\SearchIndexer.exe
3752 | [Owner : bullshit |Parent : 620] - (.Microsoft Corporation - Processus h�te pour T�ches Windows.) - (6.1.7601.18010) = C:\Windows\System32\taskhost.exe
3632 | [Owner : bullshit |Parent : 1392] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - (1.0.0.532) = C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
3948 | [Owner : bullshit |Parent : 3908] - (.Microsoft Corporation - Explorateur Windows.) - (6.1.7601.17567) = C:\Windows\explorer.exe
3512 | [Owner : bullshit |Parent : 440] - (.NVIDIA Corporation - NVIDIA GeForce Experience Backend.) - (14.6.22.1) = C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
2720 | [Owner : Syst�me |Parent : 420] - (.Microsoft Corporation - Moteur du Planificateur de t�ches.) - (6.1.7601.17514) = C:\Windows\System32\taskeng.exe
3504 | [Owner : bullshit |Parent : 3948] - (.Analog Devices, Inc. - SoundMAX Audio Settings (32-bit).) - (6.0.7200.24) = C:\Program Files (x86)\Analog Devices\SoundMAX\SoundMAX.exe
924 | [Owner : bullshit |Parent : 3948] - (.Logitech, Inc. - Logitech SetPoint Event Manager (UNICODE).) - (6.32.7.0) = C:\Program Files\Logitech\SetPointP\SetPoint.exe
1128 | [Owner : bullshit |Parent : 3948] - (.Valve Corporation - Steam Client Bootstrapper.) - (2.25.32.45) = C:\Program Files (x86)\Steam\Steam.exe
2332 | [Owner : bullshit |Parent : 1336] - (.NVIDIA Corporation - NVIDIA Settings.) - (7.17.13.3788) = C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
3700 | [Owner : bullshit |Parent : 3532] - (.Analog Devices, Inc. - SMax4PNP.) - (6.1.6000.99) = C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe
968 | [Owner : bullshit |Parent : 3532] - (.Leadtek Research Inc. - WinFast DTV Schedule.) - (1.1.0.3) = C:\Program Files\WinFast\WFDTV\DTVSchdl.exe
1844 | [Owner : bullshit |Parent : 3532] - (.ArcSoft Inc. - ArcSoft Connect Daemon.) - (1.1.0.49) = C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
3724 | [Owner : bullshit |Parent : 3532] - (.Malwarebytes Corporation - Malwarebytes Anti-Exploit.) - (0.10.3.100) = C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae.exe
4888 | [Owner : bullshit |Parent : 3948] - (.Dropbox, Inc. - Dropbox.) - (2.8.2.0) = C:\Users\bullshit\AppData\Roaming\Dropbox\bin\Dropbox.exe
4952 | [Owner : bullshit |Parent : 924] - (.Logitech, Inc. - Logitech KHAL Main Process.) - (5.33.14.0) = C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.exe
4752 | [Owner : bullshit |Parent : 756] - (.Microsoft Corporation - Sink to receive asynchronous callbacks for WMI client application.) - (6.1.7600.16385) = C:\Windows\System32\wbem\unsecapp.exe
5000 | [Owner : bullshit |Parent : 1844] - (.ArcSoft Inc. - ArcSoft Connect Notifier.) - (1.1.0.48) = C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ArcCon.ac
4744 | [Owner : SERVICE R�SEAU |Parent : 620] - (.Microsoft Corporation - Service Partage r�seau du Lecteur Windows Media.) - (12.0.7601.17514) = C:\Program Files\Windows Media Player\wmpnetwk.exe
2576 | [Owner : SERVICE R�SEAU |Parent : 620] - (.Microsoft Corporation - Service de la plateforme de protection logicielle Microsoft.) - (6.1.7601.17514) = C:\Windows\System32\sppsvc.exe
5732 | [Owner : bullshit |Parent : 420] - (.Microsoft Corporation - Moteur du Planificateur de t�ches.) - (6.1.7601.17514) = C:\Windows\System32\taskeng.exe

�� | Processus d�marr�s

368 | [Owner : Syst�me |Parent : 4] - (.Microsoft Corporation - Gestionnaire de sessions Windows.) - (6.1.7601.18229) = C:\Windows\System32\smss.exe
500 | [Owner : Syst�me |Parent : 448] - (.Microsoft Corporation - Processus d�ex�cution client-serveur.) - (6.1.7600.16385) = C:\Windows\System32\csrss.exe
564 | [Owner : Syst�me |Parent : 448] - (.Microsoft Corporation - Application de d�marrage de Windows.) - (6.1.7600.16385) = C:\Windows\System32\wininit.exe
584 | [Owner : Syst�me |Parent : 572] - (.Microsoft Corporation - Processus d�ex�cution client-serveur.) - (6.1.7600.16385) = C:\Windows\System32\csrss.exe
620 | [Owner : Syst�me |Parent : 564] - (.Microsoft Corporation - Applications Services et Contr�leur.) - (6.1.7600.16385) = C:\Windows\System32\services.exe
640 | [Owner : Syst�me |Parent : 564] - (.Microsoft Corporation - Local Security Authority Process.) - (6.1.7601.18443) = C:\Windows\System32\lsass.exe
648 | [Owner : Syst�me |Parent : 564] - (.Microsoft Corporation - Service du gestionnaire de session locale.) - (6.1.7601.17514) = C:\Windows\System32\lsm.exe
756 | [Owner : Syst�me |Parent : 620] - (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.1.7600.16385) = C:\Windows\System32\svchost.exe
796 | [Owner : Syst�me |Parent : 572] - (.Microsoft Corporation - Application d�ouverture de session Windows.) - (6.1.7601.18409) = C:\Windows\System32\winlogon.exe
952 | [Owner : SERVICE R�SEAU |Parent : 620] - (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.1.7600.16385) = C:\Windows\System32\svchost.exe
284 | [Owner : SERVICE LOCAL |Parent : 620] - (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.1.7600.16385) = C:\Windows\System32\svchost.exe
320 | [Owner : Syst�me |Parent : 620] - (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.1.7600.16385) = C:\Windows\System32\svchost.exe
512 | [Owner : SERVICE LOCAL |Parent : 620] - (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.1.7600.16385) = C:\Windows\System32\svchost.exe
420 | [Owner : Syst�me |Parent : 620] - (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.1.7600.16385) = C:\Windows\System32\svchost.exe
1072 | [Owner : SERVICE LOCAL |Parent : 284] - (.Microsoft Corporation - Isolation graphique de p�riph�rique audio Windows .) - (6.1.7601.17514) = C:\Windows\System32\audiodg.exe
1112 | [Owner : Syst�me |Parent : 620] - (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.1.7600.16385) = C:\Windows\System32\svchost.exe
1216 | [Owner : SERVICE R�SEAU |Parent : 620] - (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.1.7600.16385) = C:\Windows\System32\svchost.exe
1292 | [Owner : Syst�me |Parent : 620] - (.AVAST Software - avast! Service.) - (9.0.2018.391) = C:\Program Files\Antivirus\Avast\AvastSvc.exe
1660 | [Owner : SERVICE LOCAL |Parent : 620] - (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.1.7600.16385) = C:\Windows\System32\svchost.exe
1936 | [Owner : SERVICE LOCAL |Parent : 620] - (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.1.7600.16385) = C:\Windows\System32\svchost.exe
1392 | [Owner : Syst�me |Parent : 620] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - (3.0.2.0) = C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
2136 | [Owner : SERVICE LOCAL |Parent : 620] - (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.1.7600.16385) = C:\Windows\System32\svchost.exe
3272 | [Owner : SERVICE R�SEAU |Parent : 620] - (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.1.7600.16385) = C:\Windows\System32\svchost.exe
3788 | [Owner : bullshit |Parent : 320] - (.Microsoft Corporation - Gestionnaire de fen�tres du Bureau.) - (6.1.7600.16385) = C:\Windows\System32\dwm.exe
520 | [Owner : bullshit |Parent : 3532] - (.AVAST Software - avast! Antivirus.) - (9.0.2018.401) = C:\Program Files\Antivirus\Avast\avastui.exe
2584 | [Owner : SERVICE R�SEAU |Parent : 756] - (.Microsoft Corporation - WMI Provider Host.) - (6.1.7601.17514) = C:\Windows\System32\wbem\WmiPrvSE.exe
4900 | [Owner : Syst�me |Parent : 620] - (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.1.7600.16385) = C:\Windows\System32\svchost.exe
5180 | [Owner : SERVICE LOCAL |Parent : 620] - (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.1.7600.16385) = C:\Windows\System32\svchost.exe
1244 | [Owner : Syst�me |Parent : 756] - (.Microsoft Corporation - WMI Provider Host.) - (6.1.7601.17514) = C:\Windows\System32\wbem\WmiPrvSE.exe
5196 | [Owner : Syst�me |Parent : 620] - (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.1.7600.16385) = C:\Windows\System32\svchost.exe
5308 | [Owner : bullshit |Parent : 2736] - (. - Shortcut_Module.) - (29.6.2014.1) = C:\Users\bullshit\Desktop\Shortcut_Module.exe
4948 | [Owner : bullshit |Parent : 5308] - (. - Shortcut_Module_Protect.) - (1.0.0.0) = C:\Shortcut_Module\Protect_Module.exe

�� | RUN

04 - HKLM\..\Run : [WinFastDTV] C:\Program Files\WinFast\WFDTV\DTVSchdl.exe
04 - HKLM64\..\Run : [EvtMgr6] C:\Program Files\Logitech\SetPointP\SetPoint.exe /launchGaming
04 - HKU\S-1-5-21-1531804078-1903872509-239892045-1001\..\Run : [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun

�� | Services

Service en fonctionnement : WINDEFEND
Service stopp� : WINDEFEND
Service en fonctionnement : MMCSS
Service en fonctionnement : Dhcp
Service en fonctionnement : TcpIp
Service en fonctionnement : WinHttpAutoProxysvc
Service stopp� : WinHttpAutoProxysvc
Service en fonctionnement : SSDPSRV
Service en fonctionnement : MPSSvc
Service stopp� : MPSSvc
Service en fonctionnement : LanmanServer
Service en fonctionnement : DNScache
Service stopp� : DNScache

�� | Hosts

C:\Windows\System32\Drivers\etc\hosts : Remis a z�ro avec succ�s

�� | Registre

Supprim� avec succ�s : HKU\S-1-5-18\SOFTWARE\AskPartnerNetwork
Supprim� avec succ�s : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{100EB1FD-D03E-47FD-81F3-EE91287F9465} : ShopperReports.dll
Supprim� avec succ�s : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{14CEEAFF-96DD-4101-AE37-D5ECDC23C3F6} : alotBHO.dll;alotBHO.dll
Supprim� avec succ�s : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{258C9770-1713-4021-8D7E-1F184A2BD754} : ShoppingReport.dll
Supprim� avec succ�s : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{2A0F3D1B-0909-4FF4-B272-609CCE6054E7} : PCTBrowserDefender.dll
Supprim� avec succ�s : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{2EECD738-5844-4A99-B4B6-146BF802613B} : BabylonToolbar.dll
Supprim� avec succ�s : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{472734EA-242A-422B-ADF8-83D1E48CC825} : PCTBrowserDefender.dll
Supprim� avec succ�s : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{57F02779-3D88-4958-8AD3-83C12D86ADC7} : advancedsearchbar.dll
Supprim� avec succ�s : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{5AA2BA46-9913-4DC7-9620-69AB0FA17AE7} : alot.dll;alot.dll
Supprim� avec succ�s : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{69ABB8E4-3A44-461C-93BC-C3BB6BDF2DF3} : Backcountry.com.Steepandcheap.Toolbar.dll
Supprim� avec succ�s : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{74F475FA-6C75-43BD-AAB9-ECDA6184F600} : SuperfishIEAddon.dll;SuperfishIEAddon.dll
Supprim� avec succ�s : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E} : BabylonToolbar.dll
Supprim� avec succ�s : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{BDEA95CF-F0E6-41E0-BD3D-B00F39A4E939} : ShoppingReport.dll
Supprim� avec succ�s : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{CDEEC43D-3572-4E95-A2A5-F519D29F00C0} : advancedsearchbar.dll
Supprim� avec succ�s : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{F98BA7F6-48D8-4CE7-A8D0-39D13FD6F14F} : Backcountry.com.Steepandcheap.Toolbar.dll
Supprim� avec succ�s : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{98889811-442D-49DD-99D7-DC866BE87DBC} : BabylonToolbarTlbr.dll
Supprim� avec succ�s : HKLM64\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{100EB1FD-D03E-47FD-81F3-EE91287F9465}
Supprim� avec succ�s : HKLM64\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{14CEEAFF-96DD-4101-AE37-D5ECDC23C3F6}
Supprim� avec succ�s : HKLM64\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{258C9770-1713-4021-8D7E-1F184A2BD754}
Supprim� avec succ�s : HKLM64\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{2A0F3D1B-0909-4FF4-B272-609CCE6054E7}
Supprim� avec succ�s : HKLM64\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{2EECD738-5844-4A99-B4B6-146BF802613B}
Supprim� avec succ�s : HKLM64\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{472734EA-242A-422B-ADF8-83D1E48CC825}
Supprim� avec succ�s : HKLM64\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{57F02779-3D88-4958-8AD3-83C12D86ADC7}
Supprim� avec succ�s : HKLM64\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{5AA2BA46-9913-4DC7-9620-69AB0FA17AE7}
Supprim� avec succ�s : HKLM64\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{69ABB8E4-3A44-461C-93BC-C3BB6BDF2DF3}
Supprim� avec succ�s : HKLM64\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{74F475FA-6C75-43BD-AAB9-ECDA6184F600}
Supprim� avec succ�s : HKLM64\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}
Supprim� avec succ�s : HKLM64\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{BDEA95CF-F0E6-41E0-BD3D-B00F39A4E939}
Supprim� avec succ�s : HKLM64\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{CDEEC43D-3572-4E95-A2A5-F519D29F00C0}
Supprim� avec succ�s : HKLM64\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{F98BA7F6-48D8-4CE7-A8D0-39D13FD6F14F}
Supprim� avec succ�s : HKLM64\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{98889811-442D-49DD-99D7-DC866BE87DBC}
Supprim� avec succ�s : HKU\S-1-5-21-1531804078-1903872509-239892045-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{97916142-9A78-4725-8559-AF0EE097F2CD}
Supprim� avec succ�s : HKLM\Software\Classes\Installer\Features\1689C8F4FCDD8EE479C8536B194C603B : gm_Optional
Supprim� avec succ�s : HKLM64\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0CFE535C35F99574E8340BFA75BF92C2 : C:\Program Files (x86)\Ask.com\
Supprim� avec succ�s : HKLM64\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1A24B5BB8521B03E0C8D908F5ABC0AE6 : C:\Program Files (x86)\Ask.com\
Supprim� avec succ�s : HKLM64\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\261F213D1F55267499B1F87D0CC3BCF7 : C:\Program Files (x86)\Ask.com\
Supprim� avec succ�s : HKLM64\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2B0D56C4F4C46D844A57FFED6F0D2852 : C:\Program Files (x86)\Ask.com\
Supprim� avec succ�s : HKLM64\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\49D4375FE41653242AEA4C969E4E65E0 : C:\Program Files (x86)\Ask.com\
Supprim� avec succ�s : HKLM64\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6AA0923513360135B272E8289C5F13FA : C:\Program Files (x86)\Ask.com\
Supprim� avec succ�s : HKLM64\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6B3BC4CF5ECE1F54BBA174C13A1AB907 : C:\Program Files (x86)\Ask.com\Updater\Updater.exe
Supprim� avec succ�s : HKLM64\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6F7467AF8F29C134CBBAB394ECCFDE96 : C:\Program Files (x86)\Ask.com\
Supprim� avec succ�s : HKLM64\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\741B4ADF27276464790022C965AB6DA8 : C:\Program Files (x86)\Ask.com\
Supprim� avec succ�s : HKLM64\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7DE196B10195F5647A2B21B761F3DE01 : C:\Program Files (x86)\Ask.com\
Supprim� avec succ�s : HKLM64\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\922525DCC5199162F8935747CA3D8E59 : C:\Program Files (x86)\Ask.com\
Supprim� avec succ�s : HKLM64\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9D4F5849367142E4685ED8C25E44C5ED : C:\Program Files (x86)\Ask.com\TaskScheduler.exe
Supprim� avec succ�s : HKLM64\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A5875B04372C19545BEB90D4D606C472 : C:\Program Files (x86)\Ask.com\UpdateTask.exe
Supprim� avec succ�s : HKLM64\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A876D9E80B896EC44A8620248CC79296 : C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
Supprim� avec succ�s : HKLM64\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B66FFAB725B92594C986DE826A867888 : C:\Program Files (x86)\Ask.com\
Supprim� avec succ�s : HKLM64\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BCDA179D619B91648538E3394CAC94CC : C:\Users\bullshit\AppData\Roaming\Mozilla\Firefox\Profiles\pq6zmoy0.default\extensions\toolbar@ask.com\defaults\preferences\defaults.js
Supprim� avec succ�s : HKLM64\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BEABAA33A5E68374DBF197F2A00CD011 : C:\Program Files (x86)\Ask.com\
Supprim� avec succ�s : HKLM64\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CB61AF52AD64B6B45930BE969F316720 : C:\Program Files (x86)\Ask.com\
Supprim� avec succ�s : HKLM64\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D677B1A9671D4D4004F6F2A4469E86EA : C:\Users\bullshit\AppData\Roaming\Mozilla\Firefox\Profiles\pq6zmoy0.default\extensions\toolbar@ask.com\searchplugins\askcom.xml
Supprim� avec succ�s : HKLM64\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DD1402A9DD4215A43ABDE169A41AFA0E : C:\Program Files (x86)\Ask.com\
Supprim� avec succ�s : HKLM64\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E36E114A0EAD2AD46B381D23AD69CDDF : C:\Users\bullshit\AppData\Roaming\Mozilla\Firefox\Profiles\pq6zmoy0.default\extensions\toolbar@ask.com\
Supprim� avec succ�s : HKLM64\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EF8E618DB3AEDFBB384561B5C548F65E : C:\Users\bullshit\AppData\Roaming\Mozilla\Firefox\Profiles\pq6zmoy0.default\extensions\toolbar@ask.com\chrome\content\about.js

�� | IFEO

�� | Dossiers | Fichiers

Supprim� avec succ�s : C:\Users\All Users\PC Drivers HeadQuarters
Supprim� avec succ�s : C:\Users\bullshit\AppData\Local\EmieSiteList\container.dat (.-.)
Supprim� avec succ�s : C:\Users\bullshit\AppData\Local\EmieUserList\container.dat (.-.)
Supprim� avec succ�s : C:\Users\bullshit\AppData\Local\Microsoft\Photo Acquisition\PreviouslyAcquired.db (.-.)
Supprim� avec succ�s : C:\Users\bullshit\AppData\LocalLow\DataMngr
Supprim� avec succ�s : C:\Users\bullshit\AppData\Roaming\Mozilla\Firefox\Profiles\pq6zmoy0.default\HTTPSEverywhereUserRules\Maps.yandex.ru.xml (.-.)
Supprim� avec succ�s : C:\Users\bullshit\AppData\Roaming\Mozilla\Firefox\Profiles\pq6zmoy0.default\jetpack\jid1-ZAdIEUB7XOzOJw@jetpack
Supprim� avec succ�s : C:\Users\bullshit\D-Fend Reloaded\AutoSetup\DELTA V.prof (.-.)
Supprim� avec succ�s : C:\Users\bullshit\D-Fend Reloaded\AutoSetup\Gravis Ultrasound Advertisement.prof (.-.)
Supprim� avec succ�s : C:\Users\bullshit\Downloads\Logiciels\Multimedia\XMLTV\xmltv-0.5.63-win32\doc\QuickStart (.-.)
Supprim� avec succ�s : C:\Users\bullshit\Downloads\Update\history\provinces\1343 - Ganges Delta.txt (.-.)
Supprim� avec succ�s : C:\Users\bullshit\Downloads\Update\history\provinces\1345 - Irrawady Delta.txt (.-.)
Supprim� avec succ�s : C:\Users\bullshit\Downloads\Update\history\provinces\1373 - Yang Tse Delta.txt (.-.)
Supprim� avec succ�s : C:\Users\bullshit\Downloads\Update\history\provinces\362 - Delta.txt (.-.)
Supprim� avec succ�s : C:\Users\bullshit\AppData\Local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp21femi.dll

�� | D�tournements de raccourcis

�� | Proxy

R�par� : [HKU\S-1-5-21-1531804078-1903872509-239892045-1001\Software\Microsoft\Windows\CurrentVersion\Internet settings]|[WarnonZoneCrossing] : 0 -> 1

�� | D�tournement internet Explorer

R�par� : [HKLM\Software\Microsoft\Internet Explorer\Main\Window Title]|[] : -> Internet Explorer
R�par� : [HKLM\Software\Microsoft\Internet Explorer\Main]|[Search Bar] : http://search.msn.com/spbasic.htm -> http://www.google.com/
R�par� : [HKLM\Software\Microsoft\Internet Explorer\Main]|[Start Page] : https://fr.yahoo.com?fr=hp-avast&type=avastbcl -> http://www.google.com/
R�par� : [HKLM\Software\Microsoft\Internet Explorer\Main]|[Start Default_Page_URL] : -> http://www.google.com/
R�par� : [HKLM\Software\Microsoft\Internet Explorer\Main]|[Search Page] : http://go.microsoft.com/fwlink/?LinkId=54896 -> http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
R�par� : [HKLM\Software\Microsoft\Internet Explorer\Main]|[Default_Search_URL] : -> http://go.microsoft.com/fwlink/?LinkId=54896
R�par� : [HKLM\Software\Microsoft\Internet Explorer\Main]|[Default_Page_URL] : -> http://go.microsoft.com/fwlink/?LinkId=69157
R�par� : [HKLM\Software\Microsoft\Internet Explorer\SearchURL]|[Default] : -> http://www.google.com/
R�par� : [HKLM\Software\Microsoft\Internet Explorer\Main]|[CustomizeSearch] : -> http://www.google.com/
R�par� : [HKLM\Software\Microsoft\Internet Explorer\Search]|[SearchAssistant] : -> http://www.google.com/
R�par� : [HKLM\Software\Microsoft\Internet Explorer\Search]|[Search Bar] : -> http://www.google.com/
R�par� : [HKLM\Software\Microsoft\Internet Explorer\Search]|[Start Page] : -> http://www.google.com/
R�par� : [HKLM\Software\Microsoft\Internet Explorer\Search]|[Start Default_Page_URL] : -> http://www.google.com/
R�par� : [HKLM\Software\Microsoft\Internet Explorer\Search]|[Local Page] : -> C:\Windows\SysWOW64\blank.htm
R�par� : [HKLM\Software\Microsoft\Internet Explorer\Search]|[Search Page] : -> http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
R�par� : [HKLM\Software\Microsoft\Internet Explorer\Search]|[Default_Search_URL] : -> http://go.microsoft.com/fwlink/?LinkId=54896
R�par� : [HKLM\Software\Microsoft\Internet Explorer\Search]|[Default_Page_URL] : -> http://go.microsoft.com/fwlink/?LinkId=69157
R�par� : [HKLM\Software\Microsoft\Internet Explorer\Search]|[BrowserMngr Start Page] : -> http://www.google.com/
R�par� : [HKLM\Software\Microsoft\Internet Explorer\Search]|[CustomizeSearch] : -> http://www.google.com/
R�par� : [HKLM\Software\Microsoft\Internet Explorer\AboutURLs]|[Tabs] : about:newtab -> http://www.google.com/
R�par� : [HKLM64\Software\Microsoft\Internet Explorer\Main\Window Title]|[] : -> Internet Explorer
R�par� : [HKLM64\Software\Microsoft\Internet Explorer\Main]|[Search Bar] : -> http://www.google.com/
R�par� : [HKLM64\Software\Microsoft\Internet Explorer\Main]|[Start Page] : http://go.microsoft.com/fwlink/p/?LinkId=255141 -> http://www.google.com/
R�par� : [HKLM64\Software\Microsoft\Internet Explorer\Main]|[Start Default_Page_URL] : -> http://www.google.com/
R�par� : [HKLM64\Software\Microsoft\Internet Explorer\Main]|[Local Page] : C:\Windows\System32\blank.htm -> C:\Windows\SysWOW64\blank.htm
R�par� : [HKLM64\Software\Microsoft\Internet Explorer\Main]|[Search Page] : http://go.microsoft.com/fwlink/?LinkId=54896 -> http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
R�par� : [HKLM64\Software\Microsoft\Internet Explorer\Main]|[Default_Page_URL] : http://go.microsoft.com/fwlink/p/?LinkId=255141 -> http://go.microsoft.com/fwlink/?LinkId=69157
R�par� : [HKLM64\Software\Microsoft\Internet Explorer\SearchURL]|[Default] : -> http://www.google.com/
R�par� : [HKLM64\Software\Microsoft\Internet Explorer\Main]|[CustomizeSearch] : -> http://www.google.com/
R�par� : [HKLM64\Software\Microsoft\Internet Explorer\Search]|[SearchAssistant] : -> http://www.google.com/
R�par� : [HKLM64\Software\Microsoft\Internet Explorer\Search]|[Search Bar] : -> http://www.google.com/
R�par� : [HKLM64\Software\Microsoft\Internet Explorer\Search]|[Start Page] : -> http://www.google.com/
R�par� : [HKLM64\Software\Microsoft\Internet Explorer\Search]|[Start Default_Page_URL] : -> http://www.google.com/
R�par� : [HKLM64\Software\Microsoft\Internet Explorer\Search]|[Local Page] : -> C:\Windows\SysWOW64\blank.htm
R�par� : [HKLM64\Software\Microsoft\Internet Explorer\Search]|[Search Page] : -> http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
R�par� : [HKLM64\Software\Microsoft\Internet Explorer\Search]|[Default_Search_URL] : -> http://go.microsoft.com/fwlink/?LinkId=54896
R�par� : [HKLM64\Software\Microsoft\Internet Explorer\Search]|[Default_Page_URL] : -> http://go.microsoft.com/fwlink/?LinkId=69157
R�par� : [HKLM64\Software\Microsoft\Internet Explorer\Search]|[BrowserMngr Start Page] : -> http://www.google.com/
R�par� : [HKLM64\Software\Microsoft\Internet Explorer\Search]|[CustomizeSearch] : -> http://www.google.com/
R�par� : [HKLM64\Software\Microsoft\Internet Explorer\AboutURLs]|[Tabs] : -> http://www.google.com/
R�par� : [HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main\Window Title]|[] : -> Internet Explorer
R�par� : [HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main]|[Search Bar] : -> http://www.google.com/
R�par� : [HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main]|[Start Page] : -> http://www.google.com/
R�par� : [HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main]|[Start Default_Page_URL] : -> http://www.google.com/
R�par� : [HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main]|[Local Page] : -> C:\Windows\SysWOW64\blank.htm
R�par� : [HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main]|[Search Page] : -> http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
R�par� : [HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main]|[Default_Search_URL] : -> http://go.microsoft.com/fwlink/?LinkId=54896
R�par� : [HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main]|[Default_Page_URL] : -> http://go.microsoft.com/fwlink/?LinkId=69157
R�par� : [HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchURL]|[Default] : -> http://www.google.com/
R�par� : [HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main]|[CustomizeSearch] : -> http://www.google.com/
R�par� : [HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Search]|[SearchAssistant] : -> http://www.google.com/
R�par� : [HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Search]|[Search Bar] : -> http://www.google.com/
R�par� : [HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Search]|[Start Page] : -> http://www.google.com/
R�par� : [HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Search]|[Start Default_Page_URL] : -> http://www.google.com/
R�par� : [HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Search]|[Local Page] : -> C:\Windows\SysWOW64\blank.htm
R�par� : [HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Search]|[Search Page] : -> http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
R�par� : [HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Search]|[Default_Search_URL] : -> http://go.microsoft.com/fwlink/?LinkId=54896
R�par� : [HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Search]|[Default_Page_URL] : -> http://go.microsoft.com/fwlink/?LinkId=69157
R�par� : [HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Search]|[BrowserMngr Start Page] : -> http://www.google.com/
R�par� : [HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Search]|[CustomizeSearch] : -> http://www.google.com/
R�par� : [HKU\S-1-5-19\Software\Microsoft\Internet Explorer\AboutURLs]|[Tabs] : -> http://www.google.com/
R�par� : [HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main\Window Title]|[] : -> Internet Explorer
R�par� : [HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main]|[Search Bar] : -> http://www.google.com/
R�par� : [HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main]|[Start Page] : -> http://www.google.com/
R�par� : [HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main]|[Start Default_Page_URL] : -> http://www.google.com/
R�par� : [HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main]|[Local Page] : -> C:\Windows\SysWOW64\blank.htm
R�par� : [HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main]|[Search Page] : -> http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
R�par� : [HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main]|[Default_Search_URL] : -> http://go.microsoft.com/fwlink/?LinkId=54896
R�par� : [HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main]|[Default_Page_URL] : -> http://go.microsoft.com/fwlink/?LinkId=69157
R�par� : [HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchURL]|[Default] : -> http://www.google.com/
R�par� : [HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main]|[CustomizeSearch] : -> http://www.google.com/
R�par� : [HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Search]|[SearchAssistant] : -> http://www.google.com/
R�par� : [HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Search]|[Search Bar] : -> http://www.google.com/
R�par� : [HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Search]|[Start Page] : -> http://www.google.com/
R�par� : [HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Search]|[Start Default_Page_URL] : -> http://www.google.com/
R�par� : [HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Search]|[Local Page] : -> C:\Windows\SysWOW64\blank.htm
R�par� : [HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Search]|[Search Page] : -> http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
R�par� : [HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Search]|[Default_Search_URL] : -> http://go.microsoft.com/fwlink/?LinkId=54896
R�par� : [HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Search]|[Default_Page_URL] : -> http://go.microsoft.com/fwlink/?LinkId=69157
R�par� : [HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Search]|[BrowserMngr Start Page] : -> http://www.google.com/
R�par� : [HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Search]|[CustomizeSearch] : -> http://www.google.com/
R�par� : [HKU\S-1-5-20\Software\Microsoft\Internet Explorer\AboutURLs]|[Tabs] : -> http://www.google.com/
R�par� : [HKU\S-1-5-21-1531804078-1903872509-239892045-1001\Software\Microsoft\Internet Explorer\Main\Window Title]|[] : -> Internet Explorer
R�par� : [HKU\S-1-5-21-1531804078-1903872509-239892045-1001\Software\Microsoft\Internet Explorer\Main]|[Search Bar] : https://fr.yahoo.com?fr=hp-avast&type=avastbcl -> http://www.google.com/
R�par� : [HKU\S-1-5-21-1531804078-1903872509-239892045-1001\Software\Microsoft\Internet Explorer\Main]|[Start Page] : https://fr.yahoo.com?fr=hp-avast&type=avastbcl -> http://www.google.com/
R�par� : [HKU\S-1-5-21-1531804078-1903872509-239892045-1001\Software\Microsoft\Internet Explorer\Main]|[Start Default_Page_URL] : -> http://www.google.com/
R�par� : [HKU\S-1-5-21-1531804078-1903872509-239892045-1001\Software\Microsoft\Internet Explorer\Main]|[Local Page] : C:\Windows\system32\blank.htm -> C:\Windows\SysWOW64\blank.htm
R�par� : [HKU\S-1-5-21-1531804078-1903872509-239892045-1001\Software\Microsoft\Internet Explorer\Main]|[Search Page] : https://fr.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms} -> http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
R�par� : [HKU\S-1-5-21-1531804078-1903872509-239892045-1001\Software\Microsoft\Internet Explorer\Main]|[Default_Search_URL] : -> http://go.microsoft.com/fwlink/?LinkId=54896
R�par� : [HKU\S-1-5-21-1531804078-1903872509-239892045-1001\Software\Microsoft\Internet Explorer\Main]|[Default_Page_URL] : -> http://go.microsoft.com/fwlink/?LinkId=69157
R�par� : [HKU\S-1-5-21-1531804078-1903872509-239892045-1001\Software\Microsoft\Internet Explorer\SearchURL]|[Default] : -> http://www.google.com/
R�par� : [HKU\S-1-5-21-1531804078-1903872509-239892045-1001\Software\Microsoft\Internet Explorer\Main]|[CustomizeSearch] : -> http://www.google.com/
R�par� : [HKU\S-1-5-21-1531804078-1903872509-239892045-1001\Software\Microsoft\Internet Explorer\Search]|[SearchAssistant] : -> http://www.google.com/
R�par� : [HKU\S-1-5-21-1531804078-1903872509-239892045-1001\Software\Microsoft\Internet Explorer\Search]|[Search Bar] : -> http://www.google.com/
R�par� : [HKU\S-1-5-21-1531804078-1903872509-239892045-1001\Software\Microsoft\Internet Explorer\Search]|[Start Page] : -> http://www.google.com/
R�par� : [HKU\S-1-5-21-1531804078-1903872509-239892045-1001\Software\Microsoft\Internet Explorer\Search]|[Start Default_Page_URL] : -> http://www.google.com/
R�par� : [HKU\S-1-5-21-1531804078-1903872509-239892045-1001\Software\Microsoft\Internet Explorer\Search]|[Local Page] : -> C:\Windows\SysWOW64\blank.htm
R�par� : [HKU\S-1-5-21-1531804078-1903872509-239892045-1001\Software\Microsoft\Internet Explorer\Search]|[Search Page] : -> http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
R�par� : [HKU\S-1-5-21-1531804078-1903872509-239892045-1001\Software\Microsoft\Internet Explorer\Search]|[Default_Search_URL] : -> http://go.microsoft.com/fwlink/?LinkId=54896
R�par� : [HKU\S-1-5-21-1531804078-1903872509-239892045-1001\Software\Microsoft\Internet Explorer\Search]|[Default_Page_URL] : -> http://go.microsoft.com/fwlink/?LinkId=69157
R�par� : [HKU\S-1-5-21-1531804078-1903872509-239892045-1001\Software\Microsoft\Internet Explorer\Search]|[BrowserMngr Start Page] : -> http://www.google.com/
R�par� : [HKU\S-1-5-21-1531804078-1903872509-239892045-1001\Software\Microsoft\Internet Explorer\Search]|[CustomizeSearch] : -> http://www.google.com/
R�par� : [HKU\S-1-5-21-1531804078-1903872509-239892045-1001\Software\Microsoft\Internet Explorer\AboutURLs]|[Tabs] : -> http://www.google.com/
R�par� : [HKU\S-1-5-18\Software\Microsoft\Internet Explorer\Main\Window Title]|[] : -> Internet Explorer
R�par� : [HKU\S-1-5-18\Software\Microsoft\Internet Explorer\Main]|[Search Bar] : -> http://www.google.com/
R�par� : [HKU\S-1-5-18\Software\Microsoft\Internet Explorer\Main]|[Start Page] : -> http://www.google.com/
R�par� : [HKU\S-1-5-18\Software\Microsoft\Internet Explorer\Main]|[Start Default_Page_URL] : -> http://www.google.com/
R�par� : [HKU\S-1-5-18\Software\Microsoft\Internet Explorer\Main]|[Local Page] : -> C:\Windows\SysWOW64\blank.htm
R�par� : [HKU\S-1-5-18\Software\Microsoft\Internet Explorer\Main]|[Search Page] : -> http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
R�par� : [HKU\S-1-5-18\Software\Microsoft\Internet Explorer\Main]|[Default_Search_URL] : -> http://go.microsoft.com/fwlink/?LinkId=54896
R�par� : [HKU\S-1-5-18\Software\Microsoft\Internet Explorer\Main]|[Default_Page_URL] : -> http://go.microsoft.com/fwlink/?LinkId=69157
R�par� : [HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchURL]|[Default] : -> http://www.google.com/
R�par� : [HKU\S-1-5-18\Software\Microsoft\Internet Explorer\Main]|[CustomizeSearch] : -> http://www.google.com/
R�par� : [HKU\S-1-5-18\Software\Microsoft\Internet Explorer\Search]|[SearchAssistant] : -> http://www.google.com/
R�par� : [HKU\S-1-5-18\Software\Microsoft\Internet Explorer\Search]|[Search Bar] : -> http://www.google.com/
R�par� : [HKU\S-1-5-18\Software\Microsoft\Internet Explorer\Search]|[Start Page] : -> http://www.google.com/
R�par� : [HKU\S-1-5-18\Software\Microsoft\Internet Explorer\Search]|[Start Default_Page_URL] : -> http://www.google.com/
R�par� : [HKU\S-1-5-18\Software\Microsoft\Internet Explorer\Search]|[Local Page] : -> C:\Windows\SysWOW64\blank.htm
R�par� : [HKU\S-1-5-18\Software\Microsoft\Internet Explorer\Search]|[Search Page] : -> http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
R�par� : [HKU\S-1-5-18\Software\Microsoft\Internet Explorer\Search]|[Default_Search_URL] : -> http://go.microsoft.com/fwlink/?LinkId=54896
R�par� : [HKU\S-1-5-18\Software\Microsoft\Internet Explorer\Search]|[Default_Page_URL] : -> http://go.microsoft.com/fwlink/?LinkId=69157
R�par� : [HKU\S-1-5-18\Software\Microsoft\Internet Explorer\Search]|[BrowserMngr Start Page] : -> http://www.google.com/
R�par� : [HKU\S-1-5-18\Software\Microsoft\Internet Explorer\Search]|[CustomizeSearch] : -> http://www.google.com/
R�par� : [HKU\S-1-5-18\Software\Microsoft\Internet Explorer\AboutURLs]|[Tabs] : -> http://www.google.com/

�� | D�tournement Google Chrome

Supprim� avec succ�s : HKLM\Software\Policies\Google
[bullshit] Remis a z�ro avec succ�s : SearchURL

[bullshit] : nmmhkkegccagdldgiimedpiccmgmieda = : Google & co - Google & co

�� | D�tournement Firefox

[bullshit] Supprim� avec succ�s : C:\Users\bullshit\AppData\Roaming\Mozilla\Firefox\Profiles\eyv88f0c.default\sessionstore.js
[bullshit] Supprim� avec succ�s : user_pref("extensions.https_everywhere.Adoyacademy.se", true);
[bullshit] Supprim� avec succ�s : user_pref("extensions.https_everywhere.Akamai", true);
[bullshit] Supprim� avec succ�s : user_pref("extensions.https_everywhere.Android", true);
[bullshit] Supprim� avec succ�s : user_pref("extensions.https_everywhere.Androidpolice", true);
[bullshit] Supprim� avec succ�s : user_pref("extensions.https_everywhere.Blekko", true);
[bullshit] Supprim� avec succ�s : user_pref("extensions.https_everywhere.Brainbench", true);
[bullshit] Supprim� avec succ�s : user_pref("extensions.https_everywhere.CasinoAffiliatePrograms.com", true);
[bullshit] Supprim� avec succ�s : user_pref("extensions.https_everywhere.ClearChain", false);
[bullshit] Supprim� avec succ�s : user_pref("extensions.https_everywhere.Coupons, Inc (partial)", true);
[bullshit] Supprim� avec succ�s : user_pref("extensions.https_everywhere.Delta.no", true);
[bullshit] Supprim� avec succ�s : user_pref("extensions.https_everywhere.Fifth Third Bank", true);
[bullshit] Supprim� avec succ�s : user_pref("extensions.https_everywhere.Maps.yandex.ru", true);
[bullshit] Supprim� avec succ�s : user_pref("extensions.https_everywhere.Uniblue", true);
[bullshit] Supprim� avec succ�s : user_pref("extensions.https_everywhere.VisualWebsiteOptimizer (partial)", true);
[bullshit] Supprim� avec succ�s : user_pref("extensions.https_everywhere.VisualWebsiteOptimizer", true);
[bullshit] Supprim� avec succ�s : user_pref("extensions.https_everywhere.Yandex", true);
[bullshit] Supprim� avec succ�s : user_pref("extensions.https_everywhere.blinkeye.ch", false);
[bullshit] Supprim� avec succ�s : user_pref("extensions.https_everywhere.divShare", true);
[bullshit] Supprim� avec succ�s : user_pref("extensions.jid1-ZAdIEUB7XOzOJw@jetpack.ddg_default", true);

[bullshit] : firefox@ghostery.com.xpi : - -
[bullshit] : https-everywhere@eff.org : - -
[bullshit] : requestpolicy@requestpolicy.com.xpi : - -
[bullshit] : {097d3191-e6fa-4728-9826-b533d755359d}.xpi : - -
[bullshit] : {1018e4d6-728f-4b20-ad56-37578a4de76b}.xpi : - -
[bullshit] : {6bdc61ae-7b80-44a3-9476-e1d121ec2238}.xpi : - -
[bullshit] : {73a6fe31-595d-460b-a920-fcc0f8843232}.xpi : - -
[bullshit] : {79c50f9a-2ffe-4ee0-8a37-fae4f5dacd4f}.xpi : - -
[bullshit] : {a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} : - -
[bullshit] : {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi : - -
[bullshit] : firefox@ghostery.com : - -
[bullshit] : https-everywhere@eff.org : - -
[bullshit] : proxytool@proxylist.co.xpi : - -
[bullshit] : requestpolicy@requestpolicy.com.xpi : - -
[bullshit] : {097d3191-e6fa-4728-9826-b533d755359d}.xpi : - -
[bullshit] : {1018e4d6-728f-4b20-ad56-37578a4de76b} : - -
[bullshit] : {15fe27f3-e5ab-2d59-4c5c-dadc7945bdbd}.xpi : - -
[bullshit] : {59c81df5-4b7a-477b-912d-4e0fdf64e5f2} : - -
[bullshit] : {6bdc61ae-7b80-44a3-9476-e1d121ec2238}.xpi : - -
[bullshit] : {73a6fe31-595d-460b-a920-fcc0f8843232}.xpi : - -
[bullshit] : {79c50f9a-2ffe-4ee0-8a37-fae4f5dacd4f}.xpi : - -
[bullshit] : {a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} : - -
[bullshit] : {b9db16a4-6edc-47ec-a1f4-b86292ed211d} : - -
[bullshit] : {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi : - -
[bullshit] : {DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi : - -

�� | Opera

�� | D�tournement des cl�s StartMenuInternet

R�par� : [HKLM\Software\Clients\StartMenuInternet\Firefox.exe\shell\open\command] : "C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -> "C:\Program Files\Mozilla Firefox\Firefox.exe"
R�par� : [HKLM\Software\Clients\StartMenuInternet\Firefox.exe\shell\safemode\command] : "C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -safe-mode -> "C:\Program Files\Mozilla Firefox\Firefox.exe" -safe-mode
R�par� : [HKLM\Software\Clients\StartMenuInternet\IExplore.exe\shell\open\command] : C:\Program Files\Internet Explorer\iexplore.exe -> "C:\Program Files\Internet Explorer\iexplore.exe"
R�par� : [HKLM\Software\Clients\StartMenuInternet\Google Chrome\shell\open\command] : "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" -> "C:\Program Files\Google\Chrome\Application\chrome.exe"

�� | AppInit_DLLs

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]|[LoadAppInit_DLLs] : 1
[HKLM64\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]|[LoadAppInit_DLLs] : 1

�� | D�tournement Javascript

�� | Firewall

�� | ADS

�� | Fichiers temporaires

[All Users] Fichiers temporaires Supprim�s : 0 Ko
[bullshit] Fichiers temporaires Supprim�s : 470700 Ko
[Default] Fichiers temporaires Supprim�s : 0 Ko
[Default User] Fichiers temporaires Supprim�s : 0 Ko
[Public] Fichiers temporaires Supprim�s : 0 Ko
[C:\Windows\Temp] Fichiers temporaires Supprim�s : 0 Ko
[C:\Temp] Fichiers temporaires Supprim�s : 0 Ko

Service Red�marr� : DNScache
Service Red�marr� : MPSsvc

Autre rapport

Mise en veille restaur�e

�� | Listing

�� | C:\Program Files (x86)

[22/01/2012 03:09:32] - |D| - C:\Program Files (x86)\Adobe
[18/02/2014 22:33:39] - |D| - C:\Program Files (x86)\AGEIA Technologies
[19/01/2012 15:38:25] - |D| - C:\Program Files (x86)\Analog Devices
[14/07/2009 05:20:08] - |D| - C:\Program Files (x86)\Common Files
[03/06/2014 00:31:15] - |D| - C:\Program Files (x86)\DAEMON Tools Lite
[14/07/2009 06:54:24] - |ASH| - C:\Program Files (x86)\desktop.ini
[24/09/2013 17:35:49] - |D| - C:\Program Files (x86)\DiskInternals
[16/08/2012 09:33:25] - |D| - C:\Program Files (x86)\Emulateur DOS
[16/03/2012 13:10:50] - |D| - C:\Program Files (x86)\epson
[10/09/2012 13:29:35] - |D| - C:\Program Files (x86)\EVEREST Ultimate Edition
[10/05/2012 22:10:07] - |D| - C:\Program Files (x86)\Fallout 3
[25/06/2012 07:30:49] - |D| - C:\Program Files (x86)\FinePixViewer
[18/02/2012 01:20:32] - |D| - C:\Program Files (x86)\Firaxis Games
[06/09/2012 21:12:46] - |D| - C:\Program Files (x86)\FreeArc
[18/01/2014 17:28:54] - |D| - C:\Program Files (x86)\FreeTime
[26/02/2014 03:00:43] - |D| - C:\Program Files (x86)\Frhed
[08/03/2012 14:00:00] - |D| - C:\Program Files (x86)\Games01
[20/01/2012 21:29:41] - |D| - C:\Program Files (x86)\GIMP-2.0
[22/01/2012 03:10:54] - |D| - C:\Program Files (x86)\Google
[17/08/2012 19:33:10] - |D| - C:\Program Files (x86)\HijackThis
[19/01/2012 07:33:11] - |HD| - C:\Program Files (x86)\InstallShield Installation Information
[19/01/2012 15:19:54] - |D| - C:\Program Files (x86)\Intel
[14/07/2009 05:20:08] - |D| - C:\Program Files (x86)\Internet Explorer
[07/05/2014 17:03:39] - |D| - C:\Program Files (x86)\Java
[23/09/2013 01:00:11] - |D| - C:\Program Files (x86)\JDownloader
[19/01/2012 17:09:07] - |D| - C:\Program Files (x86)\Leadtek Research Inc
[17/06/2014 18:53:05] - |D| - C:\Program Files (x86)\Malwarebytes Anti-Exploit
[17/04/2014 05:51:57] - |D| - C:\Program Files (x86)\Malwarebytes Anti-Malware
[19/01/2012 15:44:36] - |D| - C:\Program Files (x86)\Marvell
[18/06/2012 06:12:23] - |D| - C:\Program Files (x86)\Microsoft Games for Windows - LIVE
[20/06/2012 11:59:34] - |D| - C:\Program Files (x86)\Microsoft Silverlight
[21/01/2012 23:55:18] - |D| - C:\Program Files (x86)\Microsoft.NET
[11/06/2014 09:44:19] - |D| - C:\Program Files (x86)\Mozilla Firefox
[25/04/2012 06:18:10] - |D| - C:\Program Files (x86)\Mozilla Maintenance Service
[02/09/2012 21:02:03] - |D| - C:\Program Files (x86)\Mozilla Thunderbird
[14/07/2009 07:32:38] - |D| - C:\Program Files (x86)\MSBuild
[19/01/2012 16:14:55] - |D| - C:\Program Files (x86)\MSI Afterburner
[22/02/2013 02:44:28] - |D| - C:\Program Files (x86)\MSXML 4.0
[19/01/2012 07:31:38] - |D| - C:\Program Files (x86)\NVIDIA Corporation
[26/08/2013 09:54:17] - |D| - C:\Program Files (x86)\OpenOffice 4
[14/07/2009 07:32:38] - |D| - C:\Program Files (x86)\Reference Assemblies
[25/11/2012 04:43:49] - |RD| - C:\Program Files (x86)\Skype
[02/06/2013 21:02:51] - |D| - C:\Program Files (x86)\Steam
[19/01/2012 13:23:16] - |D| - C:\Program Files (x86)\SystemRequirementsLab
[17/08/2012 19:36:20] - |D| - C:\Program Files (x86)\S�curit�
[11/03/2013 20:41:55] - |D| - C:\Program Files (x86)\The Witcher 2
[17/08/2012 19:35:52] - |D| - C:\Program Files (x86)\Trend Micro
[14/07/2009 06:57:06] - |HD| - C:\Program Files (x86)\Uninstall Information
[12/02/2012 06:05:21] - |D| - C:\Program Files (x86)\VideoLAN
[14/07/2009 07:32:38] - |D| - C:\Program Files (x86)\Windows Defender
[14/07/2009 05:20:08] - |D| - C:\Program Files (x86)\Windows Mail
[14/07/2009 07:32:38] - |D| - C:\Program Files (x86)\Windows Media Player
[14/07/2009 05:20:08] - |D| - C:\Program Files (x86)\Windows NT
[14/07/2009 07:32:38] - |D| - C:\Program Files (x86)\Windows Photo Viewer
[14/07/2009 07:32:38] - |D| - C:\Program Files (x86)\Windows Portable Devices
[14/07/2009 07:32:38] - |D| - C:\Program Files (x86)\Windows Sidebar

�� | C:\Program Files

[07/05/2014 16:35:16] - |D| - C:\Program Files\7-Zip
[19/01/2012 21:34:18] - |D| - C:\Program Files\Antivirus
[25/01/2012 12:27:00] - |D| - C:\Program Files\CCleaner
[14/07/2009 05:20:08] - |D| - C:\Program Files\Common Files
[14/07/2009 06:54:24] - |ASH| - C:\Program Files\desktop.ini
[14/07/2009 07:32:38] - |D| - C:\Program Files\DVD Maker
[02/02/2013 19:55:57] - |D| - C:\Program Files\Ext2Fsd
[19/01/2012 02:19:15] - |SHD| - C:\Program Files\Fichiers communs
[22/01/2012 03:11:22] - |D| - C:\Program Files\Google
[14/07/2009 05:20:08] - |D| - C:\Program Files\Internet Explorer
[07/05/2014 17:07:53] - |D| - C:\Program Files\Java
[19/01/2012 18:47:06] - |D| - C:\Program Files\Logitech
[14/07/2009 07:32:38] - |D| - C:\Program Files\Microsoft Games
[10/09/2012 21:14:49] - |D| - C:\Program Files\Microsoft Office
[20/06/2012 11:59:34] - |D| - C:\Program Files\Microsoft Silverlight
[14/07/2009 07:32:38] - |D| - C:\Program Files\MSBuild
[19/01/2012 07:29:01] - |D| - C:\Program Files\NVIDIA Corporation
[14/07/2009 07:32:38] - |D| - C:\Program Files\Reference Assemblies
[14/07/2009 07:09:26] - |HD| - C:\Program Files\Uninstall Information
[14/07/2009 07:32:38] - |D| - C:\Program Files\Windows Defender
[12/04/2011 11:28:12] - |D| - C:\Program Files\Windows Journal
[14/07/2009 05:20:08] - |D| - C:\Program Files\Windows Mail
[14/07/2009 07:32:38] - |D| - C:\Program Files\Windows Media Player
[14/07/2009 05:20:08] - |D| - C:\Program Files\Windows NT
[14/07/2009 07:32:38] - |D| - C:\Program Files\Windows Photo Viewer
[14/07/2009 07:32:38] - |D| - C:\Program Files\Windows Portable Devices
[14/07/2009 07:32:38] - |D| - C:\Program Files\Windows Sidebar
[19/01/2012 17:10:41] - |D| - C:\Program Files\WinFast
[20/01/2012 11:33:35] - |D| - C:\Program Files\WinRAR

�� | C:\Program Files (x86)\Common Files

[27/08/2012 01:34:11] - |D| - C:\Program Files (x86)\Common Files\3DO Shared
[22/01/2012 03:09:32] - |D| - C:\Program Files (x86)\Common Files\Adobe
[19/01/2012 17:11:37] - |D| - C:\Program Files (x86)\Common Files\ArcSoft
[19/01/2012 15:38:53] - |D| - C:\Program Files (x86)\Common Files\InstallShield
[07/05/2014 17:04:22] - |D| - C:\Program Files (x86)\Common Files\Java
[19/01/2012 18:47:51] - |D| - C:\Program Files (x86)\Common Files\LogiShrd
[14/07/2009 05:20:08] - |D| - C:\Program Files (x86)\Common Files\microsoft shared
[14/07/2009 05:20:08] - |D| - C:\Program Files (x86)\Common Files\Services
[25/07/2013 05:02:08] - |D| - C:\Program Files (x86)\Common Files\Skype
[14/07/2009 05:20:08] - |D| - C:\Program Files (x86)\Common Files\SpeechEngines
[02/06/2013 21:02:55] - |D| - C:\Program Files (x86)\Common Files\Steam
[24/07/2012 00:59:41] - |D| - C:\Program Files (x86)\Common Files\SWF Studio
[14/07/2009 05:20:08] - |D| - C:\Program Files (x86)\Common Files\System
[19/01/2012 17:11:15] - |D| - C:\Program Files (x86)\Common Files\Ulead Systems
[02/04/2012 21:53:31] - |D| - C:\Program Files (x86)\Common Files\Wise Installation Wizard

�� | C:\Program Files\Common Files

[11/03/2012 20:59:50] - |D| - C:\Program Files\Common Files\EPSON
[19/01/2012 18:46:33] - |D| - C:\Program Files\Common Files\LogiShrd
[14/07/2009 05:20:08] - |D| - C:\Program Files\Common Files\Microsoft Shared
[14/07/2009 05:20:08] - |D| - C:\Program Files\Common Files\Services
[14/07/2009 05:20:08] - |D| - C:\Program Files\Common Files\SpeechEngines
[14/07/2009 05:20:08] - |D| - C:\Program Files\Common Files\System

�� | C:\Users\bullshit\AppData\Roaming

[19/01/2012 08:29:54] - |D| - C:\Users\bullshit\AppData\Roaming\Adobe
[19/01/2012 17:14:06] - |D| - C:\Users\bullshit\AppData\Roaming\ArcSoft
[03/12/2013 14:51:06] - |D| - C:\Users\bullshit\AppData\Roaming\AVAST Software
[17/08/2012 18:23:38] - |D| - C:\Users\bullshit\AppData\Roaming\DAEMON Tools Lite
[19/01/2012 11:23:52] - |D| - C:\Users\bullshit\AppData\Roaming\Download Manager
[07/05/2014 15:35:31] - |D| - C:\Users\bullshit\AppData\Roaming\Dropbox
[07/05/2014 16:36:20] - |D| - C:\Users\bullshit\AppData\Roaming\DropboxMaster
[28/12/2012 15:42:04] - |D| - C:\Users\bullshit\AppData\Roaming\dvdcss
[18/04/2012 19:32:57] - |D| - C:\Users\bullshit\AppData\Roaming\EPSON
[06/09/2012 21:13:02] - |D| - C:\Users\bullshit\AppData\Roaming\FreeArc
[25/06/2012 07:29:15] - |D| - C:\Users\bullshit\AppData\Roaming\FUJIFILM
[17/11/2012 00:57:34] - |D| - C:\Users\bullshit\AppData\Roaming\Games
[22/01/2012 03:11:44] - |D| - C:\Users\bullshit\AppData\Roaming\Google
[20/01/2012 21:31:15] - |D| - C:\Users\bullshit\AppData\Roaming\gtk-2.0
[19/01/2012 02:19:36] - |D| - C:\Users\bullshit\AppData\Roaming\Identities
[19/01/2012 15:31:09] - |D| - C:\Users\bullshit\AppData\Roaming\InstallShield
[18/02/2012 01:20:54] - |D| - C:\Users\bullshit\AppData\Roaming\InstallShield Installation Information
[19/01/2012 18:47:52] - |D| - C:\Users\bullshit\AppData\Roaming\Leadertech
[19/01/2012 18:46:22] - |D| - C:\Users\bullshit\AppData\Roaming\Logishrd
[19/01/2012 18:46:22] - |D| - C:\Users\bullshit\AppData\Roaming\Logitech
[19/01/2012 08:29:55] - |D| - C:\Users\bullshit\AppData\Roaming\Macromedia
[26/02/2012 10:12:53] - |D| - C:\Users\bullshit\AppData\Roaming\Malwarebytes
[19/01/2012 02:19:26] - |D| - C:\Users\bullshit\AppData\Roaming\Media Center Programs
[19/01/2012 02:19:26] - |SD| - C:\Users\bullshit\AppData\Roaming\Microsoft
[03/08/2013 03:34:52] - |D| - C:\Users\bullshit\AppData\Roaming\Microsoft Games
[08/03/2012 09:59:12] - |D| - C:\Users\bullshit\AppData\Roaming\Mozilla
[18/02/2012 01:25:40] - |D| - C:\Users\bullshit\AppData\Roaming\My Games
[02/04/2012 22:03:18] - |D| - C:\Users\bullshit\AppData\Roaming\NVIDIA
[26/08/2013 10:01:26] - |D| - C:\Users\bullshit\AppData\Roaming\OpenOffice
[02/09/2013 02:55:37] - |D| - C:\Users\bullshit\AppData\Roaming\Petroglyph
[17/04/2014 13:13:05] - |D| - C:\Users\bullshit\AppData\Roaming\Roaming
[02/04/2012 22:00:31] - |RHD| - C:\Users\bullshit\AppData\Roaming\SecuROM
[21/06/2012 01:39:40] - |D| - C:\Users\bullshit\AppData\Roaming\Skype
[22/02/2014 08:56:06] - |D| - C:\Users\bullshit\AppData\Roaming\The Creative Assembly
[02/09/2012 21:02:52] - |D| - C:\Users\bullshit\AppData\Roaming\Thunderbird
[27/11/2013 15:37:51] - |D| - C:\Users\bullshit\AppData\Roaming\Ubisoft
[21/08/2012 01:01:13] - |D| - C:\Users\bullshit\AppData\Roaming\vlc
[20/01/2012 11:33:53] - |D| - C:\Users\bullshit\AppData\Roaming\WinRAR
[14/08/2012 11:25:35] - |D| - C:\Users\bullshit\AppData\Roaming\XnView

�� | C:\Users\bullshit\AppData\Local

[22/01/2012 03:13:14] - |D| - C:\Users\bullshit\AppData\Local\Adobe
[19/01/2012 02:19:27] - |SHD| - C:\Users\bullshit\AppData\Local\Application Data
[06/05/2012 09:24:13] - |D| - C:\Users\bullshit\AppData\Local\Apps
[19/01/2012 17:12:01] - |D| - C:\Users\bullshit\AppData\Local\ArcSoft
[20/01/2012 18:04:06] - |D| - C:\Users\bullshit\AppData\Local\Diagnostics
[02/04/2012 21:51:24] - |D| - C:\Users\bullshit\AppData\Local\Divinity 2
[20/06/2012 11:30:31] - |D| - C:\Users\bullshit\AppData\Local\ElevatedDiagnostics
[02/05/2014 03:10:03] - |SHD| - C:\Users\bullshit\AppData\Local\EmieSiteList
[02/05/2014 03:10:03] - |SHD| - C:\Users\bullshit\AppData\Local\EmieUserList
[10/05/2012 22:24:43] - |D| - C:\Users\bullshit\AppData\Local\Fallout3
[25/01/2013 18:52:36] - |A| - C:\Users\bullshit\AppData\Local\file__0.localstorage
[18/06/2012 07:12:33] - |D| - C:\Users\bullshit\AppData\Local\FOMM
[06/03/2012 08:53:50] - |A| - C:\Users\bullshit\AppData\Local\GDIPFONTCACHEV1.DAT
[22/01/2012 03:10:59] - |D| - C:\Users\bullshit\AppData\Local\Google
[19/01/2012 02:19:27] - |SHD| - C:\Users\bullshit\AppData\Local\Historique
[26/01/2014 06:10:41] - |AH| - C:\Users\bullshit\AppData\Local\IconCache.db
[19/10/2012 16:20:01] - |D| - C:\Users\bullshit\AppData\Local\Macromedia
[19/01/2012 02:19:26] - |D| - C:\Users\bullshit\AppData\Local\Microsoft
[12/01/2013 03:42:50] - |D| - C:\Users\bullshit\AppData\Local\Microsoft Games
[08/03/2012 09:59:13] - |D| - C:\Users\bullshit\AppData\Local\Mozilla
[20/11/2013 18:27:10] - |D| - C:\Users\bullshit\AppData\Local\NVIDIA
[18/12/2013 03:40:54] - |D| - C:\Users\bullshit\AppData\Local\NVIDIA Corporation
[12/01/2013 15:18:11] - |D| - C:\Users\bullshit\AppData\Local\Programs
[10/09/2012 20:33:08] - |A| - C:\Users\bullshit\AppData\Local\Resmon.ResmonCfg
[02/06/2013 22:08:22] - |D| - C:\Users\bullshit\AppData\Local\Skyrim
[15/10/2012 23:39:59] - |D| - C:\Users\bullshit\AppData\Local\Stardock
[19/01/2012 02:19:26] - |D| - C:\Users\bullshit\AppData\Local\Temp
[19/01/2012 02:19:27] - |SHD| - C:\Users\bullshit\AppData\Local\Temporary Internet Files
[17/02/2013 19:51:34] - |D| - C:\Users\bullshit\AppData\Local\The Witcher 2
[02/09/2012 21:02:52] - |D| - C:\Users\bullshit\AppData\Local\Thunderbird
[19/01/2012 02:19:31] - |D| - C:\Users\bullshit\AppData\Local\VirtualStore

�� | C:\ProgramData

[22/01/2012 03:08:23] - |D| - C:\ProgramData\Adobe
[21/02/2013 14:17:01] - |D| - C:\ProgramData\Age of Empires 3
[14/07/2009 07:08:56] - |SHD| - C:\ProgramData\Application Data
[19/01/2012 17:11:42] - |D| - C:\ProgramData\ArcSoft
[19/01/2012 21:34:18] - |D| - C:\ProgramData\AVAST Software
[19/01/2012 02:19:15] - |SHD| - C:\ProgramData\Bureau
[17/08/2012 18:21:30] - |D| - C:\ProgramData\DAEMON Tools Lite
[14/07/2009 07:08:56] - |SHD| - C:\ProgramData\Desktop
[02/04/2012 22:02:56] - |D| - C:\ProgramData\Divinity 2
[02/04/2012 21:51:23] - |D| - C:\ProgramData\Divinity 2 DKS
[14/07/2009 07:08:56] - |SHD| - C:\ProgramData\Documents
[11/03/2012 20:59:44] - |D| - C:\ProgramData\EPSON
[19/01/2012 02:19:15] - |SHD| - C:\ProgramData\Favoris
[14/07/2009 07:08:56] - |SHD| - C:\ProgramData\Favorites
[13/09/2013 21:35:51] - |D| - C:\ProgramData\FreeRIP MP3 Converter
[22/01/2012 03:10:54] - |D| - C:\ProgramData\Google
[31/01/2013 17:33:23] - |D| - C:\ProgramData\InstallShield
[11/10/2013 20:56:01] - |D| - C:\ProgramData\Ironclad Games
[19/01/2012 18:47:07] - |D| - C:\ProgramData\Logishrd
[26/02/2012 10:12:46] - |D| - C:\ProgramData\Malwarebytes
[27/01/2014 07:10:17] - |D| - C:\ProgramData\Malwarebytes' Anti-Malware (portable)
[19/10/2012 16:18:08] - |D| - C:\ProgramData\McAfee
[20/12/2012 23:22:20] - |D| - C:\ProgramData\Media Center Programs
[19/01/2012 02:19:15] - |SHD| - C:\ProgramData\Menu D�marrer
[14/07/2009 05:20:08] - |SD| - C:\ProgramData\Microsoft
[19/01/2012 02:19:15] - |SHD| - C:\ProgramData\Mod�les
[25/04/2012 06:18:11] - |D| - C:\ProgramData\Mozilla
[19/01/2012 07:31:41] - |D| - C:\ProgramData\NVIDIA
[19/01/2012 07:30:32] - |D| - C:\ProgramData\NVIDIA Corporation
[22/09/2013 20:42:53] - |D| - C:\ProgramData\Oracle
[21/06/2012 01:38:55] - |D| - C:\ProgramData\Skype
[17/04/2014 13:14:04] - |D| - C:\ProgramData\Solidshield
[19/01/2012 15:38:37] - |D| - C:\ProgramData\SonicFocus
[17/04/2013 18:19:47] - |A| - C:\ProgramData\ss.ini
[11/10/2013 20:56:02] - |D| - C:\ProgramData\Stardock
[14/07/2009 07:08:56] - |SHD| - C:\ProgramData\Start Menu
[21/03/2013 23:34:42] - |D| - C:\ProgramData\Sun
[14/07/2009 07:08:56] - |SHD| - C:\ProgramData\Templates

[X] : [43 Ko]

El�ments analys�s : 232293 | Modifi�s : 125 | Infect�s : 98

�� |EOF| �� | 12:51:42 | [92 Ko]

Signaler le contenu de ce document