Script ZHPFix


Lignes indésirables :
M3 - MFPP: Plugins - [Patricia] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\babylon.xml =>PUP.Babylon
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://myhome.vi-view.com =>Hijacker.MyhomeViview
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://myhome.vi-view.com =>Hijacker.MyhomeViview
O23 - Service: Update AppEnable (Update AppEnable) . (...) - C:\Program Files (x86)\AppEnable\updateAppEnable.exe (.not file.) =>PUP.AppEnable
O23 - Service: Util AppEnable (Util AppEnable) . (...) - C:\Program Files (x86)\AppEnable\bin\utilAppEnable.exe (.not file.) =>PUP.AppEnable
[MD5.61FA11564A550D242F04EE2B8A6AAF69] [APT] [{41D22F7F-C67A-411B-8666-CEFE87FD92C6}] (...) -- C:\Program Files (x86)\Pricora 1.4\Uninstall.exe [115712] =>Adware.Pricora
[MD5.00000000000000000000000000000000] [APT] [{78FFB445-0DE4-44EE-BED3-26880116D768}] (...) -- C:\Users\Patricia\AppData\Roaming\vi-view\UninstallManager.exe (.not file.) [0] =>Hijacker.MyhomeViview
O39 - APT: - (..) -- C:\Windows\Tasks\Pricora 1.4-codedownloader.job [1206] =>PUP.CrossRider
O41 - Driver: ({820a714f-c526-4777-8e87-e9d6612e0938}Gw64) . (.StdLib - StdLib.) - C:\Windows\System32\drivers\{820a714f-c526-4777-8e87-e9d6612e0938}Gw64.sys =>PUP.LinkiDoo
O42 - Logiciel: Pricora 1.4 - (.Corporate Inc.) [HKLM][64Bits] -- Pricora 1.4 =>Adware.Pricora
O42 - Logiciel: WindowsMangerProtect20.0.0.1270 - (.WindowsProtect LIMITED.) [HKLM][64Bits] -- WindowsMangerProtect =>PUP.Fuyu
[HKCU\Software\AppDataLow\Software\Crossrider] =>PUP.CrossRider
[HKCU\Software\AppDataLow\Software\PriceGong] =>Adware.PriceGong
[HKCU\Software\AppDataLow\Software\Pricora 1.4] =>Adware.Pricora
[HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}] => PUP.OptimizerPro
[HKCU\Software\BabSolution] =>Hijacker.BabSolution
[HKCU\Software\Cr_Installer] =>PUP.CrossRider
[HKCU\Software\DC3_FEXEC] =>Trojan.Fynloski
[HKCU\Software\DataMngr] =>PUP.Datamngr
[HKCU\Software\DataMngr_Toolbar] =>PUP.Datamngr
[HKCU\Software\FileScout] =>PUP.FileScout
[HKCU\Software\Iminent] =>Adware.IMBooster
[HKCU\Software\InstallCore] =>Adware.InstallCore
[HKCU\Software\InstalledBrowserExtensions] =>Adware.VidSaver
[HKCU\Software\Optimizer Pro] =>PUP.OptimizerPro
[HKCU\Software\SweetIM] =>PUP.SweetIM
[HKCU\Software\WSE_Astromenda] =>PUP.Astromenda
[HKCU\Software\a55dbd8b33abe43] =>PUP.Babylon
[HKCU\Software\iLivid] =>Adware.Bandoo
[HKCU\Software\mysearchdial] =>Adware.MyWebSearch
[HKLM\Software\Wow6432Node\Babylon] =>PUP.Babylon
[HKLM\Software\Wow6432Node\BrowserMngr] =>PUP.Babylon
[HKLM\Software\Wow6432Node\DataMngr] =>PUP.Datamngr
[HKLM\Software\Wow6432Node\Iminent] =>Adware.IMBooster
[HKLM\Software\Wow6432Node\InstallCore] =>Adware.InstallCore
[HKLM\Software\Wow6432Node\Savings Wave] =>PUP.CrossRider
[HKLM\Software\Wow6432Node\SearchProtect] =>PUP.SearchProtect
[HKLM\Software\Wow6432Node\SweetIM] =>PUP.SweetIM
[HKLM\Software\Wow6432Node\a55dbd8b33abe43] =>PUP.Babylon
[HKLM\Software\Wow6432Node\supWindowsMangerProtect] =>PUP.Fuyu
[HKLM\Software\Wow6432Node\vi-viewSoftware] =>Hijacker.MyhomeViview
O43 - CFD: 21/11/2014 - 15:42:05 - [0] ----D C:\Program Files (x86)\AppEnable =>PUP.AppEnable
O43 - CFD: 25/10/2014 - 10:15:08 - [] ----D C:\Program Files (x86)\Freeven pro 1.2 =>PUP.Freeven
O43 - CFD: 01/05/2014 - 14:30:59 - [] ----D C:\Program Files (x86)\fst_fr_169 =>Adware.FreeSoftToday
O43 - CFD: 01/05/2014 - 14:30:59 - [] ----D C:\Program Files (x86)\MediaPlayerplus =>PUP.CrossRider
O43 - CFD: 01/05/2014 - 14:31:00 - [] ----D C:\Program Files (x86)\MyPC Backup =>PUP.MyPCBackup
O43 - CFD: 13/11/2013 - 15:28:40 - [] ----D C:\Program Files (x86)\Mysearchdial =>Adware.MyWebSearch
O43 - CFD: 08/11/2014 - 19:27:10 - [] ----D C:\Program Files (x86)\Pricora 1.4 =>Adware.Pricora
O43 - CFD: 22/10/2013 - 16:11:17 - [] ----D C:\Program Files (x86)\SearchProtect =>PUP.SearchProtect
O43 - CFD: 27/09/2012 - 08:02:41 - [0] ----D C:\ProgramData\Babylon =>PUP.Babylon
O43 - CFD: 11/04/2013 - 11:43:34 - [] ----D C:\ProgramData\IBUpdaterService =>Adware.InstallBrain
O43 - CFD: 01/05/2014 - 14:32:15 - [] ----D C:\ProgramData\IePluginService =>PUP.IePluginService
O43 - CFD: 08/03/2013 - 16:08:19 - [] ----D C:\ProgramData\Iminent =>Adware.IMBooster
O43 - CFD: 21/11/2014 - 15:25:16 - [] ----D C:\ProgramData\WindowsMangerProtect =>PUP.Fuyu
O43 - CFD: 01/05/2014 - 14:32:15 - [] ----D C:\ProgramData\WPM =>PUP.WpManager
O43 - CFD: 14/08/2014 - 11:55:05 - [] ----D C:\Users\Patricia\AppData\Roaming\Astromenda =>PUP.Astromenda
O43 - CFD: 30/07/2013 - 09:48:44 - [] ----D C:\Users\Patricia\AppData\Roaming\BabSolution =>Hijacker.BabSolution
O43 - CFD: 27/09/2012 - 08:02:41 - [] ----D C:\Users\Patricia\AppData\Roaming\Babylon =>PUP.Babylon
O43 - CFD: 14/08/2014 - 11:05:03 - [] ----D C:\Users\Patricia\AppData\Roaming\dclogs => Stolen.Data
O43 - CFD: 08/03/2013 - 16:08:28 - [] ----D C:\Users\Patricia\AppData\Roaming\Iminent =>Adware.IMBooster
O43 - CFD: 13/11/2013 - 15:28:42 - [] ----D C:\Users\Patricia\AppData\Roaming\mysearchdial =>Adware.MyWebSearch
O43 - CFD: 11/04/2013 - 11:44:38 - [] ----D C:\Users\Patricia\AppData\Roaming\Nosibay =>PUP.BubbleDock
O43 - CFD: 01/05/2014 - 14:30:34 - [] ----D C:\Users\Patricia\AppData\Roaming\webssearches =>Hijacker.WebsSearches
O43 - CFD: 14/08/2014 - 11:55:27 - [] ----D C:\Users\Patricia\AppData\Roaming\WSE_Astromenda =>PUP.Astromenda
O43 - CFD: 01/05/2014 - 14:09:01 - [] ----D C:\Users\Patricia\AppData\Local\fst_fr_169 =>Adware.FreeSoftToday
O43 - CFD: 11/04/2013 - 11:52:13 - [0] ----D C:\Users\Patricia\AppData\Local\Savings Wave =>PUP.CrossRider
O43 - CFD: 11/09/2013 - 07:23:23 - [] ----D C:\Users\Patricia\AppData\Local\SearchProtect =>PUP.SearchProtect
O44 - LFC:[MD5.E28E67F7094F6294FA75BEAFD4AD0DC5] - 20/11/2014 - 18:17:28 ---A- . (.StdLib - StdLib.) -- C:\Windows\System32\Drivers\{820a714f-c526-4777-8e87-e9d6612e0938}Gw64.sys [48776] =>PUP.LinkiDoo
O58 - SDL:20/11/2014 - 18:17:28 ---A- . (.StdLib - StdLib.) -- C:\Windows\System32\Drivers\{820a714f-c526-4777-8e87-e9d6612e0938}Gw64.sys [48776] =>PUP.LinkiDoo
O61 - LFC: 21/11/2014 - 17:59:14 ---A- . (...) -- C:\Users\Patricia\AppData\Roaming\{3D2B3714-F20B-486C-81A2-1949BAE31CF2}_AZ\{50472A36-E0E1-4508-9D19-10C009DF99E4}_DYG\tmp\SupTab_v5.8.8.777_noblank_amy.exe [2626528] =>PUP.SupTab
O61 - LFC: 21/11/2014 - 17:59:14 ---A- . (.Fuyu LIMITED.) -- C:\Users\Patricia\AppData\Roaming\{3D2B3714-F20B-486C-81A2-1949BAE31CF2}_AZ\{50472A36-E0E1-4508-9D19-10C009DF99E4}_DYG\tmp\wpm_v20.0.0.1270.exe [490640] =>PUP.WpManager
O64 - Services: CurCS - 20/11/2014 - C:\Windows\System32\drivers\{820a714f-c526-4777-8e87-e9d6612e0938}Gw64.sys ({820a714f-c526-4777-8e87-e9d6612e0938}Gw64) .(.StdLib - StdLib.) - LEGACY_{820A714F-C526-4777-8E87-E9D6612E0938}GW64 =>PUP.LinkiDoo
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (...) -- C:\Program Files\Internet Explorer\iexplore.exe http://myhome.vi-view.com =>Hijacker.MyhomeViview
O69 - SBI: SearchScopes [HKCU] {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} - (Mysearchdial) - http://start.mysearchdial.com =>Adware.MyWebSearch
[HKCU\Software\a55dbd8b33abe43\history\{16cdff19-861d-48e3-a751-d99a27784753}2.2.643.41]:guid="{16cdff19-861d-48e3-a751-d99a27784753}" =>PUP.Babylon
[HKCU\Software\a55dbd8b33abe43\history\{16cdff19-861d-48e3-a751-d99a27784753}2.2.643.41]:version="2.2.643.41" =>PUP.Babylon
[HKCU\Software\a55dbd8b33abe43\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1125.80]:guid="{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}" =>Hijacker.Eazel
[HKCU\Software\a55dbd8b33abe43\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1125.80]:version="2.6.1125.80" =>Hijacker.Eazel
[HKCU\Software\a55dbd8b33abe43] =>PUP.Babylon^
[HKLM\Software\Wow6432Node\a55dbd8b33abe43] => Infection PUP (PUP.Babylon)
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\AdvancedSystemProtector_RASAPI32 =>PUP.AdvancedSystemProtector
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\AdvancedSystemProtector_RASMANCS =>PUP.AdvancedSystemProtector
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Bubble Dock BSetup_RASAPI32 =>PUP.BubbleDock
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Bubble Dock BSetup_RASMANCS =>PUP.BubbleDock
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Bubble Dock_RASAPI32 =>PUP.BubbleDock
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Bubble Dock_RASMANCS =>PUP.BubbleDock
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\conduitinstaller_RASAPI32 =>Adware.Bloson
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\conduitinstaller_RASMANCS =>Adware.Bloson
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\dnsbasic_RASAPI32 =>PUP.Zwangi
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\dnsbasic_RASMANCS =>PUP.Zwangi
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\iLividSetupV1[1]_RASAPI32 =>Adware.Bandoo
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\iLividSetupV1[1]_RASMANCS =>Adware.Bandoo
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\IminentSetup_RASAPI32 =>Adware.IMBooster
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\IminentSetup_RASMANCS =>Adware.IMBooster
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Iminent_RASAPI32 =>Adware.IMBooster
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Iminent_RASMANCS =>Adware.IMBooster
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Install_BubbleDock_RASAPI32 =>PUP.BubbleDock
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Install_BubbleDock_RASMANCS =>PUP.BubbleDock
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\MyBabylonTB_RASAPI32 =>PUP.Babylon
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\MyBabylonTB_RASMANCS =>PUP.Babylon
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\savings wave-bg_RASAPI32 =>PUP.CrossRider
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\savings wave-bg_RASMANCS =>PUP.CrossRider
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Savings Wave_RASAPI32 =>PUP.CrossRider
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Savings Wave_RASMANCS =>PUP.CrossRider
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\sweetimsetup_RASAPI32 =>PUP.SweetIM
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\sweetimsetup_RASMANCS =>PUP.SweetIM
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\SweetIM_RASAPI32 =>PUP.SweetIM
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\SweetIM_RASMANCS =>PUP.SweetIM
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\SweetPacksUpdateManager_RASAPI32 =>PUP.SweetIM
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\SweetPacksUpdateManager_RASMANCS =>PUP.SweetIM
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\updateAppEnable_RASAPI32 =>PUP.AppEnable
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\updateAppEnable_RASMANCS =>PUP.AppEnable
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\utilAppEnable_RASAPI32 =>PUP.AppEnable
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\utilAppEnable_RASMANCS =>PUP.AppEnable
SS - | Auto 10/07/1658 0 | (Update AppEnable) . (...) - C:\Program Files (x86)\AppEnable\updateAppEnable.exe =>PUP.AppEnable
SS - | Auto 10/07/1658 0 | (Util AppEnable) . (...) - C:\Program Files (x86)\AppEnable\bin\utilAppEnable.exe =>PUP.AppEnable
[HKLM\SYSTEM\CurrentControlSet\Services\Update AppEnable] =>PUP.AppEnable^
[HKLM\SYSTEM\CurrentControlSet\Services\Util AppEnable] =>PUP.AppEnable^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Pricora 1.4] =>Adware.Pricora^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\WindowsMangerProtect] =>PUP.Fuyu^
[HKLM\Software\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}] =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}] =>Adware.IMBooster
[HKLM\Software\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}] =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}] =>Adware.IMBooster
[HKLM\Software\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}] =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}] =>Adware.IMBooster
[HKLM\Software\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}] =>PUP.Babylon
[HKLM\Software\Wow6432Node\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}] =>PUP.Babylon
[HKLM\Software\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}] =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}] =>Adware.IMBooster
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ecdf796-c2dc-4d79-a620-cce0c0a66cc9}] =>PUP.Babylon
[HKLM\Software\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}] =>PUP.RewardsArcade
[HKLM\Software\Classes\TypeLib\{2BF2028E-3F3C-4C05-AB45-B2F1DCFE0759}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291}] =>Adware.SocialSkinz
[HKLM\Software\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199}] =>Adware.IMBooster
[HKLM\Software\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}] =>PUP.RewardsArcade
[HKLM\Software\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}] =>Adware.CDNHelper
[HKLM\Software\Wow6432Node\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}] =>Adware.CDNHelper
[HKLM\Software\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}] =>PUP.RewardsArcade
[HKLM\Software\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}] =>PUP.Wajam
[HKLM\Software\Wow6432Node\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}] =>PUP.Wajam
[HKLM\Software\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}] =>PUP.Babylon
[HKLM\Software\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}] =>PUP.Babylon
[HKLM\Software\Wow6432Node\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}] =>PUP.Babylon
[HKLM\Software\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}] =>PUP.RewardsArcade
[HKLM\Software\Classes\TypeLib\{DB538320-D3C5-433C-BCA9-C4081A054FCF}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48d2-9061-8BBD4899EB08}] =>Adware.IMBooster
[HKLM\Software\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}] =>PUP.RewardsArcade
[HKLM\Software\Classes\AppID\escort.dll] =>PUP.Babylon
[HKLM\Software\Classes\AppID\escortapp.dll] =>PUP.Babylon
[HKLM\Software\Classes\AppID\esrv.EXE] =>PUP.Babylon
[HKLM\Software\Classes\escort.escortIEPane] =>PUP.Funmoods
[HKLM\Software\Classes\escort.escortIEPane.1] =>PUP.Funmoods
[HKLM\Software\Wow6432Node\BrowserMngr] =>PUP.Babylon
[HKCU\Software\Cr_Installer] =>PUP.CrossRider
[HKCU\Software\DataMngr] =>Adware.Bandoo
[HKLM\Software\Wow6432Node\DataMngr] =>Adware.Bandoo
[HKCU\Software\DC3_FEXEC] =>Trojan.Fynloski
[HKCU\Software\ilivid] =>Adware.Bandoo
[HKCU\Software\Iminent] =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Iminent] =>Adware.IMBooster
[HKCU\Software\AppDataLow\Software\PriceGong] =>Adware.PriceGong
[HKCU\Software\SweetIM] =>PUP.SweetIM
[HKLM\Software\Wow6432Node\SweetIM] =>PUP.SweetIM
[HKLM\Software\Wow6432Node\Microsoft\Tracing\Iminent_RASAPI32] =>Adware.Bandoo
[HKLM\Software\Wow6432Node\Microsoft\Tracing\Iminent_RASMANCS] =>Adware.Bandoo
[HKLM\Software\Wow6432Node\Microsoft\Tracing\MyBabylontb_RASAPI32] =>PUP.Babylon
[HKLM\Software\Wow6432Node\Microsoft\Tracing\MyBabylontb_RASMANCS] =>PUP.Babylon
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SearchTheWebARP] =>Adware.IMBooster
[HKLM\Software\Classes\Prod.cap] =>PUP.Babylon
[HKCU\Software\InstallCore] =>Adware.InstallCore
[HKLM\Software\Wow6432Node\InstallCore] =>Adware.InstallCore
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375] =>PUP.Tarma
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5] =>PUP.Tarma
[HKLM\Software\Wow6432Node\Savings Wave] =>PUP.CrossRider
[HKCU\Software\AppDataLow\Software\Crossrider] =>PUP.CrossRider
[HKCU\Software\InstalledBrowserExtensions\] =>PUP.CrossRider
[HKCU\Software\InstalledBrowserExtensions] =>PUP.CrossRider
[HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}] =>PUP.OptimizerPro
[HKLM\Software\Wow6432Node\{1146AC44-2F03-4431-B4FD-889BC837521F}] =>PUP.OptimizerPro
[HKLM\Software\Classes\esrv.mysearchdialESrvc] =>Adware.MyWebSearch
[HKLM\Software\Classes\esrv.mysearchdialESrvc.1] =>Adware.MyWebSearch
[HKLM\Software\Classes\mysearchdial.mysearchdialappCore] =>Adware.MyWebSearch
[HKLM\Software\Classes\mysearchdial.mysearchdialappCore.1] =>Adware.MyWebSearch
[HKLM\Software\Classes\mysearchdial.mysearchdialHlpr] =>Adware.MyWebSearch
[HKLM\Software\Classes\mysearchdial.mysearchdialHlpr.1] =>Adware.MyWebSearch
[HKLM\Software\Classes\SWEETIE.IEToolbar] =>PUP.SweetIM
[HKLM\Software\Classes\SWEETIE.IEToolbar.1] =>PUP.SweetIM
[HKLM\Software\Classes\SweetIM_URLSearchHook.ToolbarURLSearchHook] =>PUP.SweetIM
[HKLM\Software\Classes\SweetIM_URLSearchHook.ToolbarURLSearchHook.1] =>PUP.SweetIM
[HKLM\Software\Classes\Toolbar3.SWEETIE] =>PUP.SweetIM
[HKLM\Software\Classes\Toolbar3.SWEETIE.1] =>PUP.SweetIM
[HKLM\Software\Wow6432Node\Classes\escort.escortIEPane] =>PUP.Funmoods
[HKLM\Software\Wow6432Node\Classes\escort.escortIEPane.1] =>PUP.Funmoods
[HKLM\Software\Wow6432Node\Classes\esrv.mysearchdialESrvc] =>Adware.MyWebSearch
[HKLM\Software\Wow6432Node\Classes\esrv.mysearchdialESrvc.1] =>Adware.MyWebSearch
[HKLM\Software\Wow6432Node\Classes\mysearchdial.mysearchdialappCore] =>Adware.MyWebSearch
[HKLM\Software\Wow6432Node\Classes\mysearchdial.mysearchdialappCore.1] =>Adware.MyWebSearch
[HKLM\Software\Wow6432Node\Classes\mysearchdial.mysearchdialHlpr] =>Adware.MyWebSearch
[HKLM\Software\Wow6432Node\Classes\mysearchdial.mysearchdialHlpr.1] =>Adware.MyWebSearch
[HKLM\Software\Wow6432Node\Classes\SWEETIE.IEToolbar] =>PUP.SweetIM
[HKLM\Software\Wow6432Node\Classes\SWEETIE.IEToolbar.1] =>PUP.SweetIM
[HKLM\Software\Wow6432Node\Classes\SweetIM_URLSearchHook.ToolbarURLSearchHook] =>PUP.SweetIM
[HKLM\Software\Wow6432Node\Classes\SweetIM_URLSearchHook.ToolbarURLSearchHook.1] =>PUP.SweetIM
[HKLM\Software\Wow6432Node\Classes\Toolbar3.SWEETIE] =>PUP.SweetIM
[HKLM\Software\Wow6432Node\Classes\Toolbar3.SWEETIE.1] =>PUP.SweetIM
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110111271165}] =>PUP.CrossRider
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110311791108}] =>PUP.CrossRider
[HKLM\Software\Wow6432Node\Classes\AppID\escort.DLL] =>PUP.Funmoods
[HKLM\Software\Wow6432Node\Classes\AppID\escortApp.DLL] =>PUP.Funmoods
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{31111111-1111-1111-1111-110111271165}] =>PUP.CrossRider
[HKLM\Software\Classes\Interface\{EEE6C358-6118-11DC-9C72-001320C79847}] =>PUP.SweetIM^
[HKLM\Software\Classes\Interface\{EEE6C359-6118-11DC-9C72-001320C79847}] =>PUP.SweetIM^
[HKLM\Software\Classes\Interface\{EEE6C35A-6118-11DC-9C72-001320C79847}] =>PUP.SweetIM^
C:\Program Files (x86)\AppEnable =>PUP.AppEnable^
C:\Program Files (x86)\Freeven pro 1.2 =>PUP.Freeven^
C:\Program Files (x86)\fst_fr_169 =>Adware.FreeSoftToday^
C:\Program Files (x86)\MediaPlayerplus =>PUP.CrossRider^
C:\Program Files (x86)\MyPC Backup =>PUP.MyPCBackup^
C:\Program Files (x86)\Mysearchdial =>Adware.MyWebSearch^
C:\Program Files (x86)\Pricora 1.4 =>Adware.Pricora^
C:\Program Files (x86)\SearchProtect =>PUP.SearchProtect^
C:\ProgramData\Babylon =>PUP.Babylon^
C:\ProgramData\IBUpdaterService =>Adware.InstallBrain^
C:\ProgramData\IePluginService =>PUP.IePluginService^
C:\ProgramData\Iminent =>Adware.IMBooster^
C:\ProgramData\WindowsMangerProtect =>PUP.Fuyu^
C:\ProgramData\WPM =>PUP.WpManager^
C:\Users\Patricia\AppData\Roaming\Astromenda =>PUP.Astromenda^
C:\Users\Patricia\AppData\Roaming\BabSolution =>Hijacker.BabSolution^
C:\Users\Patricia\AppData\Roaming\Babylon =>PUP.Babylon^
C:\Users\Patricia\AppData\Roaming\Iminent =>Adware.IMBooster^
C:\Users\Patricia\AppData\Roaming\mysearchdial =>Adware.MyWebSearch^
C:\Users\Patricia\AppData\Roaming\Nosibay =>PUP.BubbleDock^
C:\Users\Patricia\AppData\Roaming\webssearches =>Hijacker.WebsSearches^
C:\Users\Patricia\AppData\Roaming\WSE_Astromenda =>PUP.Astromenda^
C:\Users\Patricia\AppData\Local\fst_fr_169 =>Adware.FreeSoftToday^
C:\Users\Patricia\AppData\Local\Savings Wave =>PUP.CrossRider^
C:\Users\Patricia\AppData\Local\SearchProtect =>PUP.SearchProtect^
C:\Users\Patricia\AppData\LocalLow\BabylonToolbar =>PUP.Babylon
C:\Users\Patricia\AppData\LocalLow\SweetIM =>PUP.SweetIM
C:\Program Files (x86)\Pricora 1.4\Uninstall.exe =>Adware.Pricora^
C:\Windows\Tasks\Pricora 1.4-codedownloader.job =>PUP.CrossRider^
[HKCU\Software\AppDataLow\Software\Pricora 1.4] =>Adware.Pricora^
[HKCU\Software\BabSolution] =>Hijacker.BabSolution^
[HKCU\Software\DataMngr_Toolbar] =>PUP.Datamngr^
[HKCU\Software\FileScout] =>PUP.FileScout^
[HKCU\Software\Optimizer Pro] =>PUP.OptimizerPro^
[HKCU\Software\WSE_Astromenda] =>PUP.Astromenda^
[HKCU\Software\iLivid] =>Adware.Bandoo^
[HKCU\Software\mysearchdial] =>Adware.MyWebSearch^
[HKLM\Software\Wow6432Node\Babylon] =>PUP.Babylon^
[HKLM\Software\Wow6432Node\SearchProtect] =>PUP.SearchProtect^
[HKLM\Software\Wow6432Node\supWindowsMangerProtect] =>PUP.Fuyu^
[HKLM\Software\Wow6432Node\vi-viewSoftware] =>Hijacker.MyhomeViview^
[HKCU\Software\a55dbd8b33abe43\history\{16cdff19-861d-48e3-a751-d99a27784753}2.2.643.41]:guid="{16cdff19-861d-48e3-a751-d99a27784753}" =>PUP.Babylon^
[HKCU\Software\a55dbd8b33abe43\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1125.80]:guid="{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}" =>Hijacker.Eazel^
[HKCU\Software\a55dbd8b33abe43] =>PUP.Babylon^^
O3 - Toolbar: avast! Online Security - [HKLM]{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} . (...) -- (.not file.)
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{2318C2B1-4965-11D4-9B18-009027A5CD4F} Clé orpheline
O42 - Logiciel: eBay - (.eBay Inc..) [HKLM][64Bits] -- {A8B88634-7F90-402F-B66A-86429755F6A5}
[HKCU\Software\AppDataLow\Software\Conduit]
[HKCU\Software\Softonic]
[HKLM\Software\Wow6432Node\Conduit]
O43 - CFD: 22/02/2012 - 12:09:07 - [] ----D C:\Program Files (x86)\Conduit
O43 - CFD: 20/11/2012 - 12:06:40 - [] ----D C:\Program Files (x86)\eBay
O43 - CFD: 25/07/2013 - 07:25:36 - [] ----D C:\ProgramData\APN
O43 - CFD: 25/12/2011 - 18:00:14 - [] ----D C:\ProgramData\Ask
O43 - CFD: 31/08/2012 - 20:19:54 - [0] ----D C:\Users\Patricia\AppData\Local\Conduit
O69 - SBI: SearchScopes [HKCU] {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} - (Delta Search) - http://www1.delta-search.com
O69 - SBI: SearchScopes [HKCU] {56E3012A-48CA-E90E-5210-3B42DF815731} - (Conduit Search) - http://search.conduit.com
O69 - SBI: SearchScopes [HKCU] {5F65DA2A-63EF-4DCA-AECF-86BAC00D4B76} - (Ask Search) - http://websearch.ask.com
O90 - PUC: "43688B8A09F7F2046BA6682479556F5A" . (.eBay.) -- c:\Windows\Installer\{A8B88634-7F90-402F-B66A-86429755F6A5}\_853F67D554F05449430E7E.exe
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_pour_doras-world-adventure (1)_RASAPI32
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_pour_doras-world-adventure (1)_RASMANCS
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_pour_doras-world-adventure_RASAPI32
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_pour_doras-world-adventure_RASMANCS
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_pour_zac-browser_RASAPI32
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_pour_zac-browser_RASMANCS
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{A8B88634-7F90-402F-B66A-86429755F6A5}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D6533F74-218B-41BE-9D91-5BD471FECFFD}]
[HKLM\Software\Wow6432Node\Google\Chrome\Extensions\paoponfhfdfnjgddpnpjkambkcgdaaib]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0E12F736682067FDE4D1158D5940A82E]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1A24B5BB8521B03E0C8D908F5ABC0AE6]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2B0D56C4F4C46D844A57FFED6F0D2852]
[HKLM\Software\Classes\Installer\Features\43688B8A09F7F2046BA6682479556F5A]
[HKLM\Software\Classes\Installer\Products\43688B8A09F7F2046BA6682479556F5A]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\43688B8A09F7F2046BA6682479556F5A]
[HKLM\Software\Wow6432Node\Classes\Installer\Features\43688B8A09F7F2046BA6682479556F5A]
[HKLM\Software\Wow6432Node\Classes\Installer\Products\43688B8A09F7F2046BA6682479556F5A]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\49D4375FE41653242AEA4C969E4E65E0]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6AA0923513360135B272E8289C5F13FA]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6F7467AF8F29C134CBBAB394ECCFDE96]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\922525DCC5199162F8935747CA3D8E59]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BCDA179D619B91648538E3394CAC94CC]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D677B1A9671D4D4004F6F2A4469E86EA]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DD1402A9DD4215A43ABDE169A41AFA0E]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E36E114A0EAD2AD46B381D23AD69CDDF]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EF8E618DB3AEDFBB384561B5C548F65E]
[HKCU\Software\Softonic]
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{A8B88634-7F90-402F-B66A-86429755F6A5}]
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670}]
[HKLM\Software\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}]
[HKLM\Software\Wow6432Node\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}]
[HKLM\Software\Wow6432Node\Microsoft\Tracing\ConduitInstaller_RASAPI32]
[HKLM\Software\Wow6432Node\Microsoft\Tracing\ConduitInstaller_RASMANCS]
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88}]
[HKLM\Software\Classes\Toolbar.CT2851639]
[HKLM\Software\Classes\Toolbar.CT3106777]
[HKLM\Software\Wow6432Node\Classes\Toolbar.CT2851639]
[HKLM\Software\Wow6432Node\Classes\Toolbar.CT3106777]
[HKLM\Software\Wow6432Node\Classes\CLSID\{3c471948-f874-49f5-b338-4f214a2ee0b1}]
C:\Program Files (x86)\eBay
C:\Program Files (x86)\Conduit
C:\Users\Patricia\AppData\Local\Conduit
C:\Users\Patricia\AppData\LocalLow\Conduit
[HKCU\Software\AppDataLow\Software\Conduit]
[HKLM\Software\Wow6432Node\Conduit]
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{05EEB91A-AEF7-4F8A-978F-FB83E7B03F8E} Clé orpheline => McAfee SPS / Toolbar.Conduit
[HKCU\Software\Delta] => Toolbar.DeltaSearch / M-Audio
[HKLM\Software\Wow6432Node\Delta] => Toolbar.DeltaSearch / M-Audio

Lignes superflues ou inutiles :
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{50FAFAF0-70A9-419D-A109-FA4B4FFD4E37} Clé orpheline => Orphean Key not necessary
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{4646332D-5637-006A-76A7-7A786E7484D7} Clé orpheline => Orphean Key not necessary
[HKCU\Software\Nosibay] => Nosibay
[HKCU\Software\Systweak] => Systweak Inc
[HKLM\Software\Wow6432Node\Systweak] => Systweak Inc
O43 - CFD: 11/04/2013 - 11:45:31 - [] ----D C:\Program Files (x86)\Nosibay => Nosibay
O43 - CFD: 25/11/2014 - 17:24:10 - [] ----D C:\ProgramData\boost_interprocess => boost.org
O43 - CFD: 11/04/2013 - 11:51:48 - [0] ----D C:\Users\Patricia\AppData\Roaming\PerformerSoft => PerformerSoft LLC
O43 - CFD: 13/11/2013 - 14:39:41 - [0] ----D C:\Users\Patricia\AppData\Roaming\Systweak => Systweak Inc
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\00354927.sys . (...) -- C:\Windows\System32\Drivers\00354927.sys (.not file.) => Fichier absent
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\35299950.sys . (...) -- C:\Windows\System32\Drivers\35299950.sys (.not file.) => Fichier absent
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\70483912.sys . (...) -- C:\Windows\System32\Drivers\70483912.sys (.not file.) => Fichier absent
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\00354927.sys . (...) -- C:\Windows\System32\Drivers\00354927.sys (.not file.) => Fichier absent
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\35299950.sys . (...) -- C:\Windows\System32\Drivers\35299950.sys (.not file.) => Fichier absent
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\70483912.sys . (...) -- C:\Windows\System32\Drivers\70483912.sys (.not file.) => Fichier absent
O61 - LFC: 19/11/2014 - 17:58:19 ---A- . (...) -- C:\Users\Patricia\AppData\Local\Temp\EPSON\Download\Resource\CESU4330.exe [6019352] => Temporary file not necessary
O61 - LFC: 19/11/2014 - 17:58:19 ---A- . (...) -- C:\Users\Patricia\AppData\Local\Temp\EPSON\Download\Resource\FWG821TL_EJ25DB.exe [11247616] => Temporary file not necessary
O61 - LFC: 19/11/2014 - 17:58:20 ---A- . (...) -- C:\Users\Patricia\AppData\Local\Temp\EPSON\Download\Resource\mepSetup_20141030.exe [5611504] => Temporary file not necessary
O61 - LFC: 21/11/2014 - 17:58:21 ---A- . (...) -- C:\Users\Patricia\AppData\Local\Temp\ICReinstall_tdsskiller.exe [802288] => Temporary file not necessary
O61 - LFC: 21/11/2014 - 17:58:23 ---A- . (.PC Utilities Software Limited.) -- C:\Users\Patricia\AppData\Local\Temp\optprosetup.exe [5826632] => Temporary file not necessary

Lignes d'optimisation du démarrage :
OPT:O4 - HKLM\..\Wow6432Node\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe
[HKLM\Software\BrowserChoice]


EmptyClsid
Proxyfix
FirewallRaz
ShortcutFix
emptytemp
emptyflash