~ Rapport de ZHPDiag v2015.6.16.57 - Nicolas Coolman (16/06/2015)
~ Lancé par Christophe (18/06/2015 15:52:05)
~ Facebook : https://www.facebook.com/nicolascoolman1
~ Adresse du Forum http://www.forum.nicolascoolman.fr
~ Traduit par Nicolas Coolman
~ Etat de la version : Nouvelle version disponible
~ Liste blanche : Activée par le programme
~ Elévation des Privilèges : OK
~ User Account Control (UAC): Deactivate by user


---\\ Navigateurs Internet
MSIE: Internet Explorer v10.0.9200.17357

---\\ Informations sur les produits Windows
~ Langage: Français
Windows Server License Manager Script : OK
~ Windows(R) Operating System, OEM_DM channel
Windows ID Activation : OK
~ Windows Partial Key : 2PKVT
Windows License : OK
~ Windows Remaining Initializations Number : 998
Software Protection Service (Protection logicielle) : OK
Windows Automatic Updates : OK
Windows Activation Technologies : OK
Windows 8, 64-bit (Build 9200)

---\\ Logiciels de protection du système
Malwarebytes Anti-Malware version 2.1.6.1022
Windows Defender W8 (Activate)

---\\ Logiciels d'optimisation du système

---\\ Logiciels de partage PeerToPeer

---\\ Surveillance de Logiciels

---\\ Informations sur le système
~ Processor: Intel64 Family 6 Model 58 Stepping 9, GenuineIntel
~ Operating System: 64 Bits
Boot mode: Normal (Normal boot)
Total RAM: 6099 MB (73% free)
System Restore: Activé (Enable)
System drive C: has 693 GB (75%) free of 913 GB

---\\ Mode de connexion au système
~ Computer Name: COUCOU
~ User Name: Christophe
~ All Users Names: UpdatusUser, HomeGroupUser$, Christophe, Administrateur,
~ Unselected Option: O45,O61,O62,O65,O66,O80,O82,O89
Logged in as Administrator

---\\ Variables d'environnement
~ System Unit : C:\
~ %AppZHP% : C:\Users\christophe\AppData\Roaming\ZHP\
~ %AppData% : C:\Users\christophe\AppData\Roaming\
~ %Desktop% : C:\Users\christophe\Desktop\
~ %Favorites% : C:\Users\christophe\Pictures\Music\Favorites\
~ %LocalAppData% : C:\Users\christophe\AppData\Local\
~ %StartMenu% : C:\Users\christophe\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\

---\\ Enumération des unités disques
C: Hard drive, Flash drive, Thumb drive (Free 693 Go of 913 Go)
D: Hard drive, Flash drive, Thumb drive (Free 2 Go of 17 Go)
E: CD-ROM drive (Not Inserted)
F: Floppy drive, Flash card reader, USB Key (Not Inserted)
G: Floppy drive, Flash card reader, USB Key (Free 1 Go of 1 Go)



---\\ Etat du Centre de Sécurité Windows
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: Modified
~ Security Center: 46 Legitimates Filtered in 00mn 00s



---\\ Recherche particulière de fichiers génériques
[MD5.0E8E6463F81C80AFBED533E0F1F8895D] - (.Microsoft Corporation - Explorateur Windows.) (.01/06/2013 - 12:34:21.) -- C:\Windows\Explorer.exe [2391280]
[MD5.FE9AB232B56A12224E8A3F3F9878C9A3] - (.Microsoft Corporation - Application de démarrage de Windows.) (.26/07/2012 - 04:08:50.) -- C:\Windows\System32\Wininit.exe [132608]
[MD5.1AE81E63F2B5030C874E89E5E667AAEC] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.21/04/2015 - 14:53:34.) -- C:\Windows\System32\wininet.dll [2237440]
[MD5.75DD70A14145499C9F7D903CF9A8C91B] - (.Microsoft Corporation - Application d’ouverture de session Windows.) (.12/04/2014 - 10:10:31.) -- C:\Windows\System32\Winlogon.exe [578048]
[MD5.9448F5740A037EC0C18F0E9177232DD0] - (.Microsoft Corporation - Bibliothèque de licences.) (.26/07/2012 - 04:07:20.) -- C:\Windows\System32\sppcomapi.dll [273408]
[MD5.FE7FB9612D354EB41DF4F0FF5D6FB259] - (.Microsoft Corporation - Pilote de fonction connexe pour WinSock.) (.29/05/2014 - 23:24:46.) -- C:\Windows\system32\Drivers\AFD.sys [576512]
[MD5.A721FF570C2387E383BDDEA9632863C9] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.26/07/2012 - 06:00:48.) -- C:\Windows\system32\Drivers\atapi.sys [25840]
[MD5.990B1BABE6E81FB18E65A87EBEFB1772] - (.Microsoft Corporation - CD-ROM File System Driver.) (.26/07/2012 - 03:30:10.) -- C:\Windows\system32\Drivers\Cdfs.sys [108544]
[MD5.339BFF85D788268752DA8C9644B188EE] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.26/07/2012 - 03:26:36.) -- C:\Windows\system32\Drivers\Cdrom.sys [174080]
[MD5.431141C6859990824D17F71C30A78728] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.16/01/2014 - 00:42:58.) -- C:\Windows\system32\Drivers\DfsC.sys [118784]
[MD5.58CC013EFA9893057160EDA018D8ADCE] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.15/07/2014 - 23:51:05.) -- C:\Windows\system32\Drivers\HDAudBus.sys [71168]
[MD5.C9E9CBF73AFFBFE3E801EFB516787BA3] - (.Microsoft Corporation - Pilote de port i8042.) (.26/07/2012 - 03:28:51.) -- C:\Windows\system32\Drivers\i8042prt.sys [112640]
[MD5.3969B9C218DD3FAA9F4ED2FFC3651C02] - (.Microsoft Corporation - IP Network Address Translator.) (.26/07/2012 - 03:23:01.) -- C:\Windows\system32\Drivers\IpNat.sys [145920]
[MD5.14EE56050E1637926F5CFA65B1F4209B] - (.Microsoft Corporation - Minirdr SMB Windows NT.) (.12/07/2014 - 05:34:34.) -- C:\Windows\system32\Drivers\MRxSmb.sys [404480]
[MD5.7CEC25C682D319D484630B3952C31A11] - (.Microsoft Corporation - MBT Transport driver.) (.26/07/2012 - 03:24:28.) -- C:\Windows\system32\Drivers\netBT.sys [331776]
[MD5.7BE3EDFFA3216F989A6BDCB14795DD08] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.27/01/2014 - 04:39:40.) -- C:\Windows\system32\Drivers\ntfs.sys [1939288]
[MD5.4563DAF8C6A740AD7F501E219BD10766] - (.Microsoft Corporation - Pilote de port parallèle.) (.26/07/2012 - 03:29:53.) -- C:\Windows\system32\Drivers\Parport.sys [105984]
[MD5.A14D625C5AEE5FFE0F47D1A1D419FAAE] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.26/07/2012 - 03:23:17.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [124928]
[MD5.B2A3AD74FF2E2FFA73AF2567108231B3] - (.Microsoft Corporation - Redirecteur de périphérique de Microsoft RDP.) (.26/07/2012 - 03:25:18.) -- C:\Windows\system32\Drivers\rdpdr.sys [179712]
[MD5.73DC722CE5DF26D7638CE2446F2655C7] - (.Microsoft Corporation - TDI Translation Driver.) (.26/07/2012 - 06:26:47.) -- C:\Windows\system32\Drivers\tdx.sys [117248]
[MD5.AA37946941ED3805AB3A924965907147] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.04/07/2014 - 11:52:10.) -- C:\Windows\system32\Drivers\volsnap.sys [328000]
~ Generic Processes: Scanned in 00mn 00s



---\\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 2/14169
~ Mes musiques (My Musics) : 1/4334
~ Mes Videos (My Videos) : 1/286
~ Mes Favoris (My Favorites) : 1/10
~ Mes Documents (My Documents) : 1/6179
~ Mon Bureau (My Desktop) : 6/428
~ Menu demarrer (Programs) : 1/29
~ Hidden Files: Scanned in 00mn 22s



---\\ Processus lancés
[MD5.67C9D67804DFF9E81DA60E3CF0DAB81D] - (.Client Connect LTD - Search Protect.) -- C:\Program Files (x86)\SearchProtect\SearchProtect\bin\cltmng.exe [4496144] [PID.13004] =>PUP.SearchProtect
[MD5.75CC280B30CBF0A6E067EE5BA89A4B65] - (.Client Connect LTD - Search Protect.) -- C:\Program Files (x86)\SearchProtect\UI\bin\cltmngui.exe [3241232] [PID.13028] =>PUP.SearchProtect
[MD5.FC30898FFC90157CE6834ACD4F6AD10E] - (.Pas de propriétaire - Prompt.) -- C:\ProgramData\Browser\prompt.exe [82184] [PID.10628]
[MD5.0EEC138D5705D980C61D3A6A95C23777] - (...) -- C:\Users\christophe\AppData\Local\gmsd_fr_002020005\upgmsd_fr_002020005.exe [3324072] [PID.14276] =>PUP.CrossRider
[MD5.61E22A327D20737529E5DDAD904BDD7B] - (.Microsoft Corporation - COM Surrogate.) -- C:\WINDOWS\SysWOW64\DllHost.exe [8704] [PID.9016]
[MD5.C2972E9D04508680C9D373F1E93C80AC] - (.Pas de propriétaire - geiatoxi.) -- C:\ProgramData\Ovasrujoenohn\1.0.1.0\geiatoxi.exe [161280] [PID.4164]
[MD5.724CB7A116F7E1A67009D751BCF86586] - (.CyberLink - CyberLink MediaLibray Service.) -- c:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [111120] [PID.12132]
[MD5.6BCFCFA512A003A8043CF2F370B0B479] - (.Crossbrowse - Crossbrowse.) -- C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe [637440] [PID.10524] =>PUP.CrossBrowser
[MD5.153F088DFDB3F940AD9DAEB04A3ACC4D] - (.SoftBrain Technologies Ltd. - SmartWeb helper.) -- C:\Users\christophe\AppData\Local\SmartWeb\SmartWebHelper.exe [270368] [PID.3108] =>PUP.SmartWeb
[MD5.44069C2AC699C8DAD80A96FB1C8DFE57] - (.SoftBrain Technologies Ltd. - SmartWeb Application.) -- C:\Users\christophe\AppData\Local\SmartWeb\SmartWebApp.exe [557088] [PID.13796] =>PUP.SmartWeb
[MD5.7E212E742BF06BF678AE35E9C1B74B8F] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe [6212920] [PID.10136]
[MD5.E7B58CE9BD61BF575E2880088F4E5447] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [8218112] [PID.11268]
~ Processes Running: Scanned in 00mn 00s



---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
C:\Users\Christophe\AppData\Local\Google\Chrome\User Data\Default\Preferences

---\\ Liste des dossiers d'extension Google Chrome
~ Google Lines Browser: 23 Legitimates Filtered in 00mn 00s



---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.mystartsearch.com =>PUP.StartSearch
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.mystartsearch.com =>PUP.StartSearch
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.mystartsearch.com =>PUP.StartSearch
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mystartsearch.com =>PUP.StartSearch
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.mystartsearch.com =>PUP.StartSearch
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.mystartsearch.com =>PUP.StartSearch
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mystartsearch.com =>PUP.StartSearch
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.mystartsearch.com =>PUP.StartSearch
~ IE Browser: 16 Legitimates Filtered in 00mn 00s



---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Proxy management: Scanned in 00mn 00s



---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
~ Keys: Scanned in 00mn 00s



---\\ Hosts file redirection (O1)
~ Le fichier hôte est sain (The hosts file is clean) (21)
~ Hosts File: Scanned in 00mn 00s



---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: youtubeadblocker [64Bits] - {4029B397-87CE-4BEB-9236-67557A9007CC} . (...) -- C:\Program Files (x86)\youtubeadblocker\xv4W93i1wXRSVT.dll =>PUP.YouTubeAdBlock
O2 - BHO: LuckyTab Class [64Bits] - {51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F} . (.Thinknice Co. Limited - SupTab setup package.) -- C:\Program Files (x86)\MiuiTab\SupTab.dll =>PUP.LuckyTab
O2 - BHO: PrieceLess [64Bits] - {8B5D2FB9-741B-4E82-B1CB-0D0A98413CDE} . (...) -- C:\Program Files (x86)\PrieceLess\0RyuNNl3CtvV2M.dll =>PUP.PriceLess
~ BHO: 6 Legitimates Filtered in 00mn 00s



---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} Clé orpheline
~ Toolbar: Scanned in 00mn 00s



---\\ Autres liens utilisateurs (O4)
O4 - GS\Desktop [Public]: Crossbrowse.lnk . (.Crossbrowse - Crossbrowse.) -- C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe =>PUP.CrossBrowser
O4 - GS\Desktop [Public]: Search.lnk . (.Crossbrowse - Crossbrowse.) -- C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe http://google.com =>PUP.CrossBrowser
O4 - GS\QuickLaunch [Christophe]: Crossbrowse.lnk . (.Crossbrowse - Crossbrowse.) -- C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe =>PUP.CrossBrowser
O4 - GS\QuickLaunch [Christophe]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe http://www.mystartsearch.com =>PUP.StartSearch
O4 - GS\TaskBar [Christophe]: Crossbrowse.lnk . (.Crossbrowse - Crossbrowse.) -- C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe =>PUP.CrossBrowser
O4 - GS\TaskBar [Christophe]: Search Protect.lnk . (.Client Connect LTD - Search Protect.) -- C:\Program Files (x86)\SearchProtect\SearchProtect\bin\cltmng.exe =>PUP.SearchProtect
O4 - GS\Desktop [Christophe]: Continue GamesDesktop Uninstaller.lnk . (...) -- C:\Users\christophe\AppData\Local\Temp\is-5CKL3.tmp\SOLUN.exe (.not file.) =>Adware.GamesDesktop
O4 - GS\Desktop [Christophe]: Continue Live Installation.lnk . (...) -- C:\Users\christophe\AppData\Local\Temp\ICReinstall_nsn3BF4.tmp \RR (.not file.) =>PUP.ContinueLiveInstallation
O4 - GS\Desktop [Christophe]: PepperZip.lnk . (...) -- C:\Program Files (x86)\PepperZip\PepperZip.exe =>PUP.PepperZip
~ Global Startup: 13 Legitimates Filtered in 00mn 00s



---\\ Applications lancées au démarrage du système (O4)
O4 - GS\Startup [Christophe]: crossbrowse.lnk . (.Crossbrowse - Crossbrowse.) -- C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe =>PUP.CrossBrowser
O4 - GS\Startup [Christophe]: SmartWeb.lnk . (.SoftBrain Technologies Ltd. - SmartWeb helper.) -- C:\Users\christophe\AppData\Local\SmartWeb\SmartWebHelper.exe =>PUP.SmartWeb
O4 - HKLM\..\Run: [BeatsOSDApp] . (.Hewlett-Packard - HP Beats.) -- C:\Program Files\IDT\WDM\beats64.exe
O4 - HKLM\..\Run: [SysTrayApp] . (.IDT, Inc. - IDT PC Audio.) -- C:\Program Files\IDT\WDM\sttray64.exe
O4 - HKCU\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Users\christophe\AppData\Local\Google\Update\GoogleUpdate.exe =>.Google Inc
O4 - HKCU\..\Run: [GoogleChromeAutoLaunch_339ED38F57D780C8403C59409336269D] . (.Google Inc. - Google Chrome.) -- C:\Users\christophe\AppData\Local\Google\Chrome\Application\chrome.exe
O4 - HKCU\..\Run: [EPLTarget\P0000000000000000] . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YATINFE.exe =>.Epson Seiko Corporation
O4 - HKCU\..\Run: [GoogleChromeAutoLaunch_A22D944B006926E355B04829311172EB] . (.Crossbrowse - Crossbrowse.) -- C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe =>PUP.CrossBrowser
O4 - HKCU\..\Run: [Bubble Dock] . (.Nosibay - Bubble Dock.) -- C:\Users\christophe\AppData\Roaming\Nosibay\Bubble Dock\LBubble Dock.exe =>PUP.BubbleDock
O4 - HKCU\..\Run: [WindApp] C:\Users\christophe\AppData\Roaming\Store\WindApp\WindApp.exe (.not file.) =>PUP.Nosibay
O4 - HKCU\..\Run: [Selection Tools] . (.Nosibay - Selection Tools.) -- C:\Users\christophe\AppData\Roaming\WTools\Selection Tools\Selection Tools.exe =>PUP.Nosibay
O4 - HKLM\..\Wow6432Node\Run: [MovieDea] . (.MovieDea - MovieDea.) -- C:\Program Files (x86)\MovieDea\MovieDea.exe =>PUP.MovieDea
O4 - HKLM\..\Wow6432Node\Run: [WinCheck] . (...) -- C:\Users\christophe\AppData\Local\FEF4F24B-1434475377-BB9E-BBEB-74FFC6ABE3AF\bnsr1DEC.exe =>PUP.Wincheck
O4 - HKLM\..\Wow6432Node\Run: [gmsd_fr_002010003] Clé orpheline =>PUP.CrossRider
O4 - HKLM\..\Wow6432Node\Run: [SmartWeb] . (.SoftBrain Technologies Ltd. - SmartWeb helper.) -- C:\Users\christophe\AppData\Local\SmartWeb\SmartWebHelper.exe =>PUP.SmartWeb
O4 - HKLM\..\Wow6432Node\Run: [gmsd_fr_005010005] Clé orpheline =>PUP.CrossRider
O4 - HKLM\..\Wow6432Node\Run: [gmsd_fr_002020005] . (...) -- C:\Program Files (x86)\gmsd_fr_002020005\gmsd_fr_002020005.exe =>PUP.CrossRider
O4 - HKLM\..\Wow6432Node\RunOnce: [upgmsd_fr_002020005.exe] . (...) -- C:\Users\christophe\AppData\Local\gmsd_fr_002020005\upgmsd_fr_002020005.exe =>PUP.CrossRider
O4 - HKLM\..\Wow6432Node\RunOnce: [Update] . (...) -- C:\Users\christophe\AppData\Roaming\VOPackage\VOPackage.exe =>Adware.Downware
O4 - HKUS\S-1-5-21-1148229761-1806435792-437759352-1001\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Users\christophe\AppData\Local\Google\Update\GoogleUpdate.exe =>.Google Inc
O4 - HKUS\S-1-5-21-1148229761-1806435792-437759352-1001\..\Run: [GoogleChromeAutoLaunch_339ED38F57D780C8403C59409336269D] . (.Google Inc. - Google Chrome.) -- C:\Users\christophe\AppData\Local\Google\Chrome\Application\chrome.exe
O4 - HKUS\S-1-5-21-1148229761-1806435792-437759352-1001\..\Run: [EPLTarget\P0000000000000000] . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YATINFE.exe =>.Epson Seiko Corporation
O4 - HKUS\S-1-5-21-1148229761-1806435792-437759352-1001\..\Run: [GoogleChromeAutoLaunch_A22D944B006926E355B04829311172EB] . (.Crossbrowse - Crossbrowse.) -- C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe =>PUP.CrossBrowser
O4 - HKUS\S-1-5-21-1148229761-1806435792-437759352-1001\..\Run: [Bubble Dock] . (.Nosibay - Bubble Dock.) -- C:\Users\christophe\AppData\Roaming\Nosibay\Bubble Dock\LBubble Dock.exe =>PUP.BubbleDock
O4 - HKUS\S-1-5-21-1148229761-1806435792-437759352-1001\..\Run: [WindApp] C:\Users\christophe\AppData\Roaming\Store\WindApp\WindApp.exe (.not file.) =>PUP.Nosibay
O4 - HKUS\S-1-5-21-1148229761-1806435792-437759352-1001\..\Run: [Selection Tools] . (.Nosibay - Selection Tools.) -- C:\Users\christophe\AppData\Roaming\WTools\Selection Tools\Selection Tools.exe =>PUP.Nosibay
~ Application: Scanned in 00mn 00s



---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{2607C285-179C-4AE4-A88B-C74A7CDE8074}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{32006A92-DF90-41D6-BFC9-3631A5F92A8D}: DhcpDomain = sgt.automation.net
O17 - HKLM\System\CS1\Services\Tcpip\..\{2607C285-179C-4AE4-A88B-C74A7CDE8074}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{32006A92-DF90-41D6-BFC9-3631A5F92A8D}: DhcpDomain = sgt.automation.net
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
~ Domain: Scanned in 00mn 00s



---\\ Protocole additionnel (O18)
O18 - Handler: wlpg [64Bits] - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (...) --
O18 - Filter: text/xml [64Bits] - {807553E5-5146-11D5-A672-00B0D022E945} . (...) --
~ Protocole Additionnel: Scanned in 00mn 00s



---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - AppInit_DLLs: . (.Client Connect LTD - Search Protect.) - C:\Program Files (x86)\SEARCH~1\SEARCH~1\bin\VC64LO~1.dll =>PUP.SearchProtect
~ AppInit DLL: Scanned in 00mn 00s



---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: CutterGeneration (3621a1ae) . (...) - c:\Program Files (x86)\CutterGeneration\CutterGeneration.dll
O23 - Service: abengine (abengine) . (.Abengine - Pas de description.) - C:\Program Files (x86)\HighlightSearches\abengine.exe =>PUP.HighlightSearches
O23 - Service: Search Protect Service (CltMngSvc) . (.Client Connect LTD - Search Protect.) - C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe =>PUP.SearchProtect
O23 - Service: CoupoonService64 (CoupoonService64) . (...) - C:\Program Files (x86)\coupoon\iiwjljrnpc64.exe
O23 - Service: globalUpdate Update Service (globalUpdate) (globalUpdate) . (.globalUpdate - globalUpdate Update.) - C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe =>PUP.GlobalUpdate
O23 - Service: IHProtect Service (IHProtect Service) . (.XTab system - ProtectSvc.exe.) - C:\Program Files (x86)\MiuiTab\ProtectService.exe =>PUP.MiuiTab
O23 - Service: Infonaut 1.10.0.14 Client Service (insvc_1.10.0.14) . (.Infonaut - Infonaut Client Service.) - C:\Program Files (x86)\Infonaut_1.10.0.14\Service\insvc.exe =>PUP.Infonaut
O23 - Service: Template Flatbed Scanner (kysykiti) . (...) - C:\Users\christophe\AppData\Local\FEF4F24B-1434475514-BB9E-BBEB-74FFC6ABE3AF\snsk2E6C.tmp
O23 - Service: Operation Data Input (lofilysy) . (...) - C:\Users\christophe\AppData\Roaming\FEF4F24B-1434468119-BB9E-BBEB-74FFC6ABE3AF\knsj834C.tmp
O23 - Service: mylz (mylz) . (...) - c:\windows\mylz.exe
O23 - Service: onpvhvQFDl (onpvhvQFDl) . (.Useful Technology - BreakingNewsAlert Service.) - C:\ProgramData\oKrTikoXqmk\onpvhvQFDl.exe =>PUP.BreakingNewsAlert
O23 - Service: SC 1.10.0.16 Client Service (scsvc_1.10.0.16) . (.SuperClick - SC Client Service.) - C:\Program Files (x86)\SuperClick_1.10.0.16\Service\scsvc.exe =>PUP.SuperClick
O23 - Service: UpdateCheck (UpdateCheck) . (...) - C:\Program Files (x86)\Coupoon\UpdateCheck.exe
O23 - Service: WindowsMangerProtect Service (WindowsMangerProtect) . (.DTools LIMITED - Windows DTools.) - C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe =>PUP.Fuyu
O23 - Service: Device Cut (xoperoze) . (...) - C:\Users\christophe\AppData\Roaming\FEF4F24B-1434468119-BB9E-BBEB-74FFC6ABE3AF\jnsoA241.tmp
O23 - Service: ylz (ylz) . (...) - c:\windows\ylz.exe
O23 - Service: Subscription Clear (zedepory) . (...) - C:\Users\christophe\AppData\Roaming\FEF4F24B-1434468119-BB9E-BBEB-74FFC6ABE3AF\hnsmC4AF.tmp
~ Services: 29 Legitimates Filtered in 00mn 02s



---\\ Tâches planifiées en automatique (O39)
[MD5.CEE2B4BBE76740FE675EEAA87F035914] [APT] [629c710f-b5af-48f5-b1f2-c42563ded208-1-6] (.Cinema PlusV17.06.) -- C:\Program Files (x86)\CinemaPlus-3.2cV17.06\629c710f-b5af-48f5-b1f2-c42563ded208-1-6.exe [1548880] =>PUP.CrossRider
[MD5.F91BD36F5D641B6D81B0CA5A7C550905] [APT] [629c710f-b5af-48f5-b1f2-c42563ded208-1-7] (.Cinema PlusV17.06.) -- C:\Program Files (x86)\CinemaPlus-3.2cV17.06\629c710f-b5af-48f5-b1f2-c42563ded208-1-7.exe [1153616] =>PUP.CrossRider
[MD5.AAE9B03834488F73B648E2D5CB3C6195] [APT] [629c710f-b5af-48f5-b1f2-c42563ded208-10_user] (.Cinema PlusV17.06.) -- C:\Program Files (x86)\CinemaPlus-3.2cV17.06\629c710f-b5af-48f5-b1f2-c42563ded208-10.exe [1584720] =>PUP.CrossRider
[MD5.1AFAE28D3B646A7F3B4DF4EEADE92451] [APT] [629c710f-b5af-48f5-b1f2-c42563ded208-3] (.Cinema PlusV17.06.) -- C:\Program Files (x86)\CinemaPlus-3.2cV17.06\629c710f-b5af-48f5-b1f2-c42563ded208-3.exe [1482832] =>PUP.CrossRider
[MD5.504066A256FA29B3119E8FC75CC599B1] [APT] [629c710f-b5af-48f5-b1f2-c42563ded208-5] (.Cinema PlusV17.06.) -- C:\Program Files (x86)\CinemaPlus-3.2cV17.06\629c710f-b5af-48f5-b1f2-c42563ded208-5.exe [1099856] =>PUP.CrossRider
[MD5.504066A256FA29B3119E8FC75CC599B1] [APT] [629c710f-b5af-48f5-b1f2-c42563ded208-5_user] (.Cinema PlusV17.06.) -- C:\Program Files (x86)\CinemaPlus-3.2cV17.06\629c710f-b5af-48f5-b1f2-c42563ded208-5.exe [1099856] =>PUP.CrossRider
[MD5.1ECA0323DE6CEEAEC4D8DF23DD6A9C1C] [APT] [629c710f-b5af-48f5-b1f2-c42563ded208-6] (.Cinema PlusV17.06.) -- C:\Program Files (x86)\CinemaPlus-3.2cV17.06\629c710f-b5af-48f5-b1f2-c42563ded208-6.exe [1347152] =>PUP.CrossRider
[MD5.F91BD36F5D641B6D81B0CA5A7C550905] [APT] [629c710f-b5af-48f5-b1f2-c42563ded208-7] (.Cinema PlusV17.06.) -- C:\Program Files (x86)\CinemaPlus-3.2cV17.06\629c710f-b5af-48f5-b1f2-c42563ded208-7.exe [1153616] =>PUP.CrossRider
[MD5.8F2072A82910E649893E10B9139B2860] [APT] [avabvbavad] (...) -- C:\Users\Christophe\AppData\Local\avabvbavad\avabvbavad.exe [2135552] =>Adware.Pirrit
[MD5.1FC51C6804F5CF1D3EA882DAF63BCAF6] [APT] [Bidaily Synchronize Task[973b]] (...) -- c:\programdata\{33d4e648-0d58-5e4f-33d4-4e6480d59920}\setup_668.exe [197632] =>PUP.BidailySync
[MD5.20393A94CDF086E897BB26CF3018E768] [APT] [Crossbrowse] (...) -- C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\utility.exe [1918040] =>PUP.CrossBrowser
[MD5.7796FC41D63D97568520D9581A25944E] [APT] [DBJXMQ1] (.FlashBeat.) -- C:\ProgramData\FlashBeat\FlashBeat.exe [707584] =>PUP.FlashBeat
[MD5.5E615C7FBC97751DAC5B75DA89334F77] [APT] [de8d36cd-2c45-4ecf-8573-62a63b02a5db-1-6] (.Cinema PlusV16.06.) -- C:\Program Files (x86)\CinemaPlus-4.1vV16.06\de8d36cd-2c45-4ecf-8573-62a63b02a5db-1-6.exe [1495632] =>PUP.CrossRider
[MD5.2B3E22300BC45E8E6086944BAC284DD5] [APT] [de8d36cd-2c45-4ecf-8573-62a63b02a5db-1-7] (.Cinema PlusV16.06.) -- C:\Program Files (x86)\CinemaPlus-4.1vV16.06\de8d36cd-2c45-4ecf-8573-62a63b02a5db-1-7.exe [1067600] =>PUP.CrossRider
[MD5.5E07985731248E2804ADFC43BE708E5B] [APT] [de8d36cd-2c45-4ecf-8573-62a63b02a5db-10_user] (.Cinema PlusV16.06.) -- C:\Program Files (x86)\CinemaPlus-4.1vV16.06\de8d36cd-2c45-4ecf-8573-62a63b02a5db-10.exe [1223760] =>PUP.CrossRider
[MD5.2E487E9244CE5E63C69E86703257C6F0] [APT] [de8d36cd-2c45-4ecf-8573-62a63b02a5db-3] (.Cinema PlusV16.06.) -- C:\Program Files (x86)\CinemaPlus-4.1vV16.06\de8d36cd-2c45-4ecf-8573-62a63b02a5db-3.exe [1395280] =>PUP.CrossRider
[MD5.5BBF8D492AAEF73036BC661ABBE7B06C] [APT] [de8d36cd-2c45-4ecf-8573-62a63b02a5db-5] (.Cinema PlusV16.06.) -- C:\Program Files (x86)\CinemaPlus-4.1vV16.06\de8d36cd-2c45-4ecf-8573-62a63b02a5db-5.exe [1117776] =>PUP.CrossRider
[MD5.5BBF8D492AAEF73036BC661ABBE7B06C] [APT] [de8d36cd-2c45-4ecf-8573-62a63b02a5db-5_user] (.Cinema PlusV16.06.) -- C:\Program Files (x86)\CinemaPlus-4.1vV16.06\de8d36cd-2c45-4ecf-8573-62a63b02a5db-5.exe [1117776] =>PUP.CrossRider
[MD5.64093D7008AD5CA52180AB278E318648] [APT] [de8d36cd-2c45-4ecf-8573-62a63b02a5db-6] (.Cinema PlusV16.06.) -- C:\Program Files (x86)\CinemaPlus-4.1vV16.06\de8d36cd-2c45-4ecf-8573-62a63b02a5db-6.exe [1408080] =>PUP.CrossRider
[MD5.2B3E22300BC45E8E6086944BAC284DD5] [APT] [de8d36cd-2c45-4ecf-8573-62a63b02a5db-7] (.Cinema PlusV16.06.) -- C:\Program Files (x86)\CinemaPlus-4.1vV16.06\de8d36cd-2c45-4ecf-8573-62a63b02a5db-7.exe [1067600] =>PUP.CrossRider
[MD5.3A1D89B89C9D62951957F0839578DD9B] [APT] [gAWWmr4C116U27SzY4XcQ] (...) -- C:\Users\Christophe\AppData\Roaming\gAWWmr4C116U27SzY4XcQ.exe [1579520]
[MD5.3C14AAE26EA06BADAC98520773772CEB] [APT] [globalUpdateUpdateTaskMachineCore] (.globalUpdate.) -- C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe [68608] =>PUP.GlobalUpdate
[MD5.3C14AAE26EA06BADAC98520773772CEB] [APT] [globalUpdateUpdateTaskMachineUA] (.globalUpdate.) -- C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe [68608] =>PUP.GlobalUpdate
[MD5.2DB4E2907D04FEE2633BCD6AE9CDD0BE] [APT] [iren3006] (...) -- C:\Program Files (x86)\HighlightSearches\iren3006.exe [59986] =>PUP.HighlightSearches
[MD5.3A1D89B89C9D62951957F0839578DD9B] [APT] [kdmhCTydrVA5XW] (...) -- C:\Users\Christophe\AppData\Roaming\kdmhCTydrVA5XW.exe [1579520]
[MD5.00000000000000000000000000000000] [APT] [MaxComputerCleaner_Start] (...) -- C:\Program Files (x86)\Max Computer Cleaner\MaxComputerCleaner.exe (.not file.) [0] =>PUP.MaxComputerCleaner
[MD5.C2972E9D04508680C9D373F1E93C80AC] [APT] [Ovasrujoenohn] (...) -- C:\ProgramData\Ovasrujoenohn\1.0.1.0\geiatoxi.exe [161280]
[MD5.00000000000000000000000000000000] [APT] [PostPoneInstall] (...) -- C:\Users\Christophe\AppData\Local\Temp\ce98ac2e-20c0-4a93-86f6-bdb3e61caf55.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [Run_Bobby_Browser] (...) -- C:\Users\Christophe\AppData\Local\BoBrowser\Application\bobrowser.exe (.not file.) [0] =>PUP.BoBrowser
[MD5.B12E1E78D09BB37D9C2BC10CB59915FA] [APT] [Selection Tools Update] (.Nosibay.) -- C:\Users\Christophe\AppData\Roaming\WTools\Selection Tools\Selection Tools Update.exe [165072] =>PUP.Nosibay
[MD5.9EC357EC1D412F48194DF5FE0C6D13B7] [APT] [SuperClick Auto Updater 1.10.0.16 Core] (.SuperClick.) -- C:\Program Files (x86)\SuperClick_1.10.0.16\Update\SuperClickAutoUpdateClient.exe [59480] =>PUP.SuperClick
[MD5.9EC357EC1D412F48194DF5FE0C6D13B7] [APT] [SuperClick Auto Updater 1.10.0.16 Pending Update] (.SuperClick.) -- C:\Program Files (x86)\SuperClick_1.10.0.16\Update\SuperClickAutoUpdateClient.exe [59480] =>PUP.SuperClick
[MD5.4B20F56017947856D400F403C0852BA8] [APT] [WindApp Update] (.Nosibay.) -- C:\Users\Christophe\AppData\Roaming\Store\WindApp\WindApp Update.exe [165112] =>PUP.Nosibay
[MD5.3A1D89B89C9D62951957F0839578DD9B] [APT] [xZrVtuHMnGwUoZ8MQY] (...) -- C:\Users\Christophe\AppData\Roaming\xZrVtuHMnGwUoZ8MQY.exe [1579520]
[MD5.BE87A60333C5848911C3CA839F190720] [APT] [ZFPJSEUK] (...) -- C:\ProgramData\6e589a01ba0f4c4e96fed4b4f5d233ce\6e589a01ba0f4c4e96fed4b4f5d233ce.exe [276992]
O39 - APT: 629c710f-b5af-48f5-b1f2-c42563ded208-1-6 - (.Cinema PlusV17.06.) -- C:\Windows\Tasks\629c710f-b5af-48f5-b1f2-c42563ded208-1-6.job [3162] =>PUP.CrossRider
O39 - APT: 629c710f-b5af-48f5-b1f2-c42563ded208-1-6 - (.Cinema PlusV17.06.) -- C:\Windows\System32\Tasks\629c710f-b5af-48f5-b1f2-c42563ded208-1-6 [3162] =>PUP.CrossRider
O39 - APT: 629c710f-b5af-48f5-b1f2-c42563ded208-1-7 - (.Cinema PlusV17.06.) -- C:\Windows\Tasks\629c710f-b5af-48f5-b1f2-c42563ded208-1-7.job [3162] =>PUP.CrossRider
O39 - APT: 629c710f-b5af-48f5-b1f2-c42563ded208-1-7 - (.Cinema PlusV17.06.) -- C:\Windows\System32\Tasks\629c710f-b5af-48f5-b1f2-c42563ded208-1-7 [3162] =>PUP.CrossRider
O39 - APT: 629c710f-b5af-48f5-b1f2-c42563ded208-10_user - (.Cinema PlusV17.06.) -- C:\Windows\Tasks\629c710f-b5af-48f5-b1f2-c42563ded208-10_user.job [2136] =>PUP.CrossRider
O39 - APT: 629c710f-b5af-48f5-b1f2-c42563ded208-10_user - (.Cinema PlusV17.06.) -- C:\Windows\System32\Tasks\629c710f-b5af-48f5-b1f2-c42563ded208-10_user [2136] =>PUP.CrossRider
O39 - APT: 629c710f-b5af-48f5-b1f2-c42563ded208-3 - (.Cinema PlusV17.06.) -- C:\Windows\Tasks\629c710f-b5af-48f5-b1f2-c42563ded208-3.job [4182] =>PUP.CrossRider
O39 - APT: 629c710f-b5af-48f5-b1f2-c42563ded208-3 - (.Cinema PlusV17.06.) -- C:\Windows\System32\Tasks\629c710f-b5af-48f5-b1f2-c42563ded208-3 [4182] =>PUP.CrossRider
O39 - APT: 629c710f-b5af-48f5-b1f2-c42563ded208-5 - (.Cinema PlusV17.06.) -- C:\Windows\Tasks\629c710f-b5af-48f5-b1f2-c42563ded208-5.job [2470] =>PUP.CrossRider
O39 - APT: 629c710f-b5af-48f5-b1f2-c42563ded208-5 - (.Cinema PlusV17.06.) -- C:\Windows\System32\Tasks\629c710f-b5af-48f5-b1f2-c42563ded208-5 [2470] =>PUP.CrossRider
O39 - APT: 629c710f-b5af-48f5-b1f2-c42563ded208-5_user - (.Cinema PlusV17.06.) -- C:\Windows\Tasks\629c710f-b5af-48f5-b1f2-c42563ded208-5_user.job [2470] =>PUP.CrossRider
O39 - APT: 629c710f-b5af-48f5-b1f2-c42563ded208-5_user - (.Cinema PlusV17.06.) -- C:\Windows\System32\Tasks\629c710f-b5af-48f5-b1f2-c42563ded208-5_user [2470] =>PUP.CrossRider
O39 - APT: 629c710f-b5af-48f5-b1f2-c42563ded208-6 - (.Cinema PlusV17.06.) -- C:\Windows\Tasks\629c710f-b5af-48f5-b1f2-c42563ded208-6.job [5542] =>PUP.CrossRider
O39 - APT: 629c710f-b5af-48f5-b1f2-c42563ded208-6 - (.Cinema PlusV17.06.) -- C:\Windows\System32\Tasks\629c710f-b5af-48f5-b1f2-c42563ded208-6 [5542] =>PUP.CrossRider
O39 - APT: 629c710f-b5af-48f5-b1f2-c42563ded208-7 - (.Cinema PlusV17.06.) -- C:\Windows\Tasks\629c710f-b5af-48f5-b1f2-c42563ded208-7.job [5206] =>PUP.CrossRider
O39 - APT: 629c710f-b5af-48f5-b1f2-c42563ded208-7 - (.Cinema PlusV17.06.) -- C:\Windows\System32\Tasks\629c710f-b5af-48f5-b1f2-c42563ded208-7 [5206] =>PUP.CrossRider
O39 - APT: - (..) -- C:\Windows\Tasks\Bidaily Synchronize Task[3c32].job [364] =>PUP.BidailySync
O39 - APT: - (..) -- C:\Windows\System32\Tasks\Bidaily Synchronize Task[3c32] [364] =>PUP.BidailySync
O39 - APT: - (..) -- C:\Windows\Tasks\Bidaily Synchronize Task[74c7].job [364] =>PUP.BidailySync
O39 - APT: - (..) -- C:\Windows\System32\Tasks\Bidaily Synchronize Task[74c7] [364] =>PUP.BidailySync
O39 - APT: Bidaily Synchronize Task[973b] - (...) -- C:\Windows\Tasks\Bidaily Synchronize Task[973b].job [356] =>PUP.BidailySync
O39 - APT: Bidaily Synchronize Task[973b] - (...) -- C:\Windows\System32\Tasks\Bidaily Synchronize Task[973b] [356] =>PUP.BidailySync
O39 - APT: Crossbrowse - (...) -- C:\Windows\Tasks\Crossbrowse.job [1080] =>PUP.CrossBrowser
O39 - APT: Crossbrowse - (...) -- C:\Windows\System32\Tasks\Crossbrowse [1080] =>PUP.CrossBrowser
O39 - APT: DBJXMQ1 - (.FlashBeat.) -- C:\Windows\Tasks\DBJXMQ1.job [354] =>PUP.FlashBeat
O39 - APT: DBJXMQ1 - (.FlashBeat.) -- C:\Windows\System32\Tasks\DBJXMQ1 [354] =>PUP.FlashBeat
O39 - APT: de8d36cd-2c45-4ecf-8573-62a63b02a5db-1-6 - (.Cinema PlusV16.06.) -- C:\Windows\Tasks\de8d36cd-2c45-4ecf-8573-62a63b02a5db-1-6.job [2818] =>PUP.CrossRider
O39 - APT: de8d36cd-2c45-4ecf-8573-62a63b02a5db-1-6 - (.Cinema PlusV16.06.) -- C:\Windows\System32\Tasks\de8d36cd-2c45-4ecf-8573-62a63b02a5db-1-6 [2818] =>PUP.CrossRider
O39 - APT: de8d36cd-2c45-4ecf-8573-62a63b02a5db-1-7 - (.Cinema PlusV16.06.) -- C:\Windows\Tasks\de8d36cd-2c45-4ecf-8573-62a63b02a5db-1-7.job [3162] =>PUP.CrossRider
O39 - APT: de8d36cd-2c45-4ecf-8573-62a63b02a5db-1-7 - (.Cinema PlusV16.06.) -- C:\Windows\System32\Tasks\de8d36cd-2c45-4ecf-8573-62a63b02a5db-1-7 [3162] =>PUP.CrossRider
O39 - APT: de8d36cd-2c45-4ecf-8573-62a63b02a5db-10_user - (.Cinema PlusV16.06.) -- C:\Windows\Tasks\de8d36cd-2c45-4ecf-8573-62a63b02a5db-10_user.job [2136] =>PUP.CrossRider
O39 - APT: de8d36cd-2c45-4ecf-8573-62a63b02a5db-10_user - (.Cinema PlusV16.06.) -- C:\Windows\System32\Tasks\de8d36cd-2c45-4ecf-8573-62a63b02a5db-10_user [2136] =>PUP.CrossRider
O39 - APT: de8d36cd-2c45-4ecf-8573-62a63b02a5db-3 - (.Cinema PlusV16.06.) -- C:\Windows\Tasks\de8d36cd-2c45-4ecf-8573-62a63b02a5db-3.job [4182] =>PUP.CrossRider
O39 - APT: de8d36cd-2c45-4ecf-8573-62a63b02a5db-3 - (.Cinema PlusV16.06.) -- C:\Windows\System32\Tasks\de8d36cd-2c45-4ecf-8573-62a63b02a5db-3 [4182] =>PUP.CrossRider
O39 - APT: de8d36cd-2c45-4ecf-8573-62a63b02a5db-5 - (.Cinema PlusV16.06.) -- C:\Windows\Tasks\de8d36cd-2c45-4ecf-8573-62a63b02a5db-5.job [2470] =>PUP.CrossRider
O39 - APT: de8d36cd-2c45-4ecf-8573-62a63b02a5db-5 - (.Cinema PlusV16.06.) -- C:\Windows\System32\Tasks\de8d36cd-2c45-4ecf-8573-62a63b02a5db-5 [2470] =>PUP.CrossRider
O39 - APT: de8d36cd-2c45-4ecf-8573-62a63b02a5db-5_user - (.Cinema PlusV16.06.) -- C:\Windows\Tasks\de8d36cd-2c45-4ecf-8573-62a63b02a5db-5_user.job [2470] =>PUP.CrossRider
O39 - APT: de8d36cd-2c45-4ecf-8573-62a63b02a5db-5_user - (.Cinema PlusV16.06.) -- C:\Windows\System32\Tasks\de8d36cd-2c45-4ecf-8573-62a63b02a5db-5_user [2470] =>PUP.CrossRider
O39 - APT: de8d36cd-2c45-4ecf-8573-62a63b02a5db-6 - (.Cinema PlusV16.06.) -- C:\Windows\Tasks\de8d36cd-2c45-4ecf-8573-62a63b02a5db-6.job [5542] =>PUP.CrossRider
O39 - APT: de8d36cd-2c45-4ecf-8573-62a63b02a5db-6 - (.Cinema PlusV16.06.) -- C:\Windows\System32\Tasks\de8d36cd-2c45-4ecf-8573-62a63b02a5db-6 [5542] =>PUP.CrossRider
O39 - APT: de8d36cd-2c45-4ecf-8573-62a63b02a5db-7 - (.Cinema PlusV16.06.) -- C:\Windows\Tasks\de8d36cd-2c45-4ecf-8573-62a63b02a5db-7.job [5206] =>PUP.CrossRider
O39 - APT: de8d36cd-2c45-4ecf-8573-62a63b02a5db-7 - (.Cinema PlusV16.06.) -- C:\Windows\System32\Tasks\de8d36cd-2c45-4ecf-8573-62a63b02a5db-7 [5206] =>PUP.CrossRider
O39 - APT: - (..) -- C:\Windows\Tasks\EPSON XP-225 Series Update {42564E87-265F-4C97-B005-59155D59BDE5}.job [933]
O39 - APT: - (..) -- C:\Windows\System32\Tasks\EPSON XP-225 Series Update {42564E87-265F-4C97-B005-59155D59BDE5} [933]
O39 - APT: gAWWmr4C116U27SzY4XcQ - (...) -- C:\Windows\Tasks\gAWWmr4C116U27SzY4XcQ.job [1048]
O39 - APT: gAWWmr4C116U27SzY4XcQ - (...) -- C:\Windows\System32\Tasks\gAWWmr4C116U27SzY4XcQ [1048]
O39 - APT: globalUpdateUpdateTaskMachineCore - (.globalUpdate.) -- C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job [994] =>PUP.GlobalUpdate
O39 - APT: globalUpdateUpdateTaskMachineCore - (.globalUpdate.) -- C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore [994] =>PUP.GlobalUpdate
O39 - APT: globalUpdateUpdateTaskMachineUA - (.globalUpdate.) -- C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job [998] =>PUP.GlobalUpdate
O39 - APT: globalUpdateUpdateTaskMachineUA - (.globalUpdate.) -- C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineUA [998] =>PUP.GlobalUpdate
O39 - APT: - (..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1148229761-1806435792-437759352-1001Core [1060]
O39 - APT: - (..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1148229761-1806435792-437759352-1001UA [1112]
O39 - APT: kdmhCTydrVA5XW - (...) -- C:\Windows\Tasks\kdmhCTydrVA5XW.job [1034]
O39 - APT: kdmhCTydrVA5XW - (...) -- C:\Windows\System32\Tasks\kdmhCTydrVA5XW [1034]
O39 - APT: xZrVtuHMnGwUoZ8MQY - (...) -- C:\Windows\Tasks\xZrVtuHMnGwUoZ8MQY.job [1042]
O39 - APT: xZrVtuHMnGwUoZ8MQY - (...) -- C:\Windows\System32\Tasks\xZrVtuHMnGwUoZ8MQY [1042]
~ Scheduled Task: 97 Legitimates Filtered in 00mn 04s



---\\ Pilotes lancés au démarrage du système (O41)
O41 - Driver: (innfd_1_10_0_14) . (.Infonaut - Infonaut Driver x64.) - C:\Windows\System32\drivers\innfd_1_10_0_14.sys =>PUP.Infonaut
O41 - Driver: (netfilter64) . (.NetFilterSDK.com - NetFilter SDK WFP Driver (WPP).) - C:\Windows\System32\drivers\netfilter64.sys
O41 - Driver: (scfd_1_10_0_16) . (.SuperClick - SC Driver x64.) - C:\Windows\System32\drivers\scfd_1_10_0_16.sys =>PUP.SuperClick
~ Drivers: 44 Legitimates Filtered in 00mn 00s



---\\ Logiciels installés (O42)
O42 - Logiciel: Book Alter - (.Book Alter.) [HKLM][64Bits] -- SoftwareUpdater =>PUP.Eorezo
O42 - Logiciel: CinemaPlus-3.2cV17.06 - (.Cinema PlusV17.06.) [HKLM][64Bits] -- CinemaPlus-3.2cV17.06 =>PUP.CrossRider
O42 - Logiciel: CinemaPlus-4.1vV16.06 - (.Cinema PlusV16.06.) [HKLM][64Bits] -- CinemaPlus-4.1vV16.06 =>PUP.CrossRider
O42 - Logiciel: Coupoon version 1.0 - (.Coupoon.) [HKLM][64Bits] -- {49F8B4F8-0CD4-4BE4-A9E8-B13A071F7C90}_is1
O42 - Logiciel: Crossbrowse - (.The Crossbrowse Authors.) [HKLM][64Bits] -- Crossbrowse =>PUP.CrossBrowser
O42 - Logiciel: FlashBeat - (...) [HKLM][64Bits] -- FlashBeat =>PUP.FlashBeat
O42 - Logiciel: Honey - (...) [HKLM][64Bits] -- {AD11DADE-C597-45D9-D8C5-1D2EB0B89613}
O42 - Logiciel: Infonaut 1.10.0.14 - (.Infonaut.) [HKLM][64Bits] -- Infonaut_1.10.0.14 =>PUP.Infonaut
O42 - Logiciel: MovieDea 1.0 - (.MovieDea.) [HKLM][64Bits] -- MovieDea =>PUP.MovieDea
O42 - Logiciel: News Alert - (.Useful Technology.) [HKLM][64Bits] -- BreakingNewsAlert =>PUP.BreakingNewsAlert
O42 - Logiciel: PrieceLess - (...) [HKLM][64Bits] -- {75F9BF4A-AF67-A478-A37B-31D73186D3F3} =>PUP.PriceLess
O42 - Logiciel: Search Protect - (.Client Connect LTD.) [HKLM][64Bits] -- SearchProtect =>PUP.SearchProtect
O42 - Logiciel: Selection Tools - (.WTools.) [HKCU][64Bits] -- Selection Tools =>PUP.Nosibay
O42 - Logiciel: SmartWeb - (.SoftBrain Technologies Ltd..) [HKLM][64Bits] -- SmartWeb =>PUP.SmartWeb
O42 - Logiciel: SuperClick 1.10.0.16 - (.SuperClick.) [HKLM][64Bits] -- SuperClick_1.10.0.16 =>PUP.SuperClick
O42 - Logiciel: Support PL 1.1 - (.riceLes.) [HKLM][64Bits] -- {12DA0E6F-5543-440C-BAA2-28BF01070AFA}{3621a1ae} =>Adware.Graftor
O42 - Logiciel: WindApp - (.Store.) [HKCU][64Bits] -- WindApp
O42 - Logiciel: Word Processor Text Wrap - (.Word Processor Text Wrap.) [HKLM][64Bits] -- wincheck =>PUP.Wincheck
O42 - Logiciel: mystartsearch uninstall - (.mystartsearch.) [HKLM][64Bits] -- mystartsearch uninstall =>PUP.StartSearch
O42 - Logiciel: youtubeadblocker - (...) [HKLM][64Bits] -- {4820778D-AB0D-6D18-C316-52A6A0E1D507} =>PUP.YouTubeAdBlock
~ Logic: 68 Legitimates Filtered in 00mn 01s



---\\ HKCU & HKLM Software Keys
[HKCU\Software\APN PIP]
[HKCU\Software\ArenaHD] =>PUP.CrossRider
[HKCU\Software\AskPartnerNetwork] =>Toolbar.AskBar
[HKCU\Software\BoBrowser] =>PUP.BoBrowser
[HKCU\Software\BrowserV16.06-nv-ie] =>PUP.CrossRider
[HKCU\Software\CinemaPlus-3.2cV17.06-nv-ie] =>PUP.CrossRider
[HKCU\Software\CinemaPlus-3.2cV17.06-nv] =>PUP.CrossRider
[HKCU\Software\CinemaPlus-3.2cV17.06] =>PUP.CrossRider
[HKCU\Software\CinemaPlus-4.1vV16.06-nv-ie] =>PUP.CrossRider
[HKCU\Software\CinemaPlus-4.1vV16.06-nv] =>PUP.CrossRider
[HKCU\Software\CinemaPlus-4.1vV16.06] =>PUP.CrossRider
[HKCU\Software\CrossBrowser] =>PUP.CrossBrowser
[HKCU\Software\Crossbrowse] =>PUP.CrossBrowser
[HKCU\Software\HighDefAction] =>PUP.CrossRider
[HKCU\Software\HomeTab] =>PUP.CertifiedToolbar
[HKCU\Software\InstalledBrowserExtensions] =>PUP.BrowserExtensions
[HKCU\Software\Kromtech]
[HKCU\Software\MaxComputerCleanerConfig] =>PUP.MaxComputerCleaner
[HKCU\Software\MaxComputerCleanerLanguage] =>PUP.MaxComputerCleaner
[HKCU\Software\Store] =>PUP.Nosibay
[HKCU\Software\Super Optimizer] =>PUP.SuperOptimizer
[HKCU\Software\TutoTag] =>PUP.AgenceExclusive
[HKCU\Software\Tutorials] =>PUP.AgenceExclusive
[HKCU\Software\WTools] =>PUP.Nosibay
[HKCU\Software\WajIEnhance] =>PUP.Wajam
[HKCU\Software\YorkNewCin] =>PUP.CrossRider
[HKCU\Software\gAWWmr4C116U27SzY4XcQ]
[HKCU\Software\kdmhCTydrVA5XW]
[HKCU\Software\maxcomputerclenner] =>PUP.MaxComputerCleaner
[HKCU\Software\xZrVtuHMnGwUoZ8MQY]
[HKLM\Software\ArenaHD] =>PUP.CrossRider
[HKLM\Software\Flashbeat] =>PUP.FlashBeat
[HKLM\Software\HighDefAction] =>PUP.CrossRider
[HKLM\Software\InstalledBrowserExtensions] =>PUP.BrowserExtensions
[HKLM\Software\Wow6432Node\9359ad8b-1a23-4ff2-ab34-7a6800a3c0ef] =>PUP.CrossRider
[HKLM\Software\Wow6432Node\9f50e6f5-26e3-4b3a-9df1-2668b09c8e40] =>PUP.CrossRider
[HKLM\Software\Wow6432Node\AIM Toolbar]
[HKLM\Software\Wow6432Node\ArenaHD] =>PUP.CrossRider
[HKLM\Software\Wow6432Node\AskPartnerNetwork] =>Toolbar.AskBar
[HKLM\Software\Wow6432Node\CinemaPlus-3.2cV17.06-nv-ie] =>PUP.CrossRider
[HKLM\Software\Wow6432Node\CinemaPlus-3.2cV17.06-nv] =>PUP.CrossRider
[HKLM\Software\Wow6432Node\CinemaPlus-4.1vV16.06-nv-ie] =>PUP.CrossRider
[HKLM\Software\Wow6432Node\CinemaPlus-4.1vV16.06-nv] =>PUP.CrossRider
[HKLM\Software\Wow6432Node\Clara]
[HKLM\Software\Wow6432Node\Conduit] =>Toolbar.Conduit
[HKLM\Software\Wow6432Node\Flashbeat] =>PUP.FlashBeat
[HKLM\Software\Wow6432Node\HighDefAction] =>PUP.CrossRider
[HKLM\Software\Wow6432Node\Iminent] =>Adware.IMBooster
[HKLM\Software\Wow6432Node\InstalledBrowserExtensions] =>PUP.BrowserExtensions
[HKLM\Software\Wow6432Node\ORBTR] =>Toolbar.Conduit
[HKLM\Software\Wow6432Node\SPPDCOM] =>Rogue.PCSpeedUp
[HKLM\Software\Wow6432Node\SpeedBit]
[HKLM\Software\Wow6432Node\SupDp] =>PUP.SupTab
[HKLM\Software\Wow6432Node\TabNav] =>PUP.Abengine
[HKLM\Software\Wow6432Node\Tutorials] =>PUP.AgenceExclusive
[HKLM\Software\Wow6432Node\YorkNewCin] =>PUP.CrossRider
[HKLM\Software\Wow6432Node\coupoon]
[HKLM\Software\Wow6432Node\searchult] =>PUP.Optional
[HKLM\Software\Wow6432Node\supTab] =>PUP.SupTab
[HKLM\Software\YorkNewCin] =>PUP.CrossRider
[HKLM\Software\coupoon]
~ Key Software: 356 Legitimates Filtered in 00mn 01s



---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 16/06/2015 - 17:23:51 - [] ----D C:\Program Files (x86)\1fd2513c-bb00-410a-a031-34873c6f8369
O43 - CFD: 17/06/2015 - 17:57:46 - [] ----D C:\Program Files (x86)\CinemaPlus-3.2cV17.06 =>PUP.CrossRider
O43 - CFD: 16/06/2015 - 17:24:26 - [] ----D C:\Program Files (x86)\CinemaPlus-4.1vV16.06 =>PUP.CrossRider
O43 - CFD: 17/06/2015 - 17:57:24 - [] ----D C:\Program Files (x86)\Coupoon
O43 - CFD: 16/06/2015 - 18:35:26 - [] ----D C:\Program Files (x86)\Crossbrowse =>PUP.CrossBrowser
O43 - CFD: 17/06/2015 - 17:57:17 - [] ----D C:\Program Files (x86)\d3f34b16-3252-4bcd-8db3-e6993e60288f
O43 - CFD: 18/06/2015 - 14:54:33 - [] ----D C:\Program Files (x86)\HighlightSearches =>PUP.HighlightSearches
O43 - CFD: 17/06/2015 - 16:48:51 - [] ----D C:\Program Files (x86)\Honey
O43 - CFD: 17/06/2015 - 17:51:57 - [] ----D C:\Program Files (x86)\Infonaut_1.10.0.14 =>PUP.Infonaut
O43 - CFD: 16/06/2015 - 17:25:25 - [] ----D C:\Program Files (x86)\MiuiTab =>PUP.MiuiTab
O43 - CFD: 16/06/2015 - 17:22:36 - [] ----D C:\Program Files (x86)\MovieDea =>PUP.MovieDea
O43 - CFD: 16/06/2015 - 17:23:58 - [] ----D C:\Program Files (x86)\ORBTR =>Toolbar.Conduit
O43 - CFD: 17/06/2015 - 16:48:03 - [] ----D C:\Program Files (x86)\PrieceLess =>PUP.PriceLess
O43 - CFD: 16/06/2015 - 18:23:26 - [] ----D C:\Program Files (x86)\SuperClick_1.10.0.16 =>PUP.SuperClick
O43 - CFD: 17/06/2015 - 16:48:24 - [] ----D C:\Program Files (x86)\youtubeadblocker =>PUP.YouTubeAdBlock
O43 - CFD: 17/06/2015 - 16:48:57 - [] ----D C:\ProgramData\15548491502172390814
O43 - CFD: 16/06/2015 - 17:35:37 - [] ----D C:\ProgramData\28341ff220e0446c9fff27c4493d622e
O43 - CFD: 17/06/2015 - 15:47:12 - [0] ----D C:\ProgramData\547746f20000089f
O43 - CFD: 16/06/2015 - 17:35:39 - [] ----D C:\ProgramData\6e589a01ba0f4c4e96fed4b4f5d233ce
O43 - CFD: 17/06/2015 - 15:47:12 - [0] ----D C:\ProgramData\891ec10a00003657
O43 - CFD: 16/06/2015 - 17:25:08 - [] ----D C:\ProgramData\BreakingNewsAlert =>PUP.BreakingNewsAlert
O43 - CFD: 17/06/2015 - 15:46:54 - [] ----D C:\ProgramData\Browser
O43 - CFD: 17/06/2015 - 16:49:37 - [] ----D C:\ProgramData\FlashBeat =>PUP.FlashBeat
O43 - CFD: 17/06/2015 - 16:47:23 - [] ----D C:\ProgramData\gkjkieeipmeagbddcnnkpmbmpgpeholm
O43 - CFD: 17/06/2015 - 15:48:01 - [] ----D C:\ProgramData\MovieDeaConfig =>PUP.MovieDea
O43 - CFD: 16/06/2015 - 17:35:46 - [] ----D C:\ProgramData\oKrTikoXqmk
O43 - CFD: 16/06/2015 - 17:36:59 - [] ----D C:\ProgramData\Ovasrujoenohn
O43 - CFD: 16/06/2015 - 17:25:10 - [] ----D C:\ProgramData\WindowsMangerProtect =>PUP.Fuyu
O43 - CFD: 17/06/2015 - 18:26:42 - [] --H-D C:\ProgramData\ylz
O43 - CFD: 16/06/2015 - 17:25:20 - [] ----D C:\ProgramData\{335452ec-bd88-595e-3354-452ecbd84bb2}
O43 - CFD: 17/06/2015 - 16:47:08 - [] ----D C:\ProgramData\{33d4e648-0d58-5e4f-33d4-4e6480d59920}
O43 - CFD: 16/06/2015 - 17:26:13 - [] ----D C:\ProgramData\{3e1e5f04-3a88-fb27-3e1e-e5f043a87c10}
O43 - CFD: 16/06/2015 - 17:23:00 - [] ----D C:\ProgramData\{67fae419-858d-b21f-67fa-ae4198589066}
O43 - CFD: 16/06/2015 - 18:35:33 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Crossbrowse =>PUP.CrossBrowser
O43 - CFD: 27/05/2015 - 18:34:45 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Music, Photos and Videos
O43 - CFD: 27/05/2015 - 18:34:45 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Productivity and Tools
O43 - CFD: 27/05/2015 - 18:34:47 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Security and Protection
O43 - CFD: 27/05/2015 - 18:34:47 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Shopping and Services
O43 - CFD: 26/07/2012 - 11:45:49 - [0] R-H-D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC
O43 - CFD: 13/06/2015 - 19:22:50 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WebAcappella4
O43 - CFD: 18/06/2015 - 14:54:35 - [] ----D C:\Users\christophe\AppData\Roaming\FEF4F24B-1434468119-BB9E-BBEB-74FFC6ABE3AF
O43 - CFD: 16/06/2015 - 17:24:54 - [] ----D C:\Users\christophe\AppData\Roaming\mystartsearch =>PUP.StartSearch
O43 - CFD: 17/06/2015 - 16:05:28 - [] ----D C:\Users\christophe\AppData\Roaming\Store =>PUP.Nosibay
O43 - CFD: 16/06/2015 - 17:22:00 - [] ----D C:\Users\christophe\AppData\Roaming\VOPackage =>Adware.Downware
O43 - CFD: 17/06/2015 - 16:05:38 - [] ----D C:\Users\christophe\AppData\Roaming\WTools =>PUP.Nosibay
O43 - CFD: 17/06/2015 - 15:49:53 - [] ----D C:\Users\christophe\AppData\Local\avabvbavad
O43 - CFD: 16/06/2015 - 18:38:10 - [] ----D C:\Users\christophe\AppData\Local\BoBrowser =>PUP.BoBrowser
O43 - CFD: 17/06/2015 - 18:36:11 - [] ----D C:\Users\christophe\AppData\Local\BreakingNewsAlert =>PUP.BreakingNewsAlert
O43 - CFD: 16/06/2015 - 18:35:37 - [] ----D C:\Users\christophe\AppData\Local\Crossbrowse =>PUP.CrossBrowser
O43 - CFD: 16/06/2015 - 17:23:01 - [] ----D C:\Users\christophe\AppData\Local\FEF4F24B-1434475377-BB9E-BBEB-74FFC6ABE3AF
O43 - CFD: 18/06/2015 - 01:00:36 - [] ----D C:\Users\christophe\AppData\Local\FEF4F24B-1434475514-BB9E-BBEB-74FFC6ABE3AF
O43 - CFD: 16/06/2015 - 17:23:39 - [] ----D C:\Users\christophe\AppData\Local\Max_Computer_Cleaner
O43 - CFD: 17/06/2015 - 17:52:23 - [] ----D C:\Users\christophe\AppData\Local\SmartWeb =>PUP.SmartWeb
O43 - CFD: 16/06/2015 - 17:22:31 - [] ----D C:\Users\christophe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MovieDea =>PUP.MovieDea
O43 - CFD: 16/06/2015 - 17:22:02 - [] ----D C:\Users\christophe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VOPackage =>Adware.Downware
~ Program Folder: 190 Legitimates Filtered in 00mn 00s



---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.9EFBBCB01D55B504F9CB0670D49AC512] - 16/06/2015 - 16:22:28 ---A- . (...) -- C:\Windows\ylz.exe [417792]
O44 - LFC:[MD5.A054BF51A9358CA92D06D9B6509233B8] - 16/06/2015 - 16:22:33 ---A- . (...) -- C:\Windows\mylz.exe [408576]
O44 - LFC:[MD5.828AE71F67ACDB05C94F76FE37E55099] - 16/06/2015 - 16:22:36 ---A- . (...) -- C:\Windows\ylz.dat [631296]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 16/06/2015 - 16:25:08 ---A- . (...) -- C:\Windows\hgfs.sys [0]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 16/06/2015 - 16:25:08 ---A- . (...) -- C:\Windows\prleth.sys [0]
O44 - LFC:[MD5.1C7D24960F83827296721A8D870E849A] - 16/06/2015 - 16:26:26 ---A- . (.Abengine - Pas de description.) -- C:\Windows\System32\abengine64.dll [409168] =>Adware.Abengine
O44 - LFC:[MD5.FE18FC434139D0D6C2DADDB478FCA15D] - 16/06/2015 - 16:31:13 ---A- . (...) -- C:\Windows\System32\abengineOff.ini [9240] =>Adware.Abengine
O44 - LFC:[MD5.9997B844DB09CD1969BF6006738B943E] - 16/06/2015 - 16:37:38 ---A- . (...) -- C:\claraInstaller.txt [7969]
O44 - LFC:[MD5.14AC26AEBA988E85081A23D0C2634E64] - 17/06/2015 - 15:20:46 ---A- . (...) -- C:\Windows\win.ini [188]
O44 - LFC:[MD5.6CB1DB9D948B062C495F77C183BFE9E5] - 17/06/2015 - 15:20:56 ---A- . (...) -- C:\Windows\ODBC.INI [382]
O44 - LFC:[MD5.74D9A83219CABAAB06A69FD318873F33] - 17/06/2015 - 16:53:58 ---A- . (...) -- C:\END [5]
O44 - LFC:[MD5.B9D850D1F55F5B2EF4E4612816A942AE] - 18/06/2015 - 14:24:00 ---A- . (...) -- C:\Analyse PC ChR du 18_06_2015.txt [526068]
~ Files: 34 Legitimates Filtered in 00mn 01s



---\\ Enumération des clés de registre PoliciesSystem (MWPS) (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=0
O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
~ MWPS: 17 Legitimates Filtered in 00mn 00s



---\\ Enumération des clés de registre PoliciesExplorer (MWPE) (O56)
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1
~ MWPE Keys: 4 Legitimates Filtered in 00mn 00s



---\\ Liste des pilotes du système (SDL) (O58)
O58 - SDL:29/05/2012 - 16:53:30 ---A- . (.Windows (R) Codename Longhorn DDK provider - hpvhd 64bit support driver.) -- C:\Windows\System32\Drivers\cpqdfw.sys [27456]
O58 - SDL:10/04/2015 - 20:56:56 ---A- . (.Infonaut - Infonaut Driver x64.) -- C:\Windows\System32\Drivers\innfd_1_10_0_14.sys [58224] =>PUP.Infonaut
O58 - SDL:02/04/2015 - 23:22:32 ---A- . (.NetFilterSDK.com - NetFilter SDK WFP Driver (WPP).) -- C:\Windows\System32\Drivers\netfilter64.sys [46376]
O58 - SDL:13/05/2015 - 20:08:16 ---A- . (.SuperClick - SC Driver x64.) -- C:\Windows\System32\Drivers\scfd_1_10_0_16.sys [58240] =>PUP.SuperClick
O58 - SDL:22/01/2014 - 07:52:10 ---A- . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG USB Composite Device Driver (MSS Ver.3).) -- C:\Windows\System32\Drivers\ssudbus.sys [108800]
O58 - SDL:22/01/2014 - 07:52:10 ---A- . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG Android Modem Device Driver (MSS Ver.3).) -- C:\Windows\System32\Drivers\ssudmdm.sys [206080]
O58 - SDL:26/07/2012 - 06:00:55 ---A- . (.Promise Technology, Inc. - Promise SuperTrak EX Series Driver for Windows x64.) -- C:\Windows\System32\Drivers\stexstor.sys [30960]
O58 - SDL:25/10/2012 - 03:18:48 ---A- . (.IDT, Inc. - IDT PC Audio.) -- C:\Windows\System32\Drivers\stwrt64.sys [543744]
~ Drivers: 52 Legitimates Filtered in 00mn 00s



---\\ Liste des outils de désinfection (LATC) (O63)
O63 - Logiciel: ZHPDiag 2015 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 =>.Nicolas Coolman
~ ADS: Scanned in 00mn 00s



---\\ Menu de démarrage Internet (SMI) (O68)
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Crossbrowse - Crossbrowse.) -- C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe =>PUP.CrossBrowser
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (...) -- C:\Program Files\Internet Explorer\iexplore.exe http://www.mystartsearch.com =>PUP.StartSearch
~ Keys: Scanned in 00mn 00s



---\\ Recherche d'infection sur les navigateurs internet (SBI) (O69)
O69 - SBI: SearchScopes [HKCU] {015DB5FA-EAFB-4592-A95B-F44D3EE87FA9} - (Trovi) - http://www.trovi.com =>Hijacker.TroviCom
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - http://www.mystartsearch.com =>PUP.StartSearch
O69 - SBI: SearchScopes [HKCU] {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} [DefaultScope] - (e) - http://www.mystartsearch.com =>PUP.StartSearch
O69 - SBI: SearchScopes [HKCU] {33BB0A4E-99AF-4226-BDF6-49120163DE86} - (mystartsearch) - http://www.mystartsearch.com =>PUP.StartSearch
O69 - SBI: SearchScopes [HKCU] {D944BB61-2E34-4DBF-A683-47E505C587DC} - (eBay) - http://www.mystartsearch.com =>PUP.StartSearch
O69 - SBI: SearchScopes [HKCU] {E6F53664-F0F8-4328-8B5C-6F2D58AC4582} - (Propositions de recherche Amazon.fr) - http://www.mystartsearch.com =>PUP.StartSearch
O69 - SBI: SearchScopes [HKCU] {E733165D-CBCF-4FDA-883E-ADEF965B476C} - (Google) - http://www.mystartsearch.com =>PUP.StartSearch
~ Keys: Scanned in 00mn 00s



---\\ Recherche particulière à la racine du système (SPRF) (O84)
[MD5.3A1D89B89C9D62951957F0839578DD9B] [SPRF][20/04/2015] (...) -- C:\Users\christophe\AppData\Roaming\gAWWmr4C116U27SzY4XcQ.exe [1579520]
[MD5.3A1D89B89C9D62951957F0839578DD9B] [SPRF][20/04/2015] (...) -- C:\Users\christophe\AppData\Roaming\kdmhCTydrVA5XW.exe [1579520]
[MD5.3A1D89B89C9D62951957F0839578DD9B] [SPRF][20/04/2015] (...) -- C:\Users\christophe\AppData\Roaming\xZrVtuHMnGwUoZ8MQY.exe [1579520]
~ Files: 3 Legitimates Filtered in 00mn 00s



---\\ Recherche d'infection Rogue (SRI) (O86)
O43 - CFD: 16/06/2015 - 17:35:37 - [] ----D C:\ProgramData\28341ff220e0446c9fff27c4493d622e
O43 - CFD: 16/06/2015 - 17:35:39 - [] ----D C:\ProgramData\6e589a01ba0f4c4e96fed4b4f5d233ce
[MD5.BE87A60333C5848911C3CA839F190720] [SRI] (.Pas de propriétaire - 6e589a01ba0f4c4e96fed4b4f5d233ce.) -- C:\ProgramData\6e589a01ba0f4c4e96fed4b4f5d233ce\6e589a01ba0f4c4e96fed4b4f5d233ce.exe [276992]
~ Files: Scanned in 00mn 00s



---\\ Liste des exceptions du parefeu (FirewallRules) (O87)
O87 - FAEL: "{EBAD0EE9-82DA-4BB9-B2EA-1032FA5BC59F}" | In - None - P17 - TRUE | .(.Crossbrowse - Crossbrowse.) -- C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe =>PUP.CrossBrowser
~ Firewall: 1 Legitimates Filtered in 00mn 01s



---\\ Export de clés de registre aléatoires (O91)
[HKLM\Software\Wow6432Node\6893c58f-ddc8-192a-ed70-78d92fd4ead3\16143292300476810\eae10f9d]:060df2cd="c/Au/XV/H/Ap/X2/GP/j/Xt/axAv/X6////%"
[HKLM\Software\Wow6432Node\6893c58f-ddc8-192a-ed70-78d92fd4ead3\16143292300476810\eae10f9d]:0c230bcb="///%"
[HKLM\Software\Wow6432Node\6893c58f-ddc8-192a-ed70-78d92fd4ead3\16143292300476810\eae10f9d]:0dc3ee96="/P////%%"
[HKLM\Software\Wow6432Node\6893c58f-ddc8-192a-ed70-78d92fd4ead3\16143292300476810\eae10f9d]:0e93c3f3="///%"
[HKLM\Software\Wow6432Node\6893c58f-ddc8-192a-ed70-78d92fd4ead3\16143292300476810\eae10f9d]:1520c6f1="V/////%%"
[HKLM\Software\Wow6432Node\6893c58f-ddc8-192a-ed70-78d92fd4ead3\16143292300476810\eae10f9d]:1c311243="GlAk/X6/G/Ap/YV/UxAk/YZ/Gl////%%"
[HKLM\Software\Wow6432Node\6893c58f-ddc8-192a-ed70-78d92fd4ead3\16143292300476810\eae10f9d]:27ddcf6f="///%"
[HKLM\Software\Wow6432Node\6893c58f-ddc8-192a-ed70-78d92fd4ead3\16143292300476810\eae10f9d]:2d71d5ab="V/////%%"
[HKLM\Software\Wow6432Node\6893c58f-ddc8-192a-ed70-78d92fd4ead3\16143292300476810\eae10f9d]:2e22d94e="///%"
[HKLM\Software\Wow6432Node\6893c58f-ddc8-192a-ed70-78d92fd4ead3\16143292300476810\eae10f9d]:340d3099="/P////%%"
[HKLM\Software\Wow6432Node\6893c58f-ddc8-192a-ed70-78d92fd4ead3\16143292300476810\eae10f9d]:37b7a6d8="UlAr/XJ/c//k////"
[HKLM\Software\Wow6432Node\6893c58f-ddc8-192a-ed70-78d92fd4ead3\16143292300476810\eae10f9d]:38583bc3="Ml/2/CF/M//g/CZ////%"
[HKLM\Software\Wow6432Node\6893c58f-ddc8-192a-ed70-78d92fd4ead3\16143292300476810\eae10f9d]:3c09c42b="///%"
[HKLM\Software\Wow6432Node\6893c58f-ddc8-192a-ed70-78d92fd4ead3\16143292300476810\eae10f9d]:414bc593="///%"
[HKLM\Software\Wow6432Node\6893c58f-ddc8-192a-ed70-78d92fd4ead3\16143292300476810\eae10f9d]:48bd1aff="V/////%%"
[HKLM\Software\Wow6432Node\6893c58f-ddc8-192a-ed70-78d92fd4ead3\16143292300476810\eae10f9d]:51d2f2ea="JlA+/Y//b/Ak/YZ/c//x/W//I//x/CD/Ux/e////"
[HKLM\Software\Wow6432Node\6893c58f-ddc8-192a-ed70-78d92fd4ead3\16143292300476810\eae10f9d]:587b5709="V/////%%"
[HKLM\Software\Wow6432Node\6893c58f-ddc8-192a-ed70-78d92fd4ead3\16143292300476810\eae10f9d]:6185d035="Vx/2/Cx/V//l////"
[HKLM\Software\Wow6432Node\6893c58f-ddc8-192a-ed70-78d92fd4ead3\16143292300476810\eae10f9d]:65114b36="Vl/l////"
[HKLM\Software\Wow6432Node\6893c58f-ddc8-192a-ed70-78d92fd4ead3\16143292300476810\eae10f9d]:72758a5d="///%"
[HKLM\Software\Wow6432Node\6893c58f-ddc8-192a-ed70-78d92fd4ead3\16143292300476810\eae10f9d]:7367429f="///%"
[HKLM\Software\Wow6432Node\6893c58f-ddc8-192a-ed70-78d92fd4ead3\16143292300476810\eae10f9d]:7f69fa1f="///%"
[HKLM\Software\Wow6432Node\6893c58f-ddc8-192a-ed70-78d92fd4ead3\16143292300476810\eae10f9d]:8b9e4cbc="V/////%%"
[HKLM\Software\Wow6432Node\6893c58f-ddc8-192a-ed70-78d92fd4ead3\16143292300476810\eae10f9d]:a0743acc="N/////%%"
[HKLM\Software\Wow6432Node\6893c58f-ddc8-192a-ed70-78d92fd4ead3\16143292300476810\eae10f9d]:a1dcff5b="V/////%%"
[HKLM\Software\Wow6432Node\6893c58f-ddc8-192a-ed70-78d92fd4ead3\16143292300476810\eae10f9d]:a2e3b941="///%"
[HKLM\Software\Wow6432Node\6893c58f-ddc8-192a-ed70-78d92fd4ead3\16143292300476810\eae10f9d]:bbf88800="///%"
[HKLM\Software\Wow6432Node\6893c58f-ddc8-192a-ed70-78d92fd4ead3\16143292300476810\eae10f9d]:c24899a6="VP/g/CV/Vl/2/Cx////%"
[HKLM\Software\Wow6432Node\6893c58f-ddc8-192a-ed70-78d92fd4ead3\16143292300476810\eae10f9d]:c5705860="Vx////%%"
[HKLM\Software\Wow6432Node\6893c58f-ddc8-192a-ed70-78d92fd4ead3\16143292300476810\eae10f9d]:c6c5dd44="V/////%%"
[HKLM\Software\Wow6432Node\6893c58f-ddc8-192a-ed70-78d92fd4ead3\16143292300476810\eae10f9d]:c99a5f5c="///%"
[HKLM\Software\Wow6432Node\6893c58f-ddc8-192a-ed70-78d92fd4ead3\16143292300476810\eae10f9d]:d1abcdb6="///%"
[HKLM\Software\Wow6432Node\6893c58f-ddc8-192a-ed70-78d92fd4ead3\16143292300476810\eae10f9d]:d94388d2="GlAk/X6/G/Ap/YV/UxAk/YZ/Gl////%%"
[HKLM\Software\Wow6432Node\6893c58f-ddc8-192a-ed70-78d92fd4ead3\16143292300476810\eae10f9d]:e46c271e="///%"
[HKLM\Software\Wow6432Node\6893c58f-ddc8-192a-ed70-78d92fd4ead3\16143292300476810\eae10f9d]:e8f9dcc7="UlAr/XJ/c//k////"
[HKLM\Software\Wow6432Node\6893c58f-ddc8-192a-ed70-78d92fd4ead3\16143292300476810\eae10f9d]:f0bf0bde="///%"
[HKLM\Software\Wow6432Node\6893c58f-ddc8-192a-ed70-78d92fd4ead3\16143292300476810\eae10f9d]:f1f24e29="Vl/l/C/////%"
[HKLM\Software\Wow6432Node\6893c58f-ddc8-192a-ed70-78d92fd4ead3\16143292300476810\eae10f9d]:f2c53c49="UlAr/XJ/c//k////"
[HKLM\Software\Wow6432Node\6893c58f-ddc8-192a-ed70-78d92fd4ead3\16143292300476810\eae10f9d]:f6ad6fa6="V/////%%"
[HKLM\Software\Wow6432Node\6893c58f-ddc8-192a-ed70-78d92fd4ead3\16143292300476810\eae10f9d]:fe94ce1e="V/////%%"
~ Export Key Software: Scanned in 00mn 00s



---\\ Recherche des packages WindowsInstaller (WIS) (O93) (NTFS)
[MD5.F3E0BCAC0A50EA3B7571407A7DA325C7] [WIS][16/06/2015] (.globalupdate - globalupdate.) -- C:\Windows\Installer\159c2e.msi [32768] =>PUP.GlobalUpdate
~ WIS: 1 Legitimates Filtered in 00mn 00s



---\\ Recherche de clés de registre Tracing (O100)
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\MaxComputerCleaner_Maintenance_RASAPI32 =>PUP.MaxComputerCleaner
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\MaxComputerCleaner_Maintenance_RASMANCS =>PUP.MaxComputerCleaner
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\MaxComputerCleaner_RASAPI32 =>PUP.MaxComputerCleaner
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\MaxComputerCleaner_RASMANCS =>PUP.MaxComputerCleaner
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\SuperClickAutoUpdateClient_RASAPI32 =>PUP.SuperClick
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\SuperClickAutoUpdateClient_RASMANCS =>PUP.SuperClick
~ BTK: 56 Legitimates Filtered in 00mn 00s



---\\ Recherche de clés de registre CLSID (O101)
[HKCR\CLSID\{4029B397-87CE-4BEB-9236-67557A9007CC}] (youtubeadblocker) =>PUP.Multiplug
~ BCK: 4838 Legitimates Filtered in 00mn 06s



---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)
SS - | Auto 02/04/2015 172344 | (CoupoonService64) . (...) - C:\Program Files (x86)\coupoon\iiwjljrnpc64.exe
SS - | Demand 12/10/2010 206072 | (GamesAppService) . (.WildTangent, Inc..) - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe
SS - | Auto 17/06/2015 68608 | (globalUpdate) . (.globalUpdate.) - C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe =>PUP.GlobalUpdate
SS - | Demand 17/06/2015 68608 | (globalUpdatem) . (.globalUpdate.) - C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe =>PUP.GlobalUpdate
SS - | Auto 12/10/2012 35744 | (HPConnectedRemote) . (.Hewlett-Packard.) - c:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe
SS - | Demand 10/08/2012 1001376 | (hpqwmiex) . (.Hewlett-Packard Company.) - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
SS - | Auto 14/04/2015 1080120 | (MBAMService) . (.Malwarebytes Corporation.) - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
SR - | Auto 17/06/2015 1767424 | (3621a1ae) . (...) - c:\Program Files (x86)\CutterGeneration\CutterGeneration.dll
SR - | Auto 22/04/2015 2329600 | (abengine) . (.Abengine.) - C:\Program Files (x86)\HighlightSearches\abengine.exe =>PUP.HighlightSearches
SR - | Auto 31/08/2011 462184 | (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe
SR - | Auto 03/06/2015 3285776 | (CltMngSvc) . (.Client Connect LTD.) - C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe =>PUP.SearchProtect
SR - | Auto 16/05/2012 144560 | (EpsonScanSvc) . (.Seiko Epson Corporation.) - C:\WINDOWS\system32\EscSvc64.exe
SR - | Auto 27/09/2012 86528 | (HP Support Assistant Service) . (.Hewlett-Packard Company.) - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe =>.Hewlett-Packard Co
SR - | Auto 12/06/2015 125056 | (IHProtect Service) . (.XTab system.) - C:\Program Files (x86)\MiuiTab\ProtectService.exe =>PUP.MiuiTab
SR - | Auto 10/04/2015 278600 | (insvc_1.10.0.14) . (.Infonaut.) - C:\Program Files (x86)\Infonaut_1.10.0.14\Service\insvc.exe =>PUP.Infonaut
SR - | Auto 20/04/2012 635104 | (Intel(R) Capability Licensing Service Interface) . (.Intel(R) Corporation.) - c:\Program Files\Intel\iCLS Client\HeciServer.exe
SR - | Auto 18/07/2012 128896 | (Intel(R) ME Service) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
SR - | Auto 18/07/2012 165760 | (jhi_service) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
SR - | Auto 16/06/2015 147456 | (kysykiti) . (...) - C:\Users\christophe\AppData\Local\FEF4F24B-1434475514-BB9E-BBEB-74FFC6ABE3AF\snsk2E6C.tmp
SR - | Auto 18/07/2012 276864 | (LMS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
SR - | Auto 18/06/2015 242176 | (lofilysy) . (...) - C:\Users\christophe\AppData\Roaming\FEF4F24B-1434468119-BB9E-BBEB-74FFC6ABE3AF\knsj834C.tmp
SR - | Auto 16/06/2015 408576 | (mylz) . (...) - c:\windows\mylz.exe
SR - | Auto 17/09/2012 891240 | (nvsvc) . (.NVIDIA Corporation.) - C:\windows\system32\nvvsvc.exe
SR - | Auto 16/06/2015 2731488 | (onpvhvQFDl) . (.Useful Technology.) - C:\ProgramData\oKrTikoXqmk\onpvhvQFDl.exe
SR - | Auto 12/10/2012 29696 | C:\Program Files (x86)\ORBTR\orbiter.dll (Orbiter) . (.Client Connect LTD.) - C:\Windows\System32\svchost.exe =>Toolbar.Conduit
SR - | Auto 13/05/2015 278616 | (scsvc_1.10.0.16) . (.SuperClick.) - C:\Program Files (x86)\SuperClick_1.10.0.16\Service\scsvc.exe =>PUP.SuperClick
SR - | Auto 25/10/2012 327680 | (STacSV) . (.IDT, Inc..) - C:\Program Files\IDT\WDM\STacSV64.exe
SR - | Auto 18/07/2012 364416 | (UNS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
SR - | Auto 18/06/2015 53040 | (UpdateCheck) . (...) - C:\Program Files (x86)\Coupoon\UpdateCheck.exe
SR - | Auto 22/07/1658 0 | (WinDefend) . (...) - C:\Program Files (x86)\Windows Defender\MsMpEng.exe
SR - | Auto 16/06/2015 695976 | (WindowsMangerProtect) . (.DTools LIMITED.) - C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe =>PUP.Fuyu
SR - | Auto 22/07/1658 0 | (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe =>.Microsoft Corporation
SR - | Demand 12/10/2012 29696 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
SR - | Auto 16/06/2015 219136 | (xoperoze) . (...) - C:\Users\christophe\AppData\Roaming\FEF4F24B-1434468119-BB9E-BBEB-74FFC6ABE3AF\jnsoA241.tmp
SR - | Auto 16/06/2015 417792 | (ylz) . (...) - c:\windows\ylz.exe
SR - | Auto 16/06/2015 166912 | (zedepory) . (...) - C:\Users\christophe\AppData\Roaming\FEF4F24B-1434468119-BB9E-BBEB-74FFC6ABE3AF\hnsmC4AF.tmp
~ Services: Scanned in 00mn 07s



---\\ Scan Additionnel (O88)
Database Version : 13008 - (16/06/2015)
Clés trouvées (Keys found) : 51
Valeurs trouvées (Values found) : 14
Dossiers trouvés (Folders found) : 28
Fichiers trouvés (Files found) : 117

[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4029B397-87CE-4BEB-9236-67557A9007CC}] =>PUP.YouTubeAdBlock^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F}] =>PUP.LuckyTab^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8B5D2FB9-741B-4E82-B1CB-0D0A98413CDE}] =>PUP.PriceLess^
[HKLM\SYSTEM\CurrentControlSet\Services\abengine] =>PUP.HighlightSearches^
[HKLM\SYSTEM\CurrentControlSet\Services\CltMngSvc] =>PUP.SearchProtect^
[HKLM\SYSTEM\CurrentControlSet\Services\globalUpdate) (globalUpdate] =>PUP.GlobalUpdate^
[HKLM\SYSTEM\CurrentControlSet\Services\IHProtect Service] =>PUP.MiuiTab^
[HKLM\SYSTEM\CurrentControlSet\Services\insvc_1.10.0.14] =>PUP.Infonaut^
[HKLM\SYSTEM\CurrentControlSet\Services\onpvhvQFDl] =>PUP.BreakingNewsAlert^
[HKLM\SYSTEM\CurrentControlSet\Services\scsvc_1.10.0.16] =>PUP.SuperClick^
[HKLM\SYSTEM\CurrentControlSet\Services\WindowsMangerProtect] =>PUP.Fuyu^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\SoftwareUpdater] =>PUP.Eorezo^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\CinemaPlus-3.2cV17.06] =>PUP.CrossRider^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\CinemaPlus-4.1vV16.06] =>PUP.CrossRider^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Crossbrowse] =>PUP.CrossBrowser^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\FlashBeat] =>PUP.FlashBeat^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Infonaut_1.10.0.14] =>PUP.Infonaut^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\MovieDea] =>PUP.MovieDea^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\BreakingNewsAlert] =>PUP.BreakingNewsAlert^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{75F9BF4A-AF67-A478-A37B-31D73186D3F3}] =>PUP.PriceLess^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect] =>PUP.SearchProtect^
[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Selection Tools] =>PUP.Nosibay^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\SmartWeb] =>PUP.SmartWeb^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\SuperClick_1.10.0.16] =>PUP.SuperClick^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}{3621a1ae}] =>Adware.Graftor^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\wincheck] =>PUP.Wincheck^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\mystartsearch uninstall] =>PUP.StartSearch^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{4820778D-AB0D-6D18-C316-52A6A0E1D507}] =>PUP.YouTubeAdBlock^
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}] =>PUP.V9Software
[HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}] =>PUP.V9Software
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}] =>PUP.V9Software
[HKCU\Software\APN PIP] =>Toolbar.Ask
[HKLM\Software\Wow6432Node\Iminent] =>Adware.IMBooster
[HKCU\Software\Tutorials] =>Spyware.AgenceExclusive
[HKLM\Software\Wow6432Node\Tutorials] =>Spyware.AgenceExclusive
[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\IMBoosterARP] =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\IMBoosterARP] =>Adware.IMBooster
[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect] =>PUP.Conduit
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect] =>PUP.Conduit
[HKCU\Software\AppDataLow\Software\Crossrider] =>PUP.CrossRider
[HKCU\Software\InstalledBrowserExtensions\] =>PUP.CrossRider
[HKCU\Software\AskPartnerNetwork] =>Toolbar.Ask
[HKLM\Software\Wow6432Node\AskPartnerNetwork] =>Toolbar.Ask
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SoftwareUpdater] =>Hijacker.Eazel
[HKCU\Software\HomeTab] =>PUP.CertifiedToolbar
[HKCU\Software\InstalledBrowserExtensions] =>PUP.CrossRider
[HKLM\Software\InstalledBrowserExtensions] =>PUP.CrossRider
[HKLM\Software\Wow6432Node\InstalledBrowserExtensions] =>PUP.CrossRider
[HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}] =>PUP.OptimizerPro
[HKLM\Software\Wow6432Node\{1146AC44-2F03-4431-B4FD-889BC837521F}] =>PUP.OptimizerPro
[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\IminentToolbar] =>Adware.IMBooster
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:GoogleChromeAutoLaunch_A22D944B006926E355B04829311172EB =>PUP.CrossBrowser^
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:MovieDea =>PUP.MovieDea^
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]:upgmsd_fr_002020005.exe =>PUP.CrossRider^
C:\Program Files (x86)\CinemaPlus-3.2cV17.06 =>PUP.CrossRider^
C:\Program Files (x86)\CinemaPlus-4.1vV16.06 =>PUP.CrossRider^
C:\Program Files (x86)\Crossbrowse =>PUP.CrossBrowser^
C:\Program Files (x86)\HighlightSearches =>PUP.HighlightSearches^
C:\Program Files (x86)\Infonaut_1.10.0.14 =>PUP.Infonaut^
C:\Program Files (x86)\MiuiTab =>PUP.MiuiTab^
C:\Program Files (x86)\MovieDea =>PUP.MovieDea^
C:\Program Files (x86)\ORBTR =>Toolbar.Conduit^
C:\Program Files (x86)\PrieceLess =>PUP.PriceLess^
C:\Program Files (x86)\SuperClick_1.10.0.16 =>PUP.SuperClick^
C:\Program Files (x86)\youtubeadblocker =>PUP.YouTubeAdBlock^
C:\ProgramData\BreakingNewsAlert =>PUP.BreakingNewsAlert^
C:\ProgramData\FlashBeat =>PUP.FlashBeat^
C:\ProgramData\MovieDeaConfig =>PUP.MovieDea^
C:\ProgramData\WindowsMangerProtect =>PUP.Fuyu^
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Crossbrowse =>PUP.CrossBrowser^
C:\Users\christophe\AppData\Roaming\mystartsearch =>PUP.StartSearch^
C:\Users\christophe\AppData\Roaming\Store =>PUP.Nosibay^
C:\Users\christophe\AppData\Roaming\VOPackage =>Adware.Downware^
C:\Users\christophe\AppData\Roaming\WTools =>PUP.Nosibay^
C:\Users\christophe\AppData\Local\BoBrowser =>PUP.BoBrowser^
C:\Users\christophe\AppData\Local\BreakingNewsAlert =>PUP.BreakingNewsAlert^
C:\Users\christophe\AppData\Local\Crossbrowse =>PUP.CrossBrowser^
C:\Users\christophe\AppData\Local\SmartWeb =>PUP.SmartWeb^
C:\Users\christophe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MovieDea =>PUP.MovieDea^
C:\Users\christophe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VOPackage =>Adware.Downware^
C:\Program Files (x86)\SearchProtect =>PUP.Conduit
C:\Users\christophe\AppData\Local\SearchProtect =>PUP.Conduit
C:\Program Files (x86)\SearchProtect\SearchProtect\bin\cltmng.exe =>PUP.SearchProtect^
C:\Program Files (x86)\SearchProtect\UI\bin\cltmngui.exe =>PUP.SearchProtect^
C:\Users\christophe\AppData\Local\gmsd_fr_002020005\upgmsd_fr_002020005.exe =>PUP.CrossRider^
C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe =>PUP.CrossBrowser^
C:\Users\christophe\AppData\Local\SmartWeb\SmartWebHelper.exe =>PUP.SmartWeb^
C:\Users\christophe\AppData\Local\SmartWeb\SmartWebApp.exe =>PUP.SmartWeb^
C:\Program Files (x86)\CinemaPlus-3.2cV17.06\629c710f-b5af-48f5-b1f2-c42563ded208-1-6.exe =>PUP.CrossRider^
C:\Program Files (x86)\CinemaPlus-3.2cV17.06\629c710f-b5af-48f5-b1f2-c42563ded208-1-7.exe =>PUP.CrossRider^
C:\Program Files (x86)\CinemaPlus-3.2cV17.06\629c710f-b5af-48f5-b1f2-c42563ded208-10.exe =>PUP.CrossRider^
C:\Program Files (x86)\CinemaPlus-3.2cV17.06\629c710f-b5af-48f5-b1f2-c42563ded208-3.exe =>PUP.CrossRider^
C:\Program Files (x86)\CinemaPlus-3.2cV17.06\629c710f-b5af-48f5-b1f2-c42563ded208-5.exe =>PUP.CrossRider^
C:\Program Files (x86)\CinemaPlus-3.2cV17.06\629c710f-b5af-48f5-b1f2-c42563ded208-6.exe =>PUP.CrossRider^
C:\Program Files (x86)\CinemaPlus-3.2cV17.06\629c710f-b5af-48f5-b1f2-c42563ded208-7.exe =>PUP.CrossRider^
C:\Users\Christophe\AppData\Local\avabvbavad\avabvbavad.exe =>Adware.Pirrit^
c:\programdata\{33d4e648-0d58-5e4f-33d4-4e6480d59920}\setup_668.exe =>PUP.BidailySync^
C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\utility.exe =>PUP.CrossBrowser^
C:\ProgramData\FlashBeat\FlashBeat.exe =>PUP.FlashBeat^
C:\Program Files (x86)\CinemaPlus-4.1vV16.06\de8d36cd-2c45-4ecf-8573-62a63b02a5db-1-6.exe =>PUP.CrossRider^
C:\Program Files (x86)\CinemaPlus-4.1vV16.06\de8d36cd-2c45-4ecf-8573-62a63b02a5db-1-7.exe =>PUP.CrossRider^
C:\Program Files (x86)\CinemaPlus-4.1vV16.06\de8d36cd-2c45-4ecf-8573-62a63b02a5db-10.exe =>PUP.CrossRider^
C:\Program Files (x86)\CinemaPlus-4.1vV16.06\de8d36cd-2c45-4ecf-8573-62a63b02a5db-3.exe =>PUP.CrossRider^
C:\Program Files (x86)\CinemaPlus-4.1vV16.06\de8d36cd-2c45-4ecf-8573-62a63b02a5db-5.exe =>PUP.CrossRider^
C:\Program Files (x86)\CinemaPlus-4.1vV16.06\de8d36cd-2c45-4ecf-8573-62a63b02a5db-6.exe =>PUP.CrossRider^
C:\Program Files (x86)\CinemaPlus-4.1vV16.06\de8d36cd-2c45-4ecf-8573-62a63b02a5db-7.exe =>PUP.CrossRider^
C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe =>PUP.GlobalUpdate^
C:\Program Files (x86)\HighlightSearches\iren3006.exe =>PUP.HighlightSearches^
C:\Users\Christophe\AppData\Roaming\WTools\Selection Tools\Selection Tools Update.exe =>PUP.Nosibay^
C:\Program Files (x86)\SuperClick_1.10.0.16\Update\SuperClickAutoUpdateClient.exe =>PUP.SuperClick^
C:\Users\Christophe\AppData\Roaming\Store\WindApp\WindApp Update.exe =>PUP.Nosibay^
C:\Windows\Tasks\629c710f-b5af-48f5-b1f2-c42563ded208-1-6.job =>PUP.CrossRider^
C:\Windows\System32\Tasks\629c710f-b5af-48f5-b1f2-c42563ded208-1-6 =>PUP.CrossRider^
C:\Windows\Tasks\629c710f-b5af-48f5-b1f2-c42563ded208-1-7.job =>PUP.CrossRider^
C:\Windows\System32\Tasks\629c710f-b5af-48f5-b1f2-c42563ded208-1-7 =>PUP.CrossRider^
C:\Windows\Tasks\629c710f-b5af-48f5-b1f2-c42563ded208-10_user.job =>PUP.CrossRider^
C:\Windows\System32\Tasks\629c710f-b5af-48f5-b1f2-c42563ded208-10_user =>PUP.CrossRider^
C:\Windows\Tasks\629c710f-b5af-48f5-b1f2-c42563ded208-3.job =>PUP.CrossRider^
C:\Windows\System32\Tasks\629c710f-b5af-48f5-b1f2-c42563ded208-3 =>PUP.CrossRider^
C:\Windows\Tasks\629c710f-b5af-48f5-b1f2-c42563ded208-5.job =>PUP.CrossRider^
C:\Windows\System32\Tasks\629c710f-b5af-48f5-b1f2-c42563ded208-5 =>PUP.CrossRider^
C:\Windows\Tasks\629c710f-b5af-48f5-b1f2-c42563ded208-5_user.job =>PUP.CrossRider^
C:\Windows\System32\Tasks\629c710f-b5af-48f5-b1f2-c42563ded208-5_user =>PUP.CrossRider^
C:\Windows\Tasks\629c710f-b5af-48f5-b1f2-c42563ded208-6.job =>PUP.CrossRider^
C:\Windows\System32\Tasks\629c710f-b5af-48f5-b1f2-c42563ded208-6 =>PUP.CrossRider^
C:\Windows\Tasks\629c710f-b5af-48f5-b1f2-c42563ded208-7.job =>PUP.CrossRider^
C:\Windows\System32\Tasks\629c710f-b5af-48f5-b1f2-c42563ded208-7 =>PUP.CrossRider^
C:\Windows\Tasks\Bidaily Synchronize Task =>PUP.BidailySync^
C:\Windows\System32\Tasks\Bidaily Synchronize Task =>PUP.BidailySync^
C:\Windows\Tasks\Crossbrowse.job =>PUP.CrossBrowser^
C:\Windows\System32\Tasks\Crossbrowse =>PUP.CrossBrowser^
C:\Windows\Tasks\DBJXMQ1.job =>PUP.FlashBeat^
C:\Windows\System32\Tasks\DBJXMQ1 =>PUP.FlashBeat^
C:\Windows\Tasks\de8d36cd-2c45-4ecf-8573-62a63b02a5db-1-6.job =>PUP.CrossRider^
C:\Windows\System32\Tasks\de8d36cd-2c45-4ecf-8573-62a63b02a5db-1-6 =>PUP.CrossRider^
C:\Windows\Tasks\de8d36cd-2c45-4ecf-8573-62a63b02a5db-1-7.job =>PUP.CrossRider^
C:\Windows\System32\Tasks\de8d36cd-2c45-4ecf-8573-62a63b02a5db-1-7 =>PUP.CrossRider^
C:\Windows\Tasks\de8d36cd-2c45-4ecf-8573-62a63b02a5db-10_user.job =>PUP.CrossRider^
C:\Windows\System32\Tasks\de8d36cd-2c45-4ecf-8573-62a63b02a5db-10_user =>PUP.CrossRider^
C:\Windows\Tasks\de8d36cd-2c45-4ecf-8573-62a63b02a5db-3.job =>PUP.CrossRider^
C:\Windows\System32\Tasks\de8d36cd-2c45-4ecf-8573-62a63b02a5db-3 =>PUP.CrossRider^
C:\Windows\Tasks\de8d36cd-2c45-4ecf-8573-62a63b02a5db-5.job =>PUP.CrossRider^
C:\Windows\System32\Tasks\de8d36cd-2c45-4ecf-8573-62a63b02a5db-5 =>PUP.CrossRider^
C:\Windows\Tasks\de8d36cd-2c45-4ecf-8573-62a63b02a5db-5_user.job =>PUP.CrossRider^
C:\Windows\System32\Tasks\de8d36cd-2c45-4ecf-8573-62a63b02a5db-5_user =>PUP.CrossRider^
C:\Windows\Tasks\de8d36cd-2c45-4ecf-8573-62a63b02a5db-6.job =>PUP.CrossRider^
C:\Windows\System32\Tasks\de8d36cd-2c45-4ecf-8573-62a63b02a5db-6 =>PUP.CrossRider^
C:\Windows\Tasks\de8d36cd-2c45-4ecf-8573-62a63b02a5db-7.job =>PUP.CrossRider^
C:\Windows\System32\Tasks\de8d36cd-2c45-4ecf-8573-62a63b02a5db-7 =>PUP.CrossRider^
C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job =>PUP.GlobalUpdate^
C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore =>PUP.GlobalUpdate^
C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job =>PUP.GlobalUpdate^
C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineUA =>PUP.GlobalUpdate^
[HKCU\Software\ArenaHD] =>PUP.CrossRider^
[HKCU\Software\BoBrowser] =>PUP.BoBrowser^
[HKCU\Software\BrowserV16.06-nv-ie] =>PUP.CrossRider^
[HKCU\Software\CinemaPlus-3.2cV17.06-nv-ie] =>PUP.CrossRider^
[HKCU\Software\CinemaPlus-3.2cV17.06-nv] =>PUP.CrossRider^
[HKCU\Software\CinemaPlus-3.2cV17.06] =>PUP.CrossRider^
[HKCU\Software\CinemaPlus-4.1vV16.06-nv-ie] =>PUP.CrossRider^
[HKCU\Software\CinemaPlus-4.1vV16.06-nv] =>PUP.CrossRider^
[HKCU\Software\CinemaPlus-4.1vV16.06] =>PUP.CrossRider^
[HKCU\Software\CrossBrowser] =>PUP.CrossBrowser^
[HKCU\Software\Crossbrowse] =>PUP.CrossBrowser^
[HKCU\Software\HighDefAction] =>PUP.CrossRider^
[HKCU\Software\MaxComputerCleanerConfig] =>PUP.MaxComputerCleaner^
[HKCU\Software\MaxComputerCleanerLanguage] =>PUP.MaxComputerCleaner^
[HKCU\Software\Store] =>PUP.Nosibay^
[HKCU\Software\Super Optimizer] =>PUP.SuperOptimizer^
[HKCU\Software\TutoTag] =>PUP.AgenceExclusive^
[HKCU\Software\WTools] =>PUP.Nosibay^
[HKCU\Software\WajIEnhance] =>PUP.Wajam^
[HKCU\Software\YorkNewCin] =>PUP.CrossRider^
[HKCU\Software\maxcomputerclenner] =>PUP.MaxComputerCleaner^
[HKLM\Software\ArenaHD] =>PUP.CrossRider^
[HKLM\Software\Flashbeat] =>PUP.FlashBeat^
[HKLM\Software\HighDefAction] =>PUP.CrossRider^
[HKLM\Software\Wow6432Node\9359ad8b-1a23-4ff2-ab34-7a6800a3c0ef] =>PUP.CrossRider^
[HKLM\Software\Wow6432Node\9f50e6f5-26e3-4b3a-9df1-2668b09c8e40] =>PUP.CrossRider^
[HKLM\Software\Wow6432Node\ArenaHD] =>PUP.CrossRider^
[HKLM\Software\Wow6432Node\CinemaPlus-3.2cV17.06-nv-ie] =>PUP.CrossRider^
[HKLM\Software\Wow6432Node\CinemaPlus-3.2cV17.06-nv] =>PUP.CrossRider^
[HKLM\Software\Wow6432Node\CinemaPlus-4.1vV16.06-nv-ie] =>PUP.CrossRider^
[HKLM\Software\Wow6432Node\CinemaPlus-4.1vV16.06-nv] =>PUP.CrossRider^
[HKLM\Software\Wow6432Node\Conduit] =>Toolbar.Conduit^
[HKLM\Software\Wow6432Node\Flashbeat] =>PUP.FlashBeat^
[HKLM\Software\Wow6432Node\HighDefAction] =>PUP.CrossRider^
[HKLM\Software\Wow6432Node\ORBTR] =>Toolbar.Conduit^
[HKLM\Software\Wow6432Node\SPPDCOM] =>Rogue.PCSpeedUp^
[HKLM\Software\Wow6432Node\SupDp] =>PUP.SupTab^
[HKLM\Software\Wow6432Node\TabNav] =>PUP.Abengine^
[HKLM\Software\Wow6432Node\YorkNewCin] =>PUP.CrossRider^
[HKLM\Software\Wow6432Node\searchult] =>PUP.Optional^
[HKLM\Software\Wow6432Node\supTab] =>PUP.SupTab^
[HKLM\Software\YorkNewCin] =>PUP.CrossRider^
C:\Windows\Installer\159c2e.msi =>PUP.GlobalUpdate^
[HKCR\CLSID\{4029B397-87CE-4BEB-9236-67557A9007CC}] (youtubeadblocker) =>PUP.Multiplug^
C:\Users\christophe\AppData\Local\Temp\dlLogic.exe =>Toolbar.Conduit
~ Additionnel Scan: 248512 Items scanned in 00mn 22s



---\\ Informations complémentaires sur les modules
~ http://www.nicolascoolman.fr/r5-internet-explorer-proxy-management-iepm/ =>.Internet Explorer, Proxy Management (R5)
~ http://www.nicolascoolman.fr/o2-browser-helper-objects-de-navigateur/ =>.Browser Helper Objects de navigateur (O2)
~ http://www.nicolascoolman.fr/o3-internet-explorer-toolbars/ =>.Internet Explorer Toolbars (O3)
~ http://www.nicolascoolman.fr/o4-applications-demarrees-par-le-registre/ =>.Applications lancées au démarrage du système (O4)
~ AMI: 4 Legitimates Filtered in 00mn 00s



---\\ Récapitulatif des détections trouvées sur votre station
http://www.nicolascoolman.fr/pup-searchprotect =>PUP.SearchProtect
http://www.nicolascoolman.fr/pup-crossrider =>PUP.CrossRider
http://www.nicolascoolman.fr/blog/ =>PUP.CrossBrowser
http://www.nicolascoolman.fr/pup-smartwebsearch =>PUP.SmartWeb
http://www.nicolascoolman.fr/pup-startsearch =>PUP.StartSearch
http://www.nicolascoolman.fr/35828469-pup-youtubeadblocker- =>PUP.YouTubeAdBlock
http://www.nicolascoolman.fr/blog/ =>PUP.LuckyTab
http://www.nicolascoolman.fr/blog/ =>PUP.PriceLess
http://www.nicolascoolman.fr/blog/ =>Adware.GamesDesktop
http://www.nicolascoolman.fr/blog/ =>PUP.ContinueLiveInstallation
http://www.nicolascoolman.fr/blog/ =>PUP.PepperZip
http://www.nicolascoolman.fr/pup-bubbledock =>PUP.BubbleDock
http://www.nicolascoolman.fr/blog/ =>PUP.Nosibay
http://www.nicolascoolman.fr/blog/ =>PUP.MovieDea
http://www.nicolascoolman.fr/blog/ =>PUP.Wincheck
http://www.nicolascoolman.fr/adware-downware =>Adware.Downware
http://www.nicolascoolman.fr/blog/ =>PUP.HighlightSearches
http://www.nicolascoolman.fr/pup-globalupdate =>PUP.GlobalUpdate
http://www.nicolascoolman.fr/blog/ =>PUP.MiuiTab
http://www.nicolascoolman.fr/blog/ =>PUP.Infonaut
http://www.nicolascoolman.fr/blog/ =>PUP.BreakingNewsAlert
http://www.nicolascoolman.fr/blog/ =>PUP.SuperClick
http://www.nicolascoolman.fr/blog/ =>PUP.Fuyu
http://www.nicolascoolman.fr/blog/ =>Adware.Pirrit
http://www.nicolascoolman.fr/blog/ =>PUP.BidailySync
http://www.nicolascoolman.fr/blog/ =>PUP.FlashBeat
http://www.nicolascoolman.fr/blog/ =>PUP.MaxComputerCleaner
http://www.nicolascoolman.fr/blog/ =>PUP.BoBrowser
http://www.nicolascoolman.fr/pup-eorezo =>PUP.Eorezo
http://www.nicolascoolman.fr/blog/ =>Adware.Graftor
http://www.nicolascoolman.fr/blog/ =>Toolbar.AskBar
http://www.nicolascoolman.fr/pup-certifiedtoolbar =>PUP.CertifiedToolbar
http://www.nicolascoolman.fr/blog/ =>PUP.BrowserExtensions
http://www.nicolascoolman.fr/blog/ =>PUP.SuperOptimizer
http://www.nicolascoolman.fr/spyware-agenceexclusive =>PUP.AgenceExclusive
http://www.nicolascoolman.fr/pup-wajam =>PUP.Wajam
http://www.nicolascoolman.fr/toolbar-conduit =>Toolbar.Conduit
http://www.nicolascoolman.fr/adware-imbooster =>Adware.IMBooster
http://www.nicolascoolman.fr/rogue-pcspeedup =>Rogue.PCSpeedUp
http://www.nicolascoolman.fr/pup-suptab =>PUP.SupTab
http://www.nicolascoolman.fr/blog/ =>PUP.Abengine
http://www.nicolascoolman.fr/blog/ =>PUP.Optional
http://www.nicolascoolman.fr/blog/ =>Adware.Abengine
http://www.nicolascoolman.fr/hijacker-trovicom =>Hijacker.TroviCom
http://www.nicolascoolman.fr/pup-mutiplug =>PUP.Multiplug
http://www.nicolascoolman.fr/pup-v9software =>PUP.V9Software
http://www.nicolascoolman.fr/toolbar-ask =>Toolbar.Ask
http://www.nicolascoolman.fr/blog/ =>Spyware.AgenceExclusive
http://www.nicolascoolman.fr/blog/ =>PUP.Conduit
http://www.nicolascoolman.fr/hijacker-eazel =>Hijacker.Eazel
http://www.nicolascoolman.fr/pup-optimizerpro =>PUP.OptimizerPro
~ MSI: 51 link(s) detected in 00mn 00s



~ 846 Legitimates filtered by white list
End of the scan (1013 lines in 01mn 14s)(0.10)