~ Rapport de ZHPDiag v2015.6.16.57 - Nicolas Coolman  (16/06/2015)
~ Lancé par Christophe (18/06/2015 15:52:05)
~ Facebook : https://www.facebook.com/nicolascoolman1
~ Adresse du Forum http://www.forum.nicolascoolman.fr
~ Traduit par Nicolas Coolman
~ Etat de la version : Nouvelle version disponible
~ Liste blanche : Activée par le programme
~ Elévation des Privilèges : OK
~ User Account Control (UAC): Deactivate by user


---\\ Navigateurs Internet
MSIE: Internet Explorer v10.0.9200.17357

---\\ Informations sur les produits Windows
~ Langage: Français
Windows Server License Manager Script : OK
~ Windows(R) Operating System, OEM_DM channel
Windows ID Activation : OK
~ Windows Partial Key : 2PKVT
Windows License : OK
~ Windows Remaining Initializations Number : 998
Software Protection Service (Protection logicielle) : OK
Windows Automatic Updates : OK
Windows Activation Technologies : OK
Windows 8, 64-bit  (Build 9200)

---\\ Logiciels de protection du système
Malwarebytes Anti-Malware version 2.1.6.1022
Windows Defender W8 (Activate)

---\\ Logiciels d'optimisation du système

---\\ Logiciels de partage PeerToPeer

---\\ Surveillance de Logiciels

---\\ Informations sur le système
~ Processor: Intel64 Family 6 Model 58 Stepping 9, GenuineIntel
~ Operating System: 64 Bits
Boot mode: Normal (Normal boot)
Total RAM: 6099 MB (73% free)
System Restore: Activé (Enable)
System drive C: has 693 GB (75%) free of 913 GB

---\\ Mode de connexion au système
~ Computer Name: COUCOU
~ User Name: Christophe
~ All Users Names: UpdatusUser, HomeGroupUser$, Christophe, Administrateur, 
~ Unselected Option: O45,O61,O62,O65,O66,O80,O82,O89
Logged in as Administrator

---\\ Variables d'environnement
~ System Unit : C:\
~ %AppZHP% : C:\Users\christophe\AppData\Roaming\ZHP\
~ %AppData% : C:\Users\christophe\AppData\Roaming\
~ %Desktop% : C:\Users\christophe\Desktop\
~ %Favorites% : C:\Users\christophe\Pictures\Music\Favorites\
~ %LocalAppData% : C:\Users\christophe\AppData\Local\
~ %StartMenu% : C:\Users\christophe\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\

---\\ Enumération des unités disques
C: Hard drive, Flash drive, Thumb drive (Free 693 Go of 913 Go)
D: Hard drive, Flash drive, Thumb drive (Free 2 Go of 17 Go)
E: CD-ROM drive (Not Inserted)
F: Floppy drive, Flash card reader, USB Key (Not Inserted)
G: Floppy drive, Flash card reader, USB Key (Free 1 Go of 1 Go)



---\\ Etat du Centre de Sécurité Windows
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: Modified
~ Security Center: 46 Legitimates Filtered in 00mn 00s



---\\ Recherche particulière de fichiers génériques
[MD5.0E8E6463F81C80AFBED533E0F1F8895D] - (.Microsoft Corporation - Explorateur Windows.) (.01/06/2013 - 12:34:21.) -- C:\Windows\Explorer.exe [2391280]
[MD5.FE9AB232B56A12224E8A3F3F9878C9A3] - (.Microsoft Corporation - Application de démarrage de Windows.) (.26/07/2012 - 04:08:50.) -- C:\Windows\System32\Wininit.exe [132608]
[MD5.1AE81E63F2B5030C874E89E5E667AAEC] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.21/04/2015 - 14:53:34.) -- C:\Windows\System32\wininet.dll [2237440]
[MD5.75DD70A14145499C9F7D903CF9A8C91B] - (.Microsoft Corporation - Application d’ouverture de session Windows.) (.12/04/2014 - 10:10:31.) -- C:\Windows\System32\Winlogon.exe [578048]
[MD5.9448F5740A037EC0C18F0E9177232DD0] - (.Microsoft Corporation - Bibliothèque de licences.) (.26/07/2012 - 04:07:20.) -- C:\Windows\System32\sppcomapi.dll [273408]
[MD5.FE7FB9612D354EB41DF4F0FF5D6FB259] - (.Microsoft Corporation - Pilote de fonction connexe pour WinSock.) (.29/05/2014 - 23:24:46.) -- C:\Windows\system32\Drivers\AFD.sys [576512]
[MD5.A721FF570C2387E383BDDEA9632863C9] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.26/07/2012 - 06:00:48.) -- C:\Windows\system32\Drivers\atapi.sys [25840]
[MD5.990B1BABE6E81FB18E65A87EBEFB1772] - (.Microsoft Corporation - CD-ROM File System Driver.) (.26/07/2012 - 03:30:10.) -- C:\Windows\system32\Drivers\Cdfs.sys [108544]
[MD5.339BFF85D788268752DA8C9644B188EE] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.26/07/2012 - 03:26:36.) -- C:\Windows\system32\Drivers\Cdrom.sys [174080]
[MD5.431141C6859990824D17F71C30A78728] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.16/01/2014 - 00:42:58.) -- C:\Windows\system32\Drivers\DfsC.sys [118784]
[MD5.58CC013EFA9893057160EDA018D8ADCE] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.15/07/2014 - 23:51:05.) -- C:\Windows\system32\Drivers\HDAudBus.sys [71168]
[MD5.C9E9CBF73AFFBFE3E801EFB516787BA3] - (.Microsoft Corporation - Pilote de port i8042.) (.26/07/2012 - 03:28:51.) -- C:\Windows\system32\Drivers\i8042prt.sys [112640]
[MD5.3969B9C218DD3FAA9F4ED2FFC3651C02] - (.Microsoft Corporation - IP Network Address Translator.) (.26/07/2012 - 03:23:01.) -- C:\Windows\system32\Drivers\IpNat.sys [145920]
[MD5.14EE56050E1637926F5CFA65B1F4209B] - (.Microsoft Corporation - Minirdr SMB Windows NT.) (.12/07/2014 - 05:34:34.) -- C:\Windows\system32\Drivers\MRxSmb.sys [404480]
[MD5.7CEC25C682D319D484630B3952C31A11] - (.Microsoft Corporation - MBT Transport driver.) (.26/07/2012 - 03:24:28.) -- C:\Windows\system32\Drivers\netBT.sys [331776]
[MD5.7BE3EDFFA3216F989A6BDCB14795DD08] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.27/01/2014 - 04:39:40.) -- C:\Windows\system32\Drivers\ntfs.sys [1939288]
[MD5.4563DAF8C6A740AD7F501E219BD10766] - (.Microsoft Corporation - Pilote de port parallèle.) (.26/07/2012 - 03:29:53.) -- C:\Windows\system32\Drivers\Parport.sys [105984]
[MD5.A14D625C5AEE5FFE0F47D1A1D419FAAE] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.26/07/2012 - 03:23:17.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [124928]
[MD5.B2A3AD74FF2E2FFA73AF2567108231B3] - (.Microsoft Corporation - Redirecteur de périphérique de Microsoft RDP.) (.26/07/2012 - 03:25:18.) -- C:\Windows\system32\Drivers\rdpdr.sys [179712]
[MD5.73DC722CE5DF26D7638CE2446F2655C7] - (.Microsoft Corporation - TDI Translation Driver.) (.26/07/2012 - 06:26:47.) -- C:\Windows\system32\Drivers\tdx.sys [117248]
[MD5.AA37946941ED3805AB3A924965907147] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.04/07/2014 - 11:52:10.) -- C:\Windows\system32\Drivers\volsnap.sys [328000]
~ Generic Processes:  Scanned in 00mn 00s



---\\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 2/14169
~ Mes musiques (My Musics) : 1/4334
~ Mes Videos (My Videos) : 1/286
~ Mes Favoris (My Favorites) : 1/10
~ Mes Documents (My Documents) : 1/6179
~ Mon Bureau (My Desktop) : 6/428
~ Menu demarrer (Programs) : 1/29
~ Hidden Files:  Scanned in 00mn 22s



---\\ Processus lancés
[MD5.67C9D67804DFF9E81DA60E3CF0DAB81D] - (.Client Connect LTD - Search Protect.) -- C:\Program Files (x86)\SearchProtect\SearchProtect\bin\cltmng.exe   [4496144] [PID.13004]  =>PUP.SearchProtect
[MD5.75CC280B30CBF0A6E067EE5BA89A4B65] - (.Client Connect LTD - Search Protect.) -- C:\Program Files (x86)\SearchProtect\UI\bin\cltmngui.exe   [3241232] [PID.13028]  =>PUP.SearchProtect
[MD5.FC30898FFC90157CE6834ACD4F6AD10E] - (.Pas de propriétaire - Prompt.) -- C:\ProgramData\Browser\prompt.exe   [82184] [PID.10628]
[MD5.0EEC138D5705D980C61D3A6A95C23777] - (...) -- C:\Users\christophe\AppData\Local\gmsd_fr_002020005\upgmsd_fr_002020005.exe   [3324072] [PID.14276]  =>PUP.CrossRider
[MD5.61E22A327D20737529E5DDAD904BDD7B] - (.Microsoft Corporation - COM Surrogate.) -- C:\WINDOWS\SysWOW64\DllHost.exe   [8704] [PID.9016]
[MD5.C2972E9D04508680C9D373F1E93C80AC] - (.Pas de propriétaire - geiatoxi.) -- C:\ProgramData\Ovasrujoenohn\1.0.1.0\geiatoxi.exe   [161280] [PID.4164]
[MD5.724CB7A116F7E1A67009D751BCF86586] - (.CyberLink - CyberLink MediaLibray Service.) -- c:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe   [111120] [PID.12132]
[MD5.6BCFCFA512A003A8043CF2F370B0B479] - (.Crossbrowse - Crossbrowse.) -- C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe   [637440] [PID.10524]  =>PUP.CrossBrowser
[MD5.153F088DFDB3F940AD9DAEB04A3ACC4D] - (.SoftBrain Technologies Ltd. - SmartWeb helper.) -- C:\Users\christophe\AppData\Local\SmartWeb\SmartWebHelper.exe   [270368] [PID.3108]  =>PUP.SmartWeb
[MD5.44069C2AC699C8DAD80A96FB1C8DFE57] - (.SoftBrain Technologies Ltd. - SmartWeb Application.) -- C:\Users\christophe\AppData\Local\SmartWeb\SmartWebApp.exe   [557088] [PID.13796]  =>PUP.SmartWeb
[MD5.7E212E742BF06BF678AE35E9C1B74B8F] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe   [6212920] [PID.10136]
[MD5.E7B58CE9BD61BF575E2880088F4E5447] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe   [8218112] [PID.11268]
~ Processes Running:  Scanned in 00mn 00s



---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
C:\Users\Christophe\AppData\Local\Google\Chrome\User Data\Default\Preferences

---\\ Liste des dossiers d'extension Google Chrome
~ Google Lines Browser: 23 Legitimates Filtered in 00mn 00s



---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.mystartsearch.com  =>PUP.StartSearch
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.mystartsearch.com  =>PUP.StartSearch
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.mystartsearch.com  =>PUP.StartSearch
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mystartsearch.com  =>PUP.StartSearch
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.mystartsearch.com  =>PUP.StartSearch
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.mystartsearch.com  =>PUP.StartSearch
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mystartsearch.com  =>PUP.StartSearch
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.mystartsearch.com  =>PUP.StartSearch
~ IE Browser: 16 Legitimates Filtered in 00mn 00s



---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Proxy management:  Scanned in 00mn 00s



---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
~ Keys:  Scanned in 00mn 00s



---\\ Hosts file redirection (O1)
~ Le fichier hôte est sain (The hosts file is clean) (21)
~ Hosts File:  Scanned in 00mn 00s



---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: youtubeadblocker [64Bits] - {4029B397-87CE-4BEB-9236-67557A9007CC} . (...) -- C:\Program Files (x86)\youtubeadblocker\xv4W93i1wXRSVT.dll  =>PUP.YouTubeAdBlock
O2 - BHO: LuckyTab Class [64Bits] - {51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F} . (.Thinknice Co. Limited - SupTab setup package.) -- C:\Program Files (x86)\MiuiTab\SupTab.dll  =>PUP.LuckyTab
O2 - BHO: PrieceLess [64Bits] - {8B5D2FB9-741B-4E82-B1CB-0D0A98413CDE} . (...) -- C:\Program Files (x86)\PrieceLess\0RyuNNl3CtvV2M.dll  =>PUP.PriceLess
~ BHO: 6 Legitimates Filtered in 00mn 00s



---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} Clé orpheline
~ Toolbar:  Scanned in 00mn 00s



---\\ Autres liens utilisateurs (O4)
O4 - GS\Desktop [Public]: Crossbrowse.lnk . (.Crossbrowse - Crossbrowse.)  -- C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe   =>PUP.CrossBrowser
O4 - GS\Desktop [Public]: Search.lnk . (.Crossbrowse - Crossbrowse.)  -- C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe http://google.com  =>PUP.CrossBrowser
O4 - GS\QuickLaunch [Christophe]: Crossbrowse.lnk . (.Crossbrowse - Crossbrowse.)  -- C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe   =>PUP.CrossBrowser
O4 - GS\QuickLaunch [Christophe]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files\Internet Explorer\iexplore.exe http://www.mystartsearch.com  =>PUP.StartSearch
O4 - GS\TaskBar [Christophe]: Crossbrowse.lnk . (.Crossbrowse - Crossbrowse.)  -- C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe   =>PUP.CrossBrowser
O4 - GS\TaskBar [Christophe]: Search Protect.lnk . (.Client Connect LTD - Search Protect.)  -- C:\Program Files (x86)\SearchProtect\SearchProtect\bin\cltmng.exe   =>PUP.SearchProtect
O4 - GS\Desktop [Christophe]: Continue GamesDesktop Uninstaller.lnk . (...)  -- C:\Users\christophe\AppData\Local\Temp\is-5CKL3.tmp\SOLUN.exe (.not file.)  =>Adware.GamesDesktop
O4 - GS\Desktop [Christophe]: Continue Live Installation.lnk . (...)  -- C:\Users\christophe\AppData\Local\Temp\ICReinstall_nsn3BF4.tmp  \RR (.not file.)  =>PUP.ContinueLiveInstallation
O4 - GS\Desktop [Christophe]: PepperZip.lnk . (...)  -- C:\Program Files (x86)\PepperZip\PepperZip.exe  =>PUP.PepperZip
~ Global Startup: 13 Legitimates Filtered in 00mn 00s



---\\ Applications lancées au démarrage du système (O4)
O4 - GS\Startup [Christophe]: crossbrowse.lnk . (.Crossbrowse - Crossbrowse.)  -- C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe   =>PUP.CrossBrowser
O4 - GS\Startup [Christophe]: SmartWeb.lnk . (.SoftBrain Technologies Ltd. - SmartWeb helper.)  -- C:\Users\christophe\AppData\Local\SmartWeb\SmartWebHelper.exe   =>PUP.SmartWeb
O4 - HKLM\..\Run: [BeatsOSDApp] . (.Hewlett-Packard - HP Beats.) -- C:\Program Files\IDT\WDM\beats64.exe 
O4 - HKLM\..\Run: [SysTrayApp] . (.IDT, Inc. - IDT PC Audio.) -- C:\Program Files\IDT\WDM\sttray64.exe 
O4 - HKCU\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Users\christophe\AppData\Local\Google\Update\GoogleUpdate.exe   =>.Google Inc
O4 - HKCU\..\Run: [GoogleChromeAutoLaunch_339ED38F57D780C8403C59409336269D] . (.Google Inc. - Google Chrome.) -- C:\Users\christophe\AppData\Local\Google\Chrome\Application\chrome.exe 
O4 - HKCU\..\Run: [EPLTarget\P0000000000000000] . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YATINFE.exe   =>.Epson Seiko Corporation
O4 - HKCU\..\Run: [GoogleChromeAutoLaunch_A22D944B006926E355B04829311172EB] . (.Crossbrowse - Crossbrowse.) -- C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe   =>PUP.CrossBrowser
O4 - HKCU\..\Run: [Bubble Dock] . (.Nosibay - Bubble Dock.) -- C:\Users\christophe\AppData\Roaming\Nosibay\Bubble Dock\LBubble Dock.exe   =>PUP.BubbleDock
O4 - HKCU\..\Run: [WindApp] C:\Users\christophe\AppData\Roaming\Store\WindApp\WindApp.exe (.not file.)   =>PUP.Nosibay
O4 - HKCU\..\Run: [Selection Tools] . (.Nosibay - Selection Tools.) -- C:\Users\christophe\AppData\Roaming\WTools\Selection Tools\Selection Tools.exe   =>PUP.Nosibay
O4 - HKLM\..\Wow6432Node\Run: [MovieDea] . (.MovieDea - MovieDea.) -- C:\Program Files (x86)\MovieDea\MovieDea.exe   =>PUP.MovieDea
O4 - HKLM\..\Wow6432Node\Run: [WinCheck] . (...) -- C:\Users\christophe\AppData\Local\FEF4F24B-1434475377-BB9E-BBEB-74FFC6ABE3AF\bnsr1DEC.exe   =>PUP.Wincheck
O4 - HKLM\..\Wow6432Node\Run: [gmsd_fr_002010003] Clé orpheline  =>PUP.CrossRider
O4 - HKLM\..\Wow6432Node\Run: [SmartWeb] . (.SoftBrain Technologies Ltd. - SmartWeb helper.) -- C:\Users\christophe\AppData\Local\SmartWeb\SmartWebHelper.exe   =>PUP.SmartWeb
O4 - HKLM\..\Wow6432Node\Run: [gmsd_fr_005010005] Clé orpheline  =>PUP.CrossRider
O4 - HKLM\..\Wow6432Node\Run: [gmsd_fr_002020005] . (...) -- C:\Program Files (x86)\gmsd_fr_002020005\gmsd_fr_002020005.exe   =>PUP.CrossRider
O4 - HKLM\..\Wow6432Node\RunOnce: [upgmsd_fr_002020005.exe] . (...) -- C:\Users\christophe\AppData\Local\gmsd_fr_002020005\upgmsd_fr_002020005.exe   =>PUP.CrossRider
O4 - HKLM\..\Wow6432Node\RunOnce: [Update] . (...) -- C:\Users\christophe\AppData\Roaming\VOPackage\VOPackage.exe   =>Adware.Downware
O4 - HKUS\S-1-5-21-1148229761-1806435792-437759352-1001\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Users\christophe\AppData\Local\Google\Update\GoogleUpdate.exe   =>.Google Inc
O4 - HKUS\S-1-5-21-1148229761-1806435792-437759352-1001\..\Run: [GoogleChromeAutoLaunch_339ED38F57D780C8403C59409336269D] . (.Google Inc. - Google Chrome.) -- C:\Users\christophe\AppData\Local\Google\Chrome\Application\chrome.exe 
O4 - HKUS\S-1-5-21-1148229761-1806435792-437759352-1001\..\Run: [EPLTarget\P0000000000000000] . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YATINFE.exe   =>.Epson Seiko Corporation
O4 - HKUS\S-1-5-21-1148229761-1806435792-437759352-1001\..\Run: [GoogleChromeAutoLaunch_A22D944B006926E355B04829311172EB] . (.Crossbrowse - Crossbrowse.) -- C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe   =>PUP.CrossBrowser
O4 - HKUS\S-1-5-21-1148229761-1806435792-437759352-1001\..\Run: [Bubble Dock] . (.Nosibay - Bubble Dock.) -- C:\Users\christophe\AppData\Roaming\Nosibay\Bubble Dock\LBubble Dock.exe   =>PUP.BubbleDock
O4 - HKUS\S-1-5-21-1148229761-1806435792-437759352-1001\..\Run: [WindApp] C:\Users\christophe\AppData\Roaming\Store\WindApp\WindApp.exe (.not file.)   =>PUP.Nosibay
O4 - HKUS\S-1-5-21-1148229761-1806435792-437759352-1001\..\Run: [Selection Tools] . (.Nosibay - Selection Tools.) -- C:\Users\christophe\AppData\Roaming\WTools\Selection Tools\Selection Tools.exe   =>PUP.Nosibay
~ Application:  Scanned in 00mn 00s



---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{2607C285-179C-4AE4-A88B-C74A7CDE8074}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{32006A92-DF90-41D6-BFC9-3631A5F92A8D}: DhcpDomain = sgt.automation.net
O17 - HKLM\System\CS1\Services\Tcpip\..\{2607C285-179C-4AE4-A88B-C74A7CDE8074}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{32006A92-DF90-41D6-BFC9-3631A5F92A8D}: DhcpDomain = sgt.automation.net
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
~ Domain:  Scanned in 00mn 00s



---\\ Protocole additionnel (O18)
O18 - Handler: wlpg [64Bits] - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (...) -- 
O18 - Filter: text/xml [64Bits] - {807553E5-5146-11D5-A672-00B0D022E945} . (...) -- 
~ Protocole Additionnel:  Scanned in 00mn 00s



---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - AppInit_DLLs: . (.Client Connect LTD - Search Protect.) - C:\Program Files (x86)\SEARCH~1\SEARCH~1\bin\VC64LO~1.dll  =>PUP.SearchProtect
~ AppInit DLL:  Scanned in 00mn 00s



---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: CutterGeneration (3621a1ae) . (...) - c:\Program Files (x86)\CutterGeneration\CutterGeneration.dll
O23 - Service: abengine (abengine) . (.Abengine - Pas de description.) - C:\Program Files (x86)\HighlightSearches\abengine.exe  =>PUP.HighlightSearches
O23 - Service: Search Protect Service (CltMngSvc) . (.Client Connect LTD - Search Protect.) - C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe  =>PUP.SearchProtect
O23 - Service: CoupoonService64 (CoupoonService64) . (...) - C:\Program Files (x86)\coupoon\iiwjljrnpc64.exe
O23 - Service: globalUpdate Update Service (globalUpdate) (globalUpdate) . (.globalUpdate - globalUpdate Update.) - C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe  =>PUP.GlobalUpdate
O23 - Service: IHProtect Service (IHProtect Service) . (.XTab system - ProtectSvc.exe.) - C:\Program Files (x86)\MiuiTab\ProtectService.exe  =>PUP.MiuiTab
O23 - Service: Infonaut 1.10.0.14 Client Service (insvc_1.10.0.14) . (.Infonaut - Infonaut Client Service.) - C:\Program Files (x86)\Infonaut_1.10.0.14\Service\insvc.exe  =>PUP.Infonaut
O23 - Service: Template Flatbed Scanner (kysykiti) . (...) - C:\Users\christophe\AppData\Local\FEF4F24B-1434475514-BB9E-BBEB-74FFC6ABE3AF\snsk2E6C.tmp
O23 - Service: Operation Data Input (lofilysy) . (...) - C:\Users\christophe\AppData\Roaming\FEF4F24B-1434468119-BB9E-BBEB-74FFC6ABE3AF\knsj834C.tmp
O23 - Service: mylz (mylz) . (...) - c:\windows\mylz.exe
O23 - Service: onpvhvQFDl (onpvhvQFDl) . (.Useful Technology - BreakingNewsAlert Service.) - C:\ProgramData\oKrTikoXqmk\onpvhvQFDl.exe  =>PUP.BreakingNewsAlert
O23 - Service: SC 1.10.0.16 Client Service (scsvc_1.10.0.16) . (.SuperClick - SC Client Service.) - C:\Program Files (x86)\SuperClick_1.10.0.16\Service\scsvc.exe  =>PUP.SuperClick
O23 - Service: UpdateCheck (UpdateCheck) . (...) - C:\Program Files (x86)\Coupoon\UpdateCheck.exe
O23 - Service: WindowsMangerProtect Service (WindowsMangerProtect) . (.DTools LIMITED - Windows DTools.) - C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe  =>PUP.Fuyu
O23 - Service: Device Cut (xoperoze) . (...) - C:\Users\christophe\AppData\Roaming\FEF4F24B-1434468119-BB9E-BBEB-74FFC6ABE3AF\jnsoA241.tmp
O23 - Service: ylz (ylz) . (...) - c:\windows\ylz.exe
O23 - Service: Subscription Clear (zedepory) . (...) - C:\Users\christophe\AppData\Roaming\FEF4F24B-1434468119-BB9E-BBEB-74FFC6ABE3AF\hnsmC4AF.tmp
~ Services: 29 Legitimates Filtered in 00mn 02s



---\\ Tâches planifiées en automatique (O39)
[MD5.CEE2B4BBE76740FE675EEAA87F035914] [APT] [629c710f-b5af-48f5-b1f2-c42563ded208-1-6] (.Cinema PlusV17.06.) -- C:\Program Files (x86)\CinemaPlus-3.2cV17.06\629c710f-b5af-48f5-b1f2-c42563ded208-1-6.exe   [1548880]  =>PUP.CrossRider
[MD5.F91BD36F5D641B6D81B0CA5A7C550905] [APT] [629c710f-b5af-48f5-b1f2-c42563ded208-1-7] (.Cinema PlusV17.06.) -- C:\Program Files (x86)\CinemaPlus-3.2cV17.06\629c710f-b5af-48f5-b1f2-c42563ded208-1-7.exe   [1153616]  =>PUP.CrossRider
[MD5.AAE9B03834488F73B648E2D5CB3C6195] [APT] [629c710f-b5af-48f5-b1f2-c42563ded208-10_user] (.Cinema PlusV17.06.) -- C:\Program Files (x86)\CinemaPlus-3.2cV17.06\629c710f-b5af-48f5-b1f2-c42563ded208-10.exe   [1584720]  =>PUP.CrossRider
[MD5.1AFAE28D3B646A7F3B4DF4EEADE92451] [APT] [629c710f-b5af-48f5-b1f2-c42563ded208-3] (.Cinema PlusV17.06.) -- C:\Program Files (x86)\CinemaPlus-3.2cV17.06\629c710f-b5af-48f5-b1f2-c42563ded208-3.exe   [1482832]  =>PUP.CrossRider
[MD5.504066A256FA29B3119E8FC75CC599B1] [APT] [629c710f-b5af-48f5-b1f2-c42563ded208-5] (.Cinema PlusV17.06.) -- C:\Program Files (x86)\CinemaPlus-3.2cV17.06\629c710f-b5af-48f5-b1f2-c42563ded208-5.exe   [1099856]  =>PUP.CrossRider
[MD5.504066A256FA29B3119E8FC75CC599B1] [APT] [629c710f-b5af-48f5-b1f2-c42563ded208-5_user] (.Cinema PlusV17.06.) -- C:\Program Files (x86)\CinemaPlus-3.2cV17.06\629c710f-b5af-48f5-b1f2-c42563ded208-5.exe   [1099856]  =>PUP.CrossRider
[MD5.1ECA0323DE6CEEAEC4D8DF23DD6A9C1C] [APT] [629c710f-b5af-48f5-b1f2-c42563ded208-6] (.Cinema PlusV17.06.) -- C:\Program Files (x86)\CinemaPlus-3.2cV17.06\629c710f-b5af-48f5-b1f2-c42563ded208-6.exe   [1347152]  =>PUP.CrossRider
[MD5.F91BD36F5D641B6D81B0CA5A7C550905] [APT] [629c710f-b5af-48f5-b1f2-c42563ded208-7] (.Cinema PlusV17.06.) -- C:\Program Files (x86)\CinemaPlus-3.2cV17.06\629c710f-b5af-48f5-b1f2-c42563ded208-7.exe   [1153616]  =>PUP.CrossRider
[MD5.8F2072A82910E649893E10B9139B2860] [APT] [avabvbavad] (...) -- C:\Users\Christophe\AppData\Local\avabvbavad\avabvbavad.exe   [2135552]  =>Adware.Pirrit
[MD5.1FC51C6804F5CF1D3EA882DAF63BCAF6] [APT] [Bidaily Synchronize Task[973b]] (...) -- c:\programdata\{33d4e648-0d58-5e4f-33d4-4e6480d59920}\setup_668.exe   [197632]  =>PUP.BidailySync
[MD5.20393A94CDF086E897BB26CF3018E768] [APT] [Crossbrowse] (...) -- C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\utility.exe   [1918040]  =>PUP.CrossBrowser
[MD5.7796FC41D63D97568520D9581A25944E] [APT] [DBJXMQ1] (.FlashBeat.) -- C:\ProgramData\FlashBeat\FlashBeat.exe   [707584]  =>PUP.FlashBeat
[MD5.5E615C7FBC97751DAC5B75DA89334F77] [APT] [de8d36cd-2c45-4ecf-8573-62a63b02a5db-1-6] (.Cinema PlusV16.06.) -- C:\Program Files (x86)\CinemaPlus-4.1vV16.06\de8d36cd-2c45-4ecf-8573-62a63b02a5db-1-6.exe   [1495632]  =>PUP.CrossRider
[MD5.2B3E22300BC45E8E6086944BAC284DD5] [APT] [de8d36cd-2c45-4ecf-8573-62a63b02a5db-1-7] (.Cinema PlusV16.06.) -- C:\Program Files (x86)\CinemaPlus-4.1vV16.06\de8d36cd-2c45-4ecf-8573-62a63b02a5db-1-7.exe   [1067600]  =>PUP.CrossRider
[MD5.5E07985731248E2804ADFC43BE708E5B] [APT] [de8d36cd-2c45-4ecf-8573-62a63b02a5db-10_user] (.Cinema PlusV16.06.) -- C:\Program Files (x86)\CinemaPlus-4.1vV16.06\de8d36cd-2c45-4ecf-8573-62a63b02a5db-10.exe   [1223760]  =>PUP.CrossRider
[MD5.2E487E9244CE5E63C69E86703257C6F0] [APT] [de8d36cd-2c45-4ecf-8573-62a63b02a5db-3] (.Cinema PlusV16.06.) -- C:\Program Files (x86)\CinemaPlus-4.1vV16.06\de8d36cd-2c45-4ecf-8573-62a63b02a5db-3.exe   [1395280]  =>PUP.CrossRider
[MD5.5BBF8D492AAEF73036BC661ABBE7B06C] [APT] [de8d36cd-2c45-4ecf-8573-62a63b02a5db-5] (.Cinema PlusV16.06.) -- C:\Program Files (x86)\CinemaPlus-4.1vV16.06\de8d36cd-2c45-4ecf-8573-62a63b02a5db-5.exe   [1117776]  =>PUP.CrossRider
[MD5.5BBF8D492AAEF73036BC661ABBE7B06C] [APT] [de8d36cd-2c45-4ecf-8573-62a63b02a5db-5_user] (.Cinema PlusV16.06.) -- C:\Program Files (x86)\CinemaPlus-4.1vV16.06\de8d36cd-2c45-4ecf-8573-62a63b02a5db-5.exe   [1117776]  =>PUP.CrossRider
[MD5.64093D7008AD5CA52180AB278E318648] [APT] [de8d36cd-2c45-4ecf-8573-62a63b02a5db-6] (.Cinema PlusV16.06.) -- C:\Program Files (x86)\CinemaPlus-4.1vV16.06\de8d36cd-2c45-4ecf-8573-62a63b02a5db-6.exe   [1408080]  =>PUP.CrossRider
[MD5.2B3E22300BC45E8E6086944BAC284DD5] [APT] [de8d36cd-2c45-4ecf-8573-62a63b02a5db-7] (.Cinema PlusV16.06.) -- C:\Program Files (x86)\CinemaPlus-4.1vV16.06\de8d36cd-2c45-4ecf-8573-62a63b02a5db-7.exe   [1067600]  =>PUP.CrossRider
[MD5.3A1D89B89C9D62951957F0839578DD9B] [APT] [gAWWmr4C116U27SzY4XcQ] (...) -- C:\Users\Christophe\AppData\Roaming\gAWWmr4C116U27SzY4XcQ.exe   [1579520]
[MD5.3C14AAE26EA06BADAC98520773772CEB] [APT] [globalUpdateUpdateTaskMachineCore] (.globalUpdate.) -- C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe   [68608]  =>PUP.GlobalUpdate
[MD5.3C14AAE26EA06BADAC98520773772CEB] [APT] [globalUpdateUpdateTaskMachineUA] (.globalUpdate.) -- C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe   [68608]  =>PUP.GlobalUpdate
[MD5.2DB4E2907D04FEE2633BCD6AE9CDD0BE] [APT] [iren3006] (...) -- C:\Program Files (x86)\HighlightSearches\iren3006.exe   [59986]  =>PUP.HighlightSearches
[MD5.3A1D89B89C9D62951957F0839578DD9B] [APT] [kdmhCTydrVA5XW] (...) -- C:\Users\Christophe\AppData\Roaming\kdmhCTydrVA5XW.exe   [1579520]
[MD5.00000000000000000000000000000000] [APT] [MaxComputerCleaner_Start] (...) -- C:\Program Files (x86)\Max Computer Cleaner\MaxComputerCleaner.exe (.not file.)   [0]  =>PUP.MaxComputerCleaner
[MD5.C2972E9D04508680C9D373F1E93C80AC] [APT] [Ovasrujoenohn] (...) -- C:\ProgramData\Ovasrujoenohn\1.0.1.0\geiatoxi.exe   [161280]
[MD5.00000000000000000000000000000000] [APT] [PostPoneInstall] (...) -- C:\Users\Christophe\AppData\Local\Temp\ce98ac2e-20c0-4a93-86f6-bdb3e61caf55.exe (.not file.)   [0]
[MD5.00000000000000000000000000000000] [APT] [Run_Bobby_Browser] (...) -- C:\Users\Christophe\AppData\Local\BoBrowser\Application\bobrowser.exe (.not file.)   [0]  =>PUP.BoBrowser
[MD5.B12E1E78D09BB37D9C2BC10CB59915FA] [APT] [Selection Tools Update] (.Nosibay.) -- C:\Users\Christophe\AppData\Roaming\WTools\Selection Tools\Selection Tools Update.exe   [165072]  =>PUP.Nosibay
[MD5.9EC357EC1D412F48194DF5FE0C6D13B7] [APT] [SuperClick Auto Updater 1.10.0.16 Core] (.SuperClick.) -- C:\Program Files (x86)\SuperClick_1.10.0.16\Update\SuperClickAutoUpdateClient.exe   [59480]  =>PUP.SuperClick
[MD5.9EC357EC1D412F48194DF5FE0C6D13B7] [APT] [SuperClick Auto Updater 1.10.0.16 Pending Update] (.SuperClick.) -- C:\Program Files (x86)\SuperClick_1.10.0.16\Update\SuperClickAutoUpdateClient.exe   [59480]  =>PUP.SuperClick
[MD5.4B20F56017947856D400F403C0852BA8] [APT] [WindApp Update] (.Nosibay.) -- C:\Users\Christophe\AppData\Roaming\Store\WindApp\WindApp Update.exe   [165112]  =>PUP.Nosibay
[MD5.3A1D89B89C9D62951957F0839578DD9B] [APT] [xZrVtuHMnGwUoZ8MQY] (...) -- C:\Users\Christophe\AppData\Roaming\xZrVtuHMnGwUoZ8MQY.exe   [1579520]
[MD5.BE87A60333C5848911C3CA839F190720] [APT] [ZFPJSEUK] (...) -- C:\ProgramData\6e589a01ba0f4c4e96fed4b4f5d233ce\6e589a01ba0f4c4e96fed4b4f5d233ce.exe   [276992]
O39 - APT: 629c710f-b5af-48f5-b1f2-c42563ded208-1-6 - (.Cinema PlusV17.06.) -- C:\Windows\Tasks\629c710f-b5af-48f5-b1f2-c42563ded208-1-6.job   [3162]  =>PUP.CrossRider
O39 - APT: 629c710f-b5af-48f5-b1f2-c42563ded208-1-6 - (.Cinema PlusV17.06.) -- C:\Windows\System32\Tasks\629c710f-b5af-48f5-b1f2-c42563ded208-1-6   [3162]  =>PUP.CrossRider
O39 - APT: 629c710f-b5af-48f5-b1f2-c42563ded208-1-7 - (.Cinema PlusV17.06.) -- C:\Windows\Tasks\629c710f-b5af-48f5-b1f2-c42563ded208-1-7.job   [3162]  =>PUP.CrossRider
O39 - APT: 629c710f-b5af-48f5-b1f2-c42563ded208-1-7 - (.Cinema PlusV17.06.) -- C:\Windows\System32\Tasks\629c710f-b5af-48f5-b1f2-c42563ded208-1-7   [3162]  =>PUP.CrossRider
O39 - APT: 629c710f-b5af-48f5-b1f2-c42563ded208-10_user - (.Cinema PlusV17.06.) -- C:\Windows\Tasks\629c710f-b5af-48f5-b1f2-c42563ded208-10_user.job   [2136]  =>PUP.CrossRider
O39 - APT: 629c710f-b5af-48f5-b1f2-c42563ded208-10_user - (.Cinema PlusV17.06.) -- C:\Windows\System32\Tasks\629c710f-b5af-48f5-b1f2-c42563ded208-10_user   [2136]  =>PUP.CrossRider
O39 - APT: 629c710f-b5af-48f5-b1f2-c42563ded208-3 - (.Cinema PlusV17.06.) -- C:\Windows\Tasks\629c710f-b5af-48f5-b1f2-c42563ded208-3.job   [4182]  =>PUP.CrossRider
O39 - APT: 629c710f-b5af-48f5-b1f2-c42563ded208-3 - (.Cinema PlusV17.06.) -- C:\Windows\System32\Tasks\629c710f-b5af-48f5-b1f2-c42563ded208-3   [4182]  =>PUP.CrossRider
O39 - APT: 629c710f-b5af-48f5-b1f2-c42563ded208-5 - (.Cinema PlusV17.06.) -- C:\Windows\Tasks\629c710f-b5af-48f5-b1f2-c42563ded208-5.job   [2470]  =>PUP.CrossRider
O39 - APT: 629c710f-b5af-48f5-b1f2-c42563ded208-5 - (.Cinema PlusV17.06.) -- C:\Windows\System32\Tasks\629c710f-b5af-48f5-b1f2-c42563ded208-5   [2470]  =>PUP.CrossRider
O39 - APT: 629c710f-b5af-48f5-b1f2-c42563ded208-5_user - (.Cinema PlusV17.06.) -- C:\Windows\Tasks\629c710f-b5af-48f5-b1f2-c42563ded208-5_user.job   [2470]  =>PUP.CrossRider
O39 - APT: 629c710f-b5af-48f5-b1f2-c42563ded208-5_user - (.Cinema PlusV17.06.) -- C:\Windows\System32\Tasks\629c710f-b5af-48f5-b1f2-c42563ded208-5_user   [2470]  =>PUP.CrossRider
O39 - APT: 629c710f-b5af-48f5-b1f2-c42563ded208-6 - (.Cinema PlusV17.06.) -- C:\Windows\Tasks\629c710f-b5af-48f5-b1f2-c42563ded208-6.job   [5542]  =>PUP.CrossRider
O39 - APT: 629c710f-b5af-48f5-b1f2-c42563ded208-6 - (.Cinema PlusV17.06.) -- C:\Windows\System32\Tasks\629c710f-b5af-48f5-b1f2-c42563ded208-6   [5542]  =>PUP.CrossRider
O39 - APT: 629c710f-b5af-48f5-b1f2-c42563ded208-7 - (.Cinema PlusV17.06.) -- C:\Windows\Tasks\629c710f-b5af-48f5-b1f2-c42563ded208-7.job   [5206]  =>PUP.CrossRider
O39 - APT: 629c710f-b5af-48f5-b1f2-c42563ded208-7 - (.Cinema PlusV17.06.) -- C:\Windows\System32\Tasks\629c710f-b5af-48f5-b1f2-c42563ded208-7   [5206]  =>PUP.CrossRider
O39 - APT:  - (..) -- C:\Windows\Tasks\Bidaily Synchronize Task[3c32].job   [364]  =>PUP.BidailySync
O39 - APT:  - (..) -- C:\Windows\System32\Tasks\Bidaily Synchronize Task[3c32]   [364]  =>PUP.BidailySync
O39 - APT:  - (..) -- C:\Windows\Tasks\Bidaily Synchronize Task[74c7].job   [364]  =>PUP.BidailySync
O39 - APT:  - (..) -- C:\Windows\System32\Tasks\Bidaily Synchronize Task[74c7]   [364]  =>PUP.BidailySync
O39 - APT: Bidaily Synchronize Task[973b] - (...) -- C:\Windows\Tasks\Bidaily Synchronize Task[973b].job   [356]  =>PUP.BidailySync
O39 - APT: Bidaily Synchronize Task[973b] - (...) -- C:\Windows\System32\Tasks\Bidaily Synchronize Task[973b]   [356]  =>PUP.BidailySync
O39 - APT: Crossbrowse - (...) -- C:\Windows\Tasks\Crossbrowse.job   [1080]  =>PUP.CrossBrowser
O39 - APT: Crossbrowse - (...) -- C:\Windows\System32\Tasks\Crossbrowse   [1080]  =>PUP.CrossBrowser
O39 - APT: DBJXMQ1 - (.FlashBeat.) -- C:\Windows\Tasks\DBJXMQ1.job   [354]  =>PUP.FlashBeat
O39 - APT: DBJXMQ1 - (.FlashBeat.) -- C:\Windows\System32\Tasks\DBJXMQ1   [354]  =>PUP.FlashBeat
O39 - APT: de8d36cd-2c45-4ecf-8573-62a63b02a5db-1-6 - (.Cinema PlusV16.06.) -- C:\Windows\Tasks\de8d36cd-2c45-4ecf-8573-62a63b02a5db-1-6.job   [2818]  =>PUP.CrossRider
O39 - APT: de8d36cd-2c45-4ecf-8573-62a63b02a5db-1-6 - (.Cinema PlusV16.06.) -- C:\Windows\System32\Tasks\de8d36cd-2c45-4ecf-8573-62a63b02a5db-1-6   [2818]  =>PUP.CrossRider
O39 - APT: de8d36cd-2c45-4ecf-8573-62a63b02a5db-1-7 - (.Cinema PlusV16.06.) -- C:\Windows\Tasks\de8d36cd-2c45-4ecf-8573-62a63b02a5db-1-7.job   [3162]  =>PUP.CrossRider
O39 - APT: de8d36cd-2c45-4ecf-8573-62a63b02a5db-1-7 - (.Cinema PlusV16.06.) -- C:\Windows\System32\Tasks\de8d36cd-2c45-4ecf-8573-62a63b02a5db-1-7   [3162]  =>PUP.CrossRider
O39 - APT: de8d36cd-2c45-4ecf-8573-62a63b02a5db-10_user - (.Cinema PlusV16.06.) -- C:\Windows\Tasks\de8d36cd-2c45-4ecf-8573-62a63b02a5db-10_user.job   [2136]  =>PUP.CrossRider
O39 - APT: de8d36cd-2c45-4ecf-8573-62a63b02a5db-10_user - (.Cinema PlusV16.06.) -- C:\Windows\System32\Tasks\de8d36cd-2c45-4ecf-8573-62a63b02a5db-10_user   [2136]  =>PUP.CrossRider
O39 - APT: de8d36cd-2c45-4ecf-8573-62a63b02a5db-3 - (.Cinema PlusV16.06.) -- C:\Windows\Tasks\de8d36cd-2c45-4ecf-8573-62a63b02a5db-3.job   [4182]  =>PUP.CrossRider
O39 - APT: de8d36cd-2c45-4ecf-8573-62a63b02a5db-3 - (.Cinema PlusV16.06.) -- C:\Windows\System32\Tasks\de8d36cd-2c45-4ecf-8573-62a63b02a5db-3   [4182]  =>PUP.CrossRider
O39 - APT: de8d36cd-2c45-4ecf-8573-62a63b02a5db-5 - (.Cinema PlusV16.06.) -- C:\Windows\Tasks\de8d36cd-2c45-4ecf-8573-62a63b02a5db-5.job   [2470]  =>PUP.CrossRider
O39 - APT: de8d36cd-2c45-4ecf-8573-62a63b02a5db-5 - (.Cinema PlusV16.06.) -- C:\Windows\System32\Tasks\de8d36cd-2c45-4ecf-8573-62a63b02a5db-5   [2470]  =>PUP.CrossRider
O39 - APT: de8d36cd-2c45-4ecf-8573-62a63b02a5db-5_user - (.Cinema PlusV16.06.) -- C:\Windows\Tasks\de8d36cd-2c45-4ecf-8573-62a63b02a5db-5_user.job   [2470]  =>PUP.CrossRider
O39 - APT: de8d36cd-2c45-4ecf-8573-62a63b02a5db-5_user - (.Cinema PlusV16.06.) -- C:\Windows\System32\Tasks\de8d36cd-2c45-4ecf-8573-62a63b02a5db-5_user   [2470]  =>PUP.CrossRider
O39 - APT: de8d36cd-2c45-4ecf-8573-62a63b02a5db-6 - (.Cinema PlusV16.06.) -- C:\Windows\Tasks\de8d36cd-2c45-4ecf-8573-62a63b02a5db-6.job   [5542]  =>PUP.CrossRider
O39 - APT: de8d36cd-2c45-4ecf-8573-62a63b02a5db-6 - (.Cinema PlusV16.06.) -- C:\Windows\System32\Tasks\de8d36cd-2c45-4ecf-8573-62a63b02a5db-6   [5542]  =>PUP.CrossRider
O39 - APT: de8d36cd-2c45-4ecf-8573-62a63b02a5db-7 - (.Cinema PlusV16.06.) -- C:\Windows\Tasks\de8d36cd-2c45-4ecf-8573-62a63b02a5db-7.job   [5206]  =>PUP.CrossRider
O39 - APT: de8d36cd-2c45-4ecf-8573-62a63b02a5db-7 - (.Cinema PlusV16.06.) -- C:\Windows\System32\Tasks\de8d36cd-2c45-4ecf-8573-62a63b02a5db-7   [5206]  =>PUP.CrossRider
O39 - APT:  - (..) -- C:\Windows\Tasks\EPSON XP-225 Series Update {42564E87-265F-4C97-B005-59155D59BDE5}.job   [933]
O39 - APT:  - (..) -- C:\Windows\System32\Tasks\EPSON XP-225 Series Update {42564E87-265F-4C97-B005-59155D59BDE5}   [933]
O39 - APT: gAWWmr4C116U27SzY4XcQ - (...) -- C:\Windows\Tasks\gAWWmr4C116U27SzY4XcQ.job   [1048]
O39 - APT: gAWWmr4C116U27SzY4XcQ - (...) -- C:\Windows\System32\Tasks\gAWWmr4C116U27SzY4XcQ   [1048]
O39 - APT: globalUpdateUpdateTaskMachineCore - (.globalUpdate.) -- C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job   [994]  =>PUP.GlobalUpdate
O39 - APT: globalUpdateUpdateTaskMachineCore - (.globalUpdate.) -- C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore   [994]  =>PUP.GlobalUpdate
O39 - APT: globalUpdateUpdateTaskMachineUA - (.globalUpdate.) -- C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job   [998]  =>PUP.GlobalUpdate
O39 - APT: globalUpdateUpdateTaskMachineUA - (.globalUpdate.) -- C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineUA   [998]  =>PUP.GlobalUpdate
O39 - APT:  - (..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1148229761-1806435792-437759352-1001Core   [1060]
O39 - APT:  - (..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1148229761-1806435792-437759352-1001UA   [1112]
O39 - APT: kdmhCTydrVA5XW - (...) -- C:\Windows\Tasks\kdmhCTydrVA5XW.job   [1034]
O39 - APT: kdmhCTydrVA5XW - (...) -- C:\Windows\System32\Tasks\kdmhCTydrVA5XW   [1034]
O39 - APT: xZrVtuHMnGwUoZ8MQY - (...) -- C:\Windows\Tasks\xZrVtuHMnGwUoZ8MQY.job   [1042]
O39 - APT: xZrVtuHMnGwUoZ8MQY - (...) -- C:\Windows\System32\Tasks\xZrVtuHMnGwUoZ8MQY   [1042]
~ Scheduled Task: 97 Legitimates Filtered in 00mn 04s



---\\ Pilotes lancés au démarrage du système (O41)
O41 - Driver:  (innfd_1_10_0_14) . (.Infonaut - Infonaut Driver x64.) - C:\Windows\System32\drivers\innfd_1_10_0_14.sys  =>PUP.Infonaut
O41 - Driver:  (netfilter64) . (.NetFilterSDK.com - NetFilter SDK WFP Driver (WPP).) - C:\Windows\System32\drivers\netfilter64.sys
O41 - Driver:  (scfd_1_10_0_16) . (.SuperClick - SC Driver x64.) - C:\Windows\System32\drivers\scfd_1_10_0_16.sys  =>PUP.SuperClick
~ Drivers: 44 Legitimates Filtered in 00mn 00s



---\\ Logiciels installés (O42)
O42 - Logiciel: Book Alter - (.Book Alter.) [HKLM][64Bits] -- SoftwareUpdater  =>PUP.Eorezo
O42 - Logiciel: CinemaPlus-3.2cV17.06 - (.Cinema PlusV17.06.) [HKLM][64Bits] -- CinemaPlus-3.2cV17.06  =>PUP.CrossRider
O42 - Logiciel: CinemaPlus-4.1vV16.06 - (.Cinema PlusV16.06.) [HKLM][64Bits] -- CinemaPlus-4.1vV16.06  =>PUP.CrossRider
O42 - Logiciel: Coupoon version 1.0 - (.Coupoon.) [HKLM][64Bits] -- {49F8B4F8-0CD4-4BE4-A9E8-B13A071F7C90}_is1
O42 - Logiciel: Crossbrowse - (.The Crossbrowse Authors.) [HKLM][64Bits] -- Crossbrowse  =>PUP.CrossBrowser
O42 - Logiciel: FlashBeat - (...) [HKLM][64Bits] -- FlashBeat  =>PUP.FlashBeat
O42 - Logiciel: Honey - (...) [HKLM][64Bits] -- {AD11DADE-C597-45D9-D8C5-1D2EB0B89613}
O42 - Logiciel: Infonaut 1.10.0.14 - (.Infonaut.) [HKLM][64Bits] -- Infonaut_1.10.0.14  =>PUP.Infonaut
O42 - Logiciel: MovieDea 1.0 - (.MovieDea.) [HKLM][64Bits] -- MovieDea  =>PUP.MovieDea
O42 - Logiciel: News Alert - (.Useful Technology.) [HKLM][64Bits] -- BreakingNewsAlert  =>PUP.BreakingNewsAlert
O42 - Logiciel: PrieceLess - (...) [HKLM][64Bits] -- {75F9BF4A-AF67-A478-A37B-31D73186D3F3}  =>PUP.PriceLess
O42 - Logiciel: Search Protect - (.Client Connect LTD.) [HKLM][64Bits] -- SearchProtect  =>PUP.SearchProtect
O42 - Logiciel: Selection Tools - (.WTools.) [HKCU][64Bits] -- Selection Tools  =>PUP.Nosibay
O42 - Logiciel: SmartWeb - (.SoftBrain Technologies Ltd..) [HKLM][64Bits] -- SmartWeb  =>PUP.SmartWeb
O42 - Logiciel: SuperClick 1.10.0.16 - (.SuperClick.) [HKLM][64Bits] -- SuperClick_1.10.0.16  =>PUP.SuperClick
O42 - Logiciel: Support PL 1.1 - (.riceLes.) [HKLM][64Bits] -- {12DA0E6F-5543-440C-BAA2-28BF01070AFA}{3621a1ae}  =>Adware.Graftor
O42 - Logiciel: WindApp - (.Store.) [HKCU][64Bits] -- WindApp
O42 - Logiciel: Word Processor Text Wrap - (.Word Processor Text Wrap.) [HKLM][64Bits] -- wincheck  =>PUP.Wincheck
O42 - Logiciel: mystartsearch uninstall - (.mystartsearch.) [HKLM][64Bits] -- mystartsearch uninstall  =>PUP.StartSearch
O42 - Logiciel: youtubeadblocker - (...) [HKLM][64Bits] -- {4820778D-AB0D-6D18-C316-52A6A0E1D507}  =>PUP.YouTubeAdBlock
~ Logic: 68 Legitimates Filtered in 00mn 01s



---\\ HKCU & HKLM Software Keys
[HKCU\Software\APN PIP]
[HKCU\Software\ArenaHD]  =>PUP.CrossRider
[HKCU\Software\AskPartnerNetwork]  =>Toolbar.AskBar
[HKCU\Software\BoBrowser]  =>PUP.BoBrowser
[HKCU\Software\BrowserV16.06-nv-ie]  =>PUP.CrossRider
[HKCU\Software\CinemaPlus-3.2cV17.06-nv-ie]  =>PUP.CrossRider
[HKCU\Software\CinemaPlus-3.2cV17.06-nv]  =>PUP.CrossRider
[HKCU\Software\CinemaPlus-3.2cV17.06]  =>PUP.CrossRider
[HKCU\Software\CinemaPlus-4.1vV16.06-nv-ie]  =>PUP.CrossRider
[HKCU\Software\CinemaPlus-4.1vV16.06-nv]  =>PUP.CrossRider
[HKCU\Software\CinemaPlus-4.1vV16.06]  =>PUP.CrossRider
[HKCU\Software\CrossBrowser]  =>PUP.CrossBrowser
[HKCU\Software\Crossbrowse]  =>PUP.CrossBrowser
[HKCU\Software\HighDefAction]  =>PUP.CrossRider
[HKCU\Software\HomeTab]  =>PUP.CertifiedToolbar
[HKCU\Software\InstalledBrowserExtensions]  =>PUP.BrowserExtensions
[HKCU\Software\Kromtech]
[HKCU\Software\MaxComputerCleanerConfig]  =>PUP.MaxComputerCleaner
[HKCU\Software\MaxComputerCleanerLanguage]  =>PUP.MaxComputerCleaner
[HKCU\Software\Store]  =>PUP.Nosibay
[HKCU\Software\Super Optimizer]  =>PUP.SuperOptimizer
[HKCU\Software\TutoTag]  =>PUP.AgenceExclusive
[HKCU\Software\Tutorials]  =>PUP.AgenceExclusive
[HKCU\Software\WTools]  =>PUP.Nosibay
[HKCU\Software\WajIEnhance]  =>PUP.Wajam
[HKCU\Software\YorkNewCin]  =>PUP.CrossRider
[HKCU\Software\gAWWmr4C116U27SzY4XcQ]
[HKCU\Software\kdmhCTydrVA5XW]
[HKCU\Software\maxcomputerclenner]  =>PUP.MaxComputerCleaner
[HKCU\Software\xZrVtuHMnGwUoZ8MQY]
[HKLM\Software\ArenaHD]  =>PUP.CrossRider
[HKLM\Software\Flashbeat]  =>PUP.FlashBeat
[HKLM\Software\HighDefAction]  =>PUP.CrossRider
[HKLM\Software\InstalledBrowserExtensions]  =>PUP.BrowserExtensions
[HKLM\Software\Wow6432Node\9359ad8b-1a23-4ff2-ab34-7a6800a3c0ef]  =>PUP.CrossRider
[HKLM\Software\Wow6432Node\9f50e6f5-26e3-4b3a-9df1-2668b09c8e40]  =>PUP.CrossRider
[HKLM\Software\Wow6432Node\AIM Toolbar]
[HKLM\Software\Wow6432Node\ArenaHD]  =>PUP.CrossRider
[HKLM\Software\Wow6432Node\AskPartnerNetwork]  =>Toolbar.AskBar
[HKLM\Software\Wow6432Node\CinemaPlus-3.2cV17.06-nv-ie]  =>PUP.CrossRider
[HKLM\Software\Wow6432Node\CinemaPlus-3.2cV17.06-nv]  =>PUP.CrossRider
[HKLM\Software\Wow6432Node\CinemaPlus-4.1vV16.06-nv-ie]  =>PUP.CrossRider
[HKLM\Software\Wow6432Node\CinemaPlus-4.1vV16.06-nv]  =>PUP.CrossRider
[HKLM\Software\Wow6432Node\Clara]
[HKLM\Software\Wow6432Node\Conduit]  =>Toolbar.Conduit
[HKLM\Software\Wow6432Node\Flashbeat]  =>PUP.FlashBeat
[HKLM\Software\Wow6432Node\HighDefAction]  =>PUP.CrossRider
[HKLM\Software\Wow6432Node\Iminent]  =>Adware.IMBooster
[HKLM\Software\Wow6432Node\InstalledBrowserExtensions]  =>PUP.BrowserExtensions
[HKLM\Software\Wow6432Node\ORBTR]  =>Toolbar.Conduit
[HKLM\Software\Wow6432Node\SPPDCOM]  =>Rogue.PCSpeedUp
[HKLM\Software\Wow6432Node\SpeedBit]
[HKLM\Software\Wow6432Node\SupDp]  =>PUP.SupTab
[HKLM\Software\Wow6432Node\TabNav]  =>PUP.Abengine
[HKLM\Software\Wow6432Node\Tutorials]  =>PUP.AgenceExclusive
[HKLM\Software\Wow6432Node\YorkNewCin]  =>PUP.CrossRider
[HKLM\Software\Wow6432Node\coupoon]
[HKLM\Software\Wow6432Node\searchult]  =>PUP.Optional
[HKLM\Software\Wow6432Node\supTab]  =>PUP.SupTab
[HKLM\Software\YorkNewCin]  =>PUP.CrossRider
[HKLM\Software\coupoon]
~ Key Software: 356 Legitimates Filtered in 00mn 01s



---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 16/06/2015 - 17:23:51 - [] ----D C:\Program Files (x86)\1fd2513c-bb00-410a-a031-34873c6f8369
O43 - CFD: 17/06/2015 - 17:57:46 - [] ----D C:\Program Files (x86)\CinemaPlus-3.2cV17.06  =>PUP.CrossRider
O43 - CFD: 16/06/2015 - 17:24:26 - [] ----D C:\Program Files (x86)\CinemaPlus-4.1vV16.06  =>PUP.CrossRider
O43 - CFD: 17/06/2015 - 17:57:24 - [] ----D C:\Program Files (x86)\Coupoon
O43 - CFD: 16/06/2015 - 18:35:26 - [] ----D C:\Program Files (x86)\Crossbrowse  =>PUP.CrossBrowser
O43 - CFD: 17/06/2015 - 17:57:17 - [] ----D C:\Program Files (x86)\d3f34b16-3252-4bcd-8db3-e6993e60288f
O43 - CFD: 18/06/2015 - 14:54:33 - [] ----D C:\Program Files (x86)\HighlightSearches  =>PUP.HighlightSearches
O43 - CFD: 17/06/2015 - 16:48:51 - [] ----D C:\Program Files (x86)\Honey
O43 - CFD: 17/06/2015 - 17:51:57 - [] ----D C:\Program Files (x86)\Infonaut_1.10.0.14  =>PUP.Infonaut
O43 - CFD: 16/06/2015 - 17:25:25 - [] ----D C:\Program Files (x86)\MiuiTab  =>PUP.MiuiTab
O43 - CFD: 16/06/2015 - 17:22:36 - [] ----D C:\Program Files (x86)\MovieDea  =>PUP.MovieDea
O43 - CFD: 16/06/2015 - 17:23:58 - [] ----D C:\Program Files (x86)\ORBTR  =>Toolbar.Conduit
O43 - CFD: 17/06/2015 - 16:48:03 - [] ----D C:\Program Files (x86)\PrieceLess  =>PUP.PriceLess
O43 - CFD: 16/06/2015 - 18:23:26 - [] ----D C:\Program Files (x86)\SuperClick_1.10.0.16  =>PUP.SuperClick
O43 - CFD: 17/06/2015 - 16:48:24 - [] ----D C:\Program Files (x86)\youtubeadblocker  =>PUP.YouTubeAdBlock
O43 - CFD: 17/06/2015 - 16:48:57 - [] ----D C:\ProgramData\15548491502172390814
O43 - CFD: 16/06/2015 - 17:35:37 - [] ----D C:\ProgramData\28341ff220e0446c9fff27c4493d622e
O43 - CFD: 17/06/2015 - 15:47:12 - [0] ----D C:\ProgramData\547746f20000089f
O43 - CFD: 16/06/2015 - 17:35:39 - [] ----D C:\ProgramData\6e589a01ba0f4c4e96fed4b4f5d233ce
O43 - CFD: 17/06/2015 - 15:47:12 - [0] ----D C:\ProgramData\891ec10a00003657
O43 - CFD: 16/06/2015 - 17:25:08 - [] ----D C:\ProgramData\BreakingNewsAlert  =>PUP.BreakingNewsAlert
O43 - CFD: 17/06/2015 - 15:46:54 - [] ----D C:\ProgramData\Browser
O43 - CFD: 17/06/2015 - 16:49:37 - [] ----D C:\ProgramData\FlashBeat  =>PUP.FlashBeat
O43 - CFD: 17/06/2015 - 16:47:23 - [] ----D C:\ProgramData\gkjkieeipmeagbddcnnkpmbmpgpeholm
O43 - CFD: 17/06/2015 - 15:48:01 - [] ----D C:\ProgramData\MovieDeaConfig  =>PUP.MovieDea
O43 - CFD: 16/06/2015 - 17:35:46 - [] ----D C:\ProgramData\oKrTikoXqmk
O43 - CFD: 16/06/2015 - 17:36:59 - [] ----D C:\ProgramData\Ovasrujoenohn
O43 - CFD: 16/06/2015 - 17:25:10 - [] ----D C:\ProgramData\WindowsMangerProtect  =>PUP.Fuyu
O43 - CFD: 17/06/2015 - 18:26:42 - [] --H-D C:\ProgramData\ylz
O43 - CFD: 16/06/2015 - 17:25:20 - [] ----D C:\ProgramData\{335452ec-bd88-595e-3354-452ecbd84bb2}
O43 - CFD: 17/06/2015 - 16:47:08 - [] ----D C:\ProgramData\{33d4e648-0d58-5e4f-33d4-4e6480d59920}
O43 - CFD: 16/06/2015 - 17:26:13 - [] ----D C:\ProgramData\{3e1e5f04-3a88-fb27-3e1e-e5f043a87c10}
O43 - CFD: 16/06/2015 - 17:23:00 - [] ----D C:\ProgramData\{67fae419-858d-b21f-67fa-ae4198589066}
O43 - CFD: 16/06/2015 - 18:35:33 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Crossbrowse  =>PUP.CrossBrowser
O43 - CFD: 27/05/2015 - 18:34:45 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Music, Photos and Videos
O43 - CFD: 27/05/2015 - 18:34:45 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Productivity and Tools
O43 - CFD: 27/05/2015 - 18:34:47 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Security and Protection
O43 - CFD: 27/05/2015 - 18:34:47 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Shopping and Services
O43 - CFD: 26/07/2012 - 11:45:49 - [0] R-H-D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC
O43 - CFD: 13/06/2015 - 19:22:50 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WebAcappella4
O43 - CFD: 18/06/2015 - 14:54:35 - [] ----D C:\Users\christophe\AppData\Roaming\FEF4F24B-1434468119-BB9E-BBEB-74FFC6ABE3AF
O43 - CFD: 16/06/2015 - 17:24:54 - [] ----D C:\Users\christophe\AppData\Roaming\mystartsearch  =>PUP.StartSearch
O43 - CFD: 17/06/2015 - 16:05:28 - [] ----D C:\Users\christophe\AppData\Roaming\Store  =>PUP.Nosibay
O43 - CFD: 16/06/2015 - 17:22:00 - [] ----D C:\Users\christophe\AppData\Roaming\VOPackage  =>Adware.Downware
O43 - CFD: 17/06/2015 - 16:05:38 - [] ----D C:\Users\christophe\AppData\Roaming\WTools  =>PUP.Nosibay
O43 - CFD: 17/06/2015 - 15:49:53 - [] ----D C:\Users\christophe\AppData\Local\avabvbavad
O43 - CFD: 16/06/2015 - 18:38:10 - [] ----D C:\Users\christophe\AppData\Local\BoBrowser  =>PUP.BoBrowser
O43 - CFD: 17/06/2015 - 18:36:11 - [] ----D C:\Users\christophe\AppData\Local\BreakingNewsAlert  =>PUP.BreakingNewsAlert
O43 - CFD: 16/06/2015 - 18:35:37 - [] ----D C:\Users\christophe\AppData\Local\Crossbrowse  =>PUP.CrossBrowser
O43 - CFD: 16/06/2015 - 17:23:01 - [] ----D C:\Users\christophe\AppData\Local\FEF4F24B-1434475377-BB9E-BBEB-74FFC6ABE3AF
O43 - CFD: 18/06/2015 - 01:00:36 - [] ----D C:\Users\christophe\AppData\Local\FEF4F24B-1434475514-BB9E-BBEB-74FFC6ABE3AF
O43 - CFD: 16/06/2015 - 17:23:39 - [] ----D C:\Users\christophe\AppData\Local\Max_Computer_Cleaner
O43 - CFD: 17/06/2015 - 17:52:23 - [] ----D C:\Users\christophe\AppData\Local\SmartWeb  =>PUP.SmartWeb
O43 - CFD: 16/06/2015 - 17:22:31 - [] ----D C:\Users\christophe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MovieDea  =>PUP.MovieDea
O43 - CFD: 16/06/2015 - 17:22:02 - [] ----D C:\Users\christophe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VOPackage  =>Adware.Downware
~ Program Folder: 190 Legitimates Filtered in 00mn 00s



---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.9EFBBCB01D55B504F9CB0670D49AC512] - 16/06/2015 - 16:22:28 ---A- . (...) -- C:\Windows\ylz.exe   [417792]
O44 - LFC:[MD5.A054BF51A9358CA92D06D9B6509233B8] - 16/06/2015 - 16:22:33 ---A- . (...) -- C:\Windows\mylz.exe   [408576]
O44 - LFC:[MD5.828AE71F67ACDB05C94F76FE37E55099] - 16/06/2015 - 16:22:36 ---A- . (...) -- C:\Windows\ylz.dat   [631296]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 16/06/2015 - 16:25:08 ---A- . (...) -- C:\Windows\hgfs.sys   [0]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 16/06/2015 - 16:25:08 ---A- . (...) -- C:\Windows\prleth.sys   [0]
O44 - LFC:[MD5.1C7D24960F83827296721A8D870E849A] - 16/06/2015 - 16:26:26 ---A- . (.Abengine - Pas de description.) -- C:\Windows\System32\abengine64.dll   [409168]  =>Adware.Abengine
O44 - LFC:[MD5.FE18FC434139D0D6C2DADDB478FCA15D] - 16/06/2015 - 16:31:13 ---A- . (...) -- C:\Windows\System32\abengineOff.ini   [9240]  =>Adware.Abengine
O44 - LFC:[MD5.9997B844DB09CD1969BF6006738B943E] - 16/06/2015 - 16:37:38 ---A- . (...) -- C:\claraInstaller.txt   [7969]
O44 - LFC:[MD5.14AC26AEBA988E85081A23D0C2634E64] - 17/06/2015 - 15:20:46 ---A- . (...) -- C:\Windows\win.ini   [188]
O44 - LFC:[MD5.6CB1DB9D948B062C495F77C183BFE9E5] - 17/06/2015 - 15:20:56 ---A- . (...) -- C:\Windows\ODBC.INI   [382]
O44 - LFC:[MD5.74D9A83219CABAAB06A69FD318873F33] - 17/06/2015 - 16:53:58 ---A- . (...) -- C:\END   [5]
O44 - LFC:[MD5.B9D850D1F55F5B2EF4E4612816A942AE] - 18/06/2015 - 14:24:00 ---A- . (...) -- C:\Analyse PC ChR du 18_06_2015.txt   [526068]
~ Files: 34 Legitimates Filtered in 00mn 01s



---\\ Enumération des clés de registre PoliciesSystem (MWPS) (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=0
O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
~ MWPS: 17 Legitimates Filtered in 00mn 00s



---\\ Enumération des clés de registre PoliciesExplorer (MWPE) (O56)
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1
~ MWPE Keys: 4 Legitimates Filtered in 00mn 00s



---\\ Liste des pilotes du système (SDL) (O58)
O58 - SDL:29/05/2012 - 16:53:30 ---A- . (.Windows (R) Codename Longhorn DDK provider - hpvhd 64bit support driver.) -- C:\Windows\System32\Drivers\cpqdfw.sys   [27456]
O58 - SDL:10/04/2015 - 20:56:56 ---A- . (.Infonaut - Infonaut Driver x64.) -- C:\Windows\System32\Drivers\innfd_1_10_0_14.sys   [58224]  =>PUP.Infonaut
O58 - SDL:02/04/2015 - 23:22:32 ---A- . (.NetFilterSDK.com - NetFilter SDK WFP Driver (WPP).) -- C:\Windows\System32\Drivers\netfilter64.sys   [46376]
O58 - SDL:13/05/2015 - 20:08:16 ---A- . (.SuperClick - SC Driver x64.) -- C:\Windows\System32\Drivers\scfd_1_10_0_16.sys   [58240]  =>PUP.SuperClick
O58 - SDL:22/01/2014 - 07:52:10 ---A- . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG USB Composite Device Driver (MSS Ver.3).) -- C:\Windows\System32\Drivers\ssudbus.sys   [108800]
O58 - SDL:22/01/2014 - 07:52:10 ---A- . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG Android Modem Device Driver (MSS Ver.3).) -- C:\Windows\System32\Drivers\ssudmdm.sys   [206080]
O58 - SDL:26/07/2012 - 06:00:55 ---A- . (.Promise Technology, Inc. - Promise SuperTrak EX Series Driver for Windows x64.) -- C:\Windows\System32\Drivers\stexstor.sys   [30960]
O58 - SDL:25/10/2012 - 03:18:48 ---A- . (.IDT, Inc. - IDT PC Audio.) -- C:\Windows\System32\Drivers\stwrt64.sys   [543744]
~ Drivers: 52 Legitimates Filtered in 00mn 00s



---\\ Liste des outils de désinfection (LATC) (O63)
O63 - Logiciel: ZHPDiag 2015 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1  =>.Nicolas Coolman
~ ADS:  Scanned in 00mn 00s



---\\ Menu de démarrage Internet (SMI) (O68)
O68 - StartMenuInternet: <Crossbrowse> <Crossbrowse>[HKLM\..\Shell\open\Command] (.Crossbrowse - Crossbrowse.) -- C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe  =>PUP.CrossBrowser
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (...) --  C:\Program Files\Internet Explorer\iexplore.exe http://www.mystartsearch.com  =>PUP.StartSearch
~ Keys:  Scanned in 00mn 00s



---\\ Recherche d'infection sur les navigateurs internet (SBI) (O69)
O69 - SBI: SearchScopes [HKCU] {015DB5FA-EAFB-4592-A95B-F44D3EE87FA9} - (Trovi) - http://www.trovi.com  =>Hijacker.TroviCom
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - http://www.mystartsearch.com  =>PUP.StartSearch
O69 - SBI: SearchScopes [HKCU] {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} [DefaultScope] - (e) - http://www.mystartsearch.com  =>PUP.StartSearch
O69 - SBI: SearchScopes [HKCU] {33BB0A4E-99AF-4226-BDF6-49120163DE86} - (mystartsearch) - http://www.mystartsearch.com  =>PUP.StartSearch
O69 - SBI: SearchScopes [HKCU] {D944BB61-2E34-4DBF-A683-47E505C587DC} - (eBay) - http://www.mystartsearch.com  =>PUP.StartSearch
O69 - SBI: SearchScopes [HKCU] {E6F53664-F0F8-4328-8B5C-6F2D58AC4582} - (Propositions de recherche Amazon.fr) - http://www.mystartsearch.com  =>PUP.StartSearch
O69 - SBI: SearchScopes [HKCU] {E733165D-CBCF-4FDA-883E-ADEF965B476C} - (Google) - http://www.mystartsearch.com  =>PUP.StartSearch
~ Keys:  Scanned in 00mn 00s



---\\ Recherche particulière à la racine du système (SPRF) (O84)
[MD5.3A1D89B89C9D62951957F0839578DD9B] [SPRF][20/04/2015] (...) -- C:\Users\christophe\AppData\Roaming\gAWWmr4C116U27SzY4XcQ.exe   [1579520]
[MD5.3A1D89B89C9D62951957F0839578DD9B] [SPRF][20/04/2015] (...) -- C:\Users\christophe\AppData\Roaming\kdmhCTydrVA5XW.exe   [1579520]
[MD5.3A1D89B89C9D62951957F0839578DD9B] [SPRF][20/04/2015] (...) -- C:\Users\christophe\AppData\Roaming\xZrVtuHMnGwUoZ8MQY.exe   [1579520]
~ Files: 3 Legitimates Filtered in 00mn 00s



---\\ Recherche d'infection Rogue (SRI) (O86)
O43 - CFD: 16/06/2015 - 17:35:37 - [] ----D C:\ProgramData\28341ff220e0446c9fff27c4493d622e
O43 - CFD: 16/06/2015 - 17:35:39 - [] ----D C:\ProgramData\6e589a01ba0f4c4e96fed4b4f5d233ce
[MD5.BE87A60333C5848911C3CA839F190720] [SRI] (.Pas de propriétaire - 6e589a01ba0f4c4e96fed4b4f5d233ce.) -- C:\ProgramData\6e589a01ba0f4c4e96fed4b4f5d233ce\6e589a01ba0f4c4e96fed4b4f5d233ce.exe   [276992]
~ Files:  Scanned in 00mn 00s



---\\ Liste des exceptions du parefeu (FirewallRules) (O87)
O87 - FAEL: "{EBAD0EE9-82DA-4BB9-B2EA-1032FA5BC59F}" | In - None - P17 - TRUE | .(.Crossbrowse - Crossbrowse.) -- C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe  =>PUP.CrossBrowser
~ Firewall: 1 Legitimates Filtered in 00mn 01s



---\\ Export de clés de registre aléatoires (O91)
[HKLM\Software\Wow6432Node\6893c58f-ddc8-192a-ed70-78d92fd4ead3\16143292300476810\eae10f9d]:060df2cd="c/Au/XV/H/Ap/X2/GP/j/Xt/axAv/X6////%"
[HKLM\Software\Wow6432Node\6893c58f-ddc8-192a-ed70-78d92fd4ead3\16143292300476810\eae10f9d]:0c230bcb="///%"
[HKLM\Software\Wow6432Node\6893c58f-ddc8-192a-ed70-78d92fd4ead3\16143292300476810\eae10f9d]:0dc3ee96="/P////%%"
[HKLM\Software\Wow6432Node\6893c58f-ddc8-192a-ed70-78d92fd4ead3\16143292300476810\eae10f9d]:0e93c3f3="///%"
[HKLM\Software\Wow6432Node\6893c58f-ddc8-192a-ed70-78d92fd4ead3\16143292300476810\eae10f9d]:1520c6f1="V/////%%"
[HKLM\Software\Wow6432Node\6893c58f-ddc8-192a-ed70-78d92fd4ead3\16143292300476810\eae10f9d]:1c311243="GlAk/X6/G/Ap/YV/UxAk/YZ/Gl////%%"
[HKLM\Software\Wow6432Node\6893c58f-ddc8-192a-ed70-78d92fd4ead3\16143292300476810\eae10f9d]:27ddcf6f="///%"
[HKLM\Software\Wow6432Node\6893c58f-ddc8-192a-ed70-78d92fd4ead3\16143292300476810\eae10f9d]:2d71d5ab="V/////%%"
[HKLM\Software\Wow6432Node\6893c58f-ddc8-192a-ed70-78d92fd4ead3\16143292300476810\eae10f9d]:2e22d94e="///%"
[HKLM\Software\Wow6432Node\6893c58f-ddc8-192a-ed70-78d92fd4ead3\16143292300476810\eae10f9d]:340d3099="/P////%%"
[HKLM\Software\Wow6432Node\6893c58f-ddc8-192a-ed70-78d92fd4ead3\16143292300476810\eae10f9d]:37b7a6d8="UlAr/XJ/c//k////"
[HKLM\Software\Wow6432Node\6893c58f-ddc8-192a-ed70-78d92fd4ead3\16143292300476810\eae10f9d]:38583bc3="Ml/2/CF/M//g/CZ////%"
[HKLM\Software\Wow6432Node\6893c58f-ddc8-192a-ed70-78d92fd4ead3\16143292300476810\eae10f9d]:3c09c42b="///%"
[HKLM\Software\Wow6432Node\6893c58f-ddc8-192a-ed70-78d92fd4ead3\16143292300476810\eae10f9d]:414bc593="///%"
[HKLM\Software\Wow6432Node\6893c58f-ddc8-192a-ed70-78d92fd4ead3\16143292300476810\eae10f9d]:48bd1aff="V/////%%"
[HKLM\Software\Wow6432Node\6893c58f-ddc8-192a-ed70-78d92fd4ead3\16143292300476810\eae10f9d]:51d2f2ea="JlA+/Y//b/Ak/YZ/c//x/W//I//x/CD/Ux/e////"
[HKLM\Software\Wow6432Node\6893c58f-ddc8-192a-ed70-78d92fd4ead3\16143292300476810\eae10f9d]:587b5709="V/////%%"
[HKLM\Software\Wow6432Node\6893c58f-ddc8-192a-ed70-78d92fd4ead3\16143292300476810\eae10f9d]:6185d035="Vx/2/Cx/V//l////"
[HKLM\Software\Wow6432Node\6893c58f-ddc8-192a-ed70-78d92fd4ead3\16143292300476810\eae10f9d]:65114b36="Vl/l////"
[HKLM\Software\Wow6432Node\6893c58f-ddc8-192a-ed70-78d92fd4ead3\16143292300476810\eae10f9d]:72758a5d="///%"
[HKLM\Software\Wow6432Node\6893c58f-ddc8-192a-ed70-78d92fd4ead3\16143292300476810\eae10f9d]:7367429f="///%"
[HKLM\Software\Wow6432Node\6893c58f-ddc8-192a-ed70-78d92fd4ead3\16143292300476810\eae10f9d]:7f69fa1f="///%"
[HKLM\Software\Wow6432Node\6893c58f-ddc8-192a-ed70-78d92fd4ead3\16143292300476810\eae10f9d]:8b9e4cbc="V/////%%"
[HKLM\Software\Wow6432Node\6893c58f-ddc8-192a-ed70-78d92fd4ead3\16143292300476810\eae10f9d]:a0743acc="N/////%%"
[HKLM\Software\Wow6432Node\6893c58f-ddc8-192a-ed70-78d92fd4ead3\16143292300476810\eae10f9d]:a1dcff5b="V/////%%"
[HKLM\Software\Wow6432Node\6893c58f-ddc8-192a-ed70-78d92fd4ead3\16143292300476810\eae10f9d]:a2e3b941="///%"
[HKLM\Software\Wow6432Node\6893c58f-ddc8-192a-ed70-78d92fd4ead3\16143292300476810\eae10f9d]:bbf88800="///%"
[HKLM\Software\Wow6432Node\6893c58f-ddc8-192a-ed70-78d92fd4ead3\16143292300476810\eae10f9d]:c24899a6="VP/g/CV/Vl/2/Cx////%"
[HKLM\Software\Wow6432Node\6893c58f-ddc8-192a-ed70-78d92fd4ead3\16143292300476810\eae10f9d]:c5705860="Vx////%%"
[HKLM\Software\Wow6432Node\6893c58f-ddc8-192a-ed70-78d92fd4ead3\16143292300476810\eae10f9d]:c6c5dd44="V/////%%"
[HKLM\Software\Wow6432Node\6893c58f-ddc8-192a-ed70-78d92fd4ead3\16143292300476810\eae10f9d]:c99a5f5c="///%"
[HKLM\Software\Wow6432Node\6893c58f-ddc8-192a-ed70-78d92fd4ead3\16143292300476810\eae10f9d]:d1abcdb6="///%"
[HKLM\Software\Wow6432Node\6893c58f-ddc8-192a-ed70-78d92fd4ead3\16143292300476810\eae10f9d]:d94388d2="GlAk/X6/G/Ap/YV/UxAk/YZ/Gl////%%"
[HKLM\Software\Wow6432Node\6893c58f-ddc8-192a-ed70-78d92fd4ead3\16143292300476810\eae10f9d]:e46c271e="///%"
[HKLM\Software\Wow6432Node\6893c58f-ddc8-192a-ed70-78d92fd4ead3\16143292300476810\eae10f9d]:e8f9dcc7="UlAr/XJ/c//k////"
[HKLM\Software\Wow6432Node\6893c58f-ddc8-192a-ed70-78d92fd4ead3\16143292300476810\eae10f9d]:f0bf0bde="///%"
[HKLM\Software\Wow6432Node\6893c58f-ddc8-192a-ed70-78d92fd4ead3\16143292300476810\eae10f9d]:f1f24e29="Vl/l/C/////%"
[HKLM\Software\Wow6432Node\6893c58f-ddc8-192a-ed70-78d92fd4ead3\16143292300476810\eae10f9d]:f2c53c49="UlAr/XJ/c//k////"
[HKLM\Software\Wow6432Node\6893c58f-ddc8-192a-ed70-78d92fd4ead3\16143292300476810\eae10f9d]:f6ad6fa6="V/////%%"
[HKLM\Software\Wow6432Node\6893c58f-ddc8-192a-ed70-78d92fd4ead3\16143292300476810\eae10f9d]:fe94ce1e="V/////%%"
~ Export Key Software:  Scanned in 00mn 00s



---\\ Recherche des packages WindowsInstaller (WIS) (O93) (NTFS)
[MD5.F3E0BCAC0A50EA3B7571407A7DA325C7] [WIS][16/06/2015] (.globalupdate - globalupdate.) -- C:\Windows\Installer\159c2e.msi   [32768]  =>PUP.GlobalUpdate
~ WIS: 1 Legitimates Filtered in 00mn 00s



---\\ Recherche de clés de registre Tracing (O100)
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\MaxComputerCleaner_Maintenance_RASAPI32  =>PUP.MaxComputerCleaner
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\MaxComputerCleaner_Maintenance_RASMANCS  =>PUP.MaxComputerCleaner
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\MaxComputerCleaner_RASAPI32  =>PUP.MaxComputerCleaner
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\MaxComputerCleaner_RASMANCS  =>PUP.MaxComputerCleaner
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\SuperClickAutoUpdateClient_RASAPI32  =>PUP.SuperClick
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\SuperClickAutoUpdateClient_RASMANCS  =>PUP.SuperClick
~ BTK: 56 Legitimates Filtered in 00mn 00s



---\\ Recherche de clés de registre CLSID (O101)
[HKCR\CLSID\{4029B397-87CE-4BEB-9236-67557A9007CC}] (youtubeadblocker)  =>PUP.Multiplug
~ BCK: 4838 Legitimates Filtered in 00mn 06s



---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)
SS - | Auto 02/04/2015 172344 |  (CoupoonService64) . (...) - C:\Program Files (x86)\coupoon\iiwjljrnpc64.exe
SS - | Demand 12/10/2010 206072 |  (GamesAppService) . (.WildTangent, Inc..) - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe
SS - | Auto 17/06/2015 68608 |  (globalUpdate) . (.globalUpdate.) - C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe  =>PUP.GlobalUpdate
SS - | Demand 17/06/2015 68608 |  (globalUpdatem) . (.globalUpdate.) - C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe  =>PUP.GlobalUpdate
SS - | Auto 12/10/2012 35744 |  (HPConnectedRemote) . (.Hewlett-Packard.) - c:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe
SS - | Demand 10/08/2012 1001376 |  (hpqwmiex) . (.Hewlett-Packard Company.) - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
SS - | Auto 14/04/2015 1080120 |  (MBAMService) . (.Malwarebytes Corporation.) - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
SR - | Auto 17/06/2015 1767424 |  (3621a1ae) . (...) - c:\Program Files (x86)\CutterGeneration\CutterGeneration.dll
SR - | Auto 22/04/2015 2329600 |  (abengine) . (.Abengine.) - C:\Program Files (x86)\HighlightSearches\abengine.exe  =>PUP.HighlightSearches
SR - | Auto 31/08/2011 462184 |  (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe
SR - | Auto 03/06/2015 3285776 |  (CltMngSvc) . (.Client Connect LTD.) - C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe  =>PUP.SearchProtect
SR - | Auto 16/05/2012 144560 |  (EpsonScanSvc) . (.Seiko Epson Corporation.) - C:\WINDOWS\system32\EscSvc64.exe
SR - | Auto 27/09/2012 86528 |  (HP Support Assistant Service) . (.Hewlett-Packard Company.) - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe  =>.Hewlett-Packard Co
SR - | Auto 12/06/2015 125056 |  (IHProtect Service) . (.XTab system.) - C:\Program Files (x86)\MiuiTab\ProtectService.exe  =>PUP.MiuiTab
SR - | Auto 10/04/2015 278600 |  (insvc_1.10.0.14) . (.Infonaut.) - C:\Program Files (x86)\Infonaut_1.10.0.14\Service\insvc.exe  =>PUP.Infonaut
SR - | Auto 20/04/2012 635104 |  (Intel(R) Capability Licensing Service Interface) . (.Intel(R) Corporation.) - c:\Program Files\Intel\iCLS Client\HeciServer.exe
SR - | Auto 18/07/2012 128896 |  (Intel(R) ME Service) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
SR - | Auto 18/07/2012 165760 |  (jhi_service) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
SR - | Auto 16/06/2015 147456 |  (kysykiti) . (...) - C:\Users\christophe\AppData\Local\FEF4F24B-1434475514-BB9E-BBEB-74FFC6ABE3AF\snsk2E6C.tmp
SR - | Auto 18/07/2012 276864 |  (LMS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
SR - | Auto 18/06/2015 242176 |  (lofilysy) . (...) - C:\Users\christophe\AppData\Roaming\FEF4F24B-1434468119-BB9E-BBEB-74FFC6ABE3AF\knsj834C.tmp
SR - | Auto 16/06/2015 408576 |  (mylz) . (...) - c:\windows\mylz.exe
SR - | Auto 17/09/2012 891240 |  (nvsvc) . (.NVIDIA Corporation.) - C:\windows\system32\nvvsvc.exe
SR - | Auto 16/06/2015 2731488 |  (onpvhvQFDl) . (.Useful Technology.) - C:\ProgramData\oKrTikoXqmk\onpvhvQFDl.exe
SR - | Auto 12/10/2012 29696 | C:\Program Files (x86)\ORBTR\orbiter.dll (Orbiter) . (.Client Connect LTD.) - C:\Windows\System32\svchost.exe  =>Toolbar.Conduit
SR - | Auto 13/05/2015 278616 |  (scsvc_1.10.0.16) . (.SuperClick.) - C:\Program Files (x86)\SuperClick_1.10.0.16\Service\scsvc.exe  =>PUP.SuperClick
SR - | Auto 25/10/2012 327680 |  (STacSV) . (.IDT, Inc..) - C:\Program Files\IDT\WDM\STacSV64.exe
SR - | Auto 18/07/2012 364416 |  (UNS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
SR - | Auto 18/06/2015 53040 |  (UpdateCheck) . (...) - C:\Program Files (x86)\Coupoon\UpdateCheck.exe
SR - | Auto 22/07/1658 0 |  (WinDefend) . (...) - C:\Program Files (x86)\Windows Defender\MsMpEng.exe
SR - | Auto 16/06/2015 695976 |  (WindowsMangerProtect) . (.DTools LIMITED.) - C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe  =>PUP.Fuyu
SR - | Auto 22/07/1658 0 |  (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe  =>.Microsoft Corporation
SR - | Demand 12/10/2012 29696 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
SR - | Auto 16/06/2015 219136 |  (xoperoze) . (...) - C:\Users\christophe\AppData\Roaming\FEF4F24B-1434468119-BB9E-BBEB-74FFC6ABE3AF\jnsoA241.tmp
SR - | Auto 16/06/2015 417792 |  (ylz) . (...) - c:\windows\ylz.exe
SR - | Auto 16/06/2015 166912 |  (zedepory) . (...) - C:\Users\christophe\AppData\Roaming\FEF4F24B-1434468119-BB9E-BBEB-74FFC6ABE3AF\hnsmC4AF.tmp
~ Services:  Scanned in 00mn 07s



---\\ Scan Additionnel (O88)
Database Version : 13008 - (16/06/2015)
Clés trouvées (Keys found) : 51
Valeurs trouvées (Values found) : 14
Dossiers trouvés  (Folders found) : 28
Fichiers trouvés  (Files found) : 117

[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4029B397-87CE-4BEB-9236-67557A9007CC}]   =>PUP.YouTubeAdBlock^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F}]   =>PUP.LuckyTab^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8B5D2FB9-741B-4E82-B1CB-0D0A98413CDE}]   =>PUP.PriceLess^
[HKLM\SYSTEM\CurrentControlSet\Services\abengine]   =>PUP.HighlightSearches^
[HKLM\SYSTEM\CurrentControlSet\Services\CltMngSvc]   =>PUP.SearchProtect^
[HKLM\SYSTEM\CurrentControlSet\Services\globalUpdate) (globalUpdate]   =>PUP.GlobalUpdate^
[HKLM\SYSTEM\CurrentControlSet\Services\IHProtect Service]   =>PUP.MiuiTab^
[HKLM\SYSTEM\CurrentControlSet\Services\insvc_1.10.0.14]   =>PUP.Infonaut^
[HKLM\SYSTEM\CurrentControlSet\Services\onpvhvQFDl]   =>PUP.BreakingNewsAlert^
[HKLM\SYSTEM\CurrentControlSet\Services\scsvc_1.10.0.16]   =>PUP.SuperClick^
[HKLM\SYSTEM\CurrentControlSet\Services\WindowsMangerProtect]   =>PUP.Fuyu^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\SoftwareUpdater]   =>PUP.Eorezo^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\CinemaPlus-3.2cV17.06]   =>PUP.CrossRider^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\CinemaPlus-4.1vV16.06]   =>PUP.CrossRider^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Crossbrowse]   =>PUP.CrossBrowser^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\FlashBeat]   =>PUP.FlashBeat^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Infonaut_1.10.0.14]   =>PUP.Infonaut^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\MovieDea]   =>PUP.MovieDea^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\BreakingNewsAlert]   =>PUP.BreakingNewsAlert^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{75F9BF4A-AF67-A478-A37B-31D73186D3F3}]   =>PUP.PriceLess^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect]   =>PUP.SearchProtect^
[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Selection Tools]   =>PUP.Nosibay^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\SmartWeb]   =>PUP.SmartWeb^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\SuperClick_1.10.0.16]   =>PUP.SuperClick^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}{3621a1ae}]   =>Adware.Graftor^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\wincheck]   =>PUP.Wincheck^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\mystartsearch uninstall]   =>PUP.StartSearch^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{4820778D-AB0D-6D18-C316-52A6A0E1D507}]   =>PUP.YouTubeAdBlock^
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}]   =>PUP.V9Software
[HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}]   =>PUP.V9Software
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}]   =>PUP.V9Software
[HKCU\Software\APN PIP]   =>Toolbar.Ask
[HKLM\Software\Wow6432Node\Iminent]   =>Adware.IMBooster
[HKCU\Software\Tutorials]   =>Spyware.AgenceExclusive
[HKLM\Software\Wow6432Node\Tutorials]   =>Spyware.AgenceExclusive
[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\IMBoosterARP]   =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\IMBoosterARP]   =>Adware.IMBooster
[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect]   =>PUP.Conduit
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect]   =>PUP.Conduit
[HKCU\Software\AppDataLow\Software\Crossrider]   =>PUP.CrossRider
[HKCU\Software\InstalledBrowserExtensions\]   =>PUP.CrossRider
[HKCU\Software\AskPartnerNetwork]   =>Toolbar.Ask
[HKLM\Software\Wow6432Node\AskPartnerNetwork]   =>Toolbar.Ask
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SoftwareUpdater]   =>Hijacker.Eazel
[HKCU\Software\HomeTab]   =>PUP.CertifiedToolbar
[HKCU\Software\InstalledBrowserExtensions]   =>PUP.CrossRider
[HKLM\Software\InstalledBrowserExtensions]   =>PUP.CrossRider
[HKLM\Software\Wow6432Node\InstalledBrowserExtensions]   =>PUP.CrossRider
[HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}]   =>PUP.OptimizerPro
[HKLM\Software\Wow6432Node\{1146AC44-2F03-4431-B4FD-889BC837521F}]   =>PUP.OptimizerPro
[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\IminentToolbar]   =>Adware.IMBooster
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:GoogleChromeAutoLaunch_A22D944B006926E355B04829311172EB   =>PUP.CrossBrowser^
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:MovieDea   =>PUP.MovieDea^
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]:upgmsd_fr_002020005.exe   =>PUP.CrossRider^
C:\Program Files (x86)\CinemaPlus-3.2cV17.06   =>PUP.CrossRider^
C:\Program Files (x86)\CinemaPlus-4.1vV16.06   =>PUP.CrossRider^
C:\Program Files (x86)\Crossbrowse   =>PUP.CrossBrowser^
C:\Program Files (x86)\HighlightSearches   =>PUP.HighlightSearches^
C:\Program Files (x86)\Infonaut_1.10.0.14   =>PUP.Infonaut^
C:\Program Files (x86)\MiuiTab   =>PUP.MiuiTab^
C:\Program Files (x86)\MovieDea   =>PUP.MovieDea^
C:\Program Files (x86)\ORBTR   =>Toolbar.Conduit^
C:\Program Files (x86)\PrieceLess   =>PUP.PriceLess^
C:\Program Files (x86)\SuperClick_1.10.0.16   =>PUP.SuperClick^
C:\Program Files (x86)\youtubeadblocker   =>PUP.YouTubeAdBlock^
C:\ProgramData\BreakingNewsAlert   =>PUP.BreakingNewsAlert^
C:\ProgramData\FlashBeat   =>PUP.FlashBeat^
C:\ProgramData\MovieDeaConfig   =>PUP.MovieDea^
C:\ProgramData\WindowsMangerProtect   =>PUP.Fuyu^
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Crossbrowse   =>PUP.CrossBrowser^
C:\Users\christophe\AppData\Roaming\mystartsearch   =>PUP.StartSearch^
C:\Users\christophe\AppData\Roaming\Store   =>PUP.Nosibay^
C:\Users\christophe\AppData\Roaming\VOPackage   =>Adware.Downware^
C:\Users\christophe\AppData\Roaming\WTools   =>PUP.Nosibay^
C:\Users\christophe\AppData\Local\BoBrowser   =>PUP.BoBrowser^
C:\Users\christophe\AppData\Local\BreakingNewsAlert   =>PUP.BreakingNewsAlert^
C:\Users\christophe\AppData\Local\Crossbrowse   =>PUP.CrossBrowser^
C:\Users\christophe\AppData\Local\SmartWeb   =>PUP.SmartWeb^
C:\Users\christophe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MovieDea   =>PUP.MovieDea^
C:\Users\christophe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VOPackage   =>Adware.Downware^
C:\Program Files (x86)\SearchProtect   =>PUP.Conduit
C:\Users\christophe\AppData\Local\SearchProtect   =>PUP.Conduit
C:\Program Files (x86)\SearchProtect\SearchProtect\bin\cltmng.exe   =>PUP.SearchProtect^
C:\Program Files (x86)\SearchProtect\UI\bin\cltmngui.exe   =>PUP.SearchProtect^
C:\Users\christophe\AppData\Local\gmsd_fr_002020005\upgmsd_fr_002020005.exe   =>PUP.CrossRider^
C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe   =>PUP.CrossBrowser^
C:\Users\christophe\AppData\Local\SmartWeb\SmartWebHelper.exe   =>PUP.SmartWeb^
C:\Users\christophe\AppData\Local\SmartWeb\SmartWebApp.exe   =>PUP.SmartWeb^
C:\Program Files (x86)\CinemaPlus-3.2cV17.06\629c710f-b5af-48f5-b1f2-c42563ded208-1-6.exe   =>PUP.CrossRider^
C:\Program Files (x86)\CinemaPlus-3.2cV17.06\629c710f-b5af-48f5-b1f2-c42563ded208-1-7.exe   =>PUP.CrossRider^
C:\Program Files (x86)\CinemaPlus-3.2cV17.06\629c710f-b5af-48f5-b1f2-c42563ded208-10.exe   =>PUP.CrossRider^
C:\Program Files (x86)\CinemaPlus-3.2cV17.06\629c710f-b5af-48f5-b1f2-c42563ded208-3.exe   =>PUP.CrossRider^
C:\Program Files (x86)\CinemaPlus-3.2cV17.06\629c710f-b5af-48f5-b1f2-c42563ded208-5.exe   =>PUP.CrossRider^
C:\Program Files (x86)\CinemaPlus-3.2cV17.06\629c710f-b5af-48f5-b1f2-c42563ded208-6.exe   =>PUP.CrossRider^
C:\Program Files (x86)\CinemaPlus-3.2cV17.06\629c710f-b5af-48f5-b1f2-c42563ded208-7.exe   =>PUP.CrossRider^
C:\Users\Christophe\AppData\Local\avabvbavad\avabvbavad.exe   =>Adware.Pirrit^
c:\programdata\{33d4e648-0d58-5e4f-33d4-4e6480d59920}\setup_668.exe   =>PUP.BidailySync^
C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\utility.exe   =>PUP.CrossBrowser^
C:\ProgramData\FlashBeat\FlashBeat.exe   =>PUP.FlashBeat^
C:\Program Files (x86)\CinemaPlus-4.1vV16.06\de8d36cd-2c45-4ecf-8573-62a63b02a5db-1-6.exe   =>PUP.CrossRider^
C:\Program Files (x86)\CinemaPlus-4.1vV16.06\de8d36cd-2c45-4ecf-8573-62a63b02a5db-1-7.exe   =>PUP.CrossRider^
C:\Program Files (x86)\CinemaPlus-4.1vV16.06\de8d36cd-2c45-4ecf-8573-62a63b02a5db-10.exe   =>PUP.CrossRider^
C:\Program Files (x86)\CinemaPlus-4.1vV16.06\de8d36cd-2c45-4ecf-8573-62a63b02a5db-3.exe   =>PUP.CrossRider^
C:\Program Files (x86)\CinemaPlus-4.1vV16.06\de8d36cd-2c45-4ecf-8573-62a63b02a5db-5.exe   =>PUP.CrossRider^
C:\Program Files (x86)\CinemaPlus-4.1vV16.06\de8d36cd-2c45-4ecf-8573-62a63b02a5db-6.exe   =>PUP.CrossRider^
C:\Program Files (x86)\CinemaPlus-4.1vV16.06\de8d36cd-2c45-4ecf-8573-62a63b02a5db-7.exe   =>PUP.CrossRider^
C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe   =>PUP.GlobalUpdate^
C:\Program Files (x86)\HighlightSearches\iren3006.exe   =>PUP.HighlightSearches^
C:\Users\Christophe\AppData\Roaming\WTools\Selection Tools\Selection Tools Update.exe   =>PUP.Nosibay^
C:\Program Files (x86)\SuperClick_1.10.0.16\Update\SuperClickAutoUpdateClient.exe   =>PUP.SuperClick^
C:\Users\Christophe\AppData\Roaming\Store\WindApp\WindApp Update.exe   =>PUP.Nosibay^
C:\Windows\Tasks\629c710f-b5af-48f5-b1f2-c42563ded208-1-6.job   =>PUP.CrossRider^
C:\Windows\System32\Tasks\629c710f-b5af-48f5-b1f2-c42563ded208-1-6   =>PUP.CrossRider^
C:\Windows\Tasks\629c710f-b5af-48f5-b1f2-c42563ded208-1-7.job   =>PUP.CrossRider^
C:\Windows\System32\Tasks\629c710f-b5af-48f5-b1f2-c42563ded208-1-7   =>PUP.CrossRider^
C:\Windows\Tasks\629c710f-b5af-48f5-b1f2-c42563ded208-10_user.job   =>PUP.CrossRider^
C:\Windows\System32\Tasks\629c710f-b5af-48f5-b1f2-c42563ded208-10_user   =>PUP.CrossRider^
C:\Windows\Tasks\629c710f-b5af-48f5-b1f2-c42563ded208-3.job   =>PUP.CrossRider^
C:\Windows\System32\Tasks\629c710f-b5af-48f5-b1f2-c42563ded208-3   =>PUP.CrossRider^
C:\Windows\Tasks\629c710f-b5af-48f5-b1f2-c42563ded208-5.job   =>PUP.CrossRider^
C:\Windows\System32\Tasks\629c710f-b5af-48f5-b1f2-c42563ded208-5   =>PUP.CrossRider^
C:\Windows\Tasks\629c710f-b5af-48f5-b1f2-c42563ded208-5_user.job   =>PUP.CrossRider^
C:\Windows\System32\Tasks\629c710f-b5af-48f5-b1f2-c42563ded208-5_user   =>PUP.CrossRider^
C:\Windows\Tasks\629c710f-b5af-48f5-b1f2-c42563ded208-6.job   =>PUP.CrossRider^
C:\Windows\System32\Tasks\629c710f-b5af-48f5-b1f2-c42563ded208-6   =>PUP.CrossRider^
C:\Windows\Tasks\629c710f-b5af-48f5-b1f2-c42563ded208-7.job   =>PUP.CrossRider^
C:\Windows\System32\Tasks\629c710f-b5af-48f5-b1f2-c42563ded208-7   =>PUP.CrossRider^
C:\Windows\Tasks\Bidaily Synchronize Task   =>PUP.BidailySync^
C:\Windows\System32\Tasks\Bidaily Synchronize Task   =>PUP.BidailySync^
C:\Windows\Tasks\Crossbrowse.job   =>PUP.CrossBrowser^
C:\Windows\System32\Tasks\Crossbrowse   =>PUP.CrossBrowser^
C:\Windows\Tasks\DBJXMQ1.job   =>PUP.FlashBeat^
C:\Windows\System32\Tasks\DBJXMQ1   =>PUP.FlashBeat^
C:\Windows\Tasks\de8d36cd-2c45-4ecf-8573-62a63b02a5db-1-6.job   =>PUP.CrossRider^
C:\Windows\System32\Tasks\de8d36cd-2c45-4ecf-8573-62a63b02a5db-1-6   =>PUP.CrossRider^
C:\Windows\Tasks\de8d36cd-2c45-4ecf-8573-62a63b02a5db-1-7.job   =>PUP.CrossRider^
C:\Windows\System32\Tasks\de8d36cd-2c45-4ecf-8573-62a63b02a5db-1-7   =>PUP.CrossRider^
C:\Windows\Tasks\de8d36cd-2c45-4ecf-8573-62a63b02a5db-10_user.job   =>PUP.CrossRider^
C:\Windows\System32\Tasks\de8d36cd-2c45-4ecf-8573-62a63b02a5db-10_user   =>PUP.CrossRider^
C:\Windows\Tasks\de8d36cd-2c45-4ecf-8573-62a63b02a5db-3.job   =>PUP.CrossRider^
C:\Windows\System32\Tasks\de8d36cd-2c45-4ecf-8573-62a63b02a5db-3   =>PUP.CrossRider^
C:\Windows\Tasks\de8d36cd-2c45-4ecf-8573-62a63b02a5db-5.job   =>PUP.CrossRider^
C:\Windows\System32\Tasks\de8d36cd-2c45-4ecf-8573-62a63b02a5db-5   =>PUP.CrossRider^
C:\Windows\Tasks\de8d36cd-2c45-4ecf-8573-62a63b02a5db-5_user.job   =>PUP.CrossRider^
C:\Windows\System32\Tasks\de8d36cd-2c45-4ecf-8573-62a63b02a5db-5_user   =>PUP.CrossRider^
C:\Windows\Tasks\de8d36cd-2c45-4ecf-8573-62a63b02a5db-6.job   =>PUP.CrossRider^
C:\Windows\System32\Tasks\de8d36cd-2c45-4ecf-8573-62a63b02a5db-6   =>PUP.CrossRider^
C:\Windows\Tasks\de8d36cd-2c45-4ecf-8573-62a63b02a5db-7.job   =>PUP.CrossRider^
C:\Windows\System32\Tasks\de8d36cd-2c45-4ecf-8573-62a63b02a5db-7   =>PUP.CrossRider^
C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job   =>PUP.GlobalUpdate^
C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore   =>PUP.GlobalUpdate^
C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job   =>PUP.GlobalUpdate^
C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineUA   =>PUP.GlobalUpdate^
[HKCU\Software\ArenaHD]   =>PUP.CrossRider^
[HKCU\Software\BoBrowser]   =>PUP.BoBrowser^
[HKCU\Software\BrowserV16.06-nv-ie]   =>PUP.CrossRider^
[HKCU\Software\CinemaPlus-3.2cV17.06-nv-ie]   =>PUP.CrossRider^
[HKCU\Software\CinemaPlus-3.2cV17.06-nv]   =>PUP.CrossRider^
[HKCU\Software\CinemaPlus-3.2cV17.06]   =>PUP.CrossRider^
[HKCU\Software\CinemaPlus-4.1vV16.06-nv-ie]   =>PUP.CrossRider^
[HKCU\Software\CinemaPlus-4.1vV16.06-nv]   =>PUP.CrossRider^
[HKCU\Software\CinemaPlus-4.1vV16.06]   =>PUP.CrossRider^
[HKCU\Software\CrossBrowser]   =>PUP.CrossBrowser^
[HKCU\Software\Crossbrowse]   =>PUP.CrossBrowser^
[HKCU\Software\HighDefAction]   =>PUP.CrossRider^
[HKCU\Software\MaxComputerCleanerConfig]   =>PUP.MaxComputerCleaner^
[HKCU\Software\MaxComputerCleanerLanguage]   =>PUP.MaxComputerCleaner^
[HKCU\Software\Store]   =>PUP.Nosibay^
[HKCU\Software\Super Optimizer]   =>PUP.SuperOptimizer^
[HKCU\Software\TutoTag]   =>PUP.AgenceExclusive^
[HKCU\Software\WTools]   =>PUP.Nosibay^
[HKCU\Software\WajIEnhance]   =>PUP.Wajam^
[HKCU\Software\YorkNewCin]   =>PUP.CrossRider^
[HKCU\Software\maxcomputerclenner]   =>PUP.MaxComputerCleaner^
[HKLM\Software\ArenaHD]   =>PUP.CrossRider^
[HKLM\Software\Flashbeat]   =>PUP.FlashBeat^
[HKLM\Software\HighDefAction]   =>PUP.CrossRider^
[HKLM\Software\Wow6432Node\9359ad8b-1a23-4ff2-ab34-7a6800a3c0ef]   =>PUP.CrossRider^
[HKLM\Software\Wow6432Node\9f50e6f5-26e3-4b3a-9df1-2668b09c8e40]   =>PUP.CrossRider^
[HKLM\Software\Wow6432Node\ArenaHD]   =>PUP.CrossRider^
[HKLM\Software\Wow6432Node\CinemaPlus-3.2cV17.06-nv-ie]   =>PUP.CrossRider^
[HKLM\Software\Wow6432Node\CinemaPlus-3.2cV17.06-nv]   =>PUP.CrossRider^
[HKLM\Software\Wow6432Node\CinemaPlus-4.1vV16.06-nv-ie]   =>PUP.CrossRider^
[HKLM\Software\Wow6432Node\CinemaPlus-4.1vV16.06-nv]   =>PUP.CrossRider^
[HKLM\Software\Wow6432Node\Conduit]   =>Toolbar.Conduit^
[HKLM\Software\Wow6432Node\Flashbeat]   =>PUP.FlashBeat^
[HKLM\Software\Wow6432Node\HighDefAction]   =>PUP.CrossRider^
[HKLM\Software\Wow6432Node\ORBTR]   =>Toolbar.Conduit^
[HKLM\Software\Wow6432Node\SPPDCOM]   =>Rogue.PCSpeedUp^
[HKLM\Software\Wow6432Node\SupDp]   =>PUP.SupTab^
[HKLM\Software\Wow6432Node\TabNav]   =>PUP.Abengine^
[HKLM\Software\Wow6432Node\YorkNewCin]   =>PUP.CrossRider^
[HKLM\Software\Wow6432Node\searchult]   =>PUP.Optional^
[HKLM\Software\Wow6432Node\supTab]   =>PUP.SupTab^
[HKLM\Software\YorkNewCin]   =>PUP.CrossRider^
C:\Windows\Installer\159c2e.msi   =>PUP.GlobalUpdate^
[HKCR\CLSID\{4029B397-87CE-4BEB-9236-67557A9007CC}] (youtubeadblocker)   =>PUP.Multiplug^
C:\Users\christophe\AppData\Local\Temp\dlLogic.exe  =>Toolbar.Conduit
~ Additionnel Scan: 248512 Items scanned in 00mn 22s



---\\ Informations complémentaires sur les modules
~ http://www.nicolascoolman.fr/r5-internet-explorer-proxy-management-iepm/  =>.Internet Explorer, Proxy Management (R5)
~ http://www.nicolascoolman.fr/o2-browser-helper-objects-de-navigateur/  =>.Browser Helper Objects de navigateur (O2)
~ http://www.nicolascoolman.fr/o3-internet-explorer-toolbars/  =>.Internet Explorer Toolbars (O3)
~ http://www.nicolascoolman.fr/o4-applications-demarrees-par-le-registre/  =>.Applications lancées au démarrage du système (O4)
~ AMI: 4 Legitimates Filtered in 00mn 00s



---\\ Récapitulatif des détections trouvées sur votre station
http://www.nicolascoolman.fr/pup-searchprotect  =>PUP.SearchProtect
http://www.nicolascoolman.fr/pup-crossrider  =>PUP.CrossRider
http://www.nicolascoolman.fr/blog/  =>PUP.CrossBrowser
http://www.nicolascoolman.fr/pup-smartwebsearch  =>PUP.SmartWeb
http://www.nicolascoolman.fr/pup-startsearch  =>PUP.StartSearch
http://www.nicolascoolman.fr/35828469-pup-youtubeadblocker-  =>PUP.YouTubeAdBlock
http://www.nicolascoolman.fr/blog/  =>PUP.LuckyTab
http://www.nicolascoolman.fr/blog/  =>PUP.PriceLess
http://www.nicolascoolman.fr/blog/  =>Adware.GamesDesktop
http://www.nicolascoolman.fr/blog/  =>PUP.ContinueLiveInstallation
http://www.nicolascoolman.fr/blog/  =>PUP.PepperZip
http://www.nicolascoolman.fr/pup-bubbledock  =>PUP.BubbleDock
http://www.nicolascoolman.fr/blog/  =>PUP.Nosibay
http://www.nicolascoolman.fr/blog/  =>PUP.MovieDea
http://www.nicolascoolman.fr/blog/  =>PUP.Wincheck
http://www.nicolascoolman.fr/adware-downware  =>Adware.Downware
http://www.nicolascoolman.fr/blog/  =>PUP.HighlightSearches
http://www.nicolascoolman.fr/pup-globalupdate  =>PUP.GlobalUpdate
http://www.nicolascoolman.fr/blog/  =>PUP.MiuiTab
http://www.nicolascoolman.fr/blog/  =>PUP.Infonaut
http://www.nicolascoolman.fr/blog/  =>PUP.BreakingNewsAlert
http://www.nicolascoolman.fr/blog/  =>PUP.SuperClick
http://www.nicolascoolman.fr/blog/  =>PUP.Fuyu
http://www.nicolascoolman.fr/blog/  =>Adware.Pirrit
http://www.nicolascoolman.fr/blog/  =>PUP.BidailySync
http://www.nicolascoolman.fr/blog/  =>PUP.FlashBeat
http://www.nicolascoolman.fr/blog/  =>PUP.MaxComputerCleaner
http://www.nicolascoolman.fr/blog/  =>PUP.BoBrowser
http://www.nicolascoolman.fr/pup-eorezo  =>PUP.Eorezo
http://www.nicolascoolman.fr/blog/  =>Adware.Graftor
http://www.nicolascoolman.fr/blog/  =>Toolbar.AskBar
http://www.nicolascoolman.fr/pup-certifiedtoolbar  =>PUP.CertifiedToolbar
http://www.nicolascoolman.fr/blog/  =>PUP.BrowserExtensions
http://www.nicolascoolman.fr/blog/  =>PUP.SuperOptimizer
http://www.nicolascoolman.fr/spyware-agenceexclusive  =>PUP.AgenceExclusive
http://www.nicolascoolman.fr/pup-wajam  =>PUP.Wajam
http://www.nicolascoolman.fr/toolbar-conduit  =>Toolbar.Conduit
http://www.nicolascoolman.fr/adware-imbooster  =>Adware.IMBooster
http://www.nicolascoolman.fr/rogue-pcspeedup  =>Rogue.PCSpeedUp
http://www.nicolascoolman.fr/pup-suptab  =>PUP.SupTab
http://www.nicolascoolman.fr/blog/  =>PUP.Abengine
http://www.nicolascoolman.fr/blog/  =>PUP.Optional
http://www.nicolascoolman.fr/blog/  =>Adware.Abengine
http://www.nicolascoolman.fr/hijacker-trovicom  =>Hijacker.TroviCom
http://www.nicolascoolman.fr/pup-mutiplug  =>PUP.Multiplug
http://www.nicolascoolman.fr/pup-v9software  =>PUP.V9Software
http://www.nicolascoolman.fr/toolbar-ask  =>Toolbar.Ask
http://www.nicolascoolman.fr/blog/  =>Spyware.AgenceExclusive
http://www.nicolascoolman.fr/blog/  =>PUP.Conduit
http://www.nicolascoolman.fr/hijacker-eazel  =>Hijacker.Eazel
http://www.nicolascoolman.fr/pup-optimizerpro  =>PUP.OptimizerPro
~ MSI: 51 link(s) detected in 00mn 00s



~ 846 Legitimates filtered by white list
End of the scan (1013 lines in 01mn 14s)(0.10)