start CloseProcesses: CreateRestorePoint: HKLM-x32\...\Run: [] => [X] HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = URLSearchHook: HKU\S-1-5-21-2358193056-592893953-1459809256-1000 - (Pas de nom) - {249d74a3-bd19-4657-b6ce-e62f480a20de} - Pas de fichier SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM-x32 -> {1ea689d5-61f5-4654-9a46-2ef703429b48} URL = hxxp://search.tb.ask.com/search/GGmain.jhtml?p2=^BE4^xdm432^YYA^fr&si=STF_BOTTOM_WW&ptb=718D2ABF-48C6-4076-B275-7A9AE4AAE96B&ind=2015030904&n=781aee78&psa=&st=sb&searchfor={searchTerms} SearchScopes: HKU\S-1-5-21-2358193056-592893953-1459809256-1000 -> {1ea689d5-61f5-4654-9a46-2ef703429b48} URL = hxxp://search.tb.ask.com/search/GGmain.jhtml?p2=^BE4^xdm432^YYA^fr&si=STF_BOTTOM_WW&ptb=718D2ABF-48C6-4076-B275-7A9AE4AAE96B&ind=2015030904&n=781aee78&psa=&st=sb&searchfor={searchTerms} SearchScopes: HKU\S-1-5-21-2358193056-592893953-1459809256-1000 -> {DBAF800F-3929-488F-B1C1-271AB697FE23} URL = SearchScopes: HKU\S-1-5-21-2358193056-592893953-1459809256-1000 -> {E3744EA6-8CE6-4736-84A5-24F5E05D5BA7} URL = hxxp://www.search.ask.com/web?tpid=ORJ-SPE&o=APN11406&pf=V7&p2=^BBE^OSJ000^YY^FR&gct=&itbv=12.24.1.51&apn_uid=621D713B-0255-4078-ADB3-B28008265DF1&apn_ptnrs=BBE&apn_dtid=^OSJ000^YY^FR&apn_dbr=ie&doi=2015-05-12&trgb=IE&q={searchTerms}&psv=&pt=tb BHO: OffresShopping -> {F4A9D6FE-8C16-4D72-B845-7AE0FFAB2DAB} -> C:\Program Files\WikiMotInstaller\BHO.dll [2015-02-10] (Prestafind) BHO-x32: OffresShopping -> {F4A9D6FE-8C16-4D72-B845-7AE0FFAB2DAB} -> C:\Program Files (x86)\WikiMotInstaller\BHO.dll [2015-02-10] (Prestafind) Toolbar: HKU\S-1-5-21-2358193056-592893953-1459809256-1000 -> Pas de nom - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - Pas de fichier FF Plugin: @microsoft.com/GENUINE -> disabled [Pas de fichier] FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Pas de fichier] EmptyTemp: end