Actualité informatique
Test comparatif matériel informatique
Jeux vidéo
Astuces informatique
Vidéo
Télécharger
Services en ligne
Forum informatique
01Business

|-  SECURITE


|||-  

probleme searchnu

 

Ajouter une réponse
 

 
Page photos
 
     
Vider la liste des messages à citer
 
 Page :
1
Auteur
 Sujet :

probleme searchnu

Prévenir les modérateurs en cas d'abus 
valou6781
valou6781
  1. Posté le 24/06/2013 à 11:30:35  
  1. answer
  1. Prévenir les modérateurs en cas d'abus
 
bonjour , j ai depuis une semaine searchnu a la place de google et impossible de m en debarasser ! merci de m aider

La Mayenne-son calme -sa verdu
Profil : Equipe sécurité
  1. homepage
bernard53
Membre impliqué (de 20 000 à 29 999 messages postés) Helpeur confirmé Fan Club de Clic-Clic
  1. Posté le 24/06/2013 à 12:00:04  
  1. answer
  1. Prévenir les modérateurs en cas d'abus
 
:hello:
 Télécharge AdwCleaner ( d'Xplode ) sur ton bureau.  
 
 http://nsm05.casimages.com/img​/2012/09/11//12091108285615405​010308271.png
 http://general-changelog-team. [...] adwcleaner

 
 http://nsm05.casimages.com/img​/2012/09/11//12091108285915405​010308272.png

 - Lances le en mode normal , puis cliques sur [Suppression]
 - Lorsque le message indiquant qu'AdwCleaner a détecté une variante spécifique d'adware s'affiche , cliquez sur [OK]

 - L'ordinateur va redémarrer tout seul. Redémarre-le en mode normal.
 - AdwCleaner s'ouvrira normalement, avec comme seul choix possible [Suppression]

 - Cliquez dessus, puis patientes pendant la suppression.
 - Une fois la suppression effectuée, AdwCleaner vous invitera à redémarrer l'ordinateur

 - Au redémarrage, un rapport s'ouvrira. Postes le sur le forum.

 Note : Le rapport est également sauvegardé sous C:\AdwCleaner[S1].txt

 Ensuite:
 Télécharges << ZHPDiag>>  (de Nicolas Coolman)

 dezzipes le fichier sur ton bureau...
 Fais un clic-droit sur l'icône ZHPDiag .exe et choisis "exécuter en tant qu'administrateur".


 L'installation va créer  raccourcis (ZHPDiag et ZHPFix et MBRchek) sur ton bureau
 
 http://nsa26.casimages.com/img​/2011/02/04/110204080230569695​.jpg

 ET :

 



 
 Si le bouton UAC apparaît dans le panel supérieur cela signifie que votre UAC est activée. L'activation de l'UAC gène l'analyse deZHPDiag sur certains modules (O18,O23,O42,...).
 Aussi pour permettre un scan complet de l'outil, vous devez au préalable cliquer sur ce bouton.
 Ce qui aura pour conséquence de relancer ZHPDiag avec une désactivation temporaire de l'UAC.
 



 A la fin de l'installation ZHPDiag va se lancer....

 Cliques sur "Lancer le diagnostic " (image de la loupe) et patiente...

 A la fin du scan le rapport est sauvegardé directement  sur ton bureau.



 ZHPDiag.txt




 Mets le rapport ici car il prend bien de la place.
 http://cjoint.com/
 ou.
 http://www.1fichier.com/

(Publicité)
valou6781
  1. Posté le 24/06/2013 à 12:37:30  
  1. answer
  1. Prévenir les modérateurs en cas d'abus
 
Rapport de ZHPDiag v2013.6.19.29 par Nicolas Coolman, Update du 18/06/2013
 Run by Valou at 24/06/2013 13:31:04
 WebSite: http://nicolascoolman.webs.com
 State : Nouvelle version disponible
 WhiteList : Enable
 High Elevated Privileges : OK
 UAC : Activate by user


 ---\\ Web Browser
 MSIE: Internet Explorer v9.0.8112.16421
 GCIE: Google Chrome v27.0.1453.116 (Defaut)

 ---\\ Windows Product Information
 ~ Langage: Français
 Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)
 Windows Server License Manager Script : OK
 ~ Windows(R) 7, OEM_SLP channel
 System Locked Preinstallation (OEM_SLP) : OK
 Windows ID Activation : OK
 ~ Windows Partial Key : 3Q6C9
 Windows License : OK
 ~ Windows Remaining Initializations Number : 3
 Software Protection Service (Protection logicielle) : OK
 Windows Automatic Updates : OK
 Windows Activation Technologies : OK

 ---\\ System Protection
 avast! Free Antivirus v7.0.1466.0
 AVG 2013 v13.0.2904
 Norton Internet Security v17.9.0.12
 McAfee Security Scan Plus v3.0.318.3
 Windows Defender W7

 ---\\ System Optimizer
 Uniblue RegistryBooster 2010

 ---\\ Peer To Peer (P2P)

 ---\\ Software Update
 Adobe Flash Player 11 Plugin
 Adobe Reader X

 ---\\ System Information
 ~ Processor: AMD64 Family 16 Model 6 Stepping 2, AuthenticAMD
 ~ Operating System: 64 Bits
 Boot mode: Normal (Normal boot)
 Total RAM: 3839 MB (62% free)
 System Restore: Activé (Enable)
 System drive C: has 507 GB (86%) free of 584 GB

 ---\\ Logged in mode
 ~ Computer Name: VALOU-PC
 ~ User Name: Valou
 ~ All Users Names: Valou, HomeGroupUser$, Administrateur,
 ~ Unselected Option: O45,O61,O62,O65,O66,O80,O82,O8​9
 Logged in as Administrator

 ---\\ Environnement Variables
 ~ System Unit : C:\
 ~ %AppData% : C:\Users\Valou\AppData\Roaming​\
 ~ %Desktop% : C:\Users\Valou\Desktop\
 ~ %Favorites% : C:\Users\Valou\Favorites\
 ~ %LocalAppData% : C:\Users\Valou\AppData\Local\
 ~ %StartMenu% : C:\Users\Valou\AppData\Roaming​\Microsoft\Windows\Start Menu\
 ~ %Windir% : C:\Windows\
 ~ %System% : C:\Windows\System32\

 ---\\ DOS/Devices
 C:\ Hard drive, Flash drive, Thumb drive (Free 507 Go of 584 Go)
 D:\ Hard drive, Flash drive, Thumb drive (Free 2 Go of 12 Go)
 E:\ CD-ROM drive (Not Inserted)
 F:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
 G:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
 H:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
 I:\ Floppy drive, Flash card reader, USB Key (Not Inserted)



 ---\\ Security Center & Tools Informations
 [HKLM\SOFTWARE\Microsoft\Window​s\CurrentVersion\Policies\Expl​orer] NoActiveDesktopChanges: Modified
 ~ Security Center: 32 Legitimates Filtered in 00mn 00s



 ---\\ Recherche particulière de fichiers génériques
 [MD5.332FEAB1435662FC6C672E25BE​B37BE3] - (.Microsoft Corporation - Explorateur Windows.) (.25/02/2011 - 07:19:30.) -- C:\Windows\Explorer.exe [2871808]
 [MD5.94355C28C1970635A31B3FE52E​B7CEBA] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 - 02:39:52.) -- C:\Windows\System32\Wininit.ex​e [129024]
 [MD5.4FBE96D97A1E070A06F76F6725​5C756D] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.17/05/2013 - 04:02:29.) -- C:\Windows\System32\wininet.dl​l [1392128]
 [MD5.1151B1BAA6F350B1DB6598E0FE​A7C457] - (.Microsoft Corporation - Application d’ouverture de session Windows.) (.20/11/2010 - 14:25:30.) -- C:\Windows\System32\Winlogon.e​xe [390656]
 [MD5.067FA52BFB59A56110A12312EF​9AF243] - (.Microsoft Corporation - Bibliothèque de licences.) (.20/11/2010 - 14:27:26.) -- C:\Windows\System32\sppcomapi.​dll [232448]
 [MD5.1C7857B62DE5994A75B054A9FD​4C3825] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.28/12/2011 - 04:59:24.) -- C:\Windows\system32\Drivers\AF​D.sys [498688]
 [MD5.02062C0B390B7729EDC9E69C68​0A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 - 02:52:21.) -- C:\Windows\system32\Drivers\at​api.sys [24128]
 [MD5.B8BD2BB284668C84865658C775​74381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/07/2009 - 00:19:47.) -- C:\Windows\system32\Drivers\Cd​fs.sys [92160]
 [MD5.F036CE71586E93D94DAB220D7B​DF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.20/11/2010 - 10:19:21.) -- C:\Windows\system32\Drivers\Cd​rom.sys [147456]
 [MD5.9BB2EF44EAA163B29C4A458788​7A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.20/11/2010 - 10:26:32.) -- C:\Windows\system32\Drivers\Df​sC.sys [102400]
 [MD5.97BFED39B6B79EB12CDDBFEED5​1F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.20/11/2010 - 11:43:43.) -- C:\Windows\system32\Drivers\HD​AudBus.sys [122368]
 [MD5.FA55C73D4AFFA7EE23AC4BE53B​4592D3] - (.Microsoft Corporation - Pilote de port i8042.) (.14/07/2009 - 00:19:57.) -- C:\Windows\system32\Drivers\i8​042prt.sys [105472]
 [MD5.AF9B39A7E7B6CAA203B3862582​E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.14/07/2009 - 01:10:03.) -- C:\Windows\system32\Drivers\Ip​Nat.sys [116224]
 [MD5.A5D9106A73DC88564C825D317C​AC68AC] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.27/04/2011 - 03:40:40.) -- C:\Windows\system32\Drivers\MR​xSmb.sys [158208]
 [MD5.09594D1089C523423B32A42292​63F068] - (.Microsoft Corporation - MBT Transport driver.) (.20/11/2010 - 10:23:20.) -- C:\Windows\system32\Drivers\ne​tBT.sys [261632]
 [MD5.B98F8C6E31CD07B2E6F71F7F64​8E38C0] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.12/04/2013 - 15:45:08.) -- C:\Windows\system32\Drivers\nt​fs.sys [1656680]
 [MD5.0086431C29C35BE1DBC43F52CC​273887] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/07/2009 - 01:00:41.) -- C:\Windows\system32\Drivers\Pa​rport.sys [97280]
 [MD5.471815800AE33E6F1C32FB1B97​C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.20/11/2010 - 11:52:35.) -- C:\Windows\system32\Drivers\Ra​sl2tp.sys [129536]
 [MD5.548260A7B8654E024DC30BF8A7​C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.14/07/2009 - 01:09:09.) -- C:\Windows\system32\Drivers\sm​b.sys [93184]
 [MD5.DDAD5A7AB24D8B65F8D724F5C2​0FD806] - (.Microsoft Corporation - TDI Translation Driver.) (.20/11/2010 - 10:21:56.) -- C:\Windows\system32\Drivers\td​x.sys [119296]
 [MD5.0D08D2F3B3FF84E433346669B5​E0F639] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.20/11/2010 - 14:34:02.) -- C:\Windows\system32\Drivers\vo​lsnap.sys [295808]
 ~ Generic Processes:  Scanned in 00mn 00s



 ---\\ Etat des fichiers cachés (Caché/Total)
 ~ Mes images (My Pictures) : 2/3438
 ~ Mes musiques (My Musics) : 18/310
 ~ Mes Videos (My Videos) : 6/11
 ~ Mes Favoris (My Favorites) : 1/20
 ~ Mes Documents (My Documents) : 1/39
 ~ Mon Bureau (My Desktop) : 1/6
 ~ Menu demarrer (Programs) : 1/34
 ~ Hidden Files:  Scanned in 00mn 02s



 ---\\ Processus lancés
 [MD5.A5F78606A9BA8F0C4C8FF9DED6​ED5107] - (.Hewlett-Packard - HP Advisor.) -- C:\Program Files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe   [1685048] [PID.3904]
 [MD5.E72E98FEB4160E8B40075604EF​C723EC] - (.Badoo - Badoo Desktop.) -- C:\ProgramData\Badoo\Badoo desktop\1.6.58.1220\Badoo.desk​top.exe   [1067232] [PID.4032]
 [MD5.5A576A22EC45B5311A5C00DBFE​F6F44A] - (.Sony - Sony PC Companion.) -- C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe   [448736] [PID.4092]
 [MD5.F920FBB43C1CDB905044C91B9A​3FD516] - (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe   [18643560] [PID.3144]
 [MD5.E02E715FA2BC8D88FF9362374E​309D76] - (.Hewlett-Packard Company - Pas de description.) -- C:\Program Files (x86)\Common Files\LightScribe\LightScribeC​ontrolPanel.exe   [2363392] [PID.3268]
 [MD5.554A50B5310E702029D3A67545​9108FF] - (.Hewlett-Packard - hpsysdrv.) -- C:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe   [62768] [PID.3700]
 [MD5.47DCE3A2FE0B34DD9F01EB4037​303A3E] - (.Hewlett-Packard - HP Remote Solution.) -- C:\Program Files (x86)\Hewlett-Packard\HP Remote Solution\HP_Remote_Solution.ex​e   [656896] [PID.3840]
 [MD5.5516C26A6AF8EB4E2CAB48EC98​A74398] - (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files (x86)\hp\HP Software Update\hpwuschd2.exe   [54576] [PID.3864]
 [MD5.14AB31B4F673A3AF348A40B20B​B2F587] - (...) -- C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe   [70832] [PID.3356]
 [MD5.7CD15923470A612813C16A6F6D​F5FEF3] - (.Pas de propriétaire - NetgearCUv2 MFC Application.) -- C:\Program Files (x86)\NETGEAR\WG111v3\WG111v3.​exe   [2072576] [PID.3920]
 [MD5.6E3245DF783E58375B3465F032​74743E] - (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe   [254696] [PID.3772]
 [MD5.BAD0D303EF0A519409C625738F​3E10A3] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\Alwil Software\Avast5\AvastUI.exe   [4282728] [PID.1176]
 [MD5.9DADF1A809ECEC86F04BDE3519​0D59FE] - (.AVG Technologies CZ, s.r.o. - AVG User Interface.) -- C:\Program Files (x86)\AVG\AVG2013\avgui.exe   [3147384] [PID.4168]
 [MD5.BD713579A87D698E1F2158CE10​E48130] - (.McAfee, Inc. - McAfee Security Scanner Scheduler.) -- C:\Program Files (x86)\McAfee Security Scan\3.0.318\SSScheduler.exe   [272248] [PID.4300]
 [MD5.30426544CDDC55B8B71DEB5567​22ECE3] - (.CyberLink - CyberLink MediaLibray Service.) -- c:\Program Files (x86)\Hewlett-Packard\TouchSma​rt\Media\Kernel\CLML\CLMLSvc.e​xe   [210216] [PID.4680]
 [MD5.8911702CC546B76FE8F9C61987​C68C43] - (.Microsoft Corporation - Internet Low-Mic Utility Tool.) -- C:\Program Files (x86)\Internet Explorer\IELowutil.exe   [222720] [PID.3808]
 [MD5.93F3E290C4AE854680E1F2B721​10DD46] - (.Microsoft Corp. - Barre d'outils Bing.) -- C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2156.0\ms​winext.exe   [267536] [PID.6960]
 [MD5.5521928AA79079565B7CB8FCE6​806131] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Applicatio​n\chrome.exe   [825808] [PID.2316]
 [MD5.44BA6701B36DE1F6C0661E7320​80ADCF] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe   [7521280] [PID.3872]
 [MD5.04AC21E821F259845BD7367CEE​057290] - (.AVAST Software - avast! Service.) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe   [44808] [PID.1564]
 [MD5.ADDA5E1951B90D3D23C56D3CF0​622ADC] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe   [65640] [PID.1812]
 [MD5.249A44DCFA2500EB1C020E33A3​E9F25B] - (.Adobe Systems Incorporated - Adobe® Flash® Player Update Service 11.6 r6.) -- C:\Windows\SysWOW64\Macromed\F​lash\FlashPlayerUpdateService.​exe   [163328] [PID.1848]
 [MD5.4AFC14AFA58878FAA1D249E7E9​0EA54B] - (.AVG Technologies CZ, s.r.o. - AVG Identity Protection Service.) -- C:\Program Files (x86)\AVG\AVG2013\avgidsagent.​exe   [5814904] [PID.1880]
 [MD5.6B72E1E329C4E98C6B6FDD2D26​5E3BA3] - (.AVG Technologies CZ, s.r.o. - AVG Watchdog Service.) -- C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe   [196664] [PID.1520]
 [MD5.2238B91AC1A12CC6CC4C4FED41​258B2A] - (.Hewlett-Packard Company - LightScribe Service.) -- c:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe   [73728] [PID.2492]
 [MD5.B4187346F54E362DAFFE647B25​A58D50] - (.Symantec Corporation - Symantec Service Framework.) -- C:\Program Files (x86)\Norton Internet Security\Engine\17.9.0.12\ccSv​cHst.exe   [126400] [PID.2628]
 [MD5.3A4F2C0BB87A0895ABEBA341AA​1E341B] - (.Avanquest Software - Sony PCCompanion Service.) -- C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe   [155824] [PID.3552]
 ~ Processes Running:  Scanned in 00mn 01s



 ---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
 C:\Users\Valou\AppData\Local\G​oogle\Chrome\User Data\Default\Preferences
 G0 - GCSP: Preference [User Data\Default][HomePage] http://www.searchnu.com
 G0 - GCSP: Preference [User Data\Default] http://www.searchnu.com
 ~ Google Browser: 9 Legitimates Filtered in 00mn 07s



 ---\\ Internet Explorer, Proxy Management (R5)
 R5 - HKCU\Software\Microsoft\Window​s\CurrentVersion\Internet Settings,ProxyServer = no key
 R5 - HKCU\Software\Microsoft\Window​s\CurrentVersion\Internet Settings,ProxyEnable = 0
 R5 - HKCU\Software\Microsoft\Window​s\CurrentVersion\Internet Settings,MigrateProxy = 1
 R5 - HKCU\Software\Microsoft\Window​s\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
 R5 - HKCU\Software\Microsoft\Window​s\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
 ~ Proxy management:  Scanned in 00mn 00s



 ---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
 F2 - REG:system.ini: USERINIT=C:\Windows\system32\u​serinit.exe,
 F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
 F2 - REG:system.ini: VMApplet=C:\Windows\System32\S​ystemPropertiesPerformance.exe
 ~ Keys:  Scanned in 00mn 00s



 ---\\ Redirection du fichier Hosts (O1)
 ~ Le fichier hosts est sain (The hosts file is clean).
 ~ Hosts File:  Scanned in 00mn 00s
 ~ Nombre de lignes (Lines number): 21



 ---\\ Browser Helper Objects de navigateur (O2)
 O2 - BHO: Bing Bar BHO [64Bits] - {d2ce3e00-f94a-4740-988e-03dc2​f38c34f} . (.Microsoft Corporation - Bing Bar.) -- C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2156.0\np​winext.dll
 ~ BHO: 11 Legitimates Filtered in 00mn 00s



 ---\\ Internet Explorer Toolbars (O3)
 O3 - Toolbar: (no name) [64Bits] - [HKLM]{318A227B-5E9F-45bd-8999-​7F8F1​0CA4CF5} Clé orpheline
 O3 - Toolbar: Google Toolbar [64Bits] - [HKLM]{2318C2B1-4965-11d4-9B18-​00902​7A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
 ~ Toolbar:  Scanned in 00mn 00s



 ---\\ Applications démarrées par registre & par dossier (O4)
 O4 - HKLM\..\Run: [NvCplDaemon] . (.NVIDIA Corporation - NVIDIA Display Properties Extension.) -- C:\Windows\system32\NvCpl.dll
 O4 - HKLM\..\Run: [SmartMenu] . (.Pas de propriétaire - SmartMenu.) -- C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe
 O4 - HKLM\..\Run: [PC-Doctor for Windows localizer] . (.PC-Doctor, Inc. - Hardware Diagnostic Tools Localizer.) -- C:\Program Files\PC-Doctor for Windows\localizer.exe
 O4 - HKLM\..\Run: [Zune Launcher] . (.Microsoft Corporation - Zune Auto-Launcher.) -- c:\Program Files\Zune\ZuneLauncher.exe
 O4 - HKLM\..\Run: [PC Optimizer Pro] C:\Program Files\PC Optimizer Pro\StartApps.exe (.not file.)   =>PUP.OptimizerPro
 O4 - HKCU\..\Run: [HPADVISOR] . (.Hewlett-Packard - HP Advisor.) -- C:\Program Files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe
 O4 - HKCU\..\Run: [Badoo Desktop] . (.Badoo - Badoo Desktop.) -- C:\ProgramData\Badoo\Badoo desktop\1.6.58.1220\Badoo.desk​top.exe
 O4 - HKCU\..\Run: [Steam] . (.Valve Corporation - Steam.) -- C:\Program Files (x86)\Valve\Steam\Steam.exe
 O4 - HKCU\..\Run: [Exetender] C:\Program Files (x86)\FantastiGames\GPlayer.ex​e (.not file.)
 O4 - HKCU\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files (x86)\Google\GoogleToolbarNoti​fier\GoogleToolbarNotifier.exe
 O4 - HKCU\..\Run: [Sony PC Companion] . (.Sony - Sony PC Companion.) -- C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe
 O4 - HKCU\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe
 O4 - HKCU\..\Run: [LightScribe Control Panel] . (.Hewlett-Packard Company - Pas de description.) -- C:\Program Files (x86)\Common Files\LightScribe\LightScribeC​ontrolPanel.exe
 O4 - HKLM\..\Wow6432Node\Run: [hpsysdrv] . (.Hewlett-Packard - hpsysdrv.) -- c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe
 O4 - HKLM\..\Wow6432Node\Run: [HP Remote Solution] . (.Hewlett-Packard - HP Remote Solution.) -- C:\Program Files (x86)\Hewlett-Packard\HP Remote Solution\HP_Remote_Solution.ex​e
 O4 - HKLM\..\Wow6432Node\Run: [HP Software Update] . (.Hewlett-Packard - hpwuSchd Application.) -- c:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
 O4 - HKLM\..\Wow6432Node\Run: [NortonOnlineBackupReminder] . (.Symantec Corporation - Norton Online Backup Service.) -- C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivati​on.exe
 O4 - HKLM\..\Wow6432Node\Run: [Easybits Recovery] . (.EasyBits Software AS - Pas de description.) -- C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe
 O4 - HKLM\..\Wow6432Node\Run: [Microsoft Default Manager] . (.Microsoft Corporation - Microsoft Default Manager.) -- C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe
 O4 - HKLM\..\Wow6432Node\Run: [NPSStartup] Clé orpheline
 O4 - HKLM\..\Wow6432Node\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.e​xe
 O4 - HKLM\..\Wow6432Node\Run: [SunJavaUpdateSched] . (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
 O4 - HKLM\..\Wow6432Node\Run: [avast] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\Alwil Software\Avast5\avastUI.exe
 O4 - HKLM\..\Wow6432Node\Run: [AVG_UI] . (.AVG Technologies CZ, s.r.o. - AVG User Interface.) -- C:\Program Files (x86)\AVG\AVG2013\avgui.exe
 O4 - HKUS\S-1-5-18\..\Run: [Exetender] C:\Program Files (x86)\FantastiGames\GPlayer.ex​e (.not file.)
 O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
 O4 - HKUS\S-1-5-19\..\Run: [Exetender] C:\Program Files (x86)\FantastiGames\GPlayer.ex​e (.not file.)
 O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
 O4 - HKUS\S-1-5-20\..\Run: [Exetender] C:\Program Files (x86)\FantastiGames\GPlayer.ex​e (.not file.)
 O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.e​xe
 O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.e​xe
 O4 - HKUS\S-1-5-21-3043695041-61686​863-1383454446-1000\..\Run: [HPADVISOR] . (.Hewlett-Packard - HP Advisor.) -- C:\Program Files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe
 O4 - HKUS\S-1-5-21-3043695041-61686​863-1383454446-1000\..\Run: [Badoo Desktop] . (.Badoo - Badoo Desktop.) -- C:\ProgramData\Badoo\Badoo desktop\1.6.58.1220\Badoo.desk​top.exe
 O4 - HKUS\S-1-5-21-3043695041-61686​863-1383454446-1000\..\Run: [Steam] . (.Valve Corporation - Steam.) -- C:\Program Files (x86)\Valve\Steam\Steam.exe
 O4 - HKUS\S-1-5-21-3043695041-61686​863-1383454446-1000\..\Run: [Exetender] C:\Program Files (x86)\FantastiGames\GPlayer.ex​e (.not file.)
 O4 - HKUS\S-1-5-21-3043695041-61686​863-1383454446-1000\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files (x86)\Google\GoogleToolbarNoti​fier\GoogleToolbarNotifier.exe
 O4 - HKUS\S-1-5-21-3043695041-61686​863-1383454446-1000\..\Run: [Sony PC Companion] . (.Sony - Sony PC Companion.) -- C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe
 O4 - HKUS\S-1-5-21-3043695041-61686​863-1383454446-1000\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe
 O4 - HKUS\S-1-5-21-3043695041-61686​863-1383454446-1000\..\Run: [LightScribe Control Panel] . (.Hewlett-Packard Company - Pas de description.) -- C:\Program Files (x86)\Common Files\LightScribe\LightScribeC​ontrolPanel.exe
 ~ Application:  Scanned in 00mn 00s



 ---\\ Autres liens utilisateurs (O4)
 O4 - GS\TaskBar: Google Chrome.lnk . (.Google Inc. - Google Chrome.)  -- C:\Program Files (x86)\Google\Chrome\Applicatio​n\chrome.exe
 O4 - GS\TaskBar: HP MediaSmart.lnk . (...)  -- C:\Program Files (x86)\Hewlett-Packard\HP MediaSmart\SmartMenu.exe (.not file.)
 O4 - GS\TaskBar: HPAdvisor.lnk . (.Hewlett-Packard - HP Advisor.)  -- C:\Program Files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe
 O4 - GS\TaskBar: Windows Explorer.lnk . (.Microsoft Corporation - Explorateur Windows.)  -- C:\Windows\explorer.exe
 O4 - GS\TaskBar: Windows Media Player.lnk . (.Microsoft Corporation - Lecteur Windows Media.)  -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
 O4 - GS\Programs: Badoo Desktop.lnk . (.Badoo - Badoo Desktop.)  -- C:\ProgramData\Badoo\Badoo desktop\1.6.58.1220\Badoo.desk​top.exe
 O4 - GS\Programs: Internet Explorer (64-bit).lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files\Internet Explorer\iexplore.exe
 O4 - GS\Programs: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
 O4 - GS\QuickLaunch: aTube Catcher.lnk . (.DsNET - aTube Catcher to download and convert video.)  -- C:\Program Files\aTube Catcher 2.0\yct.exe
 O4 - GS\QuickLaunch: Badoo.Desktop.lnk . (.Badoo - Badoo Desktop.)  -- C:\ProgramData\Badoo\Badoo desktop\1.6.58.1220\Badoo.desk​top.exe
 O4 - GS\QuickLaunch: Google Chrome.lnk . (.Google Inc. - Google Chrome.)  -- C:\Program Files (x86)\Google\Chrome\Applicatio​n\chrome.exe
 O4 - GS\QuickLaunch: iLivid.lnk . (...)  -- C:\Program Files (x86)\iLivid\iLivid.exe (.not file.)   =>Adware.Bandoo
 O4 - GS\QuickLaunch: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
 O4 - GS\QuickLaunch: PC Optimizer Pro.lnk . (...)  -- C:\Program Files\PC Optimizer Pro\PCOptimizerPro.exe (.not file.)   =>PUP.OptimizerPro
 O4 - GS\QuickLaunch: RegistryBooster.lnk . (.Uniblue Systems Limited - Uniblue Launcher.)  -- C:\Program Files (x86)\Uniblue\RegistryBooster\​Launcher.exe
 O4 - GS\Accessories: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
 O4 - GS\Accessories: Private Character Editor.lnk . (.Microsoft Corporation - Éditeur de caractères privés.)  -- C:\Windows\system32\eudcedit.e​xe
 O4 - GS\SendTo: Desk 365.lnk . (...)  -- C:\Program Files (x86)\Desk 365\desk365.exe (.not file.)   =>Hijacker.22Find
 O4 - GS\SendTo: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft  Windows Fax and Scan.)  -- C:\Windows\system32\WFS.exe
 O4 - GS\SendTo: Skype.lnk . (.Skype Technologies S.A. - Skype.)  -- C:\Program Files (x86)\Skype\Phone\Skype.exe
 O4 - GS\Desktop: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
 O4 - GS\Desktop: RollerCoaster Tycoon.lnk . (...)  -- C:\Program Files (x86)\Hasbro Interactive\RollerCoaster Tycoon\rct.exe
 ~ Global Startup:  Scanned in 00mn 00s



 ---\\ Modification Domaine/Adresses DNS (O17)
 O17 - HKLM\System\CCS\Services\Tcpip​\..\{CF61A0B0-988F-4C68-BF50-C​8B54CD1F2D9}: DhcpNameServer = 89.2.0.1 89.2.0.2
 O17 - HKLM\System\CS1\Services\Tcpip​\..\{CF61A0B0-988F-4C68-BF50-C​8B54CD1F2D9}: DhcpNameServer = 89.2.0.1 89.2.0.2
 O17 - HKLM\System\CS2\Services\Tcpip​\..\{CF61A0B0-988F-4C68-BF50-C​8B54CD1F2D9}: DhcpNameServer = 89.2.0.1 89.2.0.2
 O17 - HKLM\System\CCS\Services\Tcpip​\Parameters: DhcpNameServer = 89.2.0.1 89.2.0.2
 ~ Domain:  Scanned in 00mn 00s



 ---\\ Protocole additionnel (O18)
 O18 - Handler: wlpg [64Bits] - {E43EF6CD-A37A-4A9B-9E6F-83F89​B8E6324} . (...) --
 O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04​F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dl​l
 ~ Protocole Additionnel:  Scanned in 00mn 00s



 ---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
 O20 - AppInit_DLLs: . (...) -      c:\progra~3\wincert\win32c~1.d​ll (.not file.)
 ~ AppInit DLL:  Scanned in 00mn 00s



 ---\\ Liste des services NT non Microsoft et non désactivés (O23)
 O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated - Adobe® Flash® Player Update Service 11.6 r6.) - C:\Windows\SysWOW64\Macromed\F​lash\FlashPlayerUpdateService.​exe
 O23 - Service: Service Software Update (Software_update (Software_update) . (...) - C:\Program Files (x86)\Software\Update\Software​Update.exe (.not file.)
 ~ Services: 11 Legitimates Filtered in 00mn 07s



 ---\\ Session Manager Key (AppCertDlls,KnownDLLs) (O36)
 O36 - AppCertDlls: (x86) . (...) -- C:\Program Files (x86)\Search Results Toolbar\Datamngr\apcrtldr.dll   =>Adware.IMBooster
 O36 - AppCertDlls: (x64) . (...) -- C:\Program Files (x86)\Search Results Toolbar\Datamngr\x64\apcrtldr.​dll   =>Adware.IMBooster
 ~ Keys:  Scanned in 00mn 00s



 ---\\ Tâches planifiées en automatique (O39)
 [MD5.00000000000000000000000000​000000] [APT] [Desk 365 RunAsStdUser] (...) -- C:\Program Files (x86)\Desk 365\desk365.exe (.not file.)   [0]   =>Hijacker.22Find
 [MD5.00000000000000000000000000​000000] [APT] [Scheduled Update for Ask Toolbar] (...) -- C:\Program Files (x86)\Ask.com\UpdateTask.exe (.not file.)   [0]   =>Toolbar.Ask
 [MD5.E5C3BDE86133A93E7503019848​108F48] [APT] [{08ADA9BB-D540-478E-ABA3-DCFFD​F2124E9}] (.Canneverbe Limited.) -- C:\Program Files (x86)\CDBurnerXP\cdbxpp.exe   [1744600]
 ~ Scheduled Task: 29 Legitimates Filtered in 00mn 02s



 ---\\ Logiciels installés (O42)
 O42 - Logiciel: Accelerer PC - Désinstallation complète - (.Speedchecker Limited.) [HKLM][64Bits] -- PCSU-SL_is1   =>Rogue.PCSpeedUp
 O42 - Logiciel: Youda Farmer 2: Sauver le Village - (...) [HKLM][64Bits] -- BFG-Youda Farmer 2 - Sauver le Village
 ~ Logic: 169 Legitimates Filtered in 00mn 00s



 ---\\ HKCU & HKLM Software Keys
 [HKCU\Software\IncrediMail]
 [HKLM\Software\Wow6432Node\Incr​ediMail]
 ~ Key Software: 221 Legitimates Filtered in 00mn 00s



 ---\\ Contenu des dossiers Programs/ProgramFiles/ProgramD​ata/AppData (O43)
 O43 - CFD: 04/01/2011 - 14:06:49 - [120,798] ----D C:\Program Files (x86)\Burger Bustle
 O43 - CFD: 12/01/2011 - 16:28:11 - [38,388] ----D C:\Program Files (x86)\Hotel Dash - Suite Success
 O43 - CFD: 16/06/2013 - 22:14:16 - [16,663] ----D C:\Program Files (x86)\Search Results Toolbar   =>Adware.IMBooster
 O43 - CFD: 03/01/2011 - 19:25:14 - [111,071] ----D C:\Program Files (x86)\Youda Farmer 2 - Sauver le Village
 O43 - CFD: 16/06/2013 - 22:13:48 - [0,007] ----D C:\ProgramData\Datamngr   =>PUP.Datamngr
 O43 - CFD: 05/12/2009 - 05:09:06 - [5,468] --H-D C:\ProgramData\{D441869F-BEC4-​446D-9888-C5CA29F160F9}
 O43 - CFD: 04/01/2011 - 14:05:42 - [0,003] ----D C:\Users\Valou\AppData\Roaming​\Microsoft\Windows\Start Menu\Programs\Burger Bustle
 O43 - CFD: 12/01/2011 - 16:28:05 - [0,004] ----D C:\Users\Valou\AppData\Roaming​\Microsoft\Windows\Start Menu\Programs\Hotel Dash - Suite Success
 O43 - CFD: 03/01/2011 - 19:25:10 - [0,004] ----D C:\Users\Valou\AppData\Roaming​\Microsoft\Windows\Start Menu\Programs\Youda Farmer 2 - Sauver le Village
 ~ 1207 Dossiers CLSID vides (CLSID Empty Folders)
 ~ Program Folder: 1581 Legitimates Filtered in 00mn 16s



 ---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
 O44 - LFC:[MD5.B2813E4DCE41E3D3F1EC1FF6D1​7C9240] - 20/06/2013 - 14:20:03 ---A- . (...) -- C:\Windows\DeleteOnReboot.bat   [939]
 ~ Files: 74 Legitimates Filtered in 00mn 24s



 ---\\ MountPoints2 Shell Key (O51)
 O51 - MPSK:{1c82a63c-ab25-11e2-b4b8-​cccca6d9bb52}\AutoRun\command. (...) -- J:\Startme.exe (.not file.)
 ~ Keys:  Scanned in 00mn 00s



 ---\\ Microsoft Windows Policies System (O55)
 O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
 O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
 ~ MWPS: 20 Legitimates Filtered in 00mn 00s



 ---\\ Microsoft Windows Policies Explorer (O56)
 O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1
 ~ MWPE Keys: 3 Legitimates Filtered in 00mn 00s



 ---\\ Liste des Drivers Système (O58)
 O58 - SDL:[MD5.2F6B34B83843F0C5118B63AC63​4F5BF4] - 14/07/2009 - 02:52:21 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\Drivers\ad​p94xx.sys   [491088]
 O58 - SDL:[MD5.306521935042FC0A6988D52864​3619B3] - 25/10/2007 - 16:26:10 ---A- . (...) -- C:\Windows\SysWOW64\drivers\St​arOpen.sys   [5632]
 ~ Drivers:  Scanned in 00mn 00s



 ---\\ Liste des outils de nettoyage (O63)
 O63 - Logiciel: ZHPDiag 2013 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1
 ~ ADS:  Scanned in 00mn 00s



 ---\\ File Associations Shell Spawning (O67)
 O67 - Shell Spawning: <.html> <ChromeHTML>[HKCU\..\open\Command] (.Not Key.)
 ~ FASS Keys: 19 Legitimates Filtered in 00mn 00s



 ---\\ Start Menu Internet (O68)
 O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Applicatio​n\chrome.exe
 O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
 ~ Keys:  Scanned in 00mn 00s



 ---\\ Search Browser Infection (O69)
 O69 - SBI: SearchScopes [HKCU] {2E7AA00D-9558-4887-8EF9-56260​BA4F9B0} [DefaultScope] - (Ask Search) - http://websearch.ask.com
 O69 - SBI: SearchScopes [HKCU] {51171FAB-1246-44FB-AB3E-B2A90​BCEB309} - (WhiteSmoke US New Customized Web Search) - http://search.conduit.com   =>PUP.WhiteSmoke
 O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA​1EA9990} - (Google) - http://www.google.com
 O69 - SBI: SearchScopes [HKCU] {8A244612-A1F7-11E0-95C0-E71F4​824019B} - (Search) - http://badoo.com
 O69 - SBI: SearchScopes [HKCU] {DABF4DC9-031C-4B39-9E60-1A790​B452458} - (Bing) - http://www.bing.com
 ~ Keys:  Scanned in 00mn 00s



 ---\\ Recherche particuliere à la racine de certains dossiers (O84)
 [MD5.D41D8CD98F00B204E9800998EC​F8427E] [SPRF][22/10/2012] (...) -- C:\Users\Valou\AppData\Local\T​emp\17_2huq_.dll   [0]
 [MD5.62264D6680462A2AE4DD6964CC​A4E520] [SPRF][16/06/2013] (...) -- C:\Users\Valou\AppData\Local\T​emp\apnuserid.dat   [16]
 [MD5.0584CE565C824B7B7F50282D9A​19945B] [SPRF][16/06/2013] (...) -- C:\Users\Valou\AppData\Local\T​emp\appid.dat   [3]
 [MD5.92C732231B7909EDEFF180174C​6EF499] [SPRF][02/05/2013] (.Somoto Ltd. - Better Installer Host.) -- C:\Users\Valou\AppData\Local\T​emp\BI_RunOnce.exe   [230480]   =>Adware.MegaSearch
 [MD5.32DCED18FFFEA0035E4FA975CA​0AE8BE] [SPRF][22/04/2013] (.The Software Group - Software Update Setup.) -- C:\Users\Valou\AppData\Local\T​emp\BoxoreInstaller.exe   [620656]   =>Adware.Boxore
 [MD5.132E1C3A27E824EB6B120226AC​368593] [SPRF][02/05/2012] (.Conduit - Pas de description.) -- C:\Users\Valou\AppData\Local\T​emp\conduitinstaller.exe   [211032]   =>Toolbar.Conduit
 [MD5.A7A70DF221A09BC37206CB45CF​023CBB] [SPRF][12/07/2011] (.Adobe Systems, Inc. - Adobe® Flash® Player Installer/Uninstaller 10.3 r181.) -- C:\Users\Valou\AppData\Local\T​emp\FlashPlayerUpdate.exe   [3120288]
 [MD5.4541335F712FBB52BA6A9FB593​F77E76] [SPRF][21/05/2010] (.Hewlett-Packard - HP Help Updater.) -- C:\Users\Valou\AppData\Local\T​emp\HPHelpUpdater.exe   [74808]
 [MD5.F3261EB0D0E4E3D3D10630A0D8​11F21C] [SPRF][02/08/2012] (...) -- C:\Users\Valou\AppData\Local\T​emp\installhelper.dll   [1621504]
 [MD5.67DC0277321064080BAD0E9E3B​C3CBAB] [SPRF][05/05/2011] (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Users\Valou\AppData\Local\T​emp\jre-6u26-windows-i586-iftw​-rv.exe   [901408]
 [MD5.0E2281AEC56203CA6A9E1848F7​DBDF5A] [SPRF][19/10/2011] (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Users\Valou\AppData\Local\T​emp\jre-6u29-windows-i586-iftw​-rv.exe   [909088]
 [MD5.20BF2F30D6D04BD57B58F211FD​30F1DD] [SPRF][15/06/2013] (.Aedge Performance BCN SL - OfferBox setup.) -- C:\Users\Valou\AppData\Local\T​emp\OB.exe   [3435912]   =>PUP.OfferBox
 [MD5.4AC204A3300C97A7733A12B082​C93B9F] [SPRF][14/09/2010] (.Hewlett-Packard Company - Resource.) -- C:\Users\Valou\AppData\Local\T​emp\Resource.exe   [36920]
 [MD5.83954C128100AD89746811E92C​1B4BF6] [SPRF][15/06/2013] (...) -- C:\Users\Valou\AppData\Local\T​emp\setup_fsu_cid.exe   [251299]
 [MD5.C48DB6D2C11D3577ADD9AC535C​E4A027] [SPRF][18/09/2011] (.Hewlett-Packard Development Company, L.P. - HP Support Assistant Application Update.) -- C:\Users\Valou\AppData\Local\T​emp\sp53904.exe   [62422488]
 [MD5.A62912D14501566ECB8F3B3476​E217D2] [SPRF][08/02/2012] (.Hewlett-Packard Development Company, L.P. - HP Support Assistant Application Update.) -- C:\Users\Valou\AppData\Local\T​emp\sp54931.exe   [57826304]
 [MD5.53490613D7362803ADAA9B9CD7​D293F9] [SPRF][03/04/2013] (.Hewlett-Packard - Pas de description.) -- C:\Users\Valou\AppData\Local\T​emp\sp58915.exe   [41580520]
 [MD5.72412B526BCC716382E62B7939​DCFD8F] [SPRF][17/04/2012] (...) -- C:\Users\Valou\AppData\Local\T​emp\SRAssetsHelper.dll   [1085952]
 [MD5.8CB22BDD0B7BA1AB13D742E22E​ED8DA2] [SPRF][16/06/2013] (...) -- C:\Users\Valou\AppData\Local\T​emp\sysid.dat   [3]
 [MD5.D41D8CD98F00B204E9800998EC​F8427E] [SPRF][17/01/2013] (...) -- C:\Users\Valou\AppData\Local\T​emp\szk5u3et.dll   [0]
 [MD5.BDEE9D936EFB7C76DF778F45F1​CF130D] [SPRF][16/06/2013] (...) -- C:\Users\Valou\AppData\Local\T​emp\trackid.dat   [6]
 [MD5.239CB72E0605A43BF856BCD497​12D1FA] [SPRF][27/09/2012] (.Hewlett-Packard Company - HP Support Assistant Uninstaller.) -- C:\Users\Valou\AppData\Local\T​emp\UninstallHPSA.exe   [114080]
 [MD5.0980ED49BA5D6F1D108DDC67C5​672689] [SPRF][23/06/2011] (.Hewlett-Packard Company - HP Support Assistant Uninstaller.) -- C:\Users\Valou\AppData\Local\T​emp\UninstallHPTCA.exe   [449592]
 [MD5.7810AB1CF04E012469C141ABC6​93D3A7] [SPRF][15/06/2013] (.Somoto Ltd. - FilesFrog Update Checker.) -- C:\Users\Valou\AppData\Local\T​emp\UpdateCheckerSetup.exe   [295440]   =>Adware.MegaSearch
 [MD5.B49A1321EC9BA6A90A3E5AB666​2020A8] [SPRF][12/09/2012] (...) -- C:\Users\Valou\AppData\Local\T​emp\_MTB2421518012861292012.da​t   [407249976]
 [MD5.16BA8C49815B5B5CBA4A2D4D63​5C9B91] [SPRF][16/01/2012] (.DsNET Corp - Pas de description.) -- C:\Users\Valou\AppData\Local\T​emp\_MTB259563631954231612012.​exe   [13837088]
 [MD5.8F60E5CD372D9F1ECB722D0CAC​2BAFF5] [SPRF][12/09/2012] (...) -- C:\Users\Valou\AppData\Local\T​emp\_MTB329708281155561292012.​dat   [396094268]
 [MD5.16BA8C49815B5B5CBA4A2D4D63​5C9B91] [SPRF][08/01/2012] (.DsNET Corp - Pas de description.) -- C:\Users\Valou\AppData\Local\T​emp\_MTB39989871162012812012.e​xe   [13837088]
 [MD5.16BA8C49815B5B5CBA4A2D4D63​5C9B91] [SPRF][08/01/2012] (.DsNET Corp - Pas de description.) -- C:\Users\Valou\AppData\Local\T​emp\_MTB5418033161944812012.ex​e   [13837088]
 [MD5.16BA8C49815B5B5CBA4A2D4D63​5C9B91] [SPRF][16/01/2012] (.DsNET Corp - Pas de description.) -- C:\Users\Valou\AppData\Local\T​emp\_MTB620464501952441612012.​exe   [13837088]
 [MD5.26918F52FD41883A3B54FB4B52​F3FC9B] [SPRF][12/09/2012] (...) -- C:\Users\Valou\AppData\Local\T​emp\_MTB85711312122501292012.d​at   [409626808]
 [MD5.3D7B410D70BE2B683841D633C5​339559] [SPRF][28/12/2011] (...) -- C:\Users\Valou\AppData\Roaming​\wklnhst.dat   [150]
 ~ Files:  Scanned in 00mn 46s



 ---\\ Firewall Active Exception List (FirewallRules) (O87)
 O87 - FAEL: "{97B07632-0C59-4D67-A44E-31F7​DCBC72B1}" |In - None - P6 - TRUE | .(...) -- C:\Program Files (x86)\Iminent\Iminent.exe (.not file.)   =>Adware.IMBooster
 O87 - FAEL: "{35567987-301A-4818-8797-EC0B​958AACF1}" |In - None - P6 - TRUE | .(...) -- C:\Program Files (x86)\Iminent\Iminent.Messenge​rs.exe (.not file.)   =>Adware.IMBooster
 O87 - FAEL: "{201ACF57-26EA-4F37-838B-295F​E5CD0E59}" |In - Private - P6 - TRUE | .(...) -- C:\Program Files (x86)\Searchqu Toolbar\Datamngr\ToolBar\dtUse​r.exe (.not file.)   =>PUP.Datamngr
 O87 - FAEL: "{CCECD91C-FB46-495A-A9F0-BD94​FB2A9ADA}" |In - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\Searchqu Toolbar\Datamngr\ToolBar\dtUse​r.exe (.not file.)   =>PUP.Datamngr
 ~ Firewall: 253 Legitimates Filtered in 00mn 01s



 ---\\ Scan Additionnel (O88)
 Database Version : v2.12520 - (18/06/2013)
 Clés trouvées (Keys found) : 23
 Valeurs trouvées (Values found) : 0
 Dossiers trouvés  (Folders found) : 2
 Fichiers trouvés  (Files found) : 19

 [HKCU\Software\Microsoft\Window​s\CurrentVersion\Ext\Stats\{df​780f87-ff2b-4df8-92d0-73db16a1​543a}]   =>Adware.PopCap
 [HKLM\Software\Microsoft\Window​s\CurrentVersion\Installer\Use​rData\S-1-5-18\Components\261F​213D1F55267499B1F87D0CC3BCF7]   =>Toolbar.Ask
 [HKLM\Software\Microsoft\Window​s\CurrentVersion\Installer\Use​rData\S-1-5-18\Components\741B​4ADF27276464790022C965AB6DA8]   =>Toolbar.Ask
 [HKLM\Software\Microsoft\Window​s\CurrentVersion\Installer\Use​rData\S-1-5-18\Components\7DE1​96B10195F5647A2B21B761F3DE01]   =>Toolbar.Ask
 [HKLM\Software\Microsoft\Window​s\CurrentVersion\Installer\Use​rData\S-1-5-18\Components\9D4F​5849367142E4685ED8C25E44C5ED]   =>Toolbar.Ask
 [HKLM\Software\Microsoft\Window​s\CurrentVersion\Installer\Use​rData\S-1-5-18\Components\A587​5B04372C19545BEB90D4D606C472]   =>Toolbar.Ask
 [HKLM\Software\Microsoft\Window​s\CurrentVersion\Installer\Use​rData\S-1-5-18\Components\A876​D9E80B896EC44A8620248CC79296]   =>Toolbar.Ask
 [HKLM\Software\Microsoft\Window​s\CurrentVersion\Installer\Use​rData\S-1-5-18\Components\B66F​FAB725B92594C986DE826A867888]   =>Toolbar.Ask
 [HKLM\Software\Microsoft\Window​s\CurrentVersion\Installer\Upg​radeCodes\F928123A039649549966​D4C29D35B1C9]   =>Adware.MyWebSearch
 [HKLM\SYSTEM\CurrentControlSet\​Control\Session Manager\AppCertDlls]   =>Trojan.FakeAlert
 [HKLM\SYSTEM\ControlSet001\Cont​rol\Session Manager\AppCertDlls]   =>Trojan.FakeAlert
 [HKLM\Software\Wow6432Node\Micr​osoft\Tracing\OfferBoxHTTPProx​y_RASAPI32]   =>PUP.OfferBox
 [HKLM\Software\Wow6432Node\Micr​osoft\Tracing\OfferBoxHTTPProx​y_RASMANCS]   =>PUP.OfferBox
 [HKLM\Software\Wow6432Node\Micr​osoft\Tracing\OfferBoxUpdateSe​rvice_RASAPI32]   =>PUP.OfferBox
 [HKLM\Software\Wow6432Node\Micr​osoft\Tracing\OfferBoxUpdateSe​rvice_RASMANCS]   =>PUP.OfferBox
 [HKLM\Software\Microsoft\Window​s\CurrentVersion\Installer\Use​rData\S-1-5-18\Components\2979​9DE249E7DBC459FC6C8F07EB8375]   =>Toolbar.Agent
 [HKLM\Software\Microsoft\Window​s\CurrentVersion\Installer\Use​rData\S-1-5-18\Components\0238​BBE24EA3A70408B81E4BB89C15E5]   =>Toolbar.Agent
 [HKLM\Software\Microsoft\Window​s\CurrentVersion\Installer\Use​rData\S-1-5-18\Components\0CFE​535C35F99574E8340BFA75BF92C2]   =>Toolbar.Ask
 [HKLM\SYSTEM\CurrentControlSet\​Services\Eventlog\Application\​desksvc]   =>Hijacker.22find
 [HKLM\Software\Microsoft\Window​s\CurrentVersion\Uninstall\PCS​U-SL_is1]   =>Rogue.PCSpeedUp
 [HKLM\Software\PC Optimizer Pro]   =>Rogue.PCOptimizerPro
 [HKLM\Software\Wow6432Node\aTub​e Catcher\OpenCandy]   =>Adware.OpenCandy
 [HKLM\Software\Microsoft\Window​s\CurrentVersion\Installer\Use​rData\S-1-5-18\Components\CA00​54A5AB3EFFE4CB5660E44A1E7DCC]   =>Adware.Boxore^
 C:\Program Files (x86)\Search Results Toolbar   =>Adware.Bandoo
 C:\Users\Valou\AppData\Local\S​oftware   =>Adware.Boxore
 C:\Users\Valou\AppData\Local\T​emp\OB.exe   =>PUP.OfferBox
 C:\Users\Valou\AppData\Local\T​emp\bundlesweetimsetup.exe.0  =>PUP.SweetIM
 C:\Users\Valou\AppData\Local\T​emp\bundlesweetimsetup.exe.1  =>PUP.SweetIM
 C:\Users\Valou\AppData\Local\T​emp\bundlesweetimsetup.exe.2  =>PUP.SweetIM
 C:\Users\Valou\AppData\Local\T​emp\bundlesweetimsetup.exe.3  =>PUP.SweetIM
 C:\Users\Valou\AppData\Local\T​emp\bundlesweetimsetup.exe.4  =>PUP.SweetIM
 C:\Users\Valou\AppData\Local\T​emp\bundlesweetimsetup.exe.5  =>PUP.SweetIM
 C:\Users\Valou\AppData\Local\T​emp\bundlesweetimsetup.exe.6  =>PUP.SweetIM
 C:\Users\Valou\AppData\Local\T​emp\bundlesweetimsetup.exe.7  =>PUP.SweetIM
 C:\Users\Valou\AppData\Local\T​emp\BoxoreInstaller.exe  =>Adware.Boxore
 C:\Users\Valou\AppData\Local\T​emp\GoogleToolbarInstaller1.lo​g  =>Toolbar.Babylon
 C:\Users\Valou\AppData\Local\T​emp\GoogleToolbarInstaller2.lo​g  =>Toolbar.Babylon
 C:\Users\Valou\AppData\Local\T​emp\BI_RunOnce.exe  =>Adware.MegaSearch
 C:\Users\Valou\AppData\Local\T​emp\conduitinstaller.exe  =>Toolbar.Conduit
 C:\Users\Valou\AppData\Local\T​emp\UpdateCheckerSetup.exe  =>Adware.MegaSearch
 ~ Additionnel Scan: 319206 Items scanned in 00mn 26s



 ---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)
 SR - | Auto 10/05/2013 65640 |  (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
 SR - | Auto 28/05/2013 163328 |  (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\F​lash\FlashPlayerUpdateService.​exe
 SR - | Auto 21/08/2012 44808 |  (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
 SR - | Disabled  0 |  (avast! Firewall) . (...) - C:\Program Files\Alwil Software\Avast5\afwServ.exe
 SR - | Auto 15/11/2012 5814904 |  (AVGIDSAgent) . (.AVG Technologies CZ, s.r.o..) - C:\Program Files (x86)\AVG\AVG2013\avgidsagent.​exe
 SR - | Auto 22/10/2012 196664 |  (avgwd) . (.AVG Technologies CZ, s.r.o..) - C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe
 SS - | Demand 30/11/2010 69120 |  (Boonty Games) . (.BOONTY.) - C:\Program Files (x86)\Common Files\BOONTY Shared\Service\Boonty.exe
 SR - | Auto 14/07/2009 27136 | C:\Windows\System32\ezsvc7.dll (ezSharedSvc) . (.EasyBits Sofware AS.) - C:\Windows\System32\svchost.ex​e
 SS - | Demand 30/09/2010 246520 |  (GameConsoleService) . (.WildTangent, Inc..) - C:\Program Files (x86)\HP Games\HP Game Console\GameConsoleService.exe
 SS - | Auto 25/05/2011 136176 |  (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpda​te.exe
 SS - | Demand 25/05/2011 136176 |  (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpda​te.exe
 SS - | Demand 16/08/2012 194032 |  (gusvc) . (.Google.) - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.e​xe
 SR - | Auto 27/09/2012 86528 |  (HP Support Assistant Service) . (.Hewlett-Packard Company.) - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
 SS - | Demand 10/08/2012 1001376 |  (hpqwmiex) . (.Hewlett-Packard Company.) - C:\Program Files (x86)\Hewlett-Packard\Shared\h​pqWmiEx.exe
 SR - | Auto 20/08/2009 73728 |  (LightScribeService) . (.Hewlett-Packard Company.) - c:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
 SS - | Demand 05/02/2013 235216 |  (McComponentHostService) . (.McAfee, Inc..) - C:\Program Files (x86)\McAfee Security Scan\3.0.318\McCHSvc.exe
 SR - | Auto 04/08/2011 126400 |  (NIS) . (.Symantec Corporation.) - C:\Program Files (x86)\Norton Internet Security\Engine\17.9.0.12\ccSv​cHst.exe
 SR - | Auto 29/07/2009 382496 |  (nvsvc) . (.NVIDIA Corporation.) - C:\Windows\system32\nvvsvc.exe
 SS - | Demand 17/09/2009 23536 |  (PCDSRVC{F36B3A4C-F95654BD-060​00000}_0) . (.PC-Doctor, Inc..) - c:\program files\pc-doctor for windows\pcdsrvc_x64.pkms
 SR - | Auto 24/02/2010 242560 |  (SeaPort) . (.Microsoft Corporation.) - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
 SS - | Auto 01/03/2013 161384 |  (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.ex​e
 SS - | Auto  0 |  (Software_update) . (...) - C:\Program Files (x86)\Software\Update\Software​Update.exe
 SS - | Demand  0 |  (Software_update_m) . (...) - C:\Program Files (x86)\Software\Update\Software​Update.exe
 SR - | Demand 04/02/2013 155824 |  (Sony PC Companion) . (.Avanquest Software.) - C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe
 SS - | Demand 26/10/2012 529744 |  (Steam Client Service) . (.Valve Corporation.) - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
 SS - | Demand 14/07/2009 27136 | C:\Program Files (x86)\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.ex​e
 SR - | Auto  0 |  (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe
 SR - | Auto 14/07/2009 27136 | C:\Windows\System32\wuaueng.dl​l (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.ex​e
 ~ Services:  Scanned in 00mn 01s



 ~ 2672 Legitimates filtered by white list
 End of the scan (537 lines in 02mn 28s)(0)





















La Mayenne-son calme -sa verdu
Profil : Equipe sécurité
  1. homepage
bernard53
Membre impliqué (de 20 000 à 29 999 messages postés) Helpeur confirmé Fan Club de Clic-Clic
  1. Posté le 24/06/2013 à 17:28:07  
  1. answer
  1. Prévenir les modérateurs en cas d'abus
 
il faut mettre le rapport en ligne comme signalé car tu ne peux mettre ton post en entier comme cela.

 Page :
1

Aller à :
 

Sujets relatifs
Connexion wifi se coupe après 3 secondes suite à problème avec Avast Problème http://www.searchnu.com/410
(Resolu) Probleme de lenteur pour ouvrir internet Comment supprimer les publicités intempestives "problème résolu"
Problème ouverture automatique de publicité internet  
Plus de sujets relatifs à : probleme searchnu

Les 5 sujets de discussion précédents Nombre de réponses Dernier message
Votre avis : Hijackthis de mon ordinateur 22
Comment supprimer searchnu? RESOLU 12
Impossibilité d'accéder à certains sites web 18
Searchnu 3
restauration impossible+acces limité(wifi)++.(résolu par formatage) 20