Résolu : Éradiquer complétement ZeroAccess.B et .C (alias Sirefef) plus Centre de Sécurité plus Pare-feu plus autres services désactivés

Anonyme
2013-10-05T12:19:22+00:00

Bonjour.

J'utilise Hewlett Packard comme ordinateur portable fonctionnant sous Windows 8 en 64 bits.

Depuis hier soir mon ordinateur est infecté par Trojan.Zeroaccess.B,

Trojan.Zeroaccess.C et

Trojan.Gen.2, détectés tous trois par Norton puis bloqués, mais le processus de bloquage Norton est sans fin.

Je suis protégé avec Norton Internet Security. Là, j'effectue une analyse complète avec mon antivirus mais celui-ci n'a rien noté...

Ma question est comment éradiquer totalement Trojan.Zeroaccess.B

Trojan.Zeroaccess.C

et Trojan.Gen.2, tout en sachant que Norton "les bloque" et que j'ai, à chacun des allumages de mon ordinateur la mise en route finie, la mention sur une fenêtre "netsh.exe - Point d'entrée introuvable - Le point d'entrée de procédure MigrateWînsockConfiguration est introuvable dans la bibliothèque de liens dynamiques C:\Windows\SYSTEM32\WSHELPER.DLL.

Cet intrusion virale fait que les vignettes Windows "buguent" toutes, impossible d'en ouvrir une convenablement. A moins de repartir de zéro au moyen d"une restauration du système, mais je souhaiterais trouver une solution plus rapide compte tenu des nombreux fichiers ou programmes que je possède.

Merci de m'aider.

Windows pour les particuliers | Versions antérieures de Windows | Sécurité et confidentialité

Question verrouillée. Cette question a été migrée à partir de la Communauté Support Microsoft. Vous pouvez voter pour indiquer si elle est utile, mais vous ne pouvez pas ajouter de commentaires ou de réponses ni suivre la question.

0 commentaires

52 réponses

Trier par : Le plus utile
Le plus utile Les plus récents Les plus anciens
  1. Anonyme
    2013-10-07T12:12:13+00:00

    Dépassant 60 0000 caractères, je vous envoie le rapport FRST.txt en 2 parties.

    Partie 2:

    (...)

    R1 SymIRON; C:\Windows\system32\drivers\NISx64\1500020.001\Ironx64.SYS [264280 2013-07-31] (Symantec Corporation)

    R1 SymNetS; C:\Windows\system32\drivers\NISx64\1500020.001\SYMNETS.SYS [590424 2013-09-11] (Symantec Corporation)

    R3 WirelessButtonDriver; C:\Windows\System32\drivers\WirelessButtonDriver64.sys [20800 2012-08-31] (Hewlett-Packard Development Company, L.P.)

    U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [12352 2010-07-01] ()

    ==================== NetSvcs (Whitelisted) ===================

    ==================== One Month Created Files and Folders ========

    2013-10-07 12:13 - 2013-10-07 12:13 - 00000000 ____D C:\FRST

    2013-10-07 12:11 - 2013-10-07 12:11 - 01954124 _____ (Farbar) C:\Users\Gilbert\Downloads\FRST64.exe

    2013-10-07 12:06 - 2013-10-07 12:06 - 00001406 _____ C:\Users\Gilbert\Desktop\RKreport[0]_D_10072013_120626.txt

    2013-10-07 12:06 - 2013-10-07 12:06 - 00001368 _____ C:\Users\Gilbert\Desktop\RKreport[0]_S_10072013_120623.txt

    2013-10-06 21:31 - 2013-10-06 21:31 - 00006217 _____ C:\Users\Gilbert\Desktop\RKreport[0]_D_10062013_213140.txt

    2013-10-06 21:25 - 2013-10-06 21:25 - 00004421 _____ C:\Users\Gilbert\Documents\RKreport[0]_S_10062013_212237 1er rapport de RogueKiller.txt

    2013-10-06 21:22 - 2013-10-06 21:22 - 00004417 _____ C:\Users\Gilbert\Desktop\RKreport[0]_S_10062013_212237.txt

    2013-10-06 21:19 - 2013-10-06 21:36 - 00000000 ____D C:\Users\Gilbert\Desktop\RK_Quarantine

    2013-10-06 18:55 - 2013-10-06 18:55 - 00950272 _____ C:\Users\Gilbert\Desktop\RogueKiller.exe

    2013-10-06 18:27 - 2013-10-06 18:27 - 00001109 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

    2013-10-06 18:27 - 2013-10-06 18:27 - 00000000 ____D C:\Users\Gilbert\AppData\Roaming\Malwarebytes

    2013-10-06 18:27 - 2013-10-06 18:27 - 00000000 ____D C:\ProgramData\Malwarebytes

    2013-10-06 18:27 - 2013-10-06 18:27 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware

    2013-10-06 18:27 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

    2013-10-06 18:24 - 2013-10-06 18:26 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Gilbert\Downloads\mbam-setup-1.75.0.1300.exe

    2013-10-06 18:03 - 2013-10-06 18:03 - 00000000 ____D C:\Program Files\Enigma Software Group

    2013-10-06 18:03 - 2013-10-06 18:03 - 00000000 _____ C:\autoexec.bat

    2013-10-06 18:02 - 2013-10-06 18:16 - 00000000 ____D C:\Windows\86CA3695A4124BAE92B649A60C2AC663.TMP

    2013-10-06 17:53 - 2013-10-06 17:53 - 00726464 _____ (Enigma Software Group USA, LLC.) C:\Users\Gilbert\Downloads\SpyHunter-Installer.exe

    2013-10-06 16:12 - 2013-10-06 21:13 - 00003214 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-2923209095-728556447-3928840970-1001

    2013-10-06 15:30 - 2013-10-06 15:30 - 00123276 ____H C:\Windows\SysWOW64\mlfcache.dat

    2013-10-06 15:29 - 2013-10-06 21:13 - 00003344 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-2923209095-728556447-3928840970-1001

    2013-10-06 14:49 - 2013-10-06 14:50 - 00000000 ____D C:\Users\Gilbert\AppData\Roaming\LavFilters

    2013-10-06 14:49 - 2013-10-06 14:49 - 00000000 ____D C:\Users\Gilbert\AppData\Roaming\CDXReader

    2013-10-06 14:48 - 2013-10-06 15:04 - 00000000 ____D C:\Program Files (x86)\DSP-worx

    2013-10-06 14:47 - 2013-10-06 15:53 - 00000000 ____D C:\Program Files (x86)\BonanzaDealsLive

    2013-10-06 14:47 - 2013-10-06 15:04 - 00000000 ____D C:\Program Files (x86)\BonanzaDeals

    2013-10-06 14:47 - 2013-10-06 14:47 - 00000000 ____D C:\Users\Gilbert\AppData\Local\BonanzaDealsLive

    2013-10-06 14:47 - 2013-10-06 14:47 - 00000000 ____D C:\ProgramData\BonanzaDealsLive

    2013-10-06 14:46 - 2013-10-06 21:04 - 00000000 ____D C:\Users\Gilbert\AppData\Roaming\DigitalSite

    2013-10-06 14:46 - 2013-10-06 14:46 - 00000000 ____D C:\ProgramData\Babylon

    2013-10-05 19:00 - 2013-10-05 19:06 - 00000000 ____D C:\Users\Gilbert\Downloads\BJeqSiZHHzZ_services_64

    2013-10-05 19:00 - 2013-10-05 19:00 - 00006203 _____ C:\Users\Gilbert\Downloads\BJeqSiZHHzZ_services_64.zip

    2013-10-05 18:18 - 2013-10-05 18:18 - 00000000 ____D C:\Windows\softwaredistribution.bak1

    2013-10-05 17:57 - 2013-10-05 17:57 - 00000000 ____D C:\Windows\softwaredistribution.bak

    2013-10-05 17:54 - 2013-10-05 17:54 - 00275181 _____ C:\Users\Gilbert\Downloads\WindowsUpdateDiagnostic.diagcab

    2013-10-05 17:43 - 2013-10-05 17:43 - 00001783 _____ C:\Users\Public\Desktop\iTunes.lnk

    2013-10-05 17:41 - 2013-10-05 17:42 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69

    2013-10-05 17:41 - 2013-10-05 17:42 - 00000000 ____D C:\Program Files\iTunes

    2013-10-05 17:41 - 2013-10-05 17:41 - 00000000 ____D C:\Program Files\iPod

    2013-10-05 14:20 - 2013-10-05 14:20 - 00000024 _____ C:\Windows\175B986293A882A3.log

    2013-10-05 13:39 - 2013-10-06 16:13 - 00000000 ____D C:\Users\Gilbert\AppData\Local\NPE

    2013-10-04 20:28 - 2013-10-04 20:28 - 00000000 ____D C:\Users\Gilbert\Documents\NeroVision

    2013-10-04 14:55 - 2013-10-04 14:55 - 00000000 ____D C:\Users\Gilbert\Documents\AnyDVDHD

    2013-10-04 14:54 - 2013-10-05 14:20 - 00000000 ____D C:\ProgramData\SlySoft

    2013-10-04 14:54 - 2013-10-04 18:48 - 00000040 ___SH C:\ProgramData.zreglib

    2013-10-04 14:50 - 2013-10-05 14:20 - 00000000 ____D C:\Program Files (x86)\SlySoft

    2013-10-04 14:46 - 2013-10-04 14:46 - 00000000 ____D C:\Users\Gilbert\Downloads\AnyDVD HD v6.7.4.0 Final + New.Loader-JW [h33t] [Original]

    2013-10-04 14:39 - 2013-10-04 14:42 - 00002783 _____ C:\Users\Gilbert\Downloads\anydvd-anydvd-hd-6-6-3-4-final-key.torrent

    2013-10-02 11:05 - 2013-10-02 11:05 - 00575895 _____ C:\Users\Gilbert\Downloads\Édouard - L'automne.m4a

    2013-10-01 13:05 - 2013-10-01 13:05 - 00000000 ____D C:\net-snmp-compil-win

    2013-09-30 21:11 - 2013-09-30 21:12 - 00000000 ____D C:\Users\Gilbert\AppData\Local\WinZip

    2013-09-30 21:11 - 2013-09-30 21:11 - 00002279 _____ C:\Users\Public\Desktop\WinZip.lnk

    2013-09-30 21:10 - 2013-09-30 21:10 - 00000000 ____D C:\Program Files (x86)\WinZip

    2013-09-30 21:06 - 2013-09-30 21:09 - 14079304 _____ C:\Users\Gilbert\Downloads\winzip150fr.exe

    2013-09-30 20:41 - 2013-09-30 21:11 - 00000000 ____D C:\ProgramData\WinZip

    2013-09-30 18:53 - 2013-09-30 19:10 - 00000000 ____D C:\Users\Gilbert\Downloads\Vincent Niclo - Luis[Full Album-CDRip] [www.Cpasbien.me]

    2013-09-28 18:41 - 2013-09-28 18:41 - 00000000 ____D C:\Windows\System32\Tasks\Norton Internet Security

    2013-09-28 18:41 - 2013-09-28 18:41 - 00000000 ____D C:\Users\Gilbert\Documents\Symantec

    2013-09-28 18:40 - 2013-09-28 18:40 - 00177752 _____ (Symantec Corporation) C:\Windows\system32\Drivers\SYMEVENT64x86.SYS

    2013-09-28 18:40 - 2013-09-28 18:40 - 00008222 _____ C:\Windows\system32\Drivers\SYMEVENT64x86.CAT

    2013-09-28 18:40 - 2013-09-28 18:40 - 00003232 _____ C:\Windows\System32\Tasks\Norton WSC Integration

    2013-09-28 18:40 - 2013-09-28 18:40 - 00002564 _____ C:\Users\Public\Desktop\Norton Internet Security.lnk

    2013-09-28 18:40 - 2013-09-28 18:40 - 00000000 ____D C:\Program Files\Common Files\Symantec Shared

    2013-09-28 18:39 - 2013-09-28 18:39 - 00000000 ____D C:\Windows\system32\Drivers\NISx64

    2013-09-28 18:39 - 2013-09-28 18:39 - 00000000 ____D C:\Program Files (x86)\Norton Internet Security

    2013-09-28 18:35 - 2013-09-28 18:35 - 00001306 _____ C:\Users\Gilbert\Desktop\Fichiers d’installation Norton.lnk

    2013-09-28 14:02 - 2013-09-28 14:02 - 00000000 ____D C:\Windows\LastGood.Tmp

    2013-09-28 11:48 - 2013-09-28 11:55 - 28085424 ____N (Symantec Corporation) C:\Users\Gilbert\Downloads\NortonIdentitySafe-v1.exe

    2013-09-26 15:21 - 2013-09-26 15:21 - 00000000 ____D C:\ProgramData\BrowserProtect

    2013-09-26 15:21 - 2013-09-26 15:21 - 00000000 ____D C:\ProgramData\BitGuard

    2013-09-25 11:27 - 2013-09-25 11:29 - 08104770 _____ (Oleg N. Scherbakov) C:\Users\Gilbert\Downloads\captvty-1.11.7-autoextract.exe

    2013-09-18 22:08 - 2013-09-18 22:08 - 00094208 _____ (DivX, Inc.) C:\Windows\SysWOW64\dpl100.dll

    2013-09-18 14:16 - 2013-09-18 14:16 - 00000170 _____ C:\Windows\wininit.ini

    2013-09-16 13:21 - 2013-09-16 13:21 - 00000000 ____D C:\Users\Gilbert\AppData\Local\DDMSettings

    2013-09-15 20:13 - 2013-09-15 20:13 - 00000000 ____D C:\Users\Public\Documents\SPEEDbit

    2013-09-15 20:12 - 2013-09-15 20:13 - 00000000 ____D C:\Program Files (x86)\SpeedBit Video Accelerator

    2013-09-15 18:08 - 2013-08-10 07:21 - 00448512 _____ (Microsoft Corporation) C:\Windows\system32\SettingSync.dll

    2013-09-15 18:08 - 2013-08-10 07:21 - 00128512 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncInfo.dll

    2013-09-15 18:08 - 2013-08-10 05:58 - 00356352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSync.dll

    2013-09-15 18:08 - 2013-08-02 08:28 - 19758080 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll

    2013-09-15 18:08 - 2013-08-02 08:28 - 10116608 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll

    2013-09-15 18:08 - 2013-08-02 08:28 - 00222208 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll

    2013-09-15 18:08 - 2013-08-02 08:26 - 02304512 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll

    2013-09-15 18:08 - 2013-08-02 07:08 - 17561088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll

    2013-09-15 18:08 - 2013-08-02 07:08 - 08858112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll

    2013-09-15 18:08 - 2013-08-02 07:08 - 00199168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll

    2013-09-15 18:08 - 2013-08-02 07:06 - 02035712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll

    2013-09-15 18:08 - 2013-08-01 12:41 - 02233688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys

    2013-09-15 18:08 - 2013-07-31 01:30 - 00386923 _____ C:\Windows\system32\ApnDatabase.xml

    2013-09-15 18:08 - 2013-07-25 01:10 - 00158208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mbsmsapi.dll

    2013-09-15 18:08 - 2013-07-25 01:06 - 00225280 _____ (Microsoft Corporation) C:\Windows\system32\mbsmsapi.dll

    2013-09-15 18:08 - 2013-04-10 01:17 - 01125888 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll

    2013-09-15 18:08 - 2013-04-10 00:29 - 00893952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll

    2013-09-15 18:07 - 2013-08-03 08:40 - 01374208 _____ (Microsoft Corporation) C:\Windows\system32\wdc.dll

    2013-09-15 18:07 - 2013-08-03 08:40 - 00566784 _____ (Microsoft Corporation) C:\Windows\system32\wvc.dll

    2013-09-15 18:07 - 2013-08-03 08:40 - 00462336 _____ (Microsoft Corporation) C:\Windows\system32\sysmon.ocx

    2013-09-15 18:07 - 2013-08-03 07:14 - 00399360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sysmon.ocx

    2013-09-15 18:07 - 2013-08-03 07:13 - 01245696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdc.dll

    2013-09-15 18:07 - 2013-08-03 07:13 - 00437248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wvc.dll

    2013-09-15 17:35 - 2013-08-07 07:15 - 00144896 _____ (Microsoft Corporation) C:\Windows\system32\tssdisai.dll

    2013-09-15 17:02 - 2013-09-15 17:03 - 00376224 _____ C:\Windows\system32\FNTCACHE.DAT

    2013-09-14 22:32 - 2013-09-19 01:26 - 00694232 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

    2013-09-14 22:32 - 2013-09-19 01:26 - 00078296 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

    2013-09-14 13:22 - 2013-09-25 16:21 - 00000000 ____D C:\Users\Gilbert\AppData\Roaming\dvdcss

    2013-09-14 12:15 - 2013-09-14 12:15 - 00000000 ____D C:\Users\Gilbert\AppData\Roaming\RealNetworks

    2013-09-14 12:14 - 2013-09-14 12:14 - 00001318 _____ C:\Users\Public\Desktop\RealPlayer.lnk

    2013-09-14 12:14 - 2013-09-14 12:14 - 00000000 ____D C:\ProgramData\RealNetworks

    2013-09-14 12:14 - 2013-09-14 12:14 - 00000000 ____D C:\Program Files (x86)\RealNetworks

    2013-09-14 12:13 - 2013-09-14 12:13 - 00201872 _____ (RealNetworks, Inc.) C:\Windows\SysWOW64\rmoc3260.dll

    2013-09-14 12:12 - 2013-09-14 12:12 - 00499712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp71.dll

    2013-09-14 12:12 - 2013-09-14 12:12 - 00348160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr71.dll

    2013-09-14 12:12 - 2013-09-14 12:12 - 00272896 _____ (Progressive Networks) C:\Windows\SysWOW64\pncrt.dll

    2013-09-14 12:12 - 2013-09-14 12:12 - 00006656 _____ (RealNetworks, Inc.) C:\Windows\SysWOW64\pndx5016.dll

    2013-09-14 12:12 - 2013-09-14 12:12 - 00005632 _____ (RealNetworks, Inc.) C:\Windows\SysWOW64\pndx5032.dll

    2013-09-14 11:21 - 2013-08-16 07:41 - 00058200 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dam.sys

    2013-09-14 11:21 - 2013-08-16 07:39 - 02371728 _____ (Microsoft Corporation) C:\Windows\system32\WSService.dll

    2013-09-14 11:21 - 2013-08-16 07:39 - 00059416 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe

    2013-09-14 11:21 - 2013-08-16 07:32 - 00209200 _____ (Microsoft Corporation) C:\Windows\system32\NotificationUI.exe

    2013-09-14 11:21 - 2013-08-16 07:22 - 04917760 _____ (Microsoft Corporation) C:\Windows\system32\sppsvc.exe

    2013-09-14 11:21 - 2013-08-16 07:22 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe

    2013-09-14 11:21 - 2013-08-16 07:21 - 03275776 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll

    2013-09-14 11:21 - 2013-08-16 07:21 - 01621504 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll

    2013-09-14 11:21 - 2013-08-16 07:21 - 01164288 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll

    2013-09-14 11:21 - 2013-08-16 07:21 - 00773120 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll

    2013-09-14 11:21 - 2013-08-16 07:21 - 00688640 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll

    2013-09-14 11:21 - 2013-08-16 07:21 - 00368640 _____ (Microsoft Corporation) C:\Windows\system32\sppwinob.dll

    2013-09-14 11:21 - 2013-08-16 07:21 - 00252416 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll

    2013-09-14 11:21 - 2013-08-16 07:21 - 00204800 _____ (Microsoft Corporation) C:\Windows\system32\WSClient.dll

    2013-09-14 11:21 - 2013-08-16 07:21 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.dll

    2013-09-14 11:21 - 2013-08-16 07:21 - 00183808 _____ (Microsoft Corporation) C:\Windows\system32\WSSync.dll

    2013-09-14 11:21 - 2013-08-16 07:21 - 00174592 _____ (Microsoft Corporation) C:\Windows\system32\storewuauth.dll

    2013-09-14 11:21 - 2013-08-16 07:21 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll

    2013-09-14 11:21 - 2013-08-16 07:21 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll

    2013-09-14 11:21 - 2013-08-16 07:21 - 00120320 _____ (Microsoft Corporation) C:\Windows\system32\sppc.dll

    2013-09-14 11:21 - 2013-08-16 07:21 - 00099328 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll

    2013-09-14 11:21 - 2013-08-16 07:21 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\setupcln.dll

    2013-09-14 11:21 - 2013-08-16 07:21 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll

    2013-09-14 11:21 - 2013-08-16 07:21 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll

    2013-09-14 11:21 - 2013-08-16 07:20 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll

    2013-09-14 11:21 - 2013-08-16 00:43 - 00628736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll

    2013-09-14 11:21 - 2013-08-16 00:43 - 00562688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll

    2013-09-14 11:21 - 2013-08-16 00:43 - 00167424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSClient.dll

    2013-09-14 11:21 - 2013-08-16 00:43 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSSync.dll

    2013-09-14 11:21 - 2013-08-16 00:43 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.dll

    2013-09-14 11:21 - 2013-08-16 00:43 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll

    2013-09-14 11:21 - 2013-08-16 00:43 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll

    2013-09-14 11:21 - 2013-08-16 00:43 - 00084992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll

    2013-09-14 11:21 - 2013-08-16 00:43 - 00083968 _____ C:\Windows\SysWOW64\OEMLicense.dll

    2013-09-14 11:21 - 2013-08-16 00:43 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe

    2013-09-14 11:21 - 2013-08-16 00:43 - 00020992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll

    2013-09-14 11:21 - 2013-08-16 00:42 - 00091648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sppc.dll

    2013-09-14 11:21 - 2013-08-16 00:42 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setupcln.dll

    2013-09-14 11:20 - 2013-08-21 06:12 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

    2013-09-14 11:20 - 2013-08-21 06:12 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

    2013-09-14 11:20 - 2013-08-21 06:11 - 19246592 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

    2013-09-14 11:20 - 2013-08-21 06:11 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

    2013-09-14 11:20 - 2013-08-21 06:11 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

    2013-09-14 11:20 - 2013-08-21 06:11 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

    2013-09-14 11:20 - 2013-08-21 06:11 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

    2013-09-14 11:20 - 2013-08-21 06:11 - 00915968 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll

    2013-09-14 11:20 - 2013-08-21 06:11 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

    2013-09-14 11:20 - 2013-08-21 06:11 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

    2013-09-14 11:20 - 2013-08-21 06:11 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

    2013-09-14 11:20 - 2013-08-21 06:11 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

    2013-09-14 11:20 - 2013-08-21 06:11 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll

    2013-09-14 11:20 - 2013-08-21 06:11 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

    2013-09-14 11:20 - 2013-08-21 06:11 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

    2013-09-14 11:20 - 2013-08-21 04:34 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

    2013-09-14 11:20 - 2013-08-21 04:06 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

    2013-09-14 11:20 - 2013-08-21 04:06 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

    2013-09-14 11:20 - 2013-08-21 04:06 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll

    2013-09-14 11:20 - 2013-08-21 04:05 - 14332928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

    2013-09-14 11:20 - 2013-08-21 04:05 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

    2013-09-14 11:20 - 2013-08-21 04:05 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

    2013-09-14 11:20 - 2013-08-21 04:05 - 02048000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

    2013-09-14 11:20 - 2013-08-21 04:05 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

    2013-09-14 11:20 - 2013-08-21 04:05 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

    2013-09-14 11:20 - 2013-08-21 04:05 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

    2013-09-14 11:20 - 2013-08-21 04:05 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

    2013-09-14 11:20 - 2013-08-21 04:05 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

    2013-09-14 11:20 - 2013-08-21 04:05 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

    2013-09-14 11:20 - 2013-08-21 03:43 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

    2013-09-14 11:20 - 2013-08-21 01:52 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uxtheme.dll

    2013-09-14 11:20 - 2013-08-03 06:30 - 04038144 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

    2013-09-13 13:52 - 2013-09-13 13:52 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

    2013-09-12 10:52 - 2013-09-12 10:55 - 10576657 _____ C:\Users\Gilbert\Downloads\DisneyInfinity.themepack

    2013-09-11 15:11 - 2013-09-11 15:11 - 00000853 _____ C:\Users\Gilbert\Desktop\µTorrent.lnk

    2013-09-11 15:11 - 2013-09-11 15:11 - 00000833 _____ C:\Users\Gilbert\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk

    2013-09-09 11:21 - 2013-09-09 11:23 - 90889040 _____ (Apple Inc.) C:\Users\Gilbert\Downloads\iTunes64Setup (1).exe

    2013-09-08 15:22 - 2013-09-08 15:22 - 00332552 _____ C:\Users\Gilbert\Documents\Présentation1 Disney Dimanche.pptx

    ==================== One Month Modified Files and Folders =======

    2013-10-07 12:13 - 2013-10-07 12:13 - 00000000 ____D C:\FRST

    2013-10-07 12:12 - 2013-08-14 12:07 - 00001088 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

    2013-10-07 12:12 - 2013-08-14 12:07 - 00001084 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

    2013-10-07 12:11 - 2013-10-07 12:11 - 01954124 _____ (Farbar) C:\Users\Gilbert\Downloads\FRST64.exe

    2013-10-07 12:06 - 2013-10-07 12:06 - 00001406 _____ C:\Users\Gilbert\Desktop\RKreport[0]_D_10072013_120626.txt

    2013-10-07 12:06 - 2013-10-07 12:06 - 00001368 _____ C:\Users\Gilbert\Desktop\RKreport[0]_S_10072013_120623.txt

    2013-10-07 12:00 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\system32\sru

    2013-10-07 11:51 - 2013-08-21 17:46 - 00000954 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2923209095-728556447-3928840970-1001UA.job

    2013-10-07 11:36 - 2013-08-26 19:11 - 00000000 ___RD C:\Users\Gilbert\SkyDrive

    2013-10-06 21:36 - 2013-10-06 21:19 - 00000000 ____D C:\Users\Gilbert\Desktop\RK_Quarantine

    2013-10-06 21:32 - 2013-08-13 10:49 - 01833653 _____ C:\Windows\WindowsUpdate.log

    2013-10-06 21:31 - 2013-10-06 21:31 - 00006217 _____ C:\Users\Gilbert\Desktop\RKreport[0]_D_10062013_213140.txt

    2013-10-06 21:31 - 2013-08-13 10:53 - 00000000 ___RD C:\Users\Gilbert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

    2013-10-06 21:25 - 2013-10-06 21:25 - 00004421 _____ C:\Users\Gilbert\Documents\RKreport[0]_S_10062013_212237 1er rapport de RogueKiller.txt

    2013-10-06 21:22 - 2013-10-06 21:22 - 00004417 _____ C:\Users\Gilbert\Desktop\RKreport[0]_S_10062013_212237.txt

    2013-10-06 21:13 - 2013-10-06 16:12 - 00003214 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-2923209095-728556447-3928840970-1001

    2013-10-06 21:13 - 2013-10-06 15:29 - 00003344 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-2923209095-728556447-3928840970-1001

    2013-10-06 21:11 - 2012-07-26 09:22 - 00000006 ____H C:\Windows\Tasks\SA.DAT

    2013-10-06 21:10 - 2012-08-04 00:23 - 02120160 _____ C:\Windows\PFRO.log

    2013-10-06 21:10 - 2012-07-26 07:26 - 00524288 ___SH C:\Windows\system32\config\BBI

    2013-10-06 21:04 - 2013-10-06 14:46 - 00000000 ____D C:\Users\Gilbert\AppData\Roaming\DigitalSite

    2013-10-06 21:04 - 2013-08-28 13:57 - 00000000 ____D C:\Program Files (x86)\Movies Toolbar

    2013-10-06 20:59 - 2013-08-13 10:49 - 00000000 ____D C:\Users\Gilbert

    2013-10-06 18:55 - 2013-10-06 18:55 - 00950272 _____ C:\Users\Gilbert\Desktop\RogueKiller.exe

    2013-10-06 18:27 - 2013-10-06 18:27 - 00001109 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

    2013-10-06 18:27 - 2013-10-06 18:27 - 00000000 ____D C:\Users\Gilbert\AppData\Roaming\Malwarebytes

    2013-10-06 18:27 - 2013-10-06 18:27 - 00000000 ____D C:\ProgramData\Malwarebytes

    2013-10-06 18:27 - 2013-10-06 18:27 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware

    2013-10-06 18:26 - 2013-10-06 18:24 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Gilbert\Downloads\mbam-setup-1.75.0.1300.exe

    2013-10-06 18:16 - 2013-10-06 18:02 - 00000000 ____D C:\Windows\86CA3695A4124BAE92B649A60C2AC663.TMP

    2013-10-06 18:03 - 2013-10-06 18:03 - 00000000 ____D C:\Program Files\Enigma Software Group

    2013-10-06 18:03 - 2013-10-06 18:03 - 00000000 _____ C:\autoexec.bat

    2013-10-06 17:53 - 2013-10-06 17:53 - 00726464 _____ (Enigma Software Group USA, LLC.) C:\Users\Gilbert\Downloads\SpyHunter-Installer.exe

    2013-10-06 17:51 - 2013-08-21 17:46 - 00000932 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2923209095-728556447-3928840970-1001Core.job

    2013-10-06 16:13 - 2013-10-05 13:39 - 00000000 ____D C:\Users\Gilbert\AppData\Local\NPE

    2013-10-06 15:53 - 2013-10-06 14:47 - 00000000 ____D C:\Program Files (x86)\BonanzaDealsLive

    2013-10-06 15:30 - 2013-10-06 15:30 - 00123276 ____H C:\Windows\SysWOW64\mlfcache.dat

    2013-10-06 15:04 - 2013-10-06 14:48 - 00000000 ____D C:\Program Files (x86)\DSP-worx

    2013-10-06 15:04 - 2013-10-06 14:47 - 00000000 ____D C:\Program Files (x86)\BonanzaDeals

    2013-10-06 14:55 - 2013-08-13 10:53 - 00001750 _____ C:\Users\Gilbert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

    2013-10-06 14:51 - 2013-08-19 19:22 - 00000000 ____D C:\ProgramData\DivX

    2013-10-06 14:50 - 2013-10-06 14:49 - 00000000 ____D C:\Users\Gilbert\AppData\Roaming\LavFilters

    2013-10-06 14:50 - 2013-08-19 19:37 - 00000000 ____D C:\Program Files\DivX

    2013-10-06 14:50 - 2013-08-19 19:24 - 00000000 ____D C:\Program Files (x86)\DivX

    2013-10-06 14:49 - 2013-10-06 14:49 - 00000000 ____D C:\Users\Gilbert\AppData\Roaming\CDXReader

    2013-10-06 14:47 - 2013-10-06 14:47 - 00000000 ____D C:\Users\Gilbert\AppData\Local\BonanzaDealsLive

    2013-10-06 14:47 - 2013-10-06 14:47 - 00000000 ____D C:\ProgramData\BonanzaDealsLive

    2013-10-06 14:46 - 2013-10-06 14:46 - 00000000 ____D C:\ProgramData\Babylon

    2013-10-06 11:55 - 2013-08-22 16:24 - 00000000 ____D C:\Users\Gilbert\AppData\Roaming\vlc

    2013-10-05 19:06 - 2013-10-05 19:00 - 00000000 ____D C:\Users\Gilbert\Downloads\BJeqSiZHHzZ_services_64

    2013-10-05 19:00 - 2013-10-05 19:00 - 00006203 _____ C:\Users\Gilbert\Downloads\BJeqSiZHHzZ_services_64.zip

    2013-10-05 18:18 - 2013-10-05 18:18 - 00000000 ____D C:\Windows\softwaredistribution.bak1

    2013-10-05 18:06 - 2013-08-13 17:42 - 00000358 _____ C:\Windows\Tasks\HPCeeScheduleForGILBERT.job

    2013-10-05 17:57 - 2013-10-05 17:57 - 00000000 ____D C:\Windows\softwaredistribution.bak

    2013-10-05 17:54 - 2013-10-05 17:54 - 00275181 _____ C:\Users\Gilbert\Downloads\WindowsUpdateDiagnostic.diagcab

    2013-10-05 17:53 - 2013-08-13 17:42 - 00003172 _____ C:\Windows\System32\Tasks\HPCeeScheduleForGILBERT

    2013-10-05 17:46 - 2013-08-13 11:02 - 00000000 ____D C:\Users\Gilbert\AppData\Local\CrashDumps

    2013-10-05 17:43 - 2013-10-05 17:43 - 00001783 _____ C:\Users\Public\Desktop\iTunes.lnk

    2013-10-05 17:42 - 2013-10-05 17:41 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69

    2013-10-05 17:42 - 2013-10-05 17:41 - 00000000 ____D C:\Program Files\iTunes

    2013-10-05 17:42 - 2013-08-13 19:22 - 00000000 ____D C:\Program Files (x86)\iTunes

    2013-10-05 17:41 - 2013-10-05 17:41 - 00000000 ____D C:\Program Files\iPod

    2013-10-05 17:31 - 2013-08-20 17:06 - 00000000 ____D C:\Users\Gilbert\AppData\Local\Last.fm

    2013-10-05 14:20 - 2013-10-05 14:20 - 00000024 _____ C:\Windows\175B986293A882A3.log

    2013-10-05 14:20 - 2013-10-04 14:54 - 00000000 ____D C:\ProgramData\SlySoft

    2013-10-05 14:20 - 2013-10-04 14:50 - 00000000 ____D C:\Program Files (x86)\SlySoft

    2013-10-05 13:40 - 2012-12-28 19:06 - 00000000 ____D C:\ProgramData\Norton

    2013-10-04 21:52 - 2013-08-15 21:58 - 00000000 ____D C:\Users\Gilbert\AppData\Local\Nero

    2013-10-04 20:28 - 2013-10-04 20:28 - 00000000 ____D C:\Users\Gilbert\Documents\NeroVision

    2013-10-04 20:16 - 2012-10-28 04:01 - 00875886 _____ C:\Windows\system32\perfh00C.dat

    2013-10-04 20:16 - 2012-10-28 04:01 - 00188684 _____ C:\Windows\system32\perfc00C.dat

    2013-10-04 20:16 - 2012-07-26 09:28 - 01997594 _____ C:\Windows\system32\PerfStringBackup.INI

    2013-10-04 20:14 - 2012-07-26 09:21 - 00042291 _____ C:\Windows\setupact.log

    2013-10-04 18:48 - 2013-10-04 14:54 - 00000040 ___SH C:\ProgramData.zreglib

    2013-10-04 15:37 - 2013-08-15 18:10 - 00000000 ____D C:\Users\Gilbert\AppData\Roaming\uTorrent

    2013-10-04 15:34 - 2013-08-14 12:07 - 00000000 ____D C:\Program Files (x86)\Google

    2013-10-04 15:33 - 2013-08-14 12:06 - 00000000 ____D C:\Users\Gilbert\AppData\Local\Google

    2013-10-04 14:55 - 2013-10-04 14:55 - 00000000 ____D C:\Users\Gilbert\Documents\AnyDVDHD

    2013-10-04 14:46 - 2013-10-04 14:46 - 00000000 ____D C:\Users\Gilbert\Downloads\AnyDVD HD v6.7.4.0 Final + New.Loader-JW [h33t] [Original]

    2013-10-04 14:42 - 2013-10-04 14:39 - 00002783 _____ C:\Users\Gilbert\Downloads\anydvd-anydvd-hd-6-6-3-4-final-key.torrent

    2013-10-03 20:37 - 2013-08-20 17:06 - 00000000 ____D C:\Program Files (x86)\Last.fm

    2013-10-02 11:05 - 2013-10-02 11:05 - 00575895 _____ C:\Users\Gilbert\Downloads\Édouard - L'automne.m4a

    2013-10-01 18:54 - 2013-08-17 14:51 - 00000000 ____D C:\Users\Gilbert\AppData\Roaming\Skype

    2013-10-01 14:18 - 2013-08-14 18:47 - 00000000 ____D C:\Users\Gilbert\Documents\Youcam

    2013-10-01 13:05 - 2013-10-01 13:05 - 00000000 ____D C:\net-snmp-compil-win

    2013-10-01 13:05 - 2013-08-23 15:35 - 00000000 ____D C:\ProgramData\Orange

    2013-09-30 21:12 - 2013-09-30 21:11 - 00000000 ____D C:\Users\Gilbert\AppData\Local\WinZip

    2013-09-30 21:11 - 2013-09-30 21:11 - 00002279 _____ C:\Users\Public\Desktop\WinZip.lnk

    2013-09-30 21:11 - 2013-09-30 20:41 - 00000000 ____D C:\ProgramData\WinZip

    2013-09-30 21:10 - 2013-09-30 21:10 - 00000000 ____D C:\Program Files (x86)\WinZip

    2013-09-30 21:09 - 2013-09-30 21:06 - 14079304 _____ C:\Users\Gilbert\Downloads\winzip150fr.exe

    2013-09-30 19:10 - 2013-09-30 18:53 - 00000000 ____D C:\Users\Gilbert\Downloads\Vincent Niclo - Luis[Full Album-CDRip] [www.Cpasbien.me]

    2013-09-30 17:17 - 2013-08-15 18:40 - 00000000 ____D C:\Users\Gilbert\AppData\Roaming\Spotify

    2013-09-30 16:02 - 2012-07-26 07:26 - 00262144 ___SH C:\Windows\system32\config\ELAM

    2013-09-30 11:14 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\AUInstallAgent

    2013-09-29 13:55 - 2013-08-13 11:01 - 00003598 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2923209095-728556447-3928840970-1001

    2013-09-28 22:18 - 2013-08-13 10:50 - 00000000 ____D C:\Users\Gilbert\AppData\Local\Packages

    2013-09-28 18:41 - 2013-09-28 18:41 - 00000000 ____D C:\Windows\System32\Tasks\Norton Internet Security

    2013-09-28 18:41 - 2013-09-28 18:41 - 00000000 ____D C:\Users\Gilbert\Documents\Symantec

    2013-09-28 18:40 - 2013-09-28 18:40 - 00177752 _____ (Symantec Corporation) C:\Window

    Cette réponse a-t-elle été utile ?

    0 commentaires
  2. Anonyme
    2013-10-07T12:09:21+00:00

    Dépassant 60 0000 caractères, je vous envoie le rapport FRST.txt en 2 parties.

    Partie 1:

    Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-10-2013

    Ran by GILBERT (administrator) on PC-GIJOE on 07-10-2013 12:15:12

    Running from C:\Users\Gilbert\Downloads

    Windows 8 (X64) OS Language: French Standard

    Internet Explorer Version 10

    Boot Mode: Normal

    ==================== Processes (Whitelisted) =================

    (AMD) C:\Windows\system32\atiesrxx.exe

    (IDT, Inc.) C:\Program Files\IDT\WDM\STacSV64.exe

    (Hewlett-Packard Company) C:\Windows\system32\Hpservice.exe

    (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

    (Microsoft Corp.) C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe

    (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

    (Canal+ Active) C:\Program Files (x86)\Canal+\CANAL+ CANALSAT A LA DEMANDE\VOD\CanalPlus.VOD.exe

    () C:\Program Files (x86)\Orange\Assistance Livebox\dedicarz\DedicarzService.exe

    (Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe

    (Microsoft Corporation) C:\Windows\system32\dashost.exe

    (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe

    (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe

    (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe

    (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe

    (Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.0.2.1\NIS.exe

    () C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe

    (SPEEDbit) C:\PROGRA~2\SPEEDB~1\VideoAcceleratorService.exe

    (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.153\GoogleCrashHandler.exe

    (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.153\GoogleCrashHandler64.exe

    (Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe

    (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

    (WildTangent) C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe

    (Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe

    (Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe

    (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

    (Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe

    (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe

    (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

    (Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe

    (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

    (AMD) C:\Windows\system32\atieclxx.exe

    () C:\Program Files (x86)\Orange\Orange Installer\OrangeInstaller.exe

    (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe

    (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\LiveComm.exe

    (Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.0.2.1\NIS.exe

    (Intel Corporation) C:\Windows\System32\hkcmd.exe

    (Intel Corporation) C:\Windows\System32\igfxpers.exe

    (IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe

    (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

    (Spotify Ltd) C:\Users\Gilbert\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe

    (Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE

    (Microsoft Corporation) C:\Users\Gilbert\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe

    (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe

    (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe

    (Orange) C:\Program Files (x86)\Orange\MailNotifier\MailNotifier.exe

    (CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe

    (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\AppleIEDAV.exe

    (Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe

    (Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe

    (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\APSDaemon.exe

    () C:\Program Files (x86)\Canal+\CANAL+ CANALSAT A LA DEMANDE\CANAL+ CANALSAT A LA DEMANDE.EXE

    (Microsoft Corp.) C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktop.exe

    (CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe

    (RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe

    () C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe

    (Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteUser.exe

    (Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe

    (Microsoft Corp.) C:\Program Files (x86)\Microsoft\BingDesktop\BDExtHost.exe

    (Microsoft Corp.) C:\Program Files (x86)\Microsoft\BingDesktop\BDAppHost.exe

    (Microsoft Corp.) C:\Program Files (x86)\Microsoft\BingDesktop\BDRuntimeHost.exe

    (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

    (ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

    ==================== Registry (Whitelisted) ==================

    HKLM...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()

    HKLM...\Run: [SysTrayApp] - C:\Program Files\IDT\WDM\sttray64.exe [1664000 2012-08-20] (IDT, Inc.)

    HKLM...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3053808 2013-08-14] (Synaptics Incorporated)

    Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)

    HKCU...\Run: [Power2GoExpress8] - NA

    HKCU...\Run: [Spotify Web Helper] - C:\Users\Gilbert\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1140736 2013-09-26] (Spotify Ltd)

    HKCU...\Run: [Facebook Update] - C:\Users\Gilbert\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2013-08-21] (Facebook Inc.)

    HKCU...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20687728 2013-07-25] (Skype Technologies S.A.)

    HKCU...\Run: [SkyDrive] - C:\Users\Gilbert\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe [257136 2013-08-26] (Microsoft Corporation)

    HKCU...\Run: [iCloudServices] - C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-09-14] (Apple Inc.)

    HKCU...\Run: [ApplePhotoStreams] - C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-09-15] (Apple Inc.)

    HKCU...\Run: [com.apple.dav.bookmarks.daemon] - C:\Program Files (x86)\Common Files\Apple\Internet Services\BookmarkDAV_client.exe

    HKCU...\Run: [Orange Installer] - C:\Program Files (x86)\Orange\Orange Installer\OrangeInstaller.exe [525248 2013-08-01] ()

    HKCU...\Run: [MailNotifierTmp] - C:\Program Files (x86)\Orange\MailNotifier\MailNotifier.exe [884744 2013-08-30] (Orange)

    HKCU...\Run: [AppleIEDAV] - C:\Program Files (x86)\Common Files\Apple\Internet Services\AppleIEDAV.exe [1315144 2013-09-04] (Apple Inc.)

    HKCU...\Run: [MailNotifier] - C:\Program Files (x86)\Orange\MailNotifier\MailNotifier.exe [884744 2013-08-30] (Orange)

    HKCU...\Runonce: [Uninstall C:\Users\Gilbert\AppData\Local\Microsoft\SkyDrive\16.4.6010.0727\amd64] - C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Gilbert\AppData\Local\Microsoft\SkyDrive\16.4.6010.0727\amd64"

    HKLM-x32...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642216 2012-09-18] (Advanced Micro Devices, Inc.)

    HKLM-x32...\Run: [HP Quick Launch] - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [581024 2012-09-07] (Hewlett-Packard Development Company, L.P.)

    HKLM-x32...\Run: [HP CoolSense] - C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe [1343904 2012-11-05] (Hewlett-Packard Development Company, L.P.)

    HKLM-x32...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)

    HKLM-x32...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)

    HKLM-x32...\Run: [CANAL+ CANALSAT A LA DEMANDE] - C:\Program Files (x86)\Canal+\CANAL+ CANALSAT A LA DEMANDE\Launcher.exe [163992 2011-10-20] (Canal+)

    HKLM-x32...\Run: [UnlockerAssistant] - "C:\Program Files (x86)\Unlocker\UnlockerAssistant.exe"

    HKLM-x32...\Run: [NBAgent] - C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe [1406248 2011-04-28] (Nero AG)

    HKLM-x32...\Run: [DivXMediaServer] - C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-08-21] (DivX, LLC)

    HKLM-x32...\Run: [BingDesktop] - C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktop.exe [2249352 2013-06-20] (Microsoft Corp.)

    HKLM-x32...\Run: [RemoteControl10] - C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [95192 2013-04-10] (CyberLink Corp.)

    HKLM-x32...\Run: [TkBellExe] - C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe [295512 2013-09-14] (RealNetworks, Inc.)

    HKLM-x32...\Run: [DivXUpdate] - C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2013-08-29] ()

    HKLM-x32...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-10-01] (Apple Inc.)

    AppInit_DLLs:       [0 ] ()

    ==================== Internet (Whitelisted) ====================

    HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://g.uk.msn.com/hpnot13/3/

    HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.uk.msn.com/HPNOT13/3

    HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = http://g.uk.msn.com/HPNOT13/3

    HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.qvo6.com/?utm\_source=b&utm\_medium=cor&utm\_campaign=eXQ&utm\_content=hp&from=cor&uid=ST1000LM024XHN-M101MBB\_S2SWJ9ACC02095&ts=1381063634

    HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.qvo6.com/?utm\_source=b&utm\_medium=cor&utm\_campaign=eXQ&utm\_content=hp&from=cor&uid=ST1000LM024XHN-M101MBB\_S2SWJ9ACC02095&ts=1381063634

    SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.qvo6.com/web/?utm\_source=b&utm\_medium=cor&utm\_campaign=eXQ&utm\_content=ds&from=cor&uid=ST1000LM024XHN-M101MBB\_S2SWJ9ACC02095&ts=1381063634&type=default&q={searchTerms}

    SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=HPNTDFJS

    SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.qvo6.com/web/?utm\_source=b&utm\_medium=cor&utm\_campaign=eXQ&utm\_content=ds&from=cor&uid=ST1000LM024XHN-M101MBB\_S2SWJ9ACC02095&ts=1381063634&type=default&q={searchTerms}

    SearchScopes: HKLM - {7BA8120D-D6B8-4235-873F-9F9CF2EE430C} URL = http://www.amazon.fr/s/ref=azs\_osd\_ieafr?ie=UTF-8&tag=hp-fr2-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}

    SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = http://dts.search.ask.com/sr?src=ieb&gct=ds&appid=427&systemid=406&v=a9396-117&apn\_uid=7211196890994567&apn\_dtid=BND406&o=APN10645&apn\_ptnrs=AG6&q={searchTerms}

    SearchScopes: HKLM - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = http://rover.ebay.com/rover/1/709-29563-11896-9/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}

    SearchScopes: HKLM-x32 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.qvo6.com/web/?utm\_source=b&utm\_medium=cor&utm\_campaign=eXQ&utm\_content=ds&from=cor&uid=ST1000LM024XHN-M101MBB\_S2SWJ9ACC02095&ts=1381063634&type=default&q={searchTerms}

    SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=HPNTDFJS

    SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.qvo6.com/web/?utm\_source=b&utm\_medium=cor&utm\_campaign=eXQ&utm\_content=ds&from=cor&uid=ST1000LM024XHN-M101MBB\_S2SWJ9ACC02095&ts=1381063634&type=default&q={searchTerms}

    SearchScopes: HKLM-x32 - {7BA8120D-D6B8-4235-873F-9F9CF2EE430C} URL = http://www.amazon.fr/s/ref=azs\_osd\_ieafr?ie=UTF-8&tag=hp-fr2-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}

    SearchScopes: HKLM-x32 - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = http://dts.search.ask.com/sr?src=ieb&gct=ds&appid=427&systemid=406&v=a9396-117&apn\_uid=7211196890994567&apn\_dtid=BND406&o=APN10645&apn\_ptnrs=AG6&q={searchTerms}

    SearchScopes: HKLM-x32 - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = http://rover.ebay.com/rover/1/709-29563-11896-9/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}

    SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

    SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =

    SearchScopes: HKCU - {7BA8120D-D6B8-4235-873F-9F9CF2EE430C} URL =

    SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL =

    SearchScopes: HKCU - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL =

    BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

    BHO-x32: ToolbarOrange.InitToolbarBHO - {1d970ed5-3eda-438d-bffd-715931e2775b} - C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation)

    BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)

    BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\21.0.2.1\coIEPlg.dll (Symantec Corporation)

    BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\21.0.2.1\IPS\IPSBHO.DLL (Symantec Corporation)

    BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

    BHO-x32: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)

    Toolbar: HKLM-x32 - Barre d'outils Orange - {c9a6357b-25cc-4bcf-96c1-78736985d412} - C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation)

    Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\21.0.2.1\coIEPlg.dll (Symantec Corporation)

    Toolbar: HKCU -  No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File

    DPF: HKLM-x32 {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} http://h20614.www2.hp.com/ediags/gmd/Install/Cab/hpdetect1263.cab

    Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

    Winsock: Catalog5 04 mswsock.dll File Not found (Microsoft Corporation) ATTENTION: The LibraryPath should be "%SystemRoot%\system32\NLAapi.dll"

    Winsock: Catalog5 05 mswsock.dll File Not found (Microsoft Corporation) ATTENTION: The LibraryPath should be "%SystemRoot%\System32\mswsock.dll"

    Winsock: Catalog9 01 C:\Program Files (x86)\SpeedBit Video Accelerator\SBLSP.dll [177320] (SPEEDbit)

    Winsock: Catalog9 02 C:\Program Files (x86)\SpeedBit Video Accelerator\SBLSP.dll [177320] (SPEEDbit)

    Winsock: Catalog9 03 C:\Program Files (x86)\SpeedBit Video Accelerator\SBLSP.dll [177320] (SPEEDbit)

    Winsock: Catalog9 04 C:\Program Files (x86)\SpeedBit Video Accelerator\SBLSP.dll [177320] (SPEEDbit)

    Winsock: Catalog9 05 C:\Program Files (x86)\SpeedBit Video Accelerator\SBLSP.dll [177320] (SPEEDbit)

    Winsock: Catalog9 06 C:\Program Files (x86)\SpeedBit Video Accelerator\SBLSP.dll [177320] (SPEEDbit)

    Winsock: Catalog9 07 C:\Program Files (x86)\SpeedBit Video Accelerator\SBLSP.dll [177320] (SPEEDbit)

    Winsock: Catalog9 08 C:\Program Files (x86)\SpeedBit Video Accelerator\SBLSP.dll [177320] (SPEEDbit)

    Winsock: Catalog9 09 C:\Program Files (x86)\SpeedBit Video Accelerator\SBLSP.dll [177320] (SPEEDbit)

    Winsock: Catalog9 10 C:\Program Files (x86)\SpeedBit Video Accelerator\SBLSP.dll [177320] (SPEEDbit)

    Winsock: Catalog9 11 mswsock.dll File Not found (Microsoft Corporation)

    Winsock: Catalog9 12 mswsock.dll File Not found (Microsoft Corporation)

    Winsock: Catalog9 13 mswsock.dll File Not found (Microsoft Corporation)

    Winsock: Catalog9 14 mswsock.dll File Not found (Microsoft Corporation)

    Winsock: Catalog9 15 mswsock.dll File Not found (Microsoft Corporation)

    Winsock: Catalog9 16 mswsock.dll File Not found (Microsoft Corporation)

    Winsock: Catalog9 17 mswsock.dll File Not found (Microsoft Corporation)

    Winsock: Catalog9 18 mswsock.dll File Not found (Microsoft Corporation)

    Winsock: Catalog9 19 mswsock.dll File Not found (Microsoft Corporation)

    Winsock: Catalog9 20 mswsock.dll File Not found (Microsoft Corporation)

    Winsock: Catalog9 21 C:\Program Files (x86)\SpeedBit Video Accelerator\SBLSP.dll [177320] (SPEEDbit)

    Winsock: Catalog5-x64 04 mswsock.dll File Not found (Microsoft Corporation) ATTENTION: The LibraryPath should be "%SystemRoot%\system32\NLAapi.dll"

    Winsock: Catalog5-x64 05 mswsock.dll File Not found (Microsoft Corporation) ATTENTION: The LibraryPath should be "%SystemRoot%\System32\mswsock.dll"

    Winsock: Catalog9-x64 01 mswsock.dll File Not found (Microsoft Corporation)

    Winsock: Catalog9-x64 02 mswsock.dll File Not found (Microsoft Corporation)

    Winsock: Catalog9-x64 03 mswsock.dll File Not found (Microsoft Corporation)

    Winsock: Catalog9-x64 04 mswsock.dll File Not found (Microsoft Corporation)

    Winsock: Catalog9-x64 05 mswsock.dll File Not found (Microsoft Corporation)

    Winsock: Catalog9-x64 06 mswsock.dll File Not found (Microsoft Corporation)

    Winsock: Catalog9-x64 07 mswsock.dll File Not found (Microsoft Corporation)

    Winsock: Catalog9-x64 08 mswsock.dll File Not found (Microsoft Corporation)

    Winsock: Catalog9-x64 09 mswsock.dll File Not found (Microsoft Corporation)

    Winsock: Catalog9-x64 10 mswsock.dll File Not found (Microsoft Corporation)

    Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

    FireFox:

    ========

    FF ProfilePath: C:\Users\Gilbert\AppData\Roaming\Mozilla\Firefox\Profiles\d5mjb5fs.default

    FF user.js: detected! => C:\Users\Gilbert\AppData\Roaming\Mozilla\Firefox\Profiles\d5mjb5fs.default\user.js

    FF DefaultSearchEngine: qvo6

    FF SearchEngineOrder.1: Ask.com

    FF SearchEngineOrder.3: Bing

    FF Homepage: about:home

    FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll ()

    FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

    FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)

    FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)

    FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll ()

    FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\windows\SysWOW64\Adobe\Director\np32dsw_1166636.dll (Adobe Systems, Inc.)

    FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

    FF Plugin-x32: @canalplus.fr/Assistants VOD,version=1.0.0.0 - C:\Program Files (x86)\Canal+\CANAL+ CANALSAT A LA DEMANDE\VOD\npcpvod.dll (Canal+ Active)

    FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

    FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)

    FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)

    FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)

    FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)

    FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)

    FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)

    FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)

    FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3503.0728 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

    FF Plugin-x32: @Nero.com/KM - C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)

    FF Plugin-x32: @real.com/nppl3260;version=16.0.3.51 - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)

    FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)

    FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)

    FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)

    FF Plugin-x32: @real.com/nprpplugin;version=16.0.3.51 - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpplugin.dll (RealPlayer)

    FF Plugin-x32: @realnetworks.com/npdlplugin;version=1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)

    FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)

    FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)

    FF Plugin-x32: @videolan.org/vlc,version=2.0.8 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

    FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\2\NP_wtapp.dll ()

    FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\Gilbert\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)

    FF SearchPlugin: C:\Users\Gilbert\AppData\Roaming\Mozilla\Firefox\Profiles\d5mjb5fs.default\searchplugins\Ask.xml

    FF SearchPlugin: C:\Users\Gilbert\AppData\Roaming\Mozilla\Firefox\Profiles\d5mjb5fs.default\searchplugins\bingp.xml

    FF SearchPlugin: C:\Users\Gilbert\AppData\Roaming\Mozilla\Firefox\Profiles\d5mjb5fs.default\searchplugins\conduit-search.xml

    FF SearchPlugin: C:\Users\Gilbert\AppData\Roaming\Mozilla\Firefox\Profiles\d5mjb5fs.default\searchplugins\orange.xml

    FF SearchPlugin: C:\Users\Gilbert\AppData\Roaming\Mozilla\Firefox\Profiles\d5mjb5fs.default\searchplugins\safesearch.xml

    FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazon-france.xml

    FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\Ask.xml

    FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\cnrtl-tlfi-fr.xml

    FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-france.xml

    FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-france.xml

    FF Extension: barre d'outils Orange - C:\Users\Gilbert\AppData\Roaming\Mozilla\Firefox\Profiles\d5mjb5fs.default\Extensions******@Orange.fr

    FF HKLM-x32...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext

    FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext

    FF HKLM-x32...\Firefox\Extensions: [{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\

    FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\

    FF HKLM-x32...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.0.2.1\IPSFFPlgn\

    FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.0.2.1\IPSFFPlgn\

    FF HKLM-x32...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.0.2.1\coFFPlgn\

    FF Extension: Norton Toolbar - C:\ProgramData\Norton{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.0.2.1\coFFPlgn\

    Chrome:

    =======

    CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\PepperFlash\pepflashplayer.dll ()

    CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer

    CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\ppGoogleNaClPluginChrome.dll ()

    CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\pdf.dll ()

    CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll (Apple Inc.)

    CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll (Apple Inc.)

    CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll (Apple Inc.)

    CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll (Apple Inc.)

    CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll (Apple Inc.)

    CHR Plugin: (Nero Kwik Media Helper) - C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)

    CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)

    CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)

    CHR Plugin: (Canal+ Assistants VOD) - C:\Program Files (x86)\Canal+\CANAL+ CANALSAT A LA DEMANDE\VOD\npcpvod.dll (Canal+ Active)

    CHR Plugin: (DivX VOD Helper Plug-in) - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

    CHR Plugin: (DivX Plus Web Player) - C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)

    CHR Plugin: (Picasa) - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)

    CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)

    CHR Plugin: (Intel\u00AE Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)

    CHR Plugin: (Intel\u00AE Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)

    CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)

    CHR Plugin: (RealPlayer Download Plugin) - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpplugin.dll (RealPlayer)

    CHR Plugin: (VLC Web Plugin) - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

    CHR Plugin: (WildTangent Games App V2 Presence Detector) - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\2\NP_wtapp.dll ()

    CHR Plugin: (Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

    CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

    CHR Plugin: (RealNetworks(tm) RealDownloader Chrome Background Extension Plug-In (32-bit) ) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)

    CHR Plugin: (RealNetworks(tm) RealDownloader HTML5VideoShim Plug-In (32-bit) ) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)

    CHR Plugin: (RealNetworks(tm) RealDownloader PepperFlashVideoShim Plug-In (32-bit) ) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)

    CHR Plugin: (RealDownloader Plugin) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)

    CHR Plugin: (Facebook Video Calling Plugin) - C:\Users\Gilbert\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)

    CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll ()

    CHR Plugin: (Shockwave for Director) - C:\windows\SysWOW64\Adobe\Director\np32dsw_1166636.dll (Adobe Systems, Inc.)

    CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)

    CHR Extension: (RealDownloader) - C:\Users\Gilbert\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji\1.3.3_1

    CHR Extension: (Portail Orange) - C:\Users\Gilbert\AppData\Local\Google\Chrome\User Data\Default\Extensions\jafdhbipfdlldljdanpnlipdinjcjjid\1.0_0

    CHR Extension: (Norton Identity Protection) - C:\Users\Gilbert\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2014.5.1.4_0

    CHR Extension: (Menu Contextuel Orange) - C:\Users\Gilbert\AppData\Local\Google\Chrome\User Data\Default\Extensions\nfkdglgjjpicgkbfdflchobhdiblbjgf\1.0_1

    CHR Extension: (Norton Identity Safe) - C:\Users\Gilbert\AppData\Local\Google\Chrome\User Data\Default\Extensions\njgpiocdhdmnglomggfjkkonjjfahnom\1.0.0.7_0

    CHR Extension: (Chrome In-App Payments service) - C:\Users\Gilbert\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_1

    CHR HKLM-x32...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx

    CHR HKLM-x32...\Chrome\Extension: [ieadcoanfjloocmfafkebdnfefmohngj] - C:\Program Files (x86)\BonanzaDeals\BonanzaDeals.crx

    CHR HKLM-x32...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Internet Security\Engine\21.0.2.1\Exts\Chrome.crx

    CHR StartMenuInternet: Google Chrome - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe http://www.qvo6.com/?utm\_source=b&utm\_medium=cor&utm\_campaign=eXQ&utm\_content=sc&from=cor&uid=ST1000LM024XHN-M101MBB\_S2SWJ9ACC02095&ts=1381063634

    ==================== Services (Whitelisted) =================

    R2 BingDesktopUpdate; C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe [173192 2013-06-20] (Microsoft Corp.)

    R2 CanalPlus.VOD; C:\Program Files (x86)\Canal+\CANAL+ CANALSAT A LA DEMANDE\VOD\CanalPlus.VOD.exe [188416 2010-07-06] (Canal+ Active)

    R2 Dedicarz Service; C:\Program Files (x86)\Orange\Assistance Livebox\dedicarz\DedicarzService.exe [1966960 2013-06-10] ()

    R2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [240736 2013-09-06] (WildTangent)

    R2 HPConnectedRemote; C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe [35744 2012-10-12] (Hewlett-Packard)

    R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128896 2012-07-18] (Intel Corporation)

    R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Compone

    Cette réponse a-t-elle été utile ?

    0 commentaires
  3. Supprimé

    Cette réponse a été supprimée en raison d’une violation de notre Code de conduite. La réponse a été signalée manuellement ou identifiée via la détection automatisée avant que l’action ne soit entreprise. Pour obtenir plus d’informations, veuillez consulter notre Code de conduite.

    Les commentaires ont été désactivés. En savoir plus

  4. Supprimé

    Cette réponse a été supprimée en raison d’une violation de notre Code de conduite. La réponse a été signalée manuellement ou identifiée via la détection automatisée avant que l’action ne soit entreprise. Pour obtenir plus d’informations, veuillez consulter notre Code de conduite.

    Les commentaires ont été désactivés. En savoir plus

  5. Anonyme
    2013-10-07T10:09:35+00:00

    RogueKiller en Mode : Suppression (fait ce jour, 7 septembre 2013)

    RogueKiller V8.7.1 [Oct  3 2013] par Tigzy

    mail : tigzyRK<at>gmail<dot>com

    Remontees : http://www.adlice.com/forum/

    Site Web : http://www.sur-la-toile.com/RogueKiller/

    Blog : http://tigzyrk.blogspot.com/

    Systeme d'exploitation : Windows 8 (6.2.9200 ) 64 bits version

    Demarrage : Mode normal

    Utilisateur : GILBERT [Droits d'admin]

    Mode : Suppression -- Date : 10/07/2013 12:06:26

    | ARK || FAK || MBR |

    ¤¤¤ Processus malicieux : 0 ¤¤¤

    ¤¤¤ Entrees de registre : 0 ¤¤¤

    ¤¤¤ Tâches planifiées : 0 ¤¤¤

    ¤¤¤ Entrées Startup : 0 ¤¤¤

    ¤¤¤ Navigateurs web : 0 ¤¤¤

    ¤¤¤ Fichiers / Dossiers particuliers: ¤¤¤

    ¤¤¤ Driver : [NON CHARGE 0x0] ¤¤¤

    ¤¤¤ Ruches Externes: ¤¤¤

    ¤¤¤ Infection :  ¤¤¤

    ¤¤¤ Fichier HOSTS: ¤¤¤

    --> %SystemRoot%\System32\drivers\etc\hosts

    ¤¤¤ MBR Verif: ¤¤¤

    +++++ PhysicalDrive0: (\.\PHYSICALDRIVE0 @ IDE) (Lecteurs de disque standard) - ST1000LM024 HN-M101MBB +++++

    --- User ---

    [MBR] 4f77d755a3226eb38fedc2097b1ec21e

    [BSP] dcfc2463fef286593738d7f381cd2d61 : Empty MBR Code

    Partition table:

    0 - [XXXXXX] UNKNOWN (0x00) [VISIBLE] Offset (sectors): 1 | Size: 953869 Mo

    User = LL1 ... OK!

    User = LL2 ... OK!

    Termine : << RKreport[0]_D_10072013_120626.txt >>

    RKreport[0]_D_10062013_213140.txt;RKreport[0]_S_10062013_212237.txt;RKreport[0]_S_10072013_120623.txt

    Cette réponse a-t-elle été utile ?

    0 commentaires