Publicité

Commentaire : O23 - Service: Kyubey (Kyubey) . (...) - C:\Users\ADMIN\AppData\Roaming\Kyubey\Kyubey.exe =>Adware.CrossRider O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) . (.Hewlett-Packard Company - LightScribe Service.) - C:\Program Files\Common Files\LightScribe\LSSrvc.exe =>.Hewlett-Packard Company O23 - Service: Norton Online Backup (NOBU) . (.Symantec Corporation - Norton Online Backup Service.) - C:\Program Files\Symantec\Norton Online Backup\NOBuAgent.exe =>.Symantec Corporation® O23 - Service: PDF Document Manager (pdfcDispatcher) . (.PDF Complete Inc - Dispatcher.) - C:\Program Files\PDF Complete\pdfsvc.exe =>.PDF Complete® O23 - Service: Pladitiondojers (Pladitiondojers) . (...) - C:\Program Files\Atabickcherjertain\DugoyckiratCmm.dll (.not file.) O23 - Service: Protexis Licensing V2 (PSI_SVC_2) . (.Protexis Inc. - PsiService PsiService.) - c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe =>.Protexis Inc.® O23 - Service: QQLiveService (QQLiveService) . (...) - C:\Program Files\Tencent\QQLive\9.19.1944.0\LiveService.dll (.not file.) =>.SUP.Tencent O23 - Service: Quoteex (Quoteex) . (...) - C:\ProgramData\Quoteex\Quoteex.exe =>PUP.Optional.Salus O23 - Service: RunBooster Service (RunBooster) . (.SkyNET Corporation - RunBooster Service.) - C:\Program Files\RunBooster\RunBoosterService.exe =>Adware.Razy O23 - Service: SANARE (SANARE) . (.InterSect Alliance Pty Ltd - SANARE Service.) - C:\Users\ADMIN\AppData\Local\SANARE\Snare.dll =>.SUP.InterSectAlliance O23 - Service: Search Module Update (SMUpd) . (...) - C:\Program Files\Common Files\Noobzo\GNUpdate\smu.exe (.not file.) =>Adware.YTDownloader O23 - Service: snare (snare) . (.IntertSect Alliance Pty Ltd - wsrnnae Service.) - C:\Users\ADMIN\AppData\Local\SNARE\Snare.dll =>.SUP.InterSectAlliance O23 - Service: Audio Service (STacSV) . (.IDT, Inc. - IDT PC Audio.) - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_9b219d80a8843bf8\stacsv.exe =>.IDT, Inc. O23 - Service: terana (terana) . (.IntertSect Alliance Pty Ltd - terana Service.) - C:\Users\ADMIN\AppData\Local\terana\terana.dll =>.SUP.InterSectAlliance O23 - Service: VNASRE (VNASRE) . (.InterSect Alliance Pty Ltd - VNASRE Service.) - C:\Users\ADMIN\AppData\Local\VNASRE\Snare.dll =>.SUP.InterSectAlliance O23 - Service: Windows Applications Services (WinAppSvr) . (.TODO: <Company name> - TODO: <File description>.) - C:\ProgramData\Microsoft\AppV\setup\install.dll O23 - Service: (WinSAPSvc) . (...) - C:\Users\ADMIN\AppData\Roaming\WinSAPSvc\winSAP.dll =>PUP.Optional.Youndoo O23 - Service: WinSnare (WinSnare) . (.InterSect Alliance Pty Ltd - WINSNARE Service.) - C:\Users\ADMIN\AppData\Roaming\WinSnare\WinSnare.dll =>.SUP.WinSnare ---\\ Services non Microsoft (SR=Démarré,SS=Stoppé) (50) - 135s SR - Auto [03/03/2009] [ 81920] Andrea ST Filters Service (AESTFilters) . (.Andrea Electronics Corporation.) - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_9b219d80a8843bf8\AEstSrv.exe =>.Andrea Electronics Corporation SR - Auto [02/11/2009] [ 14336] Agere Modem Call Progress Audio (AgereModemAudio) . (.LSI Corporation.) - C:\Program Files\LSI SoftModem\agrsmsvc.exe =>.LSI Corporation SR - Auto [14/02/2017] [ 384000] Apple ConfigSetter Service (APPLE_svr) . (...) - C:\ProgramData\Apple Computer\Installer Cache\setup.dll SR - Auto [10/02/2017] [ 760320] (Archer) . (...) - C:\Program Files\WinArcher\Archer.dll =>PUP.Optional.Youndoo SR - Auto [13/10/2011] [ 352976] Kaspersky Anti-Virus Service (AVP) . (.Kaspersky Lab ZAO.) - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe =>.Kaspersky Lab® SR - Auto [21/09/2016] [ 3786752] Background Logic Handler (backlh) . (.Copyright © 2016.) - C:\ProgramData\Logic Handler\set.exe =>PUP.Optional.LogicHandler SR - Auto [24/05/2017] [ 1811968] (BIT) . (.TODO: <公司名>.) - C:\ProgramData\BIT\BIT.dll =>.SUP.Elex SR - Demand [29/06/2010] [ 3537672] Bluetooth Device Manager (Bluetooth Device Manager) . (.Motorola, Inc..) - C:\Program Files\Motorola\Bluetooth\devmgrsrv.exe =>.Motorola Inc® SS - Demand [20/05/2010] [ 824584] Bluetooth Media Service (Bluetooth Media Service) . (.Motorola, Inc..) - C:\Program Files\Motorola\Bluetooth\audiosrv.exe =>.Motorola Inc® SR - Auto [20/05/2010] [ 512776] Bluetooth OBEX Service (Bluetooth OBEX Service) . (.Motorola, Inc..) - C:\Program Files\Motorola\Bluetooth\obexsrv.exe =>.Motorola Inc® SR - Auto [21/09/2016] [ 2270208] CloudPrinter (CloudPrinter) . (...) - C:\ProgramData\CloudPrinter\CloudPrinter.exe =>PUP.Optional.Youndoo SR - Auto [22/05/2017] [ 658432] CSHMDR (CSHMDR) . (.IntertSect Alliance Pty Ltd.) - C:\Users\ADMIN\AppData\Local\CSHMDR\Snare.dll =>.SUP.Elex SR - Auto [17/05/2017] [ 652800] CWASRE (CWASRE) . (.IntertSect Alliance Pty Ltd.) - C:\Users\ADMIN\AppData\Local\CWASRE\Snare.dll =>.SUP.InterSectAlliance SR - Auto [16/11/2016] [ 237568] ed2k idle service (ed2kidle) . (.http://www.amule.org/.) - C:\Program Files\amuleC1\ed2k.exe =>Adware.aMULEcustom SR - Auto [14/05/2017] [ 101016] Update Service(FirefoxU) (FirefoxU) . (.Copyright (C) 2017.) - C:\Program Files\Firefox\bin\FirefoxUpdate.exe =>Adware.Mutabaha =>Adware.Mutabaha SR - Demand [27/01/2011] [ 647680] FLEXnet Licensing Service (FLEXnet Licensing Service) . (.Macrovision Europe Ltd..) - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe =>.Macrovision Europe Ltd. SR - Auto [12/02/2017] [ 1620992] GoogleChromeUpService (GoogleChromeUpService) . (.Copyright (C) 2015.) - C:\ProgramData\service.exe =>Trojan.Zusy SR - Auto [19/01/2017] [ 124416] (GubedZL) . (...) - C:\Program Files\Gubed\GubedZL.dll =>.SUP.Elex.GubZL SR - Auto [09/02/2017] [ 122880] (GubZL) . (...) - C:\Program Files\Gub\GubZL.dll =>.SUP.Elex.GubZL SR - Auto [01/07/2010] [ 121344] HP Health Check Service (HP Health Check Service) . (.Hewlett-Packard Company.) - C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe =>.Hewlett-Packard Company SR - Auto [13/07/2010] [ 92216] HP Quick Synchronization Service (HPDrvMntSvc.exe) . (.Hewlett-Packard Company.) - C:\Program Files\Hewlett-Packard\Shared\HPDrvMntSvc.exe =>.Hewlett-Packard Company® SR - Auto [01/03/2010] [ 264248] HP Hotkey Monitor (hpHotkeyMonitor) . (.Hewlett-Packard Company.) - C:\Program Files\Hewlett-Packard\HP HotKey Support\hpHotkeyMonitor.exe =>.Hewlett-Packard Company® SR - Demand [13/07/2010] [ 698424] HP Software Framework Service (hpqwmiex) . (.Hewlett-Packard Company.) - C:\Program Files\Hewlett-Packard\Shared\hpqWmiEx.exe =>.Hewlett-Packard Company® SR - Auto [04/03/2010] [ 13336] Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) . (.Intel Corporation.) - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe =>.Intel Corporation® SS - Demand [04/04/2005] [ 69632] InstallDriver Table Manager (IDriverT) . (.Macrovision Corporation.) - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe =>.Macrovision Corporation SR - Auto [09/10/2016] [ 159232] InterHop (InterHop) . (...) - C:\Program Files\InterHop\InterHop.exe =>PUP.Optional.Salus SR - Auto [19/08/2016] [ 131024] YAC Service (iSafeService) . (.Elex do Brasil Participações Ltda.) - C:\Program Files\Elex-tech\YAC\iSafeSvc.exe =>.SUP.Elex SR - Demand [09/12/2016] [ 567808] iThemes5 (iThemes5) . (...) - C:\Program Files\Common Files\Services\iThemes.dll =>Adware.Mikey SR - Auto [05/01/2007] [ 112152] IviRegMgr (IviRegMgr) . (.InterVideo.) - C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe =>.Intervideo, Inc.® SR - Auto [26/09/2008] [ 188416] JumpStart Push-Button Service (jswpbapi) . (.Atheros Communications, Inc..) - C:\Program Files\Jumpstart\jswpbapi.exe =>.Atheros Communications, Inc. SS - Demand [26/09/2008] [ 954368] JumpStart Wi-Fi Protected Setup (jswpsapi) . (.Atheros Communications, Inc..) - C:\Program Files\Jumpstart\jswpsapi.exe =>.Atheros Communications, Inc. SR - Auto [04/05/2017] [ 124928] (Kitty) . (.kitty.) - C:\Users\ADMIN\AppData\Local\Kitty\Kitty.dll =>.SUP.Elex SR - Auto [10/03/2017] [ 113152] Kyubey (Kyubey) . (...) - C:\Users\ADMIN\AppData\Roaming\Kyubey\Kyubey.exe =>Adware.CrossRider SR - Auto [22/01/2010] [ 73728] LightScribeService Direct Disc Labeling Service (LightScribeService) . (.Hewlett-Packard Company.) - C:\Program Files\Common Files\LightScribe\LSSrvc.exe =>.Hewlett-Packard Company SR - Auto [03/05/2010] [ 2044248] Norton Online Backup (NOBU) . (.Symantec Corporation.) - C:\Program Files\Symantec\Norton Online Backup\NOBuAgent.exe =>.Symantec Corporation® SR - Auto [12/01/2010] [ 635416] PDF Document Manager (pdfcDispatcher) . (.PDF Complete Inc.) - C:\Program Files\PDF Complete\pdfsvc.exe =>.PDF Complete® SR - Auto [24/07/2007] [ 185632] Protexis Licensing V2 (PSI_SVC_2) . (.Protexis Inc..) - c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe =>.Protexis Inc.® SR - Auto [21/09/2016] [ 2270208] Quoteex (Quoteex) . (...) - C:\ProgramData\Quoteex\Quoteex.exe =>PUP.Optional.Salus SS - Auto [12/10/2016] [ 233984] RunBooster Service (RunBooster) . (.SkyNET Corporation.) - C:\Program Files\RunBooster\RunBoosterService.exe =>Adware.Razy SR - Auto [04/05/2017] [ 671232] SANARE (SANARE) . (.InterSect Alliance Pty Ltd.) - C:\Users\ADMIN\AppData\Local\SANARE\Snare.dll =>.SUP.InterSectAlliance SS - Demand [23/09/2008] [ 575488] ServiceLayer (ServiceLayer) . (.Nokia..) - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe =>.Nokia. SR - Auto [24/05/2017] [ 804352] snare (snare) . (.IntertSect Alliance Pty Ltd.) - C:\Users\ADMIN\AppData\Local\SNARE\Snare.dll =>.SUP.InterSectAlliance SR - Auto [29/01/2010] [ 229458] Audio Service (STacSV) . (.IDT, Inc..) - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_9b219d80a8843bf8\stacsv.exe =>.IDT, Inc. SS - Demand [16/10/2009] [ 74392] stllssvr (stllssvr) . (.MicroVision Development, Inc..) - c:\Program Files\Common Files\SureThing Shared\stllssvr.exe =>.MicroVision Development Inc.® SS - Auto [31/05/2017] [ 665600] terana (terana) . (.IntertSect Alliance Pty Ltd.) - C:\Users\ADMIN\AppData\Local\terana\terana.dll =>.SUP.InterSectAlliance SR - Auto [10/05/2017] [ 670208] VNASRE (VNASRE) . (.InterSect Alliance Pty Ltd.) - C:\Users\ADMIN\AppData\Local\VNASRE\Snare.dll =>.SUP.InterSectAlliance SR - Auto [15/05/2017] [ 104448] Windows Applications Services (WinAppSvr) . (.TODO: <Company name>.) - C:\ProgramData\Microsoft\AppV\setup\install.dll SR - Auto [31/05/2017] [ 1886720] (WinSAPSvc) . (...) - C:\Users\ADMIN\AppData\Roaming\WinSAPSvc\winSAP.dll =>PUP.Optional.Youndoo SR - Auto [10/03/2017] [ 647168] WinSnare (WinSnare) . (.InterSect Alliance Pty Ltd.) - C:\Users\ADMIN\AppData\Roaming\WinSnare\WinSnare.dll =>.SUP.WinSnare SS - Demand [08/07/2015] [ 339968] Wondershare Application Framework Service (WsAppService) . (.Wondershare.) - C:\Program Files\Wondershare\WAF\WsAppService.exe =>.Wondershare ---\\ Tâches planifiées en automatique (Registre) (9) - 7s O38 - TASK: {05BE99E1-BAC0-4614-8E24-4FFF28124610}[\Hewlett-Packard\HP Support Assistant\PC Health Analysis] - (.Hewlett-Packard Company - HP Support Assistant.) -- C:\Program Files\Hewlett-Packard\HP Support Framework\HPSF.exe [1287224] =>.Hewlett-Packard Company® O38 - TASK: {44A37592-3E65-436F-AAE0-018E5A43421F}[\Coobeck Monitor] - (.Copyright (C) 2016 - Yanan Update Cache Application.) -- C:\Program Files\Lurukkertdom\yaupdcache.exe [419072] =>.Zhuhai Kingsoft Office Software Co.,Ltd® O38 - TASK: {4EB67715-2A20-4B23-8795-54CD2996D3A3}[\Microsoft\Windows\DeviceSettings\Sertsasward] - (...) -- msiexec [0] O38 - TASK: {53B82AFE-3079-439F-B731-66041F711910}[\Microsoft\Windows\Multimedia\Manager] - (...) -- C:\Users\ADMIN\AppData\Roaming\Adobe\Manager.exe [72192] =>PUP.Optional.Graftor O38 - TASK: {541AFCCD-9B05-41B1-9AC6-C7D7D0E37666}[\Hewlett-Packard\HP Support Assistant\PC Tuneup] - (.Hewlett-Packard Company - HP Support Assistant.) -- C:\Program Files\Hewlett-Packard\HP Support Framework\HPSF.exe [1287224] =>.Hewlett-Packard Company® O38 - TASK: {9707A382-DAFD-4C1F-A9A4-473110B3CA4A}[\Milimili] - (...) -- C:\Program Files\MIO\MIO.exe [282168] =>.SUP.Tencent O38 - TASK: {E45F840B-BA95-488B-AA6A-D61FFAC1A856}[\hostTask] - (.Copyright © 2017 - pingi.) -- C:\ProgramData\CloudPrinter\bush.exe [13824] =>.SUP.Linkury O38 - TASK: {EFE84C44-38E7-446A-A09B-005783963AFE}[\Hewlett-Packard\HP Support Assistant\HP Total Care Tune-Up] - (.Hewlett-Packard Company - HPTuneUp.) -- C:\Program Files\Hewlett-Packard\HP Support Framework\HPTuneUp.exe [18488] =>.Hewlett-Packard Company® O38 - TASK: {F038E13C-7569-4521-9FDF-60C984CD4299}[\RunBoosterUpdateTask] - (.SkyNET Corporation - RunBooster Update Task.) -- C:\Program Files\RunBooster\RunBoosterUpdateTask.exe [324096] =>Adware.Razy ---\\ Applications lancées au démarrage du système (42) - 4s O4 - HKLM\..\Run: [AVP] . (.Kaspersky Lab ZAO - Kaspersky Anti-Virus.) -- C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe =>.Kaspersky Lab® O4 - HKLM\..\Run: [IconRunner] . (...) -- C:\Program Files\IconRunner\MoneyBot.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe =>.Oracle America, Inc.® O4 - HKLM\..\Run: [Adobe] . (...) -- C:\Program Files\Java\Adobe Acrobat Update Service.exe =>Trojan.Dropper O4 - HKLM\..\Run: [jswtrayutil] . (.Atheros Communications, Inc. - Tray Utility for JumpStart for Wireless.) -- C:\Program Files\Jumpstart\jswtrayutil.exe =>.Atheros Communications, Inc. O4 - HKLM\..\RunOnce: [OMEWPRODUCT_A5CHV] . (.H7PSY - H7.) -- C:\Program Files\BestZiper\Q2BSTX116TVP8DN.exe O4 - HKCU\..\Run: [akiy3rktage] . (.Copyright © 2017 - Online Manager Generator.) -- C:\Users\ADMIN\AppData\Roaming\no1hges45fx\quaqdz0tbei.exe =>Adware.Wizzcaster O4 - HKCU\..\Run: [4CY9PRER9U4NYJA] . (.C0QQ - C.) -- C:\Program Files\4D2T6ZBM9A\4D2T6ZBM9.exe =>Adware.Wizzcaster O4 - HKCU\..\Run: [5nqoqc00mdv] . (.Copyright © 2017 - Online Manager Generator.) -- C:\Users\ADMIN\AppData\Roaming\x4cfysutpoa\1rzopb23lmi.exe =>Adware.Wizzcaster O4 - HKCU\..\Run: [0tbosic0k4z] . (.Copyright © 2017 - Online Manager Generator.) -- C:\Users\ADMIN\AppData\Roaming\fr5vzvy15gj\nrsshx1be2l.exe =>Adware.Wizzcaster O4 - HKCU\..\Run: [C4MHXKKQ08U4X4J] . (.C0QQ - C.) -- C:\Program Files\X4ZWKAZHMO\SIH3CEP0G.exe =>Adware.Wizzcaster O4 - HKCU\..\Run: [L092BNHBG3TG5YW] . (.C0QQ - C.) -- C:\Program Files\JP8K1GAETM\JP8K1GAET.exe =>Adware.Wizzcaster O4 - HKCU\..\Run: [yuzkx2rhgqd] . (.Copyright © 2017 - Online Manager Generator.) -- C:\Users\ADMIN\AppData\Roaming\cc0q3zgjx3t\plo421cwcxe.exe =>Adware.Wizzcaster O4 - HKCU\..\Run: [0gwdygj3u0h] . (.Copyright © 2017 - Online Manager Generator.) -- C:\Users\ADMIN\AppData\Roaming\qxjmic2cuxd\hqfsvhoiyty.exe =>Adware.Wizzcaster O4 - HKCU\..\Run: [VDMH2FVDHCU74L8] . (.3% - 3%QHZIUI.) -- C:\Program Files\B9V16IZCKZ\B9V16IZCK.exe =>Adware.Wizzcaster O4 - HKCU\..\Run: [I1P4WKS9JNVSZVA] . (.3% - 3%QHZIUI.) -- C:\Program Files\VEQ0JNR8HT\VEQ0JNR8H.exe =>Adware.Wizzcaster O4 - HKCU\..\Run: [kco3wd1zdlh] . (.Copyright © 2017 - Online Manager Generator.) -- C:\Users\ADMIN\AppData\Roaming\r2msejhuhpz\g2ti2p2okdy.exe =>Adware.Wizzcaster O4 - HKCU\..\Run: [SV2F7APT0I0TP0Y] . (.3% - 3%QHZIUI.) -- C:\Program Files\WD4GA0RFMP\WD4GA0RFM.exe =>Adware.Wizzcaster O4 - HKCU\..\Run: [fgegbj1nsow] . (.Copyright © 2017 - Online Manager Generator.) -- C:\Users\ADMIN\AppData\Roaming\10lz1hp1pwl\lm4ke4cxtoq.exe =>Adware.Wizzcaster O4 - HKCU\..\Run: [BXFS022V3LAQDIA] . (.3% - 3%QHZIUI.) -- C:\Program Files\BB691C5YMZ\5PNGSGVHH.exe =>Adware.Wizzcaster O4 - HKCU\..\Run: [gepmcshbcvp] . (.Copyright © 2017 - Online Manager Generator.) -- C:\Users\ADMIN\AppData\Roaming\ty0mv04sn4g\xrk4xdzkcru.exe =>Adware.Wizzcaster O4 - HKCU\..\Run: [gvu1l1upnjk] . (.Copyright © 2017 - Driver Foundation Game services.) -- C:\Users\ADMIN\AppData\Roaming\t2ovkuyk15f\dm2mzlf1jxj.exe =>Adware.Wizzcaster O4 - HKCU\..\Run: [crypted2] . (...) -- C:\Users\ADMIN\AppData\Local\Temp\crypted2.vbs O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-21-2178984749-2682313955-999715602-1000\..\Run: [akiy3rktage] . (.Copyright © 2017 - Online Manager Generator.) -- C:\Users\ADMIN\AppData\Roaming\no1hges45fx\quaqdz0tbei.exe =>Adware.Wizzcaster O4 - HKUS\S-1-5-21-2178984749-2682313955-999715602-1000\..\Run: [4CY9PRER9U4NYJA] . (.C0QQ - C.) -- C:\Program Files\4D2T6ZBM9A\4D2T6ZBM9.exe =>Adware.Wizzcaster O4 - HKUS\S-1-5-21-2178984749-2682313955-999715602-1000\..\Run: [5nqoqc00mdv] . (.Copyright © 2017 - Online Manager Generator.) -- C:\Users\ADMIN\AppData\Roaming\x4cfysutpoa\1rzopb23lmi.exe =>Adware.Wizzcaster O4 - HKUS\S-1-5-21-2178984749-2682313955-999715602-1000\..\Run: [0tbosic0k4z] . (.Copyright © 2017 - Online Manager Generator.) -- C:\Users\ADMIN\AppData\Roaming\fr5vzvy15gj\nrsshx1be2l.exe =>Adware.Wizzcaster O4 - HKUS\S-1-5-21-2178984749-2682313955-999715602-1000\..\Run: [C4MHXKKQ08U4X4J] . (.C0QQ - C.) -- C:\Program Files\X4ZWKAZHMO\SIH3CEP0G.exe =>Adware.Wizzcaster O4 - HKUS\S-1-5-21-2178984749-2682313955-999715602-1000\..\Run: [L092BNHBG3TG5YW] . (.C0QQ - C.) -- C:\Program Files\JP8K1GAETM\JP8K1GAET.exe =>Adware.Wizzcaster O4 - HKUS\S-1-5-21-2178984749-2682313955-999715602-1000\..\Run: [yuzkx2rhgqd] . (.Copyright © 2017 - Online Manager Generator.) -- C:\Users\ADMIN\AppData\Roaming\cc0q3zgjx3t\plo421cwcxe.exe =>Adware.Wizzcaster O4 - HKUS\S-1-5-21-2178984749-2682313955-999715602-1000\..\Run: [0gwdygj3u0h] . (.Copyright © 2017 - Online Manager Generator.) -- C:\Users\ADMIN\AppData\Roaming\qxjmic2cuxd\hqfsvhoiyty.exe =>Adware.Wizzcaster O4 - HKUS\S-1-5-21-2178984749-2682313955-999715602-1000\..\Run: [VDMH2FVDHCU74L8] . (.3% - 3%QHZIUI.) -- C:\Program Files\B9V16IZCKZ\B9V16IZCK.exe =>Adware.Wizzcaster O4 - HKUS\S-1-5-21-2178984749-2682313955-999715602-1000\..\Run: [I1P4WKS9JNVSZVA] . (.3% - 3%QHZIUI.) -- C:\Program Files\VEQ0JNR8HT\VEQ0JNR8H.exe =>Adware.Wizzcaster O4 - HKUS\S-1-5-21-2178984749-2682313955-999715602-1000\..\Run: [kco3wd1zdlh] . (.Copyright © 2017 - Online Manager Generator.) -- C:\Users\ADMIN\AppData\Roaming\r2msejhuhpz\g2ti2p2okdy.exe =>Adware.Wizzcaster O4 - HKUS\S-1-5-21-2178984749-2682313955-999715602-1000\..\Run: [SV2F7APT0I0TP0Y] . (.3% - 3%QHZIUI.) -- C:\Program Files\WD4GA0RFMP\WD4GA0RFM.exe =>Adware.Wizzcaster O4 - HKUS\S-1-5-21-2178984749-2682313955-999715602-1000\..\Run: [fgegbj1nsow] . (.Copyright © 2017 - Online Manager Generator.) -- C:\Users\ADMIN\AppData\Roaming\10lz1hp1pwl\lm4ke4cxtoq.exe =>Adware.Wizzcaster O4 - HKUS\S-1-5-21-2178984749-2682313955-999715602-1000\..\Run: [BXFS022V3LAQDIA] . (.3% - 3%QHZIUI.) -- C:\Program Files\BB691C5YMZ\5PNGSGVHH.exe =>Adware.Wizzcaster O4 - HKUS\S-1-5-21-2178984749-2682313955-999715602-1000\..\Run: [gepmcshbcvp] . (.Copyright © 2017 - Online Manager Generator.) -- C:\Users\ADMIN\AppData\Roaming\ty0mv04sn4g\xrk4xdzkcru.exe =>Adware.Wizzcaster O4 - HKUS\S-1-5-21-2178984749-2682313955-999715602-1000\..\Run: [gvu1l1upnjk] . (.Copyright © 2017 - Driver Foundation Game services.) -- C:\Users\ADMIN\AppData\Roaming\t2ovkuyk15f\dm2mzlf1jxj.exe =>Adware.Wizzcaster O4 - HKUS\S-1-5-21-2178984749-2682313955-999715602-1000\..\Run: [crypted2] . (...) -- C:\Users\ADMIN\AppData\Local\Temp\crypted2.vbs ---\\ Processus lancés (69) - 10s [MD5.A538AB8CC647D3C67C628805083FBFF8] - (.Elex do Brasil Participações Ltda - iSafeSvc.) -- C:\Program Files\Elex-tech\YAC\iSafeSvc.exe [131024] [PID.996] =>.SUP.Elex [MD5.EBA35D35628CEB8ACAA2302F9698A8D0] - (.Elex do Brasil Participações Ltda - iSafeSvc2.) -- C:\Program Files\Elex-tech\YAC\iSafeSvc2.exe [131024] [PID.1104] =>.SUP.Elex [MD5.9C1EA4217DC30E085F8418474DCC3616] - (.IDT, Inc. - IDT PC Audio.) -- C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_9b219d80a8843bf8\stacsv.exe [229458] [PID.1252] =>.IDT, Inc. [MD5.A7FE57706A69FF23C0B7115B5AF19B91] - (.Microsoft Corporation. All rights reserved. - Internet Explorer assistant tool.) -- C:\Program Files\Explorer\iedvutils.exe [64184] [PID.1748] {3B6536249C7E938DA013110B8048B326} [MD5.827DBC22C96EECF6D36A13162FABAFD3] - (.Andrea Electronics Corporation - Andrea filters APO access service (32-bit).) -- C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_9b219d80a8843bf8\AEstSrv.exe [81920] [PID.1992] =>.Andrea Electronics Corporation [MD5.6416F9B6B220F0A890525C38235AFAD7] - (.LSI Corporation - LSI Soft Modem Call Progress Service.) -- C:\Program Files\LSI SoftModem\agrsmsvc.exe [14336] [PID.2020] =>.LSI Corporation [MD5.946D70667B0119F2BEEAE0849E1D46A2] - (.Kaspersky Lab ZAO - Kaspersky Anti-Virus.) -- C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe [352976] [PID.396] =>.Kaspersky Lab® [MD5.6685B138C5A52B773E62C59B9E3EFF2B] - (.Copyright © 2016 - ExtManager.) -- C:\ProgramData\Logic Handler\set.exe [3786752] [PID.404] =>PUP.Optional.LogicHandler [MD5.FAF2AAAC84D952B3077D13220A0606A5] - (.Motorola, Inc. - Bluetooth Device Manager.) -- C:\Program Files\Motorola\Bluetooth\devmgrsrv.exe [3537672] [PID.1392] =>.Motorola Inc® [MD5.17B1CE6D277B5AAC6DA701066F358581] - (...) -- C:\ProgramData\CloudPrinter\CloudPrinter.exe [2270208] [PID.1616] =>PUP.Optional.Youndoo [MD5.0086A85A262967A22EE34DB85C9FFAC0] - (.Copyright (C) 2015 - .) -- C:\ProgramData\service.exe [1620992] [PID.2380] =>Trojan.Zusy [MD5.C7A62D20DC8E7790BA2E788F88377AE4] - (.Hewlett-Packard Company - HP Quick Synchronization Service.) -- C:\Program Files\Hewlett-Packard\Shared\HPDrvMntSvc.exe [92216] [PID.2552] =>.Hewlett-Packard Company® [MD5.4D94F4D7782657E79EB1352570B563DB] - (.Hewlett-Packard Company - hpHotkeyMonitor Service.) -- C:\Program Files\Hewlett-Packard\HP HotKey Support\hpHotkeyMonitor.exe [264248] [PID.2600] =>.Hewlett-Packard Company® [MD5.41B6C3A0388A7A3F2791291A861E8D0C] - (.Elex do Brasil Participações Ltda - YACTray.) -- C:\Program Files\Elex-tech\YAC\iSafeTray.exe [427000] [PID.2920] =>.SUP.Elex [MD5.946D70667B0119F2BEEAE0849E1D46A2] - (.Kaspersky Lab ZAO - Kaspersky Anti-Virus.) -- C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe [352976] [PID.2960] =>.Kaspersky Lab® [MD5.A443A7C05ABF0FCD16E89593F63B633B] - (.Oracle Corporation - Java Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe [587288] [PID.3008] =>.Oracle America, Inc.® [MD5.A3F2784F191A2AB08209E32C9C8A92CC] - (...) -- C:\Program Files\InterHop\InterHop.exe [159232] [PID.3036] =>Adware.CornerSunshine [MD5.D217EEB3CDC793C9F377AD02AB85B997] - (.Copyright © 2017 - Online Manager Generator.) -- C:\Users\ADMIN\AppData\Roaming\no1hges45fx\quaqdz0tbei.exe [7680] [PID.3044] =>Adware.Wizzcaster [MD5.ABC76DAE74171615D91F34B0685F3C04] - (.C0QQ - C.) -- C:\Program Files\4D2T6ZBM9A\4D2T6ZBM9.exe [1473024] [PID.3120] =>Adware.Wizzcaster [MD5.D217EEB3CDC793C9F377AD02AB85B997] - (.Copyright © 2017 - Online Manager Generator.) -- C:\Users\ADMIN\AppData\Roaming\x4cfysutpoa\1rzopb23lmi.exe [7680] [PID.3368] =>Adware.Wizzcaster [MD5.D217EEB3CDC793C9F377AD02AB85B997] - (.Copyright © 2017 - Online Manager Generator.) -- C:\Users\ADMIN\AppData\Roaming\fr5vzvy15gj\nrsshx1be2l.exe [7680] [PID.3384] =>Adware.Wizzcaster [MD5.ABC76DAE74171615D91F34B0685F3C04] - (.C0QQ - C.) -- C:\Program Files\X4ZWKAZHMO\SIH3CEP0G.exe [1473024] [PID.3404] =>Adware.Wizzcaster [MD5.213822072085B5BBAD9AF30AB577D817] - (.InterVideo - RegMgr Module.) -- C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe [112152] [PID.3460] =>.Intervideo, Inc.® [MD5.ABC76DAE74171615D91F34B0685F3C04] - (.C0QQ - C.) -- C:\Program Files\JP8K1GAETM\JP8K1GAET.exe [1473024] [PID.3492] =>Adware.Wizzcaster [MD5.670D6F56BA218AE78CD526AFCC530E2A] - (.Atheros Communications, Inc. - JumpStart PushButton Service.) -- C:\Program Files\Jumpstart\jswpbapi.exe [188416] [PID.3508] =>.Atheros Communications, Inc. [MD5.F53F3C4F028CB6906DFF79E558B367D1] - (...) -- C:\Users\ADMIN\AppData\Roaming\Kyubey\Kyubey.exe [113152] [PID.3580] =>Adware.CrossRider [MD5.3503F257B3203F824B1567238EBE17E2] - (.Hewlett-Packard Company - LightScribe Service.) -- C:\Program Files\Common Files\LightScribe\LSSrvc.exe [73728] [PID.3620] =>.Hewlett-Packard Company [MD5.50DC8C578CEAE704B0A18427099836B9] - (.Symantec Corporation - Norton Online Backup Service.) -- C:\Program Files\Symantec\Norton Online Backup\NOBuAgent.exe [2044248] [PID.3664] =>.Symantec Corporation® [MD5.D217EEB3CDC793C9F377AD02AB85B997] - (.Copyright © 2017 - Online Manager Generator.) -- C:\Users\ADMIN\AppData\Roaming\cc0q3zgjx3t\plo421cwcxe.exe [7680] [PID.3708] =>Adware.Wizzcaster [MD5.D217EEB3CDC793C9F377AD02AB85B997] - (.Copyright © 2017 - Online Manager Generator.) -- C:\Users\ADMIN\AppData\Roaming\qxjmic2cuxd\hqfsvhoiyty.exe [7680] [PID.3724] =>Adware.Wizzcaster [MD5.22C9ABB237299505D5B7056539238033] - (.3% - 3%QHZIUI.) -- C:\Program Files\B9V16IZCKZ\B9V16IZCK.exe [1236992] [PID.3740] =>Adware.Wizzcaster [MD5.885A246D436D8040584A23F7C7F36347] - (.PDF Complete Inc - Dispatcher.) -- C:\Program Files\PDF Complete\pdfsvc.exe [635416] [PID.3936] =>.PDF Complete® [MD5.22C9ABB237299505D5B7056539238033] - (.3% - 3%QHZIUI.) -- C:\Program Files\VEQ0JNR8HT\VEQ0JNR8H.exe [1236992] [PID.4028] =>Adware.Wizzcaster [MD5.A6A7AD767BF5141665F5C675F671B3E1] - (.Protexis Inc. - PsiService PsiService.) -- c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe [185632] [PID.2056] =>.Protexis Inc.® [MD5.17B1CE6D277B5AAC6DA701066F358581] - (...) -- C:\ProgramData\Quoteex\Quoteex.exe [2270208] [PID.2684] =>PUP.Optional.Salus [MD5.D217EEB3CDC793C9F377AD02AB85B997] - (.Copyright © 2017 - Online Manager Generator.) -- C:\Users\ADMIN\AppData\Roaming\r2msejhuhpz\g2ti2p2okdy.exe [7680] [PID.2900] =>Adware.Wizzcaster [MD5.22C9ABB237299505D5B7056539238033] - (.3% - 3%QHZIUI.) -- C:\Program Files\WD4GA0RFMP\WD4GA0RFM.exe [1236992] [PID.2540] =>Adware.Wizzcaster [MD5.D217EEB3CDC793C9F377AD02AB85B997] - (.Copyright © 2017 - Online Manager Generator.) -- C:\Users\ADMIN\AppData\Roaming\10lz1hp1pwl\lm4ke4cxtoq.exe [7680] [PID.2528] =>Adware.Wizzcaster [MD5.22C9ABB237299505D5B7056539238033] - (.3% - 3%QHZIUI.) -- C:\Program Files\BB691C5YMZ\5PNGSGVHH.exe [1236992] [PID.2636] =>Adware.Wizzcaster [MD5.8EDC44228E7CB9171091C65980957C1C] - (.Copyright © 2017 - Driver Foundation Game services.) -- C:\Users\ADMIN\AppData\Roaming\t2ovkuyk15f\dm2mzlf1jxj.exe [7680] [PID.1048] =>Adware.Wizzcaster [MD5.B2206246F4F08B733AF69392638B637C] - (.Intel Corporation - igfxsrvc Module.) -- C:\Windows\System32\igfxsrvc.exe [268312] [PID.4576] =>.Intel Corporation® [MD5.CF4FE062AC1DE9E69C5E0C9783D25445] - (.<epam> - Network system service.) -- C:\Users\ADMIN\AppData\Roaming\VDI\Shared\Product Updater\produpd.exe [547328] [PID.4784] [MD5.55FBB6E578BFB2327BA41B3E526CCE1A] - (.Motorola, Inc. - Bluetooth OBEX Service.) -- C:\Program Files\Motorola\Bluetooth\obexsrv.exe [512776] [PID.5104] =>.Motorola Inc® [MD5.42D95001F08B274532B251132B953FAB] - (.<epam> - Network monitor system service.) -- C:\Users\ADMIN\AppData\Roaming\VDI\Shared\Product Updater\monhost.exe [506880] [PID.5160] [MD5.EDD0C6BF94C33022D43EA2F17469A3E0] - (...) -- C:\Games\Game Alarm\Updater.exe [450560] [PID.5540] [MD5.3D9B36631032FDE0FFEA0DC0260E4E35] - (.Macrovision Europe Ltd. - Activation Licensing Service.) -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [647680] [PID.3912] =>.Macrovision Europe Ltd. [MD5.E91BFC73B5874484886BC7D0E402ECD8] - (.Hewlett-Packard Company - hpqwmiex Module.) -- C:\Program Files\Hewlett-Packard\Shared\hpqWmiEx.exe [698424] [PID.4404] =>.Hewlett-Packard Company® [MD5.96631E9BEAC46A258B5BA2594A220259] - (.http://www.amule.org/ - ED2K Links Handler.) -- C:\Program Files\amuleC1\ed2k.exe [237568] [PID.6544] =>Adware.aMULEcustom [MD5.86377E9241CD1CDD65DAF0954EA3A633] - (.Copyright (C) 2017 - .) -- C:\Program Files\Firefox\bin\FirefoxUpdate.exe [101016] [PID.7088] =>Adware.Mutabaha [MD5.3F4ADD4196E2B860019539837BE305F9] - (.Hewlett-Packard Company - HP Support Assistant.) -- C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [121344] [PID.4916] =>.Hewlett-Packard Company [MD5.31A0E93CDF29007D6C6FFFB632F375ED] - (.Intel Corporation - IAStorDataSvc.) -- C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [13336] [PID.6368] =>.Intel Corporation® [MD5.CE386E441B704185CAF31356E267E81F] - (.Hero Hero - Hero Hero.) -- C:\Program Files\Microsoft Silverlight\5.1.50907.0\Hein.exe [26073530] [PID.5412] =>.Hero Hero [MD5.B0059AB66D4B8992E203A3562C0C8E64] - (.MSC - .) -- C:\Program Files\Microsoft Silverlight\5.1.50907.0\wchn.exe [1395687] [PID.7212] =>.MSC [MD5.FDC2394323979534A0D760ECC92EF8BC] - (...) -- C:\Users\ADMIN\AppData\Local\Temp\Msserv32.exe [1170432] [PID.8180] [MD5.E63CD42D04FF2E808EC9964519450EC7] - (.Oracle Corporation - Java Update Checker.) -- C:\Program Files\Common Files\Java\Java Update\jucheck.exe [925720] [PID.6748] =>.Oracle America, Inc.® [MD5.85EBA6293B4953BCA38DAD0CF483C090] - (.Google Inc. - Google Chrome.) -- C:\Program Files\Footjane\Application\chrome.exe [977240] [PID.8076] =>.Google Inc® [MD5.85EBA6293B4953BCA38DAD0CF483C090] - (.Google Inc. - Google Chrome.) -- C:\Program Files\Footjane\Application\chrome.exe [977240] [PID.3172] =>.Google Inc® [MD5.85EBA6293B4953BCA38DAD0CF483C090] - (.Google Inc. - Google Chrome.) -- C:\Program Files\Footjane\Application\chrome.exe [977240] [PID.7872] =>.Google Inc® [MD5.85EBA6293B4953BCA38DAD0CF483C090] - (.Google Inc. - Google Chrome.) -- C:\Program Files\Footjane\Application\chrome.exe [977240] [PID.4336] =>.Google Inc® [MD5.85EBA6293B4953BCA38DAD0CF483C090] - (.Google Inc. - Google Chrome.) -- C:\Program Files\Footjane\Application\chrome.exe [977240] [PID.8088] =>.Google Inc® [MD5.85EBA6293B4953BCA38DAD0CF483C090] - (.Google Inc. - Google Chrome.) -- C:\Program Files\Footjane\Application\chrome.exe [977240] [PID.6936] =>.Google Inc® [MD5.85EBA6293B4953BCA38DAD0CF483C090] - (.Google Inc. - Google Chrome.) -- C:\Program Files\Footjane\Application\chrome.exe [977240] [PID.6888] =>.Google Inc® [MD5.D1B6EB82DD40E0408FE86DB43A65ACEB] - (.Nicolas Coolman - ZHPDiag.) -- C:\Users\ADMIN\AppData\Roaming\ZHP\ZHPDiag3.exe [2943360] [PID.5876] =>.Nicolas Coolman [MD5.85EBA6293B4953BCA38DAD0CF483C090] - (.Google Inc. - Google Chrome.) -- C:\Program Files\Footjane\Application\chrome.exe [977240] [PID.3672] =>.Google Inc® [MD5.85EBA6293B4953BCA38DAD0CF483C090] - (.Google Inc. - Google Chrome.) -- C:\Program Files\Footjane\Application\chrome.exe [977240] [PID.4240] =>.Google Inc® [MD5.85EBA6293B4953BCA38DAD0CF483C090] - (.Google Inc. - Google Chrome.) -- C:\Program Files\Footjane\Application\chrome.exe [977240] [PID.4808] =>.Google Inc® [MD5.DA5EE8CC06605342130A1B4CE0D01744] - (.Europe Support Ltd. N.V. - Game Alarm.) -- C:\Games\Game Alarm\gamealarm.exe [19831808] [PID.1800] [MD5.85EBA6293B4953BCA38DAD0CF483C090] - (.Google Inc. - Google Chrome.) -- C:\Program Files\Footjane\Application\chrome.exe [977240] [PID.5348] =>.Google Inc® [MD5.85EBA6293B4953BCA38DAD0CF483C090] - (.Google Inc. - Google Chrome.) -- C:\Program Files\Footjane\Application\chrome.exe [977240] [PID.1024] =>.Google Inc® ---\\ Firefox, Plugins,Demarrage,Recherche,Extensions (1) - 0s P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Macromed\Flash\NPSWF32.dll =>.Adobe Systems Incorporated ---\\ Internet Explorer,Démarrage,Recherche,URLSearchHook (14) - 1s R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.ourluckysites.com/ =>Hijacker.OurLuckySites R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.ourluckysites.com/ =>Hijacker.OurLuckySites R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://%66%65%65%64.%68%65%6c%70%65%72%62%61%72.%63%6f%6d/?p=mko_awfzxipyrahdgkbrgnclvs1ac6snoh2tlpbfgrogfolntpjghme3whpnn8a_u-yxoh5lm5_brbsxram39emzrthcox6y6vri38cvw4kgle4exvlp4-kxhlzbj-0b_lylqi6xc4i67wtmqbfg1zabvdrvlqs3peodqggkqflln2ljzgzbehfr05masqfbqg0o08sbpg,,&q={searchterms} =>.SUP.Linkury R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.ourluckysites.com/ =>Hijacker.OurLuckySites R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://%66%65%65%64.%68%65%6c%70%65%72%62%61%72.%63%6f%6d/?p=mko_awfzxipyrahdgkbrgnclvs1ac6snoh2tlpbfgrogfolntpjghme3whpnn8a_u-yxoh5lm5_brbsxram39emzrthcox6y6vri38cvw4kgle4exvlp4-kxhlzbj-0b_lylqi6xc4i67wtmqbfg1zabvdrvlqs3peodqggkqflln2ljzgzbehfr05masqfbqg0o08sbpg,,&q={searchterms} =>.SUP.Linkury R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.amisites.com/ =>Hijacker.Amisites R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.ourluckysites.com/ =>Hijacker.OurLuckySites R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons =>.Microsoft Corporation R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk =>.Microsoft Corporation R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.amisites.com/ =>Hijacker.Amisites R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://%66%65%65%64.%68%65%6c%70%65%72%62%61%72.%63%6f%6d/?p=mko_awfzxipyrahdgkbrgnclvs1ac6snoh2tlpbfgrogfolntpjghme3whpnn8a_u-yxoh5lm5_brbsxram39emzrthcox6y6vri38cvw4kgle4exvlp4-kxhlzbj-0b_lylqi6xc4i67wtmqbfg1zabvdrvlqs3peodqggkqflln2ljzgzbehfr05masqfbqg0o08sbpg,,&q={searchterms} =>.SUP.Linkury R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchUrl,Default = http://%66%65%65%64.%68%65%6c%70%65%72%62%61%72.%63%6f%6d/?p=mko_awfzxipyrahdgkbrgnclvs1ac6snoh2tlpbfgrogfolntpjghme3whpnn8a_u-yxoh5lm5_brbsxram39emzrthcox6y6vri38cvw4kgle4exvlp4-kxhlzbj-0b_lylqi6xc4i67wtmqbfg1zabvdrvlqs3peodqggkqflln2ljzgzbehfr05masqfbqg0o08sbpg,,&q={searchterms} =>.SUP.Linkury R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = http://www.delta-search.com/ =>.SUP.DeltaSearch R3 - URLSearchHook: (no name)[HKCU] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (8.00.7600.16385 (win7_rtm.090713-1255)) -- C:\Windows\System32\ieframe.dll =>.Microsoft Corporation ---\\ Internet Explorer,Proxy Management (5) - 0s R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1 R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll R5 - HKLM\SYSTEM\CurrentControlSet\services\NlaSvc\Parameters\Internet\ManualProxies [] =>.Microsoft ---\\ Internet Explorer,IniFiles, Autoloading programs (3) - 0s F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe (.Microsoft Corporation.) =>.Microsoft Corporation F2 - REG:system.ini: Shell=C:\windows\explorer.exe (.Microsoft Corporation.) =>.Microsoft Corporation F2 - REG:system.ini: VMApplet=C:\windows\system32\SystemPropertiesPerformance.exe (.Microsoft Corporation.) =>.Microsoft Corporation ---\\ Etude du fichier hosts (1) - 0s ~ Le fichier hôte est sain (The hosts file is clean) (24) ---\\ Browser Helper Object de navigateur (BHO) (11) - 1s O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll =>.Adobe Systems, Incorporated® O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} . (.Kaspersky Lab ZAO - IE Virtual Keyboard.) -- C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\ievkbd.dll =>.Kaspersky Lab® O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} (.Orphan.) O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} . (.Microsoft Corporation - Search Helper for Internet Explorer.) -- C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll =>.Microsoft Corporation® O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre1.8.0_131\bin\ssv.dll =>.Oracle America, Inc.® O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corporation - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll =>.Microsoft Corporation® O2 - BHO: delta Helper Object - {C1AF5FA5-852C-4C90-812E-A7F75E011D87} . (.Delta-search.com - .) -- C:\Program Files\Delta\delta\1.8.10.0\bh\delta.dll =>.Montera Technologeis LTD® O2 - BHO: Bing Bar BHO - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} . (.Microsoft Corporation - Bing Bar.) -- C:\Program Files\MSN Toolbar\Platform\6.0.2237.0\npwinext.dll =>.Microsoft Corporation® O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre1.8.0_131\bin\jp2ssv.dll =>.Oracle America, Inc.® O2 - BHO: link filter bho - {E33CF602-D945-461A-83F0-819F76A199F8} . (.Kaspersky Lab ZAO - WebToolBar component.) -- C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\klwtbbho.dll =>.Kaspersky Lab® O2 - BHO: YoutubeAdBlock - {E3605470-291B-44EB-8648-745EE356599A} . (...) -- C:\Program Files\YoutubeAdBlockIE\kmknBkv_.dll =>PUP.Optional.YouTubeAdBlock ---\\ Internet Explorer, Barre d'outil (1) - 0s O3 - Toolbar: Delta Toolbar - [HKLM]{82E1477C-B154-48D3-9891-33D83C26BCD3} . (.Delta-search.com - .) -- C:\Program Files\Delta\delta\1.8.10.0\deltaTlbr.dll =>.Montera Technologeis LTD® ---\\ Raccourcis Global Startup (101) - 25s O4 - GS\Desktop [ADMIN]: ALMzor-G.lnk . (.Spider Kirkuk © - Fraud of identities and passport.) C:\Program Files\ALMzor-G\ALMzor-G.exe O4 - GS\Desktop [ADMIN]: Continuer l'installation Format Factory.lnk . (...) C:\Users\ADMIN\AppData\Local\Temp\ICReinstall_FFSetup3.0.1.1.exe /RR O4 - GS\Desktop [ADMIN]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files\Footjane\Application\chrome.exe --load-extension="C:\Users\ADMIN\AppData\Local\kemgadeojglibflomicgnfeopkdfflnk" =>.Google Inc® O4 - GS\Desktop [ADMIN]: Hein 4.5.2.lnk . (.Hero Hero - Hero Hero.) C:\Program Files\Microsoft Silverlight\5.1.50907.0\Hein.exe =>.Hero Hero O4 - GS\Desktop [ADMIN]: Hein Recovery 1.8.lnk . (.Hero Hero - Hero Family.) C:\Program Files\Microsoft Silverlight\5.1.50907.0\Hein Recovery.exe =>.Hero Hero O4 - GS\Desktop [ADMIN]: Internet Download Manager.lnk . (.Tonec Inc. - Internet Download Manager (IDM).) C:\Program Files\Internet Download Manager\IDMan.exe =>.Tonec Inc.® O4 - GS\Desktop [ADMIN]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\ADMIN\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman O4 - GS\Quicklaunch [ADMIN]: GOM Player.lnk . (.Gretech Corp. - GOM Player.) C:\Program Files\GRETECH\GomPlayer\GOM.exe {21A123} =>.Gretech Corp. O4 - GS\Quicklaunch [ADMIN]: Launch Internet-Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files\Internet Explorer\iexplore.exe =>.Microsoft Corporation® O4 - GS\Quicklaunch [ADMIN]: MoneyBot.exe.lnk . (...) C:\Program Files\IconRunner\MoneyBot.exe http://54.148.148.252/icon/tds.php O4 - GS\Quicklaunch [ADMIN]: QQ影音.lnk . (...) C:\Program Files\Tencent\QQPlayer\QQPlayer.exe =>.SUP.Tencent O4 - GS\Quicklaunch [ADMIN]: RealPlayer.lnk . (.RealNetworks, Inc. - RealPlayer.) C:\Program Files\Real\RealPlayer\realplay.exe {3FC9EF} =>.RealNetworks, Inc. O4 - GS\sendTo [ADMIN]: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\windows\system32\WFS.exe /SendTo =>.Microsoft Corporation O4 - GS\sendTo [ADMIN]: MediaInfo.lnk . (...) C:\Program Files\K-Lite Codec Pack\Tools\mediainfo.exe O4 - GS\sendTo [ADMIN]: Skype.lnk . (.Skype Technologies S.A. - Skype.) C:\Program Files\Skype\Phone\Skype.exe /sendto: =>.Skype Technologies SA® O4 - GS\sendTo [ADMIN]: Transfert de fichiers Bluetooth.LNK . (.Microsoft Corporation - .) C:\Windows\System32\fsquirt.exe =>.Microsoft Corporation O4 - GS\TaskBar [ADMIN]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files\Footjane\Application\chrome.exe --load-extension="C:\Users\ADMIN\AppData\Local\kemgadeojglibflomicgnfeopkdfflnk" =>.Google Inc® O4 - GS\TaskBar [ADMIN]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files\Explorer\iexplore.exe =>.Microsoft Corporation® O4 - GS\TaskBar [ADMIN]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files\Firefox\Firefox.exe =>.Mengmeng Wang® O4 - GS\TaskBar [ADMIN]: Windows Explorer.lnk . (.Microsoft Corporation - Explorateur Windows.) C:\windows\explorer.exe =>.Microsoft Corporation O4 - GS\TaskBar [ADMIN]: Windows Media Player.lnk . (.Microsoft Corporation - Lecteur Windows Media.) C:\Program Files\Windows Media Player\wmplayer.exe /prefetch:1 =>.Microsoft Corporation O4 - GS\TaskBar [ADMIN]: Wondershare MirrorGo.lnk . (.Wondershare - Wondershare MirrorGo.) C:\Program Files\Wondershare\MirrorGo\MirrorGo.exe =>.Shenzhen Wondershare Information Technology Co., Ltd.® O4 - GS\Startup [ADMIN]: Alertes de surveillance de l'encre - HP Deskjet 1510 series.lnk . (.Microsoft Corporation - Processus hôte Windows (Rundll32).) C:\windows\system32\RunDll32.exe "C:\Program Files\HP\HP Deskjet 1510 series\bin\HPStatusBL.dll",RunDLLEntry SERIALNUMBER=CN46G171M605YR;CONNECTION=USB;MONITOR=1; =>..Microsoft Corporation O4 - GS\Startup [ADMIN]: Game Alarm.lnk . (.Europe Support Ltd. N.V. - Game Alarm.) C:\Games\Game Alarm\gamealarm.exe -silent 2 O4 - GS\Startup [ADMIN]: produpd.lnk . (.<epam> - Network system service.) C:\Users\ADMIN\AppData\Roaming\VDI\Shared\Product Updater\produpd.exe /20506 O4 - GS\Programs [ADMIN]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files\Explorer\iexplore.exe =>.Microsoft Corporation® O4 - GS\Desktop [Administrateur]: ALMzor-G.lnk . (.Spider Kirkuk © - Fraud of identities and passport.) C:\Program Files\ALMzor-G\ALMzor-G.exe O4 - GS\Desktop [Administrateur]: Continuer l'installation Format Factory.lnk . (...) C:\Users\ADMIN\AppData\Local\Temp\ICReinstall_FFSetup3.0.1.1.exe /RR O4 - GS\Desktop [Administrateur]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files\Footjane\Application\chrome.exe --load-extension="C:\Users\ADMIN\AppData\Local\kemgadeojglibflomicgnfeopkdfflnk" =>.Google Inc® O4 - GS\Desktop [Administrateur]: Hein 4.5.2.lnk . (.Hero Hero - Hero Hero.) C:\Program Files\Microsoft Silverlight\5.1.50907.0\Hein.exe =>.Hero Hero O4 - GS\Desktop [Administrateur]: Hein Recovery 1.8.lnk . (.Hero Hero - Hero Family.) C:\Program Files\Microsoft Silverlight\5.1.50907.0\Hein Recovery.exe =>.Hero Hero O4 - GS\Desktop [Administrateur]: Internet Download Manager.lnk . (.Tonec Inc. - Internet Download Manager (IDM).) C:\Program Files\Internet Download Manager\IDMan.exe =>.Tonec Inc.® O4 - GS\Desktop [Administrateur]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\ADMIN\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman O4 - GS\Quicklaunch [Administrateur]: GOM Player.lnk . (.Gretech Corp. - GOM Player.) C:\Program Files\GRETECH\GomPlayer\GOM.exe {21A123} =>.Gretech Corp. O4 - GS\Quicklaunch [Administrateur]: Launch Internet-Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files\Internet Explorer\iexplore.exe =>.Microsoft Corporation® O4 - GS\Quicklaunch [Administrateur]: MoneyBot.exe.lnk . (...) C:\Program Files\IconRunner\MoneyBot.exe http://54.148.148.252/icon/tds.php O4 - GS\Quicklaunch [Administrateur]: QQ影音.lnk . (...) C:\Program Files\Tencent\QQPlayer\QQPlayer.exe =>.SUP.Tencent O4 - GS\Quicklaunch [Administrateur]: RealPlayer.lnk . (.RealNetworks, Inc. - RealPlayer.) C:\Program Files\Real\RealPlayer\realplay.exe {3FC9EF} =>.RealNetworks, Inc. O4 - GS\sendTo [Administrateur]: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\windows\system32\WFS.exe /SendTo =>.Microsoft Corporation O4 - GS\sendTo [Administrateur]: MediaInfo.lnk . (...) C:\Program Files\K-Lite Codec Pack\Tools\mediainfo.exe O4 - GS\sendTo [Administrateur]: Skype.lnk . (.Skype Technologies S.A. - Skype.) C:\Program Files\Skype\Phone\Skype.exe /sendto: =>.Skype Technologies SA® O4 - GS\sendTo [Administrateur]: Transfert de fichiers Bluetooth.LNK . (.Microsoft Corporation - .) C:\Windows\System32\fsquirt.exe =>.Microsoft Corporation O4 - GS\TaskBar [Administrateur]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files\Footjane\Application\chrome.exe --load-extension="C:\Users\ADMIN\AppData\Local\kemgadeojglibflomicgnfeopkdfflnk" =>.Google Inc® O4 - GS\TaskBar [Administrateur]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files\Explorer\iexplore.exe =>.Microsoft Corporation® O4 - GS\TaskBar [Administrateur]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files\Firefox\Firefox.exe =>.Mengmeng Wang® O4 - GS\TaskBar [Administrateur]: Windows Explorer.lnk . (.Microsoft Corporation - Explorateur Windows.) C:\windows\explorer.exe =>.Microsoft Corporation O4 - GS\TaskBar [Administrateur]: Windows Media Player.lnk . (.Microsoft Corporation - Lecteur Windows Media.) C:\Program Files\Windows Media Player\wmplayer.exe /prefetch:1 =>.Microsoft Corporation O4 - GS\TaskBar [Administrateur]: Wondershare MirrorGo.lnk . (.Wondershare - Wondershare MirrorGo.) C:\Program Files\Wondershare\MirrorGo\MirrorGo.exe =>.Shenzhen Wondershare Information Technology Co., Ltd.® O4 - GS\Startup [Administrateur]: Alertes de surveillance de l'encre - HP Deskjet 1510 series.lnk . (.Microsoft Corporation - Processus hôte Windows (Rundll32).) C:\windows\system32\RunDll32.exe "C:\Program Files\HP\HP Deskjet 1510 series\bin\HPStatusBL.dll",RunDLLEntry SERIALNUMBER=CN46G171M605YR;CONNECTION=USB;MONITOR=1; =>..Microsoft Corporation O4 - GS\Startup [Administrateur]: Game Alarm.lnk . (.Europe Support Ltd. N.V. - Game Alarm.) C:\Games\Game Alarm\gamealarm.exe -silent 2 O4 - GS\Startup [Administrateur]: produpd.lnk . (.<epam> - Network system service.) C:\Users\ADMIN\AppData\Roaming\VDI\Shared\Product Updater\produpd.exe /20506 O4 - GS\Programs [Administrateur]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files\Explorer\iexplore.exe =>.Microsoft Corporation® O4 - GS\CommonDesktop [Public]: Achat de consommables - HP Deskjet 1510 series.lnk . (.Hewlett-Packard Co. - DesktopSureSupply.) C:\Program Files\HP\HP Deskjet 1510 series\Bin\hpqDTSS.exe =>.Hewlett Packard® O4 - GS\CommonDesktop [Public]: HP Deskjet 1510 series.lnk . (.Hewlett-Packard Co. - HP Printer Assistant.) C:\Program Files\HP\HP Deskjet 1510 series\Bin\HP Deskjet 1510 series.exe -Start UDCDevicePage =>.Hewlett Packard® O4 - GS\CommonDesktop [Public]: HP Photo Creations.lnk . (.Visan / RocketLife - PhotoProduct.exe.) C:\Program Files\HP Photo Creations\PhotoProduct.exe =>.Visan Industries® O4 - GS\CommonDesktop [Public]: Inpaint.lnk . (...) C:\Program Files\Inpaint\Inpaint.exe O4 - GS\CommonDesktop [Public]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files\Explorer\iexplore.exe =>.Microsoft Corporation® O4 - GS\CommonDesktop [Public]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files\Firefox\Firefox.exe =>.Mengmeng Wang® O4 - GS\CommonDesktop [Public]: Nedjma Easynet.lnk . (.Acresso Software Inc. - InstallShield.) C:\windows\Installer\{06ADE2A0-E46A-4A84-A211-64CF50520185}\HSPA_USB_Modem.exe_AB26A67632F0422B9C9996628159AE5C.exe =>.Acresso Software Inc. O4 - GS\CommonDesktop [Public]: VLC media player.lnk . (...) C:\Program Files\VideoLAN\VLC\vlc.exe =>.VideoLan Team O4 - GS\Programs [Public]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files\Explorer\iexplore.exe =>.Microsoft Corporation® O4 - GS\Accessories [Public]: Command Prompt.lnk . (.Microsoft Corporation - Interpréteur de commandes Windows.) C:\windows\system32\cmd.exe =>.Microsoft Corporation O4 - GS\Accessories [Public]: Notepad.lnk . (.Microsoft Corporation - Bloc-notes.) C:\windows\system32\notepad.exe =>.Microsoft Corporation O4 - GS\Accessories [Public]: Windows Explorer.lnk . (.Microsoft Corporation - Explorateur Windows.) C:\windows\explorer.exe =>.Microsoft Corporation O4 - GS\SystemTools [Public]: Intеrnеt Ехрlоrеr (Nо Аdd-оns).lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files\Internet Explorer\iexplore.exe http://www.ourluckysites.com/ =>Hijacker.OurLuckySites O4 - GS\SystemTools [Public]: Private Character Editor.lnk . (.Microsoft Corporation - Éditeur de caractères privés.) C:\windows\system32\eudcedit.exe =>.Microsoft Corporation O4 - GS\Startup [Public]: Adobe Reader Synchronizer.lnk . (...) C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe =>.Adobe Systems, Incorporated® O4 - GS\Startup [Public]: Lancement rapide d'Adobe Reader.lnk . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe =>.Adobe Systems, Incorporated® O4 - GS\Accessories [Public]: Bluetooth File Transfer Wizard.lnk . (.Microsoft Corporation - .) C:\Windows\System32\fsquirt.exe =>.Microsoft Corporation O4 - GS\Accessories [Public]: Calculator.lnk . (.Microsoft Corporation - Calculatrice de Windows.) C:\windows\system32\calc.exe =>.Microsoft Corporation O4 - GS\Accessories [Public]: displayswitch.lnk . (.Microsoft Corporation - Afficher le commutateur.) C:\windows\system32\displayswitch.exe =>.Microsoft Corporation O4 - GS\Accessories [Public]: Paint.lnk . (.Microsoft Corporation - Paint.) C:\windows\system32\mspaint.exe =>.Microsoft Corporation O4 - GS\Accessories [Public]: Remote Desktop Connection.lnk . (.Microsoft Corporation - Connexion Bureau à distance.) C:\windows\system32\mstsc.exe =>.Microsoft Corporation O4 - GS\Accessories [Public]: Sound Recorder.lnk . (.Microsoft Corporation - Magnétophone Windows.) C:\windows\system32\SoundRecorder.exe =>.Microsoft Corporation O4 - GS\Accessories [Public]: Sync Center.lnk . (.Microsoft Corporation - Microsoft Sync Center.) C:\windows\System32\mobsync.exe =>.Microsoft Corporation O4 - GS\Accessories [Public]: Welcome Center.lnk . (.Microsoft Corporation - Processus hôte Windows (Rundll32).) C:\windows\system32\rundll32.exe %SystemRoot%\system32\OobeFldr.dll,ShowWelcomeCenter LaunchedBy_StartMenuShortcut =>..Microsoft Corporation O4 - GS\Accessories [Public]: Wordpad.lnk . (.Microsoft Corporation - Application Windows Wordpad.) C:\Program Files\Windows NT\Accessories\wordpad.exe =>.Microsoft Corporation O4 - GS\SystemTools [Public]: Character Map.lnk . (.Microsoft Corporation - Table des caractères.) C:\windows\system32\charmap.exe =>.Microsoft Corporation O4 - GS\SystemTools [Public]: dfrgui.lnk . (.Microsoft Corporation - Défragmenteur de disque Microsoft®.) C:\windows\system32\dfrgui.exe =>.Microsoft Corporation O4 - GS\SystemTools [Public]: Disk Cleanup.lnk . (.Microsoft Corporation - Gestionnaire de nettoyage de disque pour Wi.) C:\windows\system32\cleanmgr.exe =>.Microsoft Corporation O4 - GS\SystemTools [Public]: Resource Monitor.lnk . (.Microsoft Corporation - Moniteur de ressources et de performances.) C:\windows\system32\perfmon.exe /res =>.Microsoft Corporation O4 - GS\SystemTools [Public]: System Information.lnk . (.Microsoft Corporation - Informations système.) C:\windows\system32\msinfo32.exe =>.Microsoft Corporation O4 - GS\SystemTools [Public]: System Restore.lnk . (.Microsoft Corporation - Restauration du système de Microsoft® Windo.) C:\windows\system32\rstrui.exe =>.Microsoft Corporation O4 - GS\SystemTools [Public]: Task Scheduler.lnk . (...) C:\windows\system32\taskschd.msc /s =>..Microsoft Corporation O4 - GS\SystemTools [Public]: Windows Easy Transfer Reports.lnk . (.Microsoft Corporation - Application post-migration de transfert de.) C:\windows\system32\migwiz\postmig.exe =>.Microsoft Corporation O4 - GS\SystemTools [Public]: Windows Easy Transfer.lnk . (.Microsoft Corporation - Application Transfert de fichiers et paramè.) C:\windows\system32\migwiz\migwiz.exe =>.Microsoft Corporation O4 - GS\ProgramsCommon [Public]: Adobe Reader 8.lnk . (...) C:\windows\Installer\{AC76BA86-7AD7-1036-7B44-A80000000002}\SC_Reader.exe O4 - GS\ProgramsCommon [Public]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files\Footjane\Application\chrome.exe --load-extension="C:\Users\ADMIN\AppData\Local\kemgadeojglibflomicgnfeopkdfflnk" =>.Google Inc® O4 - GS\ProgramsCommon [Public]: HP Software Setup.lnk . (.Hewlett-Packard Company - HP Software Setup.) C:\swsetup\AppInstl\HPSoftwareSetup.exe =>.Hewlett-Packard Company® O4 - GS\ProgramsCommon [Public]: Microsoft Default Manager.lnk . (.Microsoft Corporation - Microsoft Default Manager.) C:\Program Files\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe -settings =>.Microsoft Corporation® O4 - GS\ProgramsCommon [Public]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files\Firefox\Firefox.exe =>.Mengmeng Wang® O4 - GS\ProgramsCommon [Public]: RealPlayer.lnk . (.RealNetworks, Inc. - RealPlayer.) C:\Program Files\Real\RealPlayer\realplay.exe {3FC9EF} =>.RealNetworks, Inc. O4 - GS\ProgramsCommon [Public]: Sidebar.lnk . (.Microsoft Corporation - Gadgets du Bureau Windows.) C:\Program Files\Windows Sidebar\sidebar.exe /showgadgets =>.Microsoft Corporation O4 - GS\ProgramsCommon [Public]: Windows Anytime Upgrade.lnk . (.Microsoft Corporation - Interface utilisateur de Mise à niveau expr.) C:\windows\system32\WindowsAnytimeUpgradeUI.exe =>.Microsoft Corporation O4 - GS\ProgramsCommon [Public]: Windows Fax and Scan.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\windows\system32\WFS.exe =>.Microsoft Corporation O4 - GS\ProgramsCommon [Public]: Windows Live ID.lnk . (.Microsoft Corporation - Sign in Options.) C:\Program Files\Common Files\microsoft shared\Windows Live\SIGNINOPTIONS.EXE =>.Microsoft Corporation® O4 - GS\ProgramsCommon [Public]: Windows Media Player.lnk . (.Microsoft Corporation - Lecteur Windows Media.) C:\Program Files\Windows Media Player\wmplayer.exe /prefetch:1 =>.Microsoft Corporation O4 - GS\ProgramsCommon [Public]: XPS Viewer.lnk . (.Microsoft Corporation - Visionneuse XPS.) C:\windows\system32\xpsrchvw.exe =>.Microsoft Corporation C:\Users\ADMIN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\crypted2.vbs C:\Users\ADMIN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Systems.vbs C:\Users\ADMIN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\wfifpmvave..vbs ---\\ Modification Domaine/Adresses DNS (2) - 0s O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 =>.Local IP Adress O17 - HKLM\System\CCS\Services\Tcpip\..\{F9A0C57C-CCE3-47A0-829C-EA5FED310486}: DhcpNameServer = 192.168.1.1 =>.Local IP Adress ---\\ Protocole additionnel (27) - 2s O18 - Handler: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\MSVidCtl.dll =>.Microsoft Corporation O18 - Handler: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation O18 - Handler: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation O18 - Handler: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation O18 - Handler: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation O18 - Handler: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll =>.Microsoft Corporation O18 - Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation O18 - Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll =>.Microsoft Corporation® O18 - Handler: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation O18 - Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\System32\inetcomm.dll =>.Microsoft Corporation O18 - Handler: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation O18 - Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} . (.Microsoft Corporation - Microsoft® Help Data Services Module.) -- C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll =>.Microsoft Corporation® O18 - Handler: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll =>.Microsoft Corporation O18 - Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll =>.Microsoft Corporation® O18 - Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation O18 - Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} . (.Skype Technologies - Skype for COM API.) -- C:\Program Files\Common Files\Skype\Skype4COM.dll =>.Skype Technologies SA® O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\MSVidCtl.dll =>.Microsoft Corporation O18 - Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation O18 - Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation® O18 - Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation® O18 - Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation® O18 - Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation O18 - Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation O18 - Filter: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL =>.Microsoft Corporation® ---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (1) - 0s O20 - AppInit_DLLs: . (.Kaspersky Lab ZAO - Mozilla 3 Virtual Keyboard.) - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\mzvkbd3.dll =>.Kaspersky Lab ZAO ---\\ Logiciels installés (135) - 107s O42 - Logiciel: 3D Driving-School - (..) [HKLM] -- 3D Driving-School O42 - Logiciel: Active@ File Recovery 15 - (.LSoft Technologies Inc.) [HKLM] -- {177608F6-F029-4301-B176-15BA7C605B73}_is1 =>.LSoft Technologies Inc® O42 - Logiciel: ActiveCheck component for HP Active Support Library - (.Hewlett-Packard.) [HKLM] -- {254C37AA-6B72-4300-84F6-98A82419187E} =>.Hewlett-Packard O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX =>.Adobe Systems Incorporated O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin =>.Adobe Systems Incorporated O42 - Logiciel: Adobe Reader 8 - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-A80000000002} =>.Adobe Systems Incorporated O42 - Logiciel: ALMzor-G Tr 2.0 - (.Spider Kirkuk, Inc..) [HKLM] -- ALMzor-G_is1 O42 - Logiciel: AlphaGo - (.AlphaGo.) [HKLM] -- {9CDB618D-4F02-4CAD-B743-89677FE7ADE9} =>.AlphaGo O42 - Logiciel: AlphaGo - (.Default Company Name.) [HKLM] -- {2C652C0A-EC71-4797-8077-F67649177AB0} O42 - Logiciel: AlphaGo - (.Default Company Name.) [HKLM] -- {51639FCA-678F-4D71-8044-E16E3D49187F} O42 - Logiciel: amuleC - (.amuleC.) [HKLM] -- {19539992-061C-4E8B-9053-07B175303AF4} =>Adware.aMULEcustom O42 - Logiciel: amuleC - (.amuleC.) [HKLM] -- {B2EFFD4E-D098-4845-9D56-DE75BEB35913} =>Adware.aMULEcustom O42 - Logiciel: AutoUpdate - (..) [HKLM] -- {18D10072035C4515918F7E37EAFAACFC} O42 - Logiciel: BestZiper version 1.0 - (.WeMonetize.) [HKLM] -- BestZiper_is1 =>.SUP.Tuto4PC O42 - Logiciel: BikaQ Rss Reader - (.BikaQ.) [HKLM] -- {56B2B28A-E663-4D28-84A3-3846068A7D63} =>.SUP.BikaQ O42 - Logiciel: Bing Bar - (.Microsoft Corporation.) [HKLM] -- {08234a0d-cf39-4dca-99f0-0c5cb496da81} =>.Microsoft Corporation® O42 - Logiciel: Bing Bar Platform - (.Microsoft Corporation.) [HKLM] -- {54B29835-EF99-41D2-9104-F159DE62F165} =>.Microsoft Corporation O42 - Logiciel: Bing Rewards Client Installer - (.Microsoft Corporation.) [HKLM] -- {61EDBE71-5D3E-4AB7-AD95-E53FEAF68C17} =>.Microsoft Corporation O42 - Logiciel: Blur(TM) - (..) [HKLM] -- Blur(TM)_is1 O42 - Logiciel: Condition zero - (..) [HKLM] -- Condition zero O42 - Logiciel: ContentPush - (..) [HKLM] -- ContentPush O42 - Logiciel: Corel Home Office - (.Corel Corporation.) [HKLM] -- _{36C95AD3-D330-4BAA-884A-9F3EFD15A5EA} =>.Corel Corporation® O42 - Logiciel: Corel Home Office - (.Corel Corporation.) [HKLM] -- {36C95AD3-D330-4BAA-884A-9F3EFD15A5EA} =>.Corel Corporation O42 - Logiciel: Corel Home Office - (.Corel Corporation.) [HKLM] -- {F1410C34-CCC7-4443-B698-7E9FF42F4FA3} =>.Corel Corporation O42 - Logiciel: Corel Home Office - CS Templates - (.公司名称.) [HKLM] -- {1A1E33D2-9824-454A-B8CB-50072118635A} O42 - Logiciel: Corel Home Office - CT Templates - (.您的公司名稱.) [HKLM] -- {26D19512-874B-4EDA-B7F1-779850B2AD5A} O42 - Logiciel: Corel Home Office - IPM - (.Corel Corporation.) [HKLM] -- {0B2187A6-8ACC-4012-9817-9221211EF407} =>.Corel Corporation O42 - Logiciel: Corel Home Office - JP Templates - (.会社名.) [HKLM] -- {1D11E96F-0405-4B99-8356-5750B1D9FAE9} O42 - Logiciel: Corel Home Office - KR Templates - (.회사명.) [HKLM] -- {5746E4F9-77C6-47E8-A737-A5975A57B4AA} O42 - Logiciel: Corel Home Office - Launcher - (.Corel Corporation.) [HKLM] -- {E74EA

Format du document : text/plain

Prévisualisation