Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 31-10-2013
Ran by serge (administrator) on PC-DE-SERGE on 10-11-2013 07:35:32
Running from C:UserssergeDesktop
Microsoft® Windows Vista™ Édition Familiale Basique Service Pack 1 (X86) OS Language: French Standard
Internet Explorer Version 8
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(Microsoft Corporation) C:Windowssystem32SLsvc.exe
(AVAST Software) C:Program FilesAVAST SoftwareAvastAvastSvc.exe
(Microsoft Corporation) C:Program FilesWindows DefenderMSASCui.exe
() C:Program FilesLexmark Pro700 Serieslxeemon.exe
() C:Program FilesLexmark Pro700 Seriesezprint.exe
(Agere Systems) C:Windowssystem32agrsmsvc.exe
( ) C:Windowssystem32lxeecoms.exe
() C:Program FilesSystem Control Manageredd.exe
(O2Micro International) C:Windowssystem32o2flash.exe
(MSI) C:Program FilesSystem Control ManagerMGSysCtrl.exe
(Oracle Corporation) C:Program FilesCommon FilesJavaJava Updatejusched.exe
(AVAST Software) C:Program FilesAVAST SoftwareAvastavastui.exe
(Microsoft Corporation) C:Program FilesWindows Media Playerwmpnscfg.exe
() C:Windowssystem32PSIService.exe
(TechSmith Corporation) C:Program FilesTechSmithSnagIt 8SnagIt32.exe
(Guillemot Corporation S.A.) C:Program FilesHerculesDeluxe Optical GlassCamservice.exe
(Glarysoft Ltd) C:Program FilesGlary Utilities 3Integrator.exe
(Microsoft Corporation) C:Windowssystem32wbemunsecapp.exe
(Microsoft Corporation) C:Program FilesMicrosoft OfficeOfficeOSA9.EXE
(TechSmith Corporation) C:Program FilesTechSmithSnagIt 8TSCHelp.exe
(—) C:Program FilesMemAv_V1_2MemAv.exe
(—) C:Program FilesMemAv_V1_2MemAv.exe
(Microsoft Corporation) C:Windowssystem32conime.exe

==================== Registry (Whitelisted) ==================

HKLM…Run: [Windows Defender] – C:Program FilesWindows DefenderMSASCui.exe [1008184 2008-01-18] (Microsoft Corporation)
HKLM…Run: [lxeemon.exe] – C:Program FilesLexmark Pro700 Serieslxeemon.exe [770728 2011-01-23] ()
HKLM…Run: [EzPrint] – C:Program FilesLexmark Pro700 Seriesezprint.exe [148280 2011-01-23] ()
HKLM…Run: [Adobe ARM] – C:Program FilesCommon FilesAdobeARM1.0AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM…Run: [NvSvc] – RUNDLL32.EXE C:Windowssystem32nvsvc.dll,nvsvcStart
HKLM…Run: [NvCplDaemon] – RUNDLL32.EXE C:Windowssystem32NvCpl.dll,NvStartup
HKLM…Run: [NvMediaCenter] – RUNDLL32.EXE C:Windowssystem32NvMcTray.dll,NvTaskbarInit
HKLM…Run: [APSDaemon] – C:Program FilesCommon FilesAppleApple Application SupportAPSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM…Run: [MGSysCtrl] – C:Program FilesSystem Control ManagerMGSysCtrl.exe [174592 2006-12-22] (MSI)
HKLM…Run: [SunJavaUpdateSched] – C:Program FilesCommon FilesJavaJava Updatejusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM…Run: [AvastUI.exe] – C:Program FilesAVAST SoftwareAvastavastui.exe [3567800 2013-10-25] (AVAST Software)
HKCU…Run: [WMPNSCFG] – C:Program FilesWindows Media Playerwmpnscfg.exe [202240 2008-01-18] (Microsoft Corporation)
HKUDefault…Run: [WindowsWelcomeCenter] – rundll32.exe oobefldr.dll,ShowWelcomeCenter
AppInit_DLLs: [ ] ()
Startup: C:UserssergeAppDataRoamingMicrosoftWindowsStart MenuProgramsStartupAdobe Gamma.lnk
ShortcutTarget: Adobe Gamma.lnk -> C:Program FilesCommon FilesAdobeCalibrationAdobe Gamma Loader.exe (Adobe Systems, Inc.)
BootExecute: autocheck autochk * de Firefox.

==================== Internet (Whitelisted) ====================

HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.google.fr/” onclick=”window.open(this.href);return false;
HKCUSoftwareMicrosoftInternet ExplorerMain,Search Bar = http://www.bing.com” onclick=”window.open(this.href);return false;
HKCUSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://aartemis.com/?type=hp&ts=1383849174&from=tugs&uid=126614527_266178_6053D062” onclick=”window.open(this.href);return false;
HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://aartemis.com/?type=hp&ts=1383849174&from=tugs&uid=126614527_266178_6053D062” onclick=”window.open(this.href);return false;
HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://aartemis.com/?type=hp&ts=1383849174&from=tugs&uid=126614527_266178_6053D062” onclick=”window.open(this.href);return false;
HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://www.aartemis.com/web/?type=ds&ts=1383849174&from=tugs&uid=126614527_266178_6053D062&q=” onclick=”window.open(this.href);return false;{searchTerms}
HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://www.aartemis.com/web/?type=ds&ts=1383849174&from=tugs&uid=126614527_266178_6053D062&q=” onclick=”window.open(this.href);return false;{searchTerms}
URLSearchHook: HKCU – (No Name) – {338c5d66-6b92-40a7-a216-9830d2e54103} – No File
URLSearchHook: HKCU – (No Name) – {ebd898f8-fcf6-4694-bc3b-eabc7271eeb1} – No File
StartMenuInternet: IEXPLORE.EXE – C:Program FilesInternet Exploreriexplore.exe http://aartemis.com/?type=sc&ts=1383849174&from=tugs&uid=126614527_266178_6053D062” onclick=”window.open(this.href);return false;
SearchScopes: HKLM – DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.aartemis.com/web/?type=ds&ts=1383849174&from=tugs&uid=126614527_266178_6053D062&q=” onclick=”window.open(this.href);return false;{searchTerms}
SearchScopes: HKLM – {29A7253D-32CF-793C-48FB-1A8078ABD035} URL = http://search.conduit.com/ResultsExt.aspx?q=” onclick=”window.open(this.href);return false;{searchTerms}&SearchSource=4&ctid=CT3242339
SearchScopes: HKLM – {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.aartemis.com/web/?type=ds&ts=1383849174&from=tugs&uid=126614527_266178_6053D062&q=” onclick=”window.open(this.href);return false;{searchTerms}
SearchScopes: HKCU – DefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL =
SearchScopes: HKCU – {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU – {29A7253D-32CF-793C-48FB-1A8078ABD035} URL =
SearchScopes: HKCU – {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.aartemis.com/web/?type=ds&ts=1383849174&from=tugs&uid=126614527_266178_6053D062&q=” onclick=”window.open(this.href);return false;{searchTerms}
BHO: HelperObject Class – {00C6482D-C502-44C8-8409-FCE54AD9C208} – C:Program FilesTechSmithSnagIt 8SnagItBHO.dll (TechSmith Corporation)
BHO: Lexmark Barre d’outils – {1017A80C-6F09-4548-A84D-EDD6AC9525F0} – C:Program FilesLexmark Toolbartoolband.dll ()
BHO: Java(tm) Plug-In SSV Helper – {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} – C:Program FilesJavajre7binssv.dll (Oracle Corporation)
BHO: avast! Online Security – {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} – C:Program FilesAVAST SoftwareAvastaswWebRepIE.dll (AVAST Software)
BHO: Java(tm) Plug-In 2 SSV Helper – {DBC80044-A445-435b-BC74-9C25C1C588A9} – C:Program FilesJavajre7binjp2ssv.dll (Oracle Corporation)
Toolbar: HKLM – Lexmark Barre d’outils – {1017A80C-6F09-4548-A84D-EDD6AC9525F0} – C:Program FilesLexmark Toolbartoolband.dll ()
Toolbar: HKLM – avast! Online Security – {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} – C:Program FilesAVAST SoftwareAvastaswWebRepIE.dll (AVAST Software)
Toolbar: HKLM – SnagIt – {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} – C:Program FilesTechSmithSnagIt 8SnagItIEAddin.dll (TechSmith Corporation)
Toolbar: HKCU – Lexmark Barre d’outils – {1017A80C-6F09-4548-A84D-EDD6AC9525F0} – C:Program FilesLexmark Toolbartoolband.dll ()
Toolbar: HKCU – No Name – {8FF5E180-ABDE-46EB-B09E-D2AAB95CABE3} – No File
Toolbar: HKCU – No Name – {2318C2B1-4965-11D4-9B18-009027A5CD4F} – No File
Toolbar: HKCU – No Name – {338C5D66-6B92-40A7-A216-9830D2E54103} – No File
Toolbar: HKCU – No Name – {EBD898F8-FCF6-4694-BC3B-EABC7271EEB1} – No File
DPF: {1663ed61-23eb-11d2-b92f-008048fdd814} http://www.itinerarium.net/helperDll/ScriptX.cab” onclick=”window.open(this.href);return false;
DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab” onclick=”window.open(this.href);return false;
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab” onclick=”window.open(this.href);return false;
Handler: skype4com – {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} – C:Program FilesCommon FilesSkypeSkype4COM.dll (Skype Technologies)
TcpipParameters: [DhcpNameServer] 212.27.40.240 212.27.40.241

FireFox:
========
FF ProfilePath: C:UserssergeAppDataRoamingMozillaFirefoxProfiles1kcym20r.default
FF user.js: detected! => C:UserssergeAppDataRoamingMozillaFirefoxProfiles1kcym20r.defaultuser.js
FF NetworkProxy: “type”, 0
FF Plugin: @adobe.com/FlashPlayer – C:Windowssystem32MacromedFlashNPSWF32_11_9_900_117.dll ()
FF Plugin: @adobe.com/ShockwavePlayer – C:Windowssystem32AdobeDirectornp32dsw.dll (Adobe Systems, Inc.)
FF Plugin: @java.com/DTPlugin,version=10.45.2 – C:Program FilesJavajre7bindtpluginnpDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 – C:Program FilesJavajre7binplugin2npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 – C:WindowsMicrosoft.NETFrameworkv3.5Windows Presentation FoundationNPWPF.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 – C:Program FilesGoogleUpdate1.3.21.165npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 – C:Program FilesGoogleUpdate1.3.21.165npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader – C:Program FilesAdobeReader 10.0ReaderAIRnppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:UserssergeAppDataRoamingMozillaFirefoxProfiles1kcym20r.defaultsearchpluginsiminent.xml
FF Extension: No Name – C:UserssergeAppDataRoamingMozillaFirefoxProfiles1kcym20r.defaultExtensionsstaged
FF Extension: Zula Games – C:UserssergeAppDataRoamingMozillaFirefoxProfiles1kcym20r.defaultExtensionszulagames@ZulaGames.com
FF Extension: webbooster – C:UserssergeAppDataRoamingMozillaFirefoxProfiles1kcym20r.defaultExtensionswebbooster@iminent.com.xpi
FF HKLM…FirefoxExtensions: [{20a82645-c095-46ed-80e3-08825760534b}] – C:WindowsMicrosoft.NETFrameworkv3.5Windows Presentation FoundationDotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant – C:WindowsMicrosoft.NETFrameworkv3.5Windows Presentation FoundationDotNetAssistantExtension
FF HKLM…FirefoxExtensions: [wrc@avast.com] – C:Program FilesAVAST SoftwareAvastWebRepFF
FF Extension: avast! Online Security – C:Program FilesAVAST SoftwareAvastWebRepFF

Chrome:
=======
CHR DefaultSearchURL: (aartemis) – http://www.aartemis.com/web/?type=ds&ts=1383849174&from=tugs&uid=126614527_266178_6053D062&q=” onclick=”window.open(this.href);return false;{searchTerms}
CHR DefaultSuggestURL: (aartemis) – “suggest_url”: “”,
CHR Extension: (glindorus) – C:UserssergeAppDataLocalGoogleChromeUser DataDefaultExtensionsammjbfijeglcdlnlnhlkdhgjnlgmpehe1.0.0_0
CHR Extension: (Google Drive) – C:UserssergeAppDataLocalGoogleChromeUser DataDefaultExtensionsapdfllckaahabafndbhieahigkjlhalf6.3_0
CHR Extension: (YouTube) – C:UserssergeAppDataLocalGoogleChromeUser DataDefaultExtensionsblpcfgokakmgnkcojhhkbfbldkacnbeo4.2.6_0
CHR Extension: (Lightning Newtab) – C:UserssergeAppDataLocalGoogleChromeUser DataDefaultExtensionsifohbjbgfchkkfhphahclmkpgejiplfo1.1.6.6_0
CHR Extension: (Google Wallet) – C:UserssergeAppDataLocalGoogleChromeUser DataDefaultExtensionsnmmhkkegccagdldgiimedpiccmgmieda.0.5.0_0
CHR HKLM…ChromeExtension: [dmibjfmphcpfoacbchialfobiohmhged] – C:UserssergeAppDataRoamingPRINTA~1printatreeChrome.crx
CHR HKLM…ChromeExtension: [ifohbjbgfchkkfhphahclmkpgejiplfo] – C:UserssergeAppDataLocalGoogleChromeUser DataDefaultExtensionsnewtab.crx

========================== Services (Whitelisted) =================

R2 avast! Antivirus; C:Program FilesAVAST SoftwareAvastAvastSvc.exe [50344 2013-10-21] (AVAST Software)
S2 lxeeCATSCustConnectService; C:Windowssystem32spoolDRIVERSW32X863\lxeeserv.exe [193192 2010-04-14] (Lexmark International, Inc.)
R2 lxee_device; C:Windowssystem32lxeecoms.exe [598696 2010-04-14] ( )
R2 NishService; C:Program FilesSystem Control Manageredd.exe [40960 2006-03-22] ()
R2 ProtexisLicensing; C:Windowssystem32PSIService.exe [174656 2006-11-02] ()

==================== Drivers (Whitelisted) ====================

R2 Aspi32; C:WindowsSystem32driversaspi32.sys [16877 2002-07-17] (Adaptec)
R2 aswFsBlk; C:Windowssystem32driversaswFsBlk.sys [35656 2013-10-21] (AVAST Software)
R2 aswMonFlt; C:Windowssystem32driversaswMonFlt.sys [70384 2013-10-21] (AVAST Software)
R1 aswRdr; C:Windowssystem32driversaswRdr.sys [54832 2013-10-21] (AVAST Software)
R0 aswRvrt; C:WindowsSystem32DriversaswRvrt.sys [49944 2013-10-21] ()
R1 aswSnx; C:Windowssystem32driversaswSnx.sys [774392 2013-10-21] (AVAST Software)
R1 aswSP; C:Windowssystem32driversaswSP.sys [403440 2013-11-09] (AVAST Software)
R1 aswTdi; C:Windowssystem32driversaswTdi.sys [57672 2013-10-21] (AVAST Software)
R0 aswVmm; C:WindowsSystem32DriversaswVmm.sys [178304 2013-10-21] ()
R3 camfilt2; C:WindowsSystem32DRIVERScamfilt2.sys [94720 2007-08-06] (Guillemot Corporation)
R3 MGHwCtrl; C:Windowssystem32driversMGHwCtrl.sys [18944 2006-09-19] (Windows (R) Codename Longhorn DDK provider)
R3 ProcObsrv; C:Program FilesGlary Utilities 3ProcObsrv.sys [11552 2013-10-28] (Glarysoft Ltd)
R1 RapportCerberus_56758; C:ProgramDataTrusteerRapportstoreextsRapportCerberusbaselineRapportCerberus32_56758.sys [330960 2013-09-15] ()
R1 RapportEI; C:Program FilesTrusteerRapportbinRapportEI.sys [148688 2013-09-10] (Trusteer Ltd.)
R3 SNPSTD3; C:WindowsSystem32DRIVERSsnpstd3.sys [10371072 2007-07-17] (Sonix Co. Ltd.)
S4 blbdrive; SystemRootsystem32driversblbdrive.sys [x]
S0 BootDefragDriver; System32driversBootDefragDriver.sys [x]
S3 IpInIp; system32DRIVERSipinip.sys [x]
S3 NwlnkFlt; system32DRIVERSnwlnkflt.sys [x]
S3 NwlnkFwd; system32DRIVERSnwlnkfwd.sys [x]
S0 RapportKELL; System32DriversRapportKELL.sys [x]

==================== NetSvcs (Whitelisted) ===================

==================== One Month Created Files and Folders ========

2013-11-10 07:35 – 2013-11-10 07:35 – 00000000 ____D C:FRST
2013-11-10 07:32 – 2013-11-10 07:32 – 01089445 _____ (Farbar) C:UserssergeDesktopFRST.exe
2013-11-09 19:23 – 2013-11-09 19:23 – 00002360 _____ C:WindowsPFRO.log
2013-11-07 20:56 – 2013-11-07 20:59 – 00000000 ____D C:Program FilesIminentToolbar
2013-11-07 19:50 – 2013-11-07 19:50 – 00000000 ____D C:Program FilesSecurity Task Manager
2013-11-07 19:35 – 2013-11-07 19:35 – 00000000 ____D C:UserssergeDocumentsOptimizer Pro
2013-11-07 19:34 – 2013-11-07 19:40 – 00000000 ____D C:ProgramDataeSafe
2013-11-07 19:31 – 2013-11-07 19:31 – 00000000 _____ C:END
2013-11-07 09:15 – 2013-11-07 15:32 – 00000000 ____D C:UserssergeDocumentsmontre reponse gardé
2013-11-03 17:34 – 2013-11-03 17:34 – 00000819 _____ C:UsersPublicDesktopWinMerge.lnk
2013-11-03 17:34 – 2013-11-03 17:34 – 00000000 ____D C:Program FilesWinMerge
2013-10-31 19:50 – 2013-10-31 19:50 – 00000000 ____D C:UserssergeDesktopferdieglantine
2013-10-31 15:01 – 2013-10-31 15:02 – 00000000 ____D C:UserssergeDesktopelliot
2013-10-21 19:02 – 2013-10-21 19:02 – 00000000 ____D C:UserssergeAppDataRoamingAVAST Software
2013-10-21 18:48 – 2013-10-21 18:48 – 00000000 ____D C:UserssergeAppDataRoamingUniblue
2013-10-21 18:48 – 2013-10-21 18:48 – 00000000 ____D C:Program FilesUniblue
2013-10-21 18:47 – 2013-11-07 19:59 – 00000000 ____D C:Program FilesMyPC Backup
2013-10-21 18:47 – 2013-10-21 18:47 – 00000000 ____D C:UserssergeAppDataRoamingDealPly
2013-10-19 20:05 – 2013-10-19 20:08 – 00000000 ____D C:AdwCleaner
2013-10-19 19:23 – 2013-10-19 19:23 – 00040776 _____ (Malwarebytes Corporation) C:Windowssystem32Driversmbamswissarmy.sys
2013-10-19 19:15 – 2013-10-19 19:15 – 00000000 ____D C:UserssergeAppDataRoamingMalwarebytes
2013-10-19 19:15 – 2013-10-19 19:15 – 00000000 ____D C:ProgramDataMalwarebytes
2013-10-19 18:00 – 2013-10-19 18:00 – 00000000 ____D C:Program FilesEnigma Software Group
2013-10-19 17:58 – 2013-10-19 19:10 – 00000000 ____D C:Windows865537E164904193A4B6669C62711852.TMP
2013-10-19 16:52 – 2013-10-19 16:52 – 00000000 ____D C:Windowssystem32MRT
2013-10-19 08:58 – 2013-10-08 06:46 – 00264616 _____ (Oracle Corporation) C:Windowssystem32javaws.exe
2013-10-19 08:56 – 2013-10-08 06:50 – 00094632 _____ (Oracle Corporation) C:Windowssystem32WindowsAccessBridge.dll
2013-10-19 08:56 – 2013-10-08 06:46 – 00175016 _____ (Oracle Corporation) C:Windowssystem32javaw.exe
2013-10-19 08:56 – 2013-10-08 06:46 – 00174504 _____ (Oracle Corporation) C:Windowssystem32java.exe
2013-10-19 08:53 – 2013-10-19 08:56 – 00004249 _____ C:Windowssystem32jupdate-1.7.0_45-b18.log
2013-10-13 13:57 – 2013-10-19 23:39 – 00000000 ____D C:UserssergeAppDataRoamingSkype
2013-10-13 13:57 – 2013-10-13 13:57 – 00000000 ____D C:UserssergeAppDataLocalavgchrome
2013-10-13 13:56 – 2013-10-13 13:56 – 00001878 _____ C:UsersPublicDesktopSkype.lnk
2013-10-13 13:56 – 2013-10-13 13:56 – 00000000 ___RD C:Program FilesSkype
2013-10-13 13:56 – 2013-10-13 13:56 – 00000000 ____D C:ProgramDataSkype
2013-10-13 13:56 – 2013-10-13 13:56 – 00000000 ____D C:Program FilesCommon FilesSkype
2013-10-13 00:26 – 2013-10-13 00:26 – 00000000 ____D C:Windowssystem32searchplugins
2013-10-13 00:26 – 2013-10-13 00:26 – 00000000 ____D C:Windowssystem32Extensions
2013-10-13 00:11 – 2013-10-13 00:17 – 00000000 ____D C:UserssergeAppDataRoamingSkypeTalking
2013-10-12 23:51 – 2013-10-19 17:14 – 00000000 ____D C:UserssergeAppDataRoamingPrintatree

==================== One Month Modified Files and Folders =======

2013-11-10 07:35 – 2013-11-10 07:35 – 00000000 ____D C:FRST
2013-11-10 07:35 – 2006-11-02 12:18 – 00000000 __RHD C:UsersDefault
2013-11-10 07:34 – 2012-01-23 23:38 – 00000000 ____D C:ProgramDataLx_cats
2013-11-10 07:34 – 2006-11-02 13:45 – 00004768 ____H C:Windowssystem327B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2013-11-10 07:34 – 2006-11-02 13:45 – 00004768 ____H C:Windowssystem327B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2013-11-10 07:32 – 2013-11-10 07:32 – 01089445 _____ (Farbar) C:UserssergeDesktopFRST.exe
2013-11-10 07:28 – 2012-01-24 19:32 – 00013025 _____ C:UserssergeAppDataRoamingnvModes.001
2013-11-10 07:28 – 2012-01-24 18:51 – 00013025 _____ C:UserssergeAppDataRoamingnvModes.dat
2013-11-10 07:20 – 2006-11-02 13:49 – 02076403 _____ C:WindowsWindowsUpdate.log
2013-11-09 19:58 – 2013-02-20 09:51 – 00001002 _____ C:WindowsTasksAdobe Flash Player Updater.job
2013-11-09 19:31 – 2006-11-02 11:33 – 01495948 _____ C:Windowssystem32PerfStringBackup.INI
2013-11-09 19:28 – 2012-01-24 10:19 – 00403440 _____ (AVAST Software) C:Windowssystem32Driversaswsp.sys
2013-11-09 19:26 – 2013-08-15 22:41 – 00000320 _____ C:WindowsTasksGlaryInitialize 3.job
2013-11-09 19:26 – 2013-08-15 22:41 – 00000000 ____D C:Program FilesGlary Utilities 3
2013-11-09 19:26 – 2012-01-24 01:03 – 00000312 _____ C:WindowsTasksGlaryInitialize.job
2013-11-09 19:24 – 2012-01-23 23:29 – 00043187 _____ C:ProgramDatalxeescan.log
2013-11-09 19:23 – 2013-11-09 19:23 – 00002360 _____ C:WindowsPFRO.log
2013-11-09 19:23 – 2012-11-08 19:33 – 00001050 _____ C:WindowsTasksGoogleUpdateTaskMachineCore.job
2013-11-09 19:23 – 2006-11-02 13:58 – 00000006 ____H C:WindowsTasksSA.DAT
2013-11-09 19:22 – 2006-11-02 13:58 – 00032618 _____ C:WindowsTasksSCHEDLGU.TXT
2013-11-09 18:13 – 2012-11-08 19:33 – 00001054 _____ C:WindowsTasksGoogleUpdateTaskMachineUA.job
2013-11-08 17:37 – 2012-11-08 19:35 – 00001981 _____ C:UsersPublicDesktopGoogle Chrome.lnk
2013-11-07 20:59 – 2013-11-07 20:56 – 00000000 ____D C:Program FilesIminentToolbar
2013-11-07 20:58 – 2013-04-12 18:04 – 00001833 _____ C:Windowssystem32InstallUtil.InstallLog
2013-11-07 20:20 – 2013-07-28 14:15 – 00000000 ____D C:ProgramDataSecTaskMan
2013-11-07 20:13 – 2012-01-25 17:38 – 00091178 _____ C:ProgramDatalxeeJSW.log
2013-11-07 19:59 – 2013-10-21 18:47 – 00000000 ____D C:Program FilesMyPC Backup
2013-11-07 19:50 – 2013-11-07 19:50 – 00000000 ____D C:Program FilesSecurity Task Manager
2013-11-07 19:40 – 2013-11-07 19:34 – 00000000 ____D C:ProgramDataeSafe
2013-11-07 19:35 – 2013-11-07 19:35 – 00000000 ____D C:UserssergeDocumentsOptimizer Pro
2013-11-07 19:33 – 2012-09-30 13:59 – 00001009 _____ C:UserssergeDesktopInternet Explorer.lnk
2013-11-07 19:33 – 2012-01-23 22:41 – 00001171 _____ C:UserssergeAppDataRoamingMicrosoftWindowsStart MenuProgramsInternet Explorer.lnk
2013-11-07 19:31 – 2013-11-07 19:31 – 00000000 _____ C:END
2013-11-07 15:53 – 2012-02-23 17:23 – 00002814 _____ C:ProgramDatalxeeDiagnostics.log
2013-11-07 15:32 – 2013-11-07 09:15 – 00000000 ____D C:UserssergeDocumentsmontre reponse gardé
2013-11-07 08:57 – 2012-01-23 22:40 – 00000680 _____ C:UserssergeAppDataLocald3d9caps.dat
2013-11-05 13:41 – 2012-01-24 01:20 – 00000000 ____D C:UserssergeAppDataRoamingXnView
2013-11-03 17:34 – 2013-11-03 17:34 – 00000819 _____ C:UsersPublicDesktopWinMerge.lnk
2013-11-03 17:34 – 2013-11-03 17:34 – 00000000 ____D C:Program FilesWinMerge
2013-11-03 17:21 – 2013-08-15 22:42 – 00000887 _____ C:UsersPublicDesktopGlary Utilities 3.lnk
2013-10-31 19:50 – 2013-10-31 19:50 – 00000000 ____D C:UserssergeDesktopferdieglantine
2013-10-31 15:02 – 2013-10-31 15:01 – 00000000 ____D C:UserssergeDesktopelliot
2013-10-28 09:38 – 2013-08-15 22:42 – 00101664 _____ (Glarysoft Ltd) C:Windowssystem32BootDefrag.exe
2013-10-26 10:01 – 2012-01-23 22:39 – 00000000 ___RD C:UserssergeFAV SUPP
2013-10-21 19:02 – 2013-10-21 19:02 – 00000000 ____D C:UserssergeAppDataRoamingAVAST Software
2013-10-21 18:48 – 2013-10-21 18:48 – 00000000 ____D C:UserssergeAppDataRoamingUniblue
2013-10-21 18:48 – 2013-10-21 18:48 – 00000000 ____D C:Program FilesUniblue
2013-10-21 18:47 – 2013-10-21 18:47 – 00000000 ____D C:UserssergeAppDataRoamingDealPly
2013-10-21 18:45 – 2013-03-06 09:59 – 00178304 _____ C:Windowssystem32DriversaswVmm.sys
2013-10-21 18:45 – 2013-03-06 09:59 – 00049944 _____ C:Windowssystem32DriversaswRvrt.sys
2013-10-21 18:45 – 2012-01-24 10:19 – 00774392 _____ (AVAST Software) C:Windowssystem32DriversaswSnx.sys
2013-10-21 18:45 – 2012-01-24 10:19 – 00403440 _____ (AVAST Software) C:Windowssystem32Driversaswsp.sys.1384021692
2013-10-21 18:45 – 2012-01-24 10:19 – 00070384 _____ (AVAST Software) C:Windowssystem32DriversaswMonFlt.sys
2013-10-21 18:45 – 2012-01-24 10:19 – 00057672 _____ (AVAST Software) C:Windowssystem32DriversaswTdi.sys
2013-10-21 18:45 – 2012-01-24 10:19 – 00054832 _____ (AVAST Software) C:Windowssystem32DriversaswRdr.sys
2013-10-21 18:45 – 2012-01-24 10:19 – 00043152 _____ (AVAST Software) C:WindowsavastSS.scr
2013-10-21 18:45 – 2012-01-24 10:19 – 00035656 _____ (AVAST Software) C:Windowssystem32DriversaswFsBlk.sys
2013-10-21 18:45 – 2012-01-24 10:18 – 00269216 _____ (AVAST Software) C:Windowssystem32aswBoot.exe
2013-10-21 18:34 – 2012-01-24 10:18 – 00000000 ____D C:ProgramDataAVAST Software
2013-10-21 18:33 – 2006-11-02 11:23 – 00002577 _____ C:Windowssystem32config.nt
2013-10-19 23:39 – 2013-10-13 13:57 – 00000000 ____D C:UserssergeAppDataRoamingSkype
2013-10-19 20:08 – 2013-10-19 20:05 – 00000000 ____D C:AdwCleaner
2013-10-19 20:07 – 2012-06-15 14:50 – 00000000 ____D C:Program FilesMozilla Firefox
2013-10-19 19:23 – 2013-10-19 19:23 – 00040776 _____ (Malwarebytes Corporation) C:Windowssystem32Driversmbamswissarmy.sys
2013-10-19 19:21 – 2012-01-23 22:39 – 00000000 ____D C:Usersserge
2013-10-19 19:15 – 2013-10-19 19:15 – 00000000 ____D C:UserssergeAppDataRoamingMalwarebytes
2013-10-19 19:15 – 2013-10-19 19:15 – 00000000 ____D C:ProgramDataMalwarebytes
2013-10-19 19:10 – 2013-10-19 17:58 – 00000000 ____D C:Windows865537E164904193A4B6669C62711852.TMP
2013-10-19 18:00 – 2013-10-19 18:00 – 00000000 ____D C:Program FilesEnigma Software Group
2013-10-19 17:58 – 2013-07-28 19:27 – 00000000 ____D C:Program FilesCommon FilesWise Installation Wizard
2013-10-19 17:14 – 2013-10-12 23:51 – 00000000 ____D C:UserssergeAppDataRoamingPrintatree
2013-10-19 16:52 – 2013-10-19 16:52 – 00000000 ____D C:Windowssystem32MRT
2013-10-19 08:58 – 2013-09-21 12:51 – 00000000 ____D C:ProgramDataOracle
2013-10-19 08:56 – 2013-10-19 08:53 – 00004249 _____ C:Windowssystem32jupdate-1.7.0_45-b18.log
2013-10-19 08:56 – 2013-03-07 10:15 – 00000000 ____D C:Program FilesJava
2013-10-13 13:57 – 2013-10-13 13:57 – 00000000 ____D C:UserssergeAppDataLocalavgchrome
2013-10-13 13:56 – 2013-10-13 13:56 – 00001878 _____ C:UsersPublicDesktopSkype.lnk
2013-10-13 13:56 – 2013-10-13 13:56 – 00000000 ___RD C:Program FilesSkype
2013-10-13 13:56 – 2013-10-13 13:56 – 00000000 ____D C:ProgramDataSkype
2013-10-13 13:56 – 2013-10-13 13:56 – 00000000 ____D C:Program FilesCommon FilesSkype
2013-10-13 00:26 – 2013-10-13 00:26 – 00000000 ____D C:Windowssystem32searchplugins
2013-10-13 00:26 – 2013-10-13 00:26 – 00000000 ____D C:Windowssystem32Extensions
2013-10-13 00:17 – 2013-10-13 00:11 – 00000000 ____D C:UserssergeAppDataRoamingSkypeTalking

Files to move or delete:
====================
C:ProgramDatapswi_preloaded.exe
C:WindowsTasksAt1.job

Some content of TEMP:
====================
C:UserssergeAppDataLocalTempgusetup4.exe
C:UserssergeAppDataLocalTempJava[1].exe

==================== Bamital & volsnap Check =================

C:Windowsexplorer.exe => MD5 is legit
C:WindowsSystem32winlogon.exe => MD5 is legit
C:WindowsSystem32wininit.exe => MD5 is legit
C:WindowsSystem32svchost.exe => MD5 is legit
C:WindowsSystem32services.exe => MD5 is legit
C:WindowsSystem32User32.dll => MD5 is legit
C:WindowsSystem32userinit.exe => MD5 is legit
C:WindowsSystem32Driversvolsnap.sys => MD5 is legit

LastRegBack: 2013-11-10 07:33

=# AdwCleaner v3.011 – Rapport créé le 10/11/2013 à 07:52:40
# Mis à jour le 03/11/2013 par Xplode
# Système d’exploitation : Windows Vista (TM) Home Basic Service Pack 1 (32 bits)
# Nom d’utilisateur : serge – PC-DE-SERGE
# Exécuté depuis : C:UserssergeAppDataLocalMicrosoftWindowsTemporary Internet FilesContent.IE5KZI53XCLadwcleaner[1].exe
# Option : Nettoyer

***** [ Services ] *****

***** [ Fichiers / Dossiers ] *****

Dossier Supprimé : C:ProgramDataeSafe
Dossier Supprimé : C:Program FilesIminentToolbar
Dossier Supprimé : C:Program FilesMyPC Backup
Dossier Supprimé : C:Program FilesUniblueSpeedUpMyPC
Dossier Supprimé : C:UserssergeAppDataLocalTempglindorus
Dossier Supprimé : C:UserssergeAppDataLocalTempSaltarSmart
Dossier Supprimé : C:UserssergeAppDataLocalLowSimplyTech
Dossier Supprimé : C:UserssergeAppDataRoamingDealPly
Dossier Supprimé : C:UserssergeAppDataRoamingUniblueSpeedUpMyPC
Dossier Supprimé : C:UserssergeDocumentsoptimizer pro
Dossier Supprimé : C:UserssergeAppDataRoamingMozillaFirefoxProfiles1kcym20r.defaultExtensionszulagames@ZulaGames.com
Dossier Supprimé : C:UserssergeAppDataLocalGoogleChromeUser DataDefaultExtensionsifohbjbgfchkkfhphahclmkpgejiplfo
Fichier Supprimé : C:UserssergeAppDataRoamingMozillaFirefoxProfiles1kcym20r.defaultExtensionswebbooster@iminent.com.xpi
Fichier Supprimé : C:END
Fichier Supprimé : C:UserssergeAppDataRoamingMozillaFirefoxProfiles1kcym20r.defaultsearchpluginsiminent.xml
Fichier Supprimé : C:UserssergeAppDataRoamingMozillaFirefoxProfiles1kcym20r.defaultuser.js
Fichier Supprimé : C:UserssergeAppDataRoamingMozillaFirefoxProfilesthmodhmy.defaultuser.js
Fichier Supprimé : C:UserssergeAppDataLocalGoogleChromeUser DataDefaultLocal Storagechrome-extension_igdhbblpcellaljokkpfhcjlagemhgjl_0.localstorage
Fichier Supprimé : C:WindowsSystem32TasksDealply

***** [ Raccourcis ] *****

***** [ Registre ] *****

Clé Supprimée : HKLMSOFTWAREGoogleChromeExtensionsifohbjbgfchkkfhphahclmkpgejiplfo
[#] Clé Supprimée : HKLMSOFTWAREMicrosoftWindows NTCurrentVersionScheduleTaskCachePlain{35B55025-3312-41C8-8781-A76DFB73026B}
[#] Clé Supprimée : HKLMSOFTWAREMicrosoftWindows NTCurrentVersionScheduleTaskCacheTasks{35B55025-3312-41C8-8781-A76DFB73026B}
Clé Supprimée : HKLMSYSTEMCurrentControlSetServicesEventlogApplicationWsysSvc
Clé Supprimée : HKLMSOFTWAREClassesAppID{4277F7CF-0000-46CF-BA49-D624465C4BAB}
Clé Supprimée : HKLMSOFTWAREClassesCLSID{02054E11-5113-4BE3-8153-AA8DFB5D3761}
Clé Supprimée : HKLMSOFTWAREClassesCLSID{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Clé Supprimée : HKLMSOFTWAREClassesCLSID{AF175732-0D59-716D-F757-9F1492D808D9}
Clé Supprimée : HKLMSOFTWAREClassesInterface{021B4049-F57D-4565-A693-FD3B04786BFA}
Clé Supprimée : HKLMSOFTWAREClassesInterface{0362AA09-808D-48E9-B360-FB51A8CBCE09}
Clé Supprimée : HKLMSOFTWAREClassesInterface{06844020-CD0B-3D3D-A7FE-371153013E49}
Clé Supprimée : HKLMSOFTWAREClassesInterface{0ADC01BB-303B-3F8E-93DA-12C140E85460}
Clé Supprimée : HKLMSOFTWAREClassesInterface{10D3722F-23E6-3901-B6C1-FF6567121920}
Clé Supprimée : HKLMSOFTWAREClassesInterface{1675E62B-F911-3B7B-A046-EB57261212F3}
Clé Supprimée : HKLMSOFTWAREClassesInterface{192929F2-9273-3894-91B0-F54671C4C861}
Clé Supprimée : HKLMSOFTWAREClassesInterface{2932897E-3036-43D9-8A64-B06447992065}
Clé Supprimée : HKLMSOFTWAREClassesInterface{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
Clé Supprimée : HKLMSOFTWAREClassesInterface{32B80AD6-1214-45F4-994E-78A5D482C000}
Clé Supprimée : HKLMSOFTWAREClassesInterface{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
Clé Supprimée : HKLMSOFTWAREClassesInterface{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
Clé Supprimée : HKLMSOFTWAREClassesInterface{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
Clé Supprimée : HKLMSOFTWAREClassesInterface{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
Clé Supprimée : HKLMSOFTWAREClassesInterface{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
Clé Supprimée : HKLMSOFTWAREClassesInterface{641593AF-D9FD-30F7-B783-36E16F7A2E08}
Clé Supprimée : HKLMSOFTWAREClassesInterface{711FC48A-1356-3932-94D8-A8B733DBC7E4}
Clé Supprimée : HKLMSOFTWAREClassesInterface{72227B7F-1F02-3560-95F5-592E68BACC0C}
Clé Supprimée : HKLMSOFTWAREClassesInterface{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
Clé Supprimée : HKLMSOFTWAREClassesInterface{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
Clé Supprimée : HKLMSOFTWAREClassesInterface{8C68913C-AC3C-4494-8B9C-984D87C85003}
Clé Supprimée : HKLMSOFTWAREClassesInterface{8D019513-083F-4AA5-933F-7D43A6DA82C4}
Clé Supprimée : HKLMSOFTWAREClassesInterface{923F6FB8-A390-370E-A0D2-DD505432481D}
Clé Supprimée : HKLMSOFTWAREClassesInterface{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
Clé Supprimée : HKLMSOFTWAREClassesInterface{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
Clé Supprimée : HKLMSOFTWAREClassesInterface{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
Clé Supprimée : HKLMSOFTWAREClassesInterface{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
Clé Supprimée : HKLMSOFTWAREClassesInterface{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
Clé Supprimée : HKLMSOFTWAREClassesInterface{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
Clé Supprimée : HKLMSOFTWAREClassesInterface{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
Clé Supprimée : HKLMSOFTWAREClassesInterface{D16107CD-2AD5-46A8-BA59-303B7C32C500}
Clé Supprimée : HKLMSOFTWAREClassesInterface{D25B101F-8188-3B43-9D85-201F372BC205}
Clé Supprimée : HKLMSOFTWAREClassesInterface{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
Clé Supprimée : HKLMSOFTWAREClassesInterface{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
Clé Supprimée : HKLMSOFTWAREClassesInterface{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
Clé Supprimée : HKLMSOFTWAREClassesInterface{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
Clé Supprimée : HKLMSOFTWAREClassesInterface{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
Clé Supprimée : HKLMSOFTWAREClassesInterface{E1B4C9DE-D741-385F-981E-6745FACE6F01}
Clé Supprimée : HKLMSOFTWAREClassesInterface{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
Clé Supprimée : HKLMSOFTWAREClassesInterface{ED916A7B-7C68-3198-B87D-2DABC30A5587}
Clé Supprimée : HKLMSOFTWAREClassesInterface{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
Clé Supprimée : HKLMSOFTWAREClassesInterface{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
Clé Supprimée : HKLMSOFTWAREClassesInterface{FC32005D-E27C-32E0-ADFA-152F598B75E7}
Clé Supprimée : HKLMSOFTWAREClassesTypeLib{2BF2028E-3F3C-4C05-AB45-B2F1DCFE0759}
Clé Supprimée : HKLMSOFTWAREClassesTypeLib{DB538320-D3C5-433C-BCA9-C4081A054FCF}
Clé Supprimée : HKLMSOFTWAREMicrosoftInternet ExplorerLow RightsElevationPolicy{68B81CCD-A80C-4060-8947-5AE69ED01199}
Clé Supprimée : HKLMSOFTWAREMicrosoftInternet ExplorerLow RightsElevationPolicy{E6B969FB-6D33-48D2-9061-8BBD4899EB08}
Clé Supprimée : HKCUSoftwareMicrosoftInternet ExplorerSearchScopes{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Clé Supprimée : HKLMSOFTWAREMicrosoftInternet ExplorerSearchScopes{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Clé Supprimée : HKCUSoftwareAppDataLow{1146AC44-2F03-4431-B4FD-889BC837521F}
Clé Supprimée : HKCUSoftwareAppDataLowSoftwareCrossrider
Clé Supprimée : HKLMSoftware{6791A2F3-FC80-475C-A002-C014AF797E9C}
Clé Supprimée : HKLMSoftwareIminent
Clé Supprimée : HKLMSoftwareUniblueSpeedUpMyPC
Clé Supprimée : HKCUSoftwareMicrosoftWindowsCurrentVersionApp ManagementARPCacheDealPly
Clé Supprimée : HKCUSoftwareMicrosoftWindowsCurrentVersionApp ManagementARPCacheIMBoosterARP
Clé Supprimée : HKCUSoftwareMicrosoftWindowsCurrentVersionApp ManagementARPCacheIminent
Clé Supprimée : HKCUSoftwareMicrosoftWindowsCurrentVersionApp ManagementARPCacheMyPC Backup
Clé Supprimée : HKCUSoftwareMicrosoftWindowsCurrentVersionApp ManagementARPCacheSaltarSmart
Clé Supprimée : HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components238BBE24EA3A70408B81E4BB89C15E5
Clé Supprimée : HKLMSoftwareMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components29799DE249E7DBC459FC6C8F07EB8375

***** [ Navigateurs ] *****

-\ Internet Explorer v8.0.6001.19088

-\ Mozilla Firefox v

[ Fichier : C:UserssergeAppDataRoamingMozillaFirefoxProfiles1kcym20r.defaultprefs.js ]

[ Fichier : C:UserssergeAppDataRoamingMozillaFirefoxProfilesthmodhmy.defaultprefs.js ]

-\ Google Chrome v30.0.1599.101

[ Fichier : C:UserssergeAppDataLocalGoogleChromeUser DataDefaultpreferences ]

*************************

AdwCleaner[R0].txt – [27447 octets] – [19/10/2013 20:06:04]
AdwCleaner[R1].txt – [8888 octets] – [10/11/2013 07:50:38]
AdwCleaner[S0].txt – [26960 octets] – [19/10/2013 20:07:46]
AdwCleaner[S1].txt – [8956 octets] – [10/11/2013 07:52:40]

########## EOF – C:AdwCleanerAdwCleaner[S1].txt – [9016 octets] ##########
=================== End Of Log ============================