[Réglé] virus sur ma clef • page 2

Raptor14 · le 07 Aoû 2013 15:00

Bonjour,

Et ben ça faisait longtemps que j'avais pas vu un ordinateur infecté de cette manière :oops:

Copie les lignes ci dessous :

Code: Tout sélectionner: SysRestore [MD5.864D4FA534573C798493C814AE2C69DF] - (...) -- C:\Users\Fanny\AppData\Local\startertv_fr_8\upstv_fr_8.exe [3151360] [PID.1688] =>Adware.StarterTV [MD5.3FDA44B9641C876CE777B10DBCA7BDF5] - (...) -- C:\Program Files (x86)\startertv_fr_8\startertv_fr_8.exe [3975680] [PID.4840] =>Adware.StarterTV M2 - MFEP: prefs.js [Fanny - djhmxkfl.default\jid1-FCM5fDwCW5M3AQ@jetpack] [] Smart Display v1.2 (..) =>Spyware.SmartDisplay M2 - MFEP: prefs.js [Fanny - djhmxkfl.default\{e53a26f5-7199-4a5b-86f5-d2e86854b979}] [] DealPly Shopping v2.0 (..) =>PUP.DealPly O2 - BHO: DealPly Shopping [64Bits] - {9cf699ca-2174-4ed8-bec1-ba82095edce0} . (...) -- C:\Program Files (x86)\DealPly\DealPlyIE.dll (.not file.) =>PUP.DealPly O4 - HKCU\..\Run: [NTRedirect] . (...) -- C:\Users\Fanny\AppData\Roaming\BabSolution\Shared\NTRedirect.dll =>Hijacker.BabSolution O4 - HKLM\..\Wow6432Node\Run: [startertv_fr_8] . (...) -- C:\Program Files (x86)\startertv_fr_8\startertv_fr_8.exe =>Adware.StarterTV O4 - HKLM\..\Wow6432Node\RunOnce: [upstv_fr_8.exe] . (...) -- C:\Users\Fanny\AppData\Local\startertv_fr_8\upstv_fr_8.exe =>Adware.StarterTV O4 - HKUS\S-1-5-21-2168297078-1489965089-1319381818-1001\..\Run: [NTRedirect] . (...) -- C:\Users\Fanny\AppData\Roaming\BabSolution\Shared\NTRedirect.dll =>Hijacker.BabSolution O23 - Service: Service DealPly Live (dealplylive) (dealplylive) . (...) - C:\Program Files (x86)\DealPlyLive\Update\DealPlyLive.exe (.not file.) =>PUP.DealPly O23 - Service: Service Software Update (Software_update (Software_update) . (...) - C:\Program Files (x86)\Software\Update\SoftwareUpdate.exe (.not file.) O23 - Service: Wsys Service (WsysSvc) . (.Wsys Co., Ltd. - Wsys Control 1.0.0.2598.) - C:\ProgramData\eSafe\eGdpSvc.exe =>PUP.eSafeSecurity O39 - APT:Automatic Planified Task - C:\Windows\Tasks\DealPlyLiveUpdateTaskMachineCore.job [912] =>PUP.DealPly O39 - APT:Automatic Planified Task - C:\Windows\Tasks\DealPlyLiveUpdateTaskMachineUA.job [916] =>PUP.DealPly [MD5.00000000000000000000000000000000] [APT] [DealPlyLiveUpdateTaskMachineCore] (...) -- C:\Program Files (x86)\DealPlyLive\Update\DealPlyLive.exe (.not file.) [0] =>PUP.DealPly [MD5.00000000000000000000000000000000] [APT] [DealPlyLiveUpdateTaskMachineUA] (...) -- C:\Program Files (x86)\DealPlyLive\Update\DealPlyLive.exe (.not file.) [0] =>PUP.DealPly [MD5.00000000000000000000000000000000] [APT] [DealPlyUpdate] (...) -- C:\Program Files (x86)\DealPly\DealPlyUpdate.exe (.not file.) [0] =>PUP.DealPly [MD5.00000000000000000000000000000000] [APT] [Desk 365 RunAsStdUser] (...) -- C:\Program Files (x86)\Desk 365\desk365.exe (.not file.) [0] =>Hijacker.22Find [MD5.00000000000000000000000000000000] [APT] [EPUpdater] (...) -- C:\Users\Fanny\AppData\Roaming\BABSOL~1\Shared\BabMaint.exe (.not file.) [0] =>Hijacker.BabSolution O42 - Logiciel: Boxore Client - (.Boxore OU.) [HKLM][64Bits] -- {0F36B254-FB44-4859-8917-83778F120A7C} =>Adware.Boxore O42 - Logiciel: Wsys Control 1.0.0.2598 - (.Wsys Co., Ltd..) [HKLM][64Bits] -- WsysControl =>PUP.eSafeSecurity O42 - Logiciel: startertv_fr_8 - (.TUTO4PC.) [HKLM][64Bits] -- startertv_fr_8_is1 =>Adware.StarterTV [HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}] [HKCU\Software\DealPlyLive] =>PUP.DealPly [HKCU\Software\Tutorials] =>Spyware.AgenceExcusive [HKLM\Software\Wow6432Node\DealPlyLive] =>PUP.DealPly [HKLM\Software\Wow6432Node\Tutorials] =>Spyware.AgenceExcusive [HKLM\Software\Wow6432Node\eSafeSecControl] =>PUP.eSafeSecurity O43 - CFD: 06/08/2013 - 13:37:58 - [4,507] ----D C:\Program Files (x86)\startertv_fr_8 =>Adware.StarterTV O43 - CFD: 07/08/2013 - 00:40:29 - [0,122] ----D C:\Users\Fanny\AppData\Roaming\BabSolution =>Hijacker.BabSolution O43 - CFD: 07/08/2013 - 00:47:56 - [0,000] ----D C:\Users\Fanny\AppData\Local\eorezo =>PUP.Eorezo O43 - CFD: 06/08/2013 - 13:32:09 - [0] ----D C:\Users\Fanny\AppData\Local\Software O43 - CFD: 07/08/2013 - 02:03:05 - [5,823] ----D C:\Users\Fanny\AppData\Local\startertv_fr_8 =>Adware.StarterTV O45 - LFCP:[MD5.8D4B7E7FF713DE26C13D67AF28526128] - 06/08/2013 - 00:15:07 ---A- - C:\Windows\Prefetch\SPEEDUPMYPCFR_P2V0.EXE-A747645D.pf =>Rogue SpeedUpMyPC O45 - LFCP:[MD5.8A93CCF283175AACBC087D75CF654019] - 06/08/2013 - 00:15:08 ---A- - C:\Windows\Prefetch\SPEEDUPMYPCFR.EXE-3633C25A.pf =>Rogue SpeedUpMyPC O45 - LFCP:[MD5.E33228AC084F4A305764FF679C3FD42D] - 06/08/2013 - 00:15:09 ---A- - C:\Windows\Prefetch\SPEEDUPMYPCFR.TMP-E867D609.pf =>Rogue SpeedUpMyPC O45 - LFCP:[MD5.B11E19053CFAAEFF5AFE5852870E4E52] - 06/08/2013 - 00:33:53 ---A- - C:\Windows\Prefetch\NSB1_AR_201372915513_QVO6.EXE-BF26360A.pf =>Hijacker.Qvo6 O45 - LFCP:[MD5.24F078F9EBDC61FFD30571A3F7157B0E] - 06/08/2013 - 00:34:22 ---A- - C:\Windows\Prefetch\EXQ.EXE-23FD1D93.pf O45 - LFCP:[MD5.FE4C77607552B06FB17714D599C6A496] - 06/08/2013 - 00:34:25 ---A- - C:\Windows\Prefetch\DESK365.EXE-62BEA6A6.pf =>Hijacker.22Find O45 - LFCP:[MD5.FFC2826AD2E217093328207BAE256C3D] - 06/08/2013 - 00:34:33 ---A- - C:\Windows\Prefetch\EGDPSVC.EXE-FC3AF7B1.pf O45 - LFCP:[MD5.07164C84F7CA2463B1F3FA7DE82A6F03] - 06/08/2013 - 00:34:43 ---A- - C:\Windows\Prefetch\EGDPSVC.EXE-F16FB9B3.pf O45 - LFCP:[MD5.F808544925D281E75DD3B01A5BE4720A] - 06/08/2013 - 00:34:43 ---A- - C:\Windows\Prefetch\OPTIMIZERPRO.EXE-49D3D773.pf =>PUP.OptimizerPro O45 - LFCP:[MD5.3934D0979A93CF99866542B872248F95] - 06/08/2013 - 00:34:44 ---A- - C:\Windows\Prefetch\OPTIMIZER_PRO.EXE-4C1451C5.pf =>PUP.OptimizerPro O45 - LFCP:[MD5.BFC1A59540BF6F3A5EE811FDF6010F3F] - 06/08/2013 - 00:34:45 ---A- - C:\Windows\Prefetch\OPTIMIZER_PRO.TMP-DC87B1F7.pf =>PUP.OptimizerPro O45 - LFCP:[MD5.D31E3BC387C5FC5D261F91B7ED60D86A] - 06/08/2013 - 00:34:55 ---A- - C:\Windows\Prefetch\OPTPROSTART.EXE-65F7E6B1.pf O45 - LFCP:[MD5.C7126FC616C42C457C59BD6219270A73] - 06/08/2013 - 00:35:00 ---A- - C:\Windows\Prefetch\PRICEPEEP2.EXE-1523D952.pf =>Adware.PricePeep O45 - LFCP:[MD5.4A7AFF6DA6C10B15BEF41E13AF46C9FB] - 06/08/2013 - 00:35:03 ---A- - C:\Windows\Prefetch\PRICEPEEP_1.EXE-16050208.pf =>Adware.PricePeep O45 - LFCP:[MD5.9F958BD5FD5982E5E40771F332582CC1] - 06/08/2013 - 12:12:41 ---A- - C:\Windows\Prefetch\DESK365.EXE-6062C485.pf =>Hijacker.22Find O45 - LFCP:[MD5.5E1A39AB5356D35871375B34AA83B0AC] - 06/08/2013 - 12:12:59 ---A- - C:\Windows\Prefetch\IMINENT.MESSENGERS.EXE-71459735.pf =>Adware.IMBooster O45 - LFCP:[MD5.AFEA5BE2743F60904C5F05C8E5A87E9F] - 06/08/2013 - 12:32:15 ---A- - C:\Windows\Prefetch\OBBOXORE_0307-76302122.EXE-5B5E5D26.pf =>Adware.Boxore O45 - LFCP:[MD5.DBEDB1A9BF4F55B75AEA59301DE0FE6A] - 06/08/2013 - 12:32:17 ---A- - C:\Windows\Prefetch\BOXOREINSTALLER.EXE-1EC10460.pf =>Adware.Boxore O45 - LFCP:[MD5.B213C08AF61045C71078B08668833E0C] - 06/08/2013 - 12:37:56 ---A- - C:\Windows\Prefetch\MYSEARCHDIALSRV.EXE-A839824E.pf =>Adware.MyWebSearch O45 - LFCP:[MD5.4D9A934B33C6AF6DBB9D1E0ED2B26886] - 06/08/2013 - 12:38:05 ---A- - C:\Windows\Prefetch\STARTERTV_FR_8_0208-2D491B15.-4D4AB88B.pf =>Adware.StarterTV O45 - LFCP:[MD5.827F44972A0C759E1C662F1A409F8E58] - 06/08/2013 - 12:38:05 ---A- - C:\Windows\Prefetch\STARTERTV_FR_8_0208-2D491B15.-60A38760.pf =>Adware.StarterTV O45 - LFCP:[MD5.B5883192C48545354F659B91F46C573D] - 06/08/2013 - 12:38:29 ---A- - C:\Windows\Prefetch\MYSEARCHDIALUPDATE.EXE-4B084BD6.pf =>Adware.MyWebSearch O45 - LFCP:[MD5.E8DD81E9A56D1CBD768E5AFE4A72EA77] - 06/08/2013 - 12:38:36 ---A- - C:\Windows\Prefetch\MYSEARCHDIAL_0506-D4DBDD2B.EX-329E5B10.pf =>Adware.MyWebSearch O45 - LFCP:[MD5.3F8E52DE08CC59842E80AB895E2E33B4] - 06/08/2013 - 12:42:22 ---A- - C:\Windows\Prefetch\OPTIMIZERPRO.EXE-FA03D2EB.pf =>PUP.OptimizerPro O45 - LFCP:[MD5.BF7EBA5308C00DF17B9AC468BC875D0C] - 06/08/2013 - 13:01:06 ---A- - C:\Windows\Prefetch\DEALPLYUPDATEVER.EXE-E9FBE2E6.pf =>PUP.DealPly O45 - LFCP:[MD5.D94F35931F1D571CF16CDC555D8B20D8] - 06/08/2013 - 13:01:18 ---A- - C:\Windows\Prefetch\DEALPLYLIVE.EXE-774DC0FA.pf =>PUP.DealPly O45 - LFCP:[MD5.88F3772B3610C87AF3E7733ED8D8C2AB] - 06/08/2013 - 13:01:21 ---A- - C:\Windows\Prefetch\DEALPLYLIVE.EXE-BB09DCE6.pf =>PUP.DealPly O45 - LFCP:[MD5.8485111D230A7C8808C3117112078976] - 06/08/2013 - 13:01:24 ---A- - C:\Windows\Prefetch\BABMAINT.EXE-0EF18BCA.pf =>Hijacker.BabSolution O45 - LFCP:[MD5.ABF8A56A828FA4A4B0D23CEC779C899A] - 06/08/2013 - 13:03:02 ---A- - C:\Windows\Prefetch\BPROTECT.EXE-F13E6610.pf O45 - LFCP:[MD5.0DBF1F5113D6FCA0C6A121A7578101B3] - 06/08/2013 - 14:34:31 ---A- - C:\Windows\Prefetch\DESKSVC.EXE-3D53060B.pf O45 - LFCP:[MD5.0564F15A107FC8901420303A60246C98] - 06/08/2013 - 14:34:54 ---A- - C:\Windows\Prefetch\BOOTSTRAPPER.EXE-A76488EF.pf O45 - LFCP:[MD5.1C45D3759840A9FB86CD8D27F8282C0C] - 06/08/2013 - 16:33:15 ---A- - C:\Windows\Prefetch\IMINENT.EXE-DDB5429B.pf =>Adware.IMBooster O45 - LFCP:[MD5.B23F32A2AEB0AC3BE86324B60E8C97CC] - 06/08/2013 - 16:40:51 ---A- - C:\Windows\Prefetch\BROWSERDEFENDER.EXE-B32D890A.pf =>Hijacker.Eazel O45 - LFCP:[MD5.BE1A506E75BB92F1F6BA18D42C3D41DE] - 06/08/2013 - 16:45:05 ---A- - C:\Windows\Prefetch\DEALPLYLIVEHANDLER.EXE-5C4141A5.pf =>PUP.DealPly O45 - LFCP:[MD5.C82BF8ED988EB4858FF66A2D045E2931] - 06/08/2013 - 16:45:07 ---A- - C:\Windows\Prefetch\SOFTWARECRASHHANDLER.EXE-5F240164.pf O45 - LFCP:[MD5.7D71812BDCFBC95804222116781D52D9] - 06/08/2013 - 23:06:08 ---A- - C:\Windows\Prefetch\DEALPLYLIVE.EXE-24881C14.pf =>PUP.DealPly O45 - LFCP:[MD5.CAB33F816636F16DC5EF162A7D6A14D8] - 06/08/2013 - 23:40:20 ---A- - C:\Windows\Prefetch\BOXORE.EXE-666CD123.pf =>Adware.Boxore O45 - LFCP:[MD5.FC74B86F6768E266133D153BBAD8035A] - 07/08/2013 - 01:00:38 ---A- - C:\Windows\Prefetch\STARTERTV_FR_8.EXE-75C5AF4D.pf =>Adware.StarterTV O61 - LFC: 04/08/2013 - 15:04:57 ---A- C:\Users\Fanny\AppData\Local\Temp\ECB9D0AD-BAB0-7891-8E83-CA3C50F22DA6\Latest\BabMaint.exe [10224] =>Hijacker.BabSolution O61 - LFC: 04/08/2013 - 15:04:58 ---A- C:\Users\Fanny\AppData\Roaming\BabSolution\Shared\NTRedirect.dll [127472] =>Hijacker.BabSolution O61 - LFC: 06/08/2013 - 00:34:57 ---A- C:\Users\Fanny\AppData\Local\Temp\pricepeep_1.exe [589776] =>Adware.PricePeep O61 - LFC: 06/08/2013 - 12:29:46 ---A- C:\Users\Fanny\Downloads\Setup.exe [288696] O61 - LFC: 06/08/2013 - 12:37:55 ---A- C:\Users\Fanny\AppData\Local\mysearchdial_speedial_v9.0.2.crx [423709] =>Adware.MyWebSearch O61 - LFC: 06/08/2013 - 12:38:24 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_pflphaooapbgpeakohlggbpidpppgdff_0.localstorage [5120] O61 - LFC: 06/08/2013 - 12:41:04 ---A- C:\Users\Fanny\AppData\Local\startertv_fr_8\user_profil.cyp [1676] =>Adware.StarterTV O61 - LFC: 06/08/2013 - 12:41:49 ---A- C:\Users\Fanny\AppData\Local\startertv_fr_8\Download\majagexfr.exe [2951992] =>Adware.StarterTV O61 - LFC: 06/08/2013 - 23:41:00 ---A- C:\Users\Fanny\AppData\Roaming\SearchProtect\ffprotect\SProtectorRepository\searchProtectorData [930] =>PUP.Mocaflix O61 - LFC: 07/08/2013 - 01:03:05 ---A- C:\Users\Fanny\AppData\Local\startertv_fr_8\upstv_fr_8.cyp [664] =>Adware.StarterTV O61 - LFC: 07/08/2013 - 13:30:04 ---A- C:\Users\Fanny\AppData\Local\startertv_fr_8\startertv_fr_8\1.10\eorezo.cyl [68] =>Adware.StarterTV O61 - LFC: 07/08/2013 - 13:35:01 ---A- C:\Users\Fanny\AppData\Local\eorezo\eorezo\1.10\eorezo.cyl [131] =>PUP.Eorezo O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\$chrome\background.html [428] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\$chrome\background_min.js [23027] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\$chrome\screenshot.inject.js [152] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\_locales\ar\messages.json [1621] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\_locales\de\messages.json [1434] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\_locales\en\messages.json [1511] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\_locales\es\messages.json [3622] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\_locales\fr\messages.json [1452] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\_locales\he\messages.json [5106] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\_locales\hi\messages.json [1809] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\_locales\it\messages.json [1413] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\_locales\ja\messages.json [1487] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\_locales\nl\messages.json [1367] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\_locales\pl\messages.json [1412] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\_locales\pt_BR\messages.json [4801] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\_locales\ru\messages.json [6043] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\_locales\tr\messages.json [1402] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\content\external\jquery-2.0.0.min.js [83100] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\content\external\jquery.Jcrop.min.js [15892] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\content\external\jquery.autocomplete.min.js [13710] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\content\external\jquery.balloon.min.js [5985] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\content\external\jquery.simplecolorpicker.min.js [2821] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\content\external\md5.js [12295] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\content\external\mustache.min.js [5407] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\content\external\underscore-min.js [13995] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\content\gallery.html [1524] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\content\gallery_templates.html [1280] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\content\list.html [364] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\content\newtab.html [2828] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\content\newtab\ads_min.js [3119] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\content\newtab\gallery_min.js [26892] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\content\newtab\newtab_min.js [70198] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\content\welcome.html [204] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\manifest.json [1103] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\resources\128.png [4420] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\resources\16.png [1187] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\resources\48.png [2026] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\resources\apps.json [2] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\resources\favorites_preset.json [725] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\resources\preset\www.amazon.com.gif [7359] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\resources\preset\www.facebook.com.gif [12607] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\resources\preset\www.flickr.com.png [6402] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\resources\preset\www.groupon.com.png [21994] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\resources\preset\www.instagram.com.gif [11791] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\resources\preset\www.tumblr.com.png [10607] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\resources\searchengines.json [16904] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\resources\websearchengines.json [6] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\external\Jcrop.gif [329] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\external\foundation.min.css [62363] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\external\indicator.gif [1553] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\external\jquery.Jcrop.min.css [2102] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\external\jquery.autocomplete.css [522] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\external\jquery.simplecolorpicker.css [2203] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\external\normalize.css [7346] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\css\ads.css [127] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\css\buttons.css [220] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\css\footer.css [1692] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\css\gallery.css [9672] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\css\header.css [7315] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\css\list.css [2535] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\css\newtab.css [7377] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\css\search.css [8613] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\css\themes.css [4504] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\css\welcome.css [263] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\images\ajax-loader-2.gif [5884] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\images\ajax-loader-bar.gif [10819] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\images\ajax-loader.gif [2824] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\images\arrow-footer.png [253] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\images\arrow-header.png [279] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\images\close.png [434] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\images\gallery\X.png [229] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\images\gallery\arrow-gallery-cat-selected.png [284] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\images\gallery\arrow.png [354] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\images\gallery\emptyArea.png [134] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\images\gallery\icon-gallery-search.png [377] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\images\gallery\not_available_32.png [1770] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\images\gallery\plus.png [245] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\images\icon-chrome.png [1341] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\images\icon-edit-close.png [308] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\images\icon-edit.png [347] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\images\icon-layout.png [241] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\images\icon-plus.png [288] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\images\icon-readitlater.png [717] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\images\icon-theme.png [4265] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\images\patterns\arab_tile.png [8355] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\images\patterns\batthern_@2X.png [3375] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\images\patterns\bo_play_pattern_@2X.png [4386] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\images\patterns\dark_wood_@2X.jpg [26858] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\images\patterns\diagonal_striped_brick.png [1372] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\images\patterns\escheresque_ste_@2X.png [710] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\images\patterns\gold_scale.png [1196] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\images\patterns\purty_wood_@2X.jpg [23176] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\images\patterns\readme.txt [220] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\images\patterns\starring_@2X.png [4662] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\images\patterns\tileable_wood_texture_@2X.jpg [22419] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\images\patterns\weave_@2X.png [3745] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\images\patterns\wild_oliva_@2X.jpg [6676] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\images\patterns\woven.png [1325] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\images\provider.png [1940] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\images\search.ico [1150] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\images\top-content-bg.png [128] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\images\x-button.png [229] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\plugins\css\activetabs.css [0] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\plugins\css\favorites.css [6973] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\plugins\css\layout.css [5396] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\plugins\css\manager-favs.css [8397] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\plugins\css\manager-groups.css [471] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\plugins\css\recentlyclosed.css [0] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\plugins\css\theme.css [8541] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\plugins\images\chrome\bookmarks.png [347] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\plugins\images\chrome\download.png [397] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\plugins\images\chrome\downloads.png [413] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\plugins\images\chrome\downloas.png [415] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\plugins\images\chrome\extensions.png [481] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\plugins\images\chrome\settings.png [457] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\plugins\images\chrome\trash.png [590] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\plugins\images\info\contactus.png [1738] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\plugins\images\manager-favs\editAttachment.png [4128] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\plugins\images\manager-favs\editScreenshot.png [6111] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\plugins\images\theme\attachment.png [4128] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\plugins\resources\activetabs.html [230] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\plugins\resources\favorites.html [1104] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\plugins\resources\layout.html [3295] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\plugins\resources\manager-favs.html [3123] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\plugins\resources\manager-groups.html [2508] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\plugins\resources\recentlyclosed.html [209] O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\plugins\resources\theme.html [3753] O69 - SBI: prefs.js [Fanny - djhmxkfl.default] user_pref("CT3307695.originalHomepage", "http://search.babylon.com/?affID=119982&babsrc=HP_ss_din2g&mntrId=84292CD05A9F7CFA"); =>Toolbar.Babylon O69 - SBI: prefs.js [Fanny - djhmxkfl.default] user_pref("Smartbar.ConduitHomepagesList", "http://search.conduit.com/?ctid=CT3307695&octid=CT3307695&SearchSource=61&CUI=UN594018[...] =>Hijacker.SmartBar O69 - SBI: prefs.js [Fanny - djhmxkfl.default] user_pref("Smartbar.ConduitSearchEngineList", "01NET.com V1 Customized Web Search"); =>Hijacker.SmartBar O69 - SBI: prefs.js [Fanny - djhmxkfl.default] user_pref("Smartbar.ConduitSearchUrlList", "http://search.conduit.com/ResultsExt.aspx?ctid=CT3307695&SearchSource=2&CUI=UN59401872[...] =>Hijacker.SmartBar O69 - SBI: prefs.js [Fanny - djhmxkfl.default] user_pref("browser.search.defaultenginename", "01NET.com V1 Customized Web Search"); O69 - SBI: prefs.js [Fanny - djhmxkfl.default] user_pref("browser.search.defaultthis.engineName", "01NET.com V1 Customized Web Search"); O69 - SBI: prefs.js [Fanny - djhmxkfl.default] user_pref("smartbar.conduitHomepageList", "http://search.conduit.com/?ctid=CT3307695&CUI=UN59401872323307141&UM=2&SearchSource=13,[...] =>Hijacker.SmartBar O69 - SBI: prefs.js [Fanny - djhmxkfl.default] user_pref("smartbar.conduitSearchAddressUrlList", "http://search.conduit.com/ResultsExt.aspx?ctid=CT3307695&SearchSource=2&CUI=UN5[...] =>Hijacker.SmartBar O69 - SBI: prefs.js [Fanny - djhmxkfl.default] user_pref("smartbar.originalHomepage", "http://search.conduit.com/?ctid=CT3307695&CUI=UN59401872323307141&UM=2&SearchSource=13"); =>Hijacker.SmartBar O69 - SBI: SearchScopes [HKCU] {29C37D9B-CCE2-F029-F8C0-52DDACF0BE19} - (qvo6) - http://search.qvo6.com =>Hijacker.Qvo6 [MD5.32DCED18FFFEA0035E4FA975CA0AE8BE] [SPRF][22/04/2013] (.The Software Group - Software Update Setup.) -- C:\Users\Fanny\AppData\Local\Temp\BoxoreInstaller.exe [620656] =>Adware.Boxore [MD5.597E03815E98177D6930C0DF284431BC] [SPRF][06/08/2013] (...) -- C:\Users\Fanny\AppData\Local\Temp\pricepeep_1.exe [589776] =>Adware.PricePeep O87 - FAEL: "{6A25C48E-48D6-46BD-B767-79430CACF21B}" |In - None - P17 - TRUE | .(...) -- C:\Program Files (x86)\Iminent\Iminent.exe (.not file.) =>Adware.IMBooster O87 - FAEL: "{F6728CF3-0894-4A22-BBA3-4181EECB9423}" |In - None - P17 - TRUE | .(...) -- C:\Program Files (x86)\Iminent\Iminent.Messengers.exe (.not file.) =>Adware.IMBooster O87 - FAEL: "{4EB8FCBC-4C17-4AA3-B879-65E1213B1868}" | In - Public - P6 - TRUE | .(.Wsys Co., Ltd. - Wsys Control 1.0.0.2598.) -- C:\ProgramData\eSafe\eGdpSvc.exe =>PUP.eSafeSecurity O90 - PUC: "452B63F044BF958498713877F821A0C7" . (.Boxore Client.) -- C:\windows\Installer\{0F36B254-FB44-4859-8917-83778F120A7C}\boxore.ico =>Adware.Boxore [MD5.9AE3DF3E719DFD716E9F8CA00EFB53A2] [WIS][06/08/2013] (.Boxore OU - Boxore Client Installer.) -- C:\Windows\Installer\14de4f.msi [1908736] =>Adware.Boxore [MD5.EEC43018024E82222AF9E308C8020388] [WIS][10/06/2013] (.Iminent - Iminent.) -- C:\Windows\Installer\b574c75.msi [10162176] =>Adware.IMBooster SS - | Auto 0 | (dealplylive) . (...) - C:\Program Files (x86)\DealPlyLive\Update\DealPlyLive.exe =>PUP.DealPly SS - | Demand 0 | (dealplylivem) . (...) - C:\Program Files (x86)\DealPlyLive\Update\DealPlyLive.exe =>PUP.DealPly SS - | Auto 0 | (Software_update) . (...) - C:\Program Files (x86)\Software\Update\SoftwareUpdate.exe SS - | Demand 0 | (Software_update_m) . (...) - C:\Program Files (x86)\Software\Update\SoftwareUpdate.exe SR - | Auto 06/08/2013 891456 | (WsysSvc) . (.Wsys Co., Ltd..) - C:\ProgramData\eSafe\eGdpSvc.exe =>PUP.eSafeSecurity [HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9CF699CA-2174-4ED8-BEC1-BA82095EDCE0}] =>PUP.DealPly^ [HKLM\SYSTEM\CurrentControlSet\Services\dealplylive) (dealplylive] =>PUP.DealPly^ [HKLM\SYSTEM\CurrentControlSet\Services\WsysSvc] =>PUP.eSafeSecurity^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{0F36B254-FB44-4859-8917-83778F120A7C}] =>Adware.Boxore^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\WsysControl] =>PUP.eSafeSecurity^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\startertv_fr_8_is1] =>Adware.StarterTV^ [HKCU\Software\Tutorials] =>Spyware.AgenceExclusive [HKLM\Software\Wow6432Node\Tutorials] =>Spyware.AgenceExclusive [HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\AppCertDlls] =>Trojan.FakeAlert [HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls] =>Trojan.FakeAlert [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\desksvc] =>Hijacker.22find [HKLM\Software\Wow6432Node\eSafeSecControl] =>PUP.eSafeSecurity [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\F1057DD419AED0B468AD8888429E139A] =>Adware.IMBooster [HKLM\Software\Google\Chrome\Extensions\pflphaooapbgpeakohlggbpidpppgdff] =>Adware.MyWebSearch [HKLM\Software\Wow6432Node\Google\Chrome\Extensions\pflphaooapbgpeakohlggbpidpppgdff] =>Adware.MyWebSearch [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\WsysControl] =>PUP.eSafeSecurity [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WsysSvc] =>PUP.eSafeSecurity [HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}] =>PUP.OptimizerPro [HKLM\Software\Wow6432Node\{1146AC44-2F03-4431-B4FD-889BC837521F}] =>PUP.OptimizerPro [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\38D5CDD0A851B3940A43CC50ABBA251C] =>Adware.Boxore^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AAC05EAA51DC78A41A1DCE3B31038584] =>Adware.Boxore^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BA71D41F6CC0B6247B05D473850A8AEA] =>Adware.Boxore^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CA0054A5AB3EFFE4CB5660E44A1E7DCC] =>Adware.Boxore^ [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:NTRedirect =>Hijacker.BabSolution^ [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:startertv_fr_8 =>Adware.StarterTV^ [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]:upstv_fr_8.exe =>Adware.StarterTV^ C:\Users\Fanny\AppData\Roaming\Mozilla\Firefox\Profiles\djhmxkfl.default\jid1-FCM5fDwCW5M3AQ@jetpack =>Spyware.SmartDisplay^ C:\Users\Fanny\AppData\Roaming\Mozilla\Firefox\Profiles\djhmxkfl.default\{e53a26f5-7199-4a5b-86f5-d2e86854b979} =>PUP.DealPly^ C:\Program Files (x86)\startertv_fr_8 =>Adware.StarterTV^ C:\Users\Fanny\AppData\Roaming\BabSolution =>Hijacker.BabSolution^ C:\Users\Fanny\AppData\Local\eorezo =>PUP.Eorezo^ C:\Users\Fanny\AppData\Local\startertv_fr_8 =>Adware.StarterTV^ C:\Users\Fanny\AppData\Local\Software =>Adware.Boxore C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\licjnkifamhpbaefhdpacpmihicfbomb =>Adware.PricePeep C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbpohikckhbcljgombipcdoinkaedlfa =>Spyware.SmartDisplay C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff =>Adware.MyWebSearch C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjoijdanhaiflhibkljeklcghcmmfffh =>Adware.WebCake C:\Users\Fanny\AppData\Local\startertv_fr_8\upstv_fr_8.exe =>Adware.StarterTV^ C:\Program Files (x86)\startertv_fr_8\startertv_fr_8.exe =>Adware.StarterTV^ C:\Users\Fanny\AppData\Roaming\BabSolution\Shared\NTRedirect.dll =>Hijacker.BabSolution^ C:\ProgramData\eSafe\eGdpSvc.exe =>PUP.eSafeSecurity^ C:\Windows\Tasks\DealPlyLiveUpdateTaskMachineCore.job =>PUP.DealPly^ C:\Windows\Tasks\DealPlyLiveUpdateTaskMachineUA.job =>PUP.DealPly^ [HKCU\Software\DealPlyLive] =>PUP.DealPly^ [HKLM\Software\Wow6432Node\DealPlyLive] =>PUP.DealPly^ C:\Windows\Prefetch\SPEEDUPMYPCFR_P2V0.EXE-A747645D.pf =>Rogue SpeedUpMyPC^ C:\Windows\Prefetch\SPEEDUPMYPCFR.EXE-3633C25A.pf =>Rogue SpeedUpMyPC^ C:\Windows\Prefetch\SPEEDUPMYPCFR.TMP-E867D609.pf =>Rogue SpeedUpMyPC^ C:\Windows\Prefetch\NSB1_AR_201372915513_QVO6.EXE-BF26360A.pf =>Hijacker.Qvo6^ C:\Windows\Prefetch\DESK365.EXE-62BEA6A6.pf =>Hijacker.22Find^ C:\Windows\Prefetch\OPTIMIZERPRO.EXE-49D3D773.pf =>PUP.OptimizerPro^ C:\Windows\Prefetch\OPTIMIZER_PRO.EXE-4C1451C5.pf =>PUP.OptimizerPro^ C:\Windows\Prefetch\OPTIMIZER_PRO.TMP-DC87B1F7.pf =>PUP.OptimizerPro^ C:\Windows\Prefetch\PRICEPEEP2.EXE-1523D952.pf =>Adware.PricePeep^ C:\Windows\Prefetch\PRICEPEEP_1.EXE-16050208.pf =>Adware.PricePeep^ C:\Windows\Prefetch\DESK365.EXE-6062C485.pf =>Hijacker.22Find^ C:\Windows\Prefetch\IMINENT.MESSENGERS.EXE-71459735.pf =>Adware.IMBooster^ C:\Windows\Prefetch\OBBOXORE_0307-76302122.EXE-5B5E5D26.pf =>Adware.Boxore^ C:\Windows\Prefetch\BOXOREINSTALLER.EXE-1EC10460.pf =>Adware.Boxore^ C:\Windows\Prefetch\MYSEARCHDIALSRV.EXE-A839824E.pf =>Adware.MyWebSearch^ C:\Windows\Prefetch\STARTERTV_FR_8_0208-2D491B15.-4D4AB88B.pf =>Adware.StarterTV^ C:\Windows\Prefetch\STARTERTV_FR_8_0208-2D491B15.-60A38760.pf =>Adware.StarterTV^ C:\Windows\Prefetch\MYSEARCHDIALUPDATE.EXE-4B084BD6.pf =>Adware.MyWebSearch^ C:\Windows\Prefetch\MYSEARCHDIAL_0506-D4DBDD2B.EX-329E5B10.pf =>Adware.MyWebSearch^ C:\Windows\Prefetch\OPTIMIZERPRO.EXE-FA03D2EB.pf =>PUP.OptimizerPro^ C:\Windows\Prefetch\DEALPLYUPDATEVER.EXE-E9FBE2E6.pf =>PUP.DealPly^ C:\Windows\Prefetch\DEALPLYLIVE.EXE-774DC0FA.pf =>PUP.DealPly^ C:\Windows\Prefetch\DEALPLYLIVE.EXE-BB09DCE6.pf =>PUP.DealPly^ C:\Windows\Prefetch\BABMAINT.EXE-0EF18BCA.pf =>Hijacker.BabSolution^ C:\Windows\Prefetch\IMINENT.EXE-DDB5429B.pf =>Adware.IMBooster^ C:\Windows\Prefetch\BROWSERDEFENDER.EXE-B32D890A.pf =>Hijacker.Eazel^ C:\Windows\Prefetch\DEALPLYLIVEHANDLER.EXE-5C4141A5.pf =>PUP.DealPly^ C:\Windows\Prefetch\DEALPLYLIVE.EXE-24881C14.pf =>PUP.DealPly^ C:\Windows\Prefetch\BOXORE.EXE-666CD123.pf =>Adware.Boxore^ C:\Windows\Prefetch\STARTERTV_FR_8.EXE-75C5AF4D.pf =>Adware.StarterTV^ C:\Users\Fanny\AppData\Local\Temp\ECB9D0AD-BAB0-7891-8E83-CA3C50F22DA6\Latest\BabMaint.exe [10224] =>Hijacker.BabSolution^ C:\Users\Fanny\AppData\Roaming\BabSolution\Shared\NTRedirect.dll [127472] =>Hijacker.BabSolution^ C:\Users\Fanny\AppData\Local\Temp\pricepeep_1.exe [589776] =>Adware.PricePeep^ C:\Users\Fanny\AppData\Local\mysearchdial_speedial_v9.0.2.crx [423709] =>Adware.MyWebSearch^ C:\Users\Fanny\AppData\Local\startertv_fr_8\user_profil.cyp [1676] =>Adware.StarterTV^ C:\Users\Fanny\AppData\Local\startertv_fr_8\Download\majagexfr.exe [2951992] =>Adware.StarterTV^ C:\Users\Fanny\AppData\Roaming\SearchProtect\ffprotect\SProtectorRepository\searchProtectorData [930] =>PUP.Mocaflix^ C:\Users\Fanny\AppData\Local\startertv_fr_8\upstv_fr_8.cyp [664] =>Adware.StarterTV^ C:\Users\Fanny\AppData\Local\startertv_fr_8\startertv_fr_8\1.10\eorezo.cyl [68] =>Adware.StarterTV^ C:\Users\Fanny\AppData\Local\eorezo\eorezo\1.10\eorezo.cyl [131] =>PUP.Eorezo^ C:\Users\Fanny\AppData\Local\Temp\BoxoreInstaller.exe =>Adware.Boxore^ C:\Users\Fanny\AppData\Local\Temp\pricepeep_1.exe =>Adware.PricePeep^ C:\windows\Installer\{0F36B254-FB44-4859-8917-83778F120A7C}\boxore.ico =>Adware.Boxore^ C:\Windows\Installer\14de4f.msi =>Adware.Boxore^ C:\Windows\Installer\b574c75.msi =>Adware.IMBooster^ C:\Program Files (x86)\DealPlyLive\Update\DealPlyLive.exe =>PUP.DealPly^ O4 - HKLM\..\Run: [TCrdMain] C:\Program Files (x86)\TOSHIBA\Hotkey\TCrdMain_Win8.exe (.not file.) O4 - HKCU\..\Run: [AdobeBridge] Clé orpheline O4 - HKCU\..\Run: [ConduitFloatingPlugin_biahaobfpkgeiomkihcdgknebbhadonc] C:\Program Files (x86)\Conduit\CT3307695\plugins\TBVerifier.dll (.not file.) O4 - HKUS\S-1-5-21-2168297078-1489965089-1319381818-1001\..\Run: [AdobeBridge] Clé orpheline O4 - HKUS\S-1-5-21-2168297078-1489965089-1319381818-1001\..\Run: [ConduitFloatingPlugin_biahaobfpkgeiomkihcdgknebbhadonc] C:\Program Files (x86)\Conduit\CT3307695\plugins\TBVerifier.dll (.not file.) O61 - LFC: 27/06/2725 - 03:34:29 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbjlipmgfoamgjaogmbihaffnpkpjajp\1.0.0.130\.svn\entries [801] O61 - LFC: 27/06/2725 - 03:34:29 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbjlipmgfoamgjaogmbihaffnpkpjajp\1.0.0.130\.svn\format [2] O61 - LFC: 27/06/2725 - 03:34:29 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbjlipmgfoamgjaogmbihaffnpkpjajp\1.0.0.130\.svn\prop-base\icon.png.svn-base [53] O61 - LFC: 27/06/2725 - 03:34:29 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbjlipmgfoamgjaogmbihaffnpkpjajp\1.0.0.130\.svn\prop-base\icon128.png.svn-base [53] O61 - LFC: 27/06/2725 - 03:34:29 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbjlipmgfoamgjaogmbihaffnpkpjajp\1.0.0.130\.svn\prop-base\icon48.png.svn-base [53] O61 - LFC: 27/06/2725 - 03:34:29 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbjlipmgfoamgjaogmbihaffnpkpjajp\1.0.0.130\.svn\text-base\background.html.svn-base [532] O61 - LFC: 27/06/2725 - 03:34:29 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbjlipmgfoamgjaogmbihaffnpkpjajp\1.0.0.130\.svn\text-base\icon.png.svn-base [3577] O61 - LFC: 27/06/2725 - 03:34:29 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbjlipmgfoamgjaogmbihaffnpkpjajp\1.0.0.130\.svn\text-base\icon128.png.svn-base [23546] O61 - LFC: 27/06/2725 - 03:34:29 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbjlipmgfoamgjaogmbihaffnpkpjajp\1.0.0.130\.svn\text-base\icon48.png.svn-base [7257] O61 - LFC: 27/06/2725 - 03:34:29 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbjlipmgfoamgjaogmbihaffnpkpjajp\1.0.0.130\background.html [532] O61 - LFC: 27/06/2725 - 03:34:29 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbjlipmgfoamgjaogmbihaffnpkpjajp\1.0.0.130\icon.png [3577] O61 - LFC: 27/06/2725 - 03:34:29 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbjlipmgfoamgjaogmbihaffnpkpjajp\1.0.0.130\icon128.png [23546] O61 - LFC: 27/06/2725 - 03:34:29 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbjlipmgfoamgjaogmbihaffnpkpjajp\1.0.0.130\icon48.png [7257] O61 - LFC: 27/06/2725 - 03:34:29 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbjlipmgfoamgjaogmbihaffnpkpjajp\1.0.0.130\manifest.json [664] O61 - LFC: 27/06/2725 - 03:34:29 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbjlipmgfoamgjaogmbihaffnpkpjajp\1.0.0.130\plugin\.svn\entries [255] O61 - LFC: 27/06/2725 - 03:34:29 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbjlipmgfoamgjaogmbihaffnpkpjajp\1.0.0.130\plugin\.svn\format [2] O61 - LFC: 27/06/2725 - 03:34:29 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbjlipmgfoamgjaogmbihaffnpkpjajp\1.0.0.130\plugin\npSurfMatch.dll [57344] O69 - SBI: prefs.js [Fanny - djhmxkfl.default] user_pref("extensions.delta.admin", false); O69 - SBI: prefs.js [Fanny - djhmxkfl.default] user_pref("extensions.delta.aflt", "babsst"); O69 - SBI: prefs.js [Fanny - djhmxkfl.default] user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}"); O69 - SBI: prefs.js [Fanny - djhmxkfl.default] user_pref("extensions.delta.autoRvrt", "false"); O69 - SBI: prefs.js [Fanny - djhmxkfl.default] user_pref("extensions.delta.bbDpng", "7"); O69 - SBI: prefs.js [Fanny - djhmxkfl.default] user_pref("extensions.delta.cntry", "FR"); O69 - SBI: prefs.js [Fanny - djhmxkfl.default] user_pref("extensions.delta.dfltLng", "fr"); O69 - SBI: prefs.js [Fanny - djhmxkfl.default] user_pref("extensions.delta.excTlbr", false); O69 - SBI: prefs.js [Fanny - djhmxkfl.default] user_pref("extensions.delta.ffxUnstlRst", true); O69 - SBI: prefs.js [Fanny - djhmxkfl.default] user_pref("extensions.delta.hdrMd5", "F4D3129F3D079D264481AF828EAD2267"); O69 - SBI: prefs.js [Fanny - djhmxkfl.default] user_pref("extensions.delta.id", "8429cbd70000000000002cd05a9f7cfa"); O69 - SBI: prefs.js [Fanny - djhmxkfl.default] user_pref("extensions.delta.instlDay", "15923"); O69 - SBI: prefs.js [Fanny - djhmxkfl.default] user_pref("extensions.delta.instlRef", "sst"); O69 - SBI: prefs.js [Fanny - djhmxkfl.default] user_pref("extensions.delta.lastVrsnTs", "1.8.22.014:02:05"); O69 - SBI: prefs.js [Fanny - djhmxkfl.default] user_pref("extensions.delta.newTab", false); O69 - SBI: prefs.js [Fanny - djhmxkfl.default] user_pref("extensions.delta.prdct", "delta"); O69 - SBI: prefs.js [Fanny - djhmxkfl.default] user_pref("extensions.delta.prtnrId", "delta"); O69 - SBI: prefs.js [Fanny - djhmxkfl.default] user_pref("extensions.delta.rvrt", "false"); O69 - SBI: prefs.js [Fanny - djhmxkfl.default] user_pref("extensions.delta.sg", "azb"); O69 - SBI: prefs.js [Fanny - djhmxkfl.default] user_pref("extensions.delta.smplGrp", "azb"); O69 - SBI: prefs.js [Fanny - djhmxkfl.default] user_pref("extensions.delta.tlbrId", "base"); O69 - SBI: prefs.js [Fanny - djhmxkfl.default] user_pref("extensions.delta.tlbrSrchUrl", ""); O69 - SBI: prefs.js [Fanny - djhmxkfl.default] user_pref("extensions.delta.vrsn", "1.8.22.0"); O69 - SBI: prefs.js [Fanny - djhmxkfl.default] user_pref("extensions.delta.vrsnTs", "1.8.22.014:02:05"); O69 - SBI: prefs.js [Fanny - djhmxkfl.default] user_pref("extensions.delta.vrsni", "1.8.22.0"); O69 - SBI: prefs.js [Fanny - djhmxkfl.default] user_pref("extensions.delta_i.babExt", ""); O69 - SBI: prefs.js [Fanny - djhmxkfl.default] user_pref("extensions.delta_i.babTrack", "affID=119360&tsp=4966"); O69 - SBI: prefs.js [Fanny - djhmxkfl.default] user_pref("extensions.delta_i.srcExt", "ss"); O69 - SBI: SearchScopes [HKCU] {E8190E1F-6B3E-46B7-91C3-DD60092CEE5D} - (01NET.com V1 Customized Web Search) - http://search.conduit.com [MD5.CBB0857B4E4C5D947A0933733F19AFFC] [SPRF][08/05/2013] (.Conduit - SP Usage Sender.) -- C:\Users\Fanny\AppData\Local\Temp\nsaEA29.exe [110936] =>Toolbar.Conduit [MD5.CBB0857B4E4C5D947A0933733F19AFFC] [SPRF][08/05/2013] (.Conduit - SP Usage Sender.) -- C:\Users\Fanny\AppData\Local\Temp\nsf29C5.exe [110936] =>Toolbar.Conduit [MD5.CBB0857B4E4C5D947A0933733F19AFFC] [SPRF][08/05/2013] (.Conduit - SP Usage Sender.) -- C:\Users\Fanny\AppData\Local\Temp\nsfF5C5.exe [110936] =>Toolbar.Conduit [MD5.CBB0857B4E4C5D947A0933733F19AFFC] [SPRF][08/05/2013] (.Conduit - SP Usage Sender.) -- C:\Users\Fanny\AppData\Local\Temp\nsg1F33.exe [110936] =>Toolbar.Conduit [MD5.CBB0857B4E4C5D947A0933733F19AFFC] [SPRF][08/05/2013] (.Conduit - SP Usage Sender.) -- C:\Users\Fanny\AppData\Local\Temp\nszC154.exe [110936] =>Toolbar.Conduit [MD5.CBB0857B4E4C5D947A0933733F19AFFC] [SPRF][08/05/2013] (.Conduit - SP Usage Sender.) -- C:\Users\Fanny\AppData\Local\Temp\nszDA1F.exe [110936] =>Toolbar.Conduit [MD5.EA5C1D73FB6840B69E5034ACE95684AF] [SPRF][17/07/2013] (.Conduit - Search Protect by conduit.) -- C:\Users\Fanny\AppData\Local\Temp\SPStub.exe [68968] =>Toolbar.Conduit [MD5.943F313974A830D4634C73BEB8103F5E] [SPRF][17/07/2013] (.Conduit Ltd. - ToolbarHelper Application.) -- C:\Users\Fanny\AppData\Local\Temp\ToolbarHelper.exe [86816] =>Toolbar.Conduit O90 - PUC: "C6AC1163ACF500943A92A6111832CCCF" . (.Bing Bar.) -- C:\windows\Installer\{3611CA6C-5FCA-4900-A329-6A118123CCFC}\icon_installer_ico =>Toolbar.Bing [MD5.AC1A126967CB9D5EAF9678A05E5A5175] [WIS][25/01/2012] (.Microsoft Corporation - Bing Bar.) -- C:\Windows\Installer\2c4af0.msi [475136] =>Toolbar.Bing [HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D2CE3E00-F94A-4740-988E-03DC2F38C34F}] =>Toolbar.Bing^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{3611CA6C-5FCA-4900-A329-6A118123CCFC}] =>Toolbar.Bing^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375] =>Toolbar.Tarma [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5] =>Toolbar.Tarma [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{318A227B-5E9F-45BD-8999-7F8F10CA4CF5}] =>Toolbar.Avast [HKLM\Software\Classes\CLSID\{318A227B-5E9F-45BD-8999-7F8F10CA4CF5}] =>Toolbar.Avast [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}] =>Toolbar.Avast [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}] =>Toolbar.Avast [HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\TBSBrowser.exe] =>Toolbar.Agent C:\Users\Fanny\AppData\Roaming\SearchProtect =>Toolbar.Conduit^ C:\ProgramData\InstallMate =>Toolbar.Tarma C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\eooncjejnppfjjklapaamhcdmjbilmde =>Toolbar.DeltaSearch C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp =>Toolbar.Wajam C:\Program Files (x86)\Microsoft\BingBar\7.1.355.0\BingExt.dll =>Toolbar.Bing^ C:\Users\Fanny\AppData\Local\Temp\Bubble Dock.txt [638] =>Toolbar.BubbleDock^ C:\Users\Fanny\AppData\Local\Temp\LBubble Dock.txt [5277] =>Toolbar.BubbleDock^ C:\Users\Fanny\AppData\Local\Temp\ECB9D0AD-BAB0-7891-8E83-CA3C50F22DA6\Latest\bab138.deltatb_dmn.zpb [254] =>Toolbar.DeltaSearch^ C:\Users\Fanny\AppData\Local\Temp\ECB9D0AD-BAB0-7891-8E83-CA3C50F22DA6\Latest\DeltaTB.zpb [1680362] =>Toolbar.DeltaSearch^ C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\resources\preset\games.yahoo.com.jpg [11425] =>Toolbar.Yahoo^ C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\resources\preset\music.yahoo.com.jpg [6217] =>Toolbar.Yahoo^ C:\Users\Fanny\AppData\Local\Temp\nsaEA29.exe =>Toolbar.Conduit^ C:\Users\Fanny\AppData\Local\Temp\nsf29C5.exe =>Toolbar.Conduit^ C:\Users\Fanny\AppData\Local\Temp\nsfF5C5.exe =>Toolbar.Conduit^ C:\Users\Fanny\AppData\Local\Temp\nsg1F33.exe =>Toolbar.Conduit^ C:\Users\Fanny\AppData\Local\Temp\nszC154.exe =>Toolbar.Conduit^ C:\Users\Fanny\AppData\Local\Temp\nszDA1F.exe =>Toolbar.Conduit^ C:\Users\Fanny\AppData\Local\Temp\SPStub.exe =>Toolbar.Conduit^ C:\Users\Fanny\AppData\Local\Temp\ToolbarHelper.exe =>Toolbar.Conduit^ C:\windows\Installer\{3611CA6C-5FCA-4900-A329-6A118123CCFC}\icon_installer_ico =>Toolbar.Bing^ C:\Windows\Installer\2c4af0.msi =>Toolbar.Bing^ FirewallRaz PROXYFix EmptyFlash Emptytemp

Lances ZHPFix, exécuter en tant qu'administrateur sous Windows : 7/8 et Vista
1. Dans ZHPFix clic sur l'îcone : "coller le presse-papier"
2. Puis Clic sur "GO"
Confirmes les nettoyages des données en cliquant sur "Oui"
Une fois le scan terminé rends toi sur le bureau, le fichier ZHPFixReport à été crée.
Héberge le rapport ZHPFixReport sur SosUpload, puis copie/colle le lien fourni dans ta prochaine réponse.

Raptor14 · le 07 Aoû 2013 15:00

Doublon

fannylevasseur · le 08 Aoû 2013 13:59

bonjour, le message n'aurait-il pas été reçu?

Raptor14 · le 08 Aoû 2013 14:04

Bonjour,

Non aucun messages de ta part.

fannylevasseur · le 08 Aoû 2013 14:05

Désolé je ne recevais pas votre message. Je fais tout de suite ce que vous m'avez demandé de faire.

fannylevasseur · le 08 Aoû 2013 15:30

rapport

Raptor14 · le 08 Aoû 2013 19:44

Bonsoir,

Très bien, toujours des soucis ? Le PC doit être plus rapide je pense, je me trompe ?

fannylevasseur · le 08 Aoû 2013 19:45

J'ai l'impression en effet!!! Merci encore c'est extra!

Raptor14 · le 08 Aoû 2013 20:07

C'est très bien deux dernières étapes

1.

Télécharges MalwareBytes
Procèdes à l'installation de celui çi Décocher "Activer l'essai gratuit de Malwarebytes Anti-Malware PRO"
Sélectionne Examen complet
Cliques sur Rechercher
Supprimes tout les éléments trouvés !
Postes le rapport sur le forum

2.

Télécharges Delfix sur ton Bureau.
Lance Delfix, exécuter en tant qu'administrateur sous Windows : 7/8 et Vista
Coche la case suivantes :
- Supprimer les outils de désinfection
- Effectuer une sauvegarde du registre
- Purger la restauration système

Amicalement

[Réglé] virus sur ma clef • page 2

Re: virus sur ma clef

Re: virus sur ma clef

Re: virus sur ma clef

Re: virus sur ma clef

Re: virus sur ma clef

Re: virus sur ma clef

Re: virus sur ma clef

Re: virus sur ma clef

Re: virus sur ma clef

Sujets similaires

Qui est en ligne