Il y a actuellement 227 visiteurs
Jeudi 18 Avril 2024
accueilactualitésdossierscomparer les prixtélécharger gratuitement vos logicielsoffres d'emploiforum informatique
Connexion
Créer un compte

[Réglé] virus sur ma clef • page 2

Un ordinateur qui ralentit, des écrans publicitaires qui apparaissent, des applications qui refusent de démarrer ou encore votre navigateur qui s'obstine à ouvrir une page douteuse sont autant d'éléments qui indiquent que l'intégrité de votre ordinateur est menacée par un virus. Vous trouverez dans ce forum quelques conseils et logiciels pour surfer tranquillement.
Règles du forum
Pour afficher un rapport d'analyse ou un rapport d'infection (HijackThis, OTL, AdwCleaner etc...)‎, veuillez utiliser le système de fichiers joints interne au forum. Seuls les formats les .txt et .log de moins de 1Mo sont acceptés. Pour obtenir de l'aide pour insérer vos fichiers joints, veuillez consulter ce tutoriel

Re: virus sur ma clef

Message le 07 Aoû 2013 15:00

Bonjour,

:o Et ben ça faisait longtemps que j'avais pas vu un ordinateur infecté de cette manière :oops:

Copie les lignes ci dessous :

Code: Tout sélectionner
SysRestore

[MD5.864D4FA534573C798493C814AE2C69DF] - (...) -- C:\Users\Fanny\AppData\Local\startertv_fr_8\upstv_fr_8.exe [3151360] [PID.1688] =>Adware.StarterTV
[MD5.3FDA44B9641C876CE777B10DBCA7BDF5] - (...) -- C:\Program Files (x86)\startertv_fr_8\startertv_fr_8.exe [3975680] [PID.4840] =>Adware.StarterTV
M2 - MFEP: prefs.js [Fanny - djhmxkfl.default\jid1-FCM5fDwCW5M3AQ@jetpack] [] Smart Display v1.2 (..) =>Spyware.SmartDisplay
M2 - MFEP: prefs.js [Fanny - djhmxkfl.default\{e53a26f5-7199-4a5b-86f5-d2e86854b979}] [] DealPly Shopping v2.0 (..) =>PUP.DealPly
O2 - BHO: DealPly Shopping [64Bits] - {9cf699ca-2174-4ed8-bec1-ba82095edce0} . (...) -- C:\Program Files (x86)\DealPly\DealPlyIE.dll (.not file.) =>PUP.DealPly
O4 - HKCU\..\Run: [NTRedirect] . (...) -- C:\Users\Fanny\AppData\Roaming\BabSolution\Shared\NTRedirect.dll =>Hijacker.BabSolution
O4 - HKLM\..\Wow6432Node\Run: [startertv_fr_8] . (...) -- C:\Program Files (x86)\startertv_fr_8\startertv_fr_8.exe =>Adware.StarterTV
O4 - HKLM\..\Wow6432Node\RunOnce: [upstv_fr_8.exe] . (...) -- C:\Users\Fanny\AppData\Local\startertv_fr_8\upstv_fr_8.exe =>Adware.StarterTV
O4 - HKUS\S-1-5-21-2168297078-1489965089-1319381818-1001\..\Run: [NTRedirect] . (...) -- C:\Users\Fanny\AppData\Roaming\BabSolution\Shared\NTRedirect.dll =>Hijacker.BabSolution
O23 - Service: Service DealPly Live (dealplylive) (dealplylive) . (...) - C:\Program Files (x86)\DealPlyLive\Update\DealPlyLive.exe (.not file.) =>PUP.DealPly
O23 - Service: Service Software Update (Software_update (Software_update) . (...) - C:\Program Files (x86)\Software\Update\SoftwareUpdate.exe (.not file.)   
O23 - Service: Wsys Service (WsysSvc) . (.Wsys Co., Ltd. - Wsys Control 1.0.0.2598.) - C:\ProgramData\eSafe\eGdpSvc.exe =>PUP.eSafeSecurity
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\DealPlyLiveUpdateTaskMachineCore.job [912] =>PUP.DealPly
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\DealPlyLiveUpdateTaskMachineUA.job [916] =>PUP.DealPly
[MD5.00000000000000000000000000000000] [APT] [DealPlyLiveUpdateTaskMachineCore] (...) -- C:\Program Files (x86)\DealPlyLive\Update\DealPlyLive.exe (.not file.) [0] =>PUP.DealPly
[MD5.00000000000000000000000000000000] [APT] [DealPlyLiveUpdateTaskMachineUA] (...) -- C:\Program Files (x86)\DealPlyLive\Update\DealPlyLive.exe (.not file.) [0] =>PUP.DealPly
[MD5.00000000000000000000000000000000] [APT] [DealPlyUpdate] (...) -- C:\Program Files (x86)\DealPly\DealPlyUpdate.exe (.not file.) [0] =>PUP.DealPly
[MD5.00000000000000000000000000000000] [APT] [Desk 365 RunAsStdUser] (...) -- C:\Program Files (x86)\Desk 365\desk365.exe (.not file.) [0] =>Hijacker.22Find
[MD5.00000000000000000000000000000000] [APT] [EPUpdater] (...) -- C:\Users\Fanny\AppData\Roaming\BABSOL~1\Shared\BabMaint.exe (.not file.) [0] =>Hijacker.BabSolution
O42 - Logiciel: Boxore Client - (.Boxore OU.) [HKLM][64Bits] -- {0F36B254-FB44-4859-8917-83778F120A7C} =>Adware.Boxore
O42 - Logiciel: Wsys Control 1.0.0.2598 - (.Wsys Co., Ltd..) [HKLM][64Bits] -- WsysControl =>PUP.eSafeSecurity
O42 - Logiciel: startertv_fr_8 - (.TUTO4PC.) [HKLM][64Bits] -- startertv_fr_8_is1 =>Adware.StarterTV
[HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}]   
[HKCU\Software\DealPlyLive] =>PUP.DealPly
[HKCU\Software\Tutorials] =>Spyware.AgenceExcusive
[HKLM\Software\Wow6432Node\DealPlyLive] =>PUP.DealPly
[HKLM\Software\Wow6432Node\Tutorials] =>Spyware.AgenceExcusive
[HKLM\Software\Wow6432Node\eSafeSecControl] =>PUP.eSafeSecurity
O43 - CFD: 06/08/2013 - 13:37:58 - [4,507] ----D C:\Program Files (x86)\startertv_fr_8 =>Adware.StarterTV
O43 - CFD: 07/08/2013 - 00:40:29 - [0,122] ----D C:\Users\Fanny\AppData\Roaming\BabSolution =>Hijacker.BabSolution
O43 - CFD: 07/08/2013 - 00:47:56 - [0,000] ----D C:\Users\Fanny\AppData\Local\eorezo =>PUP.Eorezo
O43 - CFD: 06/08/2013 - 13:32:09 - [0] ----D C:\Users\Fanny\AppData\Local\Software   
O43 - CFD: 07/08/2013 - 02:03:05 - [5,823] ----D C:\Users\Fanny\AppData\Local\startertv_fr_8 =>Adware.StarterTV
O45 - LFCP:[MD5.8D4B7E7FF713DE26C13D67AF28526128] - 06/08/2013 - 00:15:07 ---A- - C:\Windows\Prefetch\SPEEDUPMYPCFR_P2V0.EXE-A747645D.pf =>Rogue SpeedUpMyPC
O45 - LFCP:[MD5.8A93CCF283175AACBC087D75CF654019] - 06/08/2013 - 00:15:08 ---A- - C:\Windows\Prefetch\SPEEDUPMYPCFR.EXE-3633C25A.pf =>Rogue SpeedUpMyPC
O45 - LFCP:[MD5.E33228AC084F4A305764FF679C3FD42D] - 06/08/2013 - 00:15:09 ---A- - C:\Windows\Prefetch\SPEEDUPMYPCFR.TMP-E867D609.pf =>Rogue SpeedUpMyPC
O45 - LFCP:[MD5.B11E19053CFAAEFF5AFE5852870E4E52] - 06/08/2013 - 00:33:53 ---A- - C:\Windows\Prefetch\NSB1_AR_201372915513_QVO6.EXE-BF26360A.pf =>Hijacker.Qvo6
O45 - LFCP:[MD5.24F078F9EBDC61FFD30571A3F7157B0E] - 06/08/2013 - 00:34:22 ---A- - C:\Windows\Prefetch\EXQ.EXE-23FD1D93.pf   
O45 - LFCP:[MD5.FE4C77607552B06FB17714D599C6A496] - 06/08/2013 - 00:34:25 ---A- - C:\Windows\Prefetch\DESK365.EXE-62BEA6A6.pf =>Hijacker.22Find
O45 - LFCP:[MD5.FFC2826AD2E217093328207BAE256C3D] - 06/08/2013 - 00:34:33 ---A- - C:\Windows\Prefetch\EGDPSVC.EXE-FC3AF7B1.pf   
O45 - LFCP:[MD5.07164C84F7CA2463B1F3FA7DE82A6F03] - 06/08/2013 - 00:34:43 ---A- - C:\Windows\Prefetch\EGDPSVC.EXE-F16FB9B3.pf   
O45 - LFCP:[MD5.F808544925D281E75DD3B01A5BE4720A] - 06/08/2013 - 00:34:43 ---A- - C:\Windows\Prefetch\OPTIMIZERPRO.EXE-49D3D773.pf =>PUP.OptimizerPro
O45 - LFCP:[MD5.3934D0979A93CF99866542B872248F95] - 06/08/2013 - 00:34:44 ---A- - C:\Windows\Prefetch\OPTIMIZER_PRO.EXE-4C1451C5.pf =>PUP.OptimizerPro
O45 - LFCP:[MD5.BFC1A59540BF6F3A5EE811FDF6010F3F] - 06/08/2013 - 00:34:45 ---A- - C:\Windows\Prefetch\OPTIMIZER_PRO.TMP-DC87B1F7.pf =>PUP.OptimizerPro
O45 - LFCP:[MD5.D31E3BC387C5FC5D261F91B7ED60D86A] - 06/08/2013 - 00:34:55 ---A- - C:\Windows\Prefetch\OPTPROSTART.EXE-65F7E6B1.pf   
O45 - LFCP:[MD5.C7126FC616C42C457C59BD6219270A73] - 06/08/2013 - 00:35:00 ---A- - C:\Windows\Prefetch\PRICEPEEP2.EXE-1523D952.pf =>Adware.PricePeep
O45 - LFCP:[MD5.4A7AFF6DA6C10B15BEF41E13AF46C9FB] - 06/08/2013 - 00:35:03 ---A- - C:\Windows\Prefetch\PRICEPEEP_1.EXE-16050208.pf =>Adware.PricePeep
O45 - LFCP:[MD5.9F958BD5FD5982E5E40771F332582CC1] - 06/08/2013 - 12:12:41 ---A- - C:\Windows\Prefetch\DESK365.EXE-6062C485.pf =>Hijacker.22Find
O45 - LFCP:[MD5.5E1A39AB5356D35871375B34AA83B0AC] - 06/08/2013 - 12:12:59 ---A- - C:\Windows\Prefetch\IMINENT.MESSENGERS.EXE-71459735.pf =>Adware.IMBooster
O45 - LFCP:[MD5.AFEA5BE2743F60904C5F05C8E5A87E9F] - 06/08/2013 - 12:32:15 ---A- - C:\Windows\Prefetch\OBBOXORE_0307-76302122.EXE-5B5E5D26.pf =>Adware.Boxore
O45 - LFCP:[MD5.DBEDB1A9BF4F55B75AEA59301DE0FE6A] - 06/08/2013 - 12:32:17 ---A- - C:\Windows\Prefetch\BOXOREINSTALLER.EXE-1EC10460.pf =>Adware.Boxore
O45 - LFCP:[MD5.B213C08AF61045C71078B08668833E0C] - 06/08/2013 - 12:37:56 ---A- - C:\Windows\Prefetch\MYSEARCHDIALSRV.EXE-A839824E.pf =>Adware.MyWebSearch
O45 - LFCP:[MD5.4D9A934B33C6AF6DBB9D1E0ED2B26886] - 06/08/2013 - 12:38:05 ---A- - C:\Windows\Prefetch\STARTERTV_FR_8_0208-2D491B15.-4D4AB88B.pf =>Adware.StarterTV
O45 - LFCP:[MD5.827F44972A0C759E1C662F1A409F8E58] - 06/08/2013 - 12:38:05 ---A- - C:\Windows\Prefetch\STARTERTV_FR_8_0208-2D491B15.-60A38760.pf =>Adware.StarterTV
O45 - LFCP:[MD5.B5883192C48545354F659B91F46C573D] - 06/08/2013 - 12:38:29 ---A- - C:\Windows\Prefetch\MYSEARCHDIALUPDATE.EXE-4B084BD6.pf =>Adware.MyWebSearch
O45 - LFCP:[MD5.E8DD81E9A56D1CBD768E5AFE4A72EA77] - 06/08/2013 - 12:38:36 ---A- - C:\Windows\Prefetch\MYSEARCHDIAL_0506-D4DBDD2B.EX-329E5B10.pf =>Adware.MyWebSearch
O45 - LFCP:[MD5.3F8E52DE08CC59842E80AB895E2E33B4] - 06/08/2013 - 12:42:22 ---A- - C:\Windows\Prefetch\OPTIMIZERPRO.EXE-FA03D2EB.pf =>PUP.OptimizerPro
O45 - LFCP:[MD5.BF7EBA5308C00DF17B9AC468BC875D0C] - 06/08/2013 - 13:01:06 ---A- - C:\Windows\Prefetch\DEALPLYUPDATEVER.EXE-E9FBE2E6.pf =>PUP.DealPly
O45 - LFCP:[MD5.D94F35931F1D571CF16CDC555D8B20D8] - 06/08/2013 - 13:01:18 ---A- - C:\Windows\Prefetch\DEALPLYLIVE.EXE-774DC0FA.pf =>PUP.DealPly
O45 - LFCP:[MD5.88F3772B3610C87AF3E7733ED8D8C2AB] - 06/08/2013 - 13:01:21 ---A- - C:\Windows\Prefetch\DEALPLYLIVE.EXE-BB09DCE6.pf =>PUP.DealPly
O45 - LFCP:[MD5.8485111D230A7C8808C3117112078976] - 06/08/2013 - 13:01:24 ---A- - C:\Windows\Prefetch\BABMAINT.EXE-0EF18BCA.pf =>Hijacker.BabSolution
O45 - LFCP:[MD5.ABF8A56A828FA4A4B0D23CEC779C899A] - 06/08/2013 - 13:03:02 ---A- - C:\Windows\Prefetch\BPROTECT.EXE-F13E6610.pf   
O45 - LFCP:[MD5.0DBF1F5113D6FCA0C6A121A7578101B3] - 06/08/2013 - 14:34:31 ---A- - C:\Windows\Prefetch\DESKSVC.EXE-3D53060B.pf   
O45 - LFCP:[MD5.0564F15A107FC8901420303A60246C98] - 06/08/2013 - 14:34:54 ---A- - C:\Windows\Prefetch\BOOTSTRAPPER.EXE-A76488EF.pf   
O45 - LFCP:[MD5.1C45D3759840A9FB86CD8D27F8282C0C] - 06/08/2013 - 16:33:15 ---A- - C:\Windows\Prefetch\IMINENT.EXE-DDB5429B.pf =>Adware.IMBooster
O45 - LFCP:[MD5.B23F32A2AEB0AC3BE86324B60E8C97CC] - 06/08/2013 - 16:40:51 ---A- - C:\Windows\Prefetch\BROWSERDEFENDER.EXE-B32D890A.pf =>Hijacker.Eazel
O45 - LFCP:[MD5.BE1A506E75BB92F1F6BA18D42C3D41DE] - 06/08/2013 - 16:45:05 ---A- - C:\Windows\Prefetch\DEALPLYLIVEHANDLER.EXE-5C4141A5.pf =>PUP.DealPly
O45 - LFCP:[MD5.C82BF8ED988EB4858FF66A2D045E2931] - 06/08/2013 - 16:45:07 ---A- - C:\Windows\Prefetch\SOFTWARECRASHHANDLER.EXE-5F240164.pf   
O45 - LFCP:[MD5.7D71812BDCFBC95804222116781D52D9] - 06/08/2013 - 23:06:08 ---A- - C:\Windows\Prefetch\DEALPLYLIVE.EXE-24881C14.pf =>PUP.DealPly
O45 - LFCP:[MD5.CAB33F816636F16DC5EF162A7D6A14D8] - 06/08/2013 - 23:40:20 ---A- - C:\Windows\Prefetch\BOXORE.EXE-666CD123.pf =>Adware.Boxore
O45 - LFCP:[MD5.FC74B86F6768E266133D153BBAD8035A] - 07/08/2013 - 01:00:38 ---A- - C:\Windows\Prefetch\STARTERTV_FR_8.EXE-75C5AF4D.pf =>Adware.StarterTV
O61 - LFC: 04/08/2013 - 15:04:57 ---A- C:\Users\Fanny\AppData\Local\Temp\ECB9D0AD-BAB0-7891-8E83-CA3C50F22DA6\Latest\BabMaint.exe [10224] =>Hijacker.BabSolution
O61 - LFC: 04/08/2013 - 15:04:58 ---A- C:\Users\Fanny\AppData\Roaming\BabSolution\Shared\NTRedirect.dll [127472] =>Hijacker.BabSolution
O61 - LFC: 06/08/2013 - 00:34:57 ---A- C:\Users\Fanny\AppData\Local\Temp\pricepeep_1.exe [589776] =>Adware.PricePeep
O61 - LFC: 06/08/2013 - 12:29:46 ---A- C:\Users\Fanny\Downloads\Setup.exe [288696]   
O61 - LFC: 06/08/2013 - 12:37:55 ---A- C:\Users\Fanny\AppData\Local\mysearchdial_speedial_v9.0.2.crx [423709] =>Adware.MyWebSearch
O61 - LFC: 06/08/2013 - 12:38:24 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_pflphaooapbgpeakohlggbpidpppgdff_0.localstorage [5120]   
O61 - LFC: 06/08/2013 - 12:41:04 ---A- C:\Users\Fanny\AppData\Local\startertv_fr_8\user_profil.cyp [1676] =>Adware.StarterTV
O61 - LFC: 06/08/2013 - 12:41:49 ---A- C:\Users\Fanny\AppData\Local\startertv_fr_8\Download\majagexfr.exe [2951992] =>Adware.StarterTV
O61 - LFC: 06/08/2013 - 23:41:00 ---A- C:\Users\Fanny\AppData\Roaming\SearchProtect\ffprotect\SProtectorRepository\searchProtectorData [930] =>PUP.Mocaflix
O61 - LFC: 07/08/2013 - 01:03:05 ---A- C:\Users\Fanny\AppData\Local\startertv_fr_8\upstv_fr_8.cyp [664] =>Adware.StarterTV
O61 - LFC: 07/08/2013 - 13:30:04 ---A- C:\Users\Fanny\AppData\Local\startertv_fr_8\startertv_fr_8\1.10\eorezo.cyl [68] =>Adware.StarterTV
O61 - LFC: 07/08/2013 - 13:35:01 ---A- C:\Users\Fanny\AppData\Local\eorezo\eorezo\1.10\eorezo.cyl [131] =>PUP.Eorezo
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\$chrome\background.html [428]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\$chrome\background_min.js [23027]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\$chrome\screenshot.inject.js [152]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\_locales\ar\messages.json [1621]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\_locales\de\messages.json [1434]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\_locales\en\messages.json [1511]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\_locales\es\messages.json [3622]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\_locales\fr\messages.json [1452]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\_locales\he\messages.json [5106]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\_locales\hi\messages.json [1809]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\_locales\it\messages.json [1413]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\_locales\ja\messages.json [1487]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\_locales\nl\messages.json [1367]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\_locales\pl\messages.json [1412]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\_locales\pt_BR\messages.json [4801]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\_locales\ru\messages.json [6043]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\_locales\tr\messages.json [1402]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\content\external\jquery-2.0.0.min.js [83100]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\content\external\jquery.Jcrop.min.js [15892]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\content\external\jquery.autocomplete.min.js [13710]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\content\external\jquery.balloon.min.js [5985]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\content\external\jquery.simplecolorpicker.min.js [2821]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\content\external\md5.js [12295]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\content\external\mustache.min.js [5407]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\content\external\underscore-min.js [13995]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\content\gallery.html [1524]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\content\gallery_templates.html [1280]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\content\list.html [364]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\content\newtab.html [2828]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\content\newtab\ads_min.js [3119]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\content\newtab\gallery_min.js [26892]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\content\newtab\newtab_min.js [70198]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\content\welcome.html [204]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\manifest.json [1103]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\resources\128.png [4420]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\resources\16.png [1187]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\resources\48.png [2026]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\resources\apps.json [2]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\resources\favorites_preset.json [725]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\resources\preset\www.amazon.com.gif [7359]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\resources\preset\www.facebook.com.gif [12607]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\resources\preset\www.flickr.com.png [6402]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\resources\preset\www.groupon.com.png [21994]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\resources\preset\www.instagram.com.gif [11791]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\resources\preset\www.tumblr.com.png [10607]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\resources\searchengines.json [16904]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\resources\websearchengines.json [6]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\external\Jcrop.gif [329]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\external\foundation.min.css [62363]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\external\indicator.gif [1553]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\external\jquery.Jcrop.min.css [2102]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\external\jquery.autocomplete.css [522]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\external\jquery.simplecolorpicker.css [2203]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\external\normalize.css [7346]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\css\ads.css [127]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\css\buttons.css [220]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\css\footer.css [1692]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\css\gallery.css [9672]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\css\header.css [7315]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\css\list.css [2535]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\css\newtab.css [7377]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\css\search.css [8613]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\css\themes.css [4504]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\css\welcome.css [263]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\images\ajax-loader-2.gif [5884]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\images\ajax-loader-bar.gif [10819]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\images\ajax-loader.gif [2824]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\images\arrow-footer.png [253]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\images\arrow-header.png [279]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\images\close.png [434]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\images\gallery\X.png [229]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\images\gallery\arrow-gallery-cat-selected.png [284]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\images\gallery\arrow.png [354]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\images\gallery\emptyArea.png [134]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\images\gallery\icon-gallery-search.png [377]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\images\gallery\not_available_32.png [1770]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\images\gallery\plus.png [245]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\images\icon-chrome.png [1341]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\images\icon-edit-close.png [308]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\images\icon-edit.png [347]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\images\icon-layout.png [241]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\images\icon-plus.png [288]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\images\icon-readitlater.png [717]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\images\icon-theme.png [4265]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\images\patterns\arab_tile.png [8355]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\images\patterns\batthern_@2X.png [3375]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\images\patterns\bo_play_pattern_@2X.png [4386]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\images\patterns\dark_wood_@2X.jpg [26858]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\images\patterns\diagonal_striped_brick.png [1372]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\images\patterns\escheresque_ste_@2X.png [710]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\images\patterns\gold_scale.png [1196]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\images\patterns\purty_wood_@2X.jpg [23176]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\images\patterns\readme.txt [220]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\images\patterns\starring_@2X.png [4662]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\images\patterns\tileable_wood_texture_@2X.jpg [22419]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\images\patterns\weave_@2X.png [3745]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\images\patterns\wild_oliva_@2X.jpg [6676]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\images\patterns\woven.png [1325]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\images\provider.png [1940]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\images\search.ico [1150]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\images\top-content-bg.png [128]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\newtab\images\x-button.png [229]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\plugins\css\activetabs.css [0]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\plugins\css\favorites.css [6973]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\plugins\css\layout.css [5396]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\plugins\css\manager-favs.css [8397]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\plugins\css\manager-groups.css [471]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\plugins\css\recentlyclosed.css [0]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\plugins\css\theme.css [8541]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\plugins\images\chrome\bookmarks.png [347]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\plugins\images\chrome\download.png [397]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\plugins\images\chrome\downloads.png [413]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\plugins\images\chrome\downloas.png [415]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\plugins\images\chrome\extensions.png [481]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\plugins\images\chrome\settings.png [457]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\plugins\images\chrome\trash.png [590]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\plugins\images\info\contactus.png [1738]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\plugins\images\manager-favs\editAttachment.png [4128]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\plugins\images\manager-favs\editScreenshot.png [6111]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\plugins\images\theme\attachment.png [4128]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\plugins\resources\activetabs.html [230]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\plugins\resources\favorites.html [1104]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\plugins\resources\layout.html [3295]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\plugins\resources\manager-favs.html [3123]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\plugins\resources\manager-groups.html [2508]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\plugins\resources\recentlyclosed.html [209]   
O61 - LFC: 25/08/2814 - 04:21:41 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\skin\plugins\resources\theme.html [3753]   
O69 - SBI: prefs.js [Fanny - djhmxkfl.default] user_pref("CT3307695.originalHomepage", "http://search.babylon.com/?affID=119982&babsrc=HP_ss_din2g&mntrId=84292CD05A9F7CFA"); =>Toolbar.Babylon
O69 - SBI: prefs.js [Fanny - djhmxkfl.default] user_pref("Smartbar.ConduitHomepagesList", "http://search.conduit.com/?ctid=CT3307695&octid=CT3307695&SearchSource=61&CUI=UN594018[...] =>Hijacker.SmartBar
O69 - SBI: prefs.js [Fanny - djhmxkfl.default] user_pref("Smartbar.ConduitSearchEngineList", "01NET.com V1 Customized Web Search"); =>Hijacker.SmartBar
O69 - SBI: prefs.js [Fanny - djhmxkfl.default] user_pref("Smartbar.ConduitSearchUrlList", "http://search.conduit.com/ResultsExt.aspx?ctid=CT3307695&SearchSource=2&CUI=UN59401872[...] =>Hijacker.SmartBar
O69 - SBI: prefs.js [Fanny - djhmxkfl.default] user_pref("browser.search.defaultenginename", "01NET.com V1 Customized Web Search");
O69 - SBI: prefs.js [Fanny - djhmxkfl.default] user_pref("browser.search.defaultthis.engineName", "01NET.com V1 Customized Web Search");
O69 - SBI: prefs.js [Fanny - djhmxkfl.default] user_pref("smartbar.conduitHomepageList", "http://search.conduit.com/?ctid=CT3307695&CUI=UN59401872323307141&UM=2&SearchSource=13,[...] =>Hijacker.SmartBar
O69 - SBI: prefs.js [Fanny - djhmxkfl.default] user_pref("smartbar.conduitSearchAddressUrlList", "http://search.conduit.com/ResultsExt.aspx?ctid=CT3307695&SearchSource=2&CUI=UN5[...] =>Hijacker.SmartBar
O69 - SBI: prefs.js [Fanny - djhmxkfl.default] user_pref("smartbar.originalHomepage", "http://search.conduit.com/?ctid=CT3307695&CUI=UN59401872323307141&UM=2&SearchSource=13"); =>Hijacker.SmartBar
O69 - SBI: SearchScopes [HKCU] {29C37D9B-CCE2-F029-F8C0-52DDACF0BE19} - (qvo6) - http://search.qvo6.com =>Hijacker.Qvo6
[MD5.32DCED18FFFEA0035E4FA975CA0AE8BE] [SPRF][22/04/2013] (.The Software Group - Software Update Setup.) -- C:\Users\Fanny\AppData\Local\Temp\BoxoreInstaller.exe [620656] =>Adware.Boxore
[MD5.597E03815E98177D6930C0DF284431BC] [SPRF][06/08/2013] (...) -- C:\Users\Fanny\AppData\Local\Temp\pricepeep_1.exe [589776] =>Adware.PricePeep
O87 - FAEL: "{6A25C48E-48D6-46BD-B767-79430CACF21B}" |In - None - P17 - TRUE | .(...) -- C:\Program Files (x86)\Iminent\Iminent.exe (.not file.) =>Adware.IMBooster
O87 - FAEL: "{F6728CF3-0894-4A22-BBA3-4181EECB9423}" |In - None - P17 - TRUE | .(...) -- C:\Program Files (x86)\Iminent\Iminent.Messengers.exe (.not file.) =>Adware.IMBooster
O87 - FAEL: "{4EB8FCBC-4C17-4AA3-B879-65E1213B1868}" | In - Public - P6 - TRUE | .(.Wsys Co., Ltd. - Wsys Control 1.0.0.2598.) -- C:\ProgramData\eSafe\eGdpSvc.exe =>PUP.eSafeSecurity
O90 - PUC: "452B63F044BF958498713877F821A0C7" . (.Boxore Client.) -- C:\windows\Installer\{0F36B254-FB44-4859-8917-83778F120A7C}\boxore.ico =>Adware.Boxore
[MD5.9AE3DF3E719DFD716E9F8CA00EFB53A2] [WIS][06/08/2013] (.Boxore OU - Boxore Client Installer.) -- C:\Windows\Installer\14de4f.msi [1908736] =>Adware.Boxore
[MD5.EEC43018024E82222AF9E308C8020388] [WIS][10/06/2013] (.Iminent - Iminent.) -- C:\Windows\Installer\b574c75.msi [10162176] =>Adware.IMBooster
SS - | Auto 0 | (dealplylive) . (...) - C:\Program Files (x86)\DealPlyLive\Update\DealPlyLive.exe =>PUP.DealPly
SS - | Demand 0 | (dealplylivem) . (...) - C:\Program Files (x86)\DealPlyLive\Update\DealPlyLive.exe =>PUP.DealPly
SS - | Auto 0 | (Software_update) . (...) - C:\Program Files (x86)\Software\Update\SoftwareUpdate.exe   
SS - | Demand 0 | (Software_update_m) . (...) - C:\Program Files (x86)\Software\Update\SoftwareUpdate.exe   
SR - | Auto 06/08/2013 891456 | (WsysSvc) . (.Wsys Co., Ltd..) - C:\ProgramData\eSafe\eGdpSvc.exe =>PUP.eSafeSecurity
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9CF699CA-2174-4ED8-BEC1-BA82095EDCE0}] =>PUP.DealPly^
[HKLM\SYSTEM\CurrentControlSet\Services\dealplylive) (dealplylive] =>PUP.DealPly^
[HKLM\SYSTEM\CurrentControlSet\Services\WsysSvc] =>PUP.eSafeSecurity^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{0F36B254-FB44-4859-8917-83778F120A7C}] =>Adware.Boxore^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\WsysControl] =>PUP.eSafeSecurity^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\startertv_fr_8_is1] =>Adware.StarterTV^
[HKCU\Software\Tutorials] =>Spyware.AgenceExclusive
[HKLM\Software\Wow6432Node\Tutorials] =>Spyware.AgenceExclusive
[HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\AppCertDlls] =>Trojan.FakeAlert
[HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls] =>Trojan.FakeAlert
[HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\desksvc] =>Hijacker.22find
[HKLM\Software\Wow6432Node\eSafeSecControl] =>PUP.eSafeSecurity
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\F1057DD419AED0B468AD8888429E139A] =>Adware.IMBooster
[HKLM\Software\Google\Chrome\Extensions\pflphaooapbgpeakohlggbpidpppgdff] =>Adware.MyWebSearch
[HKLM\Software\Wow6432Node\Google\Chrome\Extensions\pflphaooapbgpeakohlggbpidpppgdff] =>Adware.MyWebSearch
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\WsysControl] =>PUP.eSafeSecurity
[HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WsysSvc] =>PUP.eSafeSecurity
[HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}] =>PUP.OptimizerPro
[HKLM\Software\Wow6432Node\{1146AC44-2F03-4431-B4FD-889BC837521F}] =>PUP.OptimizerPro
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\38D5CDD0A851B3940A43CC50ABBA251C] =>Adware.Boxore^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AAC05EAA51DC78A41A1DCE3B31038584] =>Adware.Boxore^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BA71D41F6CC0B6247B05D473850A8AEA] =>Adware.Boxore^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CA0054A5AB3EFFE4CB5660E44A1E7DCC] =>Adware.Boxore^
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:NTRedirect =>Hijacker.BabSolution^
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:startertv_fr_8 =>Adware.StarterTV^
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]:upstv_fr_8.exe =>Adware.StarterTV^
C:\Users\Fanny\AppData\Roaming\Mozilla\Firefox\Profiles\djhmxkfl.default\jid1-FCM5fDwCW5M3AQ@jetpack =>Spyware.SmartDisplay^
C:\Users\Fanny\AppData\Roaming\Mozilla\Firefox\Profiles\djhmxkfl.default\{e53a26f5-7199-4a5b-86f5-d2e86854b979} =>PUP.DealPly^
C:\Program Files (x86)\startertv_fr_8 =>Adware.StarterTV^
C:\Users\Fanny\AppData\Roaming\BabSolution =>Hijacker.BabSolution^
C:\Users\Fanny\AppData\Local\eorezo =>PUP.Eorezo^
C:\Users\Fanny\AppData\Local\startertv_fr_8 =>Adware.StarterTV^
C:\Users\Fanny\AppData\Local\Software =>Adware.Boxore
C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\licjnkifamhpbaefhdpacpmihicfbomb =>Adware.PricePeep
C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbpohikckhbcljgombipcdoinkaedlfa =>Spyware.SmartDisplay
C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff =>Adware.MyWebSearch
C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjoijdanhaiflhibkljeklcghcmmfffh =>Adware.WebCake
C:\Users\Fanny\AppData\Local\startertv_fr_8\upstv_fr_8.exe =>Adware.StarterTV^
C:\Program Files (x86)\startertv_fr_8\startertv_fr_8.exe =>Adware.StarterTV^
C:\Users\Fanny\AppData\Roaming\BabSolution\Shared\NTRedirect.dll =>Hijacker.BabSolution^
C:\ProgramData\eSafe\eGdpSvc.exe =>PUP.eSafeSecurity^
C:\Windows\Tasks\DealPlyLiveUpdateTaskMachineCore.job =>PUP.DealPly^
C:\Windows\Tasks\DealPlyLiveUpdateTaskMachineUA.job =>PUP.DealPly^
[HKCU\Software\DealPlyLive] =>PUP.DealPly^
[HKLM\Software\Wow6432Node\DealPlyLive] =>PUP.DealPly^
C:\Windows\Prefetch\SPEEDUPMYPCFR_P2V0.EXE-A747645D.pf =>Rogue SpeedUpMyPC^
C:\Windows\Prefetch\SPEEDUPMYPCFR.EXE-3633C25A.pf =>Rogue SpeedUpMyPC^
C:\Windows\Prefetch\SPEEDUPMYPCFR.TMP-E867D609.pf =>Rogue SpeedUpMyPC^
C:\Windows\Prefetch\NSB1_AR_201372915513_QVO6.EXE-BF26360A.pf =>Hijacker.Qvo6^
C:\Windows\Prefetch\DESK365.EXE-62BEA6A6.pf =>Hijacker.22Find^
C:\Windows\Prefetch\OPTIMIZERPRO.EXE-49D3D773.pf =>PUP.OptimizerPro^
C:\Windows\Prefetch\OPTIMIZER_PRO.EXE-4C1451C5.pf =>PUP.OptimizerPro^
C:\Windows\Prefetch\OPTIMIZER_PRO.TMP-DC87B1F7.pf =>PUP.OptimizerPro^
C:\Windows\Prefetch\PRICEPEEP2.EXE-1523D952.pf =>Adware.PricePeep^
C:\Windows\Prefetch\PRICEPEEP_1.EXE-16050208.pf =>Adware.PricePeep^
C:\Windows\Prefetch\DESK365.EXE-6062C485.pf =>Hijacker.22Find^
C:\Windows\Prefetch\IMINENT.MESSENGERS.EXE-71459735.pf =>Adware.IMBooster^
C:\Windows\Prefetch\OBBOXORE_0307-76302122.EXE-5B5E5D26.pf =>Adware.Boxore^
C:\Windows\Prefetch\BOXOREINSTALLER.EXE-1EC10460.pf =>Adware.Boxore^
C:\Windows\Prefetch\MYSEARCHDIALSRV.EXE-A839824E.pf =>Adware.MyWebSearch^
C:\Windows\Prefetch\STARTERTV_FR_8_0208-2D491B15.-4D4AB88B.pf =>Adware.StarterTV^
C:\Windows\Prefetch\STARTERTV_FR_8_0208-2D491B15.-60A38760.pf =>Adware.StarterTV^
C:\Windows\Prefetch\MYSEARCHDIALUPDATE.EXE-4B084BD6.pf =>Adware.MyWebSearch^
C:\Windows\Prefetch\MYSEARCHDIAL_0506-D4DBDD2B.EX-329E5B10.pf =>Adware.MyWebSearch^
C:\Windows\Prefetch\OPTIMIZERPRO.EXE-FA03D2EB.pf =>PUP.OptimizerPro^
C:\Windows\Prefetch\DEALPLYUPDATEVER.EXE-E9FBE2E6.pf =>PUP.DealPly^
C:\Windows\Prefetch\DEALPLYLIVE.EXE-774DC0FA.pf =>PUP.DealPly^
C:\Windows\Prefetch\DEALPLYLIVE.EXE-BB09DCE6.pf =>PUP.DealPly^
C:\Windows\Prefetch\BABMAINT.EXE-0EF18BCA.pf =>Hijacker.BabSolution^
C:\Windows\Prefetch\IMINENT.EXE-DDB5429B.pf =>Adware.IMBooster^
C:\Windows\Prefetch\BROWSERDEFENDER.EXE-B32D890A.pf =>Hijacker.Eazel^
C:\Windows\Prefetch\DEALPLYLIVEHANDLER.EXE-5C4141A5.pf =>PUP.DealPly^
C:\Windows\Prefetch\DEALPLYLIVE.EXE-24881C14.pf =>PUP.DealPly^
C:\Windows\Prefetch\BOXORE.EXE-666CD123.pf =>Adware.Boxore^
C:\Windows\Prefetch\STARTERTV_FR_8.EXE-75C5AF4D.pf =>Adware.StarterTV^
C:\Users\Fanny\AppData\Local\Temp\ECB9D0AD-BAB0-7891-8E83-CA3C50F22DA6\Latest\BabMaint.exe [10224] =>Hijacker.BabSolution^
C:\Users\Fanny\AppData\Roaming\BabSolution\Shared\NTRedirect.dll [127472] =>Hijacker.BabSolution^
C:\Users\Fanny\AppData\Local\Temp\pricepeep_1.exe [589776] =>Adware.PricePeep^
C:\Users\Fanny\AppData\Local\mysearchdial_speedial_v9.0.2.crx [423709] =>Adware.MyWebSearch^
C:\Users\Fanny\AppData\Local\startertv_fr_8\user_profil.cyp [1676] =>Adware.StarterTV^
C:\Users\Fanny\AppData\Local\startertv_fr_8\Download\majagexfr.exe [2951992] =>Adware.StarterTV^
C:\Users\Fanny\AppData\Roaming\SearchProtect\ffprotect\SProtectorRepository\searchProtectorData [930] =>PUP.Mocaflix^
C:\Users\Fanny\AppData\Local\startertv_fr_8\upstv_fr_8.cyp [664] =>Adware.StarterTV^
C:\Users\Fanny\AppData\Local\startertv_fr_8\startertv_fr_8\1.10\eorezo.cyl [68] =>Adware.StarterTV^
C:\Users\Fanny\AppData\Local\eorezo\eorezo\1.10\eorezo.cyl [131] =>PUP.Eorezo^
C:\Users\Fanny\AppData\Local\Temp\BoxoreInstaller.exe =>Adware.Boxore^
C:\Users\Fanny\AppData\Local\Temp\pricepeep_1.exe =>Adware.PricePeep^
C:\windows\Installer\{0F36B254-FB44-4859-8917-83778F120A7C}\boxore.ico =>Adware.Boxore^
C:\Windows\Installer\14de4f.msi =>Adware.Boxore^
C:\Windows\Installer\b574c75.msi =>Adware.IMBooster^
C:\Program Files (x86)\DealPlyLive\Update\DealPlyLive.exe =>PUP.DealPly^
O4 - HKLM\..\Run: [TCrdMain] C:\Program Files (x86)\TOSHIBA\Hotkey\TCrdMain_Win8.exe (.not file.)
O4 - HKCU\..\Run: [AdobeBridge] Clé orpheline
O4 - HKCU\..\Run: [ConduitFloatingPlugin_biahaobfpkgeiomkihcdgknebbhadonc] C:\Program Files (x86)\Conduit\CT3307695\plugins\TBVerifier.dll (.not file.)
O4 - HKUS\S-1-5-21-2168297078-1489965089-1319381818-1001\..\Run: [AdobeBridge] Clé orpheline
O4 - HKUS\S-1-5-21-2168297078-1489965089-1319381818-1001\..\Run: [ConduitFloatingPlugin_biahaobfpkgeiomkihcdgknebbhadonc] C:\Program Files (x86)\Conduit\CT3307695\plugins\TBVerifier.dll (.not file.)
O61 - LFC: 27/06/2725 - 03:34:29 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbjlipmgfoamgjaogmbihaffnpkpjajp\1.0.0.130\.svn\entries [801]   
O61 - LFC: 27/06/2725 - 03:34:29 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbjlipmgfoamgjaogmbihaffnpkpjajp\1.0.0.130\.svn\format [2]   
O61 - LFC: 27/06/2725 - 03:34:29 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbjlipmgfoamgjaogmbihaffnpkpjajp\1.0.0.130\.svn\prop-base\icon.png.svn-base [53]   
O61 - LFC: 27/06/2725 - 03:34:29 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbjlipmgfoamgjaogmbihaffnpkpjajp\1.0.0.130\.svn\prop-base\icon128.png.svn-base [53]   
O61 - LFC: 27/06/2725 - 03:34:29 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbjlipmgfoamgjaogmbihaffnpkpjajp\1.0.0.130\.svn\prop-base\icon48.png.svn-base [53]   
O61 - LFC: 27/06/2725 - 03:34:29 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbjlipmgfoamgjaogmbihaffnpkpjajp\1.0.0.130\.svn\text-base\background.html.svn-base [532]   
O61 - LFC: 27/06/2725 - 03:34:29 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbjlipmgfoamgjaogmbihaffnpkpjajp\1.0.0.130\.svn\text-base\icon.png.svn-base [3577]   
O61 - LFC: 27/06/2725 - 03:34:29 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbjlipmgfoamgjaogmbihaffnpkpjajp\1.0.0.130\.svn\text-base\icon128.png.svn-base [23546]   
O61 - LFC: 27/06/2725 - 03:34:29 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbjlipmgfoamgjaogmbihaffnpkpjajp\1.0.0.130\.svn\text-base\icon48.png.svn-base [7257]   
O61 - LFC: 27/06/2725 - 03:34:29 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbjlipmgfoamgjaogmbihaffnpkpjajp\1.0.0.130\background.html [532]   
O61 - LFC: 27/06/2725 - 03:34:29 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbjlipmgfoamgjaogmbihaffnpkpjajp\1.0.0.130\icon.png [3577]   
O61 - LFC: 27/06/2725 - 03:34:29 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbjlipmgfoamgjaogmbihaffnpkpjajp\1.0.0.130\icon128.png [23546]   
O61 - LFC: 27/06/2725 - 03:34:29 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbjlipmgfoamgjaogmbihaffnpkpjajp\1.0.0.130\icon48.png [7257]   
O61 - LFC: 27/06/2725 - 03:34:29 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbjlipmgfoamgjaogmbihaffnpkpjajp\1.0.0.130\manifest.json [664]   
O61 - LFC: 27/06/2725 - 03:34:29 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbjlipmgfoamgjaogmbihaffnpkpjajp\1.0.0.130\plugin\.svn\entries [255]   
O61 - LFC: 27/06/2725 - 03:34:29 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbjlipmgfoamgjaogmbihaffnpkpjajp\1.0.0.130\plugin\.svn\format [2]   
O61 - LFC: 27/06/2725 - 03:34:29 ---A- C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbjlipmgfoamgjaogmbihaffnpkpjajp\1.0.0.130\plugin\npSurfMatch.dll [57344]   
O69 - SBI: prefs.js [Fanny - djhmxkfl.default] user_pref("extensions.delta.admin", false);
O69 - SBI: prefs.js [Fanny - djhmxkfl.default] user_pref("extensions.delta.aflt", "babsst");
O69 - SBI: prefs.js [Fanny - djhmxkfl.default] user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");
O69 - SBI: prefs.js [Fanny - djhmxkfl.default] user_pref("extensions.delta.autoRvrt", "false");
O69 - SBI: prefs.js [Fanny - djhmxkfl.default] user_pref("extensions.delta.bbDpng", "7");
O69 - SBI: prefs.js [Fanny - djhmxkfl.default] user_pref("extensions.delta.cntry", "FR");
O69 - SBI: prefs.js [Fanny - djhmxkfl.default] user_pref("extensions.delta.dfltLng", "fr");
O69 - SBI: prefs.js [Fanny - djhmxkfl.default] user_pref("extensions.delta.excTlbr", false);
O69 - SBI: prefs.js [Fanny - djhmxkfl.default] user_pref("extensions.delta.ffxUnstlRst", true);
O69 - SBI: prefs.js [Fanny - djhmxkfl.default] user_pref("extensions.delta.hdrMd5", "F4D3129F3D079D264481AF828EAD2267");
O69 - SBI: prefs.js [Fanny - djhmxkfl.default] user_pref("extensions.delta.id", "8429cbd70000000000002cd05a9f7cfa");
O69 - SBI: prefs.js [Fanny - djhmxkfl.default] user_pref("extensions.delta.instlDay", "15923");
O69 - SBI: prefs.js [Fanny - djhmxkfl.default] user_pref("extensions.delta.instlRef", "sst");
O69 - SBI: prefs.js [Fanny - djhmxkfl.default] user_pref("extensions.delta.lastVrsnTs", "1.8.22.014:02:05");
O69 - SBI: prefs.js [Fanny - djhmxkfl.default] user_pref("extensions.delta.newTab", false);
O69 - SBI: prefs.js [Fanny - djhmxkfl.default] user_pref("extensions.delta.prdct", "delta");
O69 - SBI: prefs.js [Fanny - djhmxkfl.default] user_pref("extensions.delta.prtnrId", "delta");
O69 - SBI: prefs.js [Fanny - djhmxkfl.default] user_pref("extensions.delta.rvrt", "false");
O69 - SBI: prefs.js [Fanny - djhmxkfl.default] user_pref("extensions.delta.sg", "azb");
O69 - SBI: prefs.js [Fanny - djhmxkfl.default] user_pref("extensions.delta.smplGrp", "azb");
O69 - SBI: prefs.js [Fanny - djhmxkfl.default] user_pref("extensions.delta.tlbrId", "base");
O69 - SBI: prefs.js [Fanny - djhmxkfl.default] user_pref("extensions.delta.tlbrSrchUrl", "");
O69 - SBI: prefs.js [Fanny - djhmxkfl.default] user_pref("extensions.delta.vrsn", "1.8.22.0");
O69 - SBI: prefs.js [Fanny - djhmxkfl.default] user_pref("extensions.delta.vrsnTs", "1.8.22.014:02:05");
O69 - SBI: prefs.js [Fanny - djhmxkfl.default] user_pref("extensions.delta.vrsni", "1.8.22.0");
O69 - SBI: prefs.js [Fanny - djhmxkfl.default] user_pref("extensions.delta_i.babExt", "");
O69 - SBI: prefs.js [Fanny - djhmxkfl.default] user_pref("extensions.delta_i.babTrack", "affID=119360&tsp=4966");
O69 - SBI: prefs.js [Fanny - djhmxkfl.default] user_pref("extensions.delta_i.srcExt", "ss");
O69 - SBI: SearchScopes [HKCU] {E8190E1F-6B3E-46B7-91C3-DD60092CEE5D} - (01NET.com V1 Customized Web Search) - http://search.conduit.com
[MD5.CBB0857B4E4C5D947A0933733F19AFFC] [SPRF][08/05/2013] (.Conduit - SP Usage Sender.) -- C:\Users\Fanny\AppData\Local\Temp\nsaEA29.exe [110936] =>Toolbar.Conduit
[MD5.CBB0857B4E4C5D947A0933733F19AFFC] [SPRF][08/05/2013] (.Conduit - SP Usage Sender.) -- C:\Users\Fanny\AppData\Local\Temp\nsf29C5.exe [110936] =>Toolbar.Conduit
[MD5.CBB0857B4E4C5D947A0933733F19AFFC] [SPRF][08/05/2013] (.Conduit - SP Usage Sender.) -- C:\Users\Fanny\AppData\Local\Temp\nsfF5C5.exe [110936] =>Toolbar.Conduit
[MD5.CBB0857B4E4C5D947A0933733F19AFFC] [SPRF][08/05/2013] (.Conduit - SP Usage Sender.) -- C:\Users\Fanny\AppData\Local\Temp\nsg1F33.exe [110936] =>Toolbar.Conduit
[MD5.CBB0857B4E4C5D947A0933733F19AFFC] [SPRF][08/05/2013] (.Conduit - SP Usage Sender.) -- C:\Users\Fanny\AppData\Local\Temp\nszC154.exe [110936] =>Toolbar.Conduit
[MD5.CBB0857B4E4C5D947A0933733F19AFFC] [SPRF][08/05/2013] (.Conduit - SP Usage Sender.) -- C:\Users\Fanny\AppData\Local\Temp\nszDA1F.exe [110936] =>Toolbar.Conduit
[MD5.EA5C1D73FB6840B69E5034ACE95684AF] [SPRF][17/07/2013] (.Conduit - Search Protect by conduit.) -- C:\Users\Fanny\AppData\Local\Temp\SPStub.exe [68968] =>Toolbar.Conduit
[MD5.943F313974A830D4634C73BEB8103F5E] [SPRF][17/07/2013] (.Conduit Ltd. - ToolbarHelper Application.) -- C:\Users\Fanny\AppData\Local\Temp\ToolbarHelper.exe [86816] =>Toolbar.Conduit
O90 - PUC: "C6AC1163ACF500943A92A6111832CCCF" . (.Bing Bar.) -- C:\windows\Installer\{3611CA6C-5FCA-4900-A329-6A118123CCFC}\icon_installer_ico =>Toolbar.Bing
[MD5.AC1A126967CB9D5EAF9678A05E5A5175] [WIS][25/01/2012] (.Microsoft Corporation - Bing Bar.) -- C:\Windows\Installer\2c4af0.msi [475136] =>Toolbar.Bing
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D2CE3E00-F94A-4740-988E-03DC2F38C34F}] =>Toolbar.Bing^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{3611CA6C-5FCA-4900-A329-6A118123CCFC}] =>Toolbar.Bing^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375] =>Toolbar.Tarma
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5] =>Toolbar.Tarma
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{318A227B-5E9F-45BD-8999-7F8F10CA4CF5}] =>Toolbar.Avast
[HKLM\Software\Classes\CLSID\{318A227B-5E9F-45BD-8999-7F8F10CA4CF5}] =>Toolbar.Avast
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}] =>Toolbar.Avast
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}] =>Toolbar.Avast
[HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\TBSBrowser.exe] =>Toolbar.Agent
C:\Users\Fanny\AppData\Roaming\SearchProtect =>Toolbar.Conduit^
C:\ProgramData\InstallMate =>Toolbar.Tarma
C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\eooncjejnppfjjklapaamhcdmjbilmde =>Toolbar.DeltaSearch
C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp =>Toolbar.Wajam
C:\Program Files (x86)\Microsoft\BingBar\7.1.355.0\BingExt.dll =>Toolbar.Bing^
C:\Users\Fanny\AppData\Local\Temp\Bubble Dock.txt [638] =>Toolbar.BubbleDock^
C:\Users\Fanny\AppData\Local\Temp\LBubble Dock.txt [5277] =>Toolbar.BubbleDock^
C:\Users\Fanny\AppData\Local\Temp\ECB9D0AD-BAB0-7891-8E83-CA3C50F22DA6\Latest\bab138.deltatb_dmn.zpb [254] =>Toolbar.DeltaSearch^
C:\Users\Fanny\AppData\Local\Temp\ECB9D0AD-BAB0-7891-8E83-CA3C50F22DA6\Latest\DeltaTB.zpb [1680362] =>Toolbar.DeltaSearch^
C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\resources\preset\games.yahoo.com.jpg [11425] =>Toolbar.Yahoo^
C:\Users\Fanny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff\9.0.2\resources\preset\music.yahoo.com.jpg [6217] =>Toolbar.Yahoo^
C:\Users\Fanny\AppData\Local\Temp\nsaEA29.exe =>Toolbar.Conduit^
C:\Users\Fanny\AppData\Local\Temp\nsf29C5.exe =>Toolbar.Conduit^
C:\Users\Fanny\AppData\Local\Temp\nsfF5C5.exe =>Toolbar.Conduit^
C:\Users\Fanny\AppData\Local\Temp\nsg1F33.exe =>Toolbar.Conduit^
C:\Users\Fanny\AppData\Local\Temp\nszC154.exe =>Toolbar.Conduit^
C:\Users\Fanny\AppData\Local\Temp\nszDA1F.exe =>Toolbar.Conduit^
C:\Users\Fanny\AppData\Local\Temp\SPStub.exe =>Toolbar.Conduit^
C:\Users\Fanny\AppData\Local\Temp\ToolbarHelper.exe =>Toolbar.Conduit^
C:\windows\Installer\{3611CA6C-5FCA-4900-A329-6A118123CCFC}\icon_installer_ico =>Toolbar.Bing^
C:\Windows\Installer\2c4af0.msi =>Toolbar.Bing^


FirewallRaz
PROXYFix 
EmptyFlash 
Emptytemp

  • Lances ZHPFix, exécuter en tant qu'administrateur sous Windows : 7/8 et Vista

    1. Dans ZHPFix clic sur l'îcone : "coller le presse-papier"
    2. Puis Clic sur "GO"

      Image
  • Confirmes les nettoyages des données en cliquant sur "Oui"

  • Une fois le scan terminé rends toi sur le bureau, le fichier ZHPFixReport à été crée.
  • Héberge le rapport ZHPFixReport sur SosUpload, puis copie/colle le lien fourni dans ta prochaine réponse.
Avatar de l'utilisateur
Raptor14
PC-Infopraticien
PC-Infopraticien
 
Messages: 2207
Inscription: 13 Juin 2011 19:26
 


Re: virus sur ma clef

Message le 07 Aoû 2013 15:00

Doublon :roll:
Avatar de l'utilisateur
Raptor14
PC-Infopraticien
PC-Infopraticien
 
Messages: 2207
Inscription: 13 Juin 2011 19:26
 

Re: virus sur ma clef

Message le 08 Aoû 2013 13:59

bonjour, le message n'aurait-il pas été reçu?
fannylevasseur
Visiteur Confirmé
Visiteur Confirmé
 
Messages: 19
Inscription: 05 Aoû 2013 18:09
 

Re: virus sur ma clef

Message le 08 Aoû 2013 14:04

Bonjour,

Non aucun messages de ta part.
Avatar de l'utilisateur
Raptor14
PC-Infopraticien
PC-Infopraticien
 
Messages: 2207
Inscription: 13 Juin 2011 19:26
 

Re: virus sur ma clef

Message le 08 Aoû 2013 14:05

Désolé je ne recevais pas votre message. Je fais tout de suite ce que vous m'avez demandé de faire.
fannylevasseur
Visiteur Confirmé
Visiteur Confirmé
 
Messages: 19
Inscription: 05 Aoû 2013 18:09
 

Re: virus sur ma clef

Message le 08 Aoû 2013 15:30

rapport
fannylevasseur
Visiteur Confirmé
Visiteur Confirmé
 
Messages: 19
Inscription: 05 Aoû 2013 18:09
 

Re: virus sur ma clef

Message le 08 Aoû 2013 19:44

Bonsoir,

Très bien, toujours des soucis ? Le PC doit être plus rapide je pense, je me trompe ?
Avatar de l'utilisateur
Raptor14
PC-Infopraticien
PC-Infopraticien
 
Messages: 2207
Inscription: 13 Juin 2011 19:26
 

Re: virus sur ma clef

Message le 08 Aoû 2013 19:45

J'ai l'impression en effet!!! Merci encore c'est extra!
fannylevasseur
Visiteur Confirmé
Visiteur Confirmé
 
Messages: 19
Inscription: 05 Aoû 2013 18:09
 

Re: virus sur ma clef

Message le 08 Aoû 2013 20:07

C'est très bien deux dernières étapes ;)

1.

  • Télécharges MalwareBytes
  • Procèdes à l'installation de celui çi Décocher "Activer l'essai gratuit de Malwarebytes Anti-Malware PRO"
  • Sélectionne Examen complet
  • Cliques sur Rechercher
  • Supprimes tout les éléments trouvés !
  • Postes le rapport sur le forum

Image

2.

  • Télécharges Delfix sur ton Bureau.
  • Lance Delfix, exécuter en tant qu'administrateur sous Windows : 7/8 et Vista

  • Coche la case suivantes :

    • Supprimer les outils de désinfection
    • Effectuer une sauvegarde du registre
    • Purger la restauration système

      Image

Amicalement
Avatar de l'utilisateur
Raptor14
PC-Infopraticien
PC-Infopraticien
 
Messages: 2207
Inscription: 13 Juin 2011 19:26
 

Précédente


Sujets similaires

Message [Réglé] World of Tank Blitz sans Steam ?
SalutEst ce que quelqu'un sait comment jouer à World of Tank Blitz sans Steam, sur PC ?Lancer Steam à chaque fois ça consomme des resssources pour rien.J'ai essayé de télécharger le jeu sur Microsoft mais il semblerait que ça soit uniquement pour la Xbox !?Une idée ?
Réponses: 6

Message [Réglé] Bleu screen en lançant un jeu sur Win 11
Re,yevgi a écrit:Sinon, je ne comprends plus rien...En lisant ta réponse, je vois ceci :https://zupimages.net/up/24/15/yqpl.pngEn revu sous ma zone de rédaction de réponse, je vois ceci :https://zupimages.net/up/24/15/g4aw.pngDu coup j'ai 2 process distincts, qui donnent 2 résultats différents :- Se ...
Réponses: 33

Message [Réglé] Impossible d'ouvrir les droits d'accès...
Bonsoir, voila mon soucis actuellement, c'est que je ne peux plus rien faire sur mon pc, j'ai voulu modifier les droits d'accès à un jeu sur mon pc aujourd'hui et sans rien comprendre, ça m'a retiré les droits d'accès au disque C: et E: qui sont respectivement un SSD et un HDD, et je ne sais plus qu ...
Réponses: 25

Message [Réglé] Fenêtres Powershell intempestives
Bonjour,Depuis environ 3 semaines, le ventilateur de mon PC Portable tourne beaucoup plus qu'avant (je sais qu'il fait très chaud, mais quand même !), et surtout, j'ai régulièrement des fenêtres Powershell qui s'ouvrent inopinément.En cherchant des solutions ici et là, j'ai téléchargé FRST, et j'ai ...
Réponses: 15

Message [Réglé] Mini PC pour la 4k HDR
Bonjour (et bonne année a tous ),Actuellement, j'ai mon bon vieux mini PC (I5-4210U) , fonctionnel mais hélas devenu trop limité en performance pour la 4K (j'arrive à lire des fichiers en H264 avec très peu voir pas de lags tout dépend le lecteur) et on parle même pas avec du H265 (saccadé à mort) ...
Réponses: 5

Message [Réglé] Changement de ventirad
Bonjour,Je recherche à changer mon ventirad modèle "Noctua NF P 12 " qui dysfonctionne mais je ne sais pas lequel choisir ?Pourriez-vous me renseigner ?MerciCdtConfiguration du pc de 2011 :Carte mère F898 Sabertooth x 58Processeur : Core i 7 950 3.07 ghzRam : 12 go de ram SSD de 480 go ...
Réponses: 36

Message [Réglé] TPM Erreur - Migration Win 10 à Win 11
Bonjour à tous.Je suis en train de voir comment mettre à jour mon W10 en W11 et je vois que ce n'est pas possible.Grâce au lieu de Routman54, j'ai pu voir que le blocage se fait à cause du TPM.Je n'ai pas la moindre idée de ce que c'est...Je me tourne donc vers vous pour quérir le savoir manquant :3 ...
Réponses: 2


Qui est en ligne

Utilisateurs parcourant ce forum: Aucun utilisateur enregistré et 12 invités


.: Nous contacter :: Flux RSS :: Données personnelles :.