start
CloseProcesses:
HKLM-x32\...\Run: [vProt] => C:\Program Files (x86)\AVG Secure Search\vprot.exe [2640408 2014-08-25] ()
HKU\S-1-5-21-3464097287-2940408141-1262103396-1002\...\Run: [Advanced SystemCare 7] => C:\Program Files (x86)\Advanced SystemCare 7\ASCTray.exe [2295584 2014-04-21] (IObit)
HKU\S-1-5-21-3464097287-2940408141-1262103396-1002\...\Policies\Explorer\Run: [Intel(R) Common User Interface] => %AppData%\Microsoft\capiws.exe
HKU\S-1-5-21-3464097287-2940408141-1262103396-1002\...\Winlogon: [Shell] %AppData%\Microsoft\capiws.exe,explorer.exe
AppInit_DLLs: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll => C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll File Not Found
AppInit_DLLs: C:\PROGRA~2\GS Supporter\Assistant_x64.dll => C:\PROGRA~2\GS Supporter\Assistant_x64.dll File Not Found
AppInit_DLLs-x32: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC32Loader.dll => "C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC32Loader.dll" File Not Found
AppInit_DLLs-x32: c:\progra~2\gs supporter\assistant.dll => "c:\progra~2\gs supporter\assistant.dll" File Not Found
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\rvlkl.lnk
ShortcutTarget: rvlkl.lnk -> C:\ProgramData\rvlkl\rvlkl.exe (Logixoft)
GroupPolicy: Group Policy on Chrome detected
SearchScopes: HKLM-x32 - {BB74DE59-BC4C-4172-9AC4-73315F71CFFE} URL = http://websearch.toolksearchbook.info/?l=1&q={searchTerms}&pid=1387&r=2014/01/18&hid=12594780894310554554&lg=EN&cc=FR&unqvl=46
SearchScopes: HKCU - {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = http://www.trovi.com/Results.aspx?gd=&ctid=CT3325290&octid=EB_ORIGINAL_CTID&ISID=M8595F86F-6580-46CA-A001-1019AD0328E4&SearchSource=58&CUI=&UM=2&UP=SP57561CE5-866E-4DDD-87DE-2F11C7112021&q={searchTerms}&SSPV=
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - {95B7759C-8C7F-4BF1-B163-73684A933233} URL = http://isearch.avg.com/search?cid={A08B9B05-485D-4716-A848-DA1046BD1368}&mid=aa0485fb911047d29c94d92928abfbc9-81b77c8732e1b67cd01c9b8391692f25c76035b2&lang=fr/browser=all&ds=is015&coid=avgtbdisis&cmpid=&pr=sa&d=2014-02-26 19:12:37&v=17.3.1.91&pid=avg&sg=&sap=dsp&q={searchTerms}
BHO-x32: AVG Security Toolbar -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> C:\Program Files (x86)\AVG Secure Search\18.1.9.799\AVG Secure Search_toolbar.dll (AVG Secure Search)
BHO-x32: Advanced SystemCare Browser Protection -> {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} -> C:\Program Files (x86)\IObit\Surfing Protection\BrowerProtect\ASCPlugin_Protection.dll (IObit)
Toolbar: HKLM - AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG Secure Search\18.1.9.799\AVG Secure Search_toolbar.dll (AVG Secure Search)
Toolbar: HKLM-x32 - AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\18.1.9.799\AVG Secure Search_toolbar.dll (AVG Secure Search)
Handler-x32: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\18.1.9\ViProtocol.dll (AVG Secure Search)
FF SearchEngineOrder.1: WebSearch
FF SearchEngineOrder.user_pref("browser.search.order.1,S", "WebSearch");: user_pref("browser.search.order.1,S", "WebSearch");
FF NewTab: hxxp://www.trovi.com/?gd=&ctid=CT3325290&octid=EB_ORIGINAL_CTID&ISID=M8595F86F-6580-46CA-A001-1019AD0328E4&SearchSource=69&CUI=&SSPV=&Lay=1&UM=2&UP=SP57561CE5-866E-4DDD-87DE-2F11C7112021
FF Plugin-x32: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin -> C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\18.1.9\\npsitesafety.dll No File
FF SearchPlugin: C:\Users\Antoine\AppData\Roaming\Mozilla\Firefox\Profiles\5t0ubiym.default\searchplugins\trovi-search.xml
FF Extension: greatsaveer - C:\Users\Antoine\AppData\Roaming\Mozilla\Firefox\Profiles\5t0ubiym.default\Extensions\85q8hgxj@jioi.edu [2014-01-19]
FF Extension: Ads Removal - C:\Users\Antoine\AppData\Roaming\Mozilla\Firefox\Profiles\5t0ubiym.default\Extensions\adremoveext@adremoveext.net [2014-08-23]
FF Extension: Advanced SystemCare Surfing Protection - C:\Users\Antoine\AppData\Roaming\Mozilla\Firefox\Profiles\5t0ubiym.default\Extensions\ascsurfingprotection@iobit.com [2014-05-15]
FF Extension: YoutubeAdblocker - C:\Users\Antoine\AppData\Roaming\Mozilla\Firefox\Profiles\5t0ubiym.default\Extensions\dx50q_a9n@mw-fyoa.net [2014-01-11]
FF Extension: SaaveerExtension - C:\Users\Antoine\AppData\Roaming\Mozilla\Firefox\Profiles\5t0ubiym.default\Extensions\ecgo0_oiw@dxmrtuzf-jumu.com [2014-01-11]
FF Extension: grEatsAver - C:\Users\Antoine\AppData\Roaming\Mozilla\Firefox\Profiles\5t0ubiym.default\Extensions\gauya@uawz.org [2014-01-19]
FF Extension: gReatsaveir - C:\Users\Antoine\AppData\Roaming\Mozilla\Firefox\Profiles\5t0ubiym.default\Extensions\gvpq2vvt@hvpnu.co.uk [2014-01-19]
FF Extension: RoboSaveR - C:\Users\Antoine\AppData\Roaming\Mozilla\Firefox\Profiles\5t0ubiym.default\Extensions\hvg_mjfc@ssipari.org [2014-01-11]
FF Extension: SNT - C:\Users\Antoine\AppData\Roaming\Mozilla\Firefox\Profiles\5t0ubiym.default\Extensions\ljqlyicvn@yueaoieaa.com [2014-01-19]
FF Extension: SNT - C:\Users\Antoine\AppData\Roaming\Mozilla\Firefox\Profiles\5t0ubiym.default\Extensions\rkfmmeuoqp@e-uw.net [2014-01-19]
FF Extension: greatSaver - C:\Users\Antoine\AppData\Roaming\Mozilla\Firefox\Profiles\5t0ubiym.default\Extensions\tvvnu-bs@syieiyiya.net [2014-01-11]
FF Extension: SNT - C:\Users\Antoine\AppData\Roaming\Mozilla\Firefox\Profiles\5t0ubiym.default\Extensions\zayoieae@o-awr.co.uk [2014-01-11]
FF Extension: TowerTilt - C:\Users\Antoine\AppData\Roaming\Mozilla\Firefox\Profiles\5t0ubiym.default\Extensions\{587cb346-a3d8-4884-b39b-f0ed918b6f96}.xpi [2014-04-19]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction
CHR Extension: (OippttON) - C:\Users\Antoine\AppData\Local\Google\Chrome\User Data\Default\Extensions\abmfafbobpjapeedmgchojolheiemifb [2014-09-20]
CHR Extension: (OippttON) - C:\Users\Antoine\AppData\Local\Google\Chrome\User Data\Default\Extensions\abmfafbobpjapeedmgchojolheiemifb\3.18 [2014-09-20]
CHR HKLM-x32\...\Chrome\Extension: [hbcennhacfaagdopikcegfcobcadeocj] - C:\Program Files (x86)\Common Files\Spigot\GC\saebay_1.1.crx []
CHR HKLM-x32\...\Chrome\Extension: [icdlfehblmklkikfigmjhbmmpmkmpooj] - C:\Program Files (x86)\Common Files\Spigot\GC\ErrorAssistant_1.2.crx []
CHR Extension: (Slick Savings) - C:\Users\Antoine\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk [2014-01-19]
CHR HKLM-x32\...\Chrome\Extension: [mhkaekfpcppmmioggniknbnbdbcigpkk] - C:\Users\Antoine\AppData\Local\Slick Savings\coupons.crx [2013-12-31]
CHR HKLM-x32\...\Chrome\Extension: [pfndaklgolladniicklehhancnlgocpp] - C:\Program Files (x86)\Common Files\Spigot\GC\saamazon_1.0.crx [2013-12-31]
R2 AdvancedSystemCareService7; C:\Program Files (x86)\Advanced SystemCare 7\ASCService.exe [881952 2014-01-14] (IObit)
R2 vToolbarUpdater18.1.9; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.9\ToolbarUpdater.exe [1820184 2014-08-12] (AVG Secure Search)
S2 Update TowerTilt; "C:\Program Files (x86)\TowerTilt\updateTowerTilt.exe" [X]
S2 Util TowerTilt; "C:\Program Files (x86)\TowerTilt\bin\utilTowerTilt.exe" [X]
2014-09-20 21:53 - 2014-09-21 11:19 - 00000000 ____D () C:\Program Files (x86)\OippttON
2014-09-20 21:53 - 2014-09-20 21:53 - 00000290 __RSH () C:\ProgramData\ntuser.pol
2014-09-20 21:53 - 2014-09-20 21:53 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Local\Chromatic Browser
2014-09-20 21:53 - 2014-09-20 21:53 - 00000000 ____D () C:\Users\Invité\AppData\Local\Chromatic Browser
2014-09-20 21:53 - 2014-09-20 21:53 - 00000000 ____D () C:\Users\Antoine\AppData\Local\Chromatic Browser
2014-09-20 21:53 - 2014-09-20 21:53 - 00000000 ____D () C:\Users\Administrateur\AppData\Local\Chromatic Browser
2014-09-20 21:53 - 2014-09-20 21:53 - 00000000 ____D () C:\ProgramData\OippttON
2014-09-20 21:52 - 2014-09-24 19:41 - 00000000 ____D () C:\Program Files (x86)\ORBTR
2014-09-20 21:52 - 2014-09-20 21:52 - 00000000 ____D () C:\Program Files (x86)\SearchProtect
2014-09-20 21:33 - 2014-09-20 21:35 - 00000000 ____D () C:\Users\Antoine\AppData\Local\CyberGhost
2014-09-20 21:28 - 2014-09-20 21:29 - 00000000 ____D () C:\Program Files\TAP-Windows
2014-09-20 21:28 - 2014-09-20 21:29 - 00000000 ____D () C:\Program Files\CyberGhost 5
2014-09-20 21:28 - 2014-09-20 21:28 - 00001748 _____ () C:\Users\Antoine\Desktop\CyberGhost 5.lnk
2014-09-20 21:28 - 2014-09-20 21:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberGhost 5
C:\PROGRA~2\GS Supporter
C:\Program Files (x86)\Common Files\AVG Secure Search
C:\Program Files (x86)\AVG Security Toolbar
C:\Program Files (x86)\Advanced SystemCare 7
C:\Program Files (x86)\YourFileDownloader Updater
C:\Program Files (x86)\TowerTilt
C:\ProgramData\rvlkl
C:\Users\Antoine\AppData\Local\FilesFrog Update Checker
%AppData%\Microsoft\capiws.exe
Task: {3ECD993D-FBEC-499C-8381-6F62061D94F6} - System32\Tasks\AVG-Secure-Search-Update_0814tb_rmv => C:\Program Files (x86)\AVG Security Toolbar\AVG-Secure-Search-Update_0814tb.exe [2014-08-26] ()
Task: {5F36BA17-F0E6-4D2B-88BB-C66225FD5996} - System32\Tasks\SomotoUpdateCheckerAutoStart => C:\Users\Antoine\AppData\Local\FilesFrog Update Checker\update_checker.exe
Task: {B085CB35-F66D-42EE-8C4E-3150C1404C38} - System32\Tasks\ASC7_SkipUac_Antoine => C:\Program Files (x86)\Advanced SystemCare 7\ASC.exe [2014-05-04] (IObit)
Task: {D3538F30-1769-4B4C-BA44-DDB67A5BCE9E} - System32\Tasks\YourFile DownloaderUpdate => C:\Program Files (x86)\YourFileDownloader Updater\YourFileUpdater.exe
Task: C:\WINDOWS\Tasks\ASC7_SkipUac_Antoine.job => C:\Program Files (x86)\Advanced SystemCare 7\ASC.exe
Task: {B61B3E2F-BD0E-4516-AE42-D3AE8DAA0681} - System32\Tasks\Microsoft\Windows\RVLKL\RVLKL => C:\ProgramData\rvlkl\rvlkl.exe [2014-03-23] (Logixoft)
AlternateDataStreams: C:\ProgramData\Temp:661DFA1C
EmptyTemp:
end