start::
CreateRestorePoint:
CloseProcesses:
HKLM-x32\...\Run: [ApnUpdater] => C:\Program Files (x86)\Ask.com\Updater\Updater.exe [1648264 2013-04-25] (Ask)
AppInit_DLLs: C:\PROGRA~3\Wincert\WIN64C~1.DLL => Pas de fichier
AppInit_DLLs: C:\PROGRA~2\MUSICT~1\Datamngr\x64\mgrldr.dll => Pas de fichier
IFEO\bitguard.exe: [Debugger] tasklist.exe
IFEO\bprotect.exe: [Debugger] tasklist.exe
IFEO\browserdefender.exe: [Debugger] tasklist.exe
IFEO\browserprotect.exe: [Debugger] tasklist.exe
IFEO\DatamngrCoordinator.exe: [Debugger] tasklist.exe
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2017-09-23]
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.11.599\SSScheduler.exe (McAfee, Inc.)
HKU\S-1-5-21-2978130641-414902115-4211268549-1001\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = hxxp://www.searchgol.com/?affID=119370&babsrc=HP_ss&mntrId=72879439E5AF0851
URLSearchHook: HKU\S-1-5-21-2978130641-414902115-4211268549-1001 - UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
URLSearchHook: HKU\S-1-5-21-2978130641-414902115-4211268549-1001 - (Pas de nom) - {84FF7BD6-B47F-46F8-9130-01B2696B36CB} - Pas de fichier
SearchScopes: HKLM -> DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD2001} URL = hxxp://dts.search.ask.com/sr?src=ieb&gct=ds&appid=1157&systemid=1&v=a9396-120&apn_uid=3429305739034233&apn_dtid=IME001&o=APN10653&apn_ptnrs=AGE&q={searchTerms}
SearchScopes: HKLM -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2001} URL = hxxp://dts.search.ask.com/sr?src=ieb&gct=ds&appid=1157&systemid=1&v=a9396-120&apn_uid=3429305739034233&apn_dtid=IME001&o=APN10653&apn_ptnrs=AGE&q={searchTerms}
SearchScopes: HKLM -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = hxxp://dts.search-results.com/sr?src=ieb&gct=ds&appid=418&systemid=406&apn_dtid=BND406&apn_ptnrs=AG6&o=APN10645&apn_uid=3429305739034233&q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD2001} URL = hxxp://dts.search.ask.com/sr?src=ieb&gct=ds&appid=1157&systemid=1&v=a9396-120&apn_uid=3429305739034233&apn_dtid=IME001&o=APN10653&apn_ptnrs=AGE&q={searchTerms}
SearchScopes: HKLM-x32 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2001} URL = hxxp://dts.search.ask.com/sr?src=ieb&gct=ds&appid=1157&systemid=1&v=a9396-120&apn_uid=3429305739034233&apn_dtid=IME001&o=APN10653&apn_ptnrs=AGE&q={searchTerms}
SearchScopes: HKLM-x32 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = hxxp://dts.search-results.com/sr?src=ieb&gct=ds&appid=418&systemid=406&apn_dtid=BND406&apn_ptnrs=AG6&o=APN10645&apn_uid=3429305739034233&q={searchTerms}
SearchScopes: HKLM-x32 -> {BFFED5CA-8BDF-47CC-AED0-23F4E6D77732} URL = hxxp://search.iminent.com/?appId=4FD02CA9-F332-4EEB-9D97-E043D2EEBBC7&ref=toolbox&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2978130641-414902115-4211268549-1001 -> bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
SearchScopes: HKU\S-1-5-21-2978130641-414902115-4211268549-1001 -> {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://search.babylon.com/?q={searchTerms}&affID=119370&babsrc=SP_ss_sps&mntrId=72879439E5AF0851
SearchScopes: HKU\S-1-5-21-2978130641-414902115-4211268549-1001 -> {2F336C89-A2F5-461D-8024-DC4DD3C1FAF3} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=PTF&o=15503&src=kw&q={searchTerms}&locale=fr_FR&apn_ptnrs=^LH&apn_dtid=^YYYYYY^YY^FR&apn_uid=9ebc4ed3-854c-45ef-88e1-d20b29f68089&apn_sauid=E3830B6B-3B27-4191-A896-71397C379B11
SearchScopes: HKU\S-1-5-21-2978130641-414902115-4211268549-1001 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2001} URL = hxxp://dts.search.ask.com/sr?src=ieb&gct=ds&appid=1157&systemid=1&v=a9396-120&apn_uid=3429305739034233&apn_dtid=IME001&o=APN10653&apn_ptnrs=AGE&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2978130641-414902115-4211268549-1001 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = hxxp://dts.search-results.com/sr?src=ieb&gct=ds&appid=418&systemid=406&apn_dtid=BND406&apn_ptnrs=AG6&o=APN10645&apn_uid=3429305739034233&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2978130641-414902115-4211268549-1001 -> {BFFED5CA-8BDF-47CC-AED0-23F4E6D77732} URL = hxxp://search.iminent.com/?appId=4FD02CA9-F332-4EEB-9D97-E043D2EEBBC7&ref=toolbox&q={searchTerms}
BHO-x32: TBSB01620 Class -> {58124A0B-DC32-4180-9BFF-E0E21AE34026} -> Pas de fichier
BHO-x32: Ask Toolbar -> {D4027C7F-154A-4066-A1AD-4243D8127440} -> C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll [2013-04-25] (Ask)
Toolbar: HKLM-x32 - IMinent Toolbar - {977AE9CC-AF83-45E8-9E03-E2798216E2D5} - Pas de fichier
Toolbar: HKLM-x32 - Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll [2013-04-25] (Ask)
Toolbar: HKU\S-1-5-21-2978130641-414902115-4211268549-1001 -> Pas de nom - {977AE9CC-AF83-45E8-9E03-E2798216E2D5} - Pas de fichier
Toolbar: HKU\S-1-5-21-2978130641-414902115-4211268549-1001 -> Pas de nom - {D4027C7F-154A-4066-A1AD-4243D8127440} - Pas de fichier
FF HKU\S-1-5-21-2978130641-414902115-4211268549-1001\...\Firefox\Extensions: [{0F827075-B026-42F3-885D-98981EE7B1AE}] - C:\ProgramData\BrowserProtect\2.6.1125.80\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\FirefoxExtension => non trouvé(e)
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\defaults\pref\all-iminent.js [2014-05-08]
CHR HKLM-x32\...\Chrome\Extension: [beggcgapdcclljgneepbpcnbpjhglbmd] - C:\Users\Maryline\AppData\Roaming\BabSolution\CR\searchgol.crx <non trouvé(e)>
CHR HKLM-x32\...\Chrome\Extension: [igdhbblpcellaljokkpfhcjlagemhgjl] - "C:\Program Files (x86)\Iminent\Iminent.crx" <non trouvé(e)>
CHR HKLM-x32\...\Chrome\Extension: [kpdmjodecdegfglgaapafjleomjjlpnh] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [pgafcinpmmpklohkojmllohdhomoefph] - C:\ProgramData\BrowserProtect\2.6.1125.80\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.crx <non trouvé(e)>
U3 idsvc; pas de ImagePath
2017-10-18 16:15 - 2013-05-25 09:09 - 000000000 ____D C:\Users\Maryline\AppData\LocalLow\AskToolbar
Task: {0D3E9EC7-C126-4323-B401-10A76D17877E} - System32\Tasks\DSite => C:\Users\Maryline\AppData\Roaming\DSite\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
Task: {1853EFD8-1688-44D6-9054-704E0DDE472F} - System32\Tasks\FGRun => C:\Users\Maryline\AppData\Roaming\pack.exe <==== ATTENTION
Task: {214DBE2A-8823-40B6-ABC1-3798D8D13E50} - System32\Tasks\EPUpdater => C:\Users\Maryline\AppData\Roaming\BABSOL~1\Shared\BabMaint.exe <==== ATTENTION
Task: {5EBD1844-D7A3-4A6F-A4DE-948AC23E5BBC} - System32\Tasks\Scheduled Update for Ask Toolbar => C:\Program Files (x86)\Ask.com\UpdateTask.exe [2013-04-25] () <==== ATTENTION
Task: {96D29655-B3C7-4447-9A93-0E71E51AC9D2} - \OfficeSoftwareProtectionPlatform\SvcRestartTask -> Pas de fichier <==== ATTENTION
2017-09-23 08:58 - 2017-09-23 08:58 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus
2017-09-23 08:58 - 2016-07-07 23:19 - 000000000 ____D C:\Program Files\McAfee Security Scan
2017-09-23 08:58 - 2016-07-07 07:56 - 000002009 _____ C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
C:\Program Files (x86)\Ask.com\
C:\Users\Maryline\AppData\Roaming\DSite\
C:\Users\Maryline\AppData\Roaming\pack.exe
C:\Users\Maryline\AppData\Roaming\BABSOL~1
C:\Users\Maryline\AppData\Roaming\BabSolution
C:\ProgramData\BrowserProtect
C:\Program Files (x86)\Iminent\
Hosts:
EmptyTemp:
end::