FORUM D’ENTRAIDE INFORMATIQUE (FEI)
Site d’assistance et de sécurité informatique

Attaque locky ...

Règles du forum : Entraide concernant la désinfection et la sécurité informatique : en cas de publicités intempestives, pop-up, redirections, logiciels indésirables, ralentissements suspects, virus, etc.
Une désinfection complète vous sera assurée : désinfection, sécurisation, puis prévention.
Seuls les helpers (personnes qualifiées et formées à la désinfection) ainsi que le staff sont autorisés à apporter leur aide dans cette section.
Merci également de prendre connaissance de la charte générale du forum.

Répondre

Afin d’empêcher la création automatisée de comptes, nous vous demandons de réussir le défi ci-contre.
Smileys
:D :) :-) ;) :| :( :cry: :cheers: :hourra: :mv: :lol: :mdr: :bonjour: :hello: :jap: :siffle: :bisou: :P :o :x :roll: :good: :bad: :super: :reflexion: :suspect: :? :oops: :peur: :zen: :boude: :bug:

Revue du sujet : Attaque locky ... Étendre la vue

Re: Attaque locky ...

par rubised » lun. 7 mars 2016 22:57
Je te demande de me supprimer ce que MBAM aTrouvé et de me poster le rapport avant de faire autre chose

Relance MBAM des l'affichage clique sur l'onglet Historique coche le dernier rapport et clique sur supprimer

A te lire

Re: Attaque locky ...

par jcdup » lun. 7 mars 2016 22:52
Quelle est la suite des opérations ?

Re: Attaque locky ...

par rubised » lun. 7 mars 2016 21:50
Ok car sur le premier rapport rien n'a été supprimé

A te lire

Re: Attaque locky ...

par jcdup » lun. 7 mars 2016 21:43
J'ai posté le lien vers le rapport dans un message précédent
Je referai une analyse malware pour mettre en quarantaine

Re: Attaque locky ...

par rubised » lun. 7 mars 2016 20:56
As tu bien fait ceci:

Si des menaces ont été détectées, cliquez sur [Afficher les résultats].
---> Sélectionnez toutes les menaces et cliquez sur [Supprimer la sélection], l'ordinateur peut demander le redémarrage, si tel est le cas acceptez.

---> Une fois redémarré (ou non suivant la suppression des menaces), ouvrir Malwarebytes et se rendre dans l'onglet "Rapport".
---> Ouvrir le dernier en date, et copiez-collez le sur le forum ou hébergez-le en ligne

Re: Attaque locky ...

par jcdup » lun. 7 mars 2016 19:57
Les fichiers n'ont pas été mis en quarantaine pourtant case à cocher de mise en quarantaine automatique cochée.

Re: Attaque locky ...

par jcdup » lun. 7 mars 2016 19:50
Lien vers le fichier complet.

http://www.cjoint.com/c/FChsXA2lb4Z

Re: Attaque locky ...

par jcdup » lun. 7 mars 2016 19:31
Merci de ton aide.

1/

Malwarebytes Anti-Malware
www.malwarebytes.org

Date de l'analyse: 07/03/2016
Heure de l'analyse: 18:43
Fichier journal: analyse malware.txt
Administrateur: Oui

Version: 2.2.0.1024
Base de données de programmes malveillants: v2016.03.07.05
Base de données de rootkits: v2016.02.27.01
Licence: Gratuit
Protection contre les programmes malveillants: Désactivé
Protection contre les sites Web malveillants: Désactivé
Autoprotection: Désactivé

Système d'exploitation: Windows 7 Service Pack 1
Processeur: x64
Système de fichiers: NTFS
Utilisateur: MINIERE

Type d'analyse: Analyse des menaces
Résultat: Terminé
Objets analysés: 361809
Temps écoulé: 30 min, 7 s

Mémoire: Activé
Démarrage: Activé
Système de fichiers: Activé
Archives: Activé
Rootkits: Activé
Heuristique: Activé
PUP: Activé
PUM: Activé

Processus: 6
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc.exe, 1044, , [e908f58f613848eeb392969eef120000]
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc2.exe, 1224, , [bb36bdc79306de58aa9b75bf9869ee12]
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\iSafeTray.exe, 2200, , [955ce69e3e5b3ff77cc9270df1107e82]
PUP.Optional.Hydrup, C:\Program Files (x86)\Common Files\Hydrup\hydrup.exe, 3688, , [d51c750f3e5b24127f20ef50649db34d]
PUP.Optional.Iminent, C:\Program Files (x86)\Iminent\Iminent.Messengers.exe, 3496, , [bd3488fc6d2cf244d4b039cc8183de22]
PUP.Optional.Iminent, C:\Program Files (x86)\Iminent\Iminent.exe, 4464, , [549d9ee62e6b5bdbd4307d8c17ec857b]

Modules: 137
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\iSvc.dll, , [9958552fe3b6072fd66f7cb8e31ece32],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\iImportLib.dll, , [28c911739108171f182dec4832cfd42c],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\iImportLib.dll, , [28c911739108171f182dec4832cfd42c],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\iImportLib.dll, , [28c911739108171f182dec4832cfd42c],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\isafeupbiz.dll, , [34bd5d274d4c7cbae362ed47f70adf21],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\isafepxy.dll, , [7c75caba3663c571d075be76fe030bf5],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\isafepxy.dll, , [7c75caba3663c571d075be76fe030bf5],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\isafepxy.dll, , [7c75caba3663c571d075be76fe030bf5],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\iCommu.dll, , [17da750f37621b1b370e0c28b948956b],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\iCommu.dll, , [17da750f37621b1b370e0c28b948956b],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\iCommu.dll, , [17da750f37621b1b370e0c28b948956b],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\isaferpt.dll, , [1cd53a4a56435bdb7acbfd37ca37e41c],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\isaferpt.dll, , [1cd53a4a56435bdb7acbfd37ca37e41c],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\isaferpt.dll, , [1cd53a4a56435bdb7acbfd37ca37e41c],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\ipcproxy.dll, , [02efc1c3f9a02b0bc67f260e1fe2db25],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\ipcproxy.dll, , [02efc1c3f9a02b0bc67f260e1fe2db25],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\iSvc2.dll, , [33be780c306913234df875bf679a629e],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\isafebs.dll, , [c72aa5df0a8f14223b0afa3a1ae7bc44],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\iSafeAdless.dll, , [b53cd6ae4c4d69cd014455df4db4d828],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\iSafenpf.dll, , [c52c1470a1f87eb8b49168cce71a39c7],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\iSafeCheckEngine.dll, , [dc153a4ab2e71c1a70d5ab89d52cfa06],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\iSafeEngineBase.dll, , [2fc2384ca5f455e176cffa3a748d07f9],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlCall.dll, , [3eb3226254456acce26350e423dee61a],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlMonCall.dll, , [29c8b9cb990088ae004558dc48b9cb35],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\iSafeDisp.dll, , [07eaf2928514e650d07584b0c43d1ce4],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\isafemc.dll, , [5f923351801990a676cfb77d23de41bf],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\isafemc.dll, , [5f923351801990a676cfb77d23de41bf],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\iSafeEngineDisp.dll, , [59983d47287121153e0752e2da27b44c],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\isafebase.dll, , [559c6e1603960f2799accd67d22f9868],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\isafebase.dll, , [559c6e1603960f2799accd67d22f9868],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\isafemadwc.dll, , [529fb3d1f6a3350130158aaa9e6337c9],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlShell.dll, , [04edcaba0c8d64d2de6772c2fa0740c0],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\iCommon.dll, , [cb268103d3c6fc3a00454ee6b74a5da3],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\iTpNodisturb.dll, , [f5fc760ea6f3f046ef564fe5d22f41bf],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\iTPProtect.dll, , [d21fa9db2e6bb383d76e3ff5ba47b54b],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\iTPFeedback.dll, , [925fadd74554d66035102a0ac43d4ab6],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\iTPDesk.dll, , [5b964341287196a03a0ba292f809af51],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\iTPFloaty.dll, , [e20fea9a14853600a1a44ce85aa7bf41],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\iTPStartupAssist.dll, , [00f11c686f2a75c16bdaa58fd42d59a7],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\iTPVirus.dll, , [1cd59ce8178243f3e75edf55ca3736ca],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\iTPPush.dll, , [a849473d732686b0f94ce351e21fdd23],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\iTPMsgCenter.dll, , [856cdda77c1d3ff76bda5bd9a1608977],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\iTPAutoClean.dll, , [e1100e76554478be360f60d44fb2768a],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\iTPToolbox.dll, , [c72a4b39f5a4de58cc790034fd0416ea],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\isafesopt.dll, , [727f8ef6ebaedb5b4005bb79f20f38c8],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\iSafeMon.dll, , [03eef58f257476c069dc54e07c85de22],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\iSafeMon.dll, , [03eef58f257476c069dc54e07c85de22],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\iSafeMon.dll, , [03eef58f257476c069dc54e07c85de22],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\iSafeMon.dll, , [03eef58f257476c069dc54e07c85de22],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\iSafeMon.dll, , [03eef58f257476c069dc54e07c85de22],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\iSafeMon.dll, , [03eef58f257476c069dc54e07c85de22],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\iSafeMon.dll, , [03eef58f257476c069dc54e07c85de22],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\iSafeMon.dll, , [03eef58f257476c069dc54e07c85de22],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\curlpp.dll, , [7c75572d138655e1d9f87e5a0df5cb35],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\curlpp.dll, , [7c75572d138655e1d9f87e5a0df5cb35],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\curlpp.dll, , [7c75572d138655e1d9f87e5a0df5cb35],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\libeay32.dll, , [7c75572d138655e1d9f87e5a0df5cb35],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\libeay32.dll, , [7c75572d138655e1d9f87e5a0df5cb35],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\libeay32.dll, , [7c75572d138655e1d9f87e5a0df5cb35],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\libpng.dll, , [7c75572d138655e1d9f87e5a0df5cb35],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\msvcp110.dll, , [7c75572d138655e1d9f87e5a0df5cb35],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\msvcp110.dll, , [7c75572d138655e1d9f87e5a0df5cb35],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\msvcp110.dll, , [7c75572d138655e1d9f87e5a0df5cb35],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\msvcr110.dll, , [7c75572d138655e1d9f87e5a0df5cb35],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\msvcr110.dll, , [7c75572d138655e1d9f87e5a0df5cb35],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\msvcr110.dll, , [7c75572d138655e1d9f87e5a0df5cb35],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\ouilibx.dll, , [7c75572d138655e1d9f87e5a0df5cb35],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\sqlite3.dll, , [7c75572d138655e1d9f87e5a0df5cb35],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\sqlite3.dll, , [7c75572d138655e1d9f87e5a0df5cb35],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\sqlite3.dll, , [7c75572d138655e1d9f87e5a0df5cb35],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\ssleay32.dll, , [7c75572d138655e1d9f87e5a0df5cb35],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\ssleay32.dll, , [7c75572d138655e1d9f87e5a0df5cb35],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\ssleay32.dll, , [7c75572d138655e1d9f87e5a0df5cb35],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\zlib1.dll, , [7c75572d138655e1d9f87e5a0df5cb35],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\zlib1.dll, , [7c75572d138655e1d9f87e5a0df5cb35],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\zlib1.dll, , [7c75572d138655e1d9f87e5a0df5cb35],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\libcurl.dll, , [7c75572d138655e1d9f87e5a0df5cb35],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\libcurl.dll, , [7c75572d138655e1d9f87e5a0df5cb35],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\libcurl.dll, , [7c75572d138655e1d9f87e5a0df5cb35],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\avira\avupdate.dll, , [7c75572d138655e1d9f87e5a0df5cb35],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\avira\savapi3.dll, , [7c75572d138655e1d9f87e5a0df5cb35],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\avira\antivirus\defs_20160307_00\aebb.dll, , [7c75572d138655e1d9f87e5a0df5cb35],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\avira\antivirus\defs_20160307_00\aecore.dll, , [7c75572d138655e1d9f87e5a0df5cb35],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\avira\antivirus\defs_20160307_00\aedroid.dll, , [7c75572d138655e1d9f87e5a0df5cb35],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\avira\antivirus\defs_20160307_00\aeemu.dll, , [7c75572d138655e1d9f87e5a0df5cb35],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\avira\antivirus\defs_20160307_00\aeexp.dll, , [7c75572d138655e1d9f87e5a0df5cb35],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\avira\antivirus\defs_20160307_00\aegen.dll, , [7c75572d138655e1d9f87e5a0df5cb35],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\avira\antivirus\defs_20160307_00\aehelp.dll, , [7c75572d138655e1d9f87e5a0df5cb35],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\avira\antivirus\defs_20160307_00\aeheur.dll, , [7c75572d138655e1d9f87e5a0df5cb35],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\avira\antivirus\defs_20160307_00\aemobile.dll, , [7c75572d138655e1d9f87e5a0df5cb35],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\avira\antivirus\defs_20160307_00\aeoffice.dll, , [7c75572d138655e1d9f87e5a0df5cb35],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\avira\antivirus\defs_20160307_00\aepack.dll, , [7c75572d138655e1d9f87e5a0df5cb35],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\avira\antivirus\defs_20160307_00\aerdl.dll, , [7c75572d138655e1d9f87e5a0df5cb35],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\avira\antivirus\defs_20160307_00\aesbx.dll, , [7c75572d138655e1d9f87e5a0df5cb35],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\avira\antivirus\defs_20160307_00\aescn.dll, , [7c75572d138655e1d9f87e5a0df5cb35],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\avira\antivirus\defs_20160307_00\aescript.dll, , [7c75572d138655e1d9f87e5a0df5cb35],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\avira\antivirus\defs_20160307_00\aevdf.dll, , [7c75572d138655e1d9f87e5a0df5cb35],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\tws\antirk.dll, , [7c75572d138655e1d9f87e5a0df5cb35],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\tws\ctools.dll, , [7c75572d138655e1d9f87e5a0df5cb35],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\tws\decexp.dll, , [7c75572d138655e1d9f87e5a0df5cb35],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\tws\emlib.dll, , [7c75572d138655e1d9f87e5a0df5cb35],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\tws\falgorit.dll, , [7c75572d138655e1d9f87e5a0df5cb35],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\tws\fgui.dll, , [7c75572d138655e1d9f87e5a0df5cb35],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\tws\filau.dll, , [7c75572d138655e1d9f87e5a0df5cb35],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\tws\filcmn.dll, , [7c75572d138655e1d9f87e5a0df5cb35],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\tws\filcpt.dll, , [7c75572d138655e1d9f87e5a0df5cb35],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\tws\filppi.dll, , [7c75572d138655e1d9f87e5a0df5cb35],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\tws\filvss.dll, , [7c75572d138655e1d9f87e5a0df5cb35],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\tws\lsf.dll, , [7c75572d138655e1d9f87e5a0df5cb35],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\tws\message.dll, , [7c75572d138655e1d9f87e5a0df5cb35],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\tws\plugmgr.dll, , [7c75572d138655e1d9f87e5a0df5cb35],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\tws\psmgr.dll, , [7c75572d138655e1d9f87e5a0df5cb35],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\tws\quarantine.dll, , [7c75572d138655e1d9f87e5a0df5cb35],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\tws\tsc.dll, , [7c75572d138655e1d9f87e5a0df5cb35],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\tws\twsdk.dll, , [7c75572d138655e1d9f87e5a0df5cb35],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\tws\unacev2.dll, , [7c75572d138655e1d9f87e5a0df5cb35],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\tws\unchm.dll, , [7c75572d138655e1d9f87e5a0df5cb35],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\tws\unemb.dll, , [7c75572d138655e1d9f87e5a0df5cb35],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\tws\unmisc.dll, , [7c75572d138655e1d9f87e5a0df5cb35],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\tws\unrar.dll, , [7c75572d138655e1d9f87e5a0df5cb35],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\tws\unsevzip.dll, , [7c75572d138655e1d9f87e5a0df5cb35],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\tws\unzip32.dll, , [7c75572d138655e1d9f87e5a0df5cb35],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\tws\vfst.dll, , [7c75572d138655e1d9f87e5a0df5cb35],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\tws\w32tools.dll, , [7c75572d138655e1d9f87e5a0df5cb35],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\tws\zipexp.dll, , [7c75572d138655e1d9f87e5a0df5cb35],
PUP.Optional.Iminent, C:\Program Files (x86)\Iminent\f_in_box.dll, , [549d9ee62e6b5bdbd4307d8c17ec857b],
PUP.Optional.Iminent, C:\Program Files (x86)\Iminent\Iminent.WinCore.dll, , [549d9ee62e6b5bdbd4307d8c17ec857b],
PUP.Optional.Iminent, C:\Program Files (x86)\Iminent\Iminent.WinCore.dll, , [549d9ee62e6b5bdbd4307d8c17ec857b],
PUP.Optional.Iminent, C:\Program Files (x86)\Iminent\Iminent.WinCore.dll, , [549d9ee62e6b5bdbd4307d8c17ec857b],
PUP.Optional.Iminent, C:\Program Files (x86)\Iminent\Iminent.WinCore.dll, , [549d9ee62e6b5bdbd4307d8c17ec857b],
PUP.Optional.Iminent, C:\Program Files (x86)\Iminent\Iminent.WinCore.dll, , [549d9ee62e6b5bdbd4307d8c17ec857b],
PUP.Optional.Iminent, C:\Program Files (x86)\Iminent\Iminent.WinCore.dll, , [549d9ee62e6b5bdbd4307d8c17ec857b],
PUP.Optional.Iminent, C:\Program Files (x86)\Iminent\Iminent.WinCore.dll, , [549d9ee62e6b5bdbd4307d8c17ec857b],
PUP.Optional.Iminent, C:\Program Files (x86)\Iminent\Iminent.WinCore.dll, , [549d9ee62e6b5bdbd4307d8c17ec857b],
PUP.Optional.Iminent, C:\Program Files (x86)\Iminent\Iminent.WinCore.dll, , [549d9ee62e6b5bdbd4307d8c17ec857b],
PUP.Optional.Iminent, C:\Program Files (x86)\Iminent\Iminent.WinCore.dll, , [549d9ee62e6b5bdbd4307d8c17ec857b],
PUP.Optional.Iminent, C:\Program Files (x86)\Iminent\Iminent.WinCore.dll, , [549d9ee62e6b5bdbd4307d8c17ec857b],

Clés du Registre: 347
FraudTool.YAC, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\iSafeService, , [e908f58f613848eeb392969eef120000],
PUP.Optional.Hydrup, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Hydrup, , [d51c750f3e5b24127f20ef50649db34d],
FraudTool.YAC, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\iSafeKrnlKit, , [28c9b2d2415856e0d3726fc5c53cf10f],
FraudTool.YAC, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\iSafeKrnlR3, , [06eb374d68313df9390c2e069c6553ad],
FraudTool.YAC, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\iSafeKrnl, , [8c651371603971c573d2c272f809fa06],
FraudTool.YAC, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\iSafeKrnlMon, , [49a8384c702972c42421cc689a6733cd],
PUP.Optional.Loadshop, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\ProtectMonitor, , [9e535034c0d9092d6aaf050c4fb3c23e],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\CLSID\{5C176BA0-6FC0-4EBD-8ACF-24AC592506B6}, , [d21f99eb376204320fe07eaeab5abc44],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\TYPELIB\{A9CAF365-EA35-45DA-BD8B-2EFA09D374AC}, , [d21f99eb376204320fe07eaeab5abc44],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\INTERFACE\{C58D664A-3DBC-4925-AE74-0382007DF113}, , [d21f99eb376204320fe07eaeab5abc44],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\INTERFACE\{C776D7F4-BA85-4B75-AAFC-3A0A11FE6E36}, , [d21f99eb376204320fe07eaeab5abc44],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{C58D664A-3DBC-4925-AE74-0382007DF113}, , [d21f99eb376204320fe07eaeab5abc44],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{C776D7F4-BA85-4B75-AAFC-3A0A11FE6E36}, , [d21f99eb376204320fe07eaeab5abc44],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{C58D664A-3DBC-4925-AE74-0382007DF113}, , [d21f99eb376204320fe07eaeab5abc44],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{C776D7F4-BA85-4B75-AAFC-3A0A11FE6E36}, , [d21f99eb376204320fe07eaeab5abc44],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{A9CAF365-EA35-45DA-BD8B-2EFA09D374AC}, , [d21f99eb376204320fe07eaeab5abc44],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{A9CAF365-EA35-45DA-BD8B-2EFA09D374AC}, , [d21f99eb376204320fe07eaeab5abc44],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\IminentWebBooster.ScriptExtender.1, , [d21f99eb376204320fe07eaeab5abc44],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\IminentWebBooster.ScriptExtender, , [d21f99eb376204320fe07eaeab5abc44],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\IminentWebBooster.ScriptExtender, , [d21f99eb376204320fe07eaeab5abc44],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\WOW6432NODE\IminentWebBooster.ScriptExtender, , [d21f99eb376204320fe07eaeab5abc44],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\IminentWebBooster.ScriptExtender.1, , [d21f99eb376204320fe07eaeab5abc44],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\WOW6432NODE\IminentWebBooster.ScriptExtender.1, , [d21f99eb376204320fe07eaeab5abc44],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{5C176BA0-6FC0-4EBD-8ACF-24AC592506B6}, , [d21f99eb376204320fe07eaeab5abc44],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}, , [d21f99eb376204320fe07eaeab5abc44],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\IminentWebBooster.BrowserHelperObject.1, , [d21f99eb376204320fe07eaeab5abc44],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\IminentWebBooster.BrowserHelperObject, , [d21f99eb376204320fe07eaeab5abc44],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\IminentWebBooster.BrowserHelperObject, , [d21f99eb376204320fe07eaeab5abc44],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\WOW6432NODE\IminentWebBooster.BrowserHelperObject, , [d21f99eb376204320fe07eaeab5abc44],
PUP.Optional.Iminent, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}, , [d21f99eb376204320fe07eaeab5abc44],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}, , [d21f99eb376204320fe07eaeab5abc44],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\IminentWebBooster.BrowserHelperObject.1, , [d21f99eb376204320fe07eaeab5abc44],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\WOW6432NODE\IminentWebBooster.BrowserHelperObject.1, , [d21f99eb376204320fe07eaeab5abc44],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\CLSID\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}, , [d21f99eb376204320fe07eaeab5abc44],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}, , [d21f99eb376204320fe07eaeab5abc44],
PUP.Optional.Iminent, HKU\S-1-5-21-458921172-1383609752-3657829135-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}, , [d21f99eb376204320fe07eaeab5abc44],
PUP.Optional.Iminent, HKU\S-1-5-21-458921172-1383609752-3657829135-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}, , [d21f99eb376204320fe07eaeab5abc44],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{5C176BA0-6FC0-4EBD-8ACF-24AC592506B6}, , [d21f99eb376204320fe07eaeab5abc44],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\CLSID\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}\INPROCSERVER32, , [d21f99eb376204320fe07eaeab5abc44],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\APPID\{01994268-3C10-4044-A1EA-7A9C1B739A11}, , [2cc53252ebae66d0038ef0c309f9e51b],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{01994268-3C10-4044-A1EA-7A9C1B739A11}, , [2cc53252ebae66d0038ef0c309f9e51b],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\WOW6432NODE\APPID\{01994268-3C10-4044-A1EA-7A9C1B739A11}, , [2cc53252ebae66d0038ef0c309f9e51b],
PUP.Optional.CouponBar, HKLM\SOFTWARE\CLASSES\APPID\{4CE516A7-F7AC-4628-B411-8F886DC5733E}, , [48a91e669dfc270f7497e0d03bc701ff],
PUP.Optional.CouponBar, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{4CE516A7-F7AC-4628-B411-8F886DC5733E}, , [48a91e669dfc270f7497e0d03bc701ff],
PUP.Optional.CouponBar, HKLM\SOFTWARE\CLASSES\WOW6432NODE\APPID\{4CE516A7-F7AC-4628-B411-8F886DC5733E}, , [48a91e669dfc270f7497e0d03bc701ff],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{01A602A0-D0B9-445B-8081-719E4177C4A7}, , [1fd28ff5b8e1fa3c1c76aa0948ba5ba5],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.ShowControlCenterCommand, , [1fd28ff5b8e1fa3c1c76aa0948ba5ba5],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent.Mediator.Communication.DataContracts.ShowControlCenterCommand, , [1fd28ff5b8e1fa3c1c76aa0948ba5ba5],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\WOW6432NODE\Iminent.Mediator.Communication.DataContracts.ShowControlCenterCommand, , [1fd28ff5b8e1fa3c1c76aa0948ba5ba5],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{01A602A0-D0B9-445B-8081-719E4177C4A7}, , [1fd28ff5b8e1fa3c1c76aa0948ba5ba5],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}, , [a84990f45445e84ec04faa19986a12ee],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\Iminent.Mediator.MediatorServiceProxy, , [a84990f45445e84ec04faa19986a12ee],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent.Mediator.MediatorServiceProxy, , [a84990f45445e84ec04faa19986a12ee],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\WOW6432NODE\Iminent.Mediator.MediatorServiceProxy, , [a84990f45445e84ec04faa19986a12ee],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}, , [a84990f45445e84ec04faa19986a12ee],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{58124A0B-DC32-4180-9BFF-E0E21AE34026}, , [ee036a1a0099ce684156149faf53f60a],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{57CADC46-58FF-4105-B733-5A9F3FC9783C}, , [ee036a1a0099ce684156149faf53f60a],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\ComObject.DeskbarEnabler.1, , [ee036a1a0099ce684156149faf53f60a],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\ComObject.DeskbarEnabler, , [ee036a1a0099ce684156149faf53f60a],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\ComObject.DeskbarEnabler, , [ee036a1a0099ce684156149faf53f60a],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\WOW6432NODE\ComObject.DeskbarEnabler, , [ee036a1a0099ce684156149faf53f60a],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\ComObject.DeskbarEnabler.1, , [ee036a1a0099ce684156149faf53f60a],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\WOW6432NODE\ComObject.DeskbarEnabler.1, , [ee036a1a0099ce684156149faf53f60a],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{57CADC46-58FF-4105-B733-5A9F3FC9783C}, , [ee036a1a0099ce684156149faf53f60a],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{977AE9CC-AF83-45E8-9E03-E2798216E2D5}, , [ee036a1a0099ce684156149faf53f60a],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\TYPELIB\{EC4085F2-8DB3-45a6-AD0B-CA289F3C5D7E}, , [ee036a1a0099ce684156149faf53f60a],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\INTERFACE\{2A42D13C-D427-4787-821B-CF6973855778}, , [ee036a1a0099ce684156149faf53f60a],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\INTERFACE\{3D8478AA-7B88-48A9-8BCB-B85D594411EC}, , [ee036a1a0099ce684156149faf53f60a],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\INTERFACE\{4D8ED2B3-DC62-43EC-ABA3-5B74F046B1BE}, , [ee036a1a0099ce684156149faf53f60a],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\INTERFACE\{95B6A271-FEB4-4160-B0FF-44394C21C8DC}, , [ee036a1a0099ce684156149faf53f60a],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\INTERFACE\{E67D5BC7-7129-493E-9281-F47BDAFACE4F}, , [ee036a1a0099ce684156149faf53f60a],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{2A42D13C-D427-4787-821B-CF6973855778}, , [ee036a1a0099ce684156149faf53f60a],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{3D8478AA-7B88-48A9-8BCB-B85D594411EC}, , [ee036a1a0099ce684156149faf53f60a],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{4D8ED2B3-DC62-43EC-ABA3-5B74F046B1BE}, , [ee036a1a0099ce684156149faf53f60a],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{95B6A271-FEB4-4160-B0FF-44394C21C8DC}, , [ee036a1a0099ce684156149faf53f60a],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{E67D5BC7-7129-493E-9281-F47BDAFACE4F}, , [ee036a1a0099ce684156149faf53f60a],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{2A42D13C-D427-4787-821B-CF6973855778}, , [ee036a1a0099ce684156149faf53f60a],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{3D8478AA-7B88-48A9-8BCB-B85D594411EC}, , [ee036a1a0099ce684156149faf53f60a],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{4D8ED2B3-DC62-43EC-ABA3-5B74F046B1BE}, , [ee036a1a0099ce684156149faf53f60a],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{95B6A271-FEB4-4160-B0FF-44394C21C8DC}, , [ee036a1a0099ce684156149faf53f60a],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{E67D5BC7-7129-493E-9281-F47BDAFACE4F}, , [ee036a1a0099ce684156149faf53f60a],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{EC4085F2-8DB3-45a6-AD0B-CA289F3C5D7E}, , [ee036a1a0099ce684156149faf53f60a],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{EC4085F2-8DB3-45a6-AD0B-CA289F3C5D7E}, , [ee036a1a0099ce684156149faf53f60a],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\TBSB01620.TBSB01620.3, , [ee036a1a0099ce684156149faf53f60a],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\TBSB01620.TBSB01620, , [ee036a1a0099ce684156149faf53f60a],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TBSB01620.TBSB01620, , [ee036a1a0099ce684156149faf53f60a],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TBSB01620.TBSB01620, , [ee036a1a0099ce684156149faf53f60a],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\TBSB01620.IEToolbar, , [ee036a1a0099ce684156149faf53f60a],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\TBSB01620.IEToolbar.1, , [ee036a1a0099ce684156149faf53f60a],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TBSB01620.IEToolbar, , [ee036a1a0099ce684156149faf53f60a],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TBSB01620.IEToolbar.1, , [ee036a1a0099ce684156149faf53f60a],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TBSB01620.TBSB01620.3, , [ee036a1a0099ce684156149faf53f60a],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TBSB01620.IEToolbar, , [ee036a1a0099ce684156149faf53f60a],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TBSB01620.IEToolbar.1, , [ee036a1a0099ce684156149faf53f60a],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TBSB01620.TBSB01620.3, , [ee036a1a0099ce684156149faf53f60a],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{977AE9CC-AF83-45E8-9E03-E2798216E2D5}, , [ee036a1a0099ce684156149faf53f60a],
PUP.Optional.Iminent, HKU\S-1-5-21-458921172-1383609752-3657829135-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{977AE9CC-AF83-45E8-9E03-E2798216E2D5}, , [ee036a1a0099ce684156149faf53f60a],
PUP.Optional.Iminent, HKU\S-1-5-21-458921172-1383609752-3657829135-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{977AE9CC-AF83-45E8-9E03-E2798216E2D5}, , [ee036a1a0099ce684156149faf53f60a],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{9F34B17E-FF0D-4FAB-97C4-9713FEE79052}, , [ee036a1a0099ce684156149faf53f60a],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\Toolbar3.ContextMenuNotifier.1, , [ee036a1a0099ce684156149faf53f60a],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\Toolbar3.ContextMenuNotifier, , [ee036a1a0099ce684156149faf53f60a],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Toolbar3.ContextMenuNotifier, , [ee036a1a0099ce684156149faf53f60a],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\WOW6432NODE\Toolbar3.ContextMenuNotifier, , [ee036a1a0099ce684156149faf53f60a],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Toolbar3.ContextMenuNotifier.1, , [ee036a1a0099ce684156149faf53f60a],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\WOW6432NODE\Toolbar3.ContextMenuNotifier.1, , [ee036a1a0099ce684156149faf53f60a],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{9F34B17E-FF0D-4FAB-97C4-9713FEE79052}, , [ee036a1a0099ce684156149faf53f60a],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{D565B35E-B787-40FA-95E3-E3562F8FC1A0}, , [ee036a1a0099ce684156149faf53f60a],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\Toolbar3.CustomInternetSecurityImpl.1, , [ee036a1a0099ce684156149faf53f60a],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\Toolbar3.CustomInternetSecurityImpl, , [ee036a1a0099ce684156149faf53f60a],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Toolbar3.CustomInternetSecurityImpl, , [ee036a1a0099ce684156149faf53f60a],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\WOW6432NODE\Toolbar3.CustomInternetSecurityImpl, , [ee036a1a0099ce684156149faf53f60a],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Toolbar3.CustomInternetSecurityImpl.1, , [ee036a1a0099ce684156149faf53f60a],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\WOW6432NODE\Toolbar3.CustomInternetSecurityImpl.1, , [ee036a1a0099ce684156149faf53f60a],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{D565B35E-B787-40FA-95E3-E3562F8FC1A0}, , [ee036a1a0099ce684156149faf53f60a],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{58124A0B-DC32-4180-9BFF-E0E21AE34026}, , [ee036a1a0099ce684156149faf53f60a],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\Toolbar3.TBSB01620.1, , [ee036a1a0099ce684156149faf53f60a],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\Toolbar3.TBSB01620, , [ee036a1a0099ce684156149faf53f60a],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Toolbar3.TBSB01620, , [ee036a1a0099ce684156149faf53f60a],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\WOW6432NODE\Toolbar3.TBSB01620, , [ee036a1a0099ce684156149faf53f60a],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{58124A0B-DC32-4180-9BFF-E0E21AE34026}, , [ee036a1a0099ce684156149faf53f60a],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Toolbar3.TBSB01620.1, , [ee036a1a0099ce684156149faf53f60a],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\WOW6432NODE\Toolbar3.TBSB01620.1, , [ee036a1a0099ce684156149faf53f60a],
PUP.Optional.Iminent, HKU\S-1-5-21-458921172-1383609752-3657829135-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{58124A0B-DC32-4180-9BFF-E0E21AE34026}, , [ee036a1a0099ce684156149faf53f60a],
PUP.Optional.Iminent, HKU\S-1-5-21-458921172-1383609752-3657829135-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{58124A0B-DC32-4180-9BFF-E0E21AE34026}, , [ee036a1a0099ce684156149faf53f60a],
PUP.Optional.Softomate, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{CA3EB689-8F09-4026-AA10-B9534C691CE0}, , [7e733450c3d672c4757e74438f739a66],
PUP.Optional.Softomate, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{CA3EB689-8F09-4026-AA10-B9534C691CE0}, , [7e733450c3d672c4757e74438f739a66],
PUP.Optional.Softomate, HKLM\SOFTWARE\CLASSES\TYPELIB\{4509D3CC-B642-4745-B030-645B79522C6D}, , [7e733450c3d672c4757e74438f739a66],
PUP.Optional.Softomate, HKLM\SOFTWARE\CLASSES\INTERFACE\{4897BBA6-48D9-468C-8EFA-846275D7701B}, , [7e733450c3d672c4757e74438f739a66],
PUP.Optional.Softomate, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{4897BBA6-48D9-468C-8EFA-846275D7701B}, , [7e733450c3d672c4757e74438f739a66],
PUP.Optional.Softomate, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{4897BBA6-48D9-468C-8EFA-846275D7701B}, , [7e733450c3d672c4757e74438f739a66],
PUP.Optional.Softomate, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{4509D3CC-B642-4745-B030-645B79522C6D}, , [7e733450c3d672c4757e74438f739a66],
PUP.Optional.Softomate, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{4509D3CC-B642-4745-B030-645B79522C6D}, , [7e733450c3d672c4757e74438f739a66],
PUP.Optional.Softomate, HKLM\SOFTWARE\CLASSES\URLSearchHook.ToolbarURLSearchHook.1, , [7e733450c3d672c4757e74438f739a66],
PUP.Optional.Softomate, HKLM\SOFTWARE\CLASSES\URLSearchHook.ToolbarURLSearchHook, , [7e733450c3d672c4757e74438f739a66],
PUP.Optional.Softomate, HKLM\SOFTWARE\WOW6432NODE\CLASSES\URLSearchHook.ToolbarURLSearchHook, , [7e733450c3d672c4757e74438f739a66],
PUP.Optional.Softomate, HKLM\SOFTWARE\CLASSES\WOW6432NODE\URLSearchHook.ToolbarURLSearchHook, , [7e733450c3d672c4757e74438f739a66],
PUP.Optional.Softomate, HKLM\SOFTWARE\WOW6432NODE\CLASSES\URLSearchHook.ToolbarURLSearchHook.1, , [7e733450c3d672c4757e74438f739a66],
PUP.Optional.Softomate, HKLM\SOFTWARE\CLASSES\WOW6432NODE\URLSearchHook.ToolbarURLSearchHook.1, , [7e733450c3d672c4757e74438f739a66],
PUP.Optional.MultiPlug, HKLM\SOFTWARE\CLASSES\TYPELIB\{E2343056-CC08-46AC-B898-BFC7ACF4E755}, , [d918b6ce9405af8789f8ae0dc53db050],
PUP.Optional.MultiPlug, HKLM\SOFTWARE\CLASSES\INTERFACE\{7041156A-0D2B-4DCD-A8EE-D0608BFCB2D0}, , [d918b6ce9405af8789f8ae0dc53db050],
PUP.Optional.MultiPlug, HKLM\SOFTWARE\CLASSES\INTERFACE\{9B41579A-1996-42F9-8F84-7B7786818CEF}, , [d918b6ce9405af8789f8ae0dc53db050],
PUP.Optional.MultiPlug, HKLM\SOFTWARE\CLASSES\INTERFACE\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}, , [d918b6ce9405af8789f8ae0dc53db050],
PUP.Optional.MultiPlug, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{7041156A-0D2B-4DCD-A8EE-D0608BFCB2D0}, , [d918b6ce9405af8789f8ae0dc53db050],
PUP.Optional.MultiPlug, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{9B41579A-1996-42F9-8F84-7B7786818CEF}, , [d918b6ce9405af8789f8ae0dc53db050],
PUP.Optional.MultiPlug, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}, , [d918b6ce9405af8789f8ae0dc53db050],
PUP.Optional.MultiPlug, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{7041156A-0D2B-4DCD-A8EE-D0608BFCB2D0}, , [d918b6ce9405af8789f8ae0dc53db050],
PUP.Optional.MultiPlug, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{9B41579A-1996-42F9-8F84-7B7786818CEF}, , [d918b6ce9405af8789f8ae0dc53db050],
PUP.Optional.MultiPlug, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}, , [d918b6ce9405af8789f8ae0dc53db050],
PUP.Optional.MultiPlug, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{E2343056-CC08-46AC-B898-BFC7ACF4E755}, , [d918b6ce9405af8789f8ae0dc53db050],
PUP.Optional.MultiPlug, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{E2343056-CC08-46AC-B898-BFC7ACF4E755}, , [d918b6ce9405af8789f8ae0dc53db050],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{0af350d9-3916-454b-ac53-0b0b65f41301}, , [17daef951a7fb97dc6cd5e55b250dd23],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{68B81CCD-A80C-4060-8947-5AE69ED01199}, , [4fa2a1e3039681b56137664d0ef4a15f],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E6B969FB-6D33-48d2-9061-8BBD4899EB08}, , [c8298103940539fdabf2f7bc72909b65],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BFFED5CA-8BDF-47CC-AED0-23F4E6D77732}, , [15dca7dd03967fb7059700b37e84ef11],
PUP.Optional.Iminent, HKLM\SOFTWARE\Iminent, , [cb260f751c7d96a0acd315f013f17d83],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\iminent, , [bc35156fc5d40a2cde8c15f0f21233cd],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\Iminent.Business.Tinyfying.DownloadArgs, , [7b7650343366191d0e5d23e213f159a7],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\Iminent.Business.Tinyfying.LinkToPromoteArgs, , [e20fe69eacedb581ec7f4abbb84c42be],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\Iminent.Business.Tinyfying.RawDataArgs, , [33bec4c0e1b8a88e6a01040157ad728e],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\Iminent.Business.Tinyfying.TinyUrlArgs, , [f8f9fe867722c1755b106d9817ed0bf5],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\Iminent.Business.Tinyfying.ViralLinkArgs, , [d120493b5b3e7eb86704ae571de748b8],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.ClientCallback, , [bf325430990031057df0db2a897b8e72],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.ContractBase, , [8d642f556930241280ede322f90b48b8],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.AddToUserContentCommand, , [ec052b59dabf11251954da2bdd2703fd],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.CheckLoginStatusCommand, , [4fa2d9ab198063d34924c73e1fe5db25],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.CleanCacheCommand, , [a1508bf97e1b72c4a9c4e61f0301bc44],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.GameOverCallback, , [bd34bfc5138626109dd06c9912f2a858],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.GetCreditCommand, , [2bc6364e6c2d4de9f07d55b018ec2cd4],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.GetInstallationContextCommand, , [b8391074b8e14ee82944e91c63a1dd23],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.GetLoginStatusCommand, , [44ad750f1683eb4b224b7c89788c57a9],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.GetLoginStatusResult, , [04ede99ba7f22313b8b5a560768e35cb],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.GetVariableCommand, , [bf3202828f0a1e18bab362a318ecc937],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.GetVariableResult, , [767b5b29f0a91d19e38a0bfa15efe818],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.InstallationContextResult, , [32bf96ee5148e94d28450ff63cc8cb35],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.LoadContentCommand, , [12dfdda76f2a112591dcde277c889868],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.LoadContentCommandResult, , [8170186c277255e1bcb114f125df6c94],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.LoginCommand, , [7f72f490435602349ad327de3fc558a8],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.LoginStatusChangedCallback, , [ea07b7cda8f17eb83c316b9a4db70ef2],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.LogoutCommand, , [19d8572d3267e452492410f520e4cc34],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.MergeIdentityCommand, , [5c95cdb7574260d6b3bad431976d926e],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.MyAccountCommand, , [0ce5d7ad188123130b62d92c966e30d0],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.PlayContentCommand, , [47aa5e26b1e8ff37610c5aabed17c43c],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.PostContentCallback, , [7a778004b6e3b185125ba461e123af51],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.RecycleViewsCommand, , [1fd2b7cd4c4d2f07096450b51be9ff01],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.SetVariableCommand, , [e8091a6ad5c475c1c4a934d1c04427d9],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.ShowBrowserWindowCommand, , [38b9a4e04653ae882449bd48758fa55b],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.ShowPluginWindowCommand, , [ec05a0e4d2c7092d6ffe48bd1ee631cf],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.TestContentCommand, , [b9380c78dbbea69076f7be4758ac2cd4],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.UserContentChangedCallback, , [4aa7dba9871291a5402d42c3b64e3dc3],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.VariableChangedCallback, , [cb2621632b6e0333afbe33d2996b7888],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.WarmUpCommand, , [80712460148568ce4e1fa95c788c23dd],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.DataContracts.WelcomeCommand, , [6091f78d4c4d91a5b5b8a85d14f06b95],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.ServerCommand, , [bd3490f4fd9cad89f07d5ea79371f30d],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\Iminent.Mediator.Communication.ServerResult, , [6f82b0d41584ad895d1042c37d87d32d],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\Iminent.Mediator.LightContent, , [f7fab8cc6f2abf77d59870953aca0af6],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\Iminent.Mediator.LightUri, , [44adc1c36534dd59660761a40bf96898],
PUP.Optional.MyOSProtect, HKLM\SOFTWARE\CLASSES\MyOSProtectLib.DataContainer, , [b73ac4c0cecbd561d90345caba4a32ce],
PUP.Optional.MyOSProtect, HKLM\SOFTWARE\CLASSES\MyOSProtectLib.DataContainer.1, , [e1106123fa9fb87e3ba1818e30d4a25e],
PUP.Optional.MyOSProtect, HKLM\SOFTWARE\CLASSES\MyOSProtectLib.DataController, , [7c75aed61f7a25118a52be512bd94bb5],
PUP.Optional.MyOSProtect, HKLM\SOFTWARE\CLASSES\MyOSProtectLib.DataController.1, , [7e739ce80c8db284518b8f80d03410f0],
PUP.Optional.MyOSProtect, HKLM\SOFTWARE\CLASSES\MyOSProtectLib.DataTable, , [c22f7d071188eb4bad2fab64877dac54],
PUP.Optional.MyOSProtect, HKLM\SOFTWARE\CLASSES\MyOSProtectLib.DataTable.1, , [c0319de768312f07c715907fda2a4bb5],
PUP.Optional.MyOSProtect, HKLM\SOFTWARE\CLASSES\MyOSProtectLib.DataTableFields, , [ce230d77a8f11b1bab3129e6d72d22de],
PUP.Optional.MyOSProtect, HKLM\SOFTWARE\CLASSES\MyOSProtectLib.DataTableFields.1, , [02efbcc8b6e380b635a739d624e0dc24],
PUP.Optional.MyOSProtect, HKLM\SOFTWARE\CLASSES\MyOSProtectLib.DataTableHolder, , [668bc1c3fe9b76c0ecf0b85760a43ec2],
PUP.Optional.MyOSProtect, HKLM\SOFTWARE\CLASSES\MyOSProtectLib.DataTableHolder.1, , [1cd5f1936633e4527b6128e75ba925db],
PUP.Optional.MyOSProtect, HKLM\SOFTWARE\CLASSES\MyOSProtectLib.LSPLogic, , [44ad4242afea64d2f1eb29e632d2ff01],
PUP.Optional.MyOSProtect, HKLM\SOFTWARE\CLASSES\MyOSProtectLib.LSPLogic.1, , [b43ddea658413afc8854ca4557adaa56],
PUP.Optional.MyOSProtect, HKLM\SOFTWARE\CLASSES\MyOSProtectLib.ReadOnlyManager, , [40b14d377a1fe5515d7f55ba8d77d32d],
PUP.Optional.MyOSProtect, HKLM\SOFTWARE\CLASSES\MyOSProtectLib.ReadOnlyManager.1, , [648d2361504989ad617b927d84805fa1],
PUP.Optional.MyOSProtect, HKLM\SOFTWARE\CLASSES\MyOSProtectLib.WatchDog, , [05eca3e1e0b980b658849d727f85b24e],
PUP.Optional.MyOSProtect, HKLM\SOFTWARE\CLASSES\MyOSProtectLib.WatchDog.1, , [1ad72c58920794a2be1e828d6e96cc34],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\APPID\Iminent.WebBooster.InternetExplorer.DLL, , [41b09de7f0a9d1653e2adc29877d5da3],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\WOW6432NODE\APPID\Iminent.WebBooster.InternetExplorer.DLL, , [f9f85d27b0e966d0f672d92c8b7941bf],
PUP.Optional.WebSearch, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{F7C78C08-3CC7-416F-B827-7C1785ABBDA8}, , [8b6631538e0b979feacf2efabd4746ba],
PUM.Optional.DisableChromeUpdates, HKLM\SOFTWARE\POLICIES\GOOGLE\UPDATE, , [836e483cb3e638fe5673a0c09e66758b],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\Iminent, , [fbf67f054752c96dc0bfe61fa064ed13],
PUP.Optional.SupTab, HKLM\SOFTWARE\WOW6432NODE\supTab, , [47aacaba693069cdac204b1fa95b659b],
PUP.Optional.WPM, HKLM\SOFTWARE\WOW6432NODE\supWindowsMangerProtect, , [b041bcc82277a294301f66c4996b21df],
PUP.Optional.SupTab, HKLM\SOFTWARE\WOW6432NODE\supWPM, , [b041d1b38a0f171f5aec28f97094d52b],
PUP.Optional.WebSearch, HKLM\SOFTWARE\WOW6432NODE\webssearchesSoftware, , [9f52d3b1742500366c4f6abead5740c0],
PUP.Optional.SuperOptimizer, HKLM\SOFTWARE\WOW6432NODE\{1146AC44-2F03-4431-B4FD-889BC837521F}, , [bb36ea9a0b8e48ee51c836eb36cedf21],
PUP.Optional.SuperOptimizer, HKLM\SOFTWARE\WOW6432NODE\{6791A2F3-FC80-475C-A002-C014AF797E9C}, , [f10014700990b97d4ad00819d133fe02],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\iminent, , [ec05295b7f1a8fa71b4f3dc81be97789],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent.Business.Tinyfying.DownloadArgs, , [f100a1e3dfba52e45b103acb7f855ca4],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent.Business.Tinyfying.LinkToPromoteArgs, , [767b95efa8f1a29489e22bda62a2f010],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent.Business.Tinyfying.RawDataArgs, , [1bd652325841ac8abeadef16a55f9e62],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent.Business.Tinyfying.TinyUrlArgs, , [767b12725346d462e18a4abb32d210f0],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent.Business.Tinyfying.ViralLinkArgs, , [c32edfa5abee1e18d695bf464db709f7],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent.Mediator.Communication.ClientCallback, , [32bf0d77a5f4fa3c8de0a461d0345aa6],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent.Mediator.Communication.ContractBase, , [d51c7e0650490a2c56178184659fb749],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent.Mediator.Communication.DataContracts.AddToUserContentCommand, , [4ca502829dfcaf87214cc144a460d828],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent.Mediator.Communication.DataContracts.CheckLoginStatusCommand, , [d51c1d67247584b2f47944c12fd5c23e],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent.Mediator.Communication.DataContracts.CleanCacheCommand, , [9e536420eaaf8ea85c1134d1ba4a46ba],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent.Mediator.Communication.DataContracts.GameOverCallback, , [11e04f350099a78f95d8d72ec83c27d9],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent.Mediator.Communication.DataContracts.GetCreditCommand, , [bb36681c33667db9323b58adc83c21df],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent.Mediator.Communication.DataContracts.GetInstallationContextCommand, , [8869e0a4762359dd0469877e18ec56aa],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent.Mediator.Communication.DataContracts.GetLoginStatusCommand, , [b43dd7ad2d6c45f1d6970302dd27db25],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent.Mediator.Communication.DataContracts.GetLoginStatusResult, , [925f93f1e3b603339ecf867f2ed6619f],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent.Mediator.Communication.DataContracts.GetVariableCommand, , [f4fd6222afeac670cca153b24bb9867a],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent.Mediator.Communication.DataContracts.GetVariableResult, , [faf7760e49509d992e3f32d309fb0cf4],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent.Mediator.Communication.DataContracts.InstallationContextResult, , [876a1074e4b55cdab5b812f37490f907],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent.Mediator.Communication.DataContracts.LoadContentCommand, , [0ae7d3b11e7b30069ad38f7633d147b9],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent.Mediator.Communication.DataContracts.LoadContentCommandResult, , [26cbbec6ddbcef47a0cdff06ba4a55ab],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent.Mediator.Communication.DataContracts.LoginCommand, , [638ea2e2b2e7fc3acaa3da2bbc485aa6],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent.Mediator.Communication.DataContracts.LoginStatusChangedCallback, , [3fb21272e4b55ed84d209b6aae561ce4],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent.Mediator.Communication.DataContracts.LogoutCommand, , [ae4388fc4d4c95a12548e124a65e7f81],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent.Mediator.Communication.DataContracts.MergeIdentityCommand, , [b53c92f22673c3734627c44153b101ff],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent.Mediator.Communication.DataContracts.MyAccountCommand, , [30c17113376241f5323b679e788ccc34],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent.Mediator.Communication.DataContracts.PlayContentCommand, , [f9f81272aeeb88ae83eae32218ec7b85],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent.Mediator.Communication.DataContracts.PostContentCallback, , [2bc623617920cd69442951b442c28a76],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent.Mediator.Communication.DataContracts.RecycleViewsCommand, , [fcf5e1a3b1e80432e68725e0f311847c],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent.Mediator.Communication.DataContracts.SetVariableCommand, , [d31e3f453d5c191d98d5b4517391629e],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent.Mediator.Communication.DataContracts.ShowBrowserWindowCommand, , [25cc95ef8c0dc1751b52fd08aa5a8779],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent.Mediator.Communication.DataContracts.ShowPluginWindowCommand, , [37ba721200991e1894d938cd94700ff1],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent.Mediator.Communication.DataContracts.TestContentCommand, , [ae434242e2b7c670b5b8d134788c9b65],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent.Mediator.Communication.DataContracts.UserContentChangedCallback, , [32bf64201b7e8bab3439dd2856ae966a],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent.Mediator.Communication.DataContracts.VariableChangedCallback, , [ad44820292078da96d003acb729235cb],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent.Mediator.Communication.DataContracts.WarmUpCommand, , [fcf591f3a8f1979f0469fc0932d25aa6],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent.Mediator.Communication.DataContracts.WelcomeCommand, , [d21fc3c1a6f3d2645c11699c8e76a957],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent.Mediator.Communication.ServerCommand, , [c130f58f1980d85ee28b9d688e7645bb],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent.Mediator.Communication.ServerResult, , [a24f463e4059bb7be8854eb7c341629e],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent.Mediator.LightContent, , [20d16f157c1d5bdb2b4255b07f85c43c],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent.Mediator.LightUri, , [aa47a2e2bcddfe38a6c7f90c17edcb35],
PUP.Optional.MyOSProtect, HKLM\SOFTWARE\WOW6432NODE\CLASSES\MyOSProtectLib.DataContainer, , [ed043d47dbbe51e5726ab05f3cc86e92],
PUP.Optional.MyOSProtect, HKLM\SOFTWARE\WOW6432NODE\CLASSES\MyOSProtectLib.DataContainer.1, , [2fc291f3bcdd75c17864e32c0bf93ec2],
PUP.Optional.MyOSProtect, HKLM\SOFTWARE\WOW6432NODE\CLASSES\MyOSProtectLib.DataController, , [a34ebfc5aaefdb5b4795729d9e6608f8],
PUP.Optional.MyOSProtect, HKLM\SOFTWARE\WOW6432NODE\CLASSES\MyOSProtectLib.DataController.1, , [9160255f0f8ad66026b6010ea75d8779],
PUP.Optional.MyOSProtect, HKLM\SOFTWARE\WOW6432NODE\CLASSES\MyOSProtectLib.DataTable, , [965b1c68dfbab28456863ed10301d927],
PUP.Optional.MyOSProtect, HKLM\SOFTWARE\WOW6432NODE\CLASSES\MyOSProtectLib.DataTable.1, , [1ad7473d257470c61dbfb758768eca36],
PUP.Optional.MyOSProtect, HKLM\SOFTWARE\WOW6432NODE\CLASSES\MyOSProtectLib.DataTableFields, , [b73afa8a6e2b0f27f3e9b35c6a9aec14],
PUP.Optional.MyOSProtect, HKLM\SOFTWARE\WOW6432NODE\CLASSES\MyOSProtectLib.DataTableFields.1, , [dd14f193346543f35587c34c956fa65a],
PUP.Optional.MyOSProtect, HKLM\SOFTWARE\WOW6432NODE\CLASSES\MyOSProtectLib.DataTableHolder, , [5f92f68e2c6d63d3f8e4b55ae222c53b],
PUP.Optional.MyOSProtect, HKLM\SOFTWARE\WOW6432NODE\CLASSES\MyOSProtectLib.DataTableHolder.1, , [c0315034e9b039fde8f42ee148bc3ac6],
PUP.Optional.MyOSProtect, HKLM\SOFTWARE\WOW6432NODE\CLASSES\MyOSProtectLib.LSPLogic, , [6f8252321b7e0531fae2ac631be938c8],
PUP.Optional.MyOSProtect, HKLM\SOFTWARE\WOW6432NODE\CLASSES\MyOSProtectLib.LSPLogic.1, , [f2ff6f15cccd221431abed22828240c0],
PUP.Optional.MyOSProtect, HKLM\SOFTWARE\WOW6432NODE\CLASSES\MyOSProtectLib.ReadOnlyManager, , [30c14d37aced25113ba197789f65c33d],
PUP.Optional.MyOSProtect, HKLM\SOFTWARE\WOW6432NODE\CLASSES\MyOSProtectLib.ReadOnlyManager.1, , [47aadda72574b1858656b25d74906b95],
PUP.Optional.MyOSProtect, HKLM\SOFTWARE\WOW6432NODE\CLASSES\MyOSProtectLib.WatchDog, , [48a93054c5d4be7831abfd12867e27d9],
PUP.Optional.MyOSProtect, HKLM\SOFTWARE\WOW6432NODE\CLASSES\MyOSProtectLib.WatchDog.1, , [ce23dda7a9f077bf8359dc33a85cec14],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\Iminent.WebBooster.InternetExplorer.DLL, , [f5fcbec6c2d737ff7bed699c12f260a0],
PUP.Optional.WebSearch, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, , [c031671d28719e98caef71b784805ea2],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\IMBoosterARP, , [6f821d67f1a80d2997f0c441907437c9],
PUM.Optional.DisableChromeUpdates, HKLM\SOFTWARE\WOW6432NODE\POLICIES\GOOGLE\UPDATE, , [549d1a6a5d3c56e0f3d63c244fb56898],
PUP.Optional.SupTab, HKLM\SOFTWARE\WOW6432NODE\SUPDP, , [15dcd8ac8a0f7abc4bf9ab76b54f8c74],
PUP.Optional.Umbrella, HKLM\SOFTWARE\WOW6432NODE\UMBRELLA, , [d21f9ce8a7f23ef8f48224012fd5b54b],
PUP.Optional.IEPluginServices, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\EVENTLOG\APPLICATION\IePluginServices, , [727f691be2b70b2b726312f2af551de3],
PUP.Optional.WindowsMangerProtect, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\EVENTLOG\APPLICATION\WindowsMangerProtect, , [559cbec6b9e024121d923bee1fe53bc5],
PUP.Optional.SuperOptimizer, HKU\S-1-5-18\SOFTWARE\APPDATALOW\{1146AC44-2F03-4431-B4FD-889BC837521F}, , [ba37e2a2badfdf5769ac1c05a75d18e8],
PUP.Optional.ConduitTB.Gen, HKU\S-1-5-21-458921172-1383609752-3657829135-1000\SOFTWARE\Conduit, , [0fe2fb893a5f58deac70ed90c83ce21e],
PUP.Optional.Iminent, HKU\S-1-5-21-458921172-1383609752-3657829135-1000\SOFTWARE\Iminent, , [a74aa4e06336999dd19f0bfa57adf30d],
PUP.Optional.WebSearches.ShrtCln, HKU\S-1-5-21-458921172-1383609752-3657829135-1000\SOFTWARE\SupHpUISoft, , [1ad7e3a1eaafc86e76d5f034f60d59a7],
PUP.Optional.SuperOptimizer, HKU\S-1-5-21-458921172-1383609752-3657829135-1000\SOFTWARE\APPDATALOW\{1146AC44-2F03-4431-B4FD-889BC837521F}, , [747d780c099038fe32e37da421e3a060],
PUP.Optional.Iminent, HKU\S-1-5-21-458921172-1383609752-3657829135-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOWREGISTRY\Iminent, , [a24f661ebddcf2447df67a8bd2320bf5],
PUP.Optional.V9.ShrtCln, HKU\S-1-5-21-458921172-1383609752-3657829135-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{05C12E4C-6291-43F6-8C07-BBD3B3EF5E18}, , [32bf6123b2e758def32fd30eb74cca36],
PUP.Optional.V9.ShrtCln, HKU\S-1-5-21-458921172-1383609752-3657829135-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{15D811D6-979A-4DA0-9B21-A6E02AEABAEF}, , [14ddabd9a2f73204160c30b1798a0ff1],
PUP.Optional.Iminent, HKU\S-1-5-21-458921172-1383609752-3657829135-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{425ED333-6083-428A-92C9-0CFC28B9D1BF}, , [6091a6de277276c0452fcb3ad4308f71],
PUP.Optional.V9.ShrtCln, HKU\S-1-5-21-458921172-1383609752-3657829135-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{5053BDD7-3244-4003-95B8-F4B4C67C5DBF}, , [866b86fe1d7cfe38c65cb130bc474cb4],
PUP.Optional.V9.ShrtCln, HKU\S-1-5-21-458921172-1383609752-3657829135-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{5AA6BEBB-7C58-4146-9106-8F6046AD5CE8}, , [02ef750f6633b87ec75b8d545ea5ed13],
PUP.Optional.Iminent, HKU\S-1-5-21-458921172-1383609752-3657829135-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{A33DB9FD-7A8A-496E-92D3-9CFCF9D9E1C9}, , [35bc5d27eeabfa3cbfb54bba7e860df3],
PUP.Optional.V9.ShrtCln, HKU\S-1-5-21-458921172-1383609752-3657829135-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{C2E144B8-3120-477B-A49E-A2B77E43103F}, , [c42dacd81b7eeb4ba87a736ed231c23e],
PUP.Optional.V9.ShrtCln, HKU\S-1-5-21-458921172-1383609752-3657829135-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{EE6AC587-9C9B-4131-8342-52D6C6ADA018}, , [b839fe86f4a5f244ee34edf4ae5526da],
PUP.Optional.WebSearch, HKU\S-1-5-21-458921172-1383609752-3657829135-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{F7C78C08-3CC7-416F-B827-7C1785ABBDA8}, , [e20fbdc78f0a2a0c793fae7aa3619a66],
PUP.Optional.ASK, HKU\S-1-5-21-458921172-1383609752-3657829135-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{044A112D-AB96-49D9-8D2F-2DF53D736E22}, , [e20f048031680036eee5e7935ca8649c],
PUP.Optional.FastStart, HKU\S-1-5-21-458921172-1383609752-3657829135-1000\SOFTWARE\MOZILLA\EXTENDS, , [02ef63211e7bc86e44c6bf3f847ff30d],
PUP.Optional.OptimizerPro, HKU\S-1-5-21-458921172-1383609752-3657829135-1000\SOFTWARE\OPTIMIZER PRO, , [c42da9db415851e591af749e21e3c43c],
FraudTool.YAC, HKLM\SOFTWARE\CLASSES\CLSID\{5411D116-5A37-47D4-B154-5F7FCD9062F0}, , [7c75572d138655e1d9f87e5a0df5cb35],
FraudTool.YAC, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\iSafe, , [7c75572d138655e1d9f87e5a0df5cb35],
PUP.Optional.WebSearch, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\webssearches uninstall, , [1cd5ccb81d7c4beb55c302feb350b64a],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{3BDF4CE9-E81D-432B-A55E-9F0570CE811F}, , [3cb5ceb6efaa2511c53c67a2cd364bb5],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\TYPELIB\{C4BAE205-5E02-4E32-876E-F34B4E2D000C}, , [3cb5ceb6efaa2511c53c67a2cd364bb5],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\INTERFACE\{01221FCC-4BFB-461C-B08C-F6D2DF309921}, , [3cb5ceb6efaa2511c53c67a2cd364bb5],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{01221FCC-4BFB-461C-B08C-F6D2DF309921}, , [3cb5ceb6efaa2511c53c67a2cd364bb5],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{01221FCC-4BFB-461C-B08C-F6D2DF309921}, , [3cb5ceb6efaa2511c53c67a2cd364bb5],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{C4BAE205-5E02-4E32-876E-F34B4E2D000C}, , [3cb5ceb6efaa2511c53c67a2cd364bb5],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{C4BAE205-5E02-4E32-876E-F34B4E2D000C}, , [3cb5ceb6efaa2511c53c67a2cd364bb5],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\TbCommonUtils.CommonUtils.1, , [3cb5ceb6efaa2511c53c67a2cd364bb5],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\TbCommonUtils.CommonUtils, , [3cb5ceb6efaa2511c53c67a2cd364bb5],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TbCommonUtils.CommonUtils, , [3cb5ceb6efaa2511c53c67a2cd364bb5],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TbCommonUtils.CommonUtils, , [3cb5ceb6efaa2511c53c67a2cd364bb5],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TbCommonUtils.CommonUtils.1, , [3cb5ceb6efaa2511c53c67a2cd364bb5],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TbCommonUtils.CommonUtils.1, , [3cb5ceb6efaa2511c53c67a2cd364bb5],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{3BDF4CE9-E81D-432B-A55E-9F0570CE811F}, , [3cb5ceb6efaa2511c53c67a2cd364bb5],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\TYPELIB\{B87F8B63-7274-43FD-87FA-09D3B7496148}, , [3cb5ceb6efaa2511c53c67a2cd364bb5],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\INTERFACE\{452AE416-9A97-44CA-93DA-D0F15C36254F}, , [3cb5ceb6efaa2511c53c67a2cd364bb5],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\INTERFACE\{45CDA4F7-594C-49A0-AAD1-8224517FE979}, , [3cb5ceb6efaa2511c53c67a2cd364bb5],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\INTERFACE\{81E852CC-1FD5-4004-8761-79A48B975E29}, , [3cb5ceb6efaa2511c53c67a2cd364bb5],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\INTERFACE\{B2CA345D-ADB8-4F5D-AC64-4AB34322F659}, , [3cb5ceb6efaa2511c53c67a2cd364bb5],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\INTERFACE\{B9F43021-60D4-42A6-A065-9BA37F38AC47}, , [3cb5ceb6efaa2511c53c67a2cd364bb5],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\INTERFACE\{BF921DD3-732A-4A11-933B-A5EA49F2FD2C}, , [3cb5ceb6efaa2511c53c67a2cd364bb5],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\INTERFACE\{D83B296A-2FA6-425B-8AE8-A1F33D99FBD6}, , [3cb5ceb6efaa2511c53c67a2cd364bb5],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{452AE416-9A97-44CA-93DA-D0F15C36254F}, , [3cb5ceb6efaa2511c53c67a2cd364bb5],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{45CDA4F7-594C-49A0-AAD1-8224517FE979}, , [3cb5ceb6efaa2511c53c67a2cd364bb5],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{81E852CC-1FD5-4004-8761-79A48B975E29}, , [3cb5ceb6efaa2511c53c67a2cd364bb5],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{B2CA345D-ADB8-4F5D-AC64-4AB34322F659}, , [3cb5ceb6efaa2511c53c67a2cd364bb5],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{B9F43021-60D4-42A6-A065-9BA37F38AC47}, , [3cb5ceb6efaa2511c53c67a2cd364bb5],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{BF921DD3-732A-4A11-933B-A5EA49F2FD2C}, , [3cb5ceb6efaa2511c53c67a2cd364bb5],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{D83B296A-2FA6-425B-8AE8-A1F33D99FBD6}, , [3cb5ceb6efaa2511c53c67a2cd364bb5],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{452AE416-9A97-44CA-93DA-D0F15C36254F}, , [3cb5ceb6efaa2511c53c67a2cd364bb5],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{45CDA4F7-594C-49A0-AAD1-8224517FE979}, , [3cb5ceb6efaa2511c53c67a2cd364bb5],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{81E852CC-1FD5-4004-8761-79A48B975E29}, , [3cb5ceb6efaa2511c53c67a2cd364bb5],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{B2CA345D-ADB8-4F5D-AC64-4AB34322F659}, , [3cb5ceb6efaa2511c53c67a2cd364bb5],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{B9F43021-60D4-42A6-A065-9BA37F38AC47}, , [3cb5ceb6efaa2511c53c67a2cd364bb5],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{BF921DD3-732A-4A11-933B-A5EA49F2FD2C}, , [3cb5ceb6efaa2511c53c67a2cd364bb5],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{D83B296A-2FA6-425B-8AE8-A1F33D99FBD6}, , [3cb5ceb6efaa2511c53c67a2cd364bb5],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{B87F8B63-7274-43FD-87FA-09D3B7496148}, , [3cb5ceb6efaa2511c53c67a2cd364bb5],
PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{B87F8B63-7274-43FD-87FA-09D3B7496148}, , [3cb5ceb6efaa2511c53c67a2cd364bb5],

Valeurs du Registre: 44
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\TOOLBAR|{977AE9CC-AF83-45E8-9E03-E2798216E2D5}, , [ee036a1a0099ce684156149faf53f60a],
PUP.Optional.Iminent, HKU\S-1-5-21-458921172-1383609752-3657829135-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\URLSEARCHHOOKS\{84FF7BD6-B47F-46F8-9130-01B2696B36CB}, , [ba37394b4257ab8b1f7afab98a78f30d],
PUP.Optional.Iminent, HKU\S-1-5-21-458921172-1383609752-3657829135-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\URLSEARCHHOOKS|{84FF7BD6-B47F-46F8-9130-01B2696B36CB}, , [ba37394b4257ab8b1f7afab98a78f30d],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\{977AE9CC-AF83-45E8-9E03-E2798216E2D5}, , [f7fa81036e2b94a2a3f7fdb68e745ba5],
PUP.Optional.WebSearch, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{F7C78C08-3CC7-416F-B827-7C1785ABBDA8}|URL, http://istart.webssearches.com/web/?typ ... earchTerms}, , [8b6631538e0b979feacf2efabd4746ba]
PUM.Optional.DisableChromeUpdates, HKLM\SOFTWARE\POLICIES\GOOGLE\UPDATE|DisableAutoUpdateChecksCheckboxValue, 1, , [836e483cb3e638fe5673a0c09e66758b]
PUP.Optional.WebSearch, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}|URL, http://istart.webssearches.com/web/?typ ... earchTerms}, , [c031671d28719e98caef71b784805ea2]
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BFFED5CA-8BDF-47CC-AED0-23F4E6D77732}|Url, http://start.iminent.com/?appId=6D5A6FC ... earchTerms}, , [ba373e462772bc7a6f126c993acac33d]
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BFFED5CA-8BDF-47CC-AED0-23F4E6D77732}|FaviconPath, C:\Program Files (x86)\Iminent\inst\SearchTheWeb.ico, , [fff2a5dff4a54fe7b4cdce37a3616e92]
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|IminentMessenger, C:\Program Files (x86)\Iminent\Iminent.Messengers.exe, , [bd3488fc6d2cf244d4b039cc8183de22]
PUP.Optional.FastStart, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|faststartff@gmail.com, C:\Users\MINIERE\AppData\Roaming\Mozilla\Firefox\Profiles\mwgkcbgy.default\extensions\faststartff@gmail.com, , [f8f90e762d6c1521c447ec1248bbfe02]
PUM.Optional.DisableChromeUpdates, HKLM\SOFTWARE\WOW6432NODE\POLICIES\GOOGLE\UPDATE|DisableAutoUpdateChecksCheckboxValue, 1, , [549d1a6a5d3c56e0f3d63c244fb56898]
PUP.Optional.SupTab, HKLM\SOFTWARE\WOW6432NODE\SUPDP|dir, C:\Program Files (x86)\SupTab, , [15dcd8ac8a0f7abc4bf9ab76b54f8c74]
PUP.Optional.SupTab, HKLM\SOFTWARE\WOW6432NODE\SUPTAB|ptid, adks, , [fcf5d6ae9aff75c1390ce938f113936d]
PUP.Optional.Umbrella, HKLM\SOFTWARE\WOW6432NODE\UMBRELLA|MUpdBlock, {
"MASSUPDATE" : {
"CHROME_MBAR" : {
"Checked" : 1,
"RetryIdx" : 0,
"Version" : 1
},
"FIREFOX_MBAR" : {
"Checked" : 1,
"RetryIdx" : 0,
"Url" : "http://vzapp.iminent.com/vz/0EE1B0F1-83 ... taller.exe",
"Version" : 3
},
"IEXPLORE_BHO" : {
"Checked" : 1,
"RetryIdx" : 0,
"Version" : 4
}
}
}
, , [d21f9ce8a7f23ef8f48224012fd5b54b]

Re: Attaque locky ...

par rubised » lun. 7 mars 2016 18:51
Bonjour,

Alors là c'est du sérieux ,je pense que l'on va avoir du mal ,tous tes dossier cryptés ,en a tu fais une sauvegarde avant infection bien sur ?

Lis ceci : https://www.supprimer-virus.com/tag/ransomware/

Pour le moment, il n'y a pas de solution pour récupérer les documents.
De ce que j'en connais, Locky utilise les macros Word pour télécharger le virus principal.

On utilisera différent outils pour la désinfection , quand à la récupération des fichiers cryptés rien n'est sur


On va essayer ceci:

Télécharges Malwarebytes version free

nouvelle version 2.2.0.1024

http://fr.malwarebytes.org/

Décoches activer l'essai gratuit de MBAM Premium

Puis mets le a jour

La nouvelle version qui s'affichera va te donner cet écran
Image

Et lance l'analyse
Image

mets les infections trouvées en quarantaine

va dans l'onglet historique

copies/colles le journal de l'examen le plus récent
A te lire

Attaque locky ...

par jcdup » lun. 7 mars 2016 18:18
Bonjour,

Tous mes fichiers sont bloqués par locky.
Pouvez-vous m'aider pour désinfecter mon PC ?
Faut-il tenter le paiement ?

Merci d'avance.
Essayroo services

Thanks

FLTL_READ_MORE
Bug PC

Bonsoir Nicouille04 Oui, une restauration &agra[…]

FLTL_READ_MORE
Curseur qui disparaît dans des situations précises

Une partie de mon problème a ét&eacu[…]

FLTL_READ_MORE
désinstaller sophos

:bonjour: tu remets frst et addition je t'ai de[…]

FLTL_READ_MORE
FLTL_VIEW_MORE_TOPICS