~ Rapport de ZHPDiag v2014.12.4.169 - Nicolas Coolman (04/12/2014) ~ Lancé par Milad (07/12/2014 12:36:52) ~ Facebook : https://www.facebook.com/nicolascoolman1 ~ Adresse du Forum http://forum.nicolascoolman.fr ~ Traduit par Nicolas Coolman ~ Etat de la version : Version à jour. ~ Liste blanche : Activée par le programme ~ Elévation des Privilèges : OK ~ User Account Control (UAC): Deactivate by user ---\\ Navigateurs Internet MSIE: Internet Explorer v11.0.9600.17420 MFIE: Mozilla Firefox 34.0 (Defaut) ---\\ Informations sur les produits Windows ~ Langage: Français Windows 7 Professional, 64-bit Service Pack 1 (Build 7601) Windows Server License Manager Script : OK ~ Windows Operating System - Windows(R) 7, OEM_SLP channel System Locked Preinstallation (OEM_SLP) : OK Windows ID Activation : OK ~ Windows Partial Key : 2RR4G Windows License : OK ~ Windows Remaining Initializations Number : 3 Software Protection Service (Protection logicielle) : OK Windows Automatic Updates : OK Windows Activation Technologies : OK ---\\ Logiciels de protection du système Avira Free Antivirus v14.0.7.342 Malwarebytes Anti-Malware version 2.0.4.1028 Windows Defender W7 (Deactivate) ---\\ Logiciels d'optimisation du système CCleaner v4.19 ---\\ Logiciels de partage PeerToPeer ---\\ Surveillance de Logiciels Adobe Flash Player 15 Plugin Adobe Reader 9.1 - Français ---\\ Informations sur le système ~ Processor: AMD64 Family 16 Model 4 Stepping 2, AuthenticAMD ~ Operating System: 64 Bits Boot mode: Normal (Normal boot) Total RAM: 8188 MB (59% free) System Restore: Désactivé (Disabled) System drive C: has 36 GB (59%) free of 60 GB ---\\ Mode de connexion au système ~ Computer Name: MILAD-PC ~ User Name: Milad ~ All Users Names: Milad, HomeGroupUser$, Administrateur, ~ Unselected Option: O45,O61,O62,O65,O66,O80,O82,O89 Logged in as Administrator ---\\ Variables d'environnement ~ System Unit : C:\ ~ %AppZHP% : C:\Users\Milad\AppData\Roaming\ZHP\ ~ %AppData% : C:\Users\Milad\AppData\Roaming\ ~ %Desktop% : C:\Users\Milad\Desktop\ ~ %Favorites% : C:\Users\Milad\Favorites\ ~ %LocalAppData% : C:\Users\Milad\AppData\Local\ ~ %StartMenu% : C:\Users\Milad\AppData\Roaming\Microsoft\Windows\Start Menu\ ~ %Windir% : C:\Windows\ ~ %System% : C:\Windows\System32\ ---\\ Enumération des unités disques C: Hard drive, Flash drive, Thumb drive (Free 36 Go of 60 Go) D: Hard drive, Flash drive, Thumb drive (Free 21 Go of 466 Go) E: CD-ROM drive (Not Inserted) G: Hard drive, Flash drive, Thumb drive (Free 28 Go of 59 Go) ---\\ Etat du Centre de Sécurité Windows [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: Modified [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowMyGames: Modified [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowMyMusic: Modified [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowMyPics: Modified [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowPrinters: Modified [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : Out Of Date ~ Security Center: 49 Legitimates Filtered in 00mn 00s ---\\ Recherche particulière de fichiers génériques [MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorateur Windows.) (.25/02/2011 - 07:19:30.) -- C:\Windows\Explorer.exe [2871808] [MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 - 02:39:52.) -- C:\Windows\System32\Wininit.exe [129024] [MD5.6FC2819A4F80AAB2DADEDFC1EFEE3C3F] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.06/11/2014 - 03:17:24.) -- C:\Windows\System32\wininet.dll [2365440] [MD5.8CEBD9D0A0A879CDE9F36F4383B7CAEA] - (.Microsoft Corporation - Application d’ouverture de session Windows.) (.17/07/2014 - 03:07:24.) -- C:\Windows\System32\Winlogon.exe [455168] [MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Bibliothèque de licences.) (.21/11/2010 - 04:24:16.) -- C:\Windows\System32\sppcomapi.dll [232448] [MD5.FA886682CFC5D36718D3E436AACF10B9] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.30/05/2014 - 07:45:52.) -- C:\Windows\system32\Drivers\AFD.sys [497152] [MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 - 02:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128] [MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/07/2009 - 00:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160] [MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.21/11/2010 - 04:23:47.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456] [MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.21/11/2010 - 04:24:32.) -- C:\Windows\system32\Drivers\DfsC.sys [102400] [MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.21/11/2010 - 04:23:47.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368] [MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) (.14/07/2009 - 00:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472] [MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.14/07/2009 - 01:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224] [MD5.A5D9106A73DC88564C825D317CAC68AC] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.27/04/2011 - 03:40:40.) -- C:\Windows\system32\Drivers\MRxSmb.sys [158208] [MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) (.21/11/2010 - 04:23:51.) -- C:\Windows\system32\Drivers\netBT.sys [261632] [MD5.1A29A59A4C5BA6F8C85062A613B7E2B2] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.24/01/2014 - 03:37:55.) -- C:\Windows\system32\Drivers\ntfs.sys [1684928] [MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/07/2009 - 01:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280] [MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.21/11/2010 - 04:24:33.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [129536] [MD5.1B6163C503398B23FF8B939C67747683] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.21/11/2010 - 04:25:07.) -- C:\Windows\system32\Drivers\rdpdr.sys [165888] [MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.14/07/2009 - 01:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184] [MD5.DDAD5A7AB24D8B65F8D724F5C20FD806] - (.Microsoft Corporation - TDI Translation Driver.) (.21/11/2010 - 04:24:32.) -- C:\Windows\system32\Drivers\tdx.sys [119296] [MD5.0D08D2F3B3FF84E433346669B5E0F639] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.21/11/2010 - 04:23:47.) -- C:\Windows\system32\Drivers\volsnap.sys [295808] ~ Generic Processes: Scanned in 00mn 00s ---\\ Etat des fichiers cachés (Caché/Total) ~ Mes images (My Pictures) : 1/7 ~ Mes musiques (My Musics) : 1/7 ~ Mes Favoris (My Favorites) : 1/27 ~ Mes Documents (My Documents) : 2/2258 ~ Mon Bureau (My Desktop) : 0/377 ~ Menu demarrer (Programs) : 1/112 ~ Hidden Files: Scanned in 00mn 00s ---\\ Processus lancés [MD5.6F1BBF101B6DC9D34A564C2009D83B63] - (.Avira Operations GmbH & Co. KG - Antivirus Host Framework Service.) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [432888] [PID.1620] [MD5.6F1BBF101B6DC9D34A564C2009D83B63] - (.Avira Operations GmbH & Co. KG - Antivirus Host Framework Service.) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [432888] [PID.1316] [MD5.01B64830DE6341004AC00EB8CC302DA0] - (.Acronis - Acronis Scheduler Helper.) -- C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [403816] [PID.1440] [MD5.0BB29DE40C9D9529793DCDB59A43CF5B] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160] [PID.2156] [MD5.D41D8CD98F00B204E9800998ECF8427E] - (...) -- C:\Program Files (x86)\DAEMON Tools Pro\DTShellHlp.exe [2744960] [PID.2492] [MD5.72DDAC9716A429425BD47619CD6B7C28] - (.Tonec Inc. - Internet Download Manager (IDM).) -- C:\Program Files (x86)\Internet Download Manager\IDMan.exe [3858000] [PID.2600] [MD5.E024300408694566DDF65AB5E004F880] - (.NVIDIA Corporation - NVIDIA Network Service.) -- C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1795912] [PID.2628] [MD5.E124E45D9FEF65E06CC7F2E4B19301D3] - (.Guillaume Ryder (http://utilfr42.free.fr) - Clavier+.) -- C:\Users\Milad\AppData\Local\Clavier+\Clavier.exe [103424] [PID.2688] [MD5.205E1B699FD3F2F9B036EEA2EC30C620] - (...) -- C:\Windows\SysWOW64\PnkBstrA.exe [76888] [PID.2776] [MD5.12B5DB18B769A19619F27E8602411D83] - (.Pas de propriétaire - traicon MFC Application.) -- C:\Program Files (x86)\Alchemy Elixir\traicon.exe [126976] [PID.2788] [MD5.87D4BC51A2E4C5696250BF45DB31CBEF] - (.Acronis - TrueImage Sync Agent Service.) -- C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe [7026408] [PID.2844] [MD5.616954748C2F28D653C7BAE814CA51FD] - (.Avira Operations GmbH & Co. KG - Avira system tray application.) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [703736] [PID.2864] [MD5.608699070BC2D9B564A84391C3F81B8C] - (.Pas de propriétaire - Control MFC Application.) -- C:\Program Files (x86)\Alchemy Elixir\Control.exe [237568] [PID.2872] [MD5.C08AF3D7162084119A3089D40240E592] - (.NVIDIA Corporation - NVIDIA GeForce Experience Backend.) -- C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2464072] [PID.3500] [MD5.F2032FC8DFF611368833CD1C0AE50392] - (.Marek Jasinski - FreeCommander - freeware file manager for W.) -- C:\Program Files (x86)\FreeCommander XE\FreeCommander.exe [3339208] [PID.2548] [MD5.30D17877295E6E9116FE7C10ED3E3ABF] - (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe [337520] [PID.2412] [MD5.5C48AAE2387009DFB4CF52AC8718CB52] - (.Mozilla Corporation - Plugin Container for Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe [243312] [PID.4968] [MD5.3C13F26A4766752314A5413038BD86B4] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe [7229752] [PID.3220] [MD5.5F82D8188B370B0CF185D4AE2B9B4A0E] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [969016] [PID.2092] [MD5.7242EACF658008D1C6C3EE07C9FB755F] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [8137728] [PID.1096] ~ Processes Running: Scanned in 00mn 00s ---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3) C:\Users\Milad\AppData\Roaming\Mozilla\Firefox\Profiles\c9v1au00.default\prefs.js M3 - MFPP: Plugins - [Milad] -- C:\Users\Milad\AppData\Roaming\Mozilla\Firefox\Profiles\c9v1au00.default\searchplugins\dictionarycom.xml M3 - MFPP: Plugins - [Milad] -- C:\Users\Milad\AppData\Roaming\Mozilla\Firefox\Profiles\c9v1au00.default\searchplugins\google-blogs.xml M3 - MFPP: Plugins - [Milad] -- C:\Users\Milad\AppData\Roaming\Mozilla\Firefox\Profiles\c9v1au00.default\searchplugins\google-books.xml M3 - MFPP: Plugins - [Milad] -- C:\Users\Milad\AppData\Roaming\Mozilla\Firefox\Profiles\c9v1au00.default\searchplugins\google-directory.xml M3 - MFPP: Plugins - [Milad] -- C:\Users\Milad\AppData\Roaming\Mozilla\Firefox\Profiles\c9v1au00.default\searchplugins\google-finance.xml M3 - MFPP: Plugins - [Milad] -- C:\Users\Milad\AppData\Roaming\Mozilla\Firefox\Profiles\c9v1au00.default\searchplugins\google-groups.xml M3 - MFPP: Plugins - [Milad] -- C:\Users\Milad\AppData\Roaming\Mozilla\Firefox\Profiles\c9v1au00.default\searchplugins\google-maps.xml M3 - MFPP: Plugins - [Milad] -- C:\Users\Milad\AppData\Roaming\Mozilla\Firefox\Profiles\c9v1au00.default\searchplugins\google-news.xml M3 - MFPP: Plugins - [Milad] -- C:\Users\Milad\AppData\Roaming\Mozilla\Firefox\Profiles\c9v1au00.default\searchplugins\google-products.xml M3 - MFPP: Plugins - [Milad] -- C:\Users\Milad\AppData\Roaming\Mozilla\Firefox\Profiles\c9v1au00.default\searchplugins\google-scholar.xml M3 - MFPP: Plugins - [Milad] -- C:\Users\Milad\AppData\Roaming\Mozilla\Firefox\Profiles\c9v1au00.default\searchplugins\google-trends.xml M3 - MFPP: Plugins - [Milad] -- C:\Users\Milad\AppData\Roaming\Mozilla\Firefox\Profiles\c9v1au00.default\searchplugins\google-video.xml M3 - MFPP: Plugins - [Milad] -- C:\Users\Milad\AppData\Roaming\Mozilla\Firefox\Profiles\c9v1au00.default\searchplugins\imdb.xml M3 - MFPP: Plugins - [Milad] -- C:\Users\Milad\AppData\Roaming\Mozilla\Firefox\Profiles\c9v1au00.default\searchplugins\longman-english-dictionary.xml M3 - MFPP: Plugins - [Milad] -- C:\Users\Milad\AppData\Roaming\Mozilla\Firefox\Profiles\c9v1au00.default\searchplugins\mozilla-add-ons.xml M3 - MFPP: Plugins - [Milad] -- C:\Users\Milad\AppData\Roaming\Mozilla\Firefox\Profiles\c9v1au00.default\searchplugins\thesauruscom.xml M3 - MFPP: Plugins - [Milad] -- C:\Users\Milad\AppData\Roaming\Mozilla\Firefox\Profiles\c9v1au00.default\searchplugins\wiktionnaire-fr.xml M2 - MFEP: prefs.js [Milad - c9v1au00.default\mozilla_cc@internetdownloadmanager.com] [] IDM CC v7.3.90 (..) M2 - MFEP: prefs.js [Milad - c9v1au00.default\resizeit@sonej] [] ResizeIT v7.3.90 (..) M2 - MFEP: prefs.js [Milad - c9v1au00.default\{81BF1D23-5F17-408D-AC6B-BD6DF7CAF670}] [] iMacros for Firefox v8.8.7 (..) M2 - MFEP: Extension [Milad - c9v1au00.default] {1018e4d6-728f-4b20-ad56-37578a4de76b} M2 - MFEP: Extension [Milad - c9v1au00.default] {19503e42-ca3c-4c27-b1e2-9cdb2170ee34} M2 - MFEP: Extension [Milad - c9v1au00.default] {5C655500-E712-41e7-9349-CE462F844B19} M2 - MFEP: Extension [Milad - c9v1au00.default] {6c28e999-e900-4635-a39d-b1ec90ba0c0f} M2 - MFEP: Extension [Milad - c9v1au00.default] {73a6fe31-595d-460b-a920-fcc0f8843232} M2 - MFEP: Extension [Milad - c9v1au00.default] {d40f5e7b-d2cf-4856-b441-cc613eeffbe3} M2 - MFEP: Extension [Milad - c9v1au00.default] {f36c6cd1-da73-491d-b290-8fc9115bfa55} P2 - FPN: [HKLM] [adobe.com/AdobeAAMDetect] - (...) -- C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (.not file.) ~ Firefox Browser: 38 Legitimates Filtered in 00mn 00s ---\\ Internet Explorer, Proxy Management (R5) R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll ~ Proxy management: Scanned in 00mn 00s ---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs F2 - REG:system.ini: USERINIT=C:\Windows\System32\Userinit.exe, F2 - REG:system.ini: Shell=C:\Windows\explorer.exe F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe ~ Keys: Scanned in 00mn 00s ---\\ Hosts file redirection (O1) ~ Le fichier hôte est sain (The hosts file is clean) (21) ~ Hosts File: Scanned in 00mn 00s ---\\ Internet Explorer Toolbars (O3) O3 - Toolbar: FireShot - [HKLM]{6E6E744E-4D20-4ce3-9A7A-26DFFFE22F68} . (...) -- C:\Users\Milad\AppData\Roaming\Mozilla\Firefox\Profiles\bqxao8wm.default\extensions\{0b457cAA-602d-484a-8fe7-c1d894a011ba}\library\fsaddin64-0.98.38.dll ~ Toolbar: Scanned in 00mn 00s ---\\ Autres liens utilisateurs (O4) O4 - GS\QuickLaunch [Milad]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) -- C:\Users\Milad\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent ~ Global Startup: 1 Legitimates Filtered in 00mn 01s ---\\ Applications lancées au démarrage du système (O4) O4 - HKLM\..\Run: [XboxStat] . (.Microsoft Corporation - XBoxStat.exe.) -- C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe O4 - HKLM\..\Run: [EvtMgr6] . (.Logitech, Inc. - Logitech SetPoint Event Manager (UNICODE).) -- C:\Program Files\Logitech\SetPointP\SetPoint.exe O4 - HKLM\..\Run: [Acronis Scheduler2 Service] . (.Acronis - Acronis Scheduler Helper.) -- C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe O4 - HKCU\..\Run: [IDMan] . (.Tonec Inc. - Internet Download Manager (IDM).) -- C:\Program Files (x86)\Internet Download Manager\IDMan.exe O4 - HKCU\..\Run: [Clavier+] . (.Guillaume Ryder (http://utilfr42.free.fr) - Clavier+.) -- C:\Users\Milad\AppData\Local\Clavier+\Clavier.exe O4 - HKCU\..\Run: [ultracopier] . (.ultracopier.first-world.info - Ultracopier under GPL3.) -- C:\Program Files\Ultracopier\ultracopier.exe O4 - HKCU\..\Run: [CCleaner Monitoring] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner64.exe =>.Piriform Ltd O4 - HKLM\..\Wow6432Node\Run: [avgnt] . (.Avira Operations GmbH & Co. KG - Avira system tray application.) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe O4 - HKLM\..\Wow6432Node\Run: [K3805] . (.Pas de propriétaire - Control MFC Application.) -- C:\Program Files (x86)\Alchemy Elixir\control.exe O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-21-996437074-112490118-4100430159-1001\..\Run: [IDMan] . (.Tonec Inc. - Internet Download Manager (IDM).) -- C:\Program Files (x86)\Internet Download Manager\IDMan.exe O4 - HKUS\S-1-5-21-996437074-112490118-4100430159-1001\..\Run: [Clavier+] . (.Guillaume Ryder (http://utilfr42.free.fr) - Clavier+.) -- C:\Users\Milad\AppData\Local\Clavier+\Clavier.exe O4 - HKUS\S-1-5-21-996437074-112490118-4100430159-1001\..\Run: [ultracopier] . (.ultracopier.first-world.info - Ultracopier under GPL3.) -- C:\Program Files\Ultracopier\ultracopier.exe O4 - HKUS\S-1-5-21-996437074-112490118-4100430159-1001\..\Run: [CCleaner Monitoring] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner64.exe =>.Piriform Ltd ~ Application: Scanned in 00mn 00s ---\\ Site dans la Zone de confiance d'Internet Explorer (O15) O15 - Trusted Zone: [HKCU\...\Domains] http.ma-config.com O15 - Trusted Zone: [HKCU\...\Domains] http.touslesdrivers.com ~ IE Zone Confiance: Scanned in 00mn 00s ---\\ Modification Domaine/Adresses DNS (O17) O17 - HKLM\System\CCS\Services\Tcpip\..\{1F7BC3C6-F4D5-4F44-8B2E-1C5AF2403CA8}: NameServer = 109.0.66.10,109.0.66.20 O17 - HKLM\System\CCS\Services\Tcpip\..\{1F7BC3C6-F4D5-4F44-8B2E-1C5AF2403CA8}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\..\{B8111F65-BA11-4758-8933-9ACC1E5A214E}: DhcpNameServer = 192.168.42.129 O17 - HKLM\System\CS1\Services\Tcpip\..\{1F7BC3C6-F4D5-4F44-8B2E-1C5AF2403CA8}: NameServer = 109.0.66.10,109.0.66.20 O17 - HKLM\System\CS1\Services\Tcpip\..\{1F7BC3C6-F4D5-4F44-8B2E-1C5AF2403CA8}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS1\Services\Tcpip\..\{B8111F65-BA11-4758-8933-9ACC1E5A214E}: DhcpNameServer = 192.168.42.129 O17 - HKLM\System\CS2\Services\Tcpip\..\{1F7BC3C6-F4D5-4F44-8B2E-1C5AF2403CA8}: NameServer = 109.0.66.10,109.0.66.20 O17 - HKLM\System\CS2\Services\Tcpip\..\{1F7BC3C6-F4D5-4F44-8B2E-1C5AF2403CA8}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS2\Services\Tcpip\..\{B8111F65-BA11-4758-8933-9ACC1E5A214E}: DhcpNameServer = 192.168.42.129 O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 ~ Domain: Scanned in 00mn 00s ---\\ Protocole additionnel (O18) O18 - Handler: WSWSVCUchrome [64Bits] - {1CA93FF0-A218-44F1-lSet . (...) -- O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation ~ Protocole Additionnel: Scanned in 00mn 00s ---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20) O20 - Winlogon Notify: LBTWlgn . (.Logitech, Inc. - Logitech Bluetooth Service.) -- c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll ~ Winlogon: Scanned in 00mn 00s ---\\ Pilotes lancés au démarrage du système (O41) O41 - Driver: (HWiNFO32) . (.REALiX(tm) - HWiNFO AMD64 Kernel Driver.) - C:\Windows\system32\drivers\HWiNFO64A.sys ~ Drivers: 81 Legitimates Filtered in 00mn 00s ---\\ Logiciels installés (O42) O42 - Logiciel: Alchemy Elixir - (...) [HKLM][64Bits] -- {04077D50-954B-4365-84BF-02DE4702BA00} O42 - Logiciel: Ditto 3.17.0.17 - (.Scott Brogden.) [HKLM][64Bits] -- Ditto_is1 ~ Logic: 29 Legitimates Filtered in 00mn 01s ---\\ HKCU & HKLM Software Keys [HKCU\Software\4kdownload.com] [HKCU\Software\Bedtime Digital Games] [HKCU\Software\Darkwave Games] [HKCU\Software\Ditto] [HKCU\Software\HS] [HKCU\Software\Over The Moon] [HKCU\Software\Rain] [HKCU\Software\SHAPE] [HKCU\Software\Sand Sailor Studio] [HKCU\Software\Stage 2 Studios] [HKCU\Software\Swing Swing Submarine] [HKCU\Software\Two Tribes] [HKCU\Software\UNCANNY GAMES] [HKCU\Software\VPZ] [HKCU\Software\WSVCUPlugin] [HKCU\Software\bunkus.org] [HKLM\Software\WindowsThemeInstaller] [HKLM\Software\Wow6432Node\ARTDINK] [HKLM\Software\Wow6432Node\Alchemy Elixir] [HKLM\Software\Wow6432Node\PSXMC_FAMILY] ~ Key Software: 497 Legitimates Filtered in 00mn 01s ---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43) O43 - CFD: 31/12/2013 - 00:42:33 - [] ----D C:\Program Files (x86)\4KDownload O43 - CFD: 06/04/2011 - 10:48:29 - [] ----D C:\Program Files (x86)\Alchemy Elixir O43 - CFD: 25/09/2011 - 19:06:30 - [] ----D C:\Program Files (x86)\Ditto O43 - CFD: 15/08/2013 - 18:31:34 - [] ----D C:\Program Files (x86)\xmplay36 O43 - CFD: 06/12/2014 - 18:04:15 - [] ----D C:\Program Files (x86)\xmplay37 O43 - CFD: 06/12/2014 - 11:04:26 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\4K Download O43 - CFD: 06/04/2011 - 10:48:33 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Alchemy Elixir O43 - CFD: 18/09/2012 - 23:16:49 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cobalt O43 - CFD: 25/09/2011 - 19:06:30 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ditto O43 - CFD: 30/07/2014 - 14:26:51 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FlashOffliner O43 - CFD: 28/01/2012 - 14:19:23 - [] ----D C:\Users\Milad\AppData\Roaming\Abine O43 - CFD: 21/10/2014 - 10:31:30 - [] ----D C:\Users\Milad\AppData\Roaming\Ditto O43 - CFD: 21/05/2014 - 19:21:07 - [0] ----D C:\Users\Milad\AppData\Roaming\EncryptStick O43 - CFD: 09/11/2013 - 23:25:14 - [] ----D C:\Users\Milad\AppData\Roaming\GhostsUnlock O43 - CFD: 26/10/2011 - 11:56:36 - [] ----D C:\Users\Milad\AppData\Local\201280 O43 - CFD: 20/12/2013 - 12:27:34 - [] ----D C:\Users\Milad\AppData\Local\4kdownload.com O43 - CFD: 04/01/2014 - 00:22:02 - [] ----D C:\Users\Milad\AppData\Local\IconPackGenerator O43 - CFD: 14/07/2014 - 13:23:26 - [] ----D C:\Users\Milad\AppData\Local\Sniper3 O43 - CFD: 18/09/2012 - 23:16:47 - [0] ----D C:\Users\Milad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Cobalt O43 - CFD: 25/09/2011 - 22:52:25 - [] ----D C:\Users\Milad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OIO ~ Program Folder: 311 Legitimates Filtered in 00mn 00s ---\\ Enumération des clés de registre StartupReg (SMSR) (O53) O53 - SMSR:HKLM\...\startupreg\Eraser [Key] . (...) -- C:\Program Files (x86)\Eraser\Eraser.exe (.not file.) ~ SMSR Keys: 24 Legitimates Filtered in 00mn 00s ---\\ Enumération des clés de registre PoliciesSystem (MWPS) (O55) O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=0 O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0 O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=0 O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0 O55 - MWPS:[HKLM\...\Policies\System] - "EnableLinkedConnections"=1 O55 - MWPS:[HKLM\...\Policies\System] - "SoftwareSASGeneration"=3 ~ MWPS: 20 Legitimates Filtered in 00mn 00s ---\\ Enumération des clés de registre PoliciesExplorer (MWPE) (O56) O56 - MWPE:[HKCU\...\policies\Explorer] - "NoThumbnailCache"=1 O56 - MWPE:[HKCU\...\policies\Explorer] - "DisallowRun"=1 O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1 ~ MWPE Keys: 6 Legitimates Filtered in 00mn 00s ---\\ Liste des pilotes du système (SDL) (O58) O58 - SDL:13/08/2009 - 08:38:24 ---A- . (.CSR, plc - Bluetooth Remote Control Driver.) -- C:\Windows\System32\Drivers\BthAvrcp.sys [29184] O58 - SDL:03/12/2013 - 19:50:24 ---A- . (.DT Soft Ltd - DAEMON Tools Virtual Bus Driver.) -- C:\Windows\System32\Drivers\dtsoftbus01.sys [283200] O58 - SDL:28/08/2008 - 07:50:10 ---A- . (.Waytech Development, Inc. - Ortek USB Keypad Driver.) -- C:\Windows\System32\Drivers\ElanFltr.sys [46976] O58 - SDL:14/07/2009 - 02:47:48 ---A- . (.Emulex - Storport Miniport Driver for LightPulse HBAs.) -- C:\Windows\System32\Drivers\elxstor.sys [530496] O58 - SDL:10/06/2009 - 21:31:59 ---A- . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for eHome.) -- C:\Windows\System32\Drivers\hcw85cir.sys [31232] O58 - SDL:08/11/2013 - 10:18:46 ---A- . (.REALiX(tm) - HWiNFO AMD64 Kernel Driver.) -- C:\Windows\System32\Drivers\HWiNFO64A.SYS [31136] O58 - SDL:09/06/2014 - 09:41:00 ---A- . (.Tonec Inc. - Internet Download Manager WFP Driver.) -- C:\Windows\System32\Drivers\idmwfp.sys [180136] O58 - SDL:03/12/2013 - 19:48:59 ---A- . (.Duplex Secure Ltd. - SCSI Pass Through Direct Host.) -- C:\Windows\System32\Drivers\sptd.sys [564824] O58 - SDL:22/01/2014 - 08:52:10 ---A- . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG USB Composite Device Driver (MSS Ver.3).) -- C:\Windows\System32\Drivers\ssudbus.sys [108800] O58 - SDL:06/02/2013 - 06:42:10 ---A- . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG Android Modem Device Driver (MSS Ver.3).) -- C:\Windows\System32\Drivers\ssudmdm.sys [203544] O58 - SDL:14/07/2009 - 02:45:55 ---A- . (.Promise Technology - Promise SuperTrak EX Series Driver for Windows.) -- C:\Windows\System32\Drivers\stexstor.sys [24656] O58 - SDL:18/03/2013 - 15:51:08 ---A- . (.Apple, Inc. - Apple Mobile Device USB Driver.) -- C:\Windows\System32\Drivers\usbaapl64.sys [54784] O58 - SDL:13/07/2009 - 01:09:20 ---A- . (...) -- C:\Windows\System32\Drivers\uxpatch.sys [30568] O58 - SDL:25/03/2013 - 10:46:36 ---A- . (.Wondershare - Wondershare Virtual Audio Device.) -- C:\Windows\System32\Drivers\VirtualAudio.sys [31080] O58 - SDL:26/12/2011 - 14:27:24 ---A- . (...) -- C:\Windows\System32\ampa.sys [15288] O58 - SDL:20/08/2012 - 13:48:50 ----- . (...) -- C:\Windows\System32\pwdrvio.sys [19032] O58 - SDL:20/08/2012 - 13:48:48 ----- . (...) -- C:\Windows\System32\pwdspio.sys [12384] O58 - SDL:24/07/2006 - 15:05:00 ---A- . (...) -- C:\Windows\SysWOW64\drivers\StarOpen.sys [5632] O58 - SDL:26/12/2011 - 14:27:22 ---A- . (...) -- C:\Windows\SysWOW64\ampa.sys [12728] ~ Drivers: 109 Legitimates Filtered in 00mn 00s ---\\ Liste des outils de désinfection (LATC) (O63) O63 - Logiciel: ZHPDiag 2014 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 =>.Nicolas Coolman ~ ADS: Scanned in 00mn 00s ---\\ Associations Shell Spawning (O67) O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Not Key.) O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Not Key.) ~ FASS Keys: 11 Legitimates Filtered in 00mn 00s ---\\ Menu de démarrage Internet (SMI) (O68) O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (...) -- C:\Program Files (x86)\IronPortable\Iron\Iron.exe (.not file.) O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe O68 - StartMenuInternet: <>[HKLM\..\Shell\open\Command] (.Not Key.) O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (...) -- C:\Program Files (x86)\Opera\Opera.exe (.not file.) ~ Keys: Scanned in 00mn 00s ---\\ Recherche d'infection sur les navigateurs internet (SBI) (O69) O69 - SBI: prefs.js [Milad - c9v1au00.default] user_pref("weboftrust.search.ask.display", "Ask.com Web Search"); O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - http://www.bing.com ~ Keys: Scanned in 00mn 00s ---\\ Recherche particulière à la racine du système (SPRF) (O84) [MD5.18075B2C9F0F300BEE209744A8BEC353] [SPRF][07/12/2004] (...) -- C:\Windows\Downloaded Program Files\bdcore.dll [32] [MD5.298068536300DA6DC163E394797A7C50] [SPRF][25/05/2006] (...) -- C:\Windows\Downloaded Program Files\bdupd.dll [118784] [MD5.1CAB87DE6638846FBF51F32B5D95E482] [SPRF][25/05/2006] (...) -- C:\Windows\Downloaded Program Files\ipsupd.dll [53248] [MD5.18075B2C9F0F300BEE209744A8BEC353] [SPRF][07/12/2004] (...) -- C:\Windows\Downloaded Program Files\libfn.dll [32] ~ Files: 5 Legitimates Filtered in 00mn 00s ---\\ Liste des exceptions du parefeu (FirewallRules) (O87) O87 - FAEL: "{DBECD65E-A246-4F7A-9B9C-FA3363681794}" | In - None - P6 - TRUE | .(.BitTorrent Inc. - µTorrent.) -- C:\Users\Milad\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent O87 - FAEL: "{BAEBCF9A-7303-4D2F-B65F-6A6E55FDB3D7}" | In - None - P17 - TRUE | .(.BitTorrent Inc. - µTorrent.) -- C:\Users\Milad\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent O87 - FAEL: "{1B8E40A3-FBC5-4A96-BA66-A1403DB7B7C4}" | In - None - P6 - TRUE | .(.BitTorrent Inc. - µTorrent.) -- C:\Users\Milad\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent O87 - FAEL: "{9B676422-2FD7-419C-8AB5-8B75912F0CF6}" | In - None - P17 - TRUE | .(.BitTorrent Inc. - µTorrent.) -- C:\Users\Milad\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent ~ Firewall: 4 Legitimates Filtered in 00mn 00s ---\\ Recherche de clés de registre Tracing (O100) HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\uTorrentPortable_3_RASAPI32 =>P2P.µTorrent HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\uTorrentPortable_3_RASMANCS =>P2P.µTorrent HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\uTorrent_RASAPI32 =>P2P.µTorrent HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\uTorrent_RASMANCS =>P2P.µTorrent ~ BTK: 473 Legitimates Filtered in 00mn 00s ---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped) SS - | Disabled 07/01/2013 3717112 | (afcdpsrv) . (.Acronis.) - C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe SS - | Disabled 25/11/2014 995064 | (AntiVirWebService) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe SS - | Disabled 20/12/2011 1431888 | (FLEXnet Licensing Service 64) . (.Flexera Software, Inc..) - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe SS - | Demand 17/12/2012 137488 | (Futuremark SystemInfo Service) . (.Futuremark Corporation.) - C:\Program Files (x86)\Futuremark\Futuremark SystemInfo\FMSISvc.exe SS - | Disabled 03/04/2005 69632 | (IDriverT) . (.Macrovision Corporation.) - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe SS - | Demand 27/09/2011 359192 | (LBTServ) . (.Logitech, Inc..) - C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe SS - | Demand 06/12/2014 114800 | (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe SS - | Demand 17/04/2014 1716264 | (PDF Architect 2) . (.pdfforge GmbH.) - C:\Program Files (x86)\PDF Architect 2\ws.exe SS - | Demand 17/04/2014 861736 | (pdfforge CrashHandler) . (.pdfforge GmbH.) - C:\Program Files (x86)\PDF Architect 2\crash-handler-ws.exe SS - | Demand 14/07/2009 27136 | C:\Program Files (x86)\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe SR - | Auto 23/08/2012 1127392 | (AcrSch2Svc) . (.Acronis.) - C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe SR - | Auto 25/11/2014 432888 | (AntiVirSchedulerService) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe SR - | Auto 25/11/2014 432888 | (AntiVirService) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe SR - | Auto 06/11/2014 1148744 | (GfExperienceService) . (.NVIDIA Corporation.) - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe SR - | Auto 15/10/2014 2820424 | (MaConfigAgent) . (.CybelSoft.) - C:\Program Files\ma-config.com\MaConfigAgent.exe SR - | Auto 21/11/2014 1871160 | (MBAMScheduler) . (.Malwarebytes Corporation.) - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe SR - | Auto 21/11/2014 969016 | (MBAMService) . (.Malwarebytes Corporation.) - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe SR - | Auto 06/11/2014 1795912 | (NvNetworkService) . (.NVIDIA Corporation.) - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe SR - | Auto 06/11/2014 19819848 | (NvStreamSvc) . (.NVIDIA Corporation.) - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe SR - | Auto 12/11/2014 934032 | (nvsvc) . (.NVIDIA Corporation.) - C:\Windows\system32\nvvsvc.exe SR - | Auto 10/07/1658 0 | (PnkBstrA) . (...) - C:\Windows\system32\PnkBstrA.exe SR - | Auto 18/08/2012 7026408 | (syncagentsrv) . (.Acronis.) - C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe SR - | Auto 13/07/2009 24168 | (UnsignedThemes) . (.The Within Network, LLC.) - C:\Windows\UnsignedThemesSvc.exe SR - | Auto 14/07/2009 27136 | C:\Windows\system32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe ~ Services: Scanned in 00mn 07s ---\\ Liste des émulateurs de CD/DVD (MBR Hook) O58 - SDL:03/12/2013 - 19:48:59 ---A- . (.Duplex Secure Ltd. - SCSI Pass Through Direct Host.) -- C:\Windows\System32\Drivers\sptd.sys [564824] ~ Emulateurs: Scanned in 00mn 07s ---\\ Scan Additionnel (O88) Database Version : 13026 - (04/12/2014) Clés trouvées (Keys found) : 1 Valeurs trouvées (Values found) : 1 Dossiers trouvés (Folders found) : 0 Fichiers trouvés (Files found) : 0 [HKLM\Software\Classes\.bk2] =>Adware.VirtualGirl ~ Additionnel Scan: 256786 Items scanned in 00mn 15s ---\\ Informations complémentaires sur les modules ~ http://nicolascoolman.fr/r5-internet-explorer-proxy-management-iepm/ =>.Internet Explorer, Proxy Management (R5) ~ http://nicolascoolman.fr/o3-internet-explorer-toolbars/ =>.Internet Explorer Toolbars (O3) ~ http://nicolascoolman.fr/o4-applications-demarrees-par-le-registre/ =>.Applications lancées au démarrage du système (O4) ~ AMI: 3 Legitimates Filtered in 00mn 00s ---\\ Récapitulatif des détections trouvées sur votre station http://nicolascoolman.fr/adware-virtualgirl =>Adware.VirtualGirl ~ MSI: 1 link(s) detected in 00mn 00s ~ 1168 Legitimates filtered by white list End of the scan (509 lines in 01mn 06s)(0)