cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

~ Rapport de ZHPDiag v2015.5.8.47 - Nicolas Coolman (05/05/2015)
~ Lancé par MacTaylor (10/05/2015 08:56:20)
~ Facebook : https://www.facebook.com/nicolascoolman1
~ Adresse du Forum http://forum.nicolascoolman.fr
~ Traduit par Nicolas Coolman
~ Etat de la version : Version à jour.
~ Liste blanche : Activée par le programme
~ Elévation des Privilèges : OK
~ User Account Control (UAC): Deactivate by program


---\\ Navigateurs Internet
MSIE: Internet Explorer v11.0.9600.17728
GCIE: Google Chrome v42.0.2311.135 (Defaut)

---\\ Informations sur les produits Windows
~ Langage: Français
Windows Server License Manager Script : OK
~ Windows Operating System - Windows(R) 7, OEM_SLP channel
System Locked Preinstallation (OEM_SLP) : OK
Windows ID Activation : OK
~ Windows Partial Key : 7QJB7
Windows License : OK
~ Windows Remaining Initializations Number : 2
Software Protection Service (Protection logicielle) : OK
Windows Automatic Updates : OK
Windows Activation Technologies : OK
Windows 7 Home Premium, 64-bit Service Pack 1 (Build 7601)

---\\ Logiciels de protection du système
Avast Free Antivirus v10.2.2218
Malwarebytes Anti-Malware version 2.1.6.1022
Windows Defender W7 (Activate)

---\\ Logiciels d'optimisation du système
CCleaner v5.04

---\\ Logiciels de partage PeerToPeer

---\\ Surveillance de Logiciels
Adobe Flash Player 17 NPAPI
Adobe Reader XI

---\\ Informations sur le système
~ Processor: Intel64 Family 6 Model 37 Stepping 5, GenuineIntel
~ Operating System: 64 Bits
Boot mode: Normal (Normal boot)
Total RAM: 3956 MB (51% free)
System Restore: Activé (Enable)
System drive C: has 217 GB (46%) free of 466 GB

---\\ Mode de connexion au système
~ Computer Name: MACTAYLOR-PC
~ User Name: MacTaylor
~ All Users Names: MacTaylor, HomeGroupUser$, Administrateur,
~ Unselected Option: O45,O61,O62,O65,O66,O80,O82,O89
Logged in as Administrator

---\\ Variables d'environnement
~ System Unit : C:\
~ %AppZHP% : C:\Users\MacTaylor\AppData\Roaming\ZHP\
~ %AppData% : C:\Users\MacTaylor\AppData\Roaming\
~ %Desktop% : C:\Users\MacTaylor\Desktop\
~ %Favorites% : C:\Users\MacTaylor\Favorites\
~ %LocalAppData% : C:\Users\MacTaylor\AppData\Local\
~ %StartMenu% : C:\Users\MacTaylor\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\

---\\ Enumération des unités disques
C: Hard drive, Flash drive, Thumb drive (Free 217 Go of 466 Go)
D: CD-ROM drive (Free 0 Go of 9 Go)
E: CD-ROM drive (Not Inserted)
G: CD-ROM drive (Free 0 Go of 9 Go)
Q: Hard drive, Flash drive, Thumb drive (Free 0 Go of 0 Go)



---\\ Etat du Centre de Sécurité Windows
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: Modified =>Hijacker.Application
~ Security Center: 49 Legitimates Filtered in 00mn 00s



---\\ Recherche particulière de fichiers génériques
[MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorateur Windows.) (.25/02/2011 - 07:19:30.) -- C:\Windows\Explorer.exe [2871808]
[MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 - 02:39:52.) -- C:\Windows\System32\Wininit.exe [129024]
[MD5.77B35D0FC22A2D2EAC8D07C3F9784DBF] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.13/03/2015 - 03:45:57.) -- C:\Windows\System32\wininet.dll [2358784]
[MD5.8CEBD9D0A0A879CDE9F36F4383B7CAEA] - (.Microsoft Corporation - Application d’ouverture de session Windows.) (.17/07/2014 - 03:07:24.) -- C:\Windows\System32\Winlogon.exe [455168]
[MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Bibliothèque de licences.) (.20/11/2010 - 14:27:26.) -- C:\Windows\System32\sppcomapi.dll [232448]
[MD5.FA886682CFC5D36718D3E436AACF10B9] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.30/05/2014 - 07:45:52.) -- C:\Windows\system32\Drivers\AFD.sys [497152]
[MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 - 02:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128]
[MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/07/2009 - 00:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160]
[MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.20/11/2010 - 10:19:21.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456]
[MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.20/11/2010 - 10:26:32.) -- C:\Windows\system32\Drivers\DfsC.sys [102400]
[MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.20/11/2010 - 11:43:43.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368]
[MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) (.14/07/2009 - 00:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472]
[MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.14/07/2009 - 01:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224]
[MD5.A5D9106A73DC88564C825D317CAC68AC] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.27/04/2011 - 03:40:40.) -- C:\Windows\system32\Drivers\MRxSmb.sys [158208]
[MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) (.20/11/2010 - 10:23:20.) -- C:\Windows\system32\Drivers\netBT.sys [261632]
[MD5.1A29A59A4C5BA6F8C85062A613B7E2B2] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.24/01/2014 - 03:37:55.) -- C:\Windows\system32\Drivers\ntfs.sys [1684928]
[MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/07/2009 - 01:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280]
[MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.20/11/2010 - 11:52:35.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [129536]
[MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.14/07/2009 - 01:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184]
[MD5.70988118145F5F10EF24720B97F35F65] - (.Microsoft Corporation - TDI Translation Driver.) (.11/11/2014 - 02:46:26.) -- C:\Windows\system32\Drivers\tdx.sys [119296]
[MD5.0D08D2F3B3FF84E433346669B5E0F639] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.20/11/2010 - 14:34:02.) -- C:\Windows\system32\Drivers\volsnap.sys [295808]
~ Generic Processes: Scanned in 00mn 00s



---\\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 2/113
~ Mes musiques (My Musics) : 2/145
~ Mes Videos (My Videos) : 1/12
~ Mes Favoris (My Favorites) : 1/30
~ Mes Documents (My Documents) : 2/6804
~ Mon Bureau (My Desktop) : 1/966
~ Menu demarrer (Programs) : 1/24
~ Hidden Files: Scanned in 00mn 19s



---\\ Processus lancés
[MD5.D19C99CF2938AEAE39805895D160E670] - (.SEIKO EPSON CORPORATION - MyEpson Portal.) -- C:\Program Files (x86)\EPSON\MyEpson Portal\mep.exe [2387440] [PID.2940]
[MD5.7E212E742BF06BF678AE35E9C1B74B8F] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe [6212920] [PID.1500]
[MD5.F341DD6145F779CE5B732BC6BC6A3370] - (.Apple Inc. - iCloud.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [43816] [PID.4104]
[MD5.944E77A49DBAF8F6BB473118C116E59E] - (.Apple Inc. - iCloud Photos.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [43816] [PID.4144]
[MD5.A75AE3B84B6423CE6A088E80A2BC23C2] - (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe [31280256] [PID.4224]
[MD5.4016CE43255F0BE4FBE4A54F4500B021] - (.Apple Inc. - iCloud Drive.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe [43816] [PID.4776]
[MD5.B94A9C5A30D3358CA4C1EC29BEBAEE1B] - (...) -- C:\Program Files (x86)\media center Bbox\media center\external\MediaServerTray.exe [846848] [PID.5032]
[MD5.90A3525C7399B7784D28F99EA1A51C4C] - (.SEIKO EPSON CORPORATION - EEventManager Application.) -- C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [673616] [PID.5064]
[MD5.31EA4BC4328BDBC50CD5CA4870F09E06] - (.Avast Software s.r.o. - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe [5515496] [PID.4336]
[MD5.A21B8BBFFF10C319AC63958EB562C230] - (.SEIKO EPSON CORPORATION - EBAPIx32.) -- C:\Windows\system32\spool\DRIVERS\x64\3\EBAPIx32.exe [69632] [PID.5116]
[MD5.4275C55AA440DC08EA0267AED31D9654] - (.Apple Inc. - Apple Push.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [60712] [PID.4316]
[MD5.4738DC864215B00B886E27A8D18CC326] - (.Intel Corporation - IAStorIcon.) -- C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592] [PID.5736]
[MD5.11BA701E12B60EA8717E6E9343397905] - (.Raptr, Inc - Raptr Desktop App.) -- C:\Program Files (x86)\Raptr\raptr.exe [67344] [PID.5168]
[MD5.03AAE778F4BC3422507A0AB61C8437B0] - (.Raptr, Inc - Raptr Desktop App.) -- C:\Program Files (x86)\Raptr\raptr_im.exe [45840] [PID.6924]
[MD5.7EDA1D46618C2F5801E4A47D80AE89ED] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [812872] [PID.6088]
[MD5.2727208EA26F6B6DA898AB6890417214] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [8208384] [PID.3464]
[MD5.54236E79A44F909612391C8A2D70D512] - (.Avast Software s.r.o. - avast! Service.) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336] [PID.1420]
[MD5.ABDD5AD016AFFD34AD40E944CE94BF59] - (.SEIKO EPSON CORPORATION - eEBAPI Core Process module.) -- C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSVC.exe [94208] [PID.1776]
[MD5.FC5B75CA6A1DA31EDD4F8D53F5540B98] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [81088] [PID.1948]
[MD5.506708142BC63DABA64F2D3AD1DCD5BF] - (.Google Inc. - Programme d'installation de Google.) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [116648] [PID.476]
[MD5.1F79342D9EB530A48742F651E570983A] - (.Microsoft Corporation - Updates Skype Click to Call.) -- C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176] [PID.2140]
[MD5.E4938E0A376CF0B9D989EE5C0A146891] - (.Microsoft Corporation - Phone Number Recognition (PNR) module.) -- C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520] [PID.2172]
[MD5.516E29AD03BDF610CC36A95AE692FE42] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160] [PID.2348]
[MD5.2B983F067AEE3F9EB4DF5E97F45D21D1] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1080120] [PID.2480]
[MD5.6987C6975FEE96D091FCCD52E8493D27] - (.Bouygues Telecom - DMS.) -- C:\ProgramData\media center Bouygues Telecom\MediaServer.exe [4177408] [PID.2504]
[MD5.E605F35F03C881DC46902E0E2F5985B3] - (.SEIKO EPSON CORPORATION - MyEpson Portal Service.) -- C:\Program Files (x86)\EPSON\MyEpson Portal\mepService.exe [703984] [PID.2572]
[MD5.39B1D0A636A400304565D4521FAD6D77] - (.Microsoft Corporation - Microsoft Application Virtualization Virtua.) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [207528] [PID.2924]
[MD5.F9EC9ACD504D823D9B9CA98A4F8D3CA2] - (.Acer Group - Updater Service.) -- C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe [243232] [PID.3420]
[MD5.77C5A741A7452812F278EF2C18478862] - (.Microsoft Corporation - Microsoft Application Virtualization Client.) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe [523944] [PID.3872]
[MD5.B4D1D62A09F09CB2DFD55628350CDAFB] - (.Microsoft Corporation - Microsoft Office Client Virtualization Serv.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.exe [822496] [PID.3064]
[MD5.8FDA65209157144C3E28809D75A47526] - (.MAGIX AG - Verzeichnisüberwachung und Hilfsaufgaben fü.) -- C:\Program Files (x86)\Common Files\MAGIX Services\Database_76894d\bin\FABS.exe [1858048] [PID.776]
[MD5.6241810294275CEA59EBA9733080E5EE] - (.Intel Corporation - IAStorDataSvc.) -- C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720] [PID.6636]
~ Processes Running: Scanned in 00mn 03s



---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
C:\Users\MacTaylor\AppData\Local\Google\Chrome\User Data\Default\Preferences

---\\ Liste des dossiers d'extension Google Chrome
~ Google Lines Browser: 9 Legitimates Filtered in 00mn 16s



---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
P2 - FPN: [HKLM] [adobe.com/AdobeAAMDetect] - (...) -- C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (.not file.)
~ Firefox Browser: 9 Legitimates Filtered in 00mn 00s



---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Proxy management: Scanned in 00mn 00s



---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
~ Keys: Scanned in 00mn 00s



---\\ Hosts file redirection (O1)
~ Le fichier hôte est sain (The hosts file is clean) (151)
~ Hosts File: Scanned in 00mn 00s



---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar: (no name) - [HKLM]{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} Clé orpheline
~ Toolbar: Scanned in 00mn 00s



---\\ Applications lancées au démarrage du système (O4)
O4 - HKLM\..\Run: [RtHDVCpl] . (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe =>.Realtek Semiconductor Corp
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files (x86)\Synaptics\SynTP\SynTPEnh.exe (.not file.)
O4 - HKLM\..\Run: [Acer ePower Management] . (.Acer Incorporated - ePowerTray.) -- C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe
O4 - HKLM\..\Run: [AmIcoSinglun64] . (.Alcor Micro Corp. - Single LUN Icon Utility for VID 058F PID 63.) -- C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
O4 - HKLM\..\Run: [IAStorIcon] . (.Intel Corporation - Delayed launcher.) -- C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe
O4 - HKLM\..\Run: [EvtMgr6] . (.Logitech, Inc. - Logitech SetPoint Event Manager (UNICODE).) -- C:\Program Files\Logitech\SetPointP\SetPoint.exe
O4 - HKLM\..\Run: [AdobeAAMUpdater-1.0] . (.Adobe Systems Incorporated - Adobe Updater Startup Utility.) -- C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe =>.Adobe Systems Incorporated
O4 - HKLM\..\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKCU\..\Run: [Epson Stylus SX510W(Réseau)] . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIFIE.exe =>.Epson Seiko Corporation
O4 - HKCU\..\Run: [iCloudServices] . (.Apple Inc. - iCloud.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
O4 - HKCU\..\Run: [ApplePhotoStreams] . (.Apple Inc. - iCloud Photos.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
O4 - HKCU\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe =>.Skype Technologies S.A.
O4 - HKCU\..\Run: [DAEMON Tools Lite] . (.Disc Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe =>.DT Soft Ltd
O4 - HKCU\..\Run: [CCleaner Monitoring] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner64.exe =>.Piriform Ltd
O4 - HKCU\..\Run: [iCloudDrive] . (.Apple Inc. - iCloud Drive.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe
O4 - HKCU\..\Run: [AdobeBridge] Clé orpheline
O4 - HKCU\..\Run: [XplicitMessenger] Clé orpheline
O4 - HKCU\..\Run: [GoogleChromeAutoLaunch_8B784A5A538977E5D28B5C31FB1476F9] . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O4 - HKLM\..\Wow6432Node\Run: [Microsoft Default Manager] . (.Microsoft Corporation - Microsoft Default Manager.) -- C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe =>.Microsoft Corporation
O4 - HKLM\..\Wow6432Node\Run: [EEventManager] . (.SEIKO EPSON CORPORATION - EEventManager Application.) -- C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
O4 - HKLM\..\Wow6432Node\Run: [Adobe Creative Cloud] . (.Adobe Systems Incorporated - Adobe Creative Cloud.) -- C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
O4 - HKLM\..\Wow6432Node\Run: [AvastUI.exe] . (.Avast Software s.r.o. - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
O4 - HKLM\..\Wow6432Node\Run: [SwitchBoard] . (.Adobe Systems Incorporated - SwitchBoard Server (32 bit).) -- C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Wow6432Node\Run: [AdobeCS6ServiceManager] . (.Adobe Systems Incorporated - Adobe CS6 Service Manager.) -- C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe
O4 - HKLM\..\Wow6432Node\Run: [StartCCC] . (.Advanced Micro Devices, Inc. - Catalyst® Control Center Launcher.) -- C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe =>.Advanced Micro Devices, Inc
O4 - HKLM\..\Wow6432Node\Run: [Raptr] . (.Raptr, Inc - Raptr Desktop App.) -- C:\Program Files (x86)\Raptr\raptrstub.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-21-1497111567-396528031-3374421047-1000\..\Run: [Epson Stylus SX510W(Réseau)] . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIFIE.exe =>.Epson Seiko Corporation
O4 - HKUS\S-1-5-21-1497111567-396528031-3374421047-1000\..\Run: [iCloudServices] . (.Apple Inc. - iCloud.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
O4 - HKUS\S-1-5-21-1497111567-396528031-3374421047-1000\..\Run: [ApplePhotoStreams] . (.Apple Inc. - iCloud Photos.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
O4 - HKUS\S-1-5-21-1497111567-396528031-3374421047-1000\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe =>.Skype Technologies S.A.
O4 - HKUS\S-1-5-21-1497111567-396528031-3374421047-1000\..\Run: [DAEMON Tools Lite] . (.Disc Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe =>.DT Soft Ltd
O4 - HKUS\S-1-5-21-1497111567-396528031-3374421047-1000\..\Run: [CCleaner Monitoring] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner64.exe =>.Piriform Ltd
O4 - HKUS\S-1-5-21-1497111567-396528031-3374421047-1000\..\Run: [iCloudDrive] . (.Apple Inc. - iCloud Drive.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe
O4 - HKUS\S-1-5-21-1497111567-396528031-3374421047-1000\..\Run: [AdobeBridge] Clé orpheline
O4 - HKUS\S-1-5-21-1497111567-396528031-3374421047-1000\..\Run: [XplicitMessenger] Clé orpheline
O4 - HKUS\S-1-5-21-1497111567-396528031-3374421047-1000\..\Run: [GoogleChromeAutoLaunch_8B784A5A538977E5D28B5C31FB1476F9] . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
~ Application: Scanned in 00mn 00s



---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: Skype Click to Call settings [64Bits] - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} . (...) -- c:\program files (x86)\skype\toolbars\internet explorer x64\icon.ico
~ IE Extra Buttons: Scanned in 00mn 00s



---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{B5E476B7-C698-4D45-B4FE-58E5BDC9E256}: NameServer = 8.8.8.8,8.8.4.4 =>.Google DNS Redirections
O17 - HKLM\System\CCS\Services\Tcpip\..\{10A7D510-B796-4284-AD4D-A6193C55BD96}: DhcpNameServer = 172.20.10.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{B5E476B7-C698-4D45-B4FE-58E5BDC9E256}: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CCS\Services\Tcpip\..\{B5E476B7-C698-4D45-B4FE-58E5BDC9E256}: DhcpDomain = lan
O17 - HKLM\System\CS1\Services\Tcpip\..\{B5E476B7-C698-4D45-B4FE-58E5BDC9E256}: NameServer = 8.8.8.8,8.8.4.4 =>.Google DNS Redirections
O17 - HKLM\System\CS1\Services\Tcpip\..\{10A7D510-B796-4284-AD4D-A6193C55BD96}: DhcpNameServer = 172.20.10.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{B5E476B7-C698-4D45-B4FE-58E5BDC9E256}: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CS1\Services\Tcpip\..\{B5E476B7-C698-4D45-B4FE-58E5BDC9E256}: DhcpDomain = lan
O17 - HKLM\System\CS2\Services\Tcpip\..\{B5E476B7-C698-4D45-B4FE-58E5BDC9E256}: NameServer = 8.8.8.8,8.8.4.4 =>.Google DNS Redirections
O17 - HKLM\System\CS2\Services\Tcpip\..\{10A7D510-B796-4284-AD4D-A6193C55BD96}: DhcpNameServer = 172.20.10.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{B5E476B7-C698-4D45-B4FE-58E5BDC9E256}: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CS2\Services\Tcpip\..\{B5E476B7-C698-4D45-B4FE-58E5BDC9E256}: DhcpDomain = lan
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254
~ Domain: Scanned in 00mn 00s



---\\ Protocole additionnel (O18)
O18 - Handler: wlmailhtml [64Bits] - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} . (...) --
O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation
~ Protocole Additionnel: Scanned in 00mn 00s



---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: LBTWlgn . (.Logitech, Inc. - Logitech Bluetooth Service.) -- c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll
~ Winlogon: Scanned in 00mn 00s



---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: Leawo common service. (Leawo_service) . (.Pas de propriétaire - yytool Application.) - C:\Program Files (x86)\Common Files\Appkeys\yytool64.exe
O23 - Service: media center Bouygues Telecom (media center Bouygues Telecom) . (.Bouygues Telecom - DMS.) - C:\ProgramData\media center Bouygues Telecom\MediaServer.exe
~ Services: 17 Legitimates Filtered in 00mn 14s



---\\ Tâches planifiées en automatique (O39)
[MD5.00000000000000000000000000000000] [APT] [{029EF0EC-F273-4726-BC2E-CC6383B3F44A}] (...) -- C:\Users\MacTaylor\Desktop\Virtual_DJ_Pro_8.0.1944\Virtual_DJ_Pro_8.0.1944\Plug-Ins\SoundEffect\Back loop\loop_back.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{029EFBA5-265C-4DD3-9D29-E8415ECAB5BE}] (...) -- C:\Users\MacTaylor\Desktop\Virtual_DJ_Pro_8.0.1944\Virtual_DJ_Pro_8.0.1944\Plug-Ins\SoundEffect\Auto-Cut v2.0\AutoCut.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{0EF0982F-3645-4DC7-B1BB-7A7C80BA92EE}] (...) -- C:\Users\MacTaylor\Desktop\Shareaza_2.7.7.0_x64.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{1473FAAB-453E-49EF-B40C-1B47A2B044AB}] (...) -- C:\Users\MacTaylor\Desktop\MAGIX_Music_Maker_v15.0.1.5_Premium_._Crack_(March_09)_[RH].exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{16F35E6E-ED6A-41B1-8013-FC1B7BF44632}] (...) -- C:\Program Files (x86)\Sense\Uninstall.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{18F640F8-B021-4BD2-A624-C04C5544C707}] (...) -- C:\Users\MacTaylor\Desktop\trial_content_pack01_int.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{1B9B6D98-2B07-4DDD-BBDC-C2A560F10A11}] (...) -- C:\Users\MacTaylor\Desktop\drfone_full1283.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{21A5BBDA-C57B-4B2A-8E97-1374956D2884}] (...) -- C:\Program Files (x86)\Wondershare\Dr.Fone\drfone.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{2849FE3C-1584-4D4B-A160-F19AD36C6837}] (...) -- C:\Program Files (x86)\eMule0.60\eMule0.60.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{2D2CFB88-160F-4686-94FC-3C05C2F1A53A}] (...) -- C:\Program Files\Shareaza\Shareaza.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{2D60E0BF-A64E-4170-AA46-4BDAB3219188}] (...) -- F:\Magix\Magix.Music.Maker.Premium.v16.0.0.30.Cracked-RedT_nled\trial_content_pack01_int.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{2DE72FA9-D692-4AF7-9CC4-48D28D64CD26}] (...) -- C:\Users\MacTaylor\Downloads\soundloops_pack03_int.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{31128D71-405E-4FE0-92E5-22324B1D3B2A}] (...) -- C:\Users\MacTaylor\Desktop\Magix.Music.Maker.Premium.v16.0.0.30.Cracked-RedT_nled\trial_content_pack01_int.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{32C5E142-13C4-4AC9-A1E1-5F35E24DD8B8}] (...) -- C:\Program Files (x86)\Plus-HD-V1.1\Uninstall.exe (.not file.) [0] =>Adware.PlusHD
[MD5.00000000000000000000000000000000] [APT] [{363E2AE8-88CF-4FB4-83A1-2E1535ED4208}] (...) -- C:\Program Files (x86)\Wondershare\Dr.Fone pour iOS\iphoneRecovery_DrFoneForiOS.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{3C34E88F-43B7-4FE9-82F3-38F11CED858C}] (...) -- C:\Users\MacTaylor\Desktop\Nero.9 Ita V.9.0.9.4\Nero 9 CleanTool\General-CleanTool.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{3FD9833B-1165-4C24-AC4B-DDF56ED84F3A}] (...) -- C:\Users\MacTaylor\Downloads\eMule.v0.49c.Titandonkey.v5.22.installer.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{41B8A0A6-5A24-417E-864F-FE16F0CB16CF}] (...) -- C:\Users\MacTaylor\Desktop\Virtual_DJ_Pro_8.0.1944\Virtual_DJ_Pro_8.0.1944\Plug-Ins\SoundEffect\16-band Equaliser\16-band_Equaliser.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{437D3BF2-4636-4EA2-AD2D-2C8C1AB13109}] (...) -- H:\Magix Music Maker\MAGIX Music Maker 15 Premium\Content Packs\content_pack02_int.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{4636E856-19F8-466D-BF4A-7B7C63DFE148}] (...) -- C:\Users\MacTaylor\Downloads\Setup.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{4676F2BF-FA66-4BEC-B694-371BF60F4315}] (...) -- C:\Users\MacTaylor\AppData\Roaming\mystartsearch\UninstallManager.exe (.not file.) [0] =>PUP.StartSearch
[MD5.00000000000000000000000000000000] [APT] [{4B910AC9-5901-4EFC-97AE-0C3DFB5C575C}] (...) -- C:\Users\MacTaylor\Downloads\STOR_Win7_XP_11.2.0.1006.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{5110D57E-5996-43F2-B86B-CCB41393A947}] (...) -- C:\Program Files (x86)\FTdownloader V9.0\Uninstall.exe (.not file.) [0] =>Adware.Downware
[MD5.00000000000000000000000000000000] [APT] [{51326E4D-A3A8-4423-9DFA-A4282A53B9B1}] (...) -- C:\Program Files (x86)\iWebar\Uninstall.exe (.not file.) [0] =>PUP.CrossRider
[MD5.00000000000000000000000000000000] [APT] [{5604CB72-07C0-43DE-A60B-09660BA71CB9}] (...) -- C:\Program Files (x86)\Torntv V9.0\Uninstall.exe (.not file.) [0] =>Hijacker.TornTV
[MD5.00000000000000000000000000000000] [APT] [{5B0E9101-8550-4FE9-803E-CEB50B9C2C0D}] (...) -- H:\Magix Music Maker\MAGIX Music Maker 15 Premium\Content Packs\content_pack02_int.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{5DF5B588-19FF-4F4A-A2F7-EAB4EDCC2D2B}] (...) -- C:\Users\MacTaylor\Downloads\RegCleaner.exe (.not file.) [0]
[MD5.A53024FA40B744554A926210AB1AFB82] [APT] [{6537647C-8680-47F7-81F8-0F5D68E848D6}] (...) -- C:\Program Files (x86)\Temp\UnInstall.exe [767888]
[MD5.00000000000000000000000000000000] [APT] [{6D7E404A-0380-4F68-9521-8C8CF8A4E2F4}] (...) -- C:\Program Files (x86)\Mediaa_Play_AIR_1.4\Uninstall.exe (.not file.) [0] =>PUP.CrossRider
[MD5.00000000000000000000000000000000] [APT] [{70E2A3B3-C7D8-43A8-BAC7-B271998F6092}] (...) -- E:\MusicMakerBasicEdition.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{7583FAD8-237E-407F-9E14-38E861B1DD89}] (...) -- C:\Program Files\Shareaza\Shareaza.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{760C18BC-E2A3-414A-8161-0FACC80F3743}] (...) -- C:\Users\MacTaylor\Desktop\trial_content_pack01_int.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{798005BA-5F79-4B75-8C32-4282B218252D}] (...) -- C:\Program Files (x86)\VS Revo Group\Revo Uninstaller\Revouninstaller.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{7DC715F4-95D9-4686-BC16-EBD102D9C284}] (...) -- E:\DRV\MEI\setup.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{83656D41-D651-45BD-9BAA-99B0F5EB4D2D}] (...) -- E:\DRV\AHCI\Setup.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{85BAD443-F1DD-4C5C-8C4C-30534A7253B2}] (...) -- C:\PROGRA~3\MAGIX\MMG6_D~1\UNWISE.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{8E2EF792-25F8-481C-A6D5-2970184735CF}] (...) -- C:\Program Files (x86)\eMule0.60\eMule0.60.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{8E95FF83-AD8A-4C9C-8BFE-64E66DE0676E}] (...) -- C:\Program Files\Shareaza\Shareaza.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{8E9B3B28-7D54-486F-B073-B35D8286F0D6}] (...) -- C:\ProgramData\TVWizard\uninstall.exe (.not file.) [0] =>PUP.TVWizard
[MD5.00000000000000000000000000000000] [APT] [{91F306F2-9BD7-47D2-B16A-DC543863C790}] (...) -- D:\Magix\soundloops_pack01_int.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{AD40761C-B3A4-46D2-8C45-B3BFF87D1830}] (...) -- C:\Program Files (x86)\RocketDock\unins000.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{B1F26265-5524-4D8E-81BB-26E85017A8DB}] (...) -- H:\Magix Music Maker\soundloops_pack01_int.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{B367224F-26BB-418E-A15C-1751C7F0D0F7}] (...) -- C:\Users\MacTaylor\Desktop\Content Packs\content_pack01_i.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{B6FFF074-37BF-43AC-B893-82EDF86BDD64}] (...) -- C:\Users\MacTaylor\Desktop\Shareaza_2.7.7.0_x64.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{BA0DFB6E-5294-4294-8E0B-E2BED50EF49C}] (...) -- C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe (.not file.) [0] =>PUP.Fuyu
[MD5.00000000000000000000000000000000] [APT] [{BF206144-E62A-4278-9D44-37AB4BEB3984}] (...) -- C:\Program Files\Shareaza\Shareaza.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{C4D79018-8990-484F-AFE7-4F33B7C23C65}] (...) -- C:\Program Files (x86)\Wondershare\Dr.Fone pour iOS\iphoneRecovery_DrFoneForiOS.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{C687EC26-C7FA-4B01-80FB-DFC97E814DB0}] (...) -- C:\Users\MacTaylor\Downloads\soundloops_pack02_int.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{C991ACF8-D2CE-4BA7-947F-FF7763E11D5E}] (...) -- C:\Program Files\Shareaza\Shareaza.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{CB1B014C-7201-4D4E-9AE8-420F1C99974D}] (...) -- C:\Users\MacTaylor\Desktop\Shareaza_2.7.7.0_x64.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{CBFA3903-71AA-4E24-A5AB-C6C873F46411}] (...) -- H:\Magix Music Maker\MAGIX Music Maker 15 Premium\Content Packs\content_pack01_i.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{D1953BF8-CB3D-46F9-8D74-7EF2D022B6F0}] (...) -- C:\Users\MacTaylor\Desktop\content_pack01_int.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{D66CA964-9BC1-465E-A32D-DF11A11A6A13}] (...) -- C:\Users\MacTaylor\Desktop\Sony Vegas Pro.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{D8B40CC3-31B5-41D0-B98C-6385962B17C3}] (...) -- C:\Program Files\Shareaza\Shareaza.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{DBFB27EB-811B-44BF-9D5D-AF88835F8300}] (...) -- C:\Users\MacTaylor\Desktop\Virtual_DJ_Pro_8.0.1944\Virtual_DJ_Pro_8.0.1944\Plug-Ins\SoundEffect\Attenuated LFO\LFO_att_v2.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{E3E54866-60D1-4C10-B99B-C38D9DA4045B}] (...) -- C:\Program Files\Shareaza\Shareaza.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{E4C35132-BCE5-4DE9-88A3-D9D08332FA6E}] (...) -- C:\Users\MacTaylor\Downloads\soundloops_pack01_int.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{E5DA02CF-A084-4656-B945-0B57FBB9F884}] (...) -- C:\Users\MacTaylor\AppData\Roaming\istartsurf\UninstallManager.exe (.not file.) [0] =>PUP.Istart
[MD5.00000000000000000000000000000000] [APT] [{F38845E5-679D-40D7-9B3F-A5FD318121B3}] (...) -- D:\ordi\Keygen\Keygen.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{F4DE6425-EA1A-4FD1-BF2A-2C4937B1C06D}] (...) -- D:\ordi\Magix\content_pack01_int.exe (.not file.) [0]
O39 - APT: - (..) -- C:\Windows\System32\Tasks\Adobe Flash Player Updater [1002]
O39 - APT: - (..) -- C:\Windows\System32\Tasks\Epson Printer Software Downloader [260]
O39 - APT: - (..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore [1070]
O39 - APT: - (..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA [1074]
O39 - APT: - (..) -- C:\Windows\System32\Tasks\Packard Bell Registration - Data Sending task [426]
~ Scheduled Task: 91 Legitimates Filtered in 00mn 13s



---\\ Logiciels installés (O42)
O42 - Logiciel: My Program version 1.5 - (...) [HKLM][64Bits] -- My Program_is1
~ Logic: 35 Legitimates Filtered in 00mn 01s



---\\ HKCU & HKLM Software Keys
[HKCU\Software\ClkApp]
[HKCU\Software\DownloadAstro]
[HKCU\Software\MiniGet]
[HKCU\Software\NKO]
[HKCU\Software\OB]
[HKCU\Software\RYLP]
[HKCU\Software\Toggle]
[HKCU\Software\Toocharger]
[HKLM\Software\Wow6432Node\Client]
[HKLM\Software\Wow6432Node\MaxPower]
[HKLM\Software\Wow6432Node\Softlet]
[HKLM\Software\Wow6432Node\Universal]
~ Key Software: 585 Legitimates Filtered in 00mn 01s



---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 08/01/2015 - 19:04:14 - [] ----D C:\Program Files (x86)\Common Files\Appkeys
O43 - CFD: 29/11/2014 - 13:12:33 - [] ----D C:\Program Files (x86)\Common Files\Softlet
O43 - CFD: 13/09/2014 - 19:09:15 - [] ----D C:\ProgramData\BNZVFcJZxLG
O43 - CFD: 14/04/2015 - 20:22:44 - [] ----D C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7
O43 - CFD: 12/09/2014 - 18:36:04 - [0] -SH-D C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
O43 - CFD: 15/11/2014 - 15:10:02 - [0] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Collab
O43 - CFD: 06/05/2015 - 22:32:02 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud
O43 - CFD: 08/09/2010 - 05:25:27 - [0] R-H-D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC
O43 - CFD: 24/08/2014 - 08:25:29 - [] ----D C:\Users\MacTaylor\AppData\Roaming\library_dir
O43 - CFD: 25/07/2014 - 18:09:48 - [] ----D C:\Users\MacTaylor\AppData\Roaming\Shortcut
O43 - CFD: 11/02/2015 - 10:44:45 - [] ----D C:\Users\MacTaylor\AppData\Roaming\wi_upd
O43 - CFD: 20/08/2014 - 22:11:52 - [] ----D C:\Users\MacTaylor\AppData\Local\18612
O43 - CFD: 29/08/2014 - 08:24:51 - [] ----D C:\Users\MacTaylor\AppData\Local\27462
O43 - CFD: 23/10/2014 - 15:10:45 - [] ----D C:\Users\MacTaylor\AppData\Local\28849
O43 - CFD: 05/11/2014 - 13:27:23 - [] ----D C:\Users\MacTaylor\AppData\Local\29454
O43 - CFD: 13/09/2014 - 14:32:55 - [] ----D C:\Users\MacTaylor\AppData\Local\29537
O43 - CFD: 17/11/2014 - 13:49:07 - [] -SH-D C:\Users\MacTaylor\AppData\Local\EmieBrowserModeList
O43 - CFD: 21/08/2014 - 08:28:38 - [] ----D C:\Users\MacTaylor\AppData\Local\Temp373c26eed90f9a2f2054f9d80e6fded5
~ Program Folder: 288 Legitimates Filtered in 00mn 01s



---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.97317DD29947AB4D70D79004A5B42B1A] - 27/04/2015 - 07:51:37 ---A- . (...) -- C:\Ad-Report-SCAN[10].txt [49830]
O44 - LFC:[MD5.4313AD9E5EE69417DBECBE70FDA3FF3A] - 27/04/2015 - 08:07:50 ---A- . (...) -- C:\Ad-Report-CLEAN[11].txt [49943]
~ Files: 17 Legitimates Filtered in 00mn 12s



---\\ Enumération des clés de registre PoliciesSystem (MWPS) (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
~ MWPS: 19 Legitimates Filtered in 00mn 00s



---\\ Enumération des clés de registre PoliciesExplorer (MWPE) (O56)
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1
~ MWPE Keys: 5 Legitimates Filtered in 00mn 00s



---\\ Liste des pilotes du système (SDL) (O58)
O58 - SDL:09/04/2014 - 21:05:52 ---A- . (.Wondershare - Wondershare Virtual Audio Device.) -- C:\Windows\System32\Drivers\Apowersoft_AudioDevice.sys [31920]
O58 - SDL:23/04/2015 - 19:04:21 ---A- . (...) -- C:\Windows\System32\Drivers\aswHwid.sys [29168] =>.ALWIL Software
O58 - SDL:23/04/2015 - 19:04:21 ---A- . (...) -- C:\Windows\System32\Drivers\aswRvrt.sys [65736] =>.ALWIL Software
O58 - SDL:18/08/2014 - 14:09:49 ---A- . (.The OpenVPN Project - TAP-Windows Virtual Network Driver.) -- C:\Windows\System32\Drivers\aswTap.sys [44640]
O58 - SDL:23/04/2015 - 19:04:21 ---A- . (...) -- C:\Windows\System32\Drivers\aswVmm.sys [272248] =>.ALWIL Software
O58 - SDL:14/07/2009 - 02:47:48 ---A- . (.Emulex - Storport Miniport Driver for LightPulse HBAs.) -- C:\Windows\System32\Drivers\elxstor.sys [530496]
O58 - SDL:10/06/2009 - 21:31:59 ---A- . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for eHome.) -- C:\Windows\System32\Drivers\hcw85cir.sys [31232]
O58 - SDL:05/03/2014 - 16:49:38 ---A- . (.© Guillemot R&D, 2014. All rights reserved. - DJ Series ASIO kernel driver.) -- C:\Windows\System32\Drivers\HDJAsioK.sys [323376]
O58 - SDL:05/03/2014 - 16:49:36 ---A- . (.© Guillemot R&D, 2014. All rights reserved. - DJ Series Bulk driver.) -- C:\Windows\System32\Drivers\HDJBulk.sys [296240]
O58 - SDL:05/03/2014 - 16:49:36 ---A- . (.© Guillemot R&D, 2014. All rights reserved. - Hercules DJ Control MP3 Filter Driver.) -- C:\Windows\System32\Drivers\HDJCtrl.sys [38704]
O58 - SDL:05/03/2014 - 16:49:34 ---A- . (.© Guillemot R&D, 2014. All rights reserved. - DJ Series MIDI kernel driver.) -- C:\Windows\System32\Drivers\HDJMidi.sys [276272]
O58 - SDL:25/09/2014 - 22:06:06 ---A- . (.Duplex Secure Ltd. - SCSI Pass Through Direct Host.) -- C:\Windows\System32\Drivers\sptd.sys [386680]
O58 - SDL:22/01/2014 - 07:52:10 ---A- . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG USB Composite Device Driver (MSS Ver.3).) -- C:\Windows\System32\Drivers\ssudbus.sys [108800]
O58 - SDL:22/01/2014 - 07:52:10 ---A- . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG Android Modem Device Driver (MSS Ver.3).) -- C:\Windows\System32\Drivers\ssudmdm.sys [206080]
O58 - SDL:14/07/2009 - 02:45:55 ---A- . (.Promise Technology - Promise SuperTrak EX Series Driver for Windows.) -- C:\Windows\System32\Drivers\stexstor.sys [24656]
O58 - SDL:28/07/2014 - 13:52:00 ---A- . (.Apple, Inc. - Apple Mobile Device USB Driver.) -- C:\Windows\System32\Drivers\usbaapl64.sys [54784]
~ Drivers: 92 Legitimates Filtered in 00mn 06s



---\\ Liste des outils de désinfection (LATC) (O63)
O63 - Logiciel: Ad-Remover par C_XX - (.C_XX.) [HKLM] -- Ad-Remover
O63 - Logiciel: ZHPDiag 2015 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 =>.Nicolas Coolman
~ ADS: Scanned in 00mn 00s



---\\ Liste les services legacy du registre (LALS) (O64)
O64 - Services: CurCS - 23/04/2015 - C:\Windows\system32\drivers\aswHwid.sys (aswHwid) .(...) - LEGACY_ASWHWID
O64 - Services: CurCS - 30/05/2012 - C:\Windows\System32\DRIVERS\iaStor.sys (iaStor) .(.Intel Corporation - Intel Rapid Storage Technology driver - x64.) - LEGACY_IASTOR
~ Legacy: 97 Legitimates Filtered in 00mn 00s



---\\ Associations Shell Spawning (O67)
O67 - Shell Spawning: <.html> [HKCU\..\open\Command] (.Not Key.)
~ FASS Keys: 11 Legitimates Filtered in 00mn 00s



---\\ Menu de démarrage Internet (SMI) (O68)
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (...) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
~ Keys: Scanned in 00mn 00s



---\\ Recherche d'infection sur les navigateurs internet (SBI) (O69)
O69 - SBI: SearchScopes [HKCU] ${searchCLSID} - (@ieframe.dll,-12512) - http://search.live.com
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (Bing) - http://www.bing.com
~ Keys: Scanned in 00mn 00s



---\\ Enumère les données de la clé NameSpace (MNS) (O92)
O92 - MNS: Photos iCloud - {F0D63F85-37EC-4097-B30D-61B4A8917118}
~ MNS: 1 Legitimates Filtered in 00mn 00s



---\\ Recherche des packages WindowsInstaller (WIS) (O93) (NTFS)
[MD5.43E9733D3D8C8197821F6D2199560A90] [WIS][27/04/2014] (.Microsoft Corporation - Bing Bar Platform.) -- C:\Windows\Installer\2b76c.msi [215040] =>Toolbar.Bing
~ WIS: 1 Legitimates Filtered in 00mn 18s



---\\ Recherche de clés de registre CLSID (O101)
[HKCR\CLSID\{154119AB-9DF6-9B60-554B-0FEDBE120A58}] (Adblocker) =>PUP.Adblocker
[HKCR\CLSID\{1CF514C1-CB99-C7EC-C538-C0257C58A4C9}] (Adblocker) =>PUP.Adblocker
[HKCR\CLSID\{5CAA6A34-2A52-55ED-E012-BFDF988774BC}] (Adblocker) =>PUP.Adblocker
[HKCR\CLSID\{A5254D1D-906F-E309-F3DA-5AE92D4E3375}] (Adblocker) =>PUP.Adblocker
~ BCK: 4602 Legitimates Filtered in 00mn 11s



---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)
SS - | Disabled 09/10/2009 169312 | (AdobeActiveFileMonitor8.0) . (.Adobe Systems Incorporated.) - c:\Program Files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe
SS - | Demand 15/04/2015 268464 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
SS - | Disabled 11/08/2010 321104 | (DsiWMIService) . (.Dritek System Inc..) - C:\Program Files (x86)\Launch Manager\dsiwmis.exe
SS - | Disabled 11/06/2010 868896 | (ePowerSvc) . (.Acer Incorporated.) - C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe
SS - | Demand 26/04/2011 2702848 | (FirebirdServerMAGIXInstance) . (.MAGIX®.) - C:\Program Files (x86)\Common Files\MAGIX Services\Database_76894d\bin\fbserver.exe
SS - | Demand 27/04/2014 867080 | (FLEXnet Licensing Service) . (.Acresso Software Inc..) - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
SS - | Disabled 08/01/2010 23584 | (GREGService) . (.Acer Incorporated.) - C:\Program Files (x86)\Packard Bell\Registration\GREGsvc.exe
SS - | Auto 29/04/2015 116648 | (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
SS - | Demand 29/04/2015 116648 | (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
SS - | Demand 24/03/2014 357144 | (LBTServ) . (.Logitech, Inc..) - C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe
SS - | Disabled 03/03/2010 268824 | (LMS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
SS - | Auto 01/04/2014 2818888 | (MaConfigAgent) . (.CybelSoft.) - C:\Program Files\ma-config.com\MaConfigAgent.exe
SS - | Auto 18/02/2015 315488 | (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe
SS - | Demand 19/02/2010 517096 | (SwitchBoard) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
SS - | Disabled 03/03/2010 2320920 | (UNS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
SR - | Auto 19/12/2014 81088 | (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
SR - | Auto 21/11/2014 244736 | (AMD External Events Utility) . (.AMD.) - C:\Windows\System32\atiesrxx.exe
SR - | Auto 19/01/2015 77128 | (Apple Mobile Device Service) . (.Apple Inc..) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
SR - | Auto 23/04/2015 343336 | (avast! Antivirus) . (.Avast Software s.r.o..) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
SR - | Auto 30/08/2011 462184 | (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe
SR - | Auto 19/12/2006 94208 | (EpsonBidirectionalService) . (.SEIKO EPSON CORPORATION.) - C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSVC.exe
SR - | Auto 23/01/2012 1858048 | (Fabs) . (.MAGIX AG.) - C:\Program Files (x86)\Common Files\MAGIX Services\Database_76894d\bin\FABS.exe
SR - | Auto 21/11/2013 15720 | (IAStorDataMgrSvc) . (.Intel Corporation.) - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
SR - | Demand 06/04/2015 643880 | (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe
SR - | Auto 04/05/2014 1232880 | (Leawo_service) . (...) - C:\Program Files (x86)\Common Files\Appkeys\yytool64.exe
SR - | Auto 14/04/2015 1871160 | (MBAMScheduler) . (.Malwarebytes Corporation.) - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
SR - | Auto 14/04/2015 1080120 | (MBAMService) . (.Malwarebytes Corporation.) - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
SR - | Auto 04/07/2013 4177408 | (media center Bouygues Telecom) . (.Bouygues Telecom.) - C:\ProgramData\media center Bouygues Telecom\MediaServer.exe
SR - | Auto 22/09/2014 703984 | (MyEpson Portal Service) . (.SEIKO EPSON CORPORATION.) - C:\Program Files (x86)\EPSON\MyEpson Portal\mepService.exe
SR - | Auto 29/01/2010 243232 | (Updater Service) . (.Acer Group.) - C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe
SR - | Auto 14/07/2009 27136 | C:\Windows\System32\uxtuneup.dll (UxTuneUp) . (.AVG Technologies.) - C:\Windows\System32\svchost.exe
SR - | Auto 14/07/2009 27136 | C:\Program Files (x86)\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
SR - | Auto 22/07/1658 0 | (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe =>.Microsoft Corporation
SR - | Auto 14/07/2009 27136 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
~ Services: Scanned in 00mn 13s



---\\ Liste des émulateurs de CD/DVD (MBR Hook)
O58 - SDL:25/09/2014 - 22:06:06 ---A- . (.Duplex Secure Ltd. - SCSI Pass Through Direct Host.) -- C:\Windows\System32\Drivers\sptd.sys [386680]
~ Emulateurs: Scanned in 00mn 13s



---\\ Scan Additionnel (O88)
Database Version : 13008 - (05/05/2015)
Clés trouvées (Keys found) : 0
Valeurs trouvées (Values found) : 0
Dossiers trouvés (Folders found) : 0
Fichiers trouvés (Files found) : 6

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: Modified =>Hijacker.Application^
C:\Windows\Installer\2b76c.msi =>Toolbar.Bing^
[HKCR\CLSID\{154119AB-9DF6-9B60-554B-0FEDBE120A58}] (Adblocker) =>PUP.Adblocker^
[HKCR\CLSID\{1CF514C1-CB99-C7EC-C538-C0257C58A4C9}] (Adblocker) =>PUP.Adblocker^
[HKCR\CLSID\{5CAA6A34-2A52-55ED-E012-BFDF988774BC}] (Adblocker) =>PUP.Adblocker^
[HKCR\CLSID\{A5254D1D-906F-E309-F3DA-5AE92D4E3375}] (Adblocker) =>PUP.Adblocker^
~ Additionnel Scan: 544066 Items scanned in 01mn 36s



---\\ Informations complémentaires sur les modules
~ http://nicolascoolman.fr/r5-internet-explorer-proxy-management-iepm/ =>.Internet Explorer, Proxy Management (R5)
~ http://nicolascoolman.fr/o3-internet-explorer-toolbars/ =>.Internet Explorer Toolbars (O3)
~ http://nicolascoolman.fr/o4-applications-demarrees-par-le-registre/ =>.Applications lancées au démarrage du système (O4)
~ AMI: 3 Legitimates Filtered in 00mn 00s



---\\ Récapitulatif des détections trouvées sur votre station
http://www.nicolascoolman.fr/blog/ =>Hijacker.Application
http://nicolascoolman.fr/adware-plushd =>Adware.PlusHD
http://nicolascoolman.fr/pup-startsearch =>PUP.StartSearch
http://nicolascoolman.fr/adware-downware =>Adware.Downware
http://nicolascoolman.fr/pup-crossrider =>PUP.CrossRider
http://nicolascoolman.fr/hijacker-torntv =>Hijacker.TornTV
http://nicolascoolman.fr/pup-tvwizard =>PUP.TVWizard
http://www.nicolascoolman.fr/blog/ =>PUP.Fuyu
http://www.nicolascoolman.fr/blog/ =>PUP.Istart
http://www.nicolascoolman.fr/blog/ =>PUP.Adblocker
~ MSI: 10 link(s) detected in 00mn 00s



~ 1101 Legitimates filtered by white list
End of the scan (592 lines in 04mn 07s)(0.11)

Publicité


Signaler le contenu de ce document

Publicité