~ Rapport de ZHPDiag v2013.10.18.49 - Nicolas Coolman  (18/10/2013)
~ Lancé par gregory kim (19/10/2013 15:04:13)
~ Adresse du Site Web  http://nicolascoolman.webs.com
~ Forums gratuits d'Assistance à la désinfection : http://nicolascoolman.webs.com/apps/links/
~ Traduit par Nicolas Coolman
~ Etat de la version : 
~ Liste blanche : Activée par le programme
~ Elévation des Privilèges : OK
~ User Account Control (UAC): Deactivate by program


---\\ Navigateurs Internet
MSIE: Internet Explorer v11.0.9600.16384 (Defaut)
MFIE: Mozilla Firefox 24.0
GCIE: Google Chrome v30.0.1599.101

---\\ Informations sur les produits Windows
~ Langage: Français
Windows 8 Home Premium Edition, 64-bit Service Pack 1 (9600)
Windows Server License Manager Script : OK

---\\ Logiciels de protection du système
Bitdefender Total Security 2013 v16.30.0.1843
Windows Defender W8

---\\ Logiciels d'optimisation du système

---\\ Logiciels de partage PeerToPeer

---\\ Surveillance de Logiciels
Adobe Flash Player 11 Plugin
Adobe Reader XI
Java 7 Update 45

---\\ Informations sur le système
~ Processor: Intel64 Family 6 Model 58 Stepping 9, GenuineIntel
~ Operating System: 64 Bits
Boot mode: Normal (Normal boot)
Total RAM: 8084 MB (80% free)
System Restore: Activé (Enable)
System drive C: has 97 GB (43%) free of 223 GB

---\\ Mode de connexion au système
~ Computer Name: GREGORYHUIT
~ User Name: gregory kim
~ All Users Names: UpdatusUser, HomeGroupUser$, gregory kim, Administrateur, 
~ Unselected Option: None
Logged in as Administrator

---\\ Variables d'environnement
~ System Unit : C:\
~ %AppZHP% : C:\Users\gregory kim\AppData\Roaming\ZHP\
~ %AppData% : C:\Users\gregory kim\AppData\Roaming\
~ %Desktop% : C:\Users\gregory kim\Desktop\
~ %Favorites% : C:\Users\gregory kim\Favorites\
~ %LocalAppData% : C:\Users\gregory kim\AppData\Local\
~ %StartMenu% : C:\Users\gregory kim\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\

---\\ Enumération des unités disques
C: Hard drive, Flash drive, Thumb drive (Free 97 Go of 223 Go)
D: CD-ROM drive (Not Inserted)



---\\ Etat du Centre de Sécurité Windows
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
~ Security Center: 37 Legitimates Filtered in 00mn 00s



---\\ Recherche particulière de fichiers génériques
[MD5.C1400519D76A364E974E47BBA62B95B0] - (.Microsoft Corporation - Explorateur Windows.) (.30/09/2013 - 05:14:03.) -- C:\Windows\Explorer.exe [2328328]
[MD5.48CFA7BE561A7BE144C29BB912055016] - (.Microsoft Corporation - Application de démarrage de Windows.) (.22/08/2013 - 10:58:29.) -- C:\Windows\System32\Wininit.exe [144384]
[MD5.F267E9AE8279DF0F4F0246135F2BAF5C] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.30/09/2013 - 05:14:00.) -- C:\Windows\System32\wininet.dll [2332160]
[MD5.7C94FDA3809015B8F2208D2E1C221F17] - (.Microsoft Corporation - Application d’ouverture de session Windows.) (.22/08/2013 - 10:55:08.) -- C:\Windows\System32\Winlogon.exe [564736]
[MD5.2F18065618E39AA2E656EE737B71E791] - (.Microsoft Corporation - Bibliothèque de licences.) (.22/08/2013 - 11:39:40.) -- C:\Windows\System32\sppcomapi.dll [447488]
[MD5.239268BAB58EAE9A3FF4E08334C00451] - (.Microsoft Corporation - Pilote de fonction connexe pour WinSock.) (.22/08/2013 - 14:25:35.) -- C:\Windows\system32\Drivers\AFD.sys [567296]
[MD5.74B14192CF79A72F7536B27CB8814FBD] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.22/08/2013 - 13:43:41.) -- C:\Windows\system32\Drivers\atapi.sys [26464]
[MD5.2FA6510E33F7DEFEC03658B74101A9B9] - (.Microsoft Corporation - CD-ROM File System Driver.) (.22/08/2013 - 12:40:15.) -- C:\Windows\system32\Drivers\Cdfs.sys [88576]
[MD5.C6796EA22B513E3457514D92DCDB1A3D] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.22/08/2013 - 09:46:35.) -- C:\Windows\system32\Drivers\Cdrom.sys [164352]
[MD5.5DB26D7E0216D0BF364A81D3829AD7B9] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.22/08/2013 - 12:38:00.) -- C:\Windows\system32\Drivers\DfsC.sys [134656]
[MD5.03909BDBFF0DCACCABF2B2D4ADEE44DC] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.22/08/2013 - 12:38:38.) -- C:\Windows\system32\Drivers\HDAudBus.sys [78336]
[MD5.84CFC5EFA97D0C965EDE1D56F116A541] - (.Microsoft Corporation - Pilote de port i8042.) (.22/08/2013 - 12:39:15.) -- C:\Windows\system32\Drivers\i8042prt.sys [107520]
[MD5.E23D32BAF152FBE35F18C6A2AB8EF271] - (.Microsoft Corporation - IP Network Address Translator.) (.30/09/2013 - 05:14:00.) -- C:\Windows\system32\Drivers\IpNat.sys [141824]
[MD5.6129EDB793A4255B1E2FB41773AC9D9A] - (.Microsoft Corporation - Minirdr SMB Windows NT.) (.30/09/2013 - 05:13:57.) -- C:\Windows\system32\Drivers\MRxSmb.sys [404992]
[MD5.0217532E19A748F0E5D569307363D5FD] - (.Microsoft Corporation - MBT Transport driver.) (.22/08/2013 - 12:37:02.) -- C:\Windows\system32\Drivers\netBT.sys [282624]
[MD5.4412D565C0278C401575E11072C7DCE3] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.22/08/2013 - 14:25:41.) -- C:\Windows\system32\Drivers\ntfs.sys [2011488]
[MD5.764B1121867B2D9B31C491668AC72B2B] - (.Microsoft Corporation - Pilote de port parallèle.) (.22/08/2013 - 12:40:02.) -- C:\Windows\system32\Drivers\Parport.sys [94208]
[MD5.BBB6272B7F46C4640A8CDB8A70C3450F] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.22/08/2013 - 12:35:51.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [120832]
[MD5.680C1DAE268B6FB67FA21B389A8B79EF] - (.Microsoft Corporation - Redirecteur de périphérique de Microsoft RDP.) (.30/09/2013 - 04:59:53.) -- C:\Windows\system32\Drivers\rdpdr.sys [195584]
[MD5.FFF28F9F6823EB1756C60F1649560BBF] - (.Microsoft Corporation - TDI Translation Driver.) (.22/08/2013 - 14:25:35.) -- C:\Windows\system32\Drivers\tdx.sys [107520]
[MD5.9F9CE33B50611A1C61A46B8911E0B30B] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.22/08/2013 - 13:39:15.) -- C:\Windows\system32\Drivers\volsnap.sys [312160]
~ Generic Processes:  Scanned in 00mn 00s



---\\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 2/14975
~ Mes musiques (My Musics) : 4/816
~ Mes Videos (My Videos) : 2/20
~ Mes Favoris (My Favorites) : 1/3
~ Mes Documents (My Documents) : 2/4625
~ Mon Bureau (My Desktop) : 2/140
~ Menu demarrer (Programs) : 1/32
~ Hidden Files:  Scanned in 00mn 02s



---\\ Processus lancés
[MD5.218D7FF8EC006CAAAEBE590405851AF9] - (.Microsoft Corporation - Hôte Microsoft WWA.) -- C:\WINDOWS\syswow64\wwahost.exe   [522240] [PID.4692]
[MD5.9551BEB6E68F074DA7BEC629CDBC3CEE] - (.AuthenTec Inc. - BioMonitor.) -- C:\Program Files\AuthenTec TrueSuite\BioMonitor.exe   [215400] [PID.4792]
[MD5.B2B15FF9BBD553D5A6397931955E51CC] - (.Pas de propriétaire - IEWebSiteLogon.) -- C:\Program Files\AuthenTec TrueSuite\x86\IEWebSiteLogon.exe   [4069224] [PID.4832]
[MD5.CAA0C16ADCCE6142A43AD83BFA20B38B] - (.Motorola Mobility LLC - MotoHelperAgent.) -- C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperAgent.exe   [698680] [PID.5068]
[MD5.1775BDBEF28FD1B0F0AC43F10F483E08] - (.NVIDIA Corporation - NVIDIA NvTmru Application.) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe   [1028896] [PID.5968]
[MD5.E02A512F30FC2A02A9CADEEC375FC969] - (.Creative Technology Ltd - THXAudio.) -- C:\Program Files (x86)\Creative\THX TruStudio Pro\THXAudioCP\THXAudio.exe   [1517056] [PID.6076]
[MD5.5B6E8E09BE6401A7E022F52FDFCB2FF8] - (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe   [254336] [PID.5700]
[MD5.3DEBC4F06BA637D7EE7BB1A69AC79052] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe   [8102912] [PID.3564]
[MD5.FF2CE3EC0F87A69B2F61EF9D89514800] - (.Intel Corporation - IAStorIcon.) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe   [277504] [PID.2172]
~ Processes Running:  Scanned in 00mn 00s



---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
C:\Users\gregory kim\AppData\Local\Google\Chrome\User Data\Default\Preferences
G2 - GCE: Preference [User Data\Default] [glacllipodbjfijgkcdifnlhmoddlkon] Translator by Dictionary.com v.1.6 (Désactivé)
G2 - GCE: Preference [User Data\Default] [jhoogcgekgpljafaadaohobjcdccpick] Pro Translate v.2.1 (Désactivé)
G2 - GCE: Preference [User Data\Default] [mjcnhgdodmhnpmndnljbmafpgomahfal] Antidote v.8.20.24 (Activé)
G2 - GCE: Preference [User Data\Default] [oenfcnpagjelkajcmnnfnnifodjakaph] KOREA Theme v.2 (Désactivé)
~ Google Browser: 20 Legitimates Filtered in 00mn 04s



---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions  (P2,M0,M1,M2,M3)
M2 - MFEP: prefs.js [gregory kim - 7tzemo07.default\antidote7_win_firefox_103@druide.com] [] Module d'Antidote v8.16.25 (..)
~ Firefox Browser: 4 Legitimates Filtered in 00mn 00s



---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = <local>;192.168.*.*
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Proxy management:  Scanned in 00mn 00s



---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
~ Keys:  Scanned in 00mn 00s



---\\ Hosts file redirection (O1)
~ Le fichier hosts est sain (The hosts file is clean).
~ Hosts File:  Scanned in 00mn 00s
~ Nombre de lignes (Lines number): 21



---\\ Autres liens utilisateurs (O4)
O4 - GS\Desktop [Public]: GeForce Experience.lnk . (.NVIDIA - NVIDIA GeForce Experience.)  -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\GFExperience.exe 
O4 - GS\Desktop [Public]: Google Chrome.lnk . (.Google Inc. - Google Chrome.)  -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe 
O4 - GS\Desktop [Public]: OpenOffice 4.0.1.lnk . (.Apache Software Foundation - OpenOffice 4.0.1.)  -- C:\Program Files (x86)\OpenOffice 4\program\soffice.exe 
O4 - GS\Desktop [Public]: Service antivol Intel.lnk . (...)  -- C:\Program Files (x86)\McAfeeAntiTheft\2.3.199.2\mcuicnt.exe (.not file.)
O4 - GS\Program [Public]: Desktop.lnk - Clé orpheline
O4 - GS\Program [Public]: HD VDeck.lnk . (.VIA - VIA HD Audio CPL.)  -- C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe 
O4 - GS\Program [Public]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.)  -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe 
O4 - GS\QuickLaunch [gregory kim]: Bandizip.lnk . (.Bandisoft.com - Bandizip.)  -- C:\Users\gregory kim\AppData\Local\Bandizip\Bandizip64.exe 
O4 - GS\QuickLaunch [gregory kim]: Google Chrome.lnk . (.Google Inc. - Google Chrome.)  -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe 
O4 - GS\QuickLaunch [gregory kim]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe 
O4 - GS\TaskBar [gregory kim]: Antidote.lnk . (.Druide informatique inc. - Antidote.)  -- C:\Program Files (x86)\Druide\Antidote 8\Programmes64\Antidote.exe 
O4 - GS\TaskBar [gregory kim]: CrystalDiskMark (64bit).lnk . (.Crystal Dew World - CrystalDiskMark.)  -- C:\Program Files\CrystalDiskMark\DiskMarkX64.exe 
O4 - GS\TaskBar [gregory kim]: Google Chrome.lnk . (.Google Inc. - Google Chrome.)  -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe 
O4 - GS\TaskBar [gregory kim]: Intel SSD Toolbox.lnk . (.Intel - Intel SSD Toolbox.)  -- C:\Program Files (x86)\Intel\Intel(R) SSD Toolbox\Intel SSD Toolbox.exe 
O4 - GS\TaskBar [gregory kim]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe 
O4 - GS\TaskBar [gregory kim]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.)  -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe 
O4 - GS\Program [gregory kim]: Corbeille (2).lnk - Clé orpheline
O4 - GS\Program [gregory kim]: Corbeille.lnk - Clé orpheline
O4 - GS\Program [gregory kim]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe 
~ Global Startup: 57 Legitimates Filtered in 00mn 00s



---\\ Applications lancées au démarrage du sytème (O4)
O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\WINDOWS\system32\igfxtray.exe 
O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\WINDOWS\system32\hkcmd.exe 
O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\WINDOWS\system32\igfxpers.exe 
O4 - HKLM\..\Run: [ETDCtrl] C:\Program Files (x86)\Elantech\ETDCtrl.exe (.not file.) 
O4 - HKLM\..\Run: [KeepSafe] . (...) -- C:\Program Files\AuthenTec TrueSuite\KeepSafe\fvsvr.exe 
O4 - HKLM\..\Run: [THXCfg64] . (.Creative Technology Ltd. - Pas de description.) -- C:\Windows\system32\THXCfg64.dll 
O4 - HKLM\..\Run: [BTMTrayAgent] . (.Motorola Solutions, Inc. - Bluetooth Shell Extension.) -- C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll 
O4 - HKLM\..\Run: [AgentAntidote32] . (.Druide informatique inc. - AgentAntidote.) -- C:\Program Files (x86)\Druide\Antidote 8\Programmes32\AgentAntidote.exe 
O4 - HKLM\..\Run: [AgentAntidote64] . (.Druide informatique inc. - AgentAntidote.) -- C:\Program Files (x86)\Druide\Antidote 8\Programmes64\AgentAntidote.exe 
O4 - HKLM\..\Run: [Bdagent] . (.Bitdefender - Bitdefender Agent.) -- C:\Program Files\Bitdefender\Bitdefender 2013\bdagent.exe 
O4 - HKLM\..\Run: [IntelMyWiFiDashboard] . (.Intel® Corporation - Intel® My WiFi Dashboard Server.) -- C:\Program Files\Intel\CCDashboard\bin\CCDashServer.exe 
O4 - HKLM\..\Run: [Nvtmru] . (.NVIDIA Corporation - NVIDIA NvTmru Application.) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe 
O4 - HKCU\..\Run: [KiesPreload] . (.Samsung - Kies.) -- C:\Program Files (x86)\Samsung\Kies\Kies.exe 
O4 - HKCU\..\Run: [Akamai NetSession Interface] . (.Akamai Technologies, Inc. - Akamai NetSession Client.) -- C:\Users\gregory kim\AppData\Local\Akamai\netsession_win.exe 
O4 - HKCU\..\Run: [DAEMON Tools Lite] . (.Disc Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe  =>.DT Soft Ltd
O4 - HKCU\..\Run: [Facebook Update] . (.Facebook Inc. - Programme d'installation de Facebook.) -- C:\Users\gregory kim\AppData\Local\Facebook\Update\FacebookUpdate.exe 
O4 - HKLM\..\Wow6432Node\Run: [HDAudDeck] . (.VIA - VIA HD Audio CPL.) -- C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe 
O4 - HKLM\..\Wow6432Node\Run: [THX Audio Control Panel] . (.Creative Technology Ltd - THXAudio.) -- C:\Program Files (x86)\Creative\THX TruStudio Pro\THXAudioCP\THXAudio.exe 
O4 - HKLM\..\Wow6432Node\Run: [UpdReg] . (.Creative Technology Ltd. - Creative UpdReg.) -- C:\Windows\UpdReg.exe 
O4 - HKLM\..\Wow6432Node\Run: [IAStorIcon] . (.Intel Corporation - Delayed launcher.) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe 
O4 - HKLM\..\Wow6432Node\Run: [mcpltui_exe] . (.McAfee, Inc. - McAfee.) -- C:\Program Files\Common Files\McAfee\Platform\mcuicnt.exe 
O4 - HKLM\..\Wow6432Node\Run: [MetroTileShortcut] C:\Program Files\McAfeeAntiTheft\2.2.279.5\McATUIHost.exe (.not file.) 
O4 - HKLM\..\Wow6432Node\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe  =>.Adobe Systems Incorporated
O4 - HKLM\..\Wow6432Node\Run: [KiesTrayAgent] . (.Samsung Electronics Co., Ltd. - Kies TrayAgent Application.) -- C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe  =>.Samsung Electronics Co
O4 - HKLM\..\Wow6432Node\Run: [Aeria Ignite] . (.Aeria Games & Entertainment - Aeria Ignite.) -- C:\Program Files (x86)\Aeria Games\Ignite\aeriaignite.exe 
O4 - HKLM\..\Wow6432Node\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe 
O4 - HKLM\..\Wow6432Node\Run: [BingDesktop] . (.Microsoft Corp. - Bing Desktop Application.) -- C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktop.exe 
O4 - HKLM\..\Wow6432Node\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe  =>.Oracle Corporation
O4 - HKLM\..\Wow6432Node\Run: [IJNetworkScannerSelectorEX] . (.CANON INC. - Canon IJ Network Scanner Selector EX.) -- C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe 
O4 - HKLM\..\Wow6432Node\Run: [CanonQuickMenu] . (.CANON INC. - Canon Quick Menu.) -- C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.exe 
O4 - HKUS\S-1-5-21-763186002-3454962947-2536994500-1001\..\Run: [KiesPreload] . (.Samsung - Kies.) -- C:\Program Files (x86)\Samsung\Kies\Kies.exe 
O4 - HKUS\S-1-5-21-763186002-3454962947-2536994500-1001\..\Run: [Akamai NetSession Interface] . (.Akamai Technologies, Inc. - Akamai NetSession Client.) -- C:\Users\gregory kim\AppData\Local\Akamai\netsession_win.exe 
O4 - HKUS\S-1-5-21-763186002-3454962947-2536994500-1001\..\Run: [DAEMON Tools Lite] . (.Disc Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe  =>.DT Soft Ltd
O4 - HKUS\S-1-5-21-763186002-3454962947-2536994500-1001\..\Run: [Facebook Update] . (.Facebook Inc. - Programme d'installation de Facebook.) -- C:\Users\gregory kim\AppData\Local\Facebook\Update\FacebookUpdate.exe 
~ Application:  Scanned in 00mn 00s



---\\ Site dans la Zone de confiance d'Internet Explorer (O15)
O15 - Trusted Zone: [HKCU\...\Domains] http.aeriagames.com
~ IE Zone Confiance:  Scanned in 00mn 00s



---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{0AF91A90-C827-4C10-9C1B-F42CDFEB83C6}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{53D53267-011E-43DF-9F7C-78A8C0978D3D}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{0AF91A90-C827-4C10-9C1B-F42CDFEB83C6}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{53D53267-011E-43DF-9F7C-78A8C0978D3D}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
~ Domain:  Scanned in 00mn 00s



---\\ Protocole additionnel (O18)
O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll  =>.Microsoft Corporation
O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll  =>.Microsoft Corporation
~ Protocole Additionnel:  Scanned in 00mn 00s



---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\Windows\System32\igfxdev.dll
~ Winlogon:  Scanned in 00mn 00s



---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - AppInit_DLLs: . (.NVIDIA Corporation - NVIDIA shim initialization dll, Version 327.) - C:\Windows\system32\nvinitx.dll
~ AppInit DLL:  Scanned in 00mn 00s



---\\ Logiciels installés (O42)
O42 - Logiciel: Finger Printer - (...) [HKLM][64Bits] -- InstallShield_{793C03D1-884D-4C11-A7F6-07F3FDF10066}
O42 - Logiciel: Finger Printer - (...) [HKLM][64Bits] -- {793C03D1-884D-4C11-A7F6-07F3FDF10066}
~ Logic: 118 Legitimates Filtered in 00mn 00s



---\\ HKCU & HKLM Software Keys
[HKCU\Software\Kakao]
[HKLM\Software\<error-interface-not-inited>]
[HKLM\Software\FileVault]
[HKLM\Software\LapLink]
[HKLM\Software\Wow6432Node\Kakao]
~ Key Software: 237 Legitimates Filtered in 00mn 00s



---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 24/07/2013 - 19:01:54 - [239,611] ----D C:\Program Files (x86)\FingerPrinter
O43 - CFD: 04/10/2013 - 17:12:42 - [0] ----D C:\Program Files (x86)\Kakao
O43 - CFD: 22/08/2013 - 17:36:30 - [0] ----D C:\Program Files (x86)\WindowsPowerShell
O43 - CFD: 24/07/2013 - 23:17:23 - [23,535] -SHAD C:\ProgramData\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}
O43 - CFD: 30/07/2013 - 02:09:03 - [54,559] ---AD C:\Users\gregory kim\AppData\Roaming\OpenCandy =>Adware.OpenCandy
O43 - CFD: 08/08/2013 - 13:52:37 - [0,002] ---AD C:\Users\gregory kim\AppData\Local\iLivid =>Adware.Bandoo
O43 - CFD: 12/09/2013 - 21:09:53 - [1,399] ---AD C:\Users\gregory kim\AppData\Local\Kakao
~ Program Folder: 204 Legitimates Filtered in 00mn 05s



---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.7AFEE718D27AF435CDFDF248F9AF4410] - 09/10/2013 - 14:14:34 ---A- . (...) -- C:\Windows\DPINST.LOG   [56434]
O44 - LFC:[MD5.192CAAB6C4A9149BBAF06B1FBBC5EAA4] - 09/10/2013 - 14:51:41 ---A- . (...) -- C:\Windows\SysNative\results.xml   [16268]
O44 - LFC:[MD5.192CAAB6C4A9149BBAF06B1FBBC5EAA4] - 09/10/2013 - 14:51:41 ---A- . (...) -- C:\Windows\System32\results.xml   [16268]
O44 - LFC:[MD5.B7E4D71749AC408A06052E9B2BCEDE44] - 09/10/2013 - 17:12:14 ---A- . (...) -- C:\Windows\SysNative\checkdnsid.xml   [554]
O44 - LFC:[MD5.B7E4D71749AC408A06052E9B2BCEDE44] - 09/10/2013 - 17:12:14 ---A- . (...) -- C:\Windows\System32\checkdnsid.xml   [554]
O44 - LFC:[MD5.EC3721AC9B90813D0ED64E1FCA5A2FE2] - 17/10/2013 - 19:07:28 ---A- . (...) -- C:\Service antivol Intel.lnk   [2051]
O44 - LFC:[MD5.CBF5F8FD97D70FB6D0E6BE1B76B77F79] - 18/10/2013 - 07:18:01 ---A- . (...) -- C:\Windows\WindowsUpdate (1).log   [1105702]
O44 - LFC:[MD5.B1A827DA6167F12362D8D9C12546F927] - 18/10/2013 - 07:22:45 ---A- . (...) -- C:\Windows\SysNative\nvcoproc.bin   [3361114]
O44 - LFC:[MD5.B1A827DA6167F12362D8D9C12546F927] - 18/10/2013 - 07:22:45 ---A- . (...) -- C:\Windows\System32\nvcoproc.bin   [3361114]
O44 - LFC:[MD5.70A17FB66AD2852E629281F130CFDCBA] - 18/10/2013 - 07:27:26 ---A- . (...) -- C:\Windows\DtcInstall.log   [4893]
O44 - LFC:[MD5.F038F9022AED1AB59659B29BFEAA9B0A] - 18/10/2013 - 07:34:42 ---A- . (...) -- C:\Windows\SysNative\emptyregdb.dat   [23108]
O44 - LFC:[MD5.F038F9022AED1AB59659B29BFEAA9B0A] - 18/10/2013 - 07:34:42 ---A- . (...) -- C:\Windows\System32\emptyregdb.dat   [23108]
O44 - LFC:[MD5.8677796E88C06D88351AE1D5E8E6CB85] - 18/10/2013 - 07:34:52 ---A- . (...) -- C:\Windows\comsetup.log   [6605]
O44 - LFC:[MD5.AC4A3360EF1C0097D633E6F2F6634D76] - 19/10/2013 - 14:01:56 ---A- . (...) -- C:\bdlog.txt   [74650]
~ Files: 110 Legitimates Filtered in 00mn 03s



---\\ Enumération des clés de registre PoliciesSystem (MWPS) (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
~ MWPS: 17 Legitimates Filtered in 00mn 00s



---\\ Enumération des clés de registre PoliciesExplorer (MWPE) (O56)
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1
~ MWPE Keys: 3 Legitimates Filtered in 00mn 00s



---\\ Liste des pilotes du système (SDL) (O58)
O58 - SDL:[MD5.C1ABB0F7E3BEA48A0417BDF6FF14AB21] - 13/08/2013 - 00:25:46 ---A- . (.Windows (R) Win 7 DDK provider - BCM Function 2  Device Driver.) -- C:\Windows\System32\Drivers\bcmfn2.sys   [17624]
~ Drivers: 17 Legitimates Filtered in 00mn 00s



---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61)
O61 - LFC: 16/10/2013 - 15:05:29 ---A- . (...) -- C:\Users\gregory kim\Downloads\Leica X2 - Caracteristiques techniques_fr.pdf   [140488]
O61 - LFC: 16/10/2013 - 15:05:30 ---A- . (...) -- C:\Users\gregory kim\Downloads\video01.MOV   [36241408]
O61 - LFC: 16/10/2013 - 15:05:30 ---A- . (...) -- C:\Users\gregory kim\Downloads\video01.MTS   [40599552]
O61 - LFC: 16/10/2013 - 15:05:30 ---A- . (...) -- C:\Users\gregory kim\Downloads\video02.MOV   [37617664]
O61 - LFC: 16/10/2013 - 15:05:30 ---A- . (...) -- C:\Users\gregory kim\Downloads\video02.MTS   [40796160]
O61 - LFC: 16/10/2013 - 15:05:46 -SHA- . (...) -- C:\Users\gregory kim\Videos\Thumbs.db   [480768]
O61 - LFC: 17/10/2013 - 15:05:26 ---A- . (...) -- C:\Users\gregory kim\AppData\Roaming\ZHP\ZHPDiag.txt   [42445]  =>.Nicolas Coolman
O61 - LFC: 17/10/2013 - 15:05:26 ---A- . (...) -- C:\Users\gregory kim\Documents\cvanpe.odt   [25269]
O61 - LFC: 17/10/2013 - 15:05:26 -SHA- . (...) -- C:\Users\gregory kim\Documents\Thumbs.db   [231936]
O61 - LFC: 18/10/2013 - 15:04:46 ---A- . (...) -- C:\Users\gregory kim\AppData\Local\Google\Chrome\User Data\First Run   [0]
O61 - LFC: 18/10/2013 - 15:04:46 ---A- . (...) -- C:\Users\gregory kim\AppData\Local\Google\Chrome\User Data\fr-FR-3-0.bdic   [1074744]
O61 - LFC: 18/10/2013 - 15:05:17 ---A- . (...) -- C:\Users\gregory kim\AppData\Roaming\Microsoft\MMC\eventvwr   [140237]
O61 - LFC: 18/10/2013 - 15:05:26 ---A- . (...) -- C:\Users\gregory kim\AppData\Temp\winupdates.xml   [1575779]
O61 - LFC: 18/10/2013 - 15:05:26 ---A- . (...) -- C:\Users\gregory kim\Downloads\1382098106_1_02.xml   [4408883]
O61 - LFC: 18/10/2013 - 15:05:27 -SHA- . (...) -- C:\Users\gregory kim\Downloads\formations\Thumbs.db   [28160]
O61 - LFC: 18/10/2013 - 15:05:30 ---A- . (...) -- C:\Users\gregory kim\Links\Desktop.lnk   [496]
O61 - LFC: 18/10/2013 - 15:05:30 ---A- . (...) -- C:\Users\gregory kim\Links\Downloads.lnk   [957]
O61 - LFC: 18/10/2013 - 15:05:30 ---A- . (...) -- C:\Users\gregory kim\Links\RecentPlaces.lnk   [383]
O61 - LFC: 18/10/2013 - 15:05:30 -SHA- . (...) -- C:\Users\gregory kim\Downloads\logement\Thumbs.db   [388608]
O61 - LFC: 18/10/2013 - 15:05:46 ---A- . (...) -- C:\Users\gregory kim\Searches\winrt--{S-1-5-21-763186002-3454962947-2536994500-1001}-.searchconnector-ms   [855]
O61 - LFC: 19/10/2013 - 15:04:44 ---A- . (...) -- C:\Users\gregory kim\AppData\Local\Google\Chrome\User Data\Certificate Revocation Lists   [257541]
O61 - LFC: 19/10/2013 - 15:04:44 ---A- . (...) -- C:\Users\gregory kim\AppData\Local\Google\Chrome\User Data\chrome_shutdown_ms.txt   [4]
O61 - LFC: 19/10/2013 - 15:04:46 ---A- . (...) -- C:\Users\gregory kim\AppData\Local\Google\Chrome\User Data\Local State   [44359]
O61 - LFC: 19/10/2013 - 15:04:47 ---A- . (...) -- C:\Users\gregory kim\AppData\Local\Intel_Corporation\GfxUIEx.exe_Url_pid13cxzvy1ivbtinqdinsz1omfrwsew\8.15.10.3316\user.config   [1913]
O61 - LFC: 19/10/2013 - 15:05:26 ---A- . (...) -- C:\Users\gregory kim\AppData\Roaming\ZHP\Log.txt   [53537]  =>.Nicolas Coolman
O61 - LFC: 19/10/2013 - 15:05:26 ---A- . (...) -- C:\Users\gregory kim\AppData\Roaming\ZHP\TestsZHPDiag.txt   [3008]  =>.Nicolas Coolman
O61 - LFC: 19/10/2013 - 15:05:26 ---A- . (...) -- C:\Users\gregory kim\Downloads\CUM_W8.zip   [1888657]
O61 - LFC: 19/10/2013 - 15:05:30 -SHA- . (...) -- C:\Users\gregory kim\Downloads\Thumbs.db   [1563648]
~ 712 Fichiers temporaires (Temporary files)
~ Files: 5329 Legitimates Filtered in 01mn 04s



---\\ Liste des outils de désinfection (LATC) (O63)
O63 - Logiciel: ZHPDiag 2013 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1  =>.Nicolas Coolman
~ ADS:  Scanned in 00mn 00s



---\\ Menu de démarrage Internet (SMI) (O68)
O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
~ Keys:  Scanned in 00mn 00s



---\\ Recherche d'infection sur les navigateurs internet (SBI) (O69)
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (Bing) - http://www.bing.com
~ Keys:  Scanned in 00mn 00s



---\\ Recherche particulière à la racine du système (SPRF) (O84)
[MD5.6B4D102D0BAC19FA0C5AEFCE160F5340] [SPRF][25/07/2013] (...) -- C:\ProgramData\1374759322.bdinstall.bin   [677459]
~ Files: 3 Legitimates Filtered in 00mn 00s



---\\ Enumère les codes produits des logiciels (PUC) (O90)
O90 - PUC: "1D30C397D48811C47A6F703FDF1F0066" . (.Finger Printer.) -- C:\Windows\Installer\{793C03D1-884D-4C11-A7F6-07F3FDF10066}\ARPPRODUCTICON.exe
~ Update Products: 48 Legitimates Filtered in 00mn 00s



---\\ Enumère les données de la clé NameSpace (MNS) (O92)
O92 - MNS: @C:\Program Files\AuthenTec TrueSuite\KeepSafe\fvns.dll,-4263 - {784D7183-152D-4236-96B6-552E8448D9C0}
O92 - MNS:  - {A0953C92-50DC-43bf-BE83-3742FED03C9C}
O92 - MNS:  - {A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}
O92 - MNS:  - {B4BFCC3A-DB2C-424C-B029-7FE99A87C641}
~ MNS: 7 Legitimates Filtered in 00mn 00s



---\\ Etat général des services not Microsoft (EGS) (SR=Running, SS=Stopped)
SR - | Auto 11/05/2013 65640 |  (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
SR - | Demand 08/10/2013 257416 |  (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
SR - | Auto 07/09/2013 55624 |  (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
SR - | Disabled 17/09/2013 69392 |  (BdDesktopParental) . (.Bitdefender.) - C:\Program Files\Bitdefender\Bitdefender 2013\bdparentalservice.exe
SR - | Auto 18/03/2013 1124728 |  (Bluetooth Device Monitor) . (.Motorola Solutions, Inc..) - C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
SR - | Auto 18/03/2013 1161592 |  (Bluetooth OBEX Service) . (.Motorola Solutions, Inc..) - C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
SR - | Demand 03/10/2013 279000 |  (cphs) . (.Intel Corporation.) - C:\Windows\SysWow64\IntelCpHeciSvc.exe
SR - | Demand 24/07/2013 1045256 |  (FLEXnet Licensing Service) . (.Acresso Software Inc..) - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
SR - | Auto 24/08/2012 2125160 |  (FPLService) . (.AuthenTec, Inc.) - C:\Program Files\AuthenTec TrueSuite\TrueSuiteService.exe
SR - | Demand 17/02/2013 137336 |  (Futuremark SystemInfo Service) . (.Futuremark Corporation.) - C:\Program Files (x86)\Futuremark\Futuremark SystemInfo\FMSISvc.exe
SR - | Auto 24/07/2013 116648 |  (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
SR - | Demand 24/07/2013 116648 |  (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
SR - | Demand 09/05/2011 136120 |  (gusvc) . (.Google.) - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
SR - | Auto 09/07/2012 7168 |  (IAStorDataMgrSvc) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
SR - | Demand 24/04/2012 169752 |  (ICCS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
SR - | Auto 20/04/2012 635104 |  (Intel(R) Capability Licensing Service Interface) . (.Intel(R) Corporation.) - C:\Program Files\Intel\iCLS Client\HeciServer.exe
SR - | Auto 24/07/2013 128896 |  (Intel(R) ME Service) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
SR - | Auto 15/04/2013 161736 |  (Intel(R) Wireless Bluetooth(R) 4.0 Radio Management) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe
SR - | Auto 24/07/2013 165760 |  (jhi_service) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
SR - | Auto 24/07/2013 276864 |  (LMS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
SR - | Auto 30/07/2013 328928 |  (McATScheduler) . (.McAfee, Inc..) - C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe
SR - | Auto 30/07/2013 328928 |  (mcpltsvc) . (.McAfee, Inc..) - C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe
SR - | Auto 30/07/2013 328928 |  (McSchedulerSvc) . (.McAfee, Inc..) - C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe
SR - | Demand 13/02/2012 205128 |  (MfeFfCoreService) . (.McAfee, Inc..) - C:\Program Files\McAfee\Endpoint Encryption for Files and Folders\MfeFfCoreService.exe
SR - | Auto 31/07/2013 137528 |  (Motorola Device Manager) . (.Motorola Mobility LLC.) - C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe
SR - | Demand 06/10/2013 118680 |  (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
SR - | Auto 27/08/2013 14997280 |  (NvStreamSvc) . (.NVIDIA Corporation.) - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
SR - | Auto 12/09/2013 920864 |  (nvsvc) . (.NVIDIA Corporation.) - C:\WINDOWS\system32\nvvsvc.exe
SR - | Auto 27/08/2013 2155296 |  (nvUpdatusService) . (.NVIDIA Corporation.) - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
SR - | Auto 02/09/2011 65657 |  (PST Service) . (.Motorola.) - C:\Program Files (x86)\Motorola\MotForwardDaemon\ForwardDaemon.exe
SR - | Auto 25/06/2012 95184 |  (SafeBox) . (.Bitdefender.) - C:\Program Files\Bitdefender\Bitdefender SafeBox\safeboxservice.exe
SR - | Auto 05/09/2013 171680 |  (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe
SR - | Auto 01/10/2013 5087584 |  (TeamViewer8) . (.TeamViewer GmbH.) - C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
SR - | Demand 16/07/2012 401256 |  (TrueService) . (.AuthenTec, Inc..) - C:\Program Files\Common Files\AuthenTec\TrueService.exe
SR - | Auto 24/07/2013 364416 |  (UNS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
SR - | Auto 17/09/2013 67320 |  (UPDATESRV) . (.Bitdefender.) - C:\Program Files\Bitdefender\Bitdefender 2013\updatesrv.exe
SR - | Auto 15/08/2012 27792 |  (VIAKaraokeService) . (.VIA Technologies, Inc..) - C:\Windows\System32\viakaraokesrv.exe
SR - | Auto 03/10/2013 1645256 |  (VSSERV) . (.Bitdefender.) - C:\Program Files\Bitdefender\Bitdefender 2013\vsserv.exe
SR - | Demand 10/07/1658 0 |  (WdNisSvc) . (...) - C:\Program Files (x86)\Windows Defender\NisSrv.exe
SR - | Auto 10/07/1658 0 |  (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe  =>.Microsoft Corporation
SR - | Demand 22/08/2013 37768 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
~ Services:  Scanned in 00mn 05s



---\\ Recherche d'infection sur le Master Boot Record (MBR)(O80)
Run by gregory kim at 19/10/2013 15:06:00
~ OS 64 not supported by MBR tool
~ MBR: 0 Legitimates Filtered in 00mn 00s



---\\ Recherche d'infection sur le Master Boot Record (MBRCheck)(O80)
Written by ad13, http://ad13.geekstog
Run by gregory kim at 19/10/2013 15:06:03

********* Dump file Name *********
C:\PhysicalDisk0_MBR.bin
~ MBR:  Scanned in 00mn 02s



---\\ Scan Additionnel (O88)
Database Version : 12949 - (18/10/2013)
Clés trouvées (Keys found) : 0
Valeurs trouvées (Values found) : 0
Dossiers trouvés  (Folders found) : 2
Fichiers trouvés  (Files found) : 0

C:\Users\gregory kim\AppData\Roaming\OpenCandy   =>Adware.OpenCandy^
C:\Users\gregory kim\AppData\Local\iLivid   =>Adware.Bandoo^
~ Additionnel Scan: 233835 Items scanned in 00mn 12s



---\\ Récapitulatif des détections trouvées sur votre station
~ http://nicolascoolman.webs.com/apps/blog/show/26770694-adware-opencandy   =>Adware.OpenCandy
~ http://nicolascoolman.webs.com/apps/blog/show/26611092-adware-bandoo  =>Adware.Bandoo
~ MSI: 2 link(s) detected in 00mn 12s



~ 6440 Legitimates filtered by white list
End of the scan (491 lines in 02mn 02s)(0)