~ Rapport de ZHPDiag v2014.12.10.172 - Nicolas Coolman (10/12/2014) ~ Lancé par Propriétaire (23/12/2014 19:06:52) ~ Facebook : https://www.facebook.com/nicolascoolman1 ~ Adresse du Forum http://forum.nicolascoolman.fr ~ Traduit par Nicolas Coolman ~ Etat de la version : Nouvelle version disponible ~ Liste blanche : Désactivée par l'utilisateur ~ Elévation des Privilèges : OK ~ User Account Control (UAC): Activate by user ---\\ Navigateurs Internet MSIE: Internet Explorer v9.0.8112.16421 GCIE: Google Chrome v39.0.2171.95 (Defaut) ---\\ Informations sur les produits Windows ~ Langage: Français Windows Vista (TM) Home Premium, 32-bit Service Pack 2 (Build 6002) Windows Server License Manager Script : OK ~ Windows Operating System - Vista, OEM_SLP channel System Locked Preinstallation (OEM_SLP) : OK Windows ID Activation : OK ~ Windows Partial Key : WQD8Q Windows License : OK Windows Automatic Updates : OK ---\\ Logiciels de protection du système Malwarebytes Anti-Malware version 2.0.4.1028 Microsoft Security Client FR-FR Language Pack v2.1.1116.0 ---\\ Logiciels d'optimisation du système CCleaner ---\\ Logiciels de partage PeerToPeer ---\\ Surveillance de Logiciels Adobe Flash Player 10 Plugin Adobe Reader 8.1.2 - Français ---\\ Informations sur le système ~ Processor: x86 Family 6 Model 15 Stepping 13, GenuineIntel ~ Operating System: 32 Bits Boot mode: Normal (Normal boot) Total RAM: 3068 MB (46% free) System Restore: Activé (Enable) System drive C: has 34 GB (24%) free of 140 GB ---\\ Mode de connexion au système ~ Computer Name: PC-DE-PROPRIÉTA ~ User Name: Propriétaire ~ All Users Names: Propriétaire, ASPNET, Administrateur, ~ Unselected Option: None Logged in as Administrator ---\\ Variables d'environnement ~ System Unit : C:\ ~ %AppZHP% : C:\Users\Propriétaire\AppData\Roaming\ZHP\ ~ %AppData% : C:\Users\Propriétaire\AppData\Roaming\ ~ %Desktop% : C:\Users\Propriétaire\Desktop\ ~ %Favorites% : C:\Users\Propriétaire\Favorites\ ~ %LocalAppData% : C:\Users\Propriétaire\AppData\Local\ ~ %StartMenu% : C:\Users\Propriétaire\AppData\Roaming\Microsoft\Windows\Start Menu\ ~ %Windir% : C:\Windows\ ~ %System% : C:\Windows\System32\ ---\\ Enumération des unités disques C: Hard drive, Flash drive, Thumb drive (Free 34 Go of 140 Go) D: Hard drive, Flash drive, Thumb drive (Free 2 Go of 9 Go) ---\\ Etat du Centre de Sécurité Windows [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoClose: OK [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] DisableTaskMgr: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK [HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: OK [HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK ~ Security Center: 50 Scanned in 00mn 00s ---\\ Recherche particulière de fichiers génériques [MD5.D07D4C3038F3578FFCE1C0237F2A1253] - (.Microsoft Corporation - Explorateur Windows.) (.11/04/2009 - 07:27:36.) -- C:\Windows\Explorer.exe [2926592] [MD5.101BA3EA053480BB5D957EF37C06B5ED] - (.Microsoft Corporation - Application de démarrage de Windows.) (.21/01/2008 - 03:23:42.) -- C:\Windows\System32\Wininit.exe [96768] [MD5.AA680F0065A505118BDD9181BCE7C83D] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.24/11/2014 - 21:35:25.) -- C:\Windows\System32\wininet.dll [1129472] [MD5.898E7C06A350D4A1A64A9EA264D55452] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.11/04/2009 - 07:28:13.) -- C:\Windows\System32\Winlogon.exe [314368] [MD5.F5272A105F59A7B3B345D9D6D87DA7AD] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.30/05/2014 - 07:53:22.) -- C:\Windows\system32\Drivers\AFD.sys [273408] [MD5.1F05B78AB91C9075565A9D8A4B880BC4] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.11/04/2009 - 07:32:26.) -- C:\Windows\system32\Drivers\atapi.sys [19944] [MD5.7ADD03E75BEB9E6DD102C3081D29840A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.21/01/2008 - 03:23:51.) -- C:\Windows\system32\Drivers\Cdfs.sys [70144] [MD5.6B4BFFB9BECD728097024276430DB314] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.11/04/2009 - 05:39:17.) -- C:\Windows\system32\Drivers\Cdrom.sys [67072] [MD5.622C41A07CA7E6DD91770F50D532CB6C] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.14/04/2011 - 15:59:03.) -- C:\Windows\system32\Drivers\DfsC.sys [75264] [MD5.062452B7FFD68C8C042A6261FE8DFF4A] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.11/04/2009 - 05:42:42.) -- C:\Windows\system32\Drivers\HDAudBus.sys [561152] [MD5.22D56C8184586B7A1F6FA60BE5F5A2BD] - (.Microsoft Corporation - Pilote de port i8042.) (.21/01/2008 - 03:23:20.) -- C:\Windows\system32\Drivers\i8042prt.sys [54784] [MD5.8793643A67B42CEC66490B2A0CF92D68] - (.Microsoft Corporation - IP Network Address Translator.) (.21/01/2008 - 03:24:25.) -- C:\Windows\system32\Drivers\IpNat.sys [100864] [MD5.1E94971C4B446AB2290DEB71D01CF0C2] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.29/04/2011 - 14:24:40.) -- C:\Windows\system32\Drivers\MRxSmb.sys [106496] [MD5.ECD64230A59CBD93C85F1CD1CAB9F3F6] - (.Microsoft Corporation - MBT Transport driver.) (.11/04/2009 - 05:45:37.) -- C:\Windows\system32\Drivers\netBT.sys [185856] [MD5.2C1121F2B87E9A6B12485DF53CD848C7] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.03/03/2013 - 20:07:52.) -- C:\Windows\system32\Drivers\ntfs.sys [1082232] [MD5.0FA9B5055484649D63C303FE404E5F4D] - (.Microsoft Corporation - Pilote de port parallèle.) (.02/11/2006 - 09:51:30.) -- C:\Windows\system32\Drivers\Parport.sys [79360] [MD5.A214ADBAF4CB47DD2728859EF31F26B0] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.21/01/2008 - 03:24:55.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [76288] [MD5.FBC0BACD9C3D7F6956853F64A66E252D] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.21/01/2008 - 03:23:01.) -- C:\Windows\system32\Drivers\rdpdr.sys [248832] [MD5.7B75299A4D201D6A6533603D6914AB04] - (.Microsoft Corporation - SMB Transport driver.) (.11/04/2009 - 05:45:22.) -- C:\Windows\system32\Drivers\smb.sys [66560] [MD5.76B06EB8A01FC8624D699E7045303E54] - (.Microsoft Corporation - TDI Translation Driver.) (.11/04/2009 - 05:45:56.) -- C:\Windows\system32\Drivers\tdx.sys [72192] [MD5.786DB5771F05EF300390399F626BF30A] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.21/08/2012 - 12:47:42.) -- C:\Windows\system32\Drivers\volsnap.sys [224640] ~ Generic Processes: Scanned in 00mn 00s ---\\ Etat des fichiers cachés (Caché/Total) ~ Mes images (My Pictures) : 1/94 ~ Mes musiques (My Musics) : 1/83 ~ Mes Videos (My Videos) : 1/7 ~ Mes Favoris (My Favorites) : 1/83 ~ Mes Documents (My Documents) : 3/604 ~ Mon Bureau (My Desktop) : 1/50 ~ Menu demarrer (Programs) : 1/31 ~ Hidden Files: Scanned in 00mn 00s ---\\ Processus lancés [MD5.AE567D261D281B51BE55E53A786E8574] - (.Synaptics, Inc. - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1049896] [PID.1904] [MD5.4551FB332E320838724C38925BF46DC0] - (.CyberLink Corp. - HP QuickPlay Resident Program.) -- C:\Program Files\HP\QuickPlay\QPService.exe [468264] [PID.1764] [MD5.DCB36D4ED2950F3F675D27D422A6B365] - (. Hewlett-Packard Development Company, L.P. - Quick Launch Buttons.) -- C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe [202032] [PID.1468] [MD5.8CB896C573FD15AE8B13180DA53E93D2] - (.Hewlett-Packard Development Company, L.P. - HPWAMain Module.) -- C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe [488752] [PID.1800] [MD5.4B555106290BD117334E9A08761C035A] - (...) -- ystem32\rundll32.exe [0] [PID.1328] [MD5.C637FC4638A96165256B28D38DE7B953] - (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files\HP\HP Software Update\hpwuschd2.exe [49208] [PID.1016] [MD5.13E7CFE8E269ED15E7FC9C3EBBCB7E2B] - (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe [254696] [PID.2060] [MD5.6CF023F0A798C56599B8EA9FF9F083A0] - (.Hewlett-Packard Company - Pas de description.) -- C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [2289664] [PID.2084] [MD5.BF08674925F151BD4537B89A493E3E0C] - (.Microsoft Corporation - Media Center Tray Applet.) -- C:\Windows\ehome\ehtray.exe [125952] [PID.2104] [MD5.85A0661690A6E39C8E5CB876775D4ECE] - (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe [17709160] [PID.2304] [MD5.395BCC9122E705F6586217E32CD01CC9] - (.Hewlett-Packard Co. - ScanToPCActivationApp.) -- C:\Program Files\HP\HP Photosmart 5520 series\Bin\ScanToPCActivationApp.exe [1837672] [PID.2328] [MD5.32C26797AB646074A2BB562F9D10ADB5] - (.Microsoft Corporation - Microsoft Office OneNote Quick Launcher.) -- C:\Program Files\Microsoft Office\Office12\ONENOTEM.exe [97680] [PID.2356] [MD5.0F4195B9B348DE5CF9B822F81704B20E] - (.Microsoft Corporation - Media Center Media Status Aggregator Servic.) -- C:\Windows\ehome\ehmsas.exe [37376] [PID.2684] [MD5.8D07F0687318214A3CEF62EA1048D101] - (.Hewlett-Packard Development Company, L.P. - Module to process WiFi messages..) -- C:\Program Files\Hewlett-Packard\HP wireless Assistant\WiFiMsg.exe [316720] [PID.3652] [MD5.1EDC4865C8003A0251956835273904B1] - (.Pas de propriétaire - HpqToaster Module.) -- C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe [685360] [PID.3912] [MD5.A8AD97956A0F4408CB3AA03EDD2B8BC1] - (.Synaptics, Inc. - Synaptics Pointing Device Helper.) -- C:\Program Files\Synaptics\SynTP\SynTPHelper.exe [103720] [PID.3168] [MD5.135724D3F79E261B63628D75A6DD0817] - (.Hewlett-Packard Co. - HPNetworkCommunicator.) -- C:\Program Files\HP\HP Photosmart 5520 series\Bin\HPNetworkCommunicator.exe [673384] [PID.2384] [MD5.C10E5EF1B85DE5B79AC2815C9A677D1F] - (.BitTorrent Inc. - µTorrent.) -- C:\Users\Propriétaire\AppData\Roaming\uTorrent\uTorrent.exe [1385808] [PID.4288] =>P2P.BitTorrent [MD5.63BE371C16B163583A5EA9D3DF4AC16B] - (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe [757968] [PID.4692] [MD5.7999235AE6A9F0FE1C007203F03A4618] - (.Adobe Systems Incorporated - Adobe® Flash® Player Installer/Uninstaller.) -- C:\Windows\system32\Macromed\Flash\FlashUtil32_15_0_0_246_ActiveX.exe [855216] [PID.5248] [MD5.1C6C28041F1CF705FF7886A1CF362A08] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [8139264] [PID.5036] [MD5.6080A176D09435FC8E6E800996656E18] - (.Microsoft Corporation - Console IME.) -- C:\Windows\system32\conime.exe [69120] [PID.2652] [MD5.11E1DC466C3E384C1A697B95DC5AA785] - (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 175.9.) -- C:\Windows\system32\nvvsvc.exe [196608] [PID.844] [MD5.A4B109D057E15A438CE74E5B71187417] - (.Microsoft Corporation - Antimalware Service Executable.) -- c:\Program Files\Microsoft Security Client\MsMpEng.exe [22192] [PID.908] [MD5.862BB4CBC05D80C5B45BE430E5EF872F] - (.Microsoft Corporation - Service de gestion des licences Microsoft.) -- C:\Windows\system32\SLsvc.exe [3408896] [PID.1264] [MD5.23C3A0680042C0D1DE1F360F8B62BC57] - (.Microsoft Corporation - Infrastructure d'extensibilité pour les ser.) -- C:\Windows\system32\WLANExt.exe [74240] [PID.1828] [MD5.3F56903E124E820AEECE6D471583C6C1] - (.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe [238888] [PID.2152] [MD5.F96C429788350DB4BA6771C3034DFD88] - (.Teruten - FsUsbDevice.) -- C:\Windows\system32\FsUsbExService.exe [217088] [PID.2272] [MD5.984ECB68ED2A2B2E6A544E87E24FBA2D] - (.Hewlett-Packard Company - LightScribe Service.) -- C:\Program Files\Common Files\LightScribe\LSSrvc.exe [73728] [PID.2320] [MD5.431723F23D0E065BEF502389E8FFDC10] - (.Pas de propriétaire - STServices.) -- C:\Windows\SMINST\BLService.exe [361808] [PID.2524] [MD5.17E0BEF5CA5C9CE52CC8082AC6EBC449] - (.Pas de propriétaire - RichVideo Module.) -- C:\Program Files\CyberLink\Shared Files\RichVideo.exe [272024] [PID.2620] [MD5.CD5F291A1161F15896D1A4D63DAFF5DF] - (.Conexant Systems, Inc. - Modem Audio Service.) -- C:\Windows\system32\DRIVERS\xaudio.exe [386560] [PID.2912] [MD5.1665C7121A026DF10C903DB9BC5E9D43] - (.Hewlett-Packard Development Company, L.P. - hpqwmiex Module.) -- C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe [165192] [PID.3048] [MD5.877C975D6FED8B12C445312D1286771E] - (.Microsoft Corporation - Microsoft Network Realtime Inspection Servi.) -- c:\Program Files\Microsoft Security Client\NisSrv.exe [288120] [PID.3364] [MD5.7795F8CEBC284A426B53F541E538695F] - (.Hewlett-Packard Development Company, L.P. - Com for QLB application.) -- C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [193840] [PID.1692] [MD5.89F9E1984C1CD9E5F4FE39642D886E11] - (.Hewlett-Packard - HP Health Check Service.) -- c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [94208] [PID.4700] ~ Processes Running: Scanned in 00mn 01s ---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2) C:\Users\Propriétaire\AppData\Local\Google\Chrome\User Data\Default\Preferences ---\\ Liste des dossiers d'extension Google Chrome ~ Google Lines Browser: 0 Scanned in 00mn 06s ---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3) P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\Windows\system32\Macromed\Flash\NPSWF32.dll P2 - FPN: [HKLM] [@adobe.com/ShockwavePlayer] - (.Adobe Systems, Inc. - Adobe Shockwave for Director Netscape plug-in, version 11.5.) -- C:\Windows\system32\Adobe\Director\np32dsw.dll P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 5.1.30514.0.) -- c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll P2 - FPN: [HKLM] [@videolan.org/vlc,version=2.0.2] - (.VideoLAN - VLC media player Web Plugin 2.0.2.) -- C:\Program Files\VideoLAN\VLC\npvlc.dll =>.VideoLAN P2 - FPN: [HKCU] [@Skype Limited.com/Facebook Video Calling Plugin] - (.Skype Limited - Facebook Video Calling Plugin.) -- C:\Users\Propriétaire\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll ~ Firefox Browser: 8 Scanned in 00mn 00s ---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4) R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://google.com R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://google.com R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://fr.yahoo.com R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://google.com R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://google.com R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://google.com R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = http://google.com R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Skype Limited - Facebook Video Calling Plugin.) (No version) -- (.not file.) R3 - URLSearchHook: (no name) - {ba679afc-8ba0-48f4-b8bf-c144e8699fbc} . (.Skype Limited - Facebook Video Calling Plugin.) (No version) -- (.not file.) R4 - HKCU\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,Enabled = 0 ~ IE Browser: 14 Scanned in 00mn 00s ---\\ Internet Explorer, Proxy Management (R5) R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 0 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll ~ Proxy management: Scanned in 00mn 00s ---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs F2 - REG:system.ini: USERINIT=C:\Windows\system32\ezShellStart.exe, F2 - REG:system.ini: Shell=C:\Windows\explorer.exe F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl" ~ Keys: Scanned in 00mn 00s ---\\ Hosts file redirection (O1) ~ Le fichier hôte est sain (The hosts file is clean) (20) ~ Hosts File: Scanned in 00mn 00s ---\\ Browser Helper Objects de navigateur (O2) O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} . (.Yahoo! Inc - Yahoo! Single Instance for Mail.) -- C:\Program Files\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll ~ BHO: 4 Scanned in 00mn 00s ---\\ Autres liens utilisateurs (O4) O4 - GS\QuickLaunch [Propriétaire]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) -- C:\Users\Propriétaire\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent O4 - GS\Desktop [Propriétaire]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) -- C:\Users\Propriétaire\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent ~ Global Startup: 2 Scanned in 00mn 01s ---\\ Applications lancées au démarrage du système (O4) O4 - HKLM\..\Run: [SynTPEnh] . (.Synaptics, Inc. - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [UCam_Menu] . (.CyberLink Corp. - StartMen Application.) -- C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe O4 - HKLM\..\Run: [QPService] . (.CyberLink Corp. - HP QuickPlay Resident Program.) -- C:\Program Files\HP\QuickPlay\QPService.exe O4 - HKLM\..\Run: [QlbCtrl.exe] . (. Hewlett-Packard Development Company, L.P. - Quick Launch Buttons.) -- C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe O4 - HKLM\..\Run: [hpWirelessAssistant] . (.Hewlett-Packard Development Company, L.P. - HPWAMain Module.) -- C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe O4 - HKLM\..\Run: [HP Health Check Scheduler] . (.Hewlett-Packard - HP Health Check Scheduler.) -- c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe O4 - HKLM\..\Run: [NvCplDaemon] . (.NVIDIA Corporation - NVIDIA Display Properties Extension.) -- C:\Windows\system32\NvCpl.dll =>.NVIDIA Corporation O4 - HKLM\..\Run: [NvMediaCenter] . (.NVIDIA Corporation - NVIDIA Media Center Library.) -- C:\Windows\system32\NvMcTray.dll O4 - HKLM\..\Run: [HP Software Update] . (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe =>.Hewlett-Packard Co O4 - HKLM\..\Run: [MSC] . (.Microsoft Corporation - Microsoft Security Client User Interface.) -- c:\Program Files\Microsoft Security Client\msseces.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] . (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe =>.Oracle Corporation O4 - HKCU\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe =>.Microsoft Corporation O4 - HKCU\..\Run: [LightScribe Control Panel] . (.Hewlett-Packard Company - Pas de description.) -- C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe O4 - HKCU\..\Run: [ehTray.exe] . (.Microsoft Corporation - Media Center Tray Applet.) -- C:\Windows\ehome\ehTray.exe O4 - HKCU\..\Run: [Facebook Update] . (.Facebook Inc. - Programme d'installation de Facebook.) -- C:\Users\Propriétaire\AppData\Local\Facebook\Update\FacebookUpdate.exe O4 - HKCU\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe =>.Skype Technologies S.A. O4 - HKCU\..\Run: [HP Photosmart 5520 series (NET)] . (.Hewlett-Packard Co. - ScanToPCActivationApp.) -- C:\Program Files\HP\HP Photosmart 5520 series\Bin\ScanToPCActivationApp.exe =>.Hewlett-Packard Co O4 - HKCU\..\Run: [WMPNSCFG] . (.Microsoft Corporation - Application de configuration du service Par.) -- C:\Program Files\Windows Media Player\WMPNSCFG.exe =>.Microsoft Corporation O4 - HKCU\..\RunOnce: [Shockwave Updater] . (.Adobe Systems, Inc. - Shockwave Helper.) -- C:\Windows\system32\Adobe\Shockwave 11\SwHelper_1150600.exe O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-20\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter O4 - HKUS\S-1-5-21-2772249695-1814757047-2149356924-1000\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-21-2772249695-1814757047-2149356924-1000\..\Run: [LightScribe Control Panel] . (.Hewlett-Packard Company - Pas de description.) -- C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe O4 - HKUS\S-1-5-21-2772249695-1814757047-2149356924-1000\..\Run: [ehTray.exe] . (.Microsoft Corporation - Media Center Tray Applet.) -- C:\Windows\ehome\ehTray.exe O4 - HKUS\S-1-5-21-2772249695-1814757047-2149356924-1000\..\Run: [Facebook Update] . (.Facebook Inc. - Programme d'installation de Facebook.) -- C:\Users\Propriétaire\AppData\Local\Facebook\Update\FacebookUpdate.exe O4 - HKUS\S-1-5-21-2772249695-1814757047-2149356924-1000\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe =>.Skype Technologies S.A. O4 - HKUS\S-1-5-21-2772249695-1814757047-2149356924-1000\..\Run: [HP Photosmart 5520 series (NET)] . (.Hewlett-Packard Co. - ScanToPCActivationApp.) -- C:\Program Files\HP\HP Photosmart 5520 series\Bin\ScanToPCActivationApp.exe =>.Hewlett-Packard Co O4 - HKUS\S-1-5-21-2772249695-1814757047-2149356924-1000\..\Run: [WMPNSCFG] . (.Microsoft Corporation - Application de configuration du service Par.) -- C:\Program Files\Windows Media Player\WMPNSCFG.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-21-2772249695-1814757047-2149356924-1000\..\RunOnce: [Shockwave Updater] . (.Adobe Systems, Inc. - Shockwave Helper.) -- C:\Windows\system32\Adobe\Shockwave 11\SwHelper_1150600.exe ~ Application: Scanned in 00mn 00s ---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9) O9 - Extra button: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} -- Clé orpheline O9 - Extra button: HP Smart Print - {22CC3EBD-C286-43aa-B8E6-06B115F74162} . (...) -- C:\Program Files\Hewlett-Packard\Smart Print 2.0\smartprint.ico O9 - Extra button: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} . (.Microsoft Corporation - Microsoft Office OneNote Internet Explorer Add-in.) -- C:\Program Files\MICROS~3\Office12\ONBttnIE.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (...) -- C:\Program Files\Microsoft Office\Office12\REFBARH.ICO ~ IE Extra Buttons: Scanned in 00mn 00s ---\\ Winsock hijacker (Layered Service Provider) (O10) O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll O10 - WLSP:\000000000005\Winsock LSP File . (.Apple Inc. - Bonjour Namespace Provider.) -- C:\Program Files\Bonjour\mdnsNSP.dll O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll =>.Microsoft Corporation O10 - WLSP:\000000000007\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll ~ Winsock: 7 Scanned in 00mn 00s ---\\ Objets ActiveX (Downloaded Program Files)(O16) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} ((no name)) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab ~ Objets ActiveX: Scanned in 00mn 00s ---\\ Modification Domaine/Adresses DNS (O17) O17 - HKLM\System\CCS\Services\Tcpip\..\{D3445EF3-979C-419E-B016-F1522F66B3FB}: DhcpNameServer = 192.168.1.254 O17 - HKLM\System\CCS\Services\Tcpip\..\{EA63E04E-8E5F-435D-8FB8-9E3CDA903C8F}: DhcpNameServer = 192.168.1.254 O17 - HKLM\System\CCS\Services\Tcpip\..\{D3445EF3-979C-419E-B016-F1522F66B3FB}: DhcpDomain = lan O17 - HKLM\System\CCS\Services\Tcpip\..\{EA63E04E-8E5F-435D-8FB8-9E3CDA903C8F}: DhcpDomain = lan O17 - HKLM\System\CS1\Services\Tcpip\..\{D3445EF3-979C-419E-B016-F1522F66B3FB}: DhcpNameServer = 192.168.1.254 O17 - HKLM\System\CS1\Services\Tcpip\..\{EA63E04E-8E5F-435D-8FB8-9E3CDA903C8F}: DhcpNameServer = 192.168.1.254 O17 - HKLM\System\CS1\Services\Tcpip\..\{D3445EF3-979C-419E-B016-F1522F66B3FB}: DhcpDomain = lan O17 - HKLM\System\CS1\Services\Tcpip\..\{EA63E04E-8E5F-435D-8FB8-9E3CDA903C8F}: DhcpDomain = lan O17 - HKLM\System\CS3\Services\Tcpip\..\{D3445EF3-979C-419E-B016-F1522F66B3FB}: DhcpNameServer = 192.168.1.254 O17 - HKLM\System\CS3\Services\Tcpip\..\{EA63E04E-8E5F-435D-8FB8-9E3CDA903C8F}: DhcpNameServer = 192.168.1.254 O17 - HKLM\System\CS3\Services\Tcpip\..\{D3445EF3-979C-419E-B016-F1522F66B3FB}: DhcpDomain = lan O17 - HKLM\System\CS3\Services\Tcpip\..\{EA63E04E-8E5F-435D-8FB8-9E3CDA903C8F}: DhcpDomain = lan O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254 ~ Domain: Scanned in 00mn 00s ---\\ Protocole additionnel (O18) O18 - Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\system32\mshtml.dll =>.Microsoft Corporation O18 - Filter: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.dll =>.Microsoft Corporation ~ Protocole Additionnel: Scanned in 00mn 00s ---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21) O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Contrôleur de site Web.) -- C:\Windows\System32\webcheck.dll ~ SSODL: 1 Scanned in 00mn 00s ---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22) O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\Windows\System32\browseui.dll ~ STS/SSO: Scanned in 00mn 00s ---\\ Liste des services NT non Microsoft et non désactivés (O23) O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: FsUsbExService (FsUsbExService) . (.Teruten - FsUsbDevice.) - C:\Windows\system32\FsUsbExService.exe O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe =>.Google Inc O23 - Service: HP Health Check Service (HP Health Check Service) . (.Hewlett-Packard - HP Health Check Service.) - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) . (.Hewlett-Packard Company - LightScribe Service.) - C:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: NVIDIA Display Driver Service (nvsvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 175.9.) - C:\Windows\System32\nvvsvc.exe O23 - Service: Recovery Service for Windows (Recovery Service for Windows) . (.Pas de propriétaire - STServices.) - C:\Windows\SMINST\BLService.exe O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) . (.Pas de propriétaire - RichVideo Module.) - C:\Program Files\CyberLink\Shared Files\RichVideo.exe O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files\Skype\Updater\Updater.exe O23 - Service: XAudioService (XAudioService) . (.Conexant Systems, Inc. - Modem Audio Service.) - C:\Windows\System32\DRIVERS\xaudio.exe ~ Services: 10 Scanned in 00mn 04s ---\\ Enumération Active Desktop & MHTML Editor (O24) O24 - Default MHTML Editor: Last - .(.Microsoft Corporation - Microsoft Office Word.) - C:\Program Files\Microsoft Office\Office12\WINWORD.exe ~ Desktop Component: 4 Scanned in 00mn 00s ---\\ Enumère les données de BootExecute (BEX) (O34) O34 - HKLM BootExecute: (autocheck autochk *) - File not found ~ BEX: 1 Scanned in 00mn 00s ---\\ Tâches planifiées en automatique (O39) [MD5.749F94C424524285DCDA84D695ABC12F] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [267440] [MD5.9EB925EDC8CF1C3D06E50E9348B54A0A] [APT] [FacebookUpdateTaskUserS-1-5-21-2772249695-1814757047-2149356924-1000Core] (.Facebook Inc..) -- C:\Users\Propriétaire\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096] [MD5.9EB925EDC8CF1C3D06E50E9348B54A0A] [APT] [FacebookUpdateTaskUserS-1-5-21-2772249695-1814757047-2149356924-1000UA] (.Facebook Inc..) -- C:\Users\Propriétaire\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096] [MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe [116648] [MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe [116648] [MD5.523D786AB9BFC3C228B8C851D402F502] [APT] [HP Health Check] (.Hewlett-Packard.) -- c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe [75008] [MD5.DB95132F8DF8CEAA98B257ECA9819192] [APT] [{2AE89362-2AF6-47C6-87A7-22C130648A95}] (...) -- C:\Program Files\PLC\PLC_Device_85M\PLSetUp.exe [149280] [MD5.7B43567B4C32AD7ADED537CD3B1342B9] [APT] [AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files\Apple Software Update\SoftwareUpdate.exe [566592] O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\Tasks\Adobe Flash Player Updater.job [1002] O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Tasks\Adobe Flash Player Updater [1002] O39 - APT: FacebookUpdateTaskUserS-1-5-21-2772249695-1814757047-2149356924-1000Core - (.Facebook Inc..) -- C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2772249695-1814757047-2149356924-1000Core.job [1102] O39 - APT: FacebookUpdateTaskUserS-1-5-21-2772249695-1814757047-2149356924-1000Core - (.Facebook Inc..) -- C:\Windows\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2772249695-1814757047-2149356924-1000Core [1102] O39 - APT: FacebookUpdateTaskUserS-1-5-21-2772249695-1814757047-2149356924-1000UA - (.Facebook Inc..) -- C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2772249695-1814757047-2149356924-1000UA.job [1124] O39 - APT: FacebookUpdateTaskUserS-1-5-21-2772249695-1814757047-2149356924-1000UA - (.Facebook Inc..) -- C:\Windows\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2772249695-1814757047-2149356924-1000UA [1124] O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job [1052] O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore [1052] O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job [1056] O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA [1056] ~ Scheduled Task: 14 Scanned in 00mn 03s ---\\ Composants installés (ActiveSetup Installed Components) (O40) O40 - ASIC: Microsoft Windows Media Player - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll =>.Microsoft Corporation O40 - ASIC: Internet Explorer - >{26923b43-4d38-484f-9b9e-de460746276c} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\system32\ie4uinit.exe O40 - ASIC: Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608500} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre1.6.0_05\bin\regutils.dll O40 - ASIC: LightScribe Control Panel - {10880D85-AAD9-4558-ABDC-2AB1552D831F} . (.Hewlett-Packard Company - Pas de description.) -- C:\Program Files\Common Files\LightScribe\LSRunOnce.exe O40 - ASIC: Macromedia Shockwave Director 10.1 - {166B1BCA-3F9C-11CF-8075-444553540000} . (.Adobe Systems, Inc. - Shockwave ActiveX Control.) -- C:\Windows\system32\Adobe\Director\SwDir.dll O40 - ASIC: Microsoft Windows Media Player 11.0 - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\System32\wmpdxm.dll =>.Microsoft Corporation O40 - ASIC: Themes Setup - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\Windows\System32\themeui.dll O40 - ASIC: Microsoft Windows Mail 7 - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Windows Mail.) -- C:\Program Files\Windows Mail\WinMail.exe =>.Microsoft Corporation O40 - ASIC: Browsing Enhancements - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\Windows\System32\msieftp.dll O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll =>.Microsoft Corporation O40 - ASIC: Windows Desktop Update - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll O40 - ASIC: Web Platform Customizations - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe O40 - ASIC: (no name) - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\system32\mscories.dll O40 - ASIC: Google Chrome - {8A69D345-D564-463c-AFF1-A69D9E530F96} . (.Google Inc. - Google Chrome Installer.) -- C:\Program Files\Google\Chrome\Application\39.0.2171.95\Installer\chrmstp.exe O40 - ASIC: IE Tour Reset Stub - {A509B1FF-37FF-4bFF-8CFF-4F3A747040FF} . (.Microsoft Corporation - ADVPACK.) -- C:\Windows\system32\advpack.dll O40 - ASIC: Adobe Flash Player - {D27CDB6E-AE6D-11CF-96B8-444553540000} . (.Adobe Systems, Inc. - Adobe Flash Player 15.0 r0.) -- C:\Windows\system32\Macromed\Flash\Flash32_15_0_0_246.ocx ~ Active Setup: 16 Scanned in 00mn 00s ---\\ Pilotes lancés au démarrage du système (O41) O41 - Driver: (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys O41 - Driver: C:\Windows\System32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys O41 - Driver: (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\Windows\System32\DRIVERS\i8042prt.sys O41 - Driver: (kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\Windows\System32\DRIVERS\kbdclass.sys O41 - Driver: (kbdhid) . (.Microsoft Corporation - Pilote de filtre clavier HID.) - C:\Windows\system32\drivers\kbdhid.sys O41 - Driver: (mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\Windows\System32\DRIVERS\mouclass.sys O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys O41 - Driver: (netbt) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys O41 - Driver: (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys O41 - Driver: C:\Windows\System32\drivers\pacer.sys (PSched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys O41 - Driver: (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\Windows\System32\DRIVERS\rasacd.sys O41 - Driver: (rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\Windows\System32\DRIVERS\rdbss.sys O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys O41 - Driver: (RDPENCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys O41 - Driver: C:\Windows\System32\tcpipcfg.dll (Smb) . (.Microsoft Corporation - SMB Transport driver.) - C:\Windows\System32\DRIVERS\smb.sys O41 - Driver: C:\Windows\System32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys O41 - Driver: (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\Windows\System32\DRIVERS\termdd.sys O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys O41 - Driver: (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys ~ Drivers: 60 Scanned in 00mn 00s ---\\ Logiciels installés (O42) O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM] -- Adobe AIR O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM] -- {FE23D063-934D-4829-A0D8-00634CE79B4A} O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems, Inc..) [HKLM] -- {ECA1A3B6-898F-4DCE-9F04-714CF3BA126B} O42 - Logiciel: Adobe Flash Player 15 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX O42 - Logiciel: Adobe Reader 8.1.2 - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-A81200000003} O42 - Logiciel: Adobe Shockwave Player - (.Adobe Systems, Inc..) [HKLM] -- {1BDC9633-895B-4842-BCB6-8FA1EC2A3C5A} O42 - Logiciel: Adobe Shockwave Player 11.5 - (.Adobe Systems, Inc..) [HKLM] -- Adobe Shockwave Player O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM] -- {6956856F-B6B3-4BE0-BA0B-8F495BE32033} =>.Apple Inc O42 - Logiciel: Atheros Driver Installation Program - (.Atheros.) [HKLM] -- {C3A32068-8AB1-4327-BB16-BED9C6219DC7} O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM] -- {07287123-B8AC-41CE-8346-3D777245C35B} O42 - Logiciel: CCleaner (remove only) - (...) [HKLM] -- CCleaner O42 - Logiciel: Cisco EAP-FAST Module - (.Cisco Systems, Inc..) [HKLM] -- {415B2719-AD3A-4944-B404-C472DB6085B3} O42 - Logiciel: Cisco LEAP Module - (.Cisco Systems, Inc..) [HKLM] -- {83770D14-21B9-44B3-8689-F7B523F94560} O42 - Logiciel: Cisco PEAP Module - (.Cisco Systems, Inc..) [HKLM] -- {669C7BD8-DAA2-49B6-966C-F1E2AAE6B17E} O42 - Logiciel: Conexant HD Audio - (.Conexant.) [HKLM] -- CNXT_AUDIO_HDA O42 - Logiciel: CyberLink YouCam - (.CyberLink Corp..) [HKLM] -- InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D} O42 - Logiciel: CyberLink YouCam - (.CyberLink Corp..) [HKLM] -- {01FB4998-33C4-4431-85ED-079E3EEFE75D} O42 - Logiciel: ESU for Microsoft Vista - (.Hewlett-Packard.) [HKLM] -- {3877C901-7B90-4727-A639-B6ED2DD59D43} O42 - Logiciel: Facebook Video Calling 3.1.0.521 - (.Skype Limited.) [HKLM] -- {2091F234-EB58-4B80-8C96-8EB78C808CF7} O42 - Logiciel: Favorit (yackeiq) - (...) [HKLM] -- yackeiq =>Adware.Favorit O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM] -- Google Chrome O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} O42 - Logiciel: HDAUDIO Soft Data Fax Modem with SmartCP - (...) [HKLM] -- CNXT_MODEM_HDAUDIO_HERMOSA_HSF O42 - Logiciel: HP Active Support Library - (.Hewlett-Packard.) [HKLM] -- {5DAA9C36-8F8B-462F-8CCA-E205BC3751F5} O42 - Logiciel: HP Customer Experience Enhancements - (.Hewlett-Packard.) [HKLM] -- {B16DA0F8-26BC-4FFC-9363-1D9F3E6C3E21} O42 - Logiciel: HP DVD Play 3.7 - (.Hewlett-Packard.) [HKLM] -- {45D707E9-F3C4-11D9-A373-0050BAE317E1} O42 - Logiciel: HP Doc Viewer - (.Hewlett-Packard.) [HKLM] -- {082702D5-5DD8-4600-BCE5-48B15174687F} O42 - Logiciel: HP Easy Setup - Frontend - (.Hewlett-Packard.) [HKLM] -- {51E5C397-0AA0-48DD-9CB6-7259AFFDFB0A} O42 - Logiciel: HP Help and Support - (.Hewlett-Packard.) [HKLM] -- {31216452-5540-4C96-B754-94890A63D5AB} O42 - Logiciel: HP Photosmart 5520 series Aide - (.Hewlett Packard.) [HKLM] -- {CB08AF0F-D14B-4570-83CD-2567CE63CC5F} =>.Hewlett-Packard Co O42 - Logiciel: HP Quick Launch Buttons 6.40 F1 - (.Hewlett-Packard.) [HKLM] -- {34D2AB40-150D-475D-AE32-BD23FB5EE355} O42 - Logiciel: HP Total Care Advisor - (.Hewlett-Packard.) [HKLM] -- {f32502b5-5b64-4882-bf61-77f23edcac4f} O42 - Logiciel: HP Update - (.Hewlett-Packard.) [HKLM] -- {6F1C00D2-25C2-4CBA-8126-AE9A6E2E9CD5} O42 - Logiciel: HP User Guides 0118 - (.Hewlett-Packard.) [HKLM] -- {B6D0B141-B2BE-4DD0-B08F-B9186F3E36B3} O42 - Logiciel: HP Wireless Assistant - (.Hewlett-Packard.) [HKLM] -- {340F521E-3576-4E1A-B75C-EB0ACF751379} O42 - Logiciel: HPNetworkAssistant - (.Hewlett-Packard..) [HKLM] -- {228C6B46-64E2-404E-898A-EF0830603EF4} O42 - Logiciel: Hewlett-Packard Active Check for Health Check - (.Hewlett-Packard.) [HKLM] -- {254C37AA-6B72-4300-84F6-98A82419187E} O42 - Logiciel: Hewlett-Packard Asset Agent for Health Check - (.HP.) [HKLM] -- {669D4A35-146B-4314-89F1-1AC3D7B88367} O42 - Logiciel: Java(TM) 6 Update 5 - (.Sun Microsystems, Inc..) [HKLM] -- {3248F0A8-6813-11D6-A77B-00B0D0160050} O42 - Logiciel: LabelPrint - (.CyberLink Corp..) [HKLM] -- {C59C179C-668D-49A9-B6EA-0121CCFC1243} O42 - Logiciel: LightScribe System Software 1.12.33.2 - (.LightScribe.) [HKLM] -- {582287DA-0806-4AC0-BF19-C15E3A466034} O42 - Logiciel: Logiciel de base du périphérique HP Photosmart 5520 series - (.Hewlett-Packard Co..) [HKLM] -- {0FCD946D-1C6E-4476-A441-88B9ADE88ACA} =>.Hewlett-Packard Co O42 - Logiciel: MSXML 4.0 SP2 (KB936181) - (.Microsoft Corporation.) [HKLM] -- {C04E32E0-0416-434D-AFB9-6969D703A9EF} O42 - Logiciel: MSXML 4.0 SP2 (KB941833) - (.Microsoft Corporation.) [HKLM] -- {C523D256-313D-4866-B36A-F3DE528246EF} O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71} O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC} O42 - Logiciel: Magic Desktop - (...) [HKLM] -- EasyBits Magic Desktop O42 - Logiciel: Malwarebytes Anti-Malware version 2.0.4.1028 - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes Anti-Malware_is1 O42 - Logiciel: Microsoft Antimalware Service FR-FR Language Pack - (.Microsoft Corporation.) [HKLM] -- {32E9C1A5-0FDA-4483-987D-DBABF9CC1DD8} O42 - Logiciel: Microsoft Security Client - (.Microsoft Corporation.) [HKLM] -- {107F27B7-8EE4-4B3A-9CE5-497B120369DC} O42 - Logiciel: Microsoft Security Client FR-FR Language Pack - (.Microsoft Corporation.) [HKLM] -- {50779A29-834E-4E36-BBEB-B7CABC67A825} O42 - Logiciel: Microsoft Security Essentials - (.Microsoft Corporation.) [HKLM] -- Microsoft Security Client O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00} O42 - Logiciel: Microsoft Works - (.Microsoft Corporation.) [HKLM] -- {3B160861-7250-451E-B5EE-8B92BF30A710} O42 - Logiciel: My HP Games - (.WildTangent.) [HKLM] -- WildTangent hp Master Uninstall =>.WildTangent O42 - Logiciel: NVIDIA Drivers - (...) [HKLM] -- NVIDIA Drivers O42 - Logiciel: NetWaiting - (.BVRP Software, Inc.) [HKLM] -- {3F92ABBB-6BBF-11D5-B229-002078017FBF} O42 - Logiciel: OutlookAddInNet3Setup - (.Samsung.) [HKLM] -- {5B4383F2-37EE-4E97-AD81-F5FF76F286DA} O42 - Logiciel: PDFCreator - (.Frank Heindörfer, Philip Chinery.) [HKLM] -- {0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D} O42 - Logiciel: PLC Configuration Utility-85M - (.***IS_STRING_NOT_DEFINED***.) [HKLM] -- {365172F8-9A61-483A-B7CD-820C19BF4528} O42 - Logiciel: PowerDirector - (.CyberLink Corp..) [HKLM] -- InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1} O42 - Logiciel: QuickTime - (.Apple Inc..) [HKLM] -- {A429C2AE-EBF1-4F81-A221-1C115CAADDAD} O42 - Logiciel: Realtek 8169 8168 8101E 8102E Ethernet Driver - (.Realtek.) [HKLM] -- {8833FFB6-5B0C-4764-81AA-06DFEED9A476} O42 - Logiciel: Realtek USB 2.0 Card Reader - (.Realtek Semiconductor Corp..) [HKLM] -- {DC24971E-1946-445D-8A82-CE685433FA7D} O42 - Logiciel: Skype™ 6.2 - (.Skype Technologies S.A..) [HKLM] -- {4E76FF7E-AEBA-4C87-B788-CD47E5425B9D} O42 - Logiciel: Synaptics Pointing Device Driver - (.Synaptics.) [HKLM] -- SynTPDeinstKey O42 - Logiciel: VLC media player 2.0.2 - (.VideoLAN.) [HKLM] -- VLC media player =>.VideoLAN O42 - Logiciel: VoiceOver Kit - (.Apple Inc..) [HKLM] -- {6DE13770-01B7-4366-8DA6-48237793F445} O42 - Logiciel: µTorrent - (.BitTorrent Inc..) [HKCU] -- uTorrent =>P2P.BitTorrent ~ Logic: 70 Scanned in 00mn 00s ---\\ HKCU & HKLM Software Keys [HKCU\Software\ALWIL Software] [HKCU\Software\AOL] [HKCU\Software\Adobe] [HKCU\Software\AppDataLow\Software\Adobe] [HKCU\Software\AppDataLow\Software\Google] [HKCU\Software\AppDataLow\Software\Macromedia] [HKCU\Software\AppDataLow\Software\MarkAny] [HKCU\Software\AppDataLow\Software\Yahoo] [HKCU\Software\AppDataLow] [HKCU\Software\Apple Computer, Inc.] [HKCU\Software\Binary Noise] [HKCU\Software\BitTorrent] =>P2P.BitTorrent [HKCU\Software\CDDB] [HKCU\Software\Canneverbe Limited] [HKCU\Software\Classes] [HKCU\Software\Clients] [HKCU\Software\CyberLink] [HKCU\Software\DivXNetworks] [HKCU\Software\EasyBits] [HKCU\Software\Facebook] [HKCU\Software\FreeDownloadManager.ORG] [HKCU\Software\Google] [HKCU\Software\HP] [HKCU\Software\Hewlett-Packard] [HKCU\Software\IADirectShow] [HKCU\Software\IM Providers] [HKCU\Software\JavaSoft] [HKCU\Software\Licenses] [HKCU\Software\LightScribe] [HKCU\Software\Macromedia] [HKCU\Software\Magnet] [HKCU\Software\MainConcept (Muvee)] [HKCU\Software\MainConcept] [HKCU\Software\Malwarebytes' Anti-Malware] [HKCU\Software\MozillaPlugins] [HKCU\Software\Mozilla] [HKCU\Software\MyHeritage.com] [HKCU\Software\NVIDIA Corporation] [HKCU\Software\Netscape] [HKCU\Software\ODBC] [HKCU\Software\Orange] [HKCU\Software\PDFCreator] [HKCU\Software\Piriform] [HKCU\Software\Policies] [HKCU\Software\Samsung] [HKCU\Software\SkypeRS] [HKCU\Software\Skype] [HKCU\Software\Softthinks] [HKCU\Software\SubSystems] [HKCU\Software\Synaptics] [HKCU\Software\TeleCharger_v2] [HKCU\Software\Trolltech] [HKCU\Software\Visan] [HKCU\Software\Xilisoft] [HKCU\Software\Yahoo] [HKCU\Software\ZebHelpProcess Helper] [HKCU\Software\muvee Technologies] [HKLM\Software\ALWIL Software] [HKLM\Software\Adobe] [HKLM\Software\AdwCleaner] [HKLM\Software\America Online] [HKLM\Software\AppDataLow] [HKLM\Software\Apple Computer, Inc.] [HKLM\Software\Apple Inc.] [HKLM\Software\Atheros] [HKLM\Software\BVRP Software, Inc] [HKLM\Software\BrowserChoice] [HKLM\Software\Bunndle] [HKLM\Software\CXT] [HKLM\Software\Classes] [HKLM\Software\Clients] [HKLM\Software\Conexant Systems Inc ] [HKLM\Software\Conexant] [HKLM\Software\CyberLink] [HKLM\Software\Debug] [HKLM\Software\EasyBits] [HKLM\Software\GEAR Software] [HKLM\Software\Google] [HKLM\Software\HPQ] [HKLM\Software\HP] [HKLM\Software\Hewlett-Packard] [HKLM\Software\IM Providers] [HKLM\Software\InstallShield] [HKLM\Software\InstalledOptions] [HKLM\Software\Intel] [HKLM\Software\InterActual Technologies] [HKLM\Software\JavaSoft] [HKLM\Software\JreMetrics] [HKLM\Software\LightScribe] [HKLM\Software\Macromedia] [HKLM\Software\Malwarebytes' Anti-Malware] [HKLM\Software\MimarSinan] [HKLM\Software\MozillaPlugins] [HKLM\Software\Mozilla] [HKLM\Software\MyHeritage.com] [HKLM\Software\NVIDIA Corporation] [HKLM\Software\ODBC] [HKLM\Software\Policies] [HKLM\Software\RTLSetup] [HKLM\Software\Realtek Semiconductor Corp.] [HKLM\Software\Realtek] [HKLM\Software\RegisteredApplications] [HKLM\Software\Samsung] [HKLM\Software\Skype] [HKLM\Software\Sonic] [HKLM\Software\Sony Corporation] [HKLM\Software\Speed-Downloading] [HKLM\Software\Symantec] [HKLM\Software\Synaptics] [HKLM\Software\VideoLAN] [HKLM\Software\Volatile] [HKLM\Software\WOW6432Node] [HKLM\Software\WildTangent] [HKLM\Software\Windows] [HKLM\Software\Yahoo] [HKLM\Software\muvee Technologies] ~ Key Software: 258 Scanned in 00mn 00s ---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43) O43 - CFD: 08/07/2008 - 06:12:55 - [] ----D C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites O43 - CFD: 05/06/2013 - 20:56:27 - [] ----D C:\Program Files\Adobe O43 - CFD: 25/12/2008 - 18:38:02 - [] ----D C:\Program Files\Alwil Software O43 - CFD: 25/12/2008 - 22:37:31 - [] ----D C:\Program Files\Apple Software Update =>.Apple Inc O43 - CFD: 04/10/2008 - 18:15:32 - [] ----D C:\Program Files\Atheros O43 - CFD: 23/04/2009 - 09:48:18 - [] ----D C:\Program Files\BitDefender O43 - CFD: 14/11/2009 - 18:27:11 - [] ----D C:\Program Files\Bonjour O43 - CFD: 25/12/2008 - 18:39:17 - [] ----D C:\Program Files\CCleaner O43 - CFD: 08/02/2011 - 17:43:28 - [0] ----D C:\Program Files\CDBurnerXP O43 - CFD: 04/10/2008 - 18:14:53 - [] ----D C:\Program Files\Cisco O43 - CFD: 14/05/2014 - 18:36:20 - [] ----D C:\Program Files\Common Files O43 - CFD: 04/10/2008 - 18:23:18 - [] ----D C:\Program Files\CONEXANT O43 - CFD: 23/04/2014 - 07:19:48 - [] ----D C:\Program Files\CyberLink O43 - CFD: 20/01/2010 - 15:35:01 - [] ----D C:\Program Files\EasyBits For Kids O43 - CFD: 08/02/2011 - 18:44:22 - [] ----D C:\Program Files\Family Toolbar O43 - CFD: 24/11/2008 - 11:51:52 - [] -SH-D C:\Program Files\Fichiers communs O43 - CFD: 27/11/2012 - 20:03:21 - [] ----D C:\Program Files\Google O43 - CFD: 15/04/2013 - 13:40:32 - [] ----D C:\Program Files\Hewlett-Packard O43 - CFD: 15/04/2013 - 13:37:34 - [] ----D C:\Program Files\HP O43 - CFD: 08/07/2008 - 05:35:22 - [] ----D C:\Program Files\HP Games O43 - CFD: 23/04/2014 - 07:19:51 - [] --H-D C:\Program Files\InstallShield Installation Information O43 - CFD: 04/10/2008 - 18:16:06 - [] ----D C:\Program Files\Intel O43 - CFD: 10/12/2014 - 11:48:43 - [] ----D C:\Program Files\Internet Explorer O43 - CFD: 06/06/2013 - 20:44:41 - [] ----D C:\Program Files\iTunes O43 - CFD: 13/09/2011 - 09:28:33 - [] ----D C:\Program Files\Java O43 - CFD: 12/12/2014 - 13:54:15 - [] ----D C:\Program Files\Malwarebytes Anti-Malware O43 - CFD: 21/07/2014 - 14:23:38 - [0] ----D C:\Program Files\Malwarebytes' Anti-Malware O43 - CFD: 09/12/2010 - 15:37:04 - [] ----D C:\Program Files\MarkAny O43 - CFD: 02/11/2006 - 13:37:34 - [] ----D C:\Program Files\Microsoft Games O43 - CFD: 14/04/2012 - 07:25:48 - [] ----D C:\Program Files\Microsoft Office O43 - CFD: 15/09/2014 - 18:11:41 - [] ----D C:\Program Files\Microsoft Security Client O43 - CFD: 25/07/2014 - 10:18:04 - [] ----D C:\Program Files\Microsoft Silverlight O43 - CFD: 10/10/2012 - 19:58:03 - [] ----D C:\Program Files\Microsoft Works O43 - CFD: 26/06/2010 - 07:54:00 - [] ----D C:\Program Files\Microsoft.NET O43 - CFD: 13/08/2010 - 16:51:59 - [] ----D C:\Program Files\Movie Maker O43 - CFD: 02/02/2013 - 12:48:42 - [] ----D C:\Program Files\Mozilla Firefox O43 - CFD: 02/11/2006 - 13:37:34 - [] ----D C:\Program Files\MSBuild O43 - CFD: 12/01/2009 - 17:08:54 - [0] ----D C:\Program Files\MSXML 4.0 O43 - CFD: 04/10/2008 - 18:22:00 - [] ----D C:\Program Files\NetWaiting O43 - CFD: 24/11/2008 - 11:58:38 - [] R---D C:\Program Files\Online Services O43 - CFD: 16/06/2011 - 11:44:09 - [0] ----D C:\Program Files\PC Connectivity Solution O43 - CFD: 25/12/2008 - 20:37:24 - [] ----D C:\Program Files\PDFCreator O43 - CFD: 11/09/2009 - 10:31:11 - [] ----D C:\Program Files\PLC O43 - CFD: 14/11/2009 - 18:39:41 - [] ----D C:\Program Files\QuickTime O43 - CFD: 04/10/2008 - 18:20:52 - [] ----D C:\Program Files\Realtek O43 - CFD: 02/11/2006 - 13:37:34 - [] ----D C:\Program Files\Reference Assemblies O43 - CFD: 09/12/2010 - 15:42:31 - [] ----D C:\Program Files\Samsung O43 - CFD: 28/02/2013 - 10:36:37 - [] R---D C:\Program Files\Skype O43 - CFD: 04/10/2008 - 18:18:52 - [] ----D C:\Program Files\Synaptics O43 - CFD: 02/11/2006 - 14:01:55 - [0] --H-D C:\Program Files\Uninstall Information O43 - CFD: 30/01/2009 - 09:58:05 - [] ----D C:\Program Files\VideoLAN O43 - CFD: 15/05/2010 - 11:11:40 - [] ----D C:\Program Files\Windows Calendar O43 - CFD: 15/05/2010 - 11:11:37 - [] ----D C:\Program Files\Windows Collaboration O43 - CFD: 15/05/2010 - 11:11:29 - [] ----D C:\Program Files\Windows Defender O43 - CFD: 21/07/2014 - 11:11:46 - [] ----D C:\Program Files\Windows Journal O43 - CFD: 12/04/2012 - 06:41:47 - [] ----D C:\Program Files\Windows Mail =>.Microsoft Corporation O43 - CFD: 13/10/2010 - 18:07:01 - [] ----D C:\Program Files\Windows Media Player =>.Microsoft Corporation O43 - CFD: 24/11/2008 - 11:51:52 - [] ----D C:\Program Files\Windows NT O43 - CFD: 15/05/2010 - 11:11:35 - [] ----D C:\Program Files\Windows Photo Gallery O43 - CFD: 16/05/2010 - 02:22:23 - [] ----D C:\Program Files\Windows Portable Devices O43 - CFD: 15/05/2010 - 11:11:38 - [] ----D C:\Program Files\Windows Sidebar O43 - CFD: 25/12/2008 - 18:39:16 - [] ----D C:\Program Files\Yahoo! O43 - CFD: 12/12/2014 - 10:56:59 - [] ----D C:\Program Files\ZHPDiag =>.Nicolas Coolman O43 - CFD: 05/06/2013 - 20:56:26 - [] ----D C:\Program Files\Common Files\Adobe O43 - CFD: 03/04/2012 - 12:01:07 - [] ----D C:\Program Files\Common Files\Adobe AIR O43 - CFD: 08/02/2011 - 17:36:07 - [] ----D C:\Program Files\Common Files\BitDefender O43 - CFD: 14/05/2014 - 18:36:20 - [] ----D C:\Program Files\Common Files\DESIGNER O43 - CFD: 08/07/2008 - 06:25:52 - [] ----D C:\Program Files\Common Files\InstallShield O43 - CFD: 13/09/2011 - 11:53:50 - [] ----D C:\Program Files\Common Files\Java O43 - CFD: 04/10/2008 - 18:51:24 - [] ----D C:\Program Files\Common Files\LightScribe O43 - CFD: 05/03/2012 - 21:07:19 - [] ----D C:\Program Files\Common Files\microsoft shared O43 - CFD: 23/04/2009 - 08:33:52 - [] ----D C:\Program Files\Common Files\MSSoap O43 - CFD: 09/12/2010 - 15:37:19 - [] ----D C:\Program Files\Common Files\Samsung O43 - CFD: 02/11/2006 - 12:18:33 - [] ----D C:\Program Files\Common Files\Services O43 - CFD: 28/02/2013 - 10:36:37 - [] ----D C:\Program Files\Common Files\Skype O43 - CFD: 02/11/2006 - 12:18:33 - [] ----D C:\Program Files\Common Files\SpeechEngines O43 - CFD: 25/12/2008 - 18:53:26 - [] ----D C:\Program Files\Common Files\Symantec Shared O43 - CFD: 11/11/2011 - 10:50:21 - [] ----D C:\Program Files\Common Files\System O43 - CFD: 05/06/2013 - 20:56:26 - [] ----D C:\ProgramData\Adobe O43 - CFD: 23/04/2014 - 07:02:35 - [0] ----D C:\ProgramData\AOL O43 - CFD: 25/12/2008 - 21:16:42 - [] ----D C:\ProgramData\AOL OCP O43 - CFD: 05/11/2012 - 18:39:31 - [] ----D C:\ProgramData\Apple O43 - CFD: 14/11/2009 - 18:41:27 - [] ----D C:\ProgramData\Apple Computer O43 - CFD: 02/11/2006 - 14:02:03 - [] -SH-D C:\ProgramData\Application Data O43 - CFD: 22/01/2013 - 14:01:26 - [] ----D C:\ProgramData\Ashampoo O43 - CFD: 04/10/2008 - 18:14:49 - [] ----D C:\ProgramData\Atheros O43 - CFD: 24/11/2008 - 11:51:52 - [] -SH-D C:\ProgramData\Bureau O43 - CFD: 17/03/2010 - 08:29:57 - [] ----D C:\ProgramData\Canneverbe Limited O43 - CFD: 16/01/2009 - 17:45:57 - [] --H-D C:\ProgramData\CanonBJ O43 - CFD: 05/01/2009 - 17:26:16 - [] ----D C:\ProgramData\CyberLink O43 - CFD: 02/11/2006 - 14:02:03 - [] -SH-D C:\ProgramData\Desktop O43 - CFD: 02/11/2006 - 14:02:03 - [] -SH-D C:\ProgramData\Documents O43 - CFD: 26/01/2013 - 18:24:45 - [0] ----D C:\ProgramData\eMule O43 - CFD: 24/11/2008 - 11:51:52 - [] -SH-D C:\ProgramData\Favoris O43 - CFD: 02/11/2006 - 14:02:03 - [] -SH-D C:\ProgramData\Favorites O43 - CFD: 19/01/2012 - 18:17:43 - [] ----D C:\ProgramData\Google O43 - CFD: 04/10/2008 - 18:46:33 - [] ----D C:\ProgramData\Hewlett-Packard O43 - CFD: 15/04/2013 - 13:37:40 - [] ----D C:\ProgramData\HP O43 - CFD: 21/07/2014 - 14:23:37 - [] ----D C:\ProgramData\Malwarebytes O43 - CFD: 24/11/2008 - 11:51:52 - [] -SH-D C:\ProgramData\Menu Démarrer O43 - CFD: 26/02/2014 - 20:33:59 - [] -S--D C:\ProgramData\Microsoft O43 - CFD: 10/12/2014 - 09:37:49 - [] ----D C:\ProgramData\Microsoft Help O43 - CFD: 24/11/2008 - 11:51:52 - [] -SH-D C:\ProgramData\Modèles O43 - CFD: 08/07/2008 - 05:58:01 - [] ----D C:\ProgramData\muvee Technologies O43 - CFD: 15/05/2010 - 11:04:07 - [] ----D C:\ProgramData\NVIDIA O43 - CFD: 05/12/2011 - 20:00:51 - [] ----D C:\ProgramData\Samsung O43 - CFD: 28/02/2013 - 10:36:43 - [] ----D C:\ProgramData\Skype O43 - CFD: 02/11/2006 - 14:02:03 - [] -SH-D C:\ProgramData\Start Menu O43 - CFD: 13/09/2011 - 11:53:53 - [] ----D C:\ProgramData\Sun O43 - CFD: 25/12/2008 - 18:47:03 - [] ----D C:\ProgramData\Symantec O43 - CFD: 23/04/2009 - 09:06:21 - [0] ----D C:\ProgramData\TEMP O43 - CFD: 02/11/2006 - 14:02:04 - [] -SH-D C:\ProgramData\Templates O43 - CFD: 15/04/2013 - 13:40:29 - [] ----D C:\ProgramData\Visan O43 - CFD: 16/01/2009 - 18:13:43 - [] ----D C:\ProgramData\WildTangent O43 - CFD: 29/08/2011 - 06:07:47 - [] ----D C:\ProgramData\WindowsSearch O43 - CFD: 08/07/2008 - 06:12:56 - [] ----D C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3} O43 - CFD: 14/11/2009 - 18:43:05 - [] ----D C:\ProgramData\{755AC846-7372-4AC8-8550-C52491DAA8BD} O43 - CFD: 25/02/2011 - 18:18:38 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories O43 - CFD: 25/02/2011 - 18:18:38 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools O43 - CFD: 21/01/2008 - 03:42:47 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Extras and Upgrades O43 - CFD: 08/07/2008 - 05:35:26 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games O43 - CFD: 13/01/2013 - 10:36:21 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome O43 - CFD: 23/04/2014 - 07:25:19 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP O43 - CFD: 04/10/2008 - 18:51:24 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LightScribe Direct Disc Labeling O43 - CFD: 09/09/2009 - 20:37:35 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LimeWire O43 - CFD: 02/11/2006 - 13:56:46 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance O43 - CFD: 12/12/2014 - 11:38:12 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware O43 - CFD: 13/09/2013 - 21:38:08 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office O43 - CFD: 25/07/2014 - 10:07:55 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight O43 - CFD: 10/10/2012 - 19:58:03 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Works O43 - CFD: 08/07/2008 - 05:58:09 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\muvee O43 - CFD: 08/07/2008 - 05:35:22 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\My HP Games O43 - CFD: 16/10/2010 - 22:22:19 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyHeritage.com O43 - CFD: 04/10/2008 - 18:22:01 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NetWaiting O43 - CFD: 25/12/2008 - 18:42:03 - [0] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Internet Security O43 - CFD: 24/11/2008 - 11:58:38 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Online Services O43 - CFD: 25/12/2008 - 20:37:24 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator O43 - CFD: 11/09/2009 - 10:31:17 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PLC O43 - CFD: 14/11/2009 - 18:39:31 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime O43 - CFD: 08/07/2008 - 06:27:14 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Recovery Manager O43 - CFD: 22/01/2011 - 20:22:58 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Room Arranger O43 - CFD: 28/02/2013 - 10:36:37 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype O43 - CFD: 02/11/2006 - 13:50:50 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup O43 - CFD: 02/11/2006 - 13:37:34 - [] R-H-D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC O43 - CFD: 02/02/2013 - 12:52:11 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN O43 - CFD: 12/12/2014 - 10:56:59 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP =>.Nicolas Coolman O43 - CFD: 15/01/2013 - 10:53:45 - [] ----D C:\Users\Propriétaire\AppData\Roaming\Adobe O43 - CFD: 15/02/2010 - 18:56:30 - [] ----D C:\Users\Propriétaire\AppData\Roaming\Apple Computer O43 - CFD: 17/03/2010 - 08:29:58 - [] ----D C:\Users\Propriétaire\AppData\Roaming\Canneverbe Limited O43 - CFD: 23/01/2011 - 10:07:00 - [] ----D C:\Users\Propriétaire\AppData\Roaming\CyberLink O43 - CFD: 26/01/2013 - 17:18:56 - [] ----D C:\Users\Propriétaire\AppData\Roaming\dvdcss O43 - CFD: 19/06/2009 - 20:51:06 - [] ----D C:\Users\Propriétaire\AppData\Roaming\Google O43 - CFD: 28/05/2009 - 20:05:52 - [] ----D C:\Users\Propriétaire\AppData\Roaming\Hewlett-Packard O43 - CFD: 30/09/2014 - 06:06:29 - [] ----D C:\Users\Propriétaire\AppData\Roaming\HpUpdate O43 - CFD: 24/11/2008 - 12:04:44 - [] ----D C:\Users\Propriétaire\AppData\Roaming\Identities O43 - CFD: 28/01/2011 - 21:32:51 - [] ----D C:\Users\Propriétaire\AppData\Roaming\LimeWire O43 - CFD: 25/12/2008 - 17:02:51 - [] ----D C:\Users\Propriétaire\AppData\Roaming\Macromedia O43 - CFD: 21/07/2014 - 14:24:00 - [0] ----D C:\Users\Propriétaire\AppData\Roaming\Malwarebytes O43 - CFD: 02/11/2006 - 13:37:34 - [0] ----D C:\Users\Propriétaire\AppData\Roaming\Media Center Programs O43 - CFD: 17/03/2010 - 10:40:55 - [] ----D C:\Users\Propriétaire\AppData\Roaming\Media Player Classic O43 - CFD: 12/11/2013 - 18:49:12 - [] -S--D C:\Users\Propriétaire\AppData\Roaming\Microsoft O43 - CFD: 21/04/2014 - 18:35:45 - [] ----D C:\Users\Propriétaire\AppData\Roaming\Mozilla O43 - CFD: 23/04/2009 - 09:06:48 - [] ----D C:\Users\Propriétaire\AppData\Roaming\muvee Technologies O43 - CFD: 15/01/2013 - 09:20:28 - [0] ----D C:\Users\Propriétaire\AppData\Roaming\Opera O43 - CFD: 05/12/2011 - 20:01:16 - [0] ----D C:\Users\Propriétaire\AppData\Roaming\Samsung O43 - CFD: 24/11/2014 - 13:24:00 - [] ----D C:\Users\Propriétaire\AppData\Roaming\Skype O43 - CFD: 25/07/2010 - 06:41:34 - [] ----D C:\Users\Propriétaire\AppData\Roaming\skypePM O43 - CFD: 24/11/2008 - 12:05:21 - [] ----D C:\Users\Propriétaire\AppData\Roaming\Symantec O43 - CFD: 12/11/2013 - 17:07:23 - [] ----D C:\Users\Propriétaire\AppData\Roaming\Template O43 - CFD: 10/01/2010 - 14:57:10 - [] ----D C:\Users\Propriétaire\AppData\Roaming\U3 O43 - CFD: 23/12/2014 - 19:05:43 - [] ----D C:\Users\Propriétaire\AppData\Roaming\uTorrent =>P2P.µTorrent O43 - CFD: 22/12/2014 - 22:57:11 - [] ----D C:\Users\Propriétaire\AppData\Roaming\vlc O43 - CFD: 07/06/2009 - 19:10:27 - [] ----D C:\Users\Propriétaire\AppData\Roaming\WildTangent O43 - CFD: 05/06/2013 - 21:04:28 - [] ----D C:\Users\Propriétaire\AppData\Roaming\Xilisoft O43 - CFD: 25/12/2008 - 18:39:15 - [] ----D C:\Users\Propriétaire\AppData\Roaming\Yahoo! O43 - CFD: 23/12/2014 - 19:07:29 - [] ----D C:\Users\Propriétaire\AppData\Roaming\ZHP =>.Nicolas Coolman O43 - CFD: 15/01/2013 - 09:14:50 - [] ----D C:\Users\Propriétaire\AppData\Local\Adobe O43 - CFD: 25/12/2008 - 22:37:33 - [] ----D C:\Users\Propriétaire\AppData\Local\Apple O43 - CFD: 05/06/2013 - 21:41:17 - [] ----D C:\Users\Propriétaire\AppData\Local\Apple Computer O43 - CFD: 24/11/2008 - 11:55:33 - [] -SH-D C:\Users\Propriétaire\AppData\Local\Application Data O43 - CFD: 23/04/2014 - 07:07:39 - [] ----D C:\Users\Propriétaire\AppData\Local\ApplicationHistory O43 - CFD: 27/11/2012 - 20:00:54 - [] ----D C:\Users\Propriétaire\AppData\Local\Apps O43 - CFD: 27/11/2012 - 20:02:13 - [0] ----D C:\Users\Propriétaire\AppData\Local\Deployment O43 - CFD: 16/06/2011 - 11:43:27 - [] ----D C:\Users\Propriétaire\AppData\Local\Downloaded Installations O43 - CFD: 30/12/2011 - 14:28:31 - [] ----D C:\Users\Propriétaire\AppData\Local\Facebook O43 - CFD: 03/04/2012 - 11:58:27 - [] ----D C:\Users\Propriétaire\AppData\Local\Google O43 - CFD: 24/11/2008 - 11:55:33 - [] -SH-D C:\Users\Propriétaire\AppData\Local\Historique O43 - CFD: 15/04/2013 - 14:38:28 - [] ----D C:\Users\Propriétaire\AppData\Local\HP O43 - CFD: 03/05/2010 - 09:19:36 - [] ----D C:\Users\Propriétaire\AppData\Local\IsolatedStorage O43 - CFD: 01/02/2011 - 08:59:09 - [] ----D C:\Users\Propriétaire\AppData\Local\Microsoft O43 - CFD: 26/02/2011 - 18:43:10 - [] ----D C:\Users\Propriétaire\AppData\Local\Microsoft Games O43 - CFD: 25/12/2008 - 20:41:16 - [] ----D C:\Users\Propriétaire\AppData\Local\Microsoft Help O43 - CFD: 03/02/2009 - 17:01:14 - [] ----D C:\Users\Propriétaire\AppData\Local\Neuf O43 - CFD: 22/01/2013 - 14:02:22 - [0] ----D C:\Users\Propriétaire\AppData\Local\photoOptimizeHistoryDataBase O43 - CFD: 19/11/2014 - 15:04:14 - [] ----D C:\Users\Propriétaire\AppData\Local\QuickPlay O43 - CFD: 22/01/2011 - 20:25:00 - [0] ----D C:\Users\Propriétaire\AppData\Local\Room Arranger O43 - CFD: 05/12/2011 - 20:01:16 - [0] ----D C:\Users\Propriétaire\AppData\Local\Samsung O43 - CFD: 26/01/2013 - 18:26:12 - [] ----D C:\Users\Propriétaire\AppData\Local\SquareClock.Production_Castorama_Dressing_Internet O43 - CFD: 23/12/2014 - 19:04:17 - [] ----D C:\Users\Propriétaire\AppData\Local\Temp O43 - CFD: 24/11/2008 - 11:55:33 - [] -SH-D C:\Users\Propriétaire\AppData\Local\Temporary Internet Files O43 - CFD: 05/01/2009 - 18:07:08 - [] ----D C:\Users\Propriétaire\AppData\Local\VirtualStore O43 - CFD: 21/01/2008 - 03:42:46 - [] R---D C:\Users\Propriétaire\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories O43 - CFD: 24/11/2008 - 12:04:54 - [] R---D C:\Users\Propriétaire\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools O43 - CFD: 25/12/2008 - 18:39:12 - [] ----D C:\Users\Propriétaire\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CCleaner O43 - CFD: 23/04/2014 - 07:19:39 - [] ----D C:\Users\Propriétaire\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink DVD Suite O43 - CFD: 04/10/2008 - 18:54:37 - [] ----D C:\Users\Propriétaire\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink YouCam O43 - CFD: 21/01/2008 - 03:42:46 - [] R---D C:\Users\Propriétaire\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance O43 - CFD: 23/04/2014 - 07:07:47 - [] R---D C:\Users\Propriétaire\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup ~ Program Folder: 208 Scanned in 00mn 00s ---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44) O44 - LFC:[MD5.91F488C0ED1D8B1FDC112F95A4965CC6] - 10/12/2014 - 08:59:27 ---A- . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll [12369920] O44 - LFC:[MD5.829532FD1584422EB7F4C49F767D1E4B] - 10/12/2014 - 08:59:28 ---A- . (.Microsoft Corporation - Navigateur Internet.) -- C:\Windows\System32\ieframe.dll [9740800] O44 - LFC:[MD5.4C0FA381EC7348F05432B2976924A031] - 10/12/2014 - 08:59:29 ---A- . (.Microsoft Corporation - Microsoft (R) JScript.) -- C:\Windows\System32\jscript9.dll [1810944] O44 - LFC:[MD5.7247B8F630630FCF495B809962D52970] - 10/12/2014 - 08:59:30 ---A- . (.Microsoft Corporation - Microsoft® HTML Editing Component.) -- C:\Windows\System32\mshtmled.dll [73216] O44 - LFC:[MD5.4D6B5B1CE39F6A2477FDE3117D84BDAB] - 10/12/2014 - 08:59:32 ---A- . (.Microsoft Corporation - Convertisseur Microsoft HTML.) -- C:\Windows\System32\html.iec [367104] O44 - LFC:[MD5.C23F63949092BC7086BD23743A28C46B] - 10/12/2014 - 08:59:32 ---A- . (.Microsoft Corporation - Moteur de l’interface utilisateur d’Interne.) -- C:\Windows\System32\ieui.dll [176640] O44 - LFC:[MD5.ED7DBB46D75BD5DE33E9E06C7CCDC4E8] - 10/12/2014 - 08:59:33 ---A- . (.Microsoft Corporation - Microsoft® MSHTML Typelib.) -- C:\Windows\System32\mshtml.tlb [2382848] O44 - LFC:[MD5.5310BF0FF12033B7F79F163805BE721A] - 10/12/2014 - 08:59:33 ---A- . (.Microsoft Corporation - Outil d’installation sans assistance d’IE 7.) -- C:\Windows\System32\ieUnatt.exe [142848] O44 - LFC:[MD5.AA680F0065A505118BDD9181BCE7C83D] - 10/12/2014 - 08:59:34 ---A- . (.Microsoft Corporation - Extensions Internet pour Win32.) -- C:\Windows\System32\wininet.dll [1129472] O44 - LFC:[MD5.D32B633111A9F99F8DCE36F1A6278FC7] - 10/12/2014 - 08:59:37 ---A- . (.Microsoft Corporation - Internet Shortcut Shell Extension DLL.) -- C:\Windows\System32\url.dll [231936] O44 - LFC:[MD5.5C3D2065153E4A4273DEDD87A8BC1805] - 10/12/2014 - 08:59:37 ---A- . (.Microsoft Corporation - JScript Proxy Auto-Configuration.) -- C:\Windows\System32\jsproxy.dll [65536] O44 - LFC:[MD5.E633199D0EE2682618FA5B762D892F04] - 10/12/2014 - 08:59:37 ---A- . (.Microsoft Corporation - Microsoft Feeds Manager.) -- C:\Windows\System32\msfeeds.dll [607744] O44 - LFC:[MD5.F18D4C903AE56BD9852D1D9E02CF1730] - 10/12/2014 - 08:59:37 ---A- . (.Microsoft Corporation - Panneau de configuration Internet.) -- C:\Windows\System32\inetcpl.cpl [1427968] O44 - LFC:[MD5.898479188B3DBCB7F2BAC888D6456636] - 10/12/2014 - 08:59:37 ---A- . (.Microsoft Corporation - Run time utility for Internet Explorer.) -- C:\Windows\System32\iertutil.dll [1802752] O44 - LFC:[MD5.3F0A7F435BAB0ED4070BBCE73F1918F3] - 10/12/2014 - 08:59:38 ---A- . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll [1139712] O44 - LFC:[MD5.70DD19C20344660B1D32057603A9820D] - 10/12/2014 - 08:59:38 ---A- . (.Microsoft Corporation - Hôte des applications HTML de Microsoft(R).) -- C:\Windows\System32\mshta.exe [11776] O44 - LFC:[MD5.407FD4AAE5E119A441CCEAA4C3276DDF] - 10/12/2014 - 08:59:38 ---A- . (.Microsoft Corporation - Microsoft (R) JScript.) -- C:\Windows\System32\jscript.dll [717824] O44 - LFC:[MD5.5281C1E96FDE868A822260478694BA54] - 10/12/2014 - 08:59:38 ---A- . (.Microsoft Corporation - Microsoft ® VBScript.) -- C:\Windows\System32\vbscript.dll [421376] O44 - LFC:[MD5.117980ADC4A9E349571810D20B14BFB8] - 10/12/2014 - 08:59:38 ---A- . (.Microsoft Corporation - Synchronisation en arrière-plan des flux Mi.) -- C:\Windows\System32\msfeedsbs.dll [41472] O44 - LFC:[MD5.D3FE7135827884946E5ED4E4DD96B472] - 10/12/2014 - 08:59:39 ---A- . (.Microsoft Corporation - Microsoft Feeds Synchronization.) -- C:\Windows\System32\msfeedssync.exe [10752] O44 - LFC:[MD5.A2083D925A6677229CDE79E9F14A1FBC] - 10/12/2014 - 09:27:07 ---A- . (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\Windows\System32\schannel.dll [278528] O44 - LFC:[MD5.B46DD94B96636132B60BE333B83CF718] - 10/12/2014 - 09:29:31 ---A- . (.Microsoft Corporation - Outil de suppression de logiciels malveilla.) -- C:\Windows\System32\mrt.exe [109818608] O44 - LFC:[MD5.F074BF1F79D749FCB8C2B739651CD816] - 10/12/2014 - 09:36:22 ---A- . (.Microsoft Corporation - Microsoft Windows Codecs Library.) -- C:\Windows\System32\WindowsCodecs.dll [974848] O44 - LFC:[MD5.D7E28676D83AE6568CCF99BD01700734] - 10/12/2014 - 09:36:47 ---A- . (.Microsoft Corporation - Fichier DLL de ressources des fuseaux horai.) -- C:\Windows\System32\tzres.dll [2048] O44 - LFC:[MD5.020489FBA96D7EFB6F5A6C0C52BF83A7] - 10/12/2014 - 18:22:37 ---A- . (.Adobe Systems Incorporated - Adobe Flash Player Control Panel Applet.) -- C:\Windows\System32\FlashPlayerCPLApp.cpl [71344] O44 - LFC:[MD5.7861460CCCA86F588357B5E585D61E6B] - 10/12/2014 - 18:22:38 ---A- . (.Adobe Systems Incorporated - Adobe Flash Player Control Panel Applet.) -- C:\Windows\System32\FlashPlayerApp.exe [701104] O44 - LFC:[MD5.8E2E9CCD873ABF180F48BCAEEEBE347D] - 22/12/2014 - 19:21:28 ---A- . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\Drivers\MBAMSwissArmy.sys [114904] O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 22/12/2014 - 20:47:05 ---A- . (...) -- C:\essai.txt [0] O44 - LFC:[MD5.CF37846911106CCA5A19E56E00A50826] - 22/12/2014 - 20:58:08 ---A- . (...) -- C:\Windows\PFRO.log [314] O44 - LFC:[MD5.70FF42294446270A532AC78A24DC5903] - 23/12/2014 - 08:03:28 ---A- . (...) -- C:\Windows\setupact.log [34] O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 23/12/2014 - 08:03:28 ---A- . (...) -- C:\Windows\setuperr.log [0] O44 - LFC:[MD5.F5EF04BAA49A0EF35990B30CC581EDAE] - 23/12/2014 - 08:05:23 ---A- . (...) -- C:\Windows\System32\PerfStringBackup.INI [1690622] O44 - LFC:[MD5.B56E489C8A948974442E7F5261AF2D29] - 23/12/2014 - 08:05:23 ---A- . (...) -- C:\Windows\System32\perfc009.dat [130024] O44 - LFC:[MD5.4F6928D8F6ED19F35CB067AA3C5ACC80] - 23/12/2014 - 08:05:23 ---A- . (...) -- C:\Windows\System32\perfc00C.dat [158728] O44 - LFC:[MD5.33C1E6619DA5CFB5772DA4E2624517FA] - 23/12/2014 - 08:05:23 ---A- . (...) -- C:\Windows\System32\perfh009.dat [658070] O44 - LFC:[MD5.5A0644EEFDE8EC96845BF0D570A64E30] - 23/12/2014 - 08:05:23 ---A- . (...) -- C:\Windows\System32\perfh00C.dat [749402] O44 - LFC:[MD5.F00F65772D05C2C1D367B7C5FE7357CB] - 23/12/2014 - 08:22:01 ---A- . (...) -- C:\Windows\System32\FNTCACHE.DAT [302928] O44 - LFC:[MD5.26B0F12F9A4C267AF5B2DA35F87A6EFA] - 23/12/2014 - 14:19:43 ---A- . (...) -- C:\Windows\System32\DOErrors.log [52] O44 - LFC:[MD5.81FA1E1FDC71B1BB9050F5ED9D9CF78E] - 23/12/2014 - 16:28:17 ---A- . (...) -- C:\Windows\WindowsUpdate.log [1894341] O44 - LFC:[MD5.2D9584B1822671175139CB842A162B41] - 23/12/2014 - 19:03:32 -S-A- . (...) -- C:\Windows\bootstat.dat [67584] ~ Files: 42 Scanned in 00mn 13s ---\\ Derniers fichiers créés dans Windows Prefetcher (O45) O45 - LFCP:[MD5.DB60862DC4011DDFBA9C2A175E2E520E] - 23/12/2014 - 18:58:52 ---A- - C:\Windows\Prefetch\UTORRENT.EXE-6F83DC08.pf =>P2P.µTorrent ~ Prefetcher: 1 Scanned in 00mn 00s ---\\ Opérations et fonctions au démarrage de Windows Explorer (O46) O46 - SEH:ShellExecuteHooks - EasyBits Security Shield Hook - prevents launching insecure programs by kids - {E54729E8-BB3D-4270-9D49-7389EA579090} - C:\Windows\system32\EZUPBH~1.DLL ~ ShellExecuteHooks: Scanned in 00mn 00s ---\\ Déni du service (Local Security Authority) (O48) O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l'Éditeur de configuration de sécurité Windows.) -- C:\Windows\System32\scecli.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Package de sécurité Kerberos.) -- C:\Windows\System32\kerberos.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\Windows\System32\schannel.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Digest Access.) -- C:\Windows\System32\wdigest.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Web Service Security Package.) -- C:\Windows\System32\tspkg.dll ~ LSA: 7 Scanned in 00mn 00s ---\\ Contrôle du Safe Boot (CSB) (O49) O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\System32\Drivers\sermouse.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.) O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgrx.sys . (.Microsoft Corporation - Volume Manager Extension Driver.) -- C:\Windows\System32\Drivers\volmgrx.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\Wdf01000.sys . (.Microsoft Corporation - Runtime de l’infrastructure de pilotes en mode noyau.) -- C:\Windows\System32\Drivers\Wdf01000.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\System32\Drivers\ipnat.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\nsiproxy.sys . (.Microsoft Corporation - NSI Proxy.) -- C:\Windows\System32\Drivers\nsiproxy.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpencdd.sys . (.Microsoft Corporation - RDP Miniport.) -- C:\Windows\System32\Drivers\rdpencdd.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\System32\Drivers\sermouse.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.) O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgrx.sys . (.Microsoft Corporation - Volume Manager Extension Driver.) -- C:\Windows\System32\Drivers\volmgrx.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\Wdf01000.sys . (.Microsoft Corporation - Runtime de l’infrastructure de pilotes en mode noyau.) -- C:\Windows\System32\Drivers\Wdf01000.sys ~ CSB: 15 Scanned in 00mn 00s ---\\ Clé de registre Shell MountPoints2 (MPSK) (O51) O51 - MPSK:{3b93b9a1-c8cd-11df-9292-001d7277d79b}\AutoRun\command. (...) -- F:\YuuWaa.exe (.not file.) O51 - MPSK:{cad48652-ba04-11dd-92ea-806e6f6e6963}\AutoRun\command. (...) -- E:\Setup.exe (.not file.) O51 - MPSK:{f1b45b54-fde0-11de-90de-001d7277d79b}\AutoRun\command. (...) -- G:\LaunchU3.exe (.not file.) O51 - MPSK:{fcd6c2c0-d73c-11de-a592-001d7277d79b}\AutoRun\command - Clé orpheline ~ Keys: Scanned in 00mn 00s ---\\ Recherche d'infection sur les pilotes (HKLM)(TDSD) (O52) O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Codec Cinepak®.) -- C:\Windows\System32\iccvid.dll O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm ~ TDSD: 3 Scanned in 00mn 00s ---\\ Enumération des clés de registre StartupReg (SMSR) (O53) O53 - SMSR:HKLM\...\startupreg\Adobe Reader Speed Launcher [Key] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe O53 - SMSR:HKLM\...\startupreg\Facebook Update [Key] . (.Facebook Inc. - Programme d'installation de Facebook.) -- C:\Users\Propriétaire\AppData\Local\Facebook\Update\FacebookUpdate.exe O53 - SMSR:HKLM\...\startupreg\Free Download Manager [Key] . (...) -- C:\Program Files\Free Download Manager\fdm.exe (.not file.) O53 - SMSR:HKLM\...\startupreg\iTunesHelper [Key] . (...) -- C:\Program Files\iTunes\iTunesHelper.exe (.not file.) O53 - SMSR:HKLM\...\startupreg\QuickTime Task [Key] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files\QuickTime\QTTask.exe O53 - SMSR:HKLM\...\startupreg\Skype [Key] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe =>.Skype Technologies S.A. O53 - SMSR:HKLM\...\startupreg\SunJavaUpdateSched [Key] . (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe =>.Oracle Corporation O53 - SMSR:HKLM\...\startupreg\swg [Key] . (...) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (.not file.) ~ SMSR Keys: 8 Scanned in 00mn 00s ---\\ Enumération des clés de registre SecurityProviders (MCSP) (O54) O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - TS Single Sign On Security Package.) -- C:\Windows\System32\credssp.dll O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - TS Single Sign On Security Package.) -- C:\Windows\System32\credssp.dll ~ MSCP: 2 Scanned in 00mn 00s ---\\ Enumération des clés de registre PoliciesSystem (MWPS) (O55) O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=2 O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=1 O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1 O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=1 O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1 O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1 O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=1 O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0 O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0 O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=0 O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=0 O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0 O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1 O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1 O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0 O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0 O55 - MWPS:[HKLM\...\Policies\System] - "HideFastUserSwitching"=0 O55 - MWPS:[HKCU\...\Policies\System] - "DisableLockWorkstation"=0 O55 - MWPS:[HKCU\...\Policies\System] - "DisableTaskMgr"=0 O55 - MWPS:[HKCU\...\Policies\System] - "DisableChangePassword"=0 ~ MWPS: 20 Scanned in 00mn 00s ---\\ Enumération des clés de registre PoliciesExplorer (MWPE) (O56) O56 - MWPE:[HKCU\...\policies\Explorer] - "NoLogoff"=0 O56 - MWPE:[HKCU\...\policies\Explorer] - "NoClose"=0 O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveTypeAutoRun"=0 O56 - MWPE:[HKLM\...\policies\Explorer] - "BindDirectlyToPropertySetStorage"=0 ~ MWPE Keys: 4 Scanned in 00mn 00s ---\\ Liste des pilotes du système (SDL) (O58) O58 - SDL:31/07/2014 - 19:52:43 ---A- . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\Drivers\48230029.sys [110296] O58 - SDL:21/01/2008 - 03:23:21 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\Drivers\adp94xx.sys [422968] O58 - SDL:21/01/2008 - 03:23:25 ---A- . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\System32\Drivers\adpahci.sys [300600] O58 - SDL:21/01/2008 - 03:23:26 ---A- . (.Adaptec, Inc. - Adaptec LH Ultra160 Driver (x86).) -- C:\Windows\System32\Drivers\adpu160m.sys [101432] O58 - SDL:21/01/2008 - 03:23:27 ---A- . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver.) -- C:\Windows\System32\Drivers\adpu320.sys [149560] O58 - SDL:21/01/2008 - 03:23:00 ---A- . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\Windows\System32\Drivers\aliide.sys [17464] O58 - SDL:21/01/2008 - 03:23:23 ---A- . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\System32\Drivers\arc.sys [79416] O58 - SDL:21/01/2008 - 03:23:24 ---A- . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\System32\Drivers\arcsas.sys [79928] O58 - SDL:27/04/2008 - 10:07:44 ---A- . (.Atheros Communications, Inc. - Atheros Extensible Wireless LAN device driver.) -- C:\Windows\System32\Drivers\athr.sys [909824] O58 - SDL:02/11/2006 - 08:30:53 ---A- . (.Broadcom Corporation - BCM 802.11g Network Adapter wireless driver.) -- C:\Windows\System32\Drivers\BCMWL6.SYS [464384] O58 - SDL:12/08/2008 - 17:40:32 ---A- . (.BitDefender S.R.L. Bucharest, ROMANIA - BitDefender BehavioralScanner Filter Driver.) -- C:\Windows\System32\Drivers\bdfm.sys.bak [108864] O58 - SDL:02/11/2006 - 08:09:42 ---A- . (...) -- C:\Windows\System32\ANSI.SYS [9029] O58 - SDL:02/11/2006 - 08:09:45 ---A- . (...) -- C:\Windows\System32\country.sys [27097] O58 - SDL:06/09/2010 - 08:11:32 ---A- . (...) -- C:\Windows\System32\FsUsbExDisk.Sys [36640] O58 - SDL:02/11/2006 - 08:09:41 ---A- . (...) -- C:\Windows\System32\HIMEM.SYS [4768] O58 - SDL:02/11/2006 - 08:09:44 ---A- . (...) -- C:\Windows\System32\KEY01.SYS [42809] O58 - SDL:02/11/2006 - 08:09:44 ---A- . (...) -- C:\Windows\System32\KEYBOARD.SYS [42537] O58 - SDL:02/11/2006 - 08:09:29 ---A- . (...) -- C:\Windows\System32\NTDOS.SYS [27866] O58 - SDL:02/11/2006 - 08:09:35 ---A- . (...) -- C:\Windows\System32\NTDOS404.SYS [29146] O58 - SDL:02/11/2006 - 08:09:38 ---A- . (...) -- C:\Windows\System32\NTDOS411.SYS [29370] O58 - SDL:02/11/2006 - 08:09:40 ---A- . (...) -- C:\Windows\System32\NTDOS412.SYS [29274] O58 - SDL:02/11/2006 - 08:09:31 ---A- . (...) -- C:\Windows\System32\NTDOS804.SYS [29146] O58 - SDL:02/11/2006 - 08:09:20 ---A- . (...) -- C:\Windows\System32\NTIO.SYS [33952] O58 - SDL:02/11/2006 - 08:09:23 ---A- . (...) -- C:\Windows\System32\NTIO404.SYS [34672] O58 - SDL:02/11/2006 - 08:09:24 ---A- . (...) -- C:\Windows\System32\NTIO411.SYS [35776] O58 - SDL:02/11/2006 - 08:09:26 ---A- . (...) -- C:\Windows\System32\NTIO412.SYS [35536] O58 - SDL:02/11/2006 - 08:09:22 ---A- . (...) -- C:\Windows\System32\NTIO804.SYS [34672] O58 - SDL:26/04/2004 - 17:21:00 R--A- . (.Intellon, Inc. - PCAUSA NDIS 4.0 Protocol Driver.) -- C:\Windows\System32\PLCNDIS4.SYS [17584] O58 - SDL:26/04/2004 - 17:11:00 R--A- . (.Intellon, Inc. - PCAUSA NDIS 5.0 Protocol Driver.) -- C:\Windows\System32\PLCNDIS5.SYS [17280] ~ Drivers: 29 Scanned in 00mn 06s ---\\ Recherche heuristique Magic.control (HSMI) (O59) O59 - HSMI:Heuristic Search MagicControl Infection - (...) -- C:\Users\Propriétaire\AppData\Local\ugoge_nav.dat O59 - HSMI:Heuristic Search MagicControl Infection - (...) -- C:\Users\Propriétaire\AppData\Local\ugoge_navps.dat O59 - HSMI:Heuristic Search MagicControl Infection - (...) -- C:\Users\Propriétaire\AppData\Local\ugoge.dat ~ Files: Scanned in 00mn 00s ---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61) O61 - LFC: 20/12/2014 - 19:07:59 ---A- . (...) -- C:\Users\Propriétaire\AppData\Local\Temp\Quarantine.exe [601088] O61 - LFC: 22/12/2014 - 19:08:07 ---A- . (...) -- C:\Users\Propriétaire\AppData\Roaming\ZHP\ZHPCleaner.exe [1407488] =>.Nicolas Coolman O61 - LFC: 22/12/2014 - 19:08:10 ---A- . (...) -- C:\Users\Propriétaire\Downloads\ZHPCleaner.exe [1407488] =>.Nicolas Coolman ~ 619 Fichiers temporaires (Temporary files) ~ 134 Fichiers cookies (Cookies files) ~ Files: 3 Scanned in 00mn 27s ---\\ Liste des outils de désinfection (LATC) (O63) O63 - Logiciel: ZHPDiag 2014 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 =>.Nicolas Coolman ~ ADS: Scanned in 00mn 00s ---\\ Liste les services legacy du registre (LALS) (O64) O64 - Services: CurCS - 21/01/2008 - C:\Windows\System32\drivers\adp94xx.sys (adp94xx) .(.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) - LEGACY_ADP94XX O64 - Services: CurCS - 21/01/2008 - C:\Windows\System32\drivers\adpahci.sys (adpahci) .(.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) - LEGACY_ADPAHCI O64 - Services: CurCS - 21/01/2008 - C:\Windows\System32\drivers\adpu160m.sys (adpu160m) .(.Adaptec, Inc. - Adaptec LH Ultra160 Driver (x86).) - LEGACY_ADPU160M O64 - Services: CurCS - 21/01/2008 - C:\Windows\System32\drivers\adpu320.sys (adpu320) .(.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver.) - LEGACY_ADPU320 O64 - Services: CurCS - 02/11/2006 - C:\Windows\System32\drivers\djsvs.sys (aic78xx) .(.Adaptec, Inc. - Adaptec Ultra SCSI miniport.) - LEGACY_AIC78XX O64 - Services: CurCS - 21/01/2008 - C:\Windows\System32\drivers\aliide.sys (aliide) .(.Acer Laboratories Inc. - ALi mini IDE Driver.) - LEGACY_ALIIDE O64 - Services: CurCS - 21/01/2008 - C:\Windows\System32\drivers\arc.sys (arc) .(.Adaptec, Inc. - Adaptec RAID Storport Driver.) - LEGACY_ARC O64 - Services: CurCS - 21/01/2008 - C:\Windows\System32\drivers\arcsas.sys (arcsas) .(.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) - LEGACY_ARCSAS O64 - Services: CurCS - 21/01/2008 - C:\Windows\System32\drivers\cmdide.sys (cmdide) .(.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) - LEGACY_CMDIDE O64 - Services: CurCS - 21/01/2008 - C:\Windows\System32\drivers\elxstor.sys (elxstor) .(.Emulex - Storport Miniport Driver for LightPulse HBA.) - LEGACY_ELXSTOR O64 - Services: CurCS - 06/09/2010 - C:\Windows\system32\FsUsbExDisk.sys (FsUsbExDisk) .(...) - LEGACY_FSUSBEXDISK O64 - Services: CurCS - 21/01/2008 - C:\Windows\System32\drivers\hpcisss.sys (HpCISSs) .(.Hewlett-Packard Company - Smart Array Storport Driver.) - LEGACY_HPCISSS O64 - Services: CurCS - 21/01/2008 - C:\Windows\System32\drivers\iastorv.sys (iaStorV) .(.Intel Corporation - Intel Matrix Storage Manager driver (base).) - LEGACY_IASTORV O64 - Services: CurCS - 02/11/2006 - C:\Windows\System32\drivers\iirsp.sys (iirsp) .(.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) - LEGACY_IIRSP O64 - Services: CurCS - 02/11/2006 - C:\Windows\System32\drivers\iteatapi.sys (iteatapi) .(.Integrated Technology Express, Inc. - ITE IT8211 ATA/ATAPI SCSI miniport.) - LEGACY_ITEATAPI O64 - Services: CurCS - 02/11/2006 - C:\Windows\System32\drivers\iteraid.sys (iteraid) .(.Integrated Technology Express, Inc. - ITE IT8212 ATA RAID SCSI miniport.) - LEGACY_ITERAID O64 - Services: CurCS - 21/01/2008 - C:\Windows\System32\drivers\lsi_fc.sys (LSI_FC) .(.LSI Logic - LSI Logic Fusion-MPT FC Driver (StorPort).) - LEGACY_LSI_FC O64 - Services: CurCS - 21/01/2008 - C:\Windows\System32\drivers\lsi_sas.sys (LSI_SAS) .(.LSI Logic - LSI Logic Fusion-MPT SAS Driver (StorPort).) - LEGACY_LSI_SAS O64 - Services: CurCS - 21/01/2008 - C:\Windows\System32\drivers\lsi_scsi.sys (LSI_SCSI) .(.LSI Logic - LSI Logic Fusion-MPT SCSI Driver (StorPort).) - LEGACY_LSI_SCSI O64 - Services: CurCS - 21/01/2008 - C:\Windows\System32\drivers\megasas.sys (megasas) .(.LSI Corporation - MEGASAS RAID Controller Driver for Windows.) - LEGACY_MEGASAS O64 - Services: CurCS - 21/01/2008 - C:\Windows\System32\drivers\megasr.sys (MegaSR) .(.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) - LEGACY_MEGASR O64 - Services: CurCS - 02/11/2006 - C:\Windows\System32\drivers\mraid35x.sys (Mraid35x) .(.LSI Logic Corporation - MegaRAID RAID Controller Driver for Windows.) - LEGACY_MRAID35X O64 - Services: CurCS - 02/11/2006 - C:\Windows\System32\drivers\nfrd960.sys (nfrd960) .(.IBM Corporation - IBM ServeRAID Controller Driver.) - LEGACY_NFRD960 O64 - Services: CurCS - 21/01/2008 - C:\Windows\System32\drivers\nvraid.sys (nvraid) .(.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) - LEGACY_NVRAID O64 - Services: CurCS - 21/01/2008 - C:\Windows\System32\drivers\nvstor.sys (nvstor) .(.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) - LEGACY_NVSTOR O64 - Services: CurCS - 21/01/2008 - C:\Windows\System32\drivers\ql2300.sys (ql2300) .(.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) - LEGACY_QL2300 O64 - Services: CurCS - 02/11/2006 - C:\Windows\System32\drivers\ql40xx.sys (ql40xx) .(.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) - LEGACY_QL40XX O64 - Services: CurCS - 02/11/2006 - C:\Windows\System32\Drivers\secdrv.sys (secdrv) .(.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) - LEGACY_SECDRV O64 - Services: CurCS - 21/01/2008 - C:\Windows\System32\drivers\sisraid4.sys (SiSRaid4) .(.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) - LEGACY_SISRAID4 O64 - Services: CurCS - 02/11/2006 - C:\Windows\System32\drivers\symc8xx.sys (Symc8xx) .(.LSI Logic - LSI Logic 8XX SCSI Miniport Driver.) - LEGACY_SYMC8XX O64 - Services: CurCS - 02/11/2006 - C:\Windows\System32\drivers\sym_hi.sys (Sym_hi) .(.LSI Logic - LSI Logic Hi-Perf SCSI Miniport Driver.) - LEGACY_SYM_HI O64 - Services: CurCS - 02/11/2006 - C:\Windows\System32\drivers\sym_u3.sys (Sym_u3) .(.LSI Logic - LSI Logic Ultra160 SCSI Miniport Driver.) - LEGACY_SYM_U3 O64 - Services: CurCS - 21/01/2008 - C:\Windows\System32\drivers\uliahci.sys (uliahci) .(.ULi Electronics Inc. - ULi SATA Controller Driver.) - LEGACY_ULIAHCI O64 - Services: CurCS - 02/11/2006 - C:\Windows\System32\drivers\ulsata.sys (UlSata) .(.Promise Technology, Inc. - Promise Ultra/Sata Series Driver for Win200.) - LEGACY_ULSATA O64 - Services: CurCS - 21/01/2008 - C:\Windows\System32\drivers\ulsata2.sys (ulsata2) .(.Promise Technology, Inc. - Promise SATAII150 Series Windows Drivers.) - LEGACY_ULSATA2 O64 - Services: CurCS - 21/01/2008 - C:\Windows\System32\drivers\viaide.sys (viaide) .(.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) - LEGACY_VIAIDE O64 - Services: CurCS - 21/01/2008 - C:\Windows\System32\drivers\vsmraid.sys (vsmraid) .(.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) - LEGACY_VSMRAID O64 - Services: CurCS - 18/10/2007 - C:\Windows\System32\DRIVERS\xaudio.sys (XAudio) .(.Conexant Systems, Inc. - Modem Audio Device Driver.) - LEGACY_XAUDIO ~ Legacy: 347 Scanned in 00mn 00s ---\\ Associations Shell Spawning (O67) O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe =>.Microsoft Corporation O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d'événements.) -- C:\Windows\System32\eventvwr.exe O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft (R) Windows Based Script Host.) -- C:\Windows\System32\WScript.exe O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S O67 - Shell Spawning: <.html> [HKCU\..\open\Command] (.Not Key.) O67 - Shell Spawning: <.com> <>[HKU\..\open\Command] (.Not Key.) O67 - Shell Spawning: <.exe> <>[HKU\..\open\Command] (.Not Key.) ~ FASS Keys: 13 Scanned in 00mn 00s ---\\ Menu de démarrage Internet (SMI) (O68) O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe ~ Keys: Scanned in 00mn 00s ---\\ Recherche d'infection sur les navigateurs internet (SBI) (O69) O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - http://www.bing.com O69 - SBI: SearchScopes [HKCU] {603E6AD3-A2E8-4818-91B3-1A50469A0ACF} - (Yahoo!) - http://fr.search.yahoo.com O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} [DefaultScope] - (Google) - http://www.google.com O69 - SBI: SearchScopes [HKCU] {BE28C22E-F666-424d-B5FD-125C4AFEE34E} - (Chercher) - http://search.myheritage.com O69 - SBI: SearchScopes [HKCU] {DDC10FE4-AB59-4A11-901B-B809A63479DE} - (Flickr) - http://www.flickr.com ~ Keys: Scanned in 00mn 00s ---\\ Enumère les service demarrés par Svchost (SSS) (O83) O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d’application.) -- C:\Windows\System32\aelupsvc.dll [24576] O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll [62976] O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [247808] O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes à puce Microsoft.) -- C:\Windows\System32\certprop.dll [40448] O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes à puce Microsoft.) -- C:\Windows\System32\certprop.dll [40448] O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\System32\srvsvc.dll [125952] O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\System32\gpsvc.dll [576512] O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\ikeext.dll [444928] O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Service Audio Windows.) -- C:\Windows\System32\Audiosrv.dll [316928] O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’accès distant.) -- C:\Windows\System32\rasauto.dll [90624] O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire de connexions d'accès distant.) -- C:\Windows\System32\rasmans.dll [262144] O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll [68608] O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements système (SENS).) -- C:\Windows\System32\sens.dll [47104] O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l'application d'assistance à Microsoft NAT.) -- C:\Windows\System32\ipnathlp.dll [288256] O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM).) -- C:\Windows\System32\tapisrv.dll [242688] O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gestionnaire des connexions distantes Terminal Server.) -- C:\Windows\System32\termsrv.dll [449536] O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Update.) -- C:\Windows\System32\wuaueng.dll [1933848] O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière-plan.) -- C:\Windows\System32\qmgr.dll [758784] O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [247808] O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur un réseau IPv4..) -- C:\Windows\System32\iphlpsvc.dll [200704] O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d'ouverture de session secondaire.) -- C:\Windows\system32\seclogon.dll [19968] O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll [33280] O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\System32\iscsiexe.dll [111616] O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédias.) -- C:\Windows\System32\mmcss.dll [45056] O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll [153088] O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll [57344] O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll [162304] O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\System32\schedsvc.dll [601600] O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service de configuration des services Terminal Server.) -- C:\Windows\System32\sessenv.dll [84992] O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\System32\browser.dll [81920] O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\Windows\System32\kmsvc.dll [68096] O83 - Search Svchost Services: ezSharedSvc (ezSharedSvc) . (.EasyBits Sofware AS - Shared EasyBits services for Windows.) -- C:\Windows\System32\ezsvc7.dll [129992] ~ Services: 32 Scanned in 00mn 00s ---\\ Recherche particulière à la racine du système (SPRF) (O84) [MD5.251827BEF62CE236F7E8259C81FDA271] [SPRF][31/01/2009] (...) -- C:\ProgramData\ezsid.dat [32] [MD5.344F55D03E182B71D3626224E955F290] [SPRF][23/12/2014] (...) -- C:\ProgramData\nvModes.dat [91008] [MD5.D57C1A78B6F3C91C457085885DD5DB87] [SPRF][18/01/2012] (...) -- C:\Users\Propriétaire\AppData\Roaming\b1ewy2251znadiht.dat [8] [MD5.D67DDF09CC15E77EAE7CB2BB81C22D0F] [SPRF][18/11/2014] (...) -- C:\Users\Propriétaire\AppData\Roaming\key.dat [636] [MD5.00DA37F9FABDCF286A258A56A8945FC7] [SPRF][12/11/2013] (...) -- C:\Users\Propriétaire\AppData\Roaming\wklnhst.dat [132] [MD5.DE2EB468A14E00F9A99326C6C9C07075] [SPRF][02/02/2009] (.Adobe Systems Incorporated - Adobe® Flash® Player ActiveX Installer.) -- C:\Windows\Downloaded Program Files\FP_AX_CAB_INSTALLER.exe [1914440] [MD5.6F678556A6FCE04FC94F3435F6313705] [SPRF][24/11/2008] (...) -- C:\Windows\Downloaded Program Files\unagiuninst.exe [38428] ~ Files: 7 Scanned in 00mn 00s ---\\ Liste des exceptions du parefeu (FirewallRules) (O87) O87 - FAEL: "{FA20E3A0-044B-4A07-A727-498FC4E63235}" | In - None - P6 - TRUE | .(.BitTorrent Inc. - µTorrent.) -- C:\Users\Propriétaire\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent O87 - FAEL: "{2DCA90C0-1B61-4A4D-9B89-4A300BA3750A}" | In - None - P17 - TRUE | .(.BitTorrent Inc. - µTorrent.) -- C:\Users\Propriétaire\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent ~ Firewall: 2 Scanned in 00mn 00s ---\\ Enumère les codes produits des logiciels (PUC) (O90) O90 - PUC: "7E685771E24E83F4381D1DB5A45F7B41" . (.Delta Chrome Toolbar.) -- C:\Windows\Installer\{177586E7-E42E-4F38-83D1-D15B4AF5B714}\Delta.ico =>Toolbar.DeltaSearch ~ Update Products: 1 Scanned in 00mn 00s ---\\ Recherche des packages WindowsInstaller (WIS) (O93) (NTFS) [MD5.B4E60579B30F05282DD3EFFFC1A93E6F] [WIS][02/02/2013] (.DeltaInstaller - Delta Chrome Toolbar.) -- C:\Windows\Installer\29ae947.msi [538624] =>Toolbar.DeltaSearch ~ WIS: 1 Scanned in 00mn 03s ---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped) SS - | Demand 10/12/2014 267440 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe SS - | Demand 24/07/2007 181800 | (GameConsoleService) . (.WildTangent, Inc..) - C:\Program Files\HP Games\My HP Game Console\GameConsoleService.exe SS - | Auto 27/11/2012 116648 | (gupdate) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe SS - | Demand 27/11/2012 116648 | (gupdatem) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe SS - | Demand 22/10/2004 73728 | (IDriverT) . (.Macrovision Corporation.) - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe SS - | Auto 07/02/2013 161384 | (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files\Skype\Updater\Updater.exe SS - | Auto 21/01/2008 21504 | C:\Program Files\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe SR - | Auto 12/12/2008 238888 | (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe SR - | Demand 03/04/2008 193840 | (Com4QLBEx) . (.Hewlett-Packard Development Company, L.P..) - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe SR - | Auto 21/01/2008 21504 | C:\Windows\System32\ezsvc7.dll (ezSharedSvc) . (.EasyBits Sofware AS.) - C:\Windows\System32\svchost.exe SR - | Auto 06/09/2010 217088 | (FsUsbExService) . (.Teruten.) - C:\Windows\system32\FsUsbExService.exe SR - | Auto 16/06/2008 94208 | (HP Health Check Service) . (.Hewlett-Packard.) - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe SR - | Demand 01/05/2008 165192 | (hpqwmiex) . (.Hewlett-Packard Development Company, L.P..) - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe SR - | Auto 26/02/2008 73728 | (LightScribeService) . (.Hewlett-Packard Company.) - C:\Program Files\Common Files\LightScribe\LSSrvc.exe SR - | Auto 22/08/2014 22192 | (MsMpSvc) . (.Microsoft Corporation.) - c:\Program Files\Microsoft Security Client\MsMpEng.exe SR - | Auto 09/06/2008 196608 | (nvsvc) . (.NVIDIA Corporation.) - C:\Windows\System32\nvvsvc.exe SR - | Auto 26/04/2008 361808 | (Recovery Service for Windows) . (...) - C:\Windows\SMINST\BLService.exe SR - | Auto 09/01/2007 272024 | (RichVideo) . (...) - C:\Program Files\CyberLink\Shared Files\RichVideo.exe SR - | Auto 21/01/2008 21504 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe SR - | Auto 18/10/2007 386560 | (XAudioService) . (.Conexant Systems, Inc..) - C:\Windows\System32\DRIVERS\xaudio.exe ~ Services: Scanned in 00mn 13s ---\\ Recherche d'infection sur le Master Boot Record (MBR)(O80) Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net Run by Propriétaire at 23/12/2014 19:09:49 device: opened successfully user: MBR read successfully Disk trace: kernel: MBR read successfully user & kernel MBR OK ~ MBR: 9 Scanned in 00mn 02s ---\\ Recherche d'infection sur le Master Boot Record (MBRCheck)(O80) Written by ad13, http://ad13.geekstog Run by Propriétaire at 23/12/2014 19:09:51 ********* Dump file Name ********* C:\PhysicalDisk0_MBR.bin ~ MBR: Scanned in 00mn 04s ---\\ Scan Additionnel (O88) Database Version : 13026 - (10/12/2014) Clés trouvées (Keys found) : 7 Valeurs trouvées (Values found) : 2 Dossiers trouvés (Folders found) : 2 Fichiers trouvés (Files found) : 3 [HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\yackeiq] =>Adware.Favorit^ [HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\uTorrent] =>P2P.BitTorrent^ [HKLM\Software\Classes\Installer\Features\7E685771E24E83F4381D1DB5A45F7B41] =>Toolbar.DeltaSearch [HKLM\Software\Classes\Installer\Products\7E685771E24E83F4381D1DB5A45F7B41] =>Toolbar.DeltaSearch [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\7E685771E24E83F4381D1DB5A45F7B41] =>Toolbar.DeltaSearch [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E5C8B5FB7CB5DD447A0BAAAF637FBD77] =>PUP.ClaroSearch [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EF96568971BEAC14B8815883832BD484] =>PUP.ClaroSearch C:\Users\Propriétaire\AppData\Roaming\uTorrent =>P2P.µTorrent^ C:\Program Files\Family Toolbar =>Toolbar.Agent C:\Users\Propriétaire\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent^ [HKCU\Software\BitTorrent] =>P2P.BitTorrent^ C:\Windows\Installer\29ae947.msi =>Toolbar.DeltaSearch^ ~ Additionnel Scan: 310819 Items scanned in 00mn 41s ---\\ Informations complémentaires sur les modules ~ http://nicolascoolman.fr/r5-internet-explorer-proxy-management-iepm/ =>.Internet Explorer, Proxy Management (R5) ~ http://nicolascoolman.fr/o2-browser-helper-objects-de-navigateur/ =>.Browser Helper Objects de navigateur (O2) ~ http://nicolascoolman.fr/o4-applications-demarrees-par-le-registre/ =>.Applications lancées au démarrage du système (O4) ~ http://nicolascoolman.fr/o51-mountpoints2-shell-key-mpsk/ =>.Clé de registre Shell MountPoints2 (MPSK) (O51) ~ AMI: 4 Scanned in 00mn 00s ---\\ Récapitulatif des détections trouvées sur votre station http://nicolascoolman.fr/adware-favorit =>Adware.Favorit http://nicolascoolman.fr/toolbar-deltasearch =>Toolbar.DeltaSearch http://nicolascoolman.fr/pup-clarosearch =>PUP.ClaroSearch http://www.nicolascoolman.fr/blog/ =>Toolbar.Agent ~ MSI: 4 link(s) detected in 00mn 00s ---\\ Alert Messages WARNING : Adware.Navipromo/MagicControl found in registry or folder End of the scan (1306 lines in 03mn 44s)(0)