cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

Rapport de ZHPDiag v2013.7.3.4 par Nicolas Coolman, Update du 03/07/2013
Run by dav at 04/07/2013 16:14:40
WebSite: http://nicolascoolman.webs.com
State : Version � jour.
WhiteList : Enable
High Elevated Privileges : OK
UAC : Activate by user


---\\ Web Browser
MSIE: Internet Explorer v10.0.9200.16618
MFIE: Mozilla Firefox 22.0

---\\ Windows Product Information
~ Langage: Fran�ais
Windows Vista Home Premium Edition, 64-bit (Build 6000)
Windows Server License Manager Script : OK
~ Windows(R) 7, OEM_SLP channel
System Locked Preinstallation (OEM_SLP) : OK
Windows ID Activation : OK
~ Windows Partial Key : 7QJB7
Windows License : OK
~ Windows Remaining Initializations Number : 2
Software Protection Service (Protection logicielle) : OK
Windows Automatic Updates : OK

---\\ System Protection
AVG 2013 v13.0.3204
Microsoft Security Client FR-FR Language Pack v2.1.1116.0
McAfee Security Scan Plus v3.0.318.3

---\\ System Optimizer
CCleaner v3.23 =>Piriform Ltd

---\\ Peer To Peer (P2P)
�Torrent v3.3.0.29625 =>P2P.�Torrent

---\\ Software Update
Adobe Flash Player 11 Plugin
Adobe Reader X
Java 7 Update 25

---\\ System Information
~ Processor: Intel64 Family 6 Model 23 Stepping 10, GenuineIntel
~ Operating System: 64 Bits
Boot mode: Normal (Normal boot)
Total RAM: 3066 MB (59% free)
System Restore: Activ� (Enable)
System drive C: has 276 GB (60%) free of 453 GB

---\\ Logged in mode
~ Computer Name: DAV-PC
~ User Name: dav
~ All Users Names: HomeGroupUser$, dav, Administrateur,
~ Unselected Option: None
Logged in as Administrator

---\\ Environnement Variables
~ System Unit : C:\
~ %AppData% : C:\Users\dav\AppData\Roaming\
~ %Desktop% : C:\Users\dav\Desktop\
~ %Favorites% : C:\Users\dav\Favorites\
~ %LocalAppData% : C:\Users\dav\AppData\Local\
~ %StartMenu% : C:\Users\dav\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\

---\\ DOS/Devices
C:\ Hard drive, Flash drive, Thumb drive (Free 276 Go of 453 Go)
D:\ CD-ROM drive (Not Inserted)



---\\ Security Center & Tools Informations
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : Out Of Date
~ Security Center: 37 Legitimates Filtered in 00mn 00s



---\\ Recherche particuli�re de fichiers g�n�riques
[MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorateur Windows.) (.25/02/2011 - 07:19:30.) -- C:\Windows\Explorer.exe [2871808]
[MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de d�marrage de Windows.) (.14/07/2009 - 02:39:52.) -- C:\Windows\System32\Wininit.exe [129024]
[MD5.12716D987D475B051F35895659159705] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.17/05/2013 - 01:59:03.) -- C:\Windows\System32\wininet.dll [2241024]
[MD5.1151B1BAA6F350B1DB6598E0FEA7C457] - (.Microsoft Corporation - Application d�ouverture de session Windows.) (.20/11/2010 - 14:25:30.) -- C:\Windows\System32\Winlogon.exe [390656]
[MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Biblioth�que de licences.) (.20/11/2010 - 14:27:26.) -- C:\Windows\System32\sppcomapi.dll [232448]
[MD5.1C7857B62DE5994A75B054A9FD4C3825] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.28/12/2011 - 04:59:24.) -- C:\Windows\system32\Drivers\AFD.sys [498688]
[MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 - 02:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128]
[MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/07/2009 - 00:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160]
[MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.20/11/2010 - 10:19:21.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456]
[MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.20/11/2010 - 10:26:32.) -- C:\Windows\system32\Drivers\DfsC.sys [102400]
[MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.20/11/2010 - 11:43:43.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368]
[MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) (.14/07/2009 - 00:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472]
[MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.14/07/2009 - 01:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224]
[MD5.A5D9106A73DC88564C825D317CAC68AC] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.27/04/2011 - 03:40:40.) -- C:\Windows\system32\Drivers\MRxSmb.sys [158208]
[MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) (.20/11/2010 - 10:23:20.) -- C:\Windows\system32\Drivers\netBT.sys [261632]
[MD5.B98F8C6E31CD07B2E6F71F7F648E38C0] - (.Microsoft Corporation - Pilote du syst�me de fichiers NT.) (.12/04/2013 - 15:45:08.) -- C:\Windows\system32\Drivers\ntfs.sys [1656680]
[MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parall�le.) (.14/07/2009 - 01:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280]
[MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.20/11/2010 - 11:52:35.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [129536]
[MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.14/07/2009 - 01:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184]
[MD5.DDAD5A7AB24D8B65F8D724F5C20FD806] - (.Microsoft Corporation - TDI Translation Driver.) (.20/11/2010 - 10:21:56.) -- C:\Windows\system32\Drivers\tdx.sys [119296]
[MD5.0D08D2F3B3FF84E433346669B5E0F639] - (.Microsoft Corporation - Pilote de clich� instantan� du volume.) (.20/11/2010 - 14:34:02.) -- C:\Windows\system32\Drivers\volsnap.sys [295808]
~ Generic Processes: Scanned in 00mn 00s



---\\ Etat des fichiers cach�s (Cach�/Total)
~ Mes images (My Pictures) : 2/1119
~ Mes musiques (My Musics) : 10/125
~ Mes Videos (My Videos) : 2/3
~ Mes Favoris (My Favorites) : 1/29
~ Mes Documents (My Documents) : 2/1599
~ Mon Bureau (My Desktop) : 1/2767
~ Menu demarrer (Programs) : 1/31
~ Hidden Files: Scanned in 00mn 03s



---\\ Processus lanc�s
[MD5.6FDE63991B9154968C89FAEAC72C56FB] - (.Orange - Assistance Livebox.) -- C:\Program Files (x86)\Orange\Assistance Livebox\AssistanceLivebox.exe [149560] [PID.2284]
[MD5.66295B0D0FB2292C6D62904F5C3DE0B2] - (...) -- C:\Program Files (x86)\Orange\Orange Installer\OrangeInstaller.exe [561320] [PID.2296]
[MD5.095184B28B8414A6D2D09C1CE7C7B86F] - (.Orange - Executable Orange Inside.) -- C:\Users\dav\AppData\Roaming\Orange\OrangeInside\one\OrangeInside.exe [1530520] [PID.2320]
[MD5.5AF1E9600E3FF841E522703A4993ED0C] - (.Intel Corporation - Event Monitor User Notification Tool.) -- C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe [186904] [PID.2204]
[MD5.89F7B7CCC82D7E6FF9832FE3D24988C4] - (.Egis Technology Inc. - MyWinLocker.) -- C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe [349552] [PID.2220]
[MD5.EADCEB89DD46DA2A5560CA2AF016A6A6] - (.Pas de propri�taire - DefaultSettingEXE MFC Application.) -- C:\Windows\PLFSetI.exe [206208] [PID.3020]
[MD5.775DC2AE72F972935703ADA4FFDF3749] - (.Orange - MailNotifier.) -- C:\Program Files (x86)\Orange\MailNotifier\MailNotifier.exe [888480] [PID.3804]
[MD5.8EEFD0B92F46B6762A5EC41EF55F7043] - (.TomTom - System Tray application for TomTom HOME.) -- C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe [248208] [PID.3968]
[MD5.2782D83D9B1071E28E2A4D9C6F5307C6] - (.NewTech Infosystems, Inc. - Acer Backup Manager.) -- C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe [260608] [PID.4036]
[MD5.27964C4676D0F4B34DB7332AFA2B1474] - (.Egis Technology Inc. - PMM Update Application.) -- C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe [401192] [PID.4068]
[MD5.ECF45E3FC8C63E44ED45D38A8672E7F1] - (.Hewlett-Packard Co. - HP Digital Imaging Monitor.) -- C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe [275768] [PID.4092]
[MD5.BD713579A87D698E1F2158CE10E48130] - (.McAfee, Inc. - McAfee Security Scanner Scheduler.) -- C:\Program Files (x86)\McAfee Security Scan\3.0.318\SSScheduler.exe [272248] [PID.3424]
[MD5.6C695B04E2E29459CDC2E5C0970B883B] - (.Egis Technology Inc. - EgisUpdate Release Application.) -- C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe [201512] [PID.4180]
[MD5.56D1890D74A8999F756E338210846AF1] - (.Dritek System Inc. - Launch Manager Keyboard Application.) -- C:\Program Files (x86)\Launch Manager\LManager.exe [1094736] [PID.5480]
[MD5.D93B31DAEF7F116CE8192E266D557912] - (.CyberLink Corp. - Acer Arcade Deluxe Resident Program.) -- C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe [419112] [PID.5496]
[MD5.FCE1FAAE8DE25340FB6B20F0099C230F] - (...) -- C:\Program Files (x86)\Orange\Logiciel de Connexion Orange\HuaweiE1752\IEWLauncher.exe [142336] [PID.5504]
[MD5.69643F616FA67B33428FDF870604B059] - (.Pas de propri�taire - Orange SMS.) -- C:\Program Files (x86)\Orange\Logiciel de Connexion Orange\HuaweiE1752\SMSNotifier.exe [1121792] [PID.5800]
[MD5.77D8E2219CA86043DBCFD9223F2CCF18] - (...) -- C:\Program Files (x86)\Orange\Logiciel de Connexion Orange\HuaweiE1752\HSSModule.exe [285696] [PID.5868]
[MD5.3D24A66867ECE2A70223A83A1B18248D] - (.AVG Technologies CZ, s.r.o. - AVG User Interface.) -- C:\Program Files (x86)\AVG\AVG2013\avgui.exe [4408368] [PID.6124]
[MD5.D0D99257DDDCDDBE998AF7CA14E85BD0] - (.Hewlett-Packard Co. - HP CUE Status Root.) -- C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe [168960] [PID.5344]
[MD5.9843F58DF3E2908D1FED4DF4B8747E51] - (.Hewlett-Packard Co. - HP CUE Alert Popup Window Objects.) -- C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe [559104] [PID.5816]
[MD5.883008A9B5BFF94A153D99DBA54CB5C1] - (.Hewlett-Packard - GPCore COM object.) -- C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe [362496] [PID.248]
[MD5.557E7074F895938EA6A125B4F92F3DE8] - (.Orange - Assistance Livebox.) -- C:\Program Files (x86)\Orange\Assistance Livebox\dist\ST2.exe [13207096] [PID.6792]
[MD5.36142F4057158C4269A94594C68C9381] - (.AVG Technologies CZ, s.r.o. - AVG Configuration Management Application.) -- C:\Program Files (x86)\AVG\AVG2013\avgcfgex.exe [328752] [PID.2904]
[MD5.94753463EE96A4B975FCFC3D0E098945] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [7646208] [PID.3468]
[MD5.ADDA5E1951B90D3D23C56D3CF0622ADC] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [65640] [PID.1924]
[MD5.249A44DCFA2500EB1C020E33A3E9F25B] - (.Adobe Systems Incorporated - Adobe� Flash� Player Update Service 11.6 r6.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [163328] [PID.1948]
[MD5.4FE5C6D40664AE07BE5105874357D2ED] - (.Apple Inc. - MobileDeviceService.) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [57008] [PID.1996]
[MD5.3A0977CB68AF13E2579E47EB8984056B] - (.AVG Technologies CZ, s.r.o. - AVG Watchdog Service.) -- C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe [283136] [PID.2500]
[MD5.816FD5A6F3C2F3D600900096632FC60E] - (.Acer Incorporated - Global Registration Service.) -- C:\Program Files (x86)\Acer\Registration\GregHSRW.exe [1150496] [PID.2616]
[MD5.5B3CE960C62DBE864BE9A0BD043A3E30] - (.NewTech Infosystems, Inc. - Backup Manager Module.) -- C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe [250368] [PID.2872]
[MD5.B5071E15D4C3F5EF5018AFF7E85A85E5] - (.NewTech Infosystems, Inc. - NTI Backup Now 5 SchedulerSvc NT Service.) -- C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [144640] [PID.2892]
[MD5.51138BEEA3E2C21EC44D0932C71762A8] - (...) -- ysWOW64\rundll32.exe [0] [PID.2852]
[MD5.0765EE4A7A0D6609BF91CA2E4700E885] - (.TomTom - Windows Service for TomTom HOME.) -- C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe [93072] [PID.3144]
[MD5.F9EC9ACD504D823D9B9CA98A4F8D3CA2] - (.Acer Group - Updater Service.) -- C:\Program Files\Acer\Acer Updater\UpdaterService.exe [243232] [PID.3252]
[MD5.7548066DF68A8A1A56B043359F915F37] - (.Intel Corporation - RAID Monitor.) -- C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe [354840] [PID.3336]
~ Processes Running: Scanned in 00mn 00s



---\\ Google Chrome, D�marrage,Recherche,Extensions (G0,G1,G2)
C:\Users\dav\AppData\Local\Google\Chrome\User Data\Default\Preferences
G1 - GCS: Preference [User Data\Default] http://r.orange.fr
G2 - GCE: Preference [User Data\Default] [bkpdfjbhmfghfkphefmokbeockbbgogn] Le Bon Coin v.0.1 (Activ�)
G2 - GCE: Preference [User Data\Default] [hkgndiocipalkpejnpafdbdlfdjihomd] AirDroid v.2.0.2 (Activ�)
G2 - GCE: Preference [User Data\Default] [ljphpjlafmmdmegmfbkacafhbegjfkkn] Top Eleven v.2.0.0.4 (Activ�)
G2 - GCE: Preference [User Data\Default] [ndibdjnfmopecpmkdieinmbadjfpblof] AVG Security Toolbar v.15.3.0.11 (D�sactiv�)
G2 - GCE: Preference [User Data\Default] [nikpibnbobmbdbheedjfogjlikpgpnhp] DvdVideoSoft Free Youtube Download v.1.0.0.0, (Activ�)
~ Google Browser: 17 Legitimates Filtered in 00mn 15s



---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
C:\Users\dav\AppData\Roaming\Mozilla\Firefox\Profiles\vbsdpbut.default\prefs.js
C:\Users\dav\AppData\Roaming\Mozilla\Firefox\Profiles\vbsdpbut.default\user.js
~ Firefox Browser: 20 Legitimates Filtered in 00mn 00s



---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Proxy management: Scanned in 00mn 00s



---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
~ Keys: Scanned in 00mn 00s



---\\ Redirection du fichier Hosts (O1)
~ Le fichier hosts est sain (The hosts file is clean).
~ Hosts File: Scanned in 00mn 00s
~ Nombre de lignes (Lines number): 21



---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: BHO [64Bits] - {47B614AF-B4CC-485B-B331-BE26F02ED4CC} . (.APC - Browser Helper Object.) -- C:\Program Files (x86)\Internet Explorer\IEAddon.dll
O2 - BHO: Bing Bar BHO [64Bits] - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} . (.Microsoft Corporation - Bing Bar.) -- C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2322.0\npwinext.dll
~ BHO: 12 Legitimates Filtered in 00mn 00s



---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar: McAfee SiteAdvisor Toolbar [64Bits] - [HKLM]{0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} . (.McAfee, Inc. - SiteAdvisor.) -- C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll
O3 - Toolbar: Google Toolbar [64Bits] - [HKLM]{2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
~ Toolbar: Scanned in 00mn 00s



---\\ Applications d�marr�es par registre & par dossier (O4)
O4 - HKLM\..\Run: [IAAnotif] . (.Intel Corporation - Event Monitor User Notification Tool.) -- C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [mwlDaemon] . (.Egis Technology Inc. - MyWinLocker.) -- C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe
O4 - HKLM\..\Run: [NvCplDaemon] . (.NVIDIA Corporation - NVIDIA Display Properties Extension.) -- C:\Windows\system32\NvCpl.dll
O4 - HKLM\..\Run: [RtHDVCpl] . (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
O4 - HKLM\..\Run: [PLFSetI] . (.Pas de propri�taire - DefaultSettingEXE MFC Application.) -- C:\Windows\PLFSetI.exe
O4 - HKLM\..\Run: [Apoint] . (.Alps Electric Co., Ltd. - Alps Pointing-device Driver.) -- C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [Acer ePower Management] . (.Acer Incorporated - ePowerTray.) -- C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe
O4 - HKLM\..\Run: [MSC] . (.Microsoft Corporation - Microsoft Security Client User Interface.) -- c:\Program Files\Microsoft Security Client\msseces.exe
O4 - HKCU\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Facebook Update] . (.Facebook Inc. - Programme d'installation de Facebook.) -- C:\Users\dav\AppData\Local\Facebook\Update\FacebookUpdate.exe
O4 - HKCU\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe
O4 - HKCU\..\Run: [MailNotifier] . (.Orange - MailNotifier.) -- C:\Program Files (x86)\Orange\MailNotifier\MailNotifier.exe
O4 - HKCU\..\Run: [Orange Installer] . (...) -- C:\Program Files (x86)\Orange\Orange Installer\OrangeInstaller.exe
O4 - HKCU\..\Run: [OrangeInside] . (.Orange - Executable Orange Inside.) -- C:\Users\dav\AppData\Roaming\Orange\OrangeInside\one\OrangeInside.exe
O4 - HKCU\..\Run: [TomTomHOME.exe] . (.TomTom - System Tray application for TomTom HOME.) -- C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe
O4 - HKLM\..\Wow6432Node\Run: [BackupManagerTray] . (.NewTech Infosystems, Inc. - Acer Backup Manager.) -- C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe
O4 - HKLM\..\Wow6432Node\Run: [SuiteTray] . (.Egis Technology Inc. - SuiteTray.) -- C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe
O4 - HKLM\..\Wow6432Node\Run: [EgisUpdate] . (.Egis Technology Inc. - EgisUpdate Release Application.) -- C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe
O4 - HKLM\..\Wow6432Node\Run: [EgisTecPMMUpdate] . (.Egis Technology Inc. - PMM Update Application.) -- C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe
O4 - HKLM\..\Wow6432Node\Run: [LManager] . (.Dritek System Inc. - Launch Manager Keyboard Application.) -- C:\Program Files (x86)\Launch Manager\LManager.exe
O4 - HKLM\..\Wow6432Node\Run: [ArcadeDeluxeAgent] . (.CyberLink Corp. - Acer Arcade Deluxe Resident Program.) -- C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe
O4 - HKLM\..\Wow6432Node\Run: [Start_Icon225_IEWLauncher] . (...) -- C:\Program Files (x86)\Orange\Logiciel de Connexion Orange\HuaweiE1752\IEWLauncher.exe
O4 - HKLM\..\Wow6432Node\Run: [Start_Update] . (.Pas de propri�taire - Orange Updater.) -- C:\Program Files (x86)\Orange\Logiciel de Connexion Orange\HuaweiE1752\UpdteApp.exe
O4 - HKLM\..\Wow6432Node\Run: [Start_Statistics] . (...) -- C:\Program Files (x86)\Orange\Logiciel de Connexion Orange\HuaweiE1752\OrangeStats.exe
O4 - HKLM\..\Wow6432Node\Run: [Start_SMSNotifier] . (.Pas de propri�taire - Orange SMS.) -- C:\Program Files (x86)\Orange\Logiciel de Connexion Orange\HuaweiE1752\SMSNotifier.exe
O4 - HKLM\..\Wow6432Node\Run: [Start_HSSModule] . (...) -- C:\Program Files (x86)\Orange\Logiciel de Connexion Orange\HuaweiE1752\HSSModule.exe
O4 - HKLM\..\Wow6432Node\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
O4 - HKLM\..\Wow6432Node\Run: [Nikon Message Center 2] . (.Nikon Corporation - Nikon Message Center 2.) -- C:\Program Files (x86)\Nikon\Nikon Message Center 2\NkMC2.exe
O4 - HKLM\..\Wow6432Node\Run: [AVG_UI] . (.AVG Technologies CZ, s.r.o. - AVG User Interface.) -- C:\Program Files (x86)\AVG\AVG2013\avgui.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe
O4 - HKUS\S-1-5-21-4152841402-189553965-3887579432-1000\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKUS\S-1-5-21-4152841402-189553965-3887579432-1000\..\Run: [Facebook Update] . (.Facebook Inc. - Programme d'installation de Facebook.) -- C:\Users\dav\AppData\Local\Facebook\Update\FacebookUpdate.exe
O4 - HKUS\S-1-5-21-4152841402-189553965-3887579432-1000\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe
O4 - HKUS\S-1-5-21-4152841402-189553965-3887579432-1000\..\Run: [MailNotifier] . (.Orange - MailNotifier.) -- C:\Program Files (x86)\Orange\MailNotifier\MailNotifier.exe
O4 - HKUS\S-1-5-21-4152841402-189553965-3887579432-1000\..\Run: [Orange Installer] . (...) -- C:\Program Files (x86)\Orange\Orange Installer\OrangeInstaller.exe
O4 - HKUS\S-1-5-21-4152841402-189553965-3887579432-1000\..\Run: [OrangeInside] . (.Orange - Executable Orange Inside.) -- C:\Users\dav\AppData\Roaming\Orange\OrangeInside\one\OrangeInside.exe
O4 - HKUS\S-1-5-21-4152841402-189553965-3887579432-1000\..\Run: [TomTomHOME.exe] . (.TomTom - System Tray application for TomTom HOME.) -- C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe
~ Application: Scanned in 00mn 00s



---\\ Autres liens utilisateurs (O4)
O4 - GS\TaskBar: Dofus 2.lnk . (...) -- C:\Program Files (x86)\Dofus 2\app\UpLauncher.exe
O4 - GS\TaskBar: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Users\dav\AppData\Local\Google\Chrome\Application\chrome.exe
O4 - GS\TaskBar: Windows Media Player.lnk . (.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O4 - GS\TaskBar: �Torrent.lnk . (.BitTorrent Inc. - �Torrent.) -- C:\Program Files (x86)\uTorrent\uTorrent.exe =>P2P.�Torrent
O4 - GS\Programs: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - GS\Programs: Microsoft SkyDrive.lnk . (.Microsoft Corporation - Microsoft SkyDrive.) -- C:\Users\dav\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
O4 - GS\QuickLaunch: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Users\dav\AppData\Local\Google\Chrome\Application\chrome.exe
O4 - GS\QuickLaunch: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - GS\QuickLaunch: MediaHuman YouTube to MP3 Converter.lnk . (...) -- C:\Program Files (x86)\MediaHuman\YouTube to MP3 Converter\YouTubeToMp3.exe
O4 - GS\Accessories: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - GS\Accessories: Private Character Editor.lnk . (.Microsoft Corporation - �diteur de caract�res priv�s.) -- C:\Windows\system32\eudcedit.exe
O4 - GS\SendTo: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) -- C:\Windows\system32\WFS.exe
O4 - GS\Desktop: Free PDF to Word Doc Converter.lnk . (...) -- C:\Program Files (x86)\Free PDF to Word Doc Converter\pdf2word.exe
O4 - GS\Desktop: MediaHuman YouTube to MP3 Converter.lnk . (...) -- C:\Program Files (x86)\MediaHuman\YouTube to MP3 Converter\YouTubeToMp3.exe
~ Global Startup: Scanned in 00mn 00s



---\\ Boutons situ�s sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: &Envoyer � OneNote [64Bits] - {2670000A-7350-4f3c-8081-5663EE0C6C49} . (.Microsoft Corporation - Microsoft OneNote Internet Explorer Add-in.) -- C:\Program Files (x86)\MICROS~2\Office14\ONBttnIE.dll
O9 - Extra button: Notes &li�es OneNote [64Bits] - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} . (.Microsoft Corporation - Microsoft OneNote Internet Explorer Add-in.) -- C:\Program Files (x86)\MICROS~2\Office14\ONBTTN~1.dll
~ IE Extra Buttons: Scanned in 00mn 00s



---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{4DFC5898-442E-49A1-A541-418C245533A7}: DhcpNameServer = 192.168.1.1 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{4DFC5898-442E-49A1-A541-418C245533A7}: DhcpNameServer = 192.168.1.1 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{4DFC5898-442E-49A1-A541-418C245533A7}: DhcpNameServer = 192.168.1.1 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 192.168.1.1
~ Domain: Scanned in 00mn 00s



---\\ Protocole additionnel (O18)
O18 - Handler: wlpg [64Bits] - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (...) --
O18 - Filter: text/xml [64Bits] - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.dll
~ Protocole Additionnel: Scanned in 00mn 00s



---\\ Liste des services NT non Microsoft et non d�sactiv�s (O23)
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated - Adobe� Flash� Player Update Service 11.6 r6.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: (vToolbarUpdater15.3.0) . (...) - C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.3.0\ToolbarUpdater.exe (.not file.) =>Toolbar.AVGSearch
~ Services: 19 Legitimates Filtered in 00mn 11s



---\\ T�ches planifi�es en automatique (O39)
[MD5.F498F9A6044DE57744BD465662E6AD77] [APT] [BHO updater] (...) -- C:\Program Files (x86)\Internet Explorer\Updater.exe [117760]
[MD5.00000000000000000000000000000000] [APT] [Scheduled Update for Ask Toolbar] (...) -- C:\Program Files (x86)\Ask.com\UpdateTask.exe (.not file.) [0] =>Toolbar.Ask
[MD5.03CD0EE651D0BC2611B70FF5F2B85269] [APT] [{1DBC5A0A-698D-4D97-8334-1B7F10407121}] (...) -- C:\Users\dav\Downloads\S-VNX2__-020705WF-EURFR-32BIT_.exe [91837264]
[MD5.00000000000000000000000000000000] [APT] [{21E0169D-04CD-43A1-8F23-34031D0A4604}] (...) -- C:\Users\dav\Downloads\Freeplayer-Win32-20070531(2).exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{31224AF4-9F3D-490C-AFB8-93DEC50B733A}] (...) -- C:\Users\dav\Downloads\Freeplayer-Win32-20070531(3).exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{7E3C2D5E-1EA1-4784-8216-9B7133071EC8}] (...) -- C:\Users\dav\Downloads\Freeplayer-Win32-20070531(1).exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{AC5B8560-0A02-48A9-9535-E5ED7F413E4D}] (...) -- C:\Users\dav\AppData\Local\Temp\Temp1_LG_PC_Suite3.zip\LG_PC_Suite3\LGInstaller.exe (.not file.) [0]
[MD5.1EF5B782DC95B24710D88FD5DB6A1D14] [APT] [{B81EA7D3-060A-45B8-BAD4-136B2B00A0F8}] (...) -- C:\Program Files (x86)\VideoLAN\VLC\vlc.exe [108544]
[MD5.9BC5D61ED833872CD67E76E6E79ED18F] [APT] [{E3237C51-BA04-4611-A4FA-DE9624CCD28A}] (.Ankama Games.) -- C:\Users\dav\Downloads\setup(4).exe [4152635]
~ Scheduled Task: 34 Legitimates Filtered in 00mn 14s



---\\ Logiciels install�s (O42)
O42 - Logiciel: Browser Helper Object - (.APC Soft.) [HKLM][64Bits] -- Browser Helper Object1.4
~ Logic: 133 Legitimates Filtered in 00mn 00s



---\\ HKCU & HKLM Software Keys
[HKCU\Software\MIDI Configurations]
[HKCU\Software\MIDI Patch Names]
[HKCU\Software\Master]
[HKCU\Software\PrintingModule]
[HKLM\Software\Wow6432Node\Organs]
[HKLM\Software\Wow6432Node\PageLibraries]
[HKLM\Software\Wow6432Node\Rule Actions]
~ Key Software: 234 Legitimates Filtered in 00mn 00s



---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 09/02/2013 - 16:49:18 - [2,258] ----D C:\Program Files (x86)\Browser Helper Object
O43 - CFD: 03/05/2013 - 10:11:44 - [0,000] ----D C:\ProgramData\Rule Actions
O43 - CFD: 03/05/2013 - 10:12:17 - [0,000] ----D C:\ProgramData\Screen Saver
O43 - CFD: 02/07/2013 - 01:16:39 - [0] ----D C:\Users\dav\AppData\Roaming\IE Addon
O43 - CFD: 17/10/2012 - 08:54:09 - [12,524] ----D C:\Users\dav\AppData\Roaming\Oxylane
O43 - CFD: 17/10/2012 - 08:54:09 - [0,462] ----D C:\Users\dav\AppData\Local\Oxylane
~ Program Folder: 259 Legitimates Filtered in 00mn 03s



---\\ Derniers fichiers cr��s dans Windows Prefetcher (O45)
O45 - LFCP:[MD5.DDCF606F26463EA262DC7F4ED1B35556] - 01/07/2013 - 19:11:49 ---A- - C:\Windows\Prefetch\BROWSERPROTECT.EXE-31548780.pf =>Hijacker.Eazel
O45 - LFCP:[MD5.899EE1425E0F0164268C491684F2B28D] - 02/07/2013 - 00:28:09 ---A- - C:\Windows\Prefetch\BABMAINT.EXE-A7716B98.pf =>Hijacker.BabSolution
O45 - LFCP:[MD5.BC3A145F5292690A8FC64852D25D54CD] - 03/07/2013 - 09:11:52 ---A- - C:\Windows\Prefetch\UPDTEAPP.EXE-8F9042D2.pf
O45 - LFCP:[MD5.8473D8E401FBC1DC37212B89A25476AC] - 03/07/2013 - 09:11:55 ---A- - C:\Windows\Prefetch\PMVSERVICE.EXE-6EF26E1E.pf
O45 - LFCP:[MD5.DA07009EE4CE72EC327D35B8D4168956] - 03/07/2013 - 16:44:52 ---A- - C:\Windows\Prefetch\PLFSETI.EXE-D9D6FD5A.pf
O45 - LFCP:[MD5.393FC256CE02C96A61F98E3827B20C5D] - 03/07/2013 - 20:43:00 ---A- - C:\Windows\Prefetch\PMS.EXE-8E4C125F.pf
O45 - LFCP:[MD5.89CD77E760BCC8ACE02804E7F6D91F73] - 04/07/2013 - 08:22:03 ---A- - C:\Windows\Prefetch\ORANGESTATS.EXE-D578E09A.pf
O45 - LFCP:[MD5.0188C5172A15F5FE227438F2CFF15887] - 04/07/2013 - 08:22:11 ---A- - C:\Windows\Prefetch\SMSNOTIFIER.EXE-052E7EDA.pf
O45 - LFCP:[MD5.FF3AECFB46480F713DCDE113A12F9A3A] - 04/07/2013 - 08:22:12 ---A- - C:\Windows\Prefetch\HSSMODULE.EXE-DBF1BBFF.pf
O45 - LFCP:[MD5.8108FD63F1139FDA2AD06CF8DCF65D29] - 04/07/2013 - 08:22:16 ---A- - C:\Windows\Prefetch\NKMC2.EXE-3647DDCF.pf
O45 - LFCP:[MD5.0F45951CA632662140F0487EBB3F08E4] - 04/07/2013 - 13:08:27 ---A- - C:\Windows\Prefetch\SUITETRAY.EXE-42757614.pf
O45 - LFCP:[MD5.238EE637EF8DDBD36CC58C7537B5AE4B] - 28/06/2013 - 17:13:51 ---A- - C:\Windows\Prefetch\2DDD.TMP-2D6759F6.pf
O45 - LFCP:[MD5.1B485B5A5485FEE5243C1277907081E0] - 29/06/2013 - 07:52:10 ---A- - C:\Windows\Prefetch\VIEWNX2.EXE-49E7CCA6.pf
O45 - LFCP:[MD5.4658535F45162FB98A8D33EB204BF15A] - 29/06/2013 - 07:53:27 ---A- - C:\Windows\Prefetch\HYCAM2.EXE-D7D38386.pf
O45 - LFCP:[MD5.FE242C29372B851F5C71C58C1130099C] - 29/06/2013 - 17:21:26 ---A- - C:\Windows\Prefetch\74B5.TMP-61BBB282.pf
~ Prefetcher: 140 Legitimates Filtered in 00mn 00s



---\\ MountPoints2 Shell Key (O51)
O51 - MPSK:{cda95340-a7b9-11e1-b3e7-00262dadda80}\AutoRun\command. (...) -- E:\Handset_USB_Driver.exe (.not file.)
O51 - MPSK:{fc296d1a-199b-11e1-a29d-00262dadda80}\AutoRun\command. (...) -- E:\Autorun.exe (.not file.)
O51 - MPSK:{fcc7467b-f1ba-11e0-8d4f-00262dadda80}\AutoRun\command. (...) -- E:\Setup.exe (.not file.)
~ Keys: Scanned in 00mn 00s



---\\ Microsoft Windows Policies System (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
~ MWPS: 18 Legitimates Filtered in 00mn 00s



---\\ Microsoft Windows Policies Explorer (O56)
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1
~ MWPE Keys: 4 Legitimates Filtered in 00mn 00s



---\\ Liste des Drivers Syst�me (O58)
O58 - SDL:[MD5.2F6B34B83843F0C5118B63AC634F5BF4] - 14/07/2009 - 02:52:21 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\Drivers\adp94xx.sys [491088]
O58 - SDL:[MD5.D5BCB77BE83CF99F508943945D46343D] - 26/03/2009 - 20:16:08 ---A- . (.Dritek System Inc. - Dritek 64-bit PS/2 Keyboard Filter Driver.) -- C:\Windows\SysWOW64\drivers\DKbFltr.sys [25608]
~ Drivers: Scanned in 00mn 00s



---\\ Derniers fichiers modifi�s ou cr�es (Utilisateur) (O61)
O61 - LFC: 01/07/2013 - 11:13:32 ---A- C:\Users\dav\AppData\Local\Google\CrashReports\Chrome-last.dmp [143061]
O61 - LFC: 01/07/2013 - 11:18:32 ---A- C:\Users\dav\AppData\Local\Google\Chrome\User Data\First Run [0]
O61 - LFC: 01/07/2013 - 13:16:17 -SHA- C:\Users\dav\Documents\Documents\Mes Projets\Thumbs.db [365056]
O61 - LFC: 01/07/2013 - 17:15:43 ---A- C:\Users\dav\Documents\Documents\Mes Projets\Lettre Vendeuse.odt [16044]
O61 - LFC: 01/07/2013 - 19:02:41 ---A- C:\Users\dav\Documents\Documents\Mes Projets\Lettre de Motivation 2013.pdf [32092]
O61 - LFC: 01/07/2013 - 22:09:58 ---A- C:\Users\dav\AppData\Local\Google\Chrome\User Data\Profile 12\Shortcuts [32768]
O61 - LFC: 01/07/2013 - 22:09:59 ---A- C:\Users\dav\AppData\Local\Google\Chrome\User Data\Profile 12\Cookies [1065984]
O61 - LFC: 01/07/2013 - 22:09:59 ---A- C:\Users\dav\AppData\Local\Google\Chrome\User Data\Profile 12\databases\Databases.db [7168]
O61 - LFC: 01/07/2013 - 22:09:59 ---A- C:\Users\dav\AppData\Local\Google\Chrome\User Data\Profile 13\Cookies [18432]
O61 - LFC: 01/07/2013 - 22:09:59 ---A- C:\Users\dav\AppData\Local\Google\Chrome\User Data\Profile 9\Cookies [353280]
O61 - LFC: 01/07/2013 - 22:09:59 ---A- C:\Users\dav\AppData\Local\Google\Chrome\User Data\Profile 9\Shortcuts [32768]
O61 - LFC: 01/07/2013 - 22:47:25 -SHA- C:\Users\dav\Documents\Devis Aide & Moi\Thumbs.db [23040]
O61 - LFC: 01/07/2013 - 22:52:29 ---A- C:\Users\dav\AppData\Local\Google\Chrome\User Data\Profile 10\Preferences [54569]
O61 - LFC: 01/07/2013 - 22:52:29 ---A- C:\Users\dav\AppData\Local\Google\Chrome\User Data\Profile 11\Preferences [15315]
O61 - LFC: 01/07/2013 - 22:52:29 ---A- C:\Users\dav\AppData\Local\Google\Chrome\User Data\Profile 12\Preferences [109473]
O61 - LFC: 01/07/2013 - 22:52:29 ---A- C:\Users\dav\AppData\Local\Google\Chrome\User Data\Profile 13\Preferences [90461]
O61 - LFC: 01/07/2013 - 22:52:29 ---A- C:\Users\dav\AppData\Local\Google\Chrome\User Data\Profile 1\Preferences [15338]
O61 - LFC: 01/07/2013 - 22:52:29 ---A- C:\Users\dav\AppData\Local\Google\Chrome\User Data\Profile 2\Preferences [15343]
O61 - LFC: 01/07/2013 - 22:52:29 ---A- C:\Users\dav\AppData\Local\Google\Chrome\User Data\Profile 3\Preferences [15343]
O61 - LFC: 01/07/2013 - 22:52:29 ---A- C:\Users\dav\AppData\Local\Google\Chrome\User Data\Profile 4\Preferences [15341]
O61 - LFC: 01/07/2013 - 22:52:29 ---A- C:\Users\dav\AppData\Local\Google\Chrome\User Data\Profile 5\Preferences [15347]
O61 - LFC: 01/07/2013 - 22:52:29 ---A- C:\Users\dav\AppData\Local\Google\Chrome\User Data\Profile 6\Preferences [15341]
O61 - LFC: 01/07/2013 - 22:52:29 ---A- C:\Users\dav\AppData\Local\Google\Chrome\User Data\Profile 7\Preferences [15341]
O61 - LFC: 01/07/2013 - 22:52:30 ---A- C:\Users\dav\AppData\Local\Google\Chrome\User Data\Profile 8\Preferences [15343]
O61 - LFC: 01/07/2013 - 22:52:30 ---A- C:\Users\dav\AppData\Local\Google\Chrome\User Data\Profile 9\Preferences [117658]
O61 - LFC: 01/07/2013 - 22:52:32 ---A- C:\Users\dav\AppData\Local\Google\Chrome\User Data\Profile 5\Web Data [81920]
O61 - LFC: 01/07/2013 - 22:52:33 ---A- C:\Users\dav\AppData\Local\Google\Chrome\User Data\Profile 6\Web Data [81920]
O61 - LFC: 01/07/2013 - 22:52:33 ---A- C:\Users\dav\AppData\Local\Google\Chrome\User Data\Profile 7\Web Data [81920]
O61 - LFC: 01/07/2013 - 22:52:33 ---A- C:\Users\dav\AppData\Local\Google\Chrome\User Data\Profile 8\Web Data [81920]
O61 - LFC: 01/07/2013 - 22:52:33 ---A- C:\Users\dav\AppData\Local\Google\Chrome\User Data\Profile 9\Web Data [100352]
O61 - LFC: 01/07/2013 - 22:55:08 ---A- C:\Users\dav\AppData\Local\Google\Chrome\User Data\Profile 10\Web Data [86016]
O61 - LFC: 01/07/2013 - 22:55:08 ---A- C:\Users\dav\AppData\Local\Google\Chrome\User Data\Profile 11\Web Data [81920]
O61 - LFC: 01/07/2013 - 22:55:08 ---A- C:\Users\dav\AppData\Local\Google\Chrome\User Data\Profile 12\Web Data [434176]
O61 - LFC: 01/07/2013 - 22:55:08 ---A- C:\Users\dav\AppData\Local\Google\Chrome\User Data\Profile 1\Web Data [81920]
O61 - LFC: 01/07/2013 - 22:55:16 ---A- C:\Users\dav\AppData\Local\Google\Chrome\User Data\Profile 13\Web Data [77824]
O61 - LFC: 01/07/2013 - 22:55:17 ---A- C:\Users\dav\AppData\Local\Google\Chrome\User Data\Profile 2\Web Data [81920]
O61 - LFC: 01/07/2013 - 22:55:17 ---A- C:\Users\dav\AppData\Local\Google\Chrome\User Data\Profile 3\Web Data [81920]
O61 - LFC: 01/07/2013 - 22:55:17 ---A- C:\Users\dav\AppData\Local\Google\Chrome\User Data\Profile 4\Web Data [81920]
O61 - LFC: 02/07/2013 - 01:12:57 ---A- C:\Users\dav\Downloads\tamtam.wav [74008]
O61 - LFC: 02/07/2013 - 12:09:59 ---A- C:\Users\dav\Downloads\QuickTimeInstaller (1).exe [41404760]
O61 - LFC: 03/07/2013 - 10:17:59 -SHA- C:\Users\dav\Documents\Documents\Mes fichiers re�us\Thumbs.db [2959360]
O61 - LFC: 03/07/2013 - 10:18:00 -SHA- C:\Users\dav\Documents\Documents\souvenir\Thumbs.db [104960]
O61 - LFC: 03/07/2013 - 10:22:01 ---A- C:\Users\dav\Documents\Documents\Mes Projets\CV Logistique2013.doc [45624]
O61 - LFC: 03/07/2013 - 10:42:14 ---A- C:\Users\dav\Documents\Mes num�risations\2013-07 (juil.)\num�risation0001.pdf [223022]
O61 - LFC: 03/07/2013 - 10:43:30 -SHA- C:\Users\dav\Documents\Mes num�risations\2013-07 (juil.)\Thumbs.db [10240]
O61 - LFC: 03/07/2013 - 10:43:54 ---A- C:\Users\dav\Downloads\num�risation0001 (1).pdf [223022]
O61 - LFC: 03/07/2013 - 11:47:24 ---A- C:\Users\dav\AppData\Roaming\HP\ScLogs\SolutionCenter.htm [123078]
O61 - LFC: 03/07/2013 - 12:39:59 ---A- C:\Users\dav\Documents\Documents\Mes Projets\CV 2013.pdf [56759]
O61 - LFC: 03/07/2013 - 13:32:18 ---A- C:\Users\dav\Documents\Documents\Mes Projets\Lettre de Motivation.odt [16042]
O61 - LFC: 03/07/2013 - 13:32:36 ---A- C:\Users\dav\Documents\Documents\Mes Projets\Lettre de Motivation2013.pdf [31712]
O61 - LFC: 03/07/2013 - 14:04:03 ---A- C:\Users\dav\Downloads\avg_isct_x64_all_2013_3345a6382_huawei.exe [158488848]
O61 - LFC: 03/07/2013 - 14:11:21 ---A- C:\Users\dav\AppData\Local\MFAData\logs\nds-20130703-131121.log.lock [0]
O61 - LFC: 03/07/2013 - 14:12:04 ---A- C:\Users\dav\AppData\Local\MFAData\logs\nds-20130703-131204.log.lock [0]
O61 - LFC: 03/07/2013 - 14:28:12 ---A- C:\Users\dav\AppData\Local\MFAData\logs\nds-20130703-132812.log.lock [0]
O61 - LFC: 03/07/2013 - 15:01:20 ---A- C:\Users\dav\Downloads\RogueKiller-8.6.2.exe [914944]
O61 - LFC: 03/07/2013 - 20:10:36 ---A- C:\Users\dav\AppData\Local\GDIPFONTCACHEV1.DAT [104632]
O61 - LFC: 04/07/2013 - 11:19:40 ---A- C:\Users\dav\AppData\Local\Google\Chrome\User Data\Certificate Revocation Lists [266225]
O61 - LFC: 04/07/2013 - 12:50:40 ---A- C:\Users\dav\Downloads\avg_tuh_stf_all_2013_2_24c45.exe [58674136]
O61 - LFC: 04/07/2013 - 13:21:13 ---A- C:\Users\dav\AppData\Local\Google\Chrome\User Data\Profile 10\History [86016]
O61 - LFC: 04/07/2013 - 13:21:13 ---A- C:\Users\dav\AppData\Local\Google\Chrome\User Data\Profile 11\History [86016]
O61 - LFC: 04/07/2013 - 13:21:13 ---A- C:\Users\dav\AppData\Local\Google\Chrome\User Data\Profile 1\History [86016]
O61 - LFC: 04/07/2013 - 13:21:14 ---A- C:\Users\dav\AppData\Local\Google\Chrome\User Data\Profile 12\History [10035200]
O61 - LFC: 04/07/2013 - 13:21:14 ---A- C:\Users\dav\AppData\Local\Google\Chrome\User Data\Profile 13\History [94208]
O61 - LFC: 04/07/2013 - 13:21:14 ---A- C:\Users\dav\AppData\Local\Google\Chrome\User Data\Profile 2\History [86016]
O61 - LFC: 04/07/2013 - 13:21:15 ---A- C:\Users\dav\AppData\Local\Google\Chrome\User Data\Profile 3\History [86016]
O61 - LFC: 04/07/2013 - 13:21:15 ---A- C:\Users\dav\AppData\Local\Google\Chrome\User Data\Profile 4\History [86016]
O61 - LFC: 04/07/2013 - 13:21:15 ---A- C:\Users\dav\AppData\Local\Google\Chrome\User Data\Profile 5\History [86016]
O61 - LFC: 04/07/2013 - 13:21:15 ---A- C:\Users\dav\AppData\Local\Google\Chrome\User Data\Profile 6\History [86016]
O61 - LFC: 04/07/2013 - 13:21:15 ---A- C:\Users\dav\AppData\Local\Google\Chrome\User Data\Profile 7\History [86016]
O61 - LFC: 04/07/2013 - 13:21:16 ---A- C:\Users\dav\AppData\Local\Google\Chrome\User Data\Profile 8\History [86016]
O61 - LFC: 04/07/2013 - 13:21:16 ---A- C:\Users\dav\AppData\Local\Google\Chrome\User Data\Profile 9\History [2486272]
O61 - LFC: 04/07/2013 - 15:02:14 -SHA- C:\Users\dav\Documents\Scanned Documents\Thumbs.db [16896]
O61 - LFC: 04/07/2013 - 15:02:32 ---A- C:\Users\dav\AppData\Local\Google\Chrome\User Data\Local State [54349]
O61 - LFC: 04/07/2013 - 15:02:32 ---A- C:\Users\dav\AppData\Local\Google\Chrome\User Data\chrome_shutdown_ms.txt [4]
~ 431 Fichiers temporaires (Temporary files)
~ Files: 863 Legitimates Filtered in 00mn 19s



---\\ Liste des outils de nettoyage (O63)
O63 - Logiciel: ZHPDiag 2013 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1
~ ADS: Scanned in 00mn 00s



---\\ File Associations Shell Spawning (O67)
O67 - Shell Spawning: <.html> [HKCU\..\open\Command] (.Not Key.)
~ FASS Keys: 19 Legitimates Filtered in 00mn 00s



---\\ Start Menu Internet (O68)
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Users\dav\AppData\Local\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
~ Keys: Scanned in 00mn 00s



---\\ Search Browser Infection (O69)
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - http://www.bing.com
O69 - SBI: SearchScopes [HKCU] {67A2568C-7A0A-4EED-AECC-B5405DE63B64} - (Google) - http://www.google.com
O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} - (Google) - http://www.google.com
O69 - SBI: SearchScopes [HKCU] {814C76CB-2623-43F4-AAD0-58A0E5190A20} [DefaultScope] - (Orange) - http://r.orange.fr
~ Keys: Scanned in 00mn 00s



---\\ Crack & Keygen Files (O82)
C:\Users\dav\AppData\Local\Google\Chrome\User Data\Profile 12\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\S3K6JCRX\zcache.zgncdn.com\#farm2-1\icons\icon_crafting#\_statue_clay_nutcracker.jxr.sol
C:\Users\dav\AppData\Local\Google\Chrome\User Data\Profile 12\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\S3K6JCRX\zcache.zgncdn.com\#farm2-1\icons\icon_crafting#\_statue_clay_nutcracker.jxr.sol
~ Files: Scanned in 01mn 07s



---\\ Recherche particuliere � la racine de certains dossiers (O84)
[MD5.6ACBD475647D7A160657CB3E460F0F35] [SPRF][27/01/2010] (...) -- C:\ProgramData\FullRemove.exe [131472]
[MD5.3CF49C8FC8C9E2B14ACE4CA1D4CBE1AE] [SPRF][03/07/2013] (.AVG Secure Search - AVG Installer.) -- C:\Users\dav\AppData\Local\Temp\oi_{392D2BD9-EB74-4A3D-BCE1-F58065AE1FF1}.exe [4520984] =>Toolbar.AVGSearch
[MD5.07F2830F5068630FEA35D52235AC5E70] [SPRF][27/11/2012] (...) -- C:\Users\dav\AppData\Roaming\wklnhst.dat [700]
[MD5.4EF33D516F31BEB1C9847D1FDA69375C] [SPRF][02/07/2013] (...) -- C:\Users\dav\Desktop\adwcleaner.exe [648201]
[MD5.09A3F926C400C29B3CF04FD15A0D8DEA] [SPRF][04/07/2013] (.Oleg N. Scherbakov - 7z Setup SFX.) -- C:\Users\dav\Desktop\JRT.exe [545954]
[MD5.5831FE9915BE1CD72EF9ED4D442E85D3] [SPRF][14/09/2011] (.Microsoft Corporation - 2007 Microsoft Office Suite Service Pack 2 Setup.) -- C:\Users\dav\Desktop\office2007sp2-kb953195-fullfile-fr-fr.exe [319077160]
[MD5.4E8323D2CC75190444464F9AE08181FC] [SPRF][28/09/2012] (.www.hellopdf.com - Free PDF to Word Doc Converter Setup.) -- C:\Users\dav\Desktop\pdf2wordsetup.exe [1128916]
[MD5.4400E263874D3762D26B712FDF414C86] [SPRF][03/07/2013] (...) -- C:\Users\dav\Desktop\RogueKiller-8.6.2.exe [914944]
[MD5.EA591DBD692ADF5B4AB55AFBD5FDB252] [SPRF][04/07/2013] (.Nicolas Coolman - ZHPDiag.) -- C:\Users\dav\Desktop\ZHPDiag2.exe [5697917]
[MD5.8945CCA5FC4F25168E8B6F401EFAF51F] [SPRF][22/02/2007] (.Microsoft Corporation - Zone.com Stats Client for MSN Messenger.) -- C:\Windows\Downloaded Program Files\MessengerStatsPAClient.dll [304544]
~ Files: Scanned in 00mn 06s



---\\ Firewall Active Exception List (FirewallRules) (O87)
O87 - FAEL: "{52329B13-CEA5-4E69-8BF6-1E365E20B219}" |In - None - P6 - TRUE | .(...) -- D:\setup\hpznui40.exe (.not file.)
O87 - FAEL: "{49714CDB-A9BB-499F-9F88-E5A14E50CF6C}" |In - Domain - P6 - TRUE | .(...) -- C:\Program Files (x86)\iMesh Applications\iMesh\iMesh.exe (.not file.) =>PUP.iMesh
O87 - FAEL: "{7A1450F4-08BE-44AD-ACBC-5FD23BCAFD84}" |In - Domain - P17 - TRUE | .(...) -- C:\Program Files (x86)\iMesh Applications\iMesh\iMesh.exe (.not file.) =>PUP.iMesh
~ Firewall: 271 Legitimates Filtered in 00mn 01s



---\\ Scan Additionnel (O88)
Database Version : v2.12641 - (03/07/2013)
Cl�s trouv�es (Keys found) : 41
Valeurs trouv�es (Values found) : 0
Dossiers trouv�s (Folders found) : 2
Fichiers trouv�s (Files found) : 1

[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{A047FE02-C91C-41CB-898C-4ED21B86025A}] =>Toolbar.Orange
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C9A6357B-25CC-4BCF-96C1-78736985D412}] =>Toolbar.Agent
[HKLM\Software\Classes\AppID\ieaddon.dll] =>Trojan.FakeAlert
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0E12F736682067FDE4D1158D5940A82E] =>Toolbar.Ask
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1A24B5BB8521B03E0C8D908F5ABC0AE6] =>Toolbar.Ask
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\261F213D1F55267499B1F87D0CC3BCF7] =>Toolbar.Ask
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2B0D56C4F4C46D844A57FFED6F0D2852] =>Toolbar.Ask
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\49D4375FE41653242AEA4C969E4E65E0] =>Toolbar.Ask
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6AA0923513360135B272E8289C5F13FA] =>Toolbar.Ask
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6F7467AF8F29C134CBBAB394ECCFDE96] =>Toolbar.Ask
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\741B4ADF27276464790022C965AB6DA8] =>Toolbar.Ask
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7DE196B10195F5647A2B21B761F3DE01] =>Toolbar.Ask
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\922525DCC5199162F8935747CA3D8E59] =>Toolbar.Ask
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9D4F5849367142E4685ED8C25E44C5ED] =>Toolbar.Ask
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A5875B04372C19545BEB90D4D606C472] =>Toolbar.Ask
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A876D9E80B896EC44A8620248CC79296] =>Toolbar.Ask
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B66FFAB725B92594C986DE826A867888] =>Toolbar.Ask
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BCDA179D619B91648538E3394CAC94CC] =>Toolbar.Ask
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D677B1A9671D4D4004F6F2A4469E86EA] =>Toolbar.Ask
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DD1402A9DD4215A43ABDE169A41AFA0E] =>Toolbar.Ask
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E36E114A0EAD2AD46B381D23AD69CDDF] =>Toolbar.Ask
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EF8E618DB3AEDFBB384561B5C548F65E] =>Toolbar.Ask
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\F928123A039649549966D4C29D35B1C9] =>Adware.MyWebSearch
[HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Scheduled Update for Ask Toolbar] =>Toolbar.AskTBar
[HKLM\Software\Wow6432Node\Google\Chrome\Extensions\kkkeikdkpjenmoiicggnnodbkebafgpc] =>Toolbar.Babylon
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375] =>Toolbar.Agent
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5] =>Toolbar.Agent
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\3192AA38321C641458DBDAF83979D193] =>Toolbar.Babylon
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0CFE535C35F99574E8340BFA75BF92C2] =>Toolbar.Ask
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{47B614AF-B4CC-485B-B331-BE26F02ED4CC}] =>Toolbar.Babylon
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{47B614AF-B4CC-485B-B331-BE26F02ED4CC}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{47B614AF-B4CC-485B-B331-BE26F02ED4CC}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Browser Helper Object1.4] =>Toolbar.Babylon
[HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\OpenCandyHelperRunOnce] =>Adware.OpenCandy
[HKLM\Software\Classes\Interface\{928FE5E7-D557-46B7-8AF6-17ACCE1FB4ED}] =>Toolbar.Conduit
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1D970ED5-3EDA-438D-BFFD-715931E2775B}] =>Toolbar.Sorcim
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{1D970ED5-3EDA-438D-BFFD-715931E2775B}] =>Toolbar.Sorcim
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\464AA55239C100F32AF2D438EDDC0F47] =>Adware.IMBooster
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5652BA3D5FB98AE31B337BF0AF939856] =>Adware.IMBooster
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\86EB95E1AFCBABE3DB9ECCC669B99494] =>Adware.IMBooster
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CA0054A5AB3EFFE4CB5660E44A1E7DCC] =>Adware.Boxore^
C:\Program Files (x86)\Browser Helper Object =>Toolbar.Babylon
C:\Users\dav\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof =>Toolbar.AVGSearch
C:\Program Files (x86)\Internet Explorer\cr_addon.crx =>Toolbar.Babylon
~ Additionnel Scan: 341919 Items scanned in 01mn 05s



---\\ Etat g�n�ral des services non Microsoft (EGS) (SR=Running, SS=Stopped)
SR - | Auto 10/05/2013 65640 | (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
SR - | Auto 28/05/2013 163328 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
SR - | Auto 28/03/2009 16896 | (AgereModemAudio) . (.LSI Corporation.) - C:\Program Files\LSI SoftModem\agr64svc.exe
SR - | Auto 21/12/2012 57008 | (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
SS - | Auto 10/04/2013 1428472 | (avgfws) . (.AVG Technologies CZ, s.r.o..) - C:\Program Files (x86)\AVG\AVG2013\avgfws.exe
SS - | Auto 13/05/2013 4937264 | (AVGIDSAgent) . (.AVG Technologies CZ, s.r.o..) - C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe
SR - | Auto 18/04/2013 283136 | (avgwd) . (.AVG Technologies CZ, s.r.o..) - C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe
SR - | Auto 30/08/2011 462184 | (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe
SR - | Auto 30/09/2009 844320 | (ePowerSvc) . (.Acer Incorporated.) - C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
SR - | Auto 28/08/2009 1150496 | (Greg_Service) . (.Acer Incorporated.) - C:\Program Files (x86)\Acer\Registration\GregHSRW.exe
SS - | Auto 15/06/2011 135664 | (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
SS - | Demand 15/06/2011 135664 | (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
SS - | Demand 25/08/2012 194032 | (gusvc) . (.Google.) - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
SR - | Demand 14/07/2009 27136 | C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll (hpqcxs08) . (.Hewlett-Packard Co..) - C:\Windows\System32\svchost.exe
SR - | Auto 14/07/2009 27136 | C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll (hpqddsvc) . (.Hewlett-Packard Co..) - C:\Windows\System32\svchost.exe
SR - | Auto 14/07/2009 27136 | C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.dll (HPSLPSVC) . (.Hewlett-Packard Co..) - C:\Windows\System32\svchost.exe
SR - | Auto 05/06/2009 354840 | (IAANTMON) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
SS - | Demand 03/04/2005 69632 | (IDriverT) . (.Macrovision Corporation.) - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
SS - | Demand 20/02/2013 641352 | (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe
SR - | Auto 22/05/2013 120592 | (McAfee SiteAdvisor Service) . (.McAfee, Inc..) - C:\Program Files (x86)\McAfee\SiteAdvisor\mcsacore.exe
SS - | Demand 05/02/2013 235216 | (McComponentHostService) . (.McAfee, Inc..) - C:\Program Files (x86)\McAfee Security Scan\3.0.318\McCHSvc.exe
SS - | Demand 03/07/2013 117144 | (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
SS - | Demand 01/02/2010 305520 | (MWLService) . (.Egis Technology Inc..) - C:\Program Files (x86)\EgisTec MyWinLocker\x86\MWLService.exe
SR - | Auto 14/07/2009 27136 | C:\Windows\system32\HPZinw12.dll (Net Driver HPZ12) . (.Hewlett-Packard.) - C:\Windows\System32\svchost.exe
SR - | Auto 09/03/2010 250368 | (NTI IScheduleSvc) . (.NewTech Infosystems, Inc..) - C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe
SS - | Demand 06/11/2009 50432 | (NTIBackupSvc) . (.NewTech InfoSystems, Inc..) - C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe
SR - | Auto 06/11/2009 144640 | (NTISchedulerSvc) . (.NewTech Infosystems, Inc..) - C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
SR - | Auto 03/10/2009 392296 | (nvsvc) . (.NVIDIA Corporation.) - C:\Windows\system32\nvvsvc.exe
SS - | Auto 18/09/2012 1082016 | (Orange update Core Service) . (.France Telecom SA.) - C:\Program Files (x86)\Orange\OrangeUpdate\Service\OUCore.exe
SR - | Auto 14/07/2009 27136 | C:\Windows\system32\HPZipm12.dll (Pml Driver HPZ12) . (.Hewlett-Packard.) - C:\Windows\System32\svchost.exe
SR - | Auto 22/09/2010 249136 | (SeaPort) . (.Microsoft Corporation.) - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
SR - | Auto 22/03/2013 93072 | (TomTomHOMEService) . (.TomTom.) - C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe
SR - | Auto 29/01/2010 243232 | (Updater Service) . (.Acer Group.) - C:\Program Files\Acer\Acer Updater\UpdaterService.exe
SS - | Auto 0 | (vToolbarUpdater15.3.0) . (...) - C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.3.0\ToolbarUpdater.exe =>Toolbar.AVGSearch
SS - | Demand 14/07/2009 27136 | C:\Program Files (x86)\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
SR - | Auto 0 | (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe
SR - | Auto 14/07/2009 27136 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
~ Services: Scanned in 00mn 02s



---\\ Recherche Master Boot Record Infection (MBR)(O80)
Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net
Run by dav at 04/07/2013 16:18:39

device: opened successfully
user: error reading MBR

Disk trace:
error: Read Descripteur non valide
kernel: error reading MBR
~ MBR: 9 Legitimates Filtered in 00mn 02s



---\\ Recherche Master Boot Record Infection (MBRCheck)(O80)
Written by ad13, http://ad13.geekstog
Run by dav at 04/07/2013 16:18:41

********* Dump file Name *********
C:\PhysicalDisk0_MBR.bin
~ MBR: Scanned in 00mn 04s



---\\ Malicius Software Information
~ http://nicolascoolman.webs.com/apps/blog/show/28927746-toolbar-ask =>Toolbar.Ask
~ http://nicolascoolman.webs.com/apps/blog/show/27161672-hijacker-eazel =>Hijacker.Eazel
~ http://nicolascoolman.webs.com/apps/blog/show/26678994-hijacker-babsolution =>Hijacker.BabSolution
~ http://nicolascoolman.webs.com/apps/blog/show/28441146-pup-imesh =>PUP.iMesh
~ http://nicolascoolman.webs.com/apps/blog/show/27146838-adware-mywebsearch =>Adware.MyWebSearch
~ http://nicolascoolman.webs.com/apps/blog/show/28927746-toolbar-ask =>Toolbar.Ask
~ http://nicolascoolman.webs.com/apps/blog/show/26627369-toolbar-babylon =>Toolbar.Babylon
~ http://nicolascoolman.webs.com/apps/blog/show/26770694-adware-opencandy =>Adware.OpenCandy
~ http://nicolascoolman.webs.com/apps/blog/entries/show/29507721-toolbar-conduit =>Toolbar.Conduit
~ http://nicolascoolman.webs.com/apps/blog/show/26684723-adware-imbooster =>Adware.IMBooster
~ http://nicolascoolman.webs.com/apps/blog/show/26626977-adware-boxore =>Adware.Boxore
~ MSI: 11 link(s) detected in 00mn 05s



~ 2408 Legitimates filtered by white list
End of the scan (680 lines in 04mn 02s)(2)

Publicité


Signaler le contenu de ce document

Publicité