~ Rapport de ZHPDiag v2014.3.2.6 - Nicolas Coolman (03/03/2014)
~ Lancé par Administrateur (03/03/2014 15:13:41)
~ Adresse du Site Web http://nicolascoolman.webs.com
~ Forums gratuits d'Assistance à la désinfection : http://nicolascoolman.webs.com/apps/links/
~ Traduit par Nicolas Coolman
~ Etat de la version :
~ Liste blanche : Activée par le programme
~ Elévation des Privilèges : OK
~ User Account Control (UAC): Not Found


---\\ Navigateurs Internet
MSIE: Internet Explorer v8.0.6001.18702 (Defaut)
MFIE: Mozilla Firefox 27.0.1
GCIE: Google Chrome v33.0.1750.117

---\\ Informations sur les produits Windows
~ Langage: Français
Microsoft Windows XP, 32-bit Service Pack 3 (Build 2600)
Windows Automatic Updates : OK
Windows Genuine Advantage : OK

---\\ Logiciels de protection du système
Avira Free Antivirus v14.0.2.286
McAfee Security Scan Plus v3.8.141.11

---\\ Logiciels d'optimisation du système
CCleaner =>Piriform Ltd

---\\ Logiciels de partage PeerToPeer

---\\ Surveillance de Logiciels
Adobe Flash Player 12 Plugin
Adobe Reader XI
Java 7 Update 51

---\\ Informations sur le système
~ Processor: x86 Family 6 Model 23 Stepping 10, GenuineIntel
~ Operating System: 32 Bits
Boot mode: Normal (Normal boot)
Total RAM: 2021 MB (33% free)
System Restore: Activé (Enable)
System drive C: has 135 GB (61%) free of 221 GB

---\\ Mode de connexion au système
~ Computer Name: KIKINOU
~ User Name: Administrateur
~ All Users Names: SUPPORT_388945a0, HelpAssistant, ASPNET, Administrateur,
~ Unselected Option: O45,O61,O62,O65,O66,O80,O82,O89
Logged in as Administrator

---\\ Variables d'environnement
~ System Unit : C:\
~ %AppZHP% : C:\Documents and Settings\Administrateur\Application Data\ZHP\
~ %AppData% : C:\Documents and Settings\Administrateur\Application Data\
~ %Desktop% : C:\Documents and Settings\Administrateur\Bureau\
~ %Favorites% : C:\Documents and Settings\Administrateur\Favoris\
~ %LocalAppData% : C:\Documents and Settings\Administrateur\Local Settings\Application Data\
~ %StartMenu% : C:\Documents and Settings\Administrateur\Menu Démarrer\
~ %Windir% : C:\WINDOWS\
~ %System% : C:\WINDOWS\system32\

---\\ Enumération des unités disques
C: Hard drive, Flash drive, Thumb drive (Free 135 Go of 221 Go)
D: Hard drive, Flash drive, Thumb drive (Free 7 Go of 12 Go)
E: CD-ROM drive (Not Inserted)
F: Floppy drive, Flash card reader, USB Key (Not Inserted)
G: Floppy drive, Flash card reader, USB Key (Not Inserted)
H: Floppy drive, Flash card reader, USB Key (Not Inserted)
I: Floppy drive, Flash card reader, USB Key (Not Inserted)
J: Floppy drive, Flash card reader, USB Key (Not Inserted)



---\\ Etat du Centre de Sécurité Windows
~ Security Center: 44 Legitimates Filtered in 00mn 00s



---\\ Recherche particulière de fichiers génériques
[MD5.F2317622D29F9FF0F88AEECD5F60F0DD] - (.Microsoft Corporation - Explorateur Windows.) (.14/04/2008 - 03:34:03.) -- C:\WINDOWS\Explorer.exe [1037824]
[MD5.2988BFF8257A55EA8AFD038F49F81A34] - (.Microsoft Corporation - Internet Extensions for Win32.) (.06/02/2014 - 00:20:01.) -- C:\WINDOWS\system32\wininet.dll [920064]
[MD5.DD73D6B9F6B4CB630CF35B438B540174] - (.Microsoft Corporation - Application d'ouverture de session Windows NT.) (.14/04/2008 - 03:34:28.) -- C:\WINDOWS\system32\Winlogon.exe [512000]
[MD5.1E44BC1E83D8FD2305F8D452DB109CF9] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.17/08/2011 - 14:49:54.) -- C:\WINDOWS\system32\Drivers\AFD.sys [138496]
[MD5.9F3A2F5AA6875C72BF062C712CFA2674] - (.Microsoft Corporation - IDE/ATAPI Port Driver.) (.13/04/2008 - 19:40:30.) -- C:\WINDOWS\system32\Drivers\atapi.sys [96512]
[MD5.C885B02847F5D2FD45A24E219ED93B32] - (.Microsoft Corporation - CD-ROM File System Driver.) (.13/04/2008 - 20:14:21.) -- C:\WINDOWS\system32\Drivers\Cdfs.sys [63744]
[MD5.1F4260CC5B42272D71F79E570A27A4FE] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.13/04/2008 - 19:40:46.) -- C:\WINDOWS\system32\Drivers\Cdrom.sys [62976]
[MD5.31F923EB2170FC172C81ABDA0045D18C] - (.Microsoft Corporation - Pilote de cryptographie FIPS.) (.14/04/2008 - 02:57:38.) -- C:\WINDOWS\system32\Drivers\Fips.sys [44672]
[MD5.573C7D0A32852B48F3058CFD8026F511] - (.Windows (R) Server 2003 DDK provider - High Definition Audio Bus Driver v1.0a.) (.13/04/2008 - 17:36:05.) -- C:\WINDOWS\system32\Drivers\HDAudBus.sys [144384]
[MD5.A09BDC4ED10E3B2E0EC27BB94AF32516] - (.Microsoft Corporation - Pilote de port i8042.) (.14/04/2008 - 03:00:52.) -- C:\WINDOWS\system32\Drivers\i8042prt.sys [54144]
[MD5.083A052659F5310DD8B6A6CB05EDCF8E] - (.Microsoft Corporation - IMAPI Kernel Driver.) (.13/04/2008 - 19:40:58.) -- C:\WINDOWS\system32\Drivers\Imapi.sys [42112]
[MD5.CC748EA12C6EFFDE940EE98098BF96BB] - (.Microsoft Corporation - IP Network Address Translator.) (.13/04/2008 - 19:57:15.) -- C:\WINDOWS\system32\Drivers\IpNat.sys [152832]
[MD5.23C74D75E36E7158768DD63D92789A91] - (.Microsoft Corporation - IPSec Driver.) (.13/04/2008 - 20:19:42.) -- C:\WINDOWS\system32\Drivers\IPSec.sys [75264]
[MD5.7D304A5EB4344EBEEAB53A2FE3FFB9F0] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.15/07/2011 - 14:29:31.) -- C:\WINDOWS\system32\Drivers\MRxSmb.sys [456320]
[MD5.74B2B2F5BEA5E9A3DC021D685551BD3D] - (.Microsoft Corporation - MBT Transport driver.) (.13/04/2008 - 20:21:00.) -- C:\WINDOWS\system32\Drivers\netBT.sys [162816]
[MD5.78A08DD6A8D65E697C18E1DB01C5CDCA] - (.Microsoft Corporation - NT File System Driver.) (.13/04/2008 - 20:15:53.) -- C:\WINDOWS\system32\Drivers\ntfs.sys [574976]
[MD5.8FD0BDBEA875D06CCF6C945CA9ABAF75] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/04/2008 - 03:09:40.) -- C:\WINDOWS\system32\Drivers\Parport.sys [80384]
[MD5.11B4A627BC9614B885C4969BFA5FF8A6] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.13/04/2008 - 20:19:43.) -- C:\WINDOWS\system32\Drivers\Rasl2tp.sys [51328]
[MD5.15CABD0F7C00C47C70124907916AF3F1] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.13/04/2008 - 19:32:51.) -- C:\WINDOWS\system32\Drivers\rdpdr.sys [196224]
[MD5.D8EB2A7904DB6C916EB5361878DDCBAE] - (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) (.14/04/2008 - 02:57:34.) -- C:\WINDOWS\system32\Drivers\redbook.sys [58752]
[MD5.46DE1126684369BACE4849E4FC8C43CA] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.14/04/2008 - 02:56:04.) -- C:\WINDOWS\system32\Drivers\volsnap.sys [53376]
~ Generic Processes: Scanned in 00mn 00s



---\\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 2/76
~ Mes musiques (My Musics) : 1/57
~ Mes Videos (My Videos) : 1/12
~ Mes Favoris (My Favorites) : 1/77
~ Mes Documents (My Documents) : 1/633
~ Mon Bureau (My Desktop) : 0/12377
~ Menu demarrer (Programs) : 1/57
~ Hidden Files: Scanned in 00mn 13s



---\\ Processus lancés
[MD5.22BA7E3D7D6CBBE2D5171FA017BAA117] - (.Cherished Technololgy LIMITED - IePlugin Service.) -- C:\Documents and Settings\All Users\Application Data\IePluginService\PluginService.exe [508016] [PID.1540] =>Trojan.Trojan.SProtector
[MD5.3FE10E8516DB3F29817B03C5A446A3DA] - (.Cherished Technololgy LIMITED - WPM Service.) -- C:\Documents and Settings\All Users\Application Data\WPM\wprotectmanager.exe [501904] [PID.1568] =>PUP.WpManager
[MD5.FE79366FECD444A16CCA9979134DBEA8] - (.Avira Operations GmbH & Co. KG - Antivirus Host Framework Service.) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe [440376] [PID.1692]
[MD5.FDE9C7030FB1E9E2715E113EE6A10F90] - (.Avira Operations GmbH & Co. KG - Antivirus Host Framework Service.) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe [440376] [PID.288]
[MD5.20F6F19FE9E753F2780DC2FA083AD597] - (.Apple Inc. - MobileDeviceService.) -- C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe [37664] [PID.304]
[MD5.F4D9392B1DC66313EADC0169D7D18440] - (.Just Develop It - Backup Stack.) -- C:\Program Files\MyPC Backup\BackupStack.exe [36392] [PID.328] =>PUP.MyPCBackup
[MD5.6163664C7E9CD110AF70180C126C3FDC] - (.Microsoft Corporation - BCM SQL Startup Service.) -- C:\Program Files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe [30312] [PID.488]
[MD5.F832F1505AD8B83474BD9A5B1B985E01] - (.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe [345376] [PID.508]
[MD5.D3F9205CC4CB07553F2F9472C767EA87] - (.Teruten - FsUsbDevice.) -- C:\WINDOWS\system32\FsUsbExService.exe [233472] [PID.524]
[MD5.626A24ED1228580B9518C01930936DF9] - (.Google Inc. - Programme d'installation de Google.) -- C:\Program Files\Google\Update\GoogleUpdate.exe [133104] [PID.1296]
[MD5.213822072085B5BBAD9AF30AB577D817] - (.InterVideo - RegMgr Module.) -- C:\Program Files\Fichiers communs\InterVideo\RegMgr\iviRegMgr.exe [112152] [PID.1340]
[MD5.B9436A665A8621073A12338B16D7BFD4] - (.Oracle Corporation - Java Quick Starter Service.) -- C:\Program Files\Java\jre7\bin\jqs.exe [182696] [PID.1468]
[MD5.11F714F85530A2BD134074DC30E99FCA] - (.Microsoft Corporation - Machine Debug Manager.) -- C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.exe [322120] [PID.1812]
[MD5.C06719A652E32D5B65CC25C45D44A0D3] - (.Microsoft Corporation - SQL Server Windows NT.) -- C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe [7442493] [PID.1912]
[MD5.C7AEFF5113DFEA823A2F50133249E2B8] - (.PDF Complete Inc - Dispatcher.) -- C:\Program Files\PDF Complete\pdfsvc.exe [576024] [PID.1792]
[MD5.B2D01290C0E0465ACA54C2088E947823] - (...) -- C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe [39056] [PID.2208]
[MD5.D89083C4EB02DACA8F944B0E05E57F9D] - (.Microsoft Corporation - SQL Server VSS Writer.) -- c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe [86880] [PID.2336]
[MD5.CFBD6C9DC0677E7EB94B212BC745524A] - (...) -- C:\Documents and Settings\Administrateur\Application Data\VOPackage\VOsrv.exe [353792] [PID.2368] =>Adware.Adware.Downware
[MD5.6F1E9AB820B3DD8BD38C0190A206205D] - (.Avira Operations GmbH & Co. KG - AntiVir shadow copy service.) -- C:\Program Files\Avira\AntiVir Desktop\avshadow.exe [431672] [PID.2852]
[MD5.84B08F1F2825CF73A67BA9578BE0CDBC] - (.Intel Corporation - igfxTray Module.) -- C:\WINDOWS\system32\igfxtray.exe [141848] [PID.3312]
[MD5.2E0B0A051FFAA86E358465BB0880D453] - (.Microsoft Corporation - Windows Update.) -- C:\WINDOWS\system32\wuauclt.exe [53784] [PID.3372]
[MD5.B1C4C9A72DE1A1C2227EF648CF461CFF] - (.Intel Corporation - igfxsrvc Module.) -- C:\WINDOWS\system32\igfxsrvc.exe [252440] [PID.3420]
[MD5.FF0097C211EB4DB5E20ADB1EC15666D3] - (.Intel Corporation - hkcmd Module.) -- C:\WINDOWS\system32\hkcmd.exe [166424] [PID.3524]
[MD5.6413E9E933033FE8F2B0FB91B647D83C] - (.Intel Corporation - persistence Module.) -- C:\WINDOWS\system32\igfxpers.exe [137752] [PID.668]
[MD5.AFE7FDC46053CCE2483F3BECAAD24242] - (.Analog Devices, Inc. - SMax4PNP.) -- C:\Program Files\Analog Devices\Core\smax4pnp.exe [1036288] [PID.3188]
[MD5.7E52CC3AE4C554DABDAB096157F367FF] - (.Microsoft Corporation - Outlook Express.) -- C:\Program Files\Outlook Express\msimn.exe [60416] [PID.3828]
[MD5.C1915A84502B38D548D0C9351DFF3E47] - (.Pas de propriétaire - Scheduler.) -- C:\WINDOWS\SMINST\Scheduler.exe [872448] [PID.3772]
[MD5.4575C69BC34B111C99A5DFBE8AF10EBB] - (.Hewlett-Packard - hpwuSchd.) -- C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe [49152] [PID.680]
[MD5.B25F66FDAA5A0389500C8A9E0433E5A5] - (.HP - Pas de description.) -- C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe [188416] [PID.1716]
[MD5.29BA776A1CD7DF203E80B31DEC44A35C] - (.HashLogic - Certificate Synchronizer.) -- C:\Program Files\HashLogic\Web Smart Pack\bin\idoCertSyncCSOV.exe [163840] [PID.2120]
[MD5.0CFBE2D135A73CA98381FC8CC8BC5A03] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe [421160] [PID.2204]
[MD5.DD231039B13EC2ABDE315D76E658EF0E] - (.Avira Operations GmbH & Co. KG - Antivirus System Tray Tool (Desktop).) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [684600] [PID.2248]
[MD5.225518F190EDBC37CA32197A3E94B498] - (.RealNetworks, Inc. - RealNetworks Scheduler.) -- C:\program files\real\realplayer\update\realsched.exe [295512] [PID.2328]
[MD5.5B6E8E09BE6401A7E022F52FDFCB2FF8] - (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe [254336] [PID.2444]
[MD5.BB3152BE7A21289456CB299175962EC8] - (...) -- C:\Program Files\Bench\BService\bservice.exe [49664] [PID.208] =>PUP.GiganticSavings
[MD5.0ABEEA039C171D5DB4EF78BCE6BAB73D] - (...) -- C:\Program Files\Bench\Wd\wd.exe [60416] [PID.3064] =>PUP.GiganticSavings
[MD5.E13EA4860E8F2AA845B53BFD2B6FEC5B] - (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe [1695232] [PID.3360]
[MD5.64584E925516568C2F6ACF337991E9BC] - (.Samsung Electronics Co., Ltd. - NPSAgent.) -- C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe [102400] [PID.688]
[MD5.FC03DC2FFE8263D5AD1D7D8C77E90491] - (.V3,Inc. - FAX32COMponent Spawn Application.) -- C:\Program Files\V3CallCenter\V3faxecp.exe [32768] [PID.3268]
[MD5.B2EB1A530F47EEEA0E8F42D4D29392EE] - (.Pas de propriétaire - ADIMON MFC Application.) -- C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe [962663] [PID.1964]
[MD5.CF03C8F6F6B0D71F6E5BCE167FCF7CA6] - (.Hewlett-Packard Co. - HP Digital Imaging Monitor.) -- C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe [214360] [PID.2460]
[MD5.43E2CFC37953501EA40D852AE585E7C0] - (.McAfee, Inc. - McAfee Security Scanner Scheduler.) -- C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe [277920] [PID.2116]
[MD5.978294640062C57482BF2B65A342C266] - (.Microsoft Corporation - SQL Server Service Manager.) -- C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe [69632] [PID.2112]
[MD5.7DC4E93F9BE692E29B1E1D27B6A389DC] - (.Agere Systems - LtMoh MFC Application.) -- C:\Program Files\OLITEC\MOH\LtMoh.exe [188416] [PID.204]
[MD5.9033D67B7112D23EDED6789BACDED128] - (.Apple Inc. - iPodService Module (32-bit).) -- C:\Program Files\iPod\bin\iPodService.exe [820520] [PID.2404]
[MD5.12516562AEBDBB61683AB384C17DAC8F] - (.MyPCBackup.com - MyPC Backup.) -- C:\Program Files\MyPC Backup\MyPC Backup.exe [2889256] [PID.2988] =>PUP.MyPCBackup
[MD5.11E8D8272FDBE213ADE3DAD91427CE35] - (.OpenOffice.org - OpenOffice.org 3.3.) -- C:\Program Files\OpenOffice.org 3\program\soffice.exe [11322880] [PID.3024]
[MD5.2337EC951C4AF6E1AF65D10BD9615BEB] - (.OpenOffice.org - OpenOffice.org 3.3.) -- C:\Program Files\OpenOffice.org 3\program\soffice.bin [11314688] [PID.152]
[MD5.80B8AE8E18FF57BE13FF4A5959DB0EC1] - (.Hewlett-Packard Co. - HP CUE Status Root.) -- C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe [184320] [PID.4028]
[MD5.F0898E9BD7C914FB7389F393D189B32F] - (.Hewlett-Packard Co. - HP CUE Alert Popup Window Objects.) -- C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe [569344] [PID.1932]
[MD5.883008A9B5BFF94A153D99DBA54CB5C1] - (.Hewlett-Packard - GPCore COM object.) -- C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe [362496] [PID.3000]
[MD5.D9184C5FF3FD526761D518A95ABA74A3] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe [275568] [PID.2500]
[MD5.FF409C974A9AD58B82374DEEF6B44CBB] - (.Mozilla Corporation - Plugin Container for Firefox.) -- C:\Program Files\Mozilla Firefox\plugin-container.exe [18544] [PID.4464]
[MD5.66EA3B698F9A7EA2DBF0E4B246B6C958] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [8349696] [PID.4896]
~ Processes Running: Scanned in 00mn 03s



---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Preferences
~ Google Browser: 0 Legitimates Filtered in 00mn 00s



---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\xzlqn48n.default-1386660492031\prefs.js
C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\xzlqn48n.default-1386660492031\user.js
M3 - MFPP: Plugins - [Administrateur] -- C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\xzlqn48n.default-1386660492031\searchplugins\Mysearchdial.xml =>Adware.MyWebSearch
M0 - MFSP: prefs.js [Administrateur - xzlqn48n.default-1386660492031] http://www.awesomehp.com =>PUP.Awesomehp
M2 - MFEP: prefs.js [Administrateur - xzlqn48n.default-1386660492031\13c471d9-6cbb-4c08-9dd1-8dc16c66bb1f@cf5065af-ca24-464a-a637-af7582a82514.com] [] HQ-Video-Profession-1.3 v (..)
M2 - MFEP: prefs.js [Administrateur - xzlqn48n.default-1386660492031\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com] [] Feven Pro 1.1 v (..) =>PUP.CrossRider
M2 - MFEP: prefs.js [Administrateur - xzlqn48n.default-1386660492031\quick_start@gmail.com] [] Quick Start v (..)
M2 - MFEP: prefs.js [Administrateur - xzlqn48n.default-1386660492031\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}] [] MySearchDial NewTab v (..) =>Adware.MyWebSearch
P2 - FPN: [HKCU] [@facebook.com/FBPlugin,version=1.0.3] - (.Pas de propriétaire - Provides additional functionality on Facebook. See .Facebook
~ IE Browser: 16 Legitimates Filtered in 00mn 00s



---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1
~ Proxy management: Scanned in 00mn 00s



---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
F2 - REG:system.ini: USERINIT=C:\WINDOWS\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\WINDOWS\explorer.exe
F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"
~ Keys: Scanned in 00mn 00s



---\\ Hosts file redirection (O1)
O1 - Hosts: 54.225.95.126 dmcecclamecbinmplcolhaljlclhbgah
~ Hosts File: Scanned in 00mn 00s
~ Nombre de lignes (Lines number): 22



---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: CrossriderApp0051578 - {11111111-1111-1111-1111-110511151178} . (.HQ-Video - HQ-Video-Profession-1.3 BHO.) -- C:\Program Files\HQ-Video-Profession-1.3\HQ-Video-Profession-1.3-bho.dll =>PUP.CrossRider
O2 - BHO: CrossriderApp0051680 - {11111111-1111-1111-1111-110511161180} . (.Feven - Feven Pro 1.1 BHO.) -- C:\Program Files\Feven Pro 1.1\Feven Pro 1.1-bho.dll =>PUP.CrossRider
O2 - BHO: IETabPage Class - {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} . (.Thinknice Co. Limited - SupTab setup package.) -- C:\Program Files\SupTab\SupTab.dll =>PUP.SupTab
O2 - BHO: MarkKit - {57f46c75-5f00-4b14-8d33-98069677a444} . (...) -- C:\Program Files\MarkKit\136.dll
O2 - BHO: Coupon Server BHO - {F791D8AE-47E8-40A5-A913-EB2D2AF29602} . (.Pas de propriétaire - FrameworkBHO.) -- C:\Program Files\Coupon Server\FrameworkBHO.dll
~ BHO: 30 Legitimates Filtered in 00mn 01s



---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar: (no name) - [HKLM]{0BF43445-2F28-4351-9252-17FE6E806AA0} Clé orpheline
O3 - Toolbar: Google Toolbar - [HKLM]{2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll =>Toolbar.Google
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{01E04581-4EEE-11D0-BFE9-00AA005B4383} Clé orpheline
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{0E5CBF21-D15F-11D0-8301-00AA005B4383} Clé orpheline
~ Toolbar: Scanned in 00mn 00s



---\\ Autres liens utilisateurs (O4)
O4 - GS\Program [AllUsers]: Install Altiris AClient.lnk . (.Hewlett-Packard Company - Quick Shortcut Creator.) -- C:\COMPAQ\Altiris\AClient\QuickLnk.exe
O4 - GS\Program [AllUsers]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe http://www.awesomehp.com =>PUP.Awesomehp
O4 - GS\Program [AllUsers]: SUPER © Uninstall.lnk . (.eRightSoft - TIN Setup.) -- C:\Program Files\eRightSoft\SUPER\Setup.exe
O4 - GS\Program [AllUsers]: SUPER ©.lnk . (...) -- C:\Program Files\eRightSoft\SUPER\SUPER.exe
O4 - GS\Program [AllUsers]: Windows Messenger.lnk . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe
O4 - GS\Program [Administrateur]: 3797 Super Arriere-Plans.lnk . (...) -- C:\300_Icones\mega-fonds.url
O4 - GS\Program [Administrateur]: 475 Super Icones 3D.lnk . (...) -- C:\300_Icones\icones_3d.url
O4 - GS\Program [Administrateur]: Changer Mes Icones.lnk . (...) -- C:\300_Icones\changer_icones300.htm
O4 - GS\Program [Administrateur]: Créez Votre Site Instantanément!.lnk . (...) -- C:\300_Icones\templates.url
O4 - GS\Program [Administrateur]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - GS\Program [Administrateur]: Le GRAND Secret.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\300_Icones\Grands_Secrets.url
O4 - GS\Program [Administrateur]: Pimentez Vos Textes!.lnk . (.Microsoft Corporation - Outlook Express.) -- C:\300_Icones\Polices_de_texte.url =>.Microsoft Corporation
O4 - GS\Program [Administrateur]: Stimulez Votre Cerveau!.lnk . (...) -- C:\300_Icones\Sudoku.url
~ Global Startup: 29 Legitimates Filtered in 00mn 00s



---\\ Applications lancées au démarrage du sytème (O4)
O4 - GS\Program [AllUsers]: CallCenter Printer Interface.lnk . (.V3,Inc. - FAX32COMponent Spawn Application.) -- C:\Program Files\V3CallCenter\V3faxecp.exe
O4 - GS\Program [AllUsers]: DSLMON.lnk . (...) -- C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
O4 - GS\Program [AllUsers]: HP Digital Imaging Monitor.lnk . (.Hewlett-Packard Co. - HP Digital Imaging Monitor.) -- C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe =>.Hewlett-Packard Co
O4 - GS\Program [AllUsers]: McAfee Security Scan Plus.lnk . (.McAfee, Inc. - McAfee Security Scanner Scheduler.) -- C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe
O4 - GS\Program [AllUsers]: Service Manager.lnk . (.Microsoft Corporation - SQL Server Service Manager.) -- C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
O4 - GS\Program [Administrateur]: MOH.lnk . (.Agere Systems - LtMoh MFC Application.) -- C:\Program Files\OLITEC\MOH\LtMoh.exe
O4 - GS\Program [Administrateur]: MyPC Backup.lnk . (.MyPCBackup.com - MyPC Backup.) -- C:\Program Files\MyPC Backup\MyPC Backup.exe =>PUP.MyPCBackup
O4 - GS\Program [Administrateur]: OpenOffice.org 3.3.lnk . (...) -- C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [SoundMAXPnP] . (.Analog Devices, Inc. - SMax4PNP.) -- C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [PDF Complete] . (.PDF Complete Inc - Sentry for PDF.) -- C:\Program Files\PDF Complete\pdfsty.exe =>.PDF Complete Inc
O4 - HKLM\..\Run: [SetRefresh] . (.Hewlett-Packard Company - SetRefresh.) -- C:\Program Files\Compaq\SetRefresh\SetRefresh.exe
O4 - HKLM\..\Run: [Recguard] . (.Pas de propriétaire - Recguard Application.) -- C:\WINDOWS\Sminst\Recguard.exe
O4 - HKLM\..\Run: [Reminder] . (.Pas de propriétaire - Reminder_XP.) -- C:\WINDOWS\Creator\Remind_XP.exe
O4 - HKLM\..\Run: [Scheduler] . (.Pas de propriétaire - Scheduler.) -- C:\WINDOWS\SMINST\Scheduler.exe
O4 - HKLM\..\Run: [HP Software Update] . (.Hewlett-Packard - hpwuSchd.) -- C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe =>.Hewlett-Packard Co
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] . (.HP - Pas de description.) -- C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
O4 - HKLM\..\Run: [IdopteSynchronizer] . (.HashLogic - Certificate Synchronizer.) -- C:\Program Files\HashLogic\Web Smart Pack\bin\idoCertSyncCSOV.exe
O4 - HKLM\..\Run: [hpqSRMon] . (.Hewlett-Packard - HpqSRmon.) -- C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe
O4 - HKLM\..\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files\QuickTime\qttask.exe
O4 - HKLM\..\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [avgnt] . (.Avira Operations GmbH & Co. KG - Antivirus System Tray Tool (Desktop).) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
O4 - HKLM\..\Run: [TkBellExe] . (.RealNetworks, Inc. - RealNetworks Scheduler.) -- C:\program files\real\realplayer\update\realsched.exe =>.RealNetworks, Inc
O4 - HKLM\..\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe =>.Oracle Corporation
O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe =>.Adobe Systems Incorporated
O4 - HKLM\..\Run: [BService] . (...) -- C:\Program Files\Bench\BService\bservice.exe =>PUP.GiganticSavings
O4 - HKLM\..\Run: [Wd] . (...) -- C:\Program Files\Bench\Wd\wd.exe =>PUP.GiganticSavings
O4 - HKLM\..\RunOnce: [Coupon Server-repairJob] . (.Microsoft Corporation - Microsoft (R) Windows Based Script Host.) -- C:\WINDOWS\system32\wscript.exe
O4 - HKCU\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe
O4 - HKCU\..\Run: [AutoStartNPSAgent] . (.Samsung Electronics Co., Ltd. - NPSAgent.) -- C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe
O4 - HKCU\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe =>Toolbar.Google
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe
O4 - HKUS\.DEFAULT\..\Run: [DWQueuedReporting] . (.Microsoft Corporation - Watson Subscriber for SENS Network Notifica.) -- C:\Program Files\Fichiers communs\Microsoft Shared\DW\DWTRIG20.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe
O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] . (.Microsoft Corporation - Watson Subscriber for SENS Network Notifica.) -- C:\Program Files\Fichiers communs\Microsoft Shared\DW\DWTRIG20.exe
O4 - HKUS\.DEFAULT\..\RunOnce: [Del1633937] . (.Microsoft Corporation - Interpréteur de commandes Windows.) -- C:\WINDOWS\system32\cmd.exe =>.Microsoft Corporation
O4 - HKUS\.DEFAULT\..\RunOnce: [Del1473953] . (.Microsoft Corporation - Interpréteur de commandes Windows.) -- C:\WINDOWS\system32\cmd.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-18\..\RunOnce: [Del1633937] . (.Microsoft Corporation - Interpréteur de commandes Windows.) -- C:\WINDOWS\system32\cmd.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-18\..\RunOnce: [Del1473953] . (.Microsoft Corporation - Interpréteur de commandes Windows.) -- C:\WINDOWS\system32\cmd.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-21-436780474-486762020-2033564595-500\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-21-436780474-486762020-2033564595-500\..\Run: [MSMSGS] . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe
O4 - HKUS\S-1-5-21-436780474-486762020-2033564595-500\..\Run: [AutoStartNPSAgent] . (.Samsung Electronics Co., Ltd. - NPSAgent.) -- C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe
O4 - HKUS\S-1-5-21-436780474-486762020-2033564595-500\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe =>Toolbar.Google
~ Application: Scanned in 00mn 00s



---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} -- Clé orpheline
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (...) -- C:\Program Files\Microsoft Office\Office12\REFBARH.ICO
O9 - Extra button: Afficher ou masquer l'HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} . (.Hewlett-Packard Co. - HP Smart Web Printing add-on for Internet Explorer.) -- C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O9 - Extra button: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} -- Clé orpheline
O9 - Extra button: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe
~ IE Extra Buttons: Scanned in 00mn 00s



---\\ Objets ActiveX (Downloaded Program Files)(O16)
O16 - DPF: {49232000-16E4-426C-A231-62846947304B} ((no name)) - https://wimpro3.cce.hp.com/ChatEntry/downloads/sysinfo.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} ((no name)) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1361786832078
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} ((no name)) - http://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab
O16 - DPF: {A06BE318-C096-11D4-964F-0010A4D06F69} ((no name)) - https://tva.dgi.minefi.gouv.fr/activeX/TeleTVA.tva
~ Objets ActiveX: Scanned in 00mn 00s



---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{4121856C-2452-4F97-9D03-D595EB1A7142}: DhcpNameServer = 212.27.40.241 212.27.40.240
O17 - HKLM\System\CS1\Services\Tcpip\..\{4121856C-2452-4F97-9D03-D595EB1A7142}: DhcpNameServer = 212.27.40.241 212.27.40.240
O17 - HKLM\System\CS2\Services\Tcpip\..\{4121856C-2452-4F97-9D03-D595EB1A7142}: DhcpNameServer = 212.27.40.241 212.27.40.240
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 212.27.40.241 212.27.40.240
~ Domain: Scanned in 00mn 00s



---\\ Protocole additionnel (O18)
O18 - Handler: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} . (.Microsoft Corporation - Windows Live Mail.) -- C:\Program Files\Windows Live\Mail\mailcomm.dll =>.Microsoft Corporation
O18 - Filter: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\MSOXMLMF.dll =>.Microsoft Corporation
~ Protocole Additionnel: Scanned in 00mn 00s



---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: crypt32chain . (.Microsoft Corporation - Crypto API32.) -- C:\WINDOWS\system32\crypt32.dll
O20 - Winlogon Notify: cryptnet . (.Microsoft Corporation - Crypto Network Related API.) -- C:\WINDOWS\system32\cryptnet.dll
O20 - Winlogon Notify: cscdll . (.Microsoft Corporation - Agent réseau hors connexion.) -- C:\WINDOWS\system32\cscdll.dll
O20 - Winlogon Notify: dimsntfy . (.Microsoft Corporation - DIMS Notification Handler.) -- C:\WINDOWS\system32\dimsntfy.dll
O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\WINDOWS\system32\igfxdev.dll
O20 - Winlogon Notify: ScCertProp . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
O20 - Winlogon Notify: Schedule . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
O20 - Winlogon Notify: sclgntfy . (.Microsoft Corporation - DLL secondaire de notification de service d.) -- C:\WINDOWS\system32\sclgntfy.dll
O20 - Winlogon Notify: SensLogn . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\WlNotify.dll
O20 - Winlogon Notify: termsrv . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
O20 - Winlogon Notify: WgaLogon . (.Microsoft Corporation - Notifications Windows Genuine Advantage.) -- C:\WINDOWS\system32\WgaLogon.dll
O20 - Winlogon Notify: wlballoon . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
~ Winlogon: Scanned in 00mn 00s



---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: Computer Backup (MyPC Backup) (BackupStack) . (.Just Develop It - Backup Stack.) - C:\Program Files\MyPC Backup\BackupStack.exe =>PUP.MyPCBackup
O23 - Service: IePlugin Service (IePluginService) . (.Cherished Technololgy LIMITED - IePlugin Service.) - C:\Documents and Settings\All Users\Application Data\IePluginService\PluginService.exe =>Trojan.Trojan.SProtector
O23 - Service: Service Component of VO (VOsrv) . (...) - C:\Documents and Settings\Administrateur\Application Data\VOPackage\VOsrv.exe =>Adware.Adware.Downware
O23 - Service: Wpm Service (Wpm) . (.Cherished Technololgy LIMITED - WPM Service.) - C:\Documents and Settings\All Users\Application Data\WPM\wprotectmanager.exe =>PUP.WpManager
~ Services: 16 Legitimates Filtered in 00mn 04s



---\\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Desktop General: BackupWallPaper - .(...) - C:\Documents and Settings\Administrateur\Local Settings\Application Data\Microsoft\Wallpaper2.bmp
O24 - Desktop General: WallPaper - .(...) - C:\Documents and Settings\Administrateur\Local Settings\Application Data\Microsoft\Wallpaper2.bmp
~ Desktop Component: 4 Legitimates Filtered in 00mn 00s



---\\ Tâches planifiées en automatique (O39)
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\At1.job [416]
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\At2.job [416]
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\bench-S-1-5-21-436780474-486762020-2033564595-500.job [350] =>PUP.GiganticSavings
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\bench-sys.job [350] =>PUP.GiganticSavings
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\Feven Pro 1.1-chromeinstaller.job [3106] =>PUP.CrossRider
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\Feven Pro 1.1-codedownloader.job [1500] =>PUP.CrossRider
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\Feven Pro 1.1-enabler.job [1398] =>PUP.CrossRider
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\Feven Pro 1.1-firefoxinstaller.job [2304] =>PUP.CrossRider
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\Feven Pro 1.1-updater.job [1544] =>PUP.CrossRider
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\G2MUpdateTask-S-1-5-21-436780474-486762020-2033564595-500.job [532]
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\HQ-Video-Profession-1.3-chromeinstaller.job [3146]
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\HQ-Video-Profession-1.3-codedownloader.job [1542]
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\HQ-Video-Profession-1.3-enabler.job [1440]
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\HQ-Video-Profession-1.3-firefoxinstaller.job [2656]
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\HQ-Video-Profession-1.3-updater.job [1586]
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\SpeedUpMyPC Maintenance.job [284] =>Rogue.SpeedUpMyPC
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\SpeedUpMyPC Startup.job [278] =>Rogue.SpeedUpMyPC
~ Scheduled Task: 26 Legitimates Filtered in 00mn 28s



---\\ Logiciels installés (O42)
O42 - Logiciel: 4D v12.2 - (.4D SAS.) [HKLM] -- {83D3B5C5-3D16-4229-9FAB-9DEFAB5C9BCD}
O42 - Logiciel: BDIVET - (...) [HKLM] -- ODEUNST #1
O42 - Logiciel: Celia - (...) [HKCU] -- CELIA
O42 - Logiciel: Coupon Server - (.Smart Apps.) [HKLM] -- 35852_Coupon Server
O42 - Logiciel: FREE CallCenter - (...) [HKLM] -- V3CallCenter
O42 - Logiciel: Feven Pro 1.1 - (.Feven.) [HKLM] -- Feven Pro 1.1 =>PUP.CrossRider
O42 - Logiciel: HQ-Video-Profession-1.3 - (.HQ-Video.) [HKLM] -- HQ-Video-Profession-1.3
O42 - Logiciel: HashLogic Web Smart Pack 5.1.0 CSOV - (.HashLogic.) [HKLM] -- HashLogic Web Smart Pack CSOV_is1
O42 - Logiciel: IePluginService12.27.0.3326 - (.Cherished Technololgy LIMITED.) [HKLM] -- IePlugins =>Trojan.Trojan.SProtector
O42 - Logiciel: MarkKit - (.MarkKit Software.) [HKLM] -- {dbb0a08d-a9ee-4875-bc45-f88e5d586619}
O42 - Logiciel: MyPC Backup - (.JDi Backup Ltd.) [HKLM] -- MyPC Backup =>PUP.MyPCBackup
O42 - Logiciel: Pro FAX - (.Proactive FAX.) [HKCU] -- c753d267be6b640d
O42 - Logiciel: SupTab - (...) [HKLM] -- SupTab =>PUP.SupTab
O42 - Logiciel: Update for MySearchDial - (.Update for MySearchDial.) [HKCU] -- MySearchDial =>Adware.MyWebSearch
O42 - Logiciel: VO Package - (...) [HKLM] -- VOPackage =>Adware.Adware.Downware
O42 - Logiciel: WPM17.8.0.3393 - (.Cherished Technololgy LIMITED.) [HKLM] -- WPM =>PUP.WpManager
~ Logic: 61 Legitimates Filtered in 00mn 01s



---\\ HKCU & HKLM Software Keys
[HKCU\Software\Crossrider] =>PUP.CrossRider
[HKCU\Software\Express Mailing]
[HKCU\Software\Feven Pro 1.1] =>PUP.CrossRider
[HKCU\Software\HQ-Video-Profession-1.3]
[HKCU\Software\InstallCore] =>Adware.InstallCore
[HKCU\Software\InstalledBrowserExtensions] =>Adware.VidSaver
[HKCU\Software\Kazaa]
[HKCU\Software\SkillEmpire]
[HKCU\Software\Wsa32]
[HKCU\Software\mark_kit]
[HKCU\Software\mysearchdial.com] =>Adware.MyWebSearch
[HKLM\Software\Coupon Server]
[HKLM\Software\Environment Data]
[HKLM\Software\Environment Settings]
[HKLM\Software\Idopte]
[HKLM\Software\MAP-DGAl]
[HKLM\Software\Muratec]
[HKLM\Software\Taronja]
[HKLM\Software\Wpm] =>PUP.WpManager
[HKLM\Software\mysearchdial] =>Adware.MyWebSearch
[HKLM\Software\supTab] =>PUP.SupTab
[HKLM\Software\supWPM] =>PUP.WpManager
~ Key Software: 442 Legitimates Filtered in 00mn 01s



---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 27/01/2014 - 17:45:16 - [42,493] ----D C:\Program Files\BDIVET
O43 - CFD: 01/08/2012 - 12:37:14 - [49,634] ----D C:\Program Files\Celia
O43 - CFD: 27/02/2014 - 18:15:06 - [1,035] ----D C:\Program Files\Coupon Server
O43 - CFD: 27/02/2014 - 18:15:58 - [8,126] ----D C:\Program Files\Feven Pro 1.1 =>PUP.CrossRider
O43 - CFD: 03/04/2009 - 16:24:25 - [8,251] ----D C:\Program Files\HashLogic
O43 - CFD: 27/02/2014 - 18:16:14 - [8,163] ----D C:\Program Files\HQ-Video-Profession-1.3
O43 - CFD: 05/12/2013 - 17:29:14 - [0,879] ----D C:\Program Files\MarkKit
O43 - CFD: 28/02/2014 - 07:56:44 - [27,544] ----D C:\Program Files\MyPC Backup =>PUP.MyPCBackup
O43 - CFD: 19/06/2010 - 15:44:26 - [21,836] ----D C:\Program Files\Play65
O43 - CFD: 27/02/2014 - 18:16:16 - [2,359] ----D C:\Program Files\SupTab =>PUP.SupTab
O43 - CFD: 09/06/2009 - 16:00:06 - [0,337] ----D C:\Program Files\Fichiers communs\MURATEC
O43 - CFD: 27/02/2014 - 18:16:16 - [0,484] ----D C:\Documents and Settings\All Users\Application Data\IePluginService =>Trojan.Trojan.SProtector
O43 - CFD: 27/02/2014 - 18:16:12 - [0,479] ----D C:\Documents and Settings\All Users\Application Data\WPM =>PUP.WpManager
O43 - CFD: 05/12/2013 - 17:28:21 - [0] ----D C:\Documents and Settings\Administrateur\Application Data\driver
O43 - CFD: 03/02/2014 - 16:23:45 - [0,093] ----D C:\Documents and Settings\Administrateur\Application Data\MySearchDial =>Adware.MyWebSearch
O43 - CFD: 27/02/2014 - 18:16:14 - [0,489] ----D C:\Documents and Settings\Administrateur\Application Data\SupTab =>PUP.SupTab
O43 - CFD: 27/02/2014 - 18:14:49 - [0,788] ----D C:\Documents and Settings\Administrateur\Application Data\VOPackage =>Adware.Adware.Downware
O43 - CFD: 03/03/2014 - 14:10:42 - [0,077] ----D C:\Documents and Settings\Administrateur\Application Data\{F791D8AE-47E8-40A5-A913-EB2D2AF29602}
O43 - CFD: 27/02/2014 - 18:15:23 - [1,067] ----D C:\Documents and Settings\Administrateur\Local Settings\Application Data\Coupon Server
O43 - CFD: 04/04/2009 - 07:28:12 - [0,002] ----D C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\BDIVET
O43 - CFD: 27/02/2014 - 18:15:07 - [0,001] ----D C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\MyPC Backup =>PUP.MyPCBackup
O43 - CFD: 19/12/2009 - 14:50:06 - [0,002] ----D C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\Play65
O43 - CFD: 23/04/2009 - 14:35:31 - [0] ----D C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\Proactive FAX
~ Program Folder: 229 Legitimates Filtered in 00mn 44s



---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.F223F04272F85409303481564AF57091] - 03/03/2014 - 10:50:46 ---A- . (...) -- C:\WINDOWS\ie8Uninst.log [31906]
O44 - LFC:[MD5.9E8F02F0DE3D48DD937E3DBE05C866F0] - 03/03/2014 - 11:03:18 ---A- . (...) -- C:\WINDOWS\ie8.log [42023]
O44 - LFC:[MD5.09500614239AB93B1116CE8E14730DEC] - 03/03/2014 - 11:07:32 ---A- . (...) -- C:\WINDOWS\imsins.BAK [1355]
O44 - LFC:[MD5.BE143794281AB8A9290932B7B5800CBC] - 03/03/2014 - 11:07:59 ---A- . (...) -- C:\WINDOWS\updspapi.log [65871]
O44 - LFC:[MD5.8A96A9EEF462B094996D1F71FE41CAAE] - 03/03/2014 - 11:08:04 ---A- . (...) -- C:\WINDOWS\FaxSetup.log [197864]
O44 - LFC:[MD5.926243157E8C2DDDAF88C1F0097653A4] - 03/03/2014 - 11:08:04 ---A- . (...) -- C:\WINDOWS\MedCtrOC.log [13600]
O44 - LFC:[MD5.0D77181DE55AA878746DF76C2A0CC17D] - 03/03/2014 - 11:08:04 ---A- . (...) -- C:\WINDOWS\comsetup.log [65769]
O44 - LFC:[MD5.53FBE7A0AD3A6D6A118F3330B6D2EBAC] - 03/03/2014 - 11:08:04 ---A- . (...) -- C:\WINDOWS\iis6.log [214295]
O44 - LFC:[MD5.6CB564B1C133BB76C17DFD1D85F493F3] - 03/03/2014 - 11:08:04 ---A- . (...) -- C:\WINDOWS\imsins.log [1355]
O44 - LFC:[MD5.538DFAD9060DCF870F715B50CE90E52F] - 03/03/2014 - 11:08:04 ---A- . (...) -- C:\WINDOWS\msgsocm.log [9888]
O44 - LFC:[MD5.B45B737D9D016BB1912E1F843CD9288D] - 03/03/2014 - 11:08:04 ---A- . (...) -- C:\WINDOWS\msmqinst.log [61150]
O44 - LFC:[MD5.3EB404A4C72EC3C795D03C041E11348F] - 03/03/2014 - 11:08:04 ---A- . (...) -- C:\WINDOWS\netfxocm.log [34656]
O44 - LFC:[MD5.F00DAB08DFC0FF4330FAB7843AD2090E] - 03/03/2014 - 11:08:04 ---A- . (...) -- C:\WINDOWS\ntdtcsetup.log [39760]
O44 - LFC:[MD5.27411BD1BADBEDE24FA941F6370A9A41] - 03/03/2014 - 11:08:04 ---A- . (...) -- C:\WINDOWS\ocgen.log [94592]
O44 - LFC:[MD5.2005904222F80E71E188EDD49B7D379F] - 03/03/2014 - 11:08:04 ---A- . (...) -- C:\WINDOWS\ocmsn.log [10944]
O44 - LFC:[MD5.56E873F3BD4EE2E1BE2C966EC1E94A11] - 03/03/2014 - 11:08:04 ---A- . (...) -- C:\WINDOWS\tabletoc.log [9952]
O44 - LFC:[MD5.45749F208971F1688F214E8AB29EBDC5] - 03/03/2014 - 11:08:04 ---A- . (...) -- C:\WINDOWS\tsoc.log [90288]
O44 - LFC:[MD5.37A57C3DFA2C296C275CFB9B13593069] - 03/03/2014 - 11:08:10 ---A- . (...) -- C:\WINDOWS\ie8_main.log [203838]
O44 - LFC:[MD5.A4F2F2A90C4E72B44F16F34100F76F32] - 03/03/2014 - 11:09:32 ---A- . (.SoftThinks - Launch.) -- C:\WINDOWS\system32\chg.exe [118784]
O44 - LFC:[MD5.59B1460C1BCAC2090A4C04C05E941172] - 03/03/2014 - 11:09:35 ---A- . (...) -- C:\WINDOWS\wiaservc.log [50]
O44 - LFC:[MD5.3B84351D659DE6A4DAE4F5B61D525BC5] - 03/03/2014 - 11:09:36 ---A- . (...) -- C:\WINDOWS\wiadebug.log [159]
O44 - LFC:[MD5.A2B99982299E81EAE58C6154DC321384] - 03/03/2014 - 11:11:36 ---A- . (...) -- C:\WINDOWS\spupdsvc.log [7498]
~ Files: 37 Legitimates Filtered in 00mn 07s



---\\ Opérations et fonctions au démarrage de Windows Explorer (O46)
O46 - SEH:ShellExecuteHooks - URL Exec Hook - {AEB6717E-7E19-11d0-97EE-00C04FD91972} - shell32.dll
~ ShellExecuteHooks: Scanned in 00mn 00s



---\\ Export de clé d'application autorisée (O47)
O47 - AAKE:Key Export SP - "C:\statscov\Pcliauto.exe" [Enabled] .(.Pas de propriétaire.) -- C:\statscov\Pcliauto.exe
~ Keys Export: 44 Legitimates Filtered in 00mn 00s



---\\ Image File Execution Options (IFEO) (O50)
O50 - IFEO:Image File Execution Options - Your Image File Name Here without a path - ntsd -d
~ IFEO: Scanned in 00mn 00s



---\\ Liste des pilotes du système (SDL) (O58)
O58 - SDL:[MD5.53B29A84F5105A6D887B662188C93503] - 10/07/2007 - 12:08:24 ---A- . (.Analog Devices, Inc. - High Definition Audio Function Driver.) -- C:\WINDOWS\system32\Drivers\ADIHdAud.sys [307712]
O58 - SDL:[MD5.6278AB04AAE16C1438F3C4D34706C3B7] - 17/07/2003 - 16:48:44 ---A- . (.Analog Deivces - adi loader.) -- C:\WINDOWS\system32\Drivers\adildr.sys [46167]
O58 - SDL:[MD5.88FA846846E5080FA2D2FBEC1EF2AEAA] - 27/03/2003 - 13:38:44 ---A- . (.Analog Devices Inc. - ADSL USB Driver.) -- C:\WINDOWS\system32\Drivers\adiusbaw.sys [127145]
O58 - SDL:[MD5.C9B25AE9B8ABD983C5AD3F8CBFAB0F9C] - 02/03/2006 - 03:00:00 ---A- . (.RAVISENT Technologies Inc. - Pilote principal CineMaster C 1.2 WDM.) -- C:\WINDOWS\system32\Drivers\cinemst2.sys [262528]
O58 - SDL:[MD5.037B3AB349BE884BB8CB9C5356E34717] - 11/07/2008 - 14:44:00 ---A- . (.Altiris, Inc. - FSL System Driver.) -- C:\WINDOWS\system32\Drivers\fslx.sys [191872]
O58 - SDL:[MD5.573C7D0A32852B48F3058CFD8026F511] - 13/04/2008 - 17:36:05 ---A- . (.Windows (R) Server 2003 DDK provider - High Definition Audio Bus Driver v1.0a.) -- C:\WINDOWS\system32\Drivers\hdaudbus.sys [144384]
O58 - SDL:[MD5.2A013E7530BEAB6E569FAA83F517E836] - 07/01/2005 - 17:07:16 ---A- . (.Windows (R) Server 2003 DDK provider - High Definition Audio Function Driver v1.0a.) -- C:\WINDOWS\system32\Drivers\Hdaudio.sys [145920]
O58 - SDL:[MD5.C53775780148884AC87C455489A0C070] - 03/08/2004 - 22:41:40 ----- . (.Smart Link - Pas de description.) -- C:\WINDOWS\system32\Drivers\mtlmnt5.sys [126686]
O58 - SDL:[MD5.54886A652BF5685192141DF304E923FD] - 03/08/2004 - 22:41:38 ----- . (.Smart Link - Pas de description.) -- C:\WINDOWS\system32\Drivers\mtlstrm.sys [1309184]
O58 - SDL:[MD5.6DDA78A0BE692B61B668FAB860F276CF] - 03/08/2004 - 22:29:38 ----- . (.Matrox Graphics Inc. - Matrox Parhelia Miniport Driver.) -- C:\WINDOWS\system32\Drivers\mtxparhm.sys [452736]
O58 - SDL:[MD5.576B34CEAE5B7E5D9FD2775E93B3DB53] - 03/08/2004 - 22:41:40 ----- . (.Smart Link - Pas de description.) -- C:\WINDOWS\system32\Drivers\ntmtlfax.sys [180360]
O58 - SDL:[MD5.80D317BD1C3DBC5D4FE7B1678C60CADD] - 02/03/2006 - 03:00:00 ---A- . (.Parallel Technologies, Inc. - Parallel Technologies DirectParallel IO Library.) -- C:\WINDOWS\system32\Drivers\ptilink.sys [17792]
O58 - SDL:[MD5.E9AAA0092D74A9D371659C4C38882E12] - 03/08/2004 - 22:41:40 ----- . (.Smart Link - Pas de description.) -- C:\WINDOWS\system32\Drivers\recagent.sys [13776]
O58 - SDL:[MD5.D9673011648A71ED1E1F77B831BC85E6] - 03/08/2004 - 22:41:42 ----- . (.Smart Link - Pas de description.) -- C:\WINDOWS\system32\Drivers\slnt7554.sys [129535]
O58 - SDL:[MD5.2C1779C0FEB1F4A6033600305EBA623A] - 03/08/2004 - 22:41:44 ----- . (.Smart Link - Pas de description.) -- C:\WINDOWS\system32\Drivers\slntamr.sys [404990]
O58 - SDL:[MD5.F9B8E30E82EE95CF3E1D3E495599B99C] - 03/08/2004 - 22:41:46 ----- . (.Smart Link - Pas de description.) -- C:\WINDOWS\system32\Drivers\slnthal.sys [95424]
O58 - SDL:[MD5.DB56BB2C55723815CF549D7FC50CFCEB] - 03/08/2004 - 22:41:46 ----- . (.Smart Link - Pas de description.) -- C:\WINDOWS\system32\Drivers\slwdmsup.sys [13240]
O58 - SDL:[MD5.A36EE93698802CD899F98BFD553D8185] - 27/08/2012 - 14:50:24 ---A- . (.Avira GmbH - AVIRA SnapShot Driver.) -- C:\WINDOWS\system32\Drivers\ssmdrv.sys [28520]
O58 - SDL:[MD5.306521935042FC0A6988D528643619B3] - 10/06/2010 - 09:20:40 ---A- . (...) -- C:\WINDOWS\system32\Drivers\StarOpen.sys [5632]
O58 - SDL:[MD5.1FF3217614018630D0A6758630FC698C] - 17/08/2001 - 16:07:34 ---A- . (.Symbios Logic Inc. - Symbios Logic Inc. SCSI Miniport Driver.) -- C:\WINDOWS\system32\Drivers\symc810.sys [16256]
O58 - SDL:[MD5.026F7F224F088EE11E383BCA448FFF81] - 26/03/2009 - 14:23:46 ---A- . (.Apple, Inc. - Apple Mobile Device USB Driver.) -- C:\WINDOWS\system32\Drivers\usbaapl.sys [36864]
O58 - SDL:[MD5.55E01061C74A8CEFFF58DC36114A8D3F] - 02/03/2006 - 03:00:00 ---A- . (.RAVISENT Technologies Inc. - CineMaster C WDM DVD Minidriver.) -- C:\WINDOWS\system32\Drivers\vdmindvd.sys [58112]
O58 - SDL:[MD5.6D3ADA4CE95CECA7BCE527A08C4C474E] - 02/03/2006 - 03:00:00 ---A- . (...) -- C:\WINDOWS\system32\ansi.sys [9037]
O58 - SDL:[MD5.0FE9F16075C9ACB941C957B7C649176E] - 02/03/2006 - 03:00:00 ---A- . (...) -- C:\WINDOWS\system32\country.sys [27097]
O58 - SDL:[MD5.790A4CA68F44BE35967B3DF61F3E4675] - 19/01/2009 - 13:49:34 ---A- . (...) -- C:\WINDOWS\system32\FsUsbExDisk.Sys [36608]
O58 - SDL:[MD5.C6D29F29DE7427B1B0775E53E577B623] - 02/03/2006 - 03:00:00 ---A- . (...) -- C:\WINDOWS\system32\himem.sys [4912]
O58 - SDL:[MD5.582BCDD47CF4B68B5CB528F18E3CB808] - 02/03/2006 - 03:00:00 ---A- . (...) -- C:\WINDOWS\system32\key01.sys [42809]
O58 - SDL:[MD5.FBBCFEC1379C5C02D88A361993EDF1B8] - 02/03/2006 - 03:00:00 ---A- . (...) -- C:\WINDOWS\system32\keyboard.sys [42537]
O58 - SDL:[MD5.7D30A74B5FB9FE3B245A6CE5FBCD71D5] - 02/03/2006 - 03:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos.sys [27916]
O58 - SDL:[MD5.CF9ED169FF86D935E47999E82359E898] - 02/03/2006 - 03:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos404.sys [29146]
O58 - SDL:[MD5.03B945AC0481CD8BB161C3569D8ED1C3] - 02/03/2006 - 03:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos411.sys [29370]
O58 - SDL:[MD5.BBC957DC18C17CC027EB80B7C77F2AEA] - 02/03/2006 - 03:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos412.sys [29274]
O58 - SDL:[MD5.3CFFAEFFF23B0D208214A6D3061A5B1B] - 02/03/2006 - 03:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos804.sys [29146]
O58 - SDL:[MD5.CAAA108FD7BF71989946B39704323455] - 02/03/2006 - 03:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio.sys [34000]
O58 - SDL:[MD5.6F73F50162DEF60C84B725C18CD9140F] - 02/03/2006 - 03:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio404.sys [34560]
O58 - SDL:[MD5.0FDD5E69C1FF3B58043D44F2CC743D45] - 02/03/2006 - 03:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio411.sys [35648]
O58 - SDL:[MD5.8842837C4D8311BF8E72BEE8CCC42217] - 02/03/2006 - 03:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio412.sys [35424]
O58 - SDL:[MD5.6B56CEB3C6F9D5CD7293DBD9FE23B311] - 02/03/2006 - 03:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio804.sys [34560]
~ Drivers: 7 Legitimates Filtered in 00mn 07s



---\\ Liste des outils de désinfection (LATC) (O63)
O63 - Logiciel: ZHPDiag 2014 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 =>.Nicolas Coolman
O63 - Logiciel: ToolsCleaner - (.A.Rothstein & dj QUIOU.)
~ ADS: Scanned in 00mn 00s



---\\ Liste les services legacy du registre (LALS) (O64)
O64 - Services: CurCS - 18/02/2014 - C:\Program Files\MyPC Backup\BackupStack.exe (BackupStack) .(.Just Develop It - Backup Stack.) - LEGACY_BACKUPSTACK =>PUP.MyPCBackup
O64 - Services: CurCS - 26/02/2014 - C:\Documents and Settings\All Users\Application Data\IePluginService\PluginService.exe (IePluginService) .(.Cherished Technololgy LIMITED - IePlugin Service.) - LEGACY_IEPLUGINSERVICE =>Trojan.Trojan.SProtector
O64 - Services: CurCS - 27/02/2014 - C:\Documents and Settings\Administrateur\Application Data\VOPackage\VOsrv.exe (VOsrv) .(...) - LEGACY_VOSRV =>Adware.Adware.Downware
O64 - Services: CurCS - 27/02/2014 - C:\Documents and Settings\All Users\Application Data\WPM\wprotectmanager.exe (Wpm) .(.Cherished Technololgy LIMITED - WPM Service.) - LEGACY_WPM =>PUP.WpManager
~ Legacy: 170 Legitimates Filtered in 00mn 01s



---\\ Associations Shell Spawning (O67)
O67 - Shell Spawning: <.html> [HKCU\..\open\Command] (.Not Key.)
~ FASS Keys: 10 Legitimates Filtered in 00mn 00s



---\\ Menu de démarrage Internet (SMI) (O68)
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (...) -- C:\Program Files\Mozilla Firefox\firefox.exe" http://www.awesomehp.com =>PUP.Awesomehp
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (...) -- C:\Program Files\Google\Chrome\Application\chrome.exe" http://www.awesomehp.com =>PUP.Awesomehp
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
~ Keys: Scanned in 00mn 00s



---\\ Recherche d'infection sur les navigateurs internet (SBI) (O69)
O69 - SBI: prefs.js [Administrateur - xzlqn48n.default-1386660492031] user_pref("browser.search.order.1", "Mysearchdial"); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Administrateur - xzlqn48n.default-1386660492031] user_pref("extensions.crossrider.bic", "14486c0b2e4a1e2db653a14c1c17d949"); =>PUP.CrossRider
O69 - SBI: prefs.js [Administrateur - xzlqn48n.default-1386660492031] user_pref("extensions.mysearchdial.aflt", "tele1202"); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Administrateur - xzlqn48n.default-1386660492031] user_pref("extensions.mysearchdial.appId", "{CA5CAA63-B27C-4963-9BEC-CB16A36D56F8}"); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Administrateur - xzlqn48n.default-1386660492031] user_pref("extensions.mysearchdial.cd", "2XzuyEtN2Y1L1QzutDtDtBtAyB0DtC0F0AtDtC0B0CyE0EyEtN0D0Tzu0SyBtCtCtN1L2XzutBtFtBtFtCyEtFtCt[...] =>Adware.MyWebSearch
O69 - SBI: prefs.js [Administrateur - xzlqn48n.default-1386660492031] user_pref("extensions.mysearchdial.cntry", "FR"); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Administrateur - xzlqn48n.default-1386660492031] user_pref("extensions.mysearchdial.cr", "236713926"); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Administrateur - xzlqn48n.default-1386660492031] user_pref("extensions.mysearchdial.dfltLng", ""); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Administrateur - xzlqn48n.default-1386660492031] user_pref("extensions.mysearchdial.dfltSrch", true); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Administrateur - xzlqn48n.default-1386660492031] user_pref("extensions.mysearchdial.dnsErr", true); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Administrateur - xzlqn48n.default-1386660492031] user_pref("extensions.mysearchdial.dpkLst", "3654782829,1334533236,1121012847,231756876,1895130307,603719297,4288797614,3754950497[...] =>Adware.MyWebSearch
O69 - SBI: prefs.js [Administrateur - xzlqn48n.default-1386660492031] user_pref("extensions.mysearchdial.excTlbr", false); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Administrateur - xzlqn48n.default-1386660492031] user_pref("extensions.mysearchdial.hdrMd5", "C53CDE8046382ACF1286E8BF8CD52C68"); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Administrateur - xzlqn48n.default-1386660492031] user_pref("extensions.mysearchdial.hmpg", true); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Administrateur - xzlqn48n.default-1386660492031] user_pref("extensions.mysearchdial.hmpgUrl", "http://start.mysearchdial.com/?f=1&a=tele1202&cd=2XzuyEtN2Y1L1QzutDtDtBtAyB0DtC0F0At[...] =>Adware.MyWebSearch
O69 - SBI: prefs.js [Administrateur - xzlqn48n.default-1386660492031] user_pref("extensions.mysearchdial.id", "00237D1FA01BC4E4"); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Administrateur - xzlqn48n.default-1386660492031] user_pref("extensions.mysearchdial.instlDay", "16051"); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Administrateur - xzlqn48n.default-1386660492031] user_pref("extensions.mysearchdial.instlRef", ""); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Administrateur - xzlqn48n.default-1386660492031] user_pref("extensions.mysearchdial.lastB", "http://start.mysearchdial.com/?f=1&a=tele1202&cd=2XzuyEtN2Y1L1QzutDtDtBtAyB0DtC0F0AtDt[...] =>Adware.MyWebSearch
O69 - SBI: prefs.js [Administrateur - xzlqn48n.default-1386660492031] user_pref("extensions.mysearchdial.lastVrsnTs", "1.8.21.08:33:28"); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Administrateur - xzlqn48n.default-1386660492031] user_pref("extensions.mysearchdial.newTabUrl", "http://start.mysearchdial.com/?f=2&a=tele1202&cd=2XzuyEtN2Y1L1QzutDtDtBtAyB0DtC0F0[...] =>Adware.MyWebSearch
O69 - SBI: prefs.js [Administrateur - xzlqn48n.default-1386660492031] user_pref("extensions.mysearchdial.pnu_base", "{\"newVrsn\":\"89\",\"lastVrsn\":\"89\",\"vrsnLoad\":\"\",\"showMsg\":\"false\",\"s[...] =>Adware.MyWebSearch
O69 - SBI: prefs.js [Administrateur - xzlqn48n.default-1386660492031] user_pref("extensions.mysearchdial.prdct", "mysearchdial"); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Administrateur - xzlqn48n.default-1386660492031] user_pref("extensions.mysearchdial.prtnrId", "mysearchdial"); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Administrateur - xzlqn48n.default-1386660492031] user_pref("extensions.mysearchdial.sg", "none"); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Administrateur - xzlqn48n.default-1386660492031] user_pref("extensions.mysearchdial.srchPrvdr", "Mysearchdial"); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Administrateur - xzlqn48n.default-1386660492031] user_pref("extensions.mysearchdial.tlbrId", "base"); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Administrateur - xzlqn48n.default-1386660492031] user_pref("extensions.mysearchdial.tlbrSrchUrl", "http://start.mysearchdial.com/?f=3&a=tele1202&cd=2XzuyEtN2Y1L1QzutDtDtBtAyB0DtC0[...] =>Adware.MyWebSearch
O69 - SBI: prefs.js [Administrateur - xzlqn48n.default-1386660492031] user_pref("extensions.mysearchdial.vrsn", "1.8.21.0"); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Administrateur - xzlqn48n.default-1386660492031] user_pref("extensions.mysearchdial.vrsni", "1.8.21.0"); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Administrateur - xzlqn48n.default-1386660492031] user_pref("extensions.mysearchdial_i.hmpg", true); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Administrateur - xzlqn48n.default-1386660492031] user_pref("extensions.mysearchdial_i.newTab", false); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Administrateur - xzlqn48n.default-1386660492031] user_pref("extensions.mysearchdial_i.smplGrp", "none"); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Administrateur - xzlqn48n.default-1386660492031] user_pref("extensions.mysearchdial_i.vrsnTs", "1.8.21.08:33:28"); =>Adware.MyWebSearch
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - http://www.bing.com
O69 - SBI: SearchScopes [HKCU] {2B129094-2A81-4629-B537-569BA7E15FE2} - (Yahoo! Search) - http://fr.search.yahoo.com
O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} - (Mysearchdial) - http://start.mysearchdial.com =>Adware.MyWebSearch
O69 - SBI: SearchScopes [HKCU] {77AA745B-F4F8-45DA-9B14-61D2D95054C8} [DefaultScope] - (Google) - http://www.google.com
O69 - SBI: SearchScopes [HKUS\.DEFAULT] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - () - http://search.live.com
O69 - SBI: SearchScopes [HKUS\.DEFAULT] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} - (Google) - http://www.google.com
O69 - SBI: SearchScopes [HKUS\S-1-5-18] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - () - http://search.live.com
O69 - SBI: SearchScopes [HKUS\S-1-5-18] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} - (Google) - http://www.google.com
~ Keys: Scanned in 00mn 00s



---\\ Recherche particulière à la racine du système (SPRF) (O84)
[MD5.D0811581C9B35B7E864EE10475782BC1] [SPRF][23/04/2009] (...) -- C:\Documents and Settings\Administrateur\Application Data\Cache-4236.bin [2129]
[MD5.45C8E12A7471B5B4C4C70BA818D87289] [SPRF][28/04/2009] (...) -- C:\Documents and Settings\Administrateur\Application Data\Global.bin [11227]
[MD5.1BEF8AF956499D267F7AC98587FAE544] [SPRF][03/03/2009] (...) -- C:\Documents and Settings\Administrateur\Bureau\ComboFix.exe [2933037]
[MD5.D6F9E4A54019805A991502E9C26BA6EE] [SPRF][10/12/2013] (.Pas de propriétaire - Nettoyage des fichiers temporaires.) -- C:\Documents and Settings\Administrateur\Bureau\SFTGC.exe [1064612]
[MD5.F1A30E289E8179C6A6E13EEA996DDDF7] [SPRF][16/09/2009] (.Fireworks Studios - Vaccination Plan Designer.) -- C:\Documents and Settings\Administrateur\Bureau\vaccination_plan_designer_france.exe [2768035]
~ Files: 9 Legitimates Filtered in 00mn 00s



---\\ Enumère les codes produits des logiciels (PUC) (O90)
O90 - PUC: "C04AC77760206FE40ACF16B80FB68F0D" . (..) -- C:\WINDOWS\Installer\{777CA40C-0206-4EF6-A0FC-618BF06BF8D0}\ARPPRODUCTICON.exe
~ Update Products: 126 Legitimates Filtered in 00mn 01s



---\\ Recherche des packages WindowsInstaller (WIS) (O93) (NTFS)
[MD5.6C4279F03AC08E71E9E39340887DB31F] [WIS][20/02/2014] (.Citrix Online, LLC - Citrix Online Launcher.) -- C:\Windows\Installer\13852df.msi [162816]
[MD5.AACE707997BB256A1B950EAB32C80D28] [WIS][07/12/2011] (.4D SAS, Corinne Piquard - 4D v12.2.) -- C:\Windows\Installer\1676a27.msi [4364800]
[MD5.EBF9758D34DF01DB9E676A82B39D87EA] [WIS][12/11/2010] (.SPAMfighter ApS - SPAMfighter Client Installation.) -- C:\Windows\Installer\172f3c.msi [363008]
[MD5.55764CB1AD082506757072E766733C5F] [WIS][14/09/2011] (.Ask.com - Blank Project Template.) -- C:\Windows\Installer\36e14f.msi [2095616]
[MD5.A8F0B95FD2CD8A56C5720D733FB3EEBA] [WIS][20/03/2009] (.eSupportQFolder - eSupportQFolder.) -- C:\Windows\Installer\52a4e.msi [121344]
[MD5.90312828A59A4C109B226747402192DD] [WIS][20/03/2009] (.Builds the Destinations MSI - Builds the Destinations MSI.) -- C:\Windows\Installer\52a76.msi [648192]
[MD5.5753091D0CBEF0DC3708938B07EC7F07] [WIS][20/03/2009] (.CustomerResearchQFolder - CustomerResearchQFolder.) -- C:\Windows\Installer\52aa0.msi [121344]
[MD5.30FB352B15438E4205CD26AF013C63FA] [WIS][20/03/2009] (.DocumentViewerQFolder - DocumentViewerQFolder.) -- C:\Windows\Installer\52ab0.msi [121344]
[MD5.B76D265DDD9915D5DD7B9F60230B1156] [WIS][08/01/2009] (.Intel - Intel(R) PRO Network Connections.) -- C:\Windows\Installer\9135b.msi [3369472]
[MD5.57EDF122BEA2616EE5048A69A409F537] [WIS][08/01/2009] (.Altiris, Inc. - Altiris Software Virtualization Agent.) -- C:\Windows\Installer\9146b.msi [3637248]
[MD5.AF3AD8C6DE95BBF740A3EAEEF3FDF24D] [WIS][06/03/2010] (.HP - Overland.) -- C:\Windows\Installer\965b3.msi [509952]
~ WIS: 138 Legitimates Filtered in 00mn 29s



---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)
SS - | Demand 21/02/2014 257928 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
SS - | Demand 14/04/2008 225280 | (dmadmin) . (.Microsoft Corp., Veritas Software.) - C:\WINDOWS\system32\dmadmin.exe
SS - | Auto 25/04/2009 133104 | (gupdate1c9c5a211dd89b8) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe
SS - | Demand 25/04/2009 133104 | (gupdatem) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe
SS - | Auto 24/08/2012 194032 | (gusvc) . (.Google.) - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
SS - | Demand 14/04/2010 47104 | (idoCacheSrv) . (.HashLogic.) - C:\Program Files\HashLogic\Web Smart Pack\bin\idoCacheSrv.exe
SS - | Demand 16/01/2014 235696 | (McComponentHostService) . (.McAfee, Inc..) - C:\Program Files\McAfee Security Scan\3.8.141\McCHSvc.exe
SS - | Demand 15/02/2014 118896 | (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
SS - | Auto 13/06/2006 364544 | (PCA) . (.SoftThinks.) - C:\WINDOWS\SMINST\PCAngel.exe

SR - | Auto 17/12/2013 440376 | (AntiVirSchedulerService) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files\Avira\AntiVir Desktop\sched.exe
SR - | Auto 19/11/2013 440376 | (AntiVirService) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
SR - | Auto 18/02/2011 37664 | (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe
SR - | Auto 18/02/2014 36392 | (BackupStack) . (.Just Develop It.) - C:\Program Files\MyPC Backup\BackupStack.exe =>PUP.MyPCBackup
SR - | Auto 07/10/2010 345376 | (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe
SR - | Auto 19/01/2009 233472 | (FsUsbExService) . (.Teruten.) - C:\WINDOWS\system32\FsUsbExService.exe
SR - | Demand 14/04/2008 14336 | C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll (hpqcxs08) . (.Hewlett-Packard Co..) - C:\WINDOWS\system32\svchost.exe
SR - | Auto 14/04/2008 14336 | C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll (hpqddsvc) . (.Hewlett-Packard Co..) - C:\WINDOWS\system32\svchost.exe
SR - | Auto 26/02/2014 508016 | (IePluginService) . (.Cherished Technololgy LIMITED.) - C:\Documents and Settings\All Users\Application Data\IePluginService\PluginService.exe =>Trojan.Trojan.SProtector
SR - | Demand 07/03/2011 820520 | (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe
SR - | Auto 04/01/2007 112152 | (IviRegMgr) . (.InterVideo.) - C:\Program Files\Fichiers communs\InterVideo\RegMgr\iviRegMgr.exe
SR - | Auto 18/12/2013 182696 | (JavaQuickStarterService) . (.Oracle Corporation.) - C:\Program Files\Java\jre7\bin\jqs.exe
SR - | Auto 14/04/2008 14336 | C:\WINDOWS\system32\HPZinw12.dll (Net Driver HPZ12) . (.Hewlett-Packard.) - C:\WINDOWS\system32\svchost.exe
SR - | Auto 07/04/2008 576024 | (pdfcDispatcher) . (.PDF Complete Inc.) - C:\Program Files\PDF Complete\pdfsvc.exe
SR - | Auto 14/04/2008 14336 | C:\WINDOWS\system32\HPZipm12.dll (Pml Driver HPZ12) . (.Hewlett-Packard.) - C:\WINDOWS\system32\svchost.exe
SR - | Auto 16/04/2013 39056 | (RealNetworks Downloader Resolver Service) . (...) - C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe
SR - | Auto 27/02/2014 353792 | (VOsrv) . (...) - C:\Documents and Settings\Administrateur\Application Data\VOPackage\VOsrv.exe =>Adware.Adware.Downware
SR - | Auto 27/02/2014 501904 | (Wpm) . (.Cherished Technololgy LIMITED.) - C:\Documents and Settings\All Users\Application Data\WPM\wprotectmanager.exe =>PUP.WpManager

~ Services: Scanned in 00mn 33s



---\\ Scan Additionnel (O88)
Database Version : 13031 - (03/03/2014)
Clés trouvées (Keys found) : 39
Valeurs trouvées (Values found) : 3
Dossiers trouvés (Folders found) : 11
Fichiers trouvés (Files found) : 22

[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110511151178}] =>PUP.CrossRider^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110511161180}] =>PUP.CrossRider^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}] =>PUP.SupTab^
[HKLM\SYSTEM\CurrentControlSet\Services\MyPC Backup) (BackupStack] =>PUP.MyPCBackup^
[HKLM\SYSTEM\CurrentControlSet\Services\IePluginService] =>Trojan.Trojan.SProtector^
[HKLM\SYSTEM\CurrentControlSet\Services\VOsrv] =>Adware.Adware.Downware^
[HKLM\SYSTEM\CurrentControlSet\Services\Wpm] =>PUP.WpManager^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Feven Pro 1.1] =>PUP.CrossRider^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\IePlugins] =>Trojan.Trojan.SProtector^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\MyPC Backup] =>PUP.MyPCBackup^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\SupTab] =>PUP.SupTab^
[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\MySearchDial] =>Adware.MyWebSearch^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\VOPackage] =>Adware.Adware.Downware^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\WPM] =>PUP.WpManager^
[HKCU\Software\InstallCore] =>Adware.InstallCore
[HKCU\Software\Crossrider] =>PUP.CrossRider
[HKCU\Software\InstalledBrowserExtensions\] =>PUP.CrossRider
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{E55B3271-7CA8-4D0C-AE06-69A24856E996}_is1] =>Rogue.SpeedUpMyPC
[HKLM\Software\Google\Chrome\Extensions\pflphaooapbgpeakohlggbpidpppgdff] =>Adware.MyWebSearch
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3004627E-F8E9-4E8B-909D-316753CBA923}] =>Adware.MyWebSearch
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3004627E-F8E9-4E8B-909D-316753CBA923}] =>Adware.MyWebSearch
[HKCU\Software\InstalledBrowserExtensions] =>PUP.CrossRider
[HKLM\Software\Classes\SpeedUpMyPC] =>Rogue.SpeedUpMyPC
[HKLM\Software\Classes\CrossriderApp0051578.BHO] =>PUP.CrossRider
[HKLM\Software\Classes\CrossriderApp0051578.BHO.1] =>PUP.CrossRider
[HKLM\Software\Classes\CrossriderApp0051578.Sandbox] =>PUP.CrossRider
[HKLM\Software\Classes\CrossriderApp0051578.Sandbox.1] =>PUP.CrossRider
[HKLM\Software\Classes\CrossriderApp0051680.BHO] =>PUP.CrossRider
[HKLM\Software\Classes\CrossriderApp0051680.BHO.1] =>PUP.CrossRider
[HKLM\Software\Classes\CrossriderApp0051680.Sandbox] =>PUP.CrossRider
[HKLM\Software\Classes\CrossriderApp0051680.Sandbox.1] =>PUP.CrossRider
[HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110511151178}] =>PUP.CrossRider
[HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110511161180}] =>PUP.CrossRider
[HKLM\Software\Classes\CLSID\{11111111-1111-1111-1111-110511151178}] =>PUP.CrossRider
[HKLM\Software\Classes\CLSID\{11111111-1111-1111-1111-110511161180}] =>PUP.CrossRider
[HKLM\Software\Classes\CLSID\{22222222-2222-2222-2222-220522152278}] =>PUP.CrossRider
[HKLM\Software\Classes\CLSID\{22222222-2222-2222-2222-220522162280}] =>PUP.CrossRider
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110511151178}] =>PUP.CrossRider
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110511161180}] =>PUP.CrossRider
[HKLM\Software\Microsoft\Internet Explorer\Toolbar]:{2318C2B1-4965-11d4-9B18-009027A5CD4F} =>Toolbar.Google^
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:BService =>PUP.GiganticSavings^
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:swg =>Toolbar.Google^
C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\xzlqn48n.default-1386660492031\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com =>PUP.CrossRider^
C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\xzlqn48n.default-1386660492031\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8} =>Adware.MyWebSearch^
C:\Program Files\Feven Pro 1.1 =>PUP.CrossRider^
C:\Program Files\MyPC Backup =>PUP.MyPCBackup^
C:\Program Files\SupTab =>PUP.SupTab^
C:\Documents and Settings\All Users\Application Data\IePluginService =>Trojan.Trojan.SProtector^
C:\Documents and Settings\All Users\Application Data\WPM =>PUP.WpManager^
C:\Documents and Settings\Administrateur\Application Data\MySearchDial =>Adware.MyWebSearch^
C:\Documents and Settings\Administrateur\Application Data\SupTab =>PUP.SupTab^
C:\Documents and Settings\Administrateur\Application Data\VOPackage =>Adware.Adware.Downware^
C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\MyPC Backup =>PUP.MyPCBackup^
C:\Documents and Settings\All Users\Application Data\IePluginService\PluginService.exe =>Trojan.Trojan.SProtector^
C:\Documents and Settings\All Users\Application Data\WPM\wprotectmanager.exe =>PUP.WpManager^
C:\Program Files\MyPC Backup\BackupStack.exe =>PUP.MyPCBackup^
C:\Documents and Settings\Administrateur\Application Data\VOPackage\VOsrv.exe =>Adware.Adware.Downware^
C:\Program Files\Bench\BService\bservice.exe =>PUP.GiganticSavings^
C:\Program Files\Bench\Wd\wd.exe =>PUP.GiganticSavings^
C:\Program Files\MyPC Backup\MyPC Backup.exe =>PUP.MyPCBackup^
C:\WINDOWS\Tasks\bench-S-1-5-21-436780474-486762020-2033564595-500.job =>PUP.GiganticSavings^
C:\WINDOWS\Tasks\bench-sys.job =>PUP.GiganticSavings^
C:\WINDOWS\Tasks\Feven Pro 1.1-chromeinstaller.job =>PUP.CrossRider^
C:\WINDOWS\Tasks\Feven Pro 1.1-codedownloader.job =>PUP.CrossRider^
C:\WINDOWS\Tasks\Feven Pro 1.1-enabler.job =>PUP.CrossRider^
C:\WINDOWS\Tasks\Feven Pro 1.1-firefoxinstaller.job =>PUP.CrossRider^
C:\WINDOWS\Tasks\Feven Pro 1.1-updater.job =>PUP.CrossRider^
C:\WINDOWS\Tasks\SpeedUpMyPC Maintenance.job =>Rogue.SpeedUpMyPC^
C:\WINDOWS\Tasks\SpeedUpMyPC Startup.job =>Rogue.SpeedUpMyPC^
[HKCU\Software\Feven Pro 1.1] =>PUP.CrossRider^
[HKCU\Software\mysearchdial.com] =>Adware.MyWebSearch^
[HKLM\Software\Wpm] =>PUP.WpManager^
[HKLM\Software\mysearchdial] =>Adware.MyWebSearch^
[HKLM\Software\supTab] =>PUP.SupTab^
[HKLM\Software\supWPM] =>PUP.WpManager^
~ Additionnel Scan: 373455 Items scanned in 00mn 44s



---\\ Récapitulatif des détections trouvées sur votre station
~ http://nicolascoolman.webs.com/apps/blog/show/40789592-trojan-sprotector =>Trojan.SProtector
~ http://nicolascoolman.webs.com/apps/blog/show/38737316-pup-wpmanager =>PUP.WpManager
~ http://nicolascoolman.webs.com/apps/blog/show/32174815-pup-mypcbackup =>PUP.MyPCBackup
~ http://nicolascoolman.webs.com/apps/blog/show/26690384-adware-downware =>Adware.Downware
~ http://nicolascoolman.webs.com/apps/blog/show/37514218-pup-giganticsavings =>PUP.GiganticSavings
~ http://nicolascoolman.webs.com/apps/blog/show/27146838-adware-mywebsearch =>Adware.MyWebSearch
~ http://nicolascoolman.webs.com/apps/blog/show/41011964-pup-awesomehp =>PUP.Awesomehp
~ http://nicolascoolman.webs.com/apps/blog/show/27583526-pup-crossrider =>PUP.CrossRider
~ http://nicolascoolman.webs.com/apps/blog/show/41133513-pup-suptab =>PUP.SupTab
~ http://nicolascoolman.webs.com/apps/blog/show/33047509-rogue-speedupmypc =>Rogue.SpeedUpMyPC
~ http://nicolascoolman.webs.com/apps/blog/show/29790567-adware-installcore =>Adware.InstallCore
~ http://nicolascoolman.webs.com/apps/blog/show/27557062-adware-vidsaver =>Adware.VidSaver
~ MSI: 12 link(s) detected in 00mn 44s



~ 1318 Legitimates filtered by white list
End of the scan (822 lines in 03mn 28s)(0)