cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

~ ZHPDiag v2016.12.24.251 Par Nicolas Coolman (2016/12/24)
~ Démarré par Maryline (Administrator) (2017/01/20 12:12:35)
~ Web: https://www.nicolascoolman.com
~ Blog: https://www.anti-malware.top
~ Facebook: https://www.facebook.com/nicolascoolman1
~ Etat de la version: Version OK
~ Mode: Scanner
~ Rapport: C:\Users\Maryline\Desktop\ZHPDiag.txt
~ Rapport: C:\Users\Maryline\AppData\Roaming\ZHP\ZHPDiag.txt
~ UAC: Activate
~ Démarrage du système: Normal (Normal boot)
Windows 10 Home, 64-bit (Build 14393) =>.Microsoft Corporation

---\\ Informations sur les produits Windows (8) - 0s
~ Windows Server License Manager Script : OK
~ Licence Script File Génération : OK
~ Windows(R) Operating System, RETAIL channel
Windows ID Activation : OK
~ Windows Partial Key : 8HVX7
Windows License : OK
~ Windows Remaining Initializations Number : 1001
Windows Automatic Updates : OK

---\\ Logiciels de protection (2) - 21s
Avast Internet Security v12.3.2280 (Protection)
Windows Defender (Deactivate)

---\\ Surveillance de Logiciels (1) - 27s
~ Adobe Flash Player 24 NPAPI (Surveillance)

---\\ Informations sur le système (6) - 0s
~ Operating System: Intel64 Family 6 Model 55 Stepping 3, GenuineIntel
~ Operating System: 64-bit
~ Boot mode: Normal (Normal boot)
Total RAM: 4078.864 MB (34% free) : OK =>.RAM Value
System Restore: Activé (Enable)
System drive C: has 148 GB (32%) free of 456 GB : OK =>.Disk Space

---\\ Mode de connexion au système (3) - 0s
~ Computer Name: MARYLINE
~ User Name: Maryline
~ Logged in as Administrator

---\\ Etat du Centre de Sécurité Windows (7) - 1s
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK

---\\ Recherche particulière de fichiers génériques (25) - 2s
[MD5.4E10FB1A015B49AC68F76C1A3F4D9C0F] - 20/09/2016 - (.Microsoft Corporation - Explorateur Windows.) -- C:\WINDOWS\Explorer.exe [324224] =>.Microsoft Windows®
[MD5.C7645D43451C6D94D87F4D07BDE59C89] - 20/09/2016 - (.Microsoft Corporation - Processus hôte Windows (Rundll32).) -- C:\WINDOWS\System32\rundll32.exe [324224] =>.Microsoft Corporation
[MD5.99A19C9A74E2F9820E501DCE77F84F70] - 20/09/2016 - (.Microsoft Corporation - Application de démarrage de Windows.) -- C:\WINDOWS\System32\Wininit.exe [324224] =>.Microsoft Windows Publisher®
[MD5.E584CDC70F694F9A984A060A8291EB04] - 20/09/2016 - (.Microsoft Corporation - Extensions Internet pour Win32.) -- C:\WINDOWS\System32\wininet.dll [324224] =>.Microsoft Corporation
[MD5.917F081E2AB667C44F7D96DE1D16DFAE] - 20/09/2016 - (.Microsoft Corporation - Application d’ouverture de session Windows.) -- C:\WINDOWS\System32\Winlogon.exe [324224] =>.Microsoft Corporation
[MD5.9600B7F2F89DE60A80D13DE42F672834] - 20/09/2016 - (.Microsoft Corporation - Bibliothèque de licences.) -- C:\WINDOWS\System32\sppcomapi.dll [324224] =>.Microsoft Corporation
[MD5.96B8A433F6407DE34850927C96C6CE9B] - 20/09/2016 - (.Microsoft Corporation - DNS DLL de l’API Client.) -- C:\WINDOWS\System32\dnsapi.dll [324224] =>.Microsoft Windows®
[MD5.227CFE3EDA82029AAC1C088A16297CD7] - 20/09/2016 - (.Microsoft Corporation - DNS DLL de l’API Client.) -- C:\WINDOWS\Syswow64\dnsapi.dll [324224] =>.Microsoft Windows®
[MD5.7ABD5430F75A7FDDE5323B354C77514F] - 20/09/2016 - (.Microsoft Corporation - DLL client de l’API uilisateur de Windows m.) -- C:\WINDOWS\System32\fr-FR\user32.dll.mui [324224] =>.Microsoft Corporation
[MD5.323AA1953ED9C01E23F740FA891FE064] - 20/09/2016 - (.Microsoft Corporation - Pilote de fonction connexe pour WinSock.) -- C:\WINDOWS\System32\drivers\AFD.sys [324224] =>.Microsoft Windows®
[MD5.A10F989A812B57B9695F6C305907C9C6] - 20/09/2016 - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) -- C:\WINDOWS\System32\drivers\atapi.sys [324224] =>.Microsoft Windows®
[MD5.F8FB51B9EF6372610E9B31A1D86B62FC] - 20/09/2016 - (.Microsoft Corporation - CD-ROM File System Driver.) -- C:\WINDOWS\System32\drivers\Cdfs.sys [324224] =>.Microsoft Corporation
[MD5.613D0137C269187FA298A157E3D14A18] - 20/09/2016 - (.Microsoft Corporation - SCSI CD-ROM Driver.) -- C:\WINDOWS\System32\drivers\Cdrom.sys [324224] =>.Microsoft Corporation
[MD5.0D1D392ED2597F295956D058D33BD7C3] - 20/09/2016 - (.Microsoft Corporation - DFS Namespace Client Driver.) -- C:\WINDOWS\System32\drivers\DfsC.sys [324224] =>.Microsoft Corporation
[MD5.10E3515FE5DBA6656FA62C29342EC4A1] - 20/09/2016 - (.Microsoft Corporation - High Definition Audio Bus Driver.) -- C:\WINDOWS\System32\drivers\HDAudBus.sys [324224] =>.Microsoft Corporation
[MD5.B54B30992620C97230013A74461C8517] - 20/09/2016 - (.Microsoft Corporation - Pilote de port i8042.) -- C:\WINDOWS\System32\drivers\i8042prt.sys [324224] =>.Microsoft Corporation
[MD5.F1DAECC3B3D6399875D4F10529D6A77C] - 20/09/2016 - (.Microsoft Corporation - IP Network Address Translator.) -- C:\WINDOWS\System32\drivers\IpNat.sys [324224] =>.Microsoft Corporation
[MD5.E671EDAB0726E05ECEF4058B4CD73C4D] - 20/09/2016 - (.Microsoft Corporation - Minirdr SMB Windows NT.) -- C:\WINDOWS\System32\drivers\MRxSmb.sys [324224] =>.Microsoft Windows®
[MD5.6FEBB0A847FFD5F057B9AC8889F1B9A7] - 20/09/2016 - (.Microsoft Corporation - MBT Transport driver.) -- C:\WINDOWS\System32\drivers\netBT.sys [324224] =>.Microsoft Corporation
[MD5.DB69C6DA8B3DDFDC547D455CA23A8250] - 20/09/2016 - (.Microsoft Corporation - Pilote du système de fichiers NT.) -- C:\WINDOWS\System32\drivers\ntfs.sys [324224] =>.Microsoft Windows®
[MD5.6B81BF7853D161DB8AC62CD8B9C2DE6B] - 20/09/2016 - (.Microsoft Corporation - Pilote de port parallèle.) -- C:\WINDOWS\System32\drivers\Parport.sys [324224] =>.Microsoft Corporation
[MD5.17E565710172ED71B8531D8822E1C5D1] - 20/09/2016 - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) -- C:\WINDOWS\System32\drivers\Rasl2tp.sys [324224] =>.Microsoft Corporation
[MD5.7135785C21CA79D270D11037C43D3F19] - 20/09/2016 - (.Microsoft Corporation - Redirecteur de périphérique de Microsoft RD.) -- C:\WINDOWS\System32\drivers\rdpdr.sys [324224] =>.Microsoft Corporation
[MD5.9D2DD64A0B51C56285512DC9454340F6] - 20/09/2016 - (.Microsoft Corporation - TDI Translation Driver.) -- C:\WINDOWS\System32\drivers\tdx.sys [324224] =>.Microsoft Windows®
[MD5.BF2546583BB75F01DDA60A7921DFB230] - 20/09/2016 - (.Microsoft Corporation - Volume Shadow Copy driver.) -- C:\WINDOWS\System32\drivers\volsnap.sys [324224] =>.Microsoft Windows®

---\\ Google Chrome, Démarrage,Recherche,Extensions (4) - 0s
G2 - GCE: Preference [User Data\Default] [aohghmighlieiainnegkcijnfilokake] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [gomekmidlodglbbmalcneegieacbdmki] Avast Online Security =>.Avast Software s.r.o
G2 - GCE: Preference [User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [pkedcjkdefgpdelpbcmbmeomcjbeemfm] Chrome Media Router =>.Google Inc.

---\\ Firefox, Plugins,Demarrage,Recherche,Extensions (19) - 7s
M0 - MFSP: prefs.js [Maryline - gd0of2xb.default] http://www.facebook.com/ =>.Facebook
M0 - MFSP: prefs.js [Maryline - gd0of2xb.default] http://www.free-devis-factures.com/
M0 - MFSP: prefs.js [Maryline - gd0of2xb.default] http://www.azertyplus.com/
M0 - MFSP: prefs.js [Maryline - gd0of2xb.default] http://www.guitare-facile.fr
M0 - MFSP: prefs.js [Maryline - gd0of2xb.default] http://www.tabs4acoustic.com/
M0 - MFSP: prefs.js [Maryline - gd0of2xb.default] http://www.youtube.com/ =>.Youtube
M0 - MFSP: prefs.js [Maryline - gd0of2xb.default] http://kael.stoneheidge.free.fr/
M0 - MFSP: prefs.js [Maryline - gd0of2xb.default] http://webmail.sfr.fr/ =>.SFR
M0 - MFSP: prefs.js [Maryline - gd0of2xb.default] http://www.amazon.fr/ =>.Amazon Corporation
M0 - MFSP: prefs.js [Maryline - gd0of2xb.default] http://fr.custplace.com/
M0 - MFSP: prefs.js [Maryline - gd0of2xb.default] http://www.les-telesecretaires.com/
P2 - EXT FILE: (.Adblock Plus - Ads were yesterday!.) -- C:\Users\Maryline\AppData\Roaming\Mozilla\Firefox\Profiles\gd0of2xb.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi =>.Adblock Plus
P2 - EXT FILE: (.Google (avast) - Google Search from avast.) -- C:\Users\Maryline\AppData\Roaming\Mozilla\Firefox\Profiles\gd0of2xb.default\searchplugins\google-avast.xml =>.Google (avast)
P2 - EXT FILE: (.Yahoo! (Avast) - Yahoo! (Avast).) -- C:\Users\Maryline\AppData\Roaming\Mozilla\Firefox\Profiles\gd0of2xb.default\searchplugins\yahoo-avast.xml =>.Yahoo! (Avast)
P2 - EXT: (.Mozilla & Android Open Source Project - ADB Helper.) -- C:\Users\Maryline\AppData\Roaming\Mozilla\Firefox\Profiles\gd0of2xb.default\extensions\adbhelper@mozilla.org =>.Mozilla & Android Open Source Project
P2 - EXT: (.Mozilla - Valence.) -- C:\Users\Maryline\AppData\Roaming\Mozilla\Firefox\Profiles\gd0of2xb.default\extensions\fxdevtools-adapters@mozilla.org =>.Mozilla
P2 - EXT: (...) -- C:\Users\Maryline\AppData\Roaming\Mozilla\Firefox\Profiles\gd0of2xb.default\extensions\trash
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_24_0_0_194.dll =>.Adobe Systems Incorporated
P2 - FPN: [HKLM] [@WildTangent.com/GamesAppPresenceDetector,Version=1.0] - (.WildTangent.) -- C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll =>.WildTangent

---\\ Internet Explorer,Démarrage,Recherche,URLSearchHook (18) - 0s
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/ =>.Google Inc.
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/ =>.Microsoft Corporation
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com/ =>.Google Inc.
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,First Home Page = http://g.uk.msn.com/ =>.Microsoft Corporation
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ =>.Google Inc.
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk =>.Microsoft Corporation
R1 - HKEY_USERS\S-1-5-21-2564823452-231365412-302668810-1002\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ =>.Google Inc.
R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphan =>.Microsoft Internet Explorer

---\\ Internet Explorer,Proxy Management (5) - 0s
R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
R5 - HKLM\SYSTEM\CurrentControlSet\services\NlaSvc\Parameters\Internet\ManualProxies []

---\\ Internet Explorer,IniFiles, Autoloading programs (3) - 0s
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe (.Microsoft Corporation.) =>.Microsoft Corporation
F2 - REG:system.ini: Shell=C:\WINDOWS\explorer.exe (.Microsoft Corporation.) =>.Microsoft Corporation
F2 - REG:system.ini: VMApplet=

---\\ Scan Additionnel (1) - 0s
~ Aucun élément malicieux ou superflu trouvé.

---\\ Récapitulatif des éléments trouvés sur votre station (1) - 0s
~ Aucun élément malicieux ou superflu trouvé.

~ End of the scan, 74314 items in 00mn39s (145)

Publicité


Signaler le contenu de ce document

Publicité