Le ventilateur de mon PC n'arrete pas de tourner
Fermé
David37520
Messages postés
5
Date d'inscription
jeudi 13 février 2014
Statut
Membre
Dernière intervention
19 février 2014
-
13 févr. 2014 à 16:38
bazfile Messages postés 53572 Date d'inscription samedi 29 décembre 2012 Statut Modérateur, Contributeur sécurité Dernière intervention 18 avril 2024 - 19 févr. 2014 à 21:54
bazfile Messages postés 53572 Date d'inscription samedi 29 décembre 2012 Statut Modérateur, Contributeur sécurité Dernière intervention 18 avril 2024 - 19 févr. 2014 à 21:54
A voir également:
- Le ventilateur de mon PC n'arrete pas de tourner
- Mon pc s'allume mais ne démarre pas windows 10 - Guide
- Plus de son sur mon pc - Guide
- Benchmark pc - Guide
- Mon pc rame que faire - Guide
- Reinitialiser pc - Guide
7 réponses
bazfile
Messages postés
53572
Date d'inscription
samedi 29 décembre 2012
Statut
Modérateur, Contributeur sécurité
Dernière intervention
18 avril 2024
18 452
13 févr. 2014 à 20:53
13 févr. 2014 à 20:53
Bonsoir,
Ton problème n'est peut-être pas viral, en effet le fait qu'un ventilateur tourne à fond peut venir d'une surchauffe d'un des composants de ton ordinateur ou de l'accumulation de poussière à l'intérieur de ton pc qui rend le refroidissement moins efficace, tu devrais regarder du côté des températures avec un logiciel :
https://forum.tomshardware.fr/threads/pc-en-surchauffe-comment-surveiller-et-r%C3%A9duire-la-temp%C3%A9rature-de-votre-ordinateur.731998/
Ton problème n'est peut-être pas viral, en effet le fait qu'un ventilateur tourne à fond peut venir d'une surchauffe d'un des composants de ton ordinateur ou de l'accumulation de poussière à l'intérieur de ton pc qui rend le refroidissement moins efficace, tu devrais regarder du côté des températures avec un logiciel :
https://forum.tomshardware.fr/threads/pc-en-surchauffe-comment-surveiller-et-r%C3%A9duire-la-temp%C3%A9rature-de-votre-ordinateur.731998/
David37520
Messages postés
5
Date d'inscription
jeudi 13 février 2014
Statut
Membre
Dernière intervention
19 février 2014
14 févr. 2014 à 08:45
14 févr. 2014 à 08:45
Bonjour Bazfile,
J'ai installé le logiciel mais je ne sais pas analyser ce que je vois. Même si je crois comprendre qu'il y a un soucis etant donné que dans le premier onglet "reading" il y a des flammes quasiment partout sauf sur le HDO et Temp3.
Qu'en penses tu?
J'ai aussi oublier de dire que j'ai une fenetre intempestive qui s'ouvre au démarage du PC, c'est l'instaler media gallery de vaio. Et ca me gonfle sérieusement. Sais-tu de quoi ca vient?
Merci d'avance
J'ai installé le logiciel mais je ne sais pas analyser ce que je vois. Même si je crois comprendre qu'il y a un soucis etant donné que dans le premier onglet "reading" il y a des flammes quasiment partout sauf sur le HDO et Temp3.
Qu'en penses tu?
J'ai aussi oublier de dire que j'ai une fenetre intempestive qui s'ouvre au démarage du PC, c'est l'instaler media gallery de vaio. Et ca me gonfle sérieusement. Sais-tu de quoi ca vient?
Merci d'avance
bazfile
Messages postés
53572
Date d'inscription
samedi 29 décembre 2012
Statut
Modérateur, Contributeur sécurité
Dernière intervention
18 avril 2024
18 452
14 févr. 2014 à 15:17
14 févr. 2014 à 15:17
Bonjour,
Si il y a des flammes qui apparaissent en face des différents éléments c'est effectivement qu'il y a un problème de surchauffe.
Pour Media Gallery c'est un logiciel de chez Sony qui est livré avec les ordinateurs Sony, il y a dû y avoir un problème lors de son installation.
https://www.sony.fr/electronics/support/personal-computers
Pour voir si tu n'as pas d'infections fait ceci :
Télécharge, installe et ouvre ZHPdiag lance l'analyse en cliquant sur Configurer puis sur la loupe sans + ni - , une fois l'analyse terminée tu auras un rapport ZHPDiag.txt sur le bureau tu le postes sur https://www.cjoint.com/ dont voici comment utiliser cjoint : https://www.commentcamarche.net/faq/29493-utiliser-cjoint-pour-heberger-des-fichiers puis met le lien généré par Cjoint dans ta réponse.
Si il y a des flammes qui apparaissent en face des différents éléments c'est effectivement qu'il y a un problème de surchauffe.
Pour Media Gallery c'est un logiciel de chez Sony qui est livré avec les ordinateurs Sony, il y a dû y avoir un problème lors de son installation.
https://www.sony.fr/electronics/support/personal-computers
Pour voir si tu n'as pas d'infections fait ceci :
Télécharge, installe et ouvre ZHPdiag lance l'analyse en cliquant sur Configurer puis sur la loupe sans + ni - , une fois l'analyse terminée tu auras un rapport ZHPDiag.txt sur le bureau tu le postes sur https://www.cjoint.com/ dont voici comment utiliser cjoint : https://www.commentcamarche.net/faq/29493-utiliser-cjoint-pour-heberger-des-fichiers puis met le lien généré par Cjoint dans ta réponse.
David37520
Messages postés
5
Date d'inscription
jeudi 13 février 2014
Statut
Membre
Dernière intervention
19 février 2014
14 févr. 2014 à 16:01
14 févr. 2014 à 16:01
Merci Bazfile, je t'ai envoyé le lien
bazfile
Messages postés
53572
Date d'inscription
samedi 29 décembre 2012
Statut
Modérateur, Contributeur sécurité
Dernière intervention
18 avril 2024
18 452
15 févr. 2014 à 14:41
15 févr. 2014 à 14:41
Je ne le vois pas.
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question
David37520
Messages postés
5
Date d'inscription
jeudi 13 février 2014
Statut
Membre
Dernière intervention
19 février 2014
17 févr. 2014 à 08:58
17 févr. 2014 à 08:58
Je vais le mettre directement ici
Rapport de ZHPDiag v2014.2.12.10 - Nicolas Coolman (12/02/2014)
~ Lancé par David (14/02/2014 15:45:16)
~ Adresse du Site Web https://nicolascoolman.webs.com/
~ Forums gratuits d'Assistance à la désinfection : https://nicolascoolman.webs.com/
~ Traduit par Nicolas Coolman
~ Etat de la version :
~ Liste blanche : Activée par le programme
~ Elévation des Privilèges : OK
~ User Account Control (UAC): Deactivate by program
---\\ Navigateurs Internet
MSIE: Internet Explorer v9.0.8112.16421
---\\ Informations sur les produits Windows
~ Langage: Français
Windows 7 Home Premium, 64-bit (Build 7600)
Windows Server License Manager Script : OK
~ Windows(R) 7, OEM_SLP channel
System Locked Preinstallation (OEM_SLP) : OK
Windows ID Activation : OK
~ Windows Partial Key : CGKHQ
Windows License : OK
~ Windows Remaining Initializations Number : 2
Software Protection Service (Protection logicielle) : OK
Key Management Service client information : KO
Windows Automatic Updates : OK
Windows Activation Technologies : OK
---\\ Logiciels de protection du système
avast! Free Antivirus v9.0.2013
Malwarebytes Anti-Malware version 1.75.0.1300
Microsoft Security Client v4.4.0304.0
Windows Defender W7
---\\ Logiciels d'optimisation du système
CCleaner v3.23 =>Piriform Ltd
---\\ Logiciels de partage PeerToPeer
---\\ Surveillance de Logiciels
Adobe Flash Player 12 Plugin
Adobe Reader 9.3 - Français
Java 7 Update 25
---\\ Informations sur le système
~ Processor: Intel64 Family 6 Model 37 Stepping 5, GenuineIntel
~ Operating System: 64 Bits
Boot mode: Normal (Normal boot)
Total RAM: 3950 MB (24% free)
System Restore: Activé (Enable)
System drive C: has 58 GB (20%) free of 285 GB
---\\ Mode de connexion au système
~ Computer Name: DAVID-VAIO
~ User Name: David
~ All Users Names: HomeGroupUser$, David, Administrateur,
~ Unselected Option: O45,O61,O62,O65,O66,O80,O82,O89
Logged in as Administrator
---\\ Variables d'environnement
~ System Unit : C:\
~ %AppZHP% : C:\Users\David\AppData\Roaming\ZHP\
~ %AppData% : C:\Users\David\AppData\Roaming\
~ %Desktop% : C:\Users\David\Desktop\
~ %Favorites% : C:\Users\David\Favorites\
~ %LocalAppData% : C:\Users\David\AppData\Local\
~ %StartMenu% : C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\
---\\ Enumération des unités disques
C: Hard drive, Flash drive, Thumb drive (Free 58 Go of 285 Go)
D: CD-ROM drive (Not Inserted)
---\\ Etat du Centre de Sécurité Windows
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
~ Security Center: 41 Legitimates Filtered in 00mn 00s
---\\ Recherche particulière de fichiers génériques
[MD5.0862495E0C825893DB75EF44FAEA8E93] - (.Microsoft Corporation - Explorateur Windows.) (.26/02/2011 - 07:23:14.) -- C:\Windows\Explorer.exe [2870272]
[MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 - 02:39:52.) -- C:\Windows\System32\Wininit.exe [129024]
[MD5.A4F6142CABA82FB7293ECE5FF864B440] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.22/02/2013 - 07:20:51.) -- C:\Windows\System32\wininet.dll [1392128]
[MD5.DA3E2A6FA9660CC75B471530CE88453A] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.28/10/2009 - 07:24:40.) -- C:\Windows\System32\Winlogon.exe [389632]
[MD5.75341574F21E766748732BDF530C74BD] - (.Microsoft Corporation - Bibliothèque de licences.) (.14/07/2009 - 02:41:54.) -- C:\Windows\System32\sppcomapi.dll [231936]
[MD5.DB9D6C6B2CD95A9CA414D045B627422E] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.28/12/2011 - 04:59:11.) -- C:\Windows\system32\Drivers\AFD.sys [499200]
[MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 - 02:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128]
[MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/07/2009 - 00:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160]
[MD5.83D2D75E1EFB81B3450C18131443F7DB] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.14/07/2009 - 00:19:54.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456]
[MD5.9C253CE7311CA60FC11C774692A13208] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.27/04/2011 - 03:57:40.) -- C:\Windows\system32\Drivers\DfsC.sys [102400]
[MD5.0A49913402747A0B67DE940FB42CBDBB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.14/07/2009 - 01:06:13.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368]
[MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) (.14/07/2009 - 00:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472]
[MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.14/07/2009 - 01:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224]
[MD5.040D62A9D8AD28922632137ACDD984F2] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.04/05/2011 - 03:51:08.) -- C:\Windows\system32\Drivers\MRxSmb.sys [157696]
[MD5.9162B273A44AB9DCE5B44362731D062A] - (.Microsoft Corporation - MBT Transport driver.) (.14/07/2009 - 00:21:29.) -- C:\Windows\system32\Drivers\netBT.sys [259072]
[MD5.9A6089B056EA1B83B36424FC9D0A300E] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.12/04/2013 - 15:36:37.) -- C:\Windows\system32\Drivers\ntfs.sys [1653096]
[MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/07/2009 - 01:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280]
[MD5.87A6E852A22991580D6D39ADC4790463] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.14/07/2009 - 01:10:12.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [130048]
[MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.14/07/2009 - 01:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184]
[MD5.079125C4B17B01FCAEEBCE0BCB290C0F] - (.Microsoft Corporation - TDI Translation Driver.) (.14/07/2009 - 00:21:15.) -- C:\Windows\system32\Drivers\tdx.sys [99840]
[MD5.9E425AC5C9A5A973273D169F43B4F5E1] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.06/09/2012 - 18:38:18.) -- C:\Windows\system32\Drivers\volsnap.sys [295792]
~ Generic Processes: Scanned in 00mn 02s
---\\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 1/5244
~ Mes musiques (My Musics) : 1/10653
~ Mes Videos (My Videos) : 1/36
~ Mes Favoris (My Favorites) : 1/60
~ Mes Documents (My Documents) : 2/357
~ Mon Bureau (My Desktop) : 8/24999
~ Menu demarrer (Programs) : 1/49
~ Hidden Files: Scanned in 03mn 37s
---\\ Processus lancés
[MD5.D1D5DAB39DCB4BE0359943738D87409B] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe [532040] [PID.3348]
[MD5.C948AC73822CA662CF44185B909EA18B] - (.Microsoft Corporation - Microsoft Office Document Cache.) -- C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.exe [720064] [PID.2628]
[MD5.23C2FCAA50C4F80F7D1B8A0771D45328] - (.Apple Inc. - iCloud.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720] [PID.5352]
[MD5.5883D86F8C22B1E5F78627E4AF19B234] - (.Apple Inc. - Apple Photostreams Uploader Executable.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720] [PID.5468]
[MD5.58920E6A409046BA06548D9D139CE0F0] - (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe [20584608] [PID.5832]
[MD5.D213F06AE294341F3503FD74E22E7DDA] - (.Microsoft Corporation - Microsoft SkyDrive.) -- C:\Users\David\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe [257136] [PID.5968]
[MD5.0CA7445A40F3321959F942ED0F81F470] - (.Apple Inc. - Apple IE DAV.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\AppleIEDAV.exe [1315144] [PID.6100]
[MD5.58FC1B36032F03342E4C02813F80DAC1] - (.Dropbox, Inc. - Dropbox.) -- C:\Users\David\AppData\Roaming\Dropbox\bin\Dropbox.exe [30714328] [PID.6060]
[MD5.51138BEEA3E2C21EC44D0932C71762A8] - (...) -- ysWOW64\RunDll32.exe [0] [PID.5940]
[MD5.25107F58D1B8F60D67D1EE95798C0DE8] - (.Intel Corporation - IAStorIcon.) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696] [PID.2700]
[MD5.CCA9023E3DDBE290D4381344115D99B7] - (.Sony Corporation - Pas de description.) -- C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe [673136] [PID.708]
[MD5.47833576F0BEE0AD7B45109982B769BD] - (.Apple Inc. - Apple Push.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\APSDaemon.exe [59720] [PID.5552]
[MD5.AC32E0F47BB9083BB4164171A4C562A2] - (.Sony Corporation - Media Check Tool.) -- C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe [600928] [PID.2960]
[MD5.4A0BBDF88636F2EF08420BDCD343D286] - (.Adobe Systems Inc. - AcroTray.) -- C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe [623992] [PID.6032]
[MD5.4D83DC461F8F4370274CF6E9AC9A34F4] - (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe [49208] [PID.5348]
[MD5.D63797E8E7781EE1500A810CB6194FA6] - (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816] [PID.6356]
[MD5.BAF535F843A3E790E04A7613811B55BC] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392] [PID.4640]
[MD5.07DACF8EE0581D188931E02CB7D50E1A] - (.Research In Motion Limited - Launch Agent Service.) -- C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe [443408] [PID.6520]
[MD5.145EA4A441D004D4360B5725C71E05DB] - (.Research In Motion Limited - BlackBerry Link Peer Manager.) -- C:\Program Files (x86)\Common Files\Research In Motion\Tunnel Manager\PeerManager.exe [4465152] [PID.6652]
[MD5.A78AAB0D2D70EF7DD56B7328AC502059] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe [3767096] [PID.7088]
[MD5.2E589FB6816C344F5D545BFA9BCD5F9C] - (...) -- C:\Program Files (x86)\Common Files\Research In Motion\nginx\nginx.exe [661008] [PID.7360]
[MD5.A2CB714DCF8F0E134F2429AF673C7C08] - (.Oracle Corporation - Java(TM) Update Checker.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe [506744] [PID.6444]
[MD5.06C2BB8F9089C3C091584F8AD5C1A01E] - (.Microsoft Corporation - Microsoft Outlook.) -- C:\Program Files (x86)\Microsoft Office\Office14\OUTLOOK.exe [16001192] [PID.5768]
[MD5.99E7D2BDB4F75A094AC73B7C98171C42] - (.Smart PC Solutions - PC Speed Maximizer Smart Scan.) -- C:\Program Files (x86)\PC Speed Maximizer\SPMSmartScan.exe [423536] [PID.6068] =>Rogue.PCSpeedMaximizer
[MD5.745900F7323339A6AFC0D1971FCC2A3C] - (.Dassault Systemes - CATIA.) -- C:\Program Files (x86)\Dassault Systemes\B18\intel_a\code\bin\CNEXT.exe [32256] [PID.7420]
[MD5.5640B4C10682FBC39C86C8C7A8392B5E] - (.Google Inc. - Google Chrome.) -- C:\Users\David\AppData\Local\Google\Chrome\Application\chrome.exe [866632] [PID.6092]
[MD5.723164BBE5AF1BAA2CDA6C097462C44B] - (.Sony Corporation - Media Gallery Update.) -- C:\Users\David\Downloads\EP0000262450.exe [352086416] [PID.7248]
[MD5.85328EC5C39B4959E1829EC82C6F7898] - (.Sony Corporation - Sony Packaging Manager.) -- C:\ProgramData\Sony Corporation\Sony Packaging Manager\PackagingTemp\{C5F64714-F577-4809-9F4F-2061E7B4F262}\UpdateModuleSetup.exe [752792] [PID.1232]
[MD5.48CACA200418DF0762CFAA91A29A533D] - (.Macrovision Corporation - Setup.exe.) -- C:\ProgramData\Sony Corporation\Sony Packaging Manager\PackagingTemp\{C5F64714-F577-4809-9F4F-2061E7B4F262}\setup.exe [380080] [PID.1232]
[MD5.516175BCB724F8501E7F8754C90ABB14] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [8336384] [PID.5144]
[MD5.432BE6CF7311062633459EEF6B242FB5] - (...) -- C:\Windows\System32\ [0] [PID.0]
[MD5.CC42F104172B4A62793083D380867317] - (.AVAST Software - avast! Service.) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344] [PID.1552]
[MD5.30E3850F303EAE5C364782EA78579CC9] - (.Apple Inc. - MobileDeviceService.) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [55624] [PID.1972]
[MD5.C75830957AC833C0526CBC1D2CF48500] - (.Dassault Systemes - System.) -- C:\Program Files (x86)\Dassault Systemes\B18\intel_a\code\bin\CATSysDemon.exe [36864] [PID.1084]
[MD5.3D23191672D83E90D1CF63927EE98136] - (.Intel Corporation - Local Manageability Service.) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [268824] [PID.1752]
[MD5.65085456FD9A74D7F1A999520C299ECB] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376] [PID.1060]
[MD5.E0D7732F2D2E24B2DB3F67B6750295B8] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512] [PID.2052]
[MD5.9D369CB06C1A9AD70245F9C408895715] - (...) -- C:\Program Files (x86)\Moldflow\Moldflow Job Manager\bin\mfjobman.exe [45056] [PID.2096]
[MD5.80E85394D8CD7F84340B1C6F4B9D698F] - (.Sony Corporation - Device Information Provider.) -- C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe [367456] [PID.2588]
[MD5.205E1B699FD3F2F9B036EEA2EC30C620] - (...) -- C:\Windows\SysWOW64\PnkBstrA.exe [76888] [PID.2732]
[MD5.9F7C5A522A8A279F66BB5F842AAE4F7A] - (.Apple Inc. - RIM MDNS Service.) -- C:\Program Files (x86)\Common Files\Research In Motion\Tunnel Manager\mDNSResponder.exe [389632] [PID.1236]
[MD5.388AE59FE75F1B959DFA0900923C61BB] - (.Skype Technologies S.A. - Skype C2C Service.) -- C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe [3064000] [PID.3052]
[MD5.7D67C07C63796775CC5492BCFEAFF125] - (.Microsoft Corporation - SQL Browser Service EXE.) -- C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe [267616] [PID.2712]
[MD5.63F6D08C54D5B3C1B12A6172032055C7] - (.ArcSoft, Inc. - MgiSvr.) -- C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [104960] [PID.2172]
[MD5.A60605FC66552B421EE1F3D4EBB9A4E0] - (.Sony Corporation - VAIO Event Service (Service Module).) -- C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe [217968] [PID.2940]
[MD5.A63DC5C2EA944E6657203E0C8EDEAF61] - (.Microsoft Corporation - COM Surrogate.) -- C:\Windows\SysWOW64\DllHost.exe [7168] [PID.1464]
[MD5.1D702FFC1B8CDCF76FBCA7740CE510D8] - (.Sony Corporation - VAIO Event Service (Service Sub Module).) -- C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe [120176] [PID.3784]
[MD5.505C1D595B129F7071FE8E2F59489137] - (.Research In Motion Limited - BlackBerry Link Communication Manager.) -- C:\Program Files (x86)\Common Files\Research In Motion\Tunnel Manager\tunmgr.exe [1304064] [PID.3364]
[MD5.6E984D17526995C8FA9B65FFCE324A63] - (.Research In Motion Limited - BlackBerry Device Manager.) -- C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\BbDevMgr.exe [585728] [PID.3296]
[MD5.31A0E93CDF29007D6C6FFFB632F375ED] - (.Intel Corporation - IAStorDataSvc.) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [13336] [PID.4780]
[MD5.11A559E0F10CC5E788984023DF400A6F] - (.Intel Corporation - User Notification Service.) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2320920] [PID.4996]
[MD5.ABEDFD48AC042C6AAAD32452E77217A1] - (.Acresso Software Inc. - Activation Licensing Service.) -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [867080] [PID.6552]
[MD5.D347D3ABE070AA09C22FC37121555D52] - (.Sony Corporation - VAIOCare.) -- C:\Program Files\Sony\VAIO Care\VCService.exe [44736] [PID.5736]
[MD5.A7F9DEF51266832A3D18B198923C2385] - (...) -- C:\Program Files (x86)\FindRight\updateFindRight.exe [80672] [PID.9080] =>Hijacker.FindrToolbar
[MD5.C350D9B371D28C551BC661F3BAF1A109] - (.Sony Corporation - VCM Intelligent Network Service Manager.) -- C:\Program Files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe [381488] [PID.9640]
[MD5.F9D722A62C881B59439F9FC27BC7E285] - (.Sony Corporation - VCM Intelligent Analyzing Manager.) -- C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe [549408] [PID.8252]
~ Processes Running: Scanned in 00mn 14s
---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Preferences
G1 - GCS: Preference [User Data\Default] http://start.mysearchdial.com =>Adware.MyWebSearch
G0 - GCSP: Preference [User Data\Default][HomePage] http://start.mysearchdial.com =>Adware.MyWebSearch
G2 - GCE: Preference [User Data\Default] [booedmolknjekdopkepjjeckmjkdpfgl] Managerr v.0.1 (Activé)
G2 - GCE: Preference [User Data\Default] [cnmdgidklhhnmppphpohildcefnaaflp] Services x86 v.1.26.156, (Désactivé) =>PUP.CrossRider
G2 - GCE: Preference [User Data\Default] [fapbbpdnlcmiolkdfjnnjhabmcndadad] Météo v.0.9.0.6 (Activé)
G2 - GCE: Preference [User Data\Default] [flpcjncodpafbgdpnkljologafpionhb] Managera v.0.1 (Activé)
G2 - GCE: Preference [User Data\Default] [hdfaehfdnipifmjdehgmpnhnfdhnfjgj] http://www.viadeo.com/profile/0029ct91ysofdyk v.2012.7.10.17589 (Activé)
G2 - GCE: Preference [User Data\Default] [kmbaalodpmjjhpobkgljnelbpblnikkp] BB10 / PlayBook App Manager v.2.2.1, (Activé)
G2 - GCE: Preference [User Data\Default] [nkeimhogjdpnpccoofpliimaahmaaome] Hangout Services v.1.0 (Activé)
G2 - GCE: Preference [User Data\Default] [pbpohikckhbcljgombipcdoinkaedlfa] Smart Display v.1.6 (Activé) =>Spyware.SmartDisplay
~ Google Browser: 27 Legitimates Filtered in 01mn 08s
---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://start.mysearchdial.com =>Adware.MyWebSearch
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://start.mysearchdial.com =>Adware.MyWebSearch
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://start.mysearchdial.com =>Adware.MyWebSearch
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs,Tabs = http://start.mysearchdial.com =>Adware.MyWebSearch
~ IE Browser: 19 Legitimates Filtered in 00mn 00s
---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local;<local>
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Proxy management: Scanned in 00mn 00s
---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
~ Keys: Scanned in 00mn 00s
---\\ Hosts file redirection (O1)
~ Le fichier hosts est sain (The hosts file is clean).
~ Hosts File: Scanned in 00mn 00s
~ Nombre de lignes (Lines number): 21
---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: FindRight [64Bits] - {2c774641-5504-46a8-b63f-6715ae3fe376} . (.FindRight - FindRight.) -- C:\Program Files (x86)\FindRight\FindRightbho.dll =>Hijacker.FindrToolbar
~ BHO: 15 Legitimates Filtered in 00mn 01s
---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar: avast! Online Security - [HKLM]{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} . (.AVAST Software - IE Webrep plugin.) -- C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{2318C2B1-4965-11D4-9B18-009027A5CD4F} Clé orpheline
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{47833539-D0C5-4125-9FA8-0819E2EAAC93} Clé orpheline
~ Toolbar: Scanned in 00mn 00s
---\\ Autres liens utilisateurs (O4)
O4 - GS\Desktop [Public]: CATIA V5R18.lnk . (.Dassault Systemes - Administration.) -- C:\Program Files (x86)\Dassault Systemes\B18\intel_a\code\bin\CATSTART.exe
O4 - GS\Desktop [Public]: Ciel Gestion commerciale.lnk . (.Sage activité Ciel - Ciel Gestion Commerciale.) -- C:\Program Files (x86)\Ciel\Gestion Commerciale\WGC.exe
O4 - GS\Desktop [Public]: HP Officejet Pro 8500 A910 Scan.lnk . (.Hewlett-Packard Co. - HPScan.) -- C:\Program Files (x86)\HP\HP Officejet Pro 8500 A910\bin\HPScan.exe =>.Hewlett-Packard Co
O4 - GS\Desktop [Public]: HP Officejet Pro 8500 A910.lnk . (...) -- C:\Program Files (x86)\HP\HP Officejet Pro 8500 A910\Bin\HP Officejet Pro 8500 A910.exe (.not file.) =>.Hewlett-Packard Co
O4 - GS\Desktop [Public]: MappyPlus.lnk . (...) -- C:\Windows\Installer\{478F482D-C30B-4876-A080-BE3916268682}\app_icon.ico
O4 - GS\Program [Public]: iGoogle.lnk . (...) -- C:\Program Files (x86)\Sony\MFU\iGoogle.exe (.not file.)
O4 - GS\QuickLaunch [David]: BitTorrent.lnk . (.BitTorrent Inc. - BitTorrent.) -- C:\Users\David\AppData\Roaming\BitTorrent\BitTorrent.exe =>P2P.BitTorrent
O4 - GS\QuickLaunch [David]: DeepBurner.lnk . (.Astonsoft - CD/DVD recording software.) -- C:\Program Files (x86)\Astonsoft\DeepBurner\DeepBurner.exe
O4 - GS\QuickLaunch [David]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - GS\TaskBar [David]: CATIA.lnk . (.Dassault Systemes - CATIA.) -- C:\Program Files (x86)\Dassault Systemes\B18\intel_a\code\bin\CNEXT.exe
O4 - GS\TaskBar [David]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Users\David\AppData\Local\Google\Chrome\Application\chrome.exe
O4 - GS\TaskBar [David]: Lanceur d'applications Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Users\David\AppData\Local\Google\Chrome\Application\chrome.exe
O4 - GS\SystemTools [David]: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - GS\SendTo [David]: IsoBuster.lnk . (.Smart Projects - The Ultimate CD/DVD/BD Recovery tool.) -- C:\Program Files (x86)\Smart Projects\IsoBuster\IsoBuster.exe
O4 - GS\Desktop [David]: AnglaisFacile.com-Barre Verbes Irréguliers.lnk . (.AS - Learning the irregulars verbs.) -- C:\Program Files (x86)\AnglaisFacile.com\Barre Verbes Irréguliers\irreg.exe
O4 - GS\Desktop [David]: DeepBurner.lnk . (.Astonsoft - CD/DVD recording software.) -- C:\Program Files (x86)\Astonsoft\DeepBurner\DeepBurner.exe
O4 - GS\Desktop [David]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Users\David\AppData\Local\Google\Chrome\Application\chrome.exe
O4 - GS\Desktop [David]: KeyShot Resources.lnk . (...) -- C:\Users\David\Documents\KeyShot
O4 - GS\Desktop [David]: KeyShot2 64.lnk . (...) -- C:\Program Files (x86)\KeyShot2\bin\keyshot.exe (.not file.)
O4 - GS\Desktop [David]: Musique.lnk . (...) -- C:\Users\David\AppData\Roaming\Microsoft\Windows\Libraries\Music.library-ms
O4 - GS\Desktop [David]: Password Safe.lnk . (.SourceForge.net - Password Safe Application.) -- C:\Program Files (x86)\Password Safe\pwsafe.exe
O4 - GS\Desktop [David]: PC Speed Maximizer.lnk . (.Smart PC Solutions - PC Speed Maximizer.) -- C:\Program Files (x86)\PC Speed Maximizer\PCSpeedMaximizer.exe =>Rogue.PCSpeedMaximizer
~ Global Startup: 105 Legitimates Filtered in 00mn 19s
---\\ Applications lancées au démarrage du sytème (O4)
O4 - GS\Startup [Public]: Bluetooth.lnk . (...) -- C:\Program Files (x86)\WIDCOMM\Bluetooth Software\BTTray.exe (.not file.)
O4 - GS\Startup [David]: Dropbox.lnk . (.Dropbox, Inc. - Dropbox.) -- C:\Users\David\AppData\Roaming\Dropbox\bin\Dropbox.exe =>.Dropbox
O4 - GS\Startup [David]: fliptoast.lnk . (...) -- C:\Program Files (x86)\fliptoast\fliptoast.exe (.not file.)
O4 - GS\Startup [David]: MaxTV.lnk . (...) -- C:\Program Files (x86)\MaxTV\MaxTV4\maxtv.exe (.not file.)
O4 - GS\Startup [David]: Password Safe.lnk . (.SourceForge.net - Password Safe Application.) -- C:\Program Files (x86)\Password Safe\pwsafe.exe
O4 - HKLM\..\Run: [RtHDVCpl] . (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe =>.Realtek Semiconductor Corp
O4 - HKLM\..\Run: [RtHDVBg] . (.Realtek Semiconductor - HD Audio Background Process.) -- C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
O4 - HKLM\..\Run: [Apoint] C:\Program Files (x86)\Apoint\Apoint.exe (.not file.)
O4 - HKLM\..\Run: [AdobeAAMUpdater-1.0] . (.Adobe Systems Incorporated - Adobe Updater Startup Utility.) -- C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe =>.Adobe Systems Incorporated
O4 - HKLM\..\Run: [MSC] . (.Microsoft Corporation - Microsoft Security Client User Interface.) -- c:\Program Files\Microsoft Security Client\msseces.exe
O4 - HKCU\..\Run: [VRLPHelper] . (.Sony Corporation - VRLPHelper.) -- C:\Program Files (x86)\Sony\Media Gallery\VRLPHelper.exe
O4 - HKCU\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe =>.Microsoft Corporation
O4 - HKCU\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Users\David\AppData\Local\Google\Update\GoogleUpdate.exe =>.Google Inc
O4 - HKCU\..\Run: [OfficeSyncProcess] . (.Microsoft Corporation - Microsoft Office Document Cache.) -- C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.exe
O4 - HKCU\..\Run: [iCloudServices] . (.Apple Inc. - iCloud.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
O4 - HKCU\..\Run: [ApplePhotoStreams] . (.Apple Inc. - Apple Photostreams Uploader Executable.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
O4 - HKCU\..\Run: [com.apple.dav.bookmarks.daemon] C:\Program Files (x86)\Common Files\Apple\Internet Services\BookmarkDAV_client.exe (.not file.)
O4 - HKCU\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe =>.Skype Technologies S.A.
O4 - HKCU\..\Run: [SkyDrive] . (.Microsoft Corporation - Microsoft SkyDrive.) -- C:\Users\David\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe =>.Microsoft Corporation
O4 - HKCU\..\Run: [AppleIEDAV] . (.Apple Inc. - Apple IE DAV.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\AppleIEDAV.exe
O4 - HKCU\..\Run: [GoogleChromeAutoLaunch_9A83AADA066CCEA6F8C613E0AB5C7E19] . (.Google Inc. - Google Chrome.) -- C:\Users\David\AppData\Local\Google\Chrome\Application\chrome.exe
O4 - HKCU\..\Run: [KiesPreload] C:\Program Files (x86)\Samsung\Kies\Kies.exe (.not file.)
O4 - HKCU\..\Run: [PC Speed Maximizer] . (.Smart PC Solutions - Fix PC problems and optimize performance.) -- C:\Program Files (x86)\PC Speed Maximizer\SPMLauncher.exe =>Rogue.PCSpeedMaximizer
O4 - HKLM\..\Wow6432Node\Run: [IAStorIcon] . (.Intel Corporation - IAStorIcon.) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
O4 - HKLM\..\Wow6432Node\Run: [ISBMgr.exe] . (.Sony Corporation - Pas de description.) -- C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe
O4 - HKLM\..\Wow6432Node\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe
O4 - HKLM\..\Wow6432Node\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe =>.Adobe Systems Incorporated
O4 - HKLM\..\Wow6432Node\Run: [PMBVolumeWatcher] . (.Sony Corporation - Media Check Tool.) -- C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe
O4 - HKLM\..\Wow6432Node\Run: [SHTtray.exe] . (.Sony Corporation - SHTtray.) -- C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SHTtray.exe
O4 - HKLM\..\Wow6432Node\Run: [Acrobat Assistant 8.0] . (.Adobe Systems Inc. - AcroTray.) -- C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe
O4 - HKLM\..\Wow6432Node\Run: [Adobe_ID0EYTHM] . (.Adobe Systems Incorporated - Adobe Version Cue CS3.) -- C:\Program Files (x86)\Common Files\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3Tray.exe =>.Adobe Systems Incorporated
O4 - HKLM\..\Wow6432Node\Run: [HP Software Update] . (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe =>.Hewlett-Packard Co
O4 - HKLM\..\Wow6432Node\Run: [ROC_roc_dec12] C:\Program Files (x86)\AVG Secure Search\ROC_roc_dec12.exe (.not file.) =>Toolbar.AVGSearch
O4 - HKLM\..\Wow6432Node\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
O4 - HKLM\..\Wow6432Node\Run: [ROC_ROC_JULY_P1] C:\Program Files (x86)\AVG Secure Search\ROC_ROC_JULY_P1.exe (.not file.) =>Toolbar.AVGSearch
O4 - HKLM\..\Wow6432Node\Run: [ROC_ROC_NT] C:\Program Files (x86)\AVG Secure Search\ROC_ROC_NT.exe (.not file.) =>Toolbar.AVGSearch
O4 - HKLM\..\Wow6432Node\Run: [StartCCC] . (.Advanced Micro Devices, Inc. - Catalyst® Control Center Launcher.) -- C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe =>.Advanced Micro Devices, Inc
O4 - HKLM\..\Wow6432Node\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe =>.Oracle Corporation
O4 - HKLM\..\Wow6432Node\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files (x86)\QuickTime\QTTask.exe
O4 - HKLM\..\Wow6432Node\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe
O4 - HKLM\..\Wow6432Node\Run: [20131121] C:\Program Files\AVAST Software\Avast\setup\emupdate\0666b597-30e8-4d51-bb01-ed482354fac9.exe (.not file.)
O4 - HKLM\..\Wow6432Node\Run: [BCSSync] . (.Microsoft Corporation - Microsoft Office 2010 component.) -- C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe =>.Microsoft Corporation
O4 - HKLM\..\Wow6432Node\Run: [RIMBBLaunchAgent.exe] . (.Research In Motion Limited - Launch Agent Service.) -- C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe
O4 - HKLM\..\Wow6432Node\Run: [RIM PeerManager] . (.Research In Motion Limited - BlackBerry Link Peer Manager.) -- C:\Program Files (x86)\Common Files\Research In Motion\Tunnel Manager\PeerManager.exe
O4 - HKLM\..\Wow6432Node\Run: [AvastUI.exe] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
O4 - HKLM\..\Wow6432Node\RunOnce: [InstallShieldSetup] . (.Macrovision Corporation - Setup.exe.) -- C:\Program Files (x86)\InstallShield Installation Information\{DD696AF7-8A89-41D5-976A-2053E41A69BE}\setup.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-21-989871973-3194986984-399432074-1001\..\Run: [VRLPHelper] . (.Sony Corporation - VRLPHelper.) -- C:\Program Files (x86)\Sony\Media Gallery\VRLPHelper.exe
O4 - HKUS\S-1-5-21-989871973-3194986984-399432074-1001\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-21-989871973-3194986984-399432074-1001\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Users\David\AppData\Local\Google\Update\GoogleUpdate.exe =>.Google Inc
O4 - HKUS\S-1-5-21-989871973-3194986984-399432074-1001\..\Run: [OfficeSyncProcess] . (.Microsoft Corporation - Microsoft Office Document Cache.) -- C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.exe
O4 - HKUS\S-1-5-21-989871973-3194986984-399432074-1001\..\Run: [iCloudServices] . (.Apple Inc. - iCloud.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
O4 - HKUS\S-1-5-21-989871973-3194986984-399432074-1001\..\Run: [ApplePhotoStreams] . (.Apple Inc. - Apple Photostreams Uploader Executable.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
O4 - HKUS\S-1-5-21-989871973-3194986984-399432074-1001\..\Run: [com.apple.dav.bookmarks.daemon] C:\Program Files (x86)\Common Files\Apple\Internet Services\BookmarkDAV_client.exe (.not file.)
O4 - HKUS\S-1-5-21-989871973-3194986984-399432074-1001\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe =>.Skype Technologies S.A.
O4 - HKUS\S-1-5-21-989871973-3194986984-399432074-1001\..\Run: [SkyDrive] . (.Microsoft Corporation - Microsoft SkyDrive.) -- C:\Users\David\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-21-989871973-3194986984-399432074-1001\..\Run: [AppleIEDAV] . (.Apple Inc. - Apple IE DAV.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\AppleIEDAV.exe
O4 - HKUS\S-1-5-21-989871973-3194986984-399432074-1001\..\Run: [GoogleChromeAutoLaunch_9A83AADA066CCEA6F8C613E0AB5C7E19] . (.Google Inc. - Google Chrome.) -- C:\Users\David\AppData\Local\Google\Chrome\Application\chrome.exe
O4 - HKUS\S-1-5-21-989871973-3194986984-399432074-1001\..\Run: [KiesPreload] C:\Program Files (x86)\Samsung\Kies\Kies.exe (.not file.)
O4 - HKUS\S-1-5-21-989871973-3194986984-399432074-1001\..\Run: [PC Speed Maximizer] . (.Smart PC Solutions - Fix PC problems and optimize performance.) -- C:\Program Files (x86)\PC Speed Maximizer\SPMLauncher.exe =>Rogue.PCSpeedMaximizer
~ Application: Scanned in 00mn 01s
---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: &Envoyer à OneNote [64Bits] - {2670000A-7350-4f3c-8081-5663EE0C6C49} -- C:\Program Files (x86)\MICROS~2\Office14\ONBttnIE.dll (.not file.)
O9 - Extra button: Notes &liées OneNote [64Bits] - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} -- C:\Program Files (x86)\MICROS~2\Office14\ONBTTN~1.dll (.not file.)
O9 - Extra button: Skype Click to Call [64Bits] - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} . (...) -- c:\program files (x86)\skype\toolbars\internet explorer x64\icon.ico
~ IE Extra Buttons: Scanned in 00mn 00s
---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{1193553A-5DFA-429C-9E1E-5E28C07DD99E}: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CCS\Services\Tcpip\..\{67E30E43-3A92-4700-9855-685B436DE167}: DhcpNameServer = 172.20.10.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{9380F1F1-2D9E-4661-B3FC-D53ED4FE0E00}: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CCS\Services\Tcpip\..\{1193553A-5DFA-429C-9E1E-5E28C07DD99E}: DhcpDomain = lan
O17 - HKLM\System\CCS\Services\Tcpip\..\{9380F1F1-2D9E-4661-B3FC-D53ED4FE0E00}: DhcpDomain = lan
O17 - HKLM\System\CS1\Services\Tcpip\..\{1193553A-5DFA-429C-9E1E-5E28C07DD99E}: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CS1\Services\Tcpip\..\{67E30E43-3A92-4700-9855-685B436DE167}: DhcpNameServer = 172.20.10.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{9380F1F1-2D9E-4661-B3FC-D53ED4FE0E00}: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CS1\Services\Tcpip\..\{1193553A-5DFA-429C-9E1E-5E28C07DD99E}: DhcpDomain = lan
O17 - HKLM\System\CS1\Services\Tcpip\..\{9380F1F1-2D9E-4661-B3FC-D53ED4FE0E00}: DhcpDomain = lan
O17 - HKLM\System\CS2\Services\Tcpip\..\{1193553A-5DFA-429C-9E1E-5E28C07DD99E}: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CS2\Services\Tcpip\..\{67E30E43-3A92-4700-9855-685B436DE167}: DhcpNameServer = 172.20.10.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{9380F1F1-2D9E-4661-B3FC-D53ED4FE0E00}: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CS2\Services\Tcpip\..\{1193553A-5DFA-429C-9E1E-5E28C07DD99E}: DhcpDomain = lan
O17 - HKLM\System\CS2\Services\Tcpip\..\{9380F1F1-2D9E-4661-B3FC-D53ED4FE0E00}: DhcpDomain = lan
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254
~ Domain: Scanned in 00mn 00s
---\\ Protocole additionnel (O18)
O18 - Handler: wlpg [64Bits] - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (...) --
O18 - Filter: text/xml [64Bits] - {807573E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.dll =>.Microsoft Corporation
~ Protocole Additionnel: Scanned in 00mn 00s
---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\Windows\System32\igfxdev.dll
~ Winlogon: Scanned in 00mn 00s
---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: KMService (KMService) . (...) - C:\Windows\SysWOW64\srvany.exe =>Hijacker.Office
O23 - Service: Moldflow Job Manager (mfjobman) . (...) - C:\Program Files (x86)\Moldflow\Moldflow Job Manager\bin\mfjobman.exe
O23 - Service: Moldflow License Manager (MoldflowLM) . (...) - C:\Windows\system32\mf_lmd.exe (.not file.)
O23 - Service: NetAccess Service (NA_Service) . (.Pas de propriétaire - NetAcces Application.) - C:\Windows\system32\NA_Service.exe
O23 - Service: Update FindRight (Update FindRight) . (...) - C:\Program Files (x86)\FindRight\updateFindRight.exe =>Hijacker.FindrToolbar
O23 - Service: Usb PLC (UsbConnect) . (.Schneider Electric Industries SAS - USB PLC NT Service.) - C:\Windows\system32\UsbConnect.exe
O23 - Service: VSNService (VSNService) . (.Sony Corporation - VAIO Smart Network Service.) - C:\Program Files\Sony\VAIO Smart Network\VSNService.exe
~ Services: 33 Legitimates Filtered in 00mn 27s
---\\ Tâches planifiées en automatique (O39)
[MD5.00000000000000000000000000000000] [APT] [{1160733A-09AD-42BE-B87F-E09150555269}] (...) -- C:\Program Files (x86)\Perfect World Entertainment\Arc\ArcLauncher.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{29CCC77C-0FC0-4D54-BF52-D1B02776A6FE}] (...) -- C:\Users\David\Desktop\W9Setup.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{6CC23B11-6B4A-40E8-963B-796FDA59B93F}] (...) -- C:\Users\David\Desktop\Unity_Pro_XL_V6.0 - Copy\UnityPro_V60_HF_20048554.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{708EE5D5-7DA1-4F15-AEB0-936568F8E0BA}] (...) -- C:\Users\David\Desktop\chrome_installer.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{7AB23764-4B84-48BE-9B95-F20AF6224AFC}] (...) -- C:\Program Files (x86)\Perfect World Entertainment\Arc\ArcLauncher.exe (.not file.) [0]
~ Scheduled Task: 34 Legitimates Filtered in 00mn 11s
---\\ Logiciels installés (O42)
O42 - Logiciel: DriverManager x64 - (.Schneider Electric.) [HKLM][64Bits] -- {4201BA84-EC1B-4B75-A1EF-E77D3E958465}
O42 - Logiciel: FindRight - (.FindRight.) [HKLM][64Bits] -- FindRight =>Hijacker.FindrToolbar
O42 - Logiciel: KeyShot2 2.1 64 bit - (.Luxion ApS.) [HKLM][64Bits] -- KeyShot2_64
O42 - Logiciel: PCSpeedUp - (.www.pcspeedup.com.) [HKCU][64Bits] -- 3799448215.www.pcspeedup.com
O42 - Logiciel: PLCUsb Driver X64 - (.Schneider Electric.) [HKLM][64Bits] -- {771C6F2F-BCE2-4773-BA33-21B31B14F57B}
O42 - Logiciel: PSx Ethernet RIO DTM - (.Schneider Electric.) [HKLM][64Bits] -- {AB0A115F-D117-48BF-B18A-CA123F997FFE}
O42 - Logiciel: PokerStars.fr - (.PokerStars.fr.) [HKLM][64Bits] -- PokerStars.fr
O42 - Logiciel: Unity Pro Ethernet Configuration Tool - (.Schneider Electric.) [HKLM][64Bits] -- {1D672516-8C55-4914-BD5D-505C13E17317}
~ Logic: 31 Legitimates Filtered in 00mn 02s
---\\ HKCU & HKLM Software Keys
[HKCU\Software\46b555f6]
[HKCU\Software\FindRight] =>Hijacker.FindrToolbar
[HKCU\Software\InstallCore] =>Adware.InstallCore
[HKCU\Software\Luxion]
[HKLM\Software\Luxion]
[HKLM\Software\Wow6432Node\FDT]
[HKLM\Software\Wow6432Node\FH]
[HKLM\Software\Wow6432Node\FT]
[HKLM\Software\Wow6432Node\FindRight] =>Hijacker.FindrToolbar
[HKLM\Software\Wow6432Node\KA]
[HKLM\Software\Wow6432Node\Luxion]
[HKLM\Software\Wow6432Node\US]
[HKLM\Software\Wow6432Node\Viacom]
[HKLM\Software\Wow6432Node\WM]
~ Key Software: 504 Legitimates Filtered in 00mn 02s
---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 26/03/2011 - 16:13:00 - [0,001] ----D C:\Program Files (x86)\Bunkspeed
O43 - CFD: 14/02/2014 - 15:24:21 - [2,103] ----D C:\Program Files (x86)\FindRight =>Hijacker.FindrToolbar
O43 - CFD: 26/04/2011 - 12:51:23 - [0] ----D C:\Program Files (x86)\Max2k
O43 - CFD: 03/12/2013 - 10:32:32 - [0,758] ----D C:\Program Files (x86)\NetScript
O43 - CFD: 21/08/2013 - 15:27:46 - [0] ----D C:\Program Files (x86)\PokerStars.FR
O43 - CFD: 26/03/2011 - 16:13:00 - [142,257] ----D C:\ProgramData\Bunkspeed
O43 - CFD: 05/11/2012 - 13:18:07 - [2,588] ----D C:\ProgramData\InstallMate =>PUP.Tarma
O43 - CFD: 28/10/2011 - 12:29:15 - [0] --H-D C:\Users\David\AppData\Roaming\FDBTemp
O43 - CFD: 31/01/2014 - 11:50:55 - [0] ----D C:\Users\David\AppData\Roaming\Mediatronic
O43 - CFD: 14/02/2014 - 15:22:07 - [0,073] ----D C:\Users\David\AppData\Roaming\mysearchdial =>Adware.MyWebSearch
O43 - CFD: 24/02/2013 - 16:10:45 - [1,569] ----D C:\Users\David\AppData\Roaming\wam.04351C371E530C3762CBA45FA283ED972DCDEFB6.1
O43 - CFD: 25/04/2012 - 10:50:06 - [0,002] -SH-D C:\Users\David\AppData\Local\46b555f6
O43 - CFD: 26/10/2011 - 14:01:39 - [33,915] ----D C:\Users\David\AppData\Local\Installer5752
O43 - CFD: 16/11/2011 - 09:59:38 - [0] ----D C:\Users\David\AppData\Local\Luxion
O43 - CFD: 21/08/2013 - 15:27:26 - [0] ----D C:\Users\David\AppData\Local\PokerStars.FR
O43 - CFD: 16/11/2011 - 09:50:57 - [0,006] ----D C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\KeyShot2 64
~ 16 Dossiers CLSID vides (CLSID Empty Folders)
~ Program Folder: 319 Legitimates Filtered in 04mn 03s
---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.6D34046C521212C36D21AD7EFB9AA8C7] - 14/02/2014 - 11:57:02 ---A- . (...) -- C:\Windows\win.ini [1341]
O44 - LFC:[MD5.2F21934CECB2D7F0E99D74F45125118F] - 14/02/2014 - 13:57:04 ---A- . (...) -- C:\Windows\System32\NetAccessLog.txt [83922]
O44 - LFC:[MD5.7F418C89A6903688B3B8F8C080DC9F64] - 14/02/2014 - 15:50:27 --HA- . (...) -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [19760]
O44 - LFC:[MD5.7F418C89A6903688B3B8F8C080DC9F64] - 14/02/2014 - 15:50:27 --HA- . (...) -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [19760]
O44 - LFC:[MD5.03ECE7D85D27724EDABD9CEF2A93174F] - 31/01/2014 - 13:17:26 ---A- . (...) -- C:\test.xml [26036]
~ Files: 33 Legitimates Filtered in 00mn 54s
---\\ Opérations et fonctions au démarrage de Windows Explorer (O46)
O46 - SEH:ShellExecuteHooks - Groove GFS Stub Execution Hook [64Bits] - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
~ ShellExecuteHooks: Scanned in 00mn 00s
---\\ Clé de registre Shell MountPoints2 (MPKS) (O51)
O51 - MPSK:{33ec1cde-511d-11e3-8097-c0cb38fe84e4}\AutoRun\command. (...) -- C:\Windows\system32\E:\start.exe (.not file.)
~ Keys: Scanned in 00mn 00s
---\\ Enumération des clés de registre PoliciesSystem (MWPS) (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
~ MWPS: 16 Legitimates Filtered in 00mn 00s
---\\ Enumération des clés de registre PoliciesExplorer (MWPE) (O56)
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1
~ MWPE Keys: 3 Legitimates Filtered in 00mn 00s
---\\ Liste des pilotes du système (SDL) (O58)
O58 - SDL:[MD5.C04F7B373881009D7994D9BF55D24AB4] - 04/02/2014 - 14:39:01 ---A- . (...) -- C:\Windows\System32\Drivers\aswRvrt.sys [65776]
O58 - SDL:[MD5.90399625F341AB76BA4B85A5E860EB1F] - 04/02/2014 - 14:39:01 ---A- . (...) -- C:\Windows\System32\Drivers\aswVmm.sys [207904]
O58 - SDL:[MD5.0E5DA5369A0FCAEA12456DD852545184] - 14/07/2009 - 02:47:48 ---A- . (.Emulex - Storport Miniport Driver for LightPulse HBAs.) -- C:\Windows\System32\Drivers\elxstor.sys [530496]
O58 - SDL:[MD5.F2523EF6460FC42405B12248338AB2F0] - 10/06/2009 - 21:31:59 ---A- . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for eHome.) -- C:\Windows\System32\Drivers\hcw85cir.sys [31232]
O58 - SDL:[MD5.4F39094BAFB40E0C5AA5D7217DE09835] - 18/01/2010 - 10:17:26 ---A- . (.Schneider Electric Industries SAS - PlcUsb driver.) -- C:\Windows\System32\Drivers\PlcUsb.sys [192680]
O58 - SDL:[MD5.FA6ABC06B629DA29634D31F1FE0347BD] - 23/06/2010 - 21:02:59 ---A- . (.REDC - RICOH MS Driver.) -- C:\Windows\System32\Drivers\rimssne64.sys [94208]
O58 - SDL:[MD5.8F8539A7F5C117D4407B2985995671F2] - 23/06/2010 - 21:03:07 ---A- . (.REDC - RICOH PCIe SD/MMC Driver.) -- C:\Windows\System32\Drivers\risdsne64.sys [78848]
O58 - SDL:[MD5.955FFE2B1D74A9E0E3E0E558E6A17F3B] - 28/10/2013 - 01:12:10 ---A- . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG USB Composite Device Driver (MSS Ver.3).) -- C:\Windows\System32\Drivers\ssudbus.sys [107288]
O58 - SDL:[MD5.BB94A5E2CEE5FD83BA5A72A37AECADDF] - 28/10/2013 - 01:12:12 ---A- . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG Android Modem Device Driver (MSS Ver.3).) -- C:\Windows\System32\Drivers\ssudmdm.sys [204568]
O58 - SDL:[MD5.F3817967ED533D08327DC73BC4D5542A] - 14/07/2009 - 02:45:55 ---A- . (.Promise Technology - Promise SuperTrak EX Series Driver for Windows.) -- C:\Windows\System32\Drivers\stexstor.sys [24656]
O58 - SDL:[MD5.C9E9D59C0099A9FF51697E9306A44240] - 13/12/2012 - 13:50:36 ---A- . (.Apple, Inc. - Apple Mobile Device USB Driver.) -- C:\Windows\System32\Drivers\usbaapl64.sys [54784]
~ Drivers: 16 Legitimates Filtered in 00mn 07s
---\\ Liste des outils de désinfection (LATC) (O63)
O63 - Logiciel: ZHPDiag 2014 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 =>.Nicolas Coolman
~ ADS: Scanned in 00mn 00s
---\\ Menu de démarrage Internet (SMI) (O68)
O68 - StartMenuInternet: <Google Chrome.5OEN67BY4NY6HB7N4F4SSLBEYY> <Google Chrome>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Users\David\AppData\Local\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
~ Keys: Scanned in 00mn 00s
---\\ Recherche d'infection sur les navigateurs internet (SBI) (O69)
O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} - (Google) - https://www.google.com/?gws_rd=ssl
O69 - SBI: SearchScopes [HKCU] {77AA745B-F4F8-45DA-9B14-61D2D95054C8} [DefaultScope] - (Mysearchdial) - http://start.mysearchdial.com =>Adware.MyWebSearch
~ Keys: Scanned in 00mn 00s
---\\ Recherche particulière à la racine du système (SPRF) (O84)
[MD5.EFD61475490EC9F220A1716BE271C001] [SPRF][19/04/2011] (...) -- C:\ProgramData\ezsidmv.dat [56]
~ Files: 6 Legitimates Filtered in 00mn 00s
---\\ Liste des exceptions du parefeu (FirewallRules) (O87)
O87 - FAEL: "{5D22ED06-94C5-43B8-9775-FF55B4B6EC99}" |In - Domain - P6 - TRUE | .(...) -- C:\PVSW\Bin\w3dbsmgr.exe (.not file.)
O87 - FAEL: "{0ED6DC5C-BE12-4A27-A591-C0E15CE57B0A}" |In - Domain - P17 - TRUE | .(...) -- C:\PVSW\Bin\w3dbsmgr.exe (.not file.)
O87 - FAEL: "{97456A69-E023-45B4-A8DC-A2DD2CF4BAAE}" |In - Private - P6 - TRUE | .(...) -- C:\PVSW\Bin\w3dbsmgr.exe (.not file.)
O87 - FAEL: "{50ADD074-2E73-4FA4-95F1-37721C523EE9}" |In - Private - P17 - TRUE | .(...) -- C:\PVSW\Bin\w3dbsmgr.exe (.not file.)
O87 - FAEL: "{F31747DD-141D-4C0A-ABBD-C811B9F9AE3E}" |In - Private - P6 - TRUE | .(...) -- C:\Program Files (x86)\Easy Downloads\easydownloads.exe (.not file.)
O87 - FAEL: "{D55F26E1-03C5-4B4A-8575-859086FF16A4}" |In - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\Easy Downloads\easydownloads.exe (.not file.)
O87 - FAEL: "{E1E39015-8B15-4605-A979-018638094FDC}" |In - Private - P6 - TRUE | .(...) -- C:\Program Files (x86)\Easy Downloads\easydl.exe (.not file.)
O87 - FAEL: "{A2B829C4-BCB0-4D22-B65E-AFA1A99E5002}" |In - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\Easy Downloads\easydl.exe (.not file.)
O87 - FAEL: "TCP Query User{4AF2B2D1-A286-4173-8172-4082C981A90F}C:\program files (x86)\moldflow\moldflow plastics insight 2.0\bin\mdsiae.exe" |In - Private - P6 - TRUE | .(...) -- C:\program files (x86)\moldflow\moldflow plastics insight 2.0\bin\mdsiae.exe (.not file.)
O87 - FAEL: "UDP Query User{5FC477BD-51F3-48C3-8B75-3E9CB5A4EBAC}C:\program files (x86)\moldflow\moldflow plastics insight 2.0\bin\mdsiae.exe" |In - Private - P17 - TRUE | .(...) -- C:\program files (x86)\moldflow\moldflow plastics insight 2.0\bin\mdsiae.exe (.not file.)
O87 - FAEL: "TCP Query User{94E9BEEE-9C3C-45E4-A73A-F56C9DD6C86B}C:\program files (x86)\leawo\video converter ultimate\loadingscreen.exe" |In - Private - P6 - TRUE | .(...) -- C:\program files (x86)\leawo\video converter ultimate\loadingscreen.exe (.not file.)
O87 - FAEL: "UDP Query User{EEB417D9-AAB1-4272-9A39-428BFA919DD4}C:\program files (x86)\leawo\video converter ultimate\loadingscreen.exe" |In - Private - P17 - TRUE | .(...) -- C:\program files (x86)\leawo\video converter ultimate\loadingscreen.exe (.not file.)
~ Firewall: 306 Legitimates Filtered in 00mn 03s
---\\ Enumère les codes produits des logiciels (PUC) (O90)
O90 - PUC: "48AB1024B1CE57B41AFE7ED7E3594856" . (.DriverManager x64.) -- C:\Windows\Installer\{4201BA84-EC1B-4B75-A1EF-E77D3E958465}\ARPPRODUCTICON.exe
O90 - PUC: "F511A0BA711DFB841BA8AC21F399F7EF" . (.PSx Ethernet RIO DTM.) -- C:\Windows\Installer\{AB0A115F-D117-48BF-B18A-CA123F997FFE}\ARPProductIcon.ico
~ Update Products: 257 Legitimates Filtered in 00mn 00s
---\\ Enumère les données de la clé NameSpace (MNS) (O92)
O92 - MNS: Photos iCloud - {F0D63F85-37EC-4097-B30D-61B4A8917118}
~ MNS: 1 Legitimates Filtered in 00mn 00s
---\\ Recherche des packages WindowsInstaller (WIS) (O93) (NTFS)
[MD5.FF6C583A206448609A37532980051DBC] [WIS][29/11/2013] (.BlackBerry Ltd. - Blank Project Template.) -- C:\Windows\Installer\1b032138.msi [59089408]
[MD5.3E765C9DA387C8C8C067266C3AE3FB9B] [WIS][24/10/2012] (.Skype Technologies S.A. - Skype Click to Call.) -- C:\Windows\Installer\2319136c.msi [10137600]
[MD5.83B949FFAC71B6EF36E615C56E398547] [WIS][01/08/2012] (.Schneider Electric - %.) -- C:\Windows\Installer\4b9e51.msi [32039664]
[MD5.F0596C90DE6FC3A233394737C1DDCC92] [WIS][01/08/2012] (.Schneider Electric - %.) -- C:\Windows\Installer\4b9e57.msi [31733996]
[MD5.EDD8FDE62417A3BE0F5A8F6796DA830F] [WIS][01/08/2012] (.Schneider Electric - Driver Manager x64.) -- C:\Windows\Installer\4b9e6a.msi [8777728]
[MD5.9F93809E457D72EB7751900561F09BB5] [WIS][01/08/2012] (.Schneider Electric - PLC Usb Driver X64.) -- C:\Windows\Installer\4b9e79.msi [1551872]
[MD5.5807A6A79EBF57203BA6FD68E93A676C] [WIS][07/04/2010] (.Adobe - Blank Project Template.) -- C:\Windows\Installer\64660.msi [12719104]
~ WIS: 261 Legitimates Filtered in 01mn 22s
---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)
SS - | Demand 18/03/2010 113152 | (ACDaemon) . (.ArcSoft Inc..) - C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
SS - | Demand 20/03/2007 153792 | (Adobe Version Cue CS3) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exe =>.Adobe Systems Incorporated
SS - | Demand 05/02/2014 257928 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
SS - | Demand 27/03/2011 85096 | (Autodesk Licensing Service) . (.Autodesk.) - C:\Program Files (x86)\Common Files\Autodesk Shared\Service\AdskScSrv.exe
SS - | Auto 03/07/2012 116648 | (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
SS - | Demand 03/07/2012 116648 | (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
SS - | Auto 10/07/1658 0 | (KMService) . (...) - C:\Windows\system32\srvany.exe =>Hijacker.Office
SS - | Auto 10/07/1658 0 | (MoldflowLM) . (...) - C:\Windows\system32\mf_lmd.exe
SS - | Demand 29/12/2011 17848 | (OverwolfUpdaterService) . (.Overwolf Ltd.) - C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe
SS - | Auto 05/09/2013 171680 | (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe
SS - | Demand 03/11/2011 138392 | (SOHCImp) . (.Sony Corporation.) - C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe
SS - | Auto 18/06/2010 423280 | (SOHDms) . (.Sony Corporation.) - C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe
SS - | Demand 03/11/2011 74904 | (SOHDs) . (.Sony Corporation.) - C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe
SS - | Auto 24/10/2011 958112 | (VCFw) . (.Sony Corporation.) - C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe
SS - | Demand 26/08/2011 101600 | (VcmXmlIfHelper) . (.Sony Corporation.) - C:\Program Files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper64.exe
SS - | Demand 14/07/2009 27136 | C:\Program Files (x86)\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
SR - | Auto 08/10/2010 202752 | (AMD External Events Utility) . (.AMD.) - C:\Windows\System32\atiesrxx.exe
SR - | Auto 07/09/2013 55624 | (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
SR - | Auto 04/02/2014 50344 | (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
SR - | Auto 04/05/2007 36864 | (BBDemon) . (.Dassault Systemes.) - C:\Program Files (x86)\Dassault Systemes\B18\intel_a\code\bin\CATSysDemon.exe
SR - | Demand 09/09/2013 585728 | (BlackBerry Device Manager) . (.Research In Motion Limited.) - C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\BbDevMgr.exe
SR - | Auto 30/08/2011 462184 | (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe
SR - | Auto 08/06/2010 952096 | (btwdins) . (.Broadcom Corporation..) - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
SR - | Auto 05/03/2010 1425168 | (EvtEng) . (.Intel(R) Corporation.) - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
SR - | Demand 05/08/2010 867080 | (FLEXnet Licensing Service) . (.Acresso Software Inc..) - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
SR - | Auto 04/03/2010 13336 | (IAStorDataMgrSvc) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
SR - | Demand 02/11/2013 641352 | (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe
SR - | Auto 28/05/2010 268824 | (LMS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
SR - | Auto 04/04/2013 418376 | (MBAMScheduler) . (.Malwarebytes Corporation.) - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
SR - | Auto 04/04/2013 701512 | (MBAMService) . (.Malwarebytes Corporation.) - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
SR - | Auto 18/07/2000 45056 | (mfjobman) . (...) - C:\Program Files (x86)\Moldflow\Moldflow Job Manager\bin\mfjobman.exe
SR - | Auto 23/10/2013 23808 | (MsMpSvc) . (.Microsoft Corporation.) - c:\Program Files\Microsoft Security Client\MsMpEng.exe
SR - | Auto 08/04/2009 105472 | (NA_Service) . (...) - C:\Windows\system32\NA_Service.exe
SR - | Auto 01/06/2010 367456 | (PMBDeviceInfoProvider) . (.Sony Corporation.) - C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe
SR - | Auto 10/07/1658 0 | (PnkBstrA) . (...) - C:\Windows\system32\PnkBstrA.exe
SR - | Auto 05/03/2010 831760 | (RegSrvc) . (.Intel(R) Corporation.) - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
SR - | Auto 28/11/2013 389632 | (RIM MDNS) . (.Apple Inc..) - C:\Program Files (x86)\Common Files\Research In Motion\Tunnel Manager\mDNSResponder.exe
SR - | Auto 28/11/2013 1304064 | (RIM Tunnel Service) . (.Research In Motion Limited.) - C:\Program Files (x86)\Common Files\Research In Motion\Tunnel Manager\tunmgr.exe
SR - | Auto 02/10/2012 3064000 | (Skype C2C Service) . (.Skype Technologies S.A..) - C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
SR - | Demand 23/09/2011 289952 | (SpfService) . (.Sony Corporation.) - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService64.exe
SR - | Auto 18/09/2008 104960 | (uCamMonitor) . (.ArcSoft, Inc..) - C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe
SR - | Auto 28/05/2010 2320920 | (UNS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
SR - | Auto 13/02/2014 80672 | (Update FindRight) . (...) - C:\Program Files (x86)\FindRight\updateFindRight.exe =>Hijacker.FindrToolbar
SR - | Auto 18/01/2010 128512 | (UsbConnect) . (.Schneider Electric Industries SAS.) - C:\Windows\system32\UsbConnect.exe
SR - | Auto 31/05/2010 217968 | (VAIO Event Service) . (.Sony Corporation.) - C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe
SR - | Auto 21/06/2010 575856 | (VAIO Power Management) . (.Sony Corporation.) - C:\Program Files\Sony\VAIO Power Management\SPMService.exe
SR - | Auto 08/09/2011 549408 | (VcmIAlzMgr) . (.Sony Corporation.) - C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe
SR - | Auto 08/09/2011 381488 | (VcmINSMgr) . (.Sony Corporation.) - C:\Program Files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe
SR - | Demand 14/02/2011 44736 | (VCService) . (.Sony Corporation.) - C:\Program Files\Sony\VAIO Care\VCService.exe
SR - | Auto 08/06/2010 836608 | (VSNService) . (.Sony Corporation.) - C:\Program Files\Sony\VAIO Smart Network\VSNService.exe
SR - | Demand 26/10/2012 1286784 | (VUAgent) . (.Sony Corporation.) - C:\Program Files\Sony\VAIO Update\VUAgent.exe
SR - | Auto 10/07/1658 0 | (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe =>.Microsoft Corporation
SR - | Auto 14/07/2009 27136 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
~ Services: Scanned in 01mn 26s
---\\ Scan Additionnel (O88)
Database Version : 13031 - (12/02/2014)
Clés trouvées (Keys found) : 16
Valeurs trouvées (Values found) : 4
Dossiers trouvés (Folders found) : 6
Fichiers trouvés (Files found) : 4
[HKLM\Software\Google\Chrome\Extensions\cnmdgidklhhnmppphpohildcefnaaflp] =>PUP.CrossRider^
[HKLM\Software\Google\Chrome\Extensions\pbpohikckhbcljgombipcdoinkaedlfa] =>Spyware.SmartDisplay^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2C774641-5504-46A8-B63F-6715AE3FE376}] =>Hijacker
Rapport de ZHPDiag v2014.2.12.10 - Nicolas Coolman (12/02/2014)
~ Lancé par David (14/02/2014 15:45:16)
~ Adresse du Site Web https://nicolascoolman.webs.com/
~ Forums gratuits d'Assistance à la désinfection : https://nicolascoolman.webs.com/
~ Traduit par Nicolas Coolman
~ Etat de la version :
~ Liste blanche : Activée par le programme
~ Elévation des Privilèges : OK
~ User Account Control (UAC): Deactivate by program
---\\ Navigateurs Internet
MSIE: Internet Explorer v9.0.8112.16421
---\\ Informations sur les produits Windows
~ Langage: Français
Windows 7 Home Premium, 64-bit (Build 7600)
Windows Server License Manager Script : OK
~ Windows(R) 7, OEM_SLP channel
System Locked Preinstallation (OEM_SLP) : OK
Windows ID Activation : OK
~ Windows Partial Key : CGKHQ
Windows License : OK
~ Windows Remaining Initializations Number : 2
Software Protection Service (Protection logicielle) : OK
Key Management Service client information : KO
Windows Automatic Updates : OK
Windows Activation Technologies : OK
---\\ Logiciels de protection du système
avast! Free Antivirus v9.0.2013
Malwarebytes Anti-Malware version 1.75.0.1300
Microsoft Security Client v4.4.0304.0
Windows Defender W7
---\\ Logiciels d'optimisation du système
CCleaner v3.23 =>Piriform Ltd
---\\ Logiciels de partage PeerToPeer
---\\ Surveillance de Logiciels
Adobe Flash Player 12 Plugin
Adobe Reader 9.3 - Français
Java 7 Update 25
---\\ Informations sur le système
~ Processor: Intel64 Family 6 Model 37 Stepping 5, GenuineIntel
~ Operating System: 64 Bits
Boot mode: Normal (Normal boot)
Total RAM: 3950 MB (24% free)
System Restore: Activé (Enable)
System drive C: has 58 GB (20%) free of 285 GB
---\\ Mode de connexion au système
~ Computer Name: DAVID-VAIO
~ User Name: David
~ All Users Names: HomeGroupUser$, David, Administrateur,
~ Unselected Option: O45,O61,O62,O65,O66,O80,O82,O89
Logged in as Administrator
---\\ Variables d'environnement
~ System Unit : C:\
~ %AppZHP% : C:\Users\David\AppData\Roaming\ZHP\
~ %AppData% : C:\Users\David\AppData\Roaming\
~ %Desktop% : C:\Users\David\Desktop\
~ %Favorites% : C:\Users\David\Favorites\
~ %LocalAppData% : C:\Users\David\AppData\Local\
~ %StartMenu% : C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\
---\\ Enumération des unités disques
C: Hard drive, Flash drive, Thumb drive (Free 58 Go of 285 Go)
D: CD-ROM drive (Not Inserted)
---\\ Etat du Centre de Sécurité Windows
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
~ Security Center: 41 Legitimates Filtered in 00mn 00s
---\\ Recherche particulière de fichiers génériques
[MD5.0862495E0C825893DB75EF44FAEA8E93] - (.Microsoft Corporation - Explorateur Windows.) (.26/02/2011 - 07:23:14.) -- C:\Windows\Explorer.exe [2870272]
[MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 - 02:39:52.) -- C:\Windows\System32\Wininit.exe [129024]
[MD5.A4F6142CABA82FB7293ECE5FF864B440] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.22/02/2013 - 07:20:51.) -- C:\Windows\System32\wininet.dll [1392128]
[MD5.DA3E2A6FA9660CC75B471530CE88453A] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.28/10/2009 - 07:24:40.) -- C:\Windows\System32\Winlogon.exe [389632]
[MD5.75341574F21E766748732BDF530C74BD] - (.Microsoft Corporation - Bibliothèque de licences.) (.14/07/2009 - 02:41:54.) -- C:\Windows\System32\sppcomapi.dll [231936]
[MD5.DB9D6C6B2CD95A9CA414D045B627422E] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.28/12/2011 - 04:59:11.) -- C:\Windows\system32\Drivers\AFD.sys [499200]
[MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 - 02:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128]
[MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/07/2009 - 00:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160]
[MD5.83D2D75E1EFB81B3450C18131443F7DB] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.14/07/2009 - 00:19:54.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456]
[MD5.9C253CE7311CA60FC11C774692A13208] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.27/04/2011 - 03:57:40.) -- C:\Windows\system32\Drivers\DfsC.sys [102400]
[MD5.0A49913402747A0B67DE940FB42CBDBB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.14/07/2009 - 01:06:13.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368]
[MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) (.14/07/2009 - 00:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472]
[MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.14/07/2009 - 01:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224]
[MD5.040D62A9D8AD28922632137ACDD984F2] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.04/05/2011 - 03:51:08.) -- C:\Windows\system32\Drivers\MRxSmb.sys [157696]
[MD5.9162B273A44AB9DCE5B44362731D062A] - (.Microsoft Corporation - MBT Transport driver.) (.14/07/2009 - 00:21:29.) -- C:\Windows\system32\Drivers\netBT.sys [259072]
[MD5.9A6089B056EA1B83B36424FC9D0A300E] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.12/04/2013 - 15:36:37.) -- C:\Windows\system32\Drivers\ntfs.sys [1653096]
[MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/07/2009 - 01:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280]
[MD5.87A6E852A22991580D6D39ADC4790463] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.14/07/2009 - 01:10:12.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [130048]
[MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.14/07/2009 - 01:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184]
[MD5.079125C4B17B01FCAEEBCE0BCB290C0F] - (.Microsoft Corporation - TDI Translation Driver.) (.14/07/2009 - 00:21:15.) -- C:\Windows\system32\Drivers\tdx.sys [99840]
[MD5.9E425AC5C9A5A973273D169F43B4F5E1] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.06/09/2012 - 18:38:18.) -- C:\Windows\system32\Drivers\volsnap.sys [295792]
~ Generic Processes: Scanned in 00mn 02s
---\\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 1/5244
~ Mes musiques (My Musics) : 1/10653
~ Mes Videos (My Videos) : 1/36
~ Mes Favoris (My Favorites) : 1/60
~ Mes Documents (My Documents) : 2/357
~ Mon Bureau (My Desktop) : 8/24999
~ Menu demarrer (Programs) : 1/49
~ Hidden Files: Scanned in 03mn 37s
---\\ Processus lancés
[MD5.D1D5DAB39DCB4BE0359943738D87409B] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe [532040] [PID.3348]
[MD5.C948AC73822CA662CF44185B909EA18B] - (.Microsoft Corporation - Microsoft Office Document Cache.) -- C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.exe [720064] [PID.2628]
[MD5.23C2FCAA50C4F80F7D1B8A0771D45328] - (.Apple Inc. - iCloud.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720] [PID.5352]
[MD5.5883D86F8C22B1E5F78627E4AF19B234] - (.Apple Inc. - Apple Photostreams Uploader Executable.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720] [PID.5468]
[MD5.58920E6A409046BA06548D9D139CE0F0] - (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe [20584608] [PID.5832]
[MD5.D213F06AE294341F3503FD74E22E7DDA] - (.Microsoft Corporation - Microsoft SkyDrive.) -- C:\Users\David\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe [257136] [PID.5968]
[MD5.0CA7445A40F3321959F942ED0F81F470] - (.Apple Inc. - Apple IE DAV.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\AppleIEDAV.exe [1315144] [PID.6100]
[MD5.58FC1B36032F03342E4C02813F80DAC1] - (.Dropbox, Inc. - Dropbox.) -- C:\Users\David\AppData\Roaming\Dropbox\bin\Dropbox.exe [30714328] [PID.6060]
[MD5.51138BEEA3E2C21EC44D0932C71762A8] - (...) -- ysWOW64\RunDll32.exe [0] [PID.5940]
[MD5.25107F58D1B8F60D67D1EE95798C0DE8] - (.Intel Corporation - IAStorIcon.) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696] [PID.2700]
[MD5.CCA9023E3DDBE290D4381344115D99B7] - (.Sony Corporation - Pas de description.) -- C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe [673136] [PID.708]
[MD5.47833576F0BEE0AD7B45109982B769BD] - (.Apple Inc. - Apple Push.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\APSDaemon.exe [59720] [PID.5552]
[MD5.AC32E0F47BB9083BB4164171A4C562A2] - (.Sony Corporation - Media Check Tool.) -- C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe [600928] [PID.2960]
[MD5.4A0BBDF88636F2EF08420BDCD343D286] - (.Adobe Systems Inc. - AcroTray.) -- C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe [623992] [PID.6032]
[MD5.4D83DC461F8F4370274CF6E9AC9A34F4] - (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe [49208] [PID.5348]
[MD5.D63797E8E7781EE1500A810CB6194FA6] - (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816] [PID.6356]
[MD5.BAF535F843A3E790E04A7613811B55BC] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392] [PID.4640]
[MD5.07DACF8EE0581D188931E02CB7D50E1A] - (.Research In Motion Limited - Launch Agent Service.) -- C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe [443408] [PID.6520]
[MD5.145EA4A441D004D4360B5725C71E05DB] - (.Research In Motion Limited - BlackBerry Link Peer Manager.) -- C:\Program Files (x86)\Common Files\Research In Motion\Tunnel Manager\PeerManager.exe [4465152] [PID.6652]
[MD5.A78AAB0D2D70EF7DD56B7328AC502059] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe [3767096] [PID.7088]
[MD5.2E589FB6816C344F5D545BFA9BCD5F9C] - (...) -- C:\Program Files (x86)\Common Files\Research In Motion\nginx\nginx.exe [661008] [PID.7360]
[MD5.A2CB714DCF8F0E134F2429AF673C7C08] - (.Oracle Corporation - Java(TM) Update Checker.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe [506744] [PID.6444]
[MD5.06C2BB8F9089C3C091584F8AD5C1A01E] - (.Microsoft Corporation - Microsoft Outlook.) -- C:\Program Files (x86)\Microsoft Office\Office14\OUTLOOK.exe [16001192] [PID.5768]
[MD5.99E7D2BDB4F75A094AC73B7C98171C42] - (.Smart PC Solutions - PC Speed Maximizer Smart Scan.) -- C:\Program Files (x86)\PC Speed Maximizer\SPMSmartScan.exe [423536] [PID.6068] =>Rogue.PCSpeedMaximizer
[MD5.745900F7323339A6AFC0D1971FCC2A3C] - (.Dassault Systemes - CATIA.) -- C:\Program Files (x86)\Dassault Systemes\B18\intel_a\code\bin\CNEXT.exe [32256] [PID.7420]
[MD5.5640B4C10682FBC39C86C8C7A8392B5E] - (.Google Inc. - Google Chrome.) -- C:\Users\David\AppData\Local\Google\Chrome\Application\chrome.exe [866632] [PID.6092]
[MD5.723164BBE5AF1BAA2CDA6C097462C44B] - (.Sony Corporation - Media Gallery Update.) -- C:\Users\David\Downloads\EP0000262450.exe [352086416] [PID.7248]
[MD5.85328EC5C39B4959E1829EC82C6F7898] - (.Sony Corporation - Sony Packaging Manager.) -- C:\ProgramData\Sony Corporation\Sony Packaging Manager\PackagingTemp\{C5F64714-F577-4809-9F4F-2061E7B4F262}\UpdateModuleSetup.exe [752792] [PID.1232]
[MD5.48CACA200418DF0762CFAA91A29A533D] - (.Macrovision Corporation - Setup.exe.) -- C:\ProgramData\Sony Corporation\Sony Packaging Manager\PackagingTemp\{C5F64714-F577-4809-9F4F-2061E7B4F262}\setup.exe [380080] [PID.1232]
[MD5.516175BCB724F8501E7F8754C90ABB14] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [8336384] [PID.5144]
[MD5.432BE6CF7311062633459EEF6B242FB5] - (...) -- C:\Windows\System32\ [0] [PID.0]
[MD5.CC42F104172B4A62793083D380867317] - (.AVAST Software - avast! Service.) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344] [PID.1552]
[MD5.30E3850F303EAE5C364782EA78579CC9] - (.Apple Inc. - MobileDeviceService.) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [55624] [PID.1972]
[MD5.C75830957AC833C0526CBC1D2CF48500] - (.Dassault Systemes - System.) -- C:\Program Files (x86)\Dassault Systemes\B18\intel_a\code\bin\CATSysDemon.exe [36864] [PID.1084]
[MD5.3D23191672D83E90D1CF63927EE98136] - (.Intel Corporation - Local Manageability Service.) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [268824] [PID.1752]
[MD5.65085456FD9A74D7F1A999520C299ECB] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376] [PID.1060]
[MD5.E0D7732F2D2E24B2DB3F67B6750295B8] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512] [PID.2052]
[MD5.9D369CB06C1A9AD70245F9C408895715] - (...) -- C:\Program Files (x86)\Moldflow\Moldflow Job Manager\bin\mfjobman.exe [45056] [PID.2096]
[MD5.80E85394D8CD7F84340B1C6F4B9D698F] - (.Sony Corporation - Device Information Provider.) -- C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe [367456] [PID.2588]
[MD5.205E1B699FD3F2F9B036EEA2EC30C620] - (...) -- C:\Windows\SysWOW64\PnkBstrA.exe [76888] [PID.2732]
[MD5.9F7C5A522A8A279F66BB5F842AAE4F7A] - (.Apple Inc. - RIM MDNS Service.) -- C:\Program Files (x86)\Common Files\Research In Motion\Tunnel Manager\mDNSResponder.exe [389632] [PID.1236]
[MD5.388AE59FE75F1B959DFA0900923C61BB] - (.Skype Technologies S.A. - Skype C2C Service.) -- C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe [3064000] [PID.3052]
[MD5.7D67C07C63796775CC5492BCFEAFF125] - (.Microsoft Corporation - SQL Browser Service EXE.) -- C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe [267616] [PID.2712]
[MD5.63F6D08C54D5B3C1B12A6172032055C7] - (.ArcSoft, Inc. - MgiSvr.) -- C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [104960] [PID.2172]
[MD5.A60605FC66552B421EE1F3D4EBB9A4E0] - (.Sony Corporation - VAIO Event Service (Service Module).) -- C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe [217968] [PID.2940]
[MD5.A63DC5C2EA944E6657203E0C8EDEAF61] - (.Microsoft Corporation - COM Surrogate.) -- C:\Windows\SysWOW64\DllHost.exe [7168] [PID.1464]
[MD5.1D702FFC1B8CDCF76FBCA7740CE510D8] - (.Sony Corporation - VAIO Event Service (Service Sub Module).) -- C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe [120176] [PID.3784]
[MD5.505C1D595B129F7071FE8E2F59489137] - (.Research In Motion Limited - BlackBerry Link Communication Manager.) -- C:\Program Files (x86)\Common Files\Research In Motion\Tunnel Manager\tunmgr.exe [1304064] [PID.3364]
[MD5.6E984D17526995C8FA9B65FFCE324A63] - (.Research In Motion Limited - BlackBerry Device Manager.) -- C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\BbDevMgr.exe [585728] [PID.3296]
[MD5.31A0E93CDF29007D6C6FFFB632F375ED] - (.Intel Corporation - IAStorDataSvc.) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [13336] [PID.4780]
[MD5.11A559E0F10CC5E788984023DF400A6F] - (.Intel Corporation - User Notification Service.) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2320920] [PID.4996]
[MD5.ABEDFD48AC042C6AAAD32452E77217A1] - (.Acresso Software Inc. - Activation Licensing Service.) -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [867080] [PID.6552]
[MD5.D347D3ABE070AA09C22FC37121555D52] - (.Sony Corporation - VAIOCare.) -- C:\Program Files\Sony\VAIO Care\VCService.exe [44736] [PID.5736]
[MD5.A7F9DEF51266832A3D18B198923C2385] - (...) -- C:\Program Files (x86)\FindRight\updateFindRight.exe [80672] [PID.9080] =>Hijacker.FindrToolbar
[MD5.C350D9B371D28C551BC661F3BAF1A109] - (.Sony Corporation - VCM Intelligent Network Service Manager.) -- C:\Program Files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe [381488] [PID.9640]
[MD5.F9D722A62C881B59439F9FC27BC7E285] - (.Sony Corporation - VCM Intelligent Analyzing Manager.) -- C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe [549408] [PID.8252]
~ Processes Running: Scanned in 00mn 14s
---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Preferences
G1 - GCS: Preference [User Data\Default] http://start.mysearchdial.com =>Adware.MyWebSearch
G0 - GCSP: Preference [User Data\Default][HomePage] http://start.mysearchdial.com =>Adware.MyWebSearch
G2 - GCE: Preference [User Data\Default] [booedmolknjekdopkepjjeckmjkdpfgl] Managerr v.0.1 (Activé)
G2 - GCE: Preference [User Data\Default] [cnmdgidklhhnmppphpohildcefnaaflp] Services x86 v.1.26.156, (Désactivé) =>PUP.CrossRider
G2 - GCE: Preference [User Data\Default] [fapbbpdnlcmiolkdfjnnjhabmcndadad] Météo v.0.9.0.6 (Activé)
G2 - GCE: Preference [User Data\Default] [flpcjncodpafbgdpnkljologafpionhb] Managera v.0.1 (Activé)
G2 - GCE: Preference [User Data\Default] [hdfaehfdnipifmjdehgmpnhnfdhnfjgj] http://www.viadeo.com/profile/0029ct91ysofdyk v.2012.7.10.17589 (Activé)
G2 - GCE: Preference [User Data\Default] [kmbaalodpmjjhpobkgljnelbpblnikkp] BB10 / PlayBook App Manager v.2.2.1, (Activé)
G2 - GCE: Preference [User Data\Default] [nkeimhogjdpnpccoofpliimaahmaaome] Hangout Services v.1.0 (Activé)
G2 - GCE: Preference [User Data\Default] [pbpohikckhbcljgombipcdoinkaedlfa] Smart Display v.1.6 (Activé) =>Spyware.SmartDisplay
~ Google Browser: 27 Legitimates Filtered in 01mn 08s
---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://start.mysearchdial.com =>Adware.MyWebSearch
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://start.mysearchdial.com =>Adware.MyWebSearch
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://start.mysearchdial.com =>Adware.MyWebSearch
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs,Tabs = http://start.mysearchdial.com =>Adware.MyWebSearch
~ IE Browser: 19 Legitimates Filtered in 00mn 00s
---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local;<local>
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Proxy management: Scanned in 00mn 00s
---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
~ Keys: Scanned in 00mn 00s
---\\ Hosts file redirection (O1)
~ Le fichier hosts est sain (The hosts file is clean).
~ Hosts File: Scanned in 00mn 00s
~ Nombre de lignes (Lines number): 21
---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: FindRight [64Bits] - {2c774641-5504-46a8-b63f-6715ae3fe376} . (.FindRight - FindRight.) -- C:\Program Files (x86)\FindRight\FindRightbho.dll =>Hijacker.FindrToolbar
~ BHO: 15 Legitimates Filtered in 00mn 01s
---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar: avast! Online Security - [HKLM]{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} . (.AVAST Software - IE Webrep plugin.) -- C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{2318C2B1-4965-11D4-9B18-009027A5CD4F} Clé orpheline
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{47833539-D0C5-4125-9FA8-0819E2EAAC93} Clé orpheline
~ Toolbar: Scanned in 00mn 00s
---\\ Autres liens utilisateurs (O4)
O4 - GS\Desktop [Public]: CATIA V5R18.lnk . (.Dassault Systemes - Administration.) -- C:\Program Files (x86)\Dassault Systemes\B18\intel_a\code\bin\CATSTART.exe
O4 - GS\Desktop [Public]: Ciel Gestion commerciale.lnk . (.Sage activité Ciel - Ciel Gestion Commerciale.) -- C:\Program Files (x86)\Ciel\Gestion Commerciale\WGC.exe
O4 - GS\Desktop [Public]: HP Officejet Pro 8500 A910 Scan.lnk . (.Hewlett-Packard Co. - HPScan.) -- C:\Program Files (x86)\HP\HP Officejet Pro 8500 A910\bin\HPScan.exe =>.Hewlett-Packard Co
O4 - GS\Desktop [Public]: HP Officejet Pro 8500 A910.lnk . (...) -- C:\Program Files (x86)\HP\HP Officejet Pro 8500 A910\Bin\HP Officejet Pro 8500 A910.exe (.not file.) =>.Hewlett-Packard Co
O4 - GS\Desktop [Public]: MappyPlus.lnk . (...) -- C:\Windows\Installer\{478F482D-C30B-4876-A080-BE3916268682}\app_icon.ico
O4 - GS\Program [Public]: iGoogle.lnk . (...) -- C:\Program Files (x86)\Sony\MFU\iGoogle.exe (.not file.)
O4 - GS\QuickLaunch [David]: BitTorrent.lnk . (.BitTorrent Inc. - BitTorrent.) -- C:\Users\David\AppData\Roaming\BitTorrent\BitTorrent.exe =>P2P.BitTorrent
O4 - GS\QuickLaunch [David]: DeepBurner.lnk . (.Astonsoft - CD/DVD recording software.) -- C:\Program Files (x86)\Astonsoft\DeepBurner\DeepBurner.exe
O4 - GS\QuickLaunch [David]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - GS\TaskBar [David]: CATIA.lnk . (.Dassault Systemes - CATIA.) -- C:\Program Files (x86)\Dassault Systemes\B18\intel_a\code\bin\CNEXT.exe
O4 - GS\TaskBar [David]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Users\David\AppData\Local\Google\Chrome\Application\chrome.exe
O4 - GS\TaskBar [David]: Lanceur d'applications Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Users\David\AppData\Local\Google\Chrome\Application\chrome.exe
O4 - GS\SystemTools [David]: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - GS\SendTo [David]: IsoBuster.lnk . (.Smart Projects - The Ultimate CD/DVD/BD Recovery tool.) -- C:\Program Files (x86)\Smart Projects\IsoBuster\IsoBuster.exe
O4 - GS\Desktop [David]: AnglaisFacile.com-Barre Verbes Irréguliers.lnk . (.AS - Learning the irregulars verbs.) -- C:\Program Files (x86)\AnglaisFacile.com\Barre Verbes Irréguliers\irreg.exe
O4 - GS\Desktop [David]: DeepBurner.lnk . (.Astonsoft - CD/DVD recording software.) -- C:\Program Files (x86)\Astonsoft\DeepBurner\DeepBurner.exe
O4 - GS\Desktop [David]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Users\David\AppData\Local\Google\Chrome\Application\chrome.exe
O4 - GS\Desktop [David]: KeyShot Resources.lnk . (...) -- C:\Users\David\Documents\KeyShot
O4 - GS\Desktop [David]: KeyShot2 64.lnk . (...) -- C:\Program Files (x86)\KeyShot2\bin\keyshot.exe (.not file.)
O4 - GS\Desktop [David]: Musique.lnk . (...) -- C:\Users\David\AppData\Roaming\Microsoft\Windows\Libraries\Music.library-ms
O4 - GS\Desktop [David]: Password Safe.lnk . (.SourceForge.net - Password Safe Application.) -- C:\Program Files (x86)\Password Safe\pwsafe.exe
O4 - GS\Desktop [David]: PC Speed Maximizer.lnk . (.Smart PC Solutions - PC Speed Maximizer.) -- C:\Program Files (x86)\PC Speed Maximizer\PCSpeedMaximizer.exe =>Rogue.PCSpeedMaximizer
~ Global Startup: 105 Legitimates Filtered in 00mn 19s
---\\ Applications lancées au démarrage du sytème (O4)
O4 - GS\Startup [Public]: Bluetooth.lnk . (...) -- C:\Program Files (x86)\WIDCOMM\Bluetooth Software\BTTray.exe (.not file.)
O4 - GS\Startup [David]: Dropbox.lnk . (.Dropbox, Inc. - Dropbox.) -- C:\Users\David\AppData\Roaming\Dropbox\bin\Dropbox.exe =>.Dropbox
O4 - GS\Startup [David]: fliptoast.lnk . (...) -- C:\Program Files (x86)\fliptoast\fliptoast.exe (.not file.)
O4 - GS\Startup [David]: MaxTV.lnk . (...) -- C:\Program Files (x86)\MaxTV\MaxTV4\maxtv.exe (.not file.)
O4 - GS\Startup [David]: Password Safe.lnk . (.SourceForge.net - Password Safe Application.) -- C:\Program Files (x86)\Password Safe\pwsafe.exe
O4 - HKLM\..\Run: [RtHDVCpl] . (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe =>.Realtek Semiconductor Corp
O4 - HKLM\..\Run: [RtHDVBg] . (.Realtek Semiconductor - HD Audio Background Process.) -- C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
O4 - HKLM\..\Run: [Apoint] C:\Program Files (x86)\Apoint\Apoint.exe (.not file.)
O4 - HKLM\..\Run: [AdobeAAMUpdater-1.0] . (.Adobe Systems Incorporated - Adobe Updater Startup Utility.) -- C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe =>.Adobe Systems Incorporated
O4 - HKLM\..\Run: [MSC] . (.Microsoft Corporation - Microsoft Security Client User Interface.) -- c:\Program Files\Microsoft Security Client\msseces.exe
O4 - HKCU\..\Run: [VRLPHelper] . (.Sony Corporation - VRLPHelper.) -- C:\Program Files (x86)\Sony\Media Gallery\VRLPHelper.exe
O4 - HKCU\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe =>.Microsoft Corporation
O4 - HKCU\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Users\David\AppData\Local\Google\Update\GoogleUpdate.exe =>.Google Inc
O4 - HKCU\..\Run: [OfficeSyncProcess] . (.Microsoft Corporation - Microsoft Office Document Cache.) -- C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.exe
O4 - HKCU\..\Run: [iCloudServices] . (.Apple Inc. - iCloud.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
O4 - HKCU\..\Run: [ApplePhotoStreams] . (.Apple Inc. - Apple Photostreams Uploader Executable.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
O4 - HKCU\..\Run: [com.apple.dav.bookmarks.daemon] C:\Program Files (x86)\Common Files\Apple\Internet Services\BookmarkDAV_client.exe (.not file.)
O4 - HKCU\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe =>.Skype Technologies S.A.
O4 - HKCU\..\Run: [SkyDrive] . (.Microsoft Corporation - Microsoft SkyDrive.) -- C:\Users\David\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe =>.Microsoft Corporation
O4 - HKCU\..\Run: [AppleIEDAV] . (.Apple Inc. - Apple IE DAV.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\AppleIEDAV.exe
O4 - HKCU\..\Run: [GoogleChromeAutoLaunch_9A83AADA066CCEA6F8C613E0AB5C7E19] . (.Google Inc. - Google Chrome.) -- C:\Users\David\AppData\Local\Google\Chrome\Application\chrome.exe
O4 - HKCU\..\Run: [KiesPreload] C:\Program Files (x86)\Samsung\Kies\Kies.exe (.not file.)
O4 - HKCU\..\Run: [PC Speed Maximizer] . (.Smart PC Solutions - Fix PC problems and optimize performance.) -- C:\Program Files (x86)\PC Speed Maximizer\SPMLauncher.exe =>Rogue.PCSpeedMaximizer
O4 - HKLM\..\Wow6432Node\Run: [IAStorIcon] . (.Intel Corporation - IAStorIcon.) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
O4 - HKLM\..\Wow6432Node\Run: [ISBMgr.exe] . (.Sony Corporation - Pas de description.) -- C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe
O4 - HKLM\..\Wow6432Node\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe
O4 - HKLM\..\Wow6432Node\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe =>.Adobe Systems Incorporated
O4 - HKLM\..\Wow6432Node\Run: [PMBVolumeWatcher] . (.Sony Corporation - Media Check Tool.) -- C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe
O4 - HKLM\..\Wow6432Node\Run: [SHTtray.exe] . (.Sony Corporation - SHTtray.) -- C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SHTtray.exe
O4 - HKLM\..\Wow6432Node\Run: [Acrobat Assistant 8.0] . (.Adobe Systems Inc. - AcroTray.) -- C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe
O4 - HKLM\..\Wow6432Node\Run: [Adobe_ID0EYTHM] . (.Adobe Systems Incorporated - Adobe Version Cue CS3.) -- C:\Program Files (x86)\Common Files\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3Tray.exe =>.Adobe Systems Incorporated
O4 - HKLM\..\Wow6432Node\Run: [HP Software Update] . (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe =>.Hewlett-Packard Co
O4 - HKLM\..\Wow6432Node\Run: [ROC_roc_dec12] C:\Program Files (x86)\AVG Secure Search\ROC_roc_dec12.exe (.not file.) =>Toolbar.AVGSearch
O4 - HKLM\..\Wow6432Node\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
O4 - HKLM\..\Wow6432Node\Run: [ROC_ROC_JULY_P1] C:\Program Files (x86)\AVG Secure Search\ROC_ROC_JULY_P1.exe (.not file.) =>Toolbar.AVGSearch
O4 - HKLM\..\Wow6432Node\Run: [ROC_ROC_NT] C:\Program Files (x86)\AVG Secure Search\ROC_ROC_NT.exe (.not file.) =>Toolbar.AVGSearch
O4 - HKLM\..\Wow6432Node\Run: [StartCCC] . (.Advanced Micro Devices, Inc. - Catalyst® Control Center Launcher.) -- C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe =>.Advanced Micro Devices, Inc
O4 - HKLM\..\Wow6432Node\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe =>.Oracle Corporation
O4 - HKLM\..\Wow6432Node\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files (x86)\QuickTime\QTTask.exe
O4 - HKLM\..\Wow6432Node\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe
O4 - HKLM\..\Wow6432Node\Run: [20131121] C:\Program Files\AVAST Software\Avast\setup\emupdate\0666b597-30e8-4d51-bb01-ed482354fac9.exe (.not file.)
O4 - HKLM\..\Wow6432Node\Run: [BCSSync] . (.Microsoft Corporation - Microsoft Office 2010 component.) -- C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe =>.Microsoft Corporation
O4 - HKLM\..\Wow6432Node\Run: [RIMBBLaunchAgent.exe] . (.Research In Motion Limited - Launch Agent Service.) -- C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe
O4 - HKLM\..\Wow6432Node\Run: [RIM PeerManager] . (.Research In Motion Limited - BlackBerry Link Peer Manager.) -- C:\Program Files (x86)\Common Files\Research In Motion\Tunnel Manager\PeerManager.exe
O4 - HKLM\..\Wow6432Node\Run: [AvastUI.exe] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
O4 - HKLM\..\Wow6432Node\RunOnce: [InstallShieldSetup] . (.Macrovision Corporation - Setup.exe.) -- C:\Program Files (x86)\InstallShield Installation Information\{DD696AF7-8A89-41D5-976A-2053E41A69BE}\setup.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-21-989871973-3194986984-399432074-1001\..\Run: [VRLPHelper] . (.Sony Corporation - VRLPHelper.) -- C:\Program Files (x86)\Sony\Media Gallery\VRLPHelper.exe
O4 - HKUS\S-1-5-21-989871973-3194986984-399432074-1001\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-21-989871973-3194986984-399432074-1001\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Users\David\AppData\Local\Google\Update\GoogleUpdate.exe =>.Google Inc
O4 - HKUS\S-1-5-21-989871973-3194986984-399432074-1001\..\Run: [OfficeSyncProcess] . (.Microsoft Corporation - Microsoft Office Document Cache.) -- C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.exe
O4 - HKUS\S-1-5-21-989871973-3194986984-399432074-1001\..\Run: [iCloudServices] . (.Apple Inc. - iCloud.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
O4 - HKUS\S-1-5-21-989871973-3194986984-399432074-1001\..\Run: [ApplePhotoStreams] . (.Apple Inc. - Apple Photostreams Uploader Executable.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
O4 - HKUS\S-1-5-21-989871973-3194986984-399432074-1001\..\Run: [com.apple.dav.bookmarks.daemon] C:\Program Files (x86)\Common Files\Apple\Internet Services\BookmarkDAV_client.exe (.not file.)
O4 - HKUS\S-1-5-21-989871973-3194986984-399432074-1001\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe =>.Skype Technologies S.A.
O4 - HKUS\S-1-5-21-989871973-3194986984-399432074-1001\..\Run: [SkyDrive] . (.Microsoft Corporation - Microsoft SkyDrive.) -- C:\Users\David\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-21-989871973-3194986984-399432074-1001\..\Run: [AppleIEDAV] . (.Apple Inc. - Apple IE DAV.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\AppleIEDAV.exe
O4 - HKUS\S-1-5-21-989871973-3194986984-399432074-1001\..\Run: [GoogleChromeAutoLaunch_9A83AADA066CCEA6F8C613E0AB5C7E19] . (.Google Inc. - Google Chrome.) -- C:\Users\David\AppData\Local\Google\Chrome\Application\chrome.exe
O4 - HKUS\S-1-5-21-989871973-3194986984-399432074-1001\..\Run: [KiesPreload] C:\Program Files (x86)\Samsung\Kies\Kies.exe (.not file.)
O4 - HKUS\S-1-5-21-989871973-3194986984-399432074-1001\..\Run: [PC Speed Maximizer] . (.Smart PC Solutions - Fix PC problems and optimize performance.) -- C:\Program Files (x86)\PC Speed Maximizer\SPMLauncher.exe =>Rogue.PCSpeedMaximizer
~ Application: Scanned in 00mn 01s
---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: &Envoyer à OneNote [64Bits] - {2670000A-7350-4f3c-8081-5663EE0C6C49} -- C:\Program Files (x86)\MICROS~2\Office14\ONBttnIE.dll (.not file.)
O9 - Extra button: Notes &liées OneNote [64Bits] - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} -- C:\Program Files (x86)\MICROS~2\Office14\ONBTTN~1.dll (.not file.)
O9 - Extra button: Skype Click to Call [64Bits] - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} . (...) -- c:\program files (x86)\skype\toolbars\internet explorer x64\icon.ico
~ IE Extra Buttons: Scanned in 00mn 00s
---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{1193553A-5DFA-429C-9E1E-5E28C07DD99E}: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CCS\Services\Tcpip\..\{67E30E43-3A92-4700-9855-685B436DE167}: DhcpNameServer = 172.20.10.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{9380F1F1-2D9E-4661-B3FC-D53ED4FE0E00}: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CCS\Services\Tcpip\..\{1193553A-5DFA-429C-9E1E-5E28C07DD99E}: DhcpDomain = lan
O17 - HKLM\System\CCS\Services\Tcpip\..\{9380F1F1-2D9E-4661-B3FC-D53ED4FE0E00}: DhcpDomain = lan
O17 - HKLM\System\CS1\Services\Tcpip\..\{1193553A-5DFA-429C-9E1E-5E28C07DD99E}: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CS1\Services\Tcpip\..\{67E30E43-3A92-4700-9855-685B436DE167}: DhcpNameServer = 172.20.10.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{9380F1F1-2D9E-4661-B3FC-D53ED4FE0E00}: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CS1\Services\Tcpip\..\{1193553A-5DFA-429C-9E1E-5E28C07DD99E}: DhcpDomain = lan
O17 - HKLM\System\CS1\Services\Tcpip\..\{9380F1F1-2D9E-4661-B3FC-D53ED4FE0E00}: DhcpDomain = lan
O17 - HKLM\System\CS2\Services\Tcpip\..\{1193553A-5DFA-429C-9E1E-5E28C07DD99E}: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CS2\Services\Tcpip\..\{67E30E43-3A92-4700-9855-685B436DE167}: DhcpNameServer = 172.20.10.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{9380F1F1-2D9E-4661-B3FC-D53ED4FE0E00}: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CS2\Services\Tcpip\..\{1193553A-5DFA-429C-9E1E-5E28C07DD99E}: DhcpDomain = lan
O17 - HKLM\System\CS2\Services\Tcpip\..\{9380F1F1-2D9E-4661-B3FC-D53ED4FE0E00}: DhcpDomain = lan
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254
~ Domain: Scanned in 00mn 00s
---\\ Protocole additionnel (O18)
O18 - Handler: wlpg [64Bits] - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (...) --
O18 - Filter: text/xml [64Bits] - {807573E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.dll =>.Microsoft Corporation
~ Protocole Additionnel: Scanned in 00mn 00s
---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\Windows\System32\igfxdev.dll
~ Winlogon: Scanned in 00mn 00s
---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: KMService (KMService) . (...) - C:\Windows\SysWOW64\srvany.exe =>Hijacker.Office
O23 - Service: Moldflow Job Manager (mfjobman) . (...) - C:\Program Files (x86)\Moldflow\Moldflow Job Manager\bin\mfjobman.exe
O23 - Service: Moldflow License Manager (MoldflowLM) . (...) - C:\Windows\system32\mf_lmd.exe (.not file.)
O23 - Service: NetAccess Service (NA_Service) . (.Pas de propriétaire - NetAcces Application.) - C:\Windows\system32\NA_Service.exe
O23 - Service: Update FindRight (Update FindRight) . (...) - C:\Program Files (x86)\FindRight\updateFindRight.exe =>Hijacker.FindrToolbar
O23 - Service: Usb PLC (UsbConnect) . (.Schneider Electric Industries SAS - USB PLC NT Service.) - C:\Windows\system32\UsbConnect.exe
O23 - Service: VSNService (VSNService) . (.Sony Corporation - VAIO Smart Network Service.) - C:\Program Files\Sony\VAIO Smart Network\VSNService.exe
~ Services: 33 Legitimates Filtered in 00mn 27s
---\\ Tâches planifiées en automatique (O39)
[MD5.00000000000000000000000000000000] [APT] [{1160733A-09AD-42BE-B87F-E09150555269}] (...) -- C:\Program Files (x86)\Perfect World Entertainment\Arc\ArcLauncher.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{29CCC77C-0FC0-4D54-BF52-D1B02776A6FE}] (...) -- C:\Users\David\Desktop\W9Setup.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{6CC23B11-6B4A-40E8-963B-796FDA59B93F}] (...) -- C:\Users\David\Desktop\Unity_Pro_XL_V6.0 - Copy\UnityPro_V60_HF_20048554.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{708EE5D5-7DA1-4F15-AEB0-936568F8E0BA}] (...) -- C:\Users\David\Desktop\chrome_installer.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{7AB23764-4B84-48BE-9B95-F20AF6224AFC}] (...) -- C:\Program Files (x86)\Perfect World Entertainment\Arc\ArcLauncher.exe (.not file.) [0]
~ Scheduled Task: 34 Legitimates Filtered in 00mn 11s
---\\ Logiciels installés (O42)
O42 - Logiciel: DriverManager x64 - (.Schneider Electric.) [HKLM][64Bits] -- {4201BA84-EC1B-4B75-A1EF-E77D3E958465}
O42 - Logiciel: FindRight - (.FindRight.) [HKLM][64Bits] -- FindRight =>Hijacker.FindrToolbar
O42 - Logiciel: KeyShot2 2.1 64 bit - (.Luxion ApS.) [HKLM][64Bits] -- KeyShot2_64
O42 - Logiciel: PCSpeedUp - (.www.pcspeedup.com.) [HKCU][64Bits] -- 3799448215.www.pcspeedup.com
O42 - Logiciel: PLCUsb Driver X64 - (.Schneider Electric.) [HKLM][64Bits] -- {771C6F2F-BCE2-4773-BA33-21B31B14F57B}
O42 - Logiciel: PSx Ethernet RIO DTM - (.Schneider Electric.) [HKLM][64Bits] -- {AB0A115F-D117-48BF-B18A-CA123F997FFE}
O42 - Logiciel: PokerStars.fr - (.PokerStars.fr.) [HKLM][64Bits] -- PokerStars.fr
O42 - Logiciel: Unity Pro Ethernet Configuration Tool - (.Schneider Electric.) [HKLM][64Bits] -- {1D672516-8C55-4914-BD5D-505C13E17317}
~ Logic: 31 Legitimates Filtered in 00mn 02s
---\\ HKCU & HKLM Software Keys
[HKCU\Software\46b555f6]
[HKCU\Software\FindRight] =>Hijacker.FindrToolbar
[HKCU\Software\InstallCore] =>Adware.InstallCore
[HKCU\Software\Luxion]
[HKLM\Software\Luxion]
[HKLM\Software\Wow6432Node\FDT]
[HKLM\Software\Wow6432Node\FH]
[HKLM\Software\Wow6432Node\FT]
[HKLM\Software\Wow6432Node\FindRight] =>Hijacker.FindrToolbar
[HKLM\Software\Wow6432Node\KA]
[HKLM\Software\Wow6432Node\Luxion]
[HKLM\Software\Wow6432Node\US]
[HKLM\Software\Wow6432Node\Viacom]
[HKLM\Software\Wow6432Node\WM]
~ Key Software: 504 Legitimates Filtered in 00mn 02s
---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 26/03/2011 - 16:13:00 - [0,001] ----D C:\Program Files (x86)\Bunkspeed
O43 - CFD: 14/02/2014 - 15:24:21 - [2,103] ----D C:\Program Files (x86)\FindRight =>Hijacker.FindrToolbar
O43 - CFD: 26/04/2011 - 12:51:23 - [0] ----D C:\Program Files (x86)\Max2k
O43 - CFD: 03/12/2013 - 10:32:32 - [0,758] ----D C:\Program Files (x86)\NetScript
O43 - CFD: 21/08/2013 - 15:27:46 - [0] ----D C:\Program Files (x86)\PokerStars.FR
O43 - CFD: 26/03/2011 - 16:13:00 - [142,257] ----D C:\ProgramData\Bunkspeed
O43 - CFD: 05/11/2012 - 13:18:07 - [2,588] ----D C:\ProgramData\InstallMate =>PUP.Tarma
O43 - CFD: 28/10/2011 - 12:29:15 - [0] --H-D C:\Users\David\AppData\Roaming\FDBTemp
O43 - CFD: 31/01/2014 - 11:50:55 - [0] ----D C:\Users\David\AppData\Roaming\Mediatronic
O43 - CFD: 14/02/2014 - 15:22:07 - [0,073] ----D C:\Users\David\AppData\Roaming\mysearchdial =>Adware.MyWebSearch
O43 - CFD: 24/02/2013 - 16:10:45 - [1,569] ----D C:\Users\David\AppData\Roaming\wam.04351C371E530C3762CBA45FA283ED972DCDEFB6.1
O43 - CFD: 25/04/2012 - 10:50:06 - [0,002] -SH-D C:\Users\David\AppData\Local\46b555f6
O43 - CFD: 26/10/2011 - 14:01:39 - [33,915] ----D C:\Users\David\AppData\Local\Installer5752
O43 - CFD: 16/11/2011 - 09:59:38 - [0] ----D C:\Users\David\AppData\Local\Luxion
O43 - CFD: 21/08/2013 - 15:27:26 - [0] ----D C:\Users\David\AppData\Local\PokerStars.FR
O43 - CFD: 16/11/2011 - 09:50:57 - [0,006] ----D C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\KeyShot2 64
~ 16 Dossiers CLSID vides (CLSID Empty Folders)
~ Program Folder: 319 Legitimates Filtered in 04mn 03s
---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.6D34046C521212C36D21AD7EFB9AA8C7] - 14/02/2014 - 11:57:02 ---A- . (...) -- C:\Windows\win.ini [1341]
O44 - LFC:[MD5.2F21934CECB2D7F0E99D74F45125118F] - 14/02/2014 - 13:57:04 ---A- . (...) -- C:\Windows\System32\NetAccessLog.txt [83922]
O44 - LFC:[MD5.7F418C89A6903688B3B8F8C080DC9F64] - 14/02/2014 - 15:50:27 --HA- . (...) -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [19760]
O44 - LFC:[MD5.7F418C89A6903688B3B8F8C080DC9F64] - 14/02/2014 - 15:50:27 --HA- . (...) -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [19760]
O44 - LFC:[MD5.03ECE7D85D27724EDABD9CEF2A93174F] - 31/01/2014 - 13:17:26 ---A- . (...) -- C:\test.xml [26036]
~ Files: 33 Legitimates Filtered in 00mn 54s
---\\ Opérations et fonctions au démarrage de Windows Explorer (O46)
O46 - SEH:ShellExecuteHooks - Groove GFS Stub Execution Hook [64Bits] - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
~ ShellExecuteHooks: Scanned in 00mn 00s
---\\ Clé de registre Shell MountPoints2 (MPKS) (O51)
O51 - MPSK:{33ec1cde-511d-11e3-8097-c0cb38fe84e4}\AutoRun\command. (...) -- C:\Windows\system32\E:\start.exe (.not file.)
~ Keys: Scanned in 00mn 00s
---\\ Enumération des clés de registre PoliciesSystem (MWPS) (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
~ MWPS: 16 Legitimates Filtered in 00mn 00s
---\\ Enumération des clés de registre PoliciesExplorer (MWPE) (O56)
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1
~ MWPE Keys: 3 Legitimates Filtered in 00mn 00s
---\\ Liste des pilotes du système (SDL) (O58)
O58 - SDL:[MD5.C04F7B373881009D7994D9BF55D24AB4] - 04/02/2014 - 14:39:01 ---A- . (...) -- C:\Windows\System32\Drivers\aswRvrt.sys [65776]
O58 - SDL:[MD5.90399625F341AB76BA4B85A5E860EB1F] - 04/02/2014 - 14:39:01 ---A- . (...) -- C:\Windows\System32\Drivers\aswVmm.sys [207904]
O58 - SDL:[MD5.0E5DA5369A0FCAEA12456DD852545184] - 14/07/2009 - 02:47:48 ---A- . (.Emulex - Storport Miniport Driver for LightPulse HBAs.) -- C:\Windows\System32\Drivers\elxstor.sys [530496]
O58 - SDL:[MD5.F2523EF6460FC42405B12248338AB2F0] - 10/06/2009 - 21:31:59 ---A- . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for eHome.) -- C:\Windows\System32\Drivers\hcw85cir.sys [31232]
O58 - SDL:[MD5.4F39094BAFB40E0C5AA5D7217DE09835] - 18/01/2010 - 10:17:26 ---A- . (.Schneider Electric Industries SAS - PlcUsb driver.) -- C:\Windows\System32\Drivers\PlcUsb.sys [192680]
O58 - SDL:[MD5.FA6ABC06B629DA29634D31F1FE0347BD] - 23/06/2010 - 21:02:59 ---A- . (.REDC - RICOH MS Driver.) -- C:\Windows\System32\Drivers\rimssne64.sys [94208]
O58 - SDL:[MD5.8F8539A7F5C117D4407B2985995671F2] - 23/06/2010 - 21:03:07 ---A- . (.REDC - RICOH PCIe SD/MMC Driver.) -- C:\Windows\System32\Drivers\risdsne64.sys [78848]
O58 - SDL:[MD5.955FFE2B1D74A9E0E3E0E558E6A17F3B] - 28/10/2013 - 01:12:10 ---A- . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG USB Composite Device Driver (MSS Ver.3).) -- C:\Windows\System32\Drivers\ssudbus.sys [107288]
O58 - SDL:[MD5.BB94A5E2CEE5FD83BA5A72A37AECADDF] - 28/10/2013 - 01:12:12 ---A- . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG Android Modem Device Driver (MSS Ver.3).) -- C:\Windows\System32\Drivers\ssudmdm.sys [204568]
O58 - SDL:[MD5.F3817967ED533D08327DC73BC4D5542A] - 14/07/2009 - 02:45:55 ---A- . (.Promise Technology - Promise SuperTrak EX Series Driver for Windows.) -- C:\Windows\System32\Drivers\stexstor.sys [24656]
O58 - SDL:[MD5.C9E9D59C0099A9FF51697E9306A44240] - 13/12/2012 - 13:50:36 ---A- . (.Apple, Inc. - Apple Mobile Device USB Driver.) -- C:\Windows\System32\Drivers\usbaapl64.sys [54784]
~ Drivers: 16 Legitimates Filtered in 00mn 07s
---\\ Liste des outils de désinfection (LATC) (O63)
O63 - Logiciel: ZHPDiag 2014 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 =>.Nicolas Coolman
~ ADS: Scanned in 00mn 00s
---\\ Menu de démarrage Internet (SMI) (O68)
O68 - StartMenuInternet: <Google Chrome.5OEN67BY4NY6HB7N4F4SSLBEYY> <Google Chrome>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Users\David\AppData\Local\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
~ Keys: Scanned in 00mn 00s
---\\ Recherche d'infection sur les navigateurs internet (SBI) (O69)
O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} - (Google) - https://www.google.com/?gws_rd=ssl
O69 - SBI: SearchScopes [HKCU] {77AA745B-F4F8-45DA-9B14-61D2D95054C8} [DefaultScope] - (Mysearchdial) - http://start.mysearchdial.com =>Adware.MyWebSearch
~ Keys: Scanned in 00mn 00s
---\\ Recherche particulière à la racine du système (SPRF) (O84)
[MD5.EFD61475490EC9F220A1716BE271C001] [SPRF][19/04/2011] (...) -- C:\ProgramData\ezsidmv.dat [56]
~ Files: 6 Legitimates Filtered in 00mn 00s
---\\ Liste des exceptions du parefeu (FirewallRules) (O87)
O87 - FAEL: "{5D22ED06-94C5-43B8-9775-FF55B4B6EC99}" |In - Domain - P6 - TRUE | .(...) -- C:\PVSW\Bin\w3dbsmgr.exe (.not file.)
O87 - FAEL: "{0ED6DC5C-BE12-4A27-A591-C0E15CE57B0A}" |In - Domain - P17 - TRUE | .(...) -- C:\PVSW\Bin\w3dbsmgr.exe (.not file.)
O87 - FAEL: "{97456A69-E023-45B4-A8DC-A2DD2CF4BAAE}" |In - Private - P6 - TRUE | .(...) -- C:\PVSW\Bin\w3dbsmgr.exe (.not file.)
O87 - FAEL: "{50ADD074-2E73-4FA4-95F1-37721C523EE9}" |In - Private - P17 - TRUE | .(...) -- C:\PVSW\Bin\w3dbsmgr.exe (.not file.)
O87 - FAEL: "{F31747DD-141D-4C0A-ABBD-C811B9F9AE3E}" |In - Private - P6 - TRUE | .(...) -- C:\Program Files (x86)\Easy Downloads\easydownloads.exe (.not file.)
O87 - FAEL: "{D55F26E1-03C5-4B4A-8575-859086FF16A4}" |In - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\Easy Downloads\easydownloads.exe (.not file.)
O87 - FAEL: "{E1E39015-8B15-4605-A979-018638094FDC}" |In - Private - P6 - TRUE | .(...) -- C:\Program Files (x86)\Easy Downloads\easydl.exe (.not file.)
O87 - FAEL: "{A2B829C4-BCB0-4D22-B65E-AFA1A99E5002}" |In - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\Easy Downloads\easydl.exe (.not file.)
O87 - FAEL: "TCP Query User{4AF2B2D1-A286-4173-8172-4082C981A90F}C:\program files (x86)\moldflow\moldflow plastics insight 2.0\bin\mdsiae.exe" |In - Private - P6 - TRUE | .(...) -- C:\program files (x86)\moldflow\moldflow plastics insight 2.0\bin\mdsiae.exe (.not file.)
O87 - FAEL: "UDP Query User{5FC477BD-51F3-48C3-8B75-3E9CB5A4EBAC}C:\program files (x86)\moldflow\moldflow plastics insight 2.0\bin\mdsiae.exe" |In - Private - P17 - TRUE | .(...) -- C:\program files (x86)\moldflow\moldflow plastics insight 2.0\bin\mdsiae.exe (.not file.)
O87 - FAEL: "TCP Query User{94E9BEEE-9C3C-45E4-A73A-F56C9DD6C86B}C:\program files (x86)\leawo\video converter ultimate\loadingscreen.exe" |In - Private - P6 - TRUE | .(...) -- C:\program files (x86)\leawo\video converter ultimate\loadingscreen.exe (.not file.)
O87 - FAEL: "UDP Query User{EEB417D9-AAB1-4272-9A39-428BFA919DD4}C:\program files (x86)\leawo\video converter ultimate\loadingscreen.exe" |In - Private - P17 - TRUE | .(...) -- C:\program files (x86)\leawo\video converter ultimate\loadingscreen.exe (.not file.)
~ Firewall: 306 Legitimates Filtered in 00mn 03s
---\\ Enumère les codes produits des logiciels (PUC) (O90)
O90 - PUC: "48AB1024B1CE57B41AFE7ED7E3594856" . (.DriverManager x64.) -- C:\Windows\Installer\{4201BA84-EC1B-4B75-A1EF-E77D3E958465}\ARPPRODUCTICON.exe
O90 - PUC: "F511A0BA711DFB841BA8AC21F399F7EF" . (.PSx Ethernet RIO DTM.) -- C:\Windows\Installer\{AB0A115F-D117-48BF-B18A-CA123F997FFE}\ARPProductIcon.ico
~ Update Products: 257 Legitimates Filtered in 00mn 00s
---\\ Enumère les données de la clé NameSpace (MNS) (O92)
O92 - MNS: Photos iCloud - {F0D63F85-37EC-4097-B30D-61B4A8917118}
~ MNS: 1 Legitimates Filtered in 00mn 00s
---\\ Recherche des packages WindowsInstaller (WIS) (O93) (NTFS)
[MD5.FF6C583A206448609A37532980051DBC] [WIS][29/11/2013] (.BlackBerry Ltd. - Blank Project Template.) -- C:\Windows\Installer\1b032138.msi [59089408]
[MD5.3E765C9DA387C8C8C067266C3AE3FB9B] [WIS][24/10/2012] (.Skype Technologies S.A. - Skype Click to Call.) -- C:\Windows\Installer\2319136c.msi [10137600]
[MD5.83B949FFAC71B6EF36E615C56E398547] [WIS][01/08/2012] (.Schneider Electric - %.) -- C:\Windows\Installer\4b9e51.msi [32039664]
[MD5.F0596C90DE6FC3A233394737C1DDCC92] [WIS][01/08/2012] (.Schneider Electric - %.) -- C:\Windows\Installer\4b9e57.msi [31733996]
[MD5.EDD8FDE62417A3BE0F5A8F6796DA830F] [WIS][01/08/2012] (.Schneider Electric - Driver Manager x64.) -- C:\Windows\Installer\4b9e6a.msi [8777728]
[MD5.9F93809E457D72EB7751900561F09BB5] [WIS][01/08/2012] (.Schneider Electric - PLC Usb Driver X64.) -- C:\Windows\Installer\4b9e79.msi [1551872]
[MD5.5807A6A79EBF57203BA6FD68E93A676C] [WIS][07/04/2010] (.Adobe - Blank Project Template.) -- C:\Windows\Installer\64660.msi [12719104]
~ WIS: 261 Legitimates Filtered in 01mn 22s
---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)
SS - | Demand 18/03/2010 113152 | (ACDaemon) . (.ArcSoft Inc..) - C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
SS - | Demand 20/03/2007 153792 | (Adobe Version Cue CS3) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exe =>.Adobe Systems Incorporated
SS - | Demand 05/02/2014 257928 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
SS - | Demand 27/03/2011 85096 | (Autodesk Licensing Service) . (.Autodesk.) - C:\Program Files (x86)\Common Files\Autodesk Shared\Service\AdskScSrv.exe
SS - | Auto 03/07/2012 116648 | (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
SS - | Demand 03/07/2012 116648 | (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
SS - | Auto 10/07/1658 0 | (KMService) . (...) - C:\Windows\system32\srvany.exe =>Hijacker.Office
SS - | Auto 10/07/1658 0 | (MoldflowLM) . (...) - C:\Windows\system32\mf_lmd.exe
SS - | Demand 29/12/2011 17848 | (OverwolfUpdaterService) . (.Overwolf Ltd.) - C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe
SS - | Auto 05/09/2013 171680 | (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe
SS - | Demand 03/11/2011 138392 | (SOHCImp) . (.Sony Corporation.) - C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe
SS - | Auto 18/06/2010 423280 | (SOHDms) . (.Sony Corporation.) - C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe
SS - | Demand 03/11/2011 74904 | (SOHDs) . (.Sony Corporation.) - C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe
SS - | Auto 24/10/2011 958112 | (VCFw) . (.Sony Corporation.) - C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe
SS - | Demand 26/08/2011 101600 | (VcmXmlIfHelper) . (.Sony Corporation.) - C:\Program Files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper64.exe
SS - | Demand 14/07/2009 27136 | C:\Program Files (x86)\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
SR - | Auto 08/10/2010 202752 | (AMD External Events Utility) . (.AMD.) - C:\Windows\System32\atiesrxx.exe
SR - | Auto 07/09/2013 55624 | (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
SR - | Auto 04/02/2014 50344 | (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
SR - | Auto 04/05/2007 36864 | (BBDemon) . (.Dassault Systemes.) - C:\Program Files (x86)\Dassault Systemes\B18\intel_a\code\bin\CATSysDemon.exe
SR - | Demand 09/09/2013 585728 | (BlackBerry Device Manager) . (.Research In Motion Limited.) - C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\BbDevMgr.exe
SR - | Auto 30/08/2011 462184 | (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe
SR - | Auto 08/06/2010 952096 | (btwdins) . (.Broadcom Corporation..) - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
SR - | Auto 05/03/2010 1425168 | (EvtEng) . (.Intel(R) Corporation.) - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
SR - | Demand 05/08/2010 867080 | (FLEXnet Licensing Service) . (.Acresso Software Inc..) - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
SR - | Auto 04/03/2010 13336 | (IAStorDataMgrSvc) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
SR - | Demand 02/11/2013 641352 | (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe
SR - | Auto 28/05/2010 268824 | (LMS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
SR - | Auto 04/04/2013 418376 | (MBAMScheduler) . (.Malwarebytes Corporation.) - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
SR - | Auto 04/04/2013 701512 | (MBAMService) . (.Malwarebytes Corporation.) - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
SR - | Auto 18/07/2000 45056 | (mfjobman) . (...) - C:\Program Files (x86)\Moldflow\Moldflow Job Manager\bin\mfjobman.exe
SR - | Auto 23/10/2013 23808 | (MsMpSvc) . (.Microsoft Corporation.) - c:\Program Files\Microsoft Security Client\MsMpEng.exe
SR - | Auto 08/04/2009 105472 | (NA_Service) . (...) - C:\Windows\system32\NA_Service.exe
SR - | Auto 01/06/2010 367456 | (PMBDeviceInfoProvider) . (.Sony Corporation.) - C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe
SR - | Auto 10/07/1658 0 | (PnkBstrA) . (...) - C:\Windows\system32\PnkBstrA.exe
SR - | Auto 05/03/2010 831760 | (RegSrvc) . (.Intel(R) Corporation.) - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
SR - | Auto 28/11/2013 389632 | (RIM MDNS) . (.Apple Inc..) - C:\Program Files (x86)\Common Files\Research In Motion\Tunnel Manager\mDNSResponder.exe
SR - | Auto 28/11/2013 1304064 | (RIM Tunnel Service) . (.Research In Motion Limited.) - C:\Program Files (x86)\Common Files\Research In Motion\Tunnel Manager\tunmgr.exe
SR - | Auto 02/10/2012 3064000 | (Skype C2C Service) . (.Skype Technologies S.A..) - C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
SR - | Demand 23/09/2011 289952 | (SpfService) . (.Sony Corporation.) - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService64.exe
SR - | Auto 18/09/2008 104960 | (uCamMonitor) . (.ArcSoft, Inc..) - C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe
SR - | Auto 28/05/2010 2320920 | (UNS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
SR - | Auto 13/02/2014 80672 | (Update FindRight) . (...) - C:\Program Files (x86)\FindRight\updateFindRight.exe =>Hijacker.FindrToolbar
SR - | Auto 18/01/2010 128512 | (UsbConnect) . (.Schneider Electric Industries SAS.) - C:\Windows\system32\UsbConnect.exe
SR - | Auto 31/05/2010 217968 | (VAIO Event Service) . (.Sony Corporation.) - C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe
SR - | Auto 21/06/2010 575856 | (VAIO Power Management) . (.Sony Corporation.) - C:\Program Files\Sony\VAIO Power Management\SPMService.exe
SR - | Auto 08/09/2011 549408 | (VcmIAlzMgr) . (.Sony Corporation.) - C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe
SR - | Auto 08/09/2011 381488 | (VcmINSMgr) . (.Sony Corporation.) - C:\Program Files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe
SR - | Demand 14/02/2011 44736 | (VCService) . (.Sony Corporation.) - C:\Program Files\Sony\VAIO Care\VCService.exe
SR - | Auto 08/06/2010 836608 | (VSNService) . (.Sony Corporation.) - C:\Program Files\Sony\VAIO Smart Network\VSNService.exe
SR - | Demand 26/10/2012 1286784 | (VUAgent) . (.Sony Corporation.) - C:\Program Files\Sony\VAIO Update\VUAgent.exe
SR - | Auto 10/07/1658 0 | (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe =>.Microsoft Corporation
SR - | Auto 14/07/2009 27136 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
~ Services: Scanned in 01mn 26s
---\\ Scan Additionnel (O88)
Database Version : 13031 - (12/02/2014)
Clés trouvées (Keys found) : 16
Valeurs trouvées (Values found) : 4
Dossiers trouvés (Folders found) : 6
Fichiers trouvés (Files found) : 4
[HKLM\Software\Google\Chrome\Extensions\cnmdgidklhhnmppphpohildcefnaaflp] =>PUP.CrossRider^
[HKLM\Software\Google\Chrome\Extensions\pbpohikckhbcljgombipcdoinkaedlfa] =>Spyware.SmartDisplay^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2C774641-5504-46A8-B63F-6715AE3FE376}] =>Hijacker
David37520
Messages postés
5
Date d'inscription
jeudi 13 février 2014
Statut
Membre
Dernière intervention
19 février 2014
19 févr. 2014 à 15:27
19 févr. 2014 à 15:27
bazfile
Messages postés
53572
Date d'inscription
samedi 29 décembre 2012
Statut
Modérateur, Contributeur sécurité
Dernière intervention
18 avril 2024
18 452
19 févr. 2014 à 21:54
19 févr. 2014 à 21:54
Bonsoir,
Ton rapport ZHPdiag n'est pas complet tu n'as pas suivi la procédure que je t'ai indiqué.
Le rapport montre que tu es infecté par des adwares et surtout par le crack d'office :
Les cracks sont à éviter comme la peste.
Ta version de Windows 7 est-elle officielle ou modifiée ? Je te dis ça car Windows 7 n'est pas à jour normalement tu devrais avoir le SP1.
Adobe Reader n'est pas à jour.
Java n'est pas à jour.
Ton rapport ZHPdiag n'est pas complet tu n'as pas suivi la procédure que je t'ai indiqué.
Le rapport montre que tu es infecté par des adwares et surtout par le crack d'office :
O23 - Service: KMService (KMService) . (...) - C:\Windows\SysWOW64\srvany.exe
Key Management Service client information : KO
Les cracks sont à éviter comme la peste.
Ta version de Windows 7 est-elle officielle ou modifiée ? Je te dis ça car Windows 7 n'est pas à jour normalement tu devrais avoir le SP1.
Adobe Reader n'est pas à jour.
Java n'est pas à jour.
