A voir également:
- Ordinateur vraiment lent
- Ordinateur lent que faire - Guide
- Réinitialiser ordinateur - Guide
- Mon mac est lent comment le nettoyer - Guide
- Comment réinitialiser un ordinateur verrouillé - Guide
- Qu'est ce qui se lance au démarrage de l'ordinateur - Guide
97 réponses
bonjour, je l'ai fais et ca mais je sais pas comment le diagnostiquer je connais pas ca, comment , je fait pour vous donner l'information
lilidurhone
Messages postés
43347
Date d'inscription
lundi 25 avril 2011
Statut
Contributeur sécurité
Dernière intervention
31 octobre 2024
3 807
25 févr. 2014 à 18:41
25 févr. 2014 à 18:41
Onglet Health et error scan
bonjour
je ne comprend pas se que vous voulez dire et comment je fais pour savoir si il y a une erreur
je ne comprend pas se que vous voulez dire et comment je fais pour savoir si il y a une erreur
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question
lilidurhone
Messages postés
43347
Date d'inscription
lundi 25 avril 2011
Statut
Contributeur sécurité
Dernière intervention
31 octobre 2024
3 807
25 févr. 2014 à 20:14
25 févr. 2014 à 20:14
Ok
Tu sais faire une vérification des erreurs du disque dur?
Tu sais faire une vérification des erreurs du disque dur?
oui , j avais fais scane mais la je refait error scane j'ai apuiyer sur scane ça fait lontemps que sa tourne :) le 1/4 de scané seulement j'attend la fin du scane si c est pas terminé avant que je parte pour le travail je recommencerai demain a mon réveil
lilidurhone
Messages postés
43347
Date d'inscription
lundi 25 avril 2011
Statut
Contributeur sécurité
Dernière intervention
31 octobre 2024
3 807
25 févr. 2014 à 20:33
25 févr. 2014 à 20:33
lilidurhone
Messages postés
43347
Date d'inscription
lundi 25 avril 2011
Statut
Contributeur sécurité
Dernière intervention
31 octobre 2024
3 807
25 févr. 2014 à 20:39
25 févr. 2014 à 20:39
Ton DD va bientôt lâcher!
c est ce que j'ai finalement comprix, je vais aller m en acheter un autre pour ne pas perdre ce que j'ai dessus pourtemp il n ai pas vieu mais bon :) j en ai aporteé un du travail hier tout a leur je vais l essayer pour etres sur que c est mon disque dure. ce que je ne comprenais pas c est que quand je suis sur mon pc tout va bien c est quand j ouvre une page web qui étais super lent. enfin merci bcp je te redonne des nouvelle quand j'aurais essayer le disque dure
merci infiniment de ton aide et l autre monsieur aussi
danielle
merci infiniment de ton aide et l autre monsieur aussi
danielle
bonjour
j ai installé un autre disque dure et c est encore plus lent. Alors ce n ai pas mon disque dure . ca n a pas l air d êtres mon power suply non plus . je ne voie pas se que ca peu etres
j ai installé un autre disque dure et c est encore plus lent. Alors ce n ai pas mon disque dure . ca n a pas l air d êtres mon power suply non plus . je ne voie pas se que ca peu etres
lilidurhone
Messages postés
43347
Date d'inscription
lundi 25 avril 2011
Statut
Contributeur sécurité
Dernière intervention
31 octobre 2024
3 807
25 févr. 2014 à 21:46
25 févr. 2014 à 21:46
Refais un zhpdiag
~ Rapport de ZHPDiag v2014.2.23.20 - Nicolas Coolman (2014-02-23)
~ Lancé par danielle (2014-02-26 01:18:33)
~ Adresse du Site Web http://nicolascoolman.webs.com
~ Forums gratuits d'Assistance à la désinfection : http://nicolascoolman.webs.com/apps/links/
~ Traduit par Nicolas Coolman
~ Etat de la version :
~ Liste blanche : Activée par le programme
~ Elévation des Privilèges : OK
~ User Account Control (UAC): Activate by user
---\\ Navigateurs Internet
MSIE: Internet Explorer v9.0.8112.16421 (Defaut)
---\\ Informations sur les produits Windows
~ Langage: Français
Windows 7 Professional, 32-bit Service Pack 1 (Build 7601)
Windows Server License Manager Script : OK
~ Windows(R) 7, VOLUME_MAK channel
Windows ID Activation : OK
~ Windows Partial Key : DRHM9
Windows License : OK
~ Windows Remaining Initializations Number : 3
Software Protection Service (Protection logicielle) : OK
Windows Automatic Updates : OK
Windows Activation Technologies : OK
---\\ Logiciels de protection du système
Avira Free Antivirus v14.0.2.286
Malwarebytes Anti-Malware version 1.75.0.1300
Windows Defender W7
---\\ Logiciels d'optimisation du système
CCleaner v4.10 =>Piriform Ltd
---\\ Logiciels de partage PeerToPeer
---\\ Surveillance de Logiciels
Adobe Flash Player 12 Plugin
Adobe Reader XI
Java 7 Update 51
---\\ Informations sur le système
~ Processor: x86 Family 6 Model 23 Stepping 6, GenuineIntel
~ Operating System: 32 Bits
Boot mode: Normal (Normal boot)
Total RAM: 2037 MB (64% free)
System Restore: Activé (Enable)
System drive C: has 93 GB (72%) free of 128 GB
---\\ Mode de connexion au système
~ Computer Name: DANIELLE-PC
~ User Name: danielle
~ All Users Names: HomeGroupUser$, danielle, Administrateur,
~ Unselected Option: O45,O61,O62,O65,O66,O80,O82,O89
Logged in as Administrator
---\\ Variables d'environnement
~ System Unit : C:\
~ %AppZHP% : C:\Users\danielle\AppData\Roaming\ZHP\
~ %AppData% : C:\Users\danielle\AppData\Roaming\
~ %Desktop% : C:\Users\danielle\Desktop\
~ %Favorites% : C:\Users\danielle\Favorites\
~ %LocalAppData% : C:\Users\danielle\AppData\Local\
~ %StartMenu% : C:\Users\danielle\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\
---\\ Enumération des unités disques
A: Floppy drive, Flash card reader, USB Key (Not Inserted)
C: Hard drive, Flash drive, Thumb drive (Free 93 Go of 128 Go)
D: CD-ROM drive (Not Inserted)
E: Hard drive, Flash drive, Thumb drive (Free 1241 Go of 1735 Go)
---\\ Etat du Centre de Sécurité Windows
~ Security Center: 38 Legitimates Filtered in 00mn 00s
---\\ Recherche particulière de fichiers génériques
[MD5.8B88EBBB05A0E56B7DCC708498C02B3E] - (.Microsoft Corporation - Explorateur Windows.) (.2011-02-25 - 00:30:54.) -- C:\Windows\Explorer.exe [2616320]
[MD5.B5C5DCAD3899512020D135600129D665] - (.Microsoft Corporation - Application de démarrage de Windows.) (.2009-07-13 - 20:14:45.) -- C:\Windows\System32\Wininit.exe [96256]
[MD5.C8ADAA6948993D839D14524847EA5B75] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.2013-09-22 - 05:13:22.) -- C:\Windows\System32\wininet.dll [1129472]
[MD5.6D13E1406F50C66E2A95D97F22C47560] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.2010-11-20 - 16:29:06.) -- C:\Windows\System32\Winlogon.exe [286720]
[MD5.E3AE23569749DE12D45BA3B489A036AE] - (.Microsoft Corporation - Bibliothèque de licences.) (.2010-11-20 - 16:29:24.) -- C:\Windows\System32\sppcomapi.dll [193536]
[MD5.F81BB7E487EDCEAB630A7EE66CF23913] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.2013-09-13 - 19:48:58.) -- C:\Windows\system32\Drivers\AFD.sys [338944]
[MD5.338C86357871C167A96AB976519BF59E] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.2009-07-13 - 20:26:15.) -- C:\Windows\system32\Drivers\atapi.sys [21584]
[MD5.77EA11B065E0A8AB902D78145CA51E10] - (.Microsoft Corporation - CD-ROM File System Driver.) (.2009-07-13 - 18:11:15.) -- C:\Windows\system32\Drivers\Cdfs.sys [70656]
[MD5.BE167ED0FDB9C1FA1133953C18D5A6C9] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.2010-11-20 - 16:29:03.) -- C:\Windows\system32\Drivers\Cdrom.sys [108544]
[MD5.F024449C97EC1E464AAFFDA18593DB88] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.2010-11-20 - 16:29:07.) -- C:\Windows\system32\Drivers\DfsC.sys [78336]
[MD5.9036377B8A6C15DC2EEC53E489D159B5] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.2010-11-20 - 16:29:03.) -- C:\Windows\system32\Drivers\HDAudBus.sys [108544]
[MD5.F151F0BDC47F4A28B1B20A0818EA36D6] - (.Microsoft Corporation - Pilote de port i8042.) (.2009-07-13 - 18:11:24.) -- C:\Windows\system32\Drivers\i8042prt.sys [80896]
[MD5.A5FA468D67ABCDAA36264E463A7BB0CD] - (.Microsoft Corporation - IP Network Address Translator.) (.2009-07-13 - 18:54:29.) -- C:\Windows\system32\Drivers\IpNat.sys [101888]
[MD5.5D16C921E3671636C0EBA3BBAAC5FD25] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.2011-04-26 - 21:17:22.) -- C:\Windows\system32\Drivers\MRxSmb.sys [123904]
[MD5.280122DDCF04B378EDD1AD54D71C1E54] - (.Microsoft Corporation - MBT Transport driver.) (.2010-11-20 - 16:29:08.) -- C:\Windows\system32\Drivers\netBT.sys [187904]
[MD5.5E43D2B0EE64123D4880DFA6626DEFDE] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.2013-04-12 - 08:45:29.) -- C:\Windows\system32\Drivers\ntfs.sys [1211752]
[MD5.2EA877ED5DD9713C5AC74E8EA7348D14] - (.Microsoft Corporation - Pilote de port parallèle.) (.2009-07-13 - 18:45:35.) -- C:\Windows\system32\Drivers\Parport.sys [79360]
[MD5.D9F91EAFEC2815365CBE6D167E4E332A] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.2009-07-13 - 18:54:34.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [78848]
[MD5.B973FCFC50DC1434E1970A146F7E3885] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.2010-11-20 - 16:29:49.) -- C:\Windows\system32\Drivers\rdpdr.sys [133632]
[MD5.3E21C083B8A01CB70BA1F09303010FCE] - (.Microsoft Corporation - SMB Transport driver.) (.2009-07-13 - 18:53:41.) -- C:\Windows\system32\Drivers\smb.sys [71168]
[MD5.B459575348C20E8121D6039DA063C704] - (.Microsoft Corporation - TDI Translation Driver.) (.2010-11-20 - 16:29:07.) -- C:\Windows\system32\Drivers\tdx.sys [74752]
[MD5.F497F67932C6FA693D7DE2780631CFE7] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.2010-11-20 - 16:29:03.) -- C:\Windows\system32\Drivers\volsnap.sys [245632]
~ Generic Processes: Scanned in 00mn 00s
---\\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 1/5
~ Mes Videos (My Videos) : 1/15
~ Mes Favoris (My Favorites) : 1/18
~ Mes Documents (My Documents) : 1/306
~ Mon Bureau (My Desktop) : 2/51
~ Menu demarrer (Programs) : 1/23
~ Hidden Files: Scanned in 00mn 00s
---\\ Processus lancés
[MD5.38440FE1A65B1FE3D246C5C4CAD22F53] - (.Logitech Inc. - Logitech Video COM Service.) -- C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe [186904] [PID.1948]
[MD5.D1D5DAB39DCB4BE0359943738D87409B] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe [532040] [PID.1216]
[MD5.65DF1AF2B3C723CE5FC3BCBFDDE8015D] - (...) -- C:\Program Files\HTC\HTC Sync Manager\HTC Sync\adb.exe [821600] [PID.1528]
[MD5.68239842340DDFF8993DFD9127553EDA] - (.Intel Corporation - igfxTray Module.) -- C:\Windows\System32\igfxtray.exe [141848] [PID.2144]
[MD5.004763BDF8E48244DBB9FDFDE3065EBC] - (.Intel Corporation - hkcmd Module.) -- C:\Windows\System32\hkcmd.exe [173592] [PID.2152]
[MD5.CD1102E5D340216138C7F56FA8D26998] - (.Intel Corporation - persistence Module.) -- C:\Windows\System32\igfxpers.exe [150552] [PID.2168]
[MD5.C68BD48274B8C6E4401CF9F71A0CA4BD] - (...) -- C:\Program Files\Common Files\logishrd\LComMgr\Communications_Helper.exe [565008] [PID.2180]
[MD5.DD231039B13EC2ABDE315D76E658EF0E] - (.Avira Operations GmbH & Co. KG - Antivirus System Tray Tool (Desktop).) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [684600] [PID.2244]
[MD5.5B6E8E09BE6401A7E022F52FDFCB2FF8] - (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336] [PID.2380]
[MD5.D9C51528488EA0D98D3C4D02ABD16759] - (.Intel Corporation - igfxsrvc Module.) -- C:\Windows\system32\igfxsrvc.exe [252952] [PID.2400]
[MD5.4C8942B8721813E5C8874D47112DCF73] - (.Hewlett-Packard Company - Pas de description.) -- C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [2741616] [PID.2412]
[MD5.5B1AA494C27CF0BC3B03E8666ACB225E] - (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner.exe [4455704] [PID.3044] =>Piriform Ltd
[MD5.42FEDBCB3ED926F6F529E0FDDF750BE0] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [8339968] [PID.2312]
~ Processes Running: Scanned in 00mn 01s
---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = preserve
~ IE Browser: 9 Legitimates Filtered in 00mn 00s
---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1
~ Proxy management: Scanned in 00mn 00s
---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
~ Keys: Scanned in 00mn 00s
---\\ Hosts file redirection (O1)
~ Le fichier hosts est sain (The hosts file is clean).
~ Hosts File: Scanned in 00mn 00s
~ Nombre de lignes (Lines number): 4
---\\ Autres liens utilisateurs (O4)
O4 - GS\Desktop [Public]: Guitar Rig 4.lnk . (.Native Instruments GmbH - Guitar Rig 4.) -- C:\Program Files\Native Instruments\Guitar Rig 4\Guitar Rig 4.exe
O4 - GS\Desktop [Public]: HTC Sync Manager.lnk . (...) -- C:\Program Files\HTC\HTC Sync Manager\HTCSyncManager.exe
O4 - GS\Desktop [Public]: Kontakt 4.lnk . (.Native Instruments GmbH - Kontakt 4.) -- C:\Program Files\Native Instruments\Kontakt 4\Kontakt 4.exe
O4 - GS\Desktop [Public]: Kore Player.lnk . (.Native Instruments GmbH - Kore Player.) -- C:\Program Files\Native Instruments\Kore Player\Kore Player.exe
O4 - GS\Desktop [Public]: LightScribe.lnk . (.Hewlett-Packard Company - Pas de description.) -- C:\Program Files\Common Files\LightScribe\LSLauncher.exe
O4 - GS\Desktop [Public]: Reaktor 5.lnk . (.Native Instruments GmbH - Reaktor5.) -- C:\Program Files\Native Instruments\Reaktor 5\Reaktor5.exe
O4 - GS\Desktop [Public]: Service Center.lnk . (.Native Instruments GmbH - Service Center.) -- C:\Program Files\Native Instruments\Service Center\ServiceCenter.exe
O4 - GS\Desktop [Public]: Studio One 2.lnk . (.PreSonus - Studio One.) -- C:\Program Files\PreSonus\Studio One 2\Studio One.exe
O4 - GS\Desktop [Public]: Toontrack solo 32.lnk . (.Toontrack Music AB - Toontrack solo (32-bit).) -- C:\Program Files\Toontrack\Toontrack solo\Toontrack solo.exe
O4 - GS\Program [Public]: Studio One 2.lnk . (.PreSonus - Studio One.) -- C:\Program Files\PreSonus\Studio One 2\Studio One.exe
O4 - GS\QuickLaunch [danielle]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - GS\TaskBar [danielle]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - GS\Program [danielle]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - GS\SystemTools [danielle]: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
~ Global Startup: 71 Legitimates Filtered in 00mn 07s
---\\ Applications lancées au démarrage du sytème (O4)
O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [LogitechCommunicationsManager] . (...) -- C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] . (...) -- C:\Program Files\Logitech\QuickCam\Quickcam.exe
O4 - HKLM\..\Run: [avgnt] . (.Avira Operations GmbH & Co. KG - Antivirus System Tray Tool (Desktop).) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe =>.Adobe Systems Incorporated
O4 - HKLM\..\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe =>.Oracle Corporation
O4 - HKCU\..\Run: [LightScribe Control Panel] . (.Hewlett-Packard Company - Pas de description.) -- C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
O4 - HKCU\..\Run: [CCleaner Monitoring] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner.exe =>Piriform Ltd
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-21-4136412647-1112769851-3072366169-1001\..\Run: [LightScribe Control Panel] . (.Hewlett-Packard Company - Pas de description.) -- C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
O4 - HKUS\S-1-5-21-4136412647-1112769851-3072366169-1001\..\Run: [CCleaner Monitoring] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner.exe =>Piriform Ltd
~ Application: Scanned in 00mn 00s
---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (...) -- C:\Program Files\Microsoft Office\Office12\REFBARH.ICO
~ IE Extra Buttons: Scanned in 00mn 00s
---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{644E1F76-91D7-4795-9D61-C75AEDEE7146}: DhcpNameServer = 24.201.245.77 24.200.0.1 24.53.0.2
O17 - HKLM\System\CS1\Services\Tcpip\..\{644E1F76-91D7-4795-9D61-C75AEDEE7146}: DhcpNameServer = 24.201.245.77 24.200.0.1 24.53.0.2
O17 - HKLM\System\CS2\Services\Tcpip\..\{644E1F76-91D7-4795-9D61-C75AEDEE7146}: DhcpNameServer = 24.201.245.77 24.200.0.1 24.53.0.2
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 24.201.245.77 24.200.0.1 24.53.0.2
~ Domain: Scanned in 00mn 00s
---\\ Protocole additionnel (O18)
O18 - Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation
O18 - Filter: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.dll =>.Microsoft Corporation
~ Protocole Additionnel: Scanned in 00mn 00s
---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\Windows\System32\igfxdev.dll
~ Winlogon: Scanned in 00mn 00s
---\\ Tâches planifiées en automatique (O39)
[MD5.0CC496A096D15026963530815F5E3978] [APT] [{23596974-8820-450C-B065-3623F607DBA8}] (...) -- C:\Users\danielle\Downloads\vkaraoke.exe [884736]
[MD5.00000000000000000000000000000000] [APT] [{8342AB93-8418-42FC-B5C8-201C8C1AA9F0}] (...) -- C:\Users\danielle\AppData\Local\Temp\QuickCam_11.90.1263\Setup\Setup.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{978278E5-BAD6-4733-BE90-124E3BED0B0A}] (...) -- C:\Users\danielle\AppData\Local\Temp\QuickCam_11.90.1263\Elevated\setup.exe (.not file.) [0]
[MD5.3859932FCA6446A5E42983C016655D44] [APT] [{B7DC8960-CAA8-44B2-856A-6ACF022EA457}] (...) -- C:\Users\danielle\Downloads\vanbasco_french.exe [196608]
~ Scheduled Task: 5 Legitimates Filtered in 00mn 06s
---\\ Logiciels installés (O42)
O42 - Logiciel: Melodyne Runtime 4.1 (x86) - (.Celemony Software GmbH .) [HKLM] -- {CE7DC6C4-14F0-446F-B707-7ACE86460E43}
O42 - Logiciel: Melodyne singletrack - (.Celemony Software GmbH.) [HKLM] -- {16DF894D-FC3F-4B87-908D-671E201CD7A8}
~ Logic: 16 Legitimates Filtered in 00mn 00s
---\\ HKCU & HKLM Software Keys
[HKCU\Software\39462InstEnd]
[HKLM\Software\Shortcut_Module]
~ Key Software: 213 Legitimates Filtered in 00mn 00s
---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 2013-12-05 - 16:18:41 - [8,368] --H-D C:\ProgramData\{2F1A850B-9DA6-4E4A-AB2A-E9005D72D5B2}
O43 - CFD: 2013-12-05 - 16:18:35 - [16,110] --H-D C:\ProgramData\{47960B9E-9E4E-438D-AA0C-2F495913AD7E}
O43 - CFD: 2013-12-05 - 16:15:42 - [16,068] --H-D C:\ProgramData\{51753DAD-2BAB-4BB2-A4AA-CAAEF5AA972B}
O43 - CFD: 2013-12-05 - 16:05:49 - [17,435] --H-D C:\ProgramData\{6268CC84-62BB-4890-B980-FC891FC3470E}
O43 - CFD: 2013-12-05 - 16:09:45 - [16,768] --H-D C:\ProgramData\{699830EE-64F0-4782-AEDE-0FCCC40946BA}
O43 - CFD: 2013-12-05 - 16:15:33 - [16,154] --H-D C:\ProgramData\{9A73EE13-A1FF-4899-BA10-5DF1DE4A86CA}
O43 - CFD: 2013-12-05 - 16:14:49 - [16,534] --H-D C:\ProgramData\{D15CE785-FD15-4860-807A-3B68400084D3}
~ Program Folder: 152 Legitimates Filtered in 00mn 18s
---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.DD02C038C7A24DD23AAA75595BEC80BA] - 2014-02-16 - 23:46:43 ---A- . (.Ploytec GmbH - Ploytec USB Audio driver.) -- C:\Windows\System32\Drivers\psabusbu.sys [401016]
O44 - LFC:[MD5.ED7F742B0EACF745AFB5B2FE5BAEC618] - 2014-02-16 - 23:46:43 ---A- . (.Ploytec GmbH - Ploytec WDM MIDI Driver.) -- C:\Windows\System32\Drivers\psabusbm.sys [31864]
O44 - LFC:[MD5.08AC58A2BC1084E6EB4800B98368CCAA] - 2014-02-16 - 23:46:43 ---A- . (.Ploytec GmbH - USB-Audio WDM Adapter.) -- C:\Windows\System32\Drivers\psabusba.sys [40568]
O44 - LFC:[MD5.73FE8285D075FE7F0CD980870A09AF3D] - 2014-02-17 - 12:43:50 ---A- . (...) -- C:\Windows\wininit.ini [79]
O44 - LFC:[MD5.712C459A533BF6CDBE98309DE4AA8189] - 2014-02-17 - 14:38:11 ----- . (...) -- C:\Shortcut_Module_17_02_2014_14_38_11.txt [4294]
O44 - LFC:[MD5.C7385929A0F8195AC90C63D85E2627E5] - 2014-02-18 - 12:58:07 ----- . (...) -- C:\RstHosts.txt [682]
O44 - LFC:[MD5.5ACA474907FC99A4177BD185EB34456F] - 2014-02-18 - 14:32:29 ----- . (...) -- C:\UsbFix [Scan 1] DANIELLE-PC.txt [7433]
O44 - LFC:[MD5.0BAF980CC38B275356C059BA31804A10] - 2014-02-19 - 01:30:49 ---A- . (...) -- C:\UsbFix [Clean 2] DANIELLE-PC.txt [9323]
~ Files: 20 Legitimates Filtered in 00mn 52s
---\\ Enumération des clés de registre PoliciesSystem (MWPS) (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=0
~ MWPS: 14 Legitimates Filtered in 00mn 00s
---\\ Liste des pilotes du système (SDL) (O58)
O58 - SDL:[MD5.0ED67910C8C326796FAA00B2BF6D9D3C] - 2009-07-13 - 20:20:28 ---A- . (.Emulex - Storport Miniport Driver for LightPulse HBAs.) -- C:\Windows\System32\Drivers\elxstor.sys [453712]
O58 - SDL:[MD5.C44E3C2BAB6837DB337DDEE7544736DB] - 2009-07-13 - 17:54:14 ---A- . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for eHome.) -- C:\Windows\System32\Drivers\hcw85cir.sys [26624]
O58 - SDL:[MD5.339ADEFAD60353F960E3CA67CE468C24] - 2012-12-07 - 18:27:50 ---A- . (.Windows (R) Win 7 DDK provider - RawPacket NDIS Protocol Driver.) -- C:\Windows\System32\Drivers\htcnprot.sys [23040]
O58 - SDL:[MD5.A6919138F29AE45E90E99FA94737E04C] - 2008-07-26 - 07:25:02 ---A- . (...) -- C:\Windows\System32\Drivers\LVPr2Mon.sys [25624]
O58 - SDL:[MD5.08AC58A2BC1084E6EB4800B98368CCAA] - 2014-02-16 - 23:46:43 ---A- . (.Ploytec GmbH - USB-Audio WDM Adapter.) -- C:\Windows\System32\Drivers\psabusba.sys [40568]
O58 - SDL:[MD5.ED7F742B0EACF745AFB5B2FE5BAEC618] - 2014-02-16 - 23:46:43 ---A- . (.Ploytec GmbH - Ploytec WDM MIDI Driver.) -- C:\Windows\System32\Drivers\psabusbm.sys [31864]
O58 - SDL:[MD5.DD02C038C7A24DD23AAA75595BEC80BA] - 2014-02-16 - 23:46:43 ---A- . (.Ploytec GmbH - Ploytec USB Audio driver.) -- C:\Windows\System32\Drivers\psabusbu.sys [401016]
O58 - SDL:[MD5.A36EE93698802CD899F98BFD553D8185] - 2013-07-08 - 13:59:58 ---A- . (.Avira GmbH - AVIRA SnapShot Driver.) -- C:\Windows\System32\Drivers\ssmdrv.sys [28520]
O58 - SDL:[MD5.DB32D325C192B801DF274BFD12A7E72B] - 2009-07-13 - 20:19:04 ---A- . (.Promise Technology - Promise SuperTrak EX Series Driver for Windows.) -- C:\Windows\System32\Drivers\stexstor.sys [21072]
O58 - SDL:[MD5.8AAD333C876590293F72B315E162BCC7] - 2009-07-13 - 16:40:41 ---A- . (...) -- C:\Windows\System32\ANSI.SYS [9029]
O58 - SDL:[MD5.0FE9F16075C9ACB941C957B7C649176E] - 2009-07-13 - 16:40:44 ---A- . (...) -- C:\Windows\System32\country.sys [27097]
O58 - SDL:[MD5.E6BC0F98FECEF245A0010D350C1A0B9B] - 2009-07-13 - 16:40:40 ---A- . (...) -- C:\Windows\System32\HIMEM.SYS [4768]
O58 - SDL:[MD5.492090267B9608C62B956CD29BE3AFB7] - 2009-07-13 - 16:40:43 ---A- . (...) -- C:\Windows\System32\KEY01.SYS [42809]
O58 - SDL:[MD5.FBBCFEC1379C5C02D88A361993EDF1B8] - 2009-07-13 - 16:40:43 ---A- . (...) -- C:\Windows\System32\KEYBOARD.SYS [42537]
O58 - SDL:[MD5.FFFF296A08DBF2AC0126C62E3778AC0D] - 2009-07-13 - 16:40:23 ---A- . (...) -- C:\Windows\System32\NTDOS.SYS [27866]
O58 - SDL:[MD5.CF9ED169FF86D935E47999E82359E898] - 2009-07-13 - 16:40:31 ---A- . (...) -- C:\Windows\System32\NTDOS404.SYS [29146]
O58 - SDL:[MD5.03B945AC0481CD8BB161C3569D8ED1C3] - 2009-07-13 - 16:40:35 ---A- . (...) -- C:\Windows\System32\NTDOS411.SYS [29370]
O58 - SDL:[MD5.BBC957DC18C17CC027EB80B7C77F2AEA] - 2009-07-13 - 16:40:39 ---A- . (...) -- C:\Windows\System32\NTDOS412.SYS [29274]
O58 - SDL:[MD5.3CFFAEFFF23B0D208214A6D3061A5B1B] - 2009-07-13 - 16:40:27 ---A- . (...) -- C:\Windows\System32\NTDOS804.SYS [29146]
O58 - SDL:[MD5.2E4112FB7D1B76E11ADFD7487B5D0E95] - 2009-07-13 - 16:40:11 ---A- . (...) -- C:\Windows\System32\NTIO.SYS [33952]
O58 - SDL:[MD5.A98EBD4C2DF983665BF2D1AF49949974] - 2009-07-13 - 16:40:15 ---A- . (...) -- C:\Windows\System32\NTIO404.SYS [34672]
O58 - SDL:[MD5.3F7E6406EDEF197C5CAAB2240EEF6F48] - 2009-07-13 - 16:40:17 ---A- . (...) -- C:\Windows\System32\NTIO411.SYS [35776]
O58 - SDL:[MD5.3E64D681B776CC57BDC38A46D881F85B] - 2009-07-13 - 16:40:19 ---A- . (...) -- C:\Windows\System32\NTIO412.SYS [35536]
O58 - SDL:[MD5.D86B6435729231C171432B4E77801BDB] - 2009-07-13 - 16:40:13 ---A- . (...) -- C:\Windows\System32\NTIO804.SYS [34672]
~ Drivers: 14 Legitimates Filtered in 00mn 01s
---\\ Liste des outils de désinfection (LATC) (O63)
O63 - Logiciel: UsbFix - (.El Desaparecido - www.usbfix.net - www.sosvirus.net.) [HKLM] -- Usbfix
O63 - Logiciel: ZHPDiag 2014 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 =>.Nicolas Coolman
~ ADS: Scanned in 00mn 00s
---\\ Menu de démarrage Internet (SMI) (O68)
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
~ Keys: Scanned in 00mn 00s
---\\ Recherche particulière à la racine du système (SPRF) (O84)
[MD5.0A170D9B50B29C5209248D95417C16DA] [SPRF][2014-02-18] (...) -- C:\Users\danielle\Desktop\rsthosts.exe [353632]
[MD5.4950EE1C78FC55390998A755F5866F3E] [SPRF][2014-02-17] (.Pas de propriétaire - Shortcut_Module.) -- C:\Users\danielle\Desktop\Shortcut_Module.exe [1707008]
~ Files: 4 Legitimates Filtered in 00mn 00s
---\\ Liste des exceptions du parefeu (FirewallRules) (O87)
O87 - FAEL: "{35375935-046B-4938-8249-78DE242734FD}" | In - None - P17 - TRUE | .(...) -- C:\Program Files\HTC\HTC Sync Manager\HTCSyncManager.exe
~ Firewall: 199 Legitimates Filtered in 00mn 01s
---\\ Enumère les codes produits des logiciels (PUC) (O90)
O90 - PUC: "6C64EFF65F5C009409D46F0F42A12051" . (.EZdrummer Lite Plus 32 bit.) -- C:\Windows\Installer\{6FFE46C6-C5F5-4900-904D-F6F0241A0215}\ARPPRODUCTICON.exe
~ Update Products: 74 Legitimates Filtered in 00mn 00s
---\\ Recherche des packages WindowsInstaller (WIS) (O93) (NTFS)
[MD5.A3AEEC9A9B6984F2E22B90FDC9A23AB8] [WIS][2013-11-30] (.Skype Technologies S.A. - Skype.) -- C:\Windows\Installer\32885.msi [24993792]
~ WIS: 75 Legitimates Filtered in 00mn 10s
---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)
SS - | Disabled 2013-12-19 1011768 | (AntiVirWebService) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.exe
SS - | Demand 2007-09-17 800040 | (NBService) . (.Nero AG.) - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
SS - | Demand 2007-06-27 279848 | (NMIndexingService) . (.Nero AG.) - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
SS - | Auto 2013-09-05 171680 | (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files\Skype\Updater\Updater.exe
SS - | Demand 2009-07-13 20992 | C:\Program Files\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
SR - | Auto 2013-12-21 65432 | (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
SR - | Auto 2013-12-19 440376 | (AntiVirSchedulerService) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files\Avira\AntiVir Desktop\sched.exe
SR - | Auto 2013-11-27 440376 | (AntiVirService) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
SR - | Auto 2013-11-10 87368 | (HTCMonitorService) . (.Nero AG.) - C:\Program Files\HTC\HTC Sync Manager\HSMServiceEntry.exe
SR - | Auto 2011-03-04 73728 | (LightScribeService) . (.Hewlett-Packard Company.) - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
SR - | Auto 2008-07-26 186904 | (LVCOMSer) . (.Logitech Inc..) - C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
SR - | Auto 2008-07-26 150040 | (LVPrcSrv) . (.Logitech Inc..) - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
SR - | Auto 2013-04-04 418376 | (MBAMScheduler) . (.Malwarebytes Corporation.) - C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
SR - | Auto 2013-04-04 701512 | (MBAMService) . (.Malwarebytes Corporation.) - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
SR - | Auto 2012-07-13 769432 | (NAUpdate) . (.Nero AG.) - C:\Program Files\Nero\Update\NASvc.exe
SR - | Auto 2012-12-07 167424 | (PassThru Service) . (...) - C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe
SR - | Auto 2009-07-13 20992 | C:\Windows\system32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
~ Services: Scanned in 00mn 11s
---\\ Scan Additionnel (O88)
Database Version : 13031 - (2014-02-23)
Clés trouvées (Keys found) : 0
Valeurs trouvées (Values found) : 0
Dossiers trouvés (Folders found) : 0
Fichiers trouvés (Files found) : 0
~ Additionnel Scan: 324107 Items scanned in 00mn 35s
~ 906 Legitimates filtered by white list
End of the scan (396 lines in 03mn 01s)(0)
~ Lancé par danielle (2014-02-26 01:18:33)
~ Adresse du Site Web http://nicolascoolman.webs.com
~ Forums gratuits d'Assistance à la désinfection : http://nicolascoolman.webs.com/apps/links/
~ Traduit par Nicolas Coolman
~ Etat de la version :
~ Liste blanche : Activée par le programme
~ Elévation des Privilèges : OK
~ User Account Control (UAC): Activate by user
---\\ Navigateurs Internet
MSIE: Internet Explorer v9.0.8112.16421 (Defaut)
---\\ Informations sur les produits Windows
~ Langage: Français
Windows 7 Professional, 32-bit Service Pack 1 (Build 7601)
Windows Server License Manager Script : OK
~ Windows(R) 7, VOLUME_MAK channel
Windows ID Activation : OK
~ Windows Partial Key : DRHM9
Windows License : OK
~ Windows Remaining Initializations Number : 3
Software Protection Service (Protection logicielle) : OK
Windows Automatic Updates : OK
Windows Activation Technologies : OK
---\\ Logiciels de protection du système
Avira Free Antivirus v14.0.2.286
Malwarebytes Anti-Malware version 1.75.0.1300
Windows Defender W7
---\\ Logiciels d'optimisation du système
CCleaner v4.10 =>Piriform Ltd
---\\ Logiciels de partage PeerToPeer
---\\ Surveillance de Logiciels
Adobe Flash Player 12 Plugin
Adobe Reader XI
Java 7 Update 51
---\\ Informations sur le système
~ Processor: x86 Family 6 Model 23 Stepping 6, GenuineIntel
~ Operating System: 32 Bits
Boot mode: Normal (Normal boot)
Total RAM: 2037 MB (64% free)
System Restore: Activé (Enable)
System drive C: has 93 GB (72%) free of 128 GB
---\\ Mode de connexion au système
~ Computer Name: DANIELLE-PC
~ User Name: danielle
~ All Users Names: HomeGroupUser$, danielle, Administrateur,
~ Unselected Option: O45,O61,O62,O65,O66,O80,O82,O89
Logged in as Administrator
---\\ Variables d'environnement
~ System Unit : C:\
~ %AppZHP% : C:\Users\danielle\AppData\Roaming\ZHP\
~ %AppData% : C:\Users\danielle\AppData\Roaming\
~ %Desktop% : C:\Users\danielle\Desktop\
~ %Favorites% : C:\Users\danielle\Favorites\
~ %LocalAppData% : C:\Users\danielle\AppData\Local\
~ %StartMenu% : C:\Users\danielle\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\
---\\ Enumération des unités disques
A: Floppy drive, Flash card reader, USB Key (Not Inserted)
C: Hard drive, Flash drive, Thumb drive (Free 93 Go of 128 Go)
D: CD-ROM drive (Not Inserted)
E: Hard drive, Flash drive, Thumb drive (Free 1241 Go of 1735 Go)
---\\ Etat du Centre de Sécurité Windows
~ Security Center: 38 Legitimates Filtered in 00mn 00s
---\\ Recherche particulière de fichiers génériques
[MD5.8B88EBBB05A0E56B7DCC708498C02B3E] - (.Microsoft Corporation - Explorateur Windows.) (.2011-02-25 - 00:30:54.) -- C:\Windows\Explorer.exe [2616320]
[MD5.B5C5DCAD3899512020D135600129D665] - (.Microsoft Corporation - Application de démarrage de Windows.) (.2009-07-13 - 20:14:45.) -- C:\Windows\System32\Wininit.exe [96256]
[MD5.C8ADAA6948993D839D14524847EA5B75] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.2013-09-22 - 05:13:22.) -- C:\Windows\System32\wininet.dll [1129472]
[MD5.6D13E1406F50C66E2A95D97F22C47560] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.2010-11-20 - 16:29:06.) -- C:\Windows\System32\Winlogon.exe [286720]
[MD5.E3AE23569749DE12D45BA3B489A036AE] - (.Microsoft Corporation - Bibliothèque de licences.) (.2010-11-20 - 16:29:24.) -- C:\Windows\System32\sppcomapi.dll [193536]
[MD5.F81BB7E487EDCEAB630A7EE66CF23913] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.2013-09-13 - 19:48:58.) -- C:\Windows\system32\Drivers\AFD.sys [338944]
[MD5.338C86357871C167A96AB976519BF59E] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.2009-07-13 - 20:26:15.) -- C:\Windows\system32\Drivers\atapi.sys [21584]
[MD5.77EA11B065E0A8AB902D78145CA51E10] - (.Microsoft Corporation - CD-ROM File System Driver.) (.2009-07-13 - 18:11:15.) -- C:\Windows\system32\Drivers\Cdfs.sys [70656]
[MD5.BE167ED0FDB9C1FA1133953C18D5A6C9] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.2010-11-20 - 16:29:03.) -- C:\Windows\system32\Drivers\Cdrom.sys [108544]
[MD5.F024449C97EC1E464AAFFDA18593DB88] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.2010-11-20 - 16:29:07.) -- C:\Windows\system32\Drivers\DfsC.sys [78336]
[MD5.9036377B8A6C15DC2EEC53E489D159B5] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.2010-11-20 - 16:29:03.) -- C:\Windows\system32\Drivers\HDAudBus.sys [108544]
[MD5.F151F0BDC47F4A28B1B20A0818EA36D6] - (.Microsoft Corporation - Pilote de port i8042.) (.2009-07-13 - 18:11:24.) -- C:\Windows\system32\Drivers\i8042prt.sys [80896]
[MD5.A5FA468D67ABCDAA36264E463A7BB0CD] - (.Microsoft Corporation - IP Network Address Translator.) (.2009-07-13 - 18:54:29.) -- C:\Windows\system32\Drivers\IpNat.sys [101888]
[MD5.5D16C921E3671636C0EBA3BBAAC5FD25] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.2011-04-26 - 21:17:22.) -- C:\Windows\system32\Drivers\MRxSmb.sys [123904]
[MD5.280122DDCF04B378EDD1AD54D71C1E54] - (.Microsoft Corporation - MBT Transport driver.) (.2010-11-20 - 16:29:08.) -- C:\Windows\system32\Drivers\netBT.sys [187904]
[MD5.5E43D2B0EE64123D4880DFA6626DEFDE] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.2013-04-12 - 08:45:29.) -- C:\Windows\system32\Drivers\ntfs.sys [1211752]
[MD5.2EA877ED5DD9713C5AC74E8EA7348D14] - (.Microsoft Corporation - Pilote de port parallèle.) (.2009-07-13 - 18:45:35.) -- C:\Windows\system32\Drivers\Parport.sys [79360]
[MD5.D9F91EAFEC2815365CBE6D167E4E332A] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.2009-07-13 - 18:54:34.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [78848]
[MD5.B973FCFC50DC1434E1970A146F7E3885] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.2010-11-20 - 16:29:49.) -- C:\Windows\system32\Drivers\rdpdr.sys [133632]
[MD5.3E21C083B8A01CB70BA1F09303010FCE] - (.Microsoft Corporation - SMB Transport driver.) (.2009-07-13 - 18:53:41.) -- C:\Windows\system32\Drivers\smb.sys [71168]
[MD5.B459575348C20E8121D6039DA063C704] - (.Microsoft Corporation - TDI Translation Driver.) (.2010-11-20 - 16:29:07.) -- C:\Windows\system32\Drivers\tdx.sys [74752]
[MD5.F497F67932C6FA693D7DE2780631CFE7] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.2010-11-20 - 16:29:03.) -- C:\Windows\system32\Drivers\volsnap.sys [245632]
~ Generic Processes: Scanned in 00mn 00s
---\\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 1/5
~ Mes Videos (My Videos) : 1/15
~ Mes Favoris (My Favorites) : 1/18
~ Mes Documents (My Documents) : 1/306
~ Mon Bureau (My Desktop) : 2/51
~ Menu demarrer (Programs) : 1/23
~ Hidden Files: Scanned in 00mn 00s
---\\ Processus lancés
[MD5.38440FE1A65B1FE3D246C5C4CAD22F53] - (.Logitech Inc. - Logitech Video COM Service.) -- C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe [186904] [PID.1948]
[MD5.D1D5DAB39DCB4BE0359943738D87409B] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe [532040] [PID.1216]
[MD5.65DF1AF2B3C723CE5FC3BCBFDDE8015D] - (...) -- C:\Program Files\HTC\HTC Sync Manager\HTC Sync\adb.exe [821600] [PID.1528]
[MD5.68239842340DDFF8993DFD9127553EDA] - (.Intel Corporation - igfxTray Module.) -- C:\Windows\System32\igfxtray.exe [141848] [PID.2144]
[MD5.004763BDF8E48244DBB9FDFDE3065EBC] - (.Intel Corporation - hkcmd Module.) -- C:\Windows\System32\hkcmd.exe [173592] [PID.2152]
[MD5.CD1102E5D340216138C7F56FA8D26998] - (.Intel Corporation - persistence Module.) -- C:\Windows\System32\igfxpers.exe [150552] [PID.2168]
[MD5.C68BD48274B8C6E4401CF9F71A0CA4BD] - (...) -- C:\Program Files\Common Files\logishrd\LComMgr\Communications_Helper.exe [565008] [PID.2180]
[MD5.DD231039B13EC2ABDE315D76E658EF0E] - (.Avira Operations GmbH & Co. KG - Antivirus System Tray Tool (Desktop).) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [684600] [PID.2244]
[MD5.5B6E8E09BE6401A7E022F52FDFCB2FF8] - (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336] [PID.2380]
[MD5.D9C51528488EA0D98D3C4D02ABD16759] - (.Intel Corporation - igfxsrvc Module.) -- C:\Windows\system32\igfxsrvc.exe [252952] [PID.2400]
[MD5.4C8942B8721813E5C8874D47112DCF73] - (.Hewlett-Packard Company - Pas de description.) -- C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [2741616] [PID.2412]
[MD5.5B1AA494C27CF0BC3B03E8666ACB225E] - (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner.exe [4455704] [PID.3044] =>Piriform Ltd
[MD5.42FEDBCB3ED926F6F529E0FDDF750BE0] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [8339968] [PID.2312]
~ Processes Running: Scanned in 00mn 01s
---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = preserve
~ IE Browser: 9 Legitimates Filtered in 00mn 00s
---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1
~ Proxy management: Scanned in 00mn 00s
---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
~ Keys: Scanned in 00mn 00s
---\\ Hosts file redirection (O1)
~ Le fichier hosts est sain (The hosts file is clean).
~ Hosts File: Scanned in 00mn 00s
~ Nombre de lignes (Lines number): 4
---\\ Autres liens utilisateurs (O4)
O4 - GS\Desktop [Public]: Guitar Rig 4.lnk . (.Native Instruments GmbH - Guitar Rig 4.) -- C:\Program Files\Native Instruments\Guitar Rig 4\Guitar Rig 4.exe
O4 - GS\Desktop [Public]: HTC Sync Manager.lnk . (...) -- C:\Program Files\HTC\HTC Sync Manager\HTCSyncManager.exe
O4 - GS\Desktop [Public]: Kontakt 4.lnk . (.Native Instruments GmbH - Kontakt 4.) -- C:\Program Files\Native Instruments\Kontakt 4\Kontakt 4.exe
O4 - GS\Desktop [Public]: Kore Player.lnk . (.Native Instruments GmbH - Kore Player.) -- C:\Program Files\Native Instruments\Kore Player\Kore Player.exe
O4 - GS\Desktop [Public]: LightScribe.lnk . (.Hewlett-Packard Company - Pas de description.) -- C:\Program Files\Common Files\LightScribe\LSLauncher.exe
O4 - GS\Desktop [Public]: Reaktor 5.lnk . (.Native Instruments GmbH - Reaktor5.) -- C:\Program Files\Native Instruments\Reaktor 5\Reaktor5.exe
O4 - GS\Desktop [Public]: Service Center.lnk . (.Native Instruments GmbH - Service Center.) -- C:\Program Files\Native Instruments\Service Center\ServiceCenter.exe
O4 - GS\Desktop [Public]: Studio One 2.lnk . (.PreSonus - Studio One.) -- C:\Program Files\PreSonus\Studio One 2\Studio One.exe
O4 - GS\Desktop [Public]: Toontrack solo 32.lnk . (.Toontrack Music AB - Toontrack solo (32-bit).) -- C:\Program Files\Toontrack\Toontrack solo\Toontrack solo.exe
O4 - GS\Program [Public]: Studio One 2.lnk . (.PreSonus - Studio One.) -- C:\Program Files\PreSonus\Studio One 2\Studio One.exe
O4 - GS\QuickLaunch [danielle]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - GS\TaskBar [danielle]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - GS\Program [danielle]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - GS\SystemTools [danielle]: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
~ Global Startup: 71 Legitimates Filtered in 00mn 07s
---\\ Applications lancées au démarrage du sytème (O4)
O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [LogitechCommunicationsManager] . (...) -- C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] . (...) -- C:\Program Files\Logitech\QuickCam\Quickcam.exe
O4 - HKLM\..\Run: [avgnt] . (.Avira Operations GmbH & Co. KG - Antivirus System Tray Tool (Desktop).) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe =>.Adobe Systems Incorporated
O4 - HKLM\..\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe =>.Oracle Corporation
O4 - HKCU\..\Run: [LightScribe Control Panel] . (.Hewlett-Packard Company - Pas de description.) -- C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
O4 - HKCU\..\Run: [CCleaner Monitoring] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner.exe =>Piriform Ltd
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-21-4136412647-1112769851-3072366169-1001\..\Run: [LightScribe Control Panel] . (.Hewlett-Packard Company - Pas de description.) -- C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
O4 - HKUS\S-1-5-21-4136412647-1112769851-3072366169-1001\..\Run: [CCleaner Monitoring] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner.exe =>Piriform Ltd
~ Application: Scanned in 00mn 00s
---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (...) -- C:\Program Files\Microsoft Office\Office12\REFBARH.ICO
~ IE Extra Buttons: Scanned in 00mn 00s
---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{644E1F76-91D7-4795-9D61-C75AEDEE7146}: DhcpNameServer = 24.201.245.77 24.200.0.1 24.53.0.2
O17 - HKLM\System\CS1\Services\Tcpip\..\{644E1F76-91D7-4795-9D61-C75AEDEE7146}: DhcpNameServer = 24.201.245.77 24.200.0.1 24.53.0.2
O17 - HKLM\System\CS2\Services\Tcpip\..\{644E1F76-91D7-4795-9D61-C75AEDEE7146}: DhcpNameServer = 24.201.245.77 24.200.0.1 24.53.0.2
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 24.201.245.77 24.200.0.1 24.53.0.2
~ Domain: Scanned in 00mn 00s
---\\ Protocole additionnel (O18)
O18 - Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation
O18 - Filter: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.dll =>.Microsoft Corporation
~ Protocole Additionnel: Scanned in 00mn 00s
---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\Windows\System32\igfxdev.dll
~ Winlogon: Scanned in 00mn 00s
---\\ Tâches planifiées en automatique (O39)
[MD5.0CC496A096D15026963530815F5E3978] [APT] [{23596974-8820-450C-B065-3623F607DBA8}] (...) -- C:\Users\danielle\Downloads\vkaraoke.exe [884736]
[MD5.00000000000000000000000000000000] [APT] [{8342AB93-8418-42FC-B5C8-201C8C1AA9F0}] (...) -- C:\Users\danielle\AppData\Local\Temp\QuickCam_11.90.1263\Setup\Setup.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{978278E5-BAD6-4733-BE90-124E3BED0B0A}] (...) -- C:\Users\danielle\AppData\Local\Temp\QuickCam_11.90.1263\Elevated\setup.exe (.not file.) [0]
[MD5.3859932FCA6446A5E42983C016655D44] [APT] [{B7DC8960-CAA8-44B2-856A-6ACF022EA457}] (...) -- C:\Users\danielle\Downloads\vanbasco_french.exe [196608]
~ Scheduled Task: 5 Legitimates Filtered in 00mn 06s
---\\ Logiciels installés (O42)
O42 - Logiciel: Melodyne Runtime 4.1 (x86) - (.Celemony Software GmbH .) [HKLM] -- {CE7DC6C4-14F0-446F-B707-7ACE86460E43}
O42 - Logiciel: Melodyne singletrack - (.Celemony Software GmbH.) [HKLM] -- {16DF894D-FC3F-4B87-908D-671E201CD7A8}
~ Logic: 16 Legitimates Filtered in 00mn 00s
---\\ HKCU & HKLM Software Keys
[HKCU\Software\39462InstEnd]
[HKLM\Software\Shortcut_Module]
~ Key Software: 213 Legitimates Filtered in 00mn 00s
---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 2013-12-05 - 16:18:41 - [8,368] --H-D C:\ProgramData\{2F1A850B-9DA6-4E4A-AB2A-E9005D72D5B2}
O43 - CFD: 2013-12-05 - 16:18:35 - [16,110] --H-D C:\ProgramData\{47960B9E-9E4E-438D-AA0C-2F495913AD7E}
O43 - CFD: 2013-12-05 - 16:15:42 - [16,068] --H-D C:\ProgramData\{51753DAD-2BAB-4BB2-A4AA-CAAEF5AA972B}
O43 - CFD: 2013-12-05 - 16:05:49 - [17,435] --H-D C:\ProgramData\{6268CC84-62BB-4890-B980-FC891FC3470E}
O43 - CFD: 2013-12-05 - 16:09:45 - [16,768] --H-D C:\ProgramData\{699830EE-64F0-4782-AEDE-0FCCC40946BA}
O43 - CFD: 2013-12-05 - 16:15:33 - [16,154] --H-D C:\ProgramData\{9A73EE13-A1FF-4899-BA10-5DF1DE4A86CA}
O43 - CFD: 2013-12-05 - 16:14:49 - [16,534] --H-D C:\ProgramData\{D15CE785-FD15-4860-807A-3B68400084D3}
~ Program Folder: 152 Legitimates Filtered in 00mn 18s
---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.DD02C038C7A24DD23AAA75595BEC80BA] - 2014-02-16 - 23:46:43 ---A- . (.Ploytec GmbH - Ploytec USB Audio driver.) -- C:\Windows\System32\Drivers\psabusbu.sys [401016]
O44 - LFC:[MD5.ED7F742B0EACF745AFB5B2FE5BAEC618] - 2014-02-16 - 23:46:43 ---A- . (.Ploytec GmbH - Ploytec WDM MIDI Driver.) -- C:\Windows\System32\Drivers\psabusbm.sys [31864]
O44 - LFC:[MD5.08AC58A2BC1084E6EB4800B98368CCAA] - 2014-02-16 - 23:46:43 ---A- . (.Ploytec GmbH - USB-Audio WDM Adapter.) -- C:\Windows\System32\Drivers\psabusba.sys [40568]
O44 - LFC:[MD5.73FE8285D075FE7F0CD980870A09AF3D] - 2014-02-17 - 12:43:50 ---A- . (...) -- C:\Windows\wininit.ini [79]
O44 - LFC:[MD5.712C459A533BF6CDBE98309DE4AA8189] - 2014-02-17 - 14:38:11 ----- . (...) -- C:\Shortcut_Module_17_02_2014_14_38_11.txt [4294]
O44 - LFC:[MD5.C7385929A0F8195AC90C63D85E2627E5] - 2014-02-18 - 12:58:07 ----- . (...) -- C:\RstHosts.txt [682]
O44 - LFC:[MD5.5ACA474907FC99A4177BD185EB34456F] - 2014-02-18 - 14:32:29 ----- . (...) -- C:\UsbFix [Scan 1] DANIELLE-PC.txt [7433]
O44 - LFC:[MD5.0BAF980CC38B275356C059BA31804A10] - 2014-02-19 - 01:30:49 ---A- . (...) -- C:\UsbFix [Clean 2] DANIELLE-PC.txt [9323]
~ Files: 20 Legitimates Filtered in 00mn 52s
---\\ Enumération des clés de registre PoliciesSystem (MWPS) (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=0
~ MWPS: 14 Legitimates Filtered in 00mn 00s
---\\ Liste des pilotes du système (SDL) (O58)
O58 - SDL:[MD5.0ED67910C8C326796FAA00B2BF6D9D3C] - 2009-07-13 - 20:20:28 ---A- . (.Emulex - Storport Miniport Driver for LightPulse HBAs.) -- C:\Windows\System32\Drivers\elxstor.sys [453712]
O58 - SDL:[MD5.C44E3C2BAB6837DB337DDEE7544736DB] - 2009-07-13 - 17:54:14 ---A- . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for eHome.) -- C:\Windows\System32\Drivers\hcw85cir.sys [26624]
O58 - SDL:[MD5.339ADEFAD60353F960E3CA67CE468C24] - 2012-12-07 - 18:27:50 ---A- . (.Windows (R) Win 7 DDK provider - RawPacket NDIS Protocol Driver.) -- C:\Windows\System32\Drivers\htcnprot.sys [23040]
O58 - SDL:[MD5.A6919138F29AE45E90E99FA94737E04C] - 2008-07-26 - 07:25:02 ---A- . (...) -- C:\Windows\System32\Drivers\LVPr2Mon.sys [25624]
O58 - SDL:[MD5.08AC58A2BC1084E6EB4800B98368CCAA] - 2014-02-16 - 23:46:43 ---A- . (.Ploytec GmbH - USB-Audio WDM Adapter.) -- C:\Windows\System32\Drivers\psabusba.sys [40568]
O58 - SDL:[MD5.ED7F742B0EACF745AFB5B2FE5BAEC618] - 2014-02-16 - 23:46:43 ---A- . (.Ploytec GmbH - Ploytec WDM MIDI Driver.) -- C:\Windows\System32\Drivers\psabusbm.sys [31864]
O58 - SDL:[MD5.DD02C038C7A24DD23AAA75595BEC80BA] - 2014-02-16 - 23:46:43 ---A- . (.Ploytec GmbH - Ploytec USB Audio driver.) -- C:\Windows\System32\Drivers\psabusbu.sys [401016]
O58 - SDL:[MD5.A36EE93698802CD899F98BFD553D8185] - 2013-07-08 - 13:59:58 ---A- . (.Avira GmbH - AVIRA SnapShot Driver.) -- C:\Windows\System32\Drivers\ssmdrv.sys [28520]
O58 - SDL:[MD5.DB32D325C192B801DF274BFD12A7E72B] - 2009-07-13 - 20:19:04 ---A- . (.Promise Technology - Promise SuperTrak EX Series Driver for Windows.) -- C:\Windows\System32\Drivers\stexstor.sys [21072]
O58 - SDL:[MD5.8AAD333C876590293F72B315E162BCC7] - 2009-07-13 - 16:40:41 ---A- . (...) -- C:\Windows\System32\ANSI.SYS [9029]
O58 - SDL:[MD5.0FE9F16075C9ACB941C957B7C649176E] - 2009-07-13 - 16:40:44 ---A- . (...) -- C:\Windows\System32\country.sys [27097]
O58 - SDL:[MD5.E6BC0F98FECEF245A0010D350C1A0B9B] - 2009-07-13 - 16:40:40 ---A- . (...) -- C:\Windows\System32\HIMEM.SYS [4768]
O58 - SDL:[MD5.492090267B9608C62B956CD29BE3AFB7] - 2009-07-13 - 16:40:43 ---A- . (...) -- C:\Windows\System32\KEY01.SYS [42809]
O58 - SDL:[MD5.FBBCFEC1379C5C02D88A361993EDF1B8] - 2009-07-13 - 16:40:43 ---A- . (...) -- C:\Windows\System32\KEYBOARD.SYS [42537]
O58 - SDL:[MD5.FFFF296A08DBF2AC0126C62E3778AC0D] - 2009-07-13 - 16:40:23 ---A- . (...) -- C:\Windows\System32\NTDOS.SYS [27866]
O58 - SDL:[MD5.CF9ED169FF86D935E47999E82359E898] - 2009-07-13 - 16:40:31 ---A- . (...) -- C:\Windows\System32\NTDOS404.SYS [29146]
O58 - SDL:[MD5.03B945AC0481CD8BB161C3569D8ED1C3] - 2009-07-13 - 16:40:35 ---A- . (...) -- C:\Windows\System32\NTDOS411.SYS [29370]
O58 - SDL:[MD5.BBC957DC18C17CC027EB80B7C77F2AEA] - 2009-07-13 - 16:40:39 ---A- . (...) -- C:\Windows\System32\NTDOS412.SYS [29274]
O58 - SDL:[MD5.3CFFAEFFF23B0D208214A6D3061A5B1B] - 2009-07-13 - 16:40:27 ---A- . (...) -- C:\Windows\System32\NTDOS804.SYS [29146]
O58 - SDL:[MD5.2E4112FB7D1B76E11ADFD7487B5D0E95] - 2009-07-13 - 16:40:11 ---A- . (...) -- C:\Windows\System32\NTIO.SYS [33952]
O58 - SDL:[MD5.A98EBD4C2DF983665BF2D1AF49949974] - 2009-07-13 - 16:40:15 ---A- . (...) -- C:\Windows\System32\NTIO404.SYS [34672]
O58 - SDL:[MD5.3F7E6406EDEF197C5CAAB2240EEF6F48] - 2009-07-13 - 16:40:17 ---A- . (...) -- C:\Windows\System32\NTIO411.SYS [35776]
O58 - SDL:[MD5.3E64D681B776CC57BDC38A46D881F85B] - 2009-07-13 - 16:40:19 ---A- . (...) -- C:\Windows\System32\NTIO412.SYS [35536]
O58 - SDL:[MD5.D86B6435729231C171432B4E77801BDB] - 2009-07-13 - 16:40:13 ---A- . (...) -- C:\Windows\System32\NTIO804.SYS [34672]
~ Drivers: 14 Legitimates Filtered in 00mn 01s
---\\ Liste des outils de désinfection (LATC) (O63)
O63 - Logiciel: UsbFix - (.El Desaparecido - www.usbfix.net - www.sosvirus.net.) [HKLM] -- Usbfix
O63 - Logiciel: ZHPDiag 2014 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 =>.Nicolas Coolman
~ ADS: Scanned in 00mn 00s
---\\ Menu de démarrage Internet (SMI) (O68)
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
~ Keys: Scanned in 00mn 00s
---\\ Recherche particulière à la racine du système (SPRF) (O84)
[MD5.0A170D9B50B29C5209248D95417C16DA] [SPRF][2014-02-18] (...) -- C:\Users\danielle\Desktop\rsthosts.exe [353632]
[MD5.4950EE1C78FC55390998A755F5866F3E] [SPRF][2014-02-17] (.Pas de propriétaire - Shortcut_Module.) -- C:\Users\danielle\Desktop\Shortcut_Module.exe [1707008]
~ Files: 4 Legitimates Filtered in 00mn 00s
---\\ Liste des exceptions du parefeu (FirewallRules) (O87)
O87 - FAEL: "{35375935-046B-4938-8249-78DE242734FD}" | In - None - P17 - TRUE | .(...) -- C:\Program Files\HTC\HTC Sync Manager\HTCSyncManager.exe
~ Firewall: 199 Legitimates Filtered in 00mn 01s
---\\ Enumère les codes produits des logiciels (PUC) (O90)
O90 - PUC: "6C64EFF65F5C009409D46F0F42A12051" . (.EZdrummer Lite Plus 32 bit.) -- C:\Windows\Installer\{6FFE46C6-C5F5-4900-904D-F6F0241A0215}\ARPPRODUCTICON.exe
~ Update Products: 74 Legitimates Filtered in 00mn 00s
---\\ Recherche des packages WindowsInstaller (WIS) (O93) (NTFS)
[MD5.A3AEEC9A9B6984F2E22B90FDC9A23AB8] [WIS][2013-11-30] (.Skype Technologies S.A. - Skype.) -- C:\Windows\Installer\32885.msi [24993792]
~ WIS: 75 Legitimates Filtered in 00mn 10s
---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)
SS - | Disabled 2013-12-19 1011768 | (AntiVirWebService) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.exe
SS - | Demand 2007-09-17 800040 | (NBService) . (.Nero AG.) - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
SS - | Demand 2007-06-27 279848 | (NMIndexingService) . (.Nero AG.) - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
SS - | Auto 2013-09-05 171680 | (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files\Skype\Updater\Updater.exe
SS - | Demand 2009-07-13 20992 | C:\Program Files\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
SR - | Auto 2013-12-21 65432 | (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
SR - | Auto 2013-12-19 440376 | (AntiVirSchedulerService) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files\Avira\AntiVir Desktop\sched.exe
SR - | Auto 2013-11-27 440376 | (AntiVirService) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
SR - | Auto 2013-11-10 87368 | (HTCMonitorService) . (.Nero AG.) - C:\Program Files\HTC\HTC Sync Manager\HSMServiceEntry.exe
SR - | Auto 2011-03-04 73728 | (LightScribeService) . (.Hewlett-Packard Company.) - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
SR - | Auto 2008-07-26 186904 | (LVCOMSer) . (.Logitech Inc..) - C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
SR - | Auto 2008-07-26 150040 | (LVPrcSrv) . (.Logitech Inc..) - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
SR - | Auto 2013-04-04 418376 | (MBAMScheduler) . (.Malwarebytes Corporation.) - C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
SR - | Auto 2013-04-04 701512 | (MBAMService) . (.Malwarebytes Corporation.) - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
SR - | Auto 2012-07-13 769432 | (NAUpdate) . (.Nero AG.) - C:\Program Files\Nero\Update\NASvc.exe
SR - | Auto 2012-12-07 167424 | (PassThru Service) . (...) - C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe
SR - | Auto 2009-07-13 20992 | C:\Windows\system32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
~ Services: Scanned in 00mn 11s
---\\ Scan Additionnel (O88)
Database Version : 13031 - (2014-02-23)
Clés trouvées (Keys found) : 0
Valeurs trouvées (Values found) : 0
Dossiers trouvés (Folders found) : 0
Fichiers trouvés (Files found) : 0
~ Additionnel Scan: 324107 Items scanned in 00mn 35s
~ 906 Legitimates filtered by white list
End of the scan (396 lines in 03mn 01s)(0)
lilidurhone
Messages postés
43347
Date d'inscription
lundi 25 avril 2011
Statut
Contributeur sécurité
Dernière intervention
31 octobre 2024
3 807
26 févr. 2014 à 07:55
26 févr. 2014 à 07:55
Ie pas à jour
Vérifie au niveau de Windows update si il n'y aurait pas de mise à jour
Vérifie au niveau de Windows update si il n'y aurait pas de mise à jour
j ai essayer de le metre a jour mais ca jamais fonctionner . j ai essayer plusieur fois. mais je me sert jamais explorer seulement de google crome