gene_sixx | Code :
- ---\\ Navigateurs Internet
- MSIE: Internet Explorer v11.0.9600.16476
- MFIE: Mozilla Firefox 26.0 (Defaut)
- ---\\ Informations sur les produits Windows
- ~ Langage: Français
- Windows 7 Professional, 64-bit Service Pack 1 (Build 7601)
- Windows Server License Manager Script : OK
- ~ Windows(R) 7, OEM_SLP channel
- System Locked Preinstallation (OEM_SLP) : OK
- Windows ID Activation : OK
- ~ Windows Partial Key : PV9HW
- Windows License : OK
- ~ Windows Remaining Initializations Number : 3
- Software Protection Service (Protection logicielle) : OK
- Windows Automatic Updates : OK
- Windows Activation Technologies : OK
- ---\\ Logiciels de protection du système
- avast! Free Antivirus v9.0.2011
- Windows Defender W7
- ---\\ Logiciels d'optimisation du système
- CCleaner v4.09 =>Piriform Ltd
- ---\\ Logiciels de partage PeerToPeer
- ---\\ Surveillance de Logiciels
- Adobe Flash Player 12 Plugin
- Java 7 Update 51
- ---\\ Informations sur le système
- ~ Processor: Intel64 Family 6 Model 42 Stepping 7, GenuineIntel
- ~ Operating System: 64 Bits
- Boot mode: Normal (Normal boot)
- Total RAM: 8141 MB (81% free)
- System Restore: Activé (Enable)
- System drive C: has 88 GB (79%) free of 112 GB
- ---\\ Mode de connexion au système
- ~ Computer Name: ERWAN-PC
- ~ User Name: Erwan
- ~ All Users Names: Erwan, Administrateur,
- ~ Unselected Option: None
- Logged in as Administrator
- ---\\ Variables d'environnement
- ~ System Unit : C:\
- ~ %AppZHP% : C:\Users\Erwan\AppData\Roaming\ZHP\
- ~ %AppData% : C:\Users\Erwan\AppData\Roaming\
- ~ %Desktop% : C:\Users\Erwan\Desktop\
- ~ %Favorites% : C:\Users\Erwan\Favorites\
- ~ %LocalAppData% : C:\Users\Erwan\AppData\Local\
- ~ %StartMenu% : C:\Users\Erwan\AppData\Roaming\Microsoft\Windows\Start Menu\
- ~ %Windir% : C:\Windows\
- ~ %System% : C:\Windows\System32\
- ---\\ Enumération des unités disques
- C: Hard drive, Flash drive, Thumb drive (Free 88 Go of 112 Go)
- D: Hard drive, Flash drive, Thumb drive (Free 412 Go of 466 Go)
- E: Hard drive, Flash drive, Thumb drive (Free 385 Go of 466 Go)
- F: Hard drive, Flash drive, Thumb drive (Free 243 Go of 298 Go)
- G: CD-ROM drive (Free 0 Go of 0 Go)
- I: Hard drive, Flash drive, Thumb drive (Free 217 Go of 466 Go)
- ---\\ Etat du Centre de Sécurité Windows
- [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
- ~ Security Center: 41 Legitimates Filtered in 00mn 00s
- ---\\ Recherche particulière de fichiers génériques
- [MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorateur Windows.) (.25/02/2011 - 07:19:30.) -- C:\Windows\Explorer.exe [2871808]
- [MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 - 02:39:52.) -- C:\Windows\System32\Wininit.exe [129024]
- [MD5.9B6678DB9C6A232C5A84D2FDFFF8B0E1] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.26/11/2013 - 08:07:57.) -- C:\Windows\System32\wininet.dll [2334208]
- [MD5.1151B1BAA6F350B1DB6598E0FEA7C457] - (.Microsoft Corporation - Application d’ouverture de session Windows.) (.21/11/2010 - 04:24:29.) -- C:\Windows\System32\Winlogon.exe [390656]
- [MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Bibliothèque de licences.) (.21/11/2010 - 04:24:16.) -- C:\Windows\System32\sppcomapi.dll [232448]
- [MD5.79059559E89D06E8B80CE2944BE20228] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.28/09/2013 - 02:09:10.) -- C:\Windows\system32\Drivers\AFD.sys [497152]
- [MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 - 02:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128]
- [MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/07/2009 - 00:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160]
- [MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.21/11/2010 - 04:23:47.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456]
- [MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.21/11/2010 - 04:24:32.) -- C:\Windows\system32\Drivers\DfsC.sys [102400]
- [MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.21/11/2010 - 04:23:47.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368]
- [MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) (.14/07/2009 - 00:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472]
- [MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.14/07/2009 - 01:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224]
- [MD5.A5D9106A73DC88564C825D317CAC68AC] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.27/04/2011 - 03:40:40.) -- C:\Windows\system32\Drivers\MRxSmb.sys [158208]
- [MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) (.21/11/2010 - 04:23:51.) -- C:\Windows\system32\Drivers\netBT.sys [261632]
- [MD5.B98F8C6E31CD07B2E6F71F7F648E38C0] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.12/04/2013 - 15:45:08.) -- C:\Windows\system32\Drivers\ntfs.sys [1656680]
- [MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/07/2009 - 01:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280]
- [MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.21/11/2010 - 04:24:33.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [129536]
- [MD5.1B6163C503398B23FF8B939C67747683] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.21/11/2010 - 04:25:07.) -- C:\Windows\system32\Drivers\rdpdr.sys [165888]
- [MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.14/07/2009 - 01:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184]
- [MD5.DDAD5A7AB24D8B65F8D724F5C20FD806] - (.Microsoft Corporation - TDI Translation Driver.) (.21/11/2010 - 04:24:32.) -- C:\Windows\system32\Drivers\tdx.sys [119296]
- [MD5.0D08D2F3B3FF84E433346669B5E0F639] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.21/11/2010 - 04:23:47.) -- C:\Windows\system32\Drivers\volsnap.sys [295808]
- ~ Generic Processes: Scanned in 00mn 00s
- ---\\ Etat des fichiers cachés (Caché/Total)
- ~ Mes Favoris (My Favorites) : 1/24
- ~ Mes Documents (My Documents) : 1/5
- ~ Mon Bureau (My Desktop) : 1/21
- ~ Menu demarrer (Programs) : 1/29
- ~ Hidden Files: Scanned in 00mn 00s
- ---\\ Processus lancés
- [MD5.BD3FDE4D22288C28C41DDB2E4560DD1D] - (...) -- C:\Program Files\Plantronics\GameCom780\GameCom780.exe [776480] [PID.2116]
- [MD5.58920E6A409046BA06548D9D139CE0F0] - (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe [20584608] [PID.2180]
- [MD5.8A9000B08E010C44B54D6421FE49A488] - (.Electronic Arts - Origin.) -- C:\Program Files (x86)\Origin\Origin.exe [3551576] [PID.2240]
- [MD5.AFEBF9E0B223FF04709F747C172D3540] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe [3764024] [PID.2744]
- [MD5.5B6E8E09BE6401A7E022F52FDFCB2FF8] - (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336] [PID.2792]
- [MD5.1EEA6C1B35191DC177EA83672B9C3FC0] - (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe [275568] [PID.3216]
- [MD5.8E5651B04BE775696B32F7F1F5DA8871] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [8336896] [PID.4296]
- [MD5.246FE58EFFD357B2078842708155E46C] - (...) -- C:\Users\Erwan\Downloads\AdwCleaner(1).exe [1236282] [PID.4912]
- [MD5.67A95B9D129ED5399E7965CD09CF30E7] - (.Logitech Inc. - Logitech User mode UMVPF service.) -- C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe [450848] [PID.340]
- [MD5.D74884939D53612FD84AC82C59CCFE27] - (.AVAST Software - avast! Service.) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344] [PID.1344]
- [MD5.3A2BDD76E7D2A5F40A7174793D1BA794] - (...) -- C:\Windows\SysWOW64\PnkBstrA.exe [75136] [PID.1888]
- [MD5.27F1BE4A53441C9F1F48B9ADC145B0A5] - (...) -- C:\Windows\SysWOW64\PnkBstrB.exe [189248] [PID.1920]
- [MD5.50D9949020E02B847CD48F1243FCB895] - (.Skype Technologies - Skype Updater Service.) -- C:\Program Files (x86)\Skype\Updater\Updater.exe [172192] [PID.1984]
- ~ Processes Running: Scanned in 00mn 00s
- ---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
- C:\Users\Erwan\AppData\Local\Google\Chrome\User Data\Default\Preferences
- G2 - GCE: Preference [User Data\Default] [necpilfaaahddpabkhmlgnchfkcmcoop] JVWall v.1.0.6 (Désactivé)
- G2 - GCE: Preference [User Data\Default] [nkeimhogjdpnpccoofpliimaahmaaome] Hangout Services v.1.0 (Activé)
- ~ Google Browser: 22 Legitimates Filtered in 00mn 01s
- ---\\ Internet Explorer, Proxy Management (R5)
- R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
- R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
- R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
- R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
- R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
- ~ Proxy management: Scanned in 00mn 00s
- ---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
- F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
- F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
- F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
- ~ Keys: Scanned in 00mn 00s
- ---\\ Hosts file redirection (O1)
- ~ Le fichier hosts est sain (The hosts file is clean).
- ~ Hosts File: Scanned in 00mn 00s
- ~ Nombre de lignes (Lines number): 21
- ---\\ Internet Explorer Toolbars (O3)
- O3 - Toolbar: avast! Online Security - [HKLM]{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} . (.AVAST Software - IE Webrep plugin.) -- C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll
- ~ Toolbar: Scanned in 00mn 00s
- ---\\ Autres liens utilisateurs (O4)
- O4 - GS\Desktop [Public]: Battle.net.lnk . (.Blizzard Entertainment - Battle.net Setup.) -- C:\Program Files (x86)\Battle.net\Battle.net Launcher.exe
- O4 - GS\Desktop [Public]: Battlefield 3.lnk . (.EA Digital Illusions CE AB - Battlefield 3™.) -- I:\Origin\Battlefield 3\bf3.exe
- O4 - GS\Desktop [Public]: Battlefield 4(64 bit).lnk . (.EA Digital Illusions CE AB - Battlefield 4™.) -- I:\Origin\Battlefield 4\bf4.exe
- O4 - GS\Desktop [Public]: Battlefield 4.lnk . (.EA Digital Illusions CE AB - Battlefield 4™.) -- I:\Origin\Battlefield 4\bf4_x86.exe
- O4 - GS\Desktop [Public]: CASIO FA-124.lnk . (.CASIO COMPUTER CO., LTD - FA-124.) -- C:\Program Files (x86)\CASIO\CASIO FA-124\FA124.exe
- O4 - GS\Desktop [Public]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
- O4 - GS\Program [Public]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
- O4 - GS\QuickLaunch [Erwan]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
- O4 - GS\QuickLaunch [Erwan]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) -- C:\Users\Erwan\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent
- O4 - GS\TaskBar [Erwan]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
- O4 - GS\TaskBar [Erwan]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
- O4 - GS\Program [Erwan]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
- O4 - GS\SystemTools [Erwan]: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
- ~ Global Startup: 58 Legitimates Filtered in 00mn 00s
- ---\\ Applications lancées au démarrage du sytème (O4)
- O4 - HKLM\..\Run: [GamecomSound] . (...) -- C:\Program Files\Plantronics\GameCom780\GameCom780.exe
- O4 - HKCU\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe =>.Skype Technologies S.A.
- O4 - HKCU\..\Run: [EADM] . (.Electronic Arts - Origin.) -- C:\Program Files (x86)\Origin\Origin.exe
- O4 - HKLM\..\Wow6432Node\Run: [AvastUI.exe] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
- O4 - HKLM\..\Wow6432Node\Run: [StartCCC] . (.Advanced Micro Devices, Inc. - Catalyst® Control Center Launcher.) -- C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe =>.Advanced Micro Devices, Inc
- O4 - HKLM\..\Wow6432Node\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe =>.Oracle Corporation
- O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation
- O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation
- O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation
- O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation
- O4 - HKUS\S-1-5-21-2782851875-1459314498-3325840986-1000\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe =>.Skype Technologies S.A.
- O4 - HKUS\S-1-5-21-2782851875-1459314498-3325840986-1000\..\Run: [EADM] . (.Electronic Arts - Origin.) -- C:\Program Files (x86)\Origin\Origin.exe
- ~ Application: Scanned in 00mn 00s
- ---\\ Modification Domaine/Adresses DNS (O17)
- O17 - HKLM\System\CCS\Services\Tcpip\..\{B8787579-3C46-4FEB-B84B-3F756560CC4A}: DhcpNameServer = 89.2.0.1 89.2.0.2
- O17 - HKLM\System\CS1\Services\Tcpip\..\{B8787579-3C46-4FEB-B84B-3F756560CC4A}: DhcpNameServer = 89.2.0.1 89.2.0.2
- O17 - HKLM\System\CS2\Services\Tcpip\..\{B8787579-3C46-4FEB-B84B-3F756560CC4A}: DhcpNameServer = 89.2.0.1 89.2.0.2
- O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 89.2.0.1 89.2.0.2
- ~ Domain: Scanned in 00mn 00s
- ---\\ Protocole additionnel (O18)
- O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation
- O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation
- ~ Protocole Additionnel: Scanned in 00mn 00s
- ---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
- O44 - LFC:[MD5.A8D7AA59C8F09E6F9C17D9517A18379E] - 16/01/2014 - 18:07:57 ---A- . (...) -- C:\Windows\System32\lvcoinst.log [4403]
- O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 16/01/2014 - 18:41:45 ---A- . (...) -- C:\Windows\ativpsrm.bin [0]
- O44 - LFC:[MD5.C53D51B1C28E96E6273406BD205200C8] - 16/01/2014 - 19:14:57 ---A- . (...) -- C:\Windows\IE9_main.log [4135]
- O44 - LFC:[MD5.58D25A33501048567C58D0BF80455838] - 16/01/2014 - 19:22:06 ---A- . (...) -- C:\Windows\IE10_main.log [10332]
- O44 - LFC:[MD5.F862CD08F1AD4EE39BD506853F3C6103] - 16/01/2014 - 19:32:54 ---A- . (...) -- C:\Windows\System32\ieuinit.inf [16284]
- O44 - LFC:[MD5.448482DCBFBB33CE2CD04466B31521A5] - 16/01/2014 - 19:37:26 ---A- . (...) -- C:\Windows\IE11_main.log [11126]
- O44 - LFC:[MD5.44718D447A6207E6EA568FEA86B6FAC7] - 18/01/2014 - 12:22:34 ---A- . (...) -- C:\Windows\DirectX.log [27522]
- O44 - LFC:[MD5.2F18CB5DF111FF42160A8E2F646548F1] - 19/01/2014 - 17:35:14 ---A- . (...) -- C:\Windows\DPINST.LOG [4194]
- O44 - LFC:[MD5.17B75C3577675C8716EFBED591E839DB] - 19/01/2014 - 17:37:06 ----- . (...) -- C:\Windows\PLTGC.ini [498]
- O44 - LFC:[MD5.50E206CDA501D9E64211F4FF43680185] - 19/01/2014 - 17:37:06 ----- . (...) -- C:\Windows\PLTGC.ini.cfg [3449]
- O44 - LFC:[MD5.12A28C59A47D3968249EB781C0D9F989] - 19/01/2014 - 17:37:06 ----- . (.Pas de propriétaire - Vista Driver Installer.) -- C:\Windows\System32\CmiInstallResAll64.dll [365856]
- O44 - LFC:[MD5.AD69ED46F605F53CC411F9B9C149BC36] - 19/01/2014 - 17:37:11 ----- . (...) -- C:\Windows\GameCom780.ico [14846]
- O44 - LFC:[MD5.26733FFC573E37C9F557C93FD0BC449F] - 19/01/2014 - 17:37:11 ----- . (.Pas de propriétaire - Vista Driver Installer.) -- C:\Windows\System32\PLTGC.exe [812320]
- O44 - LFC:[MD5.918CDFFE6FF54DABB6F7F4BD26693B8C] - 19/01/2014 - 17:37:11 ---A- . (...) -- C:\Windows\PLTGC.ini.imi [712]
- O44 - LFC:[MD5.3715667E71D92DD79876E60EE9294C6C] - 19/01/2014 - 17:37:12 ---A- . (...) -- C:\Windows\PLTGC.ini.cfl [331]
- ~ Files: 483 Legitimates Filtered in 00mn 02s
- ---\\ Enumération des clés de registre PoliciesSystem (MWPS) (O55)
- O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
- O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
- ~ MWPS: 16 Legitimates Filtered in 00mn 00s
- ---\\ Enumération des clés de registre PoliciesExplorer (MWPE) (O56)
- O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1
- ~ MWPE Keys: 3 Legitimates Filtered in 00mn 00s
- ---\\ Liste des pilotes du système (SDL) (O58)
- O58 - SDL:[MD5.C04F7B373881009D7994D9BF55D24AB4] - 16/01/2014 - 17:47:42 ---A- . (...) -- C:\Windows\System32\Drivers\aswRvrt.sys [65776]
- O58 - SDL:[MD5.90399625F341AB76BA4B85A5E860EB1F] - 16/01/2014 - 17:47:42 ---A- . (...) -- C:\Windows\System32\Drivers\aswVmm.sys [207904]
- O58 - SDL:[MD5.0E5DA5369A0FCAEA12456DD852545184] - 14/07/2009 - 02:47:48 ---A- . (.Emulex - Storport Miniport Driver for LightPulse HBAs.) -- C:\Windows\System32\Drivers\elxstor.sys [530496]
- O58 - SDL:[MD5.F2523EF6460FC42405B12248338AB2F0] - 10/06/2009 - 21:31:59 ---A- . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for eHome.) -- C:\Windows\System32\Drivers\hcw85cir.sys [31232]
- O58 - SDL:[MD5.542D7B8CD0487DB1C5EEA7E46BB9F1C1] - 07/02/2013 - 15:18:14 ---A- . (.C-Media Electronics Inc - C-Media Audio WDM Driver.) -- C:\Windows\System32\Drivers\PLTGC.sys [1328128]
- O58 - SDL:[MD5.F3817967ED533D08327DC73BC4D5542A] - 14/07/2009 - 02:45:55 ---A- . (.Promise Technology - Promise SuperTrak EX Series Driver for Windows.) -- C:\Windows\System32\Drivers\stexstor.sys [24656]
- ~ Drivers: 16 Legitimates Filtered in 00mn 00s
- ---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61)
- O61 - LFC: 19/01/2014 - 16:53:49 ---A- . (...) -- C:\Users\Erwan\AppData\Local\GDIPFONTCACHEV1.DAT [58800]
- O61 - LFC: 19/01/2014 - 16:53:51 ---A- . (...) -- C:\Users\Erwan\Documents\CASIO\FA-124\Default.g1s [4194304]
- O61 - LFC: 19/01/2014 - 16:53:51 ---A- . (...) -- C:\Users\Erwan\Documents\CASIO\FA-124\Default.g2r [1196]
- O61 - LFC: 19/01/2014 - 16:53:51 ---A- . (...) -- C:\Users\Erwan\Downloads\Plantronics_GC780_Installer_Release_4.exe [30190936]
- O61 - LFC: 19/01/2014 - 16:53:51 ---A- . (...) -- C:\Users\Erwan\Downloads\occt_4-4-0_fr_133762.exe [6891341]
- O61 - LFC: 19/01/2014 - 16:53:51 ---A- . (...) -- C:\Users\Erwan\Downloads\uPlay Unlocked Profile.rar [345463]
- O61 - LFC: 19/01/2014 - 16:53:51 R--A- . (...) -- C:\Users\Erwan\Downloads\Blue.Bloods.S02E09.FRENCH.LD.DVDRip.XviD-JMT\Blue.Bloods.S02E09.FRENCH.LD.DVDRip.XviD-JMT.nfo [5828]
- O61 - LFC: 19/01/2014 - 16:53:51 R--A- . (...) -- C:\Users\Erwan\Downloads\ROCKSMITH 2014 CRACK ONLY DLC FIX fomindir.in {-uSt-}\uplay_r1_loader.dll [145408]
- O61 - LFC: 20/01/2014 - 16:53:49 ---A- . (...) -- C:\Users\Erwan\AppData\Local\Blizzard Entertainment\System Survey\ProductData\WoW\Game.index [352]
- O61 - LFC: 20/01/2014 - 16:53:49 ---A- . (...) -- C:\Users\Erwan\AppData\Local\Blizzard Entertainment\System Survey\ProductData\WoW\Game\addons.json [4]
- O61 - LFC: 20/01/2014 - 16:53:49 ---A- . (...) -- C:\Users\Erwan\AppData\Local\Blizzard Entertainment\System Survey\ProductData\WoW\Game\vars.json [6175]
- O61 - LFC: 21/01/2014 - 16:53:51 ---A- . (...) -- C:\Users\Erwan\AppData\Roaming\ZHP\Log.txt [34853] =>.Nicolas Coolman
- O61 - LFC: 21/01/2014 - 16:53:51 ---A- . (...) -- C:\Users\Erwan\AppData\Roaming\ZHP\TestsZHPDiag.txt [2852] =>.Nicolas Coolman
- O61 - LFC: 21/01/2014 - 16:53:51 ---A- . (...) -- C:\Users\Erwan\AppData\Roaming\ZHP\ZHPDiag.txt [23982] =>.Nicolas Coolman
- O61 - LFC: 21/01/2014 - 16:53:51 ---A- . (...) -- C:\Users\Erwan\Downloads\AdwCleaner(1).exe [1236282]
- O61 - LFC: 21/01/2014 - 16:53:51 ---A- . (...) -- C:\Users\Erwan\Downloads\AdwCleaner.exe [1236282]
- O61 - LFC: 21/01/2014 - 16:53:51 ---A- . (...) -- C:\Users\Erwan\Downloads\RogueKiller-8.8.2.exe [3809280]
- ~ 129 Fichiers temporaires (Temporary files)
- ~ Files: 262 Legitimates Filtered in 00mn 02s
- ---\\ Liste des outils de désinfection (LATC) (O63)
- O63 - Logiciel: ZHPDiag 2014 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 =>.Nicolas Coolman
- ~ ADS: Scanned in 00mn 00s
- ---\\ Liste les services legacy du registre (LALS) (O64)
- O64 - Services: CurCS - 06/12/2013 - C:\Windows\System32\DRIVERS\atikmdag.sys (amdkmdag) .(.Advanced Micro Devices, Inc. - ATI Radeon Kernel Mode Driver.) - LEGACY_AMDKMDAG
- O64 - Services: CurCS - 10/06/2009 - C:\Windows\System32\Drivers\secdrv.sys (secdrv) .(.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) - LEGACY_SECDRV
- ~ Legacy: 115 Legitimates Filtered in 00mn 00s
- ---\\ Menu de démarrage Internet (SMI) (O68)
- O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
- O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
- ~ Keys: Scanned in 00mn 00s
- ---\\ Recherche d'infection sur les navigateurs internet (SBI) (O69)
- O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - http://www.bing.com
- ~ Keys: Scanned in 00mn 00s
- ---\\ Recherche particulière à la racine du système (SPRF) (O84)
- [MD5.23F34D9134D444452EC91F1B80A64718] [SPRF][16/01/2014] (...) -- C:\Users\Erwan\AppData\Local\Temp\npp.6.5.2.Installer.exe [7549839]
- [MD5.3DF9C822FFD4245403113A555A27357F] [SPRF][12/01/2014] (...) -- C:\Users\Erwan\AppData\Local\Temp\Quarantine.exe [360073]
- [MD5.F467645711172ECA7FCE253824A09179] [SPRF][03/11/2011] (...) -- C:\Users\Erwan\AppData\Local\Temp\sonarinst.exe [1786688]
- [MD5.887173F53072CD2D238014F4199B35CF] [SPRF][02/11/2012] (...) -- C:\Users\Erwan\AppData\Local\Temp\xmlUpdater.exe [118784]
- [MD5.935D33F872E547BA608B097FF35B301D] [SPRF][02/04/2013] (...) -- C:\Users\Erwan\Desktop\RStransfer 2.1.exe [727483]
- ~ Files: 8 Legitimates Filtered in 00mn 00s
- ---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)
- SS - | Demand 17/01/2014 257928 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
- SS - | Demand 05/12/2013 119408 | (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
- SS - | Demand 07/01/2014 569768 | (Steam Client Service) . (.Valve Corporation.) - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
- SS - | Auto 14/07/2009 27136 | C:\Program Files (x86)\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
- SS - | Auto 14/07/2009 27136 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
- SR - | Auto 06/12/2013 239616 | (AMD External Events Utility) . (.AMD.) - C:\Windows\System32\atiesrxx.exe
- SR - | Auto 16/01/2014 50344 | (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
- SR - | Auto 10/07/1658 0 | (PnkBstrA) . (...) - C:\Windows\system32\PnkBstrA.exe
- SR - | Auto 10/07/1658 0 | (PnkBstrB) . (...) - C:\Windows\system32\PnkBstrB.exe
- SR - | Auto 23/10/2013 172192 | (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe
- SR - | Auto 18/01/2012 450848 | (UMVPFSrv) . (.Logitech Inc..) - C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
- SR - | Demand 10/07/1658 0 | (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe =>.Microsoft Corporation
- ~ Services: Scanned in 00mn 01s
- ---\\ Recherche d'infection sur le Master Boot Record (MBR)(O80)
- Run by Erwan at 21/01/2014 16:54:12
- ~ OS 64 not supported by MBR tool
- ~ MBR: 0 Legitimates Filtered in 00mn 00s
- ---\\ Recherche d'infection sur le Master Boot Record (MBRCheck)(O80)
- Written by ad13, http://ad13.geekstog
- Run by Erwan at 21/01/2014 16:54:14
- ********* Dump file Name *********
- C:\PhysicalDisk0_MBR.bin
- ~ MBR: Scanned in 00mn 02s
- ---\\ Scan Additionnel (O88)
- Database Version : 13024 - (17/01/2014)
- Clés trouvées (Keys found) : 0
- Valeurs trouvées (Values found) : 1
- Dossiers trouvés (Folders found) : 0
- Fichiers trouvés (Files found) : 2
- C:\Users\Erwan\AppData\Local\Temp\GoogleToolbarInstaller1.log =>PUP.Babylon
- C:\Users\Erwan\AppData\Local\Temp\GoogleToolbarInstaller2.log =>PUP.Babylon
- ~ Additionnel Scan: 149683 Items scanned in 00mn 12s
- ---\\ Récapitulatif des détections trouvées sur votre station
- ~ http://nicolascoolman.webs.com/app [...] ylon =>PUP.Babylon
- ~ MSI: 1 link(s) detected in 00mn 12s
|
Voilà le Zhpdiag |