Donc voici le rapport ZHPDiag :
~ Rapport de ZHPDiag v2014.11.19.165 - Nicolas Coolman (19/11/2014)
~ Lancé par Arnaud_2 (22/11/2014 13:57:48)
~ Facebook : https://www.facebook.com/nicolascoolman1
~ Adresse du Forum http://forum.nicolascoolman.fr
~ Traduit par Nicolas Coolman
~ Etat de la version : Version à jour.
~ Liste blanche : Activée par le programme
~ Elévation des Privilèges : OK
~ User Account Control (UAC): Activate by user
---\\ Navigateurs Internet
MSIE: Internet Explorer v11.0.9600.17420
MFIE: Mozilla Firefox 33.0 (Defaut)
---\\ Informations sur les produits Windows
~ Langage: Français
Windows 7 Home Premium, 64-bit Service Pack 1 (Build 7601)
Windows Server License Manager Script : OK
~ Windows Operating System - Windows(R) 7, OEM_SLP channel
System Locked Preinstallation (OEM_SLP) : OK
Windows ID Activation : OK
~ Windows Partial Key : 3Q6C9
Windows License : OK
~ Windows Remaining Initializations Number : 1
Software Protection Service (Protection logicielle) : OK
Windows Automatic Updates : OK
Windows Activation Technologies : OK
---\\ Logiciels de protection du système
Avast Free Antivirus v10.0.2208
McAfee Security Scan Plus v3.0.318.3
Windows Defender W7 (Activate)
---\\ Logiciels d'optimisation du système
CCleaner v3.23
---\\ Logiciels de partage PeerToPeer
µTorrent v3.2.1.28086 =>P2P.µTorrent
---\\ Surveillance de Logiciels
Adobe Flash Player 15 Plugin
---\\ Informations sur le système
~ Processor: Intel64 Family 6 Model 42 Stepping 7, GenuineIntel
~ Operating System: 64 Bits
Boot mode: Normal (Normal boot)
Total RAM: 4076 MB (47% free)
System Restore: Activé (Enable)
System drive C: has 594 GB (64%) free of 918 GB
---\\ Mode de connexion au système
~ Computer Name: ARNAUD-HP
~ User Name: Arnaud_2
~ All Users Names: HomeGroupUser$, Arnaud_2, Administrateur,
~ Unselected Option: O45,O61,O62,O65,O66,O80,O82,O89
Logged in as Administrator
---\\ Variables d'environnement
~ System Unit : C:\
~ %AppZHP% : C:\Users\Arnaud_2\AppData\Roaming\ZHP\
~ %AppData% : C:\Users\Arnaud_2\AppData\Roaming\
~ %Desktop% : C:\Users\Arnaud_2\Desktop\
~ %Favorites% : C:\Users\Arnaud_2\Favorites\
~ %LocalAppData% : C:\Users\Arnaud_2\AppData\Local\
~ %StartMenu% : C:\Users\Arnaud_2\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\
---\\ Enumération des unités disques
C: Hard drive, Flash drive, Thumb drive (Free 594 Go of 918 Go)
D: Hard drive, Flash drive, Thumb drive (Free 2 Go of 13 Go)
E: CD-ROM drive (Not Inserted)
F: Floppy drive, Flash card reader, USB Key (Not Inserted)
G: Floppy drive, Flash card reader, USB Key (Not Inserted)
H: Floppy drive, Flash card reader, USB Key (Not Inserted)
I: Floppy drive, Flash card reader, USB Key (Not Inserted)
J: CD-ROM drive (Not Inserted)
---\\ Etat du Centre de Sécurité Windows
~ Security Center: 41 Legitimates Filtered in 00mn 00s
---\\ Recherche particulière de fichiers génériques
[MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorateur Windows.) (.24/11/2011 - 16:11:40.) -- C:\Windows\Explorer.exe [2871808]
[MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 - 02:39:52.) -- C:\Windows\System32\Wininit.exe [129024]
[MD5.6FC2819A4F80AAB2DADEDFC1EFEE3C3F] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.06/11/2014 - 03:17:24.) -- C:\Windows\System32\wininet.dll [2365440]
[MD5.8CEBD9D0A0A879CDE9F36F4383B7CAEA] - (.Microsoft Corporation - Application d’ouverture de session Windows.) (.17/07/2014 - 03:07:24.) -- C:\Windows\System32\Winlogon.exe [455168]
[MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Bibliothèque de licences.) (.21/11/2010 - 04:24:16.) -- C:\Windows\System32\sppcomapi.dll [232448]
[MD5.FA886682CFC5D36718D3E436AACF10B9] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.30/05/2014 - 07:45:52.) -- C:\Windows\system32\Drivers\AFD.sys [497152]
[MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 - 02:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128]
[MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/07/2009 - 00:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160]
[MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.21/11/2010 - 04:23:47.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456]
[MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.21/11/2010 - 04:24:32.) -- C:\Windows\system32\Drivers\DfsC.sys [102400]
[MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.21/11/2010 - 04:23:47.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368]
[MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) (.14/07/2009 - 00:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472]
[MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.14/07/2009 - 01:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224]
[MD5.A5D9106A73DC88564C825D317CAC68AC] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.24/11/2011 - 16:13:16.) -- C:\Windows\system32\Drivers\MRxSmb.sys [158208]
[MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) (.21/11/2010 - 04:23:51.) -- C:\Windows\system32\Drivers\netBT.sys [261632]
[MD5.1A29A59A4C5BA6F8C85062A613B7E2B2] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.24/01/2014 - 03:37:55.) -- C:\Windows\system32\Drivers\ntfs.sys [1684928]
[MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/07/2009 - 01:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280]
[MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.21/11/2010 - 04:24:33.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [129536]
[MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.14/07/2009 - 01:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184]
[MD5.DDAD5A7AB24D8B65F8D724F5C20FD806] - (.Microsoft Corporation - TDI Translation Driver.) (.21/11/2010 - 04:24:32.) -- C:\Windows\system32\Drivers\tdx.sys [119296]
[MD5.DF8126BD41180351A093A3AD2FC8903B] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.24/11/2011 - 16:09:54.) -- C:\Windows\system32\Drivers\volsnap.sys [296320]
~ Generic Processes: Scanned in 00mn 00s
---\\ Etat des fichiers cachés (Caché/Total)
~ Mes musiques (My Musics) : 1/112
~ Mes Favoris (My Favorites) : 1/12
~ Mes Documents (My Documents) : 1/6938
~ Mon Bureau (My Desktop) : 1/18971
~ Menu demarrer (Programs) : 1/42
~ Hidden Files: Scanned in 00mn 30s
---\\ Processus lancés
[MD5.588BEEE7B106E6520F550A45897D00B2] - (.NVIDIA Corporation - NVIDIA NvTmru Application.) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe [1028384] [PID.1524]
[MD5.5EA707336336DDFADE5FD3726CEA1523] - (.NVIDIA Corporation - NVIDIA GeForce Experience Backend.) -- C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2199840] [PID.1448]
[MD5.506708142BC63DABA64F2D3AD1DCD5BF] - (.Google Inc. - Programme d'installation de Google.) -- C:\Users\Arnaud_2\AppData\Local\Google\Update\GoogleUpdate.exe [116648] [PID.2056]
[MD5.FFB8CB731D62EC434A552680E0F8EC1A] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\avastui.exe [5226600] [PID.2340]
[MD5.4FF9D0D5FEC26D9F2312A8C15CA59C8F] - (.Pas de propriétaire - Monitor LED Key.) -- C:\Program Files (x86)\Hewlett-Packard\HP Keyboard\ModLEDKey.exe [53248] [PID.2552]
[MD5.AAC20E2DC0EFF52E91F9672B11144365] - (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe [275568] [PID.1224]
[MD5.4B85BD6EF15679389C54C5D78C2DA925] - (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe [22067296] [PID.4020]
[MD5.8180FF8E683B8A997746143F6286B668] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [8129536] [PID.5832]
[MD5.E3F7EC811923F3F1A77B185F22638E5E] - (.AVAST Software - avast! Service.) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344] [PID.1332]
[MD5.CA793DCC1D5F619021EF1D37CC7A831E] - (.EasyBits Software AS - Shared EasyBits services for Windows.) -- C:\Windows\SysWOW64\ezSharedSvcHost.exe [514232] [PID.1988]
[MD5.3E5757BE828CC404425DC5A5EBB5CEFB] - (.Microsoft Corporation - Pas de description.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe [22768] [PID.1424]
[MD5.506708142BC63DABA64F2D3AD1DCD5BF] - (.Google Inc. - Programme d'installation de Google.) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [116648] [PID.2056]
[MD5.C50CD479FD1BB886244E2663DFFBCF6A] - (.NVIDIA Corporation - NVIDIA Network Service.) -- C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1618888] [PID.800]
~ Processes Running: Scanned in 00mn 01s
---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
C:\Users\Arnaud_2\AppData\Local\Google\Chrome\User Data\Default\Preferences
G1 - GCS: Preference [User Data\Default] http://www1.delta-search.com =>Toolbar.DeltaSearch
---\\ Liste des dossiers d'extension Google Chrome
~ Google Lines Browser: 7 Legitimates Filtered in 00mn 01s
---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
C:\Users\Arnaud_2\AppData\Roaming\Mozilla\Firefox\Profiles\jm6kj8zm.default\prefs.js
M2 - MFEP: prefs.js [Arnaud_2 - jm6kj8zm.default\zigboom@hotmail.com] [] BlackFox V2 v2.3.1 (..)
~ Firefox Browser: 13 Legitimates Filtered in 00mn 00s
---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = <local>
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Proxy management: Scanned in 00mn 00s
---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
~ Keys: Scanned in 00mn 00s
---\\ Hosts file redirection (O1)
~ Le fichier hôte est sain (The hosts file is clean) (52)
~ Hosts File: Scanned in 00mn 00s
---\\ Autres liens utilisateurs (O4)
O4 - GS\QuickLaunch [Arnaud_2]: Sparta.lnk . (.Google Inc. - Google Chrome.) -- C:\Users\Arnaud\AppData\Local\Google\Chrome\Application\chrome.exe http://plarium.com =>Hijacker.Browsers
~ Global Startup: 1 Legitimates Filtered in 00mn 03s
---\\ Applications lancées au démarrage du système (O4)
O4 - HKLM\..\Run: [SysTrayApp] . (.IDT, Inc. - IDT PC Audio.) -- C:\Program Files\IDT\WDM\sttray64.exe
O4 - HKLM\..\Run: [BeatsOSDApp] . (.Hewlett-Packard - HP Beats.) -- C:\Program Files\IDT\WDM\beats64.exe
O4 - HKLM\..\Run: [Nvtmru] . (.NVIDIA Corporation - NVIDIA NvTmru Application.) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe
O4 - HKLM\..\Run: [ShadowPlay] . (.NVIDIA Corporation - NVIDIA Capture Server Proxy.) -- C:\Windows\system32\nvspcap64.dll
O4 - HKLM\..\Run: [NvBackend] . (.NVIDIA Corporation - NVIDIA GeForce Experience Backend.) -- C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
O4 - HKCU\..\Run: [AdobeBridge] Clé orpheline
O4 - HKCU\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Users\Arnaud_2\AppData\Local\Google\Update\GoogleUpdate.exe =>.Google Inc
O4 - HKLM\..\Wow6432Node\Run: [tuto4pc_fr_53] Clé orpheline =>PUP.AgenceExclusive
O4 - HKLM\..\Wow6432Node\Run: [AvastUI.exe] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-21-1540566151-2473114225-769568115-1009\..\Run: [AdobeBridge] Clé orpheline
O4 - HKUS\S-1-5-21-1540566151-2473114225-769568115-1009\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Users\Arnaud_2\AppData\Local\Google\Update\GoogleUpdate.exe =>.Google Inc
~ Application: Scanned in 00mn 00s
---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: &Envoyer à OneNote [64Bits] - {2670000A-7350-4f3c-8081-5663EE0C6C49} . (.Microsoft Corporation - Microsoft OneNote Internet Explorer Add-in.) -- C:\Program Files (x86)\MIF5BA~1\Office15\ONBttnIE.dll =>.Microsoft Corporation
O9 - Extra button: Cliquer pour appeler Lync [64Bits] - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} . (.Microsoft Corporation - Microsoft Lync.) -- C:\Program Files\Microsoft Office\Office15\lync.exe
O9 - Extra button: Notes &liées OneNote [64Bits] - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} . (.Microsoft Corporation - Microsoft OneNote Internet Explorer Add-in.) -- C:\Program Files (x86)\MIF5BA~1\Office15\ONBTTN~1.dll =>.Microsoft Corporation
O9 - Extra button: Skype Click to Call [64Bits] - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} . (...) -- c:\program files (x86)\skype\toolbars\internet explorer x64\icon.ico
~ IE Extra Buttons: Scanned in 00mn 00s
---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{1075AFA5-5B07-495B-BA0A-3504027DAA8C}: DhcpNameServer = 212.27.40.240 212.27.40.241
O17 - HKLM\System\CCS\Services\Tcpip\..\{ACA73580-2A46-48BC-927F-30C5C814A805}: DhcpNameServer = 212.27.40.240 212.27.40.241
O17 - HKLM\System\CCS\Services\Tcpip\..\{E67DC4DF-5A76-41D1-9F1F-C2D0F22323F0}: DhcpNameServer = 10.77.0.1 8.8.8.8
O17 - HKLM\System\CS1\Services\Tcpip\..\{1075AFA5-5B07-495B-BA0A-3504027DAA8C}: DhcpNameServer = 212.27.40.240 212.27.40.241
O17 - HKLM\System\CS1\Services\Tcpip\..\{ACA73580-2A46-48BC-927F-30C5C814A805}: DhcpNameServer = 212.27.40.240 212.27.40.241
O17 - HKLM\System\CS1\Services\Tcpip\..\{E67DC4DF-5A76-41D1-9F1F-C2D0F22323F0}: DhcpNameServer = 10.77.0.1 8.8.8.8
O17 - HKLM\System\CS2\Services\Tcpip\..\{1075AFA5-5B07-495B-BA0A-3504027DAA8C}: DhcpNameServer = 212.27.40.240 212.27.40.241
O17 - HKLM\System\CS2\Services\Tcpip\..\{ACA73580-2A46-48BC-927F-30C5C814A805}: DhcpNameServer = 212.27.40.240 212.27.40.241
O17 - HKLM\System\CS2\Services\Tcpip\..\{E67DC4DF-5A76-41D1-9F1F-C2D0F22323F0}: DhcpNameServer = 10.77.0.1 8.8.8.8
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 212.27.40.240 212.27.40.241
~ Domain: Scanned in 00mn 00s
---\\ Protocole additionnel (O18)
O18 - Handler: wlpg [64Bits] - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (...) --
O18 - Filter: text/xml [64Bits] - {807583E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.dll =>.Microsoft Corporation
~ Protocole Additionnel: Scanned in 00mn 00s
---\\ Tâches planifiées en automatique (O39)
[MD5.D4F602B1F775B5827932D3C5B04A3FD2] [APT] [AutoKMS] (...) -- C:\Windows\AutoKMS\AutoKMS.exe [3372032] =>Trojan.AutoKMS
[MD5.00000000000000000000000000000000] [APT] [{3699ECCB-8DAD-4570-9018-9AAB1A2C850F}] (...) -- C:\Program Files (x86)\SplitMediaLabs\XSplit\XSplit.Core.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{88E86EDA-1222-42BC-A4E4-3666759CB4E8}] (...) -- C:\Users\Arnaud_2\Desktop\Winrar Cracker Just Instal By TehxBaBy.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{A6C0210A-E7D6-4752-9184-437DF09EBA85}] (...) -- C:\Users\Arnaud_2\Desktop\XSplit_Plugin_Installer.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{DEC55A9D-D473-4C6D-8DAB-8854ED2B4D18}] (...) -- C:\Users\Arnaud_2\Downloads\Nero Burning ROM 11\Nero_Burning_ROM_11 - setup.exe (.not file.) [0]
O39 - APT: - (..) -- C:\Windows\System32\Tasks\Adobe Flash Player Updater [1002]
O39 - APT: - (..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore [1068]
O39 - APT: - (..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA [1072]
O39 - APT: - (..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1540566151-2473114225-769568115-1000Core [1030]
O39 - APT: - (..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1540566151-2473114225-769568115-1000UA [1082]
O39 - APT: - (..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1540566151-2473114225-769568115-1009Core [1038]
O39 - APT: - (..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1540566151-2473114225-769568115-1009UA [1090]
O39 - APT: - (..) -- C:\Windows\System32\Tasks\HPCeeScheduleForArnaud_2 [344]
~ Scheduled Task: 40 Legitimates Filtered in 00mn 08s
---\\ Logiciels installés (O42)
O42 - Logiciel: Anoto penDirector 1.3.0.0 - (.Anoto AB.) [HKLM][64Bits] -- {770E1C5A-8004-4875-BC53-C10142432392}
O42 - Logiciel: Firefox Packages - (...) [HKCU][64Bits] -- Firefox Packages =>Adware.InstallCore
O42 - Logiciel: Mobile note taker 3.0 - (.STAEDTLER Mars GmbH & Co. KG.) [HKLM][64Bits] -- {4A19E752-56D4-4B22-BACC-256B491E8756}
~ Logic: 45 Legitimates Filtered in 00mn 01s
---\\ HKCU & HKLM Software Keys
[HKCU\Software\3a6ad4c5-127f-4668-888b-e8e7a31031c2] =>PUP.CrossRider
[HKCU\Software\Anoto]
[HKCU\Software\Beldarak]
[HKCU\Software\DarkGames]
[HKCU\Software\DefaultCompany]
[HKCU\Software\EpicGames]
[HKCU\Software\Eric Haines]
[HKCU\Software\OMC ModPack]
[HKCU\Software\Reg]
[HKLM\Software\EpicGames]
[HKLM\Software\Wow6432Node\Anoto]
[HKLM\Software\Wow6432Node\Reg]
[HKLM\Software\Wow6432Node\VBGenerator]
~ Key Software: 634 Legitimates Filtered in 00mn 01s
---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 08/02/2014 - 20:41:30 - [] ----D C:\Program Files (x86)\Anoto
O43 - CFD: 21/10/2014 - 19:55:18 - [] ----D C:\Program Files (x86)\AppInsights
O43 - CFD: 19/02/2012 - 14:34:25 - [] ----D C:\Program Files (x86)\Pando Networks
O43 - CFD: 08/02/2014 - 20:47:34 - [] ----D C:\Program Files (x86)\STAEDTLER
O43 - CFD: 08/02/2014 - 20:41:33 - [] ----D C:\Program Files (x86)\Common Files\Anoto
O43 - CFD: 08/02/2014 - 20:41:53 - [] ----D C:\ProgramData\Anoto
O43 - CFD: 02/03/2012 - 16:58:38 - [] ----D C:\ProgramData\boost_interprocess
O43 - CFD: 03/10/2014 - 18:51:22 - [] ----D C:\ProgramData\Epic
O43 - CFD: 01/03/2012 - 18:12:00 - [] ----D C:\ProgramData\InstallMate =>PUP.Tarma
O43 - CFD: 08/02/2014 - 20:41:36 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Anoto
O43 - CFD: 25/12/2011 - 13:30:11 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eReaders and Document Viewers
O43 - CFD: 08/02/2014 - 20:47:37 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mobile note taker
O43 - CFD: 24/06/2013 - 21:53:50 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Music, Photos and Videos
O43 - CFD: 25/12/2011 - 13:30:11 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Productivity and Tools
O43 - CFD: 21/11/2010 - 08:16:41 - [0] R-H-D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC
O43 - CFD: 18/10/2014 - 13:54:29 - [] ----D C:\Users\Arnaud_2\AppData\Roaming\1H1Q1V1N1N1O2V =>Adware.InstallCore
O43 - CFD: 08/02/2014 - 20:41:56 - [] ----D C:\Users\Arnaud_2\AppData\Roaming\anoto
O43 - CFD: 09/06/2014 - 18:02:51 - [] ----D C:\Users\Arnaud_2\AppData\Roaming\MingGuan
O43 - CFD: 18/10/2014 - 13:54:40 - [] ----D C:\Users\Arnaud_2\AppData\Roaming\sparta111
O43 - CFD: 10/10/2014 - 17:23:08 - [] ----D C:\Users\Arnaud_2\AppData\Local\CrashReportClient
O43 - CFD: 30/07/2013 - 15:57:33 - [] ----D C:\Users\Arnaud_2\AppData\Local\Flvto Youtube
O43 - CFD: 18/10/2014 - 13:54:36 - [0] ----D C:\Users\Arnaud_2\AppData\Local\GGEmpire
O43 - CFD: 18/10/2014 - 14:09:19 - [0] ----D C:\Users\Arnaud_2\AppData\Local\Sparta
~ 2 Dossier CLSID vide (CLSID Empty Folder)
~ Program Folder: 384 Legitimates Filtered in 00mn 01s
---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.9BE9F2B83DE80E2752B1405CC427E2EC] - 12/11/2014 - 14:38:52 ---A- . (...) -- C:\Windows\System32\Drivers\aswHwid.sys [29208]
O44 - LFC:[MD5.E13F489F0B1E52319A86BDD996263F4B] - 12/11/2014 - 23:44:33 ---A- . (...) -- C:\Windows\win.ini [478]
~ Files: 77 Legitimates Filtered in 00mn 36s
---\\ Clé de registre Shell MountPoints2 (MPKS) (O51)
O51 - MPSK:{38088a79-2e4c-11e2-b0ca-38607777c6aa}\AutoRun\command. (...) -- J:\install.exe (.not file.)
~ Keys: Scanned in 00mn 00s
---\\ Enumération des clés de registre StartupReg (SMSR) (O53)
O53 - SMSR:HKLM\...\startupreg\Akamai NetSession Interface [Key] . (...) -- C:\Users\Arnaud_2\AppData\Local\Akamai\netsession_win.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\MyScript InkRetriever [Key] . (...) -- C:\Program Files (x86)\Vision Objects\MyScript Studio\MyScript_GenericInkRetriever.exe
~ SMSR Keys: 24 Legitimates Filtered in 00mn 00s
---\\ Enumération des clés de registre PoliciesSystem (MWPS) (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
~ MWPS: 17 Legitimates Filtered in 00mn 00s
---\\ Liste des pilotes du système (SDL) (O58)
O58 - SDL:12/11/2014 - 14:38:52 ---A- . (...) -- C:\Windows\System32\Drivers\aswHwid.sys [29208] =>.ALWIL Software
O58 - SDL:12/11/2014 - 14:38:52 ---A- . (...) -- C:\Windows\System32\Drivers\aswRvrt.sys [65776] =>.ALWIL Software
O58 - SDL:12/11/2014 - 14:38:52 ---A- . (...) -- C:\Windows\System32\Drivers\aswVmm.sys [267632] =>.ALWIL Software
O58 - SDL:29/05/2012 - 15:53:30 ---A- . (.Windows (R) Codename Longhorn DDK provider - hpvhd 64bit support driver.) -- C:\Windows\System32\Drivers\cpqdfw.sys [27456]
O58 - SDL:27/04/2010 - 18:43:50 ---A- . (...) -- C:\Windows\System32\Drivers\cqcpu.sys [24376]
O58 - SDL:14/11/2012 - 20:35:49 ---A- . (.DT Soft Ltd - DAEMON Tools Virtual Bus Driver.) -- C:\Windows\System32\Drivers\dtsoftbus01.sys [283200]
O58 - SDL:14/07/2009 - 02:47:48 ---A- . (.Emulex - Storport Miniport Driver for LightPulse HBAs.) -- C:\Windows\System32\Drivers\elxstor.sys [530496]
O58 - SDL:24/01/2012 - 13:50:38 ---A- . (.Turtle Entertainment GmbH - ESLvnic Virtual Network Driver.) -- C:\Windows\System32\Drivers\ESLvnic.sys [25528]
O58 - SDL:17/12/2012 - 10:39:26 ---A- . (.<Turtle Entertainment> - EslWireACD.) -- C:\Windows\System32\Drivers\ESLWireACD.sys [160784]
O58 - SDL:02/09/2005 - 01:40:26 ---A- . (...) -- C:\Windows\System32\Drivers\FBIKB_NT.Sys [4352]
O58 - SDL:10/06/2009 - 21:31:59 ---A- . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for eHome.) -- C:\Windows\System32\Drivers\hcw85cir.sys [31232]
O58 - SDL:24/11/2011 - 16:37:34 ---A- . (...) -- C:\Windows\System32\Drivers\pmxdrv.sys [31152]
O58 - SDL:10/06/2009 - 21:37:19 ---A- . (...) -- C:\Windows\System32\Drivers\secdrv.sys [23040]
O58 - SDL:14/07/2009 - 02:45:55 ---A- . (.Promise Technology - Promise SuperTrak EX Series Driver for Windows.) -- C:\Windows\System32\Drivers\stexstor.sys [24656]
O58 - SDL:24/04/2012 - 19:38:30 ---A- . (.IDT, Inc. - IDT PC Audio.) -- C:\Windows\System32\Drivers\stwrt64.sys [536576]
O58 - SDL:03/08/2010 - 15:25:30 ---A- . (.The OpenVPN Project - TAP-Win32 Virtual Network Driver.) -- C:\Windows\System32\Drivers\tapoas.sys [30720]
O58 - SDL:13/12/2012 - 12:50:36 ---A- . (.Apple, Inc. - Apple Mobile Device USB Driver.) -- C:\Windows\System32\Drivers\usbaapl64.sys [54784]
O58 - SDL:21/12/2009 - 20:50:00 ---A- . (.Windows (R) Win 7 DDK provider - Virtual Hid Device.) -- C:\Windows\System32\Drivers\vHidDev.sys [7552]
O58 - SDL:08/10/2002 - 00:07:38 R--A- . (...) -- C:\Windows\SysWOW64\drivers\SECDRV.SYS [11376]
~ Drivers: 79 Legitimates Filtered in 00mn 05s
---\\ Liste des outils de désinfection (LATC) (O63)
O63 - Logiciel: ZHPDiag 2014 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 =>.Nicolas Coolman
~ ADS: Scanned in 00mn 00s
---\\ Liste les services legacy du registre (LALS) (O64)
O64 - Services: CurCS - 12/11/2014 - C:\Windows\system32\drivers\aswHwid.sys (aswHwid) .(...) - LEGACY_ASWHWID
~ Legacy: 86 Legitimates Filtered in 00mn 00s
---\\ Menu de démarrage Internet (SMI) (O68)
O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\Shell\open\Command] (...) -- chrome.exe (.not file.)
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (...) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
~ Keys: Scanned in 00mn 00s
---\\ Recherche d'infection sur les navigateurs internet (SBI) (O69)
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - http://www.bing.com
O69 - SBI: SearchScopes [HKCU] {65E1709B-BCE9-4C96-8D56-A89380EA9930} - (Propositions de recherche Amazon.fr) - http://www.amazon.fr
O69 - SBI: SearchScopes [HKCU] {D944BB61-2E34-4DBF-A683-47E505C587DC} - (eBay) - http://rover.ebay.com =>Toolbar.eBay
~ Keys: Scanned in 00mn 00s
---\\ Recherche particulière à la racine du système (SPRF) (O84)
[MD5.6504113C2218667814D4F54847BA046A] [SPRF][11/11/2014] (.Pas de propriétaire - Aut2Exe.) -- C:\Users\Arnaud_2\Desktop\adwcleaner_4.101.exe [2140160]
[MD5.D2066713C8BEA0C72CDA34DE452767FB] [SPRF][21/11/2014] (.ArenaNet - Guild Wars 2 Game Client.) -- C:\Users\Arnaud_2\Desktop\Guild Wars 2.exe [25748472]
[MD5.D41D8CD98F00B204E9800998ECF8427E] [SPRF][21/11/2014] (...) -- C:\Users\Arnaud_2\Desktop\Gw2.dat [20570398744]
[MD5.8706AE9361F040FC4ED69BB8D19F8629] [SPRF][16/05/2014] (...) -- C:\Users\Arnaud_2\Desktop\jacob-1.17-M2-x64.dll [217600]
[MD5.2F6191D4634E7B3429EA2DD91B031C91] [SPRF][16/05/2014] (...) -- C:\Users\Arnaud_2\Desktop\jacob-1.17-M2-x86.dll [176128]
~ Files: 6 Legitimates Filtered in 00mn 00s
---\\ Liste des exceptions du parefeu (FirewallRules) (O87)
O87 - FAEL: "TCP Query User{470B93A5-C05E-4451-A57C-0AA5C931B7C8}C:\users\arnaud\desktop\utorrent.exe" | In - Private - P6 - TRUE | .(.BitTorrent, Inc. - µTorrent.) -- C:\users\arnaud\desktop\utorrent.exe =>P2P.BitTorrent
O87 - FAEL: "UDP Query User{25A53E52-8830-476A-B270-98C1E02EBBF0}C:\users\arnaud\desktop\utorrent.exe" | In - Private - P17 - TRUE | .(.BitTorrent, Inc. - µTorrent.) -- C:\users\arnaud\desktop\utorrent.exe =>P2P.BitTorrent
O87 - FAEL: "{8F4FDAD0-D33A-4B56-B14A-0846A882A2D6}" | In - None - P6 - TRUE | .(.BitTorrent Inc. - µTorrent.) -- C:\Program Files (x86)\uTorrent\uTorrent.exe =>P2P.BitTorrent
O87 - FAEL: "{9F305BA5-136F-4D43-937B-23906FF78F63}" | In - None - P17 - TRUE | .(.BitTorrent Inc. - µTorrent.) -- C:\Program Files (x86)\uTorrent\uTorrent.exe =>P2P.BitTorrent
~ Firewall: 4 Legitimates Filtered in 00mn 02s
---\\ Enumère les codes produits des logiciels (PUC) (O90)
O90 - PUC: "098CCE33084C42149BB5AB630E521B02" . (.FrameFox Extensions 1.0.7.0.) -- C:\Windows\Installer\{33ECC890-C480-4124-B95B-BA36E025B120}\FrameFox.ico =>PUP.FrameFox
~ Update Products: 1 Legitimates Filtered in 00mn 00s
---\\ Recherche des packages WindowsInstaller (WIS) (O93) (NTFS)
[MD5.5FF2B0F7835519063800D9F2DB535131] [WIS][22/08/2013] (.QwertyBox Team - FrameFox Extensions 1.0.7.0 Setup.) -- C:\Windows\Installer\8ed7f.msi [417792] =>PUP.FrameFox
~ WIS: 1 Legitimates Filtered in 00mn 25s
---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)
SS - | Disabled 22/09/2014 267440 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
SS - | Disabled 02/03/2009 89600 | (AESTFilters) . (.Andrea Electronics Corporation.) - C:\Program Files\IDT\WDM\AESTSr64.exe
SS - | Disabled 21/12/2012 57008 | (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
SS - | Disabled 09/06/2011 264008 | (FPLService) . (.HP.) - C:\Program Files (x86)\HP SimplePass 2011\TrueSuiteService.exe
SS - | Disabled 09/11/2013 227936 | (GamesAppIntegrationService) . (.WildTangent.) - C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
SS - | Disabled 12/10/2010 206072 | (GamesAppService) . (.WildTangent, Inc..) - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe
SS - | Disabled 07/04/2013 116648 | (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
SS - | Disabled 07/04/2013 116648 | (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
SS - | Disabled 03/11/2014 2530128 | (Hamachi2Svc) . (.LogMeIn Inc..) - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
SS - | Disabled 11/10/2010 346168 | (HPClientSvc) . (.Hewlett-Packard Company.) - C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe
SS - | Disabled 10/08/2012 1001376 | (hpqwmiex) . (.Hewlett-Packard Company.) - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
SS - | Disabled 31/05/2013 641352 | (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe
SS - | Disabled 24/02/2011 212944 | (jhi_service) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Services\IPT\jhi_service.exe
SS - | Disabled 21/10/2014 417552 | (LMIGuardianSvc) . (.LogMeIn, Inc..) - C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
SS - | Disabled 01/02/2011 326168 | (LMS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
SS - | Disabled 05/02/2013 235216 | (McComponentHostService) . (.McAfee, Inc..) - C:\Program Files (x86)\McAfee Security Scan\3.0.318\McCHSvc.exe
SS - | Disabled 23/09/2011 641832 | (NAUpdate) . (.Nero AG.) - C:\Program Files (x86)\Nero\Update\NASvc.exe
SS - | Disabled 23/10/2013 922912 | (NVSvc) . (.NVIDIA Corporation.) - C:\Windows\system32\nvvsvc.exe
SS - | Disabled 12/08/2010 24064 | (OpenVPNAccessClient) . (...) - C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\capiws.exe
SS - | Disabled 06/05/2011 1128952 | (pdfcDispatcher) . (.PDF Complete Inc.) - C:\Program Files (x86)\PDF Complete\pdfsvc.exe
SS - | Disabled 31/08/2009 430080 | (PenRendezvous) . (.Anoto AB.) - C:\Program Files (x86)\Common Files\Anoto\Pen\Phal\Service\LPhal.exe
SS - | Disabled 31/08/2009 430080 | (PenSup) . (.Anoto AB.) - C:\Program Files (x86)\Common Files\Anoto\Pen\Phal\Service\LPhal.exe
SS - | Disabled 02/10/2012 3064000 | (Skype C2C Service) . (.Skype Technologies S.A..) - C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
SS - | Disabled 03/04/2014 315008 | (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe
SS - | Disabled 24/04/2012 318464 | (STacSV) . (.IDT, Inc..) - C:\Program Files\IDT\WDM\STacSV64.exe
SS - | Demand 18/11/2014 833728 | (Steam Client Service) . (.Valve Corporation.) - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
SS - | Disabled 19/02/2010 517096 | (SwitchBoard) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
SS - | Disabled 07/08/2013 4308320 | (TeamViewer8) . (.TeamViewer GmbH.) - C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
SS - | Disabled 01/02/2011 2656280 | (UNS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
SR - | Auto 12/11/2014 50344 | (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
SR - | Auto 10/07/1658 0 | (ezSharedSvc) . (.EasyBits Software AS.) - C:\Windows\System32\ezSharedSvcHost.exe =>.EasyBits Software AS
SR - | Auto 30/04/2014 1618888 | (NvNetworkService) . (.NVIDIA Corporation.) - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
SR - | Auto 30/04/2014 21009352 | (NvStreamSvc) . (.NVIDIA Corporation.) - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
SR - | Auto 14/07/2009 27136 | C:\Program Files (x86)\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
SR - | Auto 10/07/1658 0 | (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe =>.Microsoft Corporation
SR - | Auto 14/07/2009 27136 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
~ Services: Scanned in 00mn 12s
---\\ Scan Additionnel (O88)
Database Version : 13026 - (19/11/2014)
Clés trouvées (Keys found) : 9
Valeurs trouvées (Values found) : 2
Dossiers trouvés (Folders found) : 2
Fichiers trouvés (Files found) : 3
[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Firefox Packages] =>Adware.InstallCore^
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D6533F74-218B-41BE-9D91-5BD471FECFFD}] =>Toolbar.Conduit
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D6533F74-218B-41BE-9D91-5BD471FECFFD}] =>Toolbar.Conduit
[HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\ApnUpdater] =>Toolbar.Ask
[HKCU\Software\uTorrentBar_FR] =>Toolbar.Conduit
[HKCU\Software\AppDataLow\Software\uTorrentBar_FR] =>Toolbar.Conduit
[HKLM\Software\Wow6432Node\uTorrentBar_FR] =>Toolbar.Conduit
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\uTorrentBar_FR Toolbar] =>Toolbar.Conduit
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{B7FCA997-D0FB-4FE0-8AFD-255E89CF9671}] =>Toolbar.Yahoo
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:tuto4pc_fr_53 =>PUP.AgenceExclusive^
C:\ProgramData\InstallMate =>PUP.Tarma^
C:\Users\Arnaud_2\AppData\Roaming\1H1Q1V1N1N1O2V =>Adware.InstallCore^
C:\Windows\AutoKMS\AutoKMS.exe =>Trojan.AutoKMS^
[HKCU\Software\3a6ad4c5-127f-4668-888b-e8e7a31031c2] =>PUP.CrossRider^
C:\Windows\Installer\8ed7f.msi =>PUP.FrameFox^
~ Additionnel Scan: 1073418 Items scanned in 01mn 39s
---\\ Informations complémentaires sur les modules
~ http://nicolascoolman.fr/r5-intern [...] ment-iepm/ =>.Internet Explorer, Proxy Management (R5)
~ http://nicolascoolman.fr/o4-applic [...] -registre/ =>.Applications lancées au démarrage du système (O4)
~ http://nicolascoolman.fr/o51-mount [...] -key-mpsk/ =>.Clé de registre Shell MountPoints2 (MPKS) (O51)
~ AMI: 3 Legitimates Filtered in 00mn 00s
---\\ Récapitulatif des détections trouvées sur votre station
http://nicolascoolman.fr/toolbar-deltasearch =>Toolbar.DeltaSearch
http://nicolascoolman.fr/hijacker-browsers =>Hijacker.Browsers
http://nicolascoolman.fr/spyware-agenceexclusive =>PUP.AgenceExclusive
http://nicolascoolman.fr/trojan-autokms =>Trojan.AutoKMS
http://nicolascoolman.fr/adware-installcore =>Adware.InstallCore
http://nicolascoolman.fr/pup-crossrider =>PUP.CrossRider
http://nicolascoolman.fr/pup-tarma =>PUP.Tarma
http://nicolascoolman.fr/pup-framefox =>PUP.FrameFox
http://nicolascoolman.fr/toolbar-conduit =>Toolbar.Conduit
http://nicolascoolman.fr/toolbar-ask =>Toolbar.Ask
http://www.nicolascoolman.fr/blog/ =>Toolbar.Yahoo
~ MSI: 11 link(s) detected in 00mn 00s
~ 1234 Legitimates filtered by white list
End of the scan (513 lines in 04mn 09s)(0)
J'aurai bien aimé créé un bouton pour éviter que tout ça se voie directement et prenne la place d'un éléphant sur la page, m'enfin