Aller au contenu

taulio

Membres
 Afficher le profil  Afficher son activité

  • Compteur de contenus

    9

  • Inscription

  • Dernière visite

 Type de contenu 

Tout ce qui a été posté par taulio

  1. taulio
    ok, merci pour l'aide ainsi que pour le complément ci-dessus, c'est du bon travail ! j'ai une question complémentaire : depuis un bon moment, un an à peu près, je ne fais plus les mises à jour windows, le processus s'interrompait après un échec de ces mises à jour ... est-ce grave docteur ? aussi, le lien vers noscript pour chrome ne fonctionne pas
  2. taulio
    bizarre, c'est exactement la manière dont j'ai procédé ... je recommence, mais j'ai bien peur que le résultat soit le même http://www.cjoint.com/confirm.php?cjoint=EAkpyZlTIY0 http://www.cjoint.com/confirm.php?cjoint=EAkpAcSe9kl
  3. taulio
    ZhpCleaner : http://www.cjoint.com/confirm.php?cjoint=EAkmzRkgABH SFTGC : http://www.cjoint.com/confirm.php?cjoint=EAkmByzpSfv Voilà, j'espère que c'est ok pour toi cette fois-ci
  4. taulio
    1) Rapport de ZHPFix 2014.10.24.12 par Nicolas Coolman, Update du 24/10/2014 Fichier d'export Registre : Run by j at 09/01/2015 17:51:53 High Elevated Privileges : OK Windows 7 Home Premium Edition, 64-bit (Build 7600) Corbeille vidée (00mn 15s) Dossier Prefetcher vidé Réparation des raccourcis navigateur ========== Clés du Registre ========== SUPPRIMÉ: HKCU\Software\SecureSurf SUPPRIMÉ: HKLM\Software\Wow6432Node\SecureSurf SUPPRIMÉ: SearchScopes :{AF0BEA60-C901-450C-ACC1-24B2DA088D4B} Branche de Base de Registres IFEO non infectée ! ========== Valeurs du Registre ========== Aucune Valeur Standard Profile: FirewallRaz : Aucune Valeur Domain Profile: FirewallRaz : SUPPRIMÉ: FirewallRaz (None) : {A99B0AEE-5C3A-41A4-B147-CB17D491AE7E} ProxyFix : Configuration proxy supprimée avec succès SUPPRIMÉ ProxyServer Value SUPPRIMÉ ProxyEnable Value SUPPRIMÉ EnableHttp1_1 Value SUPPRIMÉ ProxyHttp1.1 Value SUPPRIMÉ ProxyOverride Value ========== Eléments de donnée du Registre ========== SUPPRIMÉ: R0 - Main,Start Page = KLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page SUPPRIMÉ: R1 Search Page = http://g.msn.fr/0SEFRFR/SAOS02 ========== Dossiers ========== Aucun dossiers CLSID Local utilisateur vide ========== Fichiers ========== SUPPRIMÉS Flash Cookies (0) (0 octets) ========== Restauration Système ========== Point de restauration du système créé avec succès ========== Récapitulatif ========== 4 : Clés du Registre 9 : Valeurs du Registre 2 : Eléments de donnée du Registre 1 : Dossiers 1 : Fichiers 1 : Restauration Système End of clean in 01mn 17s ========== Chemin de fichier rapport ========== C:\Users\j\AppData\Roaming\ZHP\ZHPFix[R1].txt - 09/01/2015 17:52:08 [1680] rapport SFTGC http://www.cjoint.com/confirm.php?cjoint=EAjvZizW1Dd
  5. taulio
    désolé pour cette excitation un peu précoce je continue la procédure
  6. taulio
    le problème semble résolu, un grand merci pour cette procédure
  7. taulio
    Salut, voici les différents rapports demandés : rapport adwcleaner http://cjoint.com/?EAitzFPlTCZ rapport JRT : http://cjoint.com/?EAitN1RIdsA Malwarebytes Anti-Malware www.malwarebytes.org Date de l'examen: 08/01/2015 Heure de l'examen: 19:42:38 Fichier journal: Administrateur: Oui Version: 2.00.4.1028 Base de données Malveillants: v2015.01.08.12 Base de données Rootkits: v2015.01.07.01 Licence: Essai Protection contre les malveillants: Activé(e) Protection contre les sites Web malveillants: Activé(e) Auto-protection: Désactivé(e) Système d'exploitation: Windows 7 Processeur: x64 Système de fichiers: NTFS Utilisateur: j Type d'examen: Examen "Personnalisé" Résultat: Terminé Objets analysés: 732692 Temps écoulé: 4 h, 2 min, 41 sec Mémoire: Activé(e) Démarrage: Activé(e) Système de fichiers: Activé(e) Archives: Activé(e) Rootkits: Activé(e) Heuristique: Activé(e) PUP: Activé(e) PUM: Activé(e) Processus: 0 (Aucun élément malicieux detecté) Modules: 0 (Aucun élément malicieux detecté) Clés du Registre: 0 (Aucun élément malicieux detecté) Valeurs du Registre: 0 (Aucun élément malicieux detecté) Données du Registre: 0 (Aucun élément malicieux detecté) Dossiers: 0 (Aucun élément malicieux detecté) Fichiers: 0 (Aucun élément malicieux detecté) Secteurs physiques: 0 (Aucun élément malicieux detecté) (end) ~ Rapport de ZHPDiag v2015.1.8.3 - Nicolas Coolman (08/01/2015) ~ Lancé par j (09/01/2015 00:06:41) ~ Facebook : https://www.facebook.com/nicolascoolman1 ~ Adresse du Forum http://forum.nicolascoolman.fr ~ Traduit par Nicolas Coolman ~ Etat de la version : Version à jour. ~ Liste blanche : Désactivée par l'utilisateur ~ Elévation des Privilèges : OK ~ User Account Control (UAC): ---\\ Navigateurs Internet MSIE: Internet Explorer v9.0.8112.16421 MFIE: Mozilla Firefox 32.0.3 ---\\ Informations sur les produits Windows ~ Langage: Français Windows 7 Home Premium, 64-bit (Build 7600) Windows Server License Manager Script : OK ~ Windows Operating System - Windows® 7, OEM_SLP channel System Locked Preinstallation (OEM_SLP) : OK Windows ID Activation : OK ~ Windows Partial Key : M8X2Q Windows License : OK ~ Windows Remaining Initializations Number : 1 Software Protection Service (Protection logicielle) : OK Windows Automatic Updates : OK Windows Activation Technologies : OK ---\\ Logiciels de protection du système Avira Free Antivirus v14.0.7.468 Malwarebytes Anti-Malware version 2.0.4.1028 Windows Defender W7 (Activate) ---\\ Logiciels d'optimisation du système CCleaner v3.21 ---\\ Logiciels de partage PeerToPeer Vuze v4.7 =>P2P.Azureus ---\\ Surveillance de Logiciels Adobe Flash Player 15 Plugin Adobe Reader 9.1 - Français ---\\ Informations sur le système ~ Processor: Intel64 Family 6 Model 37 Stepping 5, GenuineIntel ~ Operating System: 64 Bits Boot mode: Normal (Normal boot) Total RAM: 3886 MB (48% free) System Restore: Activé (Enable) System drive C: has 53 GB (30%) free of 173 GB ---\\ Mode de connexion au système ~ Computer Name: J-MSI ~ User Name: j ~ All Users Names: Mcx1-J-MSI, j, HomeGroupUser$, Administrateur, ~ Unselected Option: None Logged in as Administrator ---\\ Variables d'environnement ~ System Unit : C:\ ~ %AppZHP% : C:\Users\j\AppData\Roaming\ZHP\ ~ %AppData% : C:\Users\j\AppData\Roaming\ ~ %Desktop% : C:\Users\j\Desktop\ ~ %Favorites% : C:\Users\j\Favorites\ ~ %LocalAppData% : C:\Users\j\AppData\Local\ ~ %StartMenu% : C:\Users\j\AppData\Roaming\Microsoft\Windows\Start Menu\ ~ %Windir% : C:\Windows\ ~ %System% : C:\Windows\System32\ ---\\ Enumération des unités disques C: Hard drive, Flash drive, Thumb drive (Free 53 Go of 173 Go) D: Hard drive, Flash drive, Thumb drive (Free 74 Go of 116 Go) E: CD-ROM drive (Not Inserted) ---\\ Etat du Centre de Sécurité Windows [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] DisableTaskMgr: OK [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] DisableRegistryTools: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK [HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK ~ Security Center: 39 Scanned in 00mn 00s ---\\ Recherche particulière de fichiers génériques [MD5.0862495E0C825893DB75EF44FAEA8E93] - (.Microsoft Corporation - Explorateur Windows.) (.26/02/2011 - 07:23:14.) -- C:\Windows\Explorer.exe [2870272] [MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 - 02:39:52.) -- C:\Windows\System32\Wininit.exe [129024] [MD5.A4F6142CABA82FB7293ECE5FF864B440] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.22/02/2013 - 07:20:51.) -- C:\Windows\System32\wininet.dll [1392128] [MD5.DA3E2A6FA9660CC75B471530CE88453A] - (.Microsoft Corporation - Application d’ouverture de session Windows.) (.14/09/2010 - 19:48:37.) -- C:\Windows\System32\Winlogon.exe [389632] [MD5.75341574F21E766748732BDF530C74BD] - (.Microsoft Corporation - Bibliothèque de licences.) (.14/07/2009 - 02:41:54.) -- C:\Windows\System32\sppcomapi.dll [231936] [MD5.DB9D6C6B2CD95A9CA414D045B627422E] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.28/12/2011 - 04:59:11.) -- C:\Windows\system32\Drivers\AFD.sys [499200] [MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 - 02:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128] [MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/07/2009 - 00:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160] [MD5.83D2D75E1EFB81B3450C18131443F7DB] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.14/07/2009 - 00:19:54.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456] [MD5.9C253CE7311CA60FC11C774692A13208] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.27/04/2011 - 03:57:40.) -- C:\Windows\system32\Drivers\DfsC.sys [102400] [MD5.0A49913402747A0B67DE940FB42CBDBB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.14/07/2009 - 01:06:13.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368] [MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) (.14/07/2009 - 00:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472] [MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.14/07/2009 - 01:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224] [MD5.040D62A9D8AD28922632137ACDD984F2] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.04/05/2011 - 03:51:08.) -- C:\Windows\system32\Drivers\MRxSmb.sys [157696] [MD5.9162B273A44AB9DCE5B44362731D062A] - (.Microsoft Corporation - MBT Transport driver.) (.14/07/2009 - 00:21:29.) -- C:\Windows\system32\Drivers\netBT.sys [259072] [MD5.9A6089B056EA1B83B36424FC9D0A300E] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.12/04/2013 - 15:36:37.) -- C:\Windows\system32\Drivers\ntfs.sys [1653096] [MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/07/2009 - 01:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280] [MD5.87A6E852A22991580D6D39ADC4790463] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.14/07/2009 - 01:10:12.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [130048] [MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.14/07/2009 - 01:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184] [MD5.079125C4B17B01FCAEEBCE0BCB290C0F] - (.Microsoft Corporation - TDI Translation Driver.) (.14/07/2009 - 00:21:15.) -- C:\Windows\system32\Drivers\tdx.sys [99840] [MD5.9E425AC5C9A5A973273D169F43B4F5E1] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.06/09/2012 - 18:38:18.) -- C:\Windows\system32\Drivers\volsnap.sys [295792] ~ Generic Processes: Scanned in 00mn 00s ---\\ Etat des fichiers cachés (Caché/Total) ~ Mes images (My Pictures) : 1/2863 ~ Mes musiques (My Musics) : 11/224 ~ Mes Favoris (My Favorites) : 1/22 ~ Mes Documents (My Documents) : 1/1543 ~ Mon Bureau (My Desktop) : 1/1148 ~ Menu demarrer (Programs) : 1/37 ~ Hidden Files: Scanned in 00mn 08s ---\\ Processus lancés [MD5.3C13F26A4766752314A5413038BD86B4] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe [7229752] [PID.2544] [MD5.6FA1F6B8090F04D581E16212886BD861] - (.Spotify Ltd - SpotifyWebHelper.) -- C:\Users\j\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1178168] [PID.3492] [MD5.A162B967A88BF374A81E01EF6E7A2655] - (.Avira Operations GmbH & Co. KG - Avira system tray application.) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [702768] [PID.1036] [MD5.308F2EE28005510DE616409148CF077B] - (.Oracle Corporation - Java Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896] [PID.3952] [MD5.0EF0822810009D58118CCDFD098FA9F4] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe [157480] [PID.4028] [MD5.BA18CFAB98426BFA6D6EC7E5B1961ED0] - (.Avira Operations GmbH & Co. KG - Avira.) -- C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [126200] [PID.3096] [MD5.5F3587E344F2990B59C941FB405CAA0F] - (.Google Inc. - Google Chrome.) -- C:\Users\j\AppData\Local\Google\Chrome\Application\chrome.exe [856904] [PID.4552] [MD5.3F26C158B324A39B71C955B0AB52F67D] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [8150528] [PID.5620] [MD5.C2700D35AA42311A32DF7EA09630B401] - (.Avira Operations GmbH & Co. KG - Antivirus Host Framework Service.) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [431920] [PID.1156] [MD5.CB8C1CC4F46FBAC78150754D77460C73] - (.Google Inc. - Google Crash Handler.) -- C:\Program Files (x86)\Google\Update\1.3.25.11\GoogleCrashHandler.exe [230792] [PID.1676] [MD5.C2700D35AA42311A32DF7EA09630B401] - (.Avira Operations GmbH & Co. KG - Antivirus Host Framework Service.) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [431920] [PID.1764] [MD5.650D03E40F93FAE323CB841F80368E5C] - (.Apple Inc. - MobileDeviceService.) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [60744] [PID.1816] [MD5.7485FBCEF9136F530953575E2977859D] - (.Intel Corporation - Local Manageability Service.) -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe [268824] [PID.1980] [MD5.0BB29DE40C9D9529793DCDB59A43CF5B] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160] [PID.1700] [MD5.5F82D8188B370B0CF185D4AE2B9B4A0E] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [969016] [PID.2164] [MD5.71C6748EE8DE938532057EF10B4B7E44] - (.Micro-Star International Co., Ltd. - MSI SCM Service.) -- C:\Program Files (x86)\System Control Manager\MSIService.exe [160768] [PID.2184] [MD5.B3E5887095F1DE8737DA3441D29F60E4] - (.RealNetworks, Inc. - Online Games Manager.) -- C:\Program Files (x86)\Online Games Manager\ogmservice.exe [581568] [PID.2260] [MD5.6F77BBB8FC69D26132309EB4CE7A4E0E] - (.Avira Operations GmbH & Co. KG - Avira.OE.ServiceHost.) -- C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [166192] [PID.2468] [MD5.31A0E93CDF29007D6C6FFFB632F375ED] - (.Intel Corporation - IAStorDataSvc.) -- C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [13336] [PID.5108] [MD5.765F2DD351BA064F657751D8D75E58C0] - (.Intel Corporation - User Notification Service.) -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe [2320920] [PID.4496] ~ Processes Running: Scanned in 00mn 00s ---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2) C:\Users\j\AppData\Local\Google\Chrome\User Data\Default\Preferences ---\\ Liste des dossiers d'extension Google Chrome ~ Google Lines Browser: 0 Scanned in 00mn 00s ---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3) P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\windows\system32\Macromed\Flash\NPSWF64_15_0_0_246.dll P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 5.1.20913.0.) -- C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll P2 - FPN: [HKCU] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Users\j\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll P2 - FPN: [HKCU] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Users\j\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll ~ Firefox Browser: 4 Scanned in 00mn 00s ---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4) R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = www.google.com R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://home.microsoft.com R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://msi.msn.com R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.fr R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = about:blank R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = about:blank R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com R3 - URLSearchHook: Microsoft Url Search Hook [64Bits] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (9.00.8112.16421 (WIN7_IE9_RTM.110308-0330)) -- C:\Windows\SysWOW64\ieframe.dll R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 0 R4 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 0 ~ IE Browser: 21 Scanned in 00mn 00s ---\\ Internet Explorer, Proxy Management (R5) R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll ~ Proxy management: Scanned in 00mn 00s ---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs F2 - REG:system.ini: USERINIT=C:\windows\System32\Userinit.exe, F2 - REG:system.ini: Shell=C:\Windows\explorer.exe F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe ~ Keys: Scanned in 00mn 00s ---\\ Hosts file redirection (O1) ~ Le fichier hôte est sain (The hosts file is clean) (21) ~ Hosts File: Scanned in 00mn 00s ---\\ Browser Helper Objects de navigateur (O2) O2 - BHO: AcroIEHelperStub [64Bits] - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Lync Click to Call BHO [64Bits] - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} . (.Microsoft Corporation - Microsoft Lync.) -- C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll O2 - BHO: Java Plug-In SSV Helper [64Bits] - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} . (.Oracle Corporation - Java Platform SE binary.) -- C:\Program Files (x86)\Java\jre7\bin\ssv.dll O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live ID [64Bits] - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corp. - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Windows Live Messenger Companion Helper [64Bits] - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} . (.Microsoft Corporation - Windows Live Messenger Companion Core.) -- C:\Program Files (x86)\Windows Live\Companion\companioncore.dll O2 - BHO: URLRedirectionBHO [64Bits] - {B4F3A835-0E21-4959-BA22-42B3008E02FF} . (.Microsoft Corporation - Microsoft Office Document Cache Handler.) -- C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.dll O2 - BHO: Microsoft SkyDrive Pro Browser Helper [64Bits] - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} . (.Microsoft Corporation - Microsoft OneDrive for Business Extensions.) -- C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.dll =>.Microsoft Corporation O2 - BHO: Java Plug-In 2 SSV Helper [64Bits] - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Oracle Corporation - Java Platform SE binary.) -- C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll ~ BHO: 12 Scanned in 00mn 00s ---\\ Internet Explorer Toolbars (O3) O3 - Toolbar\WebBrowser: (no name) - [HKCU]{21FA44EF-376D-4D53-9B0F-8A89D3229068} Clé orpheline ~ Toolbar: Scanned in 00mn 00s ---\\ Autres liens utilisateurs (O4) O4 - GS\QuickLaunch [j]: Vuze.lnk . (.Vuze Inc. - Pas de description.) -- C:\Program Files (x86)\Vuze\Azureus.exe =>P2P.Azureus ~ Global Startup: 1 Scanned in 00mn 02s ---\\ Applications lancées au démarrage du système (O4) O4 - HKCU\..\Run: [GoogleChromeAutoLaunch_C0A832FBA3DE88C6BCC073377A7A221F] . (.Google Inc. - Google Chrome.) -- C:\Users\j\AppData\Local\Google\Chrome\Application\chrome.exe O4 - HKCU\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Users\j\AppData\Local\Google\Update\GoogleUpdate.exe =>.Google Inc O4 - HKCU\..\Run: [spotify Web Helper] . (.Spotify Ltd - SpotifyWebHelper.) -- C:\Users\j\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe O4 - HKLM\..\Wow6432Node\Run: [avgnt] . (.Avira Operations GmbH & Co. KG - Avira system tray application.) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe O4 - HKLM\..\Wow6432Node\Run: [sunJavaUpdateSched] . (.Oracle Corporation - Java Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe =>.Oracle Corporation O4 - HKLM\..\Wow6432Node\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe O4 - HKLM\..\Wow6432Node\Run: [Avira Systray] . (.Avira Operations GmbH & Co. KG - Avira.) -- C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe O4 - HKUS\S-1-5-19\..\Run: [sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-20\..\Run: [sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-21-3816893936-3436071168-248968357-1001\..\Run: [GoogleChromeAutoLaunch_C0A832FBA3DE88C6BCC073377A7A221F] . (.Google Inc. - Google Chrome.) -- C:\Users\j\AppData\Local\Google\Chrome\Application\chrome.exe O4 - HKUS\S-1-5-21-3816893936-3436071168-248968357-1001\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Users\j\AppData\Local\Google\Update\GoogleUpdate.exe =>.Google Inc O4 - HKUS\S-1-5-21-3816893936-3436071168-248968357-1001\..\Run: [spotify Web Helper] . (.Spotify Ltd - SpotifyWebHelper.) -- C:\Users\j\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe ~ Application: Scanned in 00mn 00s ---\\ Invisibilité de l'icône d'options IE dans le panneau de Configuration (O5) O5 - control.ini: [HKLM\..\Control Panel] inetcpl.cpl=no ~ IE Control Panel: 1 Scanned in 00mn 00s ---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9) O9 - Extra button: Se&nd to OneNote [64Bits] - {2670000A-7350-4f3c-8081-5663EE0C6C49} . (.Microsoft Corporation - Microsoft OneNote Internet Explorer Add-in.) -- C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\ONBttnIE.dll =>.Microsoft Corporation O9 - Extra button: Lync Click to Call [64Bits] - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -- C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\lync.exe (.not file.) O9 - Extra button: OneNote Lin&ked Notes [64Bits] - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} . (.Microsoft Corporation - Microsoft OneNote Internet Explorer Add-in.) -- C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\ONBttnIELinkedNotes.dll =>.Microsoft Corporation ~ IE Extra Buttons: Scanned in 00mn 00s ---\\ Winsock hijacker (Layered Service Provider) (O10) O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\windows\system32\NLAapi.dll O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\windows\system32\mswsock.dll =>.Microsoft Corporation O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\windows\system32\winrnr.dll O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d’affectation de noms de messagerie.) -- C:\windows\system32\napinsp.dll O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\windows\system32\pnrpnsp.dll O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\windows\system32\pnrpnsp.dll O10 - WLSP:\000000000007\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll =>.Microsoft Corporation O10 - WLSP:\000000000008\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll =>.Microsoft Corporation O10 - WLSP:\000000000009\Winsock LSP File . (.Apple Inc. - Bonjour Namespace Provider.) -- C:\Program Files (x86)\Bonjour\mdnsNSP.dll ~ Winsock: 9 Scanned in 00mn 00s ---\\ Modification Domaine/Adresses DNS (O17) O17 - HKLM\System\CCS\Services\Tcpip\..\{937BABC7-5290-404D-A5DC-1404BCBD139F}: DhcpNameServer = 192.168.1.254 O17 - HKLM\System\CCS\Services\Tcpip\..\{EB7B7411-B59D-4D39-8ABE-93BDDBD6AC7B}: DhcpNameServer = 192.168.0.254 O17 - HKLM\System\CS1\Services\Tcpip\..\{937BABC7-5290-404D-A5DC-1404BCBD139F}: DhcpNameServer = 192.168.1.254 O17 - HKLM\System\CS1\Services\Tcpip\..\{EB7B7411-B59D-4D39-8ABE-93BDDBD6AC7B}: DhcpNameServer = 192.168.0.254 O17 - HKLM\System\CS2\Services\Tcpip\..\{937BABC7-5290-404D-A5DC-1404BCBD139F}: DhcpNameServer = 192.168.1.254 O17 - HKLM\System\CS2\Services\Tcpip\..\{EB7B7411-B59D-4D39-8ABE-93BDDBD6AC7B}: DhcpNameServer = 192.168.0.254 O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.254 ~ Domain: Scanned in 00mn 00s ---\\ Protocole additionnel (O18) O18 - Handler: wlpg [64Bits] - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (...) -- O18 - Filter: text/xml [64Bits] - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.dll =>.Microsoft Corporation ~ Protocole Additionnel: Scanned in 00mn 00s ---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20) O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\Windows\System32\igfxdev.dll ~ Winlogon: Scanned in 00mn 00s ---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21) O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. ~ SSODL: 1 Scanned in 00mn 00s ---\\ Liste des services NT non Microsoft et non désactivés (O23) O23 - Service: Avira Planificateur (AntiVirSchedulerService) . (.Avira Operations GmbH & Co. KG - Antivirus Host Framework Service.) - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe O23 - Service: Avira Protection temps réel (AntiVirService) . (.Avira Operations GmbH & Co. KG - Antivirus Host Framework Service.) - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe O23 - Service: Apple Mobile Device (Apple Mobile Device) . (.Apple Inc. - MobileDeviceService.) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe O23 - Service: Avira Service Host (Avira.OE.ServiceHost) . (.Avira Operations GmbH & Co. KG - Avira.OE.ServiceHost.) - C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google Inc O23 - Service: Intel® Rapid Storage Technology (IAStorDataMgrSvc) . (.Intel Corporation - IAStorDataSvc.) - C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe O23 - Service: Intel® Management and Security Application Local Manageme (LMS) . (.Intel Corporation - Local Manageability Service.) - C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe O23 - Service: Ma-Config Agent (MaConfigAgent) . (.CybelSoft - Service de détection matériel.) - C:\Program Files\ma-config.com\MaConfigAgent.exe O23 - Service: (MBAMScheduler) . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe O23 - Service: (MBAMService) . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe O23 - Service: Micro Star SCM (Micro Star SCM) . (.Micro-Star International Co., Ltd. - MSI SCM Service.) - C:\Program Files (x86)\System Control Manager\MSIService.exe O23 - Service: Online Games Manager (ogmservice) . (.RealNetworks, Inc. - Online Games Manager.) - C:\Program Files (x86)\Online Games Manager\ogmservice.exe O23 - Service: Intel® Management & Security Application User Notificatio (UNS) . (.Intel Corporation - User Notification Service.) - C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe ~ Services: 14 Scanned in 00mn 07s ---\\ Enumération Active Desktop & MHTML Editor (O24) O24 - Default MHTML Editor: Last - .(...) - (.not file.) ~ Desktop Component: 4 Scanned in 00mn 00s ---\\ Enumère les données de BootExecute (BEX) (O34) O34 - HKLM BootExecute: (autocheck autochk *) - File not found ~ BEX: 1 Scanned in 00mn 00s ---\\ Tâches planifiées en automatique (O39) [MD5.749F94C424524285DCDA84D695ABC12F] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [267440] [MD5.13001914838576400EB9AFDE95AE71CE] [APT] [CCleanerSkipUAC] (.Piriform Ltd.) -- C:\Program Files\CCleaner\CCleaner.exe [3091296] [MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [116648] [MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [116648] [MD5.51508F0C2476177E50C31B0BBFBF1BDB] [APT] [GoogleUpdateTaskUserS-1-5-21-3816893936-3436071168-248968357-1001Core] (.Google Inc..) -- C:\Users\j\AppData\Local\Google\Update\GoogleUpdate.exe [107912] [MD5.51508F0C2476177E50C31B0BBFBF1BDB] [APT] [GoogleUpdateTaskUserS-1-5-21-3816893936-3436071168-248968357-1001UA] (.Google Inc..) -- C:\Users\j\AppData\Local\Google\Update\GoogleUpdate.exe [107912] [MD5.00000000000000000000000000000000] [APT] [{A2E8F4B9-DCFB-412B-A59B-474C1D7EBA7A}] (...) -- C:\bureau\ZHPDiag\ZHPhep.exe (.not file.) [0] [MD5.34EBD4FF6A24D86BB4716D6AFCC1A89B] [APT] [AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [561984] O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\Tasks\Adobe Flash Player Updater.job [1002] O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Tasks\Adobe Flash Player Updater [1002] O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job [1066] O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore [1066] O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job [1070] O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA [1070] O39 - APT: GoogleUpdateTaskUserS-1-5-21-3816893936-3436071168-248968357-1001Core - (.Google Inc..) -- C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3816893936-3436071168-248968357-1001Core.job [1010] O39 - APT: GoogleUpdateTaskUserS-1-5-21-3816893936-3436071168-248968357-1001Core - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3816893936-3436071168-248968357-1001Core [1010] O39 - APT: GoogleUpdateTaskUserS-1-5-21-3816893936-3436071168-248968357-1001UA - (.Google Inc..) -- C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3816893936-3436071168-248968357-1001UA.job [1062] O39 - APT: GoogleUpdateTaskUserS-1-5-21-3816893936-3436071168-248968357-1001UA - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3816893936-3436071168-248968357-1001UA [1062] ~ Scheduled Task: 14 Scanned in 00mn 06s ---\\ Composants installés (ActiveSetup Installed Components) (O40) O40 - ASIC: Microsoft Windows Media Player [64Bits] - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll =>.Microsoft Corporation O40 - ASIC: Internet Explorer [64Bits] - >{26923b43-4d38-484f-9b9e-de460746276c} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe O40 - ASIC: Browser Customizations [64Bits] - >{60B49E34-C7CC-11D0-8953-00A0C90347FF} . (.Microsoft Corporation - Personnalisation d’IEAK.) -- C:\Windows\System32\iedkcs32.dll O40 - ASIC: Microsoft Windows Media Player 12.0 [64Bits] - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\SysWOW64\wmpdxm.dll =>.Microsoft Corporation O40 - ASIC: Themes Setup [64Bits] - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\Windows\System32\themeui.dll O40 - ASIC: Microsoft Windows [64Bits] - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Windows Mail.) -- C:\Program Files (x86)\Windows Mail\WinMail.exe =>.Microsoft Corporation O40 - ASIC: Browsing Enhancements [64Bits] - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\Windows\System32\msieftp.dll O40 - ASIC: Microsoft Windows Media Player [64Bits] - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll =>.Microsoft Corporation O40 - ASIC: Windows Desktop Update [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll O40 - ASIC: Web Platform Customizations [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe O40 - ASIC: (no name) [64Bits] - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\system32\mscories.dll ~ Active Setup: 11 Scanned in 00mn 00s ---\\ Pilotes lancés au démarrage du système (O41) O41 - Driver: C:\Windows\System32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys O41 - Driver: (avipbb) . (.Avira Operations GmbH & Co. KG - Avira Driver for Security Enhancement.) - C:\Windows\System32\DRIVERS\avipbb.sys O41 - Driver: (avkmgr) . (.Avira Operations GmbH & Co. KG - Avira Manager Driver.) - C:\Windows\System32\DRIVERS\avkmgr.sys O41 - Driver: (blbdrive) . (.Microsoft Corporation - BLB Drive Driver.) - C:\Windows\system32\DRIVERS\blbdrive.sys O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys O41 - Driver: C:\Windows\System32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys O41 - Driver: C:\Windows\System32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\System32\drivers\discache.sys O41 - Driver: (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\system32\DRIVERS\mssmbios.sys O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys O41 - Driver: C:\Windows\System32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys O41 - Driver: C:\Windows\System32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys O41 - Driver: C:\Windows\System32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys O41 - Driver: C:\Windows\System32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) - C:\Windows\System32\DRIVERS\rdbss.sys O41 - Driver: C:\Windows\System32\DRIVERS\RDPCDD.sys (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys O41 - Driver: C:\Windows\System32\drivers\RDPENCDD.sys (RDPENCDD) . (.Microsoft Corporation - RDP Encoder Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys O41 - Driver: C:\Windows\System32\drivers\RdpRefMp.sys (RDPREFMP) . (.Microsoft Corporation - RDP Reflector Driver Miniport.) - C:\Windows\System32\drivers\rdprefmp.sys O41 - Driver: C:\Windows\System32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys O41 - Driver: (TermDD) . (.Microsoft Corporation - Remote Desktop Server Driver.) - C:\Windows\system32\DRIVERS\termdd.sys O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys O41 - Driver: (vwififlt) . (.Microsoft Corporation - Virtual WiFi Filter Driver.) - C:\Windows\System32\DRIVERS\vwififlt.sys O41 - Driver: C:\Windows\System32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys O41 - Driver: (WfpLwf) . (.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - C:\Windows\System32\DRIVERS\wfplwf.sys ~ Drivers: 66 Scanned in 00mn 00s ---\\ Logiciels installés (O42) O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe AIR O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {52E225FC-FCB4-41F7-837B-6E37FB05BD7B} O42 - Logiciel: Adobe Flash Player 15 ActiveX - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player ActiveX O42 - Logiciel: Adobe Flash Player 15 Plugin - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player Plugin O42 - Logiciel: Adobe Photoshop Lightroom 4.4 64-bit - (.Adobe.) [HKLM][64Bits] -- {11A955CD-4398-405A-886D-E464C3618FBF} =>.Adobe Systems Incorporated O42 - Logiciel: Adobe Reader 9.1 - Français - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-7AD7-1036-7B44-A91000000001} O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM][64Bits] -- {83CAF0DE-8D3B-4C37-A631-2B8F16EC3031} O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM][64Bits] -- {BDD99690-3541-4619-9D2A-3CDDB3E15F9E} O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM][64Bits] -- {789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE} =>.Apple Inc O42 - Logiciel: Audacity 2.0.6 - (.Audacity Team.) [HKLM][64Bits] -- Audacity_is1 O42 - Logiciel: Avira Free Antivirus v14.0.7.468 - (.Avira.) [HKLM][64Bits] -- Avira AntiVir Desktop O42 - Logiciel: Avira v1.1.27.25527 - (.Avira Operations & Co. KG.) [HKLM][64Bits] -- {21388E37-9EC5-4549-95CA-95D9B2D327A4} O42 - Logiciel: Avira v1.1.27.25527 - (.Avira Operations & Co. KG.) [HKLM][64Bits] -- {e7c7c227-b742-4878-9425-f09bbf9951db} O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM][64Bits] -- {6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D} O42 - Logiciel: BurnRecovery - (.Micro-Star International Co., Ltd..) [HKLM][64Bits] -- {2892E1B7-E24D-4CCB-B8A7-B63D4B66F89F} O42 - Logiciel: CCleaner - (.Piriform.) [HKLM][64Bits] -- CCleaner O42 - Logiciel: CDBurnerXP - (.CDBurnerXP.) [HKLM][64Bits] -- {7E265513-8CDA-4631-B696-F40D983F3B07}_is1 O42 - Logiciel: Cheat Engine 6.1 - (.Dark Byte.) [HKLM][64Bits] -- Cheat Engine 6.1_is1 O42 - Logiciel: Cheat Engine 6.3 - (.Cheat Engine.) [HKLM][64Bits] -- Cheat Engine 6.3_is1 O42 - Logiciel: Complément Messenger - (.Microsoft Corporation.) [HKLM][64Bits] -- {6E5324C1-84FC-4F76-9A3A-C65E07F80EE6} O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM][64Bits] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF} O42 - Logiciel: Finger Sensing Pad Driver - (.Sentelic.) [HKLM][64Bits] -- {E86906FF-C63D-4EAF-ACE7-5F8D55FBEA9A} O42 - Logiciel: Free YouTube to MP3 Converter version 3.12.43.806 - (.DVDVideoSoft Ltd..) [HKLM][64Bits] -- Free YouTube to MP3 Converter_is1 O42 - Logiciel: FreeMi UPnP Media Server - (.Stéphane Mitermite.) [HKLM][64Bits] -- FreeMi UPnP Media Server O42 - Logiciel: Google Chrome - (.Google Inc..) [HKCU][64Bits] -- Google Chrome O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} O42 - Logiciel: Google Earth - (.Google.) [HKLM][64Bits] -- {4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E} O42 - Logiciel: Intel® Graphics Media Accelerator Driver - (.Intel Corporation.) [HKLM][64Bits] -- {F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA} O42 - Logiciel: Intel® Management Engine Components - (.Intel Corporation.) [HKLM][64Bits] -- {65153EA5-8B6E-43B6-857B-C6E4FC25798A} O42 - Logiciel: Intel® Rapid Storage Technology - (.Intel Corporation.) [HKLM][64Bits] -- {3E29EE6C-963A-4aae-86C1-DC237C4A49FC} O42 - Logiciel: Java 7 Update 67 - (.Oracle.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F83217051FF} O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM][64Bits] -- {1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4} O42 - Logiciel: LAME v3.99.3 (for Windows) - (...) [HKLM][64Bits] -- LAME_is1 O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM][64Bits] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F} O42 - Logiciel: MSVCRT_amd64 - (.Microsoft.) [HKLM][64Bits] -- {D0B44725-3666-492D-BEF6-587A14BD9BD9} O42 - Logiciel: Ma-Config.com (64 bits) - (.Cybelsoft.) [HKLM][64Bits] -- {50A9E459-A2CF-4109-BB73-9079702BEBF2} O42 - Logiciel: Malwarebytes Anti-Malware version 2.0.4.1028 - (.Malwarebytes Corporation.) [HKLM][64Bits] -- Malwarebytes Anti-Malware_is1 O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM][64Bits] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00} O42 - Logiciel: Microsoft Works - (.Microsoft Corporation.) [HKLM][64Bits] -- {3B160861-7250-451E-B5EE-8B92BF30A710} O42 - Logiciel: Mozilla Firefox 32.0.3 (x86 fr) - (.Mozilla.) [HKLM][64Bits] -- Mozilla Firefox 32.0.3 (x86 fr) O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM][64Bits] -- MozillaMaintenanceService O42 - Logiciel: Office 15 Click-to-Run Extensibility Component - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-008C-0000-0000-0000000FF1CE} O42 - Logiciel: Office 15 Click-to-Run Licensing Component - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-008F-0000-1000-0000000FF1CE} O42 - Logiciel: Office 15 Click-to-Run Localization Component - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-008C-040C-0000-0000000FF1CE} O42 - Logiciel: Online Games Manager v1.30 - (.Real Networks, Inc..) [HKLM][64Bits] -- Online Games Manager O42 - Logiciel: PDFCreator - (.Frank Heindörfer, Philip Chinery.) [HKLM][64Bits] -- {0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D} O42 - Logiciel: PMU Poker - (.PMU.) [HKLM][64Bits] -- PMUPoker O42 - Logiciel: Pacman (remove only) - (.JenkatGames.) [HKLM][64Bits] -- Pacman O42 - Logiciel: PhotoFiltre 7 - (...) [HKCU][64Bits] -- PhotoFiltre 7 O42 - Logiciel: PokerStars.fr - (.PokerStars.fr.) [HKLM][64Bits] -- PokerStars.fr O42 - Logiciel: Realtek 8136 8168 8169 Ethernet Driver - (.Realtek.) [HKLM][64Bits] -- {8833FFB6-5B0C-4764-81AA-06DFEED9A476} O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC} O42 - Logiciel: SFR - Kit de connexion - (.SFR.) [HKLM][64Bits] -- SFR_Kit O42 - Logiciel: SFR - Media Center - (.SFR.) [HKLM][64Bits] -- SFR_Media Center O42 - Logiciel: Service Photo Online - (...) [HKLM][64Bits] -- Service Photo Online O42 - Logiciel: Skype™ 6.16 - (.Skype Technologies S.A..) [HKLM][64Bits] -- {7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7} O42 - Logiciel: Spotify - (.Spotify AB.) [HKCU][64Bits] -- Spotify O42 - Logiciel: System Control Manager - (.Micro-Star International Co., Ltd..) [HKLM][64Bits] -- {ED9C5D25-55DF-48D8-9328-2AC0D75DE5D8} O42 - Logiciel: VC80CRTRedist - 8.0.50727.6195 - (.DivX, Inc.) [HKLM][64Bits] -- {933B4015-4618-4716-A828-5289FC03165F} O42 - Logiciel: VLC media player 1.1.11 - (.VideoLAN.) [HKLM][64Bits] -- VLC media player =>.VideoLAN O42 - Logiciel: Vuze - (.Vuze Inc..) [HKLM][64Bits] -- 8461-7759-5462-8226 =>P2P.Azureus O42 - Logiciel: WinRAR archiver - (...) [HKLM][64Bits] -- WinRAR archiver O42 - Logiciel: Winamax Poker - (.Winamax.) [HKLM][64Bits] -- wam.04351C371E530C3762CBA45FA283ED972DCDEFB6.1 O42 - Logiciel: Winamax Poker - (.Winamax.) [HKLM][64Bits] -- {6EC58010-CA72-8A16-ED62-5BAB01A2AF73} O42 - Logiciel: Windows Driver Package - ENE (EUCR) USB (12/04/2009 5.89.0.64) - (.ENE.) [HKLM][64Bits] -- 7F973C87231D745EBF31E772CC38BB9B185D3819 O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM][64Bits] -- {2ABBBD91-91E5-4AD7-929A-FE15D1DC0576} O42 - Logiciel: msi Software Install - (.Micro-Star International Co., Ltd..) [HKLM][64Bits] -- {A840FFFB-3A80-4C24-AB34-BE9F56BEB4CE} ~ Logic: 57 Scanned in 00mn 00s ---\\ HKCU & HKLM Software Keys [HKCU\Software\AVC] [HKCU\Software\Adobe Lightroom] [HKCU\Software\Adobe] [HKCU\Software\AppDataLow\Software\Adobe] [HKCU\Software\AppDataLow\Software\JavaSoft] [HKCU\Software\AppDataLow] [HKCU\Software\Apple Computer, Inc.] [HKCU\Software\Apple Inc.] [HKCU\Software\Audacity] [HKCU\Software\Avira] [HKCU\Software\Azureus] =>P2P.Azureus [HKCU\Software\Canneverbe Limited] [HKCU\Software\CeWe Color] [HKCU\Software\Cheat Engine] [HKCU\Software\Classes] [HKCU\Software\Clients] [HKCU\Software\Cygnus Solutions] [HKCU\Software\Cygwin] [HKCU\Software\DVDVideoSoft] [HKCU\Software\Depositfiles] [HKCU\Software\DivXNetworks] [HKCU\Software\Full Tilt Poker] [HKCU\Software\Google] [HKCU\Software\IM Providers] [HKCU\Software\Intel] [HKCU\Software\JavaSoft] [HKCU\Software\LinuxLive] [HKCU\Software\MCAFEE] [HKCU\Software\Macromedia] [HKCU\Software\Macrovision] [HKCU\Software\Malwarebytes' Anti-Malware] [HKCU\Software\MozillaPlugins] [HKCU\Software\Mozilla] [HKCU\Software\Netscape] [HKCU\Software\Neuf] [HKCU\Software\ODBC] [HKCU\Software\PDFCreator] [HKCU\Software\PMU] [HKCU\Software\PTECH] [HKCU\Software\Piriform] [HKCU\Software\Policies] [HKCU\Software\Realtek] [HKCU\Software\SecureSurf] [HKCU\Software\Skype] [HKCU\Software\TCP Optimizer] [HKCU\Software\TeleCharger] [HKCU\Software\Tific] [HKCU\Software\Trend Micro] [HKCU\Software\Trolltech] [HKCU\Software\Turbopoker.fr] [HKCU\Software\VB and VBA Program Settings] [HKCU\Software\WinRAR] [HKCU\Software\Winamp] [HKCU\Software\Wow6432Node] [HKCU\Software\ej-technologies] [HKLM\Software\ATI Technologies] [HKLM\Software\AVC] [HKLM\Software\Apple Computer, Inc.] [HKLM\Software\Apple Inc.] [HKLM\Software\Classes] [HKLM\Software\Clients] [HKLM\Software\DivX] [HKLM\Software\GEAR Software] [HKLM\Software\IM Providers] [HKLM\Software\Intel] [HKLM\Software\Macromedia] [HKLM\Software\MozillaPlugins] [HKLM\Software\Mozilla] [HKLM\Software\ODBC] [HKLM\Software\Piriform] [HKLM\Software\Policies] [HKLM\Software\RTLSetup] [HKLM\Software\Realtek] [HKLM\Software\RegisteredApplications] [HKLM\Software\SRS Labs] [HKLM\Software\Sonic] [HKLM\Software\Waves Audio] [HKLM\Software\Wow6432Node\Adobe] [HKLM\Software\Wow6432Node\AdwCleaner] [HKLM\Software\Wow6432Node\Apple Computer, Inc.] [HKLM\Software\Wow6432Node\Apple Inc.] [HKLM\Software\Wow6432Node\Avira] [HKLM\Software\Wow6432Node\Azureus] =>P2P.Azureus [HKLM\Software\Wow6432Node\Bunndle] [HKLM\Software\Wow6432Node\Canneverbe Limited] [HKLM\Software\Wow6432Node\Classes] [HKLM\Software\Wow6432Node\Clients] [HKLM\Software\Wow6432Node\Cygnus Solutions] [HKLM\Software\Wow6432Node\Cygwin] [HKLM\Software\Wow6432Node\DVDVideoSoft] [HKLM\Software\Wow6432Node\Depositfiles] [HKLM\Software\Wow6432Node\Digital River] [HKLM\Software\Wow6432Node\DivXNetworks] [HKLM\Software\Wow6432Node\DivX] [HKLM\Software\Wow6432Node\Full Tilt Poker] [HKLM\Software\Wow6432Node\Google] [HKLM\Software\Wow6432Node\HPS] [HKLM\Software\Wow6432Node\IM Providers] [HKLM\Software\Wow6432Node\Intel] [HKLM\Software\Wow6432Node\JavaSoft] [HKLM\Software\Wow6432Node\JreMetrics] [HKLM\Software\Wow6432Node\Lame For Audacity] [HKLM\Software\Wow6432Node\MSI] [HKLM\Software\Wow6432Node\Macromedia] [HKLM\Software\Wow6432Node\Malwarebytes' Anti-Malware] [HKLM\Software\Wow6432Node\McAfee.com] [HKLM\Software\Wow6432Node\Micro-Star International Co., Ltd.] [HKLM\Software\Wow6432Node\MozillaPlugins] [HKLM\Software\Wow6432Node\Mozilla] [HKLM\Software\Wow6432Node\Neuf] [HKLM\Software\Wow6432Node\Notepad] [HKLM\Software\Wow6432Node\ODBC] [HKLM\Software\Wow6432Node\PDFCreator] [HKLM\Software\Wow6432Node\Policies] [HKLM\Software\Wow6432Node\Realtek Semiconductor Corp.] [HKLM\Software\Wow6432Node\Realtek] [HKLM\Software\Wow6432Node\RegisteredApplications] [HKLM\Software\Wow6432Node\SecureSurf] [HKLM\Software\Wow6432Node\Skype] [HKLM\Software\Wow6432Node\SymNRT] [HKLM\Software\Wow6432Node\VideoLAN] [HKLM\Software\Wow6432Node\Volatile] [HKLM\Software\Wow6432Node\Windows] [HKLM\Software\Wow6432Node\X-AVCSD] [HKLM\Software\Wow6432Node\anset] [HKLM\Software\Wow6432Node\ej-technologies] [HKLM\Software\Wow6432Node\mozilla.org] [HKLM\Software\Wow6432Node] [HKLM\Software\cybelsoft] ~ Key Software: 258 Scanned in 00mn 00s ---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43) O43 - CFD: 23/03/2012 - 20:45:53 - [] ----D C:\Program Files (x86)\Adobe O43 - CFD: 21/10/2014 - 23:49:36 - [] ----D C:\Program Files (x86)\Apple Software Update =>.Apple Inc O43 - CFD: 11/11/2014 - 02:36:45 - [] ----D C:\Program Files (x86)\Audacity O43 - CFD: 21/12/2014 - 10:19:24 - [] ----D C:\Program Files (x86)\Avira O43 - CFD: 21/10/2014 - 23:48:36 - [] ----D C:\Program Files (x86)\Bonjour O43 - CFD: 11/09/2012 - 19:45:06 - [] ----D C:\Program Files (x86)\CDBurnerXP O43 - CFD: 07/11/2014 - 19:23:27 - [] ----D C:\Program Files (x86)\CDex O43 - CFD: 17/12/2013 - 13:01:41 - [] ----D C:\Program Files (x86)\Cheat Engine 6.1 O43 - CFD: 21/01/2014 - 21:25:56 - [] ----D C:\Program Files (x86)\Cheat Engine 6.3 O43 - CFD: 21/10/2014 - 23:48:07 - [] ----D C:\Program Files (x86)\Common Files O43 - CFD: 21/03/2012 - 13:11:37 - [0] ----D C:\Program Files (x86)\DepositFiles O43 - CFD: 01/08/2012 - 11:10:12 - [] ----D C:\Program Files (x86)\DivX O43 - CFD: 10/08/2014 - 11:22:56 - [] ----D C:\Program Files (x86)\DVDVideoSoft O43 - CFD: 04/11/2012 - 15:36:06 - [] ----D C:\Program Files (x86)\Full Tilt Poker O43 - CFD: 18/05/2014 - 16:43:50 - [] ----D C:\Program Files (x86)\Google O43 - CFD: 14/09/2010 - 21:04:01 - [] --H-D C:\Program Files (x86)\InstallShield Installation Information O43 - CFD: 14/09/2010 - 20:52:42 - [] ----D C:\Program Files (x86)\Intel O43 - CFD: 11/04/2013 - 17:40:45 - [] ----D C:\Program Files (x86)\Internet Explorer O43 - CFD: 22/10/2014 - 20:15:52 - [] ----D C:\Program Files (x86)\iTunes O43 - CFD: 07/10/2014 - 22:23:51 - [] ----D C:\Program Files (x86)\Java O43 - CFD: 08/01/2015 - 23:50:21 - [] ----D C:\Program Files (x86)\Malwarebytes Anti-Malware O43 - CFD: 07/06/2013 - 21:36:48 - [] ----D C:\Program Files (x86)\Microsoft Office O43 - CFD: 14/09/2010 - 21:19:12 - [] ----D C:\Program Files (x86)\Microsoft Office Suite Activation Assistant O43 - CFD: 16/10/2013 - 15:22:03 - [] ----D C:\Program Files (x86)\Microsoft Silverlight O43 - CFD: 23/12/2011 - 00:04:06 - [] ----D C:\Program Files (x86)\Microsoft SQL Server Compact Edition O43 - CFD: 11/10/2012 - 21:56:19 - [] ----D C:\Program Files (x86)\Microsoft Works O43 - CFD: 19/09/2014 - 20:33:49 - [] ----D C:\Program Files (x86)\Microsoft.NET O43 - CFD: 10/10/2014 - 13:19:46 - [] ----D C:\Program Files (x86)\Mozilla Firefox O43 - CFD: 10/11/2014 - 17:19:27 - [] ----D C:\Program Files (x86)\Mozilla Maintenance Service O43 - CFD: 14/07/2009 - 06:32:38 - [] ----D C:\Program Files (x86)\MSBuild O43 - CFD: 20/09/2014 - 08:04:06 - [] ----D C:\Program Files (x86)\MSECache O43 - CFD: 14/09/2010 - 21:05:30 - [] ----D C:\Program Files (x86)\MSI O43 - CFD: 01/07/2012 - 21:39:45 - [] ----D C:\Program Files (x86)\Online Games Manager O43 - CFD: 13/07/2012 - 23:56:44 - [] ----D C:\Program Files (x86)\Pacman O43 - CFD: 02/03/2012 - 15:32:54 - [] ----D C:\Program Files (x86)\PDFCreator O43 - CFD: 18/02/2012 - 15:49:16 - [] ----D C:\Program Files (x86)\PhotoFiltre 7 O43 - CFD: 16/09/2014 - 08:33:10 - [] ----D C:\Program Files (x86)\PokerStars.FR O43 - CFD: 14/09/2010 - 20:51:09 - [] ----D C:\Program Files (x86)\Realtek O43 - CFD: 14/07/2009 - 06:32:38 - [] ----D C:\Program Files (x86)\Reference Assemblies O43 - CFD: 07/03/2012 - 10:32:48 - [] ----D C:\Program Files (x86)\ServicePhotoOnline O43 - CFD: 30/04/2013 - 18:58:10 - [] ----D C:\Program Files (x86)\SFR O43 - CFD: 20/06/2014 - 23:19:49 - [] R---D C:\Program Files (x86)\Skype O43 - CFD: 14/09/2010 - 20:54:36 - [] ----D C:\Program Files (x86)\System Control Manager O43 - CFD: 14/09/2010 - 20:51:02 - [0] --H-D C:\Program Files (x86)\Temp O43 - CFD: 14/07/2009 - 05:57:06 - [0] --H-D C:\Program Files (x86)\Uninstall Information O43 - CFD: 31/01/2012 - 22:42:14 - [] ----D C:\Program Files (x86)\VideoLAN O43 - CFD: 05/07/2014 - 22:51:12 - [] ----D C:\Program Files (x86)\Vuze =>P2P.Azureus O43 - CFD: 21/11/2013 - 20:27:02 - [] ----D C:\Program Files (x86)\Winamax Poker O43 - CFD: 08/11/2013 - 18:28:02 - [] ----D C:\Program Files (x86)\Winamp O43 - CFD: 04/01/2012 - 03:37:34 - [] ----D C:\Program Files (x86)\Windows Defender O43 - CFD: 23/05/2013 - 07:40:02 - [] ----D C:\Program Files (x86)\Windows Live O43 - CFD: 04/01/2012 - 03:37:36 - [] ----D C:\Program Files (x86)\Windows Mail =>.Microsoft Corporation O43 - CFD: 04/01/2012 - 03:37:35 - [] ----D C:\Program Files (x86)\Windows Media Player =>.Microsoft Corporation O43 - CFD: 14/07/2009 - 06:32:38 - [] ----D C:\Program Files (x86)\Windows NT O43 - CFD: 04/01/2012 - 03:37:35 - [] ----D C:\Program Files (x86)\Windows Photo Viewer O43 - CFD: 14/07/2009 - 06:32:40 - [] ----D C:\Program Files (x86)\Windows Portable Devices O43 - CFD: 04/01/2012 - 03:37:36 - [] ----D C:\Program Files (x86)\Windows Sidebar O43 - CFD: 14/09/2010 - 20:58:12 - [] ----D C:\Program Files (x86)\WinRAR 3.61 Multi O43 - CFD: 08/01/2015 - 19:08:07 - [] ----D C:\Program Files (x86)\ZHPDiag =>.Nicolas Coolman O43 - CFD: 23/12/2011 - 00:06:21 - [] ----D C:\Program Files (x86)\Common Files\Adobe O43 - CFD: 02/11/2013 - 20:18:40 - [] ----D C:\Program Files (x86)\Common Files\Adobe AIR O43 - CFD: 22/10/2014 - 20:15:02 - [] ----D C:\Program Files (x86)\Common Files\Apple O43 - CFD: 03/02/2013 - 13:53:01 - [] ----D C:\Program Files (x86)\Common Files\DESIGNER O43 - CFD: 10/08/2014 - 11:22:45 - [] ----D C:\Program Files (x86)\Common Files\DVDVideoSoft O43 - CFD: 14/09/2010 - 20:54:21 - [] ----D C:\Program Files (x86)\Common Files\InstallShield O43 - CFD: 14/09/2010 - 20:48:24 - [] ----D C:\Program Files (x86)\Common Files\Intel O43 - CFD: 04/04/2012 - 12:45:55 - [] ----D C:\Program Files (x86)\Common Files\Intel Corporation O43 - CFD: 07/10/2014 - 22:24:04 - [] ----D C:\Program Files (x86)\Common Files\Java O43 - CFD: 25/09/2014 - 08:09:11 - [] ----D C:\Program Files (x86)\Common Files\microsoft shared O43 - CFD: 13/07/2012 - 23:56:43 - [] ----D C:\Program Files (x86)\Common Files\Pacman O43 - CFD: 14/09/2010 - 20:51:51 - [] ----D C:\Program Files (x86)\Common Files\postureAgent O43 - CFD: 01/08/2012 - 11:10:11 - [] ----D C:\Program Files (x86)\Common Files\PX Storage Engine O43 - CFD: 14/07/2009 - 04:20:08 - [] ----D C:\Program Files (x86)\Common Files\Services O43 - CFD: 20/06/2014 - 23:19:49 - [] ----D C:\Program Files (x86)\Common Files\Skype O43 - CFD: 14/07/2009 - 04:20:08 - [] ----D C:\Program Files (x86)\Common Files\SpeechEngines O43 - CFD: 04/01/2012 - 03:37:34 - [] ----D C:\Program Files (x86)\Common Files\System O43 - CFD: 23/12/2011 - 00:01:36 - [] ----D C:\Program Files (x86)\Common Files\Windows Live O43 - CFD: 22/10/2014 - 20:14:52 - [] ----D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 O43 - CFD: 11/06/2013 - 05:52:34 - [] ----D C:\ProgramData\Adobe O43 - CFD: 21/10/2014 - 23:49:27 - [] ----D C:\ProgramData\Apple O43 - CFD: 21/10/2014 - 23:52:30 - [] ----D C:\ProgramData\Apple Computer O43 - CFD: 14/07/2009 - 06:08:56 - [] -SH-D C:\ProgramData\Application Data O43 - CFD: 20/08/2014 - 21:29:59 - [] ----D C:\ProgramData\Avira O43 - CFD: 11/09/2012 - 19:45:24 - [] ----D C:\ProgramData\Canneverbe Limited O43 - CFD: 14/07/2009 - 06:08:56 - [] -SH-D C:\ProgramData\Desktop O43 - CFD: 01/08/2012 - 11:10:13 - [] ----D C:\ProgramData\DivX O43 - CFD: 14/07/2009 - 06:08:56 - [] -SH-D C:\ProgramData\Documents O43 - CFD: 22/10/2014 - 20:15:52 - [] ----D C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7 O43 - CFD: 14/07/2009 - 06:08:56 - [] -SH-D C:\ProgramData\Favorites O43 - CFD: 07/03/2012 - 10:35:09 - [] ----D C:\ProgramData\hps O43 - CFD: 14/07/2013 - 10:05:12 - [] ----D C:\ProgramData\ma-config.com O43 - CFD: 28/07/2014 - 19:19:07 - [] ----D C:\ProgramData\Malwarebytes O43 - CFD: 28/02/2013 - 20:40:04 - [] ----D C:\ProgramData\McAfee O43 - CFD: 01/06/2014 - 17:07:11 - [] -S--D C:\ProgramData\Microsoft O43 - CFD: 16/10/2013 - 13:51:06 - [] ----D C:\ProgramData\Microsoft Help O43 - CFD: 27/11/2013 - 22:59:41 - [] ----D C:\ProgramData\Mozilla O43 - CFD: 29/09/2013 - 21:41:25 - [] ----D C:\ProgramData\Norton O43 - CFD: 31/07/2012 - 21:14:56 - [] ----D C:\ProgramData\NortonInstaller O43 - CFD: 07/10/2014 - 22:24:20 - [0] ----D C:\ProgramData\Oracle O43 - CFD: 21/12/2014 - 10:19:32 - [] ----D C:\ProgramData\Package Cache O43 - CFD: 24/12/2014 - 09:49:30 - [] ----D C:\ProgramData\regid.1991-06.com.microsoft O43 - CFD: 20/06/2014 - 23:19:45 - [] ----D C:\ProgramData\Skype O43 - CFD: 14/07/2009 - 06:08:56 - [] -SH-D C:\ProgramData\Start Menu O43 - CFD: 23/12/2011 - 00:35:43 - [] ----D C:\ProgramData\Sun O43 - CFD: 14/07/2009 - 06:08:56 - [] -SH-D C:\ProgramData\Templates O43 - CFD: 23/03/2012 - 09:49:19 - [] ----D C:\ProgramData\tmp O43 - CFD: 12/06/2013 - 01:53:42 - [] ----D C:\ProgramData\Windows Genuine Advantage O43 - CFD: 14/09/2010 - 20:33:29 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories O43 - CFD: 14/07/2009 - 05:57:13 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools O43 - CFD: 21/12/2014 - 10:19:26 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira O43 - CFD: 21/03/2013 - 13:21:40 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner O43 - CFD: 06/11/2014 - 12:08:17 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CDex O43 - CFD: 21/01/2014 - 21:25:56 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cheat Engine 6.3 O43 - CFD: 10/08/2014 - 11:22:55 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft O43 - CFD: 16/04/2014 - 19:50:53 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games O43 - CFD: 18/05/2014 - 16:44:07 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth =>.Google Inc O43 - CFD: 14/09/2010 - 20:53:00 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel O43 - CFD: 22/10/2014 - 20:15:53 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes O43 - CFD: 07/10/2014 - 22:23:51 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java O43 - CFD: 14/07/2013 - 10:05:18 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ma-config.com O43 - CFD: 14/07/2009 - 05:57:09 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance O43 - CFD: 08/01/2015 - 19:40:27 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware O43 - CFD: 14/09/2010 - 21:19:13 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office O43 - CFD: 19/03/2014 - 18:22:39 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013 O43 - CFD: 16/10/2013 - 13:46:42 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight O43 - CFD: 11/10/2012 - 21:56:19 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Works O43 - CFD: 14/09/2010 - 21:05:31 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\msi O43 - CFD: 02/03/2012 - 15:32:38 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator O43 - CFD: 18/02/2012 - 15:49:16 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhotoFiltre 7 O43 - CFD: 16/04/2014 - 19:50:53 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PMU Poker O43 - CFD: 30/07/2012 - 16:49:21 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PokerStars.FR O43 - CFD: 07/03/2012 - 10:34:58 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Service Photo Online O43 - CFD: 03/07/2013 - 17:58:15 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SFR O43 - CFD: 20/06/2014 - 23:19:51 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype O43 - CFD: 15/10/2013 - 10:46:15 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup O43 - CFD: 14/09/2010 - 20:54:36 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Control Manager O43 - CFD: 14/09/2010 - 18:51:27 - [0] R-H-D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC O43 - CFD: 22/06/2012 - 10:09:04 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live O43 - CFD: 14/09/2010 - 20:58:13 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR O43 - CFD: 08/01/2015 - 19:08:07 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP =>.Nicolas Coolman O43 - CFD: 01/08/2012 - 11:09:15 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zylom O43 - CFD: 09/02/2013 - 10:18:21 - [] ----D C:\Users\j\AppData\Roaming\.spotflux O43 - CFD: 11/06/2013 - 06:15:34 - [] ----D C:\Users\j\AppData\Roaming\Adobe O43 - CFD: 21/10/2014 - 23:59:14 - [] ----D C:\Users\j\AppData\Roaming\Apple Computer O43 - CFD: 29/11/2014 - 13:53:08 - [] ----D C:\Users\j\AppData\Roaming\Audacity O43 - CFD: 09/03/2013 - 12:59:54 - [] ----D C:\Users\j\AppData\Roaming\Avira O43 - CFD: 25/09/2014 - 15:04:17 - [] ----D C:\Users\j\AppData\Roaming\Azureus =>P2P.Azureus O43 - CFD: 11/09/2012 - 19:45:24 - [] ----D C:\Users\j\AppData\Roaming\Canneverbe Limited O43 - CFD: 17/02/2014 - 20:47:12 - [] ----D C:\Users\j\AppData\Roaming\Charles O43 - CFD: 20/03/2012 - 22:58:44 - [] ----D C:\Users\j\AppData\Roaming\DepositFiles Uploader O43 - CFD: 17/01/2012 - 19:20:00 - [] ----D C:\Users\j\AppData\Roaming\DivX O43 - CFD: 10/08/2014 - 11:23:11 - [] ----D C:\Users\j\AppData\Roaming\DVDVideoSoft O43 - CFD: 23/12/2011 - 00:06:45 - [] ----D C:\Users\j\AppData\Roaming\Identities O43 - CFD: 23/12/2011 - 00:07:20 - [] ----D C:\Users\j\AppData\Roaming\Intel Corporation O43 - CFD: 23/12/2011 - 00:08:04 - [] ----D C:\Users\j\AppData\Roaming\Macromedia O43 - CFD: 31/10/2013 - 20:36:50 - [] ----D C:\Users\j\AppData\Roaming\main O43 - CFD: 28/07/2014 - 19:19:14 - [0] ----D C:\Users\j\AppData\Roaming\Malwarebytes O43 - CFD: 14/09/2010 - 18:51:27 - [0] ----D C:\Users\j\AppData\Roaming\Media Center Programs O43 - CFD: 02/10/2014 - 14:00:51 - [] -S--D C:\Users\j\AppData\Roaming\Microsoft O43 - CFD: 15/10/2013 - 10:44:43 - [] ----D C:\Users\j\AppData\Roaming\Mozilla O43 - CFD: 13/07/2012 - 23:56:46 - [] ----D C:\Users\j\AppData\Roaming\Namco O43 - CFD: 07/10/2014 - 22:24:44 - [] ----D C:\Users\j\AppData\Roaming\Oracle O43 - CFD: 18/02/2012 - 15:52:05 - [] ----D C:\Users\j\AppData\Roaming\PhotoFiltre 7 O43 - CFD: 03/01/2013 - 17:53:09 - [] ----D C:\Users\j\AppData\Roaming\PMU O43 - CFD: 29/03/2012 - 00:43:56 - [] ----D C:\Users\j\AppData\Roaming\pokerth O43 - CFD: 25/10/2014 - 14:15:09 - [] ----D C:\Users\j\AppData\Roaming\Skype O43 - CFD: 09/08/2014 - 11:45:21 - [] ----D C:\Users\j\AppData\Roaming\Spotify O43 - CFD: 13/06/2012 - 18:26:50 - [0] ----D C:\Users\j\AppData\Roaming\Template O43 - CFD: 21/07/2012 - 13:25:09 - [] ----D C:\Users\j\AppData\Roaming\Tific O43 - CFD: 09/11/2014 - 12:28:07 - [] ----D C:\Users\j\AppData\Roaming\vlc O43 - CFD: 14/09/2013 - 20:14:09 - [] ----D C:\Users\j\AppData\Roaming\wam O43 - CFD: 23/03/2012 - 20:46:00 - [] ----D C:\Users\j\AppData\Roaming\wam.04351C371E530C3762CBA45FA283ED972DCDEFB6.1 O43 - CFD: 17/04/2013 - 20:22:48 - [] ----D C:\Users\j\AppData\Roaming\Windows Live Writer O43 - CFD: 01/07/2012 - 21:38:21 - [0] ----D C:\Users\j\AppData\Roaming\WinRAR O43 - CFD: 09/01/2015 - 00:07:07 - [] ----D C:\Users\j\AppData\Roaming\ZHP =>.Nicolas Coolman O43 - CFD: 16/01/2014 - 22:40:23 - [] ----D C:\Users\j\AppData\Local\Adobe O43 - CFD: 26/01/2012 - 11:29:20 - [] ----D C:\Users\j\AppData\Local\Apple O43 - CFD: 21/10/2014 - 23:53:53 - [] ----D C:\Users\j\AppData\Local\Apple Computer O43 - CFD: 22/12/2011 - 23:55:34 - [] -SH-D C:\Users\j\AppData\Local\Application Data O43 - CFD: 23/12/2011 - 00:12:20 - [] ----D C:\Users\j\AppData\Local\Apps O43 - CFD: 05/08/2013 - 21:28:07 - [] ----D C:\Users\j\AppData\Local\BeamNG O43 - CFD: 06/11/2014 - 12:20:54 - [] ----D C:\Users\j\AppData\Local\CrashDumps O43 - CFD: 23/12/2011 - 00:14:35 - [0] ----D C:\Users\j\AppData\Local\Deployment O43 - CFD: 30/11/2014 - 15:16:08 - [0] ----D C:\Users\j\AppData\Local\Diagnostics O43 - CFD: 01/12/2012 - 21:02:50 - [] ----D C:\Users\j\AppData\Local\Downloaded Installations O43 - CFD: 14/07/2013 - 14:56:55 - [0] ----D C:\Users\j\AppData\Local\ElevatedDiagnostics O43 - CFD: 23/12/2011 - 00:07:11 - [0] ----D C:\Users\j\AppData\Local\FSP O43 - CFD: 04/11/2012 - 14:25:47 - [] ----D C:\Users\j\AppData\Local\FullTiltPoker O43 - CFD: 18/05/2014 - 16:43:59 - [] ----D C:\Users\j\AppData\Local\Google O43 - CFD: 22/12/2011 - 23:55:34 - [] -SH-D C:\Users\j\AppData\Local\Historique O43 - CFD: 15/10/2013 - 10:48:48 - [] ----D C:\Users\j\AppData\Local\Macromedia O43 - CFD: 28/07/2014 - 19:55:50 - [] ----D C:\Users\j\AppData\Local\Microsoft O43 - CFD: 09/03/2013 - 08:34:10 - [] ----D C:\Users\j\AppData\Local\Microsoft Help O43 - CFD: 12/11/2013 - 21:55:54 - [] ----D C:\Users\j\AppData\Local\Mozilla O43 - CFD: 30/07/2012 - 16:53:58 - [] ----D C:\Users\j\AppData\Local\PokerStars O43 - CFD: 08/11/2014 - 00:09:59 - [] ----D C:\Users\j\AppData\Local\PokerStars.FR O43 - CFD: 04/07/2013 - 12:39:22 - [] ----D C:\Users\j\AppData\Local\Programs O43 - CFD: 20/06/2014 - 23:20:03 - [] ----D C:\Users\j\AppData\Local\Skype O43 - CFD: 09/08/2014 - 10:00:26 - [] ----D C:\Users\j\AppData\Local\Spotify O43 - CFD: 19/09/2014 - 20:35:32 - [] ----D C:\Users\j\AppData\Local\Stéphane_Mitermite O43 - CFD: 21/07/2012 - 13:25:04 - [] ----D C:\Users\j\AppData\Local\Symantec O43 - CFD: 09/01/2015 - 00:07:15 - [] ----D C:\Users\j\AppData\Local\Temp O43 - CFD: 22/12/2011 - 23:55:34 - [] -SH-D C:\Users\j\AppData\Local\Temporary Internet Files O43 - CFD: 04/07/2013 - 13:56:28 - [] ----D C:\Users\j\AppData\Local\VirtualStore O43 - CFD: 07/08/2014 - 11:53:23 - [] ----D C:\Users\j\AppData\Local\Windows Live O43 - CFD: 19/07/2012 - 12:34:25 - [] ----D C:\Users\j\AppData\Local\Windows Live Writer O43 - CFD: 14/07/2009 - 05:54:32 - [] R---D C:\Users\j\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories O43 - CFD: 12/07/2012 - 07:20:44 - [] R---D C:\Users\j\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools O43 - CFD: 10/03/2014 - 11:32:44 - [] ----D C:\Users\j\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Applications Chrome O43 - CFD: 22/01/2012 - 01:21:05 - [] ----D C:\Users\j\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Démarrage O43 - CFD: 16/01/2013 - 18:09:05 - [] ----D C:\Users\j\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome O43 - CFD: 04/07/2013 - 13:56:16 - [] ----D C:\Users\j\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HiJackThis O43 - CFD: 14/07/2009 - 05:49:38 - [] R---D C:\Users\j\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance O43 - CFD: 13/07/2012 - 23:56:44 - [] ----D C:\Users\j\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pacman O43 - CFD: 18/02/2012 - 15:49:16 - [0] ----D C:\Users\j\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PhotoFiltre 7 O43 - CFD: 22/01/2012 - 01:21:05 - [] ----D C:\Users\j\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PrintKey 2000 Fr O43 - CFD: 09/02/2013 - 09:55:49 - [] R---D C:\Users\j\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup O43 - CFD: 07/07/2012 - 22:36:12 - [] ----D C:\Users\j\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Visualisation Defifoot O43 - CFD: 04/01/2012 - 13:03:46 - [] ----D C:\Users\j\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR ~ Program Folder: 219 Scanned in 00mn 01s ---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44) O44 - LFC:[MD5.BD0ED19A545A7E184AEA4A0EC74E705C] - 03/01/2015 - 19:09:35 ---A- . (...) -- C:\Windows\System32\PerfStringBackup.INI [1549700] O44 - LFC:[MD5.FD848065CF3F3D75CB512010E354CBB4] - 03/01/2015 - 19:09:35 ---A- . (...) -- C:\Windows\System32\perfc009.dat [106388] O44 - LFC:[MD5.A68A55E046B2D628E5558FA6DB11FA6F] - 03/01/2015 - 19:09:35 ---A- . (...) -- C:\Windows\System32\perfc00C.dat [130754] O44 - LFC:[MD5.A2035C34D860BB57A4E972E06EFDE29E] - 03/01/2015 - 19:09:35 ---A- . (...) -- C:\Windows\System32\perfh009.dat [616008] O44 - LFC:[MD5.E23661C3DB75C6B55B9BF94DA3142AB7] - 03/01/2015 - 19:09:35 ---A- . (...) -- C:\Windows\System32\perfh00C.dat [704480] O44 - LFC:[MD5.B66EE542976F80F91A72973F3F64140B] - 08/01/2015 - 19:13:57 ---A- . (...) -- C:\PhysicalDisk0_MBR.bin [512] O44 - LFC:[MD5.CA43F8904E24BBE49982E4C0B29E6579] - 08/01/2015 - 19:40:24 ---A- . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\Drivers\mbam.sys [25816] O44 - LFC:[MD5.478CC94C937D235CB0A96AB8F2359D81] - 08/01/2015 - 19:40:24 ---A- . (.Malwarebytes Corporation - Malwarebytes Chameleon Protection Driver.) -- C:\Windows\System32\Drivers\mbamchameleon.sys [93400] O44 - LFC:[MD5.A646C2DDB8C46E9B20A326FAF566646C] - 08/01/2015 - 19:40:24 ---A- . (.Malwarebytes Corporation - Malwarebytes Web Access Control.) -- C:\Windows\System32\Drivers\mwac.sys [63704] O44 - LFC:[MD5.80FFD72581C329D9B8BBAF73A734EC10] - 08/01/2015 - 23:50:21 ---A- . (...) -- C:\Windows\PFRO.log [24172] O44 - LFC:[MD5.97938E306A1A983ACFE861A8B5AF0697] - 08/01/2015 - 23:50:29 ---A- . (...) -- C:\Windows\setupact.log [14732] O44 - LFC:[MD5.E6DA5A29D34B4152954BBA9A73CCCEE9] - 08/01/2015 - 23:50:29 -S-A- . (...) -- C:\Windows\bootstat.dat [67584] O44 - LFC:[MD5.26C43960C99EE861A5D0EDC4DCF3B1C3] - 08/01/2015 - 23:54:18 ---A- . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\Drivers\MBAMSwissArmy.sys [129752] O44 - LFC:[MD5.9615AFE81CA54DE2C6919A14503966B1] - 08/01/2015 - 23:57:00 ---A- . (...) -- C:\Windows\WindowsUpdate.log [1557473] O44 - LFC:[MD5.BB46FDB7C27B372A15EBE951440ECE15] - 09/01/2015 - 00:05:02 ---A- . (...) -- C:\sc-cleaner.txt [1744] ~ Files: 15 Scanned in 00mn 02s ---\\ Déni du service (Local Security Authority) (O48) O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l’Éditeur de configuration de sécurité Windows.) -- C:\Windows\System32\scecli.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Package de sécurité Kerberos.) -- C:\Windows\System32\kerberos.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\Windows\System32\schannel.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Digest Access.) -- C:\Windows\System32\wdigest.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Web Service Security Package.) -- C:\Windows\System32\tspkg.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Pku2u Security Package.) -- C:\Windows\System32\pku2u.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corp. - LiveSSP.) -- C:\Windows\System32\livessp.dll ~ LSA: 9 Scanned in 00mn 00s ---\\ Contrôle du Safe Boot (CSB) (O49) O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\System32\Drivers\sermouse.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.) O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgrx.sys . (.Microsoft Corporation - Pilote d’extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\System32\Drivers\ipnat.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\nsiproxy.sys . (.Microsoft Corporation - NSI Proxy.) -- C:\Windows\System32\Drivers\nsiproxy.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpencdd.sys . (.Microsoft Corporation - RDP Encoder Miniport.) -- C:\Windows\System32\Drivers\rdpencdd.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\System32\Drivers\sermouse.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.) O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgrx.sys . (.Microsoft Corporation - Pilote d’extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys ~ CSB: 13 Scanned in 00mn 00s ---\\ Recherche d'infection sur les pilotes (HKLM)(TDSD) (O52) O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm ~ TDSD: 2 Scanned in 00mn 00s ---\\ Enumération des clés de registre StartupReg (SMSR) (O53) O53 - SMSR:HKLM\...\startupreg\Adobe Reader Speed Launcher [Key] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe O53 - SMSR:HKLM\...\startupreg\CANAL+ CANALSAT A LA DEMANDE [Key] . (...) -- C:\Program Files (x86)\Canal+\CANAL+ CANALSAT A LA DEMANDE\Launcher.exe (.not file.) O53 - SMSR:HKLM\...\startupreg\Connexion SFR 9props.exe [Key] . (.SFR - Propriétés de la connexion SFR.) -- C:\Program Files (x86)\SFR\Kit\9props.exe O53 - SMSR:HKLM\...\startupreg\fspuip [Key] . (...) -- C:\Program Files (x86)\FSP\fspuip.exe (.not file.) O53 - SMSR:HKLM\...\startupreg\Google Update [Key] . (.Google Inc. - Programme d'installation de Google.) -- C:\Users\j\AppData\Local\Google\Update\GoogleUpdate.exe =>.Google Inc O53 - SMSR:HKLM\...\startupreg\HotKeysCmds [Key] . (.Intel Corporation - hkcmd Module.) -- C:\windows\system32\hkcmd.exe O53 - SMSR:HKLM\...\startupreg\IAStorIcon [Key] . (.Intel Corporation - IAStorIcon.) -- C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe O53 - SMSR:HKLM\...\startupreg\IgfxTray [Key] . (.Intel Corporation - igfxTray Module.) -- C:\windows\system32\igfxtray.exe O53 - SMSR:HKLM\...\startupreg\Lync [Key] . (.Microsoft Corporation - Microsoft Lync.) -- C:\Program Files\Microsoft Office 15\root\office15\lync.exe O53 - SMSR:HKLM\...\startupreg\MGSysCtrl [Key] . (.Micro-Star International Co., Ltd. - System Control Manager.) -- C:\Program Files (x86)\System Control Manager\MGSysCtrl.exe O53 - SMSR:HKLM\...\startupreg\msnmsgr [Key] . (...) -- C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe (.not file.) O53 - SMSR:HKLM\...\startupreg\Persistence [Key] . (.Intel Corporation - persistence Module.) -- C:\windows\system32\igfxpers.exe O53 - SMSR:HKLM\...\startupreg\QuickTime Task [Key] . (...) -- C:\Program Files (x86)\QuickTime\QTTask.exe (.not file.) O53 - SMSR:HKLM\...\startupreg\RtHDVCpl [Key] . (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe =>.Realtek Semiconductor Corp O53 - SMSR:HKLM\...\startupreg\Spotify [Key] . (.Spotify Ltd - Spotify.) -- C:\Users\j\AppData\Roaming\Spotify\Spotify.exe O53 - SMSR:HKLM\...\startupreg\Spotify Web Helper [Key] . (.Spotify Ltd - SpotifyWebHelper.) -- C:\Users\j\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe O53 - SMSR:HKLM\...\startupreg\SunJavaUpdateSched [Key] . (.Oracle Corporation - Java Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe =>.Oracle Corporation ~ SMSR Keys: 17 Scanned in 00mn 00s ---\\ Enumération des clés de registre SecurityProviders (MCSP) (O54) O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll ~ MSCP: 2 Scanned in 00mn 00s ---\\ Enumération des clés de registre PoliciesSystem (MWPS) (O55) O55 - MWPS:[HKCU\...\Policies\System] - "DisableRegistryTools"=0 O55 - MWPS:[HKCU\...\Policies\System] - "DisableTaskMgr"=0 ~ MWPS: 2 Scanned in 00mn 00s ---\\ Liste des pilotes du système (SDL) (O58) O58 - SDL:14/07/2009 - 02:52:21 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\Drivers\adp94xx.sys [491088] O58 - SDL:14/07/2009 - 02:52:21 ---A- . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\System32\Drivers\adpahci.sys [339536] O58 - SDL:14/07/2009 - 02:52:21 ---A- . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver (X64).) -- C:\Windows\System32\Drivers\adpu320.sys [182864] O58 - SDL:14/07/2009 - 02:52:21 ---A- . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\Windows\System32\Drivers\aliide.sys [15440] O58 - SDL:11/03/2011 - 07:22:41 ---A- . (.Advanced Micro Devices - AHCI 1.2 Device Driver.) -- C:\Windows\System32\Drivers\amdsata.sys [107904] O58 - SDL:14/07/2009 - 02:52:20 ---A- . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller Driver for Windows -.) -- C:\Windows\System32\Drivers\amdsbs.sys [194128] O58 - SDL:11/03/2011 - 07:22:40 ---A- . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\Windows\System32\Drivers\amdxata.sys [27008] O58 - SDL:14/07/2009 - 02:52:21 ---A- . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\System32\Drivers\arc.sys [87632] O58 - SDL:14/07/2009 - 02:52:21 ---A- . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\System32\Drivers\arcsas.sys [97856] O58 - SDL:27/06/2011 - 00:37:00 ---A- . (.Atheros Communications, Inc. - Atheros Extensible Wireless LAN device driver.) -- C:\Windows\System32\Drivers\athrx.sys [2753536] O58 - SDL:14/10/2014 - 18:00:19 ---A- . (.Avira Operations GmbH & Co. KG - Avira Minifilter Driver.) -- C:\Windows\System32\Drivers\avgntflt.sys [119272] =>.Avira Operations GmbH O58 - SDL:14/10/2014 - 18:00:19 ---A- . (.Avira Operations GmbH & Co. KG - Avira Driver for Security Enhancement.) -- C:\Windows\System32\Drivers\avipbb.sys [131608] =>.Avira Operations GmbH O58 - SDL:27/11/2013 - 15:09:07 ---A- . (.Avira Operations GmbH & Co. KG - Avira Manager Driver.) -- C:\Windows\System32\Drivers\avkmgr.sys [28600] =>.Avira Operations GmbH O58 - SDL:14/10/2014 - 18:00:20 ---A- . (.Avira Operations GmbH & Co. KG - Avira WFP Network Driver.) -- C:\Windows\System32\Drivers\avnetflt.sys [43064] =>.Avira Operations GmbH O58 - SDL:10/06/2009 - 21:34:23 ---A- . (.Broadcom Corporation - Broadcom NetXtreme Gigabit Ethernet NDIS6.x Unified Driver..) -- C:\Windows\System32\Drivers\b57nd60a.sys [270848] O58 - SDL:10/06/2009 - 21:41:06 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower Filter Driver.) -- C:\Windows\System32\Drivers\BrFiltLo.sys [18432] O58 - SDL:10/06/2009 - 21:41:06 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper Filter Driver.) -- C:\Windows\System32\Drivers\BrFiltUp.sys [8704] O58 - SDL:14/07/2009 - 02:19:07 ---A- . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\System32\Drivers\BrSerId.sys [286720] O58 - SDL:10/06/2009 - 21:41:10 ---A- . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\System32\Drivers\BrSerWdm.sys [47104] O58 - SDL:10/06/2009 - 21:41:10 ---A- . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\System32\Drivers\BrUsbMdm.sys [14976] O58 - SDL:10/06/2009 - 21:41:10 ---A- . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\System32\Drivers\BrUsbSer.sys [14720] O58 - SDL:10/06/2009 - 21:34:28 ---A- . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.) -- C:\Windows\System32\Drivers\bxvbda.sys [468480] O58 - SDL:14/07/2009 - 02:52:31 ---A- . (.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) -- C:\Windows\System32\Drivers\cmdide.sys [17488] O58 - SDL:14/07/2009 - 02:47:48 ---A- . (.Emulex - Storport Miniport Driver for LightPulse HBAs.) -- C:\Windows\System32\Drivers\elxstor.sys [530496] O58 - SDL:04/12/2009 - 10:50:22 ---A- . (.ENE Technology Inc. - ENE USB Memory Card Reader Driver.) -- C:\Windows\System32\Drivers\EUCR6SK.sys [87888] O58 - SDL:10/06/2009 - 21:34:33 ---A- . (.Broadcom Corporation - Broadcom NetXtreme II 10 GigE VBD.) -- C:\Windows\System32\Drivers\evbda.sys [3286016] O58 - SDL:17/12/2009 - 13:07:16 ---A- . (.Sentelic Corporation - Finger-sensing Pad Driver.) -- C:\Windows\System32\Drivers\fspad_wlh64.sys [53248] O58 - SDL:17/12/2009 - 13:07:16 ---A- . (.Sentelic Corporation - Finger-sensing Pad Driver.) -- C:\Windows\System32\Drivers\fspad_xp64.sys [53248] O58 - SDL:21/08/2012 - 12:01:20 ---A- . (.GEAR Software Inc. - CD DVD Filter.) -- C:\Windows\System32\Drivers\GEARAspiWDM.sys [33240] O58 - SDL:10/06/2009 - 21:31:59 ---A- . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for eHome.) -- C:\Windows\System32\Drivers\hcw85cir.sys [31232] O58 - SDL:17/09/2009 - 05:54:54 ---A- . (.Intel Corporation - Intel® Management Engine Interface.) -- C:\Windows\System32\Drivers\HECIx64.sys [56344] O58 - SDL:14/07/2009 - 02:47:48 ---A- . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Driver.) -- C:\Windows\System32\Drivers\HpSAMD.sys [77888] O58 - SDL:04/03/2010 - 03:51:40 ---A- . (.Intel Corporation - Intel Rapid Storage Technology driver - x64.) -- C:\Windows\System32\Drivers\iaStor.sys [540696] O58 - SDL:11/03/2011 - 07:23:00 ---A- . (.Intel Corporation - Intel Matrix Storage Manager driver - x64.) -- C:\Windows\System32\Drivers\iaStorV.sys [410496] O58 - SDL:19/07/2010 - 22:40:38 ---A- . (.Intel Corporation - Intel Graphics Kernel Mode Driver.) -- C:\Windows\System32\Drivers\igdkmd64.sys [10603904] O58 - SDL:14/07/2009 - 02:48:04 ---A- . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\System32\Drivers\iirsp.sys [44112] O58 - SDL:26/02/2010 - 22:02:12 ---A- . (.Intel Corporation - Intel® Turbo Boost Technology Driver.) -- C:\Windows\System32\Drivers\Impcd.sys [158976] O58 - SDL:21/06/2010 - 08:15:54 ---A- . (.Intel® Corporation - Intel® Display Audio Driver.) -- C:\Windows\System32\Drivers\IntcDAud.sys [287232] O58 - SDL:14/07/2009 - 02:48:04 ---A- . (.LSI Corporation - LSI Fusion-MPT FC Driver (StorPort).) -- C:\Windows\System32\Drivers\lsi_fc.sys [114752] O58 - SDL:14/07/2009 - 02:48:04 ---A- . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\System32\Drivers\lsi_sas.sys [106560] O58 - SDL:14/07/2009 - 02:48:04 ---A- . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\Windows\System32\Drivers\lsi_sas2.sys [65600] O58 - SDL:14/07/2009 - 02:48:04 ---A- . (.LSI Corporation - LSI Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\System32\Drivers\lsi_scsi.sys [115776] O58 - SDL:21/11/2014 - 06:14:08 ---A- . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\Drivers\mbam.sys [25816] O58 - SDL:21/11/2014 - 06:14:12 ---A- . (.Malwarebytes Corporation - Malwarebytes Chameleon Protection Driver.) -- C:\Windows\System32\Drivers\mbamchameleon.sys [93400] O58 - SDL:08/01/2015 - 23:54:18 ---A- . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\Drivers\MBAMSwissArmy.sys [129752] O58 - SDL:14/07/2009 - 02:48:04 ---A- . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows 7\Server 2008 R2 for.) -- C:\Windows\System32\Drivers\megasas.sys [35392] O58 - SDL:14/07/2009 - 02:48:04 ---A- . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\System32\Drivers\MegaSR.sys [284736] O58 - SDL:21/11/2014 - 06:14:22 ---A- . (.Malwarebytes Corporation - Malwarebytes Web Access Control.) -- C:\Windows\System32\Drivers\mwac.sys [63704] O58 - SDL:14/07/2009 - 02:48:26 ---A- . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\System32\Drivers\nfrd960.sys [51264] O58 - SDL:11/03/2011 - 07:23:06 ---A- . (.NVIDIA Corporation - NVIDIA® nForce RAID Driver.) -- C:\Windows\System32\Drivers\nvraid.sys [148352] O58 - SDL:11/03/2011 - 07:23:06 ---A- . (.NVIDIA Corporation - NVIDIA® nForce Sata Performance Driver.) -- C:\Windows\System32\Drivers\nvstor.sys [166272] O58 - SDL:14/07/2009 - 02:45:46 ---A- . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\Windows\System32\Drivers\ql2300.sys [1524816] O58 - SDL:14/07/2009 - 02:45:45 ---A- . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\Windows\System32\Drivers\ql40xx.sys [128592] O58 - SDL:22/05/2009 - 15:52:30 ---A- . (.Realtek - Realtek 8136/8168/8169 NDIS 6.20 64-bit Driver.) -- C:\Windows\System32\Drivers\Rt64win7.sys [215040] O58 - SDL:20/11/2009 - 11:31:20 ---A- . (.Realtek Semiconductor Corp. - Realtek® High Definition Audio Function Driver.) -- C:\Windows\System32\Drivers\RTKVHD64.sys [2041376] O58 - SDL:10/06/2009 - 21:37:19 ---A- . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\Windows\System32\Drivers\secdrv.sys [23040] O58 - SDL:14/07/2009 - 02:45:45 ---A- . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\System32\Drivers\sisraid2.sys [43584] O58 - SDL:14/07/2009 - 02:45:46 ---A- . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\System32\Drivers\sisraid4.sys [80464] O58 - SDL:14/07/2009 - 02:45:55 ---A- . (.Promise Technology - Promise SuperTrak EX Series Driver for Windows.) -- C:\Windows\System32\Drivers\stexstor.sys [24656] O58 - SDL:20/05/2012 - 04:01:21 ---A- . (.The OpenVPN Project - TAP-Win32 Virtual Network Driver.) -- C:\Windows\System32\Drivers\tap0901.sys [38624] O58 - SDL:15/08/2014 - 22:35:00 ---A- . (.Apple, Inc. - Apple Mobile Device USB Driver.) -- C:\Windows\System32\Drivers\usbaapl64.sys [54784] O58 - SDL:14/07/2009 - 02:45:55 ---A- . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\System32\Drivers\viaide.sys [17488] O58 - SDL:14/07/2009 - 02:45:55 ---A- . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\Windows\System32\Drivers\vsmraid.sys [161872] ~ Drivers: 63 Scanned in 00mn 04s ---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61) O61 - LFC: 07/01/2015 - 00:07:34 ---A- . (...) -- C:\Users\j\AppData\Local\Temp\Quarantine.exe [601088] O61 - LFC: 08/01/2015 - 00:07:42 ---A- . (.Malwarebytes Corporation.) -- C:\Users\j\Desktop\mbam-setup-2.0.4.1028.exe [20447072] O61 - LFC: 08/01/2015 - 00:07:43 ---A- . (...) -- C:\Users\j\Downloads\adwcleaner_4.107 (2).exe [2191360] O61 - LFC: 08/01/2015 - 00:07:43 ---A- . (...) -- C:\Users\j\Downloads\test-math (1).exe [684808] O61 - LFC: 08/01/2015 - 00:07:43 ---A- . (...) -- C:\Users\j\Downloads\test-math.exe [684808] O61 - LFC: 08/01/2015 - 00:07:43 ---A- . (.Nicolas Coolman.) -- C:\Users\j\Downloads\ZHPDiag2 (1).exe [6868413] =>.Nicolas Coolman O61 - LFC: 08/01/2015 - 00:07:43 ---A- . (.Nicolas Coolman.) -- C:\Users\j\Downloads\ZHPDiag2.exe [6867801] =>.Nicolas Coolman O61 - LFC: 08/01/2015 - 00:07:43 ---A- . (.Thisisu.) -- C:\Users\j\Downloads\JRT.exe [1707939] O61 - LFC: 09/01/2015 - 00:07:29 ---A- . (...) -- C:\Users\j\AppData\Local\Google\Chrome\User Data\nacl_validation_cache.bin [200] O61 - LFC: 09/01/2015 - 00:07:43 ---A- . (.Bleeping Computer, LLC.) -- C:\Users\j\Downloads\sc-cleaner-1.3.4.0.exe [441592] ~ 410 Fichiers temporaires (Temporary files) ~ 37 Fichiers cookies (Cookies files) ~ Files: 10 Scanned in 00mn 15s ---\\ Liste des outils de désinfection (LATC) (O63) O63 - Logiciel: ZHPDiag 2015 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 =>.Nicolas Coolman O63 - Logiciel: HiJackThis - (.Trend Micro.) [HKLM] -- {45A66726-69BC-466B-A7A4-12FCBA4883D7} ~ ADS: Scanned in 00mn 00s ---\\ Liste les services legacy du registre (LALS) (O64) O64 - Services: CurCS - 14/10/2014 - C:\Windows\System32\DRIVERS\avgntflt.sys (avgntflt) .(.Avira Operations GmbH & Co. KG - Avira Minifilter Driver.) - LEGACY_AVGNTFLT O64 - Services: CurCS - 14/10/2014 - C:\Windows\System32\DRIVERS\avipbb.sys (avipbb) .(.Avira Operations GmbH & Co. KG - Avira Driver for Security Enhancement.) - LEGACY_AVIPBB O64 - Services: CurCS - 27/11/2013 - C:\Windows\System32\DRIVERS\avkmgr.sys (avkmgr) .(.Avira Operations GmbH & Co. KG - Avira Manager Driver.) - LEGACY_AVKMGR O64 - Services: CurCS - 21/11/2014 - C:\windows\system32\drivers\mbam.sys (MBAMProtector) .(.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - LEGACY_MBAMPROTECTOR O64 - Services: CurCS - 08/01/2015 - C:\windows\system32\drivers\MBAMSwissArmy.sys (MBAMSwissArmy) .(.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - LEGACY_MBAMSWISSARMY O64 - Services: CurCS - 21/11/2014 - C:\windows\system32\drivers\mwac.sys (MBAMWebAccessControl) .(.Malwarebytes Corporation - Malwarebytes Web Access Control.) - LEGACY_MBAMWEBACCESSCONTROL O64 - Services: CurCS - 10/06/2009 - C:\Windows\System32\Drivers\secdrv.sys (secdrv) .(.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) - LEGACY_SECDRV ~ Legacy: 89 Scanned in 00mn 00s ---\\ Associations Shell Spawning (O67) O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe =>.Microsoft Corporation O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.com> <comfile>[HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.evt> <evtfile>[HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d’événements.) -- C:\Windows\System32\eventvwr.exe O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.html> <htmlfile>[HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe O67 - Shell Spawning: <.scr> <scrfile>[HKLM\..\open\Command] (...) -- "%1" /S O67 - Shell Spawning: <.html> <ChromeHTML>[HKCU\..\open\Command] (.Google Inc. - Google Chrome.) -- C:\Users\j\AppData\Local\Google\Chrome\Application\chrome.exe ~ FASS Keys: 11 Scanned in 00mn 00s ---\\ Menu de démarrage Internet (SMI) (O68) O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Users\j\AppData\Local\Google\Chrome\Application\chrome.exe O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe ~ Keys: Scanned in 00mn 00s ---\\ Recherche d'infection sur les navigateurs internet (SBI) (O69) O69 - SBI: SearchScopes [HKCU] {016AA3B4-8208-417A-A4F1-09D12B3FF294} - (Google) - http://www.google.com O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (Bing) - http://www.bing.com O69 - SBI: SearchScopes [HKCU] {AF0BEA60-C901-450C-ACC1-24B2DA088D4B} - (secure-surf) - http://www.secure-surf.com =>PUP.SecureSurf ~ Keys: Scanned in 00mn 00s ---\\ Enumère les service demarrés par Svchost (SSS) (O83) O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d’application.) -- C:\Windows\System32\aelupsvc.dll [72192] O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes à puce Microsoft.) -- C:\Windows\System32\certprop.dll [80384] O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes à puce Microsoft.) -- C:\Windows\System32\certprop.dll [80384] O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\System32\srvsvc.dll [236032] O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\System32\gpsvc.dll [776192] O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\ikeext.dll [845824] O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Service Audio Windows.) -- C:\Windows\System32\Audiosrv.dll [676864] O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’accès distant.) -- C:\Windows\System32\rasauto.dll [99328] O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire de connexions d’accès distant.) -- C:\Windows\System32\rasmans.dll [343552] O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll [97792] O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements système (SENS).) -- C:\Windows\System32\sens.dll [64512] O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l’application d’assistance à Microsoft NAT.) -- C:\Windows\System32\ipnathlp.dll [359424] O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows.) -- C:\Windows\System32\tapisrv.dll [316416] O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gestionnaire des connexions distantes du serveur hôte de session Burea.) -- C:\Windows\System32\termsrv.dll [706560] O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Update.) -- C:\Windows\System32\wuaueng.dll [2428952] O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière-plan.) -- C:\Windows\System32\qmgr.dll [848384] O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [369664] O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur un réseau IPv4..) -- C:\Windows\System32\iphlpsvc.dll [565760] O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d’ouverture de session secondaire.) -- C:\Windows\system32\seclogon.dll [30720] O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll [70144] O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\System32\iscsiexe.dll [156672] O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédias.) -- C:\Windows\System32\mmcss.dll [67584] O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll [242688] O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à distance.) -- C:\Windows\System32\sessenv.dll [104960] O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\System32\browser.dll [136704] O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll [111104] O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\System32\schedsvc.dll [1114624] O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\Windows\System32\kmsvc.dll [90624] O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll [84480] O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll [208896] O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\Windows\System32\themeservice.dll [44544] O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\Windows\System32\bdesvc.dll [100864] ~ Services: 32 Scanned in 00mn 00s ---\\ Recherche particulière à la racine du système (SPRF) (O84) [MD5.569B4520FF455586F7DC8CDFB420F7A0] [sPRF][13/06/2012] (...) -- C:\Users\j\AppData\Roaming\wklnhst.dat [332] [MD5.3BD59D6C407AB1F6DDD7C5D9BD727469] [sPRF][08/01/2015] (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Users\j\Desktop\mbam-setup-2.0.4.1028.exe [20447072] ~ Files: 2 Scanned in 00mn 03s ---\\ Liste des exceptions du parefeu (FirewallRules) (O87) O87 - FAEL: "{F0ECE092-8270-4276-B816-93265AA130B3}" | In - Private - P6 - TRUE | .(.Vuze Inc. - Pas de description.) -- C:\Program Files (x86)\Vuze\Azureus.exe =>P2P.Azureus O87 - FAEL: "{402EDCA7-F250-42B4-9455-B6914582EDAA}" | In - Private - P17 - TRUE | .(.Vuze Inc. - Pas de description.) -- C:\Program Files (x86)\Vuze\Azureus.exe =>P2P.Azureus O87 - FAEL: "TCP Query User{2DEF7B8D-E8EF-415B-B201-6951D6F9ADC5}C:\program files (x86)\vuze\azureus.exe" | In - Public - P6 - TRUE | .(.Vuze Inc. - Pas de description.) -- C:\program files (x86)\vuze\azureus.exe =>P2P.Azureus O87 - FAEL: "UDP Query User{E159DCB5-2017-448E-885A-08E432A9FCAB}C:\program files (x86)\vuze\azureus.exe" | In - Public - P17 - TRUE | .(.Vuze Inc. - Pas de description.) -- C:\program files (x86)\vuze\azureus.exe =>P2P.Azureus ~ Firewall: 4 Scanned in 00mn 02s ---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped) SS - | Demand 15/12/2014 267440 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe SS - | Auto 06/11/2012 116648 | (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe SS - | Demand 06/11/2012 116648 | (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe SS - | Demand 10/10/2014 114288 | (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe SR - | Auto 16/12/2014 431920 | (AntiVirSchedulerService) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe SR - | Auto 16/12/2014 431920 | (AntiVirService) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe SR - | Auto 07/10/2014 60744 | (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe SR - | Auto 20/11/2014 166192 | (Avira.OE.ServiceHost) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe SR - | Auto 30/08/2011 462184 | (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe SR - | Auto 04/03/2010 13336 | (IAStorDataMgrSvc) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe SR - | Demand 15/10/2014 643880 | (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe SR - | Auto 30/09/2009 268824 | (LMS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe SR - | Auto 09/06/2013 2635600 | (MaConfigAgent) . (.CybelSoft.) - C:\Program Files\ma-config.com\MaConfigAgent.exe SR - | Auto 21/11/2014 1871160 | (MBAMScheduler) . (.Malwarebytes Corporation.) - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe SR - | Auto 21/11/2014 969016 | (MBAMService) . (.Malwarebytes Corporation.) - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe SR - | Auto 09/07/2009 160768 | (Micro Star SCM) . (.Micro-Star International Co., Ltd..) - C:\Program Files (x86)\System Control Manager\MSIService.exe SR - | Auto 27/03/2014 581568 | (ogmservice) . (.RealNetworks, Inc..) - C:\Program Files (x86)\Online Games Manager\ogmservice.exe SR - | Auto 30/09/2009 2320920 | (UNS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe SR - | Auto 14/07/2009 27136 | C:\Program Files (x86)\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe SR - | Auto 10/07/1658 0 | (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe =>.Microsoft Corporation SR - | Auto 14/07/2009 27136 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe ~ Services: Scanned in 00mn 10s ---\\ Recherche d'infection sur le Master Boot Record (MBR)(O80) Run by j at 09/01/2015 00:08:49 ~ OS 64 not supported by MBR tool ~ MBR: 0 Scanned in 00mn 00s ---\\ Recherche d'infection sur le Master Boot Record (MBRCheck)(O80) Written by ad13, http://ad13.geekstog Run by j at 09/01/2015 00:08:51 ********* Dump file Name ********* C:\PhysicalDisk0_MBR.bin ~ MBR: Scanned in 00mn 02s ---\\ Scan Additionnel (O88) Database Version : 13008 - (08/01/2015) Clés trouvées (Keys found) : 1 Valeurs trouvées (Values found) : 1 Dossiers trouvés (Folders found) : 2 Fichiers trouvés (Files found) : 2 [HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\8461-7759-5462-8226] =>P2P.Azureus^ C:\Program Files (x86)\Vuze =>P2P.Azureus^ C:\Users\j\AppData\Roaming\Azureus =>P2P.Azureus^ [HKCU\Software\Azureus] =>P2P.Azureus^ [HKLM\Software\Wow6432Node\Azureus] =>P2P.Azureus^ ~ Additionnel Scan: 279142 Items scanned in 00mn 21s ---\\ Informations complémentaires sur les modules ~ http://nicolascoolman.fr/r5-internet-explorer-proxy-management-iepm/ =>.Internet Explorer, Proxy Management (R5) ~ http://nicolascoolman.fr/o2-browser-helper-objects-de-navigateur/ =>.Browser Helper Objects de navigateur (O2) ~ http://nicolascoolman.fr/o3-internet-explorer-toolbars/ =>.Internet Explorer Toolbars (O3) ~ http://nicolascoolman.fr/o4-applications-demarrees-par-le-registre/ =>.Applications lancées au démarrage du système (O4) ~ AMI: 4 Scanned in 00mn 00s ---\\ Récapitulatif des détections trouvées sur votre station http://nicolascoolman.fr/pup-securesurf =>PUP.SecureSurf ~ MSI: 1 link(s) detected in 00mn 00s End of the scan (1209 lines in 02mn 36s)(0) Voilà, encore merci
  8. taulio
    ok, merci pour ton retour, je posterai les différents rapports lorsque les analyses seront terminées.
  9. taulio
    Bonjour à tous, Je viens demander de l'aide suite à l'installation subie de secure surf sur mon PC après un test facebook fait par mon épouse. J'ai essayé de désinstaller, mais il semblerait que ça soit coriace ... quelqu'un pourrait-il me donner un coup de main svp ? Merci par avance. Jérôme.
×
×
  • Créer...