Rapport de ZHPDiag v2013.6.28.43 par Nicolas Coolman, Update du 28/06/2013
Run by KAMMI at 30/06/2013 16:06:40
WebSite: http://nicolascoolman.webs.com
State : Version � jour.
WhiteList : Enable
High Elevated Privileges : OK
UAC : Deactivate by user


---\\ Web Browser
MSIE: Internet Explorer v9.0.8112.16421
MFIE: Mozilla Firefox 21.0

---\\ Windows Product Information
~ Langage: Fran�ais
Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)
Windows Server License Manager Script : OK
~ Windows(R) 7, OEM_SLP channel
System Locked Preinstallation (OEM_SLP) : OK
Windows ID Activation : OK
~ Windows Partial Key : CGKHQ
Windows License : OK
~ Windows Remaining Initializations Number : 2
Software Protection Service (Protection logicielle) : OK
Windows Automatic Updates : OK
Windows Activation Technologies : OK

---\\ System Protection
Windows Defender W7

---\\ System Optimizer

---\\ Peer To Peer (P2P)

---\\ Software Update
Adobe Flash Player 11 Plugin

---\\ System Information
~ Processor: Intel64 Family 6 Model 42 Stepping 7, GenuineIntel
~ Operating System: 64 Bits
Boot mode: Normal (Normal boot)
Total RAM: 4077 MB (38% free)
System Restore: Activ� (Enable)
System drive C: has 12 GB (5%) free of 236 GB

---\\ Logged in mode
~ Computer Name: KAMMI-VAIO
~ User Name: KAMMI
~ All Users Names: KAMMI, Guest, Administrator,
~ Unselected Option: O45,O61,O62,O65,O66,O80,O82,O89
Logged in as Administrator

---\\ Environnement Variables
~ System Unit : C:\
~ %AppData% : C:\Users\KAMMI\AppData\Roaming\
~ %Desktop% : C:\Users\KAMMI\Desktop\
~ %Favorites% : C:\Users\KAMMI\Favorites\
~ %LocalAppData% : C:\Users\KAMMI\AppData\Local\
~ %StartMenu% : C:\Users\KAMMI\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\

---\\ DOS/Devices
C:\ Hard drive, Flash drive, Thumb drive (Free 12 Go of 236 Go)
D:\ CD-ROM drive (Not Inserted)
E:\ Hard drive, Flash drive, Thumb drive (Free 39 Go of 212 Go)
F:\ CD-ROM drive (Not Inserted)
G:\ Floppy drive, Flash card reader, USB Key (Free 3 Go of 7 Go)
H:\ CD-ROM drive (Not Inserted)
I:\ Hard drive, Flash drive, Thumb drive (Free 72 Go of 932 Go)



---\\ Security Center & Tools Informations
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : Out Of Date
~ Security Center: 29 Legitimates Filtered in 00mn 00s



---\\ Recherche particuli�re de fichiers g�n�riques
[MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorateur Windows.) (.26/05/2011 - 21:04:40.) -- C:\Windows\Explorer.exe [2871808]
[MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de d�marrage de Windows.) (.14/07/2009 - 02:39:52.) -- C:\Windows\System32\Wininit.exe [129024]
[MD5.228443FF3A1FB0B974D278F7C6403FAD] - (.Microsoft Corporation - Internet Extensions for Win32.) (.28/02/2012 - 07:49:56.) -- C:\Windows\System32\wininet.dll [1390080]
[MD5.1151B1BAA6F350B1DB6598E0FEA7C457] - (.Microsoft Corporation - Application d�ouverture de session Windows.) (.21/11/2010 - 04:24:29.) -- C:\Windows\System32\Winlogon.exe [390656]
[MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Biblioth�que de licences.) (.21/11/2010 - 04:24:16.) -- C:\Windows\System32\sppcomapi.dll [232448]
[MD5.1C7857B62DE5994A75B054A9FD4C3825] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.28/12/2011 - 04:59:24.) -- C:\Windows\system32\Drivers\AFD.sys [498688]
[MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 - 02:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128]
[MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/07/2009 - 00:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160]
[MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.21/11/2010 - 04:23:47.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456]
[MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.21/11/2010 - 04:24:32.) -- C:\Windows\system32\Drivers\DfsC.sys [102400]
[MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.21/11/2010 - 04:23:47.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368]
[MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) (.14/07/2009 - 00:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472]
[MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.14/07/2009 - 01:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224]
[MD5.A5D9106A73DC88564C825D317CAC68AC] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.27/04/2011 - 03:40:40.) -- C:\Windows\system32\Drivers\MRxSmb.sys [158208]
[MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) (.21/11/2010 - 04:23:51.) -- C:\Windows\system32\Drivers\netBT.sys [261632]
[MD5.A2F74975097F52A00745F9637451FDD8] - (.Microsoft Corporation - Pilote du syst�me de fichiers NT.) (.11/03/2011 - 07:41:34.) -- C:\Windows\system32\Drivers\ntfs.sys [1659776]
[MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parall�le.) (.14/07/2009 - 01:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280]
[MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.21/11/2010 - 04:24:33.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [129536]
[MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.14/07/2009 - 01:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184]
[MD5.DDAD5A7AB24D8B65F8D724F5C20FD806] - (.Microsoft Corporation - TDI Translation Driver.) (.21/11/2010 - 04:24:32.) -- C:\Windows\system32\Drivers\tdx.sys [119296]
[MD5.0D08D2F3B3FF84E433346669B5E0F639] - (.Microsoft Corporation - Pilote de clich� instantan� du volume.) (.21/11/2010 - 04:23:47.) -- C:\Windows\system32\Drivers\volsnap.sys [295808]
~ Generic Processes: Scanned in 00mn 04s



---\\ Etat des fichiers cach�s (Cach�/Total)
~ Mes images (My Pictures) : 2/58
~ Mes musiques (My Musics) : 1/1262
~ Mes Videos (My Videos) : 1/11
~ Mes Favoris (My Favorites) : 1/10
~ Mes Documents (My Documents) : 15/5620
~ Mon Bureau (My Desktop) : 9/29520
~ Menu demarrer (Programs) : 1/81
~ Hidden Files: Scanned in 01mn 30s



---\\ Processus lanc�s
[MD5.9706C4853A3E286125C3EA2890D630CE] - (.TeamViewer GmbH - TeamViewer Remote Control Application.) -- C:\Program Files (x86)\TeamViewer\Version7\TeamViewer.exe [11171712] [PID.6716]
[MD5.349AB4F70E2AC44970894E7F03E1576E] - (.Huawei Technologies Co., Ltd. - DataCardMonitor MFC Application.) -- C:\ProgramData\DatacardService\DCSHelper.exe [236384] [PID.8600]
[MD5.FED1E7E085EE23781A61B6153FEAB2E8] - (.Sony Corporation - Pas de description.) -- C:\Program Files (x86)\Sony\Media Gallery\ElbServer.exe [83344] [PID.8744]
[MD5.A76A095006D172C1F3545F4F93B24652] - (.Sony Corporation - VRLPHelper.) -- C:\Program Files (x86)\Sony\Media Gallery\VRLPHelper.exe [186768] [PID.8984]
[MD5.F6987FF6C6D683F79FDCE707B071A997] - (.SFX TEAM - SuperCopier 2 (explorer file copy replaceme.) -- C:\Program Files (x86)\SuperCopier2\SuperCopier2.exe [955392] [PID.9048]
[MD5.B2A41154BB2C4D620F1D15A4401445C4] - (.Hobbyist Software - VLC Streamer Configuration.) -- C:\Program Files (x86)\Hobbyist Software\VLC Streamer\VLC Streamer Configuration.exe [1647128] [PID.9108]
[MD5.E2310ECEAA1E0DE0EE8FE32C7BAB3422] - (.L'Aventure Multimedia - Dictionnaire MediaDICO pour Windows.) -- C:\Program Files (x86)\Micro Application\38 Dictionnaires et Recueils de Correspondance\MediaDico38.exe [281088] [PID.9120]
[MD5.D691CC7920DFA975B123D5BD271194DE] - (.Tonec Inc. - Internet Download Manager (IDM).) -- C:\Program Files (x86)\Internet Download Manager\IDMan.exe [3118512] [PID.9176]
[MD5.10E89F598469C60D8C87A8218089A87D] - (.Akamai Technologies, Inc. - Akamai NetSession Client.) -- C:\Users\KAMMI\AppData\Local\Akamai\netsession_win.exe [4489472] [PID.8672]
[MD5.783F7F39A134AA5A9FE78A137980190B] - (.Microsoft Corporation - Microsoft Encarta Dictionaries.) -- C:\Program Files (x86)\Microsoft Encarta\Microsoft Encarta 2009 - Collection DVD\EDICT.exe [351000] [PID.9348]
[MD5.FB3784D0A806A85952199E0FFCBEE06B] - (.L'Aventure Multimedia - Reconnaissance Automatique de Caract�res.) -- C:\Program Files (x86)\Micro Application\38 Dictionnaires et Recueils de Correspondance\RAC38.exe [200792] [PID.9500]
[MD5.85A5DB9C8DEFDDE941EC121ADB5B3175] - (.DT Soft Ltd - DAEMON Tools Shell Extensions Helper.) -- C:\Program Files (x86)\DAEMON Tools Pro\DTShellHlp.exe [2744960] [PID.9516]
[MD5.070753E47E04181DD440EA2FEFE3115C] - (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe [18678376] [PID.9540]
[MD5.F02A533F517EB38333CB12A9E8963773] - (.Google Inc. - Programme d'installation de Google.) -- C:\Users\KAMMI\AppData\Local\Google\Update\GoogleUpdate.exe [136176] [PID.9620]
[MD5.93A8FC9A0ED798A052404FCAFFA8423E] - (.Research In Motion - Rim.DesktopHelper.) -- C:\Program Files (x86)\Research In Motion\BlackBerry desktop\Rim.desktopHelper.exe [752656] [PID.9640]
[MD5.47CA2F039FDB67697EE60C260CB8083C] - (.Google - Google Talk.) -- C:\Program Files (x86)\Google\Google Talk\googletalk.exe [3297280] [PID.9648]
[MD5.EC302A12B14F31BD4DA7AA448C1ABF73] - (.Sony of America Corporation - VaioCare Window Listener Application.) -- C:\Program Files\Sony\VAIO Care\listener.exe [82592] [PID.9860]
[MD5.EF720DFD6FC5B092511A10513AD0DE65] - (.Sony Corporation - SHTtray.) -- C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SHTtray.exe [114336] [PID.3052]
[MD5.F7E1CCBAD109329203AACB1E87BE614C] - (.Dropbox, Inc. - Dropbox.) -- C:\Users\KAMMI\AppData\Roaming\Dropbox\bin\Dropbox.exe [27776968] [PID.1204]
[MD5.F96C73D7D525174B80CFD865A5D7E083] - (.Intel Corporation - IAStorIcon.) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440] [PID.10064]
[MD5.4BF3C4F9327BB33190603829C9F5E781] - (.Facebook - Facebook Messenger.) -- C:\Users\KAMMI\AppData\Local\Facebook\Messenger\2.1.4814.0\FacebookMessenger.exe [248240] [PID.10136]
[MD5.1A233A5E4A9C6B7BA09F079E1672537F] - (.Sony Corporation - Pas de description.) -- C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe [2801288] [PID.8916]
[MD5.1144F1A221F756E05525179B5E1682C1] - (.Sony Corporation - Media Check Tool.) -- C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe [650080] [PID.10072]
[MD5.358AE5DF3E3E62CC9EBD63B145BC3259] - (.Microsoft Corporation - Microsoft OneNote Quick Launcher.) -- C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.exe [227712] [PID.9832]
[MD5.D64E7A27B3633995224A6BD12327F167] - (.Aestan Software - Aestan Tray Menu.) -- C:\wamp\wampmanager.exe [1101824] [PID.6692]
[MD5.F2934D361CB40B3AFA7285D595E7399D] - (.Pas de propri�taire - Seowon WiMAX Connection Manager.) -- C:\Program Files (x86)\Seowon\sw_wimaxcm.exe [2097152] [PID.10328]
[MD5.29FB6EF1EFB1357E2883FE297F1EBC31] - (.AVG Technologies CZ, s.r.o. - AVG Tray Monitor.) -- C:\Program Files (x86)\AVG\AVG9\avgtray.exe [2077536] [PID.10352]
[MD5.995BEB69AE5C50D354894354F5A6CD5A] - (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [252296] [PID.10368]
[MD5.2D75851551D18878FADC21E166DEA3FA] - (.ASUSTek Computer Inc. - AiChargerAP MFC Application.) -- C:\Program Files (x86)\ASUS\ASUS Ai Charger\AiChargerAP.exe [547984] [PID.10512]
[MD5.74BC945EB2584E90619A56EF5028AB0F] - (.RealNetworks, Inc. - RealNetworks Scheduler.) -- C:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe [185896] [PID.10540]
[MD5.79FC43289B528CFB49A18D209C1E7E6D] - (.Yahoo! Inc. - Yahoo! Messenger Tray.) -- C:\Program Files (x86)\Yahoo!\Messenger\ymsgr_tray.exe [79160] [PID.10760]
[MD5.A4ADA5BC52310F100C29F3021A62DB91] - (.blekko Anti-Phishing (Powered by Panda Secu - blekko Anti-phishing (Powered by Panda Secu.) -- C:\ProgramData\blekko Anti-Phishing\blekkoAntiphishing.exe [222856] [PID.10932]
[MD5.BED38B0ADFF5F5CC6E988A6491017E83] - (.Research In Motion Limited - Launch Agent Service.) -- C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe [267792] [PID.10940]
[MD5.52B3F695EDC908F3575A6834311E2968] - (.Tonec Inc. - Internet Download Manager agent for click m.) -- C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe [251312] [PID.10832]
[MD5.B68A4DDBEA063577028675C0DF01E317] - (.Sony Corporation - VAIO Personalization Manager Morphological.) -- C:\Program Files\Sony\VAIO Personalization Manager\VpmIfPav.exe [79104] [PID.11656]
[MD5.1D4E1E69D34470FBA6519C88022898A1] - (.Sony Corporation - VAIO Control Center(WBCBatteryCare Module).) -- C:\Program Files (x86)\Sony\VAIO Control Center\WBCBatteryCare.exe [2312328] [PID.7972]
[MD5.BCAE94105D572D937326354FA8122BEA] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [7596544] [PID.12000]
[MD5.A5299D04ED225D64CF07A568A3E1BF8C] - (.Apple Inc. - MobileDeviceService.) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [55184] [PID.1844]
[MD5.4C4A576818EA028257C624AE36FF7A03] - (.Atheros - Atheros Coex Service Application.) -- C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [138400] [PID.2104]
[MD5.C4D15594DB5BE042D3346EA58DF87D89] - (.AVG Technologies CZ, s.r.o. - AVG Watchdog Service.) -- C:\Program Files (x86)\AVG\AVG9\avgwdsvc.exe [308136] [PID.2196]
[MD5.1CE0621B591913C12BECAA5B50E88BB2] - (...) -- C:\ProgramData\Camtel EVDO-Huawei\OnlineUpdate\ouc.exe [246112] [PID.2280]
[MD5.816CF76BB49EC32776460175FD1B77BD] - (...) -- C:\Program Files\CDMA-1XDO\C+WEject.exe [269312] [PID.2292]
[MD5.82BAFE49D4A353E29228CBE88BC47CB0] - (.Seowonintech CO.Ltd - GCT WiMAX Service Daemon for Seowon Product.) -- C:\Windows\SysWOW64\GCTWiMaxServiceD.exe [503921] [PID.2484]
[MD5.E9605A180001A6B5551112D91DE92CA1] - (.Sony Corporation - Device Information Provider.) -- C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe [428384] [PID.2724]
[MD5.7BF731C060D5B4A5056D2F79A4F7838E] - (.ProjectsWithLove - ServeToMe-Service.) -- C:\Program Files (x86)\ProjectsWithLove\ServeToMe\ServeToMe-Service.exe [5120] [PID.2776]
[MD5.3E85BDD019E3DB66D9471DAD7FD6A887] - (.TeamViewer GmbH - TeamViewer Remote Control Application.) -- C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe [3027840] [PID.2904]
[MD5.387D3DFFCF0A544539E9C5D8B81169A2] - (.Sony Corporation - VAIO Control Center (Service Module).) -- C:\Program Files (x86)\Sony\VAIO Control Center\VESMgr.exe [66696] [PID.2992]
[MD5.D00058C1FFF3F3DE990444A5734E9639] - (.Sony Corporation - VAIO Content Folder Watcher.) -- C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [887000] [PID.3060]
[MD5.0A045A2325326B319ECC0006E2D9CEC6] - (.Sony Corporation - VAIO Control Center (Service Sub Module).) -- C:\Program Files (x86)\Sony\VAIO Control Center\VESMgrSub.exe [183432] [PID.3068]
[MD5.F19275655B42086C884ABCDAE2C659AE] - (.Sony Corporation - VCM Intelligent Analyzing Manager.) -- C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe [549616] [PID.3268]
[MD5.2F06D134554BA84FE253DBC481DCFE6D] - (.Sony Corporation - VCM Intelligent Network Service Manager.) -- C:\Program Files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe [385336] [PID.3292]
[MD5.A63DC5C2EA944E6657203E0C8EDEAF61] - (.Microsoft Corporation - COM Surrogate.) -- C:\Windows\SysWOW64\DllHost.exe [7168] [PID.3384]
[MD5.70149A8B2A9B171D07C20D5595282550] - (.Apache Software Foundation - Apache HTTP Server.) -- c:\wamp\apache2\bin\httpd.exe [20539] [PID.3536]
[MD5.DD0042F0C3B606A6A8B92D49AFB18AD6] - (.Yahoo! Inc. - AutoUpater Service Module.) -- C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe [602392] [PID.3664]
[MD5.1474F121C3DF1232D3E7239C03691EE6] - (.Adobe Systems Incorporated - Adobe Photoshop Elements 9.0 (component).) -- C:\Program Files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe [169408] [PID.5356]
[MD5.E79A8E33BD136D14BAE1FA20EB2EF124] - (.Intel Corporation - IAStorDataSvc.) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [13592] [PID.5376]
[MD5.F4A17DCAB576267C85663E64F3ACE5A4] - (.Intel Corporation - Local Manageability Service.) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [326424] [PID.1564]
[MD5.E4534BCCDD1EA7A7A256BB9D6688A5FC] - (.Nero AG - NeroUpdate.) -- C:\Program Files (x86)\Nero\Update\NASvc.exe [490280] [PID.4944]
[MD5.5FA03F5EA6EFEF6D17B4A1A48C40A23C] - (.Sony Corporation - VAIO Device Searcher.) -- C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe [67232] [PID.5964]
[MD5.DDF2EC98AF6FC70608A4F9CE4DB52758] - (.Sony Corporation - VAIO Content Importer.) -- C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe [113824] [PID.5520]
[MD5.1FE69F3C1CA1CF4B7EC7E2E9090FFFDC] - (.ArcSoft, Inc. - MgiSvr.) -- C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [105024] [PID.3852]
[MD5.DB641944F7E4B14C13C3FEFC89843F69] - (.Intel Corporation - User Notification Service.) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2656536] [PID.2912]
[MD5.BED1CC352E81ACA898942EF0008313E8] - (.TeamViewer GmbH - Helper process for TeamViewer performance o.) -- C:\Program Files (x86)\TeamViewer\Version7\tv_w32.exe [116608] [PID.8448]
[MD5.686045905787B68D829CE647A6DFAD2B] - (.Research In Motion Limited - BlackBerry Device Manager.) -- C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\BbDevMgr.exe [577536] [PID.11144]
~ Processes Running: Scanned in 00mn 04s



---\\ Google Chrome, D�marrage,Recherche,Extensions (G0,G1,G2)
C:\Users\KAMMI\AppData\Local\Google\Chrome\User Data\Default\Preferences
G2 - GCE: Preference [User Data\Default] [abjcfabbhafbcdfjoecdgepllmpfceif] Magic Actions for YouTube v.5.8.6, (Activ�)
G2 - GCE: Preference [User Data\Default] [ailcjmkbchjpglniippdjaaamimdniko] memeticon v.1.2.3 (Activ�)
G2 - GCE: Preference [User Data\Default] [kanbnempkjnhadplbfgdaagijdbdbjeb] Auto Replay for YouTube v.1.9.26 (Activ�)
G2 - GCE: Preference [User Data\Default] [lafgflilldkcacihcmgjpmadpabgkooe] MultiPartTube v.1.2.2 (Activ�)
G2 - GCE: Preference [User Data\Default] [lnpifgapnmpninomacbhdlconlpikdai] Window Close Protector v.2.2 (Activ�)
G2 - GCE: Preference [User Data\Default] [mhpdijlebpdiimcjojcbkpmcpfabignf] Web Noire v.12 (Activ�)
G2 - GCE: Preference [User Data\Default] [ohfbgfemjdpbnddbahbanipoblngdpmo] Guitar Tab Viewer v.0.3.101 (Activ�)
~ Google Browser: 26 Legitimates Filtered in 00mn 13s



---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
C:\Users\KAMMI\AppData\Roaming\Mozilla\Firefox\Profiles\a20son30.default\prefs.js
M3 - MFPP: Plugins - [KAMMI] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\zgametb.xml
~ Firefox Browser: 33 Legitimates Filtered in 00mn 00s



---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride =
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Proxy management: Scanned in 00mn 00s



---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
~ Keys: Scanned in 00mn 00s



---\\ Redirection du fichier Hosts (O1)
~ Le fichier hosts est sain (The hosts file is clean).
~ Hosts File: Scanned in 00mn 00s
~ Nombre de lignes (Lines number): 18



---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: IDM Helper [64Bits] - {0055C089-8582-441B-A0BF-17B458C2A3A8} . (.Tonec Inc. - IDM BHO Module.) -- C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll
O2 - BHO: ZGame Toolbar [64Bits] - {573bf47c-2566-449d-ba1b-417d5d3fb9fd} . (.Pas de propri�taire - ZGame Toolbar Link Library.) -- C:\Program Files (x86)\zgametb\zgameDx.dll
O2 - BHO: QUICKfind BHO Object [64Bits] - {C08DF07A-3E49-4E25-9AB0-D3882835F153} . (.IDM - QUICKfind BHO Object.) -- C:\Program Files (x86)\IDM\QUICKfind\PlugIns\IEHelp.dll
~ BHO: 10 Legitimates Filtered in 00mn 00s



---\\ Applications d�marr�es par registre & par dossier (O4)
O4 - HKLM\..\Run: [RtHDVCpl] . (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
O4 - HKLM\..\Run: [RtHDVBg] . (.Realtek Semiconductor - HD Audio Background Process.) -- C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
O4 - HKLM\..\Run: [AtherosBtStack] . (.Atheros Communications - Serveur Stack Bluetooth.) -- C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
O4 - HKLM\..\Run: [AthBtTray] . (.Atheros Commnucations - Bluetooth Tray.) -- C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files (x86)\Synaptics\SynTP\SynTPEnh.exe (.not file.)
O4 - HKLM\..\Run: [AdobeAAMUpdater-1.0] . (.Adobe Systems Incorporated - Adobe Updater Startup Utility.) -- C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe
O4 - HKCU\..\Run: [Elbserver] . (.Sony Corporation - Pas de description.) -- C:\Program Files (x86)\Sony\Media Gallery\ElbServer.exe
O4 - HKCU\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe
O4 - HKCU\..\Run: [VRLPHelper] . (.Sony Corporation - VRLPHelper.) -- C:\Program Files (x86)\Sony\Media Gallery\VRLPHelper.exe
O4 - HKCU\..\Run: [MediaDICO38] . (.L'Aventure Multimedia - Pas de description.) -- C:\Program Files (x86)\Micro Application\38 Dictionnaires et Recueils de Correspondance\LanceMediaDICO38.exe
O4 - HKCU\..\Run: [msnmsgr] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
O4 - HKCU\..\Run: [CubeDesktop] Cl� orpheline
O4 - HKCU\..\Run: [SuperCopier2.exe] . (.SFX TEAM - SuperCopier 2 (explorer file copy replaceme.) -- C:\Program Files (x86)\SuperCopier2\SuperCopier2.exe
O4 - HKCU\..\Run: [Messenger (Yahoo!)] . (.Yahoo! Inc. - Yahoo! Messenger.) -- C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe
O4 - HKCU\..\Run: [Hobbyist Software VLC Streamer] . (.Hobbyist Software - VLC Streamer Configuration.) -- C:\Program Files (x86)\Hobbyist Software\VLC Streamer\VLC Streamer Configuration.exe
O4 - HKCU\..\Run: [IDMan] . (.Tonec Inc. - Internet Download Manager (IDM).) -- C:\Program Files (x86)\Internet Download Manager\IDMan.exe
O4 - HKCU\..\Run: [GoogleChromeAutoLaunch_EF3C31C8DB0FF1DFDB680704ED665221] . (.Google Inc. - Google Chrome.) -- C:\Users\KAMMI\AppData\Local\Google\Chrome\Application\chrome.exe
O4 - HKCU\..\Run: [AdobeBridge] Cl� orpheline
O4 - HKCU\..\Run: [Akamai NetSession Interface] . (.Akamai Technologies, Inc. - Akamai NetSession Client.) -- C:\Users\KAMMI\AppData\Local\Akamai\netsession_win.exe
O4 - HKCU\..\Run: [E09FXLRD_113738675] . (.Microsoft Corporation - Microsoft Encarta Dictionaries.) -- C:\Program Files (x86)\Microsoft Encarta\Microsoft Encarta 2009 - Collection DVD\EDICT.exe
O4 - HKCU\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe
O4 - HKCU\..\Run: [DAEMON Tools Pro Agent] . (.DT Soft Ltd - DAEMON Tools Pro Agent.) -- C:\Program Files (x86)\DAEMON Tools Pro\DTAgent.exe
O4 - HKCU\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Users\KAMMI\AppData\Local\Google\Update\GoogleUpdate.exe
O4 - HKCU\..\Run: [Rim.DesktopHelper.exe] . (.Research In Motion - Rim.DesktopHelper.) -- C:\Program Files (x86)\Research In Motion\BlackBerry desktop\Rim.desktopHelper.exe
O4 - HKCU\..\Run: [googletalk] . (.Google - Google Talk.) -- C:\Program Files (x86)\Google\Google Talk\googletalk.exe
O4 - HKLM\..\Wow6432Node\Run: [IAStorIcon] . (.Intel Corporation - IAStorIcon.) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
O4 - HKLM\..\Wow6432Node\Run: [Dolby Home Theater v4] . (.Dolby Laboratories Inc. - Dolby Profile Selector.) -- C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe
O4 - HKLM\..\Wow6432Node\Run: [StartCCC] . (.Advanced Micro Devices, Inc. - Catalyst� Control Center Launcher.) -- C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
O4 - HKLM\..\Wow6432Node\Run: [ISBMgr.exe] . (.Sony Corporation - Pas de description.) -- C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe
O4 - HKLM\..\Wow6432Node\Run: [PMBVolumeWatcher] . (.Sony Corporation - Media Check Tool.) -- C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe
O4 - HKLM\..\Wow6432Node\Run: [BCSSync] . (.Microsoft Corporation - Microsoft Office 2010 component.) -- C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe
O4 - HKLM\..\Wow6432Node\Run: [AVG9_TRAY] . (.AVG Technologies CZ, s.r.o. - AVG Tray Monitor.) -- C:\Program Files (x86)\AVG\AVG9\avgtray.exe
O4 - HKLM\..\Wow6432Node\Run: [SunJavaUpdateSched] . (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
O4 - HKLM\..\Wow6432Node\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
O4 - HKLM\..\Wow6432Node\Run: [ASUS Ai Charger] . (.ASUSTek Computer Inc. - AiChargerAP MFC Application.) -- C:\Program Files (x86)\ASUS\ASUS Ai Charger\AiChargerAP.exe
O4 - HKLM\..\Wow6432Node\Run: [TkBellExe] . (.RealNetworks, Inc. - RealNetworks Scheduler.) -- C:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe
O4 - HKLM\..\Wow6432Node\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files (x86)\QuickTime\QTTask.exe
O4 - HKLM\..\Wow6432Node\Run: [SwitchBoard] . (.Adobe Systems Incorporated - SwitchBoard Server (32 bit).) -- C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Wow6432Node\Run: [AdobeCS5ServiceManager] . (.Adobe Systems Incorporated - Adobe CS5 Service Manager.) -- C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe
O4 - HKLM\..\Wow6432Node\Run: [blekko Anti-Phishing] . (.blekko Anti-Phishing (Powered by Panda Secu - blekko Anti-phishing (Powered by Panda Secu.) -- C:\ProgramData\blekko Anti-Phishing\blekkoAntiphishing.exe
O4 - HKLM\..\Wow6432Node\Run: [RIMBBLaunchAgent.exe] . (.Research In Motion Limited - Launch Agent Service.) -- C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe
O4 - HKUS\S-1-5-21-3405881144-4049165689-1168430626-1000\..\Run: [Elbserver] . (.Sony Corporation - Pas de description.) -- C:\Program Files (x86)\Sony\Media Gallery\ElbServer.exe
O4 - HKUS\S-1-5-21-3405881144-4049165689-1168430626-1000\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe
O4 - HKUS\S-1-5-21-3405881144-4049165689-1168430626-1000\..\Run: [VRLPHelper] . (.Sony Corporation - VRLPHelper.) -- C:\Program Files (x86)\Sony\Media Gallery\VRLPHelper.exe
O4 - HKUS\S-1-5-21-3405881144-4049165689-1168430626-1000\..\Run: [MediaDICO38] . (.L'Aventure Multimedia - Pas de description.) -- C:\Program Files (x86)\Micro Application\38 Dictionnaires et Recueils de Correspondance\LanceMediaDICO38.exe
O4 - HKUS\S-1-5-21-3405881144-4049165689-1168430626-1000\..\Run: [msnmsgr] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
O4 - HKUS\S-1-5-21-3405881144-4049165689-1168430626-1000\..\Run: [CubeDesktop] Cl� orpheline
O4 - HKUS\S-1-5-21-3405881144-4049165689-1168430626-1000\..\Run: [SuperCopier2.exe] . (.SFX TEAM - SuperCopier 2 (explorer file copy replaceme.) -- C:\Program Files (x86)\SuperCopier2\SuperCopier2.exe
O4 - HKUS\S-1-5-21-3405881144-4049165689-1168430626-1000\..\Run: [Messenger (Yahoo!)] . (.Yahoo! Inc. - Yahoo! Messenger.) -- C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe
O4 - HKUS\S-1-5-21-3405881144-4049165689-1168430626-1000\..\Run: [Hobbyist Software VLC Streamer] . (.Hobbyist Software - VLC Streamer Configuration.) -- C:\Program Files (x86)\Hobbyist Software\VLC Streamer\VLC Streamer Configuration.exe
O4 - HKUS\S-1-5-21-3405881144-4049165689-1168430626-1000\..\Run: [IDMan] . (.Tonec Inc. - Internet Download Manager (IDM).) -- C:\Program Files (x86)\Internet Download Manager\IDMan.exe
O4 - HKUS\S-1-5-21-3405881144-4049165689-1168430626-1000\..\Run: [GoogleChromeAutoLaunch_EF3C31C8DB0FF1DFDB680704ED665221] . (.Google Inc. - Google Chrome.) -- C:\Users\KAMMI\AppData\Local\Google\Chrome\Application\chrome.exe
O4 - HKUS\S-1-5-21-3405881144-4049165689-1168430626-1000\..\Run: [AdobeBridge] Cl� orpheline
O4 - HKUS\S-1-5-21-3405881144-4049165689-1168430626-1000\..\Run: [Akamai NetSession Interface] . (.Akamai Technologies, Inc. - Akamai NetSession Client.) -- C:\Users\KAMMI\AppData\Local\Akamai\netsession_win.exe
O4 - HKUS\S-1-5-21-3405881144-4049165689-1168430626-1000\..\Run: [E09FXLRD_113738675] . (.Microsoft Corporation - Microsoft Encarta Dictionaries.) -- C:\Program Files (x86)\Microsoft Encarta\Microsoft Encarta 2009 - Collection DVD\EDICT.exe
O4 - HKUS\S-1-5-21-3405881144-4049165689-1168430626-1000\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe
O4 - HKUS\S-1-5-21-3405881144-4049165689-1168430626-1000\..\Run: [DAEMON Tools Pro Agent] . (.DT Soft Ltd - DAEMON Tools Pro Agent.) -- C:\Program Files (x86)\DAEMON Tools Pro\DTAgent.exe
O4 - HKUS\S-1-5-21-3405881144-4049165689-1168430626-1000\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Users\KAMMI\AppData\Local\Google\Update\GoogleUpdate.exe
O4 - HKUS\S-1-5-21-3405881144-4049165689-1168430626-1000\..\Run: [Rim.DesktopHelper.exe] . (.Research In Motion - Rim.DesktopHelper.) -- C:\Program Files (x86)\Research In Motion\BlackBerry desktop\Rim.desktopHelper.exe
O4 - HKUS\S-1-5-21-3405881144-4049165689-1168430626-1000\..\Run: [googletalk] . (.Google - Google Talk.) -- C:\Program Files (x86)\Google\Google Talk\googletalk.exe
~ Application: Scanned in 00mn 00s



---\\ Autres liens utilisateurs (O4)
O4 - GS\Desktop: BitTorrent.lnk . (.BitTorrent Inc. - BitTorrent.) -- C:\Program Files (x86)\BitTorrent\BitTorrent.exe =>P2P.BitTorrent
O4 - GS\Desktop: Cambridge Advanced Learner's Dictionary - 3rd Edition.lnk . (.mozilla.org - cald3.) -- C:\Program Files (x86)\Cambridge\CALD3\cald3.exe
O4 - GS\Desktop: Camtel EVDO-Huawei.lnk . (...) -- C:\Program Files (x86)\Camtel EVDO-Huawei\Camtel EVDO-Huawei.exe
O4 - GS\Desktop: DeskTopOrganizer.lnk . (.c-sharplizards - Desk Top Organizer.) -- C:\Program Files (x86)\Desk Top Organizer\DeskTopOrganizer.exe
O4 - GS\Desktop: MBRCheck.lnk . (...) -- C:\Program Files (x86)\ZHPDiag\mbrcheck.exe
O4 - GS\Desktop: Mercuriale.lnk . (...) -- C:\Mercuriale\Mercuriale.exe
O4 - GS\Desktop: MiniLyrics.lnk . (.Crintsoft - MiniLyrics - Display lyrics automatically.) -- C:\Program Files (x86)\Minilyrics\MiniLyrics.exe
O4 - GS\Desktop: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
O4 - GS\Desktop: PDFCreator.lnk . (.pdfforge http://www.pdfforge.org/ - PDFCreator.) -- C:\Program Files (x86)\PDFCreator\PDFCreator.exe
O4 - GS\Desktop: TuneUp.lnk . (.TuneUp Media, Inc. - TuneUpApp.) -- C:\Program Files (x86)\TuneUpMedia\TuneUpApp.exe
O4 - GS\Desktop: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag Setup.) -- C:\Program Files (x86)\ZHPDiag\ZHPhep.exe
O4 - GS\Desktop: ZHPFix.lnk . (.Nicolas Coolman - ZHPDiag Setup.) -- C:\Program Files (x86)\ZHPDiag\ZHPFix\ZHPhep.exe
O4 - GS\Desktop: ZTE Wireless Terminal.lnk . (...) -- C:\Program Files (x86)\ZTE Wireless Terminal\bin\App.exe (.not file.)
O4 - GS\TaskBar: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Users\KAMMI\AppData\Local\Google\Chrome\Application\chrome.exe
O4 - GS\TaskBar: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
O4 - GS\TaskBar: PMB.lnk . (.Sony Corporation - Browser.) -- C:\Program Files (x86)\Sony\PMB\PMBBrowser.exe
O4 - GS\TaskBar: VLC media player.lnk . (.VideoLAN - VLC media player 2.0.5.) -- C:\Program Files (x86)\VideoLAN\VLC\vlc.exe
O4 - GS\TaskBar: Windows Explorer.lnk . (.Microsoft Corporation - Explorateur Windows.) -- C:\Windows\explorer.exe
O4 - GS\TaskBar: Windows Media Player.lnk . (.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O4 - GS\TaskBar: Yahoo! Messenger.lnk . (.Yahoo! Inc. - Yahoo! Messenger.) -- C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe
O4 - GS\Programs: Internet Explorer (64-bit).lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - GS\Programs: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - GS\Programs: ServeToMe.lnk . (...) -- C:\Users\KAMMI\AppData\Roaming\Microsoft\Installer\{24E59EEC-26D2-48C2-B007-CFF5C29A7A23}\_A08065AD0B63579905216D.exe
O4 - GS\Programs: Verizon Wireless MiFi-2200 Firmware Updates.lnk . (.Novatel Wireless, Inc - Device Upgrade Utility for MiFi2200 VZW, PC.) -- C:\Program Files (x86)\Verizon Wireless\Firmware Updates\Novatel\DUU_Verizon_MiFi2200_FW167.029.exe
O4 - GS\QuickLaunch: BitTorrent.lnk . (.BitTorrent Inc. - BitTorrent.) -- C:\Program Files (x86)\BitTorrent\BitTorrent.exe =>P2P.BitTorrent
O4 - GS\QuickLaunch: DeskTopOrganizer.lnk . (.c-sharplizards - Desk Top Organizer.) -- C:\Program Files (x86)\Desk Top Organizer\DeskTopOrganizer.exe
O4 - GS\QuickLaunch: Easy Audio Cutter.lnk . (.Koyote Soft - Pas de description.) -- C:\Program Files (x86)\Free mp3 Wma Converter\Easy Audio Cutter\AudioCutter.exe
O4 - GS\QuickLaunch: Foxit Reader.lnk . (.Foxit Software - Foxit Reader 3.1, Best Reader for Everyday.) -- C:\Program Files (x86)\Foxit Software\Foxit Reader\Foxit Reader.exe
O4 - GS\QuickLaunch: Free CD Ripper.lnk . (.Koyote Soft - FreeCDRipper.) -- C:\Program Files (x86)\Free mp3 Wma Converter\Free CD Ripper\FreeCDRipper.exe
O4 - GS\QuickLaunch: Free Mp3 Wma Converter.lnk . (.Koyote Soft - Free Audio Converter.) -- C:\Program Files (x86)\Free mp3 Wma Converter\FreeConverter\FreeConverter.exe
O4 - GS\QuickLaunch: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - GS\QuickLaunch: Mercuriale.lnk . (...) -- C:\Mercuriale\Mercuriale.exe
O4 - GS\QuickLaunch: MiniLyrics.lnk . (.Crintsoft - MiniLyrics - Display lyrics automatically.) -- C:\Program Files (x86)\Minilyrics\MiniLyrics.exe
O4 - GS\QuickLaunch: Road Attack.lnk . (...) -- C:\Program Files (x86)\MyPlayCity.com\Road Attack\Road Attack.exe
O4 - GS\QuickLaunch: Yahoo! Messenger.lnk . (.Yahoo! Inc. - Yahoo! Messenger.) -- C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe
O4 - GS\Accessories: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - GS\Accessories: Private Character Editor.lnk . (.Microsoft Corporation - �diteur de caract�res priv�s.) -- C:\Windows\system32\eudcedit.exe
O4 - GS\SendTo: Evernote for VAIO.lnk . (.Evernote Corp., 333 W Evelyn Ave. Mountain - Evernote.) -- C:\Program Files (x86)\Evernote\Evernote\Evernote.exe
O4 - GS\SendTo: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) -- C:\Windows\system32\WFS.exe
O4 - GS\SendTo: MediaInfo.lnk . (...) -- C:\Program Files (x86)\K-Lite Codec Pack\Tools\mediainfo.exe
O4 - GS\SendTo: Skype.lnk . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe
O4 - GS\Desktop: Continue Best Codec Pack installation.lnk . (...) -- C:\Users\KAMMI\AppData\Local\Temp\Best Codec Pack803932.exe
O4 - GS\Desktop: Easy Audio Cutter.lnk . (.Koyote Soft - Pas de description.) -- C:\Program Files (x86)\Free mp3 Wma Converter\Easy Audio Cutter\AudioCutter.exe
O4 - GS\Desktop: Encyclopaedia Universalis 2012.lnk . (...) -- C:\Program Files (x86)\Encyclopaedia Universalis 2012\Encyclopaedia Universalis 2012\Universalis.exe
O4 - GS\Desktop: Free CD Ripper.lnk . (.Koyote Soft - FreeCDRipper.) -- C:\Program Files (x86)\Free mp3 Wma Converter\Free CD Ripper\FreeCDRipper.exe
O4 - GS\Desktop: Free Mp3 Wma Converter.lnk . (.Koyote Soft - Free Audio Converter.) -- C:\Program Files (x86)\Free mp3 Wma Converter\FreeConverter\FreeConverter.exe
O4 - GS\Desktop: Google Talk.lnk . (.Google - Google Talk.) -- C:\Program Files (x86)\Google\Google Talk\googletalk.exe
O4 - GS\Desktop: MyPlayCity Games.lnk . (...) -- C:\Program Files (x86)\MyPlayCity.com\Road Attack\MyPlayCity.url
O4 - GS\Desktop: PhotoFiltre 7.lnk . (.PhotoFiltre - PhotoFiltre 7.) -- C:\Program Files (x86)\PhotoFiltre 7\PhotoFiltre7.exe
O4 - GS\Desktop: Play Online Games.lnk . (...) -- C:\Program Files (x86)\MyPlayCity.com\Road Attack\PlayOnlineGames.url
O4 - GS\Desktop: Revo Uninstaller.lnk . (.VS Revo Group - Revo Uninstaller.) -- C:\Program Files (x86)\VS Revo Group\Revo Uninstaller\Revouninstaller.exe
O4 - GS\Desktop: Road Attack.lnk . (...) -- C:\Program Files (x86)\MyPlayCity.com\Road Attack\Road Attack.exe
O4 - GS\Desktop: Usenet.nl.lnk . (...) -- C:\Program Files (x86)\Usenet.nl\Usenet.nl.exe
~ Global Startup: Scanned in 00mn 03s



---\\ Boutons situ�s sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: &Envoyer � OneNote [64Bits] - {2670000A-7350-4f3c-8081-5663EE0C6C49} . (.Microsoft Corporation - Microsoft OneNote Internet Explorer Add-in.) -- C:\Program Files (x86)\MICROS~2\Office14\ONBttnIE.dll
O9 - Extra button: Notes &li�es OneNote [64Bits] - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} . (.Microsoft Corporation - Microsoft OneNote Internet Explorer Add-in.) -- C:\Program Files (x86)\MICROS~2\Office14\ONBTTN~1.dll
O9 - Extra button: Barre de recherche Encarta [64Bits] - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} -- Cl� orpheline
~ IE Extra Buttons: Scanned in 00mn 00s



---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{85C23BF9-AB9C-49AB-92A5-73993BAF73A4}: NameServer = 195.24.192.33 195.24.208.2
O17 - HKLM\System\CCS\Services\Tcpip\..\{CDF4BF81-9FCF-4D23-8D48-3B364170ADC6}: NameServer = 195.24.192.33 195.24.208.2
O17 - HKLM\System\CCS\Services\Tcpip\..\{466BEA8E-14F0-403F-82CD-611721C2B0EE}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{85C23BF9-AB9C-49AB-92A5-73993BAF73A4}: NameServer = 195.24.192.33 195.24.208.2
O17 - HKLM\System\CS1\Services\Tcpip\..\{CDF4BF81-9FCF-4D23-8D48-3B364170ADC6}: NameServer = 195.24.192.33 195.24.208.2
O17 - HKLM\System\CS1\Services\Tcpip\..\{466BEA8E-14F0-403F-82CD-611721C2B0EE}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{85C23BF9-AB9C-49AB-92A5-73993BAF73A4}: NameServer = 195.24.192.33 195.24.208.2
O17 - HKLM\System\CS2\Services\Tcpip\..\{CDF4BF81-9FCF-4D23-8D48-3B364170ADC6}: NameServer = 195.24.192.33 195.24.208.2
O17 - HKLM\System\CS2\Services\Tcpip\..\{466BEA8E-14F0-403F-82CD-611721C2B0EE}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
~ Domain: Scanned in 00mn 00s



---\\ Protocole additionnel (O18)
O18 - Handler: wlpg [64Bits] - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (...) --
O18 - Filter: text/xml [64Bits] - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.dll
~ Protocole Additionnel: Scanned in 00mn 00s



---\\ Liste des services NT non Microsoft et non d�sactiv�s (O23)
O23 - Service: Camtel EVDO-Huawei. OUC (Camtel EVDO-Huawei. RunOuc) . (...) - C:\Program Files (x86)\Camtel EVDO-Huawei\UpdateDog\ouc.exe
O23 - Service: CDROM_Detect (CDROM_Detect) . (...) - C:\Program Files\CDMA-1XDO\C+WEject.exe
O23 - Service: GCT WiMAX Service (GCTWiMAXService) . (.Seowonintech CO.Ltd - GCT WiMAX Service Daemon for Seowon Product.) - C:\Windows\SysWOW64\GCTWiMaxServiceD.exe
O23 - Service: Servizio McAfee Online Backup (MOBK649backup) . (.McAfee, Inc. - Programme d'amor�age du service McAfee Onli.) - C:\Program Files (x86)\McAfee Online Backup\MOBK649backup.exe
O23 - Service: MySQL55 (MySQL55) . (...) - C:\ProgramData\MySQL\MySQL Server 5.5\my.ini
O23 - Service: Novatel Wireless Verizon Device Helper (NWVZHelper) . (.Novatel Wireless Inc. - NWHelper Module.) - C:\Program Files (x86)\Novatel Wireless\Verizon\Drivers\NWHelper_001.exe
O23 - Service: ServeToMe-Service (ServeToMe-Service) . (.ProjectsWithLove - ServeToMe-Service.) - C:\Program Files (x86)\ProjectsWithLove\ServeToMe\ServeToMe-Service.exe
O23 - Service: UDisk Monitor (UDisk Monitor) . (...) - C:\Program Files\ZTE Wireless Terminal\bin\MonServiceUDisk.exe
O23 - Service: wampapache (wampapache) . (.Apache Software Foundation - Apache HTTP Server.) - c:\wamp\apache2\bin\httpd.exe
O23 - Service: wampmysqld (wampmysqld) . (...) - c:\wamp\mysql\bin\mysqld-nt.exe
~ Services: 35 Legitimates Filtered in 00mn 05s



---\\ T�ches planifi�es en automatique (O39)
[MD5.F2934D361CB40B3AFA7285D595E7399D] [APT] [AutoRunDev] (...) -- C:\Program Files (x86)\Seowon\sw_wimaxcm.exe [2097152]
[MD5.00000000000000000000000000000000] [APT] [Funmoods] (...) -- C:\Users\KAMMI\AppData\Roaming\Funmoods\UPDATE~1\UPDATE~1.exe (.not file.) [0] =>PUP.Funmoods
[MD5.00000000000000000000000000000000] [APT] [KAMMI Local Autobackup 5 4] (...) -- C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBCore.exe (.not file.) [0]
[MD5.F2934D361CB40B3AFA7285D595E7399D] [APT] [Seowon] (...) -- C:\Program Files (x86)\Seowon\sw_wimaxcm.exe [2097152]
[MD5.00000000000000000000000000000000] [APT] [SpottyFiles Update] (...) -- C:\Program Files (x86)\SpottyFiles\SpottyFilesUpdater.exe (.not file.) [0]
[MD5.F3787EE2398E969FD282343737930B3B] [APT] [{74A415C6-7808-438E-83B4-79F084CDDAA1}] (...) -- C:\Users\KAMMI\Documents\Downloads\Compressed\QuickPwn22-1.exe [17034222]
[MD5.00000000000000000000000000000000] [APT] [{7C5160E5-C6D2-44CE-ADCF-2A21D7C09890}] (...) -- C:\Users\KAMMI\Downloads\Shockwave_Installer_Slim.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{E7855F78-0548-4BE7-BE24-57F558A1F99E}] (...) -- F:\LOGICIELS\SOFTWARES\Magic ISO maker\Magic ISO\Magic ISO Maker 5.4 Build 239.exe (.not file.) [0]
~ Scheduled Task: 34 Legitimates Filtered in 00mn 06s



---\\ Logiciels install�s (O42)
O42 - Logiciel: Akamai NetSession Interface - (.Akamai Technologies, Inc.) [HKCU][64Bits] -- Akamai
O42 - Logiciel: CDMA-1XDO - (...) [HKLM][64Bits] -- CDMA-1XDO_is1
O42 - Logiciel: Desk Top Organizer - (.c-sharplizards.) [HKLM][64Bits] -- Desk Top Organizer
O42 - Logiciel: Desk Top Organizer - (.c-sharplizards.) [HKLM][64Bits] -- {6B7D7CC1-1B2D-4930-B7A2-02FA9C4D1F2F}
O42 - Logiciel: Mercuriale - (...) [HKLM][64Bits] -- Mercuriale
O42 - Logiciel: QUICKfind server v1.1 - (.IDM.) [HKLM][64Bits] -- QUICKfind
O42 - Logiciel: Seowon_WiMaxCM_SW_017AN_64bit - (.SEOWON.) [HKLM][64Bits] -- {92A34DA5-D790-4888-8791-52E4441B1598}
O42 - Logiciel: VZAccess Manager - (.Smith Micro Software Inc..) [HKLM][64Bits] -- {780F9A1C-6BFE-4691-83A9-095D859E3052}
O42 - Logiciel: WAMP5 1.7.0 - (.Romain Bourdon (Roms).) [HKLM][64Bits] -- WAMP5_is1
O42 - Logiciel: ZGame Toolbar - (.Visicom Media Inc..) [HKLM][64Bits] -- zgametb
O42 - Logiciel: blekko Anti-Phishing - (.blekko Anti-Phishing (Powered by Panda Security).) [HKLM][64Bits] -- blekko Anti-Phishing
~ Logic: 302 Legitimates Filtered in 00mn 01s



---\\ HKCU & HKLM Software Keys
[HKCU\Software\American Systems]
[HKCU\Software\AppDataLow\Software\zgametb]
[HKCU\Software\GCT WiMaxCM - 198339820987ASDJKLJEOI7]
[HKCU\Software\GCT]
[HKCU\Software\Smsi-VZam]
[HKCU\Software\SpottyFiles]
[HKLM\Software\1XDO_O]
[HKLM\Software\WiMax]
[HKLM\Software\Wow6432Node\AGNS]
[HKLM\Software\Wow6432Node\NetMotion]
[HKLM\Software\Wow6432Node\Seowon Wimax]
[HKLM\Software\Wow6432Node\SpottyFiles]
[HKLM\Software\Wow6432Node\WiMax]
~ Key Software: 380 Legitimates Filtered in 00mn 01s



---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 05/05/2013 - 22:26:44 - [4,648] ----D C:\Program Files (x86)\Desk Top Organizer
O43 - CFD: 06/09/2012 - 10:42:41 - [3,818] ----D C:\Program Files (x86)\FSL
O43 - CFD: 06/03/2013 - 12:09:47 - [32,648] ----D C:\Program Files (x86)\Photo Effects Studio
O43 - CFD: 30/06/2013 - 16:05:35 - [9,814] ----D C:\Program Files (x86)\Seowon
O43 - CFD: 08/01/2013 - 11:23:27 - [0] ----D C:\Program Files (x86)\SpottyFiles
O43 - CFD: 24/03/2013 - 07:40:45 - [3,320] ----D C:\Program Files (x86)\zgametb
O43 - CFD: 24/03/2013 - 07:40:45 - [0,592] ----D C:\ProgramData\blekko Anti-Phishing
O43 - CFD: 06/06/2012 - 07:28:12 - [1367,790] --H-D C:\ProgramData\Dati applicazioni
O43 - CFD: 06/06/2012 - 07:28:12 - [756,970] R---D C:\ProgramData\Documenti
O43 - CFD: 06/06/2012 - 07:28:12 - [1,748] R---D C:\ProgramData\Menu Avvio
O43 - CFD: 06/06/2012 - 07:28:12 - [0] R-H-D C:\ProgramData\Preferiti
O43 - CFD: 24/10/2012 - 16:07:31 - [0,215] ----D C:\ProgramData\WEngineLite
O43 - CFD: 05/05/2013 - 22:26:45 - [8,713] --H-D C:\ProgramData\{3E0606EA-0A4D-4D7F-B9BC-6EE31F70FBBB}
O43 - CFD: 04/05/2013 - 19:33:49 - [0,026] ----D C:\Users\KAMMI\AppData\Roaming\cald3
O43 - CFD: 26/02/2013 - 18:40:43 - [0,004] ----D C:\Users\KAMMI\AppData\Roaming\EVDO_General
O43 - CFD: 08/10/2012 - 08:57:36 - [0,001] ----D C:\Users\KAMMI\AppData\Roaming\SpottyFiles
O43 - CFD: 07/07/2012 - 19:13:00 - [2,697] ----D C:\Users\KAMMI\AppData\Roaming\Thinking Minds Budiling Bytes
O43 - CFD: 28/06/2013 - 09:17:10 - [32,377] ----D C:\Users\KAMMI\AppData\Local\Akamai
O43 - CFD: 04/05/2013 - 19:32:30 - [0] ----D C:\Users\KAMMI\AppData\Local\cald3
O43 - CFD: 06/06/2012 - 07:28:36 - [0] ----D C:\Users\KAMMI\AppData\Local\Cronologia
O43 - CFD: 06/06/2012 - 07:28:36 - [0] ----D C:\Users\KAMMI\AppData\Local\Dati applicazioni
O43 - CFD: 24/03/2013 - 07:40:52 - [193,246] ----D C:\Users\KAMMI\AppData\Local\zgametb
~ 104 Dossiers CLSID vides (CLSID Empty Folders)
~ Program Folder: 477 Legitimates Filtered in 17mn 08s



---\\ Derniers fichiers modifi�s ou cr�es sous Windows et System32 (O44)
O44 - LFC:[MD5.B06477F1DD87CB61B91E9AEE5D357F7B] - 30/06/2013 - 16:11:47 ---A- . (...) -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [28352]
O44 - LFC:[MD5.B06477F1DD87CB61B91E9AEE5D357F7B] - 30/06/2013 - 16:11:47 ---A- . (...) -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [28352]
O44 - LFC:[MD5.B06477F1DD87CB61B91E9AEE5D357F7B] - 30/06/2013 - 16:11:47 RSHAD . (...) -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [28352]
O44 - LFC:[MD5.B06477F1DD87CB61B91E9AEE5D357F7B] - 30/06/2013 - 16:11:47 RSHAD . (...) -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [28352]
O44 - LFC:[MD5.8A1123A996965FB1A9F264AA75E97FF1] - 30/06/2013 - 03:06:31 ---A- . (...) -- C:\Windows\MOBK649.blk [3038]
O44 - LFC:[MD5.8BD17F62A8C0607356D126EDA4AC9851] - 30/06/2013 - 03:06:31 ---A- . (...) -- C:\Windows\MOBK649.flt [864]
~ Files: 26 Legitimates Filtered in 00mn 18s



---\\ Op�rations et fonctions au d�marrage de Windows Explorer (O46)
O46 - SEH:ShellExecuteHooks - Groove GFS Stub Execution Hook [64Bits] - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL
~ ShellExecuteHooks: Scanned in 00mn 00s



---\\ MountPoints2 Shell Key (O51)
O51 - MPSK:{04c0a24d-c63f-11e2-b281-001e101f36d9}\AutoRun\command. (...) -- G:\Setup.exe (.not file.)
O51 - MPSK:{12ac4627-8940-11e2-bf9f-ccaf78d6340a}\AutoRun\command. (...) -- I:\AutoRun.exe (.not file.)
O51 - MPSK:{3a770f17-b227-11e2-bef5-ccaf78d6340a}\AutoRun\command. (...) -- G:\AutoRun.exe (.not file.)
O51 - MPSK:{57b8b4dc-8f0e-11e2-9fba-001e101f4e71}\AutoRun\command. (...) -- I:\AutoRun.exe (.not file.)
O51 - MPSK:{70d56169-9c50-11e2-b5a5-ccaf78d6340a}\AutoRun\command. (...) -- G:\fscommand\LS_Start_Launch.exe (.not file.)
O51 - MPSK:{89b7d444-6c46-11e2-bf53-ccaf78d6340a}\AutoRun\command. (...) -- G:\AutoRun.exe (.not file.)
O51 - MPSK:{89b7d453-6c46-11e2-bf53-ccaf78d6340a}\AutoRun\command. (...) -- G:\AutoRun.exe (.not file.)
O51 - MPSK:{89b7d8d3-6c46-11e2-bf53-ccaf78d6340a}\AutoRun\command. (...) -- G:\AutoRun.exe (.not file.)
O51 - MPSK:{89b7d8df-6c46-11e2-bf53-ccaf78d6340a}\AutoRun\command. (...) -- I:\AutoRun.exe (.not file.)
O51 - MPSK:{89b7d8eb-6c46-11e2-bf53-ccaf78d6340a}\AutoRun\command. (...) -- G:\AutoRun.exe (.not file.)
O51 - MPSK:{9347b70e-7b41-11e2-ac94-ccaf78d6340a}\AutoRun\command. (...) -- G:\Setup.exe (.not file.)
O51 - MPSK:{a436769e-1b9c-11e2-9a37-f0bf9769edac}\AutoRun\command. (...) -- G:\VZAccess_Manager.exe (.not file.)
O51 - MPSK:{a43676a2-1b9c-11e2-9a37-f0bf9769edac}\AutoRun\command. (...) -- G:\VZAccess_Manager.exe (.not file.)
O51 - MPSK:{c7f9f8dc-7668-11e2-9c53-ccaf78d6340a}\AutoRun\command. (...) -- G:\AutoRun.exe (.not file.)
O51 - MPSK:{d0b8c8d4-8446-11e2-bef8-f0bf9769edac}\AutoRun\command. (...) -- G:\Launcher.exe (.not file.)
O51 - MPSK:{d0b8caa8-8446-11e2-bef8-ccaf78d6340a}\AutoRun\command. (...) -- G:\iLinker.exe (.not file.)
~ Keys: Scanned in 00mn 00s



---\\ ShareTools MSconfig StartupReg (O53)
O53 - SMSR:HKLM\...\startupreg\feedreader.exe [Key] . (...) -- C:\Program Files (x86)\FeedReader30\feedreader.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\LowRateVoip [Key] . (.LowRateVoip - Client to make VoIP calls..) -- C:\Program Files (x86)\LowRateVoip.com\LowRateVoip\LowRateVoip.exe
~ SMSR Keys: 7 Legitimates Filtered in 00mn 00s



---\\ Microsoft Windows Policies System (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=0
O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=0
O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
~ MWPS: 16 Legitimates Filtered in 00mn 00s



---\\ Liste des Drivers Syst�me (O58)
O58 - SDL:[MD5.2F6B34B83843F0C5118B63AC634F5BF4] - 14/07/2009 - 02:52:21 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\Drivers\adp94xx.sys [491088]
O58 - SDL:[MD5.A5E770426D18F8EF332A593F3289DA91] - 21/06/2011 - 00:03:42 ---A- . (.Atheros Communications, Inc. - Atheros Extensible Wireless LAN device driver.) -- C:\Windows\System32\athrx.sys [2753536]
O58 - SDL:[MD5.5F6F825D514A60B35DF749F3B7509D36] - 17/08/2009 - 14:03:00 ---A- . (.GCT Semiconductor, Inc. - GCT WiMAX Protocol Driver.) -- C:\Windows\SysWOW64\drivers\gdmwmprt.sys [32768]
~ Drivers: Scanned in 00mn 00s



---\\ Liste des outils de nettoyage (O63)
O63 - Logiciel: Ad-Remover par C_XX - (.C_XX.) [HKLM] -- Ad-Remover
O63 - Logiciel: UsbFix By El Desaparecido - (.El Desaparecido.) [HKLM] -- Usbfix
O63 - Logiciel: ZHPDiag 2013 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1
~ ADS: Scanned in 00mn 00s



---\\ Liste des services Legacy (O64)
O64 - Services: CurCS - 17/08/2009 - C:\Windows\System32\DRIVERS\gdmwmprt.sys (GdmWmPrt) .(.GCT Semiconductor, Inc. - GCT WiMAX Protocol Driver.) - LEGACY_GDMWMPRT
O64 - Services: CurCS - 18/04/2011 - C:\Windows\System32\DRIVERS\MOBK649.sys (MOBK649Filter) .(.Mozy, Inc. - Mozy Change Monitor Filter Driver.) - LEGACY_MOBK649FILTER
~ Legacy: 85 Legitimates Filtered in 00mn 01s



---\\ Start Menu Internet (O68)
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Users\KAMMI\AppData\Local\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
~ Keys: Scanned in 00mn 00s



---\\ Search Browser Infection (O69)
O69 - SBI: SearchScopes [HKCU] ${searchCLSID} - (@ieframe.dll,-12512) - http://search.live.com
O69 - SBI: SearchScopes [HKCU] {77D716E1-9DDA-4970-A284-4008BFC7CDE9} - (eBay) - http://rover.ebay.com
O69 - SBI: SearchScopes [HKCU] {E68C855D-F97C-486D-B287-5FDBB54C0A25} - (Zinio) - http://services.zinio.com
~ Keys: Scanned in 00mn 00s



---\\ Recherche particuliere � la racine de certains dossiers (O84)
[MD5.276C81B9A4BBBD4E7C571AEE1E84BBD3] [SPRF][01/03/2013] (...) -- C:\Users\KAMMI\AppData\Local\Temp\4iva6v5d.dll [3584]
[MD5.B28C334C03CEE7C5E829C43AE75DAE5A] [SPRF][23/08/2012] (.Ask.com - AskIC Dynamic Link Library.) -- C:\Users\KAMMI\AppData\Local\Temp\AskSLib.dll [248008]
[MD5.6E1351632911789F11352A6A74426F7B] [SPRF][01/05/2013] (.Pas de propri�taire - Installer.) -- C:\Users\KAMMI\AppData\Local\Temp\Best Codec Pack803932.exe [625984]
[MD5.F6278B5A16F830885B184D5F72E1B935] [SPRF][08/01/2013] (.Terra Informatica Software, Inc., British C - HTMLayout - embeddable HTML rendering and layout component.) -- C:\Users\KAMMI\AppData\Local\Temp\htmlayout.dll [947200]
[MD5.46BAA11B87C127AD9386D91E844C7351] [SPRF][30/08/2012] (...) -- C:\Users\KAMMI\AppData\Local\Temp\installhelper.dll [1622016]
[MD5.DC29C682BAF5DB06E8F7860010442D3F] [SPRF][24/03/2013] (.TeamDev Ltd - JNIWrapper Native Library.) -- C:\Users\KAMMI\AppData\Local\Temp\jniwrap.dll [45112]
[MD5.F655170EB3DC3CBB3F564077C670A7E1] [SPRF][31/01/2013] (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Users\KAMMI\AppData\Local\Temp\jre-7u13-windows-i586-iftw.exe [897448]
[MD5.6C137D2BEF3CDD43F3AE2FD6705B9FED] [SPRF][05/04/2013] (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Users\KAMMI\AppData\Local\Temp\jre-7u21-windows-i586-iftw.exe [904104]
[MD5.B1957B038895642DF9F662326E7D4DDC] [SPRF][22/06/2013] (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Users\KAMMI\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe [903080]
[MD5.27228DD23BC36DC797DBBD223B5D964E] [SPRF][26/06/2013] (...) -- C:\Users\KAMMI\AppData\Local\Temp\pool.bin [256]
[MD5.13E66D856D535B6739C1C634D915E0A8] [SPRF][31/03/2010] (.AB-Tools.com - Setup.) -- C:\Users\KAMMI\AppData\Local\Temp\QuickStores_Unlocker.exe [435544]
[MD5.D41D8CD98F00B204E9800998ECF8427E] [SPRF][01/06/2013] (...) -- C:\Users\KAMMI\AppData\Local\Temp\SCC.dll [0]
[MD5.F10E9620F1D0EDEC56C0C1E1790CEAB9] [SPRF][17/06/2013] (.Skype Technologies S.A. - Skype.) -- C:\Users\KAMMI\AppData\Local\Temp\SkypeSetup.exe [31668328]
[MD5.72412B526BCC716382E62B7939DCFD8F] [SPRF][17/04/2012] (...) -- C:\Users\KAMMI\AppData\Local\Temp\SRAssetsHelper.dll [1085952]
[MD5.0DCF86BDDCCDB78BD5E654BB2863171D] [SPRF][27/09/2012] (.http://SpottyFiles.com - SpottyFiles.) -- C:\Users\KAMMI\AppData\Local\Temp\uninstall216257072.exe [1363088]
[MD5.FBD3C1BECA62469424BA5E4D4631C223] [SPRF][27/09/2012] (.http://SpottyFiles.com - SpottyFiles.) -- C:\Users\KAMMI\AppData\Local\Temp\uninstall216257087.exe [254096]
[MD5.BF84F1DF8BFBBD5008672C1CF9546A73] [SPRF][27/09/2012] (.http://SpottyFiles.com - SpottyFiles.) -- C:\Users\KAMMI\AppData\Local\Temp\uninstall216257134.exe [4959888]
[MD5.94DB0B655D257820FDE7D158E0EA85D1] [SPRF][16/06/2013] (...) -- C:\Users\KAMMI\AppData\Local\Temp\utt4228.tmp.bat [95]
[MD5.B9516E579203B8FDCF4EE6728B001678] [SPRF][02/11/2012] (...) -- C:\Users\KAMMI\AppData\Local\Temp\utt70AA.tmp.bat [95]
[MD5.DEB7CB39993A997B659E978A5DD762C9] [SPRF][21/04/2013] (...) -- C:\Users\KAMMI\AppData\Local\Temp\uttF072.tmp.bat [95]
[MD5.E03F2F24BCA457A35E1E26732AFE4A2F] [SPRF][27/12/2012] (...) -- C:\Users\KAMMI\AppData\Local\Temp\vlc-2.0.4-win32.exe [22912657]
[MD5.A5C727F8167337FF01DB92DF955A7DB7] [SPRF][03/11/2012] (.Pas de propri�taire - VLC Streamer Setup.) -- C:\Users\KAMMI\AppData\Local\Temp\VLCStreamerSetup.exe [13827216]
[MD5.AE7E0C99C5BC7D28325C0CD7885C851F] [SPRF][24/10/2012] (.Yontoo LLC - Installer.) -- C:\Users\KAMMI\AppData\Local\Temp\YontooSetup-S.exe [1062504] =>Adware.Yontoo
[MD5.4EF33D516F31BEB1C9847D1FDA69375C] [SPRF][28/06/2013] (...) -- C:\Users\KAMMI\Desktop\adwcleaner (1).exe [648201]
[MD5.8DA0E4AE18FD52D605FE34A6C8B4B3EB] [SPRF][21/04/2013] (.BitTorrent Inc. - BitTorrent.) -- C:\Users\KAMMI\Desktop\BitTorrent-7.2.1.exe [882520] =>P2P.BitTorrent
[MD5.6D98AE75744AC198812D951A3C9752BB] [SPRF][14/01/2012] (.Pas de propri�taire - iREB.) -- C:\Users\KAMMI\Desktop\iREB-r5.exe [1040384]
[MD5.25C43187449DD04A4B3D8625F035E641] [SPRF][06/06/2012] (.www.froggie.sk - Language Pack Installer for Vista and Windows 7.) -- C:\Users\KAMMI\Desktop\Vistalizator.exe [1102359]
[MD5.7C77F4D522A2A49998962EBD33A71FFF] [SPRF][06/06/2012] (.Microsoft Corporation - Language Pack Installer.) -- C:\Users\KAMMI\Desktop\windows6.1-kb2483139-x64-fr-fr_0f18e2a244dd9ff04664112a82776d2bd2177798.exe [108719912]
[MD5.DCC1E20CF74423F979CA9B38B2C67325] [SPRF][24/10/2011] (.Pas de propri�taire - Yahoo Multi Messenger 2012.) -- C:\Users\KAMMI\Desktop\ymm2012.exe [401408]
[MD5.9917D3355292D860CA3FE997D1A0DC93] [SPRF][30/06/2013] (.Nicolas Coolman - ZHPDiag.) -- C:\Users\KAMMI\Desktop\ZHPDiag2(1).exe [5691768]
~ Files: Scanned in 00mn 13s



---\\ Firewall Active Exception List (FirewallRules) (O87)
O87 - FAEL: "{CF030A30-E9BC-4B15-9F24-BCE775BF3E2F}" |In - Private - P6 - TRUE | .(...) -- C:\Program Files (x86)\SpottyFiles\Downloader.exe (.not file.)
O87 - FAEL: "{B86EC16F-76E1-4BA4-A0E7-EE7A08075DBC}" |In - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\SpottyFiles\Downloader.exe (.not file.)
O87 - FAEL: "{421E2D22-B97F-4724-85C1-A4DC5F18464E}" |In - Private - P6 - TRUE | .(...) -- C:\Program Files (x86)\SpottyFiles\SpottyFiles.exe (.not file.)
O87 - FAEL: "{9492C829-F761-4516-918C-4FACE8EE51B2}" |In - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\SpottyFiles\SpottyFiles.exe (.not file.)
O87 - FAEL: "{B994D532-910A-45DB-9CBC-6C66402B70FA}" |In - Private - P6 - TRUE | .(...) -- C:\Program Files (x86)\Searchqu Toolbar\Datamngr\ToolBar\dtUser.exe (.not file.) =>PUP.Datamngr
O87 - FAEL: "{E0ED8CA4-3A4E-4FB3-B3D4-9272AFA24DD0}" |In - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\Searchqu Toolbar\Datamngr\ToolBar\dtUser.exe (.not file.) =>PUP.Datamngr
O87 - FAEL: "{6FE71836-D108-483B-8F7F-0229CD5C9BA8}" | In - Private - P6 - TRUE | .(.Visicom Media Inc. - DtUser.) -- C:\Program Files (x86)\zgametb\dtUser.exe
O87 - FAEL: "{DD113C24-FE0E-4EB9-9A3A-69788A457527}" | In - Private - P17 - TRUE | .(.Visicom Media Inc. - DtUser.) -- C:\Program Files (x86)\zgametb\dtUser.exe
~ Firewall: 283 Legitimates Filtered in 00mn 03s



---\\ Scan Additionnel (O88)
Database Version : v2.12613 - (28/06/2013)
Cl�s trouv�es (Keys found) : 3
Valeurs trouv�es (Values found) : 0
Dossiers trouv�s (Folders found) : 0
Fichiers trouv�s (Files found) : 2

[HKLM\Software\Wow6432Node\Microsoft\Tracing\BingBar_RASMANCS] =>Toolbar.Bing
[HKLM\Software\Wow6432Node\Microsoft\Tracing\BingBar_RASAPI32] =>Toolbar.Bing
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Yahoo! Companion] =>Toolbar.Yahoo
C:\Users\KAMMI\AppData\Local\Temp\YontooSetup-S.exe =>Adware.Yontoo
~ Additionnel Scan: 499920 Items scanned in 00mn 36s



---\\ Product Upgrade Codes (O90)
O90 - PUC: "5AD43A29097D88847819254E44B15189" . (.Seowon_WiMaxCM_SW_017AN_64bit.) -- C:\Windows\Installer\{92A34DA5-D790-4888-8791-52E4441B1598}\ARPPRODUCTICON.exe
O90 - PUC: "C1A9F087EFB61964389A90D558E90325" . (.VZAccess Manager.) -- C:\Windows\Installer\{780F9A1C-6BFE-4691-83A9-095D859E3052}\ARPPRODUCTICON.exe
~ Update Products: 503 Legitimates Filtered in 00mn 00s



---\\ Etat g�n�ral des services non Microsoft (EGS) (SR=Running, SS=Stopped)
SS - | Demand 18/03/2010 113152 | (ACDaemon) . (.ArcSoft Inc..) - C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
SR - | Auto 30/09/2010 169408 | (AdobeActiveFileMonitor9.0) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe
SS - | Demand 11/06/2013 256904 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
SR - | Auto 12/08/2011 203776 | (AMD External Events Utility) . (.AMD.) - C:\Windows\System32\atiesrxx.exe
SR - | Auto 11/08/2012 55184 | (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
SR - | Auto 05/07/2011 138400 | (Atheros Bt&Wlan Coex Agent) . (.Atheros.) - C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
SR - | Auto 05/07/2011 98976 | (AtherosSvc) . (.Atheros Commnucations.) - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
SR - | Auto 19/06/2012 308136 | (avg9wd) . (.AVG Technologies CZ, s.r.o..) - C:\Program Files (x86)\AVG\AVG9\avgwdsvc.exe
SR - | Demand 18/01/2013 577536 | (Blackberry Device Manager) . (.Research In Motion Limited.) - C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\BbDevMgr.exe
SR - | Auto 30/08/2011 462184 | (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe
SS - | Auto 246112 | (Camtel EVDO-Huawei. RunOuc) . (...) - C:\Program Files (x86)\Camtel EVDO-Huawei\UpdateDog\ouc.exe
SR - | Auto 269312 | (CDROM_Detect) . (...) - C:\Program Files\CDMA-1XDO\C+WEject.exe
SS - | Demand 01/03/2011 130976 | (Futuremark SystemInfo Service) . (.Futuremark Corporation.) - C:\Program Files (x86)\Futuremark\Futuremark SystemInfo\FMSISvc.exe
SR - | Auto ??\??\???? 0 | (GCTWiMAXService) . (.Seowonintech CO.Ltd.) - C:\Windows\system32\GCTWiMaxServiceD.exe
SR - | Auto 346976 | (HWDeviceService64.exe) . (...) - C:\ProgramData\DatacardService\HWDeviceService64.exe
SR - | Auto 29/04/2011 13592 | (IAStorDataMgrSvc) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
SS - | Demand 12/12/2012 641504 | (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe
SR - | Auto 24/06/2011 326424 | (LMS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
SR - | Auto 18/04/2011 223544 | (MOBK649backup) . (.McAfee, Inc..) - C:\Program Files (x86)\McAfee Online Backup\MOBK649backup.exe
SS - | Demand 07/06/2013 117144 | (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
SR - | Auto 9172 | (MySQL55) . (...) - C:\ProgramData\MySQL\MySQL Server 5.5\my.ini
SR - | Auto 25/03/2010 490280 | (NAUpdate) . (.Nero AG.) - C:\Program Files (x86)\Nero\Update\NASvc.exe
SR - | Auto 14/07/2009 27136 | C:\Windows\system32\HPZinw12.dll (Net Driver HPZ12) . (.Hewlett-Packard.) - C:\Windows\System32\svchost.exe
SS - | Disabled 0 | (NMIndexingService) . (...) - C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe
SR - | Auto 14/06/2010 270848 | (NWVZHelper) . (.Novatel Wireless Inc..) - C:\Program Files (x86)\Novatel Wireless\Verizon\Drivers\NWHelper_001.exe
SR - | Auto 15/03/2011 428384 | (PMBDeviceInfoProvider) . (.Sony Corporation.) - C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe
SR - | Auto 14/07/2009 27136 | C:\Windows\system32\HPZipm12.dll (Pml Driver HPZ12) . (.Hewlett-Packard.) - C:\Windows\System32\svchost.exe
SR - | Auto 30/11/2011 260768 | (SampleCollector) . (.Sony Corporation.) - C:\Program Files\Sony\VAIO Care\VCPerfService.exe
SR - | Auto 25/09/2012 5120 | (ServeToMe-Service) . (.ProjectsWithLove.) - C:\Program Files (x86)\ProjectsWithLove\ServeToMe\ServeToMe-Service.exe
SS - | Auto 28/02/2013 161384 | (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe
SR - | Auto 21/02/2011 113824 | (SOHCImp) . (.Sony Corporation.) - C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe
SR - | Demand 21/02/2011 67232 | (SOHDs) . (.Sony Corporation.) - C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe
SR - | Demand 20/01/2011 286936 | (SpfService) . (.Sony Corporation.) - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService64.exe
SS - | Demand 19/02/2010 517096 | (SwitchBoard) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
SR - | Auto 19/01/2012 3027840 | (TeamViewer7) . (.TeamViewer GmbH.) - C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe
SR - | Auto 23/02/2011 105024 | (uCamMonitor) . (.ArcSoft, Inc..) - C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe
SR - | Auto 400896 | (UDisk Monitor) . (...) - C:\Program Files\ZTE Wireless Terminal\bin\MonServiceUDisk.exe
SR - | Auto 24/06/2011 2656536 | (UNS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
SR - | Auto 07/07/2011 66696 | (VAIO Event Service) . (.Sony Corporation.) - C:\Program Files (x86)\Sony\VAIO Control Center\VESMgr.exe
SR - | Auto 31/05/2011 552584 | (VAIO Power Management) . (.Sony Corporation.) - C:\Program Files\Sony\VAIO Power Management\SPMService.exe
SR - | Auto 20/01/2011 887000 | (VCFw) . (.Sony Corporation.) - C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe
SR - | Auto 19/05/2011 549616 | (VcmIAlzMgr) . (.Sony Corporation.) - C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe
SR - | Auto 18/02/2011 385336 | (VcmINSMgr) . (.Sony Corporation.) - C:\Program Files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe
SS - | Demand 18/02/2011 99104 | (VcmXmlIfHelper) . (.Sony Corporation.) - C:\Program Files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper64.exe
SR - | Demand 20/01/2012 54432 | (VCService) . (.Sony Corporation.) - C:\Program Files\Sony\VAIO Care\VCService.exe
SR - | Auto 10/02/2013 12288 | (Virtual Router) . (.Chris Pietschmann (http://pietschsoft.com).) - C:\Program Files (x86)\Virtual Router\VirtualRouterService.exe
SR - | Auto 15/07/2011 969352 | (VSNService) . (.Sony Corporation.) - C:\Program Files\Sony\VAIO Smart Network\VSNService.exe
SR - | Demand 13/01/2012 1256040 | (VUAgent) . (.Sony Corporation.) - C:\Program Files\Sony\VAIO Update Common\VUAgent.exe
SR - | Auto 09/01/2007 20539 | (wampapache) . (.Apache Software Foundation.) - c:\wamp\apache2\bin\httpd.exe
SS - | Auto 4493312 | (wampmysqld) . (...) - c:\wamp\mysql\bin\mysqld-nt.exe
SS - | Demand 14/07/2009 27136 | C:\Program Files (x86)\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
SR - | Auto 0 | (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe
SR - | Auto 14/07/2009 27136 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
SR - | Auto 09/11/2008 602392 | (YahooAUService) . (.Yahoo! Inc..) - C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe
~ Services: Scanned in 00mn 04s



---\\ Malicius Software Information
~ http://nicolascoolman.webs.com/apps/blog/show/26811836-adware-yontoo =>Adware.Yontoo
~ MSI: Scanned in 00mn 04s



~ 2127 Legitimates filtered by white list
End of the scan (718 lines in 20mn 54s)(0)