Publicité
Publicité
Format du document : text/plain
Prévisualisation
~ Rapport de ZHPDiag v2014.8.13.118 - Nicolas Coolman (13/08/2014)
~ Lancé par user (17/08/2014 11:12:39)
~ Adresse du Site Web http://nicolascoolman.fr
~ Adresse du Forum http://forum.nicolascoolman.fr
~ Traduit par Nicolas Coolman
~ Etat de la version : Nouvelle version disponible
~ Liste blanche : Activée par le programme
~ Elévation des Privilèges : OK
~ User Account Control (UAC): Activate by user
---\\ Navigateurs Internet
MSIE: Internet Explorer v11.0.9600.17239
MFIE: Mozilla Firefox 31.0 (Defaut)
---\\ Informations sur les produits Windows
~ Langage: Français
Windows 7 Home Premium, 64-bit Service Pack 1 (Build 7601)
Windows Server License Manager Script : OK
~ Windows Operating System - Windows(R) 7, OEM_COA_SLP channel
Windows ID Activation : OK
~ Windows Partial Key : HQ6FX
Windows License : OK
~ Windows Remaining Initializations Number : 3
Software Protection Service (Protection logicielle) : OK
Windows Automatic Updates : OK
Windows Activation Technologies : OK
---\\ Logiciels de protection du système
Kaspersky Anti-Virus 2013 v13.0.1.4190
Malwarebytes Anti-Malware version 2.0.2.1012
Windows Defender W7 (Activate)
---\\ Logiciels d'optimisation du système
---\\ Logiciels de partage PeerToPeer
---\\ Surveillance de Logiciels
Adobe Flash Player 14 Plugin
Adobe Reader XI
Java 7 Update 67
Java 7 Update 67
---\\ Informations sur le système
~ Processor: Intel64 Family 6 Model 37 Stepping 2, GenuineIntel
~ Operating System: 64 Bits
Boot mode: Normal (Normal boot)
Total RAM: 4022 MB (50% free)
System Restore: Activé (Enable)
System drive C: has 298 GB (42%) free of 697 GB
---\\ Mode de connexion au système
~ Computer Name: USER-PC
~ User Name: user
~ All Users Names: user, HomeGroupUser$, Administrateur,
~ Unselected Option: None
Logged in as Administrator
---\\ Variables d'environnement
~ System Unit : C:\
~ %AppZHP% : C:\Users\user\AppData\Roaming\ZHP\
~ %AppData% : C:\Users\user\AppData\Roaming\
~ %Desktop% : C:\Users\user\Desktop\
~ %Favorites% : C:\Users\user\Favorites\
~ %LocalAppData% : C:\Users\user\AppData\Local\
~ %StartMenu% : C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\
---\\ Enumération des unités disques
C: Hard drive, Flash drive, Thumb drive (Free 298 Go of 697 Go)
D: CD-ROM drive (Not Inserted)
E: Hard drive, Flash drive, Thumb drive (Free 2 Go of 2 Go)
F: CD-ROM drive (Not Inserted)
G: CD-ROM drive (Not Inserted)
H: CD-ROM drive (Not Inserted)
I: CD-ROM drive (Not Inserted)
Q: Hard drive, Flash drive, Thumb drive (Free 0 Go of 0 Go)
---\\ Etat du Centre de Sécurité Windows
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
~ Security Center: 49 Legitimates Filtered in 00mn 00s
---\\ Recherche particulière de fichiers génériques
[MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorateur Windows.) (.25/02/2011 - 07:19:30.) -- C:\Windows\Explorer.exe [2871808]
[MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 - 02:39:52.) -- C:\Windows\System32\Wininit.exe [129024]
[MD5.8E71A5CB5312B8392D4DA4CA37BB5868] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.25/07/2014 - 11:52:06.) -- C:\Windows\System32\wininet.dll [2266624]
[MD5.88AB9B72B4BF3963A0DE0820B4B0B06C] - (.Microsoft Corporation - Application d’ouverture de session Windows.) (.04/03/2014 - 10:43:50.) -- C:\Windows\System32\Winlogon.exe [455168]
[MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Bibliothèque de licences.) (.21/11/2010 - 04:24:16.) -- C:\Windows\System32\sppcomapi.dll [232448]
[MD5.FA886682CFC5D36718D3E436AACF10B9] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.30/05/2014 - 07:45:52.) -- C:\Windows\system32\Drivers\AFD.sys [497152]
[MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 - 02:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128]
[MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/07/2009 - 00:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160]
[MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.21/11/2010 - 04:23:47.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456]
[MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.21/11/2010 - 04:24:32.) -- C:\Windows\system32\Drivers\DfsC.sys [102400]
[MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.21/11/2010 - 04:23:47.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368]
[MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) (.14/07/2009 - 00:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472]
[MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.14/07/2009 - 01:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224]
[MD5.A5D9106A73DC88564C825D317CAC68AC] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.27/04/2011 - 03:40:40.) -- C:\Windows\system32\Drivers\MRxSmb.sys [158208]
[MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) (.21/11/2010 - 04:23:51.) -- C:\Windows\system32\Drivers\netBT.sys [261632]
[MD5.1A29A59A4C5BA6F8C85062A613B7E2B2] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.24/01/2014 - 03:37:55.) -- C:\Windows\system32\Drivers\ntfs.sys [1684928]
[MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/07/2009 - 01:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280]
[MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.21/11/2010 - 04:24:33.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [129536]
[MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.14/07/2009 - 01:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184]
[MD5.DDAD5A7AB24D8B65F8D724F5C20FD806] - (.Microsoft Corporation - TDI Translation Driver.) (.21/11/2010 - 04:24:32.) -- C:\Windows\system32\Drivers\tdx.sys [119296]
[MD5.0D08D2F3B3FF84E433346669B5E0F639] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.21/11/2010 - 04:23:47.) -- C:\Windows\system32\Drivers\volsnap.sys [295808]
~ Generic Processes: Scanned in 00mn 00s
---\\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 1/9
~ Mes musiques (My Musics) : 1/564
~ Mes Favoris (My Favorites) : 1/53
~ Mes Documents (My Documents) : 1/6489
~ Mon Bureau (My Desktop) : 1/7677
~ Menu demarrer (Programs) : 1/29
~ Hidden Files: Scanned in 00mn 01s
---\\ Processus lancés
[MD5.15D2DB9BFA8E833ED31FAB2BB088FDDA] - (.Kaspersky Lab ZAO - Kaspersky Anti-Virus.) -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\avp.exe [356128] [PID.2080]
[MD5.C56AEF21A76A6E2BB36A384B2C96389F] - (.NVIDIA Corporation - NVIDIA GeForce Experience Backend.) -- C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2403104] [PID.2720]
[MD5.B7F55E2AE978D3D34F7876EE5D689AAE] - (.CyberLink - YouCam Mirage.) -- C:\Program Files (x86)\Hewlett-Packard\Media\Webcam\YCMMirage.exe [136488] [PID.2932]
[MD5.4FBC630768570E6AC35C3DE8F6EC79F5] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe [6970168] [PID.2648]
[MD5.10F36FB8CD6218CD7F818268E0F3F9C6] - (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe [275568] [PID.2112]
[MD5.02F8883595A2B3D7FFA11C71EAC68473] - (.Mozilla Corporation - Plugin Container for Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe [18544] [PID.2952]
[MD5.192FFD3F99A0847740670AE711CB455A] - (.Adobe Systems, Inc. - Adobe Flash Player 14.0 r0.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_14_0_0_145.exe [1869488] [PID.4328]
[MD5.DC2E338E63159454B71659D82515A04E] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [8091648] [PID.2924]
[MD5.B362181ED3771DC03B4141927C80F801] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [65432] [PID.1524]
[MD5.6B73E94F9FE82D45781B8C8A09483082] - (.Apple Inc. - YSLoader.exe.) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [43336] [PID.640]
[MD5.2973B4EB7BE10A0D491B2037DCAAE88F] - (.Garmin Ltd or its subsidiaries - Garmin Core Update Service.) -- C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [185688] [PID.2192]
[MD5.7FF1EE51F34F43D29C8E0633E966192E] - (.Hewlett-Packard Company - SolutionsFrameworkService.) -- C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe [72992] [PID.2768]
[MD5.C5E4602D85029C666A42890A3B2DFA45] - (.Pas de propriétaire - Inkjet Printer/Scanner/Fax Extended Survey.) -- C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.exe [140936] [PID.2852]
[MD5.D84AEA3F3329D622DFC1297DDDF6163B] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720] [PID.2964]
[MD5.4F45ED469906494F9BF754E476390DBD] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [860472] [PID.1224]
[MD5.D6310F79E51D1F997E964E81DD368AEA] - (.NVIDIA Corporation - NVIDIA Network Service.) -- C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1720608] [PID.2484]
[MD5.39B1D0A636A400304565D4521FAD6D77] - (.Microsoft Corporation - Microsoft Application Virtualization Virtua.) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [207528] [PID.3416]
[MD5.77C5A741A7452812F278EF2C18478862] - (.Microsoft Corporation - Microsoft Application Virtualization Client.) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe [523944] [PID.3460]
[MD5.FD557A50A65E44041CD2FCEF4BEB04DB] - (.Microsoft Corporation - Microsoft Office Client Virtualization Serv.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.exe [822504] [PID.3740]
[MD5.6241810294275CEA59EBA9733080E5EE] - (.Intel Corporation - IAStorDataSvc.) -- C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720] [PID.1392]
~ Processes Running: Scanned in 00mn 00s
---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Preferences
---\\ Liste des dossiers d'extension Google Chrome
~ Google Lines Browser: 0 Legitimates Filtered in 00mn 00s
---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
P2 - FPN:Firefox Plugin Navigator . (.LizardTech - DjVu Plug-In(external version 6.1.4.2013).) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\npdjvu.dll
~ Firefox Browser: 9 Legitimates Filtered in 00mn 00s
---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Proxy management: Scanned in 00mn 00s
---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
~ Keys: Scanned in 00mn 00s
---\\ Hosts file redirection (O1)
O1 - Hosts: hostsO1 - Hosts: hostsO1 - Hosts: hostsO1 - Hosts: hosts~ Nombre lignes détournées 4/71604 (Hosts file redirected)
~ Hosts File: Scanned in 02mn 15s
---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar: Canon Easy-WebPrint EX - [HKLM]{759D9886-0C6F-4498-BAB6-4A5F47C6C72F} . (.CANON INC. - Easy-WebPrint EX.) -- C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexhlp.dll
~ Toolbar: Scanned in 00mn 00s
---\\ Applications lancées au démarrage du système (O4)
O4 - HKLM\..\Wow6432Node\Run: [AVP] . (.Kaspersky Lab ZAO - Kaspersky Anti-Virus.) -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\avp.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation
~ Application: Scanned in 00mn 00s
---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: Clavier virtuel [64Bits] - {0C4CC089-D306-440D-9772-464E226F6539} -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\kbrd.ico (.not file.)
~ IE Extra Buttons: Scanned in 00mn 00s
---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{D97C96FC-0AD5-4CF8-A4C1-214C12793937}: DhcpNameServer = 89.2.0.1 89.2.0.2
O17 - HKLM\System\CS1\Services\Tcpip\..\{D97C96FC-0AD5-4CF8-A4C1-214C12793937}: DhcpNameServer = 89.2.0.1 89.2.0.2
O17 - HKLM\System\CS2\Services\Tcpip\..\{D97C96FC-0AD5-4CF8-A4C1-214C12793937}: DhcpNameServer = 89.2.0.1 89.2.0.2
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 89.2.0.1 89.2.0.2
~ Domain: Scanned in 00mn 00s
---\\ Protocole additionnel (O18)
O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation
O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation
~ Protocole Additionnel: Scanned in 00mn 00s
---\\ Tâches planifiées en automatique (O39)
[MD5.00000000000000000000000000000000] [APT] [4628] (...) -- C:\users\user\AppData\Local\Temp\launchie.vbs \\B (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{01395FE3-1A59-4933-8CA4-259606BD0AF0}] (...) -- C:\users\user\Desktop\TV Tuner_AverMedia_v1.0.64.40_Vistax64\A309_VistaLogo_Drv_V1.0.x.40_Direct_Install.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{01AD77BE-7337-44C4-BFB2-1168E2B49C48}] (...) -- C:\users\user\Desktop\Nouveau dossier\Les Chevaliers Baphomet 3 - Le Manuscrit de Voynich\Crack\bs3pc.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{063DD56C-607F-4D88-800B-F5C07EA1369A}] (...) -- C:\users\user\Desktop\Sims3Setup.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{0642CB58-E110-405C-9C7F-C685583EE438}] (...) -- C:\Program Files (x86)\Origin Games\The Sims 4 Create A Sim Demo\Game\Bin\TS4CAS.exe (.not file.) [0]
[MD5.2D81626783A4C50A737491FFDA18DC0D] [APT] [{064602D5-DB4B-4F57-A339-7D5286AEEB1E}] (.Related Designs.) -- C:\users\user\Desktop\ANNO 2070 (2)\Anno.2070.Update.v1.05-RELOADED\Crack\Anno5.exe [51797504]
[MD5.00000000000000000000000000000000] [APT] [{0690EFD3-7629-442A-BD91-A34425FCA0D7}] (...) -- C:\users\user\Desktop\Nouveau dossier\Les Chevaliers Baphomet 3 - Le Manuscrit de Voynich\Crack\bs3pc.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{09866A9E-2859-4023-9409-4F41A4C96572}] (...) -- C:\users\user\Desktop\Nouveau dossier\Les Chevaliers Baphomet 3 - Le Manuscrit de Voynich\Crack\bs3pc.exe (.not file.) [0]
[MD5.2D81626783A4C50A737491FFDA18DC0D] [APT] [{17757E26-7668-481F-B325-A59775C56450}] (.Related Designs.) -- C:\users\user\Desktop\ANNO 2070 (2)\Anno.2070.Update.v1.05-RELOADED\Crack\Anno5.exe [51797504]
[MD5.00000000000000000000000000000000] [APT] [{1B98C542-7159-4E55-8850-7B8ECA5D6409}] (...) -- D:\Autopatcher.exe (.not file.) [0]
[MD5.FF558E4D2093CD517BC6DDFC64D8969A] [APT] [{1BDB5234-8CC2-4A2D-A26A-EAA1C7D8B524}] (.Related Designs.) -- C:\users\user\Desktop\ANNO 2070 (2)\Anno.2070.Deep.Ocean.Crack.Only-RELOADED\Crack\anno5.exe [53209600]
[MD5.00000000000000000000000000000000] [APT] [{1FDB3A29-B3B8-4C69-BB81-A85D1A1A4D49}] (...) -- C:\users\user\Desktop\Nouveau dossier\Les Chevaliers Baphomet 3 - Le Manuscrit de Voynich\Crack\bs3pc.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{1FE38715-2657-42BD-B7F7-698EEA171FDA}] (...) -- C:\users\user\Desktop\wmp11-windowsxp-x64-enu(1).exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{2276831C-070A-4001-A746-0CB8DFCA7BFA}] (...) -- D:\BS4Launcher.exe (.not file.) [0]
[MD5.B28CD6E930E549629A7C303022311651] [APT] [{22C896F9-8952-4F84-9AB4-EAF321A98DB9}] (...) -- C:\Program Files\THQ\Revolution Software Ltd\Broken Sword The Angel of Death\bs4pc.exe [7630848]
[MD5.6AF832996C93DE62D23B28D28EBE941C] [APT] [{23197935-457F-413D-8E5F-8D3E48AF14C8}] (...) -- C:\Program Files (x86)\THQ\Les Chevaliers de Baphomet - Le Manuscrit de Voynich\bs3pc.exe [3107593]
[MD5.00000000000000000000000000000000] [APT] [{23CDF55C-A1EF-4278-BD85-980E4D244394}] (...) -- C:\users\user\Desktop\mp10setup.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{24BC1346-F803-4C5F-BAB1-313B85EDA268}] (...) -- C:\Program Files (x86)\Origin Games\The Sims 3 Ambitions\ISSetupHelper.exe (.not file.) [0]
[MD5.B28CD6E930E549629A7C303022311651] [APT] [{273F6A23-01AE-43D1-970F-20DCA020123F}] (...) -- C:\Program Files\THQ\Revolution Software Ltd\Broken Sword The Angel of Death\bs4pc.exe [7630848]
[MD5.00000000000000000000000000000000] [APT] [{278D0D8B-0A2D-40AA-B380-F3F93361DBB7}] (...) -- D:\Autorun.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{280BCF75-76D9-4FD3-BD0F-3765A47E7EA3}] (...) -- C:\users\user\Desktop\setup_11.0.1.1245.x01_2013_12_16_13_35.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{2EDEEE88-DC1A-4B52-9629-FD323AA61524}] (...) -- F:\Crack\bs4pc.exe (.not file.) [0]
[MD5.6AF832996C93DE62D23B28D28EBE941C] [APT] [{2FB88CEE-04BD-404D-B3E3-125713B7FDE5}] (...) -- C:\Program Files (x86)\THQ\Les Chevaliers de Baphomet - Le Manuscrit de Voynich\bs3pc.exe [3107593]
[MD5.00000000000000000000000000000000] [APT] [{31F76BFB-FCAD-440B-85FE-D959D9A57B56}] (...) -- D:\Patch\Pharaoh.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{366AFB63-4C12-4F38-ACE6-FF5653EE0F73}] (...) -- D:\Autorun.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{36B4AE98-395A-4F50-9014-95FA3E01BC16}] (...) -- D:\Autorun.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{384E7DBC-DAE4-41A1-BC21-6A654ECCF5A9}] (...) -- D:\Autorun.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{395D3767-83EF-410C-8B19-E42ED7D020F5}] (...) -- C:\users\user\Desktop\Nouveau dossier\Les Chevaliers Baphomet 3 - Le Manuscrit de Voynich\Crack\bs3pc.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{3982407E-4D8B-4BE2-8516-5B40D252F5E5}] (...) -- C:\users\user\Downloads\installer_media_player_French.exe (.not file.) [0]
[MD5.B28CD6E930E549629A7C303022311651] [APT] [{3A0954DD-64A5-40E7-B0DC-200A9384A076}] (...) -- C:\Program Files\THQ\Revolution Software Ltd\Broken Sword The Angel of Death\bs4pc.exe [7630848]
[MD5.00000000000000000000000000000000] [APT] [{3AEDE24B-D0C1-4A7D-9E14-73F0A85CC22B}] (...) -- D:\Autorun.exe (.not file.) [0]
[MD5.B28CD6E930E549629A7C303022311651] [APT] [{3AF678F7-2B80-4F52-9928-424304E39B5B}] (...) -- C:\Program Files\THQ\Revolution Software Ltd\Broken Sword The Angel of Death\bs4pc.exe [7630848]
[MD5.00000000000000000000000000000000] [APT] [{3D2410C6-DC80-47AE-B31F-55D4875AB891}] (...) -- D:\Autorun.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{3F292311-83EF-4C0C-BD66-1D88DAE807D0}] (...) -- C:\users\user\Desktop\ISO\bapho\baphomet l'ombre\SETUP.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{3FD534EA-4ECB-4ED1-A144-1FC09C8506CD}] (...) -- C:\users\user\Desktop\BAPHOMET\BAPHOMET 4\setup.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{3FDD5137-D5D9-43DB-A533-95975261F273}] (...) -- C:\users\user\Desktop\sp45308.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{437FE7E7-5BD3-4EB6-9D4B-06C7319F2E5F}] (...) -- C:\users\user\Desktop\wmp11-windowsxp-x64-enu.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{458521DA-D994-4691-9361-3686F588A058}] (...) -- F:\SETUP.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{49110A7E-59AD-416D-AF48-0DF9DC2D58DC}] (...) -- D:\Autorun.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{4991D2AC-47F9-419A-B9B0-78A446017E9C}] (...) -- C:\users\user\Desktop\Nouveau dossier\Les Chevaliers Baphomet 3 - Le Manuscrit de Voynich\Crack\bs3pc.exe (.not file.) [0]
[MD5.B28CD6E930E549629A7C303022311651] [APT] [{49F72A2F-6A6F-427F-B346-B67DCFBCF354}] (...) -- C:\Program Files\THQ\Revolution Software Ltd\Broken Sword The Angel of Death\bs4pc.exe [7630848]
[MD5.2A19935AACE8797F7CA6B7F204CBFA0C] [APT] [{4C87ABA1-C17C-452F-A097-A74A2A8659C6}] (...) -- C:\users\user\Desktop\Nouveau dossier (3)\Setup.exe [107792]
[MD5.00000000000000000000000000000000] [APT] [{4C898E37-2D60-4E1B-831A-E14DFECE46D2}] (...) -- C:\users\user\Desktop\kav14.0.0.4651fr-fr(1).exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{4EE514C0-00FB-41D0-B02B-C3A59F4D760C}] (...) -- C:\users\user\Desktop\ISO\bapho\baphomet l'ombre\SETUP.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{54D80265-2F22-4942-9C58-11C2257D7806}] (...) -- C:\users\user\Downloads\installer_media_player_French.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{550657C3-DB09-465D-A8AC-5CE031BA3E8B}] (...) -- C:\users\user\Desktop\mp10setup.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{55716FF1-5EB7-4730-8165-6EE712E9F8E5}] (...) -- C:\users\user\Desktop\SIMS AVENTURES\DA_v247_JeuxVideo.com_14518.exe (.not file.) [0]
[MD5.B28CD6E930E549629A7C303022311651] [APT] [{56ADEC5C-B329-4095-8EE7-96A9048F5FD0}] (...) -- C:\Program Files\THQ\Revolution Software Ltd\Broken Sword The Angel of Death\bs4pc.exe [7630848]
[MD5.00000000000000000000000000000000] [APT] [{5A35C16F-8AE2-4D6A-9CEF-368DCA6A39B1}] (...) -- C:\users\user\Downloads\wmp11-windowsxp-x86-FR-FR.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{5B3003DC-FAB2-4566-B4DA-116822245B59}] (...) -- D:\Autorun.exe (.not file.) [0]
[MD5.F5BB6D8FEE48AE4194D10683771123A8] [APT] [{5B3887AF-87DA-48D4-BFE5-0721583188EE}] (...) -- C:\GOG Games\Broken Sword 5 - the Serpents Curse - Episode 1\BS5.exe [2843150]
[MD5.00000000000000000000000000000000] [APT] [{5D1BAAB3-F200-47CB-B9E9-E5B98EA85D6D}] (...) -- F:\Crack\bs4pc.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{5E034F67-D7C9-4E2F-86D3-3090DB6657A2}] (...) -- F:\Crack\bs4pc.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{5EA4A252-3052-4B8F-865C-FF9BE44E7F13}] (...) -- C:\users\user\Desktop\Nouveau dossier\Les Chevaliers Baphomet 3 - Le Manuscrit de Voynich\Crack\bs3pc.exe (.not file.) [0]
[MD5.FF558E4D2093CD517BC6DDFC64D8969A] [APT] [{603D350A-CFC3-49C0-B68C-79EA36C9E7B1}] (.Related Designs.) -- C:\users\user\Desktop\Crack\anno5.exe [53209600]
[MD5.FF558E4D2093CD517BC6DDFC64D8969A] [APT] [{61103E08-199A-49E1-BFCE-A4371D42A198}] (.Related Designs.) -- C:\users\user\Desktop\ANNO 2070 (2)\Anno.2070.Deep.Ocean.Crack.Only-RELOADED\Crack\anno5.exe [53209600]
[MD5.00000000000000000000000000000000] [APT] [{617C7C57-6E38-463B-B6E4-88F7FDF7A4F1}] (...) -- C:\users\user\Desktop\wmp11-windowsxp-x86-FR-FR.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{633F61AB-1DE2-40EC-923C-8192A8764F07}] (...) -- D:\BS4Launcher.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{654193B8-C9E6-4398-B20E-E07E3FA8F0E4}] (...) -- D:\Autorun.exe (.not file.) [0]
[MD5.FF558E4D2093CD517BC6DDFC64D8969A] [APT] [{676E5B59-07D9-4CA1-80D0-D71F8BBDABA0}] (.Related Designs.) -- C:\users\user\Desktop\ANNO 2070 (2)\Anno.2070.Deep.Ocean.Crack.Only-RELOADED\Crack\anno5.exe [53209600]
[MD5.00000000000000000000000000000000] [APT] [{67A97A40-3B97-45C9-9A1C-F02E9A9D88A7}] (...) -- C:\users\user\Downloads\wmp11-windowsxp-x64-enu.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{68021F22-6EF2-45A9-9F03-C5F44F10A406}] (...) -- F:\setup.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{6ABC7ED2-A6E8-450C-88D7-B362EAC24C0B}] (...) -- C:\users\user\Desktop\sp45308(1).exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{6AD76FAF-18D8-42AF-B39C-F774031E50D2}] (...) -- C:\users\user\Desktop\SCUMM\BAPHOMET 1\CLUSTERS\BrokenSword2.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{6BB1071B-9C63-44E1-8ADD-04756BF9EA1D}] (...) -- D:\Autorun.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{6C1A83DD-9C5F-4D5A-8258-693DE4F59336}] (...) -- C:\Program Files (x86)\InstallShield Installation Information\{3DE92282-CB49-434F-81BF-94E5B380E889}\Sims3EP08Setup.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{708F6A64-705A-4AFA-9563-316C15CC3C14}] (...) -- G:\SimsMedievalEP01Setup.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{70BA64EE-CA02-45FF-B7A4-D5AC5008349A}] (...) -- D:\Autorun.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{70D1B07E-150E-44A9-AF38-23C2D7FCAD5A}] (...) -- D:\Autorun.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{71220B54-2BB3-4285-8E40-8E4837A533C4}] (...) -- C:\users\user\Desktop\Nouveau dossier\Les Chevaliers Baphomet 3 - Le Manuscrit de Voynich\Crack\bs3pc.exe (.not file.) [0]
[MD5.B28CD6E930E549629A7C303022311651] [APT] [{7176AE84-DA98-48F7-93BD-3F513BE9A2C5}] (...) -- C:\Program Files\THQ\Revolution Software Ltd\Broken Sword The Angel of Death\bs4pc.exe [7630848]
[MD5.00000000000000000000000000000000] [APT] [{71EFE23C-798A-41B3-A9E2-1740B3C79B84}] (...) -- D:\Autorun.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{751026F2-FD94-433D-A81B-FB85028C4ABF}] (...) -- C:\users\user\Desktop\sp45308.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{7AD524F2-F2FC-4F5F-9833-7A2FA9881B6B}] (...) -- D:\autorun.exe (.not file.) [0]
[MD5.6AF832996C93DE62D23B28D28EBE941C] [APT] [{7BF1ACF1-D360-4619-A200-48D2369ADE0A}] (...) -- C:\Program Files (x86)\THQ\Les Chevaliers de Baphomet - Le Manuscrit de Voynich\bs3pc.exe [3107593]
[MD5.00000000000000000000000000000000] [APT] [{7CF72B2F-2C12-4763-9E8C-3E4779172F2E}] (...) -- C:\users\user\Desktop\ISO\bapho\baphomet l'ombre\SETUP.exe (.not file.) [0]
[MD5.2D81626783A4C50A737491FFDA18DC0D] [APT] [{7DCB5CD0-C5E0-4375-AC4A-102F0D70353E}] (.Related Designs.) -- C:\users\user\Desktop\ANNO 2070 (2)\Anno.2070.Update.v1.05-RELOADED\Crack\Anno5.exe [51797504]
[MD5.00000000000000000000000000000000] [APT] [{7FE98447-B044-442A-A20A-B8640D965593}] (...) -- C:\users\user\Desktop\sp45308.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{84F70946-2423-4C56-95F2-4C43D0FADAF6}] (...) -- D:\Autorun.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{8747DEC9-0075-4C05-BA9A-A138DAC653F2}] (...) -- C:\users\user\Desktop\wmp11-windowsxp-x86-FR-FR.exe (.not file.) [0]
[MD5.2D81626783A4C50A737491FFDA18DC0D] [APT] [{87645894-E8CE-4A05-BB56-111FCAA19E05}] (.Related Designs.) -- C:\users\user\Desktop\ANNO 2070 (2)\Anno.2070.Update.v1.05-RELOADED\Crack\Anno5.exe [51797504]
[MD5.2D81626783A4C50A737491FFDA18DC0D] [APT] [{87C1841F-FC56-4245-A62B-F1D063C1553C}] (.Related Designs.) -- C:\users\user\Desktop\ANNO 2070 (2)\Anno.2070.Update.v1.05-RELOADED\Crack\Anno5.exe [51797504]
[MD5.00000000000000000000000000000000] [APT] [{894787EC-D41F-43F0-808D-788830D195C7}] (...) -- F:\Autorun.exe (.not file.) [0]
[MD5.FF558E4D2093CD517BC6DDFC64D8969A] [APT] [{8BDB1E43-52D6-4E21-926C-A2C2D8921B72}] (.Related Designs.) -- C:\users\user\Desktop\Crack\anno5.exe [53209600]
[MD5.00000000000000000000000000000000] [APT] [{8CCBF158-BC73-4DA7-BF39-77B115CB76AD}] (...) -- C:\users\user\Downloads\wmp11-windowsxp-x64-enu.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{8D08E9B1-FC53-48CD-B538-A92DB6104EEB}] (...) -- C:\users\user\Desktop\Nouveau dossier\Les Chevaliers Baphomet 3 - Le Manuscrit de Voynich\Crack\bs3pc.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{8E3948F5-73C5-4675-A6D3-D67EF54B6285}] (...) -- C:\users\user\Desktop\SCUMM\BAPHOMET 1\CLUSTERS\BrokenSword2.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{90B2F156-91C6-4D79-AAE0-681CD3CA0ABE}] (...) -- C:\users\user\Desktop\sp46504.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{95441EAD-9552-438B-816A-ACA15685C3E6}] (...) -- C:\users\user\Desktop\kav14.0.0.4651fr-fr(1).exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{9BCDA8C6-496C-4D3C-BDCC-CF6D79ECEBDD}] (...) -- D:\autorun.exe (.not file.) [0]
[MD5.B28CD6E930E549629A7C303022311651] [APT] [{9CCB93B3-8B4B-4D32-AB1D-6C5C0FE3C077}] (...) -- C:\Program Files\THQ\Revolution Software Ltd\Broken Sword The Angel of Death\bs4pc.exe [7630848]
[MD5.B28CD6E930E549629A7C303022311651] [APT] [{9F90B23A-8A04-455C-B1ED-1C8F65700F6A}] (...) -- C:\Program Files\THQ\Revolution Software Ltd\Broken Sword The Angel of Death\bs4pc.exe [7630848]
[MD5.00000000000000000000000000000000] [APT] [{A01E6F7D-1106-4A46-B053-CADDF33B2915}] (...) -- C:\users\user\Desktop\kav14.0.0.4651fr-fr(1).exe (.not file.) [0]
[MD5.6AF832996C93DE62D23B28D28EBE941C] [APT] [{A06F063D-DCE9-4106-9EC2-394BFF43C46E}] (...) -- C:\Program Files (x86)\THQ\Les Chevaliers de Baphomet - Le Manuscrit de Voynich\bs3pc.exe [3107593]
[MD5.00000000000000000000000000000000] [APT] [{A413A927-9792-44AA-A718-16A29319C904}] (...) -- D:\support\vcredist_x64.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{A51C9612-9C93-4197-BA3E-4AD6058C953B}] (...) -- C:\users\user\Desktop\Nouveau dossier\Les Chevaliers Baphomet 3 - Le Manuscrit de Voynich\Crack\bs3pc.exe (.not file.) [0]
[MD5.2D81626783A4C50A737491FFDA18DC0D] [APT] [{A61DB97E-B6EB-4878-B14B-636B94BB6740}] (.Related Designs.) -- C:\users\user\Desktop\ANNO 2070 (2)\Anno.2070.Update.v1.05-RELOADED\Crack\Anno5.exe [51797504]
[MD5.00000000000000000000000000000000] [APT] [{A691372A-1CDD-465B-8277-CDC15B323A22}] (...) -- C:\users\user\Desktop\Sims3_1.67.2.024002_from_1.66.2.024002.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{A726DF0E-3573-4FC0-9C05-ACE6D3BA97E3}] (...) -- C:\users\user\Desktop\Nouveau dossier\Les Chevaliers Baphomet 3 - Le Manuscrit de Voynich\Crack\bs3pc.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{A9E5AF0A-52E3-4C99-9829-A8FD7E74C70D}] (...) -- D:\Autopatcher.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{AB705607-D64F-4118-847E-13F5AC0F5520}] (...) -- D:\Autopatcher.exe (.not file.) [0]
[MD5.2D81626783A4C50A737491FFDA18DC0D] [APT] [{ABD7E560-3453-45EA-A2D0-287D45511771}] (.Related Designs.) -- C:\users\user\Desktop\ANNO 2070 (2)\Anno.2070.Update.v1.05-RELOADED\Crack\Anno5.exe [51797504]
[MD5.00000000000000000000000000000000] [APT] [{AC2F52E8-4C73-4087-851E-27A0F30C392F}] (...) -- C:\Program Files (x86)\Broken Age\_CommonRedist\vcredist\2010\vcredist_x64.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{AF7D36C7-41A4-48E7-B4F5-38185FADCC4C}] (...) -- C:\users\user\Desktop\UplayInstaller.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{AFF4F1E4-5A0B-449B-BB73-59C481A2EAA7}] (...) -- D:\DirectX9\DXSETUP.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{B319F8F0-A1F1-4616-9BC2-3A3AF72268A5}] (...) -- C:\users\user\Desktop\Nouveau dossier\Les Chevaliers Baphomet 3 - Le Manuscrit de Voynich\Crack\bs3pc.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{B38A2135-2690-47DE-BB1A-1F1E6A67C034}] (...) -- C:\Program Files (x86)\Origin Games\The Sims 4 Create A Sim Demo\Game\Bin\TS4CAS.exe (.not file.) [0]
[MD5.6AF832996C93DE62D23B28D28EBE941C] [APT] [{B5ACE118-5CE3-4DC7-BFA6-33891F25A918}] (...) -- C:\Program Files (x86)\THQ\Les Chevaliers de Baphomet - Le Manuscrit de Voynich\bs3pc.exe [3107593]
[MD5.00000000000000000000000000000000] [APT] [{B5F77421-AC73-4EC8-847F-92784C2904E8}] (...) -- F:\setup.exe (.not file.) [0]
[MD5.6AF832996C93DE62D23B28D28EBE941C] [APT] [{B91803C4-454B-4D34-BB72-E9C8E0D8C0D3}] (...) -- C:\Program Files (x86)\THQ\Les Chevaliers de Baphomet - Le Manuscrit de Voynich\bs3pc.exe [3107593]
[MD5.00000000000000000000000000000000] [APT] [{BBCFA583-4068-4A17-A39A-DD16D44016E3}] (...) -- D:\Autorun.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{BBE42992-33A0-4C14-8018-8D54FA1E3254}] (...) -- C:\users\user\Desktop\sp45308.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{BDCF64F9-20E3-40C3-B847-E89EFAFD633A}] (...) -- C:\users\user\Desktop\PROWinx64.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{BF26850A-9E93-46D0-94E7-8A8D01D0B58C}] (...) -- D:\Autorun.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{CB8658BB-CA5E-4CB0-9854-76430CD74D91}] (...) -- C:\users\user\Desktop\Nouveau dossier\Les Chevaliers Baphomet 3 - Le Manuscrit de Voynich\Crack\bs3pc.exe (.not file.) [0]
[MD5.B28CD6E930E549629A7C303022311651] [APT] [{D00448D5-D37B-4B9E-92A2-9D425E37EFE6}] (...) -- C:\Program Files\THQ\Revolution Software Ltd\Broken Sword The Angel of Death\bs4pc.exe [7630848]
[MD5.00000000000000000000000000000000] [APT] [{D636E339-0F4D-4787-9CF8-B6EBF0C0240C}] (...) -- F:\SETUP.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{D64428F2-5000-4A2F-9575-0949CF358F85}] (...) -- C:\users\user\Desktop\SIMS 3\Autorun.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{D668FD83-CA6D-4B24-A5A4-BB02C56A16DE}] (...) -- C:\users\user\Downloads\wmp11-windowsxp-x64-enu.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{D98CC327-1863-4540-BE3D-A615B189A54E}] (...) -- D:\setup.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{DC1692A6-F8D7-4B47-ABB0-07C7DFCFEC4A}] (...) -- C:\users\user\Desktop\Nouveau dossier\Les Chevaliers Baphomet 3 - Le Manuscrit de Voynich\Crack\bs3pc.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{DE210DCD-F14B-4E50-A613-221AD1E3BAFD}] (...) -- D:\Autorun.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{DEC40C9F-450A-4C3A-BEA5-B416552BA75C}] (...) -- C:\users\user\Desktop\kav14.0.0.4651fr-fr(1).exe (.not file.) [0]
[MD5.FF558E4D2093CD517BC6DDFC64D8969A] [APT] [{DFE1EC94-538B-4A3F-8508-9A0945F5CE80}] (.Related Designs.) -- C:\users\user\Desktop\ANNO 2070 (2)\Anno.2070.Deep.Ocean.Crack.Only-RELOADED\Crack\anno5.exe [53209600]
[MD5.B28CD6E930E549629A7C303022311651] [APT] [{E15BD6B3-BC1C-4CDB-97A7-DA9A57DE11FE}] (...) -- C:\Program Files\THQ\Revolution Software Ltd\Broken Sword The Angel of Death\bs4pc.exe [7630848]
[MD5.00000000000000000000000000000000] [APT] [{E262D3CC-FCB0-4AFE-9308-911EBE37BC7A}] (...) -- F:\setup.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{E2E1099E-E5DC-46E6-9690-16A614EC900B}] (...) -- C:\users\user\Desktop\Nouveau dossier\Les Chevaliers Baphomet 3 - Le Manuscrit de Voynich\Crack\bs3pc.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{E38B4611-F55E-44DD-851E-A00ED761457D}] (...) -- C:\users\user\Desktop\Nouveau dossier\Les Chevaliers Baphomet 3 - Le Manuscrit de Voynich\Crack\bs3pc.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{E59F5248-4716-4515-9C87-AE70778601D9}] (...) -- D:\autorun.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{E6435FA5-9A23-4C22-B416-E53D5AA65EF6}] (...) -- D:\Autorun.exe (.not file.) [0]
[MD5.E909EBA4C24F2A24EDAA33C550B01686] [APT] [{E6729989-BA58-4A82-85E0-A00173F7D3E3}] (.Related Designs Software.) -- C:\users\user\Desktop\ANNO 2070 (2)\Anno.2070.Update.v1.05-RELOADED\Update\Anno2070_offlinepatcher_1_05.exe [827207456]
[MD5.00000000000000000000000000000000] [APT] [{E7E358E6-6C73-4902-A757-E37B50132D63}] (...) -- D:\Autorun.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{E8A3FB67-8A17-4080-9C56-FE4F440248A4}] (...) -- C:\users\user\Desktop\wmp11-windowsxp-x86-FR-FR.exe (.not file.) [0]
[MD5.FF558E4D2093CD517BC6DDFC64D8969A] [APT] [{EB7861A9-A602-4BFB-9A33-EFA5650BD528}] (.Related Designs.) -- C:\users\user\Desktop\Crack\anno5.exe [53209600]
[MD5.B28CD6E930E549629A7C303022311651] [APT] [{EBE91C24-3B9D-4A38-8F53-F93983D0573A}] (...) -- C:\Program Files\THQ\Revolution Software Ltd\Broken Sword The Angel of Death\bs4pc.exe [7630848]
[MD5.00000000000000000000000000000000] [APT] [{F0AB674B-9AD3-4995-B4EE-C96780A7F16E}] (...) -- D:\setup.exe (.not file.) [0]
[MD5.FF558E4D2093CD517BC6DDFC64D8969A] [APT] [{F418CE0A-D782-4E59-8DF1-D0824637736E}] (.Related Designs.) -- C:\users\user\Desktop\ANNO 2070 (2)\Anno.2070.Deep.Ocean.Crack.Only-RELOADED\Crack\anno5.exe [53209600]
[MD5.00000000000000000000000000000000] [APT] [{F498B2EE-D0DE-46A8-AA3D-B1DA92EFBA9F}] (...) -- C:\users\user\Desktop\BAPHOMET\Acrobat Reader Installer\French\rp505fra.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{F63F76F3-B246-4B5A-A50C-6DFB5C4FEE18}] (...) -- C:\users\user\Desktop\Nouveau dossier\Les Chevaliers Baphomet 3 - Le Manuscrit de Voynich\Crack\bs3pc.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{F6CD4D75-D25F-4F96-A684-DBD105AD661E}] (...) -- F:\setup.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{F7100BF7-C165-4142-951B-0820DC208E8C}] (...) -- C:\users\user\Desktop\wmp11-windowsxp-x86-FR-FR.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{FA04F1C0-E70C-4645-86D0-8370A438CA6A}] (...) -- C:\users\user\Desktop\sp54929.exe (.not file.) [0]
[MD5.2D81626783A4C50A737491FFDA18DC0D] [APT] [{FB8BEC1B-0EA2-4855-B406-04EBE823D966}] (.Related Designs.) -- C:\users\user\Desktop\ANNO 2070 (2)\Anno.2070.Update.v1.05-RELOADED\Crack\Anno5.exe [51797504]
[MD5.00000000000000000000000000000000] [APT] [{FC9C8A60-6649-42A6-9ADB-142551ED2111}] (...) -- C:\users\user\Desktop\wmp11-windowsxp-x86-FR-FR.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{FFD4CCE5-CA47-4C5C-ABA0-70DC1924D174}] (...) -- C:\ProgramData\Kaspersky Lab Setup Files\setup.exe (.not file.) [0]
O39 - APT: - (..) -- C:\Windows\System32\Tasks\Adobe Flash Player Updater [1002]
~ Scheduled Task: 234 Legitimates Filtered in 01mn 52s
---\\ Pilotes lancés au démarrage du système (O41)
O41 - Driver: (6579638drv) . (...) - C:\Windows\System32\DRIVERS\6579638drv.sys
~ Drivers: 81 Legitimates Filtered in 00mn 04s
---\\ Logiciels installés (O42)
O42 - Logiciel: Broken Sword 5 - (.Revolution Software Ltd.) [HKLM][64Bits] -- Broken Sword 5_is1
~ Logic: 27 Legitimates Filtered in 00mn 01s
---\\ HKCU & HKLM Software Keys
[HKLM\Software\CoolPic] =>Adware.Incredibar
[HKLM\Software\Wow6432Node\ADBlock]
[HKLM\Software\Wow6432Node\CoolPic] =>Adware.Incredibar
[HKLM\Software\Wow6432Node\iRobinHoodInstall] =>Toolbar.iRobinHood
~ Key Software: 323 Legitimates Filtered in 00mn 01s
---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 28/06/2014 - 19:57:05 - [] ----D C:\Program Files (x86)\Broken Sword 5
O43 - CFD: 10/08/2014 - 09:47:55 - [0] ----D C:\Program Files (x86)\PC Accelerator
O43 - CFD: 28/03/2013 - 21:49:38 - [] ----D C:\ProgramData\InstallMate =>PUP.Tarma
O43 - CFD: 24/05/2013 - 13:15:05 - [] ----D C:\ProgramData\{BDDB56DE-AE4E-48A2-B856-FB60C8498453}
O43 - CFD: 20/07/2013 - 11:03:17 - [] ----D C:\Users\user\AppData\Roaming\Millennia
~ Program Folder: 218 Legitimates Filtered in 00mn 01s
---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.E15B492959DFABC12AA4CA070B38F21A] - 10/08/2014 - 16:09:32 ---A- . (...) -- C:\Windows\System32\binkw32.dll [286208]
O44 - LFC:[MD5.B55FA6AD6C4A74AFC85433490E97C0DE] - 10/08/2014 - 18:56:20 ---A- . (...) -- C:\Windows\System32\nvcoproc.bin [3826628]
O44 - LFC:[MD5.90CFC5C683AC1A1B8CA50F8BC2F5DC00] - 11/08/2014 - 05:59:55 ---A- . (...) -- C:\Windows\System32\bcmwlrc.dll [6656]
O44 - LFC:[MD5.FF70BDAC6025B820857C7FE71D961D73] - 11/08/2014 - 06:00:38 ---A- . (...) -- C:\Windows\System32\oem56.inf [707378]
O44 - LFC:[MD5.E053D584736C0DF787AC7309BFC3C8F7] - 11/08/2014 - 18:41:27 ---A- . (...) -- C:\Windows\caesar3.ico [4398]
O44 - LFC:[MD5.CE13F6EC1BA67718265CAA0EC2A5D44D] - 11/08/2014 - 18:49:27 ---A- . (...) -- C:\Windows\SIERRA.INI [375]
O44 - LFC:[MD5.A876A5AD236C02CA841A1FE99A207ADE] - 11/08/2014 - 18:49:27 ---A- . (...) -- C:\Windows\zeusicon.ico [766]
O44 - LFC:[MD5.B53A2AE5232227858FDBC129C261521A] - 15/08/2014 - 10:41:08 ---A- . (...) -- C:\Windows\DPINST.LOG [31580]
O44 - LFC:[MD5.01DF376DEA63A0E2B288054B1DA144E4] - 16/08/2014 - 15:08:10 ---A- . (...) -- C:\MBAM.txt [1232]
O44 - LFC:[MD5.72F2D357120F95C1E725C22915FE95E1] - 16/08/2014 - 16:06:11 ---A- . (...) -- C:\Windows\WORDPAD.INI [193]
O44 - LFC:[MD5.9033609892E38D32C7D8B523C49D965F] - 17/08/2014 - 09:44:01 ---A- . (...) -- C:\Windows\System32\umstartup000.etl [43008]
O44 - LFC:[MD5.9423AE89C079A2294B423B6F053332DA] - 17/08/2014 - 09:44:44 ---A- . (...) -- C:\Windows\System32\umstartup.etl [6144]
~ Files: 106 Legitimates Filtered in 00mn 11s
---\\ Clé de registre Shell MountPoints2 (MPKS) (O51)
O51 - MPSK:{18e630ff-7b60-11e2-9c69-acbea377e3d5}\AutoRun\command. (...) -- F:\Autorun.exe (.not file.)
O51 - MPSK:{a48a209c-6546-11e2-b955-806e6f6e6963}\AutoRun\command. (...) -- D:\Autorun.exe (.not file.)
O51 - MPSK:{b667b912-a113-11e3-9e20-e63a641beda4}\AutoRun\command. (...) -- I:\Autorun.exe (.not file.)
O51 - MPSK:{cef114e3-d680-11e2-a4b6-c56f779d0dbc}\AutoRun\command. (...) -- H:\Autorun.exe (.not file.)
O51 - MPSK:{e9da88b7-8804-11e2-8e82-c91a8acd04a5}\AutoRun\command. (...) -- G:\Autorun.exe (.not file.)
~ Keys: Scanned in 00mn 00s
---\\ Enumération des clés de registre PoliciesSystem (MWPS) (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
~ MWPS: 16 Legitimates Filtered in 00mn 00s
---\\ Enumération des clés de registre PoliciesExplorer (MWPE) (O56)
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1
~ MWPE Keys: 4 Legitimates Filtered in 00mn 00s
---\\ Liste des pilotes du système (SDL) (O58)
O58 - SDL:16/12/2013 - 17:34:44 ---A- . (...) -- C:\Windows\System32\Drivers\6579638drv.sys [532056]
O58 - SDL:02/05/2014 - 17:53:07 ---A- . (...) -- C:\Windows\System32\Drivers\atksgt.sys [314016]
O58 - SDL:14/07/2010 - 09:42:26 ---A- . (.Windows (R) Win 7 DDK provider - CyberLink WebCam Virtual Driver.) -- C:\Windows\System32\Drivers\clwvd.sys [32880]
O58 - SDL:20/02/2013 - 14:19:45 ---A- . (.DT Soft Ltd - DAEMON Tools Virtual Bus Driver.) -- C:\Windows\System32\Drivers\dtsoftbus01.sys [283200]
O58 - SDL:14/07/2009 - 02:47:48 ---A- . (.Emulex - Storport Miniport Driver for LightPulse HBAs.) -- C:\Windows\System32\Drivers\elxstor.sys [530496]
O58 - SDL:28/04/2008 - 09:55:32 ---A- . (.ENE TECHNOLOGY INC. - ENE CIR Driver for eHome(64).) -- C:\Windows\System32\Drivers\enecir.sys [64000]
O58 - SDL:10/06/2009 - 21:31:59 ---A- . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for eHome.) -- C:\Windows\System32\Drivers\hcw85cir.sys [31232]
O58 - SDL:02/05/2014 - 17:53:06 ---A- . (...) -- C:\Windows\System32\Drivers\lirsgt.sys [43680]
O58 - SDL:14/07/2009 - 02:45:55 ---A- . (.Promise Technology - Promise SuperTrak EX Series Driver for Windows.) -- C:\Windows\System32\Drivers\stexstor.sys [24656]
O58 - SDL:23/03/2010 - 22:53:06 ---A- . (.IDT, Inc. - IDT PC Audio.) -- C:\Windows\System32\Drivers\stwrt64.sys [505344]
O58 - SDL:13/12/2012 - 12:50:36 ---A- . (.Apple, Inc. - Apple Mobile Device USB Driver.) -- C:\Windows\System32\Drivers\usbaapl64.sys [54784]
O58 - SDL:24/03/2005 - 09:59:22 ---A- . (.Integrated Technology Express Technology In - ITE Mass Storage Driver.) -- C:\Windows\SysWOW64\drivers\ITEU.sys [24284]
~ Drivers: 82 Legitimates Filtered in 00mn 06s
---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61)
O61 - LFC: 10/08/2014 - 11:18:28 ---A- . (.ss.) -- C:\Users\user\Documents\PingIPscan318.exe [40960]
O61 - LFC: 15/08/2014 - 11:18:26 ---A- . (...) -- C:\Users\user\Desktop\PILOTE DRIVER\PROWinx64.exe [34811904]
O61 - LFC: 16/08/2014 - 11:18:21 ---A- . (...) -- C:\Users\user\Desktop\adwcleaner_3.306.exe [1361203]
O61 - LFC: 16/08/2014 - 11:18:30 ---A- . (...) -- C:\Users\user\Downloads\adwcleaner_3.306.exe [1361203]
~ 104 Fichiers temporaires (Temporary files)
~ 11 Fichiers cookies (Cookies files)
~ Files: 31 Legitimates Filtered in 00mn 49s
---\\ Liste des outils de désinfection (LATC) (O63)
O63 - Logiciel: ZHPDiag 2014 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 =>.Nicolas Coolman
~ ADS: Scanned in 00mn 00s
---\\ Liste les services legacy du registre (LALS) (O64)
O64 - Services: CurCS - 02/05/2014 - C:\Windows\System32\DRIVERS\atksgt.sys (atksgt) .(...) - LEGACY_ATKSGT
~ Legacy: 95 Legitimates Filtered in 00mn 00s
---\\ Menu de démarrage Internet (SMI) (O68)
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
~ Keys: Scanned in 00mn 00s
---\\ Recherche d'infection sur les navigateurs internet (SBI) (O69)
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - http://www.bing.com
O69 - SBI: SearchScopes [HKCU] {D15D00B1-D346-4BDC-A62D-AAFC4CE13DD0} - (Mysearchdial) - http://start.mysearchdial.com =>Adware.MyWebSearch
O69 - SBI: SearchScopes [HKUS\.DEFAULT] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - http://www.bing.com
O69 - SBI: SearchScopes [HKUS\S-1-5-18] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - http://www.bing.com
~ Keys: Scanned in 00mn 00s
---\\ Enumère les fichiers Crack & Keygen (CKF) (O82)
C:\Users\user\Desktop\ANNO 2070 (2)\Anno.2070.Deep.Ocean.Crack.Only-RELOADED\Anno 2070 Keygen\Anno 2070 Keygen.rar =>.Crack,Keygen
C:\Users\user\Desktop\ANNO 2070 (2)\Anno.2070.Deep.Ocean.Crack.Only-RELOADED\Anno 2070 Keygen\Anno 2070 Keygen.rar =>.Crack,Keygen
~ Files: Scanned in 01mn 18s
---\\ Recherche particulière à la racine du système (SPRF) (O84)
[MD5.689CB9124B709EE1647D01B7687AFDFC] [SPRF][30/08/2013] (...) -- C:\ProgramData\ntuser.dat [262144]
[MD5.59BEE71E552AFA5FD3E3DE48075EAA6F] [SPRF][16/08/2014] (...) -- C:\Users\user\Desktop\adwcleaner_3.306.exe [1361203]
[MD5.7CC536568A80618B8A726F3E2648F3BF] [SPRF][22/03/2011] (...) -- C:\Users\user\Desktop\rld-tsmk.exe [8192]
[MD5.5170638BD95B39C87DFC0DDC82A9E5DB] [SPRF][17/09/2013] (.Pas de propriétaire - Sims 3 Starter Application.) -- C:\Users\user\Desktop\TS3EP11.exe [30016]
~ Files: 8 Legitimates Filtered in 00mn 00s
---\\ Liste des exceptions du parefeu (FirewallRules) (O87)
O87 - FAEL: "{39FBDC2A-C916-4C72-A8B5-445E9C3033C2}" | In - None - P6 - TRUE | .(.BitTorrent Inc. - µTorrent.) -- C:\Users\user\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent
O87 - FAEL: "{92465936-F084-4EB3-906E-F8E3B46B8AFA}" | In - None - P17 - TRUE | .(.BitTorrent Inc. - µTorrent.) -- C:\Users\user\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent
O87 - FAEL: "{49EB8806-C318-42F2-9E3E-BEF60C4335F6}" | In - None - P6 - TRUE | .(.BitTorrent Inc. - µTorrent.) -- C:\Users\user\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent
O87 - FAEL: "{C87BD844-2E93-4573-ACBB-CF312D51884A}" | In - None - P17 - TRUE | .(.BitTorrent Inc. - µTorrent.) -- C:\Users\user\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent
~ Firewall: 4 Legitimates Filtered in 00mn 02s
---\\ Recherche de clés de registre Tracing (O100)
HKLM\SOFTWARE\Microsoft\Tracing\BackupStack_RASAPI32 =>PUP.MyPCBackup
HKLM\SOFTWARE\Microsoft\Tracing\BackupStack_RASMANCS =>PUP.MyPCBackup
~ BTK: 109 Legitimates Filtered in 00mn 00s
---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)
SS - | Demand 14/07/2014 262320 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
SS - | Demand 04/04/2005 69632 | (IDriverT) . (.Macrovision Corporation.) - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
SS - | Demand 01/08/2014 641352 | (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe
SR - | Auto 21/12/2013 65432 | (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
SR - | Auto 03/03/2009 89600 | (AESTFilters) . (.Andrea Electronics Corporation.) - C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_70dacb64382a61a7\AESTSr64.exe
SR - | Auto 12/06/2014 43336 | (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
SR - | Auto 16/12/2013 356128 | (AVP) . (.Kaspersky Lab ZAO.) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\avp.exe
SR - | Auto 30/08/2011 462184 | (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe
SR - | Auto 27/03/2013 185688 | (Garmin Core Update Service) . (.Garmin Ltd or its subsidiaries.) - C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe
SR - | Auto 13/05/2011 30520 | (hpsrv) . (.Hewlett-Packard Company.) - C:\Windows\System32\Hpservice.exe
SR - | Auto 07/07/2014 72992 | (HPSupportSolutionsFrameworkService) . (.Hewlett-Packard Company.) - C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe
SR - | Auto 21/11/2013 15720 | (IAStorDataMgrSvc) . (.Intel Corporation.) - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
SR - | Auto 14/05/2013 140936 | (IJPLMSVC) . (...) - C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.exe
SR - | Auto 24/06/2014 2820424 | (MaConfigAgent) . (.CybelSoft.) - C:\Program Files\ma-config.com\MaConfigAgent.exe
SR - | Auto 12/05/2014 1809720 | (MBAMScheduler) . (.Malwarebytes Corporation.) - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
SR - | Auto 12/05/2014 860472 | (MBAMService) . (.Malwarebytes Corporation.) - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
SR - | Auto 25/07/2014 1720608 | (NvNetworkService) . (.NVIDIA Corporation.) - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
SR - | Auto 25/07/2014 18956064 | (NvStreamSvc) . (.NVIDIA Corporation.) - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
SR - | Auto 02/07/2014 935368 | (nvsvc) . (.NVIDIA Corporation.) - C:\Windows\system32\nvvsvc.exe
SR - | Auto 23/03/2010 247808 | (STacSV) . (.IDT, Inc..) - C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_70dacb64382a61a7\STacSV64.exe
SR - | Auto 14/07/2009 27136 | C:\Program Files (x86)\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
SR - | Demand 10/07/1658 0 | (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe =>.Microsoft Corporation
SR - | Auto 14/07/2009 27136 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
~ Services: Scanned in 00mn 11s
---\\ Recherche d'infection sur le Master Boot Record (MBR)(O80)
Run by user at 17/08/2014 11:20:16
~ OS 64 not supported by MBR tool
~ MBR: 0 Legitimates Filtered in 00mn 00s
---\\ Recherche d'infection sur le Master Boot Record (MBRCheck)(O80)
Written by ad13, http://ad13.geekstog
Run by user at 17/08/2014 11:20:18
********* Dump file Name *********
C:\PhysicalDisk0_MBR.bin
~ MBR: Scanned in 00mn 02s
---\\ Scan Additionnel (O88)
Database Version : 13026 - (13/08/2014)
Clés trouvées (Keys found) : 3
Valeurs trouvées (Values found) : 0
Dossiers trouvés (Folders found) : 1
Fichiers trouvés (Files found) : 3
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375] =>PUP.Tarma
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5] =>PUP.Tarma
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CA0054A5AB3EFFE4CB5660E44A1E7DCC] =>Adware.Boxore^
C:\ProgramData\InstallMate =>PUP.Tarma^
[HKLM\Software\CoolPic] =>Adware.Incredibar^
[HKLM\Software\Wow6432Node\CoolPic] =>Adware.Incredibar^
[HKLM\Software\Wow6432Node\iRobinHoodInstall] =>Toolbar.iRobinHood^
~ Additionnel Scan: 336453 Items scanned in 00mn 23s
---\\ Informations complémentaires sur les modules
~ http://nicolascoolman.fr/r5-internet-explorer-proxy-management-iepm/ =>.Internet Explorer, Proxy Management (R5)
~ http://nicolascoolman.fr/o3-internet-explorer-toolbars/ =>.Internet Explorer Toolbars (O3)
~ http://nicolascoolman.fr/o4-applications-demarrees-par-le-registre/ =>.Applications lancées au démarrage du système (O4)
~ http://nicolascoolman.fr/o51-mountpoints2-shell-key-mpsk/ =>.Clé de registre Shell MountPoints2 (MPKS) (O51)
~ AMI: 4 Legitimates Filtered in 00mn 00s
---\\ Récapitulatif des détections trouvées sur votre station
http://nicolascoolman.fr/adware-incredibar =>Adware.Incredibar
http://nicolascoolman.fr/pup-tarma =>PUP.Tarma
http://nicolascoolman.fr/adware-mywebsearch =>Adware.MyWebSearch
http://nicolascoolman.fr/pup-mypcbackup =>PUP.MyPCBackup
http://nicolascoolman.fr/adware-boxore =>Adware.Boxore
~ MSI: 5 link(s) detected in 00mn 00s
~ 1237 Legitimates filtered by white list
End of the scan (619 lines in 08mn 03s)(2)
~ Lancé par user (17/08/2014 11:12:39)
~ Adresse du Site Web http://nicolascoolman.fr
~ Adresse du Forum http://forum.nicolascoolman.fr
~ Traduit par Nicolas Coolman
~ Etat de la version : Nouvelle version disponible
~ Liste blanche : Activée par le programme
~ Elévation des Privilèges : OK
~ User Account Control (UAC): Activate by user
---\\ Navigateurs Internet
MSIE: Internet Explorer v11.0.9600.17239
MFIE: Mozilla Firefox 31.0 (Defaut)
---\\ Informations sur les produits Windows
~ Langage: Français
Windows 7 Home Premium, 64-bit Service Pack 1 (Build 7601)
Windows Server License Manager Script : OK
~ Windows Operating System - Windows(R) 7, OEM_COA_SLP channel
Windows ID Activation : OK
~ Windows Partial Key : HQ6FX
Windows License : OK
~ Windows Remaining Initializations Number : 3
Software Protection Service (Protection logicielle) : OK
Windows Automatic Updates : OK
Windows Activation Technologies : OK
---\\ Logiciels de protection du système
Kaspersky Anti-Virus 2013 v13.0.1.4190
Malwarebytes Anti-Malware version 2.0.2.1012
Windows Defender W7 (Activate)
---\\ Logiciels d'optimisation du système
---\\ Logiciels de partage PeerToPeer
---\\ Surveillance de Logiciels
Adobe Flash Player 14 Plugin
Adobe Reader XI
Java 7 Update 67
Java 7 Update 67
---\\ Informations sur le système
~ Processor: Intel64 Family 6 Model 37 Stepping 2, GenuineIntel
~ Operating System: 64 Bits
Boot mode: Normal (Normal boot)
Total RAM: 4022 MB (50% free)
System Restore: Activé (Enable)
System drive C: has 298 GB (42%) free of 697 GB
---\\ Mode de connexion au système
~ Computer Name: USER-PC
~ User Name: user
~ All Users Names: user, HomeGroupUser$, Administrateur,
~ Unselected Option: None
Logged in as Administrator
---\\ Variables d'environnement
~ System Unit : C:\
~ %AppZHP% : C:\Users\user\AppData\Roaming\ZHP\
~ %AppData% : C:\Users\user\AppData\Roaming\
~ %Desktop% : C:\Users\user\Desktop\
~ %Favorites% : C:\Users\user\Favorites\
~ %LocalAppData% : C:\Users\user\AppData\Local\
~ %StartMenu% : C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\
---\\ Enumération des unités disques
C: Hard drive, Flash drive, Thumb drive (Free 298 Go of 697 Go)
D: CD-ROM drive (Not Inserted)
E: Hard drive, Flash drive, Thumb drive (Free 2 Go of 2 Go)
F: CD-ROM drive (Not Inserted)
G: CD-ROM drive (Not Inserted)
H: CD-ROM drive (Not Inserted)
I: CD-ROM drive (Not Inserted)
Q: Hard drive, Flash drive, Thumb drive (Free 0 Go of 0 Go)
---\\ Etat du Centre de Sécurité Windows
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
~ Security Center: 49 Legitimates Filtered in 00mn 00s
---\\ Recherche particulière de fichiers génériques
[MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorateur Windows.) (.25/02/2011 - 07:19:30.) -- C:\Windows\Explorer.exe [2871808]
[MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 - 02:39:52.) -- C:\Windows\System32\Wininit.exe [129024]
[MD5.8E71A5CB5312B8392D4DA4CA37BB5868] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.25/07/2014 - 11:52:06.) -- C:\Windows\System32\wininet.dll [2266624]
[MD5.88AB9B72B4BF3963A0DE0820B4B0B06C] - (.Microsoft Corporation - Application d’ouverture de session Windows.) (.04/03/2014 - 10:43:50.) -- C:\Windows\System32\Winlogon.exe [455168]
[MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Bibliothèque de licences.) (.21/11/2010 - 04:24:16.) -- C:\Windows\System32\sppcomapi.dll [232448]
[MD5.FA886682CFC5D36718D3E436AACF10B9] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.30/05/2014 - 07:45:52.) -- C:\Windows\system32\Drivers\AFD.sys [497152]
[MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 - 02:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128]
[MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/07/2009 - 00:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160]
[MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.21/11/2010 - 04:23:47.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456]
[MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.21/11/2010 - 04:24:32.) -- C:\Windows\system32\Drivers\DfsC.sys [102400]
[MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.21/11/2010 - 04:23:47.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368]
[MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) (.14/07/2009 - 00:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472]
[MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.14/07/2009 - 01:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224]
[MD5.A5D9106A73DC88564C825D317CAC68AC] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.27/04/2011 - 03:40:40.) -- C:\Windows\system32\Drivers\MRxSmb.sys [158208]
[MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) (.21/11/2010 - 04:23:51.) -- C:\Windows\system32\Drivers\netBT.sys [261632]
[MD5.1A29A59A4C5BA6F8C85062A613B7E2B2] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.24/01/2014 - 03:37:55.) -- C:\Windows\system32\Drivers\ntfs.sys [1684928]
[MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/07/2009 - 01:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280]
[MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.21/11/2010 - 04:24:33.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [129536]
[MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.14/07/2009 - 01:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184]
[MD5.DDAD5A7AB24D8B65F8D724F5C20FD806] - (.Microsoft Corporation - TDI Translation Driver.) (.21/11/2010 - 04:24:32.) -- C:\Windows\system32\Drivers\tdx.sys [119296]
[MD5.0D08D2F3B3FF84E433346669B5E0F639] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.21/11/2010 - 04:23:47.) -- C:\Windows\system32\Drivers\volsnap.sys [295808]
~ Generic Processes: Scanned in 00mn 00s
---\\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 1/9
~ Mes musiques (My Musics) : 1/564
~ Mes Favoris (My Favorites) : 1/53
~ Mes Documents (My Documents) : 1/6489
~ Mon Bureau (My Desktop) : 1/7677
~ Menu demarrer (Programs) : 1/29
~ Hidden Files: Scanned in 00mn 01s
---\\ Processus lancés
[MD5.15D2DB9BFA8E833ED31FAB2BB088FDDA] - (.Kaspersky Lab ZAO - Kaspersky Anti-Virus.) -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\avp.exe [356128] [PID.2080]
[MD5.C56AEF21A76A6E2BB36A384B2C96389F] - (.NVIDIA Corporation - NVIDIA GeForce Experience Backend.) -- C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2403104] [PID.2720]
[MD5.B7F55E2AE978D3D34F7876EE5D689AAE] - (.CyberLink - YouCam Mirage.) -- C:\Program Files (x86)\Hewlett-Packard\Media\Webcam\YCMMirage.exe [136488] [PID.2932]
[MD5.4FBC630768570E6AC35C3DE8F6EC79F5] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe [6970168] [PID.2648]
[MD5.10F36FB8CD6218CD7F818268E0F3F9C6] - (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe [275568] [PID.2112]
[MD5.02F8883595A2B3D7FFA11C71EAC68473] - (.Mozilla Corporation - Plugin Container for Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe [18544] [PID.2952]
[MD5.192FFD3F99A0847740670AE711CB455A] - (.Adobe Systems, Inc. - Adobe Flash Player 14.0 r0.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_14_0_0_145.exe [1869488] [PID.4328]
[MD5.DC2E338E63159454B71659D82515A04E] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [8091648] [PID.2924]
[MD5.B362181ED3771DC03B4141927C80F801] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [65432] [PID.1524]
[MD5.6B73E94F9FE82D45781B8C8A09483082] - (.Apple Inc. - YSLoader.exe.) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [43336] [PID.640]
[MD5.2973B4EB7BE10A0D491B2037DCAAE88F] - (.Garmin Ltd or its subsidiaries - Garmin Core Update Service.) -- C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [185688] [PID.2192]
[MD5.7FF1EE51F34F43D29C8E0633E966192E] - (.Hewlett-Packard Company - SolutionsFrameworkService.) -- C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe [72992] [PID.2768]
[MD5.C5E4602D85029C666A42890A3B2DFA45] - (.Pas de propriétaire - Inkjet Printer/Scanner/Fax Extended Survey.) -- C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.exe [140936] [PID.2852]
[MD5.D84AEA3F3329D622DFC1297DDDF6163B] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720] [PID.2964]
[MD5.4F45ED469906494F9BF754E476390DBD] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [860472] [PID.1224]
[MD5.D6310F79E51D1F997E964E81DD368AEA] - (.NVIDIA Corporation - NVIDIA Network Service.) -- C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1720608] [PID.2484]
[MD5.39B1D0A636A400304565D4521FAD6D77] - (.Microsoft Corporation - Microsoft Application Virtualization Virtua.) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [207528] [PID.3416]
[MD5.77C5A741A7452812F278EF2C18478862] - (.Microsoft Corporation - Microsoft Application Virtualization Client.) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe [523944] [PID.3460]
[MD5.FD557A50A65E44041CD2FCEF4BEB04DB] - (.Microsoft Corporation - Microsoft Office Client Virtualization Serv.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.exe [822504] [PID.3740]
[MD5.6241810294275CEA59EBA9733080E5EE] - (.Intel Corporation - IAStorDataSvc.) -- C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720] [PID.1392]
~ Processes Running: Scanned in 00mn 00s
---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Preferences
---\\ Liste des dossiers d'extension Google Chrome
~ Google Lines Browser: 0 Legitimates Filtered in 00mn 00s
---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
P2 - FPN:Firefox Plugin Navigator . (.LizardTech - DjVu Plug-In(external version 6.1.4.2013).) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\npdjvu.dll
~ Firefox Browser: 9 Legitimates Filtered in 00mn 00s
---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Proxy management: Scanned in 00mn 00s
---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
~ Keys: Scanned in 00mn 00s
---\\ Hosts file redirection (O1)
O1 - Hosts: hostsO1 - Hosts: hostsO1 - Hosts: hostsO1 - Hosts: hosts~ Nombre lignes détournées 4/71604 (Hosts file redirected)
~ Hosts File: Scanned in 02mn 15s
---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar: Canon Easy-WebPrint EX - [HKLM]{759D9886-0C6F-4498-BAB6-4A5F47C6C72F} . (.CANON INC. - Easy-WebPrint EX.) -- C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexhlp.dll
~ Toolbar: Scanned in 00mn 00s
---\\ Applications lancées au démarrage du système (O4)
O4 - HKLM\..\Wow6432Node\Run: [AVP] . (.Kaspersky Lab ZAO - Kaspersky Anti-Virus.) -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\avp.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation
~ Application: Scanned in 00mn 00s
---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: Clavier virtuel [64Bits] - {0C4CC089-D306-440D-9772-464E226F6539} -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\kbrd.ico (.not file.)
~ IE Extra Buttons: Scanned in 00mn 00s
---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{D97C96FC-0AD5-4CF8-A4C1-214C12793937}: DhcpNameServer = 89.2.0.1 89.2.0.2
O17 - HKLM\System\CS1\Services\Tcpip\..\{D97C96FC-0AD5-4CF8-A4C1-214C12793937}: DhcpNameServer = 89.2.0.1 89.2.0.2
O17 - HKLM\System\CS2\Services\Tcpip\..\{D97C96FC-0AD5-4CF8-A4C1-214C12793937}: DhcpNameServer = 89.2.0.1 89.2.0.2
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 89.2.0.1 89.2.0.2
~ Domain: Scanned in 00mn 00s
---\\ Protocole additionnel (O18)
O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation
O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation
~ Protocole Additionnel: Scanned in 00mn 00s
---\\ Tâches planifiées en automatique (O39)
[MD5.00000000000000000000000000000000] [APT] [4628] (...) -- C:\users\user\AppData\Local\Temp\launchie.vbs \\B (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{01395FE3-1A59-4933-8CA4-259606BD0AF0}] (...) -- C:\users\user\Desktop\TV Tuner_AverMedia_v1.0.64.40_Vistax64\A309_VistaLogo_Drv_V1.0.x.40_Direct_Install.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{01AD77BE-7337-44C4-BFB2-1168E2B49C48}] (...) -- C:\users\user\Desktop\Nouveau dossier\Les Chevaliers Baphomet 3 - Le Manuscrit de Voynich\Crack\bs3pc.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{063DD56C-607F-4D88-800B-F5C07EA1369A}] (...) -- C:\users\user\Desktop\Sims3Setup.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{0642CB58-E110-405C-9C7F-C685583EE438}] (...) -- C:\Program Files (x86)\Origin Games\The Sims 4 Create A Sim Demo\Game\Bin\TS4CAS.exe (.not file.) [0]
[MD5.2D81626783A4C50A737491FFDA18DC0D] [APT] [{064602D5-DB4B-4F57-A339-7D5286AEEB1E}] (.Related Designs.) -- C:\users\user\Desktop\ANNO 2070 (2)\Anno.2070.Update.v1.05-RELOADED\Crack\Anno5.exe [51797504]
[MD5.00000000000000000000000000000000] [APT] [{0690EFD3-7629-442A-BD91-A34425FCA0D7}] (...) -- C:\users\user\Desktop\Nouveau dossier\Les Chevaliers Baphomet 3 - Le Manuscrit de Voynich\Crack\bs3pc.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{09866A9E-2859-4023-9409-4F41A4C96572}] (...) -- C:\users\user\Desktop\Nouveau dossier\Les Chevaliers Baphomet 3 - Le Manuscrit de Voynich\Crack\bs3pc.exe (.not file.) [0]
[MD5.2D81626783A4C50A737491FFDA18DC0D] [APT] [{17757E26-7668-481F-B325-A59775C56450}] (.Related Designs.) -- C:\users\user\Desktop\ANNO 2070 (2)\Anno.2070.Update.v1.05-RELOADED\Crack\Anno5.exe [51797504]
[MD5.00000000000000000000000000000000] [APT] [{1B98C542-7159-4E55-8850-7B8ECA5D6409}] (...) -- D:\Autopatcher.exe (.not file.) [0]
[MD5.FF558E4D2093CD517BC6DDFC64D8969A] [APT] [{1BDB5234-8CC2-4A2D-A26A-EAA1C7D8B524}] (.Related Designs.) -- C:\users\user\Desktop\ANNO 2070 (2)\Anno.2070.Deep.Ocean.Crack.Only-RELOADED\Crack\anno5.exe [53209600]
[MD5.00000000000000000000000000000000] [APT] [{1FDB3A29-B3B8-4C69-BB81-A85D1A1A4D49}] (...) -- C:\users\user\Desktop\Nouveau dossier\Les Chevaliers Baphomet 3 - Le Manuscrit de Voynich\Crack\bs3pc.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{1FE38715-2657-42BD-B7F7-698EEA171FDA}] (...) -- C:\users\user\Desktop\wmp11-windowsxp-x64-enu(1).exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{2276831C-070A-4001-A746-0CB8DFCA7BFA}] (...) -- D:\BS4Launcher.exe (.not file.) [0]
[MD5.B28CD6E930E549629A7C303022311651] [APT] [{22C896F9-8952-4F84-9AB4-EAF321A98DB9}] (...) -- C:\Program Files\THQ\Revolution Software Ltd\Broken Sword The Angel of Death\bs4pc.exe [7630848]
[MD5.6AF832996C93DE62D23B28D28EBE941C] [APT] [{23197935-457F-413D-8E5F-8D3E48AF14C8}] (...) -- C:\Program Files (x86)\THQ\Les Chevaliers de Baphomet - Le Manuscrit de Voynich\bs3pc.exe [3107593]
[MD5.00000000000000000000000000000000] [APT] [{23CDF55C-A1EF-4278-BD85-980E4D244394}] (...) -- C:\users\user\Desktop\mp10setup.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{24BC1346-F803-4C5F-BAB1-313B85EDA268}] (...) -- C:\Program Files (x86)\Origin Games\The Sims 3 Ambitions\ISSetupHelper.exe (.not file.) [0]
[MD5.B28CD6E930E549629A7C303022311651] [APT] [{273F6A23-01AE-43D1-970F-20DCA020123F}] (...) -- C:\Program Files\THQ\Revolution Software Ltd\Broken Sword The Angel of Death\bs4pc.exe [7630848]
[MD5.00000000000000000000000000000000] [APT] [{278D0D8B-0A2D-40AA-B380-F3F93361DBB7}] (...) -- D:\Autorun.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{280BCF75-76D9-4FD3-BD0F-3765A47E7EA3}] (...) -- C:\users\user\Desktop\setup_11.0.1.1245.x01_2013_12_16_13_35.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{2EDEEE88-DC1A-4B52-9629-FD323AA61524}] (...) -- F:\Crack\bs4pc.exe (.not file.) [0]
[MD5.6AF832996C93DE62D23B28D28EBE941C] [APT] [{2FB88CEE-04BD-404D-B3E3-125713B7FDE5}] (...) -- C:\Program Files (x86)\THQ\Les Chevaliers de Baphomet - Le Manuscrit de Voynich\bs3pc.exe [3107593]
[MD5.00000000000000000000000000000000] [APT] [{31F76BFB-FCAD-440B-85FE-D959D9A57B56}] (...) -- D:\Patch\Pharaoh.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{366AFB63-4C12-4F38-ACE6-FF5653EE0F73}] (...) -- D:\Autorun.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{36B4AE98-395A-4F50-9014-95FA3E01BC16}] (...) -- D:\Autorun.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{384E7DBC-DAE4-41A1-BC21-6A654ECCF5A9}] (...) -- D:\Autorun.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{395D3767-83EF-410C-8B19-E42ED7D020F5}] (...) -- C:\users\user\Desktop\Nouveau dossier\Les Chevaliers Baphomet 3 - Le Manuscrit de Voynich\Crack\bs3pc.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{3982407E-4D8B-4BE2-8516-5B40D252F5E5}] (...) -- C:\users\user\Downloads\installer_media_player_French.exe (.not file.) [0]
[MD5.B28CD6E930E549629A7C303022311651] [APT] [{3A0954DD-64A5-40E7-B0DC-200A9384A076}] (...) -- C:\Program Files\THQ\Revolution Software Ltd\Broken Sword The Angel of Death\bs4pc.exe [7630848]
[MD5.00000000000000000000000000000000] [APT] [{3AEDE24B-D0C1-4A7D-9E14-73F0A85CC22B}] (...) -- D:\Autorun.exe (.not file.) [0]
[MD5.B28CD6E930E549629A7C303022311651] [APT] [{3AF678F7-2B80-4F52-9928-424304E39B5B}] (...) -- C:\Program Files\THQ\Revolution Software Ltd\Broken Sword The Angel of Death\bs4pc.exe [7630848]
[MD5.00000000000000000000000000000000] [APT] [{3D2410C6-DC80-47AE-B31F-55D4875AB891}] (...) -- D:\Autorun.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{3F292311-83EF-4C0C-BD66-1D88DAE807D0}] (...) -- C:\users\user\Desktop\ISO\bapho\baphomet l'ombre\SETUP.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{3FD534EA-4ECB-4ED1-A144-1FC09C8506CD}] (...) -- C:\users\user\Desktop\BAPHOMET\BAPHOMET 4\setup.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{3FDD5137-D5D9-43DB-A533-95975261F273}] (...) -- C:\users\user\Desktop\sp45308.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{437FE7E7-5BD3-4EB6-9D4B-06C7319F2E5F}] (...) -- C:\users\user\Desktop\wmp11-windowsxp-x64-enu.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{458521DA-D994-4691-9361-3686F588A058}] (...) -- F:\SETUP.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{49110A7E-59AD-416D-AF48-0DF9DC2D58DC}] (...) -- D:\Autorun.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{4991D2AC-47F9-419A-B9B0-78A446017E9C}] (...) -- C:\users\user\Desktop\Nouveau dossier\Les Chevaliers Baphomet 3 - Le Manuscrit de Voynich\Crack\bs3pc.exe (.not file.) [0]
[MD5.B28CD6E930E549629A7C303022311651] [APT] [{49F72A2F-6A6F-427F-B346-B67DCFBCF354}] (...) -- C:\Program Files\THQ\Revolution Software Ltd\Broken Sword The Angel of Death\bs4pc.exe [7630848]
[MD5.2A19935AACE8797F7CA6B7F204CBFA0C] [APT] [{4C87ABA1-C17C-452F-A097-A74A2A8659C6}] (...) -- C:\users\user\Desktop\Nouveau dossier (3)\Setup.exe [107792]
[MD5.00000000000000000000000000000000] [APT] [{4C898E37-2D60-4E1B-831A-E14DFECE46D2}] (...) -- C:\users\user\Desktop\kav14.0.0.4651fr-fr(1).exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{4EE514C0-00FB-41D0-B02B-C3A59F4D760C}] (...) -- C:\users\user\Desktop\ISO\bapho\baphomet l'ombre\SETUP.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{54D80265-2F22-4942-9C58-11C2257D7806}] (...) -- C:\users\user\Downloads\installer_media_player_French.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{550657C3-DB09-465D-A8AC-5CE031BA3E8B}] (...) -- C:\users\user\Desktop\mp10setup.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{55716FF1-5EB7-4730-8165-6EE712E9F8E5}] (...) -- C:\users\user\Desktop\SIMS AVENTURES\DA_v247_JeuxVideo.com_14518.exe (.not file.) [0]
[MD5.B28CD6E930E549629A7C303022311651] [APT] [{56ADEC5C-B329-4095-8EE7-96A9048F5FD0}] (...) -- C:\Program Files\THQ\Revolution Software Ltd\Broken Sword The Angel of Death\bs4pc.exe [7630848]
[MD5.00000000000000000000000000000000] [APT] [{5A35C16F-8AE2-4D6A-9CEF-368DCA6A39B1}] (...) -- C:\users\user\Downloads\wmp11-windowsxp-x86-FR-FR.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{5B3003DC-FAB2-4566-B4DA-116822245B59}] (...) -- D:\Autorun.exe (.not file.) [0]
[MD5.F5BB6D8FEE48AE4194D10683771123A8] [APT] [{5B3887AF-87DA-48D4-BFE5-0721583188EE}] (...) -- C:\GOG Games\Broken Sword 5 - the Serpents Curse - Episode 1\BS5.exe [2843150]
[MD5.00000000000000000000000000000000] [APT] [{5D1BAAB3-F200-47CB-B9E9-E5B98EA85D6D}] (...) -- F:\Crack\bs4pc.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{5E034F67-D7C9-4E2F-86D3-3090DB6657A2}] (...) -- F:\Crack\bs4pc.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{5EA4A252-3052-4B8F-865C-FF9BE44E7F13}] (...) -- C:\users\user\Desktop\Nouveau dossier\Les Chevaliers Baphomet 3 - Le Manuscrit de Voynich\Crack\bs3pc.exe (.not file.) [0]
[MD5.FF558E4D2093CD517BC6DDFC64D8969A] [APT] [{603D350A-CFC3-49C0-B68C-79EA36C9E7B1}] (.Related Designs.) -- C:\users\user\Desktop\Crack\anno5.exe [53209600]
[MD5.FF558E4D2093CD517BC6DDFC64D8969A] [APT] [{61103E08-199A-49E1-BFCE-A4371D42A198}] (.Related Designs.) -- C:\users\user\Desktop\ANNO 2070 (2)\Anno.2070.Deep.Ocean.Crack.Only-RELOADED\Crack\anno5.exe [53209600]
[MD5.00000000000000000000000000000000] [APT] [{617C7C57-6E38-463B-B6E4-88F7FDF7A4F1}] (...) -- C:\users\user\Desktop\wmp11-windowsxp-x86-FR-FR.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{633F61AB-1DE2-40EC-923C-8192A8764F07}] (...) -- D:\BS4Launcher.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{654193B8-C9E6-4398-B20E-E07E3FA8F0E4}] (...) -- D:\Autorun.exe (.not file.) [0]
[MD5.FF558E4D2093CD517BC6DDFC64D8969A] [APT] [{676E5B59-07D9-4CA1-80D0-D71F8BBDABA0}] (.Related Designs.) -- C:\users\user\Desktop\ANNO 2070 (2)\Anno.2070.Deep.Ocean.Crack.Only-RELOADED\Crack\anno5.exe [53209600]
[MD5.00000000000000000000000000000000] [APT] [{67A97A40-3B97-45C9-9A1C-F02E9A9D88A7}] (...) -- C:\users\user\Downloads\wmp11-windowsxp-x64-enu.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{68021F22-6EF2-45A9-9F03-C5F44F10A406}] (...) -- F:\setup.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{6ABC7ED2-A6E8-450C-88D7-B362EAC24C0B}] (...) -- C:\users\user\Desktop\sp45308(1).exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{6AD76FAF-18D8-42AF-B39C-F774031E50D2}] (...) -- C:\users\user\Desktop\SCUMM\BAPHOMET 1\CLUSTERS\BrokenSword2.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{6BB1071B-9C63-44E1-8ADD-04756BF9EA1D}] (...) -- D:\Autorun.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{6C1A83DD-9C5F-4D5A-8258-693DE4F59336}] (...) -- C:\Program Files (x86)\InstallShield Installation Information\{3DE92282-CB49-434F-81BF-94E5B380E889}\Sims3EP08Setup.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{708F6A64-705A-4AFA-9563-316C15CC3C14}] (...) -- G:\SimsMedievalEP01Setup.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{70BA64EE-CA02-45FF-B7A4-D5AC5008349A}] (...) -- D:\Autorun.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{70D1B07E-150E-44A9-AF38-23C2D7FCAD5A}] (...) -- D:\Autorun.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{71220B54-2BB3-4285-8E40-8E4837A533C4}] (...) -- C:\users\user\Desktop\Nouveau dossier\Les Chevaliers Baphomet 3 - Le Manuscrit de Voynich\Crack\bs3pc.exe (.not file.) [0]
[MD5.B28CD6E930E549629A7C303022311651] [APT] [{7176AE84-DA98-48F7-93BD-3F513BE9A2C5}] (...) -- C:\Program Files\THQ\Revolution Software Ltd\Broken Sword The Angel of Death\bs4pc.exe [7630848]
[MD5.00000000000000000000000000000000] [APT] [{71EFE23C-798A-41B3-A9E2-1740B3C79B84}] (...) -- D:\Autorun.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{751026F2-FD94-433D-A81B-FB85028C4ABF}] (...) -- C:\users\user\Desktop\sp45308.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{7AD524F2-F2FC-4F5F-9833-7A2FA9881B6B}] (...) -- D:\autorun.exe (.not file.) [0]
[MD5.6AF832996C93DE62D23B28D28EBE941C] [APT] [{7BF1ACF1-D360-4619-A200-48D2369ADE0A}] (...) -- C:\Program Files (x86)\THQ\Les Chevaliers de Baphomet - Le Manuscrit de Voynich\bs3pc.exe [3107593]
[MD5.00000000000000000000000000000000] [APT] [{7CF72B2F-2C12-4763-9E8C-3E4779172F2E}] (...) -- C:\users\user\Desktop\ISO\bapho\baphomet l'ombre\SETUP.exe (.not file.) [0]
[MD5.2D81626783A4C50A737491FFDA18DC0D] [APT] [{7DCB5CD0-C5E0-4375-AC4A-102F0D70353E}] (.Related Designs.) -- C:\users\user\Desktop\ANNO 2070 (2)\Anno.2070.Update.v1.05-RELOADED\Crack\Anno5.exe [51797504]
[MD5.00000000000000000000000000000000] [APT] [{7FE98447-B044-442A-A20A-B8640D965593}] (...) -- C:\users\user\Desktop\sp45308.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{84F70946-2423-4C56-95F2-4C43D0FADAF6}] (...) -- D:\Autorun.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{8747DEC9-0075-4C05-BA9A-A138DAC653F2}] (...) -- C:\users\user\Desktop\wmp11-windowsxp-x86-FR-FR.exe (.not file.) [0]
[MD5.2D81626783A4C50A737491FFDA18DC0D] [APT] [{87645894-E8CE-4A05-BB56-111FCAA19E05}] (.Related Designs.) -- C:\users\user\Desktop\ANNO 2070 (2)\Anno.2070.Update.v1.05-RELOADED\Crack\Anno5.exe [51797504]
[MD5.2D81626783A4C50A737491FFDA18DC0D] [APT] [{87C1841F-FC56-4245-A62B-F1D063C1553C}] (.Related Designs.) -- C:\users\user\Desktop\ANNO 2070 (2)\Anno.2070.Update.v1.05-RELOADED\Crack\Anno5.exe [51797504]
[MD5.00000000000000000000000000000000] [APT] [{894787EC-D41F-43F0-808D-788830D195C7}] (...) -- F:\Autorun.exe (.not file.) [0]
[MD5.FF558E4D2093CD517BC6DDFC64D8969A] [APT] [{8BDB1E43-52D6-4E21-926C-A2C2D8921B72}] (.Related Designs.) -- C:\users\user\Desktop\Crack\anno5.exe [53209600]
[MD5.00000000000000000000000000000000] [APT] [{8CCBF158-BC73-4DA7-BF39-77B115CB76AD}] (...) -- C:\users\user\Downloads\wmp11-windowsxp-x64-enu.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{8D08E9B1-FC53-48CD-B538-A92DB6104EEB}] (...) -- C:\users\user\Desktop\Nouveau dossier\Les Chevaliers Baphomet 3 - Le Manuscrit de Voynich\Crack\bs3pc.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{8E3948F5-73C5-4675-A6D3-D67EF54B6285}] (...) -- C:\users\user\Desktop\SCUMM\BAPHOMET 1\CLUSTERS\BrokenSword2.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{90B2F156-91C6-4D79-AAE0-681CD3CA0ABE}] (...) -- C:\users\user\Desktop\sp46504.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{95441EAD-9552-438B-816A-ACA15685C3E6}] (...) -- C:\users\user\Desktop\kav14.0.0.4651fr-fr(1).exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{9BCDA8C6-496C-4D3C-BDCC-CF6D79ECEBDD}] (...) -- D:\autorun.exe (.not file.) [0]
[MD5.B28CD6E930E549629A7C303022311651] [APT] [{9CCB93B3-8B4B-4D32-AB1D-6C5C0FE3C077}] (...) -- C:\Program Files\THQ\Revolution Software Ltd\Broken Sword The Angel of Death\bs4pc.exe [7630848]
[MD5.B28CD6E930E549629A7C303022311651] [APT] [{9F90B23A-8A04-455C-B1ED-1C8F65700F6A}] (...) -- C:\Program Files\THQ\Revolution Software Ltd\Broken Sword The Angel of Death\bs4pc.exe [7630848]
[MD5.00000000000000000000000000000000] [APT] [{A01E6F7D-1106-4A46-B053-CADDF33B2915}] (...) -- C:\users\user\Desktop\kav14.0.0.4651fr-fr(1).exe (.not file.) [0]
[MD5.6AF832996C93DE62D23B28D28EBE941C] [APT] [{A06F063D-DCE9-4106-9EC2-394BFF43C46E}] (...) -- C:\Program Files (x86)\THQ\Les Chevaliers de Baphomet - Le Manuscrit de Voynich\bs3pc.exe [3107593]
[MD5.00000000000000000000000000000000] [APT] [{A413A927-9792-44AA-A718-16A29319C904}] (...) -- D:\support\vcredist_x64.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{A51C9612-9C93-4197-BA3E-4AD6058C953B}] (...) -- C:\users\user\Desktop\Nouveau dossier\Les Chevaliers Baphomet 3 - Le Manuscrit de Voynich\Crack\bs3pc.exe (.not file.) [0]
[MD5.2D81626783A4C50A737491FFDA18DC0D] [APT] [{A61DB97E-B6EB-4878-B14B-636B94BB6740}] (.Related Designs.) -- C:\users\user\Desktop\ANNO 2070 (2)\Anno.2070.Update.v1.05-RELOADED\Crack\Anno5.exe [51797504]
[MD5.00000000000000000000000000000000] [APT] [{A691372A-1CDD-465B-8277-CDC15B323A22}] (...) -- C:\users\user\Desktop\Sims3_1.67.2.024002_from_1.66.2.024002.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{A726DF0E-3573-4FC0-9C05-ACE6D3BA97E3}] (...) -- C:\users\user\Desktop\Nouveau dossier\Les Chevaliers Baphomet 3 - Le Manuscrit de Voynich\Crack\bs3pc.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{A9E5AF0A-52E3-4C99-9829-A8FD7E74C70D}] (...) -- D:\Autopatcher.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{AB705607-D64F-4118-847E-13F5AC0F5520}] (...) -- D:\Autopatcher.exe (.not file.) [0]
[MD5.2D81626783A4C50A737491FFDA18DC0D] [APT] [{ABD7E560-3453-45EA-A2D0-287D45511771}] (.Related Designs.) -- C:\users\user\Desktop\ANNO 2070 (2)\Anno.2070.Update.v1.05-RELOADED\Crack\Anno5.exe [51797504]
[MD5.00000000000000000000000000000000] [APT] [{AC2F52E8-4C73-4087-851E-27A0F30C392F}] (...) -- C:\Program Files (x86)\Broken Age\_CommonRedist\vcredist\2010\vcredist_x64.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{AF7D36C7-41A4-48E7-B4F5-38185FADCC4C}] (...) -- C:\users\user\Desktop\UplayInstaller.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{AFF4F1E4-5A0B-449B-BB73-59C481A2EAA7}] (...) -- D:\DirectX9\DXSETUP.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{B319F8F0-A1F1-4616-9BC2-3A3AF72268A5}] (...) -- C:\users\user\Desktop\Nouveau dossier\Les Chevaliers Baphomet 3 - Le Manuscrit de Voynich\Crack\bs3pc.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{B38A2135-2690-47DE-BB1A-1F1E6A67C034}] (...) -- C:\Program Files (x86)\Origin Games\The Sims 4 Create A Sim Demo\Game\Bin\TS4CAS.exe (.not file.) [0]
[MD5.6AF832996C93DE62D23B28D28EBE941C] [APT] [{B5ACE118-5CE3-4DC7-BFA6-33891F25A918}] (...) -- C:\Program Files (x86)\THQ\Les Chevaliers de Baphomet - Le Manuscrit de Voynich\bs3pc.exe [3107593]
[MD5.00000000000000000000000000000000] [APT] [{B5F77421-AC73-4EC8-847F-92784C2904E8}] (...) -- F:\setup.exe (.not file.) [0]
[MD5.6AF832996C93DE62D23B28D28EBE941C] [APT] [{B91803C4-454B-4D34-BB72-E9C8E0D8C0D3}] (...) -- C:\Program Files (x86)\THQ\Les Chevaliers de Baphomet - Le Manuscrit de Voynich\bs3pc.exe [3107593]
[MD5.00000000000000000000000000000000] [APT] [{BBCFA583-4068-4A17-A39A-DD16D44016E3}] (...) -- D:\Autorun.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{BBE42992-33A0-4C14-8018-8D54FA1E3254}] (...) -- C:\users\user\Desktop\sp45308.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{BDCF64F9-20E3-40C3-B847-E89EFAFD633A}] (...) -- C:\users\user\Desktop\PROWinx64.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{BF26850A-9E93-46D0-94E7-8A8D01D0B58C}] (...) -- D:\Autorun.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{CB8658BB-CA5E-4CB0-9854-76430CD74D91}] (...) -- C:\users\user\Desktop\Nouveau dossier\Les Chevaliers Baphomet 3 - Le Manuscrit de Voynich\Crack\bs3pc.exe (.not file.) [0]
[MD5.B28CD6E930E549629A7C303022311651] [APT] [{D00448D5-D37B-4B9E-92A2-9D425E37EFE6}] (...) -- C:\Program Files\THQ\Revolution Software Ltd\Broken Sword The Angel of Death\bs4pc.exe [7630848]
[MD5.00000000000000000000000000000000] [APT] [{D636E339-0F4D-4787-9CF8-B6EBF0C0240C}] (...) -- F:\SETUP.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{D64428F2-5000-4A2F-9575-0949CF358F85}] (...) -- C:\users\user\Desktop\SIMS 3\Autorun.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{D668FD83-CA6D-4B24-A5A4-BB02C56A16DE}] (...) -- C:\users\user\Downloads\wmp11-windowsxp-x64-enu.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{D98CC327-1863-4540-BE3D-A615B189A54E}] (...) -- D:\setup.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{DC1692A6-F8D7-4B47-ABB0-07C7DFCFEC4A}] (...) -- C:\users\user\Desktop\Nouveau dossier\Les Chevaliers Baphomet 3 - Le Manuscrit de Voynich\Crack\bs3pc.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{DE210DCD-F14B-4E50-A613-221AD1E3BAFD}] (...) -- D:\Autorun.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{DEC40C9F-450A-4C3A-BEA5-B416552BA75C}] (...) -- C:\users\user\Desktop\kav14.0.0.4651fr-fr(1).exe (.not file.) [0]
[MD5.FF558E4D2093CD517BC6DDFC64D8969A] [APT] [{DFE1EC94-538B-4A3F-8508-9A0945F5CE80}] (.Related Designs.) -- C:\users\user\Desktop\ANNO 2070 (2)\Anno.2070.Deep.Ocean.Crack.Only-RELOADED\Crack\anno5.exe [53209600]
[MD5.B28CD6E930E549629A7C303022311651] [APT] [{E15BD6B3-BC1C-4CDB-97A7-DA9A57DE11FE}] (...) -- C:\Program Files\THQ\Revolution Software Ltd\Broken Sword The Angel of Death\bs4pc.exe [7630848]
[MD5.00000000000000000000000000000000] [APT] [{E262D3CC-FCB0-4AFE-9308-911EBE37BC7A}] (...) -- F:\setup.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{E2E1099E-E5DC-46E6-9690-16A614EC900B}] (...) -- C:\users\user\Desktop\Nouveau dossier\Les Chevaliers Baphomet 3 - Le Manuscrit de Voynich\Crack\bs3pc.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{E38B4611-F55E-44DD-851E-A00ED761457D}] (...) -- C:\users\user\Desktop\Nouveau dossier\Les Chevaliers Baphomet 3 - Le Manuscrit de Voynich\Crack\bs3pc.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{E59F5248-4716-4515-9C87-AE70778601D9}] (...) -- D:\autorun.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{E6435FA5-9A23-4C22-B416-E53D5AA65EF6}] (...) -- D:\Autorun.exe (.not file.) [0]
[MD5.E909EBA4C24F2A24EDAA33C550B01686] [APT] [{E6729989-BA58-4A82-85E0-A00173F7D3E3}] (.Related Designs Software.) -- C:\users\user\Desktop\ANNO 2070 (2)\Anno.2070.Update.v1.05-RELOADED\Update\Anno2070_offlinepatcher_1_05.exe [827207456]
[MD5.00000000000000000000000000000000] [APT] [{E7E358E6-6C73-4902-A757-E37B50132D63}] (...) -- D:\Autorun.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{E8A3FB67-8A17-4080-9C56-FE4F440248A4}] (...) -- C:\users\user\Desktop\wmp11-windowsxp-x86-FR-FR.exe (.not file.) [0]
[MD5.FF558E4D2093CD517BC6DDFC64D8969A] [APT] [{EB7861A9-A602-4BFB-9A33-EFA5650BD528}] (.Related Designs.) -- C:\users\user\Desktop\Crack\anno5.exe [53209600]
[MD5.B28CD6E930E549629A7C303022311651] [APT] [{EBE91C24-3B9D-4A38-8F53-F93983D0573A}] (...) -- C:\Program Files\THQ\Revolution Software Ltd\Broken Sword The Angel of Death\bs4pc.exe [7630848]
[MD5.00000000000000000000000000000000] [APT] [{F0AB674B-9AD3-4995-B4EE-C96780A7F16E}] (...) -- D:\setup.exe (.not file.) [0]
[MD5.FF558E4D2093CD517BC6DDFC64D8969A] [APT] [{F418CE0A-D782-4E59-8DF1-D0824637736E}] (.Related Designs.) -- C:\users\user\Desktop\ANNO 2070 (2)\Anno.2070.Deep.Ocean.Crack.Only-RELOADED\Crack\anno5.exe [53209600]
[MD5.00000000000000000000000000000000] [APT] [{F498B2EE-D0DE-46A8-AA3D-B1DA92EFBA9F}] (...) -- C:\users\user\Desktop\BAPHOMET\Acrobat Reader Installer\French\rp505fra.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{F63F76F3-B246-4B5A-A50C-6DFB5C4FEE18}] (...) -- C:\users\user\Desktop\Nouveau dossier\Les Chevaliers Baphomet 3 - Le Manuscrit de Voynich\Crack\bs3pc.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{F6CD4D75-D25F-4F96-A684-DBD105AD661E}] (...) -- F:\setup.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{F7100BF7-C165-4142-951B-0820DC208E8C}] (...) -- C:\users\user\Desktop\wmp11-windowsxp-x86-FR-FR.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{FA04F1C0-E70C-4645-86D0-8370A438CA6A}] (...) -- C:\users\user\Desktop\sp54929.exe (.not file.) [0]
[MD5.2D81626783A4C50A737491FFDA18DC0D] [APT] [{FB8BEC1B-0EA2-4855-B406-04EBE823D966}] (.Related Designs.) -- C:\users\user\Desktop\ANNO 2070 (2)\Anno.2070.Update.v1.05-RELOADED\Crack\Anno5.exe [51797504]
[MD5.00000000000000000000000000000000] [APT] [{FC9C8A60-6649-42A6-9ADB-142551ED2111}] (...) -- C:\users\user\Desktop\wmp11-windowsxp-x86-FR-FR.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{FFD4CCE5-CA47-4C5C-ABA0-70DC1924D174}] (...) -- C:\ProgramData\Kaspersky Lab Setup Files\setup.exe (.not file.) [0]
O39 - APT: - (..) -- C:\Windows\System32\Tasks\Adobe Flash Player Updater [1002]
~ Scheduled Task: 234 Legitimates Filtered in 01mn 52s
---\\ Pilotes lancés au démarrage du système (O41)
O41 - Driver: (6579638drv) . (...) - C:\Windows\System32\DRIVERS\6579638drv.sys
~ Drivers: 81 Legitimates Filtered in 00mn 04s
---\\ Logiciels installés (O42)
O42 - Logiciel: Broken Sword 5 - (.Revolution Software Ltd.) [HKLM][64Bits] -- Broken Sword 5_is1
~ Logic: 27 Legitimates Filtered in 00mn 01s
---\\ HKCU & HKLM Software Keys
[HKLM\Software\CoolPic] =>Adware.Incredibar
[HKLM\Software\Wow6432Node\ADBlock]
[HKLM\Software\Wow6432Node\CoolPic] =>Adware.Incredibar
[HKLM\Software\Wow6432Node\iRobinHoodInstall] =>Toolbar.iRobinHood
~ Key Software: 323 Legitimates Filtered in 00mn 01s
---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 28/06/2014 - 19:57:05 - [] ----D C:\Program Files (x86)\Broken Sword 5
O43 - CFD: 10/08/2014 - 09:47:55 - [0] ----D C:\Program Files (x86)\PC Accelerator
O43 - CFD: 28/03/2013 - 21:49:38 - [] ----D C:\ProgramData\InstallMate =>PUP.Tarma
O43 - CFD: 24/05/2013 - 13:15:05 - [] ----D C:\ProgramData\{BDDB56DE-AE4E-48A2-B856-FB60C8498453}
O43 - CFD: 20/07/2013 - 11:03:17 - [] ----D C:\Users\user\AppData\Roaming\Millennia
~ Program Folder: 218 Legitimates Filtered in 00mn 01s
---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.E15B492959DFABC12AA4CA070B38F21A] - 10/08/2014 - 16:09:32 ---A- . (...) -- C:\Windows\System32\binkw32.dll [286208]
O44 - LFC:[MD5.B55FA6AD6C4A74AFC85433490E97C0DE] - 10/08/2014 - 18:56:20 ---A- . (...) -- C:\Windows\System32\nvcoproc.bin [3826628]
O44 - LFC:[MD5.90CFC5C683AC1A1B8CA50F8BC2F5DC00] - 11/08/2014 - 05:59:55 ---A- . (...) -- C:\Windows\System32\bcmwlrc.dll [6656]
O44 - LFC:[MD5.FF70BDAC6025B820857C7FE71D961D73] - 11/08/2014 - 06:00:38 ---A- . (...) -- C:\Windows\System32\oem56.inf [707378]
O44 - LFC:[MD5.E053D584736C0DF787AC7309BFC3C8F7] - 11/08/2014 - 18:41:27 ---A- . (...) -- C:\Windows\caesar3.ico [4398]
O44 - LFC:[MD5.CE13F6EC1BA67718265CAA0EC2A5D44D] - 11/08/2014 - 18:49:27 ---A- . (...) -- C:\Windows\SIERRA.INI [375]
O44 - LFC:[MD5.A876A5AD236C02CA841A1FE99A207ADE] - 11/08/2014 - 18:49:27 ---A- . (...) -- C:\Windows\zeusicon.ico [766]
O44 - LFC:[MD5.B53A2AE5232227858FDBC129C261521A] - 15/08/2014 - 10:41:08 ---A- . (...) -- C:\Windows\DPINST.LOG [31580]
O44 - LFC:[MD5.01DF376DEA63A0E2B288054B1DA144E4] - 16/08/2014 - 15:08:10 ---A- . (...) -- C:\MBAM.txt [1232]
O44 - LFC:[MD5.72F2D357120F95C1E725C22915FE95E1] - 16/08/2014 - 16:06:11 ---A- . (...) -- C:\Windows\WORDPAD.INI [193]
O44 - LFC:[MD5.9033609892E38D32C7D8B523C49D965F] - 17/08/2014 - 09:44:01 ---A- . (...) -- C:\Windows\System32\umstartup000.etl [43008]
O44 - LFC:[MD5.9423AE89C079A2294B423B6F053332DA] - 17/08/2014 - 09:44:44 ---A- . (...) -- C:\Windows\System32\umstartup.etl [6144]
~ Files: 106 Legitimates Filtered in 00mn 11s
---\\ Clé de registre Shell MountPoints2 (MPKS) (O51)
O51 - MPSK:{18e630ff-7b60-11e2-9c69-acbea377e3d5}\AutoRun\command. (...) -- F:\Autorun.exe (.not file.)
O51 - MPSK:{a48a209c-6546-11e2-b955-806e6f6e6963}\AutoRun\command. (...) -- D:\Autorun.exe (.not file.)
O51 - MPSK:{b667b912-a113-11e3-9e20-e63a641beda4}\AutoRun\command. (...) -- I:\Autorun.exe (.not file.)
O51 - MPSK:{cef114e3-d680-11e2-a4b6-c56f779d0dbc}\AutoRun\command. (...) -- H:\Autorun.exe (.not file.)
O51 - MPSK:{e9da88b7-8804-11e2-8e82-c91a8acd04a5}\AutoRun\command. (...) -- G:\Autorun.exe (.not file.)
~ Keys: Scanned in 00mn 00s
---\\ Enumération des clés de registre PoliciesSystem (MWPS) (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
~ MWPS: 16 Legitimates Filtered in 00mn 00s
---\\ Enumération des clés de registre PoliciesExplorer (MWPE) (O56)
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1
~ MWPE Keys: 4 Legitimates Filtered in 00mn 00s
---\\ Liste des pilotes du système (SDL) (O58)
O58 - SDL:16/12/2013 - 17:34:44 ---A- . (...) -- C:\Windows\System32\Drivers\6579638drv.sys [532056]
O58 - SDL:02/05/2014 - 17:53:07 ---A- . (...) -- C:\Windows\System32\Drivers\atksgt.sys [314016]
O58 - SDL:14/07/2010 - 09:42:26 ---A- . (.Windows (R) Win 7 DDK provider - CyberLink WebCam Virtual Driver.) -- C:\Windows\System32\Drivers\clwvd.sys [32880]
O58 - SDL:20/02/2013 - 14:19:45 ---A- . (.DT Soft Ltd - DAEMON Tools Virtual Bus Driver.) -- C:\Windows\System32\Drivers\dtsoftbus01.sys [283200]
O58 - SDL:14/07/2009 - 02:47:48 ---A- . (.Emulex - Storport Miniport Driver for LightPulse HBAs.) -- C:\Windows\System32\Drivers\elxstor.sys [530496]
O58 - SDL:28/04/2008 - 09:55:32 ---A- . (.ENE TECHNOLOGY INC. - ENE CIR Driver for eHome(64).) -- C:\Windows\System32\Drivers\enecir.sys [64000]
O58 - SDL:10/06/2009 - 21:31:59 ---A- . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for eHome.) -- C:\Windows\System32\Drivers\hcw85cir.sys [31232]
O58 - SDL:02/05/2014 - 17:53:06 ---A- . (...) -- C:\Windows\System32\Drivers\lirsgt.sys [43680]
O58 - SDL:14/07/2009 - 02:45:55 ---A- . (.Promise Technology - Promise SuperTrak EX Series Driver for Windows.) -- C:\Windows\System32\Drivers\stexstor.sys [24656]
O58 - SDL:23/03/2010 - 22:53:06 ---A- . (.IDT, Inc. - IDT PC Audio.) -- C:\Windows\System32\Drivers\stwrt64.sys [505344]
O58 - SDL:13/12/2012 - 12:50:36 ---A- . (.Apple, Inc. - Apple Mobile Device USB Driver.) -- C:\Windows\System32\Drivers\usbaapl64.sys [54784]
O58 - SDL:24/03/2005 - 09:59:22 ---A- . (.Integrated Technology Express Technology In - ITE Mass Storage Driver.) -- C:\Windows\SysWOW64\drivers\ITEU.sys [24284]
~ Drivers: 82 Legitimates Filtered in 00mn 06s
---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61)
O61 - LFC: 10/08/2014 - 11:18:28 ---A- . (.ss.) -- C:\Users\user\Documents\PingIPscan318.exe [40960]
O61 - LFC: 15/08/2014 - 11:18:26 ---A- . (...) -- C:\Users\user\Desktop\PILOTE DRIVER\PROWinx64.exe [34811904]
O61 - LFC: 16/08/2014 - 11:18:21 ---A- . (...) -- C:\Users\user\Desktop\adwcleaner_3.306.exe [1361203]
O61 - LFC: 16/08/2014 - 11:18:30 ---A- . (...) -- C:\Users\user\Downloads\adwcleaner_3.306.exe [1361203]
~ 104 Fichiers temporaires (Temporary files)
~ 11 Fichiers cookies (Cookies files)
~ Files: 31 Legitimates Filtered in 00mn 49s
---\\ Liste des outils de désinfection (LATC) (O63)
O63 - Logiciel: ZHPDiag 2014 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 =>.Nicolas Coolman
~ ADS: Scanned in 00mn 00s
---\\ Liste les services legacy du registre (LALS) (O64)
O64 - Services: CurCS - 02/05/2014 - C:\Windows\System32\DRIVERS\atksgt.sys (atksgt) .(...) - LEGACY_ATKSGT
~ Legacy: 95 Legitimates Filtered in 00mn 00s
---\\ Menu de démarrage Internet (SMI) (O68)
O68 - StartMenuInternet:
O68 - StartMenuInternet:
~ Keys: Scanned in 00mn 00s
---\\ Recherche d'infection sur les navigateurs internet (SBI) (O69)
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - http://www.bing.com
O69 - SBI: SearchScopes [HKCU] {D15D00B1-D346-4BDC-A62D-AAFC4CE13DD0} - (Mysearchdial) - http://start.mysearchdial.com =>Adware.MyWebSearch
O69 - SBI: SearchScopes [HKUS\.DEFAULT] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - http://www.bing.com
O69 - SBI: SearchScopes [HKUS\S-1-5-18] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - http://www.bing.com
~ Keys: Scanned in 00mn 00s
---\\ Enumère les fichiers Crack & Keygen (CKF) (O82)
C:\Users\user\Desktop\ANNO 2070 (2)\Anno.2070.Deep.Ocean.Crack.Only-RELOADED\Anno 2070 Keygen\Anno 2070 Keygen.rar =>.Crack,Keygen
C:\Users\user\Desktop\ANNO 2070 (2)\Anno.2070.Deep.Ocean.Crack.Only-RELOADED\Anno 2070 Keygen\Anno 2070 Keygen.rar =>.Crack,Keygen
~ Files: Scanned in 01mn 18s
---\\ Recherche particulière à la racine du système (SPRF) (O84)
[MD5.689CB9124B709EE1647D01B7687AFDFC] [SPRF][30/08/2013] (...) -- C:\ProgramData\ntuser.dat [262144]
[MD5.59BEE71E552AFA5FD3E3DE48075EAA6F] [SPRF][16/08/2014] (...) -- C:\Users\user\Desktop\adwcleaner_3.306.exe [1361203]
[MD5.7CC536568A80618B8A726F3E2648F3BF] [SPRF][22/03/2011] (...) -- C:\Users\user\Desktop\rld-tsmk.exe [8192]
[MD5.5170638BD95B39C87DFC0DDC82A9E5DB] [SPRF][17/09/2013] (.Pas de propriétaire - Sims 3 Starter Application.) -- C:\Users\user\Desktop\TS3EP11.exe [30016]
~ Files: 8 Legitimates Filtered in 00mn 00s
---\\ Liste des exceptions du parefeu (FirewallRules) (O87)
O87 - FAEL: "{39FBDC2A-C916-4C72-A8B5-445E9C3033C2}" | In - None - P6 - TRUE | .(.BitTorrent Inc. - µTorrent.) -- C:\Users\user\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent
O87 - FAEL: "{92465936-F084-4EB3-906E-F8E3B46B8AFA}" | In - None - P17 - TRUE | .(.BitTorrent Inc. - µTorrent.) -- C:\Users\user\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent
O87 - FAEL: "{49EB8806-C318-42F2-9E3E-BEF60C4335F6}" | In - None - P6 - TRUE | .(.BitTorrent Inc. - µTorrent.) -- C:\Users\user\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent
O87 - FAEL: "{C87BD844-2E93-4573-ACBB-CF312D51884A}" | In - None - P17 - TRUE | .(.BitTorrent Inc. - µTorrent.) -- C:\Users\user\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent
~ Firewall: 4 Legitimates Filtered in 00mn 02s
---\\ Recherche de clés de registre Tracing (O100)
HKLM\SOFTWARE\Microsoft\Tracing\BackupStack_RASAPI32 =>PUP.MyPCBackup
HKLM\SOFTWARE\Microsoft\Tracing\BackupStack_RASMANCS =>PUP.MyPCBackup
~ BTK: 109 Legitimates Filtered in 00mn 00s
---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)
SS - | Demand 14/07/2014 262320 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
SS - | Demand 04/04/2005 69632 | (IDriverT) . (.Macrovision Corporation.) - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
SS - | Demand 01/08/2014 641352 | (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe
SR - | Auto 21/12/2013 65432 | (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
SR - | Auto 03/03/2009 89600 | (AESTFilters) . (.Andrea Electronics Corporation.) - C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_70dacb64382a61a7\AESTSr64.exe
SR - | Auto 12/06/2014 43336 | (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
SR - | Auto 16/12/2013 356128 | (AVP) . (.Kaspersky Lab ZAO.) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\avp.exe
SR - | Auto 30/08/2011 462184 | (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe
SR - | Auto 27/03/2013 185688 | (Garmin Core Update Service) . (.Garmin Ltd or its subsidiaries.) - C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe
SR - | Auto 13/05/2011 30520 | (hpsrv) . (.Hewlett-Packard Company.) - C:\Windows\System32\Hpservice.exe
SR - | Auto 07/07/2014 72992 | (HPSupportSolutionsFrameworkService) . (.Hewlett-Packard Company.) - C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe
SR - | Auto 21/11/2013 15720 | (IAStorDataMgrSvc) . (.Intel Corporation.) - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
SR - | Auto 14/05/2013 140936 | (IJPLMSVC) . (...) - C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.exe
SR - | Auto 24/06/2014 2820424 | (MaConfigAgent) . (.CybelSoft.) - C:\Program Files\ma-config.com\MaConfigAgent.exe
SR - | Auto 12/05/2014 1809720 | (MBAMScheduler) . (.Malwarebytes Corporation.) - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
SR - | Auto 12/05/2014 860472 | (MBAMService) . (.Malwarebytes Corporation.) - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
SR - | Auto 25/07/2014 1720608 | (NvNetworkService) . (.NVIDIA Corporation.) - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
SR - | Auto 25/07/2014 18956064 | (NvStreamSvc) . (.NVIDIA Corporation.) - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
SR - | Auto 02/07/2014 935368 | (nvsvc) . (.NVIDIA Corporation.) - C:\Windows\system32\nvvsvc.exe
SR - | Auto 23/03/2010 247808 | (STacSV) . (.IDT, Inc..) - C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_70dacb64382a61a7\STacSV64.exe
SR - | Auto 14/07/2009 27136 | C:\Program Files (x86)\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
SR - | Demand 10/07/1658 0 | (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe =>.Microsoft Corporation
SR - | Auto 14/07/2009 27136 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
~ Services: Scanned in 00mn 11s
---\\ Recherche d'infection sur le Master Boot Record (MBR)(O80)
Run by user at 17/08/2014 11:20:16
~ OS 64 not supported by MBR tool
~ MBR: 0 Legitimates Filtered in 00mn 00s
---\\ Recherche d'infection sur le Master Boot Record (MBRCheck)(O80)
Written by ad13, http://ad13.geekstog
Run by user at 17/08/2014 11:20:18
********* Dump file Name *********
C:\PhysicalDisk0_MBR.bin
~ MBR: Scanned in 00mn 02s
---\\ Scan Additionnel (O88)
Database Version : 13026 - (13/08/2014)
Clés trouvées (Keys found) : 3
Valeurs trouvées (Values found) : 0
Dossiers trouvés (Folders found) : 1
Fichiers trouvés (Files found) : 3
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375] =>PUP.Tarma
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5] =>PUP.Tarma
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CA0054A5AB3EFFE4CB5660E44A1E7DCC] =>Adware.Boxore^
C:\ProgramData\InstallMate =>PUP.Tarma^
[HKLM\Software\CoolPic] =>Adware.Incredibar^
[HKLM\Software\Wow6432Node\CoolPic] =>Adware.Incredibar^
[HKLM\Software\Wow6432Node\iRobinHoodInstall] =>Toolbar.iRobinHood^
~ Additionnel Scan: 336453 Items scanned in 00mn 23s
---\\ Informations complémentaires sur les modules
~ http://nicolascoolman.fr/r5-internet-explorer-proxy-management-iepm/ =>.Internet Explorer, Proxy Management (R5)
~ http://nicolascoolman.fr/o3-internet-explorer-toolbars/ =>.Internet Explorer Toolbars (O3)
~ http://nicolascoolman.fr/o4-applications-demarrees-par-le-registre/ =>.Applications lancées au démarrage du système (O4)
~ http://nicolascoolman.fr/o51-mountpoints2-shell-key-mpsk/ =>.Clé de registre Shell MountPoints2 (MPKS) (O51)
~ AMI: 4 Legitimates Filtered in 00mn 00s
---\\ Récapitulatif des détections trouvées sur votre station
http://nicolascoolman.fr/adware-incredibar =>Adware.Incredibar
http://nicolascoolman.fr/pup-tarma =>PUP.Tarma
http://nicolascoolman.fr/adware-mywebsearch =>Adware.MyWebSearch
http://nicolascoolman.fr/pup-mypcbackup =>PUP.MyPCBackup
http://nicolascoolman.fr/adware-boxore =>Adware.Boxore
~ MSI: 5 link(s) detected in 00mn 00s
~ 1237 Legitimates filtered by white list
End of the scan (619 lines in 08mn 03s)(2)