Publicité
Publicité
Format du document : text/plain
Prévisualisation
~ Rapport de ZHPDiag v2014.12.27.179 - Nicolas Coolman (27/12/2014)
~ Lancé par GUILLOT Gérard (02/01/2015 10:54:51)
~ Facebook : https://www.facebook.com/nicolascoolman1
~ Adresse du Forum http://forum.nicolascoolman.fr
~ Traduit par Nicolas Coolman
~ Etat de la version : Nouvelle version disponible
~ Liste blanche : Activée par le programme
~ Elévation des Privilèges : OK
~ User Account Control (UAC): Not Found
---\\ Navigateurs Internet
MSIE: Internet Explorer v11.0.9600.17501
GCIE: Google Chrome v38.0.2125.104 (Defaut)
---\\ Informations sur les produits Windows
~ Langage: Français
Microsoft Windows XP, 64-bit Service Pack 2 (Build 2600)
Windows Server License Manager Script : OK
---\\ Logiciels de protection du système
AVG 2015 v15.0.5577
Malwarebytes Anti-Malware version 2.0.4.1028
---\\ Logiciels d'optimisation du système
---\\ Logiciels de partage PeerToPeer
---\\ Surveillance de Logiciels
Adobe Flash Player 15 Plugin
Adobe Reader XI
---\\ Informations sur le système
~ Processor: Intel64 Family 6 Model 30 Stepping 5, GenuineIntel
~ Operating System: 64 Bits
Boot mode: Normal (Normal boot)
Total RAM: 8151 MB (70% free)
System Restore: Activé (Enable)
System drive C: has 1211 GB (87%) free of 1386 GB
---\\ Mode de connexion au système
~ Computer Name: BUREAU
~ User Name: GUILLOT Gérard
~ All Users Names: VERONIQUE, UpdatusUser, HomeGroupUser$, GUILLOT Gérard, Administrateur,
~ Unselected Option: O45,O61,O62,O65,O66,O80,O82,O89
Logged in as Administrator
---\\ Variables d'environnement
~ System Unit : C:\
~ %AppZHP% : C:\Users\GUILLOT Gérard\AppData\Roaming\ZHP\
~ %AppData% : C:\Users\GUILLOT Gérard\AppData\Roaming\
~ %Desktop% : C:\Users\Public\Documents\Desktop\
~ %Favorites% : C:\Users\GUILLOT Gérard\Favorites\
~ %LocalAppData% : C:\Users\GUILLOT Gérard\AppData\Local\
~ %StartMenu% : C:\Users\GUILLOT Gérard\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\
---\\ Enumération des unités disques
C: Hard drive, Flash drive, Thumb drive (Free 1211 Go of 1386 Go)
D: Hard drive, Flash drive, Thumb drive (Free 3 Go of 12 Go)
E: CD-ROM drive (Free 4 Go of 4 Go)
G: Floppy drive, Flash card reader, USB Key (Not Inserted)
H: Floppy drive, Flash card reader, USB Key (Not Inserted)
I: Floppy drive, Flash card reader, USB Key (Not Inserted)
J: Floppy drive, Flash card reader, USB Key (Not Inserted)
---\\ Etat du Centre de Sécurité Windows
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : Out Of Date
~ Security Center: 49 Legitimates Filtered in 00mn 00s
---\\ Recherche particulière de fichiers génériques
[MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorateur Windows.) (.25/02/2011 - 07:19:30.) -- C:\Windows\Explorer.exe [2871808]
[MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 - 02:39:52.) -- C:\Windows\System32\Wininit.exe [129024]
[MD5.4AF089160FE082E5EA5C4AA72782DCA2] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.22/11/2014 - 02:28:21.) -- C:\Windows\System32\wininet.dll [2358272]
[MD5.8CEBD9D0A0A879CDE9F36F4383B7CAEA] - (.Microsoft Corporation - Application d’ouverture de session Windows.) (.17/07/2014 - 03:07:24.) -- C:\Windows\System32\Winlogon.exe [455168]
[MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Bibliothèque de licences.) (.20/11/2010 - 14:27:26.) -- C:\Windows\System32\sppcomapi.dll [232448]
[MD5.FA886682CFC5D36718D3E436AACF10B9] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.30/05/2014 - 07:45:52.) -- C:\Windows\system32\Drivers\AFD.sys [497152]
[MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 - 02:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128]
[MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/07/2009 - 00:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160]
[MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.20/11/2010 - 10:19:21.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456]
[MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.20/11/2010 - 10:26:32.) -- C:\Windows\system32\Drivers\DfsC.sys [102400]
[MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.20/11/2010 - 11:43:43.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368]
[MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) (.14/07/2009 - 00:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472]
[MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.14/07/2009 - 01:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224]
[MD5.A5D9106A73DC88564C825D317CAC68AC] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.27/04/2011 - 03:40:40.) -- C:\Windows\system32\Drivers\MRxSmb.sys [158208]
[MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) (.20/11/2010 - 10:23:20.) -- C:\Windows\system32\Drivers\netBT.sys [261632]
[MD5.1A29A59A4C5BA6F8C85062A613B7E2B2] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.24/01/2014 - 03:37:55.) -- C:\Windows\system32\Drivers\ntfs.sys [1684928]
[MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/07/2009 - 01:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280]
[MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.20/11/2010 - 11:52:35.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [129536]
[MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.14/07/2009 - 01:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184]
[MD5.70988118145F5F10EF24720B97F35F65] - (.Microsoft Corporation - TDI Translation Driver.) (.11/11/2014 - 02:46:26.) -- C:\Windows\system32\Drivers\tdx.sys [119296]
[MD5.0D08D2F3B3FF84E433346669B5E0F639] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.20/11/2010 - 14:34:02.) -- C:\Windows\system32\Drivers\volsnap.sys [295808]
~ Generic Processes: Scanned in 00mn 00s
---\\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 1/17
~ Mes musiques (My Musics) : 1/14
~ Mes Favoris (My Favorites) : 1/33
~ Mes Documents (My Documents) : 2/372
~ Mon Bureau (My Desktop) : 1/1289
~ Menu demarrer (Programs) : 1/41
~ Hidden Files: Scanned in 00mn 03s
---\\ Processus lancés
[MD5.3C13F26A4766752314A5413038BD86B4] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe [7229752] [PID.2412]
[MD5.4FF9D0D5FEC26D9F2312A8C15CA59C8F] - (.Pas de propriétaire - Monitor LED Key.) -- C:\Program Files (x86)\Hewlett-Packard\HP MAINSTREAM KEYBOARD\ModLEDKey.exe [53248] [PID.2972]
[MD5.3D2496BCA132B08D9B23856D65F30513] - (.Kaspersky Lab ZAO - Kaspersky Anti-Virus.) -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\avpui.exe [193128] [PID.3008]
[MD5.66275E52615AF9D2F18EB3442D00CFE3] - (.CyberLink - CyberLink MediaLibray Service.) -- c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe [210216] [PID.3324]
[MD5.B53D59915A356B06C1D7DE5B22B4177C] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [854344] [PID.4936]
[MD5.E47AC731D42B2452D4C0BF096DF3DD6E] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [8145408] [PID.4288]
~ Processes Running: Scanned in 00mn 00s
---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
C:\Users\GUILLOT Gérard\AppData\Local\Google\Chrome\User Data\Default\Preferences
---\\ Liste des dossiers d'extension Google Chrome
~ Google Lines Browser: 0 Legitimates Filtered in 00mn 00s
---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 0
~ Proxy management: Scanned in 00mn 00s
---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=C:\Windows\explorer.exe
~ Keys: Scanned in 00mn 00s
---\\ Hosts file redirection (O1)
~ Le fichier hôte est sain (The hosts file is clean) (60783)
~ Hosts File: Scanned in 01mn 02s
---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{40CA4970-E5EA-420C-9E4F-93E93E68525D}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{5FB2EFBB-2150-4F77-BC16-B5D8CD164799}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{5FB2EFBB-2150-4F77-BC16-B5D8CD164799}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{40CA4970-E5EA-420C-9E4F-93E93E68525D}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{5FB2EFBB-2150-4F77-BC16-B5D8CD164799}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS3\Services\Tcpip\..\{40CA4970-E5EA-420C-9E4F-93E93E68525D}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS3\Services\Tcpip\..\{5FB2EFBB-2150-4F77-BC16-B5D8CD164799}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
~ Domain: Scanned in 00mn 00s
---\\ Protocole additionnel (O18)
O18 - Handler: wlpg [64Bits] - Y . (...) --
O18 - Filter: text/xml [64Bits] - Y . (...) --
~ Protocole Additionnel: Scanned in 00mn 00s
---\\ Enumère les données de BootExecute (BEX) (O34)
O34 - HKLM BootExecute: (autocheck autochk /r \??\K:) - File not found
O34 - HKLM BootExecute: (autocheck autochk /r \??\K:) - File not found
~ BEX: 2 Legitimates Filtered in 00mn 00s
---\\ Tâches planifiées en automatique (O39)
[MD5.00000000000000000000000000000000] [APT] [GUILLOT G‚rard] (...) -- C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBCore.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [GUILLOT G‚rard 23 octobre 2011] (...) -- C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBCore.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [GUILLOT G‚rard Local Autobackup 5 4] (...) -- C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBCore.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [GUILLOT G‚rard Online Autobackup 5 4] (...) -- C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBCore.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [GUILLOT G‚rard10] (...) -- C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBCore.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [GUILLOT G‚rard11] (...) -- C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBCore.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [GUILLOT G‚rard12] (...) -- C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBCore.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [GUILLOT G‚rard13] (...) -- C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBCore.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [GUILLOT G‚rard2] (...) -- C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBCore.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [GUILLOT G‚rard3] (...) -- C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBCore.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [GUILLOT G‚rard4] (...) -- C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBCore.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [GUILLOT G‚rard5] (...) -- C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBCore.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [GUILLOT G‚rard6] (...) -- C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBCore.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [GUILLOT G‚rard7] (...) -- C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBCore.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [GUILLOT G‚rard8] (...) -- C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBCore.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [GUILLOT G‚rard9] (...) -- C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBCore.exe (.not file.) [0]
O39 - APT: - (..) -- C:\Windows\System32\Tasks\PCDRScheduledMaintenance [544]
~ Scheduled Task: 51 Legitimates Filtered in 00mn 08s
---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 29/12/2014 - 17:33:10 - [0] -SH-D C:\Users\GUILLOT Gérard\AppData\Local\EmieBrowserModeList
~ Program Folder: 347 Legitimates Filtered in 00mn 01s
---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.BD9C7DE7BCF46013697DA6F9965A3BC7] - 22/12/2014 - 22:46:05 ---A- . (...) -- C:\Windows\System32\persistent_q.db [1024]
O44 - LFC:[MD5.6D3AE0B25D0CBE103A30B9D596957624] - 22/12/2014 - 22:46:06 ---A- . (...) -- C:\Windows\System32\persistent_q.db-wal [3176]
O44 - LFC:[MD5.BB7DF04E1B0A2570657527A7E108AE23] - 24/12/2014 - 22:55:41 ---A- . (...) -- C:\Windows\System32\persistent_q.db-shm [32768]
~ Files: 24 Legitimates Filtered in 00mn 01s
---\\ Liste des pilotes du système (SDL) (O58)
O58 - SDL:08/12/2009 - 09:54:30 ---A- . (.Windows (R) Win 7 DDK provider - BulkUsb Driver.) -- C:\Windows\System32\Drivers\br_mcu2usb.sys [23552]
O58 - SDL:14/07/2009 - 02:47:48 ---A- . (.Emulex - Storport Miniport Driver for LightPulse HBAs.) -- C:\Windows\System32\Drivers\elxstor.sys [530496]
O58 - SDL:10/06/2009 - 21:31:59 ---A- . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for eHome.) -- C:\Windows\System32\Drivers\hcw85cir.sys [31232]
O58 - SDL:14/07/2009 - 02:45:55 ---A- . (.Promise Technology - Promise SuperTrak EX Series Driver for Windows.) -- C:\Windows\System32\Drivers\stexstor.sys [24656]
O58 - SDL:28/07/2014 - 13:52:00 ---A- . (.Apple, Inc. - Apple Mobile Device USB Driver.) -- C:\Windows\System32\Drivers\usbaapl64.sys [54784]
~ Drivers: 92 Legitimates Filtered in 00mn 01s
---\\ Liste des outils de désinfection (LATC) (O63)
O63 - Logiciel: ZHPDiag 2014 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 =>.Nicolas Coolman
O63 - Logiciel: ZHPFix 2014 - (.Nicolas Coolman.) [HKLM] -- ZHPFix_is1 =>.Nicolas Coolman
~ ADS: Scanned in 00mn 00s
---\\ Liste les services legacy du registre (LALS) (O64)
O64 - Services: CurCS - 11/04/1745 - C:\Windows\System32\DRIVERS\klkbdflt2.sys (klkbdflt2) .(...) - LEGACY_KLKBDFLT2
~ Legacy: 113 Legitimates Filtered in 00mn 00s
---\\ Associations Shell Spawning (O67)
O67 - Shell Spawning: <.html>[HKCU\..\open\Command] (.Not Key.)
~ FASS Keys: 11 Legitimates Filtered in 00mn 00s
---\\ Menu de démarrage Internet (SMI) (O68)
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Not Key.)
O68 - StartMenuInternet: <>[HKLM\..\Shell\open\Command] (.Not Key.)
~ Keys: Scanned in 00mn 00s
---\\ Recherche d'infection sur les navigateurs internet (SBI) (O69)
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (Bing) - http://www.bing.com
~ Keys: Scanned in 00mn 00s
---\\ Recherche particulière à la racine du système (SPRF) (O84)
[MD5.19B06F5C985DA6BEFCC0BB4FD0969744] [SPRF][08/12/2011] (...) -- C:\ProgramData\1323362800.bdinstall.bin [212253]
[MD5.5B785A562A306A04C45B4FFC0E89987B] [SPRF][13/10/2012] (...) -- C:\ProgramData\1350147259.bdinstall.bin [102621]
[MD5.83B552E5DD0E87FB96C521D97FD9A0D4] [SPRF][21/12/2013] (...) -- C:\ProgramData\1387635291.bdinstall.bin [135388]
[MD5.C15F216955106B4D4F2EED048F940E55] [SPRF][21/12/2013] (...) -- C:\ProgramData\1387635887.bdinstall.bin [62374]
[MD5.DDD67C9F3CD60ACB4F097ADC7DB65186] [SPRF][28/12/2013] (...) -- C:\ProgramData\1388227190.bdinstall.bin [649469]
[MD5.685C46C71D8422964D934D47F36439EE] [SPRF][21/11/2014] (...) -- C:\ProgramData\1416561110.bdinstall.bin [258569]
[MD5.0641A46F1E58529A42EAD4573A3A0861] [SPRF][14/09/2010] (...) -- C:\ProgramData\BDB9A30BD7.sys [8]
[MD5.A17BA058F5EDB59CBC00EE504F90E2F2] [SPRF][10/09/2011] (...) -- C:\ProgramData\bdinstall.bin [580593]
[MD5.6B5F3F4B905FCE3D41D3E7AFEF3A2389] [SPRF][09/04/2011] (...) -- C:\ProgramData\ezsidmv.dat [56]
[MD5.C4E1E6F37C228512A95A4542BCEDCDA4] [SPRF][22/09/2010] (...) -- C:\ProgramData\KGyGaAvL.sys [2828]
[MD5.FA71B88ED2846BC35FD5E595EAD18708] [SPRF][21/12/2014] (...) -- C:\ProgramData\ntuser.dat [262144]
~ Files: 11 Legitimates Filtered in 00mn 00s
---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)
SS - | Demand 14/07/2009 27136 | C:\Program Files (x86)\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
SR - | Auto 30/08/2014 234520 | (AVP15.0.1) . (.Kaspersky Lab ZAO.) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\avp.exe
SR - | Demand 14/07/2009 27136 | C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll (hpqcxs08) . (.Hewlett-Packard Co..) - C:\Windows\System32\svchost.exe
SR - | Auto 14/07/2009 27136 | C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll (hpqddsvc) . (.Hewlett-Packard Co..) - C:\Windows\System32\svchost.exe
SR - | Auto 14/07/2009 27136 | C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.dll (HPSLPSVC) . (.Hewlett-Packard Co..) - C:\Windows\System32\svchost.exe
SR - | Auto 21/11/2014 1871160 | (MBAMScheduler) . (.Malwarebytes Corporation.) - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
SR - | Auto 21/11/2014 969016 | (MBAMService) . (.Malwarebytes Corporation.) - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
SR - | Auto 24/11/2014 2604856 | (TuneUp.UtilitiesSvc) . (.AVG Technologies.) - C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe
~ Services: Scanned in 00mn 08s
---\\ Scan Additionnel (O88)
Database Version : 13026 - (27/12/2014)
Clés trouvées (Keys found) : 0
Valeurs trouvées (Values found) : 0
Dossiers trouvés (Folders found) : 0
Fichiers trouvés (Files found) : 0
~ Additionnel Scan: 505316 Items scanned in 01mn 34s
---\\ Informations complémentaires sur les modules
~ http://nicolascoolman.fr/r5-internet-explorer-proxy-management-iepm/ =>.Internet Explorer, Proxy Management (R5)
~ AMI: 1 Legitimates Filtered in 00mn 00s
~ 1133 Legitimates filtered by white list
End of the scan (313 lines in 03mn 48s)(0)
~ Lancé par GUILLOT Gérard (02/01/2015 10:54:51)
~ Facebook : https://www.facebook.com/nicolascoolman1
~ Adresse du Forum http://forum.nicolascoolman.fr
~ Traduit par Nicolas Coolman
~ Etat de la version : Nouvelle version disponible
~ Liste blanche : Activée par le programme
~ Elévation des Privilèges : OK
~ User Account Control (UAC): Not Found
---\\ Navigateurs Internet
MSIE: Internet Explorer v11.0.9600.17501
GCIE: Google Chrome v38.0.2125.104 (Defaut)
---\\ Informations sur les produits Windows
~ Langage: Français
Microsoft Windows XP, 64-bit Service Pack 2 (Build 2600)
Windows Server License Manager Script : OK
---\\ Logiciels de protection du système
AVG 2015 v15.0.5577
Malwarebytes Anti-Malware version 2.0.4.1028
---\\ Logiciels d'optimisation du système
---\\ Logiciels de partage PeerToPeer
---\\ Surveillance de Logiciels
Adobe Flash Player 15 Plugin
Adobe Reader XI
---\\ Informations sur le système
~ Processor: Intel64 Family 6 Model 30 Stepping 5, GenuineIntel
~ Operating System: 64 Bits
Boot mode: Normal (Normal boot)
Total RAM: 8151 MB (70% free)
System Restore: Activé (Enable)
System drive C: has 1211 GB (87%) free of 1386 GB
---\\ Mode de connexion au système
~ Computer Name: BUREAU
~ User Name: GUILLOT Gérard
~ All Users Names: VERONIQUE, UpdatusUser, HomeGroupUser$, GUILLOT Gérard, Administrateur,
~ Unselected Option: O45,O61,O62,O65,O66,O80,O82,O89
Logged in as Administrator
---\\ Variables d'environnement
~ System Unit : C:\
~ %AppZHP% : C:\Users\GUILLOT Gérard\AppData\Roaming\ZHP\
~ %AppData% : C:\Users\GUILLOT Gérard\AppData\Roaming\
~ %Desktop% : C:\Users\Public\Documents\Desktop\
~ %Favorites% : C:\Users\GUILLOT Gérard\Favorites\
~ %LocalAppData% : C:\Users\GUILLOT Gérard\AppData\Local\
~ %StartMenu% : C:\Users\GUILLOT Gérard\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\
---\\ Enumération des unités disques
C: Hard drive, Flash drive, Thumb drive (Free 1211 Go of 1386 Go)
D: Hard drive, Flash drive, Thumb drive (Free 3 Go of 12 Go)
E: CD-ROM drive (Free 4 Go of 4 Go)
G: Floppy drive, Flash card reader, USB Key (Not Inserted)
H: Floppy drive, Flash card reader, USB Key (Not Inserted)
I: Floppy drive, Flash card reader, USB Key (Not Inserted)
J: Floppy drive, Flash card reader, USB Key (Not Inserted)
---\\ Etat du Centre de Sécurité Windows
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : Out Of Date
~ Security Center: 49 Legitimates Filtered in 00mn 00s
---\\ Recherche particulière de fichiers génériques
[MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorateur Windows.) (.25/02/2011 - 07:19:30.) -- C:\Windows\Explorer.exe [2871808]
[MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 - 02:39:52.) -- C:\Windows\System32\Wininit.exe [129024]
[MD5.4AF089160FE082E5EA5C4AA72782DCA2] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.22/11/2014 - 02:28:21.) -- C:\Windows\System32\wininet.dll [2358272]
[MD5.8CEBD9D0A0A879CDE9F36F4383B7CAEA] - (.Microsoft Corporation - Application d’ouverture de session Windows.) (.17/07/2014 - 03:07:24.) -- C:\Windows\System32\Winlogon.exe [455168]
[MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Bibliothèque de licences.) (.20/11/2010 - 14:27:26.) -- C:\Windows\System32\sppcomapi.dll [232448]
[MD5.FA886682CFC5D36718D3E436AACF10B9] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.30/05/2014 - 07:45:52.) -- C:\Windows\system32\Drivers\AFD.sys [497152]
[MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 - 02:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128]
[MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/07/2009 - 00:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160]
[MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.20/11/2010 - 10:19:21.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456]
[MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.20/11/2010 - 10:26:32.) -- C:\Windows\system32\Drivers\DfsC.sys [102400]
[MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.20/11/2010 - 11:43:43.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368]
[MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) (.14/07/2009 - 00:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472]
[MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.14/07/2009 - 01:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224]
[MD5.A5D9106A73DC88564C825D317CAC68AC] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.27/04/2011 - 03:40:40.) -- C:\Windows\system32\Drivers\MRxSmb.sys [158208]
[MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) (.20/11/2010 - 10:23:20.) -- C:\Windows\system32\Drivers\netBT.sys [261632]
[MD5.1A29A59A4C5BA6F8C85062A613B7E2B2] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.24/01/2014 - 03:37:55.) -- C:\Windows\system32\Drivers\ntfs.sys [1684928]
[MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/07/2009 - 01:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280]
[MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.20/11/2010 - 11:52:35.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [129536]
[MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.14/07/2009 - 01:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184]
[MD5.70988118145F5F10EF24720B97F35F65] - (.Microsoft Corporation - TDI Translation Driver.) (.11/11/2014 - 02:46:26.) -- C:\Windows\system32\Drivers\tdx.sys [119296]
[MD5.0D08D2F3B3FF84E433346669B5E0F639] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.20/11/2010 - 14:34:02.) -- C:\Windows\system32\Drivers\volsnap.sys [295808]
~ Generic Processes: Scanned in 00mn 00s
---\\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 1/17
~ Mes musiques (My Musics) : 1/14
~ Mes Favoris (My Favorites) : 1/33
~ Mes Documents (My Documents) : 2/372
~ Mon Bureau (My Desktop) : 1/1289
~ Menu demarrer (Programs) : 1/41
~ Hidden Files: Scanned in 00mn 03s
---\\ Processus lancés
[MD5.3C13F26A4766752314A5413038BD86B4] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe [7229752] [PID.2412]
[MD5.4FF9D0D5FEC26D9F2312A8C15CA59C8F] - (.Pas de propriétaire - Monitor LED Key.) -- C:\Program Files (x86)\Hewlett-Packard\HP MAINSTREAM KEYBOARD\ModLEDKey.exe [53248] [PID.2972]
[MD5.3D2496BCA132B08D9B23856D65F30513] - (.Kaspersky Lab ZAO - Kaspersky Anti-Virus.) -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\avpui.exe [193128] [PID.3008]
[MD5.66275E52615AF9D2F18EB3442D00CFE3] - (.CyberLink - CyberLink MediaLibray Service.) -- c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe [210216] [PID.3324]
[MD5.B53D59915A356B06C1D7DE5B22B4177C] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [854344] [PID.4936]
[MD5.E47AC731D42B2452D4C0BF096DF3DD6E] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [8145408] [PID.4288]
~ Processes Running: Scanned in 00mn 00s
---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
C:\Users\GUILLOT Gérard\AppData\Local\Google\Chrome\User Data\Default\Preferences
---\\ Liste des dossiers d'extension Google Chrome
~ Google Lines Browser: 0 Legitimates Filtered in 00mn 00s
---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 0
~ Proxy management: Scanned in 00mn 00s
---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=C:\Windows\explorer.exe
~ Keys: Scanned in 00mn 00s
---\\ Hosts file redirection (O1)
~ Le fichier hôte est sain (The hosts file is clean) (60783)
~ Hosts File: Scanned in 01mn 02s
---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{40CA4970-E5EA-420C-9E4F-93E93E68525D}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{5FB2EFBB-2150-4F77-BC16-B5D8CD164799}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{5FB2EFBB-2150-4F77-BC16-B5D8CD164799}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{40CA4970-E5EA-420C-9E4F-93E93E68525D}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{5FB2EFBB-2150-4F77-BC16-B5D8CD164799}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS3\Services\Tcpip\..\{40CA4970-E5EA-420C-9E4F-93E93E68525D}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS3\Services\Tcpip\..\{5FB2EFBB-2150-4F77-BC16-B5D8CD164799}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
~ Domain: Scanned in 00mn 00s
---\\ Protocole additionnel (O18)
O18 - Handler: wlpg [64Bits] - Y . (...) --
O18 - Filter: text/xml [64Bits] - Y . (...) --
~ Protocole Additionnel: Scanned in 00mn 00s
---\\ Enumère les données de BootExecute (BEX) (O34)
O34 - HKLM BootExecute: (autocheck autochk /r \??\K:) - File not found
O34 - HKLM BootExecute: (autocheck autochk /r \??\K:) - File not found
~ BEX: 2 Legitimates Filtered in 00mn 00s
---\\ Tâches planifiées en automatique (O39)
[MD5.00000000000000000000000000000000] [APT] [GUILLOT G‚rard] (...) -- C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBCore.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [GUILLOT G‚rard 23 octobre 2011] (...) -- C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBCore.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [GUILLOT G‚rard Local Autobackup 5 4] (...) -- C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBCore.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [GUILLOT G‚rard Online Autobackup 5 4] (...) -- C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBCore.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [GUILLOT G‚rard10] (...) -- C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBCore.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [GUILLOT G‚rard11] (...) -- C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBCore.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [GUILLOT G‚rard12] (...) -- C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBCore.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [GUILLOT G‚rard13] (...) -- C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBCore.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [GUILLOT G‚rard2] (...) -- C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBCore.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [GUILLOT G‚rard3] (...) -- C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBCore.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [GUILLOT G‚rard4] (...) -- C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBCore.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [GUILLOT G‚rard5] (...) -- C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBCore.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [GUILLOT G‚rard6] (...) -- C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBCore.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [GUILLOT G‚rard7] (...) -- C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBCore.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [GUILLOT G‚rard8] (...) -- C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBCore.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [GUILLOT G‚rard9] (...) -- C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBCore.exe (.not file.) [0]
O39 - APT: - (..) -- C:\Windows\System32\Tasks\PCDRScheduledMaintenance [544]
~ Scheduled Task: 51 Legitimates Filtered in 00mn 08s
---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 29/12/2014 - 17:33:10 - [0] -SH-D C:\Users\GUILLOT Gérard\AppData\Local\EmieBrowserModeList
~ Program Folder: 347 Legitimates Filtered in 00mn 01s
---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.BD9C7DE7BCF46013697DA6F9965A3BC7] - 22/12/2014 - 22:46:05 ---A- . (...) -- C:\Windows\System32\persistent_q.db [1024]
O44 - LFC:[MD5.6D3AE0B25D0CBE103A30B9D596957624] - 22/12/2014 - 22:46:06 ---A- . (...) -- C:\Windows\System32\persistent_q.db-wal [3176]
O44 - LFC:[MD5.BB7DF04E1B0A2570657527A7E108AE23] - 24/12/2014 - 22:55:41 ---A- . (...) -- C:\Windows\System32\persistent_q.db-shm [32768]
~ Files: 24 Legitimates Filtered in 00mn 01s
---\\ Liste des pilotes du système (SDL) (O58)
O58 - SDL:08/12/2009 - 09:54:30 ---A- . (.Windows (R) Win 7 DDK provider - BulkUsb Driver.) -- C:\Windows\System32\Drivers\br_mcu2usb.sys [23552]
O58 - SDL:14/07/2009 - 02:47:48 ---A- . (.Emulex - Storport Miniport Driver for LightPulse HBAs.) -- C:\Windows\System32\Drivers\elxstor.sys [530496]
O58 - SDL:10/06/2009 - 21:31:59 ---A- . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for eHome.) -- C:\Windows\System32\Drivers\hcw85cir.sys [31232]
O58 - SDL:14/07/2009 - 02:45:55 ---A- . (.Promise Technology - Promise SuperTrak EX Series Driver for Windows.) -- C:\Windows\System32\Drivers\stexstor.sys [24656]
O58 - SDL:28/07/2014 - 13:52:00 ---A- . (.Apple, Inc. - Apple Mobile Device USB Driver.) -- C:\Windows\System32\Drivers\usbaapl64.sys [54784]
~ Drivers: 92 Legitimates Filtered in 00mn 01s
---\\ Liste des outils de désinfection (LATC) (O63)
O63 - Logiciel: ZHPDiag 2014 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 =>.Nicolas Coolman
O63 - Logiciel: ZHPFix 2014 - (.Nicolas Coolman.) [HKLM] -- ZHPFix_is1 =>.Nicolas Coolman
~ ADS: Scanned in 00mn 00s
---\\ Liste les services legacy du registre (LALS) (O64)
O64 - Services: CurCS - 11/04/1745 - C:\Windows\System32\DRIVERS\klkbdflt2.sys (klkbdflt2) .(...) - LEGACY_KLKBDFLT2
~ Legacy: 113 Legitimates Filtered in 00mn 00s
---\\ Associations Shell Spawning (O67)
O67 - Shell Spawning: <.html>
~ FASS Keys: 11 Legitimates Filtered in 00mn 00s
---\\ Menu de démarrage Internet (SMI) (O68)
O68 - StartMenuInternet:
O68 - StartMenuInternet:
O68 - StartMenuInternet:
O68 - StartMenuInternet:
~ Keys: Scanned in 00mn 00s
---\\ Recherche d'infection sur les navigateurs internet (SBI) (O69)
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (Bing) - http://www.bing.com
~ Keys: Scanned in 00mn 00s
---\\ Recherche particulière à la racine du système (SPRF) (O84)
[MD5.19B06F5C985DA6BEFCC0BB4FD0969744] [SPRF][08/12/2011] (...) -- C:\ProgramData\1323362800.bdinstall.bin [212253]
[MD5.5B785A562A306A04C45B4FFC0E89987B] [SPRF][13/10/2012] (...) -- C:\ProgramData\1350147259.bdinstall.bin [102621]
[MD5.83B552E5DD0E87FB96C521D97FD9A0D4] [SPRF][21/12/2013] (...) -- C:\ProgramData\1387635291.bdinstall.bin [135388]
[MD5.C15F216955106B4D4F2EED048F940E55] [SPRF][21/12/2013] (...) -- C:\ProgramData\1387635887.bdinstall.bin [62374]
[MD5.DDD67C9F3CD60ACB4F097ADC7DB65186] [SPRF][28/12/2013] (...) -- C:\ProgramData\1388227190.bdinstall.bin [649469]
[MD5.685C46C71D8422964D934D47F36439EE] [SPRF][21/11/2014] (...) -- C:\ProgramData\1416561110.bdinstall.bin [258569]
[MD5.0641A46F1E58529A42EAD4573A3A0861] [SPRF][14/09/2010] (...) -- C:\ProgramData\BDB9A30BD7.sys [8]
[MD5.A17BA058F5EDB59CBC00EE504F90E2F2] [SPRF][10/09/2011] (...) -- C:\ProgramData\bdinstall.bin [580593]
[MD5.6B5F3F4B905FCE3D41D3E7AFEF3A2389] [SPRF][09/04/2011] (...) -- C:\ProgramData\ezsidmv.dat [56]
[MD5.C4E1E6F37C228512A95A4542BCEDCDA4] [SPRF][22/09/2010] (...) -- C:\ProgramData\KGyGaAvL.sys [2828]
[MD5.FA71B88ED2846BC35FD5E595EAD18708] [SPRF][21/12/2014] (...) -- C:\ProgramData\ntuser.dat [262144]
~ Files: 11 Legitimates Filtered in 00mn 00s
---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)
SS - | Demand 14/07/2009 27136 | C:\Program Files (x86)\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
SR - | Auto 30/08/2014 234520 | (AVP15.0.1) . (.Kaspersky Lab ZAO.) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\avp.exe
SR - | Demand 14/07/2009 27136 | C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll (hpqcxs08) . (.Hewlett-Packard Co..) - C:\Windows\System32\svchost.exe
SR - | Auto 14/07/2009 27136 | C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll (hpqddsvc) . (.Hewlett-Packard Co..) - C:\Windows\System32\svchost.exe
SR - | Auto 14/07/2009 27136 | C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.dll (HPSLPSVC) . (.Hewlett-Packard Co..) - C:\Windows\System32\svchost.exe
SR - | Auto 21/11/2014 1871160 | (MBAMScheduler) . (.Malwarebytes Corporation.) - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
SR - | Auto 21/11/2014 969016 | (MBAMService) . (.Malwarebytes Corporation.) - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
SR - | Auto 24/11/2014 2604856 | (TuneUp.UtilitiesSvc) . (.AVG Technologies.) - C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe
~ Services: Scanned in 00mn 08s
---\\ Scan Additionnel (O88)
Database Version : 13026 - (27/12/2014)
Clés trouvées (Keys found) : 0
Valeurs trouvées (Values found) : 0
Dossiers trouvés (Folders found) : 0
Fichiers trouvés (Files found) : 0
~ Additionnel Scan: 505316 Items scanned in 01mn 34s
---\\ Informations complémentaires sur les modules
~ http://nicolascoolman.fr/r5-internet-explorer-proxy-management-iepm/ =>.Internet Explorer, Proxy Management (R5)
~ AMI: 1 Legitimates Filtered in 00mn 00s
~ 1133 Legitimates filtered by white list
End of the scan (313 lines in 03mn 48s)(0)