Supprimer des redirection google sur Internet Explorer
Fermé
Joujou 12
-
12 mars 2015 à 12:19
Malekal_morte- Messages postés 180304 Date d'inscription mercredi 17 mai 2006 Statut Modérateur, Contributeur sécurité Dernière intervention 15 décembre 2020 - 12 mars 2015 à 12:20
Malekal_morte- Messages postés 180304 Date d'inscription mercredi 17 mai 2006 Statut Modérateur, Contributeur sécurité Dernière intervention 15 décembre 2020 - 12 mars 2015 à 12:20
Bonjour,
J'ai des redirection vers un site "seektosearch" suite à toute recherche google,
Voici le rapport ZHP diag, je serais extêmement reconnaissant pour toute aide, ma navigation est devenue insupportable
~ Rapport de ZHPDiag v2015.3.8.28 - Nicolas Coolman (08/03/2015)
~ Lancé par user (12/03/2015 11:01:35)
~ Facebook : https://www.facebook.com/nicolascoolman1
~ Adresse du Forum http://forum.nicolascoolman.fr
~ Traduit par Nicolas Coolman
~ Etat de la version : Version à jour.
~ Liste blanche : Désactivée par l'utilisateur
~ Elévation des Privilèges : OK
~ User Account Control (UAC): Deactivate by program
---\\ Navigateurs Internet
MSIE: Internet Explorer v11.0.9600.17690
GCIE: Google Chrome v41.0.2272.89 (Defaut)
---\\ Informations sur les produits Windows
~ Langage: Français
Windows Server License Manager Script : OK
~ Windows(R) Operating System, VOLUME_KMSCLIENT channel
Windows ID Activation : OK
~ Windows Partial Key : 6XWKK
Windows License : OK
Expiration Licence Windows : 64779 minute(s) (45 jour(s))
~ Windows Remaining Initializations Number : 1000
Software Protection Service (Protection logicielle) : OK
Windows Automatic Updates : OK
Windows Activation Technologies : OK
Windows 8.1, 64-bit (Build 9600)
---\\ Logiciels de protection du système
Avast Free Antivirus v10.0.2208
Windows Defender W8 (Deactivate)
---\\ Logiciels d'optimisation du système
---\\ Logiciels de partage PeerToPeer
---\\ Surveillance de Logiciels
---\\ Informations sur le système
~ Processor: Intel64 Family 6 Model 23 Stepping 10, GenuineIntel
~ Operating System: 64 Bits
Boot mode: Normal (Normal boot)
Total RAM: 4063 MB (68% free)
System Restore: Activé (Enable)
System drive C: has 178 GB (82%) free of 215 GB
---\\ Mode de connexion au système
~ Computer Name: PC-SONY
~ User Name: user
~ All Users Names: user, Administrateur,
~ Unselected Option: None
Logged in as Administrator
---\\ Variables d'environnement
~ System Unit : C:\
~ %AppZHP% : C:\Users\user\AppData\Roaming\ZHP\
~ %AppData% : C:\Users\user\AppData\Roaming\
~ %Desktop% : C:\Users\user\Desktop\
~ %Favorites% : C:\Users\user\Favorites\
~ %LocalAppData% : C:\Users\user\AppData\Local\
~ %StartMenu% : C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\
---\\ Enumération des unités disques
C: Hard drive, Flash drive, Thumb drive (Free 178 Go of 215 Go)
D: Hard drive, Flash drive, Thumb drive (Free 0 Go of 0 Go)
E: CD-ROM drive (Not Inserted)
F: Floppy drive, Flash card reader, USB Key (Not Inserted)
G: Floppy drive, Flash card reader, USB Key (Not Inserted)
---\\ Etat du Centre de Sécurité Windows
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK
~ Security Center: 41 Scanned in 00mn 00s
---\\ Recherche particulière de fichiers génériques
[MD5.C10A66189DC8C090E7C84873EDCEBC88] - (.Microsoft Corporation - Explorateur Windows.) (.28/01/2015 - 00:47:12.) -- C:\Windows\Explorer.exe [2501368]
[MD5.48CFA7BE561A7BE144C29BB912055016] - (.Microsoft Corporation - Application de démarrage de Windows.) (.22/08/2013 - 10:58:29.) -- C:\Windows\System32\Wininit.exe [144384]
[MD5.36F99BD8A0F09BDBB7850A138845A014] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.20/02/2015 - 02:28:25.) -- C:\Windows\System32\wininet.dll [2358784]
[MD5.306EB21E5B480AE9065EA55AC8C35936] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.22/02/2014 - 10:45:48.) -- C:\Windows\System32\Winlogon.exe [562176]
[MD5.AFCAB4DC692CCE37E283B00E2D7B438F] - (.Microsoft Corporation - Bibliothèque de licences.) (.21/12/2013 - 09:54:07.) -- C:\Windows\System32\sppcomapi.dll [447488]
[MD5.374E27295F0A9DCAA8FC96370F9BEEA5] - (.Microsoft Corporation - Pilote de fonction connexe pour WinSock.) (.30/05/2014 - 04:03:03.) -- C:\Windows\system32\Drivers\AFD.sys [563200]
[MD5.74B14192CF79A72F7536B27CB8814FBD] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.22/08/2013 - 13:43:41.) -- C:\Windows\system32\Drivers\atapi.sys [26464]
[MD5.2FA6510E33F7DEFEC03658B74101A9B9] - (.Microsoft Corporation - CD-ROM File System Driver.) (.22/08/2013 - 12:40:15.) -- C:\Windows\system32\Drivers\Cdfs.sys [88576]
[MD5.C6796EA22B513E3457514D92DCDB1A3D] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.22/08/2013 - 09:46:35.) -- C:\Windows\system32\Drivers\Cdrom.sys [164352]
[MD5.A03F362C5557E238CBFA914689C77248] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.06/03/2014 - 10:22:50.) -- C:\Windows\system32\Drivers\DfsC.sys [134144]
[MD5.D4B7ED39C7900384D9E5C1283F1E7926] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.24/07/2014 - 12:45:39.) -- C:\Windows\system32\Drivers\HDAudBus.sys [76800]
[MD5.84CFC5EFA97D0C965EDE1D56F116A541] - (.Microsoft Corporation - Pilote de port i8042.) (.22/08/2013 - 12:39:15.) -- C:\Windows\system32\Drivers\i8042prt.sys [107520]
[MD5.B7342B3C58E91107F6E946A93D9D4EFD] - (.Microsoft Corporation - IP Network Address Translator.) (.27/11/2013 - 13:02:29.) -- C:\Windows\system32\Drivers\IpNat.sys [142848]
[MD5.7A1A3F213CDB3363D179D5014272025D] - (.Microsoft Corporation - Minirdr SMB Windows NT.) (.30/04/2014 - 07:41:46.) -- C:\Windows\system32\Drivers\MRxSmb.sys [402432]
[MD5.0217532E19A748F0E5D569307363D5FD] - (.Microsoft Corporation - MBT Transport driver.) (.22/08/2013 - 12:37:02.) -- C:\Windows\system32\Drivers\netBT.sys [282624]
[MD5.038C77D577900EE39410662478BB0D50] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.24/07/2014 - 16:07:52.) -- C:\Windows\system32\Drivers\ntfs.sys [2009920]
[MD5.764B1121867B2D9B31C491668AC72B2B] - (.Microsoft Corporation - Pilote de port parallèle.) (.22/08/2013 - 12:40:02.) -- C:\Windows\system32\Drivers\Parport.sys [94208]
[MD5.BBB6272B7F46C4640A8CDB8A70C3450F] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.22/08/2013 - 12:35:51.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [120832]
[MD5.680C1DAE268B6FB67FA21B389A8B79EF] - (.Microsoft Corporation - Redirecteur de périphérique de Microsoft RDP.) (.22/08/2013 - 23:26:13.) -- C:\Windows\system32\Drivers\rdpdr.sys [195584]
[MD5.FFF28F9F6823EB1756C60F1649560BBF] - (.Microsoft Corporation - TDI Translation Driver.) (.22/08/2013 - 14:25:35.) -- C:\Windows\system32\Drivers\tdx.sys [107520]
[MD5.64CA2B4A49A8EAF495E435623ECCE7DB] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.19/06/2014 - 03:13:36.) -- C:\Windows\system32\Drivers\volsnap.sys [310080]
~ Generic Processes: Scanned in 00mn 00s
---\\ Etat des fichiers cachés (Caché/Total)
~ Mes Favoris (My Favorites) : 1/3
~ Mon Bureau (My Desktop) : 1/42340
~ Menu demarrer (Programs) : 1/20
~ Hidden Files: Scanned in 00mn 11s
---\\ Processus lancés
[MD5.84092B60AA6DAB3B5E0C646AAE862A46] - (...) -- C:\Program Files (x86)\InternetEverywhere\InternetEverywhere_Launcher.exe [637936] [PID.2644]
[MD5.44ADDA5FB88EE14F57A246285775AC2F] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\avastui.exe [5227112] [PID.736]
[MD5.CE5C9977DA751DDC30952AC4DCBCA788] - (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe [49208] [PID.2124]
[MD5.82E0EA0C23F556FB17ADB98E8E7F594E] - (...) -- C:\Program Files (x86)\InternetEverywhere\InternetEverywhere.exe [1739760] [PID.2240]
[MD5.9201E92771F3D536DA4A53FDCC4B976B] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [809288] [PID.3624]
[MD5.6B7BE218304D5DCCCBFFAE29F31F5AE7] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [8184832] [PID.1476]
~ Processes Running: Scanned in 00mn 00s
---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Preferences
---\\ Liste des dossiers d'extension Google Chrome
~ Google Lines Browser: 0 Scanned in 00mn 03s
---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.tn
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R3 - URLSearchHook: Microsoft Url Search Hook [64Bits] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (11.00.9600.17496 (winblue_r5.141121-1500)) -- C:\Windows\SysWOW64\ieframe.dll
~ IE Browser: 15 Scanned in 00mn 00s
---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Proxy management: Scanned in 00mn 00s
---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
~ Keys: Scanned in 00mn 00s
---\\ Hosts file redirection (O1)
~ Le fichier hôte est sain (The hosts file is clean) (21)
~ Hosts File: Scanned in 00mn 00s
---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: avast! Online Security [64Bits] - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - IE Webrep plugin.) -- C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
~ BHO: 2 Scanned in 00mn 00s
---\\ Applications lancées au démarrage du système (O4)
O4 - HKLM\..\Run: [Apoint] C:\Program Files (x86)\Apoint\Apoint.exe (.not file.)
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files (x86)\Synaptics\SynTP\SynTPEnh.exe (.not file.)
O4 - HKLM\..\Wow6432Node\Run: [AvastUI.exe] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
O4 - HKLM\..\Wow6432Node\Run: [HP Software Update] . (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe =>.Hewlett-Packard Co
~ Application: Scanned in 00mn 00s
---\\ Invisibilité de l'icône d'options IE dans le panneau de Configuration (O5)
O5 - control.ini: [HKLM\..\Control Panel] inetcpl.cpl=no
~ IE Control Panel: 1 Scanned in 00mn 00s
---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll =>.Microsoft Corporation
O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll
~ Winsock: 6 Scanned in 00mn 00s
---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{363E0742-AB56-4391-9F19-FFD7D65A1550}: DhcpNameServer = 10.47.9.33 193.95.122.30
O17 - HKLM\System\CCS\Services\Tcpip\..\{B0DBD2EE-851E-4082-A21B-0508AF3B8772}: DhcpNameServer = 192.168.43.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{FF56D14B-240E-48FD-8A10-037AB3BF50F6}: DhcpNameServer = 10.47.9.33 193.95.122.30
O17 - HKLM\System\CS1\Services\Tcpip\..\{363E0742-AB56-4391-9F19-FFD7D65A1550}: DhcpNameServer = 10.47.9.33 193.95.122.30
O17 - HKLM\System\CS1\Services\Tcpip\..\{B0DBD2EE-851E-4082-A21B-0508AF3B8772}: DhcpNameServer = 192.168.43.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{FF56D14B-240E-48FD-8A10-037AB3BF50F6}: DhcpNameServer = 10.47.9.33 193.95.122.30
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.47.9.33 193.95.122.30
~ Domain: Scanned in 00mn 00s
---\\ Protocole additionnel (O18)
O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation
O18 - Filter: text/xml [64Bits] - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.dll =>.Microsoft Corporation
~ Protocole Additionnel: Scanned in 00mn 00s
---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
~ SSODL: 1 Scanned in 00mn 00s
---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: avast! Antivirus (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google Inc
O23 - Service: InternetEverywhere_Service (InternetEverywhere_Service) . (...) - C:\Program Files (x86)\InternetEverywhere\InternetEverywhere_Service.exe
~ Services: 3 Scanned in 00mn 16s
---\\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(...) - (.not file.)
~ Desktop Component: 4 Scanned in 00mn 00s
---\\ Enumère les données de BootExecute (BEX) (O34)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
~ BEX: 1 Scanned in 00mn 00s
---\\ Tâches planifiées en automatique (O39)
[MD5.DD3A4BEBE7EA3E75F71F3D9E9E2AA016] [APT] [AutoKMS] (...) -- C:\Windows\AutoKMS\AutoKMS.exe [3798528] =>Trojan.AutoKMS
[MD5.4BB7714617D50D77FCDA6B0182FD8A9A] [APT] [avast! Emergency Update] (.AVAST Software.) -- C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [857888]
[MD5.E1B44A75947137F4143308D566889837] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [107848]
[MD5.E1B44A75947137F4143308D566889837] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [107848]
[MD5.F012A9A910D0D37FAEDD6010D7F6F218] [APT] [HPCustParticipation HP Deskjet 1510 series] (.Hewlett-Packard Co..) -- C:\Program Files\HP\HP Deskjet 1510 series\Bin\HPCustPartic.exe [5422112]
O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job [1076]
O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore [1076]
O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job [1080]
O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA [1080]
~ Scheduled Task: 12 Scanned in 00mn 03s
---\\ Composants installés (ActiveSetup Installed Components) (O40)
O40 - ASIC: Microsoft Windows Media Player [64Bits] - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll =>.Microsoft Corporation
O40 - ASIC: Microsoft Windows Media Player 12.0 [64Bits] - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\SysWOW64\wmpdxm.dll =>.Microsoft Corporation
O40 - ASIC: Themes Setup [64Bits] - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\Windows\System32\themeui.dll
O40 - ASIC: Microsoft Windows [64Bits] - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Windows Mail.) -- C:\Program Files (x86)\Windows Mail\WinMail.exe =>.Microsoft Corporation
O40 - ASIC: Browsing Enhancements [64Bits] - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\Windows\System32\msieftp.dll
O40 - ASIC: Microsoft Windows Media Player [64Bits] - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll =>.Microsoft Corporation
O40 - ASIC: Windows Desktop Update [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll
O40 - ASIC: Web Platform Customizations [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe
O40 - ASIC: (no name) [64Bits] - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\System32\mscories.dll
~ Active Setup: 9 Scanned in 00mn 00s
---\\ Pilotes lancés au démarrage du système (O41)
O41 - Driver: C:\Windows\System32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Pilote de fonction connexe pour WinSock.) - C:\Windows\system32\drivers\afd.sys
O41 - Driver: C:\Windows\System32\drivers\ahcache.sys (ahcache) . (.Microsoft Corporation - Application Compatibility Cache.) - C:\Windows\System32\DRIVERS\ahcache.sys
O41 - Driver: (aswRdr) . (.AVAST Software - avast! WFP Redirect Driver.) - C:\Windows\system32\drivers\aswRdr2.sys
O41 - Driver: (aswSnx) . (.AVAST Software - avast! Virtualization Driver.) - C:\Windows\system32\drivers\aswSnx.sys
O41 - Driver: (aswSP) . (.AVAST Software - avast! self protection module.) - C:\Windows\system32\drivers\aswSP.sys
O41 - Driver: (BasicDisplay) . (.Microsoft Corporation - Microsoft Basic Display Driver.) - C:\Windows\system32\drivers\BasicDisplay.sys
O41 - Driver: (BasicRender) . (.Microsoft Corporation - Microsoft Basic Render Driver.) - C:\Windows\system32\drivers\BasicRender.sys
O41 - Driver: cdrom.inf (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\system32\drivers\cdrom.sys
O41 - Driver: C:\Windows\System32\drivers\dam.sys (dam) . (.Microsoft Corporation - DAM Kernel Driver.) - C:\Windows\System32\drivers\dam.sys
O41 - Driver: C:\Windows\System32\wkssvc.dll (Dfsc) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys
O41 - Driver: mssmbios.inf (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\system32\drivers\mssmbios.sys
O41 - Driver: netnb.inf (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys
O41 - Driver: C:\Windows\System32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys
O41 - Driver: npsvctrig.inf (npsvctrig) . (.Microsoft Corporation - Named pipe service triggers.) - C:\Windows\system32\drivers\npsvctrig.sys
O41 - Driver: C:\Windows\System32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys
O41 - Driver: C:\Windows\System32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\system32\DRIVERS\pacer.sys
O41 - Driver: C:\Windows\System32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) - C:\Windows\System32\DRIVERS\rdbss.sys
O41 - Driver: C:\Windows\System32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\system32\DRIVERS\tdx.sys
O41 - Driver: C:\Windows\System32\drivers\vwififlt.sys (vwififlt) . (.Microsoft Corporation - Virtual WiFi Filter Driver.) - C:\Windows\system32\DRIVERS\vwififlt.sys
~ Drivers: 38 Scanned in 00mn 00s
---\\ Logiciels installés (O42)
O42 - Logiciel: Alps Pointing-device for VAIO - (.ALPS ELECTRIC CO., LTD..) [HKLM][64Bits] -- {9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}
O42 - Logiciel: Avast Free Antivirus - (.AVAST Software.) [HKLM][64Bits] -- Avast
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM][64Bits] -- Google Chrome
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {60EC980A-BDA2-4CB6-A427-B07A5498B4CA}
O42 - Logiciel: HP Deskjet 1510 series Aide - (.Hewlett Packard.) [HKLM][64Bits] -- {00645C10-53C9-46DC-B7D0-6F7B006972E9}
O42 - Logiciel: HP Photo Creations - (.HP.) [HKLM][64Bits] -- HP Photo Creations
O42 - Logiciel: HP Update - (.Hewlett-Packard.) [HKLM][64Bits] -- {6F1C00D2-25C2-4CBA-8126-AE9A6E2E9CD5}
O42 - Logiciel: Internet Everywhere - (.Internet Everywhere.) [HKLM][64Bits] -- InternetEverywhere
O42 - Logiciel: Logiciel de base du périphérique HP Deskjet 1510 series - (.Hewlett-Packard Co..) [HKLM][64Bits] -- {6FA5A547-D8A7-4408-BC2A-5789CFB09583} =>.Hewlett-Packard Co
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}
O42 - Logiciel: Synaptics Pointing Device Driver - (.Synaptics Incorporated.) [HKLM][64Bits] -- SynTPDeinstKey
O42 - Logiciel: Étude pour l'amélioration du produit HP Deskjet 1510 series - (.Hewlett-Packard Co..) [HKLM][64Bits] -- {AE2E50DB-8B99-48B3-82DC-C355F4D55545} =>.Hewlett-Packard Co
~ Logic: 33 Scanned in 00mn 00s
---\\ HKCU & HKLM Software Keys
[HKCU\Software\AVAST Software]
[HKCU\Software\AppDataLow]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\Google]
[HKCU\Software\HP]
[HKCU\Software\Hewlett-Packard]
[HKCU\Software\Local AppWizard-Generated Applications]
[HKCU\Software\Macromedia]
[HKCU\Software\Mine]
[HKCU\Software\MozillaPlugins]
[HKCU\Software\Netscape]
[HKCU\Software\ODBC]
[HKCU\Software\Policies]
[HKCU\Software\RegisteredApplications]
[HKCU\Software\Synaptics]
[HKCU\Software\Visan]
[HKCU\Software\WebToGo]
[HKCU\Software\Wow6432Node]
[HKCU\Software\ZebHelpProcess Helper]
[HKCU\Software\drpsu]
[HKLM\Software\AMD]
[HKLM\Software\ATI Technologies]
[HKLM\Software\Alps]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\DTS]
[HKLM\Software\Dolby]
[HKLM\Software\HP]
[HKLM\Software\InstalledOptions]
[HKLM\Software\Intel]
[HKLM\Software\Knowles]
[HKLM\Software\Macromedia]
[HKLM\Software\Nahimic]
[HKLM\Software\Nuance]
[HKLM\Software\ODBC]
[HKLM\Software\Policies]
[HKLM\Software\Realtek]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\SRS Labs]
[HKLM\Software\SonicFocus]
[HKLM\Software\Synaptics]
[HKLM\Software\Waves Audio]
[HKLM\Software\WebToGo]
[HKLM\Software\Wow6432Node\AVAST Software]
[HKLM\Software\Wow6432Node\AdwCleaner]
[HKLM\Software\Wow6432Node\Classes]
[HKLM\Software\Wow6432Node\Clients]
[HKLM\Software\Wow6432Node\Google]
[HKLM\Software\Wow6432Node\Hewlett-Packard]
[HKLM\Software\Wow6432Node\Intel]
[HKLM\Software\Wow6432Node\Macromedia]
[HKLM\Software\Wow6432Node\MozillaPlugins]
[HKLM\Software\Wow6432Node\Mozilla]
[HKLM\Software\Wow6432Node\Nuance]
[HKLM\Software\Wow6432Node\ODBC]
[HKLM\Software\Wow6432Node\Policies]
[HKLM\Software\Wow6432Node\RegisteredApplications]
[HKLM\Software\Wow6432Node\RocketLife]
[HKLM\Software\Wow6432Node\SRS Labs]
[HKLM\Software\Wow6432Node\Visan]
[HKLM\Software\Wow6432Node\WebToGo]
[HKLM\Software\Wow6432Node]
[HKLM\Software\Yamaha APO]
~ Key Software: 111 Scanned in 00mn 00s
---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 06/02/2015 - 14:41:03 - [] ----D C:\Program Files (x86)\Common Files
O43 - CFD: 12/03/2015 - 09:41:46 - [] ----D C:\Program Files (x86)\Google
O43 - CFD: 11/02/2015 - 16:31:46 - [] ----D C:\Program Files (x86)\Hewlett-Packard
O43 - CFD: 11/02/2015 - 16:31:06 - [] ----D C:\Program Files (x86)\HP
O43 - CFD: 11/02/2015 - 16:31:41 - [] ----D C:\Program Files (x86)\HP Photo Creations
O43 - CFD: 11/03/2015 - 21:15:18 - [] ----D C:\Program Files (x86)\Internet Explorer
O43 - CFD: 07/02/2015 - 20:30:02 - [] ----D C:\Program Files (x86)\InternetEverywhere
O43 - CFD: 06/02/2015 - 14:41:05 - [] ----D C:\Program Files (x86)\Microsoft Office
O43 - CFD: 06/02/2015 - 14:41:03 - [] ----D C:\Program Files (x86)\Microsoft Visual Studio
O43 - CFD: 06/02/2015 - 14:41:24 - [] ----D C:\Program Files (x86)\Microsoft Works
O43 - CFD: 22/08/2013 - 16:36:30 - [] ----D C:\Program Files (x86)\Microsoft.NET
O43 - CFD: 06/02/2015 - 14:41:11 - [] ----D C:\Program Files (x86)\MSBuild
O43 - CFD: 11/03/2015 - 21:15:23 - [] ----D C:\Program Files (x86)\Windows Defender
O43 - CFD: 22/08/2013 - 23:24:46 - [] ----D C:\Program Files (x86)\Windows Mail =>.Microsoft Corporation
O43 - CFD: 11/02/2015 - 23:19:27 - [] ----D C:\Program Files (x86)\Windows Media Player =>.Microsoft Corporation
O43 - CFD: 11/02/2015 - 23:19:27 - [] ----D C:\Program Files (x86)\Windows Multimedia Platform
O43 - CFD: 22/08/2013 - 16:36:30 - [] ----D C:\Program Files (x86)\Windows NT
O43 - CFD: 22/08/2013 - 23:24:46 - [] ----D C:\Program Files (x86)\Windows Photo Viewer
O43 - CFD: 11/02/2015 - 23:19:27 - [] ----D C:\Program Files (x86)\Windows Portable Devices
O43 - CFD: 22/08/2013 - 16:36:30 - [] -SH-D C:\Program Files (x86)\Windows Sidebar
O43 - CFD: 22/08/2013 - 16:36:30 - [] ----D C:\Program Files (x86)\WindowsPowerShell
O43 - CFD: 12/03/2015 - 10:50:17 - [] ----D C:\Program Files (x86)\ZHPDiag =>.Nicolas Coolman
O43 - CFD: 06/02/2015 - 14:41:03 - [] ----D C:\Program Files (x86)\Common Files\DESIGNER
O43 - CFD: 07/02/2015 - 21:25:58 - [] ----D C:\Program Files (x86)\Common Files\Microsoft Shared
O43 - CFD: 22/08/2013 - 16:36:33 - [] ----D C:\Program Files (x86)\Common Files\Services
O43 - CFD: 06/02/2015 - 14:38:23 - [] ----D C:\Program Files (x86)\Common Files\System
O43 - CFD: 22/08/2013 - 15:45:52 - [] -SH-D C:\ProgramData\Application Data
O43 - CFD: 06/02/2015 - 14:43:13 - [] ----D C:\ProgramData\AVAST Software
O43 - CFD: 06/02/2015 - 12:40:56 - [] -SH-D C:\ProgramData\Bureau
O43 - CFD: 22/08/2013 - 15:45:52 - [] -SH-D C:\ProgramData\Desktop
O43 - CFD: 22/08/2013 - 15:45:52 - [] -SH-D C:\ProgramData\Documents
O43 - CFD: 11/02/2015 - 16:30:25 - [] ----D C:\ProgramData\HP
O43 - CFD: 11/02/2015 - 16:31:39 - [] ----D C:\ProgramData\HP Photo Creations
O43 - CFD: 06/02/2015 - 12:40:56 - [] -SH-D C:\ProgramData\Menu Démarrer
O43 - CFD: 06/02/2015 - 15:39:49 - [] -S--D C:\ProgramData\Microsoft
O43 - CFD: 06/02/2015 - 14:41:58 - [] ----D C:\ProgramData\Microsoft Help
O43 - CFD: 06/02/2015 - 12:56:27 - [] ----D C:\ProgramData\Microsoft Toolkit =>Trojan.AutoKMS
O43 - CFD: 06/02/2015 - 12:40:56 - [] -SH-D C:\ProgramData\Modèles
O43 - CFD: 22/08/2013 - 23:26:19 - [] ----D C:\ProgramData\regid.1991-06.com.microsoft
O43 - CFD: 22/08/2013 - 15:45:52 - [] -SH-D C:\ProgramData\Start Menu
O43 - CFD: 22/08/2013 - 15:45:52 - [] -SH-D C:\ProgramData\Templates
O43 - CFD: 11/02/2015 - 16:31:38 - [] ----D C:\ProgramData\Visan
O43 - CFD: 22/08/2013 - 16:36:33 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility
O43 - CFD: 11/03/2015 - 21:15:25 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 11/02/2015 - 23:19:39 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 06/02/2015 - 14:44:41 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
O43 - CFD: 12/03/2015 - 09:41:57 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
O43 - CFD: 11/02/2015 - 16:31:41 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
O43 - CFD: 07/02/2015 - 20:30:21 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Everywhere
O43 - CFD: 22/08/2013 - 16:36:33 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 06/02/2015 - 14:41:57 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
O43 - CFD: 07/02/2015 - 20:30:01 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp
O43 - CFD: 11/02/2015 - 23:19:39 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools
O43 - CFD: 22/08/2013 - 23:26:19 - [0] R-H-D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC
O43 - CFD: 12/03/2015 - 10:50:17 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP =>.Nicolas Coolman
O43 - CFD: 06/02/2015 - 12:43:28 - [] ----D C:\Users\user\AppData\Roaming\Adobe
O43 - CFD: 06/02/2015 - 14:45:37 - [] ----D C:\Users\user\AppData\Roaming\AVAST Software
O43 - CFD: 18/02/2015 - 16:38:55 - [] ----D C:\Users\user\AppData\Roaming\HpUpdate
O43 - CFD: 12/03/2015 - 10:38:25 - [] ----D C:\Users\user\AppData\Roaming\InternetEverywhere
O43 - CFD: 07/02/2015 - 20:35:06 - [] ----D C:\Users\user\AppData\Roaming\Macromedia
O43 - CFD: 10/03/2015 - 06:47:41 - [] -S--D C:\Users\user\AppData\Roaming\Microsoft
O43 - CFD: 12/03/2015 - 11:02:14 - [] ----D C:\Users\user\AppData\Roaming\ZHP =>.Nicolas Coolman
O43 - CFD: 06/02/2015 - 12:42:54 - [] -SH-D C:\Users\user\AppData\Local\Application Data
O43 - CFD: 03/03/2015 - 15:07:47 - [] ----D C:\Users\user\AppData\Local\Diagnostics
O43 - CFD: 17/02/2015 - 13:29:36 - [] -SH-D C:\Users\user\AppData\Local\EmieBrowserModeList
O43 - CFD: 12/02/2015 - 12:19:18 - [] -SH-D C:\Users\user\AppData\Local\EmieSiteList
O43 - CFD: 12/02/2015 - 12:19:18 - [] -SH-D C:\Users\user\AppData\Local\EmieUserList
O43 - CFD: 12/03/2015 - 09:42:04 - [] ----D C:\Users\user\AppData\Local\Google
O43 - CFD: 06/02/2015 - 12:42:54 - [] -SH-D C:\Users\user\AppData\Local\Historique
O43 - CFD: 11/02/2015 - 16:47:04 - [] ----D C:\Users\user\AppData\Local\HP
O43 - CFD: 03/03/2015 - 15:07:29 - [] ----D C:\Users\user\AppData\Local\Microsoft
O43 - CFD: 06/02/2015 - 14:38:13 - [0] ----D C:\Users\user\AppData\Local\Microsoft Help
O43 - CFD: 12/02/2015 - 12:16:19 - [] ----D C:\Users\user\AppData\Local\Packages
O43 - CFD: 12/03/2015 - 11:00:29 - [] ----D C:\Users\user\AppData\Local\Temp
O43 - CFD: 06/02/2015 - 12:42:54 - [] -SH-D C:\Users\user\AppData\Local\Temporary Internet Files
O43 - CFD: 06/02/2015 - 12:43:26 - [0] ----D C:\Users\user\AppData\Local\VirtualStore
O43 - CFD: 22/08/2013 - 16:36:32 - [] R---D C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
O43 - CFD: 22/08/2013 - 16:36:32 - [] R---D C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 12/03/2015 - 07:45:35 - [] R---D C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 22/08/2013 - 16:36:32 - [] ----D C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 12/03/2015 - 07:45:35 - [] R---D C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
O43 - CFD: 22/08/2013 - 16:36:32 - [] R---D C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
~ Program Folder: 82 Scanned in 00mn 00s
---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.E63FD4AED397626B314B96EA11341220] - 06/03/2015 - 03:53:56 ---A- . (.Microsoft Corporation - Fournisseur de sécurité TLS/SSL.) -- C:\Windows\System32\schannel.dll [430080]
O44 - LFC:[MD5.D103F021B60F27DEBAEC4D316C7A0F42] - 11/03/2015 - 11:06:50 ---A- . (.Microsoft Corporation - DLL de MSCTF Server.) -- C:\Windows\System32\msctf.dll [1384712]
O44 - LFC:[MD5.C10A66189DC8C090E7C84873EDCEBC88] - 11/03/2015 - 11:06:57 ---A- . (.Microsoft Corporation - Explorateur Windows.) -- C:\Windows\explorer.exe [2501368]
O44 - LFC:[MD5.6334135544739B49C776DFE0B6F0FA9F] - 11/03/2015 - 11:07:00 ---A- . (.Microsoft Corporation - Codec pour photographie Windows Media Photo.) -- C:\Windows\System32\WMPhoto.dll [402432]
O44 - LFC:[MD5.F91E83532107E8B0A1819DB2D96366CB] - 11/03/2015 - 11:07:07 ---A- . (.Microsoft Corporation - Microsoft Windows MRM.) -- C:\Windows\System32\MrmCoreR.dll [1090048]
O44 - LFC:[MD5.B9109627AA19B15BA4BFA5255AAECBF2] - 11/03/2015 - 11:07:11 ---A- . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll [22291584]
O44 - LFC:[MD5.55E39907F34D14E0794DD17C915795E5] - 11/03/2015 - 11:08:56 ---A- . (.Microsoft Corporation - LockScreenContent Server.) -- C:\Windows\System32\LockScreenContentServer.exe [46456]
O44 - LFC:[MD5.5A1F895338418DF8C1D31E590DC1BAA5] - 11/03/2015 - 11:09:09 ---A- . (.Microsoft Corporation - Microsoft Windows Codecs Library.) -- C:\Windows\System32\WindowsCodecs.dll [1763352]
O44 - LFC:[MD5.40DF85D8B2B0171EF5F23AA1B5CD9A62] - 11/03/2015 - 11:09:27 ---A- . (.Microsoft Corporation - Microsoft (R) JScript.) -- C:\Windows\System32\jscript9.dll [6035456]
O44 - LFC:[MD5.2335F6BF8A127E31EB0E2D9A82F188A0] - 11/03/2015 - 11:09:30 ---A- . (.Microsoft Corporation - Navigateur Internet.) -- C:\Windows\System32\ieframe.dll [14398976]
O44 - LFC:[MD5.22C4867C690C38B18B2C1A0B072CD0C4] - 11/03/2015 - 11:09:31 ---A- . (.Microsoft Corporation - Panneau de configuration Internet.) -- C:\Windows\System32\inetcpl.cpl [2125824]
O44 - LFC:[MD5.501A38B72FA264605123B4FACF53F057] - 11/03/2015 - 11:09:32 ---A- . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll [1548288]
O44 - LFC:[MD5.62269DEFF17AB006217330A24EA8577B] - 11/03/2015 - 11:09:33 ---A- . (.Microsoft Corporation - Utilitaire à l'exécution pour Internet Expl.) -- C:\Windows\System32\iertutil.dll [2886144]
O44 - LFC:[MD5.C010D371BC7FE8ECC01EFE5E92D8E996] - 11/03/2015 - 11:09:34 ---A- . (.Microsoft Corporation - ActiveX Interface Marshaling Library.) -- C:\Windows\System32\actxprxy.dll [2865152]
O44 - LFC:[MD5.36F99BD8A0F09BDBB7850A138845A014] - 11/03/2015 - 11:09:34 ---A- . (.Microsoft Corporation - Extensions Internet pour Win32.) -- C:\Windows\System32\wininet.dll [2358784]
O44 - LFC:[MD5.3DE5D78D843D3F44B5D9189D61C2725E] - 11/03/2015 - 11:09:37 ---A- . (.Microsoft Corporation - Contrôleur de site Web.) -- C:\Windows\System32\webcheck.dll [262144]
O44 - LFC:[MD5.DF9BF7D44E9EC59924B642AB478E72DA] - 11/03/2015 - 11:09:37 ---A- . (.Microsoft Corporation - Personnalisation d'IEAK.) -- C:\Windows\System32\iedkcs32.dll [374272]
O44 - LFC:[MD5.5443F21A33DB376734DBE47F7635542C] - 11/03/2015 - 11:09:39 ---A- . (.Microsoft Corporation - Microsoft Feeds Manager.) -- C:\Windows\System32\msfeeds.dll [801280]
O44 - LFC:[MD5.A03AF8AD44CAE309908557F5724BC808] - 11/03/2015 - 11:09:43 ---A- . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\System32\inetcomm.dll [1032704]
O44 - LFC:[MD5.A9190899A35431CF8ABBEF5E1BB0C8F9] - 11/03/2015 - 11:09:43 ---A- . (.Microsoft Corporation - Microsoft ® JScript Diagnostics.) -- C:\Windows\System32\jscript9diag.dll [814080]
O44 - LFC:[MD5.1193400D8E29A5A010135FB09A4EB1E8] - 11/03/2015 - 11:09:44 ---A- . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll [25021440]
O44 - LFC:[MD5.3541B433422C3FEEB8ABFC8386D95275] - 11/03/2015 - 11:09:45 ---A- . (.Microsoft Corporation - Microsoft (R) JScript.) -- C:\Windows\System32\jscript.dll [816128]
O44 - LFC:[MD5.687E11F36832BFF65EF0CD2FA3DB1966] - 11/03/2015 - 11:09:45 ---A- . (.Microsoft Corporation - Microsoft ® VBScript.) -- C:\Windows\System32\vbscript.dll [584192]
O44 - LFC:[MD5.9E9B757A677927110393A505822D9174] - 11/03/2015 - 11:09:46 ---A- . (.Microsoft Corporation - Microsoft SmartScreen Filter.) -- C:\Windows\System32\ieapfltr.dll [800768]
O44 - LFC:[MD5.7E16095C0BEEF62D1A2674D6A232DEE1] - 11/03/2015 - 11:09:51 ---A- . (.Microsoft Corporation - Objets homologues Internet Explorer.) -- C:\Windows\System32\iepeers.dll [145408]
O44 - LFC:[MD5.D373113A84C12BA7F07CE1E9CAF4747F] - 11/03/2015 - 11:09:57 ---A- . (.Microsoft Corporation - Microsoft® HTML Editing Component.) -- C:\Windows\System32\mshtmled.dll [92160]
O44 - LFC:[MD5.1C393E42928BF55B3796E732B678CD5B] - 11/03/2015 - 11:10:00 ---A- . (.Microsoft Corporation - DAC for Trident DOM.) -- C:\Windows\System32\MshtmlDac.dll [88064]
O44 - LFC:[MD5.992A0252586D9D946535DDBBEF9AB7D5] - 11/03/2015 - 11:13:12 ---A- . (.Microsoft Corporation - Configuration d'homologue EAP.) -- C:\Windows\System32\eappcfg.dll [346112]
O44 - LFC:[MD5.EB04CD238FE3D5A3DB900561E3AFDE37] - 11/03/2015 - 11:13:12 ---A- . (.Microsoft Corporation - Microsoft EAPHost Peer Client DLL.) -- C:\Windows\System32\eappprxy.dll [70656]
O44 - LFC:[MD5.4644F62E41B054A1787225D1210108B2] - 11/03/2015 - 11:13:12 ---A- . (.Microsoft Corporation - Microsoft ThirdPartyEapDispatcher.) -- C:\Windows\System32\eapp3hst.dll [331776]
O44 - LFC:[MD5.62F00DA98A4ABDA58254DB936C1D2D73] - 11/03/2015 - 11:13:12 ---A- . (.Microsoft Corporation - Service homologue EAPHost Microsoft.) -- C:\Windows\System32\eapphost.dll [339456]
O44 - LFC:[MD5.4E32C419A8B3CC19FCD2CACDEF1BD492] - 11/03/2015 - 11:13:12 ---A- . (.Microsoft Corporation - UI générique EAP.) -- C:\Windows\System32\eappgnui.dll [102912]
O44 - LFC:[MD5.EA10446D574CB8A20D913BF500E34192] - 11/03/2015 - 11:14:00 ---A- . (.Microsoft Corporation - DLL RDPCore TS.) -- C:\Windows\System32\rdpcorets.dll [3547648]
O44 - LFC:[MD5.BC8A79C625568DDB7DCA49D0C2741A64] - 11/03/2015 - 11:14:00 ---A- . (.Microsoft Corporation - Microsoft RDP Video Miniport driver.) -- C:\Windows\System32\Drivers\rdpvideominiport.sys [27456]
O44 - LFC:[MD5.6F7FBAA80AC7C8E2DDA7572423D4B913] - 11/03/2015 - 11:14:00 ---A- . (.Microsoft Corporation - Microsoft RemoteFX VM Transport.) -- C:\Windows\System32\rfxvmt.dll [40448]
O44 - LFC:[MD5.66F962AE94FF268070ED2325DAEE88BA] - 11/03/2015 - 11:14:00 ---A- . (.Microsoft Corporation - UMRDP Display Driver.) -- C:\Windows\System32\rdpudd.dll [131584]
O44 - LFC:[MD5.92360C5E0D86B027377381E867BD055A] - 11/03/2015 - 11:14:47 ---A- . (.Microsoft Corporation - DLL du Gestionnaire de processus d'arrière-.) -- C:\Windows\System32\ubpm.dll [203264]
O44 - LFC:[MD5.44AA550C6B46C80E430A3D29820D629E] - 11/03/2015 - 11:15:32 ---A- . (.Microsoft Corporation - DLL Couche NT.) -- C:\Windows\System32\ntdll.dll [1733440]
O44 - LFC:[MD5.9F2265288BCA4EF9B34FAD2D0078070E] - 11/03/2015 - 11:15:33 ---A- . (.Microsoft Corporation - NT Kernel & System.) -- C:\Windows\System32\ntoskrnl.exe [7472960]
O44 - LFC:[MD5.000A77BDB94C42A90137E8368D3A47AA] - 11/03/2015 - 11:16:38 ---A- . (.Microsoft Corporation - Outil de suppression de logiciels malveilla.) -- C:\Windows\System32\MRT.exe [122905848]
O44 - LFC:[MD5.68DF7D160987CF3E0A03A64E5A8F087D] - 11/03/2015 - 11:18:35 ---A- . (.Microsoft Corporation - Interface utilisateur d'authentification Wi.) -- C:\Windows\System32\authui.dll [2773504]
O44 - LFC:[MD5.613438C2C3D899F50719B6878579C66D] - 11/03/2015 - 11:19:25 ---A- . (.Microsoft Corporation - Gestionnaire de menu contextuel de stockage.) -- C:\Windows\System32\StorageContextHandler.dll [75264]
O44 - LFC:[MD5.40CBEB7C0051036CBC1C243A025F206D] - 11/03/2015 - 11:20:09 ---A- . (.Microsoft Corporation - DLL WSShared.) -- C:\Windows\System32\WSShared.dll [971776]
O44 - LFC:[MD5.F24E439730260FB90CCA982C67574FED] - 11/03/2015 - 11:20:09 ---A- . (.Microsoft Corporation - DLL d'exécution de l'infrastructure de test.) -- C:\Windows\System32\Windows.ApplicationModel.Store.TestingFramework.dll [274944]
O44 - LFC:[MD5.04C3768D1526DFB927B7A216BF4D9162] - 11/03/2015 - 11:20:09 ---A- . (.Microsoft Corporation - DLL d'exécution du Windows Store.) -- C:\Windows\System32\Windows.ApplicationModel.Store.dll [315392]
O44 - LFC:[MD5.4F1E63E8FF7108E04303DB1D7AD3E6E6] - 11/03/2015 - 11:20:10 ---A- . (.Microsoft Corporation - Cet outil collecte les fichiers journaux du.) -- C:\Windows\System32\WSCollect.exe [84992]
O44 - LFC:[MD5.93C5704CDB20EEB121CE3BEEE796ABDC] - 11/03/2015 - 11:20:10 ---A- . (.Microsoft Corporation - This tool resets the Windows Store without.) -- C:\Windows\System32\WSReset.exe [79872]
O44 - LFC:[MD5.60629FA01E0CAE23DA527DFA5ECAD5C7] - 11/03/2015 - 11:21:04 ---A- . (.Microsoft Corporation - Bibliothèque partagée MFCDLL - Version comm.) -- C:\Windows\System32\mfc42.dll [1464832]
O44 - LFC:[MD5.20433FD8C8F460567DE93F472A4D749F] - 11/03/2015 - 11:21:04 ---A- . (.Microsoft Corporation - Bibliothèque partagée MFCDLL - Version comm.) -- C:\Windows\System32\mfc42u.dll [1488896]
O44 - LFC:[MD5.81CB7FF2FF19D639FD75B6B992BABC43] - 11/03/2015 - 11:21:04 ---A- . (.Microsoft Corporation - Direct3D HLSL Compiler.) -- C:\Windows\System32\D3DCompiler_47.dll [4298240]
O44 - LFC:[MD5.D0CA07F5FF2002A912916319048648F2] - 11/03/2015 - 11:21:05 ---A- . (.Microsoft Corporation - atlthunk.dll.) -- C:\Windows\System32\atlthunk.dll [48128]
O44 - LFC:[MD5.77F28E71B2C0297AB67EA81878B1FA83] - 11/03/2015 - 11:21:52 ---A- . (.Microsoft Corporation - Bibliothèque principale du Gestionnaire de.) -- C:\Windows\System32\dwmcore.dll [2257408]
O44 - LFC:[MD5.42F88B57CAE42FC10059C887B3FCFCEA] - 11/03/2015 - 11:22:43 ---A- . (.Microsoft Corporation - Pilote de miniport Bluetooth pour les périp.) -- C:\Windows\System32\Drivers\hidbth.sys [97792]
O44 - LFC:[MD5.2AE4D70A3657FA4FA734B370E79F83FF] - 11/03/2015 - 11:23:35 ---A- . (.Microsoft Corporation - DLL de spouleur local.) -- C:\Windows\System32\localspl.dll [1091072]
O44 - LFC:[MD5.DA2B6A24C80EC14233905F920D1BB658] - 11/03/2015 - 11:23:35 ---A- . (.Microsoft Corporation - DLL d'objets PrintUI.) -- C:\Windows\System32\puiobj.dll [477184]
O44 - LFC:[MD5.6D55DCAEBA737B77653409FAA727184D] - 11/03/2015 - 11:23:35 ---A- . (.Microsoft Corporation - DLL puiapi.) -- C:\Windows\System32\puiapi.dll [192512]
O44 - LFC:[MD5.7F586D08E965FA00EE085319EF5BBAF1] - 11/03/2015 - 11:23:35 ---A- . (.Microsoft Corporation - Fournisseur d'impression de rendu côté clie.) -- C:\Windows\System32\win32spl.dll [864256]
O44 - LFC:[MD5.0531C52DF08DA3A962496AF006847025] - 11/03/2015 - 11:23:35 ---A- . (.Microsoft Corporation - prnntfy DLL.) -- C:\Windows\System32\prnntfy.dll [221184]
O44 - LFC:[MD5.5E12769C22FEB99009AB1E33C7DEB307] - 11/03/2015 - 11:23:36 ---A- . (.Microsoft Corporation - DLL de fournisseur d'impression DAF.) -- C:\Windows\System32\DafPrintProvider.dll [269312]
O44 - LFC:[MD5.19DC528EA04273A5D3BCA21245D92ACD] - 11/03/2015 - 11:23:36 ---A- . (.Microsoft Corporation - DLL d'interface utilisateur de feuille des.) -- C:\Windows\System32\compstui.dll [309760]
O44 - LFC:[MD5.4E26FB5A074F526E0E4956925398678D] - 11/03/2015 - 11:23:36 ---A- . (.Microsoft Corporation - Find Network Printers COM Component.) -- C:\Windows\System32\findnetprinters.dll [66048]
O44 - LFC:[MD5.CDF8D88B46FC4FA140B5F8B8B06192ED] - 11/03/2015 - 11:23:36 ---A- . (.Microsoft Corporation - Modifier les paramètres de l'imprimante.) -- C:\Windows\System32\printui.exe [62976]
O44 - LFC:[MD5.6D3A2565E01B3E4B0F1BEDB0D4B00B3F] - 11/03/2015 - 11:24:24 ---A- . (.Microsoft Corporation - NDIS (Network Driver Interface Specificatio.) -- C:\Windows\System32\Drivers\ndis.sys [1113920]
O44 - LFC:[MD5.85012538999DC5628E67B7579FF5034F] - 11/03/2015 - 11:25:10 ---A- . (.Adobe Systems - Windows NT OpenType/Type 1 API Library..) -- C:\Windows\System32\atmlib.dll [44032]
O44 - LFC:[MD5.BBBE2BA24785E3A7ED1FF706B01C7770] - 11/03/2015 - 11:25:10 ---A- . (.Adobe Systems Incorporated - Windows NT OpenType/Type 1 Font Driver.) -- C:\Windows\System32\atmfd.dll [358912]
O44 - LFC:[MD5.43770ECAF45CC63C9F7B30258DF352D7] - 11/03/2015 - 11:25:10 ---A- . (.Microsoft Corporation - Font Subsetting DLL.) -- C:\Windows\System32\fontsub.dll [96256]
O44 - LFC:[MD5.6E3381152091034DD1773C7B5D0B85E5] - 11/03/2015 - 11:25:11 ---A- . (.Microsoft Corporation - DCI Manager.) -- C:\Windows\System32\dciman32.dll [14848]
O44 - LFC:[MD5.3E1F222E78B25B921C1130EB1B9370FE] - 11/03/2015 - 11:25:11 ---A- . (.Microsoft Corporation - Language Pack.) -- C:\Windows\System32\lpk.dll [3072]
O44 - LFC:[MD5.C08E7F8AC41901403799B237DA7BA10E] - 11/03/2015 - 11:25:59 ---A- . (.Microsoft Corporation - Contrôle d'édition de texte enrichi, v7.5.) -- C:\Windows\System32\msftedit.dll [3097600]
O44 - LFC:[MD5.DF55E2D7D045BA1A2C43029DEDF0B59D] - 11/03/2015 - 11:26:48 ---A- . (.Microsoft Corporation - Assistant Impression de photographies.) -- C:\Windows\System32\photowiz.dll [347136]
O44 - LFC:[MD5.EEB76824DC14283A010CAE4E2B5AB852] - 11/03/2015 - 11:29:22 ---A- . (.Microsoft Corporation - SHCORE.) -- C:\Windows\System32\SHCore.dll [723072]
O44 - LFC:[MD5.BDE6152B584ABDA7DA102B363E58354F] - 11/03/2015 - 11:30:23 ---A- . (...) -- C:\Windows\System32\ApnDatabase.xml [396419]
O44 - LFC:[MD5.72BEE6C5173218A8846D31DF68D2AE4F] - 11/03/2015 - 11:31:22 ---A- . (.Microsoft Corporation - File Risk Estimation.) -- C:\Windows\System32\winshfhc.dll [14848]
O44 - LFC:[MD5.9F4DF0043965808973023A9B51A11136] - 11/03/2015 - 11:31:22 ---A- . (.Microsoft Corporation - Microsoft Network Realtime Inspection Drive.) -- C:\Windows\System32\Drivers\WdNisDrv.sys [114496]
O44 - LFC:[MD5.D296D0F0DB2CD1504F90405603664493] - 11/03/2015 - 11:31:22 ---A- . (.Microsoft Corporation - Microsoft antimalware file system filter dr.) -- C:\Windows\System32\Drivers\WdFilter.sys [264000]
O44 - LFC:[MD5.1751F6B031ADAC34724511057D2E455D] - 11/03/2015 - 11:31:23 ---A- . (.Microsoft Corporation - Microsoft antimalware boot driver.) -- C:\Windows\System32\Drivers\WdBoot.sys [44024]
O44 - LFC:[MD5.D82C445E3D484F31CD2638A4338E5FD9] - 11/03/2015 - 11:32:23 ---A- . (.Microsoft Corporation - Calculatrice de Windows.) -- C:\Windows\System32\calc.exe [933888]
O44 - LFC:[MD5.18B4315015DE9498FA6EC14B1AC93E9A] - 12/03/2015 - 07:44:47 ---A- . (...) -- C:\Windows\System32\FNTCACHE.DAT [484144]
O44 - LFC:[MD5.F8CCA9566C77154E389DCE46AFDF6009] - 12/03/2015 - 10:36:16 ---A- . (...) -- C:\Windows\PFRO.log [5422]
O44 - LFC:[MD5.4BF25174952F6CD8D95400639DE75CC2] - 12/03/2015 - 10:36:51 ---A- . (...) -- C:\Windows\setupact.log [38158]
O44 - LFC:[MD5.E9696370A408BE6399A16FB704B858AF] - 12/03/2015 - 10:38:37 -S-A- . (...) -- C:\Windows\bootstat.dat [67584]
O44 - LFC:[MD5.1A1C7C734853B4AC45E66452E6F6DD21] - 12/03/2015 - 10:44:01 ---A- . (...) -- C:\Windows\System32\PerfStringBackup.INI [1734474]
O44 - LFC:[MD5.D65FFF6CD16571B3AB4DE90A54BF5B6B] - 12/03/2015 - 10:44:01 ---A- . (...) -- C:\Windows\System32\perfc009.dat [127812]
O44 - LFC:[MD5.73F9E8BD86956BAAABB4AD9D4B3FD7EC] - 12/03/2015 - 10:44:01 ---A- . (...) -- C:\Windows\System32\perfc00C.dat [151632]
O44 - LFC:[MD5.2C66F4242090655A9D4F54CAE06FC956] - 12/03/2015 - 10:44:01 ---A- . (...) -- C:\Windows\System32\perfh009.dat [687180]
O44 - LFC:[MD5.D4F160507A66C7ABA8D7A495428DF219] - 12/03/2015 - 10:44:01 ---A- . (...) -- C:\Windows\System32\perfh00C.dat [775930]
O44 - LFC:[MD5.7EEC2CA974D016A8E4FD67939D03D808] - 12/03/2015 - 10:53:31 ---A- . (...) -- C:\PhysicalDisk0_MBR.bin [512]
O44 - LFC:[MD5.686140EDCE9450B3D427BF752B92BCAE] - 12/03/2015 - 10:54:18 ---A- . (...) -- C:\Windows\WindowsUpdate.log [1414056]
O44 - LFC:[MD5.D4A564BABFF82F56E68835FBFDA7AB00] - 25/02/2015 - 18:45:48 ---A- . (...) -- C:\Windows\System32\locale.nls [513488]
O44 - LFC:[MD5.3B63AA6552F66B518F85BD3A8ED7C2F5] - 25/02/2015 - 18:45:48 ---A- . (.Microsoft Corporation - HôteClassementGlobal.) -- C:\Windows\System32\GlobCollationHost.dll [323072]
O44 - LFC:[MD5.3A7D8742A6BE524A2165F93375AE1872] - 25/02/2015 - 18:45:49 ---A- . (.Microsoft Corporation - Windows Globalization.) -- C:\Windows\System32\Windows.Globalization.dll [1200128]
O44 - LFC:[MD5.35A579220C411DED00E0DA5AFB755178] - 26/02/2015 - 00:26:52 ---A- . (.Microsoft Corporation - Pilote Win32 multi-utilisateurs.) -- C:\Windows\System32\win32k.sys [4178944]
~ Files: 93 Scanned in 00mn 04s
---\\ Déni du service (Local Security Authority) (O48)
O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll
O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l'Éditeur de configuration de sécurité Windows.) -- C:\Windows\System32\scecli.dll
~ LSA: 3 Scanned in 00mn 00s
---\\ Contrôle du Safe Boot (CSB) (O49)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\BasicDisplay.sys . (.Microsoft Corporation - Microsoft Basic Display Driver.) -- C:\Windows\System32\Drivers\BasicDisplay.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\BasicRender.sys . (.Microsoft Corporation - Microsoft Basic Render Driver.) -- C:\Windows\System32\Drivers\BasicRender.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dxgkrnl.sys . (.Microsoft Corporation - DirectX Graphics Kernel.) -- C:\Windows\System32\Drivers\dxgkrnl.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\FsDepends.sys . (.Microsoft Corporation - File System Dependency Manager Mini Filter Driver.) -- C:\Windows\System32\Drivers\FsDepends.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\System32\Drivers\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgrx.sys . (.Microsoft Corporation - Pilote d'extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\Wdf01000.sys . (.Microsoft Corporation - Runtime de l'infrastructure de pilotes en mode noyau.) -- C:\Windows\System32\Drivers\Wdf01000.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\BasicDisplay.sys . (.Microsoft Corporation - Microsoft Basic Display Driver.) -- C:\Windows\System32\Drivers\BasicDisplay.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\BasicRender.sys . (.Microsoft Corporation - Microsoft Basic Render Driver.) -- C:\Windows\System32\Drivers\BasicRender.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dxgkrnl.sys . (.Microsoft Corporation - DirectX Graphics Kernel.) -- C:\Windows\System32\Drivers\dxgkrnl.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\FsDepends.sys . (.Microsoft Corporation - File System Dependency Manager Mini Filter Driver.) -- C:\Windows\System32\Drivers\FsDepends.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\System32\Drivers\ipnat.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\nsiproxy.sys . (.Microsoft Corporation - NSI Proxy.) -- C:\Windows\System32\Drivers\nsiproxy.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpencdd.sys . (...) -- C:\Windows\System32\Drivers\rdpencdd.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\System32\Drivers\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgrx.sys . (.Microsoft Corporation - Pilote d'extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\Wdf01000.sys . (.Microsoft Corporation - Runtime de l'infrastructure de pilotes en mode noyau.) -- C:\Windows\System32\Drivers\Wdf01000.sys
~ CSB: 19 Scanned in 00mn 00s
---\\ Clé de registre Shell MountPoints2 (MPSK) (O51)
O51 - MPSK:{76e54461-ae0c-11e4-824f-806e6f6e6963}\AutoRun\command. (...) -- E:\Setup.exe (.not file.)
O51 - MPSK:{76e5478f-ae0c-11e4-824f-544249582584}\AutoRun\command. (...) -- F:\.\Setup.exe (.not file.)
~ Keys: Scanned in 00mn 00s
---\\ Recherche d'infection sur les pilotes (HKLM)(TDSD) (O52)
O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
~ TDSD: 2 Scanned in 00mn 00s
---\\ Enumération des clés de registre SecurityProviders (MCSP) (O54)
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll
~ MSCP: 2 Scanned in 00mn 00s
---\\ Enumération des clés de registre PoliciesSystem (MWPS) (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1
O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1
O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=5
O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0
O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
O55 - MWPS:[HKLM\...\Policies\System] - "EnableCursorSuppression"=1
O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=3
O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=0
O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0
O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
O55 - MWPS:[HKLM\...\Policies\System] - "SoftwareSASGeneration"=1
~ MWPS: 18 Scanned in 00mn 00s
---\\ Enumération des clés de registre PoliciesExplorer (MWPE) (O56)
O56 - MWPE:[HKLM\...\policies\Explorer] - "ForceActiveDesktopOn"=0
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktop"=1
~ MWPE Keys: 3 Scanned in 00mn 00s
---\\ Liste des pilotes du système (SDL) (O58)
O58 - SDL:22/08/2013 - 13:43:41 ---A- . (.LSI - LSI 3ware SCSI Storport Driver.) -- C:\Windows\System32\Drivers\3ware.sys [108896]
O58 - SDL:22/08/2013 - 13:43:41 ---A- . (.PMC-Sierra - PMC-Sierra Storport Driver For SPC8x6G SAS/SATA controller.) -- C:\Windows\System32\Drivers\adp80xx.sys [782176]
O58 - SDL:22/08/2013 - 13:43:41 ---A- . (.Advanced Micro Devices - AHCI 1.3 Device Driver.) -- C:\Windows\System32\Drivers\amdsata.sys [79200]
O58 - SDL:22/08/2013 - 13:43:41 ---A- . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller Driver for Windows -.) -- C:\Windows\System32\Drivers\amdsbs.sys [259424]
O58 - SDL:22/08/2013 - 13:43:40 ---A- . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\Windows\System32\Drivers\amdxata.sys [25952]
O58 - SDL:26/08/2010 - 01:11:04 ---A- . (.Alps Electric Co., Ltd. - Alps Touch Pad Driver.) -- C:\Windows\System32\Drivers\Apfiltr.sys [306296]
O58 - SDL:22/08/2013 - 13:43:41 ---A- . (.PMC-Sierra, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\System32\Drivers\arcsas.sys [114016]
O58 - SDL:06/02/2015 - 14:43:54 ---A- . (...) -- C:\Windows\System32\Drivers\aswHwid.sys [29208] =>.ALWIL Software
O58 - SDL:06/02/2015 - 14:43:54 ---A- . (.AVAST Software - avast! File System Minifilter for Windows 2003/Vista.) -- C:\Windows\System32\Drivers\aswMonFlt.sys [83280]
O58 - SDL:06/02/2015 - 14:43:54 ---A- . (.AVAST Software - avast! WFP Redirect Driver.) -- C:\Windows\System32\Drivers\aswRdr2.sys [93568]
O58 - SDL:06/02/2015 - 14:43:54 ---A- . (...) -- C:\Windows\System32\Drivers\aswRvrt.sys [65776] =>.ALWIL Software
O58 - SDL:07/02/2015 - 09:37:08 ---A- . (.AVAST Software - avast! Virtualization Driver.) -- C:\Windows\System32\Drivers\aswsnx.sys [1050432]
O58 - SDL:06/02/2015 - 14:43:54 ---A- . (.AVAST Software - avast! self protection module.) -- C:\Windows\System32\Drivers\aswSP.sys [436624]
O58 - SDL:06/02/2015 - 14:43:54 ---A- . (.AVAST Software - Stream Filter.) -- C:\Windows\System32\Drivers\aswStm.sys [116728]
O58 - SDL:06/02/2015 - 14:43:54 ---A- . (...) -- C:\Windows\System32\Drivers\aswVmm.sys [267632] =>.ALWIL Software
O58 - SDL:19/06/2012 - 06:05:46 ---A- . (.Advanced Micro Devices, Inc. - ATI Radeon Kernel Mode Driver.) -- C:\Windows\System32\Drivers\atikmdag.sys [11926016]
O58 - SDL:19/06/2012 - 06:09:14 ---A- . (.Advanced Micro Devices, Inc. - AMD multi-vendor Miniport Driver.) -- C:\Windows\System32\Drivers\atikmpag.sys [360448]
O58 - SDL:13/08/2013 - 00:25:46 ---A- . (.Windows (R) Win 7 DDK provider - BCM Function 2 Device Driver.) -- C:\Windows\System32\Drivers\bcmfn2.sys [17624]
O58 - SDL:22/08/2013 - 13:43:41 ---A- . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.) -- C:\Windows\System32\Drivers\bxvbda.sys [531296]
O58 - SDL:11/12/2013 - 03:41:40 ---A- . (.ELAN Microelectronic Corp. - ELAN SMBus Driver.) -- C:\Windows\System32\Drivers\ETDSMBus.sys [22832]
O58 - SDL:22/08/2013 - 13:43:45 ---A- . (.Broadcom Corporation - Broadcom NetXtreme II 10 GigE VBD.) -- C:\Windows\System32\Drivers\evbda.sys [3357024]
O58 - SDL:07/02/2015 - 20:29:55 ---A- . (.Huawei Technologies Co., Ltd. - USB Modem/Serial Device Driver.) -- C:\Windows\System32\Drivers\ew_hwusbdev.sys [117248]
O58 - SDL:07/02/2015 - 20:29:55 ---A- . (.Huawei Technologies Co., Ltd. - ew_jubusenum Driver.) -- C:\Windows\System32\Drivers\ew_jubusenum.sys [87040]
O58 - SDL:07/02/2015 - 20:29:55 ---A- . (.Huawei Technologies Co., Ltd. - ew_jucdcacm Driver.) -- C:\Windows\System32\Drivers\ew_jucdcacm.sys [98304]
O58 - SDL:07/02/2015 - 20:29:55 ---A- . (.Huawei Technologies Co., Ltd. - ew_jucdcndis Driver.) -- C:\Windows\System32\Drivers\ew_jucdcecm.sys [72192]
O58 - SDL:07/02/2015 - 20:29:56 ---A- . (.Huawei Technologies Co., Ltd. - ew_juextctrl Driver.) -- C:\Windows\System32\Drivers\ew_juextctrl.sys [28672]
O58 - SDL:07/02/2015 - 20:29:56 ---A- . (.Huawei Technologies Co., Ltd. - Filter Driver.) -- C:\Windows\System32\Drivers\ew_usbenumfilter.sys [13952]
O58 - SDL:22/08/2013 - 13:43:45 ---A- . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Driver.) -- C:\Windows\System32\Drivers\HpSAMD.sys [64352]
O58 - SDL:30/07/2013 - 19:47:35 ---A- . (.Intel Corporation - Intel(R) Serial IO GPIO Controller Driver.) -- C:\Windows\System32\Drivers\iaLPSSi_GPIO.sys [24568]
O58 - SDL:25/07/2013 - 20:05:39 ---A- . (.Intel Corporation - Intel(R) Serial IO I2C Controller Driver.) -- C:\Windows\System32\Drivers\iaLPSSi_I2C.sys [99320]
O58 - SDL:05/03/2013 - 20:49:44 ---A- . (.Intel Corporation - Intel Rapid Storage Technology driver - x64.) -- C:\Windows\System32\Drivers\iaStorA.sys [653296]
O58 - SDL:10/08/2013 - 01:39:30 ---A- . (.Intel Corporation - Intel Rapid Storage Technology driver (inbox) - x64.) -- C:\Windows\System32\Drivers\iaStorAV.sys [651248]
O58 - SDL:22/08/2013 - 13:43:45 ---A- . (.Intel Corporation - Intel Matrix Storage Manager driver - x64.) -- C:\Windows\System32\Drivers\iaStorV.sys [412000]
O58 - SDL:22/08/2013 - 13:43:44 ---A- . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\System32\Drivers\lsi_sas.sys [109408]
O58 - SDL:22/08/2013 - 13:43:45 ---A- . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\Windows\System32\Drivers\lsi_sas2.sys [93536]
O58 - SDL:22/08/2013 - 13:43:44 ---A- . (.LSI Corporation - LSI SAS Gen3 Driver (StorPort).) -- C:\Windows\System32\Drivers\lsi_sas3.sys [81760]
O58 - SDL:22/08/2013 - 13:43:45 ---A- . (.LSI Corporation - LSI SSS PCIe/Flash Driver (StorPort).) -- C:\Windows\System32\Drivers\lsi_sss.sys [82784]
O58 - SDL:22/08/2013 - 13:43:45 ---A- . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows.) -- C:\Windows\System32\Drivers\megasas.sys [56672]
O58 - SDL:22/08/2013 - 13:43:45 ---A- . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\System32\Drivers\megasr.sys [575840]
O58 - SDL:22/08/2013 - 13:43:49 ---A- . (.Marvell Semiconductor, Inc. - Marvell Flash Controller Driver.) -- C:\Windows\System32\Drivers\mvumis.sys [63840]
O58 - SDL:18/06/2013 - 15:45:53 ---A- . (.Intel Corporation - Intel® Wireless WiFi Link Driver.) -- C:\Windows\System32\Drivers\NETwNs64.sys [8604672]
O58 - SDL:22/08/2013 - 13:43:31 ---A- . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\System32\Drivers\nvraid.sys [150368]
O58 - SDL:22/08/2013 - 13:43:32 ---A- . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\System32\Drivers\nvstor.sys [168288]
O58 - SDL:03/09/2009 - 07:59:28 ---A- . (.REDC - RICOH MS Driver.) -- C:\Windows\System32\Drivers\rimspx64.sys [54784]
O58 - SDL:24/09/2009 - 14:31:14 ---A- . (.REDC - RICOH SD/MMC Driver.) -- C:\Windows\System32\Drivers\risdsn64.sys [76288]
O58 - SDL:03/12/2014 - 11:41:54 ---A- . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function Driver.) -- C:\Windows\System32\Drivers\RTKVHD64.sys [4290520]
O58 - SDL:22/08/2013 - 16:35:09 ---A- . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\Windows\System32\Drivers\secdrv.sys [23040]
O58 - SDL:28/06/2013 - 14:30:02 ---A- . (.Sony Corporation - Sony Firmware Extension Parser driver.) -- C:\Windows\System32\Drivers\SFEP.sys [15360]
O58 - SDL:22/08/2013 - 13:43:31 ---A- . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\System32\Drivers\sisraid2.sys [44896]
O58 - SDL:22/08/2013 - 13:43:32 ---A- . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\System32\Drivers\sisraid4.sys [81760]
O58 - SDL:31/01/2014 - 15:08:14 ---A- . (.Synaptics Incorporated - Synaptics SMBus Driver.) -- C:\Windows\System32\Drivers\Smb_driver_Intel.sys [34544]
O58 - SDL:22/01/2014 - 08:52:10 ---A- . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG USB Composite Device Driver (MSS Ver.3).) -- C:\Windows\System32\Drivers\ssudbus.sys [108800]
O58 - SDL:22/01/2014 - 08:52:10 ---A- . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG Android Modem Device Driver (MSS Ver.3).) -- C:\Windows\System32\Drivers\ssudmdm.sys [206080]
O58 - SDL:22/08/2013 - 13:43:32 ---A- . (.Promise Technology, Inc. - Promise SuperTrak EX Series Driver for Windows x64.) -- C:\Windows\System32\Drivers\stexstor.sys [31072]
O58 - SDL:11/12/2012 - 00:46:10 ---A- . (.Synaptics Incorporated - Synaptics Touchpad Driver.) -- C:\Windows\System32\Drivers\SynTP.sys [457528]
O58 - SDL:22/08/2013 - 13:43:34 ---A- . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\System32\Drivers\v
J'ai des redirection vers un site "seektosearch" suite à toute recherche google,
Voici le rapport ZHP diag, je serais extêmement reconnaissant pour toute aide, ma navigation est devenue insupportable
~ Rapport de ZHPDiag v2015.3.8.28 - Nicolas Coolman (08/03/2015)
~ Lancé par user (12/03/2015 11:01:35)
~ Facebook : https://www.facebook.com/nicolascoolman1
~ Adresse du Forum http://forum.nicolascoolman.fr
~ Traduit par Nicolas Coolman
~ Etat de la version : Version à jour.
~ Liste blanche : Désactivée par l'utilisateur
~ Elévation des Privilèges : OK
~ User Account Control (UAC): Deactivate by program
---\\ Navigateurs Internet
MSIE: Internet Explorer v11.0.9600.17690
GCIE: Google Chrome v41.0.2272.89 (Defaut)
---\\ Informations sur les produits Windows
~ Langage: Français
Windows Server License Manager Script : OK
~ Windows(R) Operating System, VOLUME_KMSCLIENT channel
Windows ID Activation : OK
~ Windows Partial Key : 6XWKK
Windows License : OK
Expiration Licence Windows : 64779 minute(s) (45 jour(s))
~ Windows Remaining Initializations Number : 1000
Software Protection Service (Protection logicielle) : OK
Windows Automatic Updates : OK
Windows Activation Technologies : OK
Windows 8.1, 64-bit (Build 9600)
---\\ Logiciels de protection du système
Avast Free Antivirus v10.0.2208
Windows Defender W8 (Deactivate)
---\\ Logiciels d'optimisation du système
---\\ Logiciels de partage PeerToPeer
---\\ Surveillance de Logiciels
---\\ Informations sur le système
~ Processor: Intel64 Family 6 Model 23 Stepping 10, GenuineIntel
~ Operating System: 64 Bits
Boot mode: Normal (Normal boot)
Total RAM: 4063 MB (68% free)
System Restore: Activé (Enable)
System drive C: has 178 GB (82%) free of 215 GB
---\\ Mode de connexion au système
~ Computer Name: PC-SONY
~ User Name: user
~ All Users Names: user, Administrateur,
~ Unselected Option: None
Logged in as Administrator
---\\ Variables d'environnement
~ System Unit : C:\
~ %AppZHP% : C:\Users\user\AppData\Roaming\ZHP\
~ %AppData% : C:\Users\user\AppData\Roaming\
~ %Desktop% : C:\Users\user\Desktop\
~ %Favorites% : C:\Users\user\Favorites\
~ %LocalAppData% : C:\Users\user\AppData\Local\
~ %StartMenu% : C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\
---\\ Enumération des unités disques
C: Hard drive, Flash drive, Thumb drive (Free 178 Go of 215 Go)
D: Hard drive, Flash drive, Thumb drive (Free 0 Go of 0 Go)
E: CD-ROM drive (Not Inserted)
F: Floppy drive, Flash card reader, USB Key (Not Inserted)
G: Floppy drive, Flash card reader, USB Key (Not Inserted)
---\\ Etat du Centre de Sécurité Windows
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK
~ Security Center: 41 Scanned in 00mn 00s
---\\ Recherche particulière de fichiers génériques
[MD5.C10A66189DC8C090E7C84873EDCEBC88] - (.Microsoft Corporation - Explorateur Windows.) (.28/01/2015 - 00:47:12.) -- C:\Windows\Explorer.exe [2501368]
[MD5.48CFA7BE561A7BE144C29BB912055016] - (.Microsoft Corporation - Application de démarrage de Windows.) (.22/08/2013 - 10:58:29.) -- C:\Windows\System32\Wininit.exe [144384]
[MD5.36F99BD8A0F09BDBB7850A138845A014] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.20/02/2015 - 02:28:25.) -- C:\Windows\System32\wininet.dll [2358784]
[MD5.306EB21E5B480AE9065EA55AC8C35936] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.22/02/2014 - 10:45:48.) -- C:\Windows\System32\Winlogon.exe [562176]
[MD5.AFCAB4DC692CCE37E283B00E2D7B438F] - (.Microsoft Corporation - Bibliothèque de licences.) (.21/12/2013 - 09:54:07.) -- C:\Windows\System32\sppcomapi.dll [447488]
[MD5.374E27295F0A9DCAA8FC96370F9BEEA5] - (.Microsoft Corporation - Pilote de fonction connexe pour WinSock.) (.30/05/2014 - 04:03:03.) -- C:\Windows\system32\Drivers\AFD.sys [563200]
[MD5.74B14192CF79A72F7536B27CB8814FBD] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.22/08/2013 - 13:43:41.) -- C:\Windows\system32\Drivers\atapi.sys [26464]
[MD5.2FA6510E33F7DEFEC03658B74101A9B9] - (.Microsoft Corporation - CD-ROM File System Driver.) (.22/08/2013 - 12:40:15.) -- C:\Windows\system32\Drivers\Cdfs.sys [88576]
[MD5.C6796EA22B513E3457514D92DCDB1A3D] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.22/08/2013 - 09:46:35.) -- C:\Windows\system32\Drivers\Cdrom.sys [164352]
[MD5.A03F362C5557E238CBFA914689C77248] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.06/03/2014 - 10:22:50.) -- C:\Windows\system32\Drivers\DfsC.sys [134144]
[MD5.D4B7ED39C7900384D9E5C1283F1E7926] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.24/07/2014 - 12:45:39.) -- C:\Windows\system32\Drivers\HDAudBus.sys [76800]
[MD5.84CFC5EFA97D0C965EDE1D56F116A541] - (.Microsoft Corporation - Pilote de port i8042.) (.22/08/2013 - 12:39:15.) -- C:\Windows\system32\Drivers\i8042prt.sys [107520]
[MD5.B7342B3C58E91107F6E946A93D9D4EFD] - (.Microsoft Corporation - IP Network Address Translator.) (.27/11/2013 - 13:02:29.) -- C:\Windows\system32\Drivers\IpNat.sys [142848]
[MD5.7A1A3F213CDB3363D179D5014272025D] - (.Microsoft Corporation - Minirdr SMB Windows NT.) (.30/04/2014 - 07:41:46.) -- C:\Windows\system32\Drivers\MRxSmb.sys [402432]
[MD5.0217532E19A748F0E5D569307363D5FD] - (.Microsoft Corporation - MBT Transport driver.) (.22/08/2013 - 12:37:02.) -- C:\Windows\system32\Drivers\netBT.sys [282624]
[MD5.038C77D577900EE39410662478BB0D50] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.24/07/2014 - 16:07:52.) -- C:\Windows\system32\Drivers\ntfs.sys [2009920]
[MD5.764B1121867B2D9B31C491668AC72B2B] - (.Microsoft Corporation - Pilote de port parallèle.) (.22/08/2013 - 12:40:02.) -- C:\Windows\system32\Drivers\Parport.sys [94208]
[MD5.BBB6272B7F46C4640A8CDB8A70C3450F] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.22/08/2013 - 12:35:51.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [120832]
[MD5.680C1DAE268B6FB67FA21B389A8B79EF] - (.Microsoft Corporation - Redirecteur de périphérique de Microsoft RDP.) (.22/08/2013 - 23:26:13.) -- C:\Windows\system32\Drivers\rdpdr.sys [195584]
[MD5.FFF28F9F6823EB1756C60F1649560BBF] - (.Microsoft Corporation - TDI Translation Driver.) (.22/08/2013 - 14:25:35.) -- C:\Windows\system32\Drivers\tdx.sys [107520]
[MD5.64CA2B4A49A8EAF495E435623ECCE7DB] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.19/06/2014 - 03:13:36.) -- C:\Windows\system32\Drivers\volsnap.sys [310080]
~ Generic Processes: Scanned in 00mn 00s
---\\ Etat des fichiers cachés (Caché/Total)
~ Mes Favoris (My Favorites) : 1/3
~ Mon Bureau (My Desktop) : 1/42340
~ Menu demarrer (Programs) : 1/20
~ Hidden Files: Scanned in 00mn 11s
---\\ Processus lancés
[MD5.84092B60AA6DAB3B5E0C646AAE862A46] - (...) -- C:\Program Files (x86)\InternetEverywhere\InternetEverywhere_Launcher.exe [637936] [PID.2644]
[MD5.44ADDA5FB88EE14F57A246285775AC2F] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\avastui.exe [5227112] [PID.736]
[MD5.CE5C9977DA751DDC30952AC4DCBCA788] - (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe [49208] [PID.2124]
[MD5.82E0EA0C23F556FB17ADB98E8E7F594E] - (...) -- C:\Program Files (x86)\InternetEverywhere\InternetEverywhere.exe [1739760] [PID.2240]
[MD5.9201E92771F3D536DA4A53FDCC4B976B] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [809288] [PID.3624]
[MD5.6B7BE218304D5DCCCBFFAE29F31F5AE7] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [8184832] [PID.1476]
~ Processes Running: Scanned in 00mn 00s
---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Preferences
---\\ Liste des dossiers d'extension Google Chrome
~ Google Lines Browser: 0 Scanned in 00mn 03s
---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.tn
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R3 - URLSearchHook: Microsoft Url Search Hook [64Bits] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (11.00.9600.17496 (winblue_r5.141121-1500)) -- C:\Windows\SysWOW64\ieframe.dll
~ IE Browser: 15 Scanned in 00mn 00s
---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Proxy management: Scanned in 00mn 00s
---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
~ Keys: Scanned in 00mn 00s
---\\ Hosts file redirection (O1)
~ Le fichier hôte est sain (The hosts file is clean) (21)
~ Hosts File: Scanned in 00mn 00s
---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: avast! Online Security [64Bits] - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - IE Webrep plugin.) -- C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
~ BHO: 2 Scanned in 00mn 00s
---\\ Applications lancées au démarrage du système (O4)
O4 - HKLM\..\Run: [Apoint] C:\Program Files (x86)\Apoint\Apoint.exe (.not file.)
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files (x86)\Synaptics\SynTP\SynTPEnh.exe (.not file.)
O4 - HKLM\..\Wow6432Node\Run: [AvastUI.exe] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
O4 - HKLM\..\Wow6432Node\Run: [HP Software Update] . (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe =>.Hewlett-Packard Co
~ Application: Scanned in 00mn 00s
---\\ Invisibilité de l'icône d'options IE dans le panneau de Configuration (O5)
O5 - control.ini: [HKLM\..\Control Panel] inetcpl.cpl=no
~ IE Control Panel: 1 Scanned in 00mn 00s
---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll =>.Microsoft Corporation
O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll
~ Winsock: 6 Scanned in 00mn 00s
---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{363E0742-AB56-4391-9F19-FFD7D65A1550}: DhcpNameServer = 10.47.9.33 193.95.122.30
O17 - HKLM\System\CCS\Services\Tcpip\..\{B0DBD2EE-851E-4082-A21B-0508AF3B8772}: DhcpNameServer = 192.168.43.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{FF56D14B-240E-48FD-8A10-037AB3BF50F6}: DhcpNameServer = 10.47.9.33 193.95.122.30
O17 - HKLM\System\CS1\Services\Tcpip\..\{363E0742-AB56-4391-9F19-FFD7D65A1550}: DhcpNameServer = 10.47.9.33 193.95.122.30
O17 - HKLM\System\CS1\Services\Tcpip\..\{B0DBD2EE-851E-4082-A21B-0508AF3B8772}: DhcpNameServer = 192.168.43.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{FF56D14B-240E-48FD-8A10-037AB3BF50F6}: DhcpNameServer = 10.47.9.33 193.95.122.30
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.47.9.33 193.95.122.30
~ Domain: Scanned in 00mn 00s
---\\ Protocole additionnel (O18)
O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation
O18 - Filter: text/xml [64Bits] - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.dll =>.Microsoft Corporation
~ Protocole Additionnel: Scanned in 00mn 00s
---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
~ SSODL: 1 Scanned in 00mn 00s
---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: avast! Antivirus (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google Inc
O23 - Service: InternetEverywhere_Service (InternetEverywhere_Service) . (...) - C:\Program Files (x86)\InternetEverywhere\InternetEverywhere_Service.exe
~ Services: 3 Scanned in 00mn 16s
---\\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(...) - (.not file.)
~ Desktop Component: 4 Scanned in 00mn 00s
---\\ Enumère les données de BootExecute (BEX) (O34)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
~ BEX: 1 Scanned in 00mn 00s
---\\ Tâches planifiées en automatique (O39)
[MD5.DD3A4BEBE7EA3E75F71F3D9E9E2AA016] [APT] [AutoKMS] (...) -- C:\Windows\AutoKMS\AutoKMS.exe [3798528] =>Trojan.AutoKMS
[MD5.4BB7714617D50D77FCDA6B0182FD8A9A] [APT] [avast! Emergency Update] (.AVAST Software.) -- C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [857888]
[MD5.E1B44A75947137F4143308D566889837] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [107848]
[MD5.E1B44A75947137F4143308D566889837] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [107848]
[MD5.F012A9A910D0D37FAEDD6010D7F6F218] [APT] [HPCustParticipation HP Deskjet 1510 series] (.Hewlett-Packard Co..) -- C:\Program Files\HP\HP Deskjet 1510 series\Bin\HPCustPartic.exe [5422112]
O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job [1076]
O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore [1076]
O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job [1080]
O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA [1080]
~ Scheduled Task: 12 Scanned in 00mn 03s
---\\ Composants installés (ActiveSetup Installed Components) (O40)
O40 - ASIC: Microsoft Windows Media Player [64Bits] - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll =>.Microsoft Corporation
O40 - ASIC: Microsoft Windows Media Player 12.0 [64Bits] - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\SysWOW64\wmpdxm.dll =>.Microsoft Corporation
O40 - ASIC: Themes Setup [64Bits] - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\Windows\System32\themeui.dll
O40 - ASIC: Microsoft Windows [64Bits] - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Windows Mail.) -- C:\Program Files (x86)\Windows Mail\WinMail.exe =>.Microsoft Corporation
O40 - ASIC: Browsing Enhancements [64Bits] - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\Windows\System32\msieftp.dll
O40 - ASIC: Microsoft Windows Media Player [64Bits] - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll =>.Microsoft Corporation
O40 - ASIC: Windows Desktop Update [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll
O40 - ASIC: Web Platform Customizations [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe
O40 - ASIC: (no name) [64Bits] - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\System32\mscories.dll
~ Active Setup: 9 Scanned in 00mn 00s
---\\ Pilotes lancés au démarrage du système (O41)
O41 - Driver: C:\Windows\System32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Pilote de fonction connexe pour WinSock.) - C:\Windows\system32\drivers\afd.sys
O41 - Driver: C:\Windows\System32\drivers\ahcache.sys (ahcache) . (.Microsoft Corporation - Application Compatibility Cache.) - C:\Windows\System32\DRIVERS\ahcache.sys
O41 - Driver: (aswRdr) . (.AVAST Software - avast! WFP Redirect Driver.) - C:\Windows\system32\drivers\aswRdr2.sys
O41 - Driver: (aswSnx) . (.AVAST Software - avast! Virtualization Driver.) - C:\Windows\system32\drivers\aswSnx.sys
O41 - Driver: (aswSP) . (.AVAST Software - avast! self protection module.) - C:\Windows\system32\drivers\aswSP.sys
O41 - Driver: (BasicDisplay) . (.Microsoft Corporation - Microsoft Basic Display Driver.) - C:\Windows\system32\drivers\BasicDisplay.sys
O41 - Driver: (BasicRender) . (.Microsoft Corporation - Microsoft Basic Render Driver.) - C:\Windows\system32\drivers\BasicRender.sys
O41 - Driver: cdrom.inf (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\system32\drivers\cdrom.sys
O41 - Driver: C:\Windows\System32\drivers\dam.sys (dam) . (.Microsoft Corporation - DAM Kernel Driver.) - C:\Windows\System32\drivers\dam.sys
O41 - Driver: C:\Windows\System32\wkssvc.dll (Dfsc) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys
O41 - Driver: mssmbios.inf (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\system32\drivers\mssmbios.sys
O41 - Driver: netnb.inf (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys
O41 - Driver: C:\Windows\System32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys
O41 - Driver: npsvctrig.inf (npsvctrig) . (.Microsoft Corporation - Named pipe service triggers.) - C:\Windows\system32\drivers\npsvctrig.sys
O41 - Driver: C:\Windows\System32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys
O41 - Driver: C:\Windows\System32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\system32\DRIVERS\pacer.sys
O41 - Driver: C:\Windows\System32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) - C:\Windows\System32\DRIVERS\rdbss.sys
O41 - Driver: C:\Windows\System32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\system32\DRIVERS\tdx.sys
O41 - Driver: C:\Windows\System32\drivers\vwififlt.sys (vwififlt) . (.Microsoft Corporation - Virtual WiFi Filter Driver.) - C:\Windows\system32\DRIVERS\vwififlt.sys
~ Drivers: 38 Scanned in 00mn 00s
---\\ Logiciels installés (O42)
O42 - Logiciel: Alps Pointing-device for VAIO - (.ALPS ELECTRIC CO., LTD..) [HKLM][64Bits] -- {9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}
O42 - Logiciel: Avast Free Antivirus - (.AVAST Software.) [HKLM][64Bits] -- Avast
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM][64Bits] -- Google Chrome
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {60EC980A-BDA2-4CB6-A427-B07A5498B4CA}
O42 - Logiciel: HP Deskjet 1510 series Aide - (.Hewlett Packard.) [HKLM][64Bits] -- {00645C10-53C9-46DC-B7D0-6F7B006972E9}
O42 - Logiciel: HP Photo Creations - (.HP.) [HKLM][64Bits] -- HP Photo Creations
O42 - Logiciel: HP Update - (.Hewlett-Packard.) [HKLM][64Bits] -- {6F1C00D2-25C2-4CBA-8126-AE9A6E2E9CD5}
O42 - Logiciel: Internet Everywhere - (.Internet Everywhere.) [HKLM][64Bits] -- InternetEverywhere
O42 - Logiciel: Logiciel de base du périphérique HP Deskjet 1510 series - (.Hewlett-Packard Co..) [HKLM][64Bits] -- {6FA5A547-D8A7-4408-BC2A-5789CFB09583} =>.Hewlett-Packard Co
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}
O42 - Logiciel: Synaptics Pointing Device Driver - (.Synaptics Incorporated.) [HKLM][64Bits] -- SynTPDeinstKey
O42 - Logiciel: Étude pour l'amélioration du produit HP Deskjet 1510 series - (.Hewlett-Packard Co..) [HKLM][64Bits] -- {AE2E50DB-8B99-48B3-82DC-C355F4D55545} =>.Hewlett-Packard Co
~ Logic: 33 Scanned in 00mn 00s
---\\ HKCU & HKLM Software Keys
[HKCU\Software\AVAST Software]
[HKCU\Software\AppDataLow]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\Google]
[HKCU\Software\HP]
[HKCU\Software\Hewlett-Packard]
[HKCU\Software\Local AppWizard-Generated Applications]
[HKCU\Software\Macromedia]
[HKCU\Software\Mine]
[HKCU\Software\MozillaPlugins]
[HKCU\Software\Netscape]
[HKCU\Software\ODBC]
[HKCU\Software\Policies]
[HKCU\Software\RegisteredApplications]
[HKCU\Software\Synaptics]
[HKCU\Software\Visan]
[HKCU\Software\WebToGo]
[HKCU\Software\Wow6432Node]
[HKCU\Software\ZebHelpProcess Helper]
[HKCU\Software\drpsu]
[HKLM\Software\AMD]
[HKLM\Software\ATI Technologies]
[HKLM\Software\Alps]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\DTS]
[HKLM\Software\Dolby]
[HKLM\Software\HP]
[HKLM\Software\InstalledOptions]
[HKLM\Software\Intel]
[HKLM\Software\Knowles]
[HKLM\Software\Macromedia]
[HKLM\Software\Nahimic]
[HKLM\Software\Nuance]
[HKLM\Software\ODBC]
[HKLM\Software\Policies]
[HKLM\Software\Realtek]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\SRS Labs]
[HKLM\Software\SonicFocus]
[HKLM\Software\Synaptics]
[HKLM\Software\Waves Audio]
[HKLM\Software\WebToGo]
[HKLM\Software\Wow6432Node\AVAST Software]
[HKLM\Software\Wow6432Node\AdwCleaner]
[HKLM\Software\Wow6432Node\Classes]
[HKLM\Software\Wow6432Node\Clients]
[HKLM\Software\Wow6432Node\Google]
[HKLM\Software\Wow6432Node\Hewlett-Packard]
[HKLM\Software\Wow6432Node\Intel]
[HKLM\Software\Wow6432Node\Macromedia]
[HKLM\Software\Wow6432Node\MozillaPlugins]
[HKLM\Software\Wow6432Node\Mozilla]
[HKLM\Software\Wow6432Node\Nuance]
[HKLM\Software\Wow6432Node\ODBC]
[HKLM\Software\Wow6432Node\Policies]
[HKLM\Software\Wow6432Node\RegisteredApplications]
[HKLM\Software\Wow6432Node\RocketLife]
[HKLM\Software\Wow6432Node\SRS Labs]
[HKLM\Software\Wow6432Node\Visan]
[HKLM\Software\Wow6432Node\WebToGo]
[HKLM\Software\Wow6432Node]
[HKLM\Software\Yamaha APO]
~ Key Software: 111 Scanned in 00mn 00s
---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 06/02/2015 - 14:41:03 - [] ----D C:\Program Files (x86)\Common Files
O43 - CFD: 12/03/2015 - 09:41:46 - [] ----D C:\Program Files (x86)\Google
O43 - CFD: 11/02/2015 - 16:31:46 - [] ----D C:\Program Files (x86)\Hewlett-Packard
O43 - CFD: 11/02/2015 - 16:31:06 - [] ----D C:\Program Files (x86)\HP
O43 - CFD: 11/02/2015 - 16:31:41 - [] ----D C:\Program Files (x86)\HP Photo Creations
O43 - CFD: 11/03/2015 - 21:15:18 - [] ----D C:\Program Files (x86)\Internet Explorer
O43 - CFD: 07/02/2015 - 20:30:02 - [] ----D C:\Program Files (x86)\InternetEverywhere
O43 - CFD: 06/02/2015 - 14:41:05 - [] ----D C:\Program Files (x86)\Microsoft Office
O43 - CFD: 06/02/2015 - 14:41:03 - [] ----D C:\Program Files (x86)\Microsoft Visual Studio
O43 - CFD: 06/02/2015 - 14:41:24 - [] ----D C:\Program Files (x86)\Microsoft Works
O43 - CFD: 22/08/2013 - 16:36:30 - [] ----D C:\Program Files (x86)\Microsoft.NET
O43 - CFD: 06/02/2015 - 14:41:11 - [] ----D C:\Program Files (x86)\MSBuild
O43 - CFD: 11/03/2015 - 21:15:23 - [] ----D C:\Program Files (x86)\Windows Defender
O43 - CFD: 22/08/2013 - 23:24:46 - [] ----D C:\Program Files (x86)\Windows Mail =>.Microsoft Corporation
O43 - CFD: 11/02/2015 - 23:19:27 - [] ----D C:\Program Files (x86)\Windows Media Player =>.Microsoft Corporation
O43 - CFD: 11/02/2015 - 23:19:27 - [] ----D C:\Program Files (x86)\Windows Multimedia Platform
O43 - CFD: 22/08/2013 - 16:36:30 - [] ----D C:\Program Files (x86)\Windows NT
O43 - CFD: 22/08/2013 - 23:24:46 - [] ----D C:\Program Files (x86)\Windows Photo Viewer
O43 - CFD: 11/02/2015 - 23:19:27 - [] ----D C:\Program Files (x86)\Windows Portable Devices
O43 - CFD: 22/08/2013 - 16:36:30 - [] -SH-D C:\Program Files (x86)\Windows Sidebar
O43 - CFD: 22/08/2013 - 16:36:30 - [] ----D C:\Program Files (x86)\WindowsPowerShell
O43 - CFD: 12/03/2015 - 10:50:17 - [] ----D C:\Program Files (x86)\ZHPDiag =>.Nicolas Coolman
O43 - CFD: 06/02/2015 - 14:41:03 - [] ----D C:\Program Files (x86)\Common Files\DESIGNER
O43 - CFD: 07/02/2015 - 21:25:58 - [] ----D C:\Program Files (x86)\Common Files\Microsoft Shared
O43 - CFD: 22/08/2013 - 16:36:33 - [] ----D C:\Program Files (x86)\Common Files\Services
O43 - CFD: 06/02/2015 - 14:38:23 - [] ----D C:\Program Files (x86)\Common Files\System
O43 - CFD: 22/08/2013 - 15:45:52 - [] -SH-D C:\ProgramData\Application Data
O43 - CFD: 06/02/2015 - 14:43:13 - [] ----D C:\ProgramData\AVAST Software
O43 - CFD: 06/02/2015 - 12:40:56 - [] -SH-D C:\ProgramData\Bureau
O43 - CFD: 22/08/2013 - 15:45:52 - [] -SH-D C:\ProgramData\Desktop
O43 - CFD: 22/08/2013 - 15:45:52 - [] -SH-D C:\ProgramData\Documents
O43 - CFD: 11/02/2015 - 16:30:25 - [] ----D C:\ProgramData\HP
O43 - CFD: 11/02/2015 - 16:31:39 - [] ----D C:\ProgramData\HP Photo Creations
O43 - CFD: 06/02/2015 - 12:40:56 - [] -SH-D C:\ProgramData\Menu Démarrer
O43 - CFD: 06/02/2015 - 15:39:49 - [] -S--D C:\ProgramData\Microsoft
O43 - CFD: 06/02/2015 - 14:41:58 - [] ----D C:\ProgramData\Microsoft Help
O43 - CFD: 06/02/2015 - 12:56:27 - [] ----D C:\ProgramData\Microsoft Toolkit =>Trojan.AutoKMS
O43 - CFD: 06/02/2015 - 12:40:56 - [] -SH-D C:\ProgramData\Modèles
O43 - CFD: 22/08/2013 - 23:26:19 - [] ----D C:\ProgramData\regid.1991-06.com.microsoft
O43 - CFD: 22/08/2013 - 15:45:52 - [] -SH-D C:\ProgramData\Start Menu
O43 - CFD: 22/08/2013 - 15:45:52 - [] -SH-D C:\ProgramData\Templates
O43 - CFD: 11/02/2015 - 16:31:38 - [] ----D C:\ProgramData\Visan
O43 - CFD: 22/08/2013 - 16:36:33 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility
O43 - CFD: 11/03/2015 - 21:15:25 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 11/02/2015 - 23:19:39 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 06/02/2015 - 14:44:41 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
O43 - CFD: 12/03/2015 - 09:41:57 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
O43 - CFD: 11/02/2015 - 16:31:41 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
O43 - CFD: 07/02/2015 - 20:30:21 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Everywhere
O43 - CFD: 22/08/2013 - 16:36:33 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 06/02/2015 - 14:41:57 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
O43 - CFD: 07/02/2015 - 20:30:01 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp
O43 - CFD: 11/02/2015 - 23:19:39 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools
O43 - CFD: 22/08/2013 - 23:26:19 - [0] R-H-D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC
O43 - CFD: 12/03/2015 - 10:50:17 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP =>.Nicolas Coolman
O43 - CFD: 06/02/2015 - 12:43:28 - [] ----D C:\Users\user\AppData\Roaming\Adobe
O43 - CFD: 06/02/2015 - 14:45:37 - [] ----D C:\Users\user\AppData\Roaming\AVAST Software
O43 - CFD: 18/02/2015 - 16:38:55 - [] ----D C:\Users\user\AppData\Roaming\HpUpdate
O43 - CFD: 12/03/2015 - 10:38:25 - [] ----D C:\Users\user\AppData\Roaming\InternetEverywhere
O43 - CFD: 07/02/2015 - 20:35:06 - [] ----D C:\Users\user\AppData\Roaming\Macromedia
O43 - CFD: 10/03/2015 - 06:47:41 - [] -S--D C:\Users\user\AppData\Roaming\Microsoft
O43 - CFD: 12/03/2015 - 11:02:14 - [] ----D C:\Users\user\AppData\Roaming\ZHP =>.Nicolas Coolman
O43 - CFD: 06/02/2015 - 12:42:54 - [] -SH-D C:\Users\user\AppData\Local\Application Data
O43 - CFD: 03/03/2015 - 15:07:47 - [] ----D C:\Users\user\AppData\Local\Diagnostics
O43 - CFD: 17/02/2015 - 13:29:36 - [] -SH-D C:\Users\user\AppData\Local\EmieBrowserModeList
O43 - CFD: 12/02/2015 - 12:19:18 - [] -SH-D C:\Users\user\AppData\Local\EmieSiteList
O43 - CFD: 12/02/2015 - 12:19:18 - [] -SH-D C:\Users\user\AppData\Local\EmieUserList
O43 - CFD: 12/03/2015 - 09:42:04 - [] ----D C:\Users\user\AppData\Local\Google
O43 - CFD: 06/02/2015 - 12:42:54 - [] -SH-D C:\Users\user\AppData\Local\Historique
O43 - CFD: 11/02/2015 - 16:47:04 - [] ----D C:\Users\user\AppData\Local\HP
O43 - CFD: 03/03/2015 - 15:07:29 - [] ----D C:\Users\user\AppData\Local\Microsoft
O43 - CFD: 06/02/2015 - 14:38:13 - [0] ----D C:\Users\user\AppData\Local\Microsoft Help
O43 - CFD: 12/02/2015 - 12:16:19 - [] ----D C:\Users\user\AppData\Local\Packages
O43 - CFD: 12/03/2015 - 11:00:29 - [] ----D C:\Users\user\AppData\Local\Temp
O43 - CFD: 06/02/2015 - 12:42:54 - [] -SH-D C:\Users\user\AppData\Local\Temporary Internet Files
O43 - CFD: 06/02/2015 - 12:43:26 - [0] ----D C:\Users\user\AppData\Local\VirtualStore
O43 - CFD: 22/08/2013 - 16:36:32 - [] R---D C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
O43 - CFD: 22/08/2013 - 16:36:32 - [] R---D C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 12/03/2015 - 07:45:35 - [] R---D C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 22/08/2013 - 16:36:32 - [] ----D C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 12/03/2015 - 07:45:35 - [] R---D C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
O43 - CFD: 22/08/2013 - 16:36:32 - [] R---D C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
~ Program Folder: 82 Scanned in 00mn 00s
---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.E63FD4AED397626B314B96EA11341220] - 06/03/2015 - 03:53:56 ---A- . (.Microsoft Corporation - Fournisseur de sécurité TLS/SSL.) -- C:\Windows\System32\schannel.dll [430080]
O44 - LFC:[MD5.D103F021B60F27DEBAEC4D316C7A0F42] - 11/03/2015 - 11:06:50 ---A- . (.Microsoft Corporation - DLL de MSCTF Server.) -- C:\Windows\System32\msctf.dll [1384712]
O44 - LFC:[MD5.C10A66189DC8C090E7C84873EDCEBC88] - 11/03/2015 - 11:06:57 ---A- . (.Microsoft Corporation - Explorateur Windows.) -- C:\Windows\explorer.exe [2501368]
O44 - LFC:[MD5.6334135544739B49C776DFE0B6F0FA9F] - 11/03/2015 - 11:07:00 ---A- . (.Microsoft Corporation - Codec pour photographie Windows Media Photo.) -- C:\Windows\System32\WMPhoto.dll [402432]
O44 - LFC:[MD5.F91E83532107E8B0A1819DB2D96366CB] - 11/03/2015 - 11:07:07 ---A- . (.Microsoft Corporation - Microsoft Windows MRM.) -- C:\Windows\System32\MrmCoreR.dll [1090048]
O44 - LFC:[MD5.B9109627AA19B15BA4BFA5255AAECBF2] - 11/03/2015 - 11:07:11 ---A- . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll [22291584]
O44 - LFC:[MD5.55E39907F34D14E0794DD17C915795E5] - 11/03/2015 - 11:08:56 ---A- . (.Microsoft Corporation - LockScreenContent Server.) -- C:\Windows\System32\LockScreenContentServer.exe [46456]
O44 - LFC:[MD5.5A1F895338418DF8C1D31E590DC1BAA5] - 11/03/2015 - 11:09:09 ---A- . (.Microsoft Corporation - Microsoft Windows Codecs Library.) -- C:\Windows\System32\WindowsCodecs.dll [1763352]
O44 - LFC:[MD5.40DF85D8B2B0171EF5F23AA1B5CD9A62] - 11/03/2015 - 11:09:27 ---A- . (.Microsoft Corporation - Microsoft (R) JScript.) -- C:\Windows\System32\jscript9.dll [6035456]
O44 - LFC:[MD5.2335F6BF8A127E31EB0E2D9A82F188A0] - 11/03/2015 - 11:09:30 ---A- . (.Microsoft Corporation - Navigateur Internet.) -- C:\Windows\System32\ieframe.dll [14398976]
O44 - LFC:[MD5.22C4867C690C38B18B2C1A0B072CD0C4] - 11/03/2015 - 11:09:31 ---A- . (.Microsoft Corporation - Panneau de configuration Internet.) -- C:\Windows\System32\inetcpl.cpl [2125824]
O44 - LFC:[MD5.501A38B72FA264605123B4FACF53F057] - 11/03/2015 - 11:09:32 ---A- . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll [1548288]
O44 - LFC:[MD5.62269DEFF17AB006217330A24EA8577B] - 11/03/2015 - 11:09:33 ---A- . (.Microsoft Corporation - Utilitaire à l'exécution pour Internet Expl.) -- C:\Windows\System32\iertutil.dll [2886144]
O44 - LFC:[MD5.C010D371BC7FE8ECC01EFE5E92D8E996] - 11/03/2015 - 11:09:34 ---A- . (.Microsoft Corporation - ActiveX Interface Marshaling Library.) -- C:\Windows\System32\actxprxy.dll [2865152]
O44 - LFC:[MD5.36F99BD8A0F09BDBB7850A138845A014] - 11/03/2015 - 11:09:34 ---A- . (.Microsoft Corporation - Extensions Internet pour Win32.) -- C:\Windows\System32\wininet.dll [2358784]
O44 - LFC:[MD5.3DE5D78D843D3F44B5D9189D61C2725E] - 11/03/2015 - 11:09:37 ---A- . (.Microsoft Corporation - Contrôleur de site Web.) -- C:\Windows\System32\webcheck.dll [262144]
O44 - LFC:[MD5.DF9BF7D44E9EC59924B642AB478E72DA] - 11/03/2015 - 11:09:37 ---A- . (.Microsoft Corporation - Personnalisation d'IEAK.) -- C:\Windows\System32\iedkcs32.dll [374272]
O44 - LFC:[MD5.5443F21A33DB376734DBE47F7635542C] - 11/03/2015 - 11:09:39 ---A- . (.Microsoft Corporation - Microsoft Feeds Manager.) -- C:\Windows\System32\msfeeds.dll [801280]
O44 - LFC:[MD5.A03AF8AD44CAE309908557F5724BC808] - 11/03/2015 - 11:09:43 ---A- . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\System32\inetcomm.dll [1032704]
O44 - LFC:[MD5.A9190899A35431CF8ABBEF5E1BB0C8F9] - 11/03/2015 - 11:09:43 ---A- . (.Microsoft Corporation - Microsoft ® JScript Diagnostics.) -- C:\Windows\System32\jscript9diag.dll [814080]
O44 - LFC:[MD5.1193400D8E29A5A010135FB09A4EB1E8] - 11/03/2015 - 11:09:44 ---A- . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll [25021440]
O44 - LFC:[MD5.3541B433422C3FEEB8ABFC8386D95275] - 11/03/2015 - 11:09:45 ---A- . (.Microsoft Corporation - Microsoft (R) JScript.) -- C:\Windows\System32\jscript.dll [816128]
O44 - LFC:[MD5.687E11F36832BFF65EF0CD2FA3DB1966] - 11/03/2015 - 11:09:45 ---A- . (.Microsoft Corporation - Microsoft ® VBScript.) -- C:\Windows\System32\vbscript.dll [584192]
O44 - LFC:[MD5.9E9B757A677927110393A505822D9174] - 11/03/2015 - 11:09:46 ---A- . (.Microsoft Corporation - Microsoft SmartScreen Filter.) -- C:\Windows\System32\ieapfltr.dll [800768]
O44 - LFC:[MD5.7E16095C0BEEF62D1A2674D6A232DEE1] - 11/03/2015 - 11:09:51 ---A- . (.Microsoft Corporation - Objets homologues Internet Explorer.) -- C:\Windows\System32\iepeers.dll [145408]
O44 - LFC:[MD5.D373113A84C12BA7F07CE1E9CAF4747F] - 11/03/2015 - 11:09:57 ---A- . (.Microsoft Corporation - Microsoft® HTML Editing Component.) -- C:\Windows\System32\mshtmled.dll [92160]
O44 - LFC:[MD5.1C393E42928BF55B3796E732B678CD5B] - 11/03/2015 - 11:10:00 ---A- . (.Microsoft Corporation - DAC for Trident DOM.) -- C:\Windows\System32\MshtmlDac.dll [88064]
O44 - LFC:[MD5.992A0252586D9D946535DDBBEF9AB7D5] - 11/03/2015 - 11:13:12 ---A- . (.Microsoft Corporation - Configuration d'homologue EAP.) -- C:\Windows\System32\eappcfg.dll [346112]
O44 - LFC:[MD5.EB04CD238FE3D5A3DB900561E3AFDE37] - 11/03/2015 - 11:13:12 ---A- . (.Microsoft Corporation - Microsoft EAPHost Peer Client DLL.) -- C:\Windows\System32\eappprxy.dll [70656]
O44 - LFC:[MD5.4644F62E41B054A1787225D1210108B2] - 11/03/2015 - 11:13:12 ---A- . (.Microsoft Corporation - Microsoft ThirdPartyEapDispatcher.) -- C:\Windows\System32\eapp3hst.dll [331776]
O44 - LFC:[MD5.62F00DA98A4ABDA58254DB936C1D2D73] - 11/03/2015 - 11:13:12 ---A- . (.Microsoft Corporation - Service homologue EAPHost Microsoft.) -- C:\Windows\System32\eapphost.dll [339456]
O44 - LFC:[MD5.4E32C419A8B3CC19FCD2CACDEF1BD492] - 11/03/2015 - 11:13:12 ---A- . (.Microsoft Corporation - UI générique EAP.) -- C:\Windows\System32\eappgnui.dll [102912]
O44 - LFC:[MD5.EA10446D574CB8A20D913BF500E34192] - 11/03/2015 - 11:14:00 ---A- . (.Microsoft Corporation - DLL RDPCore TS.) -- C:\Windows\System32\rdpcorets.dll [3547648]
O44 - LFC:[MD5.BC8A79C625568DDB7DCA49D0C2741A64] - 11/03/2015 - 11:14:00 ---A- . (.Microsoft Corporation - Microsoft RDP Video Miniport driver.) -- C:\Windows\System32\Drivers\rdpvideominiport.sys [27456]
O44 - LFC:[MD5.6F7FBAA80AC7C8E2DDA7572423D4B913] - 11/03/2015 - 11:14:00 ---A- . (.Microsoft Corporation - Microsoft RemoteFX VM Transport.) -- C:\Windows\System32\rfxvmt.dll [40448]
O44 - LFC:[MD5.66F962AE94FF268070ED2325DAEE88BA] - 11/03/2015 - 11:14:00 ---A- . (.Microsoft Corporation - UMRDP Display Driver.) -- C:\Windows\System32\rdpudd.dll [131584]
O44 - LFC:[MD5.92360C5E0D86B027377381E867BD055A] - 11/03/2015 - 11:14:47 ---A- . (.Microsoft Corporation - DLL du Gestionnaire de processus d'arrière-.) -- C:\Windows\System32\ubpm.dll [203264]
O44 - LFC:[MD5.44AA550C6B46C80E430A3D29820D629E] - 11/03/2015 - 11:15:32 ---A- . (.Microsoft Corporation - DLL Couche NT.) -- C:\Windows\System32\ntdll.dll [1733440]
O44 - LFC:[MD5.9F2265288BCA4EF9B34FAD2D0078070E] - 11/03/2015 - 11:15:33 ---A- . (.Microsoft Corporation - NT Kernel & System.) -- C:\Windows\System32\ntoskrnl.exe [7472960]
O44 - LFC:[MD5.000A77BDB94C42A90137E8368D3A47AA] - 11/03/2015 - 11:16:38 ---A- . (.Microsoft Corporation - Outil de suppression de logiciels malveilla.) -- C:\Windows\System32\MRT.exe [122905848]
O44 - LFC:[MD5.68DF7D160987CF3E0A03A64E5A8F087D] - 11/03/2015 - 11:18:35 ---A- . (.Microsoft Corporation - Interface utilisateur d'authentification Wi.) -- C:\Windows\System32\authui.dll [2773504]
O44 - LFC:[MD5.613438C2C3D899F50719B6878579C66D] - 11/03/2015 - 11:19:25 ---A- . (.Microsoft Corporation - Gestionnaire de menu contextuel de stockage.) -- C:\Windows\System32\StorageContextHandler.dll [75264]
O44 - LFC:[MD5.40CBEB7C0051036CBC1C243A025F206D] - 11/03/2015 - 11:20:09 ---A- . (.Microsoft Corporation - DLL WSShared.) -- C:\Windows\System32\WSShared.dll [971776]
O44 - LFC:[MD5.F24E439730260FB90CCA982C67574FED] - 11/03/2015 - 11:20:09 ---A- . (.Microsoft Corporation - DLL d'exécution de l'infrastructure de test.) -- C:\Windows\System32\Windows.ApplicationModel.Store.TestingFramework.dll [274944]
O44 - LFC:[MD5.04C3768D1526DFB927B7A216BF4D9162] - 11/03/2015 - 11:20:09 ---A- . (.Microsoft Corporation - DLL d'exécution du Windows Store.) -- C:\Windows\System32\Windows.ApplicationModel.Store.dll [315392]
O44 - LFC:[MD5.4F1E63E8FF7108E04303DB1D7AD3E6E6] - 11/03/2015 - 11:20:10 ---A- . (.Microsoft Corporation - Cet outil collecte les fichiers journaux du.) -- C:\Windows\System32\WSCollect.exe [84992]
O44 - LFC:[MD5.93C5704CDB20EEB121CE3BEEE796ABDC] - 11/03/2015 - 11:20:10 ---A- . (.Microsoft Corporation - This tool resets the Windows Store without.) -- C:\Windows\System32\WSReset.exe [79872]
O44 - LFC:[MD5.60629FA01E0CAE23DA527DFA5ECAD5C7] - 11/03/2015 - 11:21:04 ---A- . (.Microsoft Corporation - Bibliothèque partagée MFCDLL - Version comm.) -- C:\Windows\System32\mfc42.dll [1464832]
O44 - LFC:[MD5.20433FD8C8F460567DE93F472A4D749F] - 11/03/2015 - 11:21:04 ---A- . (.Microsoft Corporation - Bibliothèque partagée MFCDLL - Version comm.) -- C:\Windows\System32\mfc42u.dll [1488896]
O44 - LFC:[MD5.81CB7FF2FF19D639FD75B6B992BABC43] - 11/03/2015 - 11:21:04 ---A- . (.Microsoft Corporation - Direct3D HLSL Compiler.) -- C:\Windows\System32\D3DCompiler_47.dll [4298240]
O44 - LFC:[MD5.D0CA07F5FF2002A912916319048648F2] - 11/03/2015 - 11:21:05 ---A- . (.Microsoft Corporation - atlthunk.dll.) -- C:\Windows\System32\atlthunk.dll [48128]
O44 - LFC:[MD5.77F28E71B2C0297AB67EA81878B1FA83] - 11/03/2015 - 11:21:52 ---A- . (.Microsoft Corporation - Bibliothèque principale du Gestionnaire de.) -- C:\Windows\System32\dwmcore.dll [2257408]
O44 - LFC:[MD5.42F88B57CAE42FC10059C887B3FCFCEA] - 11/03/2015 - 11:22:43 ---A- . (.Microsoft Corporation - Pilote de miniport Bluetooth pour les périp.) -- C:\Windows\System32\Drivers\hidbth.sys [97792]
O44 - LFC:[MD5.2AE4D70A3657FA4FA734B370E79F83FF] - 11/03/2015 - 11:23:35 ---A- . (.Microsoft Corporation - DLL de spouleur local.) -- C:\Windows\System32\localspl.dll [1091072]
O44 - LFC:[MD5.DA2B6A24C80EC14233905F920D1BB658] - 11/03/2015 - 11:23:35 ---A- . (.Microsoft Corporation - DLL d'objets PrintUI.) -- C:\Windows\System32\puiobj.dll [477184]
O44 - LFC:[MD5.6D55DCAEBA737B77653409FAA727184D] - 11/03/2015 - 11:23:35 ---A- . (.Microsoft Corporation - DLL puiapi.) -- C:\Windows\System32\puiapi.dll [192512]
O44 - LFC:[MD5.7F586D08E965FA00EE085319EF5BBAF1] - 11/03/2015 - 11:23:35 ---A- . (.Microsoft Corporation - Fournisseur d'impression de rendu côté clie.) -- C:\Windows\System32\win32spl.dll [864256]
O44 - LFC:[MD5.0531C52DF08DA3A962496AF006847025] - 11/03/2015 - 11:23:35 ---A- . (.Microsoft Corporation - prnntfy DLL.) -- C:\Windows\System32\prnntfy.dll [221184]
O44 - LFC:[MD5.5E12769C22FEB99009AB1E33C7DEB307] - 11/03/2015 - 11:23:36 ---A- . (.Microsoft Corporation - DLL de fournisseur d'impression DAF.) -- C:\Windows\System32\DafPrintProvider.dll [269312]
O44 - LFC:[MD5.19DC528EA04273A5D3BCA21245D92ACD] - 11/03/2015 - 11:23:36 ---A- . (.Microsoft Corporation - DLL d'interface utilisateur de feuille des.) -- C:\Windows\System32\compstui.dll [309760]
O44 - LFC:[MD5.4E26FB5A074F526E0E4956925398678D] - 11/03/2015 - 11:23:36 ---A- . (.Microsoft Corporation - Find Network Printers COM Component.) -- C:\Windows\System32\findnetprinters.dll [66048]
O44 - LFC:[MD5.CDF8D88B46FC4FA140B5F8B8B06192ED] - 11/03/2015 - 11:23:36 ---A- . (.Microsoft Corporation - Modifier les paramètres de l'imprimante.) -- C:\Windows\System32\printui.exe [62976]
O44 - LFC:[MD5.6D3A2565E01B3E4B0F1BEDB0D4B00B3F] - 11/03/2015 - 11:24:24 ---A- . (.Microsoft Corporation - NDIS (Network Driver Interface Specificatio.) -- C:\Windows\System32\Drivers\ndis.sys [1113920]
O44 - LFC:[MD5.85012538999DC5628E67B7579FF5034F] - 11/03/2015 - 11:25:10 ---A- . (.Adobe Systems - Windows NT OpenType/Type 1 API Library..) -- C:\Windows\System32\atmlib.dll [44032]
O44 - LFC:[MD5.BBBE2BA24785E3A7ED1FF706B01C7770] - 11/03/2015 - 11:25:10 ---A- . (.Adobe Systems Incorporated - Windows NT OpenType/Type 1 Font Driver.) -- C:\Windows\System32\atmfd.dll [358912]
O44 - LFC:[MD5.43770ECAF45CC63C9F7B30258DF352D7] - 11/03/2015 - 11:25:10 ---A- . (.Microsoft Corporation - Font Subsetting DLL.) -- C:\Windows\System32\fontsub.dll [96256]
O44 - LFC:[MD5.6E3381152091034DD1773C7B5D0B85E5] - 11/03/2015 - 11:25:11 ---A- . (.Microsoft Corporation - DCI Manager.) -- C:\Windows\System32\dciman32.dll [14848]
O44 - LFC:[MD5.3E1F222E78B25B921C1130EB1B9370FE] - 11/03/2015 - 11:25:11 ---A- . (.Microsoft Corporation - Language Pack.) -- C:\Windows\System32\lpk.dll [3072]
O44 - LFC:[MD5.C08E7F8AC41901403799B237DA7BA10E] - 11/03/2015 - 11:25:59 ---A- . (.Microsoft Corporation - Contrôle d'édition de texte enrichi, v7.5.) -- C:\Windows\System32\msftedit.dll [3097600]
O44 - LFC:[MD5.DF55E2D7D045BA1A2C43029DEDF0B59D] - 11/03/2015 - 11:26:48 ---A- . (.Microsoft Corporation - Assistant Impression de photographies.) -- C:\Windows\System32\photowiz.dll [347136]
O44 - LFC:[MD5.EEB76824DC14283A010CAE4E2B5AB852] - 11/03/2015 - 11:29:22 ---A- . (.Microsoft Corporation - SHCORE.) -- C:\Windows\System32\SHCore.dll [723072]
O44 - LFC:[MD5.BDE6152B584ABDA7DA102B363E58354F] - 11/03/2015 - 11:30:23 ---A- . (...) -- C:\Windows\System32\ApnDatabase.xml [396419]
O44 - LFC:[MD5.72BEE6C5173218A8846D31DF68D2AE4F] - 11/03/2015 - 11:31:22 ---A- . (.Microsoft Corporation - File Risk Estimation.) -- C:\Windows\System32\winshfhc.dll [14848]
O44 - LFC:[MD5.9F4DF0043965808973023A9B51A11136] - 11/03/2015 - 11:31:22 ---A- . (.Microsoft Corporation - Microsoft Network Realtime Inspection Drive.) -- C:\Windows\System32\Drivers\WdNisDrv.sys [114496]
O44 - LFC:[MD5.D296D0F0DB2CD1504F90405603664493] - 11/03/2015 - 11:31:22 ---A- . (.Microsoft Corporation - Microsoft antimalware file system filter dr.) -- C:\Windows\System32\Drivers\WdFilter.sys [264000]
O44 - LFC:[MD5.1751F6B031ADAC34724511057D2E455D] - 11/03/2015 - 11:31:23 ---A- . (.Microsoft Corporation - Microsoft antimalware boot driver.) -- C:\Windows\System32\Drivers\WdBoot.sys [44024]
O44 - LFC:[MD5.D82C445E3D484F31CD2638A4338E5FD9] - 11/03/2015 - 11:32:23 ---A- . (.Microsoft Corporation - Calculatrice de Windows.) -- C:\Windows\System32\calc.exe [933888]
O44 - LFC:[MD5.18B4315015DE9498FA6EC14B1AC93E9A] - 12/03/2015 - 07:44:47 ---A- . (...) -- C:\Windows\System32\FNTCACHE.DAT [484144]
O44 - LFC:[MD5.F8CCA9566C77154E389DCE46AFDF6009] - 12/03/2015 - 10:36:16 ---A- . (...) -- C:\Windows\PFRO.log [5422]
O44 - LFC:[MD5.4BF25174952F6CD8D95400639DE75CC2] - 12/03/2015 - 10:36:51 ---A- . (...) -- C:\Windows\setupact.log [38158]
O44 - LFC:[MD5.E9696370A408BE6399A16FB704B858AF] - 12/03/2015 - 10:38:37 -S-A- . (...) -- C:\Windows\bootstat.dat [67584]
O44 - LFC:[MD5.1A1C7C734853B4AC45E66452E6F6DD21] - 12/03/2015 - 10:44:01 ---A- . (...) -- C:\Windows\System32\PerfStringBackup.INI [1734474]
O44 - LFC:[MD5.D65FFF6CD16571B3AB4DE90A54BF5B6B] - 12/03/2015 - 10:44:01 ---A- . (...) -- C:\Windows\System32\perfc009.dat [127812]
O44 - LFC:[MD5.73F9E8BD86956BAAABB4AD9D4B3FD7EC] - 12/03/2015 - 10:44:01 ---A- . (...) -- C:\Windows\System32\perfc00C.dat [151632]
O44 - LFC:[MD5.2C66F4242090655A9D4F54CAE06FC956] - 12/03/2015 - 10:44:01 ---A- . (...) -- C:\Windows\System32\perfh009.dat [687180]
O44 - LFC:[MD5.D4F160507A66C7ABA8D7A495428DF219] - 12/03/2015 - 10:44:01 ---A- . (...) -- C:\Windows\System32\perfh00C.dat [775930]
O44 - LFC:[MD5.7EEC2CA974D016A8E4FD67939D03D808] - 12/03/2015 - 10:53:31 ---A- . (...) -- C:\PhysicalDisk0_MBR.bin [512]
O44 - LFC:[MD5.686140EDCE9450B3D427BF752B92BCAE] - 12/03/2015 - 10:54:18 ---A- . (...) -- C:\Windows\WindowsUpdate.log [1414056]
O44 - LFC:[MD5.D4A564BABFF82F56E68835FBFDA7AB00] - 25/02/2015 - 18:45:48 ---A- . (...) -- C:\Windows\System32\locale.nls [513488]
O44 - LFC:[MD5.3B63AA6552F66B518F85BD3A8ED7C2F5] - 25/02/2015 - 18:45:48 ---A- . (.Microsoft Corporation - HôteClassementGlobal.) -- C:\Windows\System32\GlobCollationHost.dll [323072]
O44 - LFC:[MD5.3A7D8742A6BE524A2165F93375AE1872] - 25/02/2015 - 18:45:49 ---A- . (.Microsoft Corporation - Windows Globalization.) -- C:\Windows\System32\Windows.Globalization.dll [1200128]
O44 - LFC:[MD5.35A579220C411DED00E0DA5AFB755178] - 26/02/2015 - 00:26:52 ---A- . (.Microsoft Corporation - Pilote Win32 multi-utilisateurs.) -- C:\Windows\System32\win32k.sys [4178944]
~ Files: 93 Scanned in 00mn 04s
---\\ Déni du service (Local Security Authority) (O48)
O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll
O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l'Éditeur de configuration de sécurité Windows.) -- C:\Windows\System32\scecli.dll
~ LSA: 3 Scanned in 00mn 00s
---\\ Contrôle du Safe Boot (CSB) (O49)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\BasicDisplay.sys . (.Microsoft Corporation - Microsoft Basic Display Driver.) -- C:\Windows\System32\Drivers\BasicDisplay.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\BasicRender.sys . (.Microsoft Corporation - Microsoft Basic Render Driver.) -- C:\Windows\System32\Drivers\BasicRender.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dxgkrnl.sys . (.Microsoft Corporation - DirectX Graphics Kernel.) -- C:\Windows\System32\Drivers\dxgkrnl.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\FsDepends.sys . (.Microsoft Corporation - File System Dependency Manager Mini Filter Driver.) -- C:\Windows\System32\Drivers\FsDepends.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\System32\Drivers\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgrx.sys . (.Microsoft Corporation - Pilote d'extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\Wdf01000.sys . (.Microsoft Corporation - Runtime de l'infrastructure de pilotes en mode noyau.) -- C:\Windows\System32\Drivers\Wdf01000.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\BasicDisplay.sys . (.Microsoft Corporation - Microsoft Basic Display Driver.) -- C:\Windows\System32\Drivers\BasicDisplay.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\BasicRender.sys . (.Microsoft Corporation - Microsoft Basic Render Driver.) -- C:\Windows\System32\Drivers\BasicRender.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dxgkrnl.sys . (.Microsoft Corporation - DirectX Graphics Kernel.) -- C:\Windows\System32\Drivers\dxgkrnl.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\FsDepends.sys . (.Microsoft Corporation - File System Dependency Manager Mini Filter Driver.) -- C:\Windows\System32\Drivers\FsDepends.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\System32\Drivers\ipnat.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\nsiproxy.sys . (.Microsoft Corporation - NSI Proxy.) -- C:\Windows\System32\Drivers\nsiproxy.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpencdd.sys . (...) -- C:\Windows\System32\Drivers\rdpencdd.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\System32\Drivers\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgrx.sys . (.Microsoft Corporation - Pilote d'extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\Wdf01000.sys . (.Microsoft Corporation - Runtime de l'infrastructure de pilotes en mode noyau.) -- C:\Windows\System32\Drivers\Wdf01000.sys
~ CSB: 19 Scanned in 00mn 00s
---\\ Clé de registre Shell MountPoints2 (MPSK) (O51)
O51 - MPSK:{76e54461-ae0c-11e4-824f-806e6f6e6963}\AutoRun\command. (...) -- E:\Setup.exe (.not file.)
O51 - MPSK:{76e5478f-ae0c-11e4-824f-544249582584}\AutoRun\command. (...) -- F:\.\Setup.exe (.not file.)
~ Keys: Scanned in 00mn 00s
---\\ Recherche d'infection sur les pilotes (HKLM)(TDSD) (O52)
O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
~ TDSD: 2 Scanned in 00mn 00s
---\\ Enumération des clés de registre SecurityProviders (MCSP) (O54)
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll
~ MSCP: 2 Scanned in 00mn 00s
---\\ Enumération des clés de registre PoliciesSystem (MWPS) (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1
O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1
O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=5
O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0
O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
O55 - MWPS:[HKLM\...\Policies\System] - "EnableCursorSuppression"=1
O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=3
O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=0
O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0
O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
O55 - MWPS:[HKLM\...\Policies\System] - "SoftwareSASGeneration"=1
~ MWPS: 18 Scanned in 00mn 00s
---\\ Enumération des clés de registre PoliciesExplorer (MWPE) (O56)
O56 - MWPE:[HKLM\...\policies\Explorer] - "ForceActiveDesktopOn"=0
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktop"=1
~ MWPE Keys: 3 Scanned in 00mn 00s
---\\ Liste des pilotes du système (SDL) (O58)
O58 - SDL:22/08/2013 - 13:43:41 ---A- . (.LSI - LSI 3ware SCSI Storport Driver.) -- C:\Windows\System32\Drivers\3ware.sys [108896]
O58 - SDL:22/08/2013 - 13:43:41 ---A- . (.PMC-Sierra - PMC-Sierra Storport Driver For SPC8x6G SAS/SATA controller.) -- C:\Windows\System32\Drivers\adp80xx.sys [782176]
O58 - SDL:22/08/2013 - 13:43:41 ---A- . (.Advanced Micro Devices - AHCI 1.3 Device Driver.) -- C:\Windows\System32\Drivers\amdsata.sys [79200]
O58 - SDL:22/08/2013 - 13:43:41 ---A- . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller Driver for Windows -.) -- C:\Windows\System32\Drivers\amdsbs.sys [259424]
O58 - SDL:22/08/2013 - 13:43:40 ---A- . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\Windows\System32\Drivers\amdxata.sys [25952]
O58 - SDL:26/08/2010 - 01:11:04 ---A- . (.Alps Electric Co., Ltd. - Alps Touch Pad Driver.) -- C:\Windows\System32\Drivers\Apfiltr.sys [306296]
O58 - SDL:22/08/2013 - 13:43:41 ---A- . (.PMC-Sierra, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\System32\Drivers\arcsas.sys [114016]
O58 - SDL:06/02/2015 - 14:43:54 ---A- . (...) -- C:\Windows\System32\Drivers\aswHwid.sys [29208] =>.ALWIL Software
O58 - SDL:06/02/2015 - 14:43:54 ---A- . (.AVAST Software - avast! File System Minifilter for Windows 2003/Vista.) -- C:\Windows\System32\Drivers\aswMonFlt.sys [83280]
O58 - SDL:06/02/2015 - 14:43:54 ---A- . (.AVAST Software - avast! WFP Redirect Driver.) -- C:\Windows\System32\Drivers\aswRdr2.sys [93568]
O58 - SDL:06/02/2015 - 14:43:54 ---A- . (...) -- C:\Windows\System32\Drivers\aswRvrt.sys [65776] =>.ALWIL Software
O58 - SDL:07/02/2015 - 09:37:08 ---A- . (.AVAST Software - avast! Virtualization Driver.) -- C:\Windows\System32\Drivers\aswsnx.sys [1050432]
O58 - SDL:06/02/2015 - 14:43:54 ---A- . (.AVAST Software - avast! self protection module.) -- C:\Windows\System32\Drivers\aswSP.sys [436624]
O58 - SDL:06/02/2015 - 14:43:54 ---A- . (.AVAST Software - Stream Filter.) -- C:\Windows\System32\Drivers\aswStm.sys [116728]
O58 - SDL:06/02/2015 - 14:43:54 ---A- . (...) -- C:\Windows\System32\Drivers\aswVmm.sys [267632] =>.ALWIL Software
O58 - SDL:19/06/2012 - 06:05:46 ---A- . (.Advanced Micro Devices, Inc. - ATI Radeon Kernel Mode Driver.) -- C:\Windows\System32\Drivers\atikmdag.sys [11926016]
O58 - SDL:19/06/2012 - 06:09:14 ---A- . (.Advanced Micro Devices, Inc. - AMD multi-vendor Miniport Driver.) -- C:\Windows\System32\Drivers\atikmpag.sys [360448]
O58 - SDL:13/08/2013 - 00:25:46 ---A- . (.Windows (R) Win 7 DDK provider - BCM Function 2 Device Driver.) -- C:\Windows\System32\Drivers\bcmfn2.sys [17624]
O58 - SDL:22/08/2013 - 13:43:41 ---A- . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.) -- C:\Windows\System32\Drivers\bxvbda.sys [531296]
O58 - SDL:11/12/2013 - 03:41:40 ---A- . (.ELAN Microelectronic Corp. - ELAN SMBus Driver.) -- C:\Windows\System32\Drivers\ETDSMBus.sys [22832]
O58 - SDL:22/08/2013 - 13:43:45 ---A- . (.Broadcom Corporation - Broadcom NetXtreme II 10 GigE VBD.) -- C:\Windows\System32\Drivers\evbda.sys [3357024]
O58 - SDL:07/02/2015 - 20:29:55 ---A- . (.Huawei Technologies Co., Ltd. - USB Modem/Serial Device Driver.) -- C:\Windows\System32\Drivers\ew_hwusbdev.sys [117248]
O58 - SDL:07/02/2015 - 20:29:55 ---A- . (.Huawei Technologies Co., Ltd. - ew_jubusenum Driver.) -- C:\Windows\System32\Drivers\ew_jubusenum.sys [87040]
O58 - SDL:07/02/2015 - 20:29:55 ---A- . (.Huawei Technologies Co., Ltd. - ew_jucdcacm Driver.) -- C:\Windows\System32\Drivers\ew_jucdcacm.sys [98304]
O58 - SDL:07/02/2015 - 20:29:55 ---A- . (.Huawei Technologies Co., Ltd. - ew_jucdcndis Driver.) -- C:\Windows\System32\Drivers\ew_jucdcecm.sys [72192]
O58 - SDL:07/02/2015 - 20:29:56 ---A- . (.Huawei Technologies Co., Ltd. - ew_juextctrl Driver.) -- C:\Windows\System32\Drivers\ew_juextctrl.sys [28672]
O58 - SDL:07/02/2015 - 20:29:56 ---A- . (.Huawei Technologies Co., Ltd. - Filter Driver.) -- C:\Windows\System32\Drivers\ew_usbenumfilter.sys [13952]
O58 - SDL:22/08/2013 - 13:43:45 ---A- . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Driver.) -- C:\Windows\System32\Drivers\HpSAMD.sys [64352]
O58 - SDL:30/07/2013 - 19:47:35 ---A- . (.Intel Corporation - Intel(R) Serial IO GPIO Controller Driver.) -- C:\Windows\System32\Drivers\iaLPSSi_GPIO.sys [24568]
O58 - SDL:25/07/2013 - 20:05:39 ---A- . (.Intel Corporation - Intel(R) Serial IO I2C Controller Driver.) -- C:\Windows\System32\Drivers\iaLPSSi_I2C.sys [99320]
O58 - SDL:05/03/2013 - 20:49:44 ---A- . (.Intel Corporation - Intel Rapid Storage Technology driver - x64.) -- C:\Windows\System32\Drivers\iaStorA.sys [653296]
O58 - SDL:10/08/2013 - 01:39:30 ---A- . (.Intel Corporation - Intel Rapid Storage Technology driver (inbox) - x64.) -- C:\Windows\System32\Drivers\iaStorAV.sys [651248]
O58 - SDL:22/08/2013 - 13:43:45 ---A- . (.Intel Corporation - Intel Matrix Storage Manager driver - x64.) -- C:\Windows\System32\Drivers\iaStorV.sys [412000]
O58 - SDL:22/08/2013 - 13:43:44 ---A- . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\System32\Drivers\lsi_sas.sys [109408]
O58 - SDL:22/08/2013 - 13:43:45 ---A- . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\Windows\System32\Drivers\lsi_sas2.sys [93536]
O58 - SDL:22/08/2013 - 13:43:44 ---A- . (.LSI Corporation - LSI SAS Gen3 Driver (StorPort).) -- C:\Windows\System32\Drivers\lsi_sas3.sys [81760]
O58 - SDL:22/08/2013 - 13:43:45 ---A- . (.LSI Corporation - LSI SSS PCIe/Flash Driver (StorPort).) -- C:\Windows\System32\Drivers\lsi_sss.sys [82784]
O58 - SDL:22/08/2013 - 13:43:45 ---A- . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows.) -- C:\Windows\System32\Drivers\megasas.sys [56672]
O58 - SDL:22/08/2013 - 13:43:45 ---A- . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\System32\Drivers\megasr.sys [575840]
O58 - SDL:22/08/2013 - 13:43:49 ---A- . (.Marvell Semiconductor, Inc. - Marvell Flash Controller Driver.) -- C:\Windows\System32\Drivers\mvumis.sys [63840]
O58 - SDL:18/06/2013 - 15:45:53 ---A- . (.Intel Corporation - Intel® Wireless WiFi Link Driver.) -- C:\Windows\System32\Drivers\NETwNs64.sys [8604672]
O58 - SDL:22/08/2013 - 13:43:31 ---A- . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\System32\Drivers\nvraid.sys [150368]
O58 - SDL:22/08/2013 - 13:43:32 ---A- . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\System32\Drivers\nvstor.sys [168288]
O58 - SDL:03/09/2009 - 07:59:28 ---A- . (.REDC - RICOH MS Driver.) -- C:\Windows\System32\Drivers\rimspx64.sys [54784]
O58 - SDL:24/09/2009 - 14:31:14 ---A- . (.REDC - RICOH SD/MMC Driver.) -- C:\Windows\System32\Drivers\risdsn64.sys [76288]
O58 - SDL:03/12/2014 - 11:41:54 ---A- . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function Driver.) -- C:\Windows\System32\Drivers\RTKVHD64.sys [4290520]
O58 - SDL:22/08/2013 - 16:35:09 ---A- . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\Windows\System32\Drivers\secdrv.sys [23040]
O58 - SDL:28/06/2013 - 14:30:02 ---A- . (.Sony Corporation - Sony Firmware Extension Parser driver.) -- C:\Windows\System32\Drivers\SFEP.sys [15360]
O58 - SDL:22/08/2013 - 13:43:31 ---A- . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\System32\Drivers\sisraid2.sys [44896]
O58 - SDL:22/08/2013 - 13:43:32 ---A- . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\System32\Drivers\sisraid4.sys [81760]
O58 - SDL:31/01/2014 - 15:08:14 ---A- . (.Synaptics Incorporated - Synaptics SMBus Driver.) -- C:\Windows\System32\Drivers\Smb_driver_Intel.sys [34544]
O58 - SDL:22/01/2014 - 08:52:10 ---A- . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG USB Composite Device Driver (MSS Ver.3).) -- C:\Windows\System32\Drivers\ssudbus.sys [108800]
O58 - SDL:22/01/2014 - 08:52:10 ---A- . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG Android Modem Device Driver (MSS Ver.3).) -- C:\Windows\System32\Drivers\ssudmdm.sys [206080]
O58 - SDL:22/08/2013 - 13:43:32 ---A- . (.Promise Technology, Inc. - Promise SuperTrak EX Series Driver for Windows x64.) -- C:\Windows\System32\Drivers\stexstor.sys [31072]
O58 - SDL:11/12/2012 - 00:46:10 ---A- . (.Synaptics Incorporated - Synaptics Touchpad Driver.) -- C:\Windows\System32\Drivers\SynTP.sys [457528]
O58 - SDL:22/08/2013 - 13:43:34 ---A- . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\System32\Drivers\v
A voir également:
- Supprimer des redirection google sur Internet Explorer
- Dns google - Guide
- Google maps satellite - Guide
- Comment supprimer une page sur word - Guide
- Supprimer compte instagram - Guide
- Telecharger internet explorer - Télécharger - Navigateurs
1 réponse
Malekal_morte-
Messages postés
180304
Date d'inscription
mercredi 17 mai 2006
Statut
Modérateur, Contributeur sécurité
Dernière intervention
15 décembre 2020
24 621
12 mars 2015 à 12:20
12 mars 2015 à 12:20
Salut,
Tu as installé des adwares et programmes parasites sur ton PC qui ouvrent des publicités et ralentissent l'ordinateur et les navigateurs WEB.
Voici la procédure à suivre pour les supprimer :
Commence par ceci :
Suis le tutorial AdwCleaner https://www.malekal.com/adwcleaner-supprimer-virus-adwares-pup/?t=33839&start= ( d'Xplode )
Télécharge le sur ton bureau ou dossier de téléchargement.
Lance AdwCleaner, clique sur [Scanner].
L'analyse peux durer plusieurs minutes, patiente.
Une fois le scan terminé, ne décoche rien, clique sur [Nettoyer]
Une fois le nettoyage terminé, un rapport s'ouvrira. Copie/colle le contenu du rapport dans ta prochaine réponse par un copier/coller.
Si cela ne fonctionne pas, utilise le site http://pjjoint.malekal.com pour héberger le rapport, donne le lien du rapport dans un nouveau message.
Note : Le rapport est également sauvegardé sous C:\AdwCleaner[S1].txt
puis :
Suis ce tutoriel FRST: https://www.malekal.com/tutoriel-farbar-recovery-scan-tool-frst/
(et bien prendre le temps de lire afin d'appliquer correctement - tout y est expliqué).
Télécharge et lance le scan FRST, cela va générer trois rapports FRST :
Envoie, comme expliqué, ces trois rapports sur le site http://pjjoint.malekal.com et en retour donne les trois liens pjjoint qui mènent à ses rapports ici dans une nouvelle réponse afin que l'on puisse les consulter.
Tu as installé des adwares et programmes parasites sur ton PC qui ouvrent des publicités et ralentissent l'ordinateur et les navigateurs WEB.
Voici la procédure à suivre pour les supprimer :
Commence par ceci :
Suis le tutorial AdwCleaner https://www.malekal.com/adwcleaner-supprimer-virus-adwares-pup/?t=33839&start= ( d'Xplode )
Télécharge le sur ton bureau ou dossier de téléchargement.
Lance AdwCleaner, clique sur [Scanner].
L'analyse peux durer plusieurs minutes, patiente.
Une fois le scan terminé, ne décoche rien, clique sur [Nettoyer]
Une fois le nettoyage terminé, un rapport s'ouvrira. Copie/colle le contenu du rapport dans ta prochaine réponse par un copier/coller.
Si cela ne fonctionne pas, utilise le site http://pjjoint.malekal.com pour héberger le rapport, donne le lien du rapport dans un nouveau message.
Note : Le rapport est également sauvegardé sous C:\AdwCleaner[S1].txt
puis :
Suis ce tutoriel FRST: https://www.malekal.com/tutoriel-farbar-recovery-scan-tool-frst/
(et bien prendre le temps de lire afin d'appliquer correctement - tout y est expliqué).
Télécharge et lance le scan FRST, cela va générer trois rapports FRST :
- FRST.txt
- Shortcut.txt
- Additionnal.txt
Envoie, comme expliqué, ces trois rapports sur le site http://pjjoint.malekal.com et en retour donne les trois liens pjjoint qui mènent à ses rapports ici dans une nouvelle réponse afin que l'on puisse les consulter.