Impossible d'insérer une P.J ou autre photo.

Merci à l'équipe.

Comme Je ne peux faire aucune insertion (blocage !!!) je suis obligé de placer ici le rapport ZHPDiag. Désolé et merci pour votre aide.

Jipitou

Rapport de ZHPDiag v2013.7.5.7 par Nicolas Coolman, Update du 05/07/2013

Run by Admin at 28/02/2014 12:17:51

WebSite: http://nicolascoolman.webs.com

State : Problème connexion internet

WhiteList : Enable

High Elevated Privileges : OK

UAC : Not Found

---\\ Web Browser

MSIE: Internet Explorer v8.0.6001.18702

GCIE: Google Chrome v33.0.1750.117 (Defaut)

---\\ Windows Product Information

~ Langage: Français

Windows XP Home Edition Service Pack 3 (Build 2600)

Windows Automatic Updates : OK

Windows Genuine Advantage : OK

---\\ System Protection

Malwarebytes Anti-Malware version 1.75.0.1300

Microsoft Security Client v4.4.0304.0

---\\ System Optimizer

CCleaner v4.00 =>Piriform Ltd

---\\ Peer To Peer (P2P)

---\\ Software Update

Adobe Flash Player 12 ActiveX

Adobe Reader XI

Java 7 Update 51

---\\ System Information

~ Processor: x86 Family 15 Model 67 Stepping 3, AuthenticAMD

~ Operating System: 32 Bits

Boot mode: Normal (Normal boot)

Total RAM: 3326 MB (81% free)

System Restore: Activé (Enable)

System drive C: has 64 GB (65%) free of 98 GB

---\\ Logged in mode

~ Computer Name: ADMIN-B3C739F37

~ User Name: Admin

~ All Users Names: UpdatusUser, SUPPORT_388945a0, HelpAssistant, ASPNET, Administrateur, Admin,

~ Unselected Option: None

Logged in as Administrator

---\\ Environnement Variables

~ System Unit : C:\

~ %AppData% : C:\Documents and Settings\Admin\Application Data\

~ %Desktop% : C:\Documents and Settings\Admin\Bureau\

~ %Favorites% : C:\Documents and Settings\Admin\Favoris\

~ %LocalAppData% : C:\Documents and Settings\Admin\Local Settings\Application Data\

~ %StartMenu% : C:\Documents and Settings\Admin\Menu Démarrer\

~ %Windir% : C:\WINDOWS\

~ %System% : C:\WINDOWS\system32\

---\\ DOS/Devices

C:\ Hard drive, Flash drive, Thumb drive (Free 64 Go of 98 Go)

D:\ Hard drive, Flash drive, Thumb drive (Free 188 Go of 200 Go)

E:\ CD-ROM drive (Free 0 Go of 0 Go)

---\\ Security Center & Tools Informations

~ Security Center: 29 Legitimates Filtered in 00mn 00s

---\\ Recherche particulière de fichiers génériques

[MD5.F2317622D29F9FF0F88AEECD5F60F0DD] - (.Microsoft Corporation - Explorateur Windows.) (.13/04/2008 - 18:34:04.) -- C:\WINDOWS\Explorer.exe [1037824]

[MD5.2988BFF8257A55EA8AFD038F49F81A34] - (.Microsoft Corporation - Internet Extensions for Win32.) (.06/02/2014 - 00:20:01.) -- C:\WINDOWS\system32\wininet.dll [920064]

[MD5.DD73D6B9F6B4CB630CF35B438B540174] - (.Microsoft Corporation - Application d'ouverture de session Windows NT.) (.13/04/2008 - 18:34:30.) -- C:\WINDOWS\system32\Winlogon.exe [512000]

[MD5.1E44BC1E83D8FD2305F8D452DB109CF9] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.17/08/2011 - 14:49:54.) -- C:\WINDOWS\system32\Drivers\AFD.sys [138496]

[MD5.9F3A2F5AA6875C72BF062C712CFA2674] - (.Microsoft Corporation - IDE/ATAPI Port Driver.) (.13/04/2008 - 10:40:32.) -- C:\WINDOWS\system32\Drivers\atapi.sys [96512]

[MD5.C885B02847F5D2FD45A24E219ED93B32] - (.Microsoft Corporation - CD-ROM File System Driver.) (.13/04/2008 - 11:14:22.) -- C:\WINDOWS\system32\Drivers\Cdfs.sys [63744]

[MD5.1F4260CC5B42272D71F79E570A27A4FE] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.13/04/2008 - 10:40:48.) -- C:\WINDOWS\system32\Drivers\Cdrom.sys [62976]

[MD5.31F923EB2170FC172C81ABDA0045D18C] - (.Microsoft Corporation - Pilote de cryptographie FIPS.) (.13/04/2008 - 17:57:40.) -- C:\WINDOWS\system32\Drivers\Fips.sys [44672]

[MD5.573C7D0A32852B48F3058CFD8026F511] - (.Windows (R) Server 2003 DDK provider - High Definition Audio Bus Driver v1.0a.) (.13/04/2008 - 08:36:06.) -- C:\WINDOWS\system32\Drivers\HDAudBus.sys [144384]

[MD5.A09BDC4ED10E3B2E0EC27BB94AF32516] - (.Microsoft Corporation - Pilote de port i8042.) (.13/04/2008 - 18:00:54.) -- C:\WINDOWS\system32\Drivers\i8042prt.sys [54144]

[MD5.083A052659F5310DD8B6A6CB05EDCF8E] - (.Microsoft Corporation - IMAPI Kernel Driver.) (.13/04/2008 - 10:41:00.) -- C:\WINDOWS\system32\Drivers\Imapi.sys [42112]

[MD5.CC748EA12C6EFFDE940EE98098BF96BB] - (.Microsoft Corporation - IP Network Address Translator.) (.13/04/2008 - 10:57:16.) -- C:\WINDOWS\system32\Drivers\IpNat.sys [152832]

[MD5.23C74D75E36E7158768DD63D92789A91] - (.Microsoft Corporation - IPSec Driver.) (.13/04/2008 - 11:19:44.) -- C:\WINDOWS\system32\Drivers\IPSec.sys [75264]

[MD5.7D304A5EB4344EBEEAB53A2FE3FFB9F0] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.15/07/2011 - 14:29:31.) -- C:\WINDOWS\system32\Drivers\MRxSmb.sys [456320]

[MD5.74B2B2F5BEA5E9A3DC021D685551BD3D] - (.Microsoft Corporation - MBT Transport driver.) (.13/04/2008 - 11:21:02.) -- C:\WINDOWS\system32\Drivers\netBT.sys [162816]

[MD5.78A08DD6A8D65E697C18E1DB01C5CDCA] - (.Microsoft Corporation - NT File System Driver.) (.13/04/2008 - 11:15:54.) -- C:\WINDOWS\system32\Drivers\ntfs.sys [574976]

[MD5.8FD0BDBEA875D06CCF6C945CA9ABAF75] - (.Microsoft Corporation - Pilote de port parallèle.) (.13/04/2008 - 18:09:42.) -- C:\WINDOWS\system32\Drivers\Parport.sys [80384]

[MD5.11B4A627BC9614B885C4969BFA5FF8A6] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.13/04/2008 - 11:19:44.) -- C:\WINDOWS\system32\Drivers\Rasl2tp.sys [51328]

[MD5.15CABD0F7C00C47C70124907916AF3F1] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.13/04/2008 - 10:32:52.) -- C:\WINDOWS\system32\Drivers\rdpdr.sys [196224]

[MD5.D8EB2A7904DB6C916EB5361878DDCBAE] - (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) (.13/04/2008 - 17:57:36.) -- C:\WINDOWS\system32\Drivers\redbook.sys [58752]

[MD5.46DE1126684369BACE4849E4FC8C43CA] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.13/04/2008 - 17:56:06.) -- C:\WINDOWS\system32\Drivers\volsnap.sys [53376]

~ Generic Processes: Scanned in 00mn 06s

---\\ Etat des fichiers cachés (Caché/Total)

~ Mes images (My Pictures) : 2/56

~ Mes musiques (My Musics) : 1/8

~ Mes Videos (My Videos) : 1/2

~ Mes Favoris (My Favorites) : 1/12

~ Mes Documents (My Documents) : 2/1535

~ Mon Bureau (My Desktop) : 0/40

~ Menu demarrer (Programs) : 1/30

~ Hidden Files: Scanned in 00mn 31s

---\\ Processus lancés

[MD5.B0F49DA36F30922F5DDC3B623B778FCE] - (.Microsoft Corporation - Antimalware Service Executable.) -- C:\Program Files\Microsoft Security Client\MsMpEng.exe [22208] [PID.1292]

[MD5.FC0BF82B3968F1D8CD13B3F721668193] - (.Trusteer Ltd. - RapportMgmtService.) -- C:\Program Files\Trusteer\Rapport\bin\RapportMgmtService.exe [1444120] [PID.1328]

[MD5.C98ACDE22458C8F46FD0503CB9E2D01F] - (.Google Inc. - Google Crash Handler.) -- C:\Program Files\Google\Update\1.3.22.5\GoogleCrashHandler.exe [223112] [PID.492]

[MD5.30E3850F303EAE5C364782EA78579CC9] - (.Apple Inc. - MobileDeviceService.) -- C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe [55624] [PID.612]

[MD5.DB5BEA73EDAF19AC68B2C0FAD0F92B1A] - (.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe [390504] [PID.496]

[MD5.D75A41E9D515D061ABD0D542157E0780] - (.Freemake - FreemakeUtilsService.) -- C:\Documents and Settings\All Users\Application Data\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [101888] [PID.1600]

[MD5.65C2D3C4BAE4C0EF1CD92BBC8BB57F2B] - (.Ellora Assets Corp. - CaptureLibService.) -- C:\Program Files\Freemake\CaptureLib\CaptureLibService.exe [9216] [PID.248]

[MD5.B9436A665A8621073A12338B16D7BFD4] - (.Oracle Corporation - Java Quick Starter Service.) -- C:\Program Files\Java\jre7\bin\jqs.exe [182696] [PID.484]

[MD5.27FE4B70C12A2C67A58D799B9A4E8D81] - (.Nero AG - Nero BackItUp.) -- C:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe [935208] [PID.588]

[MD5.BB9ACD507A735FA9FE524FCE0AEBB493] - (.Trusteer Ltd. - RapportService.) -- C:\Program Files\Trusteer\Rapport\bin\RapportService.exe [2484504] [PID.748]

[MD5.5150B108EA88831E1C599603D8B89621] - (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 301.4.) -- C:\WINDOWS\system32\nvsvc32.exe [164160] [PID.1072]

[MD5.AFCFE8754D09BDBE22CBC759AB9FF0B0] - (.SEIKO EPSON CORPORATION - EEventManager MFC Application.) -- C:\Program Files\EPSON\Creativity Suite\Event Manager\EEventManager.exe [102400] [PID.3128]

[MD5.5B6E8E09BE6401A7E022F52FDFCB2FF8] - (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe [254336] [PID.3204]

[MD5.C948AC73822CA662CF44185B909EA18B] - (.Microsoft Corporation - Microsoft Office Document Cache.) -- C:\Program Files\Microsoft Office\Office14\MSOSYNC.exe [720064] [PID.3280]

[MD5.E13EA4860E8F2AA845B53BFD2B6FEC5B] - (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe [1695232] [PID.3304]

[MD5.E5A7EA8C5C063943231A071789956893] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [7667712] [PID.3348]

[MD5.9EA190ABAA9B21C597C24192609645BD] - (.Nicolas Coolman - ZHPDiag Setup.) -- C:\Program Files\ZHPDiag\ZHPDiag2.exe [6865894] [PID.1804]

[MD5.9E30AB5E3F6B43F69F928E6B4FCFD604] - (.Pas de propriétaire - Setup/Uninstall.) -- C:\Documents and Settings\Admin\Local Settings\Temp\is-VDPON.tmp\ZHPDiag2.tmp [680960] [PID.3248]

[MD5.83E8AB7BB3C8956C53FEC071C94F0BBB] - (.NVIDIA Corporation - NVIDIA Settings Update Manager.) -- C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [1262400] [PID.1240]

[MD5.5E9A6658A2A69AE7EB195113B7A2E7A9] - (.Microsoft Corporation - Application Layer Gateway Service.) -- C:\WINDOWS\System32\alg.exe [44544] [PID.2528]

[MD5.15673BD0B86150CB8E27766059C72A9B] - (.Microsoft Corporation - wpffontcache_v0400.exe.) -- C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [754856] [PID.3628]

[MD5.358A9CCA612C68EB2F07DDAD4CE1D8D7] - (.Microsoft Corporation - Microsoft Office Software Protection Platfo.) -- C:\Program Files\Fichiers communs\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.exe [4640000] [PID.660]

~ Processes Running: Scanned in 00mn 19s

---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)

C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Preferences

G2 - GCE: Preference [User Data\Default] [apdfllckaahabafndbhieahigkjlhalf] GoogleÂ Drive v.6.3 (Activé)

G2 - GCE: Preference [User Data\Default] [flegfcibpcnhjcfmmpgckdobbiiogkda] FreemakeGold v.2.3.18.20 (Désactivé)

G2 - GCE: Preference [User Data\Default] [gfdkimpbcpahaombhbimeihdjnejgicl] Feedback v.1.0 (Activé)

G2 - GCE: Preference [User Data\Default] [ifohbjbgfchkkfhphahclmkpgejiplfo] Lightning Newtab v.0.0.4.1, (Désactivé)

G2 - GCE: Preference [User Data\Default] [jpmbfleldcgkldadpdinhjjopdfpjfjp] Wajam v.1.24 (Désactivé) =>Toolbar.Wajam

G2 - GCE: Preference [User Data\Default] [neajdppkdcdipfabeoofebfddakdcjhd] Google Network Speech v.1.0 (Activé)

G2 - GCE: Preference [User Data\Default] [nkeimhogjdpnpccoofpliimaahmaaome] Hangout Services v.1.0 (Activé)

G2 - GCE: Preference [User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] GoogleÂ Wallet v.0.0.6.1 (Activé)

G2 - GCE: Preference [User Data\Default] [pflphaooapbgpeakohlggbpidpppgdff] MySearchDial Nouvel onglet v.9.4.1.1 (Désactivé) =>Adware.MyWebSearch

~ Google Browser: 21 Legitimates Filtered in 00mn 06s

---\\ Internet Explorer, Proxy Management (R5)

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll

~ Proxy management: Scanned in 00mn 00s

---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs

F2 - REG:system.ini: USERINIT=C:\WINDOWS\system32\userinit.exe,

F2 - REG:system.ini: Shell=C:\WINDOWS\explorer.exe

F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"

~ Keys: Scanned in 00mn 00s

---\\ Redirection du fichier Hosts (O1)

~ Le fichier hosts est sain (The hosts file is clean).

~ Hosts File: Scanned in 00mn 00s

~ Nombre de lignes (Lines number): 20

---\\ Browser Helper Objects de navigateur (O2)

O2 - BHO: Freemake.YoutubeButton - {e9e8eb35-ff77-455d-b677-91e5e4fc06c2} . (...) -- mscoree.dll (.not file.)

~ BHO: 6 Legitimates Filtered in 00mn 00s

---\\ Applications démarrées par registre & par dossier (O4)

O4 - HKLM\..\Run: [MSC] . (.Microsoft Corporation - Microsoft Security Client User Interface.) -- C:\Program Files\Microsoft Security Client\msseces.exe

O4 - HKLM\..\Run: [NvCplDaemon] . (.NVIDIA Corporation - NVIDIA Display Properties Extension.) -- C:\WINDOWS\system32\NvCpl.dll

O4 - HKLM\..\Run: [EEventManager] . (.SEIKO EPSON CORPORATION - EEventManager MFC Application.) -- C:\Program Files\EPSON\Creativity Suite\Event Manager\EEventManager.exe

O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe

O4 - HKLM\..\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe

O4 - HKLM\..\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files\Fichiers communs\Apple\Apple Application Support\APSDaemon.exe

O4 - HKCU\..\Run: [ctfmon.exe] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [OfficeSyncProcess] . (.Microsoft Corporation - Microsoft Office Document Cache.) -- C:\Program Files\Microsoft Office\Office14\MSOSYNC.exe

O4 - HKCU\..\Run: [MSMSGS] . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe

O4 - HKUS\S-1-5-21-1229272821-1364589140-839522115-1005\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe

~ Application: Scanned in 00mn 00s

---\\ Autres liens utilisateurs (O4)

O4 - GS\Programs: Adobe Reader XI.lnk . (...) -- C:\WINDOWS\Installer\{AC76BA86-7AD7-1036-7B44-AB0000000001}\SC_Reader.ico

O4 - GS\Programs: Apple Software Update.lnk . (...) -- C:\WINDOWS\Installer\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}\AppleSoftwareUpdateIco.exe

O4 - GS\Programs: Microsoft Security Essentials.lnk . (.Microsoft Corporation - Microsoft Security Client User Interface.) -- C:\Program Files\Microsoft Security Client\msseces.exe

O4 - GS\Programs: Pivot Stickfigure Animator.lnk . (...) -- C:\Program Files\Pivot Stickfigure Animator\pivot.exe

O4 - GS\Programs: Windows Messenger.lnk . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe

O4 - GS\Programs: Windows Movie Maker.lnk . (.Microsoft Corporation - Windows Movie Maker.) -- C:\Program Files\Movie Maker\moviemk.exe

O4 - GS\Programs: Windows Search.lnk . (.Microsoft Corporation - Windows Search System Tray.) -- C:\Program Files\Windows Desktop Search\WindowsSearch.exe

O4 - GS\Programs: Assistance à distance.lnk . (.Microsoft Corporation - Assistance à distance Microsoft.) -- C:\WINDOWS\system32\rcimlby.exe

O4 - GS\Programs: Lecteur Windows Media.lnk . (.Microsoft Corporation - Windows Media Player.) -- C:\Program Files\Windows Media Player\wmplayer.exe

O4 - GS\Programs: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe

O4 - GS\Programs: Outlook Express.lnk . (.Microsoft Corporation - Outlook Express.) -- C:\Program Files\Outlook Express\msimn.exe

O4 - GS\Programs: Windows Media Player.lnk . (.Microsoft Corporation - Windows Media Player.) -- C:\Program Files\Windows Media Player\wmplayer.exe

~ Global Startup: Scanned in 00mn 06s

---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)

O9 - Extra button: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} . (.Microsoft Corporation - Microsoft OneNote Internet Explorer Add-in.) -- C:\Program Files\MICROS~3\Office14\ONBttnIE.dll

O9 - Extra button: Notes &liées OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} . (.Microsoft Corporation - Microsoft OneNote Internet Explorer Add-in.) -- C:\Program Files\MICROS~3\Office14\ONBTTN~1.dll

~ IE Extra Buttons: Scanned in 00mn 00s

---\\ Objets ActiveX (Downloaded Program Files)(O16)

O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} ((no name)) - http://windowsupdate.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1344361087500

O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} ((no name)) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1344361370718

O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} ((no name)) - http://fichiers2.touslesdrivers.com/maconfig/MaConfig_6_0_1_0.cab

~ Objets ActiveX: Scanned in 00mn 00s

---\\ Modification Domaine/Adresses DNS (O17)

O17 - HKLM\System\CCS\Services\Tcpip\..\{928A555E-9135-41E7-B6CF-67148FA5B319}: DhcpNameServer = 192.168.1.254

O17 - HKLM\System\CCS\Services\Tcpip\..\{928A555E-9135-41E7-B6CF-67148FA5B319}: DhcpDomain = darty

O17 - HKLM\System\CS1\Services\Tcpip\..\{7D7B8EFF-DD60-4949-BC43-DC505C8829FD}: DhcpNameServer = 192.168.0.254

O17 - HKLM\System\CS1\Services\Tcpip\..\{928A555E-9135-41E7-B6CF-67148FA5B319}: DhcpNameServer = 192.168.1.254

O17 - HKLM\System\CS1\Services\Tcpip\..\{928A555E-9135-41E7-B6CF-67148FA5B319}: DhcpDomain = darty

O17 - HKLM\System\CS2\Services\Tcpip\..\{928A555E-9135-41E7-B6CF-67148FA5B319}: DhcpNameServer = 192.168.1.254

O17 - HKLM\System\CS2\Services\Tcpip\..\{928A555E-9135-41E7-B6CF-67148FA5B319}: DhcpDomain = darty

O17 - HKLM\System\CS3\Services\Tcpip\..\{928A555E-9135-41E7-B6CF-67148FA5B319}: DhcpNameServer = 192.168.1.254

O17 - HKLM\System\CS3\Services\Tcpip\..\{928A555E-9135-41E7-B6CF-67148FA5B319}: DhcpDomain = darty

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254

~ Domain: Scanned in 00mn 00s

---\\ Protocole additionnel (O18)

O18 - Handler: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} . (.Microsoft Corporation - Windows Live Mail.) -- C:\Program Files\Windows Live\Mail\mailcomm.dll

O18 - Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE14\MSOXMLMF.dll

~ Protocole Additionnel: Scanned in 00mn 06s

---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)

O20 - Winlogon Notify: crypt32chain . (.Microsoft Corporation - Crypto API32.) -- C:\WINDOWS\system32\crypt32.dll

O20 - Winlogon Notify: cryptnet . (.Microsoft Corporation - Crypto Network Related API.) -- C:\WINDOWS\system32\cryptnet.dll

O20 - Winlogon Notify: cscdll . (.Microsoft Corporation - Agent réseau hors connexion.) -- C:\WINDOWS\system32\cscdll.dll

O20 - Winlogon Notify: dimsntfy . (.Microsoft Corporation - DIMS Notification Handler.) -- C:\WINDOWS\system32\dimsntfy.dll

O20 - Winlogon Notify: ScCertProp . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll

O20 - Winlogon Notify: Schedule . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll

O20 - Winlogon Notify: sclgntfy . (.Microsoft Corporation - DLL secondaire de notification de service d.) -- C:\WINDOWS\system32\sclgntfy.dll

O20 - Winlogon Notify: SensLogn . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\WlNotify.dll

O20 - Winlogon Notify: termsrv . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll

O20 - Winlogon Notify: wlballoon . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll

~ Winlogon: Scanned in 00mn 00s

---\\ Liste des services NT non Microsoft et non désactivés (O23)

O23 - Service: Rapport Management Service (RapportMgmtService) . (.Trusteer Ltd. - RapportMgmtService.) - C:\Program Files\Trusteer\Rapport\bin\RapportMgmtService.exe

~ Services: 10 Legitimates Filtered in 00mn 51s

---\\ Enumération Active Desktop & MHTML Editor (O24)

O24 - Default MHTML Editor: Last - .(.Microsoft Corporation - Microsoft Word.) - C:\Program Files\Microsoft Office\Office14\WINWORD.exe

O24 - Desktop General: BackupWallPaper - .(...) - C:\Documents and Settings\Admin\Local Settings\Application Data\Microsoft\Wallpaper1.bmp

O24 - Desktop General: WallPaper - .(...) - C:\Documents and Settings\Admin\Local Settings\Application Data\Microsoft\Wallpaper1.bmp

~ Desktop Component: 4 Legitimates Filtered in 00mn 00s

---\\ Tâches planifiées en automatique (O39)

O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\ProgramRefresh-ATFST.job [450]

O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\ProgramUpdateCheck.job [394]

~ Scheduled Task: 7 Legitimates Filtered in 00mn 00s

---\\ Logiciels installés (O42)

O42 - Logiciel: S10 RedEyes 3.2 - (.S10 Software.) [HKLM] -- {14AE051F-067D-4704-A65C-704120572842}

~ Logic: 136 Legitimates Filtered in 00mn 12s

---\\ HKCU & HKLM Software Keys

[HKCU\Software\file.org]

~ Key Software: 201 Legitimates Filtered in 00mn 12s

---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)

O43 - CFD: 20/09/2012 - 08:48:47 - [3,063] ----D C:\Program Files\FSL

O43 - CFD: 10/09/2012 - 21:09:45 - [0,167] ----D C:\Program Files\S10 RedEyes 3.2

O43 - CFD: 05/11/2012 - 11:27:36 - [13,380] ----D C:\Program Files\Xesc & Technology

O43 - CFD: 22/11/2013 - 07:21:31 - [0] ----D C:\Documents and Settings\Admin\Application Data\134-com.novelgames.flashgames.parking

O43 - CFD: 20/09/2012 - 08:48:54 - [28,510] ----D C:\Documents and Settings\Admin\Application Data\FSL

O43 - CFD: 09/02/2013 - 21:21:42 - [0,000] ----D C:\Documents and Settings\Admin\Application Data\IDM(2)

O43 - CFD: 10/09/2012 - 21:09:45 - [0,008] ----D C:\Documents and Settings\Admin\Menu Démarrer\Programmes\S10 RedEyes 3.2

~ Program Folder: 163 Legitimates Filtered in 04mn 26s

---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)

O44 - LFC:[MD5.93FF8817ABCD46DD7A8AB621FCFA73D4] - 28/02/2014 - 10:52:15 ---A- . (...) -- C:\WINDOWS\wiadebug.log [159]

O44 - LFC:[MD5.AD62D4DAD018E2E94889E8580E7B48DD] - 28/02/2014 - 10:52:14 ---A- . (...) -- C:\WINDOWS\wiaservc.log [50]

O44 - LFC:[MD5.CBB47BCB1D35991F0934E1D3C34E602E] - 19/02/2014 - 21:06:21 ---A- . (...) -- C:\WINDOWS\FaxSetup.log [24732]

O44 - LFC:[MD5.1CFA0E3C22995C8D5FAED1CB999D9FB8] - 19/02/2014 - 21:06:21 ---A- . (...) -- C:\WINDOWS\comsetup.log [8221]

O44 - LFC:[MD5.017408D9E1B77A5890755314E671D25F] - 19/02/2014 - 21:06:21 ---A- . (...) -- C:\WINDOWS\iis6.log [3942]

O44 - LFC:[MD5.4C2761904EA12FD10F07292613810C3C] - 19/02/2014 - 21:06:21 ---A- . (...) -- C:\WINDOWS\imsins.log [1374]

O44 - LFC:[MD5.881D191FE73C54FCB7E3C2426D97B399] - 19/02/2014 - 21:06:21 ---A- . (...) -- C:\WINDOWS\msgsocm.log [1236]

O44 - LFC:[MD5.C31F4D7DA6EA7C638FD6C7BFE861AEAC] - 19/02/2014 - 21:06:21 ---A- . (...) -- C:\WINDOWS\ntdtcsetup.log [4970]

O44 - LFC:[MD5.7E31B164084B36F305D89534D4B462D4] - 19/02/2014 - 21:06:21 ---A- . (...) -- C:\WINDOWS\ocgen.log [11824]

O44 - LFC:[MD5.D8CC6D2E3FF8DADFA004DAEC0560F052] - 19/02/2014 - 21:06:21 ---A- . (...) -- C:\WINDOWS\ocmsn.log [1368]

O44 - LFC:[MD5.C46E9EE4CB342D3FA1118516EA706DCC] - 19/02/2014 - 21:06:21 ---A- . (...) -- C:\WINDOWS\tsoc.log [9436]

O44 - LFC:[MD5.8A29EF1337202C5A8AFC3C1DDCE27D67] - 19/02/2014 - 21:06:19 ---A- . (...) -- C:\WINDOWS\updspapi.log [3668]

O44 - LFC:[MD5.5C1B916A52218BDC331A6F7A120D3C28] - 19/02/2014 - 20:51:19 ---A- . (...) -- C:\WINDOWS\imsins.BAK [1374]

~ Files: 30 Legitimates Filtered in 00mn 12s

---\\ Derniers fichiers créés dans Windows Prefetcher (O45)

O45 - LFCP:[MD5.DF83C4E05FD0BA7813172770106BF8B5] - 28/02/2014 - 10:57:42 ---A- - C:\WINDOWS\Prefetch\FREEMAKEERRORREPORTER.EXE-390669CF.pf

~ Prefetcher: 72 Legitimates Filtered in 00mn 00s

---\\ Opérations et fonctions au démarrage de Windows Explorer (O46)

O46 - SEH:ShellExecuteHooks - URL Exec Hook - {AEB6717E-7E19-11d0-97EE-00C04FD91972} - shell32.dll

O46 - SEH:ShellExecuteHooks - Windows Desktop Search Namespace Manager - {56F9679E-7826-4C84-81F3-532071A8BCC5} - C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll

O46 - SEH:ShellExecuteHooks - Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL

~ ShellExecuteHooks: Scanned in 00mn 00s

---\\ Image File Execution Options (IFEO) (O50)

O50 - IFEO:Image File Execution Options - Your Image File Name Here without a path - ntsd -d

~ IFEO: Scanned in 00mn 00s

---\\ Liste des Drivers Système (O58)

O58 - SDL:[MD5.0158F4027C0808FF65ED3B3D683339C9] - 16/01/2007 - 08:09:06 R--A- . (.Analog Devices, Inc. - High Definition Audio Function Driver.) -- C:\WINDOWS\system32\Drivers\ADIHdAud.sys [293888]

O58 - SDL:[MD5.6D3ADA4CE95CECA7BCE527A08C4C474E] - 02/03/2006 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ansi.sys [9037]

~ Drivers: Scanned in 00mn 00s

---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61)

O61 - LFC: 25/02/2014 - 10:42:55 ---A- C:\Documents and Settings\Admin\Recent\Mle Réponse réception contrat.doc.lnk [933]

O61 - LFC: 25/02/2014 - 14:10:12 ---A- C:\Documents and Settings\Admin\Recent\5-Compte St Jean de Luz.XLS.lnk [626]

O61 - LFC: 25/02/2014 - 14:19:06 ---A- C:\Documents and Settings\Admin\Recent\Charges St Jean de Luz 2013.xls.lnk [927]

O61 - LFC: 25/02/2014 - 14:19:06 ---A- C:\Documents and Settings\Admin\Recent\LOCATIONS 2013.lnk [653]

O61 - LFC: 25/02/2014 - 16:24:36 ---A- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Certificate Revocation Lists [270670]

O61 - LFC: 25/02/2014 - 16:45:08 ---A- C:\Documents and Settings\Admin\Mes documents\Downloads\PDFCreatorSetup.exe [17810632]

O61 - LFC: 25/02/2014 - 16:46:22 ---A- C:\Documents and Settings\Admin\Application Data\WB.CFG [42]

O61 - LFC: 25/02/2014 - 16:47:06 ---A- C:\Documents and Settings\Admin\Recent\Baptême.doc.lnk [473]

O61 - LFC: 25/02/2014 - 16:47:48 ---A- C:\Documents and Settings\Admin\Recent\Baptême.pdf.lnk [412]

O61 - LFC: 25/02/2014 - 16:47:48 ---A- C:\Documents and Settings\Admin\Recent\Mes Documents.lnk [378]

O61 - LFC: 25/02/2014 - 17:01:45 ---A- C:\Documents and Settings\Admin\Recent\Contrat location Bouchend'homme.pdf.lnk [1130]

O61 - LFC: 25/02/2014 - 17:01:46 ---A- C:\Documents and Settings\Admin\Recent\05 - Location BOUCHEND'HOMME.lnk [786]

O61 - LFC: 25/02/2014 - 17:35:08 ---A- C:\Documents and Settings\Admin\Recent\Fichier Locataires.doc.lnk [900]

O61 - LFC: 25/02/2014 - 17:53:38 ---A- C:\Documents and Settings\Admin\Recent\Grille tarifaire 2014.ppt.lnk [909]

O61 - LFC: 25/02/2014 - 20:07:17 ---A- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_www.programme-tv.net_0.localstorage [38912]

O61 - LFC: 25/02/2014 - 20:07:17 ---A- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_www.programme-tv.net_0.localstorage-journal [16384]

O61 - LFC: 25/02/2014 - 20:17:10 ---A- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\GPUCache\data_0 [45056]

O61 - LFC: 25/02/2014 - 20:17:10 ---A- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\GPUCache\data_1 [270336]

O61 - LFC: 25/02/2014 - 20:19:05 ---A- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_www.peugeot.fr_0.localstorage [3072]

O61 - LFC: 25/02/2014 - 20:19:05 ---A- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_www.peugeot.fr_0.localstorage-journal [3608]

O61 - LFC: 25/02/2014 - 20:45:51 ---A- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_www.leparisien.fr_0.localstorage [3072]

O61 - LFC: 25/02/2014 - 20:45:51 ---A- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_www.leparisien.fr_0.localstorage-journal [3608]

O61 - LFC: 26/02/2014 - 12:03:28 ---A- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Shortcuts [24576]

O61 - LFC: 26/02/2014 - 12:03:28 ---A- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Shortcuts-journal [12824]

O61 - LFC: 26/02/2014 - 13:32:20 ---A- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Network Action Predictor [102400]

O61 - LFC: 26/02/2014 - 13:32:20 ---A- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Network Action Predictor-journal [16384]

O61 - LFC: 26/02/2014 - 15:29:13 ---A- C:\Documents and Settings\Admin\Recent\6-Fiche prévision St Jean.XLS.lnk [632]

O61 - LFC: 26/02/2014 - 16:32:53 ---A- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_fr.wikipedia.org_0.localstorage [1769472]

O61 - LFC: 26/02/2014 - 16:32:53 ---A- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_fr.wikipedia.org_0.localstorage-journal [16384]

O61 - LFC: 27/02/2014 - 07:04:34 ---A- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_www.glastint.com_0.localstorage [3072]

O61 - LFC: 27/02/2014 - 07:04:34 ---A- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_www.glastint.com_0.localstorage-journal [3608]

O61 - LFC: 27/02/2014 - 07:19:35 ---A- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_www.allopneus.com_0.localstorage [25600]

O61 - LFC: 27/02/2014 - 07:19:35 ---A- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_www.allopneus.com_0.localstorage-journal [16384]

O61 - LFC: 27/02/2014 - 10:29:01 ---A- C:\Documents and Settings\Admin\Recent\Thomas-Robin 02-2014.lnk [562]

O61 - LFC: 27/02/2014 - 11:33:41 ---A- C:\Documents and Settings\Admin\Recent\VERTOU FEV 2014.lnk [547]

O61 - LFC: 27/02/2014 - 11:51:52 ---A- C:\Documents and Settings\Admin\Recent\Budget séjour St Jean.xlsx.lnk [407]

O61 - LFC: 27/02/2014 - 12:59:07 ---A- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_www.musee-orsay.fr_0.localstorage [3072]

O61 - LFC: 27/02/2014 - 12:59:07 ---A- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_www.musee-orsay.fr_0.localstorage-journal [3608]

O61 - LFC: 27/02/2014 - 12:59:32 ---A- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_www.digitick.com_0.localstorage [3072]

O61 - LFC: 27/02/2014 - 12:59:32 ---A- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_www.digitick.com_0.localstorage-journal [3608]

O61 - LFC: 27/02/2014 - 13:02:04 ---A- C:\Documents and Settings\Admin\Recent\1-Comptes Société Générale.xls.lnk [635]

O61 - LFC: 27/02/2014 - 13:02:45 ---A- C:\Documents and Settings\Admin\Recent\2-Comptes PTT.XLS.lnk [596]

O61 - LFC: 27/02/2014 - 13:02:45 ---A- C:\Documents and Settings\Admin\Recent\COMPTES.lnk [442]

O61 - LFC: 27/02/2014 - 21:04:21 ---A- C:\Documents and Settings\Admin\Recent\Calendrier 2013s2 2014s1s2.pdf.lnk [924]

O61 - LFC: 27/02/2014 - 21:04:42 ---A- C:\Documents and Settings\Admin\Recent\LOCATIONS 2014.lnk [653]

O61 - LFC: 27/02/2014 - 21:04:42 ---A- C:\Documents and Settings\Admin\Recent\Lettre main Envoi contrat.doc.lnk [921]

O61 - LFC: 28/02/2014 - 07:05:24 ---A- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Top Sites [102400]

O61 - LFC: 28/02/2014 - 07:05:24 ---A- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Top Sites-journal [16384]

O61 - LFC: 28/02/2014 - 07:14:03 ---A- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_www.youtube.com_0.localstorage [8192]

O61 - LFC: 28/02/2014 - 07:14:03 ---A- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_www.youtube.com_0.localstorage-journal [8768]

O61 - LFC: 28/02/2014 - 07:58:08 ---A- C:\Documents and Settings\Admin\Recent\02-Location GOYHENEIX.lnk [765]

O61 - LFC: 28/02/2014 - 07:58:08 ---A- C:\Documents and Settings\Admin\Recent\Contrat location.pdf.lnk [1050]

O61 - LFC: 28/02/2014 - 08:01:55 ---A- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\PnaclTranslationCache\data_1 [270336]

O61 - LFC: 28/02/2014 - 10:51:39 -SHA- C:\Documents and Settings\Admin\IETldCache\index.dat [262144]

O61 - LFC: 28/02/2014 - 11:06:29 ---A- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\TransportSecurity [2876]

O61 - LFC: 28/02/2014 - 11:14:38 ---A- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\File System\001\t\Paths\LOG.old [145]

O61 - LFC: 28/02/2014 - 11:14:38 ---A- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\File System\Origins\LOG.old [148]

O61 - LFC: 28/02/2014 - 11:18:18 ---A- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extension Rules\LOG.old [151]

O61 - LFC: 28/02/2014 - 11:18:18 ---A- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Last Session [321513]

O61 - LFC: 28/02/2014 - 11:18:18 ---A- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Last Tabs [57163]

O61 - LFC: 28/02/2014 - 11:18:18 ---A- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Session Storage\LOG.old [279]

O61 - LFC: 28/02/2014 - 11:18:19 ---A- C:\Documents and Settings\Admin\Bureau\Word 2010.lnk [2561]

O61 - LFC: 28/02/2014 - 11:49:09 ---A- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extension Rules\CURRENT [16]

O61 - LFC: 28/02/2014 - 11:49:10 ---A- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Custom Dictionary.txt [70]

O61 - LFC: 28/02/2014 - 11:49:10 ---A- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Custom Dictionary.txt.backup [58]

O61 - LFC: 28/02/2014 - 11:49:10 ---A- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extension Rules\LOG [154]

O61 - LFC: 28/02/2014 - 11:49:11 ---A- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Login Data [30720]

O61 - LFC: 28/02/2014 - 11:49:11 ---A- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Login Data-journal [8736]

O61 - LFC: 28/02/2014 - 11:49:13 ---A- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extension State\LOG.old [0]

O61 - LFC: 28/02/2014 - 11:49:27 ---A- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Session Storage\011160.ldb [147]

O61 - LFC: 28/02/2014 - 11:49:27 ---A- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Session Storage\CURRENT [16]

O61 - LFC: 28/02/2014 - 11:49:27 ---A- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Session Storage\MANIFEST-011157 [735]

O61 - LFC: 28/02/2014 - 11:49:27 ---A- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Web Data [116736]

O61 - LFC: 28/02/2014 - 11:49:27 ---A- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Web Data-journal [16384]

O61 - LFC: 28/02/2014 - 11:52:11 ---A- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extension State\LOG [0]

O61 - LFC: 28/02/2014 - 11:52:11 ---A- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\File System\001\t\Paths\CURRENT [16]

O61 - LFC: 28/02/2014 - 11:52:11 ---A- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\File System\001\t\Paths\MANIFEST-000069 [86]

O61 - LFC: 28/02/2014 - 11:52:11 ---A- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\File System\Origins\CURRENT [16]

O61 - LFC: 28/02/2014 - 11:52:11 ---A- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\File System\Origins\MANIFEST-000107 [341]

O61 - LFC: 28/02/2014 - 11:52:16 ---A- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\File System\001\t\.usage [24]

O61 - LFC: 28/02/2014 - 11:52:41 ---A- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\QuotaManager [20480]

O61 - LFC: 28/02/2014 - 11:52:41 ---A- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\QuotaManager-journal [6704]

O61 - LFC: 28/02/2014 - 11:53:34 ---A- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Safe Browsing Download [856220]

O61 - LFC: 28/02/2014 - 11:53:35 ---A- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Safe Browsing Bloom [5843164]

O61 - LFC: 28/02/2014 - 11:53:35 ---A- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Safe Browsing Bloom Prefix Set [1409092]

O61 - LFC: 28/02/2014 - 11:53:35 ---A- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Safe Browsing Csd Whitelist [135496]

O61 - LFC: 28/02/2014 - 11:53:35 ---A- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Safe Browsing Download Whitelist [19428]

O61 - LFC: 28/02/2014 - 11:53:35 ---A- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Safe Browsing Extension Blacklist [16636]

O61 - LFC: 28/02/2014 - 11:53:35 ---A- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Safe Browsing IP Blacklist [1340]

O61 - LFC: 28/02/2014 - 11:54:03 ---A- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Safe Browsing Cookies [6144]

O61 - LFC: 28/02/2014 - 11:54:03 ---A- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Safe Browsing Cookies-journal [3608]

O61 - LFC: 28/02/2014 - 11:57:50 ---A- C:\Documents and Settings\Admin\Recent\AdwCleaner[S1].txt.lnk [566]

O61 - LFC: 28/02/2014 - 11:57:57 ---A- C:\Documents and Settings\Admin\Recent\AdwCleaner.lnk [393]

O61 - LFC: 28/02/2014 - 12:01:02 ---A- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Favicons [1818624]

O61 - LFC: 28/02/2014 - 12:01:03 ---A- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Favicons-journal [16384]

O61 - LFC: 28/02/2014 - 12:01:22 ---A- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Sync Data\SyncData.sqlite3 [1658880]

O61 - LFC: 28/02/2014 - 12:01:22 ---A- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Sync Data\SyncData.sqlite3-journal [16384]

O61 - LFC: 28/02/2014 - 12:01:47 ---A- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Cookies [849920]

O61 - LFC: 28/02/2014 - 12:01:47 ---A- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Cookies-journal [16384]

O61 - LFC: 28/02/2014 - 12:01:47 ---A- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Current Tabs [123868]

O61 - LFC: 28/02/2014 - 12:01:47 ---A- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\History Provider Cache [342378]

O61 - LFC: 28/02/2014 - 12:01:47 ---A- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Local State [62835]

O61 - LFC: 28/02/2014 - 12:01:54 ---A- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Current Session [576279]

O61 - LFC: 28/02/2014 - 12:01:54 ---A- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\File System\001\t\Paths\LOG [142]

O61 - LFC: 28/02/2014 - 12:01:54 ---A- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\File System\Origins\LOG [145]

O61 - LFC: 28/02/2014 - 12:01:54 ---A- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\History [1839104]

O61 - LFC: 28/02/2014 - 12:01:54 ---A- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\History-journal [16384]

O61 - LFC: 28/02/2014 - 12:01:54 ---A- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Preferences [191783]

O61 - LFC: 28/02/2014 - 12:01:54 ---A- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Session Storage\LOG [799]

O61 - LFC: 28/02/2014 - 12:01:54 ---A- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Visited Links [131072]

O61 - LFC: 28/02/2014 - 12:02:06 ---A- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\chrome_shutdown_ms.txt [6]

O61 - LFC: 28/02/2014 - 12:10:44 ---A- C:\Documents and Settings\Admin\Bureau\MBRCheck_02.28.14_12.10.43.txt [316]

~ 23 Fichiers temporaires (Temporary files)

~ 5 Fichiers cookies (Cookies files)

~ Files: 221 Legitimates Filtered in 04mn 02s

---\\ Alternate Data Stream File (O62)

O62 - ADS:Alternate Data Stream File - C:\WINDOWS\system32\Drivers\jraid.sys:Zone.Identifier

~ ADS: Scanned in 00mn 00s

---\\ Liste des outils de nettoyage (O63)

O63 - Logiciel: ZHPDiag 2013 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1

~ ADS: Scanned in 00mn 00s

---\\ Liste des services Legacy (O64)

O64 - Services: CurCS - 30/08/2011 - C:\Program Files\Bonjour\mDNSResponder.exe (Bonjour Service) .(.Apple Inc. - Bonjour Service.) - LEGACY_BONJOUR_SERVICE

O64 - Services: CurCS - ??\??\???? - Pas de propriétaire (esgiguard) .(...) - LEGACY_ESGIGUARD

~ Legacy: 155 Legitimates Filtered in 00mn 00s

---\\ File Associations Shell Spawning (O67)

O67 - Shell Spawning: <.html> <ChromeHTML>[HKCU\..\open\Command] (.Not Key.)

~ FASS Keys: 17 Legitimates Filtered in 00mn 00s

---\\ Start Menu Internet (O68)

O68 - StartMenuInternet: <chrome.exe> <>[HKLM\..\Shell\open\Command] (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\Application\chrome.exe (.not file.)

O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe

O68 - StartMenuInternet: <Google Chrome.3336HIMI746KVT6K5DBQAP577I> <Google Chrome>[HKLM\..\Shell\open\Command] (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\Application\chrome.exe (.not file.)

O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe

~ Keys: Scanned in 00mn 00s

---\\ Search Browser Infection (O69)

O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} - (@ieframe.dll,-12512) - http://www.bing.com

~ Keys: Scanned in 00mn 00s

---\\ Recherche particuliere à la racine de certains dossiers (O84)

[MD5.CA3F903C70AAFB92E1DF35A843ACFC0C] [SPRF][08/08/2012] (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\fusioncache.dat [128]

[MD5.3FEA9D2EDF23B0283C7A66C8DEA380BD] [SPRF][25/07/2002] (.InstallShield Software Corporation - InstallShield Update Service Setup Player Module.) -- C:\WINDOWS\Downloaded Program Files\dwusplay.dll [24576]

[MD5.CDBE35EA59BC9223E4F800BD1DB82D27] [SPRF][25/07/2002] (.InstallShield Software Corporation - InstallShield Update Service Setup Player.) -- C:\WINDOWS\Downloaded Program Files\dwusplay.exe [196608]

[MD5.0C78701C6F42345DFF2B2B6C3C3D01EF] [SPRF][25/07/2002] (.InstallShield Software Corporation - InstallShield Update Service Web Agent.) -- C:\WINDOWS\Downloaded Program Files\isusweb.dll [172032]

~ Files: Scanned in 00mn 00s

---\\ Scan Additionnel (O88)

Database Version : v2.12676 - (05/07/2013)

Clés trouvées (Keys found) : 4

Valeurs trouvées (Values found) : 0

Dossiers trouvés (Folders found) : 0

Fichiers trouvés (Files found) : 0

[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E9E8EB35-FF77-455D-B677-91E5E4FC06C2}] =>Toolbar.Freemake

[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{E9E8EB35-FF77-455D-B677-91E5E4FC06C2}] =>Toolbar.Freemake

[HKLM\Software\Classes\CLSID\{E9E8EB35-FF77-455D-B677-91E5E4FC06C2}] =>Toolbar.Freemake

[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E9E8EB35-FF77-455D-B677-91E5E4FC06C2}] =>Toolbar.Freemake

~ Additionnel Scan: 218352 Items scanned in 00mn 13s

---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)

SS - | Demand 21/02/2014 257928 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe

SR - | Auto 07/09/2013 55624 | (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe

SR - | Auto 30/08/2011 390504 | (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe

SS - | Demand 13/04/2008 225280 | (dmadmin) . (.Microsoft Corp., Veritas Software.) - C:\WINDOWS\system32\dmadmin.exe

SR - | Auto 26/08/2013 101888 | (Freemake Improver) . (.Freemake.) - C:\Documents and Settings\All Users\Application Data\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe

SR - | Auto 26/08/2013 9216 | (FreemakeVideoCapture) . (.Ellora Assets Corp..) - C:\Program Files\Freemake\CaptureLib\CaptureLibService.exe

SS - | Auto 11/08/2012 116648 | (gupdate) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe

SS - | Demand 11/08/2012 116648 | (gupdatem) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe

SR - | Auto 18/12/2013 182696 | (JavaQuickStarterService) . (.Oracle Corporation.) - C:\Program Files\Java\jre7\bin\jqs.exe

SR - | Auto 29/08/2008 935208 | (Nero BackItUp Scheduler 4.0) . (.Nero AG.) - C:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe

SR - | Auto 15/05/2012 164160 | (NVSvc) . (.NVIDIA Corporation.) - C:\WINDOWS\system32\nvsvc32.exe

SR - | Auto 15/05/2012 1262400 | (nvUpdatusService) . (.NVIDIA Corporation.) - C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

SR - | Auto 10/02/2014 1444120 | (RapportMgmtService) . (.Trusteer Ltd..) - C:\Program Files\Trusteer\Rapport\bin\RapportMgmtService.exe

~ Services: Scanned in 00mn 00s

---\\ Recherche Master Boot Record Infection (MBR)(O80)

Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net

Run by Admin at 28/02/2014 12:32:04

device: opened successfully

user: MBR read successfully

Disk trace:

called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll SCSIPORT.SYS nvgts.sys

C:\WINDOWS\system32\drivers\nvgts.sys NVIDIA Corporation NVIDIA nForce(TM) SATA Driver

1 ntkrnlpa!IofCallDriver[0x804EF200] >> \Device\Harddisk0\DR0[0x8ADBA030]

kernel: MBR read successfully

user & kernel MBR OK

~ MBR: 14 Legitimates Filtered in 00mn 02s

---\\ Recherche Master Boot Record Infection (MBRCheck)(O80)

Written by ad13, http://ad13.geekstog

Run by Admin at 28/02/2014 12:32:06

********* Dump file Name *********

C:\PhysicalDisk0_MBR.bin

~ MBR: Scanned in 00mn 04s

---\\ Malicius Software Information

~ http://nicolascoolman.webs.com/apps/blog/show/27379491-toolbar-wajam =>Toolbar.Wajam

~ http://nicolascoolman.webs.com/apps/blog/show/27146838-adware-mywebsearch =>Adware.MyWebSearch

~ MSI: 2 link(s) detected in 00mn 04s

~ 1307 Legitimates filtered by white list

End of the scan (596 lines in 14mn 19s)(0)

Les bons plans du moment PC Astuces