API tools faq
paste
Guest User

Détail

a guest
Aug 16th, 2014
57
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 27.62 KB | None | 0 0
raw download clone embed print report
  1. ~ Rapport de ZHPDiag v2014.8.13.118 - Nicolas Coolman (13/08/2014)
  2. ~ Lancé par Julien (16/08/2014 15:33:02)
  3. ~ Adresse du Site Web http://nicolascoolman.fr
  4. ~ Adresse du Forum http://forum.nicolascoolman.fr
  5. ~ Traduit par Nicolas Coolman
  6. ~ Etat de la version : Version à jour.
  7. ~ Liste blanche : Activée par le programme
  8. ~ Elévation des Privilèges : OK
  9. ~ User Account Control (UAC): Deactivate by user
  10.  
  11.  
  12. ---\\ Navigateurs Internet
  13. MSIE: Internet Explorer v11.0.9600.17207
  14. GCIE: Google Chrome v36.0.1985.143 (Defaut)
  15.  
  16. ---\\ Informations sur les produits Windows
  17. ~ Langage: Français
  18. Windows 8.1 Pro, 64-bit (Build 9600)
  19. Windows Server License Manager Script : OK
  20. ~ Windows(R) Operating System, RETAIL channel
  21. Windows ID Activation : OK
  22. ~ Windows Partial Key : BR9T7
  23. Windows License : OK
  24. ~ Windows Remaining Initializations Number : 999
  25. Software Protection Service (Protection logicielle) : OK
  26. Windows Automatic Updates : OK
  27. Windows Activation Technologies : OK
  28.  
  29. ---\\ Logiciels de protection du système
  30. Malwarebytes Anti-Malware version 1.75.0.1300
  31. Norton Internet Security v21.0.1.3
  32. Windows Defender W8 (Deactivate)
  33.  
  34. ---\\ Logiciels d'optimisation du système
  35.  
  36. ---\\ Logiciels de partage PeerToPeer
  37. Vuze v5.3.0.0 =>P2P.Azureus
  38.  
  39. ---\\ Surveillance de Logiciels
  40. Adobe Flash Player 14 Plugin
  41. Adobe Reader 8.1.0 - Français
  42. Java 7 Update 67
  43.  
  44. ---\\ Informations sur le système
  45. ~ Processor: Intel64 Family 6 Model 58 Stepping 9, GenuineIntel
  46. ~ Operating System: 64 Bits
  47. Boot mode: Normal (Normal boot)
  48. Total RAM: 8076 MB (39% free)
  49. System Restore: Activé (Enable)
  50. System drive C: has 26 GB (23%) free of 112 GB
  51.  
  52. ---\\ Mode de connexion au système
  53. ~ Computer Name: JUJU
  54. ~ User Name: Julien
  55. ~ All Users Names: Julien, HomeGroupUser$, Administrateur,
  56. ~ Unselected Option: O45,O61,O62,O65,O66,O80,O82,O89
  57. Logged in as Administrator
  58.  
  59. ---\\ Variables d'environnement
  60. ~ System Unit : C:\
  61. ~ %AppZHP% : C:\Users\Julien\AppData\Roaming\ZHP\
  62. ~ %AppData% : C:\Users\Julien\AppData\Roaming\
  63. ~ %Desktop% : C:\Users\Julien\Desktop\
  64. ~ %Favorites% : C:\Users\Julien\Favorites\
  65. ~ %LocalAppData% : C:\Users\Julien\AppData\Local\
  66. ~ %StartMenu% : C:\Users\Julien\AppData\Roaming\Microsoft\Windows\Start Menu\
  67. ~ %Windir% : C:\Windows\
  68. ~ %System% : C:\Windows\System32\
  69.  
  70. ---\\ Enumération des unités disques
  71. C: Hard drive, Flash drive, Thumb drive (Free 26 Go of 112 Go)
  72. D: Hard drive, Flash drive, Thumb drive (Free 0 Go of 0 Go)
  73. E: CD-ROM drive (Not Inserted)
  74. F: Hard drive, Flash drive, Thumb drive (Free 195 Go of 466 Go)
  75. G: Hard drive, Flash drive, Thumb drive (Free 1623 Go of 1863 Go)
  76. H: Floppy drive, Flash card reader, USB Key (Not Inserted)
  77.  
  78.  
  79.  
  80. ---\\ Etat du Centre de Sécurité Windows
  81. [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
  82. [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: Modified
  83. ~ Security Center: 44 Legitimates Filtered in 00mn 00s
  84.  
  85.  
  86.  
  87. ---\\ Recherche particulière de fichiers génériques
  88. [MD5.81394C91B7B5A7C799E249AE82491F13] - (.Microsoft Corporation - Explorateur Windows.) (.04/03/2014 - 13:25:49.) -- C:\Windows\Explorer.exe [2373784]
  89. [MD5.48CFA7BE561A7BE144C29BB912055016] - (.Microsoft Corporation - Application de démarrage de Windows.) (.22/08/2013 - 10:58:29.) -- C:\Windows\System32\Wininit.exe [144384]
  90. [MD5.2EE102DF0EDD8A1EDD3D1E9B99A91BEC] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.18/06/2014 - 23:58:27.) -- C:\Windows\System32\wininet.dll [2266112]
  91. [MD5.306EB21E5B480AE9065EA55AC8C35936] - (.Microsoft Corporation - Application d’ouverture de session Windows.) (.22/02/2014 - 10:45:48.) -- C:\Windows\System32\Winlogon.exe [562176]
  92. [MD5.AFCAB4DC692CCE37E283B00E2D7B438F] - (.Microsoft Corporation - Bibliothèque de licences.) (.21/12/2013 - 09:54:07.) -- C:\Windows\System32\sppcomapi.dll [447488]
  93. [MD5.374E27295F0A9DCAA8FC96370F9BEEA5] - (.Microsoft Corporation - Pilote de fonction connexe pour WinSock.) (.30/05/2014 - 04:03:03.) -- C:\Windows\system32\Drivers\AFD.sys [563200]
  94. [MD5.74B14192CF79A72F7536B27CB8814FBD] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.22/08/2013 - 13:43:41.) -- C:\Windows\system32\Drivers\atapi.sys [26464]
  95. [MD5.2FA6510E33F7DEFEC03658B74101A9B9] - (.Microsoft Corporation - CD-ROM File System Driver.) (.22/08/2013 - 12:40:15.) -- C:\Windows\system32\Drivers\Cdfs.sys [88576]
  96. [MD5.C6796EA22B513E3457514D92DCDB1A3D] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.22/08/2013 - 09:46:35.) -- C:\Windows\system32\Drivers\Cdrom.sys [164352]
  97. [MD5.A03F362C5557E238CBFA914689C77248] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.06/03/2014 - 10:22:50.) -- C:\Windows\system32\Drivers\DfsC.sys [134144]
  98. [MD5.498288DD5CA42C2D36D125893E968C53] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.18/03/2014 - 09:19:14.) -- C:\Windows\system32\Drivers\HDAudBus.sys [77312]
  99. [MD5.84CFC5EFA97D0C965EDE1D56F116A541] - (.Microsoft Corporation - Pilote de port i8042.) (.22/08/2013 - 12:39:15.) -- C:\Windows\system32\Drivers\i8042prt.sys [107520]
  100. [MD5.B7342B3C58E91107F6E946A93D9D4EFD] - (.Microsoft Corporation - IP Network Address Translator.) (.27/11/2013 - 13:02:29.) -- C:\Windows\system32\Drivers\IpNat.sys [142848]
  101. [MD5.0696F66E4D423793951A60562F794D14] - (.Microsoft Corporation - Minirdr SMB Windows NT.) (.03/04/2014 - 03:23:05.) -- C:\Windows\system32\Drivers\MRxSmb.sys [402432]
  102. [MD5.0217532E19A748F0E5D569307363D5FD] - (.Microsoft Corporation - MBT Transport driver.) (.22/08/2013 - 12:37:02.) -- C:\Windows\system32\Drivers\netBT.sys [282624]
  103. [MD5.1C80517BE6836A812F6A9B99B8321351] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.20/03/2014 - 04:41:24.) -- C:\Windows\system32\Drivers\ntfs.sys [2013016]
  104. [MD5.764B1121867B2D9B31C491668AC72B2B] - (.Microsoft Corporation - Pilote de port parallèle.) (.22/08/2013 - 12:40:02.) -- C:\Windows\system32\Drivers\Parport.sys [94208]
  105. [MD5.BBB6272B7F46C4640A8CDB8A70C3450F] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.22/08/2013 - 12:35:51.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [120832]
  106. [MD5.680C1DAE268B6FB67FA21B389A8B79EF] - (.Microsoft Corporation - Redirecteur de périphérique de Microsoft RDP.) (.30/09/2013 - 04:59:55.) -- C:\Windows\system32\Drivers\rdpdr.sys [195584]
  107. [MD5.FFF28F9F6823EB1756C60F1649560BBF] - (.Microsoft Corporation - TDI Translation Driver.) (.22/08/2013 - 14:25:35.) -- C:\Windows\system32\Drivers\tdx.sys [107520]
  108. [MD5.4BB9BC49DEE1A319EC58274A7BBED663] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.06/03/2014 - 13:42:44.) -- C:\Windows\system32\Drivers\volsnap.sys [310616]
  109. ~ Generic Processes: Scanned in 00mn 00s
  110.  
  111.  
  112.  
  113. ---\\ Etat des fichiers cachés (Caché/Total)
  114. ~ Mes images (My Pictures) : 2/1108
  115. ~ Mes musiques (My Musics) : 1/1300
  116. ~ Mes Favoris (My Favorites) : 1/159
  117. ~ Mes Documents (My Documents) : 1/845
  118. ~ Mon Bureau (My Desktop) : 2/1082
  119. ~ Menu demarrer (Programs) : 1/53
  120. ~ Hidden Files: Scanned in 00mn 00s
  121.  
  122.  
  123.  
  124. ---\\ Processus lancés
  125. [MD5.262FB554D67D17D843F81820111F0A80] - (.Symantec Corporation - Norton Internet Security.) -- C:\Program Files (x86)\Norton Internet Security\Engine\21.0.1.3\NIS.exe [275696] [PID.1936]
  126. [MD5.05470C684B62C2F86325D8685E4513CB] - (.NVIDIA Corporation - NVIDIA GeForce Experience Backend.) -- C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2403104] [PID.2008]
  127. [MD5.AFD67CED4279C1FBA095F1603D18E59F] - (.Valve Corporation - Steam Client Bootstrapper.) -- G:\Games\Steam\Steam.exe [1937600] [PID.4244]
  128. [MD5.48C3EBD6D5E52AFCB1A0FA9B7F9802FA] - (.Apple Inc. - iCloud.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720] [PID.3116]
  129. [MD5.799BCC829F48F19C5689478179060435] - (.Apple Inc. - Apple Photostreams Uploader Executable.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720] [PID.4580]
  130. [MD5.DAB55357D9CC9A76052F4472EBD5C729] - (.Apple Inc. - Apple IE DAV.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\AppleIEDAV.exe [1326408] [PID.4992]
  131. [MD5.6CAC6807A07F5FB295E918D725AE093D] - (.Valve Corporation - Steam Client WebHelper.) -- G:\Games\Steam\bin\steamwebhelper.exe [1520832] [PID.4372]
  132. [MD5.B8C93930C5F4F8C8EC46BFACD32078ED] - (...) -- C:\Users\Julien\AppData\Local\Amazon Cloud Player\Amazon Music Helper.exe [3168576] [PID.1772]
  133. [MD5.47833576F0BEE0AD7B45109982B769BD] - (.Apple Inc. - Apple Push.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\APSDaemon.exe [59720] [PID.3456]
  134. [MD5.C59599155BF60649D9A8708E9E6ABF87] - (.GIGABYTE Technology Co.,Ltd. - Graphics Card Smart Tuner..) -- C:\Program Files (x86)\GIGABYTE\GIGABYTE OC_GURU II\OC_GURU.exe [17428480] [PID.5260]
  135. [MD5.308F2EE28005510DE616409148CF077B] - (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896] [PID.5488]
  136. [MD5.0BDAE865738D27A4D84D50591C8C9D2D] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [860488] [PID.5864]
  137. [MD5.F59DEB152217667D463C569A4E9D8506] - (.Valve Corporation - gameoverlayui.exe.) -- G:\Games\Steam\GameOverlayUI.exe [383168] [PID.6808]
  138. [MD5.22547816719826493FFCAEA1D92EAD70] - (.NVIDIA - NVIDIA GeForce Experience.) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\GFExperience.exe [4306208] [PID.4408]
  139. [MD5.34EBD4FF6A24D86BB4716D6AFCC1A89B] - (.Apple Inc. - Apple Software Update.) -- C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [561984] [PID.6592]
  140. [MD5.EE7C82B0D69F038245CECBCE9EC45A9A] - (.Microsoft Corporation - COM Surrogate.) -- C:\WINDOWS\SysWOW64\DllHost.exe [17760] [PID.5828]
  141. [MD5.DC2E338E63159454B71659D82515A04E] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [8091648] [PID.3604]
  142. [MD5.E1D499C501DC2E1F8B451F1A43BFABED] - (.Microsoft Corporation - Installateur Windows®.) -- C:\Windows\syswow64\Msiexec.exe [55808] [PID.4208]
  143. ~ Processes Running: Scanned in 00mn 00s
  144.  
  145.  
  146.  
  147. ---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
  148. C:\Users\Julien\AppData\Local\Google\Chrome\User Data\Default\Preferences
  149. G2 - GCE: Preference [User Data\Default] [apdfllckaahabafndbhieahigkjlhalf] Google Drive v.6.3 (Activé)
  150. G2 - GCE: Preference [User Data\Default] [kmendfapggjehodndflmmgagdbamhnfd] CryptoTokenExtension v.0.0.1 (Activé)
  151. G2 - GCE: Preference [User Data\Default] [mkfokfffehpeedafpekjeddnmnjhmcmk] Norton Security Toolbar v.2014.7.6.17, (Désactivé)
  152. G2 - GCE: Preference [User Data\Default] [neajdppkdcdipfabeoofebfddakdcjhd] Google Network Speech v.1.0 (Activé)
  153. G2 - GCE: Preference [User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] Google Wallet v.0.0.6.1 (Activé)
  154. G2 - GCE: Preference [User Data\Default] [pafkbggdmjlpgkdkcbjmhmfcdpncadgh] Google Now v.1.2.0.1 (Activé)
  155.  
  156. ---\\ Liste des dossiers d'extension Google Chrome
  157. ~ Google Lines Browser: 16 Legitimates Filtered in 00mn 02s
  158.  
  159.  
  160.  
  161. ---\\ Internet Explorer, Proxy Management (R5)
  162. R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
  163. R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
  164. R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
  165. R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
  166. R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
  167. R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
  168. ~ Proxy management: Scanned in 00mn 00s
  169.  
  170.  
  171.  
  172. ---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
  173. F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
  174. F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
  175. F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
  176. ~ Keys: Scanned in 00mn 00s
  177.  
  178.  
  179.  
  180. ---\\ Hosts file redirection (O1)
  181. ~ Le fichier hôte est sain (The hosts file is clean).
  182. ~ Hosts File: Scanned in 00mn 00s
  183.  
  184.  
  185.  
  186. ---\\ Autres liens utilisateurs (O4)
  187. O4 - GS\Desktop [Public]: Vuze.lnk . (...) -- C:\Program Files (x86)\Vuze\Azureus.exe (.not file.) =>P2P.Azureus
  188. O4 - GS\Program [Public]: Vuze.lnk . (...) -- C:\Program Files (x86)\Vuze\Azureus.exe (.not file.) =>P2P.Azureus
  189. O4 - GS\QuickLaunch [Julien]: Vuze.lnk . (...) -- C:\Program Files (x86)\Vuze\Azureus.exe (.not file.) =>P2P.Azureus
  190. ~ Global Startup: 3 Legitimates Filtered in 00mn 00s
  191.  
  192.  
  193.  
  194. ---\\ Applications lancées au démarrage du système (O4)
  195. O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\WINDOWS\system32\igfxtray.exe
  196. O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\WINDOWS\system32\hkcmd.exe
  197. O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\WINDOWS\system32\igfxpers.exe
  198. O4 - HKLM\..\Run: [Launch LCore] . (.Logitech Inc. - Logitech Gaming Framework.) -- C:\Program Files\Logitech Gaming Software\LCore.exe =>.Logitech Inc
  199. O4 - HKLM\..\Run: [Nvtmru] C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe (.not file.)
  200. O4 - HKLM\..\Run: [ShadowPlay] . (.NVIDIA Corporation - NVIDIA Capture Server Proxy.) -- C:\WINDOWS\system32\nvspcap64.dll
  201. O4 - HKLM\..\Run: [NvBackend] . (.NVIDIA Corporation - NVIDIA GeForce Experience Backend.) -- C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
  202. O4 - HKCU\..\Run: [Steam] . (.Valve Corporation - Steam Client Bootstrapper.) -- G:\Games\Steam\steam.exe
  203. O4 - HKCU\..\Run: [iCloudServices] . (.Apple Inc. - iCloud.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
  204. O4 - HKCU\..\Run: [ApplePhotoStreams] . (.Apple Inc. - Apple Photostreams Uploader Executable.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
  205. O4 - HKCU\..\Run: [AppleIEDAV] . (.Apple Inc. - Apple IE DAV.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\AppleIEDAV.exe
  206. O4 - HKCU\..\Run: [Amazon Cloud Player] . (...) -- C:\Users\Julien\AppData\Local\Amazon Cloud Player\Amazon Music Helper.exe
  207. O4 - HKLM\..\Wow6432Node\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
  208. O4 - HKLM\..\Wow6432Node\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files (x86)\Adobe\Reader 8.0\Reader\Reader_sl.exe
  209. O4 - HKLM\..\Wow6432Node\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files (x86)\QuickTime\QTTask.exe
  210. O4 - HKLM\..\Wow6432Node\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- F:\MP3\iTunesHelper.exe
  211. O4 - HKLM\..\Wow6432Node\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe =>.Oracle Corporation
  212. O4 - HKUS\.DEFAULT\..\Run: [EPLTarget\P0000000000000000] . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_IATILFE.exe =>.Epson Seiko Corporation
  213. O4 - HKUS\S-1-5-18\..\Run: [EPLTarget\P0000000000000000] . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_IATILFE.exe =>.Epson Seiko Corporation
  214. O4 - HKUS\S-1-5-21-821732946-3177181519-1896559056-1001\..\Run: [Steam] . (.Valve Corporation - Steam Client Bootstrapper.) -- G:\Games\Steam\steam.exe
  215. O4 - HKUS\S-1-5-21-821732946-3177181519-1896559056-1001\..\Run: [iCloudServices] . (.Apple Inc. - iCloud.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
  216. O4 - HKUS\S-1-5-21-821732946-3177181519-1896559056-1001\..\Run: [ApplePhotoStreams] . (.Apple Inc. - Apple Photostreams Uploader Executable.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
  217. O4 - HKUS\S-1-5-21-821732946-3177181519-1896559056-1001\..\Run: [AppleIEDAV] . (.Apple Inc. - Apple IE DAV.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\AppleIEDAV.exe
  218. O4 - HKUS\S-1-5-21-821732946-3177181519-1896559056-1001\..\Run: [Amazon Cloud Player] . (...) -- C:\Users\Julien\AppData\Local\Amazon Cloud Player\Amazon Music Helper.exe
  219. ~ Application: Scanned in 00mn 00s
  220.  
  221.  
  222.  
  223. ---\\ Modification Domaine/Adresses DNS (O17)
  224. O17 - HKLM\System\CCS\Services\Tcpip\..\{3BEAE838-40A9-44E4-9B62-90D60877C359}: DhcpNameServer = 192.168.1.1
  225. O17 - HKLM\System\CCS\Services\Tcpip\..\{A7B612BD-1CB3-45F2-87FD-F9A41E953077}: DhcpNameServer = 172.20.10.1
  226. O17 - HKLM\System\CS1\Services\Tcpip\..\{3BEAE838-40A9-44E4-9B62-90D60877C359}: DhcpNameServer = 192.168.1.1
  227. O17 - HKLM\System\CS1\Services\Tcpip\..\{A7B612BD-1CB3-45F2-87FD-F9A41E953077}: DhcpNameServer = 172.20.10.1
  228. O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
  229. ~ Domain: Scanned in 00mn 00s
  230.  
  231.  
  232.  
  233. ---\\ Protocole additionnel (O18)
  234. O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation
  235. O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation
  236. ~ Protocole Additionnel: Scanned in 00mn 00s
  237.  
  238.  
  239.  
  240. ---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
  241. O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\Windows\System32\igfxdev.dll
  242. ~ Winlogon: Scanned in 00mn 00s
  243.  
  244.  
  245.  
  246. ---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
  247. O20 - AppInit_DLLs: . (...) - C:\Program Files (x86)\NVIDIA~1\3DVISI~1\NVSTIN~1.dll (.not file.)
  248. ~ AppInit DLL: Scanned in 00mn 00s
  249.  
  250.  
  251.  
  252. ---\\ Tâches planifiées en automatique (O39)
  253. [MD5.00000000000000000000000000000000] [APT] [{569405EB-E2C1-41E9-B210-9FEF5919169B}] (...) -- E:\Setup.exe (.not file.) [0]
  254. O39 - APT: - (..) -- C:\Windows\System32\Tasks\Adobe Flash Player Updater [1002]
  255. O39 - APT: - (..) -- C:\Windows\Tasks\EPSON XP-312 313 315 Series Invitation {CA4CFDEB-C457-41BC-A428-FE530841DAB0}.job [743]
  256. O39 - APT: - (..) -- C:\Windows\System32\Tasks\EPSON XP-312 313 315 Series Invitation {CA4CFDEB-C457-41BC-A428-FE530841DAB0} [743]
  257. O39 - APT: - (..) -- C:\Windows\Tasks\EPSON XP-312 313 315 Series Update {CA4CFDEB-C457-41BC-A428-FE530841DAB0}.job [929]
  258. O39 - APT: - (..) -- C:\Windows\System32\Tasks\EPSON XP-312 313 315 Series Update {CA4CFDEB-C457-41BC-A428-FE530841DAB0} [929]
  259. O39 - APT: - (..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore [1074]
  260. O39 - APT: - (..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA [1078]
  261. ~ Scheduled Task: 17 Legitimates Filtered in 00mn 01s
  262.  
  263.  
  264.  
  265. ---\\ Logiciels installés (O42)
  266. O42 - Logiciel: MURDERED: SOUL SUSPECT™ - (.Airtight Games.) [HKLM][64Bits] -- Steam App 233290
  267. O42 - Logiciel: Rust - (.Facepunch Studios.) [HKLM][64Bits] -- Steam App 252490
  268. ~ Logic: 28 Legitimates Filtered in 00mn 00s
  269.  
  270.  
  271.  
  272. ---\\ HKCU & HKLM Software Keys
  273. [HKCU\Software\GUPPY]
  274. [HKCU\Software\ImageResizer]
  275. ~ Key Software: 348 Legitimates Filtered in 00mn 00s
  276.  
  277.  
  278.  
  279. ---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
  280. O43 - CFD: 11/11/2013 - 07:47:42 - [] ----D C:\Program Files (x86)\MyDrive Connect
  281. O43 - CFD: 20/06/2014 - 15:09:57 - [] ----D C:\ProgramData\AppSnow
  282. O43 - CFD: 20/06/2014 - 15:11:49 - [] ----D C:\ProgramData\InstallMate =>PUP.Tarma
  283. O43 - CFD: 24/01/2013 - 02:00:30 - [] ----D C:\Users\Julien\AppData\Roaming\wam.04351C371E530C3762CBA45FA283ED972DCDEFB6.1
  284. ~ Program Folder: 186 Legitimates Filtered in 00mn 00s
  285.  
  286.  
  287.  
  288. ---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
  289. O44 - LFC:[MD5.4FE8F1C6DFDD1530AEB87661017B852B] - 11/08/2014 - 16:15:16 ---A- . (...) -- C:\DelFix.txt [786]
  290. ~ Files: 24 Legitimates Filtered in 00mn 01s
  291.  
  292.  
  293.  
  294. ---\\ Enumération des clés de registre PoliciesSystem (MWPS) (O55)
  295. O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=0
  296. O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
  297. O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
  298. O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=0
  299. ~ MWPS: 21 Legitimates Filtered in 00mn 00s
  300.  
  301.  
  302.  
  303. ---\\ Enumération des clés de registre PoliciesExplorer (MWPE) (O56)
  304. O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1
  305. ~ MWPE Keys: 3 Legitimates Filtered in 00mn 00s
  306.  
  307.  
  308.  
  309. ---\\ Liste des pilotes du système (SDL) (O58)
  310. O58 - SDL:23/05/2013 - 17:50:05 ---A- . (...) -- C:\Windows\System32\Drivers\atksgt.sys [311968]
  311. O58 - SDL:13/08/2013 - 00:25:46 ---A- . (.Windows (R) Win 7 DDK provider - BCM Function 2 Device Driver.) -- C:\Windows\System32\Drivers\bcmfn2.sys [17624]
  312. O58 - SDL:23/05/2013 - 17:49:25 ---A- . (...) -- C:\Windows\System32\Drivers\lirsgt.sys [43168]
  313. O58 - SDL:22/08/2013 - 13:43:32 ---A- . (.Promise Technology, Inc. - Promise SuperTrak EX Series Driver for Windows x64.) -- C:\Windows\System32\Drivers\stexstor.sys [31072]
  314. O58 - SDL:13/12/2012 - 13:50:36 ---A- . (.Apple, Inc. - Apple Mobile Device USB Driver.) -- C:\Windows\System32\Drivers\usbaapl64.sys [54784]
  315. ~ Drivers: 53 Legitimates Filtered in 00mn 00s
  316.  
  317.  
  318.  
  319. ---\\ Liste des outils de désinfection (LATC) (O63)
  320. O63 - Logiciel: ZHPDiag 2014 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 =>.Nicolas Coolman
  321. ~ ADS: Scanned in 00mn 00s
  322.  
  323.  
  324.  
  325. ---\\ Associations Shell Spawning (O67)
  326. O67 - Shell Spawning: <.html> <ChromeHTML>[HKCU\..\open\Command] (.Not Key.)
  327. ~ FASS Keys: 11 Legitimates Filtered in 00mn 00s
  328.  
  329.  
  330.  
  331. ---\\ Menu de démarrage Internet (SMI) (O68)
  332. O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  333. O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
  334. ~ Keys: Scanned in 00mn 00s
  335.  
  336.  
  337.  
  338. ---\\ Recherche d'infection sur les navigateurs internet (SBI) (O69)
  339. O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - http://www.bing.com
  340. O69 - SBI: SearchScopes [HKCU] {61B268B3-B8B7-421F-8A12-EED6FF688FF7} - (Web Search) - http://search.conduit.com
  341. ~ Keys: Scanned in 00mn 00s
  342.  
  343.  
  344.  
  345. ---\\ Recherche particulière à la racine du système (SPRF) (O84)
  346. [MD5.9C55A0782FE9AAABEF5347C31AF78760] [SPRF][23/07/2014] (.Pas de propriétaire - Virtual Personality Setup.) -- C:\Users\Julien\Desktop\vpersonality.exe [1721852]
  347. ~ Files: 4 Legitimates Filtered in 00mn 00s
  348.  
  349.  
  350.  
  351. ---\\ Liste des exceptions du parefeu (FirewallRules) (O87)
  352. O87 - FAEL: "{7C8172E4-6736-4277-B8AD-022AB4984974}" | In - Public - P6 - TRUE | .(.Azureus Software, Inc - Vuze Launcher.) -- C:\Program Files\Vuze\Azureus.exe =>P2P.Azureus
  353. O87 - FAEL: "{F07EFB2F-9A40-4E90-BEB6-62565BADD93B}" | In - Public - P17 - TRUE | .(.Azureus Software, Inc - Vuze Launcher.) -- C:\Program Files\Vuze\Azureus.exe =>P2P.Azureus
  354. O87 - FAEL: "{4C79AB32-1159-4354-84DB-279A6F929519}" | In - Private - P6 - TRUE | .(.Azureus Software, Inc - Vuze Launcher.) -- C:\Program Files\Vuze\Azureus.exe =>P2P.Azureus
  355. O87 - FAEL: "{17C36957-C98D-4EDF-8259-1EE194DF21B4}" | In - Private - P17 - TRUE | .(.Azureus Software, Inc - Vuze Launcher.) -- C:\Program Files\Vuze\Azureus.exe =>P2P.Azureus
  356. ~ Firewall: 4 Legitimates Filtered in 00mn 02s
  357.  
  358.  
  359.  
  360. ---\\ Enumère les données de la clé NameSpace (MNS) (O92)
  361. O92 - MNS: - {1CF1260C-4DD0-4ebb-811F-33C572699FDE}
  362. O92 - MNS: - {374DE290-123F-4565-9164-39C4925E467B}
  363. O92 - MNS: - {3ADD1653-EB32-4cb0-BBD7-DFA0ABB5ACCA}
  364. O92 - MNS: - {A0953C92-50DC-43bf-BE83-3742FED03C9C}
  365. O92 - MNS: - {A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}
  366. O92 - MNS: - {B4BFCC3A-DB2C-424C-B029-7FE99A87C641}
  367. O92 - MNS: Photos iCloud - {F0D63F85-37EC-4097-B30D-61B4A8917118}
  368. ~ MNS: 7 Legitimates Filtered in 00mn 00s
  369.  
  370.  
  371.  
  372. ---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)
  373. SS - | Demand 15/07/2014 262320 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
  374. SS - | Demand 03/10/2013 279000 | (cphs) . (.Intel Corporation.) - C:\Windows\SysWow64\IntelCpHeciSvc.exe
  375. SS - | Auto 11/11/2012 116648 | (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
  376. SS - | Demand 11/11/2012 116648 | (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
  377. SS - | Demand 14/11/2005 69632 | (IDriverT) . (.Macrovision Corporation.) - C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
  378. SS - | Demand 17/04/2014 1716264 | (PDF Architect 2) . (.pdfforge GmbH.) - C:\Program Files (x86)\PDF Architect 2\ws.exe
  379. SS - | Demand 17/04/2014 861736 | (pdfforge CrashHandler) . (.pdfforge GmbH.) - C:\Program Files (x86)\PDF Architect 2\crash-handler-ws.exe
  380. SS - | Auto 23/10/2013 172192 | (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe
  381. SS - | Demand 29/05/2014 543424 | (Steam Client Service) . (.Valve Corporation.) - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
  382. SS - | Demand 10/07/1658 0 | (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe =>.Microsoft Corporation
  383. SS - | Demand 22/08/2013 37768 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
  384. SR - | Auto 12/06/2014 43336 | (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
  385. SR - | Auto 30/08/2011 462184 | (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe
  386. SR - | Auto 31/08/2013 275696 | (NIS) . (.Symantec Corporation.) - C:\Program Files (x86)\Norton Internet Security\Engine\21.0.1.3\NIS.exe
  387. SR - | Auto 25/07/2014 1720608 | (NvNetworkService) . (.NVIDIA Corporation.) - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
  388. SR - | Auto 25/07/2014 18956064 | (NvStreamSvc) . (.NVIDIA Corporation.) - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
  389. SR - | Auto 02/07/2014 935368 | (nvsvc) . (.NVIDIA Corporation.) - C:\WINDOWS\system32\nvvsvc.exe
  390. SR - | Auto 02/07/2014 411936 | (Stereo Service) . (.NVIDIA Corporation.) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
  391. SR - | Auto 05/06/2014 93040 | (TomTomHOMEService) . (.TomTom.) - C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe
  392. SR - | Demand 10/07/1658 0 | (WdNisSvc) . (...) - C:\Program Files (x86)\Windows Defender\NisSrv.exe
  393. SR - | Demand 10/07/1658 0 | (WinDefend) . (...) - C:\Program Files (x86)\Windows Defender\MsMpEng.exe
  394. ~ Services: Scanned in 00mn 05s
  395.  
  396.  
  397.  
  398. ---\\ Scan Additionnel (O88)
  399. Database Version : 13026 - (13/08/2014)
  400. Clés trouvées (Keys found) : 0
  401. Valeurs trouvées (Values found) : 3
  402. Dossiers trouvés (Folders found) : 1
  403. Fichiers trouvés (Files found) : 0
  404.  
  405. C:\ProgramData\InstallMate =>PUP.Tarma^
  406. ~ Additionnel Scan: 228949 Items scanned in 00mn 09s
  407.  
  408.  
  409.  
  410. ---\\ Informations complémentaires sur les modules
  411. ~ http://nicolascoolman.fr/g2-google-chrome-extensions/ =>.Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
  412. ~ http://nicolascoolman.fr/r5-internet-explorer-proxy-management-iepm/ =>.Internet Explorer, Proxy Management (R5)
  413. ~ http://nicolascoolman.fr/o4-applications-demarrees-par-le-registre/ =>.Applications lancées au démarrage du système (O4)
  414. ~ AMI: 3 Legitimates Filtered in 00mn 00s
  415.  
  416.  
  417.  
  418. ---\\ Récapitulatif des détections trouvées sur votre station
  419. http://nicolascoolman.fr/pup-tarma =>PUP.Tarma
  420. ~ MSI: 1 link(s) detected in 00mn 00s
  421.  
  422.  
  423.  
  424. ~ 741 Legitimates filtered by white list
  425. End of the scan (424 lines in 00mn 36s)(0)
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!