API tools faq
paste
Guest User

Untitled

a guest
Aug 11th, 2013
305
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 20.48 KB | None | 0 0
raw download clone embed print report
  1. Rapport de ZHPDiag v2013.8.10.15 par Nicolas Coolman, Update du 2013-08-10
  2. Run by nathaliebourget at 2013-08-11 18:42:01
  3. WebSite: http://nicolascoolman.webs.com
  4. State : Version à jour.
  5. WhiteList : Enable
  6. High Elevated Privileges : OK
  7. UAC : Activate by user
  8.  
  9.  
  10. ---\\ Web Browser
  11. MSIE: Internet Explorer v10.0.9200.16635
  12. MFIE: Mozilla Firefox 19.0.2 (Defaut)
  13. GCIE: Google Chrome v28.0.1500.95
  14.  
  15. ---\\ Windows Product Information
  16. ~ Langage: Français
  17. Windows 8 Business Edition, 64-bit (Build 9200)
  18. Windows Server License Manager Script : OK
  19. ~ ion : Windows(R) Operating System, RETAIL channel
  20. Windows ID Activation : OK
  21. ~ Windows Partial Key : XWXT7
  22. Windows License : OK
  23. ~ Windows Remaining Initializations Number : 1000
  24. Software Protection Service (Protection logicielle) : OK
  25. Windows Automatic Updates : OK
  26. Windows Activation Technologies : OK
  27.  
  28. ---\\ System Protection
  29. Windows Defender W8
  30.  
  31. ---\\ System Optimizer
  32. CCleaner v4.04 =>Piriform Ltd
  33.  
  34. ---\\ Peer To Peer (P2P)
  35.  
  36. ---\\ Software Update
  37. Adobe Flash Player 11 Plugin
  38.  
  39. ---\\ System Information
  40. ~ Processor: Intel64 Family 6 Model 58 Stepping 9, GenuineIntel
  41. ~ Operating System: 64 Bits
  42. Boot mode: Normal (Normal boot)
  43. Total RAM: 4095 MB (77% free)
  44. System Restore: Activé (Enable)
  45. System drive C: has 40 GB (63%) free of 64 GB
  46.  
  47. ---\\ Logged in mode
  48. ~ Computer Name: NATHALIEBOU0812
  49. ~ User Name: nathaliebourget
  50. ~ All Users Names: nathaliebourget, Administrateur,
  51. ~ Unselected Option: O45,O61,O62,O65,O66,O80,O82,O89
  52. Logged in as Administrator
  53.  
  54. ---\\ Environnement Variables
  55. ~ System Unit : C:\
  56. ~ %AppData% : C:\Users\nathaliebourget\AppData\Roaming\
  57. ~ %Desktop% : \\psf\Home\Desktop\
  58. ~ %Favorites% : C:\Users\nathaliebourget\Favorites\
  59. ~ %LocalAppData% : C:\Users\nathaliebourget\AppData\Local\
  60. ~ %StartMenu% : C:\Users\nathaliebourget\AppData\Roaming\Microsoft\Windows\Start Menu\
  61. ~ %Windir% : C:\Windows\
  62. ~ %System% : C:\Windows\System32\
  63.  
  64. ---\\ DOS/Devices
  65. A:\ Floppy drive, Flash card reader, USB Key (Free 0 Go of 0 Go)
  66. C:\ Hard drive, Flash drive, Thumb drive (Free 40 Go of 64 Go)
  67. D:\ CD-ROM drive (Not Inserted)
  68. E:\ CD-ROM drive (Not Inserted)
  69.  
  70.  
  71.  
  72. ---\\ Security Center & Tools Informations
  73. [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
  74. ~ Security Center: 34 Legitimates Filtered in 00mn 00s
  75.  
  76.  
  77.  
  78. ---\\ Recherche particulière de fichiers génériques
  79. [MD5.0E8E6463F81C80AFBED533E0F1F8895D] - (.Microsoft Corporation - Explorateur Windows.) (.2013-06-01 - 06:34:21.) -- C:\Windows\Explorer.exe [2391280]
  80. [MD5.FE9AB232B56A12224E8A3F3F9878C9A3] - (.Microsoft Corporation - Application de démarrage de Windows.) (.2012-07-25 - 22:08:50.) -- C:\Windows\System32\Wininit.exe [132608]
  81. [MD5.FAF6EC2460AD5FBBD38D8E1AE28B0D77] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.2013-06-11 - 18:26:20.) -- C:\Windows\System32\wininet.dll [2241024]
  82. [MD5.BCF2036A0DD579E47C008C133550283E] - (.Microsoft Corporation - Application d’ouverture de session Windows.) (.2012-10-11 - 00:46:58.) -- C:\Windows\System32\Winlogon.exe [517120]
  83. [MD5.9448F5740A037EC0C18F0E9177232DD0] - (.Microsoft Corporation - Bibliothèque de licences.) (.2012-07-25 - 22:07:20.) -- C:\Windows\System32\sppcomapi.dll [273408]
  84. [MD5.36D6A3201721558A8AFBCC09C2DA4C2C] - (.Microsoft Corporation - Pilote de fonction connexe pour WinSock.) (.2012-11-05 - 22:53:44.) -- C:\Windows\system32\Drivers\AFD.sys [560640]
  85. [MD5.A721FF570C2387E383BDDEA9632863C9] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.2012-07-26 - 00:00:48.) -- C:\Windows\system32\Drivers\atapi.sys [25840]
  86. [MD5.990B1BABE6E81FB18E65A87EBEFB1772] - (.Microsoft Corporation - CD-ROM File System Driver.) (.2012-07-25 - 21:30:10.) -- C:\Windows\system32\Drivers\Cdfs.sys [108544]
  87. [MD5.339BFF85D788268752DA8C9644B188EE] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.2012-07-25 - 21:26:36.) -- C:\Windows\system32\Drivers\Cdrom.sys [174080]
  88. [MD5.09D9EB9E7898F8E6561473A20CC808B9] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.2012-07-25 - 21:26:53.) -- C:\Windows\system32\Drivers\DfsC.sys [118784]
  89. [MD5.7D87B5B6C7188D553E11B59DC7F0B111] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.2012-09-20 - 01:08:44.) -- C:\Windows\system32\Drivers\HDAudBus.sys [71168]
  90. [MD5.C9E9CBF73AFFBFE3E801EFB516787BA3] - (.Microsoft Corporation - Pilote de port i8042.) (.2012-07-25 - 21:28:51.) -- C:\Windows\system32\Drivers\i8042prt.sys [112640]
  91. [MD5.3969B9C218DD3FAA9F4ED2FFC3651C02] - (.Microsoft Corporation - IP Network Address Translator.) (.2012-07-25 - 21:23:01.) -- C:\Windows\system32\Drivers\IpNat.sys [145920]
  92. [MD5.93179D48066918323628CB016D8C94DC] - (.Microsoft Corporation - Minirdr SMB Windows NT.) (.2013-02-05 - 17:29:09.) -- C:\Windows\system32\Drivers\MRxSmb.sys [370688]
  93. [MD5.7CEC25C682D319D484630B3952C31A11] - (.Microsoft Corporation - MBT Transport driver.) (.2012-07-25 - 21:24:28.) -- C:\Windows\system32\Drivers\netBT.sys [331776]
  94. [MD5.76929F4A69E425911A63B407E26C2589] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.2013-02-02 - 05:54:54.) -- C:\Windows\system32\Drivers\ntfs.sys [1933544]
  95. [MD5.4563DAF8C6A740AD7F501E219BD10766] - (.Microsoft Corporation - Pilote de port parallèle.) (.2012-07-25 - 21:29:53.) -- C:\Windows\system32\Drivers\Parport.sys [105984]
  96. [MD5.A14D625C5AEE5FFE0F47D1A1D419FAAE] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.2012-07-25 - 21:23:17.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [124928]
  97. [MD5.B2A3AD74FF2E2FFA73AF2567108231B3] - (.Microsoft Corporation - Redirecteur de périphérique de Microsoft RDP.) (.2012-07-25 - 21:25:18.) -- C:\Windows\system32\Drivers\rdpdr.sys [179712]
  98. [MD5.73DC722CE5DF26D7638CE2446F2655C7] - (.Microsoft Corporation - TDI Translation Driver.) (.2012-07-26 - 00:26:47.) -- C:\Windows\system32\Drivers\tdx.sys [117248]
  99. [MD5.78A5BBA3819FFFC62FFEC3E2220D102D] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.2013-06-01 - 06:26:33.) -- C:\Windows\system32\Drivers\volsnap.sys [327936]
  100. ~ Generic Processes: Scanned in 00mn 00s
  101.  
  102.  
  103.  
  104. ---\\ Etat des fichiers cachés (Caché/Total)
  105. ~ Mes images (My Pictures) : 4/3837
  106. ~ Mes musiques (My Musics) : 3/52
  107. ~ Mes Videos (My Videos) : 2/3
  108. ~ Mes Favoris (My Favorites) : 1/3
  109. ~ Mes Documents (My Documents) : 3/15786
  110. ~ Mon Bureau (My Desktop) : 5/262677
  111. ~ Menu demarrer (Programs) : 1/25
  112. ~ Hidden Files: Scanned in 02mn 14s
  113.  
  114.  
  115.  
  116. ---\\ Processus lancés
  117. [MD5.D5192EC43485B23344F553FD04097593] - (...) -- C:\Program Files (x86)\Adobe Media Player\Adobe Media Player.exe [308224] [PID.3724]
  118. [MD5.72F9DA60AD131D4A74D17C4D62B75B24] - (.Sage - Simply Accounting Connection Manager.) -- C:\Program Files (x86)\winsim\ConnectionManager\Simply.SystemTrayIcon.exe [91432] [PID.3736]
  119. [MD5.D8DBE084F97536D7FDE2EE9B4574FB23] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [7691264] [PID.4064]
  120. [MD5.BF2F2717C13A4BD4FD73F2788534E86B] - (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe [917400] [PID.4000]
  121. [MD5.AA6844A5127ED4B20DF6D313467B929D] - (.Mozilla Corporation - Plugin Container for Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe [17304] [PID.1564]
  122. [MD5.D8425B8D6DC2AA8D871363B0775BCF18] - (.Adobe Systems, Inc. - Adobe Flash Player 11.8 r800.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_94.exe [1861512] [PID.1160]
  123. ~ Processes Running: Scanned in 00mn 00s
  124.  
  125.  
  126.  
  127. ---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
  128. C:\Users\nathaliebourget\AppData\Local\Google\Chrome\User Data\Default\Preferences
  129. ~ Google Browser: 12 Legitimates Filtered in 00mn 03s
  130.  
  131.  
  132.  
  133. ---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
  134. C:\Users\nathaliebourget\AppData\Roaming\Mozilla\Firefox\Profiles\4leanve4.default\prefs.js
  135. ~ Firefox Browser: 9 Legitimates Filtered in 00mn 00s
  136.  
  137.  
  138.  
  139. ---\\ Internet Explorer, Proxy Management (R5)
  140. R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
  141. R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
  142. R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
  143. R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
  144. R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
  145. ~ Proxy management: Scanned in 00mn 00s
  146.  
  147.  
  148.  
  149. ---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
  150. F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
  151. F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
  152. F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
  153. ~ Keys: Scanned in 00mn 00s
  154.  
  155.  
  156.  
  157. ---\\ Redirection du fichier Hosts (O1)
  158. O1 - Hosts: 0.0.0.0 .psf
  159. O1 - Hosts: 0.0.0.0 psf
  160. ~ Hosts File: Scanned in 00mn 00s
  161. ~ Nombre de lignes (Lines number): 23
  162.  
  163.  
  164.  
  165. ---\\ Internet Explorer Toolbars (O3)
  166. O3 - Toolbar: Google Toolbar [64Bits] - [HKLM]{2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll =>Toolbar.Google
  167. ~ Toolbar: Scanned in 00mn 00s
  168.  
  169.  
  170.  
  171. ---\\ Applications démarrées par registre & par dossier (O4)
  172. O4 - HKCU\..\Run: [DAEMON Tools Pro Agent] . (.DT Soft Ltd - DAEMON Tools Pro Agent.) -- C:\Program Files (x86)\DAEMON Tools Pro\DTAgent.exe
  173. O4 - HKLM\..\Wow6432Node\Run: [ConnectionManager] . (.Sage - Simply Accounting Connection Manager.) -- C:\Program Files (x86)\Winsim\ConnectionManager\Simply.SystemTrayIcon.exe
  174. O4 - HKLM\..\Wow6432Node\Run: [BCSSync] . (.Microsoft Corporation - Microsoft Office 2010 component.) -- C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe
  175. O4 - HKLM\..\Wow6432Node\Run: [Parallels Tools Center] . (.Parallels Holdings, Ltd. and its affiliates - Parallels Control Center.) -- C:\Program Files (x86)\Parallels\Parallels Tools\prl_cc.exe
  176. O4 - HKUS\S-1-5-21-3580279833-3359196341-829388425-1001\..\Run: [DAEMON Tools Pro Agent] . (.DT Soft Ltd - DAEMON Tools Pro Agent.) -- C:\Program Files (x86)\DAEMON Tools Pro\DTAgent.exe
  177. ~ Application: Scanned in 00mn 00s
  178.  
  179.  
  180.  
  181. ---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
  182. O9 - Extra button: &Envoyer à OneNote [64Bits] - {2670000A-7350-4f3c-8081-5663EE0C6C49} . (.Microsoft Corporation - Microsoft OneNote Internet Explorer Add-in.) -- C:\Program Files (x86)\MICROS~1\Office14\ONBttnIE.dll
  183. O9 - Extra button: Notes &liées OneNote [64Bits] - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} . (.Microsoft Corporation - Microsoft OneNote Internet Explorer Add-in.) -- C:\Program Files (x86)\MICROS~1\Office14\ONBTTN~1.dll
  184. ~ IE Extra Buttons: Scanned in 00mn 00s
  185.  
  186.  
  187.  
  188. ---\\ Modification Domaine/Adresses DNS (O17)
  189. O17 - HKLM\System\CCS\Services\Tcpip\..\{44CB0009-C6D4-42FB-804C-BA42D063D90A}: DhcpNameServer = 10.211.55.1
  190. O17 - HKLM\System\CCS\Services\Tcpip\..\{44CB0009-C6D4-42FB-804C-BA42D063D90A}: DhcpDomain = localdomain
  191. O17 - HKLM\System\CS1\Services\Tcpip\..\{44CB0009-C6D4-42FB-804C-BA42D063D90A}: DhcpNameServer = 10.211.55.1
  192. O17 - HKLM\System\CS1\Services\Tcpip\..\{44CB0009-C6D4-42FB-804C-BA42D063D90A}: DhcpDomain = localdomain
  193. O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.211.55.1
  194. ~ Domain: Scanned in 00mn 00s
  195.  
  196.  
  197.  
  198. ---\\ Protocole additionnel (O18)
  199. O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll
  200. O18 - Filter: text/xml [64Bits] - {807573E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.dll
  201. ~ Protocole Additionnel: Scanned in 00mn 00s
  202.  
  203.  
  204.  
  205. ---\\ Liste des services NT non Microsoft et non désactivés (O23)
  206. O23 - Service: Service Parallels Coherence (Parallels Coherence Service) . (.Parallels Holdings, Ltd. and its affiliates - Parallels Coherence service.) - C:\Program Files (x86)\Parallels\Parallels Tools\Services\coherence.exe
  207. O23 - Service: Outils Parallels (Parallels Tools Service) . (.Parallels Holdings, Ltd. and its affiliates - Parallels Tools Service.) - C:\Program Files (x86)\Parallels\Parallels Tools\Services\prl_tools_service.exe
  208. O23 - Service: PrlVssProvider (PrlVssProvider) . (. - .) - C:\Windows\system32\dllhost.exe /Processid:{20E643E2-0A62-41D6-8425-2B5C02AC1662}
  209. O23 - Service: (WinDefend) . (...) - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (.not file.)
  210. ~ Services: 6 Legitimates Filtered in 00mn 02s
  211.  
  212.  
  213.  
  214. ---\\ Pilotes lancés au démarrage (O41)
  215. O41 - Driver: (prl_boot) . (.Parallels Holdings, Ltd. and its affiliates - Parallels Boot Camp Helper.) - C:\Windows\System32\Drivers\prl_boot.sys
  216. O41 - Driver: oem9.inf (prl_fs) . (.Parallels Holdings, Ltd. and its affiliates - Parallels Shared Folders Network Provider.) - C:\Windows\System32\DRIVERS\prl_fs.sys
  217. ~ Drivers: 40 Legitimates Filtered in 00mn 00s
  218.  
  219.  
  220.  
  221. ---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
  222. O43 - CFD: 2013-03-03 - 00:41:20 - [0,002] ----D C:\Users\nathaliebourget\AppData\Roaming\Local Libraries
  223. ~ Program Folder: 107 Legitimates Filtered in 00mn 05s
  224.  
  225.  
  226.  
  227. ---\\ Opérations et fonctions au démarrage de Windows Explorer (O46)
  228. O46 - SEH:ShellExecuteHooks - Groove GFS Stub Execution Hook [64Bits] - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
  229. ~ ShellExecuteHooks: Scanned in 00mn 00s
  230.  
  231.  
  232.  
  233. ---\\ MountPoints2 Shell Key (O51)
  234. O51 - MPSK:{4f97dbc6-8823-11e2-be7e-001c42a8dbf7}\AutoRun\command. (...) -- E:\Formation.exe (.not file.)
  235. O51 - MPSK:{b26d46ea-84f0-11e2-be75-001c42a8dbf7}\AutoRun\command. (...) -- E:\SETUP.exe (.not file.)
  236. ~ Keys: Scanned in 00mn 00s
  237.  
  238.  
  239.  
  240. ---\\ Microsoft Windows Policies System (O55)
  241. O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
  242. O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
  243. O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=0
  244. ~ MWPS: 18 Legitimates Filtered in 00mn 00s
  245.  
  246.  
  247.  
  248. ---\\ Microsoft Windows Policies Explorer (O56)
  249. O56 - MWPE:[HKCU\...\policies\Explorer] - "NoSimpleNetIDList"=1
  250. O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1
  251. ~ MWPE Keys: 4 Legitimates Filtered in 00mn 00s
  252.  
  253.  
  254.  
  255. ---\\ Liste des Drivers Système (O58)
  256. O58 - SDL:[MD5.4F18D4C7EA14F11A7211F60D553C03DB] - 2012-07-26 - 00:00:49 ---A- . (.LSI - LSI 3ware SCSI Storport Driver.) -- C:\Windows\System32\Drivers\3ware.sys [106736]
  257. ~ Drivers: Scanned in 00mn 00s
  258.  
  259.  
  260.  
  261. ---\\ Liste des outils de nettoyage (O63)
  262. O63 - Logiciel: ZHPDiag 2013 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1
  263. ~ ADS: Scanned in 00mn 00s
  264.  
  265.  
  266.  
  267. ---\\ File Associations Shell Spawning (O67)
  268. O67 - Shell Spawning: <.html> <htmlfile>[HKCU\..\open\Command] (.Not Key.)
  269. ~ FASS Keys: 19 Legitimates Filtered in 00mn 00s
  270.  
  271.  
  272.  
  273. ---\\ Start Menu Internet (O68)
  274. O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
  275. O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  276. O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
  277. ~ Keys: Scanned in 00mn 00s
  278.  
  279.  
  280.  
  281. ---\\ Search Browser Infection (O69)
  282. O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - http://www.bing.com
  283. ~ Keys: Scanned in 00mn 00s
  284.  
  285.  
  286.  
  287. ---\\ Recherche des services démarrés par Svchost (O83)
  288. O83 - Search Svchost Services: prl_uprof (prl_uprof) . (.Parallels Holdings, Ltd. and its affiliates - Parallels User Profile Handler.) -- C:\Program Files (x86)\Parallels\Parallels Tools\prl_uprof.dll [85248]
  289. ~ Services: 36 Legitimates Filtered in 00mn 00s
  290.  
  291.  
  292.  
  293. ---\\ Firewall Active Exception List (FirewallRules) (O87)
  294. O87 - FAEL: "TCP Query User{6BE7A1C7-B662-40C2-8A24-39A3F0062E5A}C:\windows\kmsemulator.exe" | In - Public - P6 - TRUE | .(...) -- C:\windows\kmsemulator.exe
  295. O87 - FAEL: "UDP Query User{5585CA53-B829-43C9-844A-DD098FBF28F6}C:\windows\kmsemulator.exe" | In - Public - P17 - TRUE | .(...) -- C:\windows\kmsemulator.exe
  296. ~ Firewall: 207 Legitimates Filtered in 00mn 01s
  297.  
  298.  
  299.  
  300. ---\\ Product Upgrade Codes (O90)
  301. O90 - PUC: "108FD4CBB6999F44EB7EE7C0BBFB5802" . (.Parallels Tools.) -- C:\Windows\Installer\{BC4DF801-996B-44F9-BEE7-7E0CBBBF8520}\ARPPRODUCTICON.exe
  302. ~ Update Products: 28 Legitimates Filtered in 00mn 00s
  303.  
  304.  
  305.  
  306. ---\\ Windows Installer Scan (O93) (NTFS)
  307. [MD5.1E33A3A91E1B5E2C801FDBC527A114B3] [WIS][2007-08-23] (.MySQL AB - MySQL Connector/ODBC.) -- C:\Windows\Installer\109d16.msi [3718144]
  308. [MD5.EFDC909BA77E973E348B2FBE0466D162] [WIS][2013-04-03] (.Intuit Canada - ImpôtRapide 2012.) -- C:\Windows\Installer\1238d37.msi [59218944]
  309. [MD5.0235566E5134C79D5D40C1397220AC4E] [WIS][2013-07-09] (.Google Inc. - Google Toolbar for Internet Explorer.) -- C:\Windows\Installer\26e82.msi [28160] =>Toolbar.Google
  310. [MD5.389881328B455DD147DCC0093B2EB8A5] [WIS][2009-12-09] (.Sage Software - Simply Accounting by Sage 2010.) -- C:\Windows\Installer\32d181.msi [29696000]
  311. [MD5.2448D4AA6F6AD440CB94C18E05EA8BDA] [WIS][2013-07-16] (.Parallels Software International Inc - Parallels Tools Installation.) -- C:\Windows\Installer\c51c6.msi [20620288]
  312. ~ WIS: 28 Legitimates Filtered in 00mn 03s
  313.  
  314.  
  315.  
  316. ---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)
  317. SS - | Demand 2013-07-09 257416 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
  318. SR - | Auto 2009-08-23 29992 | (Gestionnaire de connexion de Simple Comptable) . (.Sage.) - C:\Program Files (x86)\Winsim\ConnectionManager\SimplyConnectionManager.exe
  319. SS - | Demand 2009-12-08 42280 | (Gestionnaire de transactions de Simple Comptable 2010 - CDN) . (.Sage.) - C:\Program Files (x86)\Winsim\TransactionManager2010 - CDN\Sage_SA.TransactionManager.exe
  320. SS - | Auto 2013-03-23 116648 | (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
  321. SS - | Demand 2013-03-23 116648 | (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
  322. SS - | Demand 2013-07-09 194032 | (gusvc) . (.Google.) - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
  323. SS - | Demand 2013-03-22 115608 | (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
  324. SR - | Auto 2013-07-17 37120 | (Parallels Coherence Service) . (.Parallels Holdings, Ltd. and its affiliates.) - C:\Program Files (x86)\Parallels\Parallels Tools\Services\coherence.exe
  325. SR - | Auto 2013-07-17 172288 | (Parallels Tools Service) . (.Parallels Holdings, Ltd. and its affiliates.) - C:\Program Files (x86)\Parallels\Parallels Tools\Services\prl_tools_service.exe
  326. SR - | Auto 2012-09-20 29696 | C:\Program Files (x86)\Parallels\Parallels Tools\prl_uprof.dll (prl_uprof) . (.Parallels Holdings, Ltd. and its affiliates.) - C:\Windows\System32\svchost.exe
  327. SR - | Auto 2013-02-26 3560800 | (TeamViewer8) . (.TeamViewer GmbH.) - C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
  328. SS - | Demand 0 | (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe
  329. SR - | Demand 2012-09-20 29696 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
  330. ~ Services: Scanned in 00mn 03s
  331.  
  332.  
  333.  
  334. ---\\ Scan Additionnel (O88)
  335. Database Version : v2.12849 - (2013-08-10)
  336. Clés trouvées (Keys found) : 1
  337. Valeurs trouvées (Values found) : 1
  338. Dossiers trouvés (Folders found) : 0
  339. Fichiers trouvés (Files found) : 3
  340.  
  341. [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Tuto The Gimp_is1] =>Spyware.AgenceExclusive
  342. [HKLM\Software\Microsoft\Internet Explorer\Toolbar]:{2318C2B1-4965-11d4-9B18-009027A5CD4F} =>Toolbar.Google^
  343. C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll =>Toolbar.Google^
  344. C:\Windows\Installer\26e82.msi =>Toolbar.Google^
  345. C:\Windows\KMSEmulator.exe =>Hijacker.Windows
  346. ~ Additionnel Scan: 162921 Items scanned in 00mn 11s
  347.  
  348.  
  349.  
  350. ---\\ Récapitulatif des détections trouvées sur votre station
  351. ~ http://nicolascoolman.webs.com/apps/blog/show/26627641-spyware-agenceexclusive =>Spyware.AgenceExclusive
  352. ~ MSI: 1 link(s) detected in 00mn 11s
  353.  
  354.  
  355.  
  356. ~ 708 Legitimates filtered by white list
  357. End of the scan (356 lines in 03mn 04s)(0)
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!