[NicolasCoolman]

Hello,Dans ce sujet seront recensées les récentes détections de ZHPDiag.Pincipales détections de ZHPDiagBy

[NicolasCoolman]

PUP.DownSave (2014/06/10)O2 - BHO: DoWnSSave [64Bits] - {393654C4-623D-A285-12C8-D4F1B9B73A1F} . (...) -- C:\ProgramData\DoWnSSave\1YAZUAQ.dllO42 - Logiciel: DoWnSSave - (.DoWNSaVe.) [HKLM][64Bits] -- {AF992111-52BE-832B-5882-8477E4A3C99A}O43 - CFD: 09/04/2014 - 20:36:09 - [0] ----D C:\Program Files (x86)\DoWnSSaveO43 - CFD: 14/04/2014 - 14:01:49 - [] ----D C:\ProgramData\DoWnSSave

[NicolasCoolman]

PUP.pup-genesis (2014/06/10)[MD5.AD16C7C0FFB1E92F4F9D1946E7DCF4D3] - (...) -- C:\Users\Coolman\AppData\Local\fscboev.exe[MD5.D01583DE6B9EF3DD4071ABB507CAD2C4] - (...) -- C:\Users\Coolman\AppData\Local\Genesis_06091920\Genesis_06091920.exe [2965504] [PID.2908]O4 - HKCU\..\Run: [genesis_06091920] . (...) -- c:\users\Coolman\appdata\local\genesis_06091920\genesis_06091920.exeO4 - HKCU\..\Run: [fscboev] . (...) -- c:\users\Coolman\appdata\local\fscboev.exeO4 - HKUS\S-1-5-21-1875706176-1249264971-4068429682-1001\..\Run: [fscboev] . (...) -- c:\users\Coolman\appdata\local\fscboev.exeO42 - Logiciel: Genesis - (...) [HKCU][64Bits] -- fscboev

[NicolasCoolman]

PUP.FBDownloader (2014/06/11)G0 - GCSP: Preference [User Data\Default][HomePage] http://native-search.comG1 - GCS: Preference [User Data\Default] http://native-search.comG2 - GCE: Preference [User Data\Default] [alldghmcoihalmikpdpfbhlfjpkehdpk] FB Downloader v.10.30.1.502, (Désactivé)

[NicolasCoolman]

PUP.ConstaSurf (2014/06/11)O43 - CFD: 10/06/2014 - 19:12:46 ----D- C:\Program Files (x86)\ConstaSurfHKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\updateConstaSurf_RASAPI32HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\updateConstaSurf_RASMANCSHKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\ConstaSurf_RASAPI32HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\ConstaSurf_RASMANCS

[NicolasCoolman]

PUP.Multiplug (2014/06/11)G2 - GCE: Preference [User Data\Default] [fmoocbhkmebigcnelphlbomcfpfaibkd] RoyalShopperrApp v.2.1 (Activé) G2 - GCE: Preference [User Data\Default] [ggbdajlhmfeaclccophpdcdlmmjhmeph] TXtMakaer v.1.6 (Activé)

[NicolasCoolman]

PUP.LavasoftSecureSearch (2014/06/11)G2 - GCE: Preference [User Data\Default] [jjjgoniibiigbcfeipbhfcconfgmgmkc] Lavasoft SecureSearch v.1.10 (Désactivé) R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://securedsearch2.lavasoft.com

[NicolasCoolman]

PUP.CrossRider (2014/06/12)G2 - GCE: Preference [User Data\Default] [dmgpbjjcdccinnndjdgmegndbmhbgglb] W3schools this! v.0.1 (Activé) [HKCR\CLSID\{22222222-2222-2222-2222-220522422253}] (CrossriderApp0054253.Sandbox) [HKLM\Software\Classes\CLSID\{22222222-2222-2222-2222-220522422253}]

[NicolasCoolman]

Toolbar.DeltaSearch (Hijacker) (2014/06/13)O4 - GS\QuickLaunch [windows]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe http://www.delta-homes.com O4 - GS\QuickLaunch [windows]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe http://www.delta-homes.com O4 - GS\TaskBar [windows]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe http://www.delta-homes.com O4 - GS\Program [windows]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe http://www.delta-homes.com O4 - GS\SystemTools [windows]: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe http://www.delta-homes.com O4 - GS\Desktop [windows]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe http://www.delta-homes.com

[NicolasCoolman]

PUP.Trolatunt (2014/06/14)O23 - Service: Trolatunt (Update trolatunt) . (...) - C:\Program Files\trolatunt\updatetrolatunt.exe O43 - CFD: 11/06/2014 - 20:15:18 - [] ----D- C:\Program Files\trolatunt