cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

~ ZHPDiag v2015.7.10.87 Par Nicolas Coolman (2015/07/10)
~ Démarré par said (Administrator) (2015/07/10 21:12:11)
~ Site: http://www.nicolascoolman.fr
~ Facebook: https://www.facebook.com/nicolascoolman1
~ Etat de la version: Version OK
~ Mode: Scanner
~ Rapport: C:\Users\Mohamed\Desktop\ZHPDiag.txt
~ Rapport: C:\Users\Mohamed\AppData\Roaming\ZHP\ZHPDiag.txt
~ UAC: Activate
~ Démarrage du système: Normal (Normal boot)
~ Windows 8.1, 32-bit (Build 9600)

---\\ Informations sur les produits Windows (3) - 14s
~ Windows Server License Manager Script : OK
~ Licence Script File Génération : OK
Windows Activation Technologies : OK

---\\ Logiciels de protection (1) - 0s
Kaspersky Internet Security v15.0.1.415

---\\ Informations sur le système (6) - 0s
~ Operating System: x86 Family 6 Model 37 Stepping 5, GenuineIntel
~ Operating System: 32-bit
~ Boot mode: Normal (Normal boot)
~ Total physical RAM (KB): 1891188
~ System Restore: Activé (Enable)
~ System drive C: has 150 GB free of 176 GB

---\\ Mode de connexion au système (3) - 0s
~ Computer Name: SAID
~ User Name: said
~ Logged in as Administrator

---\\ Enumération des unités disques (2) - 0s
~ Drive C: has 150 GB free of 176 GB (System)
~ Drive D: has 295 GB free of 299 GB

---\\ Recherche particulière de fichiers génériques (23) - 2s
[MD5.91E24273FCA076EA9E65DAFA98901225] - (.Microsoft Corporation - Explorateur Windows.) () -- C:\Windows\Explorer.exe [2207488]
[MD5.8BFE805555CDAF6387912A34D7978DAA] - (.Microsoft Corporation - Processus hôte Windows (Rundll32).) () -- C:\Windows\System32\rundll32.exe [51200]
[MD5.DC02677945BDABD6B0C6A29914AA21EF] - (.Microsoft Corporation - Application de démarrage de Windows.) () -- C:\Windows\System32\Wininit.exe [115712]
[MD5.E4EB138060BAE0DBAB1A3B71A3141FE7] - (.Microsoft Corporation - Extensions Internet pour Win32.) () -- C:\Windows\System32\wininet.dll [1950720]
[MD5.E36FB29A2158B7D5DCA0F4E08DE75442] - (.Microsoft Corporation - Application d’ouverture de session Windows.) () -- C:\Windows\System32\Winlogon.exe [465408]
[MD5.BFB9E1202225113991F981D29BFB9029] - (.Microsoft Corporation - Bibliothèque de licences.) () -- C:\Windows\System32\sppcomapi.dll [438272]
[MD5.E37F897ED7B5AFF79B1398258DB96BD9] - (.Microsoft Corporation - DLL client de l’API uilisateur de Windows m.) () -- C:\Windows\System32\fr-FR\user32.dll.mui [19456]
[MD5.D75FB05E8DBF21FA0EF313C7503243F1] - (.Microsoft Corporation - Pilote de fonction connexe pour WinSock.) () -- C:\Windows\System32\drivers\AFD.sys [461312]
[MD5.72FCAE2CE6DFEAB2AB072435017F3417] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) () -- C:\Windows\System32\drivers\atapi.sys [23392]
[MD5.CE232BB0965C0C0B786C3F976CCBFB7D] - (.Microsoft Corporation - CD-ROM File System Driver.) () -- C:\Windows\System32\drivers\Cdfs.sys [73728]
[MD5.E2FC132D48EA4E8B04432C33EFB77801] - (.Microsoft Corporation - SCSI CD-ROM Driver.) () -- C:\Windows\System32\drivers\Cdrom.sys [124928]
[MD5.55758EBBC45E1628161121D7CFEAD4A1] - (.Microsoft Corporation - DFS Namespace Client Driver.) () -- C:\Windows\System32\drivers\DfsC.sys [102400]
[MD5.7E0EDA9EE53E344D1604EB2A7E8DED47] - (.Microsoft Corporation - High Definition Audio Bus Driver.) () -- C:\Windows\System32\drivers\HDAudBus.sys [69632]
[MD5.5043E69532392A43549E5D41E22638AA] - (.Microsoft Corporation - Pilote de port i8042.) () -- C:\Windows\System32\drivers\i8042prt.sys [82944]
[MD5.FA6C94C754A566EA8A61D658932F32DE] - (.Microsoft Corporation - IP Network Address Translator.) () -- C:\Windows\System32\drivers\IpNat.sys [126976]
[MD5.6FFD467F3BF3E3044E9B212CCD488DE1] - (.Microsoft Corporation - Minirdr SMB Windows NT.) () -- C:\Windows\System32\drivers\MRxSmb.sys [330752]
[MD5.BC242922B0D08F61CF7C87FD08FAFA8B] - (.Microsoft Corporation - MBT Transport driver.) () -- C:\Windows\System32\drivers\netBT.sys [218624]
[MD5.C52E578E3F8182C2EE6AAF0AC2B61C9B] - (.Microsoft Corporation - Pilote du système de fichiers NT.) () -- C:\Windows\System32\drivers\ntfs.sys [1689408]
[MD5.4F30970F15ADCC382544B31D5D7E368E] - (.Microsoft Corporation - Pilote de port parallèle.) () -- C:\Windows\System32\drivers\Parport.sys [81408]
[MD5.C51AB62AB41A2E8560D12472B204CC00] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) () -- C:\Windows\System32\drivers\Rasl2tp.sys [81920]
[MD5.67E91843B0344411820A012063E876B2] - (.Microsoft Corporation - Redirecteur de périphérique de Microsoft RD.) () -- C:\Windows\System32\drivers\rdpdr.sys [143872]
[MD5.DB0C184142CF9FA1746F598A16EE92B2] - (.Microsoft Corporation - TDI Translation Driver.) () -- C:\Windows\System32\drivers\tdx.sys [87040]
[MD5.31A2AA48C1ECD390E2707E5C21B75DCE] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) () -- C:\Windows\System32\drivers\volsnap.sys [264512]

---\\ Processus lancés (5) - 0s
[MD5.AB1AF0BA03DCB6A879BC22F472EACEEA] - (.Kaspersky Lab ZAO - Kaspersky Anti-Virus.) -- C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 15.0.1\avp.exe [234520] [PID.1508]
[MD5.D1A8631ADA1E71178D3DBF5AA2BC1E85] - (.Foxit Software Inc. - Foxit Cloud Safe Update Service.) -- C:\Program Files\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe [244392] [PID.2680]
[MD5.3D2496BCA132B08D9B23856D65F30513] - (.Kaspersky Lab ZAO - Kaspersky Anti-Virus.) -- C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 15.0.1\avpui.exe [193128] [PID.4348]
[MD5.B83DB01D9E4BD53C9B65214806B54EB7] - (.Mindspark - Mindspark Toolbar Platform.) -- C:\Program Files\VideoDownloadConverter_4z\bar\1.bin\APPINTEGRATOR.EXE [225864] [PID.5856] =>PUP.Optional.VideoDownloadConverter
[MD5.278A1F51C56B06436C4227A85A0914ED] - (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\Windows\System32\spool\drivers\w32x86\3\E_FATIEDR.EXE [188928] [PID.2900]

---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2) (22) - 1s
G0 - GCSP: Preferences [User Data\Default][HomePage] "http://a.thanksearch.com/"
G0 - GCSP: Preferences [User Data\Default][HomePage] "http://adplus.goo.mx/"
G0 - GCSP: Preferences [User Data\Default][HomePage] "http://b.thanksearch.com/"
G0 - GCSP: Preferences [User Data\Default][HomePage] "http://bd.xingcloud.com/"
G0 - GCSP: Preferences [User Data\Default][HomePage] "http://d.thanksearch.com/"
G0 - GCSP: Preferences [User Data\Default][HomePage] "http://e.thanksearch.com/"
G0 - GCSP: Preferences [User Data\Default][HomePage] "http://f.thanksearch.com/"
G0 - GCSP: Preferences [User Data\Default][HomePage] "http://isearch.omiga-plus.com/" =>PUP.Optional.OmigaPlus
G0 - GCSP: Preferences [User Data\Default][HomePage] "http://odin.goo.mx/"
G0 - GCSP: Preferences [User Data\Default][HomePage] "http://xa.xingcloud.com/"
G0 - GCSP: Secure Preferences [User Data\Default][HomePage] "http://isearch.omiga-plus.com/?type=hp&ts=1423055377&from=cor&uid=HitachiXHDS721050DLE630_MS43325T028Z1G028Z1GX" =>PUP.Optional.OmigaPlus
G2 - GCE: Extension [User Data\Default] [aapocclcgogkmnckokdopfmhonfmgoek] Google Chrome manifest =>.Google Inc.
G2 - GCE: Extension [User Data\Default] [aohghmighlieiainnegkcijnfilokake] Google Chrome manifest =>.Google Inc.
G2 - GCE: Extension [User Data\Default] [apdfllckaahabafndbhieahigkjlhalf] Google Chrome manifest =>.Google Inc.
G2 - GCE: Extension [User Data\Default] [blpcfgokakmgnkcojhhkbfbldkacnbeo] Google Chrome manifest =>.Google Inc.
G2 - GCE: Extension [User Data\Default] [coobgpohoikkiipiblmjeljniedjpjpf] Google Chrome manifest =>.Google Inc.
G2 - GCE: Extension [User Data\Default] [dbhjdbfgekjfcfkkfjjmlmojhbllhbho] __MSG_ExtensionName__
G2 - GCE: Extension [User Data\Default] [felcaaldnbdncclmgdcncolpebgiejap] Google Chrome manifest =>.Google Inc.
G2 - GCE: Extension [User Data\Default] [fjbbjfdilbioabojmcplalojlmdngbjl] Google Chrome manifest =>.Google Inc.
G2 - GCE: Extension [User Data\Default] [lccekmodgklaepjeofjdjpbminllajkg] Chrome Hotword Shared Module
G2 - GCE: Extension [User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] Google Chrome manifest =>.Google Inc.
G2 - GCE: Extension [User Data\Default] [pjkljhegncpnkpknbcohdijeoejaedia] Google Chrome manifest =>.Google Inc.

---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3) (8) - 1s
P2 - FPN: [HKLM] [@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf] - (.Foxit Corporation.) -- C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll
P2 - FPN: [HKLM] [@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf] - (.Foxit Corporation.) -- C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll
P2 - FPN: [HKLM] [@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp] - (.Foxit Corporation.) -- C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll
P2 - FPN: [HKLM] [@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf] - (.Foxit Corporation.) -- C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll
P2 - FPN: [HKLM] [@kaspersky.com/content_blocker_6418E0D362104DADA084DC312DFA8ABC] - (.kaspersky.com.) -- C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 15.0.1\FFExt\content_blocker@kaspersky.com
P2 - FPN: [HKLM] [@kaspersky.com/online_banking_69A4E213815F42BD863D889007201D82] - (.kaspersky.com.) -- C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 15.0.1\FFExt\online_banking@kaspersky.com
P2 - FPN: [HKLM] [@kaspersky.com/virtual_keyboard_294FF26A1D5B455495946778FDE7CEDB] - (.kaspersky.com.) -- C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 15.0.1\FFExt\virtual_keyboard@kaspersky.com
P2 - FPN: [HKLM] [@videolan.org/vlc,version=2.1.3] - (.VideoLAN.) -- C:\Program Files\VideoLAN\VLC\npvlc.dll

---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4) (12) - 0s
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://home.tb.ask.com/ =>Toolbar.Ask
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://isearch.omiga-plus.com/ =>PUP.Optional.OmigaPlus
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://isearch.omiga-plus.com/ =>PUP.Optional.OmigaPlus
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://isearch.omiga-plus.com/ =>PUP.Optional.OmigaPlus
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://isearch.omiga-plus.com/ =>PUP.Optional.OmigaPlus
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://isearch.omiga-plus.com/ =>PUP.Optional.OmigaPlus
R3 - URLSearchHook: (no name) - {93a3111f-4f74-4ed8-895e-d9708497629e} Orphean
R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphean =>.Microsoft Internet Explorer
R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV9 = 1

---\\ Internet Explorer, Proxy Management (R5) (3) - 0s
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll

---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs (3) - 0s
F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe (.Microsoft Corporation.)
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe (.Microsoft Corporation.)
F2 - REG:system.ini: VMApplet=C:\Windows\system32\SystemPropertiesPerformance.exe (.Microsoft Corporation.)

---\\ Hosts file redirection (O1) (1) - 0s
~ Le fichier hôte est sain (The hosts file is clean) (21)

---\\ Browser Helper Object de navigateur (BHO) (O2) (9) - 0s
O2 - BHO: ContentBlockerBrowserHelperObject - {03C04F0A-E2A3-4F7F-BA30-BFA06FFD1358} . (.Kaspersky Lab ZAO - Cumulative module contains VK, CB and OB pl.) -- C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 15.0.1\IEExt\ie_plugin.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} . (.Copyright 2001 - AcroIEHelper Module.) -- C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: Toolbar BHO - {312f84fb-8970-4fd3-bddb-7012eac4afc9} . (.Mindspark - Mindspark Toolbar Platform.) -- C:\Program Files\VideoDownloadConverter_4z\bar\1.bin\4zbar.dll =>PUP.Optional.MindSpark
O2 - BHO: IETabPage Class - {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} . (.Thinknice Co. Limited - SupTab setup package.) -- C:\Program Files\XTab\SupTab.dll =>PUP.Optional.SupTab
O2 - BHO: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} . (.SEIKO EPSON CORPORATION / CyCom Technology Corp. - Epson Easy Photo Print (TBL).) -- C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll
O2 - BHO: VirtualKeyboardBrowserHelperObject - {B5D5BB14-C8E2-478D-9C97-574AC10AF9E8} . (.Kaspersky Lab ZAO - Cumulative module contains VK, CB and OB pl.) -- C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 15.0.1\IEExt\ie_plugin.dll
O2 - BHO: Search Assistant BHO - {c547c6c2-561b-4169-a2a5-20ba771ca93b} . (.Mindspark - Mindspark Toolbar Platform.) -- C:\Program Files\VideoDownloadConverter_4z\bar\1.bin\4zSrcAs.dll =>PUP.Optional.MindSpark
O2 - BHO: Safe Money Plugin - {E3D96E85-529D-4269-AC6A-97CF9E2221E3} . (.Kaspersky Lab ZAO - Cumulative module contains VK, CB and OB pl.) -- C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 15.0.1\IEExt\ie_plugin.dll
O2 - BHO: SmileysWeLoveToolbar - {E4EF8A64-0A30-48F5-B3FE-5FDA978DA775} . (...) -- C:\Program Files\Smileys We Love Toolbar for IE\adxloader.dll =>PUP.Optional.SmileyBar

---\\ Internet Explorer Toolbars (O3) (4) - 1s
O3 - Toolbar: 0x25645848B76B514F8DC638C88E3EBB58 - [HKCU]{48586425-6BB7-4F51-8DC6-38C88E3EBB58} . (.Mindspark - Mindspark Toolbar Platform.) -- C:\Program Files\VideoDownloadConverter_4z\bar\1.bin\4zbar.dll =>PUP.Optional.VideoDownloadConverter
O3 - Toolbar: EPTBL - [HKLM]{9421DD08-935F-4701-A9CA-22DF90AC4EA6} . (.SEIKO EPSON CORPORATION / CyCom Technology Corp. - Epson Easy Photo Print (TBL).) -- C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll
O3 - Toolbar: SmileysWeLoveToolbar.IEModule - [HKLM]{CF0F43AB-9C23-4D7B-8040-201B82844854} . (...) -- C:\Program Files\Smileys We Love Toolbar for IE\adxloader.dll =>PUP.Optional.SmileyBar
O3 - Toolbar: (no name) - [HKLM]{48586425-6bb7-4f51-8dc6-38c88e3ebb58} (Orphean) =>PUP.Optional.VideoDownloadConverter

---\\ Applications lancées au démarrage du sytème (O4) (10) - 0s
O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\Windows\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\Windows\System32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\Windows\System32\igfxpers.exe
O4 - HKLM\..\Run: [VideoDownloadConverter EPM Support] . (.Mindspark - Mindspark Toolbar Platform.) -- C:\Program Files\VideoDownloadConverter_4z\bar\1.bin\4zmedint.exe =>PUP.Optional.VideoDownloadConverter
O4 - HKLM\..\Run: [VideoDownloadConverter AppIntegrator 32-bit] . (.Mindspark - Mindspark Toolbar Platform.) -- C:\Program Files\VideoDownloadConverter_4z\bar\1.bin\AppIntegrator.exe =>PUP.Optional.VideoDownloadConverter
O4 - HKLM\..\Run: [VideoDownloadConverter Search Scope Monitor] C:\PROGRA~1\VIDEOD~2\bar\1.bin\4zsrchmn.exe (.not file.)
O4 - HKCU\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Users\Mohamed\AppData\Local\Google\Update\GoogleUpdate.exe
O4 - HKCU\..\Run: [EPSON Stylus TX106] . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\Windows\System32\spool\drivers\w32x86\3\E_FATIEDR.EXE
O4 - HKUS\S-1-5-21-3253961343-2581887846-1036671394-1001\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Users\Mohamed\AppData\Local\Google\Update\GoogleUpdate.exe
O4 - HKUS\S-1-5-21-3253961343-2581887846-1036671394-1001\..\Run: [EPSON Stylus TX106] . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\Windows\System32\spool\drivers\w32x86\3\E_FATIEDR.EXE

---\\ Raccourcis Global Startup (O4G) (10) - 4s
O4 - GS\Desktop [Administrateur]: MyPC Backup.lnk . (.MyPCBackup.com - MyPC Backup.) C:\Program Files\MyPC Backup\MyPC Backup.exe =>PUP.Optional.MyPCBackup
O4 - GS\Desktop [Administrateur]: Sync Folder.lnk . (.MyPCBackup.com - MyPC Backup.) C:\Program Files\MyPC Backup\MyPC Backup.exe =>PUP.Optional.MyPCBackup
O4 - GS\Startup [Administrateur]: MyPC Backup.lnk . (.MyPCBackup.com - MyPC Backup.) C:\Program Files\MyPC Backup\MyPC Backup.exe =>PUP.Optional.MyPCBackup
O4 - GS\Desktop [Invité]: MyPC Backup.lnk . (.MyPCBackup.com - MyPC Backup.) C:\Program Files\MyPC Backup\MyPC Backup.exe =>PUP.Optional.MyPCBackup
O4 - GS\Desktop [Invité]: Sync Folder.lnk . (.MyPCBackup.com - MyPC Backup.) C:\Program Files\MyPC Backup\MyPC Backup.exe =>PUP.Optional.MyPCBackup
O4 - GS\Startup [Invité]: MyPC Backup.lnk . (.MyPCBackup.com - MyPC Backup.) C:\Program Files\MyPC Backup\MyPC Backup.exe =>PUP.Optional.MyPCBackup
O4 - GS\Desktop [said]: MyPC Backup.lnk . (.MyPCBackup.com - MyPC Backup.) C:\Program Files\MyPC Backup\MyPC Backup.exe =>PUP.Optional.MyPCBackup
O4 - GS\Desktop [said]: Sync Folder.lnk . (.MyPCBackup.com - MyPC Backup.) C:\Program Files\MyPC Backup\MyPC Backup.exe =>PUP.Optional.MyPCBackup
O4 - GS\Startup [said]: MyPC Backup.lnk . (.MyPCBackup.com - MyPC Backup.) C:\Program Files\MyPC Backup\MyPC Backup.exe =>PUP.Optional.MyPCBackup
O4 - GS\CommonDesktop [Public]: FlvPlayer.lnk . (...) C:\Users\Mohamed\AppData\Roaming\FlvPlayer\FlvPlayerApp.exe =>PUP.Optional.FLVPlayer

---\\ Modification Domaine/Adresses DNS (O17) (2) - 0s
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1

---\\ Liste des services NT non Microsoft et non désactivés (O23) (3) - 1s
O23 - Service: Kaspersky Anti-Virus Service 15.0.1 (AVP15.0.1) . (.Kaspersky Lab ZAO - Kaspersky Anti-Virus.) - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 15.0.1\avp.exe
O23 - Service: Computer Backup (MyPC Backup) (BackupStack) . (.Just Develop It - Backup Stack.) - C:\Program Files\MyPC Backup\BackupStack.exe =>PUP.Optional.MyPCBackup
O23 - Service: Foxit Cloud Safe Update Service (FoxitCloudUpdateService) . (.Foxit Software Inc. - Foxit Cloud Safe Update Service.) - C:\Program Files\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe

---\\ Tâches planifiées en automatique (O39) (6) - 0s
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3253961343-2581887846-1036671394-1001Core.job [1038]
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3253961343-2581887846-1036671394-1001Core1d0242594357cdb.job [1038]
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3253961343-2581887846-1036671394-1001Core1d0417966138e69.job [1038]
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3253961343-2581887846-1036671394-1001Core1d08f32b8655e5.job [1038]
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\LaunchSignup [3992]
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1423055620 [3836]

---\\ Logiciels installés (O42) (20) - 2s
O42 - Logiciel: Adobe Acrobat 5.0 - (.Adobe Systems, Inc..) [HKLM] -- Adobe Acrobat 5.0
O42 - Logiciel: EPSON Scan - (...) [HKLM] -- EPSON Scanner
O42 - Logiciel: EPSON Stylus SX100_TX100 Manual - (...) [HKLM] -- EPSON Stylus SX100_TX100 User’s Guide
O42 - Logiciel: ÅÒÇáÉ ÊËÈíÊ ÇáØÇÈÚÉ EPSON TX106_TX109 Series - (.SEIKO EPSON Corporation.) [HKLM] -- EPSON TX106_TX109 Series
O42 - Logiciel: Foxit Reader - (.Foxit Software Inc..) [HKLM] -- Foxit Reader_is1
O42 - Logiciel: Kaspersky Internet Security - (.Kaspersky Lab.) [HKLM] -- InstallWIX_{8ED07EBD-22AD-415A-B71E-C1AD86862C2E}
O42 - Logiciel: MyPC Backup - (.JDi Backup Ltd.) [HKLM] -- MyPC Backup =>PUP.Optional.MyPCBackup
O42 - Logiciel: omiga-plus uninstall - (.omiga-plus.) [HKLM] -- omiga-plus uninstall =>PUP.Optional.OmigaPlus
O42 - Logiciel: Opera Stable 30.0.1835.88 - (.Opera Software.) [HKLM] -- Opera 30.0.1835.88
O42 - Logiciel: VideoDownloadConverter Internet Explorer Toolbar - (.Mindspark Interactive Network.) [HKLM] -- VideoDownloadConverter_4zbar Uninstall Internet Explorer =>PUP.Optional.MindSpark
O42 - Logiciel: VLC media player 2.1.3 - (.VideoLAN.) [HKLM] -- VLC media player
O42 - Logiciel: WinRAR archiver - (...) [HKLM] -- WinRAR archiver
O42 - Logiciel: Foxit Cloud - (.Foxit Software Inc..) [HKLM] -- {41914D8B-9D6E-4764-A1F9-BC43FB6782C1}_is1
O42 - Logiciel: Smileys We Love Toolbar for IE - (.SqueekyChocolate, LLC.) [HKLM] -- {5D57E386-D294-41BA-9146-FADE0C76EB2A}
O42 - Logiciel: Kaspersky Internet Security - (.Kaspersky Lab.) [HKLM] -- {8ED07EBD-22AD-415A-B71E-C1AD86862C2E}
O42 - Logiciel: ABBYY FineReader 6.0 Sprint - (.ABBYY Software House.) [HKLM] -- {ACF60000-22B9-4CE9-98D6-2CCF359BAC07}
O42 - Logiciel: Epson Easy Photo Print 2 - (.SEIKO EPSON CORPORATION.) [HKLM] -- {DEDB47A3-C988-4A43-A645-E2CEA571E680}
O42 - Logiciel: Realtek AC'97 Audio - (...) [HKLM] -- {FB08F381-6533-4108-B7DD-039E11FBC27E}
O42 - Logiciel: FlvPlayer - (...) [HKCU] -- FlvPlayer =>PUP.Optional.FLVPlayer
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKCU] -- Google Chrome

---\\ HKCU & HKLM Software Keys (52) - 2s
HKLM\SOFTWARE\ABBYY
HKLM\SOFTWARE\Adobe
HKLM\SOFTWARE\EPSON
HKLM\SOFTWARE\FlvPlayer =>PUP.Optional.FLVPlayer
HKLM\SOFTWARE\Foxit Software
HKLM\SOFTWARE\Google
HKLM\SOFTWARE\IHProtect =>PUP.Optional.AgentODR
HKLM\SOFTWARE\Intel
HKLM\SOFTWARE\Internet Download Manager
HKLM\SOFTWARE\KasperskyLab
HKLM\SOFTWARE\Macromedia
HKLM\SOFTWARE\Mozilla
HKLM\SOFTWARE\MozillaPlugins
HKLM\SOFTWARE\ODBC
HKLM\SOFTWARE\omiga-plusSoftware =>PUP.Optional.OmigaPlus
HKLM\SOFTWARE\Opera Software
HKLM\SOFTWARE\PJ
HKLM\SOFTWARE\Realtek Semiconductor Corp.
HKLM\SOFTWARE\RegisteredApplications
HKLM\SOFTWARE\SupDp =>PUP.Optional.SupTab
HKLM\SOFTWARE\supTab =>PUP.Optional.SupTab
HKLM\SOFTWARE\VideoDownloadConverter_4z =>PUP.Optional.MindSpark
HKLM\SOFTWARE\VideoLAN
HKLM\SOFTWARE\Volatile
HKLM\SOFTWARE\WinPj
HKCU\SOFTWARE\ABBYY
HKCU\SOFTWARE\Adobe
HKCU\SOFTWARE\AppDataLow
HKCU\SOFTWARE\DownloadManager
HKCU\SOFTWARE\EPSON
HKCU\SOFTWARE\Foxit Software
HKCU\SOFTWARE\Google
HKCU\SOFTWARE\InstallCore =>PUP.Optional.InstallCore
HKCU\SOFTWARE\Intel
HKCU\SOFTWARE\KasperskyLab
HKCU\SOFTWARE\Macromedia
HKCU\SOFTWARE\Mine
HKCU\SOFTWARE\Mozilla
HKCU\SOFTWARE\MozillaPlugins
HKCU\SOFTWARE\Netscape
HKCU\SOFTWARE\ODBC
HKCU\SOFTWARE\Opera Software
HKCU\SOFTWARE\Popajar =>PUP.Optional.Conduit
HKCU\SOFTWARE\RegisteredApplications
HKCU\SOFTWARE\SEIKO EPSON
HKCU\SOFTWARE\SmileysWeLove
HKCU\SOFTWARE\VideoDownloadConverter_4z =>PUP.Optional.MindSpark
HKCU\SOFTWARE\WinRAR
HKCU\SOFTWARE\WinRAR SFX
HKCU\SOFTWARE\ZebHelpProcess Helper
HKCU\SOFTWARE\AppDataLow\Software
HKCU\SOFTWARE\AppDataLow\Software\VideoDownloadConverter_4z =>PUP.Optional.MindSpark

---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43) (122) - 3s
O43 - CFD: 2015/01/08 13:42:42 - [] D -- C:\Program Files\ABBYY FineReader 6.0 Sprint
O43 - CFD: 2015/05/09 08:06:57 - [] D -- C:\Program Files\Adobe
O43 - CFD: 2014/12/25 19:17:21 - [] D -- C:\Program Files\AvRack
O43 - CFD: 2015/05/09 08:06:56 - [] D -- C:\Program Files\Common Files
O43 - CFD: 2015/01/08 13:41:31 - [] D -- C:\Program Files\epson
O43 - CFD: 2015/01/08 13:42:52 - [] D -- C:\Program Files\Epson Software
O43 - CFD: 2014/12/24 16:13:28 - [0] SHD -- C:\Program Files\Fichiers communs
O43 - CFD: 2014/12/25 16:07:44 - [] D -- C:\Program Files\Foxit Software
O43 - CFD: 2015/01/08 13:42:51 - [] HD -- C:\Program Files\InstallShield Installation Information
O43 - CFD: 2014/12/26 07:58:59 - [] D -- C:\Program Files\Intel
O43 - CFD: 2015/06/27 14:31:25 - [] D -- C:\Program Files\Internet Download Manager
O43 - CFD: 2015/06/10 05:14:48 - [] D -- C:\Program Files\Internet Explorer
O43 - CFD: 2014/12/24 16:31:25 - [] D -- C:\Program Files\Kaspersky Lab
O43 - CFD: 2014/12/24 17:10:36 - [] D -- C:\Program Files\Microsoft Office
O43 - CFD: 2014/12/24 17:10:36 - [] D -- C:\Program Files\Microsoft Visual Studio
O43 - CFD: 2015/01/02 05:37:33 - [] D -- C:\Program Files\Microsoft Works
O43 - CFD: 2013/08/22 09:17:26 - [] D -- C:\Program Files\Microsoft.NET
O43 - CFD: 2015/02/04 14:07:32 - [] D -- C:\Program Files\MyPC Backup =>PUP.Optional.MyPCBackup
O43 - CFD: 2015/06/28 18:35:00 - [] D -- C:\Program Files\Opera
O43 - CFD: 2014/12/25 19:17:21 - [0] D -- C:\Program Files\Realtek Sound Manager
O43 - CFD: 2015/02/14 14:22:28 - [] D -- C:\Program Files\Smileys We Love Toolbar for IE =>PUP.Optional.SmileyBar
O43 - CFD: 2013/08/22 08:24:44 - [0] HD -- C:\Program Files\Uninstall Information
O43 - CFD: 2015/04/16 11:59:41 - [] D -- C:\Program Files\VideoDownloadConverter_4z =>PUP.Optional.VideoDownloadConverter
O43 - CFD: 2015/02/14 14:21:30 - [] D -- C:\Program Files\VideoLAN
O43 - CFD: 2015/03/12 12:36:54 - [] D -- C:\Program Files\Windows Defender
O43 - CFD: 2015/05/13 04:33:20 - [] D -- C:\Program Files\Windows Journal
O43 - CFD: 2015/04/25 08:39:40 - [] D -- C:\Program Files\Windows Mail
O43 - CFD: 2015/04/25 08:39:38 - [] D -- C:\Program Files\Windows Media Player
O43 - CFD: 2015/04/25 08:39:39 - [] D -- C:\Program Files\Windows Multimedia Platform
O43 - CFD: 2014/12/24 16:13:28 - [] D -- C:\Program Files\Windows NT
O43 - CFD: 2015/04/25 08:39:35 - [] D -- C:\Program Files\Windows Photo Viewer
O43 - CFD: 2015/04/25 08:39:38 - [] D -- C:\Program Files\Windows Portable Devices
O43 - CFD: 2013/08/22 09:17:26 - [] SHD -- C:\Program Files\Windows Sidebar
O43 - CFD: 2015/07/03 03:50:16 - [] HD -- C:\Program Files\WindowsApps
O43 - CFD: 2015/04/25 08:31:59 - [] D -- C:\Program Files\WindowsPowerShell
O43 - CFD: 2014/12/24 16:55:31 - [] D -- C:\Program Files\WinRAR
O43 - CFD: 2015/04/19 18:01:04 - [] D -- C:\Program Files\XTab
O43 - CFD: 2015/01/08 13:42:40 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ABBYY FineReader 6.0 Sprint
O43 - CFD: 2015/04/25 08:40:39 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility
O43 - CFD: 2015/04/25 08:40:39 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 2015/06/10 05:18:36 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 2015/01/08 13:40:15 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON
O43 - CFD: 2015/01/08 13:43:19 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epson Software
O43 - CFD: 2015/02/04 14:06:08 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FlvPlayer =>PUP.Optional.FLVPlayer
O43 - CFD: 2014/12/25 16:07:50 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit Reader
O43 - CFD: 2014/12/24 16:32:08 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Internet Security
O43 - CFD: 2013/08/22 09:17:27 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 2014/12/24 17:11:20 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
O43 - CFD: 2014/12/25 19:17:21 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Realtek Sound Manager
O43 - CFD: 2015/02/14 14:22:23 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SmileysWeLove for IE =>PUP.Optional.SmileyBar
O43 - CFD: 2013/08/22 09:17:27 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp
O43 - CFD: 2015/04/25 08:40:39 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools
O43 - CFD: 2014/03/18 08:38:57 - [0] RHD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC
O43 - CFD: 2015/02/14 14:21:54 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
O43 - CFD: 2014/12/24 16:55:31 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
O43 - CFD: 2013/08/22 08:23:42 - [0] SHD -- C:\ProgramData\Application Data
O43 - CFD: 2014/12/24 16:13:28 - [0] SHD -- C:\ProgramData\Bureau
O43 - CFD: 2013/08/22 08:23:42 - [0] SHD -- C:\ProgramData\Desktop
O43 - CFD: 2013/08/22 08:23:42 - [0] SHD -- C:\ProgramData\Documents
O43 - CFD: 2015/01/08 13:39:15 - [] D -- C:\ProgramData\EPSON
O43 - CFD: 2014/12/24 16:52:01 - [0] D -- C:\ProgramData\IDM
O43 - CFD: 2015/02/04 14:12:14 - [] D -- C:\ProgramData\IHProtectUpDate =>PUP.Optional.AgentODR
O43 - CFD: 2015/07/10 21:00:59 - [] D -- C:\ProgramData\Kaspersky Lab
O43 - CFD: 2014/12/25 11:31:32 - [] D -- C:\ProgramData\Kaspersky Lab Setup Files
O43 - CFD: 2014/12/24 16:13:28 - [0] SHD -- C:\ProgramData\Menu Démarrer
O43 - CFD: 2015/04/15 12:49:35 - [] SD -- C:\ProgramData\Microsoft
O43 - CFD: 2015/06/10 03:44:09 - [] D -- C:\ProgramData\Microsoft Help
O43 - CFD: 2014/12/24 16:13:28 - [0] SHD -- C:\ProgramData\Modèles
O43 - CFD: 2015/04/25 08:32:15 - [] D -- C:\ProgramData\regid.1991-06.com.microsoft
O43 - CFD: 2013/08/22 08:23:42 - [0] SHD -- C:\ProgramData\Start Menu
O43 - CFD: 2013/08/22 08:23:42 - [0] SHD -- C:\ProgramData\Templates
O43 - CFD: 2015/01/08 13:43:19 - [] D -- C:\ProgramData\UDL
O43 - CFD: 2015/05/22 07:27:54 - [] D -- C:\Program Files\Common Files\Adobe
O43 - CFD: 2015/01/04 06:38:25 - [] D -- C:\Program Files\Common Files\DESIGNER
O43 - CFD: 2014/12/25 19:17:04 - [] D -- C:\Program Files\Common Files\InstallShield
O43 - CFD: 2015/02/07 05:18:33 - [] D -- C:\Program Files\Common Files\microsoft shared
O43 - CFD: 2013/08/22 09:17:35 - [] D -- C:\Program Files\Common Files\Services
O43 - CFD: 2015/04/25 08:39:27 - [] D -- C:\Program Files\Common Files\System
O43 - CFD: 2015/05/09 08:06:57 - [] D -- C:\Users\Mohamed\AppData\Roaming\Adobe
O43 - CFD: 2015/05/15 16:14:58 - [] D -- C:\Users\Mohamed\AppData\Roaming\DMCache
O43 - CFD: 2015/03/07 11:24:20 - [] D -- C:\Users\Mohamed\AppData\Roaming\EPSON
O43 - CFD: 2015/02/04 14:06:08 - [] D -- C:\Users\Mohamed\AppData\Roaming\FlvPlayer =>PUP.Optional.FLVPlayer
O43 - CFD: 2015/01/06 10:31:53 - [] D -- C:\Users\Mohamed\AppData\Roaming\Foxit Software
O43 - CFD: 2014/12/24 16:50:52 - [] D -- C:\Users\Mohamed\AppData\Roaming\Identities
O43 - CFD: 2015/05/18 22:04:24 - [] D -- C:\Users\Mohamed\AppData\Roaming\IDM
O43 - CFD: 2015/01/08 13:40:26 - [] D -- C:\Users\Mohamed\AppData\Roaming\InstallShield
O43 - CFD: 2015/05/09 08:06:56 - [] D -- C:\Users\Mohamed\AppData\Roaming\InterTrust
O43 - CFD: 2014/12/24 18:14:00 - [] D -- C:\Users\Mohamed\AppData\Roaming\Macromedia
O43 - CFD: 2015/03/07 11:26:04 - [] SD -- C:\Users\Mohamed\AppData\Roaming\Microsoft
O43 - CFD: 2015/02/04 14:09:37 - [] D -- C:\Users\Mohamed\AppData\Roaming\omiga-plus =>PUP.Optional.OmigaPlus
O43 - CFD: 2015/02/04 14:14:04 - [] D -- C:\Users\Mohamed\AppData\Roaming\Opera Software
O43 - CFD: 2015/02/14 14:22:29 - [] D -- C:\Users\Mohamed\AppData\Roaming\smileyswelove =>PUP.Optional.SmileyBar
O43 - CFD: 2015/02/14 14:23:14 - [] D -- C:\Users\Mohamed\AppData\Roaming\vlc
O43 - CFD: 2014/12/24 16:55:45 - [0] D -- C:\Users\Mohamed\AppData\Roaming\WinRAR
O43 - CFD: 2015/07/10 21:12:35 - [] D -- C:\Users\Mohamed\AppData\Roaming\ZHP
O43 - CFD: 2014/12/24 16:23:14 - [0] SHD -- C:\Users\Mohamed\AppData\Local\Application Data
O43 - CFD: 2015/06/10 05:43:34 - [0] SHD -- C:\Users\Mohamed\AppData\Local\EmieBrowserModeList
O43 - CFD: 2015/06/10 05:43:34 - [0] SHD -- C:\Users\Mohamed\AppData\Local\EmieSiteList
O43 - CFD: 2015/06/10 05:43:34 - [0] SHD -- C:\Users\Mohamed\AppData\Local\EmieUserList
O43 - CFD: 2015/07/09 21:26:32 - [] D -- C:\Users\Mohamed\AppData\Local\Foxit Reader
O43 - CFD: 2014/12/30 12:25:48 - [] D -- C:\Users\Mohamed\AppData\Local\Google
O43 - CFD: 2015/06/02 11:37:21 - [] D -- C:\Users\Mohamed\AppData\Local\GWX
O43 - CFD: 2014/12/24 16:23:14 - [0] SHD -- C:\Users\Mohamed\AppData\Local\Historique
O43 - CFD: 2015/05/09 08:02:18 - [] D -- C:\Users\Mohamed\AppData\Local\IAC
O43 - CFD: 2015/03/18 21:15:35 - [] D -- C:\Users\Mohamed\AppData\Local\Microsoft
O43 - CFD: 2014/12/24 17:08:36 - [0] D -- C:\Users\Mohamed\AppData\Local\Microsoft Help
O43 - CFD: 2015/02/04 14:14:04 - [] D -- C:\Users\Mohamed\AppData\Local\Opera Software
O43 - CFD: 2014/12/24 16:25:24 - [] D -- C:\Users\Mohamed\AppData\Local\Packages
O43 - CFD: 2014/12/25 16:07:09 - [] D -- C:\Users\Mohamed\AppData\Local\Programs
O43 - CFD: 2015/07/10 21:12:04 - [] D -- C:\Users\Mohamed\AppData\Local\Temp
O43 - CFD: 2014/12/24 16:23:14 - [0] SHD -- C:\Users\Mohamed\AppData\Local\Temporary Internet Files
O43 - CFD: 2015/04/16 12:01:05 - [] D -- C:\Users\Mohamed\AppData\Local\VideoDownloadConverter_4z =>PUP.Optional.VideoDownloadConverter
O43 - CFD: 2015/03/07 11:26:04 - [] D -- C:\Users\Mohamed\AppData\Local\VirtualStore
O43 - CFD: 2014/03/18 09:14:18 - [] RD -- C:\Users\Mohamed\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
O43 - CFD: 2013/08/22 09:17:27 - [] RD -- C:\Users\Mohamed\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 2015/03/12 12:39:25 - [] RD -- C:\Users\Mohamed\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 2014/12/30 12:25:56 - [] D -- C:\Users\Mohamed\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
O43 - CFD: 2013/08/22 09:17:27 - [] D -- C:\Users\Mohamed\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 2015/02/04 14:07:25 - [] D -- C:\Users\Mohamed\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup =>PUP.Optional.MyPCBackup
O43 - CFD: 2015/03/12 12:39:25 - [] RD -- C:\Users\Mohamed\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
O43 - CFD: 2014/03/18 09:14:18 - [] RD -- C:\Users\Mohamed\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
O43 - CFD: 2014/12/24 16:55:31 - [] D -- C:\Users\Mohamed\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR

---\\ Liste des pilotes du système (SDL) (O58) (47) - 11s
O58 - SDL:2013/08/22 06:33:26 A . (.LSI - LSI 3ware SCSI Storport Driver.) -- C:\Windows\System32\drivers\3ware.sys [86368]
O58 - SDL:2013/08/22 06:33:25 A . (.PMC-Sierra - PMC-Sierra Storport Driver For SPC8x6G SAS.) -- C:\Windows\System32\drivers\adp80xx.sys [773472]
O58 - SDL:2003/08/14 16:16:38 N . (.Sensaura Ltd - Sensaura WDM 3D Audio Driver.) -- C:\Windows\System32\drivers\alcxsens.sys [404736]
O58 - SDL:2003/08/21 09:31:52 N . (.Realtek Semiconductor Corp. - Realtek AC'97 Audio Driver (WDM).) -- C:\Windows\System32\drivers\alcxwdm.sys [462940]
O58 - SDL:2013/08/22 06:33:25 A . (.Advanced Micro Devices - AHCI 1.3 Device Driver.) -- C:\Windows\System32\drivers\amdsata.sys [72544]
O58 - SDL:2013/08/22 06:33:26 A . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller D.) -- C:\Windows\System32\drivers\amdsbs.sys [215392]
O58 - SDL:2013/08/22 06:33:24 A . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\Windows\System32\drivers\amdxata.sys [22880]
O58 - SDL:2013/08/22 06:33:26 A . (.PMC-Sierra, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\System32\drivers\arcsas.sys [101728]
O58 - SDL:2013/08/13 00:25:32 A . (.Windows (R) Win 7 DDK provider - BCM Function 2 Device Driver.) -- C:\Windows\System32\drivers\bcmfn2.sys [16088]
O58 - SDL:2013/01/14 21:10:56 A . (.Kaspersky Lab UK Ltd - Cryptographic Module.) -- C:\Windows\System32\drivers\cm_km_w.sys [189136]
O58 - SDL:2013/06/18 13:21:30 A . (.Intel Corporation - Intel(R) Gigabit Adapter NDIS 6.x driver.) -- C:\Windows\System32\drivers\e1i6332.sys [379904]
O58 - SDL:2009/09/17 19:54:14 A . (.Intel Corporation - Intel(R) Management Engine Interface.) -- C:\Windows\System32\drivers\HECI.sys [41088]
O58 - SDL:2013/08/22 06:33:29 A . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Drive.) -- C:\Windows\System32\drivers\HpSAMD.sys [56672]
O58 - SDL:2013/07/23 22:18:30 AC . (.Intel Corporation - Intel(R) Atom(TM) Processor GPIO Controller.) -- C:\Windows\System32\drivers\iaiogpio.sys [22016]
O58 - SDL:2013/07/23 22:18:30 AC . (.Intel Corporation - Intel(R) Atom(TM) Processor I2C Controller.) -- C:\Windows\System32\drivers\iaioi2c.sys [61936]
O58 - SDL:2013/08/10 01:39:44 A . (.Intel Corporation - Intel Rapid Storage Technology driver (inbo.) -- C:\Windows\System32\drivers\iaStorAV.sys [524784]
O58 - SDL:2013/08/22 06:33:29 A . (.Intel Corporation - Intel Matrix Storage Manager driver - ia32.) -- C:\Windows\System32\drivers\iaStorV.sys [333664]
O58 - SDL:2012/11/27 00:22:30 A . (.Intel Corporation - Intel Graphics Kernel Mode Driver.) -- C:\Windows\System32\drivers\igdkmd32.sys [10860032]
O58 - SDL:2014/03/31 11:47:08 A . (.Kaspersky Lab ZAO - Kaspersky Unified Driver.) -- C:\Windows\System32\drivers\kl1.sys [143968]
O58 - SDL:2014/07/02 16:10:26 A . (.Kaspersky Lab ZAO - Virtual Disk fre_win8_x86.) -- C:\Windows\System32\drivers\kldisk.sys [37440]
O58 - SDL:2012/07/27 18:38:24 A . (.Kaspersky Lab - Klelam Mini-Filter [fre_win8_x86].) -- C:\Windows\System32\drivers\klelam.sys [24496]
O58 - SDL:2014/12/24 16:59:29 A . (.Kaspersky Lab ZAO - Filter Core [fre_win8_x86].) -- C:\Windows\System32\drivers\klflt.sys [119304]
O58 - SDL:2014/08/12 18:32:52 A . (.Kaspersky Lab ZAO - KLHK [fre_win8_x86].) -- C:\Windows\System32\drivers\klhk.sys [36536]
O58 - SDL:2015/03/11 09:24:00 A . (.Kaspersky Lab ZAO - Klif Mini-Filter [fre_win8_x86].) -- C:\Windows\System32\drivers\klif.sys [649400]
O58 - SDL:2014/02/25 13:09:02 A . (.Kaspersky Lab ZAO - Kaspersky Lab Intermediate Network Driver.) -- C:\Windows\System32\drivers\klim6.sys [25696]
O58 - SDL:2014/03/28 17:51:02 A . (.Kaspersky Lab ZAO - KLKBDFLT Keyboard Device Filter [fre_win8_x.) -- C:\Windows\System32\drivers\klkbdflt.sys [24672]
O58 - SDL:2013/08/08 17:10:58 A . (.Kaspersky Lab ZAO - KLMOUFLT Mouse Device Filter [fre_win8_x86].) -- C:\Windows\System32\drivers\klmouflt.sys [25696]
O58 - SDL:2013/04/12 15:34:48 A . (.Kaspersky Lab ZAO - KLPD [fre_wnet_x86].) -- C:\Windows\System32\drivers\klpd.sys [14432]
O58 - SDL:2014/12/24 16:59:33 A . (.Kaspersky Lab ZAO - Network filtering component [fre_win8_x86].) -- C:\Windows\System32\drivers\klwfp.sys [56840]
O58 - SDL:2014/12/24 16:59:34 A . (.Kaspersky Lab ZAO - Network filtering component.) -- C:\Windows\System32\drivers\klwtp.sys [64200]
O58 - SDL:2014/07/09 16:23:54 A . (.Kaspersky Lab ZAO - KNEPS Power [fre_wxp_x86].) -- C:\Windows\System32\drivers\kneps.sys [146240]
O58 - SDL:2013/08/22 06:33:29 A . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas.sys [94048]
O58 - SDL:2013/08/22 06:33:30 A . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas2.sys [79712]
O58 - SDL:2013/08/22 06:33:30 A . (.LSI Corporation - LSI SAS Gen3 Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas3.sys [68960]
O58 - SDL:2013/08/22 06:33:29 A . (.LSI Corporation - LSI SSS PCIe/Flash Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sss.sys [69472]
O58 - SDL:2013/08/22 06:33:30 A . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows.) -- C:\Windows\System32\drivers\megasas.sys [51552]
O58 - SDL:2013/08/22 06:33:29 A . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\System32\drivers\megasr.sys [464736]
O58 - SDL:2013/08/22 06:33:32 A . (.Marvell Semiconductor, Inc. - Marvell Flash Controller Driver.) -- C:\Windows\System32\drivers\mvumis.sys [58208]
O58 - SDL:2013/08/22 06:33:32 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\System32\drivers\nvraid.sys [120160]
O58 - SDL:2013/08/22 06:33:33 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\System32\drivers\nvstor.sys [141664]
O58 - SDL:2013/08/22 09:16:47 A . (.Macrovision Corporation, Macrovision Europe Limited, - Macrovision SECURITY Driver.) -- C:\Windows\System32\drivers\secdrv.sys [20480]
O58 - SDL:2013/08/22 06:32:56 A . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\System32\drivers\sisraid2.sys [41312]
O58 - SDL:2013/08/22 06:32:57 A . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\System32\drivers\sisraid4.sys [79200]
O58 - SDL:2013/08/22 06:32:57 A . (.Promise Technology, Inc. - Promise SuperTrak EX Series Driver for Wind.) -- C:\Windows\System32\drivers\stexstor.sys [26976]
O58 - SDL:2013/08/22 06:33:00 A . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\viaide.sys [18272]
O58 - SDL:2013/08/22 06:33:01 A . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR X86-32.) -- C:\Windows\System32\drivers\vsmraid.sys [148832]
O58 - SDL:2013/08/22 06:33:01 A . (.VIA Corporation - VIA StorX RAID Controller Driver.) -- C:\Windows\System32\drivers\VSTXRAID.SYS [276832]

---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61) (8) - 33s
O61 - LFC: 2015/07/10 20:48:06 A . (..) -- C:\Users\Mohamed\AppData\Local\Microsoft\Windows\INetCache\IE\C5RBRK6A\urlblockindex[1].bin [16]
O61 - LFC: 2015/07/07 15:50:00 A . (..) -- C:\Users\Mohamed\AppData\Local\Google\Update\Install\{C46644B7-50F0-4FDD-AB80-D05AF33CF5DE}\43.0.2357.132_43.0.2357.130_chrome_updater.exe [2743376]
O61 - LFC: 2015/07/07 15:50:00 A . (..) -- C:\Users\Mohamed\AppData\Local\Google\Update\Download\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}\43.0.2357.132\43.0.2357.132_43.0.2357.130_chrome_updater.exe [2743376]
O61 - LFC: 2015/07/10 21:02:31 A . (..) -- C:\Users\Mohamed\AppData\Local\Google\Chrome\User Data\ev_hashes_whitelist.bin [1113849]
O61 - LFC: 2015/07/07 04:49:03 A . (..) -- C:\Users\Mohamed\AppData\Local\Google\Chrome\Application\43.0.2357.132\libexif.dll [310088]
O61 - LFC: 2015/07/07 03:25:11 A . (..) -- C:\Users\Mohamed\AppData\Local\Google\Chrome\Application\43.0.2357.132\natives_blob.bin [410937]
O61 - LFC: 2015/07/07 03:25:12 A . (..) -- C:\Users\Mohamed\AppData\Local\Google\Chrome\Application\43.0.2357.132\snapshot_blob.bin [449780]
O61 - LFC: 2015/07/07 04:49:05 A . (..) -- C:\Users\Mohamed\AppData\Local\Google\Chrome\Application\43.0.2357.132\PepperFlash\pepflashplayer.dll [16285512]

---\\ Associations Shell Spawning (O67) (10) - 0s
O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe
O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\wscript.exe
O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Editeur du Registre.) -- C:\Windows\regedit.exe
O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S
O67 - Shell Spawning: <.html> [HKCU\..\open\Command] (.Google Inc. - Google Chrome.) -- C:\Users\Mohamed\AppData\Local\Google\Chrome\Application\chrome.exe

---\\ Menu de démarrage Internet (SMI) (O68) (8) - 0s
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Opera Software - Opera Internet Browser.) -- C:\Program Files\Opera\Launcher.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Opera Software - Opera Internet Browser.) -- C:\Program Files\Opera\launcher.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Opera Software - Opera Internet Browser.) -- C:\Program Files\Opera\launcher.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Opera Software - Opera Internet Browser.) -- C:\Program Files\Opera\launcher.exe

---\\ Recherche d'infection sur les navigateurs internet (SBI) (O69) (5) - 0s
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - http://isearch.omiga-plus.com/ =>PUP.Optional.OmigaPlus
O69 - SBI: SearchScopes [HKCU] {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} [DefaultScope] - (e) - http://isearch.omiga-plus.com/ =>PUP.Optional.OmigaPlus
O69 - SBI: SearchScopes [HKCU] {33BB0A4E-99AF-4226-BDF6-49120163DE86} - (omiga-plus) - http://isearch.omiga-plus.com/ =>PUP.Optional.OmigaPlus
O69 - SBI: SearchScopes [HKCU] {cf6e4b1c-dbde-457e-9cef-ab8ecac8a5e8} - (Ask Web Search) - http://search.tb.ask.com/ =>Toolbar.Ask
O69 - SBI: SearchScopes [HKCU] {E733165D-CBCF-4FDA-883E-ADEF965B476C} - (Google) - http://isearch.omiga-plus.com/ =>PUP.Optional.OmigaPlus

---\\ Enumère les services démarrés par Svchost (SSS) (O83) (36) - 1s
O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d’application.) -- C:\Windows\System32\aelupsvc.dll [161792]
O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [126976]
O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [126976]
O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\System32\srvsvc.dll [250368]
O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\System32\gpsvc.dll [1212928]
O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\IKEEXT.DLL [733696]
O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur u.) -- C:\Windows\System32\iphlpsvc.dll [822784]
O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d’ouverture de session secon.) -- C:\Windows\System32\seclogon.dll [24064]
O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll [89600]
O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\System32\iscsiexe.dll [115712]
O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll [93696]
O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\System32\schedsvc.dll [1015808]
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll [185856]
O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédia.) -- C:\Windows\System32\mmcss.dll [74752]
O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\System32\browser.dll [108032]
O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll [187904]
O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à.) -- C:\Windows\System32\SessEnv.dll [296448]
O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll [64512]
O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\Windows\System32\KMSVC.DLL [75264]
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\Windows\System32\themeservice.dll [41984]
O83 - Search Svchost Services: wlidsvc (wlidsvc) . (.Microsoft Corporation - Service de compte Microsoft®.) -- C:\Windows\System32\wlidsvc.dll [1245184]
O83 - Search Svchost Services: lfsvc (lfsvc) . (.Microsoft Corporation - Service d’infrastructure de localisation Wi.) -- C:\Windows\System32\GeofenceMonitorService.dll [367104]
O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\Windows\System32\bdesvc.dll [297984]
O83 - Search Svchost Services: DsmSvc (DsmSvc) . (.Microsoft Corporation - Gestionnaire d’installation de périphérique.) -- C:\Windows\System32\DeviceSetupManager.dll [167424]
O83 - Search Svchost Services: NcaSvc (NcaSvc) . (.Microsoft Corporation - Service Assistant Connectivité réseau Micro.) -- C:\Windows\System32\NcaSvc.dll [142848]
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’.) -- C:\Windows\System32\rasauto.dll [95232]
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire des connexions d’accès à dista.) -- C:\Windows\System32\rasmans.dll [461824]
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll [183296]
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements systèm.) -- C:\Windows\System32\Sens.dll [58368]
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l’application d’assistance à.) -- C:\Windows\System32\ipnathlp.dll [390144]
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM.) -- C:\Windows\System32\tapisrv.dll [254464]
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Up.) -- C:\Windows\System32\wuaueng.dll [3040768]
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière.) -- C:\Windows\System32\qmgr.dll [734208]
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [576512]
O83 - Search Svchost Services: AppMgmt (AppMgmt) . (.Microsoft Corporation - Service Installation de logiciels.) -- C:\Windows\System32\appmgmts.dll [155648]
O83 - Search Svchost Services: MsKeyboardFilter (MsKeyboardFilter) . (.Microsoft Corporation - SvcHost Service for Microsoft Keyboard Filt.) -- C:\Windows\System32\KeyboardFilterSvc.dll [76096]

---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped) (3) - 7s
SR - Auto [2014/08/30 17:48:46] [ 234520] Kaspersky Anti-Virus Service 15.0.1 (AVP15.0.1) . (.Kaspersky Lab ZAO.) - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 15.0.1\avp.exe
SS - Auto [2014/11/25 20:43:51] [ 53832] Computer Backup (MyPC Backup) (BackupStack) . (.Just Develop It.) - C:\Program Files\MyPC Backup\BackupStack.exe
SR - Auto [2015/06/02 16:24:26] [ 244392] Foxit Cloud Safe Update Service (FoxitCloudUpdateService) . (.Foxit Software Inc..) - C:\Program Files\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe

---\\ Scan Additionnel (O88) (38) - 0s
C:\Program Files\VideoDownloadConverter_4z\bar\1.bin\APPINTEGRATOR.EXE =>PUP.Optional.VideoDownloadConverter
C:\Program Files\VideoDownloadConverter_4z\bar\1.bin\4zbar.dll =>PUP.Optional.MindSpark
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{312f84fb-8970-4fd3-bddb-7012eac4afc9} =>PUP.Optional.MindSpark
C:\Program Files\XTab\SupTab.dll =>PUP.Optional.SupTab
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} =>PUP.Optional.SupTab
C:\Program Files\VideoDownloadConverter_4z\bar\1.bin\4zSrcAs.dll =>PUP.Optional.MindSpark
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{c547c6c2-561b-4169-a2a5-20ba771ca93b} =>PUP.Optional.MindSpark
C:\Program Files\Smileys We Love Toolbar for IE\adxloader.dll =>PUP.Optional.SmileyBar
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E4EF8A64-0A30-48F5-B3FE-5FDA978DA775} =>PUP.Optional.SmileyBar
C:\Program Files\VideoDownloadConverter_4z\bar\1.bin\4zbar.dll =>PUP.Optional.VideoDownloadConverter
C:\Program Files\VideoDownloadConverter_4z\bar\1.bin\4zmedint.exe =>PUP.Optional.VideoDownloadConverter
HKLM\SYSTEM\CurrentControlSet\Services\BackupStack =>PUP.Optional.MyPCBackup
C:\Program Files\MyPC Backup\BackupStack.exe =>PUP.Optional.MyPCBackup
HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MyPC Backup =>PUP.Optional.MyPCBackup
HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\omiga-plus uninstall =>PUP.Optional.OmigaPlus
HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\VideoDownloadConverter_4zbar Uninstall Internet Explorer =>PUP.Optional.MindSpark
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FlvPlayer =>PUP.Optional.FLVPlayer
HKLM\SOFTWARE\FlvPlayer =>PUP.Optional.FLVPlayer
HKLM\SOFTWARE\IHProtect =>PUP.Optional.AgentODR
HKLM\SOFTWARE\omiga-plusSoftware =>PUP.Optional.OmigaPlus
HKLM\SOFTWARE\SupDp =>PUP.Optional.SupTab
HKLM\SOFTWARE\supTab =>PUP.Optional.SupTab
HKLM\SOFTWARE\VideoDownloadConverter_4z =>PUP.Optional.MindSpark
HKCU\SOFTWARE\InstallCore =>PUP.Optional.InstallCore
HKCU\SOFTWARE\Popajar =>PUP.Optional.Conduit
HKCU\SOFTWARE\VideoDownloadConverter_4z =>PUP.Optional.MindSpark
HKCU\SOFTWARE\AppDataLow\Software\VideoDownloadConverter_4z =>PUP.Optional.MindSpark =>PUP.Optional.MindSpark
C:\Program Files\MyPC Backup =>PUP.Optional.MyPCBackup
C:\Program Files\Smileys We Love Toolbar for IE =>PUP.Optional.SmileyBar
C:\Program Files\VideoDownloadConverter_4z =>PUP.Optional.VideoDownloadConverter
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FlvPlayer =>PUP.Optional.FLVPlayer
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SmileysWeLove for IE =>PUP.Optional.SmileyBar
C:\ProgramData\IHProtectUpDate =>PUP.Optional.AgentODR
C:\Users\Mohamed\AppData\Roaming\FlvPlayer =>PUP.Optional.FLVPlayer
C:\Users\Mohamed\AppData\Roaming\omiga-plus =>PUP.Optional.OmigaPlus
C:\Users\Mohamed\AppData\Roaming\smileyswelove =>PUP.Optional.SmileyBar
C:\Users\Mohamed\AppData\Local\VideoDownloadConverter_4z =>PUP.Optional.VideoDownloadConverter
C:\Users\Mohamed\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup =>PUP.Optional.MyPCBackup

---\\ Récapitulatif des détections trouvées sur votre station (11) - 0s
http://www.nicolascoolman.fr/blog =>PUP.Optional.VideoDownloadConverter
http://www.nicolascoolman.fr/hijacker-omigaplus/ =>PUP.Optional.OmigaPlus
http://www.nicolascoolman.fr/toolbar-ask/ =>Toolbar.Ask
http://www.nicolascoolman.fr/pup-mindspark/ =>PUP.Optional.MindSpark
http://www.nicolascoolman.fr/pup-suptab/ =>PUP.Optional.SupTab
http://www.nicolascoolman.fr/adware-smileybar/ =>PUP.Optional.SmileyBar
http://www.nicolascoolman.fr/pup-mypcbackup/ =>PUP.Optional.MyPCBackup
http://www.nicolascoolman.fr/blog =>PUP.Optional.FLVPlayer
http://www.nicolascoolman.fr/blog =>PUP.Optional.AgentODR
http://www.nicolascoolman.fr/adware-installcore/ =>PUP.Optional.InstallCore
http://www.nicolascoolman.fr/toolbar-conduit/ =>PUP.Optional.Conduit

~ End of the scan, 65559 items in 87 seconds (528)(0)()

Publicité


Signaler le contenu de ce document

Publicité