cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

~ ZHPDiag v2015.7.15.90 Par Nicolas Coolman (2015/07/15)
~ Démarré par andrea le helley (Administrator) (2015/07/16 04:40:03)
~ Site: http://www.nicolascoolman.fr
~ Facebook: https://www.facebook.com/nicolascoolman1
~ Etat de la version: Version OK
~ Mode: Scanner
~ Rapport: C:\Users\andrea le helley\Desktop\ZHPDiag.txt
~ Rapport: C:\Users\andrea le helley\AppData\Roaming\ZHP\ZHPDiag.txt
~ UAC: Activate
~ Démarrage du système: Normal (Normal boot)
~ Windows 8.1, 32-bit (Build 9600)

---\\ Navigateurs Internet (2) - 0s
GCIE: Google Chrome v43.0.2357.134
MSIE: Internet Explorer v11.0.9600.17842

---\\ Informations sur les produits Windows (3) - 2s
~ Windows Server License Manager Script : OK
System - VBScript Engine not found
Windows Activation Technologies : OK

---\\ Logiciels de protection (1) - 0s
Avast Premier v10.2.2215

---\\ Informations sur le système (6) - 0s
~ Operating System: x86 Family 6 Model 55 Stepping 8, GenuineIntel
~ Operating System: 32-bit
~ Boot mode: Normal (Normal boot)
~ Total physical RAM (KB): 1979536
~ System Restore: Activé (Enable)
~ System drive C: has 2 GB free of 21 GB

---\\ Mode de connexion au système (3) - 0s
~ Computer Name: ANDREA
~ User Name: andrea le helley
~ Logged in as Administrator

---\\ Enumération des unités disques (2) - 0s
~ Drive C: has 2 GB free of 21 GB (System)
~ Drive D: has 949 GB free of 953 GB

---\\ Recherche particulière de fichiers génériques (21) - 0s
[MD5.91E24273FCA076EA9E65DAFA98901225] - (.Microsoft Corporation - Explorateur Windows.) () -- C:\Windows\Explorer.exe [2207488]
[MD5.8BFE805555CDAF6387912A34D7978DAA] - (.Microsoft Corporation - Processus hôte Windows (Rundll32).) () -- C:\Windows\System32\rundll32.exe [51200]
[MD5.DC02677945BDABD6B0C6A29914AA21EF] - (.Microsoft Corporation - Application de démarrage de Windows.) () -- C:\Windows\System32\Wininit.exe [115712]
[MD5.E4EB138060BAE0DBAB1A3B71A3141FE7] - (.Microsoft Corporation - Extensions Internet pour Win32.) () -- C:\Windows\System32\wininet.dll [1950720]
[MD5.E36FB29A2158B7D5DCA0F4E08DE75442] - (.Microsoft Corporation - Application d’ouverture de session Windows.) () -- C:\Windows\System32\Winlogon.exe [465408]
[MD5.BFB9E1202225113991F981D29BFB9029] - (.Microsoft Corporation - Bibliothèque de licences.) () -- C:\Windows\System32\sppcomapi.dll [438272]
[MD5.E37F897ED7B5AFF79B1398258DB96BD9] - (.Microsoft Corporation - DLL client de l’API uilisateur de Windows m.) () -- C:\Windows\System32\fr-FR\user32.dll.mui [19456]
[MD5.D75FB05E8DBF21FA0EF313C7503243F1] - (.Microsoft Corporation - Pilote de fonction connexe pour WinSock.) () -- C:\Windows\System32\drivers\AFD.sys [461312]
[MD5.E2FC132D48EA4E8B04432C33EFB77801] - (.Microsoft Corporation - SCSI CD-ROM Driver.) () -- C:\Windows\System32\drivers\Cdrom.sys [124928]
[MD5.55758EBBC45E1628161121D7CFEAD4A1] - (.Microsoft Corporation - DFS Namespace Client Driver.) () -- C:\Windows\System32\drivers\DfsC.sys [102400]
[MD5.7E0EDA9EE53E344D1604EB2A7E8DED47] - (.Microsoft Corporation - High Definition Audio Bus Driver.) () -- C:\Windows\System32\drivers\HDAudBus.sys [69632]
[MD5.5043E69532392A43549E5D41E22638AA] - (.Microsoft Corporation - Pilote de port i8042.) () -- C:\Windows\System32\drivers\i8042prt.sys [82944]
[MD5.FA6C94C754A566EA8A61D658932F32DE] - (.Microsoft Corporation - IP Network Address Translator.) () -- C:\Windows\System32\drivers\IpNat.sys [126976]
[MD5.6FFD467F3BF3E3044E9B212CCD488DE1] - (.Microsoft Corporation - Minirdr SMB Windows NT.) () -- C:\Windows\System32\drivers\MRxSmb.sys [330752]
[MD5.BC242922B0D08F61CF7C87FD08FAFA8B] - (.Microsoft Corporation - MBT Transport driver.) () -- C:\Windows\System32\drivers\netBT.sys [218624]
[MD5.C52E578E3F8182C2EE6AAF0AC2B61C9B] - (.Microsoft Corporation - Pilote du système de fichiers NT.) () -- C:\Windows\System32\drivers\ntfs.sys [1689408]
[MD5.4F30970F15ADCC382544B31D5D7E368E] - (.Microsoft Corporation - Pilote de port parallèle.) () -- C:\Windows\System32\drivers\Parport.sys [81408]
[MD5.C51AB62AB41A2E8560D12472B204CC00] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) () -- C:\Windows\System32\drivers\Rasl2tp.sys [81920]
[MD5.67E91843B0344411820A012063E876B2] - (.Microsoft Corporation - Redirecteur de périphérique de Microsoft RD.) () -- C:\Windows\System32\drivers\rdpdr.sys [143872]
[MD5.DB0C184142CF9FA1746F598A16EE92B2] - (.Microsoft Corporation - TDI Translation Driver.) () -- C:\Windows\System32\drivers\tdx.sys [87040]
[MD5.31A2AA48C1ECD390E2707E5C21B75DCE] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) () -- C:\Windows\System32\drivers\volsnap.sys [264512]

---\\ Processus lancés (23) - 3s
[MD5.564CB886D1A968B9798C1AB03F4EB54F] - (.ASUSTek Computer Inc. - ASLDR Service.) -- C:\Program Files\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe [115512] [PID.1584]
[MD5.DBC598E47E7A382E60E2A4745D41FEF9] - (.ASUS - GFNEXSrv.) -- C:\Program Files\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe [96896] [PID.1628]
[MD5.210A326658D72D7F2EE2267F3D9C44D4] - (.Avast Software s.r.o. - avast! Service.) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336] [PID.1656]
[MD5.60F37044ECB50154DAC0AC2B83F6AB88] - (.Avast Software s.r.o. - avast! firewall service.) -- C:\Program Files\AVAST Software\Avast\afwServ.exe [107448] [PID.1944]
[MD5.F15B96D82B8F112FCBA101F178866806] - (.ASUSTek Computer Inc. - AsHidSrv Service.) -- C:\Program Files\ASUS\ATK Package\ATK Hotkey\AsHidSrv.exe [103224] [PID.316]
[MD5.72CA1CBD58509FB68330D7C245B7F1CC] - (.Intel(R) Corporation - Intel(R) Capability Licensing Service Inter.) -- C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe [586752] [PID.2188]
[MD5.62AFAB9E31566C96292C57EF33515CDD] - (.Irrational Number Applications - WebShield Service.) -- C:\ProgramData\KmxHuHwH\wrpKwjdHFeH.exe [2731512] [PID.2388] =>PUP.Optional.WebShield
[MD5.5019A83BE87FD8B60F7333901BFD35E5] - (.Avast Software - AvastVirtualBox Interface.) -- C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [3205216] [PID.3220]
[MD5.47F12AD8FD0151607CE66D8A165C28F7] - (.ASUSTek Computer Inc. - HControl.) -- C:\Program Files\ASUS\ATK Package\ATK Hotkey\HControl.exe [303928] [PID.5528]
[MD5.EBCB7B97A720AE9E445CFA7119F5C5B0] - (.ASUSTek Computer INC. - ASUS Patch For Touch Panel.) -- C:\ProgramData\AsTouchPanel\AsPatchTouchPanel.exe [144512] [PID.4308]
[MD5.230553C24EEE56CA07CF66117A10BFCC] - (.ASUSTek Computer Inc. - ATK Media.) -- C:\Program Files\ASUS\ATK Package\ATK Media\DMedia.exe [209720] [PID.1080]
[MD5.99B0DD6A5DF7E130C81C7CC05137A861] - (.ASUSTek Computer Inc. - ATKOSD2.) -- C:\Program Files\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [406328] [PID.1328]
[MD5.9D727D6EA648AC11665B6B79B70D483E] - (.AsusTek - ASUS Smart Gesture Loader.) -- C:\Program Files\ASUS\ASUS Smart Gesture\AsTPCenter\x86\AsusTPLoader.exe [353080] [PID.3728]
[MD5.08C1E1E6C9204A3513A2766C993D8FE5] - (.AsusTek - ASUS Smart Gesture Center.) -- C:\Program Files\ASUS\ASUS Smart Gesture\AsTPCenter\x86\AsusTPCenter.exe [295224] [PID.3012]
[MD5.D44D285492E3FD700B6E826F7213D5DF] - (.AsusTek - ASUS Smart Gesture Helper.) -- C:\Program Files\ASUS\ASUS Smart Gesture\AsTPCenter\x86\AsusTPHelper.exe [174392] [PID.2292]
[MD5.CB4A2476C404E5E88BA557E46A6771AA] - (.Realtek Semiconductor - Gestionnaire audio Realtek.) -- C:\Program Files\Realtek\Audio\AP\RtkNGUI.exe [2912256] [PID.4052]
[MD5.06964B7DE858BB6317164BF184E9C766] - (.Avast Software s.r.o. - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe [5512912] [PID.4388]
[MD5.761986319F4F6EDB33B3F046D254C781] - (.ASUSTeK Computer Inc. - ASUS Live Update.) -- C:\Program Files\ASUS\ASUS Live Update\LiveUpdate.exe [2998552] [PID.5888]
[MD5.B3537E9531D27DE352BAEC65DC4D79DD] - (.Copyright (C) 2015 - .) -- C:\Program Files\OneSystemCare\CleanupConsole.exe [485984] [PID.1180] =>PUP.Optional.OneSystemCare
[MD5.665E591B3A8467926BEA39BF84126A1D] - (...) -- C:\Program Files\Primary Color\bin\utilPrimaryColor.exe [457464] [PID.6284] =>PUP.PrimaryColor
[MD5.665E591B3A8467926BEA39BF84126A1D] - (...) -- C:\Program Files\Primary Color\updatePrimaryColor.exe [457464] [PID.992] =>PUP.PrimaryColor
[MD5.53C27597E85BD15755349460D107F768] - (...) -- C:\Program Files\Primary Color\bin\PrimaryColor.expext.exe [114936] [PID.8148] =>PUP.PrimaryColor
[MD5.2648DC12CCE209ABAB68D0E88416835B] - (...) -- C:\Program Files\Primary Color\bin\PrimaryColor.BrowserAdapter.exe [108792] [PID.5024] =>PUP.PrimaryColor

---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2) (13) - 1s
G0 - GCSP: Secure Preferences [User Data\Default][HomePage] http://www.istartsurf.com/ =>PUP.Optional.IsStart
G2 - GCE: Preference [User Data\Default] [aapocclcgogkmnckokdopfmhonfmgoek] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [aohghmighlieiainnegkcijnfilokake] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [apdfllckaahabafndbhieahigkjlhalf] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [bjddolaffjoealjhggjklmgmkmlgpihl] Primary Color =>PUP.Optional.Sambreel
G2 - GCE: Preference [User Data\Default] [blpcfgokakmgnkcojhhkbfbldkacnbeo] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [cfhdojbkjhnklbpkdaibdccddilifddb] __MSG_name__
G2 - GCE: Preference [User Data\Default] [coobgpohoikkiipiblmjeljniedjpjpf] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [felcaaldnbdncclmgdcncolpebgiejap] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [gomekmidlodglbbmalcneegieacbdmki] Avast Online Security
G2 - GCE: Preference [User Data\Default] [lccekmodgklaepjeofjdjpbminllajkg] Chrome Hotword Shared Module
G2 - GCE: Preference [User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [pjkljhegncpnkpknbcohdijeoejaedia] Google Chrome manifest =>.Google Inc.

---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4) (10) - 0s
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = about:newtab
R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphean =>.Microsoft Internet Explorer
R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV9 = 1

---\\ Internet Explorer, Proxy Management (R5) (3) - 0s
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll

---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs (3) - 0s
F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe (.Microsoft Corporation.)
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe (.Microsoft Corporation.)
F2 - REG:system.ini: VMApplet=C:\Windows\system32\SystemPropertiesPerformance.exe (.Microsoft Corporation.)

---\\ Hosts file redirection (O1) (1) - 0s
~ Le fichier hôte est sain (The hosts file is clean) (21)

---\\ Browser Helper Object de navigateur (BHO) (O2) (3) - 0s
O2 - BHO: (no name) - {51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F} (Orphean)
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.Avast Software s.r.o. - IE Webrep plugin.) -- C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Primary Color 1.0.0.7 - {b0a28f54-b08f-4049-a9bf-8d33bd1e9222} . (.Primary Color - Primary Color.) -- C:\Program Files\Primary Color\PrimaryColorbho.dll =>PUP.PrimaryColor

---\\ Applications lancées au démarrage du sytème (O4) (6) - 1s
O4 - HKLM\..\Run: [ASUSPRP] . (.ASUSTek Computer Inc. - ASUS Product Register Program.) -- C:\Program Files\ASUS\APRP\aprp.exe
O4 - HKLM\..\Run: [DptfPolicyLpmServiceHelper] . (.Intel Corporation - Intel DPTF LPM Service Helper.) -- C:\Windows\System32\DptfPolicyLpmServiceHelper.exe
O4 - HKLM\..\Run: [RtkNGUI] . (.Realtek Semiconductor - Gestionnaire audio Realtek.) -- C:\Program Files\Realtek\Audio\AP\RtkNGUI.exe
O4 - HKLM\..\Run: [AvastUI.exe] . (.Avast Software s.r.o. - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
O4 - HKCU\..\Run: [GoogleChromeAutoLaunch_953EF67731FE90443E0ADD39CEA0DC09] C:\Program Files\Crossbrowse\Crossbrowse\Application\crossbrowse.exe (.not file.) =>PUP.Optional.CrossBrowse
O4 - HKUS\S-1-5-21-3659220997-3058789108-1826297288-1001\..\Run: [GoogleChromeAutoLaunch_953EF67731FE90443E0ADD39CEA0DC09] C:\Program Files\Crossbrowse\Crossbrowse\Application\crossbrowse.exe (.not file.) =>PUP.Optional.CrossBrowse

---\\ Modification Domaine/Adresses DNS (O17) (8) - 0s
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 40.54.1.18
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpDomain = WDS-18.COM
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpDomain = lan
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: DhcpNameServer = 40.54.1.18
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: DhcpDomain = WDS-18.COM
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: DhcpDomain = lan

---\\ Liste des services NT non Microsoft et non désactivés (O23) (17) - 3s
O23 - Service: ASUS HID Access Service (AsHidService) . (.ASUSTek Computer Inc. - AsHidSrv Service.) - C:\Program Files\ASUS\ATK Package\ATK Hotkey\AsHidSrv.exe
O23 - Service: ASLDR Service (ASLDRService) . (.ASUSTek Computer Inc. - ASLDR Service.) - C:\Program Files\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) . (.ASUS - GFNEXSrv.) - C:\Program Files\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
O23 - Service: Avast Antivirus (avast! Antivirus) . (.Avast Software s.r.o. - avast! Service.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Avast Firewall (avast! Firewall) . (.Avast Software s.r.o. - avast! firewall service.) - C:\Program Files\AVAST Software\Avast\afwServ.exe
O23 - Service: @oem26.inf,%BcmBtRSupport.SVCNAME%;Bluetooth Driver Managem (BcmBtRSupport) . (.Broadcom Corporation. - Bluetooth Radio Management Support.) - C:\Windows\System32\BtwRSupportService.exe
O23 - Service: @oem17.inf,%WIN32_DPTF_PARTICIPANT_PROC_SERVICE_DISPLAY_NAM (DptfParticipantProcessorService) . (.Intel Corporation - Intel DPTF Processor Service.) - C:\Windows\System32\DptfParticipantProcessorService.exe
O23 - Service: @oem17.inf,%WIN32_DPTF_POLICY_CRITICAL_SERVICE_DISPLAY_NAME (DptfPolicyCriticalService) . (.Intel Corporation - Intel DPTF Critical Service.) - C:\Windows\System32\DptfPolicyCriticalService.exe
O23 - Service: @oem17.inf,%WIN32_DPTF_POLICY_LPM_SERVICE_DISPLAY_NAME%;Int (DptfPolicyLpmService) . (.Intel Corporation - Intel DPTF LPM Service.) - C:\Windows\System32\DptfPolicyLpmService.exe
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService1.0.0.0) . (.Intel Corporation - igfxCUIService Module.) - C:\Windows\System32\igfxCUIService.exe
O23 - Service: Infonaut 1.10.0.14 Client Service (insvc_1.10.0.14) . (...) - C:\Program Files\Infonaut_1.10.0.14\Service\insvc.exe (.not file.) =>PUP.Optional.Infonaut
O23 - Service: Intel(R) Capability Licensing Service Interface (Intel(R) Capability Licensing Service Interface) . (.Intel(R) Corporation - Intel(R) Capability Licensing Service Inter.) - C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface (jhi_service) . (.Intel Corporation - Intel(R) Dynamic Application Loader Host In.) - C:\Program Files\Intel\TXE Components\DAL\jhi_service.exe
O23 - Service: Update Primary Color (Update Primary Color) . (...) - C:\Program Files\Primary Color\updatePrimaryColor.exe =>PUP.Optional.PrimaryColor
O23 - Service: Util Primary Color (Util Primary Color) . (...) - C:\Program Files\Primary Color\bin\utilPrimaryColor.exe =>PUP.Optional.PrimaryColor
O23 - Service: wrpKwjdHFeH (wrpKwjdHFeH) . (.Irrational Number Applications - WebShield Service.) - C:\ProgramData\KmxHuHwH\wrpKwjdHFeH.exe =>PUP.Optional.WebShield

---\\ Tâches planifiées en automatique (O39) (25) - 3s
[MD5.761986319F4F6EDB33B3F046D254C781] [APT] [ASUS Live Update1] (.ASUSTeK Computer Inc..) -- C:\Program Files\ASUS\ASUS Live Update\LiveUpdate.exe [2998552]
[MD5.761986319F4F6EDB33B3F046D254C781] [APT] [ASUS Live Update2] (.ASUSTeK Computer Inc..) -- C:\Program Files\ASUS\ASUS Live Update\LiveUpdate.exe [2998552]
[MD5.EBCB7B97A720AE9E445CFA7119F5C5B0] [APT] [ASUS Patch for Touch Panel] (.ASUSTek Computer INC..) -- C:\ProgramData\AsTouchPanel\AsPatchTouchPanel.exe [144512]
[MD5.11411785384650EBF3A59D9DF64FFD53] [APT] [ASUS Smart Gesture Launcher] (.AsusTek.) -- C:\Program Files\ASUS\ASUS Smart Gesture\AsTPCenter\x86\AsusTPLauncher.exe [17208]
[MD5.08B018EF53C79AF2DAC005B494B9AF53] [APT] [ATK Package 36D18D69AFC3] (.ASUSTek Computer Inc..) -- C:\Program Files\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [109880]
[MD5.FAAE091936E04BDE3B6041AB5C16BC7B] [APT] [avast! Emergency Update] (.Avast Software s.r.o..) -- C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [1298776]
[MD5.E1B44A75947137F4143308D566889837] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe [107848]
[MD5.E1B44A75947137F4143308D566889837] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe [107848]
[MD5.B3537E9531D27DE352BAEC65DC4D79DD] [APT] [One System Care Monitor] (.Copyright (C) 2015.) -- C:\Program Files\OneSystemCare\CleanupConsole.exe [485984] =>PUP.Optional.OneSystemCare
[MD5.C1950D2C11B9466F7490F7DEE53A9D3F] [APT] [One System CarePeriod] (...) -- C:\Program Files\OneSystemCare\OneSystemCare.exe [2250848] =>PUP.Optional.OneSystemCare
[MD5.00000000000000000000000000000000] [APT] [ProPCCleaner_Start] (...) -- C:\Program Files\Pro PC Cleaner\ProPCCleaner.exe (.not file.) [0] =>PUP.Optional.ProPCCleaner
[MD5.EFF8FFF2D81A26919EC1D1FCEEDEDAAD] [APT] [Update Checker] (...) -- C:\Program Files\ASUS\ASUS Live Update\UpdateChecker.exe [12288]
O39 - APT: One System CarePeriod - (..) -- C:\Windows\Tasks\One System CarePeriod.job [300] =>PUP.Optional.OneSystemCare
O39 - APT: ASUS Live Update1 - (.ASUSTeK Computer Inc..) -- C:\Windows\System32\Tasks\ASUS Live Update1 [3462]
O39 - APT: ASUS Live Update2 - (.ASUSTeK Computer Inc..) -- C:\Windows\System32\Tasks\ASUS Live Update2 [3452]
O39 - APT: ASUS Patch for Touch Panel - (.ASUSTek Computer INC..) -- C:\Windows\System32\Tasks\ASUS Patch for Touch Panel [3254]
O39 - APT: ASUS Smart Gesture Launcher - (.AsusTek.) -- C:\Windows\System32\Tasks\ASUS Smart Gesture Launcher [3526]
O39 - APT: ATK Package 36D18D69AFC3 - (.ASUSTek Computer Inc..) -- C:\Windows\System32\Tasks\ATK Package 36D18D69AFC3 [3550]
O39 - APT: avast! Emergency Update - (.Avast Software s.r.o..) -- C:\Windows\System32\Tasks\avast! Emergency Update [4182]
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\Microsoft OneDrive Auto Update Task-S-1-5-21-3659220997-3058789108-1826297288-1001 [3114]
O39 - APT: One System Care Monitor - (.Copyright (C) 2015.) -- C:\Windows\System32\Tasks\One System Care Monitor [3272] =>PUP.Optional.OneSystemCare
O39 - APT: One System CarePeriod - (..) -- C:\Windows\System32\Tasks\One System CarePeriod [2872] =>PUP.Optional.OneSystemCare
O39 - APT: ProPCCleaner_Start - (..) -- C:\Windows\System32\Tasks\ProPCCleaner_Start [3202] =>PUP.Optional.ProPCCleaner
O39 - APT: Update Checker - (..) -- C:\Windows\System32\Tasks\Update Checker [3370]
O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\{CCE2A157-3B0C-4BE0-B1CD-60BE05812E77} [3190]

---\\ Logiciels installés (O42) (22) - 6s
O42 - Logiciel: Windows Driver Package - ASUS (AsusHID) Mouse (03/17/2014 3.0.0.27) - (.ASUS.) [HKLM] -- A2E56402A9DA7D645E15F917A8AD8C50FDC80753
O42 - Logiciel: Avast Premier - (.AVAST Software.) [HKLM] -- Avast
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM] -- Google Chrome
O42 - Logiciel: Lights Cinema 1.3betaV18.04 - (.Cinema PlusV18.04.) [HKLM] -- Lights Cinema 1.3betaV18.04
O42 - Logiciel: One System Care - (.OneSystemCare.) [HKLM] -- OneSystemCare =>PUP.Optional.OneSystemCare
O42 - Logiciel: Primary Color - (.Primary Color.) [HKLM] -- Primary Color =>PUP.Optional.Sambreel
O42 - Logiciel: Web Shield - (.Irrational Number Applications.) [HKLM] -- WebShield =>PUP.Optional.WebShield
O42 - Logiciel: MaintenanceService 1.0.0 - (.CSDI.) [HKLM] -- zz.337.mcc
O42 - Logiciel: ASUS Screen Saver - (.ASUS.) [HKLM] -- {0FBEEDF8-30FA-4FA3-B31F-C9C7E7E8DFA2}
O42 - Logiciel: Intel(R) Trusted Execution Engine - (.Intel Corporation.) [HKLM] -- {176E2755-0A17-42C6-88E2-192AB2131278}
O42 - Logiciel: ASUS Smart Gesture - (.ASUS.) [HKLM] -- {4D3286A6-F6AB-498A-82A4-E4F040529F3D}
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {60EC980A-BDA2-4CB6-A427-B07A5498B4CA}
O42 - Logiciel: Intel(R) Trusted Execution Engine Driver - (.Intel Corporation.) [HKLM] -- {6D5305DC-8124-47AA-8EB8-D00C51048A93}
O42 - Logiciel: Realtek I2S Audio - (.Realtek Semiconductor Corp..) [HKLM] -- {89A448AA-3301-46AA-AFC3-34F2D7C670E8}
O42 - Logiciel: Office 15 Click-to-Run Licensing Component - (.Microsoft Corporation.) [HKLM] -- {90150000-007E-0000-0000-0000000FF1CE}
O42 - Logiciel: Office 15 Click-to-Run Extensibility Component - (.Microsoft Corporation.) [HKLM] -- {90150000-008C-0000-0000-0000000FF1CE}
O42 - Logiciel: Office 15 Click-to-Run Localization Component - (.Microsoft Corporation.) [HKLM] -- {90150000-008C-040C-0000-0000000FF1CE}
O42 - Logiciel: ATK Package - (.ASUS.) [HKLM] -- {AB5C933E-5C7D-4D30-B314-9C83A49B94BE}
O42 - Logiciel: Intel(R) Trusted Execution Engine - (.Intel Corporation.) [HKLM] -- {B99DC3D1-C45C-4C33-A1AA-086F1EF51C46}
O42 - Logiciel: Intel(R) Processor Graphics - (.Intel Corporation.) [HKLM] -- {F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}
O42 - Logiciel: ASUS Live Update - (.ASUS.) [HKLM] -- {FA540E67-095C-4A1B-97BA-4D547DEC9AF4}
O42 - Logiciel: Microsoft OneDrive - (.Microsoft Corporation.) [HKCU] -- OneDriveSetup.exe

---\\ HKCU & HKLM Software Keys (64) - 6s
HKLM\SOFTWARE\AdwCleaner
HKLM\SOFTWARE\Agere
HKLM\SOFTWARE\AppDataLow
HKLM\SOFTWARE\AsLdr
HKLM\SOFTWARE\ASUS
HKLM\SOFTWARE\AVAST Software
HKLM\SOFTWARE\ECAREME
HKLM\SOFTWARE\Google
HKLM\SOFTWARE\IHProtect =>PUP.Optional.AgentODR
HKLM\SOFTWARE\Intel
HKLM\SOFTWARE\istartsurfSoftware =>PUP.Optional.IsStart
HKLM\SOFTWARE\Khronos
HKLM\SOFTWARE\Lights Cinema 1.3betaV18.04
HKLM\SOFTWARE\Lights Cinema 1.3betaV18.04-nv =>PUP.Optional.CrossRider
HKLM\SOFTWARE\Lights Cinema 1.3betaV18.04-nv-ie =>PUP.Optional.CrossRider
HKLM\SOFTWARE\LSI
HKLM\SOFTWARE\Macromedia
HKLM\SOFTWARE\MaxComputerCleaner =>PUP.Optional.MaxComputerCleaner
HKLM\SOFTWARE\MaxPower
HKLM\SOFTWARE\Mozilla
HKLM\SOFTWARE\MozillaPlugins
HKLM\SOFTWARE\ODBC
HKLM\SOFTWARE\Primary Color =>PUP.Optional.Sambreel
HKLM\SOFTWARE\Realtek
HKLM\SOFTWARE\Realtek Semiconductor Corp.
HKLM\SOFTWARE\RegisteredApplications
HKLM\SOFTWARE\Software
HKLM\SOFTWARE\StormWatchApp =>PUP.Optional.StormWatch
HKLM\SOFTWARE\SupDp =>PUP.Optional.SupTab
HKLM\SOFTWARE\supTab =>PUP.Optional.SupTab
HKLM\SOFTWARE\supWindowsMangerProtect =>PUP.Optional.Fuyu
HKLM\SOFTWARE\Synaptics
HKLM\SOFTWARE\WebBar =>PUP.Optional.WebBar
HKCU\SOFTWARE\AOL
HKCU\SOFTWARE\AppDataLow
HKCU\SOFTWARE\ASUS
HKCU\SOFTWARE\AVAST Software
HKCU\SOFTWARE\cacaoweb =>PUP.Optional.CacaoWeb
HKCU\SOFTWARE\Chromium
HKCU\SOFTWARE\ECAREME
HKCU\SOFTWARE\Google
HKCU\SOFTWARE\InstallPath
HKCU\SOFTWARE\Intel
HKCU\SOFTWARE\Kromtech
HKCU\SOFTWARE\Lights Cinema 1.3betaV18.04
HKCU\SOFTWARE\Lights Cinema 1.3betaV18.04-nv =>PUP.Optional.CrossRider
HKCU\SOFTWARE\Lights Cinema 1.3betaV18.04-nv-ie =>PUP.Optional.CrossRider
HKCU\SOFTWARE\LightsCinema1.3betaV18.04
HKCU\SOFTWARE\Macromedia
HKCU\SOFTWARE\Mine
HKCU\SOFTWARE\MozillaPlugins
HKCU\SOFTWARE\Netscape
HKCU\SOFTWARE\ODBC
HKCU\SOFTWARE\One System Care =>PUP.Optional.OneSystemCare
HKCU\SOFTWARE\Primary Color =>PUP.Optional.Sambreel
HKCU\SOFTWARE\ProPCCleanerConfig =>PUP.Optional.ProPCCleaner
HKCU\SOFTWARE\ProPCCleanerLanguage =>PUP.Optional.ProPCCleaner
HKCU\SOFTWARE\Realtek
HKCU\SOFTWARE\RegisteredApplications
HKCU\SOFTWARE\Software
HKCU\SOFTWARE\StormWatchApp =>PUP.Optional.StormWatch
HKCU\SOFTWARE\tstamptoken =>PUP.Optional.MaxComputerCleaner
HKCU\SOFTWARE\ZebHelpProcess Helper
HKCU\SOFTWARE\AppDataLow\Software

---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43) (108) - 7s
O43 - CFD: 2015/04/19 10:42:18 - [] D -- C:\Program Files\126249b2-cb0b-4e86-a55d-3537bdde1a1e =>PUP.Optional.CrossRider
O43 - CFD: 2015/05/16 21:42:32 - [] D -- C:\Program Files\ASUS
O43 - CFD: 2015/04/19 10:42:18 - [] D -- C:\Program Files\AVAST Software
O43 - CFD: 2015/05/16 21:37:40 - [] D -- C:\Program Files\Common Files
O43 - CFD: 2014/10/20 04:13:43 - [] D -- C:\Program Files\DIFX
O43 - CFD: 2015/05/17 20:49:40 - [] D -- C:\Program Files\Google
O43 - CFD: 2014/10/20 04:05:48 - [] HD -- C:\Program Files\InstallShield Installation Information
O43 - CFD: 2014/10/20 04:19:29 - [] D -- C:\Program Files\Intel
O43 - CFD: 2015/06/11 13:59:41 - [] D -- C:\Program Files\Internet Explorer
O43 - CFD: 2015/05/03 13:43:05 - [] D -- C:\Program Files\Lights Cinema 1.3betaV18.04
O43 - CFD: 2015/05/03 13:04:11 - [0] D -- C:\Program Files\MaxComputerCleaner_v17.337 =>PUP.Optional.MaxComputerCleaner
O43 - CFD: 2014/10/20 03:57:51 - [] D -- C:\Program Files\Microsoft Office
O43 - CFD: 2015/06/26 19:28:52 - [] D -- C:\Program Files\Microsoft Office 15
O43 - CFD: 2015/04/17 12:19:55 - [] D -- C:\Program Files\Microsoft.NET
O43 - CFD: 2014/05/13 03:30:04 - [] D -- C:\Program Files\MSBuild
O43 - CFD: 2015/07/14 15:34:24 - [] D -- C:\Program Files\OneSystemCare =>PUP.Optional.OneSystemCare
O43 - CFD: 2015/07/16 04:15:40 - [] D -- C:\Program Files\Primary Color =>PUP.PrimaryColor
O43 - CFD: 2014/10/20 04:05:48 - [] D -- C:\Program Files\Realtek
O43 - CFD: 2014/05/13 03:30:04 - [] D -- C:\Program Files\Reference Assemblies
O43 - CFD: 2015/05/03 10:40:51 - [] D -- C:\Program Files\Software
O43 - CFD: 2013/08/22 09:24:44 - [0] HD -- C:\Program Files\Uninstall Information
O43 - CFD: 2015/04/27 15:22:23 - [] D -- C:\Program Files\Windows Defender
O43 - CFD: 2015/05/15 01:26:38 - [] D -- C:\Program Files\Windows Journal
O43 - CFD: 2015/04/27 15:22:24 - [] D -- C:\Program Files\Windows Mail
O43 - CFD: 2015/04/27 15:22:24 - [] D -- C:\Program Files\Windows Media Player
O43 - CFD: 2015/04/22 23:37:50 - [] D -- C:\Program Files\Windows Multimedia Platform
O43 - CFD: 2013/08/22 10:17:26 - [] D -- C:\Program Files\Windows NT
O43 - CFD: 2015/04/27 15:22:24 - [] D -- C:\Program Files\Windows Photo Viewer
O43 - CFD: 2015/04/22 23:37:50 - [] D -- C:\Program Files\Windows Portable Devices
O43 - CFD: 2013/08/22 10:17:26 - [] SHD -- C:\Program Files\Windows Sidebar
O43 - CFD: 2015/07/16 04:31:57 - [] HD -- C:\Program Files\WindowsApps
O43 - CFD: 2015/04/22 23:36:41 - [] D -- C:\Program Files\WindowsPowerShell
O43 - CFD: 2015/04/22 23:37:52 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility
O43 - CFD: 2015/04/22 23:37:52 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 2015/04/22 23:37:52 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 2015/05/16 21:42:32 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS
O43 - CFD: 2015/04/17 12:50:04 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
O43 - CFD: 2015/05/17 20:50:06 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
O43 - CFD: 2013/08/22 10:17:27 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 2015/04/17 12:15:40 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
O43 - CFD: 2015/07/14 15:34:15 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\One System Care =>PUP.Optional.OneSystemCare
O43 - CFD: 2013/08/22 10:17:27 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp
O43 - CFD: 2015/04/22 23:37:52 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools
O43 - CFD: 2014/03/18 09:29:21 - [0] RHD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC
O43 - CFD: 2013/08/22 09:23:42 - [0] SHD -- C:\ProgramData\Application Data
O43 - CFD: 2014/10/20 04:25:13 - [] D -- C:\ProgramData\AsTouchPanel
O43 - CFD: 2014/05/12 19:43:40 - [] D -- C:\ProgramData\ASUS WebStorage
O43 - CFD: 2014/05/12 19:43:08 - [] D -- C:\ProgramData\ASUSLogos
O43 - CFD: 2015/04/17 12:24:31 - [] D -- C:\ProgramData\AVAST Software
O43 - CFD: 2013/08/22 09:23:42 - [0] SHD -- C:\ProgramData\Desktop
O43 - CFD: 2013/08/22 09:23:42 - [0] SHD -- C:\ProgramData\Documents
O43 - CFD: 2015/07/08 20:34:44 - [] D -- C:\ProgramData\Eglaitan
O43 - CFD: 2015/07/14 15:37:25 - [] D -- C:\ProgramData\IHProtectUpDate =>PUP.Optional.AgentODR
O43 - CFD: 2014/10/20 04:19:31 - [] D -- C:\ProgramData\Intel
O43 - CFD: 2015/05/03 11:34:41 - [] D -- C:\ProgramData\KmxHuHwH
O43 - CFD: 2015/04/20 15:25:32 - [] SD -- C:\ProgramData\Microsoft
O43 - CFD: 2015/04/17 12:24:50 - [] D -- C:\ProgramData\Microsoft OneDrive
O43 - CFD: 2015/06/26 19:30:28 - [] D -- C:\ProgramData\regid.1991-06.com.microsoft
O43 - CFD: 2013/08/22 09:23:42 - [0] SHD -- C:\ProgramData\Start Menu
O43 - CFD: 2013/08/22 09:23:42 - [0] SHD -- C:\ProgramData\Templates
O43 - CFD: 2015/05/03 11:34:10 - [] D -- C:\ProgramData\WebShield =>PUP.Optional.WebShield
O43 - CFD: 2014/05/12 19:43:40 - [] D -- C:\ProgramData\WebStorage
O43 - CFD: 2015/07/15 13:45:52 - [] D -- C:\ProgramData\WindowsMangerProtect =>PUP.Optional.Fuyu
O43 - CFD: 2015/04/17 12:19:59 - [] D -- C:\Program Files\Common Files\DESIGNER
O43 - CFD: 2014/10/20 04:05:46 - [] D -- C:\Program Files\Common Files\InstallShield
O43 - CFD: 2014/10/20 04:03:24 - [] D -- C:\Program Files\Common Files\Intel
O43 - CFD: 2015/04/20 15:25:26 - [] D -- C:\Program Files\Common Files\microsoft shared
O43 - CFD: 2013/08/22 10:17:35 - [] D -- C:\Program Files\Common Files\Services
O43 - CFD: 2015/04/27 15:22:24 - [] D -- C:\Program Files\Common Files\System
O43 - CFD: 2015/05/16 21:16:43 - [] D -- C:\Users\andrea le helley\AppData\Roaming\000233E7-1430642698-0F0A-FFFF-382C4A7F7816
O43 - CFD: 2015/04/17 19:06:32 - [] D -- C:\Users\andrea le helley\AppData\Roaming\Adobe
O43 - CFD: 2015/04/17 12:51:29 - [] D -- C:\Users\andrea le helley\AppData\Roaming\AVAST Software
O43 - CFD: 2015/04/23 11:57:58 - [] D -- C:\Users\andrea le helley\AppData\Roaming\Identities
O43 - CFD: 2015/07/14 20:32:08 - [] D -- C:\Users\andrea le helley\AppData\Roaming\istartsurf =>PUP.Optional.IsStart
O43 - CFD: 2015/04/17 15:40:38 - [] D -- C:\Users\andrea le helley\AppData\Roaming\Macromedia
O43 - CFD: 2015/06/17 15:32:23 - [] SD -- C:\Users\andrea le helley\AppData\Roaming\Microsoft
O43 - CFD: 2015/04/17 12:09:29 - [] D -- C:\Users\andrea le helley\AppData\Roaming\WebStorage
O43 - CFD: 2015/07/16 04:40:09 - [] D -- C:\Users\andrea le helley\AppData\Roaming\ZHP
O43 - CFD: 2015/04/17 19:05:46 - [0] SHD -- C:\Users\andrea le helley\AppData\Local\Application Data
O43 - CFD: 2015/05/17 20:45:57 - [] D -- C:\Users\andrea le helley\AppData\Local\Apps
O43 - CFD: 2015/05/03 13:46:09 - [] D -- C:\Users\andrea le helley\AppData\Local\avaavbxvba =>PUP.Optional.SearchProtect
O43 - CFD: 2015/05/17 20:46:34 - [0] D -- C:\Users\andrea le helley\AppData\Local\Deployment
O43 - CFD: 2015/07/07 04:28:32 - [0] D -- C:\Users\andrea le helley\AppData\Local\Diagnostics
O43 - CFD: 2015/06/15 12:12:01 - [0] SHD -- C:\Users\andrea le helley\AppData\Local\EmieBrowserModeList
O43 - CFD: 2015/06/15 12:12:00 - [0] SHD -- C:\Users\andrea le helley\AppData\Local\EmieSiteList
O43 - CFD: 2015/06/15 12:12:01 - [0] SHD -- C:\Users\andrea le helley\AppData\Local\EmieUserList
O43 - CFD: 2015/07/13 14:33:18 - [] D -- C:\Users\andrea le helley\AppData\Local\fontconfig
O43 - CFD: 2015/07/13 14:33:13 - [] D -- C:\Users\andrea le helley\AppData\Local\gegl-0.2
O43 - CFD: 2015/04/19 10:20:33 - [] D -- C:\Users\andrea le helley\AppData\Local\Google
O43 - CFD: 2015/07/13 14:40:42 - [] D -- C:\Users\andrea le helley\AppData\Local\gtk-2.0
O43 - CFD: 2015/06/02 08:21:02 - [] D -- C:\Users\andrea le helley\AppData\Local\GWX
O43 - CFD: 2015/04/17 19:05:46 - [0] SHD -- C:\Users\andrea le helley\AppData\Local\Historique
O43 - CFD: 2015/06/06 23:08:34 - [] D -- C:\Users\andrea le helley\AppData\Local\Microsoft
O43 - CFD: 2015/06/17 09:50:57 - [] D -- C:\Users\andrea le helley\AppData\Local\Microsoft Help
O43 - CFD: 2015/07/13 11:42:03 - [] D -- C:\Users\andrea le helley\AppData\Local\Packages
O43 - CFD: 2015/04/19 10:10:58 - [] D -- C:\Users\andrea le helley\AppData\Local\Programs
O43 - CFD: 2015/05/03 11:51:34 - [] D -- C:\Users\andrea le helley\AppData\Local\Pro_PC_Cleaner =>USP.PCCleaner
O43 - CFD: 2015/04/19 10:10:50 - [] D -- C:\Users\andrea le helley\AppData\Local\Software
O43 - CFD: 2015/07/16 04:40:07 - [] D -- C:\Users\andrea le helley\AppData\Local\Temp
O43 - CFD: 2015/04/17 19:05:46 - [0] SHD -- C:\Users\andrea le helley\AppData\Local\Temporary Internet Files
O43 - CFD: 2015/04/17 12:14:10 - [] D -- C:\Users\andrea le helley\AppData\Local\VirtualStore
O43 - CFD: 2015/07/16 04:39:53 - [] D -- C:\Users\andrea le helley\AppData\Local\WebShield =>PUP.Optional.WebShield
O43 - CFD: 2014/03/18 10:00:58 - [] RD -- C:\Users\andrea le helley\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
O43 - CFD: 2013/08/22 10:17:27 - [] RD -- C:\Users\andrea le helley\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 2015/04/20 15:31:50 - [] RD -- C:\Users\andrea le helley\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 2013/08/22 10:17:27 - [] D -- C:\Users\andrea le helley\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 2015/07/14 20:26:47 - [] RD -- C:\Users\andrea le helley\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
O43 - CFD: 2014/05/13 04:33:32 - [] RD -- C:\Users\andrea le helley\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools

---\\ Liste des pilotes du système (SDL) (O58) (68) - 6s
O58 - SDL:2013/08/22 07:33:26 A . (.LSI - LSI 3ware SCSI Storport Driver.) -- C:\Windows\System32\drivers\3ware.sys [86368]
O58 - SDL:2013/08/22 07:33:25 A . (.PMC-Sierra - PMC-Sierra Storport Driver For SPC8x6G SAS.) -- C:\Windows\System32\drivers\adp80xx.sys [773472]
O58 - SDL:2013/06/18 14:35:24 A . (.LSI Corp - SoftModem Device Driver.) -- C:\Windows\System32\drivers\AGRSM.sys [1035776]
O58 - SDL:2013/08/22 07:33:25 A . (.Advanced Micro Devices - AHCI 1.3 Device Driver.) -- C:\Windows\System32\drivers\amdsata.sys [72544]
O58 - SDL:2013/08/22 07:33:26 A . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller D.) -- C:\Windows\System32\drivers\amdsbs.sys [215392]
O58 - SDL:2013/08/22 07:33:24 A . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\Windows\System32\drivers\amdxata.sys [22880]
O58 - SDL:2013/08/22 07:33:26 A . (.PMC-Sierra, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\System32\drivers\arcsas.sys [101728]
O58 - SDL:2013/10/08 03:47:18 A . (.ASUS - HID driver for ASUS Wireless Radio Control.) -- C:\Windows\System32\drivers\AsHIDSwitch.sys [17720]
O58 - SDL:2014/04/08 19:08:54 A . (.ASUS Corporation - Asus TP Filter Driver (x86).) -- C:\Windows\System32\drivers\AsusHID.sys [68888]
O58 - SDL:2015/04/17 12:47:01 A . (...) -- C:\Windows\System32\drivers\aswHwid.sys [24144]
O58 - SDL:2015/04/17 12:46:28 A . (.Avast Software s.r.o. - avast! Keyboard Filter Driver.) -- C:\Windows\System32\drivers\aswKbd.sys [26096]
O58 - SDL:2015/04/17 12:47:02 A . (.Avast Software s.r.o. - avast! File System Minifilter for Windows 2.) -- C:\Windows\System32\drivers\aswMonFlt.sys [73440]
O58 - SDL:2015/04/17 12:46:11 A . (.Avast Software s.r.o. - avast! Filtering NDIS driver.) -- C:\Windows\System32\drivers\aswNdisFlt.sys [271248]
O58 - SDL:2015/04/17 12:47:01 A . (.Avast Software s.r.o. - avast! WFP Redirect Driver.) -- C:\Windows\System32\drivers\aswRdr2.sys [81728]
O58 - SDL:2015/04/17 12:47:02 A . (...) -- C:\Windows\System32\drivers\aswRvrt.sys [49904]
O58 - SDL:2015/04/17 12:46:30 A . (.Avast Software s.r.o. - avast! Virtualization Driver.) -- C:\Windows\System32\drivers\aswSnx.sys [788272]
O58 - SDL:2015/04/17 12:47:03 A . (.Avast Software s.r.o. - avast! self protection module.) -- C:\Windows\System32\drivers\aswSP.sys [427736]
O58 - SDL:2015/04/17 12:47:04 A . (.Avast Software s.r.o. - Stream Filter.) -- C:\Windows\System32\drivers\aswStm.sys [106912]
O58 - SDL:2015/04/17 12:47:03 A . (...) -- C:\Windows\System32\drivers\aswVmm.sys [208024]
O58 - SDL:2013/07/18 17:53:33 A . (.ASIX Electronics Corp. - ASIX AX88772/AX88772A/AX88772B/AX88772C Net.) -- C:\Windows\System32\drivers\ax88772.sys [97896]
O58 - SDL:2014/04/07 11:51:54 A . (.Broadcom Corp - Broadcom SDIO WiFi Driver wireless driver.) -- C:\Windows\System32\drivers\bcmdhd63.sys [305368]
O58 - SDL:2014/04/07 11:51:50 A . (.Windows (R) Win 7 DDK provider - BCM Function 2 Device Driver.) -- C:\Windows\System32\drivers\bcmfn2.sys [16088]
O58 - SDL:2014/10/20 04:09:37 A . (.Broadcom Corporation. - Broadcom Bluetooth USB AMP Filter for Windo.) -- C:\Windows\System32\drivers\btwampfl.sys [144600]
O58 - SDL:2014/10/20 04:09:37 A . (.Broadcom Corporation. - Bluetooth Serial Bus Driver.) -- C:\Windows\System32\drivers\BtwSerialBus.sys [130776]
O58 - SDL:2013/12/02 13:42:42 A . (.Intel Corporation - Intel(R) Imaging Signal Processor 2400.) -- C:\Windows\System32\drivers\camera.sys [345088]
O58 - SDL:2013/09/06 14:25:18 A . (.Capella Microsystems, Inc. - Capella Micro Sensor Filter Driver.) -- C:\Windows\System32\drivers\CPLMACPI.sys [16488]
O58 - SDL:2014/03/18 18:04:40 A . (.Intel Corporation - Intel Dynamic Platform & Thermal Framework.) -- C:\Windows\System32\drivers\DptfDevDisplay.sys [28112]
O58 - SDL:2014/03/18 18:04:40 A . (.Intel Corporation - Intel Dynamic Platform & Thermal Framework.) -- C:\Windows\System32\drivers\DptfDevGen.sys [36304]
O58 - SDL:2014/03/18 18:04:40 A . (.Intel Corporation - Intel Dynamic Platform & Thermal Framework.) -- C:\Windows\System32\drivers\DptfDevPower.sys [25552]
O58 - SDL:2014/03/18 18:04:40 A . (.Intel Corporation - Intel Dynamic Platform & Thermal Framework.) -- C:\Windows\System32\drivers\DptfDevProc.sys [80848]
O58 - SDL:2014/03/18 18:04:40 A . (.Intel Corporation - Intel Dynamic Platform & Thermal Framework.) -- C:\Windows\System32\drivers\DptfManager.sys [181712]
O58 - SDL:2013/06/18 14:21:30 A . (.Intel Corporation - Intel(R) Gigabit Adapter NDIS 6.x driver.) -- C:\Windows\System32\drivers\e1i6332.sys [379904]
O58 - SDL:2013/08/22 07:33:29 A . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Drive.) -- C:\Windows\System32\drivers\HpSAMD.sys [56672]
O58 - SDL:2013/07/23 23:18:30 A . (.Intel Corporation - Intel(R) Atom(TM) Processor GPIO Controller.) -- C:\Windows\System32\drivers\iaiogpio.sys [22016]
O58 - SDL:2014/03/18 18:04:40 A . (.Intel Corporation - GPIO Controller Driver E.) -- C:\Windows\System32\drivers\iaiogpioe.sys [23552]
O58 - SDL:2014/03/18 18:04:40 A . (.Intel Corporation - GPIOVirtual Controller Driver.) -- C:\Windows\System32\drivers\iaiogpiovirtual.sys [16896]
O58 - SDL:2013/07/23 23:18:30 A . (.Intel Corporation - Intel(R) Atom(TM) Processor I2C Controller.) -- C:\Windows\System32\drivers\iaioi2c.sys [61936]
O58 - SDL:2014/03/18 18:04:40 A . (.Intel Corporation - I2C Controller Driver E.) -- C:\Windows\System32\drivers\iaioi2ce.sys [58368]
O58 - SDL:2014/03/18 18:04:40 A . (.Intel Corporation - UART Controller Driver.) -- C:\Windows\System32\drivers\iaiouart.sys [87552]
O58 - SDL:2013/12/16 04:13:40 A . (.Intel Corporation - Intel Rapid Storage Technology driver - x86.) -- C:\Windows\System32\drivers\iaStorA.sys [489832]
O58 - SDL:2013/08/10 02:39:44 A . (.Intel Corporation - Intel Rapid Storage Technology driver (inbo.) -- C:\Windows\System32\drivers\iaStorAV.sys [524784]
O58 - SDL:2013/08/22 07:33:29 A . (.Intel Corporation - Intel Matrix Storage Manager driver - ia32.) -- C:\Windows\System32\drivers\iaStorV.sys [333664]
O58 - SDL:2014/06/10 05:48:54 A . (.Intel Corporation - Intel Graphics Kernel Mode Driver.) -- C:\Windows\System32\drivers\igdkmd32.sys [2990592]
O58 - SDL:2014/05/07 00:39:17 A . (.Intel Corporation - Intel® WiDi Solution.) -- C:\Windows\System32\drivers\intelaud.sys [32152]
O58 - SDL:2014/04/03 10:07:52 A . (.Intel(R) Corporation - Intel(R) SST Audio Driver.) -- C:\Windows\System32\drivers\isstrtc.sys [259584]
O58 - SDL:2014/05/07 00:39:17 A . (.Intel Corporation - Intel® WiDi Solution.) -- C:\Windows\System32\drivers\iwdbus.sys [23448]
O58 - SDL:2013/08/22 07:33:29 A . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas.sys [94048]
O58 - SDL:2013/08/22 07:33:30 A . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas2.sys [79712]
O58 - SDL:2013/08/22 07:33:30 A . (.LSI Corporation - LSI SAS Gen3 Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas3.sys [68960]
O58 - SDL:2013/08/22 07:33:29 A . (.LSI Corporation - LSI SSS PCIe/Flash Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sss.sys [69472]
O58 - SDL:2014/03/18 18:04:40 A . (.Intel Corporation - MBI driver.) -- C:\Windows\System32\drivers\MBI.sys [21456]
O58 - SDL:2013/08/22 07:33:30 A . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows.) -- C:\Windows\System32\drivers\megasas.sys [51552]
O58 - SDL:2013/08/22 07:33:29 A . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\System32\drivers\megasr.sys [464736]
O58 - SDL:2013/12/02 13:42:42 A . (.Intel Corporation - Camera Sensor MT9M114.) -- C:\Windows\System32\drivers\mt9m114.sys [38912]
O58 - SDL:2013/08/22 07:33:32 A . (.Marvell Semiconductor, Inc. - Marvell Flash Controller Driver.) -- C:\Windows\System32\drivers\mvumis.sys [58208]
O58 - SDL:2013/06/18 14:22:48 A . (.Intel Corporation - Intel® Wireless WiFi Link Driver.) -- C:\Windows\System32\drivers\Netwsn00.sys [10372096]
O58 - SDL:2013/08/22 07:33:32 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\System32\drivers\nvraid.sys [120160]
O58 - SDL:2013/08/22 07:33:33 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\System32\drivers\nvstor.sys [141664]
O58 - SDL:2014/03/18 18:04:40 A . (.Intel Corporation - BayTrail PMIC driver.) -- C:\Windows\System32\drivers\PMIC.sys [48128]
O58 - SDL:2014/03/14 07:07:12 A . (.Realtek Semiconductor Corp. - Realtek I2S Audio Codec Device Driver.) -- C:\Windows\System32\drivers\rtii2sac.sys [169176]
O58 - SDL:2013/08/22 10:16:47 A . (.Macrovision Corporation, Macrovision Europe Limited, - Macrovision SECURITY Driver.) -- C:\Windows\System32\drivers\secdrv.sys [20480]
O58 - SDL:2013/08/22 07:32:56 A . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\System32\drivers\sisraid2.sys [41312]
O58 - SDL:2013/08/22 07:32:57 A . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\System32\drivers\sisraid4.sys [79200]
O58 - SDL:2013/08/22 07:32:57 A . (.Promise Technology, Inc. - Promise SuperTrak EX Series Driver for Wind.) -- C:\Windows\System32\drivers\stexstor.sys [26976]
O58 - SDL:2014/03/18 18:04:38 A . (.Intel Corporation - Intel(R) Trusted Execution Engine Interface.) -- C:\Windows\System32\drivers\TXEI.sys [75792]
O58 - SDL:2013/08/22 07:33:00 A . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\viaide.sys [18272]
O58 - SDL:2013/08/22 07:33:01 A . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR X86-32.) -- C:\Windows\System32\drivers\vsmraid.sys [148832]
O58 - SDL:2013/08/22 07:33:01 A . (.VIA Corporation - VIA StorX RAID Controller Driver.) -- C:\Windows\System32\drivers\VSTXRAID.SYS [276832]

---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61) (17) - 30s
O61 - LFC: 2015/07/13 12:49:07 A . (.The GIMP Team.) -- C:\Users\andrea le helley\Downloads\gimp-2.8.14-setup-1.exe [91931728]
O61 - LFC: 2015/07/15 13:45:22 A . (..) -- C:\Users\andrea le helley\Desktop\cacaoweb.exe [532784] =>PUP.Optional.CacaoWeb
O61 - LFC: 2015/07/14 15:33:39 A . (..) -- C:\Users\andrea le helley\AppData\Local\Microsoft\Windows\INetCache\IE\ZWHDH2TJ\WikiBrowser[1].exe [565688] =>PUP.Optional.WikiBrowser
O61 - LFC: 2015/07/14 15:33:19 A . (..) -- C:\Users\andrea le helley\AppData\Local\Microsoft\Windows\INetCache\IE\UR6NFS06\aff_setup[1].exe [149206]
O61 - LFC: 2015/07/14 15:32:47 A . (..) -- C:\Users\andrea le helley\AppData\Local\Microsoft\Windows\INetCache\IE\UR6NFS06\Bundle_WikiBrowser[1].exe [103294] =>PUP.Optional.WikiBrowser
O61 - LFC: 2015/07/14 15:33:11 A . (.WiLink.com.) -- C:\Users\andrea le helley\AppData\Local\Microsoft\Windows\INetCache\IE\UR6NFS06\lly_istartsurf[1].exe [562272] =>PUP.Optional.IsStart
O61 - LFC: 2015/07/14 15:36:11 A . (.System NotifierV14.07.) -- C:\Users\andrea le helley\AppData\Local\Microsoft\Windows\INetCache\IE\UR6NFS06\mini_installer[1].exe [9137436]
O61 - LFC: 2015/07/14 15:34:00 A . (..) -- C:\Users\andrea le helley\AppData\Local\Microsoft\Windows\INetCache\IE\UR6NFS06\OneSystemCare[1].exe [4220296] =>PUP.Optional.OneSystemCare
O61 - LFC: 2015/07/14 15:32:55 A . (..) -- C:\Users\andrea le helley\AppData\Local\Microsoft\Windows\INetCache\IE\UR6NFS06\Setup[1].exe [152312]
O61 - LFC: 2015/07/14 15:35:13 A . (..) -- C:\Users\andrea le helley\AppData\Local\Microsoft\Windows\INetCache\IE\UR6NFS06\setup_gmsd_fr[1].exe [5770743]
O61 - LFC: 2015/07/16 04:12:00 A . (..) -- C:\Users\andrea le helley\AppData\Local\Microsoft\Windows\INetCache\IE\UR6NFS06\urlblockindex[2].bin [16]
O61 - LFC: 2015/07/14 15:33:47 A . (.Web Bar Media.) -- C:\Users\andrea le helley\AppData\Local\Microsoft\Windows\INetCache\IE\UR6NFS06\Web_Bar_Setup[1].exe [2193200]
O61 - LFC: 2015/07/14 15:34:48 A . (.Weather Protector LLC.) -- C:\Users\andrea le helley\AppData\Local\Microsoft\Windows\INetCache\IE\95QODRIH\stormwatch2_0[1].exe [299448] =>PUP.Optional.StormWatch
O61 - LFC: 2015/07/14 19:44:47 A . (..) -- C:\Users\andrea le helley\AppData\Local\Microsoft\Windows\INetCache\IE\76ABR0YQ\2772e890-b9ce-4e87-9db8-870403807056[1].exe [24346624]
O61 - LFC: 2015/07/14 15:33:58 A . (..) -- C:\Users\andrea le helley\AppData\Local\Microsoft\Windows\INetCache\IE\76ABR0YQ\StormWatchSetup[1].exe [561576] =>PUP.Optional.StormWatch
O61 - LFC: 2015/07/16 04:35:30 A . (..) -- C:\Users\andrea le helley\AppData\Local\Google\Chrome\User Data\ev_hashes_whitelist.bin [1113849]
O61 - LFC: 2015/07/13 10:14:22 A . (..) -- C:\Users\andrea le helley\AppData\Local\Google\Chrome\User Data\PepperFlash\18.0.0.209\pepflashplayer.dll [16307888]

---\\ Associations Shell Spawning (O67) (9) - 0s
O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe
O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\wscript.exe
O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe
O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S

---\\ Menu de démarrage Internet (SMI) (O68) (8) - 0s
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (...) -- C:\Program Files\Internet Explorer\iexplore.ex http://www.istartsurf.com/ =>PUP.Optional.IsStart
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe

---\\ Recherche d'infection sur les navigateurs internet (SBI) (O69) (4) - 1s
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (Bing) - http://www.bing.com/
O69 - SBI: SearchScopes [HKCU] {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} - (e) - http://www.istartsurf.com/ =>PUP.Optional.IsStart
O69 - SBI: SearchScopes [HKCU] {E733165D-CBCF-4FDA-883E-ADEF965B476C} - (Google) - http://www.istartsurf.com/ =>PUP.Optional.IsStart
O69 - SBI: SearchScopes [HKCU] {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} - (Google) - http://www.google.com/

---\\ Enumère les services démarrés par Svchost (SSS) (O83) (34) - 2s
O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d’application.) -- C:\Windows\System32\aelupsvc.dll [161792]
O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [126976]
O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [126976]
O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\System32\srvsvc.dll [250368]
O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\System32\gpsvc.dll [1212928]
O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\IKEEXT.DLL [733696]
O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur u.) -- C:\Windows\System32\iphlpsvc.dll [822784]
O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d’ouverture de session secon.) -- C:\Windows\System32\seclogon.dll [24064]
O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll [89600]
O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\System32\iscsiexe.dll [115712]
O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll [93696]
O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\System32\schedsvc.dll [1015808]
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll [185856]
O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédia.) -- C:\Windows\System32\mmcss.dll [74752]
O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\System32\browser.dll [108032]
O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll [187904]
O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à.) -- C:\Windows\System32\SessEnv.dll [296448]
O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll [64512]
O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\Windows\System32\KMSVC.DLL [75264]
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\Windows\System32\themeservice.dll [41984]
O83 - Search Svchost Services: wlidsvc (wlidsvc) . (.Microsoft Corporation - Service de compte Microsoft®.) -- C:\Windows\System32\wlidsvc.dll [1245184]
O83 - Search Svchost Services: lfsvc (lfsvc) . (.Microsoft Corporation - Service d’infrastructure de localisation Wi.) -- C:\Windows\System32\GeofenceMonitorService.dll [367104]
O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\Windows\System32\bdesvc.dll [297984]
O83 - Search Svchost Services: DsmSvc (DsmSvc) . (.Microsoft Corporation - Gestionnaire d’installation de périphérique.) -- C:\Windows\System32\DeviceSetupManager.dll [167424]
O83 - Search Svchost Services: NcaSvc (NcaSvc) . (.Microsoft Corporation - Service Assistant Connectivité réseau Micro.) -- C:\Windows\System32\NcaSvc.dll [142848]
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’.) -- C:\Windows\System32\rasauto.dll [95232]
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire des connexions d’accès à dista.) -- C:\Windows\System32\rasmans.dll [461824]
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll [183296]
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements systèm.) -- C:\Windows\System32\Sens.dll [58368]
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l’application d’assistance à.) -- C:\Windows\System32\ipnathlp.dll [390144]
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM.) -- C:\Windows\System32\tapisrv.dll [254464]
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Up.) -- C:\Windows\System32\wuaueng.dll [3040768]
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière.) -- C:\Windows\System32\qmgr.dll [734208]
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [576512]

---\\ Liste des exceptions du parefeu (FirewallRules) (O87) (2) - 2s
O87 - FAEL: "{D0BE2D09-71E7-4564-83E3-39BD44289AB4}" [In-None-P6-TRUE] .(.AVAST Software - avast! NG front end.) -- C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe
O87 - FAEL: "{89751CA2-1BE5-4EBA-A1AB-B66F2E023D30}" [In-None-P17-TRUE] .(.AVAST Software - avast! NG front end.) -- C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe

---\\ Recherche des packages WindowsInstaller (WIS) (O93) (NTFS) (1) - 1s
[MD5.] [WIS][2015/02/09 14:07:15] (.Max Computer Cleaner - Advanced Installer 11.5.1 build 60347.) -- C:\Windows\Installer\1e9349.msi [1280512] =>PUP.Optional.MaxComputerCleaner

---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped) (20) - 41s
SR - Auto [2013/09/09 11:05:10] [ 103224] ASUS HID Access Service (AsHidService) . (.ASUSTek Computer Inc..) - C:\Program Files\ASUS\ATK Package\ATK Hotkey\AsHidSrv.exe
SR - Auto [2014/03/26 16:24:44] [ 115512] ASLDR Service (ASLDRService) . (.ASUSTek Computer Inc..) - C:\Program Files\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
SR - Auto [2011/11/21 15:19:50] [ 96896] ATKGFNEX Service (ATKGFNEXSrv) . (.ASUS.) - C:\Program Files\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
SR - Auto [2015/04/17 12:46:45] [ 343336] Avast Antivirus (avast! Antivirus) . (.Avast Software s.r.o..) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
SR - Auto [2015/04/17 12:46:10] [ 107448] Avast Firewall (avast! Firewall) . (.Avast Software s.r.o..) - C:\Program Files\AVAST Software\Avast\afwServ.exe
SR - Demand [2015/04/17 12:46:12] [ 3205216] AvastVBox COM Service (AvastVBoxSvc) . (.Avast Software.) - C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
SS - Auto [2014/10/20 04:09:37] [ 1677016] @oem26.inf,%BcmBtRSupport.SVCNAME%;Bluetooth Driver Managem (BcmBtRSupport) . (.Broadcom Corporation..) - C:\Windows\System32\BtwRSupportService.exe
SS - Demand [2014/06/10 05:56:18] [ 278344] Intel(R) Content Protection HECI Service (cphs) . (.Intel Corporation.) - C:\Windows\System32\IntelCpHeciSvc.exe
SR - Auto [2014/03/18 18:04:40] [ 83408] @oem17.inf,%WIN32_DPTF_PARTICIPANT_PROC_SERVICE_DISPLAY_NAM (DptfParticipantProcessorService) . (.Intel Corporation.) - C:\Windows\System32\DptfParticipantProcessorService.exe
SR - Auto [2014/03/18 18:04:40] [ 97232] @oem17.inf,%WIN32_DPTF_POLICY_CRITICAL_SERVICE_DISPLAY_NAME (DptfPolicyCriticalService) . (.Intel Corporation.) - C:\Windows\System32\DptfPolicyCriticalService.exe
SR - Auto [2014/03/18 18:04:40] [ 90576] @oem17.inf,%WIN32_DPTF_POLICY_LPM_SERVICE_DISPLAY_NAME%;Int (DptfPolicyLpmService) . (.Intel Corporation.) - C:\Windows\System32\DptfPolicyLpmService.exe
SS - Auto [2015/05/17 20:46:40] [ 107848] Service Google Update (gupdate) (gupdate) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe
SS - Demand [2015/05/17 20:46:40] [ 107848] Service Google Update (gupdatem) (gupdatem) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe
SR - Auto [2014/06/10 05:56:20] [ 277320] Intel(R) HD Graphics Control Panel Service (igfxCUIService1.0.0.0) . (.Intel Corporation.) - C:\Windows\System32\igfxCUIService.exe
SR - Auto [2013/07/01 21:00:54] [ 586752] Intel(R) Capability Licensing Service Interface (Intel(R) Capability Licensing Service Interface) . (.Intel(R) Corporation.) - C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe
SS - Demand [2013/07/01 21:01:08] [ 637912] Intel(R) Capability Licensing Service TCP IP Interface (Intel(R) Capability Licensing Service TCP IP Interface) . (.Intel(R) Corporation.) - C:\Program Files\Intel\TXE Components\TCS\SocketHeciServer.exe
SR - Auto [2014/01/15 07:14:08] [ 168216] Intel(R) Dynamic Application Loader Host Interface (jhi_service) . (.Intel Corporation.) - C:\Program Files\Intel\TXE Components\DAL\jhi_service.exe
SR - Auto [2015/07/16 04:15:17] [ 457464] Update Primary Color (Update Primary Color) . (...) - C:\Program Files\Primary Color\updatePrimaryColor.exe
SR - Auto [2015/07/16 04:14:09] [ 457464] Util Primary Color (Util Primary Color) . (...) - C:\Program Files\Primary Color\bin\utilPrimaryColor.exe
SR - Auto [2015/05/03 11:33:55] [ 2731512] wrpKwjdHFeH (wrpKwjdHFeH) . (.Irrational Number Applications.) - C:\ProgramData\KmxHuHwH\wrpKwjdHFeH.exe

---\\ Recherche de clés de registre Tracing (O100) (6) - 0s
HKLM\SOFTWARE\Microsoft\Tracing\StormWatch_RASAPI32 =>PUP.Optional.StormWatch
HKLM\SOFTWARE\Microsoft\Tracing\StormWatch_RASMANCS =>PUP.Optional.StormWatch
HKLM\SOFTWARE\Microsoft\Tracing\updatePrimaryColor_RASAPI32 =>PUP.PrimaryColor
HKLM\SOFTWARE\Microsoft\Tracing\updatePrimaryColor_RASMANCS =>PUP.PrimaryColor
HKLM\SOFTWARE\Microsoft\Tracing\utilPrimaryColor_RASAPI32 =>PUP.PrimaryColor
HKLM\SOFTWARE\Microsoft\Tracing\utilPrimaryColor_RASMANCS =>PUP.PrimaryColor

---\\ Scan Additionnel (O88) (72) - 0s
C:\ProgramData\KmxHuHwH\wrpKwjdHFeH.exe =>PUP.Optional.WebShield
C:\Program Files\OneSystemCare\CleanupConsole.exe =>PUP.Optional.OneSystemCare
C:\Program Files\Primary Color\bin\utilPrimaryColor.exe =>PUP.PrimaryColor
C:\Program Files\Primary Color\updatePrimaryColor.exe =>PUP.PrimaryColor
C:\Program Files\Primary Color\bin\PrimaryColor.expext.exe =>PUP.PrimaryColor
C:\Program Files\Primary Color\bin\PrimaryColor.BrowserAdapter.exe =>PUP.PrimaryColor
C:\Users\andrea le helley\AppData\Local\Google\Chrome\User Data\Default\Extensions\bjddolaffjoealjhggjklmgmkmlgpihl
C:\Program Files\Primary Color\PrimaryColorbho.dll =>PUP.PrimaryColor
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{b0a28f54-b08f-4049-a9bf-8d33bd1e9222} =>PUP.PrimaryColor
HKLM\SYSTEM\CurrentControlSet\Services\insvc_1.10.0.14 =>PUP.Optional.Infonaut
HKLM\SYSTEM\CurrentControlSet\Services\Update Primary Color =>PUP.Optional.PrimaryColor
C:\Program Files\Primary Color\updatePrimaryColor.exe =>PUP.Optional.PrimaryColor
HKLM\SYSTEM\CurrentControlSet\Services\Util Primary Color =>PUP.Optional.PrimaryColor
C:\Program Files\Primary Color\bin\utilPrimaryColor.exe =>PUP.Optional.PrimaryColor
HKLM\SYSTEM\CurrentControlSet\Services\wrpKwjdHFeH =>PUP.Optional.WebShield
C:\Program Files\OneSystemCare\OneSystemCare.exe =>PUP.Optional.OneSystemCare
C:\Windows\Tasks\One System CarePeriod.job =>PUP.Optional.OneSystemCare
C:\Windows\System32\Tasks\One System Care Monitor =>PUP.Optional.OneSystemCare
C:\Windows\System32\Tasks\One System CarePeriod =>PUP.Optional.OneSystemCare
C:\Windows\System32\Tasks\ProPCCleaner_Start =>PUP.Optional.ProPCCleaner
HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OneSystemCare =>PUP.Optional.OneSystemCare
HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Primary Color =>PUP.Optional.Sambreel
HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WebShield =>PUP.Optional.WebShield
HKLM\SOFTWARE\IHProtect =>PUP.Optional.AgentODR
HKLM\SOFTWARE\istartsurfSoftware =>PUP.Optional.IsStart
HKLM\SOFTWARE\Lights Cinema 1.3betaV18.04-nv =>PUP.Optional.CrossRider
HKLM\SOFTWARE\Lights Cinema 1.3betaV18.04-nv-ie =>PUP.Optional.CrossRider
HKLM\SOFTWARE\MaxComputerCleaner =>PUP.Optional.MaxComputerCleaner
HKLM\SOFTWARE\Primary Color =>PUP.Optional.Sambreel
HKLM\SOFTWARE\StormWatchApp =>PUP.Optional.StormWatch
HKLM\SOFTWARE\SupDp =>PUP.Optional.SupTab
HKLM\SOFTWARE\supTab =>PUP.Optional.SupTab
HKLM\SOFTWARE\supWindowsMangerProtect =>PUP.Optional.Fuyu
HKLM\SOFTWARE\WebBar =>PUP.Optional.WebBar
HKCU\SOFTWARE\cacaoweb =>PUP.Optional.CacaoWeb
HKCU\SOFTWARE\Lights Cinema 1.3betaV18.04-nv =>PUP.Optional.CrossRider
HKCU\SOFTWARE\Lights Cinema 1.3betaV18.04-nv-ie =>PUP.Optional.CrossRider
HKCU\SOFTWARE\One System Care =>PUP.Optional.OneSystemCare
HKCU\SOFTWARE\Primary Color =>PUP.Optional.Sambreel
HKCU\SOFTWARE\ProPCCleanerConfig =>PUP.Optional.ProPCCleaner
HKCU\SOFTWARE\ProPCCleanerLanguage =>PUP.Optional.ProPCCleaner
HKCU\SOFTWARE\StormWatchApp =>PUP.Optional.StormWatch
HKCU\SOFTWARE\tstamptoken =>PUP.Optional.MaxComputerCleaner
C:\Program Files\126249b2-cb0b-4e86-a55d-3537bdde1a1e =>PUP.Optional.CrossRider
C:\Program Files\MaxComputerCleaner_v17.337 =>PUP.Optional.MaxComputerCleaner
C:\Program Files\OneSystemCare =>PUP.Optional.OneSystemCare
C:\Program Files\Primary Color =>PUP.PrimaryColor
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\One System Care =>PUP.Optional.OneSystemCare
C:\ProgramData\IHProtectUpDate =>PUP.Optional.AgentODR
C:\ProgramData\WebShield =>PUP.Optional.WebShield
C:\ProgramData\WindowsMangerProtect =>PUP.Optional.Fuyu
C:\Users\andrea le helley\AppData\Roaming\istartsurf =>PUP.Optional.IsStart
C:\Users\andrea le helley\AppData\Local\avaavbxvba =>PUP.Optional.SearchProtect
C:\Users\andrea le helley\AppData\Local\Pro_PC_Cleaner =>USP.PCCleaner
C:\Users\andrea le helley\AppData\Local\WebShield =>PUP.Optional.WebShield
C:\Users\andrea le helley\Desktop\cacaoweb.exe =>PUP.Optional.CacaoWeb
C:\Users\andrea le helley\AppData\Local\Microsoft\Windows\INetCache\IE\ZWHDH2TJ\WikiBrowser[1].exe =>PUP.Optional.WikiBrowser
C:\Users\andrea le helley\AppData\Local\Microsoft\Windows\INetCache\IE\UR6NFS06\Bundle_WikiBrowser[1].exe =>PUP.Optional.WikiBrowser
C:\Users\andrea le helley\AppData\Local\Microsoft\Windows\INetCache\IE\UR6NFS06\lly_istartsurf[1].exe =>PUP.Optional.IsStart
C:\Users\andrea le helley\AppData\Local\Microsoft\Windows\INetCache\IE\UR6NFS06\OneSystemCare[1].exe =>PUP.Optional.OneSystemCare
C:\Users\andrea le helley\AppData\Local\Microsoft\Windows\INetCache\IE\95QODRIH\stormwatch2_0[1].exe =>PUP.Optional.StormWatch
C:\Users\andrea le helley\AppData\Local\Microsoft\Windows\INetCache\IE\76ABR0YQ\StormWatchSetup[1].exe =>PUP.Optional.StormWatch
HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\Open\command [Bad: C:\Program Files\Internet Explorer\iexplore.ex http://www.istartsurf.com/] =>PUP.Optional.IsStart
C:\Windows\Installer\1e9349.msi =>PUP.Optional.MaxComputerCleaner
HKLM\SYSTEM\CurrentControlSet\Services\Update Primary Color =>PUP.PrimaryColor
HKLM\SYSTEM\CurrentControlSet\Services\Util Primary Color =>PUP.PrimaryColor
HKLM\SOFTWARE\Microsoft\Tracing\StormWatch_RASAPI32 =>PUP.Optional.StormWatch
HKLM\SOFTWARE\Microsoft\Tracing\StormWatch_RASMANCS =>PUP.Optional.StormWatch
HKLM\SOFTWARE\Microsoft\Tracing\updatePrimaryColor_RASAPI32 =>PUP.PrimaryColor
HKLM\SOFTWARE\Microsoft\Tracing\updatePrimaryColor_RASMANCS =>PUP.PrimaryColor
HKLM\SOFTWARE\Microsoft\Tracing\utilPrimaryColor_RASAPI32 =>PUP.PrimaryColor
HKLM\SOFTWARE\Microsoft\Tracing\utilPrimaryColor_RASMANCS =>PUP.PrimaryColor

---\\ Récapitulatif des éléments trouvées sur votre station (20) - 0s
http://www.nicolascoolman.fr/blog =>PUP.Optional.WebShield
http://www.nicolascoolman.fr/blog =>PUP.Optional.OneSystemCare
http://www.nicolascoolman.fr/blog =>PUP.PrimaryColor
http://www.nicolascoolman.fr/pup-isstart/ =>PUP.Optional.IsStart
http://www.nicolascoolman.fr/blog =>PUP.Optional.Sambreel
http://www.nicolascoolman.fr/blog =>PUP.Optional.CrossBrowse
http://www.nicolascoolman.fr/blog =>PUP.Optional.Infonaut
http://www.nicolascoolman.fr/blog =>PUP.Optional.PrimaryColor
http://www.nicolascoolman.fr/blog =>PUP.Optional.ProPCCleaner
http://www.nicolascoolman.fr/blog =>PUP.Optional.AgentODR
http://www.nicolascoolman.fr/pup-crossrider/ =>PUP.Optional.CrossRider
http://www.nicolascoolman.fr/blog =>PUP.Optional.MaxComputerCleaner
http://www.nicolascoolman.fr/blog =>PUP.Optional.StormWatch
http://www.nicolascoolman.fr/pup-suptab/ =>PUP.Optional.SupTab
http://www.nicolascoolman.fr/trojan-fuyu/ =>PUP.Optional.Fuyu
http://www.nicolascoolman.fr/blog =>PUP.Optional.WebBar
http://www.nicolascoolman.fr/pup-cacaoweb/ =>PUP.Optional.CacaoWeb
http://www.nicolascoolman.fr/pup-searchprotect/ =>PUP.Optional.SearchProtect
http://www.nicolascoolman.fr/usp-pccleaner/ =>USP.PCCleaner
http://www.nicolascoolman.fr/blog =>PUP.Optional.WikiBrowser

~ End of the scan, 21999 items in 110 seconds (638)(0)()

Publicité


Signaler le contenu de ce document

Publicité