cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

~ ZHPDiag v2015.8.1.107 Par Nicolas Coolman (2015/08/1)
~ Démarré par Jonathan (Administrator) (2015/08/02 00:05:43)
~ Site: http://www.nicolascoolman.fr
~ Facebook: https://www.facebook.com/nicolascoolman1
~ Etat de la version: Version OK
~ Mode: Scanner
~ Rapport: C:\Users\Jonathan\Desktop\ZHPDiag.txt
~ Rapport: C:\Users\Jonathan\AppData\Roaming\ZHP\ZHPDiag.txt
~ UAC: Activate
~ Démarrage du système: Normal (Normal boot)
~ Windows 7 Home Premium, 32-bit Service Pack 1 (Build 7601)

---\\ Navigateurs Internet (3) - 0s
GCIE: Google Chrome v44.0.2403.125
MFIE: Mozilla Firefox 39.0 (x86 fr) v39.0
MSIE: Internet Explorer v11.0.9600.17914

---\\ Informations sur les produits Windows (9) - 0s
~ Windows Server License Manager Script : OK
~ Licence Script File Génération : OK
~ Windows Operating System - Windows(R) 7, OEM_COA_NSLP channel
Windows ID Activation : OK
~ Windows Partial Key : 7XVTJ
Windows License : OK
~ Windows Remaining Initializations Number : 4
Windows Automatic Updates : OK (Auto)
Windows Activation Technologies : OK

---\\ Logiciels de protection (3) - 1s
Malwarebytes Anti-Malware version 2.1.8.1057
Microsoft Security Client v4.8.0204.0
Microsoft Security Essentials v4.8.204.0

---\\ Logiciels de protection et autres (Superflus) (1) - 1s
McAfee Security Scan Plus v3.8.150.1

---\\ Logiciels d'optimisation (1) - 1s
CCleaner v4.17

---\\ Surveillance de Logiciels (2) - 1s
Adobe Flash Player 18 NPAPI
Adobe Reader XI

---\\ Informations sur le système (6) - 0s
~ Operating System: x86 Family 16 Model 5 Stepping 3, AuthenticAMD
~ Operating System: 32-bit
~ Boot mode: Normal (Normal boot)
Total RAM: 2881.08 MB (43% free)
~ System Restore: Activé (Enable)
~ System drive C: has 375 GB free of 953 GB

---\\ Mode de connexion au système (3) - 0s
~ Computer Name: JONATHAN-PC
~ User Name: Jonathan
~ Logged in as Administrator

---\\ Enumération des unités disques (1) - 6s
~ Drive C: has 375 GB free of 953 GB (System)

---\\ Etat du Centre de Sécurité Windows (11) - 0s
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: Modified
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: OK
[HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK

---\\ Recherche particulière de fichiers génériques (23) - 0s
[MD5.8B88EBBB05A0E56B7DCC708498C02B3E] - (.Microsoft Corporation - Explorateur Windows.) () -- C:\Windows\Explorer.exe [2616320]
[MD5.51138BEEA3E2C21EC44D0932C71762A8] - (.Microsoft Corporation - Processus hôte Windows (Rundll32).) () -- C:\Windows\System32\rundll32.exe [44544]
[MD5.B5C5DCAD3899512020D135600129D665] - (.Microsoft Corporation - Application de démarrage de Windows.) () -- C:\Windows\System32\Wininit.exe [96256]
[MD5.63B01F72FD727D5736DBEF54174D8F93] - (.Microsoft Corporation - Extensions Internet pour Win32.) () -- C:\Windows\System32\wininet.dll [1951232]
[MD5.52449FD429D6053B78AE564DEF303870] - (.Microsoft Corporation - Application d’ouverture de session Windows.) () -- C:\Windows\System32\Winlogon.exe [304128]
[MD5.E3AE23569749DE12D45BA3B489A036AE] - (.Microsoft Corporation - Bibliothèque de licences.) () -- C:\Windows\System32\sppcomapi.dll [193536]
[MD5.129F80D7868E30DF3E3DE33A1D3132B4] - (.Microsoft Corporation - DLL client de l’API uilisateur de Windows m.) () -- C:\Windows\System32\fr-FR\user32.dll.mui [20480]
[MD5.D0B388DA1D111A34366E04EB4A5DD156] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) () -- C:\Windows\System32\drivers\AFD.sys [338944]
[MD5.338C86357871C167A96AB976519BF59E] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) () -- C:\Windows\System32\drivers\atapi.sys [21584]
[MD5.77EA11B065E0A8AB902D78145CA51E10] - (.Microsoft Corporation - CD-ROM File System Driver.) () -- C:\Windows\System32\drivers\Cdfs.sys [70656]
[MD5.BE167ED0FDB9C1FA1133953C18D5A6C9] - (.Microsoft Corporation - SCSI CD-ROM Driver.) () -- C:\Windows\System32\drivers\Cdrom.sys [108544]
[MD5.F024449C97EC1E464AAFFDA18593DB88] - (.Microsoft Corporation - DFS Namespace Client Driver.) () -- C:\Windows\System32\drivers\DfsC.sys [78336]
[MD5.9036377B8A6C15DC2EEC53E489D159B5] - (.Microsoft Corporation - High Definition Audio Bus Driver.) () -- C:\Windows\System32\drivers\HDAudBus.sys [108544]
[MD5.F151F0BDC47F4A28B1B20A0818EA36D6] - (.Microsoft Corporation - Pilote de port i8042.) () -- C:\Windows\System32\drivers\i8042prt.sys [80896]
[MD5.A5FA468D67ABCDAA36264E463A7BB0CD] - (.Microsoft Corporation - IP Network Address Translator.) () -- C:\Windows\System32\drivers\IpNat.sys [101888]
[MD5.01C5B803F6E1FDF8F16F0763DA9B997D] - (.Microsoft Corporation - Windows NT SMB Minirdr.) () -- C:\Windows\System32\drivers\MRxSmb.sys [124416]
[MD5.280122DDCF04B378EDD1AD54D71C1E54] - (.Microsoft Corporation - MBT Transport driver.) () -- C:\Windows\System32\drivers\netBT.sys [187904]
[MD5.C8DFF8D07755A66C7A4A738930F0FEAC] - (.Microsoft Corporation - Pilote du système de fichiers NT.) () -- C:\Windows\System32\drivers\ntfs.sys [1212352]
[MD5.2EA877ED5DD9713C5AC74E8EA7348D14] - (.Microsoft Corporation - Pilote de port parallèle.) () -- C:\Windows\System32\drivers\Parport.sys [79360]
[MD5.D9F91EAFEC2815365CBE6D167E4E332A] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) () -- C:\Windows\System32\drivers\Rasl2tp.sys [78848]
[MD5.3E21C083B8A01CB70BA1F09303010FCE] - (.Microsoft Corporation - SMB Transport driver.) () -- C:\Windows\System32\drivers\smb.sys [71168]
[MD5.7FE680A3DFA421C4A8E4879AE4C5AAB0] - (.Microsoft Corporation - TDI Translation Driver.) () -- C:\Windows\System32\drivers\tdx.sys [74752]
[MD5.F497F67932C6FA693D7DE2780631CFE7] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) () -- C:\Windows\System32\drivers\volsnap.sys [245632]

---\\ Processus lancés (28) - 1s
[MD5.8570625CA5DBD8083BEA7CB73065B53D] - (.AMD - AMD External Events Service Module.) -- C:\Windows\System32\atiesrxx.exe [172032] [PID.992]
[MD5.921EB86677423EFD3B1B85E105B414E7] - (.AMD - AMD External Events Client Module.) -- C:\Windows\System32\atieclxx.exe [372736] [PID.1416]
[MD5.B33CF4DE909A5B30F526D82053A63C8E] - (.ABBYY - ABBYY network license server.) -- C:\Program Files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [759048] [PID.1660]
[MD5.8CD5561292F890BE90336DA7D4D3C002] - (.Copyright © 2015 - .) -- C:\Program Files\chk32\chk32.exe [376832] [PID.1680]
[MD5.0FD99BAF91AD54ED70E64DE5BBA03559] - (...) -- C:\Program Files\46364331-1438450096-3444-3644-4646FFFFFFFF\hnsj99D0.tmp [161792] [PID.2112] =>PUP.Optional.CrossRider
[MD5.D62F57DDC737B78C98CB2A68CE079A55] - (...) -- C:\Users\Jonathan\AppData\Roaming\Devoted Squadron\Devoted Squadron.exe [66048] [PID.2176]
[MD5.B8FA96995726D1FA58476E352C02AD82] - (...) -- C:\Program Files\Gigabyte\EasySaver\essvr.exe [68136] [PID.2244]
[MD5.C5323F961012E91A9E4BF4FF377655F3] - (...) -- C:\Program Files\46364331-1438450096-3444-3644-4646FFFFFFFF\jnsz83A0.tmp [209920] [PID.2272] =>PUP.Optional.CrossRider
[MD5.68DF41DDAB5EE81355F55CB5962A763D] - (.PhraseProfessor - PP Client Service.) -- C:\Program Files\PhraseProfessor_1.10.0.21\Service\ppsvc.exe [300128] [PID.2516] =>PUP.Optional.Gen
[MD5.F12A68ED55053940CADD59CA5E3468DD] - (.Copyright 2004 - RichVideo Module.) -- C:\Program Files\CyberLink\Shared Files\RichVideo.exe [244904] [PID.2572]
[MD5.B0303F2BC6DD09383C8268D596EE158B] - (...) -- C:\Program Files\46364331-1438450096-3444-3644-4646FFFFFFFF\knso47A3.tmpfs [300544] [PID.2652] =>PUP.Optional.CrossRider
[MD5.67FAE824642FEA7D29BE74DD38DBAAAE] - (...) -- C:\Users\Jonathan\AppData\Local\ServiceGoogle\service.exe [34304] [PID.2716]
[MD5.982715E69BAB00BB072794AFDA7B98D2] - (...) -- C:\Program Files\SpaceSondPro_v53.1254\SpaceSondPro_Service.exe [33480] [PID.3588] =>PUP.Optional.SpaceSoundPro
[MD5.FF74E3503F023B98576DF6C9959222EA] - (.Copyright © 2015 - .) -- C:\Program Files\chk32\packages\a98af236-4bb6-4e3f-95f3-3245daef538a\dchk.exe [847360] [PID.3772]
[MD5.754B3F11D3019F6ED14E4DFF6BB542FA] - (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [9808488] [PID.3840]
[MD5.E7704CBF568815C1CAA6E513387BD3F2] - (.Advanced Micro Devices Inc. - Catalyst Control Center: Monitoring program.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe [65536] [PID.3892]
[MD5.74EF310FAC89341CE2897B7F2C4A7B0F] - (.ATI Technologies Inc. - Catalyst Control Centre: Host application.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe [65536] [PID.2092]
[MD5.6FD13B36C8E7CBD5E09F95220484E71D] - (.Panasonic Corporation - AutoStartService.) -- C:\Program Files\Common Files\Panasonic\PHOTOfunSTUDIO AutoStart\AutoStartupService.exe [174064] [PID.932]
[MD5.55802BE737E6EFE7B457A67420151F33] - (...) -- C:\ProgramData\2988696b-294c-4054-b34f-e97ca58a10e8\plugincontainer.exe [1140448] [PID.4564] =>PUP.Optional.CrossRider
[MD5.B3625E92AA69CD85F5D1918E27554696] - (...) -- C:\Program Files\Common Files\2988696b-294c-4054-b34f-e97ca58a10e8\Updater.exe [1075936] [PID.4744] =>PUP.Optional.CrossRider
[MD5.EBB02746DB63DF6F921CD78B1EF7462B] - (...) -- C:\ProgramData\2988696b-294c-4054-b34f-e97ca58a10e8\plugins\3\Plugin.exe [1167072] [PID.5480] =>PUP.Optional.CrossRider
[MD5.06935BC54159A1AB1400EBD25184CD59] - (...) -- C:\ProgramData\2988696b-294c-4054-b34f-e97ca58a10e8\plugins\10\Plugin.exe [1037024] [PID.1772] =>PUP.Optional.CrossRider
[MD5.68B7425D6A8B2DEB0321401AAF84C984] - (...) -- C:\ProgramData\2988696b-294c-4054-b34f-e97ca58a10e8\plugins\7\Plugin.exe [908000] [PID.5580] =>PUP.Optional.CrossRider
[MD5.03E462C4E38A05C1EAC10D9C6EAAA74A] - (...) -- C:\ProgramData\2988696b-294c-4054-b34f-e97ca58a10e8\plugins\5\Plugin.exe [1252576] [PID.5512] =>PUP.Optional.CrossRider
[MD5.EBB02746DB63DF6F921CD78B1EF7462B] - (...) -- C:\ProgramData\2988696b-294c-4054-b34f-e97ca58a10e8\plugins\3\Plugin.exe [1167072] [PID.4752] =>PUP.Optional.CrossRider
[MD5.68B7425D6A8B2DEB0321401AAF84C984] - (...) -- C:\ProgramData\2988696b-294c-4054-b34f-e97ca58a10e8\plugins\7\Plugin.exe [908000] [PID.1768] =>PUP.Optional.CrossRider
[MD5.3099614574A2EFFB055B85BB9FFD42B9] - (...) -- C:\ProgramData\2988696b-294c-4054-b34f-e97ca58a10e8\plugins\2\Plugin.exe [1762016] [PID.5684] =>PUP.Optional.CrossRider
[MD5.6046D514EFDF27B0AB3086BD8699A8EE] - (...) -- C:\ProgramData\2988696b-294c-4054-b34f-e97ca58a10e8\plugins\8\Plugin.exe [1225440] [PID.5968] =>PUP.Optional.CrossRider

---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2) (11) - 0s
G0 - GCSP: Preferences [User Data\Default][HomePage] http://a.thanksearch.com/
G0 - GCSP: Preferences [User Data\Default][HomePage] http://adplus.goo.mx/
G0 - GCSP: Preferences [User Data\Default][HomePage] http://api.www.337.com/
G0 - GCSP: Preferences [User Data\Default][HomePage] http://dh9oydwgcrf8n.cloudfront.net/
G0 - GCSP: Preferences [User Data\Default][HomePage] http://elex-tech.khanwars.com/
G0 - GCSP: Preferences [User Data\Default][HomePage] http://odin.goo.mx/
G0 - GCSP: Preferences [User Data\Default][HomePage] http://www.mystartsearch.com/ =>PUP.Optional.StartSearch
G0 - GCSP: Preferences [User Data\Default][HomePage] http://best.infoiswhatwedo.com/
G0 - GCSP: Preferences [User Data\Default][HomePage] http://clients2.google.com/
G0 - GCSP: Preferences [User Data\Default][HomePage] http://mynamedomain.koko/
G2 - GCE: Preference [User Data\Default] [idhkmcfanijhphphomamdkaejjadkhgn] BrowserV30.07 =>PUP.Optional.CrossRider

---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3) (20) - 1s
M0 - MFSP: prefs.js [Jonathan - 3v3nyr05.default-1438451279976] http://www.mystartsearch.com/?type=hp&ts=1438465458&z=c83dabcd3ce1989d4afdf75g7z0c4b3zfq4wecctcb&from=cmi&uid=WDCXWD10EARX-00N0YB0_WD-WCC0T005535155351 =>PUP.Optional.StartSearch
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\Plugins\nppdf32.FRA
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\Plugins\QuickTimePlugin.class
P2 - EXT FILE: (...) -- C:\Users\Jonathan\AppData\Roaming\Mozilla\Firefox\Profiles\3v3nyr05.default-1438451279976\extensions\{50b2a506-1613-467e-85ba-c10a91932ca4}.xpi
P2 - EXT FILE: (...) -- C:\Users\Jonathan\AppData\Roaming\Mozilla\Firefox\Profiles\3v3nyr05.default-1438451279976\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
P2 - EXT FILE: (...) -- C:\Users\Jonathan\AppData\Roaming\Mozilla\Firefox\Profiles\3v3nyr05.default-1438451279976\searchplugins\mystartsearch.xml =>PUP.Optional.StartSearch
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\browser\searchplugins\amazon-france.xml
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\browser\searchplugins\bing.xml
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\browser\searchplugins\cnrtl-tlfi-fr.xml
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\browser\searchplugins\ddg.xml
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\browser\searchplugins\eBay-france.xml
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\browser\searchplugins\google.xml
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\browser\searchplugins\wikipedia-fr.xml
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\browser\searchplugins\yahoo-france.xml
P2 - EXT: (.Mozilla - Default.) -- C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
P2 - EXT: (.roc - Default SearchProtected .) -- C:\Users\Jonathan\AppData\Roaming\Mozilla\Firefox\Profiles\3v3nyr05.default-1438451279976\extensions\defsearchp@gmail.com
P2 - EXT: (.lightningnewtab.com - deskCut.) -- C:\Users\Jonathan\AppData\Roaming\Mozilla\Firefox\Profiles\3v3nyr05.default-1438451279976\extensions\deskCutv2@gmail.com =>PUP.Optional.LightningNewTab
P2 - FPN: [HKCU] [@hola.org/vlc,version=1.8.649] - (...) -- C:\Users\Jonathan\AppData\Local\Hola\firefox\app\vlc
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Macromed\Flash\NPSWF32_18_0_0_209.dll
P2 - FPN: [HKLM] [@Apple.com/iTunes,version=1.0] - (.Apple Inc..) -- C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll

---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4) (13) - 0s
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.mystartsearch.com/ =>PUP.Optional.StartSearch
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.mystartsearch.com/ =>PUP.Optional.StartSearch
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.mystartsearch.com/ =>PUP.Optional.StartSearch
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mystartsearch.com/ =>PUP.Optional.StartSearch
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.mystartsearch.com/ =>PUP.Optional.StartSearch
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.mystartsearch.com/ =>PUP.Optional.StartSearch
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mystartsearch.com/ =>PUP.Optional.StartSearch
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.mystartsearch.com/ =>PUP.Optional.StartSearch
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = http://www.google.com
R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphean =>.Microsoft Internet Explorer

---\\ Internet Explorer, Proxy Management (R5) (3) - 0s
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll

---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs (3) - 1s
F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe (.Microsoft Corporation.)
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe (.Microsoft Corporation.)
F2 - REG:system.ini: VMApplet=C:\Windows\system32\SystemPropertiesPerformance.exe (.Microsoft Corporation.)

---\\ Hosts file redirection (O1) (1) - 0s
~ Le fichier hôte est sain (The hosts file is clean) (21)

---\\ Browser Helper Object de navigateur (BHO) (O2) (1) - 0s
O2 - BHO: On Stage - {aff87634-f4a9-42bc-b2dc-be240584d095} . (...) -- C:\Program Files\On Stage\Extensions\aff87634-f4a9-42bc-b2dc-be240584d095.dll =>PUP.Optional.OnStage

---\\ Applications lancées au démarrage du sytème (O4) (37) - 0s
O4 - HKLM\..\Run: [STCAgent] C:\Program Files\Splashtop\Splashtop Connect IE\STCAgent.exe (.not file.)
O4 - HKLM\..\Run: [ZyngaGamesAgent] C:\Program Files\Splashtop\Splashtop Connect\ZyngaGamesAgent.exe (.not file.)
O4 - HKLM\..\Run: [StartCCC] . (.Advanced Micro Devices, Inc. - Catalyst® Control Center Launcher.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
O4 - HKLM\..\Run: [RtHDVCpl] . (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
O4 - HKLM\..\Run: [RemoteControl] . (.Cyberlink Corp. - PowerDVD RC Service.) -- C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
O4 - HKLM\..\Run: [MSC] . (.Microsoft Corporation - Microsoft Security Client User Interface.) -- c:\Program Files\Microsoft Security Client\msseces.exe
O4 - HKLM\..\Run: [EEventManager] . (.SEIKO EPSON CORPORATION - EEventManager Application.) -- C:\Program Files\Epson Software\Event Manager\EEventManager.exe
O4 - HKLM\..\Run: [DivXMediaServer] . (.DivX, LLC - DivX DLNA Media Server.) -- C:\Program Files\DivX\DivX Media Server\DivXMediaServer.exe
O4 - HKLM\..\Run: [DivXUpdate] . (.© Copyright 2000 - 2011 DivX, LLC - DivX Update.) -- C:\Program Files\DivX\DivX Update\DivXUpdate.exe
O4 - HKLM\..\Run: [PowerDVD13Agent] C:\Program Files\CyberLink\PowerDVD13\PowerDVD13Agent.exe (.not file.)
O4 - HKLM\..\Run: [UpdateLBPShortCut] . (.CyberLink Corp. - MUI StartMenu Application.) -- C:\Program Files\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe
O4 - HKLM\..\Run: [MDS_Menu] . (.CyberLink Corp. - MUI StartMenu Application.) -- C:\Program Files\CyberLink\MediaShow4\MUITransfer\MUIStartMenu.exe
O4 - HKLM\..\Run: [CLMLServer] . (.CyberLink - CyberLink MediaLibray Service.) -- C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe
O4 - HKLM\..\Run: [UpdateP2GoShortCut] . (.CyberLink Corp. - MUI StartMenu Application.) -- C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe
O4 - HKLM\..\Run: [RemoteControl9] . (.CyberLink Corp. - PowerDVD RC Service.) -- C:\Program Files\CyberLink\PowerDVD9\PDVD9Serv.exe
O4 - HKLM\..\Run: [BDRegion] . (.cyberlink - brs.) -- C:\Program Files\Cyberlink\Shared files\brs.exe
O4 - HKLM\..\Run: [UpdatePPShortCut] . (.CyberLink Corp. - MUI StartMenu Application.) -- C:\Program Files\CyberLink\PowerProducer\MUITransfer\MUIStartMenu.exe
O4 - HKLM\..\Run: [UCam_Menu] . (.CyberLink Corp. - MUI StartMenu Application.) -- C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe
O4 - HKLM\..\Run: [UpdatePSTShortCut] . (.CyberLink Corp. - MUI StartMenu Application.) -- C:\Program Files\CyberLink\Blu-ray Disc Suite\MUITransfer\MUIStartMenu.exe
O4 - HKLM\..\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe
O4 - HKLM\..\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files\QuickTime\QTTask.exe
O4 - HKLM\..\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\RunOnce: [SpaceSondPro_v53.1254] . (...) -- C:\Program Files\SpaceSondPro_v53.1254\SpaceSondPro_Service.exe =>PUP.Optional.SpaceSoundPro
O4 - HKCU\..\Run: [LightScribe Control Panel] . (.Hewlett-Packard Company - .) -- C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
O4 - HKCU\..\Run: [EPSON SX125 Series] . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\Windows\System32\spool\drivers\w32x86\3\E_FATIGGE.EXE
O4 - HKCU\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe
O4 - HKCU\..\Run: [EPSON SX430 Series] . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\Windows\System32\spool\drivers\w32x86\3\E_FATIHAE.EXE
O4 - HKCU\..\Run: [GoogleChromeAutoLaunch_024FF85ECB08C168C6232BE44D57F675] . (.Crossbrowse - Crossbrowse.) -- C:\Program Files\Crossbrowse\Crossbrowse\Application\crossbrowse.exe =>PUP.Optional.CrossBrowse
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe
O4 - HKUS\S-1-5-21-2547745397-2668248387-2003255374-1000\..\Run: [LightScribe Control Panel] . (.Hewlett-Packard Company - .) -- C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
O4 - HKUS\S-1-5-21-2547745397-2668248387-2003255374-1000\..\Run: [EPSON SX125 Series] . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\Windows\System32\spool\drivers\w32x86\3\E_FATIGGE.EXE
O4 - HKUS\S-1-5-21-2547745397-2668248387-2003255374-1000\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe
O4 - HKUS\S-1-5-21-2547745397-2668248387-2003255374-1000\..\Run: [EPSON SX430 Series] . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\Windows\System32\spool\drivers\w32x86\3\E_FATIHAE.EXE
O4 - HKUS\S-1-5-21-2547745397-2668248387-2003255374-1000\..\Run: [GoogleChromeAutoLaunch_024FF85ECB08C168C6232BE44D57F675] . (.Crossbrowse - Crossbrowse.) -- C:\Program Files\Crossbrowse\Crossbrowse\Application\crossbrowse.exe =>PUP.Optional.CrossBrowse

---\\ Modification Domaine/Adresses DNS (O17) (6) - 0s
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 192.168.1.1

---\\ Liste des services NT non Microsoft et non désactivés (O23) (24) - 1s
O23 - Service: ABBYY FineReader 9.0 Sprint Licensing Service (ABBYY.Licensing.FineReader.Sprint.9.0) . (.ABBYY - ABBYY network license server.) - C:\Program Files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: (AMD External Events Utility) . (.AMD - AMD External Events Service Module.) - C:\Windows\System32\atiesrxx.exe
O23 - Service: Apple Mobile Device (Apple Mobile Device) . (.Apple Inc. - MobileDeviceService.) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: DCheck Service (chk32) . (.Copyright © 2015 - .) - C:\Program Files\chk32\chk32.exe
O23 - Service: CyberLink Product - 2013/06/04 01:01:16 (CLKMSVC10_E92D8507) . (.CyberLink - CyberLink KM Service.) - C:\Program Files\CyberLink\PowerDVD9\NavFilter\kmsvc.exe
O23 - Service: Wire Professional Version (comyninu) . (...) - C:\Program Files\46364331-1438450096-3444-3644-4646FFFFFFFF\hnsj99D0.tmp =>PUP.Optional.CrossRider
O23 - Service: Devoted Squadron (Devoted Squadron) . (...) - C:\Users\Jonathan\AppData\Roaming\Devoted Squadron\Devoted Squadron.exe
O23 - Service: ES lite Service for program management. (ES lite Service) . (...) - C:\Program Files\Gigabyte\EasySaver\essvr.exe
O23 - Service: Kerning Down (gopibeko) . (...) - C:\Users\Jonathan\AppData\Local\46364331-1438457345-3444-3644-4646FFFFFFFF\snsuF6A0.tmp (.not file.) =>PUP.Optional.CrossRider
O23 - Service: Service Google Update (gupdate) (gupdate) . (...) - C:\Program Files\Google\Update\GoogleUpdate.exe (.not file.)
O23 - Service: Key In Bold Italic (hyverumu) . (...) - C:\Program Files\46364331-1438450096-3444-3644-4646FFFFFFFF\jnsz83A0.tmp =>PUP.Optional.CrossRider
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) . (.Hewlett-Packard Company - LightScribe Service.) - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: (MBAMService) . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: PP 1.10.0.21 Client Service (ppsvc_1.10.0.21) . (.PhraseProfessor - PP Client Service.) - C:\Program Files\PhraseProfessor_1.10.0.21\Service\ppsvc.exe =>PUP.Optional.Gen
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) . (.Copyright 2004 - RichVideo Module.) - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Service Mgr OnStage (Service Mgr OnStage) . (...) - C:\ProgramData\2988696b-294c-4054-b34f-e97ca58a10e8\plugincontainer.exe =>PUP.Optional.OnStage
O23 - Service: Content Border (timuzuzu) . (...) - C:\Program Files\46364331-1438450096-3444-3644-4646FFFFFFFF\knso47A3.tmpfs =>PUP.Optional.CrossRider
O23 - Service: Update Mgr OnStage (Update Mgr OnStage) . (...) - C:\Program Files\Common Files\2988696b-294c-4054-b34f-e97ca58a10e8\Updater.exe =>PUP.Optional.OnStage
O23 - Service: Service Google Update (gupdate) 1.0.1 (UWUX45) . (...) - C:\Users\Jonathan\AppData\Local\ServiceGoogle\service.exe
O23 - Service: Splashtop Connect Firefox Software Updater Service (WCUService_STC_FF) . (...) - C:\Program Files\Splashtop\Splashtop Connect Firefox Software Updater\WCUService.exe (.not file.)
O23 - Service: Splashtop Connect IE Software Updater Service (WCUService_STC_IE) . (...) - C:\Program Files\Splashtop\Splashtop Connect IE Software Updater\WCUService.exe (.not file.)
O23 - Service: Word Surfer 1.10.0.19 Client Service (wsasvc_1.10.0.19) . (...) - C:\Program Files\WordSurfer_1.10.0.19\Service\wsasvc.exe (.not file.) =>PUP.Optional.WordSurfer

---\\ Tâches planifiées en automatique (O39) (14) - 3s
O39 - APT: Orphean - (...) -- C:\Windows\Tasks\Adobe Flash Player Updater.job [1002]
O39 - APT: Orphean - (...) -- C:\Windows\Tasks\Crossbrowse.job [1050] =>PUP.Optional.CrossBrowse
O39 - APT: Orphean - (...) -- C:\Windows\Tasks\StoragePlus.job [342]
O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\Adobe Acrobat Update Task [3874]
O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\Adobe Flash Player Updater [3940]
O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\bvxvbvef [3488]
O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\CCleanerSkipUAC [2778]
O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\CreateChoiceProcessTask [3548]
O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\Crossbrowse [4088] =>PUP.Optional.CrossBrowse
O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\DCheck Service 1.0.1 [3208]
O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\PhraseProfessor Auto Updater 1.10.0.21 Core [4190]
O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\PhraseProfessor Auto Updater 1.10.0.21 Pending Update [4200]
O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\StoragePlus [3260]
O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\{F9296961-2735-4B63-8656-CE4FBFA97D08} [3168]

---\\ Logiciels installés (O42) (90) - 8s
O42 - Logiciel: ABBYY FineReader 9.0 Sprint - (.ABBYY.) [HKLM] -- ABBYY FineReader 9.0 Sprint
O42 - Logiciel: Ad-Remover par C_XX - (.C_XX.) [HKLM] -- Ad-Remover
O42 - Logiciel: Adobe Flash Player 18 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX
O42 - Logiciel: Adobe Flash Player 18 NPAPI - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player NPAPI
O42 - Logiciel: Adobe Shockwave Player 12.0 - (.Adobe Systems, Inc..) [HKLM] -- Adobe Shockwave Player
O42 - Logiciel: Amazon MP3 Downloader 1.0.15 - (.Amazon Services LLC.) [HKLM] -- Amazon MP3 Downloader
O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner
O42 - Logiciel: Crossbrowse - (.The Crossbrowse Authors.) [HKLM] -- Crossbrowse =>PUP.Optional.CrossBrowse
O42 - Logiciel: Configuration DivX - (.DivX, LLC.) [HKLM] -- DivX Setup
O42 - Logiciel: EPSON Scan - (.Seiko Epson Corporation.) [HKLM] -- EPSON Scanner
O42 - Logiciel: EPSON SX125 Series Printer Uninstall - (.SEIKO EPSON Corporation.) [HKLM] -- EPSON SX125 Series
O42 - Logiciel: EPSON SX125 Series Manuel - (...) [HKLM] -- EPSON SX125 Series Manual
O42 - Logiciel: EPSON SX430 Series Printer Uninstall - (.SEIKO EPSON Corporation.) [HKLM] -- EPSON SX430 Series
O42 - Logiciel: Guide des opérations de base EPSON SX430 Series - (...) [HKLM] -- EPSON SX430 Series Bog
O42 - Logiciel: Guide réseau EPSON SX430 Series - (...) [HKLM] -- EPSON SX430 Series Netg
O42 - Logiciel: Guide d'utilisation EPSON SX430 Series - (...) [HKLM] -- EPSON SX430 Series Useg
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM] -- Google Chrome
O42 - Logiciel: CyberLink YouCam - (.CyberLink Corp..) [HKLM] -- InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}
O42 - Logiciel: CyberLink Blu-ray Disc Suite - (.CyberLink Corp..) [HKLM] -- InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}
O42 - Logiciel: CyberLink LG Burning Tool - (.CyberLink Corp..) [HKLM] -- InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}
O42 - Logiciel: Easy Tune 6 B11.0120.1 - (.GIGABYTE.) [HKLM] -- InstallShield_{457D7505-D665-4F95-91C3-ECB8C56E9ACA}
O42 - Logiciel: CyberLink MediaShow - (.CyberLink Corp..) [HKLM] -- InstallShield_{80E158EA-7181-40FE-A701-301CE6BE64AB}
O42 - Logiciel: CyberLink PowerDVD 9 - (.CyberLink Corp..) [HKLM] -- InstallShield_{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}
O42 - Logiciel: CyberLink PowerProducer - (.CyberLink Corp..) [HKLM] -- InstallShield_{B7A0CE06-068E-11D6-97FD-0050BACBF861}
O42 - Logiciel: CyberLink LabelPrint - (.CyberLink Corp..) [HKLM] -- InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}
O42 - Logiciel: AutoGreen B10.1021.1 - (.GIGABYTE.) [HKLM] -- InstallShield_{C75FAD21-EC08-42F3-92D6-C9C0AB355345}
O42 - Logiciel: Malwarebytes Anti-Malware version 2.1.8.1057 - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes Anti-Malware_is1
O42 - Logiciel: McAfee Security Scan Plus - (.McAfee, Inc..) [HKLM] -- McAfee Security Scan
O42 - Logiciel: Microsoft Security Essentials - (.Microsoft Corporation.) [HKLM] -- Microsoft Security Client
O42 - Logiciel: Mozilla Firefox 39.0 (x86 fr) - (.Mozilla.) [HKLM] -- Mozilla Firefox 39.0 (x86 fr)
O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM] -- MozillaMaintenanceService
O42 - Logiciel: mystartsearch uninstall - (.mystartsearch.) [HKLM] -- mystartsearch uninstall =>PUP.Optional.StartSearch
O42 - Logiciel: Naviextras Toolbox - (.NNG Llc..) [HKLM] -- Naviextras Toolbox
O42 - Logiciel: Nimo Codecs Pack v5.0 (Remove Only) - (...) [HKLM] -- NimoCorp
O42 - Logiciel: On Stage - (.On Stage.) [HKLM] -- On Stage =>PUP.Optional.OnStage
O42 - Logiciel: PhraseProfessor 1.10.0.21 - (.PhraseProfessor.) [HKLM] -- PhraseProfessor_1.10.0.21 =>PUP.Optional.Gen
O42 - Logiciel: VLC media player - (.VideoLAN.) [HKLM] -- VLC media player
O42 - Logiciel: WinRAR 5.21 (32-bit) - (.win.rar GmbH.) [HKLM] -- WinRAR archiver
O42 - Logiciel: ZHPDiag 2015 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1
O42 - Logiciel: CyberLink YouCam - (.CyberLink Corp..) [HKLM] -- {01FB4998-33C4-4431-85ED-079E3EEFE75D}
O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM] -- {0592EF96-69D8-4E4B-9CC9-88F58EA86F01}
O42 - Logiciel: EasySaver B9.1214.1 - (.Gigabyte.) [HKLM] -- {07300F01-89CA-4CF8-92BD-2A605EB83C95}
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {18455581-E099-4BA8-BC6B-F34B2F06600C}
O42 - Logiciel: CyberLink Blu-ray Disc Suite - (.CyberLink Corp..) [HKLM] -- {1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {2318C2B1-4965-11d4-9B18-009027A5CD4F}
O42 - Logiciel: Java 8 Update 31 - (.Oracle Corporation.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83218031F0}
O42 - Logiciel: CyberLink BD Advisor 2.0 - (...) [HKLM] -- {2D2D8FE2-605C-4D3C-B706-36E981E7EEF0}
O42 - Logiciel: Microsoft Antimalware Service FR-FR Language Pack - (.Microsoft Corporation.) [HKLM] -- {32E9C1A5-0FDA-4483-987D-DBABF9CC1DD8}
O42 - Logiciel: VCRedistSetup - (.Nero AG.) [HKLM] -- {3921A67A-5AB1-4E48-9444-C71814CF3027}
O42 - Logiciel: ON_OFF Charge B11.0110.1 - (.GIGABYTE.) [HKLM] -- {3DECD372-76A1-4483-BF10-B547790A3261}
O42 - Logiciel: EpsonNet Print - (.SEIKO EPSON CORPORATION.) [HKLM] -- {3E31400D-274E-4647-916C-2CACC3741799}
O42 - Logiciel: CyberLink LG Burning Tool - (.CyberLink Corp..) [HKLM] -- {40BF1E83-20EB-11D8-97C5-0009C5020658}
O42 - Logiciel: Splashtop Connect for Firefox - (.Splashtop Inc..) [HKLM] -- {45D49CA7-D7D8-4659-B35A-EBD98C30AF28}
O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM] -- {46F044A5-CE8B-4196-984E-5BD6525E361D}
O42 - Logiciel: Microsoft Security Client FR-FR Language Pack - (.Microsoft Corporation.) [HKLM] -- {50779A29-834E-4E36-BBEB-B7CABC67A825}
O42 - Logiciel: Naviextras Toolbox Prerequesities - (.NNG Llc..) [HKLM] -- {537575D6-3B96-474C-BD8F-DFF667363DBD}
O42 - Logiciel: Realtek HDMI Audio Driver for ATI - (.Realtek Semiconductor Corp..) [HKLM] -- {5449FB4F-1802-4D5B-A6D8-087DB1142147}
O42 - Logiciel: LG Burning Tools - (.Nero AG.) [HKLM] -- {567C9882-843D-4188-A181-00E2CC3E1036}
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {60EC980A-BDA2-4CB6-A427-B07A5498B4CA}
O42 - Logiciel: swMSM - (.Adobe Systems, Inc.) [HKLM] -- {612C34C7-5E90-47D8-9B5C-0F717DD82726}
O42 - Logiciel: LG CyberLink PowerDVD 7.0 - (.CyberLink Corp..) [HKLM] -- {6811CAA0-BF12-11D4-9EA1-0050BAE317E1}
O42 - Logiciel: Microsoft Security Client - (.Microsoft Corporation.) [HKLM] -- {6E3939AE-9996-4D07-9A30-14C78AE93576}
O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM] -- {789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}
O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM] -- {79155F2B-9895-49D7-8612-D92580E0DE5B}
O42 - Logiciel: CyberLink MediaShow - (.CyberLink Corp..) [HKLM] -- {80E158EA-7181-40FE-A701-301CE6BE64AB}
O42 - Logiciel: Realtek Ethernet Controller Driver - (.Realtek.) [HKLM] -- {8833FFB6-5B0C-4764-81AA-06DFEED9A476}
O42 - Logiciel: The Lord of the Rings FREE Trial - (.ATI Technologies Inc..) [HKLM] -- {8ACC73AA-6511-7C55-B1A9-8E5D1DEAFAA3}
O42 - Logiciel: Catalyst Control Center - Branding - (.ATI.) [HKLM] -- {8D7133DE-27D2-47E5-B248-4180278D32AA}
O42 - Logiciel: Epson Event Manager - (.SEIKO EPSON CORPORATION.) [HKLM] -- {8ED43F7E-A8F6-4898-AF11-B6158F2EDF94}
O42 - Logiciel: VC80CRTRedist - 8.0.50727.6195 - (.DivX, Inc.) [HKLM] -- {933B4015-4618-4716-A828-5289FC03165F}
O42 - Logiciel: agederar - (.ryofward.) [HKLM] -- {9f58a80e-3c37-4557-0e9d-4857a20ed324}
O42 - Logiciel: Epson Easy Photo Print 2 - (.SEIKO EPSON CORPORATION.) [HKLM] -- {A02D7029-C4EF-44C1-9FD4-C0D3CA518113}
O42 - Logiciel: CyberLink PowerDVD 9 - (.CyberLink Corp..) [HKLM] -- {A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}
O42 - Logiciel: LightScribe System Software - (.LightScribe.) [HKLM] -- {A8F1CA85-C713-4B1F-B3B4-B2B7A6824146}
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
O42 - Logiciel: Adobe Refresh Manager - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-0804-1033-1959-001824147215}
O42 - Logiciel: Adobe Reader XI (11.0.12) - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-AB0000000001}
O42 - Logiciel: Epson Easy Photo Print Plug-in for PMB(Picture Motion Browser) - (.SEIKO EPSON CORPORATION.) [HKLM] -- {B2D55EB8-32C5-4B43-9006-9E97DECBA178}
O42 - Logiciel: @BIOS - (.GIGABYTE.) [HKLM] -- {B2DC3F08-2EB2-49A5-AA24-15DFC8B1CB83}
O42 - Logiciel: PHOTOfunSTUDIO 6.0 - (.Panasonic Corporation.) [HKLM] -- {B62A8A6F-5E48-4336-BF13-1632D5921872}
O42 - Logiciel: QuickTime - (.Apple Inc..) [HKLM] -- {B67BAFBA-4C9F-48FA-9496-933E3B255044}
O42 - Logiciel: CyberLink PowerProducer - (.CyberLink Corp..) [HKLM] -- {B7A0CE06-068E-11D6-97FD-0050BACBF861}
O42 - Logiciel: AMD Drag and Drop Transcoding - (.ATI Technologies Inc..) [HKLM] -- {B7F293A4-8666-6410-36F4-E47EB2029CCB}
O42 - Logiciel: CyberLink LabelPrint - (.CyberLink Corp..) [HKLM] -- {C59C179C-668D-49A9-B6EA-0121CCFC1243}
O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM] -- {DF9C119C-7F26-45B9-93D4-7C372CBBBA11}
O42 - Logiciel: Boxore Client - (.Boxore OU.) [HKLM] -- {E199C882-78F1-45F1-9D8A-3DD3AF97A7C0} =>PUP.Optional.Boxore
O42 - Logiciel: System Requirements Lab CYRI - (.Husdawg, LLC.) [HKLM] -- {E362724E-9320-4946-AF34-874E7B6B2927}
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}
O42 - Logiciel: ABBYY FineReader 9.0 Sprint - (.ABBYY.) [HKLM] -- {F9000000-0018-0000-0000-074957833700}
O42 - Logiciel: Splashtop Connect IE - (.Splashtop Inc..) [HKLM] -- {F9F5EF72-18CF-4DCF-A721-EC86B94DAC46}

---\\ HKCU & HKLM Software Keys (129) - 8s
HKLM\SOFTWARE\ABBYY
HKLM\SOFTWARE\Adobe
HKLM\SOFTWARE\AdwCleaner
HKLM\SOFTWARE\Ahead
HKLM\SOFTWARE\Amazon
HKLM\SOFTWARE\AMD
HKLM\SOFTWARE\AppDataLow
HKLM\SOFTWARE\Apple Computer, Inc.
HKLM\SOFTWARE\Apple Inc.
HKLM\SOFTWARE\ATI
HKLM\SOFTWARE\ATI Technologies
HKLM\SOFTWARE\Audible
HKLM\SOFTWARE\BrowserChoice
HKLM\SOFTWARE\Crossbrowse =>PUP.Optional.CrossBrowse
HKLM\SOFTWARE\CyberLink
HKLM\SOFTWARE\DivX
HKLM\SOFTWARE\DivXNetworks
HKLM\SOFTWARE\Dolby
HKLM\SOFTWARE\downchecker
HKLM\SOFTWARE\DTS
HKLM\SOFTWARE\EPSON
HKLM\SOFTWARE\EpsonNet
HKLM\SOFTWARE\FFPluginHp =>PUP.Optional.SweetSearch
HKLM\SOFTWARE\GEAR Software
HKLM\SOFTWARE\Gigabyte
HKLM\SOFTWARE\GNU
HKLM\SOFTWARE\Google
HKLM\SOFTWARE\InstallShield
HKLM\SOFTWARE\Intel
HKLM\SOFTWARE\JavaSoft
HKLM\SOFTWARE\JreMetrics
HKLM\SOFTWARE\Lake
HKLM\SOFTWARE\Lavasoft
HKLM\SOFTWARE\Licenses
HKLM\SOFTWARE\LightScribe
HKLM\SOFTWARE\Macromedia
HKLM\SOFTWARE\Malwarebytes' Anti-Malware
HKLM\SOFTWARE\Malwarebytes' Anti-Malware (Trial)
HKLM\SOFTWARE\McAfee.com
HKLM\SOFTWARE\mcafeeupdater
HKLM\SOFTWARE\Mozilla
HKLM\SOFTWARE\mozilla.org
HKLM\SOFTWARE\MozillaPlugins
HKLM\SOFTWARE\mystartsearchSoftware =>PUP.Optional.StartSearch
HKLM\SOFTWARE\Naviextras
HKLM\SOFTWARE\Nero
HKLM\SOFTWARE\NeroDigital
HKLM\SOFTWARE\NimoCorp
HKLM\SOFTWARE\Object Browser-nv-ie =>PUP.Optional.ObjectBrowser
HKLM\SOFTWARE\ODBC
HKLM\SOFTWARE\OnStage
HKLM\SOFTWARE\Panasonic
HKLM\SOFTWARE\PhraseProfessor_1.10.0.21 =>PUP.Optional.Gen
HKLM\SOFTWARE\Piriform
HKLM\SOFTWARE\Realtek
HKLM\SOFTWARE\Realtek Semiconductor Corp.
HKLM\SOFTWARE\RegisteredApplications
HKLM\SOFTWARE\RTLSetup
HKLM\SOFTWARE\SEIKO EPSON CORPORATION
HKLM\SOFTWARE\Software
HKLM\SOFTWARE\Sonic
HKLM\SOFTWARE\SonicFocus
HKLM\SOFTWARE\Sony Corporation
HKLM\SOFTWARE\SRS Labs
HKLM\SOFTWARE\Symantec
HKLM\SOFTWARE\VideoLAN
HKLM\SOFTWARE\Volatile
HKLM\SOFTWARE\Waves Audio
HKLM\SOFTWARE\WinRAR
HKCU\SOFTWARE\ABBYY
HKCU\SOFTWARE\Ad-Remover
HKCU\SOFTWARE\Adobe
HKCU\SOFTWARE\AMD
HKCU\SOFTWARE\AOL
HKCU\SOFTWARE\AppDataLow
HKCU\SOFTWARE\Apple Computer, Inc.
HKCU\SOFTWARE\Apple Inc.
HKCU\SOFTWARE\ATI
HKCU\SOFTWARE\Chromium
HKCU\SOFTWARE\Crossbrowse =>PUP.Optional.CrossBrowse
HKCU\SOFTWARE\CrossBrowser =>PUP.Optional.CrossBrowser
HKCU\SOFTWARE\Cyberlink
HKCU\SOFTWARE\DivX
HKCU\SOFTWARE\DivXNetworks
HKCU\SOFTWARE\Dnldstr_Aggregator
HKCU\SOFTWARE\DownloadCenter
HKCU\SOFTWARE\EPSON
HKCU\SOFTWARE\Gabest
HKCU\SOFTWARE\Gigabyte
HKCU\SOFTWARE\GNU
HKCU\SOFTWARE\Google
HKCU\SOFTWARE\Hola
HKCU\SOFTWARE\InstallPath
HKCU\SOFTWARE\JavaSoft
HKCU\SOFTWARE\Lake
HKCU\SOFTWARE\LightScribe
HKCU\SOFTWARE\Local AppWizard-Generated Applications
HKCU\SOFTWARE\Macromedia
HKCU\SOFTWARE\MainConcept
HKCU\SOFTWARE\Malwarebytes' Anti-Malware
HKCU\SOFTWARE\MCAFEE
HKCU\SOFTWARE\Mozilla
HKCU\SOFTWARE\MozillaPlugins
HKCU\SOFTWARE\Naviextras
HKCU\SOFTWARE\Nero
HKCU\SOFTWARE\NeroDigital
HKCU\SOFTWARE\Netscape
HKCU\SOFTWARE\OB
HKCU\SOFTWARE\Object Browser-nv-ie =>PUP.Optional.ObjectBrowser
HKCU\SOFTWARE\ODBC
HKCU\SOFTWARE\Opera Software
HKCU\SOFTWARE\Panasonic
HKCU\SOFTWARE\Piriform
HKCU\SOFTWARE\Realtek
HKCU\SOFTWARE\ryofward
HKCU\SOFTWARE\Software
HKCU\SOFTWARE\System Requirements Lab
HKCU\SOFTWARE\TeleCharger
HKCU\SOFTWARE\Trolltech
HKCU\SOFTWARE\tstamptoken =>PUP.Optional.MaxComputerCleaner
HKCU\SOFTWARE\VB and VBA Program Settings
HKCU\SOFTWARE\WebApp
HKCU\SOFTWARE\WinRAR
HKCU\SOFTWARE\WinRAR SFX
HKCU\SOFTWARE\ZebHelpProcess Helper
HKCU\SOFTWARE\ƒAƒvƒŠƒP[ƒVƒ‡ƒ“ ƒEƒBƒU[ƒh‚Ő¶¬‚³‚ꂽƒ[ƒJƒ‹ ƒAƒvƒŠƒP[ƒVƒ‡ƒ“
HKCU\SOFTWARE\AppDataLow\Software
HKCU\SOFTWARE\AppDataLow\Software\Adobe
HKCU\SOFTWARE\AppDataLow\Software\JavaSoft

---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43) (230) - 7s
O43 - CFD: 2015/08/01 22:47:07 - [0] D -- C:\Program Files\3ec599db-b8cc-4081-a24c-d17af2e82169 =>PUP.Optional.CrossRider
O43 - CFD: 2015/08/01 19:28:48 - [] D -- C:\Program Files\46364331-1438450096-3444-3644-4646FFFFFFFF =>PUP.Optional.CrossRider
O43 - CFD: 2015/08/01 22:09:14 - [] D -- C:\Program Files\46364331-1438450313-3444-3644-4646FFFFFFFF =>PUP.Optional.CrossRider
O43 - CFD: 2015/08/01 22:09:06 - [] D -- C:\Program Files\7820b0eb-3626-4620-9e3a-dab3daac0de7 =>PUP.Optional.CrossRider
O43 - CFD: 2012/09/03 19:09:28 - [] D -- C:\Program Files\ABBYY FineReader 9.0 Sprint
O43 - CFD: 2012/08/30 00:43:05 - [] D -- C:\Program Files\Ad-Remover
O43 - CFD: 2013/05/31 19:20:49 - [] D -- C:\Program Files\Adobe
O43 - CFD: 2012/09/17 15:02:45 - [] D -- C:\Program Files\Amazon
O43 - CFD: 2011/09/29 12:09:40 - [] D -- C:\Program Files\AMD
O43 - CFD: 2013/04/03 21:14:46 - [] D -- C:\Program Files\Apple Software Update
O43 - CFD: 2015/08/01 20:21:31 - [] D -- C:\Program Files\Apps Launcher
O43 - CFD: 2011/09/29 12:04:13 - [] D -- C:\Program Files\ATI
O43 - CFD: 2011/09/29 12:04:00 - [] D -- C:\Program Files\ATI Technologies
O43 - CFD: 2013/10/01 14:02:56 - [] D -- C:\Program Files\Bonjour
O43 - CFD: 2014/09/18 14:28:45 - [] D -- C:\Program Files\CCleaner
O43 - CFD: 2015/08/01 21:31:29 - [] D -- C:\Program Files\chk32
O43 - CFD: 2015/08/01 22:22:00 - [] D -- C:\Program Files\Common Files
O43 - CFD: 2015/08/01 23:47:18 - [] D -- C:\Program Files\Crossbrowse =>PUP.Optional.CrossBrowse
O43 - CFD: 2013/06/04 01:06:30 - [] D -- C:\Program Files\CyberLink
O43 - CFD: 2013/04/11 17:17:33 - [] D -- C:\Program Files\DivX
O43 - CFD: 2011/10/01 15:38:01 - [] D -- C:\Program Files\DVD Maker
O43 - CFD: 2015/08/01 22:09:14 - [] D -- C:\Program Files\ee63cdc6-5f91-44d3-a3dd-8241c1189391 =>PUP.Optional.CrossRider
O43 - CFD: 2012/09/03 19:04:37 - [] D -- C:\Program Files\epson
O43 - CFD: 2012/09/03 19:07:15 - [] D -- C:\Program Files\Epson Software
O43 - CFD: 2012/09/03 19:02:50 - [] D -- C:\Program Files\EpsonNet
O43 - CFD: 2011/09/28 18:53:37 - [0] SHD -- C:\Program Files\Fichiers communs
O43 - CFD: 2011/09/29 12:11:19 - [] D -- C:\Program Files\Gigabyte
O43 - CFD: 2012/09/02 12:51:53 - [] D -- C:\Program Files\Google
O43 - CFD: 2013/06/04 01:06:05 - [] HD -- C:\Program Files\InstallShield Installation Information
O43 - CFD: 2015/07/16 14:35:41 - [] D -- C:\Program Files\Internet Explorer
O43 - CFD: 2013/10/01 14:04:12 - [] D -- C:\Program Files\iPod
O43 - CFD: 2013/10/01 14:04:48 - [] D -- C:\Program Files\iTunes
O43 - CFD: 2015/01/27 22:00:33 - [] D -- C:\Program Files\Java
O43 - CFD: 2015/08/01 20:33:38 - [] D -- C:\Program Files\Malwarebytes Anti-Malware
O43 - CFD: 2014/09/18 23:01:17 - [0] D -- C:\Program Files\Malwarebytes' Anti-Malware
O43 - CFD: 2014/06/16 05:46:19 - [] D -- C:\Program Files\McAfee Security Scan
O43 - CFD: 2009/07/14 11:00:58 - [] D -- C:\Program Files\Microsoft Games
O43 - CFD: 2012/02/24 13:54:29 - [] D -- C:\Program Files\Microsoft Office
O43 - CFD: 2015/05/13 08:13:24 - [] D -- C:\Program Files\Microsoft Security Client
O43 - CFD: 2011/12/25 21:54:39 - [] D -- C:\Program Files\Microsoft SQL Server Compact Edition
O43 - CFD: 2011/12/25 21:54:39 - [] D -- C:\Program Files\Microsoft Synchronization Services
O43 - CFD: 2011/10/14 17:33:17 - [] D -- C:\Program Files\Microsoft.NET
O43 - CFD: 2015/08/01 23:56:27 - [] D -- C:\Program Files\Mozilla Firefox
O43 - CFD: 2015/08/01 23:56:25 - [] D -- C:\Program Files\Mozilla Maintenance Service
O43 - CFD: 2009/07/14 06:52:30 - [] D -- C:\Program Files\MSBuild
O43 - CFD: 2012/08/15 13:35:06 - [] D -- C:\Program Files\Naviextras
O43 - CFD: 2011/09/29 12:22:28 - [] D -- C:\Program Files\Nero
O43 - CFD: 2011/09/29 14:45:14 - [] D -- C:\Program Files\NimoCodec Pack
O43 - CFD: 2015/08/01 23:48:14 - [] D -- C:\Program Files\On Stage =>PUP.Optional.OnStage
O43 - CFD: 2015/08/01 19:31:04 - [0] D -- C:\Program Files\Opera
O43 - CFD: 2011/12/25 21:54:42 - [] D -- C:\Program Files\Panasonic
O43 - CFD: 2015/08/01 22:44:26 - [] D -- C:\Program Files\PhraseProfessor_1.10.0.21 =>PUP.Optional.Gen
O43 - CFD: 2012/08/29 23:06:51 - [0] D -- C:\Program Files\PlayerPlus
O43 - CFD: 2013/09/02 23:17:59 - [] D -- C:\Program Files\QuickTime
O43 - CFD: 2011/09/29 12:06:58 - [] D -- C:\Program Files\Realtek
O43 - CFD: 2009/07/14 06:52:30 - [] D -- C:\Program Files\Reference Assemblies
O43 - CFD: 2013/05/31 21:00:35 - [] D -- C:\Program Files\RegCleaner
O43 - CFD: 2015/08/01 22:47:54 - [] D -- C:\Program Files\SpaceSondPro_v53.1254 =>PUP.Optional.SpaceSoundPro
O43 - CFD: 2015/08/01 22:38:24 - [0] D -- C:\Program Files\SpeedFoxV1
O43 - CFD: 2013/09/18 17:42:05 - [] D -- C:\Program Files\SystemRequirementsLab
O43 - CFD: 2011/09/29 12:05:09 - [0] HD -- C:\Program Files\Temp
O43 - CFD: 2009/07/14 06:53:23 - [0] HD -- C:\Program Files\Uninstall Information
O43 - CFD: 2011/09/29 14:42:58 - [] D -- C:\Program Files\VideoLAN
O43 - CFD: 2013/07/11 22:06:03 - [] D -- C:\Program Files\Windows Defender
O43 - CFD: 2015/05/13 17:45:48 - [] D -- C:\Program Files\Windows Journal
O43 - CFD: 2011/10/01 15:38:01 - [] D -- C:\Program Files\Windows Mail
O43 - CFD: 2015/06/10 18:40:46 - [] D -- C:\Program Files\Windows Media Player
O43 - CFD: 2011/09/28 18:53:37 - [] D -- C:\Program Files\Windows NT
O43 - CFD: 2011/10/01 15:38:00 - [] D -- C:\Program Files\Windows Photo Viewer
O43 - CFD: 2011/10/01 15:38:00 - [] D -- C:\Program Files\Windows Portable Devices
O43 - CFD: 2011/10/01 15:38:01 - [] D -- C:\Program Files\Windows Sidebar
O43 - CFD: 2015/03/14 14:47:42 - [] D -- C:\Program Files\WinRAR
O43 - CFD: 2015/08/01 22:42:23 - [] D -- C:\Program Files\ZHPDiag
O43 - CFD: 2011/12/04 16:13:49 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ABBYY FineReader 9.0 Sprint
O43 - CFD: 2011/09/29 00:50:10 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 2009/07/14 06:46:36 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 2012/09/17 15:02:46 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Amazon
O43 - CFD: 2011/09/29 12:04:04 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Catalyst Control Center
O43 - CFD: 2014/07/27 21:10:33 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
O43 - CFD: 2015/08/01 23:50:49 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Crossbrowse =>PUP.Optional.CrossBrowse
O43 - CFD: 2013/06/04 01:01:15 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink Blu-ray Disc Suite
O43 - CFD: 2013/04/11 17:17:33 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX Plus
O43 - CFD: 2012/09/03 19:11:59 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON
O43 - CFD: 2012/09/03 19:08:02 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epson Software
O43 - CFD: 2011/09/29 00:50:11 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
O43 - CFD: 2011/09/29 12:11:19 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIGABYTE
O43 - CFD: 2015/08/01 22:54:41 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
O43 - CFD: 2013/10/01 14:05:34 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
O43 - CFD: 2015/01/27 22:00:48 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
O43 - CFD: 2011/09/29 12:23:54 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LG Burning Tools
O43 - CFD: 2011/09/30 19:59:10 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LightScribe Direct Disc Labeling
O43 - CFD: 2009/07/14 06:42:30 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 2015/08/01 20:33:37 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
O43 - CFD: 2014/06/16 05:46:26 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus
O43 - CFD: 2011/10/01 06:29:29 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
O43 - CFD: 2011/12/25 21:54:54 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Panasonic
O43 - CFD: 2013/09/02 23:17:54 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
O43 - CFD: 2014/06/16 05:46:23 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
O43 - CFD: 2009/07/14 11:00:22 - [0] RHD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC
O43 - CFD: 2013/11/22 19:16:39 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
O43 - CFD: 2015/03/13 23:52:53 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
O43 - CFD: 2015/08/01 22:42:23 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP
O43 - CFD: 2013/10/01 14:04:48 - [] D -- C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1
O43 - CFD: 2015/08/01 23:48:10 - [] D -- C:\ProgramData\2988696b-294c-4054-b34f-e97ca58a10e8
O43 - CFD: 2015/08/01 19:37:42 - [] D -- C:\ProgramData\7WinManPro7
O43 - CFD: 2011/12/04 16:12:17 - [] D -- C:\ProgramData\ABBYY
O43 - CFD: 2013/05/31 19:20:52 - [] D -- C:\ProgramData\Adobe
O43 - CFD: 2013/10/01 14:03:16 - [] D -- C:\ProgramData\Apple
O43 - CFD: 2013/10/01 14:04:11 - [] D -- C:\ProgramData\Apple Computer
O43 - CFD: 2009/07/14 06:53:55 - [0] SHD -- C:\ProgramData\Application Data
O43 - CFD: 2011/09/29 12:06:28 - [] D -- C:\ProgramData\ATI
O43 - CFD: 2011/09/28 18:53:37 - [0] SHD -- C:\ProgramData\Bureau
O43 - CFD: 2015/08/01 20:19:02 - [] D -- C:\ProgramData\BWinManProB
O43 - CFD: 2012/07/11 18:57:27 - [] D -- C:\ProgramData\ClubSanDisk
O43 - CFD: 2013/06/04 01:07:34 - [] D -- C:\ProgramData\CyberLink
O43 - CFD: 2009/07/14 06:53:55 - [0] SHD -- C:\ProgramData\Desktop
O43 - CFD: 2013/04/11 17:17:33 - [] D -- C:\ProgramData\DivX
O43 - CFD: 2009/07/14 06:53:55 - [0] SHD -- C:\ProgramData\Documents
O43 - CFD: 2012/09/03 19:13:07 - [] D -- C:\ProgramData\EPSON
O43 - CFD: 2011/09/28 18:53:37 - [0] SHD -- C:\ProgramData\Favoris
O43 - CFD: 2009/07/14 06:53:55 - [0] SHD -- C:\ProgramData\Favorites
O43 - CFD: 2012/09/02 12:50:54 - [] D -- C:\ProgramData\Google
O43 - CFD: 2013/06/04 00:12:40 - [] D -- C:\ProgramData\install_clap
O43 - CFD: 2015/08/01 19:31:22 - [] D -- C:\ProgramData\Lavasoft
O43 - CFD: 2013/06/06 13:38:08 - [] D -- C:\ProgramData\LightScribe
O43 - CFD: 2014/09/18 23:01:18 - [] D -- C:\ProgramData\Malwarebytes
O43 - CFD: 2011/10/28 17:09:50 - [] D -- C:\ProgramData\McAfee
O43 - CFD: 2014/06/16 05:46:23 - [] D -- C:\ProgramData\McAfee Security Scan
O43 - CFD: 2011/09/28 18:53:37 - [0] SHD -- C:\ProgramData\Menu Démarrer
O43 - CFD: 2014/12/10 15:19:30 - [] SD -- C:\ProgramData\Microsoft
O43 - CFD: 2011/09/28 18:53:37 - [0] SHD -- C:\ProgramData\Modèles
O43 - CFD: 2012/05/03 22:23:26 - [] D -- C:\ProgramData\Mozilla
O43 - CFD: 2015/08/01 19:42:25 - [] D -- C:\ProgramData\Mropnuuflu
O43 - CFD: 2011/09/29 12:22:28 - [] D -- C:\ProgramData\Nero
O43 - CFD: 2015/01/27 22:01:44 - [] D -- C:\ProgramData\Oracle
O43 - CFD: 2015/08/01 22:06:14 - [] D -- C:\ProgramData\OWinManProO
O43 - CFD: 2011/12/25 21:56:46 - [] D -- C:\ProgramData\Panasonic
O43 - CFD: 2013/06/04 00:18:14 - [] D -- C:\ProgramData\PDVD
O43 - CFD: 2009/07/14 06:53:55 - [0] SHD -- C:\ProgramData\Start Menu
O43 - CFD: 2013/05/31 17:43:38 - [] D -- C:\ProgramData\Sun
O43 - CFD: 2013/09/18 17:42:05 - [] D -- C:\ProgramData\SystemRequirementsLab
O43 - CFD: 2013/06/04 00:36:07 - [] AD -- C:\ProgramData\Temp
O43 - CFD: 2009/07/14 06:53:55 - [0] SHD -- C:\ProgramData\Templates
O43 - CFD: 2012/09/03 19:08:02 - [] D -- C:\ProgramData\UDL
O43 - CFD: 2015/08/01 22:50:19 - [] D -- C:\ProgramData\yWinManProy
O43 - CFD: 2011/09/29 12:01:34 - [] HD -- C:\ProgramData\{8533ADFA-85F0-4dc1-946A-2A0BA58E78E3}
O43 - CFD: 2015/08/01 23:48:11 - [] D -- C:\Program Files\Common Files\2988696b-294c-4054-b34f-e97ca58a10e8
O43 - CFD: 2011/12/04 16:12:17 - [] D -- C:\Program Files\Common Files\ABBYY
O43 - CFD: 2013/05/31 19:20:51 - [] D -- C:\Program Files\Common Files\Adobe
O43 - CFD: 2013/10/01 14:04:11 - [] D -- C:\Program Files\Common Files\Apple
O43 - CFD: 2011/09/29 12:04:11 - [] D -- C:\Program Files\Common Files\ATI Technologies
O43 - CFD: 2011/09/30 20:04:29 - [] D -- C:\Program Files\Common Files\CyberLink
O43 - CFD: 2011/09/29 14:37:50 - [] D -- C:\Program Files\Common Files\DESIGNER
O43 - CFD: 2013/04/11 17:17:02 - [] D -- C:\Program Files\Common Files\DivX Shared
O43 - CFD: 2012/09/03 19:02:21 - [] D -- C:\Program Files\Common Files\EPSON
O43 - CFD: 2011/09/29 12:22:46 - [] D -- C:\Program Files\Common Files\InstallShield
O43 - CFD: 2015/01/27 22:01:13 - [] D -- C:\Program Files\Common Files\Java
O43 - CFD: 2011/09/30 19:59:09 - [] D -- C:\Program Files\Common Files\LightScribe
O43 - CFD: 2011/10/01 06:29:29 - [] D -- C:\Program Files\Common Files\microsoft shared
O43 - CFD: 2011/09/29 12:23:32 - [] D -- C:\Program Files\Common Files\Nero
O43 - CFD: 2011/12/25 21:54:53 - [] D -- C:\Program Files\Common Files\Panasonic
O43 - CFD: 2009/07/14 04:37:05 - [] D -- C:\Program Files\Common Files\Services
O43 - CFD: 2009/07/14 04:37:05 - [] D -- C:\Program Files\Common Files\SpeechEngines
O43 - CFD: 2015/08/01 22:22:05 - [] D -- C:\Program Files\Common Files\System
O43 - CFD: 2011/10/28 17:17:22 - [] D -- C:\Users\Jonathan\AppData\Roaming\Adobe
O43 - CFD: 2015/08/01 19:28:26 - [] D -- C:\Users\Jonathan\AppData\Roaming\agederar
O43 - CFD: 2012/09/17 15:03:58 - [] D -- C:\Users\Jonathan\AppData\Roaming\Amazon
O43 - CFD: 2013/10/01 14:06:18 - [] D -- C:\Users\Jonathan\AppData\Roaming\Apple Computer
O43 - CFD: 2011/09/29 12:06:28 - [] D -- C:\Users\Jonathan\AppData\Roaming\ATI
O43 - CFD: 2013/06/04 00:27:43 - [] D -- C:\Users\Jonathan\AppData\Roaming\CyberLink
O43 - CFD: 2015/08/01 20:18:45 - [] D -- C:\Users\Jonathan\AppData\Roaming\Devoted Squadron
O43 - CFD: 2013/06/04 00:42:22 - [] D -- C:\Users\Jonathan\AppData\Roaming\DivX
O43 - CFD: 2014/10/11 15:57:18 - [] D -- C:\Users\Jonathan\AppData\Roaming\dvdcss
O43 - CFD: 2011/12/04 16:28:25 - [] D -- C:\Users\Jonathan\AppData\Roaming\Epson
O43 - CFD: 2012/09/04 10:58:40 - [] D -- C:\Users\Jonathan\AppData\Roaming\Google
O43 - CFD: 2011/09/28 18:53:55 - [] D -- C:\Users\Jonathan\AppData\Roaming\Identities
O43 - CFD: 2012/09/03 19:06:38 - [] D -- C:\Users\Jonathan\AppData\Roaming\InstallShield
O43 - CFD: 2015/08/01 19:31:22 - [] D -- C:\Users\Jonathan\AppData\Roaming\Lavasoft
O43 - CFD: 2011/09/29 14:51:32 - [] D -- C:\Users\Jonathan\AppData\Roaming\Macromedia
O43 - CFD: 2014/09/18 23:01:31 - [0] D -- C:\Users\Jonathan\AppData\Roaming\Malwarebytes
O43 - CFD: 2009/07/14 11:00:22 - [0] D -- C:\Users\Jonathan\AppData\Roaming\Media Center Programs
O43 - CFD: 2015/06/06 13:41:01 - [] SD -- C:\Users\Jonathan\AppData\Roaming\Microsoft
O43 - CFD: 2011/09/30 17:48:07 - [] D -- C:\Users\Jonathan\AppData\Roaming\Mozilla
O43 - CFD: 2015/08/01 23:44:35 - [] D -- C:\Users\Jonathan\AppData\Roaming\mystartsearch =>PUP.Optional.StartSearch
O43 - CFD: 2012/08/15 13:37:07 - [] D -- C:\Users\Jonathan\AppData\Roaming\naviextras
O43 - CFD: 2011/09/30 19:40:21 - [] D -- C:\Users\Jonathan\AppData\Roaming\Nero
O43 - CFD: 2015/08/01 21:50:55 - [] D -- C:\Users\Jonathan\AppData\Roaming\vlc
O43 - CFD: 2011/10/06 16:54:37 - [] D -- C:\Users\Jonathan\AppData\Roaming\WinRAR
O43 - CFD: 2015/08/02 00:05:53 - [] D -- C:\Users\Jonathan\AppData\Roaming\ZHP
O43 - CFD: 2015/08/01 22:13:05 - [] D -- C:\Users\Jonathan\AppData\Local\13975
O43 - CFD: 2011/12/04 16:14:02 - [] D -- C:\Users\Jonathan\AppData\Local\ABBYY
O43 - CFD: 2015/07/09 13:26:38 - [] D -- C:\Users\Jonathan\AppData\Local\Adobe
O43 - CFD: 2011/12/25 21:57:30 - [] D -- C:\Users\Jonathan\AppData\Local\Apple
O43 - CFD: 2013/10/01 14:05:40 - [] D -- C:\Users\Jonathan\AppData\Local\Apple Computer
O43 - CFD: 2011/09/28 18:53:44 - [0] SHD -- C:\Users\Jonathan\AppData\Local\Application Data
O43 - CFD: 2011/09/29 12:06:28 - [] D -- C:\Users\Jonathan\AppData\Local\ATI
O43 - CFD: 2015/08/01 22:31:27 - [] D -- C:\Users\Jonathan\AppData\Local\bvxvbvef
O43 - CFD: 2015/08/01 22:06:03 - [] D -- C:\Users\Jonathan\AppData\Local\CrashRpt =>.Legitimate.CrashReports
O43 - CFD: 2013/06/04 00:54:37 - [] D -- C:\Users\Jonathan\AppData\Local\Cyberlink
O43 - CFD: 2015/08/01 19:31:52 - [] D -- C:\Users\Jonathan\AppData\Local\DCheckService
O43 - CFD: 2015/04/20 07:53:17 - [0] D -- C:\Users\Jonathan\AppData\Local\Diagnostics
O43 - CFD: 2013/09/02 15:25:31 - [0] D -- C:\Users\Jonathan\AppData\Local\ElevatedDiagnostics
O43 - CFD: 2015/06/14 21:33:12 - [0] SHD -- C:\Users\Jonathan\AppData\Local\EmieBrowserModeList
O43 - CFD: 2015/06/14 21:33:12 - [0] SHD -- C:\Users\Jonathan\AppData\Local\EmieSiteList
O43 - CFD: 2015/06/14 21:33:12 - [0] SHD -- C:\Users\Jonathan\AppData\Local\EmieUserList
O43 - CFD: 2015/08/01 19:39:09 - [] D -- C:\Users\Jonathan\AppData\Local\Google
O43 - CFD: 2015/06/01 14:05:21 - [] D -- C:\Users\Jonathan\AppData\Local\GWX
O43 - CFD: 2011/09/28 18:53:44 - [0] SHD -- C:\Users\Jonathan\AppData\Local\Historique
O43 - CFD: 2015/08/01 22:06:13 - [] D -- C:\Users\Jonathan\AppData\Local\Installer =>PUP.Optional.InstallPedia
O43 - CFD: 2012/06/23 23:48:01 - [] D -- C:\Users\Jonathan\AppData\Local\Macromedia
O43 - CFD: 2013/06/04 00:16:35 - [] D -- C:\Users\Jonathan\AppData\Local\MediaServer
O43 - CFD: 2015/06/06 13:41:01 - [] D -- C:\Users\Jonathan\AppData\Local\Microsoft
O43 - CFD: 2012/12/22 17:57:55 - [] D -- C:\Users\Jonathan\AppData\Local\Microsoft Games
O43 - CFD: 2013/10/29 17:51:47 - [] D -- C:\Users\Jonathan\AppData\Local\Mozilla
O43 - CFD: 2011/12/25 21:56:21 - [] D -- C:\Users\Jonathan\AppData\Local\Panasonic
O43 - CFD: 2011/09/30 21:47:13 - [] D -- C:\Users\Jonathan\AppData\Local\Power2Go
O43 - CFD: 2013/09/02 22:49:18 - [] D -- C:\Users\Jonathan\AppData\Local\Programs
O43 - CFD: 2012/07/11 18:57:31 - [] D -- C:\Users\Jonathan\AppData\Local\Proxure
O43 - CFD: 2015/08/01 19:31:21 - [] D -- C:\Users\Jonathan\AppData\Local\ServiceGoogle
O43 - CFD: 2015/08/02 00:05:39 - [] D -- C:\Users\Jonathan\AppData\Local\Temp
O43 - CFD: 2011/09/28 18:53:44 - [0] SHD -- C:\Users\Jonathan\AppData\Local\Temporary Internet Files
O43 - CFD: 2013/05/31 21:10:27 - [] D -- C:\Users\Jonathan\AppData\Local\VirtualStore
O43 - CFD: 2009/07/14 06:42:04 - [] RD -- C:\Users\Jonathan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 2015/08/01 22:24:24 - [] RD -- C:\Users\Jonathan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 2013/06/04 01:06:35 - [] D -- C:\Users\Jonathan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink Blu-ray Disc Suite
O43 - CFD: 2013/06/04 00:24:36 - [] D -- C:\Users\Jonathan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LG Power Tools
O43 - CFD: 2009/07/14 06:37:42 - [] RD -- C:\Users\Jonathan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 2012/08/15 13:35:16 - [] D -- C:\Users\Jonathan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Naviextras
O43 - CFD: 2015/08/01 23:50:49 - [] RD -- C:\Users\Jonathan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
O43 - CFD: 2015/03/13 23:52:53 - [] D -- C:\Users\Jonathan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR

---\\ Liste des pilotes du système (SDL) (O58) (74) - 3s
O58 - SDL:2009/07/14 03:26:15 A . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\drivers\adp94xx.sys [422976]
O58 - SDL:2009/07/14 03:26:17 A . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\System32\drivers\adpahci.sys [297552]
O58 - SDL:2009/07/14 03:26:15 A . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver.) -- C:\Windows\System32\drivers\adpu320.sys [146512]
O58 - SDL:2009/07/14 03:26:15 A . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\Windows\System32\drivers\aliide.sys [14400]
O58 - SDL:2011/03/11 07:38:37 A . (.Advanced Micro Devices - AHCI 1.2 Device Driver.) -- C:\Windows\System32\drivers\amdsata.sys [80256]
O58 - SDL:2009/07/14 03:26:15 A . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller D.) -- C:\Windows\System32\drivers\amdsbs.sys [159312]
O58 - SDL:2011/03/11 07:38:37 A . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\Windows\System32\drivers\amdxata.sys [22400]
O58 - SDL:2011/01/10 18:16:16 A . (...) -- C:\Windows\System32\drivers\AppleCharger.sys [18544]
O58 - SDL:2009/07/14 03:26:15 A . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\System32\drivers\arc.sys [76368]
O58 - SDL:2009/07/14 03:26:15 A . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\System32\drivers\arcsas.sys [86608]
O58 - SDL:2009/10/05 17:31:50 A . (.Atheros Communications, Inc. - Atheros Extensible Wireless LAN device driv.) -- C:\Windows\System32\drivers\athr.sys [1221632]
O58 - SDL:2010/04/07 04:43:20 A . (.ATI Technologies Inc. - ATI Radeon Kernel Mode Driver.) -- C:\Windows\System32\drivers\atikmdag.sys [5430272]
O58 - SDL:2010/04/07 03:23:10 A . (.Advanced Micro Devices, Inc. - AMD multi-vendor Miniport Driver.) -- C:\Windows\System32\drivers\atikmpag.sys [157184]
O58 - SDL:2009/07/14 00:02:49 A . (.Broadcom Corporation - Pilote unifié NDIS6.x Broadcom NetXtreme Gi.) -- C:\Windows\System32\drivers\b57nd60x.sys [229888]
O58 - SDL:2009/07/14 00:53:28 A . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower.) -- C:\Windows\System32\drivers\BrFiltLo.sys [13568]
O58 - SDL:2009/07/14 00:53:28 A . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper.) -- C:\Windows\System32\drivers\BrFiltUp.sys [5248]
O58 - SDL:2009/07/14 02:57:25 A . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\System32\drivers\BrSerId.sys [272128]
O58 - SDL:2009/07/14 00:53:32 A . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\System32\drivers\BrSerWdm.sys [62336]
O58 - SDL:2009/07/14 00:53:33 A . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\System32\drivers\BrUsbMdm.sys [12160]
O58 - SDL:2009/07/14 00:53:33 A . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\System32\drivers\BrUsbSer.sys [11904]
O58 - SDL:2009/07/14 00:02:48 A . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.) -- C:\Windows\System32\drivers\bxvbdx.sys [430080]
O58 - SDL:2009/07/14 03:26:21 A . (.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\cmdide.sys [15952]
O58 - SDL:2009/07/14 03:20:28 A . (.Adaptec, Inc. - Adaptec Ultra SCSI miniport.) -- C:\Windows\System32\drivers\djsvs.sys [70720]
O58 - SDL:2009/07/14 03:20:28 A . (.Emulex - Storport Miniport Driver for LightPulse HBA.) -- C:\Windows\System32\drivers\elxstor.sys [453712]
O58 - SDL:2009/07/14 00:02:48 A . (.Broadcom Corporation - Broadcom NetXtreme II 10 GigE VBD.) -- C:\Windows\System32\drivers\evbdx.sys [3100160]
O58 - SDL:2012/08/21 13:01:22 A . (.GEAR Software Inc. - CD DVD Filter.) -- C:\Windows\System32\drivers\GEARAspiWDM.sys [26840]
O58 - SDL:2012/04/06 21:57:34 A . (...) -- C:\Windows\System32\drivers\GVTDrv.sys [24944]
O58 - SDL:2009/07/14 00:54:14 A . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for.) -- C:\Windows\System32\drivers\hcw85cir.sys [26624]
O58 - SDL:2009/07/14 03:20:28 A . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Drive.) -- C:\Windows\System32\drivers\HpSAMD.sys [67152]
O58 - SDL:2011/03/11 07:38:51 A . (.Intel Corporation - Intel Matrix Storage Manager driver - ia32.) -- C:\Windows\System32\drivers\iaStorV.sys [332160]
O58 - SDL:2009/07/14 03:20:36 A . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\System32\drivers\iirsp.sys [41040]
O58 - SDL:2009/07/14 03:20:36 A . (.LSI Corporation - LSI Fusion-MPT FC Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_fc.sys [95824]
O58 - SDL:2009/07/14 03:20:37 A . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas.sys [89168]
O58 - SDL:2009/07/14 03:20:36 A . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas2.sys [54864]
O58 - SDL:2009/07/14 03:20:36 A . (.LSI Corporation - LSI Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_scsi.sys [96848]
O58 - SDL:2015/06/18 08:41:36 A . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\drivers\mbam.sys [23256]
O58 - SDL:2015/06/18 08:41:42 A . (.Malwarebytes Corporation - Malwarebytes Chameleon Protection Driver.) -- C:\Windows\System32\drivers\mbamchameleon.sys [94936]
O58 - SDL:2015/08/01 20:34:39 A . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\drivers\MBAMSwissArmy.sys [98520]
O58 - SDL:2009/07/14 03:20:36 A . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows.) -- C:\Windows\System32\drivers\megasas.sys [30800]
O58 - SDL:2009/07/14 03:20:36 A . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\System32\drivers\MegaSR.sys [235584]
O58 - SDL:2015/06/18 08:41:54 A . (.Malwarebytes Corporation - Malwarebytes Web Access Control.) -- C:\Windows\System32\drivers\mwac.sys [51928]
O58 - SDL:2009/07/14 03:20:44 A . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\System32\drivers\nfrd960.sys [44624]
O58 - SDL:2011/03/11 07:39:00 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\System32\drivers\nvraid.sys [117120]
O58 - SDL:2011/03/11 07:39:00 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\System32\drivers\nvstor.sys [143744]
O58 - SDL:2015/07/28 23:47:42 A . (.PhraseProfessor - PP TDI Driver x86.) -- C:\Windows\System32\drivers\ppfd_vt_1_10_0_21.sys [56464] =>PUP.Optional.Gen
O58 - SDL:2015/07/28 23:47:44 A . (.PhraseProfessor - PP WFP Driver x86.) -- C:\Windows\System32\drivers\ppfd_vw_1_10_0_21.sys [48528] =>PUP.Optional.Gen
O58 - SDL:2009/07/14 03:19:04 A . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\Windows\System32\drivers\ql2300.sys [1383488]
O58 - SDL:2009/07/14 03:19:04 A . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\Windows\System32\drivers\ql40xx.sys [106064]
O58 - SDL:2011/01/13 13:58:30 A . (.Realtek - Realtek 8101E/8168/8169 NDIS 6.20 32-bit Dr.) -- C:\Windows\System32\drivers\Rt86win7.sys [328808]
O58 - SDL:2010/05/25 05:07:38 A . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function D.) -- C:\Windows\System32\drivers\RtHDMIV.sys [204448]
O58 - SDL:2010/11/02 13:29:14 A . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function D.) -- C:\Windows\System32\drivers\RTKVHDA.sys [3228712]
O58 - SDL:2009/07/13 22:50:20 A . (.Macrovision Corporation, Macrovision Europe Limited, - Macrovision SECURITY Driver.) -- C:\Windows\System32\drivers\secdrv.sys [20480]
O58 - SDL:2009/07/14 01:45:33 A . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\System32\drivers\serial.sys [83456]
O58 - SDL:2009/07/14 03:19:04 A . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\System32\drivers\sisraid2.sys [40016]
O58 - SDL:2009/07/14 03:19:04 A . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\System32\drivers\sisraid4.sys [77888]
O58 - SDL:2009/07/14 03:19:04 A . (.Promise Technology - Promise SuperTrak EX Series Driver for Win.) -- C:\Windows\System32\drivers\stexstor.sys [21072]
O58 - SDL:2009/07/14 03:19:10 A . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\viaide.sys [16976]
O58 - SDL:2009/07/14 03:19:11 A . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\Windows\System32\drivers\vsmraid.sys [141904]
O58 - SDL:2015/06/16 00:28:48 A . (.Word Surfer - Word Surfer TDI Driver x86.) -- C:\Windows\System32\drivers\wsafd_1_10_0_19.sys [56448]
O58 - SDL:2009/07/13 23:40:41 A . (...) -- C:\Windows\System32\ANSI.SYS [9029]
O58 - SDL:2009/07/13 23:40:44 A . (...) -- C:\Windows\System32\country.sys [27097]
O58 - SDL:2009/07/13 23:40:40 A . (...) -- C:\Windows\System32\HIMEM.SYS [4768]
O58 - SDL:2009/07/13 23:40:43 A . (...) -- C:\Windows\System32\KEY01.SYS [42809]
O58 - SDL:2009/07/13 23:40:43 A . (...) -- C:\Windows\System32\KEYBOARD.SYS [42537]
O58 - SDL:2009/07/13 23:40:23 A . (...) -- C:\Windows\System32\NTDOS.SYS [27866]
O58 - SDL:2009/07/13 23:40:31 A . (...) -- C:\Windows\System32\NTDOS404.SYS [29146]
O58 - SDL:2009/07/13 23:40:35 A . (...) -- C:\Windows\System32\NTDOS411.SYS [29370]
O58 - SDL:2009/07/13 23:40:39 A . (...) -- C:\Windows\System32\NTDOS412.SYS [29274]
O58 - SDL:2009/07/13 23:40:27 A . (...) -- C:\Windows\System32\NTDOS804.SYS [29146]
O58 - SDL:2009/07/13 23:40:11 A . (...) -- C:\Windows\System32\NTIO.SYS [33952]
O58 - SDL:2009/07/13 23:40:15 A . (...) -- C:\Windows\System32\NTIO404.SYS [34672]
O58 - SDL:2009/07/13 23:40:17 A . (...) -- C:\Windows\System32\NTIO411.SYS [35776]
O58 - SDL:2009/07/13 23:40:19 A . (...) -- C:\Windows\System32\NTIO412.SYS [35536]
O58 - SDL:2009/07/13 23:40:13 A . (...) -- C:\Windows\System32\NTIO804.SYS [34672]

---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61) (9) - 3s
O61 - LFC: 2015/08/01 23:55:28 A . (..) -- C:\Users\Jonathan\Downloads\Firefox Setup Stub 39.0.exe [242904]
O61 - LFC: 2015/08/01 20:18:43 A . (..) -- C:\Users\Jonathan\AppData\Roaming\Devoted Squadron\Devoted Squadron.exe [66048]
O61 - LFC: 2015/08/01 19:28:33 A . (..) -- C:\Users\Jonathan\AppData\Roaming\agederar\nessriny.dll [135168]
O61 - LFC: 2015/08/01 19:31:18 A . (..) -- C:\Users\Jonathan\AppData\Local\ServiceGoogle\service.exe [34304]
O61 - LFC: 2015/08/01 22:06:01 A . (.Copyright (C) 2014.) -- C:\Users\Jonathan\AppData\Local\Installer\Install_31494\DCYTDownloader.exe [1444352] =>PUP.Optional.YTDownloader
O61 - LFC: 2015/08/01 19:31:18 A . (..) -- C:\Users\Jonathan\AppData\Local\DCheckService\dcheck.exe [34304]
O61 - LFC: 2015/07/26 10:15:22 A . (..) -- C:\Users\Jonathan\AppData\Local\bvxvbvef\bvxvbvef.exe [2172416]
O61 - LFC: 2015/08/01 23:46:26 A . (..) -- C:\Users\Jonathan\AppData\Local\ATI\ACE\Manifest.Bin [32089]
O61 - LFC: 2015/08/01 22:13:14 A . (..) -- C:\Users\Jonathan\AppData\Local\13975\Updater.exe [1841152]

---\\ Associations Shell Spawning (O67) (1) - 0s
O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Ob.) -- C:\Windows\System32\eventvwr.exe

---\\ Menu de démarrage Internet (SMI) (O68) (16) - 1s
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Crossbrowse - Crossbrowse.) -- C:\Program Files\Crossbrowse\Crossbrowse\Application\crossbrowse.exe =>PUP.Optional.CrossBrowse
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe http://www.mystartsearch.com/ =>PUP.Optional.StartSearch
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (...) -- iexplore.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Crossbrowse - Crossbrowse.) -- C:\Program Files\Crossbrowse\Crossbrowse\Application\crossbrowse.exe =>PUP.Optional.CrossBrowse
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Crossbrowse - Crossbrowse.) -- C:\Program Files\Crossbrowse\Crossbrowse\Application\crossbrowse.exe =>PUP.Optional.CrossBrowse
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Crossbrowse - Crossbrowse.) -- C:\Program Files\Crossbrowse\Crossbrowse\Application\crossbrowse.exe =>PUP.Optional.CrossBrowse
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe

---\\ Recherche d'infection sur les navigateurs internet (SBI) (O69) (23) - 19s
O69 - SBI: prefs.js [Jonathan - 3v3nyr05.default-1438451279976] user_pref("browser.search.defaultenginename", "mystartsearch"); =>PUP.Optional.StartSearch
O69 - SBI: prefs.js [Jonathan - 3v3nyr05.default-1438451279976] user_pref("browser.search.searchengine.alias", "mystartsearch"); =>PUP.Optional.SearchEngine
O69 - SBI: prefs.js [Jonathan - 3v3nyr05.default-1438451279976] user_pref("browser.search.searchengine.desc", "this is my first firefox searchEngine"); =>PUP.Optional.SearchEngine
O69 - SBI: prefs.js [Jonathan - 3v3nyr05.default-1438451279976] user_pref("browser.search.searchengine.iconURL", "http://www.mystartsearch.com/favicon.ico"); =>PUP.Optional.StartSearch
O69 - SBI: prefs.js [Jonathan - 3v3nyr05.default-1438451279976] user_pref("browser.search.searchengine.name", "mystartsearch"); =>PUP.Optional.SearchEngine
O69 - SBI: prefs.js [Jonathan - 3v3nyr05.default-1438451279976] user_pref("browser.search.searchengine.ptid", "cmi"); =>PUP.Optional.SearchEngine
O69 - SBI: prefs.js [Jonathan - 3v3nyr05.default-1438451279976] user_pref("browser.search.searchengine.uid", "WDCXWD10EARX-00N0YB0_WD-WCC0T005535155351"); =>PUP.Optional.SearchEngine
O69 - SBI: prefs.js [Jonathan - 3v3nyr05.default-1438451279976] user_pref("browser.search.searchengine.url", "http://www.mystartsearch.com/web/?type=ds&ts=1438465458&z=c83dabcd3ce1989d4afdf75g7z[...] =>PUP.Optional.StartSearch
O69 - SBI: prefs.js [Jonathan - 3v3nyr05.default-1438451279976] user_pref("browser.search.selectedEngine", "mystartsearch"); =>PUP.Optional.StartSearch
O69 - SBI: prefs.js [Jonathan - 3v3nyr05.default-1438451279976] user_pref("browser.startup.homepage", "http://www.mystartsearch.com/?type=hp&ts=1438465458&z=c83dabcd3ce1989d4afdf75g7z0c4b3zfq4we[...] =>PUP.Optional.StartSearch
O69 - SBI: prefs.js [Jonathan - 3v3nyr05.default-1438451279976] user_pref("extensions.a14fef81ee28d4335a493c2d6383fd42ff9b4872bccb5bcom70121.70121.description", "iWebar"); =>PUP.Optional.CrossRider
O69 - SBI: prefs.js [Jonathan - 3v3nyr05.default-1438451279976] user_pref("extensions.a14fef81ee28d4335a493c2d6383fd42ff9b4872bccb5bcom70121.70121.internaldb.monetization_plugin_bundledUrls.expi[...] =>PUP.Optional.Monetization
O69 - SBI: prefs.js [Jonathan - 3v3nyr05.default-1438451279976] user_pref("extensions.a14fef81ee28d4335a493c2d6383fd42ff9b4872bccb5bcom70121.70121.internaldb.monetization_plugin_bundledWithHash.[...] =>PUP.Optional.Monetization
O69 - SBI: prefs.js [Jonathan - 3v3nyr05.default-1438451279976] user_pref("extensions.a14fef81ee28d4335a493c2d6383fd42ff9b4872bccb5bcom70121.70121.internaldb.monetization_plugin_notBundledArr_.e[...] =>PUP.Optional.Monetization
O69 - SBI: prefs.js [Jonathan - 3v3nyr05.default-1438451279976] user_pref("extensions.a14fef81ee28d4335a493c2d6383fd42ff9b4872bccb5bcom70121.70121.internaldb.monetization_plugin_notBundledArr_.v[...] =>PUP.Optional.Monetization
O69 - SBI: prefs.js [Jonathan - 3v3nyr05.default-1438451279976] user_pref("extensions.a14fef81ee28d4335a493c2d6383fd42ff9b4872bccb5bcom70121.70121.internaldb.monetization_plugin_regBundledWithSo[...] =>PUP.Optional.Monetization
O69 - SBI: prefs.js [Jonathan - 3v3nyr05.default-1438451279976] user_pref("extensions.a14fef81ee28d4335a493c2d6383fd42ff9b4872bccb5bcom70121.70121.name", "iWebar"); =>PUP.Optional.CrossRider
O69 - SBI: prefs.js [Jonathan - 3v3nyr05.default-1438451279976] user_pref("extensions.a9321b2762c2e4c5fbd04b8118e512707c0c8a2d632754caca0b252e936311db9com32850.32850.name", "Object Browser"); =>PUP.Optional.ObjectBrowser
O69 - SBI: prefs.js [Jonathan - 3v3nyr05.default-1438451279976] user_pref("extensions.enabledAddons", "deskCutv2%40gmail.com:0.0.10,defsearchp%40gmail.com:1.0.0.1039,%7B972ce4c6-7e08-4474-a285-3[...] =>PUP.Optional.DeskCut
O69 - SBI: prefs.js [Jonathan - 3v3nyr05.default-1438451279976] user_pref("extensions.quick_start.enable_search1", false); =>PUP.Optional.QuickStart
O69 - SBI: prefs.js [Jonathan - 3v3nyr05.default-1438451279976] user_pref("extensions.quick_start.sd.closeWindowWithLastTab_prev_state", false); =>PUP.Optional.QuickStart
O69 - SBI: prefs.js [Jonathan - 3v3nyr05.default-1438451279976] user_pref("extensions.xpiState", "{\"app-profile\":{\"defsearchp@gmail.com\":{\"d\":\"C:\\\\Users\\\\Jonathan\\\\AppData\\\\Roamin[...] =>PUP.Optional.PriceFountain
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (Bing) - http://www.bing.com/

---\\ Enumère les services démarrés par Svchost (SSS) (O83) (32) - 1s
O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d’application.) -- C:\Windows\System32\aelupsvc.dll [62464]
O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [67584]
O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [67584]
O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\System32\srvsvc.dll [168960]
O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\System32\gpsvc.dll [593408]
O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\IKEEXT.DLL [679424]
O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Service Audio Windows.) -- C:\Windows\System32\audiosrv.dll [475136]
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’.) -- C:\Windows\System32\rasauto.dll [90624]
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire de connexions d’accès distant.) -- C:\Windows\System32\rasmans.dll [286208]
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll [75264]
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements systèm.) -- C:\Windows\System32\Sens.dll [49664]
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l’application d’assistance à.) -- C:\Windows\System32\ipnathlp.dll [300544]
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM.) -- C:\Windows\System32\tapisrv.dll [242176]
O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gestionnaire des connexions distantes du se.) -- C:\Windows\System32\termsrv.dll [523776]
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Up.) -- C:\Windows\System32\wuaueng.dll [2057216]
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière.) -- C:\Windows\System32\qmgr.dll [585728]
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [328192]
O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur u.) -- C:\Windows\System32\iphlpsvc.dll [499712]
O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d’ouverture de session secon.) -- C:\Windows\System32\seclogon.dll [21504]
O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll [47104]
O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\System32\iscsiexe.dll [114688]
O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédia.) -- C:\Windows\System32\mmcss.dll [49664]
O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll [61440]
O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll [98304]
O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll [164864]
O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\System32\schedsvc.dll [750592]
O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\Windows\System32\KMSVC.DLL [71168]
O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à.) -- C:\Windows\System32\SessEnv.dll [113664]
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll [168960]
O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\System32\browser.dll [102912]
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\Windows\System32\themeservice.dll [37376]
O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\Windows\System32\bdesvc.dll [76800]

---\\ Liste des exceptions du parefeu (FirewallRules) (O87) (1) - 0s
O87 - FAEL: "{7DF11B23-866A-4A93-BC63-5F85B19B9591}" [In-None-P17-TRUE] .(.Crossbrowse - Crossbrowse.) -- C:\Program Files\Crossbrowse\Crossbrowse\Application\crossbrowse.exe =>PUP.Optional.CrossBrowse

---\\ Recherche de clés de registre Tracing (O100) (2) - 0s
HKLM\SOFTWARE\Microsoft\Tracing\SpaceSondPro_Service_RASAPI32 =>PUP.Optional.SpaceSoundPro
HKLM\SOFTWARE\Microsoft\Tracing\SpaceSondPro_Service_RASMANCS =>PUP.Optional.SpaceSoundPro

---\\ Scan Additionnel (O88) (62) - 0s
C:\Program Files\46364331-1438450096-3444-3644-4646FFFFFFFF\hnsj99D0.tmp =>PUP.Optional.CrossRider
C:\Program Files\46364331-1438450096-3444-3644-4646FFFFFFFF\jnsz83A0.tmp =>PUP.Optional.CrossRider
C:\Program Files\PhraseProfessor_1.10.0.21\Service\ppsvc.exe =>PUP.Optional.Gen
C:\Program Files\46364331-1438450096-3444-3644-4646FFFFFFFF\knso47A3.tmpfs =>PUP.Optional.CrossRider
C:\Program Files\SpaceSondPro_v53.1254\SpaceSondPro_Service.exe =>PUP.Optional.SpaceSoundPro
C:\ProgramData\2988696b-294c-4054-b34f-e97ca58a10e8\plugincontainer.exe =>PUP.Optional.CrossRider
C:\Program Files\Common Files\2988696b-294c-4054-b34f-e97ca58a10e8\Updater.exe =>PUP.Optional.CrossRider
C:\ProgramData\2988696b-294c-4054-b34f-e97ca58a10e8\plugins\3\Plugin.exe =>PUP.Optional.CrossRider
C:\ProgramData\2988696b-294c-4054-b34f-e97ca58a10e8\plugins\10\Plugin.exe =>PUP.Optional.CrossRider
C:\ProgramData\2988696b-294c-4054-b34f-e97ca58a10e8\plugins\7\Plugin.exe =>PUP.Optional.CrossRider
C:\ProgramData\2988696b-294c-4054-b34f-e97ca58a10e8\plugins\5\Plugin.exe =>PUP.Optional.CrossRider
C:\ProgramData\2988696b-294c-4054-b34f-e97ca58a10e8\plugins\2\Plugin.exe =>PUP.Optional.CrossRider
C:\ProgramData\2988696b-294c-4054-b34f-e97ca58a10e8\plugins\8\Plugin.exe =>PUP.Optional.CrossRider
C:\Users\Jonathan\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhkmcfanijhphphomamdkaejjadkhgn
C:\Users\Jonathan\AppData\Roaming\Mozilla\Firefox\Profiles\3v3nyr05.default-1438451279976\searchplugins\mystartsearch.xml =>PUP.Optional.StartSearch
C:\Users\Jonathan\AppData\Roaming\Mozilla\Firefox\Profiles\3v3nyr05.default-1438451279976\extensions\deskCutv2@gmail.com =>PUP.Optional.LightningNewTab
C:\Program Files\On Stage\Extensions\aff87634-f4a9-42bc-b2dc-be240584d095.dll =>PUP.Optional.OnStage
C:\Program Files\Crossbrowse\Crossbrowse\Application\crossbrowse.exe =>PUP.Optional.CrossBrowse
HKLM\SYSTEM\CurrentControlSet\Services\comyninu =>PUP.Optional.CrossRider
HKLM\SYSTEM\CurrentControlSet\Services\gopibeko =>PUP.Optional.CrossRider
HKLM\SYSTEM\CurrentControlSet\Services\hyverumu =>PUP.Optional.CrossRider
HKLM\SYSTEM\CurrentControlSet\Services\ppsvc_1.10.0.21 =>PUP.Optional.Gen
HKLM\SYSTEM\CurrentControlSet\Services\Service Mgr OnStage =>PUP.Optional.OnStage
C:\ProgramData\2988696b-294c-4054-b34f-e97ca58a10e8\plugincontainer.exe =>PUP.Optional.OnStage
HKLM\SYSTEM\CurrentControlSet\Services\timuzuzu =>PUP.Optional.CrossRider
HKLM\SYSTEM\CurrentControlSet\Services\Update Mgr OnStage =>PUP.Optional.OnStage
C:\Program Files\Common Files\2988696b-294c-4054-b34f-e97ca58a10e8\Updater.exe =>PUP.Optional.OnStage
HKLM\SYSTEM\CurrentControlSet\Services\wsasvc_1.10.0.19 =>PUP.Optional.WordSurfer
C:\Windows\Tasks\Crossbrowse.job =>PUP.Optional.CrossBrowse
C:\Windows\System32\Tasks\Crossbrowse =>PUP.Optional.CrossBrowse
HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Crossbrowse =>PUP.Optional.CrossBrowse
HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\mystartsearch uninstall =>PUP.Optional.StartSearch
HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\On Stage =>PUP.Optional.OnStage
HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PhraseProfessor_1.10.0.21 =>PUP.Optional.Gen
HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{E199C882-78F1-45F1-9D8A-3DD3AF97A7C0} =>PUP.Optional.Boxore
HKLM\SOFTWARE\Crossbrowse =>PUP.Optional.CrossBrowse
HKLM\SOFTWARE\FFPluginHp =>PUP.Optional.SweetSearch
HKLM\SOFTWARE\mystartsearchSoftware =>PUP.Optional.StartSearch
HKLM\SOFTWARE\Object Browser-nv-ie =>PUP.Optional.ObjectBrowser
HKLM\SOFTWARE\PhraseProfessor_1.10.0.21 =>PUP.Optional.Gen
HKCU\SOFTWARE\Crossbrowse =>PUP.Optional.CrossBrowse
HKCU\SOFTWARE\CrossBrowser =>PUP.Optional.CrossBrowser
HKCU\SOFTWARE\Object Browser-nv-ie =>PUP.Optional.ObjectBrowser
HKCU\SOFTWARE\tstamptoken =>PUP.Optional.MaxComputerCleaner
C:\Program Files\3ec599db-b8cc-4081-a24c-d17af2e82169 =>PUP.Optional.CrossRider
C:\Program Files\46364331-1438450096-3444-3644-4646FFFFFFFF =>PUP.Optional.CrossRider
C:\Program Files\46364331-1438450313-3444-3644-4646FFFFFFFF =>PUP.Optional.CrossRider
C:\Program Files\7820b0eb-3626-4620-9e3a-dab3daac0de7 =>PUP.Optional.CrossRider
C:\Program Files\Crossbrowse =>PUP.Optional.CrossBrowse
C:\Program Files\ee63cdc6-5f91-44d3-a3dd-8241c1189391 =>PUP.Optional.CrossRider
C:\Program Files\On Stage =>PUP.Optional.OnStage
C:\Program Files\PhraseProfessor_1.10.0.21 =>PUP.Optional.Gen
C:\Program Files\SpaceSondPro_v53.1254 =>PUP.Optional.SpaceSoundPro
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Crossbrowse =>PUP.Optional.CrossBrowse
C:\Users\Jonathan\AppData\Roaming\mystartsearch =>PUP.Optional.StartSearch
C:\Users\Jonathan\AppData\Local\CrashRpt =>.Legitimate.CrashReports
C:\Users\Jonathan\AppData\Local\Installer =>PUP.Optional.InstallPedia
C:\Windows\System32\drivers\ppfd_vt_1_10_0_21.sys =>PUP.Optional.Gen
C:\Windows\System32\drivers\ppfd_vw_1_10_0_21.sys =>PUP.Optional.Gen
C:\Users\Jonathan\AppData\Local\Installer\Install_31494\DCYTDownloader.exe =>PUP.Optional.YTDownloader
HKLM\SOFTWARE\Microsoft\Tracing\SpaceSondPro_Service_RASAPI32 =>PUP.Optional.SpaceSoundPro
HKLM\SOFTWARE\Microsoft\Tracing\SpaceSondPro_Service_RASMANCS =>PUP.Optional.SpaceSoundPro

---\\ Récapitulatif des éléments trouvées sur votre station (21) - 0s
http://www.nicolascoolman.fr/pup-crossrider/ =>PUP.Optional.CrossRider
http://www.nicolascoolman.fr/blog =>PUP.Optional.Gen
http://www.nicolascoolman.fr/blog =>PUP.Optional.SpaceSoundPro
http://www.nicolascoolman.fr/pup-startsearch/ =>PUP.Optional.StartSearch
http://www.nicolascoolman.fr/blog =>PUP.Optional.LightningNewTab
http://www.nicolascoolman.fr/blog =>PUP.Optional.OnStage
http://www.nicolascoolman.fr/blog =>PUP.Optional.CrossBrowse
http://www.nicolascoolman.fr/blog =>PUP.Optional.WordSurfer
http://www.nicolascoolman.fr/adware-boxore/ =>PUP.Optional.Boxore
http://www.nicolascoolman.fr/blog =>PUP.Optional.SweetSearch
http://www.nicolascoolman.fr/pup-objectbrowser/ =>PUP.Optional.ObjectBrowser
http://www.nicolascoolman.fr/blog =>PUP.Optional.CrossBrowser
http://www.nicolascoolman.fr/blog =>PUP.Optional.MaxComputerCleaner
http://www.nicolascoolman.fr/blog =>.Legitimate.CrashReports
http://www.nicolascoolman.fr/adware-installpedia/ =>PUP.Optional.InstallPedia
http://www.nicolascoolman.fr/pup-ytdownloader/ =>PUP.Optional.YTDownloader
http://www.nicolascoolman.fr/blog =>PUP.Optional.SearchEngine
http://www.nicolascoolman.fr/blog =>PUP.Optional.Monetization
http://www.nicolascoolman.fr/blog =>PUP.Optional.DeskCut
http://www.nicolascoolman.fr/pup-quickstart/ =>PUP.Optional.QuickStart
http://www.nicolascoolman.fr/blog =>PUP.Optional.PriceFountain

~ End of the scan, 20389 items in 171 seconds (950)(0)()
---\\ Navigateurs Internet (3) - 0s
GCIE: Google Chrome v44.0.2403.125
MFIE: Mozilla Firefox 39.0 (x86 fr) v39.0
MSIE: Internet Explorer v11.0.9600.17914

---\\ Informations sur les produits Windows (4) - 4s
~ Windows Server License Manager Script : OK
~ Licence Script File Génération : OK
Windows Automatic Updates : OK (Auto)
Windows Activation Technologies : OK

---\\ Logiciels de protection (3) - 1s
Malwarebytes Anti-Malware version 2.1.8.1057
Microsoft Security Client v4.8.0204.0
Microsoft Security Essentials v4.8.204.0

---\\ Logiciels de protection et autres (Superflus) (1) - 1s
McAfee Security Scan Plus v3.8.150.1

---\\ Logiciels d'optimisation (1) - 1s
CCleaner v4.17

---\\ Surveillance de Logiciels (2) - 1s
Adobe Flash Player 18 NPAPI
Adobe Reader XI

---\\ Informations sur le système (6) - 0s
~ Operating System: x86 Family 16 Model 5 Stepping 3, AuthenticAMD
~ Operating System: 32-bit
~ Boot mode: Normal (Normal boot)
Total RAM: 2881.08 MB (42% free)
~ System Restore: Activé (Enable)
~ System drive C: has 375 GB free of 953 GB

---\\ Mode de connexion au système (3) - 0s
~ Computer Name: JONATHAN-PC
~ User Name: Jonathan
~ Logged in as Administrator

---\\ Enumération des unités disques (1) - 5s
~ Drive C: has 375 GB free of 953 GB (System)

---\\ Etat du Centre de Sécurité Windows (11) - 0s
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: Modified
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: OK
[HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK

---\\ Recherche particulière de fichiers génériques (23) - 2s
[MD5.8B88EBBB05A0E56B7DCC708498C02B3E] - (.Microsoft Corporation - Explorateur Windows.) () -- C:\Windows\Explorer.exe [2616320]
[MD5.51138BEEA3E2C21EC44D0932C71762A8] - (.Microsoft Corporation - Processus hôte Windows (Rundll32).) () -- C:\Windows\System32\rundll32.exe [44544]
[MD5.B5C5DCAD3899512020D135600129D665] - (.Microsoft Corporation - Application de démarrage de Windows.) () -- C:\Windows\System32\Wininit.exe [96256]
[MD5.63B01F72FD727D5736DBEF54174D8F93] - (.Microsoft Corporation - Extensions Internet pour Win32.) () -- C:\Windows\System32\wininet.dll [1951232]
[MD5.52449FD429D6053B78AE564DEF303870] - (.Microsoft Corporation - Application d’ouverture de session Windows.) () -- C:\Windows\System32\Winlogon.exe [304128]
[MD5.E3AE23569749DE12D45BA3B489A036AE] - (.Microsoft Corporation - Bibliothèque de licences.) () -- C:\Windows\System32\sppcomapi.dll [193536]
[MD5.129F80D7868E30DF3E3DE33A1D3132B4] - (.Microsoft Corporation - DLL client de l’API uilisateur de Windows m.) () -- C:\Windows\System32\fr-FR\user32.dll.mui [20480]
[MD5.D0B388DA1D111A34366E04EB4A5DD156] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) () -- C:\Windows\System32\drivers\AFD.sys [338944]
[MD5.338C86357871C167A96AB976519BF59E] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) () -- C:\Windows\System32\drivers\atapi.sys [21584]
[MD5.77EA11B065E0A8AB902D78145CA51E10] - (.Microsoft Corporation - CD-ROM File System Driver.) () -- C:\Windows\System32\drivers\Cdfs.sys [70656]
[MD5.BE167ED0FDB9C1FA1133953C18D5A6C9] - (.Microsoft Corporation - SCSI CD-ROM Driver.) () -- C:\Windows\System32\drivers\Cdrom.sys [108544]
[MD5.F024449C97EC1E464AAFFDA18593DB88] - (.Microsoft Corporation - DFS Namespace Client Driver.) () -- C:\Windows\System32\drivers\DfsC.sys [78336]
[MD5.9036377B8A6C15DC2EEC53E489D159B5] - (.Microsoft Corporation - High Definition Audio Bus Driver.) () -- C:\Windows\System32\drivers\HDAudBus.sys [108544]
[MD5.F151F0BDC47F4A28B1B20A0818EA36D6] - (.Microsoft Corporation - Pilote de port i8042.) () -- C:\Windows\System32\drivers\i8042prt.sys [80896]
[MD5.A5FA468D67ABCDAA36264E463A7BB0CD] - (.Microsoft Corporation - IP Network Address Translator.) () -- C:\Windows\System32\drivers\IpNat.sys [101888]
[MD5.01C5B803F6E1FDF8F16F0763DA9B997D] - (.Microsoft Corporation - Windows NT SMB Minirdr.) () -- C:\Windows\System32\drivers\MRxSmb.sys [124416]
[MD5.280122DDCF04B378EDD1AD54D71C1E54] - (.Microsoft Corporation - MBT Transport driver.) () -- C:\Windows\System32\drivers\netBT.sys [187904]
[MD5.C8DFF8D07755A66C7A4A738930F0FEAC] - (.Microsoft Corporation - Pilote du système de fichiers NT.) () -- C:\Windows\System32\drivers\ntfs.sys [1212352]
[MD5.2EA877ED5DD9713C5AC74E8EA7348D14] - (.Microsoft Corporation - Pilote de port parallèle.) () -- C:\Windows\System32\drivers\Parport.sys [79360]
[MD5.D9F91EAFEC2815365CBE6D167E4E332A] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) () -- C:\Windows\System32\drivers\Rasl2tp.sys [78848]
[MD5.3E21C083B8A01CB70BA1F09303010FCE] - (.Microsoft Corporation - SMB Transport driver.) () -- C:\Windows\System32\drivers\smb.sys [71168]
[MD5.7FE680A3DFA421C4A8E4879AE4C5AAB0] - (.Microsoft Corporation - TDI Translation Driver.) () -- C:\Windows\System32\drivers\tdx.sys [74752]
[MD5.F497F67932C6FA693D7DE2780631CFE7] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) () -- C:\Windows\System32\drivers\volsnap.sys [245632]

---\\ Processus lancés (28) - 3s
[MD5.8570625CA5DBD8083BEA7CB73065B53D] - (.AMD - AMD External Events Service Module.) -- C:\Windows\System32\atiesrxx.exe [172032] [PID.992]
[MD5.921EB86677423EFD3B1B85E105B414E7] - (.AMD - AMD External Events Client Module.) -- C:\Windows\System32\atieclxx.exe [372736] [PID.1416]
[MD5.B33CF4DE909A5B30F526D82053A63C8E] - (.ABBYY - ABBYY network license server.) -- C:\Program Files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [759048] [PID.1660]
[MD5.8CD5561292F890BE90336DA7D4D3C002] - (.Copyright © 2015 - .) -- C:\Program Files\chk32\chk32.exe [376832] [PID.1680]
[MD5.0FD99BAF91AD54ED70E64DE5BBA03559] - (...) -- C:\Program Files\46364331-1438450096-3444-3644-4646FFFFFFFF\hnsj99D0.tmp [161792] [PID.2112] =>PUP.Optional.CrossRider
[MD5.D62F57DDC737B78C98CB2A68CE079A55] - (...) -- C:\Users\Jonathan\AppData\Roaming\Devoted Squadron\Devoted Squadron.exe [66048] [PID.2176]
[MD5.B8FA96995726D1FA58476E352C02AD82] - (...) -- C:\Program Files\Gigabyte\EasySaver\essvr.exe [68136] [PID.2244]
[MD5.C5323F961012E91A9E4BF4FF377655F3] - (...) -- C:\Program Files\46364331-1438450096-3444-3644-4646FFFFFFFF\jnsz83A0.tmp [209920] [PID.2272] =>PUP.Optional.CrossRider
[MD5.68DF41DDAB5EE81355F55CB5962A763D] - (.PhraseProfessor - PP Client Service.) -- C:\Program Files\PhraseProfessor_1.10.0.21\Service\ppsvc.exe [300128] [PID.2516] =>PUP.Optional.Gen
[MD5.F12A68ED55053940CADD59CA5E3468DD] - (.Copyright 2004 - RichVideo Module.) -- C:\Program Files\CyberLink\Shared Files\RichVideo.exe [244904] [PID.2572]
[MD5.B0303F2BC6DD09383C8268D596EE158B] - (...) -- C:\Program Files\46364331-1438450096-3444-3644-4646FFFFFFFF\knso47A3.tmpfs [300544] [PID.2652] =>PUP.Optional.CrossRider
[MD5.67FAE824642FEA7D29BE74DD38DBAAAE] - (...) -- C:\Users\Jonathan\AppData\Local\ServiceGoogle\service.exe [34304] [PID.2716]
[MD5.982715E69BAB00BB072794AFDA7B98D2] - (...) -- C:\Program Files\SpaceSondPro_v53.1254\SpaceSondPro_Service.exe [33480] [PID.3588] =>PUP.Optional.SpaceSoundPro
[MD5.FF74E3503F023B98576DF6C9959222EA] - (.Copyright © 2015 - .) -- C:\Program Files\chk32\packages\a98af236-4bb6-4e3f-95f3-3245daef538a\dchk.exe [847360] [PID.3772]
[MD5.754B3F11D3019F6ED14E4DFF6BB542FA] - (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [9808488] [PID.3840]
[MD5.E7704CBF568815C1CAA6E513387BD3F2] - (.Advanced Micro Devices Inc. - Catalyst Control Center: Monitoring program.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe [65536] [PID.3892]
[MD5.74EF310FAC89341CE2897B7F2C4A7B0F] - (.ATI Technologies Inc. - Catalyst Control Centre: Host application.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe [65536] [PID.2092]
[MD5.6FD13B36C8E7CBD5E09F95220484E71D] - (.Panasonic Corporation - AutoStartService.) -- C:\Program Files\Common Files\Panasonic\PHOTOfunSTUDIO AutoStart\AutoStartupService.exe [174064] [PID.932]
[MD5.55802BE737E6EFE7B457A67420151F33] - (...) -- C:\ProgramData\2988696b-294c-4054-b34f-e97ca58a10e8\plugincontainer.exe [1140448] [PID.4564] =>PUP.Optional.CrossRider
[MD5.B3625E92AA69CD85F5D1918E27554696] - (...) -- C:\Program Files\Common Files\2988696b-294c-4054-b34f-e97ca58a10e8\Updater.exe [1075936] [PID.4744] =>PUP.Optional.CrossRider
[MD5.EBB02746DB63DF6F921CD78B1EF7462B] - (...) -- C:\ProgramData\2988696b-294c-4054-b34f-e97ca58a10e8\plugins\3\Plugin.exe [1167072] [PID.5480] =>PUP.Optional.CrossRider
[MD5.06935BC54159A1AB1400EBD25184CD59] - (...) -- C:\ProgramData\2988696b-294c-4054-b34f-e97ca58a10e8\plugins\10\Plugin.exe [1037024] [PID.1772] =>PUP.Optional.CrossRider
[MD5.68B7425D6A8B2DEB0321401AAF84C984] - (...) -- C:\ProgramData\2988696b-294c-4054-b34f-e97ca58a10e8\plugins\7\Plugin.exe [908000] [PID.5580] =>PUP.Optional.CrossRider
[MD5.03E462C4E38A05C1EAC10D9C6EAAA74A] - (...) -- C:\ProgramData\2988696b-294c-4054-b34f-e97ca58a10e8\plugins\5\Plugin.exe [1252576] [PID.5512] =>PUP.Optional.CrossRider
[MD5.EBB02746DB63DF6F921CD78B1EF7462B] - (...) -- C:\ProgramData\2988696b-294c-4054-b34f-e97ca58a10e8\plugins\3\Plugin.exe [1167072] [PID.4752] =>PUP.Optional.CrossRider
[MD5.68B7425D6A8B2DEB0321401AAF84C984] - (...) -- C:\ProgramData\2988696b-294c-4054-b34f-e97ca58a10e8\plugins\7\Plugin.exe [908000] [PID.1768] =>PUP.Optional.CrossRider
[MD5.3099614574A2EFFB055B85BB9FFD42B9] - (...) -- C:\ProgramData\2988696b-294c-4054-b34f-e97ca58a10e8\plugins\2\Plugin.exe [1762016] [PID.5684] =>PUP.Optional.CrossRider
[MD5.6046D514EFDF27B0AB3086BD8699A8EE] - (...) -- C:\ProgramData\2988696b-294c-4054-b34f-e97ca58a10e8\plugins\8\Plugin.exe [1225440] [PID.5968] =>PUP.Optional.CrossRider

---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2) (11) - 0s
G0 - GCSP: Preferences [User Data\Default][HomePage] http://a.thanksearch.com/
G0 - GCSP: Preferences [User Data\Default][HomePage] http://adplus.goo.mx/
G0 - GCSP: Preferences [User Data\Default][HomePage] http://api.www.337.com/
G0 - GCSP: Preferences [User Data\Default][HomePage] http://dh9oydwgcrf8n.cloudfront.net/
G0 - GCSP: Preferences [User Data\Default][HomePage] http://elex-tech.khanwars.com/
G0 - GCSP: Preferences [User Data\Default][HomePage] http://odin.goo.mx/
G0 - GCSP: Preferences [User Data\Default][HomePage] http://www.mystartsearch.com/ =>PUP.Optional.StartSearch
G0 - GCSP: Preferences [User Data\Default][HomePage] http://best.infoiswhatwedo.com/
G0 - GCSP: Preferences [User Data\Default][HomePage] http://clients2.google.com/
G0 - GCSP: Preferences [User Data\Default][HomePage] http://mynamedomain.koko/
G2 - GCE: Preference [User Data\Default] [idhkmcfanijhphphomamdkaejjadkhgn] BrowserV30.07 =>PUP.Optional.CrossRider

---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3) (20) - 2s
M0 - MFSP: prefs.js [Jonathan - 3v3nyr05.default-1438451279976] http://www.mystartsearch.com/?type=hp&ts=1438465458&z=c83dabcd3ce1989d4afdf75g7z0c4b3zfq4wecctcb&from=cmi&uid=WDCXWD10EARX-00N0YB0_WD-WCC0T005535155351 =>PUP.Optional.StartSearch
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\Plugins\nppdf32.FRA
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\Plugins\QuickTimePlugin.class
P2 - EXT FILE: (...) -- C:\Users\Jonathan\AppData\Roaming\Mozilla\Firefox\Profiles\3v3nyr05.default-1438451279976\extensions\{50b2a506-1613-467e-85ba-c10a91932ca4}.xpi
P2 - EXT FILE: (...) -- C:\Users\Jonathan\AppData\Roaming\Mozilla\Firefox\Profiles\3v3nyr05.default-1438451279976\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
P2 - EXT FILE: (...) -- C:\Users\Jonathan\AppData\Roaming\Mozilla\Firefox\Profiles\3v3nyr05.default-1438451279976\searchplugins\mystartsearch.xml =>PUP.Optional.StartSearch
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\browser\searchplugins\amazon-france.xml
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\browser\searchplugins\bing.xml
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\browser\searchplugins\cnrtl-tlfi-fr.xml
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\browser\searchplugins\ddg.xml
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\browser\searchplugins\eBay-france.xml
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\browser\searchplugins\google.xml
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\browser\searchplugins\wikipedia-fr.xml
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\browser\searchplugins\yahoo-france.xml
P2 - EXT: (.Mozilla - Default.) -- C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
P2 - EXT: (.roc - Default SearchProtected .) -- C:\Users\Jonathan\AppData\Roaming\Mozilla\Firefox\Profiles\3v3nyr05.default-1438451279976\extensions\defsearchp@gmail.com
P2 - EXT: (.lightningnewtab.com - deskCut.) -- C:\Users\Jonathan\AppData\Roaming\Mozilla\Firefox\Profiles\3v3nyr05.default-1438451279976\extensions\deskCutv2@gmail.com =>PUP.Optional.LightningNewTab
P2 - FPN: [HKCU] [@hola.org/vlc,version=1.8.649] - (...) -- C:\Users\Jonathan\AppData\Local\Hola\firefox\app\vlc
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Macromed\Flash\NPSWF32_18_0_0_209.dll
P2 - FPN: [HKLM] [@Apple.com/iTunes,version=1.0] - (.Apple Inc..) -- C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll

---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4) (13) - 0s
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.mystartsearch.com/ =>PUP.Optional.StartSearch
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.mystartsearch.com/ =>PUP.Optional.StartSearch
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.mystartsearch.com/ =>PUP.Optional.StartSearch
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mystartsearch.com/ =>PUP.Optional.StartSearch
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.mystartsearch.com/ =>PUP.Optional.StartSearch
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.mystartsearch.com/ =>PUP.Optional.StartSearch
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mystartsearch.com/ =>PUP.Optional.StartSearch
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.mystartsearch.com/ =>PUP.Optional.StartSearch
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = http://www.google.com
R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphean =>.Microsoft Internet Explorer

---\\ Internet Explorer, Proxy Management (R5) (3) - 0s
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll

---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs (3) - 0s
F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe (.Microsoft Corporation.)
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe (.Microsoft Corporation.)
F2 - REG:system.ini: VMApplet=C:\Windows\system32\SystemPropertiesPerformance.exe (.Microsoft Corporation.)

---\\ Hosts file redirection (O1) (1) - 0s
~ Le fichier hôte est sain (The hosts file is clean) (21)

---\\ Browser Helper Object de navigateur (BHO) (O2) (1) - 0s
O2 - BHO: On Stage - {aff87634-f4a9-42bc-b2dc-be240584d095} . (...) -- C:\Program Files\On Stage\Extensions\aff87634-f4a9-42bc-b2dc-be240584d095.dll =>PUP.Optional.OnStage

---\\ Applications lancées au démarrage du sytème (O4) (37) - 1s
O4 - HKLM\..\Run: [STCAgent] C:\Program Files\Splashtop\Splashtop Connect IE\STCAgent.exe (.not file.)
O4 - HKLM\..\Run: [ZyngaGamesAgent] C:\Program Files\Splashtop\Splashtop Connect\ZyngaGamesAgent.exe (.not file.)
O4 - HKLM\..\Run: [StartCCC] . (.Advanced Micro Devices, Inc. - Catalyst® Control Center Launcher.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
O4 - HKLM\..\Run: [RtHDVCpl] . (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
O4 - HKLM\..\Run: [RemoteControl] . (.Cyberlink Corp. - PowerDVD RC Service.) -- C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
O4 - HKLM\..\Run: [MSC] . (.Microsoft Corporation - Microsoft Security Client User Interface.) -- c:\Program Files\Microsoft Security Client\msseces.exe
O4 - HKLM\..\Run: [EEventManager] . (.SEIKO EPSON CORPORATION - EEventManager Application.) -- C:\Program Files\Epson Software\Event Manager\EEventManager.exe
O4 - HKLM\..\Run: [DivXMediaServer] . (.DivX, LLC - DivX DLNA Media Server.) -- C:\Program Files\DivX\DivX Media Server\DivXMediaServer.exe
O4 - HKLM\..\Run: [DivXUpdate] . (.© Copyright 2000 - 2011 DivX, LLC - DivX Update.) -- C:\Program Files\DivX\DivX Update\DivXUpdate.exe
O4 - HKLM\..\Run: [PowerDVD13Agent] C:\Program Files\CyberLink\PowerDVD13\PowerDVD13Agent.exe (.not file.)
O4 - HKLM\..\Run: [UpdateLBPShortCut] . (.CyberLink Corp. - MUI StartMenu Application.) -- C:\Program Files\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe
O4 - HKLM\..\Run: [MDS_Menu] . (.CyberLink Corp. - MUI StartMenu Application.) -- C:\Program Files\CyberLink\MediaShow4\MUITransfer\MUIStartMenu.exe
O4 - HKLM\..\Run: [CLMLServer] . (.CyberLink - CyberLink MediaLibray Service.) -- C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe
O4 - HKLM\..\Run: [UpdateP2GoShortCut] . (.CyberLink Corp. - MUI StartMenu Application.) -- C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe
O4 - HKLM\..\Run: [RemoteControl9] . (.CyberLink Corp. - PowerDVD RC Service.) -- C:\Program Files\CyberLink\PowerDVD9\PDVD9Serv.exe
O4 - HKLM\..\Run: [BDRegion] . (.cyberlink - brs.) -- C:\Program Files\Cyberlink\Shared files\brs.exe
O4 - HKLM\..\Run: [UpdatePPShortCut] . (.CyberLink Corp. - MUI StartMenu Application.) -- C:\Program Files\CyberLink\PowerProducer\MUITransfer\MUIStartMenu.exe
O4 - HKLM\..\Run: [UCam_Menu] . (.CyberLink Corp. - MUI StartMenu Application.) -- C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe
O4 - HKLM\..\Run: [UpdatePSTShortCut] . (.CyberLink Corp. - MUI StartMenu Application.) -- C:\Program Files\CyberLink\Blu-ray Disc Suite\MUITransfer\MUIStartMenu.exe
O4 - HKLM\..\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe
O4 - HKLM\..\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files\QuickTime\QTTask.exe
O4 - HKLM\..\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\RunOnce: [SpaceSondPro_v53.1254] . (...) -- C:\Program Files\SpaceSondPro_v53.1254\SpaceSondPro_Service.exe =>PUP.Optional.SpaceSoundPro
O4 - HKCU\..\Run: [LightScribe Control Panel] . (.Hewlett-Packard Company - .) -- C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
O4 - HKCU\..\Run: [EPSON SX125 Series] . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\Windows\System32\spool\drivers\w32x86\3\E_FATIGGE.EXE
O4 - HKCU\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe
O4 - HKCU\..\Run: [EPSON SX430 Series] . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\Windows\System32\spool\drivers\w32x86\3\E_FATIHAE.EXE
O4 - HKCU\..\Run: [GoogleChromeAutoLaunch_024FF85ECB08C168C6232BE44D57F675] . (.Crossbrowse - Crossbrowse.) -- C:\Program Files\Crossbrowse\Crossbrowse\Application\crossbrowse.exe =>PUP.Optional.CrossBrowse
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe
O4 - HKUS\S-1-5-21-2547745397-2668248387-2003255374-1000\..\Run: [LightScribe Control Panel] . (.Hewlett-Packard Company - .) -- C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
O4 - HKUS\S-1-5-21-2547745397-2668248387-2003255374-1000\..\Run: [EPSON SX125 Series] . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\Windows\System32\spool\drivers\w32x86\3\E_FATIGGE.EXE
O4 - HKUS\S-1-5-21-2547745397-2668248387-2003255374-1000\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe
O4 - HKUS\S-1-5-21-2547745397-2668248387-2003255374-1000\..\Run: [EPSON SX430 Series] . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\Windows\System32\spool\drivers\w32x86\3\E_FATIHAE.EXE
O4 - HKUS\S-1-5-21-2547745397-2668248387-2003255374-1000\..\Run: [GoogleChromeAutoLaunch_024FF85ECB08C168C6232BE44D57F675] . (.Crossbrowse - Crossbrowse.) -- C:\Program Files\Crossbrowse\Crossbrowse\Application\crossbrowse.exe =>PUP.Optional.CrossBrowse

---\\ Modification Domaine/Adresses DNS (O17) (6) - 0s
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 192.168.1.1

---\\ Liste des services NT non Microsoft et non désactivés (O23) (24) - 1s
O23 - Service: ABBYY FineReader 9.0 Sprint Licensing Service (ABBYY.Licensing.FineReader.Sprint.9.0) . (.ABBYY - ABBYY network license server.) - C:\Program Files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: (AMD External Events Utility) . (.AMD - AMD External Events Service Module.) - C:\Windows\System32\atiesrxx.exe
O23 - Service: Apple Mobile Device (Apple Mobile Device) . (.Apple Inc. - MobileDeviceService.) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: DCheck Service (chk32) . (.Copyright © 2015 - .) - C:\Program Files\chk32\chk32.exe
O23 - Service: CyberLink Product - 2013/06/04 01:01:16 (CLKMSVC10_E92D8507) . (.CyberLink - CyberLink KM Service.) - C:\Program Files\CyberLink\PowerDVD9\NavFilter\kmsvc.exe
O23 - Service: Wire Professional Version (comyninu) . (...) - C:\Program Files\46364331-1438450096-3444-3644-4646FFFFFFFF\hnsj99D0.tmp =>PUP.Optional.CrossRider
O23 - Service: Devoted Squadron (Devoted Squadron) . (...) - C:\Users\Jonathan\AppData\Roaming\Devoted Squadron\Devoted Squadron.exe
O23 - Service: ES lite Service for program management. (ES lite Service) . (...) - C:\Program Files\Gigabyte\EasySaver\essvr.exe
O23 - Service: Kerning Down (gopibeko) . (...) - C:\Users\Jonathan\AppData\Local\46364331-1438457345-3444-3644-4646FFFFFFFF\snsuF6A0.tmp (.not file.) =>PUP.Optional.CrossRider
O23 - Service: Service Google Update (gupdate) (gupdate) . (...) - C:\Program Files\Google\Update\GoogleUpdate.exe (.not file.)
O23 - Service: Key In Bold Italic (hyverumu) . (...) - C:\Program Files\46364331-1438450096-3444-3644-4646FFFFFFFF\jnsz83A0.tmp =>PUP.Optional.CrossRider
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) . (.Hewlett-Packard Company - LightScribe Service.) - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: (MBAMService) . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: PP 1.10.0.21 Client Service (ppsvc_1.10.0.21) . (.PhraseProfessor - PP Client Service.) - C:\Program Files\PhraseProfessor_1.10.0.21\Service\ppsvc.exe =>PUP.Optional.Gen
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) . (.Copyright 2004 - RichVideo Module.) - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Service Mgr OnStage (Service Mgr OnStage) . (...) - C:\ProgramData\2988696b-294c-4054-b34f-e97ca58a10e8\plugincontainer.exe =>PUP.Optional.OnStage
O23 - Service: Content Border (timuzuzu) . (...) - C:\Program Files\46364331-1438450096-3444-3644-4646FFFFFFFF\knso47A3.tmpfs =>PUP.Optional.CrossRider
O23 - Service: Update Mgr OnStage (Update Mgr OnStage) . (...) - C:\Program Files\Common Files\2988696b-294c-4054-b34f-e97ca58a10e8\Updater.exe =>PUP.Optional.OnStage
O23 - Service: Service Google Update (gupdate) 1.0.1 (UWUX45) . (...) - C:\Users\Jonathan\AppData\Local\ServiceGoogle\service.exe
O23 - Service: Splashtop Connect Firefox Software Updater Service (WCUService_STC_FF) . (...) - C:\Program Files\Splashtop\Splashtop Connect Firefox Software Updater\WCUService.exe (.not file.)
O23 - Service: Splashtop Connect IE Software Updater Service (WCUService_STC_IE) . (...) - C:\Program Files\Splashtop\Splashtop Connect IE Software Updater\WCUService.exe (.not file.)
O23 - Service: Word Surfer 1.10.0.19 Client Service (wsasvc_1.10.0.19) . (...) - C:\Program Files\WordSurfer_1.10.0.19\Service\wsasvc.exe (.not file.) =>PUP.Optional.WordSurfer

---\\ Tâches planifiées en automatique (O39) (24) - 9s
[MD5.E3FB05F33E1404AD606B1E1FE7C323C3] [APT] [Adobe Acrobat Update Task] (.Adobe Systems Incorporated.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [998104]
[MD5.9B3355B29942AF67F014EA90CE1EA960] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe [268976]
[MD5.FC99BB7CE5AAE819E143BBE67F3DEB4E] [APT] [bvxvbvef] (...) -- C:\Users\Jonathan\AppData\Local\bvxvbvef\bvxvbvef.exe [2172416] =>Heuristic.Graftor
[MD5.816B4925CC73512A2DEBF625DABCCAB6] [APT] [CCleanerSkipUAC] (.Piriform Ltd.) -- C:\Program Files\CCleaner\CCleaner.exe [4796696]
[MD5.B57D60CD390792DC0650178631380918] [APT] [Crossbrowse] (...) -- C:\Program Files\Crossbrowse\Crossbrowse\Application\utility.exe [1967696] =>PUP.Optional.CrossBrowse
[MD5.67FAE824642FEA7D29BE74DD38DBAAAE] [APT] [DCheck Service 1.0.1] (...) -- C:\Users\Jonathan\AppData\Local\DCheckService\dcheck.exe [34304]
[MD5.CF63731F152F14DE3C28B2C9ADABC4BB] [APT] [PhraseProfessor Auto Updater 1.10.0.21 Core] (.PhraseProfessor.) -- C:\Program Files\PhraseProfessor_1.10.0.21\Update\PhraseProfessorAutoUpdateClient.exe [64096] =>PUP.Optional.Gen
[MD5.CF63731F152F14DE3C28B2C9ADABC4BB] [APT] [PhraseProfessor Auto Updater 1.10.0.21 Pending Update] (.PhraseProfessor.) -- C:\Program Files\PhraseProfessor_1.10.0.21\Update\PhraseProfessorAutoUpdateClient.exe [64096] =>PUP.Optional.Gen
[MD5.00000000000000000000000000000000] [APT] [StoragePlus] (...) -- c:\programdata\{1bfcad4e-68c0-f312-1bfc-cad4e68cb539}\nssa150.tmp.exe (.not file.) [0]
[MD5.34EBD4FF6A24D86BB4716D6AFCC1A89B] [APT] [Apple\AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files\Apple Software Update\SoftwareUpdate.exe [561984]
O39 - APT: Adobe Flash Player Updater - (...) -- C:\Windows\Tasks\Adobe Flash Player Updater.job [1002]
O39 - APT: Crossbrowse - (...) -- C:\Windows\Tasks\Crossbrowse.job [1050] =>PUP.Optional.CrossBrowse
O39 - APT: StoragePlus - (...) -- C:\Windows\Tasks\StoragePlus.job [342]
O39 - APT: Adobe Acrobat Update Task - (...) -- C:\Windows\System32\Tasks\Adobe Acrobat Update Task [3874]
O39 - APT: Adobe Flash Player Updater - (...) -- C:\Windows\System32\Tasks\Adobe Flash Player Updater [3940]
O39 - APT: bvxvbvef - (...) -- C:\Windows\System32\Tasks\bvxvbvef [3488]
O39 - APT: CCleanerSkipUAC - (...) -- C:\Windows\System32\Tasks\CCleanerSkipUAC [2778]
O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\CreateChoiceProcessTask [3548]
O39 - APT: Crossbrowse - (...) -- C:\Windows\System32\Tasks\Crossbrowse [4088] =>PUP.Optional.CrossBrowse
O39 - APT: DCheck Service 1.0.1 - (...) -- C:\Windows\System32\Tasks\DCheck Service 1.0.1 [3208]
O39 - APT: PhraseProfessor Auto Updater 1.10.0.21 Core - (...) -- C:\Windows\System32\Tasks\PhraseProfessor Auto Updater 1.10.0.21 Core [4190]
O39 - APT: PhraseProfessor Auto Updater 1.10.0.21 Pending Update - (...) -- C:\Windows\System32\Tasks\PhraseProfessor Auto Updater 1.10.0.21 Pending Update [4200]
O39 - APT: StoragePlus - (...) -- C:\Windows\System32\Tasks\StoragePlus [3260]
O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\{F9296961-2735-4B63-8656-CE4FBFA97D08} [3168]

---\\ Logiciels installés (O42) (90) - 8s
O42 - Logiciel: ABBYY FineReader 9.0 Sprint - (.ABBYY.) [HKLM] -- ABBYY FineReader 9.0 Sprint
O42 - Logiciel: Ad-Remover par C_XX - (.C_XX.) [HKLM] -- Ad-Remover
O42 - Logiciel: Adobe Flash Player 18 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX
O42 - Logiciel: Adobe Flash Player 18 NPAPI - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player NPAPI
O42 - Logiciel: Adobe Shockwave Player 12.0 - (.Adobe Systems, Inc..) [HKLM] -- Adobe Shockwave Player
O42 - Logiciel: Amazon MP3 Downloader 1.0.15 - (.Amazon Services LLC.) [HKLM] -- Amazon MP3 Downloader
O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner
O42 - Logiciel: Crossbrowse - (.The Crossbrowse Authors.) [HKLM] -- Crossbrowse =>PUP.Optional.CrossBrowse
O42 - Logiciel: Configuration DivX - (.DivX, LLC.) [HKLM] -- DivX Setup
O42 - Logiciel: EPSON Scan - (.Seiko Epson Corporation.) [HKLM] -- EPSON Scanner
O42 - Logiciel: EPSON SX125 Series Printer Uninstall - (.SEIKO EPSON Corporation.) [HKLM] -- EPSON SX125 Series
O42 - Logiciel: EPSON SX125 Series Manuel - (...) [HKLM] -- EPSON SX125 Series Manual
O42 - Logiciel: EPSON SX430 Series Printer Uninstall - (.SEIKO EPSON Corporation.) [HKLM] -- EPSON SX430 Series
O42 - Logiciel: Guide des opérations de base EPSON SX430 Series - (...) [HKLM] -- EPSON SX430 Series Bog
O42 - Logiciel: Guide réseau EPSON SX430 Series - (...) [HKLM] -- EPSON SX430 Series Netg
O42 - Logiciel: Guide d'utilisation EPSON SX430 Series - (...) [HKLM] -- EPSON SX430 Series Useg
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM] -- Google Chrome
O42 - Logiciel: CyberLink YouCam - (.CyberLink Corp..) [HKLM] -- InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}
O42 - Logiciel: CyberLink Blu-ray Disc Suite - (.CyberLink Corp..) [HKLM] -- InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}
O42 - Logiciel: CyberLink LG Burning Tool - (.CyberLink Corp..) [HKLM] -- InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}
O42 - Logiciel: Easy Tune 6 B11.0120.1 - (.GIGABYTE.) [HKLM] -- InstallShield_{457D7505-D665-4F95-91C3-ECB8C56E9ACA}
O42 - Logiciel: CyberLink MediaShow - (.CyberLink Corp..) [HKLM] -- InstallShield_{80E158EA-7181-40FE-A701-301CE6BE64AB}
O42 - Logiciel: CyberLink PowerDVD 9 - (.CyberLink Corp..) [HKLM] -- InstallShield_{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}
O42 - Logiciel: CyberLink PowerProducer - (.CyberLink Corp..) [HKLM] -- InstallShield_{B7A0CE06-068E-11D6-97FD-0050BACBF861}
O42 - Logiciel: CyberLink LabelPrint - (.CyberLink Corp..) [HKLM] -- InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}
O42 - Logiciel: AutoGreen B10.1021.1 - (.GIGABYTE.) [HKLM] -- InstallShield_{C75FAD21-EC08-42F3-92D6-C9C0AB355345}
O42 - Logiciel: Malwarebytes Anti-Malware version 2.1.8.1057 - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes Anti-Malware_is1
O42 - Logiciel: McAfee Security Scan Plus - (.McAfee, Inc..) [HKLM] -- McAfee Security Scan
O42 - Logiciel: Microsoft Security Essentials - (.Microsoft Corporation.) [HKLM] -- Microsoft Security Client
O42 - Logiciel: Mozilla Firefox 39.0 (x86 fr) - (.Mozilla.) [HKLM] -- Mozilla Firefox 39.0 (x86 fr)
O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM] -- MozillaMaintenanceService
O42 - Logiciel: mystartsearch uninstall - (.mystartsearch.) [HKLM] -- mystartsearch uninstall =>PUP.Optional.StartSearch
O42 - Logiciel: Naviextras Toolbox - (.NNG Llc..) [HKLM] -- Naviextras Toolbox
O42 - Logiciel: Nimo Codecs Pack v5.0 (Remove Only) - (...) [HKLM] -- NimoCorp
O42 - Logiciel: On Stage - (.On Stage.) [HKLM] -- On Stage =>PUP.Optional.OnStage
O42 - Logiciel: PhraseProfessor 1.10.0.21 - (.PhraseProfessor.) [HKLM] -- PhraseProfessor_1.10.0.21 =>PUP.Optional.Gen
O42 - Logiciel: VLC media player - (.VideoLAN.) [HKLM] -- VLC media player
O42 - Logiciel: WinRAR 5.21 (32-bit) - (.win.rar GmbH.) [HKLM] -- WinRAR archiver
O42 - Logiciel: ZHPDiag 2015 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1
O42 - Logiciel: CyberLink YouCam - (.CyberLink Corp..) [HKLM] -- {01FB4998-33C4-4431-85ED-079E3EEFE75D}
O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM] -- {0592EF96-69D8-4E4B-9CC9-88F58EA86F01}
O42 - Logiciel: EasySaver B9.1214.1 - (.Gigabyte.) [HKLM] -- {07300F01-89CA-4CF8-92BD-2A605EB83C95}
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {18455581-E099-4BA8-BC6B-F34B2F06600C}
O42 - Logiciel: CyberLink Blu-ray Disc Suite - (.CyberLink Corp..) [HKLM] -- {1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {2318C2B1-4965-11d4-9B18-009027A5CD4F}
O42 - Logiciel: Java 8 Update 31 - (.Oracle Corporation.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83218031F0}
O42 - Logiciel: CyberLink BD Advisor 2.0 - (...) [HKLM] -- {2D2D8FE2-605C-4D3C-B706-36E981E7EEF0}
O42 - Logiciel: Microsoft Antimalware Service FR-FR Language Pack - (.Microsoft Corporation.) [HKLM] -- {32E9C1A5-0FDA-4483-987D-DBABF9CC1DD8}
O42 - Logiciel: VCRedistSetup - (.Nero AG.) [HKLM] -- {3921A67A-5AB1-4E48-9444-C71814CF3027}
O42 - Logiciel: ON_OFF Charge B11.0110.1 - (.GIGABYTE.) [HKLM] -- {3DECD372-76A1-4483-BF10-B547790A3261}
O42 - Logiciel: EpsonNet Print - (.SEIKO EPSON CORPORATION.) [HKLM] -- {3E31400D-274E-4647-916C-2CACC3741799}
O42 - Logiciel: CyberLink LG Burning Tool - (.CyberLink Corp..) [HKLM] -- {40BF1E83-20EB-11D8-97C5-0009C5020658}
O42 - Logiciel: Splashtop Connect for Firefox - (.Splashtop Inc..) [HKLM] -- {45D49CA7-D7D8-4659-B35A-EBD98C30AF28}
O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM] -- {46F044A5-CE8B-4196-984E-5BD6525E361D}
O42 - Logiciel: Microsoft Security Client FR-FR Language Pack - (.Microsoft Corporation.) [HKLM] -- {50779A29-834E-4E36-BBEB-B7CABC67A825}
O42 - Logiciel: Naviextras Toolbox Prerequesities - (.NNG Llc..) [HKLM] -- {537575D6-3B96-474C-BD8F-DFF667363DBD}
O42 - Logiciel: Realtek HDMI Audio Driver for ATI - (.Realtek Semiconductor Corp..) [HKLM] -- {5449FB4F-1802-4D5B-A6D8-087DB1142147}
O42 - Logiciel: LG Burning Tools - (.Nero AG.) [HKLM] -- {567C9882-843D-4188-A181-00E2CC3E1036}
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {60EC980A-BDA2-4CB6-A427-B07A5498B4CA}
O42 - Logiciel: swMSM - (.Adobe Systems, Inc.) [HKLM] -- {612C34C7-5E90-47D8-9B5C-0F717DD82726}
O42 - Logiciel: LG CyberLink PowerDVD 7.0 - (.CyberLink Corp..) [HKLM] -- {6811CAA0-BF12-11D4-9EA1-0050BAE317E1}
O42 - Logiciel: Microsoft Security Client - (.Microsoft Corporation.) [HKLM] -- {6E3939AE-9996-4D07-9A30-14C78AE93576}
O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM] -- {789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}
O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM] -- {79155F2B-9895-49D7-8612-D92580E0DE5B}
O42 - Logiciel: CyberLink MediaShow - (.CyberLink Corp..) [HKLM] -- {80E158EA-7181-40FE-A701-301CE6BE64AB}
O42 - Logiciel: Realtek Ethernet Controller Driver - (.Realtek.) [HKLM] -- {8833FFB6-5B0C-4764-81AA-06DFEED9A476}
O42 - Logiciel: The Lord of the Rings FREE Trial - (.ATI Technologies Inc..) [HKLM] -- {8ACC73AA-6511-7C55-B1A9-8E5D1DEAFAA3}
O42 - Logiciel: Catalyst Control Center - Branding - (.ATI.) [HKLM] -- {8D7133DE-27D2-47E5-B248-4180278D32AA}
O42 - Logiciel: Epson Event Manager - (.SEIKO EPSON CORPORATION.) [HKLM] -- {8ED43F7E-A8F6-4898-AF11-B6158F2EDF94}
O42 - Logiciel: VC80CRTRedist - 8.0.50727.6195 - (.DivX, Inc.) [HKLM] -- {933B4015-4618-4716-A828-5289FC03165F}
O42 - Logiciel: agederar - (.ryofward.) [HKLM] -- {9f58a80e-3c37-4557-0e9d-4857a20ed324}
O42 - Logiciel: Epson Easy Photo Print 2 - (.SEIKO EPSON CORPORATION.) [HKLM] -- {A02D7029-C4EF-44C1-9FD4-C0D3CA518113}
O42 - Logiciel: CyberLink PowerDVD 9 - (.CyberLink Corp..) [HKLM] -- {A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}
O42 - Logiciel: LightScribe System Software - (.LightScribe.) [HKLM] -- {A8F1CA85-C713-4B1F-B3B4-B2B7A6824146}
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
O42 - Logiciel: Adobe Refresh Manager - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-0804-1033-1959-001824147215}
O42 - Logiciel: Adobe Reader XI (11.0.12) - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-AB0000000001}
O42 - Logiciel: Epson Easy Photo Print Plug-in for PMB(Picture Motion Browser) - (.SEIKO EPSON CORPORATION.) [HKLM] -- {B2D55EB8-32C5-4B43-9006-9E97DECBA178}
O42 - Logiciel: @BIOS - (.GIGABYTE.) [HKLM] -- {B2DC3F08-2EB2-49A5-AA24-15DFC8B1CB83}
O42 - Logiciel: PHOTOfunSTUDIO 6.0 - (.Panasonic Corporation.) [HKLM] -- {B62A8A6F-5E48-4336-BF13-1632D5921872}
O42 - Logiciel: QuickTime - (.Apple Inc..) [HKLM] -- {B67BAFBA-4C9F-48FA-9496-933E3B255044}
O42 - Logiciel: CyberLink PowerProducer - (.CyberLink Corp..) [HKLM] -- {B7A0CE06-068E-11D6-97FD-0050BACBF861}
O42 - Logiciel: AMD Drag and Drop Transcoding - (.ATI Technologies Inc..) [HKLM] -- {B7F293A4-8666-6410-36F4-E47EB2029CCB}
O42 - Logiciel: CyberLink LabelPrint - (.CyberLink Corp..) [HKLM] -- {C59C179C-668D-49A9-B6EA-0121CCFC1243}
O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM] -- {DF9C119C-7F26-45B9-93D4-7C372CBBBA11}
O42 - Logiciel: Boxore Client - (.Boxore OU.) [HKLM] -- {E199C882-78F1-45F1-9D8A-3DD3AF97A7C0} =>PUP.Optional.Boxore
O42 - Logiciel: System Requirements Lab CYRI - (.Husdawg, LLC.) [HKLM] -- {E362724E-9320-4946-AF34-874E7B6B2927}
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}
O42 - Logiciel: ABBYY FineReader 9.0 Sprint - (.ABBYY.) [HKLM] -- {F9000000-0018-0000-0000-074957833700}
O42 - Logiciel: Splashtop Connect IE - (.Splashtop Inc..) [HKLM] -- {F9F5EF72-18CF-4DCF-A721-EC86B94DAC46}

---\\ HKCU & HKLM Software Keys (129) - 8s
HKLM\SOFTWARE\ABBYY
HKLM\SOFTWARE\Adobe
HKLM\SOFTWARE\AdwCleaner
HKLM\SOFTWARE\Ahead
HKLM\SOFTWARE\Amazon
HKLM\SOFTWARE\AMD
HKLM\SOFTWARE\AppDataLow
HKLM\SOFTWARE\Apple Computer, Inc.
HKLM\SOFTWARE\Apple Inc.
HKLM\SOFTWARE\ATI
HKLM\SOFTWARE\ATI Technologies
HKLM\SOFTWARE\Audible
HKLM\SOFTWARE\BrowserChoice
HKLM\SOFTWARE\Crossbrowse =>PUP.Optional.CrossBrowse
HKLM\SOFTWARE\CyberLink
HKLM\SOFTWARE\DivX
HKLM\SOFTWARE\DivXNetworks
HKLM\SOFTWARE\Dolby
HKLM\SOFTWARE\downchecker
HKLM\SOFTWARE\DTS
HKLM\SOFTWARE\EPSON
HKLM\SOFTWARE\EpsonNet
HKLM\SOFTWARE\FFPluginHp =>PUP.Optional.SweetSearch
HKLM\SOFTWARE\GEAR Software
HKLM\SOFTWARE\Gigabyte
HKLM\SOFTWARE\GNU
HKLM\SOFTWARE\Google
HKLM\SOFTWARE\InstallShield
HKLM\SOFTWARE\Intel
HKLM\SOFTWARE\JavaSoft
HKLM\SOFTWARE\JreMetrics
HKLM\SOFTWARE\Lake
HKLM\SOFTWARE\Lavasoft
HKLM\SOFTWARE\Licenses
HKLM\SOFTWARE\LightScribe
HKLM\SOFTWARE\Macromedia
HKLM\SOFTWARE\Malwarebytes' Anti-Malware
HKLM\SOFTWARE\Malwarebytes' Anti-Malware (Trial)
HKLM\SOFTWARE\McAfee.com
HKLM\SOFTWARE\mcafeeupdater
HKLM\SOFTWARE\Mozilla
HKLM\SOFTWARE\mozilla.org
HKLM\SOFTWARE\MozillaPlugins
HKLM\SOFTWARE\mystartsearchSoftware =>PUP.Optional.StartSearch
HKLM\SOFTWARE\Naviextras
HKLM\SOFTWARE\Nero
HKLM\SOFTWARE\NeroDigital
HKLM\SOFTWARE\NimoCorp
HKLM\SOFTWARE\Object Browser-nv-ie =>PUP.Optional.ObjectBrowser
HKLM\SOFTWARE\ODBC
HKLM\SOFTWARE\OnStage
HKLM\SOFTWARE\Panasonic
HKLM\SOFTWARE\PhraseProfessor_1.10.0.21 =>PUP.Optional.Gen
HKLM\SOFTWARE\Piriform
HKLM\SOFTWARE\Realtek
HKLM\SOFTWARE\Realtek Semiconductor Corp.
HKLM\SOFTWARE\RegisteredApplications
HKLM\SOFTWARE\RTLSetup
HKLM\SOFTWARE\SEIKO EPSON CORPORATION
HKLM\SOFTWARE\Software
HKLM\SOFTWARE\Sonic
HKLM\SOFTWARE\SonicFocus
HKLM\SOFTWARE\Sony Corporation
HKLM\SOFTWARE\SRS Labs
HKLM\SOFTWARE\Symantec
HKLM\SOFTWARE\VideoLAN
HKLM\SOFTWARE\Volatile
HKLM\SOFTWARE\Waves Audio
HKLM\SOFTWARE\WinRAR
HKCU\SOFTWARE\ABBYY
HKCU\SOFTWARE\Ad-Remover
HKCU\SOFTWARE\Adobe
HKCU\SOFTWARE\AMD
HKCU\SOFTWARE\AOL
HKCU\SOFTWARE\AppDataLow
HKCU\SOFTWARE\Apple Computer, Inc.
HKCU\SOFTWARE\Apple Inc.
HKCU\SOFTWARE\ATI
HKCU\SOFTWARE\Chromium
HKCU\SOFTWARE\Crossbrowse =>PUP.Optional.CrossBrowse
HKCU\SOFTWARE\CrossBrowser =>PUP.Optional.CrossBrowser
HKCU\SOFTWARE\Cyberlink
HKCU\SOFTWARE\DivX
HKCU\SOFTWARE\DivXNetworks
HKCU\SOFTWARE\Dnldstr_Aggregator
HKCU\SOFTWARE\DownloadCenter
HKCU\SOFTWARE\EPSON
HKCU\SOFTWARE\Gabest
HKCU\SOFTWARE\Gigabyte
HKCU\SOFTWARE\GNU
HKCU\SOFTWARE\Google
HKCU\SOFTWARE\Hola
HKCU\SOFTWARE\InstallPath
HKCU\SOFTWARE\JavaSoft
HKCU\SOFTWARE\Lake
HKCU\SOFTWARE\LightScribe
HKCU\SOFTWARE\Local AppWizard-Generated Applications
HKCU\SOFTWARE\Macromedia
HKCU\SOFTWARE\MainConcept
HKCU\SOFTWARE\Malwarebytes' Anti-Malware
HKCU\SOFTWARE\MCAFEE
HKCU\SOFTWARE\Mozilla
HKCU\SOFTWARE\MozillaPlugins
HKCU\SOFTWARE\Naviextras
HKCU\SOFTWARE\Nero
HKCU\SOFTWARE\NeroDigital
HKCU\SOFTWARE\Netscape
HKCU\SOFTWARE\OB
HKCU\SOFTWARE\Object Browser-nv-ie =>PUP.Optional.ObjectBrowser
HKCU\SOFTWARE\ODBC
HKCU\SOFTWARE\Opera Software
HKCU\SOFTWARE\Panasonic
HKCU\SOFTWARE\Piriform
HKCU\SOFTWARE\Realtek
HKCU\SOFTWARE\ryofward
HKCU\SOFTWARE\Software
HKCU\SOFTWARE\System Requirements Lab
HKCU\SOFTWARE\TeleCharger
HKCU\SOFTWARE\Trolltech
HKCU\SOFTWARE\tstamptoken =>PUP.Optional.MaxComputerCleaner
HKCU\SOFTWARE\VB and VBA Program Settings
HKCU\SOFTWARE\WebApp
HKCU\SOFTWARE\WinRAR
HKCU\SOFTWARE\WinRAR SFX
HKCU\SOFTWARE\ZebHelpProcess Helper
HKCU\SOFTWARE\ƒAƒvƒŠƒP[ƒVƒ‡ƒ“ ƒEƒBƒU[ƒh‚Ő¶¬‚³‚ꂽƒ[ƒJƒ‹ ƒAƒvƒŠƒP[ƒVƒ‡ƒ“
HKCU\SOFTWARE\AppDataLow\Software
HKCU\SOFTWARE\AppDataLow\Software\Adobe
HKCU\SOFTWARE\AppDataLow\Software\JavaSoft

---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43) (230) - 7s
O43 - CFD: 2015/08/01 22:47:07 - [0] D -- C:\Program Files\3ec599db-b8cc-4081-a24c-d17af2e82169 =>PUP.Optional.CrossRider
O43 - CFD: 2015/08/01 19:28:48 - [] D -- C:\Program Files\46364331-1438450096-3444-3644-4646FFFFFFFF =>PUP.Optional.CrossRider
O43 - CFD: 2015/08/01 22:09:14 - [] D -- C:\Program Files\46364331-1438450313-3444-3644-4646FFFFFFFF =>PUP.Optional.CrossRider
O43 - CFD: 2015/08/01 22:09:06 - [] D -- C:\Program Files\7820b0eb-3626-4620-9e3a-dab3daac0de7 =>PUP.Optional.CrossRider
O43 - CFD: 2012/09/03 19:09:28 - [] D -- C:\Program Files\ABBYY FineReader 9.0 Sprint
O43 - CFD: 2012/08/30 00:43:05 - [] D -- C:\Program Files\Ad-Remover
O43 - CFD: 2013/05/31 19:20:49 - [] D -- C:\Program Files\Adobe
O43 - CFD: 2012/09/17 15:02:45 - [] D -- C:\Program Files\Amazon
O43 - CFD: 2011/09/29 12:09:40 - [] D -- C:\Program Files\AMD
O43 - CFD: 2013/04/03 21:14:46 - [] D -- C:\Program Files\Apple Software Update
O43 - CFD: 2015/08/01 20:21:31 - [] D -- C:\Program Files\Apps Launcher
O43 - CFD: 2011/09/29 12:04:13 - [] D -- C:\Program Files\ATI
O43 - CFD: 2011/09/29 12:04:00 - [] D -- C:\Program Files\ATI Technologies
O43 - CFD: 2013/10/01 14:02:56 - [] D -- C:\Program Files\Bonjour
O43 - CFD: 2014/09/18 14:28:45 - [] D -- C:\Program Files\CCleaner
O43 - CFD: 2015/08/01 21:31:29 - [] D -- C:\Program Files\chk32
O43 - CFD: 2015/08/01 22:22:00 - [] D -- C:\Program Files\Common Files
O43 - CFD: 2015/08/01 23:47:18 - [] D -- C:\Program Files\Crossbrowse =>PUP.Optional.CrossBrowse
O43 - CFD: 2013/06/04 01:06:30 - [] D -- C:\Program Files\CyberLink
O43 - CFD: 2013/04/11 17:17:33 - [] D -- C:\Program Files\DivX
O43 - CFD: 2011/10/01 15:38:01 - [] D -- C:\Program Files\DVD Maker
O43 - CFD: 2015/08/01 22:09:14 - [] D -- C:\Program Files\ee63cdc6-5f91-44d3-a3dd-8241c1189391 =>PUP.Optional.CrossRider
O43 - CFD: 2012/09/03 19:04:37 - [] D -- C:\Program Files\epson
O43 - CFD: 2012/09/03 19:07:15 - [] D -- C:\Program Files\Epson Software
O43 - CFD: 2012/09/03 19:02:50 - [] D -- C:\Program Files\EpsonNet
O43 - CFD: 2011/09/28 18:53:37 - [0] SHD -- C:\Program Files\Fichiers communs
O43 - CFD: 2011/09/29 12:11:19 - [] D -- C:\Program Files\Gigabyte
O43 - CFD: 2012/09/02 12:51:53 - [] D -- C:\Program Files\Google
O43 - CFD: 2013/06/04 01:06:05 - [] HD -- C:\Program Files\InstallShield Installation Information
O43 - CFD: 2015/07/16 14:35:41 - [] D -- C:\Program Files\Internet Explorer
O43 - CFD: 2013/10/01 14:04:12 - [] D -- C:\Program Files\iPod
O43 - CFD: 2013/10/01 14:04:48 - [] D -- C:\Program Files\iTunes
O43 - CFD: 2015/01/27 22:00:33 - [] D -- C:\Program Files\Java
O43 - CFD: 2015/08/01 20:33:38 - [] D -- C:\Program Files\Malwarebytes Anti-Malware
O43 - CFD: 2014/09/18 23:01:17 - [0] D -- C:\Program Files\Malwarebytes' Anti-Malware
O43 - CFD: 2014/06/16 05:46:19 - [] D -- C:\Program Files\McAfee Security Scan
O43 - CFD: 2009/07/14 11:00:58 - [] D -- C:\Program Files\Microsoft Games
O43 - CFD: 2012/02/24 13:54:29 - [] D -- C:\Program Files\Microsoft Office
O43 - CFD: 2015/05/13 08:13:24 - [] D -- C:\Program Files\Microsoft Security Client
O43 - CFD: 2011/12/25 21:54:39 - [] D -- C:\Program Files\Microsoft SQL Server Compact Edition
O43 - CFD: 2011/12/25 21:54:39 - [] D -- C:\Program Files\Microsoft Synchronization Services
O43 - CFD: 2011/10/14 17:33:17 - [] D -- C:\Program Files\Microsoft.NET
O43 - CFD: 2015/08/01 23:56:27 - [] D -- C:\Program Files\Mozilla Firefox
O43 - CFD: 2015/08/01 23:56:25 - [] D -- C:\Program Files\Mozilla Maintenance Service
O43 - CFD: 2009/07/14 06:52:30 - [] D -- C:\Program Files\MSBuild
O43 - CFD: 2012/08/15 13:35:06 - [] D -- C:\Program Files\Naviextras
O43 - CFD: 2011/09/29 12:22:28 - [] D -- C:\Program Files\Nero
O43 - CFD: 2011/09/29 14:45:14 - [] D -- C:\Program Files\NimoCodec Pack
O43 - CFD: 2015/08/01 23:48:14 - [] D -- C:\Program Files\On Stage =>PUP.Optional.OnStage
O43 - CFD: 2015/08/01 19:31:04 - [0] D -- C:\Program Files\Opera
O43 - CFD: 2011/12/25 21:54:42 - [] D -- C:\Program Files\Panasonic
O43 - CFD: 2015/08/01 22:44:26 - [] D -- C:\Program Files\PhraseProfessor_1.10.0.21 =>PUP.Optional.Gen
O43 - CFD: 2012/08/29 23:06:51 - [0] D -- C:\Program Files\PlayerPlus
O43 - CFD: 2013/09/02 23:17:59 - [] D -- C:\Program Files\QuickTime
O43 - CFD: 2011/09/29 12:06:58 - [] D -- C:\Program Files\Realtek
O43 - CFD: 2009/07/14 06:52:30 - [] D -- C:\Program Files\Reference Assemblies
O43 - CFD: 2013/05/31 21:00:35 - [] D -- C:\Program Files\RegCleaner
O43 - CFD: 2015/08/01 22:47:54 - [] D -- C:\Program Files\SpaceSondPro_v53.1254 =>PUP.Optional.SpaceSoundPro
O43 - CFD: 2015/08/01 22:38:24 - [0] D -- C:\Program Files\SpeedFoxV1
O43 - CFD: 2013/09/18 17:42:05 - [] D -- C:\Program Files\SystemRequirementsLab
O43 - CFD: 2011/09/29 12:05:09 - [0] HD -- C:\Program Files\Temp
O43 - CFD: 2009/07/14 06:53:23 - [0] HD -- C:\Program Files\Uninstall Information
O43 - CFD: 2011/09/29 14:42:58 - [] D -- C:\Program Files\VideoLAN
O43 - CFD: 2013/07/11 22:06:03 - [] D -- C:\Program Files\Windows Defender
O43 - CFD: 2015/05/13 17:45:48 - [] D -- C:\Program Files\Windows Journal
O43 - CFD: 2011/10/01 15:38:01 - [] D -- C:\Program Files\Windows Mail
O43 - CFD: 2015/06/10 18:40:46 - [] D -- C:\Program Files\Windows Media Player
O43 - CFD: 2011/09/28 18:53:37 - [] D -- C:\Program Files\Windows NT
O43 - CFD: 2011/10/01 15:38:00 - [] D -- C:\Program Files\Windows Photo Viewer
O43 - CFD: 2011/10/01 15:38:00 - [] D -- C:\Program Files\Windows Portable Devices
O43 - CFD: 2011/10/01 15:38:01 - [] D -- C:\Program Files\Windows Sidebar
O43 - CFD: 2015/03/14 14:47:42 - [] D -- C:\Program Files\WinRAR
O43 - CFD: 2015/08/01 22:42:23 - [] D -- C:\Program Files\ZHPDiag
O43 - CFD: 2011/12/04 16:13:49 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ABBYY FineReader 9.0 Sprint
O43 - CFD: 2011/09/29 00:50:10 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 2009/07/14 06:46:36 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 2012/09/17 15:02:46 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Amazon
O43 - CFD: 2011/09/29 12:04:04 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Catalyst Control Center
O43 - CFD: 2014/07/27 21:10:33 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
O43 - CFD: 2015/08/01 23:50:49 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Crossbrowse =>PUP.Optional.CrossBrowse
O43 - CFD: 2013/06/04 01:01:15 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink Blu-ray Disc Suite
O43 - CFD: 2013/04/11 17:17:33 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX Plus
O43 - CFD: 2012/09/03 19:11:59 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON
O43 - CFD: 2012/09/03 19:08:02 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epson Software
O43 - CFD: 2011/09/29 00:50:11 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
O43 - CFD: 2011/09/29 12:11:19 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIGABYTE
O43 - CFD: 2015/08/01 22:54:41 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
O43 - CFD: 2013/10/01 14:05:34 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
O43 - CFD: 2015/01/27 22:00:48 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
O43 - CFD: 2011/09/29 12:23:54 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LG Burning Tools
O43 - CFD: 2011/09/30 19:59:10 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LightScribe Direct Disc Labeling
O43 - CFD: 2009/07/14 06:42:30 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 2015/08/01 20:33:37 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
O43 - CFD: 2014/06/16 05:46:26 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus
O43 - CFD: 2011/10/01 06:29:29 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
O43 - CFD: 2011/12/25 21:54:54 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Panasonic
O43 - CFD: 2013/09/02 23:17:54 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
O43 - CFD: 2014/06/16 05:46:23 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
O43 - CFD: 2009/07/14 11:00:22 - [0] RHD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC
O43 - CFD: 2013/11/22 19:16:39 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
O43 - CFD: 2015/03/13 23:52:53 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
O43 - CFD: 2015/08/01 22:42:23 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP
O43 - CFD: 2013/10/01 14:04:48 - [] D -- C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1
O43 - CFD: 2015/08/01 23:48:10 - [] D -- C:\ProgramData\2988696b-294c-4054-b34f-e97ca58a10e8
O43 - CFD: 2015/08/01 19:37:42 - [] D -- C:\ProgramData\7WinManPro7
O43 - CFD: 2011/12/04 16:12:17 - [] D -- C:\ProgramData\ABBYY
O43 - CFD: 2013/05/31 19:20:52 - [] D -- C:\ProgramData\Adobe
O43 - CFD: 2013/10/01 14:03:16 - [] D -- C:\ProgramData\Apple
O43 - CFD: 2013/10/01 14:04:11 - [] D -- C:\ProgramData\Apple Computer
O43 - CFD: 2009/07/14 06:53:55 - [0] SHD -- C:\ProgramData\Application Data
O43 - CFD: 2011/09/29 12:06:28 - [] D -- C:\ProgramData\ATI
O43 - CFD: 2011/09/28 18:53:37 - [0] SHD -- C:\ProgramData\Bureau
O43 - CFD: 2015/08/01 20:19:02 - [] D -- C:\ProgramData\BWinManProB
O43 - CFD: 2012/07/11 18:57:27 - [] D -- C:\ProgramData\ClubSanDisk
O43 - CFD: 2013/06/04 01:07:34 - [] D -- C:\ProgramData\CyberLink
O43 - CFD: 2009/07/14 06:53:55 - [0] SHD -- C:\ProgramData\Desktop
O43 - CFD: 2013/04/11 17:17:33 - [] D -- C:\ProgramData\DivX
O43 - CFD: 2009/07/14 06:53:55 - [0] SHD -- C:\ProgramData\Documents
O43 - CFD: 2012/09/03 19:13:07 - [] D -- C:\ProgramData\EPSON
O43 - CFD: 2011/09/28 18:53:37 - [0] SHD -- C:\ProgramData\Favoris
O43 - CFD: 2009/07/14 06:53:55 - [0] SHD -- C:\ProgramData\Favorites
O43 - CFD: 2012/09/02 12:50:54 - [] D -- C:\ProgramData\Google
O43 - CFD: 2013/06/04 00:12:40 - [] D -- C:\ProgramData\install_clap
O43 - CFD: 2015/08/01 19:31:22 - [] D -- C:\ProgramData\Lavasoft
O43 - CFD: 2013/06/06 13:38:08 - [] D -- C:\ProgramData\LightScribe
O43 - CFD: 2014/09/18 23:01:18 - [] D -- C:\ProgramData\Malwarebytes
O43 - CFD: 2011/10/28 17:09:50 - [] D -- C:\ProgramData\McAfee
O43 - CFD: 2014/06/16 05:46:23 - [] D -- C:\ProgramData\McAfee Security Scan
O43 - CFD: 2011/09/28 18:53:37 - [0] SHD -- C:\ProgramData\Menu Démarrer
O43 - CFD: 2014/12/10 15:19:30 - [] SD -- C:\ProgramData\Microsoft
O43 - CFD: 2011/09/28 18:53:37 - [0] SHD -- C:\ProgramData\Modèles
O43 - CFD: 2012/05/03 22:23:26 - [] D -- C:\ProgramData\Mozilla
O43 - CFD: 2015/08/01 19:42:25 - [] D -- C:\ProgramData\Mropnuuflu
O43 - CFD: 2011/09/29 12:22:28 - [] D -- C:\ProgramData\Nero
O43 - CFD: 2015/01/27 22:01:44 - [] D -- C:\ProgramData\Oracle
O43 - CFD: 2015/08/01 22:06:14 - [] D -- C:\ProgramData\OWinManProO
O43 - CFD: 2011/12/25 21:56:46 - [] D -- C:\ProgramData\Panasonic
O43 - CFD: 2013/06/04 00:18:14 - [] D -- C:\ProgramData\PDVD
O43 - CFD: 2009/07/14 06:53:55 - [0] SHD -- C:\ProgramData\Start Menu
O43 - CFD: 2013/05/31 17:43:38 - [] D -- C:\ProgramData\Sun
O43 - CFD: 2013/09/18 17:42:05 - [] D -- C:\ProgramData\SystemRequirementsLab
O43 - CFD: 2013/06/04 00:36:07 - [] AD -- C:\ProgramData\Temp
O43 - CFD: 2009/07/14 06:53:55 - [0] SHD -- C:\ProgramData\Templates
O43 - CFD: 2012/09/03 19:08:02 - [] D -- C:\ProgramData\UDL
O43 - CFD: 2015/08/01 22:50:19 - [] D -- C:\ProgramData\yWinManProy
O43 - CFD: 2011/09/29 12:01:34 - [] HD -- C:\ProgramData\{8533ADFA-85F0-4dc1-946A-2A0BA58E78E3}
O43 - CFD: 2015/08/01 23:48:11 - [] D -- C:\Program Files\Common Files\2988696b-294c-4054-b34f-e97ca58a10e8
O43 - CFD: 2011/12/04 16:12:17 - [] D -- C:\Program Files\Common Files\ABBYY
O43 - CFD: 2013/05/31 19:20:51 - [] D -- C:\Program Files\Common Files\Adobe
O43 - CFD: 2013/10/01 14:04:11 - [] D -- C:\Program Files\Common Files\Apple
O43 - CFD: 2011/09/29 12:04:11 - [] D -- C:\Program Files\Common Files\ATI Technologies
O43 - CFD: 2011/09/30 20:04:29 - [] D -- C:\Program Files\Common Files\CyberLink
O43 - CFD: 2011/09/29 14:37:50 - [] D -- C:\Program Files\Common Files\DESIGNER
O43 - CFD: 2013/04/11 17:17:02 - [] D -- C:\Program Files\Common Files\DivX Shared
O43 - CFD: 2012/09/03 19:02:21 - [] D -- C:\Program Files\Common Files\EPSON
O43 - CFD: 2011/09/29 12:22:46 - [] D -- C:\Program Files\Common Files\InstallShield
O43 - CFD: 2015/01/27 22:01:13 - [] D -- C:\Program Files\Common Files\Java
O43 - CFD: 2011/09/30 19:59:09 - [] D -- C:\Program Files\Common Files\LightScribe
O43 - CFD: 2011/10/01 06:29:29 - [] D -- C:\Program Files\Common Files\microsoft shared
O43 - CFD: 2011/09/29 12:23:32 - [] D -- C:\Program Files\Common Files\Nero
O43 - CFD: 2011/12/25 21:54:53 - [] D -- C:\Program Files\Common Files\Panasonic
O43 - CFD: 2009/07/14 04:37:05 - [] D -- C:\Program Files\Common Files\Services
O43 - CFD: 2009/07/14 04:37:05 - [] D -- C:\Program Files\Common Files\SpeechEngines
O43 - CFD: 2015/08/01 22:22:05 - [] D -- C:\Program Files\Common Files\System
O43 - CFD: 2011/10/28 17:17:22 - [] D -- C:\Users\Jonathan\AppData\Roaming\Adobe
O43 - CFD: 2015/08/01 19:28:26 - [] D -- C:\Users\Jonathan\AppData\Roaming\agederar
O43 - CFD: 2012/09/17 15:03:58 - [] D -- C:\Users\Jonathan\AppData\Roaming\Amazon
O43 - CFD: 2013/10/01 14:06:18 - [] D -- C:\Users\Jonathan\AppData\Roaming\Apple Computer
O43 - CFD: 2011/09/29 12:06:28 - [] D -- C:\Users\Jonathan\AppData\Roaming\ATI
O43 - CFD: 2013/06/04 00:27:43 - [] D -- C:\Users\Jonathan\AppData\Roaming\CyberLink
O43 - CFD: 2015/08/01 20:18:45 - [] D -- C:\Users\Jonathan\AppData\Roaming\Devoted Squadron
O43 - CFD: 2013/06/04 00:42:22 - [] D -- C:\Users\Jonathan\AppData\Roaming\DivX
O43 - CFD: 2014/10/11 15:57:18 - [] D -- C:\Users\Jonathan\AppData\Roaming\dvdcss
O43 - CFD: 2011/12/04 16:28:25 - [] D -- C:\Users\Jonathan\AppData\Roaming\Epson
O43 - CFD: 2012/09/04 10:58:40 - [] D -- C:\Users\Jonathan\AppData\Roaming\Google
O43 - CFD: 2011/09/28 18:53:55 - [] D -- C:\Users\Jonathan\AppData\Roaming\Identities
O43 - CFD: 2012/09/03 19:06:38 - [] D -- C:\Users\Jonathan\AppData\Roaming\InstallShield
O43 - CFD: 2015/08/01 19:31:22 - [] D -- C:\Users\Jonathan\AppData\Roaming\Lavasoft
O43 - CFD: 2011/09/29 14:51:32 - [] D -- C:\Users\Jonathan\AppData\Roaming\Macromedia
O43 - CFD: 2014/09/18 23:01:31 - [0] D -- C:\Users\Jonathan\AppData\Roaming\Malwarebytes
O43 - CFD: 2009/07/14 11:00:22 - [0] D -- C:\Users\Jonathan\AppData\Roaming\Media Center Programs
O43 - CFD: 2015/06/06 13:41:01 - [] SD -- C:\Users\Jonathan\AppData\Roaming\Microsoft
O43 - CFD: 2011/09/30 17:48:07 - [] D -- C:\Users\Jonathan\AppData\Roaming\Mozilla
O43 - CFD: 2015/08/01 23:44:35 - [] D -- C:\Users\Jonathan\AppData\Roaming\mystartsearch =>PUP.Optional.StartSearch
O43 - CFD: 2012/08/15 13:37:07 - [] D -- C:\Users\Jonathan\AppData\Roaming\naviextras
O43 - CFD: 2011/09/30 19:40:21 - [] D -- C:\Users\Jonathan\AppData\Roaming\Nero
O43 - CFD: 2015/08/01 21:50:55 - [] D -- C:\Users\Jonathan\AppData\Roaming\vlc
O43 - CFD: 2011/10/06 16:54:37 - [] D -- C:\Users\Jonathan\AppData\Roaming\WinRAR
O43 - CFD: 2015/08/01 23:59:39 - [] D -- C:\Users\Jonathan\AppData\Roaming\ZHP
O43 - CFD: 2015/08/01 22:13:05 - [] D -- C:\Users\Jonathan\AppData\Local\13975
O43 - CFD: 2011/12/04 16:14:02 - [] D -- C:\Users\Jonathan\AppData\Local\ABBYY
O43 - CFD: 2015/07/09 13:26:38 - [] D -- C:\Users\Jonathan\AppData\Local\Adobe
O43 - CFD: 2011/12/25 21:57:30 - [] D -- C:\Users\Jonathan\AppData\Local\Apple
O43 - CFD: 2013/10/01 14:05:40 - [] D -- C:\Users\Jonathan\AppData\Local\Apple Computer
O43 - CFD: 2011/09/28 18:53:44 - [0] SHD -- C:\Users\Jonathan\AppData\Local\Application Data
O43 - CFD: 2011/09/29 12:06:28 - [] D -- C:\Users\Jonathan\AppData\Local\ATI
O43 - CFD: 2015/08/01 22:31:27 - [] D -- C:\Users\Jonathan\AppData\Local\bvxvbvef
O43 - CFD: 2015/08/01 22:06:03 - [] D -- C:\Users\Jonathan\AppData\Local\CrashRpt =>.Legitimate.CrashReports
O43 - CFD: 2013/06/04 00:54:37 - [] D -- C:\Users\Jonathan\AppData\Local\Cyberlink
O43 - CFD: 2015/08/01 19:31:52 - [] D -- C:\Users\Jonathan\AppData\Local\DCheckService
O43 - CFD: 2015/04/20 07:53:17 - [0] D -- C:\Users\Jonathan\AppData\Local\Diagnostics
O43 - CFD: 2013/09/02 15:25:31 - [0] D -- C:\Users\Jonathan\AppData\Local\ElevatedDiagnostics
O43 - CFD: 2015/06/14 21:33:12 - [0] SHD -- C:\Users\Jonathan\AppData\Local\EmieBrowserModeList
O43 - CFD: 2015/06/14 21:33:12 - [0] SHD -- C:\Users\Jonathan\AppData\Local\EmieSiteList
O43 - CFD: 2015/06/14 21:33:12 - [0] SHD -- C:\Users\Jonathan\AppData\Local\EmieUserList
O43 - CFD: 2015/08/01 19:39:09 - [] D -- C:\Users\Jonathan\AppData\Local\Google
O43 - CFD: 2015/06/01 14:05:21 - [] D -- C:\Users\Jonathan\AppData\Local\GWX
O43 - CFD: 2011/09/28 18:53:44 - [0] SHD -- C:\Users\Jonathan\AppData\Local\Historique
O43 - CFD: 2015/08/01 22:06:13 - [] D -- C:\Users\Jonathan\AppData\Local\Installer =>PUP.Optional.InstallPedia
O43 - CFD: 2012/06/23 23:48:01 - [] D -- C:\Users\Jonathan\AppData\Local\Macromedia
O43 - CFD: 2013/06/04 00:16:35 - [] D -- C:\Users\Jonathan\AppData\Local\MediaServer
O43 - CFD: 2015/06/06 13:41:01 - [] D -- C:\Users\Jonathan\AppData\Local\Microsoft
O43 - CFD: 2012/12/22 17:57:55 - [] D -- C:\Users\Jonathan\AppData\Local\Microsoft Games
O43 - CFD: 2013/10/29 17:51:47 - [] D -- C:\Users\Jonathan\AppData\Local\Mozilla
O43 - CFD: 2011/12/25 21:56:21 - [] D -- C:\Users\Jonathan\AppData\Local\Panasonic
O43 - CFD: 2011/09/30 21:47:13 - [] D -- C:\Users\Jonathan\AppData\Local\Power2Go
O43 - CFD: 2013/09/02 22:49:18 - [] D -- C:\Users\Jonathan\AppData\Local\Programs
O43 - CFD: 2012/07/11 18:57:31 - [] D -- C:\Users\Jonathan\AppData\Local\Proxure
O43 - CFD: 2015/08/01 19:31:21 - [] D -- C:\Users\Jonathan\AppData\Local\ServiceGoogle
O43 - CFD: 2015/08/01 23:59:31 - [] D -- C:\Users\Jonathan\AppData\Local\Temp
O43 - CFD: 2011/09/28 18:53:44 - [0] SHD -- C:\Users\Jonathan\AppData\Local\Temporary Internet Files
O43 - CFD: 2013/05/31 21:10:27 - [] D -- C:\Users\Jonathan\AppData\Local\VirtualStore
O43 - CFD: 2009/07/14 06:42:04 - [] RD -- C:\Users\Jonathan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 2015/08/01 22:24:24 - [] RD -- C:\Users\Jonathan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 2013/06/04 01:06:35 - [] D -- C:\Users\Jonathan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink Blu-ray Disc Suite
O43 - CFD: 2013/06/04 00:24:36 - [] D -- C:\Users\Jonathan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LG Power Tools
O43 - CFD: 2009/07/14 06:37:42 - [] RD -- C:\Users\Jonathan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 2012/08/15 13:35:16 - [] D -- C:\Users\Jonathan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Naviextras
O43 - CFD: 2015/08/01 23:50:49 - [] RD -- C:\Users\Jonathan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
O43 - CFD: 2015/03/13 23:52:53 - [] D -- C:\Users\Jonathan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR

---\\ Liste des pilotes du système (SDL) (O58) (74) - 8s
O58 - SDL:2009/07/14 03:26:15 A . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\drivers\adp94xx.sys [422976]
O58 - SDL:2009/07/14 03:26:17 A . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\System32\drivers\adpahci.sys [297552]
O58 - SDL:2009/07/14 03:26:15 A . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver.) -- C:\Windows\System32\drivers\adpu320.sys [146512]
O58 - SDL:2009/07/14 03:26:15 A . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\Windows\System32\drivers\aliide.sys [14400]
O58 - SDL:2011/03/11 07:38:37 A . (.Advanced Micro Devices - AHCI 1.2 Device Driver.) -- C:\Windows\System32\drivers\amdsata.sys [80256]
O58 - SDL:2009/07/14 03:26:15 A . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller D.) -- C:\Windows\System32\drivers\amdsbs.sys [159312]
O58 - SDL:2011/03/11 07:38:37 A . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\Windows\System32\drivers\amdxata.sys [22400]
O58 - SDL:2011/01/10 18:16:16 A . (...) -- C:\Windows\System32\drivers\AppleCharger.sys [18544]
O58 - SDL:2009/07/14 03:26:15 A . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\System32\drivers\arc.sys [76368]
O58 - SDL:2009/07/14 03:26:15 A . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\System32\drivers\arcsas.sys [86608]
O58 - SDL:2009/10/05 17:31:50 A . (.Atheros Communications, Inc. - Atheros Extensible Wireless LAN device driv.) -- C:\Windows\System32\drivers\athr.sys [1221632]
O58 - SDL:2010/04/07 04:43:20 A . (.ATI Technologies Inc. - ATI Radeon Kernel Mode Driver.) -- C:\Windows\System32\drivers\atikmdag.sys [5430272]
O58 - SDL:2010/04/07 03:23:10 A . (.Advanced Micro Devices, Inc. - AMD multi-vendor Miniport Driver.) -- C:\Windows\System32\drivers\atikmpag.sys [157184]
O58 - SDL:2009/07/14 00:02:49 A . (.Broadcom Corporation - Pilote unifié NDIS6.x Broadcom NetXtreme Gi.) -- C:\Windows\System32\drivers\b57nd60x.sys [229888]
O58 - SDL:2009/07/14 00:53:28 A . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower.) -- C:\Windows\System32\drivers\BrFiltLo.sys [13568]
O58 - SDL:2009/07/14 00:53:28 A . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper.) -- C:\Windows\System32\drivers\BrFiltUp.sys [5248]
O58 - SDL:2009/07/14 02:57:25 A . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\System32\drivers\BrSerId.sys [272128]
O58 - SDL:2009/07/14 00:53:32 A . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\System32\drivers\BrSerWdm.sys [62336]
O58 - SDL:2009/07/14 00:53:33 A . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\System32\drivers\BrUsbMdm.sys [12160]
O58 - SDL:2009/07/14 00:53:33 A . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\System32\drivers\BrUsbSer.sys [11904]
O58 - SDL:2009/07/14 00:02:48 A . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.) -- C:\Windows\System32\drivers\bxvbdx.sys [430080]
O58 - SDL:2009/07/14 03:26:21 A . (.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\cmdide.sys [15952]
O58 - SDL:2009/07/14 03:20:28 A . (.Adaptec, Inc. - Adaptec Ultra SCSI miniport.) -- C:\Windows\System32\drivers\djsvs.sys [70720]
O58 - SDL:2009/07/14 03:20:28 A . (.Emulex - Storport Miniport Driver for LightPulse HBA.) -- C:\Windows\System32\drivers\elxstor.sys [453712]
O58 - SDL:2009/07/14 00:02:48 A . (.Broadcom Corporation - Broadcom NetXtreme II 10 GigE VBD.) -- C:\Windows\System32\drivers\evbdx.sys [3100160]
O58 - SDL:2012/08/21 13:01:22 A . (.GEAR Software Inc. - CD DVD Filter.) -- C:\Windows\System32\drivers\GEARAspiWDM.sys [26840]
O58 - SDL:2012/04/06 21:57:34 A . (...) -- C:\Windows\System32\drivers\GVTDrv.sys [24944]
O58 - SDL:2009/07/14 00:54:14 A . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for.) -- C:\Windows\System32\drivers\hcw85cir.sys [26624]
O58 - SDL:2009/07/14 03:20:28 A . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Drive.) -- C:\Windows\System32\drivers\HpSAMD.sys [67152]
O58 - SDL:2011/03/11 07:38:51 A . (.Intel Corporation - Intel Matrix Storage Manager driver - ia32.) -- C:\Windows\System32\drivers\iaStorV.sys [332160]
O58 - SDL:2009/07/14 03:20:36 A . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\System32\drivers\iirsp.sys [41040]
O58 - SDL:2009/07/14 03:20:36 A . (.LSI Corporation - LSI Fusion-MPT FC Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_fc.sys [95824]
O58 - SDL:2009/07/14 03:20:37 A . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas.sys [89168]
O58 - SDL:2009/07/14 03:20:36 A . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas2.sys [54864]
O58 - SDL:2009/07/14 03:20:36 A . (.LSI Corporation - LSI Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_scsi.sys [96848]
O58 - SDL:2015/06/18 08:41:36 A . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\drivers\mbam.sys [23256]
O58 - SDL:2015/06/18 08:41:42 A . (.Malwarebytes Corporation - Malwarebytes Chameleon Protection Driver.) -- C:\Windows\System32\drivers\mbamchameleon.sys [94936]
O58 - SDL:2015/08/01 20:34:39 A . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\drivers\MBAMSwissArmy.sys [98520]
O58 - SDL:2009/07/14 03:20:36 A . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows.) -- C:\Windows\System32\drivers\megasas.sys [30800]
O58 - SDL:2009/07/14 03:20:36 A . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\System32\drivers\MegaSR.sys [235584]
O58 - SDL:2015/06/18 08:41:54 A . (.Malwarebytes Corporation - Malwarebytes Web Access Control.) -- C:\Windows\System32\drivers\mwac.sys [51928]
O58 - SDL:2009/07/14 03:20:44 A . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\System32\drivers\nfrd960.sys [44624]
O58 - SDL:2011/03/11 07:39:00 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\System32\drivers\nvraid.sys [117120]
O58 - SDL:2011/03/11 07:39:00 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\System32\drivers\nvstor.sys [143744]
O58 - SDL:2015/07/28 23:47:42 A . (.PhraseProfessor - PP TDI Driver x86.) -- C:\Windows\System32\drivers\ppfd_vt_1_10_0_21.sys [56464] =>PUP.Optional.Gen
O58 - SDL:2015/07/28 23:47:44 A . (.PhraseProfessor - PP WFP Driver x86.) -- C:\Windows\System32\drivers\ppfd_vw_1_10_0_21.sys [48528] =>PUP.Optional.Gen
O58 - SDL:2009/07/14 03:19:04 A . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\Windows\System32\drivers\ql2300.sys [1383488]
O58 - SDL:2009/07/14 03:19:04 A . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\Windows\System32\drivers\ql40xx.sys [106064]
O58 - SDL:2011/01/13 13:58:30 A . (.Realtek - Realtek 8101E/8168/8169 NDIS 6.20 32-bit Dr.) -- C:\Windows\System32\drivers\Rt86win7.sys [328808]
O58 - SDL:2010/05/25 05:07:38 A . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function D.) -- C:\Windows\System32\drivers\RtHDMIV.sys [204448]
O58 - SDL:2010/11/02 13:29:14 A . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function D.) -- C:\Windows\System32\drivers\RTKVHDA.sys [3228712]
O58 - SDL:2009/07/13 22:50:20 A . (.Macrovision Corporation, Macrovision Europe Limited, - Macrovision SECURITY Driver.) -- C:\Windows\System32\drivers\secdrv.sys [20480]
O58 - SDL:2009/07/14 01:45:33 A . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\System32\drivers\serial.sys [83456]
O58 - SDL:2009/07/14 03:19:04 A . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\System32\drivers\sisraid2.sys [40016]
O58 - SDL:2009/07/14 03:19:04 A . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\System32\drivers\sisraid4.sys [77888]
O58 - SDL:2009/07/14 03:19:04 A . (.Promise Technology - Promise SuperTrak EX Series Driver for Win.) -- C:\Windows\System32\drivers\stexstor.sys [21072]
O58 - SDL:2009/07/14 03:19:10 A . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\viaide.sys [16976]
O58 - SDL:2009/07/14 03:19:11 A . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\Windows\System32\drivers\vsmraid.sys [141904]
O58 - SDL:2015/06/16 00:28:48 A . (.Word Surfer - Word Surfer TDI Driver x86.) -- C:\Windows\System32\drivers\wsafd_1_10_0_19.sys [56448]
O58 - SDL:2009/07/13 23:40:41 A . (...) -- C:\Windows\System32\ANSI.SYS [9029]
O58 - SDL:2009/07/13 23:40:44 A . (...) -- C:\Windows\System32\country.sys [27097]
O58 - SDL:2009/07/13 23:40:40 A . (...) -- C:\Windows\System32\HIMEM.SYS [4768]
O58 - SDL:2009/07/13 23:40:43 A . (...) -- C:\Windows\System32\KEY01.SYS [42809]
O58 - SDL:2009/07/13 23:40:43 A . (...) -- C:\Windows\System32\KEYBOARD.SYS [42537]
O58 - SDL:2009/07/13 23:40:23 A . (...) -- C:\Windows\System32\NTDOS.SYS [27866]
O58 - SDL:2009/07/13 23:40:31 A . (...) -- C:\Windows\System32\NTDOS404.SYS [29146]
O58 - SDL:2009/07/13 23:40:35 A . (...) -- C:\Windows\System32\NTDOS411.SYS [29370]
O58 - SDL:2009/07/13 23:40:39 A . (...) -- C:\Windows\System32\NTDOS412.SYS [29274]
O58 - SDL:2009/07/13 23:40:27 A . (...) -- C:\Windows\System32\NTDOS804.SYS [29146]
O58 - SDL:2009/07/13 23:40:11 A . (...) -- C:\Windows\System32\NTIO.SYS [33952]
O58 - SDL:2009/07/13 23:40:15 A . (...) -- C:\Windows\System32\NTIO404.SYS [34672]
O58 - SDL:2009/07/13 23:40:17 A . (...) -- C:\Windows\System32\NTIO411.SYS [35776]
O58 - SDL:2009/07/13 23:40:19 A . (...) -- C:\Windows\System32\NTIO412.SYS [35536]
O58 - SDL:2009/07/13 23:40:13 A . (...) -- C:\Windows\System32\NTIO804.SYS [34672]

---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61) (9) - 114s
O61 - LFC: 2015/08/01 23:55:28 A . (..) -- C:\Users\Jonathan\Downloads\Firefox Setup Stub 39.0.exe [242904]
O61 - LFC: 2015/08/01 20:18:43 A . (..) -- C:\Users\Jonathan\AppData\Roaming\Devoted Squadron\Devoted Squadron.exe [66048]
O61 - LFC: 2015/08/01 19:28:33 A . (..) -- C:\Users\Jonathan\AppData\Roaming\agederar\nessriny.dll [135168]
O61 - LFC: 2015/08/01 19:31:18 A . (..) -- C:\Users\Jonathan\AppData\Local\ServiceGoogle\service.exe [34304]
O61 - LFC: 2015/08/01 22:06:01 A . (.Copyright (C) 2014.) -- C:\Users\Jonathan\AppData\Local\Installer\Install_31494\DCYTDownloader.exe [1444352] =>PUP.Optional.YTDownloader
O61 - LFC: 2015/08/01 19:31:18 A . (..) -- C:\Users\Jonathan\AppData\Local\DCheckService\dcheck.exe [34304]
O61 - LFC: 2015/07/26 10:15:22 A . (..) -- C:\Users\Jonathan\AppData\Local\bvxvbvef\bvxvbvef.exe [2172416]
O61 - LFC: 2015/08/01 23:46:26 A . (..) -- C:\Users\Jonathan\AppData\Local\ATI\ACE\Manifest.Bin [32089]
O61 - LFC: 2015/08/01 22:13:14 A . (..) -- C:\Users\Jonathan\AppData\Local\13975\Updater.exe [1841152]

---\\ Associations Shell Spawning (O67) (1) - 0s
O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Ob.) -- C:\Windows\System32\eventvwr.exe

---\\ Menu de démarrage Internet (SMI) (O68) (16) - 1s
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Crossbrowse - Crossbrowse.) -- C:\Program Files\Crossbrowse\Crossbrowse\Application\crossbrowse.exe =>PUP.Optional.CrossBrowse
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe http://www.mystartsearch.com/ =>PUP.Optional.StartSearch
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (...) -- iexplore.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Crossbrowse - Crossbrowse.) -- C:\Program Files\Crossbrowse\Crossbrowse\Application\crossbrowse.exe =>PUP.Optional.CrossBrowse
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Crossbrowse - Crossbrowse.) -- C:\Program Files\Crossbrowse\Crossbrowse\Application\crossbrowse.exe =>PUP.Optional.CrossBrowse
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Crossbrowse - Crossbrowse.) -- C:\Program Files\Crossbrowse\Crossbrowse\Application\crossbrowse.exe =>PUP.Optional.CrossBrowse
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe

---\\ Recherche d'infection sur les navigateurs internet (SBI) (O69) (23) - 14s
O69 - SBI: prefs.js [Jonathan - 3v3nyr05.default-1438451279976] user_pref("browser.search.defaultenginename", "mystartsearch"); =>PUP.Optional.StartSearch
O69 - SBI: prefs.js [Jonathan - 3v3nyr05.default-1438451279976] user_pref("browser.search.searchengine.alias", "mystartsearch"); =>PUP.Optional.SearchEngine
O69 - SBI: prefs.js [Jonathan - 3v3nyr05.default-1438451279976] user_pref("browser.search.searchengine.desc", "this is my first firefox searchEngine"); =>PUP.Optional.SearchEngine
O69 - SBI: prefs.js [Jonathan - 3v3nyr05.default-1438451279976] user_pref("browser.search.searchengine.iconURL", "http://www.mystartsearch.com/favicon.ico"); =>PUP.Optional.StartSearch
O69 - SBI: prefs.js [Jonathan - 3v3nyr05.default-1438451279976] user_pref("browser.search.searchengine.name", "mystartsearch"); =>PUP.Optional.SearchEngine
O69 - SBI: prefs.js [Jonathan - 3v3nyr05.default-1438451279976] user_pref("browser.search.searchengine.ptid", "cmi"); =>PUP.Optional.SearchEngine
O69 - SBI: prefs.js [Jonathan - 3v3nyr05.default-1438451279976] user_pref("browser.search.searchengine.uid", "WDCXWD10EARX-00N0YB0_WD-WCC0T005535155351"); =>PUP.Optional.SearchEngine
O69 - SBI: prefs.js [Jonathan - 3v3nyr05.default-1438451279976] user_pref("browser.search.searchengine.url", "http://www.mystartsearch.com/web/?type=ds&ts=1438465458&z=c83dabcd3ce1989d4afdf75g7z[...] =>PUP.Optional.StartSearch
O69 - SBI: prefs.js [Jonathan - 3v3nyr05.default-1438451279976] user_pref("browser.search.selectedEngine", "mystartsearch"); =>PUP.Optional.StartSearch
O69 - SBI: prefs.js [Jonathan - 3v3nyr05.default-1438451279976] user_pref("browser.startup.homepage", "http://www.mystartsearch.com/?type=hp&ts=1438465458&z=c83dabcd3ce1989d4afdf75g7z0c4b3zfq4we[...] =>PUP.Optional.StartSearch
O69 - SBI: prefs.js [Jonathan - 3v3nyr05.default-1438451279976] user_pref("extensions.a14fef81ee28d4335a493c2d6383fd42ff9b4872bccb5bcom70121.70121.description", "iWebar"); =>PUP.Optional.CrossRider
O69 - SBI: prefs.js [Jonathan - 3v3nyr05.default-1438451279976] user_pref("extensions.a14fef81ee28d4335a493c2d6383fd42ff9b4872bccb5bcom70121.70121.internaldb.monetization_plugin_bundledUrls.expi[...] =>PUP.Optional.Monetization
O69 - SBI: prefs.js [Jonathan - 3v3nyr05.default-1438451279976] user_pref("extensions.a14fef81ee28d4335a493c2d6383fd42ff9b4872bccb5bcom70121.70121.internaldb.monetization_plugin_bundledWithHash.[...] =>PUP.Optional.Monetization
O69 - SBI: prefs.js [Jonathan - 3v3nyr05.default-1438451279976] user_pref("extensions.a14fef81ee28d4335a493c2d6383fd42ff9b4872bccb5bcom70121.70121.internaldb.monetization_plugin_notBundledArr_.e[...] =>PUP.Optional.Monetization
O69 - SBI: prefs.js [Jonathan - 3v3nyr05.default-1438451279976] user_pref("extensions.a14fef81ee28d4335a493c2d6383fd42ff9b4872bccb5bcom70121.70121.internaldb.monetization_plugin_notBundledArr_.v[...] =>PUP.Optional.Monetization
O69 - SBI: prefs.js [Jonathan - 3v3nyr05.default-1438451279976] user_pref("extensions.a14fef81ee28d4335a493c2d6383fd42ff9b4872bccb5bcom70121.70121.internaldb.monetization_plugin_regBundledWithSo[...] =>PUP.Optional.Monetization
O69 - SBI: prefs.js [Jonathan - 3v3nyr05.default-1438451279976] user_pref("extensions.a14fef81ee28d4335a493c2d6383fd42ff9b4872bccb5bcom70121.70121.name", "iWebar"); =>PUP.Optional.CrossRider
O69 - SBI: prefs.js [Jonathan - 3v3nyr05.default-1438451279976] user_pref("extensions.a9321b2762c2e4c5fbd04b8118e512707c0c8a2d632754caca0b252e936311db9com32850.32850.name", "Object Browser"); =>PUP.Optional.ObjectBrowser
O69 - SBI: prefs.js [Jonathan - 3v3nyr05.default-1438451279976] user_pref("extensions.enabledAddons", "deskCutv2%40gmail.com:0.0.10,defsearchp%40gmail.com:1.0.0.1039,%7B972ce4c6-7e08-4474-a285-3[...] =>PUP.Optional.DeskCut
O69 - SBI: prefs.js [Jonathan - 3v3nyr05.default-1438451279976] user_pref("extensions.quick_start.enable_search1", false); =>PUP.Optional.QuickStart
O69 - SBI: prefs.js [Jonathan - 3v3nyr05.default-1438451279976] user_pref("extensions.quick_start.sd.closeWindowWithLastTab_prev_state", false); =>PUP.Optional.QuickStart
O69 - SBI: prefs.js [Jonathan - 3v3nyr05.default-1438451279976] user_pref("extensions.xpiState", "{\"app-profile\":{\"defsearchp@gmail.com\":{\"d\":\"C:\\\\Users\\\\Jonathan\\\\AppData\\\\Roamin[...] =>PUP.Optional.PriceFountain
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (Bing) - http://www.bing.com/

---\\ Enumère les services démarrés par Svchost (SSS) (O83) (32) - 1s
O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d’application.) -- C:\Windows\System32\aelupsvc.dll [62464]
O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [67584]
O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [67584]
O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\System32\srvsvc.dll [168960]
O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\System32\gpsvc.dll [593408]
O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\IKEEXT.DLL [679424]
O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Service Audio Windows.) -- C:\Windows\System32\audiosrv.dll [475136]
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’.) -- C:\Windows\System32\rasauto.dll [90624]
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire de connexions d’accès distant.) -- C:\Windows\System32\rasmans.dll [286208]
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll [75264]
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements systèm.) -- C:\Windows\System32\Sens.dll [49664]
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l’application d’assistance à.) -- C:\Windows\System32\ipnathlp.dll [300544]
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM.) -- C:\Windows\System32\tapisrv.dll [242176]
O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gestionnaire des connexions distantes du se.) -- C:\Windows\System32\termsrv.dll [523776]
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Up.) -- C:\Windows\System32\wuaueng.dll [2057216]
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière.) -- C:\Windows\System32\qmgr.dll [585728]
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [328192]
O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur u.) -- C:\Windows\System32\iphlpsvc.dll [499712]
O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d’ouverture de session secon.) -- C:\Windows\System32\seclogon.dll [21504]
O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll [47104]
O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\System32\iscsiexe.dll [114688]
O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédia.) -- C:\Windows\System32\mmcss.dll [49664]
O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll [61440]
O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll [98304]
O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll [164864]
O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\System32\schedsvc.dll [750592]
O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\Windows\System32\KMSVC.DLL [71168]
O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à.) -- C:\Windows\System32\SessEnv.dll [113664]
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll [168960]
O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\System32\browser.dll [102912]
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\Windows\System32\themeservice.dll [37376]
O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\Windows\System32\bdesvc.dll [76800]

---\\ Liste des exceptions du parefeu (FirewallRules) (O87) (1) - 0s
O87 - FAEL: "{7DF11B23-866A-4A93-BC63-5F85B19B9591}" [In-None-P17-TRUE] .(.Crossbrowse - Crossbrowse.) -- C:\Program Files\Crossbrowse\Crossbrowse\Application\crossbrowse.exe =>PUP.Optional.CrossBrowse

---\\ Recherche de clés de registre Tracing (O100) (2) - 0s
HKLM\SOFTWARE\Microsoft\Tracing\SpaceSondPro_Service_RASAPI32 =>PUP.Optional.SpaceSoundPro
HKLM\SOFTWARE\Microsoft\Tracing\SpaceSondPro_Service_RASMANCS =>PUP.Optional.SpaceSoundPro

---\\ Scan Additionnel (O88) (65) - 0s
C:\Program Files\46364331-1438450096-3444-3644-4646FFFFFFFF\hnsj99D0.tmp =>PUP.Optional.CrossRider
C:\Program Files\46364331-1438450096-3444-3644-4646FFFFFFFF\jnsz83A0.tmp =>PUP.Optional.CrossRider
C:\Program Files\PhraseProfessor_1.10.0.21\Service\ppsvc.exe =>PUP.Optional.Gen
C:\Program Files\46364331-1438450096-3444-3644-4646FFFFFFFF\knso47A3.tmpfs =>PUP.Optional.CrossRider
C:\Program Files\SpaceSondPro_v53.1254\SpaceSondPro_Service.exe =>PUP.Optional.SpaceSoundPro
C:\ProgramData\2988696b-294c-4054-b34f-e97ca58a10e8\plugincontainer.exe =>PUP.Optional.CrossRider
C:\Program Files\Common Files\2988696b-294c-4054-b34f-e97ca58a10e8\Updater.exe =>PUP.Optional.CrossRider
C:\ProgramData\2988696b-294c-4054-b34f-e97ca58a10e8\plugins\3\Plugin.exe =>PUP.Optional.CrossRider
C:\ProgramData\2988696b-294c-4054-b34f-e97ca58a10e8\plugins\10\Plugin.exe =>PUP.Optional.CrossRider
C:\ProgramData\2988696b-294c-4054-b34f-e97ca58a10e8\plugins\7\Plugin.exe =>PUP.Optional.CrossRider
C:\ProgramData\2988696b-294c-4054-b34f-e97ca58a10e8\plugins\5\Plugin.exe =>PUP.Optional.CrossRider
C:\ProgramData\2988696b-294c-4054-b34f-e97ca58a10e8\plugins\2\Plugin.exe =>PUP.Optional.CrossRider
C:\ProgramData\2988696b-294c-4054-b34f-e97ca58a10e8\plugins\8\Plugin.exe =>PUP.Optional.CrossRider
C:\Users\Jonathan\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhkmcfanijhphphomamdkaejjadkhgn
C:\Users\Jonathan\AppData\Roaming\Mozilla\Firefox\Profiles\3v3nyr05.default-1438451279976\searchplugins\mystartsearch.xml =>PUP.Optional.StartSearch
C:\Users\Jonathan\AppData\Roaming\Mozilla\Firefox\Profiles\3v3nyr05.default-1438451279976\extensions\deskCutv2@gmail.com =>PUP.Optional.LightningNewTab
C:\Program Files\On Stage\Extensions\aff87634-f4a9-42bc-b2dc-be240584d095.dll =>PUP.Optional.OnStage
C:\Program Files\Crossbrowse\Crossbrowse\Application\crossbrowse.exe =>PUP.Optional.CrossBrowse
HKLM\SYSTEM\CurrentControlSet\Services\comyninu =>PUP.Optional.CrossRider
HKLM\SYSTEM\CurrentControlSet\Services\gopibeko =>PUP.Optional.CrossRider
HKLM\SYSTEM\CurrentControlSet\Services\hyverumu =>PUP.Optional.CrossRider
HKLM\SYSTEM\CurrentControlSet\Services\ppsvc_1.10.0.21 =>PUP.Optional.Gen
HKLM\SYSTEM\CurrentControlSet\Services\Service Mgr OnStage =>PUP.Optional.OnStage
C:\ProgramData\2988696b-294c-4054-b34f-e97ca58a10e8\plugincontainer.exe =>PUP.Optional.OnStage
HKLM\SYSTEM\CurrentControlSet\Services\timuzuzu =>PUP.Optional.CrossRider
HKLM\SYSTEM\CurrentControlSet\Services\Update Mgr OnStage =>PUP.Optional.OnStage
C:\Program Files\Common Files\2988696b-294c-4054-b34f-e97ca58a10e8\Updater.exe =>PUP.Optional.OnStage
HKLM\SYSTEM\CurrentControlSet\Services\wsasvc_1.10.0.19 =>PUP.Optional.WordSurfer
C:\Users\Jonathan\AppData\Local\bvxvbvef\bvxvbvef.exe =>Heuristic.Graftor
C:\Program Files\Crossbrowse\Crossbrowse\Application\utility.exe =>PUP.Optional.CrossBrowse
C:\Program Files\PhraseProfessor_1.10.0.21\Update\PhraseProfessorAutoUpdateClient.exe =>PUP.Optional.Gen
C:\Windows\Tasks\Crossbrowse.job =>PUP.Optional.CrossBrowse
C:\Windows\System32\Tasks\Crossbrowse =>PUP.Optional.CrossBrowse
HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Crossbrowse =>PUP.Optional.CrossBrowse
HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\mystartsearch uninstall =>PUP.Optional.StartSearch
HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\On Stage =>PUP.Optional.OnStage
HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PhraseProfessor_1.10.0.21 =>PUP.Optional.Gen
HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{E199C882-78F1-45F1-9D8A-3DD3AF97A7C0} =>PUP.Optional.Boxore
HKLM\SOFTWARE\Crossbrowse =>PUP.Optional.CrossBrowse
HKLM\SOFTWARE\FFPluginHp =>PUP.Optional.SweetSearch
HKLM\SOFTWARE\mystartsearchSoftware =>PUP.Optional.StartSearch
HKLM\SOFTWARE\Object Browser-nv-ie =>PUP.Optional.ObjectBrowser
HKLM\SOFTWARE\PhraseProfessor_1.10.0.21 =>PUP.Optional.Gen
HKCU\SOFTWARE\Crossbrowse =>PUP.Optional.CrossBrowse
HKCU\SOFTWARE\CrossBrowser =>PUP.Optional.CrossBrowser
HKCU\SOFTWARE\Object Browser-nv-ie =>PUP.Optional.ObjectBrowser
HKCU\SOFTWARE\tstamptoken =>PUP.Optional.MaxComputerCleaner
C:\Program Files\3ec599db-b8cc-4081-a24c-d17af2e82169 =>PUP.Optional.CrossRider
C:\Program Files\46364331-1438450096-3444-3644-4646FFFFFFFF =>PUP.Optional.CrossRider
C:\Program Files\46364331-1438450313-3444-3644-4646FFFFFFFF =>PUP.Optional.CrossRider
C:\Program Files\7820b0eb-3626-4620-9e3a-dab3daac0de7 =>PUP.Optional.CrossRider
C:\Program Files\Crossbrowse =>PUP.Optional.CrossBrowse
C:\Program Files\ee63cdc6-5f91-44d3-a3dd-8241c1189391 =>PUP.Optional.CrossRider
C:\Program Files\On Stage =>PUP.Optional.OnStage
C:\Program Files\PhraseProfessor_1.10.0.21 =>PUP.Optional.Gen
C:\Program Files\SpaceSondPro_v53.1254 =>PUP.Optional.SpaceSoundPro
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Crossbrowse =>PUP.Optional.CrossBrowse
C:\Users\Jonathan\AppData\Roaming\mystartsearch =>PUP.Optional.StartSearch
C:\Users\Jonathan\AppData\Local\CrashRpt =>.Legitimate.CrashReports
C:\Users\Jonathan\AppData\Local\Installer =>PUP.Optional.InstallPedia
C:\Windows\System32\drivers\ppfd_vt_1_10_0_21.sys =>PUP.Optional.Gen
C:\Windows\System32\drivers\ppfd_vw_1_10_0_21.sys =>PUP.Optional.Gen
C:\Users\Jonathan\AppData\Local\Installer\Install_31494\DCYTDownloader.exe =>PUP.Optional.YTDownloader
HKLM\SOFTWARE\Microsoft\Tracing\SpaceSondPro_Service_RASAPI32 =>PUP.Optional.SpaceSoundPro
HKLM\SOFTWARE\Microsoft\Tracing\SpaceSondPro_Service_RASMANCS =>PUP.Optional.SpaceSoundPro

---\\ Récapitulatif des éléments trouvées sur votre station (22) - 0s
http://www.nicolascoolman.fr/pup-crossrider/ =>PUP.Optional.CrossRider
http://www.nicolascoolman.fr/blog =>PUP.Optional.Gen
http://www.nicolascoolman.fr/blog =>PUP.Optional.SpaceSoundPro
http://www.nicolascoolman.fr/pup-startsearch/ =>PUP.Optional.StartSearch
http://www.nicolascoolman.fr/blog =>PUP.Optional.LightningNewTab
http://www.nicolascoolman.fr/blog =>PUP.Optional.OnStage
http://www.nicolascoolman.fr/blog =>PUP.Optional.CrossBrowse
http://www.nicolascoolman.fr/blog =>PUP.Optional.WordSurfer
http://www.nicolascoolman.fr/blog =>Heuristic.Graftor
http://www.nicolascoolman.fr/adware-boxore/ =>PUP.Optional.Boxore
http://www.nicolascoolman.fr/blog =>PUP.Optional.SweetSearch
http://www.nicolascoolman.fr/pup-objectbrowser/ =>PUP.Optional.ObjectBrowser
http://www.nicolascoolman.fr/blog =>PUP.Optional.CrossBrowser
http://www.nicolascoolman.fr/blog =>PUP.Optional.MaxComputerCleaner
http://www.nicolascoolman.fr/blog =>.Legitimate.CrashReports
http://www.nicolascoolman.fr/adware-installpedia/ =>PUP.Optional.InstallPedia
http://www.nicolascoolman.fr/pup-ytdownloader/ =>PUP.Optional.YTDownloader
http://www.nicolascoolman.fr/blog =>PUP.Optional.SearchEngine
http://www.nicolascoolman.fr/blog =>PUP.Optional.Monetization
http://www.nicolascoolman.fr/blog =>PUP.Optional.DeskCut
http://www.nicolascoolman.fr/pup-quickstart/ =>PUP.Optional.QuickStart
http://www.nicolascoolman.fr/blog =>PUP.Optional.PriceFountain

~ End of the scan, 20482 items in 556 seconds (959)(0)()

Publicité


Signaler le contenu de ce document

Publicité