cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

~ ZHPDiag v2015.8.9.114 Par Nicolas Coolman (2015/08/8)
~ Démarré par NATHALIE (Administrator) (2015/08/10 17:35:25)
~ Site: http://www.nicolascoolman.fr
~ Facebook: https://www.facebook.com/nicolascoolman1
~ Etat de la version: Version OK
~ Mode: Scanner
~ Rapport: C:\Documents and Settings\NATHALIE\Bureau\ZHPDiag.txt
~ Rapport: C:\Documents and Settings\NATHALIE\Application Data\ZHP\ZHPDiag.txt
~ UAC: Deactivate
~ Démarrage du système: Normal (Normal boot)
WIN_XP, 32-bit Service Pack 3 (Build 2600)

---\\ Navigateurs Internet (1) - 0s
MSIE: Internet Explorer v8.0.6001.18702

---\\ Logiciels de protection (1) - 9s
Malwarebytes Anti-Malware version 2.1.8.1057

---\\ Logiciels d'optimisation (1) - 12s
CCleaner v3.02

---\\ Surveillance de Logiciels (2) - 12s
Adobe Flash Player 18 NPAPI
Adobe Reader XI

---\\ Informations sur le système (6) - 1s
~ Operating System: x86 Family 6 Model 28 Stepping 2, GenuineIntel
~ Operating System: 32-bit
~ Boot mode: Normal (Normal boot)
Total RAM: 2087.116 MB (23% free)
~ System Restore: Activé (Enable)
~ System drive C: has 93 GB free of 142 GB

---\\ Mode de connexion au système (3) - 0s
~ Computer Name: ACER-03915B3F31
~ User Name: NATHALIE
~ Logged in as Administrator

---\\ Enumération des unités disques (1) - 0s
~ Drive C: has 93 GB free of 142 GB (System)

---\\ Etat du Centre de Sécurité Windows (9) - 0s
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Intl: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] XMLLookup: Modified
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: OK
[HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK

---\\ Recherche particulière de fichiers génériques (22) - 1s
[MD5.F2317622D29F9FF0F88AEECD5F60F0DD] - (.Microsoft Corporation - Explorateur Windows.) () -- C:\WINDOWS\Explorer.exe [1037824]
[MD5.93AD0B78C7357A05F50E594EC7C22300] - (.Microsoft Corporation - Exécuter une DLL en tant qu'application.) () -- C:\WINDOWS\System32\rundll32.exe [33792]
[MD5.E1948B1F45A176FB4A0251446A5AE86D] - (.Microsoft Corporation - Internet Extensions for Win32.) () -- C:\WINDOWS\System32\wininet.dll [920064]
[MD5.DD73D6B9F6B4CB630CF35B438B540174] - (.Microsoft Corporation - Application d'ouverture de session Windows.) () -- C:\WINDOWS\System32\Winlogon.exe [512000]
[MD5.1E44BC1E83D8FD2305F8D452DB109CF9] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) () -- C:\WINDOWS\System32\drivers\AFD.sys [138496]
[MD5.9F3A2F5AA6875C72BF062C712CFA2674] - (.Microsoft Corporation - IDE/ATAPI Port Driver.) () -- C:\WINDOWS\System32\drivers\atapi.sys [96512]
[MD5.C885B02847F5D2FD45A24E219ED93B32] - (.Microsoft Corporation - CD-ROM File System Driver.) () -- C:\WINDOWS\System32\drivers\Cdfs.sys [63744]
[MD5.4B0A100EAF5C49EF3CCA8C641431EACC] - (.Microsoft Corporation - SCSI CD-ROM Driver.) () -- C:\WINDOWS\System32\drivers\Cdrom.sys [62976]
[MD5.31F923EB2170FC172C81ABDA0045D18C] - (.Microsoft Corporation - Pilote de cryptographie FIPS.) () -- C:\WINDOWS\System32\drivers\Fips.sys [44672]
[MD5.573C7D0A32852B48F3058CFD8026F511] - (.Windows (R) Server 2003 DDK provider - High Definition Audio Bus Driver v1.0a.) () -- C:\WINDOWS\System32\drivers\HDAudBus.sys [144384]
[MD5.A09BDC4ED10E3B2E0EC27BB94AF32516] - (.Microsoft Corporation - Pilote de port i8042.) () -- C:\WINDOWS\System32\drivers\i8042prt.sys [54144]
[MD5.083A052659F5310DD8B6A6CB05EDCF8E] - (.Microsoft Corporation - IMAPI Kernel Driver.) () -- C:\WINDOWS\System32\drivers\Imapi.sys [42112]
[MD5.CC748EA12C6EFFDE940EE98098BF96BB] - (.Microsoft Corporation - IP Network Address Translator.) () -- C:\WINDOWS\System32\drivers\IpNat.sys [152832]
[MD5.23C74D75E36E7158768DD63D92789A91] - (.Microsoft Corporation - IPSec Driver.) () -- C:\WINDOWS\System32\drivers\IPSec.sys [75264]
[MD5.7D304A5EB4344EBEEAB53A2FE3FFB9F0] - (.Microsoft Corporation - Windows NT SMB Minirdr.) () -- C:\WINDOWS\System32\drivers\MRxSmb.sys [456320]
[MD5.74B2B2F5BEA5E9A3DC021D685551BD3D] - (.Microsoft Corporation - MBT Transport driver.) () -- C:\WINDOWS\System32\drivers\netBT.sys [162816]
[MD5.78A08DD6A8D65E697C18E1DB01C5CDCA] - (.Microsoft Corporation - NT File System Driver.) () -- C:\WINDOWS\System32\drivers\ntfs.sys [574976]
[MD5.8FD0BDBEA875D06CCF6C945CA9ABAF75] - (.Microsoft Corporation - Pilote de port parallèle.) () -- C:\WINDOWS\System32\drivers\Parport.sys [80384]
[MD5.11B4A627BC9614B885C4969BFA5FF8A6] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) () -- C:\WINDOWS\System32\drivers\Rasl2tp.sys [51328]
[MD5.15CABD0F7C00C47C70124907916AF3F1] - (.Microsoft Corporation - Microsoft RDP Device redirector.) () -- C:\WINDOWS\System32\drivers\rdpdr.sys [196224]
[MD5.D8EB2A7904DB6C916EB5361878DDCBAE] - (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) () -- C:\WINDOWS\System32\drivers\redbook.sys [58752]
[MD5.46DE1126684369BACE4849E4FC8C43CA] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) () -- C:\WINDOWS\System32\drivers\volsnap.sys [53376]

---\\ Processus lancés (1) - 1s
[MD5.C228DDE8F345D1B8993E0A8D8697A73C] - (.Acer Incoporated - Acer Video Quality Enhancement.) -- C:\Program Files\Acer\Acer VCM\VC.exe [1675264] [PID.2880]

---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2) (7) - 1s
G2 - GCE: Preference [User Data\Default] [aohghmighlieiainnegkcijnfilokake] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [apdfllckaahabafndbhieahigkjlhalf] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [blpcfgokakmgnkcojhhkbfbldkacnbeo] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [coobgpohoikkiipiblmjeljniedjpjpf] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [lccekmodgklaepjeofjdjpbminllajkg] Chrome Hotword Shared Module
G2 - GCE: Preference [User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [pjkljhegncpnkpknbcohdijeoejaedia] Google Chrome manifest =>.Google Inc.

---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3) (20) - 8s
M0 - MFSP: prefs.js [NATHALIE - v6vz1z61.default-1439064453781] http://www.liberation.fr/
M1 - SPR:Search Page Redirection - C:\Program Files\Mozilla Firefox\extensions\linkfilter@kaspersky.ru
P2 - EXT: (.mozilla.org - Default Plug-in.) -- C:\Program Files\Mozilla Firefox\Plugins\npnul32.dll
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\Plugins\nppdf32.FRA
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\Plugins\QuickTimePlugin.class
P2 - EXT FILE: (...) -- C:\Documents and Settings\NATHALIE\Application Data\Mozilla\Firefox\Profiles\v6vz1z61.default-1439064453781\extensions\jid1-f3mYMbCpz2AZYl@jetpack.xpi
P2 - EXT FILE: (...) -- C:\Documents and Settings\NATHALIE\Application Data\Mozilla\Firefox\Profiles\v6vz1z61.default-1439064453781\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
P2 - EXT FILE: (...) -- C:\Documents and Settings\NATHALIE\Application Data\Mozilla\Firefox\Profiles\v6vz1z61.default-1439064453781\searchplugins\google-default.xml
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\browser\searchplugins\amazon-france.xml
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\browser\searchplugins\bing.xml
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\browser\searchplugins\cnrtl-tlfi-fr.xml
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\browser\searchplugins\ddg.xml
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\browser\searchplugins\eBay-france.xml
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\browser\searchplugins\google.xml
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\browser\searchplugins\wikipedia-fr.xml
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\browser\searchplugins\yahoo-france.xml
P2 - EXT: (.Mozilla - Default.) -- C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Adobe Systems Incorporated.) -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32_18_0_0_209.dll
P2 - FPN: [HKLM] [@Apple.com/iTunes,version=1.0] - (.Apple Inc..) -- C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
P2 - FPN: [HKLM] [@Microsoft.com/DownloadManager,version=1.1] - (.Genre.) -- C:\WINDOWS\

---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4) (15) - 1s
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://wikipedia.fr/
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://google.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://google.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://google.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://google.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://google.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://google.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://google.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm
R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphean =>.Microsoft Internet Explorer

---\\ Internet Explorer, Proxy Management (R5) (4) - 0s
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll

---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs (3) - 0s
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe (.Microsoft Corporation.)
F2 - REG:system.ini: Shell=C:\WINDOWS\explorer.exe (.Microsoft Corporation.)
F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"

---\\ Hosts file redirection (O1) (1) - 0s
~ Le fichier hôte est sain (The hosts file is clean) (20)

---\\ Browser Helper Object de navigateur (BHO) (O2) (2) - 1s
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} (Orphean)
O2 - BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} (Orphean)

---\\ Internet Explorer Toolbars (O3) (1) - 0s
O3 - Toolbar: 0xB1C218236549D4119B18009027A5CD4F - [HKCU]{2318C2B1-4965-11D4-9B18-009027A5CD4F} . (...) -- (.not file.)

---\\ Applications lancées au démarrage du sytème (O4) (25) - 4s
O4 - HKLM\..\Run: [AzMixerSel] . (.Realtek Semiconductor Corp. - Azalia Mixer Selector.) -- C:\Program Files\Realtek\Audio\Drivers\AzMixerSel.exe
O4 - HKLM\..\Run: [NotificationCenterLauncher] . (.Acer - X86 Version.) -- C:\Program Files\Acer\Acer eRecovery Management\NotificationLauncher.exe
O4 - HKLM\..\Run: [AppleSyncNotifier] . (.Apple Inc. - AppleSyncNotifier.) -- C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe
O4 - HKLM\..\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files\QuickTime\QTTask.exe
O4 - HKLM\..\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [Windows Defender] . (.Microsoft Corporation - Windows Defender User Interface.) -- C:\Program Files\Windows Defender\MSASCui.exe
O4 - HKCU\..\Run: [ctfmon.exe] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe
O4 - HKCU\..\Run: [Facebook Update] . (.Facebook Inc. - Programme d'installation de Facebook.) -- C:\Documents and Settings\NATHALIE\Local Settings\Application Data\Facebook\Update\FacebookUpdate.exe
O4 - HKCU\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Documents and Settings\NATHALIE\Local Settings\Application Data\Google\Update\GoogleUpdate.exe
O4 - HKCU\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe
O4 - HKCU\..\Run: [Dropbox Update] . (.Dropbox, Inc. - Dropbox Update.) -- C:\Documents and Settings\NATHALIE\Local Settings\Application Data\Dropbox\Update\DropboxUpdate.exe
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\.DEFAULT\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-21-670792205-72185382-2018322775-1005\..\Run: [ctfmon.exe] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-21-670792205-72185382-2018322775-1005\..\Run: [msnmsgr] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe
O4 - HKUS\S-1-5-21-670792205-72185382-2018322775-1005\..\Run: [Facebook Update] . (.Facebook Inc. - Programme d'installation de Facebook.) -- C:\Documents and Settings\NATHALIE\Local Settings\Application Data\Facebook\Update\FacebookUpdate.exe
O4 - HKUS\S-1-5-21-670792205-72185382-2018322775-1005\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Documents and Settings\NATHALIE\Local Settings\Application Data\Google\Update\GoogleUpdate.exe
O4 - HKUS\S-1-5-21-670792205-72185382-2018322775-1005\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe
O4 - HKUS\S-1-5-21-670792205-72185382-2018322775-1005\..\Run: [Dropbox Update] . (.Dropbox, Inc. - Dropbox Update.) -- C:\Documents and Settings\NATHALIE\Local Settings\Application Data\Dropbox\Update\DropboxUpdate.exe

---\\ Modification Domaine/Adresses DNS (O17) (6) - 0s
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 8.8.8.8
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 8.8.8.8
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: NameServer = 8.8.8.8
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1

---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20) (1) - 0s
O20 - AppInit_DLLs: . (.Google - Google Desktop.) - C:\Program Files\Google\Google Desktop Search\GoogleDesktopNetwork3.dll

---\\ Liste des services NT non Microsoft et non désactivés (O23) (4) - 2s
O23 - Service: Apple Mobile Device (Apple Mobile Device) . (.Apple Inc. - MobileDeviceService.) - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: (MBAMService) . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: Raw Socket Service (RS_Service) . (.Acer Incorporated - Raw Socket Service.) - C:\Program Files\Acer\Acer VCM\RS_Service.exe
O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files\Skype\Updater\Updater.exe

---\\ Tâches planifiées en automatique (O39) (12) - 2s
O39 - APT: Orphean - (...) -- C:\WINDOWS\Tasks\Adobe Flash Player Updater.job [1002]
O39 - APT: Orphean - (...) -- C:\WINDOWS\Tasks\AppleSoftwareUpdate.job [284]
O39 - APT: Orphean - (...) -- C:\WINDOWS\Tasks\CaffeineFix.job [432]
O39 - APT: Orphean - (...) -- C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-670792205-72185382-2018322775-1005Core.job [1226]
O39 - APT: Orphean - (...) -- C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-670792205-72185382-2018322775-1005UA.job [1278]
O39 - APT: Orphean - (...) -- C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-670792205-72185382-2018322775-1005Core.job [1156]
O39 - APT: Orphean - (...) -- C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-670792205-72185382-2018322775-1005UA.job [1178]
O39 - APT: Orphean - (...) -- C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-670792205-72185382-2018322775-1005Core.job [1108]
O39 - APT: Orphean - (...) -- C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-670792205-72185382-2018322775-1005UA.job [1160]
O39 - APT: Orphean - (...) -- C:\WINDOWS\Tasks\MP Scheduled Scan.job [330]
O39 - APT: Orphean - (...) -- C:\WINDOWS\Tasks\Notification de fin de service de Microsoft Windows XP - à la connexion.job [228]
O39 - APT: Orphean - (...) -- C:\WINDOWS\Tasks\Notification de fin de service de Microsoft Windows XP -mensuellement.job [222]

---\\ Logiciels installés (O42) (62) - 43s
O42 - Logiciel: Acer ScreenSaver - (.Acer.) [HKLM] -- Acer Screensaver
O42 - Logiciel: Adobe Flash Player 18 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX
O42 - Logiciel: Adobe Flash Player 18 NPAPI - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player NPAPI
O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner
O42 - Logiciel: Google Desktop - (.Google.) [HKLM] -- Google Desktop
O42 - Logiciel: Windows Internet Explorer 8 - (.Microsoft Corporation.) [HKLM] -- ie8
O42 - Logiciel: eSobi v2 - (.esobi Inc..) [HKLM] -- InstallShield_{15D967B5-A4BE-42AE-9E84-64CD062B25AA}
O42 - Logiciel: CyberLink PowerDVD 8 - (.CyberLink Corp..) [HKLM] -- InstallShield_{2BF2E31F-B8BB-40A7-B650-98D28E0F7D47}
O42 - Logiciel: Windows Genuine Advantage Validation Tool (KB892130) - (.Microsoft Corporation.) [HKLM] -- KB892130
O42 - Logiciel: Windows Desktop Search 3.01 - (.Microsoft Corporation.) [HKLM] -- KB917013
O42 - Logiciel: Windows Feature Pack for Storage (32-bit) - IMAPI update for Blu-Ray - (.Microsoft Corporation.) [HKLM] -- KB952011
O42 - Logiciel: Hotfix for Windows XP (KB954550-v5) - (.Microsoft Corporation.) [HKLM] -- KB954550-v5
O42 - Logiciel: Hotfix for Windows XP (KB976002-v5) - (.Microsoft Corporation.) [HKLM] -- KB976002-v5
O42 - Logiciel: Intel(R) Graphics Media Accelerator 500 - (...) [HKLM] -- LPCO
O42 - Logiciel: Malwarebytes Anti-Malware version 2.1.8.1057 - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes Anti-Malware_is1
O42 - Logiciel: Mozilla Firefox 39.0.3 (x86 fr) - (.Mozilla.) [HKLM] -- Mozilla Firefox 39.0.3 (x86 fr)
O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM] -- MozillaMaintenanceService
O42 - Logiciel: Picasa 3 - (.Google, Inc..) [HKLM] -- Picasa 3
O42 - Logiciel: VLC media player 2.0.1 - (.VideoLAN.) [HKLM] -- VLC media player
O42 - Logiciel: Microsoft Kernel-Mode Driver Framework Feature Pack 1.7 - (.Microsoft Corporation.) [HKLM] -- Wdf01007
O42 - Logiciel: Windows Media Format Runtime - (...) [HKLM] -- Windows Media Format Runtime
O42 - Logiciel: Lecteur Windows Media 10 - (...) [HKLM] -- Windows Media Player
O42 - Logiciel: WinRAR archiver - (...) [HKLM] -- WinRAR archiver
O42 - Logiciel: Acer VCM - (.Acer Incorporated.) [HKLM] -- {047F790A-7A2A-4B6A-AD02-38092BA63DAC}
O42 - Logiciel: JavaFX 2.1.0 - (.Oracle Corporation.) [HKLM] -- {1111706F-666A-4037-7777-210328764D10}
O42 - Logiciel: Facebook Video Calling 3.1.0.521 - (.Skype Limited.) [HKLM] -- {2091F234-EB58-4B80-8C96-8EB78C808CF7}
O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
O42 - Logiciel: Skype™ 7.6 - (.Skype Technologies S.A..) [HKLM] -- {24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}
O42 - Logiciel: Java 8 Update 40 - (.Oracle Corporation.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83218040F0}
O42 - Logiciel: CyberLink PowerDVD 8 - (.CyberLink Corp..) [HKLM] -- {2BF2E31F-B8BB-40A7-B650-98D28E0F7D47}
O42 - Logiciel: QuickTime 7 - (.Apple Inc..) [HKLM] -- {3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}
O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM] -- {4DE3E3D9-AE81-45DE-9195-3015F7B1DBF3}
O42 - Logiciel: Microsoft Download Manager - (.Microsoft Corporation.) [HKLM] -- {654977DB-0001-0002-0001-EABD228DDE8B}
O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM] -- {789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}
O42 - Logiciel: Acer eRecovery Management - (.Acer Incorporated.) [HKLM] -- {7F811A54-5A09-4579-90E1-C93498E230D9}
O42 - Logiciel: Zuma Deluxe - (.Oberon Media.) [HKLM] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-110111700}
O42 - Logiciel: Tradewinds 2 - (.Oberon Media.) [HKLM] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-11037623}
O42 - Logiciel: Rainbow Web - (.Oberon Media.) [HKLM] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111125700}
O42 - Logiciel: Tri-Peaks Solitaire To Go - (.Oberon Media.) [HKLM] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111205743}
O42 - Logiciel: Peggle - (.Oberon Media.) [HKLM] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-11231247}
O42 - Logiciel: Star Defender 4 - (.Oberon Media.) [HKLM] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-114803710}
O42 - Logiciel: Cooking Dash - (.Oberon Media.) [HKLM] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-115443300}
O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
O42 - Logiciel: Choice Guard - (.Microsoft Corporation.) [HKLM] -- {8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}
O42 - Logiciel: Media Player Z - (.SurfProtect.) [HKLM] -- {91413148-5A27-4C82-9F77-B55DD63FFAE9} =>PUP.Optional.CrossRider
O42 - Logiciel: Windows Defender - (.Microsoft Corporation.) [HKLM] -- {A06275F4-324B-4E85-95E6-87B2CD729401}
O42 - Logiciel: Segoe UI - (.Microsoft Corp.) [HKLM] -- {A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}
O42 - Logiciel: Acer Crystal Eye webcam 2.2.0.2 - (.SuYin.) [HKLM] -- {A77255C4-AFCB-44A3-BF0F-2091A71FFD9E}
O42 - Logiciel: globalupdate Helper - (.globalupdate Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} =>PUP.Optional.GlobalUpdate
O42 - Logiciel: Adobe Reader X (10.1.4) - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-AA1000000001}
O42 - Logiciel: Adobe Reader XI (11.0.08) - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-AB0000000001}
O42 - Logiciel: Apple Application Support (32 bits) - (.Apple Inc..) [HKLM] -- {AFA1153A-F547-409B-B837-3A0D6C5A3FEC}
O42 - Logiciel: REALTEK GbE & FE Ethernet PCI-E NIC Driver - (.Realtek.) [HKLM] -- {C9BED750-1211-4480-B1A5-718A3BE15525}
O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM] -- {CE1F04C7-79BC-4219-BE6A-BA490224D4B5}
O42 - Logiciel: Acer Product Registration - (.Acer Incorporated.) [HKLM] -- {DA20E1A8-07CB-4EE7-9B72-A7E28C953F0E}
O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM] -- {E1DB0812-2D60-43DB-AE09-6C7027D93B28}
O42 - Logiciel: Windows Desktop Search 3.01 - (.Microsoft Corporation.) [HKLM] -- {E72019B8-1287-4093-BE9B-1CFA7BA1A8D2}
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}
O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
O42 - Logiciel: Dropbox - (.Dropbox, Inc..) [HKCU] -- Dropbox
O42 - Logiciel: Google Photos Backup - (.Google, Inc..) [HKCU] -- Google Photos Backup

---\\ HKCU & HKLM Software Keys (116) - 43s
HKLM\SOFTWARE\781
HKLM\SOFTWARE\ACD Systems
HKLM\SOFTWARE\Acer
HKLM\SOFTWARE\Acer Incorporated
HKLM\SOFTWARE\Adobe
HKLM\SOFTWARE\AdwCleaner
HKLM\SOFTWARE\Alien Skin
HKLM\SOFTWARE\America Online
HKLM\SOFTWARE\Apple Computer, Inc.
HKLM\SOFTWARE\Apple Inc.
HKLM\SOFTWARE\BrowserChoice
HKLM\SOFTWARE\C07ft5Y
HKLM\SOFTWARE\Canon
HKLM\SOFTWARE\Creative Tech
HKLM\SOFTWARE\CyberLink
HKLM\SOFTWARE\dck
HKLM\SOFTWARE\Digital River
HKLM\SOFTWARE\DivXNetworks
HKLM\SOFTWARE\Dropbox
HKLM\SOFTWARE\DRWNewFree
HKLM\SOFTWARE\GameHouse
HKLM\SOFTWARE\GEAR Software
HKLM\SOFTWARE\Gemplus
HKLM\SOFTWARE\Google
HKLM\SOFTWARE\IM Providers
HKLM\SOFTWARE\InstalledOptions
HKLM\SOFTWARE\Intel
HKLM\SOFTWARE\InterVideo
HKLM\SOFTWARE\JavaSoft
HKLM\SOFTWARE\JreMetrics
HKLM\SOFTWARE\KasperskyLab
HKLM\SOFTWARE\Lake
HKLM\SOFTWARE\Licenses
HKLM\SOFTWARE\Macromedia
HKLM\SOFTWARE\Malwarebytes' Anti-Malware
HKLM\SOFTWARE\MaxPower
HKLM\SOFTWARE\McAfee.com
HKLM\SOFTWARE\Mozilla
HKLM\SOFTWARE\mozilla.org
HKLM\SOFTWARE\MozillaPlugins
HKLM\SOFTWARE\Oberon Media
HKLM\SOFTWARE\ODBC
HKLM\SOFTWARE\OEM
HKLM\SOFTWARE\OemSetup
HKLM\SOFTWARE\Oracle
HKLM\SOFTWARE\Piriform
HKLM\SOFTWARE\Program Groups
HKLM\SOFTWARE\Realtek
HKLM\SOFTWARE\Reason
HKLM\SOFTWARE\Reflexive Entertainment
HKLM\SOFTWARE\RegisteredApplications
HKLM\SOFTWARE\RTLSetup
HKLM\SOFTWARE\Schlumberger
HKLM\SOFTWARE\Secure
HKLM\SOFTWARE\Skunkstudios
HKLM\SOFTWARE\Skype
HKLM\SOFTWARE\SuYin
HKLM\SOFTWARE\Synaptics
HKLM\SOFTWARE\VideoLAN
HKLM\SOFTWARE\Windows
HKLM\SOFTWARE\Windows 3.1 Migration Status
HKLM\SOFTWARE\WinRAR
HKCU\SOFTWARE\70121InstEnd
HKCU\SOFTWARE\ACD Systems
HKCU\SOFTWARE\Acer
HKCU\SOFTWARE\AcerUtil
HKCU\SOFTWARE\Adobe
HKCU\SOFTWARE\AppDataLow
HKCU\SOFTWARE\apple
HKCU\SOFTWARE\Apple Computer, Inc.
HKCU\SOFTWARE\Apple Inc.
HKCU\SOFTWARE\Canon
HKCU\SOFTWARE\Chromium
HKCU\SOFTWARE\Cyberlink
HKCU\SOFTWARE\Dropbox
HKCU\SOFTWARE\DropboxUpdate
HKCU\SOFTWARE\DSP-worx
HKCU\SOFTWARE\eSobi
HKCU\SOFTWARE\Facebook
HKCU\SOFTWARE\GameHouse
HKCU\SOFTWARE\Google
HKCU\SOFTWARE\IM Providers
HKCU\SOFTWARE\InstallPath
HKCU\SOFTWARE\Intel
HKCU\SOFTWARE\JavaSoft
HKCU\SOFTWARE\KMPlayer
HKCU\SOFTWARE\Lake
HKCU\SOFTWARE\Licenses
HKCU\SOFTWARE\Local AppWizard-Generated Applications
HKCU\SOFTWARE\Macromedia
HKCU\SOFTWARE\Mozilla
HKCU\SOFTWARE\MozillaPlugins
HKCU\SOFTWARE\Netscape
HKCU\SOFTWARE\Northcode Inc
HKCU\SOFTWARE\OB
HKCU\SOFTWARE\Oberon Media
HKCU\SOFTWARE\ODBC
HKCU\SOFTWARE\OperaOB
HKCU\SOFTWARE\Piriform
HKCU\SOFTWARE\Pyrogon
HKCU\SOFTWARE\Realtek
HKCU\SOFTWARE\Skype
HKCU\SOFTWARE\Software
HKCU\SOFTWARE\Stellar
HKCU\SOFTWARE\Synaptics
HKCU\SOFTWARE\Sysinternals
HKCU\SOFTWARE\TeleCharger
HKCU\SOFTWARE\Trolltech
HKCU\SOFTWARE\URSoft
HKCU\SOFTWARE\Viber
HKCU\SOFTWARE\WebApp
HKCU\SOFTWARE\Windows Live Writer
HKCU\SOFTWARE\WinRAR
HKCU\SOFTWARE\WinRAR SFX
HKCU\SOFTWARE\ZebHelpProcess Helper
HKCU\SOFTWARE\AppDataLow\Software

---\\ Contenu des dossiers Programmes (O43) (172) - 29s
O43 - CFD: 2015/08/08 20:05:20 - [] D -- C:\Program Files\Acer
O43 - CFD: 2015/08/09 19:58:25 - [] D -- C:\Program Files\Acer GameZone
O43 - CFD: 2009/08/04 16:40:15 - [] D -- C:\Program Files\ACER PATCH LTV2016
O43 - CFD: 2012/12/15 06:59:37 - [] D -- C:\Program Files\Adobe
O43 - CFD: 2012/05/18 06:03:54 - [] D -- C:\Program Files\Apple Software Update
O43 - CFD: 2011/01/23 03:08:36 - [] D -- C:\Program Files\CCleaner
O43 - CFD: 2011/01/23 02:06:13 - [] D -- C:\Program Files\CyberLink
O43 - CFD: 2013/05/31 13:24:06 - [] D -- C:\Program Files\Dropbox
O43 - CFD: 2009/08/04 16:30:49 - [] D -- C:\Program Files\eSobi
O43 - CFD: 2015/03/30 10:22:19 - [] D -- C:\Program Files\Fichiers communs
O43 - CFD: 2015/08/10 14:52:29 - [] D -- C:\Program Files\Google
O43 - CFD: 2015/08/10 14:38:06 - [] D -- C:\Program Files\GUM35.tmp
O43 - CFD: 2015/08/08 21:59:49 - [] HD -- C:\Program Files\InstallShield Installation Information
O43 - CFD: 2009/08/04 15:08:12 - [] D -- C:\Program Files\Intel
O43 - CFD: 2015/08/09 21:51:50 - [] D -- C:\Program Files\Internet Explorer
O43 - CFD: 2015/06/16 09:12:09 - [] D -- C:\Program Files\iPod
O43 - CFD: 2015/06/16 09:13:30 - [] D -- C:\Program Files\iTunes
O43 - CFD: 2015/03/30 10:19:15 - [] D -- C:\Program Files\Java
O43 - CFD: 2015/08/10 16:07:12 - [] D -- C:\Program Files\Malwarebytes Anti-Malware
O43 - CFD: 2009/08/04 15:42:24 - [] D -- C:\Program Files\Microsoft
O43 - CFD: 2014/06/20 04:26:01 - [] D -- C:\Program Files\Microsoft Download Manager
O43 - CFD: 2009/08/04 12:44:21 - [] D -- C:\Program Files\microsoft frontpage
O43 - CFD: 2014/10/21 02:35:56 - [] D -- C:\Program Files\Microsoft Office
O43 - CFD: 2014/10/18 10:44:56 - [] D -- C:\Program Files\Microsoft Silverlight
O43 - CFD: 2009/08/04 15:43:17 - [] D -- C:\Program Files\Microsoft SQL Server Compact Edition
O43 - CFD: 2011/01/23 04:13:11 - [] D -- C:\Program Files\Microsoft Visual Studio
O43 - CFD: 2014/10/20 03:44:52 - [] D -- C:\Program Files\Microsoft Works
O43 - CFD: 2015/08/08 18:03:13 - [] D -- C:\Program Files\Microsoft.NET
O43 - CFD: 2012/05/04 11:34:30 - [] D -- C:\Program Files\Movie Maker
O43 - CFD: 2015/08/07 13:57:49 - [] D -- C:\Program Files\Mozilla Firefox
O43 - CFD: 2015/08/08 19:24:12 - [] D -- C:\Program Files\Mozilla Maintenance Service
O43 - CFD: 2012/05/04 13:19:14 - [] D -- C:\Program Files\MSBuild
O43 - CFD: 2009/08/04 12:39:41 - [] D -- C:\Program Files\MSN Gaming Zone
O43 - CFD: 2015/08/09 21:52:00 - [] D -- C:\Program Files\NetMeeting
O43 - CFD: 2012/05/04 11:35:26 - [] D -- C:\Program Files\Outlook Express
O43 - CFD: 2015/08/09 19:25:38 - [] D -- C:\Program Files\QuickTime
O43 - CFD: 2015/08/08 21:59:49 - [] D -- C:\Program Files\Realtek
O43 - CFD: 2015/08/10 14:08:36 - [] D -- C:\Program Files\Reason
O43 - CFD: 2012/05/04 13:18:59 - [] D -- C:\Program Files\Reference Assemblies
O43 - CFD: 2009/08/04 12:41:58 - [] D -- C:\Program Files\Services en ligne
O43 - CFD: 2015/07/19 09:41:32 - [] RD -- C:\Program Files\Skype
O43 - CFD: 2009/08/04 12:48:11 - [0] HD -- C:\Program Files\Uninstall Information
O43 - CFD: 2011/01/23 03:12:13 - [] D -- C:\Program Files\VideoLAN
O43 - CFD: 2015/08/10 17:07:58 - [] D -- C:\Program Files\Windows Defender
O43 - CFD: 2014/06/20 04:29:11 - [] D -- C:\Program Files\Windows Desktop Search
O43 - CFD: 2009/08/04 15:44:10 - [] D -- C:\Program Files\Windows Live
O43 - CFD: 2009/08/04 15:42:05 - [] D -- C:\Program Files\Windows Live SkyDrive
O43 - CFD: 2009/08/04 15:22:55 - [] D -- C:\Program Files\Windows Media Player
O43 - CFD: 2009/08/04 12:39:38 - [] D -- C:\Program Files\Windows NT
O43 - CFD: 2009/08/04 12:42:05 - [0] HD -- C:\Program Files\WindowsUpdate
O43 - CFD: 2015/08/10 16:45:45 - [] D -- C:\Program Files\WinRAR
O43 - CFD: 2009/08/04 12:44:21 - [] D -- C:\Program Files\xerox
O43 - CFD: 2009/08/04 12:43:41 - [] RDC -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Accessoires
O43 - CFD: 2011/01/23 02:08:03 - [] DC -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Acer
O43 - CFD: 2011/01/23 02:00:31 - [] DC -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Acer Crystal Eye webcam
O43 - CFD: 2012/09/09 05:53:39 - [0] DC -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Acer GameZone
O43 - CFD: 2009/08/04 16:43:44 - [] DC -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\AcerSystem
O43 - CFD: 2011/01/23 03:36:33 - [] DC -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\ADOBE
O43 - CFD: 2011/01/23 03:08:35 - [] DC -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\CCleaner
O43 - CFD: 2015/08/08 21:17:10 - [] RDC -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage
O43 - CFD: 2009/08/04 16:30:53 - [] DC -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\eSobi v2
O43 - CFD: 2009/08/04 15:21:35 - [] DC -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Google Desktop
O43 - CFD: 2015/06/16 09:13:40 - [] DC -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\iTunes
O43 - CFD: 2015/03/30 10:21:10 - [] DC -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Java
O43 - CFD: 2009/08/04 12:39:56 - [] RDC -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Jeux
O43 - CFD: 2015/08/10 16:07:17 - [] DC -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Malwarebytes Anti-Malware
O43 - CFD: 2014/06/20 04:26:01 - [] DC -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Microsoft Download Manager
O43 - CFD: 2011/01/23 04:14:22 - [] DC -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Microsoft Office
O43 - CFD: 2014/10/17 19:02:40 - [] DC -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Microsoft Silverlight
O43 - CFD: 2015/03/30 11:00:09 - [] DC -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Mozilla Firefox
O43 - CFD: 2009/08/04 12:44:15 - [] RDC -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Outils d'administration
O43 - CFD: 2011/02/25 13:14:06 - [] DC -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Picasa 3
O43 - CFD: 2015/06/16 08:48:12 - [] DC -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\QuickTime
O43 - CFD: 2014/10/19 05:56:31 - [] DC -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Skype
O43 - CFD: 2015/03/30 11:25:57 - [] DC -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\VideoLAN
O43 - CFD: 2015/08/10 13:48:14 - [] DC -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Windows Live
O43 - CFD: 2012/09/07 05:59:00 - [] DC -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\WinRAR
O43 - CFD: 2011/01/23 02:24:38 - [] DC -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Your Uninstaller 2010
O43 - CFD: 2015/06/16 09:11:22 - [] DC -- C:\Documents and Settings\All Users\Application Data\188F1432-103A-4ffb-80F1-36B633C5C9E1
O43 - CFD: 2012/12/15 06:53:07 - [] DC -- C:\Documents and Settings\All Users\Application Data\Adobe
O43 - CFD: 2014/07/03 08:57:17 - [] DC -- C:\Documents and Settings\All Users\Application Data\Apple
O43 - CFD: 2011/02/12 07:38:38 - [] DC -- C:\Documents and Settings\All Users\Application Data\Apple Computer
O43 - CFD: 2015/07/11 12:30:13 - [] DC -- C:\Documents and Settings\All Users\Application Data\AVAST Software
O43 - CFD: 2015/06/16 09:13:31 - [] DC -- C:\Documents and Settings\All Users\Application Data\B0FFCDD9-5261-4e59-B29A-17A4FABDEBAB
O43 - CFD: 2011/02/08 04:20:38 - [] DC -- C:\Documents and Settings\All Users\Application Data\CyberLink
O43 - CFD: 2015/07/11 18:24:44 - [] DC -- C:\Documents and Settings\All Users\Application Data\DatacardService
O43 - CFD: 2015/06/20 06:05:24 - [] DC -- C:\Documents and Settings\All Users\Application Data\Dropbox
O43 - CFD: 2009/08/04 16:30:58 - [] DC -- C:\Documents and Settings\All Users\Application Data\eSobi
O43 - CFD: 2014/11/25 16:02:51 - [] DC -- C:\Documents and Settings\All Users\Application Data\fast connect
O43 - CFD: 2014/01/13 12:06:53 - [] DC -- C:\Documents and Settings\All Users\Application Data\Google
O43 - CFD: 2015/08/10 16:06:57 - [] DC -- C:\Documents and Settings\All Users\Application Data\Malwarebytes
O43 - CFD: 2011/03/31 12:40:06 - [] DC -- C:\Documents and Settings\All Users\Application Data\McAfee
O43 - CFD: 2015/08/10 17:07:48 - [] SDC -- C:\Documents and Settings\All Users\Application Data\Microsoft
O43 - CFD: 2015/07/15 17:49:23 - [] DC -- C:\Documents and Settings\All Users\Application Data\Microsoft Help
O43 - CFD: 2015/03/31 11:11:52 - [] DC -- C:\Documents and Settings\All Users\Application Data\Mozilla
O43 - CFD: 2015/03/30 10:33:15 - [] DC -- C:\Documents and Settings\All Users\Application Data\Oracle
O43 - CFD: 2015/07/19 09:41:58 - [] DC -- C:\Documents and Settings\All Users\Application Data\Skype
O43 - CFD: 2012/05/02 12:19:47 - [] DC -- C:\Documents and Settings\All Users\Application Data\Sun
O43 - CFD: 2015/03/30 13:06:41 - [] ADC -- C:\Documents and Settings\All Users\Application Data\Temp
O43 - CFD: 2015/03/30 10:31:50 - [] DC -- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
O43 - CFD: 2011/02/12 07:39:46 - [] DC -- C:\Documents and Settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
O43 - CFD: 2012/12/15 06:59:38 - [] D -- C:\Program Files\Fichiers communs\Adobe
O43 - CFD: 2015/06/16 09:12:07 - [] D -- C:\Program Files\Fichiers communs\Apple
O43 - CFD: 2011/01/23 02:06:14 - [] D -- C:\Program Files\Fichiers communs\CyberLink
O43 - CFD: 2014/10/21 00:53:43 - [] D -- C:\Program Files\Fichiers communs\DESIGNER
O43 - CFD: 2009/08/04 15:17:48 - [] D -- C:\Program Files\Fichiers communs\InstallShield
O43 - CFD: 2015/03/30 10:22:19 - [] D -- C:\Program Files\Fichiers communs\Java
O43 - CFD: 2014/10/20 03:45:09 - [] D -- C:\Program Files\Fichiers communs\Microsoft Shared
O43 - CFD: 2009/08/04 12:41:38 - [] D -- C:\Program Files\Fichiers communs\MSSoap
O43 - CFD: 2009/08/04 16:12:09 - [] D -- C:\Program Files\Fichiers communs\Oberon Media
O43 - CFD: 2009/08/04 14:34:26 - [] D -- C:\Program Files\Fichiers communs\ODBC
O43 - CFD: 2009/08/04 12:41:40 - [] D -- C:\Program Files\Fichiers communs\Services
O43 - CFD: 2014/10/19 05:56:31 - [] D -- C:\Program Files\Fichiers communs\Skype
O43 - CFD: 2009/08/04 14:34:23 - [] D -- C:\Program Files\Fichiers communs\SpeechEngines
O43 - CFD: 2011/02/08 04:21:11 - [0] D -- C:\Program Files\Fichiers communs\SWF Studio
O43 - CFD: 2011/01/23 04:10:31 - [] D -- C:\Program Files\Fichiers communs\System
O43 - CFD: 2009/08/04 15:39:40 - [] D -- C:\Program Files\Fichiers communs\Windows Live
O43 - CFD: 2011/02/08 04:21:30 - [0] SHDC -- C:\Documents and Settings\NATHALIE\Application Data\.#
O43 - CFD: 2011/01/23 03:34:22 - [] DC -- C:\Documents and Settings\NATHALIE\Application Data\ACD Systems
O43 - CFD: 2009/08/04 16:31:50 - [] DC -- C:\Documents and Settings\NATHALIE\Application Data\Acer
O43 - CFD: 2009/08/04 15:47:02 - [] DC -- C:\Documents and Settings\NATHALIE\Application Data\Acer GameZone Console
O43 - CFD: 2011/03/31 12:50:54 - [] DC -- C:\Documents and Settings\NATHALIE\Application Data\Adobe
O43 - CFD: 2012/08/10 05:32:20 - [] DC -- C:\Documents and Settings\NATHALIE\Application Data\AdSigner_Certificate
O43 - CFD: 2012/01/02 02:41:44 - [] DC -- C:\Documents and Settings\NATHALIE\Application Data\Apple Computer
O43 - CFD: 2015/08/10 16:45:48 - [0] DC -- C:\Documents and Settings\NATHALIE\Application Data\Company
O43 - CFD: 2011/02/08 04:20:29 - [] DC -- C:\Documents and Settings\NATHALIE\Application Data\CyberLink
O43 - CFD: 2015/08/10 16:54:41 - [] DC -- C:\Documents and Settings\NATHALIE\Application Data\Dropbox
O43 - CFD: 2011/01/23 09:24:30 - [] DC -- C:\Documents and Settings\NATHALIE\Application Data\eSobi
O43 - CFD: 2011/01/23 03:13:17 - [] DC -- C:\Documents and Settings\NATHALIE\Application Data\Google
O43 - CFD: 2009/08/04 12:48:15 - [] DC -- C:\Documents and Settings\NATHALIE\Application Data\Identities
O43 - CFD: 2011/01/23 02:00:17 - [] DC -- C:\Documents and Settings\NATHALIE\Application Data\InstallShield
O43 - CFD: 2011/01/23 02:09:42 - [] DC -- C:\Documents and Settings\NATHALIE\Application Data\Macromedia
O43 - CFD: 2015/04/27 14:25:03 - [0] DC -- C:\Documents and Settings\NATHALIE\Application Data\Media Player Classic
O43 - CFD: 2015/08/07 14:06:16 - [] SDC -- C:\Documents and Settings\NATHALIE\Application Data\Microsoft
O43 - CFD: 2011/01/23 03:28:25 - [] DC -- C:\Documents and Settings\NATHALIE\Application Data\Mozilla
O43 - CFD: 2012/05/23 11:35:06 - [] DC -- C:\Documents and Settings\NATHALIE\Application Data\Oracle
O43 - CFD: 2015/08/10 16:45:44 - [] DC -- C:\Documents and Settings\NATHALIE\Application Data\Outraged Team
O43 - CFD: 2015/08/10 17:27:28 - [] DC -- C:\Documents and Settings\NATHALIE\Application Data\Skype
O43 - CFD: 2012/05/02 12:10:58 - [] DC -- C:\Documents and Settings\NATHALIE\Application Data\Sun
O43 - CFD: 2013/09/06 06:56:53 - [] DC -- C:\Documents and Settings\NATHALIE\Application Data\U3
O43 - CFD: 2011/01/23 02:24:45 - [] DC -- C:\Documents and Settings\NATHALIE\Application Data\URSoft
O43 - CFD: 2014/11/23 15:09:19 - [] DC -- C:\Documents and Settings\NATHALIE\Application Data\uTorrent
O43 - CFD: 2015/08/09 23:11:28 - [] DC -- C:\Documents and Settings\NATHALIE\Application Data\vlc
O43 - CFD: 2014/06/20 04:33:57 - [] DC -- C:\Documents and Settings\NATHALIE\Application Data\Windows Desktop Search
O43 - CFD: 2011/04/16 05:11:49 - [0] DC -- C:\Documents and Settings\NATHALIE\Application Data\Windows Live Writer
O43 - CFD: 2011/01/23 04:09:03 - [] DC -- C:\Documents and Settings\NATHALIE\Application Data\WinRAR
O43 - CFD: 2015/08/10 17:35:51 - [] DC -- C:\Documents and Settings\NATHALIE\Application Data\ZHP
O43 - CFD: 2015/07/06 14:20:02 - [] D -- C:\Documents and Settings\NATHALIE\Local Settings\Application Data\Adobe
O43 - CFD: 2011/02/12 07:36:10 - [] D -- C:\Documents and Settings\NATHALIE\Local Settings\Application Data\Apple
O43 - CFD: 2011/06/17 08:49:46 - [] D -- C:\Documents and Settings\NATHALIE\Local Settings\Application Data\Apple Computer
O43 - CFD: 2015/01/27 01:56:04 - [0] D -- C:\Documents and Settings\NATHALIE\Local Settings\Application Data\Deployment
O43 - CFD: 2015/06/20 06:05:25 - [] D -- C:\Documents and Settings\NATHALIE\Local Settings\Application Data\Dropbox
O43 - CFD: 2014/10/13 16:38:00 - [] D -- C:\Documents and Settings\NATHALIE\Local Settings\Application Data\Facebook
O43 - CFD: 2015/07/22 19:48:03 - [] D -- C:\Documents and Settings\NATHALIE\Local Settings\Application Data\Google
O43 - CFD: 2011/10/08 11:40:56 - [] D -- C:\Documents and Settings\NATHALIE\Local Settings\Application Data\Identities
O43 - CFD: 2015/05/30 16:59:55 - [] D -- C:\Documents and Settings\NATHALIE\Local Settings\Application Data\Microsoft
O43 - CFD: 2009/08/04 15:28:10 - [0] D -- C:\Documents and Settings\NATHALIE\Local Settings\Application Data\Microsoft Help
O43 - CFD: 2011/01/23 03:28:18 - [] D -- C:\Documents and Settings\NATHALIE\Local Settings\Application Data\Mozilla
O43 - CFD: 2014/10/18 07:04:04 - [] D -- C:\Documents and Settings\NATHALIE\Local Settings\Application Data\Programs
O43 - CFD: 2014/10/19 05:57:16 - [] D -- C:\Documents and Settings\NATHALIE\Local Settings\Application Data\Skype
O43 - CFD: 2012/05/24 02:55:11 - [] D -- C:\Documents and Settings\NATHALIE\Local Settings\Application Data\Sun
O43 - CFD: 2015/07/06 18:14:57 - [] D -- C:\Documents and Settings\NATHALIE\Local Settings\Application Data\Temp
O43 - CFD: 2011/04/16 05:11:36 - [] D -- C:\Documents and Settings\NATHALIE\Local Settings\Application Data\Windows Live Writer
O43 - CFD: 2012/01/16 13:23:22 - [0] D -- C:\Documents and Settings\NATHALIE\Local Settings\Application Data\WMTools Downloaded Files
O43 - CFD: 2009/08/04 15:27:06 - [] RD -- C:\Documents and Settings\NATHALIE\Menu Démarrer\Programmes\Accessoires
O43 - CFD: 2011/01/23 02:15:06 - [] D -- C:\Documents and Settings\NATHALIE\Menu Démarrer\Programmes\CyberLink PowerDVD 8
O43 - CFD: 2015/08/08 02:19:45 - [] D -- C:\Documents and Settings\NATHALIE\Menu Démarrer\Programmes\Dropbox
O43 - CFD: 2015/08/09 20:43:57 - [] RD -- C:\Documents and Settings\NATHALIE\Menu Démarrer\Programmes\Démarrage
O43 - CFD: 2015/07/22 19:48:06 - [] D -- C:\Documents and Settings\NATHALIE\Menu Démarrer\Programmes\Google Photos Backup
O43 - CFD: 2011/04/20 04:57:54 - [] RD -- C:\Documents and Settings\NATHALIE\Menu Démarrer\Programmes\Outils d'administration
O43 - CFD: 2011/01/23 03:11:16 - [] D -- C:\Documents and Settings\NATHALIE\Menu Démarrer\Programmes\The KMPlayer
O43 - CFD: 2012/09/07 05:59:00 - [] D -- C:\Documents and Settings\NATHALIE\Menu Démarrer\Programmes\WinRAR

---\\ Enumération des clés de registre StartupReg (SMSR) (O53) (18) - 3s
O53 - SMSR:HKLM\...\startupreg\CTFMON.EXE [Key] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
O53 - SMSR:HKLM\...\startupreg\Google Desktop Search [Key] . (.Google - Google Desktop.) -- C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O53 - SMSR:HKLM\...\startupreg\HotKeysCmds [Key] . (.Intel Corporation - hkcmd Module.) -- C:\WINDOWS\system32\hkcmd.exe
O53 - SMSR:HKLM\...\startupreg\IgfxTray [Key] . (.Intel Corporation - igfxTray Module.) -- C:\WINDOWS\system32\igfxtray.exe
O53 - SMSR:HKLM\...\startupreg\IMJPMIG8.1 [Key] . (.Microsoft Corporation - Microsoft IME.) -- C:\WINDOWS\ime\imjp8_1\imjpmig.exe
O53 - SMSR:HKLM\...\startupreg\MSMSGS [Key] . (...) -- C:\Program Files\Messenger\msmsgs.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\MSPY2002 [Key] . (...) -- C:\WINDOWS\system32\IME\PINTLGNT\IMSCINST.EXE
O53 - SMSR:HKLM\...\startupreg\PDVD8LanguageShortcut [Key] . (.Copyright (C) 2006 - Language Application.) -- C:\Program Files\CyberLink\PowerDVD8\Language\Language.exe
O53 - SMSR:HKLM\...\startupreg\PersistenceThread [Key] . (.Intel Corporation - PersistenceThread Background App for Intel(.) -- C:\WINDOWS\system32\PersistenceThread.exe
O53 - SMSR:HKLM\...\startupreg\PHIME2002A [Key] . (.Microsoft Corporation - 微軟新注音輸入法 2002a.) -- C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE
O53 - SMSR:HKLM\...\startupreg\PHIME2002ASync [Key] . (.Microsoft Corporation - 微軟新注音輸入法 2002a.) -- C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE
O53 - SMSR:HKLM\...\startupreg\ProductReg [Key] . (.Acer - ProductR Application.) -- C:\Program Files\Acer\WR_PopUp\ProductReg.exe
O53 - SMSR:HKLM\...\startupreg\PWRISOVM.EXE [Key] . (...) -- C:\Program Files\PowerISO\PWRISOVM.EXE (.not file.)
O53 - SMSR:HKLM\...\startupreg\RemoteControl8 [Key] . (.CyberLink Corp. - PowerDVD RC Service.) -- C:\Program Files\CyberLink\PowerDVD8\PDVD8Serv.exe
O53 - SMSR:HKLM\...\startupreg\RTHDCPL [Key] . (.Realtek Semiconductor Corp. - Realtek HD Audio Control Panel.) -- RTHDCPL.EXE (.not file.)
O53 - SMSR:HKLM\...\startupreg\Skype [Key] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe
O53 - SMSR:HKLM\...\startupreg\swg [Key] . (...) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\SynTPEnh [Key] . (...) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (.not file.)

---\\ Liste des pilotes du système (SDL) (O58) (59) - 9s
O58 - SDL:2008/04/14 14:00:00 A . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\WINDOWS\System32\drivers\aliide.sys [5248]
O58 - SDL:2008/08/05 14:10:12 A . (.Creative - Creative WDM 3D Audio Driver.) -- C:\WINDOWS\System32\drivers\Ambfilt.sys [1684736]
O58 - SDL:2008/04/13 11:36:40 A . (.Advanced Micro Devices, Inc. - AMD Win2000 AGP Filter.) -- C:\WINDOWS\System32\drivers\AMDAGP.SYS [43008]
O58 - SDL:2008/04/14 14:00:00 A . (.Advanced System Products, Inc. - AdvanSys SCSI Controller Driver.) -- C:\WINDOWS\System32\drivers\asc.sys [26496]
O58 - SDL:2008/04/14 14:00:00 A . (.Advanced System Products, Inc. - AdvanSys Ultra-Wide PCI SCSI Driver.) -- C:\WINDOWS\System32\drivers\asc3550.sys [14848]
O58 - SDL:2009/02/20 10:53:18 A . (.Broadcom Corporation - Broadcom 802.11 Network Adapter wireless dr.) -- C:\WINDOWS\System32\drivers\BCMWL5.SYS [1952512]
O58 - SDL:2008/04/14 14:00:00 A . (.RAVISENT Technologies Inc. - Pilote principal CineMaster C 1.2 WDM.) -- C:\WINDOWS\System32\drivers\cinemst2.sys [262528]
O58 - SDL:2008/04/14 14:00:00 A . (.CMD Technology, Inc. - Pilote de bus PCI IDE CMD.) -- C:\WINDOWS\System32\drivers\cmdide.sys [6656]
O58 - SDL:2008/04/14 14:00:00 A . (.Compaq Computer Corporation - Compaq PA-1 Player Driver.) -- C:\WINDOWS\System32\drivers\cpqdap01.sys [11776]
O58 - SDL:2008/04/14 14:00:00 A . (.Mylex Corporation - Mylex Disk Array Controller Driver.) -- C:\WINDOWS\System32\drivers\dac2w2k.sys [179584]
O58 - SDL:2008/04/14 14:00:00 A . (.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disq.) -- C:\WINDOWS\System32\drivers\dmboot.sys [800256]
O58 - SDL:2008/04/14 14:00:00 A . (.Microsoft Corp., Veritas Software - Pilote E/S du Gestionnaire de disques NT.) -- C:\WINDOWS\System32\drivers\dmio.sys [154496]
O58 - SDL:2008/04/14 14:00:00 A . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS\System32\drivers\dmload.sys [5888]
O58 - SDL:2012/08/21 08:01:22 A . (.GEAR Software Inc. - CD DVD Filter.) -- C:\WINDOWS\System32\drivers\GEARAspiWDM.sys [26840]
O58 - SDL:2008/04/14 14:00:00 A . (.Windows (R) Server 2003 DDK provider - High Definition Audio Bus Driver v1.0a.) -- C:\WINDOWS\System32\drivers\hdaudbus.sys [144384]
O58 - SDL:2009/04/28 05:44:18 A . (.Intel Corporation - Intel Graphics Miniport Driver.) -- C:\WINDOWS\System32\drivers\igxpmp32.sys [5096544]
O58 - SDL:2015/06/18 08:41:36 A . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\WINDOWS\System32\drivers\mbam.sys [23256]
O58 - SDL:2015/06/18 08:41:46 A . (.Malwarebytes Corporation - Malwarebytes Chameleon Protection Driver.) -- C:\WINDOWS\System32\drivers\mbamchameleon.sys [121560]
O58 - SDL:2015/08/10 17:32:08 A . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\WINDOWS\System32\drivers\MBAMSwissArmy.sys [98520]
O58 - SDL:2006/01/04 09:41:48 A . (.Creative Technology Ltd. - Creative WDM Audio Driver (32-bit).) -- C:\WINDOWS\System32\drivers\Monfilt.sys [1389056]
O58 - SDL:2008/04/14 14:00:00 A . (.American Megatrends Inc. - MegaRAID RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\mraid35x.sys [17280]
O58 - SDL:2014/12/03 19:45:30 A . (.Windows (R) Win 7 DDK provider - TDI driver platform.) -- C:\WINDOWS\System32\drivers\netmon_tdi.sys [57176]
O58 - SDL:2008/04/14 14:00:00 A . (.S3/Diamond Multimedia Systems - NikeDrv Usb Driver.) -- C:\WINDOWS\System32\drivers\nikedrv.sys [12032]
O58 - SDL:2008/04/14 14:00:00 A . (.Parallel Technologies, Inc. - Parallel Technologies DirectParallel IO Lib.) -- C:\WINDOWS\System32\drivers\ptilink.sys [17792]
O58 - SDL:2008/04/14 14:00:00 A . (.QLogic Corporation - Miniport Driver for QLogic ISP PCI Adapters.) -- C:\WINDOWS\System32\drivers\ql1080.sys [40320]
O58 - SDL:2008/04/14 14:00:00 A . (.QLogic Corporation - Miniport Driver for QLogic ISP PCI Adapters.) -- C:\WINDOWS\System32\drivers\ql12160.sys [45312]
O58 - SDL:2008/04/14 14:00:00 A . (.QLogic Corporation - Miniport Driver for QLogic ISP PCI Adapters.) -- C:\WINDOWS\System32\drivers\ql1280.sys [49024]
O58 - SDL:2008/04/14 14:00:00 A . (.S3/Diamond Multimedia Systems - Rio8Drv.sys Usb Driver.) -- C:\WINDOWS\System32\drivers\rio8drv.sys [12032]
O58 - SDL:2008/04/14 14:00:00 A . (.S3/Diamond Multimedia Systems - RioDrv Usb Driver.) -- C:\WINDOWS\System32\drivers\riodrv.sys [12032]
O58 - SDL:2009/04/16 05:10:06 A . (.Realtek Semiconductor Corporation - Realtek 10/100/1000 NDIS 5.1 Driver.) -- C:\WINDOWS\System32\drivers\Rtenicxp.sys [132480]
O58 - SDL:2009/03/24 13:35:00 A . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function D.) -- C:\WINDOWS\System32\drivers\RtkHDAud.sys [5056000]
O58 - SDL:2008/04/14 14:00:00 A . (.Macrovision Corporation, Macrovision Europe Limited, - Macrovision SECURITY Driver.) -- C:\WINDOWS\System32\drivers\secdrv.sys [20480]
O58 - SDL:2008/04/13 11:36:40 A . (.Silicon Integrated Systems Corporation - SiS NT AGP Filter.) -- C:\WINDOWS\System32\drivers\SISAGP.SYS [40960]
O58 - SDL:2008/04/14 14:00:00 A . (.Adaptec, Inc. - Adaptec AIC-6x60 series SCSI miniport.) -- C:\WINDOWS\System32\drivers\sparrow.sys [19072]
O58 - SDL:2008/04/14 14:00:00 A . (.Symbios Logic Inc. - Symbios Logic Inc. SCSI Miniport Driver.) -- C:\WINDOWS\System32\drivers\symc810.sys [16256]
O58 - SDL:2008/04/14 14:00:00 A . (.LSI Logic - Symbios 8XX SCSI Miniport Driver.) -- C:\WINDOWS\System32\drivers\symc8xx.sys [32640]
O58 - SDL:2008/04/14 14:00:00 A . (.LSI Logic - Symbios Hi-Perf SCSI Miniport Driver.) -- C:\WINDOWS\System32\drivers\sym_hi.sys [28384]
O58 - SDL:2008/04/14 14:00:00 A . (.LSI Logic - Symbios Ultra3 SCSI Miniport Driver.) -- C:\WINDOWS\System32\drivers\sym_u3.sys [30688]
O58 - SDL:2009/02/27 10:21:52 A . (.Synaptics Incorporated - Synaptics Touchpad Driver.) -- C:\WINDOWS\System32\drivers\SynTP.sys [205360]
O58 - SDL:2008/04/14 14:00:00 A . (.Toshiba Corporation - WDM Toshiba Tecra Video Capture Driver.) -- C:\WINDOWS\System32\drivers\tsbvcap.sys [21376]
O58 - SDL:2008/04/14 14:00:00 A . (.Promise Technology, Inc. - Gestionnaire de miniport ULTRA66 de Promise.) -- C:\WINDOWS\System32\drivers\ultra.sys [36736]
O58 - SDL:2013/03/18 11:51:08 A . (.Apple, Inc. - Apple Mobile Device USB Driver.) -- C:\WINDOWS\System32\drivers\usbaapl.sys [45056]
O58 - SDL:2008/04/14 14:00:00 A . (.RAVISENT Technologies Inc. - CineMaster C WDM DVD Minidriver.) -- C:\WINDOWS\System32\drivers\vdmindvd.sys [58112]
O58 - SDL:2008/04/14 14:00:00 A . (...) -- C:\WINDOWS\System32\ansi.sys [9037]
O58 - SDL:2008/04/14 14:00:00 A . (...) -- C:\WINDOWS\System32\country.sys [27097]
O58 - SDL:2002/03/20 23:01:06 RA . (...) -- C:\WINDOWS\System32\Digita.sys [6688]
O58 - SDL:2008/04/14 14:00:00 A . (...) -- C:\WINDOWS\System32\himem.sys [4912]
O58 - SDL:2008/04/14 14:00:00 A . (...) -- C:\WINDOWS\System32\key01.sys [42809]
O58 - SDL:2008/04/14 14:00:00 A . (...) -- C:\WINDOWS\System32\keyboard.sys [42537]
O58 - SDL:2008/04/14 14:00:00 A . (...) -- C:\WINDOWS\System32\ntdos.sys [27916]
O58 - SDL:2008/04/14 14:00:00 A . (...) -- C:\WINDOWS\System32\ntdos404.sys [29146]
O58 - SDL:2008/04/14 14:00:00 A . (...) -- C:\WINDOWS\System32\ntdos411.sys [29370]
O58 - SDL:2008/04/14 14:00:00 A . (...) -- C:\WINDOWS\System32\ntdos412.sys [29274]
O58 - SDL:2008/04/14 14:00:00 A . (...) -- C:\WINDOWS\System32\ntdos804.sys [29146]
O58 - SDL:2008/04/14 14:00:00 A . (...) -- C:\WINDOWS\System32\ntio.sys [34000]
O58 - SDL:2008/04/14 14:00:00 A . (...) -- C:\WINDOWS\System32\ntio404.sys [34560]
O58 - SDL:2008/04/14 14:00:00 A . (...) -- C:\WINDOWS\System32\ntio411.sys [35648]
O58 - SDL:2008/04/14 14:00:00 A . (...) -- C:\WINDOWS\System32\ntio412.sys [35424]
O58 - SDL:2008/04/14 14:00:00 A . (...) -- C:\WINDOWS\System32\ntio804.sys [34560]

---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61) (10) - 51s
O61 - LFC: 2015/08/10 14:51:40 AC . (..) -- C:\Documents and Settings\NATHALIE\Application Data\Outraged Team\nxjsn.bat [261]
O61 - LFC: 2015/08/05 22:49:14 AC . (.The ICU Project.) -- C:\Documents and Settings\NATHALIE\Application Data\Dropbox\bin\icudt55.dll [25911296]
O61 - LFC: 2015/08/05 22:49:14 AC . (.The ICU Project.) -- C:\Documents and Settings\NATHALIE\Application Data\Dropbox\bin\icuin55.dll [1675776]
O61 - LFC: 2015/08/05 22:49:14 AC . (.The ICU Project.) -- C:\Documents and Settings\NATHALIE\Application Data\Dropbox\bin\icuuc55.dll [1157632]
O61 - LFC: 2015/08/05 22:49:16 AC . (..) -- C:\Documents and Settings\NATHALIE\Application Data\Dropbox\bin\libEGL.dll [56320]
O61 - LFC: 2015/08/05 22:49:16 AC . (..) -- C:\Documents and Settings\NATHALIE\Application Data\Dropbox\bin\libGLESv2.dll [1128448]
O61 - LFC: 2015/08/05 22:49:56 AC . (..) -- C:\Documents and Settings\NATHALIE\Application Data\Dropbox\bin\QtQuick.2\qtquick2plugin.dll [12800]
O61 - LFC: 2015/08/05 22:49:56 AC . (..) -- C:\Documents and Settings\NATHALIE\Application Data\Dropbox\bin\QtQuick\Window.2\windowplugin.dll [12288]
O61 - LFC: 2015/08/05 22:49:56 AC . (..) -- C:\Documents and Settings\NATHALIE\Application Data\Dropbox\bin\QtQuick\Layouts\qquicklayoutsplugin.dll [56320]
O61 - LFC: 2015/08/05 22:49:54 AC . (..) -- C:\Documents and Settings\NATHALIE\Application Data\Dropbox\bin\QtQuick\Controls\qtquickcontrolsplugin.dll [779776]

---\\ Associations Shell Spawning (O67) (10) - 1s
O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\shell32.dll
O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft (R) Windows Based Script Host.) -- C:\WINDOWS\system32\wscript.exe
O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\WINDOWS\regedit.exe
O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S
O67 - Shell Spawning: <.html> [HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe

---\\ Menu de démarrage Internet (SMI) (O68) (9) - 1s
O68 - StartMenuInternet: <>[HKLM\..\Shell\open\Command] (...) -- C:\Documents and Settings\NATHALIE\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - IE Per-User Initialization Utility.) -- C:\WINDOWS\system32\ie4uinit.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - IE Per-User Initialization Utility.) -- C:\WINDOWS\system32\ie4uinit.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - IE Per-User Initialization Utility.) -- C:\WINDOWS\system32\ie4uinit.exe

---\\ Recherche d'infection sur les navigateurs internet (SBI) (O69) (1) - 19s
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (Bing) - http://www.bing.com/

---\\ Enumère les services démarrés par Svchost (SSS) (O83) (39) - 4s
O83 - Search Svchost Services: AppMgmt (AppMgmt) . (...) -- C:\WINDOWS\System32\appmgmts.dll [0]
O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Windows Audio Service.) -- C:\WINDOWS\system32\audiosrv.dll [42496]
O83 - Search Svchost Services: Browser (Browser) . (.Microsoft Corporation - Computer Browser Service DLL.) -- C:\WINDOWS\system32\browser.dll [78336]
O83 - Search Svchost Services: CryptSvc (CryptSvc) . (.Microsoft Corporation - Cryptographic Services.) -- C:\WINDOWS\system32\cryptsvc.dll [62464]
O83 - Search Svchost Services: DMServer (DMServer) . (.Microsoft Corp. - DLL Service gestionnaire de disque logique.) -- C:\WINDOWS\system32\dmserver.dll [24576]
O83 - Search Svchost Services: DHCP (DHCP) . (.Microsoft Corporation - Service client DHCP.) -- C:\WINDOWS\system32\dhcpcsvc.dll [127488]
O83 - Search Svchost Services: ERSvc (ERSvc) . (.Microsoft Corporation - Windows Error Reporting Service.) -- C:\WINDOWS\system32\ersvc.dll [23040]
O83 - Search Svchost Services: EventSystem (EventSystem) . (.Microsoft Corporation - .) -- C:\WINDOWS\system32\es.dll [253952]
O83 - Search Svchost Services: FastUserSwitchingCompatibility (FastUserSwitchingCompatibility) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\system32\shsvcs.dll [135680]
O83 - Search Svchost Services: HidServ (HidServ) . (.Microsoft Corporation - HID Audio Service.) -- C:\WINDOWS\system32\hidserv.dll [21504]
O83 - Search Svchost Services: LanmanServer (LanmanServer) . (.Microsoft Corporation - Server Service DLL.) -- C:\WINDOWS\system32\srvsvc.dll [99840]
O83 - Search Svchost Services: LanmanWorkstation (LanmanWorkstation) . (.Microsoft Corporation - Workstation Service DLL.) -- C:\WINDOWS\system32\wkssvc.dll [132096]
O83 - Search Svchost Services: Messenger (Messenger) . (.Microsoft Corporation - NT Messenger Service.) -- C:\WINDOWS\system32\msgsvc.dll [33792]
O83 - Search Svchost Services: Netman (Netman) . (.Microsoft Corporation - Gestionnaire de connexions réseau.) -- C:\WINDOWS\system32\netman.dll [198144]
O83 - Search Svchost Services: Nla (Nla) . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Micro.) -- C:\WINDOWS\system32\mswsock.dll [247808]
O83 - Search Svchost Services: Ntmssvc (Ntmssvc) . (.Microsoft Corporation - Gestionnaire de stockage amovible.) -- C:\WINDOWS\system32\ntmssvc.dll [438272]
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Remote Access AutoDial Manager.) -- C:\WINDOWS\system32\rasauto.dll [88576]
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Remote Access Connection Manager.) -- C:\WINDOWS\system32\rasmans.dll [186368]
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Dynamic Interface Manager.) -- C:\WINDOWS\system32\mprdim.dll [53248]
O83 - Search Svchost Services: Schedule (Schedule) . (.Microsoft Corporation - Moteur du Planificateur de tâches.) -- C:\WINDOWS\system32\schedsvc.dll [194560]
O83 - Search Svchost Services: Seclogon (Seclogon) . (.Microsoft Corporation - DLL de service d'ouverture de session secon.) -- C:\WINDOWS\system32\seclogon.dll [18944]
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - System Event Notification Service (SENS).) -- C:\WINDOWS\system32\sens.dll [39424]
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l'application d'assistance à.) -- C:\WINDOWS\system32\ipnathlp.dll [332800]
O83 - Search Svchost Services: SRService (SRService) . (.Microsoft Corporation - Service de restauration du système.) -- C:\WINDOWS\system32\srsvc.dll [171520]
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM.) -- C:\WINDOWS\system32\tapisrv.dll [249856]
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\system32\shsvcs.dll [135680]
O83 - Search Svchost Services: TrkWks (TrkWks) . (.Microsoft Corporation - Distributed Link Tracking Client.) -- C:\WINDOWS\system32\trkwks.dll [90112]
O83 - Search Svchost Services: W32Time (W32Time) . (.Microsoft Corporation - Service de temps Windows.) -- C:\WINDOWS\system32\w32time.dll [178176]
O83 - Search Svchost Services: WZCSVC (WZCSVC) . (.Microsoft Corporation - Service configuration automatique sans fil.) -- C:\WINDOWS\system32\wzcsvc.dll [483840]
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\WINDOWS\system32\wbem\wmisvc.dll [145408]
O83 - Search Svchost Services: wscsvc (wscsvc) . (.Microsoft Corporation - Windows Security Center Service.) -- C:\WINDOWS\system32\wscsvc.dll [80896]
O83 - Search Svchost Services: xmlprov (xmlprov) . (.Microsoft Corporation - Network Provisioning Service.) -- C:\WINDOWS\system32\xmlprov.dll [129024]
O83 - Search Svchost Services: napagent (napagent) . (.Microsoft Corporation - Exécution du service Agent de quarantaine.) -- C:\WINDOWS\system32\qagentrt.dll [293376]
O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\WINDOWS\system32\kmsvc.dll [61440]
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière.) -- C:\WINDOWS\system32\qmgr.dll [409088]
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Windows Update AutoUpdate Service.) -- C:\WINDOWS\system32\wuauserv.dll [6656]
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\system32\shsvcs.dll [135680]
O83 - Search Svchost Services: helpsvc (helpsvc) . (.Microsoft Corporation - Microsoft PCHealth Service Holder.) -- C:\WINDOWS\pchealth\helpctr\binaries\pchsvc.dll [38400]
O83 - Search Svchost Services: WmdmPmSN (WmdmPmSN) . (.Microsoft Corporation - Microsoft Media Device Service Provider.) -- C:\WINDOWS\system32\MsPMSNSv.dll [25088]

---\\ Enumère les codes produits des logiciels (PUC) (O90) (2) - 3s
O90 - PUC: "8413141972A528C4F9775BD56DF3AF9E" . (.Media Player Z.) -- C:\WINDOWS\Installer\{91413148-5A27-4C82-9F77-B55DD63FFAE9}\producticon =>PUP.Optional.CrossRider
O90 - PUC: "93BAD29AC2E44034A96BCB446EB8552E" . (.globalupdate Helper.) =>PUP.Optional.GlobalUpdate

---\\ Scan Additionnel (O88) (7) - 0s
HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{91413148-5A27-4C82-9F77-B55DD63FFAE9} =>PUP.Optional.CrossRider
HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} =>PUP.Optional.GlobalUpdate
C:\WINDOWS\Installer\{91413148-5A27-4C82-9F77-B55DD63FFAE9}\producticon =>PUP.Optional.CrossRider
HKLM\Software\Classes\Installer\Products\8413141972A528C4F9775BD56DF3AF9E =>PUP.Optional.CrossRider
HKLM\Software\Classes\Installer\Features\8413141972A528C4F9775BD56DF3AF9E =>PUP.Optional.CrossRider
HKLM\Software\Classes\Installer\Products\93BAD29AC2E44034A96BCB446EB8552E =>PUP.Optional.GlobalUpdate
HKLM\Software\Classes\Installer\Features\93BAD29AC2E44034A96BCB446EB8552E =>PUP.Optional.GlobalUpdate

---\\ Récapitulatif des éléments trouvées sur votre station (2) - 0s
http://www.nicolascoolman.fr/pup-crossrider/ =>PUP.Optional.CrossRider
http://www.nicolascoolman.fr/pup-globalupdate/ =>PUP.Optional.GlobalUpdate

~ End of the scan, 69161 items in 303 seconds (691)(0)()

Publicité


Signaler le contenu de ce document

Publicité