cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

~ ZHPDiag v2015.9.17.142 Par Nicolas Coolman (2015/09/17)
~ Démarré par Anne-Marie (Administrator) (2015/09/17 11:13:23)
~ Site: http://www.nicolascoolman.fr
~ Facebook: https://www.facebook.com/nicolascoolman1
~ Etat de la version: Version OK
~ Mode: Scanner
~ Rapport: C:\Users\Anne-Marie\Desktop\ZHPDiag.txt
~ Rapport: C:\Users\Anne-Marie\AppData\Roaming\ZHP\ZHPDiag.txt
~ UAC: Deactivate
~ Démarrage du système: Normal (Normal boot)
Windows 7 Home Premium, 64-bit (Build 7600)

---\\ Navigateurs Internet (3) - 0s
GCIE: Google Chrome v45.0.2454.93
MFIE: Mozilla Firefox 40.0.3 (x86 fr) v40.0.3
MSIE: Internet Explorer v8.0.7600.16385

---\\ Informations sur les produits Windows (4) - 3s
~ Windows Server License Manager Script : OK
~ Licence Script File Génération : OK
Windows Automatic Updates : OK
Windows Activation Technologies : OK

---\\ Logiciels de protection (2) - 14s
Avira Antivirus v15.0.12.420
Windows Defender W7 (Deactivate)

---\\ Surveillance de Logiciels (2) - 15s
Adobe Flash Player 18 NPAPI
Adobe Reader XI

---\\ Logiciels de partage P2P (1) - 15s
Pando Media Booster v2.3.6.0

---\\ Informations sur le système (6) - 0s
~ Operating System: Intel64 Family 6 Model 23 Stepping 10, GenuineIntel
~ Operating System: 64-bit
~ Boot mode: Normal (Normal boot)
Total RAM: 4158.552 MB (41% free)
~ System Restore: Activé (Enable)
~ System drive C: has 6 GB free of 59 GB

---\\ Mode de connexion au système (3) - 0s
~ Computer Name: USER-PC
~ User Name: Anne-Marie
~ Logged in as Administrator

---\\ Enumération des unités disques (2) - 0s
~ Drive C: has 6 GB free of 59 GB (System)
~ Drive D: has 115 GB free of 165 GB

---\\ Etat du Centre de Sécurité Windows (10) - 0s
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK

---\\ Recherche particulière de fichiers génériques (25) - 6s
[MD5.0862495E0C825893DB75EF44FAEA8E93] - (.Microsoft Corporation - Explorateur Windows.) () -- C:\Windows\Explorer.exe [2870272] ©
[MD5.DD81D91FF3B0763C392422865C9AC12E] - (.Microsoft Corporation - Processus hôte Windows (Rundll32).) () -- C:\Windows\System32\rundll32.exe [45568] ©
[MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de démarrage de Windows.) () -- C:\Windows\System32\Wininit.exe [129024] ©
[MD5.8523338F749AC8C5300C125BC4B08275] - (.Microsoft Corporation - Extensions Internet pour Win32.) () -- C:\Windows\System32\wininet.dll [1198080] ©
[MD5.DA3E2A6FA9660CC75B471530CE88453A] - (.Microsoft Corporation - Application d’ouverture de session Windows.) () -- C:\Windows\System32\Winlogon.exe [389632] ©
[MD5.75341574F21E766748732BDF530C74BD] - (.Microsoft Corporation - Bibliothèque de licences.) () -- C:\Windows\System32\sppcomapi.dll [231936] ©
[MD5.E247E7DEB20C0CF0801A8AC39E9CE1DF] - (.Microsoft Corporation - DNS DLL de l’API Client.) () -- C:\Windows\System32\dnsapi.dll [356352] ©
[MD5.62390F4ACE9E2B63E3CA26B7F7497897] - (.Microsoft Corporation - DNS DLL de l’API Client.) () -- C:\Windows\Syswow64\dnsapi.dll [269824] ©
[MD5.F2521C3173E6027B3FBD5E44272BDF6C] - (.Microsoft Corporation - DLL client de l’API uilisateur de Windows m.) () -- C:\Windows\System32\fr-FR\user32.dll.mui [19968] ©
[MD5.DB9D6C6B2CD95A9CA414D045B627422E] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) () -- C:\Windows\System32\drivers\AFD.sys [499200] ©
[MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) () -- C:\Windows\System32\drivers\atapi.sys [24128] ©
[MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) () -- C:\Windows\System32\drivers\Cdfs.sys [92160] ©
[MD5.83D2D75E1EFB81B3450C18131443F7DB] - (.Microsoft Corporation - SCSI CD-ROM Driver.) () -- C:\Windows\System32\drivers\Cdrom.sys [147456] ©
[MD5.9C253CE7311CA60FC11C774692A13208] - (.Microsoft Corporation - DFS Namespace Client Driver.) () -- C:\Windows\System32\drivers\DfsC.sys [102400] ©
[MD5.0A49913402747A0B67DE940FB42CBDBB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) () -- C:\Windows\System32\drivers\HDAudBus.sys [122368] ©
[MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) () -- C:\Windows\System32\drivers\i8042prt.sys [105472] ©
[MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) () -- C:\Windows\System32\drivers\IpNat.sys [116224] ©
[MD5.040D62A9D8AD28922632137ACDD984F2] - (.Microsoft Corporation - Windows NT SMB Minirdr.) () -- C:\Windows\System32\drivers\MRxSmb.sys [157696] ©
[MD5.9162B273A44AB9DCE5B44362731D062A] - (.Microsoft Corporation - MBT Transport driver.) () -- C:\Windows\System32\drivers\netBT.sys [259072] ©
[MD5.9A6089B056EA1B83B36424FC9D0A300E] - (.Microsoft Corporation - Pilote du système de fichiers NT.) () -- C:\Windows\System32\drivers\ntfs.sys [1653096] ©
[MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parallèle.) () -- C:\Windows\System32\drivers\Parport.sys [97280] ©
[MD5.87A6E852A22991580D6D39ADC4790463] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) () -- C:\Windows\System32\drivers\Rasl2tp.sys [130048] ©
[MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) () -- C:\Windows\System32\drivers\smb.sys [93184] ©
[MD5.079125C4B17B01FCAEEBCE0BCB290C0F] - (.Microsoft Corporation - TDI Translation Driver.) () -- C:\Windows\System32\drivers\tdx.sys [99840] ©
[MD5.9E425AC5C9A5A973273D169F43B4F5E1] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) () -- C:\Windows\System32\drivers\volsnap.sys [295792] ©

---\\ Processus lancés (39) - 24s
[MD5.D7F82B30ED318E591E27C9C323846DD5] - (.ASUS - SmartLogon Application.) -- C:\Program Files (x86)\ASUS\SmartLogon\smartlogon.exe [428600] [PID.360] ©
[MD5.FB2BE0BAE9B3F248080CDBF91EF16C7F] - (.ASUSTeK Computer Inc. - ASUS FastBoot.) -- C:\Windows\system32\FBAgent.exe [359552] [PID.1060] ©
[MD5.18E5C2F937F9DEB8C282DF66A3761925] - (.ASUS - ASLDR Service.) -- C:\Program Files (x86)\ASUS\ATK Hotkey\AsLdrSrv.exe [84536] [PID.1084] ©
[MD5.7C157574A181B19B9DCF5F339E25337E] - (.Copyright (C) 2007 - GFNEXSrv.) -- C:\Program Files\ATKGFNEX\GFNEXSrv.exe [94208] [PID.1112]
[MD5.E20B4F23EB153635D67944F63454EC84] - (.Avira Operations GmbH & Co. KG - Antivirus Host Framework Service.) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [461672] [PID.1232] ©
[MD5.013697369EAFFA675D0671607F036020] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [82128] [PID.1620] ©
[MD5.E20B4F23EB153635D67944F63454EC84] - (.Avira Operations GmbH & Co. KG - Antivirus Host Framework Service.) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [461672] [PID.1640] ©
[MD5.A6C20CBD1B10FEF25DAA4F1CF9FBC4FF] - (.ATK - ACMON.) -- C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [684544] [PID.1972] ©
[MD5.4F23BA3152C60464FC1E8C96C6AA18E1] - (.ATK - Power4Gear Hybrid.) -- C:\Program Files\P4G\BatteryLife.exe [267832] [PID.1984] ©
[MD5.F30AA962D602D1A0377DFB99031E7B5C] - (.ASUS - ASPG application.) -- C:\Program Files (x86)\ASUS\ASUS CopyProtect\ASPG.exe [163384] [PID.1996] ©
[MD5.BA2B4E07561CF877F61B0EEED654BC96] - (...) -- C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe [53888] [PID.2008]
[MD5.F4DCD4912B185C3AAEB92A7040832AD1] - (.Copyright (C) 2002 ASUSTek. Corporation - ALU.) -- C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe [51768] [PID.2020] ©
[MD5.1971D838A88F58D59543E9B3CDA5FFC4] - (.ASUS - SmartLogon Application.) -- C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe [305720] [PID.2036] ©
[MD5.A65BE6B71BDD85BB0BBB0F25E03AE586] - (.Copyright (C) 2005 - Wireless Console 3.) -- C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [1593344] [PID.1356]
[MD5.24680B56D862F1DE30C13FC64B80F568] - (.Avira Operations GmbH & Co. KG - Avira.ServiceHost.) -- C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [228104] [PID.2276] ©
[MD5.A434FB7C05F244E8E46C23F8075082ED] - (.ASUS - HControl.) -- C:\Program Files (x86)\ASUS\ATK Hotkey\HControl.exe [178744] [PID.2348] ©
[MD5.D62088F1C4E7B3477AD2A5F8F5C6DEF3] - (.Copyright (C) 2007 - Atouch64.) -- C:\Program Files (x86)\ASUS\ATK Hotkey\Atouch64.exe [301624] [PID.2356]
[MD5.41A5048E49372F091B2AE5A5B705B72D] - (.ASUSTeK - ACEngSvr Module.) -- C:\Windows\SysWOW64\ACEngSvr.exe [183296] [PID.2372] ©
[MD5.C0ADD4143C944ECB1C3302C323077231] - (.Intel Corporation - igfxTray Module.) -- C:\Windows\System32\igfxtray.exe [165912] [PID.2664] ©
[MD5.4D4CC17EF5B85CAC65A9FCE28CF81FB5] - (.Intel Corporation - hkcmd Module.) -- C:\Windows\System32\hkcmd.exe [387608] [PID.2708] ©
[MD5.924CAF3B785D31B66C2A88FB4B21639C] - (.Intel Corporation - persistence Module.) -- C:\Windows\System32\igfxpers.exe [365592] [PID.2740] ©
[MD5.2C2C3D428E6581CF56A80416AA327425] - (.AlcorMicro Co., Ltd. - Single LUN Icon Utility for VID 058F PID 63.) -- C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [320000] [PID.2748] ©
[MD5.9918EF1287B3CCD2DBB564F5D134993A] - (.VIA - VIA HD Audio CPL.) -- C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [2244096] [PID.2896] ©
[MD5.5AEBF6FA9805C9101220AA4FB4FA17E7] - (.ASUS - HControlUser.) -- C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe [105016] [PID.2904] ©
[MD5.EBA7FEB924D04E718870B6E1E07D2465] - (.ASUS - ATKOSD2.) -- C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe [8493624] [PID.2928] ©
[MD5.98556D07542B4B666DD1465B90150726] - (.Intel Corporation - igfxsrvc Module.) -- C:\Windows\system32\igfxsrvc.exe [491032] [PID.2948] ©
[MD5.29B129E019D5935C55541629677C2A69] - (.ASUS - ATK Media.) -- C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe [159744] [PID.2964] ©
[MD5.27F8A7A78773427E5D931628F89D6839] - (.Avira Operations GmbH & Co. KG - Avira system tray application.) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [782008] [PID.1896] ©
[MD5.094F3AC18AF083D542D96EBEF1F28161] - (.Avira Operations GmbH & Co. KG - AntiVir shadow copy service.) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe [632152] [PID.3152] ©
[MD5.149126216A694E6BA84E92ECA77AAE3B] - (.ASUS - ATKOSD.) -- C:\Program Files (x86)\ASUS\ATK Hotkey\ATKOSD.exe [2488888] [PID.3376] ©
[MD5.AA11E1368EEB237DD100BAC6AFFE1C57] - (.ASUS - KBFiltr.) -- C:\Program Files (x86)\ASUS\ATK Hotkey\KBFiltr.exe [113208] [PID.4280] ©
[MD5.C0BF554D2277F7A4C735D475ADE2E3B2] - (.ASUSTek Computer Inc. - ADSMSrv.) -- C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe [225280] [PID.4328] ©
[MD5.3ECCDD3FE310DD8F82D085447089ADB0] - (.ASUSTek Computer Inc. - ADSMTray.) -- C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMTray.exe [272952] [PID.4336] ©
[MD5.5C396DDE6AAFFB64ABC0E0FD88F53553] - (.ASUS - AsScrPro.) -- C:\Windows\AsScrPro.exe [3054136] [PID.4584] ©
[MD5.57B4D34232852BFE4453BE571DF90D21] - (.CyberLink - CyberLink MediaLibray Service.) -- C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [103720] [PID.4664] ©
[MD5.6E51006C8447A701B237156F1805BE6D] - (.Avira Operations GmbH & Co. KG - Avira Launcher.) -- C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe [132808] [PID.4856] ©
[MD5.4A7C441D99D86704D194E7678873B95D] - (.ASUS - WDC.) -- C:\Program Files (x86)\ASUS\ATK Hotkey\WDC.exe [174648] [PID.4920] ©
[MD5.05299546F243159CB8A42906ACB219A8] - (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe [377000] [PID.5932] ©
[MD5.F34EB03BC5D8193927A74CD1550E81F4] - (.Nicolas Coolman - ZHPDiag.) -- C:\Users\Anne-Marie\Downloads\ZHPDiag3.exe [1932800] [PID.5704] ©

---\\ Google Chrome, Démarrage,Recherche,Extensions (20) - 1s
G0 - GCSP: Preferences [User Data\Default][HomePage] http://lh6.googleusercontent.com/
G0 - GCSP: Preferences [User Data\Default][HomePage] http://ssl.gstatic.com/
G0 - GCSP: Preferences [User Data\Default][HomePage] http://www.google.com/
G0 - GCSP: Preferences [User Data\Default][HomePage] http://www.google.fr/
G0 - GCSP: Preferences [User Data\Default][HomePage] http://www.gstatic.com/
G0 - GCSP: Preferences [User Data\Default][HomePage] http://accounts.google.com/
G0 - GCSP: Preferences [User Data\Default][HomePage] http://apis.google.com/
G0 - GCSP: Preferences [User Data\Default][HomePage] http://clients5.google.com/
G0 - GCSP: Preferences [User Data\Default][HomePage] http://plus.google.com/
G0 - GCSP: Secure Preferences [User Data\Default][HomePage] http://www.google.com/
G2 - GCE: Preference [User Data\Default] [aohghmighlieiainnegkcijnfilokake] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [apdfllckaahabafndbhieahigkjlhalf] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [blpcfgokakmgnkcojhhkbfbldkacnbeo] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [coobgpohoikkiipiblmjeljniedjpjpf] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [jpihmmhdcobmllpcnpfbhnipmhamldje] General Crawler
G2 - GCE: Preference [User Data\Default] [lccekmodgklaepjeofjdjpbminllajkg] Chrome Hotword Shared Module
G2 - GCE: Preference [User Data\Default] [lifbcibllhkdhoafpjfnlhfpfgnpldfl] Skype Click to Call
G2 - GCE: Preference [User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [npfkoakaabdallkcdbpkkhfilkkngakh] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [pjkljhegncpnkpknbcohdijeoejaedia] Google Chrome manifest =>.Google Inc.

---\\ Firefox, Plugins,Demarrage,Recherche,Extensions (11) - 3s
M1 - SPR:Search Page Redirection - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
P2 - EXT FILE: (...) -- C:\Users\Anne-Marie\AppData\Roaming\Mozilla\Firefox\Profiles\widsprfj.default\extensions\jid0-5zkqw0l5jBWPCHzR9mnB6h7y1tn@jetpack.xpi
P2 - EXT FILE: (...) -- C:\Users\Anne-Marie\AppData\Roaming\Mozilla\Firefox\Profiles\widsprfj.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
P2 - EXT FILE: (...) -- C:\Users\Anne-Marie\AppData\Roaming\Mozilla\Firefox\Profiles\widsprfj.default\searchplugins\askcomsearch.xml
P2 - EXT FILE: (...) -- C:\Users\Anne-Marie\AppData\Roaming\Mozilla\Firefox\Profiles\widsprfj.default\searchplugins\search.xml
P2 - EXT: (.Mozilla - Default.) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} ©
P2 - EXT: (. - HyperCam Toolbar.) -- C:\Users\Anne-Marie\AppData\Roaming\Mozilla\Firefox\Profiles\widsprfj.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}
P2 - EXT: (.Hewlett-Packard - HP Detect.) -- C:\Users\Anne-Marie\AppData\Roaming\Mozilla\Firefox\Profiles\widsprfj.default\extensions\{ab91efd4-6975-4081-8552-1b3922ed79e2} ©
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_232.dll ©
P2 - FPN: [HKLM] [@java.com/DTPlugin] - (.Oracle Corp..) -- C:\Program Files (x86)\Java\jre1.6.0_22\bin\npDeployJava1.dll
P2 - FPN: [HKLM] [@pandonetworks.com/PandoWebPlugin] - (.Pando Networks.) -- C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll

---\\ Internet Explorer,Démarrage,Recherche,URLSearchHook (18) - 1s
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.babylon.com/ =>PUP.Optional.Babylon
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus.msn.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = http://search.babylon.com/ =>PUP.Optional.Babylon
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs,Tabs = http://search.babylon.com/ =>PUP.Optional.Babylon
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphean =>.Microsoft Internet Explorer

---\\ Internet Explorer,Proxy Management (4) - 0s
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll

---\\ Internet Explorer,IniFiles, Autoloading programs (3) - 0s
F2 - REG:system.ini: UserInit=userinit.exe (.Microsoft Corporation.)
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe (.Microsoft Corporation.)
F2 - REG:system.ini: VMApplet=C:\Windows\SysWOW64\SystemPropertiesPerformance.exe (.Microsoft Corporation.)

---\\ Etude du fichier hosts (1) - 0s
~ Le fichier hôte est sain (The hosts file is clean) (22)

---\\ Browser Helper Object de navigateur (BHO) (3) - 0s
O2 - BHO: Windows Live Family Safety Browser Helper [64Bits] - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} . (.Microsoft Corporation - Family Safety Browser Helper Object Library.) -- C:\Program Files\Windows Live\Family Safety\fssbho.dll ©
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live ID [64Bits] - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corporation - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll ©
O2 - BHO: Google Toolbar Helper [64Bits] - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Google Toolbar.) -- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll ©

---\\ Internet Explorer, Barre d'outil (1) - 0s
O3 - Toolbar: 0x00 - [HKLM]{D4027C7F-154A-4066-A1AD-4243D8127440} . (...) -- C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (.not file.) =>Toolbar.Ask

---\\ Applications lancées au démarrage du système (16) - 1s
O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\Windows\system32\igfxtray.exe ©
O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\Windows\system32\hkcmd.exe ©
O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\Windows\system32\igfxpers.exe ©
O4 - HKLM\..\Run: [AmIcoSinglun64] . (.AlcorMicro Co., Ltd. - Single LUN Icon Utility for VID 058F PID 63.) -- C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe ©
O4 - HKCU\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe ©
O4 - HKLM\..\Wow6432Node\Run: [HDAudDeck] . (.VIA - VIA HD Audio CPL.) -- C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe ©
O4 - HKLM\..\Wow6432Node\Run: [HControlUser] . (.ASUS - HControlUser.) -- C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe ©
O4 - HKLM\..\Wow6432Node\Run: [ATKOSD2] . (.ASUS - ATKOSD2.) -- C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe ©
O4 - HKLM\..\Wow6432Node\Run: [ATKMEDIA] . (.ASUS - ATK Media.) -- C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe ©
O4 - HKLM\..\Wow6432Node\Run: [ASUSWebStorage] . (.ecareme - AsusWebStorage.) -- C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.108.222\AsusWSPanel.exe ©
O4 - HKLM\..\Wow6432Node\Run: [avgnt] . (.Avira Operations GmbH & Co. KG - Avira system tray application.) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe ©
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\sidebar.exe ©
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\sidebar.exe ©
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe ©
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe ©
O4 - HKUS\S-1-5-21-1637237707-1307238433-1501388470-1003\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe ©

---\\ Modification Domaine/Adresses DNS (3) - 0s
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1

---\\ Protocole additionnel (23) - 1s
O18 - Handler: about [64Bits] - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll ©
O18 - Handler: cdl [64Bits] - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Handler: dvd [64Bits] - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\MSVidCtl.dll ©
O18 - Handler: file [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Handler: ftp [64Bits] - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Handler: http [64Bits] - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Handler: https [64Bits] - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Handler: its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll ©
O18 - Handler: javascript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll ©
O18 - Handler: local [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Handler: mailto [64Bits] - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll ©
O18 - Handler: mhtml [64Bits] - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\System32\inetcomm.dll ©
O18 - Handler: mk [64Bits] - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Handler: ms-its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll ©
O18 - Handler: res [64Bits] - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll ©
O18 - Handler: tv [64Bits] - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\MSVidCtl.dll ©
O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll ©
O18 - Filter: application/octet-stream [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll ©
O18 - Filter: application/x-complus [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll ©
O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll ©
O18 - Filter: deflate [64Bits] - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Filter: gzip [64Bits] - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Filter: text/xml [64Bits] - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL ©

---\\ Liste des services NT non Microsoft et non désactivés (11) - 1s
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe ©
O23 - Service: AFBAgent (AFBAgent) . (.ASUSTeK Computer Inc. - ASUS FastBoot.) - C:\Windows\system32\FBAgent.exe ©
O23 - Service: Avira Protection e-mail (AntiVirMailService) . (.Avira Operations GmbH & Co. KG - Antivirus MailScanner WFP Service.) - C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe ©
O23 - Service: Avira Planificateur (AntiVirSchedulerService) . (.Avira Operations GmbH & Co. KG - Antivirus Host Framework Service.) - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe ©
O23 - Service: Avira Protection temps réel (AntiVirService) . (.Avira Operations GmbH & Co. KG - Antivirus Host Framework Service.) - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe ©
O23 - Service: Avira Protection Web (AntiVirWebService) . (.Avira Operations GmbH & Co. KG - AntiVir WebGuard WFP Service.) - C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe ©
O23 - Service: ASLDR Service (ASLDRService) . (.ASUS - ASLDR Service.) - C:\Program Files (x86)\ASUS\ATK Hotkey\AsLdrSrv.exe ©
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) . (.Copyright (C) 2007 - GFNEXSrv.) - C:\Program Files\ATKGFNEX\GFNEXSrv.exe
O23 - Service: Avira Service Host (Avira.ServiceHost) . (.Avira Operations GmbH & Co. KG - Avira.ServiceHost.) - C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe ©
O23 - Service: Google Update Service (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ©
O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files (x86)\Skype\Updater\Updater.exe ©

---\\ Logiciels installés (93) - 8s
O42 - Logiciel: ETDWare PS/2-x64 7.0.5.5_WHQL - (...) [HKLM][64Bits] -- Elantech
O42 - Logiciel: Intel(R) Graphics Media Accelerator Driver - (.Intel Corporation.) [HKLM][64Bits] -- HDMI ©
O42 - Logiciel: SAMSUNG Mobile Modem Driver Set - (...) [HKLM][64Bits] -- SAMSUNG Mobile Modem
O42 - Logiciel: Samsung Mobile phone USB driver Drive Software - (...) [HKLM][64Bits] -- Samsung Mobile phone USB driver Drive
O42 - Logiciel: SAMSUNG Mobile USB Modem Software - (...) [HKLM][64Bits] -- SAMSUNG Mobile USB Modem
O42 - Logiciel: SAMSUNG Mobile USB Modem 1.0 Software - (...) [HKLM][64Bits] -- SAMSUNG Mobile USB Modem 1.0
O42 - Logiciel: Fast Boot - (.ASUS.) [HKLM][64Bits] -- {13F4A7F3-EABC-4261-AF6B-1317777F0755} ©
O42 - Logiciel: ASUS Power4Gear Hybrid - (.ASUS.) [HKLM][64Bits] -- {1686C4D1-B1FD-42E8-B7A8-FB4C4DBA5BA8} ©
O42 - Logiciel: Étude pour l'amélioration du produit HP ENVY 4500 series - (.Hewlett-Packard Co..) [HKLM][64Bits] -- {178D686B-AA3E-4E0E-A3CF-6FE72421375B} ©
O42 - Logiciel: Logiciel de base du périphérique HP ENVY 4500 series - (.Hewlett-Packard Co..) [HKLM][64Bits] -- {210AEDB6-FC49-4F63-8924-99C6758EF9D4} ©
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM][64Bits] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00} ©
O42 - Logiciel: 64 Bit HP CIO Components Installer - (.Hewlett-Packard.) [HKLM][64Bits] -- {FF21C3E6-97FD-474F-9518-8DCBE94C2854} ©
O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe AIR ©
O42 - Logiciel: Adobe Flash Player 18 ActiveX - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player ActiveX ©
O42 - Logiciel: Adobe Flash Player 18 NPAPI - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player NPAPI ©
O42 - Logiciel: Arachnid - (...) [HKLM][64Bits] -- Arachnid_is1
O42 - Logiciel: ASUS AP Bank - (.ASUSTEK.) [HKLM][64Bits] -- ASUS AP Bank_is1 ©
O42 - Logiciel: ASUS WebStorage - (.eCareme Technologies, Inc..) [HKLM][64Bits] -- ASUS WebStorage ©
O42 - Logiciel: Asus_Camera_ScreenSaver - (.ASUS.) [HKLM][64Bits] -- Asus_Camera_ScreenSaver ©
O42 - Logiciel: Avira Antivirus v15.0.12.420 - (.Avira Operations GmbH & Co. KG.) [HKLM][64Bits] -- Avira Antivirus ©
O42 - Logiciel: bwin Poker - (.Bwin.) [HKLM][64Bits] -- bwin Poker_is1 ©
O42 - Logiciel: Adobe Media Player - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1 ©
O42 - Logiciel: Adobe Download Assistant - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- com.adobe.downloadassistant.AdobeDownloadAssistant ©
O42 - Logiciel: Croc Pop Up+ - (...) [HKLM][64Bits] -- Croc Pop Up+
O42 - Logiciel: Final Media Player 2011 - (.Bitberry Software.) [HKLM][64Bits] -- FinalMediaPlayer_is1 ©
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM][64Bits] -- Google Chrome ©
O42 - Logiciel: HP Photo Creations - (.HP.) [HKLM][64Bits] -- HP Photo Creations ©
O42 - Logiciel: VIA Platform Device Manager - (.VIA Technologies, Inc..) [HKLM][64Bits] -- InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169} ©
O42 - Logiciel: CyberLink Power2Go - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658} ©
O42 - Logiciel: Alcor Micro USB Card Reader - (.Alcor Micro Corp..) [HKLM][64Bits] -- InstallShield_{5A22D889-FBDD-4AE8-86EC-089D45FC133E} ©
O42 - Logiciel: CyberLink LabelPrint - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243} ©
O42 - Logiciel: Mozilla Firefox 40.0.3 (x86 fr) - (.Mozilla.) [HKLM][64Bits] -- Mozilla Firefox 40.0.3 (x86 fr) ©
O42 - Logiciel: Mozilla Thunderbird 31.7.0 (x86 fr) - (.Mozilla.) [HKLM][64Bits] -- Mozilla Thunderbird 31.7.0 (x86 fr) ©
O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM][64Bits] -- MozillaMaintenanceService ©
O42 - Logiciel: PhotoScape - (...) [HKLM][64Bits] -- PhotoScape
O42 - Logiciel: File Type Assistant - (.Trusted Software.) [HKLM][64Bits] -- Trusted Software Assistant_is1 =>Adware.InstallCore
O42 - Logiciel: Steam - (.Valve Corporation.) [HKLM][64Bits] -- {048298C9-A4D3-490B-9FF9-AB023A9238F3} ©
O42 - Logiciel: OpenOffice.org 3.3 - (.OpenOffice.org.) [HKLM][64Bits] -- {05653DE1-6567-40C6-B930-39D399B64369} ©
O42 - Logiciel: ASUS AI Recovery - (.ASUS.) [HKLM][64Bits] -- {06585B02-F20D-4AB2-9A64-86EF2AE0F8F0} ©
O42 - Logiciel: ASUS Splendid Video Enhancement Technology - (.ASUS.) [HKLM][64Bits] -- {0969AF05-4FF6-4C00-9406-43599238DE0D} ©
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM][64Bits] -- {18455581-E099-4BA8-BC6B-F34B2F06600C} ©
O42 - Logiciel: MSXML 4.0 SP3 Parser - (.Microsoft Corporation.) [HKLM][64Bits] -- {196467F1-C11F-4F76-858B-5812ADC83B94} ©
O42 - Logiciel: Microsoft XNA Framework Redistributable 3.1 - (.Microsoft Corporation.) [HKLM][64Bits] -- {19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20} ©
O42 - Logiciel: MSXML 4.0 SP3 Parser (KB2758694) - (.Microsoft Corporation.) [HKLM][64Bits] -- {1D95BA90-F4F8-47EC-A882-441C99D30C1E} ©
O42 - Logiciel: ASUS LifeFrame3 - (.ASUS.) [HKLM][64Bits] -- {1DBD1F12-ED93-49C0-A7CC-56CBDE488158} ©
O42 - Logiciel: Wireless Console 3 - (.ASUS.) [HKLM][64Bits] -- {20FDF948-C8ED-4543-A539-F7F4AEF5AFA2} ©
O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM][64Bits] -- {22B775E7-6C42-4FC5-8E10-9A5E3257BD94} ©
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM][64Bits] -- {2318C2B1-4965-11d4-9B18-009027A5CD4F} ©
O42 - Logiciel: Skype™ 7.0 - (.Skype Technologies S.A..) [HKLM][64Bits] -- {24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7} ©
O42 - Logiciel: Atheros Client Installation Program - (.Atheros.) [HKLM][64Bits] -- {28006915-2739-4EBE-B5E8-49B25D32EB33} ©
O42 - Logiciel: Acrobat.com - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {287ECFA4-719A-2143-A09B-D6A12DE54E40} ©
O42 - Logiciel: Atheros Communications Inc.(R) AR8121/AR8113/AR8114 Gigabit/Fast Ethernet D - (.Atheros Communications Inc..) [HKLM][64Bits] -- {3108C217-BE83-42E4-AE9E-A56A2A92E549} ©
O42 - Logiciel: Avira Launcher v1.1.45.11819 - (.Avira Operations GmbH & Co. KG.) [HKLM][64Bits] -- {315dd168-0794-4cf1-8355-f195cde642fc} ©
O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {34927EBC-98D4-4D53-98BE-510DF5999F50} ©
O42 - Logiciel: MSXML 4.0 SP3 Parser (KB2721691) - (.Microsoft Corporation.) [HKLM][64Bits] -- {355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36} ©
O42 - Logiciel: Adobe Media Player - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {39F6E2B4-CFE8-C30A-66E8-489651F0F34C} ©
O42 - Logiciel: ATKOSD2 - (.ASUS.) [HKLM][64Bits] -- {3B05F2FB-745B-4012-ADF2-439F36B2E70B} ©
O42 - Logiciel: CyberLink Power2Go - (.CyberLink Corp..) [HKLM][64Bits] -- {40BF1E83-20EB-11D8-97C5-0009C5020658} ©
O42 - Logiciel: HP FWUpdateEDO2 - (.Hewlett-Packard.) [HKLM][64Bits] -- {415FA9AD-DA10-4ABE-97B6-5051D4795C90} ©
O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM][64Bits] -- {4AB8B41B-3AF1-46BE-99B0-0ACD3B300C0A} ©
O42 - Logiciel: ControlDeck - (.ASUS.) [HKLM][64Bits] -- {5B65EF64-1DFA-414A-8C94-7BB726158E21} ©
O42 - Logiciel: ASUS FancyStart - (.ASUSTeK Computer Inc..) [HKLM][64Bits] -- {60D6618B-153F-4353-8185-908E676E5888} ©
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {60EC980A-BDA2-4CB6-A427-B07A5498B4CA} ©
O42 - Logiciel: ASUS SmartLogon - (.ASUS.) [HKLM][64Bits] -- {64452561-169F-4A36-A2FF-B5E118EC65F5} ©
O42 - Logiciel: ASUS CopyProtect - (.ASUS.) [HKLM][64Bits] -- {6B77A7F6-DD63-4F13-A6FF-83137A5AC354} ©
O42 - Logiciel: ATK Hotkey - (.ASUS.) [HKLM][64Bits] -- {7C05592D-424B-46CB-B505-E0013E8E75C9} ©
O42 - Logiciel: Google Earth - (.Google.) [HKLM][64Bits] -- {817750FA-EC6A-485D-9901-0683AE6FFDF1} ©
O42 - Logiciel: MSXML 4.0 SP3 Parser (KB973685) - (.Microsoft Corporation.) [HKLM][64Bits] -- {859DFA95-E4A6-48CD-B88E-A3E483E89B44} ©
O42 - Logiciel: Microsoft Sync Framework Runtime Native v1.0 (x86) - (.Microsoft Corporation.) [HKLM][64Bits] -- {8A74E887-8F0F-4017-AF53-CBA42211AAA5} ©
O42 - Logiciel: Facebook Video Calling 2.0.0.447 - (.Skype Limited.) [HKLM][64Bits] -- {8DF41A9F-FE13-43E8-A003-5F9B55A011EE} ©
O42 - Logiciel: Choice Guard - (.Microsoft Corporation.) [HKLM][64Bits] -- {8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E} ©
O42 - Logiciel: HP Update - (.Hewlett-Packard.) [HKLM][64Bits] -- {912D30CF-F39E-4B31-AD9A-123C6B794EE2} ©
O42 - Logiciel: Pando Media Booster - (.Pando Networks Inc..) [HKLM][64Bits] -- {980A182F-E0A2-4A40-94C1-AE0C1235902E} ©
O42 - Logiciel: ASUS MultiFrame - (.ASUS.) [HKLM][64Bits] -- {9D48531D-2135-49FC-BC29-ACCDA5396A76} ©
O42 - Logiciel: Adobe Refresh Manager - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-0804-1033-1959-001824147215} ©
O42 - Logiciel: Adobe Reader XI (11.0.12) - Français - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-7AD7-1036-7B44-AB0000000001} ©
O42 - Logiciel: HPDiagnosticAlert - (.Microsoft.) [HKLM][64Bits] -- {B6465A32-8BE9-4B38-ADC5-4B4BDDC10B0D} ©
O42 - Logiciel: Skype Click to Call - (.Skype Technologies S.A..) [HKLM][64Bits] -- {B6CF2967-C81E-40C0-9815-C05774FEF120} ©
O42 - Logiciel: HP ENVY 4500 series Aide - (.Hewlett Packard.) [HKLM][64Bits] -- {BAF28CCD-121D-4C6C-B29D-4F7B51B2D1B4} ©
O42 - Logiciel: Microsoft Sync Framework Services Native v1.0 (x86) - (.Microsoft Corporation.) [HKLM][64Bits] -- {BD64AF4A-8C80-4152-AD77-FCDDF05208AB} ©
O42 - Logiciel: CyberLink LabelPrint - (.CyberLink Corp..) [HKLM][64Bits] -- {C59C179C-668D-49A9-B6EA-0121CCFC1243} ©
O42 - Logiciel: NetAssistant - (.Freeze.com.) [HKLM][64Bits] -- {C792A75A-2A1F-4991-9B85-291745478A79}
O42 - Logiciel: ATK Media - (.ASUS.) [HKLM][64Bits] -- {D1E5870E-E3E5-4475-98A6-ADD614524ADF} ©
O42 - Logiciel: ATK Generic Function Service - (.ATK.) [HKLM][64Bits] -- {D3D54F3E-C5C3-443D-978F-87A72E5616E8} ©
O42 - Logiciel: WinFlash - (...) [HKLM][64Bits] -- {DE10AB76-4756-4913-BE25-55D1C1051F9A}
O42 - Logiciel: Adobe Download Assistant - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {E1845F1C-068C-F8F4-D31D-D3540D47C453} ©
O42 - Logiciel: Google SketchUp 8 - (.Google, Inc..) [HKLM][64Bits] -- {E3F4EA31-41D7-4789-9AC4-F26CDAF797BA} ©
O42 - Logiciel: ASUS Live Update - (.ASUS.) [HKLM][64Bits] -- {E657B243-9AD4-4ECC-BE81-4CCF8D667FD0} ©
O42 - Logiciel: Avira Launcher v1.1.45.11819 - (.Avira Operations GmbH & Co. KG.) [HKLM][64Bits] -- {EA226E08-91E7-4F05-B61E-3EDBBBEB15BB} ©
O42 - Logiciel: ASUS Virtual Camera - (.asus.) [HKLM][64Bits] -- {EC8BD21F-0CA0-4BBF-97D9-4A52B30041A1} ©
O42 - Logiciel: ASUS Data Security Manager - (.ASUS.) [HKLM][64Bits] -- {FA2092C5-7979-412D-A962-6485274AE1EE} ©
O42 - Logiciel: PhotoFiltre 7 - (...) [HKCU][64Bits] -- PhotoFiltre 7
O42 - Logiciel: Winamax - (.Winamax.) [HKCU][64Bits] -- Winamax 3.9.0 ©

---\\ HKCU & HKLM Software Keys (93) - 8s
HKLM\SOFTWARE\Wow6432Node\Adobe
HKLM\SOFTWARE\Wow6432Node\ALWIL Software
HKLM\SOFTWARE\Wow6432Node\AsLdr
HKLM\SOFTWARE\Wow6432Node\ASUS
HKLM\SOFTWARE\Wow6432Node\Atheros
HKLM\SOFTWARE\Wow6432Node\Atheros Communications Inc.
HKLM\SOFTWARE\Wow6432Node\ATK
HKLM\SOFTWARE\Wow6432Node\AVAST Software
HKLM\SOFTWARE\Wow6432Node\Avira
HKLM\SOFTWARE\Wow6432Node\Babylon =>PUP.Optional.Babylon
HKLM\SOFTWARE\Wow6432Node\CDDB
HKLM\SOFTWARE\Wow6432Node\CyberLink
HKLM\SOFTWARE\Wow6432Node\Dofus 2
HKLM\SOFTWARE\Wow6432Node\ECAREME
HKLM\SOFTWARE\Wow6432Node\Freeze.com =>PUP.Optional.Freeze
HKLM\SOFTWARE\Wow6432Node\Google
HKLM\SOFTWARE\Wow6432Node\Hewlett-Packard
HKLM\SOFTWARE\Wow6432Node\IM Providers
HKLM\SOFTWARE\Wow6432Node\InstallShield
HKLM\SOFTWARE\Wow6432Node\Intel
HKLM\SOFTWARE\Wow6432Node\JavaSoft
HKLM\SOFTWARE\Wow6432Node\JreMetrics
HKLM\SOFTWARE\Wow6432Node\Licenses
HKLM\SOFTWARE\Wow6432Node\LOLReplay
HKLM\SOFTWARE\Wow6432Node\Macromedia
HKLM\SOFTWARE\Wow6432Node\Macrovision
HKLM\SOFTWARE\Wow6432Node\McAfee.com
HKLM\SOFTWARE\Wow6432Node\mcafeeupdater
HKLM\SOFTWARE\Wow6432Node\MimarSinan
HKLM\SOFTWARE\Wow6432Node\Mooii
HKLM\SOFTWARE\Wow6432Node\Mozilla
HKLM\SOFTWARE\Wow6432Node\mozilla.org
HKLM\SOFTWARE\Wow6432Node\MozillaPlugins
HKLM\SOFTWARE\Wow6432Node\Oberon Media
HKLM\SOFTWARE\Wow6432Node\ODBC
HKLM\SOFTWARE\Wow6432Node\OfferBox =>PUP.Optional.OfferBox
HKLM\SOFTWARE\Wow6432Node\OpenOffice.org
HKLM\SOFTWARE\Wow6432Node\Pando Networks
HKLM\SOFTWARE\Wow6432Node\Riot Games
HKLM\SOFTWARE\Wow6432Node\RocketLife
HKLM\SOFTWARE\Wow6432Node\Skype
HKLM\SOFTWARE\Wow6432Node\Sony Corporation
HKLM\SOFTWARE\Wow6432Node\Valve
HKLM\SOFTWARE\Wow6432Node\VIA Technologies, Inc
HKLM\SOFTWARE\Wow6432Node\Visan
HKLM\SOFTWARE\Wow6432Node\W3i
HKLM\SOFTWARE\Wow6432Node\Windows
HKLM\SOFTWARE\Wow6432Node\X-AVCSD
HKLM\SOFTWARE\Wow6432Node\Yahoo
HKLM\SOFTWARE\Wow6432Node\RegisteredApplications
HKCU\SOFTWARE\Adobe
HKCU\SOFTWARE\AppDataLow
HKCU\SOFTWARE\ATK0100
HKCU\SOFTWARE\AVAST Software
HKCU\SOFTWARE\Avira
HKCU\SOFTWARE\Bugsplat
HKCU\SOFTWARE\CDDB
HKCU\SOFTWARE\CyberLink
HKCU\SOFTWARE\ECAREME
HKCU\SOFTWARE\Elantech
HKCU\SOFTWARE\Google
HKCU\SOFTWARE\Hewlett-Packard
HKCU\SOFTWARE\HP
HKCU\SOFTWARE\IM Providers
HKCU\SOFTWARE\Intel
HKCU\SOFTWARE\JavaSoft
HKCU\SOFTWARE\Local AppWizard-Generated Applications
HKCU\SOFTWARE\Macromedia
HKCU\SOFTWARE\MCAFEE
HKCU\SOFTWARE\MediaFinder =>PUP.Optional.MediaFinder
HKCU\SOFTWARE\Mozilla
HKCU\SOFTWARE\MozillaPlugins
HKCU\SOFTWARE\Netscape
HKCU\SOFTWARE\ODBC
HKCU\SOFTWARE\OpenOffice.org
HKCU\SOFTWARE\PhotoFiltre 7
HKCU\SOFTWARE\PokerStove
HKCU\SOFTWARE\Samsung
HKCU\SOFTWARE\Skype
HKCU\SOFTWARE\Softonic =>PUP.Optional.Softonic
HKCU\SOFTWARE\Somoto Toolbar =>PUP.Optional.MegaSearch
HKCU\SOFTWARE\Sony Corporation
HKCU\SOFTWARE\SRS Labs
HKCU\SOFTWARE\TeleCharger
HKCU\SOFTWARE\Trolltech
HKCU\SOFTWARE\Visan
HKCU\SOFTWARE\Windows Live Writer
HKCU\SOFTWARE\Wow6432Node
HKCU\SOFTWARE\ZebHelpProcess Helper
HKCU\SOFTWARE\로컬 응용 프로그램 마법사에서 생성된 응용 프로그램
HKCU\SOFTWARE\AppDataLow\Software
HKCU\SOFTWARE\AppDataLow\Software\Google
HKCU\SOFTWARE\AppDataLow\Software\JavaSoft

---\\ Contenu des dossiers Programmes (189) - 15s
O43 - CFD: 2012/10/24 18:54:13 - [] D -- C:\Program Files (x86)\Adobe
O43 - CFD: 2011/12/26 18:47:02 - [] D -- C:\Program Files (x86)\Adobe Media Player
O43 - CFD: 2010/04/23 10:40:25 - [] D -- C:\Program Files (x86)\AmIcoSingLun
O43 - CFD: 2013/10/05 14:20:00 - [] D -- C:\Program Files (x86)\ASUS
O43 - CFD: 2010/04/23 10:40:49 - [] D -- C:\Program Files (x86)\Atheros
O43 - CFD: 2015/09/01 20:11:04 - [] D -- C:\Program Files (x86)\Avira
O43 - CFD: 2015/04/16 20:56:54 - [] D -- C:\Program Files (x86)\Common Files
O43 - CFD: 2011/09/11 13:32:43 - [] D -- C:\Program Files (x86)\crocpopup+
O43 - CFD: 2010/04/23 10:13:47 - [] D -- C:\Program Files (x86)\CyberLink
O43 - CFD: 2011/07/02 00:30:05 - [] D -- C:\Program Files (x86)\File Type Assistant =>Adware.InstallCore
O43 - CFD: 2011/07/02 00:29:56 - [] D -- C:\Program Files (x86)\FinalMediaPlayer
O43 - CFD: 2011/07/02 00:29:43 - [] D -- C:\Program Files (x86)\Freeze.com =>PUP.Optional.Freeze
O43 - CFD: 2013/10/05 14:17:28 - [] D -- C:\Program Files (x86)\GIMP-2.0
O43 - CFD: 2015/06/13 18:54:21 - [] D -- C:\Program Files (x86)\Google
O43 - CFD: 2014/05/27 19:46:13 - [] D -- C:\Program Files (x86)\Hewlett-Packard
O43 - CFD: 2014/05/27 19:46:06 - [] D -- C:\Program Files (x86)\HP
O43 - CFD: 2014/05/27 19:46:12 - [] D -- C:\Program Files (x86)\HP Photo Creations
O43 - CFD: 2013/12/21 01:06:50 - [] HD -- C:\Program Files (x86)\InstallShield Installation Information
O43 - CFD: 2013/04/10 19:48:25 - [] D -- C:\Program Files (x86)\Internet Explorer
O43 - CFD: 2011/12/06 08:15:18 - [] D -- C:\Program Files (x86)\Microsoft
O43 - CFD: 2012/01/22 17:03:49 - [] D -- C:\Program Files (x86)\Microsoft Office
O43 - CFD: 2010/09/21 01:11:34 - [] D -- C:\Program Files (x86)\Microsoft Office Outlook Connector
O43 - CFD: 2015/08/13 08:42:32 - [] D -- C:\Program Files (x86)\Microsoft Silverlight
O43 - CFD: 2010/09/21 01:09:21 - [] D -- C:\Program Files (x86)\Microsoft SQL Server Compact Edition
O43 - CFD: 2010/09/21 01:10:56 - [] D -- C:\Program Files (x86)\Microsoft Sync Framework
O43 - CFD: 2010/09/21 09:06:23 - [] D -- C:\Program Files (x86)\Microsoft Visual Studio
O43 - CFD: 2010/09/21 09:03:10 - [] D -- C:\Program Files (x86)\Microsoft Visual Studio 8
O43 - CFD: 2010/09/21 09:30:14 - [] D -- C:\Program Files (x86)\Microsoft Works
O43 - CFD: 2011/08/21 15:11:53 - [] D -- C:\Program Files (x86)\Microsoft XNA
O43 - CFD: 2011/06/23 03:13:02 - [] D -- C:\Program Files (x86)\Microsoft.NET
O43 - CFD: 2011/12/12 20:03:09 - [] D -- C:\Program Files (x86)\Movie Maker 2.6
O43 - CFD: 2015/08/28 18:33:01 - [] D -- C:\Program Files (x86)\Mozilla Firefox
O43 - CFD: 2015/08/28 18:33:01 - [] D -- C:\Program Files (x86)\Mozilla Maintenance Service
O43 - CFD: 2015/05/31 12:02:12 - [] D -- C:\Program Files (x86)\Mozilla Thunderbird
O43 - CFD: 2010/09/21 09:06:30 - [] D -- C:\Program Files (x86)\MSBuild
O43 - CFD: 2010/04/23 10:34:45 - [] D -- C:\Program Files (x86)\MSXML 4.0
O43 - CFD: 2011/09/06 11:01:21 - [] D -- C:\Program Files (x86)\OfferBox =>PUP.Optional.OfferBox
O43 - CFD: 2012/02/24 09:32:10 - [] D -- C:\Program Files (x86)\OpenOffice.org 3
O43 - CFD: 2011/06/20 17:58:54 - [] D -- C:\Program Files (x86)\Pando Networks
O43 - CFD: 2011/09/18 16:20:37 - [] D -- C:\Program Files (x86)\PhotoFiltre
O43 - CFD: 2011/12/21 23:46:29 - [] D -- C:\Program Files (x86)\PhotoScape
O43 - CFD: 2009/07/14 07:32:38 - [] D -- C:\Program Files (x86)\Reference Assemblies
O43 - CFD: 2015/04/16 20:56:54 - [] RD -- C:\Program Files (x86)\Skype
O43 - CFD: 2009/07/14 06:57:06 - [0] HD -- C:\Program Files (x86)\Uninstall Information
O43 - CFD: 2010/04/23 10:39:48 - [] D -- C:\Program Files (x86)\VIA
O43 - CFD: 2012/01/18 17:29:22 - [0] D -- C:\Program Files (x86)\Wakfu
O43 - CFD: 2011/06/27 21:29:24 - [] D -- C:\Program Files (x86)\Windows Defender
O43 - CFD: 2014/12/24 19:07:10 - [] D -- C:\Program Files (x86)\Windows Games
O43 - CFD: 2011/12/17 12:11:43 - [] D -- C:\Program Files (x86)\Windows Live
O43 - CFD: 2010/09/21 01:08:06 - [] D -- C:\Program Files (x86)\Windows Live SkyDrive
O43 - CFD: 2011/06/27 21:29:24 - [] D -- C:\Program Files (x86)\Windows Mail
O43 - CFD: 2011/06/27 21:29:24 - [] D -- C:\Program Files (x86)\Windows Media Player
O43 - CFD: 2009/07/14 07:32:38 - [] D -- C:\Program Files (x86)\Windows NT
O43 - CFD: 2011/06/27 21:29:24 - [] D -- C:\Program Files (x86)\Windows Photo Viewer
O43 - CFD: 2009/07/14 07:32:40 - [] D -- C:\Program Files (x86)\Windows Portable Devices
O43 - CFD: 2011/06/27 21:29:24 - [] D -- C:\Program Files (x86)\Windows Sidebar
O43 - CFD: 2015/07/21 20:51:00 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 2009/07/14 06:57:13 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 2011/12/26 18:47:02 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe
O43 - CFD: 2010/04/23 10:25:25 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS
O43 - CFD: 2010/04/23 10:42:04 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS Utility
O43 - CFD: 2015/09/04 21:12:50 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
O43 - CFD: 2013/10/17 17:23:25 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\bwin Poker
O43 - CFD: 2011/09/11 13:32:43 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\crocpopup+
O43 - CFD: 2011/10/09 12:19:44 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dofus 2
O43 - CFD: 2011/07/02 00:29:56 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FinalMediaPlayer
O43 - CFD: 2009/07/29 07:08:01 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
O43 - CFD: 2013/01/12 23:53:18 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
O43 - CFD: 2013/10/23 23:03:19 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google SketchUp 8
O43 - CFD: 2014/05/27 19:46:12 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
O43 - CFD: 2013/09/10 21:16:40 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
O43 - CFD: 2009/07/14 06:57:09 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 2012/02/01 10:41:52 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Finder =>PUP.Optional.MediaFinder
O43 - CFD: 2011/06/21 04:38:06 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
O43 - CFD: 2010/09/21 09:28:18 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Live Add-in
O43 - CFD: 2015/08/12 08:53:12 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
O43 - CFD: 2012/02/24 09:32:56 - [] SD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice.org 3.3
O43 - CFD: 2011/09/18 16:20:37 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhotoFiltre
O43 - CFD: 2012/02/14 20:26:26 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhotoFiltre 7
O43 - CFD: 2011/12/21 23:46:29 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhotoScape
O43 - CFD: 2015/04/16 20:56:56 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
O43 - CFD: 2015/07/18 12:23:56 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
O43 - CFD: 2011/08/21 12:41:58 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
O43 - CFD: 2009/07/14 09:44:38 - [0] RHD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC
O43 - CFD: 2014/12/24 19:07:10 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Games
O43 - CFD: 2010/09/21 01:11:24 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
O43 - CFD: 2013/04/19 10:11:10 - [] D -- C:\ProgramData\Adobe
O43 - CFD: 2010/09/20 20:49:06 - [] D -- C:\ProgramData\Alwil Software
O43 - CFD: 2010/04/23 10:40:25 - [] D -- C:\ProgramData\AmUStor
O43 - CFD: 2009/07/14 07:08:56 - [0] SHD -- C:\ProgramData\Application Data
O43 - CFD: 2012/09/01 23:28:15 - [] D -- C:\ProgramData\Ask
O43 - CFD: 2011/08/15 11:38:10 - [] D -- C:\ProgramData\ASUS
O43 - CFD: 2012/01/18 18:51:09 - [] D -- C:\ProgramData\ASUS WebStorage
O43 - CFD: 2010/04/23 10:40:55 - [] D -- C:\ProgramData\Atheros
O43 - CFD: 2015/09/01 20:11:04 - [] D -- C:\ProgramData\Avira
O43 - CFD: 2012/01/19 20:43:54 - [0] D -- C:\ProgramData\Babylon =>PUP.Optional.Babylon
O43 - CFD: 2014/12/27 14:05:42 - [] D -- C:\ProgramData\CyberLink
O43 - CFD: 2009/07/14 07:08:56 - [0] SHD -- C:\ProgramData\Desktop
O43 - CFD: 2009/07/14 07:08:56 - [0] SHD -- C:\ProgramData\Documents
O43 - CFD: 2009/07/14 07:08:56 - [0] SHD -- C:\ProgramData\Favorites
O43 - CFD: 2011/12/26 18:58:37 - [] D -- C:\ProgramData\FLEXnet
O43 - CFD: 2013/10/23 23:04:24 - [] D -- C:\ProgramData\Google
O43 - CFD: 2014/05/27 19:45:44 - [] D -- C:\ProgramData\HP
O43 - CFD: 2014/05/27 19:46:12 - [] D -- C:\ProgramData\HP Photo Creations
O43 - CFD: 2015/07/02 04:13:24 - [] D -- C:\ProgramData\McAfee
O43 - CFD: 2015/09/17 11:07:51 - [] SD -- C:\ProgramData\Microsoft
O43 - CFD: 2015/09/11 09:21:49 - [] D -- C:\ProgramData\Microsoft Help
O43 - CFD: 2012/04/26 21:02:48 - [] D -- C:\ProgramData\Mozilla
O43 - CFD: 2014/05/24 17:12:09 - [0] D -- C:\ProgramData\Oracle
O43 - CFD: 2010/04/23 10:41:28 - [] D -- C:\ProgramData\P4G
O43 - CFD: 2015/09/05 21:32:41 - [] D -- C:\ProgramData\Package Cache
O43 - CFD: 2011/06/20 22:20:01 - [] D -- C:\ProgramData\Partner =>Toolbar.YahooPartner
O43 - CFD: 2012/01/15 02:22:27 - [] D -- C:\ProgramData\PMB Files
O43 - CFD: 2015/04/16 20:56:52 - [] D -- C:\ProgramData\Skype
O43 - CFD: 2009/07/14 07:08:56 - [0] SHD -- C:\ProgramData\Start Menu
O43 - CFD: 2011/07/03 16:18:56 - [] D -- C:\ProgramData\Sun
O43 - CFD: 2011/08/21 03:33:07 - [] AD -- C:\ProgramData\Temp
O43 - CFD: 2009/07/14 07:08:56 - [0] SHD -- C:\ProgramData\Templates
O43 - CFD: 2014/05/27 19:46:12 - [] D -- C:\ProgramData\Visan
O43 - CFD: 2013/09/18 18:17:50 - [] D -- C:\ProgramData\WEBREG
O43 - CFD: 2012/10/24 18:54:16 - [] D -- C:\Program Files (x86)\Common Files\Adobe
O43 - CFD: 2015/05/12 15:28:42 - [] D -- C:\Program Files (x86)\Common Files\Adobe AIR
O43 - CFD: 2014/05/15 21:06:04 - [] D -- C:\Program Files (x86)\Common Files\DESIGNER
O43 - CFD: 2013/09/18 13:47:34 - [] D -- C:\Program Files (x86)\Common Files\Hewlett-Packard
O43 - CFD: 2010/04/23 10:41:25 - [] D -- C:\Program Files (x86)\Common Files\InstallShield
O43 - CFD: 2012/03/29 11:11:39 - [] D -- C:\Program Files (x86)\Common Files\microsoft shared
O43 - CFD: 2010/04/23 10:25:45 - [] D -- C:\Program Files (x86)\Common Files\Oberon Media
O43 - CFD: 2009/07/14 05:20:08 - [] D -- C:\Program Files (x86)\Common Files\Services
O43 - CFD: 2015/04/16 20:56:54 - [] D -- C:\Program Files (x86)\Common Files\Skype
O43 - CFD: 2009/07/14 05:20:08 - [] D -- C:\Program Files (x86)\Common Files\SpeechEngines
O43 - CFD: 2012/01/12 22:52:04 - [] D -- C:\Program Files (x86)\Common Files\Steam
O43 - CFD: 2011/11/11 16:08:36 - [] D -- C:\Program Files (x86)\Common Files\System
O43 - CFD: 2010/09/21 01:06:15 - [] D -- C:\Program Files (x86)\Common Files\Windows Live
O43 - CFD: 2014/11/14 17:24:04 - [] D -- C:\Users\Anne-Marie\AppData\Roaming\Adobe
O43 - CFD: 2012/01/18 19:18:37 - [] D -- C:\Users\Anne-Marie\AppData\Roaming\ASUS WebStorage
O43 - CFD: 2015/04/07 20:43:50 - [] D -- C:\Users\Anne-Marie\AppData\Roaming\Avira
O43 - CFD: 2012/01/19 20:43:54 - [] D -- C:\Users\Anne-Marie\AppData\Roaming\Babylon =>PUP.Optional.Babylon
O43 - CFD: 2015/05/12 15:37:44 - [] D -- C:\Users\Anne-Marie\AppData\Roaming\com.winamax.chat
O43 - CFD: 2014/12/27 14:05:48 - [] D -- C:\Users\Anne-Marie\AppData\Roaming\CyberLink
O43 - CFD: 2013/06/09 17:45:09 - [] D -- C:\Users\Anne-Marie\AppData\Roaming\GetRightToGo
O43 - CFD: 2013/10/23 23:04:24 - [] D -- C:\Users\Anne-Marie\AppData\Roaming\Google
O43 - CFD: 2013/09/18 18:17:50 - [] D -- C:\Users\Anne-Marie\AppData\Roaming\HP
O43 - CFD: 2014/10/15 11:32:58 - [] D -- C:\Users\Anne-Marie\AppData\Roaming\HpUpdate
O43 - CFD: 2012/01/18 19:15:18 - [] D -- C:\Users\Anne-Marie\AppData\Roaming\Identities
O43 - CFD: 2011/10/09 12:19:42 - [] D -- C:\Users\Anne-Marie\AppData\Roaming\Macromedia
O43 - CFD: 2009/07/14 09:44:38 - [0] D -- C:\Users\Anne-Marie\AppData\Roaming\Media Center Programs
O43 - CFD: 2012/02/01 10:41:52 - [] D -- C:\Users\Anne-Marie\AppData\Roaming\Media Finder =>PUP.Optional.MediaFinder
O43 - CFD: 2015/08/03 16:05:23 - [] SD -- C:\Users\Anne-Marie\AppData\Roaming\Microsoft
O43 - CFD: 2012/01/18 20:13:29 - [] D -- C:\Users\Anne-Marie\AppData\Roaming\Mozilla
O43 - CFD: 2012/02/24 09:34:32 - [] D -- C:\Users\Anne-Marie\AppData\Roaming\OpenOffice.org
O43 - CFD: 2012/02/14 20:55:13 - [] D -- C:\Users\Anne-Marie\AppData\Roaming\PhotoFiltre 7
O43 - CFD: 2014/05/25 17:30:44 - [0] D -- C:\Users\Anne-Marie\AppData\Roaming\Samsung
O43 - CFD: 2015/08/31 17:59:57 - [] D -- C:\Users\Anne-Marie\AppData\Roaming\Skype
O43 - CFD: 2012/09/05 22:25:50 - [] D -- C:\Users\Anne-Marie\AppData\Roaming\Sony Corporation
O43 - CFD: 2012/01/22 16:39:18 - [] D -- C:\Users\Anne-Marie\AppData\Roaming\Thunderbird
O43 - CFD: 2013/10/22 19:32:21 - [] D -- C:\Users\Anne-Marie\AppData\Roaming\wam
O43 - CFD: 2015/05/12 15:36:06 - [] D -- C:\Users\Anne-Marie\AppData\Roaming\wam.04351C371E530C3762CBA45FA283ED972DCDEFB6.1
O43 - CFD: 2014/01/25 16:39:17 - [0] D -- C:\Users\Anne-Marie\AppData\Roaming\Windows Live Writer
O43 - CFD: 2015/09/17 11:14:30 - [] D -- C:\Users\Anne-Marie\AppData\Roaming\ZHP
O43 - CFD: 2015/07/02 04:13:36 - [] D -- C:\Users\Anne-Marie\AppData\Local\Adobe
O43 - CFD: 2012/01/18 19:14:54 - [0] SHD -- C:\Users\Anne-Marie\AppData\Local\Application Data
O43 - CFD: 2012/01/19 20:43:54 - [] D -- C:\Users\Anne-Marie\AppData\Local\Babylon =>PUP.Optional.Babylon
O43 - CFD: 2015/08/17 22:58:58 - [] D -- C:\Users\Anne-Marie\AppData\Local\Diagnostics
O43 - CFD: 2015/09/10 21:49:21 - [0] D -- C:\Users\Anne-Marie\AppData\Local\ElevatedDiagnostics
O43 - CFD: 2015/08/10 20:17:39 - [] D -- C:\Users\Anne-Marie\AppData\Local\Google
O43 - CFD: 2012/01/18 19:14:54 - [0] SHD -- C:\Users\Anne-Marie\AppData\Local\Historique
O43 - CFD: 2014/05/27 19:46:13 - [] D -- C:\Users\Anne-Marie\AppData\Local\HP
O43 - CFD: 2012/11/16 09:03:49 - [] D -- C:\Users\Anne-Marie\AppData\Local\LogMeIn Hamachi
O43 - CFD: 2012/06/22 20:28:22 - [] D -- C:\Users\Anne-Marie\AppData\Local\Macromedia
O43 - CFD: 2015/09/17 11:07:50 - [] D -- C:\Users\Anne-Marie\AppData\Local\Microsoft
O43 - CFD: 2015/08/19 13:23:13 - [] D -- C:\Users\Anne-Marie\AppData\Local\Microsoft Games
O43 - CFD: 2011/06/21 04:37:46 - [0] D -- C:\Users\Anne-Marie\AppData\Local\Microsoft Help
O43 - CFD: 2013/10/05 14:09:32 - [] D -- C:\Users\Anne-Marie\AppData\Local\Mozilla
O43 - CFD: 2013/10/02 13:21:15 - [] D -- C:\Users\Anne-Marie\AppData\Local\P5
O43 - CFD: 2012/01/18 19:16:09 - [] D -- C:\Users\Anne-Marie\AppData\Local\Power2Go
O43 - CFD: 2014/04/12 06:40:59 - [] D -- C:\Users\Anne-Marie\AppData\Local\Skype
O43 - CFD: 2015/09/17 11:13:07 - [] D -- C:\Users\Anne-Marie\AppData\Local\Temp
O43 - CFD: 2012/01/18 19:14:54 - [0] SHD -- C:\Users\Anne-Marie\AppData\Local\Temporary Internet Files
O43 - CFD: 2015/03/29 17:23:22 - [] D -- C:\Users\Anne-Marie\AppData\Local\Thunderbird
O43 - CFD: 2013/12/21 01:15:33 - [] D -- C:\Users\Anne-Marie\AppData\Local\VirtualStore
O43 - CFD: 2014/01/25 16:39:18 - [] D -- C:\Users\Anne-Marie\AppData\Local\Windows Live Writer
O43 - CFD: 2012/02/05 19:07:28 - [0] D -- C:\Users\Anne-Marie\AppData\Local\WMTools Downloaded Files
O43 - CFD: 2009/07/14 06:54:32 - [] RD -- C:\Users\Anne-Marie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 2012/07/28 14:54:00 - [] RD -- C:\Users\Anne-Marie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 2010/04/23 10:13:56 - [] D -- C:\Users\Anne-Marie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink Blu-ray Disc Suite
O43 - CFD: 2009/07/14 06:49:38 - [] RD -- C:\Users\Anne-Marie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 2012/02/14 20:26:26 - [0] D -- C:\Users\Anne-Marie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PhotoFiltre 7
O43 - CFD: 2015/05/08 12:59:55 - [] RD -- C:\Users\Anne-Marie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
O43 - CFD: 2015/05/12 15:35:37 - [] D -- C:\Users\Anne-Marie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Winamax

---\\ Enumération des clés StartupReg (14) - 1s
O53 - SMSR:HKLM\...\startupreg\Adobe Reader Speed Launcher [Key] . (...) -- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\ADSMTray [Key] . (.ASUSTek Computer Inc. - ADSMTray.) -- C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMTray.exe ©
O53 - SMSR:HKLM\...\startupreg\ASUS Camera ScreenSaver [Key] . (.ASUS - AsScrProlog.) -- C:\Windows\AsScrProlog.exe ©
O53 - SMSR:HKLM\...\startupreg\ASUS Screen Saver Protector [Key] . (.ASUS - AsScrPro.) -- C:\Windows\AsScrPro.exe ©
O53 - SMSR:HKLM\...\startupreg\avast5 [Key] . (...) -- C:\Program Files\Alwil Software\Avast5\avastUI.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\CLMLServer [Key] . (.CyberLink - CyberLink MediaLibray Service.) -- C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe ©
O53 - SMSR:HKLM\...\startupreg\ETDWare [Key] . (.ELAN Microelectronic Corp. - ETD Control Center.) -- C:\Program Files\Elantech\ETDCtrl.exe ©
O53 - SMSR:HKLM\...\startupreg\HP ENVY 4500 series (NET) [Key] . (.Hewlett-Packard Co. - ScanToPCActivationApp.) -- C:\Program Files\HP\HP ENVY 4500 series\Bin\ScanToPCActivationApp.exe ©
O53 - SMSR:HKLM\...\startupreg\HP Software Update [Key] . (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe ©
O53 - SMSR:HKLM\...\startupreg\Media Finder [Key] . (...) -- C:\Program Files (x86)\Media Finder\MF.exe (.not file.) =>PUP.Optional.MediaFinder
O53 - SMSR:HKLM\...\startupreg\Setwallpaper [Key] . (...) -- c:\programdata\SetWallpaper.cmd (.not file.)
O53 - SMSR:HKLM\...\startupreg\swg [Key] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe ©
O53 - SMSR:HKLM\...\startupreg\UpdateLBPShortCut [Key] . (.CyberLink Corp. - MUI StartMenu Application.) -- C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe ©
O53 - SMSR:HKLM\...\startupreg\UpdateP2GoShortCut [Key] . (.CyberLink Corp. - MUI StartMenu Application.) -- C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe ©

---\\ Liste des pilotes du système (68) - 22s
O58 - SDL:2008/06/27 08:51:10 A . (.Adobe Systems, Inc. - Adobe Drive File System Driver.) -- C:\Windows\System32\drivers\adfs.sys [88632] ©
O58 - SDL:2009/07/14 03:52:21 A . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\drivers\adp94xx.sys [491088] ©
O58 - SDL:2009/07/14 03:52:21 A . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\System32\drivers\adpahci.sys [339536] ©
O58 - SDL:2009/07/14 03:52:21 A . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver (X64).) -- C:\Windows\System32\drivers\adpu320.sys [182864] ©
O58 - SDL:2009/07/14 03:52:21 A . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\Windows\System32\drivers\aliide.sys [15440] ©
O58 - SDL:2011/03/11 08:22:41 A . (.Advanced Micro Devices - AHCI 1.2 Device Driver.) -- C:\Windows\System32\drivers\amdsata.sys [107904] ©
O58 - SDL:2009/07/14 03:52:20 A . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller D.) -- C:\Windows\System32\drivers\amdsbs.sys [194128] ©
O58 - SDL:2011/03/11 08:22:40 A . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\Windows\System32\drivers\amdxata.sys [27008] ©
O58 - SDL:2009/05/26 15:32:37 A . (.Alcor Micro, Corp. - Alocr Micro USB Mass Storage Driver.) -- C:\Windows\System32\drivers\AmUStor.sys [40448] ©
O58 - SDL:2009/07/14 03:52:21 A . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\System32\drivers\arc.sys [87632] ©
O58 - SDL:2009/07/14 03:52:21 A . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\System32\drivers\arcsas.sys [97856] ©
O58 - SDL:2010/04/23 10:41:48 A . (.ASUSTek Computer Inc - Data Security Manager Driver.) -- C:\Windows\System32\drivers\AsDsm.sys [35384]
O58 - SDL:2009/10/05 16:34:00 A . (.Atheros Communications, Inc. - Atheros Extensible Wireless LAN device driv.) -- C:\Windows\System32\drivers\athrx.sys [1542656] ©
O58 - SDL:2009/05/13 03:07:19 A . (.ASUS - ATK0100 ACPI Utility.) -- C:\Windows\System32\drivers\ATK64AMD.sys [15928] ©
O58 - SDL:2015/09/01 20:09:20 A . (.Avira Operations GmbH & Co. KG - Avira Minifilter Driver.) -- C:\Windows\System32\drivers\avgntflt.sys [162528] ©
O58 - SDL:2015/09/01 20:09:20 A . (.Avira Operations GmbH & Co. KG - Avira Driver for Security Enhancement.) -- C:\Windows\System32\drivers\avipbb.sys [141416] ©
O58 - SDL:2013/11/27 14:06:21 A . (.Avira Operations GmbH & Co. KG - Avira Manager Driver.) -- C:\Windows\System32\drivers\avkmgr.sys [28600] ©
O58 - SDL:2015/03/11 00:38:35 A . (.Avira Operations GmbH & Co. KG - Avira WFP Network Driver.) -- C:\Windows\System32\drivers\avnetflt.sys [44088] ©
O58 - SDL:2009/06/10 22:34:23 A . (.Broadcom Corporation - Broadcom NetXtreme Gigabit Ethernet NDIS6.x.) -- C:\Windows\System32\drivers\b57nd60a.sys [270848] ©
O58 - SDL:2009/06/10 22:41:06 A . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower.) -- C:\Windows\System32\drivers\BrFiltLo.sys [18432] ©
O58 - SDL:2009/06/10 22:41:06 A . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper.) -- C:\Windows\System32\drivers\BrFiltUp.sys [8704] ©
O58 - SDL:2009/07/14 03:19:07 A . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\System32\drivers\BrSerId.sys [286720] ©
O58 - SDL:2009/06/10 22:41:10 A . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\System32\drivers\BrSerWdm.sys [47104] ©
O58 - SDL:2009/06/10 22:41:10 A . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\System32\drivers\BrUsbMdm.sys [14976] ©
O58 - SDL:2009/06/10 22:41:10 A . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\System32\drivers\BrUsbSer.sys [14720] ©
O58 - SDL:2009/06/10 22:34:28 A . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.) -- C:\Windows\System32\drivers\bxvbda.sys [468480] ©
O58 - SDL:2009/07/14 03:52:31 A . (.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\cmdide.sys [17488] ©
O58 - SDL:2009/07/14 03:47:48 A . (.Emulex - Storport Miniport Driver for LightPulse HBA.) -- C:\Windows\System32\drivers\elxstor.sys [530496] ©
O58 - SDL:2009/06/12 05:41:55 A . (.ELAN Microelectronic Corp. - ETD Control Center.) -- C:\Windows\System32\drivers\ETD.sys [112128] ©
O58 - SDL:2009/06/10 22:34:33 A . (.Broadcom Corporation - Broadcom NetXtreme II 10 GigE VBD.) -- C:\Windows\System32\drivers\evbda.sys [3286016] ©
O58 - SDL:2009/03/18 18:35:42 AH . (.LogMeIn, Inc. - Hamachi Virtual Network Interface Driver.) -- C:\Windows\System32\drivers\hamachi.sys [33856] ©
O58 - SDL:2009/06/10 22:31:59 A . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for.) -- C:\Windows\System32\drivers\hcw85cir.sys [31232] ©
O58 - SDL:2009/07/14 03:47:48 A . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Drive.) -- C:\Windows\System32\drivers\HpSAMD.sys [77888] ©
O58 - SDL:2009/06/04 12:54:35 A . (.Intel Corporation - Intel Matrix Storage Manager driver - x64.) -- C:\Windows\System32\drivers\iaStor.sys [408600] ©
O58 - SDL:2011/03/11 08:23:00 A . (.Intel Corporation - Intel Matrix Storage Manager driver - x64.) -- C:\Windows\System32\drivers\iaStorV.sys [410496] ©
O58 - SDL:2009/07/03 03:42:07 A . (.Intel Corporation - Intel Graphics Kernel Mode Driver.) -- C:\Windows\System32\drivers\igdkmd64.sys [7342432] ©
O58 - SDL:2009/07/14 03:48:04 A . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\System32\drivers\iirsp.sys [44112] ©
O58 - SDL:2009/05/25 22:13:09 A . (.Intel(R) Corporation - Intel(R) High Definition Audio HDMI.) -- C:\Windows\System32\drivers\IntcHdmi.sys [138752] ©
O58 - SDL:2009/07/20 11:29:39 A . (. - Keyboard Filter Driver.) -- C:\Windows\System32\drivers\kbfiltr.sys [15416]
O58 - SDL:2009/06/09 06:38:23 A . (.Atheros Communications, Inc. - Atheros AR8121/AR8113/AR8114 PCI-E Ethernet.) -- C:\Windows\System32\drivers\L1E62x64.sys [55296] ©
O58 - SDL:2009/07/14 03:48:04 A . (.LSI Corporation - LSI Fusion-MPT FC Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_fc.sys [114752] ©
O58 - SDL:2009/07/14 03:48:04 A . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas.sys [106560] ©
O58 - SDL:2009/07/14 03:48:04 A . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas2.sys [65600] ©
O58 - SDL:2009/07/14 03:48:04 A . (.LSI Corporation - LSI Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_scsi.sys [115776] ©
O58 - SDL:2009/06/18 21:18:10 A . (.Windows (R) Win 7 DDK provider - ASUS CopyProtect driver.) -- C:\Windows\System32\drivers\lullaby.sys [15928] ©
O58 - SDL:2009/07/14 03:48:04 A . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows.) -- C:\Windows\System32\drivers\megasas.sys [35392] ©
O58 - SDL:2009/07/14 03:48:04 A . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\System32\drivers\MegaSR.sys [284736] ©
O58 - SDL:2009/07/14 03:48:26 A . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\System32\drivers\nfrd960.sys [51264] ©
O58 - SDL:2011/03/11 08:23:06 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\System32\drivers\nvraid.sys [148352] ©
O58 - SDL:2011/03/11 08:23:06 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\System32\drivers\nvstor.sys [166272] ©
O58 - SDL:2009/07/14 03:45:46 A . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\Windows\System32\drivers\ql2300.sys [1524816] ©
O58 - SDL:2009/07/14 03:45:45 A . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\Windows\System32\drivers\ql40xx.sys [128592] ©
O58 - SDL:2009/06/10 22:37:19 A . (.Macrovision Corporation, Macrovision Europe Limited, - Macrovision SECURITY Driver.) -- C:\Windows\System32\drivers\secdrv.sys [23040] ©
O58 - SDL:2009/06/10 22:35:57 A . (.Silicon Integrated Systems Corp. - NDIS 6.0 Miniport Driver for SiS191/SiS190.) -- C:\Windows\System32\drivers\SiSG664.sys [56832] ©
O58 - SDL:2009/07/14 03:45:45 A . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\System32\drivers\sisraid2.sys [43584] ©
O58 - SDL:2009/07/14 03:45:46 A . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\System32\drivers\sisraid4.sys [80464] ©
O58 - SDL:2008/12/29 11:14:27 A . (.Copyright 2004-2007 - USBCAMD for Sonix UVC.) -- C:\Windows\System32\drivers\sncduvc.sys [35456]
O58 - SDL:2009/05/20 10:11:05 A . (.Copyright 2004-2008 - UVC Camera Streaming Driver.) -- C:\Windows\System32\drivers\snp2uvc.sys [1799680]
O58 - SDL:2009/09/19 05:30:14 A . (.MCCI - SAMSUNG USB Mobile Device.) -- C:\Windows\System32\drivers\ss_bbus.sys [127488] ©
O58 - SDL:2009/09/19 05:30:14 A . (.MCCI Corporation - SAMSUNG USB Mobile Device (Windows 2000/XP.) -- C:\Windows\System32\drivers\ss_bwh.sys [15872] ©
O58 - SDL:2009/09/19 05:30:14 A . (.MCCI Corporation - SAMSUNG USB Mobile Device (Windows 2000/XP.) -- C:\Windows\System32\drivers\ss_bwhnt.sys [15872] ©
O58 - SDL:2009/07/14 03:45:55 A . (.Promise Technology - Promise SuperTrak EX Series Driver for Win.) -- C:\Windows\System32\drivers\stexstor.sys [24656] ©
O58 - SDL:2009/07/09 10:11:31 A . (.VIA Technologies, Inc. - VIA High Definition Audio Function Driver.) -- C:\Windows\System32\drivers\viahduaa.sys [1222144] ©
O58 - SDL:2009/07/14 03:45:55 A . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\viaide.sys [17488] ©
O58 - SDL:2009/07/14 03:45:55 A . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\Windows\System32\drivers\vsmraid.sys [161872] ©
O58 - SDL:2015/03/11 20:31:48 A . (.Western Digital Technologies - WD SCSI Architecture Model (SAM) driver.) -- C:\Windows\System32\drivers\wdcsam64.sys [14464] ©
O58 - SDL:2009/06/06 00:10:10 A . (.Atheros Communications, Inc. - Atheros Extensible Wireless LAN device driv.) -- C:\Windows\System32\athrx.sys [1478144] ©
O58 - SDL:2009/03/18 17:35:42 AH . (.LogMeIn, Inc. - Hamachi Virtual Network Interface Driver.) -- C:\Windows\System32\hamachi.sys [33856] ©

---\\ Derniers fichiers modifiés ou crées (Utilisateur) (1) - 80s
O61 - LFC: 2015/09/14 21:56:28 A . (..) -- C:\Users\Anne-Marie\AppData\Local\Google\Chrome\User Data\ev_hashes_whitelist.bin [674082]

---\\ Associations Shell Spawning (11) - 0s
O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe ©
O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Ob.) -- C:\Windows\System32\eventvwr.exe ©
O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ©
O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\wscript.exe ©
O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe ©
O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S
O67 - Shell Spawning: <.html> [HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe ©

---\\ Menu de démarrage Internet (12) - 0s
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe ©
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ©
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - Utilitaire d’initialisation d’Internet Expl.) -- C:\Windows\System32\ie4uinit.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - Utilitaire d’initialisation d’Internet Expl.) -- C:\Windows\System32\ie4uinit.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - Utilitaire d’initialisation d’Internet Expl.) -- C:\Windows\System32\ie4uinit.exe ©

---\\ Recherche d'infection sur les navigateurs (35) - 15s
O69 - SBI: prefs.js [Anne-Marie - widsprfj.default] user_pref("browser.search.defaultengine", "Ask.com Search"); =>Toolbar.Ask
O69 - SBI: prefs.js [Anne-Marie - widsprfj.default] user_pref("browser.search.order.1", "Ask.com Search"); =>Toolbar.Ask
O69 - SBI: prefs.js [Anne-Marie - widsprfj.default] user_pref("somoto.Var1", "0"); =>PUP.Optional.MegaSearch
O69 - SBI: prefs.js [Anne-Marie - widsprfj.default] user_pref("somoto.Var10", "0"); =>PUP.Optional.MegaSearch
O69 - SBI: prefs.js [Anne-Marie - widsprfj.default] user_pref("somoto.Var2", "0"); =>PUP.Optional.MegaSearch
O69 - SBI: prefs.js [Anne-Marie - widsprfj.default] user_pref("somoto.Var3", "0"); =>PUP.Optional.MegaSearch
O69 - SBI: prefs.js [Anne-Marie - widsprfj.default] user_pref("somoto.Var4", "0"); =>PUP.Optional.MegaSearch
O69 - SBI: prefs.js [Anne-Marie - widsprfj.default] user_pref("somoto.Var5", "0"); =>PUP.Optional.MegaSearch
O69 - SBI: prefs.js [Anne-Marie - widsprfj.default] user_pref("somoto.Var6", "0"); =>PUP.Optional.MegaSearch
O69 - SBI: prefs.js [Anne-Marie - widsprfj.default] user_pref("somoto.Var7", "0"); =>PUP.Optional.MegaSearch
O69 - SBI: prefs.js [Anne-Marie - widsprfj.default] user_pref("somoto.Var8", "0"); =>PUP.Optional.MegaSearch
O69 - SBI: prefs.js [Anne-Marie - widsprfj.default] user_pref("somoto.Var9", "0"); =>PUP.Optional.MegaSearch
O69 - SBI: prefs.js [Anne-Marie - widsprfj.default] user_pref("somoto.bubble_height", "336"); =>PUP.Optional.MegaSearch
O69 - SBI: prefs.js [Anne-Marie - widsprfj.default] user_pref("somoto.bubble_screenx", "823"); =>PUP.Optional.MegaSearch
O69 - SBI: prefs.js [Anne-Marie - widsprfj.default] user_pref("somoto.bubble_screeny", "143"); =>PUP.Optional.MegaSearch
O69 - SBI: prefs.js [Anne-Marie - widsprfj.default] user_pref("somoto.bubble_scroll", "0"); =>PUP.Optional.MegaSearch
O69 - SBI: prefs.js [Anne-Marie - widsprfj.default] user_pref("somoto.bubble_src", "http%3A//www.facesmooch.com/moods_share.php%3Fa%3Dbigseekpro"); =>PUP.Optional.MegaSearch
O69 - SBI: prefs.js [Anne-Marie - widsprfj.default] user_pref("somoto.bubble_type", "0"); =>PUP.Optional.MegaSearch
O69 - SBI: prefs.js [Anne-Marie - widsprfj.default] user_pref("somoto.bubble_width", "513"); =>PUP.Optional.MegaSearch
O69 - SBI: prefs.js [Anne-Marie - widsprfj.default] user_pref("somoto.cache.aff_toolbar_settings_xml", "46/17/17/1/113"); =>PUP.Optional.MegaSearch
O69 - SBI: prefs.js [Anne-Marie - widsprfj.default] user_pref("somoto.cache.feed_xml_0oa3ef8sfae8373e6711fe8fd63kr865", "46/17/17/1/113"); =>PUP.Optional.MegaSearch
O69 - SBI: prefs.js [Anne-Marie - widsprfj.default] user_pref("somoto.cache.feed_xml_a47a0633kkff8eee8ar5e35d3f1k6f86", "46/17/17/1/113"); =>PUP.Optional.MegaSearch
O69 - SBI: prefs.js [Anne-Marie - widsprfj.default] user_pref("somoto.cache.feed_xml_d630o373e8sfae876a3efkr811fe8f65", "46/17/17/1/113"); =>PUP.Optional.MegaSearch
O69 - SBI: prefs.js [Anne-Marie - widsprfj.default] user_pref("somoto.cache.weather_gae", "46/17/17/1/113"); =>PUP.Optional.MegaSearch
O69 - SBI: prefs.js [Anne-Marie - widsprfj.default] user_pref("somoto.dnscatch", "http://www.bigseekpro.com/search/toolbar/bigseekpro/{82B491ED-D2D2-D702-2962-6DDDA8EDE5E4}?q="); =>PUP.Optional.MegaSearch
O69 - SBI: prefs.js [Anne-Marie - widsprfj.default] user_pref("somoto.firstlaunch", "0"); =>PUP.Optional.MegaSearch
O69 - SBI: prefs.js [Anne-Marie - widsprfj.default] user_pref("somoto.guid", "%7B82B491ED-D2D2-D702-2962-6DDDA8EDE5E4%7D"); =>PUP.Optional.MegaSearch
O69 - SBI: prefs.js [Anne-Marie - widsprfj.default] user_pref("somoto.homepage", "http://www.bigseekpro.com/bigseekpro/{82B491ED-D2D2-D702-2962-6DDDA8EDE5E4}"); =>PUP.Optional.MegaSearch
O69 - SBI: prefs.js [Anne-Marie - widsprfj.default] user_pref("somoto.old_dnscatch", "http://kwtb.search.imgag.com/?c=GNKIW29193&sbs=1&sc=2&f=web&vernum=1.0&uid=&did=f8d4a70c-98e2-40[...] =>PUP.Optional.MegaSearch
O69 - SBI: prefs.js [Anne-Marie - widsprfj.default] user_pref("somoto.old_homepage", "resource:/browserconfig.properties"); =>PUP.Optional.MegaSearch
O69 - SBI: prefs.js [Anne-Marie - widsprfj.default] user_pref("somoto.popupblockedcnt", "94"); =>PUP.Optional.MegaSearch
O69 - SBI: SearchScopes [HKCU] {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} - (Search the web (Babylon)) - http://search.babylon.com/ =>PUP.Optional.Babylon
O69 - SBI: SearchScopes [HKCU] {67A2568C-7A0A-4EED-AECC-B5405DE63B64} - (Google) - http://www.google.com/
O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} [DefaultScope] - (Google) - http://www.google.com/
O69 - SBI: SearchScopes [HKCU] {9C9A23EF-C6E9-4C31-BACD-1EEEBF736C8E} - (Ask Search) - http://websearch.ask.com/ =>Toolbar.Ask

---\\ Enumère les services démarrés par Svchost (32) - 1s
O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d’application.) -- C:\Windows\System32\aelupsvc.dll [72192] ©
O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [80384] ©
O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [80384] ©
O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\system32\srvsvc.dll [236032] ©
O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\System32\gpsvc.dll [776192] ©
O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\ikeext.dll [845824] ©
O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Service Audio Windows.) -- C:\Windows\System32\Audiosrv.dll [676864] ©
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’.) -- C:\Windows\System32\rasauto.dll [99328] ©
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire de connexions d’accès distant.) -- C:\Windows\System32\rasmans.dll [343552] ©
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll [97792] ©
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements systèm.) -- C:\Windows\System32\Sens.dll [64512] ©
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l’application d’assistance à.) -- C:\Windows\System32\ipnathlp.dll [359424] ©
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM.) -- C:\Windows\System32\tapisrv.dll [316416] ©
O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gestionnaire des connexions distantes du se.) -- C:\Windows\System32\termsrv.dll [706560] ©
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Up.) -- C:\Windows\system32\wuaueng.dll [2428952] ©
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière.) -- C:\Windows\System32\qmgr.dll [848384] ©
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [369664] ©
O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur u.) -- C:\Windows\System32\iphlpsvc.dll [565760] ©
O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d’ouverture de session secon.) -- C:\Windows\system32\seclogon.dll [30720] ©
O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll [70144] ©
O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\system32\iscsiexe.dll [156672] ©
O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédia.) -- C:\Windows\system32\mmcss.dll [67584] ©
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\system32\wbem\WMIsvc.dll [242688] ©
O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à.) -- C:\Windows\System32\SessEnv.dll [104960] ©
O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\System32\browser.dll [136704] ©
O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll [111104] ©
O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\system32\schedsvc.dll [1114624] ©
O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\Windows\system32\kmsvc.dll [90624] ©
O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll [84480] ©
O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\system32\profsvc.dll [208896] ©
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\Windows\system32\themeservice.dll [44544] ©
O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\Windows\System32\bdesvc.dll [100864] ©

---\\ Liste des exceptions du parefeu Windows (47) - 7s
O87 - FAEL: "{89C52216-02C2-4D7D-A068-94B2B90F9698}" [In-None-P6-TRUE] .(.Copyright (C) 2007-2011, Pando Networks Inc. - Pando Media Booster.) -- C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
O87 - FAEL: "{B8C7F7BA-7534-4B56-BE0F-45B2B3B8E667}" [In-None-P17-TRUE] .(.Copyright (C) 2007-2011, Pando Networks Inc. - Pando Media Booster.) -- C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
O87 - FAEL: "{8FCF3E52-F20E-4213-A70F-6C90282B15F7}" [In-None-P6-TRUE] .(.Copyright (C) 2007-2011, Pando Networks Inc. - Pando Media Booster.) -- C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
O87 - FAEL: "{C0B7B294-26E8-4DD0-B4AA-7154F085C8AE}" [In-None-P17-TRUE] .(.Copyright (C) 2007-2011, Pando Networks Inc. - Pando Media Booster.) -- C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
O87 - FAEL: "{5A27593C-9D67-48E3-B89C-7D4D3AC7E3E1}" [In-None-P17-TRUE] .(.Copyright (C) 2007-2011, Pando Networks Inc. - Pando Media Booster.) -- C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
O87 - FAEL: "TCP Query User{42707576-CD97-4DD1-A7CB-4AB7B3C72815}C:\users\user\lolreplay\lolreplay.exe" [In-None-P6-TRUE] .(...) -- C:\users\user\lolreplay\lolreplay.exe (.not file.)
O87 - FAEL: "UDP Query User{EE3C753E-2C81-4F3F-AD8D-3B2FB0968115}C:\users\user\lolreplay\lolreplay.exe" [In-None-P17-TRUE] .(...) -- C:\users\user\lolreplay\lolreplay.exe (.not file.)
O87 - FAEL: "{A5FE83B1-0F87-48B2-983E-BB5DD5779C97}" [In-None-P6-TRUE] .(...) -- D:\steam\Steam.exe (.not file.)
O87 - FAEL: "{31B26ADC-D4EC-4E35-B790-7A188BEF0B4E}" [In-None-P17-TRUE] .(...) -- D:\steam\Steam.exe (.not file.)
O87 - FAEL: "TCP Query User{312457E3-0253-48C6-838F-3463F81DD591}C:\users\user\appdata\local\temp\dsoclient\app.n3app" [In-None-P6-TRUE] .(...) -- C:\users\user\appdata\local\temp\dsoclient\app.n3app (.not file.)
O87 - FAEL: "UDP Query User{A5B5C5CD-92C5-42B0-800A-36FF3630BBC3}C:\users\user\appdata\local\temp\dsoclient\app.n3app" [In-None-P17-TRUE] .(...) -- C:\users\user\appdata\local\temp\dsoclient\app.n3app (.not file.)
O87 - FAEL: "TCP Query User{C82EFA9B-A51E-4BB3-A354-13216D9788D9}D:\steam\steamapps\kedogataga\team fortress 2\hl2.exe" [In-None-P6-TRUE] .(...) -- D:\steam\steamapps\kedogataga\team fortress 2\hl2.exe (.not file.)
O87 - FAEL: "UDP Query User{BF5D3B1D-29D8-4621-B89C-002C6B7FE96B}D:\steam\steamapps\kedogataga\team fortress 2\hl2.exe" [In-None-P17-TRUE] .(...) -- D:\steam\steamapps\kedogataga\team fortress 2\hl2.exe (.not file.)
O87 - FAEL: "{8AB7CA4B-F2AB-41BF-B561-5A362C138C65}" [In-None-P17-TRUE] .(...) -- C:\Users\USER\AppData\Local\Facebook\Video\Skype\FacebookVideoCalling.exe (.not file.)
O87 - FAEL: "TCP Query User{8AC352AA-9A50-4CE9-8FB3-8858A61A464B}C:\program files (x86)\tmunitedforever\tmforever.exe" [In-None-P6-TRUE] .(...) -- C:\program files (x86)\tmunitedforever\tmforever.exe (.not file.)
O87 - FAEL: "UDP Query User{502FE5A8-72F4-405E-A66F-F57EC872004C}C:\program files (x86)\tmunitedforever\tmforever.exe" [In-None-P17-TRUE] .(...) -- C:\program files (x86)\tmunitedforever\tmforever.exe (.not file.)
O87 - FAEL: "{9FDE28CE-8C47-4BE9-A1BC-655DB5BFE080}" [In-None-P6-TRUE] .(...) -- D:\steam\SteamApps\common\magicka\Magicka.exe (.not file.)
O87 - FAEL: "{30C9E1A0-8F48-42A6-98F2-DF348DACA464}" [In-None-P17-TRUE] .(...) -- D:\steam\SteamApps\common\magicka\Magicka.exe (.not file.)
O87 - FAEL: "TCP Query User{188D720D-D1C1-4E25-8FC3-6001479848B7}C:\program files (x86)\tmunitedforever\tmforever.exe" [In-None-P6-TRUE] .(...) -- C:\program files (x86)\tmunitedforever\tmforever.exe (.not file.)
O87 - FAEL: "UDP Query User{4634583F-D3EA-4768-82C5-2EE8D8E9DE2B}C:\program files (x86)\tmunitedforever\tmforever.exe" [In-None-P17-TRUE] .(...) -- C:\program files (x86)\tmunitedforever\tmforever.exe (.not file.)
O87 - FAEL: "{1DC11606-15F1-48ED-8289-2E05EF41534C}" [In-None-P6-TRUE] .(...) -- D:\steam\SteamApps\common\magicka\Magicka.exe (.not file.)
O87 - FAEL: "{DD3F9711-F2C1-4994-8B96-149B9E44FA16}" [In-None-P17-TRUE] .(...) -- D:\steam\SteamApps\common\magicka\Magicka.exe (.not file.)
O87 - FAEL: "TCP Query User{491196DD-C961-4EC4-9C49-CB050D9B2EF8}C:\program files (x86)\hp\common\hpdevicedetection3.exe" [In-None-P6-TRUE] .(...) -- C:\program files (x86)\hp\common\hpdevicedetection3.exe (.not file.)
O87 - FAEL: "UDP Query User{210C1A4C-9E50-4FED-BA28-C15E2FCA7732}C:\program files (x86)\hp\common\hpdevicedetection3.exe" [In-None-P17-TRUE] .(...) -- C:\program files (x86)\hp\common\hpdevicedetection3.exe (.not file.)
O87 - FAEL: "{9E181E77-03F0-41E9-BEDF-20D3257CFEDA}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (.not file.)
O87 - FAEL: "{8DD65D23-D27B-4BFF-B3E3-F728759146F4}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe (.not file.)
O87 - FAEL: "{601C39E8-F122-4284-B3C8-67E08E2BCE15}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\HP\Digital Imaging\bin\hpofxm08.exe (.not file.)
O87 - FAEL: "{CD897DE7-F832-47AD-8E2D-720354EEFB18}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\HP\Digital Imaging\bin\hposfx08.exe (.not file.)
O87 - FAEL: "{9525F6CC-657F-421A-A1A0-6D6CF87CB39A}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\HP\Digital Imaging\bin\hposid01.exe (.not file.)
O87 - FAEL: "{94881939-1702-4356-B587-83BEA4D9281F}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\HP\Digital Imaging\bin\hpqkygrp.exe (.not file.)
O87 - FAEL: "{B9D4C2FE-2E4F-470C-8C49-3DA2A5D9A282}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcopy2.exe (.not file.)
O87 - FAEL: "{A138F46E-4B9D-40A0-A7FC-5D40CBA4D227}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\HP\Digital Imaging\bin\hpfccopy.exe (.not file.)
O87 - FAEL: "{B76B6F11-5178-4243-A94E-C78B0C15681A}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\HP\Digital Imaging\bin\hpzwiz01.exe (.not file.)
O87 - FAEL: "{F37EA584-8911-49E2-8050-EDC5C017EEDB}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\HP\Digital Imaging\bin\hpoews01.exe (.not file.)
O87 - FAEL: "{7DEF5C39-B5D7-4F52-BF01-7B6E39CF9C81}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\HP\Digital Imaging\bin\hpqnrs08.exe (.not file.)
O87 - FAEL: "{5727A331-A95D-4BF8-90E3-81F774E4CCB9}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\HP\Digital Imaging\bin\hpiscnapp.exe (.not file.)
O87 - FAEL: "{28B5C723-DB3D-46ED-984D-668274E6404F}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\common files\hp\digital imaging\bin\hpqphotocrm.exe (.not file.)
O87 - FAEL: "{E54F23EB-F9F1-4400-8164-35D6172479FB}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\HP\Digital Imaging\bin\hpqsudi.exe (.not file.)
O87 - FAEL: "{52EBC8D4-6E31-4FA7-8C3C-69CDBFA342AE}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\HP\Digital Imaging\bin\hpqpsapp.exe (.not file.)
O87 - FAEL: "{FA7D38BA-26BA-48D5-8390-3DB8190F2237}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\HP\Digital Imaging\bin\hpofxs08.exe (.not file.)
O87 - FAEL: "{22D7264C-7549-47E7-BAA2-F4AA63FC45E9}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\HP\Digital Imaging\bin\hpqfxt08.exe (.not file.)
O87 - FAEL: "{5329B52F-DEE7-4D91-BFEA-0119791E700F}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\HP\Digital Imaging\bin\hpqpse.exe (.not file.)
O87 - FAEL: "{B3E5324D-A61E-4B89-AC53-B2D5E9B814E1}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgplgtupl.exe (.not file.)
O87 - FAEL: "{DDB56521-129E-4283-A47B-A59716A86336}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe (.not file.)
O87 - FAEL: "{D3302B89-0B16-4A75-B4D1-90473A5F30B7}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgm.exe (.not file.)
O87 - FAEL: "{C25CC992-CF82-4385-9132-85FCFA42C624}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgh.exe (.not file.)
O87 - FAEL: "{34ACFB84-3617-4AEF-9A39-7007316E10D0}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\HP\digital imaging\smart web printing\smartwebprintexe.exe (.not file.)

---\\ Services non Microsoft (SR=Démarré,SS=Stoppé) (18) - 23s

SR - Auto [2015/07/07 20:12:28] [ 82128] Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe ©
SS - Demand [2015/08/11 22:50:15] [ 269000] Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe ©
SR - Demand [2008/03/31 11:55:48] [ 225280] ADSM Service (ADSMService) . (.ASUSTek Computer Inc..) - C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe ©
SR - Auto [2009/09/17 20:36:34] [ 359552] AFBAgent (AFBAgent) . (.ASUSTeK Computer Inc..) - C:\Windows\system32\FBAgent.exe ©
SS - Auto [2015/09/01 20:08:57] [ 887128] Avira Protection e-mail (AntiVirMailService) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe ©
SR - Auto [2015/09/01 20:09:17] [ 461672] Avira Planificateur (AntiVirSchedulerService) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe ©
SR - Auto [2015/09/01 20:08:55] [ 461672] Avira Protection temps réel (AntiVirService) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe ©
SS - Auto [2015/09/01 20:09:00] [ 1213072] Avira Protection Web (AntiVirWebService) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe ©
SR - Auto [2009/06/16 02:30:42] [ 84536] ASLDR Service (ASLDRService) . (.ASUS.) - C:\Program Files (x86)\ASUS\ATK Hotkey\AsLdrSrv.exe ©
SR - Auto [2007/08/08 09:08:40] [ 94208] ATKGFNEX Service (ATKGFNEXSrv) . (.Copyright (C) 2007.) - C:\Program Files\ATKGFNEX\GFNEXSrv.exe
SR - Auto [2015/08/13 12:01:24] [ 228104] Avira Service Host (Avira.ServiceHost) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe ©
SS - Auto [2015/08/27 18:48:07] [ 144200] Google Update Service (gupdate) (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ©
SS - Demand [2015/08/27 18:48:07] [ 144200] Service Google Update (gupdatem) (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ©
SS - Demand [2012/08/22 12:38:30] [ 194032] Google Software Updater (gusvc) . (.Google.) - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe ©
SS - Demand [2015/08/28 10:54:24] [ 149160] Mozilla Maintenance Service (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe ©
SS - Auto [2014/12/11 10:30:48] [ 315496] Skype Updater (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe ©
SS - Demand [2012/01/08 12:40:58] [ 419624] Steam Client Service (Steam Client Service) . (.Valve Corporation.) - C:\Program Files (x86)\Common Files\Steam\SteamService.exe ©

---\\ Scan Additionnel (16) - 0s
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Trusted Software Assistant_is1 =>Adware.InstallCore
HKLM\SOFTWARE\Wow6432Node\Babylon =>PUP.Optional.Babylon
HKLM\SOFTWARE\Wow6432Node\Freeze.com =>PUP.Optional.Freeze
HKLM\SOFTWARE\Wow6432Node\OfferBox =>PUP.Optional.OfferBox
HKCU\SOFTWARE\MediaFinder =>PUP.Optional.MediaFinder
HKCU\SOFTWARE\Softonic =>PUP.Optional.Softonic
HKCU\SOFTWARE\Somoto Toolbar =>PUP.Optional.MegaSearch
C:\Program Files (x86)\File Type Assistant =>Adware.InstallCore
C:\Program Files (x86)\Freeze.com =>PUP.Optional.Freeze
C:\Program Files (x86)\OfferBox =>PUP.Optional.OfferBox
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Finder =>PUP.Optional.MediaFinder
C:\ProgramData\Babylon =>PUP.Optional.Babylon
C:\ProgramData\Partner =>Toolbar.YahooPartner
C:\Users\Anne-Marie\AppData\Roaming\Babylon =>PUP.Optional.Babylon
C:\Users\Anne-Marie\AppData\Roaming\Media Finder =>PUP.Optional.MediaFinder
C:\Users\Anne-Marie\AppData\Local\Babylon =>PUP.Optional.Babylon

---\\ Récapitulatif des éléments trouvées sur votre station (9) - 0s
http://www.nicolascoolman.fr/pup-babylon/ =>PUP.Optional.Babylon
http://www.nicolascoolman.fr/toolbar-ask/ =>Toolbar.Ask
http://www.nicolascoolman.fr/adware-installcore/ =>Adware.InstallCore
http://www.nicolascoolman.fr/adware-freeze/ =>PUP.Optional.Freeze
http://www.nicolascoolman.fr/pup-offerbox/ =>PUP.Optional.OfferBox
http://www.nicolascoolman.fr/pup-mediafinder/ =>PUP.Optional.MediaFinder
http://www.nicolascoolman.fr/blog =>PUP.Optional.Softonic
http://www.nicolascoolman.fr/adware-megasearch/ =>PUP.Optional.MegaSearch
http://www.nicolascoolman.fr/blog =>Toolbar.YahooPartner

~ End of the scan, 33967 items in 289 seconds (886)(0)()

Publicité


Signaler le contenu de ce document

Publicité