~ ZHPDiag v2015.9.22.144 Par Nicolas Coolman (2015/09/22)
~ Démarré par rose (Administrator) (2015/09/22 10:48:10)
~ Site: http://www.nicolascoolman.fr
~ Facebook: https://www.facebook.com/nicolascoolman1
~ Etat de la version: Version OK
~ Mode: Scanner
~ Rapport: C:\Users\rose\Desktop\ZHPDiag.txt
~ Rapport: C:\Users\rose\AppData\Roaming\ZHP\ZHPDiag.txt
~ UAC: Activate
~ Démarrage du système: Normal (Normal boot)
Windows VISTA, 32-bit Service Pack 2 (Build 6002)

---\\ Navigateurs Internet (3) - 0s
GCIE: Google Chrome v45.0.2454.93
MFIE: Mozilla Firefox 36.0.1 (x86 fr) v36.0.1
MSIE: Internet Explorer v9.0.8112.16421

---\\ Informations sur les produits Windows (4) - 3s
~ Windows Server License Manager Script : OK
~ Licence Script File Génération : OK
Windows Automatic Updates : OK
Windows Activation Technologies : KO

---\\ Logiciels de protection (4) - 6s
Malwarebytes Anti-Malware version 2.1.8.1057
Microsoft Security Client v4.8.0204.0
Microsoft Security Essentials v4.8.204.0
Windows Defender VISTA (Deactivate)

---\\ Logiciels de protection et autres (Superflus) (1) - 7s
Spybot - Search & Destroy v2.4.40

---\\ Logiciels d'optimisation (1) - 7s
CCleaner v4.14

---\\ Surveillance de Logiciels (2) - 7s
Adobe Flash Player 19 NPAPI
Adobe Reader XI

---\\ Informations sur le système (6) - 0s
~ Operating System: x86 Family 6 Model 23 Stepping 10, GenuineIntel
~ Operating System: 32-bit
~ Boot mode: Normal (Normal boot)
Total RAM: 3108.74 MB (63% free)
~ System Restore: Activé (Enable)
~ System drive C: has 145 GB free of 231 GB

---\\ Mode de connexion au système (3) - 0s
~ Computer Name: PC-DE-ROSE
~ User Name: rose
~ Logged in as Administrator

---\\ Enumération des unités disques (2) - 0s
~ Drive C: has 145 GB free of 231 GB (System)
~ Drive D: has 211 GB free of 231 GB

---\\ Etat du Centre de Sécurité Windows (11) - 0s
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: OK
[HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK

---\\ Recherche particulière de fichiers génériques (24) - 3s
[MD5.D07D4C3038F3578FFCE1C0237F2A1253] - (.Microsoft Corporation - Explorateur Windows.) () -- C:\Windows\Explorer.exe [2926592] ©
[MD5.4B555106290BD117334E9A08761C035A] - (.Microsoft Corporation - Processus hôte Windows (Rundll32).) () -- C:\Windows\System32\rundll32.exe [44544] ©
[MD5.101BA3EA053480BB5D957EF37C06B5ED] - (.Microsoft Corporation - Application de démarrage de Windows.) () -- C:\Windows\System32\Wininit.exe [96768] ©
[MD5.605FFF8DF63D05DB523E635A14DDB43C] - (.Microsoft Corporation - Extensions Internet pour Win32.) () -- C:\Windows\System32\wininet.dll [1129472] ©
[MD5.898E7C06A350D4A1A64A9EA264D55452] - (.Microsoft Corporation - Application d'ouverture de session Windows.) () -- C:\Windows\System32\Winlogon.exe [314368] ©
[MD5.85E861D0B88DB2B54ACB0839654C09F7] - (.Microsoft Corporation - DNS DLL de l'API Client.) () -- C:\Windows\System32\dnsapi.dll [168448] ©
[MD5.95F5FF73B076576C41740F1A842B9B57] - (.Microsoft Corporation - DLL client de l'API uilisateur de Windows m.) () -- C:\Windows\System32\fr-FR\user32.dll.mui [20480] ©
[MD5.F5272A105F59A7B3B345D9D6D87DA7AD] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) () -- C:\Windows\System32\drivers\AFD.sys [273408] ©
[MD5.1F05B78AB91C9075565A9D8A4B880BC4] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) () -- C:\Windows\System32\drivers\atapi.sys [19944] ©
[MD5.7ADD03E75BEB9E6DD102C3081D29840A] - (.Microsoft Corporation - CD-ROM File System Driver.) () -- C:\Windows\System32\drivers\Cdfs.sys [70144] ©
[MD5.6B4BFFB9BECD728097024276430DB314] - (.Microsoft Corporation - SCSI CD-ROM Driver.) () -- C:\Windows\System32\drivers\Cdrom.sys [67072] ©
[MD5.622C41A07CA7E6DD91770F50D532CB6C] - (.Microsoft Corporation - DFS Namespace Client Driver.) () -- C:\Windows\System32\drivers\DfsC.sys [75264] ©
[MD5.062452B7FFD68C8C042A6261FE8DFF4A] - (.Microsoft Corporation - High Definition Audio Bus Driver.) () -- C:\Windows\System32\drivers\HDAudBus.sys [561152] ©
[MD5.22D56C8184586B7A1F6FA60BE5F5A2BD] - (.Microsoft Corporation - Pilote de port i8042.) () -- C:\Windows\System32\drivers\i8042prt.sys [54784] ©
[MD5.8793643A67B42CEC66490B2A0CF92D68] - (.Microsoft Corporation - IP Network Address Translator.) () -- C:\Windows\System32\drivers\IpNat.sys [100864] ©
[MD5.1B864548B2ACEC1C0BB29B615CC42978] - (.Microsoft Corporation - Windows NT SMB Minirdr.) () -- C:\Windows\System32\drivers\MRxSmb.sys [107008] ©
[MD5.ECD64230A59CBD93C85F1CD1CAB9F3F6] - (.Microsoft Corporation - MBT Transport driver.) () -- C:\Windows\System32\drivers\netBT.sys [185856] ©
[MD5.2C1121F2B87E9A6B12485DF53CD848C7] - (.Microsoft Corporation - Pilote du système de fichiers NT.) () -- C:\Windows\System32\drivers\ntfs.sys [1082232] ©
[MD5.0FA9B5055484649D63C303FE404E5F4D] - (.Microsoft Corporation - Pilote de port parallèle.) () -- C:\Windows\System32\drivers\Parport.sys [79360] ©
[MD5.A214ADBAF4CB47DD2728859EF31F26B0] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) () -- C:\Windows\System32\drivers\Rasl2tp.sys [76288] ©
[MD5.FBC0BACD9C3D7F6956853F64A66E252D] - (.Microsoft Corporation - Microsoft RDP Device redirector.) () -- C:\Windows\System32\drivers\rdpdr.sys [248832] ©
[MD5.7B75299A4D201D6A6533603D6914AB04] - (.Microsoft Corporation - SMB Transport driver.) () -- C:\Windows\System32\drivers\smb.sys [66560] ©
[MD5.76B06EB8A01FC8624D699E7045303E54] - (.Microsoft Corporation - TDI Translation Driver.) () -- C:\Windows\System32\drivers\tdx.sys [72192] ©
[MD5.786DB5771F05EF300390399F626BF30A] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) () -- C:\Windows\System32\drivers\volsnap.sys [224640] ©

---\\ Processus lancés (17) - 1s
[MD5.DB338C400CC9F5CEB568899D664FF335] - (.ATI Technologies Inc. - ATI External Event Utility EXE Module.) -- C:\Windows\System32\Ati2evxx.exe [733184] [PID.1148] ©
[MD5.DB338C400CC9F5CEB568899D664FF335] - (.ATI Technologies Inc. - ATI External Event Utility EXE Module.) -- C:\Windows\System32\Ati2evxx.exe [733184] [PID.1708] ©
[MD5.30C65FB4BB8082B077ED71E228C54A36] - (.Samsung Electronics Co., Ltd. - EasySpeedUpManager.) -- C:\Program Files\Samsung\EasySpeedUpManager\EasySpeedUpManager.exe [742400] [PID.1508] ©
[MD5.787311D77B29EE718A1A22859C3E4F6F] - (.Samsung Electronics Co., Ltd. - Samsung Magic Doctor Launcher.) -- C:\Program Files\Samsung\Samsung Magic Doctor\MagicDoctorKbdHk.exe [45056] [PID.1756] ©
[MD5.019D6C51FD7A7E0760B7C7C95EA77528] - (.SAMSUNG Electronics co., LTD. - Easy Battery Manager 3.) -- C:\Program Files\Samsung\EBM\EasyBatteryMgr3.exe [352256] [PID.2156] ©
[MD5.0BC0C47AB03B84F4ECC511DEEE887445] - (.Samsung Electronics Co., Ltd. - Easy Display Manager.) -- C:\Program Files\Samsung\Easy Display Manager\dmhkcore.exe [692224] [PID.2168] ©
[MD5.013697369EAFFA675D0671607F036020] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [82128] [PID.2456] ©
[MD5.EFBC44FBD75E4F80BD927AEBF6E7EADE] - (.Agere Systems - Agere Soft Modem Call Progress Service.) -- C:\Windows\System32\agrsmsvc.exe [13312] [PID.2472] ©
[MD5.F85AE59A52885F4B09AADAFB23001A3B] - (.Copyright (C) 2009 - .) -- C:\Windows\System32\Rezip.exe [311296] [PID.2744]
[MD5.D777F1417D9BB9F66CD9D9C3B61F730F] - (.Safer-Networking Ltd. - Spybot-S&D 2 Scanner Service.) -- C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168] [PID.2808] ©
[MD5.68D6C7F99BC73B88954D844FCCBEB2A0] - (.Safer-Networking Ltd. - Spybot-S&D 2 Background update service.) -- C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408] [PID.3272] ©
[MD5.9B9B368A8FF5CAF91D7A333CF62CD2CC] - (.Safer-Networking Ltd. - Windows Security Center integration..) -- C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928] [PID.3604] ©
[MD5.83946783D86BEB7A898BC6B562F1F189] - (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [815944] [PID.544] ©
[MD5.83946783D86BEB7A898BC6B562F1F189] - (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [815944] [PID.2360] ©
[MD5.83946783D86BEB7A898BC6B562F1F189] - (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [815944] [PID.3716] ©
[MD5.83946783D86BEB7A898BC6B562F1F189] - (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [815944] [PID.4052] ©
[MD5.3274AC8202980DD1B63F3062B7A5D37A] - (.Nicolas Coolman - ZHPDiag.) -- C:\Users\rose\ZHPDiag3.exe [1936896] [PID.5280] ©

---\\ Google Chrome, Démarrage,Recherche,Extensions (5) - 0s
G0 - GCSP: Secure Preferences [User Data\Default][HomePage] http://www.google.com/
G2 - GCE: Preference [User Data\Default] [aohghmighlieiainnegkcijnfilokake] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [hdpnmimnmfiglnagjpadkhgggagodcck] Background for G+
G2 - GCE: Preference [User Data\Default] [lccekmodgklaepjeofjdjpbminllajkg] Chrome Hotword Shared Module
G2 - GCE: Preference [User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] Google Chrome manifest =>.Google Inc.

---\\ Firefox, Plugins,Demarrage,Recherche,Extensions (11) - 1s
M0 - MFSP: prefs.js [rose - j41o90gl.default] http://www.google.com/
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\browser\searchplugins\amazon-france.xml
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\browser\searchplugins\bing.xml
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\browser\searchplugins\cnrtl-tlfi-fr.xml
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\browser\searchplugins\ddg.xml
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\browser\searchplugins\eBay-france.xml
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\browser\searchplugins\google.xml
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\browser\searchplugins\wikipedia-fr.xml
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\browser\searchplugins\yahoo-france.xml
P2 - EXT: (.Mozilla - Default.) -- C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} ©
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Macromed\Flash\NPSWF32_19_0_0_185.dll ©

---\\ Internet Explorer,Démarrage,Recherche,URLSearchHook (11) - 0s
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = www.google.com
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = www.google.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = www.google.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = www.google.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphean =>.Microsoft Internet Explorer

---\\ Internet Explorer,Proxy Management (4) - 0s
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll

---\\ Internet Explorer,IniFiles, Autoloading programs (3) - 0s
F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe (.Microsoft Corporation.)
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe (.Microsoft Corporation.)
F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"

---\\ Etude du fichier hosts (1) - 0s
~ Le fichier hôte est sain (The hosts file is clean) (15517)

---\\ Browser Helper Object de navigateur (BHO) (4) - 1s
O2 - BHO: McAfee Phishing Filter - {27B4851A-3207-45A2-B947-BE8AFE6163AB} (Orphean)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} (Orphean)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corporation - WindowsLiveLogin.dll.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll ©
O2 - BHO: (no name) - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} (Orphean)

---\\ Internet Explorer, Barre d'outil (2) - 0s
O3 - Toolbar: 0xB1C218236549D4119B18009027A5CD4F - [HKCU]{2318C2B1-4965-11D4-9B18-009027A5CD4F} . (...) -- (.not file.)
O3 - Toolbar: IEToolbar - [HKLM]{381FFDE8-2394-4f90-B10D-FC6124A40F8C} . (...) -- (.not file.)

---\\ Applications lancées au démarrage du système (8) - 0s
O4 - HKCU\..\Run: [WMPNSCFG] . (.Microsoft Corporation - Application de configuration du service Par.) -- C:\Program Files\Windows Media Player\wmpnscfg.exe ©
O4 - HKCU\..\Run: [GoogleChromeAutoLaunch_4878BA9AB6674643E1160A3519305162] . (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe ©
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe ©
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] . (.Microsoft Corporation - Processus hôte Windows (Rundll32).) -- C:\Windows\System32\rundll32.exe ©
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe ©
O4 - HKUS\S-1-5-20\..\Run: [WindowsWelcomeCenter] . (.Microsoft Corporation - Processus hôte Windows (Rundll32).) -- C:\Windows\System32\rundll32.exe ©
O4 - HKUS\S-1-5-21-1228387082-1587413325-2831801477-1003\..\Run: [WMPNSCFG] . (.Microsoft Corporation - Application de configuration du service Par.) -- C:\Program Files\Windows Media Player\wmpnscfg.exe ©
O4 - HKUS\S-1-5-21-1228387082-1587413325-2831801477-1003\..\Run: [GoogleChromeAutoLaunch_4878BA9AB6674643E1160A3519305162] . (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe ©

---\\ Modification Domaine/Adresses DNS (6) - 0s
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 212.27.40.241 212.27.40.240
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: DhcpNameServer = 212.27.40.241 212.27.40.240
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: DhcpNameServer = 212.27.40.241 212.27.40.240

---\\ Protocole additionnel (25) - 1s
O18 - Handler: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll ©
O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\MSVidCtl.dll ©
O18 - Handler: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Handler: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Handler: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Handler: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Handler: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll ©
O18 - Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll ©
O18 - Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll ©
O18 - Handler: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll ©
O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\System32\inetcomm.dll ©
O18 - Handler: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} . (.Microsoft Corporation - Microsoft® Help Data Services Module.) -- C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll ©
O18 - Handler: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll ©
O18 - Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll ©
O18 - Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll ©
O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\MSVidCtl.dll ©
O18 - Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll ©
O18 - Handler: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} . (.Microsoft Corporation - Windows Live Mail.) -- C:\Program Files\Windows Live\Mail\mailcomm.dll ©
O18 - Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll ©
O18 - Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll ©
O18 - Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll ©
O18 - Filter: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL ©

---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (1) - 0s
O20 - AppInit_DLLs: . (...) - C:\ProgramData\FlashBeat\FlashBeat32.dll C:\ProgramData\LolliScan\LolliScan32.dll (.not file.) =>PUP.Optional.Graftor

---\\ Liste des services NT non Microsoft et non désactivés (9) - 1s
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe ©
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) . (.Agere Systems - Agere Soft Modem Call Progress Service.) - C:\Windows\System32\agrsmsvc.exe ©
O23 - Service: (Ati External Event Utility) . (.ATI Technologies Inc. - ATI External Event Utility EXE Module.) - C:\Windows\System32\Ati2evxx.exe ©
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe ©
O23 - Service: (MBAMService) . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe ©
O23 - Service: Rezip (Rezip) . (.Copyright (C) 2009 - .) - C:\Windows\System32\Rezip.exe
O23 - Service: Spybot-S&D 2 Scanner Service (SDScannerService) . (.Safer-Networking Ltd. - Spybot-S&D 2 Scanner Service.) - C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe ©
O23 - Service: Spybot-S&D 2 Updating Service (SDUpdateService) . (.Safer-Networking Ltd. - Spybot-S&D 2 Background update service.) - C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe ©
O23 - Service: Spybot-S&D 2 Security Center Service (SDWSCService) . (.Safer-Networking Ltd. - Windows Security Center integration..) - C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe ©

---\\ Enumère les données de BootExecute (1) - 0s
O34 - HKLM BootExecute: (sdnclean.exe) (.Safer Networking Limited - .) -- sdnclean.exe

---\\ Tâches planifiées en automatique (39) - 4s
[MD5.E3FB05F33E1404AD606B1E1FE7C323C3] [APT] [Adobe Acrobat Update Task] (.Adobe Systems Incorporated.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [998104] ©
[MD5.C6D147C12C424373B016C0AB0A6C61EB] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe [269000] ©
[MD5.0395F4275F825078271AB287EFC4BF75] [APT] [BatteryLifeExtender] (.Samsung Electronics. Co. Ltd..) -- C:\Program Files\Samsung\BatteryLifeExtender\BatteryLifeExtender.exe [550912]
[MD5.13ECAC1C51CC00147BD06B5ABF142956] [APT] [CCleanerSkipUAC] (.Piriform Ltd.) -- C:\Program Files\CCleaner\CCleaner.exe [4529944] ©
[MD5.9CCE733E5262FB92C2331E8578512B49] [APT] [Check for updates (Spybot - Search & Destroy)] (.Safer-Networking Ltd..) -- C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe [4747720] ©
[MD5.00000000000000000000000000000000] [APT] [DBJXMQ1] (...) -- C:\ProgramData\FlashBeat\FlashBeat.exe (.not file.) [0] =>PUP.Optional.FlashBeat
[MD5.019D6C51FD7A7E0760B7C7C95EA77528] [APT] [EasyBatteryManager] (.SAMSUNG Electronics co., LTD..) -- C:\Program Files\Samsung\EBM\EasyBatteryMgr3.exe [352256] ©
[MD5.0BC0C47AB03B84F4ECC511DEEE887445] [APT] [EasyDisplayMgr] (.Samsung Electronics Co., Ltd..) -- C:\Program Files\Samsung\Easy Display Manager\dmhkcore.exe [692224] ©
[MD5.30C65FB4BB8082B077ED71E228C54A36] [APT] [EasySpeedUpManager] (.Samsung Electronics Co., Ltd..) -- C:\Program Files\Samsung\EasySpeedUpManager\EasySpeedUpManager.exe [742400] ©
[MD5.E1B44A75947137F4143308D566889837] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe [107848] ©
[MD5.E1B44A75947137F4143308D566889837] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe [107848] ©
[MD5.48FAE038F51676A795CEFAD780448D94] [APT] [Refresh immunization (Spybot - Search & Destroy)] (.Safer-Networking Ltd..) -- C:\Program Files\Spybot - Search & Destroy 2\SDImmunize.exe [4460472] ©
[MD5.787311D77B29EE718A1A22859C3E4F6F] [APT] [SamsungMagicDoctor] (.Samsung Electronics Co., Ltd..) -- C:\Program Files\Samsung\Samsung Magic Doctor\MagicDoctorKbdHk.exe [45056] ©
[MD5.280C014187E24860A7C860329513208F] [APT] [Scan the system (Spybot - Search & Destroy)] (.Safer-Networking Ltd..) -- C:\Program Files\Spybot - Search & Destroy 2\SDScan.exe [4818848] ©
[MD5.06F7D67EC4D15F11A2923268BAA937D3] [APT] [SUPBackground] (...) -- C:\Program Files\Samsung\Samsung Update Plus\SUPBackground.exe [300912]
[MD5.00000000000000000000000000000000] [APT] [Wluklinu] (...) -- C:\ProgramData\Wluklinu\1.0.1.0\eulvravu.exe (.not file.) [0] =>Heuristic.PullUpdate
O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\Tasks\Adobe Flash Player Updater.job [1002] ©
O39 - APT: Check for updates (Spybot - Search & Destroy) - (.Safer-Networking Ltd..) -- C:\Windows\Tasks\Check for updates (Spybot - Search & Destroy).job [644] ©
O39 - APT: DBJXMQ1 - (...) -- C:\Windows\Tasks\DBJXMQ1.job [328] =>PUP.Optional.FlashBeat
O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job [1052] ©
O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job [1056] ©
O39 - APT: Refresh immunization (Spybot - Search & Destroy) - (.Safer-Networking Ltd..) -- C:\Windows\Tasks\Refresh immunization (Spybot - Search & Destroy).job [616] ©
O39 - APT: Scan the system (Spybot - Search & Destroy) - (.Safer-Networking Ltd..) -- C:\Windows\Tasks\Scan the system (Spybot - Search & Destroy).job [446] ©
O39 - APT: Adobe Acrobat Update Task - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Tasks\Adobe Acrobat Update Task [3874] ©
O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Tasks\Adobe Flash Player Updater [3854] ©
O39 - APT: BatteryLifeExtender - (.Samsung Electronics. Co. Ltd..) -- C:\Windows\System32\Tasks\BatteryLifeExtender [3088]
O39 - APT: CCleanerSkipUAC - (.Piriform Ltd.) -- C:\Windows\System32\Tasks\CCleanerSkipUAC [2770] ©
O39 - APT: Check for updates (Spybot - Search & Destroy) - (.Safer-Networking Ltd..) -- C:\Windows\System32\Tasks\Check for updates (Spybot - Search & Destroy) [3010] ©
O39 - APT: DBJXMQ1 - (...) -- C:\Windows\System32\Tasks\DBJXMQ1 [2850] =>PUP.Optional.FlashBeat
O39 - APT: EasyBatteryManager - (.SAMSUNG Electronics co., LTD..) -- C:\Windows\System32\Tasks\EasyBatteryManager [3130] ©
O39 - APT: EasyDisplayMgr - (.Samsung Electronics Co., Ltd..) -- C:\Windows\System32\Tasks\EasyDisplayMgr [3156] ©
O39 - APT: EasySpeedUpManager - (.Samsung Electronics Co., Ltd..) -- C:\Windows\System32\Tasks\EasySpeedUpManager [3272] ©
O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore [3800] ©
O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA [4052] ©
O39 - APT: Refresh immunization (Spybot - Search & Destroy) - (.Safer-Networking Ltd..) -- C:\Windows\System32\Tasks\Refresh immunization (Spybot - Search & Destroy) [3430] ©
O39 - APT: SamsungMagicDoctor - (.Samsung Electronics Co., Ltd..) -- C:\Windows\System32\Tasks\SamsungMagicDoctor [3264] ©
O39 - APT: Scan the system (Spybot - Search & Destroy) - (.Safer-Networking Ltd..) -- C:\Windows\System32\Tasks\Scan the system (Spybot - Search & Destroy) [3784] ©
O39 - APT: SUPBackground - (...) -- C:\Windows\System32\Tasks\SUPBackground [3158]
O39 - APT: Wluklinu - (...) -- C:\Windows\System32\Tasks\Wluklinu [3458] =>Heuristic.PullUpdate

---\\ Logiciels installés (59) - 8s
O42 - Logiciel: Adobe Flash Player ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX ©
O42 - Logiciel: Adobe Flash Player 19 NPAPI - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player NPAPI ©
O42 - Logiciel: Agere Systems HDA Modem - (.Agere Systems.) [HKLM] -- Agere Systems Soft Modem ©
O42 - Logiciel: Gestionnaire de contacts professionnels pour Outlook 2007 SP2 - (.Microsoft Corporation.) [HKLM] -- Business Contact Manager ©
O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner ©
O42 - Logiciel: CX4300_5500_DX4400 Manuel - (...) [HKLM] -- CX4300_5500_DX4400 Manuel
O42 - Logiciel: East-Tec Eraser 2010 Version 9.9 - (.EAST Technologies.) [HKLM] -- East-Tec Eraser 2010_is1 ©
O42 - Logiciel: EPSON Logiciel imprimante - (.SEIKO EPSON Corporation.) [HKLM] -- EPSON Printer and Utilities ©
O42 - Logiciel: EPSON Scan - (...) [HKLM] -- EPSON Scanner
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM] -- Google Chrome ©
O42 - Logiciel: CyberLink YouCam - (.CyberLink Corp..) [HKLM] -- InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D} ©
O42 - Logiciel: EPSON Attach To Email - (.SEIKO EPSON.) [HKLM] -- InstallShield_{20C45B32-5AB6-46A4-94EF-58950CAF05E5} ©
O42 - Logiciel: Samsung Update Plus - (.Samsung Electronics Co., LTD.) [HKLM] -- InstallShield_{A5F483F0-2D79-4FCA-AE09-D0D96E23EBF7} ©
O42 - Logiciel: Malwarebytes Anti-Malware version 2.1.8.1057 - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes Anti-Malware_is1 ©
O42 - Logiciel: Marvell Miniport Driver - (.Marvell.) [HKLM] -- Marvell Miniport Driver ©
O42 - Logiciel: Microsoft Security Essentials - (.Microsoft Corporation.) [HKLM] -- Microsoft Security Client ©
O42 - Logiciel: Mozilla Firefox 36.0.1 (x86 fr) - (.Mozilla.) [HKLM] -- Mozilla Firefox 36.0.1 (x86 fr) ©
O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM] -- MozillaMaintenanceService ©
O42 - Logiciel: Intel PROSet Wireless - (...) [HKLM] -- ProInst
O42 - Logiciel: Synaptics Pointing Device Driver - (.Synaptics.) [HKLM] -- SynTPDeinstKey ©
O42 - Logiciel: WinRAR 4.01 (32-bit) - (.win.rar GmbH.) [HKLM] -- WinRAR archiver ©
O42 - Logiciel: CyberLink YouCam - (.CyberLink Corp..) [HKLM] -- {01FB4998-33C4-4431-85ED-079E3EEFE75D} ©
O42 - Logiciel: Atheros WLAN Client - (...) [HKLM] -- {04983D37-2202-4295-94A2-8B547C66133F}
O42 - Logiciel: Samsung Recovery Solution III - (.Samsung.) [HKLM] -- {145DE957-0679-4A2A-BB5C-1D3E9808FAB2} ©
O42 - Logiciel: Easy Display Manager - (.Samsung Electronics Co., Ltd..) [HKLM] -- {17283B95-21A8-4996-97DA-547A48DB266F} ©
O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {22B775E7-6C42-4FC5-8E10-9A5E3257BD94} ©
O42 - Logiciel: EPSON Scan Assistant - (...) [HKLM] -- {2A88F1BF-7041-4E42-84B1-6B4ACB83AC64}
O42 - Logiciel: EPSON File Manager - (...) [HKLM] -- {2EB81825-E9EE-44F4-8F51-1240C3898DC6}
O42 - Logiciel: Samsung Magic Doctor - (.Samsung Electronics Co., LTD.) [HKLM] -- {32D6A58F-9659-446C-BBFC-E6F2B41F24DC} ©
O42 - Logiciel: Fichiers de prise en charge de l'installation de Microsoft SQL Server (Fran - (.Microsoft Corporation.) [HKLM] -- {3380F354-C5F7-4E71-8F51-EEE6C3F06C62} ©
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {60EC980A-BDA2-4CB6-A427-B07A5498B4CA} ©
O42 - Logiciel: EPSON Copy Utility 3 - (...) [HKLM] -- {67EDD823-135A-4D59-87BD-950616D6E857}
O42 - Logiciel: PCTroubleshooting - (.Samsung Electronics Co.,LTD..) [HKLM] -- {68CAE442-579C-4D84-AA5F-253852522ED5} ©
O42 - Logiciel: Gestionnaire de contacts professionnels pour Outlook 2007 SP2 - (.Microsoft Corporation.) [HKLM] -- {69ca8988-1c6c-4285-b8af-db780a6e42af} ©
O42 - Logiciel: REALTEK Wireless LAN Software - (.REALTEK Semiconductor Corp..) [HKLM] -- {6A1F72DD-2465-43A2-A137-8A849399B7A8} ©
O42 - Logiciel: Microsoft Security Client - (.Microsoft Corporation.) [HKLM] -- {6E3939AE-9996-4D07-9A30-14C78AE93576} ©
O42 - Logiciel: Easy Battery Manager - (.Samsung.) [HKLM] -- {6F730513-8688-4C3C-90A3-6B9792CE2EF3} ©
O42 - Logiciel: Namuga 1.3M Webcam - (.Vimicro Corporation.) [HKLM] -- {71A51B59-E7D3-11DB-A386-005056C00008} ©
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00} ©
O42 - Logiciel: Microsoft Sync Framework Runtime Native v1.0 (x86) - (.Microsoft Corporation.) [HKLM] -- {8A74E887-8F0F-4017-AF53-CBA42211AAA5} ©
O42 - Logiciel: Camera RAW Plug-In for EPSON Creativity Suite - (...) [HKLM] -- {8DAC1AE4-33D1-4A78-8A42-00E09EDECC3E}
O42 - Logiciel: imagine digital freedom - Samsung - (.Samsung Electronics Co. Ltd.,.) [HKLM] -- {8E106A57-A17E-431D-B48F-175E42EB9F74}
O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM] -- {8E5233E1-7495-44FB-8DEB-4BE906D59619} ©
O42 - Logiciel: Intel® Matrix Storage Manager - (.Intel Corporation.) [HKLM] -- {9068B2BE-D93A-4C0A-861C-5E35E2C0E09E} ©
O42 - Logiciel: Samsung Update Plus - (.Samsung Electronics Co., LTD.) [HKLM] -- {A5F483F0-2D79-4FCA-AE09-D0D96E23EBF7} ©
O42 - Logiciel: Easy Network Manager - (.Samsung.) [HKLM] -- {A7581D39-EA20-4883-A480-80C21047052B} ©
O42 - Logiciel: Software Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} ©
O42 - Logiciel: BatteryLifeExtender - (.Samsung.) [HKLM] -- {AA16A9E5-40E9-44F5-801E-6B3D3CFE79E5} ©
O42 - Logiciel: Adobe Refresh Manager - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-0804-1033-1959-001824147215} ©
O42 - Logiciel: Adobe Reader XI (11.0.10) - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-AB0000000001} ©
O42 - Logiciel: Spybot - Search & Destroy - (.Safer-Networking Ltd..) [HKLM] -- {B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1 ©
O42 - Logiciel: EPSON Easy Photo Print - (...) [HKLM] -- {B66E665A-DF96-4C38-9422-C7F74BC1B4E5}
O42 - Logiciel: Catalyst Control Center - Branding - (.ATI.) [HKLM] -- {B6D8DC8C-F077-4631-A221-4D5E1D8E87E7} ©
O42 - Logiciel: User Guide - (...) [HKLM] -- {BAE68339-B0F6-4D33-9554-5A3DB2DFF5DA}
O42 - Logiciel: Microsoft Sync Framework Services Native v1.0 (x86) - (.Microsoft Corporation.) [HKLM] -- {BD64AF4A-8C80-4152-AD77-FCDDF05208AB} ©
O42 - Logiciel: Easy SpeedUp Manager - (...) [HKLM] -- {EF367AA4-070B-493C-9575-85BE59D789C9}
O42 - Logiciel: Microsoft Choice Guard - (.Microsoft Corporation.) [HKLM] -- {F0E12BBA-AD66-4022-A453-A1C8A0C4D570} ©
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC} ©
O42 - Logiciel: PhotoFiltre Studio X - (...) [HKCU] -- PhotoFiltre Studio X

---\\ HKCU & HKLM Software Keys (83) - 8s
HKLM\SOFTWARE\Adobe
HKLM\SOFTWARE\AdwCleaner
HKLM\SOFTWARE\Agere
HKLM\SOFTWARE\AMD
HKLM\SOFTWARE\America Online
HKLM\SOFTWARE\AppDataLow
HKLM\SOFTWARE\ASKInstaller =>Toolbar.Ask
HKLM\SOFTWARE\ATI
HKLM\SOFTWARE\ATI Technologies
HKLM\SOFTWARE\Caphyon
HKLM\SOFTWARE\CyberLink
HKLM\SOFTWARE\EAST Technologies
HKLM\SOFTWARE\EAST_Technologies
HKLM\SOFTWARE\EPSON
HKLM\SOFTWARE\Google
HKLM\SOFTWARE\InstalledOptions
HKLM\SOFTWARE\InstallShield
HKLM\SOFTWARE\Intel
HKLM\SOFTWARE\Licenses
HKLM\SOFTWARE\Macromedia
HKLM\SOFTWARE\Malwarebytes' Anti-Malware
HKLM\SOFTWARE\Marvell
HKLM\SOFTWARE\Mozilla
HKLM\SOFTWARE\mozilla.org
HKLM\SOFTWARE\MozillaPlugins
HKLM\SOFTWARE\Myriad Software
HKLM\SOFTWARE\ODBC
HKLM\SOFTWARE\Piriform
HKLM\SOFTWARE\Realtek
HKLM\SOFTWARE\Realtek Semiconductor Corp.
HKLM\SOFTWARE\RegisteredApplications
HKLM\SOFTWARE\RtWLan
HKLM\SOFTWARE\Safer Networking Limited
HKLM\SOFTWARE\SAMSUNG
HKLM\SOFTWARE\Samsung Electronics Co., Ltd.
HKLM\SOFTWARE\Software
HKLM\SOFTWARE\Softwin
HKLM\SOFTWARE\Sonic
HKLM\SOFTWARE\SRS Labs
HKLM\SOFTWARE\Synaptics
HKLM\SOFTWARE\Vimicro Corporation
HKLM\SOFTWARE\Volatile
HKLM\SOFTWARE\Waves Audio
HKLM\SOFTWARE\WinRAR
HKLM\SOFTWARE\WOW6432Node
HKCU\SOFTWARE\7UPO42vccKQNXWB
HKCU\SOFTWARE\Adobe
HKCU\SOFTWARE\AOL
HKCU\SOFTWARE\AppDataLow
HKCU\SOFTWARE\ATI
HKCU\SOFTWARE\ATI Technologies Inc.
HKCU\SOFTWARE\Chromium
HKCU\SOFTWARE\ComNotificationsV06.03
HKCU\SOFTWARE\CyberLink
HKCU\SOFTWARE\DdZl24IYPbTK
HKCU\SOFTWARE\EAST Technologies
HKCU\SOFTWARE\EPSON
HKCU\SOFTWARE\Google
HKCU\SOFTWARE\IM Providers
HKCU\SOFTWARE\JVUEG
HKCU\SOFTWARE\Kromtech
HKCU\SOFTWARE\Local AppWizard-Generated Applications
HKCU\SOFTWARE\LowRegistry
HKCU\SOFTWARE\Macromedia
HKCU\SOFTWARE\Mozilla
HKCU\SOFTWARE\MozillaPlugins
HKCU\SOFTWARE\Netscape
HKCU\SOFTWARE\ODBC
HKCU\SOFTWARE\PhotoFiltre Studio X
HKCU\SOFTWARE\Piriform
HKCU\SOFTWARE\Realtek
HKCU\SOFTWARE\Safer Networking Limited
HKCU\SOFTWARE\Samsung
HKCU\SOFTWARE\SEIKO EPSON
HKCU\SOFTWARE\Software
HKCU\SOFTWARE\Synaptics
HKCU\SOFTWARE\Trolltech
HKCU\SOFTWARE\WinRAR
HKCU\SOFTWARE\yvW4UYKGBoaFKv
HKCU\SOFTWARE\ZebHelpProcess Helper
HKCU\SOFTWARE\MB_temp
HKCU\SOFTWARE\AppDataLow\Software
HKCU\SOFTWARE\AppDataLow\Software\Google

---\\ Contenu des dossiers Programmes (155) - 7s
O43 - CFD: 2015/06/10 10:52:08 - [0] D -- C:\Program Files\9fdf270e-3374-4ae3-b6f3-c6c9951158e7 =>PUP.Optional.CrossRider
O43 - CFD: 2015/03/17 16:43:22 - [] D -- C:\Program Files\Adobe
O43 - CFD: 2009/06/10 13:20:48 - [] D -- C:\Program Files\Atheros WLAN Client
O43 - CFD: 2009/06/10 13:14:50 - [] D -- C:\Program Files\ATI
O43 - CFD: 2009/06/10 13:17:00 - [] D -- C:\Program Files\ATI Technologies
O43 - CFD: 2015/03/17 05:05:19 - [] D -- C:\Program Files\CCleaner
O43 - CFD: 2015/03/19 05:34:04 - [] D -- C:\Program Files\Common Files
O43 - CFD: 2015/06/08 17:57:18 - [] D -- C:\Program Files\ControlThis Parental Control
O43 - CFD: 2010/05/22 11:03:17 - [] D -- C:\Program Files\CyberLink
O43 - CFD: 2015/03/17 17:50:58 - [] D -- C:\Program Files\East-Tec Eraser 2010
O43 - CFD: 2015/03/17 19:58:05 - [] D -- C:\Program Files\epson
O43 - CFD: 2010/05/22 10:58:25 - [0] SHD -- C:\Program Files\Fichiers communs
O43 - CFD: 2015/09/22 10:20:48 - [] D -- C:\Program Files\Google
O43 - CFD: 2015/03/17 20:08:30 - [] HD -- C:\Program Files\InstallShield Installation Information
O43 - CFD: 2009/06/10 13:21:13 - [] D -- C:\Program Files\Intel
O43 - CFD: 2015/09/10 08:22:53 - [] D -- C:\Program Files\Internet Explorer
O43 - CFD: 2015/09/22 09:48:08 - [] D -- C:\Program Files\Malwarebytes Anti-Malware
O43 - CFD: 2009/06/10 13:20:03 - [] D -- C:\Program Files\Marvell
O43 - CFD: 2015/06/08 17:55:20 - [] D -- C:\Program Files\Microsoft
O43 - CFD: 2006/11/02 14:37:34 - [] D -- C:\Program Files\Microsoft Games
O43 - CFD: 2015/06/10 13:16:42 - [] D -- C:\Program Files\Microsoft Office
O43 - CFD: 2015/03/17 16:35:09 - [] D -- C:\Program Files\Microsoft Office Outlook Connector
O43 - CFD: 2015/05/14 19:34:25 - [] D -- C:\Program Files\Microsoft Security Client
O43 - CFD: 2015/08/13 09:33:21 - [] D -- C:\Program Files\Microsoft Silverlight
O43 - CFD: 2015/03/17 08:09:49 - [] D -- C:\Program Files\Microsoft Small Business
O43 - CFD: 2015/03/17 16:19:29 - [] D -- C:\Program Files\Microsoft SQL Server
O43 - CFD: 2015/03/17 16:33:36 - [] D -- C:\Program Files\Microsoft SQL Server Compact Edition
O43 - CFD: 2015/03/17 16:34:35 - [] D -- C:\Program Files\Microsoft Sync Framework
O43 - CFD: 2009/06/10 14:42:19 - [] D -- C:\Program Files\Microsoft Visual Studio
O43 - CFD: 2015/03/17 08:27:00 - [] D -- C:\Program Files\Microsoft Visual Studio 8
O43 - CFD: 2015/03/17 16:07:23 - [] D -- C:\Program Files\Microsoft Works
O43 - CFD: 2015/03/17 14:55:46 - [] D -- C:\Program Files\Microsoft.NET
O43 - CFD: 2015/03/17 17:32:30 - [] D -- C:\Program Files\Movie Maker
O43 - CFD: 2015/09/13 09:03:17 - [] D -- C:\Program Files\Mozilla Firefox
O43 - CFD: 2015/08/11 12:40:57 - [] D -- C:\Program Files\Mozilla Maintenance Service
O43 - CFD: 2015/03/17 08:30:33 - [] D -- C:\Program Files\MSBuild
O43 - CFD: 2015/03/17 08:26:28 - [] D -- C:\Program Files\PhotoFiltre Studio X
O43 - CFD: 2009/06/10 13:17:15 - [] D -- C:\Program Files\Realtek
O43 - CFD: 2009/06/10 13:22:12 - [] D -- C:\Program Files\REALTEK Wireless LAN Software
O43 - CFD: 2006/11/02 14:37:34 - [] D -- C:\Program Files\Reference Assemblies
O43 - CFD: 2009/06/10 14:49:38 - [] D -- C:\Program Files\Samsung
O43 - CFD: 2015/06/09 10:27:42 - [] D -- C:\Program Files\Software =>PUP.Optional.Boxore
O43 - CFD: 2015/06/09 12:24:47 - [] D -- C:\Program Files\Spybot - Search & Destroy 2
O43 - CFD: 2009/06/10 13:22:41 - [] D -- C:\Program Files\Synaptics
O43 - CFD: 2009/06/10 13:17:50 - [0] HD -- C:\Program Files\Temp
O43 - CFD: 2006/11/02 15:01:55 - [0] HD -- C:\Program Files\Uninstall Information
O43 - CFD: 2009/06/10 13:23:01 - [] D -- C:\Program Files\Vimicro Corporation
O43 - CFD: 2015/03/17 17:32:30 - [] D -- C:\Program Files\Windows Calendar
O43 - CFD: 2015/03/17 17:32:30 - [] D -- C:\Program Files\Windows Collaboration
O43 - CFD: 2015/03/17 17:32:29 - [] D -- C:\Program Files\Windows Defender
O43 - CFD: 2015/09/10 08:22:53 - [] D -- C:\Program Files\Windows Journal
O43 - CFD: 2015/03/19 07:30:56 - [] D -- C:\Program Files\Windows Live
O43 - CFD: 2015/03/17 16:32:12 - [] D -- C:\Program Files\Windows Live SkyDrive
O43 - CFD: 2015/03/19 07:19:51 - [] D -- C:\Program Files\Windows Mail
O43 - CFD: 2015/06/10 13:17:54 - [] D -- C:\Program Files\Windows Media Player
O43 - CFD: 2010/05/22 10:58:25 - [] D -- C:\Program Files\Windows NT
O43 - CFD: 2015/03/17 17:32:30 - [] D -- C:\Program Files\Windows Photo Gallery
O43 - CFD: 2015/03/19 07:20:03 - [] D -- C:\Program Files\Windows Portable Devices
O43 - CFD: 2015/03/17 17:32:30 - [] D -- C:\Program Files\Windows Sidebar
O43 - CFD: 2015/03/17 05:04:20 - [] D -- C:\Program Files\WinRAR
O43 - CFD: 2015/03/19 07:19:47 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 2015/03/17 09:50:20 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 2009/06/10 13:17:03 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Catalyst Control Center
O43 - CFD: 2015/03/17 05:05:19 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
O43 - CFD: 2015/03/17 17:50:50 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\East-Tec Eraser 2010
O43 - CFD: 2015/03/17 19:54:16 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON
O43 - CFD: 2015/03/17 20:06:53 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON Creativity Suite
O43 - CFD: 2015/03/17 19:49:57 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON Scan
O43 - CFD: 2008/01/21 04:42:47 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Extras and Upgrades
O43 - CFD: 2008/01/21 04:42:49 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
O43 - CFD: 2015/06/09 10:32:50 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
O43 - CFD: 2006/11/02 14:56:46 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 2015/09/22 09:48:08 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
O43 - CFD: 2015/03/17 08:31:33 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
O43 - CFD: 2015/03/17 16:35:19 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Live Add-in
O43 - CFD: 2015/08/13 09:15:11 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
O43 - CFD: 2009/06/10 14:47:00 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft SQL Server 2005
O43 - CFD: 2015/03/17 08:26:29 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhotoFiltre Studio X
O43 - CFD: 2009/06/10 14:49:53 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung
O43 - CFD: 2015/06/09 12:20:16 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
O43 - CFD: 2006/11/02 14:50:50 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
O43 - CFD: 2006/11/02 14:37:34 - [] RHD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC
O43 - CFD: 2015/03/17 16:34:58 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
O43 - CFD: 2015/03/17 05:04:21 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
O43 - CFD: 2015/06/09 10:39:23 - [] D -- C:\ProgramData\28341ff220e0446c9fff27c4493d622e
O43 - CFD: 2015/06/08 17:56:04 - [] D -- C:\ProgramData\7c0535b143fc4671b6ebd202fbffe066
O43 - CFD: 2015/03/17 17:39:17 - [] D -- C:\ProgramData\Adobe
O43 - CFD: 2006/11/02 15:02:03 - [0] SHD -- C:\ProgramData\Application Data
O43 - CFD: 2009/06/10 14:50:35 - [] D -- C:\ProgramData\ATI
O43 - CFD: 2010/05/22 10:58:25 - [0] SHD -- C:\ProgramData\Bureau
O43 - CFD: 2006/11/02 15:02:03 - [0] SHD -- C:\ProgramData\Desktop
O43 - CFD: 2006/11/02 15:02:03 - [0] SHD -- C:\ProgramData\Documents
O43 - CFD: 2015/03/23 10:58:09 - [] D -- C:\ProgramData\EPSON
O43 - CFD: 2010/05/22 10:58:25 - [0] SHD -- C:\ProgramData\Favoris
O43 - CFD: 2006/11/02 15:02:03 - [0] SHD -- C:\ProgramData\Favorites
O43 - CFD: 2015/09/22 10:20:48 - [] D -- C:\ProgramData\Google
O43 - CFD: 2015/06/10 10:27:35 - [] D -- C:\ProgramData\Malwarebytes
O43 - CFD: 2010/05/22 10:58:25 - [0] SHD -- C:\ProgramData\Menu Démarrer
O43 - CFD: 2015/06/09 12:20:15 - [] SD -- C:\ProgramData\Microsoft
O43 - CFD: 2015/09/10 08:06:37 - [] D -- C:\ProgramData\Microsoft Help
O43 - CFD: 2010/05/22 10:58:25 - [0] SHD -- C:\ProgramData\Modèles
O43 - CFD: 2015/03/17 09:26:46 - [] D -- C:\ProgramData\Mozilla
O43 - CFD: 2009/06/10 14:37:54 - [] D -- C:\ProgramData\SAMSUNG
O43 - CFD: 2015/06/09 12:26:55 - [] D -- C:\ProgramData\Spybot - Search & Destroy
O43 - CFD: 2006/11/02 15:02:03 - [0] SHD -- C:\ProgramData\Start Menu
O43 - CFD: 2015/09/18 17:37:03 - [] AD -- C:\ProgramData\Temp
O43 - CFD: 2006/11/02 15:02:04 - [0] SHD -- C:\ProgramData\Templates
O43 - CFD: 2015/03/17 19:59:59 - [] D -- C:\ProgramData\UDL
O43 - CFD: 2015/06/09 10:38:37 - [] HD -- C:\ProgramData\upv
O43 - CFD: 2015/03/17 14:57:55 - [] D -- C:\ProgramData\WinClon
O43 - CFD: 2015/03/17 08:41:53 - [] D -- C:\ProgramData\WindowsSearch
O43 - CFD: 2015/03/17 16:43:44 - [] D -- C:\Program Files\Common Files\Adobe
O43 - CFD: 2015/03/17 14:53:53 - [] D -- C:\Program Files\Common Files\BitDefender
O43 - CFD: 2015/03/19 05:34:04 - [] D -- C:\Program Files\Common Files\DESIGNER
O43 - CFD: 2015/03/17 20:02:58 - [] D -- C:\Program Files\Common Files\InstallShield
O43 - CFD: 2015/03/17 16:32:16 - [] D -- C:\Program Files\Common Files\microsoft shared
O43 - CFD: 2006/11/02 13:18:33 - [] D -- C:\Program Files\Common Files\Services
O43 - CFD: 2006/11/02 13:18:33 - [] D -- C:\Program Files\Common Files\SpeechEngines
O43 - CFD: 2015/03/19 07:19:49 - [] D -- C:\Program Files\Common Files\System
O43 - CFD: 2015/03/17 16:23:11 - [] D -- C:\Program Files\Common Files\Windows Live
O43 - CFD: 2015/04/16 10:25:07 - [] D -- C:\Users\rose\AppData\Roaming\ACAMPREF
O43 - CFD: 2015/03/17 18:12:01 - [] D -- C:\Users\rose\AppData\Roaming\Adobe
O43 - CFD: 2010/05/22 11:05:34 - [] D -- C:\Users\rose\AppData\Roaming\ATI
O43 - CFD: 2015/03/17 17:54:07 - [] D -- C:\Users\rose\AppData\Roaming\EAST Technologies
O43 - CFD: 2015/09/04 14:55:52 - [] D -- C:\Users\rose\AppData\Roaming\EPSON
O43 - CFD: 2015/03/17 09:00:22 - [] D -- C:\Users\rose\AppData\Roaming\Google
O43 - CFD: 2015/03/17 08:26:32 - [] D -- C:\Users\rose\AppData\Roaming\Identities
O43 - CFD: 2015/03/17 19:54:24 - [] D -- C:\Users\rose\AppData\Roaming\InstallShield
O43 - CFD: 2015/03/17 08:08:25 - [] D -- C:\Users\rose\AppData\Roaming\Macromedia
O43 - CFD: 2006/11/02 14:37:34 - [0] D -- C:\Users\rose\AppData\Roaming\Media Center Programs
O43 - CFD: 2015/06/10 09:35:59 - [] SD -- C:\Users\rose\AppData\Roaming\Microsoft
O43 - CFD: 2015/03/17 09:27:09 - [] D -- C:\Users\rose\AppData\Roaming\Mozilla
O43 - CFD: 2015/03/17 08:27:53 - [] D -- C:\Users\rose\AppData\Roaming\PhotoFiltre Studio X
O43 - CFD: 2015/09/22 10:48:33 - [] D -- C:\Users\rose\AppData\Roaming\ZHP
O43 - CFD: 2015/03/17 17:48:48 - [] D -- C:\Users\rose\AppData\Local\Adobe
O43 - CFD: 2010/05/22 11:02:15 - [0] SHD -- C:\Users\rose\AppData\Local\Application Data
O43 - CFD: 2010/05/22 11:05:34 - [] D -- C:\Users\rose\AppData\Local\ATI
O43 - CFD: 2015/09/22 10:20:48 - [] D -- C:\Users\rose\AppData\Local\Google
O43 - CFD: 2010/05/22 11:02:15 - [0] SHD -- C:\Users\rose\AppData\Local\Historique
O43 - CFD: 2015/08/11 09:56:07 - [] D -- C:\Users\rose\AppData\Local\Macromedia
O43 - CFD: 2015/09/18 17:56:43 - [] D -- C:\Users\rose\AppData\Local\Microsoft
O43 - CFD: 2015/09/06 11:18:18 - [] D -- C:\Users\rose\AppData\Local\Microsoft Games
O43 - CFD: 2015/03/17 08:27:03 - [0] D -- C:\Users\rose\AppData\Local\Microsoft Help
O43 - CFD: 2015/03/17 09:26:58 - [] D -- C:\Users\rose\AppData\Local\Mozilla
O43 - CFD: 2015/09/22 10:48:40 - [] D -- C:\Users\rose\AppData\Local\Temp
O43 - CFD: 2010/05/22 11:02:15 - [0] SHD -- C:\Users\rose\AppData\Local\Temporary Internet Files
O43 - CFD: 2015/08/26 10:43:33 - [] D -- C:\Users\rose\AppData\Local\VirtualStore
O43 - CFD: 2015/06/10 11:58:57 - [] D -- C:\Users\rose\AppData\Local\Windows Live
O43 - CFD: 2008/01/21 04:42:46 - [] RD -- C:\Users\rose\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 2010/05/22 11:04:20 - [] RD -- C:\Users\rose\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 2010/05/22 11:03:19 - [] D -- C:\Users\rose\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink YouCam
O43 - CFD: 2008/01/21 04:42:46 - [] RD -- C:\Users\rose\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 2015/03/17 08:26:28 - [0] D -- C:\Users\rose\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PhotoFiltre Studio X
O43 - CFD: 2015/06/10 11:50:21 - [] RD -- C:\Users\rose\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
O43 - CFD: 2015/03/17 05:04:21 - [] D -- C:\Users\rose\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR

---\\ ShellIconOverlayIdentifiers (SOI) (1) - 0s
O106 - SIOI: Enhanced Storage Icon Overlay Handler Class [EnhancedStorageShell] - {D9144DCD-E998-4ECA-AB6A-DCD83CCBA16D}. (.Microsoft Corporation - Extension d'environnement du périphérique d.) -- C:\Windows\System32\EhStorShell.dll ©

---\\ Enumération des clés StartupReg (12) - 2s
O53 - SMSR:HKLM\...\startupreg\EPSON Stylus DX4400 Series [Key] . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\Windows\System32\spool\drivers\w32x86\3\E_FATICAE.EXE ©
O53 - SMSR:HKLM\...\startupreg\MSC [Key] . (.Microsoft Corporation - Microsoft Security Client User Interface.) -- C:\Program Files\Microsoft Security Client\msseces.exe ©
O53 - SMSR:HKLM\...\startupreg\RtHDVCpl [Key] . (.Realtek Semiconductor - HD Audio Control Panel.) -- C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe ©
O53 - SMSR:HKLM\...\startupreg\SDTray [Key] . (.Safer-Networking Ltd. - Spybot - Search & Destroy tray access.) -- C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe ©
O53 - SMSR:HKLM\...\startupreg\Skytel [Key] . (.Realtek Semiconductor Corp. - Realtek Voice Manager.) -- C:\Program Files\Realtek\Audio\HDA\SkyTel.exe ©
O53 - SMSR:HKLM\...\startupreg\Spybot-S&D Cleaning [Key] . (.Safer-Networking Ltd. - Search results cleaner.) -- C:\Program Files\Spybot - Search & Destroy 2\SDCleaner.exe ©
O53 - SMSR:HKLM\...\startupreg\StartCCC [Key] . (.Advanced Micro Devices, Inc. - Catalyst® Control Center Launcher.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe ©
O53 - SMSR:HKLM\...\startupreg\swg [Key] . (...) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\SynTPEnh [Key] . (.Synaptics, Inc. - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe ©
O53 - SMSR:HKLM\...\startupreg\UCam_Menu [Key] . (.CyberLink Corp. - MUI StartMenu Application.) -- C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe ©
O53 - SMSR:HKLM\...\startupreg\Windows Defender [Key] . (.Microsoft Corporation - Windows Defender User Interface.) -- C:\Program Files\Windows Defender\MSASCui.exe ©
O53 - SMSR:HKLM\...\startupreg\WMPNSCFG [Key] . (.Microsoft Corporation - Application de configuration du service Par.) -- C:\Program Files\Windows Media Player\wmpnscfg.exe ©

---\\ Liste des pilotes du système (77) - 8s
O58 - SDL:2008/01/21 04:23:21 A . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\drivers\adp94xx.sys [422968] ©
O58 - SDL:2008/01/21 04:23:25 A . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\System32\drivers\adpahci.sys [300600] ©
O58 - SDL:2008/01/21 04:23:26 A . (.Adaptec, Inc. - Adaptec LH Ultra160 Driver (x86).) -- C:\Windows\System32\drivers\adpu160m.sys [101432] ©
O58 - SDL:2008/01/21 04:23:27 A . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver.) -- C:\Windows\System32\drivers\adpu320.sys [149560] ©
O58 - SDL:2008/03/21 05:13:00 A . (.Agere Systems - SoftModem Device Driver.) -- C:\Windows\System32\drivers\AGRSM.sys [1203776] ©
O58 - SDL:2008/01/21 04:23:00 A . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\Windows\System32\drivers\aliide.sys [17464] ©
O58 - SDL:2008/01/21 04:23:23 A . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\System32\drivers\arc.sys [79416] ©
O58 - SDL:2008/01/21 04:23:24 A . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\System32\drivers\arcsas.sys [79928] ©
O58 - SDL:2009/12/17 17:02:20 A . (.Atheros Communications, Inc. - Atheros Extensible Wireless LAN device driv.) -- C:\Windows\System32\drivers\athr.sys [1203712] ©
O58 - SDL:2009/03/12 18:25:28 A . (.ATI Technologies Inc. - ATI Radeon Kernel Mode Driver.) -- C:\Windows\System32\drivers\atikmdag.sys [4386304] ©
O58 - SDL:2006/11/02 09:30:53 A . (.Broadcom Corporation - Pilote Ethernet 5.1 NDIS Broadcom Corporati.) -- C:\Windows\System32\drivers\bcm4sbxp.sys [45056] ©
O58 - SDL:2006/11/02 10:24:45 A . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower.) -- C:\Windows\System32\drivers\BrFiltLo.sys [13568] ©
O58 - SDL:2006/11/02 10:24:46 A . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper.) -- C:\Windows\System32\drivers\BrFiltUp.sys [5248] ©
O58 - SDL:2006/11/02 10:25:24 A . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\System32\drivers\BrSerId.sys [71808] ©
O58 - SDL:2006/11/02 10:24:44 A . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\System32\drivers\BrSerWdm.sys [62336] ©
O58 - SDL:2006/11/02 10:24:44 A . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\System32\drivers\BrUsbMdm.sys [12160] ©
O58 - SDL:2006/11/02 10:24:47 A . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\System32\drivers\BrUsbSer.sys [11904] ©
O58 - SDL:2008/01/21 04:23:00 A . (.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\cmdide.sys [19000] ©
O58 - SDL:2006/11/02 11:50:11 A . (.Adaptec, Inc. - Adaptec Ultra SCSI miniport.) -- C:\Windows\System32\drivers\djsvs.sys [71272] ©
O58 - SDL:2008/01/21 04:23:24 A . (.Intel Corporation - Pilote désérialisé NDIS 6 de la carte Intel.) -- C:\Windows\System32\drivers\E1G60I32.sys [118784] ©
O58 - SDL:2008/01/21 04:23:22 A . (.Emulex - Storport Miniport Driver for LightPulse HBA.) -- C:\Windows\System32\drivers\elxstor.sys [342584] ©
O58 - SDL:2008/01/21 04:23:26 A . (.Hewlett-Packard Company - Smart Array Storport Driver.) -- C:\Windows\System32\drivers\HpCISSs.sys [40504] ©
O58 - SDL:2009/02/11 10:11:50 A . (.Intel Corporation - Intel Matrix Storage Manager driver - ia32.) -- C:\Windows\System32\drivers\iaStor.sys [329752] ©
O58 - SDL:2008/01/21 04:23:23 A . (.Intel Corporation - Intel Matrix Storage Manager driver (base).) -- C:\Windows\System32\drivers\iaStorV.sys [235064] ©
O58 - SDL:2006/10/19 04:10:57 A . (.Intel Corporation - Intel Graphics Kernel Mode Driver.) -- C:\Windows\System32\drivers\igdkmd32.sys [1380864] ©
O58 - SDL:2006/11/02 11:50:17 A . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\System32\drivers\iirsp.sys [41576] ©
O58 - SDL:2006/11/02 11:50:07 A . (.Integrated Technology Express, Inc. - ITE IT8211 ATA/ATAPI SCSI miniport.) -- C:\Windows\System32\drivers\iteatapi.sys [35944] ©
O58 - SDL:2006/11/02 11:50:09 A . (.Integrated Technology Express, Inc. - ITE IT8212 ATA RAID SCSI miniport.) -- C:\Windows\System32\drivers\iteraid.sys [35944] ©
O58 - SDL:2008/08/12 04:03:20 A . (.SAMSUNG ELECTRONICS CO., LTD. - Non PnP Driver.) -- C:\Windows\System32\drivers\KMDFMEMIO.sys [13312] ©
O58 - SDL:2008/10/09 16:42:42 A . (.Windows (R) Codename Longhorn DDK provider - KMWDFilter Driver from UASSOFT.COM.) -- C:\Windows\System32\drivers\KMWDFILTER.sys [17408] ©
O58 - SDL:2008/01/21 04:23:23 A . (.LSI Logic - LSI Logic Fusion-MPT FC Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_fc.sys [96312] ©
O58 - SDL:2008/01/21 04:23:25 A . (.LSI Logic - LSI Logic Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas.sys [89656] ©
O58 - SDL:2008/01/21 04:23:23 A . (.LSI Logic - LSI Logic Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_scsi.sys [96312] ©
O58 - SDL:2015/06/18 08:41:36 A . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\drivers\mbam.sys [23256] ©
O58 - SDL:2015/06/18 08:41:42 A . (.Malwarebytes Corporation - Malwarebytes Chameleon Protection Driver.) -- C:\Windows\System32\drivers\mbamchameleon.sys [94936] ©
O58 - SDL:2015/09/22 09:55:37 A . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\drivers\MBAMSwissArmy.sys [98520] ©
O58 - SDL:2008/01/21 04:23:27 A . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows.) -- C:\Windows\System32\drivers\megasas.sys [31288] ©
O58 - SDL:2008/01/21 04:23:27 A . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\System32\drivers\MegaSR.sys [386616] ©
O58 - SDL:2006/11/02 11:49:59 A . (.LSI Logic Corporation - MegaRAID RAID Controller Driver for Windows.) -- C:\Windows\System32\drivers\Mraid35x.sys [33384] ©
O58 - SDL:2015/06/18 08:41:50 A . (.Malwarebytes Corporation - Malwarebytes Web Access Control.) -- C:\Windows\System32\drivers\mwac.sys [51928] ©
O58 - SDL:2008/01/21 04:23:20 A . (.Intel Corporation - Intel® Wireless WiFi Link Driver.) -- C:\Windows\System32\drivers\NETw3v32.sys [2225664] ©
O58 - SDL:2006/11/02 11:50:19 A . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\System32\drivers\nfrd960.sys [45160] ©
O58 - SDL:2006/11/02 09:36:50 A . (.N-trig Innovative Technologies - Pilote intégré de digitalisateur de tablett.) -- C:\Windows\System32\drivers\ntrigdigi.sys [20608] ©
O58 - SDL:2008/01/21 04:23:21 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\System32\drivers\nvraid.sys [102968] ©
O58 - SDL:2008/01/21 04:23:21 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\System32\drivers\nvstor.sys [45112] ©
O58 - SDL:2008/01/21 04:23:24 A . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\Windows\System32\drivers\ql2300.sys [1122360] ©
O58 - SDL:2006/11/02 11:50:35 A . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\Windows\System32\drivers\ql40xx.sys [106088] ©
O58 - SDL:2009/02/13 09:49:56 A . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function D.) -- C:\Windows\System32\drivers\RTKVHDA.sys [2325728] ©
O58 - SDL:2009/05/23 04:33:32 A . (.Realtek Semiconductor Corporation - Realtek RTL819xP NDIS Driverr.) -- C:\Windows\System32\drivers\rtl819xp.sys [505344] ©
O58 - SDL:2006/11/02 08:37:21 A . (.Macrovision Corporation, Macrovision Europe Limited, - Macrovision SECURITY Driver.) -- C:\Windows\System32\drivers\secdrv.sys [20480] ©
O58 - SDL:2008/01/21 04:23:26 A . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\System32\drivers\sisraid4.sys [74808] ©
O58 - SDL:2006/11/02 11:50:05 A . (.LSI Logic - LSI Logic 8XX SCSI Miniport Driver.) -- C:\Windows\System32\drivers\symc8xx.sys [35944] ©
O58 - SDL:2006/11/02 11:49:56 A . (.LSI Logic - LSI Logic Hi-Perf SCSI Miniport Driver.) -- C:\Windows\System32\drivers\sym_hi.sys [31848] ©
O58 - SDL:2006/11/02 11:50:03 A . (.LSI Logic - LSI Logic Ultra160 SCSI Miniport Driver.) -- C:\Windows\System32\drivers\sym_u3.sys [34920] ©
O58 - SDL:2008/08/28 04:52:52 A . (.Synaptics, Inc. - Synaptics Touchpad Driver.) -- C:\Windows\System32\drivers\SynTP.sys [199344] ©
O58 - SDL:2008/01/21 04:23:20 A . (.ULi Electronics Inc. - ULi SATA Controller Driver.) -- C:\Windows\System32\drivers\uliahci.sys [238648] ©
O58 - SDL:2006/11/02 11:50:35 A . (.Promise Technology, Inc. - Promise Ultra/Sata Series Driver for Win200.) -- C:\Windows\System32\drivers\ulsata.sys [98408] ©
O58 - SDL:2008/01/21 04:23:23 A . (.Promise Technology, Inc. - Promise SATAII150 Series Windows Drivers.) -- C:\Windows\System32\drivers\ulsata2.sys [115816] ©
O58 - SDL:2008/01/21 04:23:00 A . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\viaide.sys [20024] ©
O58 - SDL:2008/11/21 03:22:24 A . (.Vimicro Corporation - Vimicro USB Video Class Camera.) -- C:\Windows\System32\drivers\VMC326.sys [238464] ©
O58 - SDL:2008/01/21 04:23:23 A . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\Windows\System32\drivers\vsmraid.sys [130616] ©
O58 - SDL:2009/01/30 11:07:00 A . (.Marvell - Miniport Driver for Marvell Yukon Ethernet.) -- C:\Windows\System32\drivers\yk60x86.sys [311296] ©
O58 - SDL:2006/11/02 09:09:42 A . (...) -- C:\Windows\System32\ANSI.SYS [9029]
O58 - SDL:2006/11/02 09:09:45 A . (...) -- C:\Windows\System32\country.sys [27097]
O58 - SDL:2006/11/02 09:09:41 A . (...) -- C:\Windows\System32\HIMEM.SYS [4768]
O58 - SDL:2006/11/02 09:09:44 A . (...) -- C:\Windows\System32\KEY01.SYS [42809]
O58 - SDL:2006/11/02 09:09:44 A . (...) -- C:\Windows\System32\KEYBOARD.SYS [42537]
O58 - SDL:2006/11/02 09:09:29 A . (...) -- C:\Windows\System32\NTDOS.SYS [27866]
O58 - SDL:2006/11/02 09:09:35 A . (...) -- C:\Windows\System32\NTDOS404.SYS [29146]
O58 - SDL:2006/11/02 09:09:38 A . (...) -- C:\Windows\System32\NTDOS411.SYS [29370]
O58 - SDL:2006/11/02 09:09:40 A . (...) -- C:\Windows\System32\NTDOS412.SYS [29274]
O58 - SDL:2006/11/02 09:09:31 A . (...) -- C:\Windows\System32\NTDOS804.SYS [29146]
O58 - SDL:2006/11/02 09:09:20 A . (...) -- C:\Windows\System32\NTIO.SYS [33952]
O58 - SDL:2006/11/02 09:09:23 A . (...) -- C:\Windows\System32\NTIO404.SYS [34672]
O58 - SDL:2006/11/02 09:09:24 A . (...) -- C:\Windows\System32\NTIO411.SYS [35776]
O58 - SDL:2006/11/02 09:09:26 A . (...) -- C:\Windows\System32\NTIO412.SYS [35536]
O58 - SDL:2006/11/02 09:09:22 A . (...) -- C:\Windows\System32\NTIO804.SYS [34672]

---\\ Derniers fichiers modifiés ou crées (Utilisateur) (2) - 2s
O61 - LFC: 2015/09/22 10:13:28 A . (..) -- C:\Users\rose\AppData\Local\Google\Chrome\User Data\ev_hashes_whitelist.bin [674082]
O61 - LFC: 2015/09/22 10:44:41 A . (..) -- C:\Users\rose\AppData\Local\Google\Chrome\User Data\nacl_validation_cache.bin [164]

---\\ Associations Shell Spawning (10) - 0s
O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe ©
O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Ob.) -- C:\Windows\System32\eventvwr.exe ©
O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe ©
O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft (R) Windows Based Script Host.) -- C:\Windows\System32\wscript.exe ©
O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe ©
O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S

---\\ Menu de démarrage Internet (12) - 0s
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (...) -- firefox.exe
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe ©
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (...) -- iexplore.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe ©

---\\ Recherche d'infection sur les navigateurs (4) - 4s
O69 - SBI: prefs.js [rose - j41o90gl.default] user_pref("browser.search.searchengine.desc", "this is my first firefox searchEngine"); =>PUP.Optional.SearchEngine
O69 - SBI: prefs.js [rose - j41o90gl.default] user_pref("browser.search.searchengine.ptid", "cmi"); =>PUP.Optional.SearchEngine
O69 - SBI: prefs.js [rose - j41o90gl.default] user_pref("browser.search.searchengine.uid", "ST9500325AS_5VE40WF2XXXX5VE40WF2"); =>PUP.Optional.SearchEngine
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (Bing) - http://www.bing.com/

---\\ Enumère les services démarrés par Svchost (31) - 0s
O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d’application.) -- C:\Windows\System32\aelupsvc.dll [24576] ©
O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll [62976] ©
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [247808] ©
O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [40448] ©
O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [40448] ©
O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\System32\srvsvc.dll [125952] ©
O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\System32\gpsvc.dll [576512] ©
O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\IKEEXT.DLL [444928] ©
O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Service Audio Windows.) -- C:\Windows\System32\audiosrv.dll [316928] ©
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’.) -- C:\Windows\System32\rasauto.dll [90624] ©
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire de connexions d'accès distant.) -- C:\Windows\System32\rasmans.dll [262144] ©
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll [68608] ©
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements systèm.) -- C:\Windows\System32\Sens.dll [47104] ©
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l'application d'assistance à.) -- C:\Windows\System32\ipnathlp.dll [288256] ©
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM.) -- C:\Windows\System32\tapisrv.dll [242688] ©
O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gestionnaire des connexions distantes Termi.) -- C:\Windows\System32\termsrv.dll [449536] ©
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Up.) -- C:\Windows\System32\wuaueng.dll [1933848] ©
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière.) -- C:\Windows\System32\qmgr.dll [758784] ©
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [247808] ©
O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur u.) -- C:\Windows\System32\iphlpsvc.dll [200704] ©
O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d'ouverture de session secon.) -- C:\Windows\System32\seclogon.dll [19968] ©
O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll [33280] ©
O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\System32\iscsiexe.dll [111616] ©
O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédia.) -- C:\Windows\System32\mmcss.dll [45056] ©
O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll [153600] ©
O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll [57344] ©
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll [162304] ©
O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\System32\schedsvc.dll [602112] ©
O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service de configuration des services Termi.) -- C:\Windows\System32\SessEnv.dll [84992] ©
O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\System32\browser.dll [81920] ©
O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\Windows\System32\KMSVC.DLL [68096] ©

---\\ Liste des exceptions du parefeu Windows (1) - 1s
O87 - FAEL: "{1FCBF794-4233-4301-A509-95479C6DC578}" [In-None-P6-TRUE] .(...) -- C:\Program Files\Common Files\Mcafee\MNA\McNaSvc.exe (.not file.)

---\\ Enumère les codes produits des logiciels (2) - 2s
O90 - PUC: "E41FC473BA71A3644ADA1331D8D48F7E" . (.PC Privacy Dock.) -- C:\Windows\Installer\{374CF14E-17AB-463A-A4AD-31138D4DF8E7}\icon.exe =>PUP.Optional.PCPrivacyDock
O90 - PUC: "E8E877ED6825FF148AE54DA13648DD38" . (.Boxore Client.) -- C:\Windows\Installer\{DE778E8E-5286-41FF-A85E-D41A6384DD83}\Boxore.ico =>PUP.Optional.Boxore

---\\ Services non Microsoft (SR=Démarré,SS=Stoppé) (13) - 21s

SR - Auto [2015/07/07 20:12:28] [ 82128] Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe ©
SS - Demand [2015/09/22 07:55:30] [ 269000] Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe ©
SR - Auto [2008/03/18 05:27:12] [ 13312] Agere Modem Call Progress Audio (AgereModemAudio) . (.Agere Systems.) - C:\Windows\System32\agrsmsvc.exe ©
SR - Auto [2009/03/12 16:23:14] [ 733184] (Ati External Event Utility) . (.ATI Technologies Inc..) - C:\Windows\System32\Ati2evxx.exe ©
SS - Auto [2015/03/17 08:16:20] [ 107848] Service Google Update (gupdate) (gupdate) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe ©
SS - Demand [2015/03/17 08:16:20] [ 107848] Service Google Update (gupdatem) (gupdatem) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe ©
SS - Auto [2015/06/18 08:39:50] [ 1133880] (MBAMService) . (.Malwarebytes Corporation.) - C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe ©
SS - Demand [2015/03/05 15:06:22] [ 148080] Mozilla Maintenance Service (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe ©
SR - Auto [2009/03/05 11:54:50] [ 311296] Rezip (Rezip) . (.Copyright (C) 2009.) - C:\Windows\System32\Rezip.exe
SR - Auto [2014/06/24 10:41:42] [ 1738168] Spybot-S&D 2 Scanner Service (SDScannerService) . (.Safer-Networking Ltd..) - C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe ©
SR - Auto [2014/06/27 11:52:26] [ 2088408] Spybot-S&D 2 Updating Service (SDUpdateService) . (.Safer-Networking Ltd..) - C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe ©
SR - Auto [2014/04/25 14:12:20] [ 171928] Spybot-S&D 2 Security Center Service (SDWSCService) . (.Safer-Networking Ltd..) - C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe ©

---\\ Scan Additionnel (12) - 0s
C:\Windows\Tasks\DBJXMQ1.job =>PUP.Optional.FlashBeat
C:\Windows\System32\Tasks\DBJXMQ1 =>PUP.Optional.FlashBeat
C:\Windows\System32\Tasks\Wluklinu =>Heuristic.PullUpdate
HKLM\SOFTWARE\ASKInstaller =>Toolbar.Ask
C:\Program Files\9fdf270e-3374-4ae3-b6f3-c6c9951158e7 =>PUP.Optional.CrossRider
C:\Program Files\Software =>PUP.Optional.Boxore
C:\Windows\Installer\{374CF14E-17AB-463A-A4AD-31138D4DF8E7}\icon.exe =>PUP.Optional.PCPrivacyDock
HKLM\Software\Classes\Installer\Products\E41FC473BA71A3644ADA1331D8D48F7E =>PUP.Optional.PCPrivacyDock
HKLM\Software\Classes\Installer\Features\E41FC473BA71A3644ADA1331D8D48F7E =>PUP.Optional.PCPrivacyDock
C:\Windows\Installer\{DE778E8E-5286-41FF-A85E-D41A6384DD83}\Boxore.ico =>PUP.Optional.Boxore
HKLM\Software\Classes\Installer\Products\E8E877ED6825FF148AE54DA13648DD38 =>PUP.Optional.Boxore
HKLM\Software\Classes\Installer\Features\E8E877ED6825FF148AE54DA13648DD38 =>PUP.Optional.Boxore

---\\ Récapitulatif des éléments trouvées sur votre station (8) - 0s
http://www.nicolascoolman.fr/blog =>PUP.Optional.Graftor
http://www.nicolascoolman.fr/blog =>PUP.Optional.FlashBeat
http://www.nicolascoolman.fr/blog =>Heuristic.PullUpdate
http://www.nicolascoolman.fr/toolbar-ask/ =>Toolbar.Ask
http://www.nicolascoolman.fr/pup-crossrider/ =>PUP.Optional.CrossRider
http://www.nicolascoolman.fr/adware-boxore/ =>PUP.Optional.Boxore
http://www.nicolascoolman.fr/blog =>PUP.Optional.SearchEngine
http://www.nicolascoolman.fr/blog =>PUP.Optional.PCPrivacyDock

~ End of the scan, 43705 items in 109 seconds (733)(0)()