cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

~ ZHPDiag v2015.12.16.186 Par Nicolas Coolman (2015/12/16)
~ Démarré par mourad (Administrator) (2015/12/17 15:26:16)
~ Site: http://www.nicolascoolman.fr
~ Facebook: https://www.facebook.com/nicolascoolman1
~ Etat de la version: Version OK
~ Mode: Scanner
~ Rapport: C:\Users\mourad\Desktop\ZHPDiag.txt
~ Rapport: C:\Users\mourad\AppData\Roaming\ZHP\ZHPDiag.txt
~ UAC: Activate
~ Démarrage du système: Normal (Normal boot)
Windows 7 Ultimate, 64-bit Service Pack 1 (Build 7601)

---\\ Navigateurs Internet (3) - 0s
GCIE: Google Chrome v47.0.2526.80
MFIE: Mozilla Firefox 42.0 (x86 fr) v42.0
MSIE: Internet Explorer v11.0.9600.17843

---\\ Informations sur les produits Windows (4) - 3s
~ Windows Server License Manager Script : OK
~ Licence Script File Génération : OK
Windows Automatic Updates : OK
Windows Activation Technologies : OK

---\\ Logiciels de protection (1) - 3s
Windows Defender W7 (Activate)

---\\ Logiciels d'optimisation (1) - 3s
CCleaner v4.08

---\\ Surveillance de Logiciels (2) - 3s
Adobe Flash Player 20 NPAPI
Adobe Reader 9.3 - Français

---\\ Informations sur le système (6) - 0s
~ Operating System: Intel64 Family 6 Model 60 Stepping 3, GenuineIntel
~ Operating System: 64-bit
~ Boot mode: Normal (Normal boot)
Total RAM: 8339.264 MB (73% free)
System Restore: Activé (Enable)
System drive C: has 24 GB () free of 99 GB

---\\ Mode de connexion au système (3) - 0s
~ Computer Name: MOURAD-PC
~ User Name: mourad
~ Logged in as Administrator

---\\ Enumération des unités disques (4) - 0s
~ Drive C: has 24 GB free of 99 GB (System)
~ Drive D: has 39 GB free of 176 GB
~ Drive E: has 39 GB free of 199 GB
~ Drive L: has 3 GB free of 7 GB

---\\ Etat du Centre de Sécurité Windows (14) - 0s
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings] WarnOnHTTPSToHTTPRedirect: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK

---\\ Recherche particulière de fichiers génériques (26) - 2s
[MD5.332FEAB1435662FC6C672E25BEB37BE3] - 25/02/2011 - (.Microsoft Corporation - Explorateur Windows.) -- C:\Windows\Explorer.exe [2871808] ©
[MD5.DD81D91FF3B0763C392422865C9AC12E] - 14/07/2009 - (.Microsoft Corporation - Processus hôte Windows (Rundll32).) -- C:\Windows\System32\rundll32.exe [45568] ©
[MD5.94355C28C1970635A31B3FE52EB7CEBA] - 14/07/2009 - (.Microsoft Corporation - Application de démarrage de Windows.) -- C:\Windows\System32\Wininit.exe [129024] ©
[MD5.417F80E4AFBA1AA9EBBD618F1C6D9165] - 22/05/2015 - (.Microsoft Corporation - Extensions Internet pour Win32.) -- C:\Windows\System32\wininet.dll [2426880] ©
[MD5.8CEBD9D0A0A879CDE9F36F4383B7CAEA] - 17/07/2014 - (.Microsoft Corporation - Application d’ouverture de session Windows.) -- C:\Windows\System32\Winlogon.exe [455168] ©
[MD5.067FA52BFB59A56110A12312EF9AF243] - 19/01/2011 - (.Microsoft Corporation - Bibliothèque de licences.) -- C:\Windows\System32\sppcomapi.dll [232448] ©
[MD5.492D07D79E7024CA310867B526D9636D] - 03/03/2011 - (.Microsoft Corporation - DNS DLL de l’API Client.) -- C:\Windows\System32\dnsapi.dll [357888] ©
[MD5.B40420876B9288E0A1C8CCA8A84E5DC9] - 03/03/2011 - (.Microsoft Corporation - DNS DLL de l’API Client.) -- C:\Windows\Syswow64\dnsapi.dll [270336] ©
[MD5.0D57D091E06BB1E58E72E5D08479FDDF] - 19/01/2011 - (.Microsoft Corporation - DLL client de l’API uilisateur de Windows m.) -- C:\Windows\System32\fr-FR\user32.dll.mui [20480] ©
[MD5.FA886682CFC5D36718D3E436AACF10B9] - 30/05/2014 - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) -- C:\Windows\System32\drivers\AFD.sys [497152] ©
[MD5.02062C0B390B7729EDC9E69C680A6F3C] - 14/07/2009 - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) -- C:\Windows\System32\drivers\atapi.sys [24128] =>.Microsoft Windows®
[MD5.B8BD2BB284668C84865658C77574381A] - 14/07/2009 - (.Microsoft Corporation - CD-ROM File System Driver.) -- C:\Windows\System32\drivers\Cdfs.sys [92160] ©
[MD5.F036CE71586E93D94DAB220D7BDF4416] - 19/01/2011 - (.Microsoft Corporation - SCSI CD-ROM Driver.) -- C:\Windows\System32\drivers\Cdrom.sys [147456] ©
[MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - 19/01/2011 - (.Microsoft Corporation - DFS Namespace Client Driver.) -- C:\Windows\System32\drivers\DfsC.sys [102400] ©
[MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - 19/01/2011 - (.Microsoft Corporation - High Definition Audio Bus Driver.) -- C:\Windows\System32\drivers\HDAudBus.sys [122368] ©
[MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - 14/07/2009 - (.Microsoft Corporation - Pilote de port i8042.) -- C:\Windows\System32\drivers\i8042prt.sys [105472] ©
[MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - 14/07/2009 - (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\System32\drivers\IpNat.sys [116224] ©
[MD5.A5D9106A73DC88564C825D317CAC68AC] - 27/04/2011 - (.Microsoft Corporation - Windows NT SMB Minirdr.) -- C:\Windows\System32\drivers\MRxSmb.sys [158208] ©
[MD5.09594D1089C523423B32A4229263F068] - 19/01/2011 - (.Microsoft Corporation - MBT Transport driver.) -- C:\Windows\System32\drivers\netBT.sys [261632] ©
[MD5.1A29A59A4C5BA6F8C85062A613B7E2B2] - 24/01/2014 - (.Microsoft Corporation - Pilote du système de fichiers NT.) -- C:\Windows\System32\drivers\ntfs.sys [1684928] =>.Microsoft Windows®
[MD5.0086431C29C35BE1DBC43F52CC273887] - 14/07/2009 - (.Microsoft Corporation - Pilote de port parallèle.) -- C:\Windows\System32\drivers\Parport.sys [97280] ©
[MD5.471815800AE33E6F1C32FB1B97C490CA] - 19/01/2011 - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) -- C:\Windows\System32\drivers\Rasl2tp.sys [129536] ©
[MD5.1B6163C503398B23FF8B939C67747683] - 19/01/2011 - (.Microsoft Corporation - Microsoft RDP Device redirector.) -- C:\Windows\System32\drivers\rdpdr.sys [165888] ©
[MD5.548260A7B8654E024DC30BF8A7C5BAA4] - 14/07/2009 - (.Microsoft Corporation - SMB Transport driver.) -- C:\Windows\System32\drivers\smb.sys [93184] ©
[MD5.70988118145F5F10EF24720B97F35F65] - 11/11/2014 - (.Microsoft Corporation - TDI Translation Driver.) -- C:\Windows\System32\drivers\tdx.sys [119296] ©
[MD5.0D08D2F3B3FF84E433346669B5E0F639] - 19/01/2011 - (.Microsoft Corporation - Pilote de cliché instantané du volume.) -- C:\Windows\System32\drivers\volsnap.sys [295808] =>.Microsoft Windows®

---\\ Liste des services NT non Microsoft et non désactivés (19) - 1s
O23 - Service: (AMD External Events Utility) . (.AMD - AMD External Events Service Module.) - C:\Windows\system32\atiesrxx.exe ©
O23 - Service: ApplicationHosting (ApplicationHosting) . (...) - C:\ProgramData\ApplicationHosting\ApplicationHosting.exe =>PUP.Optional.ApplicationHosting
O23 - Service: AppnorriA (AppnorriA) . (...) - C:\ProgramData\AppnorriA\AppnorriA.exe =>PUP.Optional.Salus
O23 - Service: caMyciloP (caMyciloP) . (...) - C:\ProgramData\caMyciloP\caMyciloP.exe =>PUP.Optional.Salus
O23 - Service: Compliant Host Controller (cohci1394) . (.Copyright © 2015 - .) - C:\Program Files\Controller\cohc.exe
O23 - Service: D_Link_DWA-125_WPS Service (D_Link_DWA-125_WPS) . (. - ANIWConnService.) - C:\Program Files (x86)\D-Link\DWA-125 revA\ANIWConnService.exe
O23 - Service: U- Zaming (entdtwojozuuaate) . (. - xrc.) - C:\Users\mourad\AppData\Local\Vilafase.exe
O23 - Service: (GamingApp_Service) . (.Micro-Star Int'l Co., Ltd. - GamingApp_Service.) - C:\Program Files (x86)\MSI\MSI Gaming APP\GamingApp_Service.exe =>.MICRO-STAR INTERNATIONAL CO., LTD.®
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google Inc®
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) . (.Intel Corporation - IAStorDataSvc.) - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe =>.Intel Corporation - Intel® Rapid Storage Technology®
O23 - Service: Intel(R) Smart Connect Technology Agent (ISCTAgent) . (.Copyright© 2011-2013 Intel Corporation - ISCT Agent Application.) - C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe =>.Intel CASE®
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) . (.Intel Corporation - Intel(R) Dynamic Application Loader Host In.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe =>.Intel Corporation - Intel® Management Engine Firmware®
O23 - Service: Killer Service V2 (Killer Service V2) . (.Rivet Networks - Killer Network Service.) - C:\Program Files\Killer Networking\Network Manager\KillerService.exe ©
O23 - Service: Intel(R) Management and Security Application Local Manageme (LMS) . (.Intel Corporation - Intel(R) Local Management Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe =>.Intel Corporation - Intel® Management Engine Firmware®
O23 - Service: MSI_FastBoot (MSI_FastBoot) . (.MSI - FastBootService.) - C:\Program Files (x86)\MSI\Fast Boot\FastBootService.exe =>.MICRO-STAR INTERNATIONAL CO., LTD.®
O23 - Service: This service enables products that use the Nalpeiron Licens (nlsX86cc) . (.Nalpeiron Ltd. - This service enables products that use the.) - C:\Windows\SysWOW64\nlssrv32.exe ©
O23 - Service: Cyberlink RichVideo64 Service(CRVS) (RichVideo64) . (.CyberLink - CyberLink RichVideo Module.) - C:\Program Files\CyberLink\Shared files\RichVideo64.exe =>.CyberLink Corp.®
O23 - Service: Saophase (Saophase) . (...) - C:\ProgramData\Saophase\Saophase.exe =>PUP.Optional.Salus
O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files (x86)\Skype\Updater\Updater.exe =>.Skype Software Sarl®

---\\ Tâches planifiées en automatique (17) - 3s
[MD5.DD447775B268E90264D5F45EFF374395] [APT] [2mirtz2e] (...) -- C:\Program Files\Common Files\jjqxcdnt\3807cplcbblvw.exe [57344]
[MD5.F54564025D2284AE498E51D7C139F971] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [269504] =>.Adobe Systems Incorporated®
[MD5.BD9F34DE12E1D8547BBE1E12A7F9F245] [APT] [CCleanerSkipUAC] (.Piriform Ltd.) -- C:\Program Files\CCleaner\CCleaner.exe [4324120] =>.Piriform Ltd®
[MD5.00000000000000000000000000000000] [APT] [comwedatey] (...) -- C:\Windows\system32\config\systemprofile\AppData\Local\Zoneron /t 7033 3345 (.not file.) [0]
[MD5.E1B44A75947137F4143308D566889837] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [107848] =>.Google Inc®
[MD5.E1B44A75947137F4143308D566889837] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [107848] =>.Google Inc®
[MD5.34EBD4FF6A24D86BB4716D6AFCC1A89B] [APT] [Apple\AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [561984] =>.Apple Inc.®
[MD5.C08A5FCEFA5EE421E6146A8F674D1A2A] [APT] [Lenovo\Lenovo Customer Feedback Program 64 35] (.Lenovo.) -- C:\Program Files (x86)\Lenovo\Customer Feedback Program 35\Lenovo.TVT.CustomerFeedback.Agent35.exe [16832] =>.LENOVO®
O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\Tasks\Adobe Flash Player Updater.job [1002] ©
O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job [1066] ©
O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job [1070] ©
O39 - APT: 2mirtz2e - (...) -- C:\Windows\System32\Tasks\2mirtz2e [3156]
O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Tasks\Adobe Flash Player Updater [3940] ©
O39 - APT: CCleanerSkipUAC - (.Piriform Ltd.) -- C:\Windows\System32\Tasks\CCleanerSkipUAC [2774] ©
O39 - APT: comwedatey - (...) -- C:\Windows\System32\Tasks\comwedatey [3238]
O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore [3814] ©
O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA [4066] ©

---\\ Processus lancés (13) - 1s
[MD5.F72F357107A02C43B6DE390B36843118] - (...) -- C:\ProgramData\ApplicationHosting\ApplicationHosting.exe [441856] [PID.1588] =>PUP.Optional.ApplicationHosting
[MD5.BA268AF05C0911BC65EA4DE2DE26105F] - (...) -- C:\ProgramData\AppnorriA\AppnorriA.exe [441856] [PID.352] =>PUP.Optional.Salus
[MD5.BA268AF05C0911BC65EA4DE2DE26105F] - (...) -- C:\ProgramData\caMyciloP\caMyciloP.exe [441856] [PID.1828] =>PUP.Optional.Salus
[MD5.BDA7DFD83A3C04B5829A38E352CCEDA4] - (.Copyright © 2015 - .) -- C:\Program Files\Controller\cohc.exe [379392] [PID.2000]
[MD5.C062A2B158ED9C643D24F8E33A607C9F] - (. - ANIWConnService.) -- C:\Program Files (x86)\D-Link\DWA-125 revA\ANIWConnService.exe [53248] [PID.2004]
[MD5.F6987FF6C6D683F79FDCE707B071A997] - (.SFX TEAM - SuperCopier 2 (explorer file copy replaceme.) -- C:\Program Files (x86)\SuperCopier2\SuperCopier2.exe [955392] [PID.2220] ©
[MD5.5881014FEADC6E65C08586D6E33CB8C7] - (.Tonec Inc. - Internet Download Manager (IDM).) -- C:\Program Files (x86)\Internet Download Manager\IDMan.exe [3907152] [PID.2232] ©
[MD5.5BC49B01D06DBD8B06E3B33B3E430DF6] - (.Rivet Networks - Killer Network Service.) -- C:\Program Files\Killer Networking\Network Manager\KillerService.exe [386560] [PID.1988] ©
[MD5.B1EF4686961986DFFB7FE8F18E6FCB5B] - (.Nalpeiron Ltd. - This service enables products that use the.) -- C:\Windows\SysWOW64\nlssrv32.exe [66560] [PID.2712] ©
[MD5.BA268AF05C0911BC65EA4DE2DE26105F] - (...) -- C:\ProgramData\Saophase\Saophase.exe [441856] [PID.2808] =>PUP.Optional.Salus
[MD5.6BF0147A7A924E5A3AE049A95ECC9B34] - (.AMD - AMD External Events Service Module.) -- C:\Windows\System32\atiesrxx.exe [246784] [PID.5900] ©
[MD5.B7CC6DB515E9347EEC2FC19D4C09A962] - (.AMD - AMD External Events Client Module.) -- C:\Windows\System32\atieclxx.exe [672768] [PID.5948] ©
[MD5.633B6204CCEF51D1DF7293C23BBB35CF] - (.Copyright (C) 2015 Nicolas Coolman - ZHPDiag.) -- C:\Users\mourad\Downloads\Programs\ZHPDiag3.exe [2019328] [PID.4064] ©

---\\ Google Chrome, Démarrage,Recherche,Extensions (10) - 1s
G0 - GCSP: Secure Preferences [User Data\Default][HomePage] http://www.google.com
G2 - GCE: Preference [User Data\Default] [aohghmighlieiainnegkcijnfilokake] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [apdfllckaahabafndbhieahigkjlhalf] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [blpcfgokakmgnkcojhhkbfbldkacnbeo] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [coobgpohoikkiipiblmjeljniedjpjpf] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [fcgnigmofekcllgbiejhmigggmgehkip] Wiki-Search.me =>PUP.Optional.WikiSearchMe
G2 - GCE: Preference [User Data\Default] [ghbmnnjooekpmoecnnnilnnbdlolhkhi] __MSG_extName__
G2 - GCE: Preference [User Data\Default] [gighmmpiobklfepjocnamgkkbiglidom] AdBlock
G2 - GCE: Preference [User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [pjkljhegncpnkpknbcohdijeoejaedia] Google Chrome manifest =>.Google Inc.

---\\ Firefox, Plugins,Demarrage,Recherche,Extensions (5) - 0s
P2 - EXT FILE: (...) -- C:\Users\mourad\AppData\Roaming\Mozilla\Firefox\Profiles\2lv5hx5r.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
P2 - EXT FILE: (...) -- C:\Users\mourad\AppData\Roaming\Mozilla\Firefox\Profiles\2lv5hx5r.default\extensions\{eb80b076-a444-444c-a590-5aee5d977d80}.xpi
P2 - EXT: (.Mozilla - Default.) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} ©
P2 - EXT: (.Giuliano Masseroni - United States English Spellchecker.) -- C:\Users\mourad\AppData\Roaming\Mozilla\Firefox\Profiles\2lv5hx5r.default\extensions\en-US@dictionaries.addons.mozilla.org ©
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_235.dll ©

---\\ Internet Explorer,Démarrage,Recherche,URLSearchHook (17) - 0s
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.dz/
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://%66%65%65%64.%73%6f%6e%69%63-%73%65%61%72%63%68.%63%6f%6d/?p=mko_awfzxipyrystty34mamef947lyub11ecqdqoyjiduvokusfpwerwxl0e7aa_arebxoadewijyocnik6galyn8k8m6gi7j48wozapffkqt336irtjvwx25kuzrk16tfqaeyje8ihv3rkwj6zd1dtco9jiwjl8m6draw2fg8rz9q,,&q={searchterms} =>PUP.Optional.Linkury
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphean =>.Microsoft Internet Explorer
R4 - HKCU\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,Enabled = 2

---\\ Internet Explorer,Proxy Management (4) - 0s
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll

---\\ Internet Explorer,IniFiles, Autoloading programs (3) - 0s
F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe (.Microsoft Corporation.) ©
F2 - REG:system.ini: Shell=explorer.exe, "C:\Users\mourad\AppData\Roaming\Microsoft\Windows\Templates\O41414Z\TuxO41414Z.exe"
F2 - REG:system.ini: VMApplet=C:\Windows\SysWOW64\SystemPropertiesPerformance.exe (.Microsoft Corporation.) ©

---\\ Etude du fichier hosts (1) - 0s
~ Le fichier hôte est sain (The hosts file is clean) (1)

---\\ Browser Helper Object de navigateur (BHO) (1) - 0s
O2 - BHO: IDM Helper [64Bits] - {0055C089-8582-441B-A0BF-17B458C2A3A8} . (.Internet Download Manager, Tonec Inc. - IDM Browser Helper Object.) -- C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll =>.Tonec Inc.®

---\\ Applications lancées au démarrage du système (10) - 1s
O4 - HKLM\..\Run: [RTHDVCPL] . (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe =>.Realtek Semiconductor Corp®
O4 - HKCU\..\Run: [SuperCopier2.exe] . (.SFX TEAM - SuperCopier 2 (explorer file copy replaceme.) -- C:\Program Files (x86)\SuperCopier2\SuperCopier2.exe ©
O4 - HKCU\..\Run: [IDMan] . (.Tonec Inc. - Internet Download Manager (IDM).) -- C:\Program Files (x86)\Internet Download Manager\IDMan.exe ©
O4 - HKCU\..\Run: [Viber] . (. - Viber.) -- C:\Users\mourad\AppData\Local\Viber\Viber.exe {5B2B01101C2900E34ECB16F78E6B73BF}
O4 - HKLM\..\Wow6432Node\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe =>.Adobe Systems, Incorporated®
O4 - HKLM\..\Wow6432Node\Run: [Fast Boot] . (...) -- C:\Program Files (x86)\MSI\Fast Boot\StartFastBoot.exe =>.MICRO-STAR INTERNATIONAL CO., LTD.®
O4 - HKLM\..\Wow6432Node\Run: [StartCCC] . (.Advanced Micro Devices, Inc. - Catalyst® Control Center Launcher.) -- C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe =>.Advanced Micro Devices, Inc.®
O4 - HKUS\S-1-5-21-212472963-4267902375-3941050132-1000\..\Run: [SuperCopier2.exe] . (.SFX TEAM - SuperCopier 2 (explorer file copy replaceme.) -- C:\Program Files (x86)\SuperCopier2\SuperCopier2.exe ©
O4 - HKUS\S-1-5-21-212472963-4267902375-3941050132-1000\..\Run: [IDMan] . (.Tonec Inc. - Internet Download Manager (IDM).) -- C:\Program Files (x86)\Internet Download Manager\IDMan.exe ©
O4 - HKUS\S-1-5-21-212472963-4267902375-3941050132-1000\..\Run: [Viber] . (. - Viber.) -- C:\Users\mourad\AppData\Local\Viber\Viber.exe {5B2B01101C2900E34ECB16F78E6B73BF}

---\\ Modification Domaine/Adresses DNS (6) - 0s
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.42.129
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: DhcpNameServer = 192.168.42.129
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: NameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: DhcpNameServer = 192.168.42.129

---\\ Protocole additionnel (22) - 1s
O18 - Handler: about [64Bits] - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll ©
O18 - Handler: cdl [64Bits] - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll ©
O18 - Handler: dvd [64Bits] - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\SysWOW64\MSVidCtl.dll ©
O18 - Handler: file [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll ©
O18 - Handler: ftp [64Bits] - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll ©
O18 - Handler: http [64Bits] - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll ©
O18 - Handler: https [64Bits] - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll ©
O18 - Handler: its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll ©
O18 - Handler: javascript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll ©
O18 - Handler: local [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll ©
O18 - Handler: mailto [64Bits] - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll ©
O18 - Handler: mhtml [64Bits] - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\System32\inetcomm.dll ©
O18 - Handler: mk [64Bits] - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll ©
O18 - Handler: ms-its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll ©
O18 - Handler: mso-offdap [64Bits] - {3D9F03FA-7A94-11D3-BE81-0050048385D1} . (.Microsoft Corporation - Microsoft Office XP Web Components.) -- C:\Program Files (x86)\Common Files\microsoft shared\Web Components\10\OWC10.DLL {6105875800030000005A} ©
O18 - Handler: res [64Bits] - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll ©
O18 - Handler: tv [64Bits] - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\SysWOW64\MSVidCtl.dll ©
O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll ©
O18 - Filter: application/octet-stream [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation®
O18 - Filter: application/x-complus [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation®
O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation®
O18 - Filter: text/xml [64Bits] - {807553E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL {61071143000000000034} ©

---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (1) - 0s
O20 - AppInit_DLLs: . (...) - C:\ProgramData\Saophase\Icetam.dll =>PUP.Optional.Salus

---\\ Logiciels installés (118) - 8s
O42 - Logiciel: µTorrent - (.BitTorrent Inc..) [HKCU][64Bits] -- uTorrent =>.BitTorrent Inc®
O42 - Logiciel: 7-Zip 9.38 beta - (...) [HKLM][64Bits] -- 7-Zip
O42 - Logiciel: Adobe Bridge 1.0 - (.Adobe Systems.) [HKLM][64Bits] -- {B74D4E10-6884-0000-0000-000000000101} ©
O42 - Logiciel: Adobe Common File Installer - (.Adobe System Incorporated.) [HKLM][64Bits] -- {8EDBA74D-0686-4C99-BFDD-F894678E5101} ©
O42 - Logiciel: Adobe Flash Player 20 ActiveX - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player ActiveX =>.Adobe Systems Incorporated®
O42 - Logiciel: Adobe Flash Player 20 NPAPI - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player NPAPI =>.Adobe Systems Incorporated®
O42 - Logiciel: Adobe Help Center 1.0 - (.Adobe Systems.) [HKLM][64Bits] -- {E9787678-119F-4D52-B551-6739B2B22101} ©
O42 - Logiciel: Adobe Photoshop CS2 - (.Adobe Systems, Inc..) [HKLM][64Bits] -- {236BB7C4-4419-42FD-0409-1E257A25E34D} ©
O42 - Logiciel: Adobe Photoshop CS2 - (.Adobe Systems, Inc..) [HKLM][64Bits] -- Adobe Photoshop CS2 - {236BB7C4-4419-42FD-0409-1E257A25E34D} ©
O42 - Logiciel: Adobe Reader 9.3 - Français - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-7AD7-1036-7B44-A93000000001} ©
O42 - Logiciel: Adobe Shockwave Player 12.2 - (.Adobe Systems, Inc..) [HKLM][64Bits] -- Adobe Shockwave Player ©
O42 - Logiciel: Adobe Stock Photos 1.0 - (.Adobe Systems.) [HKLM][64Bits] -- {786C5747-1033-0000-B58E-000000000001} ©
O42 - Logiciel: AMD Accelerated Video Transcoding - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {2F79863B-403C-410C-F08E-187AD35CCECA} ©
O42 - Logiciel: AMD APP SDK Runtime - (.Advanced Micro Devices Inc..) [HKLM][64Bits] -- {503F672D-6C84-448A-8F8F-4BC35AC83441} ©
O42 - Logiciel: AMD Catalyst Control Center - (.Nom de votre société.) [HKLM][64Bits] -- {0C2D7460-3633-F05A-4504-A4BAF0508E63}
O42 - Logiciel: AMD Catalyst Install Manager - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {8DF1EF50-AEB6-902C-F68C-4683C45784E6} ©
O42 - Logiciel: AMD Drag and Drop Transcoding - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {09FE4021-B5E4-2C96-B5E4-09844991C8B8} ©
O42 - Logiciel: AMD Media Foundation Decoders - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {F18A262C-DC42-E0EB-F83E-FE6FD3419E1A} ©
O42 - Logiciel: AMD Wireless Display v3.0 - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {8B6CFE66-6961-3E02-3C57-9BA146AFB935} ©
O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM][64Bits] -- {5D09C772-ECB3-442B-9CC6-B4341C78FDC2} ©
O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM][64Bits] -- {789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE} ©
O42 - Logiciel: Asmedia ASM106x SATA Host Controller Driver - (.Asmedia Technology.) [HKLM][64Bits] -- {61942EF5-2CD8-47D4-869C-2E9A8BB085F1} ©
O42 - Logiciel: Auslogics Disk Defrag Professional - (.Auslogics Software Pty Ltd.) [HKLM][64Bits] -- {ADE1535C-C836-4F2E-BDA1-1C7C304743E3}_is1 {45511F6B55A633EA076E767C8B93E562} ©
O42 - Logiciel: Catalyst Control Center - Branding - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {11087D24-567D-7D88-69C6-D7A08B5F4C47} ©
O42 - Logiciel: Catalyst Control Center Graphics Previews Common - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {A0CC276F-2890-DE82-1C93-BF827B3DCD2D} ©
O42 - Logiciel: Catalyst Control Center Localization All - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {A03D0AB9-E804-E8B1-2EC5-0E28DAEAC11A} ©
O42 - Logiciel: CCC Help Chinese Standard - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {7382003B-637E-2598-F9D6-0B4C70EA358F} ©
O42 - Logiciel: CCC Help Chinese Traditional - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {FF5E3D2F-586A-3CF2-CFAE-3B03862F5512} ©
O42 - Logiciel: CCC Help Czech - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {F1CA8888-41BB-7DCE-D9A4-751AFC4F1353} ©
O42 - Logiciel: CCC Help Danish - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {C2409A7D-665E-F6E9-CAE1-DFCF83DBF632} ©
O42 - Logiciel: CCC Help Dutch - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {C4A8B568-5F30-E41F-5F15-80E0902C204E} ©
O42 - Logiciel: CCC Help English - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {E281AD0E-78A6-DE8A-9903-A449EE18FB17} ©
O42 - Logiciel: CCC Help Finnish - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {BD96BA19-5A46-E2F7-5652-E13BBA085317} ©
O42 - Logiciel: CCC Help French - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {77F2CBFF-0687-BBAD-6A44-C0034AFE71FA} ©
O42 - Logiciel: CCC Help German - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {E8478C78-A2BE-A85B-4EDC-FB02B6AE1A3E} ©
O42 - Logiciel: CCC Help Greek - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {20E59B20-3E77-B07B-B854-2B03CE86FC64} ©
O42 - Logiciel: CCC Help Hungarian - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {31796434-736D-4601-6D86-D95696812FAF} ©
O42 - Logiciel: CCC Help Italian - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {26024DF7-8D9A-0047-3AA1-63AC45B68413} ©
O42 - Logiciel: CCC Help Japanese - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {41727356-2969-83D0-9DAF-41DFB6CE6C82} ©
O42 - Logiciel: CCC Help Korean - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {5883C8CF-D9F6-CACD-01E9-8D4DE18B7B86} ©
O42 - Logiciel: CCC Help Norwegian - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {226552DB-BCAF-5406-8283-5F500AFC0C16} ©
O42 - Logiciel: CCC Help Polish - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {53DB9A5D-87C7-5067-D8A2-F53FB3F621BB} ©
O42 - Logiciel: CCC Help Portuguese - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {A0030B28-1F49-2734-BFD7-74666118637E} ©
O42 - Logiciel: CCC Help Russian - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {5A9F93EE-DF6F-AE8E-A43E-76B12F2BA707} ©
O42 - Logiciel: CCC Help Spanish - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {12E727B6-24CD-0CA2-E63F-815CE9F03BC1} ©
O42 - Logiciel: CCC Help Swedish - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {B2F0BB2B-34ED-AEB8-CFD5-B4405D8DAD54} ©
O42 - Logiciel: CCC Help Thai - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {AF2D6CE8-FF11-72F6-DA20-DF02E68E211D} ©
O42 - Logiciel: CCC Help Turkish - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {93ED5459-3A8E-67EB-C68F-47CD6AFE25A4} ©
O42 - Logiciel: CCleaner - (.Piriform.) [HKLM][64Bits] -- CCleaner =>.Piriform Ltd®
O42 - Logiciel: Combined Community Codec Pack 64bit 2015-10-18 - (.CCCP Project.) [HKLM][64Bits] -- Combined Community Codec Pack 64bit_is1 {62AB3B7382E25B5D63AD773503D963B1} ©
O42 - Logiciel: Counter-Strike: Global Offensive - (.Valve.) [HKLM][64Bits] -- Steam App 730 =>.Valve®
O42 - Logiciel: CyberLink PowerDirector 13 - (.CyberLink Corp..) [HKLM][64Bits] -- {BA385AFC-00B1-417C-8C20-74B996EF3AF0} ©
O42 - Logiciel: CyberLink WaveEditor 2 - (.CyberLink Corp..) [HKLM][64Bits] -- {324F76CC-D8DD-4D87-B77D-D4AF5E1AA7B3} ©
O42 - Logiciel: D-Link DWA-125 - (.D-Link.) [HKLM][64Bits] -- {E45CACFE-0576-4375-A84F-C34B99A7B652} =>.Macrovision Corporation®
O42 - Logiciel: dreamboxEDIT -- The one and only settings editor for your Dreambox - (...) [HKLM][64Bits] -- dreamboxEDIT
O42 - Logiciel: FileZilla Client 3.12.0.2 - (.Tim Kosse.) [HKLM][64Bits] -- FileZilla Client ©
O42 - Logiciel: FormatFactory 2.70 - (.Free Time.) [HKLM][64Bits] -- FormatFactory ©
O42 - Logiciel: Fraps (remove only) - (...) [HKLM][64Bits] -- Fraps
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM][64Bits] -- Google Chrome =>.Google Inc®
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {60EC980A-BDA2-4CB6-A427-B07A5498B4CA} ©
O42 - Logiciel: Heroes of Newerth - (.S2 Games.) [HKLM][64Bits] -- hon ©
O42 - Logiciel: Intel(R) Chipset Device Software - (.Intel Corporation.) [HKLM][64Bits] -- {5CA7FC9B-8508-4494-B365-6FBCBAEB8E89} ©
O42 - Logiciel: Intel(R) Management Engine Components - (.Intel Corporation.) [HKLM][64Bits] -- {1CEAC85D-2590-4760-800F-8DE5E91F3700} ©
O42 - Logiciel: Intel(R) Management Engine Components - (.Intel Corporation.) [HKLM][64Bits] -- {4034E489-D0E9-41C4-A0DA-865D3881FE3F} ©
O42 - Logiciel: Intel(R) Management Engine Components - (.Intel Corporation.) [HKLM][64Bits] -- {BACDF5CE-C53E-43FD-ADB8-CFBEC19FF50E} ©
O42 - Logiciel: Intel(R) ME UninstallLegacy - (.Intel Corporation.) [HKLM][64Bits] -- {4A7EE59E-C97F-4EC6-A607-7E2CDEC24092} ©
O42 - Logiciel: Intel(R) Rapid Storage Technology - (.Intel Corporation.) [HKLM][64Bits] -- {409CB30E-E457-4008-9B1A-ED1B9EA21140} ©
O42 - Logiciel: Intel(R) Rapid Storage Technology - (.Intel Corporation.) [HKLM][64Bits] -- {EAF826C0-245E-4D02-9D51-BA4C98717EAE} ©
O42 - Logiciel: Intel(R) Smart Connect Technology - (.Intel Corporation.) [HKLM][64Bits] -- {33013669-7557-430E-9153-3C025284E623} ©
O42 - Logiciel: Intel(R) USB 3.0 eXtensible Host Controller Driver - (.Intel Corporation.) [HKLM][64Bits] -- {240C3DDD-C5E9-4029-9DF7-95650D040CF2} =>.Intel Corporation - Software and Firmware Products®
O42 - Logiciel: Intel® Trusted Connect Service Client - (.Intel Corporation.) [HKLM][64Bits] -- {1B444AF9-1DBE-4884-8F35-969BEFCF69A8} ©
O42 - Logiciel: Internet Download Manager - (.Tonec Inc..) [HKLM][64Bits] -- Internet Download Manager =>.Tonec Inc.®
O42 - Logiciel: Java 8 Update 51 - (.Oracle Corporation.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F83218051F0} ©
O42 - Logiciel: Java 8 Update 60 (64-bit) - (.Oracle Corporation.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F86418060F0} ©
O42 - Logiciel: Java Auto Updater - (.Oracle Corporation.) [HKLM][64Bits] -- {4A03706F-666A-4037-7777-5F2748764D10} ©
O42 - Logiciel: Killer Bandwidth Control Filter Driver - (.Rivet Networks.) [HKLM][64Bits] -- {F19B250A-58F9-4B9E-864B-B77C490E166B} ©
O42 - Logiciel: Killer E220x Drivers - (.Rivet Networks.) [HKLM][64Bits] -- {5CF9FE6F-7EBC-4391-8547-C8F9D83890B4} ©
O42 - Logiciel: Killer Network Manager - (.Rivet Networks.) [HKLM][64Bits] -- {E1635028-06FE-4E4D-B471-A28B429C837C} ©
O42 - Logiciel: Killer Performance Suite - (.Qualcomm Atheros.) [HKLM][64Bits] -- {E70DB50B-10B4-46BC-9DE2-AB8B49E061EE} {6A1373189220E1CB47E2C9E8E101845D} ©
O42 - Logiciel: K-Lite Codec Pack 7.1.0 (Full) - (...) [HKLM][64Bits] -- KLiteCodecPack_is1
O42 - Logiciel: Logiciel pour périphérique à chipset Intel® - (.Intel(R) Corporation.) [HKLM][64Bits] -- {98f335cd-0a32-4b3f-b74c-ef9480e834f0} =>.Intel Corporation - Software and Firmware Products®
O42 - Logiciel: Maxiboot Installer V0.7 - (.© 2010 Black_64.) [HKLM][64Bits] -- Maxiboot Installer_is1
O42 - Logiciel: Metric Collection SDK 35 - (.Lenovo Group Limited.) [HKLM][64Bits] -- {C2B5B5B0-2545-4E94-B4BA-548D4BF0B196} ©
O42 - Logiciel: Microsoft XNA Framework Redistributable 4.0 Refresh - (.Microsoft Corporation.) [HKLM][64Bits] -- {D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F} ©
O42 - Logiciel: Mozilla Firefox 42.0 (x86 fr) - (.Mozilla.) [HKLM][64Bits] -- Mozilla Firefox 42.0 (x86 fr) =>.Mozilla Corporation®
O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM][64Bits] -- MozillaMaintenanceService ©
O42 - Logiciel: MPC-HC 1.7.7 - (.MPC-HC Team.) [HKLM][64Bits] -- {2624B969-7135-4EB1-B0F6-2D8C397B45F7}_is1 {56F32D5EAF2963F6CCCA77650D079B94} ©
O42 - Logiciel: MPC-HC 1.7.9 (64-bit) - (.MPC-HC Team.) [HKLM][64Bits] -- {2ACBF1FA-F5C3-4B19-A774-B22A31F231B9}_is1 {4EABD628EE0FC7F6485231A836FBCD3C} ©
O42 - Logiciel: MSI Fast Boot - (.MSI.) [HKLM][64Bits] -- {0F212E7A-65EB-4668-A8D7-749026A64F8E}_is1 =>.MICRO-STAR INTERNATIONAL CO., LTD.®
O42 - Logiciel: MSI Gaming APP - (.MSI.) [HKLM][64Bits] -- {E0229316-E73B-484B-B9E0-45098AB38D8C}}_is1 =>.MICRO-STAR INTERNATIONAL CO., LTD.®
O42 - Logiciel: NewBlue Titler Pro for Windows - (.NewBlue.) [HKLM][64Bits] -- NewBlue Titler Pro for Windows ©
O42 - Logiciel: NewBlue Video Essentials for Windows - (.NewBlue.) [HKLM][64Bits] -- NewBlue Video Essentials for Windows ©
O42 - Logiciel: NewBlue Video Essentials V for Windows - (.NewBlue.) [HKLM][64Bits] -- NewBlue Video Essentials V for Windows ©
O42 - Logiciel: NirSoft Wireless Network Watcher - (...) [HKLM][64Bits] -- NirSoft Wireless Network Watcher
O42 - Logiciel: NVIDIA Install Application - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer ©
O42 - Logiciel: NVIDIA PhysX - (.NVIDIA Corporation.) [HKLM][64Bits] -- {80407BA7-7763-4395-AB98-5233F1B34E65} ©
O42 - Logiciel: OffersWizard Network System Driver - (...) [HKLM][64Bits] -- inethnfd
O42 - Logiciel: QuickTime - (.Apple Inc..) [HKLM][64Bits] -- {B67BAFBA-4C9F-48FA-9496-933E3B255044} ©
O42 - Logiciel: Raptr - (...) [HKLM][64Bits] -- Raptr
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC} =>.Realtek Semiconductor Corp®
O42 - Logiciel: Recover My Files - (.GetData Pty Ltd.) [HKLM][64Bits] -- Recover My Files_is1 ©
O42 - Logiciel: SAMSUNG USB Driver for Mobile Phones - (.SAMSUNG Electronics Co., Ltd..) [HKLM][64Bits] -- {D0795B21-0CDA-4a92-AB9E-6E92D8111E44} =>.Samsung Electronics CO., LTD.®
O42 - Logiciel: SHAREit - (.Lenovo Group Limited.) [HKLM][64Bits] -- SHAREit_is1 =>.LENOVO®
O42 - Logiciel: Skype™ 7.13 - (.Skype Technologies S.A..) [HKLM][64Bits] -- {6A0549A9-1B96-498C-ACBC-3943001FEB19} ©
O42 - Logiciel: Steam - (.Valve Corporation.) [HKLM][64Bits] -- Steam =>.Valve®
O42 - Logiciel: SuperCopier2 - (...) [HKLM][64Bits] -- SuperCopier2
O42 - Logiciel: swMSM - (.Adobe Systems, Inc.) [HKLM][64Bits] -- {612C34C7-5E90-47D8-9B5C-0F717DD82726} ©
O42 - Logiciel: System Requirements Lab - (.Husdawg, LLC.) [HKLM][64Bits] -- {F89CDED6-B1F1-489F-BA44-698BF6A737C2} ©
O42 - Logiciel: System Requirements Lab Detection - (.Husdawg, LLC.) [HKLM][64Bits] -- {65D3CF3A-26B8-4D82-868A-F1FB4A1325B8} ©
O42 - Logiciel: TeamSpeak 3 Client - (.TeamSpeak Systems GmbH.) [HKLM][64Bits] -- TeamSpeak 3 Client ©
O42 - Logiciel: The KMPlayer (remove only) - (.PandoraTV.) [HKLM][64Bits] -- The KMPlayer
O42 - Logiciel: UsbFix - (.El Desaparecido - www.usbfix.net - www.sosvirus.net.) [HKLM][64Bits] -- Usbfix ©
O42 - Logiciel: Viber - (.Viber Media Inc..) [HKCU][64Bits] -- {e577cb09-2068-44fb-8eed-cfcc1617b010} {5B2B01101C2900E34ECB16F78E6B73BF}
O42 - Logiciel: Viber - (.Viber Media Inc..) [HKLM][64Bits] -- {703E9CCF-0578-4AF0-B1F7-90368CFDC8DD}
O42 - Logiciel: VLC media player - (.VideoLAN.) [HKLM][64Bits] -- VLC media player ©
O42 - Logiciel: WinRAR 5.11 bêta 1 (64-bit) - (.win.rar GmbH.) [HKLM][64Bits] -- WinRAR archiver =>.win.rar GmbH®
O42 - Logiciel: Xilisoft Video Converter Ultimate 6 - (.Xilisoft.) [HKLM][64Bits] -- Xilisoft Video Converter Ultimate ©
O42 - Logiciel: Your Uninstaller! 7 - (.URSoft, Inc..) [HKLM][64Bits] -- YU2010_is1 {2D52C7CF5E69A633AC3AED0E78F988DC}

---\\ HKCU & HKLM Software Keys (152) - 8s
HKLM\SOFTWARE\Wow6432Node\7-Zip
HKLM\SOFTWARE\Wow6432Node\Adobe
HKLM\SOFTWARE\Wow6432Node\Adobe Systems
HKLM\SOFTWARE\Wow6432Node\AGEIA Technologies
HKLM\SOFTWARE\Wow6432Node\AMD
HKLM\SOFTWARE\Wow6432Node\ANI
HKLM\SOFTWARE\Wow6432Node\AppDataLow
HKLM\SOFTWARE\Wow6432Node\Apple Computer, Inc.
HKLM\SOFTWARE\Wow6432Node\Apple Inc.
HKLM\SOFTWARE\Wow6432Node\ATI
HKLM\SOFTWARE\Wow6432Node\ATI Technologies
HKLM\SOFTWARE\Wow6432Node\AviSynth
HKLM\SOFTWARE\Wow6432Node\Client
HKLM\SOFTWARE\Wow6432Node\CyberLink
HKLM\SOFTWARE\Wow6432Node\Cygnus Solutions
HKLM\SOFTWARE\Wow6432Node\D-Link
HKLM\SOFTWARE\Wow6432Node\D_Link_DWA-125_WPS Service
HKLM\SOFTWARE\Wow6432Node\FileZilla 3
HKLM\SOFTWARE\Wow6432Node\FileZilla Client
HKLM\SOFTWARE\Wow6432Node\Fraps
HKLM\SOFTWARE\Wow6432Node\GNU
HKLM\SOFTWARE\Wow6432Node\Google
HKLM\SOFTWARE\Wow6432Node\HaaliMkx
HKLM\SOFTWARE\Wow6432Node\IM Providers
HKLM\SOFTWARE\Wow6432Node\Intel
HKLM\SOFTWARE\Wow6432Node\Internet Download Manager
HKLM\SOFTWARE\Wow6432Node\InterVideo
HKLM\SOFTWARE\Wow6432Node\JavaSoft
HKLM\SOFTWARE\Wow6432Node\JreMetrics
HKLM\SOFTWARE\Wow6432Node\Khronos
HKLM\SOFTWARE\Wow6432Node\KLCodecPack
HKLM\SOFTWARE\Wow6432Node\KMPlayer
HKLM\SOFTWARE\Wow6432Node\Lenovo
HKLM\SOFTWARE\Wow6432Node\Licenses
HKLM\SOFTWARE\Wow6432Node\Macromedia
HKLM\SOFTWARE\Wow6432Node\Micronissimo Piano
HKLM\SOFTWARE\Wow6432Node\Mozilla
HKLM\SOFTWARE\Wow6432Node\mozilla.org
HKLM\SOFTWARE\Wow6432Node\MozillaPlugins
HKLM\SOFTWARE\Wow6432Node\MSI
HKLM\SOFTWARE\Wow6432Node\mtAppnorriA =>PUP.Optional.Salus
HKLM\SOFTWARE\Wow6432Node\mtcaMyciloP =>PUP.Optional.Salus
HKLM\SOFTWARE\Wow6432Node\mtControl
HKLM\SOFTWARE\Wow6432Node\mtSaophase =>PUP.Optional.Salus
HKLM\SOFTWARE\Wow6432Node\Nalpeiron
HKLM\SOFTWARE\Wow6432Node\NewBlue
HKLM\SOFTWARE\Wow6432Node\Nuance
HKLM\SOFTWARE\Wow6432Node\NVIDIA Corporation
HKLM\SOFTWARE\Wow6432Node\ODBC
HKLM\SOFTWARE\Wow6432Node\PIP =>Toolbar.Ask
HKLM\SOFTWARE\Wow6432Node\Raptr
HKLM\SOFTWARE\Wow6432Node\Realtek
HKLM\SOFTWARE\Wow6432Node\Realtek Semiconductor Corp.
HKLM\SOFTWARE\Wow6432Node\Rtp
HKLM\SOFTWARE\Wow6432Node\Skype
HKLM\SOFTWARE\Wow6432Node\SOSVirus
HKLM\SOFTWARE\Wow6432Node\Swearware
HKLM\SOFTWARE\Wow6432Node\THQ
HKLM\SOFTWARE\Wow6432Node\Valve
HKLM\SOFTWARE\Wow6432Node\Volatile
HKLM\SOFTWARE\Wow6432Node\Xilisoft
HKLM\SOFTWARE\Wow6432Node\XinYi Network
HKLM\SOFTWARE\Wow6432Node\RegisteredApplications
HKCU\SOFTWARE\7-Zip
HKCU\SOFTWARE\Adobe
HKCU\SOFTWARE\Akeo Consulting
HKCU\SOFTWARE\AMD
HKCU\SOFTWARE\ANI
HKCU\SOFTWARE\APN PIP =>PUP.Optional.Conduit
HKCU\SOFTWARE\Apowersoft
HKCU\SOFTWARE\AppDataLow
HKCU\SOFTWARE\Apple Computer, Inc.
HKCU\SOFTWARE\Apple Inc.
HKCU\SOFTWARE\ATI
HKCU\SOFTWARE\Auslogics
HKCU\SOFTWARE\BitTorrent
HKCU\SOFTWARE\Blizzard Entertainment
HKCU\SOFTWARE\Bytescout
HKCU\SOFTWARE\ched
HKCU\SOFTWARE\Crystal Dynamics
HKCU\SOFTWARE\CyberLink
HKCU\SOFTWARE\Cygnus Solutions
HKCU\SOFTWARE\D-Link
HKCU\SOFTWARE\DownloadManager
HKCU\SOFTWARE\DragonRise
HKCU\SOFTWARE\dreamboxEDIT
HKCU\SOFTWARE\drpsu
HKCU\SOFTWARE\epsxe
HKCU\SOFTWARE\FlashBoot
HKCU\SOFTWARE\Fraps3
HKCU\SOFTWARE\FreeTime
HKCU\SOFTWARE\Gabest
HKCU\SOFTWARE\GetData
HKCU\SOFTWARE\GNU
HKCU\SOFTWARE\Google
HKCU\SOFTWARE\Haali
HKCU\SOFTWARE\Heroes of Newerth
HKCU\SOFTWARE\IM Providers
HKCU\SOFTWARE\Intel
HKCU\SOFTWARE\IP Webcam
HKCU\SOFTWARE\JavaSoft
HKCU\SOFTWARE\Killer
HKCU\SOFTWARE\KMPlayer
HKCU\SOFTWARE\L2j Community Network
HKCU\SOFTWARE\LAV64
HKCU\SOFTWARE\Lenovo
HKCU\SOFTWARE\LlamaWare
HKCU\SOFTWARE\Local AppWizard-Generated Applications
HKCU\SOFTWARE\Macromedia
HKCU\SOFTWARE\madFlac
HKCU\SOFTWARE\MediaInfo
HKCU\SOFTWARE\MONOGRAM
HKCU\SOFTWARE\Mozilla
HKCU\SOFTWARE\MozillaPlugins
HKCU\SOFTWARE\MPC-HC
HKCU\SOFTWARE\MPC-HC64
HKCU\SOFTWARE\mtAirron
HKCU\SOFTWARE\mtAppnorriA =>PUP.Optional.Salus
HKCU\SOFTWARE\mtcaMyciloP =>PUP.Optional.Salus
HKCU\SOFTWARE\mtSaophase =>PUP.Optional.Salus
HKCU\SOFTWARE\Netscape
HKCU\SOFTWARE\NewBlue
HKCU\SOFTWARE\New_t_3
HKCU\SOFTWARE\NVIDIA Corporation
HKCU\SOFTWARE\ODBC
HKCU\SOFTWARE\Piriform
HKCU\SOFTWARE\Realtek
HKCU\SOFTWARE\Rtp
HKCU\SOFTWARE\SFX TEAM
HKCU\SOFTWARE\Skype
HKCU\SOFTWARE\Software
HKCU\SOFTWARE\StormSharksProductions
HKCU\SOFTWARE\Sysinternals
HKCU\SOFTWARE\System Requirements Lab
HKCU\SOFTWARE\Trolltech
HKCU\SOFTWARE\Ubisoft
HKCU\SOFTWARE\Unity
HKCU\SOFTWARE\URSoft
HKCU\SOFTWARE\UsbFix
HKCU\SOFTWARE\Valve
HKCU\SOFTWARE\VB and VBA Program Settings
HKCU\SOFTWARE\Viber
HKCU\SOFTWARE\Wget
HKCU\SOFTWARE\WinRAR
HKCU\SOFTWARE\WinRAR SFX
HKCU\SOFTWARE\Wow6432Node
HKCU\SOFTWARE\Xilisoft
HKCU\SOFTWARE\XinYi Network
HKCU\SOFTWARE\ZebHelpProcess Helper
HKCU\SOFTWARE\AppDataLow\Software
HKCU\SOFTWARE\AppDataLow\Software\Adobe
HKCU\SOFTWARE\AppDataLow\Software\JavaSoft

---\\ Contenu des dossiers Programmes (261) - 6s
O43 - CFD: 04/10/2015 - [] D -- C:\Program Files (x86)\7-Zip
O43 - CFD: 03/11/2015 - [0] D -- C:\Program Files (x86)\A73 Piano Station
O43 - CFD: 24/10/2015 - [] D -- C:\Program Files (x86)\AAF Recovery tool AV700
O43 - CFD: 11/07/2015 - [] D -- C:\Program Files (x86)\Adobe
O43 - CFD: 17/12/2015 - [] D -- C:\Program Files (x86)\AMD
O43 - CFD: 26/08/2015 - [] D -- C:\Program Files (x86)\AMD APP
O43 - CFD: 26/08/2015 - [] D -- C:\Program Files (x86)\AMD AVT
O43 - CFD: 28/10/2015 - [] D -- C:\Program Files (x86)\Apowersoft
O43 - CFD: 09/10/2015 - [] D -- C:\Program Files (x86)\Apple Software Update
O43 - CFD: 19/06/2015 - [] D -- C:\Program Files (x86)\ASM106xSATA
O43 - CFD: 26/08/2015 - [] D -- C:\Program Files (x86)\ATI Technologies
O43 - CFD: 14/08/2015 - [] D -- C:\Program Files (x86)\Auslogics
O43 - CFD: 28/10/2015 - [0] D -- C:\Program Files (x86)\CamStudio
O43 - CFD: 16/12/2015 - [] D -- C:\Program Files (x86)\Common Files
O43 - CFD: 09/10/2015 - [] D -- C:\Program Files (x86)\CyberLink
O43 - CFD: 19/06/2015 - [] D -- C:\Program Files (x86)\D-Link
O43 - CFD: 17/10/2015 - [0] D -- C:\Program Files (x86)\DogSettings
O43 - CFD: 07/07/2015 - [] D -- C:\Program Files (x86)\dreamboxEDIT
O43 - CFD: 28/09/2015 - [] D -- C:\Program Files (x86)\FreeTime
O43 - CFD: 14/08/2015 - [0] D -- C:\Program Files (x86)\GameTracker
O43 - CFD: 27/07/2015 - [] D -- C:\Program Files (x86)\GetData
O43 - CFD: 11/10/2015 - [] D -- C:\Program Files (x86)\Google
O43 - CFD: 09/10/2015 - [] HD -- C:\Program Files (x86)\InstallShield Installation Information
O43 - CFD: 19/06/2015 - [] D -- C:\Program Files (x86)\Intel
O43 - CFD: 19/08/2015 - [] D -- C:\Program Files (x86)\Internet Download Manager
O43 - CFD: 20/06/2015 - [] D -- C:\Program Files (x86)\Internet Explorer
O43 - CFD: 02/10/2015 - [0] D -- C:\Program Files (x86)\iRoot
O43 - CFD: 08/10/2015 - [] D -- C:\Program Files (x86)\Java
O43 - CFD: 19/06/2015 - [] D -- C:\Program Files (x86)\K-Lite Codec Pack
O43 - CFD: 02/10/2015 - [0] D -- C:\Program Files (x86)\Kingo ROOT
O43 - CFD: 20/11/2015 - [] D -- C:\Program Files (x86)\Lenovo
O43 - CFD: 06/10/2015 - [] D -- C:\Program Files (x86)\Maxiboot Installer
O43 - CFD: 24/08/2015 - [] D -- C:\Program Files (x86)\Microsoft ActiveSync
O43 - CFD: 24/08/2015 - [] D -- C:\Program Files (x86)\Microsoft Office
O43 - CFD: 20/09/2015 - [] D -- C:\Program Files (x86)\Microsoft XNA
O43 - CFD: 24/08/2015 - [] D -- C:\Program Files (x86)\Microsoft.NET
O43 - CFD: 16/12/2015 - [] D -- C:\Program Files (x86)\Mozilla Firefox
O43 - CFD: 16/12/2015 - [] D -- C:\Program Files (x86)\Mozilla Maintenance Service
O43 - CFD: 27/06/2015 - [] D -- C:\Program Files (x86)\MPC-HC
O43 - CFD: 14/07/2009 - [] D -- C:\Program Files (x86)\MSBuild
O43 - CFD: 19/06/2015 - [] D -- C:\Program Files (x86)\MSI
O43 - CFD: 09/10/2015 - [] D -- C:\Program Files (x86)\NewBlue
O43 - CFD: 17/09/2015 - [] D -- C:\Program Files (x86)\NirSoft
O43 - CFD: 09/10/2015 - [] D -- C:\Program Files (x86)\NSIS Uninstall Information
O43 - CFD: 24/10/2015 - [] D -- C:\Program Files (x86)\NVIDIA Corporation
O43 - CFD: 16/12/2015 - [] D -- C:\Program Files (x86)\Overwolf
O43 - CFD: 30/10/2015 - [0] D -- C:\Program Files (x86)\Pamela
O43 - CFD: 09/10/2015 - [] D -- C:\Program Files (x86)\QuickTime
O43 - CFD: 17/12/2015 - [] D -- C:\Program Files (x86)\Raptr
O43 - CFD: 19/06/2015 - [] D -- C:\Program Files (x86)\Realtek
O43 - CFD: 14/07/2009 - [] D -- C:\Program Files (x86)\Reference Assemblies
O43 - CFD: 16/12/2015 - [] RD -- C:\Program Files (x86)\Skype
O43 - CFD: 17/12/2015 - [] D -- C:\Program Files (x86)\Steam
O43 - CFD: 19/06/2015 - [] D -- C:\Program Files (x86)\SuperCopier2
O43 - CFD: 27/08/2015 - [] D -- C:\Program Files (x86)\SystemRequirementsLab
O43 - CFD: 19/06/2015 - [0] HD -- C:\Program Files (x86)\Temp
O43 - CFD: 14/07/2009 - [0] HD -- C:\Program Files (x86)\Uninstall Information
O43 - CFD: 19/06/2015 - [] D -- C:\Program Files (x86)\USB Vibration
O43 - CFD: 06/12/2015 - [] D -- C:\Program Files (x86)\Valve
O43 - CFD: 17/10/2015 - [0] D -- C:\Program Files (x86)\VpnOneClick
O43 - CFD: 19/06/2015 - [] D -- C:\Program Files (x86)\Windows Defender
O43 - CFD: 19/01/2011 - [] D -- C:\Program Files (x86)\Windows Mail
O43 - CFD: 19/06/2015 - [] D -- C:\Program Files (x86)\Windows Media Player
O43 - CFD: 14/07/2009 - [] D -- C:\Program Files (x86)\Windows NT
O43 - CFD: 19/01/2011 - [] D -- C:\Program Files (x86)\Windows Photo Viewer
O43 - CFD: 19/01/2011 - [] D -- C:\Program Files (x86)\Windows Portable Devices
O43 - CFD: 19/01/2011 - [] D -- C:\Program Files (x86)\Windows Sidebar
O43 - CFD: 11/07/2015 - [] D -- C:\Program Files (x86)\Xilisoft
O43 - CFD: 04/10/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
O43 - CFD: 04/10/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\A73 Piano Station
O43 - CFD: 19/06/2015 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 18/06/2015 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 19/06/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe
O43 - CFD: 17/12/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
O43 - CFD: 14/08/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Auslogics
O43 - CFD: 13/11/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Combined Community Codec Pack 64bit
O43 - CFD: 08/08/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Counter-Strike Global Offensive
O43 - CFD: 09/10/2015 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink PowerDirector 13
O43 - CFD: 09/10/2015 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink WaveEditor 2
O43 - CFD: 19/06/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\D-Link
O43 - CFD: 19/10/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Deep Silver
O43 - CFD: 16/12/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Disabled Startup
O43 - CFD: 21/07/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client
O43 - CFD: 08/10/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fraps
O43 - CFD: 18/06/2015 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
O43 - CFD: 16/12/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
O43 - CFD: 19/06/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Heroes of Newerth
O43 - CFD: 19/06/2015 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
O43 - CFD: 08/10/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
O43 - CFD: 19/06/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack
O43 - CFD: 19/06/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Killer Networking
O43 - CFD: 20/11/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo
O43 - CFD: 14/07/2009 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 06/10/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maxiboot Installer
O43 - CFD: 22/09/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Metal Gear Solid V Ground Zeroes
O43 - CFD: 24/08/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
O43 - CFD: 27/06/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MPC-HC
O43 - CFD: 27/06/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MPC-HC x64
O43 - CFD: 19/06/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MSI
O43 - CFD: 09/10/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NewBlue
O43 - CFD: 09/10/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
O43 - CFD: 16/12/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
O43 - CFD: 16/12/2015 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
O43 - CFD: 21/08/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
O43 - CFD: 03/08/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Strogino CS Portal
O43 - CFD: 14/07/2009 - [0] RHD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC
O43 - CFD: 14/11/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client
O43 - CFD: 19/06/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
O43 - CFD: 19/06/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
O43 - CFD: 11/07/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xilisoft
O43 - CFD: 19/06/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Your Uninstaller! 7
O43 - CFD: 11/07/2015 - [] D -- C:\ProgramData\Adobe
O43 - CFD: 19/06/2015 - [] D -- C:\ProgramData\Adobe Systems
O43 - CFD: 04/10/2015 - [] D -- C:\ProgramData\Airrons
O43 - CFD: 26/08/2015 - [] D -- C:\ProgramData\AMD
O43 - CFD: 28/09/2015 - [] D -- C:\ProgramData\APN =>Toolbar.Ask
O43 - CFD: 09/10/2015 - [] D -- C:\ProgramData\Apple
O43 - CFD: 09/10/2015 - [] D -- C:\ProgramData\Apple Computer
O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Application Data
O43 - CFD: 04/10/2015 - [] D -- C:\ProgramData\ApplicationHosting =>PUP.Optional.ApplicationHosting
O43 - CFD: 17/12/2015 - [] D -- C:\ProgramData\AppnorriA =>PUP.Optional.Salus
O43 - CFD: 04/10/2015 - [] D -- C:\ProgramData\AppnorriAs =>PUP.Optional.Salus
O43 - CFD: 16/12/2015 - [] D -- C:\ProgramData\BlueStacksSetup
O43 - CFD: 19/06/2015 - [] D -- C:\ProgramData\boost_interprocess
O43 - CFD: 18/06/2015 - [0] SHD -- C:\ProgramData\Bureau
O43 - CFD: 17/12/2015 - [] D -- C:\ProgramData\caMyciloP =>PUP.Optional.Salus
O43 - CFD: 04/10/2015 - [] D -- C:\ProgramData\caMyciloPs =>PUP.Optional.Salus
O43 - CFD: 09/10/2015 - [] D -- C:\ProgramData\CyberLink
O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Desktop
O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Documents
O43 - CFD: 13/09/2015 - [] D -- C:\ProgramData\Downloaded Installations
O43 - CFD: 18/06/2015 - [0] SHD -- C:\ProgramData\Favoris
O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Favorites
O43 - CFD: 29/06/2015 - [0] D -- C:\ProgramData\GarenaMessenger
O43 - CFD: 19/06/2015 - [0] D -- C:\ProgramData\IDM
O43 - CFD: 09/10/2015 - [] D -- C:\ProgramData\install_clap
O43 - CFD: 19/06/2015 - [] D -- C:\ProgramData\Intel
O43 - CFD: 19/06/2015 - [] D -- C:\ProgramData\Killer
O43 - CFD: 18/06/2015 - [0] SHD -- C:\ProgramData\Menu Démarrer
O43 - CFD: 24/08/2015 - [] SD -- C:\ProgramData\Microsoft
O43 - CFD: 18/06/2015 - [0] SHD -- C:\ProgramData\Modèles
O43 - CFD: 19/06/2015 - [] D -- C:\ProgramData\Mozilla
O43 - CFD: 24/10/2015 - [] D -- C:\ProgramData\NVIDIA
O43 - CFD: 24/10/2015 - [] D -- C:\ProgramData\NVIDIA Corporation
O43 - CFD: 19/06/2015 - [] D -- C:\ProgramData\Oracle
O43 - CFD: 20/09/2015 - [] D -- C:\ProgramData\Package Cache
O43 - CFD: 09/10/2015 - [] D -- C:\ProgramData\proDAD
O43 - CFD: 28/09/2015 - [] D -- C:\ProgramData\Samsung
O43 - CFD: 17/12/2015 - [] D -- C:\ProgramData\Saophase =>PUP.Optional.Salus
O43 - CFD: 04/10/2015 - [] D -- C:\ProgramData\Saophases =>PUP.Optional.Salus
O43 - CFD: 13/11/2015 - [] D -- C:\ProgramData\Skype
O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Start Menu
O43 - CFD: 29/06/2015 - [] D -- C:\ProgramData\Steam
O43 - CFD: 19/06/2015 - [] D -- C:\ProgramData\Sun
O43 - CFD: 09/10/2015 - [] D -- C:\ProgramData\SUPPORTDIR
O43 - CFD: 27/08/2015 - [] D -- C:\ProgramData\SystemRequirementsLab
O43 - CFD: 16/12/2015 - [0] AD -- C:\ProgramData\TEMP
O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Templates
O43 - CFD: 11/07/2015 - [] D -- C:\Program Files (x86)\Common Files\Adobe
O43 - CFD: 19/06/2015 - [] D -- C:\Program Files (x86)\Common Files\Adobe Systems Shared
O43 - CFD: 09/10/2015 - [] D -- C:\Program Files (x86)\Common Files\Apple
O43 - CFD: 26/08/2015 - [] D -- C:\Program Files (x86)\Common Files\ATI Technologies
O43 - CFD: 16/12/2015 - [] D -- C:\Program Files (x86)\Common Files\Config
O43 - CFD: 24/08/2015 - [] D -- C:\Program Files (x86)\Common Files\DESIGNER
O43 - CFD: 19/06/2015 - [] D -- C:\Program Files (x86)\Common Files\InstallShield
O43 - CFD: 19/06/2015 - [] D -- C:\Program Files (x86)\Common Files\Intel Corporation
O43 - CFD: 08/10/2015 - [] D -- C:\Program Files (x86)\Common Files\Java
O43 - CFD: 20/11/2015 - [] D -- C:\Program Files (x86)\Common Files\LENOVO
O43 - CFD: 20/09/2015 - [] D -- C:\Program Files (x86)\Common Files\microsoft shared
O43 - CFD: 09/10/2015 - [] D -- C:\Program Files (x86)\Common Files\NewBlue
O43 - CFD: 19/06/2015 - [] D -- C:\Program Files (x86)\Common Files\PostureAgent
O43 - CFD: 14/07/2009 - [] D -- C:\Program Files (x86)\Common Files\Services
O43 - CFD: 16/12/2015 - [] D -- C:\Program Files (x86)\Common Files\Skype
O43 - CFD: 14/07/2009 - [] D -- C:\Program Files (x86)\Common Files\SpeechEngines
O43 - CFD: 17/10/2015 - [0] D -- C:\Program Files (x86)\Common Files\Statottech
O43 - CFD: 16/12/2015 - [] D -- C:\Program Files (x86)\Common Files\Steam
O43 - CFD: 19/06/2015 - [] D -- C:\Program Files (x86)\Common Files\System
O43 - CFD: 22/08/2015 - [] D -- C:\Users\mourad\AppData\Roaming\Adobe
O43 - CFD: 28/10/2015 - [] D -- C:\Users\mourad\AppData\Roaming\Apowersoft
O43 - CFD: 09/10/2015 - [] D -- C:\Users\mourad\AppData\Roaming\Apple Computer
O43 - CFD: 26/08/2015 - [] D -- C:\Users\mourad\AppData\Roaming\ATI
O43 - CFD: 14/08/2015 - [] D -- C:\Users\mourad\AppData\Roaming\Auslogics
O43 - CFD: 09/10/2015 - [] D -- C:\Users\mourad\AppData\Roaming\CyberLink
O43 - CFD: 17/12/2015 - [] D -- C:\Users\mourad\AppData\Roaming\DMCache
O43 - CFD: 11/10/2015 - [] D -- C:\Users\mourad\AppData\Roaming\FileZilla
O43 - CFD: 20/09/2015 - [0] D -- C:\Users\mourad\AppData\Roaming\fltk.org
O43 - CFD: 13/09/2015 - [] D -- C:\Users\mourad\AppData\Roaming\Google
O43 - CFD: 18/06/2015 - [] D -- C:\Users\mourad\AppData\Roaming\Identities
O43 - CFD: 16/12/2015 - [] D -- C:\Users\mourad\AppData\Roaming\IDM
O43 - CFD: 19/06/2015 - [] D -- C:\Users\mourad\AppData\Roaming\InstallShield
O43 - CFD: 19/06/2015 - [] D -- C:\Users\mourad\AppData\Roaming\Intel Corporation
O43 - CFD: 19/06/2015 - [] D -- C:\Users\mourad\AppData\Roaming\Macromedia
O43 - CFD: 14/07/2009 - [0] D -- C:\Users\mourad\AppData\Roaming\Media Center Programs
O43 - CFD: 15/11/2015 - [0] D -- C:\Users\mourad\AppData\Roaming\Media Player Classic
O43 - CFD: 28/09/2015 - [] D -- C:\Users\mourad\AppData\Roaming\mgyun
O43 - CFD: 24/10/2015 - [] SD -- C:\Users\mourad\AppData\Roaming\Microsoft
O43 - CFD: 16/12/2015 - [] D -- C:\Users\mourad\AppData\Roaming\Mozilla
O43 - CFD: 27/06/2015 - [] D -- C:\Users\mourad\AppData\Roaming\MPC-HC
O43 - CFD: 29/10/2015 - [] D -- C:\Users\mourad\AppData\Roaming\Pamela
O43 - CFD: 09/10/2015 - [] D -- C:\Users\mourad\AppData\Roaming\proDAD
O43 - CFD: 17/12/2015 - [] D -- C:\Users\mourad\AppData\Roaming\Raptr
O43 - CFD: 17/12/2015 - [] D -- C:\Users\mourad\AppData\Roaming\Skype
O43 - CFD: 22/06/2015 - [] D -- C:\Users\mourad\AppData\Roaming\Steam
O43 - CFD: 08/10/2015 - [] D -- C:\Users\mourad\AppData\Roaming\Sun
O43 - CFD: 09/10/2015 - [] D -- C:\Users\mourad\AppData\Roaming\Titler
O43 - CFD: 16/12/2015 - [] D -- C:\Users\mourad\AppData\Roaming\TS3Client
O43 - CFD: 19/06/2015 - [] D -- C:\Users\mourad\AppData\Roaming\URSoft
O43 - CFD: 16/12/2015 - [] D -- C:\Users\mourad\AppData\Roaming\uTorrent
O43 - CFD: 17/12/2015 - [] D -- C:\Users\mourad\AppData\Roaming\ViberPC
O43 - CFD: 16/12/2015 - [] D -- C:\Users\mourad\AppData\Roaming\vlc
O43 - CFD: 19/06/2015 - [] D -- C:\Users\mourad\AppData\Roaming\WinRAR
O43 - CFD: 11/07/2015 - [] D -- C:\Users\mourad\AppData\Roaming\Xilisoft
O43 - CFD: 17/12/2015 - [] D -- C:\Users\mourad\AppData\Roaming\ZHP
O43 - CFD: 17/10/2015 - [] D -- C:\Users\mourad\AppData\Local\9824
O43 - CFD: 23/10/2015 - [] D -- C:\Users\mourad\AppData\Local\Adobe
O43 - CFD: 09/10/2015 - [] D -- C:\Users\mourad\AppData\Local\Apple
O43 - CFD: 18/06/2015 - [0] SHD -- C:\Users\mourad\AppData\Local\Application Data
O43 - CFD: 26/08/2015 - [] D -- C:\Users\mourad\AppData\Local\ATI
O43 - CFD: 16/12/2015 - [] D -- C:\Users\mourad\AppData\Local\Bluestacks
O43 - CFD: 22/07/2015 - [] D -- C:\Users\mourad\AppData\Local\CEF
O43 - CFD: 16/12/2015 - [0] D -- C:\Users\mourad\AppData\Local\CrashDumps
O43 - CFD: 09/10/2015 - [] D -- C:\Users\mourad\AppData\Local\CyberLink
O43 - CFD: 08/12/2015 - [] D -- C:\Users\mourad\AppData\Local\Diagnostics
O43 - CFD: 21/06/2015 - [0] SHD -- C:\Users\mourad\AppData\Local\EmieBrowserModeList
O43 - CFD: 21/06/2015 - [0] SHD -- C:\Users\mourad\AppData\Local\EmieSiteList
O43 - CFD: 21/06/2015 - [0] SHD -- C:\Users\mourad\AppData\Local\EmieUserList
O43 - CFD: 16/12/2015 - [] D -- C:\Users\mourad\AppData\Local\Google
O43 - CFD: 21/06/2015 - [] D -- C:\Users\mourad\AppData\Local\GWX
O43 - CFD: 18/06/2015 - [0] SHD -- C:\Users\mourad\AppData\Local\Historique
O43 - CFD: 19/06/2015 - [] D -- C:\Users\mourad\AppData\Local\Intel_Corporation
O43 - CFD: 20/11/2015 - [] D -- C:\Users\mourad\AppData\Local\Lenovo
O43 - CFD: 20/06/2015 - [] D -- C:\Users\mourad\AppData\Local\Macromedia
O43 - CFD: 30/10/2015 - [] D -- C:\Users\mourad\AppData\Local\Microsoft
O43 - CFD: 16/12/2015 - [0] DC -- C:\Users\mourad\AppData\Local\MigWiz
O43 - CFD: 19/06/2015 - [] D -- C:\Users\mourad\AppData\Local\Mozilla
O43 - CFD: 16/09/2015 - [] D -- C:\Users\mourad\AppData\Local\Package Cache
O43 - CFD: 19/06/2015 - [] D -- C:\Users\mourad\AppData\Local\Programs
O43 - CFD: 16/12/2015 - [] D -- C:\Users\mourad\AppData\Local\Skype
O43 - CFD: 04/12/2015 - [] D -- C:\Users\mourad\AppData\Local\Steam
O43 - CFD: 29/06/2015 - [] D -- C:\Users\mourad\AppData\Local\storage
O43 - CFD: 17/12/2015 - [] D -- C:\Users\mourad\AppData\Local\Temp
O43 - CFD: 18/06/2015 - [0] SHD -- C:\Users\mourad\AppData\Local\Temporary Internet Files
O43 - CFD: 08/07/2015 - [] D -- C:\Users\mourad\AppData\Local\Unattneded
O43 - CFD: 28/11/2015 - [] D -- C:\Users\mourad\AppData\Local\Viber
O43 - CFD: 11/09/2015 - [] D -- C:\Users\mourad\AppData\Local\VirtualStore
O43 - CFD: 14/07/2009 - [] RD -- C:\Users\mourad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 19/06/2015 - [] RD -- C:\Users\mourad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 16/12/2015 - [] D -- C:\Users\mourad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Disabled Startup
O43 - CFD: 07/07/2015 - [] D -- C:\Users\mourad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\dreamboxEDIT
O43 - CFD: 28/09/2015 - [] D -- C:\Users\mourad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FormatFactory
O43 - CFD: 29/06/2015 - [] D -- C:\Users\mourad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
O43 - CFD: 19/06/2015 - [] D -- C:\Users\mourad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Heroes of Newerth
O43 - CFD: 13/09/2015 - [] D -- C:\Users\mourad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
O43 - CFD: 14/07/2009 - [] RD -- C:\Users\mourad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 17/09/2015 - [] D -- C:\Users\mourad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NirSoft Wireless Network Watcher
O43 - CFD: 27/07/2015 - [] D -- C:\Users\mourad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Recover My Files
O43 - CFD: 16/12/2015 - [] RD -- C:\Users\mourad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
O43 - CFD: 24/10/2015 - [] D -- C:\Users\mourad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
O43 - CFD: 19/06/2015 - [] D -- C:\Users\mourad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SuperCopier2
O43 - CFD: 19/06/2015 - [] D -- C:\Users\mourad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\The KMPlayer
O43 - CFD: 19/06/2015 - [] D -- C:\Users\mourad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR

---\\ ShellIconOverlayIdentifiers (SIOI) (2) - 0s
O106 - SIOI: Enhanced Storage Icon Overlay Handler Class [EnhancedStorageShell] - {D9144DCD-E998-4ECA-AB6A-DCD83CCBA16D}. (.Microsoft Corporation - DLL d’extension d’environnement de stockage.) -- C:\Windows\System32\EhStorShell.dll ©
O106 - SIOI: Sharing Overlay (Private) [SharingPrivate] - {08244EE6-92F0-47f2-9FC9-929BAA2E7235}. (.Microsoft Corporation - Extensions de l’interpréteur de commandes p.) -- C:\Windows\System32\ntshrui.dll ©

---\\ Enumération des clés StartupReg (1) - 0s
O53 - SMSR:HKLM\...\startupreg\SunJavaUpdateSched [Key] . (.Oracle Corporation - Java Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe ©

---\\ Liste des pilotes du système (69) - 5s
O58 - SDL:2009/07/14 02:52:21 A . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\drivers\adp94xx.sys [491088] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:52:21 A . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\System32\drivers\adpahci.sys [339536] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:52:21 A . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver (X64).) -- C:\Windows\System32\drivers\adpu320.sys [182864] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:52:21 A . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\Windows\System32\drivers\aliide.sys [15440] =>.Microsoft Windows®
O58 - SDL:2015/07/16 03:09:00 A . (.Advanced Micro Devices - AMD ACP Binaries.) -- C:\Windows\System32\drivers\amdacpksd.sys [297672] =>.Advanced Micro Devices, Inc.®
O58 - SDL:2011/03/11 07:41:12 A . (.Advanced Micro Devices - AHCI 1.2 Device Driver.) -- C:\Windows\System32\drivers\amdsata.sys [107904] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:52:20 A . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller D.) -- C:\Windows\System32\drivers\amdsbs.sys [194128] =>.Microsoft Windows®
O58 - SDL:2011/03/11 07:41:12 A . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\Windows\System32\drivers\amdxata.sys [27008] =>.Microsoft Windows®
O58 - SDL:2010/05/29 07:58:30 A . (.Copyright (c) All rights reserved. - NDIS 6.0 Filter Driver.) -- C:\Windows\System32\drivers\anodlwfx.sys [15872]
O58 - SDL:2009/07/14 02:52:21 A . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\System32\drivers\arc.sys [87632] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:52:21 A . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\System32\drivers\arcsas.sys [97856] =>.Microsoft Windows®
O58 - SDL:2015/07/15 11:20:32 A . (.Advanced Micro Devices - AMD High Definition Audio Function Driver.) -- C:\Windows\System32\drivers\AtihdW76.sys [96256] ©
O58 - SDL:2015/07/16 03:06:36 A . (.Advanced Micro Devices, Inc. - ATI Radeon Kernel Mode Driver.) -- C:\Windows\System32\drivers\atikmdag.sys [21622272] ©
O58 - SDL:2015/07/16 02:13:26 A . (.Advanced Micro Devices, Inc. - AMD multi-vendor Miniport Driver.) -- C:\Windows\System32\drivers\atikmpag.sys [665088] ©
O58 - SDL:2009/06/10 21:34:23 A . (.Broadcom Corporation - Broadcom NetXtreme Gigabit Ethernet NDIS6.x.) -- C:\Windows\System32\drivers\b57nd60a.sys [270848] ©
O58 - SDL:2015/01/29 15:56:36 A . (.Rivet Networks, LLC. - Killer Bandwidth Control Filter Driver.) -- C:\Windows\System32\drivers\bflwfx64.sys [100400] {6A1373189220E1CB47E2C9E8E101845D} ©
O58 - SDL:2009/06/10 21:41:06 A . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower.) -- C:\Windows\System32\drivers\BrFiltLo.sys [18432] ©
O58 - SDL:2009/06/10 21:41:06 A . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper.) -- C:\Windows\System32\drivers\BrFiltUp.sys [8704] ©
O58 - SDL:2009/07/14 02:19:07 A . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\System32\drivers\BrSerId.sys [286720] ©
O58 - SDL:2009/06/10 21:41:10 A . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\System32\drivers\BrSerWdm.sys [47104] ©
O58 - SDL:2009/06/10 21:41:10 A . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\System32\drivers\BrUsbMdm.sys [14976] ©
O58 - SDL:2009/06/10 21:41:10 A . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\System32\drivers\BrUsbSer.sys [14720] ©
O58 - SDL:2009/06/10 21:34:28 A . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.) -- C:\Windows\System32\drivers\bxvbda.sys [468480] ©
O58 - SDL:2009/07/14 02:52:31 A . (.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\cmdide.sys [17488] =>.Microsoft Windows®
O58 - SDL:2011/04/28 14:20:30 A . (.Ralink Technology Corp. - Ralink 802.11n Wireless Adapter Driver.) -- C:\Windows\System32\drivers\Dnetr28ux.sys [1617472] =>.Ralink Technology Corporation®
O58 - SDL:2014/03/27 09:29:52 A . (.Qualcomm Atheros, Inc. - Killer e2200 PCI-E Gigabit Ethernet Control.) -- C:\Windows\System32\drivers\e22w7x64.sys [129200] =>.Qualcomm Atheros, Inc.®
O58 - SDL:2009/07/14 02:47:48 A . (.Emulex - Storport Miniport Driver for LightPulse HBA.) -- C:\Windows\System32\drivers\elxstor.sys [530496] =>.Microsoft Windows®
O58 - SDL:2009/06/10 21:34:33 A . (.Broadcom Corporation - Broadcom NetXtreme II 10 GigE VBD.) -- C:\Windows\System32\drivers\evbda.sys [3286016] ©
O58 - SDL:2008/08/08 15:31:20 A . (.Your Corporation - Description string for USBFitr driver.) -- C:\Windows\System32\drivers\h647906.sys [63856] {290BB7833C765B9A46AA792D59CCAEE5}
O58 - SDL:2008/08/08 15:31:22 A . (.Your Corporation - Description string for USBFitr driver.) -- C:\Windows\System32\drivers\h648101.sys [65776] {290BB7833C765B9A46AA792D59CCAEE5}
O58 - SDL:2008/08/08 15:31:26 A . (.Your Corporation - Description string for USBFitr driver.) -- C:\Windows\System32\drivers\h648103.sys [62960] {290BB7833C765B9A46AA792D59CCAEE5}
O58 - SDL:2009/06/10 21:31:59 A . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for.) -- C:\Windows\System32\drivers\hcw85cir.sys [31232] ©
O58 - SDL:2011/01/19 20:51:51 A . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Drive.) -- C:\Windows\System32\drivers\HpSAMD.sys [78720] =>.Microsoft Windows®
O58 - SDL:2014/05/28 10:10:20 A . (.Intel Corporation - Intel(R) Rapid Storage Technology driver -.) -- C:\Windows\System32\drivers\iaStorA.sys [672104] =>.Intel Corporation - Intel® Rapid Storage Technology®
O58 - SDL:2014/05/28 10:10:20 A . (.Intel Corporation - Intel(R) Rapid Storage Technology Filter dr.) -- C:\Windows\System32\drivers\iaStorF.sys [28008] =>.Intel Corporation - Intel® Rapid Storage Technology®
O58 - SDL:2011/03/11 07:41:26 A . (.Intel Corporation - Intel Matrix Storage Manager driver - x64.) -- C:\Windows\System32\drivers\iaStorV.sys [410496] =>.Microsoft Windows®
O58 - SDL:2015/06/12 03:00:58 A . (.Tonec Inc. - Internet Download Manager WFP Driver.) -- C:\Windows\System32\drivers\idmwfp.sys [197616] =>.Tonec Inc.®
O58 - SDL:2009/07/14 02:48:04 A . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\System32\drivers\iirsp.sys [44112] =>.Microsoft Windows®
O58 - SDL:2014/05/27 11:21:04 A . (...) -- C:\Windows\System32\drivers\ikbevent.sys [22216] =>.Intel CASE®
O58 - SDL:2014/05/27 11:21:08 A . (...) -- C:\Windows\System32\drivers\imsevent.sys [22728] =>.Intel CASE®
O58 - SDL:2014/05/27 11:21:06 A . (...) -- C:\Windows\System32\drivers\INETMON.sys [25800] =>.Intel CASE®
O58 - SDL:2014/05/27 11:21:08 A . (.Copyright (C) 2011-2012 - Intel(R) Smart Connect Technology Device Dr.) -- C:\Windows\System32\drivers\ISCTD.sys [44744] =>.Intel CASE®
O58 - SDL:2015/03/23 17:34:19 A . (.Intel Corporation - Intel(R) USB 3.0 Host Controller Switch Dri.) -- C:\Windows\System32\drivers\iusb3hcs.sys [22800] =>.Intel Corporation - Client Components Group®
O58 - SDL:2015/03/23 17:34:19 A . (.Intel Corporation - Intel(R) USB 3.0 Hub Driver.) -- C:\Windows\System32\drivers\iusb3hub.sys [390416] =>.Intel Corporation - Client Components Group®
O58 - SDL:2015/03/23 17:34:19 A . (.Intel Corporation - Intel(R) USB 3.0 eXtensible Host Controller.) -- C:\Windows\System32\drivers\iusb3xhc.sys [800016] =>.Intel Corporation - Client Components Group®
O58 - SDL:2009/07/14 02:48:04 A . (.LSI Corporation - LSI Fusion-MPT FC Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_fc.sys [114752] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:48:04 A . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas.sys [106560] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:48:04 A . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas2.sys [65600] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:48:04 A . (.LSI Corporation - LSI Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_scsi.sys [115776] =>.Microsoft Windows®
O58 - SDL:2009/11/18 07:12:00 A . (.Creative Technology Ltd. - Creative Audio Driver.) -- C:\Windows\System32\drivers\MBfilt64.sys [32344] =>.Creative Labs Inc®
O58 - SDL:2009/07/14 02:48:04 A . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows.) -- C:\Windows\System32\drivers\megasas.sys [35392] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:48:04 A . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\System32\drivers\MegaSR.sys [284736] =>.Microsoft Windows®
O58 - SDL:2015/07/30 21:11:52 A . (.nethfdrv - nethfdrv.) -- C:\Windows\System32\drivers\nethfdrv.sys [46160] {2B7DF4C242BFBB654DA05B78A86926AA} =>PUP.Optional.Amonetize
O58 - SDL:2009/07/14 02:48:26 A . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\System32\drivers\nfrd960.sys [51264] =>.Microsoft Windows®
O58 - SDL:2011/03/11 07:41:34 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\System32\drivers\nvraid.sys [148352] =>.Microsoft Windows®
O58 - SDL:2011/03/11 07:41:34 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\System32\drivers\nvstor.sys [166272] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:45:46 A . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\Windows\System32\drivers\ql2300.sys [1524816] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:45:45 A . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\Windows\System32\drivers\ql40xx.sys [128592] =>.Microsoft Windows®
O58 - SDL:2015/05/05 19:24:16 A . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function D.) -- C:\Windows\System32\drivers\RTKVHD64.sys [4467928] =>.Realtek Semiconductor Corp®
O58 - SDL:2009/06/10 21:37:19 A . (.Macrovision Corporation, Macrovision Europe Limited, - Macrovision SECURITY Driver.) -- C:\Windows\System32\drivers\secdrv.sys [23040] ©
O58 - SDL:2009/07/14 01:00:40 A . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\System32\drivers\serial.sys [94208] ©
O58 - SDL:2009/07/14 02:45:45 A . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\System32\drivers\sisraid2.sys [43584] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:45:46 A . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\System32\drivers\sisraid4.sys [80464] =>.Microsoft Windows®
O58 - SDL:2014/01/22 08:52:10 A . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG USB Composite Device Driver (MSS Ve.) -- C:\Windows\System32\drivers\ssudbus.sys [108800] =>.DEVGURU CO LTD®
O58 - SDL:2014/01/22 08:52:10 A . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG Android Modem Device Driver (MSS Ve.) -- C:\Windows\System32\drivers\ssudmdm.sys [206080] =>.DEVGURU CO LTD®
O58 - SDL:2009/07/14 02:45:55 A . (.Promise Technology - Promise SuperTrak EX Series Driver for Win.) -- C:\Windows\System32\drivers\stexstor.sys [24656] =>.Microsoft Windows®
O58 - SDL:2014/09/03 11:03:32 A . (.Intel Corporation - Intel(R) Management Engine Interface.) -- C:\Windows\System32\drivers\TeeDriverx64.sys [126976] =>.Intel Corporation - Intel® Management Engine Firmware®
O58 - SDL:2009/07/14 02:45:55 A . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\viaide.sys [17488] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:45:55 A . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\Windows\System32\drivers\vsmraid.sys [161872] =>.Microsoft Windows®

---\\ Derniers fichiers modifiés ou crées (Utilisateur) (3) - 5s
O61 - LFC: 2015/12/16 23:01:50 A . (.Enigma Software Group USA, LLC..) -- C:\Users\mourad\Downloads\Programs\SpyHunter-Installer.exe [3286400] {4549D6525BEC58AA524A1CE9E786B4E9} =>.Superfluous.SpyHunter
O61 - LFC: 2015/12/14 02:00:01 A . (.BitTorrent Inc..) -- C:\Users\mourad\AppData\Roaming\uTorrent\updates\3.4.5_41372\utorrentie.exe [336896]
O61 - LFC: 2015/12/17 15:09:48 A . (..) -- C:\Users\mourad\AppData\Local\ATI\ACE\Manifest.Bin [30466]

---\\ Associations Shell Spawning (11) - 0s
O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe ©
O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Ob.) -- C:\Windows\System32\eventvwr.exe ©
O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc®
O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\wscript.exe ©
O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe ©
O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S
O67 - Shell Spawning: <.html> [HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®

---\\ Menu de démarrage Internet (12) - 0s
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe ©
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ©
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Mozilla Corporation - 'Firefox' Helper.) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Mozilla Corporation - 'Firefox' Helper.) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Mozilla Corporation - 'Firefox' Helper.) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe ©

---\\ Recherche d'infection sur les navigateurs (5) - 4s
O69 - SBI: prefs.js [mourad - 2lv5hx5r.default] user_pref("browser.newtab.url", "C:\\ProgramData\\Saophase\\ff.NT"); =>PUP.Optional.Salus
O69 - SBI: prefs.js [mourad - 2lv5hx5r.default] user_pref("browser.startup.homepage", "C:\\ProgramData\\Saophase\\ff.HP"); =>PUP.Optional.Salus
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - http://www.bing.com/
O69 - SBI: SearchScopes [HKCU] {61CCE8C4-E1F6-4A44-B9EE-2829EE8FAF14} - (Google) - http://www.google.com/
O69 - SBI: SearchScopes [HKCU] {ielnksrch} [DefaultScope] - (Search the web) - http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRYSttY34mamef947lyub11ECQdQoyJIduVOkusfpweRWxl0E7aA_aREbxOAdewijyOCnIK6GAlYN8k8m6GI7J48wOZAPfFkQt336irTJVWX25kuZrk16TFqaeYje8Ihv3RKwj6zD1dTCO9JIWjL8M6DRaW2fg8RZ9Q,,&q={searchTerms} =>PUP.Optional.Linkury

---\\ Enumère les services démarrés par Svchost (33) - 0s
O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d’application.) -- C:\Windows\System32\aelupsvc.dll [72192] ©
O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [80384] ©
O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [80384] ©
O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\System32\srvsvc.dll [236032] ©
O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\System32\gpsvc.dll [777728] ©
O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\ikeext.dll [859648] ©
O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Service Audio Windows.) -- C:\Windows\System32\Audiosrv.dll [680960] ©
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’.) -- C:\Windows\System32\rasauto.dll [99328] ©
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire de connexions d’accès distant.) -- C:\Windows\System32\rasmans.dll [344064] ©
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll [97792] ©
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements systèm.) -- C:\Windows\System32\Sens.dll [64512] ©
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l’application d’assistance à.) -- C:\Windows\System32\ipnathlp.dll [359424] ©
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM.) -- C:\Windows\System32\tapisrv.dll [316928] ©
O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gestionnaire des connexions distantes du se.) -- C:\Windows\System32\termsrv.dll [683520] ©
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Up.) -- C:\Windows\system32\wuaueng.dll [2589184] ©
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière.) -- C:\Windows\system32\qmgr.dll [849920] ©
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [370688] ©
O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur u.) -- C:\Windows\System32\iphlpsvc.dll [569344] ©
O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d’ouverture de session secon.) -- C:\Windows\system32\seclogon.dll [30720] ©
O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll [70144] ©
O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\system32\iscsiexe.dll [156672] ©
O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédia.) -- C:\Windows\system32\mmcss.dll [67584] ©
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\system32\wbem\WMIsvc.dll [242688] ©
O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à.) -- C:\Windows\System32\SessEnv.dll [121856] ©
O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\System32\browser.dll [136704] ©
O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll [111104] ©
O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\system32\schedsvc.dll [1110016] ©
O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\Windows\system32\kmsvc.dll [90624] ©
O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll [84480] ©
O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\system32\profsvc.dll [210432] ©
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\Windows\system32\themeservice.dll [44544] ©
O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\Windows\System32\bdesvc.dll [100864] ©
O83 - Search Svchost Services: AppMgmt (AppMgmt) . (.Microsoft Corporation - Service Installation de logiciels.) -- C:\Windows\System32\appmgmts.dll [193536] ©

---\\ Liste des exceptions du parefeu Windows (6) - 1s
O87 - FAEL: "TCP Query User{F1FA98C5-959D-4987-91A6-94CF285DBF1E}G:\e\jeux\warcraft iii\war3.exe" [In-None-P6-TRUE] .(...) -- G:\e\jeux\warcraft iii\war3.exe (.not file.)
O87 - FAEL: "UDP Query User{0AB67D3F-219D-44EB-8EF5-4172424CB977}G:\e\jeux\warcraft iii\war3.exe" [In-None-P17-TRUE] .(...) -- G:\e\jeux\warcraft iii\war3.exe (.not file.)
O87 - FAEL: "TCP Query User{D986B52E-0A67-44CE-933C-1E0825F08F15}D:\hdd2\enigma 2\dcc295\dcc.exe" [In-None-P6-TRUE] .(.BernyR - Dreambox Control Center.) -- D:\hdd2\enigma 2\dcc295\dcc.exe
O87 - FAEL: "UDP Query User{84B67B12-B833-4E62-869C-219E29E6BD9F}D:\hdd2\enigma 2\dcc295\dcc.exe" [In-None-P17-TRUE] .(.BernyR - Dreambox Control Center.) -- D:\hdd2\enigma 2\dcc295\dcc.exe
O87 - FAEL: "{7BB56F12-BBD3-4928-922D-FF3C3EFD2607}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
O87 - FAEL: "{50272D23-69B3-4982-A94B-57F692F6EBEF}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe

---\\ Services non Microsoft (SR=Démarré,SS=Stoppé) (28) - 7s

SS - Demand [19/06/2015] [ 72704] Adobe LM Service (Adobe LM Service) . (.Adobe Systems.) - C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe ©
SS - Demand [11/12/2015] [ 269504] Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe =>.Adobe Systems Incorporated®
SR - Auto [16/07/2015] [ 246784] (AMD External Events Utility) . (.AMD.) - C:\Windows\System32\atiesrxx.exe ©
SR - Auto [21/09/2015] [ 441856] ApplicationHosting (ApplicationHosting) . (...) - C:\ProgramData\ApplicationHosting\ApplicationHosting.exe =>PUP.Optional.ApplicationHosting
SR - Auto [17/09/2015] [ 441856] AppnorriA (AppnorriA) . (...) - C:\ProgramData\AppnorriA\AppnorriA.exe =>PUP.Optional.Salus
SR - Auto [17/09/2015] [ 441856] caMyciloP (caMyciloP) . (...) - C:\ProgramData\caMyciloP\caMyciloP.exe =>PUP.Optional.Salus
SR - Auto [06/08/2015] [ 379392] Compliant Host Controller (cohci1394) . (.Copyright © 2015.) - C:\Program Files\Controller\cohc.exe
SR - Auto [12/07/2010] [ 53248] D_Link_DWA-125_WPS Service (D_Link_DWA-125_WPS) . (...) - C:\Program Files (x86)\D-Link\DWA-125 revA\ANIWConnService.exe
SS - Auto [04/10/2015] [ 52736] U- Zaming (entdtwojozuuaate) . (...) - C:\Users\mourad\AppData\Local\Vilafase.exe
SR - Auto [25/12/2014] [ 23504] (GamingApp_Service) . (.Micro-Star Int'l Co., Ltd..) - C:\Program Files (x86)\MSI\MSI Gaming APP\GamingApp_Service.exe =>.MICRO-STAR INTERNATIONAL CO., LTD.®
SR - Auto [11/10/2015] [ 107848] Service Google Update (gupdate) (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google Inc®
SS - Demand [11/10/2015] [ 107848] Service Google Update (gupdatem) (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google Inc®
SR - Auto [28/05/2014] [ 16232] Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) . (.Intel Corporation.) - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe =>.Intel Corporation - Intel® Rapid Storage Technology®
SS - Demand [02/01/2013] [ 171632] Intel(R) Integrated Clock Controller Service - Intel(R) ICCS (ICCS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe =>.Intel Corporation - Intel® Management Engine Firmware®
SS - Demand [13/05/2014] [ 887256] Intel(R) Capability Licensing Service TCP IP Interface (Intel(R) Capability Licensing Service TCP IP Interface) . (.Intel(R) Corporation.) - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe =>.Intel® Trusted Connect Service®
SR - Auto [25/08/2014] [ 209712] Intel(R) Smart Connect Technology Agent (ISCTAgent) . (.Copyright© 2011-2013 Intel Corporation.) - C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe =>.Intel CASE®
SR - Auto [03/09/2014] [ 154584] Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe =>.Intel Corporation - Intel® Management Engine Firmware®
SR - Auto [05/02/2015] [ 386560] Killer Service V2 (Killer Service V2) . (.Rivet Networks.) - C:\Program Files\Killer Networking\Network Manager\KillerService.exe ©
SS - Demand [08/06/2015] [ 625648] Lenovo EasyPlus Hotspot (Lenovo EasyPlus Hotspot) . (.Lenovo.) - C:\Program Files (x86)\Common Files\LENOVO\easyplussdk\bin\EPHotspot64.exe {5716180DB7D4989DC4A17083DCFA7567} ©
SR - Auto [03/09/2014] [ 405976] Intel(R) Management and Security Application Local Manageme (LMS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe =>.Intel Corporation - Intel® Management Engine Firmware®
SS - Demand [07/11/2015] [ 147624] Mozilla Maintenance Service (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe =>.Mozilla Corporation®
SR - Auto [26/10/2012] [ 103992] MSI_FastBoot (MSI_FastBoot) . (.MSI.) - C:\Program Files (x86)\MSI\Fast Boot\FastBootService.exe =>.MICRO-STAR INTERNATIONAL CO., LTD.®
SR - Auto [22/09/2011] [ 66560] This service enables products that use the Nalpeiron Licens (nlsX86cc) . (.Nalpeiron Ltd..) - C:\Windows\SysWOW64\nlssrv32.exe ©
SR - Auto [01/04/2014] [ 614664] Cyberlink RichVideo64 Service(CRVS) (RichVideo64) . (.CyberLink.) - C:\Program Files\CyberLink\Shared files\RichVideo64.exe =>.CyberLink Corp.®
SR - Auto [17/09/2015] [ 441856] Saophase (Saophase) . (...) - C:\ProgramData\Saophase\Saophase.exe =>PUP.Optional.Salus
SS - Auto [09/07/2015] [ 327296] Skype Updater (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe =>.Skype Software Sarl®
SR - Demand [14/12/2015] [ 836176] Steam Client Service (Steam Client Service) . (.Valve Corporation.) - C:\Program Files (x86)\Common Files\Steam\SteamService.exe =>.Valve®

---\\ Recherche de clés de registre Tracing (8) - 1s
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\ApplicationHosting_RASAPI32 =>PUP.Optional.ApplicationHosting
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\ApplicationHosting_RASMANCS =>PUP.Optional.ApplicationHosting
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\AppnorriA_RASAPI32 =>PUP.Optional.Salus
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\AppnorriA_RASMANCS =>PUP.Optional.Salus
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\caMyciloP_RASAPI32 =>PUP.Optional.Salus
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\caMyciloP_RASMANCS =>PUP.Optional.Salus
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Saophase_RASAPI32 =>PUP.Optional.Salus
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Saophase_RASMANCS =>PUP.Optional.Salus

---\\ Scan Additionnel (35) - 0s
HKLM\SYSTEM\CurrentControlSet\Services\ApplicationHosting =>PUP.Optional.ApplicationHosting
C:\ProgramData\ApplicationHosting\ApplicationHosting.exe =>PUP.Optional.ApplicationHosting
HKLM\SYSTEM\CurrentControlSet\Services\AppnorriA =>PUP.Optional.Salus
C:\ProgramData\AppnorriA\AppnorriA.exe =>PUP.Optional.Salus
HKLM\SYSTEM\CurrentControlSet\Services\caMyciloP =>PUP.Optional.Salus
C:\ProgramData\caMyciloP\caMyciloP.exe =>PUP.Optional.Salus
HKLM\SYSTEM\CurrentControlSet\Services\Saophase =>PUP.Optional.Salus
C:\ProgramData\Saophase\Saophase.exe =>PUP.Optional.Salus
C:\Users\mourad\AppData\Local\Google\Chrome\User Data\Default\Extensions\fcgnigmofekcllgbiejhmigggmgehkip =>PUP.Optional.WikiSearchMe
C:\ProgramData\Saophase\Icetam.dll =>PUP.Optional.Salus
HKLM\SOFTWARE\Wow6432Node\mtAppnorriA =>PUP.Optional.Salus
HKLM\SOFTWARE\Wow6432Node\mtcaMyciloP =>PUP.Optional.Salus
HKLM\SOFTWARE\Wow6432Node\mtSaophase =>PUP.Optional.Salus
HKLM\SOFTWARE\Wow6432Node\PIP =>Toolbar.Ask
HKCU\SOFTWARE\APN PIP =>PUP.Optional.Conduit
HKCU\SOFTWARE\mtAppnorriA =>PUP.Optional.Salus
HKCU\SOFTWARE\mtcaMyciloP =>PUP.Optional.Salus
HKCU\SOFTWARE\mtSaophase =>PUP.Optional.Salus
C:\ProgramData\APN =>Toolbar.Ask
C:\ProgramData\ApplicationHosting =>PUP.Optional.ApplicationHosting
C:\ProgramData\AppnorriA =>PUP.Optional.Salus
C:\ProgramData\AppnorriAs =>PUP.Optional.Salus
C:\ProgramData\caMyciloP =>PUP.Optional.Salus
C:\ProgramData\caMyciloPs =>PUP.Optional.Salus
C:\ProgramData\Saophase =>PUP.Optional.Salus
C:\ProgramData\Saophases =>PUP.Optional.Salus
C:\Windows\System32\drivers\nethfdrv.sys =>PUP.Optional.Amonetize
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\ApplicationHosting_RASAPI32 =>PUP.Optional.ApplicationHosting
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\ApplicationHosting_RASMANCS =>PUP.Optional.ApplicationHosting
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\AppnorriA_RASAPI32 =>PUP.Optional.Salus
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\AppnorriA_RASMANCS =>PUP.Optional.Salus
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\caMyciloP_RASAPI32 =>PUP.Optional.Salus
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\caMyciloP_RASMANCS =>PUP.Optional.Salus
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Saophase_RASAPI32 =>PUP.Optional.Salus
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Saophase_RASMANCS =>PUP.Optional.Salus

---\\ Récapitulatif des éléments trouvés sur votre station (7) - 0s
http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.ApplicationHosting
http://www.nicolascoolman.fr/pup-salus/ =>PUP.Optional.Salus
http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.WikiSearchMe
http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.Linkury
http://www.nicolascoolman.fr/?p=235 =>Toolbar.Ask
http://www.nicolascoolman.fr/?p=210 =>PUP.Optional.Conduit
http://www.nicolascoolman.fr/pup-amonetize/ =>PUP.Optional.Amonetize

~ End of the scan, 27848 items in 64 seconds (984)(0)

Publicité


Signaler le contenu de ce document

Publicité