~ ZHPDiag v2016.2.25.60 Par Nicolas Coolman (2016/02/25)
~ Démarré par taoufik (Administrator) (2016/03/01 12:23:18)
~ Site: http://www.nicolascoolman.com
~ Facebook: https://www.facebook.com/nicolascoolman1
~ Etat de la version: Version OK
~ Mode: Scanner
~ Rapport: C:\Documents and Settings\Taoufik\Bureau\ZHPDiag.txt
~ Rapport: C:\Documents and Settings\Taoufik\Application Data\ZHP\ZHPDiag.txt
~ UAC: Deactivate
~ Démarrage du système: Normal (Normal boot)
Windows XP, 32-bit Service Pack 2 (Build 2600)

---\\ Navigateurs Internet (2) - 0s
GCIE: Google Chrome v48.0.2564.116
MSIE: Internet Explorer v8.0.6001.18702

---\\ Informations sur les produits Windows (3) - 0s
Windows Automatic Updates : OK
Windows Activation Technologies : KO
Windows Genuine Advantage : OK

---\\ Logiciels de protection et autres (Superflus) (1) - 3s
McAfee Security Scan v3.8.150.1

---\\ Logiciels d'optimisation (2) - 3s
CCleaner v2.33
Uniblue RegistryBooster v6.0.19.3

---\\ Surveillance de Logiciels (2) - 3s
Adobe Flash Player 17 NPAPI
Adobe Reader XI

---\\ Informations sur le système (6) - 0s
~ Operating System: x86 Family 6 Model 15 Stepping 13, GenuineIntel
~ Operating System: 32-bit
~ Boot mode: Normal (Normal boot)
Total RAM: 1039.6 MB (33% free)
System Restore: Activé (Enable)
System drive C: has 4 GB () free of 74 GB =>Alerte espace disque inférieur à 20 Go

---\\ Mode de connexion au système (3) - 0s
~ Computer Name: BAHBOUHI
~ User Name: taoufik
~ Logged in as Administrator

---\\ Enumération des unités disques (2) - 5s
~ Drive C: has 4 GB free of 74 GB (System)
~ Drive D: has 77 GB free of 77 GB

---\\ Etat du Centre de Sécurité Windows (9) - 0s
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] XMLLookup: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Intl: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: OK
[HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK

---\\ Recherche particulière de fichiers génériques (23) - 1s
[MD5.D0288319660EDCFED07C7E74C4EA38A5] - 13/06/2007 - (.Microsoft Corporation - Explorateur Windows.) -- C:\WINDOWS\Explorer.exe [1037312] =>.Microsoft Corporation
[MD5.CDD7140C0EAA754C527B983CCC9993CD] - 19/08/2004 - (.Microsoft Corporation - Exécuter une DLL en tant qu'application.) -- C:\WINDOWS\System32\rundll32.exe [33792] =>.Microsoft Corporation
[MD5.B98E84E2CD3EE25D6D41936352E93112] - 06/05/2010 - (.Microsoft Corporation - Internet Extensions for Win32.) -- C:\WINDOWS\System32\wininet.dll [916480] =>.Microsoft Corporation
[MD5.123EEA158F74D0F67A51DCDF065D1091] - 19/08/2004 - (.Microsoft Corporation - Application d'ouverture de session Windows.) -- C:\WINDOWS\System32\Winlogon.exe [506368] =>.Microsoft Corporation
[MD5.C604C220BBE1EF4AFF36D2EF2A22A254] - 20/06/2008 - (.Microsoft Corporation - DNS Client API DLL.) -- C:\WINDOWS\System32\dnsapi.dll [147968] =>.Microsoft Corporation
[MD5.6A0397376853E604DE8E1E7A87FC08AC] - 14/08/2008 - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) -- C:\WINDOWS\System32\drivers\AFD.sys [138368] =>.Microsoft Corporation
[MD5.CDFE4411A69C224BD1D11B2DA92DAC51] - 03/08/2004 - (.Microsoft Corporation - IDE/ATAPI Port Driver.) -- C:\WINDOWS\System32\drivers\atapi.sys [95360] =>.Microsoft Corporation
[MD5.CD7D5152DF32B47F4E36F710B35AAE02] - 03/08/2004 - (.Microsoft Corporation - CD-ROM File System Driver.) -- C:\WINDOWS\System32\drivers\Cdfs.sys [63744] =>.Microsoft Corporation
[MD5.7B53584D94E9D8716B2DE91D5F1CB42D] - 25/04/2007 - (.Microsoft Corporation - SCSI CD-ROM Driver.) -- C:\WINDOWS\System32\drivers\Cdrom.sys [62592] =>.Microsoft Corporation
[MD5.8B121FF880683607AB2AEF0340721718] - 28/08/2001 - (.Microsoft Corporation - Pilote de cryptographie FIPS.) -- C:\WINDOWS\System32\drivers\Fips.sys [35072] =>.Microsoft Corporation
[MD5.3FCC124B6E08EE0E9351F717DD136939] - 07/01/2005 - (.Windows (R) Server 2003 DDK provider - High Definition Audio Bus Driver v1.0a.) -- C:\WINDOWS\System32\drivers\HDAudBus.sys [138752]
[MD5.D1EFCBD693B5BA21314D06368C471070] - 19/08/2004 - (.Microsoft Corporation - Pilote de port i8042.) -- C:\WINDOWS\System32\drivers\i8042prt.sys [54400] =>.Microsoft Corporation
[MD5.F8AA320C6A0409C0380E5D8A99D76EC6] - 03/08/2004 - (.Microsoft Corporation - IMAPI Kernel Driver.) -- C:\WINDOWS\System32\drivers\Imapi.sys [41856] =>.Microsoft Corporation
[MD5.5191673215C91FF13CEAA83EF8E9653F] - 12/01/2006 - (.Microsoft Corporation - IP Network Address Translator.) -- C:\WINDOWS\System32\drivers\IpNat.sys [134912] =>.Microsoft Corporation
[MD5.64537AA5C003A6AFEEE1DF819062D0D1] - 03/08/2004 - (.Microsoft Corporation - IPSec Driver.) -- C:\WINDOWS\System32\drivers\IPSec.sys [74752] =>.Microsoft Corporation
[MD5.3500E756812E716351F2D341AE1D5623] - 24/02/2010 - (.Microsoft Corporation - Windows NT SMB Minirdr.) -- C:\WINDOWS\System32\drivers\MRxSmb.sys [457216] =>.Microsoft Corporation
[MD5.0C80E410CD2F47134407EE7DD19CC86B] - 03/08/2004 - (.Microsoft Corporation - MBT Transport driver.) -- C:\WINDOWS\System32\drivers\netBT.sys [162816] =>.Microsoft Corporation
[MD5.19A811EF5F1ED5C926A028CE107FF1AF] - 09/02/2007 - (.Microsoft Corporation - NT File System Driver.) -- C:\WINDOWS\System32\drivers\ntfs.sys [574464] =>.Microsoft Corporation
[MD5.318696359AC7DF48D1E51974EC527DD2] - 13/01/2006 - (.Microsoft Corporation - Pilote de port parallèle.) -- C:\WINDOWS\System32\drivers\Parport.sys [80384] =>.Microsoft Corporation
[MD5.98FAEB4A4DCF812BA1C6FCA4AA3E115C] - 03/08/2004 - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) -- C:\WINDOWS\System32\drivers\Rasl2tp.sys [51328] =>.Microsoft Corporation
[MD5.A2CAE2C60BC37E0751EF9DDA7CEAF4AD] - 03/08/2004 - (.Microsoft Corporation - Microsoft RDP Device redirector.) -- C:\WINDOWS\System32\drivers\rdpdr.sys [196864] =>.Microsoft Corporation
[MD5.2CC30B68DD62B73D444A41322CD7FC4C] - 19/08/2004 - (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) -- C:\WINDOWS\System32\drivers\redbook.sys [58496] =>.Microsoft Corporation
[MD5.313B1A0D5DB26DFE1C34A6C13B2CE0A7] - 19/08/2004 - (.Microsoft Corporation - Pilote de cliché instantané du volume.) -- C:\WINDOWS\System32\drivers\volsnap.sys [53376] =>.Microsoft Corporation

---\\ Liste des services NT non Microsoft et non désactivés (7) - 1s
O23 - Service: Service Google Update (gupdate1c9e93894f41243) (gupdate1c9e93894f41243) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe =>.Google Inc®
O23 - Service: HP LaserJet Service (HP LaserJet Service) . (.HP - HP LaserJet Service.) - C:\Program Files\HP\HPLaserJetService\HPLaserJetService.exe =>.HP
O23 - Service: Java Quick Starter (JavaQuickStarterService) . (.Oracle Corporation - Java Quick Starter Service.) - C:\Program Files\Java\jre7\bin\jqs.exe =>.Oracle America, Inc.®
O23 - Service: LiveUpdate (LiveUpdateSvc) . (.IObit - Product Updater.) - C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe =>.IObit
O23 - Service: McAfee Validation Trust Protection Service (mfevtp) . (.McAfee, Inc. - McAfee Process Validation Service.) - C:\WINDOWS\system32\mfevtps.exe =>.McAfee, Inc.®
O23 - Service: SAMSUNG Mobile Connectivity Service (ss_conn_service) . (.DEVGURU Co., LTD. - MSS CS Connectivity Service.) - C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe =>.DEVGURU Co., LTD.
O23 - Service: Wondershare Application Framework Service (WsAppService) . (.Wondershare - Wondershare AppService.) - C:\Program Files\Wondershare\WAF\2.1.5.6\WsAppService.exe =>.Wondershare

---\\ Services non Microsoft (SR=Démarré,SS=Stoppé) (14) - 25s

SS - Demand [24/03/2015] [ 268464] Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe =>.Adobe Systems Incorporated®
SS - Auto [28/08/2015] [ 144200] Service Google Update (gupdate1c9e93894f41243) (gupdate1c9e93894f41243) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe =>.Google Inc®
SS - Demand [28/08/2015] [ 144200] Service Google Update (gupdatem) (gupdatem) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe =>.Google Inc®
SS - Demand [17/10/2011] [ 13824] HP DS Service (HP DS Service) . (.Hewlett-Packard Company.) - C:\Program Files\HP\HPBDSService\HPBDSService.exe =>.Hewlett-Packard Company
SS - Auto [02/05/2012] [ 164864] HP LaserJet Service (HP LaserJet Service) . (.HP.) - C:\Program Files\HP\HPLaserJetService\HPLaserJetService.exe =>.HP
SS - Demand [21/02/2014] [ 553288] Service de l’iPod (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe =>.Apple Inc.®
SR - Auto [09/07/2013] [ 182184] Java Quick Starter (JavaQuickStarterService) . (.Oracle Corporation.) - C:\Program Files\Java\jre7\bin\jqs.exe =>.Oracle America, Inc.®
SS - Auto [14/01/2016] [ 2945312] LiveUpdate (LiveUpdateSvc) . (.IObit.) - C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe =>.IObit
SS - Demand [12/09/2010] [ 251248] Ma-Config Service (maconfservice) . (.CybelSoft.) - C:\Program Files\ma-config.com\maconfservice.exe =>.Cybelsoft®
SR - Auto [09/10/2013] [ 159640] McAfee Validation Trust Protection Service (mfevtp) . (.McAfee, Inc..) - C:\WINDOWS\system32\mfevtps.exe =>.McAfee, Inc.®
SS - Demand [04/02/2016] [ 147400] Mozilla Maintenance Service (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe =>.Mozilla Foundation
SR - Auto [08/01/2016] [ 754784] SAMSUNG Mobile Connectivity Service (ss_conn_service) . (.DEVGURU Co., LTD..) - C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe =>.DEVGURU Co., LTD.
SR - Auto [25/12/2015] [ 387072] Wondershare Application Framework Service (WsAppService) . (.Wondershare.) - C:\Program Files\Wondershare\WAF\2.1.5.6\WsAppService.exe =>.Wondershare

---\\ Processus lancés (16) - 1s
[MD5.DD7423ABBE2913E70D50E9318AD57EE4] - (.Google Inc. - Programme d'installation de Google.) -- C:\Program Files\Google\Update\GoogleUpdate.exe [144200] [PID.1956] =>.Google Inc®
[MD5.9ECF00E19736054E019C532AED8228FC] - (.Oracle Corporation - Java Quick Starter Service.) -- C:\Program Files\Java\jre7\bin\jqs.exe [182184] [PID.1988] =>.Oracle America, Inc.®
[MD5.DA1067DC5999F00CDB6AC69553EE26AE] - (.McAfee, Inc. - McAfee Process Validation Service.) -- C:\WINDOWS\system32\mfevtps.exe [159640] [PID.128] =>.McAfee, Inc.®
[MD5.4F12A10073256267410EFF3BCBB7A5C4] - (.Microsoft - novaPDF Server.) -- C:\Program Files\Softland\novaPDF 8\Server\novapdfs.exe [204576] [PID.968] =>.Softland S.R.L.®
[MD5.7DB9E612A2742ACEAB080B882E83141C] - (.DEVGURU Co., LTD. - MSS CS Connectivity Service.) -- C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [754784] [PID.1372] =>.DEVGURU Co., LTD.
[MD5.844E190C44B640A59367DD34A426D12C] - (.Wondershare - Wondershare AppService.) -- C:\Program Files\Wondershare\WAF\2.1.5.6\WsAppService.exe [387072] [PID.212] =>.Wondershare
[MD5.B427B61409493138D39A48EFC5767283] - (.Intel Corporation - igfxTray Module.) -- C:\WINDOWS\system32\igfxtray.exe [143360] [PID.1132] =>.Intel Corporation
[MD5.25B9D53B861552EC83B80A565AC07A47] - (.Intel Corporation - hkcmd Module.) -- C:\WINDOWS\system32\hkcmd.exe [172032] [PID.1136] =>.Intel Corporation
[MD5.E24AAF17E339759C296AC67EA56ED97B] - (.Intel Corporation - persistence Module.) -- C:\WINDOWS\system32\igfxpers.exe [143360] [PID.1252] =>.Intel Corporation
[MD5.5C8167883287D5B22BA5E0AC28E4B04E] - (.Intel Corporation - igfxsrvc Module.) -- C:\WINDOWS\system32\igfxsrvc.exe [249856] [PID.1712] =>.Intel Corporation
[MD5.34D296AFC913E302953C70463EF09A48] - (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [96056] [PID.1812] =>.Hewlett-Packard Company®
[MD5.C0EF7F9CF259471F9FDB6E5D490FACFC] - (.Realtek Semiconductor Corp. - Realtek HD Audio Control Panel.) -- C:\WINDOWS\RTHDCPL.EXE [20146192] [PID.2144] =>.Realtek Semiconductor Corp.
[MD5.63740680B14C2EEE08B11ADADFA98DA1] - (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [746648] [PID.2616] =>.Google Inc®
[MD5.63740680B14C2EEE08B11ADADFA98DA1] - (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [746648] [PID.1868] =>.Google Inc®
[MD5.63740680B14C2EEE08B11ADADFA98DA1] - (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [746648] [PID.2172] =>.Google Inc®
[MD5.E69EB056AC988D1F77F1D59AF4BEFE4E] - (.Nicolas Coolman - ZHPDiag.) -- C:\Documents and Settings\Taoufik\Mes documents\Downloads\ZHPDiag3.exe [2132480] [PID.2924] =>.Nicolas Coolman

---\\ Google Chrome, Démarrage,Recherche,Extensions (11) - 37s
G2 - GCE: Preference [User Data\Default] [aohghmighlieiainnegkcijnfilokake] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [apdfllckaahabafndbhieahigkjlhalf] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [blpcfgokakmgnkcojhhkbfbldkacnbeo] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [coobgpohoikkiipiblmjeljniedjpjpf] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [ejpbbhjlbipncjklfjjaedaieimbmdda] [http://autoupdate.chromewebtb.tbccint.com/sb/?prod] uTorrentControl_v2 =>Hijacker.Browser
G2 - GCE: Preference [User Data\Default] [eooncjejnppfjjklapaamhcdmjbilmde] [http://upd.info-stream.net/chromecrx/update.php] Delta Toolbar =>Hijacker.Browser
G2 - GCE: Preference [User Data\Default] [ghbmnnjooekpmoecnnnilnnbdlolhkhi] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [jeaohhlajejodfjadcponpnjgkiikocn] IDM Integration Module
G2 - GCE: Preference [User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [paoponfhfdfnjgddpnpjkambkcgdaaib] [http://autoupdate.chromewebtb.tbccint.com/sb/?prod] uTorrentBar_FR =>Hijacker.Browser
G2 - GCE: Preference [User Data\Default] [pjkljhegncpnkpknbcohdijeoejaedia] Google Chrome manifest =>.Google Inc.

---\\ Firefox, Plugins,Demarrage,Recherche,Extensions (12) - 2s
P2 - EXT: (. - GanymedeNet.Detector.) -- C:\Program Files\Mozilla Firefox\Plugins\npganymedenet.dll {7CDBA4DF284140805CF4C3A4894454DD}
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\Plugins\nppdf32.FRA
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\Plugins\QuickTimePlugin.class
P2 - EXT FILE: (...) -- C:\Documents and Settings\Taoufik\Application Data\Mozilla\Firefox\Profiles\fa8kz852.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
P2 - EXT: (...) -- C:\Documents and Settings\Taoufik\Application Data\Mozilla\Firefox\Profiles\fa8kz852.default\extensions\staged
P2 - EXT: (.ClientConnect Ltd. - uTorrentControl_v6b .) -- C:\Documents and Settings\Taoufik\Application Data\Mozilla\Firefox\Profiles\fa8kz852.default\extensions\{8f6846ea-ddff-459b-8c78-469b34d90a49} =>.Superfluous.ClientConnect
P2 - EXT: (.Mozilla & Android Open Source Project - ADB Helper.) -- C:\Documents and Settings\Taoufik\Application Data\Mozilla\Firefox\Profiles\4un8hu18.dev-edition-default\extensions\adbhelper@mozilla.org
P2 - EXT: (.RLA-ES, Recursos Lingüísticos Abiertos del Español - Diccionario de Español/España.) -- C:\Documents and Settings\Taoufik\Application Data\Mozilla\Firefox\Profiles\4un8hu18.dev-edition-default\extensions\es-es@dictionaries.addons.mozilla.org
P2 - EXT: (.Mozilla - Valence.) -- C:\Documents and Settings\Taoufik\Application Data\Mozilla\Firefox\Profiles\4un8hu18.dev-edition-default\extensions\fxdevtools-adapters@mozilla.org =>.Mozilla
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Adobe Systems Incorporated.) -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32_17_0_0_134.dll =>.Adobe Systems Incorporated
P2 - FPN: [HKLM] [@Apple.com/iTunes,version=1.0] - (.Apple Inc..) -- C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll =>.Apple Inc.
P2 - FPN: [HKLM] [@ganymede/GanymedeNetPlugin,version=1.0] - (.Ganymede.) -- C:\Program Files\Ganymede\Plugins\npganymedenet.dll =>.Ganymede

---\\ Internet Explorer,Démarrage,Recherche,URLSearchHook (10) - 0s
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm
R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphean =>.Microsoft Internet Explorer

---\\ Internet Explorer,Proxy Management (4) - 0s
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll

---\\ Internet Explorer,IniFiles, Autoloading programs (3) - 0s
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,C:\Program Files\eFsixGCB\gjuauxni.exe
F2 - REG:system.ini: Shell=C:\WINDOWS\explorer.exe (.Microsoft Corporation.) =>.Microsoft Corporation
F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"

---\\ Etude du fichier hosts (3) - 1s
173.194
173.194

~ Nombre lignes détournées 173.194

14 (Hosts file redirected)

---\\ Browser Helper Object de navigateur (BHO) (8) - 0s
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} . (.Internet Download Manager, Tonec Inc. - IDM Browser Helper Object.) -- C:\Program Files\Internet Download Manager\IDMIECC.dll =>.Tonec Inc.®
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} (Orphean)
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll =>.Adobe Systems, Incorporated®
O2 - BHO: (no name) - {3049C3E9-B461-4BC5-8870-4C09146192CA} (Orphean)
O2 - BHO: PXCIEaddin5 - {42DFA04F-0F16-418e-B80C-AB97A5AFAD3A} . (.Tracker Software Products (Canada) Ltd. - HTML to PDF Converter IE plugin (2012).) -- C:\Program Files\Tracker Software\PDF-XChange 5\PXCIEaddin5.dll =>.Tracker Software Products (Canada) Ltd.
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre7\bin\ssv.dll =>.Oracle America, Inc.®
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} . (.McAfee, Inc. - VSCore Script Scanner.) -- C:\Program Files\Fichiers communs\McAfee\SystemCore\ScriptSn.20131009131802.dll =>.McAfee, Inc.®
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre7\bin\jp2ssv.dll =>.Oracle America, Inc.®

---\\ Internet Explorer, Barre d'outil (1) - 1s
O3 - Toolbar: 0xB1C218236549D4119B18009027A5CD4F - [HKCU]{2318C2B1-4965-11D4-9B18-009027A5CD4F} . (...) -- (.not file.)

---\\ Applications lancées au démarrage du système (16) - 0s
O4 - HKLM\..\Run: [Synchronization Manager] . (.Microsoft Corporation - Gestionnaire de synchronisation Microsoft.) -- C:\WINDOWS\system32\mobsync.exe =>.Microsoft Corporation
O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\WINDOWS\system32\igfxtray.exe =>.Intel Corporation
O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\WINDOWS\system32\hkcmd.exe =>.Intel Corporation
O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\WINDOWS\system32\igfxpers.exe =>.Intel Corporation
O4 - HKLM\..\Run: [StatusAlerts] . (.Hewlett-Packard Company - HPStatusAlerts.) -- C:\Program Files\HP\StatusAlerts\bin\HPStatusAlerts.exe =>.Hewlett-Packard Company®
O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe =>.Adobe Systems, Incorporated®
O4 - HKLM\..\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe =>.Apple Inc.®
O4 - HKLM\..\Run: [HP Software Update] . (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files\HP\HP Software Update\HPWuSchd2.exe =>.Hewlett-Packard Company®
O4 - HKCU\..\Run: [Java(TM) Platform SE Auto Updater] %temp%\WINDOWS_TEMP\taskmgr.exe
O4 - HKLM\..\policies\Explorer\Run: [rescue] . (...) -- C:\Documents and Settings\All Users\rescue.vbe
O4 - HKLM\..\policies\Explorer\Run: [SysAnti] . (...) -- C:\Program Files\Common Files\SysAnti.exe
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-21-3745257764-3635235401-61918701-1127\..\Run: [Java(TM) Platform SE Auto Updater] %temp%\WINDOWS_TEMP\taskmgr.exe

---\\ Raccourcis Global Startup (52) - 7s
O4 - GS\Desktop [125]: Format Factory.lnk . (.Free Time - FormatFactory.) C:\Program Files\FreeTime\FormatFactory\FormatFactory.exe =>.chen jun hao®
O4 - GS\Desktop [125]: PDF-Viewer.lnk . (.Tracker Software Products Ltd. - PDF-XChange Viewer.) C:\Program Files\Tracker Software\PDF Viewer\PDFXCview.exe =>.Tracker Software Products Ltd®
O4 - GS\Desktop [125]: Raccourci vers SUIVI DU CONTRAT MAINTENANCE PROTELCO-1.lnk . (...) C:\Documents and Settings\Taoufik\Local Settings\Temp\SUIVI DU CONTRAT MAINTENANCE PROTELCO-1.xls
O4 - GS\Desktop [125]: Raccourci vers SUIVI DU CONTRAT MAINTENANCE PROTELCO.lnk . (...) C:\Documents and Settings\Taoufik\Local Settings\Temp\SUIVI DU CONTRAT MAINTENANCE PROTELCO.xls
O4 - GS\Desktop [125]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Documents and Settings\Taoufik\Application Data\ZHP\ZHPDiag3.exe =>.Nicolas Coolman
O4 - GS\Quicklaunch [125]: Aurora.lnk . (.Mozilla Corporation - FirefoxDeveloperEdition.) C:\Program Files\Aurora\firefox.exe =>.Mozilla Corporation
O4 - GS\Quicklaunch [125]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) C:\Documents and Settings\Taoufik\Application Data\uTorrent\uTorrent.exe
O4 - GS\Desktop [Administrateur]: Format Factory.lnk . (.Free Time - FormatFactory.) C:\Program Files\FreeTime\FormatFactory\FormatFactory.exe =>.chen jun hao®
O4 - GS\Desktop [Administrateur]: PDF-Viewer.lnk . (.Tracker Software Products Ltd. - PDF-XChange Viewer.) C:\Program Files\Tracker Software\PDF Viewer\PDFXCview.exe =>.Tracker Software Products Ltd®
O4 - GS\Desktop [Administrateur]: Raccourci vers SUIVI DU CONTRAT MAINTENANCE PROTELCO-1.lnk . (...) C:\Documents and Settings\Taoufik\Local Settings\Temp\SUIVI DU CONTRAT MAINTENANCE PROTELCO-1.xls
O4 - GS\Desktop [Administrateur]: Raccourci vers SUIVI DU CONTRAT MAINTENANCE PROTELCO.lnk . (...) C:\Documents and Settings\Taoufik\Local Settings\Temp\SUIVI DU CONTRAT MAINTENANCE PROTELCO.xls
O4 - GS\Desktop [Administrateur]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Documents and Settings\Taoufik\Application Data\ZHP\ZHPDiag3.exe =>.Nicolas Coolman
O4 - GS\Quicklaunch [Administrateur]: Aurora.lnk . (.Mozilla Corporation - FirefoxDeveloperEdition.) C:\Program Files\Aurora\firefox.exe =>.Mozilla Corporation
O4 - GS\Quicklaunch [Administrateur]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) C:\Documents and Settings\Taoufik\Application Data\uTorrent\uTorrent.exe
O4 - GS\Desktop [ASPNET]: Format Factory.lnk . (.Free Time - FormatFactory.) C:\Program Files\FreeTime\FormatFactory\FormatFactory.exe =>.chen jun hao®
O4 - GS\Desktop [ASPNET]: PDF-Viewer.lnk . (.Tracker Software Products Ltd. - PDF-XChange Viewer.) C:\Program Files\Tracker Software\PDF Viewer\PDFXCview.exe =>.Tracker Software Products Ltd®
O4 - GS\Desktop [ASPNET]: Raccourci vers SUIVI DU CONTRAT MAINTENANCE PROTELCO-1.lnk . (...) C:\Documents and Settings\Taoufik\Local Settings\Temp\SUIVI DU CONTRAT MAINTENANCE PROTELCO-1.xls
O4 - GS\Desktop [ASPNET]: Raccourci vers SUIVI DU CONTRAT MAINTENANCE PROTELCO.lnk . (...) C:\Documents and Settings\Taoufik\Local Settings\Temp\SUIVI DU CONTRAT MAINTENANCE PROTELCO.xls
O4 - GS\Desktop [ASPNET]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Documents and Settings\Taoufik\Application Data\ZHP\ZHPDiag3.exe =>.Nicolas Coolman
O4 - GS\Quicklaunch [ASPNET]: Aurora.lnk . (.Mozilla Corporation - FirefoxDeveloperEdition.) C:\Program Files\Aurora\firefox.exe =>.Mozilla Corporation
O4 - GS\Quicklaunch [ASPNET]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) C:\Documents and Settings\Taoufik\Application Data\uTorrent\uTorrent.exe
O4 - GS\Desktop [HelpAssistant]: Format Factory.lnk . (.Free Time - FormatFactory.) C:\Program Files\FreeTime\FormatFactory\FormatFactory.exe =>.chen jun hao®
O4 - GS\Desktop [HelpAssistant]: PDF-Viewer.lnk . (.Tracker Software Products Ltd. - PDF-XChange Viewer.) C:\Program Files\Tracker Software\PDF Viewer\PDFXCview.exe =>.Tracker Software Products Ltd®
O4 - GS\Desktop [HelpAssistant]: Raccourci vers SUIVI DU CONTRAT MAINTENANCE PROTELCO-1.lnk . (...) C:\Documents and Settings\Taoufik\Local Settings\Temp\SUIVI DU CONTRAT MAINTENANCE PROTELCO-1.xls
O4 - GS\Desktop [HelpAssistant]: Raccourci vers SUIVI DU CONTRAT MAINTENANCE PROTELCO.lnk . (...) C:\Documents and Settings\Taoufik\Local Settings\Temp\SUIVI DU CONTRAT MAINTENANCE PROTELCO.xls
O4 - GS\Desktop [HelpAssistant]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Documents and Settings\Taoufik\Application Data\ZHP\ZHPDiag3.exe =>.Nicolas Coolman
O4 - GS\Quicklaunch [HelpAssistant]: Aurora.lnk . (.Mozilla Corporation - FirefoxDeveloperEdition.) C:\Program Files\Aurora\firefox.exe =>.Mozilla Corporation
O4 - GS\Quicklaunch [HelpAssistant]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) C:\Documents and Settings\Taoufik\Application Data\uTorrent\uTorrent.exe
O4 - GS\Desktop [SUPPORT_388945a0]: Format Factory.lnk . (.Free Time - FormatFactory.) C:\Program Files\FreeTime\FormatFactory\FormatFactory.exe =>.chen jun hao®
O4 - GS\Desktop [SUPPORT_388945a0]: PDF-Viewer.lnk . (.Tracker Software Products Ltd. - PDF-XChange Viewer.) C:\Program Files\Tracker Software\PDF Viewer\PDFXCview.exe =>.Tracker Software Products Ltd®
O4 - GS\Desktop [SUPPORT_388945a0]: Raccourci vers SUIVI DU CONTRAT MAINTENANCE PROTELCO-1.lnk . (...) C:\Documents and Settings\Taoufik\Local Settings\Temp\SUIVI DU CONTRAT MAINTENANCE PROTELCO-1.xls
O4 - GS\Desktop [SUPPORT_388945a0]: Raccourci vers SUIVI DU CONTRAT MAINTENANCE PROTELCO.lnk . (...) C:\Documents and Settings\Taoufik\Local Settings\Temp\SUIVI DU CONTRAT MAINTENANCE PROTELCO.xls
O4 - GS\Desktop [SUPPORT_388945a0]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Documents and Settings\Taoufik\Application Data\ZHP\ZHPDiag3.exe =>.Nicolas Coolman
O4 - GS\Quicklaunch [SUPPORT_388945a0]: Aurora.lnk . (.Mozilla Corporation - FirefoxDeveloperEdition.) C:\Program Files\Aurora\firefox.exe =>.Mozilla Corporation
O4 - GS\Quicklaunch [SUPPORT_388945a0]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) C:\Documents and Settings\Taoufik\Application Data\uTorrent\uTorrent.exe
O4 - GS\Desktop [user]: Format Factory.lnk . (.Free Time - FormatFactory.) C:\Program Files\FreeTime\FormatFactory\FormatFactory.exe =>.chen jun hao®
O4 - GS\Desktop [user]: PDF-Viewer.lnk . (.Tracker Software Products Ltd. - PDF-XChange Viewer.) C:\Program Files\Tracker Software\PDF Viewer\PDFXCview.exe =>.Tracker Software Products Ltd®
O4 - GS\Desktop [user]: Raccourci vers SUIVI DU CONTRAT MAINTENANCE PROTELCO-1.lnk . (...) C:\Documents and Settings\Taoufik\Local Settings\Temp\SUIVI DU CONTRAT MAINTENANCE PROTELCO-1.xls
O4 - GS\Desktop [user]: Raccourci vers SUIVI DU CONTRAT MAINTENANCE PROTELCO.lnk . (...) C:\Documents and Settings\Taoufik\Local Settings\Temp\SUIVI DU CONTRAT MAINTENANCE PROTELCO.xls
O4 - GS\Desktop [user]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Documents and Settings\Taoufik\Application Data\ZHP\ZHPDiag3.exe =>.Nicolas Coolman
O4 - GS\Quicklaunch [user]: Aurora.lnk . (.Mozilla Corporation - FirefoxDeveloperEdition.) C:\Program Files\Aurora\firefox.exe =>.Mozilla Corporation
O4 - GS\Quicklaunch [user]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) C:\Documents and Settings\Taoufik\Application Data\uTorrent\uTorrent.exe
O4 - GS\CommonDesktop [Public]: Aurora.lnk . (.Mozilla Corporation - FirefoxDeveloperEdition.) C:\Program Files\Aurora\firefox.exe =>.Mozilla Corporation
O4 - GS\CommonDesktop [Public]: BurnAware Free.lnk . (.Burnaware - BurnAware module.) C:\Program Files\BurnAware Free\BurnAware.exe =>.Burnaware®
O4 - GS\CommonDesktop [Public]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\CommonDesktop [Public]: HP LJ300-400 M375-M475 Scan.lnk . (.Hewlett-Packard Co. - HPScan.) C:\Program Files\HP\HP LJ300-400 color MFP M375-M475\Bin\HPScan.exe =>.Hewlett-Packard Company®
O4 - GS\CommonDesktop [Public]: Office2PDF5.lnk . (.Tracker Software Products (Canada) Ltd. - Batch converter for Office documents to PDF.) C:\Program Files\Tracker Software\PDF-XChange 5\OFFice2PDF5.exe =>.Tracker Software Products (Canada) Ltd.
O4 - GS\CommonDesktop [Public]: PDF-Tools 4.lnk . (.Tracker Software Products (Canada) Ltd. - PDF-Tools.) C:\Program Files\Tracker Software\PDF-Tools 4\PDFTools4.exe =>.Tracker Software Products (Canada) Ltd.
O4 - GS\CommonDesktop [Public]: PDF-XChange Editor.lnk . (.Tracker Software Products (Canada) Ltd. - PDF-XChange Editor.) C:\Program Files\Tracker Software\PDF Editor\PDFXEdit.exe =>.Tracker Software Products (Canada) Ltd.
O4 - GS\CommonDesktop [Public]: QuickTime Player.lnk . (.Apple Inc. - QuickTime Player.) C:\Program Files\QuickTime\QuickTimePlayer.exe =>.Apple Inc.®
O4 - GS\CommonDesktop [Public]: StockItEasy.lnk . (.Stock It Easy - Gestion Stock Multi Sites.) C:\Program Files\StockItEasy\GestStock.exe
O4 - GS\CommonDesktop [Public]: VLC media player.lnk . (.VideoLAN - VLC media player.) C:\Program Files\VideoLAN\VLC\vlc.exe =>.VideoLAN

---\\ Modification Domaine/Adresses DNS (4) - 0s
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = protelco.local
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{F61AA9BE-C7A4-44D4-B91A-3BBC3D97FC2C}: NameServer = 192.168.1.2,212.217.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{F61AA9BE-C7A4-44D4-B91A-3BBC3D97FC2C}: DhcpNameServer = 192.168.1.1

---\\ Protocole additionnel (32) - 1s
O18 - Handler: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll =>.Microsoft Corporation
O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\WINDOWS\system32\msvidctl.dll =>.Microsoft Corporation
O18 - Handler: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\WINDOWS\system32\itss.dll =>.Microsoft Corporation
O18 - Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll =>.Microsoft Corporation
O18 - Handler: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll =>.Microsoft Corporation
O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API.) -- C:\WINDOWS\system32\inetcomm.dll =>.Microsoft Corporation
O18 - Handler: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\WINDOWS\system32\itss.dll =>.Microsoft Corporation
O18 - Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Program Files\Fichiers communs\Microsoft Shared\Information Retrieval\MSITSS.DLL =>.Microsoft Corporation
O18 - Handler: mso-offdap - {3D9F03FA-7A94-11D3-BE81-0050048385D1} . (.Microsoft Corporation - Microsoft Office XP Web Components.) -- C:\Program Files\Fichiers communs\Microsoft Shared\Web Components\10\OWC10.DLL =>.Microsoft Corporation®
O18 - Handler: mso-offdap11 - {32505114-5902-49B2-880A-1F7738E5A384} . (.Microsoft Corporation - Microsoft Office Web Components 2003.) -- C:\Program Files\Fichiers communs\Microsoft Shared\Web Components\11\OWC11.DLL =>.Microsoft Corporation®
O18 - Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll =>.Microsoft Corporation
O18 - Handler: sysimage - {76E67A63-06E9-11D2-A840-006008059382} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll =>.Microsoft Corporation
O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\WINDOWS\system32\msvidctl.dll =>.Microsoft Corporation
O18 - Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll =>.Microsoft Corporation
O18 - Handler: wia - {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} . (.Microsoft Corporation - WIA Scripting Layer.) -- C:\WINDOWS\system32\wiascr.dll =>.Microsoft Corporation
O18 - Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS\system32\mscoree.dll =>.Microsoft Corporation®
O18 - Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS\system32\mscoree.dll =>.Microsoft Corporation®
O18 - Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS\system32\mscoree.dll =>.Microsoft Corporation®
O18 - Filter: Class Install Handler - {32B533BB-EDAE-11d0-BD5A-00AA00B92AF1} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation
O18 - Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation
O18 - Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation
O18 - Filter: lzdhtml - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation
O18 - Filter: text/webviewhtml - {733AC4CB-F1A4-11d0-B951-00A0C90312E1} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\shell32.dll =>.Microsoft Corporation
O18 - Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE11\MSOXMLMF.DLL =>.Microsoft Corporation®

---\\ Logiciels installés (97) - 29s
O42 - Logiciel: µTorrent - (.BitTorrent Inc..) [HKCU] -- uTorrent
O42 - Logiciel: 32 Bit HP CIO Components Installer - (.Hewlett-Packard.) [HKLM] -- {ABDE6E3C-E806-4930-8554-D8E6079EA34D} =>.Hewlett-Packard
O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX =>.Adobe Systems Incorporated®
O42 - Logiciel: Adobe Flash Player 17 NPAPI - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player NPAPI =>.Adobe Systems Incorporated®
O42 - Logiciel: Adobe Reader XI (11.0.08) - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-AB0000000001} =>.Adobe Systems Incorporated
O42 - Logiciel: Autodesk DWF Viewer - (.Autodesk, Inc..) [HKLM] -- Autodesk DWF Viewer {3E4B67} =>.Autodesk, Inc.
O42 - Logiciel: Autodesk Network License Manager - (.autodesk.) [HKLM] -- {FE2F2589-96A6-4F38-98F5-DDAC34BD41B9} =>.Autodesk
O42 - Logiciel: Broadcom NetXtreme Ethernet Controller - (.Broadcom Corporation.) [HKLM] -- {FC57FC53-104C-415C-98D7-B05E659461A9} =>.Broadcom Corporation
O42 - Logiciel: BurnAware Free 7.5 - (.Burnaware.) [HKLM] -- BurnAware Free_is1 =>.BurnAware
O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner =>.Piriform Ltd®
O42 - Logiciel: Codec Pack - All In 1 6.0.3.0 - (...) [HKLM] -- Cool's_Codec_pack_4.12
O42 - Logiciel: Compatibility Pack for the 2007 Office system - (.Microsoft Corporation.) [HKLM] -- {90120000-0020-0409-0000-0000000FF1CE} =>.Microsoft Corporation
O42 - Logiciel: Destination Component - (.Hewlett-Packard.) [HKLM] -- {D0E39A1D-0CEE-4D85-B4A2-E3BE990D075E} =>.Hewlett-Packard
O42 - Logiciel: doPDF - (.Softland.) [HKLM] -- {E7EFA13A-C151-4A01-8B7E-C8455E7C8D51} =>.Softland
O42 - Logiciel: doPDF 7.2 printer - (.Softland.) [HKLM] -- doPDF 7 printer_is1 =>.Softland®
O42 - Logiciel: doPDF 8 - (.Softland.) [HKLM] -- {a54197ad-113d-41df-8f35-ad06151b4d42} =>.Softland S.R.L.®
O42 - Logiciel: ffdshow v1.2.4422 [2012-04-09] - (.FreeCodecPack.) [HKLM] -- ffdshow_is1
O42 - Logiciel: Firefox Developer Edition 46.0a2 (x86 fr) - (.Mozilla.) [HKLM] -- Firefox Developer Edition 46.0a2 (x86 fr) =>.Mozilla
O42 - Logiciel: FormatFactory 3.6.0.0 - (.Format Factory.) [HKLM] -- FormatFactory =>.Format Factory
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM] -- Google Chrome =>.Google Inc®
O42 - Logiciel: Google Drive - (.Google, Inc..) [HKLM] -- {EF61675D-9BBC-4EC7-B906-F13BE8D3BD20} =>.Google, Inc.
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {60EC980A-BDA2-4CB6-A427-B07A5498B4CA} =>.Google Inc.
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} =>.Google Inc.
O42 - Logiciel: Hotfix for Windows XP (KB954550-v5) - (.Microsoft Corporation.) [HKLM] -- KB954550-v5 =>.Microsoft Corporation
O42 - Logiciel: HP LaserJet M1522 MFP Series 1.0 - (.HP.) [HKLM] -- HP LaserJet M1522 =>.Hewlett Packard®
O42 - Logiciel: HP LaserJet M1522 MFP Series 4.0 - (.HP.) [HKLM] -- {C8A37F1F-E13B-48ae-93F8-4669264969F9} =>.Hewlett Packard®
O42 - Logiciel: HP LJ300-400 color MFP M375-M475 - (.Hewlett-Packard.) [HKLM] -- {9D1DE902-8058-4555-A16A-FBFAA49587DB} =>.Hewlett-Packard Company®
O42 - Logiciel: HP LJ300-400 color MFP M375-M475 Fax - (.Hewlett-Packard Co..) [HKLM] -- {F284FAB3-7B91-499F-856A-1A8BF7649D8D} =>.Hewlett-Packard Co.
O42 - Logiciel: HP LJ300-400 M375-M475 HP Scan - (.Hewlett-Packard Co..) [HKLM] -- {4D019528-5866-4F28-B29E-E89F2495278A} =>.Hewlett-Packard Co.
O42 - Logiciel: HP Product FWUpdater - (.Hewlett-Packard Company.) [HKLM] -- {4F5F1DED-1EB8-436C-8781-F6F28BFFE871} =>.Hewlett-Packard Company
O42 - Logiciel: HP SetRefresh - (.Hewlett-Packard Company.) [HKLM] -- {F5242227-2051-4158-AC42-0F2BAA3CD3D6} =>.Hewlett-Packard Company
O42 - Logiciel: HP Unified IO - (.HP.) [HKLM] -- {14CF9AF8-10A6-4FA7-9E57-D22DBD644C77} =>.HP
O42 - Logiciel: HP Update - (.Hewlett-Packard.) [HKLM] -- {912D30CF-F39E-4B31-AD9A-123C6B794EE2} =>.Hewlett-Packard
O42 - Logiciel: hpbDSService - (.Hewlett-Packard.) [HKLM] -- {62022DCB-BA92-4EC2-AE03-9B946E4DBF12} =>.Hewlett-Packard
O42 - Logiciel: hpbM375M475DSService - (.Hewlett-Packard.) [HKLM] -- {3E64C460-0FAA-4450-99CE-783B0F662B8F} =>.Hewlett-Packard
O42 - Logiciel: HPLaserJet300-400ColorM375-M475Series_HelpLearnCenter_SI - (.Hewlett-Packard.) [HKLM] -- {72A474E0-5AA3-4EDD-8FAA-D87CB2FD0654} =>.Hewlett-Packard
O42 - Logiciel: HPLJUTCore - (.HP.) [HKLM] -- {0C779D9C-FD0F-4A53-86BE-3D53E58B2900} =>.HP
O42 - Logiciel: HPLJUTM375-M475 - (.HP.) [HKLM] -- {FA1B7AB4-9FE9-47A8-9A2F-C9FCB2F03A26} =>.HP
O42 - Logiciel: hppFaxDrvM375M475 - (.Hewlett-Packard.) [HKLM] -- {B361ED10-259E-4B76-B35E-E47BB6DDDD74} =>.Hewlett-Packard
O42 - Logiciel: hppLaserJetService - (.Hewlett-Packard.) [HKLM] -- {180D6813-95E0-415C-B58A-5B9493DE2DDA} =>.Hewlett-Packard
O42 - Logiciel: hppM375_M475LaserJetService - (.Hewlett-Packard.) [HKLM] -- {CAB2848F-4E7D-4D64-B071-C1539E345C1C} =>.Hewlett-Packard
O42 - Logiciel: hppscanM1522 - (.Hewlett-Packard.) [HKLM] -- {515B6FE8-7428-48D5-A39B-3E64A0BCCABE} =>.Hewlett-Packard
O42 - Logiciel: hppSendFaxM375M475 - (.Hewlett-Packard.) [HKLM] -- {C3E833FD-AAF9-45E2-B2CA-091C4D04203F} =>.Hewlett-Packard
O42 - Logiciel: hppToolboxProxyM375 - (.HP.) [HKLM] -- {EAA710B0-DF9C-4202-978D-8B8C787313C6} =>.HP
O42 - Logiciel: hpStatusAlerts - (.Hewlett Packard.) [HKLM] -- {46A99EAE-98DA-4BE5-94C3-D41BA4C266DA} =>.Hewlett Packard
O42 - Logiciel: hpStatusAlertsM375_M475 - (.Hewlett-Packard.) [HKLM] -- {22A9EE88-99F1-48B1-8A0C-AB8E65F6C4EB} =>.Hewlett-Packard
O42 - Logiciel: Image Resizer Powertoy for Windows XP - (.Microsoft Corporation.) [HKLM] -- {1CB92574-96F2-467B-B793-5CEB35C40C29} =>.Microsoft Corporation
O42 - Logiciel: ImageElements - (...) [HKLM] -- ImageElements
O42 - Logiciel: InstanceFinder - (.HP.) [HKLM] -- {32C0FD10-8FB4-427E-A16F-ED57C9343CF0} =>.HP
O42 - Logiciel: Intel(R) Graphics Media Accelerator Driver - (.Intel Corporation.) [HKLM] -- HDMI =>.Intel Corporation®
O42 - Logiciel: Internet Download Manager - (.Tonec Inc..) [HKLM] -- Internet Download Manager =>.Tonec Inc.®
O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM] -- {2F21564D-DE05-4C6D-B21E-08B9D313FAB3} =>.Apple Inc.
O42 - Logiciel: Java 2 Runtime Environment, SE v1.4.2_04 - (.Sun Microsystems, Inc..) [HKLM] -- {7148F0A8-6813-11D6-A77B-00B0D0142040} =>.Sun Microsystems, Inc.
O42 - Logiciel: Java 7 Update 25 - (.Oracle.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83217025FF} =>.Oracle
O42 - Logiciel: Java Auto Updater - (.Sun Microsystems, Inc..) [HKLM] -- {4A03706F-666A-4037-7777-5F2748764D10} =>.Sun Microsystems, Inc.
O42 - Logiciel: Ma-Config.com - (.Cybelsoft.) [HKLM] -- {96EB95A2-5245-4EA2-B6EA-B8BA2FBF64C4} =>.CybelSoft
O42 - Logiciel: Ma-Config.com - (.Cybelsoft.) [HKLM] -- {B4CB8D56-51E5-4A87-B901-8123ED990A8A} =>.CybelSoft
O42 - Logiciel: McAfee Security Scan - (.McAfee, Inc..) [HKLM] -- McAfee Security Scan =>.McAfee, Inc.
O42 - Logiciel: Microsoft Kernel-Mode Driver Framework Feature Pack 1.5 - (.Microsoft Corporation.) [HKLM] -- Wdf01005 =>.Microsoft Corporation®
O42 - Logiciel: Microsoft Kernel-Mode Driver Framework Feature Pack 1.9 - (.Microsoft Corporation.) [HKLM] -- Wdf01009 =>.Microsoft Corporation®
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00} =>.Microsoft Corporation
O42 - Logiciel: Microsoft User-Mode Driver Framework Feature Pack 1.9 - (.Microsoft Corporation.) [HKLM] -- Wudf01009 =>.Microsoft Corporation®
O42 - Logiciel: Microsoft WinUsb 1.0 - (.Microsoft Corporation.) [HKLM] -- winusb0100 =>.Microsoft Corporation®
O42 - Logiciel: Modem USB LG Electronics - (.LG Electronics.) [HKLM] -- {3DC6E06A-F0F7-47F7-8479-FFCAF60F538F} =>.LG Electronics
O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM] -- MozillaMaintenanceService =>.Mozilla
O42 - Logiciel: MSI to redistribute MS VS2005 CRT libraries - (.The Firebird Project.) [HKLM] -- {A8D93648-9F7F-407D-915C-62044644C3DA} =>.The Firebird Project
O42 - Logiciel: MSVC80_x86 - (.Nokia.) [HKLM] -- {212748BB-0DA5-46DE-82A1-403736DC9F27} =>.Nokia
O42 - Logiciel: MSVC90_x86 - (.Nokia.) [HKLM] -- {AF111648-99A1-453E-81DD-80DBBF6DAD0D} =>.Nokia
O42 - Logiciel: MSXML 4.0 SP2 (KB936181) - (.Microsoft Corporation.) [HKLM] -- {C04E32E0-0416-434D-AFB9-6969D703A9EF} =>.Microsoft Corporation
O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71} =>.Microsoft Corporation
O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC} =>.Microsoft Corporation
O42 - Logiciel: MSXML 6 Service Pack 2 (KB973686) - (.Microsoft Corporation.) [HKLM] -- {56EA8BC0-3751-4B93-BC9D-6651CC36E5AA} =>.Microsoft Corporation
O42 - Logiciel: novaPDF 8 Printer Driver - (.Softland.) [HKLM] -- {DEED01A8-CC7D-4A74-AE50-8B77725E7A27} =>.Softland
O42 - Logiciel: PDFCreator - (.pdfforge.) [HKLM] -- {0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D} =>.pdfforge
O42 - Logiciel: PDF-Viewer - (.Tracker Software Products Ltd.) [HKLM] -- {A278382D-4F1B-4D47-9885-8523F7261E8D}_is1 =>.Tracker Software Products Ltd®
O42 - Logiciel: PDF-XChange 2012 Pro - (.Tracker Software Products Ltd.) [HKLM] -- {F92F0AAB-2EF6-412C-8BF4-0B11EB535280}_is1 =>.Tracker Software Products Ltd
O42 - Logiciel: PDF-XChange Editor - (.Tracker Software Products (Canada) Ltd..) [HKLM] -- {2ffd0690-7fdd-401d-b6a4-5351e54879e8} =>.Tracker Software Products (Canada) Ltd.
O42 - Logiciel: PDF-XChange Editor - (.Tracker Software Products (Canada) Ltd..) [HKLM] -- {DDF2AC07-7D65-4D64-83F1-85C5B637618B} =>.Tracker Software Products (Canada) Ltd.
O42 - Logiciel: PhotoFiltre 7 - (...) [HKCU] -- PhotoFiltre 7
O42 - Logiciel: QuickTime 7 - (.Apple Inc..) [HKLM] -- {3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E} =>.Apple Inc.
O42 - Logiciel: Realtek Card Reader - (.Realtek Semiconductor Corp..) [HKLM] -- {5BC2B5AB-80DE-4E83-B8CF-426902051D0A} =>.Realtek Semiconductor Corp®
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC} =>.Realtek Semiconductor Corp.
O42 - Logiciel: RealUpgrade 1.1 - (.RealNetworks, Inc..) [HKLM] -- {28C2DED6-325B-4CC7-983A-1777C8F7FBAB} =>.RealNetworks, Inc.
O42 - Logiciel: Samsung USB Driver for Mobile Phones - (.Samsung Electronics Co., Ltd..) [HKLM] -- {D0795B21-0CDA-4a92-AB9E-6E92D8111E44} =>.Samsung Electronics Co., Ltd.
O42 - Logiciel: Scan - (.Hewlett-Packard.) [HKLM] -- {B00690AD-B4F5-4730-9110-5C495B89E647} =>.Hewlett-Packard
O42 - Logiciel: ToolboxProxy - (.HP.) [HKLM] -- {B64E0B43-A452-4B25-93DD-E5C6645A534A} =>.HP
O42 - Logiciel: Uniblue RegistryBooster - (.Uniblue Systems Ltd.) [HKLM] -- Uniblue RegistryBooster =>.Superfluous.Uniblue
O42 - Logiciel: Utilitaire d'activation de licence réseau d'AutoCAD 2008 - (.Autodesk.) [HKLM] -- {AF4505CB-C93A-4B29-91B9-F15767AF43BE} =>.Autodesk
O42 - Logiciel: VBA (2627.01) - (.Microsoft Corporation.) [HKLM] -- {5545EEE1-FA36-4F76-B6BE-5696E7F4E2D6} =>.Microsoft Corporation
O42 - Logiciel: VBA (2627.5) - (.Microsoft Corporation.) [HKLM] -- {5545EEE3-FA36-4F76-B6BE-5696E7F4E2D6} =>.Microsoft Corporation
O42 - Logiciel: VLC media player - (.VideoLAN.) [HKLM] -- VLC media player =>.VideoLAN
O42 - Logiciel: WebFldrs XP - (.Microsoft Corporation.) [HKLM] -- {350C940c-3D7C-4EE8-BAA9-00BCB3D54227} =>.Microsoft Corporation
O42 - Logiciel: Windows Feature Pack for Storage (32-bit) - IMAPI update for Blu-Ray - (.Microsoft Corporation.) [HKLM] -- KB952011 =>.Microsoft Corporation®
O42 - Logiciel: Windows Genuine Advantage Notifications (KB905474) - (.Microsoft Corporation.) [HKLM] -- WgaNotify =>.Microsoft Corporation
O42 - Logiciel: Windows Imaging Component - (.Microsoft Corporation.) [HKLM] -- WIC =>.Microsoft Corporation®
O42 - Logiciel: Windows Internet Explorer 8 - (.Microsoft Corporation.) [HKLM] -- ie8 =>.Microsoft Corporation®
O42 - Logiciel: WinRAR 4.00 (32-bit) - (.win.rar GmbH.) [HKLM] -- WinRAR archiver =>.win.rar GmbH

---\\ HKCU & HKLM Software Keys (152) - 29s
HKLM\SOFTWARE\Adobe
HKLM\SOFTWARE\AdobeFlashPlayerUpdate
HKLM\SOFTWARE\ahead
HKLM\SOFTWARE\Aimersoft
HKLM\SOFTWARE\ALWIL Software
HKLM\SOFTWARE\Apple Computer, Inc.
HKLM\SOFTWARE\Apple Inc.
HKLM\SOFTWARE\Appli
HKLM\SOFTWARE\AST
HKLM\SOFTWARE\Autodesk
HKLM\SOFTWARE\AVS4YOU
HKLM\SOFTWARE\Babylon =>PUP.Optional.Babylon
HKLM\SOFTWARE\Big Fish Games
HKLM\SOFTWARE\Boonty
HKLM\SOFTWARE\Bunndle
HKLM\SOFTWARE\C07ft5Y
HKLM\SOFTWARE\CCleaner
HKLM\SOFTWARE\CDDB
HKLM\SOFTWARE\CodecPack
HKLM\SOFTWARE\Conduit =>.Superfluous.Conduit
HKLM\SOFTWARE\cybelsoft
HKLM\SOFTWARE\Cygwin
HKLM\SOFTWARE\DataMngr =>PUP.Optional.Datamngr
HKLM\SOFTWARE\Dell
HKLM\SOFTWARE\DivX
HKLM\SOFTWARE\DivXNetworks
HKLM\SOFTWARE\ESET
HKLM\SOFTWARE\FLEXlm License Manager
HKLM\SOFTWARE\GameInstaller
HKLM\SOFTWARE\GamePlayLabs =>PUP.Optional.GamePlayLabs
HKLM\SOFTWARE\GEAR Software
HKLM\SOFTWARE\Gemplus
HKLM\SOFTWARE\Gentee
HKLM\SOFTWARE\GNU
HKLM\SOFTWARE\Google
HKLM\SOFTWARE\Hewlett-Packard
HKLM\SOFTWARE\InstallShield
HKLM\SOFTWARE\instinno
HKLM\SOFTWARE\Intel
HKLM\SOFTWARE\Internet Download Manager
HKLM\SOFTWARE\IObit
HKLM\SOFTWARE\JavaSoft
HKLM\SOFTWARE\JreMetrics
HKLM\SOFTWARE\LG Electronics
HKLM\SOFTWARE\Licenses
HKLM\SOFTWARE\Macromedia
HKLM\SOFTWARE\McAfee
HKLM\SOFTWARE\McAfee.com
HKLM\SOFTWARE\MimarSinan
HKLM\SOFTWARE\Mozilla
HKLM\SOFTWARE\mozilla.org
HKLM\SOFTWARE\MozillaPlugins
HKLM\SOFTWARE\Nero
HKLM\SOFTWARE\Network Associates
HKLM\SOFTWARE\Nokia
HKLM\SOFTWARE\novaPDF 8
HKLM\SOFTWARE\ODBC
HKLM\SOFTWARE\Paretologic =>.Superfluous.Paretologic
HKLM\SOFTWARE\PCSuite
HKLM\SOFTWARE\PCTools
HKLM\SOFTWARE\PDF Architect 2
HKLM\SOFTWARE\PDFCreator
HKLM\SOFTWARE\PopCap
HKLM\SOFTWARE\Program Groups
HKLM\SOFTWARE\RealNetworks
HKLM\SOFTWARE\Realtek
HKLM\SOFTWARE\Realtek Semiconductor Corp.
HKLM\SOFTWARE\RealVNC
HKLM\SOFTWARE\RegisteredApplications
HKLM\SOFTWARE\S3R521
HKLM\SOFTWARE\SAMSUNG
HKLM\SOFTWARE\Schlumberger
HKLM\SOFTWARE\Secure
HKLM\SOFTWARE\SiteSee =>PUP.Optional.SiteSee
HKLM\SOFTWARE\SmartBar =>PUP.Optional.SmartBar
HKLM\SOFTWARE\Softland
HKLM\SOFTWARE\Style-7
HKLM\SOFTWARE\Symantec
HKLM\SOFTWARE\TightVNC
HKLM\SOFTWARE\TMInfo
HKLM\SOFTWARE\Tracker Software
HKLM\SOFTWARE\Trymedia Systems =>PUP.Optional.Trymedia
HKLM\SOFTWARE\Uniblue =>.Superfluous.Uniblue
HKLM\SOFTWARE\VideoLAN
HKLM\SOFTWARE\Vivendi
HKLM\SOFTWARE\WafCX
HKLM\SOFTWARE\WIBU-SYSTEMS
HKLM\SOFTWARE\Windows 3.1 Migration Status
HKLM\SOFTWARE\WinRAR
HKLM\SOFTWARE\Wondershare
HKLM\SOFTWARE\Wow6432Node
HKLM\SOFTWARE\Xing Technology Corp.
HKLM\SOFTWARE\Yahoo =>.Yahoo!
HKLM\SOFTWARE\YRTD
HKLM\SOFTWARE\ZXT
HKCU\SOFTWARE\Adobe
HKCU\SOFTWARE\Ahead
HKCU\SOFTWARE\AnchorFree
HKCU\SOFTWARE\Apple Computer, Inc.
HKCU\SOFTWARE\Apple Inc.
HKCU\SOFTWARE\BitTorrent
HKCU\SOFTWARE\Clubic
HKCU\SOFTWARE\Conduit =>.Superfluous.Conduit
HKCU\SOFTWARE\cybelsoft
HKCU\SOFTWARE\Cygwin
HKCU\SOFTWARE\DC3_FEXEC =>Trojan.Fynloski
HKCU\SOFTWARE\DownloadManager
HKCU\SOFTWARE\FileScout =>PUP.Optional.FileScout
HKCU\SOFTWARE\Format Factory
HKCU\SOFTWARE\FreeTime
HKCU\SOFTWARE\GetData
HKCU\SOFTWARE\GNU
HKCU\SOFTWARE\Google
HKCU\SOFTWARE\Haali
HKCU\SOFTWARE\Hewlett-Packard
HKCU\SOFTWARE\HP
HKCU\SOFTWARE\iLivid =>PUP.Optional.Bandoo
HKCU\SOFTWARE\Imobie
HKCU\SOFTWARE\InstallCore =>Adware.InstallCore
HKCU\SOFTWARE\Intel
HKCU\SOFTWARE\JavaSoft
HKCU\SOFTWARE\kde.org
HKCU\SOFTWARE\Licenses
HKCU\SOFTWARE\Macromedia
HKCU\SOFTWARE\McAfee
HKCU\SOFTWARE\Mozilla
HKCU\SOFTWARE\MozillaPlugins
HKCU\SOFTWARE\Netscape
HKCU\SOFTWARE\ODBC
HKCU\SOFTWARE\PC SOFT
HKCU\SOFTWARE\PDF Architect 2
HKCU\SOFTWARE\PDFCreator
HKCU\SOFTWARE\PhotoFiltre 7
HKCU\SOFTWARE\Piriform
HKCU\SOFTWARE\ProductSetup =>Adware.InstallCore
HKCU\SOFTWARE\Realtek
HKCU\SOFTWARE\Samsung
HKCU\SOFTWARE\SmartBar =>PUP.Optional.SmartBar
HKCU\SOFTWARE\Softland
HKCU\SOFTWARE\Softonic =>.Superfluous.Softonic
HKCU\SOFTWARE\Stock It Easy
HKCU\SOFTWARE\TaiGJailbreak
HKCU\SOFTWARE\TeleCharger =>.Superfluous.Downloader
HKCU\SOFTWARE\Tracker Software
HKCU\SOFTWARE\Trolltech
HKCU\SOFTWARE\VB and VBA Program Settings
HKCU\SOFTWARE\WebApp =>.Superfluous.Downloader
HKCU\SOFTWARE\WinRAR
HKCU\SOFTWARE\WinRAR SFX
HKCU\SOFTWARE\Wondershare
HKCU\SOFTWARE\yahoo =>.Yahoo!
HKCU\SOFTWARE\ZebHelpProcess Helper

---\\ Contenu des dossiers Programmes (293) - 35s
O43 - CFD: 18/07/2014 - [] D -- C:\Program Files\%WINDOWS_TEMP%
O43 - CFD: 16/01/2013 - [0] D -- C:\Program Files\7-Zip
O43 - CFD: 30/10/2013 - [] D -- C:\Program Files\Adobe =>.Adobe Systems, Incorporated®
O43 - CFD: 06/08/2014 - [] D -- C:\Program Files\Ahead
O43 - CFD: 20/03/2012 - [] D -- C:\Program Files\Akamai
O43 - CFD: 05/05/2008 - [] D -- C:\Program Files\Alwil Software
O43 - CFD: 27/02/2012 - [] D -- C:\Program Files\Aplus FLV to MP3 Converter
O43 - CFD: 01/03/2016 - [] D -- C:\Program Files\Aurora
O43 - CFD: 22/04/2014 - [] D -- C:\Program Files\AutoCAD 2008
O43 - CFD: 22/04/2014 - [] D -- C:\Program Files\Autodesk
O43 - CFD: 05/07/2008 - [] D -- C:\Program Files\Autodesk Network License Manager =>.Autodesk, Inc®
O43 - CFD: 20/11/2012 - [0] D -- C:\Program Files\AVS4YOU
O43 - CFD: 10/09/2008 - [] D -- C:\Program Files\Boonty
O43 - CFD: 03/11/2011 - [] D -- C:\Program Files\BoontyGames {4A45221856AA4882682A7CBA2E2BE051}
O43 - CFD: 04/07/2013 - [] D -- C:\Program Files\Broadcom
O43 - CFD: 27/01/2015 - [] D -- C:\Program Files\BurnAware Free =>.Burnaware®
O43 - CFD: 18/09/2014 - [] D -- C:\Program Files\CCleaner =>.Piriform Ltd®
O43 - CFD: 16/01/2013 - [] D -- C:\Program Files\CDBurnerXP
O43 - CFD: 14/09/2011 - [] D -- C:\Program Files\Codec Pack - All In 1
O43 - CFD: 22/01/2016 - [] D -- C:\Program Files\Common Files
O43 - CFD: 05/05/2008 - [] D -- C:\Program Files\COMPAQ
O43 - CFD: 05/05/2008 - [0] D -- C:\Program Files\ComPlus Applications
O43 - CFD: 30/03/2015 - [0] D -- C:\Program Files\Conduit
O43 - CFD: 20/11/2012 - [] D -- C:\Program Files\ConvertVideoFiles.Net
O43 - CFD: 27/02/2012 - [] D -- C:\Program Files\Desktop Clock-7
O43 - CFD: 07/01/2014 - [] D -- C:\Program Files\DIFX =>.Microsoft Windows®
O43 - CFD: 04/07/2013 - [] D -- C:\Program Files\DivX
O43 - CFD: 17/10/2012 - [0] D -- C:\Program Files\DsNET Corp
O43 - CFD: 04/07/2013 - [0] D -- C:\Program Files\eFsixGCB
O43 - CFD: 28/05/2009 - [] D -- C:\Program Files\ESET
O43 - CFD: 24/02/2014 - [] D -- C:\Program Files\ffdshow
O43 - CFD: 29/01/2016 - [] D -- C:\Program Files\Fichiers communs =>.Microsoft Corporation®
O43 - CFD: 17/03/2015 - [] D -- C:\Program Files\Firebird
O43 - CFD: 26/06/2012 - [] D -- C:\Program Files\Free Download Manager
O43 - CFD: 27/02/2012 - [] D -- C:\Program Files\Free FLV Converter =>.Superfluous.GreenTreeApp
O43 - CFD: 11/09/2015 - [] D -- C:\Program Files\FreeTime =>.chen jun hao®
O43 - CFD: 18/09/2014 - [] D -- C:\Program Files\Ganymede
O43 - CFD: 18/09/2014 - [] D -- C:\Program Files\Google =>.Google Inc®
O43 - CFD: 21/07/2009 - [0] D -- C:\Program Files\Hewlett-Packard
O43 - CFD: 09/10/2013 - [] D -- C:\Program Files\HP
O43 - CFD: 06/07/2008 - [] D -- C:\Program Files\ImageElements
O43 - CFD: 01/03/2016 - [] HD -- C:\Program Files\InstallShield Installation Information =>.Realtek Semiconductor Corp®
O43 - CFD: 10/05/2013 - [] D -- C:\Program Files\Intel
O43 - CFD: 01/04/2015 - [] D -- C:\Program Files\Internet Download Manager
O43 - CFD: 27/01/2016 - [] D -- C:\Program Files\Internet Explorer
O43 - CFD: 01/03/2016 - [] D -- C:\Program Files\IObit
O43 - CFD: 16/04/2014 - [] D -- C:\Program Files\iPod =>.Apple Inc.®
O43 - CFD: 31/10/2013 - [] D -- C:\Program Files\iTeleport
O43 - CFD: 16/04/2014 - [] D -- C:\Program Files\iTunes =>.Apple Inc.®
O43 - CFD: 09/07/2013 - [] D -- C:\Program Files\Java =>.Oracle America, Inc.®
O43 - CFD: 13/06/2008 - [] D -- C:\Program Files\LG Electronics
O43 - CFD: 29/01/2016 - [] D -- C:\Program Files\ma-config.com =>.Cybelsoft®
O43 - CFD: 18/09/2014 - [] D -- C:\Program Files\McAfee
O43 - CFD: 01/02/2016 - [] D -- C:\Program Files\Messenger
O43 - CFD: 05/05/2008 - [] D -- C:\Program Files\microsoft frontpage
O43 - CFD: 24/05/2012 - [] D -- C:\Program Files\Microsoft Office =>.Microsoft Corporation®
O43 - CFD: 23/06/2015 - [] D -- C:\Program Files\Microsoft Silverlight =>.Microsoft Corporation®
O43 - CFD: 06/07/2008 - [] D -- C:\Program Files\Microsoft Visual Studio
O43 - CFD: 06/07/2008 - [] D -- C:\Program Files\Microsoft Works
O43 - CFD: 31/10/2013 - [] D -- C:\Program Files\Microsoft.NET
O43 - CFD: 02/09/2014 - [] D -- C:\Program Files\Mobogenie3 =>PUP.Optional.Mobogenie
O43 - CFD: 27/01/2016 - [] D -- C:\Program Files\Movie Maker
O43 - CFD: 02/09/2014 - [] D -- C:\Program Files\Mozilla Firefox
O43 - CFD: 22/02/2016 - [] D -- C:\Program Files\Mozilla Maintenance Service
O43 - CFD: 02/10/2013 - [] D -- C:\Program Files\MSBuild
O43 - CFD: 12/05/2011 - [] D -- C:\Program Files\MSECache
O43 - CFD: 05/05/2008 - [] D -- C:\Program Files\MSN
O43 - CFD: 05/05/2008 - [] D -- C:\Program Files\MSN Gaming Zone
O43 - CFD: 04/07/2008 - [0] D -- C:\Program Files\MSXML 4.0
O43 - CFD: 04/07/2008 - [] D -- C:\Program Files\MSXML 6.0
O43 - CFD: 22/04/2014 - [] D -- C:\Program Files\MyPC Backup =>PUP.Optional.MyPCBackup
O43 - CFD: 02/09/2014 - [] D -- C:\Program Files\NetCrawl =>PUP.Optional.NetCrawl
O43 - CFD: 27/01/2016 - [] D -- C:\Program Files\NetMeeting
O43 - CFD: 22/04/2014 - [0] D -- C:\Program Files\Nokia
O43 - CFD: 21/10/2008 - [0] D -- C:\Program Files\NOS
O43 - CFD: 05/05/2008 - [] D -- C:\Program Files\Online Services
O43 - CFD: 27/01/2016 - [] D -- C:\Program Files\Outlook Express
O43 - CFD: 24/07/2014 - [] D -- C:\Program Files\PDFCreator =>.pdfforge GmbH®
O43 - CFD: 27/06/2014 - [] D -- C:\Program Files\PhotoFiltre 7
O43 - CFD: 11/03/2015 - [] D -- C:\Program Files\QuickTime
O43 - CFD: 28/06/2011 - [] D -- C:\Program Files\Real =>.RealNetworks, Inc.®
O43 - CFD: 04/07/2013 - [] D -- C:\Program Files\RealArcade =>.RealNetworks, Inc.®
O43 - CFD: 09/10/2013 - [] D -- C:\Program Files\Realtek =>.Realtek Semiconductor Corp®
O43 - CFD: 02/10/2013 - [] D -- C:\Program Files\Reference Assemblies
O43 - CFD: 01/03/2016 - [] D -- C:\Program Files\Samsung
O43 - CFD: 05/05/2008 - [] D -- C:\Program Files\Services en ligne
O43 - CFD: 07/10/2014 - [] D -- C:\Program Files\Softland =>.Softland S.R.L.®
O43 - CFD: 24/03/2015 - [] D -- C:\Program Files\StockItEasy
O43 - CFD: 24/03/2015 - [] D -- C:\Program Files\TOP LIVE
O43 - CFD: 29/06/2011 - [] D -- C:\Program Files\Topsevenreviews
O43 - CFD: 02/12/2008 - [] D -- C:\Program Files\Total Uninstall 5
O43 - CFD: 26/11/2015 - [] D -- C:\Program Files\Tracker Software
O43 - CFD: 02/06/2009 - [] D -- C:\Program Files\Trojan Remover
O43 - CFD: 19/01/2015 - [] D -- C:\Program Files\TV 3L PC
O43 - CFD: 05/07/2008 - [] D -- C:\Program Files\Téléchargeur de Rise and Fall
O43 - CFD: 05/07/2008 - [] D -- C:\Program Files\Téléchargeur de Syberia 2
O43 - CFD: 05/07/2008 - [] D -- C:\Program Files\Téléchargeur de Tomb Raider - Legend
O43 - CFD: 05/07/2008 - [] D -- C:\Program Files\Téléchargeur de Yetisports World Tour
O43 - CFD: 05/05/2008 - [0] HD -- C:\Program Files\Uninstall Information
O43 - CFD: 14/07/2011 - [] D -- C:\Program Files\VideoLAN
O43 - CFD: 01/03/2016 - [] D -- C:\Program Files\Windows Media Player
O43 - CFD: 27/01/2016 - [] D -- C:\Program Files\Windows NT
O43 - CFD: 14/09/2011 - [] D -- C:\Program Files\Windows Searchqu Toolbar =>PUP.Optional.Datamngr
O43 - CFD: 05/05/2008 - [0] HD -- C:\Program Files\WindowsUpdate
O43 - CFD: 19/04/2011 - [] D -- C:\Program Files\WinRAR
O43 - CFD: 22/01/2016 - [] D -- C:\Program Files\Wondershare =>.Shenzhen Wondershare Information Technology Co., Ltd.®
O43 - CFD: 15/12/2011 - [] D -- C:\Program Files\Wordster
O43 - CFD: 05/05/2008 - [] D -- C:\Program Files\xerox
O43 - CFD: 18/09/2014 - [] D -- C:\Program Files\Yahoo!
O43 - CFD: 15/12/2011 - [] D -- C:\Program Files\Yahoo! Games
O43 - CFD: 13/05/2008 - [] RD -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Accessoires
O43 - CFD: 22/04/2014 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Autodesk
O43 - CFD: 03/11/2011 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\BoontyGames
O43 - CFD: 27/01/2015 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\BurnAware Free
O43 - CFD: 14/09/2011 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Codec Pack
O43 - CFD: 12/12/2011 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\doPDF 7
O43 - CFD: 07/10/2014 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\doPDF 8
O43 - CFD: 26/01/2016 - [] RD -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage
O43 - CFD: 24/02/2014 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\ffdshow
O43 - CFD: 03/11/2011 - [0] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Games
O43 - CFD: 30/01/2016 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Google Drive
O43 - CFD: 11/02/2015 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HP
O43 - CFD: 03/02/2014 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Internet Download Manager
O43 - CFD: 16/04/2014 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\iTunes
O43 - CFD: 03/06/2008 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Java Web Start
O43 - CFD: 05/05/2008 - [] RD -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Jeux
O43 - CFD: 29/01/2016 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\ma-config.com
O43 - CFD: 15/12/2011 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Microsoft Office
O43 - CFD: 23/06/2015 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Microsoft Silverlight
O43 - CFD: 13/06/2008 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Modem USB LG Electronics
O43 - CFD: 05/05/2008 - [] RD -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Outils d'administration
O43 - CFD: 24/11/2014 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\PDF-XChange
O43 - CFD: 24/11/2014 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\PDF-XChange 5 Pro
O43 - CFD: 26/11/2015 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\PDF-XChange PDF Viewer
O43 - CFD: 24/07/2014 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\PDFCreator
O43 - CFD: 16/07/2014 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Powertoys for Windows XP
O43 - CFD: 11/03/2015 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\QuickTime
O43 - CFD: 02/01/2014 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\VideoLAN
O43 - CFD: 19/04/2011 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\WinRAR
O43 - CFD: 01/03/2016 - [0] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Wondershare
O43 - CFD: 16/04/2014 - [] D -- C:\Documents and Settings\All Users\Application Data\188F1432-103A-4ffb-80F1-36B633C5C9E1
O43 - CFD: 12/11/2013 - [] D -- C:\Documents and Settings\All Users\Application Data\Adobe
O43 - CFD: 04/03/2014 - [] D -- C:\Documents and Settings\All Users\Application Data\Ahead
O43 - CFD: 27/01/2015 - [] D -- C:\Documents and Settings\All Users\Application Data\APN =>Toolbar.Ask
O43 - CFD: 26/01/2016 - [] D -- C:\Documents and Settings\All Users\Application Data\Apple
O43 - CFD: 02/04/2013 - [] D -- C:\Documents and Settings\All Users\Application Data\Apple Computer
O43 - CFD: 05/10/2012 - [] D -- C:\Documents and Settings\All Users\Application Data\Ask
O43 - CFD: 22/04/2014 - [] D -- C:\Documents and Settings\All Users\Application Data\Autodesk
O43 - CFD: 20/11/2012 - [] D -- C:\Documents and Settings\All Users\Application Data\AVS4YOU
O43 - CFD: 23/02/2012 - [0] D -- C:\Documents and Settings\All Users\Application Data\Babylon =>PUP.Optional.Babylon
O43 - CFD: 03/11/2011 - [0] D -- C:\Documents and Settings\All Users\Application Data\Big Fish Games
O43 - CFD: 03/11/2011 - [0] D -- C:\Documents and Settings\All Users\Application Data\BigFishGamesCache
O43 - CFD: 10/09/2008 - [] D -- C:\Documents and Settings\All Users\Application Data\BOONTY
O43 - CFD: 26/10/2011 - [] D -- C:\Documents and Settings\All Users\Application Data\boost_interprocess
O43 - CFD: 14/09/2011 - [] D -- C:\Documents and Settings\All Users\Application Data\Canneverbe Limited
O43 - CFD: 04/07/2013 - [] D -- C:\Documents and Settings\All Users\Application Data\DivX
O43 - CFD: 29/01/2016 - [] D -- C:\Documents and Settings\All Users\Application Data\DriversCloud.com
O43 - CFD: 28/05/2009 - [] D -- C:\Documents and Settings\All Users\Application Data\ESET
O43 - CFD: 15/05/2012 - [] D -- C:\Documents and Settings\All Users\Application Data\FileCure =>PUP.Optional.FileCure
O43 - CFD: 17/03/2015 - [] D -- C:\Documents and Settings\All Users\Application Data\firebird
O43 - CFD: 18/09/2014 - [] D -- C:\Documents and Settings\All Users\Application Data\Google
O43 - CFD: 09/10/2013 - [] D -- C:\Documents and Settings\All Users\Application Data\Hewlett-Packard
O43 - CFD: 09/10/2013 - [] D -- C:\Documents and Settings\All Users\Application Data\HP
O43 - CFD: 09/10/2013 - [] D -- C:\Documents and Settings\All Users\Application Data\HP_LaserJet_Fax_0_6
O43 - CFD: 09/05/2013 - [0] D -- C:\Documents and Settings\All Users\Application Data\IDM
O43 - CFD: 07/01/2014 - [] D -- C:\Documents and Settings\All Users\Application Data\Installations
O43 - CFD: 13/06/2008 - [] D -- C:\Documents and Settings\All Users\Application Data\InstallShield
O43 - CFD: 29/01/2016 - [] D -- C:\Documents and Settings\All Users\Application Data\IObit
O43 - CFD: 29/01/2016 - [] D -- C:\Documents and Settings\All Users\Application Data\ma-config.com
O43 - CFD: 02/12/2008 - [] D -- C:\Documents and Settings\All Users\Application Data\Martau
O43 - CFD: 18/09/2014 - [] D -- C:\Documents and Settings\All Users\Application Data\McAfee
O43 - CFD: 23/06/2015 - [] SD -- C:\Documents and Settings\All Users\Application Data\Microsoft
O43 - CFD: 04/05/2012 - [] D -- C:\Documents and Settings\All Users\Application Data\Mozilla
O43 - CFD: 29/06/2011 - [] D -- C:\Documents and Settings\All Users\Application Data\MSScanAppDataDir
O43 - CFD: 18/05/2012 - [] D -- C:\Documents and Settings\All Users\Application Data\MusicMP3Downloader
O43 - CFD: 21/10/2008 - [0] D -- C:\Documents and Settings\All Users\Application Data\NOS
O43 - CFD: 26/11/2014 - [] D -- C:\Documents and Settings\All Users\Application Data\Package Cache
O43 - CFD: 16/02/2009 - [] D -- C:\Documents and Settings\All Users\Application Data\PC Suite
O43 - CFD: 24/07/2014 - [] D -- C:\Documents and Settings\All Users\Application Data\PDF Architect 2
O43 - CFD: 01/03/2016 - [] D -- C:\Documents and Settings\All Users\Application Data\ProductData
O43 - CFD: 21/02/2012 - [0] D -- C:\Documents and Settings\All Users\Application Data\ReaConverter
O43 - CFD: 28/06/2011 - [] D -- C:\Documents and Settings\All Users\Application Data\Real
O43 - CFD: 07/10/2014 - [] D -- C:\Documents and Settings\All Users\Application Data\regid.2008-09.org.wixtoolset
O43 - CFD: 01/03/2016 - [] D -- C:\Documents and Settings\All Users\Application Data\Samsung
O43 - CFD: 11/09/2008 - [] D -- C:\Documents and Settings\All Users\Application Data\Sierra Online
O43 - CFD: 07/10/2014 - [] D -- C:\Documents and Settings\All Users\Application Data\Softland
O43 - CFD: 24/03/2015 - [] D -- C:\Documents and Settings\All Users\Application Data\StockItEasy
O43 - CFD: 24/03/2015 - [] D -- C:\Documents and Settings\All Users\Application Data\StockItEasy7
O43 - CFD: 24/03/2015 - [] D -- C:\Documents and Settings\All Users\Application Data\Stokouti2_Ver_1.40
O43 - CFD: 08/08/2011 - [] D -- C:\Documents and Settings\All Users\Application Data\SulusGames
O43 - CFD: 02/04/2013 - [] D -- C:\Documents and Settings\All Users\Application Data\Sun
O43 - CFD: 02/06/2009 - [] D -- C:\Documents and Settings\All Users\Application Data\Symantec
O43 - CFD: 06/05/2013 - [0] AD -- C:\Documents and Settings\All Users\Application Data\TEMP
O43 - CFD: 05/08/2011 - [] D -- C:\Documents and Settings\All Users\Application Data\Trymedia =>PUP.Optional.Trymedia
O43 - CFD: 29/04/2009 - [] D -- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
O43 - CFD: 22/01/2016 - [] D -- C:\Documents and Settings\All Users\Application Data\Wondershare
O43 - CFD: 16/05/2012 - [] HDC -- C:\Documents and Settings\All Users\Application Data\{6AD8E59C-250C-4201-B5BA-56ADEF76FF46}
O43 - CFD: 16/05/2012 - [] D -- C:\Documents and Settings\All Users\Application Data\{6AD8E59C-250C-4201-B5BA-56ADEF76FF46}(2)
O43 - CFD: 29/01/2016 - [0] D -- C:\Documents and Settings\All Users\Application Data\{FD6F83C0-EC70-4581-8361-C70CD1AA4B98}
O43 - CFD: 30/10/2013 - [] D -- C:\Program Files\Fichiers communs\Adobe
O43 - CFD: 06/08/2014 - [] D -- C:\Program Files\Fichiers communs\Ahead
O43 - CFD: 26/01/2016 - [] D -- C:\Program Files\Fichiers communs\Apple
O43 - CFD: 22/04/2014 - [] D -- C:\Program Files\Fichiers communs\Autodesk Shared
O43 - CFD: 20/11/2012 - [] D -- C:\Program Files\Fichiers communs\AVSMedia
O43 - CFD: 10/09/2008 - [] D -- C:\Program Files\Fichiers communs\BOONTY Shared
O43 - CFD: 06/07/2008 - [] D -- C:\Program Files\Fichiers communs\DESIGNER
O43 - CFD: 29/05/2008 - [] D -- C:\Program Files\Fichiers communs\Hewlett-Packard
O43 - CFD: 29/05/2008 - [] D -- C:\Program Files\Fichiers communs\HP
O43 - CFD: 13/06/2008 - [] D -- C:\Program Files\Fichiers communs\InstallShield
O43 - CFD: 29/01/2016 - [] D -- C:\Program Files\Fichiers communs\IObit
O43 - CFD: 02/04/2013 - [] D -- C:\Program Files\Fichiers communs\Java
O43 - CFD: 18/09/2014 - [] D -- C:\Program Files\Fichiers communs\McAfee
O43 - CFD: 20/11/2012 - [] D -- C:\Program Files\Fichiers communs\Microsoft Shared
O43 - CFD: 05/05/2008 - [] D -- C:\Program Files\Fichiers communs\MSSoap
O43 - CFD: 05/05/2008 - [] D -- C:\Program Files\Fichiers communs\ODBC
O43 - CFD: 05/05/2008 - [] D -- C:\Program Files\Fichiers communs\Services
O43 - CFD: 05/05/2008 - [] D -- C:\Program Files\Fichiers communs\SpeechEngines
O43 - CFD: 27/01/2016 - [] D -- C:\Program Files\Fichiers communs\System
O43 - CFD: 30/10/2013 - [] D -- C:\Documents and Settings\Taoufik\Application Data\Adobe
O43 - CFD: 04/03/2014 - [] D -- C:\Documents and Settings\Taoufik\Application Data\Ahead
O43 - CFD: 31/10/2014 - [] D -- C:\Documents and Settings\Taoufik\Application Data\Apple Computer
O43 - CFD: 03/02/2016 - [] D -- C:\Documents and Settings\Taoufik\Application Data\BitTorrent
O43 - CFD: 29/01/2016 - [] D -- C:\Documents and Settings\Taoufik\Application Data\dclogs
O43 - CFD: 04/02/2016 - [] D -- C:\Documents and Settings\Taoufik\Application Data\DMCache
O43 - CFD: 24/03/2015 - [] D -- C:\Documents and Settings\Taoufik\Application Data\eCyber =>PUP.Optional.Elex
O43 - CFD: 08/06/2015 - [] D -- C:\Documents and Settings\Taoufik\Application Data\Eltek
O43 - CFD: 18/07/2014 - [] D -- C:\Documents and Settings\Taoufik\Application Data\Google
O43 - CFD: 04/09/2014 - [0] D -- C:\Documents and Settings\Taoufik\Application Data\Help
O43 - CFD: 09/10/2013 - [] D -- C:\Documents and Settings\Taoufik\Application Data\Hewlett-Packard Company
O43 - CFD: 17/02/2015 - [] D -- C:\Documents and Settings\Taoufik\Application Data\HpUpdate
O43 - CFD: 09/10/2013 - [] D -- C:\Documents and Settings\Taoufik\Application Data\Identities
O43 - CFD: 25/02/2016 - [] D -- C:\Documents and Settings\Taoufik\Application Data\IDM
O43 - CFD: 27/01/2015 - [] D -- C:\Documents and Settings\Taoufik\Application Data\iMobie
O43 - CFD: 29/01/2016 - [] D -- C:\Documents and Settings\Taoufik\Application Data\IObit
O43 - CFD: 31/10/2013 - [] D -- C:\Documents and Settings\Taoufik\Application Data\Macromedia
O43 - CFD: 09/10/2013 - [] D -- C:\Documents and Settings\Taoufik\Application Data\McAfee
O43 - CFD: 01/03/2016 - [] SD -- C:\Documents and Settings\Taoufik\Application Data\Microsoft
O43 - CFD: 18/07/2014 - [] D -- C:\Documents and Settings\Taoufik\Application Data\Mobogenie =>PUP.Optional.Mobogenie
O43 - CFD: 31/10/2013 - [] D -- C:\Documents and Settings\Taoufik\Application Data\Mozilla
O43 - CFD: 24/02/2014 - [] D -- C:\Documents and Settings\Taoufik\Application Data\newnext.me =>PUP.Optional.NextLive
O43 - CFD: 07/01/2014 - [] D -- C:\Documents and Settings\Taoufik\Application Data\Nokia
O43 - CFD: 27/01/2015 - [] D -- C:\Documents and Settings\Taoufik\Application Data\OpenCandy =>PUP.Optional.OpenCandy
O43 - CFD: 07/01/2014 - [] D -- C:\Documents and Settings\Taoufik\Application Data\PC Suite
O43 - CFD: 24/07/2014 - [] D -- C:\Documents and Settings\Taoufik\Application Data\PDF Architect 2
O43 - CFD: 24/07/2014 - [] D -- C:\Documents and Settings\Taoufik\Application Data\pdfforge
O43 - CFD: 24/02/2014 - [0] D -- C:\Documents and Settings\Taoufik\Application Data\PerformerSoft =>PUP.Optional.PerformerSoft
O43 - CFD: 27/06/2014 - [] D -- C:\Documents and Settings\Taoufik\Application Data\PhotoFiltre 7
O43 - CFD: 29/01/2016 - [] D -- C:\Documents and Settings\Taoufik\Application Data\ProductData
O43 - CFD: 01/03/2016 - [0] D -- C:\Documents and Settings\Taoufik\Application Data\Samsung
O43 - CFD: 07/10/2014 - [] D -- C:\Documents and Settings\Taoufik\Application Data\Softland
O43 - CFD: 25/02/2014 - [] D -- C:\Documents and Settings\Taoufik\Application Data\Sun
O43 - CFD: 23/06/2015 - [] D -- C:\Documents and Settings\Taoufik\Application Data\TaiG
O43 - CFD: 26/11/2015 - [] D -- C:\Documents and Settings\Taoufik\Application Data\Tracker Software
O43 - CFD: 04/02/2016 - [] D -- C:\Documents and Settings\Taoufik\Application Data\uTorrent
O43 - CFD: 04/02/2016 - [] D -- C:\Documents and Settings\Taoufik\Application Data\vlc
O43 - CFD: 09/10/2013 - [] D -- C:\Documents and Settings\Taoufik\Application Data\WinRAR
O43 - CFD: 18/09/2014 - [] D -- C:\Documents and Settings\Taoufik\Application Data\Yahoo!
O43 - CFD: 01/03/2016 - [] D -- C:\Documents and Settings\Taoufik\Application Data\ZHP
O43 - CFD: 24/03/2015 - [] D -- C:\Documents and Settings\Taoufik\Local Settings\Application Data\Adobe
O43 - CFD: 06/01/2014 - [] D -- C:\Documents and Settings\Taoufik\Local Settings\Application Data\Apple
O43 - CFD: 06/01/2014 - [] D -- C:\Documents and Settings\Taoufik\Local Settings\Application Data\Apple Computer
O43 - CFD: 06/01/2014 - [0] D -- C:\Documents and Settings\Taoufik\Local Settings\Application Data\cache
O43 - CFD: 30/03/2015 - [0] D -- C:\Documents and Settings\Taoufik\Local Settings\Application Data\Conduit
O43 - CFD: 29/01/2014 - [] D -- C:\Documents and Settings\Taoufik\Local Settings\Application Data\Cranium_Consulting_and_Cu
O43 - CFD: 19/10/2015 - [] D -- C:\Documents and Settings\Taoufik\Local Settings\Application Data\CrashRpt =>.Superfluous.CrashReports
O43 - CFD: 22/01/2016 - [] D -- C:\Documents and Settings\Taoufik\Local Settings\Application Data\Downloaded Installations
O43 - CFD: 08/06/2015 - [] D -- C:\Documents and Settings\Taoufik\Local Settings\Application Data\Eltek
O43 - CFD: 22/04/2014 - [0] D -- C:\Documents and Settings\Taoufik\Local Settings\Application Data\genienext =>PUP.Optional.NextLive
O43 - CFD: 07/01/2016 - [] D -- C:\Documents and Settings\Taoufik\Local Settings\Application Data\Google
O43 - CFD: 04/09/2014 - [0] D -- C:\Documents and Settings\Taoufik\Local Settings\Application Data\Help
O43 - CFD: 21/10/2013 - [] D -- C:\Documents and Settings\Taoufik\Local Settings\Application Data\HP
O43 - CFD: 07/04/2014 - [] D -- C:\Documents and Settings\Taoufik\Local Settings\Application Data\Identities
O43 - CFD: 27/01/2015 - [] D -- C:\Documents and Settings\Taoufik\Local Settings\Application Data\iMobie_Inc
O43 - CFD: 23/06/2015 - [] D -- C:\Documents and Settings\Taoufik\Local Settings\Application Data\Microsoft
O43 - CFD: 02/09/2014 - [] D -- C:\Documents and Settings\Taoufik\Local Settings\Application Data\Mobogenie =>PUP.Optional.Mobogenie
O43 - CFD: 31/10/2013 - [] D -- C:\Documents and Settings\Taoufik\Local Settings\Application Data\Mozilla
O43 - CFD: 22/04/2014 - [0] D -- C:\Documents and Settings\Taoufik\Local Settings\Application Data\PackageAware =>PUP.Optional.BearShare
O43 - CFD: 10/10/2013 - [] D -- C:\Documents and Settings\Taoufik\Local Settings\Application Data\PCHealth
O43 - CFD: 28/01/2014 - [0] D -- C:\Documents and Settings\Taoufik\Local Settings\Application Data\RealVNC
O43 - CFD: 01/03/2016 - [0] D -- C:\Documents and Settings\Taoufik\Local Settings\Application Data\Samsung
O43 - CFD: 25/02/2014 - [] D -- C:\Documents and Settings\Taoufik\Local Settings\Application Data\Sun
O43 - CFD: 30/03/2015 - [0] D -- C:\Documents and Settings\Taoufik\Local Settings\Application Data\TB
O43 - CFD: 24/03/2015 - [] D -- C:\Documents and Settings\Taoufik\Local Settings\Application Data\WDSetup
O43 - CFD: 22/01/2016 - [] D -- C:\Documents and Settings\Taoufik\Local Settings\Application Data\Wondershare
O43 - CFD: 09/10/2013 - [] RD -- C:\Documents and Settings\Taoufik\Menu Démarrer\Programmes\Accessoires
O43 - CFD: 18/09/2014 - [] D -- C:\Documents and Settings\Taoufik\Menu Démarrer\Programmes\CCleaner
O43 - CFD: 26/01/2016 - [] RD -- C:\Documents and Settings\Taoufik\Menu Démarrer\Programmes\Démarrage
O43 - CFD: 11/09/2015 - [] D -- C:\Documents and Settings\Taoufik\Menu Démarrer\Programmes\FormatFactory
O43 - CFD: 09/10/2013 - [] D -- C:\Documents and Settings\Taoufik\Menu Démarrer\Programmes\HP
O43 - CFD: 03/02/2014 - [] D -- C:\Documents and Settings\Taoufik\Menu Démarrer\Programmes\Internet Download Manager
O43 - CFD: 02/09/2014 - [] D -- C:\Documents and Settings\Taoufik\Menu Démarrer\Programmes\Mobogenie =>PUP.Optional.Mobogenie
O43 - CFD: 03/09/2014 - [] RD -- C:\Documents and Settings\Taoufik\Menu Démarrer\Programmes\Outils d'administration
O43 - CFD: 27/06/2014 - [] D -- C:\Documents and Settings\Taoufik\Menu Démarrer\Programmes\PhotoFiltre 7

---\\ ShellIconOverlayIdentifiers (SIOI) (5) - 0s
O106 - SIOI: Google Drive Shell extension [ GoogleDriveBlacklisted] - {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}. (.Google - Google Drive shell extension.) -- C:\Program Files\Google\Drive\googledrivesync32.dll =>.Google
O106 - SIOI: Google Drive Shell extension [ GoogleDriveSynced] - {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}. (.Google - Google Drive shell extension.) -- C:\Program Files\Google\Drive\googledrivesync32.dll =>.Google
O106 - SIOI: Google Drive Shell extension [ GoogleDriveSyncing] - {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}. (.Google - Google Drive shell extension.) -- C:\Program Files\Google\Drive\googledrivesync32.dll =>.Google
O106 - SIOI: Offline Files Menu [Fichiers hors connexion] - {750fdf0e-2a26-11d1-a3ea-080036587f03}. (.Microsoft Corporation - IU de cache côté client.) -- C:\WINDOWS\system32\cscui.dll =>.Microsoft Corporation
O106 - SIOI: IDM Shell Extension [IDM Shell Extension] - {CDC95B92-E27C-4745-A8C5-64A52A78855D}. (.Tonec Inc. - Internet Download Manager module.) -- C:\Program Files\Internet Download Manager\IDMShellExt.dll =>.Tonec Inc.®

---\\ Enumération des clés StartupReg (14) - 1s
O53 - SMSR:HKLM\...\startupreg\amva [Key] . (...) -- C:\WINDOWS\system32\amvo.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\ANTIVIRUS [Key] . (...) -- C:\Program Files\MicroAntivirus\microAV.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\CTFMON.EXE [Key] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe =>.Microsoft Corporation
O53 - SMSR:HKLM\...\startupreg\HotKeysCmds [Key] . (.Intel Corporation - hkcmd Module.) -- C:\WINDOWS\system32\hkcmd.exe =>.Intel Corporation
O53 - SMSR:HKLM\...\startupreg\IgfxTray [Key] . (.Intel Corporation - igfxTray Module.) -- C:\WINDOWS\system32\igfxtray.exe =>.Intel Corporation
O53 - SMSR:HKLM\...\startupreg\kamsoft [Key] . (...) -- C:\WINDOWS\system32\ckvo.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\MSMSGS [Key] . (...) -- C:\Program Files\Messenger\msmsgs.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\MsnMsgr [Key] . (...) -- C:\Program Files\MSN Messenger\MsnMsgr.Exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\Persistence [Key] . (.Intel Corporation - persistence Module.) -- C:\WINDOWS\system32\igfxpers.exe =>.Intel Corporation
O53 - SMSR:HKLM\...\startupreg\RTHDCPL [Key] . (.Realtek Semiconductor Corp. - Realtek HD Audio Control Panel.) -- RTHDCPL.EXE (.not file.) =>.Realtek Semiconductor Corp.
O53 - SMSR:HKLM\...\startupreg\SetRefresh [Key] . (...) -- C:\Program Files\COMPAQ\SetRefresh\SetRefresh.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\SunJavaUpdateSched [Key] . (...) -- C:\Program Files\Java\j2re1.4.2_04\bin\jusched.exe
O53 - SMSR:HKLM\...\startupreg\swg [Key] . (...) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\UMService [Key] . (.LG Electronics - Modem USB LG Electronics Service Programme.) -- C:\Program Files\LG Electronics\Modem USB LG Electronics\UMAService.exe =>.LG Electronics

---\\ Liste des pilotes du système (58) - 5s
O58 - SDL:2007/11/29 17:35:44 A . (.Broadcom Corporation - Broadcom NetXtreme Gigabit Ethernet NDIS5.1.) -- C:\WINDOWS\System32\drivers\b57xp32.sys [163328] =>.Broadcom Corporation
O58 - SDL:2006/01/13 00:34:13 AC . (.RAVISENT Technologies Inc. - Pilote principal CineMaster C 1.2 WDM.) -- C:\WINDOWS\System32\drivers\cinemst2.sys [262528] =>.RAVISENT Technologies Inc.
O58 - SDL:2006/01/13 00:34:13 AC . (.Compaq Computer Corporation - Compaq PA-1 Player Driver.) -- C:\WINDOWS\System32\drivers\cpqdap01.sys [11776] =>.Compaq Computer Corporation
O58 - SDL:2013/12/30 10:52:38 A . (.Devguru Co., Ltd - Device Error Recovery SDK(x86).) -- C:\WINDOWS\System32\drivers\dgderdrv.sys [20032] =>.SAMSUNG ELECTRONICS CO.,LTD.®
O58 - SDL:2004/08/19 16:01:16 A . (.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disq.) -- C:\WINDOWS\System32\drivers\dmboot.sys [800256] =>.Microsoft Corp., Veritas Software
O58 - SDL:2004/08/19 16:01:22 A . (.Microsoft Corp., Veritas Software - Pilote E/S du Gestionnaire de disques NT.) -- C:\WINDOWS\System32\drivers\dmio.sys [154496] =>.Microsoft Corp., Veritas Software
O58 - SDL:2001/08/28 12:00:00 AC . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS\System32\drivers\dmload.sys [5888] =>.Microsoft Corp., Veritas Software.
O58 - SDL:2012/08/21 13:01:22 A . (.GEAR Software Inc. - CD DVD Filter.) -- C:\WINDOWS\System32\drivers\GEARAspiWDM.sys [26840] =>.GEAR Software Inc.®
O58 - SDL:2005/01/07 17:07:18 N . (.Windows (R) Server 2003 DDK provider - High Definition Audio Bus Driver v1.0a.) -- C:\WINDOWS\System32\drivers\hdaudbus.sys [138752]
O58 - SDL:2005/01/07 17:07:16 C . (.Windows (R) Server 2003 DDK provider - High Definition Audio Function Driver v1.0a.) -- C:\WINDOWS\System32\drivers\Hdaudio.sys [145920]
O58 - SDL:2016/01/29 15:32:33 A . (.REALiX(tm) - HWiNFO x86 Kernel Driver.) -- C:\WINDOWS\System32\drivers\HWiNFO32.SYS [23840] =>.Martin Malik - REALiX®
O58 - SDL:2015/03/27 00:10:50 A . (.Tonec Inc. - Internet Download Manager TDI Driver.) -- C:\WINDOWS\System32\drivers\idmtdi.sys [126968] =>.Tonec Inc.®
O58 - SDL:2008/12/12 09:33:58 A . (.Intel Corporation - Intel Graphics Miniport Driver.) -- C:\WINDOWS\System32\drivers\igxpmp32.sys [6048768] =>.Intel Corporation
O58 - SDL:2007/08/28 15:17:14 AC . (.LG Electronics Inc. - LG EVDO USB ATC Driver.) -- C:\WINDOWS\System32\drivers\lgevdoatc.sys [19840] =>.LG Electronics Inc.
O58 - SDL:2007/08/28 15:17:16 AC . (.LG Electronics Inc. - LG EVDO USB Multi function Driver.) -- C:\WINDOWS\System32\drivers\lgevdobus.sys [12800] =>.LG Electronics Inc.
O58 - SDL:2007/08/28 15:17:18 AC . (.LG Electronics Inc. - LG EVDO USB Diagnostics Driver.) -- C:\WINDOWS\System32\drivers\lgevdodiag.sys [19840] =>.LG Electronics Inc.
O58 - SDL:2007/08/28 15:17:20 AC . (.LG Electronics Inc. - LG EVDO USB Modem Driver.) -- C:\WINDOWS\System32\drivers\lgevdomodem.sys [21632] =>.LG Electronics Inc.
O58 - SDL:2013/10/09 12:17:33 AC . (.McAfee, Inc. - Access Protection Filter Driver.) -- C:\WINDOWS\System32\drivers\mfeapfk.sys [121544] =>.McAfee, Inc.®
O58 - SDL:2013/10/09 12:17:33 A . (.McAfee, Inc. - Anti-Virus File System Filter Driver.) -- C:\WINDOWS\System32\drivers\mfeavfk.sys [215024] =>.McAfee, Inc.®
O58 - SDL:2013/10/09 12:17:33 AC . (.McAfee, Inc. - Buffer Overflow Protection Driver.) -- C:\WINDOWS\System32\drivers\mfebopk.sys [59616] =>.McAfee, Inc.®
O58 - SDL:2013/10/09 12:17:33 AC . (.McAfee, Inc. - McAfee Driver Cleaning Driver.) -- C:\WINDOWS\System32\drivers\mfeclnk.sys [9648] =>.McAfee, Inc.®
O58 - SDL:2013/10/09 12:17:34 AC . (.McAfee, Inc. - McAfee Link Driver.) -- C:\WINDOWS\System32\drivers\mfehidk.sys [477584] =>.McAfee, Inc.®
O58 - SDL:2013/10/09 12:17:34 AC . (.McAfee, Inc. - McAfee Code Analysis Driver.) -- C:\WINDOWS\System32\drivers\mferkdet.sys [87816] =>.McAfee, Inc.®
O58 - SDL:2013/10/09 12:17:34 A . (.McAfee, Inc. - Anti-Virus Mini-Firewall Driver.) -- C:\WINDOWS\System32\drivers\mfetdi2k.sys [90368] =>.McAfee, Inc.®
O58 - SDL:2006/01/13 00:34:13 AC . (.S3/Diamond Multimedia Systems - NikeDrv Usb Driver.) -- C:\WINDOWS\System32\drivers\nikedrv.sys [12032] =>.S3/Diamond Multimedia Systems
O58 - SDL:2012/06/11 11:33:46 AC . (.Nokia - PCCS Mode Change Filter Driver.) -- C:\WINDOWS\System32\drivers\pccsmcfd.sys [19072] =>.Nokia
O58 - SDL:2001/08/28 12:00:00 A . (.Parallel Technologies, Inc. - Parallel Technologies DirectParallel IO Lib.) -- C:\WINDOWS\System32\drivers\ptilink.sys [17792] =>.Parallel Technologies, Inc.
O58 - SDL:2006/01/13 00:34:13 AC . (.S3/Diamond Multimedia Systems - Rio8Drv.sys Usb Driver.) -- C:\WINDOWS\System32\drivers\rio8drv.sys [12032] =>.S3/Diamond Multimedia Systems
O58 - SDL:2006/01/13 00:34:13 AC . (.S3/Diamond Multimedia Systems - RioDrv Usb Driver.) -- C:\WINDOWS\System32\drivers\riodrv.sys [12032] =>.S3/Diamond Multimedia Systems
O58 - SDL:2016/01/29 15:49:37 A . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function D.) -- C:\WINDOWS\System32\drivers\RtkHDAud.sys [5791760] =>.Realtek Semiconductor Corp.
O58 - SDL:2016/01/29 15:50:43 A . (.Realsil Semiconductor Corporation - RTS USB READER Driver.) -- C:\WINDOWS\System32\drivers\RtsUer.sys [293080] =>.Realtek Semiconductor Corp®
O58 - SDL:2013/07/09 12:58:32 A . (.Realtek Semiconductor Corp. - Realtek USB Mass Storage Driver for 2K/XP/V.) -- C:\WINDOWS\System32\drivers\RtsUStor.sys [208600] =>.Realtek Semiconductor Corp®
O58 - SDL:2007/11/13 10:25:54 AC . (.Macrovision Corporation, Macrovision Europe Limited, - Macrovision SECURITY Driver.) -- C:\WINDOWS\System32\drivers\secdrv.sys [20480] =>.Macrovision Corporation, Macrovision Europe Limited,
O58 - SDL:2016/01/08 08:51:54 A . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG USB Composite Device Driver (MSS Ve.) -- C:\WINDOWS\System32\drivers\ssudbus.sys [99296] =>.DEVGURU Co., LTD.(www.devguru.co.kr)
O58 - SDL:2016/01/08 08:51:54 A . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG Android Modem Device Driver (MSS Ve.) -- C:\WINDOWS\System32\drivers\ssudmdm.sys [191200] =>.DEVGURU Co., LTD.(www.devguru.co.kr)
O58 - SDL:2006/01/13 00:34:13 AC . (.Toshiba Corporation - WDM Toshiba Tecra Video Capture Driver.) -- C:\WINDOWS\System32\drivers\tsbvcap.sys [21376] =>.Toshiba Corporation
O58 - SDL:2006/01/13 00:34:13 AC . (.RAVISENT Technologies Inc. - CineMaster C WDM DVD Minidriver.) -- C:\WINDOWS\System32\drivers\vdmindvd.sys [58112] =>.RAVISENT Technologies Inc.
O58 - SDL:2013/12/06 14:48:42 A . (.RealVNC Ltd. - VNC Mirror Miniport.) -- C:\WINDOWS\System32\drivers\vncmirror.sys [4608] =>.RealVNC Ltd.
O58 - SDL:2014/06/13 12:36:26 A . (.StdLib - StdLib.) -- C:\WINDOWS\System32\drivers\{57f143ae-1ecd-493d-9ddb-32c45a3cecd5}Gt.sys [55224] {3C05F8D25EB72CD5B6EB863AA0585F70} =>PUP.Optional.LinkiDoo
O58 - SDL:2014/06/30 10:51:40 A . (.StdLib - StdLib.) -- C:\WINDOWS\System32\drivers\{6fcd6092-9615-4f7f-8898-8df53980e5d2}Gt.sys [55224] {3C05F8D25EB72CD5B6EB863AA0585F70} =>PUP.Optional.LinkiDoo
O58 - SDL:2014/07/13 16:15:06 A . (.StdLib - StdLib.) -- C:\WINDOWS\System32\drivers\{6fcd6092-9615-4f7f-8898-8df53980e5d2}t.sys [55224] {3C05F8D25EB72CD5B6EB863AA0585F70} =>PUP.Optional.LinkiDoo
O58 - SDL:2001/08/28 12:00:00 AC . (...) -- C:\WINDOWS\System32\ansi.sys [9037]
O58 - SDL:2001/08/28 12:00:00 AC . (...) -- C:\WINDOWS\System32\country.sys [27097]
O58 - SDL:2001/08/28 12:00:00 AC . (...) -- C:\WINDOWS\System32\himem.sys [4912]
O58 - SDL:2001/08/28 12:00:00 AC . (...) -- C:\WINDOWS\System32\key01.sys [42809]
O58 - SDL:2004/08/03 22:46:56 AC . (...) -- C:\WINDOWS\System32\keyboard.sys [42537]
O58 - SDL:2001/08/28 12:00:00 AC . (...) -- C:\WINDOWS\System32\ntdos.sys [27916]
O58 - SDL:2001/08/28 12:00:00 AC . (...) -- C:\WINDOWS\System32\ntdos404.sys [29146]
O58 - SDL:2001/08/28 12:00:00 AC . (...) -- C:\WINDOWS\System32\ntdos411.sys [29370]
O58 - SDL:2001/08/28 12:00:00 AC . (...) -- C:\WINDOWS\System32\ntdos412.sys [29274]
O58 - SDL:2001/08/28 12:00:00 AC . (...) -- C:\WINDOWS\System32\ntdos804.sys [29146]
O58 - SDL:2004/08/03 22:45:26 AC . (...) -- C:\WINDOWS\System32\ntio.sys [34000]
O58 - SDL:2004/08/03 22:45:16 AC . (...) -- C:\WINDOWS\System32\ntio404.sys [34560]
O58 - SDL:2004/08/03 22:45:12 AC . (...) -- C:\WINDOWS\System32\ntio411.sys [35648]
O58 - SDL:2004/08/03 22:45:16 AC . (...) -- C:\WINDOWS\System32\ntio412.sys [35424]
O58 - SDL:2004/08/03 22:45:14 AC . (...) -- C:\WINDOWS\System32\ntio804.sys [34560]
O58 - SDL:2003/04/16 08:00:36 AC . (.Compaq Computer Corporation - Client Management Device Driver.) -- C:\WINDOWS\System32\SP32395.SYS [50520] =>.Compaq Computer Corporation
O58 - SDL:2013/10/09 13:53:43 ASHC . (...) -- C:\WINDOWS\System32\winzvprt5.sys [608]

---\\ Associations Shell Spawning (10) - 0s
O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\shell32.dll =>.Microsoft Corporation
O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc®
O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft (r) Windows Based Script Host.) -- C:\WINDOWS\system32\wscript.exe =>.Microsoft Corporation
O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\WINDOWS\regedit.exe =>.Microsoft Corporation
O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S
O67 - Shell Spawning: <.html> [HKCU\..\open\Command] (.Mozilla Corporation - FirefoxDeveloperEdition.) -- C:\Program Files\Aurora\firefox.exe =>.Mozilla Corporation

---\\ Menu de démarrage Internet (13) - 0s
O68 - StartMenuInternet: <>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc®
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Mozilla Corporation - FirefoxDeveloperEdition.) -- C:\Program Files\Aurora\firefox.exe =>.Mozilla Corporation
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc®
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.mozilla.org - Firefox Developer Edition Helper.) -- C:\Program Files\Aurora\uninstall\helper.exe =>.mozilla.org
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc.
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - IE Per-User Initialization Utility.) -- C:\WINDOWS\system32\ie4uinit.exe =>.Microsoft Corporation
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.mozilla.org - Firefox Developer Edition Helper.) -- C:\Program Files\Aurora\uninstall\helper.exe =>.mozilla.org
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc.
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - IE Per-User Initialization Utility.) -- C:\WINDOWS\system32\ie4uinit.exe =>.Microsoft Corporation
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.mozilla.org - Firefox Developer Edition Helper.) -- C:\Program Files\Aurora\uninstall\helper.exe =>.mozilla.org
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc.
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - IE Per-User Initialization Utility.) -- C:\WINDOWS\system32\ie4uinit.exe =>.Microsoft Corporation

---\\ Recherche d'infection sur les navigateurs (157) - 22s
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("CT3327997.installType", "conduitnsisintegration"); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("CT3327997.lastNewTabSettings", "{\"isEnabled\":false,\"newTabUrl\":\"http://search.conduit.com/?gd=&ctid=CT3327997&octi[...] =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("CT3327997.smartbar.CTID", "CT3327997"); =>PUP.Optional.SmartBar
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("CT3327997.smartbar.Uninstall", "0"); =>PUP.Optional.SmartBar
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("CT3327997.smartbar.toolbarName", "uTorrentControl_v6b "); =>PUP.Optional.SmartBar
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("extensions.BuzzSearch.asul", "1398153112808"); =>PUP.Optional.BuzzSearch
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("extensions.BuzzSearch.aul", "1398153076995"); =>PUP.Optional.BuzzSearch
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("extensions.BuzzSearch.irl", true); =>PUP.Optional.BuzzSearch
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("extensions.BuzzSearch.is", "isgiwhMA"); =>PUP.Optional.BuzzSearch
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("extensions.BuzzSearch.ug", "72C50994-7EE5-40B1-92E7-3EB0E63E8530"); =>PUP.Optional.BuzzSearch
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("extensions.NetCrawl.asul", "1409643540762"); =>PUP.Optional.NetCrawl
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("extensions.NetCrawl.aul", "1409643489153"); =>PUP.Optional.NetCrawl
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("extensions.NetCrawl.irl", true); =>PUP.Optional.NetCrawl
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("extensions.NetCrawl.is", "isgiwhMA"); =>PUP.Optional.NetCrawl
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("extensions.NetCrawl.ug", "98433195-28C2-4B98-AFC2-2D429422A87B"); =>PUP.Optional.NetCrawl
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("smartbar.machineId", "/JDKIN/4IFL8OIQ8WA3NGVE0DOC"); =>PUP.Optional.SmartBar
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997./9B+7E+x305", "2423"); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997./9B+7E+x305.storedInFile", false); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997./9B+7E,x305", "2423"); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997./9B+7E,x305.storedInFile", false); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997./9B+7E.:2z527", "2423"); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997./9B+7E.:2z527.storedInFile", false); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997./9B+7E.x305", "2423"); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997./9B+7E.x305.storedInFile", false); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997./9B+7E/x305", "2423"); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997./9B+7E/x305.storedInFile", false); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997./9B+7E06CG5EL8:", "6E6D686B6E6D746E7472"); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997./9B+7E06CG5EL8:.storedInFile", false); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997./9B+7E06CG5EL;8I:K", "247E2D2F226A74736E7174737A747A78242F4B49474F42357D5D5C3D"); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997./9B+7E06CG5EL;8I:K.storedInFile", false); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997./9B+7E0x305", "2423"); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997./9B+7E0x305.storedInFile", false); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997./9B+7E1x305", "2423"); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997./9B+7E1x305.storedInFile", false); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997./9B+7E2x305", "2423"); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997./9B+7E2x305.storedInFile", false); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997./9B+7E3x305", "2423"); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997./9B+7E3x305.storedInFile", false); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997./9B+7E5x305", "2423"); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997./9B+7E5x305.storedInFile", false); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997./9B+7E6x305", "2423"); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997./9B+7E6x305.storedInFile", false); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997./9B+7E7x305", "2423"); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997./9B+7E7x305.storedInFile", false); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997./9B+7E8x305", "2423"); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997./9B+7E8x305.storedInFile", false); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997./9B+7E9x305", "2423"); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997./9B+7E9x305.storedInFile", false); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997./9B+7E.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997./9B+7E.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997./9B+7E=x305", "2423"); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997./9B+7E=x305.storedInFile", false); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997./9B+7E>x305", "2423"); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997./9B+7E>x305.storedInFile", false); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997./9B+7E?x305", "2423"); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997./9B+7E?x305.storedInFile", false); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997./9B+7E@x305", "2423"); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997./9B+7E@x305.storedInFile", false); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997./9B+7EAx305", "2423"); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997./9B+7EAx305.storedInFile", false); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997./9B+7EBE3G=;D9N9=D", "372C2D326975762E3A3C7B3A39434A494841434B265146492965504656496571734D337D56545[...] =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997./9B+7EBE3G=;D9N9=D.storedInFile", false); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997./9B+7EBx305", "2423"); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997./9B+7EBx305.storedInFile", false); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997./9B+7EDx305", "2423"); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997./9B+7EDx305.storedInFile", false); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997./9B-0?3G>D", "3E3D6B3F6B4140737A72757273207949787D25217A7B7E2A23532729292D572B5A29315C"); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997./9B-0?3G>D.storedInFile", false); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997./9B-0?3G@6:5;", ""); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997./9B-0?3G@6:5;.storedInFile", false); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997./9B-0?3GFA7EF", "2B2E2C3D"); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997./9B-0?3GFA7EF.storedInFile", false); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997./9B-3=3ECCJA=F>", "247E333D2C452F4135276F292A212C393D44307832332A354448584C3A2329282A31323334353A45[...] =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997./9B-3=3ECCJA=F>.storedInFile", false); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997./9B/>01=9A6K6.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997./9B/>01=9A6K6.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997./9B3=>@44I48?", "372C2D3269757633423633414847203E3D474E4D4C45474F2A554A4D2D5858585E4B554E366352564F[...] =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997./9B3=>@44I48?.storedInFile", false); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997./9B5BA==9CJAG", "3C6E706A6F6E72717A47787676754A78787D507E24"); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997./9B5BA==9CJAG.storedInFile", false); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997./9B6B11G4C56B>F;P;ANR@P", "6E6C706D6D746C727075757474"); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997./9B6B11G4C56B>F;P;ANR@P.storedInFile", false); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997./9B90E@.3C;7B=?OFB>>RHIQS", "393F352F3E"); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997./9B90E@.3C;7B=?OFB>>RHIQS.storedInFile", false); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997./9B9643G3/9E", "6A"); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997./9B9643G3/9E.storedInFile", false); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997./9B;45>:BI9I7IE", "2B2E2C3D"); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997./9B;45>:BI9I7IE.storedInFile", false); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997./9B<:222H64<", "393F352F3E"); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997./9B<:222H64<.storedInFile", false); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997./9B<:222H64.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997./9B<:222H64.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997./9B=+03EH8H8J?:", "4443"); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997./9B=+03EH8H8J?:.storedInFile", false); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997./9B?+E2A52D8", "372C2D326975762E3A3C7B3A39434A494841434B2651464929655046566470727951555E5E52"); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997./9B?+E2A52D8.storedInFile", false); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997./9B?B0D:8AJ62.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997./9B?B0D:8AJ62.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997./9BA@0<0BI6A7GN:6@L?", "6C"); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997./9BA@0<0BI6A7GN:6@L?.storedInFile", false); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997.PG_ENABLE", "74727565"); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997.PG_ENABLE.storedInFile", false); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997._key_cl_active", "32353661333234632D663831642D343962642D383732622D303136626164386666623261"); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997._key_cl_active.storedInFile", false); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997.cbfirsttime", "5475652041707220313520323031342031353A32333A343520474D542B30313030"); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997.cbfirsttime.storedInFile", false); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997.mam_gk_appStateReportTime", "31343135373030303034323432"); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997.mam_gk_appStateReportTime.storedInFile", false); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997.mam_gk_appState_Clarity_Active", "6F6E"); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997.mam_gk_appState_Clarity_Active.storedInFile", false); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997.mam_gk_appState_CouponBuddy", "6F6E"); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997.mam_gk_appState_CouponBuddy.storedInFile", false); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997.mam_gk_appState_Easytobook", "6F6E"); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997.mam_gk_appState_Easytobook.storedInFile", false); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997.mam_gk_appState_Easytobook_targeted", "6F6E"); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997.mam_gk_appState_Easytobook_targeted.storedInFile", false); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997.mam_gk_appState_PriceGong", "6F6E"); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997.mam_gk_appState_PriceGong.storedInFile", false); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997.mam_gk_appsConfig.storedInFile", true); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997.mam_gk_appsDefaultEnabled", "6E756C6C"); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997.mam_gk_appsDefaultEnabled.storedInFile", false); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997.mam_gk_calledSetupService", "31"); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997.mam_gk_calledSetupService.storedInFile", false); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997.mam_gk_currentVersion", "312E31332E302E3137"); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997.mam_gk_currentVersion.storedInFile", false); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997.mam_gk_existingUsersRecoveryDone", "31"); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997.mam_gk_existingUsersRecoveryDone.storedInFile", false); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997.mam_gk_first_time", "31"); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997.mam_gk_first_time.storedInFile", false); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997.mam_gk_lastLoginTime", "31343135373030303034373739"); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997.mam_gk_lastLoginTime.storedInFile", false); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997.mam_gk_localization.storedInFile", true); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997.mam_gk_mamEnabled", "74727565"); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997.mam_gk_mamEnabled.storedInFile", false); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997.mam_gk_migrated_from_ls", "31"); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997.mam_gk_migrated_from_ls.storedInFile", false); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997.mam_gk_new_welcome_experience", "31"); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997.mam_gk_new_welcome_experience.storedInFile", false); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997.mam_gk_settings1.13.0.17.storedInFile", true); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997.mam_gk_showWelcomeGadget", "66616C7365"); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997.mam_gk_showWelcomeGadget.storedInFile", false); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997.mam_gk_stamp", "35345F30"); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997.mam_gk_stamp.storedInFile", false); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997.mam_gk_userBornDate", "4E2F41"); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997.mam_gk_userBornDate.storedInFile", false); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997.mam_gk_userId", "66383161626139612D353733642D343437382D383937342D643565356536353765343066"); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997.mam_gk_userId.storedInFile", false); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997.mam_gk_user_approval_interacted", "31"); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997.mam_gk_user_approval_interacted.storedInFile", false); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997.mam_gk_welcomeDialogMode", "31"); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997.mam_gk_welcomeDialogMode.storedInFile", false); =>.Superfluous.Conduit
O69 - SBI: prefs.js [taoufik - fa8kz852.default] user_pref("valueApps.CT3327997.url_history0001.storedInFile", true); =>.Superfluous.Conduit
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - () - http://search.live.com/
O69 - SBI: SearchScopes [HKCU] {20C5557C-F8FD-4496-9CBA-579DA744FD2F} - (Google) - http://www.google.com/
O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} [DefaultScope] - (Google) - http://www.google.com/
O69 - SBI: SearchScopes [HKLM] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (@ieframe.dll,-12512) - http://search.live.com/
O69 - SBI: SearchScopes [HKLM] {20C5557C-F8FD-4496-9CBA-579DA744FD2F} [DefaultScope] - (Google) - http://www.google.com/

---\\ Enumère les services démarrés par Svchost (40) - 1s
O83 - Search Svchost Services: AppMgmt (AppMgmt) . (.Microsoft Corporation - Service Installation de logiciels.) -- C:\WINDOWS\system32\appmgmts.dll [176640] =>.Microsoft Corporation
O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Windows Audio Service.) -- C:\WINDOWS\system32\audiosrv.dll [42496] =>.Microsoft Corporation
O83 - Search Svchost Services: Browser (Browser) . (.Microsoft Corporation - Computer Browser Service DLL.) -- C:\WINDOWS\system32\browser.dll [77312] =>.Microsoft Corporation
O83 - Search Svchost Services: CryptSvc (CryptSvc) . (.Microsoft Corporation - Cryptographic Services.) -- C:\WINDOWS\system32\cryptsvc.dll [60416] =>.Microsoft Corporation
O83 - Search Svchost Services: DMServer (DMServer) . (.Microsoft Corp. - DLL Service gestionnaire de disque logique.) -- C:\WINDOWS\system32\dmserver.dll [24576] =>.Microsoft Corp.
O83 - Search Svchost Services: DHCP (DHCP) . (.Microsoft Corporation - Service client DHCP.) -- C:\WINDOWS\system32\dhcpcsvc.dll [112128] =>.Microsoft Corporation
O83 - Search Svchost Services: ERSvc (ERSvc) . (.Microsoft Corporation - Windows Error Reporting Service.) -- C:\WINDOWS\system32\ersvc.dll [23040] =>.Microsoft Corporation
O83 - Search Svchost Services: EventSystem (EventSystem) . (.Microsoft Corporation - .) -- C:\WINDOWS\system32\es.dll [253952] =>.Microsoft Corporation
O83 - Search Svchost Services: FastUserSwitchingCompatibility (FastUserSwitchingCompatibility) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\system32\shsvcs.dll [135680] =>.Microsoft Corporation
O83 - Search Svchost Services: HidServ (HidServ) . (...) -- C:\WINDOWS\System32\hidserv.dll [0]
O83 - Search Svchost Services: LanmanServer (LanmanServer) . (.Microsoft Corporation - Server Service DLL.) -- C:\WINDOWS\system32\srvsvc.dll [96768] =>.Microsoft Corporation
O83 - Search Svchost Services: LanmanWorkstation (LanmanWorkstation) . (.Microsoft Corporation - Workstation Service DLL.) -- C:\WINDOWS\system32\wkssvc.dll [132096] =>.Microsoft Corporation
O83 - Search Svchost Services: Messenger (Messenger) . (.Microsoft Corporation - NT Messenger Service.) -- C:\WINDOWS\system32\msgsvc.dll [33792] =>.Microsoft Corporation
O83 - Search Svchost Services: Netman (Netman) . (.Microsoft Corporation - Gestionnaire de connexions réseau.) -- C:\WINDOWS\system32\netman.dll [197632] =>.Microsoft Corporation
O83 - Search Svchost Services: Nla (Nla) . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Micro.) -- C:\WINDOWS\system32\mswsock.dll [247808] =>.Microsoft Corporation
O83 - Search Svchost Services: Ntmssvc (Ntmssvc) . (.Microsoft Corporation - Gestionnaire de stockage amovible.) -- C:\WINDOWS\system32\ntmssvc.dll [438272] =>.Microsoft Corporation
O83 - Search Svchost Services: NWCWorkstation (NWCWorkstation) . (.Microsoft Corporation - Client Service for Netware.) -- C:\WINDOWS\system32\nwwks.dll [65536] =>.Microsoft Corporation
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Remote Access AutoDial Manager.) -- C:\WINDOWS\system32\rasauto.dll [89088] =>.Microsoft Corporation
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Remote Access Connection Manager.) -- C:\WINDOWS\system32\rasmans.dll [181248] =>.Microsoft Corporation
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Dynamic Interface Manager.) -- C:\WINDOWS\system32\mprdim.dll [49152] =>.Microsoft Corporation
O83 - Search Svchost Services: Schedule (Schedule) . (.Microsoft Corporation - Moteur du Planificateur de tâches.) -- C:\WINDOWS\system32\schedsvc.dll [193024] =>.Microsoft Corporation
O83 - Search Svchost Services: Seclogon (Seclogon) . (.Microsoft Corporation - DLL de service d'ouverture de session secon.) -- C:\WINDOWS\system32\seclogon.dll [18944] =>.Microsoft Corporation
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - System Event Notification Service (SENS).) -- C:\WINDOWS\system32\sens.dll [38912] =>.Microsoft Corporation
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l'application d'assistance à.) -- C:\WINDOWS\system32\ipnathlp.dll [332800] =>.Microsoft Corporation
O83 - Search Svchost Services: SRService (SRService) . (.Microsoft Corporation - Service de restauration du système.) -- C:\WINDOWS\system32\srsvc.dll [171008] =>.Microsoft Corporation
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM.) -- C:\WINDOWS\system32\tapisrv.dll [249344] =>.Microsoft Corporation
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\system32\shsvcs.dll [135680] =>.Microsoft Corporation
O83 - Search Svchost Services: TrkWks (TrkWks) . (.Microsoft Corporation - Distributed Link Tracking Client.) -- C:\WINDOWS\system32\trkwks.dll [90624] =>.Microsoft Corporation
O83 - Search Svchost Services: W32Time (W32Time) . (.Microsoft Corporation - Service de temps Windows.) -- C:\WINDOWS\system32\w32time.dll [177664] =>.Microsoft Corporation
O83 - Search Svchost Services: WZCSVC (WZCSVC) . (.Microsoft Corporation - Service configuration automatique sans fil.) -- C:\WINDOWS\system32\wzcsvc.dll [359936] =>.Microsoft Corporation
O83 - Search Svchost Services: Wmi (Wmi) . (.Microsoft Corporation - API avancées Windows 32.) -- C:\WINDOWS\system32\advapi32.dll [686080] =>.Microsoft Corporation
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\WINDOWS\system32\wbem\wmisvc.dll [145408] =>.Microsoft Corporation
O83 - Search Svchost Services: wscsvc (wscsvc) . (.Microsoft Corporation - Windows Security Center Service.) -- C:\WINDOWS\system32\wscsvc.dll [81408] =>.Microsoft Corporation
O83 - Search Svchost Services: xmlprov (xmlprov) . (.Microsoft Corporation - Network Provisioning Service.) -- C:\WINDOWS\system32\xmlprov.dll [129536] =>.Microsoft Corporation
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière.) -- C:\WINDOWS\system32\qmgr.dll [382464] =>.Microsoft Corporation
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Windows Update AutoUpdate Service.) -- C:\WINDOWS\system32\wuauserv.dll [6656] =>.Microsoft Corporation
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\system32\shsvcs.dll [135680] =>.Microsoft Corporation
O83 - Search Svchost Services: WmdmPmSN (WmdmPmSN) . (.Microsoft Corporation - Microsoft Media Device Service Provider.) -- C:\WINDOWS\system32\mspmsnsv.dll [25088] =>.Microsoft Corporation
O83 - Search Svchost Services: helpsvc (helpsvc) . (.Microsoft Corporation - Microsoft PCHealth Service Holder.) -- C:\WINDOWS\pchealth\helpctr\binaries\pchsvc.dll [38912] =>.Microsoft Corporation
O83 - Search Svchost Services: uploadmgr (uploadmgr) . (.Microsoft Corporation - Microsoft PCHealth Service Holder.) -- C:\WINDOWS\pchealth\helpctr\binaries\pchsvc.dll [38912] =>.Microsoft Corporation

---\\ Scan Additionnel (48) - 0s
C:\Documents and Settings\Taoufik\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\ejpbbhjlbipncjklfjjaedaieimbmdda =>Hijacker.Browser
C:\Documents and Settings\Taoufik\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\eooncjejnppfjjklapaamhcdmjbilmde =>Hijacker.Browser
C:\Documents and Settings\Taoufik\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\paoponfhfdfnjgddpnpjkambkcgdaaib =>Hijacker.Browser
C:\Documents and Settings\Taoufik\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Extension Settings\paoponfhfdfnjgddpnpjkambkcgdaaib =>Hijacker.Browser
C:\Documents and Settings\Taoufik\Application Data\Mozilla\Firefox\Profiles\fa8kz852.default\extensions\{8f6846ea-ddff-459b-8c78-469b34d90a49} =>.Superfluous.ClientConnect
HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Uniblue RegistryBooster =>.Superfluous.Uniblue
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Uniblue RegistryBooster =>.Superfluous.Uniblue
HKLM\SOFTWARE\Babylon =>PUP.Optional.Babylon
HKLM\SOFTWARE\Conduit =>.Superfluous.Conduit
HKLM\SOFTWARE\DataMngr =>PUP.Optional.Datamngr
HKLM\SOFTWARE\GamePlayLabs =>PUP.Optional.GamePlayLabs
HKLM\SOFTWARE\Paretologic =>.Superfluous.Paretologic
HKLM\SOFTWARE\SiteSee =>PUP.Optional.SiteSee
HKLM\SOFTWARE\SmartBar =>PUP.Optional.SmartBar
HKLM\SOFTWARE\Trymedia Systems =>PUP.Optional.Trymedia
HKLM\SOFTWARE\Uniblue =>.Superfluous.Uniblue
HKCU\SOFTWARE\Conduit =>.Superfluous.Conduit
HKCU\SOFTWARE\DC3_FEXEC =>Trojan.Fynloski
HKCU\SOFTWARE\FileScout =>PUP.Optional.FileScout
HKCU\SOFTWARE\iLivid =>PUP.Optional.Bandoo
HKCU\SOFTWARE\InstallCore =>Adware.InstallCore
HKCU\SOFTWARE\ProductSetup =>Adware.InstallCore
HKCU\SOFTWARE\SmartBar =>PUP.Optional.SmartBar
HKCU\SOFTWARE\Softonic =>.Superfluous.Softonic
HKCU\SOFTWARE\TeleCharger =>.Superfluous.Downloader
HKCU\SOFTWARE\WebApp =>.Superfluous.Downloader
C:\Program Files\Free FLV Converter =>.Superfluous.GreenTreeApp
C:\Program Files\Mobogenie3 =>PUP.Optional.Mobogenie
C:\Program Files\MyPC Backup =>PUP.Optional.MyPCBackup
C:\Program Files\NetCrawl =>PUP.Optional.NetCrawl
C:\Program Files\Windows Searchqu Toolbar =>PUP.Optional.Datamngr
C:\Documents and Settings\All Users\Application Data\APN =>Toolbar.Ask
C:\Documents and Settings\All Users\Application Data\Babylon =>PUP.Optional.Babylon
C:\Documents and Settings\All Users\Application Data\FileCure =>PUP.Optional.FileCure
C:\Documents and Settings\All Users\Application Data\Trymedia =>PUP.Optional.Trymedia
C:\Documents and Settings\Taoufik\Application Data\eCyber =>PUP.Optional.Elex
C:\Documents and Settings\Taoufik\Application Data\Mobogenie =>PUP.Optional.Mobogenie
C:\Documents and Settings\Taoufik\Application Data\newnext.me =>PUP.Optional.NextLive
C:\Documents and Settings\Taoufik\Application Data\OpenCandy =>PUP.Optional.OpenCandy
C:\Documents and Settings\Taoufik\Application Data\PerformerSoft =>PUP.Optional.PerformerSoft
C:\Documents and Settings\Taoufik\Local Settings\Application Data\CrashRpt =>.Superfluous.CrashReports
C:\Documents and Settings\Taoufik\Local Settings\Application Data\genienext =>PUP.Optional.NextLive
C:\Documents and Settings\Taoufik\Local Settings\Application Data\Mobogenie =>PUP.Optional.Mobogenie
C:\Documents and Settings\Taoufik\Local Settings\Application Data\PackageAware =>PUP.Optional.BearShare
C:\Documents and Settings\Taoufik\Menu Démarrer\Programmes\Mobogenie =>PUP.Optional.Mobogenie
C:\WINDOWS\System32\drivers\{57f143ae-1ecd-493d-9ddb-32c45a3cecd5}Gt.sys =>PUP.Optional.LinkiDoo
C:\WINDOWS\System32\drivers\{6fcd6092-9615-4f7f-8898-8df53980e5d2}Gt.sys =>PUP.Optional.LinkiDoo
C:\WINDOWS\System32\drivers\{6fcd6092-9615-4f7f-8898-8df53980e5d2}t.sys =>PUP.Optional.LinkiDoo

---\\ Récapitulatif des éléments trouvés sur votre station (32) - 0s
http://www.nicolascoolman.fr/?p=440 =>PUP.Optional.BabSolution
http://www.nicolascoolman.fr/hijacker-browser/ =>Hijacker.Browser
http://www.nicolascoolman.fr/link-658/ =>.Superfluous.ClientConnect
http://www.nicolascoolman.fr/?p=5145 =>.Superfluous.Uniblue
http://www.nicolascoolman.fr/?p=170 =>PUP.Optional.Babylon
http://www.nicolascoolman.fr/?p=210 =>.Superfluous.Conduit
http://www.nicolascoolman.fr/?p=270 =>PUP.Optional.Datamngr
http://www.nicolascoolman.fr/?p=710 =>PUP.Optional.GamePlayLabs
http://www.nicolascoolman.fr/?p=5145 =>.Superfluous.Paretologic
http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.SiteSee
http://www.nicolascoolman.fr/?p=308 =>PUP.Optional.SmartBar
http://www.nicolascoolman.fr/?p=564 =>PUP.Optional.Trymedia
http://www.nicolascoolman.fr/?p=759 =>Trojan.Fynloski
http://www.nicolascoolman.fr/?p=799 =>PUP.Optional.FileScout
http://www.nicolascoolman.fr/?p=237 =>PUP.Optional.Bandoo
http://www.nicolascoolman.fr/?p=279 =>Adware.InstallCore
http://www.nicolascoolman.fr/?p=5145 =>.Superfluous.Softonic
http://www.nicolascoolman.fr/?p=5145 =>.Superfluous.Downloader
http://www.nicolascoolman.fr/?p=5145 =>.Superfluous.GreenTreeApp
http://www.nicolascoolman.fr/?p=215 =>PUP.Optional.Mobogenie
http://www.nicolascoolman.fr/?p=316 =>PUP.Optional.MyPCBackup
http://www.nicolascoolman.fr/pup-netcrawl/ =>PUP.Optional.NetCrawl
http://www.nicolascoolman.fr/?p=235 =>Toolbar.Ask
http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.FileCure
http://www.nicolascoolman.fr/?p=996 =>PUP.Optional.Elex
http://www.nicolascoolman.fr/?p=537 =>PUP.Optional.NextLive
http://www.nicolascoolman.fr/?p=197 =>PUP.Optional.OpenCandy
http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.PerformerSoft
http://www.nicolascoolman.fr/?p=5145 =>.Superfluous.CrashReports
http://www.nicolascoolman.fr/?p=343 =>PUP.Optional.BearShare
http://www.nicolascoolman.fr/?p=62 =>PUP.Optional.LinkiDoo
http://www.nicolascoolman.fr/?p=690 =>PUP.Optional.BuzzSearch

~ End of the scan, 45926 items in 00h09mn35s (1202)(0)