~ ZHPDiag v2016.3.24.74 Par Nicolas Coolman (2016/03/22)
~ Démarré par Administrateur (Administrator) (2016/03/25 00:51:31)
~ Site: http://www.nicolascoolman.com
~ Facebook: https://www.facebook.com/nicolascoolman1
~ Etat de la version: Version OK
~ Mode: Scanner
~ Rapport: C:\Documents and Settings\Administrateur.EDITION_TWINS\Bureau\ZHPDiag.txt
~ Rapport: C:\Documents and Settings\Administrateur.EDITION_TWINS\Application Data\ZHP\ZHPDiag.txt
~ UAC: Deactivate
~ Démarrage du système: Normal (Normal boot)
Windows XP, 32-bit Service Pack 3 (Build 2600)

---\\ Navigateurs Internet (2) - 0s
MFIE: Mozilla Firefox 45.0.1 (x86 en-US)
MSIE: Internet Explorer v6.0.2900.5512

---\\ Informations sur les produits Windows (3) - 0s
Windows Automatic Updates : OK
Windows Activation Technologies : KO
Windows Genuine Advantage : OK

---\\ Logiciels de protection et autres (Superflus) (1) - 1s
McAfee Security Scan Plus v3.11.163.2

---\\ Surveillance de Logiciels (1) - 1s
Adobe Flash Player 20 NPAPI

---\\ Informations sur le système (6) - 0s
~ Operating System: x86 Family 6 Model 23 Stepping 10, GenuineIntel
~ Operating System: 32-bit
~ Boot mode: Normal (Normal boot)
Total RAM: 2026.336 MB (44% free)
System Restore: Activé (Enable)
System drive C: has 29 GB () free of 238 GB

---\\ Mode de connexion au système (3) - 0s
~ Computer Name: EDITION_TWINS
~ User Name: Administrateur
~ Logged in as Administrator

---\\ Enumération des unités disques (1) - 0s
~ Drive C: has 29 GB free of 238 GB (System)

---\\ Etat du Centre de Sécurité Windows (10) - 0s
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] XMLLookup: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Intl: Modified
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: OK
[HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK

---\\ Recherche particulière de fichiers génériques (23) - 1s
[MD5.F2317622D29F9FF0F88AEECD5F60F0DD] - 14/04/2008 - (.Microsoft Corporation - Explorateur Windows.) -- C:\WINDOWS.0\Explorer.exe [1037824] =>.Microsoft Corporation
[MD5.93AD0B78C7357A05F50E594EC7C22300] - 14/04/2008 - (.Microsoft Corporation - Exécuter une DLL en tant qu'application.) -- C:\WINDOWS.0\System32\rundll32.exe [33792] =>.Microsoft Corporation
[MD5.4A6E04EA20F48D750D9BFED8600D516B] - 14/04/2008 - (.Microsoft Corporation - Extensions Internet pour Win32.) -- C:\WINDOWS.0\System32\wininet.dll [670208] =>.Microsoft Corporation
[MD5.DD73D6B9F6B4CB630CF35B438B540174] - 14/04/2008 - (.Microsoft Corporation - Application d'ouverture de session Windows.) -- C:\WINDOWS.0\System32\Winlogon.exe [512000] =>.Microsoft Corporation
[MD5.F640F61A063DD79BD4D2F6C9509FB958] - 14/04/2008 - (.Microsoft Corporation - DNS Client API DLL.) -- C:\WINDOWS.0\System32\dnsapi.dll [147968] =>.Microsoft Corporation
[MD5.322D0E36693D6E24A2398BEE62A268CD] - 14/04/2008 - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) -- C:\WINDOWS.0\System32\drivers\AFD.sys [138112] =>.Microsoft Corporation
[MD5.9F3A2F5AA6875C72BF062C712CFA2674] - 14/04/2008 - (.Microsoft Corporation - IDE/ATAPI Port Driver.) -- C:\WINDOWS.0\System32\drivers\atapi.sys [96512] =>.Microsoft Corporation
[MD5.C885B02847F5D2FD45A24E219ED93B32] - 14/04/2008 - (.Microsoft Corporation - CD-ROM File System Driver.) -- C:\WINDOWS.0\System32\drivers\Cdfs.sys [63744] =>.Microsoft Corporation
[MD5.1F4260CC5B42272D71F79E570A27A4FE] - 14/04/2008 - (.Microsoft Corporation - SCSI CD-ROM Driver.) -- C:\WINDOWS.0\System32\drivers\Cdrom.sys [62976] =>.Microsoft Corporation
[MD5.31F923EB2170FC172C81ABDA0045D18C] - 14/04/2008 - (.Microsoft Corporation - Pilote de cryptographie FIPS.) -- C:\WINDOWS.0\System32\drivers\Fips.sys [44672] =>.Microsoft Corporation
[MD5.573C7D0A32852B48F3058CFD8026F511] - 14/04/2008 - (.Windows (R) Server 2003 DDK provider - High Definition Audio Bus Driver v1.0a.) -- C:\WINDOWS.0\System32\drivers\HDAudBus.sys [144384]
[MD5.A09BDC4ED10E3B2E0EC27BB94AF32516] - 13/04/2008 - (.Microsoft Corporation - Pilote de port i8042.) -- C:\WINDOWS.0\System32\drivers\i8042prt.sys [54144] =>.Microsoft Corporation
[MD5.083A052659F5310DD8B6A6CB05EDCF8E] - 14/04/2008 - (.Microsoft Corporation - IMAPI Kernel Driver.) -- C:\WINDOWS.0\System32\drivers\Imapi.sys [42112] =>.Microsoft Corporation
[MD5.CC748EA12C6EFFDE940EE98098BF96BB] - 14/04/2008 - (.Microsoft Corporation - IP Network Address Translator.) -- C:\WINDOWS.0\System32\drivers\IpNat.sys [152832] =>.Microsoft Corporation
[MD5.23C74D75E36E7158768DD63D92789A91] - 14/04/2008 - (.Microsoft Corporation - IPSec Driver.) -- C:\WINDOWS.0\System32\drivers\IPSec.sys [75264] =>.Microsoft Corporation
[MD5.68755F0FF16070178B54674FE5B847B0] - 14/04/2008 - (.Microsoft Corporation - Windows NT SMB Minirdr.) -- C:\WINDOWS.0\System32\drivers\MRxSmb.sys [456576] =>.Microsoft Corporation
[MD5.74B2B2F5BEA5E9A3DC021D685551BD3D] - 14/04/2008 - (.Microsoft Corporation - MBT Transport driver.) -- C:\WINDOWS.0\System32\drivers\netBT.sys [162816] =>.Microsoft Corporation
[MD5.78A08DD6A8D65E697C18E1DB01C5CDCA] - 14/04/2008 - (.Microsoft Corporation - NT File System Driver.) -- C:\WINDOWS.0\System32\drivers\ntfs.sys [574976] =>.Microsoft Corporation
[MD5.8FD0BDBEA875D06CCF6C945CA9ABAF75] - 14/04/2008 - (.Microsoft Corporation - Pilote de port parallèle.) -- C:\WINDOWS.0\System32\drivers\Parport.sys [80384] =>.Microsoft Corporation
[MD5.11B4A627BC9614B885C4969BFA5FF8A6] - 14/04/2008 - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) -- C:\WINDOWS.0\System32\drivers\Rasl2tp.sys [51328] =>.Microsoft Corporation
[MD5.15CABD0F7C00C47C70124907916AF3F1] - 13/04/2008 - (.Microsoft Corporation - Microsoft RDP Device redirector.) -- C:\WINDOWS.0\System32\drivers\rdpdr.sys [196224] =>.Microsoft Corporation
[MD5.D8EB2A7904DB6C916EB5361878DDCBAE] - 13/04/2008 - (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) -- C:\WINDOWS.0\System32\drivers\redbook.sys [58752] =>.Microsoft Corporation
[MD5.46DE1126684369BACE4849E4FC8C43CA] - 14/04/2008 - (.Microsoft Corporation - Pilote de cliché instantané du volume.) -- C:\WINDOWS.0\System32\drivers\volsnap.sys [53376] =>.Microsoft Corporation

---\\ Liste des services NT non Microsoft et non désactivés (13) - 3s
O23 - Service: Alcohol Virtual Drive Auto-mount Service (AxAutoMntSrv) . (.Alcohol Soft Development Team - Alcohol Virtual Drive Auto-mount Service.) - C:\Program Files\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe
O23 - Service: Baidu MoboMarket Service (BASSVC) . (.Baidu, Inc. - Baidu MoboMarket Service.) - C:\Program Files\Baidu Security\MoboMarket\1.2.8.3351\bassvc.exe =>.Baidu Online Network Technology (Beijing)Co., Ltd®
O23 - Service: cFosSpeed System Service (cFosSpeedS) . (.cFos Software GmbH - cFosSpeed Service.) - C:\Program Files\cFosSpeed\spd.exe {112197A57D474DC4BAF80DE77A350780D798}
O23 - Service: HWDeviceService.exe (HWDeviceService.exe) . (.Copyright (C) 2008 - DCSHOST.) - C:\Documents and Settings\All Users.WINDOWS.0\Application Data\DatacardService\HWDeviceService.exe =>.HUAWEI Technologies Co., Ltd.®
O23 - Service: IHProtect Service (IHProtect Service) . (.XTab system - ProtectSvc.exe.) - C:\Program Files\MiuiTab\ProtectService.exe =>PUP.Optional.AgentODR
O23 - Service: IhPul (IhPul) . (.tsvr.com - tsvr.com.) - C:\Documents and Settings\Administrateur.EDITION_TWINS\Application Data\TSv\TSvr.exe =>PUP.Optional.Elex
O23 - Service: YAC Service (iSafeService) . (.Elex do Brasil Participações Ltda - iSafeSvc.) - C:\Program Files\Elex-tech\YAC\iSafeSvc.exe =>PUP.Optional.Elex
O23 - Service: MobiConnect. OUC (MobiConnect. RunOuc) . (...) - C:\Program Files\MobiConnect\UpdateDog\ouc.exe
O23 - Service: qkseeService (qkseeService) . (.Qksee Pvt Ltd. - qksee service.) - C:\Program Files\qksee\qkseeSvc.exe
O23 - Service: Baidu Spark Service (SparkSvc) . (.Baidu Inc. - spark.) - C:\Program Files\baidu\Spark\sparkservice.exe =>.Baidu Online Network Technology (Beijing) Co.,Ltd.®
O23 - Service: StarWind AE Service (StarWindServiceAE) . (.StarWind Software - StarWind iSCSI Target (Alcohol Edition).) - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe =>.StarWind Software
O23 - Service: UI Assistant Service (UI Assistant Service) . (...) - C:\Program Files\MobiConnect\AssistantServices.exe =>.ZTE CORPORATION®
O23 - Service: WdMan Service (WdMan) . (.TFuns LIMITED - TFuns.) - C:\Documents and Settings\All Users.WINDOWS.0\Application Data\tWdMt\WdMan.exe =>PUP.Optional.WdsManPro

---\\ Services non Microsoft (SR=Démarré,SS=Stoppé) (19) - 22s

SS - Demand [10/02/2016] [ 269504] Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\WINDOWS.0\system32\Macromed\Flash\FlashPlayerUpdateService.exe =>.Adobe Systems Incorporated®
SS - Auto [12/03/2015] [ 113104] Alcohol Virtual Drive Auto-mount Service (AxAutoMntSrv) . (.Alcohol Soft Development Team.) - C:\Program Files\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe
SR - Auto [17/10/2014] [ 208928] Baidu MoboMarket Service (BASSVC) . (.Baidu, Inc..) - C:\Program Files\Baidu Security\MoboMarket\1.2.8.3351\bassvc.exe =>.Baidu Online Network Technology (Beijing)Co., Ltd®
SR - Auto [09/09/2015] [ 618920] cFosSpeed System Service (cFosSpeedS) . (.cFos Software GmbH.) - C:\Program Files\cFosSpeed\spd.exe {112197A57D474DC4BAF80DE77A350780D798}
SR - Auto [14/03/2011] [ 271712] HWDeviceService.exe (HWDeviceService.exe) . (.Copyright (C) 2008.) - C:\Documents and Settings\All Users.WINDOWS.0\Application Data\DatacardService\HWDeviceService.exe =>.HUAWEI Technologies Co., Ltd.®
SR - Auto [21/03/2016] [ 119808] IHProtect Service (IHProtect Service) . (.XTab system.) - C:\Program Files\MiuiTab\ProtectService.exe =>PUP.Optional.AgentODR
SR - Auto [18/03/2016] [ 116368] IhPul (IhPul) . (.tsvr.com.) - C:\Documents and Settings\Administrateur.EDITION_TWINS\Application Data\TSv\TSvr.exe =>PUP.Optional.Elex
SR - Auto [19/08/2015] [ 118048] YAC Service (iSafeService) . (.Elex do Brasil Participações Ltda.) - C:\Program Files\Elex-tech\YAC\iSafeSvc.exe =>PUP.Optional.Elex
SS - Demand [10/06/2010] [ 349552] Ma-Config Service (maconfservice) . (.CybelSoft.) - C:\Program Files\ma-config.com\maconfservice.exe =>.CybelSoft
SS - Demand [31/07/2015] [ 305328] McAfee Security Scan Component Host Service (McComponentHostService) . (.McAfee, Inc..) - C:\Program Files\McAfee Security Scan\3.11.163\McCHSvc.exe =>.McAfee, Inc.
SS - Auto [23/08/2011] [ 721248] MobiConnect. OUC (MobiConnect. RunOuc) . (...) - C:\Program Files\MobiConnect\UpdateDog\ouc.exe
SS - Demand [20/03/2016] [ 216520] Mozilla Maintenance Service (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe =>.Mozilla Foundation
SR - Auto [22/03/2016] [ 708728] qkseeService (qkseeService) . (.Qksee Pvt Ltd..) - C:\Program Files\qksee\qkseeSvc.exe
SR - Auto [04/03/2016] [ 97080] Baidu Spark Service (SparkSvc) . (.Baidu Inc..) - C:\Program Files\baidu\Spark\sparkservice.exe =>.Baidu Online Network Technology (Beijing) Co.,Ltd.®
SR - Auto [23/12/2009] [ 370688] StarWind AE Service (StarWindServiceAE) . (.StarWind Software.) - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe =>.StarWind Software
SR - Auto [03/12/2012] [ 275784] UI Assistant Service (UI Assistant Service) . (...) - C:\Program Files\MobiConnect\AssistantServices.exe =>.ZTE CORPORATION®
SR - Auto [17/03/2016] [ 294912] WdMan Service (WdMan) . (.TFuns LIMITED.) - C:\Documents and Settings\All Users.WINDOWS.0\Application Data\tWdMt\WdMan.exe =>PUP.Optional.WdsManPro
SS - Demand [17/10/2015] [ 13264] WiseHDInfo (WiseHDInfo) . (.wisecleaner.com.) - C:\WINDOWS.0\WiseHDInfo32.dll =>.Lespeed Technology Ltd.®

---\\ Processus lancés (22) - 2s
[MD5.5A0C16BA56B580CFC8BAAEDECDC6EA9B] - (.Baidu, Inc. - Baidu MoboMarket Service.) -- C:\Program Files\Baidu Security\MoboMarket\1.2.8.3351\bassvc.exe [208928] [PID.1732] =>.Baidu Online Network Technology (Beijing)Co., Ltd®
[MD5.4F6BF1CED2DABFE62ED1407CE8745277] - (.cFos Software GmbH - cFosSpeed Service.) -- C:\Program Files\cFosSpeed\spd.exe [618920] [PID.868] {112197A57D474DC4BAF80DE77A350780D798}
[MD5.5EF3427AE503B5C03A48F7C9FF458B69] - (.Copyright (C) 2008 - DCSHOST.) -- C:\Documents and Settings\All Users.WINDOWS.0\Application Data\DatacardService\HWDeviceService.exe [271712] [PID.984] =>.HUAWEI Technologies Co., Ltd.®
[MD5.A3E33718D1090A1587AC069597EC4FA6] - (.Tonec Inc. - Internet Download Manager (IDM).) -- C:\Program Files\Internet Download Manager\IDMan.exe [3907152] [PID.1592] =>.Tonec Inc.
[MD5.AC44BF99C44BBF6B70E2689226AF78E6] - (.tsvr.com - tsvr.com.) -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Application Data\TSv\TSvr.exe [116368] [PID.1580] =>PUP.Optional.Elex
[MD5.D7F7849DFBBDCCF801F8D32BD8E5557D] - (...) -- C:\Documents and Settings\All Users.WINDOWS.0\Application Data\MobiConnect\OnlineUpdate\ouc.exe [721248] [PID.2144]
[MD5.6A881210DB2753D610EF045BF27BC022] - (.Baidu Inc. - spark.) -- C:\Program Files\baidu\Spark\sparkservice.exe [97080] [PID.2300] =>.Baidu Online Network Technology (Beijing) Co.,Ltd.®
[MD5.E5C796B621F6FBA8616511063D7F0FFE] - (.StarWind Software - StarWind iSCSI Target (Alcohol Edition).) -- C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [370688] [PID.2404] =>.StarWind Software
[MD5.B995F4A853F5D0FDF8DAECC71C0BC621] - (...) -- C:\Program Files\MobiConnect\AssistantServices.exe [275784] [PID.2536] =>.ZTE CORPORATION®
[MD5.014EFC12621929881CDC59C1D67DFB1D] - (.TFuns LIMITED - TFuns.) -- C:\Documents and Settings\All Users.WINDOWS.0\Application Data\tWdMt\WdMan.exe [294912] [PID.2636] =>PUP.Optional.WdsManPro
[MD5.BD95E822E7A958BBCA842D078426A151] - (.Tonec Inc. - Internet Download Manager agent for click m.) -- C:\Program Files\Internet Download Manager\IEMonitor.exe [269848] [PID.1828] =>.Tonec Inc.®
[MD5.29259683CE518DC73752348AF974B59E] - (.Baidu, Inc. - Baidu AndroidStore Helper.) -- C:\Program Files\Baidu Security\MoboMarket\1.2.8.3351\bas_helper.exe [2183200] [PID.2844] =>.Baidu Online Network Technology (Beijing)Co., Ltd®
[MD5.51E63633487F9180EC8031980684BF86] - (...) -- C:\WINDOWS.0\Temp\winbjbvs.exe [11776] [PID.3708] =>Heuristic.Suspect
[MD5.CC9E1075DB0645F1032F8C4B4412DEBA] - (...) -- C:\WINDOWS.0\Temp\winwcav.exe [16896] [PID.2004] =>Heuristic.Suspect
[MD5.97C105F970F72928BA957F1C46FEA6AB] - (...) -- C:\WINDOWS.0\Temp\winsjlgr.exe [53930] [PID.1640] =>Heuristic.Suspect
[MD5.B873AC74EA60B71CB960354CCAB10846] - (.Qksee Pvt Ltd. - qksee service.) -- C:\Program Files\qksee\qkseeSvc.exe [708728] [PID.2336]
[MD5.11F6F9216D8F77EAC196B07D66E819EA] - (.Elex do Brasil Participações Ltda - iSafeSvc.) -- C:\Program Files\Elex-tech\YAC\iSafeSvc.exe [118048] [PID.2724] =>PUP.Optional.Elex
[MD5.A03A95B389479B2ADE3A288FA2EA11D1] - (.Elex do Brasil Participações Ltda - iSafeSvc2.) -- C:\Program Files\Elex-tech\YAC\iSafeSvc2.exe [118048] [PID.332] =>PUP.Optional.Elex
[MD5.283910BA1B76C6D3534F89540E5354D5] - (.XTab system - ProtectSvc.exe.) -- C:\Program Files\MiuiTab\ProtectService.exe [119808] [PID.9680] =>PUP.Optional.MiuiTab
[MD5.80B72881A9BDDA484867F22DDC2E84DD] - (.Mozilla Corporation - Firefox.) -- c:\program files\mozilla firefox\firefox.exe [392136] [PID.19288] =>.Mozilla Corporation®
[MD5.FF1B6186596A6A3B1A43E0280B75ECEC] - (.Nullsoft, Inc. - Winamp.) -- C:\Program Files\Winamp\winamp.exe [1630560] [PID.20888] =>.Nullsoft, Inc.
[MD5.43E2BBE02F74ED99192AB4D1D3E31F38] - (.Nicolas Coolman - ZHPDiag.) -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Mes documents\Downloads\ZHPDiag3.exe [2161152] [PID.22516] =>.Nicolas Coolman

---\\ Firefox, Plugins,Demarrage,Recherche,Extensions (17) - 2s
M0 - MFSP: prefs.js [Administrateur - 8qj5rm9o.default-1435582655953] http://www.yoursites123.com/?type=hp&ts=1458590004&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=wpm0314&uid=WDCXWD2500BEVT-60A23T0_WD-WX61A809838998389 =>PUP.Optional.YourSites123
M1 - SPR:Search Page Redirection - C:\Program Files\Mozilla Firefox\extensions\{25936db0-7cd4-5110-e50e-87d7aae0f45d}
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\Plugins\nppdf32.FRA
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\Plugins\QuickTimePlugin.class
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\Plugins\WMP Firefox Plugin License.rtf
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\Plugins\WMP Firefox Plugin RelNotes.txt
P2 - EXT FILE: (...) -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Application Data\Mozilla\Firefox\Profiles\8qj5rm9o.default-1435582655953\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
P2 - EXT FILE: (...) -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Application Data\Mozilla\Firefox\Profiles\8qj5rm9o.default-1435582655953\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi
P2 - EXT FILE: (...) -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Application Data\Mozilla\Firefox\Profiles\8qj5rm9o.default-1435582655953\searchplugins\default.xml
P2 - EXT FILE: (...) -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Application Data\Mozilla\Firefox\Profiles\8qj5rm9o.default-1435582655953\searchplugins\yahoo.xml =>PUP.Optional.BDYahoo
P2 - EXT FILE: (...) -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Application Data\Mozilla\Firefox\Profiles\8qj5rm9o.default-1435582655953\searchplugins\yoursites123.xml =>PUP.Optional.YourSites123
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\browser\searchplugins\avg-secure-search.xml
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\browser\searchplugins\webssearches.xml =>PUP.Optional.WebsSearches
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
P2 - EXT: (.lightningnewtab.com - Default NewTab.) -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Application Data\Mozilla\Firefox\Profiles\8qj5rm9o.default-1435582655953\extensions\default_newtabff@gmail.com =>PUP.Optional.LightningNewTab
P2 - EXT: (.Microsoft - Microsoft .NET Framework Assistant.) -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Application Data\Mozilla\Firefox\Profiles\8qj5rm9o.default-1435582655953\extensions\{20a82645-c095-46ed-80e3-08825760534b} =>.Microsoft
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Adobe Systems Incorporated.) -- C:\WINDOWS.0\system32\Macromed\Flash\NPSWF32_20_0_0_306.dll =>.Adobe Systems Incorporated

---\\ Internet Explorer,Démarrage,Recherche,URLSearchHook (12) - 0s
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.yoursites123.com/ =>PUP.Optional.YourSites123
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.yoursites123.com/ =>PUP.Optional.YourSites123
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://search.delta-homes.com/ =>PUP.Optional.Qvo6
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yoursites123.com/ =>PUP.Optional.YourSites123
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.delta-homes.com/ =>PUP.Optional.Qvo6
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yoursites123.com/ =>PUP.Optional.YourSites123
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm
R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphean =>.Microsoft Internet Explorer

---\\ Internet Explorer,Proxy Management (4) - 1s
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll

---\\ Internet Explorer,IniFiles, Autoloading programs (3) - 0s
F2 - REG:system.ini: UserInit=C:\WINDOWS.0\system32\userinit.exe (.Microsoft Corporation.) =>.Microsoft Corporation
F2 - REG:system.ini: Shell=C:\WINDOWS.0\explorer.exe (.Microsoft Corporation.) =>.Microsoft Corporation
F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"

---\\ Etude du fichier hosts (1) - 0s
~ Le fichier hôte est sain (The hosts file is clean) (35)

---\\ Browser Helper Object de navigateur (BHO) (5) - 0s
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} . (.Internet Download Manager, Tonec Inc. - IDM Browser Helper Object.) -- C:\Program Files\Internet Download Manager\IDMIECC.dll =>.Tonec Inc.®
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre1.8.0_45\bin\ssv.dll =>.Oracle America, Inc.®
O2 - BHO: Roll Around - {83c0e288-8fa0-43d3-acc7-c1e839d85abc} (Orphean) =>PUP.Optional.RollAround
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corporation - WindowsLiveLogin.dll.) -- C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll =>.Microsoft Corporation®
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre1.8.0_45\bin\jp2ssv.dll =>.Oracle America, Inc.®

---\\ Applications lancées au démarrage du système (18) - 1s
O4 - HKCU\..\Run: [IDMan] . (.Tonec Inc. - Internet Download Manager (IDM).) -- C:\Program Files\Internet Download Manager\IDMan.exe =>.Tonec Inc.
O4 - HKCU\..\Run: [MSMSGS] . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe =>.Microsoft Corporation
O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_3] rundll32 advpack.dll
O4 - HKUS\.DEFAULT\..\RunOnce: [_nltide_3] rundll32 advpack.dll
O4 - HKUS\.DEFAULT\..\RunOnce: [ShowDeskFix] regsvr32 /s /n /i:u shell32
O4 - HKUS\.DEFAULT\..\RunOnce: [_nltide_2] regsvr32 /s /n /i:U shell32
O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_3] rundll32 advpack.dll
O4 - HKUS\S-1-5-18\..\RunOnce: [_nltide_3] rundll32 advpack.dll
O4 - HKUS\S-1-5-18\..\RunOnce: [ShowDeskFix] regsvr32 /s /n /i:u shell32
O4 - HKUS\S-1-5-18\..\RunOnce: [_nltide_2] regsvr32 /s /n /i:U shell32
O4 - HKUS\S-1-5-19\..\RunOnce: [nltide_3] rundll32 advpack.dll
O4 - HKUS\S-1-5-19\..\RunOnce: [_nltide_3] rundll32 advpack.dll
O4 - HKUS\S-1-5-19\..\RunOnce: [ShowDeskFix] regsvr32 /s /n /i:u shell32
O4 - HKUS\S-1-5-20\..\RunOnce: [nltide_3] rundll32 advpack.dll
O4 - HKUS\S-1-5-20\..\RunOnce: [_nltide_3] rundll32 advpack.dll
O4 - HKUS\S-1-5-20\..\RunOnce: [ShowDeskFix] regsvr32 /s /n /i:u shell32
O4 - HKUS\S-1-5-21-602162358-436374069-1801674531-500\..\Run: [IDMan] . (.Tonec Inc. - Internet Download Manager (IDM).) -- C:\Program Files\Internet Download Manager\IDMan.exe =>.Tonec Inc.
O4 - HKUS\S-1-5-21-602162358-436374069-1801674531-500\..\Run: [MSMSGS] . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe =>.Microsoft Corporation

---\\ Raccourcis Global Startup (94) - 11s
O4 - GS\Desktop [Administrateur]: Firefox Password Recovery Master.lnk . (.Rixler Software - Firefox Password Recovery Master.) C:\Program Files\Firefox Password Recovery Master\FFPasRec.exe
O4 - GS\Desktop [Administrateur]: Flvto Youtube Downloader.lnk . (.Hotger - Flvto Youtube Downloader.) C:\Documents and Settings\Administrateur.EDITION_TWINS\Local Settings\Application Data\Flvto Youtube Downloader\FlvtoYoutubeDownloader.exe {00B04AA73DCBC59123279CA151AE0A8EF7} =>.Hotger
O4 - GS\Desktop [Administrateur]: Internet Download Manager.lnk . (.Tonec Inc. - Internet Download Manager (IDM).) C:\Program Files\Internet Download Manager\IDMan.exe =>.Tonec Inc.
O4 - GS\Desktop [Administrateur]: Mes documents.lnk . (...) C:\Documents and Settings\Administrateur.EDITION_TWINS\Mes documents
O4 - GS\Desktop [Administrateur]: MP3 Audio Converter.lnk . (.EZ SoftMagic - MP3 Audio Converter.) C:\Program Files\MP3 Audio Converter\CvrtMate.exe
O4 - GS\Desktop [Administrateur]: UsbFix.lnk . (...) C:\UsbFix\UsbFix.exe
O4 - GS\Desktop [Administrateur]: WinRAR.lnk . (...) C:\Program Files\WinRAR\WinRAR.exe
O4 - GS\Desktop [Administrateur]: Youtube Downloader HD.lnk . (...) C:\Program Files\Youtube Downloader HD\YouTubeDownloaderHD.exe
O4 - GS\Desktop [Administrateur]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Documents and Settings\Administrateur.EDITION_TWINS\Application Data\ZHP\ZHPDiag3.exe =>.Nicolas Coolman
O4 - GS\Quicklaunch [Administrateur]: Any Video to DVD Converter and Burner.lnk . (.DreamVideoSoft - .) C:\Program Files\Any Video to DVD Converter and Burner\DreamDVDCreator.exe
O4 - GS\Quicklaunch [Administrateur]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O4 - GS\Quicklaunch [Administrateur]: MP3 Audio Converter.lnk . (.EZ SoftMagic - MP3 Audio Converter.) C:\Program Files\MP3 Audio Converter\CvrtMate.exe
O4 - GS\Quicklaunch [Administrateur]: Spark Browser.lnk . (.Copyright (C) 2011 - spark.) C:\Program Files\baidu\Spark\Spark.exe
O4 - GS\Desktop [ASPNET]: Firefox Password Recovery Master.lnk . (.Rixler Software - Firefox Password Recovery Master.) C:\Program Files\Firefox Password Recovery Master\FFPasRec.exe
O4 - GS\Desktop [ASPNET]: Flvto Youtube Downloader.lnk . (.Hotger - Flvto Youtube Downloader.) C:\Documents and Settings\Administrateur.EDITION_TWINS\Local Settings\Application Data\Flvto Youtube Downloader\FlvtoYoutubeDownloader.exe {00B04AA73DCBC59123279CA151AE0A8EF7} =>.Hotger
O4 - GS\Desktop [ASPNET]: Internet Download Manager.lnk . (.Tonec Inc. - Internet Download Manager (IDM).) C:\Program Files\Internet Download Manager\IDMan.exe =>.Tonec Inc.
O4 - GS\Desktop [ASPNET]: Mes documents.lnk . (...) C:\Documents and Settings\Administrateur.EDITION_TWINS\Mes documents
O4 - GS\Desktop [ASPNET]: MP3 Audio Converter.lnk . (.EZ SoftMagic - MP3 Audio Converter.) C:\Program Files\MP3 Audio Converter\CvrtMate.exe
O4 - GS\Desktop [ASPNET]: UsbFix.lnk . (...) C:\UsbFix\UsbFix.exe
O4 - GS\Desktop [ASPNET]: WinRAR.lnk . (...) C:\Program Files\WinRAR\WinRAR.exe
O4 - GS\Desktop [ASPNET]: Youtube Downloader HD.lnk . (...) C:\Program Files\Youtube Downloader HD\YouTubeDownloaderHD.exe
O4 - GS\Desktop [ASPNET]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Documents and Settings\Administrateur.EDITION_TWINS\Application Data\ZHP\ZHPDiag3.exe =>.Nicolas Coolman
O4 - GS\Quicklaunch [ASPNET]: Any Video to DVD Converter and Burner.lnk . (.DreamVideoSoft - .) C:\Program Files\Any Video to DVD Converter and Burner\DreamDVDCreator.exe
O4 - GS\Quicklaunch [ASPNET]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O4 - GS\Quicklaunch [ASPNET]: MP3 Audio Converter.lnk . (.EZ SoftMagic - MP3 Audio Converter.) C:\Program Files\MP3 Audio Converter\CvrtMate.exe
O4 - GS\Quicklaunch [ASPNET]: Spark Browser.lnk . (.Copyright (C) 2011 - spark.) C:\Program Files\baidu\Spark\Spark.exe
O4 - GS\Desktop [HelpAssistant]: Firefox Password Recovery Master.lnk . (.Rixler Software - Firefox Password Recovery Master.) C:\Program Files\Firefox Password Recovery Master\FFPasRec.exe
O4 - GS\Desktop [HelpAssistant]: Flvto Youtube Downloader.lnk . (.Hotger - Flvto Youtube Downloader.) C:\Documents and Settings\Administrateur.EDITION_TWINS\Local Settings\Application Data\Flvto Youtube Downloader\FlvtoYoutubeDownloader.exe {00B04AA73DCBC59123279CA151AE0A8EF7} =>.Hotger
O4 - GS\Desktop [HelpAssistant]: Internet Download Manager.lnk . (.Tonec Inc. - Internet Download Manager (IDM).) C:\Program Files\Internet Download Manager\IDMan.exe =>.Tonec Inc.
O4 - GS\Desktop [HelpAssistant]: Mes documents.lnk . (...) C:\Documents and Settings\Administrateur.EDITION_TWINS\Mes documents
O4 - GS\Desktop [HelpAssistant]: MP3 Audio Converter.lnk . (.EZ SoftMagic - MP3 Audio Converter.) C:\Program Files\MP3 Audio Converter\CvrtMate.exe
O4 - GS\Desktop [HelpAssistant]: UsbFix.lnk . (...) C:\UsbFix\UsbFix.exe
O4 - GS\Desktop [HelpAssistant]: WinRAR.lnk . (...) C:\Program Files\WinRAR\WinRAR.exe
O4 - GS\Desktop [HelpAssistant]: Youtube Downloader HD.lnk . (...) C:\Program Files\Youtube Downloader HD\YouTubeDownloaderHD.exe
O4 - GS\Desktop [HelpAssistant]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Documents and Settings\Administrateur.EDITION_TWINS\Application Data\ZHP\ZHPDiag3.exe =>.Nicolas Coolman
O4 - GS\Quicklaunch [HelpAssistant]: Any Video to DVD Converter and Burner.lnk . (.DreamVideoSoft - .) C:\Program Files\Any Video to DVD Converter and Burner\DreamDVDCreator.exe
O4 - GS\Quicklaunch [HelpAssistant]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O4 - GS\Quicklaunch [HelpAssistant]: MP3 Audio Converter.lnk . (.EZ SoftMagic - MP3 Audio Converter.) C:\Program Files\MP3 Audio Converter\CvrtMate.exe
O4 - GS\Quicklaunch [HelpAssistant]: Spark Browser.lnk . (.Copyright (C) 2011 - spark.) C:\Program Files\baidu\Spark\Spark.exe
O4 - GS\Desktop [IUSR_EDITION_TWINS]: Firefox Password Recovery Master.lnk . (.Rixler Software - Firefox Password Recovery Master.) C:\Program Files\Firefox Password Recovery Master\FFPasRec.exe
O4 - GS\Desktop [IUSR_EDITION_TWINS]: Flvto Youtube Downloader.lnk . (.Hotger - Flvto Youtube Downloader.) C:\Documents and Settings\Administrateur.EDITION_TWINS\Local Settings\Application Data\Flvto Youtube Downloader\FlvtoYoutubeDownloader.exe {00B04AA73DCBC59123279CA151AE0A8EF7} =>.Hotger
O4 - GS\Desktop [IUSR_EDITION_TWINS]: Internet Download Manager.lnk . (.Tonec Inc. - Internet Download Manager (IDM).) C:\Program Files\Internet Download Manager\IDMan.exe =>.Tonec Inc.
O4 - GS\Desktop [IUSR_EDITION_TWINS]: Mes documents.lnk . (...) C:\Documents and Settings\Administrateur.EDITION_TWINS\Mes documents
O4 - GS\Desktop [IUSR_EDITION_TWINS]: MP3 Audio Converter.lnk . (.EZ SoftMagic - MP3 Audio Converter.) C:\Program Files\MP3 Audio Converter\CvrtMate.exe
O4 - GS\Desktop [IUSR_EDITION_TWINS]: UsbFix.lnk . (...) C:\UsbFix\UsbFix.exe
O4 - GS\Desktop [IUSR_EDITION_TWINS]: WinRAR.lnk . (...) C:\Program Files\WinRAR\WinRAR.exe
O4 - GS\Desktop [IUSR_EDITION_TWINS]: Youtube Downloader HD.lnk . (...) C:\Program Files\Youtube Downloader HD\YouTubeDownloaderHD.exe
O4 - GS\Desktop [IUSR_EDITION_TWINS]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Documents and Settings\Administrateur.EDITION_TWINS\Application Data\ZHP\ZHPDiag3.exe =>.Nicolas Coolman
O4 - GS\Quicklaunch [IUSR_EDITION_TWINS]: Any Video to DVD Converter and Burner.lnk . (.DreamVideoSoft - .) C:\Program Files\Any Video to DVD Converter and Burner\DreamDVDCreator.exe
O4 - GS\Quicklaunch [IUSR_EDITION_TWINS]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O4 - GS\Quicklaunch [IUSR_EDITION_TWINS]: MP3 Audio Converter.lnk . (.EZ SoftMagic - MP3 Audio Converter.) C:\Program Files\MP3 Audio Converter\CvrtMate.exe
O4 - GS\Quicklaunch [IUSR_EDITION_TWINS]: Spark Browser.lnk . (.Copyright (C) 2011 - spark.) C:\Program Files\baidu\Spark\Spark.exe
O4 - GS\Desktop [IWAM_EDITION_TWINS]: Firefox Password Recovery Master.lnk . (.Rixler Software - Firefox Password Recovery Master.) C:\Program Files\Firefox Password Recovery Master\FFPasRec.exe
O4 - GS\Desktop [IWAM_EDITION_TWINS]: Flvto Youtube Downloader.lnk . (.Hotger - Flvto Youtube Downloader.) C:\Documents and Settings\Administrateur.EDITION_TWINS\Local Settings\Application Data\Flvto Youtube Downloader\FlvtoYoutubeDownloader.exe {00B04AA73DCBC59123279CA151AE0A8EF7} =>.Hotger
O4 - GS\Desktop [IWAM_EDITION_TWINS]: Internet Download Manager.lnk . (.Tonec Inc. - Internet Download Manager (IDM).) C:\Program Files\Internet Download Manager\IDMan.exe =>.Tonec Inc.
O4 - GS\Desktop [IWAM_EDITION_TWINS]: Mes documents.lnk . (...) C:\Documents and Settings\Administrateur.EDITION_TWINS\Mes documents
O4 - GS\Desktop [IWAM_EDITION_TWINS]: MP3 Audio Converter.lnk . (.EZ SoftMagic - MP3 Audio Converter.) C:\Program Files\MP3 Audio Converter\CvrtMate.exe
O4 - GS\Desktop [IWAM_EDITION_TWINS]: UsbFix.lnk . (...) C:\UsbFix\UsbFix.exe
O4 - GS\Desktop [IWAM_EDITION_TWINS]: WinRAR.lnk . (...) C:\Program Files\WinRAR\WinRAR.exe
O4 - GS\Desktop [IWAM_EDITION_TWINS]: Youtube Downloader HD.lnk . (...) C:\Program Files\Youtube Downloader HD\YouTubeDownloaderHD.exe
O4 - GS\Desktop [IWAM_EDITION_TWINS]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Documents and Settings\Administrateur.EDITION_TWINS\Application Data\ZHP\ZHPDiag3.exe =>.Nicolas Coolman
O4 - GS\Quicklaunch [IWAM_EDITION_TWINS]: Any Video to DVD Converter and Burner.lnk . (.DreamVideoSoft - .) C:\Program Files\Any Video to DVD Converter and Burner\DreamDVDCreator.exe
O4 - GS\Quicklaunch [IWAM_EDITION_TWINS]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O4 - GS\Quicklaunch [IWAM_EDITION_TWINS]: MP3 Audio Converter.lnk . (.EZ SoftMagic - MP3 Audio Converter.) C:\Program Files\MP3 Audio Converter\CvrtMate.exe
O4 - GS\Quicklaunch [IWAM_EDITION_TWINS]: Spark Browser.lnk . (.Copyright (C) 2011 - spark.) C:\Program Files\baidu\Spark\Spark.exe
O4 - GS\Desktop [SUPPORT_388945a0]: Firefox Password Recovery Master.lnk . (.Rixler Software - Firefox Password Recovery Master.) C:\Program Files\Firefox Password Recovery Master\FFPasRec.exe
O4 - GS\Desktop [SUPPORT_388945a0]: Flvto Youtube Downloader.lnk . (.Hotger - Flvto Youtube Downloader.) C:\Documents and Settings\Administrateur.EDITION_TWINS\Local Settings\Application Data\Flvto Youtube Downloader\FlvtoYoutubeDownloader.exe {00B04AA73DCBC59123279CA151AE0A8EF7} =>.Hotger
O4 - GS\Desktop [SUPPORT_388945a0]: Internet Download Manager.lnk . (.Tonec Inc. - Internet Download Manager (IDM).) C:\Program Files\Internet Download Manager\IDMan.exe =>.Tonec Inc.
O4 - GS\Desktop [SUPPORT_388945a0]: Mes documents.lnk . (...) C:\Documents and Settings\Administrateur.EDITION_TWINS\Mes documents
O4 - GS\Desktop [SUPPORT_388945a0]: MP3 Audio Converter.lnk . (.EZ SoftMagic - MP3 Audio Converter.) C:\Program Files\MP3 Audio Converter\CvrtMate.exe
O4 - GS\Desktop [SUPPORT_388945a0]: UsbFix.lnk . (...) C:\UsbFix\UsbFix.exe
O4 - GS\Desktop [SUPPORT_388945a0]: WinRAR.lnk . (...) C:\Program Files\WinRAR\WinRAR.exe
O4 - GS\Desktop [SUPPORT_388945a0]: Youtube Downloader HD.lnk . (...) C:\Program Files\Youtube Downloader HD\YouTubeDownloaderHD.exe
O4 - GS\Desktop [SUPPORT_388945a0]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Documents and Settings\Administrateur.EDITION_TWINS\Application Data\ZHP\ZHPDiag3.exe =>.Nicolas Coolman
O4 - GS\Quicklaunch [SUPPORT_388945a0]: Any Video to DVD Converter and Burner.lnk . (.DreamVideoSoft - .) C:\Program Files\Any Video to DVD Converter and Burner\DreamDVDCreator.exe
O4 - GS\Quicklaunch [SUPPORT_388945a0]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O4 - GS\Quicklaunch [SUPPORT_388945a0]: MP3 Audio Converter.lnk . (.EZ SoftMagic - MP3 Audio Converter.) C:\Program Files\MP3 Audio Converter\CvrtMate.exe
O4 - GS\Quicklaunch [SUPPORT_388945a0]: Spark Browser.lnk . (.Copyright (C) 2011 - spark.) C:\Program Files\baidu\Spark\Spark.exe
O4 - GS\CommonDesktop [Public]: Alcohol 120%.lnk . (.Alcohol Soft Development Team - Alcohol 120%.) C:\Program Files\Alcohol Soft\Alcohol 120\Alcohol.exe =>.Alcohol Soft®
O4 - GS\CommonDesktop [Public]: Any Video to DVD Converter and Burner.lnk . (.DreamVideoSoft - .) C:\Program Files\Any Video to DVD Converter and Burner\DreamDVDCreator.exe
O4 - GS\CommonDesktop [Public]: Baidu Browser.lnk . (.Copyright (C) 2011 - spark.) C:\Program Files\baidu\Spark\spark.exe
O4 - GS\CommonDesktop [Public]: DVDVideoSoft Free Studio.lnk . (.DVDVideoSoft Ltd. - Free Studio.) C:\Program Files\Fichiers communs\DVDVideoSoft\FreeStudioManager.exe =>.DVDVideoSoft Ltd.
O4 - GS\CommonDesktop [Public]: Express Burn Disc Burning Software.lnk . (.NCH Software - Express Burn Disc Burning Software.) C:\Program Files\NCH Software\ExpressBurn\expressburn.exe =>.NCH Software
O4 - GS\CommonDesktop [Public]: Facebook.lnk . (.Copyright (C) 2011 - spark.) C:\Program Files\baidu\Spark\Spark.exe
O4 - GS\CommonDesktop [Public]: FIFA 11.lnk . (.Electronic Arts Canada - fifaconfig.) C:\Program Files\EA Sports\FIFA 11\Game\fifasetup\fifaconfig.exe =>.Electronic Arts®
O4 - GS\CommonDesktop [Public]: Free Audio CD Burner.lnk . (.DVDVideoSoft Ltd. - Free Audio CD Burner.) C:\Program Files\DVDVideoSoft\Free Audio CD Burner\FreeAudioCDBurner.exe =>.DVDVideoSoft Ltd.®
O4 - GS\CommonDesktop [Public]: Google.lnk . (.Copyright (C) 2011 - spark.) C:\Program Files\baidu\Spark\Spark.exe
O4 - GS\CommonDesktop [Public]: McAfee Security Scan Plus.lnk . (.McAfee, Inc. - McAfee.) C:\Program Files\McAfee Security Scan\3.11.163\McUICnt.exe =>.McAfee, Inc.
O4 - GS\CommonDesktop [Public]: MobiConnect.lnk . (...) C:\Program Files\MobiConnect\UIMain.exe
O4 - GS\CommonDesktop [Public]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O4 - GS\CommonDesktop [Public]: NCH Suite.lnk . (.NCH Software - Express Burn Disc Burning Software.) C:\Program Files\NCH Software\ExpressBurn\expressburn.exe =>.NCH Software
O4 - GS\CommonDesktop [Public]: PowerISO.lnk . (.Power Software Ltd - PowerISO.) C:\Program Files\PowerISO\PowerISO.exe =>.Power Software Ltd
O4 - GS\CommonDesktop [Public]: qksee.lnk . (.Qksee Pvt Ltd. - qksee.) C:\Program Files\qksee\qksee.exe
O4 - GS\CommonDesktop [Public]: VLC media player.lnk . (.VideoLAN - VLC media player.) C:\Program Files\VideoLAN\VLC\vlc.exe =>.VideoLAN

---\\ Modification Domaine/Adresses DNS (2) - 0s
O17 - HKLM\System\CCS\Services\Tcpip\..\{5B9228C2-C355-4ADD-A6A8-A22F89E1470E}: NameServer = 8.8.8.8,8.8.4.4 =>.Google Public DNS
O17 - HKLM\System\CCS\Services\Tcpip\..\{B48811FD-4EDB-4D01-862F-90FEA8819654}: NameServer = 8.8.8.8,8.8.4.4 =>.Google Public DNS

---\\ Protocole additionnel (30) - 1s
O18 - Handler: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\WINDOWS.0\system32\mshtml.dll =>.Microsoft Corporation
O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\WINDOWS.0\system32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\WINDOWS.0\system32\msvidctl.dll =>.Microsoft Corporation
O18 - Handler: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\WINDOWS.0\system32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\WINDOWS.0\system32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\WINDOWS.0\system32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\WINDOWS.0\system32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\WINDOWS.0\system32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\WINDOWS.0\system32\itss.dll =>.Microsoft Corporation
O18 - Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\WINDOWS.0\system32\mshtml.dll =>.Microsoft Corporation
O18 - Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll =>.Microsoft Corporation®
O18 - Handler: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\WINDOWS.0\system32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\WINDOWS.0\system32\mshtml.dll =>.Microsoft Corporation
O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API.) -- C:\WINDOWS.0\system32\inetcomm.dll =>.Microsoft Corporation
O18 - Handler: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\WINDOWS.0\system32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\WINDOWS.0\system32\itss.dll =>.Microsoft Corporation
O18 - Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll =>.Microsoft Corporation®
O18 - Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\WINDOWS.0\system32\mshtml.dll =>.Microsoft Corporation
O18 - Handler: sysimage - {76E67A63-06E9-11D2-A840-006008059382} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\WINDOWS.0\system32\mshtml.dll =>.Microsoft Corporation
O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\WINDOWS.0\system32\msvidctl.dll =>.Microsoft Corporation
O18 - Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\WINDOWS.0\system32\mshtml.dll =>.Microsoft Corporation
O18 - Handler: wia - {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} . (.Microsoft Corporation - WIA Scripting Layer.) -- C:\WINDOWS.0\system32\wiascr.dll =>.Microsoft Corporation
O18 - Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS.0\system32\mscoree.dll =>.Microsoft Corporation®
O18 - Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS.0\system32\mscoree.dll =>.Microsoft Corporation®
O18 - Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS.0\system32\mscoree.dll =>.Microsoft Corporation®
O18 - Filter: Class Install Handler - {32B533BB-EDAE-11d0-BD5A-00AA00B92AF1} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\WINDOWS.0\system32\urlmon.dll =>.Microsoft Corporation
O18 - Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\WINDOWS.0\system32\urlmon.dll =>.Microsoft Corporation
O18 - Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\WINDOWS.0\system32\urlmon.dll =>.Microsoft Corporation
O18 - Filter: lzdhtml - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\WINDOWS.0\system32\urlmon.dll =>.Microsoft Corporation
O18 - Filter: text/webviewhtml - {733AC4CB-F1A4-11d0-B951-00A0C90312E1} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS.0\system32\shell32.dll =>.Microsoft Corporation

---\\ Logiciels installés (52) - 24s
O42 - Logiciel: .NET Reactor - (.Eziriz.) [HKLM] -- .NET Reactor
O42 - Logiciel: .NET Reactor - (.Eziriz.) [HKLM] -- {6732AE9F-CE1A-4DC7-A18D-A23CAA99724C}
O42 - Logiciel: 4Musics WAV to MP3 Converter 4.3 - (.NeSoft.) [HKLM] -- 4Musics WAV to MP3 Converter 4.3_is1
O42 - Logiciel: 7-Zip 15.12 - (.Igor Pavlov.) [HKLM] -- 7-Zip =>.Igor Pavlov
O42 - Logiciel: Ad Muncher v4.94.34121 (Free) - (...) [HKLM] -- Ad Muncher
O42 - Logiciel: Adobe Flash Player 20 NPAPI - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player NPAPI =>.Adobe Systems Incorporated®
O42 - Logiciel: Any Video Converter Professional 5.5.7 - (.Any-Video-Converter.com.) [HKLM] -- Any Video Converter Professional_is1
O42 - Logiciel: Any Video to DVD Converter and Burner 5.1.1.0 - (.TopVideoSoft,Inc..) [HKLM] -- {66712EEE-ECBC-4CA6-A475-any-video-to-dvd}_is1
O42 - Logiciel: Baidu Browser - (.Baidu Inc..) [HKLM] -- Spark =>.Baidu Inc.
O42 - Logiciel: cFosSpeed v10.10 - (.cFos Software GmbH, Bonn.) [HKLM] -- cFosSpeed =>.cFos Software GmbH, Bonn
O42 - Logiciel: Complément Office 2007 - Microsoft Enregistrer en tant que PDF ou XPS (Beta - (.Microsoft Corporation.) [HKLM] -- {30120000-00B2-040C-0000-0000000FF1CE} =>.Microsoft Corporation
O42 - Logiciel: Express Burn Disc Burning Software - (.NCH Software.) [HKLM] -- ExpressBurn =>.NCH Software
O42 - Logiciel: FIFA 11 - (.Electronic Arts.) [HKLM] -- {3FEA6CD1-EA13-4CE7-A74E-A74A4A0A7B5C} =>.Electronic Arts
O42 - Logiciel: Firefox Password Recovery Master 2.0 - (...) [HKLM] -- Firefox Password Recovery Master_is1
O42 - Logiciel: Flvto Youtube Downloader - (.Hotger.) [HKLM] -- Flvto Youtube Downloader =>.Hotger
O42 - Logiciel: Free Audio CD Burner version 2.0.32.1122 - (.DVDVideoSoft Ltd..) [HKLM] -- Free Audio CD Burner_is1 =>.DVDVideoSoft Ltd.
O42 - Logiciel: Internet Download Manager - (.Tonec Inc..) [HKLM] -- Internet Download Manager =>.Tonec Inc.
O42 - Logiciel: Java 8 Update 45 - (.Oracle Corporation.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83218045F0} =>.Oracle Corporation
O42 - Logiciel: Java Auto Updater - (.Oracle Corporation.) [HKLM] -- {4A03706F-666A-4037-7777-5F2748764D10} =>.Oracle Corporation
O42 - Logiciel: K-Lite Codec Pack 3.1.5 Full - (.KLTeam.) [HKLM] -- KLiteCodecPack_is1
O42 - Logiciel: Ma-Config.com - (.Cybelsoft.) [HKLM] -- {B4CB8D56-51E5-4A87-B901-8123ED990A8A} =>.CybelSoft
O42 - Logiciel: McAfee Security Scan Plus - (.McAfee, Inc..) [HKLM] -- McAfee Security Scan =>.McAfee, Inc.
O42 - Logiciel: MobiConnect - (.Huawei Technologies Co.,Ltd.) [HKLM] -- MobiConnect =>.Huawei Technologies Co.,Ltd
O42 - Logiciel: Mobiconnect - (.ZTE Corporation.) [HKLM] -- {A9E5EDA7-2E6C-49E7-924B-A32B89C24A04} =>.ZTE Corporation
O42 - Logiciel: Mozilla Firefox 45.0.1 (x86 en-US) - (.Mozilla.) [HKLM] -- Mozilla Firefox 45.0.1 (x86 en-US) =>.Mozilla
O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM] -- MozillaMaintenanceService =>.Mozilla
O42 - Logiciel: MP3 Audio Converter 4.00 - (...) [HKLM] -- MP3 Audio Converter_is1
O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {22B775E7-6C42-4FC5-8E10-9A5E3257BD94} =>.Microsoft
O42 - Logiciel: Nero 8 Micro 8.3.2.1 - (.Updatepack.nl.) [HKLM] -- Nero8Lite_is1
O42 - Logiciel: Package de pilotes Windows - Baidu.com (dg_usbccgp) USB (20/2/2014 2.9.50 - (.Baidu.com .) [HKLM] -- 0E63853950FE0489AF618977F04FF7C68AF95119
O42 - Logiciel: Package de pilotes Windows - Baidu.com (dg_usbccgp) USB (20/2/2014 2.9.50 - (.Baidu.com .) [HKLM] -- 324832392F691178AEC49DEC2EB3B1DE8C19FFBC
O42 - Logiciel: Package de pilotes Windows - Baidu.com (dg_usbccgp) USB (20/2/2014 2.9.50 - (.Baidu.com .) [HKLM] -- 36AAA11EBB931D3CD1533DEB4E8B6211B30D44F5
O42 - Logiciel: Package de pilotes Windows - Baidu.com (dg_usbccgp) USB (20/2/2014 2.9.50 - (.Baidu.com .) [HKLM] -- 8DDA20B1B74D115972FE9819CEC04FEE8DEF0CCD
O42 - Logiciel: Package de pilotes Windows - Baidu.com (dg_usbccgp) USB (20/2/2014 2.9.50 - (.Baidu.com .) [HKLM] -- B7E5B73AF9E802DFB0CCB4DCC81176B6ABF68D2A
O42 - Logiciel: Package de pilotes Windows - Baidu.com (dg_usbccgp) USB (20/2/2014 2.9.50 - (.Baidu.com .) [HKLM] -- C0D2F1EF9F2AAE90B758F65CE7733AA8B5DD6B63
O42 - Logiciel: Package de pilotes Windows - Baidu.com (dg_usbccgp) USB (20/2/2014 2.9.50 - (.Baidu.com .) [HKLM] -- DDB58EA97701F7F51A7D0BFA428F980766F04EE0
O42 - Logiciel: Package de pilotes Windows - Google, Inc. (WinUSB) AndroidUsbDeviceClass ( - (.Google, Inc..) [HKLM] -- 30B2813B1F17EF6D99360A190E7F0D3BA2F0DC3C =>.Google, Inc.
O42 - Logiciel: Password Recovery Bundle 2015 - (.Top Password Software, Inc..) [HKLM] -- Password Recovery Bundle 2015_is1 =>.Top Password Software, Inc.
O42 - Logiciel: PowerISO - (.Power Software Ltd.) [HKLM] -- PowerISO =>.Power Software Ltd
O42 - Logiciel: qksee - (.Taiwan Shui Mu Chih Ching Technology Limited.) [HKLM] -- qksee
O42 - Logiciel: Ralink RT3090 802.11b/g/n WiFi Adapter - (.Ralink.) [HKLM] -- {8FC4F1DD-F7FD-4766-804D-3C8FF1D309AF} =>.Ralink
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC} =>.Realtek Semiconductor Corp.
O42 - Logiciel: Smart File Advisor 1.1.8 - (.Filefacts.net.) [HKLM] -- Smart File Advisor_is1 =>.Filefacts.net
O42 - Logiciel: SpeedFan (remove only) - (...) [HKLM] -- SpeedFan
O42 - Logiciel: Stellar Phoenix Windows Data Recovery - Professional - (.Stellar Information Systems Ltd.) [HKLM] -- Stellar Phoenix Windows Data Recovery - Professional_is1 =>.Stellar Information Systems Ltd
O42 - Logiciel: UsbFix - (.El Desaparecido - www.usb-antivirus.com - www.sosvirus.net.) [HKLM] -- Usbfix
O42 - Logiciel: Vista Drive Indicator! - (.KelCorp.) [HKLM] -- VDrive =>.KelCorp
O42 - Logiciel: VLC media player - (.VideoLAN.) [HKLM] -- VLC media player =>.VideoLAN
O42 - Logiciel: WebFldrs XP - (.Microsoft Corporation.) [HKLM] -- {350C940c-3D7C-4EE8-BAA9-00BCB3D54227} =>.Microsoft Corporation
O42 - Logiciel: webssearches uninstall - (.webssearches.) [HKLM] -- webssearches uninstall =>PUP.Optional.WebsSearches
O42 - Logiciel: YAC(Yet Another Cleaner!) - (.ELEX DO BRASIL PARTICIPAÇÕES LTDA.) [HKLM] -- iSafe =>PUP.Optional.Elex
O42 - Logiciel: Youtube Downloader HD v. 2.9.9.27 - (.YoutubeDownloaderHD.com.) [HKLM] -- Youtube Downloader HD_is1 =>.YoutubeDownloaderHD.com

---\\ HKCU & HKLM Software Keys (170) - 24s
HKLM\SOFTWARE\7-Zip
HKLM\SOFTWARE\AdMuncher
HKLM\SOFTWARE\Ahead
HKLM\SOFTWARE\Alcohol Soft
HKLM\SOFTWARE\Alps
HKLM\SOFTWARE\AVAST Software
HKLM\SOFTWARE\Baidu
HKLM\SOFTWARE\Baidu Security
HKLM\SOFTWARE\Baidu_Drp_pos
HKLM\SOFTWARE\C07ft5Y
HKLM\SOFTWARE\cFos
HKLM\SOFTWARE\Codec tweak Tool
HKLM\SOFTWARE\cybelsoft
HKLM\SOFTWARE\CyberGhost
HKLM\SOFTWARE\Cyberlink
HKLM\SOFTWARE\Data Fellows
HKLM\SOFTWARE\delta-homesSoftware =>PUP.Optional.DeltaHomes
HKLM\SOFTWARE\DivXNetworks
HKLM\SOFTWARE\Doug
HKLM\SOFTWARE\DVDVideoSoft
HKLM\SOFTWARE\EA Games
HKLM\SOFTWARE\EA Sports
HKLM\SOFTWARE\Electronic Arts
HKLM\SOFTWARE\Elex-tech =>PUP.Optional.Elex
HKLM\SOFTWARE\Eset
HKLM\SOFTWARE\FFPluginHp =>PUP.Optional.SweetSearch
HKLM\SOFTWARE\Flvto Youtube Downloader
HKLM\SOFTWARE\FreeArc
HKLM\SOFTWARE\Gabest
HKLM\SOFTWARE\Gemplus
HKLM\SOFTWARE\GNU
HKLM\SOFTWARE\GoForFiles
HKLM\SOFTWARE\Google
HKLM\SOFTWARE\HaaliMkx
HKLM\SOFTWARE\hdcode
HKLM\SOFTWARE\Huawei technologies
HKLM\SOFTWARE\IHProtect =>PUP.Optional.AgentODR
HKLM\SOFTWARE\INTEL
HKLM\SOFTWARE\Internet Download Manager
HKLM\SOFTWARE\InterVideo
HKLM\SOFTWARE\IObit
HKLM\SOFTWARE\JavaSoft
HKLM\SOFTWARE\JreMetrics
HKLM\SOFTWARE\KasperskyLab
HKLM\SOFTWARE\KLCodecPack
HKLM\SOFTWARE\KRT settings
HKLM\SOFTWARE\Licenses
HKLM\SOFTWARE\Macromedia
HKLM\SOFTWARE\McAfee.com
HKLM\SOFTWARE\MimarSinan
HKLM\SOFTWARE\Mozilla
HKLM\SOFTWARE\mozilla.org
HKLM\SOFTWARE\MozillaPlugins
HKLM\SOFTWARE\NCH Software
HKLM\SOFTWARE\NCH Swift Sound
HKLM\SOFTWARE\Nero
HKLM\SOFTWARE\Nokia
HKLM\SOFTWARE\Nullsoft
HKLM\SOFTWARE\ODBC
HKLM\SOFTWARE\PowerISO
HKLM\SOFTWARE\Program Groups
HKLM\SOFTWARE\qksee
HKLM\SOFTWARE\qkseeSvc
HKLM\SOFTWARE\Ralink
HKLM\SOFTWARE\Realtek
HKLM\SOFTWARE\RegisteredApplications
HKLM\SOFTWARE\RollAround =>PUP.Optional.RollAround
HKLM\SOFTWARE\S3R521
HKLM\SOFTWARE\Schlumberger
HKLM\SOFTWARE\Secure
HKLM\SOFTWARE\Smart File Advisor
HKLM\SOFTWARE\SOSVirus
HKLM\SOFTWARE\SpeedFan
HKLM\SOFTWARE\Stellar information Systems ltd.
HKLM\SOFTWARE\SupDp =>PUP.Optional.SupTab
HKLM\SOFTWARE\supTab =>PUP.Optional.SupTab
HKLM\SOFTWARE\supWindowsMangerProtect =>PUP.Optional.WpManager
HKLM\SOFTWARE\TSv
HKLM\SOFTWARE\TuneUp
HKLM\SOFTWARE\VideoLAN
HKLM\SOFTWARE\webssearchesSoftware =>PUP.Optional.WebsSearches
HKLM\SOFTWARE\Windows 3.1 Migration Status
HKLM\SOFTWARE\WindowsDoctor
HKLM\SOFTWARE\WinRAR
HKLM\SOFTWARE\WiseCleaner
HKLM\SOFTWARE\Wondershare
HKLM\SOFTWARE\Wow6432Node
HKLM\SOFTWARE\ZTEUSBDriverFlag
HKCU\SOFTWARE\1ClickDownload =>PUP.Optional.1ClickDownloader
HKCU\SOFTWARE\3a6ad4c5-127f-4668-888b-e8e7a31031c2 =>PUP.Optional.CrossRider
HKCU\SOFTWARE\7-Zip
HKCU\SOFTWARE\AC3filter
HKCU\SOFTWARE\ACP
HKCU\SOFTWARE\Adobe
HKCU\SOFTWARE\Ahead
HKCU\SOFTWARE\Alcohol Soft
HKCU\SOFTWARE\Alps
HKCU\SOFTWARE\AnchorFree
HKCU\SOFTWARE\AnvSoft
HKCU\SOFTWARE\AppDataLow
HKCU\SOFTWARE\ApplianTechnologies
HKCU\SOFTWARE\Ares
HKCU\SOFTWARE\ASProtect
HKCU\SOFTWARE\Audacity
HKCU\SOFTWARE\Baidu
HKCU\SOFTWARE\Baidu Security
HKCU\SOFTWARE\Binary Noise
HKCU\SOFTWARE\cFos
HKCU\SOFTWARE\CoreVorbis
HKCU\SOFTWARE\cybelsoft
HKCU\SOFTWARE\Cyberlink
HKCU\SOFTWARE\DivXNetworks
HKCU\SOFTWARE\DownloadManager
HKCU\SOFTWARE\DVDVideoSoft
HKCU\SOFTWARE\EA Sports
HKCU\SOFTWARE\ExpressFiles =>PUP.Optional.ExpressFiles
HKCU\SOFTWARE\EZSoftMagic
HKCU\SOFTWARE\F-Secure Antibot
HKCU\SOFTWARE\FlvtoConverter
HKCU\SOFTWARE\Fobvexllmtqatp
HKCU\SOFTWARE\Gabest
HKCU\SOFTWARE\GNU
HKCU\SOFTWARE\GoforFiles
HKCU\SOFTWARE\GSpot Appliance Corp
HKCU\SOFTWARE\Haali
HKCU\SOFTWARE\hotger
HKCU\SOFTWARE\IM Providers
HKCU\SOFTWARE\Informer Technologies, Inc.
HKCU\SOFTWARE\Intel
HKCU\SOFTWARE\JavaSoft
HKCU\SOFTWARE\KasperskyLab
HKCU\SOFTWARE\KasperskyLabSetup
HKCU\SOFTWARE\Leadertech
HKCU\SOFTWARE\Licenses
HKCU\SOFTWARE\LSoft Technologies
HKCU\SOFTWARE\Macromedia
HKCU\SOFTWARE\McAfee
HKCU\SOFTWARE\Mozilla
HKCU\SOFTWARE\MozillaPlugins
HKCU\SOFTWARE\NCH Software
HKCU\SOFTWARE\NCH Swift Sound
HKCU\SOFTWARE\Nero
HKCU\SOFTWARE\Netscape
HKCU\SOFTWARE\NiXPS
HKCU\SOFTWARE\Nokia
HKCU\SOFTWARE\Opera Software
HKCU\SOFTWARE\Piriform
HKCU\SOFTWARE\PowerISO
HKCU\SOFTWARE\qksee
HKCU\SOFTWARE\Realtek
HKCU\SOFTWARE\RegisteredApplications
HKCU\SOFTWARE\Rixler Software
HKCU\SOFTWARE\SFX TEAM
HKCU\SOFTWARE\Skype
HKCU\SOFTWARE\Smart File Advisor
HKCU\SOFTWARE\Softonic =>.Superfluous.Softonic
HKCU\SOFTWARE\SpeedFan
HKCU\SOFTWARE\Stellar information Systems ltd.
HKCU\SOFTWARE\SupHpUISoft =>PUP.Optional.CrossRider
HKCU\SOFTWARE\sYk0
HKCU\SOFTWARE\Trolltech
HKCU\SOFTWARE\TuneUp
HKCU\SOFTWARE\UsbFix
HKCU\SOFTWARE\Valve
HKCU\SOFTWARE\VB and VBA Program Settings
HKCU\SOFTWARE\WinRAR
HKCU\SOFTWARE\WinRAR SFX
HKCU\SOFTWARE\Wow6432Node
HKCU\SOFTWARE\ZebHelpProcess Helper
HKCU\SOFTWARE\AppDataLow\Software

---\\ Contenu des dossiers Programmes (346) - 139s
O43 - CFD: 22/02/2015 - [] D -- C:\Program Files\4Musics WAV to MP3 Converter
O43 - CFD: 17/11/2014 - [] D -- C:\Program Files\7-Zip
O43 - CFD: 17/11/2014 - [] D -- C:\Program Files\ACD Systems
O43 - CFD: 06/07/2015 - [] D -- C:\Program Files\Ad Muncher
O43 - CFD: 23/10/2014 - [0] D -- C:\Program Files\Adanak =>PUP.Optional.Adanak
O43 - CFD: 07/04/2012 - [] D -- C:\Program Files\Adobe
O43 - CFD: 15/11/2015 - [] D -- C:\Program Files\Alcohol Soft
O43 - CFD: 13/05/2012 - [] D -- C:\Program Files\AML Products
O43 - CFD: 18/03/2014 - [] D -- C:\Program Files\AnvSoft
O43 - CFD: 07/11/2014 - [] D -- C:\Program Files\Any Video Converter
O43 - CFD: 30/11/2015 - [] D -- C:\Program Files\Any Video to DVD Converter and Burner
O43 - CFD: 11/10/2015 - [] D -- C:\Program Files\Apoint2K
O43 - CFD: 22/06/2011 - [] D -- C:\Program Files\Apple Software Update
O43 - CFD: 19/04/2011 - [] D -- C:\Program Files\Ares
O43 - CFD: 11/07/2014 - [] D -- C:\Program Files\AutoPass Full
O43 - CFD: 30/06/2014 - [] D -- C:\Program Files\AVG Secure Search
O43 - CFD: 08/04/2013 - [] D -- C:\Program Files\Avira
O43 - CFD: 13/05/2012 - [] D -- C:\Program Files\AviSynth 2.5
O43 - CFD: 08/03/2011 - [] D -- C:\Program Files\Babylon =>PUP.Optional.Babylon
O43 - CFD: 23/08/2015 - [] D -- C:\Program Files\baidu
O43 - CFD: 17/11/2014 - [] D -- C:\Program Files\Baidu Security
O43 - CFD: 12/08/2013 - [] D -- C:\Program Files\BinaryMark
O43 - CFD: 22/06/2011 - [] D -- C:\Program Files\Bonjour
O43 - CFD: 11/07/2014 - [0] D -- C:\Program Files\Camfrog
O43 - CFD: 17/10/2015 - [] D -- C:\Program Files\cFosSpeed
O43 - CFD: 18/09/2011 - [] D -- C:\Program Files\ChatVibes Toolbar
O43 - CFD: 14/03/2012 - [] D -- C:\Program Files\Complitly =>PUP.Optional.PredictAd
O43 - CFD: 20/01/2011 - [0] D -- C:\Program Files\ComPlus Applications
O43 - CFD: 14/03/2012 - [] D -- C:\Program Files\Conduit =>.Superfluous.Conduit
O43 - CFD: 11/10/2015 - [] D -- C:\Program Files\CyberGhost 5
O43 - CFD: 11/02/2012 - [] D -- C:\Program Files\DealBulldog Toolbar Toolbar =>PUP.Optional.SocialSkinz
O43 - CFD: 12/08/2013 - [] D -- C:\Program Files\Delta
O43 - CFD: 25/11/2014 - [] D -- C:\Program Files\DIFX
O43 - CFD: 29/06/2014 - [] D -- C:\Program Files\Driver 3
O43 - CFD: 25/11/2014 - [] D -- C:\Program Files\DVDVideoSoft
O43 - CFD: 07/07/2014 - [] D -- C:\Program Files\EA GAMES
O43 - CFD: 17/11/2014 - [] D -- C:\Program Files\EA Sports
O43 - CFD: 16/01/2012 - [] D -- C:\Program Files\Eidos Interactive
O43 - CFD: 06/05/2012 - [] D -- C:\Program Files\Electronic Arts
O43 - CFD: 24/03/2016 - [] D -- C:\Program Files\Elex-tech =>PUP.Optional.Elex
O43 - CFD: 16/04/2012 - [] D -- C:\Program Files\ExpressFiles =>PUP.Optional.ExpressFiles
O43 - CFD: 29/03/2012 - [] D -- C:\Program Files\Eziriz
O43 - CFD: 28/02/2015 - [] D -- C:\Program Files\Fichiers communs
O43 - CFD: 17/11/2014 - [] D -- C:\Program Files\FileZilla FTP Client
O43 - CFD: 24/03/2016 - [] D -- C:\Program Files\Firefox Password Recovery Master
O43 - CFD: 14/03/2012 - [] D -- C:\Program Files\flvto.com_Freecorder
O43 - CFD: 17/11/2014 - [] D -- C:\Program Files\Foxit Reader
O43 - CFD: 28/10/2014 - [] D -- C:\Program Files\Freecorder
O43 - CFD: 04/02/2016 - [] D -- C:\Program Files\Game
O43 - CFD: 28/05/2012 - [] D -- C:\Program Files\GGPO
O43 - CFD: 06/04/2012 - [] D -- C:\Program Files\Godlike Developers
O43 - CFD: 14/10/2014 - [] D -- C:\Program Files\GoForFiles =>PUP.Optional.YourFileDownloader
O43 - CFD: 29/06/2014 - [] D -- C:\Program Files\Grand Theft Auto San Andreas
O43 - CFD: 03/08/2014 - [0] D -- C:\Program Files\GUM54.tmp
O43 - CFD: 17/11/2014 - [] D -- C:\Program Files\HashTab Shell Extension
O43 - CFD: 28/07/2014 - [] D -- C:\Program Files\Hostless Modem
O43 - CFD: 20/01/2011 - [] D -- C:\Program Files\HPQ
O43 - CFD: 24/07/2012 - [] D -- C:\Program Files\HSPA USB Modem
O43 - CFD: 02/06/2011 - [] D -- C:\Program Files\iLike
O43 - CFD: 02/06/2011 - [] D -- C:\Program Files\Iminent =>PUP.Optional.IMBooster
O43 - CFD: 05/07/2011 - [] D -- C:\Program Files\IMinent Toolbar =>PUP.Optional.IMBooster
O43 - CFD: 03/03/2015 - [] HD -- C:\Program Files\InstallShield Installation Information
O43 - CFD: 20/01/2011 - [] D -- C:\Program Files\Intel
O43 - CFD: 16/10/2015 - [] D -- C:\Program Files\Internet Download Manager
O43 - CFD: 11/10/2015 - [] D -- C:\Program Files\Internet Explorer
O43 - CFD: 02/04/2012 - [] D -- C:\Program Files\IObit
O43 - CFD: 22/06/2011 - [] D -- C:\Program Files\iPod
O43 - CFD: 22/06/2011 - [] D -- C:\Program Files\iTunes
O43 - CFD: 06/07/2015 - [] D -- C:\Program Files\Java
O43 - CFD: 13/05/2012 - [] D -- C:\Program Files\K-Lite Codec Pack
O43 - CFD: 18/07/2012 - [] D -- C:\Program Files\King Of The Road
O43 - CFD: 15/01/2016 - [] D -- C:\Program Files\ma-config.com
O43 - CFD: 25/09/2015 - [] D -- C:\Program Files\McAfee Security Scan
O43 - CFD: 11/10/2015 - [] D -- C:\Program Files\Messenger
O43 - CFD: 26/12/2011 - [] D -- C:\Program Files\Messenger Plus! Live
O43 - CFD: 11/07/2014 - [] D -- C:\Program Files\Microsoft
O43 - CFD: 20/01/2011 - [] D -- C:\Program Files\microsoft frontpage
O43 - CFD: 17/11/2014 - [] D -- C:\Program Files\Microsoft Office =>.Microsoft Corporation®
O43 - CFD: 20/04/2011 - [] D -- C:\Program Files\Microsoft Office Outlook Connector
O43 - CFD: 18/03/2014 - [] D -- C:\Program Files\Microsoft Silverlight
O43 - CFD: 20/01/2011 - [] D -- C:\Program Files\Microsoft SQL Server Compact Edition
O43 - CFD: 20/04/2011 - [] D -- C:\Program Files\Microsoft Sync Framework
O43 - CFD: 20/01/2011 - [] D -- C:\Program Files\Microsoft Visual Studio
O43 - CFD: 20/04/2011 - [] D -- C:\Program Files\Microsoft Works
O43 - CFD: 04/02/2016 - [] D -- C:\Program Files\Microsoft.NET
O43 - CFD: 21/03/2016 - [] D -- C:\Program Files\MiuiTab =>PUP.Optional.MiuiTab
O43 - CFD: 03/03/2015 - [] D -- C:\Program Files\MobiConnect
O43 - CFD: 11/10/2015 - [] D -- C:\Program Files\Movie Maker
O43 - CFD: 20/03/2016 - [] D -- C:\Program Files\Mozilla Firefox
O43 - CFD: 20/03/2016 - [] D -- C:\Program Files\Mozilla Maintenance Service
O43 - CFD: 20/02/2015 - [] D -- C:\Program Files\MP3 Audio Converter
O43 - CFD: 20/01/2011 - [] D -- C:\Program Files\MSBuild
O43 - CFD: 14/10/2015 - [] D -- C:\Program Files\MSECache
O43 - CFD: 29/01/2011 - [] D -- C:\Program Files\MSN
O43 - CFD: 20/01/2011 - [] D -- C:\Program Files\MSN Gaming Zone
O43 - CFD: 19/03/2014 - [0] D -- C:\Program Files\MSXML 4.0
O43 - CFD: 25/11/2014 - [] D -- C:\Program Files\NCH Software
O43 - CFD: 08/02/2011 - [] D -- C:\Program Files\Neoact
O43 - CFD: 18/08/2014 - [] D -- C:\Program Files\Nero
O43 - CFD: 11/10/2015 - [] D -- C:\Program Files\NetMeeting
O43 - CFD: 18/03/2012 - [] D -- C:\Program Files\NewLive All Media To Mp3 Converter
O43 - CFD: 06/07/2015 - [] D -- C:\Program Files\NewSoftware's
O43 - CFD: 21/06/2011 - [0] D -- C:\Program Files\NirSoft
O43 - CFD: 17/07/2012 - [] D -- C:\Program Files\NiXPS
O43 - CFD: 17/03/2014 - [] D -- C:\Program Files\Nokia
O43 - CFD: 20/06/2011 - [0] D -- C:\Program Files\nonosa
O43 - CFD: 17/11/2014 - [] D -- C:\Program Files\Notepad++
O43 - CFD: 01/11/2014 - [] D -- C:\Program Files\Online Services
O43 - CFD: 09/02/2011 - [] D -- C:\Program Files\Open Sea Fishing
O43 - CFD: 12/09/2014 - [] D -- C:\Program Files\Opera
O43 - CFD: 17/11/2014 - [] D -- C:\Program Files\Orbitdownloader
O43 - CFD: 11/10/2015 - [] D -- C:\Program Files\Outlook Express
O43 - CFD: 17/03/2014 - [] D -- C:\Program Files\PC Connectivity Solution
O43 - CFD: 09/04/2011 - [] D -- C:\Program Files\Pcsx2
O43 - CFD: 15/03/2011 - [] D -- C:\Program Files\PhotoFiltre
O43 - CFD: 16/02/2016 - [] D -- C:\Program Files\PowerISO
O43 - CFD: 17/11/2014 - [] AD -- C:\Program Files\Process Explorer
O43 - CFD: 24/03/2016 - [] D -- C:\Program Files\qksee
O43 - CFD: 17/11/2014 - [] D -- C:\Program Files\QT Lite
O43 - CFD: 22/06/2011 - [] D -- C:\Program Files\QuickTime
O43 - CFD: 14/07/2014 - [] D -- C:\Program Files\Ralink
O43 - CFD: 17/11/2014 - [] D -- C:\Program Files\Real Alternative
O43 - CFD: 20/01/2011 - [] D -- C:\Program Files\Realtek
O43 - CFD: 25/04/2011 - [] D -- C:\Program Files\Reference Assemblies
O43 - CFD: 23/11/2014 - [] D -- C:\Program Files\ReviverSoft
O43 - CFD: 13/07/2015 - [] D -- C:\Program Files\Roll Around =>PUP.Optional.RollAround
O43 - CFD: 20/01/2011 - [] D -- C:\Program Files\Roxio
O43 - CFD: 17/07/2015 - [] D -- C:\Program Files\SecurityXploded
O43 - CFD: 20/01/2011 - [] D -- C:\Program Files\Services en ligne
O43 - CFD: 16/08/2012 - [] D -- C:\Program Files\Sketch Master
O43 - CFD: 19/03/2014 - [] RD -- C:\Program Files\Skype
O43 - CFD: 15/11/2015 - [] D -- C:\Program Files\Smart File Advisor =>.Superfluous.Totalpc
O43 - CFD: 11/07/2014 - [0] D -- C:\Program Files\softendo.com
O43 - CFD: 18/03/2014 - [] D -- C:\Program Files\Software Informer
O43 - CFD: 20/01/2011 - [] D -- C:\Program Files\Sonic
O43 - CFD: 08/02/2012 - [] D -- C:\Program Files\SpeedBit Video Accelerator
O43 - CFD: 28/10/2015 - [] D -- C:\Program Files\SpeedFan
O43 - CFD: 14/10/2014 - [] D -- C:\Program Files\Stellar Phoenix Windows Data Recovery
O43 - CFD: 17/11/2014 - [] D -- C:\Program Files\SuperCopier2
O43 - CFD: 04/02/2016 - [] D -- C:\Program Files\Support
O43 - CFD: 03/03/2015 - [] D -- C:\Program Files\SupportAppCB
O43 - CFD: 26/12/2011 - [] D -- C:\Program Files\SweetIM =>PUP.Optional.SweetIM
O43 - CFD: 10/01/2012 - [] D -- C:\Program Files\SYSTEM 2K+
O43 - CFD: 05/01/2016 - [] D -- C:\Program Files\Top Password
O43 - CFD: 18/04/2012 - [] D -- C:\Program Files\UltraISO
O43 - CFD: 26/12/2011 - [] D -- C:\Program Files\Uniblue =>.Superfluous.Uniblue
O43 - CFD: 20/01/2011 - [0] HD -- C:\Program Files\Uninstall Information
O43 - CFD: 20/01/2011 - [] D -- C:\Program Files\USB Disk Security
O43 - CFD: 18/08/2014 - [] D -- C:\Program Files\VideoLAN
O43 - CFD: 04/09/2011 - [] D -- C:\Program Files\VirtualDJ
O43 - CFD: 14/05/2012 - [] D -- C:\Program Files\Webteh
O43 - CFD: 30/01/2011 - [] D -- C:\Program Files\Winamp
O43 - CFD: 30/01/2011 - [] D -- C:\Program Files\Winamp Detect
O43 - CFD: 04/02/2016 - [] D -- C:\Program Files\Windows Doctor
O43 - CFD: 12/01/2012 - [] D -- C:\Program Files\Windows Live =>.Microsoft Corporation®
O43 - CFD: 18/08/2014 - [] D -- C:\Program Files\Windows Live SkyDrive
O43 - CFD: 17/11/2014 - [] D -- C:\Program Files\Windows Media Connect 2
O43 - CFD: 11/10/2015 - [] D -- C:\Program Files\Windows Media Player
O43 - CFD: 11/10/2015 - [] D -- C:\Program Files\Windows NT
O43 - CFD: 20/01/2011 - [0] HD -- C:\Program Files\WindowsUpdate
O43 - CFD: 20/02/2015 - [] D -- C:\Program Files\WinRAR
O43 - CFD: 20/01/2011 - [] D -- C:\Program Files\xerox
O43 - CFD: 14/04/2011 - [] D -- C:\Program Files\Xilisoft
O43 - CFD: 10/04/2015 - [] AD -- C:\Program Files\XYplorer
O43 - CFD: 08/02/2016 - [] D -- C:\Program Files\Youtube Downloader HD
O43 - CFD: 01/05/2011 - [] D -- C:\Program Files\Yuna Software
O43 - CFD: 13/07/2014 - [0] D -- C:\Program Files\ZvjIBLItz§Ï¼Ïdlpfvcrw.exe
O43 - CFD: 16/03/2016 - [] D -- C:\Documents and Settings\All Users.WINDOWS.0\Menu Démarrer\Programmes\.NET Reactor
O43 - CFD: 04/02/2016 - [] D -- C:\Documents and Settings\All Users.WINDOWS.0\Menu Démarrer\Programmes\2014-15 patch for FIFA 11
O43 - CFD: 22/02/2015 - [] D -- C:\Documents and Settings\All Users.WINDOWS.0\Menu Démarrer\Programmes\4Musics WAV to MP3 Converter
O43 - CFD: 11/12/2015 - [] D -- C:\Documents and Settings\All Users.WINDOWS.0\Menu Démarrer\Programmes\7-Zip
O43 - CFD: 11/10/2015 - [] RD -- C:\Documents and Settings\All Users.WINDOWS.0\Menu Démarrer\Programmes\Accessoires
O43 - CFD: 06/07/2015 - [] D -- C:\Documents and Settings\All Users.WINDOWS.0\Menu Démarrer\Programmes\Ad Muncher
O43 - CFD: 15/11/2015 - [] D -- C:\Documents and Settings\All Users.WINDOWS.0\Menu Démarrer\Programmes\Alcohol 120%
O43 - CFD: 16/05/2015 - [] D -- C:\Documents and Settings\All Users.WINDOWS.0\Menu Démarrer\Programmes\AnvSoft
O43 - CFD: 30/11/2015 - [] D -- C:\Documents and Settings\All Users.WINDOWS.0\Menu Démarrer\Programmes\Any Video to DVD Converter and Burner
O43 - CFD: 25/11/2014 - [] D -- C:\Documents and Settings\All Users.WINDOWS.0\Menu Démarrer\Programmes\Audio Related Programs
O43 - CFD: 07/02/2015 - [] D -- C:\Documents and Settings\All Users.WINDOWS.0\Menu Démarrer\Programmes\Baidu Browser
O43 - CFD: 25/11/2014 - [] D -- C:\Documents and Settings\All Users.WINDOWS.0\Menu Démarrer\Programmes\DVDVideoSoft
O43 - CFD: 20/03/2016 - [] RD -- C:\Documents and Settings\All Users.WINDOWS.0\Menu Démarrer\Programmes\Démarrage
O43 - CFD: 11/12/2015 - [] D -- C:\Documents and Settings\All Users.WINDOWS.0\Menu Démarrer\Programmes\EA Sports
O43 - CFD: 24/03/2016 - [] D -- C:\Documents and Settings\All Users.WINDOWS.0\Menu Démarrer\Programmes\Firefox Password Recovery Master
O43 - CFD: 26/10/2014 - [] D -- C:\Documents and Settings\All Users.WINDOWS.0\Menu Démarrer\Programmes\Internet Download Manager
O43 - CFD: 23/11/2014 - [] D -- C:\Documents and Settings\All Users.WINDOWS.0\Menu Démarrer\Programmes\Java
O43 - CFD: 18/08/2014 - [] RD -- C:\Documents and Settings\All Users.WINDOWS.0\Menu Démarrer\Programmes\Jeux
O43 - CFD: 18/08/2014 - [] D -- C:\Documents and Settings\All Users.WINDOWS.0\Menu Démarrer\Programmes\K-Lite Codec Pack
O43 - CFD: 15/01/2016 - [] D -- C:\Documents and Settings\All Users.WINDOWS.0\Menu Démarrer\Programmes\ma-config.com
O43 - CFD: 25/09/2015 - [] D -- C:\Documents and Settings\All Users.WINDOWS.0\Menu Démarrer\Programmes\McAfee Security Scan Plus
O43 - CFD: 18/08/2014 - [] D -- C:\Documents and Settings\All Users.WINDOWS.0\Menu Démarrer\Programmes\MobiConnect
O43 - CFD: 19/11/2014 - [] D -- C:\Documents and Settings\All Users.WINDOWS.0\Menu Démarrer\Programmes\Mozilla Firefox
O43 - CFD: 25/11/2014 - [] D -- C:\Documents and Settings\All Users.WINDOWS.0\Menu Démarrer\Programmes\MP3 Audio Converter
O43 - CFD: 25/11/2014 - [] D -- C:\Documents and Settings\All Users.WINDOWS.0\Menu Démarrer\Programmes\NCH Software Suite
O43 - CFD: 18/08/2014 - [] D -- C:\Documents and Settings\All Users.WINDOWS.0\Menu Démarrer\Programmes\Nero
O43 - CFD: 11/10/2015 - [] RD -- C:\Documents and Settings\All Users.WINDOWS.0\Menu Démarrer\Programmes\Outils d'administration
O43 - CFD: 06/07/2015 - [] D -- C:\Documents and Settings\All Users.WINDOWS.0\Menu Démarrer\Programmes\Password Recovery Bundle 2015
O43 - CFD: 16/02/2016 - [] D -- C:\Documents and Settings\All Users.WINDOWS.0\Menu Démarrer\Programmes\PowerISO
O43 - CFD: 21/03/2016 - [] D -- C:\Documents and Settings\All Users.WINDOWS.0\Menu Démarrer\Programmes\qksee
O43 - CFD: 17/10/2015 - [] D -- C:\Documents and Settings\All Users.WINDOWS.0\Menu Démarrer\Programmes\Régulation dynamique de flux réseau (Traffic Shaping) de cFosSpeed
O43 - CFD: 15/11/2015 - [] D -- C:\Documents and Settings\All Users.WINDOWS.0\Menu Démarrer\Programmes\Smart File Advisor =>.Superfluous.Totalpc
O43 - CFD: 14/10/2014 - [] D -- C:\Documents and Settings\All Users.WINDOWS.0\Menu Démarrer\Programmes\Stellar Phoenix Windows Data Recovery - Professional
O43 - CFD: 23/04/2015 - [] D -- C:\Documents and Settings\All Users.WINDOWS.0\Menu Démarrer\Programmes\VideoLAN
O43 - CFD: 18/08/2014 - [] D -- C:\Documents and Settings\All Users.WINDOWS.0\Menu Démarrer\Programmes\Windows Live
O43 - CFD: 03/07/2014 - [] D -- C:\Documents and Settings\All Users.WINDOWS.0\Menu Démarrer\Programmes\WinRAR
O43 - CFD: 08/02/2016 - [] D -- C:\Documents and Settings\All Users.WINDOWS.0\Menu Démarrer\Programmes\Youtube Downloader HD
O43 - CFD: 06/11/2015 - [] D -- C:\Documents and Settings\All Users.WINDOWS.0\Application Data\2a617352-d396-46a3-a71b-5d89535356cf
O43 - CFD: 06/07/2015 - [] D -- C:\Documents and Settings\All Users.WINDOWS.0\Application Data\Ad Muncher
O43 - CFD: 25/09/2014 - [] D -- C:\Documents and Settings\All Users.WINDOWS.0\Application Data\AVAST Software
O43 - CFD: 07/02/2015 - [] D -- C:\Documents and Settings\All Users.WINDOWS.0\Application Data\Baidu
O43 - CFD: 17/11/2014 - [] D -- C:\Documents and Settings\All Users.WINDOWS.0\Application Data\Baidu Security
O43 - CFD: 17/10/2015 - [] D -- C:\Documents and Settings\All Users.WINDOWS.0\Application Data\cFos
O43 - CFD: 14/10/2014 - [] HD -- C:\Documents and Settings\All Users.WINDOWS.0\Application Data\Common Files
O43 - CFD: 07/11/2014 - [] D -- C:\Documents and Settings\All Users.WINDOWS.0\Application Data\DatacardService
O43 - CFD: 23/08/2014 - [] D -- C:\Documents and Settings\All Users.WINDOWS.0\Application Data\Electronic Arts
O43 - CFD: 05/10/2015 - [] D -- C:\Documents and Settings\All Users.WINDOWS.0\Application Data\F-Secure
O43 - CFD: 06/10/2015 - [] D -- C:\Documents and Settings\All Users.WINDOWS.0\Application Data\hsswpr
O43 - CFD: 03/07/2014 - [0] D -- C:\Documents and Settings\All Users.WINDOWS.0\Application Data\IDM
O43 - CFD: 09/10/2015 - [] D -- C:\Documents and Settings\All Users.WINDOWS.0\Application Data\IePluginServices =>Trojan.SProtector
O43 - CFD: 12/06/2015 - [] D -- C:\Documents and Settings\All Users.WINDOWS.0\Application Data\IHProtectUpDate =>PUP.Optional.AgentODR
O43 - CFD: 04/07/2014 - [] D -- C:\Documents and Settings\All Users.WINDOWS.0\Application Data\Informer Technologies, Inc
O43 - CFD: 04/07/2014 - [] D -- C:\Documents and Settings\All Users.WINDOWS.0\Application Data\IObit
O43 - CFD: 18/09/2014 - [] D -- C:\Documents and Settings\All Users.WINDOWS.0\Application Data\log
O43 - CFD: 15/01/2016 - [] D -- C:\Documents and Settings\All Users.WINDOWS.0\Application Data\ma-config.com
O43 - CFD: 06/07/2015 - [] D -- C:\Documents and Settings\All Users.WINDOWS.0\Application Data\McAfee
O43 - CFD: 06/07/2015 - [] D -- C:\Documents and Settings\All Users.WINDOWS.0\Application Data\McAfee Security Scan
O43 - CFD: 30/12/2015 - [] SD -- C:\Documents and Settings\All Users.WINDOWS.0\Application Data\Microsoft
O43 - CFD: 18/08/2014 - [] D -- C:\Documents and Settings\All Users.WINDOWS.0\Application Data\MobiConnect
O43 - CFD: 21/08/2014 - [] D -- C:\Documents and Settings\All Users.WINDOWS.0\Application Data\Mozilla
O43 - CFD: 25/11/2014 - [] D -- C:\Documents and Settings\All Users.WINDOWS.0\Application Data\NCH Software
O43 - CFD: 18/08/2014 - [] D -- C:\Documents and Settings\All Users.WINDOWS.0\Application Data\Nero
O43 - CFD: 22/11/2014 - [] D -- C:\Documents and Settings\All Users.WINDOWS.0\Application Data\Office Genuine Advantage
O43 - CFD: 18/09/2014 - [] D -- C:\Documents and Settings\All Users.WINDOWS.0\Application Data\OnlineUpdate
O43 - CFD: 06/07/2015 - [] D -- C:\Documents and Settings\All Users.WINDOWS.0\Application Data\Oracle
O43 - CFD: 29/06/2014 - [0] D -- C:\Documents and Settings\All Users.WINDOWS.0\Application Data\Package Cache
O43 - CFD: 14/07/2014 - [] D -- C:\Documents and Settings\All Users.WINDOWS.0\Application Data\Ralink Driver
O43 - CFD: 23/11/2014 - [] D -- C:\Documents and Settings\All Users.WINDOWS.0\Application Data\ReviverSoft
O43 - CFD: 23/11/2014 - [] D -- C:\Documents and Settings\All Users.WINDOWS.0\Application Data\Sun
O43 - CFD: 14/10/2014 - [0] AD -- C:\Documents and Settings\All Users.WINDOWS.0\Application Data\TEMP
O43 - CFD: 17/03/2016 - [] D -- C:\Documents and Settings\All Users.WINDOWS.0\Application Data\TuneUp Software
O43 - CFD: 21/03/2016 - [] D -- C:\Documents and Settings\All Users.WINDOWS.0\Application Data\tWdMt =>PUP.Optional.WdsManPro
O43 - CFD: 19/11/2014 - [] D -- C:\Documents and Settings\All Users.WINDOWS.0\Application Data\Windows Genuine Advantage
O43 - CFD: 22/12/2014 - [] D -- C:\Documents and Settings\All Users.WINDOWS.0\Application Data\WindowsMangerProtect =>PUP.Optional.WpManager
O43 - CFD: 16/03/2016 - [] SHD -- C:\Documents and Settings\All Users.WINDOWS.0\Application Data\{32364CEA-7855-4A3C-B674-53D8E9B97936}
O43 - CFD: 16/03/2016 - [] HDC -- C:\Documents and Settings\All Users.WINDOWS.0\Application Data\{F7F9C4CA-5C13-4DF8-8814-05CD03655F11}
O43 - CFD: 14/10/2014 - [] SHD -- C:\Documents and Settings\All Users.WINDOWS.0\Application Data\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
O43 - CFD: 06/11/2015 - [] D -- C:\Program Files\Fichiers communs\2a617352-d396-46a3-a71b-5d89535356cf
O43 - CFD: 17/11/2014 - [] D -- C:\Program Files\Fichiers communs\ACD Systems
O43 - CFD: 14/03/2012 - [] D -- C:\Program Files\Fichiers communs\Adobe
O43 - CFD: 07/04/2012 - [] D -- C:\Program Files\Fichiers communs\Adobe AIR
O43 - CFD: 22/06/2011 - [] D -- C:\Program Files\Fichiers communs\Apple
O43 - CFD: 18/03/2014 - [] D -- C:\Program Files\Fichiers communs\AVG Secure Search
O43 - CFD: 02/06/2014 - [] D -- C:\Program Files\Fichiers communs\DESIGNER
O43 - CFD: 01/02/2011 - [] D -- C:\Program Files\Fichiers communs\DirectX
O43 - CFD: 25/11/2014 - [] D -- C:\Program Files\Fichiers communs\DVDVideoSoft
O43 - CFD: 18/04/2012 - [] D -- C:\Program Files\Fichiers communs\EZB Systems
O43 - CFD: 11/07/2014 - [] D -- C:\Program Files\Fichiers communs\InstallShield
O43 - CFD: 02/08/2013 - [] D -- C:\Program Files\Fichiers communs\Java
O43 - CFD: 17/11/2014 - [] D -- C:\Program Files\Fichiers communs\Microsoft Shared
O43 - CFD: 20/01/2011 - [] D -- C:\Program Files\Fichiers communs\MSSoap
O43 - CFD: 18/08/2014 - [] D -- C:\Program Files\Fichiers communs\Nero
O43 - CFD: 17/03/2014 - [] D -- C:\Program Files\Fichiers communs\Nokia
O43 - CFD: 20/01/2011 - [] D -- C:\Program Files\Fichiers communs\ODBC
O43 - CFD: 17/11/2014 - [] D -- C:\Program Files\Fichiers communs\Services
O43 - CFD: 19/03/2014 - [] D -- C:\Program Files\Fichiers communs\Skype
O43 - CFD: 20/01/2011 - [] D -- C:\Program Files\Fichiers communs\Sonic Shared
O43 - CFD: 20/01/2011 - [] D -- C:\Program Files\Fichiers communs\SpeechEngines
O43 - CFD: 20/01/2011 - [] D -- C:\Program Files\Fichiers communs\SureThing Shared
O43 - CFD: 17/11/2014 - [] D -- C:\Program Files\Fichiers communs\System
O43 - CFD: 20/01/2011 - [] D -- C:\Program Files\Fichiers communs\TiVo Shared
O43 - CFD: 26/12/2011 - [] D -- C:\Program Files\Fichiers communs\Web Solution Mart
O43 - CFD: 20/01/2011 - [] D -- C:\Program Files\Fichiers communs\Windows Live
O43 - CFD: 14/10/2014 - [0] D -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Application Data\337Games
O43 - CFD: 03/07/2014 - [] D -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Application Data\Adobe
O43 - CFD: 04/07/2014 - [] D -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Application Data\AnvSoft
O43 - CFD: 07/11/2014 - [] D -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Application Data\Any Video Converter
O43 - CFD: 30/11/2015 - [] D -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Application Data\any-video-to-dvd-converter-and-burner
O43 - CFD: 07/10/2015 - [] D -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Application Data\baidu
O43 - CFD: 24/03/2016 - [] D -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Application Data\DMCache
O43 - CFD: 07/11/2014 - [] D -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Application Data\dvdcss
O43 - CFD: 25/11/2014 - [] D -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Application Data\DVDVideoSoft
O43 - CFD: 21/03/2016 - [0] D -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Application Data\eCyber =>PUP.Optional.Elex
O43 - CFD: 24/03/2016 - [] D -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Application Data\Elex-tech =>PUP.Optional.Elex
O43 - CFD: 04/07/2014 - [0] D -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Application Data\ExpressFiles =>PUP.Optional.ExpressFiles
O43 - CFD: 23/11/2014 - [] D -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Application Data\FlvtoConverter
O43 - CFD: 14/10/2014 - [] D -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Application Data\GoforFiles =>PUP.Optional.YourFileDownloader
O43 - CFD: 16/11/2014 - [] D -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Application Data\Google
O43 - CFD: 16/11/2014 - [0] D -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Application Data\Help
O43 - CFD: 06/10/2015 - [] D -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Application Data\Hotspot Shield
O43 - CFD: 18/08/2014 - [] D -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Application Data\Identities
O43 - CFD: 16/11/2015 - [] D -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Application Data\IDM
O43 - CFD: 14/07/2014 - [] D -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Application Data\InstallShield
O43 - CFD: 04/07/2014 - [] D -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Application Data\IObit
O43 - CFD: 14/11/2014 - [] D -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Application Data\Leadertech
O43 - CFD: 07/09/2014 - [] D -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Application Data\Macromedia
O43 - CFD: 29/03/2015 - [] D -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Application Data\Media Player Classic
O43 - CFD: 17/11/2014 - [] SD -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Application Data\Microsoft
O43 - CFD: 21/08/2014 - [] D -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Application Data\Mozilla
O43 - CFD: 28/08/2014 - [] D -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Application Data\Nero
O43 - CFD: 03/07/2014 - [] D -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Application Data\NiXPS
O43 - CFD: 21/08/2014 - [] D -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Application Data\Opera
O43 - CFD: 11/12/2015 - [] D -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Application Data\Oracle
O43 - CFD: 22/08/2014 - [] D -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Application Data\PhotoFiltre
O43 - CFD: 16/02/2016 - [] D -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Application Data\PowerISO
O43 - CFD: 24/03/2016 - [] D -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Application Data\qksee
O43 - CFD: 28/02/2015 - [] D -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Application Data\RHEng =>.Superfluous.Conduit
O43 - CFD: 04/02/2016 - [] RHD -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Application Data\SecuROM
O43 - CFD: 26/07/2015 - [] D -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Application Data\Skype
O43 - CFD: 04/07/2014 - [] D -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Application Data\Software Informer
O43 - CFD: 23/11/2014 - [] D -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Application Data\Sun
O43 - CFD: 14/10/2014 - [0] D -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Application Data\SupTab =>PUP.Optional.SupTab
O43 - CFD: 21/03/2016 - [] D -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Application Data\TSv =>PUP.Optional.Elex
O43 - CFD: 16/03/2016 - [] D -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Application Data\TuneUp Software
O43 - CFD: 23/03/2016 - [] D -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Application Data\vlc
O43 - CFD: 17/11/2014 - [] D -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Application Data\webssearches =>PUP.Optional.WebsSearches
O43 - CFD: 14/01/2015 - [] D -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Application Data\Winamp
O43 - CFD: 03/07/2014 - [] D -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Application Data\WinRAR
O43 - CFD: 15/03/2016 - [] D -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Application Data\Youtube Downloader HD
O43 - CFD: 25/03/2016 - [] D -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Application Data\ZHP
O43 - CFD: 06/07/2015 - [] D -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Local Settings\Application Data\Adobe
O43 - CFD: 17/11/2014 - [] D -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Local Settings\Application Data\ApplicationHistory
O43 - CFD: 14/10/2015 - [] D -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Local Settings\Application Data\Ares
O43 - CFD: 17/10/2015 - [] D -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Local Settings\Application Data\cFos
O43 - CFD: 23/11/2014 - [] D -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Local Settings\Application Data\Facebook
O43 - CFD: 06/10/2015 - [] D -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Local Settings\Application Data\FLVService
O43 - CFD: 24/09/2015 - [] D -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Local Settings\Application Data\Flvto Youtube Downloader
O43 - CFD: 06/10/2015 - [] D -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Local Settings\Application Data\Geckofx
O43 - CFD: 16/11/2014 - [] D -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Local Settings\Application Data\Help
O43 - CFD: 23/11/2014 - [] D -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Local Settings\Application Data\Hotger
O43 - CFD: 23/08/2014 - [] D -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Local Settings\Application Data\Identities
O43 - CFD: 29/07/2015 - [] D -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Local Settings\Application Data\Inverse_Karma
O43 - CFD: 16/03/2016 - [] SD -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Local Settings\Application Data\Microsoft
O43 - CFD: 21/08/2014 - [] D -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Local Settings\Application Data\Mozilla
O43 - CFD: 04/03/2016 - [] D -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Local Settings\Application Data\Nokia
O43 - CFD: 04/03/2016 - [0] D -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Local Settings\Application Data\NokiaAccount
O43 - CFD: 21/08/2014 - [] D -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Local Settings\Application Data\Opera
O43 - CFD: 15/11/2014 - [] D -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Local Settings\Application Data\PCHealth
O43 - CFD: 16/03/2016 - [] D -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Local Settings\Application Data\SkinSoft
O43 - CFD: 23/11/2014 - [] D -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Local Settings\Application Data\Sun
O43 - CFD: 16/11/2014 - [] D -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Local Settings\Application Data\Temp
O43 - CFD: 14/10/2014 - [] D -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Local Settings\Application Data\TuneUp Software
O43 - CFD: 18/08/2014 - [] RD -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Menu Démarrer\Programmes\Accessoires
O43 - CFD: 13/07/2014 - [] RD -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Menu Démarrer\Programmes\Démarrage
O43 - CFD: 01/05/2015 - [] D -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Menu Démarrer\Programmes\Flvto Youtube Downloader
O43 - CFD: 26/10/2014 - [] D -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Menu Démarrer\Programmes\Internet Download Manager
O43 - CFD: 21/12/2014 - [] RD -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Menu Démarrer\Programmes\Outils d'administration
O43 - CFD: 27/10/2015 - [] D -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Menu Démarrer\Programmes\SpeedFan
O43 - CFD: 03/07/2014 - [] D -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Menu Démarrer\Programmes\WinRAR

---\\ Derniers fichiers créés dans Windows Prefetcher (1) - 9s
O45 - LFCP:[MD5.45465C2BBA55CED4E156ACBFF6C01DE4] 21/03/2016 A -- C:\WINDOWS.0\Prefetch\REGCUREPROSETUP_F4AD4EF4-EED6-1205DB78.pf =>.Superfluous.Paretologic

---\\ ShellIconOverlayIdentifiers (SIOI) (2) - 0s
O106 - SIOI: Offline Files Menu [Fichiers hors connexion] - {750fdf0e-2a26-11d1-a3ea-080036587f03}. (.Microsoft Corporation - IU de cache côté client.) -- C:\WINDOWS.0\system32\cscui.dll =>.Microsoft Corporation
O106 - SIOI: IDM Shell Extension [IDM Shell Extension] - {CDC95B92-E27C-4745-A8C5-64A52A78855D}. (.Tonec Inc. - Internet Download Manager module.) -- C:\Program Files\Internet Download Manager\IDMShellExt.dll =>.Tonec Inc.®

---\\ Enumération des clés StartupReg (23) - 2s
O53 - SMSR:HKLM\...\startupreg\Ad Muncher [Key] . (.Murray Hurps Software Pty Ltd - Ad Muncher.) -- C:\Program Files\Ad Muncher\AdMunch.exe =>.Murray Hurps Software Pty Ltd
O53 - SMSR:HKLM\...\startupreg\AlcoholAutomount [Key] . (.Alcohol Soft Development Team - Alcohol Virtual Drive Auto-mount Service.) -- C:\Program Files\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe
O53 - SMSR:HKLM\...\startupreg\AntiWormUpdate [Key] . (.AutoIt Team - AutoIt v3 Script.) -- C:\Google\AutoIt3.exe =>.AutoIt Team
O53 - SMSR:HKLM\...\startupreg\Apoint [Key] . (.Alps Electric Co., Ltd. - Alps Pointing-device Driver.) -- C:\Program Files\Apoint2K\Apoint.exe =>.Alps Electric Co., Ltd.
O53 - SMSR:HKLM\...\startupreg\ares [Key] . (.Ares Development Group - Ares p2p for windows.) -- C:\Program Files\Ares\Ares.exe
O53 - SMSR:HKLM\...\startupreg\CancelAutoPlay_byt [Key] . (...) -- C:\Program Files\Mobiconnect\CancelAutoPlay_byt.exe
O53 - SMSR:HKLM\...\startupreg\cFosSpeed [Key] . (.cFos Software GmbH - cFosSpeed Window.) -- C:\Program Files\cFosSpeed\cFosSpeed.exe
O53 - SMSR:HKLM\...\startupreg\ctfmon.exe [Key] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS.0\system32\ctfmon.exe =>.Microsoft Corporation
O53 - SMSR:HKLM\...\startupreg\Freecorder FLV Service [Key] . (.Applian Technologies, Inc. - FLV Service for Freecorder.) -- C:\Program Files\Freecorder\FLVSrvc.exe
O53 - SMSR:HKLM\...\startupreg\HotKeysCmds [Key] . (.Intel Corporation - hkcmd Module.) -- C:\WINDOWS.0\system32\hkcmd.exe =>.Intel Corporation
O53 - SMSR:HKLM\...\startupreg\IDMan [Key] . (.Tonec Inc. - Internet Download Manager (IDM).) -- C:\Program Files\Internet Download Manager\IDMan.exe =>.Tonec Inc.
O53 - SMSR:HKLM\...\startupreg\IgfxTray [Key] . (.Intel Corporation - igfxTray Module.) -- C:\WINDOWS.0\system32\igfxtray.exe =>.Intel Corporation
O53 - SMSR:HKLM\...\startupreg\MSMSGS [Key] . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe =>.Microsoft Corporation
O53 - SMSR:HKLM\...\startupreg\NokiaSuite.exe [Key] . (.Nokia - Nokia Suite.) -- C:\Program Files\Nokia\Nokia Suite\NokiaSuite.exe =>.Nokia
O53 - SMSR:HKLM\...\startupreg\Persistence [Key] . (.Intel Corporation - persistence Module.) -- C:\WINDOWS.0\system32\igfxpers.exe =>.Intel Corporation
O53 - SMSR:HKLM\...\startupreg\PWRISOVM.EXE [Key] . (.Power Software Ltd - PowerISO Virtual Drive Manager.) -- C:\Program Files\PowerISO\PWRISOVM.EXE =>.Power Software Ltd
O53 - SMSR:HKLM\...\startupreg\RTHDCPL [Key] . (.Realtek Semiconductor Corp. - Realtek HD Audio Control Panel.) -- RTHDCPL.EXE (.not file.) =>.Realtek Semiconductor Corp.
O53 - SMSR:HKLM\...\startupreg\SFAUpdater [Key] . (.Filefacts.net - Smart File Advisor.) -- C:\Program Files\Smart File Advisor\SFAUpdater.exe =>.Filefacts.net =>.Superfluous.Totalpc
O53 - SMSR:HKLM\...\startupreg\Smart File Advisor [Key] . (.Filefacts.net - Smart File Advisor.) -- C:\Program Files\Smart File Advisor\sfa.exe =>.Filefacts.net =>.Superfluous.Totalpc
O53 - SMSR:HKLM\...\startupreg\SunJavaUpdateSched [Key] . (.Oracle Corporation - Java Update Scheduler.) -- C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe =>.Oracle Corporation
O53 - SMSR:HKLM\...\startupreg\UIExec [Key] . (...) -- C:\Program Files\Mobiconnect\UIExec.exe
O53 - SMSR:HKLM\...\startupreg\VistaDrive [Key] . (...) -- C:\WINDOWS.0\VistaDrive\VistaDrive.exe
O53 - SMSR:HKLM\...\startupreg\WinampAgent [Key] . (.Nullsoft, Inc. - Winamp Agent.) -- C:\Program Files\Winamp\winampa.exe =>.Nullsoft, Inc.

---\\ Liste des pilotes du système (64) - 12s
O58 - SDL:2008/10/30 15:05:12 A . (.Advanced Micro Devices, Inc. - AMD Win2000 AGP Filter.) -- C:\WINDOWS.0\System32\drivers\amdagp.sys [43008] =>.Advanced Micro Devices, Inc.
O58 - SDL:2008/06/02 00:08:32 A . (.Alps Electric Co., Ltd. - Alps Pointing-device Driver.) -- C:\WINDOWS.0\System32\drivers\Apfiltr.sys [101833] =>.Alps Electric Co., Ltd.
O58 - SDL:2002/07/17 09:05:10 A . (.Adaptec - ASPI for WIN32 Kernel Driver.) -- C:\WINDOWS.0\System32\drivers\ASPI32.SYS [16512] =>.Adaptec
O58 - SDL:2014/03/11 04:14:02 A . (.Baidu, Inc. - Baidu Antivirus Hook Base.) -- C:\WINDOWS.0\System32\drivers\Bhbase.sys [47456] =>.Baidu Online Network Technology (Beijing)Co., Ltd®
O58 - SDL:2015/09/09 16:42:26 A . (.cFos Software GmbH - cFosSpeed Driver.) -- C:\WINDOWS.0\System32\drivers\cfosspeed.sys [1395112] {112197A57D474DC4BAF80DE77A350780D798}
O58 - SDL:2008/04/14 13:00:00 A . (.RAVISENT Technologies Inc. - Pilote principal CineMaster C 1.2 WDM.) -- C:\WINDOWS.0\System32\drivers\cinemst2.sys [262528] =>.RAVISENT Technologies Inc.
O58 - SDL:2008/04/14 13:00:00 A . (.Compaq Computer Corporation - Compaq PA-1 Player Driver.) -- C:\WINDOWS.0\System32\drivers\cpqdap01.sys [11776] =>.Compaq Computer Corporation
O58 - SDL:2008/04/14 13:00:00 A . (.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disq.) -- C:\WINDOWS.0\System32\drivers\dmboot.sys [800256] =>.Microsoft Corp., Veritas Software
O58 - SDL:2008/04/14 13:00:00 A . (.Microsoft Corp., Veritas Software - Pilote E/S du Gestionnaire de disques NT.) -- C:\WINDOWS.0\System32\drivers\dmio.sys [154496] =>.Microsoft Corp., Veritas Software
O58 - SDL:2008/04/14 13:00:00 A . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS.0\System32\drivers\dmload.sys [5888] =>.Microsoft Corp., Veritas Software.
O58 - SDL:2010/10/08 09:55:06 A . (.Huawei Tech. Co., Ltd. - HUAWEI USB Smart Card Driver.) -- C:\WINDOWS.0\System32\drivers\ewdcsc.sys [25856] =>.Huawei Tech. Co., Ltd.
O58 - SDL:2011/08/16 10:17:19 A . (.Huawei Technologies Co., Ltd. - USB Modem/Serial Device Driver.) -- C:\WINDOWS.0\System32\drivers\ewusbmdm.sys [195200] =>.Huawei Technologies Co., Ltd.
O58 - SDL:2011/08/16 10:18:27 A . (.Huawei Technologies Co., Ltd. - USB NDIS Miniport Driver.) -- C:\WINDOWS.0\System32\drivers\ewusbnet.sys [239104] =>.Huawei Technologies Co., Ltd.
O58 - SDL:2010/09/26 11:09:22 A . (.Huawei Technologies Co., Ltd. - ew_hwupgrade Driver.) -- C:\WINDOWS.0\System32\drivers\ew_hwupgrade.sys [19200] =>.Huawei Technologies Co., Ltd.
O58 - SDL:2010/07/27 02:52:02 A . (.Huawei Technologies Co., Ltd. - USB Modem/Serial Device Driver.) -- C:\WINDOWS.0\System32\drivers\ew_hwusbdev.sys [102784] =>.Huawei Technologies Co., Ltd.
O58 - SDL:2011/09/09 04:50:09 A . (.Huawei Technologies Co., Ltd. - ew_jubusenum Driver.) -- C:\WINDOWS.0\System32\drivers\ew_jubusenum.sys [73984] =>.Huawei Technologies Co., Ltd.
O58 - SDL:2011/09/09 04:50:09 A . (.Huawei Technologies Co., Ltd. - ew_jucdcacm Driver.) -- C:\WINDOWS.0\System32\drivers\ew_jucdcacm.sys [89856] =>.Huawei Technologies Co., Ltd.
O58 - SDL:2011/09/09 04:50:09 A . (.Huawei Technologies Co., Ltd. - ew_jucdcndis Driver.) -- C:\WINDOWS.0\System32\drivers\ew_jucdcecm.sys [66688] =>.Huawei Technologies Co., Ltd.
O58 - SDL:2011/09/09 04:50:10 A . (.Huawei Technologies Co., Ltd. - ew_juextctrl Driver.) -- C:\WINDOWS.0\System32\drivers\ew_juextctrl.sys [26624] =>.Huawei Technologies Co., Ltd.
O58 - SDL:2010/03/20 05:06:58 A . (.Huawei Technologies Co., Ltd. - Filter Driver.) -- C:\WINDOWS.0\System32\drivers\ew_usbenumfilter.sys [11136] =>.Huawei Technologies Co., Ltd.
O58 - SDL:2008/04/14 13:00:00 A . (.Windows (R) Server 2003 DDK provider - High Definition Audio Bus Driver v1.0a.) -- C:\WINDOWS.0\System32\drivers\hdaudbus.sys [144384]
O58 - SDL:2009/03/27 14:01:22 A . (.Intel Corporation - Intel Matrix Storage Manager driver - ia32.) -- C:\WINDOWS.0\System32\drivers\iaStor.sys [312344] =>.Intel Corporation®
O58 - SDL:2013/11/28 01:24:18 A . (.Tonec Inc. - Internet Download Manager TDI Driver.) -- C:\WINDOWS.0\System32\drivers\idmtdi.sys [121184] =>.Tonec Inc.®
O58 - SDL:2009/03/27 14:04:30 A . (.Intel Corporation - Intel Graphics Miniport Driver.) -- C:\WINDOWS.0\System32\drivers\igxpmp32.sys [6048768] =>.Intel Corporation
O58 - SDL:2015/08/19 08:02:05 A . (.Elex do Brasil Participações Ltda - iSafe Kernel Boot Driver.) -- C:\WINDOWS.0\System32\drivers\iSafeKrnlBoot.sys [50280] =>PUP.Optional.Elex
O58 - SDL:2016/02/19 04:21:03 A . (.Elex do Brasil Participações Ltda - iSafeNetFilter SDK TDI Hook Driver (WPP).) -- C:\WINDOWS.0\System32\drivers\iSafeNetFilter.sys [67288] =>PUP.Optional.Elex
O58 - SDL:2011/08/29 11:42:56 A . (.MBB Incorporated - CDROM Filter.) -- C:\WINDOWS.0\System32\drivers\massfilter.sys [9216] =>.MBB Incorporated
O58 - SDL:2010/08/06 00:42:34 A . (.DiBcom SA - DiBcom AVSTREAM BDA driver.) -- C:\WINDOWS.0\System32\drivers\mod7700.sys [861696]
O58 - SDL:2008/04/14 13:00:00 A . (.S3/Diamond Multimedia Systems - NikeDrv Usb Driver.) -- C:\WINDOWS.0\System32\drivers\nikedrv.sys [12032] =>.S3/Diamond Multimedia Systems
O58 - SDL:2008/04/14 13:00:00 A . (.Parallel Technologies, Inc. - Parallel Technologies DirectParallel IO Lib.) -- C:\WINDOWS.0\System32\drivers\ptilink.sys [17792] =>.Parallel Technologies, Inc.
O58 - SDL:2008/04/14 13:00:00 A . (.S3/Diamond Multimedia Systems - Rio8Drv.sys Usb Driver.) -- C:\WINDOWS.0\System32\drivers\rio8drv.sys [12032] =>.S3/Diamond Multimedia Systems
O58 - SDL:2008/04/14 13:00:00 A . (.S3/Diamond Multimedia Systems - RioDrv Usb Driver.) -- C:\WINDOWS.0\System32\drivers\riodrv.sys [12032] =>.S3/Diamond Multimedia Systems
O58 - SDL:2012/03/07 17:08:52 A . (.Ralink Technology, Corp. - Ralink 802.11 Wireless Adapter Driver.) -- C:\WINDOWS.0\System32\drivers\rt2860.sys [2687552] =>.Ralink Technology Corporation®
O58 - SDL:2009/03/27 14:18:46 A . (.Realtek Semiconductor Corporation - Realtek 10/100/1000 NDIS 5.1 Driver.) -- C:\WINDOWS.0\System32\drivers\Rtenicxp.sys [117888] =>.Realtek Semiconductor Corporation
O58 - SDL:2013/12/10 21:20:44 A . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function D.) -- C:\WINDOWS.0\System32\drivers\RtkHDAud.sys [5630168] =>.Realtek Semiconductor Corp®
O58 - SDL:2015/10/08 08:00:30 A . (.Power Software Ltd - PowerISO Virtual Drive.) -- C:\WINDOWS.0\System32\drivers\scdemu.sys [114368] =>.Power Software Limited®
O58 - SDL:2008/04/14 13:00:00 A . (.Macrovision Corporation, Macrovision Europe Limited, - Macrovision SECURITY Driver.) -- C:\WINDOWS.0\System32\drivers\secdrv.sys [20480] =>.Macrovision Corporation, Macrovision Europe Limited,
O58 - SDL:2008/10/30 14:27:10 A . (.Silicon Image, Inc - SATA Controller miniport driver.) -- C:\WINDOWS.0\System32\drivers\si3531.sys [210736] =>.Silicon Image, Inc.®
O58 - SDL:2008/10/30 15:05:12 A . (.Silicon Integrated Systems Corporation - SiS NT AGP Filter.) -- C:\WINDOWS.0\System32\drivers\sisagp.sys [40960] =>.Silicon Integrated Systems Corporation
O58 - SDL:2015/11/15 13:59:01 A . (.Duplex Secure Ltd. - SCSI Pass Through Direct Host.) -- C:\WINDOWS.0\System32\drivers\sptd.sys [329384] =>.Disc Soft Ltd®
O58 - SDL:2013/08/22 13:40:22 A . (.The OpenVPN Project - TAP-Windows Virtual Network Driver.) -- C:\WINDOWS.0\System32\drivers\tap0901.sys [35288] =>.OpenVPN Technologies, Inc.®
O58 - SDL:2008/04/14 13:00:00 A . (.Toshiba Corporation - WDM Toshiba Tecra Video Capture Driver.) -- C:\WINDOWS.0\System32\drivers\tsbvcap.sys [21376] =>.Toshiba Corporation
O58 - SDL:2007/11/01 18:53:20 A . (.Eugene V. Muzychenko - Kernel-mode WDM driver.) -- C:\WINDOWS.0\System32\drivers\vacs2xkd.sys [42880] =>.Eugene V. Muzychenko
O58 - SDL:2008/04/14 13:00:00 A . (.RAVISENT Technologies Inc. - CineMaster C WDM DVD Minidriver.) -- C:\WINDOWS.0\System32\drivers\vdmindvd.sys [58112] =>.RAVISENT Technologies Inc.
O58 - SDL:2011/08/29 11:42:56 A . (.ZTE Incorporated - ZTE Incorporated.) -- C:\WINDOWS.0\System32\drivers\ZTEusbmdm6k.sys [107520] =>.ZTE Incorporated
O58 - SDL:2011/08/29 11:42:56 A . (.ZTE Incorporated - ZTE Incorporated.) -- C:\WINDOWS.0\System32\drivers\ZTEusbnmea.sys [107520] =>.ZTE Incorporated
O58 - SDL:2011/08/29 11:42:56 A . (.ZTE Incorporated - ZTE Incorporated.) -- C:\WINDOWS.0\System32\drivers\ZTEusbser6k.sys [107520] =>.ZTE Incorporated
O58 - SDL:2008/04/14 13:00:00 A . (...) -- C:\WINDOWS.0\System32\ansi.sys [9037]
O58 - SDL:2008/04/14 13:00:00 A . (...) -- C:\WINDOWS.0\System32\country.sys [27097]
O58 - SDL:1996/04/03 20:33:26 A . (...) -- C:\WINDOWS.0\System32\giveio.sys [5248]
O58 - SDL:2008/04/14 13:00:00 A . (...) -- C:\WINDOWS.0\System32\himem.sys [4912]
O58 - SDL:2008/04/14 13:00:00 A . (...) -- C:\WINDOWS.0\System32\key01.sys [42809]
O58 - SDL:2008/04/14 13:00:00 A . (...) -- C:\WINDOWS.0\System32\keyboard.sys [42537]
O58 - SDL:2008/04/14 13:00:00 A . (...) -- C:\WINDOWS.0\System32\ntdos.sys [27916]
O58 - SDL:2008/04/14 13:00:00 A . (...) -- C:\WINDOWS.0\System32\ntdos404.sys [29146]
O58 - SDL:2008/04/14 13:00:00 A . (...) -- C:\WINDOWS.0\System32\ntdos411.sys [29370]
O58 - SDL:2008/04/14 13:00:00 A . (...) -- C:\WINDOWS.0\System32\ntdos412.sys [29274]
O58 - SDL:2008/04/14 13:00:00 A . (...) -- C:\WINDOWS.0\System32\ntdos804.sys [29146]
O58 - SDL:2008/04/14 13:00:00 A . (...) -- C:\WINDOWS.0\System32\ntio.sys [34000]
O58 - SDL:2008/04/14 13:00:00 A . (...) -- C:\WINDOWS.0\System32\ntio404.sys [34560]
O58 - SDL:2008/04/14 13:00:00 A . (...) -- C:\WINDOWS.0\System32\ntio411.sys [35648]
O58 - SDL:2008/04/14 13:00:00 A . (...) -- C:\WINDOWS.0\System32\ntio412.sys [35424]
O58 - SDL:2008/04/14 13:00:00 A . (...) -- C:\WINDOWS.0\System32\ntio804.sys [34560]
O58 - SDL:2012/12/29 21:59:38 A . (.Almico Software - SpeedFan x32 Driver.) -- C:\WINDOWS.0\System32\speedfan.sys [24184] =>.SOKNO S.R.L.®

---\\ Derniers fichiers modifiés ou crées (Utilisateur) (3) - 69s
O61 - LFC: 2016/03/21 00:04:23 A . (..) -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Mes documents\Downloads\Programs\RegCureProSetup_F4AD4EF4-EED6-4905-A38C-EC60B601D948_.exe [10966280] =>.Superfluous.Paretologic
O61 - LFC: 2016/03/24 03:10:30 A . (.equal max.) -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Application Data\qksee\update\qks_update_v3.2.0.exe [365176] =>.Superfluous.WinZipper
O61 - LFC: 2016/03/21 00:17:02 A . (..) -- C:\Documents and Settings\Administrateur.EDITION_TWINS\Application Data\IDM\DwnlData\Administrateur\KVRT_1203\KVRT.exe [3578986]

---\\ Associations Shell Spawning (10) - 0s
O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS.0\system32\shell32.dll =>.Microsoft Corporation
O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Copyright (C) 2011 - spark.) -- C:\Program Files\baidu\Spark\spark.exe
O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft (R) Windows Based Script Host.) -- C:\WINDOWS.0\system32\wscript.exe =>.Microsoft Corporation
O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\WINDOWS.0\regedit.exe =>.Microsoft Corporation
O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S
O67 - Shell Spawning: <.html> [HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®

---\\ Menu de démarrage Internet (14) - 1s
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Copyright (C) 2011 - spark.) -- c:\program files\baidu\spark\spark.exe
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- c:\program files\mozilla firefox\firefox.exe =>.Mozilla Corporation®
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- c:\program files\internet explorer\iexplore.exe =>.Microsoft Corporation
O68 - StartMenuInternet: <>[HKLM\..\Shell\open\Command] (.Opera Software - Opera Internet Browser.) -- c:\program files\opera\opera.exe =>.Opera Software
O68 - StartMenuInternet: <>[HKLM\..\Shell\open\Command] (.Copyright (C) 2011 - spark.) -- c:\program files\baidu\spark\spark.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Copyright (C) 2011 - spark.) -- C:\Program Files\baidu\Spark\spark.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe =>.Mozilla Corporation
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - Windows NT User Data Migration Tool.) -- C:\WINDOWS.0\system32\shmgrate.exe =>.Microsoft Corporation
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Copyright (C) 2011 - spark.) -- C:\Program Files\baidu\Spark\spark.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe =>.Mozilla Corporation
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - Windows NT User Data Migration Tool.) -- C:\WINDOWS.0\system32\shmgrate.exe =>.Microsoft Corporation
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Copyright (C) 2011 - spark.) -- C:\Program Files\baidu\Spark\spark.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe =>.Mozilla Corporation
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - Windows NT User Data Migration Tool.) -- C:\WINDOWS.0\system32\shmgrate.exe =>.Microsoft Corporation

---\\ Recherche d'infection sur les navigateurs (13) - 8s
O69 - SBI: prefs.js [Administrateur - 8qj5rm9o.default-1435582655953] user_pref("browser.newtab.url", "http://www.yoursites123.com/newtab/?type=nt&ts=1458590004&z=21e223b3f0c97db3c281da1g7zccaefozzjck[...] =>PUP.Optional.YourSites123
O69 - SBI: prefs.js [Administrateur - 8qj5rm9o.default-1435582655953] user_pref("browser.startup.homepage", "http://www.yoursites123.com/?type=hp&ts=1458590004&z=21e223b3f0c97db3c281da1g7zccaefozzjckt[...] =>PUP.Optional.YourSites123
O69 - SBI: prefs.js [Administrateur - 8qj5rm9o.default-1435582655953] user_pref("extensions.RollAround.cg", "1f404763-5b31-4c10-a381-dd4ac202d45e"); =>PUP.Optional.RollAround
O69 - SBI: prefs.js [Administrateur - 8qj5rm9o.default-1435582655953] user_pref("keyword.URL", "http://searchinterneat-a.akamaihd.net/s?eq=U0EeE1xZE1oZB1ZEfQheVQlFFgMQbQxaUghcFVYScBRZUgFADFFHdFhbUwlDR[...] =>PUP.Optional.Browser
O69 - SBI: SearchScopes [HKCU] OldSearch - (Google) - http://do-search.com/ =>PUP.Optional.DoSearches
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - http://do-search.com/ =>PUP.Optional.DoSearches
O69 - SBI: SearchScopes [HKCU] {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} - (Default) - http://searchinterneat-a.akamaihd.net/ =>PUP.Optional.Browser
O69 - SBI: SearchScopes [HKCU] {33BB0A4E-99AF-4226-BDF6-49120163DE86} [DefaultScope] - (yoursites123) - http://yoursites123.com/ =>PUP.Optional.YourSites123
O69 - SBI: SearchScopes [HKCU] {4FC1B895-E129-4345-B101-CF4EF5EF80C8} - (Default) - http://searchinterneat-a.akamaihd.net/ =>PUP.Optional.Browser
O69 - SBI: SearchScopes [HKCU] {E733165D-CBCF-4FDA-883E-ADEF965B476C} - (Google) - http://do-search.com/ =>PUP.Optional.DoSearches
O69 - SBI: SearchScopes [HKLM] OldSearch - (@ieframe.dll,-12512) - http://search.live.com/
O69 - SBI: SearchScopes [HKLM] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (Default) - http://searchinterneat-a.akamaihd.net/ =>PUP.Optional.Browser
O69 - SBI: SearchScopes [HKLM] {33BB0A4E-99AF-4226-BDF6-49120163DE86} - (webssearches) - http://istart.webssearches.com/ =>PUP.Optional.IsStart

---\\ Enumère les services démarrés par Svchost (39) - 1s
O83 - Search Svchost Services: AppMgmt (AppMgmt) . (.Microsoft Corporation - Service Installation de logiciels.) -- C:\WINDOWS.0\system32\appmgmts.dll [176640] =>.Microsoft Corporation
O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Windows Audio Service.) -- C:\WINDOWS.0\system32\audiosrv.dll [42496] =>.Microsoft Corporation
O83 - Search Svchost Services: Browser (Browser) . (.Microsoft Corporation - Computer Browser Service DLL.) -- C:\WINDOWS.0\system32\browser.dll [77824] =>.Microsoft Corporation
O83 - Search Svchost Services: CryptSvc (CryptSvc) . (.Microsoft Corporation - Cryptographic Services.) -- C:\WINDOWS.0\system32\cryptsvc.dll [62464] =>.Microsoft Corporation
O83 - Search Svchost Services: DMServer (DMServer) . (.Microsoft Corp. - DLL Service gestionnaire de disque logique.) -- C:\WINDOWS.0\system32\dmserver.dll [24576] =>.Microsoft Corp.
O83 - Search Svchost Services: DHCP (DHCP) . (.Microsoft Corporation - Service client DHCP.) -- C:\WINDOWS.0\system32\dhcpcsvc.dll [127488] =>.Microsoft Corporation
O83 - Search Svchost Services: ERSvc (ERSvc) . (.Microsoft Corporation - Windows Error Reporting Service.) -- C:\WINDOWS.0\system32\ersvc.dll [23040] =>.Microsoft Corporation
O83 - Search Svchost Services: EventSystem (EventSystem) . (.Microsoft Corporation - .) -- C:\WINDOWS.0\system32\es.dll [246272] =>.Microsoft Corporation
O83 - Search Svchost Services: FastUserSwitchingCompatibility (FastUserSwitchingCompatibility) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS.0\system32\shsvcs.dll [135680] =>.Microsoft Corporation
O83 - Search Svchost Services: HidServ (HidServ) . (...) -- C:\WINDOWS.0\System32\hidserv.dll [0]
O83 - Search Svchost Services: LanmanServer (LanmanServer) . (.Microsoft Corporation - Server Service DLL.) -- C:\WINDOWS.0\system32\srvsvc.dll [96768] =>.Microsoft Corporation
O83 - Search Svchost Services: LanmanWorkstation (LanmanWorkstation) . (.Microsoft Corporation - Workstation Service DLL.) -- C:\WINDOWS.0\system32\wkssvc.dll [132096] =>.Microsoft Corporation
O83 - Search Svchost Services: Messenger (Messenger) . (.Microsoft Corporation - NT Messenger Service.) -- C:\WINDOWS.0\system32\msgsvc.dll [33792] =>.Microsoft Corporation
O83 - Search Svchost Services: Netman (Netman) . (.Microsoft Corporation - Gestionnaire de connexions réseau.) -- C:\WINDOWS.0\system32\netman.dll [198144] =>.Microsoft Corporation
O83 - Search Svchost Services: Nla (Nla) . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Micro.) -- C:\WINDOWS.0\system32\mswsock.dll [247808] =>.Microsoft Corporation
O83 - Search Svchost Services: Ntmssvc (Ntmssvc) . (.Microsoft Corporation - Gestionnaire de stockage amovible.) -- C:\WINDOWS.0\system32\ntmssvc.dll [438272] =>.Microsoft Corporation
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Remote Access AutoDial Manager.) -- C:\WINDOWS.0\system32\rasauto.dll [88576] =>.Microsoft Corporation
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Remote Access Connection Manager.) -- C:\WINDOWS.0\system32\rasmans.dll [186368] =>.Microsoft Corporation
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Dynamic Interface Manager.) -- C:\WINDOWS.0\system32\mprdim.dll [53248] =>.Microsoft Corporation
O83 - Search Svchost Services: Schedule (Schedule) . (.Microsoft Corporation - Moteur du Planificateur de tâches.) -- C:\WINDOWS.0\system32\schedsvc.dll [194560] =>.Microsoft Corporation
O83 - Search Svchost Services: Seclogon (Seclogon) . (.Microsoft Corporation - DLL de service d'ouverture de session secon.) -- C:\WINDOWS.0\system32\seclogon.dll [18944] =>.Microsoft Corporation
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - System Event Notification Service (SENS).) -- C:\WINDOWS.0\system32\sens.dll [39424] =>.Microsoft Corporation
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l'application d'assistance à.) -- C:\WINDOWS.0\system32\ipnathlp.dll [332800] =>.Microsoft Corporation
O83 - Search Svchost Services: SRService (SRService) . (.Microsoft Corporation - Service de restauration du système.) -- C:\WINDOWS.0\system32\srsvc.dll [171520] =>.Microsoft Corporation
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM.) -- C:\WINDOWS.0\system32\tapisrv.dll [249856] =>.Microsoft Corporation
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS.0\system32\shsvcs.dll [135680] =>.Microsoft Corporation
O83 - Search Svchost Services: TrkWks (TrkWks) . (.Microsoft Corporation - Distributed Link Tracking Client.) -- C:\WINDOWS.0\system32\trkwks.dll [90112] =>.Microsoft Corporation
O83 - Search Svchost Services: W32Time (W32Time) . (.Microsoft Corporation - Service de temps Windows.) -- C:\WINDOWS.0\system32\w32time.dll [178176] =>.Microsoft Corporation
O83 - Search Svchost Services: WZCSVC (WZCSVC) . (.Microsoft Corporation - Service configuration automatique sans fil.) -- C:\WINDOWS.0\system32\wzcsvc.dll [483840] =>.Microsoft Corporation
O83 - Search Svchost Services: Wmi (Wmi) . (.Microsoft Corporation - API avancées Windows 32.) -- C:\WINDOWS.0\system32\advapi32.dll [685568] =>.Microsoft Corporation
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\WINDOWS.0\system32\wbem\wmisvc.dll [145408] =>.Microsoft Corporation
O83 - Search Svchost Services: wscsvc (wscsvc) . (.Microsoft Corporation - Windows Security Center Service.) -- C:\WINDOWS.0\system32\wscsvc.dll [80896] =>.Microsoft Corporation
O83 - Search Svchost Services: xmlprov (xmlprov) . (.Microsoft Corporation - Network Provisioning Service.) -- C:\WINDOWS.0\system32\xmlprov.dll [129024] =>.Microsoft Corporation
O83 - Search Svchost Services: napagent (napagent) . (.Microsoft Corporation - Exécution du service Agent de quarantaine.) -- C:\WINDOWS.0\system32\qagentrt.dll [293376] =>.Microsoft Corporation
O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\WINDOWS.0\system32\kmsvc.dll [61440] =>.Microsoft Corporation
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière.) -- C:\WINDOWS.0\system32\qmgr.dll [409088] =>.Microsoft Corporation
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Windows Update AutoUpdate Service.) -- C:\WINDOWS.0\system32\wuauserv.dll [6656] =>.Microsoft Corporation
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS.0\system32\shsvcs.dll [135680] =>.Microsoft Corporation
O83 - Search Svchost Services: helpsvc (helpsvc) . (.Microsoft Corporation - Microsoft PCHealth Service Holder.) -- C:\WINDOWS.0\PCHealth\HelpCtr\Binaries\pchsvc.dll [38400] =>.Microsoft Corporation

---\\ Scan Additionnel (69) - 0s
HKLM\SYSTEM\CurrentControlSet\Services\IHProtect Service =>PUP.Optional.AgentODR
C:\Program Files\MiuiTab\ProtectService.exe =>PUP.Optional.AgentODR
HKLM\SYSTEM\CurrentControlSet\Services\WdMan =>PUP.Optional.WdsManPro
C:\Documents and Settings\All Users.WINDOWS.0\Application Data\tWdMt\WdMan.exe =>PUP.Optional.WdsManPro
C:\WINDOWS.0\Temp\winbjbvs.exe =>Heuristic.Suspect
C:\WINDOWS.0\Temp\winwcav.exe =>Heuristic.Suspect
C:\WINDOWS.0\Temp\winsjlgr.exe =>Heuristic.Suspect
C:\Program Files\MiuiTab\ProtectService.exe =>PUP.Optional.MiuiTab
C:\Documents and Settings\Administrateur.EDITION_TWINS\Application Data\Mozilla\Firefox\Profiles\8qj5rm9o.default-1435582655953\searchplugins\yahoo.xml =>PUP.Optional.BDYahoo
C:\Documents and Settings\Administrateur.EDITION_TWINS\Application Data\Mozilla\Firefox\Profiles\8qj5rm9o.default-1435582655953\searchplugins\yoursites123.xml =>PUP.Optional.YourSites123
C:\Program Files\Mozilla Firefox\browser\searchplugins\webssearches.xml =>PUP.Optional.WebsSearches
C:\Documents and Settings\Administrateur.EDITION_TWINS\Application Data\Mozilla\Firefox\Profiles\8qj5rm9o.default-1435582655953\extensions\default_newtabff@gmail.com =>PUP.Optional.LightningNewTab
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{83c0e288-8fa0-43d3-acc7-c1e839d85abc} =>PUP.Optional.RollAround
HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\webssearches uninstall =>PUP.Optional.WebsSearches
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\webssearches uninstall =>PUP.Optional.WebsSearches
HKLM\SOFTWARE\delta-homesSoftware =>PUP.Optional.DeltaHomes
HKLM\SOFTWARE\Elex-tech =>PUP.Optional.Elex
HKLM\SOFTWARE\FFPluginHp =>PUP.Optional.SweetSearch
HKLM\SOFTWARE\IHProtect =>PUP.Optional.AgentODR
HKLM\SOFTWARE\RollAround =>PUP.Optional.RollAround
HKLM\SOFTWARE\SupDp =>PUP.Optional.SupTab
HKLM\SOFTWARE\supTab =>PUP.Optional.SupTab
HKLM\SOFTWARE\supWindowsMangerProtect =>PUP.Optional.WpManager
HKLM\SOFTWARE\webssearchesSoftware =>PUP.Optional.WebsSearches
HKCU\SOFTWARE\1ClickDownload =>PUP.Optional.1ClickDownloader
HKCU\SOFTWARE\3a6ad4c5-127f-4668-888b-e8e7a31031c2 =>PUP.Optional.CrossRider
HKCU\SOFTWARE\ExpressFiles =>PUP.Optional.ExpressFiles
HKCU\SOFTWARE\Softonic =>.Superfluous.Softonic
HKCU\SOFTWARE\SupHpUISoft =>PUP.Optional.CrossRider
C:\Program Files\Adanak =>PUP.Optional.Adanak
C:\Program Files\Babylon =>PUP.Optional.Babylon
C:\Program Files\Complitly =>PUP.Optional.PredictAd
C:\Program Files\Conduit =>.Superfluous.Conduit
C:\Program Files\DealBulldog Toolbar Toolbar =>PUP.Optional.SocialSkinz
C:\Program Files\ExpressFiles =>PUP.Optional.ExpressFiles
C:\Program Files\GoForFiles =>PUP.Optional.YourFileDownloader
C:\Program Files\Iminent =>PUP.Optional.IMBooster
C:\Program Files\IMinent Toolbar =>PUP.Optional.IMBooster
C:\Program Files\MiuiTab =>PUP.Optional.MiuiTab
C:\Program Files\Roll Around =>PUP.Optional.RollAround
C:\Program Files\Smart File Advisor =>.Superfluous.Totalpc
C:\Program Files\SweetIM =>PUP.Optional.SweetIM
C:\Program Files\Uniblue =>.Superfluous.Uniblue
C:\Documents and Settings\All Users.WINDOWS.0\Menu Démarrer\Programmes\Smart File Advisor =>.Superfluous.Totalpc
C:\Documents and Settings\All Users.WINDOWS.0\Application Data\IePluginServices =>Trojan.SProtector
C:\Documents and Settings\All Users.WINDOWS.0\Application Data\IHProtectUpDate =>PUP.Optional.AgentODR
C:\Documents and Settings\All Users.WINDOWS.0\Application Data\tWdMt =>PUP.Optional.WdsManPro
C:\Documents and Settings\All Users.WINDOWS.0\Application Data\WindowsMangerProtect =>PUP.Optional.WpManager
C:\Documents and Settings\Administrateur.EDITION_TWINS\Application Data\eCyber =>PUP.Optional.Elex
C:\Documents and Settings\Administrateur.EDITION_TWINS\Application Data\Elex-tech =>PUP.Optional.Elex
C:\Documents and Settings\Administrateur.EDITION_TWINS\Application Data\ExpressFiles =>PUP.Optional.ExpressFiles
C:\Documents and Settings\Administrateur.EDITION_TWINS\Application Data\GoforFiles =>PUP.Optional.YourFileDownloader
C:\Documents and Settings\Administrateur.EDITION_TWINS\Application Data\RHEng =>.Superfluous.Conduit
C:\Documents and Settings\Administrateur.EDITION_TWINS\Application Data\SupTab =>PUP.Optional.SupTab
C:\Documents and Settings\Administrateur.EDITION_TWINS\Application Data\TSv =>PUP.Optional.Elex
C:\Documents and Settings\Administrateur.EDITION_TWINS\Application Data\webssearches =>PUP.Optional.WebsSearches
C:\WINDOWS.0\Prefetch\REGCUREPROSETUP_F4AD4EF4-EED6-1205DB78.pf =>.Superfluous.Paretologic
C:\Program Files\Smart File Advisor\SFAUpdater.exe =>.Superfluous.Totalpc
C:\Program Files\Smart File Advisor\sfa.exe =>.Superfluous.Totalpc
C:\Documents and Settings\Administrateur.EDITION_TWINS\Mes documents\Downloads\Programs\RegCureProSetup_F4AD4EF4-EED6-4905-A38C-EC60B601D948_.exe =>.Superfluous.Paretologic
C:\Documents and Settings\Administrateur.EDITION_TWINS\Application Data\qksee\update\qks_update_v3.2.0.exe =>.Superfluous.WinZipper
HKCU\Software\Microsoft\Internet Explorer\SearchScopes\OldSearch =>PUP.Optional.DoSearches
HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} =>PUP.Optional.DoSearches
HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} =>PUP.Optional.Browser
HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} =>PUP.Optional.YourSites123
HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{4FC1B895-E129-4345-B101-CF4EF5EF80C8} =>PUP.Optional.Browser
HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{E733165D-CBCF-4FDA-883E-ADEF965B476C} =>PUP.Optional.DoSearches
HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} =>PUP.Optional.Browser
HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} =>PUP.Optional.IsStart

---\\ Récapitulatif des éléments trouvés sur votre station (34) - 0s
http://www.nicolascoolman.fr/pup-agentodr/ =>PUP.Optional.AgentODR
http://www.nicolascoolman.fr/?p=996 =>PUP.Optional.Elex
http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.WdsManPro
http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.MiuiTab
http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.YourSites123
http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.BDYahoo
http://www.nicolascoolman.fr/?p=248 =>PUP.Optional.WebsSearches
http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.LightningNewTab
http://www.nicolascoolman.fr/?p=721 =>PUP.Optional.Qvo6
http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.RollAround
http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.DeltaHomes
http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.SweetSearch
http://www.nicolascoolman.fr/?p=297 =>PUP.Optional.SupTab
http://www.nicolascoolman.fr/?p=173 =>PUP.Optional.WpManager
http://www.nicolascoolman.fr/?p=668 =>PUP.Optional.1ClickDownloader
http://www.nicolascoolman.fr/?p=180 =>PUP.Optional.CrossRider
http://www.nicolascoolman.fr/?p=1272 =>PUP.Optional.ExpressFiles
http://www.nicolascoolman.fr/?p=5145 =>.Superfluous.Softonic
http://www.nicolascoolman.fr/pup-adanak/ =>PUP.Optional.Adanak
http://www.nicolascoolman.fr/?p=170 =>PUP.Optional.Babylon
http://www.nicolascoolman.fr/?p=370 =>PUP.Optional.PredictAd
http://www.nicolascoolman.fr/?p=210 =>.Superfluous.Conduit
http://www.nicolascoolman.fr/?p=195 =>PUP.Optional.SocialSkinz
http://www.nicolascoolman.fr/?p=1128 =>PUP.Optional.YourFileDownloader
http://www.nicolascoolman.fr/?p=224 =>PUP.Optional.IMBooster
http://www.nicolascoolman.fr/?p=5145 =>.Superfluous.Totalpc
http://www.nicolascoolman.fr/?p=332 =>PUP.Optional.SweetIM
http://www.nicolascoolman.fr/?p=5145 =>.Superfluous.Uniblue
http://www.nicolascoolman.fr/?p=187 =>Trojan.SProtector
http://www.nicolascoolman.fr/?p=5145 =>.Superfluous.Paretologic
http://www.nicolascoolman.fr/?p=5145 =>.Superfluous.WinZipper
http://www.nicolascoolman.fr/?p=546 =>PUP.Optional.Browser
http://www.nicolascoolman.fr/?p=579 =>PUP.Optional.DoSearches
http://www.nicolascoolman.fr/pup-isstart/ =>PUP.Optional.IsStart

~ End of the scan, 14990 items in 00h05mn49s (1166)(0)