cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

~ ZHPDiag v2016.5.6.94 Par Nicolas Coolman (2016/05/06)
~ Démarré par fd (Administrator) (2016/05/08 15:07:34)
~ Site: http://www.nicolascoolman.com
~ Facebook: https://www.facebook.com/nicolascoolman1
~ Etat de la version:
~ Mode: Scanner
~ Rapport: C:\Documents and Settings\fd\Bureau\ZHPDiag.txt
~ Rapport: C:\Documents and Settings\fd\Application Data\ZHP\ZHPDiag.txt
~ UAC: Deactivate
~ Démarrage du système: Normal (Normal boot)
Windows XP, 32-bit Service Pack 3 (Build 2600)

---\\ Navigateurs Internet (2) - 1s
MFIE: Mozilla Firefox 46.0.1 (x86 fr)
MSIE: Internet Explorer v8.0.6001.18702

---\\ Informations sur les produits Windows (3) - 0s
Windows Automatic Updates : OK
Windows Activation Technologies : KO
Windows Genuine Advantage : OK

---\\ Logiciels de protection (1) - 31s
Malwarebytes Anti-Malware version 2.2.1.1043

---\\ Logiciels de protection et autres (Superflus) (1) - 37s
McAfee Security Scan Plus v3.8.141.11

---\\ Logiciels d'optimisation (1) - 42s
CCleaner v5.09

---\\ Surveillance de Logiciels (2) - 43s
Adobe Flash Player 21 NPAPI
Adobe Reader XI

---\\ Informations sur le système (6) - 0s
~ Operating System: x86 Family 6 Model 15 Stepping 13, GenuineIntel
~ Operating System: 32-bit
~ Boot mode: Normal (Normal boot)
Total RAM: 2086.804 MB (33% free)
System Restore: Activé (Enable)
System drive C: has 44 GB () free of 76 GB

---\\ Mode de connexion au système (3) - 0s
~ Computer Name: FD-7B9354FC2980
~ User Name: fd
~ Logged in as Administrator

---\\ Enumération des unités disques (2) - 0s
~ Drive C: has 44 GB free of 76 GB (System)
~ Drive E: has 76 GB free of 76 GB

---\\ Etat du Centre de Sécurité Windows (9) - 0s
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] XMLLookup: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Intl: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: OK
[HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK

---\\ Recherche particulière de fichiers génériques (23) - 1s
[MD5.F2317622D29F9FF0F88AEECD5F60F0DD] - 14/04/2008 - (.Microsoft Corporation - Explorateur Windows.) -- C:\WINDOWS\Explorer.exe [1037824] =>.Microsoft Corporation
[MD5.93AD0B78C7357A05F50E594EC7C22300] - 14/04/2008 - (.Microsoft Corporation - Exécuter une DLL en tant qu'application.) -- C:\WINDOWS\System32\rundll32.exe [33792] =>.Microsoft Corporation
[MD5.E1948B1F45A176FB4A0251446A5AE86D] - 06/03/2014 - (.Microsoft Corporation - Internet Extensions for Win32.) -- C:\WINDOWS\System32\wininet.dll [920064] =>.Microsoft Corporation
[MD5.DD73D6B9F6B4CB630CF35B438B540174] - 14/04/2008 - (.Microsoft Corporation - Application d'ouverture de session Windows.) -- C:\WINDOWS\System32\Winlogon.exe [512000] =>.Microsoft Corporation
[MD5.D76A076ADB74F8132924E498D63123A2] - 03/03/2011 - (.Microsoft Corporation - DNS Client API DLL.) -- C:\WINDOWS\System32\dnsapi.dll [149504] =>.Microsoft Corporation
[MD5.1E44BC1E83D8FD2305F8D452DB109CF9] - 17/08/2011 - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) -- C:\WINDOWS\System32\drivers\AFD.sys [138496] =>.Microsoft Corporation
[MD5.9F3A2F5AA6875C72BF062C712CFA2674] - 14/04/2008 - (.Microsoft Corporation - IDE/ATAPI Port Driver.) -- C:\WINDOWS\System32\drivers\atapi.sys [96512] =>.Microsoft Corporation
[MD5.C885B02847F5D2FD45A24E219ED93B32] - 14/04/2008 - (.Microsoft Corporation - CD-ROM File System Driver.) -- C:\WINDOWS\System32\drivers\Cdfs.sys [63744] =>.Microsoft Corporation
[MD5.1F4260CC5B42272D71F79E570A27A4FE] - 14/04/2008 - (.Microsoft Corporation - SCSI CD-ROM Driver.) -- C:\WINDOWS\System32\drivers\Cdrom.sys [62976] =>.Microsoft Corporation
[MD5.31F923EB2170FC172C81ABDA0045D18C] - 14/04/2008 - (.Microsoft Corporation - Pilote de cryptographie FIPS.) -- C:\WINDOWS\System32\drivers\Fips.sys [44672] =>.Microsoft Corporation
[MD5.573C7D0A32852B48F3058CFD8026F511] - 14/04/2008 - (.Windows (R) Server 2003 DDK provider - High Definition Audio Bus Driver v1.0a.) -- C:\WINDOWS\System32\drivers\HDAudBus.sys [144384]
[MD5.A09BDC4ED10E3B2E0EC27BB94AF32516] - 13/04/2008 - (.Microsoft Corporation - Pilote de port i8042.) -- C:\WINDOWS\System32\drivers\i8042prt.sys [54144] =>.Microsoft Corporation
[MD5.083A052659F5310DD8B6A6CB05EDCF8E] - 14/04/2008 - (.Microsoft Corporation - IMAPI Kernel Driver.) -- C:\WINDOWS\System32\drivers\Imapi.sys [42112] =>.Microsoft Corporation
[MD5.CC748EA12C6EFFDE940EE98098BF96BB] - 14/04/2008 - (.Microsoft Corporation - IP Network Address Translator.) -- C:\WINDOWS\System32\drivers\IpNat.sys [152832] =>.Microsoft Corporation
[MD5.23C74D75E36E7158768DD63D92789A91] - 14/04/2008 - (.Microsoft Corporation - IPSec Driver.) -- C:\WINDOWS\System32\drivers\IPSec.sys [75264] =>.Microsoft Corporation
[MD5.7D304A5EB4344EBEEAB53A2FE3FFB9F0] - 15/07/2011 - (.Microsoft Corporation - Windows NT SMB Minirdr.) -- C:\WINDOWS\System32\drivers\MRxSmb.sys [456320] =>.Microsoft Corporation
[MD5.74B2B2F5BEA5E9A3DC021D685551BD3D] - 14/04/2008 - (.Microsoft Corporation - MBT Transport driver.) -- C:\WINDOWS\System32\drivers\netBT.sys [162816] =>.Microsoft Corporation
[MD5.78A08DD6A8D65E697C18E1DB01C5CDCA] - 14/04/2008 - (.Microsoft Corporation - NT File System Driver.) -- C:\WINDOWS\System32\drivers\ntfs.sys [574976] =>.Microsoft Corporation
[MD5.8FD0BDBEA875D06CCF6C945CA9ABAF75] - 14/04/2008 - (.Microsoft Corporation - Pilote de port parallèle.) -- C:\WINDOWS\System32\drivers\Parport.sys [80384] =>.Microsoft Corporation
[MD5.11B4A627BC9614B885C4969BFA5FF8A6] - 14/04/2008 - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) -- C:\WINDOWS\System32\drivers\Rasl2tp.sys [51328] =>.Microsoft Corporation
[MD5.15CABD0F7C00C47C70124907916AF3F1] - 13/04/2008 - (.Microsoft Corporation - Microsoft RDP Device redirector.) -- C:\WINDOWS\System32\drivers\rdpdr.sys [196224] =>.Microsoft Corporation
[MD5.D8EB2A7904DB6C916EB5361878DDCBAE] - 13/04/2008 - (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) -- C:\WINDOWS\System32\drivers\redbook.sys [58752] =>.Microsoft Corporation
[MD5.46DE1126684369BACE4849E4FC8C43CA] - 14/04/2008 - (.Microsoft Corporation - Pilote de cliché instantané du volume.) -- C:\WINDOWS\System32\drivers\volsnap.sys [53376] =>.Microsoft Corporation

---\\ Liste des services NT non Microsoft et non désactivés (9) - 4s
O23 - Service: Java Quick Starter (JavaQuickStarterService) . (.Oracle Corporation - Java Quick Starter Service.) - C:\Program Files\Java\jre7\bin\jqs.exe =>.Oracle America, Inc.®
O23 - Service: NVIDIA Display Driver Service (NVSvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 179.6.) - C:\WINDOWS\system32\nvsvc32.exe =>.NVIDIA Corporation
O23 - Service: PDF Architect 4 Creator (PDF Architect 4 Creator) . (.pdfforge GmbH - PDF Architect 4.) - C:\Program Files\PDF Architect 4\creator-ws.exe =>.pdfforge GmbH®
O23 - Service: PDF Architect 4 Manager (PDF Architect 4 Manager) . (.© pdfforge GmbH. - Manager service.) - C:\Documents and Settings\All Users\Application Data\pdfforge\PDF Architect 4 Manager\PDF Architect 4\Architect Manager.exe =>.pdfforge GmbH®
O23 - Service: rcores (rcores) . (...) - C:\WINDOWS\rcore.exe (.not file.) =>Trojan.Agent
O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files\Skype\Updater\Updater.exe =>.Skype Software Sarl®
O23 - Service: SolidPDFCreatorReadSpool (SPDFCreatorReadSpool) . (.Solid Documents, LLC - Solid Spool Service.) - C:\Program Files\SolidDocuments\SolidPDFCreator\SPC\SolidPdfService.exe {418B8DCBD93392341732AEF913525D31}
O23 - Service: SigmaTel Audio Service (STacSV) . (.SigmaTel, Inc. - STacSV Module.) - C:\Program Files\Sigmatel\C-Major Audio\DellXPM_5515v131\WDM\stacsv.exe
O23 - Service: Yahoo! Updater (YahooAUService) . (.Yahoo! Inc. - AutoUpater Service Module.) - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe =>.Yahoo! Inc.®

---\\ Services non Microsoft (SR=Démarré,SS=Stoppé) (16) - 113s

SS - Demand [08/04/2016] [ 269504] Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe =>.Adobe Systems Incorporated®
SS - Demand [11/03/2014] [ 136120] Google Updater Service (gusvc) . (.Google.) - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe =>.Google Inc®
SR - Auto [21/10/2014] [ 182696] Java Quick Starter (JavaQuickStarterService) . (.Oracle Corporation.) - C:\Program Files\Java\jre7\bin\jqs.exe =>.Oracle America, Inc.®
SS - Demand [06/05/2016] [ 146888] Mozilla Maintenance Service (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe =>.Mozilla Corporation®
SS - Auto [11/03/2009] [ 168004] NVIDIA Display Driver Service (NVSvc) . (.NVIDIA Corporation.) - C:\WINDOWS\system32\nvsvc32.exe =>.NVIDIA Corporation
SR - Demand [08/01/2014] [ 1265608] PCProtect (PCProtect) . (.Objectify Media Inc.) - C:\Program Files\Web Protect\PCProtect.exe
SR - Demand [15/01/2016] [ 2220768] PDF Architect 4 (PDF Architect 4) . (.pdfforge GmbH.) - C:\Program Files\PDF Architect 4\ws.exe =>.pdfforge GmbH®
SS - Demand [15/01/2016] [ 970464] PDF Architect 4 CrashHandler (PDF Architect 4 CrashHandler) . (.pdfforge GmbH.) - C:\Program Files\PDF Architect 4\crash-handler-ws.exe =>.pdfforge GmbH®
SR - Auto [15/01/2016] [ 772832] PDF Architect 4 Creator (PDF Architect 4 Creator) . (.pdfforge GmbH.) - C:\Program Files\PDF Architect 4\creator-ws.exe =>.pdfforge GmbH®
SR - Auto [05/10/2015] [ 959248] PDF Architect 4 Manager (PDF Architect 4 Manager) . (.© pdfforge GmbH..) - C:\Documents and Settings\All Users\Application Data\pdfforge\PDF Architect 4 Manager\PDF Architect 4\Architect Manager.exe =>.pdfforge GmbH®
SS - Auto [09/07/2015] [ 327296] Skype Updater (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files\Skype\Updater\Updater.exe =>.Skype Software Sarl®
SR - Auto [03/06/2014] [ 164136] SolidPDFCreatorReadSpool (SPDFCreatorReadSpool) . (.Solid Documents, LLC.) - C:\Program Files\SolidDocuments\SolidPDFCreator\SPC\SolidPdfService.exe {418B8DCBD93392341732AEF913525D31}
SR - Auto [10/05/2007] [ 94208] SigmaTel Audio Service (STacSV) . (.SigmaTel, Inc..) - C:\Program Files\Sigmatel\C-Major Audio\DellXPM_5515v131\WDM\stacsv.exe
SS - Demand [30/04/2015] [ 252816] Wondershare Application Framework Service (WsAppService) . (.Wondershare.) - C:\Program Files\Wondershare\WAF\WsAppService.exe =>.Shenzhen Wondershare Information Technology Co., Ltd.®
SR - Auto [09/11/2008] [ 602392] Yahoo! Updater (YahooAUService) . (.Yahoo! Inc..) - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe =>.Yahoo! Inc.®

---\\ Processus lancés (30) - 10s
[MD5.583F8838EBC828C8092E8201DF7A0577] - (.Intel Corporation - hkcmd Module.) -- C:\WINDOWS\system32\hkcmd.exe [173592] [PID.1356] =>.Intel Corporation®
[MD5.C4F80ABC201804BF41EBC926894AB312] - (.Intel Corporation - persistence Module.) -- C:\WINDOWS\system32\igfxpers.exe [142360] [PID.1460] =>.Intel Corporation®
[MD5.F9D9307C65C0FF314434AC9113B1BD15] - (.Intel Corporation - igfxsrvc Module.) -- C:\WINDOWS\system32\igfxsrvc.exe [250392] [PID.1496] =>.Intel Corporation®
[MD5.5EF24621ABCE6965E32A365CA613A544] - (.Alps Electric Co., Ltd. - Alps Pointing-device Driver.) -- C:\Program Files\DellTPad\Apoint.exe [159744] [PID.1736] =>.Alps Electric Co., Ltd.
[MD5.F7AB88AD740309961F8A0151CCBE4E5E] - (.Copyright (C) 2006 - SysTray MFC Application.) -- C:\Program Files\Dell\Dell Mobile Broadband\systray.exe [331851] [PID.1776]
[MD5.DBF9AE6C5C1DA2244061F95D61DD1723] - (...) -- C:\WINDOWS\Samsung\PanelMgr\SSMMgr.exe [618496] [PID.1816]
[MD5.47ECED6CBB05BA4DC05DE6E043DA0C42] - (. - ScanToPc MFC Application.) -- C:\WINDOWS\twain_32\Samsung\SCX3200\Scan2Pc.exe [1989120] [PID.1828]
[MD5.04FA35F93C1F3A7D949F545BD0981B5D] - (...) -- C:\Program Files\tuto4pc_fr_86\tuto4pc_fr_86.exe [11670992] [PID.1840] =>.Superfluous.Tuto4PC
[MD5.4A2E87956502FEF692B044DD45A2C53A] - (.SoftBrain Technologies Ltd. - SmartWeb helper.) -- C:\Documents and Settings\fd\Local Settings\Application Data\SmartWeb\SmartWebHelper.exe [270696] [PID.2008] {53F07650CBBFA5BC97F5276104D31164} =>PUP.Optional.SmartWebSearch
[MD5.14D6542607ACD4B2D1DDB1A36E0D8813] - (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe [271744] [PID.164] =>.Oracle America, Inc.®
[MD5.42370C1DE2B83844B253478DB8A907D5] - (.Alps Electric Co., Ltd. - ApMsgFwd.) -- C:\Program Files\DellTPad\ApMsgFwd.exe [50736] [PID.220] =>.Alps Electric Co., LTD.®
[MD5.012844A8E13BE3941C9CAF1F91F47DF2] - (.SigmaTel, Inc. - Sigmatel Audio system tray application.) -- C:\Program Files\Sigmatel\C-Major Audio\WDM\stsystra.exe [405504] [PID.400]
[MD5.63E998411067A8910C8D37FB55377EB0] - (.PixelPlanet - PdfPrinter monitor.) -- C:\Program Files\Fichiers communs\PixelPlanet\PdfPrinter 7\PdfPrinterMonitor.exe [6182048] [PID.468] {0CFFBD4A04713986322B391ED7FE6B02}
[MD5.160D7A6706C9A322A691FBAC1A74907C] - (.Dell - Dell System Detect.) -- C:\Documents and Settings\fd\Local Settings\Apps\2.0\CBE2CN3L.ZAM\EOHTL0E8.V8Q\dell..tion_0f612f649c4a10af_0005.0006_f9e15713f5aac8ac\DellSystemDetect.exe [258160] [PID.1352] =>.Dell
[MD5.7245B4C192D20107B4A3E887AED3F76E] - (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner.exe [6490904] [PID.1756] =>.Piriform Ltd®
[MD5.47D2A2EC494A246E3742310A69D314FA] - (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe [50603136] [PID.376] =>.Skype Software Sarl®
[MD5.DBDB1A25291B2D18C614F5CA963156A8] - (.Oracle Corporation - Java Quick Starter Service.) -- C:\Program Files\Java\jre7\bin\jqs.exe [182696] [PID.692] =>.Oracle America, Inc.®
[MD5.8D78BE3690DB07A2FD03D2A6B61E3DCD] - (.Alps Electric Co., Ltd. - Alps Pointing-device Driver for Windows NT/.) -- C:\Program Files\DellTPad\ApntEx.exe [49152] [PID.2068] =>.Alps Electric Co., Ltd.
[MD5.C574C551637734B13278898FE2D12D15] - (.Alps Electric Co., Ltd. - Alps Pointing-device Driver.) -- C:\Program Files\DellTPad\hidfind.exe [40960] [PID.2076] =>.Alps Electric Co., Ltd.
[MD5.B794455B48543130F008B21A709B054B] - (.pdfforge GmbH - PDF Architect 4.) -- C:\Program Files\PDF Architect 4\creator-ws.exe [772832] [PID.2416] =>.pdfforge GmbH®
[MD5.08DAD53D89403158FC493FABAE217773] - (.© pdfforge GmbH. - Manager service.) -- C:\Documents and Settings\All Users\Application Data\pdfforge\PDF Architect 4 Manager\PDF Architect 4\Architect Manager.exe [959248] [PID.2440] =>.pdfforge GmbH®
[MD5.F5FF6F634D29311F8A278F51FDF52D5E] - (.Solid Documents, LLC - Solid Spool Service.) -- C:\Program Files\SolidDocuments\SolidPDFCreator\SPC\SolidPdfService.exe [164136] [PID.2708] {418B8DCBD93392341732AEF913525D31}
[MD5.6F855B5625A47F3AC731A262FDC379A6] - (.SigmaTel, Inc. - STacSV Module.) -- C:\Program Files\Sigmatel\C-Major Audio\DellXPM_5515v131\WDM\stacsv.exe [94208] [PID.2756]
[MD5.DD0042F0C3B606A6A8B92D49AFB18AD6] - (.Yahoo! Inc. - AutoUpater Service Module.) -- C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe [602392] [PID.2936] =>.Yahoo! Inc.®
[MD5.C231BEA86E6EC4C6510C99DE9DD6D6FA] - (.Objectify Media Inc - .) -- C:\Program Files\Web Protect\PCProtect.exe [1265608] [PID.3656]
[MD5.7DF8845A1CF92C227E81DBBC6F6434DF] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe [392136] [PID.5548] =>.Mozilla Corporation®
[MD5.ADFAC2B0B922F8F098811D01C1A18D4A] - (.SoftBrain Technologies Ltd. - SmartWeb Application.) -- C:\Documents and Settings\fd\Local Settings\Application Data\SmartWeb\SmartWebApp.exe [553832] [PID.980] {53F07650CBBFA5BC97F5276104D31164} =>PUP.Optional.SmartWebSearch
[MD5.99C824EB9E276A587C69AA940B3FF7E3] - (.pdfforge GmbH - PDF Architect 4.) -- C:\Program Files\PDF Architect 4\architect.exe [2169056] [PID.6064] =>.pdfforge GmbH®
[MD5.4AE67FE722E22C02988A93DBE84B683D] - (.pdfforge GmbH - PDF Architect 4.) -- C:\Program Files\PDF Architect 4\ws.exe [2220768] [PID.5812] =>.pdfforge GmbH®
[MD5.9B232B25474B8592999632F346C0B12B] - (.Nicolas Coolman - ZHPDiag.) -- C:\Documents and Settings\fd\Mes documents\Téléchargements\ZHPDiag3(1).exe [2201600] [PID.5556] =>.Nicolas Coolman

---\\ Google Chrome, Démarrage,Recherche,Extensions (2) - 0s
G2 - GCE: Preference [User Data\Default] [pkbffhpdalaceholagpcomhnigjjdfdb]
G2 - GCE: Preference [User Data\Default] [plimopelmdneikoknbgpopffpbmlhgpa]

---\\ Firefox, Plugins,Demarrage,Recherche,Extensions (10) - 2s
M0 - MFSP: prefs.js [fd - dekqmgwk.default-1441876010187] http://hp.myway.com/internetspeedtracker/ttab02/index.html?coId=8f9c98830f524776ac2d98f9f1f1a870&subId=1__3&ln=fr&n=782a7e7b&ptb=36C5BC99-DBE0-489E-99D2-29E5090E7696&st=tab&p2=%5EBBQ%5Expt088%5ETTAB02%5Efr&si=1__3 =>.Superfluous.MindSpark
P2 - EXT: (.Microsoft Corporation - Office Plugin for Netscape Navigator.) -- C:\Program Files\Mozilla Firefox\Plugins\NPOFF12.DLL =>.Microsoft Corporation®
P2 - EXT: (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape.) -- C:\Program Files\Mozilla Firefox\Plugins\nppdf32.dll =>.Adobe Systems, Incorporated®
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\Plugins\nppdf32.FRA
P2 - EXT: (.RealNetworks, Inc. - RealPlayer(tm) LiveConnect-Enabled Plug-In.) -- C:\Program Files\Mozilla Firefox\Plugins\nppl3260.dll =>.RealNetworks, Inc.
P2 - EXT: (.RealNetworks, Inc. - 6.0.12.46.) -- C:\Program Files\Mozilla Firefox\Plugins\nprpjplug.dll =>.RealNetworks, Inc.
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\browser\searchplugins\omiga-plus.xml =>PUP.Optional.OmigaPlus
P2 - EXT: (.Mindspark - InternetSpeedTracker.) -- C:\Documents and Settings\fd\Application Data\Mozilla\Firefox\Profiles\dekqmgwk.default-1441876010187\extensions\_9tMembers_@free.internetspeedtracker.com =>.Superfluous.MindSpark
P2 - FPN: [HKCU] [@lightspark.github.com/Lightspark;version=1] - (.Lightspark Team.) -- C:\Program Files\Lightspark 0.5.3-git\nplightsparkplugin.dll =>.Lightspark Team
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Adobe Systems Incorporated.) -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32_21_0_0_213.dll =>.Adobe Systems Incorporated

---\\ Internet Explorer,Démarrage,Recherche,URLSearchHook (16) - 1s
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://fr.yahoo.com/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://fr.yahoo.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm
R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphean =>.Microsoft Internet Explorer
R3 - URLSearchHook: (no name) - {81017EA9-9AA8-4A6A-9734-7AF40E7D593F} Orphean =>.Superfluous.Orphean

---\\ Internet Explorer,Proxy Management (7) - 0s
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = <-loopback>
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:1070;https=127.0.0.1:1070; =>Hijacker.Proxy
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll

---\\ Internet Explorer,IniFiles, Autoloading programs (3) - 1s
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe (.Microsoft Corporation.) =>.Microsoft Corporation
F2 - REG:system.ini: Shell=C:\WINDOWS\explorer.exe (.Microsoft Corporation.) =>.Microsoft Corporation
F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"

---\\ Etude du fichier hosts (1) - 0s
~ Le fichier hôte est sain (The hosts file is clean) (20)

---\\ Browser Helper Object de navigateur (BHO) (3) - 0s
O2 - BHO: PDF Architect 4 Helper - {38279E1A-7019-40C1-B579-E99DFB3312E8} . (.pdfforge GmbH - PDF Architect 4.) -- C:\Program Files\PDF Architect 4\creator-ie-helper.dll =>.pdfforge GmbH®
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre7\bin\ssv.dll =>.Oracle America, Inc.®
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre7\bin\jp2ssv.dll =>.Oracle America, Inc.®

---\\ Applications lancées au démarrage du système (45) - 7s
O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\WINDOWS\system32\igfxtray.exe =>.Intel Corporation®
O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\WINDOWS\system32\hkcmd.exe =>.Intel Corporation®
O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\WINDOWS\system32\igfxpers.exe =>.Intel Corporation®
O4 - HKLM\..\Run: [NvCplDaemon] . (.NVIDIA Corporation - NVIDIA Display Properties Extension.) -- C:\WINDOWS\system32\nvcpl.dll =>.NVIDIA Corporation
O4 - HKLM\..\Run: [nwiz] . (...) -- C:\WINDOWS\System32\nwiz.exe =>.NVIDIA Corporation®
O4 - HKLM\..\Run: [NVHotkey] . (.Microsoft Corporation - Exécuter une DLL en tant qu'application.) -- C:\WINDOWS\System32\rundll32.exe =>.Microsoft Corporation
O4 - HKLM\..\Run: [NvMediaCenter] . (.NVIDIA Corporation - NVIDIA Media Center Library.) -- C:\WINDOWS\system32\nvmctray.dll =>.NVIDIA Corporation
O4 - HKLM\..\Run: [Apoint] . (.Alps Electric Co., Ltd. - Alps Pointing-device Driver.) -- C:\Program Files\DellTPad\Apoint.exe =>.Alps Electric Co., Ltd.
O4 - HKLM\..\Run: [systray] . (.Copyright (C) 2006 - SysTray MFC Application.) -- C:\Program Files\Dell\Dell Mobile Broadband\systray.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe (.not file.)
O4 - HKLM\..\Run: [Samsung PanelMgr] . (...) -- C:\WINDOWS\Samsung\PanelMgr\SSMMgr.exe
O4 - HKLM\..\Run: [3200 Scan2PC] . (. - ScanToPc MFC Application.) -- C:\WINDOWS\twain_32\Samsung\SCX3200\Scan2Pc.exe
O4 - HKLM\..\Run: [tuto4pc_fr_86] . (...) -- C:\Program Files\tuto4pc_fr_86\tuto4pc_fr_86.exe =>.Superfluous.Tuto4PC
O4 - HKLM\..\Run: [fst_fr_169] (Orphean)
O4 - HKLM\..\Run: [stv_fr_4] (Orphean)
O4 - HKLM\..\Run: [upstv_fr_4.exe] C:\Documents and Settings\fd\Local Settings\Application Data\stv_fr_4\upstv_fr_4.exe (.not file.) =>PUP.Optional.EORezo
O4 - HKLM\..\Run: [fst_fr_170] (Orphean)
O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe =>.Adobe Systems, Incorporated®
O4 - HKLM\..\Run: [mbot_fr_177] (Orphean) =>PUP.Optional.CrossRider
O4 - HKLM\..\Run: [upmbot_fr_177.exe] C:\Documents and Settings\fd\Local Settings\Application Data\mbot_fr_177\upmbot_fr_177.exe (.not file.) =>PUP.Optional.CrossRider
O4 - HKLM\..\Run: [OfferBoulevard] C:\Program Files\OfferBoulevard\OfferBoulevardW.exe (.not file.)
O4 - HKLM\..\Run: [SmartWeb] . (.SoftBrain Technologies Ltd. - SmartWeb helper.) -- C:\Documents and Settings\fd\Local Settings\Application Data\SmartWeb\SmartWebHelper.exe {53F07650CBBFA5BC97F5276104D31164} =>PUP.Optional.SmartWebSearch
O4 - HKLM\..\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe =>.Oracle America, Inc.®
O4 - HKLM\..\Run: [SigmatelSysTrayApp] . (.SigmaTel, Inc. - Sigmatel Audio system tray application.) -- C:\Program Files\Sigmatel\C-Major Audio\WDM\stsystra.exe
O4 - HKLM\..\Run: [PixelPlanet PdfPrinter-Monitor] . (.PixelPlanet - PdfPrinter monitor.) -- C:\Program Files\Fichiers communs\PixelPlanet\PdfPrinter 7\PdfPrinterMonitor.exe {0CFFBD4A04713986322B391ED7FE6B02}
O4 - HKCU\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe =>.Microsoft Corporation
O4 - HKCU\..\Run: [DellSystemDetect] . (.Dell - Dell System Detect.) -- C:\Documents and Settings\fd\Local Settings\Apps\2.0\CBE2CN3L.ZAM\EOHTL0E8.V8Q\dell..tion_0f612f649c4a10af_0005.0006_f9e15713f5aac8ac\DellSystemDetect.exe =>.Dell
O4 - HKCU\..\Run: [L.Messenger] C:\Program Files\L.Messenger\L.Messenger.exe (.not file.)
O4 - HKCU\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Documents and Settings\fd\Local Settings\Application Data\Google\Update\GoogleUpdate.exe =>.Google Inc®
O4 - HKCU\..\Run: [msnmsgr] C:\Program Files\Windows Live\Messenger\msnmsgr.exe (.not file.)
O4 - HKCU\..\Run: [CCleaner Monitoring] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner.exe =>.Piriform Ltd®
O4 - HKCU\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe =>.Skype Software Sarl®
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe =>.Microsoft Corporation
O4 - HKUS\.DEFAULT\..\Run: [DWQueuedReporting] . (.Microsoft Corporation - Watson Subscriber for SENS Network Notifica.) -- C:\Program Files\Fichiers communs\Microsoft Shared\DW\DWTRIG20.EXE =>.Microsoft Corporation®
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] . (.Microsoft Corporation - Watson Subscriber for SENS Network Notifica.) -- C:\Program Files\Fichiers communs\Microsoft Shared\DW\DWTRIG20.EXE =>.Microsoft Corporation®
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-21-1214440339-1454471165-1417001333-1003\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-21-1214440339-1454471165-1417001333-1003\..\Run: [DellSystemDetect] . (.Dell - Dell System Detect.) -- C:\Documents and Settings\fd\Local Settings\Apps\2.0\CBE2CN3L.ZAM\EOHTL0E8.V8Q\dell..tion_0f612f649c4a10af_0005.0006_f9e15713f5aac8ac\DellSystemDetect.exe =>.Dell
O4 - HKUS\S-1-5-21-1214440339-1454471165-1417001333-1003\..\Run: [L.Messenger] C:\Program Files\L.Messenger\L.Messenger.exe (.not file.)
O4 - HKUS\S-1-5-21-1214440339-1454471165-1417001333-1003\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Documents and Settings\fd\Local Settings\Application Data\Google\Update\GoogleUpdate.exe =>.Google Inc®
O4 - HKUS\S-1-5-21-1214440339-1454471165-1417001333-1003\..\Run: [msnmsgr] C:\Program Files\Windows Live\Messenger\msnmsgr.exe (.not file.)
O4 - HKUS\S-1-5-21-1214440339-1454471165-1417001333-1003\..\Run: [CCleaner Monitoring] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner.exe =>.Piriform Ltd®
O4 - HKUS\S-1-5-21-1214440339-1454471165-1417001333-1003\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe =>.Skype Software Sarl®

---\\ Raccourcis Global Startup (34) - 11s
O4 - GS\Desktop [Administrateur]: PhotoFiltre 7.lnk . (.PhotoFiltre - PhotoFiltre 7.) C:\Program Files\PhotoFiltre 7\PhotoFiltre7.exe =>.PhotoFiltre
O4 - GS\Desktop [Administrateur]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Documents and Settings\fd\Application Data\ZHP\ZHPDiag3.exe =>.Nicolas Coolman
O4 - GS\Quicklaunch [Administrateur]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O4 - GS\Quicklaunch [Administrateur]: Picasa 3.lnk . (.Google Inc. - Picasa.) C:\Program Files\Google\Picasa3\Picasa3.exe =>.Google Inc®
O4 - GS\Startup [Administrateur]: SmartWeb.lnk . (.SoftBrain Technologies Ltd. - SmartWeb helper.) C:\Documents and Settings\fd\Local Settings\Application Data\SmartWeb\SmartWebHelper.exe {53F07650CBBFA5BC97F5276104D31164} =>PUP.Optional.SmartWebSearch
O4 - GS\Desktop [ASPNET]: PhotoFiltre 7.lnk . (.PhotoFiltre - PhotoFiltre 7.) C:\Program Files\PhotoFiltre 7\PhotoFiltre7.exe =>.PhotoFiltre
O4 - GS\Desktop [ASPNET]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Documents and Settings\fd\Application Data\ZHP\ZHPDiag3.exe =>.Nicolas Coolman
O4 - GS\Quicklaunch [ASPNET]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O4 - GS\Quicklaunch [ASPNET]: Picasa 3.lnk . (.Google Inc. - Picasa.) C:\Program Files\Google\Picasa3\Picasa3.exe =>.Google Inc®
O4 - GS\Startup [ASPNET]: SmartWeb.lnk . (.SoftBrain Technologies Ltd. - SmartWeb helper.) C:\Documents and Settings\fd\Local Settings\Application Data\SmartWeb\SmartWebHelper.exe {53F07650CBBFA5BC97F5276104D31164} =>PUP.Optional.SmartWebSearch
O4 - GS\Desktop [fd]: PhotoFiltre 7.lnk . (.PhotoFiltre - PhotoFiltre 7.) C:\Program Files\PhotoFiltre 7\PhotoFiltre7.exe =>.PhotoFiltre
O4 - GS\Desktop [fd]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Documents and Settings\fd\Application Data\ZHP\ZHPDiag3.exe =>.Nicolas Coolman
O4 - GS\Quicklaunch [fd]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O4 - GS\Quicklaunch [fd]: Picasa 3.lnk . (.Google Inc. - Picasa.) C:\Program Files\Google\Picasa3\Picasa3.exe =>.Google Inc®
O4 - GS\Startup [fd]: SmartWeb.lnk . (.SoftBrain Technologies Ltd. - SmartWeb helper.) C:\Documents and Settings\fd\Local Settings\Application Data\SmartWeb\SmartWebHelper.exe {53F07650CBBFA5BC97F5276104D31164} =>PUP.Optional.SmartWebSearch
O4 - GS\Desktop [HelpAssistant]: PhotoFiltre 7.lnk . (.PhotoFiltre - PhotoFiltre 7.) C:\Program Files\PhotoFiltre 7\PhotoFiltre7.exe =>.PhotoFiltre
O4 - GS\Desktop [HelpAssistant]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Documents and Settings\fd\Application Data\ZHP\ZHPDiag3.exe =>.Nicolas Coolman
O4 - GS\Quicklaunch [HelpAssistant]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O4 - GS\Quicklaunch [HelpAssistant]: Picasa 3.lnk . (.Google Inc. - Picasa.) C:\Program Files\Google\Picasa3\Picasa3.exe =>.Google Inc®
O4 - GS\Startup [HelpAssistant]: SmartWeb.lnk . (.SoftBrain Technologies Ltd. - SmartWeb helper.) C:\Documents and Settings\fd\Local Settings\Application Data\SmartWeb\SmartWebHelper.exe {53F07650CBBFA5BC97F5276104D31164} =>PUP.Optional.SmartWebSearch
O4 - GS\Desktop [SUPPORT_388945a0]: PhotoFiltre 7.lnk . (.PhotoFiltre - PhotoFiltre 7.) C:\Program Files\PhotoFiltre 7\PhotoFiltre7.exe =>.PhotoFiltre
O4 - GS\Desktop [SUPPORT_388945a0]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Documents and Settings\fd\Application Data\ZHP\ZHPDiag3.exe =>.Nicolas Coolman
O4 - GS\Quicklaunch [SUPPORT_388945a0]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O4 - GS\Quicklaunch [SUPPORT_388945a0]: Picasa 3.lnk . (.Google Inc. - Picasa.) C:\Program Files\Google\Picasa3\Picasa3.exe =>.Google Inc®
O4 - GS\Startup [SUPPORT_388945a0]: SmartWeb.lnk . (.SoftBrain Technologies Ltd. - SmartWeb helper.) C:\Documents and Settings\fd\Local Settings\Application Data\SmartWeb\SmartWebHelper.exe {53F07650CBBFA5BC97F5276104D31164} =>PUP.Optional.SmartWebSearch
O4 - GS\CommonDesktop [Public]: CCleaner.lnk . (.Piriform Ltd - CCleaner.) C:\Program Files\CCleaner\CCleaner.exe =>.Piriform Ltd®
O4 - GS\CommonDesktop [Public]: Malwarebytes Anti-Malware.lnk . (.Malwarebytes - Malwarebytes Anti-Malware.) C:\Program Files\Malwarebytes Anti-Malware\mbam.exe =>.Malwarebytes Corporation®
O4 - GS\CommonDesktop [Public]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O4 - GS\CommonDesktop [Public]: PDF Architect 4.lnk . (.pdfforge GmbH - PDF Architect 4.) C:\Program Files\PDF Architect 4\architect.exe =>.pdfforge GmbH®
O4 - GS\CommonDesktop [Public]: PDFCreator.lnk . (.pdfforge - PDFCreator.) C:\Program Files\PDFCreator\PDFCreator.exe =>.pdfforge GmbH®
O4 - GS\CommonDesktop [Public]: PdfGrabber 8.0.lnk . (.PixelPlanet - PdfGrabber.) C:\Program Files\PixelPlanet\PdfGrabber 8.0\PdfGrabber.exe {0CFFBD4A04713986322B391ED7FE6B02}
O4 - GS\CommonDesktop [Public]: Skype.lnk . (...) C:\WINDOWS\Installer\{FC965A47-4839-40CA-B618-18F486F042C6}\SkypeIcon.exe
O4 - GS\CommonDesktop [Public]: VLC media player.lnk . (.VideoLAN - VLC media player.) C:\Program Files\VideoLAN\VLC\vlc.exe =>.VideoLAN®
O4 - GS\CommonDesktop [Public]: Wondershare PDFelement.lnk . (.Wondershare Software Co., Ltd. - Wondershare PDFelement.) C:\Program Files\Wondershare\PDFelement\PDFelement.exe =>.Shenzhen Wondershare Information Technology Co., Ltd.®

---\\ Winsock hijacker (Layered Service Provider) (3) - 1s
O10 - WLSP:\Catalog_Entries\000000000001\Winsock LSP File . (.Objectify Media Inc.) -- C:\WINDOWS\system32\PCProtect.dll =>Hijacker.Winsock
O10 - WLSP:\Catalog_Entries\000000000002\Winsock LSP File . (.Objectify Media Inc.) -- C:\WINDOWS\system32\PCProtect.dll =>Hijacker.Winsock
O10 - WLSP:\Catalog_Entries\000000000034\Winsock LSP File . (.Objectify Media Inc.) -- C:\WINDOWS\system32\PCProtect.dll =>Hijacker.Winsock

---\\ Modification Domaine/Adresses DNS (4) - 0s
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{55A1A17F-B72E-42E2-813D-0B031F96ED4D}: DhcpNameServer = 212.27.40.240 212.27.40.241
O17 - HKLM\System\CCS\Services\Tcpip\..\{AEAF3527-A42A-4255-9C0E-72189DC81428}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{F98EAADD-04C3-46EE-BA7F-ACC24732BA0F}: DhcpNameServer = 212.27.40.240 212.27.40.241

---\\ Protocole additionnel (31) - 1s
O18 - Handler: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll =>.Microsoft Corporation
O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\WINDOWS\system32\msvidctl.dll =>.Microsoft Corporation
O18 - Handler: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\WINDOWS\system32\itss.dll =>.Microsoft Corporation
O18 - Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll =>.Microsoft Corporation
O18 - Handler: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll =>.Microsoft Corporation
O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API.) -- C:\WINDOWS\system32\inetcomm.dll =>.Microsoft Corporation
O18 - Handler: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} . (.Microsoft Corporation - Microsoft® Help Data Services Module.) -- C:\Program Files\Fichiers communs\Microsoft Shared\Help\hxds.dll =>.Microsoft Corporation®
O18 - Handler: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\WINDOWS\system32\itss.dll =>.Microsoft Corporation
O18 - Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll =>.Microsoft Corporation
O18 - Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} . (.Skype Technologies - Skype4COM.) -- C:\Program Files\Fichiers communs\Skype\Skype4COM.dll =>.Skype Software Sarl®
O18 - Handler: sysimage - {76E67A63-06E9-11D2-A840-006008059382} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll =>.Microsoft Corporation
O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\WINDOWS\system32\msvidctl.dll =>.Microsoft Corporation
O18 - Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll =>.Microsoft Corporation
O18 - Handler: wia - {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} . (.Microsoft Corporation - WIA Scripting Layer.) -- C:\WINDOWS\system32\wiascr.dll =>.Microsoft Corporation
O18 - Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS\system32\mscoree.dll =>.Microsoft Corporation®
O18 - Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS\system32\mscoree.dll =>.Microsoft Corporation®
O18 - Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS\system32\mscoree.dll =>.Microsoft Corporation®
O18 - Filter: Class Install Handler - {32B533BB-EDAE-11d0-BD5A-00AA00B92AF1} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation
O18 - Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation
O18 - Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation
O18 - Filter: lzdhtml - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation
O18 - Filter: text/webviewhtml - {733AC4CB-F1A4-11d0-B951-00A0C90312E1} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\shell32.dll =>.Microsoft Corporation
O18 - Filter: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\MSOXMLMF.DLL =>.Microsoft Corporation®

---\\ Logiciels installés (74) - 118s
O42 - Logiciel: Adobe Download Assistant - (.Adobe Systems Incorporated.) [HKLM] -- {B8B7838E-449E-B187-57E1-1AA686F225DC} =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe Download Assistant - (.Adobe Systems Incorporated.) [HKLM] -- com.adobe.downloadassistant.AdobeDownloadAssistant =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe Flash Player 21 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX =>.Adobe Systems Incorporated®
O42 - Logiciel: Adobe Flash Player 21 NPAPI - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player NPAPI =>.Adobe Systems Incorporated®
O42 - Logiciel: Adobe Reader 9 - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-A90000000001} =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe Reader XI (11.0.08) - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-AB0000000001} =>.Adobe Systems Incorporated
O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner =>.Piriform Ltd®
O42 - Logiciel: Conexant HDA D330 MDC V.92 Modem - (...) [HKLM] -- CNXT_MODEM_HDAUDIO_VEN_14F1&DEV_2C06&SUBSYS_14F1000F
O42 - Logiciel: Dell Mobile Broadband Card Utility - (.Nom de votre société.) [HKLM] -- {4160A344-5848-4332-919F-0CB063822AA3}
O42 - Logiciel: Dell System Detect - (.Dell.) [HKCU] -- 9204f5692a8faf3b =>.Dell
O42 - Logiciel: Dell Touchpad - (.Alps Electric.) [HKLM] -- {9F72EF8B-AEC9-4CA5-B483-143980AFD6FD} =>.Alps Electric
O42 - Logiciel: Domino Hostless Modem - (.ZTE Corporation.) [HKLM] -- {C6B2FFC1-3E06-472B-8B63-3FEDA8CB4EA2} =>.ZTE CORPORATION®
O42 - Logiciel: Expert PDF 9 - (.Avanquest.) [HKLM] -- {1B9D9CB3-A817-4f3e-B018-5C0967D5B424} =>.AVANQUEST SOFTWARE®
O42 - Logiciel: Google Photos Backup - (.Google, Inc..) [HKCU] -- Google Photos Backup =>.Google, Inc.
O42 - Logiciel: Google Update Helper - (.SaveSense.) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} =>Heuristic.Suspect
O42 - Logiciel: Hotfix for Windows Media Format 11 SDK (KB929399) - (.Microsoft Corporation.) [HKLM] -- KB929399 =>.Microsoft Corporation®
O42 - Logiciel: Hotfix for Windows XP (KB954550-v5) - (.Microsoft Corporation.) [HKLM] -- KB954550-v5 =>.Microsoft Corporation
O42 - Logiciel: Hotfix for Windows XP (KB976002-v5) - (.Microsoft Corporation.) [HKLM] -- KB976002-v5 =>.Microsoft Corporation
O42 - Logiciel: Intel(R) Graphics Media Accelerator Driver - (.Intel Corporation.) [HKLM] -- HDMI =>.Intel Corporation®
O42 - Logiciel: Java 7 Update 71 - (.Oracle.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F03217071FF} =>.Oracle
O42 - Logiciel: Java Auto Updater - (.Oracle, Inc..) [HKLM] -- {4A03706F-666A-4037-7777-5F2748764D10} =>.Oracle, Inc.
O42 - Logiciel: K-Lite Codec Pack 4.1.4 (Full) - (...) [HKLM] -- KLiteCodecPack_is1
O42 - Logiciel: L.Messenger - (...) [HKLM] -- L.Messenger
O42 - Logiciel: Lecteur Windows Media 11 - (...) [HKLM] -- Windows Media Player
O42 - Logiciel: Malwarebytes Anti-Malware version 2.2.1.1043 - (.Malwarebytes.) [HKLM] -- Malwarebytes Anti-Malware_is1 =>.Malwarebytes
O42 - Logiciel: Manager - (.2015 pdfforge GmbH. All rights reserved.) [HKLM] -- {A11F05A4-7CAD-4F85-8C85-DCA18E3E208D} =>.2015 pdfforge GmbH. All rights reserved
O42 - Logiciel: McAfee Security Scan Plus - (.McAfee, Inc..) [HKLM] -- McAfee Security Scan =>.McAfee, Inc.
O42 - Logiciel: Microsoft Application Error Reporting - (.Microsoft Corporation.) [HKLM] -- {95120000-00B9-0409-0000-0000000FF1CE} =>.Microsoft Corporation
O42 - Logiciel: Microsoft Compression Client Pack 1.0 for Windows XP - (.Microsoft Corporation.) [HKLM] -- MSCompPackV1 =>.Microsoft Corporation®
O42 - Logiciel: Microsoft Kernel-Mode Driver Framework Feature Pack 1.5 - (.Microsoft Corporation.) [HKLM] -- Wdf01005 =>.Microsoft Corporation®
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00} =>.Microsoft Corporation
O42 - Logiciel: Microsoft Software Update for Web Folders (French) 12 - (.Microsoft Corporation.) [HKLM] -- {90120000-0010-040C-0000-0000000FF1CE} =>.Microsoft Corporation
O42 - Logiciel: Microsoft User-Mode Driver Framework Feature Pack 1.0 - (.Microsoft Corporation.) [HKLM] -- Wudf01000 =>.Microsoft Corporation®
O42 - Logiciel: Mozilla Firefox 46.0.1 (x86 fr) - (.Mozilla.) [HKLM] -- Mozilla Firefox 46.0.1 (x86 fr) =>.Mozilla Corporation®
O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM] -- MozillaMaintenanceService =>.Mozilla
O42 - Logiciel: MSN - (...) [HKLM] -- MSNINST
O42 - Logiciel: msvcrt_installer - (.SAH.) [HKLM] -- {6068A42A-C1CF-45F2-9859-5DB16287FE5D} =>.SAH
O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71} =>.Microsoft Corporation
O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC} =>.Microsoft Corporation
O42 - Logiciel: My Dell - (.PC-Doctor, Inc..) [HKLM] -- PC-Doctor for Windows =>.Dell Inc.®
O42 - Logiciel: NVIDIA Drivers - (.NVIDIA Corporation.) [HKLM] -- NVIDIA Drivers =>.NVIDIA Corporation®
O42 - Logiciel: PDF Architect 4 - (.pdfforge GmbH.) [HKLM] -- PDF Architect 4 =>.pdfforge GmbH®
O42 - Logiciel: PDF Architect 4 Create Module - (.pdfforge GmbH.) [HKLM] -- {E79493DE-1CA5-442A-9353-2304E2E02D75} =>.pdfforge GmbH
O42 - Logiciel: PDF Architect 4 Edit Module - (.pdfforge GmbH.) [HKLM] -- {0BAB2677-8D78-433C-95A3-3FC9A0ACD00D} =>.pdfforge GmbH
O42 - Logiciel: PDF Architect 4 View Module - (.pdfforge GmbH.) [HKLM] -- {DF4F1F82-22FE-4D4A-BF1F-E794FF3A792B} =>.pdfforge GmbH
O42 - Logiciel: PDFCreator - (.pdfforge.) [HKLM] -- {0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D} =>.pdfforge
O42 - Logiciel: PdfGrabber 8.0 (32bit) - (.PixelPlanet.) [HKLM] -- {436B31A2-3E3B-4D6D-B589-20E7C238B7C6}
O42 - Logiciel: PhotoFiltre 7 - (...) [HKCU] -- PhotoFiltre 7
O42 - Logiciel: Picasa 3 - (.Google, Inc..) [HKLM] -- Picasa 3 =>.Google, Inc.
O42 - Logiciel: PixelPlanet PdfPrinter 7 (32bit) - (.PixelPlanet.) [HKLM] -- {000F58F3-A544-4BB5-AF1B-761EA1C8595C}
O42 - Logiciel: Real Alternative 1.8.2 Lite - (...) [HKLM] -- RealAlt_is1
O42 - Logiciel: Samsung SCX-3200 Series - (.Samsung Electronics Co., Ltd..) [HKLM] -- Samsung SCX-3200 Series =>.Samsung Electronics CO., LTD.®
O42 - Logiciel: Scan Assistant - (.Samsung Electronics Co., Ltd..) [HKLM] -- {BF6CF460-40C3-49BA-800A-4B934B6498B1} =>.Macrovision Corporation®
O42 - Logiciel: SigmaTel Audio - (.SigmaTel.) [HKLM] -- {A462213D-EED4-42C2-9A60-7BDD4D4B0B17} =>.SigmaTel
O42 - Logiciel: Skype™ 7.18 - (.Skype Technologies S.A..) [HKLM] -- {FC965A47-4839-40CA-B618-18F486F042C6} =>.Skype Technologies S.A.
O42 - Logiciel: SmartWeb - (.SoftBrain Technologies Ltd..) [HKLM] -- SmartWeb =>PUP.Optional.SmartWebSearch
O42 - Logiciel: Solid PDF Creator - (.Solid Documents.) [HKLM] -- {DFE70CCC-0ACB-45B7-94F4-9DC6F01B7928}_is1 =>.Solid Documents
O42 - Logiciel: TouchChip USB Driver 2.6 - (.UPEK Inc..) [HKLM] -- {8E7D7400-4F4F-409D-8F8A-43BF1DAC575A} =>.UPEK Inc.
O42 - Logiciel: tuto4pc_fr_86 - (.TUTO4PC.) [HKLM] -- tuto4pc_fr_86_is1 =>.Superfluous.Tuto4PC
O42 - Logiciel: VLC media player - (.VideoLAN.) [HKLM] -- VLC media player =>.VideoLAN
O42 - Logiciel: WebFldrs XP - (.Microsoft Corporation.) [HKLM] -- {350C940c-3D7C-4EE8-BAA9-00BCB3D54227} =>.Microsoft Corporation
O42 - Logiciel: Windows Desktop Search 3.01 - (.Microsoft Corporation.) [HKLM] -- KB917013 =>.Microsoft Corporation®
O42 - Logiciel: Windows Feature Pack for Storage (32-bit) - IMAPI update for Blu-Ray - (.Microsoft Corporation.) [HKLM] -- KB952011 =>.Microsoft Corporation®
O42 - Logiciel: Windows Genuine Advantage Notifications (KB905474) - (.Microsoft Corporation.) [HKLM] -- WgaNotify =>.Microsoft Corporation
O42 - Logiciel: Windows Internet Explorer 8 - (.Microsoft Corporation.) [HKLM] -- ie8 =>.Microsoft Corporation®
O42 - Logiciel: Windows Media Format 11 runtime - (...) [HKLM] -- Windows Media Format Runtime
O42 - Logiciel: Windows Media Format 11 runtime - (.Microsoft Corporation.) [HKLM] -- WMFDist11 =>.Microsoft Corporation®
O42 - Logiciel: Windows Media Player 11 - (.Microsoft Corporation.) [HKLM] -- wmp11 =>.Microsoft Corporation®
O42 - Logiciel: Wondershare PDFelement(Build 5.7.0) - (.Wondershare Software Co.,Ltd..) [HKLM] -- {5CA0183F-6D90-4615-91A5-F1A8A2014E83}_is1 =>.Wondershare Software Co.,Ltd.
O42 - Logiciel: XML Paper Specification Shared Components Language Pack 1.0 - (.Microsoft Corporation.) [HKLM] -- XPSEPSCLP =>.Microsoft Corporation®
O42 - Logiciel: XML Paper Specification Shared Components Pack 1.0 - (.Microsoft Corporation.) [HKLM] -- XpsEPSC =>.Microsoft Corporation
O42 - Logiciel: Yahoo! Software Update - (...) [HKLM] -- Yahoo! Software Update
O42 - Logiciel: ZTE Driver pour mobile - (.ZTE Corporation.) [HKLM] -- {D2D77DC2-8299-11D1-8949-444553540000}_is1 =>.ZTE CORPORATION®
O42 - Logiciel: ZTE Handset USB Driver - (.ZTE Corporation.) [HKLM] -- {01D42BF0-ED08-463f-8A28-99EB6FEE962B} =>.ZTE Corporation

---\\ HKCU & HKLM Software Keys (153) - 118s
HKLM\SOFTWARE\Adobe
HKLM\SOFTWARE\AdwCleaner
HKLM\SOFTWARE\Ahead
HKLM\SOFTWARE\Alps
HKLM\SOFTWARE\anset
HKLM\SOFTWARE\Avanquest
HKLM\SOFTWARE\BCL Technologies
HKLM\SOFTWARE\Broadcom
HKLM\SOFTWARE\C07ft5Y
HKLM\SOFTWARE\Canon
HKLM\SOFTWARE\Codec Tweak Tool
HKLM\SOFTWARE\Conexant
HKLM\SOFTWARE\CXT
HKLM\SOFTWARE\Cyberlink
HKLM\SOFTWARE\DFX
HKLM\SOFTWARE\DivXNetworks
HKLM\SOFTWARE\dotNetInstaller
HKLM\SOFTWARE\Gabest
HKLM\SOFTWARE\Gemplus
HKLM\SOFTWARE\GNU
HKLM\SOFTWARE\Google
HKLM\SOFTWARE\HaaliMkx
HKLM\SOFTWARE\IM Providers
HKLM\SOFTWARE\InstalledOptions
HKLM\SOFTWARE\InstallShield
HKLM\SOFTWARE\Intel
HKLM\SOFTWARE\InterVideo
HKLM\SOFTWARE\JavaSoft
HKLM\SOFTWARE\JreMetrics
HKLM\SOFTWARE\KLCodecPack
HKLM\SOFTWARE\Licenses
HKLM\SOFTWARE\Macromedia
HKLM\SOFTWARE\Malwarebytes' Anti-Malware
HKLM\SOFTWARE\Malwarebytes' Anti-Malware (Trial)
HKLM\SOFTWARE\mamverifier =>Toolbar.Mamverifier
HKLM\SOFTWARE\McAfee.com
HKLM\SOFTWARE\mcafeeupdater
HKLM\SOFTWARE\MeadCo
HKLM\SOFTWARE\Mozilla
HKLM\SOFTWARE\mozilla.org
HKLM\SOFTWARE\MozillaPlugins
HKLM\SOFTWARE\Nero
HKLM\SOFTWARE\Novatel Wireless
HKLM\SOFTWARE\NVIDIA Corporation
HKLM\SOFTWARE\ODBC
HKLM\SOFTWARE\PC-Doctor
HKLM\SOFTWARE\PDF Architect 4
HKLM\SOFTWARE\PDF Reader
HKLM\SOFTWARE\PDF Tools AG
HKLM\SOFTWARE\pdfforge
HKLM\SOFTWARE\Piriform
HKLM\SOFTWARE\Program Groups
HKLM\SOFTWARE\RealAlternative
HKLM\SOFTWARE\RealNetworks
HKLM\SOFTWARE\RegisteredApplications
HKLM\SOFTWARE\S3R521
HKLM\SOFTWARE\Samsung
HKLM\SOFTWARE\Samsung Electronics Co., Ltd.
HKLM\SOFTWARE\Schlumberger
HKLM\SOFTWARE\Secure
HKLM\SOFTWARE\Sigmatel
HKLM\SOFTWARE\Skype
HKLM\SOFTWARE\SmartPCFixer
HKLM\SOFTWARE\Software
HKLM\SOFTWARE\SolidDocuments
HKLM\SOFTWARE\SPanel
HKLM\SOFTWARE\SSPrint
HKLM\SOFTWARE\SSScan
HKLM\SOFTWARE\Taronja
HKLM\SOFTWARE\TeamViewer
HKLM\SOFTWARE\Telespree
HKLM\SOFTWARE\Toshiba
HKLM\SOFTWARE\UPEK
HKLM\SOFTWARE\VideoLAN
HKLM\SOFTWARE\WafCX
HKLM\SOFTWARE\WebProtect =>PUP.Optional.WebProtect
HKLM\SOFTWARE\webtogo
HKLM\SOFTWARE\Windows 3.1 Migration Status
HKLM\SOFTWARE\WinU
HKLM\SOFTWARE\Wondershare
HKLM\SOFTWARE\Wow6432Node
HKLM\SOFTWARE\Yahoo =>.Yahoo!
HKCU\SOFTWARE\AC3filter
HKCU\SOFTWARE\Adobe
HKCU\SOFTWARE\Alps
HKCU\SOFTWARE\AppDataLow
HKCU\SOFTWARE\CISRA
HKCU\SOFTWARE\ClkApp
HKCU\SOFTWARE\Condut
HKCU\SOFTWARE\cores
HKCU\SOFTWARE\Cyberlink
HKCU\SOFTWARE\Dashlane
HKCU\SOFTWARE\DivXNetworks
HKCU\SOFTWARE\drpsu
HKCU\SOFTWARE\Foxit Software
HKCU\SOFTWARE\Gabest
HKCU\SOFTWARE\GNU
HKCU\SOFTWARE\Google
HKCU\SOFTWARE\GSpot Appliance Corp
HKCU\SOFTWARE\Haali
HKCU\SOFTWARE\HaaliMkx
HKCU\SOFTWARE\HP
HKCU\SOFTWARE\ICIQI
HKCU\SOFTWARE\IM Providers
HKCU\SOFTWARE\Intel
HKCU\SOFTWARE\JavaSoft
HKCU\SOFTWARE\kde.org
HKCU\SOFTWARE\L.Messenger
HKCU\SOFTWARE\Licenses
HKCU\SOFTWARE\Macromedia
HKCU\SOFTWARE\Malwarebytes' Anti-Malware
HKCU\SOFTWARE\MediaInfo
HKCU\SOFTWARE\mozilla
HKCU\SOFTWARE\MozillaPlugins
HKCU\SOFTWARE\Nero
HKCU\SOFTWARE\Netscape
HKCU\SOFTWARE\Novatel Wireless
HKCU\SOFTWARE\NVIDIA Corporation
HKCU\SOFTWARE\ODBC
HKCU\SOFTWARE\Opendisc
HKCU\SOFTWARE\PC-Doctor
HKCU\SOFTWARE\PDF Architect
HKCU\SOFTWARE\PDF Architect 4
HKCU\SOFTWARE\PDF Tools AG
HKCU\SOFTWARE\pdfforge
HKCU\SOFTWARE\PhotoFiltre 7
HKCU\SOFTWARE\Piriform
HKCU\SOFTWARE\PixelPlanet
HKCU\SOFTWARE\Probit Software =>.Superfluous.ProbitSoftware
HKCU\SOFTWARE\RealNetworks
HKCU\SOFTWARE\rttasks =>PUP.Optional.RocketTab
HKCU\SOFTWARE\Samsung
HKCU\SOFTWARE\Skype
HKCU\SOFTWARE\SmartWeb =>PUP.Optional.SmartWebSearch
HKCU\SOFTWARE\Software
HKCU\SOFTWARE\SolidDocuments
HKCU\SOFTWARE\SSPrint
HKCU\SOFTWARE\SSScan
HKCU\SOFTWARE\TeamViewer
HKCU\SOFTWARE\TeleCharger =>.Superfluous.Downloader
HKCU\SOFTWARE\test
HKCU\SOFTWARE\Toshiba
HKCU\SOFTWARE\Trolltech
HKCU\SOFTWARE\VB and VBA Program Settings
HKCU\SOFTWARE\Vosteran =>PUP.Optional.Vosteran
HKCU\SOFTWARE\VYGKASA
HKCU\SOFTWARE\WHHSK
HKCU\SOFTWARE\WinRAR SFX
HKCU\SOFTWARE\WPI
HKCU\SOFTWARE\Yahoo =>.Yahoo!
HKCU\SOFTWARE\ZebHelpProcess Helper
HKCU\SOFTWARE\_CrossriderRegNamePlaceHolder_ =>PUP.Optional.CrossRider
HKCU\SOFTWARE\AppDataLow\Software

---\\ Contenu des dossiers Programmes (211) - 61s
O43 - CFD: 19/10/2014 - [] D -- C:\Program Files\Adobe =>.Adobe Systems, Incorporated®
O43 - CFD: 03/07/2014 - [] D -- C:\Program Files\Adobe Download Assistant
O43 - CFD: 31/03/2014 - [] D -- C:\Program Files\Avanquest
O43 - CFD: 20/07/2014 - [] D -- C:\Program Files\BeNaughtyChat {229744C9C2C0B899FC0AD4EE68885353}
O43 - CFD: 03/06/2014 - [] D -- C:\Program Files\Canon
O43 - CFD: 14/09/2015 - [] D -- C:\Program Files\CCleaner =>.Piriform Ltd®
O43 - CFD: 05/11/2015 - [] D -- C:\Program Files\Common Files
O43 - CFD: 09/10/2012 - [0] D -- C:\Program Files\ComPlus Applications
O43 - CFD: 10/10/2012 - [] D -- C:\Program Files\CONEXANT
O43 - CFD: 10/10/2012 - [] D -- C:\Program Files\Dell
O43 - CFD: 28/10/2013 - [] D -- C:\Program Files\Dell Support Center =>.Dell Inc.®
O43 - CFD: 10/10/2012 - [] D -- C:\Program Files\DellTPad =>.Alps Electric Co., LTD.®
O43 - CFD: 10/03/2016 - [] D -- C:\Program Files\Fichiers communs
O43 - CFD: 21/11/2015 - [] D -- C:\Program Files\Google =>.Google Inc®
O43 - CFD: 10/06/2015 - [] D -- C:\Program Files\GUM1B.tmp =>.Google Inc®
O43 - CFD: 10/06/2015 - [] D -- C:\Program Files\GUM5.tmp =>.Google Inc®
O43 - CFD: 26/06/2014 - [] D -- C:\Program Files\Hostless Modem =>.ZTE CORPORATION®
O43 - CFD: 10/04/2016 - [] HD -- C:\Program Files\InstallShield Installation Information =>.Macrovision Corporation®
O43 - CFD: 09/04/2014 - [] D -- C:\Program Files\Internet Explorer
O43 - CFD: 21/10/2014 - [] D -- C:\Program Files\Java =>.Oracle America, Inc.®
O43 - CFD: 09/10/2012 - [] D -- C:\Program Files\K-Lite Codec Pack
O43 - CFD: 08/05/2016 - [] D -- C:\Program Files\Malwarebytes Anti-Malware =>.Malwarebytes Corporation®
O43 - CFD: 26/10/2013 - [] D -- C:\Program Files\Messenger
O43 - CFD: 18/09/2013 - [0] D -- C:\Program Files\Microsoft
O43 - CFD: 09/10/2012 - [] D -- C:\Program Files\microsoft frontpage
O43 - CFD: 22/01/2014 - [] D -- C:\Program Files\Microsoft Office =>.Microsoft Corporation®
O43 - CFD: 28/07/2014 - [] D -- C:\Program Files\Microsoft Silverlight =>.Microsoft Corporation®
O43 - CFD: 18/09/2013 - [] D -- C:\Program Files\Microsoft Visual Studio
O43 - CFD: 18/09/2013 - [] D -- C:\Program Files\Microsoft Visual Studio 8
O43 - CFD: 26/10/2013 - [] D -- C:\Program Files\Microsoft Works
O43 - CFD: 07/03/2014 - [] D -- C:\Program Files\Microsoft.NET
O43 - CFD: 26/10/2013 - [] D -- C:\Program Files\Movie Maker
O43 - CFD: 06/05/2016 - [] D -- C:\Program Files\Mozilla Firefox =>.Mozilla Corporation®
O43 - CFD: 07/05/2016 - [] D -- C:\Program Files\Mozilla Maintenance Service =>.Mozilla Corporation®
O43 - CFD: 09/10/2012 - [] D -- C:\Program Files\MSBuild
O43 - CFD: 22/01/2014 - [] D -- C:\Program Files\MSN
O43 - CFD: 09/10/2012 - [] D -- C:\Program Files\MSN Gaming Zone
O43 - CFD: 29/10/2013 - [0] D -- C:\Program Files\MSXML 4.0
O43 - CFD: 28/10/2013 - [] D -- C:\Program Files\My Dell =>.PC-Doctor, Inc.®
O43 - CFD: 09/10/2012 - [] D -- C:\Program Files\NetMeeting
O43 - CFD: 31/03/2014 - [] D -- C:\Program Files\Notepad++
O43 - CFD: 09/10/2012 - [] D -- C:\Program Files\Online Services
O43 - CFD: 26/10/2013 - [] D -- C:\Program Files\Outlook Express
O43 - CFD: 10/03/2016 - [] D -- C:\Program Files\PDF Architect 4 =>.pdfforge GmbH®
O43 - CFD: 10/03/2016 - [] D -- C:\Program Files\PDFCreator =>.pdfforge GmbH®
O43 - CFD: 12/10/2015 - [] D -- C:\Program Files\PhotoFiltre 7
O43 - CFD: 05/11/2015 - [] D -- C:\Program Files\PixelPlanet {0CFFBD4A04713986322B391ED7FE6B02}
O43 - CFD: 09/10/2012 - [] D -- C:\Program Files\Real Alternative
O43 - CFD: 09/10/2012 - [] D -- C:\Program Files\Reference Assemblies
O43 - CFD: 19/10/2014 - [] D -- C:\Program Files\Reimageplus.com =>.Superfluous.ReimageRepair
O43 - CFD: 27/10/2013 - [] D -- C:\Program Files\Samsung
O43 - CFD: 06/12/2013 - [] D -- C:\Program Files\SamsungPrinterLiveUpdate
O43 - CFD: 25/03/2014 - [] D -- C:\Program Files\Scan Assistant
O43 - CFD: 09/10/2012 - [] D -- C:\Program Files\Services en ligne
O43 - CFD: 09/10/2012 - [] D -- C:\Program Files\Sigmatel
O43 - CFD: 19/02/2016 - [] RD -- C:\Program Files\Skype =>.Skype Software Sarl®
O43 - CFD: 12/12/2015 - [] D -- C:\Program Files\Software =>PUP.Optional.Boxore
O43 - CFD: 02/03/2016 - [] D -- C:\Program Files\SolidDocuments
O43 - CFD: 11/01/2014 - [] D -- C:\Program Files\tuto4pc_fr_86 =>.Superfluous.Tuto4PC
O43 - CFD: 09/10/2012 - [0] HD -- C:\Program Files\Uninstall Information
O43 - CFD: 10/10/2012 - [] D -- C:\Program Files\UPEK
O43 - CFD: 10/10/2012 - [] D -- C:\Program Files\VideoLAN
O43 - CFD: 07/03/2014 - [] D -- C:\Program Files\Web Protect
O43 - CFD: 05/03/2014 - [] D -- C:\Program Files\Windows Desktop Search
O43 - CFD: 07/04/2014 - [] D -- C:\Program Files\Windows Media Connect 2
O43 - CFD: 07/04/2014 - [] D -- C:\Program Files\Windows Media Player
O43 - CFD: 09/10/2012 - [] D -- C:\Program Files\Windows NT
O43 - CFD: 09/10/2012 - [0] HD -- C:\Program Files\WindowsUpdate
O43 - CFD: 10/04/2016 - [] D -- C:\Program Files\WinRAR
O43 - CFD: 12/03/2016 - [] D -- C:\Program Files\Wondershare =>.Shenzhen Wondershare Information Technology Co., Ltd.®
O43 - CFD: 09/10/2012 - [] D -- C:\Program Files\xerox
O43 - CFD: 03/01/2015 - [] D -- C:\Program Files\Yahoo!
O43 - CFD: 19/06/2014 - [] D -- C:\Program Files\ZTE_Handset_USB_Driver =>.ZTE CORPORATION®
O43 - CFD: 27/10/2013 - [] RD -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Accessoires
O43 - CFD: 14/09/2015 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\CCleaner
O43 - CFD: 28/10/2013 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Dell
O43 - CFD: 10/10/2012 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Dell Wireless
O43 - CFD: 26/06/2014 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Domino Hostless Modem
O43 - CFD: 10/04/2016 - [] RD -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage
O43 - CFD: 07/03/2014 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\FileParade bundle uninstaller =>PUP.Optional.FileParadeBundle
O43 - CFD: 21/10/2014 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Java
O43 - CFD: 09/10/2012 - [] RD -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Jeux
O43 - CFD: 09/10/2012 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\K-Lite Codec Pack
O43 - CFD: 08/05/2016 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Malwarebytes Anti-Malware
O43 - CFD: 18/09/2013 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Microsoft Office
O43 - CFD: 27/07/2014 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Microsoft Silverlight
O43 - CFD: 09/10/2012 - [] RD -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Outils d'administration
O43 - CFD: 10/03/2016 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\PDF Architect 4
O43 - CFD: 10/03/2016 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\PDFCreator
O43 - CFD: 15/04/2014 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Picasa 3
O43 - CFD: 27/10/2013 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Samsung Printers
O43 - CFD: 19/02/2016 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Skype
O43 - CFD: 02/03/2016 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\SolidDocuments
O43 - CFD: 05/04/2015 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\VideoLAN
O43 - CFD: 12/03/2016 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Wondershare
O43 - CFD: 19/06/2014 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\ZTE Driver pour mobile
O43 - CFD: 22/06/2014 - [] D -- C:\Documents and Settings\All Users\Application Data\Adobe
O43 - CFD: 09/10/2012 - [] D -- C:\Documents and Settings\All Users\Application Data\DFX
O43 - CFD: 18/06/2014 - [0] D -- C:\Documents and Settings\All Users\Application Data\DriverGenius =>.Superfluous.DriverGenius
O43 - CFD: 19/10/2014 - [] D -- C:\Documents and Settings\All Users\Application Data\Malwarebytes
O43 - CFD: 27/10/2013 - [] D -- C:\Documents and Settings\All Users\Application Data\McAfee
O43 - CFD: 23/12/2015 - [] SD -- C:\Documents and Settings\All Users\Application Data\Microsoft
O43 - CFD: 15/04/2016 - [] D -- C:\Documents and Settings\All Users\Application Data\Microsoft Help
O43 - CFD: 27/10/2013 - [] D -- C:\Documents and Settings\All Users\Application Data\Mozilla
O43 - CFD: 10/10/2012 - [] D -- C:\Documents and Settings\All Users\Application Data\Novatel Wireless
O43 - CFD: 28/10/2013 - [] D -- C:\Documents and Settings\All Users\Application Data\PCDr
O43 - CFD: 10/03/2016 - [] D -- C:\Documents and Settings\All Users\Application Data\PDF Architect 4
O43 - CFD: 12/03/2016 - [] D -- C:\Documents and Settings\All Users\Application Data\PDFelement
O43 - CFD: 10/03/2016 - [] D -- C:\Documents and Settings\All Users\Application Data\pdfforge
O43 - CFD: 05/11/2015 - [] D -- C:\Documents and Settings\All Users\Application Data\PixelPlanet
O43 - CFD: 09/10/2012 - [0] D -- C:\Documents and Settings\All Users\Application Data\Real
O43 - CFD: 19/02/2016 - [] D -- C:\Documents and Settings\All Users\Application Data\Skype
O43 - CFD: 09/03/2014 - [] D -- C:\Documents and Settings\All Users\Application Data\Sun
O43 - CFD: 30/04/2014 - [0] AD -- C:\Documents and Settings\All Users\Application Data\TEMP
O43 - CFD: 10/10/2012 - [] D -- C:\Documents and Settings\All Users\Application Data\UIB
O43 - CFD: 18/09/2013 - [] D -- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
O43 - CFD: 12/03/2016 - [] D -- C:\Documents and Settings\All Users\Application Data\wondershare
O43 - CFD: 03/01/2015 - [] D -- C:\Documents and Settings\All Users\Application Data\Yahoo!
O43 - CFD: 26/06/2014 - [] D -- C:\Documents and Settings\All Users\Application Data\ZDSupport
O43 - CFD: 18/06/2014 - [] D -- C:\Program Files\Fichiers communs\Adobe
O43 - CFD: 31/03/2014 - [] D -- C:\Program Files\Fichiers communs\Avanquest Software
O43 - CFD: 14/05/2014 - [] D -- C:\Program Files\Fichiers communs\DESIGNER
O43 - CFD: 09/10/2012 - [] D -- C:\Program Files\Fichiers communs\DFX
O43 - CFD: 03/06/2014 - [] D -- C:\Program Files\Fichiers communs\InstallShield
O43 - CFD: 21/10/2014 - [] D -- C:\Program Files\Fichiers communs\Java
O43 - CFD: 26/10/2013 - [] D -- C:\Program Files\Fichiers communs\Microsoft Shared
O43 - CFD: 09/10/2012 - [] D -- C:\Program Files\Fichiers communs\MSSoap
O43 - CFD: 07/03/2014 - [] D -- C:\Program Files\Fichiers communs\Nero
O43 - CFD: 09/10/2012 - [] D -- C:\Program Files\Fichiers communs\ODBC
O43 - CFD: 10/03/2016 - [] D -- C:\Program Files\Fichiers communs\PDF Software
O43 - CFD: 05/11/2015 - [] D -- C:\Program Files\Fichiers communs\PixelPlanet
O43 - CFD: 09/10/2012 - [] D -- C:\Program Files\Fichiers communs\Services
O43 - CFD: 19/02/2016 - [] D -- C:\Program Files\Fichiers communs\Skype
O43 - CFD: 09/10/2012 - [] D -- C:\Program Files\Fichiers communs\SpeechEngines
O43 - CFD: 29/10/2013 - [] D -- C:\Program Files\Fichiers communs\System
O43 - CFD: 05/11/2015 - [] D -- C:\Program Files\Fichiers communs\XpressUpdate
O43 - CFD: 10/10/2012 - [] D -- C:\Program Files\Fichiers communs\Zeepe Framework 7
O43 - CFD: 21/11/2014 - [] D -- C:\Documents and Settings\fd\Application Data\13628
O43 - CFD: 05/06/2014 - [] D -- C:\Documents and Settings\fd\Application Data\28787
O43 - CFD: 19/06/2014 - [] D -- C:\Documents and Settings\fd\Application Data\Adobe
O43 - CFD: 13/07/2014 - [] D -- C:\Documents and Settings\fd\Application Data\BeNaughtyChat
O43 - CFD: 20/06/2014 - [] D -- C:\Documents and Settings\fd\Application Data\com.adobe.downloadassistant.AdobeDownloadAssistant
O43 - CFD: 28/10/2013 - [] D -- C:\Documents and Settings\fd\Application Data\Dell
O43 - CFD: 16/01/2014 - [] D -- C:\Documents and Settings\fd\Application Data\dvdcss
O43 - CFD: 13/06/2015 - [] D -- C:\Documents and Settings\fd\Application Data\Google
O43 - CFD: 09/10/2012 - [] D -- C:\Documents and Settings\fd\Application Data\Identities
O43 - CFD: 27/10/2013 - [] D -- C:\Documents and Settings\fd\Application Data\InstallShield
O43 - CFD: 09/10/2012 - [] D -- C:\Documents and Settings\fd\Application Data\Macromedia
O43 - CFD: 19/10/2014 - [0] D -- C:\Documents and Settings\fd\Application Data\Malwarebytes
O43 - CFD: 14/09/2015 - [0] D -- C:\Documents and Settings\fd\Application Data\Media Player Classic
O43 - CFD: 09/01/2015 - [] SD -- C:\Documents and Settings\fd\Application Data\Microsoft
O43 - CFD: 05/03/2014 - [] D -- C:\Documents and Settings\fd\Application Data\Mozilla
O43 - CFD: 26/10/2013 - [] D -- C:\Documents and Settings\fd\Application Data\Nero
O43 - CFD: 31/03/2014 - [] D -- C:\Documents and Settings\fd\Application Data\Notepad++
O43 - CFD: 28/10/2013 - [] D -- C:\Documents and Settings\fd\Application Data\PCDr
O43 - CFD: 07/03/2014 - [] D -- C:\Documents and Settings\fd\Application Data\PDF Architect
O43 - CFD: 13/04/2016 - [] D -- C:\Documents and Settings\fd\Application Data\PDF Architect 4
O43 - CFD: 07/03/2014 - [] D -- C:\Documents and Settings\fd\Application Data\PDF Software
O43 - CFD: 12/10/2015 - [] D -- C:\Documents and Settings\fd\Application Data\PhotoFiltre 7
O43 - CFD: 05/11/2015 - [] D -- C:\Documents and Settings\fd\Application Data\PixelPlanet
O43 - CFD: 30/04/2014 - [] D -- C:\Documents and Settings\fd\Application Data\Real
O43 - CFD: 08/05/2016 - [] D -- C:\Documents and Settings\fd\Application Data\Skype
O43 - CFD: 08/05/2016 - [] D -- C:\Documents and Settings\fd\Application Data\SmartWeb =>PUP.Optional.SmartWebSearch
O43 - CFD: 02/03/2016 - [] D -- C:\Documents and Settings\fd\Application Data\SolidDocuments
O43 - CFD: 07/03/2014 - [] D -- C:\Documents and Settings\fd\Application Data\SumatraPDF
O43 - CFD: 09/03/2014 - [] D -- C:\Documents and Settings\fd\Application Data\Sun
O43 - CFD: 05/03/2014 - [] D -- C:\Documents and Settings\fd\Application Data\TeamViewer
O43 - CFD: 01/03/2016 - [] D -- C:\Documents and Settings\fd\Application Data\Thinstall
O43 - CFD: 13/07/2014 - [] D -- C:\Documents and Settings\fd\Application Data\vcards
O43 - CFD: 18/04/2016 - [] D -- C:\Documents and Settings\fd\Application Data\vlc
O43 - CFD: 05/03/2014 - [] D -- C:\Documents and Settings\fd\Application Data\Windows Desktop Search
O43 - CFD: 10/10/2012 - [0] D -- C:\Documents and Settings\fd\Application Data\WinRAR
O43 - CFD: 12/03/2016 - [] D -- C:\Documents and Settings\fd\Application Data\Wondershare
O43 - CFD: 22/11/2014 - [] D -- C:\Documents and Settings\fd\Application Data\Yahoo!
O43 - CFD: 08/05/2016 - [] D -- C:\Documents and Settings\fd\Application Data\ZHP
O43 - CFD: 14/01/2015 - [] D -- C:\Documents and Settings\fd\Local Settings\Application Data\Adobe
O43 - CFD: 06/11/2014 - [] D -- C:\Documents and Settings\fd\Local Settings\Application Data\ApplicationHistory
O43 - CFD: 18/09/2013 - [] D -- C:\Documents and Settings\fd\Local Settings\Application Data\avgchrome
O43 - CFD: 30/04/2014 - [0] D -- C:\Documents and Settings\fd\Local Settings\Application Data\cache
O43 - CFD: 19/10/2014 - [] D -- C:\Documents and Settings\fd\Local Settings\Application Data\com =>PUP.Optional.Generic
O43 - CFD: 07/03/2014 - [] D -- C:\Documents and Settings\fd\Local Settings\Application Data\Comodo
O43 - CFD: 11/05/2014 - [] D -- C:\Documents and Settings\fd\Local Settings\Application Data\cougar-messenger
O43 - CFD: 20/12/2015 - [0] D -- C:\Documents and Settings\fd\Local Settings\Application Data\Deployment
O43 - CFD: 26/10/2013 - [] D -- C:\Documents and Settings\fd\Local Settings\Application Data\DFX
O43 - CFD: 05/11/2015 - [] D -- C:\Documents and Settings\fd\Local Settings\Application Data\Downloaded Installations
O43 - CFD: 10/09/2015 - [] D -- C:\Documents and Settings\fd\Local Settings\Application Data\Google
O43 - CFD: 21/10/2014 - [] D -- C:\Documents and Settings\fd\Local Settings\Application Data\ICSharpCode.net
O43 - CFD: 05/03/2014 - [] D -- C:\Documents and Settings\fd\Local Settings\Application Data\Identities
O43 - CFD: 23/03/2014 - [] D -- C:\Documents and Settings\fd\Local Settings\Application Data\infidele-messenger
O43 - CFD: 19/06/2014 - [0] D -- C:\Documents and Settings\fd\Local Settings\Application Data\Lollipop_06191304 =>PUP.Optional.Lollipop
O43 - CFD: 22/11/2015 - [] D -- C:\Documents and Settings\fd\Local Settings\Application Data\Microsoft
O43 - CFD: 18/09/2013 - [0] D -- C:\Documents and Settings\fd\Local Settings\Application Data\Microsoft Help
O43 - CFD: 09/10/2012 - [] D -- C:\Documents and Settings\fd\Local Settings\Application Data\Mozilla
O43 - CFD: 10/03/2016 - [] D -- C:\Documents and Settings\fd\Local Settings\Application Data\PDFCreator
O43 - CFD: 15/04/2014 - [] D -- C:\Documents and Settings\fd\Local Settings\Application Data\Programs
O43 - CFD: 09/10/2012 - [0] D -- C:\Documents and Settings\fd\Local Settings\Application Data\Real
O43 - CFD: 12/06/2014 - [] D -- C:\Documents and Settings\fd\Local Settings\Application Data\rencontreshard
O43 - CFD: 27/10/2013 - [] D -- C:\Documents and Settings\fd\Local Settings\Application Data\S2PC
O43 - CFD: 12/12/2015 - [0] D -- C:\Documents and Settings\fd\Local Settings\Application Data\Skype
O43 - CFD: 20/10/2014 - [] D -- C:\Documents and Settings\fd\Local Settings\Application Data\SmartWeb =>PUP.Optional.SmartWebSearch
O43 - CFD: 19/10/2014 - [] D -- C:\Documents and Settings\fd\Local Settings\Application Data\Software =>PUP.Optional.Boxore
O43 - CFD: 09/03/2014 - [] D -- C:\Documents and Settings\fd\Local Settings\Application Data\Sun
O43 - CFD: 05/06/2014 - [] D -- C:\Documents and Settings\fd\Local Settings\Application Data\Temp
O43 - CFD: 01/03/2016 - [] D -- C:\Documents and Settings\fd\Local Settings\Application Data\Thinstall
O43 - CFD: 10/10/2012 - [] D -- C:\Documents and Settings\fd\Local Settings\Application Data\Toshiba
O43 - CFD: 11/01/2014 - [] D -- C:\Documents and Settings\fd\Local Settings\Application Data\tut_fr_86 =>PUP.Optional.AgenceExclusive
O43 - CFD: 26/06/2014 - [] D -- C:\Documents and Settings\fd\Local Settings\Application Data\YesMessenger
O43 - CFD: 10/09/2015 - [] D -- C:\Documents and Settings\fd\Local Settings\Application Data\Programs\Google
O43 - CFD: 06/11/2014 - [] D -- C:\Documents and Settings\fd\Menu Démarrer\Programmes\Démarrage
O43 - CFD: 10/09/2015 - [] D -- C:\Documents and Settings\fd\Menu Démarrer\Programmes\Google Photos Backup
O43 - CFD: 12/10/2015 - [] D -- C:\Documents and Settings\fd\Menu Démarrer\Programmes\PhotoFiltre 7

---\\ Derniers fichiers créés dans Windows Prefetcher (2) - 11s
O45 - LFCP:[MD5.8F5DD2B0FE757F5D477827C629713B45] 08/05/2016 A -- C:\WINDOWS\Prefetch\SMARTWEBAPP.EXE-08161991.pf =>PUP.Optional.SmartWebSearch
O45 - LFCP:[MD5.BEE633161CB0121B4A68F140B350D98A] 06/05/2016 A -- C:\WINDOWS\Prefetch\SMARTWEBHELPER.EXE-24A467C8.pf =>PUP.Optional.SmartWebSearch

---\\ ShellIconOverlayIdentifiers (SIOI) (1) - 0s
O106 - SIOI: Offline Files Menu [Fichiers hors connexion] - {750fdf0e-2a26-11d1-a3ea-080036587f03}. (.Microsoft Corporation - IU de cache côté client.) -- C:\WINDOWS\system32\cscui.dll =>.Microsoft Corporation

---\\ Enumération des clés StartupReg (3) - 1s
O53 - SMSR:HKLM\...\startupreg\MsnMsgr [Key] . (...) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\SigmatelSysTrayApp [Key] . (.SigmaTel, Inc. - Sigmatel Audio system tray application.) -- C:\Program Files\Sigmatel\C-Major Audio\WDM\stsystra.exe
O53 - SMSR:HKLM\...\startupreg\Skype [Key] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe =>.Skype Technologies S.A.

---\\ Liste des pilotes du système (53) - 6s
O58 - SDL:2007/06/25 18:53:10 A . (.Alps Electric Co., Ltd. - Alps Touch Pad Driver.) -- C:\WINDOWS\System32\drivers\Apfiltr.sys [155136] =>.Alps Electric Co., Ltd.
O58 - SDL:2006/10/29 17:46:24 A . (.Broadcom Corporation - Broadcom NetXtreme Gigabit Ethernet NDIS5.1.) -- C:\WINDOWS\System32\drivers\b57xp32.sys [156160] =>.Broadcom Corporation
O58 - SDL:2006/10/29 17:46:42 A . (.Broadcom Corporation - Broadcom 802.11 Network Adapter wireless dr.) -- C:\WINDOWS\System32\drivers\BCMWL5.SYS [424320] =>.Broadcom Corporation
O58 - SDL:2004/12/21 11:29:46 A . (.Adaptec, Inc. - DELL CERC SATA1.5/6ch Miniport Driver.) -- C:\WINDOWS\System32\drivers\cercsr6.sys [39904] =>.Adaptec, Inc.
O58 - SDL:2008/04/14 01:00:00 A . (.RAVISENT Technologies Inc. - Pilote principal CineMaster C 1.2 WDM.) -- C:\WINDOWS\System32\drivers\cinemst2.sys [262528] =>.RAVISENT Technologies Inc.
O58 - SDL:2008/04/14 01:00:00 A . (.Compaq Computer Corporation - Compaq PA-1 Player Driver.) -- C:\WINDOWS\System32\drivers\cpqdap01.sys [11776] =>.Compaq Computer Corporation
O58 - SDL:2008/04/14 01:00:00 A . (.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disq.) -- C:\WINDOWS\System32\drivers\dmboot.sys [800256] =>.Microsoft Corp., Veritas Software
O58 - SDL:2008/04/14 01:00:00 A . (.Microsoft Corp., Veritas Software - Pilote E/S du Gestionnaire de disques NT.) -- C:\WINDOWS\System32\drivers\dmio.sys [154496] =>.Microsoft Corp., Veritas Software
O58 - SDL:2008/04/14 01:00:00 A . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS\System32\drivers\dmload.sys [5888] =>.Microsoft Corp., Veritas Software.
O58 - SDL:2008/04/14 01:00:00 A . (.Windows (R) Server 2003 DDK provider - High Definition Audio Bus Driver v1.0a.) -- C:\WINDOWS\System32\drivers\hdaudbus.sys [144384]
O58 - SDL:2007/08/02 17:34:30 A . (.Conexant Systems, Inc. - HSF_HWAZL WDM driver.) -- C:\WINDOWS\System32\drivers\HSFHWAZL.sys [211200] =>.Conexant Systems, Inc.
O58 - SDL:2007/08/02 17:34:26 A . (.Conexant Systems, Inc. - HSF_CNXT driver.) -- C:\WINDOWS\System32\drivers\HSF_CNXT.sys [731136] =>.Conexant Systems, Inc.
O58 - SDL:2007/08/02 17:35:12 A . (.Conexant Systems, Inc. - HSF_DP driver.) -- C:\WINDOWS\System32\drivers\HSF_DPV.sys [989952] =>.Conexant Systems, Inc.
O58 - SDL:2009/06/12 17:52:48 A . (.Intel Corporation - Intel Graphics Miniport Driver.) -- C:\WINDOWS\System32\drivers\igxpmp32.sys [6278272] =>.Intel Corporation
O58 - SDL:2012/06/20 11:51:34 A . (.HandSet Incorporated - HandSet CDROM Filter.) -- C:\WINDOWS\System32\drivers\massfilter_hs.sys [17672] =>.ZTE CORPORATION®
O58 - SDL:2016/03/10 14:08:52 A . (.Malwarebytes - Malwarebytes Anti-Malware.) -- C:\WINDOWS\System32\drivers\mbam.sys [24448] =>.Malwarebytes Corporation®
O58 - SDL:2016/03/10 14:09:00 A . (.Malwarebytes - Malwarebytes Chameleon Protection Driver.) -- C:\WINDOWS\System32\drivers\mbamchameleon.sys [123264] =>.Malwarebytes Corporation®
O58 - SDL:2016/05/08 10:31:38 A . (.Malwarebytes - Malwarebytes Anti-Malware.) -- C:\WINDOWS\System32\drivers\MBAMSwissArmy.sys [170200] =>.Malwarebytes Corporation®
O58 - SDL:2006/06/19 14:26:58 A . (.Conexant - Diagnostic Interface x86 Driver.) -- C:\WINDOWS\System32\drivers\mdmxsdk.sys [12672] =>.Conexant
O58 - SDL:2008/11/17 07:23:16 A . (.Intel Corporation - Intel® Wireless WiFi Link Driver.) -- C:\WINDOWS\System32\drivers\NETw5x32.sys [3636864] =>.Intel Corporation
O58 - SDL:2008/04/14 01:00:00 A . (.S3/Diamond Multimedia Systems - NikeDrv Usb Driver.) -- C:\WINDOWS\System32\drivers\nikedrv.sys [12032] =>.S3/Diamond Multimedia Systems
O58 - SDL:2009/03/11 14:04:00 A . (.NVIDIA Corporation - NVIDIA Compatible Windows 2000 Miniport Dri.) -- C:\WINDOWS\System32\drivers\nv4_mini.sys [6251168] =>.NVIDIA Corporation
O58 - SDL:2007/06/01 13:57:18 A . (.Novatel Wireless Inc - NWADI Interface Bus Enumerator.) -- C:\WINDOWS\System32\drivers\NWADIenum.sys [178176]
O58 - SDL:2007/05/30 16:50:48 A . (.Novatel Wireless Inc. - Novatel Wireless USB Modem/Serial Device Dr.) -- C:\WINDOWS\System32\drivers\nwdelmdm.sys [92288]
O58 - SDL:2007/05/30 16:50:48 A . (.Novatel Wireless Inc. - Novatel Wireless USB Modem/Serial Device Dr.) -- C:\WINDOWS\System32\drivers\nwdelser.sys [92288]
O58 - SDL:2007/05/30 16:50:54 A . (.Printing Communications Assoc., Inc. (PCAUSA) - PCAUSA NDIS 5.0 SPR Protocol Driver.) -- C:\WINDOWS\System32\drivers\PCASp50.sys [27072] =>.PRINTING COMMUNICATIONS ASSOC., INC.®
O58 - SDL:2014/01/08 08:09:34 A . (...) -- C:\WINDOWS\System32\drivers\pcwatch.sys [19840] =>PUP.Optional.WebProtect
O58 - SDL:2008/04/14 01:00:00 A . (.Parallel Technologies, Inc. - Parallel Technologies DirectParallel IO Lib.) -- C:\WINDOWS\System32\drivers\ptilink.sys [17792] =>.Parallel Technologies, Inc.
O58 - SDL:2008/04/14 01:00:00 A . (.S3/Diamond Multimedia Systems - Rio8Drv.sys Usb Driver.) -- C:\WINDOWS\System32\drivers\rio8drv.sys [12032] =>.S3/Diamond Multimedia Systems
O58 - SDL:2008/04/14 01:00:00 A . (.S3/Diamond Multimedia Systems - RioDrv Usb Driver.) -- C:\WINDOWS\System32\drivers\riodrv.sys [12032] =>.S3/Diamond Multimedia Systems
O58 - SDL:2008/04/14 01:00:00 A . (.Macrovision Corporation, Macrovision Europe Limited, - Macrovision SECURITY Driver.) -- C:\WINDOWS\System32\drivers\secdrv.sys [20480] =>.Macrovision Corporation, Macrovision Europe Limited,
O58 - SDL:2007/05/10 10:24:34 A . (.SigmaTel, Inc. - NDRC.) -- C:\WINDOWS\System32\drivers\sthda.sys [1222840]
O58 - SDL:2008/04/14 01:00:00 A . (.Toshiba Corporation - WDM Toshiba Tecra Video Capture Driver.) -- C:\WINDOWS\System32\drivers\tsbvcap.sys [21376] =>.Toshiba Corporation
O58 - SDL:2008/04/14 01:00:00 A . (.RAVISENT Technologies Inc. - CineMaster C WDM DVD Minidriver.) -- C:\WINDOWS\System32\drivers\vdmindvd.sys [58112] =>.RAVISENT Technologies Inc.
O58 - SDL:2012/10/31 16:02:02 A . (.Via Telecom, Inc. - viausbets driver.) -- C:\WINDOWS\System32\drivers\viahsets.sys [27016] =>.ZTE CORPORATION®
O58 - SDL:2012/11/09 15:12:08 A . (.VIA Telecom - USB2SER/MDM.) -- C:\WINDOWS\System32\drivers\viahsser.sys [53000] =>.ZTE CORPORATION®
O58 - SDL:2013/09/11 14:28:24 A . (.ZTE Corporation - USB NDIS Miniport Driver.) -- C:\WINDOWS\System32\drivers\zghsnet.sys [149696] =>.ZTE CORPORATION®
O58 - SDL:2013/09/11 14:28:10 A . (.ZTE Corporation - USB Modem/Serial Device Driver.) -- C:\WINDOWS\System32\drivers\zghsser.sys [118976] =>.ZTE CORPORATION®
O58 - SDL:2008/04/14 01:00:00 A . (...) -- C:\WINDOWS\System32\ansi.sys [9037]
O58 - SDL:2008/04/14 01:00:00 A . (...) -- C:\WINDOWS\System32\country.sys [27097]
O58 - SDL:2008/04/14 01:00:00 A . (...) -- C:\WINDOWS\System32\himem.sys [4912]
O58 - SDL:2008/04/14 01:00:00 A . (...) -- C:\WINDOWS\System32\key01.sys [42809]
O58 - SDL:2008/04/14 01:00:00 A . (...) -- C:\WINDOWS\System32\keyboard.sys [42537]
O58 - SDL:2008/04/14 01:00:00 A . (...) -- C:\WINDOWS\System32\ntdos.sys [27916]
O58 - SDL:2008/04/14 01:00:00 A . (...) -- C:\WINDOWS\System32\ntdos404.sys [29146]
O58 - SDL:2008/04/14 01:00:00 A . (...) -- C:\WINDOWS\System32\ntdos411.sys [29370]
O58 - SDL:2008/04/14 01:00:00 A . (...) -- C:\WINDOWS\System32\ntdos412.sys [29274]
O58 - SDL:2008/04/14 01:00:00 A . (...) -- C:\WINDOWS\System32\ntdos804.sys [29146]
O58 - SDL:2008/04/14 01:00:00 A . (...) -- C:\WINDOWS\System32\ntio.sys [34000]
O58 - SDL:2008/04/14 01:00:00 A . (...) -- C:\WINDOWS\System32\ntio404.sys [34560]
O58 - SDL:2008/04/14 01:00:00 A . (...) -- C:\WINDOWS\System32\ntio411.sys [35648]
O58 - SDL:2008/04/14 01:00:00 A . (...) -- C:\WINDOWS\System32\ntio412.sys [35424]
O58 - SDL:2008/04/14 01:00:00 A . (...) -- C:\WINDOWS\System32\ntio804.sys [34560]

---\\ Associations Shell Spawning (10) - 1s
O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\shell32.dll =>.Microsoft Corporation
O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft (R) Windows Based Script Host.) -- C:\WINDOWS\system32\wscript.exe =>.Microsoft Corporation
O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\WINDOWS\regedit.exe =>.Microsoft Corporation
O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S
O67 - Shell Spawning: <.html> [HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®

---\\ Menu de démarrage Internet (8) - 0s
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (...) -- iexplore.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe =>.Mozilla Corporation
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - IE Per-User Initialization Utility.) -- C:\WINDOWS\system32\ie4uinit.exe =>.Microsoft Corporation
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe =>.Mozilla Corporation
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - IE Per-User Initialization Utility.) -- C:\WINDOWS\system32\ie4uinit.exe =>.Microsoft Corporation
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe =>.Mozilla Corporation
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - IE Per-User Initialization Utility.) -- C:\WINDOWS\system32\ie4uinit.exe =>.Microsoft Corporation

---\\ Recherche d'infection sur les navigateurs (87) - 29s
O69 - SBI: prefs.js [fd - dekqmgwk.default-1441876010187] user_pref("browser.startup.homepage", "http://hp.myway.com/internetspeedtracker/ttab02/index.html?coId=8f9c98830f524776ac2d98f9f1f[...] =>.Superfluous.MindSpark
O69 - SBI: prefs.js [fd - dekqmgwk.default-1441876010187] user_pref("extensions.toolbar.mindspark._39Members_.BUTTON_STRUCTURE", "[{\"b\":223755698,\"c\":\"mindspark.magnify\",\"p\":\"L.0\[...] =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [fd - dekqmgwk.default-1441876010187] user_pref("extensions.toolbar.mindspark._39Members_.browser.startup.homepage.savedPrev", "true"); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [fd - dekqmgwk.default-1441876010187] user_pref("extensions.toolbar.mindspark._39Members_.browser.startup.homepage.tb", "http://hp.myway.com/mapsgalaxy/ttab02/index.htm[...] =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [fd - dekqmgwk.default-1441876010187] user_pref("extensions.toolbar.mindspark._39Members_.browser.startup.page.savedPrev", 1); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [fd - dekqmgwk.default-1441876010187] user_pref("extensions.toolbar.mindspark._39Members_.browser.startup.page.tb", 1); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [fd - dekqmgwk.default-1441876010187] user_pref("extensions.toolbar.mindspark._39Members_.browser.version.last", "45.0"); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [fd - dekqmgwk.default-1441876010187] user_pref("extensions.toolbar.mindspark._39Members_.coId", "d802e14f1f5842ef8d7063115205dd9a"); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [fd - dekqmgwk.default-1441876010187] user_pref("extensions.toolbar.mindspark._39Members_.firstKnownVersion", "7.70.9.27610"); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [fd - dekqmgwk.default-1441876010187] user_pref("extensions.toolbar.mindspark._39Members_.homepage", "http://hp.myway.com/mapsgalaxy/ttab02/index.html?coId=d802e14f1f58[...] =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [fd - dekqmgwk.default-1441876010187] user_pref("extensions.toolbar.mindspark._39Members_.hp.enabled", true); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [fd - dekqmgwk.default-1441876010187] user_pref("extensions.toolbar.mindspark._39Members_.hp.guardType", "HPR"); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [fd - dekqmgwk.default-1441876010187] user_pref("extensions.toolbar.mindspark._39Members_.hp.user.defined", false); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [fd - dekqmgwk.default-1441876010187] user_pref("extensions.toolbar.mindspark._39Members_.initialized", true); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [fd - dekqmgwk.default-1441876010187] user_pref("extensions.toolbar.mindspark._39Members_.installType", "XPI"); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [fd - dekqmgwk.default-1441876010187] user_pref("extensions.toolbar.mindspark._39Members_.installation.dlpCountryCode", "FR"); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [fd - dekqmgwk.default-1441876010187] user_pref("extensions.toolbar.mindspark._39Members_.installation.installDate", "2016041010"); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [fd - dekqmgwk.default-1441876010187] user_pref("extensions.toolbar.mindspark._39Members_.installation.partnerId", "^UX^xdm063^TTAB02^fr"); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [fd - dekqmgwk.default-1441876010187] user_pref("extensions.toolbar.mindspark._39Members_.installation.partnerSubId", "CMDO-tvXg8wCFRSNGwodWxQH8g"); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [fd - dekqmgwk.default-1441876010187] user_pref("extensions.toolbar.mindspark._39Members_.installation.pixelUrl", "http://www.mapsgalaxy.com/install_pixels.jhtml?partne[...] =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [fd - dekqmgwk.default-1441876010187] user_pref("extensions.toolbar.mindspark._39Members_.installation.success", true); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [fd - dekqmgwk.default-1441876010187] user_pref("extensions.toolbar.mindspark._39Members_.installation.toolbarId", "95BA281F-C7C4-4F2C-972D-DF4622B23D82"); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [fd - dekqmgwk.default-1441876010187] user_pref("extensions.toolbar.mindspark._39Members_.lastActivePing", "1460305400676"); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [fd - dekqmgwk.default-1441876010187] user_pref("extensions.toolbar.mindspark._39Members_.lastKnownVersion", "7.70.9.27610"); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [fd - dekqmgwk.default-1441876010187] user_pref("extensions.toolbar.mindspark._39Members_.lssState", "{\"previousLocales\":[\"fr\",\"fr-FR\",\"en-US\",\"en\"],\"support[...] =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [fd - dekqmgwk.default-1441876010187] user_pref("extensions.toolbar.mindspark._39Members_.options.defaultSearch", false); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [fd - dekqmgwk.default-1441876010187] user_pref("extensions.toolbar.mindspark._39Members_.options.homePageEnabled", true); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [fd - dekqmgwk.default-1441876010187] user_pref("extensions.toolbar.mindspark._39Members_.options.keywordEnabled", false); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [fd - dekqmgwk.default-1441876010187] user_pref("extensions.toolbar.mindspark._39Members_.options.tabEnabled", true); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [fd - dekqmgwk.default-1441876010187] user_pref("extensions.toolbar.mindspark._39Members_.partnerPixelFired", true); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [fd - dekqmgwk.default-1441876010187] user_pref("extensions.toolbar.mindspark._39Members_.productDeliveryOption.language", "fr"); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [fd - dekqmgwk.default-1441876010187] user_pref("extensions.toolbar.mindspark._39Members_.productDeliveryOption.newTabURL", "http://hp.myway.com/mapsgalaxy/ttab02/index[...] =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [fd - dekqmgwk.default-1441876010187] user_pref("extensions.toolbar.mindspark._39Members_.productDeliveryOption.type", "ToolTab"); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [fd - dekqmgwk.default-1441876010187] user_pref("extensions.toolbar.mindspark._39Members_.successUrl", "http://www.mapsgalaxy.com/installComplete.jhtml"); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [fd - dekqmgwk.default-1441876010187] user_pref("extensions.toolbar.mindspark._39Members_.toolbarCollapsed", false); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [fd - dekqmgwk.default-1441876010187] user_pref("extensions.toolbar.mindspark._39Members_.uninstallSurveyUrl", "http://www.research.net/r/ZC5XFLJ?c="); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [fd - dekqmgwk.default-1441876010187] user_pref("extensions.toolbar.mindspark._39Members_.uninstallTasks", "{\"prefBranchesToDelete\":[\"extensions.toolbar.mindspark._3[...] =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [fd - dekqmgwk.default-1441876010187] user_pref("extensions.toolbar.mindspark._9tMembers_.BUTTON_STRUCTURE", "[{\"b\":223755489,\"c\":\"mindspark.magnify\",\"p\":\"L.0\[...] =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [fd - dekqmgwk.default-1441876010187] user_pref("extensions.toolbar.mindspark._9tMembers_.browser.startup.homepage.prev", "http://hp.myway.com/mapsgalaxy/ttab02/index.h[...] =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [fd - dekqmgwk.default-1441876010187] user_pref("extensions.toolbar.mindspark._9tMembers_.browser.startup.homepage.savedPrev", "true"); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [fd - dekqmgwk.default-1441876010187] user_pref("extensions.toolbar.mindspark._9tMembers_.browser.startup.homepage.tb", "http://hp.myway.com/internetspeedtracker/ttab02[...] =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [fd - dekqmgwk.default-1441876010187] user_pref("extensions.toolbar.mindspark._9tMembers_.browser.startup.page.savedPrev", 1); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [fd - dekqmgwk.default-1441876010187] user_pref("extensions.toolbar.mindspark._9tMembers_.browser.startup.page.tb", 1); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [fd - dekqmgwk.default-1441876010187] user_pref("extensions.toolbar.mindspark._9tMembers_.browser.version.last", "46.0"); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [fd - dekqmgwk.default-1441876010187] user_pref("extensions.toolbar.mindspark._9tMembers_.coId", "8f9c98830f524776ac2d98f9f1f1a870"); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [fd - dekqmgwk.default-1441876010187] user_pref("extensions.toolbar.mindspark._9tMembers_.firstKnownVersion", "7.70.9.27844"); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [fd - dekqmgwk.default-1441876010187] user_pref("extensions.toolbar.mindspark._9tMembers_.homepage", "http://hp.myway.com/internetspeedtracker/ttab02/index.html?coId=8f[...] =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [fd - dekqmgwk.default-1441876010187] user_pref("extensions.toolbar.mindspark._9tMembers_.hp.enabled", true); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [fd - dekqmgwk.default-1441876010187] user_pref("extensions.toolbar.mindspark._9tMembers_.hp.guardType", "HPR"); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [fd - dekqmgwk.default-1441876010187] user_pref("extensions.toolbar.mindspark._9tMembers_.hp.user.defined", false); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [fd - dekqmgwk.default-1441876010187] user_pref("extensions.toolbar.mindspark._9tMembers_.initialized", true); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [fd - dekqmgwk.default-1441876010187] user_pref("extensions.toolbar.mindspark._9tMembers_.installType", "XPI"); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [fd - dekqmgwk.default-1441876010187] user_pref("extensions.toolbar.mindspark._9tMembers_.installation.dlpCountryCode", "FR"); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [fd - dekqmgwk.default-1441876010187] user_pref("extensions.toolbar.mindspark._9tMembers_.installation.installDate", "2016050811"); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [fd - dekqmgwk.default-1441876010187] user_pref("extensions.toolbar.mindspark._9tMembers_.installation.partnerId", "^BBQ^xpt088^TTAB02^fr"); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [fd - dekqmgwk.default-1441876010187] user_pref("extensions.toolbar.mindspark._9tMembers_.installation.partnerSubId", "1__3"); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [fd - dekqmgwk.default-1441876010187] user_pref("extensions.toolbar.mindspark._9tMembers_.installation.pixelUrl", "http://free.internetspeedtracker.com/install_pixels.j[...] =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [fd - dekqmgwk.default-1441876010187] user_pref("extensions.toolbar.mindspark._9tMembers_.installation.success", true); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [fd - dekqmgwk.default-1441876010187] user_pref("extensions.toolbar.mindspark._9tMembers_.installation.toolbarId", "36C5BC99-DBE0-489E-99D2-29E5090E7696"); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [fd - dekqmgwk.default-1441876010187] user_pref("extensions.toolbar.mindspark._9tMembers_.lastActivePing", "1462698612388"); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [fd - dekqmgwk.default-1441876010187] user_pref("extensions.toolbar.mindspark._9tMembers_.lastKnownVersion", "7.70.9.27844"); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [fd - dekqmgwk.default-1441876010187] user_pref("extensions.toolbar.mindspark._9tMembers_.lssState", "{\"previousLocales\":[\"fr\",\"fr-FR\",\"en-US\",\"en\"],\"support[...] =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [fd - dekqmgwk.default-1441876010187] user_pref("extensions.toolbar.mindspark._9tMembers_.options.defaultSearch", false); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [fd - dekqmgwk.default-1441876010187] user_pref("extensions.toolbar.mindspark._9tMembers_.options.homePageEnabled", true); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [fd - dekqmgwk.default-1441876010187] user_pref("extensions.toolbar.mindspark._9tMembers_.options.keywordEnabled", false); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [fd - dekqmgwk.default-1441876010187] user_pref("extensions.toolbar.mindspark._9tMembers_.options.tabEnabled", true); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [fd - dekqmgwk.default-1441876010187] user_pref("extensions.toolbar.mindspark._9tMembers_.partnerPixelFired", true); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [fd - dekqmgwk.default-1441876010187] user_pref("extensions.toolbar.mindspark._9tMembers_.productDeliveryOption.language", "fr"); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [fd - dekqmgwk.default-1441876010187] user_pref("extensions.toolbar.mindspark._9tMembers_.productDeliveryOption.newTabURL", "http://hp.myway.com/internetspeedtracker/tt[...] =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [fd - dekqmgwk.default-1441876010187] user_pref("extensions.toolbar.mindspark._9tMembers_.productDeliveryOption.type", "ToolTab"); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [fd - dekqmgwk.default-1441876010187] user_pref("extensions.toolbar.mindspark._9tMembers_.successUrl", "http://free.internetspeedtracker.com/installComplete.jhtml"); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [fd - dekqmgwk.default-1441876010187] user_pref("extensions.toolbar.mindspark._9tMembers_.toolbarCollapsed", false); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [fd - dekqmgwk.default-1441876010187] user_pref("extensions.toolbar.mindspark._9tMembers_.uninstallSurveyUrl", "http://www.research.net/r/66QYSWY?c="); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [fd - dekqmgwk.default-1441876010187] user_pref("extensions.toolbar.mindspark._9tMembers_.uninstallTasks", "{\"prefBranchesToDelete\":[\"extensions.toolbar.mindspark._9[...] =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [fd - dekqmgwk.default-1441876010187] user_pref("extensions.toolbar.mindspark.hp.enabled", true); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [fd - dekqmgwk.default-1441876010187] user_pref("extensions.toolbar.mindspark.hp.enabled.guid", "internetspeedtracker@mindspark.com"); =>PUP.Optional.Bandoo
O69 - SBI: prefs.js [fd - dekqmgwk.default-1441876010187] user_pref("extensions.toolbar.mindspark.lastInstalled", "internetspeedtracker@mindspark.com"); =>PUP.Optional.Bandoo
O69 - SBI: SearchScopes [HKCU] {27014196-028D-44FA-AA42-4E43F3D38B28} [DefaultScope] - (Google) - http://www.google.com/
O69 - SBI: SearchScopes [HKCU] {31090377-0740-419E-BEFC-A56E50500D5B} - (Speedial) - http://speedial.com/ =>PUP.Optional.SearchYa
O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} - (Goo) - http://www.google.com/
O69 - SBI: SearchScopes [HKCU] {7170960B-A9E1-A460-0850-75C23F9984CC} - () - http://search.live.com/
O69 - SBI: SearchScopes [HKCU] {DC91FAFB-6CEA-49E5-BB74-9CEE75D09B77} - (Bing) - http://www.bing.com/
O69 - SBI: SearchScopes [HKCU] {DDBB19A5-0C82-4048-9A4A-558F794D097D} - (explorary) - http://www.explorary.com/ =>PUP.Optional.Explorary
O69 - SBI: SearchScopes [HKCU] - (Conduit Search) - http://search.conduit.com/ =>.Superfluous.Conduit
O69 - SBI: SearchScopes [HKLM] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (@ieframe.dll,-12512) - http://www.bing.com/
O69 - SBI: SearchScopes [HKLM] {31090377-0740-419E-BEFC-A56E50500D5B} - (Speedial) - http://speedial.com/ =>PUP.Optional.SearchYa
O69 - SBI: SearchScopes [HKLM] {7170960B-A9E1-A460-0850-75C23F9984CC} - (@ieframe.dll,-12512) - http://search.live.com/

---\\ Enumère les services démarrés par Svchost (40) - 1s
O83 - Search Svchost Services: AppMgmt (AppMgmt) . (.Microsoft Corporation - Service Installation de logiciels.) -- C:\WINDOWS\system32\appmgmts.dll [176640] =>.Microsoft Corporation
O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Windows Audio Service.) -- C:\WINDOWS\system32\audiosrv.dll [42496] =>.Microsoft Corporation
O83 - Search Svchost Services: Browser (Browser) . (.Microsoft Corporation - Computer Browser Service DLL.) -- C:\WINDOWS\system32\browser.dll [78336] =>.Microsoft Corporation
O83 - Search Svchost Services: CryptSvc (CryptSvc) . (.Microsoft Corporation - Cryptographic Services.) -- C:\WINDOWS\system32\cryptsvc.dll [62464] =>.Microsoft Corporation
O83 - Search Svchost Services: DMServer (DMServer) . (.Microsoft Corp. - DLL Service gestionnaire de disque logique.) -- C:\WINDOWS\system32\dmserver.dll [24576] =>.Microsoft Corp.
O83 - Search Svchost Services: DHCP (DHCP) . (.Microsoft Corporation - Service client DHCP.) -- C:\WINDOWS\system32\dhcpcsvc.dll [127488] =>.Microsoft Corporation
O83 - Search Svchost Services: ERSvc (ERSvc) . (.Microsoft Corporation - Windows Error Reporting Service.) -- C:\WINDOWS\system32\ersvc.dll [23040] =>.Microsoft Corporation
O83 - Search Svchost Services: EventSystem (EventSystem) . (.Microsoft Corporation - .) -- C:\WINDOWS\system32\es.dll [253952] =>.Microsoft Corporation
O83 - Search Svchost Services: FastUserSwitchingCompatibility (FastUserSwitchingCompatibility) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\system32\shsvcs.dll [135680] =>.Microsoft Corporation
O83 - Search Svchost Services: HidServ (HidServ) . (.Microsoft Corporation - HID Audio Service.) -- C:\WINDOWS\system32\hidserv.dll [21504] =>.Microsoft Corporation
O83 - Search Svchost Services: LanmanServer (LanmanServer) . (.Microsoft Corporation - Server Service DLL.) -- C:\WINDOWS\system32\srvsvc.dll [99840] =>.Microsoft Corporation
O83 - Search Svchost Services: LanmanWorkstation (LanmanWorkstation) . (.Microsoft Corporation - Workstation Service DLL.) -- C:\WINDOWS\system32\wkssvc.dll [132096] =>.Microsoft Corporation
O83 - Search Svchost Services: Messenger (Messenger) . (.Microsoft Corporation - NT Messenger Service.) -- C:\WINDOWS\system32\msgsvc.dll [33792] =>.Microsoft Corporation
O83 - Search Svchost Services: Netman (Netman) . (.Microsoft Corporation - Gestionnaire de connexions réseau.) -- C:\WINDOWS\system32\netman.dll [198144] =>.Microsoft Corporation
O83 - Search Svchost Services: Nla (Nla) . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Micro.) -- C:\WINDOWS\system32\mswsock.dll [247808] =>.Microsoft Corporation
O83 - Search Svchost Services: Ntmssvc (Ntmssvc) . (.Microsoft Corporation - Gestionnaire de stockage amovible.) -- C:\WINDOWS\system32\ntmssvc.dll [438272] =>.Microsoft Corporation
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Remote Access AutoDial Manager.) -- C:\WINDOWS\system32\rasauto.dll [88576] =>.Microsoft Corporation
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Remote Access Connection Manager.) -- C:\WINDOWS\system32\rasmans.dll [186368] =>.Microsoft Corporation
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Dynamic Interface Manager.) -- C:\WINDOWS\system32\mprdim.dll [53248] =>.Microsoft Corporation
O83 - Search Svchost Services: Schedule (Schedule) . (.Microsoft Corporation - Moteur du Planificateur de tâches.) -- C:\WINDOWS\system32\schedsvc.dll [194560] =>.Microsoft Corporation
O83 - Search Svchost Services: Seclogon (Seclogon) . (.Microsoft Corporation - DLL de service d'ouverture de session secon.) -- C:\WINDOWS\system32\seclogon.dll [18944] =>.Microsoft Corporation
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - System Event Notification Service (SENS).) -- C:\WINDOWS\system32\sens.dll [39424] =>.Microsoft Corporation
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l'application d'assistance à.) -- C:\WINDOWS\system32\ipnathlp.dll [332800] =>.Microsoft Corporation
O83 - Search Svchost Services: SRService (SRService) . (.Microsoft Corporation - Service de restauration du système.) -- C:\WINDOWS\system32\srsvc.dll [171520] =>.Microsoft Corporation
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM.) -- C:\WINDOWS\system32\tapisrv.dll [249856] =>.Microsoft Corporation
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\system32\shsvcs.dll [135680] =>.Microsoft Corporation
O83 - Search Svchost Services: TrkWks (TrkWks) . (.Microsoft Corporation - Distributed Link Tracking Client.) -- C:\WINDOWS\system32\trkwks.dll [90112] =>.Microsoft Corporation
O83 - Search Svchost Services: W32Time (W32Time) . (.Microsoft Corporation - Service de temps Windows.) -- C:\WINDOWS\system32\w32time.dll [178176] =>.Microsoft Corporation
O83 - Search Svchost Services: WZCSVC (WZCSVC) . (.Microsoft Corporation - Service configuration automatique sans fil.) -- C:\WINDOWS\system32\wzcsvc.dll [483840] =>.Microsoft Corporation
O83 - Search Svchost Services: Wmi (Wmi) . (.Microsoft Corporation - API avancées Windows 32.) -- C:\WINDOWS\system32\advapi32.dll [685568] =>.Microsoft Corporation
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\WINDOWS\system32\wbem\wmisvc.dll [145408] =>.Microsoft Corporation
O83 - Search Svchost Services: wscsvc (wscsvc) . (.Microsoft Corporation - Windows Security Center Service.) -- C:\WINDOWS\system32\wscsvc.dll [80896] =>.Microsoft Corporation
O83 - Search Svchost Services: xmlprov (xmlprov) . (.Microsoft Corporation - Network Provisioning Service.) -- C:\WINDOWS\system32\xmlprov.dll [129024] =>.Microsoft Corporation
O83 - Search Svchost Services: napagent (napagent) . (.Microsoft Corporation - Exécution du service Agent de quarantaine.) -- C:\WINDOWS\system32\qagentrt.dll [293376] =>.Microsoft Corporation
O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\WINDOWS\system32\kmsvc.dll [61440] =>.Microsoft Corporation
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière.) -- C:\WINDOWS\system32\qmgr.dll [409088] =>.Microsoft Corporation
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Windows Update AutoUpdate Service.) -- C:\WINDOWS\system32\wuauserv.dll [6656] =>.Microsoft Corporation
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\system32\shsvcs.dll [135680] =>.Microsoft Corporation
O83 - Search Svchost Services: helpsvc (helpsvc) . (.Microsoft Corporation - Microsoft PCHealth Service Holder.) -- C:\WINDOWS\pchealth\helpctr\binaries\pchsvc.dll [38400] =>.Microsoft Corporation
O83 - Search Svchost Services: WmdmPmSN (WmdmPmSN) . (.Microsoft Corporation - Microsoft Media Device Service Provider.) -- C:\WINDOWS\system32\mspmsnsv.dll [27136] =>.Microsoft Corporation

---\\ Scan Additionnel (39) - 0s
HKLM\SYSTEM\CurrentControlSet\Services\rcores =>Trojan.Agent
C:\Program Files\tuto4pc_fr_86\tuto4pc_fr_86.exe =>.Superfluous.Tuto4PC
C:\Documents and Settings\fd\Local Settings\Application Data\SmartWeb\SmartWebHelper.exe =>PUP.Optional.SmartWebSearch
C:\Documents and Settings\fd\Local Settings\Application Data\SmartWeb\SmartWebApp.exe =>PUP.Optional.SmartWebSearch
C:\Program Files\Mozilla Firefox\browser\searchplugins\omiga-plus.xml =>PUP.Optional.OmigaPlus
C:\Documents and Settings\fd\Application Data\Mozilla\Firefox\Profiles\dekqmgwk.default-1441876010187\extensions\_9tMembers_@free.internetspeedtracker.com =>.Superfluous.MindSpark
C:\WINDOWS\system32\PCProtect.dll =>Hijacker.Winsock
HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SmartWeb =>PUP.Optional.SmartWebSearch
HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\tuto4pc_fr_86_is1 =>.Superfluous.Tuto4PC
HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} =>Heuristic.Suspect
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SmartWeb =>PUP.Optional.SmartWebSearch
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\tuto4pc_fr_86_is1 =>.Superfluous.Tuto4PC
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} =>Heuristic.Suspect
HKLM\SOFTWARE\mamverifier =>Toolbar.Mamverifier
HKLM\SOFTWARE\WebProtect =>PUP.Optional.WebProtect
HKCU\SOFTWARE\Probit Software =>.Superfluous.ProbitSoftware
HKCU\SOFTWARE\rttasks =>PUP.Optional.RocketTab
HKCU\SOFTWARE\SmartWeb =>PUP.Optional.SmartWebSearch
HKCU\SOFTWARE\TeleCharger =>.Superfluous.Downloader
HKCU\SOFTWARE\Vosteran =>PUP.Optional.Vosteran
HKCU\SOFTWARE\_CrossriderRegNamePlaceHolder_ =>PUP.Optional.CrossRider
C:\Program Files\Reimageplus.com =>.Superfluous.ReimageRepair
C:\Program Files\Software =>PUP.Optional.Boxore
C:\Program Files\tuto4pc_fr_86 =>.Superfluous.Tuto4PC
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\FileParade bundle uninstaller =>PUP.Optional.FileParadeBundle
C:\Documents and Settings\All Users\Application Data\DriverGenius =>.Superfluous.DriverGenius
C:\Documents and Settings\fd\Application Data\SmartWeb =>PUP.Optional.SmartWebSearch
C:\Documents and Settings\fd\Local Settings\Application Data\com =>PUP.Optional.Generic
C:\Documents and Settings\fd\Local Settings\Application Data\Lollipop_06191304 =>PUP.Optional.Lollipop
C:\Documents and Settings\fd\Local Settings\Application Data\SmartWeb =>PUP.Optional.SmartWebSearch
C:\Documents and Settings\fd\Local Settings\Application Data\Software =>PUP.Optional.Boxore
C:\Documents and Settings\fd\Local Settings\Application Data\tut_fr_86 =>PUP.Optional.AgenceExclusive
C:\WINDOWS\Prefetch\SMARTWEBAPP.EXE-08161991.pf =>PUP.Optional.SmartWebSearch
C:\WINDOWS\Prefetch\SMARTWEBHELPER.EXE-24A467C8.pf =>PUP.Optional.SmartWebSearch
C:\WINDOWS\System32\drivers\pcwatch.sys =>PUP.Optional.WebProtect
HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{31090377-0740-419E-BEFC-A56E50500D5B} =>PUP.Optional.SearchYa
HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{DDBB19A5-0C82-4048-9A4A-558F794D097D} =>PUP.Optional.Explorary
HKCU\Software\Microsoft\Internet Explorer\SearchScopes\ =>.Superfluous.Conduit
HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{31090377-0740-419E-BEFC-A56E50500D5B} =>PUP.Optional.SearchYa

---\\ Récapitulatif des éléments trouvés sur votre station (26) - 0s
http://www.nicolascoolman.fr/?p=4664 =>Trojan.Agent
http://www.nicolascoolman.fr/?p=29 =>PUP.Optional.SmartWebSearch
http://www.nicolascoolman.fr/pup-optional-tuto4pc/ =>.Superfluous.Tuto4PC
http://www.nicolascoolman.fr/?p=142 =>.Superfluous.MindSpark
http://www.nicolascoolman.fr/?p=1007 =>PUP.Optional.OmigaPlus
http://www.nicolascoolman.fr/?p=4664 =>Hijacker.Proxy
http://www.nicolascoolman.fr/?p=182 =>PUP.Optional.EORezo
http://www.nicolascoolman.info/2016/04/30/pup-optional-crossrider/ =>PUP.Optional.CrossRider
http://www.nicolascoolman.info/2016/04/22/heuristic-suspect/ =>Heuristic.Suspect
http://www.nicolascoolman.fr/?p=5143 =>Toolbar.Mamverifier
http://www.nicolascoolman.info/2016/05/01/pup-optional-webprotector/ =>PUP.Optional.WebProtect
http://www.nicolascoolman.fr/?p=653 =>.Superfluous.ProbitSoftware
http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.RocketTab
http://www.nicolascoolman.fr/?p=5145 =>.Superfluous.Downloader
http://www.nicolascoolman.fr/pup-optional-vosteran =>PUP.Optional.Vosteran
http://www.nicolascoolman.fr/?p=1075 =>.Superfluous.ReimageRepair
http://www.nicolascoolman.info/2016/05/02/pup-optional-boxore/ =>PUP.Optional.Boxore
http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.FileParadeBundle
http://www.nicolascoolman.fr/?p=5145 =>.Superfluous.DriverGenius
http://www.nicolascoolman.info/2016/05/01/definition-dun-logiciel-pup-lpi/ =>PUP.Optional.Generic
http://www.nicolascoolman.fr/?p=302 =>PUP.Optional.Lollipop
http://www.nicolascoolman.fr/?p=122 =>PUP.Optional.AgenceExclusive
http://www.nicolascoolman.fr/?p=237 =>PUP.Optional.Bandoo
http://www.nicolascoolman.fr/?p=425 =>PUP.Optional.SearchYa
http://www.nicolascoolman.fr/pup-explorary/ =>PUP.Optional.Explorary
http://www.nicolascoolman.fr/?p=210 =>.Superfluous.Conduit

~ End of the scan, 70327 items in 00h15mn21s (1013)(0)

Publicité


Signaler le contenu de ce document

Publicité