~ ZHPDiag v2017.9.7.152 Par Nicolas Coolman (2017/09/07)
~ Démarré par jclou (Administrator) (2017/09/08 10:28:22)
~ Web: https://www.nicolascoolman.com
~ Blog: https://nicolascoolman.eu/
~ Facebook: https://www.facebook.com/nicolascoolman1
~ Certificate ZHPDiag: Legal
~ Etat de la version: Version OK
~ Mode: Scanner
~ Rapport: C:\Users\jclou\Desktop\ZHPDiag.txt
~ Rapport: C:\Users\jclou\AppData\Roaming\ZHP\ZHPDiag.txt
~ UAC: Activate
~ Démarrage du système: Normal (Normal boot)
Windows 10 Home, 64-bit (Build 15063) =>.Microsoft Corporation

---\\ Navigateurs Internet (4) - 0s
~ GCIE: Google Chrome v60.0.3112.113
~ MFIE: Mozilla Firefox 54.0 (x86 fr)
~ MSIE: Microsoft Edge v40
~ MSIE: Internet Explorer v11.540.15063.0

---\\ Informations sur les produits Windows (8) - 0s
~ Windows Server License Manager Script : OK
~ Licence Script File Génération : OK
~ Windows(R) Operating System, OEM_DM channel
Windows ID Activation : OK
~ Windows Partial Key : HT9QQ
Windows License : OK
~ Windows Remaining Initializations Number : 1001
Windows Automatic Updates : OK

---\\ Logiciels de protection (2) - 4s
McAfee Internet Security v15.0.179 (Protection)
Windows Defender (Deactivate)

---\\ Informations sur le système (6) - 0s
~ Operating System: Intel64 Family 6 Model 60 Stepping 3, GenuineIntel
~ Operating System: 64-bit
~ Boot mode: Normal (Normal boot)
Total RAM: 4131.956 MB (36% free) : OK =>.RAM Value
System Restore: Activé (Enable)
System drive C: has 65 GB (42%) free of 153 GB : OK =>.Disk Space

---\\ Mode de connexion au système (3) - 0s
~ Computer Name: DESKTOP-HEAV0BK
~ User Name: jclou
~ Logged in as Administrator

---\\ Enumération des unités disques (2) - 0s
~ Drive C: has 65 GB free of 153 GB (System)
~ Drive D: has 634 GB free of 799 GB

---\\ Etat du Centre de Sécurité Windows (7) - 0s
[HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
[HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified
[HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\Software\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM64\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK

---\\ Recherche particulière de fichiers génériques (25) - 2s
[MD5.CA3BF0F15BA4F24D511BFEE725CC89BD] - 20/09/2016 - (.Microsoft Corporation - Explorateur Windows.) -- C:\WINDOWS\Explorer.exe [4847424] =>.Microsoft Windows®
[MD5.ECB702B8C5650381C0784F1EEABB97BC] - 20/09/2016 - (.Microsoft Corporation - Processus hôte Windows (Rundll32).) -- C:\WINDOWS\System32\rundll32.exe [68608] =>.Microsoft Corporation
[MD5.0242626678C83AE788C655C1990A3CC3] - 20/09/2016 - (.Microsoft Corporation - Application de démarrage de Windows.) -- C:\WINDOWS\System32\Wininit.exe [318232] =>.Microsoft Windows Publisher®
[MD5.BC776B6B434641AF71ED0CC00BC859AA] - 20/09/2016 - (.Microsoft Corporation - Extensions Internet pour Win32.) -- C:\WINDOWS\System32\wininet.dll [3307008] =>.Microsoft Corporation
[MD5.31E3287EF6D97C5864A301CEA75BBBA1] - 20/09/2016 - (.Microsoft Corporation - Application d’ouverture de session Windows.) -- C:\WINDOWS\System32\Winlogon.exe [706560] =>.Microsoft Corporation
[MD5.50CDF68A8EA8A2A9165CD573FA6C42D8] - 20/09/2016 - (.Microsoft Corporation - Bibliothèque de licences.) -- C:\WINDOWS\System32\sppcomapi.dll [414208] =>.Microsoft Corporation
[MD5.0F9FA6A2D4EAE50393DCE473759A9845] - 20/09/2016 - (.Microsoft Corporation - DNS DLL de l’API Client.) -- C:\WINDOWS\System32\dnsapi.dll [661224] =>.Microsoft Windows®
[MD5.3F969D5ADEAB3284ABD500B37D74A8F8] - 20/09/2016 - (.Microsoft Corporation - DNS DLL de l’API Client.) -- C:\WINDOWS\Syswow64\dnsapi.dll [508344] =>.Microsoft Windows®
[MD5.70E14A01193D817004C0F88E767BC59B] - 20/09/2016 - (.Microsoft Corporation - DLL client de l’API uilisateur de Windows m.) -- C:\WINDOWS\System32\fr-FR\user32.dll.mui [19968] =>.Microsoft Corporation
[MD5.AC1928C2F7505BD556C552F153B062AB] - 20/09/2016 - (.Microsoft Corporation - Pilote de fonction connexe pour WinSock.) -- C:\WINDOWS\System32\drivers\AFD.sys [610712] =>.Microsoft Windows®
[MD5.01733BEEE02E51F712330D5909BD701C] - 20/09/2016 - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) -- C:\WINDOWS\System32\drivers\atapi.sys [29088] =>.Microsoft Windows®
[MD5.B6E5AD7C83A5254DEE9D86023C0E5A81] - 20/09/2016 - (.Microsoft Corporation - CD-ROM File System Driver.) -- C:\WINDOWS\System32\drivers\Cdfs.sys [93184] =>.Microsoft Corporation
[MD5.ABE77AD954BC3D72F559CF0C381E50BC] - 20/09/2016 - (.Microsoft Corporation - SCSI CD-ROM Driver.) -- C:\WINDOWS\System32\drivers\Cdrom.sys [160256] =>.Microsoft Corporation
[MD5.185A4519B7764F4DEF714D890A7A9FD2] - 20/09/2016 - (.Microsoft Corporation - DFS Namespace Client Driver.) -- C:\WINDOWS\System32\drivers\DfsC.sys [150528] =>.Microsoft Corporation
[MD5.02B9639D9997E95CDF2F4C4F3BDCC73D] - 20/09/2016 - (.Microsoft Corporation - High Definition Audio Bus Driver.) -- C:\WINDOWS\System32\drivers\HDAudBus.sys [86528] =>.Microsoft Corporation
[MD5.C6C8315E3262FAE460529C6DA2951682] - 20/09/2016 - (.Microsoft Corporation - Pilote de port i8042.) -- C:\WINDOWS\System32\drivers\i8042prt.sys [115200] =>.Microsoft Corporation
[MD5.DCC05E5EAA580C97F13B434FAFACED85] - 20/09/2016 - (.Microsoft Corporation - IP Network Address Translator.) -- C:\WINDOWS\System32\drivers\IpNat.sys [214528] =>.Microsoft Corporation
[MD5.F2AD1B72C5A6475FB5FF332E1980DF88] - 20/09/2016 - (.Microsoft Corporation - Minirdr SMB Windows NT.) -- C:\WINDOWS\System32\drivers\MRxSmb.sys [467352] =>.Microsoft Windows®
[MD5.30C2F67EC84EB11B22011620107E0325] - 20/09/2016 - (.Microsoft Corporation - MBT Transport driver.) -- C:\WINDOWS\System32\drivers\netBT.sys [305152] =>.Microsoft Corporation
[MD5.075F8C81457804BB79DD33FE69A96C57] - 20/09/2016 - (.Microsoft Corporation - Pilote du système de fichiers NT.) -- C:\WINDOWS\System32\drivers\ntfs.sys [2327456] =>.Microsoft Windows®
[MD5.2CC6C325B271C7CA60F374F8F868CB45] - 20/09/2016 - (.Microsoft Corporation - Pilote de port parallèle.) -- C:\WINDOWS\System32\drivers\Parport.sys [97792] =>.Microsoft Corporation
[MD5.5279EC98F6218D29EADDFECCC0D80E9A] - 20/09/2016 - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) -- C:\WINDOWS\System32\drivers\Rasl2tp.sys [107008] =>.Microsoft Corporation
[MD5.53A01D3FDB701AC5D9DDE4140227E3D9] - 20/09/2016 - (.Microsoft Corporation - Redirecteur de périphérique de Microsoft RD.) -- C:\WINDOWS\System32\drivers\rdpdr.sys [183296] =>.Microsoft Corporation
[MD5.D74756DD1518D28A09CDA99696273FA4] - 20/09/2016 - (.Microsoft Corporation - TDI Translation Driver.) -- C:\WINDOWS\System32\drivers\tdx.sys [119712] =>.Microsoft Windows®
[MD5.E3429DBBEA3965BB96E24B16EF4A2551] - 20/09/2016 - (.Microsoft Corporation - Volume Shadow Copy driver.) -- C:\WINDOWS\System32\drivers\volsnap.sys [397216] =>.Microsoft Windows®

---\\ Liste des services NT non Microsoft et non désactivés (36) - 3s
O23 - Service: ASUS Com Service (asComSvc) . (...) - C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe =>.ASUSTeK Computer Inc.®
O23 - Service: Asus WebStorage Windows Service (Asus WebStorage Windows Service) . (.ASUS Cloud Corporation - Asus WebStorage Windows Service.) - C:\Program Files (x86)\ASUS\WebStorage\2.1.11.399\AsusWSWinService.exe =>.ASUS Cloud Corporation
O23 - Service: clsid54021 (clsid54021) . (...) - C:\ProgramData\clsid54021.exe (.not file.) =>PUP.Optional.Salus
O23 - Service: FABS - Helping agent for MAGIX media database (Fabs) . (.MAGIX AG - Verzeichnisüberwachung und Hilfsaufgaben fü.) - C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe =>.MAGIX AG
O23 - Service: GamesAppIntegrationService (GamesAppIntegrationService) . (.WildTangent - WildTangent Games App Integration Service.) - C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe =>.WildTangent Inc®
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) . (.NVIDIA Corporation - NVIDIA GeForce ExperienceService.) - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe =>.NVIDIA Corporation®
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google Inc®
O23 - Service: McAfee Home Network (HomeNetSvc) . (.McAfee, Inc. - McAfee Service Host.) - C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe =>.McAfee, Inc.®
O23 - Service: Service HP CUE DeviceDiscovery (hpqddsvc) . (.Hewlett-Packard Co. - HP CUE DeviceDiscovery Service.) - C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll =>.Hewlett Packard®
O23 - Service: HP Support Solutions Framework Service (HPSupportSolutionsFrameworkService) . (.HP Inc. - HP Support Solutions Framework Service.) - C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe =>.HP Inc.®
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) . (.Intel Corporation - IAStorDataSvc.) - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe =>.Intel Corporation - Rapid Storage Technology®
O23 - Service: Intel(R) PROSet Monitoring Service (Intel(R) PROSet Monitoring Service) . (.Intel Corporation - Intel® PROSet Monitoring Service.) - C:\Windows\system32\IProsetMonitor.exe =>.Intel Corporation
O23 - Service: Intel(R) Security Assist Helper (isaHelperSvc) . (...) - C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe =>.Intel Corporation
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) . (.Intel Corporation - Intel(R) Dynamic Application Loader Host In.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe =>.Intel Corporation - Embedded Subsystems and IP Blocks Group®
O23 - Service: Intel(R) Management and Security Application Local Manageme (LMS) . (.Intel Corporation - Intel(R) Local Management Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe =>.Intel Corporation - Embedded Subsystems and IP Blocks Group®
O23 - Service: Malwarebytes Service (MBAMService) . (.Malwarebytes - Malwarebytes Service.) - C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe =>.Malwarebytes
O23 - Service: McAfee AP Service (McAPExe) . (.McAfee, Inc. - McAfee Access Protection.) - C:\Program Files\McAfee\MSC\McAPExe.exe =>.McAfee, Inc.®
O23 - Service: McAfee Boot Delay Start Service (mcbootdelaystartsvc) . (.McAfee, Inc. - McAfee Service Host.) - C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe =>.McAfee, Inc.®
O23 - Service: McAfee CSP Service (mccspsvc) . (.McAfee, Inc. - McAfee CSP Service Host.) - C:\Program Files\Common Files\McAfee\CSP\1.9.829.0\McCSPServiceHost.exe =>.McAfee, Inc.®
O23 - Service: McAfee Personal Firewall Service (McMPFSvc) . (.McAfee, Inc. - McAfee Service Host.) - C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe =>.McAfee, Inc.®
O23 - Service: McAfee VirusScan Announcer (McNaiAnn) . (.McAfee, Inc. - McAfee Service Host.) - C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe =>.McAfee, Inc.®
O23 - Service: McAfee Platform Services (mcpltsvc) . (.McAfee, Inc. - McAfee Service Host.) - C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe =>.McAfee, Inc.®
O23 - Service: McAfee Proxy Service (McProxy) . (.McAfee, Inc. - McAfee Service Host.) - C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe =>.McAfee, Inc.®
O23 - Service: McAfee Service Controller (mfemms) . (.McAfee, Inc. - McAfee Management Service.) - C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe =>.McAfee, Inc.®
O23 - Service: McAfee Module Core Service (ModuleCoreService) . (.McAfee, Inc. - McAfee Module Core Service.) - C:\Program Files\Common Files\McAfee\ModuleCore\ModuleCoreService.exe =>.McAfee, Inc.®
O23 - Service: Net Driver HPZ12 (Net Driver HPZ12) . (.Hewlett-Packard - Dot4Net Module.) - C:\Windows\System32\HPZinw12.dll =>.Hewlett-Packard
O23 - Service: NVIDIA Display Container LS (NVDisplay.ContainerLocalSystem) . (.NVIDIA Corporation - NVIDIA Container.) - C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe =>.NVIDIA Corporation®
O23 - Service: NVIDIA Network Service (NvNetworkService) . (.NVIDIA Corporation - NVIDIA Network Service.) - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe =>.NVIDIA Corporation®
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) . (.NVIDIA Corporation - NVIDIA Streamer Service.) - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe =>.NVIDIA Corporation®
O23 - Service: Intel Security PEF Service (PEFService) . (.Intel Security, Inc. - Intel Security PEF Service.) - C:\Program Files\Common Files\Intel Security\PEF\CORE\PEFService.exe =>.McAfee, Inc.®
O23 - Service: Pml Driver HPZ12 (Pml Driver HPZ12) . (.Hewlett-Packard - PmlDrv Module.) - C:\Windows\System32\HPZipm12.dll =>.Hewlett-Packard
O23 - Service: Cyberlink RichVideo64 Service(CRVS) (RichVideo64) . (.Copyright 2004 - RichVideo Module.) - C:\Program Files\CyberLink\Shared files\RichVideo64.exe =>.CyberLink®
O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files (x86)\Skype\Updater\Updater.exe =>.Skype Software Sarl®
O23 - Service: SAMSUNG Mobile Connectivity Service (ss_conn_service) . (.DEVGURU Co., LTD. - MSS CS Connectivity Service.) - C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe =>.Samsung Electronics CO., LTD.®
O23 - Service: TunnelBear Maintenance (TunnelBearMaintenance) . (.TunnelBear - TBear.Maintenance.) - C:\Program Files (x86)\TunnelBear\TBear.Maintenance.exe =>.TunnelBear, Inc.®
O23 - Service: wtmhdintus (wtmhdintus) . (...) - C:\Windows\SysWOW64\wtmhdinus.dll =>.SUP.SuspiciousCloud

---\\ Services non Microsoft (SR=Démarré,SS=Stoppé) (49) - 57s
SR - Auto [20/09/2016] [ 324224] ASUS Com Service (asComSvc) . (...) - C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe =>.ASUSTeK Computer Inc.®
SR - Auto [20/09/2016] [ 324224] Asus WebStorage Windows Service (Asus WebStorage Windows Service) . (.ASUS Cloud Corporation.) - C:\Program Files (x86)\ASUS\WebStorage\2.1.11.399\AsusWSWinService.exe =>.ASUS Cloud Corporation
SR - Auto [20/09/2016] [ 324224] FABS - Helping agent for MAGIX media database (Fabs) . (.MAGIX AG.) - C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe =>.MAGIX AG
SS - Demand [20/09/2016] [ 324224] Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) . (.MAGIX®.) - C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe =>.MAGIX®
SS - Demand [20/09/2016] [ 324224] FlexNet Licensing Service 64 (FlexNet Licensing Service 64) . (.Flexera Software LLC.) - C:\Program Files\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService64.exe =>.Flexera Software LLC®
SR - Auto [20/09/2016] [ 324224] GamesAppIntegrationService (GamesAppIntegrationService) . (.WildTangent.) - C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe =>.WildTangent Inc®
SS - Demand [20/09/2016] [ 324224] GamesAppService (GamesAppService) . (.WildTangent, Inc..) - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe =>.WildTangent Inc®
SR - Auto [20/09/2016] [ 324224] NVIDIA GeForce Experience Service (GfExperienceService) . (.NVIDIA Corporation.) - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe =>.NVIDIA Corporation®
SS - Auto [20/09/2016] [ 324224] Service Google Update (gupdate) (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google Inc®
SS - Demand [20/09/2016] [ 324224] Service Google Update (gupdatem) (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google Inc®
SR - Auto [20/09/2016] [ 324224] McAfee Home Network (HomeNetSvc) . (.McAfee, Inc..) - C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe =>.McAfee, Inc.®
SR - Demand [20/09/2016] [ 324224] hpqcxs08 (hpqcxs08) . (.Hewlett-Packard Co..) - C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll =>.Hewlett Packard®
SR - Auto [20/09/2016] [ 324224] Service HP CUE DeviceDiscovery (hpqddsvc) . (.Hewlett-Packard Co..) - C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll =>.Hewlett Packard®
SR - Auto [20/09/2016] [ 324224] HP Support Solutions Framework Service (HPSupportSolutionsFrameworkService) . (.HP Inc..) - C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe =>.HP Inc.®
SR - Auto [20/09/2016] [ 324224] Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) . (.Intel Corporation.) - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe =>.Intel Corporation - Rapid Storage Technology®
SS - Demand [20/09/2016] [ 324224] Intel(R) Capability Licensing Service TCP IP Interface (Intel(R) Capability Licensing Service TCP IP Interface) . (.Intel(R) Corporation.) - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe =>.Intel® Trusted Connect Service®
SR - Auto [20/09/2016] [ 324224] Intel(R) PROSet Monitoring Service (Intel(R) PROSet Monitoring Service) . (.Intel Corporation.) - C:\Windows\system32\IProsetMonitor.exe =>.Intel(R) Intel Network Drivers®
SS - Demand [20/09/2016] [ 324224] Intel(R) Security Assist (Intel(R) Security Assist) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe =>.Intel Corporation
SR - Auto [20/09/2016] [ 324224] Intel(R) Security Assist Helper (isaHelperSvc) . (...) - C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe =>.Intel Corporation
SR - Auto [20/09/2016] [ 324224] Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe =>.Intel Corporation - Embedded Subsystems and IP Blocks Group®
SR - Auto [20/09/2016] [ 324224] Intel(R) Management and Security Application Local Manageme (LMS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe =>.Intel Corporation - Embedded Subsystems and IP Blocks Group®
SR - Auto [20/09/2016] [ 324224] Malwarebytes Service (MBAMService) . (.Malwarebytes.) - C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe =>.Malwarebytes
SR - Auto [20/09/2016] [ 324224] McAfee AP Service (McAPExe) . (.McAfee, Inc..) - C:\Program Files\McAfee\MSC\McAPExe.exe =>.McAfee, Inc.®
SS - Demand [20/09/2016] [ 324224] McAfee Activation Service (McAWFwk) . (.McAfee, Inc..) - C:\Program Files\Common Files\McAfee\ActWiz\McAWFwk.exe =>.McAfee, Inc.®
SR - Auto [20/09/2016] [ 324224] McAfee Boot Delay Start Service (mcbootdelaystartsvc) . (.McAfee, Inc..) - C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe =>.McAfee, Inc.®
SR - Auto [20/09/2016] [ 324224] McAfee CSP Service (mccspsvc) . (.McAfee, Inc..) - C:\Program Files\Common Files\McAfee\CSP\1.9.829.0\McCSPServiceHost.exe =>.McAfee, Inc.®
SR - Auto [20/09/2016] [ 324224] McAfee Personal Firewall Service (McMPFSvc) . (.McAfee, Inc..) - C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe =>.McAfee, Inc.®
SR - Auto [20/09/2016] [ 324224] McAfee VirusScan Announcer (McNaiAnn) . (.McAfee, Inc..) - C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe =>.McAfee, Inc.®
SS - Demand [20/09/2016] [ 324224] McAfee Scanner (McODS) . (.McAfee, Inc..) - C:\Program Files\mcafee\VirusScan\mcods.exe =>.McAfee, Inc.®
SS - Disabl [20/09/2016] [ 324224] McAfee OOBE Service2 (McOobeSv2) . (.McAfee, Inc..) - C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe =>.McAfee, Inc.®
SR - Auto [20/09/2016] [ 324224] McAfee Platform Services (mcpltsvc) . (.McAfee, Inc..) - C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe =>.McAfee, Inc.®
SR - Auto [20/09/2016] [ 324224] McAfee Proxy Service (McProxy) . (.McAfee, Inc..) - C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe =>.McAfee, Inc.®
SR - Demand [20/09/2016] [ 324224] McAfee Firewall Core Service (mfefire) . (.McAfee, Inc..) - C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe =>.McAfee, Inc.®
SR - Auto [20/09/2016] [ 324224] McAfee Service Controller (mfemms) . (.McAfee, Inc..) - C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe =>.McAfee, Inc.®
SR - Demand [20/09/2016] [ 324224] McAfee Validation Trust Protection Service (mfevtp) . (.McAfee, Inc..) - C:\Windows\system32\mfevtps.exe =>.McAfee, Inc.®
SR - Auto [20/09/2016] [ 324224] McAfee Module Core Service (ModuleCoreService) . (.McAfee, Inc..) - C:\Program Files\Common Files\McAfee\ModuleCore\ModuleCoreService.exe =>.McAfee, Inc.®
SS - Demand [20/09/2016] [ 324224] Mozilla Maintenance Service (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe =>.Mozilla Corporation®
SS - Demand [20/09/2016] [ 324224] McAfee Anti-Spam Service (MSK80Service) . (.McAfee, Inc..) - C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe =>.McAfee, Inc.®
SR - Auto [20/09/2016] [ 324224] Net Driver HPZ12 (Net Driver HPZ12) . (.Hewlett-Packard.) - C:\Windows\System32\HPZinw12.dll =>.Hewlett-Packard
SR - Auto [20/09/2016] [ 324224] NVIDIA Display Container LS (NVDisplay.ContainerLocalSystem) . (.NVIDIA Corporation.) - C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe =>.NVIDIA Corporation®
SR - Auto [20/09/2016] [ 324224] NVIDIA Network Service (NvNetworkService) . (.NVIDIA Corporation.) - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe =>.NVIDIA Corporation®
SR - Auto [20/09/2016] [ 324224] NVIDIA Streamer Service (NvStreamSvc) . (.NVIDIA Corporation.) - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe =>.NVIDIA Corporation®
SR - Auto [20/09/2016] [ 324224] Intel Security PEF Service (PEFService) . (.Intel Security, Inc..) - C:\Program Files\Common Files\Intel Security\PEF\CORE\PEFService.exe =>.McAfee, Inc.®
SR - Auto [20/09/2016] [ 324224] Pml Driver HPZ12 (Pml Driver HPZ12) . (.Hewlett-Packard.) - C:\Windows\System32\HPZipm12.dll =>.Hewlett-Packard
SR - Auto [20/09/2016] [ 324224] Cyberlink RichVideo64 Service(CRVS) (RichVideo64) . (.Copyright 2004.) - C:\Program Files\CyberLink\Shared files\RichVideo64.exe =>.CyberLink®
SS - Auto [20/09/2016] [ 324224] Skype Updater (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe =>.Skype Software Sarl®
SR - Auto [20/09/2016] [ 324224] SAMSUNG Mobile Connectivity Service (ss_conn_service) . (.DEVGURU Co., LTD..) - C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe =>.Samsung Electronics CO., LTD.®
SR - Auto [20/09/2016] [ 324224] TunnelBear Maintenance (TunnelBearMaintenance) . (.TunnelBear.) - C:\Program Files (x86)\TunnelBear\TBear.Maintenance.exe =>.TunnelBear, Inc.®
SR - Auto [20/09/2016] [ 324224] wtmhdintus (wtmhdintus) . (...) - C:\Windows\SysWOW64\wtmhdinus.dll =>.SUP.SuspiciousCloud

---\\ Tâches planifiées en automatique (18) - 6s
[MD5.AB02F51163058040A4A599D6C989CBA6] [APT] [Fakthertuverge Controls] (.Glarysoft Ltd.) -- C:\Program Files (x86)\Chopule\mple.exe [779584] (.Activate.) =>.Glarysoft LTD®
[MD5.A8FD9222E4D72596BB37DA8BE95C0BA4] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153752] (.Activate.) =>.Google Inc®
[MD5.A8FD9222E4D72596BB37DA8BE95C0BA4] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153752] (.Activate.) =>.Google Inc®
[MD5.3ECAF01F5F4BFBEBBA31596DB0FC471B] [APT] [HPCeeScheduleForjclou] (.HP Development Company, L.P..) -- C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [99392] (.Activate.) =>.Hewlett-Packard Company®
[MD5.74468C33C2369628BD0A44A2A204D8B2] [APT] [McAfeeLogon] (.McAfee, Inc..) -- C:\PROGRA~1\COMMON~1\McAfee\Platform\McUICnt.exe [949480] (.Activate.) =>.McAfee, Inc.®
[MD5.5BCB498CDF7742CD55E3225829562294] [APT] [ProtectSync Planet 3 v1-2 demo] (...) -- C:\Program Files\ProtectSync Planet 3 v1.2 demo\ProtectSync Planet 3 v1.2 demo.dll [2144768] (.Activate.)
[MD5.FB44E569E95C0B9B5257F2A72793B387] [APT] [{298E82EC-6953-476C-8872-112BF15257FE}] (.Google Inc..) -- c:\program files (x86)\google\chrome\application\chrome.exe [1301848] (.Activate.) =>.Google Inc®
[MD5.9E384186E0C482D25B19D90B835F6B99] [APT] [ASUS\ASUS Manager - PC Cleanup - SecureDeleteBackground] (.Copyright © 2013.) -- C:\Program Files (x86)\ASUS\ASUS Manager\PC Cleanup\SecureDeleteBackground.exe [930448] (.Activate.)
[MD5.D9D421CB34F96B7B0B73FF826E7357E7] [APT] [ASUS\ASUS Manager BackgroundWindow] (.Copyright © 2013.) -- C:\Program Files (x86)\ASUS\ASUS Manager\BackgroundWindow.exe [21784] (.Activate.) =>.ASUSTeK Computer Inc.®
[MD5.2A0F09FAC1C3E8310BD0BD41C0339D52] [APT] [ASUS\ASUS Manager HotKey Service] (.ASUSTeK Computer Inc..) -- C:\Program Files (x86)\ASUS\ASUS Manager\AsHKService.exe [225592] (.Activate.) =>.ASUSTeK Computer Inc.®
[MD5.D86DC52C2772DA677E80EFB249BB1AEC] [APT] [ASUS\ASUS Product Register Service] (.ASUSTek Computer Inc..) -- C:\Program Files (x86)\ASUS\APRP\aprp.exe [1588384] (.Activate.) =>.ASUSTek Computer Inc.
[MD5.E16FD70CA7E13C48E119C02FA7E5D2A8] [APT] [ASUS\ASUS Update Checker] (.Copyright © 2013.) -- C:\Program Files (x86)\ASUS\ASUS Manager\Application Update\ASUSUpdateChecker.exe [922576] (.Activate.) =>.ASUSTeK Computer Inc.®
[MD5.BE40DA3ADC38ABD18BC2AC8A729D4522] [APT] [ASUS\ASUS Updater] (.Copyright © 2013.) -- C:\Program Files (x86)\ASUS\ASUS Manager\Application Update\ASUSFourceUpdater.exe [940496] (.Activate.) =>.ASUSTeK Computer Inc.®
[MD5.756E838E81DDDD118D5797137C04BAE2] [APT] [ASUS\Power_Manager_background] (.ASUSTeK.) -- C:\Program Files (x86)\ASUS\ASUS Manager\Power Manager\Power Manager_background.exe [216344] (.Activate.) =>.ASUSTeK Computer Inc.®
[MD5.03A6A69D44BE9860AF5948516288DF7F] [APT] [ASUS\SyncUp] (.ASUSTeK Computer Inc..) -- C:\Program Files (x86)\ASUS\ASUS Manager\SyncUp\Server\SyncUp Server.exe [3494200] (.Activate.) =>.ASUSTeK Computer Inc.®
[MD5.6DBF5E67EEA838135065948A99219D0F] [APT] [Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA)] (.HP Inc..) -- C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe [198696] (.Activate.) =>.HP Inc.®
[MD5.78B8BDD8EF9BC48B426E20208A0CB6C0] [APT] [Microsoft\Office\OfficeBackgroundTaskHandlerRegistration] (.Hewlett-Packard.) -- C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [24264] (.Activate.) =>.Microsoft Corporation®
[MD5.00000000000000000000000000000000] [APT] [Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup] (...) -- C:\WINDOWS\system32\AppxDeploymentClient.dll (.not file.) [0] (.Deactivate.) =>.SUP.Empty

---\\ Tâches planifiées en automatique (Registre) (15) - 5s
O40 - TASK: {056C88DB-7931-4F8F-B77B-BABABEF37714} [64Bits][\McAfeeLogon] - (.McAfee, Inc. - McAfee.) -- C:\Program Files\Common Files\McAfee\platform\McUICnt.exe [949480] =>.McAfee, Inc.®
O40 - TASK: {082E12BA-A04D-4E87-9F66-70D3E380CAE4} [64Bits][\ASUS\ASUS Update Checker] - (.Copyright © 2013 - ASUSFourceUpdater.) -- C:\Program Files (x86)\ASUS\ASUS Manager\Application Update\ASUSUpdateChecker.exe [922576] =>.ASUSTeK Computer Inc.®
O40 - TASK: {1023F06C-60E6-4194-A0A8-CB9B3D369431} [64Bits][\HPCeeScheduleForjclou] - (.HP Development Company, L.P. - HP Ceement.) -- C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [99392] =>.Hewlett-Packard Company®
O40 - TASK: {15CCDA3C-E99A-4C48-B9B7-C576D7F4C3FB} [64Bits][\{298E82EC-6953-476C-8872-112BF15257FE}] - (.Google Inc. - Google Chrome.) -- c:\program files (x86)\google\chrome\application\chrome.exe [1301848] =>.Google Inc®
O40 - TASK: {448E3CBF-AE04-48C5-8CE2-B07EFB335799} [64Bits][\ASUS\Power_Manager_background] - (.ASUSTeK - Power Manager_background.) -- C:\Program Files (x86)\ASUS\ASUS Manager\Power Manager\Power Manager_background.exe [216344] =>.ASUSTeK Computer Inc.®
O40 - TASK: {5866F7F9-AD4F-4164-88A3-AA992E25EB1E} [64Bits][\ASUS\ASUS Manager HotKey Service] - (.ASUSTeK Computer Inc. - Tool to handle application key.) -- C:\Program Files (x86)\ASUS\ASUS Manager\AsHKService.exe [225592] =>.ASUSTeK Computer Inc.®
O40 - TASK: {674C612B-EBF1-4F05-B644-D7907EBD1EB0} [64Bits][\d14e53b88bfa04c7fb35fa47b2f0f90a] - (.DESKTOP-HEAV0BK\jclou - .) -- sc [0]
O40 - TASK: {B2F065EE-55EC-488A-B911-BE48563801B7} [64Bits][\Fakthertuverge Controls] - (.Glarysoft Ltd - Glary Utilities AutoUpdate.) -- C:\Program Files (x86)\Chopule\mple.exe [779584] =>.Glarysoft LTD®
O40 - TASK: {BDD2A59A-B4EE-40DC-8E96-6032914049AF} [64Bits][\ASUS\ASUS Manager BackgroundWindow] - (.Copyright © 2013 - BackgroundWindow.) -- C:\Program Files (x86)\ASUS\ASUS Manager\BackgroundWindow.exe [21784] =>.ASUSTeK Computer Inc.®
O40 - TASK: {C95DCBD9-FC9E-4744-9D2A-A46CAA555655} [64Bits][\ASUS\ASUS Product Register Service] - (.ASUSTek Computer Inc. - ASUS Product Register Program.) -- C:\Program Files (x86)\ASUS\APRP\aprp.exe [1588384] =>.ASUSTek Computer Inc.
O40 - TASK: {CC892BA2-A0D5-4044-960C-3E92D5D1B934} [64Bits][\ASUS\ASUS Updater] - (.Copyright © 2013 - ASUSFourceUpdater.) -- C:\Program Files (x86)\ASUS\ASUS Manager\Application Update\ASUSFourceUpdater.exe [940496] =>.ASUSTeK Computer Inc.®
O40 - TASK: {D7869929-0933-4D0F-84E9-703272791938} [64Bits][\ASUS\SyncUp] - (.ASUSTeK Computer Inc. - SyncUp Server.) -- C:\Program Files (x86)\ASUS\ASUS Manager\SyncUp\Server\SyncUp Server.exe [3494200] =>.ASUSTeK Computer Inc.®
O40 - TASK: {DB81BFA9-5FC5-4C19-8AE1-2CDBEF12125E} [64Bits][\GoogleUpdateTaskMachineCore] - (.Google Inc. - Programme d'installation de Google.) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153752] =>.Google Inc®
O40 - TASK: {DFF45507-79B8-47DF-AC5E-D0EC5E4DA513} [64Bits][\GoogleUpdateTaskMachineUA] - (.Google Inc. - Programme d'installation de Google.) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153752] =>.Google Inc®
O40 - TASK: {F38511C9-916D-4355-A12D-0ECB042C7D20} [64Bits][\ASUS\ASUS Manager - PC Cleanup - SecureDeleteBackground] - (.Copyright © 2013 - SecureDeleteBackground.) -- C:\Program Files (x86)\ASUS\ASUS Manager\PC Cleanup\SecureDeleteBackground.exe [930448]

---\\ Applications lancées au démarrage du système (56) - 2s
O4 - HKLM\..\Run: [SecurityHealth] . (.Microsoft Corporation - Windows Defender notification icon.) -- C:\Program Files\Windows Defender\MSASCuiL.exe =>.Microsoft Windows®
O4 - HKLM\..\Run: [RTHDVCPL] . (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe =>.Realtek Semiconductor Corp®
O4 - HKLM\..\Run: [WindowsDefender] . (.Microsoft Corporation - Windows Defender notification icon.) -- C:\Program Files\Windows Defender\MSASCuiL.exe =>.Microsoft Windows®
O4 - HKLM\..\Run: [IAStorIcon] . (.Intel Corporation - Delayed launcher.) -- C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe =>.Intel Corporation
O4 - HKLM\..\Run: [NvBackend] . (.NVIDIA Corporation - NVIDIA Backend.) -- C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe =>.NVIDIA Corporation®
O4 - HKLM\..\Run: [ShadowPlay] -- C:\Windows\system32\nvspcap64.dll (.not file.)
O4 - HKLM\..\RunOnce: [OMEWPRODUCT_WWVLD] . (.TOC5FW28 - TOC5F.) -- C:\Program Files (x86)\xfepxsbbdrd\8T1H8M7G32YNT3Y.exe
O4 - HKLM\..\RunOnce: [DESKTOP-HEAV0BK] . (...) -- C:\Windows\Temp\gB5D2.tmp.exe
O4 - HKCU\..\Run: [OneDrive] . (.Microsoft Corporation - Microsoft OneDrive.) -- C:\Users\jclou\AppData\Local\Microsoft\OneDrive\OneDrive.exe =>.Microsoft Corporation®
O4 - HKCU\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe =>.Skype Software Sarl®
O4 - HKCU\..\Run: [Autodesk Sync] . (.Autodesk, Inc. - A360.) -- C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe =>.Autodesk, Inc®
O4 - HKCU\..\Run: [TunnelBear] . (.TunnelBear - TunnelBear.) -- C:\Program Files (x86)\TunnelBear\TunnelBear.UI.exe =>.TunnelBear, Inc.®
O4 - HKCU\..\Run: [Spotify] . (.Spotify Ltd - Spotify.) -- C:\Users\jclou\AppData\Roaming\Spotify\Spotify.exe =>.Spotify AB®
O4 - HKCU\..\Run: [9JGJQZBS6VMR0QH] -- C:\Program Files\7V3TSAASZL\IKGH7JAHG.exe (.not file.)
O4 - HKCU\..\Run: [egsiiifr03r] -- C:\Users\jclou\AppData\Roaming\11clvgttm1k\hejc1oct3lx.exe (.not file.) =>Adware.Wizzcaster
O4 - HKCU\..\Run: [25byozgnngk] -- C:\Users\jclou\AppData\Roaming\uavbsc32as3\xxg1uchj1g4.exe (.not file.) =>Adware.Wizzcaster
O4 - HKCU\..\Run: [XPUQV6JGH58WETP] -- C:\Program Files\NTMKQZFHHZ\NTMKQZFHH.exe (.not file.)
O4 - HKCU\..\Run: [OE0YJ6R5OYLD64H] . (.TOC5FW28 - TOC5F.) -- C:\Program Files (x86)\xfepxsbbdrd\NS7US.exe
O4 - HKCU\..\Run: [k4p2ivxx2qi] -- C:\Users\jclou\AppData\Roaming\hoqkhl4g5x5\2o0k4cu4wn0.exe (.not file.) =>Adware.Wizzcaster
O4 - HKCU\..\Run: [LR66ZUYGN0PJ9ZF] -- C:\Program Files\G8UMLSUDQE\TX01TS0EQ.exe (.not file.)
O4 - HKCU\..\Run: [zn2tiohqrht] -- C:\Users\jclou\AppData\Roaming\5w02ewcdjib\ao53t055c3r.exe (.not file.) =>Adware.Wizzcaster
O4 - HKCU\..\Run: [bv3bzqbx2fo] -- C:\Users\jclou\AppData\Roaming\q0g0vwnfr2y\jzbelxl525a.exe (.not file.) =>Adware.Wizzcaster
O4 - HKCU\..\Run: [MHHS5ASII9GNQN5] -- C:\Program Files\3413WRKL0S\A7PPWUG5U.exe (.not file.)
O4 - HKCU\..\Run: [javab3nodwm] -- C:\Users\jclou\AppData\Roaming\ritve3ktcqm\no32cxim1lq.exe (.not file.) =>Adware.Wizzcaster
O4 - HKCU\..\Run: [GGBIOE82963GVMW] -- C:\Program Files\UO3GM9UTR1\K2GA276VP.exe (.not file.)
O4 - HKCU\..\Run: [Spotify Web Helper] . (.Spotify Ltd - SpotifyWebHelper.) -- C:\Users\jclou\AppData\Roaming\Spotify\SpotifyWebHelper.exe =>.Spotify AB®
O4 - HKLM\..\Wow6432Node\Run: [WebStorage] . (...) -- C:\Program Files (x86)\ASUS\WebStorage\2.1.11.399\ASUSWSLoader.exe =>.ASUS Cloud Corporation®
O4 - HKLM\..\Wow6432Node\Run: [HP Software Update] . (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe =>.Hewlett-Packard Company®
O4 - HKLM\..\Wow6432Node\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe =>.Oracle America, Inc.®
O4 - HKLM\..\Wow6432Node\Run: [Wondershare Helper Compact.exe] . (.Wondershare - Wondershare Studio.) -- C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe =>.Wondershare software CO., LIMITED®
O4 - HKLM\..\Wow6432Node\Run: [Autodesk Desktop App] . (.Autodesk, Inc. - Autodesk Desktop App.) -- C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AutodeskDesktopApp.exe =>.Autodesk, Inc®
O4 - HKLM\..\Wow6432Node\Run: [KiesTrayAgent] . (.Samsung Electronics Co., Ltd. - Kies TrayAgent Application.) -- C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe =>.Samsung Electronics CO., LTD.®
O4 - HKUS\.DEFAULT\..\Run: [TunnelBear] . (.TunnelBear - TunnelBear.) -- C:\Program Files (x86)\TunnelBear\TunnelBear.UI.exe =>.TunnelBear, Inc.®
O4 - HKUS\S-1-5-18\..\Run: [TunnelBear] . (.TunnelBear - TunnelBear.) -- C:\Program Files (x86)\TunnelBear\TunnelBear.UI.exe =>.TunnelBear, Inc.®
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] . (.Microsoft Corporation - Microsoft OneDrive Setup.) -- C:\Windows\SysWOW64\OneDriveSetup.exe =>.Microsoft Windows®
O4 - HKUS\S-1-5-19\..\Run: [TunnelBear] . (.TunnelBear - TunnelBear.) -- C:\Program Files (x86)\TunnelBear\TunnelBear.UI.exe =>.TunnelBear, Inc.®
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] . (.Microsoft Corporation - Microsoft OneDrive Setup.) -- C:\Windows\SysWOW64\OneDriveSetup.exe =>.Microsoft Windows®
O4 - HKUS\S-1-5-20\..\Run: [TunnelBear] . (.TunnelBear - TunnelBear.) -- C:\Program Files (x86)\TunnelBear\TunnelBear.UI.exe =>.TunnelBear, Inc.®
O4 - HKUS\S-1-5-21-2466184683-2694909910-745646739-1001\..\Run: [OneDrive] . (.Microsoft Corporation - Microsoft OneDrive.) -- C:\Users\jclou\AppData\Local\Microsoft\OneDrive\OneDrive.exe =>.Microsoft Corporation®
O4 - HKUS\S-1-5-21-2466184683-2694909910-745646739-1001\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe =>.Skype Software Sarl®
O4 - HKUS\S-1-5-21-2466184683-2694909910-745646739-1001\..\Run: [Autodesk Sync] . (.Autodesk, Inc. - A360.) -- C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe =>.Autodesk, Inc®
O4 - HKUS\S-1-5-21-2466184683-2694909910-745646739-1001\..\Run: [TunnelBear] . (.TunnelBear - TunnelBear.) -- C:\Program Files (x86)\TunnelBear\TunnelBear.UI.exe =>.TunnelBear, Inc.®
O4 - HKUS\S-1-5-21-2466184683-2694909910-745646739-1001\..\Run: [Spotify] . (.Spotify Ltd - Spotify.) -- C:\Users\jclou\AppData\Roaming\Spotify\Spotify.exe =>.Spotify AB®
O4 - HKUS\S-1-5-21-2466184683-2694909910-745646739-1001\..\Run: [9JGJQZBS6VMR0QH] -- C:\Program Files\7V3TSAASZL\IKGH7JAHG.exe (.not file.)
O4 - HKUS\S-1-5-21-2466184683-2694909910-745646739-1001\..\Run: [egsiiifr03r] -- C:\Users\jclou\AppData\Roaming\11clvgttm1k\hejc1oct3lx.exe (.not file.) =>Adware.Wizzcaster
O4 - HKUS\S-1-5-21-2466184683-2694909910-745646739-1001\..\Run: [25byozgnngk] -- C:\Users\jclou\AppData\Roaming\uavbsc32as3\xxg1uchj1g4.exe (.not file.) =>Adware.Wizzcaster
O4 - HKUS\S-1-5-21-2466184683-2694909910-745646739-1001\..\Run: [XPUQV6JGH58WETP] -- C:\Program Files\NTMKQZFHHZ\NTMKQZFHH.exe (.not file.)
O4 - HKUS\S-1-5-21-2466184683-2694909910-745646739-1001\..\Run: [OE0YJ6R5OYLD64H] . (.TOC5FW28 - TOC5F.) -- C:\Program Files (x86)\xfepxsbbdrd\NS7US.exe
O4 - HKUS\S-1-5-21-2466184683-2694909910-745646739-1001\..\Run: [k4p2ivxx2qi] -- C:\Users\jclou\AppData\Roaming\hoqkhl4g5x5\2o0k4cu4wn0.exe (.not file.) =>Adware.Wizzcaster
O4 - HKUS\S-1-5-21-2466184683-2694909910-745646739-1001\..\Run: [LR66ZUYGN0PJ9ZF] -- C:\Program Files\G8UMLSUDQE\TX01TS0EQ.exe (.not file.)
O4 - HKUS\S-1-5-21-2466184683-2694909910-745646739-1001\..\Run: [zn2tiohqrht] -- C:\Users\jclou\AppData\Roaming\5w02ewcdjib\ao53t055c3r.exe (.not file.) =>Adware.Wizzcaster
O4 - HKUS\S-1-5-21-2466184683-2694909910-745646739-1001\..\Run: [bv3bzqbx2fo] -- C:\Users\jclou\AppData\Roaming\q0g0vwnfr2y\jzbelxl525a.exe (.not file.) =>Adware.Wizzcaster
O4 - HKUS\S-1-5-21-2466184683-2694909910-745646739-1001\..\Run: [MHHS5ASII9GNQN5] -- C:\Program Files\3413WRKL0S\A7PPWUG5U.exe (.not file.)
O4 - HKUS\S-1-5-21-2466184683-2694909910-745646739-1001\..\Run: [javab3nodwm] -- C:\Users\jclou\AppData\Roaming\ritve3ktcqm\no32cxim1lq.exe (.not file.) =>Adware.Wizzcaster
O4 - HKUS\S-1-5-21-2466184683-2694909910-745646739-1001\..\Run: [GGBIOE82963GVMW] -- C:\Program Files\UO3GM9UTR1\K2GA276VP.exe (.not file.)
O4 - HKUS\S-1-5-21-2466184683-2694909910-745646739-1001\..\Run: [Spotify Web Helper] . (.Spotify Ltd - SpotifyWebHelper.) -- C:\Users\jclou\AppData\Roaming\Spotify\SpotifyWebHelper.exe =>.Spotify AB®

---\\ Google Chrome, Démarrage,Recherche,Extensions (22) - 0s
G0 - GCSP: Preferences [User Data\Default][HomePage] http://ladomainadeserver.com
G0 - GCSP: Preferences [User Data\Default][HomePage] http://www.google-analytics.com =>.Google Inc.
G0 - GCSP: Preferences [User Data\Default][HomePage] http://www.onclickmax.com
G0 - GCSP: Preferences [User Data\Default][HomePage] http://apis.google.com =>.Google Inc.
G0 - GCSP: Preferences [User Data\Default][HomePage] http://clients5.google.com =>.Google Inc.
G0 - GCSP: Preferences [User Data\Default][HomePage] http://lh3.googleusercontent.com =>.Google Inc.
G0 - GCSP: Preferences [User Data\Default][HomePage] http://ogs.google.com =>.Google Inc.
G0 - GCSP: Preferences [User Data\Default][HomePage] http://ssl.gstatic.com =>.Google Inc.
G0 - GCSP: Preferences [User Data\Default][HomePage] http://www.google.fr =>.Google Inc.
G0 - GCSP: Preferences [User Data\Default][HomePage] http://www.gstatic.com =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [aapocclcgogkmnckokdopfmhonfmgoek] =>.Google Inc. {Slides}
G2 - GCE: Preference [User Data\Default] [aohghmighlieiainnegkcijnfilokake] =>.Google Inc. {Docs}
G2 - GCE: Preference [User Data\Default] [apdfllckaahabafndbhieahigkjlhalf] http://drive.google.com/ =>.Google Inc. {Drive}
G2 - GCE: Preference [User Data\Default] [blpcfgokakmgnkcojhhkbfbldkacnbeo] http://www.youtube.com =>.Youtube {Youtube}
G2 - GCE: Preference [User Data\Default] [cfhdojbkjhnklbpkdaibdccddilifddb] eyeo GmbH =>.eyeo GmbH {AdBlock Plus}
G2 - GCE: Preference [User Data\Default] [dhdgffkkebhmkfjojejmpbldmpobfkfo] Tampermonkey =>.tampermonkey.net
G2 - GCE: Preference [User Data\Default] [eediamimojgbnjfaalcnlonenfdcogop]
G2 - GCE: Preference [User Data\Default] [felcaaldnbdncclmgdcncolpebgiejap] =>.Google Inc. {Sheets}
G2 - GCE: Preference [User Data\Default] [ghbmnnjooekpmoecnnnilnnbdlolhkhi] =>.Google Inc. {Docs hors connexion}
G2 - GCE: Preference [User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] =>.Google Inc. {Wallet}
G2 - GCE: Preference [User Data\Default] [pjkljhegncpnkpknbcohdijeoejaedia] http://mail.google.com/ =>.Google Inc. {Gmail}
G2 - GCE: Preference [User Data\Default] [pkedcjkdefgpdelpbcmbmeomcjbeemfm] Chrome Media Router =>.Google Inc.

---\\ Firefox, Plugins,Demarrage,Recherche,Extensions (9) - 2s
P2 - EXT FILE: (.Tamper Data - View and modify HTTP/HTTPS headers etc.) -- C:\Users\jclou\AppData\Roaming\Mozilla\Firefox\Profiles\8tiduo6m.default\extensions\{9c51bd27-6ed8-4000-a2bf-36cb95c0c947}.xpi =>.Tamper Data
P2 - EXT FILE: (.Mozilla Corporation.) -- C:\Program Files (x86)\Mozilla Firefox\browser\features\aushelper@mozilla.org.xpi =>.Mozilla Corporation
P2 - EXT FILE: (.Mozilla Corporation.) -- C:\Program Files (x86)\Mozilla Firefox\browser\features\e10srollout@mozilla.org.xpi =>.Mozilla Corporation
P2 - EXT FILE: (.Mozilla Corporation.) -- C:\Program Files (x86)\Mozilla Firefox\browser\features\firefox@getpocket.com.xpi =>.Mozilla Corporation
P2 - EXT FILE: (.Mozilla Corporation.) -- C:\Program Files (x86)\Mozilla Firefox\browser\features\screenshots@mozilla.org.xpi =>.Mozilla Corporation
P2 - EXT FILE: (.Mozilla Corporation.) -- C:\Program Files (x86)\Mozilla Firefox\browser\features\webcompat@mozilla.org.xpi =>.Mozilla Corporation
P2 - EXT: (...) -- C:\Users\jclou\AppData\Roaming\Mozilla\Firefox\Profiles\8tiduo6m.default\extensions\mefhakmgclhhfbdadeojlkbllmecialg@chrome-store-foxified-1132576233
P2 - FPN: [HKLM] [@mcafee.com/MSC,version=10] - (.McAfee Total Protection MIME Plugin.) -- c:\Program Files (x86)\McAfee\msc\npMcSnFFPl.dll =>.McAfee Total Protection MIME Plugin
P2 - FPN: [HKLM] [@WildTangent.com/GamesAppPresenceDetector,Version=1.0] - (.WildTangent.) -- C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll =>.WildTangent

---\\ Internet Explorer,Démarrage,Recherche,URLSearchHook (16) - 0s
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://fr.yahoo.com/ =>.Yahoo! Inc.
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/ =>.Microsoft Corporation
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus15.msn.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk =>.Microsoft Corporation
R3 - URLSearchHook: (no name)[HKCU] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (11.00.15063.0 (WinBuild.160101.0800)) -- C:\Windows\SysWOW64\ieframe.dll =>.Microsoft Corporation

---\\ Internet Explorer,Proxy Management (4) - 0s
R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride =
R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKLM\SYSTEM\CurrentControlSet\services\NlaSvc\Parameters\Internet\ManualProxies [] =>.Microsoft

---\\ Internet Explorer,IniFiles, Autoloading programs (3) - 0s
F2 - REG:system.ini: UserInit=
F2 - REG:system.ini: Shell=C:\WINDOWS\explorer.exe (.Microsoft Corporation.) =>.Microsoft Corporation
F2 - REG:system.ini: VMApplet=

---\\ Etude du fichier hosts (150) - 1s
O1 - Hosts: 127.0.0.1 sm00.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 submit5.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 geoip.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 x6055396.iavs9x.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 x6055396.ivps9x.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 x6055396.ivps9tiny.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 x6055396.vpsnitro.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 x6055396.vpsnitrotiny.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 x6055396.iavs5x.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 v7.stats.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 v7event.stats.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 t3036159.iavs9x.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 t3036159.ivps9x.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 t3036159.ivps9tiny.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 t3036159.vpsnitro.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 t3036159.vpsnitrotiny.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 t3036159.iavs5x.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 f6761140.iavs9x.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 f6761140.ivps9x.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 f6761140.ivps9tiny.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 f6761140.vpsnitro.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 f6761140.vpsnitrotiny.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 f6761140.iavs5x.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 p4085325.iavs9x.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 p4085325.ivps9x.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 p4085325.ivps9tiny.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 p4085325.vpsnitro.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 p4085325.vpsnitrotiny.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 p4085325.iavs5x.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 g0511470.iavs9x.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 g0511470.ivps9x.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 g0511470.ivps9tiny.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 g0511470.vpsnitro.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 g0511470.vpsnitrotiny.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 g0511470.iavs5x.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 k6375621.iavs9x.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 k6375621.ivps9x.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 k6375621.ivps9tiny.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 k6375621.vpsnitro.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 k6375621.vpsnitrotiny.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 k6375621.iavs5x.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 r5525652.iavs9x.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 r5525652.ivps9x.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 r5525652.ivps9tiny.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 r5525652.vpsnitro.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 r5525652.vpsnitrotiny.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 r5525652.iavs5x.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 v6834318.iavs9x.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 v6834318.ivps9x.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 v6834318.ivps9tiny.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 v6834318.vpsnitro.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 v6834318.vpsnitrotiny.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 v6834318.iavs5x.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 y9663457.iavs9x.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 y9663457.ivps9x.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 y9663457.ivps9tiny.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 y9663457.vpsnitro.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 y9663457.vpsnitrotiny.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 y9663457.iavs5x.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 h1874089.iavs9x.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 h1874089.ivps9x.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 h1874089.ivps9tiny.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 h1874089.vpsnitro.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 h1874089.vpsnitrotiny.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 h1874089.iavs5x.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 l5978727.iavs9x.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 l5978727.ivps9x.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 l5978727.ivps9tiny.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 l5978727.vpsnitro.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 l5978727.vpsnitrotiny.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 l5978727.iavs5x.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 j8087387.iavs9x.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 j8087387.ivps9x.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 j8087387.ivps9tiny.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 j8087387.vpsnitro.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 j8087387.vpsnitrotiny.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 j8087387.iavs5x.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 d3116203.iavs9x.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 d3116203.ivps9x.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 d3116203.ivps9tiny.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 d3116203.vpsnitro.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 d3116203.vpsnitrotiny.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 d3116203.iavs5x.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 h0637628.iavs9x.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 h0637628.ivps9x.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 h0637628.ivps9tiny.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 h0637628.vpsnitro.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 h0637628.vpsnitrotiny.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 h0637628.iavs5x.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 f7031642.iavs9x.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 f7031642.ivps9x.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 f7031642.ivps9tiny.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 f7031642.vpsnitro.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 f7031642.vpsnitrotiny.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 f7031642.iavs5x.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 w6607332.iavs9x.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 w6607332.ivps9x.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 w6607332.ivps9tiny.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 w6607332.vpsnitro.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 w6607332.vpsnitrotiny.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 w6607332.iavs5x.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 s4705686.iavs9x.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 s4705686.ivps9x.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 s4705686.ivps9tiny.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 s4705686.vpsnitro.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 s4705686.vpsnitrotiny.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 s4705686.iavs5x.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 s7284151.iavs9x.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 s7284151.ivps9x.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 s7284151.ivps9tiny.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 s7284151.vpsnitro.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 s7284151.vpsnitrotiny.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 s7284151.iavs5x.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 t5730298.iavs9x.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 t5730298.ivps9x.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 t5730298.ivps9tiny.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 t5730298.vpsnitro.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 t5730298.vpsnitrotiny.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 t5730298.iavs5x.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 z2217299.iavs9x.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 z2217299.ivps9x.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 z2217299.ivps9tiny.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 z2217299.vpsnitro.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 z2217299.vpsnitrotiny.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 z2217299.iavs5x.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 z2461313.iavs9x.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 z2461313.ivps9x.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 z2461313.ivps9tiny.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 z2461313.vpsnitro.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 z2461313.vpsnitrotiny.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 z2461313.iavs5x.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 z9820048.iavs9x.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 z9820048.ivps9x.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 z9820048.ivps9tiny.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 z9820048.vpsnitro.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 z9820048.vpsnitrotiny.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 z9820048.iavs5x.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 d0211227.iavs9x.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 d0211227.ivps9x.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 d0211227.ivps9tiny.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 d0211227.vpsnitro.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 d0211227.vpsnitrotiny.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 d0211227.iavs5x.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 p3713387.iavs9x.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 p3713387.ivps9x.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 p3713387.ivps9tiny.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 p3713387.vpsnitro.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 p3713387.vpsnitrotiny.u.avast.com =>PUM.Misplaced.Certificate
O1 - Hosts: 127.0.0.1 p3713387.iavs5x.u.avast.com =>PUM.Misplaced.Certificate
~ Nombre lignes détournées 298/398 (Hosts file redirected)

---\\ Browser Helper Object de navigateur (BHO) (2) - 0s
O2 - BHO: Lync Click to Call BHO [64Bits] - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} (.Orphan.)
O2 - BHO: Microsoft OneDrive for Business Browser Helper [64Bits] - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} (.Orphan.)

---\\ Raccourcis Global Startup (143) - 9s
O4 - GS\Desktop [Administrateur]: ANCIEN ORDI DOCS.lnk . (...) D:\HP-ANCIEN ORDI\Users\FAMILY\Documents
O4 - GS\Desktop [Administrateur]: Cheat Engine.lnk . (...) C:\Program Files (x86)\Cheat Engine 6.7\Cheat Engine.exe =>.Cheat Engine®
O4 - GS\Desktop [Administrateur]: Data (D) - Raccourci.lnk . (...) D:\
O4 - GS\Desktop [Administrateur]: Enregistrement de produit ASUS.lnk . (...) C:\Program Files (x86)\ASUS\APRP\ASUSProductReg.exe =>.ASUSTeK
O4 - GS\Desktop [Administrateur]: Lecteur de CD - Raccourci.lnk . (...) E:\
O4 - GS\Desktop [Administrateur]: Outlook 2016.lnk . (.Microsoft Corporation - Microsoft Outlook.) C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE =>.Microsoft Corporation®
O4 - GS\Desktop [Administrateur]: Spotify.lnk . (.Spotify Ltd - Spotify.) C:\Users\jclou\AppData\Roaming\Spotify\Spotify.exe =>.Spotify AB®
O4 - GS\Desktop [Administrateur]: Windows (C) - Raccourci.lnk . (...) C:\
O4 - GS\Desktop [Administrateur]: ZHPCleaner.lnk . (.Nicolas Coolman - ZHPCleaner.) C:\Users\jclou\ZHPCleaner.exe =>.Nicolas Coolman
O4 - GS\Desktop [Administrateur]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\jclou\ZHPDiag3.exe =>.Nicolas Coolman
O4 - GS\Quicklaunch [Administrateur]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\Quicklaunch [Administrateur]: Microsoft Outlook.lnk . (.Microsoft Corporation - Microsoft Outlook.) C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE /recycle =>.Microsoft Corporation®
O4 - GS\Quicklaunch [Administrateur]: Samsung Kies (Lite).lnk . (...) C:\Program Files (x86)\Samsung\Kies\KiesAgent.exe /lite =>.Samsung Electronics CO., LTD.®
O4 - GS\Quicklaunch [Administrateur]: Samsung Kies.lnk . (...) C:\Program Files (x86)\Samsung\Kies\KiesAgent.exe =>.Samsung Electronics CO., LTD.®
O4 - GS\Quicklaunch [Administrateur]: Smart Switch.lnk . (.Samsung - Smart Switch PC.) C:\Program Files (x86)\Samsung\Smart Switch PC\SmartSwitchPC.exe =>.Samsung Electronics CO., LTD.®
O4 - GS\sendTo [Administrateur]: Destinataire de télécopie.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\Windows\System32\WFS.exe /SendTo =>.Microsoft Corporation
O4 - GS\sendTo [Administrateur]: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\WINDOWS\system32\WFS.exe /SendTo =>.Microsoft Corporation
O4 - GS\sendTo [Administrateur]: Skype.lnk . (.Skype Technologies S.A. - Skype.) C:\Program Files (x86)\Skype\Phone\Skype.exe /sendto: =>.Skype Software Sarl®
O4 - GS\sendTo [Administrateur]: Transfert de fichiers Bluetooth.LNK . (.Microsoft Corporation - .) C:\Windows\System32\fsquirt.exe =>.Microsoft Corporation
O4 - GS\TaskBar [Administrateur]: ASUS App Box.lnk . (.Copyright © 2014 - IntroApp.) C:\Program Files (x86)\ASUS\App Box\AppBox.exe =>.ASUSTeK Computer Inc.®
O4 - GS\TaskBar [Administrateur]: Excel 2016.lnk . (.Microsoft Corporation - Microsoft Excel.) C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE =>.Microsoft Corporation®
O4 - GS\TaskBar [Administrateur]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\TaskBar [Administrateur]: Outlook 2016.lnk . (.Microsoft Corporation - Microsoft Outlook.) C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE =>.Microsoft Corporation®
O4 - GS\TaskBar [Administrateur]: PowerPoint 2016.lnk . (.Microsoft Corporation - Microsoft PowerPoint.) C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE =>.Microsoft Corporation®
O4 - GS\TaskBar [Administrateur]: Publisher 2016.lnk . (.Microsoft Corporation - Microsoft Publisher.) C:\Program Files (x86)\Microsoft Office\root\Office16\MSPUB.EXE =>.Microsoft Corporation®
O4 - GS\TaskBar [Administrateur]: Snipping Tool.lnk . (.Microsoft Corporation - Outil Capture d’écran.) C:\WINDOWS\system32\SnippingTool.exe =>.Microsoft Corporation
O4 - GS\TaskBar [Administrateur]: Spotify.lnk . (.Spotify Ltd - Spotify.) C:\Users\jclou\AppData\Roaming\Spotify\Spotify.exe =>.Spotify AB®
O4 - GS\TaskBar [Administrateur]: Word 2016.lnk . (.Microsoft Corporation - Microsoft Word.) C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE =>.Microsoft Corporation®
O4 - GS\Programs [Administrateur]: OneDrive.lnk . (.Microsoft Corporation - Microsoft OneDrive.) C:\Users\jclou\AppData\Local\Microsoft\OneDrive\OneDrive.exe =>.Microsoft Corporation®
O4 - GS\Programs [Administrateur]: Spotify.lnk . (.Spotify Ltd - Spotify.) C:\Users\jclou\AppData\Roaming\Spotify\Spotify.exe =>.Spotify AB®
O4 - GS\Desktop [colou]: ANCIEN ORDI DOCS.lnk . (...) D:\HP-ANCIEN ORDI\Users\FAMILY\Documents
O4 - GS\Desktop [colou]: Cheat Engine.lnk . (...) C:\Program Files (x86)\Cheat Engine 6.7\Cheat Engine.exe =>.Cheat Engine®
O4 - GS\Desktop [colou]: Data (D) - Raccourci.lnk . (...) D:\
O4 - GS\Desktop [colou]: Enregistrement de produit ASUS.lnk . (...) C:\Program Files (x86)\ASUS\APRP\ASUSProductReg.exe =>.ASUSTeK
O4 - GS\Desktop [colou]: Lecteur de CD - Raccourci.lnk . (...) E:\
O4 - GS\Desktop [colou]: Outlook 2016.lnk . (.Microsoft Corporation - Microsoft Outlook.) C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE =>.Microsoft Corporation®
O4 - GS\Desktop [colou]: Spotify.lnk . (.Spotify Ltd - Spotify.) C:\Users\jclou\AppData\Roaming\Spotify\Spotify.exe =>.Spotify AB®
O4 - GS\Desktop [colou]: Windows (C) - Raccourci.lnk . (...) C:\
O4 - GS\Desktop [colou]: ZHPCleaner.lnk . (.Nicolas Coolman - ZHPCleaner.) C:\Users\jclou\ZHPCleaner.exe =>.Nicolas Coolman
O4 - GS\Desktop [colou]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\jclou\ZHPDiag3.exe =>.Nicolas Coolman
O4 - GS\Quicklaunch [colou]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\Quicklaunch [colou]: Microsoft Outlook.lnk . (.Microsoft Corporation - Microsoft Outlook.) C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE /recycle =>.Microsoft Corporation®
O4 - GS\Quicklaunch [colou]: Samsung Kies (Lite).lnk . (...) C:\Program Files (x86)\Samsung\Kies\KiesAgent.exe /lite =>.Samsung Electronics CO., LTD.®
O4 - GS\Quicklaunch [colou]: Samsung Kies.lnk . (...) C:\Program Files (x86)\Samsung\Kies\KiesAgent.exe =>.Samsung Electronics CO., LTD.®
O4 - GS\Quicklaunch [colou]: Smart Switch.lnk . (.Samsung - Smart Switch PC.) C:\Program Files (x86)\Samsung\Smart Switch PC\SmartSwitchPC.exe =>.Samsung Electronics CO., LTD.®
O4 - GS\sendTo [colou]: Destinataire de télécopie.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\Windows\System32\WFS.exe /SendTo =>.Microsoft Corporation
O4 - GS\sendTo [colou]: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\WINDOWS\system32\WFS.exe /SendTo =>.Microsoft Corporation
O4 - GS\sendTo [colou]: Skype.lnk . (.Skype Technologies S.A. - Skype.) C:\Program Files (x86)\Skype\Phone\Skype.exe /sendto: =>.Skype Software Sarl®
O4 - GS\sendTo [colou]: Transfert de fichiers Bluetooth.LNK . (.Microsoft Corporation - .) C:\Windows\System32\fsquirt.exe =>.Microsoft Corporation
O4 - GS\TaskBar [colou]: ASUS App Box.lnk . (.Copyright © 2014 - IntroApp.) C:\Program Files (x86)\ASUS\App Box\AppBox.exe =>.ASUSTeK Computer Inc.®
O4 - GS\TaskBar [colou]: Excel 2016.lnk . (.Microsoft Corporation - Microsoft Excel.) C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE =>.Microsoft Corporation®
O4 - GS\TaskBar [colou]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\TaskBar [colou]: Outlook 2016.lnk . (.Microsoft Corporation - Microsoft Outlook.) C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE =>.Microsoft Corporation®
O4 - GS\TaskBar [colou]: PowerPoint 2016.lnk . (.Microsoft Corporation - Microsoft PowerPoint.) C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE =>.Microsoft Corporation®
O4 - GS\TaskBar [colou]: Publisher 2016.lnk . (.Microsoft Corporation - Microsoft Publisher.) C:\Program Files (x86)\Microsoft Office\root\Office16\MSPUB.EXE =>.Microsoft Corporation®
O4 - GS\TaskBar [colou]: Snipping Tool.lnk . (.Microsoft Corporation - Outil Capture d’écran.) C:\WINDOWS\system32\SnippingTool.exe =>.Microsoft Corporation
O4 - GS\TaskBar [colou]: Spotify.lnk . (.Spotify Ltd - Spotify.) C:\Users\jclou\AppData\Roaming\Spotify\Spotify.exe =>.Spotify AB®
O4 - GS\TaskBar [colou]: Word 2016.lnk . (.Microsoft Corporation - Microsoft Word.) C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE =>.Microsoft Corporation®
O4 - GS\Programs [colou]: OneDrive.lnk . (.Microsoft Corporation - Microsoft OneDrive.) C:\Users\jclou\AppData\Local\Microsoft\OneDrive\OneDrive.exe =>.Microsoft Corporation®
O4 - GS\Programs [colou]: Spotify.lnk . (.Spotify Ltd - Spotify.) C:\Users\jclou\AppData\Roaming\Spotify\Spotify.exe =>.Spotify AB®
O4 - GS\Desktop [jclou]: ANCIEN ORDI DOCS.lnk . (...) D:\HP-ANCIEN ORDI\Users\FAMILY\Documents
O4 - GS\Desktop [jclou]: Cheat Engine.lnk . (...) C:\Program Files (x86)\Cheat Engine 6.7\Cheat Engine.exe =>.Cheat Engine®
O4 - GS\Desktop [jclou]: Data (D) - Raccourci.lnk . (...) D:\
O4 - GS\Desktop [jclou]: Enregistrement de produit ASUS.lnk . (...) C:\Program Files (x86)\ASUS\APRP\ASUSProductReg.exe =>.ASUSTeK
O4 - GS\Desktop [jclou]: Lecteur de CD - Raccourci.lnk . (...) E:\
O4 - GS\Desktop [jclou]: Outlook 2016.lnk . (.Microsoft Corporation - Microsoft Outlook.) C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE =>.Microsoft Corporation®
O4 - GS\Desktop [jclou]: Spotify.lnk . (.Spotify Ltd - Spotify.) C:\Users\jclou\AppData\Roaming\Spotify\Spotify.exe =>.Spotify AB®
O4 - GS\Desktop [jclou]: Windows (C) - Raccourci.lnk . (...) C:\
O4 - GS\Desktop [jclou]: ZHPCleaner.lnk . (.Nicolas Coolman - ZHPCleaner.) C:\Users\jclou\ZHPCleaner.exe =>.Nicolas Coolman
O4 - GS\Desktop [jclou]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\jclou\ZHPDiag3.exe =>.Nicolas Coolman
O4 - GS\Quicklaunch [jclou]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\Quicklaunch [jclou]: Microsoft Outlook.lnk . (.Microsoft Corporation - Microsoft Outlook.) C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE /recycle =>.Microsoft Corporation®
O4 - GS\Quicklaunch [jclou]: Samsung Kies (Lite).lnk . (...) C:\Program Files (x86)\Samsung\Kies\KiesAgent.exe /lite =>.Samsung Electronics CO., LTD.®
O4 - GS\Quicklaunch [jclou]: Samsung Kies.lnk . (...) C:\Program Files (x86)\Samsung\Kies\KiesAgent.exe =>.Samsung Electronics CO., LTD.®
O4 - GS\Quicklaunch [jclou]: Smart Switch.lnk . (.Samsung - Smart Switch PC.) C:\Program Files (x86)\Samsung\Smart Switch PC\SmartSwitchPC.exe =>.Samsung Electronics CO., LTD.®
O4 - GS\sendTo [jclou]: Destinataire de télécopie.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\Windows\System32\WFS.exe /SendTo =>.Microsoft Corporation
O4 - GS\sendTo [jclou]: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\WINDOWS\system32\WFS.exe /SendTo =>.Microsoft Corporation
O4 - GS\sendTo [jclou]: Skype.lnk . (.Skype Technologies S.A. - Skype.) C:\Program Files (x86)\Skype\Phone\Skype.exe /sendto: =>.Skype Software Sarl®
O4 - GS\sendTo [jclou]: Transfert de fichiers Bluetooth.LNK . (.Microsoft Corporation - .) C:\Windows\System32\fsquirt.exe =>.Microsoft Corporation
O4 - GS\TaskBar [jclou]: ASUS App Box.lnk . (.Copyright © 2014 - IntroApp.) C:\Program Files (x86)\ASUS\App Box\AppBox.exe =>.ASUSTeK Computer Inc.®
O4 - GS\TaskBar [jclou]: Excel 2016.lnk . (.Microsoft Corporation - Microsoft Excel.) C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE =>.Microsoft Corporation®
O4 - GS\TaskBar [jclou]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\TaskBar [jclou]: Outlook 2016.lnk . (.Microsoft Corporation - Microsoft Outlook.) C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE =>.Microsoft Corporation®
O4 - GS\TaskBar [jclou]: PowerPoint 2016.lnk . (.Microsoft Corporation - Microsoft PowerPoint.) C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE =>.Microsoft Corporation®
O4 - GS\TaskBar [jclou]: Publisher 2016.lnk . (.Microsoft Corporation - Microsoft Publisher.) C:\Program Files (x86)\Microsoft Office\root\Office16\MSPUB.EXE =>.Microsoft Corporation®
O4 - GS\TaskBar [jclou]: Snipping Tool.lnk . (.Microsoft Corporation - Outil Capture d’écran.) C:\WINDOWS\system32\SnippingTool.exe =>.Microsoft Corporation
O4 - GS\TaskBar [jclou]: Spotify.lnk . (.Spotify Ltd - Spotify.) C:\Users\jclou\AppData\Roaming\Spotify\Spotify.exe =>.Spotify AB®
O4 - GS\TaskBar [jclou]: Word 2016.lnk . (.Microsoft Corporation - Microsoft Word.) C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE =>.Microsoft Corporation®
O4 - GS\Programs [jclou]: OneDrive.lnk . (.Microsoft Corporation - Microsoft OneDrive.) C:\Users\jclou\AppData\Local\Microsoft\OneDrive\OneDrive.exe =>.Microsoft Corporation®
O4 - GS\Programs [jclou]: Spotify.lnk . (.Spotify Ltd - Spotify.) C:\Users\jclou\AppData\Roaming\Spotify\Spotify.exe =>.Spotify AB®
O4 - GS\CommonDesktop [Public]: A360 Desktop.lnk . (.Autodesk, Inc. - .) C:\Program Files (x86)\Autodesk\Autodesk Sync\AdSync.exe /browseLocal =>.Autodesk, Inc.
O4 - GS\CommonDesktop [Public]: Achat de fournitures HP.lnk . (.Hewlett-Packard Development Company L.P. - Shop for HP Supplies.) C:\Program Files (x86)\HP\HPSSUPPLY\hpqSSupply.exe =>.Hewlett Packard®
O4 - GS\CommonDesktop [Public]: Application de bureau Autodesk.lnk . (.Autodesk, Inc. - Autodesk Desktop App.) C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AutodeskDesktopApp.exe =>.Autodesk, Inc®
O4 - GS\CommonDesktop [Public]: Audacity.lnk . (.The Audacity Team - Audacity®, the Free, Cross-Platform Sound E.) C:\Program Files (x86)\Audacity\audacity.exe =>.The Audacity Team
O4 - GS\CommonDesktop [Public]: AutoCAD 2017 - Français (French).lnk . (.Autodesk, Inc. - .) C:\Program Files (x86)\Autodesk\AutoCAD 2017\acad.exe /product ACAD /language "fr-FR" =>.Autodesk, Inc.
O4 - GS\CommonDesktop [Public]: Autodesk ReCap 360.lnk . (.Autodesk - .) C:\Program Files (x86)\Autodesk\Autodesk ReCap 360\ReCap.exe =>.Autodesk
O4 - GS\CommonDesktop [Public]: CASIO FA-124.lnk . (.CASIO COMPUTER CO., LTD - FA-124.) C:\Program Files (x86)\CASIO\CASIO FA-124\FA124.exe =>.CASIO COMPUTER CO., LTD
O4 - GS\CommonDesktop [Public]: Centre de solutions HP.lnk . (.Hewlett-Packard Company - hpqdirec.exe.) C:\Program Files (x86)\HP\Digital Imaging\bin\Hpqdirec.exe =>.Hewlett Packard®
O4 - GS\CommonDesktop [Public]: F1 Football Manager 2017.lnk . (...) D:\HP-ANCIEN ORDI\Users\FAMILY\Documents\Corentin\FM17\Football Manager 2017\stp-fm2017.exe
O4 - GS\CommonDesktop [Public]: FM Genie Scout 17.lnk . (.Eugene Tarabanovsky - FM Genie Scout 2017.) C:\FM Genie Scout 17\FMGenieScout.exe {65F065E35492082E883191B8EA04E0FF} =>.Eugene Tarabanovsky
O4 - GS\CommonDesktop [Public]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\CommonDesktop [Public]: HP Support Assistant.lnk . (.HP Inc. - HP Support Assistant.) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe /p 2 =>.HP Inc.®
O4 - GS\CommonDesktop [Public]: LayOut 2017.lnk . (.Trimble Navigation Limited - .) C:\Program Files (x86)\SketchUp\SketchUp 2017\LayOut\LayOut.exe =>.Trimble Navigation Limited
O4 - GS\CommonDesktop [Public]: Malwarebytes.lnk . (.Malwarebytes - .) C:\Program Files (x86)\Malwarebytes\Anti-Malware\mbam.exe =>.Malwarebytes
O4 - GS\CommonDesktop [Public]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files (x86)\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O4 - GS\CommonDesktop [Public]: Samsung Kies (Lite).lnk . (...) C:\Program Files (x86)\Samsung\Kies\KiesAgent.exe /lite =>.Samsung Electronics CO., LTD.®
O4 - GS\CommonDesktop [Public]: Samsung Kies.lnk . (...) C:\Program Files (x86)\Samsung\Kies\KiesAgent.exe =>.Samsung Electronics CO., LTD.®
O4 - GS\CommonDesktop [Public]: SketchUp 2017.lnk . (.Trimble Navigation Limited - .) C:\Program Files (x86)\SketchUp\SketchUp 2017\SketchUp.exe =>.Trimble Navigation Limited
O4 - GS\CommonDesktop [Public]: Skype.lnk . (...) C:\Windows\Installer\{FC965A47-4839-40CA-B618-18F486F042C6}\SkypeIcon.exe =>.Skype Technologies
O4 - GS\CommonDesktop [Public]: Style Builder 2017.lnk . (.Trimble Navigation Limited - .) C:\Program Files (x86)\SketchUp\SketchUp 2017\Style Builder\Style Builder.exe =>.Trimble Navigation Limited
O4 - GS\CommonDesktop [Public]: TunnelBear.lnk . (...) C:\Program Files (x86)\TunnelBear\launch.vbs
O4 - GS\Programs [Public]: OneDrive.lnk . (.Microsoft Corporation - Microsoft OneDrive.) C:\Users\jclou\AppData\Local\Microsoft\OneDrive\OneDrive.exe =>.Microsoft Corporation®
O4 - GS\Programs [Public]: Spotify.lnk . (.Spotify Ltd - Spotify.) C:\Users\jclou\AppData\Roaming\Spotify\Spotify.exe =>.Spotify AB®
O4 - GS\Accessories [Public]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files (x86)\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O4 - GS\Accessories [Public]: Notepad.lnk . (.Microsoft Corporation - Bloc-notes.) C:\WINDOWS\system32\notepad.exe =>.Microsoft Corporation
O4 - GS\Startup [Public]: HP Digital Imaging Monitor.lnk . (.Hewlett-Packard Co. - HP Digital Imaging Monitor.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe =>.Hewlett Packard®
O4 - GS\Accessories [Public]: Math Input Panel.lnk . (.Microsoft Corporation - .) C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\mip.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Paint.lnk . (.Microsoft Corporation - Paint.) C:\WINDOWS\system32\mspaint.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Quick Assist.lnk . (.Microsoft Corporation - Quick Assist.) C:\WINDOWS\system32\quickassist.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Remote Desktop Connection.lnk . (.Microsoft Corporation - Connexion Bureau à distance.) C:\WINDOWS\system32\mstsc.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Snipping Tool.lnk . (.Microsoft Corporation - Outil Capture d’écran.) C:\WINDOWS\system32\SnippingTool.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Steps Recorder.lnk . (.Microsoft Corporation - Enregistreur d’actions.) C:\WINDOWS\system32\psr.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Windows Fax and Scan.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\WINDOWS\system32\WFS.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Windows Media Player.lnk . (.Microsoft Corporation - Lecteur Windows Media.) C:\Program Files (x86)\Windows Media Player\wmplayer.exe /prefetch:1 =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Wordpad.lnk . (.Microsoft Corporation - Application Windows Wordpad.) C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: XPS Viewer.lnk . (.Microsoft Corporation - Visionneuse XPS.) C:\WINDOWS\system32\xpsrchvw.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: Character Map.lnk . (.Microsoft Corporation - Table des caractères.) C:\WINDOWS\system32\charmap.exe =>.Microsoft Corporation
O4 - GS\ProgramsCommon [Public]: Access 2016.lnk . (.Microsoft Corporation - Microsoft Access.) C:\Program Files (x86)\Microsoft Office\root\Office16\MSACCESS.EXE =>.Microsoft Corporation®
O4 - GS\ProgramsCommon [Public]: Audacity.lnk . (.The Audacity Team - Audacity®, the Free, Cross-Platform Sound E.) C:\Program Files (x86)\Audacity\audacity.exe =>.The Audacity Team
O4 - GS\ProgramsCommon [Public]: Enregistrement OCR I.R.I.S..lnk . (.I.R.I.S. Image Recognition Integarted Systems - Registration Wizard.) C:\Program Files (x86)\HP\Digital Imaging\DocProc\regipe.exe =>.IMAGE RECOGNITION INTEGRATED SYSTEMS SA®
O4 - GS\ProgramsCommon [Public]: Excel 2016.lnk . (.Microsoft Corporation - Microsoft Excel.) C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE =>.Microsoft Corporation®
O4 - GS\ProgramsCommon [Public]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\ProgramsCommon [Public]: Immersive Control Panel.lnk . (.Microsoft Corporation - Windows Control Panel.) C:\WINDOWS\System32\Control.exe =>.Microsoft Corporation
O4 - GS\ProgramsCommon [Public]: MiracastView.lnk . (.Microsoft Corporation - MiracastView.) C:\WINDOWS\MiracastView\MiracastView.exe =>.Microsoft Windows®
O4 - GS\ProgramsCommon [Public]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files (x86)\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O4 - GS\ProgramsCommon [Public]: OneNote 2016.lnk . (.Microsoft Corporation - Microsoft OneNote.) C:\Program Files (x86)\Microsoft Office\root\Office16\ONENOTE.EXE =>.Microsoft Corporation®
O4 - GS\ProgramsCommon [Public]: Outlook 2016.lnk . (.Microsoft Corporation - Microsoft Outlook.) C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE =>.Microsoft Corporation®
O4 - GS\ProgramsCommon [Public]: PowerPoint 2016.lnk . (.Microsoft Corporation - Microsoft PowerPoint.) C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE =>.Microsoft Corporation®
O4 - GS\ProgramsCommon [Public]: PrintDialog.lnk . (.Microsoft Corporation - Print Dialog.) C:\WINDOWS\PrintDialog\PrintDialog.exe =>.Microsoft Windows®
O4 - GS\ProgramsCommon [Public]: Publisher 2016.lnk . (.Microsoft Corporation - Microsoft Publisher.) C:\Program Files (x86)\Microsoft Office\root\Office16\MSPUB.EXE =>.Microsoft Corporation®
O4 - GS\ProgramsCommon [Public]: WildTangent Games App - asus.lnk . (.WildTangent - WildTangent Games App.) C:\Program Files (x86)\WildTangent Games\App\GameConsole-wt.exe /src gamesmenu /dp asusdt =>.WildTangent Inc®
O4 - GS\ProgramsCommon [Public]: Windows Media Player.lnk . (.Microsoft Corporation - Lecteur Windows Media.) C:\Program Files (x86)\Windows Media Player\wmplayer.exe /prefetch:1 =>.Microsoft Corporation
O4 - GS\ProgramsCommon [Public]: Word 2016.lnk . (.Microsoft Corporation - Microsoft Word.) C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE =>.Microsoft Corporation®

---\\ Modification Domaine/Adresses DNS (4) - 0s
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 =>.Local IP Adress
O17 - HKLM\System\CCS\Services\Tcpip\..\{72824adf-aeb3-48cf-b4e6-58188ff04a9a}: DhcpNameServer = 208.67.220.220 209.244.0.3 192.168.0.254 212.27.40.240 =>.Local IP Adress
O17 - HKLM\System\CCS\Services\Tcpip\..\{72b09b6d-4232-4da0-8ca8-0e9593c931bf}: DhcpNameServer = 172.18.11.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{828768ed-b93c-4f17-a760-3a69ffb05eb2}: DhcpNameServer = 192.168.1.1 =>.Local IP Adress

---\\ Protocole additionnel (27) - 1s
O18 - Handler: about [64Bits] - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation
O18 - Handler: cdl [64Bits] - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation
O18 - Handler: dvd [64Bits] - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\SysWOW64\MSVidCtl.dll =>.Microsoft Corporation
O18 - Handler: file [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation
O18 - Handler: ftp [64Bits] - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation
O18 - Handler: http [64Bits] - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation
O18 - Handler: https [64Bits] - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation
O18 - Handler: its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\SysWOW64\itss.dll =>.Microsoft Corporation
O18 - Handler: javascript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation
O18 - Handler: local [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation
O18 - Handler: mailto [64Bits] - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation
O18 - Handler: mhtml [64Bits] - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\SysWOW64\inetcomm.dll =>.Microsoft Corporation
O18 - Handler: mk [64Bits] - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation
O18 - Handler: ms-its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\SysWOW64\itss.dll =>.Microsoft Corporation
O18 - Handler: mso-minsb-roaming.16 [64Bits] - {83C25742-A9F7-49FB-9138-434302C88D07} . (.Microsoft Corporation - Microsoft Office 2016 component.) -- C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL =>.Microsoft Corporation®
O18 - Handler: mso-minsb.16 [64Bits] - {42089D2D-912D-4018-9087-2B87803E93FB} . (.Microsoft Corporation - Microsoft Office 2016 component.) -- C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL =>.Microsoft Corporation®
O18 - Handler: osf-roaming.16 [64Bits] - {42089D2D-912D-4018-9087-2B87803E93FB} . (.Microsoft Corporation - Microsoft Office 2016 component.) -- C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL =>.Microsoft Corporation®
O18 - Handler: osf.16 [64Bits] - {5504BE45-A83B-4808-900A-3A5C36E7F77A} . (.Microsoft Corporation - Microsoft Office 2016 component.) -- C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL =>.Microsoft Corporation®
O18 - Handler: res [64Bits] - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation
O18 - Handler: tbauth [64Bits] - {14654CA6-5711-491D-B89A-58E571679951} . (.Microsoft Corporation - TBAuth protocol handler.) -- C:\Windows\SysWOW64\tbauth.dll =>.Microsoft Corporation
O18 - Handler: tv [64Bits] - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\SysWOW64\MSVidCtl.dll =>.Microsoft Corporation
O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation
O18 - Handler: windows.tbauth [64Bits] - {14654CA6-5711-491D-B89A-58E571679951} . (.Microsoft Corporation - TBAuth protocol handler.) -- C:\Windows\SysWOW64\tbauth.dll =>.Microsoft Corporation
O18 - Filter: application/octet-stream [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\SysWOW64\mscoree.dll =>.Microsoft Corporation
O18 - Filter: application/x-complus [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\SysWOW64\mscoree.dll =>.Microsoft Corporation
O18 - Filter: application/x-mfe-ipt [64Bits] - {3EF5086B-5478-4598-A054-786C45D75692} . (.McAfee, Inc. - McAfee MSC IE plugin DLL.) -- c:\Program Files (x86)\McAfee\msc\McSnIePl.dll =>.McAfee, Inc.®
O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\SysWOW64\mscoree.dll =>.Microsoft Corporation

---\\ Logiciels installés (162) - 8s
O42 - Logiciel: 64 Bit HP CIO Components Installer - (.Hewlett-Packard.) [HKLM][64Bits] -- {FF21C3E6-97FD-474F-9518-8DCBE94C2854} =>.Hewlett-Packard
O42 - Logiciel: 7-Zip 16.03 - (.Igor Pavlov.) [HKLM][64Bits] -- 7-Zip =>.Igor Pavlov
O42 - Logiciel: 7-Zip 16.03 (x64) - (.Igor Pavlov.) [HKLM][64Bits] -- 7-Zip =>.Igor Pavlov
O42 - Logiciel: A360 Desktop - (.Autodesk.) [HKLM][64Bits] -- {7758802D-9486-4883-9927-CCAC366A3BA4} =>.Autodesk
O42 - Logiciel: ACA & MEP 2017 Object Enabler - (.Autodesk.) [HKLM][64Bits] -- {28B89EEF-0004-0000-5102-CF3F3A09B77D} =>.Autodesk
O42 - Logiciel: ACAD Private - (.Autodesk.) [HKLM][64Bits] -- {28B89EEF-0001-0000-3102-CF3F3A09B77D} =>.Autodesk
O42 - Logiciel: AIO_Scan - (.Hewlett-Packard.) [HKLM][64Bits] -- {104066F4-5897-4067-85D3-4C88B67CCF75} =>.Hewlett-Packard
O42 - Logiciel: Alcor Micro USB Card Reader Driver - (.Alcor Micro Corp..) [HKLM][64Bits] -- {815AC3A5-2335-4745-845D-7C9EC82C6E84} =>.Alcor Micro Corp.
O42 - Logiciel: Alcor Micro USB Card Reader Driver - (.Alcor Micro Corp..) [HKLM][64Bits] -- InstallShield_{815AC3A5-2335-4745-845D-7C9EC82C6E84} =>.Alcor Micro Corp.
O42 - Logiciel: Apowersoft Online Launcher version 1.6.0 - (.APOWERSOFT LIMITED.) [HKLM][64Bits] -- {20BF67A8-D81A-4489-8225-FABAA0896E2D}_is1 =>.APOWERSOFT LIMITED
O42 - Logiciel: Application de bureau Autodesk - (.Autodesk.) [HKLM][64Bits] -- Autodesk Desktop App =>.Autodesk, Inc®
O42 - Logiciel: Applications recommandées Autodesk 2016-2017 - (.Autodesk.) [HKLM][64Bits] -- {27C15055-713B-4D0E-881F-19598A2DFD59} =>.Autodesk
O42 - Logiciel: Assistant Mise à niveau de Windows 10 - (.Microsoft Corporation.) [HKLM][64Bits] -- {D5C69738-B486-402E-85AC-2456D98A64E4} =>.Microsoft Corporation®
O42 - Logiciel: ASUS App Box - (.ASUSTeK Computer Inc..) [HKLM][64Bits] -- {F0CE6060-50B1-401E-8357-B6E24DB98D21} =>.ASUSTek Computer Inc.
O42 - Logiciel: ASUS Manager - (.ASUSTeK Computer Inc..) [HKLM][64Bits] -- {F5E5AD85-4A90-4604-A887-464D3818D8FD} =>.ASUSTek Computer Inc.
O42 - Logiciel: ASUS Manager - Ai Booting - (.ASUSTeK Computer Inc..) [HKLM][64Bits] -- {2DCE446C-D090-4458-8782-8F16DF94351E} =>.ASUSTek Computer Inc.
O42 - Logiciel: ASUS Manager - Backup & Recovery - (.ASUSTeK Computer Inc..) [HKLM][64Bits] -- {34D67DE5-2ECF-4E6B-A243-2C16E2792787} =>.ASUSTek Computer Inc.
O42 - Logiciel: ASUS Manager - PC Cleanup - (.ASUSTeK Computer Inc..) [HKLM][64Bits] -- {E22A19AE-7DDB-4959-B1DB-A0996294352A} =>.ASUSTek Computer Inc.
O42 - Logiciel: ASUS Manager - Power Manager - (.ASUSTeK Computer Inc..) [HKLM][64Bits] -- {DD248BEE-E925-4720-A775-9A42276BB6EA} =>.ASUSTek Computer Inc.
O42 - Logiciel: ASUS Manager - SyncUp - (.ASUSTeK Computer Inc..) [HKLM][64Bits] -- {C2294792-457D-4DF7-9486-B630754C73D0} =>.ASUSTek Computer Inc.
O42 - Logiciel: ASUS Manager - Update - (.ASUSTeK Computer Inc..) [HKLM][64Bits] -- {675BBE8A-0ED3-4048-8723-BA51EAB8E1A8} =>.ASUSTek Computer Inc.
O42 - Logiciel: ASUS Music Maker - (.MAGIX Software GmbH.) [HKLM][64Bits] -- {5FDB730E-6091-4125-AA5D-1143A091E32B} =>.MAGIX Software GmbH
O42 - Logiciel: ASUS Music Maker - (.MAGIX Software GmbH.) [HKLM][64Bits] -- MX.{5FDB730E-6091-4125-AA5D-1143A091E32B} =>.MAGIX Software GmbH®
O42 - Logiciel: ASUS Music Maker Soundpools - (.MAGIX Software GmbH.) [HKLM][64Bits] -- {15634847-BDA3-4A0D-84C7-C5175E49C745} =>.MAGIX Software GmbH
O42 - Logiciel: Audacity 2.1.2 - (.Audacity Team.) [HKLM][64Bits] -- Audacity®_is1 =>.Audacity Team
O42 - Logiciel: AudioWizard - (.ICEpower a/s.) [HKLM][64Bits] -- {57E770A2-2BAF-4CAA-BAA3-BD896E2254D3} =>.ICEpower a/s
O42 - Logiciel: AutoCAD 2017 - (.Autodesk.) [HKLM][64Bits] -- {28B89EEF-0001-0000-0102-CF3F3A09B77D} =>.Autodesk
O42 - Logiciel: AutoCAD 2017 - Français (French) - (.Autodesk.) [HKLM][64Bits] -- {28B89EEF-0001-040C-2102-CF3F3A09B77D} =>.Autodesk, Inc®
O42 - Logiciel: AutoCAD 2017 Language Pack - Français (French) - (.Autodesk.) [HKLM][64Bits] -- {28B89EEF-0001-040C-1102-CF3F3A09B77D} =>.Autodesk
O42 - Logiciel: Autodesk Advanced Material Library Image Library 2017 - (.Autodesk.) [HKLM][64Bits] -- {8ED2ED41-4455-449D-993C-751C039089B9} =>.Autodesk
O42 - Logiciel: Autodesk App Manager 2016-2017 - (.Autodesk.) [HKLM][64Bits] -- {C0954809-F5DC-426C-847E-8409DE14E4C0} =>.Autodesk
O42 - Logiciel: Autodesk AutoCAD 2017 - Français (French) - (.Autodesk.) [HKLM][64Bits] -- AutoCAD 2017 - Français (French) =>.Autodesk, Inc®
O42 - Logiciel: Autodesk AutoCAD Performance Feedback Tool 1.2.5 - (.Autodesk.) [HKLM][64Bits] -- {8600F844-9AA5-412E-B6F2-F9C6CBCFD268} =>.Autodesk
O42 - Logiciel: Autodesk BIM 360 Glue AutoCAD 2017 Add-in 64 bit - (.Autodesk.) [HKLM][64Bits] -- {276A67E0-71EB-4827-B5F7-2ACF02BC1A5B} =>.Autodesk
O42 - Logiciel: Autodesk License Service (x64) - 3.1 - (.Autodesk.) [HKLM][64Bits] -- {EB6FE58F-8576-4272-BB9C-6B47D9EDFA4D} =>.Autodesk
O42 - Logiciel: Autodesk Material Library 2017 - (.Autodesk.) [HKLM][64Bits] -- {8FB9F735-D64C-4991-8D91-4CDDAB1ABDEE} =>.Autodesk
O42 - Logiciel: Autodesk Material Library Base Resolution Image Library 2017 - (.Autodesk.) [HKLM][64Bits] -- {3FBFBC43-9882-43FA-B979-2D53896747B3} =>.Autodesk
O42 - Logiciel: Autodesk ReCap 360 - (.Autodesk.) [HKLM][64Bits] -- {5F0F7049-0000-1033-0102-73A6DA3D7FA6} =>.Autodesk
O42 - Logiciel: Autodesk ReCap 360 - (.Autodesk.) [HKLM][64Bits] -- Autodesk ReCap 360 =>.Autodesk, Inc®
O42 - Logiciel: BufferChm - (.Hewlett-Packard.) [HKLM][64Bits] -- {FA0FF682-CC70-4C57-93CD-E276F3E7537E} =>.Hewlett-Packard
O42 - Logiciel: CASIO FA-124 - (.CASIO COMPUTER CO., LTD..) [HKLM][64Bits] -- {FB47E710-6249-4EFA-BE36-E922B0612AF4} =>.CASIO COMPUTER CO., LTD.
O42 - Logiciel: Cheat Engine 6.7 - (.Cheat Engine.) [HKLM][64Bits] -- Cheat Engine 6.7_is1 =>.Cheat Engine®
O42 - Logiciel: Cisco EAP-FAST Module - (.Cisco Systems, Inc..) [HKLM][64Bits] -- {64BF0187-F3D2-498B-99EA-163AF9AE6EC9} =>.Cisco Systems, Inc.
O42 - Logiciel: Cisco LEAP Module - (.Cisco Systems, Inc..) [HKLM][64Bits] -- {AF312B06-5C5C-468E-89B3-BE6DE2645722} =>.Cisco Systems, Inc.
O42 - Logiciel: Cisco PEAP Module - (.Cisco Systems, Inc..) [HKLM][64Bits] -- {0A4EF0E6-A912-4CDE-A7F3-6E56E7C13A2F} =>.Cisco Systems, Inc.
O42 - Logiciel: Copy - (.Hewlett-Packard.) [HKLM][64Bits] -- {9BE466FF-70B7-4DA8-807C-DB4C3610FDAA} =>.Hewlett-Packard
O42 - Logiciel: CyberLink PhotoDirector 3 - (.CyberLink Corp..) [HKLM][64Bits] -- {39337565-330E-4ab6-A9AE-AC81E0720B10} =>.CyberLink Corp.®
O42 - Logiciel: CyberLink PhotoDirector 3 - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{39337565-330E-4ab6-A9AE-AC81E0720B10} =>.CyberLink Corp.®
O42 - Logiciel: CyberLink PowerDirector 10 - (.CyberLink Corp..) [HKLM][64Bits] -- {B0B4F6D2-F2AE-451A-9496-6F2F6A897B32} =>.CyberLink Corp.®
O42 - Logiciel: CyberLink PowerDirector 10 - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32} =>.CyberLink Corp.®
O42 - Logiciel: Destinations - (.Hewlett-Packard.) [HKLM][64Bits] -- {BD7204BA-DD64-499E-9B55-6A282CDF4FA4} =>.Hewlett-Packard
O42 - Logiciel: Device Setup - (.ASUSTek Computer Inc..) [HKLM][64Bits] -- {1F07F2C7-596F-4F34-B805-2C61A3E50E5A} =>.ASUSTek Computer Inc.
O42 - Logiciel: DeviceDiscovery - (.Hewlett-Packard.) [HKLM][64Bits] -- {1458BB78-1DC5-4BC0-B9A3-2B644F5A8105} =>.Hewlett-Packard
O42 - Logiciel: DJ_AIO_NS_LP_DocCD - (.Hewlett-Packard.) [HKLM][64Bits] -- {C5C00116-FFD7-465e-8316-6055F320E7E5} =>.Hewlett-Packard
O42 - Logiciel: DJ_AIO_ProductContext - (.Hewlett-Packard.) [HKLM][64Bits] -- {D7CDAC3E-0962-41D6-829D-6AB524120B43} =>.Hewlett-Packard
O42 - Logiciel: DJ_AIO_Software - (.Hewlett-Packard.) [HKLM][64Bits] -- {F2C4B91A-250C-4A68-94EB-9643151F892B} =>.Hewlett-Packard
O42 - Logiciel: DJ_AIO_Software_min - (.Hewlett-Packard.) [HKLM][64Bits] -- {EED759C0-F201-4422-86FA-264075B882ED} =>.Hewlett-Packard
O42 - Logiciel: DocProc - (.Hewlett-Packard.) [HKLM][64Bits] -- {9B362566-EC1B-4700-BB9C-EC661BDE2175} =>.Hewlett-Packard
O42 - Logiciel: Evernote v. 5.8.6 - (.Evernote Corp..) [HKLM][64Bits] -- {FEDC7C10-EF67-11E4-9B07-00505695D7B0} =>.Evernote Corp.
O42 - Logiciel: F4100 - (.Hewlett-Packard.) [HKLM][64Bits] -- {5C3AF724-B144-4AC1-B2CB-FB6D447116F1} =>.Hewlett-Packard
O42 - Logiciel: F4100_Help - (.Hewlett-Packard.) [HKLM][64Bits] -- {A6B90148-02C5-4fd3-8D7A-EF2386835CB9} =>.Hewlett-Packard
O42 - Logiciel: Firebird SQL Server - MAGIX Edition - (.MAGIX AG.) [HKLM][64Bits] -- {39AB2E37-1A55-4292-A5D3-971E9F70D0F8} =>.MAGIX AG
O42 - Logiciel: FM Genie Scout 17 version 1.0 17.3.2 - (..) [HKLM][64Bits] -- FM Genie Scout 17_is1
O42 - Logiciel: FM Wizard Editor 17.3.1 - (.FM Wizard Editor 17.3.1.) [HKCU][64Bits] -- c08f1d226ae3ab2c
O42 - Logiciel: FMSE17 - (.AppCake Limited.) [HKLM][64Bits] -- {11B609E0-43B4-40B2-AD17-5978F29DAC0C}
O42 - Logiciel: FMSE17 - (.AppCake Limited.) [HKLM][64Bits] -- {2cf6af2c-f243-426f-a0ca-0e57088a59de}
O42 - Logiciel: Football Manager 2017 - (..) [HKLM][64Bits] -- Football Manager 2017_is1
O42 - Logiciel: FreeMind - (..) [HKLM][64Bits] -- B991B020-2968-11D8-AF23-444553540000_is1
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM][64Bits] -- Google Chrome =>.Google Inc®
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {60EC980A-BDA2-4CB6-A427-B07A5498B4CA} =>.Google Inc.
O42 - Logiciel: GPBaseService2 - (.Hewlett-Packard.) [HKLM][64Bits] -- {BB3447F6-9553-4AA9-960E-0DB5310C5779} =>.Hewlett-Packard
O42 - Logiciel: HP Customer Experience Enhancements - (.HP Development Company, L.P..) [HKLM][64Bits] -- {64228DFB-7450-49B7-935C-B97342CB6659} =>.HP Development Company, L.P.
O42 - Logiciel: HP Customer Participation Program 14.0 - (.HP.) [HKLM][64Bits] -- HPExtendedCapabilities =>.Hewlett Packard®
O42 - Logiciel: HP Deskjet All-In-One Software - (.HP.) [HKLM][64Bits] -- {2CB8566A-8EA6-417A-BAB1-1B10A88C79BB} =>.Hewlett Packard®
O42 - Logiciel: HP Imaging Device Functions 14.0 - (.HP.) [HKLM][64Bits] -- HP Imaging Device Functions =>.Hewlett Packard®
O42 - Logiciel: HP Solution Center 14.0 - (.HP.) [HKLM][64Bits] -- HP Solution Center & Imaging Support Tools =>.Hewlett Packard®
O42 - Logiciel: HP Support Assistant - (.HP Inc..) [HKLM][64Bits] -- {56D27851-B9A6-430F-875A-E2D7A3802C7B} =>.HP Inc.
O42 - Logiciel: HP Support Solutions Framework - (.HP Inc..) [HKLM][64Bits] -- {446AA6E0-104D-40FB-A18A-A3431AED2F14} =>.HP Inc.
O42 - Logiciel: HP Update - (.Hewlett-Packard.) [HKLM][64Bits] -- {912D30CF-F39E-4B31-AD9A-123C6B794EE2} =>.Hewlett-Packard
O42 - Logiciel: HPPhotoGadget - (.Hewlett-Packard.) [HKLM][64Bits] -- {CAE4213F-F797-439D-BD9E-79B71D115BE3} =>.Hewlett-Packard
O42 - Logiciel: HPProductAssistant - (.Hewlett-Packard.) [HKLM][64Bits] -- {150B6201-E9E6-4DFB-960E-CCBD53FBDDED} =>.Hewlett-Packard
O42 - Logiciel: HPSSupply - (.Hewlett-Packard.) [HKLM][64Bits] -- {AC35A885-0F8F-4857-B7DA-6E8DFB43E6B3} =>.Hewlett-Packard
O42 - Logiciel: Importation de SketchUp 2016-2017 - (.Autodesk.) [HKLM][64Bits] -- {063925DB-9D8C-48E2-8F04-1B7038B6C783} =>.Autodesk
O42 - Logiciel: Intel(R) Chipset Device Software - (.Intel Corporation.) [HKLM][64Bits] -- {B685D0AD-42A8-4A39-9BFE-8C063FA9AF29} =>.Intel Corporation
O42 - Logiciel: Intel(R) Chipset Device Software - (.Intel(R) Corporation.) [HKLM][64Bits] -- {c6cff78a-cccb-49d5-be68-ae0ec5f0d48a} =>.Intel Corporation - Software and Firmware Products®
O42 - Logiciel: Intel(R) Management Engine Components - (.Intel Corporation.) [HKLM][64Bits] -- {1CEAC85D-2590-4760-800F-8DE5E91F3700} =>.Intel Corporation
O42 - Logiciel: Intel(R) Management Engine Components - (.Intel Corporation.) [HKLM][64Bits] -- {5D1BFBB8-4923-4388-9559-C86F5D9E2740} =>.Intel Corporation
O42 - Logiciel: Intel(R) Management Engine Components - (.Intel Corporation.) [HKLM][64Bits] -- {B434599E-E35F-4612-9803-A2FB7A8E066B} =>.Intel Corporation
O42 - Logiciel: Intel(R) ME UninstallLegacy - (.Intel Corporation.) [HKLM][64Bits] -- {ECA145AF-55D0-42BA-870F-4213F0198A46} =>.Intel Corporation
O42 - Logiciel: Intel(R) Network Connections 20.1.2019.0 - (.Intel.) [HKLM][64Bits] -- {3E64A1AF-7250-4BA7-A149-8EF830B3847D} =>.Intel
O42 - Logiciel: Intel(R) Network Connections 20.1.2019.0 - (.Intel.) [HKLM][64Bits] -- PROSetDX =>.Intel
O42 - Logiciel: Intel(R) Rapid Storage Technology - (.Intel Corporation.) [HKLM][64Bits] -- {205AE40D-8AD7-4F29-A430-DD2168DA562D} =>.Intel Corporation
O42 - Logiciel: Intel(R) Rapid Storage Technology - (.Intel Corporation.) [HKLM][64Bits] -- {409CB30E-E457-4008-9B1A-ED1B9EA21140} =>.Intel Corporation
O42 - Logiciel: Intel® Security Assist - (.Intel Corporation.) [HKLM][64Bits] -- {4B230374-6475-4A73-BA6E-41015E9C5013} =>.Intel Corporation
O42 - Logiciel: Intel® Trusted Connect Service Client - (.Intel Corporation.) [HKLM][64Bits] -- {7D84E343-A23D-451C-B123-0195B2D903A6} =>.Intel Corporation
O42 - Logiciel: Java 8 Update 111 - (.Oracle Corporation.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F32180111F0} =>.Oracle Corporation
O42 - Logiciel: Java Auto Updater - (.Oracle Corporation.) [HKLM][64Bits] -- {4A03706F-666A-4037-7777-5F2748764D10} =>.Oracle Corporation
O42 - Logiciel: MAGIX Content and Soundpools - (.MAGIX Software GmbH.) [HKLM][64Bits] -- MAGIX_GlobalContent =>.MAGIX Software GmbH®
O42 - Logiciel: Malwarebytes version 3.2.2.2018 - (.Malwarebytes.) [HKLM][64Bits] -- {35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1 =>.Malwarebytes
O42 - Logiciel: MarketResearch - (.Hewlett-Packard.) [HKLM][64Bits] -- {D360FA88-17C8-4F14-B67F-13AAF9607B12} =>.Hewlett-Packard
O42 - Logiciel: McAfee Internet Security - (.McAfee, Inc..) [HKLM][64Bits] -- MSC =>.McAfee, Inc.®
O42 - Logiciel: Microsoft OneDrive - (.Microsoft Corporation.) [HKCU][64Bits] -- OneDriveSetup.exe =>.Microsoft Corporation®
O42 - Logiciel: MiniTool Partition Wizard Free 10.2.1 - (.MiniTool Solution Ltd..) [HKLM][64Bits] -- {05D996FA-ADCB-4D23-BA3C-A7C184A8FAC6}_is1 =>.MiniTool Solution Ltd®
O42 - Logiciel: Mozilla Firefox 54.0 (x86 fr) - (.Mozilla.) [HKLM][64Bits] -- Mozilla Firefox 54.0 (x86 fr) =>.Mozilla Corporation®
O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM][64Bits] -- MozillaMaintenanceService =>.Mozilla
O42 - Logiciel: Mp3tagApp2 - (..) [HKCU][64Bits] -- Mp3tagApp2
O42 - Logiciel: MSXML 4.0 SP3 Parser - (.Microsoft Corporation.) [HKLM][64Bits] -- {196467F1-C11F-4F76-858B-5812ADC83B94} =>.Microsoft Corporation
O42 - Logiciel: NVIDIA 3D Vision Controller Driver 352.65 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB =>.NVIDIA Corporation
O42 - Logiciel: NVIDIA Display Container - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVDisplayContainer =>.NVIDIA Corporation
O42 - Logiciel: NVIDIA Display Container LS - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVDisplayContainerLS =>.NVIDIA Corporation
O42 - Logiciel: NVIDIA GeForce Experience 2.4.5.57 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience =>.NVIDIA Corporation
O42 - Logiciel: NVIDIA GeForce Experience Service - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GfExperienceService =>.NVIDIA Corporation
O42 - Logiciel: NVIDIA Install Application - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer =>.NVIDIA Corporation
O42 - Logiciel: NVIDIA LED Visualizer 1.0 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.LEDVisualizer =>.NVIDIA Corporation
O42 - Logiciel: NVIDIA Network Service - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Network.Service =>.NVIDIA Corporation
O42 - Logiciel: NVIDIA PhysX System Software 9.15.0428 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX =>.NVIDIA Corporation
O42 - Logiciel: NVIDIA Pilote 3D Vision 375.63 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision =>.NVIDIA Corporation
O42 - Logiciel: NVIDIA Pilote audio HD : 1.3.34.17 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver =>.NVIDIA Corporation
O42 - Logiciel: NVIDIA Pilote graphique 375.63 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver =>.NVIDIA Corporation
O42 - Logiciel: NVIDIA ShadowPlay 2.4.5.57 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_ShadowPlay =>.NVIDIA Corporation
O42 - Logiciel: NVIDIA Stereoscopic 3D Driver - (.NVIDIA Corporation.) [HKLM][64Bits] -- NVIDIAStereo =>.NVIDIA Corporation®
O42 - Logiciel: NVIDIA Update 2.4.5.57 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update =>.NVIDIA Corporation
O42 - Logiciel: NVIDIA Update Core - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Update.Core =>.NVIDIA Corporation
O42 - Logiciel: NVIDIA Virtual Audio 1.2.28 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_VirtualAudio.Driver =>.NVIDIA Corporation
O42 - Logiciel: OCR Software by I.R.I.S. 14.0 - (.HP.) [HKLM][64Bits] -- HPOCR =>.Hewlett Packard®
O42 - Logiciel: Office 16 Click-to-Run Extensibility Component - (.Microsoft Corporation.) [HKLM][64Bits] -- {90160000-008C-0000-0000-0000000FF1CE} =>.Microsoft Corporation
O42 - Logiciel: Office 16 Click-to-Run Extensibility Component 64-bit Registration - (.Microsoft Corporation.) [HKLM][64Bits] -- {90160000-00DD-0000-1000-0000000FF1CE} =>.Microsoft Corporation
O42 - Logiciel: Office 16 Click-to-Run Licensing Component - (.Microsoft Corporation.) [HKLM][64Bits] -- {90160000-008F-0000-1000-0000000FF1CE} =>.Microsoft Corporation
O42 - Logiciel: Office 16 Click-to-Run Localization Component - (.Microsoft Corporation.) [HKLM][64Bits] -- {90160000-008C-040C-0000-0000000FF1CE} =>.Microsoft Corporation
O42 - Logiciel: Panneau de configuration NVIDIA 375.63 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel =>.NVIDIA Corporation
O42 - Logiciel: REALTEK Bluetooth Driver - (.REALTEK Semiconductor Corp..) [HKLM][64Bits] -- {9D3D8C60-A5EF-4123-B2B9-172095903AB} =>.Realtek Semiconductor Corp®
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC} =>.Realtek Semiconductor Corp®
O42 - Logiciel: REALTEK Wireless LAN Driver - (.REALTEK Semiconductor Corp..) [HKLM][64Bits] -- {9DAABC60-A5EF-41FF-B2B9-17329590CD5} =>.Realtek Semiconductor Corp®
O42 - Logiciel: Samsung Kies - (.Samsung Electronics Co., Ltd..) [HKLM][64Bits] -- {758C8301-2696-4855-AF45-534B1200980A} =>.Samsung Electronics Co., Ltd.
O42 - Logiciel: Samsung Kies - (.Samsung Electronics Co., Ltd..) [HKLM][64Bits] -- InstallShield_{758C8301-2696-4855-AF45-534B1200980A} =>.Samsung Electronics Co., Ltd.
O42 - Logiciel: Samsung USB Driver for Mobile Phones - (.Samsung Electronics Co., Ltd..) [HKLM][64Bits] -- {D0795B21-0CDA-4a92-AB9E-6E92D8111E44} =>.Samsung Electronics CO., LTD.®
O42 - Logiciel: Scan - (.Hewlett-Packard.) [HKLM][64Bits] -- {06A1D88C-E102-4527-AF70-29FFD7AF215A} =>.Hewlett-Packard
O42 - Logiciel: SHIELD Streaming - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.NvStreamSrv =>.NVIDIA Corporation
O42 - Logiciel: SHIELD Wireless Controller Driver - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_ShieldWirelessController =>.NVIDIA Corporation
O42 - Logiciel: Shop for HP Supplies - (.HP.) [HKLM][64Bits] -- Shop for HP Supplies =>.Hewlett Packard®
O42 - Logiciel: SketchUp 2016 - (.Trimble Navigation Limited.) [HKLM][64Bits] -- {4A8F2944-0D02-440C-809C-D2B17C3E6623} =>.Trimble Navigation Limited
O42 - Logiciel: SketchUp 2017 - (.Trimble Navigation Limited.) [HKLM][64Bits] -- {48C6B671-0B9A-4534-BBBB-370D2E760B07} =>.Trimble Navigation Limited
O42 - Logiciel: Skype™ 7.31 - (.Skype Technologies S.A..) [HKLM][64Bits] -- {FC965A47-4839-40CA-B618-18F486F042C6} =>.Skype Technologies S.A.
O42 - Logiciel: Smart Switch - (.Samsung Electronics Co., Ltd..) [HKLM][64Bits] -- {74FA5314-85C8-4E2A-907D-D9ECCCB770A7} =>.Samsung Electronics Co., Ltd.
O42 - Logiciel: Smart Switch - (.Samsung Electronics Co., Ltd..) [HKLM][64Bits] -- InstallShield_{74FA5314-85C8-4E2A-907D-D9ECCCB770A7} =>.Samsung Electronics Co., Ltd.
O42 - Logiciel: SolutionCenter - (.Hewlett-Packard.) [HKLM][64Bits] -- {BC5DD87B-0143-4D14-AAE6-97109614DC6B} =>.Hewlett-Packard
O42 - Logiciel: Spotify - (.Spotify AB.) [HKCU][64Bits] -- Spotify =>.Spotify AB®
O42 - Logiciel: Status - (.Hewlett-Packard.) [HKLM][64Bits] -- {5B025634-7D5B-4B8D-BE2A-7943C1CF2D5D} =>.Hewlett-Packard
O42 - Logiciel: Streaming Audio Recorder V4.1.6 - (.APOWERSOFT LIMITED.) [HKLM][64Bits] -- {B6D9D06B-4B4D-4B41-B963-C056B627F704}_is1 =>.APOWERSOFT LIMITED
O42 - Logiciel: Toolbox - (.Hewlett-Packard.) [HKLM][64Bits] -- {292F0F52-B62D-4E71-921B-89A682402201} =>.Hewlett-Packard
O42 - Logiciel: TrayApp - (.Hewlett-Packard.) [HKLM][64Bits] -- {CD31E63D-47FD-491C-8117-CF201D0AFAB5} =>.Hewlett-Packard
O42 - Logiciel: TunnelBear - (.TunnelBear.) [HKLM][64Bits] -- {cccb8171-b60b-4da8-8a0a-00e21ff41860} =>.TunnelBear, Inc.®
O42 - Logiciel: TunnelBear - (.TunnelBear.) [HKLM][64Bits] -- {DDEA404F-1524-4CA1-B740-A3A0AD6DAFB0} =>.TunnelBear
O42 - Logiciel: UnloadSupport - (.Hewlett-Packard.) [HKLM][64Bits] -- {4E7C28C7-D5DA-4E9F-A1CA-60490B54AE35} =>.Hewlett-Packard
O42 - Logiciel: Update Installer for WildTangent Games App - (.WildTangent.) [HKLM][64Bits] -- {2FA94A64-C84E-49d1-97DD-7BF06C7BBFB2}.WildTangent Games App =>.WildTangent Inc®
O42 - Logiciel: UpdateAssistant - (.Microsoft Corporation.) [HKLM][64Bits] -- {4E67FF7F-C24E-4279-9AB2-C26D57B53742} =>.Microsoft Corporation
O42 - Logiciel: WebReg - (.Hewlett-Packard.) [HKLM][64Bits] -- {8EE94FD8-5F52-4463-A340-185D16328158} =>.Hewlett-Packard
O42 - Logiciel: WebStorage - (.ASUS Cloud Corporation.) [HKLM][64Bits] -- WebStorage =>.ASUS Cloud Corporation
O42 - Logiciel: WildTangent Games App - (.WildTangent.) [HKLM][64Bits] -- {70B446D1-E03B-4ab0-9B3C-0832142C9AA8}.WildTangent Games App-asus =>.WildTangent Inc®
O42 - Logiciel: Windows 10 Update and Privacy Settings - (.Microsoft Corporation.) [HKLM][64Bits] -- {293F2009-0145-450B-B4AA-063D43FB368C} =>.Microsoft Corporation
O42 - Logiciel: Wondershare Helper Compact 2.5.2 - (.Wondershare.) [HKLM][64Bits] -- {5363CE84-5F09-48A1-8B6C-6BB590FFEDF2}_is1 =>.Wondershare
O42 - Logiciel: Wondershare Streaming Audio Recorder(Build 2.3.5) - (.Wondershare Software.) [HKLM][64Bits] -- Wondershare Streaming Audio Recorder_is1 =>.Wondershare Software

---\\ HKCU & HKLM Software Keys (102) - 8s
HKLM\SOFTWARE\Wow6432Node\6C09CE190BC45ADF2133F04CF4554564 =>Adware.CrossRider
HKLM\SOFTWARE\Wow6432Node\7-Zip =>.Igor Pavlov
HKLM\SOFTWARE\Wow6432Node\AGEIA Technologies =>.AGEIA Technologies
HKLM\SOFTWARE\Wow6432Node\ASIO =>.Steinberg Media Technologies
HKLM\SOFTWARE\Wow6432Node\ASUS =>.ASUS
HKLM\SOFTWARE\Wow6432Node\Autodesk =>.Autodesk
HKLM\SOFTWARE\Wow6432Node\Canneverbe Limited =>.Canneverbe Limited
HKLM\SOFTWARE\Wow6432Node\CyberLink =>.CyberLink Corporation
HKLM\SOFTWARE\Wow6432Node\DellShared =>.Dell Inc.
HKLM\SOFTWARE\Wow6432Node\ECAREME =>.Ecareme
HKLM\SOFTWARE\Wow6432Node\Evernote =>.Evernote
HKLM\SOFTWARE\Wow6432Node\Fetychukaly
HKLM\SOFTWARE\Wow6432Node\Gnuchshizoied
HKLM\SOFTWARE\Wow6432Node\Google =>.Google
HKLM\SOFTWARE\Wow6432Node\Hewlett-Packard =>.Hewlett-Packard
HKLM\SOFTWARE\Wow6432Node\HP =>.HP
HKLM\SOFTWARE\Wow6432Node\IM Providers =>.IM Providers
HKLM\SOFTWARE\Wow6432Node\Intel =>.Intel
HKLM\SOFTWARE\Wow6432Node\JavaSoft =>.JavaSoft
HKLM\SOFTWARE\Wow6432Node\JreMetrics =>.JreMetrics
HKLM\SOFTWARE\Wow6432Node\Khronos =>.Khronos
HKLM\SOFTWARE\Wow6432Node\LogMeInRescueCallingCard =>.LogMeIn Entreprise
HKLM\SOFTWARE\Wow6432Node\LogMeInRescueCallingCards =>.LogMeIn Entreprise
HKLM\SOFTWARE\Wow6432Node\Macromedia =>.Macromedia
HKLM\SOFTWARE\Wow6432Node\MAGIX =>.Magix
HKLM\SOFTWARE\Wow6432Node\McAfee =>.McAfee Inc.
HKLM\SOFTWARE\Wow6432Node\McAfee.com =>.McAfee Inc.
HKLM\SOFTWARE\Wow6432Node\Mozilla =>.Mozilla
HKLM\SOFTWARE\Wow6432Node\mozilla.org =>.mozilla.org
HKLM\SOFTWARE\Wow6432Node\MozillaPlugins =>.MozillaPlugins
HKLM\SOFTWARE\Wow6432Node\Network Associates =>.Network Associates
HKLM\SOFTWARE\Wow6432Node\Nuance =>.Nuance
HKLM\SOFTWARE\Wow6432Node\NVIDIA Corporation =>.nVidia Corporation
HKLM\SOFTWARE\Wow6432Node\ODBC =>.DB Connectivity Solutions
HKLM\SOFTWARE\Wow6432Node\Realtek =>.Realtek Semiconductor Corp.
HKLM\SOFTWARE\Wow6432Node\Realtek Semiconductor Corp. =>.Realtek Semiconductor Corp.
HKLM\SOFTWARE\Wow6432Node\RtWLan =>.Realtek Semiconductor Corp.
HKLM\SOFTWARE\Wow6432Node\Samsung =>.Samsung Electronics
HKLM\SOFTWARE\Wow6432Node\SketchUp =>.@Last Software
HKLM\SOFTWARE\Wow6432Node\Skype =>.Skype
HKLM\SOFTWARE\Wow6432Node\SRS Labs =>.SRS Labs
HKLM\SOFTWARE\Wow6432Node\TunnelBear =>.TunnelBear
HKLM\SOFTWARE\Wow6432Node\UCBrowserPID =>.UCWeb Inc.
HKLM\SOFTWARE\Wow6432Node\Valve =>.Valve
HKLM\SOFTWARE\Wow6432Node\WafCX =>.WafCX
HKLM\SOFTWARE\Wow6432Node\WildTangent =>.WildTangent
HKLM\SOFTWARE\Wow6432Node\Wondershare =>.Wondershare
HKLM\SOFTWARE\Wow6432Node\WOW6432Node =>.Microsoft Corporation
HKLM\SOFTWARE\Wow6432Node\Yahoo =>.Yahoo! Inc.
HKLM\SOFTWARE\Wow6432Node\RegisteredApplications =>.Microsoft Corporation
HKCU\SOFTWARE\7-Zip =>.Igor Pavlov
HKCU\SOFTWARE\Adobe =>.Adobe
HKCU\SOFTWARE\Affinix =>.Affinix Software
HKCU\SOFTWARE\Apowersoft =>.Apowersoft
HKCU\SOFTWARE\AppDataLow =>.Microsoft Corporation
HKCU\SOFTWARE\ASUS =>.ASUS
HKCU\SOFTWARE\Autodesk =>.Autodesk
HKCU\SOFTWARE\BugSplat =>.Bugsplat Game
HKCU\SOFTWARE\Canneverbe Limited =>.Canneverbe Limited
HKCU\SOFTWARE\CASIO =>.CASIO
HKCU\SOFTWARE\Cheat Engine =>.Dark Byte
HKCU\SOFTWARE\Chromium =>.Chromium
HKCU\SOFTWARE\ciskt
HKCU\SOFTWARE\Default
HKCU\SOFTWARE\ECAREME =>.Ecareme
HKCU\SOFTWARE\ej-technologies =>.ej-technologies
HKCU\SOFTWARE\FM Scout Editor 2017
HKCU\SOFTWARE\Genie
HKCU\SOFTWARE\Google =>.Google
HKCU\SOFTWARE\Hewlett-Packard =>.Hewlett-Packard
HKCU\SOFTWARE\HP =>.HP
HKCU\SOFTWARE\IM =>Adware.InstallCore
HKCU\SOFTWARE\IM Providers =>.IM Providers
HKCU\SOFTWARE\JavaSoft =>.JavaSoft
HKCU\SOFTWARE\Local AppWizard-Generated Applications =>.ZWCAD
HKCU\SOFTWARE\Malwarebytes =>.Malwarebytes
HKCU\SOFTWARE\McAfee =>.McAfee Inc.
HKCU\SOFTWARE\Mine =>.Microsoft Corporation
HKCU\SOFTWARE\MiniTool Solution Ltd. =>.MiniTool Solution Ltd.
HKCU\SOFTWARE\Mozilla =>.Mozilla
HKCU\SOFTWARE\MozillaPlugins =>.MozillaPlugins
HKCU\SOFTWARE\Netscape =>.Netscape
HKCU\SOFTWARE\NVIDIA Corporation =>.nVidia Corporation
HKCU\SOFTWARE\ODBC =>.DB Connectivity Solutions
HKCU\SOFTWARE\ProtectedStorage =>.Microsoft Corporation
HKCU\SOFTWARE\Realtek =>.Realtek Semiconductor Corp.
HKCU\SOFTWARE\RegisteredApplications =>.Microsoft Corporation
HKCU\SOFTWARE\Samsung =>.Samsung Electronics
HKCU\SOFTWARE\SketchUp =>.@Last Software
HKCU\SOFTWARE\Skype =>.Skype
HKCU\SOFTWARE\skypeapp-125ed9664f32
HKCU\SOFTWARE\Spotify =>.Spotify
HKCU\SOFTWARE\SyncEngines =>.Microsoft Corporation
HKCU\SOFTWARE\Trolltech =>.Trolltech
HKCU\SOFTWARE\TunnelBear =>.TunnelBear
HKCU\SOFTWARE\UCBrowser =>.UCWeb Inc.
HKCU\SOFTWARE\Valve =>.Valve
HKCU\SOFTWARE\WinRAR SFX =>.RarLab
HKCU\SOFTWARE\Wondershare =>.Wondershare
HKCU\SOFTWARE\Wow6432Node =>.Microsoft Corporation
HKCU\SOFTWARE\ZHP =>.Nicolas Coolman
HKCU\SOFTWARE\AppDataLow\Software =>.Microsoft Corporation

---\\ Contenu des dossiers Programmes (308) - 7s
O43 - CFD: 05/09/2017 - [0] D -- C:\Program Files\3413WRKL0S
O43 - CFD: 30/09/2016 - [] D -- C:\Program Files\7-Zip =>.Igor Pavlov
O43 - CFD: 05/09/2017 - [0] D -- C:\Program Files\7V3TSAASZL
O43 - CFD: 02/03/2017 - [] D -- C:\Program Files\Autodesk =>.Autodesk
O43 - CFD: 24/05/2017 - [] D -- C:\Program Files\Common Files =>.Microsoft Corporation
O43 - CFD: 20/08/2015 - [] D -- C:\Program Files\CyberLink =>.CyberLink Corporation
O43 - CFD: 22/01/2017 - [0] SHD -- C:\Program Files\Fichiers communs =>.Microsoft Corporation
O43 - CFD: 01/08/2017 - [] AD -- C:\Program Files\FMSE17
O43 - CFD: 05/09/2017 - [0] D -- C:\Program Files\G8UMLSUDQE
O43 - CFD: 24/05/2017 - [] AD -- C:\Program Files\Intel =>.Intel Corporation
O43 - CFD: 28/06/2017 - [] D -- C:\Program Files\Internet Explorer =>.Microsoft Corporation
O43 - CFD: 05/09/2017 - [] D -- C:\Program Files\Malwarebytes =>.Malwarebytes
O43 - CFD: 09/11/2016 - [] AD -- C:\Program Files\mcafee =>.McAfee
O43 - CFD: 20/08/2015 - [] D -- C:\Program Files\mcafee.com =>.McAfee Inc.
O43 - CFD: 14/05/2016 - [] D -- C:\Program Files\Microsoft Office 15 =>.Microsoft Corporation
O43 - CFD: 01/06/2017 - [] AD -- C:\Program Files\MiniTool Partition Wizard 10 =>.MiniTool Solution Ltd
O43 - CFD: 24/05/2017 - [] D -- C:\Program Files\MSBuild =>.Microsoft Corporation
O43 - CFD: 05/09/2017 - [0] D -- C:\Program Files\NTMKQZFHHZ
O43 - CFD: 24/05/2017 - [] D -- C:\Program Files\NVIDIA Corporation =>.nVidia Corporation
O43 - CFD: 18/03/2017 - [] D -- C:\Program Files\ProtectSync Planet 3 v1.2 demo
O43 - CFD: 24/05/2017 - [] D -- C:\Program Files\Realtek =>.Realtek
O43 - CFD: 24/05/2017 - [] D -- C:\Program Files\Reference Assemblies =>.Microsoft Corporation
O43 - CFD: 15/05/2017 - [] D -- C:\Program Files\SAMSUNG =>.Samsung Electronics
O43 - CFD: 26/11/2016 - [] D -- C:\Program Files\SketchUp =>.@Last Software
O43 - CFD: 21/11/2016 - [0] HD -- C:\Program Files\Uninstall Information =>.Microsoft Corporation
O43 - CFD: 12/05/2017 - [] AD -- C:\Program Files\UNP =>.Microsoft Corporation
O43 - CFD: 05/09/2017 - [0] D -- C:\Program Files\UO3GM9UTR1
O43 - CFD: 12/07/2017 - [] RD -- C:\Program Files\Windows Defender =>.Microsoft Corporation
O43 - CFD: 20/03/2017 - [] D -- C:\Program Files\Windows Mail =>.Microsoft Corporation
O43 - CFD: 24/05/2017 - [] D -- C:\Program Files\Windows Media Player =>.Microsoft Corporation
O43 - CFD: 18/03/2017 - [] D -- C:\Program Files\Windows Multimedia Platform =>.Microsoft Corporation
O43 - CFD: 24/05/2017 - [] D -- C:\Program Files\Windows NT =>.Microsoft Corporation
O43 - CFD: 21/08/2017 - [] D -- C:\Program Files\Windows Photo Viewer =>.Microsoft Corporation
O43 - CFD: 18/03/2017 - [] D -- C:\Program Files\Windows Portable Devices =>.Microsoft Corporation
O43 - CFD: 18/03/2017 - [] D -- C:\Program Files\Windows Security =>.Microsoft Corporation
O43 - CFD: 18/03/2017 - [] SHD -- C:\Program Files\Windows Sidebar =>.Microsoft Corporation
O43 - CFD: 07/09/2017 - [] HD -- C:\Program Files\WindowsApps =>.Microsoft Corporation
O43 - CFD: 18/03/2017 - [] D -- C:\Program Files\WindowsPowerShell =>.Microsoft Corporation
O43 - CFD: 30/09/2016 - [] AD -- C:\Program Files (x86)\7-Zip =>.Igor Pavlov
O43 - CFD: 06/10/2015 - [] AD -- C:\Program Files (x86)\AmUStor =>.Alocr Micro
O43 - CFD: 15/03/2017 - [] D -- C:\Program Files (x86)\Apowersoft =>.Apowersoft
O43 - CFD: 06/10/2015 - [] D -- C:\Program Files (x86)\ASUS =>.ASUS
O43 - CFD: 01/01/2017 - [] AD -- C:\Program Files (x86)\Audacity =>.Audacity
O43 - CFD: 02/03/2017 - [] D -- C:\Program Files (x86)\Autodesk =>.Autodesk
O43 - CFD: 17/06/2017 - [] D -- C:\Program Files (x86)\CASIO =>.CASIO
O43 - CFD: 01/08/2017 - [] AD -- C:\Program Files (x86)\Cheat Engine 6.7 =>.Dark Byte
O43 - CFD: 01/10/2016 - [] D -- C:\Program Files (x86)\Chopule =>.Glarysoft LTD®
O43 - CFD: 06/10/2015 - [] D -- C:\Program Files (x86)\Cisco =>.Cisco Systems, Inc.
O43 - CFD: 03/09/2017 - [] D -- C:\Program Files (x86)\Common Files =>.Microsoft Corporation
O43 - CFD: 20/08/2015 - [] D -- C:\Program Files (x86)\CyberLink =>.CyberLink Corporation
O43 - CFD: 20/08/2015 - [] D -- C:\Program Files (x86)\Evernote =>.EverNote Corporation
O43 - CFD: 05/03/2017 - [] AD -- C:\Program Files (x86)\FreeMind =>.FreeMind
O43 - CFD: 24/09/2016 - [] D -- C:\Program Files (x86)\Google =>.Google Inc®
O43 - CFD: 29/09/2016 - [] D -- C:\Program Files (x86)\Hewlett-Packard =>.Hewlett-Packard
O43 - CFD: 30/09/2016 - [] AD -- C:\Program Files (x86)\HP =>.Hewlett-Packard
O43 - CFD: 06/10/2015 - [] D -- C:\Program Files (x86)\ICEpower =>.ICEpower
O43 - CFD: 01/06/2017 - [] HD -- C:\Program Files (x86)\InstallShield Installation Information =>.InstallShield
O43 - CFD: 06/10/2015 - [] D -- C:\Program Files (x86)\Intel =>.Intel Corporation
O43 - CFD: 28/06/2017 - [] D -- C:\Program Files (x86)\Internet Explorer =>.Microsoft Corporation
O43 - CFD: 20/10/2016 - [] D -- C:\Program Files (x86)\Java =>.Oracle
O43 - CFD: 28/06/2017 - [] D -- C:\Program Files (x86)\McAfee =>.McAfee
O43 - CFD: 20/08/2015 - [] D -- C:\Program Files (x86)\mcafee.com =>.McAfee Inc.
O43 - CFD: 04/09/2017 - [] AD -- C:\Program Files (x86)\Microsoft Office =>.Microsoft Corporation
O43 - CFD: 24/05/2017 - [] D -- C:\Program Files (x86)\Microsoft.NET =>.Microsoft Corporation
O43 - CFD: 05/09/2017 - [] AD -- C:\Program Files (x86)\Mozilla Firefox =>.Mozilla
O43 - CFD: 05/09/2017 - [] D -- C:\Program Files (x86)\Mozilla Maintenance Service =>.Mozilla
O43 - CFD: 24/05/2017 - [] D -- C:\Program Files (x86)\MSBuild =>.Microsoft Corporation
O43 - CFD: 06/10/2015 - [] AD -- C:\Program Files (x86)\MSXML 4.0 =>.Microsoft Corporation
O43 - CFD: 24/05/2017 - [] D -- C:\Program Files (x86)\NVIDIA Corporation =>.nVidia Corporation
O43 - CFD: 06/10/2015 - [] AD -- C:\Program Files (x86)\Realtek =>.Realtek
O43 - CFD: 06/10/2015 - [] AD -- C:\Program Files (x86)\REALTEK PCIE Wireless LAN Driver =>.Realtek Semiconductor Corp.
O43 - CFD: 24/05/2017 - [] D -- C:\Program Files (x86)\Reference Assemblies =>.Microsoft Corporation
O43 - CFD: 01/06/2017 - [] D -- C:\Program Files (x86)\Samsung =>.Samsung Electronics
O43 - CFD: 31/01/2017 - [] RD -- C:\Program Files (x86)\Skype =>.Skype
O43 - CFD: 07/09/2017 - [] D -- C:\Program Files (x86)\steam =>.Steam Games
O43 - CFD: 06/10/2015 - [0] HD -- C:\Program Files (x86)\Temp =>.Microsoft Corporation
O43 - CFD: 08/09/2017 - [] AD -- C:\Program Files (x86)\TunnelBear =>.TunnelBear, Inc.®
O43 - CFD: 05/09/2017 - [] D -- C:\Program Files (x86)\UCBrowser =>.TAOBAO (CHINA) SOFTWARE CO.,LTD.®
O43 - CFD: 24/05/2017 - [0] HD -- C:\Program Files (x86)\Uninstall Information =>.Microsoft Corporation
O43 - CFD: 06/10/2015 - [] D -- C:\Program Files (x86)\WildTangent Games =>.WildTangent Games
O43 - CFD: 12/07/2017 - [] D -- C:\Program Files (x86)\Windows Defender =>.Microsoft Corporation
O43 - CFD: 20/03/2017 - [] D -- C:\Program Files (x86)\Windows Mail =>.Microsoft Corporation
O43 - CFD: 24/05/2017 - [] D -- C:\Program Files (x86)\Windows Media Player =>.Microsoft Corporation
O43 - CFD: 18/03/2017 - [] D -- C:\Program Files (x86)\Windows Multimedia Platform =>.Microsoft Corporation
O43 - CFD: 18/03/2017 - [] D -- C:\Program Files (x86)\Windows NT =>.Microsoft Corporation
O43 - CFD: 21/08/2017 - [] D -- C:\Program Files (x86)\Windows Photo Viewer =>.Microsoft Corporation
O43 - CFD: 18/03/2017 - [] D -- C:\Program Files (x86)\Windows Portable Devices =>.Microsoft Corporation
O43 - CFD: 18/03/2017 - [] SHD -- C:\Program Files (x86)\Windows Sidebar =>.Microsoft Corporation
O43 - CFD: 18/03/2017 - [] D -- C:\Program Files (x86)\WindowsPowerShell =>.Microsoft Corporation
O43 - CFD: 01/01/2017 - [] D -- C:\Program Files (x86)\Wondershare =>.Wondershare
O43 - CFD: 04/09/2017 - [] D -- C:\Program Files (x86)\xfepxsbbdrd
O43 - CFD: 11/12/2016 - [0] D -- C:\Program Files (x86)\Yahoo! =>.Yahoo!
O43 - CFD: 24/05/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip =>.Igor Pavlov
O43 - CFD: 18/03/2017 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility =>.Microsoft Corporation
O43 - CFD: 12/07/2017 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories =>.Microsoft Corporation
O43 - CFD: 12/07/2017 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools =>.Administrative Tools
O43 - CFD: 24/05/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apowersoft =>.Apowersoft
O43 - CFD: 24/05/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS =>.ASUS
O43 - CFD: 24/05/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS Music Maker =>.ASUSTeK
O43 - CFD: 24/05/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AutoCAD 2017 - Français (French)
O43 - CFD: 24/05/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk =>.Autodesk
O43 - CFD: 24/05/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk ReCap 360 =>.Autodesk
O43 - CFD: 17/06/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CASIO =>.CASIO
O43 - CFD: 24/05/2017 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink PhotoDirector 3 =>.CyberLink Corporation
O43 - CFD: 24/05/2017 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink PowerDirector 10 =>.CyberLink Corporation
O43 - CFD: 24/05/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Evernote =>.EverNote Corporation
O43 - CFD: 24/07/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FM Genie Scout 17
O43 - CFD: 01/08/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FMSE17
O43 - CFD: 13/07/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Football Manager 2017
O43 - CFD: 24/05/2017 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games =>.Microsoft Corporation
O43 - CFD: 24/05/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP =>.Hewlett-Packard
O43 - CFD: 24/05/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP Help and Support =>.Hewlett-Packard
O43 - CFD: 24/05/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ICEpower =>.ICEpower
O43 - CFD: 24/05/2017 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel =>.Intel Corporation
O43 - CFD: 24/05/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java =>.Oracle
O43 - CFD: 18/03/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance =>.Microsoft Corporation
O43 - CFD: 05/09/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes =>.Malwarebytes
O43 - CFD: 08/09/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee =>.McAfee
O43 - CFD: 01/06/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MiniTool Partition Wizard 10 =>.MiniTool Solution Ltd
O43 - CFD: 24/05/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation =>.nVidia Corporation
O43 - CFD: 24/05/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outils Microsoft Office 2016 =>.Microsoft Corporation
O43 - CFD: 01/06/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung =>.Samsung Electronics
O43 - CFD: 24/05/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SketchUp 2016 =>.@Last Software
O43 - CFD: 24/05/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SketchUp 2017 =>.@Last Software
O43 - CFD: 24/05/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype =>.Skype
O43 - CFD: 28/06/2017 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup =>.Microsoft Corporation
O43 - CFD: 18/03/2017 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools =>.Microsoft Corporation
O43 - CFD: 27/06/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TunnelBear =>.TunnelBear
O43 - CFD: 24/05/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wondershare =>.Wondershare
O43 - CFD: 06/10/2015 - [] D -- C:\ProgramData\AmUStor =>.Alocr Micro
O43 - CFD: 15/03/2017 - [] D -- C:\ProgramData\Apowersoft =>.Apowersoft
O43 - CFD: 24/05/2017 - [0] SHD -- C:\ProgramData\Application Data =>.Microsoft Corporation
O43 - CFD: 30/09/2016 - [] D -- C:\ProgramData\APRP =>.APRP
O43 - CFD: 06/10/2015 - [] D -- C:\ProgramData\ASUS =>.ASUS
O43 - CFD: 20/08/2015 - [] D -- C:\ProgramData\ASUS WebStorage =>.ASUSTeK
O43 - CFD: 22/03/2017 - [] AD -- C:\ProgramData\Autodesk =>.Autodesk
O43 - CFD: 22/03/2017 - [] D -- C:\ProgramData\boost_interprocess =>.boost.org
O43 - CFD: 22/01/2017 - [0] SHD -- C:\ProgramData\Bureau =>.Microsoft Corporation
O43 - CFD: 04/09/2017 - [] D -- C:\ProgramData\Cache =>.Legitimate
O43 - CFD: 30/09/2016 - [] D -- C:\ProgramData\Canneverbe Limited =>.Canneverbe Limited
O43 - CFD: 20/08/2015 - [] D -- C:\ProgramData\CLSK =>.CLSK
O43 - CFD: 16/07/2016 - [0] D -- C:\ProgramData\Comms =>.Microsoft Corporation
O43 - CFD: 20/08/2015 - [] D -- C:\ProgramData\CyberLink =>.CyberLink Corporation
O43 - CFD: 04/09/2017 - [] D -- C:\ProgramData\DataCache
O43 - CFD: 24/05/2017 - [0] SHD -- C:\ProgramData\Documents =>.Microsoft Corporation
O43 - CFD: 03/03/2017 - [] D -- C:\ProgramData\FLEXnet =>.Flexera Software
O43 - CFD: 13/07/2017 - [] D -- C:\ProgramData\Football Manager 2017
O43 - CFD: 24/05/2017 - [] D -- C:\ProgramData\Hewlett-Packard =>.Hewlett-Packard
O43 - CFD: 07/09/2017 - [] AD -- C:\ProgramData\HP =>.Hewlett-Packard
O43 - CFD: 30/09/2016 - [] AD -- C:\ProgramData\HP Product Assistant =>.Hewlett-Packard
O43 - CFD: 20/08/2015 - [] D -- C:\ProgramData\install_clap =>.Microsoft Corporation
O43 - CFD: 06/10/2015 - [] D -- C:\ProgramData\Intel =>.Intel Corporation
O43 - CFD: 14/05/2016 - [] D -- C:\ProgramData\Intel Security =>.Intel Corporation
O43 - CFD: 06/10/2015 - [] D -- C:\ProgramData\MAGIX =>.Magix
O43 - CFD: 05/09/2017 - [] D -- C:\ProgramData\Malwarebytes =>.Malwarebytes
O43 - CFD: 07/07/2017 - [] D -- C:\ProgramData\McAfee =>.McAfee
O43 - CFD: 22/01/2017 - [0] SHD -- C:\ProgramData\Menu Démarrer =>.Microsoft Corporation
O43 - CFD: 04/09/2017 - [] SD -- C:\ProgramData\Microsoft =>.Microsoft Corporation
O43 - CFD: 31/08/2017 - [] D -- C:\ProgramData\Microsoft Games =>.Microsoft Corporation
O43 - CFD: 25/05/2017 - [] D -- C:\ProgramData\Microsoft OneDrive =>.Microsoft Corporation
O43 - CFD: 22/01/2017 - [0] SHD -- C:\ProgramData\Modèles =>.Microsoft Corporation
O43 - CFD: 08/09/2017 - [] D -- C:\ProgramData\NVIDIA =>.nVidia Corporation
O43 - CFD: 24/05/2017 - [] D -- C:\ProgramData\NVIDIA Corporation =>.nVidia Corporation
O43 - CFD: 20/10/2016 - [] D -- C:\ProgramData\Oracle =>.Oracle
O43 - CFD: 01/08/2017 - [] D -- C:\ProgramData\Package Cache =>.Microsoft Corporation
O43 - CFD: 06/10/2015 - [] D -- C:\ProgramData\Realtek =>.Realtek
O43 - CFD: 03/09/2017 - [] AD -- C:\ProgramData\regid.1991-06.com.microsoft =>.Microsoft Corporation
O43 - CFD: 26/11/2016 - [] AD -- C:\ProgramData\Reprise =>.Unknown
O43 - CFD: 01/06/2017 - [] D -- C:\ProgramData\Samsung =>.Samsung Electronics
O43 - CFD: 26/11/2016 - [] D -- C:\ProgramData\SketchUp =>.@Last Software
O43 - CFD: 31/01/2017 - [] D -- C:\ProgramData\Skype =>.Skype
O43 - CFD: 18/03/2017 - [0] D -- C:\ProgramData\SoftwareDistribution =>.Microsoft Corporation
O43 - CFD: 20/08/2015 - [] D -- C:\ProgramData\Temp =>.Microsoft Corporation
O43 - CFD: 02/09/2017 - [] D -- C:\ProgramData\Undefined game
O43 - CFD: 24/05/2017 - [] D -- C:\ProgramData\USOPrivate =>.Microsoft Corporation
O43 - CFD: 24/05/2017 - [] D -- C:\ProgramData\USOShared =>.Microsoft Corporation
O43 - CFD: 30/09/2016 - [] D -- C:\ProgramData\WEBREG =>.Hewlett-Packard
O43 - CFD: 20/08/2015 - [] D -- C:\ProgramData\WebStorage =>.ASUSTeK
O43 - CFD: 06/10/2015 - [] D -- C:\ProgramData\WildTangent =>.WildTangent
O43 - CFD: 05/09/2017 - [] D -- C:\ProgramData\Windows
O43 - CFD: 20/03/2017 - [] D -- C:\ProgramData\WindowsHolographicDevices =>.Microsoft Corporation
O43 - CFD: 01/01/2017 - [] D -- C:\ProgramData\Wondershare =>.Wondershare
O43 - CFD: 02/03/2017 - [] AD -- C:\Program Files (x86)\Common Files\Autodesk Shared =>.Autodesk
O43 - CFD: 20/08/2015 - [] D -- C:\Program Files (x86)\Common Files\AWS =>.Amazon
O43 - CFD: 03/09/2017 - [] AD -- C:\Program Files (x86)\Common Files\DESIGNER =>.Designer
O43 - CFD: 30/09/2016 - [] D -- C:\Program Files (x86)\Common Files\Hewlett-Packard =>.Hewlett-Packard
O43 - CFD: 30/09/2016 - [] D -- C:\Program Files (x86)\Common Files\HP =>.Hewlett-Packard
O43 - CFD: 20/08/2015 - [] D -- C:\Program Files (x86)\Common Files\InstallShield =>.InstallShield
O43 - CFD: 06/10/2015 - [] D -- C:\Program Files (x86)\Common Files\Intel Corporation =>.Intel Corporation
O43 - CFD: 20/10/2016 - [] D -- C:\Program Files (x86)\Common Files\Java =>.Oracle
O43 - CFD: 06/10/2015 - [] AD -- C:\Program Files (x86)\Common Files\MAGIX Services =>.MAGIX_Software_GmbH
O43 - CFD: 20/08/2015 - [] D -- C:\Program Files (x86)\Common Files\McAfee =>.McAfee
O43 - CFD: 03/09/2017 - [] AD -- C:\Program Files (x86)\Common Files\Microsoft Shared =>.Microsoft Corporation
O43 - CFD: 20/08/2015 - [] D -- C:\Program Files (x86)\Common Files\Nikon =>.Nikon
O43 - CFD: 06/10/2015 - [] D -- C:\Program Files (x86)\Common Files\PostureAgent =>.Microsoft Corporation
O43 - CFD: 18/03/2017 - [] D -- C:\Program Files (x86)\Common Files\Services =>.Microsoft Corporation
O43 - CFD: 23/10/2016 - [] AD -- C:\Program Files (x86)\Common Files\Skype =>.Skype
O43 - CFD: 05/09/2017 - [] D -- C:\Program Files (x86)\Common Files\Steam =>.Steam Games
O43 - CFD: 20/03/2017 - [] D -- C:\Program Files (x86)\Common Files\System =>.Microsoft Corporation
O43 - CFD: 01/01/2017 - [] D -- C:\Program Files (x86)\Common Files\Wondershare =>.Wondershare
O43 - CFD: 10/01/2017 - [] D -- C:\Users\jclou\AppData\Roaming\.minecraft =>.Microsoft Corporation
O43 - CFD: 05/09/2017 - [0] D -- C:\Users\jclou\AppData\Roaming\11clvgttm1k
O43 - CFD: 05/09/2017 - [0] D -- C:\Users\jclou\AppData\Roaming\5w02ewcdjib
O43 - CFD: 14/05/2016 - [] D -- C:\Users\jclou\AppData\Roaming\Adobe =>.Adobe
O43 - CFD: 15/03/2017 - [] D -- C:\Users\jclou\AppData\Roaming\Apowersoft =>.Apowersoft
O43 - CFD: 01/01/2017 - [] D -- C:\Users\jclou\AppData\Roaming\Audacity =>.Audacity
O43 - CFD: 22/03/2017 - [] D -- C:\Users\jclou\AppData\Roaming\Autodesk =>.Autodesk
O43 - CFD: 30/09/2016 - [] D -- C:\Users\jclou\AppData\Roaming\Canneverbe Limited =>.Canneverbe Limited
O43 - CFD: 30/09/2016 - [] D -- C:\Users\jclou\AppData\Roaming\Ghasetion
O43 - CFD: 29/09/2016 - [] D -- C:\Users\jclou\AppData\Roaming\Hewlett-Packard =>.Hewlett-Packard
O43 - CFD: 05/09/2017 - [0] D -- C:\Users\jclou\AppData\Roaming\hoqkhl4g5x5
O43 - CFD: 30/09/2016 - [] D -- C:\Users\jclou\AppData\Roaming\HP =>.Hewlett-Packard
O43 - CFD: 29/09/2016 - [] D -- C:\Users\jclou\AppData\Roaming\hpqLog =>.Hewlett-Packard
O43 - CFD: 08/10/2016 - [] D -- C:\Users\jclou\AppData\Roaming\HpUpdate =>.Hewlett-Packard
O43 - CFD: 14/05/2016 - [] D -- C:\Users\jclou\AppData\Roaming\Intel Corporation =>.Intel Corporation
O43 - CFD: 20/10/2016 - [] D -- C:\Users\jclou\AppData\Roaming\java =>.Oracle
O43 - CFD: 14/05/2016 - [] D -- C:\Users\jclou\AppData\Roaming\Macromedia =>.Macromedia
O43 - CFD: 04/09/2017 - [] SD -- C:\Users\jclou\AppData\Roaming\Microsoft =>.Microsoft Corporation
O43 - CFD: 31/08/2017 - [] D -- C:\Users\jclou\AppData\Roaming\Microsoft Games =>.Microsoft Corporation
O43 - CFD: 27/06/2017 - [] D -- C:\Users\jclou\AppData\Roaming\Mozilla =>.Mozilla Corporation
O43 - CFD: 30/09/2016 - [] D -- C:\Users\jclou\AppData\Roaming\NVIDIA =>.nVidia Corporation
O43 - CFD: 30/09/2016 - [] D -- C:\Users\jclou\AppData\Roaming\Profiles =>.Microsoft Corporation
O43 - CFD: 05/09/2017 - [0] D -- C:\Users\jclou\AppData\Roaming\q0g0vwnfr2y
O43 - CFD: 05/09/2017 - [0] D -- C:\Users\jclou\AppData\Roaming\ritve3ktcqm
O43 - CFD: 01/06/2017 - [] D -- C:\Users\jclou\AppData\Roaming\Samsung =>.Samsung Electronics
O43 - CFD: 26/11/2016 - [] D -- C:\Users\jclou\AppData\Roaming\SketchUp =>.@Last Software
O43 - CFD: 08/09/2017 - [] D -- C:\Users\jclou\AppData\Roaming\Skype =>.Skype
O43 - CFD: 08/09/2017 - [] D -- C:\Users\jclou\AppData\Roaming\Spotify =>.Spotify
O43 - CFD: 20/10/2016 - [] D -- C:\Users\jclou\AppData\Roaming\Sun =>.Oracle
O43 - CFD: 30/09/2016 - [] D -- C:\Users\jclou\AppData\Roaming\Trimble Connect for SketchUp =>.Trimble Navigation Ltd
O43 - CFD: 08/09/2017 - [] D -- C:\Users\jclou\AppData\Roaming\TunnelBear =>.TunnelBear
O43 - CFD: 05/09/2017 - [0] D -- C:\Users\jclou\AppData\Roaming\uavbsc32as3
O43 - CFD: 14/05/2016 - [] D -- C:\Users\jclou\AppData\Roaming\WebStorage =>.ASUSTeK
O43 - CFD: 30/09/2016 - [] D -- C:\Users\jclou\AppData\Roaming\WinRAR =>.WinRAR
O43 - CFD: 01/01/2017 - [] D -- C:\Users\jclou\AppData\Roaming\Wondershare =>.Wondershare
O43 - CFD: 08/09/2017 - [] D -- C:\Users\jclou\AppData\Roaming\ZHP =>.Nicolas Coolman
O43 - CFD: 15/03/2017 - [] D -- C:\Users\jclou\AppData\Local\Apowersoft =>.Apowersoft
O43 - CFD: 24/05/2017 - [0] SHD -- C:\Users\jclou\AppData\Local\Application Data =>.Microsoft Corporation
O43 - CFD: 02/08/2017 - [] D -- C:\Users\jclou\AppData\Local\Apps =>.Microsoft Corporation
O43 - CFD: 14/05/2016 - [] D -- C:\Users\jclou\AppData\Local\ASUS =>.ASUS
O43 - CFD: 01/01/2017 - [] D -- C:\Users\jclou\AppData\Local\Audacity =>.Audacity
O43 - CFD: 01/04/2017 - [] D -- C:\Users\jclou\AppData\Local\Autodesk =>.Autodesk
O43 - CFD: 20/10/2016 - [] D -- C:\Users\jclou\AppData\Local\CEF =>.CEF
O43 - CFD: 15/12/2016 - [] D -- C:\Users\jclou\AppData\Local\Chromium =>.Chromium
O43 - CFD: 28/09/2016 - [] D -- C:\Users\jclou\AppData\Local\Comms =>.Microsoft Corporation
O43 - CFD: 25/05/2017 - [] D -- C:\Users\jclou\AppData\Local\ConnectedDevicesPlatform =>.Microsoft Corporation
O43 - CFD: 30/04/2017 - [] D -- C:\Users\jclou\AppData\Local\CrashDumps =>.Microsoft Corporation
O43 - CFD: 06/06/2017 - [0] D -- C:\Users\jclou\AppData\Local\DBG =>.DBG
O43 - CFD: 02/08/2017 - [0] D -- C:\Users\jclou\AppData\Local\Deployment =>.Microsoft Corporation
O43 - CFD: 17/06/2017 - [] D -- C:\Users\jclou\AppData\Local\Downloaded Installations =>.Microsoft Corporation
O43 - CFD: 30/09/2016 - [] D -- C:\Users\jclou\AppData\Local\Drjiinggukering
O43 - CFD: 05/09/2017 - [] D -- C:\Users\jclou\AppData\Local\ElevatedDiagnostics =>.Microsoft Corporation
O43 - CFD: 01/08/2017 - [] D -- C:\Users\jclou\AppData\Local\FM_Scout_Editor_2017
O43 - CFD: 03/11/2016 - [] D -- C:\Users\jclou\AppData\Local\Google =>.Google
O43 - CFD: 29/09/2016 - [] D -- C:\Users\jclou\AppData\Local\Hewlett-Packard =>.Hewlett-Packard
O43 - CFD: 24/05/2017 - [0] SHD -- C:\Users\jclou\AppData\Local\Historique =>.Microsoft Corporation
O43 - CFD: 30/09/2016 - [] D -- C:\Users\jclou\AppData\Local\HP =>.Hewlett-Packard
O43 - CFD: 08/10/2016 - [] D -- C:\Users\jclou\AppData\Local\HP_Development_Company,_L =>.Hewlett-Packard
O43 - CFD: 05/09/2017 - [] D -- C:\Users\jclou\AppData\Local\InetInfoTools
O43 - CFD: 27/06/2017 - [] D -- C:\Users\jclou\AppData\Local\IsolatedStorage =>.id Software
O43 - CFD: 06/01/2017 - [] D -- C:\Users\jclou\AppData\Local\Mega Limited =>.MEGA Limited
O43 - CFD: 07/01/2017 - [] D -- C:\Users\jclou\AppData\Local\MEGAsync =>.MegaSystems
O43 - CFD: 04/09/2017 - [] D -- C:\Users\jclou\AppData\Local\Microsoft =>.Microsoft Corporation
O43 - CFD: 14/05/2016 - [] D -- C:\Users\jclou\AppData\Local\MicrosoftEdge =>.Microsoft Corporation
O43 - CFD: 27/06/2017 - [] D -- C:\Users\jclou\AppData\Local\Mozilla =>.Mozilla Corporation
O43 - CFD: 26/09/2016 - [0] D -- C:\Users\jclou\AppData\Local\NetworkTiles =>.NetworkTiles
O43 - CFD: 14/05/2016 - [] D -- C:\Users\jclou\AppData\Local\NVIDIA =>.nVidia Corporation
O43 - CFD: 14/05/2016 - [] D -- C:\Users\jclou\AppData\Local\NVIDIA Corporation =>.nVidia Corporation
O43 - CFD: 21/08/2017 - [] D -- C:\Users\jclou\AppData\Local\Packages =>.Microsoft Corporation
O43 - CFD: 30/09/2016 - [] D -- C:\Users\jclou\AppData\Local\Programs =>.Microsoft Corporation
O43 - CFD: 14/05/2016 - [] D -- C:\Users\jclou\AppData\Local\Publishers =>.Microsoft Corporation
O43 - CFD: 05/09/2017 - [] D -- C:\Users\jclou\AppData\Local\Recovery =>.Recovery Labs
O43 - CFD: 01/06/2017 - [] D -- C:\Users\jclou\AppData\Local\Samsung =>.Samsung Electronics
O43 - CFD: 13/07/2017 - [] D -- C:\Users\jclou\AppData\Local\Sports Interactive =>.Sports Interactive
O43 - CFD: 08/09/2017 - [] D -- C:\Users\jclou\AppData\Local\Spotify =>.Spotify
O43 - CFD: 15/12/2016 - [] D -- C:\Users\jclou\AppData\Local\Steam =>.Steam Games
O43 - CFD: 08/09/2017 - [] AD -- C:\Users\jclou\AppData\Local\Temp =>.Microsoft Corporation
O43 - CFD: 24/05/2017 - [0] SHD -- C:\Users\jclou\AppData\Local\Temporary Internet Files =>.Microsoft Corporation
O43 - CFD: 14/05/2016 - [] D -- C:\Users\jclou\AppData\Local\TileDataLayer =>.Microsoft Corporation
O43 - CFD: 13/05/2017 - [] D -- C:\Users\jclou\AppData\Local\UNP =>.Microsoft Corporation
O43 - CFD: 14/05/2016 - [0] D -- C:\Users\jclou\AppData\Local\VirtualStore =>.Microsoft Corporation
O43 - CFD: 01/01/2017 - [] D -- C:\Users\jclou\AppData\Local\Wondershare =>.Wondershare
O43 - CFD: 05/09/2017 - [] D -- C:\Users\jclou\AppData\Local\ZHP =>.Nicolas Coolman
O43 - CFD: 30/09/2016 - [0] D -- C:\Users\jclou\AppData\Local\Programs\Common =>.Microsoft Corporation
O43 - CFD: 18/03/2017 - [] RD -- C:\Users\jclou\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility =>.Microsoft Corporation
O43 - CFD: 25/05/2017 - [] RD -- C:\Users\jclou\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories =>.Microsoft Corporation
O43 - CFD: 27/08/2017 - [] RD -- C:\Users\jclou\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools =>.Administrative Tools
O43 - CFD: 02/08/2017 - [] D -- C:\Users\jclou\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FM Wizard Editor 17.3.1
O43 - CFD: 18/03/2017 - [] D -- C:\Users\jclou\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance =>.Microsoft Corporation
O43 - CFD: 27/08/2017 - [] RD -- C:\Users\jclou\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup =>.Microsoft Corporation
O43 - CFD: 18/03/2017 - [] RD -- C:\Users\jclou\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools =>.Microsoft Corporation
O43 - CFD: 18/03/2017 - [] RD -- C:\Users\jclou\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell =>.Microsoft Corporation
O43 - CFD: 24/05/2017 - [0] SHD -- C:\Users\Default\AppData\Local\Application Data =>.Microsoft Corporation
O43 - CFD: 22/01/2017 - [0] SHD -- C:\Users\Default\AppData\Local\Historique =>.Microsoft Corporation
O43 - CFD: 05/09/2017 - [] D -- C:\Users\Default\AppData\Local\Microsoft =>.Microsoft Corporation
O43 - CFD: 18/03/2017 - [0] D -- C:\Users\Default\AppData\Local\Temp =>.Microsoft Corporation
O43 - CFD: 24/05/2017 - [0] SHD -- C:\Users\Default\AppData\Local\Temporary Internet Files =>.Microsoft Corporation
O43 - CFD: 24/05/2017 - [0] SHD -- C:\Users\Default User\AppData\Local\Application Data =>.Microsoft Corporation
O43 - CFD: 22/01/2017 - [0] SHD -- C:\Users\Default User\AppData\Local\Historique =>.Microsoft Corporation
O43 - CFD: 05/09/2017 - [] D -- C:\Users\Default User\AppData\Local\Microsoft =>.Microsoft Corporation
O43 - CFD: 18/03/2017 - [0] D -- C:\Users\Default User\AppData\Local\Temp =>.Microsoft Corporation
O43 - CFD: 24/05/2017 - [0] SHD -- C:\Users\Default User\AppData\Local\Temporary Internet Files =>.Microsoft Corporation
O43 - CFD: 05/09/2017 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\DBG =>.DBG
O43 - CFD: 25/05/2017 - [] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\Microsoft =>.Microsoft Corporation
O43 - CFD: 24/05/2017 - [] -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\NVIDIA =>.nVidia Corporation
O43 - CFD: 09/06/2017 - [] -- C:\WINDOWS\System32\Config\systemprofile\AppData\Roaming\Hewlett-Packard =>.Hewlett-Packard
O43 - CFD: 27/06/2017 - [] -- C:\WINDOWS\System32\Config\systemprofile\AppData\Roaming\TunnelBear =>.TunnelBear
O43 - CFD: 24/05/2017 - [] -- C:\WINDOWS\System32\Config\systemprofile\AppData\Roaming\WildTangent =>.WildTangent

---\\ ShellExecuteHook (1) - 0s
O46 - SEH:ShellExecuteHooks - (no name) - [HKLM] [64Bits] - {5F51FFFE-7463-4220-B711-E5B9ACB8EDFE} . (...) -- (.not file.)

---\\ ShellIconOverlayIdentifiers (SIOI) (6) - 1s
O106 - SIOI: ErrorOverlayHandler Class [ OneDrive1] - {BBACC218-34EA-4666-9D7A-C78F2274A524}. (.Microsoft Corporation - Microsoft OneDrive Shell Extension.) -- C:\Users\jclou\AppData\Local\Microsoft\OneDrive\17.3.6966.0824\FileSyncShell.dll =>.Microsoft Corporation®
O106 - SIOI: SharedOverlayHandler Class [ OneDrive2] - {5AB7172C-9C11-405C-8DD5-AF20F3606282}. (.Microsoft Corporation - Microsoft OneDrive Shell Extension.) -- C:\Users\jclou\AppData\Local\Microsoft\OneDrive\17.3.6966.0824\FileSyncShell.dll =>.Microsoft Corporation®
O106 - SIOI: SharedSyncingOverlayHandler Class [ OneDrive3] - {A78ED123-AB77-406B-9962-2A5D9D2F7F30}. (.Microsoft Corporation - Microsoft OneDrive Shell Extension.) -- C:\Users\jclou\AppData\Local\Microsoft\OneDrive\17.3.6966.0824\FileSyncShell.dll =>.Microsoft Corporation®
O106 - SIOI: UpToDateOverlayHandler Class [ OneDrive4] - {F241C880-6982-4CE5-8CF7-7085BA96DA5A}. (.Microsoft Corporation - Microsoft OneDrive Shell Extension.) -- C:\Users\jclou\AppData\Local\Microsoft\OneDrive\17.3.6966.0824\FileSyncShell.dll =>.Microsoft Corporation®
O106 - SIOI: SyncingOverlayHandler Class [ OneDrive5] - {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}. (.Microsoft Corporation - Microsoft OneDrive Shell Extension.) -- C:\Users\jclou\AppData\Local\Microsoft\OneDrive\17.3.6966.0824\FileSyncShell.dll =>.Microsoft Corporation®
O106 - SIOI: ReadOnlyOverlayHandler Class [ OneDrive6] - {9AA2F32D-362A-42D9-9328-24A483E2CCC3}. (.Microsoft Corporation - Microsoft OneDrive Shell Extension.) -- C:\Users\jclou\AppData\Local\Microsoft\OneDrive\17.3.6966.0824\FileSyncShell.dll =>.Microsoft Corporation®

---\\ Image File Execution Options (18) - 0s
O50 - IFEO:C:\Windows\System32\cscript.exe - (.Microsoft Corporation - Microsoft ® Console Based Script Host.) [DisableExceptionChainValidation\\3] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\dllhost.exe - (.Microsoft Corporation - COM Surrogate.) [DisableExceptionChainValidation\\3] =>.Microsoft Windows®
O50 - IFEO:C:\WINDOWS\System32\drvinst.exe - (.Microsoft Corporation - Module d’installation de pilotes.) [DisableExceptionChainValidation\\3] =>.Microsoft Corporation
O50 - IFEO:C:\WINDOWS\System32\ie4uinit.exe - (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) [MitigationOptions\\256] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\ieUnatt.exe - (.Microsoft Corporation - Outil d’installation sans assistance d’IE 7.) [MitigationOptions\\256] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\mmc.exe - (.Microsoft Corporation - Microsoft Management Console.) [DisableExceptionChainValidation\\3] =>.Microsoft Corporation
O50 - IFEO:C:\WINDOWS\System32\MRT.exe - (.Microsoft Corporation - Outil de suppression de logiciels malveilla.) [CFGOptions\\1] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\msfeedssync.exe - (.Microsoft Corporation - Microsoft Feeds Synchronization.) [MitigationOptions\\256] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\mshta.exe - (.Microsoft Corporation - Hôte des applications HTML de Microsoft(R).) [MitigationOptions\\256] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\PresentationHost.exe - (.Microsoft Corporation - Windows Presentation Foundation Host.) [MitigationOptions\\1118481] =>.Microsoft Corporation
O50 - IFEO:C:\WINDOWS\System32\PrintIsolationHost.exe - (.Microsoft Corporation - PrintIsolationHost.) [MitigationOptions\\2097152] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\rundll32.exe - (.Microsoft Corporation - Processus hôte Windows (Rundll32).) [DisableExceptionChainValidation\\3] =>.Microsoft Corporation
O50 - IFEO:C:\WINDOWS\System32\runtimebroker.exe - (.Microsoft Corporation - Runtime Broker.) [MitigationOptions\\4294967296] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\searchprotocolhost.exe - (.Microsoft Corporation - Microsoft Windows Search Protocol Host.) [DisableExceptionChainValidation\\3] =>.Microsoft Corporation
O50 - IFEO:C:\WINDOWS\System32\spoolsv.exe - (.Microsoft Corporation - Application sous-système spouleur.) [DisableExceptionChainValidation\\3] =>.Microsoft Corporation
O50 - IFEO:C:\WINDOWS\System32\spoolsv.exe - (.Microsoft Corporation - Application sous-système spouleur.) [MitigationOptions\\2097152] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\svchost.exe - (.Microsoft Corporation - Processus hôte pour les services Windows.) [MinimumStackCommitInBytes\\32768] =>.Microsoft Windows Publisher®
O50 - IFEO:C:\Windows\System32\wscript.exe - (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) [DisableExceptionChainValidation\\3] =>.Microsoft Corporation

---\\ Liste des pilotes du système (83) - 13s
O58 - SDL:2017/03/18 22:56:25 A . (.LSI - LSI 3ware SCSI Storport Driver.) -- C:\WINDOWS\System32\drivers\3ware.sys [107424] =>.Microsoft Windows®
O58 - SDL:2017/08/31 21:29:18 A . (.MTQ0HV - .) -- C:\WINDOWS\System32\drivers\8290759c81fc462abf553ffcaf9f1dd1.sys [78744] =>PUP.Optional.Wajam
O58 - SDL:2017/03/18 22:56:25 A . (.PMC-Sierra - PMC-Sierra Storport Driver For SPC8x6G SAS.) -- C:\WINDOWS\System32\drivers\adp80xx.sys [1135512] =>.Microsoft Windows®
O58 - SDL:2017/03/18 22:56:25 A . (.Advanced Micro Devices - AHCI 1.3 Device Driver.) -- C:\WINDOWS\System32\drivers\amdsata.sys [83352] =>.Microsoft Windows®
O58 - SDL:2017/03/18 22:56:25 A . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller D.) -- C:\WINDOWS\System32\drivers\amdsbs.sys [259488] =>.Microsoft Windows®
O58 - SDL:2017/03/18 22:56:25 A . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\WINDOWS\System32\drivers\amdxata.sys [27040] =>.Microsoft Windows®
O58 - SDL:2015/06/01 12:33:29 A . (.Alcor Micro, Corp. - Alocr Micro USB Mass Storage Driver.) -- C:\WINDOWS\System32\drivers\AmUStor.sys [92312] =>.AlcorMicro, Corp.®
O58 - SDL:2017/03/18 22:56:25 A . (.PMC-Sierra, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\WINDOWS\System32\drivers\arcsas.sys [132000] =>.Microsoft Windows®
O58 - SDL:2013/12/05 10:24:34 A . (...) -- C:\WINDOWS\System32\drivers\assdv2.sys [21816] =>.ASUSTeK Computer Inc.®
O58 - SDL:2017/03/18 22:56:25 A . (.Windows (R) Win 7 DDK provider - BCM Function 2 Device Driver.) -- C:\WINDOWS\System32\drivers\bcmfn2.sys [9728] =>.Windows (R) Win 7 DDK provider
O58 - SDL:2017/03/18 22:56:23 A . (.QLogic Corporation - QLogic Gigabit Ethernet VBD.) -- C:\WINDOWS\System32\drivers\bxvbda.sys [533920] =>.Microsoft Windows®
O58 - SDL:2016/04/27 16:55:18 A . (.McAfee, Inc. - McAfee Personal Firewall IDS Plugin.) -- C:\WINDOWS\System32\drivers\cfwids.sys [78632] =>.McAfee, Inc.®
O58 - SDL:2017/03/18 22:56:25 A . (.Chelsio Communications - Chelsio iSCSI Crash Dump Driver.) -- C:\WINDOWS\System32\drivers\cht4dx64.sys [102816] =>.Microsoft Windows®
O58 - SDL:2017/03/18 22:56:25 A . (.Chelsio Communications - Chelsio iSCSI VMiniport Driver.) -- C:\WINDOWS\System32\drivers\cht4sx64.sys [347032] =>.Microsoft Windows®
O58 - SDL:2017/03/18 22:56:25 A . (.Chelsio Communications - Virtual Bus Driver for Chelsio ® T4 Chipset.) -- C:\WINDOWS\System32\drivers\cht4vx64.sys [2104224] =>.Microsoft Windows®
O58 - SDL:2016/09/21 13:56:04 N . (.Windows (R) Win 7 DDK provider - IEEE-1284.4-1999 Driver.) -- C:\WINDOWS\System32\drivers\Dot4.sys [151968] =>.Hewlett-Packard Company®
O58 - SDL:2016/09/21 13:56:04 N . (.Windows (R) Win 7 DDK provider - IEEE-1284.4 Print Class Driver.) -- C:\WINDOWS\System32\drivers\Dot4Prt.sys [27040] =>.Hewlett-Packard Company®
O58 - SDL:2017/03/18 22:56:28 A . (.Intel Corporation - Intel(R) Gigabit Adapter NDIS 6.x driver.) -- C:\WINDOWS\System32\drivers\e1i63x64.sys [524800] =>.Intel Corporation
O58 - SDL:2017/03/18 22:56:23 A . (.QLogic Corporation - QLogic 10 GigE VBD.) -- C:\WINDOWS\System32\drivers\evbda.sys [3419040] =>.Microsoft Windows®
O58 - SDL:2016/08/02 01:03:54 A . (.McAfee, Inc. - McAfee HIP IPS Driver.) -- C:\WINDOWS\System32\drivers\HipShieldK.sys [216704] =>.McAfee, Inc.®
O58 - SDL:2017/03/18 22:56:25 A . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Drive.) -- C:\WINDOWS\System32\drivers\HpSAMD.sys [64416] =>.Microsoft Windows®
O58 - SDL:2017/03/18 22:56:28 A . (.Intel(R) Corporation - Intel(R) Serial IO GPIO Controller Driver.) -- C:\WINDOWS\System32\drivers\iagpio.sys [33280] =>.Intel(R) Corporation
O58 - SDL:2017/03/18 22:56:28 A . (.Intel(R) Corporation - Intel(R) Serial IO I2C Driver.) -- C:\WINDOWS\System32\drivers\iai2c.sys [81408] =>.Intel(R) Corporation
O58 - SDL:2017/03/18 22:56:28 A . (.Intel Corporation - Intel(R) Serial IO GPIO Driver v2.) -- C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2.sys [70656] =>.Intel Corporation
O58 - SDL:2017/03/18 22:56:28 A . (.Intel Corporation - Intel(R) Serial IO GPIO Driver v2.) -- C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_BXT_P.sys [85504] =>.Intel Corporation
O58 - SDL:2017/03/18 22:56:28 A . (.Intel Corporation - Intel(R) Serial IO I2C Driver v2.) -- C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys [165376] =>.Intel Corporation
O58 - SDL:2017/03/18 22:56:28 A . (.Intel Corporation - Intel(R) Serial IO I2C Driver v2.) -- C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_BXT_P.sys [168448] =>.Intel Corporation
O58 - SDL:2017/03/18 22:56:23 A . (.Intel Corporation - Intel(R) Serial IO GPIO Controller Driver.) -- C:\WINDOWS\System32\drivers\iaLPSSi_GPIO.sys [38128] =>.Intel Corporation - Client Components Group®
O58 - SDL:2017/03/18 22:56:19 A . (.Intel Corporation - Intel(R) Serial IO I2C Controller Driver.) -- C:\WINDOWS\System32\drivers\iaLPSSi_I2C.sys [113152] =>.Intel Corporation
O58 - SDL:2015/02/20 04:26:56 A . (.Intel Corporation - NDIS 6.30 Advanced Networking Services..) -- C:\WINDOWS\System32\drivers\iANSW60e.sys [155192] =>.Intel(R) Intel Network Drivers®
O58 - SDL:2015/06/24 01:58:58 A . (.Intel Corporation - Intel(R) Rapid Storage Technology driver -.) -- C:\WINDOWS\System32\drivers\iaStorA.sys [1455552] =>.Intel Corporation - Rapid Storage Technology®
O58 - SDL:2017/03/18 22:56:26 A . (.Intel Corporation - Intel(R) Rapid Storage Technology driver (i.) -- C:\WINDOWS\System32\drivers\iaStorAV.sys [673184] =>.Microsoft Windows®
O58 - SDL:2017/03/18 22:56:26 A . (.Intel Corporation - Intel Matrix Storage Manager driver - x64.) -- C:\WINDOWS\System32\drivers\iaStorV.sys [412064] =>.Microsoft Windows®
O58 - SDL:2017/03/18 22:56:25 A . (.Mellanox - InfiniBand Fabric Bus Driver.) -- C:\WINDOWS\System32\drivers\ibbus.sys [526240] =>.Microsoft Windows®
O58 - SDL:2015/05/07 21:43:10 A . (.Intel Corporation - Intel(R) Network Adapter Diagnostic Driver.) -- C:\WINDOWS\System32\drivers\iqvw64e.sys [37832] =>.Intel(R) Intel Network Drivers®
O58 - SDL:2017/06/20 07:15:11 A . (...) -- C:\WINDOWS\System32\drivers\lanmamaster.sys [1509480] =>PUP.Optional.ChinAd
O58 - SDL:2017/03/18 22:56:25 A . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas.sys [108960] =>.Microsoft Windows®
O58 - SDL:2017/03/18 22:56:25 A . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas2i.sys [123808] =>.Microsoft Windows®
O58 - SDL:2017/03/18 22:56:25 A . (.Avago Technologies - Avago SAS Gen3 Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas3i.sys [103328] =>.Microsoft Windows®
O58 - SDL:2017/03/18 22:56:25 A . (.LSI Corporation - LSI SSS PCIe/Flash Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sss.sys [82848] =>.Microsoft Windows®
O58 - SDL:2017/09/05 18:26:03 A . (...) -- C:\WINDOWS\System32\drivers\mbae64.sys [77440] =>.Malwarebytes Corporation®
O58 - SDL:2017/09/07 21:50:02 A . (.Malwarebytes - Malwarebytes SwissArmy.) -- C:\WINDOWS\System32\drivers\MBAMSwissArmy.sys [253888] =>.Malwarebytes Corporation®
O58 - SDL:2017/03/18 22:56:25 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\megasas.sys [59808] =>.Microsoft Windows®
O58 - SDL:2017/03/18 22:56:25 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\MegaSas2i.sys [64416] =>.Microsoft Windows®
O58 - SDL:2017/03/18 22:56:25 A . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\WINDOWS\System32\drivers\megasr.sys [575904] =>.Microsoft Windows®
O58 - SDL:2016/04/27 16:55:18 A . (.McAfee, Inc. - McAfee Arbitrary Access Control Driver.) -- C:\WINDOWS\System32\drivers\mfeaack.sys [419616] =>.McAfee, Inc.®
O58 - SDL:2016/04/27 16:55:18 A . (.McAfee, Inc. - Anti-Virus File System Filter Driver.) -- C:\WINDOWS\System32\drivers\mfeavfk.sys [349480] =>.McAfee, Inc.®
O58 - SDL:2016/08/01 18:26:02 A . (.McAfee, Inc. - McAfee Driver Cleaning Driver.) -- C:\WINDOWS\System32\drivers\mfeclnrk.sys [22312] =>.McAfee, Inc.®
O58 - SDL:2016/04/27 16:55:18 A . (.McAfee, Inc. - McAfee ELAM Driver.) -- C:\WINDOWS\System32\drivers\mfeelamk.sys [83608] =>.Microsoft Windows Early Launch Anti-malware Publisher®
O58 - SDL:2016/04/27 16:55:18 A . (.McAfee, Inc. - McAfee Core Firewall Engine Driver.) -- C:\WINDOWS\System32\drivers\mfefirek.sys [493352] =>.McAfee, Inc.®
O58 - SDL:2016/04/27 16:55:18 A . (.McAfee, Inc. - McAfee Link Driver.) -- C:\WINDOWS\System32\drivers\mfehidk.sys [843048] =>.McAfee, Inc.®
O58 - SDL:2016/08/01 18:26:02 A . (.McAfee, Inc. - Event Driver.) -- C:\WINDOWS\System32\drivers\mfencbdc.sys [519456] =>.McAfee, Inc.®
O58 - SDL:2016/08/01 18:26:02 A . (.McAfee, Inc. - Detection driver.) -- C:\WINDOWS\System32\drivers\mfencrk.sys [100136] =>.McAfee, Inc.®
O58 - SDL:2016/04/27 16:55:18 A . (.McAfee, Inc. - Anti-Virus Mini-Firewall Driver.) -- C:\WINDOWS\System32\drivers\mfewfpk.sys [243488] =>.McAfee, Inc.®
O58 - SDL:2017/03/18 22:56:25 A . (.Mellanox - MLX4 Bus Driver.) -- C:\WINDOWS\System32\drivers\mlx4_bus.sys [842656] =>.Microsoft Windows®
O58 - SDL:2017/03/18 22:56:25 A . (.Marvell Semiconductor, Inc. - Marvell Flash Controller Driver.) -- C:\WINDOWS\System32\drivers\mvumis.sys [63904] =>.Microsoft Windows®
O58 - SDL:2017/03/18 22:56:25 A . (.Mellanox - NetworkDirect Support Filter Driver.) -- C:\WINDOWS\System32\drivers\ndfltr.sys [108960] =>.Microsoft Windows®
O58 - SDL:2016/11/11 07:52:48 A . (.NVIDIA Corporation - NVIDIA HDMI Audio Driver.) -- C:\WINDOWS\System32\drivers\nvhda64v.sys [221632] =>.NVIDIA Corporation®
O58 - SDL:2017/03/18 22:56:25 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\WINDOWS\System32\drivers\nvraid.sys [150432] =>.Microsoft Windows®
O58 - SDL:2017/03/18 22:56:25 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\WINDOWS\System32\drivers\nvstor.sys [166304] =>.Microsoft Windows®
O58 - SDL:2015/05/18 14:29:02 A . (.NVIDIA Corporation - NVIDIA Virtual Audio Driver.) -- C:\WINDOWS\System32\drivers\nvvad64v.sys [46768] =>.NVIDIA Corporation®
O58 - SDL:2017/03/18 22:56:25 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\percsas2i.sys [58784] =>.Microsoft Windows®
O58 - SDL:2017/03/18 22:56:25 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\percsas3i.sys [61848] =>.Microsoft Windows®
O58 - SDL:2017/03/15 05:12:06 A . (.QUALCOMM Incorporated - USB Modem/Serial Device Driver.) -- C:\WINDOWS\System32\drivers\qcusbser.sys [254520] =>.Microsoft Windows Hardware Compatibility Publisher®
O58 - SDL:2015/07/09 12:45:36 A . (.Realtek Semiconductor Corporation - Realtek Bluetooth Filter Driver.) -- C:\WINDOWS\System32\drivers\RtkBtfilter.sys [607512] =>.Realtek Semiconductor Corp®
O58 - SDL:2015/06/30 15:33:32 A . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function D.) -- C:\WINDOWS\System32\drivers\RTKVHD64.sys [4506840] =>.Realtek Semiconductor Corp®
O58 - SDL:2017/05/03 04:27:24 A . (.Realtek Semiconductor Corporation - Realtek PCIE NDIS Driver 52611 27170.) -- C:\WINDOWS\System32\drivers\rtwlane.sys [6804480] =>.Realtek Semiconductor Corp.®
O58 - SDL:2017/03/18 22:56:26 A . (...) -- C:\WINDOWS\System32\drivers\SDFRd.sys [31128] =>.Microsoft Windows®
O58 - SDL:2017/03/18 22:56:25 A . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\WINDOWS\System32\drivers\sisraid2.sys [44960] =>.Microsoft Windows®
O58 - SDL:2017/03/18 22:56:25 A . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\WINDOWS\System32\drivers\sisraid4.sys [81824] =>.Microsoft Windows®
O58 - SDL:2017/01/16 08:26:40 A . (.Samsung Electronics Co., Ltd. - SAMSUNG USB Composite Device Driver.) -- C:\WINDOWS\System32\drivers\ssudbus.sys [131712] =>.Samsung Electronics CO., LTD.®
O58 - SDL:2017/01/16 08:26:40 A . (.Samsung Electronics Co., Ltd. - SAMSUNG Android Modem Device Driver.) -- C:\WINDOWS\System32\drivers\ssudmdm.sys [165504] =>.Samsung Electronics CO., LTD.®
O58 - SDL:2017/03/18 22:56:25 A . (.Promise Technology, Inc. - Promise SuperTrak EX Series Driver for Wind.) -- C:\WINDOWS\System32\drivers\stexstor.sys [31136] =>.Microsoft Windows®
O58 - SDL:2017/06/13 17:55:02 A . (.The OpenVPN Project - TAP-Windows Virtual Network Driver.) -- C:\WINDOWS\System32\drivers\tap-tb-0901.sys [38656] =>.TunnelBear, Inc.®
O58 - SDL:2015/06/30 06:24:02 A . (.Intel Corporation - Intel(R) Management Engine Interface.) -- C:\WINDOWS\System32\drivers\TeeDriverW8x64.sys [184096] =>.Intel Corporation - Embedded Subsystems and IP Blocks Group®
O58 - SDL:2016/10/10 17:20:08 A . (.Wondershare - Wondershare Virtual Audio Device.) -- C:\WINDOWS\System32\drivers\VirtualAudio.sys [31080] =>.Wondershare Software Co., Ltd. ®
O58 - SDL:2017/03/18 22:56:25 A . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\WINDOWS\System32\drivers\vsmraid.sys [166816] =>.Microsoft Windows®
O58 - SDL:2017/03/18 22:56:25 A . (.VIA Corporation - VIA StorX RAID Controller Driver.) -- C:\WINDOWS\System32\drivers\VSTXRAID.SYS [305568] =>.Microsoft Windows®
O58 - SDL:2017/03/18 22:56:25 A . (.Mellanox - Kernel WinMad.) -- C:\WINDOWS\System32\drivers\winmad.sys [32160] =>.Microsoft Windows®
O58 - SDL:2017/03/18 22:56:25 A . (.Mellanox - Kernel WinVerbs.) -- C:\WINDOWS\System32\drivers\winverbs.sys [64920] =>.Microsoft Windows®
O58 - SDL:2017/06/20 07:15:11 A . (...) -- C:\WINDOWS\System32\drivers\wtmhdkernel.sys [209960] =>.SUP.SuspiciousCloud
O58 - SDL:2013/09/30 16:26:50 A . (...) -- C:\WINDOWS\System32\pwdrvio.sys [19152] =>.MiniTool Solution Ltd®
O58 - SDL:2013/09/30 16:26:48 A . (...) -- C:\WINDOWS\System32\pwdspio.sys [12504] =>.MiniTool Solution Ltd®

---\\ Derniers fichiers modifiés ou crées (Utilisateur) (2) - 31s
O61 - LFC: 2017/09/02 13:45:48 A . (.Copyright© 2012-2015.) -- C:\Users\jclou\AppData\Local\InetInfoTools\inetinfo.exe [226304]
O61 - LFC: 2017/09/05 10:29:19 A . (..) -- C:\Users\jclou\AppData\Local\InetInfoTools\unins000.exe [1199825]

---\\ Associations Shell Spawning (10) - 0s
O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\WINDOWS\System32\control.exe =>.Microsoft Corporation
O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Ob.) -- C:\WINDOWS\System32\eventvwr.exe =>.Microsoft Corporation
O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (...) -- %1" %*
O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe =>.Microsoft Corporation
O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S

---\\ Menu de démarrage Internet (12) - 1s
O68 - StartMenuInternet: [64Bits][HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O68 - StartMenuInternet: [64Bits][HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc®
O68 - StartMenuInternet: [64Bits][HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O68 - StartMenuInternet: [64Bits][HKLM\..\InstallInfo\ShowIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe =>.Mozilla Corporation
O68 - StartMenuInternet: [64Bits][HKLM\..\InstallInfo\ShowIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc.
O68 - StartMenuInternet: [64Bits][HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation
O68 - StartMenuInternet: [64Bits][HKLM\..\InstallInfo\ReinstallCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe =>.Mozilla Corporation
O68 - StartMenuInternet: [64Bits][HKLM\..\InstallInfo\ReinstallCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc.
O68 - StartMenuInternet: [64Bits][HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation
O68 - StartMenuInternet: [64Bits][HKLM\..\InstallInfo\HideIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe =>.Mozilla Corporation
O68 - StartMenuInternet: [64Bits][HKLM\..\InstallInfo\HideIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc.
O68 - StartMenuInternet: [64Bits][HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation

---\\ Recherche d'infection sur les navigateurs (3) - 3s
O69 - SBI: SearchScopes [HKCU] [64Bits]{0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - () - http://www.bing.com/ =>.Bing.com
O69 - SBI: SearchScopes [HKCU] [64Bits]{86A0B95B-3B12-45AF-8F4F-5D843277F0D1} - (Yahoo Search) - http://fr.search.yahoo.com/ =>.Yahoo! Inc.
O69 - SBI: SearchScopes [HKLM] [64Bits]{0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (@ieframe.dll,-12512) - http://www.bing.com/ =>.Bing.com

---\\ Enumère les services démarrés par Svchost (47) - 0s
O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\WINDOWS\System32\certprop.dll [189952] =>.Microsoft Corporation
O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\WINDOWS\System32\certprop.dll [189952] =>.Microsoft Corporation
O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\WINDOWS\System32\srvsvc.dll [303104] =>.Microsoft Corporation
O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\WINDOWS\System32\gpsvc.dll [1269248] =>.Microsoft Corporation
O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\WINDOWS\System32\ikeext.dll [934912] =>.Microsoft Corporation
O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur u.) -- C:\WINDOWS\System32\iphlpsvc.dll [996864] =>.Microsoft Corporation
O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d’ouverture de session secon.) -- C:\WINDOWS\system32\seclogon.dll [31232] =>.Microsoft Corporation
O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\WINDOWS\System32\appinfo.dll [138752] =>.Microsoft Corporation
O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\WINDOWS\System32\iscsiexe.dll [150016] =>.Microsoft Corporation
O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\WINDOWS\System32\eapsvc.dll [108032] =>.Microsoft Corporation
O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\WINDOWS\System32\schedsvc.dll [877568] =>.Microsoft Corporation
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\WINDOWS\System32\wbem\WMIsvc.dll [221696] =>.Microsoft Corporation
O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\WINDOWS\System32\browser.dll [133120] =>.Microsoft Corporation
O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\WINDOWS\System32\profsvc.dll [413696] =>.Microsoft Corporation
O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à.) -- C:\WINDOWS\System32\sessenv.dll [385536] =>.Microsoft Corporation
O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\WINDOWS\System32\wercplsupport.dll [92672] =>.Microsoft Corporation
O83 - Search Svchost Services: shpamsvc (shpamsvc) . (.Microsoft Corporation - SharedPC.AccountManager.) -- C:\WINDOWS\System32\Windows.SharedPC.AccountManager.dll [192512] =>.Microsoft Corporation
O83 - Search Svchost Services: XblGameSave (XblGameSave) . (.Microsoft Corporation - Xbox Live Game Save Service.) -- C:\WINDOWS\System32\XblGameSave.dll [1135104] =>.Microsoft Corporation
O83 - Search Svchost Services: NaturalAuthentication (NaturalAuthentication) . (.Microsoft Corporation - Service d’authentification naturelle.) -- C:\WINDOWS\System32\NaturalAuth.dll [723968] =>.Microsoft Corporation
O83 - Search Svchost Services: wlidsvc (wlidsvc) . (.Microsoft Corporation - Service de compte Microsoft®.) -- C:\WINDOWS\System32\wlidsvc.dll [2155008] =>.Microsoft Corporation
O83 - Search Svchost Services: UserManager (UserManager) . (.Microsoft Corporation - UserMgr.) -- C:\WINDOWS\System32\usermgr.dll [877568] =>.Microsoft Corporation
O83 - Search Svchost Services: XblAuthManager (XblAuthManager) . (.Microsoft Corporation - Xbox Live Auth Manager.) -- C:\WINDOWS\System32\XblAuthManager.dll [1015296] =>.Microsoft Corporation
O83 - Search Svchost Services: DmEnrollmentSvc (DmEnrollmentSvc) . (.Microsoft Corporation - DLL Windows Management Service.) -- C:\WINDOWS\System32\Windows.Internal.Management.dll [536064] =>.Microsoft Corporation
O83 - Search Svchost Services: xbgm (xbgm) . (.Microsoft Corporation - Xbox Game Monitoring Service.) -- C:\WINDOWS\System32\xbgmsvc.dll [301216] =>.Microsoft Windows Publisher®
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\WINDOWS\System32\themeservice.dll [69632] =>.Microsoft Corporation
O83 - Search Svchost Services: TokenBroker (TokenBroker) . (.Microsoft Corporation - Token Broker.) -- C:\WINDOWS\System32\TokenBroker.dll [1052160] =>.Microsoft Corporation
O83 - Search Svchost Services: lfsvc (lfsvc) . (.Microsoft Corporation - Service de géolocalisation.) -- C:\WINDOWS\System32\lfsvc.dll [43520] =>.Microsoft Corporation
O83 - Search Svchost Services: Irmon (Irmon) . (.Microsoft Corporation - Moniteur infrarouge.) -- C:\WINDOWS\System32\irmon.dll [24576] =>.Microsoft Corporation
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’.) -- C:\WINDOWS\System32\rasauto.dll [104448] =>.Microsoft Corporation
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire des connexions d’accès à dista.) -- C:\WINDOWS\System32\rasmans.dll [873472] =>.Microsoft Corporation
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\WINDOWS\System32\mprdim.dll [490496] =>.Microsoft Corporation
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements systèm.) -- C:\WINDOWS\System32\sens.dll [69632] =>.Microsoft Corporation
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l’application d’assistance à.) -- C:\WINDOWS\System32\ipnathlp.dll [537600] =>.Microsoft Corporation
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM.) -- C:\WINDOWS\System32\tapisrv.dll [306688] =>.Microsoft Corporation
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Up.) -- C:\WINDOWS\System32\wuaueng.dll [2444288] =>.Microsoft Corporation
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière.) -- C:\WINDOWS\System32\qmgr.dll [1159680] =>.Microsoft Corporation
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\System32\shsvcs.dll [612864] =>.Microsoft Corporation
O83 - Search Svchost Services: dmwappushservice (dmwappushservice) . (.Microsoft Corporation - dmwappushsvc.) -- C:\WINDOWS\System32\dmwappushsvc.dll [55296] =>.Microsoft Corporation
O83 - Search Svchost Services: wisvc (wisvc) . (.Microsoft Corporation - Paramètres de vol.) -- C:\WINDOWS\System32\flightsettings.dll [699904] =>.Microsoft Corporation
O83 - Search Svchost Services: WpnService (WpnService) . (.Microsoft Corporation - Service du système de notifications Push Wi.) -- C:\WINDOWS\System32\WpnService.dll [276480] =>.Microsoft Corporation
O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\WINDOWS\System32\bdesvc.dll [385536] =>.Microsoft Corporation
O83 - Search Svchost Services: XboxNetApiSvc (XboxNetApiSvc) . (.Microsoft Corporation - Xbox Live Networking Service.) -- C:\WINDOWS\System32\XboxNetApiSvc.dll [1067008] =>.Microsoft Corporation
O83 - Search Svchost Services: UsoSvc (UsoSvc) . (.Microsoft Corporation - Mettre à jour la session Orchestrator Core.) -- C:\WINDOWS\System32\usocore.dll [681984] =>.Microsoft Corporation
O83 - Search Svchost Services: NetSetupSvc (NetSetupSvc) . (.Microsoft Corporation - Service Configuration du réseau.) -- C:\WINDOWS\System32\NetSetupSvc.dll [261632] =>.Microsoft Corporation
O83 - Search Svchost Services: DsmSvc (DsmSvc) . (.Microsoft Corporation - Gestionnaire d’installation de périphérique.) -- C:\WINDOWS\System32\DeviceSetupManager.dll [233984] =>.Microsoft Corporation
O83 - Search Svchost Services: NcaSvc (NcaSvc) . (.Microsoft Corporation - Service Assistant Connectivité réseau Micro.) -- C:\WINDOWS\System32\ncasvc.dll [167424] =>.Microsoft Corporation
O83 - Search Svchost Services: XboxGipSvc (XboxGipSvc) . (.Microsoft Corporation - Xbox Gip Management Service.) -- C:\WINDOWS\System32\XboxGipSvc.dll [18944] =>.Microsoft Corporation

---\\ Liste des exceptions du parefeu Windows (8) - 3s
O87 - FAEL: "{38BF879F-1BC2-44D8-8B95-FC7DA3F12270}" [Out-None-P6-TRUE] .(...) -- C:\Program Files (x86)\Apowersoft\Streaming Audio Recorder\ApowersoftVideoHelper.dll
O87 - FAEL: "{EE4511B2-ECC1-4ACC-9089-4F99F26DAEAF}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\Apowersoft\Streaming Audio Recorder\ApowersoftVideoHelper.dll
O87 - FAEL: "{D52236CF-0C8D-49D5-BADB-7AB92BD815B3}" [In-None-P6-TRUE] .(...) -- C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe (.not file.)
O87 - FAEL: "{A1D395B9-F713-45D4-A6D0-D95D28C57A0F}" [In-None-P17-TRUE] .(...) -- C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe (.not file.)
O87 - FAEL: "{4426EC2E-6318-40EC-B33E-94424553633B}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\Steam\Steam.exe (.not file.)
O87 - FAEL: "{ECE12CF5-9D9E-4CDD-B4D9-984768C2939A}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\Steam\Steam.exe (.not file.)
O87 - FAEL: "{9193A079-4E34-426C-851C-DA419C98043E}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe (.not file.)
O87 - FAEL: "{55F8B51F-E90A-4BDC-84D5-1BAF0BE25A3B}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe (.not file.)

---\\ Scan Additionnel (52) - 0s
HKLM\SYSTEM\CurrentControlSet\Services\clsid54021 =>PUP.Optional.Salus
HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA} =>.SUP.Orphan
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA} =>.SUP.Orphan
HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} =>.SUP.Orphan
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} =>.SUP.Orphan
C:\WINDOWS\System32\drivers\8290759c81fc462abf553ffcaf9f1dd1.sys =>PUP.Optional.Wajam
C:\WINDOWS\System32\drivers\lanmamaster.sys =>PUP.Optional.ChinAd
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\03D22C9C66915D58C88912B64C1F984B8344EF09 =>PUM.Misplaced.Certificate [Comodo Security]
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\0F684EC1163281085C6AF20528878103ACEFCAAB =>PUM.Misplaced.Certificate [F-Secure]
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\1667908C9E22EFBD0590E088715CC74BE4C60884 =>PUM.Misplaced.Certificate [FRISK]
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\18DEA4EFA93B06AE997D234411F3FD72A677EECE =>PUM.Misplaced.Certificate [Bitdefender]
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\2026D13756EB0DB753DF26CB3B7EEBE3E70BB2CF =>PUM.Misplaced.Certificate [G-Data]
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\249BDA38A611CD746A132FA2AF995A2D3C941264 =>PUM.Misplaced.Certificate [Malwarebytes]
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\31AC96A6C17C425222C46D55C3CCA6BA12E54DAF =>PUM.Misplaced.Certificate [Symantec]
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\331E2046A1CCA7BFEF766724394BE6112B4CA3F7 =>PUM.Misplaced.Certificate [Trend Micro]
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\3353EA609334A9F23A701B9159E30CB6C22D4C59 =>PUM.Misplaced.Certificate [Webroot]
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\373C33726722D3A5D1EDD1F1585D5D25B39BEA1A =>PUM.Misplaced.Certificate [SUPERAntiSpyware]
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\3850EDD77CC74EC9F4829AE406BBF9C21E0DA87F =>PUM.Misplaced.Certificate [Kaspersky]
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\3D496FA682E65FC122351EC29B55AB94F3BB03FC =>PUM.Misplaced.Certificate [AVG Technologies]
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\4243A03DB4C3C15149CEA8B38EEA1DA4F26BD159 =>PUM.Misplaced.Certificate [PC Tools]
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\42727E052C0C2E1B35AB53E1005FD9EDC9DE8F01 =>PUM.Misplaced.Certificate [K7 Computing]
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\4420C99742DF11DD0795BC15B7B0ABF090DC84DF =>PUM.Misplaced.Certificate [Doctor Web]
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\4C0AF5719009B7C9D85C5EAEDFA3B7F090FE5FFF =>PUM.Misplaced.Certificate [Emsisoft]
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\5240AB5B05D11B37900AC7712A3C6AE42F377C8C =>PUM.Misplaced.Certificate [CheckPoint]
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\5DD3D41810F28B2A13E9A004E6412061E28FA48D =>PUM.Misplaced.Certificate [Emsisoft]
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\7457A3793086DBB58B3858D6476889E3311E550E =>PUM.Misplaced.Certificate [K7 Computing]
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\76A9295EF4343E12DFC5FE05DC57227C1AB00D29 =>PUM.Misplaced.Certificate [BullGuard]
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\775B373B33B9D15B58BC02B184704332B97C3CAF =>PUM.Misplaced.Certificate [McAfee]
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\872CD334B7E7B3C3D1C6114CD6B221026D505EAB =>PUM.Misplaced.Certificate [Comodo Security]
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\88AD5DFE24126872B33175D1778687B642323ACF =>PUM.Misplaced.Certificate [McAfee]
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\9132E8B079D080E01D52631690BE18EBC2347C1E =>PUM.Misplaced.Certificate [Adaware Software]
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\982D98951CF3C0CA2A02814D474A976CBFF6BDB1 =>PUM.Misplaced.Certificate [Safer Networking]
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\9A08641F7C5F2CCA0888388BE3E5DBDDAAA3B361 =>PUM.Misplaced.Certificate [Webroot]
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\9C43F665E690AB4D486D4717B456C5554D4BCEB5 =>PUM.Misplaced.Certificate [ThreatTrack]
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\9E3F95577B37C74CA2F70C1E1859E798B7FC6B13 =>PUM.Misplaced.Certificate [CurioLab]
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\A1F8DCB086E461E2ABB4B46ADCFA0B48C58B6E99 =>PUM.Misplaced.Certificate [Avira Operations]
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\A5341949ABE1407DD7BF7DFE75460D9608FBC309 =>PUM.Misplaced.Certificate [BullGuard]
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\A59CC32724DD07A6FC33F7806945481A2D13CA2F =>PUM.Misplaced.Certificate [ESET]
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\AB7E760DA2485EA9EF5A6EEE7647748D4BA6B947 =>PUM.Misplaced.Certificate [AVG Technologies]
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\AD4C5429E10F4FF6C01840C20ABA344D7401209F =>PUM.Misplaced.Certificate [Avast Software]
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\AD96BB64BA36379D2E354660780C2067B81DA2E0 =>PUM.Misplaced.Certificate [Symantec]
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\B8EBF0E696AF77F51C96DB4D044586E2F4F8FD84 =>PUM.Misplaced.Certificate [Malwarebytes]
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\CDC37C22FE9272D8F2610206AD397A45040326B8 =>PUM.Misplaced.Certificate [Trend Micro]
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\D3F78D747E7C5D6D3AE8ABFDDA7522BFB4CBD598 =>PUM.Misplaced.Certificate [Kaspersky]
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\DB303C9B61282DE525DC754A535CA2D6A9BD3D87 =>PUM.Misplaced.Certificate [ThreatTrack]
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\DB77E5CFEC34459146748B667C97B185619251BA =>PUM.Misplaced.Certificate [Avast Software]
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\E22240E837B52E691C71DF248F12D27F96441C00 =>PUM.Misplaced.Certificate [Total Defense]
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\E513EAB8610CFFD7C87E00BCA15C23AAB407FCEF =>PUM.Misplaced.Certificate [AVG Technologies]
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\ED841A61C0F76025598421BC1B00E24189E68D54 =>PUM.Misplaced.Certificate [Bitdefender]
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\F83099622B4A9F72CB5081F742164AD1B8D048C9 =>PUM.Misplaced.Certificate [ESET]
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\FBB42F089AF2D570F2BF6F493D107A3255A9BB1A =>PUM.Misplaced.Certificate [Panda Security]
HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\FFFA650F2CB2ABC0D80527B524DD3F9FC172C138 =>PUM.Misplaced.Certificate [Doctor Web]

---\\ Récapitulatif des éléments trouvés sur votre station (7) - 0s
https://nicolascoolman.eu/2017/09/07/pup-optional-salus/ =>PUP.Optional.Salus
https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/ =>Adware.Wizzcaster
https://nicolascoolman.eu/2017/06/26/trojan-certlock/ =>PUM.Misplaced.Certificate
https://nicolascoolman.eu/2017/03/11/pup-optional-crossrider/ =>Adware.CrossRider
https://nicolascoolman.eu/2017/03/12/adware-installcore-2/ =>Adware.InstallCore
https://nicolascoolman.eu/2017/02/24/pup-optional-wajam/ =>PUP.Optional.Wajam
https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/ =>PUP.Optional.ChinAd

~ Unselected Options: O82,
~ End of the scan, 45894 items in 02mn59s (1524)(0)