~ ZHPDiag v2017.12.8.213 Par Nicolas Coolman (2017/12/08)
~ Démarré par Paul (Administrator) (2017/12/08 17:49:01)
~ Web: https://www.nicolascoolman.com
~ Blog: https://nicolascoolman.eu/
~ Facebook: https://www.facebook.com/nicolascoolman1
~ Certificate ZHPDiag: Legal
~ Etat de la version: Version OK
~ Mode: Scanner
~ Rapport: C:\Users\Paul\Desktop\ZHPDiag.txt
~ Rapport: C:\Users\Paul\AppData\Roaming\ZHP\ZHPDiag.txt
~ UAC: Activate
~ Démarrage du système: Normal (Normal boot)
Windows 7 Home Premium, 64-bit Service Pack 1 (Build 7601) =>.Microsoft Corporation

---\\ Navigateurs Internet (2) - 0s
~ GCIE: Google Chrome v62.0.3202.94
~ MSIE: Internet Explorer v11.0.9600.18837

---\\ Informations sur les produits Windows (9) - 0s
~ Windows Server License Manager Script : OK
~ Licence Script File Génération : OK
~ Windows Operating System - Windows(R) 7, OEM_COA_NSLP channel
Windows ID Activation : OK
~ Windows Partial Key : BXJDY
Windows License : OK
~ Windows Remaining Initializations Number : 3
Windows Automatic Updates : OK
Windows Activation Technologies : OK

---\\ Logiciels de protection (4) - 3s
SFR Sécurité v2.65.171.0 (Protection)
Malwarebytes version 3.2.2.2018 v3.2.2.2018 (Protection)
Microsoft Security Client v4.10.0209.0 (Protection)
Microsoft Security Essentials v4.10.209.0 (Protection)

---\\ Logiciels d'optimisation (1) - 4s
~ CCleaner v4.02 (Optimize)

---\\ Surveillance de Logiciels (2) - 4s
~ Adobe Flash Player 27 PPAPI (Surveillance)
~ Adobe Acrobat Reader DC - Français (Surveillance)

---\\ Informations sur le système (6) - 0s
~ Operating System: Intel64 Family 6 Model 23 Stepping 10, GenuineIntel
~ Operating System: 64-bit
~ Boot mode: Normal (Normal boot)
Total RAM: 3106.336 MB (48% free) : OK =>.RAM Value
System Restore: Activé (Enable)
System drive C: has 149 GB (31%) free of 476 GB : OK =>.Disk Space

---\\ Mode de connexion au système (3) - 0s
~ Computer Name: PAUL-PC
~ User Name: Paul
~ Logged in as Administrator

---\\ Enumération des unités disques (5) - 0s
~ Drive C: has 149 GB free of 476 GB (System)
~ Drive D: has 72 GB free of 78 GB
~ Drive G: has 346 GB free of 476 GB
~ Drive H: has 1123 GB free of 1907 GB
~ Drive L: has 476 GB free of 476 GB

---\\ Etat du Centre de Sécurité Windows (11) - 0s
[HKLM\Software\WOW6432Node\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\Software\WOW6432Node\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\Software\WOW6432Node\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
[HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified
[HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\Software\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM64\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK
[HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK

---\\ Recherche particulière de fichiers génériques (25) - 1s
[MD5.38AE1B3C38FAEF56FE4907922F0385BA] - 29/08/2016 - (.Microsoft Corporation - Explorateur Windows.) -- C:\Windows\Explorer.exe [3229696] =>.Microsoft Corporation
[MD5.C36BB659F08F046B139C8D1B980BF1AC] - 30/03/2017 - (.Microsoft Corporation - Processus hôte Windows (Rundll32).) -- C:\Windows\System32\rundll32.exe [46080] =>.Microsoft Corporation
[MD5.94355C28C1970635A31B3FE52EB7CEBA] - 14/07/2009 - (.Microsoft Corporation - Application de démarrage de Windows.) -- C:\Windows\System32\Wininit.exe [129024] =>.Microsoft Corporation
[MD5.D13A0397ED940C071FD5ABB76BC974CF] - 14/10/2017 - (.Microsoft Corporation - Extensions Internet pour Win32.) -- C:\Windows\System32\wininet.dll [3241472] =>.Microsoft Corporation
[MD5.8CEBD9D0A0A879CDE9F36F4383B7CAEA] - 17/07/2014 - (.Microsoft Corporation - Application d’ouverture de session Windows.) -- C:\Windows\System32\Winlogon.exe [455168] =>.Microsoft Corporation
[MD5.067FA52BFB59A56110A12312EF9AF243] - 21/11/2010 - (.Microsoft Corporation - Bibliothèque de licences.) -- C:\Windows\System32\sppcomapi.dll [232448] =>.Microsoft Corporation
[MD5.492D07D79E7024CA310867B526D9636D] - 03/03/2011 - (.Microsoft Corporation - DNS DLL de l’API Client.) -- C:\Windows\System32\dnsapi.dll [357888] =>.Microsoft Corporation
[MD5.B40420876B9288E0A1C8CCA8A84E5DC9] - 03/03/2011 - (.Microsoft Corporation - DNS DLL de l’API Client.) -- C:\Windows\Syswow64\dnsapi.dll [270336] =>.Microsoft Corporation
[MD5.0D57D091E06BB1E58E72E5D08479FDDF] - 12/04/2011 - (.Microsoft Corporation - DLL client de l’API uilisateur de Windows m.) -- C:\Windows\System32\fr-FR\user32.dll.mui [20480] =>.Microsoft Corporation
[MD5.0DC2A9882540DEA4A55B08785E09D8FC] - 04/04/2017 - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) -- C:\Windows\System32\drivers\AFD.sys [496128] =>.Microsoft Corporation
[MD5.02062C0B390B7729EDC9E69C680A6F3C] - 14/07/2009 - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) -- C:\Windows\System32\drivers\atapi.sys [24128] =>.Microsoft Windows®
[MD5.B8BD2BB284668C84865658C77574381A] - 14/07/2009 - (.Microsoft Corporation - CD-ROM File System Driver.) -- C:\Windows\System32\drivers\Cdfs.sys [92160] =>.Microsoft Corporation
[MD5.F036CE71586E93D94DAB220D7BDF4416] - 21/11/2010 - (.Microsoft Corporation - SCSI CD-ROM Driver.) -- C:\Windows\System32\drivers\Cdrom.sys [147456] =>.Microsoft Corporation
[MD5.9B38580063D281A99E68EF5813022A5F] - 08/09/2016 - (.Microsoft Corporation - DFS Namespace Client Driver.) -- C:\Windows\System32\drivers\DfsC.sys [106496] =>.Microsoft Corporation
[MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - 21/11/2010 - (.Microsoft Corporation - High Definition Audio Bus Driver.) -- C:\Windows\System32\drivers\HDAudBus.sys [122368] =>.Microsoft Corporation
[MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - 14/07/2009 - (.Microsoft Corporation - Pilote de port i8042.) -- C:\Windows\System32\drivers\i8042prt.sys [105472] =>.Microsoft Corporation
[MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - 14/07/2009 - (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\System32\drivers\IpNat.sys [116224] =>.Microsoft Corporation
[MD5.767C6DF04C5758B9F0790D400541B44F] - 13/09/2017 - (.Microsoft Corporation - Windows NT SMB Minirdr.) -- C:\Windows\System32\drivers\MRxSmb.sys [159744] =>.Microsoft Corporation
[MD5.734837208CAFD6E0959A7A0333C95C9D] - 11/08/2017 - (.Microsoft Corporation - MBT Transport driver.) -- C:\Windows\System32\drivers\netBT.sys [262656] =>.Microsoft Corporation
[MD5.1065D9AFE491706EB00AD3CBB76C9E54] - 17/10/2017 - (.Microsoft Corporation - Pilote du système de fichiers NT.) -- C:\Windows\System32\drivers\ntfs.sys [1680616] =>.Microsoft Windows®
[MD5.0086431C29C35BE1DBC43F52CC273887] - 14/07/2009 - (.Microsoft Corporation - Pilote de port parallèle.) -- C:\Windows\System32\drivers\Parport.sys [97280] =>.Microsoft Corporation
[MD5.471815800AE33E6F1C32FB1B97C490CA] - 21/11/2010 - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) -- C:\Windows\System32\drivers\Rasl2tp.sys [129536] =>.Microsoft Corporation
[MD5.548260A7B8654E024DC30BF8A7C5BAA4] - 14/07/2009 - (.Microsoft Corporation - SMB Transport driver.) -- C:\Windows\System32\drivers\smb.sys [93184] =>.Microsoft Corporation
[MD5.4DD986720F7CB7A8A5D1226793097B9A] - 29/07/2017 - (.Microsoft Corporation - TDI Translation Driver.) -- C:\Windows\System32\drivers\tdx.sys [117248] =>.Microsoft Corporation
[MD5.0D08D2F3B3FF84E433346669B5E0F639] - 21/11/2010 - (.Microsoft Corporation - Pilote de cliché instantané du volume.) -- C:\Windows\System32\drivers\volsnap.sys [295808] =>.Microsoft Windows®

---\\ Liste des services NT non Microsoft et non désactivés (13) - 2s
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe =>.Adobe Systems, Incorporated®
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) . (.Apple Computer, Inc. - Bonjour Service.) - C:\Program Files (x86)\Bonjour\mDNSResponder.exe =>.Apple Computer, Inc.
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) . (.Copyright 2004 - CLCapSvc Module.) - C:\Program Files (x86)\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) . (.Copyright 2004 - CLSched Module.) - C:\Program Files (x86)\CyberLink\PowerCinema\Kernel\TV\CLSched.exe
O23 - Service: Digital Wave Update Service (DigitalWave.Update.Service) . (.Digital Wave Ltd. - Digital Wave Update Service.) - C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe =>.Digital Wave Ltd®
O23 - Service: FABS - Helping agent for MAGIX media database (Fabs) . (.MAGIX AG - Verzeichnisüberwachung und Hilfsaufgaben fü.) - C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe =>.MAGIX AG
O23 - Service: Freemake Improver (Freemake Improver) . (.Freemake - FreemakeUtilsService.) - C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe =>.Freemake
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google Inc®
O23 - Service: Malwarebytes Service (MBAMService) . (.Malwarebytes - Malwarebytes Service.) - C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe =>.Malwarebytes Corporation®
O23 - Service: PLFlash DeviceIoControl Service (PLFlash DeviceIoControl Service) . (.Prolific Technology Inc. - PLFlash DeviceIoControl Service.) - C:\Windows\SysWOW64\IoctlSvc.exe =>.Prolific Technology Inc.
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) . (.Copyright 2004 - RichVideo Module.) - C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe =>.CyberLink Corporation
O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files (x86)\Skype\Updater\Updater.exe =>.Skype Software Sarl®
O23 - Service: TeamViewer 12 (TeamViewer) . (.TeamViewer GmbH - TeamViewer 12.) - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe =>.TeamViewer GmbH®

---\\ Services non Microsoft (SR=Démarré,SS=Stoppé) (22) - 19s
SS - Demand [20/03/2007] [ 153792] Adobe Version Cue CS3 {fr_FR} (Adobe Version Cue CS3) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exe =>.Adobe Systems Incorporated®
SR - Auto [27/09/2017] [ 83984] Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe =>.Adobe Systems, Incorporated®
SS - Demand [14/11/2017] [ 272384] Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe =>.Adobe Systems Incorporated®
SR - Auto [28/02/2006] [ 229376] ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) . (.Apple Computer, Inc..) - C:\Program Files (x86)\Bonjour\mDNSResponder.exe =>.Apple Computer, Inc.
SR - Auto [02/03/2007] [ 278608] CyberLink Background Capture Service (CBCS) (CLCapSvc) . (.Copyright 2004.) - C:\Program Files (x86)\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe
SR - Auto [02/03/2007] [ 110677] CyberLink Task Scheduler (CTS) (CLSched) . (.Copyright 2004.) - C:\Program Files (x86)\CyberLink\PowerCinema\Kernel\TV\CLSched.exe
SR - Auto [14/09/2017] [ 440808] Digital Wave Update Service (DigitalWave.Update.Service) . (.Digital Wave Ltd..) - C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe =>.Digital Wave Ltd®
SR - Auto [23/01/2012] [ 1858048] FABS - Helping agent for MAGIX media database (Fabs) . (.MAGIX AG.) - C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe =>.MAGIX AG
SS - Demand [26/04/2011] [ 2702848] Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) . (.MAGIX®.) - C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe =>.MAGIX®
SS - Demand [07/09/2016] [ 654848] FLEXnet Licensing Service (FLEXnet Licensing Service) . (.Macrovision Europe Ltd..) - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe =>.Macrovision Europe Ltd.
SS - Auto [02/08/2017] [ 104448] Freemake Improver (Freemake Improver) . (.Freemake.) - C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe =>.Freemake
SS - Auto [12/04/2016] [ 154440] Service Google Update (gupdate) (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google Inc®
SS - Demand [12/04/2016] [ 154440] Service Google Update (gupdatem) (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google Inc®
SS - Demand [22/10/2004] [ 73728] InstallDriver Table Manager (IDriverT) . (.Macrovision Corporation.) - C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe =>.Macrovision Corporation
SR - Auto [21/08/2017] [ 6058960] Malwarebytes Service (MBAMService) . (.Malwarebytes.) - C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe =>.Malwarebytes Corporation®
SS - Demand [18/02/2008] [ 877864] Nero BackItUp Scheduler 3 (Nero BackItUp Scheduler 3) . (.Nero AG.) - C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBService.exe =>.Nero AG®
SS - Demand [28/02/2008] [ 529704] NMIndexingService (NMIndexingService) . (.Nero AG.) - C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexingService.exe =>.Nero AG®
SR - Auto [19/12/2006] [ 81920] PLFlash DeviceIoControl Service (PLFlash DeviceIoControl Service) . (.Prolific Technology Inc..) - C:\Windows\SysWOW64\IoctlSvc.exe =>.Prolific Technology Inc.
SR - Auto [07/04/2008] [ 241734] Cyberlink RichVideo Service(CRVS) (RichVideo) . (.Copyright 2004.) - C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe =>.CyberLink Corporation
SS - Auto [01/06/2017] [ 317400] Skype Updater (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe =>.Skype Software Sarl®
SS - Demand [20/12/2014] [ 820960] System Explorer Service (SystemExplorerHelpService) . (.Mister Group.) - C:\Program Files (x86)\System Explorer\service\SystemExplorerService64.exe =>.Miroslav Topolar®
SR - Auto [23/05/2017] [10884848] TeamViewer 12 (TeamViewer) . (.TeamViewer GmbH.) - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe =>.TeamViewer GmbH®

---\\ Tâches planifiées en automatique (Registre) (27) - 6s
O38 - TASK: {00996C92-C1FB-4C3F-9393-527DA90D531C} [64Bits][\{2345D470-B111-4E57-A3DF-DDDD61B48C10}] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1556312] =>.Google Inc®
O38 - TASK: {0300B9DC-1421-4363-A298-53F71A531980} [64Bits][\Microsoft\Windows\Media Center\StartRecording] - (...) -- C:\Windows\ehome\ehrec (.not file.) [0] (.Orphan.) =>.SUP.Orphan
O38 - TASK: {040B8C0F-DD90-4B4F-8770-9B63FADE5940} [64Bits][\Adobe Flash Player Updater] - (.Adobe Systems Incorporated - Adobe® Flash® Player Update Service 27.0 r0.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [272384] =>.Adobe Systems Incorporated®
O38 - TASK: {0D671C86-A357-4E71-90C1-ADA5AFFE3C01} [64Bits][\Microsoft\Windows\Media Center\mcupdate] - (...) -- C:\Windows\ehome\mcupdate (.not file.) [0] (.Orphan.) =>.SUP.Orphan
O38 - TASK: {0ED66599-C1A9-4478-8E25-F01098FEE5E0} [64Bits][\{1F6E787D-C376-4C4E-B866-85D6E7008778}] - (...) -- E:\PowerDirector\setup.exe (.not file.) [0] (.Orphan.) =>.SUP.Orphan
O38 - TASK: {1142228B-0D2A-4385-8F33-89910D281C84} [64Bits][\Microsoft\Windows\Media Center\mcupdate_scheduled] - (...) -- C:\Windows\ehome\mcupdate (.not file.) [0] (.Orphan.) =>.SUP.Orphan
O38 - TASK: {232132AD-3F5C-4E6F-A27E-EE2E50442FBB} [64Bits][\{FF771CDB-B1CE-4A35-B7BD-60A4CA5DFA2C}] - (...) -- C:\Users\Paul\Desktop\Logiciels\regcleaner_regcleaner_4.3.0.780_francais_10573.exe [553687]
O38 - TASK: {4AEDA5B0-EA6F-452E-A687-6FF728ABE7B6} [64Bits][\F-Secure\F-Secure GUI] - (...) -- C:\Program Files (x86)\SFR Sécurité\FsGuiStarter.exe (.not file.) [0] (.Orphan.) =>.SUP.Orphan
O38 - TASK: {566473A2-46CE-486D-B3A5-3B8C514CFDBA} [64Bits][\Apple\AppleSoftwareUpdate] - (.Apple Inc. - Apple Software Update.) -- C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [561984] =>.Apple Inc.®
O38 - TASK: {580F68C2-56BA-4F3C-9FC6-67F46C1D8F91} [64Bits][\GoogleUpdateTaskMachineCore] - (.Google Inc. - Programme d'installation de Google.) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154440] =>.Google Inc®
O38 - TASK: {5931B5EC-EAF5-49DB-8887-24FAD4B9CC16} [64Bits][\{265A6780-BCE3-4821-92D3-D4A6D57C4C1E}] - (.MAGIX AG - InstSelect.) -- C:\MAGIX\Audio_Cleanic_2007_deluxe\instslct.exe [189920] =>.Magix AG®
O38 - TASK: {6574306C-F7D7-412A-A1BE-FECF8FD693D5} [64Bits][\Adobe Flash Player PPAPI Notifier] - (.Adobe Systems Incorporated - Adobe® Flash® Player Installer/Uninstaller.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_27_0_0_187_pepper.exe [1319424] =>.Adobe Systems Incorporated®
O38 - TASK: {68CCEA70-BD9C-4316-A9E6-F9F31B43827C} [64Bits][\Adobe Acrobat Update Task] - (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1171480] =>.Adobe Systems, Incorporated®
O38 - TASK: {7CDAB87C-C0D1-4C64-9637-5F00AB733189} [64Bits][\GoogleUpdateTaskMachineUA] - (.Google Inc. - Programme d'installation de Google.) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154440] =>.Google Inc®
O38 - TASK: {884674BB-3357-4540-AF39-77B616B65A0F} [64Bits][\{CC397A34-A22E-492D-BBEB-0F0D90948D66}] - (...) -- H:\Nouveau dossier\TWUNK_32.EXE (.not file.) [0] (.Orphan.) =>.SUP.Orphan
O38 - TASK: {8D1CFD11-FE0A-4030-A850-32037EDF0D9F} [64Bits][\{0FD15875-8958-49B2-88BD-594F21E4B1DF}] - (. - Setup/Uninstall.) -- C:\Program Files (x86)\ZHPFix\unins000.exe [694736]
O38 - TASK: {9C3C1956-79AA-4561-93E3-0303462BCFF2} [64Bits][\Microsoft\Windows\Media Center\RecordingRestart] - (...) -- C:\Windows\ehome\ehrec (.not file.) [0] (.Orphan.) =>.SUP.Orphan
O38 - TASK: {BA802DBF-0865-43FA-8043-C33C83DD7BE3} [64Bits][\{B925F720-B661-4558-8082-F4F0CDCABB78}] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1556312] =>.Google Inc®
O38 - TASK: {D075B24B-7FEF-470E-8433-9A74956CA580} [64Bits][\{ABBBB821-5FD7-45CA-B64B-8EC3BCDE7A14}] - (...) -- E:\setup.exe (.not file.) [0] (.Orphan.) =>.SUP.Orphan
O38 - TASK: {D7AF0FF9-2007-4B77-8428-2699AD0CA000} [64Bits][\{EC5BF1D8-CC5D-4EAA-BD28-E9CD9401C754}] - (.MAGIX AG - InstSelect.) -- C:\MAGIX\Audio_Cleanic_2007_deluxe\instslct.exe [189920] =>.Magix AG®
O38 - TASK: {DE78B2EA-7F05-427B-81F5-3E055A443969} [64Bits][\{C7F9DE9B-B1D6-4AD8-B795-A1B84E06EB94}] - (.Nero AG - Nero StartSmart 8 Application.) -- C:\Program Files (x86)\Nero\Nero8\Nero StartSmart\NeroStartSmart.exe [19555624] =>.Nero AG®
O38 - TASK: {E12634E5-A755-4073-A86C-B33AF2C0BEA0} [64Bits][\{5ABD2404-36ED-407A-B3E1-59ADB19ADC13}] - (...) -- C:\MAGIX\Music_Manager_2006\instslct.exe (.not file.) [0] (.Orphan.) =>.SUP.Orphan
O38 - TASK: {E2ABC3F9-DAA0-4992-8DCC-9776FE8769AD} [64Bits][\CCleanerSkipUAC] - (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner.exe [3591960] =>.Piriform Ltd®
O38 - TASK: {E68E3802-9FAB-4E80-B295-454C4740AC1A} [64Bits][\{DE66E0A7-19E3-4573-9E5F-22362BFC4F58}] - (...) -- E:\SETUP.EXE (.not file.) [0] (.Orphan.) =>.SUP.Orphan
O38 - TASK: {F21268B5-CC60-41FD-848F-001E118B5B97} [64Bits][\{017B155A-B4DF-464B-A881-D9F04E6515AB}] - (...) -- H:\d1250u2fvst6330afr (2).exe (.not file.) [0] (.Orphan.) =>.SUP.Orphan
O38 - TASK: {FD90180F-F6EE-4E22-B124-DCCAC473A335} [64Bits][\{219B3F42-4149-4F76-94D9-7D7135DB29B0}] - (...) -- C:\Program Files (x86)\InstallShield Installation Information\{CB099890-1D5F-11D5-9EA9-0050BAE317E1}\setup.exe (.not file.) [0] (.Orphan.) =>.SUP.Orphan
O38 - TASK: {FEB27D4C-552E-48EA-A224-ED5D8C9FF63F} [64Bits][\AVAST Software\Avast settings backup] - (...) -- C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe (.not file.) [0] (.Orphan.) =>.SUP.Orphan

---\\ Applications lancées au démarrage du système (5) - 1s
O4 - HKLM\..\Run: [MSC] . (.Microsoft Corporation - Microsoft Security Client User Interface.) -- C:\Program Files\Microsoft Security Client\msseces.exe =>.Microsoft Corporation®
O4 - HKCU\..\Run: [Gadwin PrintScreen] . (.Gadwin Systems, Inc - Gadwin PrintScreen.) -- C:\Program Files (x86)\Gadwin Systems\PrintScreen\PrintScreen.exe =>.Gadwin, Ltd.®
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-21-3236533265-2694198059-1176122490-1000\..\Run: [Gadwin PrintScreen] . (.Gadwin Systems, Inc - Gadwin PrintScreen.) -- C:\Program Files (x86)\Gadwin Systems\PrintScreen\PrintScreen.exe =>.Gadwin, Ltd.®

---\\ Processus lancés (19) - 2s
[MD5.38622FFE9369D3EC01C0097235BD9279] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [83984] [PID.1308] =>.Adobe Systems, Incorporated®
[MD5.73686FE0B2E0469F89FD2075BE724704] - (.Apple Computer, Inc. - Bonjour Service.) -- C:\Program Files (x86)\Bonjour\mDNSResponder.exe [229376] [PID.1476] =>.Apple Computer, Inc.
[MD5.CD6D23E3ADF57035C30B53843F21A416] - (.Copyright 2004 - CLCapSvc Module.) -- C:\Program Files (x86)\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe [278608] [PID.1548]
[MD5.0B6EE1763C8E6209D64FD9229DA681BF] - (.Digital Wave Ltd. - Digital Wave Update Service.) -- C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe [440808] [PID.1596] =>.Digital Wave Ltd®
[MD5.1EDC9B85FBFDFE569BDB4A013F8D1242] - (.Gadwin Systems, Inc - Gadwin PrintScreen.) -- C:\Program Files (x86)\Gadwin Systems\PrintScreen\PrintScreen.exe [1842384] [PID.2152] =>.Gadwin, Ltd.®
[MD5.875E4E0661F3A5994DF9E5E3A0A4F96B] - (.Prolific Technology Inc. - PLFlash DeviceIoControl Service.) -- C:\Windows\SysWOW64\IoctlSvc.exe [81920] [PID.2604] =>.Prolific Technology Inc.
[MD5.2FCEAD838E64A79250046DD2A15B6A8A] - (.Copyright 2004 - RichVideo Module.) -- C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [241734] [PID.2640] =>.CyberLink Corporation
[MD5.C8E2119AF16AFD29569F391FB802897A] - (.TeamViewer GmbH - TeamViewer 12.) -- C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [10884848] [PID.2736] =>.TeamViewer GmbH®
[MD5.357CABBF155AFD1D3926E62539D2A3A7] - (.Microsoft Corp. - Microsoft® Windows Live ID Service.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2292480] [PID.2824] =>.Microsoft Corporation®
[MD5.FEAF4E98C93BC3512B8108D2F534A3BA] - (.Malwarebytes - Malwarebytes Service.) -- C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6058960] [PID.2900] =>.Malwarebytes Corporation®
[MD5.D790CAFEFF0291D0AF8C76F5A1EE2E4E] - (.Microsoft Corp. - Microsoft® Windows Live ID Service Monitor.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE [223488] [PID.3052] =>.Microsoft Corporation®
[MD5.4FA0B771DF428DE79CE96108E5370841] - (.Copyright 2004 - CLSched Module.) -- C:\Program Files (x86)\CyberLink\PowerCinema\Kernel\TV\CLSched.exe [110677] [PID.2340]
[MD5.945DECA53FB2ED89DC1CDDBF86C24E20] - (.Malwarebytes - Malwarebytes Tray Application.) -- C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe [3411400] [PID.3632] =>.Malwarebytes Corporation®
[MD5.3F98643DE5CA2479214527E19E410E2D] - (.2011-2017, Guillaume - Captvty.) -- C:\Users\Paul\Desktop\Captvty\Captvty.exe [3789824] [PID.4428] =>.2011-2017, Guillaume
[MD5.8FDA65209157144C3E28809D75A47526] - (.MAGIX AG - Verzeichnisüberwachung und Hilfsaufgaben fü.) -- C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe [1858048] [PID.4836] =>.MAGIX AG
[MD5.6F2C019C8F823DE0224AFCF1EB67940A] - (.Copyright (C) 2006-2012 Kimmo 'Rainy' Pekkola - Rainlendar2.) -- C:\Program Files (x86)\Rainlendar2\Rainlendar2.exe [2498048] [PID.4664]
[MD5.3F98643DE5CA2479214527E19E410E2D] - (.2011-2017, Guillaume - Captvty.) -- C:\Users\Paul\Desktop\Captvty\Captvty.exe [3789824] [PID.3600] =>.2011-2017, Guillaume
[MD5.E716A50E5EDB0B155AFB6ADE85250902] - (.Malwarebytes - Malwarebytes.) -- C:\Program Files\Malwarebytes\Anti-Malware\mbam.exe [9532880] [PID.4788] =>.Malwarebytes Corporation®
[MD5.D1B6EB82DD40E0408FE86DB43A65ACEB] - (.Nicolas Coolman - ZHPDiag.) -- C:\Users\Paul\AppData\Roaming\ZHP\ZHPDiag3.exe [2943360] [PID.1604] =>.Nicolas Coolman

---\\ Google Chrome, Démarrage,Recherche,Extensions (33) - 1s
G0 - GCSP: Preferences [User Data\Default][HomePage] http://static-cdn.mywot.com
G0 - GCSP: Preferences [User Data\Default][HomePage] http://apis.google.com =>.Google Inc.
G0 - GCSP: Preferences [User Data\Default][HomePage] http://clients5.google.com =>.Google Inc.
G0 - GCSP: Preferences [User Data\Default][HomePage] http://lh3.googleusercontent.com =>.Google Inc.
G0 - GCSP: Preferences [User Data\Default][HomePage] http://notifications.google.com =>.Google Inc.
G0 - GCSP: Preferences [User Data\Default][HomePage] http://ogs.google.com =>.Google Inc.
G0 - GCSP: Preferences [User Data\Default][HomePage] http://s2.googleusercontent.com =>.Google Inc.
G0 - GCSP: Preferences [User Data\Default][HomePage] http://ssl.gstatic.com =>.Google Inc.
G0 - GCSP: Preferences [User Data\Default][HomePage] http://www.google.fr =>.Google Inc.
G0 - GCSP: Preferences [User Data\Default][HomePage] http://www.gstatic.com =>.Google Inc.
G0 - GCSP: Secure Preferences [User Data\Default][HomePage] http://www.google.fr/ =>.Google Inc.
G0 - GCSP: Secure Preferences [User Data\Default][HomePage] http://fr.yahoo.com/ =>.Yahoo! Inc.
G0 - GCSP: Secure Preferences [User Data\Default][HomePage] http://astromenda.com/ =>Adware.AstromendaSearch
G0 - GCSP: Secure Preferences [User Data\Default][HomePage] http://isearch.omiga-plus.com/ =>Adware.OmigaPlus
G0 - GCSP: Secure Preferences [User Data\Default][HomePage] http://Vosteran.com/ =>PUP.Optional.Vosteran
G0 - GCSP: Secure Preferences [User Data\Default][HomePage] http://istart.webssearches.com/ =>Adware.IsStart
G0 - GCSP: Secure Preferences [User Data\Default][HomePage] http://encrypted.google.com =>.Google Inc.
G2 - GCE: Preference [Paul][User Data\Default][bhabmdaokjoiellmihejkfnchgihnhid]
G2 - GCE: Preference [Paul][User Data\Default][kohoehgoafblafjinhplmhcbphgaaobc]
G2 - GCE: Preference [Paul][User Data\Default][kpocjpoifmommoiiiamepombpeoaehfh]
G2 - GCE: Preference [Paul][User Data\Default] [aapocclcgogkmnckokdopfmhonfmgoek] =>.Google Inc. {Slides}
G2 - GCE: Preference [Paul][User Data\Default] [aohghmighlieiainnegkcijnfilokake] =>.Google Inc. {Docs}
G2 - GCE: Preference [Paul][User Data\Default] [apdfllckaahabafndbhieahigkjlhalf] http://drive.google.com/ =>.Google Inc. {Drive}
G2 - GCE: Preference [Paul][User Data\Default] [bhmmomiinigofkjcapegjjndpbikblnp] MyWOT =>.MyWOT
G2 - GCE: Preference [Paul][User Data\Default] [blpcfgokakmgnkcojhhkbfbldkacnbeo] http://www.youtube.com =>.Youtube {Youtube}
G2 - GCE: Preference [Paul][User Data\Default] [efaidnbmnnnibpcajpcglclefindmkaj] =>.Adobe Inc. {Acrobat}
G2 - GCE: Preference [Paul][User Data\Default] [felcaaldnbdncclmgdcncolpebgiejap] =>.Google Inc. {Sheets}
G2 - GCE: Preference [Paul][User Data\Default] [ghbmnnjooekpmoecnnnilnnbdlolhkhi] =>.Google Inc. {Docs hors connexion}
G2 - GCE: Preference [Paul][User Data\Default] [kngglkijfekbhidmchmlfmpkdffmedob] Blockulicious =>.Google Inc. {Blockulicious}
G2 - GCE: Preference [Paul][User Data\Default] [lfogljjmjckmhnblkmnedjkhfdgdebmd] Default
G2 - GCE: Preference [Paul][User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] =>.Google Inc. {Wallet}
G2 - GCE: Preference [Paul][User Data\Default] [pjkljhegncpnkpknbcohdijeoejaedia] http://mail.google.com/ =>.Google Inc. {Gmail}
G2 - GCE: Preference [Paul][User Data\Default] [pkedcjkdefgpdelpbcmbmeomcjbeemfm] Chrome Media Router =>.Google Inc.

---\\ Firefox, Plugins,Demarrage,Recherche,Extensions (1) - 1s
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_27_0_0_187.dll =>.Adobe Systems Incorporated

---\\ Internet Explorer,Démarrage,Recherche,URLSearchHook (18) - 0s
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://google.fr =>.Google Inc.
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = www.google.com =>.Google Inc.
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com =>.Google Inc.
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://home.microsoft.com/ =>.Microsoft Corporation
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.fr/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk =>.Microsoft Corporation
R1 - HKEY_USERS\S-1-5-21-3236533265-2694198059-1176122490-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.fr/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com/ =>.Microsoft Corporation
R3 - URLSearchHook: (no name)[HKCU] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (11.00.9600.18838 (winblue_ltsb.171013-1838)) -- C:\Windows\System32\ieframe.dll =>.Microsoft Corporation

---\\ Internet Explorer,Proxy Management (6) - 0s
R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1
R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
R5 - HKLM\SYSTEM\CurrentControlSet\services\NlaSvc\Parameters\Internet\ManualProxies [] =>.Microsoft

---\\ Internet Explorer,IniFiles, Autoloading programs (3) - 0s
F2 - REG:system.ini: UserInit=userinit.exe (.Microsoft Corporation.) =>.Microsoft Corporation
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe (.Microsoft Corporation.) =>.Microsoft Corporation
F2 - REG:system.ini: VMApplet=C:\Windows\SysWOW64\SystemPropertiesPerformance.exe (.Microsoft Corporation.) =>.Microsoft Corporation

---\\ Etude du fichier hosts (1) - 0s
~ Le fichier hôte est sain (The hosts file is clean) (1)

---\\ Browser Helper Object de navigateur (BHO) (2) - 0s
O2 - BHO: Module complémentaire de navigateur pour la désactivation de Google Analytics [64Bits] - {75EF13CE-B59E-41ba-8A5A-A944031BD8B4} . (.Google, Inc. - .) -- C:\Program Files\Google\Google Analytics Opt-Out\gaoptout_x64.dll =>.Google Inc®
O2 - BHO: Windows Live ID Sign-in Helper [64Bits] - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corp. - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll =>.Microsoft Corporation®

---\\ Internet Explorer, Barre d'outil (1) - 0s
O3 - Toolbar: 0xB1C218236549D4119B18009027A5CD4F - [HKCU]{2318C2B1-4965-11D4-9B18-009027A5CD4F} . (...) -- (.not file.)

---\\ Raccourcis Global Startup (118) - 12s
O4 - GS\Desktop [Administrateur]: AMCap.lnk . (.Noël Danjou - AMCap (Demo Version).) C:\Program Files (x86)\Noël Danjou\AMCap\amcap.exe {22C1B1ADE19185DEEBCAB66333174EFF} =>.Noël Danjou
O4 - GS\Desktop [Administrateur]: Disque local (D) - Raccourci.lnk . (...) D:\
O4 - GS\Desktop [Administrateur]: Disque local (L) - Raccourci.lnk . (...) L:\
O4 - GS\Desktop [Administrateur]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\Desktop [Administrateur]: Microsoft AutoRoute 2007.lnk . (...) C:\Windows\Installer\{C82185E8-C27B-4EF4-2007-3333BC2C2B6D}\ARX_EUR_14_Main_Application_icon.exe
O4 - GS\Desktop [Administrateur]: Nouveau nom (C) - Raccourci.lnk . (...) C:\
O4 - GS\Desktop [Administrateur]: PowerpointImageExtractor V1.2b.lnk . (.--- - .) C:\Program Files (x86)\PowerpointImageExtractor_V1_2\PowerpointImageExtractor.exe
O4 - GS\Desktop [Administrateur]: Seagate Expansion Drive (H) - Raccourci.lnk . (...) H:\
O4 - GS\Desktop [Administrateur]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\Paul\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman
O4 - GS\Quicklaunch [Administrateur]: Chromium.lnk . (.The Chromium Authors - Chromium.) C:\Users\Paul\AppData\Local\chromium\Application\chrome.exe =>.The Chromium Authors
O4 - GS\Quicklaunch [Administrateur]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\Quicklaunch [Administrateur]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files (x86)\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O4 - GS\Quicklaunch [Administrateur]: Nero Home.lnk . (.Nero AG - Nero Home.) C:\Program Files (x86)\Nero\Nero8\Nero Home\NeroHome.exe -ScParameter=65 =>.Nero AG®
O4 - GS\Quicklaunch [Administrateur]: Nero StartSmart.lnk . (.Nero AG - Nero StartSmart 8 Application.) C:\Program Files (x86)\Nero\Nero8\Nero StartSmart\NeroStartSmart.exe -ScParameter=65 =>.Nero AG®
O4 - GS\Quicklaunch [Administrateur]: Picasa 3.lnk . (.Google Inc. - Picasa.) C:\Program Files (x86)\Google\Picasa3\Picasa3.exe =>.Google Inc®
O4 - GS\Quicklaunch [Administrateur]: System Explorer.lnk . (.Mister Group - System Explorer.) C:\Program Files (x86)\System Explorer\SystemExplorer.exe =>.Miroslav Topolar®
O4 - GS\sendTo [Administrateur]: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\Windows\system32\WFS.exe /SendTo =>.Microsoft Corporation
O4 - GS\sendTo [Administrateur]: Format Factory.lnk . (.Free Time - FormatFactory.) C:\Program Files (x86)\FormatFactory\FormatFactory.exe =>.Free Time
O4 - GS\sendTo [Administrateur]: Skype.lnk . (.Skype Technologies S.A. - Skype.) C:\Program Files (x86)\Skype\Phone\Skype.exe /sendto: =>.Skype Software Sarl®
O4 - GS\sendTo [Administrateur]: TeamViewer.lnk . (.TeamViewer GmbH - TeamViewer 12.) C:\Program Files (x86)\TeamViewer\TeamViewer.exe --sendto =>.TeamViewer GmbH®
O4 - GS\TaskBar [Administrateur]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\TaskBar [Administrateur]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files (x86)\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O4 - GS\TaskBar [Administrateur]: Windows Explorer.lnk . (.Microsoft Corporation - Explorateur Windows.) C:\Windows\explorer.exe =>.Microsoft Corporation
O4 - GS\TaskBar [Administrateur]: Windows Media Player.lnk . (.Microsoft Corporation - Lecteur Windows Media.) C:\Program Files (x86)\Windows Media Player\wmplayer.exe /prefetch:1 =>.Microsoft Corporation
O4 - GS\Startup [Administrateur]: Superviser les alertes relatives aux cartouches - HP ENVY 4520 series.lnk . (.Microsoft Corporation - Processus hôte Windows (Rundll32).) C:\Windows\system32\RunDll32.exe "C:\Program Files\HP\HP ENVY 4520 series\bin\HPStatusBL.dll",RunDLLEntry SERIALNUMBER=TH6243G0KC0660;CONNECTION=USB;MONITOR=1; =>..Microsoft Corporation
O4 - GS\Programs [Administrateur]: Chromium.lnk . (.The Chromium Authors - Chromium.) C:\Users\Paul\AppData\Local\chromium\Application\chrome.exe =>.The Chromium Authors
O4 - GS\Programs [Administrateur]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files (x86)\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O4 - GS\Programs [Administrateur]: Microsoft OneDrive.lnk . (.Microsoft Corporation - Microsoft OneDrive.) C:\Users\Paul\AppData\Local\Microsoft\OneDrive\OneDrive.exe =>.Microsoft Corporation®
O4 - GS\Desktop [Paul]: AMCap.lnk . (.Noël Danjou - AMCap (Demo Version).) C:\Program Files (x86)\Noël Danjou\AMCap\amcap.exe {22C1B1ADE19185DEEBCAB66333174EFF} =>.Noël Danjou
O4 - GS\Desktop [Paul]: Disque local (D) - Raccourci.lnk . (...) D:\
O4 - GS\Desktop [Paul]: Disque local (L) - Raccourci.lnk . (...) L:\
O4 - GS\Desktop [Paul]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\Desktop [Paul]: Microsoft AutoRoute 2007.lnk . (...) C:\Windows\Installer\{C82185E8-C27B-4EF4-2007-3333BC2C2B6D}\ARX_EUR_14_Main_Application_icon.exe
O4 - GS\Desktop [Paul]: Nouveau nom (C) - Raccourci.lnk . (...) C:\
O4 - GS\Desktop [Paul]: PowerpointImageExtractor V1.2b.lnk . (.--- - .) C:\Program Files (x86)\PowerpointImageExtractor_V1_2\PowerpointImageExtractor.exe
O4 - GS\Desktop [Paul]: Seagate Expansion Drive (H) - Raccourci.lnk . (...) H:\
O4 - GS\Desktop [Paul]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\Paul\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman
O4 - GS\Quicklaunch [Paul]: Chromium.lnk . (.The Chromium Authors - Chromium.) C:\Users\Paul\AppData\Local\chromium\Application\chrome.exe =>.The Chromium Authors
O4 - GS\Quicklaunch [Paul]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\Quicklaunch [Paul]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files (x86)\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O4 - GS\Quicklaunch [Paul]: Nero Home.lnk . (.Nero AG - Nero Home.) C:\Program Files (x86)\Nero\Nero8\Nero Home\NeroHome.exe -ScParameter=65 =>.Nero AG®
O4 - GS\Quicklaunch [Paul]: Nero StartSmart.lnk . (.Nero AG - Nero StartSmart 8 Application.) C:\Program Files (x86)\Nero\Nero8\Nero StartSmart\NeroStartSmart.exe -ScParameter=65 =>.Nero AG®
O4 - GS\Quicklaunch [Paul]: Picasa 3.lnk . (.Google Inc. - Picasa.) C:\Program Files (x86)\Google\Picasa3\Picasa3.exe =>.Google Inc®
O4 - GS\Quicklaunch [Paul]: System Explorer.lnk . (.Mister Group - System Explorer.) C:\Program Files (x86)\System Explorer\SystemExplorer.exe =>.Miroslav Topolar®
O4 - GS\sendTo [Paul]: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\Windows\system32\WFS.exe /SendTo =>.Microsoft Corporation
O4 - GS\sendTo [Paul]: Format Factory.lnk . (.Free Time - FormatFactory.) C:\Program Files (x86)\FormatFactory\FormatFactory.exe =>.Free Time
O4 - GS\sendTo [Paul]: Skype.lnk . (.Skype Technologies S.A. - Skype.) C:\Program Files (x86)\Skype\Phone\Skype.exe /sendto: =>.Skype Software Sarl®
O4 - GS\sendTo [Paul]: TeamViewer.lnk . (.TeamViewer GmbH - TeamViewer 12.) C:\Program Files (x86)\TeamViewer\TeamViewer.exe --sendto =>.TeamViewer GmbH®
O4 - GS\TaskBar [Paul]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\TaskBar [Paul]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files (x86)\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O4 - GS\TaskBar [Paul]: Windows Explorer.lnk . (.Microsoft Corporation - Explorateur Windows.) C:\Windows\explorer.exe =>.Microsoft Corporation
O4 - GS\TaskBar [Paul]: Windows Media Player.lnk . (.Microsoft Corporation - Lecteur Windows Media.) C:\Program Files (x86)\Windows Media Player\wmplayer.exe /prefetch:1 =>.Microsoft Corporation
O4 - GS\Startup [Paul]: Superviser les alertes relatives aux cartouches - HP ENVY 4520 series.lnk . (.Microsoft Corporation - Processus hôte Windows (Rundll32).) C:\Windows\system32\RunDll32.exe "C:\Program Files\HP\HP ENVY 4520 series\bin\HPStatusBL.dll",RunDLLEntry SERIALNUMBER=TH6243G0KC0660;CONNECTION=USB;MONITOR=1; =>..Microsoft Corporation
O4 - GS\Programs [Paul]: Chromium.lnk . (.The Chromium Authors - Chromium.) C:\Users\Paul\AppData\Local\chromium\Application\chrome.exe =>.The Chromium Authors
O4 - GS\Programs [Paul]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files (x86)\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O4 - GS\Programs [Paul]: Microsoft OneDrive.lnk . (.Microsoft Corporation - Microsoft OneDrive.) C:\Users\Paul\AppData\Local\Microsoft\OneDrive\OneDrive.exe =>.Microsoft Corporation®
O4 - GS\CommonDesktop [Public]: Acrobat Reader 5.0.lnk . (.Adobe Systems Incorporated - Acrobat Reader 5.0.) C:\Program Files (x86)\Adobe\Acrobat 5.0\Reader\AcroRd32.exe =>.Adobe Systems Incorporated
O4 - GS\CommonDesktop [Public]: Acrobat Reader DC.lnk . (.Adobe Systems Incorporated - Adobe Acrobat Reader DC.) C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe =>.Adobe Systems, Incorporated®
O4 - GS\CommonDesktop [Public]: Adobe Digital Editions 4.5.lnk . (.Adobe Systems Incorporated - Adobe Digital Editions 4.5.2.) C:\Program Files (x86)\Adobe\Adobe Digital Editions 4.5\DigitalEditions.exe =>.Adobe Systems Incorporated®
O4 - GS\CommonDesktop [Public]: Adobe Digital Editions.lnk . (.Adobe Systems, Inc. - Adobe Digital Editions.) C:\Program Files (x86)\Adobe\Adobe Digital Editions\digitaleditions.exe =>.Adobe Systems, Inc.
O4 - GS\CommonDesktop [Public]: Kobo.lnk . (.(c) 2017 Rakuten Kobo, Inc - Kobo Desktop Edition.) C:\Program Files (x86)\Kobo\Kobo.exe =>.Rakuten Kobo Inc.®
O4 - GS\CommonDesktop [Public]: MAGIX Audio Cleanic 2007 deluxe.lnk . (.MAGIX AG - MAGIX Audio Cleanic deluxe.) C:\MAGIX\Audio_Cleanic_2007_deluxe\audiocleanic.exe =>.MAGIX AG
O4 - GS\CommonDesktop [Public]: MAGIX Photostory 2016 Deluxe.lnk . (.MAGIX Software GmbH - .) C:\Program Files (x86)\MAGIX\Photostory 2016 Deluxe\Fotos_dlx.exe =>.MAGIX Software GmbH
O4 - GS\CommonDesktop [Public]: Nero StartSmart.lnk . (.Nero AG - Nero StartSmart 8 Application.) C:\Program Files (x86)\Nero\Nero8\Nero StartSmart\NeroStartSmart.exe -ScParameter=65 =>.Nero AG®
O4 - GS\CommonDesktop [Public]: Skype.lnk . (...) C:\Windows\Installer\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}\SkypeIcon.exe =>.Skype Technologies
O4 - GS\CommonDesktop [Public]: VLC media player.lnk . (...) C:\Program Files (x86)\VideoLAN\VLC\vlc.exe =>.VideoLan Team
O4 - GS\Programs [Public]: Chromium.lnk . (.The Chromium Authors - Chromium.) C:\Users\Paul\AppData\Local\chromium\Application\chrome.exe =>.The Chromium Authors
O4 - GS\Programs [Public]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files (x86)\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O4 - GS\Programs [Public]: Microsoft OneDrive.lnk . (.Microsoft Corporation - Microsoft OneDrive.) C:\Users\Paul\AppData\Local\Microsoft\OneDrive\OneDrive.exe =>.Microsoft Corporation®
O4 - GS\Accessories [Public]: Command Prompt.lnk . (.Microsoft Corporation - Interpréteur de commandes Windows.) C:\Windows\system32\cmd.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Notepad.lnk . (.Microsoft Corporation - Bloc-notes.) C:\Windows\system32\notepad.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Windows Explorer.lnk . (.Microsoft Corporation - Explorateur Windows.) C:\Windows\explorer.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files (x86)\Internet Explorer\iexplore.exe -extoff =>.Microsoft Corporation®
O4 - GS\SystemTools [Public]: Private Character Editor.lnk . (.Microsoft Corporation - Éditeur de caractères privés.) C:\Windows\system32\eudcedit.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Calculator.lnk . (.Microsoft Corporation - Calculatrice de Windows.) C:\Windows\system32\calc.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: displayswitch.lnk . (.Microsoft Corporation - Afficher le commutateur.) C:\Windows\system32\displayswitch.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Math Input Panel.lnk . (.Microsoft Corporation - Accessoire du panneau de saisie mathématiqu.) C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\mip.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Mobility Center.lnk . (.Microsoft Corporation - Centre de mobilité Windows.) C:\Windows\system32\mblctr.exe /open =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Paint.lnk . (.Microsoft Corporation - Paint.) C:\Windows\system32\mspaint.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Remote Desktop Connection.lnk . (.Microsoft Corporation - Connexion Bureau à distance.) C:\Windows\system32\mstsc.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Snipping Tool.lnk . (.Microsoft Corporation - Outil Capture.) C:\Windows\system32\SnippingTool.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Sound Recorder.lnk . (.Microsoft Corporation - Magnétophone Windows.) C:\Windows\system32\SoundRecorder.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Sticky Notes.lnk . (.Microsoft Corporation - Pense-bête.) C:\Windows\system32\StikyNot.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Sync Center.lnk . (.Microsoft Corporation - Microsoft Sync Center.) C:\Windows\System32\mobsync.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Welcome Center.lnk . (.Microsoft Corporation - Processus hôte Windows (Rundll32).) C:\Windows\system32\rundll32.exe %SystemRoot%\system32\OobeFldr.dll,ShowWelcomeCenter LaunchedBy_StartMenuShortcut =>..Microsoft Corporation
O4 - GS\Accessories [Public]: Wordpad.lnk . (.Microsoft Corporation - Application Windows Wordpad.) C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: Character Map.lnk . (.Microsoft Corporation - Table des caractères.) C:\Windows\system32\charmap.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: dfrgui.lnk . (.Microsoft Corporation - Défragmenteur de disque Microsoft®.) C:\Windows\system32\dfrgui.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: Disk Cleanup.lnk . (.Microsoft Corporation - Gestionnaire de nettoyage de disque pour Wi.) C:\Windows\system32\cleanmgr.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: Resource Monitor.lnk . (.Microsoft Corporation - Moniteur de ressources et de performances.) C:\Windows\system32\perfmon.exe /res =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: System Information.lnk . (.Microsoft Corporation - Informations système.) C:\Windows\system32\msinfo32.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: System Restore.lnk . (.Microsoft Corporation - Restauration du système de Microsoft® Windo.) C:\Windows\system32\rstrui.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: Task Scheduler.lnk . (...) C:\Windows\system32\taskschd.msc /s =>..Microsoft Corporation
O4 - GS\SystemTools [Public]: Windows Easy Transfer Reports.lnk . (.Microsoft Corporation - Application post-migration de transfert de.) C:\Windows\system32\migwiz\postmig.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: Windows Easy Transfer.lnk . (.Microsoft Corporation - Application Transfert de fichiers et paramè.) C:\Windows\system32\migwiz\migwiz.exe =>.Microsoft Corporation
O4 - GS\ProgramsCommon [Public]: Acrobat Reader 5.0.lnk . (.Adobe Systems Incorporated - Acrobat Reader 5.0.) C:\Program Files (x86)\Adobe\Acrobat 5.0\Reader\AcroRd32.exe =>.Adobe Systems Incorporated
O4 - GS\ProgramsCommon [Public]: Acrobat Reader DC.lnk . (.Flexera Software LLC - InstallShield.) C:\Windows\Installer\{AC76BA86-7AD7-1036-7B44-AC0F074E4100}\SC_Reader.ico =>.Flexera Software LLC
O4 - GS\ProgramsCommon [Public]: Acrobat Reader DC.lnk . (.Flexera Software LLC - InstallShield.) C:\Windows\Installer\{AC76BA86-7AD7-1036-7B44-AC0F074E4100}\SC_Reader.ico =>.Flexera Software LLC
O4 - GS\ProgramsCommon [Public]: Apple Software Update.lnk . (...) C:\Windows\Installer\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}\AppleSoftwareUpdateIco.exe =>.Apple Inc.
O4 - GS\ProgramsCommon [Public]: Express Rip.lnk . (.NCH Software - Express Rip.) C:\Program Files (x86)\NCH Software\ExpressRip\expressrip.exe =>.NCH Software®
O4 - GS\ProgramsCommon [Public]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\ProgramsCommon [Public]: Media Center.lnk . (.Microsoft Corporation - Windows Media Center.) C:\Windows\ehome\ehshell.exe =>.Microsoft Corporation
O4 - GS\ProgramsCommon [Public]: Microsoft AutoRoute 2007.lnk . (...) C:\Windows\Installer\{C82185E8-C27B-4EF4-2007-3333BC2C2B6D}\ARX_EUR_14_Main_Application_icon.exe
O4 - GS\ProgramsCommon [Public]: Microsoft Security Essentials.lnk . (.Microsoft Corporation - .) C:\Program Files (x86)\Microsoft Security Client\msseces.exe =>.Microsoft Corporation
O4 - GS\ProgramsCommon [Public]: PowerpointImageExtractor V1.2b.lnk . (.--- - .) C:\Program Files (x86)\PowerpointImageExtractor_V1_2\PowerpointImageExtractor.exe
O4 - GS\ProgramsCommon [Public]: Sidebar.lnk . (.Microsoft Corporation - Gadgets du Bureau Windows.) C:\Program Files (x86)\Windows Sidebar\sidebar.exe /showgadgets =>.Microsoft Corporation
O4 - GS\ProgramsCommon [Public]: Switch - Convertisseur de fichiers audio.lnk . (.NCH Software - Switch - Convertisseur de fichiers audio.) C:\Program Files (x86)\NCH Software\Switch\switch.exe =>.NCH Software®
O4 - GS\ProgramsCommon [Public]: TeamViewer 12.lnk . (.TeamViewer GmbH - TeamViewer 12.) C:\Program Files (x86)\TeamViewer\TeamViewer.exe =>.TeamViewer GmbH®
O4 - GS\ProgramsCommon [Public]: Visionneuse Microsoft Office PowerPoint 2007.lnk . (...) C:\Windows\Installer\{95120000-00AF-040C-0000-0000000FF1CE}\ppvwicon.exe =>.Microsoft Corporation®
O4 - GS\ProgramsCommon [Public]: Visionneuse Microsoft PowerPoint .lnk . (...) C:\Windows\Installer\{95140000-00AF-040C-0000-0000000FF1CE}\ppvwicon.exe =>.Microsoft Corporation®
O4 - GS\ProgramsCommon [Public]: Windows Anytime Upgrade.lnk . (.Microsoft Corporation - Interface utilisateur de Mise à niveau expr.) C:\Windows\system32\WindowsAnytimeUpgradeUI.exe =>.Microsoft Corporation
O4 - GS\ProgramsCommon [Public]: Windows DVD Maker.lnk . (.Microsoft Corporation - .) C:\Program Files (x86)\DVD Maker\DVDMaker.exe =>.Microsoft Corporation
O4 - GS\ProgramsCommon [Public]: Windows Fax and Scan.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\Windows\system32\WFS.exe =>.Microsoft Corporation
O4 - GS\ProgramsCommon [Public]: Windows Live Mail.lnk . (.Microsoft Corporation - Windows Live Mail.) C:\Program Files (x86)\Windows Live\Mail\wlmail.exe =>.Microsoft Corporation®
O4 - GS\ProgramsCommon [Public]: Windows Live Messenger.lnk . (.Microsoft Corporation - Windows Live Messenger.) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe =>.Microsoft Corporation®
O4 - GS\ProgramsCommon [Public]: Windows Media Player.lnk . (.Microsoft Corporation - Lecteur Windows Media.) C:\Program Files (x86)\Windows Media Player\wmplayer.exe /prefetch:1 =>.Microsoft Corporation
O4 - GS\ProgramsCommon [Public]: Windows Movie Maker 2.6.lnk . (.Microsoft Corporation - Windows Movie Maker.) C:\Windows\Installer\{B3DAF54F-DB25-4586-9EF1-96D24BB14088}\MOVIEMK.exe =>.Microsoft Corporation
O4 - GS\ProgramsCommon [Public]: XPS Viewer.lnk . (.Microsoft Corporation - Visionneuse XPS.) C:\Windows\system32\xpsrchvw.exe =>.Microsoft Corporation

---\\ Modification Domaine/Adresses DNS (3) - 0s
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 =>.Local IP Adress
O17 - HKLM\System\CCS\Services\Tcpip\..\{45894EA8-DA24-4FA2-9EFD-B83869063279}: DhcpNameServer = 192.168.1.1 =>.Local IP Adress
O17 - HKLM\System\CCS\Services\Tcpip\..\{5D27A284-232A-4E5C-9F73-8AAE9C91FDD2}: DhcpNameServer = 192.168.1.1 =>.Local IP Adress

---\\ Protocole additionnel (21) - 1s
O18 - Handler: about [64Bits] - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation
O18 - Handler: cdl [64Bits] - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: dvd [64Bits] - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\MSVidCtl.dll =>.Microsoft Corporation
O18 - Handler: file [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: ftp [64Bits] - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: http [64Bits] - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: https [64Bits] - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll =>.Microsoft Corporation
O18 - Handler: javascript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation
O18 - Handler: local [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: mailto [64Bits] - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation
O18 - Handler: mhtml [64Bits] - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\System32\inetcomm.dll =>.Microsoft Corporation
O18 - Handler: mk [64Bits] - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: ms-its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll =>.Microsoft Corporation
O18 - Handler: res [64Bits] - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation
O18 - Handler: tv [64Bits] - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\MSVidCtl.dll =>.Microsoft Corporation
O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation
O18 - Filter: application/octet-stream [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation®
O18 - Filter: application/x-complus [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation®
O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation®
O18 - Filter: text/xml [64Bits] - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL =>.Microsoft Corporation®

---\\ Logiciels installés (180) - 23s
O42 - Logiciel: 530TX - (.D-Link.) [HKLM][64Bits] -- {F2BB456F-C07B-4EDE-975F-4D6DED19750A} =>.D-Link
O42 - Logiciel: 7-Zip 16.04 - (.Igor Pavlov.) [HKLM][64Bits] -- 7-Zip =>.Igor Pavlov
O42 - Logiciel: Adobe Acrobat 4.0, 5.0 - (.Adobe Systems, Inc..) [HKLM][64Bits] -- Adobe Acrobat 5.0 =>.Adobe Systems, Inc.
O42 - Logiciel: Adobe Acrobat 8 Professional - English, Français, Deutsch - (.Adobe Systems.) [HKLM][64Bits] -- {AC76BA86-1033-F400-7760-000000000003} =>.Adobe Systems
O42 - Logiciel: Adobe Acrobat Reader DC - Français - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-7AD7-1036-7B44-AC0F074E4100} =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe After Effects CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {EB0202F7-016A-410C-ADE4-40F848CCC661} =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe After Effects CS3 Presets - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {193EAFD0-1BAF-4FB4-B18F-79D5D6A4B285} =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe Anchor Service CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {90176341-0A8B-4CCC-A78D-F862228A6B95} =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe Asset Services CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {6FF5DD7A-FE28-4439-B8CF-1E9AF4EA0A61} =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe Bridge CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {9C9824D9-9000-4373-A6A5-D0E5D4831394} =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe Bridge Start Meeting - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {08B32819-6EEF-4057-AEDA-5AB681A36A23} =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe BridgeTalk Plugin CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {B73CFB12-C814-4638-AFFD-7E3AAFAF0B4E} =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe Camera Raw 4.0 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {B3BF6689-A81D-40D8-9A86-4AC4ACD9FC1C} =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe CMaps - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {A2B242BD-FF8D-4840-9DAA-9170EABEC59C} =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe Color - Photoshop Specific - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {A2D81E70-2A98-4A08-A628-94388B063C5E} =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe Color Common Settings - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {DADD7B8A-BCB0-44F5-967A-ECB6B4F2ECD9} =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe Color EU Recommended Settings - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {73B5D990-04EA-4751-B10F-5534770B91F2} =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe Color JA Extra Settings - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {DD7DB3C5-6FA3-4FA3-8A71-C2F2940EB029} =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe Color NA Extra Settings - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {FF29A7E2-FF40-4D07-B7E4-2093DE59E10A} =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe Contribute CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {F84ADE4E-9220-4324-994D-801EDD9DD251} =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe Creative Suite 3 Master Collection - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {5D2398DF-3022-4820-93BA-F1175FBEA9CA} =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe Default Language CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {B9B35331-B7E4-4E5C-BF4C-7BC87856124D} =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe Device Central CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {8D2BA474-F406-4710-9AE4-D4F22D21F0DD} =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe Digital Editions - (.Adobe Inc..) [HKLM][64Bits] -- Digital Editions =>.Adobe Inc.
O42 - Logiciel: Adobe Digital Editions 4.5 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Digital Editions 4.5 =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe Dreamweaver CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {4BDB76C6-902E-41D5-9064-68768E02886B} =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe Encore CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {54B2EAD9-A110-43F7-B010-2859A1BD2AFE} =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe Encore CS3 Codecs - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {B8B7A4D8-80E1-4DAE-BD33-7FD535BA3931} =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe ExtendScript Toolkit 2 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {C2D69781-F392-4118-A5A7-C7E9C38DBFC2} =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe Extension Manager CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {BE5F3842-8309-4754-92D5-83E02E6077A3} =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe Fireworks CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {21C4D775-368A-46C4-8DC3-4207165B7115} =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe Flash CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {80FD3971-8482-49C8-BA8C-B6464A15882F} =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe Flash Player 27 ActiveX - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player ActiveX =>.Adobe Systems Incorporated®
O42 - Logiciel: Adobe Flash Player 27 NPAPI - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player NPAPI =>.Adobe Systems Incorporated®
O42 - Logiciel: Adobe Flash Player 27 PPAPI - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player PPAPI =>.Adobe Systems Incorporated®
O42 - Logiciel: Adobe Flash Video Encoder - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {1B0BCA28-1F11-4D60-8A2F-DEBE04B5341E} =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe Fonts All - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {6ABE0BEE-D572-4FE8-B434-9E72A289431B} =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe Help Viewer CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {7ACFB90E-8FD0-4397-AD3A-5195412623A3} =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe Illustrator CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {6E08CE13-C2AB-4749-9335-5900B958929E} =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe InDesign CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {FE8327F9-3AC1-4586-8C7E-3DEE2BC92441} =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe InDesign CS3 Icon Handler - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {EA7B3CC4-366D-4CF6-8350-FD7A7034116E} =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe Linguistics CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {54793AA1-5001-42F4-ABB6-C364617C6078} =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe MotionPicture Color Files - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {6B708481-748A-4EB4-97C1-CD386244FF77} =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe PDF Library Files - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {D2559B88-CC9D-4B48-81BB-F492BAA9C48C} =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe Photoshop CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {C1FA4B3B-1625-4922-9C9D-780E8FCE161A} =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe Premiere Pro CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {58DCEEE5-532E-44F4-B1D7-A146EF9E9FDA} =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe Premiere Pro CS3 Functional Content - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {50F102CA-4BE2-41A9-9810-5BB05EB91B9A} =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe Premiere Pro CS3 Third Party Content - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {485ACF57-F364-440A-8496-E1E81C8FA1AA} =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe Refresh Manager - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-0804-1033-1959-001824245926} =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe Setup - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {1628F6BD-5ED1-4FD1-B90F-C106AF4E00F0} =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe SING CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {B671CBFD-4109-4D35-9252-3062D3CCB7B2} =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe Soundbooth CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {A6B23EFA-6590-482C-A11F-5ACE1B91F5B9} =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe Soundbooth CS3 Codecs - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {0327FA9D-975C-448C-A086-577D57BB25B8} =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe Stock Photos CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {29E5EA97-5F74-4A57-B8B2-D4F169117183} =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe Type Support - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {8E6808E2-613D-4FCD-81A2-6C8FA8E03312} =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe Update Manager CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {E69AE897-9E0B-485C-8552-7841F48D42D8} =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe Version Cue CS3 Client - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {D0DFF92A-492E-4C40-B862-A74A173C25C5} =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe Version Cue CS3 Server - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {1D58229F-C505-45CA-8223-F35F3A34B963} =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe Video Profiles - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {845A8DB9-8802-4FD3-9FE3-938A6C46A2EC} =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe WAS CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {C5BD220A-EFE8-48A5-B70E-9503D535FACE} =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe WinSoft Linguistics Plugin - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {184CE391-7E0E-4C63-9935-D7A10EDFD3C6} =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe XMP DVA Panels CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {0224CACC-994D-45F8-B973-D65056EA9C2F} =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe XMP Panels CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {D5A31AB1-345D-47C7-A87B-036A669F6DF1} =>.Adobe Systems Incorporated
O42 - Logiciel: AHV content for Acrobat and Flash - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {6BBAA81D-6A7E-43AD-8889-2F002DCAAFDD} =>.Adobe Systems Incorporated
O42 - Logiciel: Ajouter ou supprimer Adobe Creative Suite 3 Master Collection - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe_b5d5789539ea1f004a4defceea74312 =>.Adobe Systems Incorporated®
O42 - Logiciel: AMCap - (.Noël Danjou.) [HKLM][64Bits] -- AMCap =>.Noël Danjou
O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM][64Bits] -- {46F044A5-CE8B-4196-984E-5BD6525E361D} =>.Apple Inc.
O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM][64Bits] -- {789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE} =>.Apple Inc.
O42 - Logiciel: Bel Atout 5.50 - (.Vincent Brévart.) [HKLM][64Bits] -- BelAtoutFr_is1 =>.Vincent Brévart
O42 - Logiciel: CCleaner - (.Piriform.) [HKLM][64Bits] -- CCleaner =>.Piriform Ltd®
O42 - Logiciel: CDex extraction audio - (..) [HKLM][64Bits] -- CDex
O42 - Logiciel: Creative Pack Volume 1 - (.Corel Corporation.) [HKLM][64Bits] -- {05181A78-3BA6-4B63-BCE8-888A4BCAACFA} =>.Corel Corporation
O42 - Logiciel: CyberLink PhotoNow - (.CyberLink Corp..) [HKLM][64Bits] -- {D36DD326-7280-11D8-97C8-000129760CBE} =>.CyberLink Corp.
O42 - Logiciel: CyberLink PowerDirector - (.CyberLink Corp..) [HKLM][64Bits] -- {CB099890-1D5F-11D5-9EA9-0050BAE317E1} =>.CyberLink Corp.
O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM][64Bits] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF} =>.Microsoft
O42 - Logiciel: Dazzle Video Capture DVC100 X64 Driver 1.06 - (.Pinnacle.) [HKLM][64Bits] -- {BFF23267-1D19-444E-93E2-E5059BE805EA} =>.Pinnacle
O42 - Logiciel: DFE-530TX Driver - (.D-Link.) [HKLM][64Bits] -- InstallShield_{F2BB456F-C07B-4EDE-975F-4D6DED19750A} =>.D-Link
O42 - Logiciel: E.M. PowerPoint Video Converter 3.20 - (.EffectMatrix, Inc..) [HKLM][64Bits] -- E.M. PowerPoint Video Converter_is1 =>.EffectMatrix, Inc.
O42 - Logiciel: Étude pour l'amélioration du produit HP ENVY 4520 series - (.HP Inc..) [HKLM][64Bits] -- {A4A64935-E38B-4DB0-97C5-452928C381C1} =>.HP Inc.
O42 - Logiciel: Express Rip - (.NCH Software.) [HKLM][64Bits] -- ExpressRip =>.NCH Software®
O42 - Logiciel: FastStone Capture 5.3 (French) - (.FastStone Soft.) [HKLM][64Bits] -- FastStone Capture =>.FastStone Soft
O42 - Logiciel: Filmmaker's Toolkit for Studio - (.Red Giant.) [HKLM][64Bits] -- {2444562A-A7DC-42B8-A4D8-1BCF704B1480} =>.Red Giant
O42 - Logiciel: Filmmaker's Toolkit for Studio - (.Red Giant.) [HKLM][64Bits] -- InstallShield_{2444562A-A7DC-42B8-A4D8-1BCF704B1480} =>.Red Giant
O42 - Logiciel: Firebird SQL Server - MAGIX Edition - (.MAGIX AG.) [HKLM][64Bits] -- {39AB2E37-1A55-4292-A5D3-971E9F70D0F8} =>.MAGIX AG
O42 - Logiciel: FormatFactory 3.8.0.0 - (.Free Time.) [HKLM][64Bits] -- FormatFactory =>.Free Time
O42 - Logiciel: Fotor 3.0.0 - (.Everimaging Co., Ltd..) [HKLM][64Bits] -- Fotor =>.Everimaging Co., Ltd.
O42 - Logiciel: FoxTarot version 5.2 - (.Fabrice RENARD.) [HKLM][64Bits] -- {DF3DD8E3-BD6C-4D57-B20D-3FED6D36716F}_is1 =>.Fabrice RENARD
O42 - Logiciel: Fraps - (.Beepa.) [HKLM][64Bits] -- Fraps =>.Beepa
O42 - Logiciel: Free PDF to Word Doc Converter v1.1 - (.www.hellopdf.com.) [HKLM][64Bits] -- Free PDF to Word Doc Converter_is1 =>.www.hellopdf.com
O42 - Logiciel: Free YouTube Download - (.Digital Wave Ltd.) [HKLM][64Bits] -- Free YouTube Download_is1 =>.Digital Wave Ltd®
O42 - Logiciel: Free YouTube To MP3 Converter - (.Digital Wave Ltd.) [HKLM][64Bits] -- Free YouTube To MP3 Converter_is1 =>.Digital Wave Ltd®
O42 - Logiciel: Freemake Video Converter version 4.1.10 - (.Ellora Assets Corporation.) [HKLM][64Bits] -- Freemake Video Converter_is1 =>.Ellora Assets Corporation
O42 - Logiciel: Gadwin PrintScreen - (.Gadwin Systems, Inc..) [HKLM][64Bits] -- Gadwin PrintScreen =>.Gadwin Systems, Inc.
O42 - Logiciel: Gadwin PrintScreen (64-Bit) - (.Gadwin Systems.) [HKLM][64Bits] -- {819A52E1-0929-469A-BEB6-1AEBE0873CFC} =>.Gadwin Systems
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM][64Bits] -- Google Chrome =>.Google Inc®
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {60EC980A-BDA2-4CB6-A427-B07A5498B4CA} =>.Google Inc.
O42 - Logiciel: GWX Control Panel - (.UltimateOutsider.) [HKLM][64Bits] -- UltimateOutsider_GwxControlPanel =>.UltimateOutsider
O42 - Logiciel: Hollywood FX Volumes 1-3 - (.Corel Corporation.) [HKLM][64Bits] -- {E3D181F8-246B-497F-945E-6DB98CBA6677} =>.Corel Corporation
O42 - Logiciel: HP Dropbox Plugin - (.HP.) [HKLM][64Bits] -- {6401399A-F5DA-4C04-87AA-E8107DF00751} =>.HP
O42 - Logiciel: HP ENVY 4520 series Aide - (.Hewlett Packard.) [HKLM][64Bits] -- {D9C0AB86-384B-49FF-A667-717724F07740} =>.Hewlett Packard
O42 - Logiciel: HP Google Drive Plugin - (.HP.) [HKLM][64Bits] -- {63BCC696-0FB4-4E9C-8144-2DA4F248FC17} =>.HP
O42 - Logiciel: HP Photo Creations - (.HP.) [HKLM][64Bits] -- HP Photo Creations =>.Visan Industries®
O42 - Logiciel: Icecream Ebook Reader version 4.12 - (.Icecream Apps.) [HKLM][64Bits] -- {B8C30F0F-1F23-49E1-A3ED-44DE17660EE2}_is1 =>.Icecream Apps
O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM][64Bits] -- {0BE9E708-5DC0-4963-9CFD-0AA519090E79} =>.Microsoft Corporation
O42 - Logiciel: Kobo - (.Rakuten Kobo Inc..) [HKLM][64Bits] -- Kobo =>.Rakuten Kobo Inc.
O42 - Logiciel: Leawo PowerPoint to Video Pro version 2.6.0.68 - (.Leawo Software.) [HKLM][64Bits] -- {5D5CB188-F9B1-4103-B2AD-07FB33068377}_is1 =>.Leawo Software
O42 - Logiciel: Logiciel de base du périphérique HP ENVY 4520 series - (.HP Inc..) [HKLM][64Bits] -- {3FFE72AE-0C03-4126-A3C8-EBF4D409C991} =>.HP Inc.
O42 - Logiciel: MAGIX Audio Cleanic 2007 deluxe 8.0.1.0 (F) - (.MAGIX AG.) [HKLM][64Bits] -- MAGIX Audio Cleanic 2007 deluxe F =>.Magix AG®
O42 - Logiciel: MAGIX Photo Manager 2007 4.1.0.839 (F) - (.MAGIX AG.) [HKLM][64Bits] -- MAGIX Photo Manager 2007 F =>.Magix AG®
O42 - Logiciel: MAGIX Photostory 2016 Deluxe - (.MAGIX Software GmbH.) [HKLM][64Bits] -- {ECB1D699-CD60-43A6-A8E4-936C58076BB5} =>.MAGIX Software GmbH
O42 - Logiciel: MAGIX Photostory 2016 Deluxe - (.MAGIX Software GmbH.) [HKLM][64Bits] -- MX.{ECB1D699-CD60-43A6-A8E4-936C58076BB5} =>.MAGIX Software GmbH®
O42 - Logiciel: MAGIX Speed burnR (MSI) - (.MAGIX Software GmbH.) [HKLM][64Bits] -- {1FB741B2-E3C1-4A06-9BE1-A151D4B41673} =>.MAGIX Software GmbH
O42 - Logiciel: MAGIX Speed burnR (MSI) - (.MAGIX Software GmbH.) [HKLM][64Bits] -- MX.{1FB741B2-E3C1-4A06-9BE1-A151D4B41673} =>.MAGIX Software GmbH®
O42 - Logiciel: Malwarebytes version 3.2.2.2018 - (.Malwarebytes.) [HKLM][64Bits] -- {35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1 =>.Malwarebytes Corporation®
O42 - Logiciel: Micro Application - Kit d'Impression CD 2000 - (.Micro Application.) [HKLM][64Bits] -- Micro Application - Kit d'Impression CD 2000 =>.Micro Application
O42 - Logiciel: Microsoft Application Error Reporting - (.Microsoft Corporation.) [HKLM][64Bits] -- {95120000-00B9-0409-1000-0000000FF1CE} =>.Microsoft Corporation
O42 - Logiciel: Microsoft AutoRoute 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {C82185E8-C27B-4EF4-2007-3333BC2C2B6D} =>.Microsoft Corporation
O42 - Logiciel: Microsoft OneDrive - (.Microsoft Corporation.) [HKCU][64Bits] -- OneDriveSetup.exe =>.Microsoft Corporation®
O42 - Logiciel: Microsoft Security Client - (.Microsoft Corporation.) [HKLM][64Bits] -- {2AA3C13E-0531-41B8-AE48-AE28C940A809} =>.Microsoft Corporation
O42 - Logiciel: Microsoft Security Essentials - (.Microsoft Corporation.) [HKLM][64Bits] -- Microsoft Security Client =>.Microsoft Corporation®
O42 - Logiciel: Microsoft XML Parser - (.Microsoft Corporation.) [HKLM][64Bits] -- {C7340571-7773-4A8C-9EBC-4E4243B38C76} =>.Microsoft Corporation
O42 - Logiciel: Module complémentaire de navigateur pour la désactivation de Google Analyti - (.Google Inc..) [HKLM][64Bits] -- {0841EE67-124A-496E-BD27-3BA36191B57B} =>.Google Inc.
O42 - Logiciel: Motion Graphics Toolkit for Studio - (.Red Giant.) [HKLM][64Bits] -- {E5C99F9E-E97D-40B6-BAFC-8BCBFF1031E4} =>.Red Giant
O42 - Logiciel: Motion Graphics Toolkit for Studio - (.Red Giant.) [HKLM][64Bits] -- InstallShield_{E5C99F9E-E97D-40B6-BAFC-8BCBFF1031E4} =>.Red Giant
O42 - Logiciel: MP3MyMP3 4.2 - (.Bruce McArthur.) [HKLM][64Bits] -- MP3MyMP3_is1 =>.Bruce McArthur
O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM][64Bits] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F} =>.Microsoft
O42 - Logiciel: MSVCRT_amd64 - (.Microsoft.) [HKLM][64Bits] -- {D0B44725-3666-492D-BEF6-587A14BD9BD9} =>.Microsoft
O42 - Logiciel: MSVCRT110 - (.Microsoft.) [HKLM][64Bits] -- {8E14DDC8-EA60-4E18-B3E3-1937104D5BDA} =>.Microsoft
O42 - Logiciel: MSVCRT110_amd64 - (.Microsoft.) [HKLM][64Bits] -- {E9FA781F-3E80-4399-825A-AD3E11C28C77} =>.Microsoft
O42 - Logiciel: MSXML 4.0 SP3 Parser (KB2721691) - (.Microsoft Corporation.) [HKLM][64Bits] -- {355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36} =>.Microsoft Corporation
O42 - Logiciel: MSXML 4.0 SP3 Parser (KB2758694) - (.Microsoft Corporation.) [HKLM][64Bits] -- {1D95BA90-F4F8-47EC-A882-441C99D30C1E} =>.Microsoft Corporation
O42 - Logiciel: Nero 8 - (.Nero AG.) [HKLM][64Bits] -- {22101996-62AE-4369-8CEF-581A12221036} =>.Nero AG
O42 - Logiciel: Nero Info - (.Nero AG.) [HKLM][64Bits] -- {F030BFE8-8476-4C08-A553-233DE80A2BE1} =>.Nero AG
O42 - Logiciel: neroxml - (.Nero AG.) [HKLM][64Bits] -- {56C049BE-79E9-4502-BEA7-9754A3E60F9B} =>.Nero AG
O42 - Logiciel: NewBlue Video Essentials for Windows - (.NewBlue.) [HKLM][64Bits] -- NewBlue Video Essentials for Windows =>.NewBlue
O42 - Logiciel: Olympus Digital Wave Player - (..) [HKLM][64Bits] -- {FB91E774-867B-4567-ACE7-8144EF036068}
O42 - Logiciel: OpenOffice 4.1.2 - (.Apache Software Foundation.) [HKLM][64Bits] -- {DCB1B348-C94E-4D6D-8CE0-7D9DA5CF663E} =>.Apache Software Foundation
O42 - Logiciel: PDF Settings - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC5B0C19-D851-42F4-BDA0-410ECF7F70A5} =>.Adobe Systems Incorporated
O42 - Logiciel: Picasa 3 - (.Google, Inc..) [HKLM][64Bits] -- Picasa 3 =>.Google Inc®
O42 - Logiciel: Pinnacle Instant DVD Recorder - (.Pinnacle Systems, Inc..) [HKLM][64Bits] -- {EF781A5C-58F5-4BFD-87F9-E4F14D382F25} =>.Pinnacle Systems, Inc.
O42 - Logiciel: Pinnacle Studio 17 - (.Corel Corporation.) [HKLM][64Bits] -- {3DA8F808-72E2-4361-82EC-433081D23005} =>.Corel Corporation
O42 - Logiciel: Pinnacle Studio 17 - Install Manager - (.Corel Corporation.) [HKLM][64Bits] -- {F04D92CC-5C3A-46FA-9C98-6EACBDD262FF} =>.Corel Corporation
O42 - Logiciel: Pinnacle Studio 17 - Standard Content Pack - (.Corel Corporation.) [HKLM][64Bits] -- {BA98BFA8-5EDF-450B-A92E-C096DC135D0E} =>.Corel Corporation
O42 - Logiciel: PowerCinema - (..) [HKLM][64Bits] -- {2637C347-9DAD-11D6-9EA2-00055D0CA761} =>.CyberLink®
O42 - Logiciel: PowerpointImageExtractor - (.Alain Lecomte.) [HKLM][64Bits] -- PowerpointImageExtractor_is1 =>.Alain Lecomte
O42 - Logiciel: Premium Pack Volumes 1-2 - (.Corel Corporation.) [HKLM][64Bits] -- {88C4D8A6-9954-46A0-965D-92E55DAB8734} =>.Corel Corporation
O42 - Logiciel: proDAD Heroglyph 2.5 - (.proDAD.) [HKLM][64Bits] -- proDAD-Heroglyph-2.5 =>.proDAD GmbH®
O42 - Logiciel: proDAD Vitascene 1.0 - (.proDAD.) [HKLM][64Bits] -- proDAD-Vitascene-1.0 =>.proDAD GmbH®
O42 - Logiciel: Rainlendar2 (remove only) - (.Rainy.) [HKLM][64Bits] -- Rainlendar2 =>.Rainy
O42 - Logiciel: RealSpeak Solo pour la voix francaise Virginie - (.Nuance.) [HKLM][64Bits] -- {58B0F3ED-6FAE-486C-9AB9-1C06514097B4} =>.Nuance
O42 - Logiciel: Revo Uninstaller 2.0.2 - (.VS Revo Group, Ltd..) [HKLM][64Bits] -- {A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97}_is1 =>.VS Revo Group, Ltd.
O42 - Logiciel: ScoreFitter Volumes 1-2 - (.Corel Corporation.) [HKLM][64Bits] -- {0FDA9ECA-6DA3-480E-B7A9-76F353AF6B6C} =>.Corel Corporation
O42 - Logiciel: SFR - Kit de connexion - (.SFR.) [HKLM][64Bits] -- SFR_Kit =>.SFR
O42 - Logiciel: SFR Sécurité - (.F-Secure Corporation.) [HKLM][64Bits] -- {48AB6B52-08D5-4A7D-B732-6D5EC4D898DC} =>.F-Secure Corporation
O42 - Logiciel: Skype™ 7.38 - (.Skype Technologies S.A..) [HKLM][64Bits] -- {3B7E914A-93D5-4A29-92BB-AF8C3F66C431} =>.Skype Technologies S.A.
O42 - Logiciel: SmartSound Quicktracks Plugin - (.SmartSound Software Inc.) [HKLM][64Bits] -- {4A7FDA4D-F4D7-4A49-934A-066D59A43C7E} =>.SmartSound Software Inc
O42 - Logiciel: SmartSound Quicktracks Plugin - (.SmartSound Software Inc.) [HKLM][64Bits] -- InstallShield_{4A7FDA4D-F4D7-4A49-934A-066D59A43C7E} =>.SmartSound Software Inc
O42 - Logiciel: Speccy - (.Piriform.) [HKLM][64Bits] -- Speccy =>.Piriform Ltd®
O42 - Logiciel: Streaming Video Recorder version 6.2.6 - (.APOWERSOFT LIMITED.) [HKLM][64Bits] -- {01c39b1f-d465-48ca-9d71-7d5afa53b4eb}_is1 =>.APOWERSOFT LIMITED
O42 - Logiciel: Studio 11 - (.Pinnacle Systems.) [HKLM][64Bits] -- {110B1ADF-2EAE-4E8F-B501-D2A1E6D8ED9D} =>.Macrovision Corporation®
O42 - Logiciel: Studio 11 - (.Pinnacle Systems.) [HKLM][64Bits] -- {2F952048-3220-4AC7-A206-D01EFC774BB2} =>.Pinnacle Systems
O42 - Logiciel: Studio 11 Bonus DVD - (.Pinnacle Systems.) [HKLM][64Bits] -- {45A1BF92-700A-4408-B95E-79F462E3D67D} =>.Macrovision Corporation®
O42 - Logiciel: Studio 11 Ultimate - (.Pinnacle Systems.) [HKLM][64Bits] -- {CC874CBB-BD87-4126-9465-AE73BB62D6E0} =>.Macrovision Corporation®
O42 - Logiciel: Switch - Convertisseur de fichiers audio - (.NCH Software.) [HKLM][64Bits] -- Switch =>.NCH Software®
O42 - Logiciel: System Explorer 7.0.0 - (.Mister Group.) [HKLM][64Bits] -- {40F485F7-6478-4896-B0D5-F94BE677EB78}_is1 =>.Mister Group
O42 - Logiciel: TeamViewer 12 - (.TeamViewer.) [HKLM][64Bits] -- TeamViewer =>.TeamViewer GmbH®
O42 - Logiciel: Title Extreme - (.Corel Corporation.) [HKLM][64Bits] -- {F7214014-27EE-4237-9978-2F9D1551559B} =>.Corel Corporation
O42 - Logiciel: TomTom HOME - (.TomTom.) [HKLM][64Bits] -- {CE325D55-FCAF-4273-BB79-069BB8747270} =>.Macrovision Corporation®
O42 - Logiciel: TomTom MyDrive Connect 4.1.2.2862 - (.TomTom.) [HKLM][64Bits] -- MyDriveConnect =>.TomTom International BV®
O42 - Logiciel: VCRedistSetup - (.Nero AG.) [HKLM][64Bits] -- {3921A67A-5AB1-4E48-9444-C71814CF3027} =>.Nero AG
O42 - Logiciel: Visionneuse Microsoft PowerPoint - (.Microsoft Corporation.) [HKLM][64Bits] -- {95140000-00AF-040C-0000-0000000FF1CE} =>.Microsoft Corporation
O42 - Logiciel: Visual Studio C++ 10.0 Runtime - (.TomTom International B.V..) [HKLM][64Bits] -- {4412F224-3849-4461-A3E9-DEEF8D252790} =>.TomTom International B.V.
O42 - Logiciel: VLC media player 1.0.3 - (.VideoLAN Team.) [HKLM][64Bits] -- VLC media player =>.VideoLAN Team
O42 - Logiciel: VueScan x32 - (..) [HKLM][64Bits] -- VueScan x32 =>.Hamrick Software®
O42 - Logiciel: WinRAR 5.40 (32-bit) - (.win.rar GmbH.) [HKLM][64Bits] -- WinRAR archiver =>.win.rar GmbH®
O42 - Logiciel: XnView 2.36 - (.Gougelet Pierre-e.) [HKLM][64Bits] -- XnView_is1 =>.Pierre GOUGELET®
O42 - Logiciel: Yahoo! Desktop Login - (.Pinnacle Systems.) [HKLM][64Bits] -- {F9AEEC34-CF00-4CBD-9E36-DF9DC4002685} =>.Pinnacle Systems
O42 - Logiciel: YouTube By Click - (.ByClick.) [HKLM][64Bits] -- {8645978C-3E59-4C2E-8ECB-0FCE6FA15800} =>.ByClick
O42 - Logiciel: YouTube By Click - (.ByClick.) [HKLM][64Bits] -- YouTube By Click 2.2.75 =>.By Click®
O42 - Logiciel: ZHPFix 2015 - (.Nicolas Coolman.) [HKLM][64Bits] -- ZHPFix_is1 =>.Nicolas Coolman

---\\ HKCU & HKLM Software Keys (191) - 23s
HKLM\SOFTWARE\Wow6432Node\7-Zip =>.Igor Pavlov
HKLM\SOFTWARE\Wow6432Node\Acorn =>.Acorn Computers
HKLM\SOFTWARE\Wow6432Node\Adobe =>.Adobe
HKLM\SOFTWARE\Wow6432Node\Ahead =>.Ahead
HKLM\SOFTWARE\Wow6432Node\Ammyy =>.SUP.Ammyy
HKLM\SOFTWARE\Wow6432Node\Apple Computer, Inc. =>.Apple Computer, Inc.
HKLM\SOFTWARE\Wow6432Node\Apple Inc. =>.Apple Inc.
HKLM\SOFTWARE\Wow6432Node\Audible =>.Audible.com
HKLM\SOFTWARE\Wow6432Node\Avid =>.Avid
HKLM\SOFTWARE\Wow6432Node\AviSynth =>.Ben Rudiak-Gold
HKLM\SOFTWARE\Wow6432Node\ByClick =>.ByClick
HKLM\SOFTWARE\Wow6432Node\Caphyon =>.Caphyon
HKLM\SOFTWARE\Wow6432Node\CDex =>.CDex
HKLM\SOFTWARE\Wow6432Node\Corel Corporation =>.Corel Corporation
HKLM\SOFTWARE\Wow6432Node\CyberLink =>.CyberLink Corporation
HKLM\SOFTWARE\Wow6432Node\Digital River =>.Digital River Entreprise
HKLM\SOFTWARE\Wow6432Node\DigitalWave =>.DigitalWave Corporation
HKLM\SOFTWARE\Wow6432Node\DivX =>.DivX Inc.
HKLM\SOFTWARE\Wow6432Node\DivXNetworks =>.DivXNetworks
HKLM\SOFTWARE\Wow6432Node\DVC150 =>.Dazzle
HKLM\SOFTWARE\Wow6432Node\DVDVideoSoft =>.DVDVideoSoft
HKLM\SOFTWARE\Wow6432Node\F-Secure =>.F-Secure
HKLM\SOFTWARE\Wow6432Node\FAST Multimedia =>.FAST Multimedia AG
HKLM\SOFTWARE\Wow6432Node\Fraps =>.Beepa
HKLM\SOFTWARE\Wow6432Node\Freemake =>.Freemake
HKLM\SOFTWARE\Wow6432Node\GNU =>.GNU
HKLM\SOFTWARE\Wow6432Node\Google =>.Google
HKLM\SOFTWARE\Wow6432Node\HaaliMkx =>.Haali Media
HKLM\SOFTWARE\Wow6432Node\Hewlett-Packard =>.Hewlett-Packard
HKLM\SOFTWARE\Wow6432Node\HP =>.HP
HKLM\SOFTWARE\Wow6432Node\IM Providers =>.IM Providers
HKLM\SOFTWARE\Wow6432Node\Innovative Solutions =>.Innovative Solutions
HKLM\SOFTWARE\Wow6432Node\InstallShield =>.InstallShield
HKLM\SOFTWARE\Wow6432Node\Intel =>.Intel
HKLM\SOFTWARE\Wow6432Node\Intel Security =>.Intel Security
HKLM\SOFTWARE\Wow6432Node\IrfanView =>.Irfan Skiljan
HKLM\SOFTWARE\Wow6432Node\iTinySoft =>.iTinySoft
HKLM\SOFTWARE\Wow6432Node\KasperskyLab =>.Kaspersky Labs
HKLM\SOFTWARE\Wow6432Node\Kobo =>.Kobo
HKLM\SOFTWARE\Wow6432Node\Lake =>.Lake Sofware
HKLM\SOFTWARE\Wow6432Node\Macromedia =>.Macromedia
HKLM\SOFTWARE\Wow6432Node\Macrovision =>.Macrovision
HKLM\SOFTWARE\Wow6432Node\MAGIX =>.Magix
HKLM\SOFTWARE\Wow6432Node\Malwarebytes' Anti-Malware =>.Malwarebytes' Anti-Malware
HKLM\SOFTWARE\Wow6432Node\MAXSOFT-OCRON =>.Maxsoft-Ocron, Inc
HKLM\SOFTWARE\Wow6432Node\MimarSinan =>.Mimar Sinan
HKLM\SOFTWARE\Wow6432Node\Minnetonka Audio Software =>.Minnetonka Audio Software
HKLM\SOFTWARE\Wow6432Node\MOVAVI =>.Movavi
HKLM\SOFTWARE\Wow6432Node\MovieBox USB =>.Pinnacle Systems, Inc.
HKLM\SOFTWARE\Wow6432Node\Mozilla =>.Mozilla
HKLM\SOFTWARE\Wow6432Node\MozillaPlugins =>.MozillaPlugins
HKLM\SOFTWARE\Wow6432Node\NCH Software =>.NCH Software
HKLM\SOFTWARE\Wow6432Node\NCH Swift Sound =>.NCH Swift Sound
HKLM\SOFTWARE\Wow6432Node\Nero =>.Ahead Corporation
HKLM\SOFTWARE\Wow6432Node\NeroDigital =>.Nero Digital
HKLM\SOFTWARE\Wow6432Node\Neuf =>.9Telecom
HKLM\SOFTWARE\Wow6432Node\NewBlue =>.NewBlue
HKLM\SOFTWARE\Wow6432Node\ODBC =>.DB Connectivity Solutions
HKLM\SOFTWARE\Wow6432Node\Olympus =>.OLympus
HKLM\SOFTWARE\Wow6432Node\OpenOffice =>.SourceForge
HKLM\SOFTWARE\Wow6432Node\Pegasus Imaging =>.Accusoft Entreprise
HKLM\SOFTWARE\Wow6432Node\PegasusImaging =>.Accusoft Entreprise
HKLM\SOFTWARE\Wow6432Node\Pinnacle =>.Pinnacle Systems, Inc.
HKLM\SOFTWARE\Wow6432Node\Pinnacle Systems =>.Pinnacle Systems, Inc.
HKLM\SOFTWARE\Wow6432Node\Piriform =>.Piriform
HKLM\SOFTWARE\Wow6432Node\proDAD =>.proDAD GmbH
HKLM\SOFTWARE\Wow6432Node\Rainlendar2 =>.Rainy
HKLM\SOFTWARE\Wow6432Node\Red Giant Software =>.Red Giant Software
HKLM\SOFTWARE\Wow6432Node\RocketLife =>.RocketLife
HKLM\SOFTWARE\Wow6432Node\ScanSoft =>.Scansoft
HKLM\SOFTWARE\Wow6432Node\Skype =>.Skype
HKLM\SOFTWARE\Wow6432Node\SmartSound Software =>.SmartSound Software
HKLM\SOFTWARE\Wow6432Node\Symantec =>.Symantec
HKLM\SOFTWARE\Wow6432Node\SystemExplorer =>.System Explorer
HKLM\SOFTWARE\Wow6432Node\TeamViewer =>.TeamViewer
HKLM\SOFTWARE\Wow6432Node\TomTom =>.TomTom
HKLM\SOFTWARE\Wow6432Node\Trust.Zone
HKLM\SOFTWARE\Wow6432Node\USB2800 =>.Legitimate
HKLM\SOFTWARE\Wow6432Node\VideoLAN =>.VideoLAN
HKLM\SOFTWARE\Wow6432Node\Visan =>.Visan Software
HKLM\SOFTWARE\Wow6432Node\Volatile =>.Microsoft Corporation
HKLM\SOFTWARE\Wow6432Node\VueScan =>.Hamrick Software
HKLM\SOFTWARE\Wow6432Node\WafCX =>.WafCX
HKLM\SOFTWARE\Wow6432Node\WinRAR =>.WinRAR
HKLM\SOFTWARE\Wow6432Node\Wondershare =>.Wondershare
HKLM\SOFTWARE\Wow6432Node\Xara =>.Xara Group Ltd.
HKLM\SOFTWARE\Wow6432Node\XnView =>.Pierre-Emmanuel Gougelet
HKLM\SOFTWARE\Wow6432Node\RegisteredApplications =>.Microsoft Corporation
HKCU\SOFTWARE\7-Zip =>.Igor Pavlov
HKCU\SOFTWARE\8322898 =>.FastStone Soft
HKCU\SOFTWARE\Adobe =>.Adobe
HKCU\SOFTWARE\Ahead =>.Ahead
HKCU\SOFTWARE\Apowersoft =>.Apowersoft
HKCU\SOFTWARE\AppDataLow =>.Microsoft Corporation
HKCU\SOFTWARE\Apple Computer, Inc. =>.Apple Computer, Inc.
HKCU\SOFTWARE\Apple Inc. =>.Apple Inc.
HKCU\SOFTWARE\Avid =>.Avid
HKCU\SOFTWARE\BitTorrent
HKCU\SOFTWARE\Chromium =>.Chromium
HKCU\SOFTWARE\Corel =>.Corel
HKCU\SOFTWARE\CyberLink =>.CyberLink Corporation
HKCU\SOFTWARE\Cygwin =>.Cygwin
HKCU\SOFTWARE\DATA BECKER =>.Data Becker GmbH
HKCU\SOFTWARE\Digital River =>.Digital River Entreprise
HKCU\SOFTWARE\DivXNetworks =>.DivXNetworks
HKCU\SOFTWARE\DVDVideoSoft =>.DVDVideoSoft
HKCU\SOFTWARE\F-Secure =>.F-Secure
HKCU\SOFTWARE\Fotor3Session
HKCU\SOFTWARE\Fraps3 =>.Beepa
HKCU\SOFTWARE\Freemake =>.Freemake
HKCU\SOFTWARE\FreeTime =>.FreeTime Inc
HKCU\SOFTWARE\Gabest =>.Gabest
HKCU\SOFTWARE\Gadwin =>.Gadwin
HKCU\SOFTWARE\Gadwin Systems =>.Gadwin Systems
HKCU\SOFTWARE\GNU =>.GNU
HKCU\SOFTWARE\Google =>.Google
HKCU\SOFTWARE\Haali =>.Haali Media
HKCU\SOFTWARE\Hewlett-Packard =>.Hewlett-Packard
HKCU\SOFTWARE\HP =>.HP
HKCU\SOFTWARE\Icecream =>.Icecream
HKCU\SOFTWARE\IM Providers =>.IM Providers
HKCU\SOFTWARE\Innovative Solutions =>.Innovative Solutions
HKCU\SOFTWARE\Intel =>.Intel
HKCU\SOFTWARE\InterTrust
HKCU\SOFTWARE\iZotope =>.iZotope
HKCU\SOFTWARE\K
HKCU\SOFTWARE\Kobo =>.Kobo
HKCU\SOFTWARE\Lake =>.Lake Sofware
HKCU\SOFTWARE\LAV =>.LAV Inc
HKCU\SOFTWARE\Leadertech =>.Leadertech Systems
HKCU\SOFTWARE\Ligos =>.Ligos Corporation
HKCU\SOFTWARE\Macromedia =>.Macromedia
HKCU\SOFTWARE\Magix =>.Magix
HKCU\SOFTWARE\MAGIX Software GmbH =>.MAGIX Software GmbH
HKCU\SOFTWARE\MainConcept =>.MainConcept AG
HKCU\SOFTWARE\MainConcept (Adobe2) =>.MainConcept AG
HKCU\SOFTWARE\Malwarebytes =>.Malwarebytes
HKCU\SOFTWARE\Minnetonka Audio Software =>.Minnetonka Audio Software
HKCU\SOFTWARE\MOVAVI =>.Movavi
HKCU\SOFTWARE\MozillaPlugins =>.MozillaPlugins
HKCU\SOFTWARE\MPC-HC =>.MPC-HC Team
HKCU\SOFTWARE\NCH Software =>.NCH Software
HKCU\SOFTWARE\NCH Swift Sound =>.NCH Swift Sound
HKCU\SOFTWARE\Nero =>.Ahead Corporation
HKCU\SOFTWARE\NeroDigital =>.Nero Digital
HKCU\SOFTWARE\Netscape =>.Netscape
HKCU\SOFTWARE\NewBlue =>.NewBlue
HKCU\SOFTWARE\Nico Mak Computing =>.Nico Mak Computing
HKCU\SOFTWARE\ODBC =>.DB Connectivity Solutions
HKCU\SOFTWARE\Olympus =>.OLympus
HKCU\SOFTWARE\OpenOffice =>.SourceForge
HKCU\SOFTWARE\Opera Software =>.Opera Software
HKCU\SOFTWARE\PDF Suite 2017
HKCU\SOFTWARE\PhotoFiltre 7 =>.Antonio Da Cruz
HKCU\SOFTWARE\PhotoFiltre Studio X =>.Antonio Da Cruz
HKCU\SOFTWARE\Photos2Folders
HKCU\SOFTWARE\Pinnacle Systems =>.Pinnacle Systems, Inc.
HKCU\SOFTWARE\Piriform =>.Piriform
HKCU\SOFTWARE\pptvideo
HKCU\SOFTWARE\proDAD =>.proDAD GmbH
HKCU\SOFTWARE\ProtectedStorage =>.Microsoft Corporation
HKCU\SOFTWARE\QtProject =>.QtProject
HKCU\SOFTWARE\RealNetworks =>.RealNetworks
HKCU\SOFTWARE\Red Giant Software =>.Red Giant Software
HKCU\SOFTWARE\Skype =>.Skype
HKCU\SOFTWARE\skypeapp-ce983c90ce86 =>.Skype Technologies
HKCU\SOFTWARE\Soda PDF Desktop =>.Lulu Software
HKCU\SOFTWARE\TeamViewer =>.TeamViewer
HKCU\SOFTWARE\TomTom =>.TomTom
HKCU\SOFTWARE\Trolltech =>.Trolltech
HKCU\SOFTWARE\Trust.Zone
HKCU\SOFTWARE\tvp
HKCU\SOFTWARE\Ulead Systems =>.Ulead Systems
HKCU\SOFTWARE\UltimateOutsider =>.UltimateOutsider
HKCU\SOFTWARE\undefined =>.SUP.Downloader
HKCU\SOFTWARE\VB and VBA Program Settings =>.Microsoft Corporation
HKCU\SOFTWARE\Visan =>.Visan Software
HKCU\SOFTWARE\VOB =>.Legitimate
HKCU\SOFTWARE\VS Revo Group =>.VS Revo Group
HKCU\SOFTWARE\VueScan =>.Hamrick Software
HKCU\SOFTWARE\WinRAR =>.WinRAR
HKCU\SOFTWARE\WinRAR SFX =>.RarLab
HKCU\SOFTWARE\Wondershare =>.Wondershare
HKCU\SOFTWARE\Wow6432Node =>.Microsoft Corporation
HKCU\SOFTWARE\Xara =>.Xara Group Ltd.
HKCU\SOFTWARE\Yahoo =>.Yahoo! Inc.
HKCU\SOFTWARE\ZebHelpProcess Helper =>.Nicolas Coolman
HKCU\SOFTWARE\ZHP =>.Nicolas Coolman
HKCU\SOFTWARE\AppDataLow\Software =>.Microsoft Corporation
HKCU\SOFTWARE\AppDataLow\Software\Adobe =>.Adobe
HKCU\SOFTWARE\AppDataLow\Software\PasswordBox =>.PasswordBox Inc

---\\ Contenu des dossiers Programmes (447) - 90s
O43 - CFD: 30/10/2017 - [] D -- C:\Program Files\Adobe =>.Adobe
O43 - CFD: 25/09/2017 - [] D -- C:\Program Files\CCleaner =>.Piriform Ltd
O43 - CFD: 20/07/2017 - [] D -- C:\Program Files\Common Files =>.Microsoft Corporation
O43 - CFD: 26/06/2017 - [] D -- C:\Program Files\CyberLink =>.CyberLink Corporation
O43 - CFD: 16/03/2017 - [] D -- C:\Program Files\DVD Maker =>.Aone Software
O43 - CFD: 12/04/2016 - [0] SHD -- C:\Program Files\Fichiers communs =>.Microsoft Corporation
O43 - CFD: 20/12/2016 - [] D -- C:\Program Files\Gadwin =>.Gadwin, Ltd.®
O43 - CFD: 20/07/2017 - [] D -- C:\Program Files\Google =>.Google
O43 - CFD: 12/05/2016 - [] D -- C:\Program Files\HP =>.Hewlett-Packard
O43 - CFD: 06/12/2017 - [] D -- C:\Program Files\Internet Explorer =>.Microsoft Corporation
O43 - CFD: 13/04/2016 - [] D -- C:\Program Files\MAGIX =>.Magix
O43 - CFD: 22/11/2017 - [] D -- C:\Program Files\Malwarebytes =>.Malwarebytes
O43 - CFD: 12/04/2011 - [] D -- C:\Program Files\Microsoft Games =>.Microsoft Corporation
O43 - CFD: 19/07/2016 - [] D -- C:\Program Files\Microsoft Office =>.Microsoft Corporation
O43 - CFD: 20/07/2017 - [] D -- C:\Program Files\Microsoft Security Client =>.Microsoft Corporation
O43 - CFD: 14/07/2009 - [] D -- C:\Program Files\MSBuild =>.Microsoft Corporation
O43 - CFD: 26/06/2017 - [] D -- C:\Program Files\NewBlue =>.NewBlue
O43 - CFD: 07/12/2017 - [] D -- C:\Program Files\Opera =>.Opera Software
O43 - CFD: 14/07/2009 - [] D -- C:\Program Files\Reference Assemblies =>.Microsoft Corporation
O43 - CFD: 24/04/2016 - [] D -- C:\Program Files\Speccy =>.Piriform
O43 - CFD: 26/06/2017 - [] D -- C:\Program Files\VS Revo Group =>.VS Revo Group
O43 - CFD: 14/04/2016 - [] D -- C:\Program Files\Windows Defender =>.Microsoft Corporation
O43 - CFD: 12/06/2016 - [] D -- C:\Program Files\Windows Live =>.Microsoft Corporation
O43 - CFD: 12/04/2011 - [] D -- C:\Program Files\Windows Mail =>.Microsoft Corporation
O43 - CFD: 06/12/2017 - [] D -- C:\Program Files\Windows Media Player =>.Microsoft Corporation
O43 - CFD: 12/04/2016 - [] D -- C:\Program Files\Windows NT =>.Microsoft Corporation
O43 - CFD: 12/04/2011 - [] D -- C:\Program Files\Windows Photo Viewer =>.Microsoft Corporation
O43 - CFD: 21/11/2010 - [] D -- C:\Program Files\Windows Portable Devices =>.Microsoft Corporation
O43 - CFD: 12/04/2011 - [] D -- C:\Program Files\Windows Sidebar =>.Microsoft Corporation
O43 - CFD: 21/04/2017 - [] D -- C:\Program Files (x86)\7-Zip =>.Igor Pavlov
O43 - CFD: 29/04/2017 - [] D -- C:\Program Files (x86)\Adobe =>.Adobe Systems Incorporated®
O43 - CFD: 03/06/2016 - [] D -- C:\Program Files (x86)\AdorageI-GfxDatas
O43 - CFD: 03/06/2016 - [] D -- C:\Program Files (x86)\AdorageI-SAL =>.proDAD GmbH®
O43 - CFD: 08/09/2017 - [] D -- C:\Program Files (x86)\Apple Software Update =>.Apple Inc.
O43 - CFD: 07/09/2016 - [] D -- C:\Program Files (x86)\Bonjour =>.Apple Inc.
O43 - CFD: 28/10/2017 - [] D -- C:\Program Files (x86)\Business Card Reader
O43 - CFD: 12/05/2016 - [] D -- C:\Program Files (x86)\Canon =>.Canon
O43 - CFD: 14/05/2016 - [] D -- C:\Program Files (x86)\CDex_170b2
O43 - CFD: 31/10/2017 - [] D -- C:\Program Files (x86)\Common Files =>.Microsoft Corporation
O43 - CFD: 28/06/2017 - [] D -- C:\Program Files (x86)\CyberLink =>.CyberLink Corporation
O43 - CFD: 31/10/2017 - [] D -- C:\Program Files (x86)\D-Link =>.D-Link
O43 - CFD: 18/09/2017 - [] D -- C:\Program Files (x86)\DVDVideoSoft =>.DVDVideoSoft
O43 - CFD: 04/09/2016 - [] D -- C:\Program Files (x86)\E.M. PowerPoint Video Converter
O43 - CFD: 03/07/2017 - [0] D -- C:\Program Files (x86)\Epubor
O43 - CFD: 30/06/2016 - [] D -- C:\Program Files (x86)\FastStone Capture =>.FastStone Soft
O43 - CFD: 13/04/2016 - [] D -- C:\Program Files (x86)\FormatFactory =>.FormatFactory
O43 - CFD: 04/06/2016 - [] D -- C:\Program Files (x86)\Fotor =>.Chengdu Everimaging Science and Technology Co., Ltd®
O43 - CFD: 18/05/2017 - [] D -- C:\Program Files (x86)\FoxTarot5
O43 - CFD: 29/08/2017 - [] D -- C:\Program Files (x86)\Free PDF to Word Doc Converter =>.Hellopdf.com Inc.
O43 - CFD: 24/04/2016 - [] D -- C:\Program Files (x86)\FreeCodecPack =>.Free Codec Pack
O43 - CFD: 01/03/2017 - [] D -- C:\Program Files (x86)\Freemake =>.Freemake
O43 - CFD: 02/07/2017 - [] D -- C:\Program Files (x86)\Gadwin Systems =>.Gadwin, Ltd.®
O43 - CFD: 31/10/2017 - [] D -- C:\Program Files (x86)\Google =>.Google Inc®
O43 - CFD: 04/12/2017 - [] D -- C:\Program Files (x86)\HP =>.Hewlett-Packard
O43 - CFD: 31/10/2017 - [] D -- C:\Program Files (x86)\HP Photo Creations =>.Visan Industries®
O43 - CFD: 26/10/2016 - [] D -- C:\Program Files (x86)\Icecream Ebook Reader =>.Icecream App
O43 - CFD: 31/10/2017 - [] HD -- C:\Program Files (x86)\InstallShield Installation Information =>.InstallShield
O43 - CFD: 24/04/2016 - [] D -- C:\Program Files (x86)\Intel =>.Intel Corporation
O43 - CFD: 06/12/2017 - [] D -- C:\Program Files (x86)\Internet Explorer =>.Microsoft Corporation
O43 - CFD: 05/05/2016 - [] D -- C:\Program Files (x86)\Jeux de cartes =>.Games Software
O43 - CFD: 01/12/2017 - [] D -- C:\Program Files (x86)\Kobo =>.Rakuten Kobo Inc.
O43 - CFD: 04/04/2017 - [0] D -- C:\Program Files (x86)\Lavasoft =>.Lavasoft
O43 - CFD: 04/09/2016 - [] D -- C:\Program Files (x86)\Leawo =>.Leawo
O43 - CFD: 21/06/2017 - [] D -- C:\Program Files (x86)\LooksBuilderSE =>.Red Giant Software LLC
O43 - CFD: 06/07/2017 - [0] D -- C:\Program Files (x86)\McAfee =>.McAfee
O43 - CFD: 29/06/2016 - [] D -- C:\Program Files (x86)\Micro Application =>.Micro Application
O43 - CFD: 24/04/2016 - [] D -- C:\Program Files (x86)\Microsoft AutoRoute =>.Microsoft Corporation
O43 - CFD: 04/09/2016 - [] D -- C:\Program Files (x86)\Microsoft Office =>.Microsoft Corporation
O43 - CFD: 20/07/2017 - [] D -- C:\Program Files (x86)\Microsoft Security Client =>.Microsoft Corporation
O43 - CFD: 25/09/2017 - [] D -- C:\Program Files (x86)\Microsoft Works =>.Microsoft Corporation
O43 - CFD: 30/12/2016 - [] D -- C:\Program Files (x86)\Microsoft.NET =>.Microsoft Corporation
O43 - CFD: 23/12/2016 - [] D -- C:\Program Files (x86)\Movie Maker 2.6 =>.Microsoft Corporation
O43 - CFD: 24/04/2016 - [] D -- C:\Program Files (x86)\Mozilla Firefox =>.Mozilla
O43 - CFD: 01/10/2017 - [] D -- C:\Program Files (x86)\MP3 My MP3 4.2 =>.Bruce McArthur
O43 - CFD: 14/07/2009 - [] D -- C:\Program Files (x86)\MSBuild =>.Microsoft Corporation
O43 - CFD: 08/10/2017 - [] D -- C:\Program Files (x86)\MSECache =>.Microsoft Corporation
O43 - CFD: 13/04/2016 - [] D -- C:\Program Files (x86)\MSXML 4.0 =>.Microsoft Corporation
O43 - CFD: 08/11/2016 - [] D -- C:\Program Files (x86)\MyDrive Connect =>.TomTom
O43 - CFD: 14/05/2016 - [] D -- C:\Program Files (x86)\NCH Software =>.NCH Software
O43 - CFD: 13/04/2016 - [] D -- C:\Program Files (x86)\Nero =>.Ahead Corporation
O43 - CFD: 26/06/2017 - [] D -- C:\Program Files (x86)\NewBlue =>.NewBlue
O43 - CFD: 14/04/2016 - [] D -- C:\Program Files (x86)\Noël Danjou =>.Noël Danjou
O43 - CFD: 13/08/2016 - [] D -- C:\Program Files (x86)\Olympus =>.OLympus
O43 - CFD: 04/09/2016 - [] D -- C:\Program Files (x86)\OpenOffice 4 =>.OpenOffice.org
O43 - CFD: 21/06/2017 - [] D -- C:\Program Files (x86)\Pinnacle =>.Pinnacle Systems, Inc.
O43 - CFD: 06/12/2017 - [] D -- C:\Program Files (x86)\PowerpointImageExtractor_V1_2 =>.Alain Lecomte
O43 - CFD: 03/06/2016 - [] D -- C:\Program Files (x86)\proDAD =>.proDAD GmbH
O43 - CFD: 01/12/2017 - [] D -- C:\Program Files (x86)\QuickTime =>Riskware.QuickTime
O43 - CFD: 12/11/2016 - [] D -- C:\Program Files (x86)\Rainlendar2 =>.Rainy
O43 - CFD: 29/10/2017 - [] D -- C:\Program Files (x86)\Realtek =>.Realtek
O43 - CFD: 14/07/2009 - [] D -- C:\Program Files (x86)\Reference Assemblies =>.Microsoft Corporation
O43 - CFD: 26/06/2017 - [] D -- C:\Program Files (x86)\RegCleaner =>.Jouni Vuorio
O43 - CFD: 24/04/2016 - [] D -- C:\Program Files (x86)\ScanSoft =>.Scansoft
O43 - CFD: 20/01/2017 - [] D -- C:\Program Files (x86)\SFR =>.SFR
O43 - CFD: 18/07/2017 - [] RD -- C:\Program Files (x86)\Skype =>.Skype
O43 - CFD: 13/04/2016 - [] D -- C:\Program Files (x86)\SmartSound Software =>.SmartSound Software Inc
O43 - CFD: 31/12/2016 - [] D -- C:\Program Files (x86)\System Explorer =>.Miroslav Topolar®
O43 - CFD: 28/11/2017 - [] D -- C:\Program Files (x86)\TeamViewer =>.TeamViewer GmbH
O43 - CFD: 30/10/2017 - [0] HD -- C:\Program Files (x86)\Temp =>.Microsoft Corporation
O43 - CFD: 31/10/2017 - [] D -- C:\Program Files (x86)\TomTom HOME =>.TomTom
O43 - CFD: 08/11/2016 - [] D -- C:\Program Files (x86)\TomTom International B.V =>.TomTom
O43 - CFD: 20/07/2017 - [] D -- C:\Program Files (x86)\UltimateOutsider =>.Josh Mayfield®
O43 - CFD: 14/07/2009 - [0] HD -- C:\Program Files (x86)\Uninstall Information =>.Microsoft Corporation
O43 - CFD: 22/09/2017 - [] D -- C:\Program Files (x86)\Usenet.nl =>.Usenet
O43 - CFD: 14/05/2016 - [] D -- C:\Program Files (x86)\VideoLAN =>.VideoLan Team
O43 - CFD: 30/06/2016 - [] D -- C:\Program Files (x86)\VueScan =>.Tufts University
O43 - CFD: 14/04/2016 - [] D -- C:\Program Files (x86)\Windows Defender =>.Microsoft Corporation
O43 - CFD: 12/06/2016 - [] D -- C:\Program Files (x86)\Windows Live =>.Microsoft Corporation
O43 - CFD: 12/04/2011 - [] D -- C:\Program Files (x86)\Windows Mail =>.Microsoft Corporation
O43 - CFD: 06/12/2017 - [] D -- C:\Program Files (x86)\Windows Media Player =>.Microsoft Corporation
O43 - CFD: 14/07/2009 - [] D -- C:\Program Files (x86)\Windows NT =>.Microsoft Corporation
O43 - CFD: 12/04/2011 - [] D -- C:\Program Files (x86)\Windows Photo Viewer =>.Microsoft Corporation
O43 - CFD: 21/11/2010 - [] D -- C:\Program Files (x86)\Windows Portable Devices =>.Microsoft Corporation
O43 - CFD: 12/04/2011 - [] D -- C:\Program Files (x86)\Windows Sidebar =>.Microsoft Corporation
O43 - CFD: 15/08/2017 - [] D -- C:\Program Files (x86)\WinRAR =>.win.rar GmbH®
O43 - CFD: 07/12/2016 - [0] D -- C:\Program Files (x86)\Wondershare =>.Wondershare
O43 - CFD: 13/06/2016 - [] D -- C:\Program Files (x86)\XnView =>.Pierre-Emmanuel Gougelet
O43 - CFD: 13/10/2017 - [] D -- C:\Program Files (x86)\YouTube By Click =>.By Click®
O43 - CFD: 16/12/2016 - [] D -- C:\Program Files (x86)\ZHPFix =>.Nicolas Coolman
O43 - CFD: 06/04/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip =>.Igor Pavlov
O43 - CFD: 12/04/2016 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories =>.Microsoft Corporation
O43 - CFD: 14/07/2009 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools =>.Administrative Tools
O43 - CFD: 24/10/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe =>.Adobe
O43 - CFD: 11/05/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat 4.0
O43 - CFD: 07/09/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Master Collection CS3
O43 - CFD: 04/04/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner =>.Piriform Ltd
O43 - CFD: 14/05/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CDex =>.Albert L Faber
O43 - CFD: 28/06/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink PowerCinema =>.CyberLink Corporation
O43 - CFD: 17/10/2017 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Deluge
O43 - CFD: 18/09/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft =>.DVDVideoSoft
O43 - CFD: 04/09/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\E.M. PowerPoint Video Converter
O43 - CFD: 30/06/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FastStone Capture =>.FastStone Soft
O43 - CFD: 04/06/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fotor
O43 - CFD: 18/05/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FoxTarot
O43 - CFD: 15/07/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fraps =>.Fraps Games
O43 - CFD: 29/08/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free PDF to Word Doc Converter =>.Hellopdf.com Inc.
O43 - CFD: 04/09/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Registry Fix
O43 - CFD: 07/08/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Freemake =>.Freemake
O43 - CFD: 20/12/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gadwin =>.Gadwin
O43 - CFD: 30/07/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gadwin Systems =>.Gadwin Systems
O43 - CFD: 12/04/2016 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games =>.Microsoft Corporation
O43 - CFD: 20/07/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GWX Control Panel =>.Josh Mayfield
O43 - CFD: 31/10/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP =>.Hewlett-Packard
O43 - CFD: 26/10/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Icecream Ebook Reader =>.Icecream App
O43 - CFD: 13/04/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Jeux de cartes =>.Games Software
O43 - CFD: 24/10/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kobo =>.Rakuten Kobo Inc.
O43 - CFD: 04/04/2017 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft =>.Lavasoft
O43 - CFD: 04/09/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Leawo =>.Leawo
O43 - CFD: 04/07/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lightscreen
O43 - CFD: 11/02/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MAGIX =>.Magix
O43 - CFD: 14/07/2009 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance =>.Microsoft Corporation
O43 - CFD: 23/11/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes =>.Malwarebytes
O43 - CFD: 29/06/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Micro Application =>.Micro Application
O43 - CFD: 25/09/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office =>.Microsoft Corporation
O43 - CFD: 02/10/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movavi Video Converter 17 =>.Movavi
O43 - CFD: 02/06/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MP3 My MP3 4.2 =>.Bruce McArthur
O43 - CFD: 25/06/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero 8 =>.Ahead Corporation
O43 - CFD: 26/06/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NewBlue =>.NewBlue
O43 - CFD: 13/08/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Olympus Digital Wave Player
O43 - CFD: 04/09/2016 - [] SD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.2 =>.SourceForge
O43 - CFD: 23/12/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhotoFiltre 7 =>.Antonio Da Cruz
O43 - CFD: 20/12/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhotoFiltre Studio X =>.Antonio Da Cruz
O43 - CFD: 30/06/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Picasa 3 =>.Google Inc.
O43 - CFD: 03/06/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pinnacle Hollywood FX 6.0 for Studio 11 =>.Pinnacle Systems, Inc.
O43 - CFD: 21/06/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pinnacle Studio 17 =>.Pinnacle Systems, Inc.
O43 - CFD: 03/06/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\proDAD =>.proDAD GmbH
O43 - CFD: 14/05/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Programmes audio
O43 - CFD: 01/12/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime =>Riskware.QuickTime
O43 - CFD: 12/11/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rainlendar2 =>.Rainy
O43 - CFD: 26/06/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller =>.VS Revo Group
O43 - CFD: 04/12/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SFR =>.SFR
O43 - CFD: 12/05/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype =>.Skype
O43 - CFD: 24/04/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Speccy =>.Piriform
O43 - CFD: 11/05/2017 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup =>.Microsoft Corporation
O43 - CFD: 03/06/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Studio 11 =>.Pinnacle Systems, Inc.
O43 - CFD: 14/05/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Suite NCH Software =>.NCH Software
O43 - CFD: 31/12/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Explorer
O43 - CFD: 31/10/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TomTom =>.TomTom
O43 - CFD: 31/10/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN =>.VideoLan Team
O43 - CFD: 12/06/2016 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live =>.Microsoft Corporation
O43 - CFD: 11/05/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR =>.WinRAR
O43 - CFD: 13/06/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XnView =>.Pierre-Emmanuel Gougelet
O43 - CFD: 16/12/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP =>.Nicolas Coolman
O43 - CFD: 07/09/2016 - [] D -- C:\ProgramData\Adobe =>.Adobe
O43 - CFD: 07/09/2016 - [0] D -- C:\ProgramData\ALM =>.ALM
O43 - CFD: 06/12/2017 - [] D -- C:\ProgramData\AMMYY =>.SUP.Ammyy
O43 - CFD: 08/09/2017 - [] D -- C:\ProgramData\Apple =>.Apple Inc.
O43 - CFD: 01/12/2017 - [] D -- C:\ProgramData\Apple Computer =>.Apple Inc.
O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Application Data =>.Microsoft Corporation
O43 - CFD: 30/12/2016 - [] D -- C:\ProgramData\AVAST Software =>.AVAST Software
O43 - CFD: 12/04/2016 - [0] SHD -- C:\ProgramData\Bureau =>.Microsoft Corporation
O43 - CFD: 13/10/2017 - [] D -- C:\ProgramData\Caphyon =>.Caphyon
O43 - CFD: 29/06/2017 - [] D -- C:\ProgramData\CyberLink =>.CyberLink Corporation
O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Desktop =>.Microsoft Corporation
O43 - CFD: 09/04/2017 - [] D -- C:\ProgramData\DigitalWave.ApplicationUpdater_files
O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Documents =>.Microsoft Corporation
O43 - CFD: 01/12/2017 - [] D -- C:\ProgramData\F-Secure =>.F-Secure
O43 - CFD: 12/04/2016 - [0] SHD -- C:\ProgramData\Favoris =>.Microsoft Corporation
O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Favorites =>.Microsoft Corporation
O43 - CFD: 12/06/2016 - [] D -- C:\ProgramData\Fotor
O43 - CFD: 15/04/2016 - [] D -- C:\ProgramData\Freemake =>.Freemake
O43 - CFD: 04/12/2017 - [] D -- C:\ProgramData\HP =>.Hewlett-Packard
O43 - CFD: 31/10/2017 - [] D -- C:\ProgramData\HP Photo Creations =>.HP Photo Creations
O43 - CFD: 26/06/2017 - [] D -- C:\ProgramData\Innovative Solutions =>.Innovative Solutions
O43 - CFD: 26/06/2017 - [] D -- C:\ProgramData\install_clap =>.Microsoft Corporation
O43 - CFD: 01/04/2017 - [] D -- C:\ProgramData\IsolatedStorage =>.id Software
O43 - CFD: 20/07/2017 - [] D -- C:\ProgramData\Kaspersky Lab =>.Kaspersky Lab
O43 - CFD: 04/04/2017 - [] D -- C:\ProgramData\Lavasoft =>.Lavasoft
O43 - CFD: 04/09/2016 - [] D -- C:\ProgramData\Leawo =>.Leawo
O43 - CFD: 14/05/2016 - [] D -- C:\ProgramData\Macrovision =>.Macrovision
O43 - CFD: 20/12/2016 - [] D -- C:\ProgramData\MAGIX =>.Magix
O43 - CFD: 22/11/2017 - [] D -- C:\ProgramData\Malwarebytes =>.Malwarebytes
O43 - CFD: 22/11/2017 - [] D -- C:\ProgramData\MB2Migration
O43 - CFD: 20/07/2017 - [] D -- C:\ProgramData\McAfee =>.McAfee
O43 - CFD: 12/04/2016 - [0] SHD -- C:\ProgramData\Menu Démarrer =>.Microsoft Corporation
O43 - CFD: 24/10/2016 - [] SD -- C:\ProgramData\Microsoft =>.Microsoft Corporation
O43 - CFD: 25/09/2017 - [] D -- C:\ProgramData\Microsoft Help =>.Microsoft Corporation
O43 - CFD: 12/06/2016 - [] D -- C:\ProgramData\Microsoft OneDrive =>.Microsoft Corporation
O43 - CFD: 31/12/2016 - [] D -- C:\ProgramData\Microsoft SkyDrive =>.Microsoft Corporation
O43 - CFD: 12/04/2016 - [0] SHD -- C:\ProgramData\Modèles =>.Microsoft Corporation
O43 - CFD: 02/10/2017 - [] D -- C:\ProgramData\Movavi =>.Movavi
O43 - CFD: 02/10/2017 - [] D -- C:\ProgramData\Movavi Video Converter 17 =>.Movavi
O43 - CFD: 14/05/2016 - [] D -- C:\ProgramData\NCH Software =>.NCH Software
O43 - CFD: 13/04/2016 - [] D -- C:\ProgramData\Nero =>.Ahead Corporation
O43 - CFD: 26/06/2017 - [] D -- C:\ProgramData\Package Cache =>.Microsoft Corporation
O43 - CFD: 09/02/2017 - [] D -- C:\ProgramData\PDF Suite 2017
O43 - CFD: 21/06/2017 - [] D -- C:\ProgramData\Pinnacle =>.Pinnacle Systems, Inc.
O43 - CFD: 03/06/2016 - [] D -- C:\ProgramData\Pinnacle Studio =>.Pinnacle Systems, Inc.
O43 - CFD: 03/12/2017 - [] D -- C:\ProgramData\Real =>.RealNetworks Inc.
O43 - CFD: 22/11/2017 - [] D -- C:\ProgramData\SecuritySuite
O43 - CFD: 18/07/2017 - [] D -- C:\ProgramData\Skype =>.Skype
O43 - CFD: 13/04/2016 - [] D -- C:\ProgramData\SmartSound Software Inc =>.SmartSound Software Inc
O43 - CFD: 01/04/2017 - [] D -- C:\ProgramData\Soda PDF Desktop =>.Lulu Software
O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Start Menu =>.Microsoft Corporation
O43 - CFD: 04/07/2016 - [] D -- C:\ProgramData\SUPERAntiSpyware.com =>.SUPERAntiSpyware.com
O43 - CFD: 17/01/2017 - [] D -- C:\ProgramData\SystemExplorer =>.System Explorer
O43 - CFD: 26/06/2017 - [] D -- C:\ProgramData\Temp =>.Microsoft Corporation
O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Templates =>.Microsoft Corporation
O43 - CFD: 08/11/2016 - [] D -- C:\ProgramData\TomTom =>.TomTom
O43 - CFD: 12/06/2016 - [] D -- C:\ProgramData\Trusteer =>.Trusteer
O43 - CFD: 06/04/2017 - [] D -- C:\ProgramData\UniqueId =>.Microsoft Corporation
O43 - CFD: 12/05/2016 - [] D -- C:\ProgramData\Visan =>.Visan Industries
O43 - CFD: 11/05/2017 - [] D -- C:\ProgramData\WinZip =>.WinZip
O43 - CFD: 07/12/2016 - [] D -- C:\ProgramData\Wondershare =>.Wondershare
O43 - CFD: 07/09/2016 - [] D -- C:\Program Files (x86)\Common Files\Adobe =>.Adobe
O43 - CFD: 08/09/2017 - [] D -- C:\Program Files (x86)\Common Files\Apple =>.Apple Inc.
O43 - CFD: 15/12/2016 - [] D -- C:\Program Files (x86)\Common Files\AV =>.Avast
O43 - CFD: 07/09/2016 - [] D -- C:\Program Files (x86)\Common Files\Control Panels
O43 - CFD: 25/09/2017 - [] D -- C:\Program Files (x86)\Common Files\DESIGNER =>.Designer
O43 - CFD: 18/09/2017 - [] D -- C:\Program Files (x86)\Common Files\DVDVideoSoft =>.DVDVideoSoft
O43 - CFD: 26/06/2017 - [] D -- C:\Program Files (x86)\Common Files\Innovative Solutions =>.Innovative Solutions
O43 - CFD: 13/08/2016 - [] D -- C:\Program Files (x86)\Common Files\InstallShield =>.InstallShield
O43 - CFD: 07/09/2016 - [] D -- C:\Program Files (x86)\Common Files\Macrovision Shared =>.Rovi Corporation
O43 - CFD: 13/04/2016 - [] D -- C:\Program Files (x86)\Common Files\MAGIX Services =>.MAGIX_Software_GmbH
O43 - CFD: 24/04/2016 - [] D -- C:\Program Files (x86)\Common Files\MAGIX Shared =>.MAGIX AG
O43 - CFD: 25/09/2017 - [] D -- C:\Program Files (x86)\Common Files\microsoft shared =>.Microsoft Corporation
O43 - CFD: 13/04/2016 - [] D -- C:\Program Files (x86)\Common Files\Nero =>.Ahead Corporation
O43 - CFD: 26/06/2017 - [] D -- C:\Program Files (x86)\Common Files\NewBlue =>.NewBlue
O43 - CFD: 21/06/2017 - [] D -- C:\Program Files (x86)\Common Files\Pegasus Imaging =>.Accusoft Entreprise
O43 - CFD: 14/07/2009 - [] D -- C:\Program Files (x86)\Common Files\Services =>.Microsoft Corporation
O43 - CFD: 18/07/2017 - [] D -- C:\Program Files (x86)\Common Files\Skype =>.Skype
O43 - CFD: 14/07/2009 - [] D -- C:\Program Files (x86)\Common Files\SpeechEngines =>.Microsoft Corporation
O43 - CFD: 14/04/2016 - [] D -- C:\Program Files (x86)\Common Files\System =>.Microsoft Corporation
O43 - CFD: 12/06/2016 - [] D -- C:\Program Files (x86)\Common Files\Windows Live =>.Microsoft Corporation
O43 - CFD: 29/04/2017 - [] D -- C:\Users\Paul\AppData\Roaming\.AllDRMRemoval
O43 - CFD: 19/10/2016 - [] D -- C:\Users\Paul\AppData\Roaming\5a6fe17ef0d8ee8f9fd51bc9e35c4e2a
O43 - CFD: 29/04/2017 - [] D -- C:\Users\Paul\AppData\Roaming\Adobe =>.Adobe
O43 - CFD: 29/04/2017 - [] D -- C:\Users\Paul\AppData\Roaming\AllDRMRemoval
O43 - CFD: 04/12/2017 - [] D -- C:\Users\Paul\AppData\Roaming\Apowersoft =>.Apowersoft
O43 - CFD: 09/09/2017 - [] D -- C:\Users\Paul\AppData\Roaming\Apple Computer =>.Apple Inc.
O43 - CFD: 08/08/2017 - [] D -- C:\Users\Paul\AppData\Roaming\Audacity =>.Audacity
O43 - CFD: 21/12/2016 - [] D -- C:\Users\Paul\AppData\Roaming\BitTorrent
O43 - CFD: 26/08/2016 - [] D -- C:\Users\Paul\AppData\Roaming\BlueLabsSoftware =>.BlueLabs Software
O43 - CFD: 13/10/2017 - [] D -- C:\Users\Paul\AppData\Roaming\ByClick =>.ByClick
O43 - CFD: 22/10/2016 - [] D -- C:\Users\Paul\AppData\Roaming\calibre =>.Kovid Goyal
O43 - CFD: 29/04/2017 - [0] D -- C:\Users\Paul\AppData\Roaming\cali_core
O43 - CFD: 19/07/2016 - [] D -- C:\Users\Paul\AppData\Roaming\Cleanersoft
O43 - CFD: 28/06/2017 - [] D -- C:\Users\Paul\AppData\Roaming\CyberLink =>.CyberLink Corporation
O43 - CFD: 26/11/2017 - [] D -- C:\Users\Paul\AppData\Roaming\dvdcss =>.VideoLan Team
O43 - CFD: 23/11/2017 - [] D -- C:\Users\Paul\AppData\Roaming\DVDVideoSoft =>.DVDVideoSoft
O43 - CFD: 29/04/2017 - [] D -- C:\Users\Paul\AppData\Roaming\ebook_convert
O43 - CFD: 30/06/2016 - [] D -- C:\Users\Paul\AppData\Roaming\FastStone =>.FastStone Soft
O43 - CFD: 30/07/2016 - [] D -- C:\Users\Paul\AppData\Roaming\Gadwin =>.Gadwin
O43 - CFD: 20/07/2017 - [] D -- C:\Users\Paul\AppData\Roaming\Google =>.Google
O43 - CFD: 31/10/2017 - [] D -- C:\Users\Paul\AppData\Roaming\HPPSDr
O43 - CFD: 24/11/2016 - [] D -- C:\Users\Paul\AppData\Roaming\HpUpdate =>.Hewlett-Packard
O43 - CFD: 12/05/2016 - [] D -- C:\Users\Paul\AppData\Roaming\HP_Easy_Start =>.Hewlett-Packard
O43 - CFD: 20/12/2016 - [] D -- C:\Users\Paul\AppData\Roaming\Identities =>.Microsoft Corporation
O43 - CFD: 03/06/2016 - [] D -- C:\Users\Paul\AppData\Roaming\InstallShield =>.InstallShield
O43 - CFD: 29/04/2016 - [] D -- C:\Users\Paul\AppData\Roaming\InterTrust
O43 - CFD: 12/09/2016 - [0] D -- C:\Users\Paul\AppData\Roaming\Iobit =>.IObit
O43 - CFD: 03/12/2016 - [] D -- C:\Users\Paul\AppData\Roaming\IrfanView =>.Irfan skiljan
O43 - CFD: 01/04/2017 - [] D -- C:\Users\Paul\AppData\Roaming\IsolatedStorage =>.id Software
O43 - CFD: 04/12/2017 - [] D -- C:\Users\Paul\AppData\Roaming\KastorAllVideoDownloader =>.KastorSoft
O43 - CFD: 04/04/2017 - [0] D -- C:\Users\Paul\AppData\Roaming\Lavasoft =>.Lavasoft
O43 - CFD: 25/10/2016 - [] D -- C:\Users\Paul\AppData\Roaming\Leadertech =>.Leadertech Systems
O43 - CFD: 17/06/2016 - [] D -- C:\Users\Paul\AppData\Roaming\Macromedia =>.Macromedia
O43 - CFD: 08/08/2017 - [] D -- C:\Users\Paul\AppData\Roaming\MAGIX =>.Magix
O43 - CFD: 12/04/2011 - [0] D -- C:\Users\Paul\AppData\Roaming\Media Center Programs =>.Microsoft Corporation
O43 - CFD: 01/12/2017 - [] SD -- C:\Users\Paul\AppData\Roaming\Microsoft =>.Microsoft Corporation
O43 - CFD: 04/09/2016 - [0] D -- C:\Users\Paul\AppData\Roaming\MOVAVI =>.Movavi
O43 - CFD: 14/05/2016 - [] D -- C:\Users\Paul\AppData\Roaming\NCH Software =>.NCH Software
O43 - CFD: 13/04/2016 - [] D -- C:\Users\Paul\AppData\Roaming\Nero =>.Ahead Corporation
O43 - CFD: 05/09/2016 - [] D -- C:\Users\Paul\AppData\Roaming\OpenOffice =>.SourceForge
O43 - CFD: 07/12/2017 - [] D -- C:\Users\Paul\AppData\Roaming\Opera Software =>.Opera Software
O43 - CFD: 09/02/2017 - [] D -- C:\Users\Paul\AppData\Roaming\PDF Suite 2017
O43 - CFD: 23/12/2016 - [] D -- C:\Users\Paul\AppData\Roaming\PhotoFiltre 7 =>.Antonio Da Cruz
O43 - CFD: 20/12/2016 - [] D -- C:\Users\Paul\AppData\Roaming\PhotoFiltre Studio X =>.Antonio Da Cruz
O43 - CFD: 03/06/2016 - [] D -- C:\Users\Paul\AppData\Roaming\proDAD =>.proDAD GmbH
O43 - CFD: 16/12/2016 - [] D -- C:\Users\Paul\AppData\Roaming\Rofamupo
O43 - CFD: 12/09/2017 - [] D -- C:\Users\Paul\AppData\Roaming\Skype =>.Skype
O43 - CFD: 01/04/2017 - [] D -- C:\Users\Paul\AppData\Roaming\Soda PDF Desktop =>.Lulu Software
O43 - CFD: 17/06/2017 - [] D -- C:\Users\Paul\AppData\Roaming\TeamViewer =>.TeamViewer GmbH
O43 - CFD: 21/11/2017 - [] D -- C:\Users\Paul\AppData\Roaming\TotalAV =>.SUP.TotalAV
O43 - CFD: 22/09/2017 - [] D -- C:\Users\Paul\AppData\Roaming\Usenet.nl =>.Usenet
O43 - CFD: 23/09/2017 - [] D -- C:\Users\Paul\AppData\Roaming\uTorrent
O43 - CFD: 08/12/2017 - [] D -- C:\Users\Paul\AppData\Roaming\vlc =>.VideoLan Team
O43 - CFD: 06/11/2017 - [0] D -- C:\Users\Paul\AppData\Roaming\Windows Live Writer =>.Microsoft Corporation
O43 - CFD: 11/05/2017 - [] D -- C:\Users\Paul\AppData\Roaming\WinRAR =>.WinRAR
O43 - CFD: 13/07/2017 - [] D -- C:\Users\Paul\AppData\Roaming\XnView =>.Pierre-Emmanuel Gougelet
O43 - CFD: 13/10/2017 - [] D -- C:\Users\Paul\AppData\Roaming\YouTubeByClick
O43 - CFD: 08/12/2017 - [] D -- C:\Users\Paul\AppData\Roaming\ZHP =>.Nicolas Coolman
O43 - CFD: 29/08/2017 - [] D -- C:\Users\Paul\AppData\Local\Adobe =>.Adobe
O43 - CFD: 09/09/2016 - [] D -- C:\Users\Paul\AppData\Local\Adobe_Systems_Incorporate =>.Adobe Inc.
O43 - CFD: 15/11/2016 - [] D -- C:\Users\Paul\AppData\Local\Ahead =>.Ahead Software
O43 - CFD: 08/09/2017 - [] D -- C:\Users\Paul\AppData\Local\Apple =>.Apple Inc.
O43 - CFD: 12/04/2016 - [0] SHD -- C:\Users\Paul\AppData\Local\Application Data =>.Microsoft Corporation
O43 - CFD: 12/04/2016 - [] D -- C:\Users\Paul\AppData\Local\Apps =>.Microsoft Corporation
O43 - CFD: 07/04/2017 - [] D -- C:\Users\Paul\AppData\Local\assembly =>.Assembly
O43 - CFD: 26/04/2017 - [] D -- C:\Users\Paul\AppData\Local\Audacity =>.Audacity
O43 - CFD: 26/06/2017 - [] D -- C:\Users\Paul\AppData\Local\Avid =>.Avid
O43 - CFD: 12/06/2016 - [] D -- C:\Users\Paul\AppData\Local\cache =>.Legitimate
O43 - CFD: 06/09/2016 - [0] D -- C:\Users\Paul\AppData\Local\calibre-cache =>.Kovid Goyal
O43 - CFD: 05/08/2016 - [] D -- C:\Users\Paul\AppData\Local\CEF =>.CEF
O43 - CFD: 28/10/2016 - [] D -- C:\Users\Paul\AppData\Local\chromium =>.Chromium
O43 - CFD: 02/10/2017 - [] D -- C:\Users\Paul\AppData\Local\converter =>.CocoonSoftware
O43 - CFD: 26/08/2016 - [] D -- C:\Users\Paul\AppData\Local\CrashRpt
O43 - CFD: 26/06/2017 - [] D -- C:\Users\Paul\AppData\Local\CyberLink =>.CyberLink Corporation
O43 - CFD: 12/04/2016 - [0] D -- C:\Users\Paul\AppData\Local\Deployment =>.Microsoft Corporation
O43 - CFD: 04/12/2017 - [] D -- C:\Users\Paul\AppData\Local\Diagnostics =>.Microsoft Corporation
O43 - CFD: 21/06/2017 - [] D -- C:\Users\Paul\AppData\Local\Downloaded Installations =>.Microsoft Corporation
O43 - CFD: 26/11/2017 - [] D -- C:\Users\Paul\AppData\Local\ElevatedDiagnostics =>.Microsoft Corporation
O43 - CFD: 18/11/2016 - [] D -- C:\Users\Paul\AppData\Local\F-Secure =>.F-Secure
O43 - CFD: 30/06/2016 - [] D -- C:\Users\Paul\AppData\Local\FastStone =>.FastStone Soft
O43 - CFD: 18/01/2017 - [] D -- C:\Users\Paul\AppData\Local\FreemakeVideoConverter =>.Freemake
O43 - CFD: 30/07/2016 - [] D -- C:\Users\Paul\AppData\Local\Gadwin =>.Gadwin
O43 - CFD: 20/07/2017 - [] D -- C:\Users\Paul\AppData\Local\Google =>.Google
O43 - CFD: 14/04/2016 - [] D -- C:\Users\Paul\AppData\Local\GWX =>.GWX
O43 - CFD: 12/04/2016 - [0] SHD -- C:\Users\Paul\AppData\Local\Historique =>.Microsoft Corporation
O43 - CFD: 04/12/2017 - [] D -- C:\Users\Paul\AppData\Local\HP =>.Hewlett-Packard
O43 - CFD: 26/08/2016 - [] D -- C:\Users\Paul\AppData\Local\Icecream =>.Icecream
O43 - CFD: 26/06/2017 - [] D -- C:\Users\Paul\AppData\Local\IIIQF =>.Scrabblo
O43 - CFD: 26/06/2017 - [] D -- C:\Users\Paul\AppData\Local\Innovative Solutions =>.Innovative Solutions
O43 - CFD: 04/07/2016 - [] D -- C:\Users\Paul\AppData\Local\K
O43 - CFD: 24/10/2016 - [] D -- C:\Users\Paul\AppData\Local\Kobo =>.Rakuten Kobo Inc.
O43 - CFD: 02/04/2017 - [] D -- C:\Users\Paul\AppData\Local\Lavasoft =>.Lavasoft
O43 - CFD: 03/12/2017 - [] D -- C:\Users\Paul\AppData\Local\Microsoft =>.Microsoft Corporation
O43 - CFD: 08/05/2016 - [] D -- C:\Users\Paul\AppData\Local\Microsoft Games =>.Microsoft Corporation
O43 - CFD: 23/11/2017 - [] D -- C:\Users\Paul\AppData\Local\Microsoft Help =>.Microsoft Corporation
O43 - CFD: 02/10/2017 - [] D -- C:\Users\Paul\AppData\Local\Movavi =>.Movavi
O43 - CFD: 14/04/2016 - [] D -- C:\Users\Paul\AppData\Local\Noël Danjou =>.Noël Danjou
O43 - CFD: 07/12/2017 - [] D -- C:\Users\Paul\AppData\Local\Opera Software =>.Opera Software
O43 - CFD: 01/10/2017 - [] D -- C:\Users\Paul\AppData\Local\Pinnacle =>.Pinnacle Systems, Inc.
O43 - CFD: 31/10/2017 - [] D -- C:\Users\Paul\AppData\Local\PowerCinema =>.CyberLink Corporation
O43 - CFD: 13/04/2016 - [] D -- C:\Users\Paul\AppData\Local\Programs =>.Microsoft Corporation
O43 - CFD: 19/10/2016 - [0] D -- C:\Users\Paul\AppData\Local\Setup23972860
O43 - CFD: 08/12/2017 - [] D -- C:\Users\Paul\AppData\Local\Temp =>.Microsoft Corporation
O43 - CFD: 12/04/2016 - [0] SHD -- C:\Users\Paul\AppData\Local\Temporary Internet Files =>.Microsoft Corporation
O43 - CFD: 08/11/2016 - [] D -- C:\Users\Paul\AppData\Local\TomTom =>.TomTom
O43 - CFD: 27/11/2017 - [] D -- C:\Users\Paul\AppData\Local\VirtualStore =>.Microsoft Corporation
O43 - CFD: 06/11/2017 - [] D -- C:\Users\Paul\AppData\Local\Windows Live =>.Microsoft Corporation
O43 - CFD: 06/11/2017 - [] D -- C:\Users\Paul\AppData\Local\Windows Live Writer =>.Microsoft Corporation
O43 - CFD: 23/12/2016 - [0] D -- C:\Users\Paul\AppData\Local\WMTools Downloaded Files =>.WMTools
O43 - CFD: 05/12/2016 - [] D -- C:\Users\Paul\AppData\Local\Wondershare =>.Wondershare
O43 - CFD: 13/04/2016 - [] D -- C:\Users\Paul\AppData\Local\Xara =>.Xara
O43 - CFD: 08/12/2017 - [] D -- C:\Users\Paul\AppData\Local\ZHP =>.Nicolas Coolman
O43 - CFD: 16/12/2016 - [] D -- C:\Users\Paul\AppData\Local\{8EA2B819-ABF0-D56F-C0C6-F2BD1C140F83}
O43 - CFD: 15/07/2017 - [] D -- C:\Users\Paul\AppData\Local\{8EFFB8A3-AA57-D41B-C7CF-F1F3E3A70D6B}
O43 - CFD: 16/12/2016 - [] D -- C:\Users\Paul\AppData\Local\{F061C6DA-D533-ABAC-BE05-8C7E62D77140}
O43 - CFD: 13/04/2016 - [0] D -- C:\Users\Paul\AppData\Local\Programs\Common =>.Microsoft Corporation
O43 - CFD: 01/09/2017 - [] D -- C:\Users\Paul\Desktop\Album nettoyé
O43 - CFD: 08/08/2017 - [] D -- C:\Users\Paul\Desktop\André Rieu
O43 - CFD: 08/12/2017 - [] D -- C:\Users\Paul\Desktop\Captvty =>.Guillaume
O43 - CFD: 10/07/2017 - [] D -- C:\Users\Paul\Desktop\Clin d'oeil
O43 - CFD: 05/12/2017 - [] D -- C:\Users\Paul\Desktop\Cuisine
O43 - CFD: 07/09/2016 - [] D -- C:\Users\Paul\Desktop\Dictaphone Olympus
O43 - CFD: 25/09/2017 - [] D -- C:\Users\Paul\Desktop\Documents après le décès
O43 - CFD: 19/06/2017 - [] D -- C:\Users\Paul\Desktop\Ecrire
O43 - CFD: 29/06/2017 - [] D -- C:\Users\Paul\Desktop\Films
O43 - CFD: 25/11/2017 - [] D -- C:\Users\Paul\Desktop\Galas d'accordéon avec vidéo
O43 - CFD: 06/12/2017 - [] D -- C:\Users\Paul\Desktop\HP =>.Hewlett-Packard
O43 - CFD: 09/05/2016 - [] D -- C:\Users\Paul\Desktop\Inauguration stand Jean Debreux
O43 - CFD: 11/11/2017 - [] D -- C:\Users\Paul\Desktop\Jardin
O43 - CFD: 18/05/2017 - [] D -- C:\Users\Paul\Desktop\Jeux =>.Games Software
O43 - CFD: 22/10/2017 - [] D -- C:\Users\Paul\Desktop\La Paloma
O43 - CFD: 02/11/2017 - [] D -- C:\Users\Paul\Desktop\liens jardin bio
O43 - CFD: 22/09/2017 - [] D -- C:\Users\Paul\Desktop\Livre Espagne
O43 - CFD: 06/12/2017 - [] D -- C:\Users\Paul\Desktop\Logiciels
O43 - CFD: 03/01/2017 - [] D -- C:\Users\Paul\Desktop\Maï Lys
O43 - CFD: 09/05/2016 - [] D -- C:\Users\Paul\Desktop\Mes 80 ans
O43 - CFD: 16/11/2017 - [] D -- C:\Users\Paul\Desktop\Mobile sfr
O43 - CFD: 25/11/2017 - [] D -- C:\Users\Paul\Desktop\Musique de danse
O43 - CFD: 01/05/2017 - [] D -- C:\Users\Paul\Desktop\Musique et photos
O43 - CFD: 09/04/2017 - [] D -- C:\Users\Paul\Desktop\Nouveaux E Pub
O43 - CFD: 30/04/2017 - [] D -- C:\Users\Paul\Desktop\Nouveaux livres
O43 - CFD: 29/06/2017 - [] D -- C:\Users\Paul\Desktop\Noël Nouvel an 2014
O43 - CFD: 10/07/2017 - [] D -- C:\Users\Paul\Desktop\photos du Camedia
O43 - CFD: 12/07/2017 - [] D -- C:\Users\Paul\Desktop\Photos italie 1
O43 - CFD: 27/06/2017 - [] D -- C:\Users\Paul\Desktop\Photos voyage en Italie
O43 - CFD: 04/12/2017 - [] D -- C:\Users\Paul\Desktop\Scanner Sumikon
O43 - CFD: 26/11/2017 - [] D -- C:\Users\Paul\Desktop\Synopsis des Films d'Espagne
O43 - CFD: 14/07/2009 - [] RD -- C:\Users\Paul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories =>.Microsoft Corporation
O43 - CFD: 14/10/2017 - [] RD -- C:\Users\Paul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools =>.Administrative Tools
O43 - CFD: 14/04/2016 - [] D -- C:\Users\Paul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AMCap
O43 - CFD: 14/05/2016 - [0] D -- C:\Users\Paul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CDex =>.Albert L Faber
O43 - CFD: 13/04/2016 - [] D -- C:\Users\Paul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FormatFactory =>.FormatFactory
O43 - CFD: 19/07/2016 - [0] D -- C:\Users\Paul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Free Registry Fix
O43 - CFD: 19/10/2016 - [] D -- C:\Users\Paul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freemake =>.Freemake
O43 - CFD: 02/07/2017 - [] D -- C:\Users\Paul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Gadwin Systems =>.Gadwin Systems
O43 - CFD: 14/07/2009 - [] RD -- C:\Users\Paul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance =>.Microsoft Corporation
O43 - CFD: 23/12/2016 - [0] D -- C:\Users\Paul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PhotoFiltre 7 =>.Antonio Da Cruz
O43 - CFD: 20/12/2016 - [0] D -- C:\Users\Paul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PhotoFiltre Studio X =>.Antonio Da Cruz
O43 - CFD: 14/05/2016 - [] D -- C:\Users\Paul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Programmes audio
O43 - CFD: 04/12/2017 - [] RD -- C:\Users\Paul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup =>.Microsoft Corporation
O43 - CFD: 14/05/2016 - [] D -- C:\Users\Paul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Suite NCH Software =>.NCH Software
O43 - CFD: 11/05/2017 - [] D -- C:\Users\Paul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR =>.WinRAR
O43 - CFD: 06/04/2017 - [0] D -- C:\Users\Paul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinZip 21.0
O43 - CFD: 14/07/2009 - [0] SHD -- C:\Users\Default\AppData\Local\Application Data =>.Microsoft Corporation
O43 - CFD: 12/04/2016 - [0] SHD -- C:\Users\Default\AppData\Local\Historique =>.Microsoft Corporation
O43 - CFD: 14/07/2009 - [0] SHD -- C:\Users\Default\AppData\Local\History =>.Microsoft Corporation
O43 - CFD: 14/07/2009 - [] D -- C:\Users\Default\AppData\Local\Microsoft =>.Microsoft Corporation
O43 - CFD: 14/04/2016 - [0] D -- C:\Users\Default\AppData\Local\Microsoft Help =>.Microsoft Corporation
O43 - CFD: 14/07/2009 - [0] D -- C:\Users\Default\AppData\Local\Temp =>.Microsoft Corporation
O43 - CFD: 14/07/2009 - [0] SHD -- C:\Users\Default\AppData\Local\Temporary Internet Files =>.Microsoft Corporation
O43 - CFD: 14/07/2009 - [0] SHD -- C:\Users\Default User\AppData\Local\Application Data =>.Microsoft Corporation
O43 - CFD: 12/04/2016 - [0] SHD -- C:\Users\Default User\AppData\Local\Historique =>.Microsoft Corporation
O43 - CFD: 14/07/2009 - [0] SHD -- C:\Users\Default User\AppData\Local\History =>.Microsoft Corporation
O43 - CFD: 14/07/2009 - [] D -- C:\Users\Default User\AppData\Local\Microsoft =>.Microsoft Corporation
O43 - CFD: 14/04/2016 - [0] D -- C:\Users\Default User\AppData\Local\Microsoft Help =>.Microsoft Corporation
O43 - CFD: 14/07/2009 - [0] D -- C:\Users\Default User\AppData\Local\Temp =>.Microsoft Corporation
O43 - CFD: 14/07/2009 - [0] SHD -- C:\Users\Default User\AppData\Local\Temporary Internet Files =>.Microsoft Corporation
O43 - CFD: 14/07/2009 - [] D -- C:\Windows\System32\Config\systemprofile\AppData\Local\Microsoft =>.Microsoft Corporation
O43 - CFD: 18/11/2016 - [0] -- C:\Windows\System32\Config\systemprofile\AppData\Local\Temp =>.Microsoft Corporation
O43 - CFD: 15/06/2016 - [] -- C:\Windows\System32\Config\systemprofile\AppData\Roaming\CyberLink =>.CyberLink Corporation
O43 - CFD: 26/11/2017 - [] -- C:\Windows\System32\Config\systemprofile\AppData\Roaming\DVDVideoSoft =>.DVDVideoSoft
O43 - CFD: 10/10/2017 - [] -- C:\Windows\System32\Config\systemprofile\AppData\Roaming\Macromedia =>.Macromedia
O43 - CFD: 14/07/2009 - [] SD -- C:\Windows\System32\Config\systemprofile\AppData\Roaming\Microsoft =>.Microsoft Corporation

---\\ ShellIconOverlayIdentifiers (SIOI) (2) - 0s
O106 - SIOI: Enhanced Storage Icon Overlay Handler Class [EnhancedStorageShell] - {D9144DCD-E998-4ECA-AB6A-DCD83CCBA16D}. (.Microsoft Corporation - DLL d’extension d’environnement de stockage.) -- C:\Windows\System32\EhStorShell.dll =>.Microsoft Corporation
O106 - SIOI: Sharing Overlay (Private) [SharingPrivate] - {08244EE6-92F0-47f2-9FC9-929BAA2E7235}. (.Microsoft Corporation - Extensions de l’interpréteur de commandes p.) -- C:\Windows\System32\ntshrui.dll =>.Microsoft Corporation

---\\ Raccourcis de menus conceptuels (SCMH) (34) - 1s
O108 - CMH1: 7-Zip [64Bits] - {23170F69-40C1-278A-1000-000100020000} . (.Orphan.)
O108 - CMH1: Adobe.Acrobat.ContextMenu [64Bits] - {D25B2CAB-8A9A-4517-A9B2-CB5F68A5A802} . (.Adobe Systems Inc. - Adobe Acrobat Context Menu.) -- C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\..\Acrobat Elements\ContextMenu64.dll =>.Adobe Systems Inc.
O108 - CMH1: BriefcaseMenu [64Bits] - {85BBD920-42A0-1069-A2E4-08002B30309D} . (.Microsoft Corporation - Porte-documents Windows.) -- C:\Windows\System32\syncui.dll =>.Microsoft Corporation
O108 - CMH1: Cover Designer [64Bits] - {73FCA462-9BD5-4065-A73F-A8E5F6904EF7} . (.Orphan.)
O108 - CMH1: EPP [64Bits] - {09A47860-11B0-4DA5-AFA5-26D86198A780} . (.Microsoft Corporation - Microsoft Security Client Shell Extension.) -- C:\Program Files\Microsoft Security Client\shellext.dll =>.Microsoft Corporation®
O108 - CMH1: Open With [64Bits] - {09799AFB-AD67-11d1-ABCD-00C04FC30936} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll =>.Microsoft Corporation
O108 - CMH1: Open With EncryptionMenu [64Bits] - {A470F8CF-A1E8-4f65-8335-227475AA5C46} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll =>.Microsoft Corporation
O108 - CMH1: Sharing [64Bits] - {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} . (.Microsoft Corporation - Extensions de l’interpréteur de commandes p.) -- C:\Windows\System32\ntshrui.dll =>.Microsoft Corporation
O108 - CMH1: WinRAR [64Bits] - {B41DB860-64E4-11D2-9906-E49FADC173CA} . (.Alexander Roshal - WinRAR shell extension.) -- C:\Program Files (x86)\WinRAR\RarExt64.dll =>.win.rar GmbH®
O108 - CMH1: WinRAR32 [64Bits] - {B41DB860-8EE4-11D2-9906-E49FADC173CA} . (.Orphan.)
O108 - CMH2: Compatibility [64Bits] - {1d27f844-3a1f-4410-85ac-14651078412d} . (.Microsoft Corporation - Bibliothèque d’extension de l’onglet Compat.) -- C:\Windows\System32\acppage.dll =>.Microsoft Corporation
O108 - CMH2: OpenContainingFolderMenu [64Bits] - {37ea3a21-7493-4208-a011-7f9ea79ce9f5} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll =>.Microsoft Corporation
O108 - CMH3: 00avast [64Bits] - {472083B0-C522-11CF-8763-00608CC02F24} . (.Orphan.)
O108 - CMH3: CopyAsPathMenu [64Bits] - {f3d06e7c-1e45-4a26-847e-f9fcdee59be0} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll =>.Microsoft Corporation
O108 - CMH3: MBAMShlExt [64Bits] - {57CE581A-0CB6-4266-9CA0-19364C90A0B3} . (.Malwarebytes - Malwarebytes.) -- C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll =>.Malwarebytes Corporation®
O108 - CMH3: SendTo [64Bits] - {7BA4C740-9E81-11CF-99D3-00AA004AE837} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll =>.Microsoft Corporation
O108 - CMH4: 7-Zip [64Bits] - {23170F69-40C1-278A-1000-000100020000} . (.Orphan.)
O108 - CMH4: EncryptionMenu [64Bits] - {A470F8CF-A1E8-4f65-8335-227475AA5C46} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll =>.Microsoft Corporation
O108 - CMH4: EPP [64Bits] - {09A47860-11B0-4DA5-AFA5-26D86198A780} . (.Microsoft Corporation - Microsoft Security Client Shell Extension.) -- C:\Program Files\Microsoft Security Client\shellext.dll =>.Microsoft Corporation®
O108 - CMH4: Sharing [64Bits] - {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} . (.Microsoft Corporation - Extensions de l’interpréteur de commandes p.) -- C:\Windows\System32\ntshrui.dll =>.Microsoft Corporation
O108 - CMH5: Gadgets [64Bits] - {6B9228DA-9C15-419e-856C-19E768A13BDC} . (.Microsoft Corporation - Zone de déposé du Volet Windows.) -- C:\Program Files\Windows Sidebar\sbdrop.dll =>.Microsoft Corporation
O108 - CMH5: igfxcui [64Bits] - {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} . (.Intel Corporation - igfxpph Module.) -- C:\Windows\system32\igfxpph.dll =>.Intel Corporation
O108 - CMH5: New [64Bits] - {D969A300-E7FF-11d0-A93B-00A0C90F2719} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll =>.Microsoft Corporation
O108 - CMH5: Sharing [64Bits] - {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} . (.Microsoft Corporation - Extensions de l’interpréteur de commandes p.) -- C:\Windows\System32\ntshrui.dll =>.Microsoft Corporation
O108 - CMH6: 7-Zip [64Bits] - {23170F69-40C1-278A-1000-000100020000} . (.Orphan.)
O108 - CMH6: Adobe.Acrobat.ContextMenu [64Bits] - {D25B2CAB-8A9A-4517-A9B2-CB5F68A5A802} . (.Adobe Systems Inc. - Adobe Acrobat Context Menu.) -- C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\..\Acrobat Elements\ContextMenu64.dll =>.Adobe Systems Inc.
O108 - CMH6: BriefcaseMenu [64Bits] - {85BBD920-42A0-1069-A2E4-08002B30309D} . (.Microsoft Corporation - Porte-documents Windows.) -- C:\Windows\System32\syncui.dll =>.Microsoft Corporation
O108 - CMH6: Library Location [64Bits] - {3dad6c5d-2167-4cae-9914-f99e41c12cfa} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll =>.Microsoft Corporation
O108 - CMH6: MBAMShlExt [64Bits] - {57CE581A-0CB6-4266-9CA0-19364C90A0B3} . (.Malwarebytes - Malwarebytes.) -- C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll =>.Malwarebytes Corporation®
O108 - CMH6: WinRAR [64Bits] - {B41DB860-64E4-11D2-9906-E49FADC173CA} . (.Alexander Roshal - WinRAR shell extension.) -- C:\Program Files (x86)\WinRAR\RarExt64.dll =>.win.rar GmbH®
O108 - CMH6: WinRAR32 [64Bits] - {B41DB860-8EE4-11D2-9906-E49FADC173CA} . (.Orphan.)
O108 - CMH7: EnhancedStorageShell [64Bits] - {2854F705-3548-414C-A113-93E27C808C85} . (.Microsoft Corporation - DLL d’extension d’environnement de stockage.) -- C:\Windows\System32\EhStorShell.dll =>.Microsoft Corporation
O108 - CMH7: EPP [64Bits] - {09A47860-11B0-4DA5-AFA5-26D86198A780} . (.Microsoft Corporation - Microsoft Security Client Shell Extension.) -- C:\Program Files\Microsoft Security Client\shellext.dll =>.Microsoft Corporation®
O108 - CMH7: Sharing [64Bits] - {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} . (.Microsoft Corporation - Extensions de l’interpréteur de commandes p.) -- C:\Windows\System32\ntshrui.dll =>.Microsoft Corporation

---\\ Image File Execution Options (4) - 1s
O50 - IFEO:C:\Windows\System32\ie4uinit.exe - (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) [MitigationOptions\\256] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\ieUnatt.exe - (.Microsoft Corporation - Outil d’installation sans assistance d’IE 7.) [MitigationOptions\\256] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\msfeedssync.exe - (.Microsoft Corporation - Microsoft Feeds Synchronization.) [MitigationOptions\\256] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\mshta.exe - (.Microsoft Corporation - Hôte des applications HTML de Microsoft(R).) [MitigationOptions\\256] =>.Microsoft Corporation

---\\ Enumération des clés StartupReg (22) - 1s
O53 - SMSR:HKLM\...\startupreg\Acrobat Assistant 8.0 [Key] [64Bits] . (.Adobe Systems Inc. - AcroTray.) -- C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\acrotray.exe =>.Adobe Systems Inc.
O53 - SMSR:HKLM\...\startupreg\Adobe_ID0EYTHM [Key] [64Bits] . (.Adobe Systems Incorporated - Adobe Version Cue CS3.) -- C:\Program Files (x86)\Common Files\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3Tray.exe =>.Adobe Systems Incorporated
O53 - SMSR:HKLM\...\startupreg\APSDaemon [Key] [64Bits] . (.Apple Inc. - Apple Push.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe =>.Apple Inc.
O53 - SMSR:HKLM\...\startupreg\Chromium [Key] [64Bits] . (.The Chromium Authors - Chromium.) -- c:\Users\Paul\AppData\Local\chromium\application\chrome.exe =>.The Chromium Authors
O53 - SMSR:HKLM\...\startupreg\Gadwin PrintScreen [Key] [64Bits] . (.Gadwin Systems, Inc - Gadwin PrintScreen.) -- C:\Program Files (x86)\Gadwin Systems\PrintScreen\PrintScreen.exe =>.Gadwin Systems, Inc
O53 - SMSR:HKLM\...\startupreg\Gadwin PrintScreen (64-bit) [Key] [64Bits] . (.Gadwin Systems - Gadwin PrintScreen.) -- C:\Program Files\Gadwin\Gadwin PrintScreen\PrintScreen64.exe =>.Gadwin Systems
O53 - SMSR:HKLM\...\startupreg\GwxControlPanelMonitor [Key] [64Bits] . (.UltimateOutsider - GWX Control Panel - Closes and configures t.) -- C:\Program Files (x86)\UltimateOutsider\GWX Control Panel\GWX_control_panel.exe =>.UltimateOutsider
O53 - SMSR:HKLM\...\startupreg\HotKeysCmds [Key] [64Bits] . (.Intel Corporation - hkcmd Module.) -- C:\Windows\system32\hkcmd.exe =>.Intel Corporation
O53 - SMSR:HKLM\...\startupreg\HP Software Update [Key] [64Bits] . (...) -- C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\IgfxTray [Key] [64Bits] . (.Intel Corporation - igfxTray Module.) -- C:\Windows\system32\igfxtray.exe =>.Intel Corporation
O53 - SMSR:HKLM\...\startupreg\IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA} [Key] [64Bits] . (.Nero AG - Nero Home.) -- C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexStoreSvr.exe =>.Nero AG
O53 - SMSR:HKLM\...\startupreg\MyDriveConnect.exe [Key] [64Bits] . (.TomTom - TomTom MyDrive Connect.) -- C:\Program Files (x86)\MyDrive Connect\TomTom MyDrive Connect.exe =>.TomTom
O53 - SMSR:HKLM\...\startupreg\PCMService [Key] [64Bits] . (.CyberLink Corp. - CyberLink PowerCinema Resident Program.) -- C:\Program Files (x86)\CyberLink\PowerCinema\PCMService.exe =>.CyberLink Corp.
O53 - SMSR:HKLM\...\startupreg\Persistence [Key] [64Bits] . (.Intel Corporation - persistence Module.) -- C:\Windows\system32\igfxpers.exe =>.Intel Corporation
O53 - SMSR:HKLM\...\startupreg\Picosmos [Key] [64Bits] . (...) -- C:\Program Files (x86)\PicosmosTools\PicosmosTools.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\ProductUpdater [Key] [64Bits] . (...) -- C:\Program Files (x86)\Common Files\Freemake Shared\ProductUpdater\ProductUpdater.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\QuickTime Task [Key] [64Bits] . (.Apple Computer, Inc. - .) -- C:\Program Files (x86)\QuickTime\qttask.exe =>.Apple Computer, Inc.
O53 - SMSR:HKLM\...\startupreg\Rainlendar2 [Key] [64Bits] . (.Copyright (C) 2006-2012 Kimmo 'Rainy' Pekkola - Rainlendar2.) -- C:\Program Files (x86)\Rainlendar2\Rainlendar2.exe
O53 - SMSR:HKLM\...\startupreg\Skype [Key] [64Bits] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe =>.Skype Technologies S.A.
O53 - SMSR:HKLM\...\startupreg\SystemExplorerAutoStart [Key] [64Bits] . (.Mister Group - System Explorer.) -- C:\Program Files (x86)\System Explorer\SystemExplorer.exe =>.Mister Group
O53 - SMSR:HKLM\...\startupreg\TomTomHOME.exe [Key] [64Bits] . (.TomTom - TomTom HOME.) -- C:\Program Files (x86)\TomTom HOME\TomTomHOME.exe =>.TomTom
O53 - SMSR:HKLM\...\startupreg\vidnotifier.exe [Key] [64Bits] . (.Digital Wave Ltd - Video Notifier.) -- C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\vidnotifier\vidnotifier.exe =>.Digital Wave Ltd

---\\ Liste des pilotes du système (60) - 75s
O58 - SDL:2009/07/14 02:52:21 A . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\drivers\adp94xx.sys [491088] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:52:21 A . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\System32\drivers\adpahci.sys [339536] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:52:21 A . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver (X64).) -- C:\Windows\System32\drivers\adpu320.sys [182864] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:52:21 A . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\Windows\System32\drivers\aliide.sys [15440] =>.Microsoft Windows®
O58 - SDL:2011/03/11 07:41:12 A . (.Advanced Micro Devices - AHCI 1.2 Device Driver.) -- C:\Windows\System32\drivers\amdsata.sys [107904] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:52:20 A . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller D.) -- C:\Windows\System32\drivers\amdsbs.sys [194128] =>.Microsoft Windows®
O58 - SDL:2011/03/11 07:41:12 A . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\Windows\System32\drivers\amdxata.sys [27008] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:52:21 A . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\System32\drivers\arc.sys [87632] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:52:21 A . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\System32\drivers\arcsas.sys [97856] =>.Microsoft Windows®
O58 - SDL:2009/06/10 21:34:23 A . (.Broadcom Corporation - Broadcom NetXtreme Gigabit Ethernet NDIS6.x.) -- C:\Windows\System32\drivers\b57nd60a.sys [270848] =>.Broadcom Corporation
O58 - SDL:2009/06/10 21:41:06 A . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower.) -- C:\Windows\System32\drivers\BrFiltLo.sys [18432] =>.Brother Industries, Ltd.
O58 - SDL:2009/06/10 21:41:06 A . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper.) -- C:\Windows\System32\drivers\BrFiltUp.sys [8704] =>.Brother Industries, Ltd.
O58 - SDL:2009/07/14 02:19:07 A . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\System32\drivers\BrSerId.sys [286720] =>.Brother Industries Ltd.
O58 - SDL:2009/06/10 21:41:10 A . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\System32\drivers\BrSerWdm.sys [47104] =>.Brother Industries Ltd.
O58 - SDL:2009/06/10 21:41:10 A . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\System32\drivers\BrUsbMdm.sys [14976] =>.Brother Industries Ltd.
O58 - SDL:2009/06/10 21:41:10 A . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\System32\drivers\BrUsbSer.sys [14720] =>.Brother Industries Ltd.
O58 - SDL:2009/06/10 21:34:28 A . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.) -- C:\Windows\System32\drivers\bxvbda.sys [468480] =>.Broadcom Corporation
O58 - SDL:2009/07/14 02:52:31 A . (.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\cmdide.sys [17488] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:47:48 A . (.Emulex - Storport Miniport Driver for LightPulse HBA.) -- C:\Windows\System32\drivers\elxstor.sys [530496] =>.Microsoft Windows®
O58 - SDL:2013/07/08 19:12:08 A . (.eMPIA Technology Corp. - USB EMP Audio Device.) -- C:\Windows\System32\drivers\emAudio64.sys [41040] =>.Kworld Computer Co., Ltd.®
O58 - SDL:2013/04/16 11:01:50 A . (.eMPIA Technology Corp. - USB 28xx WDM Driver.) -- C:\Windows\System32\drivers\emDevice64.sys [222592] =>.eMPIA Technology Corp.
O58 - SDL:2013/04/16 11:02:00 A . (.eMPIA Technology Corp. - USB 28xx WDM Lower filter.) -- C:\Windows\System32\drivers\emFilter64.sys [7552] =>.eMPIA Technology Corp.
O58 - SDL:2013/04/16 11:01:40 A . (.eMPIA Technology Corp. - USB 28xx WDM Upper Filter.) -- C:\Windows\System32\drivers\emScan64.sys [8064] =>.eMPIA Technology Corp.
O58 - SDL:2009/06/10 21:34:33 A . (.Broadcom Corporation - Broadcom NetXtreme II 10 GigE VBD.) -- C:\Windows\System32\drivers\evbda.sys [3286016] =>.Broadcom Corporation
O58 - SDL:2017/12/06 17:38:40 A . (.Malwarebytes - Malwarebytes Anti-Ransomware Protection.) -- C:\Windows\System32\drivers\farflt.sys [110016] =>.Malwarebytes Corporation®
O58 - SDL:2017/01/27 07:37:35 A . (.The OpenVPN Project - TAP-Windows Virtual Network Driver (NDIS 6..) -- C:\Windows\System32\drivers\fsfreedometap.sys [34344] =>.F-Secure Corporation®
O58 - SDL:2009/06/10 21:31:59 A . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for.) -- C:\Windows\System32\drivers\hcw85cir.sys [31232] =>.Hauppauge Computer Works, Inc.
O58 - SDL:2010/11/21 04:23:47 A . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Drive.) -- C:\Windows\System32\drivers\HpSAMD.sys [78720] =>.Microsoft Windows®
O58 - SDL:2011/03/11 07:41:26 A . (.Intel Corporation - Intel Matrix Storage Manager driver - x64.) -- C:\Windows\System32\drivers\iaStorV.sys [410496] =>.Microsoft Windows®
O58 - SDL:2011/02/11 18:16:38 A . (.Intel Corporation - Intel Graphics Kernel Mode Driver.) -- C:\Windows\System32\drivers\igdkmd64.sys [10628640] =>.Intel Corporation
O58 - SDL:2009/07/14 02:48:04 A . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\System32\drivers\iirsp.sys [44112] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:48:04 A . (.LSI Corporation - LSI Fusion-MPT FC Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_fc.sys [114752] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:48:04 A . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas.sys [106560] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:48:04 A . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas2.sys [65600] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:48:04 A . (.LSI Corporation - LSI Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_scsi.sys [115776] =>.Microsoft Windows®
O58 - SDL:2017/11/22 12:46:25 A . (...) -- C:\Windows\System32\drivers\mbae64.sys [77440] =>.Malwarebytes Corporation®
O58 - SDL:2017/12/06 17:38:38 A . (.Malwarebytes - Malwarebytes Real-Time Protection.) -- C:\Windows\System32\drivers\mbam.sys [45504] =>.Malwarebytes Corporation®
O58 - SDL:2017/11/22 12:46:51 A . (.Malwarebytes - Malwarebytes Chameleon.) -- C:\Windows\System32\drivers\MbamChameleon.sys [192952] =>.Malwarebytes Corporation®
O58 - SDL:2017/12/08 07:09:30 A . (.Malwarebytes - Malwarebytes SwissArmy.) -- C:\Windows\System32\drivers\mbamswissarmy.sys [252232] =>.Malwarebytes Corporation®
O58 - SDL:2009/07/14 02:48:04 A . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows.) -- C:\Windows\System32\drivers\megasas.sys [35392] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:48:04 A . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\System32\drivers\MegaSR.sys [284736] =>.Microsoft Windows®
O58 - SDL:2017/12/06 17:38:40 A . (.Malwarebytes - Malwarebytes Web Protection.) -- C:\Windows\System32\drivers\mwac.sys [84256] =>.Malwarebytes Corporation®
O58 - SDL:2017/07/28 05:57:21 A . (.Trust.Zone VPN Project - TrustZone VPN.) -- C:\Windows\System32\drivers\neo_vpn.sys [22784] =>.Trust.Zone VPN Project
O58 - SDL:2009/07/14 02:48:26 A . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\System32\drivers\nfrd960.sys [51264] =>.Microsoft Windows®
O58 - SDL:2017/08/03 09:15:58 A . (.Riverbed Technology, Inc. - npf.sys (NT5/6 AMD64) Kernel Driver.) -- C:\Windows\System32\drivers\npf.sys [36600] =>.Riverbed Technology, Inc.®
O58 - SDL:2011/03/11 07:41:34 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\System32\drivers\nvraid.sys [148352] =>.Microsoft Windows®
O58 - SDL:2011/03/11 07:41:34 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\System32\drivers\nvstor.sys [166272] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:45:46 A . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\Windows\System32\drivers\ql2300.sys [1524816] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:45:45 A . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\Windows\System32\drivers\ql40xx.sys [128592] =>.Microsoft Windows®
O58 - SDL:2009/03/01 22:05:32 A . (.Realtek Corporation - Realtek 8101E/8168/8169 NDIS 6.20 64-bit Dr.) -- C:\Windows\System32\drivers\Rt64win7.sys [187392] =>.Realtek Corporation
O58 - SDL:2009/06/10 21:35:53 A . (.Realtek Semiconductor Corporation - Realtek 10/100 X64 Driver.) -- C:\Windows\System32\drivers\Rtnic64.sys [51712] =>.Realtek Semiconductor Corporation
O58 - SDL:2009/06/10 21:37:19 A . (.Macrovision Corporation, Macrovision Europe Limited, - Macrovision SECURITY Driver.) -- C:\Windows\System32\drivers\secdrv.sys [23040] =>.Macrovision Corporation, Macrovision Europe Limited,
O58 - SDL:2009/07/14 01:00:40 A . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\System32\drivers\serial.sys [94208] =>.Brother Industries Ltd.
O58 - SDL:2009/07/14 02:45:45 A . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\System32\drivers\sisraid2.sys [43584] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:45:46 A . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\System32\drivers\sisraid4.sys [80464] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:45:55 A . (.Promise Technology - Promise SuperTrak EX Series Driver for Win.) -- C:\Windows\System32\drivers\stexstor.sys [24656] =>.Microsoft Windows®
O58 - SDL:2016/04/28 14:05:50 A . (.Oracle Corporation - VirtualBox NDIS 6.0 Host-Only Network Adapt.) -- C:\Windows\System32\drivers\VBoxNetAdp6.sys [119712] =>.Oracle Corporation®
O58 - SDL:2016/04/28 14:05:50 A . (.Oracle Corporation - VirtualBox NDIS 6.0 Lightweight Filter Driv.) -- C:\Windows\System32\drivers\VBoxNetLwf.sys [192352] =>.Oracle Corporation®
O58 - SDL:2009/07/14 02:45:55 A . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\viaide.sys [17488] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:45:55 A . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\Windows\System32\drivers\vsmraid.sys [161872] =>.Microsoft Windows®

---\\ Derniers fichiers modifiés ou crées (Utilisateur) (6) - 86s
O61 - LFC: 2017/12/03 09:13:26 A . (..) -- C:\Users\Paul\AppData\Roaming\Apowersoft\ApowersoftVideoHelper.dll [7824296]
O61 - LFC: 2017/12/07 09:05:16 A . (.Ammyy LLC.) -- C:\Users\Paul\Desktop\AA_v3.exe [780432] {00E72F7DAF598D88B5ACFB72A81B5040E8} =>.SUP.Ammyy
O61 - LFC: 2017/12/04 14:33:52 A . (..) -- C:\Users\Paul\Downloads\HPEasyStart_6_5_3442_26 (1).exe [5971872] {0375245BFA2FCF3DE7FEE078C9FF9890}
O61 - LFC: 2017/12/04 14:42:36 A . (..) -- C:\Users\Paul\Downloads\HPEasyStart_6_5_3442_26 (2).exe [5971872] {0375245BFA2FCF3DE7FEE078C9FF9890}
O61 - LFC: 2017/12/04 14:47:04 A . (..) -- C:\Users\Paul\Downloads\HPEasyStart_6_5_3442_26 (3).exe [5971872] {0375245BFA2FCF3DE7FEE078C9FF9890}
O61 - LFC: 2017/12/04 14:28:36 A . (..) -- C:\Users\Paul\Downloads\HPEasyStart_6_5_3442_26.exe [5971872] {0375245BFA2FCF3DE7FEE078C9FF9890}

---\\ Associations Shell Spawning (11) - 1s
O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe =>.Microsoft Corporation
O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Ob.) -- C:\Windows\System32\eventvwr.exe =>.Microsoft Corporation
O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (...) -- %1" %*
O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe =>.Microsoft Corporation
O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S
O67 - Shell Spawning: <.html> [HKCU\..\open\Command] (...) -- C:\Program Files\Opera\Launcher.exe

---\\ Menu de démarrage Internet (12) - 0s
O68 - StartMenuInternet: [64Bits][HKLM\..\Shell\open\Command] (.The Chromium Authors - Chromium.) -- C:\Users\Paul\AppData\Local\Chromium\Application\chrome.exe =>.The Chromium Authors
O68 - StartMenuInternet: [64Bits][HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc®
O68 - StartMenuInternet: [64Bits][HKLM\..\Shell\open\Command] (...) -- iexplore.exe
O68 - StartMenuInternet: [64Bits][HKLM\..\InstallInfo\ShowIconsCommand] (.The Chromium Authors - Chromium.) -- C:\Users\Paul\AppData\Local\chromium\Application\chrome.exe =>.The Chromium Authors
O68 - StartMenuInternet: [64Bits][HKLM\..\InstallInfo\ShowIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc.
O68 - StartMenuInternet: [64Bits][HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation
O68 - StartMenuInternet: [64Bits][HKLM\..\InstallInfo\ReinstallCommand] (.The Chromium Authors - Chromium.) -- C:\Users\Paul\AppData\Local\chromium\Application\chrome.exe =>.The Chromium Authors
O68 - StartMenuInternet: [64Bits][HKLM\..\InstallInfo\ReinstallCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc.
O68 - StartMenuInternet: [64Bits][HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation
O68 - StartMenuInternet: [64Bits][HKLM\..\InstallInfo\HideIconsCommand] (.The Chromium Authors - Chromium.) -- C:\Users\Paul\AppData\Local\chromium\Application\chrome.exe =>.The Chromium Authors
O68 - StartMenuInternet: [64Bits][HKLM\..\InstallInfo\HideIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc.
O68 - StartMenuInternet: [64Bits][HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation

---\\ Recherche d'infection sur les navigateurs (3) - 0s
O69 - SBI: SearchScopes [HKCU] [64Bits]{2211d4a5-48d0-47f5-a7cd-81e861470f7f} [DefaultScope] - (Bing) - http://www.bing.com/ =>.Bing.com
O69 - SBI: SearchScopes [HKCU] [64Bits]{6A1806CD-94D4-4689-BA73-E35EA1EA9990} - (Google) - http://www.google.com/ =>.Google Inc.
O69 - SBI: SearchScopes [HKLM] [64Bits]{2211d4a5-48d0-47f5-a7cd-81e861470f7f} - (Google) - http://www.google.com/ =>.Google Inc.

---\\ Enumère les services démarrés par Svchost (32) - 1s
O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d’application.) -- C:\Windows\System32\aelupsvc.dll [72192] =>.Microsoft Corporation
O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [80384] =>.Microsoft Corporation
O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [80384] =>.Microsoft Corporation
O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\System32\srvsvc.dll [236032] =>.Microsoft Corporation
O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\System32\gpsvc.dll [794624] =>.Microsoft Corporation
O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\IKEEXT.DLL [859648] =>.Microsoft Corporation
O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Service Audio Windows.) -- C:\Windows\System32\audiosrv.dll [680448] =>.Microsoft Corporation
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’.) -- C:\Windows\System32\rasauto.dll [99328] =>.Microsoft Corporation
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire de connexions d’accès distant.) -- C:\Windows\System32\rasmans.dll [344064] =>.Microsoft Corporation
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll [97792] =>.Microsoft Corporation
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements systèm.) -- C:\Windows\System32\Sens.dll [64512] =>.Microsoft Corporation
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l’application d’assistance à.) -- C:\Windows\System32\ipnathlp.dll [359424] =>.Microsoft Corporation
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM.) -- C:\Windows\System32\tapisrv.dll [316928] =>.Microsoft Corporation
O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gestionnaire des connexions distantes du se.) -- C:\Windows\System32\termsrv.dll [683520] =>.Microsoft Corporation
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Up.) -- C:\Windows\System32\wuaueng.dll [2651136] =>.Microsoft Corporation
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière.) -- C:\Windows\System32\qmgr.dll [849920] =>.Microsoft Corporation
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [370688] =>.Microsoft Corporation
O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur u.) -- C:\Windows\System32\iphlpsvc.dll [569344] =>.Microsoft Corporation
O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d’ouverture de session secon.) -- C:\Windows\System32\seclogon.dll [30720] =>.Microsoft Corporation
O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll [70144] =>.Microsoft Corporation
O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\System32\iscsiexe.dll [156672] =>.Microsoft Corporation
O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédia.) -- C:\Windows\System32\mmcss.dll [67584] =>.Microsoft Corporation
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll [242688] =>.Microsoft Corporation
O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à.) -- C:\Windows\System32\SessEnv.dll [121856] =>.Microsoft Corporation
O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\System32\browser.dll [136704] =>.Microsoft Corporation
O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll [111104] =>.Microsoft Corporation
O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\System32\schedsvc.dll [1110016] =>.Microsoft Corporation
O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\Windows\System32\KMSVC.DLL [90624] =>.Microsoft Corporation
O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll [84480] =>.Microsoft Corporation
O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll [210432] =>.Microsoft Corporation
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\Windows\System32\themeservice.dll [44544] =>.Microsoft Corporation
O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\Windows\System32\bdesvc.dll [100864] =>.Microsoft Corporation

---\\ Liste des exceptions du parefeu Windows (12) - 6s
O87 - FAEL: "{A9BA8AF6-10E6-463C-A403-99CB55E06904}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\Pinnacle\Studio 11\programs\PMSRegisterFile.exe
O87 - FAEL: "{CD17289C-4287-4AA5-8011-0A452388DA25}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\Pinnacle\Studio 11\programs\PMSRegisterFile.exe
O87 - FAEL: "{39C09B3C-F11B-4FDD-8F70-94533BA7C75E}" [In-None-P6-TRUE] .(...) -- C:\Users\Paul\AppData\Local\Temp\7zS64C0\HPDiagnosticCoreUI.exe (.not file.) =>.Temporary file not necessary
O87 - FAEL: "{725124DE-381A-4A01-BDED-96A789879BF5}" [In-None-P17-TRUE] .(...) -- C:\Users\Paul\AppData\Local\Temp\7zS64C0\HPDiagnosticCoreUI.exe (.not file.) =>.Temporary file not necessary
O87 - FAEL: "{AB6B1FBB-5E86-4CFE-9F78-A95FC7C88706}" [In-None-P6-TRUE] .(...) -- C:\Users\Paul\AppData\Local\Temp\7zS6853\HPDiagnosticCoreUI.exe (.not file.) =>.Temporary file not necessary
O87 - FAEL: "{C4D9175B-F93B-4491-90ED-B13B57E923D5}" [In-None-P17-TRUE] .(...) -- C:\Users\Paul\AppData\Local\Temp\7zS6853\HPDiagnosticCoreUI.exe (.not file.) =>.Temporary file not necessary
O87 - FAEL: "{00D41255-DE4C-48C9-B7A0-6E8A8DFB6873}" [In-None-P6-TRUE] .(...) -- C:\Users\Paul\AppData\Local\Temp\7zS6853\HPDiagnosticCoreUI.exe (.not file.) =>.Temporary file not necessary
O87 - FAEL: "{B06A56A8-8155-44AB-95DD-28FD1989FF76}" [In-None-P17-TRUE] .(...) -- C:\Users\Paul\AppData\Local\Temp\7zS6853\HPDiagnosticCoreUI.exe (.not file.) =>.Temporary file not necessary
O87 - FAEL: "{36BBF0C3-3792-4EA5-BFA2-2033C0BFF86E}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\Apowersoft\Streaming Video Recorder 6\Streaming Video Recorder 6.exe (.not file.) =>.Apowersoft
O87 - FAEL: "{C390F7C6-BE05-4ABF-AFA7-E3FE0A42A04A}" [Out-None-P17-TRUE] .(...) -- C:\Program Files (x86)\Apowersoft\Streaming Video Recorder 6\Streaming Video Recorder 6.exe (.not file.) =>.Apowersoft
O87 - FAEL: "{4B39E2B8-1129-4B4D-84E3-613B171B3B63}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\Apowersoft\Streaming Video Recorder 6\rtmpsrv.exe (.not file.) =>.Apowersoft
O87 - FAEL: "{2829B6A5-BF23-48AC-AEDA-314B14DB5A19}" [Out-None-P17-TRUE] .(...) -- C:\Program Files (x86)\Apowersoft\Streaming Video Recorder 6\rtmpsrv.exe (.not file.) =>.Apowersoft

---\\ Recherche des packages WindowsInstaller (98) - 31s
[MD5.492830CB35D95415072E307C37BAA339] [WIS][2008/08/04 16:07:32] (.Moyea.) -- C:\Windows\Installer\117a669.msi [1767424] =>.Moyea
[MD5.AFDC1F08E84174004EF466B66AE2877F] [WIS][2012/01/24 11:45:30] (.MAGIX AG - Firebird SQL Server - MAGIX Edition - v2.1..) -- C:\Windows\Installer\126a9e5.msi [4622848] =>.MAGIX AG
[MD5.45DABA8219E6210E56DDF5B6FF43146D] [WIS][2015/09/23 12:25:12] (.MAGIX Software GmbH - MAGIX Speed burnR (MSI) - v7.0.1.27 (fr-FR).) -- C:\Windows\Installer\126a9ee.msi [1761280] =>.MAGIX Software GmbH
[MD5.4241C5B4C85E06EC86D1952FD278C486] [WIS][2015/10/02 15:04:52] (.MAGIX Software GmbH - MAGIX Fotostory 2016 Deluxe - v15.0.1.105 (.) -- C:\Windows\Installer\126a9f7.msi [5750784] =>.MAGIX Software GmbH
[MD5.972EA51134E50933BD6EB5F60A2CFEF6] [WIS][2016/08/26 12:27:50] (.TomTom.) -- C:\Windows\Installer\147e5bb.msi [751104] =>.TomTom
[MD5.9E1E9100FC1A17491A4B02BDB4266960] [WIS][2014/04/04 19:00:00] (.Google Inc. - Indique au fichier Javascript Google Analyt.) -- C:\Windows\Installer\14c2e6d.msi [243712] =>.Google Inc.
[MD5.C018E08D2CE436BA6EE69766076DAFA4] [WIS][2008/05/21 11:57:23] (.CyberLink Corp. - InstallShield® 12 - Premier Edition 12.0.) -- C:\Windows\Installer\14c2e72.msi [8451584] =>.CyberLink Corp.
[MD5.E31071EFC6D33B04246C807F8D9F3CDA] [WIS][2016/04/13 16:42:15] (.SmartSound Software Inc - SmartSound Quicktracks.) -- C:\Windows\Installer\14c2e8e.msi [5570048] =>.SmartSound Software Inc
[MD5.86E5659F9F4A0D2663249E4E11413E21] [WIS][2008/05/16 08:14:26] (.CyberLink Corp. - InstallShield® 12 - Premier Edition 12.0.) -- C:\Windows\Installer\14c2e9f.msi [2198016] =>.CyberLink Corp.
[MD5.74D68E762EF3F9FBFFF443992D6B3DE1] [WIS][2017/06/21 12:57:21] (.Corel Corporation - Install Manager for Pinnacle Studio 17.) -- C:\Windows\Installer\16db38d.msi [8519680] =>.Corel Corporation
[MD5.FFBC82D86A713E32BDC888DF5F592828] [WIS][2013/10/19 14:01:43] (.Corel Corporation - Pinnacle Studio.) -- C:\Windows\Installer\16db39a.msi [23131648] =>.Corel Corporation
[MD5.CE67D2F0EAAFE430D3D4F333F2C65F5B] [WIS][2013/10/19 13:07:05] (.Pinnacle - Dazzle Video Capture DVC100 X64 Driver 1.06.) -- C:\Windows\Installer\16db3a2.msi [1359872] =>.Pinnacle
[MD5.4519B7AEA2DDE2E78A190C21401F5FA6] [WIS][2013/10/18 18:01:26] (.Corel Corporation - InstallShield® 2012 - Professional Edition .) -- C:\Windows\Installer\16db3ab.msi [5313536] =>.Corel Corporation
[MD5.8C11D1FAF7012DBB5A113BFFC1D3E23E] [WIS][2017/06/21 13:23:28] (.InstallShield - InstallShield® 2010 - Professional Edition .) -- C:\Windows\Installer\16db3b1.msi [35408384] =>.InstallShield
[MD5.4A1CDCC3BD3197EAC2C8A28946DC39E5] [WIS][2017/06/21 13:25:26] (.InstallShield - InstallShield® 2010 - Professional Edition .) -- C:\Windows\Installer\16db3b6.msi [232575480] =>.InstallShield
[MD5.5F0A91122EEDD32E078DFCE2102508C8] [WIS][2017/06/21 13:27:51] (.InstallShield - InstallShield® 2012 - Professional Edition .) -- C:\Windows\Installer\16db3bf.msi [184385536] =>.InstallShield
[MD5.FEA3AB43DEFDF858E4F41694804D61D2] [WIS][2017/06/21 13:32:40] (.InstallShield - InstallShield® 2012 - Professional Edition .) -- C:\Windows\Installer\16db3c8.msi [1133157376] =>.InstallShield
[MD5.58909212D9CDCCC7C10437F532EF4133] [WIS][2017/06/21 13:38:54] (.Corel Corporation - ScoreFitter Volumes 1-2.) -- C:\Windows\Installer\16db3d1.msi [5171712] =>.Corel Corporation
[MD5.3F8D12501220E21C70F7A2EF1B3215A3] [WIS][2017/06/21 13:39:25] (.Corel Corporation - Creative Pack Volume 1.) -- C:\Windows\Installer\16db3da.msi [50573824] =>.Corel Corporation
[MD5.5CD11240A563E5A7758F2051D5973AB9] [WIS][2017/06/21 13:39:55] (.Corel Corporation - Title Extreme.) -- C:\Windows\Installer\16db3e3.msi [7955456] =>.Corel Corporation
[MD5.C33C072FE2E6A16E1DDBB4A3C4B3737C] [WIS][2017/04/07 09:36:49] (.HP - HP Scan Dropbox destination plugin.) -- C:\Windows\Installer\170315.msi [155648] =>.HP
[MD5.3AC7D2899ADAD163ECD1EB5B7494F7F8] [WIS][2017/04/07 09:36:50] (.HP - HP Scan Google Drive destination plugin.) -- C:\Windows\Installer\17031f.msi [155648] =>.HP
[MD5.FF7CBDEF92E96CE78CEEF2638B1872DE] [WIS][2017/04/07 09:36:51] (.Hewlett Packard - HP ENVY 4520 series Get product specific he.) -- C:\Windows\Installer\170329.msi [159744] =>.Hewlett Packard
[MD5.85B3101885645345C351E6CD75D172C7] [WIS][2017/04/07 09:36:47] (.HP Inc. - Product Improvement Study for HP ENVY 4520 .) -- C:\Windows\Installer\17033e.msi [290816] =>.HP Inc.
[MD5.1504667BA3C10D841C0B76B6412FAFB5] [WIS][2015/03/17 09:41:29] (.Adobe Systems Incorporated.) -- C:\Windows\Installer\195ffbd.msi [2805760] =>.Adobe Systems Incorporated
[MD5.1B720C225226D66085F7F08371F28909] [WIS][2015/07/02 18:23:34] (.Apple Inc. - Apple Application Support Installer.) -- C:\Windows\Installer\225b31.msi [21402624] =>.Apple Inc.
[MD5.A20C8EDDC732E30F7EC5A985843388ED] [WIS][2015/07/02 19:30:50] (.Apple Inc. - Apple Software Update Installer.) -- C:\Windows\Installer\225b39.msi [2323456] =>.Apple Inc.
[MD5.49C522E7E153764283ECAFD486D901E4] [WIS][2017/04/07 09:36:42] (.HP Inc. - HP ENVY 4520 series Basic Device Software.) -- C:\Windows\Installer\2cb297.msi [5242880] =>.HP Inc.
[MD5.B098F5568DF7E533BE7E422AF64FD909] [WIS][2015/10/21 16:37:24] (.OpenOffice - OpenOffice 4.1.2.) -- C:\Windows\Installer\325dd3.msi [2314240] =>.OpenOffice
[MD5.F0EE2E7F283866A2A0FEA9BE2D12A979] [WIS][2017/11/14 20:46:04] (.Google Inc. - Google Update Helper.) -- C:\Windows\Installer\359c3f5.msi [40960] =>.Google Inc.
[MD5.A666B14C461CC7207C0C9B3D0D2D28F3] [WIS][2017/11/15 12:57:41] (.Adobe Systems Incorporated - Adobe ARM Installer.) -- C:\Windows\Installer\6ce8dd3.msi [880128] =>.Adobe Systems Incorporated
[MD5.2A09A8902441C9331CBB145E66712FF9] [WIS][2002/06/25 10:42:08] (.D-Link - DFE-530TX Driver.) -- C:\Windows\Installer\71d69.msi [1178820] =>.D-Link
[MD5.F8896AF4EFC0F6BCC3D4EE0F02B59A0F] [WIS][2016/04/13 07:16:06] (.Nero AG - Nero Info.) -- C:\Windows\Installer\73c98c.msi [1168896] =>.Nero AG
[MD5.A4E38CFE9E7D24ADCC71EBF910821B64] [WIS][2007/09/21 15:25:05] (.Nero AG.) -- C:\Windows\Installer\73c992.msi [5990400] =>.Nero AG
[MD5.B7C716168EDE1250A0067783C22081CA] [WIS][2008/05/15 08:07:46] (.Nero AG - Nero 8, Copyright 2007 Nero AG and its lice.) -- C:\Windows\Installer\73c997.msi [8194048] =>.Nero AG
[MD5.2FC1E7A12F792B6627C4FB92CDCCD4CD] [WIS][2007/10/01 14:38:00] (.Nero AG.) -- C:\Windows\Installer\73c99d.msi [1404416] =>.Nero AG
[MD5.DD1784C38AB2D7DBCD475892A03648BE] [WIS][2007/03/30 01:23:06] (.Pinnacle Systems - Yahoo! Desktop Login.) -- C:\Windows\Installer\75a688e.msi [612864] =>.Pinnacle Systems
[MD5.B90332DBAAAD3AF3E5D65BED272D49AB] [WIS][2007/04/12 09:07:42] (.Pinnacle Systems.) -- C:\Windows\Installer\75a6895.msi [10751488] =>.Pinnacle Systems
[MD5.800FC4E9E7A5E3121F8F30B06C4441B2] [WIS][2007/06/22 07:04:26] (.Adobe Systems, Inc..) -- C:\Windows\Installer\9d3a3b.msi [1837204] =>.Adobe Systems, Inc.
[MD5.CDA75EBAA8239D0C7F6405926326FCBA] [WIS][2007/06/22 07:02:26] (.Adobe Systems, Inc..) -- C:\Windows\Installer\9d3a42.msi [2435072] =>.Adobe Systems, Inc.
[MD5.BDE036D7E9BBC3364DEB06061A28B52C] [WIS][2007/06/22 07:02:24] (.Adobe Systems, Inc..) -- C:\Windows\Installer\9d3a49.msi [1772544] =>.Adobe Systems, Inc.
[MD5.7C7C1B9C6AC3746C9C7BF0E135E14CB4] [WIS][2007/06/22 07:02:24] (.Adobe Systems, Inc..) -- C:\Windows\Installer\9d3a50.msi [2434048] =>.Adobe Systems, Inc.
[MD5.42EE64620C0404B327A8A344B672F020] [WIS][2007/06/22 07:02:28] (.Adobe Systems, Inc..) -- C:\Windows\Installer\9d3a57.msi [1808896] =>.Adobe Systems, Inc.
[MD5.45E4B231980E470E660238C0204019BC] [WIS][2007/06/22 07:02:28] (.Adobe Systems, Inc..) -- C:\Windows\Installer\9d3a5e.msi [1817088] =>.Adobe Systems, Inc.
[MD5.3F4E0E5C56A6DEBC2DE3211CFDEE63D9] [WIS][2007/06/22 07:03:04] (.Adobe Systems, Inc..) -- C:\Windows\Installer\9d3a65.msi [1785344] =>.Adobe Systems, Inc.
[MD5.1B9EF16322903EC8882E9D67AA8E2412] [WIS][2007/06/22 07:04:12] (.Adobe Systems, Inc..) -- C:\Windows\Installer\9d3a6c.msi [1782272] =>.Adobe Systems, Inc.
[MD5.06C3F205211E12F9FCEB2FB48F6A1C78] [WIS][2007/06/22 07:02:26] (.Adobe Systems, Inc..) -- C:\Windows\Installer\9d3a73.msi [2644992] =>.Adobe Systems, Inc.
[MD5.B062250D62ACECEDEE7BF1CFE6F2D805] [WIS][2007/06/22 07:04:22] (.Adobe Systems, Inc..) -- C:\Windows\Installer\9d3a7a.msi [1776128] =>.Adobe Systems, Inc.
[MD5.81BE2212DC1007B4A99482D133F3AD07] [WIS][2007/06/22 07:02:42] (.Adobe Systems, Inc..) -- C:\Windows\Installer\9d3a82.msi [2449408] =>.Adobe Systems, Inc.
[MD5.EBC8382F8C73041B938A4AF82F03B2D7] [WIS][2007/06/22 07:02:50] (.Adobe Systems, Inc..) -- C:\Windows\Installer\9d3a89.msi [1836032] =>.Adobe Systems, Inc.
[MD5.032B20F743E381F8DFFE32B1626706F8] [WIS][2007/06/22 07:04:20] (.Adobe Systems, Inc..) -- C:\Windows\Installer\9d3a90.msi [2267136] =>.Adobe Systems, Inc.
[MD5.215767820AA77D9EB7ED4EF420D3C157] [WIS][2007/06/22 07:02:32] (.Adobe Systems, Inc..) -- C:\Windows\Installer\9d3a98.msi [1771520] =>.Adobe Systems, Inc.
[MD5.8612DF22CA45941EF404593F3721B861] [WIS][2007/06/22 07:02:32] (.Adobe Systems, Inc..) -- C:\Windows\Installer\9d3a9f.msi [2211840] =>.Adobe Systems, Inc.
[MD5.5AA97EDAD2C4E93CE1CAB2B248AB4133] [WIS][2007/06/22 07:04:22] (.Adobe Systems, Inc..) -- C:\Windows\Installer\9d3aa6.msi [1815552] =>.Adobe Systems, Inc.
[MD5.1C383E96E230E05364BB06778142EC77] [WIS][2007/06/22 07:02:28] (.Adobe Systems, Inc..) -- C:\Windows\Installer\9d3aad.msi [1783296] =>.Adobe Systems, Inc.
[MD5.66C064CC107957F438BC58B830B90A04] [WIS][2007/06/22 07:03:04] (.Adobe Systems, Inc..) -- C:\Windows\Installer\9d3ab4.msi [1817088] =>.Adobe Systems, Inc.
[MD5.D479AC94072CD84FF0D18E9FA2A3E9C7] [WIS][2007/06/22 07:02:50] (.Adobe Systems, Inc..) -- C:\Windows\Installer\9d3abb.msi [1800192] =>.Adobe Systems, Inc.
[MD5.86E099C8F6F82E536459995ECA73CE2D] [WIS][2007/06/22 07:02:28] (.Adobe Systems, Inc..) -- C:\Windows\Installer\9d3ac3.msi [1772032] =>.Adobe Systems, Inc.
[MD5.25AFC7C5DA03E2A415553CE4244B9075] [WIS][2007/06/22 07:02:28] (.Adobe Systems, Inc..) -- C:\Windows\Installer\9d3acb.msi [1772544] =>.Adobe Systems, Inc.
[MD5.989939C571671453C39FB19F68D9E741] [WIS][2007/06/22 07:02:30] (.Adobe Systems, Inc..) -- C:\Windows\Installer\9d3ad3.msi [1772032] =>.Adobe Systems, Inc.
[MD5.3CF68E132BD4A63B6046B730A96E0978] [WIS][2007/06/22 07:04:22] (.Adobe Systems, Inc..) -- C:\Windows\Installer\9d3ada.msi [1782272] =>.Adobe Systems, Inc.
[MD5.A0FD0F550CB94FB8E2F0491BA7E52E58] [WIS][2007/06/22 07:04:22] (.Adobe Systems, Inc..) -- C:\Windows\Installer\9d3ae1.msi [1814528] =>.Adobe Systems, Inc.
[MD5.671E75AA918BF75923729A036F11EA30] [WIS][2007/06/22 07:03:06] (.Adobe Systems, Inc..) -- C:\Windows\Installer\9d3ae8.msi [1836032] =>.Adobe Systems, Inc.
[MD5.ED5D0E5C208CB4E150B872AB1CEF73C0] [WIS][2007/06/22 07:04:12] (.Adobe Systems, Inc..) -- C:\Windows\Installer\9d3aef.msi [2486784] =>.Adobe Systems, Inc.
[MD5.023E07056BA0344C3AE9D045003094B6] [WIS][2007/06/22 07:02:30] (.Adobe Systems, Inc..) -- C:\Windows\Installer\9d3af6.msi [1773568] =>.Adobe Systems, Inc.
[MD5.80962446765787CBBEA493750B66F5CE] [WIS][2007/06/22 07:02:42] (.Adobe Systems, Inc..) -- C:\Windows\Installer\9d3afd.msi [4281856] =>.Adobe Systems, Inc.
[MD5.BD3DE5C139EF664C741CC31D4414F3FE] [WIS][2007/06/22 07:02:22] (.Adobe Systems, Inc..) -- C:\Windows\Installer\9d3b05.msi [1940480] =>.Adobe Systems, Inc.
[MD5.26437EEECBEAA09C3C492FBDFED8AF36] [WIS][2007/06/22 07:03:04] (.Adobe Systems, Inc..) -- C:\Windows\Installer\9d3b0c.msi [1842688] =>.Adobe Systems, Inc.
[MD5.EF7E11AE27ED13FCFB33319FAB2B53C3] [WIS][2007/06/22 07:03:04] (.Adobe Systems, Inc..) -- C:\Windows\Installer\9d3b13.msi [1777152] =>.Adobe Systems, Inc.
[MD5.42A0F8EA2C55695416556CBB6CDE8D9F] [WIS][2007/06/22 07:03:36] (.Adobe Systems, Inc..) -- C:\Windows\Installer\9d3b1a.msi [1812480] =>.Adobe Systems, Inc.
[MD5.8F7C9DB54C628D412E73618C256F7E4E] [WIS][2007/06/22 07:04:22] (.Adobe Systems, Inc..) -- C:\Windows\Installer\9d3b21.msi [1772544] =>.Adobe Systems, Inc.
[MD5.1C53F69E8466A0BBBF48FDAD4C9CF97B] [WIS][2007/06/22 07:04:22] (.Adobe Systems, Inc..) -- C:\Windows\Installer\9d3b28.msi [1833472] =>.Adobe Systems, Inc.
[MD5.24E269EA65C3C683C323D18012DE5F6D] [WIS][2007/06/22 07:02:28] (.Adobe Systems, Inc..) -- C:\Windows\Installer\9d3b2f.msi [1814528] =>.Adobe Systems, Inc.
[MD5.4864853BDF118B064B24CF242E467181] [WIS][2007/06/22 07:03:22] (.Adobe Systems, Inc..) -- C:\Windows\Installer\9d3b45.msi [1947136] =>.Adobe Systems, Inc.
[MD5.28EDA85BB581733A28B79DA17A8479DC] [WIS][2007/06/22 07:04:22] (.Adobe Systems, Inc..) -- C:\Windows\Installer\9d3b4c.msi [1776128] =>.Adobe Systems, Inc.
[MD5.2ED61803F8DBB5E49CF83D9515F9AD63] [WIS][2007/06/22 07:01:36] (.Adobe Systems Incorporated - Installers.) -- C:\Windows\Installer\9d3b67.msi [10800640] =>.Adobe Systems Incorporated
[MD5.04866B41B536EAA9DDC1F8DF09D591AA] [WIS][2007/06/22 07:02:42] (.Adobe Systems, Inc..) -- C:\Windows\Installer\9d3b72.msi [8930816] =>.Adobe Systems, Inc.
[MD5.5F781AED79FBB03FA6BD9653A5D806AC] [WIS][2007/06/22 07:03:36] (.Adobe Systems, Inc..) -- C:\Windows\Installer\9d3b81.msi [6834688] =>.Adobe Systems, Inc.
[MD5.C674CF5EFE756587DBDE84C27164C74B] [WIS][2007/06/22 07:04:12] (.Adobe Systems, Inc..) -- C:\Windows\Installer\9d3b89.msi [7685632] =>.Adobe Systems, Inc.
[MD5.41DD4584A5039E9E72C3163EF1C5288F] [WIS][2007/06/22 07:02:48] (.Adobe Systems, Inc..) -- C:\Windows\Installer\9d3b91.msi [1936896] =>.Adobe Systems, Inc.
[MD5.8765743CEE10E773A028B48CB12B8DEA] [WIS][2007/06/22 07:04:12] (.Adobe Systems, Inc..) -- C:\Windows\Installer\9d3b99.msi [3097088] =>.Adobe Systems, Inc.
[MD5.020E6555596A38CCC76F03D48A4CCDA8] [WIS][2007/06/22 07:02:30] (.Adobe Systems, Inc..) -- C:\Windows\Installer\9d3ba1.msi [5026816] =>.Adobe Systems, Inc.
[MD5.5455FE88EBBCC2A4EB098C9B9515DDAB] [WIS][2007/06/22 07:02:34] (.Adobe Systems, Inc..) -- C:\Windows\Installer\9d3ba9.msi [5427712] =>.Adobe Systems, Inc.
[MD5.4FF482C0788C604AD4360706688E4800] [WIS][2007/06/22 07:02:42] (.Adobe Systems, Inc..) -- C:\Windows\Installer\9d3bb1.msi [2372096] =>.Adobe Systems, Inc.
[MD5.74CB2075FAB44C03B21B6D80A8EBFB13] [WIS][2007/06/22 07:03:36] (.Adobe Systems, Inc..) -- C:\Windows\Installer\9d3bc6.msi [4618240] =>.Adobe Systems, Inc.
[MD5.E63AD62360E46C2D83B91D578C4025F0] [WIS][2007/06/22 07:02:36] (.Adobe Systems, Inc..) -- C:\Windows\Installer\9d3bdb.msi [4679680] =>.Adobe Systems, Inc.
[MD5.EEFF4834509E063164C252C5DAB3873A] [WIS][2007/06/22 07:02:44] (.Adobe Systems, Inc..) -- C:\Windows\Installer\9d3be3.msi [3040768] =>.Adobe Systems, Inc.
[MD5.8A615124FBF4FC41A6B72347574F94B3] [WIS][2007/06/22 07:03:10] (.Adobe Systems, Inc..) -- C:\Windows\Installer\9d3bf8.msi [5227520] =>.Adobe Systems, Inc.
[MD5.C592A9FF68DF1D834C799FD300EF990B] [WIS][2007/06/22 07:02:10] (.Adobe Systems, Inc..) -- C:\Windows\Installer\9d3c07.msi [5152768] =>.Adobe Systems, Inc.
[MD5.571D63FD9BE914F63473EBAF23031D36] [WIS][2007/06/22 07:02:50] (.Adobe Systems, Inc..) -- C:\Windows\Installer\9d3c0f.msi [2992128] =>.Adobe Systems, Inc.
[MD5.A9968791263268796BE56117F6D9283B] [WIS][2007/06/22 07:03:00] (.Adobe Systems, Inc..) -- C:\Windows\Installer\9d3c18.msi [2855936] =>.Adobe Systems, Inc.
[MD5.95F75A161D266C8BA757D030362DB56A] [WIS][2007/06/22 07:03:06] (.Adobe Systems, Inc..) -- C:\Windows\Installer\9d3c20.msi [3044352] =>.Adobe Systems, Inc.
[MD5.635C6A3097DD13A9481BD912A5011A3D] [WIS][2007/06/22 07:03:04] (.Adobe Systems, Inc..) -- C:\Windows\Installer\9d3c28.msi [1833984] =>.Adobe Systems, Inc.
[MD5.944563AE1484B190FDCCA584639FCAD3] [WIS][2016/04/24 16:01:50] (.InstallShield Software Corporation - RealSpeak Solo pour la voix francaise Virgi.) -- C:\Windows\Installer\b6af91.msi [17978368] =>.InstallShield Software Corporation
[MD5.4BE5C2B26239E00F94AA513023C8ABC0] [WIS][2016/12/20 11:54:36] (.Gadwin Systems - Gadwin PrintScreen (64-Bit).) -- C:\Windows\Installer\d3497.msi [7806976] =>.Gadwin Systems
[MD5.41799DAF1590F7BD8F27A1E6C5A433AB] [WIS][2017/10/01 21:56:18] (.ByClick - YouTube By Click.) -- C:\Windows\Installer\eb3e8d.msi [3235840] =>.ByClick
[MD5.596AD8F39EA093462F9095B86948C00D] [WIS][2017/07/18 10:48:16] (.Skype Technologies S.A. - Skype.) -- C:\Windows\Installer\ec2a38.msi [45387776] =>.Skype Technologies S.A.
[MD5.A44EC17687A2DBA780B78BCF3EC7F281] [WIS][2016/11/18 15:32:18] (.F-Secure Corporation - Service Enabler Agent 2.65.171.0 (Release).) -- C:\Windows\Installer\f6daa2.msi [24096768] =>.F-Secure Corporation

---\\ Scan Additionnel (15) - 0s
C:\Program Files (x86)\QuickTime =>Riskware.QuickTime
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime =>Riskware.QuickTime
C:\ProgramData\AMMYY =>.SUP.Ammyy
C:\Users\Paul\AppData\Roaming\TotalAV =>.SUP.TotalAV
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\7-Zip =>.SUP.Orphan
HKLM\Software\Classes\CLSID\{23170F69-40C1-278A-1000-000100020000} =>.SUP.Orphan
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\Cover Designer =>.SUP.Orphan
HKLM\Software\Classes\CLSID\{73FCA462-9BD5-4065-A73F-A8E5F6904EF7} =>.SUP.Orphan
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\WinRAR32 =>.SUP.Orphan
HKLM\Software\Classes\CLSID\{B41DB860-8EE4-11D2-9906-E49FADC173CA} =>.SUP.Orphan
HKLM\Software\Classes\AllFileSystemObjects\ShellEx\ContextMenuHandlers\00avast =>.SUP.Orphan
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\7-Zip =>.SUP.Orphan
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\7-Zip =>.SUP.Orphan
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\WinRAR32 =>.SUP.Orphan
C:\Users\Paul\Desktop\AA_v3.exe =>.SUP.Ammyy

---\\ Récapitulatif des éléments trouvés sur votre station (9) - 0s
https://nicolascoolman.eu/2017/09/12/origine-lignes-orphelines/ =>.SUP.Orphan
https://nicolascoolman.eu/2017/10/04/adware-astromendasearch/ =>Adware.AstromendaSearch
https://nicolascoolman.eu/2017/02/28/adware-omigaplus/ =>Adware.OmigaPlus
https://nicolascoolman.eu/2017/03/01/pup-optional-vosteran/ =>PUP.Optional.Vosteran
https://nicolascoolman.eu/2017/09/11/adware-isstart/ =>Adware.IsStart
https://nicolascoolman.eu/2017/04/13/superfluous-ammyy/ =>.SUP.Ammyy
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.SUP.Downloader
https://nicolascoolman.eu/2017/01/15/riskware-quicktime/ =>Riskware.QuickTime
https://nicolascoolman.eu/2017/10/30/sup-totalav/ =>.SUP.TotalAV

~ Unselected Options:
~ End of the scan, 50880 items in 07mn07s (1601)(0)