~ Rapport de ZHPDiag v2015.6.16.57 - Nicolas Coolman (16/06/2015) ~ Lancé par Chris (22/06/2015 10:30:46) ~ Facebook : https://www.facebook.com/nicolascoolman1 ~ Adresse du Forum http://www.forum.nicolascoolman.fr ~ Traduit par Nicolas Coolman ~ Etat de la version : Version à jour. ~ Liste blanche : Désactivée par l'utilisateur ~ Elévation des Privilèges : OK ~ User Account Control (UAC): Deactivate by program ---\\ Navigateurs Internet MSIE: Internet Explorer v9.0.8112.16421 ---\\ Informations sur les produits Windows ~ Langage: Français Windows Server License Manager Script : OK ~ Windows Operating System - Vista, OEM_COA_NSLP channel Windows ID Activation : OK ~ Windows Partial Key : 6JTMQ Windows License : OK Windows Automatic Updates : OK Windows Vista (TM) Home Premium, 32-bit Service Pack 2 (Build 6002) ---\\ Logiciels de protection du système Malwarebytes Anti-Malware version 2.1.6.1022 Microsoft Security Client v4.8.0204.0 ---\\ Logiciels d'optimisation du système CCleaner v3.18 ---\\ Logiciels de partage PeerToPeer ---\\ Surveillance de Logiciels Adobe Flash Player 17 NPAPI Adobe Reader 9.5.5 - Français Java 7 Update 71 ---\\ Informations sur le système ~ Processor: x86 Family 6 Model 23 Stepping 10, GenuineIntel ~ Operating System: 32 Bits Boot mode: Normal (Normal boot) Total RAM: 3326 MB (41% free) System Restore: Activé (Enable) System drive C: has 120 GB (25%) free of 466 GB ---\\ Mode de connexion au système ~ Computer Name: PC-DE-CHRIS ~ User Name: Chris ~ All Users Names: Chris, Administrateur, ~ Unselected Option: None Logged in as Administrator ---\\ Variables d'environnement ~ System Unit : C:\ ~ %AppZHP% : C:\Users\Chris\AppData\Roaming\ZHP\ ~ %AppData% : C:\Users\Chris\AppData\Roaming\ ~ %Desktop% : C:\Users\Chris\Desktop\ ~ %Favorites% : C:\Users\Chris\Favorites\ ~ %LocalAppData% : C:\Users\Chris\AppData\Local\ ~ %StartMenu% : C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\ ~ %Windir% : C:\Windows\ ~ %System% : C:\Windows\System32\ ---\\ Enumération des unités disques A: Floppy drive, Flash card reader, USB Key (Not Inserted) C: Hard drive, Flash drive, Thumb drive (Free 120 Go of 466 Go) D: CD-ROM drive (Not Inserted) E: CD-ROM drive (Not Inserted) ---\\ Etat du Centre de Sécurité Windows [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] DisableTaskMgr: OK [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] DisableRegistryTools: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK [HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: OK [HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK ~ Security Center: 45 Scanned in 00mn 00s ---\\ Recherche particulière de fichiers génériques [MD5.D07D4C3038F3578FFCE1C0237F2A1253] - (.Microsoft Corporation - Explorateur Windows.) (.11/04/2009 - 07:27:36.) -- C:\Windows\Explorer.exe [2926592] [MD5.101BA3EA053480BB5D957EF37C06B5ED] - (.Microsoft Corporation - Application de démarrage de Windows.) (.21/01/2008 - 03:23:42.) -- C:\Windows\System32\Wininit.exe [96768] [MD5.6788C8BBFD00EA99D6DA2AB5EA4F9A2C] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.31/05/2015 - 00:49:49.) -- C:\Windows\System32\wininet.dll [1129472] [MD5.898E7C06A350D4A1A64A9EA264D55452] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.11/04/2009 - 07:28:13.) -- C:\Windows\System32\Winlogon.exe [314368] [MD5.F5272A105F59A7B3B345D9D6D87DA7AD] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.30/05/2014 - 07:53:22.) -- C:\Windows\system32\Drivers\AFD.sys [273408] [MD5.1F05B78AB91C9075565A9D8A4B880BC4] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.11/04/2009 - 07:32:26.) -- C:\Windows\system32\Drivers\atapi.sys [19944] [MD5.7ADD03E75BEB9E6DD102C3081D29840A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.21/01/2008 - 03:23:51.) -- C:\Windows\system32\Drivers\Cdfs.sys [70144] [MD5.6B4BFFB9BECD728097024276430DB314] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.11/04/2009 - 05:39:17.) -- C:\Windows\system32\Drivers\Cdrom.sys [67072] [MD5.622C41A07CA7E6DD91770F50D532CB6C] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.14/04/2011 - 15:59:03.) -- C:\Windows\system32\Drivers\DfsC.sys [75264] [MD5.062452B7FFD68C8C042A6261FE8DFF4A] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.11/04/2009 - 05:42:42.) -- C:\Windows\system32\Drivers\HDAudBus.sys [561152] [MD5.22D56C8184586B7A1F6FA60BE5F5A2BD] - (.Microsoft Corporation - Pilote de port i8042.) (.21/01/2008 - 03:23:20.) -- C:\Windows\system32\Drivers\i8042prt.sys [54784] [MD5.8793643A67B42CEC66490B2A0CF92D68] - (.Microsoft Corporation - IP Network Address Translator.) (.21/01/2008 - 03:24:25.) -- C:\Windows\system32\Drivers\IpNat.sys [100864] [MD5.1E94971C4B446AB2290DEB71D01CF0C2] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.29/04/2011 - 14:24:40.) -- C:\Windows\system32\Drivers\MRxSmb.sys [106496] [MD5.ECD64230A59CBD93C85F1CD1CAB9F3F6] - (.Microsoft Corporation - MBT Transport driver.) (.11/04/2009 - 05:45:37.) -- C:\Windows\system32\Drivers\netBT.sys [185856] [MD5.2C1121F2B87E9A6B12485DF53CD848C7] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.03/03/2013 - 20:07:52.) -- C:\Windows\system32\Drivers\ntfs.sys [1082232] [MD5.0FA9B5055484649D63C303FE404E5F4D] - (.Microsoft Corporation - Pilote de port parallèle.) (.02/11/2006 - 09:51:30.) -- C:\Windows\system32\Drivers\Parport.sys [79360] [MD5.A214ADBAF4CB47DD2728859EF31F26B0] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.21/01/2008 - 03:24:55.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [76288] [MD5.FBC0BACD9C3D7F6956853F64A66E252D] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.21/01/2008 - 03:23:01.) -- C:\Windows\system32\Drivers\rdpdr.sys [248832] [MD5.7B75299A4D201D6A6533603D6914AB04] - (.Microsoft Corporation - SMB Transport driver.) (.11/04/2009 - 05:45:22.) -- C:\Windows\system32\Drivers\smb.sys [66560] [MD5.76B06EB8A01FC8624D699E7045303E54] - (.Microsoft Corporation - TDI Translation Driver.) (.11/04/2009 - 05:45:56.) -- C:\Windows\system32\Drivers\tdx.sys [72192] [MD5.786DB5771F05EF300390399F626BF30A] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.21/08/2012 - 12:47:42.) -- C:\Windows\system32\Drivers\volsnap.sys [224640] ~ Generic Processes: Scanned in 00mn 01s ---\\ Etat des fichiers cachés (Caché/Total) ~ Mes images (My Pictures) : 1/1261 ~ Mes musiques (My Musics) : 1/10488 ~ Mes Videos (My Videos) : 1/8 ~ Mes Favoris (My Favorites) : 1/47 ~ Mes Documents (My Documents) : 1/3722 ~ Mon Bureau (My Desktop) : 3/12851 ~ Menu demarrer (Programs) : 1/43 ~ Hidden Files: Scanned in 00mn 57s ---\\ Processus lancés [MD5.22544393B0C597DED7686D4E8F851A23] - (.IObit - Performance Monitor.) -- C:\Program Files\IObit\Advanced SystemCare 8\Monitor.exe [1773856] [PID.2264] [MD5.4702CCED09FAD9C2C40F72629F3B26B7] - (...) -- C:\Program Files\ASUS\Six Engine\SixEngine.exe [5958656] [PID.2348] [MD5.B2387FD351A3D4780A917E4C00A83310] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe [152392] [PID.2284] [MD5.3082B680CB69A54A50BD9C8585C4D850] - (.Analog Devices, Inc. - SMax4PNP.) -- C:\Program Files\Analog Devices\Core\smax4pnp.exe [1302528] [PID.1068] [MD5.6BF7676296D5359AFC135A5397000053] - (.Acresso Corporation - Acresso Software Manager.) -- C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe [222496] [PID.2756] [MD5.2A736B6781A93E6A80144929CB688778] - (.IObit - Advanced SystemCare Auto Care.) -- C:\Program Files\IObit\Advanced SystemCare 8\AutoCare.exe [1899808] [PID.1552] [MD5.8DFFBFDDD42E6F864616784C5B9411BB] - (.Brother Industries, Ltd. - ControlCenter Main Process.) -- C:\Program Files\ControlCenter4\BrCtrlCntr.exe [393216] [PID.3780] [MD5.6080A176D09435FC8E6E800996656E18] - (.Microsoft Corporation - Console IME.) -- C:\Windows\system32\conime.exe [69120] [PID.3412] [MD5.10A9F9D0487EA73CA9C641BDB64CDE86] - (.Brother Industries, Ltd. - ControlCenter UX System.) -- C:\Program Files\ControlCenter4\BrCcUxSys.exe [1327104] [PID.4232] [MD5.E7B58CE9BD61BF575E2880088F4E5447] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [8218112] [PID.5772] [MD5.ACD4AF1B9D6E6C0C5BE470E5CF313FE6] - (.IObit - Advanced SystemCare Service.) -- C:\Program Files\IObit\Advanced SystemCare 8\ASCService.exe [814880] [PID.880] [MD5.CC09BB7FDEFC5763CCB3CF7DAE2D76CF] - (.Microsoft Corporation - Antimalware Service Executable.) -- c:\Program Files\Microsoft Security Client\MsMpEng.exe [22216] [PID.1032] [MD5.2039E24FE00639A9123DCD6F22D42D74] - (.ATI Technologies Inc. - ATI External Event Utility EXE Module.) -- C:\Windows\system32\Ati2evxx.exe [720896] [PID.1224] [MD5.862BB4CBC05D80C5B45BE430E5EF872F] - (.Microsoft Corporation - Service de gestion des licences Microsoft.) -- C:\Windows\system32\SLsvc.exe [3408896] [PID.1420] [MD5.489EC8D956C41684206ACA32A8BBCF49] - (.IObit - IObit Malware Fighter Service.) -- C:\Program Files\IObit\IObit Malware Fighter\IMFsrv.exe [878880] [PID.1948] [MD5.585F5793BB5D79C8754EE63BCBAF2B3A] - (.Andrea Electronics Corporation - Andrea filters APO access service (32-bit).) -- C:\Windows\system32\AEADISRV.exe [86016] [PID.388] [MD5.30E3850F303EAE5C364782EA78579CC9] - (.Apple Inc. - MobileDeviceService.) -- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [55624] [PID.412] [MD5.D57D1BE0129C1B45653B0FA920BC4B38] - (.Hewlett-Packard Company - LightScribe Service.) -- C:\Program Files\Common Files\LightScribe\LSSrvc.exe [73728] [PID.748] [MD5.A0101E836D2A39682E134C47B1565256] - (.Nero AG - Nero BackItUp.) -- C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe [836904] [PID.2788] [MD5.3A2BDD76E7D2A5F40A7174793D1BA794] - (...) -- C:\Windows\system32\PnkBstrA.exe [75136] [PID.2872] [MD5.3FF257F54649D4F19E39263C5D581CD1] - (.Microsoft Corporation - Microsoft Network Realtime Inspection Servi.) -- c:\Program Files\Microsoft Security Client\NisSrv.exe [284504] [PID.3488] [MD5.7887DC888A1A7317DC828E59C56F33F6] - (.IObit - IObit Malware Fighter.) -- C:\Program Files\IObit\IObit Malware Fighter\IMF.exe [5887264] [PID.3448] [MD5.C00149A7027081539A66DC5A46695EAD] - (.Apple Inc. - iPodService Module (32-bit).) -- C:\Program Files\iPod\bin\iPodService.exe [553288] [PID.4328] [MD5.DB3D19F850C6EB32BDCB9BC0836ACDDB] - (.Microsoft Corporation - Service de cliché instantané de volumes Mic.) -- C:\Windows\system32\vssvc.exe [1055232] [PID.5936] [MD5.C559672F31ABE6BA7277DD73C4502238] - (.Microsoft Corporation - Installateur Windows®.) -- C:\Windows\system32\msiexec.exe [73216] [PID.2836] [MD5.38B2955792561C5A1E1E712551BD7ACC] - (.Microsoft Corporation - Gestionnaire de mises à jour du magasin Win.) -- C:\Windows\ehome\mcupdate.exe [141312] [PID.4960] [MD5.97D9D6A04E3AD9B6C626B9931DB78DBA] - (.Microsoft Corporation - Programme d’installation de modules Windows.) -- C:\Windows\servicing\TrustedInstaller.exe [39424] [PID.2632] [MD5.FBD6B3BB2A40478DF5434A073D571CAE] - (.Microsoft Corporation - Exécutable de calcul de la métrique de l’an.) -- C:\Windows\system32\RacAgent.exe [20480] [PID.5988] ~ Processes Running: Scanned in 00mn 00s ---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2) C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Preferences ---\\ Liste des dossiers d'extension Google Chrome G2 - EXT: C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [__MSG_appName__] G2 - EXT: C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [__MSG_appName__] G2 - EXT: C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [__MSG_appName__] G2 - EXT: C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [__MSG_appName__] G2 - EXT: C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [__MSG_appName__] G2 - EXT: C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [__MSG_appName__] G2 - EXT: C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [Chrome Hotword Shared Module] G2 - EXT: C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [__MSG_APP_NAME__] G2 - EXT: C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [__MSG_appName__] ~ Google Lines Browser: 18 Scanned in 00mn 00s ---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3) P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\Windows\system32\Macromed\Flash\NPSWF32_17_0_0_188.dll P2 - FPN: [HKLM] [@adobe.com/ShockwavePlayer] - (.Adobe Systems, Inc. - Adobe Shockwave for Director Netscape plug-in, version 12.0.2.122.) -- C:\Windows\system32\Adobe\Director\np32dsw_1202122.dll P2 - FPN: [HKLM] [@Apple.com/iTunes,version=1.0] - (...) -- C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll P2 - FPN: [HKLM] [@divx.com/DivX Browser Plugin,version=1.0.0] - (.DivX,Inc. - DivX Web Player version 2.0.0.254.) -- C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll P2 - FPN: [HKLM] [@google.com/npPicasa3,version=3.0.0] - (.Google, Inc. - Picasa plugin.) -- C:\Program Files\Google\Picasa3\npPicasa3.dll P2 - FPN: [HKLM] [@java.com/DTPlugin,version=11.25.2] - (.Oracle Corporation - NPRuntime Script Plug-in Library for Java(TM) Deploy.) -- C:\Program Files\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll P2 - FPN: [HKLM] [@java.com/JavaPlugin,version=11.25.2] - (.Oracle Corporation - Next Generation Java Plug-in 11.25.2 for Mozilla browsers.) -- C:\Program Files\Java\jre1.8.0_25\bin\plugin2\npjp2.dll P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 5.1.40416.0.) -- c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.27.5\npGoogleUpdate3.dll P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.27.5\npGoogleUpdate3.dll P2 - FPN: [HKLM] [Adobe Reader] - (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape "9.5.5".) -- C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll ~ Firefox Browser: 12 Scanned in 00mn 00s ---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4) R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = google.fr R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://www.google.com R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape "9.5.5".) (No version) -- (.not file.) R4 - HKCU\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,Enabled = 1 ~ IE Browser: 17 Scanned in 00mn 00s ---\\ Internet Explorer, Proxy Management (R5) R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll ~ Proxy management: Scanned in 00mn 00s ---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe, F2 - REG:system.ini: Shell=C:\Windows\explorer.exe F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl" ~ Keys: Scanned in 00mn 00s ---\\ Hosts file redirection (O1) ~ Le fichier hôte est sain (The hosts file is clean) (0) ~ Hosts File: Scanned in 00mn 00s ---\\ Browser Helper Objects de navigateur (O2) O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: PlusIEEventHelper Class - {551A852F-39A6-44A7-9C13-AFBEC9185A9D} . (.Zeon Corporation - PlusIEContextMenu.dll.) -- C:\Program Files\Nuance\PDF Viewer Plus\Bin\PlusIEContextMenu.dll O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre1.8.0_25\bin\ssv.dll O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corp. - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre1.8.0_25\bin\jp2ssv.dll ~ BHO: 10 Scanned in 00mn 00s ---\\ Autres liens utilisateurs (O4) O4 - GS\Desktop [Public]: Vuze.lnk . (.Azureus Software, Inc - Vuze Launcher.) -- C:\Program Files\Vuze\Azureus.exe =>P2P.Azureus O4 - GS\Program [Public]: Vuze.lnk . (.Azureus Software, Inc - Vuze Launcher.) -- C:\Program Files\Vuze\Azureus.exe =>P2P.Azureus O4 - GS\QuickLaunch [Chris]: Vuze.lnk . (.Azureus Software, Inc - Vuze Launcher.) -- C:\Program Files\Vuze\Azureus.exe =>P2P.Azureus O4 - GS\Desktop [Chris]: Azureus Downloads - Raccourci.lnk . (...) -- C:\Users\Chris\Documents\Azureus Downloads =>P2P.Azureus O4 - GS\Desktop [Chris]: Freeletics (Complete with guides) - Raccourci.lnk . (...) -- C:\Users\Chris\Documents\Azureus Downloads\Freeletics (Complete with guides) =>P2P.Azureus O4 - GS\Desktop [Chris]: Insanity Deluxe Edition - Raccourci.lnk . (...) -- C:\Users\Chris\Documents\Azureus Downloads\Insanity Deluxe Edition =>P2P.Azureus O4 - GS\Desktop [Chris]: P90X2 and P90X Ultimate x264 MP4 DVDrip - Raccourci.lnk . (...) -- C:\Users\Chris\Documents\Azureus Downloads\P90X2 and P90X Ultimate x264 MP4 DVDrip =>P2P.Azureus ~ Global Startup: 7 Scanned in 00mn 02s ---\\ Applications lancées au démarrage du système (O4) O4 - HKLM\..\Run: [Windows Defender] . (.Microsoft Corporation - Windows Defender User Interface.) -- C:\Program Files\Windows Defender\MSASCui.exe O4 - HKLM\..\Run: [SoundTray] . (.Sonic Focus, Inc. - SoundTray.exe.) -- C:\Program Files\Analog Devices\SoundMAX\SoundTray.exe O4 - HKLM\..\Run: [NeroFilterCheck] . (.Nero AG - NeroCheck.) -- C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe O4 - HKLM\..\Run: [NBKeyScan] . (.Nero AG - Nero BackItUp.) -- C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe =>.Adobe Systems Incorporated O4 - HKLM\..\Run: [MSC] . (.Microsoft Corporation - Microsoft Security Client User Interface.) -- c:\Program Files\Microsoft Security Client\msseces.exe O4 - HKLM\..\Run: [StartCCC] . (.Advanced Micro Devices, Inc. - Catalyst® Control Center Launcher.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe =>.Advanced Micro Devices, Inc O4 - HKLM\..\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe O4 - HKLM\..\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe O4 - HKLM\..\Run: [PDFHook] . (.Nuance Communications, Inc. - PdfCreateHook Application.) -- C:\Program Files\Nuance\PDF Viewer Plus\pdfpro5hook.exe O4 - HKLM\..\Run: [PDF5 Registry Controller] . (.Nuance Communications, Inc. - PDF Converter Registry Controller.) -- C:\Program Files\Nuance\PDF Viewer Plus\RegistryController.exe O4 - HKLM\..\Run: [ControlCenter4] . (.Brother Industries, Ltd. - ControlCenter Launcher.) -- C:\Program Files\ControlCenter4\BrCcBoot.exe O4 - HKLM\..\Run: [BrStsMon00] . (.Brother Industries, Ltd. - Status Monitor Application.) -- C:\Program Files\Browny02\Brother\BrStMonW.exe O4 - HKLM\..\Run: [SoundMAXPnP] . (.Analog Devices, Inc. - SMax4PNP.) -- C:\Program Files\Analog Devices\Core\smax4pnp.exe O4 - HKLM\..\Run: [IObit Malware Fighter] . (.IObit - IObit Malware Fighter.) -- C:\Program Files\IObit\IObit Malware Fighter\IMF.exe O4 - HKCU\..\Run: [WMPNSCFG] . (.Microsoft Corporation - Application de configuration du service Par.) -- C:\Program Files\Windows Media Player\WMPNSCFG.exe =>.Microsoft Corporation O4 - HKCU\..\Run: [ISUSPM] . (.Acresso Corporation - Acresso Software Manager.) -- C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe O4 - HKCU\..\Run: [Advanced SystemCare 8] . (.IObit - Advanced SystemCare 8.) -- C:\Program Files\IObit\Advanced SystemCare 8\ASCTray.exe O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-20\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter O4 - HKUS\S-1-5-21-25357706-447073638-2199325849-1000\..\Run: [WMPNSCFG] . (.Microsoft Corporation - Application de configuration du service Par.) -- C:\Program Files\Windows Media Player\WMPNSCFG.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-21-25357706-447073638-2199325849-1000\..\Run: [ISUSPM] . (.Acresso Corporation - Acresso Software Manager.) -- C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe O4 - HKUS\S-1-5-21-25357706-447073638-2199325849-1000\..\Run: [Advanced SystemCare 8] . (.IObit - Advanced SystemCare 8.) -- C:\Program Files\IObit\Advanced SystemCare 8\ASCTray.exe ~ Application: Scanned in 00mn 00s ---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9) O9 - Extra button: Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} . (.Pas de propriétaire - WinHTTrackIEBar Module.) -- C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll O9 - Extra button: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} -- Clé orpheline O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} . (...) -- C:\Program Files\Skype\Toolbars\Internet Explorer\icon.ico ~ IE Extra Buttons: Scanned in 00mn 00s ---\\ Winsock hijacker (Layered Service Provider) (O10) O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll =>.Microsoft Corporation O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll ~ Winsock: 6 Scanned in 00mn 00s ---\\ Objets ActiveX (Downloaded Program Files)(O16) O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} ((no name)) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} ((no name)) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} ((no name)) - http://messenger.zone.msn.com/MessengerGamesContent/GameContent/fr/uno1/GAME_UNO1.cab O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} ((no name)) - http://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} ((no name)) - http://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} ((no name)) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} ((no name)) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab ~ Objets ActiveX: Scanned in 00mn 00s ---\\ Modification Domaine/Adresses DNS (O17) O17 - HKLM\System\CCS\Services\Tcpip\..\{39B2F080-BB62-4A04-AB28-39B728A8002D}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\..\{50E7286D-88A0-4E51-903E-55D8CB766890}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\..\{97565D74-8E26-4757-916A-4C3E98EBF1B6}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\..\{AB02F41B-8480-49B7-B6C4-3CD07C9F6CD0}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\..\{C37D62D4-6EC6-4D9F-B379-56C201419BD3}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\..\{C52792F2-AE19-41AE-AD10-383A9B1CB6ED}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS1\Services\Tcpip\..\{39B2F080-BB62-4A04-AB28-39B728A8002D}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS1\Services\Tcpip\..\{50E7286D-88A0-4E51-903E-55D8CB766890}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS1\Services\Tcpip\..\{97565D74-8E26-4757-916A-4C3E98EBF1B6}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS1\Services\Tcpip\..\{AB02F41B-8480-49B7-B6C4-3CD07C9F6CD0}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS1\Services\Tcpip\..\{C37D62D4-6EC6-4D9F-B379-56C201419BD3}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS1\Services\Tcpip\..\{C52792F2-AE19-41AE-AD10-383A9B1CB6ED}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS2\Services\Tcpip\..\{39B2F080-BB62-4A04-AB28-39B728A8002D}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS2\Services\Tcpip\..\{50E7286D-88A0-4E51-903E-55D8CB766890}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS2\Services\Tcpip\..\{97565D74-8E26-4757-916A-4C3E98EBF1B6}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS2\Services\Tcpip\..\{AB02F41B-8480-49B7-B6C4-3CD07C9F6CD0}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS2\Services\Tcpip\..\{C37D62D4-6EC6-4D9F-B379-56C201419BD3}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS2\Services\Tcpip\..\{C52792F2-AE19-41AE-AD10-383A9B1CB6ED}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 ~ Domain: Scanned in 00mn 00s ---\\ Protocole additionnel (O18) O18 - Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\system32\mshtml.dll =>.Microsoft Corporation O18 - Filter: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.dll =>.Microsoft Corporation ~ Protocole Additionnel: Scanned in 00mn 00s ---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21) O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Contrôleur de site Web.) -- C:\Windows\System32\webcheck.dll ~ SSODL: 1 Scanned in 00mn 00s ---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22) O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\Windows\System32\browseui.dll ~ STS/SSO: Scanned in 00mn 00s ---\\ Liste des services NT non Microsoft et non désactivés (O23) O23 - Service: Advanced SystemCare Service 8 (AdvancedSystemCareService8) . (.IObit - Advanced SystemCare Service.) - C:\Program Files\IObit\Advanced SystemCare 8\ASCService.exe O23 - Service: Andrea ADI Filters Service (AEADIFilters) . (.Andrea Electronics Corporation - Andrea filters APO access service (32-bit).) - C:\Windows\System32\AEADISRV.exe O23 - Service: Apple Mobile Device (Apple Mobile Device) . (.Apple Inc. - MobileDeviceService.) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe O23 - Service: (Ati External Event Utility) . (.ATI Technologies Inc. - ATI External Event Utility EXE Module.) - C:\Windows\System32\Ati2evxx.exe O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe =>.Google Inc O23 - Service: IMF Service (IMFservice) . (.IObit - IObit Malware Fighter Service.) - C:\Program Files\IObit\IObit Malware Fighter\IMFsrv.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) . (.Hewlett-Packard Company - LightScribe Service.) - C:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: LiveUpdate (LiveUpdateSvc) . (.IObit - Product Updater.) - C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe O23 - Service: (MBAMService) . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe O23 - Service: Nero BackItUp Scheduler 3 (Nero BackItUp Scheduler 3) . (.Nero AG - Nero BackItUp.) - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe O23 - Service: PnkBstrA (PnkBstrA) . (...) - C:\Windows\system32\PnkBstrA.exe O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files\Skype\Updater\Updater.exe ~ Services: 12 Scanned in 00mn 05s ---\\ Enumération Active Desktop & MHTML Editor (O24) O24 - Default MHTML Editor: Last - .(.Microsoft Corporation - Microsoft Office Word.) - C:\Program Files\Microsoft Office\Office12\WINWORD.exe O24 - Desktop General: BackupWallPaper - .(...) - C:\Users\Chris\Downloads\abstract-wallpaper1.jpg O24 - Desktop General: WallPaper - .(...) - C:\Users\Chris\Downloads\abstract-wallpaper1.jpg ~ Desktop Component: 4 Scanned in 00mn 00s ---\\ Enumère les données de BootExecute (BEX) (O34) O34 - HKLM BootExecute: (autocheck autochk *) - File not found ~ BEX: 1 Scanned in 00mn 00s ---\\ Tâches planifiées en automatique (O39) [MD5.00CC35F515079F5F94FABC3AC5C7D363] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [268464] [MD5.22544393B0C597DED7686D4E8F851A23] [APT] [ASC8_PerformanceMonitor] (.IObit.) -- C:\Program Files\IObit\Advanced SystemCare 8\Monitor.exe [1773856] [MD5.E4D467EDE6AEE7B3F9C12065339F49B9] [APT] [ASC8_SkipUac_Chris] (.IObit.) -- C:\Program Files\IObit\Advanced SystemCare 8\ASC.exe [5353760] [MD5.E1B44A75947137F4143308D566889837] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe [107848] [MD5.E1B44A75947137F4143308D566889837] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe [107848] [MD5.AA6DB1D357B0DB08B969D14889D9C9CA] [APT] [Norton Security Scan for Chris] (.Symantec Corporation.) -- C:\Program Files\Norton Security Scan\Norton Security Scan\Engine\2.7.3.34\Nss.exe [624504] [MD5.F5A0554F655C566EB946841E6E7AE061] [APT] [{D2EEAFA5-24A9-428F-9ACB-23A08A16396B}] (.Skype Technologies S.A..) -- C:\Program Files\Skype\Phone\Skype.exe [30877280] [MD5.34EBD4FF6A24D86BB4716D6AFCC1A89B] [APT] [AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files\Apple Software Update\SoftwareUpdate.exe [561984] [MD5.4702CCED09FAD9C2C40F72629F3B26B7] [APT] [ASUS SIX Engine] (...) -- C:\Program Files\ASUS\Six Engine\SixEngine.exe [5958656] O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\Tasks\Adobe Flash Player Updater.job [1002] O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Tasks\Adobe Flash Player Updater [1002] O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job [1052] O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore [1052] O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job [1056] O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA [1056] O39 - APT: Norton Security Scan for Chris - (.Symantec Corporation.) -- C:\Windows\Tasks\Norton Security Scan for Chris.job [558] O39 - APT: Norton Security Scan for Chris - (.Symantec Corporation.) -- C:\Windows\System32\Tasks\Norton Security Scan for Chris [558] O39 - APT: - (..) -- C:\Windows\Tasks\SmartDefrag.job [384] ~ Scheduled Task: 15 Scanned in 00mn 04s ---\\ Composants installés (ActiveSetup Installed Components) (O40) O40 - ASIC: Windows Media Player - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\System32\wmpdxm.dll =>.Microsoft Corporation O40 - ASIC: Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Windows Media Player.) -- C:\Windows\System32\wmp.dll =>.Microsoft Corporation O40 - ASIC: Google Chrome - {8A69D345-D564-463c-AFF1-A69D9E530F96} . (.Google Inc. - Google Chrome Installer.) -- C:\Program Files\Google\Chrome\Application\43.0.2357.124\Installer\chrmstp.exe ~ Active Setup: 3 Scanned in 00mn 00s ---\\ Pilotes lancés au démarrage du système (O41) O41 - Driver: (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys O41 - Driver: (AsIO) . (...) - C:\Windows\System32\drivers\AsIO.sys O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys O41 - Driver: C:\Windows\System32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys O41 - Driver: (HWiNFO32) . (.REALiX(tm) - HWiNFO x86 Kernel Driver.) - C:\Windows\system32\drivers\HWiNFO32.sys O41 - Driver: (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\Windows\System32\DRIVERS\i8042prt.sys O41 - Driver: (kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\Windows\System32\DRIVERS\kbdclass.sys O41 - Driver: (kbdhid) . (.Microsoft Corporation - Pilote de filtre clavier HID.) - C:\Windows\System32\DRIVERS\kbdhid.sys O41 - Driver: (mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\Windows\System32\DRIVERS\mouclass.sys O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys O41 - Driver: (netbt) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys O41 - Driver: (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys O41 - Driver: C:\Windows\System32\drivers\pacer.sys (PSched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys O41 - Driver: (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\Windows\System32\DRIVERS\rasacd.sys O41 - Driver: (rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\Windows\System32\DRIVERS\rdbss.sys O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys O41 - Driver: (RDPENCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys O41 - Driver: (Serial) . (.Microsoft Corporation - Pilote de périphérique série.) - C:\Windows\System32\DRIVERS\serial.sys O41 - Driver: C:\Windows\System32\tcpipcfg.dll (Smb) . (.Microsoft Corporation - SMB Transport driver.) - C:\Windows\System32\DRIVERS\smb.sys O41 - Driver: C:\Windows\System32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys O41 - Driver: (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\Windows\System32\DRIVERS\termdd.sys O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys O41 - Driver: (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys ~ Drivers: 69 Scanned in 00mn 00s ---\\ Logiciels installés (O42) O42 - Logiciel: 4Videosoft PDF Converter Ultimate - (...) [HKLM] -- 4Videosoft PDF Converter Ultimate_is1 O42 - Logiciel: AMD APP SDK Runtime - (.Advanced Micro Devices Inc..) [HKLM] -- {A25FF1C0-80B6-4B8B-A551-DC525697A408} O42 - Logiciel: AMD Catalyst Install Manager - (.Advanced Micro Devices, Inc..) [HKLM] -- {E43B4909-141E-DFF3-8C58-62B5E4D66BBA} O42 - Logiciel: ATI AVIVO Codecs - (.ATI Technologies Inc..) [HKLM] -- {89DE67AD-08B8-4699-A55D-CA5C0AF82BF3} O42 - Logiciel: Adobe Flash Player 17 NPAPI - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player NPAPI O42 - Logiciel: Adobe Reader 9.5.5 - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-A95000000001} O42 - Logiciel: Adobe Shockwave Player 12.0 - (.Adobe Systems, Inc..) [HKLM] -- Adobe Shockwave Player O42 - Logiciel: Advanced SystemCare 8 - (.IObit.) [HKLM] -- Advanced SystemCare 8_is1 O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM] -- {46F044A5-CE8B-4196-984E-5BD6525E361D} O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM] -- {0592EF96-69D8-4E4B-9CC9-88F58EA86F01} O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM] -- {789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE} =>.Apple Inc O42 - Logiciel: Archiveur WinRAR - (...) [HKLM] -- WinRAR archiver O42 - Logiciel: AusLogics Disk Defrag - (.Auslogics Software Pty Ltd.) [HKLM] -- {DF6A13C0-77DF-41FE-BD05-6D5201EB0CE7}_is1 O42 - Logiciel: AutoHotkey 1.0.48.05 - (.Chris Mallett.) [HKLM] -- AutoHotkey O42 - Logiciel: Battle.net - (.Blizzard Entertainment.) [HKLM] -- Battle.net O42 - Logiciel: Brother MFL-Pro Suite DCP-J4110DW - (.Brother Industries, Ltd..) [HKLM] -- {DD98C438-D769-4677-AA87-3481FA32D20C} O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner O42 - Logiciel: Catalyst Control Center - Branding - (.Advanced Micro Devices, Inc..) [HKLM] -- {E2F0AF23-FE2F-4222-9A43-55E63CC41EF1} O42 - Logiciel: Condition Zero - (.Valve.) [HKLM] -- Steam App 80 O42 - Logiciel: Counter-Strike(TM) - (.Valve.) [HKLM] -- {DF5A03CC-D5AA-43D8-B948-D9903F2AF94A} O42 - Logiciel: Counter-Strike: Source - (.Valve.) [HKLM] -- Steam App 240 O42 - Logiciel: Creative Jukebox Driver - (...) [HKLM] -- Creative Jukebox Driver O42 - Logiciel: Curse Client - (.Curse.) [HKCU] -- 101a9f93b8f0bb6f O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF} O42 - Logiciel: Day of Defeat - (.Valve.) [HKLM] -- Steam App 30 O42 - Logiciel: Diablo III - (.Blizzard Entertainment.) [HKLM] -- Diablo III O42 - Logiciel: DivX Plus Web Player - (.DivX,Inc..) [HKLM] -- {B7050CBDB2504B34BC2A9CA0A692CC29} O42 - Logiciel: Driver Booster 2.3 - (.IObit.) [HKLM] -- Driver Booster_is1 O42 - Logiciel: Détection de l'application Winamp - (.Nullsoft, Inc.) [HKCU] -- Winamp Detect O42 - Logiciel: EVEREST Home Edition v2.20 - (.Lavalys Inc.) [HKLM] -- EVEREST Home Edition_is1 O42 - Logiciel: EVEREST Ultimate Edition v5.30 - (.Lavalys, Inc..) [HKLM] -- EVEREST Ultimate Edition_is1 O42 - Logiciel: Electronic Arts Game Updater - (...) [HKLM] -- Electronic Arts Game Updater O42 - Logiciel: FormatFactory 2.60 - (.Free Time.) [HKLM] -- FormatFactory O42 - Logiciel: Free Mp3 Wma Converter V 1.9 - (.Koyote Soft.) [HKLM] -- Free Mp3 Wma Converter_is1 O42 - Logiciel: GIMP 2.8.4 - (.The GIMP Team.) [HKLM] -- GIMP-2_is1 O42 - Logiciel: Game Booster - (.IObit.) [HKLM] -- Game Booster_is1 O42 - Logiciel: Google Chrome - (.Google, Inc..) [HKLM] -- {6A21C1E8-DAC1-3C18-BCDC-2DBB4B352AD8} O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {60EC980A-BDA2-4CB6-A427-B07A5498B4CA} O42 - Logiciel: Half-Life 2: Deathmatch - (.Valve.) [HKLM] -- Steam App 320 O42 - Logiciel: Half-Life 2: Lost Coast - (.Valve.) [HKLM] -- Steam App 340 O42 - Logiciel: Half-Life(R) 2 - (.Valve.) [HKLM] -- {D45EC259-4A19-4656-B588-C2C360DD18EA} O42 - Logiciel: Hearthstone - (.Blizzard Entertainment.) [HKLM] -- Hearthstone O42 - Logiciel: HydraVision - (.ATI Technologies Inc..) [HKLM] -- {1DE0F8B5-763F-395F-56F3-98F8D9E0492D} O42 - Logiciel: IObit Malware Fighter 3 - (.IObit.) [HKLM] -- IObit Malware Fighter_is1 O42 - Logiciel: IObit Uninstaller - (.IObit.) [HKLM] -- IObitUninstall O42 - Logiciel: Java 7 Update 71 - (.Oracle.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F03217071FF} O42 - Logiciel: Java 8 Update 25 - (.Oracle Corporation.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83218025F0} O42 - Logiciel: Jitbit Macro Recorder - (.JitBit.) [HKLM] -- {2D57FB4E-6277-4A6D-8739-304C38051B89} O42 - Logiciel: K-Lite Codec Pack 8.1.0 (Full) - (...) [HKLM] -- KLiteCodecPack_is1 O42 - Logiciel: League of Legends - (.Riot Games.) [HKLM] -- League of Legends 3.0.1 O42 - Logiciel: League of Legends - (.Riot Games.) [HKLM] -- {3E75652D-99B1-417E-B163-BEF33CAD3F16} O42 - Logiciel: Left 4 Dead Dedicated Server - (.Valve.) [HKLM] -- Steam App 510 O42 - Logiciel: LightScribe System Software 1.12.29.2 - (.http://www.lightscribe.com.) [HKLM] -- {CF8C077A-B467-4C43-8DB5-3A9B94FF9681} O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F} O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71} O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC} O42 - Logiciel: MSXML 4.0 SP3 Parser (KB2758694) - (.Microsoft Corporation.) [HKLM] -- {1D95BA90-F4F8-47EC-A882-441C99D30C1E} O42 - Logiciel: MSXML 4.0 SP3 Parser (KB973685) - (.Microsoft Corporation.) [HKLM] -- {859DFA95-E4A6-48CD-B88E-A3E483E89B44} O42 - Logiciel: MSXML 4.0 SP3 Parser - (.Microsoft Corporation.) [HKLM] -- {196467F1-C11F-4F76-858B-5812ADC83B94} O42 - Logiciel: Malwarebytes Anti-Malware version 2.1.6.1022 - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes Anti-Malware_is1 O42 - Logiciel: Microsoft Antimalware Service FR-FR Language Pack - (.Microsoft Corporation.) [HKLM] -- {32E9C1A5-0FDA-4483-987D-DBABF9CC1DD8} O42 - Logiciel: Microsoft Security Client - (.Microsoft Corporation.) [HKLM] -- {6E3939AE-9996-4D07-9A30-14C78AE93576} O42 - Logiciel: Microsoft Security Client FR-FR Language Pack - (.Microsoft Corporation.) [HKLM] -- {50779A29-834E-4E36-BBEB-B7CABC67A825} O42 - Logiciel: Microsoft Security Essentials - (.Microsoft Corporation.) [HKLM] -- Microsoft Security Client O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00} O42 - Logiciel: Microsoft VC9 runtime libraries - (.AOL Inc..) [HKLM] -- {553C904F-57A2-4113-888E-BA0C3D1C69C0} O42 - Logiciel: Microsoft Word 2000 - (.Microsoft Corporation.) [HKLM] -- {0017040C-78E1-11D2-B60F-006097C998E7} O42 - Logiciel: Mumble 1.2.4 - (.Thorvald Natvig.) [HKLM] -- {4D933DC4-EA10-4CDA-99F3-7F6AE9AE491F} O42 - Logiciel: MyFreeCodec - (...) [HKCU] -- MyFreeCodec O42 - Logiciel: NVIDIA PhysX - (.NVIDIA Corporation.) [HKLM] -- {C5C1C0F0-D62F-4DBF-81D4-D7EF397C228B} O42 - Logiciel: Nero 8 - (.Nero AG.) [HKLM] -- {8AEA4BE2-2B52-41C0-BB7D-9F2D17AF1036} O42 - Logiciel: Norton Security Scan - (.Symantec Corporation.) [HKLM] -- NSS O42 - Logiciel: Nuance PDF Viewer Plus - (.Nuance Communications, Inc.) [HKLM] -- {28656860-4728-433C-8AD4-D1A930437BC8} O42 - Logiciel: PDFCreator - (.Frank Heindörfer, Philip Chinery.) [HKLM] -- {0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D} O42 - Logiciel: Picasa 3 - (.Google, Inc..) [HKLM] -- Picasa 3 O42 - Logiciel: PunkBuster Services - (.Even Balance, Inc..) [HKLM] -- PunkBusterSvc O42 - Logiciel: Ricochet - (.Valve.) [HKLM] -- Steam App 60 O42 - Logiciel: RollerCoaster Tycoon 2 - (...) [HKLM] -- {72DF62BD-FF36-424E-AA5F-D89BAFF2C249} O42 - Logiciel: SFR - Kit de connexion - (.SFR.) [HKLM] -- SFR_Kit O42 - Logiciel: Security Update for Windows Media Encoder (KB2447961) - (.Microsoft Corporation.) [HKLM] -- KB2447961 O42 - Logiciel: Security Update for Windows Media Encoder (KB954156) - (.Microsoft Corporation.) [HKLM] -- KB954156 O42 - Logiciel: Security Update for Windows Media Encoder (KB979332) - (.Microsoft Corporation.) [HKLM] -- KB979332 O42 - Logiciel: Segoe UI - (.Microsoft Corp.) [HKLM] -- {5DD4FCBD-A3C1-4155-9E17-4161C70AAABA} O42 - Logiciel: Shareaza - (.Discordia, LTD.) [HKLM] -- Shareaza O42 - Logiciel: Six Engine - (...) [HKLM] -- {56B83336-FBC1-4C46-8613-90A9E3B440D6} O42 - Logiciel: Skype Click to Call - (.Skype Technologies S.A..) [HKLM] -- {B6CF2967-C81E-40C0-9815-C05774FEF120} O42 - Logiciel: Skype™ 7.0 - (.Skype Technologies S.A..) [HKLM] -- {24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7} O42 - Logiciel: Smart Defrag 4 - (.IObit.) [HKLM] -- Smart Defrag 4_is1 O42 - Logiciel: Sony Mobile Update Engine - (.Sony Mobile Communications Inc..) [HKLM] -- Update Engine O42 - Logiciel: Sony PC Companion 2.10.235 - (.Sony.) [HKLM] -- {F09EF8F2-0976-42C1-8D9D-8DF78337C6E3} O42 - Logiciel: SoundMAX - (.Analog Devices.) [HKLM] -- {F0A37341-D692-11D4-A984-009027EC0A9C} O42 - Logiciel: Steam(TM) - (.Valve.) [HKLM] -- {048298C9-A4D3-490B-9FF9-AB023A9238F3} O42 - Logiciel: Surfing Protection - (.IObit.) [HKLM] -- IObit Surfing Protection_is1 O42 - Logiciel: TeamSpeak 2 RC2 - (.Dominating Bytes Design.) [HKLM] -- Teamspeak 2 RC2_is1 O42 - Logiciel: TeamSpeak 3 Client - (.TeamSpeak Systems GmbH.) [HKLM] -- TeamSpeak 3 Client O42 - Logiciel: TrackMania Original 1.5.2 - (.Nadeo.) [HKLM] -- TmOriginal_is1 O42 - Logiciel: VC80CRTRedist - 8.0.50727.4053 - (.DivX, Inc.) [HKLM] -- {5EE7D259-D137-4438-9A5F-42F432EC0421} O42 - Logiciel: WinHTTrack Website Copier 3.44-1 - (.HTTrack.) [HKLM] -- WinHTTrack Website Copier_is1 O42 - Logiciel: WinZip 15.0 - (.WinZip Computing, S.L. .) [HKLM] -- {CD95F661-A5C4-44F5-A6AA-ECDD91C240C0} O42 - Logiciel: Winamp - (.Nullsoft, Inc.) [HKLM] -- Winamp O42 - Logiciel: Windows Media Encoder 9 Series - (...) [HKLM] -- Windows Media Encoder 9 O42 - Logiciel: Windows Media Encoder 9 Series - (.Microsoft Corporation.) [HKLM] -- {E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E} O42 - Logiciel: Windows Media Player Firefox Plugin - (.Microsoft Corp.) [HKLM] -- {69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4} =>.Microsoft Corporation O42 - Logiciel: calibre - (.Kovid Goyal.) [HKLM] -- {D4328CA9-E332-456F-B68D-3D3DE90E50B5} O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM] -- {DF9C119C-7F26-45B9-93D4-7C372CBBBA11} O42 - Logiciel: neroxml - (.Nero AG.) [HKLM] -- {56C049BE-79E9-4502-BEA7-9754A3E60F9B} O42 - Logiciel: swMSM - (.Adobe Systems, Inc.) [HKLM] -- {612C34C7-5E90-47D8-9B5C-0F717DD82726} ~ Logic: 72 Scanned in 00mn 00s ---\\ HKCU & HKLM Software Keys [HKCU\Software\4Videosoft] [HKCU\Software\AOL] [HKCU\Software\ASUS] [HKCU\Software\ATI Technologies Inc.] [HKCU\Software\ATI] [HKCU\Software\Adobe] [HKCU\Software\Ahead] [HKCU\Software\Alex Feinman] [HKCU\Software\Analog Devices] [HKCU\Software\Andy] [HKCU\Software\AppDataLow\Aurigma] [HKCU\Software\AppDataLow\Software\Adobe] [HKCU\Software\AppDataLow\Software\JavaSoft] [HKCU\Software\AppDataLow\Software\MarkAny] [HKCU\Software\AppDataLow\Software\Unity] [HKCU\Software\AppDataLow] [HKCU\Software\Apple Computer, Inc.] [HKCU\Software\Apple Inc.] [HKCU\Software\ArenaNet] [HKCU\Software\AusLogics] [HKCU\Software\AutoHotkey] [HKCU\Software\Axon Data] [HKCU\Software\Azureus] =>P2P.Azureus [HKCU\Software\BVRP Software] [HKCU\Software\Battle.net] [HKCU\Software\Blizzard Entertainment] [HKCU\Software\Brother] [HKCU\Software\CDDB] [HKCU\Software\Chromium] [HKCU\Software\Classes.crx] [HKCU\Software\Classes] [HKCU\Software\Clients] [HKCU\Software\Curse] [HKCU\Software\DT Soft] [HKCU\Software\Digital River] [HKCU\Software\DivXNetworks] [HKCU\Software\Electronic Arts] [HKCU\Software\FLEXnet] [HKCU\Software\FreeTime] [HKCU\Software\GNU] [HKCU\Software\Gabest] [HKCU\Software\Google] [HKCU\Software\Haali] [HKCU\Software\HookNetwork] [HKCU\Software\IE] [HKCU\Software\IGA] [HKCU\Software\IM Providers] [HKCU\Software\IObit] [HKCU\Software\InstallShield] [HKCU\Software\Intel] [HKCU\Software\Jamella's Diablo 2 Editor] [HKCU\Software\JavaSoft] [HKCU\Software\Jitbit] [HKCU\Software\Kromtech] [HKCU\Software\LAV] [HKCU\Software\Lavalys] [HKCU\Software\LeaderTech] [HKCU\Software\Licenses] [HKCU\Software\LightScribe] [HKCU\Software\Lphant] [HKCU\Software\Macromedia] [HKCU\Software\Magnet] [HKCU\Software\MediaInfo] [HKCU\Software\MozillaPlugins] [HKCU\Software\Mozilla] [HKCU\Software\MultiStageTrayAgent] [HKCU\Software\Mumble] [HKCU\Software\Nadeo] [HKCU\Software\Nero] [HKCU\Software\NetIntellGames] [HKCU\Software\Netscape] [HKCU\Software\Neuf] [HKCU\Software\Nico Mak Computing] [HKCU\Software\ODBC] [HKCU\Software\PDFCreator] [HKCU\Software\Parsec Productions] [HKCU\Software\Piriform] [HKCU\Software\Policies] [HKCU\Software\Raptr] [HKCU\Software\Samsung] [HKCU\Software\ScanSoft] [HKCU\Software\Shareaza] [HKCU\Software\Skype] [HKCU\Software\Softland] [HKCU\Software\Software] [HKCU\Software\Sony] [HKCU\Software\TeamSpeak 3 Client] [HKCU\Software\TeleCharger] [HKCU\Software\TeleCharger_v2] [HKCU\Software\Trolltech] [HKCU\Software\Unity] [HKCU\Software\VB and VBA Program Settings] [HKCU\Software\Valve] [HKCU\Software\WinHTTrack Website Copier] [HKCU\Software\WinRAR SFX] [HKCU\Software\WinRAR] [HKCU\Software\WinZip Computing] [HKCU\Software\Winamp] [HKCU\Software\Xobni] [HKCU\Software\ZebHelpProcess Helper] [HKCU\Software\Zeon] [HKCU\Software\ej-technologies] [HKCU\Software\madFlac] [HKLM\Software\AGEIA Technologies] [HKLM\Software\AMD] [HKLM\Software\ASUS] [HKLM\Software\ATI Technologies] [HKLM\Software\ATI] [HKLM\Software\Adobe] [HKLM\Software\AdwCleaner] [HKLM\Software\Ahead] [HKLM\Software\America Online] [HKLM\Software\Analog Devices] [HKLM\Software\AppDataLow] [HKLM\Software\Apple Computer, Inc.] [HKLM\Software\Apple Inc.] [HKLM\Software\ArenaNet] [HKLM\Software\Audible] [HKLM\Software\AviSynth] [HKLM\Software\Axon Data] [HKLM\Software\Azureus] =>P2P.Azureus [HKLM\Software\Blizzard Entertainment] [HKLM\Software\Brother Industries, Ltd.] [HKLM\Software\Brother] [HKLM\Software\Bunndle] [HKLM\Software\CDDB] [HKLM\Software\Caphyon] [HKLM\Software\Classes] [HKLM\Software\Clients] [HKLM\Software\Creative Tech] [HKLM\Software\DEVGURU] [HKLM\Software\DT Soft] [HKLM\Software\DivXNetworks] [HKLM\Software\EACom] [HKLM\Software\Electronic Arts] [HKLM\Software\Even Balance] [HKLM\Software\FlashGet Network] [HKLM\Software\GEAR Software] [HKLM\Software\GNU] [HKLM\Software\Google] [HKLM\Software\HaaliMkx] [HKLM\Software\Hercules] [HKLM\Software\IM Providers] [HKLM\Software\IObit] [HKLM\Software\Infogrames Interactive] [HKLM\Software\Infogrames] [HKLM\Software\InstalledOptions] [HKLM\Software\Intel] [HKLM\Software\JavaSoft] [HKLM\Software\JreMetrics] [HKLM\Software\KLCodecPack] [HKLM\Software\Khronos] [HKLM\Software\LAV] [HKLM\Software\LightScribe] [HKLM\Software\Macromedia] [HKLM\Software\Magnet] [HKLM\Software\Malwarebytes' Anti-Malware] [HKLM\Software\MimarSinan] [HKLM\Software\MozillaPlugins] [HKLM\Software\Mozilla] [HKLM\Software\Mumble] [HKLM\Software\MusicNet] [HKLM\Software\NOS] [HKLM\Software\Nero] [HKLM\Software\Neuf] [HKLM\Software\Nico Mak Computing] [HKLM\Software\Norton] [HKLM\Software\Nullsoft] [HKLM\Software\ODBC] [HKLM\Software\OldTimer Tools] [HKLM\Software\Orb Networks] [HKLM\Software\PDFCreator] [HKLM\Software\Panda Software] [HKLM\Software\Piriform] [HKLM\Software\Policies] [HKLM\Software\RegisteredApplications] [HKLM\Software\Riot Games] [HKLM\Software\Samsung] [HKLM\Software\ScanSoft] [HKLM\Software\Skype] [HKLM\Software\Software] [HKLM\Software\SonicFocus] [HKLM\Software\Sonic] [HKLM\Software\Sony Ericsson] [HKLM\Software\Sony Mobile] [HKLM\Software\Sony] [HKLM\Software\Symantec] [HKLM\Software\Valve] [HKLM\Software\Volatile] [HKLM\Software\Vuze Remote] =>P2P.Azureus [HKLM\Software\WOW6432Node] [HKLM\Software\WinHTTrack Website Copier] [HKLM\Software\WinRAR] [HKLM\Software\Windows] [HKLM\Software\ZEON] [HKLM\Software\calibre] [HKLM\Software\ej-technologies] ~ Key Software: 382 Scanned in 00mn 00s ---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43) O43 - CFD: 25/02/2013 - 13:41:36 - [] ----D C:\Program Files\4Videosoft Studio O43 - CFD: 21/06/2015 - 13:48:12 - [] ----D C:\Program Files\Adobe O43 - CFD: 11/04/2012 - 19:05:21 - [] ----D C:\Program Files\AGEIA Technologies O43 - CFD: 22/03/2009 - 12:41:44 - [] ----D C:\Program Files\Alcohol Soft O43 - CFD: 11/06/2013 - 19:06:55 - [] ----D C:\Program Files\AMD APP O43 - CFD: 12/03/2009 - 06:16:30 - [] ----D C:\Program Files\Analog Devices O43 - CFD: 02/10/2013 - 19:23:20 - [] ----D C:\Program Files\Apple Software Update =>.Apple Inc O43 - CFD: 09/06/2015 - 11:33:11 - [0] ----D C:\Program Files\Application Nation O43 - CFD: 12/03/2009 - 06:25:16 - [] ----D C:\Program Files\ASUS O43 - CFD: 12/03/2009 - 06:29:20 - [] ----D C:\Program Files\ATI O43 - CFD: 11/06/2013 - 19:06:23 - [] ----D C:\Program Files\ATI Technologies O43 - CFD: 28/03/2009 - 16:27:53 - [] ----D C:\Program Files\Auslogics O43 - CFD: 22/11/2009 - 02:30:28 - [] ----D C:\Program Files\AutoHotkey O43 - CFD: 11/12/2009 - 20:41:44 - [] ----D C:\Program Files\Axon Data O43 - CFD: 15/06/2015 - 15:34:46 - [] ----D C:\Program Files\Battle.net O43 - CFD: 23/02/2014 - 20:46:08 - [] ----D C:\Program Files\Brother O43 - CFD: 16/06/2015 - 17:04:55 - [] ----D C:\Program Files\Browny02 O43 - CFD: 10/06/2013 - 15:40:23 - [] ----D C:\Program Files\Calibre2 O43 - CFD: 06/05/2012 - 13:46:39 - [] ----D C:\Program Files\CCleaner O43 - CFD: 13/06/2015 - 00:47:30 - [] ----D C:\Program Files\Common Files O43 - CFD: 23/02/2014 - 20:46:24 - [] ----D C:\Program Files\ControlCenter4 O43 - CFD: 26/05/2015 - 10:11:50 - [] ----D C:\Program Files\Creative O43 - CFD: 08/06/2010 - 19:19:26 - [] ----D C:\Program Files\DAEMON Tools Lite =>.DT Soft Ltd O43 - CFD: 08/06/2013 - 00:40:39 - [] ----D C:\Program Files\Diablo II O43 - CFD: 15/04/2015 - 22:37:11 - [] ----D C:\Program Files\Diablo III O43 - CFD: 04/03/2010 - 11:30:23 - [] ----D C:\Program Files\DivX O43 - CFD: 10/12/2012 - 16:49:40 - [] ----D C:\Program Files\EA Games O43 - CFD: 25/04/2010 - 16:29:55 - [] ----D C:\Program Files\EACom O43 - CFD: 25/04/2010 - 16:38:54 - [] ----D C:\Program Files\Electronic Arts O43 - CFD: 16/11/2009 - 22:39:34 - [0] ----D C:\Program Files\emoticones O43 - CFD: 21/06/2015 - 13:48:12 - [0] ----D C:\Program Files\f5dcb613-8577-49ce-bac8-9698ae908a6d O43 - CFD: 12/03/2009 - 06:00:06 - [] -SH-D C:\Program Files\Fichiers communs O43 - CFD: 13/03/2009 - 14:03:30 - [] ----D C:\Program Files\FlashGet O43 - CFD: 05/05/2011 - 17:47:55 - [] ----D C:\Program Files\FlashGet Network O43 - CFD: 13/05/2010 - 16:53:39 - [] ----D C:\Program Files\Free Audio Pack O43 - CFD: 22/12/2010 - 21:58:59 - [] ----D C:\Program Files\FreeTime O43 - CFD: 27/05/2013 - 20:04:26 - [] ----D C:\Program Files\GIMP 2 O43 - CFD: 21/06/2015 - 19:11:13 - [] ----D C:\Program Files\Google O43 - CFD: 07/05/2015 - 21:48:34 - [] ----D C:\Program Files\Hearthstone O43 - CFD: 08/06/2010 - 19:27:33 - [] ----D C:\Program Files\Infogrames Interactive O43 - CFD: 22/06/2015 - 10:22:06 - [] --H-D C:\Program Files\InstallShield Installation Information O43 - CFD: 12/03/2009 - 06:08:01 - [] ----D C:\Program Files\Intel O43 - CFD: 12/06/2015 - 23:38:37 - [] ----D C:\Program Files\Internet Explorer O43 - CFD: 13/06/2015 - 00:47:32 - [] ----D C:\Program Files\IObit O43 - CFD: 02/10/2013 - 19:25:20 - [] ----D C:\Program Files\iPod O43 - CFD: 02/10/2013 - 19:26:32 - [] ----D C:\Program Files\iTunes O43 - CFD: 28/10/2014 - 00:48:26 - [] ----D C:\Program Files\Java O43 - CFD: 16/06/2012 - 13:53:25 - [] ----D C:\Program Files\JitBit O43 - CFD: 23/01/2012 - 22:23:09 - [] ----D C:\Program Files\K-Lite Codec Pack O43 - CFD: 16/03/2011 - 16:46:29 - [] ----D C:\Program Files\Lavalys O43 - CFD: 30/08/2011 - 12:41:23 - [] ----D C:\Program Files\LRose O43 - CFD: 21/06/2015 - 13:25:31 - [] ----D C:\Program Files\Malwarebytes Anti-Malware O43 - CFD: 19/10/2011 - 19:36:33 - [] ----D C:\Program Files\MarkAny O43 - CFD: 21/10/2009 - 17:58:08 - [] ----D C:\Program Files\Microsoft Games O43 - CFD: 01/07/2014 - 09:18:09 - [] ----D C:\Program Files\Microsoft Office O43 - CFD: 14/05/2015 - 17:01:13 - [] ----D C:\Program Files\Microsoft Security Client O43 - CFD: 14/05/2015 - 17:09:05 - [] ----D C:\Program Files\Microsoft Silverlight O43 - CFD: 21/01/2011 - 20:37:18 - [] ----D C:\Program Files\Microsoft Works O43 - CFD: 25/06/2010 - 23:40:21 - [] ----D C:\Program Files\Microsoft.NET O43 - CFD: 01/07/2014 - 10:29:27 - [] ----D C:\Program Files\Movie Maker O43 - CFD: 06/06/2013 - 10:09:25 - [] ----D C:\Program Files\Mozilla Firefox O43 - CFD: 02/11/2006 - 14:37:34 - [] ----D C:\Program Files\MSBuild O43 - CFD: 23/02/2014 - 20:37:21 - [] ----D C:\Program Files\MSXML 4.0 O43 - CFD: 22/08/2013 - 14:38:34 - [] ----D C:\Program Files\Mumble O43 - CFD: 30/03/2009 - 23:53:04 - [] ----D C:\Program Files\Nero O43 - CFD: 12/03/2009 - 06:55:49 - [] ----D C:\Program Files\Neuf O43 - CFD: 12/05/2010 - 18:02:21 - [] ----D C:\Program Files\Norton Security Scan O43 - CFD: 04/03/2010 - 14:32:55 - [] ----D C:\Program Files\NortonInstaller O43 - CFD: 23/03/2009 - 12:47:25 - [0] ----D C:\Program Files\NOS O43 - CFD: 14/06/2015 - 23:59:45 - [] ----D C:\Program Files\Nuance O43 - CFD: 09/06/2013 - 23:05:34 - [] ----D C:\Program Files\Nvu O43 - CFD: 30/11/2014 - 13:10:31 - [0] ----D C:\Program Files\Panda Security O43 - CFD: 19/10/2011 - 20:50:42 - [0] ----D C:\Program Files\PC Connectivity Solution O43 - CFD: 14/06/2015 - 19:52:10 - [] ----D C:\Program Files\PDFCreator O43 - CFD: 26/05/2015 - 11:18:41 - [] ----D C:\Program Files\Project64 2.1 O43 - CFD: 02/11/2006 - 14:37:34 - [] ----D C:\Program Files\Reference Assemblies O43 - CFD: 21/11/2011 - 22:06:49 - [] ----D C:\Program Files\roller 3 O43 - CFD: 15/03/2011 - 00:55:46 - [] ----D C:\Program Files\roller coaster tycoon 2 O43 - CFD: 29/03/2010 - 18:22:04 - [] ----D C:\Program Files\Shareaza Applications O43 - CFD: 16/04/2015 - 09:30:59 - [] R---D C:\Program Files\Skype O43 - CFD: 18/01/2014 - 12:31:22 - [] ----D C:\Program Files\Sony O43 - CFD: 24/11/2014 - 13:58:50 - [] ----D C:\Program Files\Sony Mobile O43 - CFD: 08/08/2011 - 16:31:33 - [] ----D C:\Program Files\TeamSpeak 3 Client O43 - CFD: 18/01/2010 - 20:21:02 - [] ----D C:\Program Files\Teamspeak2_RC2 O43 - CFD: 18/01/2010 - 20:21:02 - [] ----D C:\Program Files\TmNationsForever O43 - CFD: 27/05/2010 - 15:18:17 - [] ----D C:\Program Files\TrackMania Original O43 - CFD: 17/06/2010 - 17:44:05 - [] ----D C:\Program Files\Trackmania united O43 - CFD: 02/11/2006 - 15:01:55 - [0] --H-D C:\Program Files\Uninstall Information O43 - CFD: 12/03/2009 - 09:39:41 - [] ----D C:\Program Files\Valve O43 - CFD: 12/12/2011 - 11:00:19 - [] ----D C:\Program Files\VideoLAN O43 - CFD: 21/06/2015 - 13:48:12 - [] ----D C:\Program Files\Vuze =>P2P.Azureus O43 - CFD: 11/08/2011 - 17:17:39 - [] ----D C:\Program Files\Winamp O43 - CFD: 11/08/2011 - 17:17:27 - [] ----D C:\Program Files\Winamp Detect O43 - CFD: 01/07/2014 - 10:29:27 - [] ----D C:\Program Files\Windows Calendar O43 - CFD: 01/07/2014 - 10:29:26 - [] ----D C:\Program Files\Windows Collaboration O43 - CFD: 01/07/2014 - 10:29:25 - [] ----D C:\Program Files\Windows Defender O43 - CFD: 14/05/2015 - 17:09:10 - [] ----D C:\Program Files\Windows Journal O43 - CFD: 13/12/2014 - 19:02:08 - [] ----D C:\Program Files\Windows Live O43 - CFD: 08/10/2010 - 17:15:15 - [] ----D C:\Program Files\Windows Live Safety Center O43 - CFD: 03/07/2014 - 19:51:15 - [] ----D C:\Program Files\Windows Mail =>.Microsoft Corporation O43 - CFD: 04/06/2009 - 13:50:13 - [] ----D C:\Program Files\Windows Media Components O43 - CFD: 12/06/2015 - 23:38:37 - [] ----D C:\Program Files\Windows Media Player =>.Microsoft Corporation O43 - CFD: 12/03/2009 - 06:00:06 - [] ----D C:\Program Files\Windows NT O43 - CFD: 01/07/2014 - 10:29:26 - [] ----D C:\Program Files\Windows Photo Gallery O43 - CFD: 03/07/2014 - 19:51:24 - [] ----D C:\Program Files\Windows Portable Devices O43 - CFD: 01/07/2014 - 10:29:26 - [] ----D C:\Program Files\Windows Sidebar O43 - CFD: 05/05/2011 - 17:50:06 - [] ----D C:\Program Files\WinHTTrack O43 - CFD: 16/03/2009 - 19:48:16 - [] ----D C:\Program Files\WinRAR O43 - CFD: 06/12/2011 - 15:29:39 - [] ----D C:\Program Files\WinZip O43 - CFD: 21/06/2015 - 17:16:56 - [] ----D C:\Program Files\ZHPDiag =>.Nicolas Coolman O43 - CFD: 11/03/2012 - 16:42:53 - [] ----D C:\Program Files\Common Files\Adobe O43 - CFD: 02/10/2013 - 19:25:19 - [] ----D C:\Program Files\Common Files\Apple O43 - CFD: 12/03/2009 - 06:30:45 - [] ----D C:\Program Files\Common Files\ATI Technologies O43 - CFD: 05/05/2015 - 21:50:56 - [] ----D C:\Program Files\Common Files\Blizzard Entertainment O43 - CFD: 15/05/2014 - 09:38:45 - [] ----D C:\Program Files\Common Files\DESIGNER O43 - CFD: 04/03/2010 - 11:30:11 - [] ----D C:\Program Files\Common Files\DivX Shared O43 - CFD: 25/05/2015 - 18:18:55 - [] ----D C:\Program Files\Common Files\InstallShield O43 - CFD: 13/06/2015 - 00:47:30 - [] ----D C:\Program Files\Common Files\IObit O43 - CFD: 25/05/2011 - 19:45:31 - [] ----D C:\Program Files\Common Files\LightScribe O43 - CFD: 13/12/2014 - 19:01:01 - [] ----D C:\Program Files\Common Files\microsoft shared O43 - CFD: 30/03/2009 - 23:55:10 - [] ----D C:\Program Files\Common Files\Nero O43 - CFD: 03/04/2011 - 17:50:22 - [] ----D C:\Program Files\Common Files\PX Storage Engine O43 - CFD: 19/10/2011 - 19:36:48 - [] ----D C:\Program Files\Common Files\Samsung O43 - CFD: 25/05/2015 - 18:21:54 - [] ----D C:\Program Files\Common Files\ScanSoft Shared O43 - CFD: 02/11/2006 - 13:18:33 - [] ----D C:\Program Files\Common Files\Services O43 - CFD: 16/04/2015 - 09:30:59 - [] ----D C:\Program Files\Common Files\Skype O43 - CFD: 02/11/2006 - 13:18:33 - [] ----D C:\Program Files\Common Files\SpeechEngines O43 - CFD: 24/10/2014 - 13:11:22 - [] ----D C:\Program Files\Common Files\Steam O43 - CFD: 22/01/2011 - 17:49:03 - [0] ----D C:\Program Files\Common Files\Symantec Shared O43 - CFD: 03/07/2014 - 19:51:14 - [] ----D C:\Program Files\Common Files\System O43 - CFD: 12/03/2009 - 01:20:34 - [] ----D C:\Program Files\Common Files\Windows Live O43 - CFD: 11/04/2012 - 19:04:32 - [] ----D C:\Program Files\Common Files\Wise Installation Wizard O43 - CFD: 02/10/2013 - 19:26:32 - [] ----D C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1 O43 - CFD: 11/03/2012 - 16:42:56 - [] ----D C:\ProgramData\Adobe O43 - CFD: 28/03/2009 - 17:08:02 - [] ----D C:\ProgramData\Ahead O43 - CFD: 02/10/2013 - 19:23:08 - [] ----D C:\ProgramData\Apple O43 - CFD: 02/10/2013 - 19:25:18 - [] ----D C:\ProgramData\Apple Computer O43 - CFD: 02/11/2006 - 15:02:03 - [] -SH-D C:\ProgramData\Application Data O43 - CFD: 12/03/2009 - 00:52:19 - [] ----D C:\ProgramData\Azureus =>P2P.Azureus O43 - CFD: 29/08/2012 - 17:35:03 - [] ----D C:\ProgramData\Battle.net O43 - CFD: 13/03/2009 - 17:55:14 - [] ----D C:\ProgramData\Blizzard O43 - CFD: 28/04/2014 - 19:51:16 - [] ----D C:\ProgramData\Blizzard Entertainment O43 - CFD: 01/07/2014 - 10:58:15 - [] ----D C:\ProgramData\BlueStacksSetup O43 - CFD: 23/02/2014 - 20:54:07 - [] ----D C:\ProgramData\Brother O43 - CFD: 12/03/2009 - 06:00:06 - [] -SH-D C:\ProgramData\Bureau O43 - CFD: 23/02/2014 - 20:46:24 - [] ----D C:\ProgramData\ControlCenter4 O43 - CFD: 08/06/2010 - 19:19:03 - [] ----D C:\ProgramData\DAEMON Tools Lite =>.DT Soft Ltd O43 - CFD: 02/11/2006 - 15:02:03 - [] -SH-D C:\ProgramData\Desktop O43 - CFD: 02/11/2006 - 15:02:03 - [] -SH-D C:\ProgramData\Documents O43 - CFD: 12/03/2009 - 06:00:06 - [] -SH-D C:\ProgramData\Favoris O43 - CFD: 02/11/2006 - 15:02:03 - [] -SH-D C:\ProgramData\Favorites O43 - CFD: 23/02/2014 - 20:40:55 - [] ----D C:\ProgramData\FLEXnet O43 - CFD: 08/06/2013 - 00:40:56 - [] ----D C:\ProgramData\Google O43 - CFD: 18/06/2015 - 11:17:19 - [] ----D C:\ProgramData\IObit O43 - CFD: 28/03/2009 - 17:12:19 - [] ----D C:\ProgramData\LightScribe O43 - CFD: 21/06/2015 - 13:25:29 - [] ----D C:\ProgramData\Malwarebytes O43 - CFD: 12/03/2009 - 06:00:06 - [] -SH-D C:\ProgramData\Menu Démarrer O43 - CFD: 13/12/2014 - 19:01:47 - [] -S--D C:\ProgramData\Microsoft O43 - CFD: 16/06/2015 - 11:02:14 - [] ----D C:\ProgramData\Microsoft Help O43 - CFD: 12/03/2009 - 06:00:06 - [] -SH-D C:\ProgramData\Modèles O43 - CFD: 30/03/2009 - 23:53:05 - [] ----D C:\ProgramData\Nero O43 - CFD: 12/05/2010 - 18:02:21 - [] ----D C:\ProgramData\Norton O43 - CFD: 12/05/2010 - 18:02:19 - [] ----D C:\ProgramData\NortonInstaller O43 - CFD: 23/03/2009 - 12:47:25 - [0] ----D C:\ProgramData\NOS O43 - CFD: 24/02/2014 - 16:59:26 - [] ----D C:\ProgramData\Nuance O43 - CFD: 28/10/2014 - 00:48:54 - [] ----D C:\ProgramData\Oracle O43 - CFD: 16/06/2015 - 11:26:16 - [] ----D C:\ProgramData\Package Cache O43 - CFD: 21/06/2015 - 16:23:06 - [0] ----D C:\ProgramData\ProductData O43 - CFD: 28/09/2014 - 16:16:06 - [] ----D C:\ProgramData\Riot Games O43 - CFD: 22/10/2014 - 12:20:23 - [] ----D C:\ProgramData\Samsung O43 - CFD: 25/05/2015 - 18:22:21 - [] ----D C:\ProgramData\ScanSoft O43 - CFD: 16/04/2015 - 09:31:27 - [] ----D C:\ProgramData\Skype O43 - CFD: 12/03/2009 - 06:16:08 - [] ----D C:\ProgramData\SonicFocus O43 - CFD: 18/01/2014 - 12:31:22 - [] ----D C:\ProgramData\Sony O43 - CFD: 24/11/2014 - 13:58:50 - [] ----D C:\ProgramData\Sony Mobile O43 - CFD: 02/11/2006 - 15:02:03 - [] -SH-D C:\ProgramData\Start Menu O43 - CFD: 12/03/2010 - 13:00:52 - [] ----D C:\ProgramData\Sun O43 - CFD: 05/03/2010 - 19:10:34 - [] ----D C:\ProgramData\Symantec O43 - CFD: 02/11/2006 - 15:02:04 - [] -SH-D C:\ProgramData\Templates O43 - CFD: 02/06/2013 - 14:38:58 - [] ----D C:\ProgramData\TrackMania O43 - CFD: 20/03/2010 - 19:45:08 - [] ----D C:\ProgramData\Windows Genuine Advantage O43 - CFD: 11/04/2012 - 19:05:53 - [] ----D C:\ProgramData\WindowsSearch O43 - CFD: 06/12/2011 - 15:30:12 - [] ----D C:\ProgramData\WinZip O43 - CFD: 23/02/2014 - 20:43:27 - [] ----D C:\ProgramData\zeon O43 - CFD: 22/06/2015 - 10:18:51 - [0] ----D C:\ProgramData\{BAF091CA-86C4-4627-ADA1-897E2621C1B0} O43 - CFD: 25/02/2013 - 13:41:39 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\4Videosoft O43 - CFD: 25/02/2011 - 11:20:46 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories O43 - CFD: 25/02/2011 - 11:20:46 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools O43 - CFD: 13/06/2015 - 00:47:27 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare 8 O43 - CFD: 12/03/2009 - 06:25:18 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS O43 - CFD: 28/03/2009 - 16:27:54 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Auslogics O43 - CFD: 06/11/2009 - 00:49:08 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AutoHotkey O43 - CFD: 11/12/2009 - 20:42:09 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Axon Data O43 - CFD: 15/04/2015 - 20:50:51 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net O43 - CFD: 23/02/2014 - 20:54:19 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brother O43 - CFD: 10/06/2013 - 15:40:32 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\calibre - E-book Management O43 - CFD: 11/06/2013 - 19:06:43 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Catalyst Control Center O43 - CFD: 06/05/2012 - 13:46:43 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner O43 - CFD: 22/01/2012 - 00:33:04 - [0] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Curse O43 - CFD: 08/06/2010 - 19:19:25 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite =>.DT Soft Ltd O43 - CFD: 15/04/2015 - 22:36:30 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Diablo III O43 - CFD: 04/03/2010 - 11:30:23 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX O43 - CFD: 25/04/2010 - 16:39:25 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Electronic Arts O43 - CFD: 21/01/2008 - 04:42:47 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Extras and Upgrades O43 - CFD: 13/05/2010 - 16:53:40 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Audio Pack O43 - CFD: 30/08/2011 - 21:17:16 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Game Booster O43 - CFD: 21/01/2008 - 04:42:49 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games O43 - CFD: 21/06/2015 - 19:11:28 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome O43 - CFD: 31/07/2013 - 11:48:45 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GUILD WARS O43 - CFD: 05/05/2015 - 21:49:18 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hearthstone O43 - CFD: 08/06/2010 - 19:27:33 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Infogrames Interactive O43 - CFD: 13/06/2015 - 00:43:15 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Malware Fighter O43 - CFD: 13/06/2015 - 00:47:45 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Uninstaller O43 - CFD: 02/10/2013 - 19:26:43 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes O43 - CFD: 28/10/2014 - 00:49:33 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java O43 - CFD: 23/01/2012 - 22:22:51 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack O43 - CFD: 16/03/2011 - 16:46:32 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavalys O43 - CFD: 13/12/2014 - 02:34:09 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\League of Legends O43 - CFD: 28/03/2009 - 17:09:42 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LightScribe Direct Disc Labeling O43 - CFD: 02/11/2006 - 14:56:46 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance O43 - CFD: 21/06/2015 - 13:25:31 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware O43 - CFD: 31/07/2013 - 11:48:45 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MAME Plus! XT O43 - CFD: 18/04/2009 - 18:52:35 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office O43 - CFD: 14/05/2015 - 16:49:14 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight O43 - CFD: 22/08/2013 - 14:38:37 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mumble O43 - CFD: 06/06/2013 - 10:26:27 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyFree Codec O43 - CFD: 30/03/2009 - 23:56:26 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero 8 O43 - CFD: 18/01/2010 - 19:36:49 - [0] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Net Poker 4 O43 - CFD: 12/05/2010 - 18:02:23 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Security Scan O43 - CFD: 25/05/2015 - 18:21:50 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nuance PaperPort 12 O43 - CFD: 11/04/2012 - 19:05:22 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation O43 - CFD: 18/04/2009 - 18:53:40 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outils Microsoft Office O43 - CFD: 22/08/2011 - 09:04:59 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator O43 - CFD: 02/04/2015 - 14:39:48 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Picasa 3 O43 - CFD: 31/07/2013 - 17:26:44 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SFR O43 - CFD: 29/03/2010 - 18:22:11 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Shareaza O43 - CFD: 16/04/2015 - 09:31:02 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype O43 - CFD: 13/06/2015 - 00:47:33 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Smart Defrag 4 O43 - CFD: 24/11/2014 - 13:52:23 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony O43 - CFD: 12/03/2009 - 06:16:40 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SoundMAX O43 - CFD: 22/06/2015 - 10:22:06 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup O43 - CFD: 02/11/2006 - 14:37:34 - [] R-H-D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC O43 - CFD: 08/08/2011 - 16:31:33 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client O43 - CFD: 11/06/2009 - 01:08:33 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Teamspeak2 RC2 O43 - CFD: 04/07/2009 - 12:32:55 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TmNationsForever O43 - CFD: 27/05/2010 - 15:18:18 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TrackMania Original O43 - CFD: 12/03/2009 - 09:45:58 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Valve O43 - CFD: 18/01/2010 - 19:36:49 - [0] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Warcraft III O43 - CFD: 12/03/2009 - 10:43:53 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Winamp O43 - CFD: 16/12/2010 - 18:35:48 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media O43 - CFD: 05/05/2011 - 17:50:06 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinHTTrack O43 - CFD: 16/03/2009 - 19:48:16 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR O43 - CFD: 06/12/2011 - 15:30:04 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip O43 - CFD: 04/11/2014 - 20:23:01 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of Warcraft O43 - CFD: 31/07/2013 - 11:48:45 - [0] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wow Cartographe O43 - CFD: 21/06/2015 - 14:23:19 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP =>.Nicolas Coolman O43 - CFD: 21/04/2014 - 15:57:30 - [] ----D C:\Users\Chris\AppData\Roaming\.mono O43 - CFD: 22/03/2009 - 14:59:08 - [] ----D C:\Users\Chris\AppData\Roaming\Adobe O43 - CFD: 28/03/2009 - 17:12:56 - [] ----D C:\Users\Chris\AppData\Roaming\Ahead O43 - CFD: 13/06/2015 - 00:43:24 - [] ----D C:\Users\Chris\AppData\Roaming\Apple Computer O43 - CFD: 18/11/2011 - 20:10:51 - [] ----D C:\Users\Chris\AppData\Roaming\Atari O43 - CFD: 12/03/2009 - 06:32:54 - [] ----D C:\Users\Chris\AppData\Roaming\ATI O43 - CFD: 28/03/2009 - 16:29:20 - [] ----D C:\Users\Chris\AppData\Roaming\Auslogics O43 - CFD: 21/06/2015 - 16:31:39 - [] ----D C:\Users\Chris\AppData\Roaming\Azureus =>P2P.Azureus O43 - CFD: 15/04/2015 - 20:59:57 - [] ----D C:\Users\Chris\AppData\Roaming\Battle.net O43 - CFD: 05/05/2011 - 17:48:49 - [] ----D C:\Users\Chris\AppData\Roaming\BITS O43 - CFD: 04/04/2014 - 12:15:19 - [] R---D C:\Users\Chris\AppData\Roaming\Brother O43 - CFD: 02/03/2014 - 11:43:30 - [] ----D C:\Users\Chris\AppData\Roaming\calibre O43 - CFD: 23/02/2014 - 20:59:39 - [] ----D C:\Users\Chris\AppData\Roaming\ControlCenter4 O43 - CFD: 12/06/2013 - 23:22:30 - [] ----D C:\Users\Chris\AppData\Roaming\Curse Advertising O43 - CFD: 31/07/2013 - 11:48:48 - [] ----D C:\Users\Chris\AppData\Roaming\DAEMON Tools Lite =>.DT Soft Ltd O43 - CFD: 09/06/2013 - 23:03:40 - [] ----D C:\Users\Chris\AppData\Roaming\Ditto O43 - CFD: 05/05/2011 - 17:48:04 - [] ----D C:\Users\Chris\AppData\Roaming\FlashGet O43 - CFD: 05/05/2011 - 17:47:59 - [] ----D C:\Users\Chris\AppData\Roaming\FlashGetBHO O43 - CFD: 23/02/2014 - 20:58:52 - [] ----D C:\Users\Chris\AppData\Roaming\FLEXnet O43 - CFD: 13/05/2010 - 16:53:40 - [] ----D C:\Users\Chris\AppData\Roaming\FreeAudioPack O43 - CFD: 12/03/2009 - 00:56:15 - [] ----D C:\Users\Chris\AppData\Roaming\Google O43 - CFD: 12/03/2009 - 06:01:33 - [] ----D C:\Users\Chris\AppData\Roaming\Identities O43 - CFD: 12/03/2009 - 06:15:54 - [] ----D C:\Users\Chris\AppData\Roaming\InstallShield O43 - CFD: 13/06/2015 - 00:47:08 - [] ----D C:\Users\Chris\AppData\Roaming\IObit O43 - CFD: 16/06/2012 - 12:36:23 - [] ----D C:\Users\Chris\AppData\Roaming\Macro Recorder O43 - CFD: 12/03/2009 - 01:00:20 - [] ----D C:\Users\Chris\AppData\Roaming\Macromedia O43 - CFD: 02/11/2006 - 14:37:34 - [0] ----D C:\Users\Chris\AppData\Roaming\Media Center Programs O43 - CFD: 13/03/2015 - 12:33:27 - [] -S--D C:\Users\Chris\AppData\Roaming\Microsoft O43 - CFD: 18/04/2009 - 18:52:43 - [0] ----D C:\Users\Chris\AppData\Roaming\Microsoft Web Folders O43 - CFD: 12/03/2009 - 00:52:17 - [] ----D C:\Users\Chris\AppData\Roaming\Mozilla O43 - CFD: 20/09/2013 - 00:09:52 - [] ----D C:\Users\Chris\AppData\Roaming\Mumble O43 - CFD: 30/03/2009 - 23:56:00 - [] ----D C:\Users\Chris\AppData\Roaming\Nero O43 - CFD: 04/04/2013 - 16:58:51 - [0] ----D C:\Users\Chris\AppData\Roaming\Nico Mak Computing O43 - CFD: 23/02/2014 - 20:42:30 - [] ----D C:\Users\Chris\AppData\Roaming\Nuance O43 - CFD: 07/03/2012 - 19:08:07 - [] ----D C:\Users\Chris\AppData\Roaming\Nvu O43 - CFD: 03/10/2014 - 12:27:15 - [] ----D C:\Users\Chris\AppData\Roaming\Oracle O43 - CFD: 21/06/2015 - 16:23:50 - [] ----D C:\Users\Chris\AppData\Roaming\ProductData O43 - CFD: 28/09/2014 - 16:11:42 - [] ----D C:\Users\Chris\AppData\Roaming\Riot Games O43 - CFD: 22/10/2014 - 13:42:10 - [] ----D C:\Users\Chris\AppData\Roaming\Samsung O43 - CFD: 20/01/2013 - 20:56:32 - [] ----D C:\Users\Chris\AppData\Roaming\Skype O43 - CFD: 17/04/2012 - 16:01:11 - [] ----D C:\Users\Chris\AppData\Roaming\skypePM O43 - CFD: 10/12/2012 - 13:25:43 - [] ----D C:\Users\Chris\AppData\Roaming\Softland O43 - CFD: 29/12/2009 - 23:45:50 - [] ----D C:\Users\Chris\AppData\Roaming\teamspeak2 O43 - CFD: 04/04/2012 - 16:56:19 - [0] ----D C:\Users\Chris\AppData\Roaming\Temp O43 - CFD: 12/03/2009 - 06:21:32 - [0] ----D C:\Users\Chris\AppData\Roaming\TMP O43 - CFD: 06/05/2012 - 13:48:13 - [] ----D C:\Users\Chris\AppData\Roaming\TS3Client O43 - CFD: 10/04/2014 - 22:27:39 - [] ----D C:\Users\Chris\AppData\Roaming\Unity O43 - CFD: 09/05/2015 - 20:33:12 - [] ----D C:\Users\Chris\AppData\Roaming\Winamp O43 - CFD: 16/03/2009 - 19:54:06 - [0] ----D C:\Users\Chris\AppData\Roaming\WinRAR O43 - CFD: 22/06/2015 - 10:32:20 - [] ----D C:\Users\Chris\AppData\Roaming\ZHP =>.Nicolas Coolman O43 - CFD: 30/11/2014 - 13:14:26 - [] ----D C:\Users\Chris\AppData\Local\Adobe O43 - CFD: 20/07/2011 - 19:19:02 - [] ----D C:\Users\Chris\AppData\Local\Ahead O43 - CFD: 02/10/2013 - 19:23:21 - [] ----D C:\Users\Chris\AppData\Local\Apple O43 - CFD: 02/10/2013 - 19:27:06 - [] ----D C:\Users\Chris\AppData\Local\Apple Computer O43 - CFD: 12/03/2009 - 06:01:29 - [] -SH-D C:\Users\Chris\AppData\Local\Application Data O43 - CFD: 25/08/2009 - 19:41:25 - [] ----D C:\Users\Chris\AppData\Local\Apps O43 - CFD: 12/03/2009 - 06:32:54 - [] ----D C:\Users\Chris\AppData\Local\ATI O43 - CFD: 15/06/2015 - 15:43:18 - [] ----D C:\Users\Chris\AppData\Local\Battle.net O43 - CFD: 11/09/2013 - 11:22:54 - [] ----D C:\Users\Chris\AppData\Local\Blizzard Entertainment O43 - CFD: 25/01/2010 - 19:50:35 - [] ----D C:\Users\Chris\AppData\Local\CurseClient O43 - CFD: 12/05/2015 - 18:50:02 - [0] ----D C:\Users\Chris\AppData\Local\Deployment O43 - CFD: 06/06/2013 - 10:15:43 - [] ----D C:\Users\Chris\AppData\Local\Downloaded Installations O43 - CFD: 27/05/2013 - 20:04:56 - [] ----D C:\Users\Chris\AppData\Local\fontconfig O43 - CFD: 27/05/2013 - 20:04:55 - [] ----D C:\Users\Chris\AppData\Local\gegl-0.2 O43 - CFD: 02/04/2015 - 14:40:12 - [] ----D C:\Users\Chris\AppData\Local\Google O43 - CFD: 12/03/2009 - 06:01:29 - [] -SH-D C:\Users\Chris\AppData\Local\Historique O43 - CFD: 08/10/2010 - 17:10:37 - [] ----D C:\Users\Chris\AppData\Local\Microsoft O43 - CFD: 31/07/2013 - 15:02:32 - [] ----D C:\Users\Chris\AppData\Local\Microsoft Games O43 - CFD: 17/02/2012 - 20:18:05 - [] ----D C:\Users\Chris\AppData\Local\Microsoft Help O43 - CFD: 30/06/2010 - 11:54:04 - [] ----D C:\Users\Chris\AppData\Local\Mumble O43 - CFD: 11/04/2009 - 14:08:13 - [] ----D C:\Users\Chris\AppData\Local\Nero O43 - CFD: 10/12/2012 - 17:45:44 - [] ----D C:\Users\Chris\AppData\Local\PunkBuster O43 - CFD: 05/09/2012 - 19:47:34 - [] ----D C:\Users\Chris\AppData\Local\rgewrg O43 - CFD: 22/10/2014 - 13:42:10 - [] ----D C:\Users\Chris\AppData\Local\Samsung O43 - CFD: 14/06/2015 - 19:52:10 - [] ----D C:\Users\Chris\AppData\Local\Shareaza O43 - CFD: 22/06/2015 - 10:32:17 - [] ----D C:\Users\Chris\AppData\Local\Temp O43 - CFD: 12/03/2009 - 06:01:29 - [] -SH-D C:\Users\Chris\AppData\Local\Temporary Internet Files O43 - CFD: 26/05/2015 - 11:19:24 - [0] ----D C:\Users\Chris\AppData\Local\Unity O43 - CFD: 27/03/2009 - 18:38:26 - [] ----D C:\Users\Chris\AppData\Local\VirtualStore O43 - CFD: 13/12/2014 - 18:58:52 - [] ----D C:\Users\Chris\AppData\Local\Windows Live O43 - CFD: 30/03/2015 - 00:14:04 - [] ----D C:\Users\Chris\AppData\Local\WinZip O43 - CFD: 25/04/2010 - 16:14:52 - [] R---D C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories O43 - CFD: 12/03/2009 - 06:01:39 - [] R---D C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools O43 - CFD: 14/06/2015 - 19:57:01 - [] ----D C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Andy O43 - CFD: 28/03/2009 - 16:28:11 - [] ----D C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CCleaner O43 - CFD: 09/05/2015 - 10:24:11 - [] ----D C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Curse O43 - CFD: 21/01/2010 - 18:37:32 - [] ----D C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Détection de l'application Winamp O43 - CFD: 22/12/2010 - 21:59:06 - [] ----D C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FormatFactory O43 - CFD: 31/07/2013 - 11:48:45 - [] ----D C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Jitbit Macro Recorder O43 - CFD: 21/01/2008 - 04:42:46 - [] R---D C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance O43 - CFD: 10/08/2011 - 15:23:47 - [0] ----D C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MAME Plus! XT O43 - CFD: 21/06/2015 - 12:49:45 - [] R---D C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup O43 - CFD: 21/03/2009 - 15:04:56 - [] ----D C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam O43 - CFD: 16/03/2009 - 19:48:16 - [] ----D C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR ~ Program Folder: 350 Scanned in 00mn 00s ---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44) O44 - LFC:[MD5.6FECEDE892B2C76956FE02BDC8AB58E4] - 09/06/2015 - 10:10:16 ---A- . (...) -- C:\Windows\System32\PerfStringBackup.INI [1615904] O44 - LFC:[MD5.AA6083E78B683EDE87BBB98D17C5B694] - 09/06/2015 - 10:10:16 ---A- . (...) -- C:\Windows\System32\perfc009.dat [119840] O44 - LFC:[MD5.6FF53BEA92CA14B4D148946D433901D9] - 09/06/2015 - 10:10:16 ---A- . (...) -- C:\Windows\System32\perfc00C.dat [146072] O44 - LFC:[MD5.6E62AF2481BAD8F93357CFAC169AB238] - 09/06/2015 - 10:10:16 ---A- . (...) -- C:\Windows\System32\perfh009.dat [634274] O44 - LFC:[MD5.59093927A8AA586637223A1E67457ADF] - 09/06/2015 - 10:10:16 ---A- . (...) -- C:\Windows\System32\perfh00C.dat [722238] O44 - LFC:[MD5.35CC3929DF87B4B1689B8B21685FB19A] - 11/06/2015 - 09:53:49 ---A- . (.Microsoft Corporation - Microsoft (R) JScript.) -- C:\Windows\System32\jscript9.dll [1809920] O44 - LFC:[MD5.A12176CC20E80738E813E0A54B23D6B7] - 11/06/2015 - 09:53:50 ---A- . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll [12385280] O44 - LFC:[MD5.D7C10585C78D894D9304B136EEA75869] - 11/06/2015 - 09:53:52 ---A- . (.Microsoft Corporation - Convertisseur Microsoft HTML.) -- C:\Windows\System32\html.iec [367616] O44 - LFC:[MD5.A18876C778C58B7EABD084AA67FE695B] - 11/06/2015 - 09:53:52 ---A- . (.Microsoft Corporation - Microsoft® HTML Editing Component.) -- C:\Windows\System32\mshtmled.dll [73216] O44 - LFC:[MD5.E18D91058A5516C273700900367B1DCC] - 11/06/2015 - 09:53:53 ---A- . (.Microsoft Corporation - Navigateur Internet.) -- C:\Windows\System32\ieframe.dll [9750528] O44 - LFC:[MD5.6788C8BBFD00EA99D6DA2AB5EA4F9A2C] - 11/06/2015 - 09:53:54 ---A- . (.Microsoft Corporation - Extensions Internet pour Win32.) -- C:\Windows\System32\wininet.dll [1129472] O44 - LFC:[MD5.45A3D5C60F75526BB5CA5AEA5DF456D6] - 11/06/2015 - 09:53:54 ---A- . (.Microsoft Corporation - Moteur de l’interface utilisateur d’Interne.) -- C:\Windows\System32\ieui.dll [176640] O44 - LFC:[MD5.A943748E62C00F6D2584E9AA40B66F16] - 11/06/2015 - 09:53:55 ---A- . (.Microsoft Corporation - Microsoft (R) JScript.) -- C:\Windows\System32\jscript.dll [718336] O44 - LFC:[MD5.F6272FAFC270D19580A6C58DE23C54A5] - 11/06/2015 - 09:53:56 ---A- . (.Microsoft Corporation - Microsoft Feeds Manager.) -- C:\Windows\System32\msfeeds.dll [607744] O44 - LFC:[MD5.B46BF4E8BD7DDB2D0C205BD914C8137C] - 11/06/2015 - 09:53:56 ---A- . (.Microsoft Corporation - Microsoft® MSHTML Typelib.) -- C:\Windows\System32\mshtml.tlb [2382848] O44 - LFC:[MD5.373E0F4F45B201CD464F410212449D9B] - 11/06/2015 - 09:53:57 ---A- . (.Microsoft Corporation - Microsoft Feeds Synchronization.) -- C:\Windows\System32\msfeedssync.exe [10752] O44 - LFC:[MD5.597CFCE9A5F1C55BAF65BE260843BEA3] - 11/06/2015 - 09:53:57 ---A- . (.Microsoft Corporation - Microsoft ® VBScript.) -- C:\Windows\System32\vbscript.dll [421888] O44 - LFC:[MD5.A30E4B8C066660B4457E8C18550D86F8] - 11/06/2015 - 09:53:57 ---A- . (.Microsoft Corporation - Panneau de configuration Internet.) -- C:\Windows\System32\inetcpl.cpl [1427968] O44 - LFC:[MD5.52392CFB52499EFB0C4AFD1F9202D892] - 11/06/2015 - 09:53:58 ---A- . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll [1139712] O44 - LFC:[MD5.DFCDBB14BFD253A2F032C9BF0AB311BE] - 11/06/2015 - 09:53:58 ---A- . (.Microsoft Corporation - Hôte des applications HTML de Microsoft(R).) -- C:\Windows\System32\mshta.exe [11776] O44 - LFC:[MD5.3C7BCF700F841A95A560ACFCFE9D73EC] - 11/06/2015 - 09:53:58 ---A- . (.Microsoft Corporation - Internet Shortcut Shell Extension DLL.) -- C:\Windows\System32\url.dll [231936] O44 - LFC:[MD5.F398A3DBD3FAE3549856A54A94A156AF] - 11/06/2015 - 09:53:58 ---A- . (.Microsoft Corporation - JScript Proxy Auto-Configuration.) -- C:\Windows\System32\jsproxy.dll [65024] O44 - LFC:[MD5.4CF5FF8F6E28C147825B7B0F74C3C714] - 11/06/2015 - 09:53:58 ---A- . (.Microsoft Corporation - Run time utility for Internet Explorer.) -- C:\Windows\System32\iertutil.dll [1804288] O44 - LFC:[MD5.36741A2B12C5FB00E38E5CFD5D9F543A] - 11/06/2015 - 09:53:59 ---A- . (.Microsoft Corporation - Outil d’installation sans assistance d’IE 7.) -- C:\Windows\System32\ieUnatt.exe [142848] O44 - LFC:[MD5.5BCD7F69603D89C7DFDD89D10D040E36] - 11/06/2015 - 09:53:59 ---A- . (.Microsoft Corporation - Synchronisation en arrière-plan des flux Mi.) -- C:\Windows\System32\msfeedsbs.dll [41472] O44 - LFC:[MD5.A414E74D8EA0C3E446BF776667D16387] - 11/06/2015 - 10:21:21 ---A- . (.Adobe Systems Incorporated - Adobe Flash Player Control Panel Applet.) -- C:\Windows\System32\FlashPlayerApp.exe [778416] O44 - LFC:[MD5.DE03D52A69F7F73B843C9B93AE034629] - 11/06/2015 - 10:21:21 ---A- . (.Adobe Systems Incorporated - Adobe Flash Player Control Panel Applet.) -- C:\Windows\System32\FlashPlayerCPLApp.cpl [142512] O44 - LFC:[MD5.8BDD57A8E51A825466F907A23AD365BA] - 12/06/2015 - 17:59:52 ---A- . (.Microsoft Corporation - Windows Media Player.) -- C:\Windows\System32\wmp.dll [10628608] O44 - LFC:[MD5.3749C36A314F1E4084D4FE82F4CA5C4F] - 12/06/2015 - 17:59:53 ---A- . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.DLL [8147456] O44 - LFC:[MD5.A6C3F2F207785F88C50631F2AC8335CD] - 12/06/2015 - 17:59:55 ---A- . (.Microsoft Corporation - Microsoft Windows Media Component Removal F.) -- C:\Windows\System32\dxmasf.dll [4096] O44 - LFC:[MD5.A6C3F2F207785F88C50631F2AC8335CD] - 12/06/2015 - 17:59:55 ---A- . (.Microsoft Corporation - Microsoft Windows Media Component Removal F.) -- C:\Windows\System32\msdxm.ocx [4096] O44 - LFC:[MD5.504CBBFCEA08F4D56B868DE8141BBF13] - 12/06/2015 - 18:00:11 ---A- . (.Microsoft Corporation - Windows Media Player System Preparation DLL.) -- C:\Windows\System32\spwmp.dll [7680] O44 - LFC:[MD5.628F87288466FBC0826FFE97B33D0B5A] - 12/06/2015 - 18:03:45 ---A- . (.Microsoft Corporation - Outil de suppression de logiciels malveilla.) -- C:\Windows\System32\mrt.exe [136900096] O44 - LFC:[MD5.DA10DF349F80E52B7CBDCF296A44FC75] - 12/06/2015 - 18:21:12 ---A- . (.Microsoft Corporation - DLL du client API BASE Windows NT.) -- C:\Windows\System32\kernel32.dll [894464] O44 - LFC:[MD5.425C0C69F4A97265D1697DF6D5091B63] - 12/06/2015 - 18:21:29 ---A- . (.Microsoft Corporation - Pilote Win32 multi-utilisateurs.) -- C:\Windows\System32\win32k.sys [2066432] O44 - LFC:[MD5.191A47F095110DE79378B09C0B92ABA1] - 12/06/2015 - 18:21:56 ---A- . (.Microsoft Corporation - Bibliothèque de contrôles de l’expérience u.) -- C:\Windows\System32\comctl32.dll [532480] O44 - LFC:[MD5.6FFB351C9C9BB88E91785F4CD7396D31] - 12/06/2015 - 23:44:43 ---A- . (.REALiX(tm) - HWiNFO x86 Kernel Driver.) -- C:\Windows\System32\Drivers\HWiNFO32.SYS [23840] O44 - LFC:[MD5.70C20DDD0B62E7325962349FCF9F36F2] - 12/06/2015 - 23:47:40 ---A- . (.IObit - SmartDefrag Driver.) -- C:\Windows\System32\Drivers\SmartDefragDriver.sys [18624] O44 - LFC:[MD5.A6F2E1D713103FB38F46C26EF65E3DC6] - 12/06/2015 - 23:47:41 ---A- . (.IObit - IObit Smart Defrag Extension.) -- C:\Windows\System32\IObitSmartDefragExtension.dll [109856] O44 - LFC:[MD5.0844717E02574A22DDE810BB4E45FBE7] - 12/06/2015 - 23:47:41 ---A- . (.IObit - SmartDefrag.) -- C:\Windows\System32\SmartDefragBootTime.exe [31520] O44 - LFC:[MD5.D284E2A4753D33BCDD22075D395D93DE] - 14/06/2015 - 22:58:30 ---A- . (...) -- C:\Windows\ydi.log [79382] O44 - LFC:[MD5.BD6747A4A114E5B9DBE0B062068835DC] - 14/06/2015 - 22:58:30 R---- . (...) -- C:\YukonInstall.log [310] O44 - LFC:[MD5.E4BAC29177EF529DB2917EBB3A0E9AF0] - 14/06/2015 - 22:59:33 ---A- . (...) -- C:\Windows\System32\scansoftpint.log [3102] O44 - LFC:[MD5.C071C9DDB007F1C8A0EFD97139C499FD] - 14/06/2015 - 22:59:33 ---A- . (...) -- C:\Windows\System32\scansoftprint.log [5544] O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 14/06/2015 - 23:00:18 ---A- . (...) -- C:\Windows\setupact.log [0] O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 14/06/2015 - 23:00:18 ---A- . (...) -- C:\Windows\setuperr.log [0] O44 - LFC:[MD5.11FCE6665C8C0FA877CDC8BB3416CF5A] - 16/06/2015 - 10:50:23 ---A- . (...) -- C:\Windows\System32\FNTCACHE.DAT [259064] O44 - LFC:[MD5.BBD2B1909BB56D108766594FEE368FA8] - 16/06/2015 - 11:23:02 ---A- . (...) -- C:\Windows\System32\029B560A371F4E00AB32838EBC01B9E7 [4] O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 16/06/2015 - 15:52:24 ---A- . (...) -- C:\Windows\hgfs.sys [0] O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 16/06/2015 - 15:52:24 ---A- . (...) -- C:\Windows\prleth.sys [0] O44 - LFC:[MD5.CA2A8AF1DBAD0F31F9B33A2827DFBC16] - 21/06/2015 - 11:59:33 ---A- . (...) -- C:\Windows\tweaking.com-regbackup-PC-DE-CHRIS-Windows-Vista-(TM)-Home-Premium-(32-bit).dat [207] O44 - LFC:[MD5.3C21F7E95FFCA33EF1A83AA33D9663CF] - 21/06/2015 - 12:25:29 ---A- . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\Drivers\mbam.sys [23256] O44 - LFC:[MD5.155BF99B2B87E0C298CAC3B4B8136D83] - 21/06/2015 - 12:25:29 ---A- . (.Malwarebytes Corporation - Malwarebytes Chameleon Protection Driver.) -- C:\Windows\System32\Drivers\mbamchameleon.sys [92888] O44 - LFC:[MD5.3F435B1E9F5B3EF95669344FD8E9DCF9] - 21/06/2015 - 12:25:29 ---A- . (.Malwarebytes Corporation - Malwarebytes Web Access Control.) -- C:\Windows\System32\Drivers\mwac.sys [51928] O44 - LFC:[MD5.04B309A1A653177994630C2773E659F1] - 21/06/2015 - 12:26:31 ---A- . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\Drivers\MBAMSwissArmy.sys [119512] O44 - LFC:[MD5.65709D8448F2E83F7FF2B9E66F2F1CE2] - 21/06/2015 - 16:16:58 ---A- . (...) -- C:\PhysicalDisk0_MBR.bin [512] O44 - LFC:[MD5.D2F4A84F1526DB5618540FAC28F71D9E] - 22/06/2015 - 09:15:41 ---A- . (...) -- C:\Windows\PFRO.log [81288] O44 - LFC:[MD5.44B9DFD4A9A7478C83597C9993516463] - 22/06/2015 - 09:15:44 -S-A- . (...) -- C:\Windows\bootstat.dat [67584] O44 - LFC:[MD5.BB746CCB94493A5C252EEC0DBF6927E8] - 22/06/2015 - 09:32:19 ---A- . (...) -- C:\Windows\WindowsUpdate.log [1438935] ~ Files: 61 Scanned in 00mn 29s ---\\ Déni du service (Local Security Authority) (O48) O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l'Éditeur de configuration de sécurité Windows.) -- C:\Windows\System32\scecli.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Package de sécurité Kerberos.) -- C:\Windows\System32\kerberos.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\Windows\System32\schannel.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Digest Access.) -- C:\Windows\System32\wdigest.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Web Service Security Package.) -- C:\Windows\System32\tspkg.dll ~ LSA: 7 Scanned in 00mn 00s ---\\ Contrôle du Safe Boot (CSB) (O49) O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\System32\Drivers\sermouse.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.) O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgrx.sys . (.Microsoft Corporation - Volume Manager Extension Driver.) -- C:\Windows\System32\Drivers\volmgrx.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\System32\Drivers\ipnat.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\nsiproxy.sys . (.Microsoft Corporation - NSI Proxy.) -- C:\Windows\System32\Drivers\nsiproxy.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpencdd.sys . (.Microsoft Corporation - RDP Miniport.) -- C:\Windows\System32\Drivers\rdpencdd.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\System32\Drivers\sermouse.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.) O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgrx.sys . (.Microsoft Corporation - Volume Manager Extension Driver.) -- C:\Windows\System32\Drivers\volmgrx.sys ~ CSB: 13 Scanned in 00mn 00s ---\\ Recherche d'infection sur les pilotes (HKLM)(TDSD) (O52) O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Codec Cinepak®.) -- C:\Windows\System32\iccvid.dll O52 - TDSD: \Drivers32\"VIDC.IV41"="IR41_32.AX" . (.Intel Corporation - Intel Indeo® Video 4.5.) -- C:\Windows\System32\IR41_32.AX O52 - TDSD: \Drivers32\"VIDC.XVID"="xvidvfw.dll" . (...) -- C:\Windows\System32\xvidvfw.dll O52 - TDSD: \Drivers32\"VIDC.YV12"="xvidvfw.dll" . (...) -- C:\Windows\System32\xvidvfw.dll O52 - TDSD: \Drivers32\"msacm.ac3acm"="ac3acm.acm" . (.fccHandler - AC-3 ACM Codec.) -- C:\Windows\System32\ac3acm.acm O52 - TDSD: \Drivers32\"msacm.lameacm"="lameACM.acm" . (.http://www.mp3dev.org/ - Lame MP3 codec engine.) -- C:\Windows\System32\lameACM.acm O52 - TDSD: \Drivers32\"VIDC.FFDS"="ff_vfw.dll" . (.Pas de propriétaire - ffdshow VFW.) -- C:\Windows\System32\ff_vfw.dll O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm O52 - TDSD: \drivers.desc\"ac3acm.acm"="AC-3 ACM Codec" . (.fccHandler - AC-3 ACM Codec.) -- C:\Windows\System32\ac3acm.acm O52 - TDSD: \drivers.desc\"ff_vfw.dll"="ffdshow video encoder" . (.Pas de propriétaire - ffdshow VFW.) -- C:\Windows\System32\ff_vfw.dll ~ TDSD: 11 Scanned in 00mn 00s ---\\ Enumération des clés de registre SecurityProviders (MCSP) (O54) O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - TS Single Sign On Security Package.) -- C:\Windows\System32\credssp.dll O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - TS Single Sign On Security Package.) -- C:\Windows\System32\credssp.dll ~ MSCP: 2 Scanned in 00mn 00s ---\\ Enumération des clés de registre PoliciesSystem (MWPS) (O55) O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=2 O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=1 O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1 O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=1 O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1 O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1 O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=1 O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0 O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0 O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=0 O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=0 O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0 O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1 O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1 O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0 O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0 O55 - MWPS:[HKCU\...\Policies\System] - "DisableRegistryTools"=0 O55 - MWPS:[HKCU\...\Policies\System] - "DisableTaskMgr"=0 ~ MWPS: 18 Scanned in 00mn 00s ---\\ Enumération des clés de registre PoliciesExplorer (MWPE) (O56) O56 - MWPE:[HKLM\...\policies\Explorer] - "BindDirectlyToPropertySetStorage"=0 ~ MWPE Keys: 1 Scanned in 00mn 00s ---\\ Liste des pilotes du système (SDL) (O58) O58 - SDL:20/03/2008 - 01:45:38 ---A- . (.Analog Devices, Inc. - High Definition Audio Function Driver.) -- C:\Windows\System32\Drivers\ADIHdAud.sys [373760] O58 - SDL:21/01/2008 - 03:23:21 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\Drivers\adp94xx.sys [422968] O58 - SDL:21/01/2008 - 03:23:25 ---A- . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\System32\Drivers\adpahci.sys [300600] O58 - SDL:21/01/2008 - 03:23:26 ---A- . (.Adaptec, Inc. - Adaptec LH Ultra160 Driver (x86).) -- C:\Windows\System32\Drivers\adpu160m.sys [101432] O58 - SDL:21/01/2008 - 03:23:27 ---A- . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver.) -- C:\Windows\System32\Drivers\adpu320.sys [149560] O58 - SDL:21/01/2008 - 03:23:00 ---A- . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\Windows\System32\Drivers\aliide.sys [17464] O58 - SDL:21/01/2008 - 03:23:23 ---A- . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\System32\Drivers\arc.sys [79416] O58 - SDL:21/01/2008 - 03:23:24 ---A- . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\System32\Drivers\arcsas.sys [79928] O58 - SDL:18/10/2006 - 06:44:48 ---A- . (.Pas de propriétaire - ATK0110 ACPI Utility.) -- C:\Windows\System32\Drivers\ASACPI.sys [7680] O58 - SDL:04/01/2008 - 13:34:42 ---A- . (...) -- C:\Windows\System32\Drivers\AsInsHelp32.sys [10216] O58 - SDL:04/01/2008 - 13:34:48 ---A- . (...) -- C:\Windows\System32\Drivers\AsInsHelp64.sys [11832] O58 - SDL:17/12/2007 - 10:14:06 R--A- . (...) -- C:\Windows\System32\Drivers\AsIO.sys [12400] O58 - SDL:28/12/2007 - 08:22:02 ---A- . (...) -- C:\Windows\System32\Drivers\ASUSHWIO.SYS [10296] O58 - SDL:23/02/2012 - 13:31:36 ---A- . (.Advanced Micro Devices - AMD High Definition Audio Function Driver.) -- C:\Windows\System32\Drivers\AtihdLH3.sys [83984] O58 - SDL:01/12/2008 - 23:14:32 ---A- . (.ATI Technologies Inc. - ATI Radeon Kernel Mode Driver.) -- C:\Windows\System32\Drivers\atikmdag.sys [4179968] O58 - SDL:02/11/2006 - 09:24:45 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower Filter Driver.) -- C:\Windows\System32\Drivers\BrFiltLo.sys [13568] O58 - SDL:02/11/2006 - 09:24:46 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper Filter Driver.) -- C:\Windows\System32\Drivers\BrFiltUp.sys [5248] O58 - SDL:02/11/2006 - 09:25:24 ---A- . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\System32\Drivers\BrSerId.sys [71808] O58 - SDL:02/11/2006 - 09:24:44 ---A- . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\System32\Drivers\BrSerWdm.sys [62336] O58 - SDL:02/11/2006 - 09:24:44 ---A- . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\System32\Drivers\BrUsbMdm.sys [12160] O58 - SDL:02/11/2006 - 09:24:47 ---A- . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\System32\Drivers\BrUsbSer.sys [11904] O58 - SDL:21/01/2008 - 03:23:00 ---A- . (.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) -- C:\Windows\System32\Drivers\cmdide.sys [19000] O58 - SDL:02/11/2006 - 10:50:11 ---A- . (.Adaptec, Inc. - Adaptec Ultra SCSI miniport.) -- C:\Windows\System32\Drivers\djsvs.sys [71272] O58 - SDL:21/01/2008 - 03:23:24 ---A- . (.Intel Corporation - Pilote désérialisé NDIS 6 de la carte Intel(R) PRO/1000.) -- C:\Windows\System32\Drivers\E1G60I32.sys [118784] O58 - SDL:21/01/2008 - 03:23:22 ---A- . (.Emulex - Storport Miniport Driver for LightPulse HBAs.) -- C:\Windows\System32\Drivers\elxstor.sys [342584] O58 - SDL:21/08/2012 - 12:01:22 ---A- . (.GEAR Software Inc. - CD DVD Filter.) -- C:\Windows\System32\Drivers\GEARAspiWDM.sys [26840] O58 - SDL:24/11/2014 - 13:00:25 ---A- . (.Sony Mobile Communications - SOMC USB Flash Driver Filter.) -- C:\Windows\System32\Drivers\ggflt.sys [13528] O58 - SDL:18/01/2014 - 12:45:11 ---A- . (.Sony Ericsson Mobile Communications - SEMC USB Flash Driver.) -- C:\Windows\System32\Drivers\ggsemc.sys [25200] O58 - SDL:24/11/2014 - 13:00:25 ---A- . (.Sony Mobile Communications - SOMC USB Flash Driver.) -- C:\Windows\System32\Drivers\ggsomc.sys [26328] O58 - SDL:21/01/2008 - 03:23:26 ---A- . (.Hewlett-Packard Company - Smart Array Storport Driver.) -- C:\Windows\System32\Drivers\HpCISSs.sys [40504] O58 - SDL:12/06/2015 - 23:44:43 ---A- . (.REALiX(tm) - HWiNFO x86 Kernel Driver.) -- C:\Windows\System32\Drivers\HWiNFO32.SYS [23840] O58 - SDL:21/01/2008 - 03:23:23 ---A- . (.Intel Corporation - Intel Matrix Storage Manager driver (base).) -- C:\Windows\System32\Drivers\iaStorV.sys [235064] O58 - SDL:02/11/2006 - 10:50:17 ---A- . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\System32\Drivers\iirsp.sys [41576] O58 - SDL:02/11/2006 - 10:50:07 ---A- . (.Integrated Technology Express, Inc. - ITE IT8211 ATA/ATAPI SCSI miniport.) -- C:\Windows\System32\Drivers\iteatapi.sys [35944] O58 - SDL:02/11/2006 - 10:50:09 ---A- . (.Integrated Technology Express, Inc. - ITE IT8212 ATA RAID SCSI miniport.) -- C:\Windows\System32\Drivers\iteraid.sys [35944] O58 - SDL:21/01/2008 - 03:23:23 ---A- . (.LSI Logic - LSI Logic Fusion-MPT FC Driver (StorPort).) -- C:\Windows\System32\Drivers\lsi_fc.sys [96312] O58 - SDL:21/01/2008 - 03:23:25 ---A- . (.LSI Logic - LSI Logic Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\System32\Drivers\lsi_sas.sys [89656] O58 - SDL:21/01/2008 - 03:23:23 ---A- . (.LSI Logic - LSI Logic Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\System32\Drivers\lsi_scsi.sys [96312] O58 - SDL:14/04/2015 - 08:37:42 ---A- . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\Drivers\mbam.sys [23256] O58 - SDL:14/04/2015 - 08:37:44 ---A- . (.Malwarebytes Corporation - Malwarebytes Chameleon Protection Driver.) -- C:\Windows\System32\Drivers\mbamchameleon.sys [92888] O58 - SDL:21/06/2015 - 12:26:31 ---A- . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\Drivers\MBAMSwissArmy.sys [119512] O58 - SDL:21/01/2008 - 03:23:27 ---A- . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows Vista/Longhorn for x.) -- C:\Windows\System32\Drivers\megasas.sys [31288] O58 - SDL:21/01/2008 - 03:23:27 ---A- . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\System32\Drivers\MegaSR.sys [386616] O58 - SDL:02/11/2006 - 10:49:59 ---A- . (.LSI Logic Corporation - MegaRAID RAID Controller Driver for Windows Vista/Longhorn for.) -- C:\Windows\System32\Drivers\Mraid35x.sys [33384] O58 - SDL:19/05/2008 - 08:46:30 ---A- . (.Marvell Semiconductor, Inc. - Marvell Thor Windows Driver.) -- C:\Windows\System32\Drivers\mv61xx.sys [150568] O58 - SDL:14/04/2015 - 08:37:50 ---A- . (.Malwarebytes Corporation - Malwarebytes Web Access Control.) -- C:\Windows\System32\Drivers\mwac.sys [51928] O58 - SDL:02/11/2006 - 10:50:19 ---A- . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\System32\Drivers\nfrd960.sys [45160] O58 - SDL:02/11/2006 - 08:36:50 ---A- . (.N-trig Innovative Technologies - Pilote intégré de digitalisateur de tablette N-trig.) -- C:\Windows\System32\Drivers\ntrigdigi.sys [20608] O58 - SDL:21/01/2008 - 03:23:21 ---A- . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\System32\Drivers\nvraid.sys [102968] O58 - SDL:21/01/2008 - 03:23:21 ---A- . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\System32\Drivers\nvstor.sys [45112] O58 - SDL:16/01/2013 - 22:01:55 ---A- . (...) -- C:\Windows\System32\Drivers\PnkBstrK.sys [139080] O58 - SDL:30/03/2004 - 18:29:48 ---A- . (.Conexant Systems, Inc. - PRISM Wireless NDIS 5.1 Driver.) -- C:\Windows\System32\Drivers\PRISMA02.sys [374816] O58 - SDL:21/01/2008 - 03:23:24 ---A- . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\Windows\System32\Drivers\ql2300.sys [1122360] O58 - SDL:02/11/2006 - 10:50:35 ---A- . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\Windows\System32\Drivers\ql40xx.sys [106088] O58 - SDL:02/11/2006 - 07:37:21 ---A- . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\Windows\System32\Drivers\secdrv.sys [20480] O58 - SDL:05/07/2006 - 13:46:06 ---A- . (.Protection Technology (StarForce) - FrontLine Environment Driver.) -- C:\Windows\System32\Drivers\sfdrv01a.sys [63352] O58 - SDL:14/06/2006 - 15:56:56 ---A- . (.Protection Technology (StarForce) - FrontLine Helper Driver.) -- C:\Windows\System32\Drivers\sfhlp02.sys [13680] O58 - SDL:10/07/2006 - 17:19:58 ---A- . (.Protection Technology - StarForce Protection Synchronization Driver.) -- C:\Windows\System32\Drivers\sfsync02.sys [27032] O58 - SDL:12/01/2007 - 19:09:53 ---A- . (.Protection Technology (StarForce) - FrontLine File System Driver.) -- C:\Windows\System32\Drivers\sfvfs02.sys [82296] O58 - SDL:21/01/2008 - 03:23:26 ---A- . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\System32\Drivers\sisraid4.sys [74808] O58 - SDL:04/06/2014 - 14:17:28 ---A- . (.IObit - SmartDefrag Driver.) -- C:\Windows\System32\Drivers\SmartDefragDriver.sys [18624] O58 - SDL:02/01/1601 - 23:00:00 ---A- . (...) -- C:\Windows\System32\Drivers\sptd.sys [691696] O58 - SDL:28/07/2010 - 14:33:16 ---A- . (.MCCI Corporation - Windows 2000/XP support functions.) -- C:\Windows\System32\Drivers\ss_bcm.sys [12416] O58 - SDL:28/07/2010 - 14:33:16 ---A- . (.MCCI Corporation - SAMSUNG USB Mobile Device (Windows 2000/XP support functions).) -- C:\Windows\System32\Drivers\ss_bwh.sys [12288] O58 - SDL:02/11/2006 - 10:50:05 ---A- . (.LSI Logic - LSI Logic 8XX SCSI Miniport Driver.) -- C:\Windows\System32\Drivers\symc8xx.sys [35944] O58 - SDL:02/11/2006 - 10:49:56 ---A- . (.LSI Logic - LSI Logic Hi-Perf SCSI Miniport Driver.) -- C:\Windows\System32\Drivers\sym_hi.sys [31848] O58 - SDL:02/11/2006 - 10:50:03 ---A- . (.LSI Logic - LSI Logic Ultra160 SCSI Miniport Driver.) -- C:\Windows\System32\Drivers\sym_u3.sys [34920] O58 - SDL:21/01/2008 - 03:23:20 ---A- . (.ULi Electronics Inc. - ULi SATA Controller Driver.) -- C:\Windows\System32\Drivers\uliahci.sys [238648] O58 - SDL:02/11/2006 - 10:50:35 ---A- . (.Promise Technology, Inc. - Promise Ultra/Sata Series Driver for Win2003.) -- C:\Windows\System32\Drivers\ulsata.sys [98408] O58 - SDL:21/01/2008 - 03:23:23 ---A- . (.Promise Technology, Inc. - Promise SATAII150 Series Windows Drivers.) -- C:\Windows\System32\Drivers\ulsata2.sys [115816] O58 - SDL:13/12/2012 - 13:50:38 ---A- . (.Apple, Inc. - Apple Mobile Device USB Driver.) -- C:\Windows\System32\Drivers\usbaapl.sys [45056] O58 - SDL:11/10/2014 - 13:48:10 ---A- . (.Oracle Corporation - VirtualBox Support Driver.) -- C:\Windows\System32\Drivers\VBoxDrv.sys [745608] O58 - SDL:11/10/2014 - 13:46:38 ---A- . (.Oracle Corporation - VirtualBox Host-Only Network Adapter Driver.) -- C:\Windows\System32\Drivers\VBoxNetAdp.sys [117272] O58 - SDL:11/10/2014 - 13:46:38 ---A- . (.Oracle Corporation - VirtualBox USB Monitor Driver.) -- C:\Windows\System32\Drivers\VBoxUSBMon.sys [105472] O58 - SDL:21/01/2008 - 03:23:00 ---A- . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\System32\Drivers\viaide.sys [20024] O58 - SDL:21/01/2008 - 03:23:23 ---A- . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\Windows\System32\Drivers\vsmraid.sys [130616] O58 - SDL:02/11/2006 - 08:30:56 ---A- . (.Marvell - Pilote miniport NDIS6.0 pour contrôleur Ethernet Marvell Yukon.) -- C:\Windows\System32\Drivers\yk60x86.sys [194048] O58 - SDL:02/11/2006 - 08:09:42 ---A- . (...) -- C:\Windows\System32\ANSI.SYS [9029] O58 - SDL:02/11/2006 - 08:09:45 ---A- . (...) -- C:\Windows\System32\country.sys [27097] O58 - SDL:24/06/2010 - 14:00:14 ---A- . (...) -- C:\Windows\System32\FsUsbExDisk.Sys [36608] O58 - SDL:02/11/2006 - 08:09:41 ---A- . (...) -- C:\Windows\System32\HIMEM.SYS [4768] O58 - SDL:02/11/2006 - 08:09:44 ---A- . (...) -- C:\Windows\System32\KEY01.SYS [42809] O58 - SDL:02/11/2006 - 08:09:44 ---A- . (...) -- C:\Windows\System32\KEYBOARD.SYS [42537] O58 - SDL:02/11/2006 - 08:09:29 ---A- . (...) -- C:\Windows\System32\NTDOS.SYS [27866] O58 - SDL:02/11/2006 - 08:09:35 ---A- . (...) -- C:\Windows\System32\NTDOS404.SYS [29146] O58 - SDL:02/11/2006 - 08:09:38 ---A- . (...) -- C:\Windows\System32\NTDOS411.SYS [29370] O58 - SDL:02/11/2006 - 08:09:40 ---A- . (...) -- C:\Windows\System32\NTDOS412.SYS [29274] O58 - SDL:02/11/2006 - 08:09:31 ---A- . (...) -- C:\Windows\System32\NTDOS804.SYS [29146] O58 - SDL:02/11/2006 - 08:09:20 ---A- . (...) -- C:\Windows\System32\NTIO.SYS [33952] O58 - SDL:02/11/2006 - 08:09:23 ---A- . (...) -- C:\Windows\System32\NTIO404.SYS [34672] O58 - SDL:02/11/2006 - 08:09:24 ---A- . (...) -- C:\Windows\System32\NTIO411.SYS [35776] O58 - SDL:02/11/2006 - 08:09:26 ---A- . (...) -- C:\Windows\System32\NTIO412.SYS [35536] O58 - SDL:02/11/2006 - 08:09:22 ---A- . (...) -- C:\Windows\System32\NTIO804.SYS [34672] ~ Drivers: 93 Scanned in 00mn 07s ---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61) O61 - LFC: 15/06/2015 - 10:33:56 ---A- . (...) -- C:\Users\Chris\Downloads\ahlv1_win32.exe [194279672] O61 - LFC: 18/06/2015 - 10:33:13 ---A- . (...) -- C:\Users\Chris\AppData\Roaming\Adobe\Acrobat\9.0\UserCache.bin [41294] O61 - LFC: 21/06/2015 - 10:33:20 ---A- . (...) -- C:\Users\Chris\Desktop\ResetBrowser.exe [1608192] O61 - LFC: 21/06/2015 - 10:33:56 ---A- . (...) -- C:\Users\Chris\Downloads\adwcleaner_4.206.exe [2231296] O61 - LFC: 21/06/2015 - 10:35:13 ---A- . (.Thisisu.) -- C:\Users\Chris\Downloads\JRT.exe [2950750] O61 - LFC: 21/06/2015 - 10:35:33 ---A- . (.Malwarebytes Corporation.) -- C:\Users\Chris\Downloads\mbam-setup-2.1.6.1022.exe [21546080] O61 - LFC: 21/06/2015 - 10:36:50 ---A- . (.OldTimer Tools.) -- C:\Users\Chris\Downloads\TFC.exe [448512] O61 - LFC: 21/06/2015 - 10:37:22 ---A- . (.Nicolas Coolman.) -- C:\Users\Chris\Downloads\ZHPDiag2.exe [6883618] =>.Nicolas Coolman ~ 10 Fichiers temporaires (Temporary files) ~ 21 Fichiers cookies (Cookies files) ~ Files: 8 Scanned in 04mn 18s ---\\ Liste des outils de désinfection (LATC) (O63) O63 - Logiciel: ZHPDiag 2015 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 =>.Nicolas Coolman ~ ADS: Scanned in 00mn 00s ---\\ Liste les services legacy du registre (LALS) (O64) O64 - Services: CurCS - 17/12/2007 - C:\Windows\System32\drivers\AsIO.sys (AsIO) .(...) - LEGACY_ASIO O64 - Services: CurCS - 25/03/2015 - C:\Program Files\IObit\IObit Malware Fighter\Drivers\wlh_x86\FileMonitor.sys (FileMonitor) .(.IObit - IMF File MiniFilter Driver.) - LEGACY_FILEMONITOR O64 - Services: CurCS - 12/06/2015 - C:\Windows\system32\drivers\HWiNFO32.sys (HWiNFO32) .(.REALiX(tm) - HWiNFO x86 Kernel Driver.) - LEGACY_HWINFO32 O64 - Services: CurCS - 14/04/2015 - C:\Windows\system32\drivers\mbam.sys (MBAMProtector) .(.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - LEGACY_MBAMPROTECTOR O64 - Services: CurCS - 25/03/2015 - C:\Program Files\IObit\IObit Malware Fighter\drivers\wlh_x86\regfilter.sys (RegFilter) .(.IObit.com - Registry Filter.) - LEGACY_REGFILTER O64 - Services: CurCS - 05/07/2006 - C:\Windows\System32\drivers\sfdrv01a.sys (sfdrv01a) .(.Protection Technology (StarForce) - FrontLine Environment Driver.) - LEGACY_SFDRV01A O64 - Services: CurCS - 14/06/2006 - C:\Windows\System32\drivers\sfhlp02.sys (sfhlp02) .(.Protection Technology (StarForce) - FrontLine Helper Driver.) - LEGACY_SFHLP02 O64 - Services: CurCS - 10/07/2006 - C:\Windows\System32\drivers\sfsync02.sys (sfsync02) .(.Protection Technology - StarForce Protection Synchronization Driver.) - LEGACY_SFSYNC02 O64 - Services: CurCS - 12/01/2007 - C:\Windows\System32\drivers\sfvfs02.sys (sfvfs02) .(.Protection Technology (StarForce) - FrontLine File System Driver.) - LEGACY_SFVFS02 O64 - Services: CurCS - 04/06/2014 - C:\Windows\System32\Drivers\SmartDefragDriver.sys (SmartDefragDriver) .(.IObit - SmartDefrag Driver.) - LEGACY_SMARTDEFRAGDRIVER O64 - Services: CurCS - 14/03/1746 - C:\Windows\System32\Drivers\sptd.sys (sptd) .(...) - LEGACY_SPTD O64 - Services: CurCS - 25/03/2015 - C:\Program Files\IObit\IObit Malware Fighter\drivers\wlh_x86\UrlFilter.sys (UrlFilter) .(.IObit.com - URL Filter.) - LEGACY_URLFILTER ~ Legacy: 157 Scanned in 00mn 00s ---\\ Associations Shell Spawning (O67) O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe =>.Microsoft Corporation O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d'événements.) -- C:\Windows\System32\eventvwr.exe O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Not Key.) O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft (R) Windows Based Script Host.) -- C:\Windows\System32\WScript.exe O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S ~ FASS Keys: 10 Scanned in 00mn 00s ---\\ Menu de démarrage Internet (SMI) (O68) O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe ~ Keys: Scanned in 00mn 00s ---\\ Recherche d'infection sur les navigateurs internet (SBI) (O69) O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - http://www.bing.com O69 - SBI: SearchScopes [HKCU] {E733165D-CBCF-4FDA-883E-ADEF965B476C} [DefaultScope] - (Google) - http://www.istartsurf.com =>PUP.Istart O69 - SBI: SearchScopes [HKUS\.DEFAULT] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (@ieframe.dll,-12512) - http://search.live.com O69 - SBI: SearchScopes [HKUS\.DEFAULT] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} - (Google) - http://www.google.com O69 - SBI: SearchScopes [HKUS\S-1-5-18] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (@ieframe.dll,-12512) - http://search.live.com O69 - SBI: SearchScopes [HKUS\S-1-5-18] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} - (Google) - http://www.google.com ~ Keys: Scanned in 00mn 00s ---\\ Enumère les service demarrés par Svchost (SSS) (O83) O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d’application.) -- C:\Windows\System32\aelupsvc.dll [24576] O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll [62976] O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [247808] O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes à puce Microsoft.) -- C:\Windows\System32\certprop.dll [40448] O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes à puce Microsoft.) -- C:\Windows\System32\certprop.dll [40448] O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\System32\srvsvc.dll [125952] O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\System32\gpsvc.dll [576512] O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\ikeext.dll [444928] O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Service Audio Windows.) -- C:\Windows\System32\Audiosrv.dll [316928] O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’accès distant.) -- C:\Windows\System32\rasauto.dll [90624] O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire de connexions d'accès distant.) -- C:\Windows\System32\rasmans.dll [262144] O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll [68608] O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements système (SENS).) -- C:\Windows\System32\sens.dll [47104] O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l'application d'assistance à Microsoft NAT.) -- C:\Windows\System32\ipnathlp.dll [288256] O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM).) -- C:\Windows\System32\tapisrv.dll [242688] O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gestionnaire des connexions distantes Terminal Server.) -- C:\Windows\System32\termsrv.dll [449536] O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Update.) -- C:\Windows\System32\wuaueng.dll [1933848] O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière-plan.) -- C:\Windows\System32\qmgr.dll [758784] O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [247808] O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur un réseau IPv4..) -- C:\Windows\System32\iphlpsvc.dll [200704] O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d'ouverture de session secondaire.) -- C:\Windows\system32\seclogon.dll [19968] O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll [33280] O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\System32\iscsiexe.dll [111616] O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédias.) -- C:\Windows\System32\mmcss.dll [45056] O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll [153600] O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll [57344] O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll [162304] O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\System32\schedsvc.dll [601600] O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service de configuration des services Terminal Server.) -- C:\Windows\System32\sessenv.dll [84992] O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\System32\browser.dll [81920] O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\Windows\System32\kmsvc.dll [68096] ~ Services: 31 Scanned in 00mn 00s ---\\ Recherche particulière à la racine du système (SPRF) (O84) [MD5.DF4854934A66325657D6C82A71B37C3A] [SPRF][26/07/2010] (...) -- C:\ProgramData\ezsidmv.dat [56] [MD5.73709547A3B136DE4FCFDE3EF78C1B8F] [SPRF][10/12/2012] (...) -- C:\Users\Chris\AppData\Roaming\PnkBstrK.sys [138056] [MD5.0B72F19DBB49B33D47542A56C3434BC8] [SPRF][27/10/2002] (...) -- C:\Users\Chris\Desktop\rct2.exe [6785536] [MD5.4F71A8DBE6DD74184A836EDF671441A5] [SPRF][21/06/2015] (.Pas de propriétaire - Reset your browser !.) -- C:\Users\Chris\Desktop\ResetBrowser.exe [1608192] [MD5.80F4A456633F78A26A3C6B16E64EFEC5] [SPRF][28/09/2007] (.Microsoft - Uno Messenger.) -- C:\Windows\Downloaded Program Files\GAME_UNO1.dll [381960] [MD5.8945CCA5FC4F25168E8B6F401EFAF51F] [SPRF][22/02/2007] (.Microsoft Corporation - Zone.com Stats Client for MSN Messenger.) -- C:\Windows\Downloaded Program Files\MessengerStatsPAClient.dll [304544] [MD5.E661E91B5929632665683222D509D271] [SPRF][28/02/2007] (.Microsoft Corporation - Zone.com Minesweeper Flags for MSN Messenger.) -- C:\Windows\Downloaded Program Files\MineSweeper.dll [130472] [MD5.93F7304161C8CB7C335F99D9232BD347] [SPRF][28/02/2007] (.Microsoft Corporation - Zone.com Solitaire Showdown for MSN Messenger.) -- C:\Windows\Downloaded Program Files\SolitaireShowdown.dll [142248] ~ Files: 8 Scanned in 00mn 00s ---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped) SS - | Demand 11/06/2015 268464 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe SS - | Demand 05/06/2012 266240 | (BrYNSvc) . (.Brother Industries, Ltd..) - C:\Program Files\Browny02\BrYNSvc.exe SS - | Auto 21/06/2015 107848 | (gupdate) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe SS - | Demand 21/06/2015 107848 | (gupdatem) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe SS - | Demand 13/02/2015 136120 | (gusvc) . (.Google.) - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe SS - | Auto 02/04/2015 2585408 | (LiveUpdateSvc) . (.IObit.) - C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe SS - | Auto 14/04/2015 1080120 | (MBAMService) . (.Malwarebytes Corporation.) - C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe SS - | Demand 03/08/2007 382248 | (NMIndexingService) . (.Nero AG.) - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe SS - | Auto 11/12/2014 315496 | (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files\Skype\Updater\Updater.exe SS - | Demand 04/02/2013 155824 | (Sony PC Companion) . (.Avanquest Software.) - C:\Program Files\Sony\Sony PC Companion\PCCService.exe SS - | Demand 21/10/2014 833728 | (Steam Client Service) . (.Valve Corporation.) - C:\Program Files\Common Files\Steam\SteamService.exe SS - | Auto 21/01/2008 21504 | C:\Program Files\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe SR - | Auto 03/04/2015 814880 | (AdvancedSystemCareService8) . (.IObit.) - C:\Program Files\IObit\Advanced SystemCare 8\ASCService.exe SR - | Auto 19/10/2007 86016 | (AEADIFilters) . (.Andrea Electronics Corporation.) - C:\Windows\System32\AEADISRV.exe SR - | Auto 07/09/2013 55624 | (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe SR - | Auto 01/12/2008 720896 | (Ati External Event Utility) . (.ATI Technologies Inc..) - C:\Windows\System32\Ati2evxx.exe SR - | Auto 12/05/2015 878880 | (IMFservice) . (.IObit.) - C:\Program Files\IObit\IObit Malware Fighter\IMFsrv.exe SR - | Demand 17/09/2013 553288 | (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe SR - | Auto 24/01/2008 73728 | (LightScribeService) . (.Hewlett-Packard Company.) - C:\Program Files\Common Files\LightScribe\LSSrvc.exe SR - | Auto 30/04/2015 22216 | (MsMpSvc) . (.Microsoft Corporation.) - c:\Program Files\Microsoft Security Client\MsMpEng.exe SR - | Auto 08/08/2007 836904 | (Nero BackItUp Scheduler 3) . (.Nero AG.) - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe SR - | Auto 10/12/2012 75136 | (PnkBstrA) . (...) - C:\Windows\system32\PnkBstrA.exe SR - | Auto 21/01/2008 21504 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe ~ Services: Scanned in 00mn 12s ---\\ Recherche d'infection sur le Master Boot Record (MBR)(O80) Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net Run by Chris at 22/06/2015 10:38:48 device: opened successfully user: MBR read successfully Disk trace: called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys acpi.sys hal.dll sfsync02.sys >>UNKNOWN [0x862F71F8]<< C:\Windows\System32\drivers\sfsync02.sys Protection Technology StarForce Protection System 1 ntkrnlpa!IofCallDriver[0x82E4E936] >> \Device\Harddisk0\DR0[0x86D7E898] 3 CLASSPNP[0x8BD1D8B3] >> ntkrnlpa!IofCallDriver[0x82E4E936] >> [0x8634D898] 5 acpi[0x8B8116BC] >> ntkrnlpa!IofCallDriver[0x82E4E936] >> \Device\Ide\IdeDeviceP1T0L0-1[0x86357B98] \Driver\atapi[0x8635DF38] >> IRP_MJ_CREATE >> 0x862F71F8 kernel: MBR read successfully user & kernel MBR OK ~ MBR: 15 Scanned in 00mn 02s ---\\ Recherche d'infection sur le Master Boot Record (MBRCheck)(O80) Written by ad13, http://ad13.geekstog Run by Chris at 22/06/2015 10:38:51 ********* Dump file Name ********* C:\PhysicalDisk0_MBR.bin ~ MBR: Scanned in 00mn 04s ---\\ Liste des émulateurs de CD/DVD (MBR Hook) O58 - SDL:02/01/1601 - 23:00:00 ---A- . (...) -- C:\Windows\System32\Drivers\sptd.sys [691696] ~ Emulateurs: Scanned in 00mn 04s ---\\ Scan Additionnel (O88) Database Version : 13008 - (16/06/2015) Clés trouvées (Keys found) : 0 Valeurs trouvées (Values found) : 7 Dossiers trouvés (Folders found) : 3 Fichiers trouvés (Files found) : 3 C:\Program Files\Vuze =>P2P.Azureus^ C:\ProgramData\Azureus =>P2P.Azureus^ C:\Users\Chris\AppData\Roaming\Azureus =>P2P.Azureus^ [HKCU\Software\Azureus] =>P2P.Azureus^ [HKLM\Software\Azureus] =>P2P.Azureus^ [HKLM\Software\Vuze Remote] =>P2P.Azureus^ ~ Additionnel Scan: 361190 Items scanned in 00mn 26s ---\\ Informations complémentaires sur les modules ~ http://www.nicolascoolman.fr/g2-google-chrome-extensions/ =>.Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2) ~ http://www.nicolascoolman.fr/r5-internet-explorer-proxy-management-iepm/ =>.Internet Explorer, Proxy Management (R5) ~ http://www.nicolascoolman.fr/o2-browser-helper-objects-de-navigateur/ =>.Browser Helper Objects de navigateur (O2) ~ http://www.nicolascoolman.fr/o4-applications-demarrees-par-le-registre/ =>.Applications lancées au démarrage du système (O4) ~ AMI: 4 Scanned in 00mn 00s ---\\ Récapitulatif des détections trouvées sur votre station http://www.nicolascoolman.fr/blog/ =>PUP.Istart ~ MSI: 1 link(s) detected in 00mn 00s End of the scan (1583 lines in 08mn 35s)(0.7)