~ ZHPDiag v2015.7.26.102 Par Nicolas Coolman (2015/07/26) ~ Démarré par Gerard (Administrator) (2015/07/26 19:13:26) ~ Site: http://www.nicolascoolman.fr ~ Facebook: https://www.facebook.com/nicolascoolman1 ~ Etat de la version: Version OK ~ Mode: Scanner ~ Rapport: C:\Users\Gerard\Desktop\ZHPDiag.txt ~ Rapport: C:\Users\Gerard\AppData\Roaming\ZHP\ZHPDiag.txt ~ UAC: Activate ~ Démarrage du système: Normal (Normal boot) ~ Windows 7, 64-bit Service Pack 1 (Build 7601) ---\\ Navigateurs Internet (2) - 0s GCIE: Google Chrome v44.0.2403.107 MSIE: Internet Explorer v11.0.9600.17801 ---\\ Informations sur les produits Windows (4) - 1s ~ Windows Server License Manager Script : OK ~ Licence Script File Génération : OK Windows Automatic Updates : OK (Auto) Windows Activation Technologies : OK ---\\ Logiciels de protection (3) - 1s Malwarebytes Anti-Malware version 2.1.8.1057 Microsoft Security Client v4.8.0204.0 Microsoft Security Essentials v4.8.204.0 ---\\ Logiciels d'optimisation (1) - 1s CCleaner v5.04 ---\\ Surveillance de Logiciels (2) - 2s Adobe Flash Player 18 ActiveX Adobe Acrobat Reader DC - Français ---\\ Informations sur le système (6) - 0s ~ Operating System: Intel64 Family 6 Model 42 Stepping 7, GenuineIntel ~ Operating System: 64-bit ~ Boot mode: Normal (Normal boot) Total RAM: 4174.752 MB (48% free) ~ System Restore: Activé (Enable) ~ System drive C: has 684 GB free of 941 GB ---\\ Mode de connexion au système (3) - 0s ~ Computer Name: GERARD-HP ~ User Name: Gerard ~ Logged in as Administrator ---\\ Enumération des unités disques (4) - 0s ~ Drive C: has 684 GB free of 941 GB (System) ~ Drive D: has 1 GB free of 12 GB ~ Drive E: has GB free of 0 GB ~ Drive G: has GB free of 11 GB ---\\ Etat du Centre de Sécurité Windows (14) - 0s [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoClose: OK [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] DisableTaskMgr: OK [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] DisableRegistryTools: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK [HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK ---\\ Recherche particulière de fichiers génériques (23) - 1s [MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorateur Windows.) () -- C:\Windows\Explorer.exe [2871808] [MD5.DD81D91FF3B0763C392422865C9AC12E] - (.Microsoft Corporation - Processus hôte Windows (Rundll32).) () -- C:\Windows\System32\rundll32.exe [45568] [MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de démarrage de Windows.) () -- C:\Windows\System32\Wininit.exe [129024] [MD5.F0289B3A341429117696F0279DA977B6] - (.Microsoft Corporation - Extensions Internet pour Win32.) () -- C:\Windows\System32\wininet.dll [2352128] [MD5.8CEBD9D0A0A879CDE9F36F4383B7CAEA] - (.Microsoft Corporation - Application d’ouverture de session Windows.) () -- C:\Windows\System32\Winlogon.exe [455168] [MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Bibliothèque de licences.) () -- C:\Windows\System32\sppcomapi.dll [232448] [MD5.0D57D091E06BB1E58E72E5D08479FDDF] - (.Microsoft Corporation - DLL client de l’API uilisateur de Windows m.) () -- C:\Windows\System32\fr-FR\user32.dll.mui [20480] [MD5.FA886682CFC5D36718D3E436AACF10B9] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) () -- C:\Windows\System32\drivers\AFD.sys [497152] [MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) () -- C:\Windows\System32\drivers\atapi.sys [24128] [MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) () -- C:\Windows\System32\drivers\Cdfs.sys [92160] [MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) () -- C:\Windows\System32\drivers\Cdrom.sys [147456] [MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) () -- C:\Windows\System32\drivers\DfsC.sys [102400] [MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) () -- C:\Windows\System32\drivers\HDAudBus.sys [122368] [MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) () -- C:\Windows\System32\drivers\i8042prt.sys [105472] [MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) () -- C:\Windows\System32\drivers\IpNat.sys [116224] [MD5.A5D9106A73DC88564C825D317CAC68AC] - (.Microsoft Corporation - Windows NT SMB Minirdr.) () -- C:\Windows\System32\drivers\MRxSmb.sys [158208] [MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) () -- C:\Windows\System32\drivers\netBT.sys [261632] [MD5.1A29A59A4C5BA6F8C85062A613B7E2B2] - (.Microsoft Corporation - Pilote du système de fichiers NT.) () -- C:\Windows\System32\drivers\ntfs.sys [1684928] [MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parallèle.) () -- C:\Windows\System32\drivers\Parport.sys [97280] [MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) () -- C:\Windows\System32\drivers\Rasl2tp.sys [129536] [MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) () -- C:\Windows\System32\drivers\smb.sys [93184] [MD5.70988118145F5F10EF24720B97F35F65] - (.Microsoft Corporation - TDI Translation Driver.) () -- C:\Windows\System32\drivers\tdx.sys [119296] [MD5.0D08D2F3B3FF84E433346669B5E0F639] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) () -- C:\Windows\System32\drivers\volsnap.sys [295808] ---\\ Processus lancés (4) - 1s [MD5.694B7056F66A9DFFE18836655477589A] - (.AMD - AMD External Events Service Module.) -- C:\Windows\system32\atiesrxx.exe [203264] [PID.1016] [MD5.6D115A99A7A08F2752248D6B19EB19D4] - (.AMD - AMD External Events Client Module.) -- C:\Windows\system32\atieclxx.exe [462848] [PID.1264] [MD5.CA793DCC1D5F619021EF1D37CC7A831E] - (.EasyBits Software AS - Shared EasyBits services for Windows.) -- C:\Windows\SysWOW64\ezSharedSvcHost.exe [514232] [PID.408] [MD5.9C1D7006D7EC85BE953C56570BB7B30E] - (.PDF Complete Inc - Dispatcher.) -- C:\Program Files (x86)\PDF Complete\pdfsvc.exe [1127448] [PID.2436] ---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2) (1) - 0s G2 - GCE: Preference [User Data\Default] [lccekmodgklaepjeofjdjpbminllajkg] Chrome Hotword Shared Module ---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3) (6) - 1s P2 - FPN: [HKCU] [ubisoft.com/uplaypc] - (...) -- C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll P2 - FPN: [HKCU] [vasco.com/VascoCardReaderPlugin] - (.VASCO Data Security.) -- C:\Users\Gerard\AppData\Roaming\VASCO\VascoCardReaderPlugin\3.2.3.4\npVascoCardReaderPlugin.dll P2 - FPN: [HKCU] [vasco.com/VascoCardReaderPlugin64] - (.VASCO Data Security.) -- C:\Users\Gerard\AppData\Roaming\VASCO\VascoCardReaderPlugin\3.2.3.4\npVascoCardReaderPlugin64.dll P2 - FPN: [HKLM] [@Apple.com/iTunes,version=1.0] - (.Apple Inc..) -- C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll P2 - FPN: [HKLM] [@java.com/DTPlugin,version=11.25.2] - (.Oracle Corporation.) -- C:\Program Files (x86)\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll P2 - FPN: [HKLM] [@java.com/JavaPlugin,version=11.25.2] - (.Oracle Corporation.) -- C:\Program Files (x86)\Java\jre1.8.0_25\bin\plugin2\npjp2.dll ---\\ Opera, Démarrage,Recherche,Plugins (B0,B1,B2) (1) - 0s B2 - EXT: [{background:{scripts:[background.js]}content_scrip] C:\Users\Gerard\AppData\Roaming\Opera Software\Opera Stable\Extensions\ilnbjkdmmfenkogmjpoajiheoncccooo ---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4) (22) - 0s R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/ R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/ R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = preserve R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://google.com R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://google.com R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://google.com R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://go.microsoft.com/ R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchUrl,Default = http://www.google.com/ R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = http://www.google.com/ R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs,Tabs = http://www.google.com/ R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://google.com R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://google.com R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://google.com R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphean =>.Microsoft Internet Explorer ---\\ Internet Explorer, Proxy Management (R5) (4) - 0s R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll ---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs (3) - 0s F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe (.Microsoft Corporation.) F2 - REG:system.ini: Shell=C:\Windows\explorer.exe (.Microsoft Corporation.) F2 - REG:system.ini: VMApplet=C:\Windows\SysWOW64\SystemPropertiesPerformance.exe (.Microsoft Corporation.) ---\\ Hosts file redirection (O1) (1) - 0s ~ Le fichier hôte est sain (The hosts file is clean) (21) ---\\ Applications lancées au démarrage du sytème (O4) (16) - 1s O4 - HKLM\..\Run: [MSC] . (.Microsoft Corporation - Microsoft Security Client User Interface.) -- c:\Program Files\Microsoft Security Client\msseces.exe O4 - HKLM\..\Run: [hpsysdrv] . (.Hewlett-Packard - hpsysdrv.) -- c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe O4 - HKLM\..\Run: [SpaceSoundPro] C:\Program Files\SpaceSoundPro\SpaceSoundPro.exe (.not file.) =>PUP.Optional.SpaceSoundPro O4 - HKCU\..\Run: [CCleaner Monitoring] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner64.exe O4 - HKCU\..\Run: [DAEMON Tools Lite] . (.Disc Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe O4 - HKLM\..\Wow6432Node\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files (x86)\QuickTime\QTTask.exe O4 - HKLM\..\Wow6432Node\Run: [PDF Complete] . (.PDF Complete Inc - Sentry for PDF.) -- C:\Program Files (x86)\PDF Complete\pdfsty.exe O4 - HKLM\..\Wow6432Node\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe O4 - HKLM\..\Wow6432Node\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe O4 - HKLM\..\Wow6432Node\Run: [HP Software Update] . (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe O4 - HKUS\S-1-5-21-2432990250-2542050744-2141672685-1000\..\Run: [CCleaner Monitoring] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner64.exe O4 - HKUS\S-1-5-21-2432990250-2542050744-2141672685-1000\..\Run: [DAEMON Tools Lite] . (.Disc Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe ---\\ Modification Domaine/Adresses DNS (O17) (6) - 0s O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 52.17.204.69,8.8.8.8 O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 52.17.204.69,8.8.8.8 O17 - HKLM\System\CS1\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS2\Services\Tcpip\Parameters: NameServer = 52.17.204.69,8.8.8.8 O17 - HKLM\System\CS2\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 ---\\ Liste des services NT non Microsoft et non désactivés (O23) (14) - 1s O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe O23 - Service: (AMD External Events Utility) . (.AMD - AMD External Events Service Module.) - C:\Windows\system32\atiesrxx.exe O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: Wire Professional Version (comyninu) . (...) - C:\Program Files (x86)\9A747600-1437826485-1017-89DC-D273654586FE\hnsiF7C7.tmp (.not file.) =>PUP.Optional.CrossRider O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: HP Support Assistant Service (HP Support Assistant Service) . (.Hewlett-Packard Company - HP Support Assistant Service.) - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe O23 - Service: HP Client Services (HPClientSvc) . (.Hewlett-Packard Company - HP Client Services.) - C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe O23 - Service: Key In Bold Italic (hyverumu) . (...) - C:\Program Files (x86)\9A747600-1437826485-1017-89DC-D273654586FE\jnsnE020.tmp (.not file.) =>PUP.Optional.CrossRider O23 - Service: Intel(R) Management and Security Application Local Manageme (LMS) . (.Intel Corporation - Local Manageability Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe O23 - Service: (MBAMScheduler) . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe O23 - Service: (MBAMService) . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe O23 - Service: PDF Document Manager (pdfcDispatcher) . (.PDF Complete Inc - Dispatcher.) - C:\Program Files (x86)\PDF Complete\pdfsvc.exe O23 - Service: Intel(R) Management and Security Application User Notificat (UNS) . (.Intel Corporation - User Notification Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe O23 - Service: Home Page Webmail (wonipyqy) . (...) - C:\Program Files (x86)\9A747600-1437826485-1017-89DC-D273654586FE\knsdB276.tmpfs (.not file.) =>PUP.Optional.CrossRider ---\\ Tâches planifiées en automatique (O39) (72) - 6s [MD5.E3FB05F33E1404AD606B1E1FE7C323C3] [APT] [Adobe Acrobat Update Task] (.Adobe Systems Incorporated.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [998104] [MD5.9B3355B29942AF67F014EA90CE1EA960] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [268976] [MD5.00000000000000000000000000000000] [APT] [AMQPHTA1] (...) -- C:\ProgramData\TomorrowGames\TomorrowGames.exe (.not file.) [0] =>PUP.Optional.TomorrowGames [MD5.00000000000000000000000000000000] [APT] [Bidaily Synchronize Task[pr]] (...) -- c:\programdata\{82ff3c7d-ff22-97a2-82ff-f3c7dff2f1f7}\wwe.2k15.v1.0.steamworks.fix-rvtfix.rar.exe (.not file.) [0] =>PUP.Optional.BidailySync [MD5.A75228DE9117A017BC7A3B44953B2648] [APT] [CCleanerSkipUAC] (.Piriform Ltd.) -- C:\Program Files\CCleaner\CCleaner.exe [5529880] [MD5.C6FF00DA1605982E616C03BE809FFE2D] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200] [MD5.C6FF00DA1605982E616C03BE809FFE2D] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200] [MD5.AF51D4FE088A3EFA5303B36FFFD0581B] [APT] [HPCeeScheduleForGerard] (.Hewlett-Packard.) -- C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [91704] [MD5.57A2664E14863B90056E0DE510D05AA8] [APT] [HPCustParticipation HP Deskjet 2540 series] (.Hewlett-Packard Co..) -- C:\Program Files\hp\HP Deskjet 2540 series\Bin\HPCustPartic.exe [5745672] [MD5.00000000000000000000000000000000] [APT] [Ilubreeninarh] (...) -- C:\ProgramData\Ilubreeninarh\1.0.4.1\flacnato.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [MQAVKEKIQKMWALRS] (...) -- C:\ProgramData\Service1104\Service1104.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [Opera scheduled Autoupdate 1437828495] (...) -- C:\Program Files (x86)\Opera\launcher.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [Optscan] (...) -- c:\programdata\{596cab9b-384c-b84f-596c-cab9b384ae6c}\hqghumeaylnlf.exe (.not file.) [0] [MD5.24A63F38DF514E6774A850A0710760A4] [APT] [Registration] (.Copyright © 2006.) -- C:\Program Files (x86)\Hewlett-Packard\HP Setup\RemEngine.exe [38456] [MD5.A9D408678D172602A25C46FD1E76AAF1] [APT] [RMCreator] (.CyberLink.) -- C:\Program Files (x86)\Hewlett-Packard\Recovery\Reminder.exe [517416] [MD5.00000000000000000000000000000000] [APT] [{08DF335C-1D94-40A5-9448-635026633182}] (...) -- C:\Users\Gerard\Downloads\HPCOM_HPDJ_3520_series_x86_2_000_001 (1).exe (.not file.) [0] [MD5.F58B9D451C467B2BAD88C7A8BBD5C285] [APT] [{2CE4C305-2EDA-439C-BE29-BC2ABA92B64C}] (.Google Inc..) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [813896] [MD5.00000000000000000000000000000000] [APT] [{4C3F9867-2719-4B36-9A83-565BD5AB7758}] (...) -- C:\Program Files (x86)\Rockstar Games\Grand Theft Auto V\Launcher.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{6709F0DE-DDAB-4C5F-9A4D-6FE12B44E07F}] (...) -- C:\Users\Gerard\Downloads\HPCOM_HPDJ_3520_series_x86_2_000_001 (1).exe (.not file.) [0] [MD5.F58B9D451C467B2BAD88C7A8BBD5C285] [APT] [{7C46CEC6-22FD-4E6C-94C2-957720FB8160}] (.Google Inc..) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [813896] [MD5.00000000000000000000000000000000] [APT] [{97A992A2-4B99-41BF-A5D2-8333115DE11C}] (...) -- C:\Program Files (x86)\Rockstar Games\Grand Theft Auto V\Launcher.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{B99E7A05-93BA-4954-9DBA-803D8B769E67}] (...) -- C:\Users\Gerard\Downloads\HPCOM_HPDJ_3520_series_x86_2_000_001 (1).exe (.not file.) [0] [MD5.F58B9D451C467B2BAD88C7A8BBD5C285] [APT] [{D3583E18-BBA7-4394-9A18-302235FD3FE6}] (.Google Inc..) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [813896] [MD5.F58B9D451C467B2BAD88C7A8BBD5C285] [APT] [{DF111078-C954-46F0-AEBB-2B9D58988D11}] (.Google Inc..) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [813896] [MD5.00000000000000000000000000000000] [APT] [{E174D992-491B-42FA-879B-93AF27CA0C42}] (...) -- C:\Program Files (x86)\Rockstar Games\Grand Theft Auto V\Launcher.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{EA3AC909-716F-4ECE-8E96-74F63DC8EEC5}] (...) -- C:\Users\Gerard\Downloads\HPCOM_HPDJ_3520_series_x86_2_000_001 (1).exe (.not file.) [0] [MD5.34EBD4FF6A24D86BB4716D6AFCC1A89B] [APT] [Apple\AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [561984] [MD5.3BF22B83D6A6E8EA94807DB0362FC080] [APT] [Hewlett-Packard\HP Assistant\HPSA Upgrade] (.Hewlett-Packard.) -- C:\ProgramData\Hewlett-Packard\HPSAUpgrade3\HpSAUpgrade.exe [1251640] O39 - APT: Adobe Flash Player Updater - (...) -- C:\Windows\Tasks\Adobe Flash Player Updater.job [1002] O39 - APT: AMQPHTA1 - (...) -- C:\Windows\Tasks\AMQPHTA1.job [356] O39 - APT: Bidaily Synchronize Task[pr] - (...) -- C:\Windows\Tasks\Bidaily Synchronize Task[pr].job [394] =>PUP.Optional.BidailySync O39 - APT: GoogleUpdateTaskMachineCore - (...) -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job [1064] O39 - APT: GoogleUpdateTaskMachineUA - (...) -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job [1068] O39 - APT: HPCeeScheduleForGerard - (...) -- C:\Windows\Tasks\HPCeeScheduleForGerard.job [336] O39 - APT: MQAVKEKIQKMWALRS - (...) -- C:\Windows\Tasks\MQAVKEKIQKMWALRS.job [344] O39 - APT: Optscan - (...) -- C:\Windows\Tasks\Optscan.job [342] O39 - APT: Adobe Acrobat Update Task - (...) -- C:\Windows\System32\Tasks\Adobe Acrobat Update Task [3886] O39 - APT: Adobe Flash Player Updater - (...) -- C:\Windows\System32\Tasks\Adobe Flash Player Updater [3940] O39 - APT: AMQPHTA1 - (...) -- C:\Windows\System32\Tasks\AMQPHTA1 [2878] O39 - APT: Bidaily Synchronize Task[pr] - (...) -- C:\Windows\System32\Tasks\Bidaily Synchronize Task[pr] [3308] =>PUP.Optional.BidailySync O39 - APT: CCleanerSkipUAC - (...) -- C:\Windows\System32\Tasks\CCleanerSkipUAC [2774] O39 - APT: GoogleUpdateTaskMachineCore - (...) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore [3812] O39 - APT: GoogleUpdateTaskMachineUA - (...) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA [4064] O39 - APT: HPCeeScheduleForGerard - (...) -- C:\Windows\System32\Tasks\HPCeeScheduleForGerard [3192] O39 - APT: HPCustParticipation HP Deskjet 2540 series - (...) -- C:\Windows\System32\Tasks\HPCustParticipation HP Deskjet 2540 series [3620] O39 - APT: Ilubreeninarh - (...) -- C:\Windows\System32\Tasks\Ilubreeninarh [3462] O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe [3092] O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_itype_exe [3090] O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe [3118] O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe [3062] O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe [3060] O39 - APT: MQAVKEKIQKMWALRS - (...) -- C:\Windows\System32\Tasks\MQAVKEKIQKMWALRS [3380] O39 - APT: Opera scheduled Autoupdate 1437828495 - (...) -- C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1437828495 [3850] O39 - APT: Optscan - (...) -- C:\Windows\System32\Tasks\Optscan [3256] O39 - APT: Registration - (...) -- C:\Windows\System32\Tasks\Registration [3712] O39 - APT: RMCreator - (...) -- C:\Windows\System32\Tasks\RMCreator [3290] O39 - APT: {08DF335C-1D94-40A5-9448-635026633182} - (...) -- C:\Windows\System32\Tasks\{08DF335C-1D94-40A5-9448-635026633182} [3010] O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\{232B4495-14CD-4CE6-895E-3811E43FC9DD} [3284] O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\{248ADE69-B96E-4544-9AF4-E55E6D29CBFF} [3284] O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\{2712B042-2E17-4E61-9536-9DE90D9DB4DF} [3264] O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\{292DF74D-98E3-4451-A8D3-D598B4326E92} [3084] O39 - APT: {2CE4C305-2EDA-439C-BE29-BC2ABA92B64C} - (...) -- C:\Windows\System32\Tasks\{2CE4C305-2EDA-439C-BE29-BC2ABA92B64C} [2988] O39 - APT: {4C3F9867-2719-4B36-9A83-565BD5AB7758} - (...) -- C:\Windows\System32\Tasks\{4C3F9867-2719-4B36-9A83-565BD5AB7758} [3008] O39 - APT: {6709F0DE-DDAB-4C5F-9A4D-6FE12B44E07F} - (...) -- C:\Windows\System32\Tasks\{6709F0DE-DDAB-4C5F-9A4D-6FE12B44E07F} [3010] O39 - APT: {7C46CEC6-22FD-4E6C-94C2-957720FB8160} - (...) -- C:\Windows\System32\Tasks\{7C46CEC6-22FD-4E6C-94C2-957720FB8160} [2988] O39 - APT: {97A992A2-4B99-41BF-A5D2-8333115DE11C} - (...) -- C:\Windows\System32\Tasks\{97A992A2-4B99-41BF-A5D2-8333115DE11C} [3008] O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\{A779D354-218E-44D6-93D8-9579BFF2AD46} [3276] O39 - APT: {B99E7A05-93BA-4954-9DBA-803D8B769E67} - (...) -- C:\Windows\System32\Tasks\{B99E7A05-93BA-4954-9DBA-803D8B769E67} [3010] O39 - APT: {D3583E18-BBA7-4394-9A18-302235FD3FE6} - (...) -- C:\Windows\System32\Tasks\{D3583E18-BBA7-4394-9A18-302235FD3FE6} [2988] O39 - APT: {DF111078-C954-46F0-AEBB-2B9D58988D11} - (...) -- C:\Windows\System32\Tasks\{DF111078-C954-46F0-AEBB-2B9D58988D11} [2988] O39 - APT: {E174D992-491B-42FA-879B-93AF27CA0C42} - (...) -- C:\Windows\System32\Tasks\{E174D992-491B-42FA-879B-93AF27CA0C42} [3008] O39 - APT: {EA3AC909-716F-4ECE-8E96-74F63DC8EEC5} - (...) -- C:\Windows\System32\Tasks\{EA3AC909-716F-4ECE-8E96-74F63DC8EEC5} [3010] ---\\ Logiciels installés (O42) (99) - 11s O42 - Logiciel: CCleaner - (.Piriform.) [HKLM][64Bits] -- CCleaner O42 - Logiciel: Centre Souris et Claviers Microsoft - (.Microsoft Corporation.) [HKLM][64Bits] -- Microsoft Mouse and Keyboard Center O42 - Logiciel: Microsoft Security Essentials - (.Microsoft Corporation.) [HKLM][64Bits] -- Microsoft Security Client O42 - Logiciel: AMD Catalyst Install Manager - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {14D58A97-B60E-A858-34D8-95469C02F7EC} O42 - Logiciel: HP Client Services - (.Hewlett-Packard.) [HKLM][64Bits] -- {2856A1C2-70C5-4EC3-AFF7-E5B51E5530A2} O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM][64Bits] -- {2EF5D87E-B7BD-458F-8428-E4D0B8B4E65C} O42 - Logiciel: Logiciel de base du périphérique HP Deskjet 2540 series - (.Hewlett-Packard Co..) [HKLM][64Bits] -- {3330B490-86DE-4E57-AE3A-14AECC0ACC52} O42 - Logiciel: AMD Wireless Display v3.0 - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {426582A8-202F-D13C-8BD5-F00551BAFC93} O42 - Logiciel: VASCO Card Reader Plug-In (64-Bit) - (.VASCO Data Security.) [HKLM][64Bits] -- {47659F12-27AE-6400-9B8A-2BD803020304} O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM][64Bits] -- {6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D} O42 - Logiciel: ATI Stream SDK v2 Developer - (.ATI Technologies Inc..) [HKLM][64Bits] -- {80C27FE9-C6C4-F5C8-EAD3-09E7E0102E78} O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM][64Bits] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00} O42 - Logiciel: AMD Accelerated Video Transcoding - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {8F2415FA-72F2-F029-0450-4EB2FAE484C5} O42 - Logiciel: Security Update for Skype for Business 2015 (KB3039779) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{1A0B44D1-9E34-4DB5-92ED-6AA3250032F3} O42 - Logiciel: Security Update for Skype for Business 2015 (KB3039779) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{DD0EFF73-3EF1-4501-9609-9D799BB20F2F} O42 - Logiciel: Microsoft Access MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0015-040C-1000-0000000FF1CE} O42 - Logiciel: Microsoft Excel MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0016-040C-1000-0000000FF1CE} O42 - Logiciel: Microsoft PowerPoint MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0018-040C-1000-0000000FF1CE} O42 - Logiciel: Microsoft Publisher MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0019-040C-1000-0000000FF1CE} O42 - Logiciel: Microsoft Outlook MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-001A-040C-1000-0000000FF1CE} O42 - Logiciel: Microsoft Word MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-001B-040C-1000-0000000FF1CE} O42 - Logiciel: Microsoft InfoPath MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0044-040C-1000-0000000FF1CE} O42 - Logiciel: Security Update for Skype for Business 2015 (KB3039779) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90150000-006E-040C-1000-0000000FF1CE}_Office15.PROPLUS_{DD0EFF73-3EF1-4501-9609-9D799BB20F2F} O42 - Logiciel: Microsoft DCF MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0090-040C-1000-0000000FF1CE} O42 - Logiciel: Microsoft OneNote MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-00A1-040C-1000-0000000FF1CE} O42 - Logiciel: Microsoft Groove MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-00BA-040C-1000-0000000FF1CE} O42 - Logiciel: Security Update for Skype for Business 2015 (KB3039779) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUS_{1A0B44D1-9E34-4DB5-92ED-6AA3250032F3} O42 - Logiciel: Security Update for Skype for Business 2015 (KB3039779) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUS_{DD0EFF73-3EF1-4501-9609-9D799BB20F2F} O42 - Logiciel: Microsoft Lync MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-012B-040C-1000-0000000FF1CE} O42 - Logiciel: Security Update for Skype for Business 2015 (KB3039779) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90150000-012B-040C-1000-0000000FF1CE}_Office15.PROPLUS_{1A0B44D1-9E34-4DB5-92ED-6AA3250032F3} O42 - Logiciel: Update for Skype for Business 2015 (KB2889853) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90150000-012B-040C-1000-0000000FF1CE}_Office15.PROPLUS_{DD51BA84-F589-4939-B5FE-5538B3DCC12E} O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM][64Bits] -- {A04DCB25-7040-4935-A30D-8E0A893ABF2D} O42 - Logiciel: AMD Drag and Drop Transcoding - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {A2AC0D43-9788-B1BD-B2A8-EFC758916BB1} O42 - Logiciel: Étude pour l'amélioration du produit HP Deskjet 2540 series - (.Hewlett-Packard Co..) [HKLM][64Bits] -- {B01F43B5-AD90-417C-BDF8-4E5A96530476} O42 - Logiciel: PlayReady PC Runtime amd64 - (.Microsoft Corporation.) [HKLM][64Bits] -- {BCA9334F-B6C9-4F65-9A73-AC5A329A4D04} O42 - Logiciel: AMD Wireless Display v3.0 - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {C16CD4C0-48EE-0F40-C9FD-0778EAF73FBD} O42 - Logiciel: AMD Wireless Display v3.0 - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {C270821D-2479-D0F4-1BD1-7BBAF6762A98} O42 - Logiciel: HP Auto - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {CC4D56B7-6F18-470B-8734-ABCD75BCF4F1} O42 - Logiciel: HP Vision Hardware Diagnostics - (.Hewlett-Packard.) [HKLM][64Bits] -- {D79A02E9-6713-4335-9668-AAC7474C0C0E} O42 - Logiciel: Microsoft Security Client - (.Microsoft Corporation.) [HKLM][64Bits] -- {D9FCBAAE-DB72-488B-96D0-0AA3C892C0D6} O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM][64Bits] -- Adobe AIR O42 - Logiciel: Adobe Flash Player 18 ActiveX - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player ActiveX O42 - Logiciel: Cheat Engine 6.4 - (.Cheat Engine.) [HKLM][64Bits] -- Cheat Engine 6.4_is1 O42 - Logiciel: DAEMON Tools Lite - (.Disc Soft Ltd.) [HKLM][64Bits] -- DAEMON Tools Lite O42 - Logiciel: FastStone Capture 5.3 (French) - (.FastStone Soft.) [HKLM][64Bits] -- FastStone Capture O42 - Logiciel: Freemake Video Downloader - (.Ellora Assets Corporation.) [HKLM][64Bits] -- Freemake Video Downloader_is1 O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM][64Bits] -- Google Chrome O42 - Logiciel: HP Photo Creations - (.HP.) [HKLM][64Bits] -- HP Photo Creations O42 - Logiciel: Camérail Innova 5 - (...) [HKLM][64Bits] -- innova5 O42 - Logiciel: Power2Go - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658} O42 - Logiciel: LabelPrint - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243} O42 - Logiciel: Le Petit Dinosaure Aventures - (...) [HKLM][64Bits] -- Le Petit Dinosaure Aventures O42 - Logiciel: Malwarebytes Anti-Malware version 2.1.8.1057 - (.Malwarebytes Corporation.) [HKLM][64Bits] -- Malwarebytes Anti-Malware_is1 O42 - Logiciel: MusicStation - (.Hewlett-Packard.) [HKLM][64Bits] -- MusicStationNetstaller O42 - Logiciel: Origin - (.Electronic Arts, Inc..) [HKLM][64Bits] -- Origin O42 - Logiciel: PDF Complete Special Edition - (.PDF Complete, Inc.) [HKLM][64Bits] -- PDF Complete O42 - Logiciel: Raptr - (...) [HKLM][64Bits] -- Raptr O42 - Logiciel: Ravensburger tiptoi - (...) [HKLM][64Bits] -- Ravensburger tiptoi O42 - Logiciel: NBA 2K15 Update 3 - (...) [HKLM][64Bits] -- TkJBMksxNQ==_is1 O42 - Logiciel: WWE 2K15 DLC Pack Addon - (...) [HKLM][64Bits] -- V1dFMksxNQ==_is1 O42 - Logiciel: VLC media player - (.VideoLAN.) [HKLM][64Bits] -- VLC media player O42 - Logiciel: WinRAR 4.20 (32-bit) - (.win.rar GmbH.) [HKLM][64Bits] -- WinRAR archiver O42 - Logiciel: Zinio Reader 4 - (.Zinio LLC.) [HKLM][64Bits] -- ZinioReader4.9310D8F796442B71068C511E15D70529A702D19D.1 O42 - Logiciel: HP Customer Experience Enhancements - (.Hewlett-Packard.) [HKLM][64Bits] -- {07FA4960-B038-49EB-891B-9F95930AA544} O42 - Logiciel: Catalyst Control Center - Branding - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {11087D24-567D-7D88-69C6-D7A08B5F4C47} O42 - Logiciel: Farming Simulator 2015 version 1.2 - (.REVOLUTiONiT.) [HKLM][64Bits] -- {163B03CC-2682-4694-ABF0-88B85AB7F5A1}_is1 O42 - Logiciel: Remote Graphics Receiver - (.Hewlett-Packard.) [HKLM][64Bits] -- {16FC3056-90C0-4757-8A68-64D8DA846ADA} O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM][64Bits] -- {1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4} O42 - Logiciel: HP Setup - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {210A03F5-B2ED-4947-B27E-516F50CBB292} O42 - Logiciel: Java 8 Update 25 - (.Oracle Corporation.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F83218025F0} O42 - Logiciel: HP Deskjet 2540 series Aide - (.Hewlett Packard.) [HKLM][64Bits] -- {2FAD0F16-4309-4D22-AE73-F4CCA737D013} O42 - Logiciel: EA SPORTS™ FIFA 15 - (.Electronic Arts.) [HKLM][64Bits] -- {3D4ADA2B-F028-4307-ADF4-6F9AA44725DA} O42 - Logiciel: Power2Go - (.CyberLink Corp..) [HKLM][64Bits] -- {40BF1E83-20EB-11D8-97C5-0009C5020658} O42 - Logiciel: DiRT 3 - (.Codemasters.) [HKLM][64Bits] -- {434D0FA0-AB8C-497F-B30A-7A1000018201} O42 - Logiciel: Recovery Manager - (.CyberLink Corp..) [HKLM][64Bits] -- {44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5} O42 - Logiciel: Zinio Reader 4 - (.Zinio LLC.) [HKLM][64Bits] -- {465210C4-595A-BD80-44E8-E0457D9D8432} O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM][64Bits] -- {46F044A5-CE8B-4196-984E-5BD6525E361D} O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {60EC980A-BDA2-4CB6-A427-B07A5498B4CA} O42 - Logiciel: Intel(R) Management Engine Components - (.Intel Corporation.) [HKLM][64Bits] -- {65153EA5-8B6E-43B6-857B-C6E4FC25798A} O42 - Logiciel: Hewlett-Packard ACLM.NET v1.2.2.3 - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {6F340107-F9AA-47C6-B54C-C3A19F11553F} O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM][64Bits] -- {789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE} O42 - Logiciel: OpenOffice.org 3.4.1 - (.Apache Software Foundation.) [HKLM][64Bits] -- {7DA1C06F-C913-46C7-8A0F-DA2CBA17EA1D} O42 - Logiciel: Realtek Ethernet Controller Driver - (.Realtek.) [HKLM][64Bits] -- {8833FFB6-5B0C-4764-81AA-06DFEED9A476} O42 - Logiciel: Mesh Runtime - (.Microsoft Corporation.) [HKLM][64Bits] -- {8C6D6116-B724-4810-8F2D-D047E6B7D68E} O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM][64Bits] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F} O42 - Logiciel: HP Update - (.Hewlett-Packard.) [HKLM][64Bits] -- {912D30CF-F39E-4B31-AD9A-123C6B794EE2} O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM][64Bits] -- {A2BCA9F1-566C-4805-97D1-7FDC93386723} O42 - Logiciel: Adobe Refresh Manager - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-0804-1033-1959-001824147215} O42 - Logiciel: Adobe Acrobat Reader DC - Français - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-7AD7-1036-7B44-AC0F074E4100} O42 - Logiciel: HP Setup Manager - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {AE856388-AFAD-4753-81DF-D96B19D0A17C} O42 - Logiciel: QuickTime - (.Apple Inc..) [HKLM][64Bits] -- {B67BAFBA-4C9F-48FA-9496-933E3B255044} O42 - Logiciel: HP LinkUp - (.Hewlett-Packard.) [HKLM][64Bits] -- {C1AD9241-3ADD-483F-914D-071F3E50855A} O42 - Logiciel: LabelPrint - (.CyberLink Corp..) [HKLM][64Bits] -- {C59C179C-668D-49A9-B6EA-0121CCFC1243} O42 - Logiciel: MSVCRT_amd64 - (.Microsoft.) [HKLM][64Bits] -- {D0B44725-3666-492D-BEF6-587A14BD9BD9} O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM][64Bits] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF} O42 - Logiciel: HP Support Assistant - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {E35A3B13-78CD-4967-8AC8-AA9FDA693EDE} O42 - Logiciel: PhotoFiltre Studio X - (...) [HKCU][64Bits] -- PhotoFiltre Studio X O42 - Logiciel: µTorrent - (.BitTorrent Inc..) [HKCU][64Bits] -- uTorrent O42 - Logiciel: VASCO Smart Card Reader Plug-In (User) - (.VASCO Data Security.) [HKCU][64Bits] -- {c77cb28d-ddd3-46f7-b51a-14a599127ba7} ---\\ HKCU & HKLM Software Keys (172) - 11s HKLM\SOFTWARE\Wow6432Node\Activision HKLM\SOFTWARE\Wow6432Node\Adobe HKLM\SOFTWARE\Wow6432Node\AdwCleaner HKLM\SOFTWARE\Wow6432Node\AMD HKLM\SOFTWARE\Wow6432Node\anset HKLM\SOFTWARE\Wow6432Node\AppDataLow HKLM\SOFTWARE\Wow6432Node\Apple Computer, Inc. HKLM\SOFTWARE\Wow6432Node\Apple Inc. HKLM\SOFTWARE\Wow6432Node\ATI HKLM\SOFTWARE\Wow6432Node\ATI Technologies HKLM\SOFTWARE\Wow6432Node\Auslogics HKLM\SOFTWARE\Wow6432Node\BlueRippleSound HKLM\SOFTWARE\Wow6432Node\Bunndle HKLM\SOFTWARE\Wow6432Node\CyberLink HKLM\SOFTWARE\Wow6432Node\Disc Soft HKLM\SOFTWARE\Wow6432Node\DT Soft HKLM\SOFTWARE\Wow6432Node\EA Sports HKLM\SOFTWARE\Wow6432Node\EasyBits HKLM\SOFTWARE\Wow6432Node\Electronic Arts HKLM\SOFTWARE\Wow6432Node\Freemake HKLM\SOFTWARE\Wow6432Node\GNU HKLM\SOFTWARE\Wow6432Node\Google HKLM\SOFTWARE\Wow6432Node\Hewlett-Packard HKLM\SOFTWARE\Wow6432Node\IncrediMail HKLM\SOFTWARE\Wow6432Node\Innovative Solutions HKLM\SOFTWARE\Wow6432Node\Intel HKLM\SOFTWARE\Wow6432Node\JavaSoft HKLM\SOFTWARE\Wow6432Node\JreMetrics HKLM\SOFTWARE\Wow6432Node\Khronos HKLM\SOFTWARE\Wow6432Node\Licenses HKLM\SOFTWARE\Wow6432Node\LogMeInRescueCallingCard HKLM\SOFTWARE\Wow6432Node\Macromedia HKLM\SOFTWARE\Wow6432Node\Malwarebytes' Anti-Malware HKLM\SOFTWARE\Wow6432Node\McAfee.com HKLM\SOFTWARE\Wow6432Node\Mozilla HKLM\SOFTWARE\Wow6432Node\MozillaPlugins HKLM\SOFTWARE\Wow6432Node\NewspaperDirect HKLM\SOFTWARE\Wow6432Node\Nokia HKLM\SOFTWARE\Wow6432Node\NSIS_innova5 HKLM\SOFTWARE\Wow6432Node\Nuance HKLM\SOFTWARE\Wow6432Node\ODBC HKLM\SOFTWARE\Wow6432Node\OpenOffice.org HKLM\SOFTWARE\Wow6432Node\Opera Software HKLM\SOFTWARE\Wow6432Node\Origin HKLM\SOFTWARE\Wow6432Node\Origin Games HKLM\SOFTWARE\Wow6432Node\PDFComplete HKLM\SOFTWARE\Wow6432Node\PowerPivot HKLM\SOFTWARE\Wow6432Node\Raptr HKLM\SOFTWARE\Wow6432Node\Razer HKLM\SOFTWARE\Wow6432Node\Realtek HKLM\SOFTWARE\Wow6432Node\RocketLife HKLM\SOFTWARE\Wow6432Node\Rockstar Games HKLM\SOFTWARE\Wow6432Node\Saitek HKLM\SOFTWARE\Wow6432Node\SCS Software HKLM\SOFTWARE\Wow6432Node\Sierra OnLine HKLM\SOFTWARE\Wow6432Node\SlimWare Utilities, Inc. HKLM\SOFTWARE\Wow6432Node\Software HKLM\SOFTWARE\Wow6432Node\Sports Interactive Ltd HKLM\SOFTWARE\Wow6432Node\Square Enix HKLM\SOFTWARE\Wow6432Node\Sysinternals HKLM\SOFTWARE\Wow6432Node\tiptoi® HKLM\SOFTWARE\Wow6432Node\UBISOFT HKLM\SOFTWARE\Wow6432Node\Valve HKLM\SOFTWARE\Wow6432Node\VideoLAN HKLM\SOFTWARE\Wow6432Node\Visan HKLM\SOFTWARE\Wow6432Node\Volatile HKLM\SOFTWARE\Wow6432Node\WildTangent HKLM\SOFTWARE\Wow6432Node\Win32 Services HKLM\SOFTWARE\Wow6432Node\WinRAR HKLM\SOFTWARE\Wow6432Node\WombatUpdater HKLM\SOFTWARE\Wow6432Node\Wondershare HKLM\SOFTWARE\Wow6432Node\WordShark_1.10.0.20 =>PUP.Optional.WordShark HKLM\SOFTWARE\Wow6432Node\RegisteredApplications HKCU\SOFTWARE\2K Sports HKCU\SOFTWARE\8322898 HKCU\SOFTWARE\ACE Compression Software HKCU\SOFTWARE\Adobe HKCU\SOFTWARE\AlcoholSoftGen HKCU\SOFTWARE\AMD HKCU\SOFTWARE\AMD Driver Downloader HKCU\SOFTWARE\AppDataLow HKCU\SOFTWARE\Apple Computer, Inc. HKCU\SOFTWARE\Apple Inc. HKCU\SOFTWARE\ATI HKCU\SOFTWARE\Axis Communications HKCU\SOFTWARE\Behaviour HKCU\SOFTWARE\BitTorrent HKCU\SOFTWARE\BlueRippleSound HKCU\SOFTWARE\brick Engine HKCU\SOFTWARE\Camerail HKCU\SOFTWARE\Cheat Engine HKCU\SOFTWARE\Chromium HKCU\SOFTWARE\CinemaPlus-3.2cV25.07-nv-ie =>PUP.Optional.CrossRider HKCU\SOFTWARE\Cinema_Plus-1.2V25.07-nv-ie =>PUP.Optional.CrossRider HKCU\SOFTWARE\Clubic HKCU\SOFTWARE\Cocoon Software HKCU\SOFTWARE\Cyanide HKCU\SOFTWARE\CyberLink HKCU\SOFTWARE\Disc Soft HKCU\SOFTWARE\DSS HKCU\SOFTWARE\DT Soft HKCU\SOFTWARE\EasyBits HKCU\SOFTWARE\Electronic Arts HKCU\SOFTWARE\ELIGCHK HKCU\SOFTWARE\EMU HKCU\SOFTWARE\FLT HKCU\SOFTWARE\Freemake HKCU\SOFTWARE\FreeTime HKCU\SOFTWARE\Gabest HKCU\SOFTWARE\GNU HKCU\SOFTWARE\Google HKCU\SOFTWARE\Hewlett-Packard HKCU\SOFTWARE\HP HKCU\SOFTWARE\IM Providers HKCU\SOFTWARE\IncrediMail HKCU\SOFTWARE\Innovative Solutions HKCU\SOFTWARE\InstallPath HKCU\SOFTWARE\Intel HKCU\SOFTWARE\JavaSoft HKCU\SOFTWARE\kde.org HKCU\SOFTWARE\Lefteris Aslanoglou HKCU\SOFTWARE\Licenses HKCU\SOFTWARE\Macromedia HKCU\SOFTWARE\Magic Desktop HKCU\SOFTWARE\Mindscape HKCU\SOFTWARE\Mozilla HKCU\SOFTWARE\MozillaPlugins HKCU\SOFTWARE\Netscape HKCU\SOFTWARE\Norton HKCU\SOFTWARE\OB HKCU\SOFTWARE\ODBC HKCU\SOFTWARE\oHaKHoEfW3F5rMWVsDq2CkkvQG HKCU\SOFTWARE\OpenOffice.org HKCU\SOFTWARE\Opera Software HKCU\SOFTWARE\PC SOFT HKCU\SOFTWARE\PDFComplete HKCU\SOFTWARE\PhotoFiltre Studio X HKCU\SOFTWARE\Piriform HKCU\SOFTWARE\Raptr HKCU\SOFTWARE\Ravensburger tiptoi HKCU\SOFTWARE\Red Dot Games HKCU\SOFTWARE\SAMP HKCU\SOFTWARE\Samsung HKCU\SOFTWARE\SecuROM HKCU\SOFTWARE\sethx engine HKCU\SOFTWARE\SKS HKCU\SOFTWARE\Software HKCU\SOFTWARE\SOG HKCU\SOFTWARE\Spin2 HKCU\SOFTWARE\Stdin2 HKCU\SOFTWARE\Sysinternals HKCU\SOFTWARE\TAdvCheckList HKCU\SOFTWARE\The Silicon Realms Toolworks HKCU\SOFTWARE\Trolltech HKCU\SOFTWARE\tstamptoken =>PUP.Optional.MaxComputerCleaner HKCU\SOFTWARE\Ubisoft HKCU\SOFTWARE\Unity HKCU\SOFTWARE\Valve HKCU\SOFTWARE\VASCO HKCU\SOFTWARE\VB and VBA Program Settings HKCU\SOFTWARE\Visan HKCU\SOFTWARE\WebApp HKCU\SOFTWARE\weltenbauer. Software Entwicklung HKCU\SOFTWARE\Win7zip HKCU\SOFTWARE\Winject HKCU\SOFTWARE\WinRAR HKCU\SOFTWARE\WinRAR SFX HKCU\SOFTWARE\ZebHelpProcess Helper HKCU\SOFTWARE\AppDataLow\Software HKCU\SOFTWARE\AppDataLow\Software\Axis Communications HKCU\SOFTWARE\AppDataLow\Software\JavaSoft HKCU\SOFTWARE\AppDataLow\Software\Unity ---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43) (288) - 11s O43 - CFD: 2015/06/02 09:30:14 - [] D -- C:\Program Files (x86)\Adobe O43 - CFD: 2015/07/25 14:12:54 - [] D -- C:\Program Files (x86)\AMD O43 - CFD: 2015/04/22 00:10:12 - [] D -- C:\Program Files (x86)\AMD AVT O43 - CFD: 2013/01/23 17:40:45 - [] D -- C:\Program Files (x86)\Apple Software Update O43 - CFD: 2011/07/16 13:27:59 - [] D -- C:\Program Files (x86)\ATI Stream O43 - CFD: 2014/12/12 08:42:47 - [] D -- C:\Program Files (x86)\ATI Technologies O43 - CFD: 2013/01/23 17:39:42 - [] D -- C:\Program Files (x86)\Bonjour O43 - CFD: 2014/06/27 22:24:28 - [] D -- C:\Program Files (x86)\Cheat Engine 6.4 O43 - CFD: 2015/07/25 14:48:18 - [] D -- C:\Program Files (x86)\Common Files O43 - CFD: 2011/07/16 13:32:25 - [] D -- C:\Program Files (x86)\Cyberlink O43 - CFD: 2015/02/02 22:26:12 - [] D -- C:\Program Files (x86)\DAEMON Tools Lite O43 - CFD: 2015/06/26 21:24:38 - [] D -- C:\Program Files (x86)\Farming Simulator 2015 O43 - CFD: 2014/12/17 17:42:20 - [] D -- C:\Program Files (x86)\FastStone Capture O43 - CFD: 2013/01/23 15:11:22 - [] D -- C:\Program Files (x86)\Freemake O43 - CFD: 2015/04/22 00:01:53 - [0] D -- C:\Program Files (x86)\FreeTime O43 - CFD: 2015/07/25 15:53:28 - [] D -- C:\Program Files (x86)\Google O43 - CFD: 2015/03/25 14:08:29 - [] D -- C:\Program Files (x86)\Hewlett-Packard O43 - CFD: 2015/03/25 14:08:10 - [] D -- C:\Program Files (x86)\Hp O43 - CFD: 2015/03/25 14:08:26 - [] D -- C:\Program Files (x86)\HP Photo Creations O43 - CFD: 2015/07/25 17:33:41 - [] HD -- C:\Program Files (x86)\InstallShield Installation Information O43 - CFD: 2011/07/16 13:27:18 - [] D -- C:\Program Files (x86)\Intel O43 - CFD: 2015/05/13 03:41:27 - [] D -- C:\Program Files (x86)\Internet Explorer O43 - CFD: 2013/10/25 18:31:40 - [] D -- C:\Program Files (x86)\iTunes O43 - CFD: 2014/11/07 22:02:17 - [] D -- C:\Program Files (x86)\Java O43 - CFD: 2015/07/26 17:44:46 - [] D -- C:\Program Files (x86)\Malwarebytes Anti-Malware O43 - CFD: 2013/01/23 13:14:57 - [0] D -- C:\Program Files (x86)\Microsoft O43 - CFD: 2015/02/22 16:25:22 - [] D -- C:\Program Files (x86)\Microsoft Analysis Services O43 - CFD: 2015/02/22 16:25:02 - [] D -- C:\Program Files (x86)\Microsoft Office O43 - CFD: 2015/05/13 03:23:04 - [] D -- C:\Program Files (x86)\Microsoft Security Client O43 - CFD: 2015/05/13 03:42:40 - [] D -- C:\Program Files (x86)\Microsoft Silverlight O43 - CFD: 2015/02/22 16:29:49 - [] D -- C:\Program Files (x86)\Microsoft SQL Server O43 - CFD: 2011/07/16 13:40:46 - [] D -- C:\Program Files (x86)\Microsoft SQL Server Compact Edition O43 - CFD: 2015/02/22 23:11:07 - [] D -- C:\Program Files (x86)\Microsoft.NET O43 - CFD: 2015/04/17 03:02:23 - [] D -- C:\Program Files (x86)\Mozilla Firefox O43 - CFD: 2015/02/22 16:14:56 - [] D -- C:\Program Files (x86)\MSBuild O43 - CFD: 2013/02/09 14:44:55 - [] D -- C:\Program Files (x86)\MSECache O43 - CFD: 2015/02/20 13:21:20 - [] D -- C:\Program Files (x86)\NBA 2K15 O43 - CFD: 2013/01/23 12:56:36 - [] RD -- C:\Program Files (x86)\Online Services O43 - CFD: 2014/10/26 23:54:57 - [] D -- C:\Program Files (x86)\OpenAL O43 - CFD: 2013/04/08 17:38:51 - [] D -- C:\Program Files (x86)\OpenOffice.org 3 O43 - CFD: 2015/07/25 17:50:21 - [] D -- C:\Program Files (x86)\Origin O43 - CFD: 2014/11/14 19:15:37 - [] D -- C:\Program Files (x86)\Origin Games O43 - CFD: 2011/07/16 13:38:43 - [] D -- C:\Program Files (x86)\PDF Complete O43 - CFD: 2013/05/27 18:57:20 - [] D -- C:\Program Files (x86)\PhotoFiltre Studio X O43 - CFD: 2013/10/25 18:26:03 - [] D -- C:\Program Files (x86)\QuickTime O43 - CFD: 2015/07/25 16:49:37 - [] D -- C:\Program Files (x86)\Raptr O43 - CFD: 2014/12/25 12:25:36 - [] D -- C:\Program Files (x86)\Ravensburger tiptoi O43 - CFD: 2015/07/25 17:33:45 - [] D -- C:\Program Files (x86)\Realtek O43 - CFD: 2009/07/14 07:32:38 - [] D -- C:\Program Files (x86)\Reference Assemblies O43 - CFD: 2015/06/25 13:51:00 - [0] D -- C:\Program Files (x86)\SimpleOCR O43 - CFD: 2014/11/07 21:38:09 - [0] D -- C:\Program Files (x86)\Trend Micro O43 - CFD: 2009/07/14 06:57:06 - [0] HD -- C:\Program Files (x86)\Uninstall Information O43 - CFD: 2015/03/07 01:39:36 - [] D -- C:\Program Files (x86)\VideoLAN O43 - CFD: 2013/07/12 08:10:59 - [] D -- C:\Program Files (x86)\Windows Defender O43 - CFD: 2011/07/16 13:41:08 - [] D -- C:\Program Files (x86)\Windows Live O43 - CFD: 2013/01/25 01:01:46 - [] D -- C:\Program Files (x86)\Windows Mail O43 - CFD: 2015/03/12 08:18:13 - [] D -- C:\Program Files (x86)\Windows Media Player O43 - CFD: 2009/07/14 07:32:38 - [] D -- C:\Program Files (x86)\Windows NT O43 - CFD: 2013/01/25 01:01:46 - [] D -- C:\Program Files (x86)\Windows Photo Viewer O43 - CFD: 2010/11/21 05:31:38 - [] D -- C:\Program Files (x86)\Windows Portable Devices O43 - CFD: 2013/01/25 01:01:47 - [] D -- C:\Program Files (x86)\Windows Sidebar O43 - CFD: 2013/02/09 16:09:36 - [] D -- C:\Program Files (x86)\WinRAR O43 - CFD: 2013/01/26 11:43:20 - [0] D -- C:\Program Files (x86)\Wondershare O43 - CFD: 2015/07/23 21:48:34 - [] D -- C:\Program Files (x86)\WWE 2K15 O43 - CFD: 2011/07/16 13:38:22 - [] D -- C:\Program Files (x86)\Zinio Reader 4 O43 - CFD: 2014/11/30 16:18:59 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories O43 - CFD: 2015/03/19 19:27:53 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools O43 - CFD: 2015/07/25 13:58:23 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center O43 - CFD: 2015/07/25 16:49:40 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Gaming Evolved O43 - CFD: 2011/07/16 13:27:59 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ATI Stream SDK v2 O43 - CFD: 2014/11/03 21:40:55 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audiograbber O43 - CFD: 2013/10/24 14:30:00 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Camérail O43 - CFD: 2014/10/23 17:35:06 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner O43 - CFD: 2014/11/30 16:14:30 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Centre Souris et Claviers Microsoft O43 - CFD: 2014/06/27 22:24:28 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cheat Engine 6.4 O43 - CFD: 2014/12/29 16:57:00 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite O43 - CFD: 2011/07/16 13:38:34 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eReaders O43 - CFD: 2015/06/14 11:57:41 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Farming Simulator 2015 O43 - CFD: 2014/12/17 17:42:20 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FastStone Capture O43 - CFD: 2014/11/14 19:31:40 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FIFA 15 O43 - CFD: 2013/09/23 19:00:33 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Freemake O43 - CFD: 2015/02/02 21:25:22 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games O43 - CFD: 2015/07/25 15:53:35 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome O43 - CFD: 2015/03/25 14:08:26 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP O43 - CFD: 2014/01/17 21:30:09 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP Help and Support O43 - CFD: 2013/01/23 12:56:11 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP Manuels de l'utilisateur O43 - CFD: 2013/10/25 18:27:31 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud O43 - CFD: 2013/10/25 18:31:46 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes O43 - CFD: 2014/11/07 22:02:43 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java O43 - CFD: 2013/02/25 17:01:34 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Le Petit Dinosaure Aventures O43 - CFD: 2009/07/14 06:57:09 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance O43 - CFD: 2015/07/26 17:44:46 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware O43 - CFD: 2015/07/22 23:02:59 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mephisto O43 - CFD: 2015/05/13 03:24:13 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013 O43 - CFD: 2015/05/13 03:04:41 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight O43 - CFD: 2013/01/23 12:56:36 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Online Services O43 - CFD: 2013/04/08 17:38:51 - [] SD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice.org 3.4.1 O43 - CFD: 2014/11/14 19:12:51 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin O43 - CFD: 2011/07/16 13:29:58 - [] SD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Help & Tools O43 - CFD: 2011/07/16 13:38:46 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF Complete O43 - CFD: 2013/03/24 15:51:26 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhotoFiltre Studio X O43 - CFD: 2013/10/25 18:26:00 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime O43 - CFD: 2011/07/16 13:30:12 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Recovery Manager O43 - CFD: 2015/06/25 13:50:05 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SimpleOCR O43 - CFD: 2014/11/07 22:04:37 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup O43 - CFD: 2010/11/21 09:16:41 - [0] RHD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC O43 - CFD: 2015/03/07 01:39:54 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN O43 - CFD: 2011/07/16 13:41:07 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live O43 - CFD: 2013/02/09 16:09:36 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR O43 - CFD: 2013/10/25 18:31:42 - [] D -- C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 O43 - CFD: 2015/06/02 09:29:56 - [] D -- C:\ProgramData\Adobe O43 - CFD: 2015/04/22 00:10:13 - [] D -- C:\ProgramData\AMD O43 - CFD: 2013/01/24 08:05:18 - [] D -- C:\ProgramData\Apple O43 - CFD: 2013/01/23 17:41:11 - [] D -- C:\ProgramData\Apple Computer O43 - CFD: 2009/07/14 07:08:56 - [0] SHD -- C:\ProgramData\Application Data O43 - CFD: 2014/11/30 17:29:17 - [] D -- C:\ProgramData\Applications O43 - CFD: 2015/07/25 14:00:55 - [] D -- C:\ProgramData\ATI O43 - CFD: 2015/03/07 01:58:23 - [] D -- C:\ProgramData\Baidu O43 - CFD: 2015/05/25 12:31:42 - [] D -- C:\ProgramData\Codemasters O43 - CFD: 2011/07/16 13:32:11 - [] D -- C:\ProgramData\CyberLink O43 - CFD: 2013/01/24 18:41:48 - [] D -- C:\ProgramData\DAEMON Tools Lite O43 - CFD: 2009/07/14 07:08:56 - [0] SHD -- C:\ProgramData\Desktop O43 - CFD: 2009/07/14 07:08:56 - [0] SHD -- C:\ProgramData\Documents O43 - CFD: 2014/10/27 00:07:57 - [] SHD -- C:\ProgramData\DSS O43 - CFD: 2014/05/29 18:01:30 - [] D -- C:\ProgramData\Easybits O43 - CFD: 2014/11/14 19:11:27 - [] D -- C:\ProgramData\Electronic Arts O43 - CFD: 2009/07/14 07:08:56 - [0] SHD -- C:\ProgramData\Favorites O43 - CFD: 2013/09/23 19:01:28 - [] D -- C:\ProgramData\Freemake O43 - CFD: 2014/01/17 21:25:39 - [] D -- C:\ProgramData\Hewlett-Packard O43 - CFD: 2015/03/25 14:07:23 - [] D -- C:\ProgramData\HP O43 - CFD: 2015/03/25 14:08:25 - [] D -- C:\ProgramData\HP Photo Creations O43 - CFD: 2014/11/30 19:45:50 - [] D -- C:\ProgramData\Installations O43 - CFD: 2011/07/16 13:27:18 - [] D -- C:\ProgramData\intel O43 - CFD: 2014/11/04 19:44:23 - [] D -- C:\ProgramData\Licenses O43 - CFD: 2014/07/21 23:13:31 - [] D -- C:\ProgramData\Logs O43 - CFD: 2014/11/07 18:44:01 - [] D -- C:\ProgramData\Malwarebytes O43 - CFD: 2014/11/07 22:02:40 - [] D -- C:\ProgramData\McAfee O43 - CFD: 2015/04/15 18:41:55 - [] SD -- C:\ProgramData\Microsoft O43 - CFD: 2015/05/13 03:24:33 - [] D -- C:\ProgramData\Microsoft Help O43 - CFD: 2014/11/07 08:23:17 - [] SHD -- C:\ProgramData\Microsoft Services O43 - CFD: 2013/01/23 13:15:53 - [] D -- C:\ProgramData\Norton O43 - CFD: 2011/07/16 13:41:53 - [] D -- C:\ProgramData\NortonInstaller O43 - CFD: 2014/11/07 22:02:23 - [] D -- C:\ProgramData\Oracle O43 - CFD: 2015/07/22 22:58:06 - [] D -- C:\ProgramData\Orbit O43 - CFD: 2015/07/25 17:50:24 - [] D -- C:\ProgramData\Origin O43 - CFD: 2015/05/08 12:29:41 - [] D -- C:\ProgramData\Package Cache O43 - CFD: 2015/07/26 19:09:55 - [] D -- C:\ProgramData\PDFC O43 - CFD: 2014/12/25 12:25:49 - [] D -- C:\ProgramData\RavensburgerTipToi O43 - CFD: 2014/08/14 12:54:30 - [] D -- C:\ProgramData\Razer O43 - CFD: 2013/01/23 21:49:20 - [] D -- C:\ProgramData\Recovery O43 - CFD: 2015/02/22 16:29:34 - [] D -- C:\ProgramData\regid.1991-06.com.microsoft O43 - CFD: 2015/07/25 14:50:34 - [] D -- C:\ProgramData\Saitek O43 - CFD: 2015/07/20 18:49:25 - [] D -- C:\ProgramData\Samsung O43 - CFD: 2009/07/14 07:08:56 - [0] SHD -- C:\ProgramData\Start Menu O43 - CFD: 2014/10/09 12:55:15 - [] D -- C:\ProgramData\Steam O43 - CFD: 2013/04/25 11:36:53 - [] D -- C:\ProgramData\Sun O43 - CFD: 2014/11/04 19:49:22 - [0] AD -- C:\ProgramData\Temp O43 - CFD: 2009/07/14 07:08:56 - [0] SHD -- C:\ProgramData\Templates O43 - CFD: 2013/01/24 08:25:18 - [] D -- C:\ProgramData\VirtualizedApplications O43 - CFD: 2015/03/25 14:08:25 - [] D -- C:\ProgramData\Visan O43 - CFD: 2014/01/17 21:26:36 - [] D -- C:\ProgramData\{18165758-115C-4DC0-9EC2-FF89F725767F} O43 - CFD: 2015/07/26 18:01:23 - [] D -- C:\Program Files (x86)\Common Files\2988696b-294c-4054-b34f-e97ca58a10e8 O43 - CFD: 2015/06/02 09:30:14 - [] D -- C:\Program Files (x86)\Common Files\Adobe O43 - CFD: 2011/07/16 13:38:21 - [] D -- C:\Program Files (x86)\Common Files\Adobe AIR O43 - CFD: 2013/10/25 18:31:04 - [] D -- C:\Program Files (x86)\Common Files\Apple O43 - CFD: 2014/10/30 23:23:42 - [] D -- C:\Program Files (x86)\Common Files\ATI Technologies O43 - CFD: 2014/11/14 19:31:22 - [] HD -- C:\Program Files (x86)\Common Files\EAInstaller O43 - CFD: 2015/04/05 15:18:07 - [] D -- C:\Program Files (x86)\Common Files\InstallShield O43 - CFD: 2014/11/07 22:03:15 - [] D -- C:\Program Files (x86)\Common Files\Java O43 - CFD: 2015/02/22 16:28:59 - [] D -- C:\Program Files (x86)\Common Files\microsoft shared O43 - CFD: 2011/07/16 13:27:20 - [] D -- C:\Program Files (x86)\Common Files\postureAgent O43 - CFD: 2009/07/14 05:20:08 - [] D -- C:\Program Files (x86)\Common Files\Services O43 - CFD: 2009/07/14 05:20:08 - [] D -- C:\Program Files (x86)\Common Files\SpeechEngines O43 - CFD: 2015/05/17 15:24:30 - [] D -- C:\Program Files (x86)\Common Files\Steam O43 - CFD: 2013/05/22 21:34:46 - [] D -- C:\Program Files (x86)\Common Files\System O43 - CFD: 2011/07/16 13:39:45 - [] D -- C:\Program Files (x86)\Common Files\Windows Live O43 - CFD: 2014/10/04 19:47:23 - [] D -- C:\Program Files (x86)\Common Files\Wise Installation Wizard O43 - CFD: 2014/10/31 12:30:55 - [] D -- C:\Users\Gerard\AppData\Roaming\2K Sports O43 - CFD: 2015/06/02 09:31:28 - [] D -- C:\Users\Gerard\AppData\Roaming\Adobe O43 - CFD: 2014/10/30 23:25:04 - [] D -- C:\Users\Gerard\AppData\Roaming\AMD O43 - CFD: 2014/11/07 18:20:47 - [] D -- C:\Users\Gerard\AppData\Roaming\amdc O43 - CFD: 2013/10/26 09:50:13 - [] D -- C:\Users\Gerard\AppData\Roaming\Apple Computer O43 - CFD: 2013/01/23 13:00:20 - [] D -- C:\Users\Gerard\AppData\Roaming\ATI O43 - CFD: 2015/03/07 01:47:50 - [] D -- C:\Users\Gerard\AppData\Roaming\Cocoon Software O43 - CFD: 2015/07/25 14:19:56 - [] D -- C:\Users\Gerard\AppData\Roaming\DAEMON Tools Lite O43 - CFD: 2013/01/23 15:07:56 - [] D -- C:\Users\Gerard\AppData\Roaming\DVDVideoSoft O43 - CFD: 2014/11/12 16:09:18 - [] D -- C:\Users\Gerard\AppData\Roaming\FastStone O43 - CFD: 2013/01/23 15:13:01 - [] D -- C:\Users\Gerard\AppData\Roaming\FreemakeVideoDownloader O43 - CFD: 2013/09/12 19:16:11 - [] D -- C:\Users\Gerard\AppData\Roaming\GameSave Manager 3 O43 - CFD: 2014/09/17 01:23:03 - [] D -- C:\Users\Gerard\AppData\Roaming\gen64 O43 - CFD: 2013/04/11 12:30:13 - [] D -- C:\Users\Gerard\AppData\Roaming\Hewlett-Packard O43 - CFD: 2014/01/16 13:04:00 - [] D -- C:\Users\Gerard\AppData\Roaming\HP Support Assistant O43 - CFD: 2013/04/11 12:32:52 - [] D -- C:\Users\Gerard\AppData\Roaming\hpqLog O43 - CFD: 2015/03/25 14:08:00 - [] D -- C:\Users\Gerard\AppData\Roaming\HpUpdate O43 - CFD: 2013/03/24 15:51:28 - [] D -- C:\Users\Gerard\AppData\Roaming\Identities O43 - CFD: 2014/01/04 01:12:42 - [] D -- C:\Users\Gerard\AppData\Roaming\Landwirt2014 O43 - CFD: 2015/04/22 00:11:32 - [] D -- C:\Users\Gerard\AppData\Roaming\library_dir O43 - CFD: 2011/07/16 13:38:21 - [] D -- C:\Users\Gerard\AppData\Roaming\Macromedia O43 - CFD: 2010/11/21 09:16:41 - [0] D -- C:\Users\Gerard\AppData\Roaming\Media Center Programs O43 - CFD: 2015/02/22 17:22:07 - [] SD -- C:\Users\Gerard\AppData\Roaming\Microsoft O43 - CFD: 2015/02/03 21:10:28 - [] D -- C:\Users\Gerard\AppData\Roaming\Milestone O43 - CFD: 2014/03/13 14:23:41 - [] D -- C:\Users\Gerard\AppData\Roaming\Mindscape O43 - CFD: 2013/01/23 13:14:44 - [] D -- C:\Users\Gerard\AppData\Roaming\Mozilla O43 - CFD: 2013/01/23 13:18:35 - [] D -- C:\Users\Gerard\AppData\Roaming\NewspaperDirect O43 - CFD: 2013/04/01 18:29:24 - [] D -- C:\Users\Gerard\AppData\Roaming\OpenOffice.org O43 - CFD: 2015/07/25 14:48:42 - [] D -- C:\Users\Gerard\AppData\Roaming\Opera Software O43 - CFD: 2015/06/20 11:24:08 - [] D -- C:\Users\Gerard\AppData\Roaming\Origin O43 - CFD: 2013/05/27 18:57:33 - [] D -- C:\Users\Gerard\AppData\Roaming\PhotoFiltre Studio X O43 - CFD: 2015/07/26 19:11:01 - [] D -- C:\Users\Gerard\AppData\Roaming\Raptr O43 - CFD: 2014/12/25 18:27:27 - [] D -- C:\Users\Gerard\AppData\Roaming\RavensburgerTipToi O43 - CFD: 2015/07/20 18:49:26 - [] D -- C:\Users\Gerard\AppData\Roaming\Samsung O43 - CFD: 2013/02/18 14:58:50 - [] D -- C:\Users\Gerard\AppData\Roaming\SecuROM O43 - CFD: 2013/05/20 16:42:17 - [] D -- C:\Users\Gerard\AppData\Roaming\SoftGrid Client O43 - CFD: 2013/05/29 16:46:13 - [] D -- C:\Users\Gerard\AppData\Roaming\Sports Interactive O43 - CFD: 2014/10/19 12:02:37 - [] D -- C:\Users\Gerard\AppData\Roaming\Steam O43 - CFD: 2013/01/23 13:05:18 - [0] D -- C:\Users\Gerard\AppData\Roaming\TP O43 - CFD: 2013/01/23 19:27:00 - [] D -- C:\Users\Gerard\AppData\Roaming\Unity O43 - CFD: 2015/07/25 14:19:56 - [] D -- C:\Users\Gerard\AppData\Roaming\uTorrent O43 - CFD: 2014/12/15 07:41:30 - [] D -- C:\Users\Gerard\AppData\Roaming\VASCO O43 - CFD: 2015/06/30 18:58:50 - [] D -- C:\Users\Gerard\AppData\Roaming\vlc O43 - CFD: 2013/09/28 17:10:33 - [0] D -- C:\Users\Gerard\AppData\Roaming\Windows Live Writer O43 - CFD: 2013/02/04 21:17:59 - [] D -- C:\Users\Gerard\AppData\Roaming\WindSolutions O43 - CFD: 2013/02/09 16:09:48 - [] D -- C:\Users\Gerard\AppData\Roaming\WinRAR O43 - CFD: 2015/07/26 19:13:37 - [] D -- C:\Users\Gerard\AppData\Roaming\ZHP O43 - CFD: 2014/05/29 18:01:29 - [] D -- C:\Users\Gerard\AppData\Roaming\_MDLogs O43 - CFD: 2015/06/02 09:31:19 - [] D -- C:\Users\Gerard\AppData\Local\Adobe O43 - CFD: 2013/01/23 17:40:46 - [] D -- C:\Users\Gerard\AppData\Local\Apple O43 - CFD: 2013/12/01 22:27:26 - [] D -- C:\Users\Gerard\AppData\Local\Apple Computer O43 - CFD: 2013/01/23 12:55:53 - [0] SHD -- C:\Users\Gerard\AppData\Local\Application Data O43 - CFD: 2015/03/19 19:30:44 - [] D -- C:\Users\Gerard\AppData\Local\ApplicationHistory O43 - CFD: 2013/01/23 14:12:31 - [] D -- C:\Users\Gerard\AppData\Local\Apps O43 - CFD: 2013/01/23 13:00:20 - [] D -- C:\Users\Gerard\AppData\Local\ATI O43 - CFD: 2013/05/29 16:50:16 - [] D -- C:\Users\Gerard\AppData\Local\Chromium O43 - CFD: 2014/07/31 22:20:31 - [] D -- C:\Users\Gerard\AppData\Local\CrashRpt =>.Legitimate.CrashReports O43 - CFD: 2015/07/25 14:24:05 - [0] D -- C:\Users\Gerard\AppData\Local\Deployment O43 - CFD: 2015/07/08 19:33:10 - [] D -- C:\Users\Gerard\AppData\Local\Diagnostics O43 - CFD: 2013/09/19 19:43:04 - [] D -- C:\Users\Gerard\AppData\Local\Disney Interactive Studios O43 - CFD: 2015/07/20 18:00:52 - [] D -- C:\Users\Gerard\AppData\Local\Downloaded Installations O43 - CFD: 2015/07/25 15:16:29 - [] D -- C:\Users\Gerard\AppData\Local\ElevatedDiagnostics O43 - CFD: 2014/11/30 16:04:00 - [] SHD -- C:\Users\Gerard\AppData\Local\EmieBrowserModeList O43 - CFD: 2014/05/12 18:21:28 - [] SHD -- C:\Users\Gerard\AppData\Local\EmieSiteList O43 - CFD: 2014/05/12 18:21:28 - [] SHD -- C:\Users\Gerard\AppData\Local\EmieUserList O43 - CFD: 2013/04/23 16:15:53 - [] D -- C:\Users\Gerard\AppData\Local\ESN O43 - CFD: 2014/11/12 16:09:18 - [] D -- C:\Users\Gerard\AppData\Local\FastStone O43 - CFD: 2013/04/24 00:11:23 - [] D -- C:\Users\Gerard\AppData\Local\FLT O43 - CFD: 2013/09/14 18:14:20 - [] D -- C:\Users\Gerard\AppData\Local\GIANTS Editor 5.0.1 O43 - CFD: 2015/07/25 15:53:36 - [] D -- C:\Users\Gerard\AppData\Local\Google O43 - CFD: 2013/01/31 17:17:48 - [] D -- C:\Users\Gerard\AppData\Local\Hewlett-Packard O43 - CFD: 2013/01/23 12:59:20 - [] D -- C:\Users\Gerard\AppData\Local\Hewlett-Packard_Company O43 - CFD: 2013/01/23 12:55:53 - [0] SHD -- C:\Users\Gerard\AppData\Local\Historique O43 - CFD: 2015/03/25 14:38:32 - [] D -- C:\Users\Gerard\AppData\Local\HP O43 - CFD: 2015/07/25 14:15:26 - [] D -- C:\Users\Gerard\AppData\Local\Microsoft O43 - CFD: 2014/10/23 23:45:59 - [] D -- C:\Users\Gerard\AppData\Local\Microsoft Games O43 - CFD: 2013/01/30 20:30:21 - [0] D -- C:\Users\Gerard\AppData\Local\Microsoft Help O43 - CFD: 2015/07/25 14:48:42 - [] D -- C:\Users\Gerard\AppData\Local\Opera Software O43 - CFD: 2014/11/14 19:36:46 - [] D -- C:\Users\Gerard\AppData\Local\Origin O43 - CFD: 2014/09/21 12:34:10 - [] D -- C:\Users\Gerard\AppData\Local\P O43 - CFD: 2014/12/15 07:41:29 - [] D -- C:\Users\Gerard\AppData\Local\Package Cache O43 - CFD: 2013/11/25 19:29:00 - [] D -- C:\Users\Gerard\AppData\Local\Packages O43 - CFD: 2015/06/02 07:42:06 - [0] D -- C:\Users\Gerard\AppData\Local\PDFC O43 - CFD: 2013/02/13 11:40:01 - [] D -- C:\Users\Gerard\AppData\Local\Programs O43 - CFD: 2014/08/14 12:36:16 - [] D -- C:\Users\Gerard\AppData\Local\Razer_Inc O43 - CFD: 2013/01/23 12:58:49 - [] D -- C:\Users\Gerard\AppData\Local\RemEngine O43 - CFD: 2015/07/08 12:49:15 - [] D -- C:\Users\Gerard\AppData\Local\Rockstar Games O43 - CFD: 2015/07/20 18:05:21 - [] D -- C:\Users\Gerard\AppData\Local\Samsung O43 - CFD: 2015/02/15 22:00:57 - [] D -- C:\Users\Gerard\AppData\Local\Sidhe O43 - CFD: 2013/01/23 13:05:12 - [] D -- C:\Users\Gerard\AppData\Local\SoftGrid Client O43 - CFD: 2015/05/17 15:04:25 - [] D -- C:\Users\Gerard\AppData\Local\Steam O43 - CFD: 2015/07/26 19:14:00 - [] D -- C:\Users\Gerard\AppData\Local\Temp O43 - CFD: 2013/01/23 12:55:53 - [0] SHD -- C:\Users\Gerard\AppData\Local\Temporary Internet Files O43 - CFD: 2015/01/05 22:04:11 - [] D -- C:\Users\Gerard\AppData\Local\Ubisoft Game Launcher O43 - CFD: 2014/11/01 14:11:41 - [0] D -- C:\Users\Gerard\AppData\Local\Unity O43 - CFD: 2014/11/02 18:57:28 - [] D -- C:\Users\Gerard\AppData\Local\VirtualStore O43 - CFD: 2015/03/07 01:47:37 - [] D -- C:\Users\Gerard\AppData\Local\WDSetup O43 - CFD: 2014/08/16 20:02:15 - [] D -- C:\Users\Gerard\AppData\Local\Windows Live O43 - CFD: 2013/09/28 17:10:41 - [] D -- C:\Users\Gerard\AppData\Local\Windows Live Writer O43 - CFD: 2013/01/23 14:49:22 - [] D -- C:\Users\Gerard\AppData\Local\Wondershare O43 - CFD: 2015/01/08 11:31:41 - [0] D -- C:\Users\Gerard\AppData\Local\{D46B30FE-0812-4B56-90E7-E8B8EA354844} O43 - CFD: 2009/07/14 06:54:32 - [] RD -- C:\Users\Gerard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories O43 - CFD: 2015/07/25 15:02:21 - [] RD -- C:\Users\Gerard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools O43 - CFD: 2014/02/09 18:36:40 - [0] D -- C:\Users\Gerard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Audiograbber O43 - CFD: 2013/01/23 15:11:18 - [] D -- C:\Users\Gerard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freemake O43 - CFD: 2015/05/24 23:59:54 - [] D -- C:\Users\Gerard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games O43 - CFD: 2009/07/14 06:49:38 - [] RD -- C:\Users\Gerard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance O43 - CFD: 2013/05/27 18:57:20 - [0] D -- C:\Users\Gerard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PhotoFiltre Studio X O43 - CFD: 2015/07/25 15:14:03 - [] RD -- C:\Users\Gerard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup O43 - CFD: 2014/12/25 12:25:36 - [] D -- C:\Users\Gerard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\tiptoi® Manager O43 - CFD: 2013/02/09 16:09:36 - [] D -- C:\Users\Gerard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR ---\\ Derniers fichiers créés dans Windows Prefetcher (O45) (1) - 3s O45 - LFCP:[MD5.847893D009E161193BB08B043434F579] 2015/07/26 17:25:42 A -- C:\Windows\Prefetch\SPYHUNTER4.EXE-7BD5E907.pf =>.Enigma Software ---\\ Liste des pilotes du système (SDL) (O58) (62) - 5s O58 - SDL:2009/07/14 03:52:21 A . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\drivers\adp94xx.sys [491088] O58 - SDL:2009/07/14 03:52:21 A . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\System32\drivers\adpahci.sys [339536] O58 - SDL:2009/07/14 03:52:21 A . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver (X64).) -- C:\Windows\System32\drivers\adpu320.sys [182864] O58 - SDL:2009/07/14 03:52:21 A . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\Windows\System32\drivers\aliide.sys [15440] O58 - SDL:2015/06/23 04:05:56 A . (.Advanced Micro Devices - AMD ACP Binaries.) -- C:\Windows\System32\drivers\amdacpksd.sys [297672] O58 - SDL:2011/03/11 08:41:12 A . (.Advanced Micro Devices - AHCI 1.2 Device Driver.) -- C:\Windows\System32\drivers\amdsata.sys [107904] O58 - SDL:2009/07/14 03:52:20 A . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller D.) -- C:\Windows\System32\drivers\amdsbs.sys [194128] O58 - SDL:2011/03/11 08:41:12 A . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\Windows\System32\drivers\amdxata.sys [27008] O58 - SDL:2009/07/14 03:52:21 A . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\System32\drivers\arc.sys [87632] O58 - SDL:2009/07/14 03:52:21 A . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\System32\drivers\arcsas.sys [97856] O58 - SDL:2015/05/20 20:00:24 A . (.Advanced Micro Devices - AMD High Definition Audio Function Driver.) -- C:\Windows\System32\drivers\AtihdW76.sys [94720] O58 - SDL:2010/11/23 19:53:44 A . (.ATI Technologies Inc. - ATI Radeon Kernel Mode Driver.) -- C:\Windows\System32\drivers\atikmdag.sys [7886848] O58 - SDL:2010/11/23 18:46:42 A . (.Advanced Micro Devices, Inc. - AMD multi-vendor Miniport Driver.) -- C:\Windows\System32\drivers\atikmpag.sys [285696] O58 - SDL:2009/06/10 22:34:23 A . (.Broadcom Corporation - Broadcom NetXtreme Gigabit Ethernet NDIS6.x.) -- C:\Windows\System32\drivers\b57nd60a.sys [270848] O58 - SDL:2009/06/10 22:41:06 A . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower.) -- C:\Windows\System32\drivers\BrFiltLo.sys [18432] O58 - SDL:2009/06/10 22:41:06 A . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper.) -- C:\Windows\System32\drivers\BrFiltUp.sys [8704] O58 - SDL:2009/07/14 03:19:07 A . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\System32\drivers\BrSerId.sys [286720] O58 - SDL:2009/06/10 22:41:10 A . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\System32\drivers\BrSerWdm.sys [47104] O58 - SDL:2009/06/10 22:41:10 A . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\System32\drivers\BrUsbMdm.sys [14976] O58 - SDL:2009/06/10 22:41:10 A . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\System32\drivers\BrUsbSer.sys [14720] O58 - SDL:2009/06/10 22:34:28 A . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.) -- C:\Windows\System32\drivers\bxvbda.sys [468480] O58 - SDL:2009/07/14 03:52:31 A . (.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\cmdide.sys [17488] O58 - SDL:2012/05/29 15:53:30 A . (.Windows (R) Codename Longhorn DDK provider - hpvhd 64bit support driver.) -- C:\Windows\System32\drivers\cpqdfw.sys [27456] O58 - SDL:2010/03/01 23:59:50 A . (...) -- C:\Windows\System32\drivers\cqcpu.sys [24376] O58 - SDL:2015/02/02 22:26:12 A . (.Disc Soft Ltd - DAEMON Tools Virtual Bus Driver.) -- C:\Windows\System32\drivers\dtsoftbus01.sys [283064] O58 - SDL:2009/07/14 03:47:48 A . (.Emulex - Storport Miniport Driver for LightPulse HBA.) -- C:\Windows\System32\drivers\elxstor.sys [530496] O58 - SDL:2009/06/10 22:34:33 A . (.Broadcom Corporation - Broadcom NetXtreme II 10 GigE VBD.) -- C:\Windows\System32\drivers\evbda.sys [3286016] O58 - SDL:2012/08/21 14:01:20 A . (.GEAR Software Inc. - CD DVD Filter.) -- C:\Windows\System32\drivers\GEARAspiWDM.sys [33240] O58 - SDL:2009/06/10 22:31:59 A . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for.) -- C:\Windows\System32\drivers\hcw85cir.sys [31232] O58 - SDL:2010/10/19 13:34:26 A . (.Intel Corporation - Intel(R) Management Engine Interface.) -- C:\Windows\System32\drivers\HECIx64.sys [56344] O58 - SDL:2010/11/21 05:23:47 A . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Drive.) -- C:\Windows\System32\drivers\HpSAMD.sys [78720] O58 - SDL:2011/11/30 03:40:32 A . (.Intel Corporation - Intel Rapid Storage Technology driver - x64.) -- C:\Windows\System32\drivers\iaStor.sys [568600] O58 - SDL:2011/03/11 08:41:26 A . (.Intel Corporation - Intel Matrix Storage Manager driver - x64.) -- C:\Windows\System32\drivers\iaStorV.sys [410496] O58 - SDL:2009/06/10 22:37:05 A . (.Intel Corporation - Intel Graphics Kernel Mode Driver.) -- C:\Windows\System32\drivers\igdkmd64.sys [6108416] O58 - SDL:2009/07/14 03:48:04 A . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\System32\drivers\iirsp.sys [44112] O58 - SDL:2009/07/14 03:48:04 A . (.LSI Corporation - LSI Fusion-MPT FC Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_fc.sys [114752] O58 - SDL:2009/07/14 03:48:04 A . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas.sys [106560] O58 - SDL:2009/07/14 03:48:04 A . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas2.sys [65600] O58 - SDL:2009/07/14 03:48:04 A . (.LSI Corporation - LSI Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_scsi.sys [115776] O58 - SDL:2015/06/18 08:41:40 A . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\drivers\mbam.sys [25816] O58 - SDL:2015/06/18 08:41:44 A . (.Malwarebytes Corporation - Malwarebytes Chameleon Protection Driver.) -- C:\Windows\System32\drivers\mbamchameleon.sys [109272] O58 - SDL:2015/07/26 19:09:55 A . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\drivers\MBAMSwissArmy.sys [113880] O58 - SDL:2009/07/14 03:48:04 A . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows.) -- C:\Windows\System32\drivers\megasas.sys [35392] O58 - SDL:2009/07/14 03:48:04 A . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\System32\drivers\MegaSR.sys [284736] O58 - SDL:2015/06/18 08:41:56 A . (.Malwarebytes Corporation - Malwarebytes Web Access Control.) -- C:\Windows\System32\drivers\mwac.sys [63704] O58 - SDL:2009/07/14 03:48:26 A . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\System32\drivers\nfrd960.sys [51264] O58 - SDL:2011/03/11 08:41:34 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\System32\drivers\nvraid.sys [148352] O58 - SDL:2011/03/11 08:41:34 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\System32\drivers\nvstor.sys [166272] O58 - SDL:2009/07/14 03:45:46 A . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\Windows\System32\drivers\ql2300.sys [1524816] O58 - SDL:2009/07/14 03:45:45 A . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\Windows\System32\drivers\ql40xx.sys [128592] O58 - SDL:2015/01/15 08:42:24 A . (.Realtek - Realtek 8136/8168/8169 NDIS 6.20 64-bit Dri.) -- C:\Windows\System32\drivers\Rt64win7.sys [977624] O58 - SDL:2000/01/01 02:00:00 A . (.Saitek - Saitek Hid Driver.) -- C:\Windows\System32\drivers\SaiH040B.sys [171144] O58 - SDL:2000/01/01 02:00:00 A . (.Saitek - Saitek Usb Driver.) -- C:\Windows\System32\drivers\SaiU040B.sys [34304] O58 - SDL:2009/06/10 22:37:19 A . (.Macrovision Corporation, Macrovision Europe Limited, - Macrovision SECURITY Driver.) -- C:\Windows\System32\drivers\secdrv.sys [23040] O58 - SDL:2009/07/14 02:00:40 A . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\System32\drivers\serial.sys [94208] O58 - SDL:2009/07/14 03:45:45 A . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\System32\drivers\sisraid2.sys [43584] O58 - SDL:2009/07/14 03:45:46 A . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\System32\drivers\sisraid4.sys [80464] O58 - SDL:2014/12/29 16:56:50 A . (.Duplex Secure Ltd. - SCSI Pass Through Direct Host.) -- C:\Windows\System32\drivers\sptd.sys [386680] O58 - SDL:2009/07/14 03:45:55 A . (.Promise Technology - Promise SuperTrak EX Series Driver for Win.) -- C:\Windows\System32\drivers\stexstor.sys [24656] O58 - SDL:2012/12/13 14:50:36 A . (.Apple, Inc. - Apple Mobile Device USB Driver.) -- C:\Windows\System32\drivers\usbaapl64.sys [54784] O58 - SDL:2009/07/14 03:45:55 A . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\viaide.sys [17488] O58 - SDL:2009/07/14 03:45:55 A . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\Windows\System32\drivers\vsmraid.sys [161872] ---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61) (16) - 34s O61 - LFC: 2015/07/25 14:30:47 A . (..) -- C:\Users\Gerard\Downloads\AppManagerSetup_1.47.exe [849352] O61 - LFC: 2015/07/25 13:47:19 A . (.Advanced Micro Devices, Inc..) -- C:\Users\Gerard\Downloads\autodetectutility.exe [5455048] O61 - LFC: 2015/07/26 10:53:06 A . (.GIANTS Software GmbH.) -- C:\Users\Gerard\Downloads\FS15_amazonePantera.exe [13275152] O61 - LFC: 2015/07/22 20:02:53 A . (.GIANTS Software GmbH.) -- C:\Users\Gerard\Downloads\Kotte_FRP_145 (1).exe [7692888] O61 - LFC: 2015/07/20 17:48:02 A . (.GIANTS Software GmbH.) -- C:\Users\Gerard\Downloads\Kotte_FRP_145.exe [7692888] O61 - LFC: 2015/07/25 17:00:18 A . (..) -- C:\Users\Gerard\Downloads\MaConfig_Win.exe [268128] O61 - LFC: 2015/07/22 20:04:48 A . (.GIANTS Software GmbH.) -- C:\Users\Gerard\Downloads\SauterEquipment.exe [1418600] O61 - LFC: 2015/07/22 20:06:11 A . (.GIANTS Software GmbH.) -- C:\Users\Gerard\Downloads\SelfmadeConcreteWeights.exe [5479424] O61 - LFC: 2015/07/26 17:24:15 A . (.Enigma Software Group USA, LLC..) -- C:\Users\Gerard\Downloads\sh-remover.exe [3237248] O61 - LFC: 2015/07/25 14:37:06 A . (.SlimWare Utilities, Inc..) -- C:\Users\Gerard\Downloads\SlimDrivers-setup.exe [981728] O61 - LFC: 2015/07/19 11:33:08 A . (..) -- C:\Users\Gerard\Documents\Rockstar Games\GTA V\Profiles\DFE3B7FD\pc_settings.bin [896] O61 - LFC: 2015/07/24 22:03:26 A . (..) -- C:\Users\Gerard\Documents\FIFA 15\instance0\replay0.bin [536870912] O61 - LFC: 2015/07/25 16:50:08 A . (..) -- C:\Users\Gerard\AppData\Roaming\Raptr\data\raptrguestzvssifo9\config\certificates\x509\tls_peers\xmpp-server2.raptr.com [1217] O61 - LFC: 2015/07/25 10:37:21 A . (..) -- C:\Users\Gerard\AppData\Roaming\AMD\GLCache\ec6260739295f429_20.bin [34721500] O61 - LFC: 2015/07/26 19:11:39 A . (..) -- C:\Users\Gerard\AppData\Local\Google\Chrome\User Data\ev_hashes_whitelist.bin [1113849] O61 - LFC: 2015/07/25 15:42:37 A . (..) -- C:\Users\Gerard\AppData\Local\ATI\ACE\Manifest.Bin [30042] ---\\ Associations Shell Spawning (O67) (2) - 0s O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Ob.) -- C:\Windows\System32\eventvwr.exe O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (...) -- C:\Program Files (x86)\Opera\Launcher.exe ---\\ Menu de démarrage Internet (SMI) (O68) (12) - 0s O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (...) -- C:\Program Files (x86)\Opera\Launcher.exe O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (...) -- C:\Program Files (x86)\Opera\Launcher.exe (.not file.) O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (...) -- C:\Program Files (x86)\Opera\Launcher.exe (.not file.) O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (...) -- C:\Program Files (x86)\Opera\Launcher.exe (.not file.) ---\\ Recherche d'infection sur les navigateurs internet (SBI) (O69) (2) - 0s O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (Bing) - http://www.bing.com/ O69 - SBI: SearchScopes [HKCU] {A7B01B10-B22F-4FD3-A194-9C7630C57598} - (Bing) - http://www.bing.com/ ---\\ Enumère les services démarrés par Svchost (SSS) (O83) (32) - 1s O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d’application.) -- C:\Windows\System32\aelupsvc.dll [72192] O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [80384] O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [80384] O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\system32\srvsvc.dll [236032] O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\System32\gpsvc.dll [777728] O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\ikeext.dll [859648] O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Service Audio Windows.) -- C:\Windows\System32\Audiosrv.dll [680960] O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’.) -- C:\Windows\System32\rasauto.dll [99328] O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire de connexions d’accès distant.) -- C:\Windows\System32\rasmans.dll [344064] O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll [97792] O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements systèm.) -- C:\Windows\System32\Sens.dll [64512] O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l’application d’assistance à.) -- C:\Windows\System32\ipnathlp.dll [359424] O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM.) -- C:\Windows\System32\tapisrv.dll [316928] O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gestionnaire des connexions distantes du se.) -- C:\Windows\System32\termsrv.dll [683520] O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Up.) -- C:\Windows\system32\wuaueng.dll [2553856] O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière.) -- C:\Windows\System32\qmgr.dll [849920] O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [370688] O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur u.) -- C:\Windows\System32\iphlpsvc.dll [569344] O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d’ouverture de session secon.) -- C:\Windows\system32\seclogon.dll [30720] O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll [70144] O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\system32\iscsiexe.dll [156672] O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédia.) -- C:\Windows\system32\mmcss.dll [67584] O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\system32\wbem\WMIsvc.dll [242688] O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à.) -- C:\Windows\System32\SessEnv.dll [121856] O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\System32\browser.dll [136704] O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll [111104] O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\system32\schedsvc.dll [1110016] O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\Windows\system32\kmsvc.dll [90624] O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll [84480] O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\system32\profsvc.dll [210432] O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\Windows\system32\themeservice.dll [44544] O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\Windows\System32\bdesvc.dll [100864] ---\\ Liste des exceptions du parefeu (FirewallRules) (O87) (18) - 1s O87 - FAEL: "{67CC94C9-8281-4426-9397-5B4C7BF74150}" [In-None-P6-TRUE] .(.Acti'Com - Camérail Innova 5.) -- C:\Camerail\Innova 5\Innova 5.exe O87 - FAEL: "{74BD78C0-56BF-443A-BF29-705425742C07}" [In-None-P17-TRUE] .(.Acti'Com - Camérail Innova 5.) -- C:\Camerail\Innova 5\Innova 5.exe O87 - FAEL: "{EDF2151B-FD27-4129-9019-4CA507984B07}" [In-None-P6-TRUE] .(.BitTorrent Inc. - µTorrent.) -- C:\Users\Gerard\AppData\Roaming\uTorrent\uTorrent.exe O87 - FAEL: "{2272126F-B144-4192-BEF2-B4CE464E2362}" [In-None-P17-TRUE] .(.BitTorrent Inc. - µTorrent.) -- C:\Users\Gerard\AppData\Roaming\uTorrent\uTorrent.exe O87 - FAEL: "{B740624D-E265-48CF-89D1-65AD5772F678}" [In-None-P6-TRUE] .(...) -- C:\Windows\SysWOW64\PnkBstrA.exe O87 - FAEL: "{8E1D30D5-E173-4789-9F2D-1852AC21B59C}" [In-None-P17-TRUE] .(...) -- C:\Windows\SysWOW64\PnkBstrA.exe O87 - FAEL: "{A4082C4D-A20B-4913-BFA7-AC6E145659CD}" [In-None-P6-TRUE] .(...) -- C:\Windows\SysWOW64\PnkBstrB.exe O87 - FAEL: "{FECEFF8A-AD24-47B7-AF44-B9E3984DDDEA}" [In-None-P17-TRUE] .(...) -- C:\Windows\SysWOW64\PnkBstrB.exe O87 - FAEL: "{46999642-F38D-4E4A-AD4A-BC55C22E613A}" [In-None-P6-TRUE] .(.BitTorrent Inc. - µTorrent.) -- C:\Users\Gerard\AppData\Roaming\uTorrent\uTorrent.exe O87 - FAEL: "{DAB3B417-3D42-4EFD-9DEE-9A35030002A5}" [In-None-P17-TRUE] .(.BitTorrent Inc. - µTorrent.) -- C:\Users\Gerard\AppData\Roaming\uTorrent\uTorrent.exe O87 - FAEL: "TCP Query User{40AA691E-4E19-4F81-AFA5-E8C1762D5E15}C:\program files (x86)\farming simulator 2015\x64\farmingsimulator2015game.exe" [In-None-P6-TRUE] .(.GIANTS Software GmbH - GIANTS Engine 6.0.2.) -- C:\program files (x86)\farming simulator 2015\x64\farmingsimulator2015game.exe O87 - FAEL: "UDP Query User{6BF5E9BB-804D-4EB7-ADFC-3ECE0339D9B1}C:\program files (x86)\farming simulator 2015\x64\farmingsimulator2015game.exe" [In-None-P17-TRUE] .(.GIANTS Software GmbH - GIANTS Engine 6.0.2.) -- C:\program files (x86)\farming simulator 2015\x64\farmingsimulator2015game.exe O87 - FAEL: "{C4819264-4050-47E4-837C-C3E0EF7DAC94}" [In-None-P6-TRUE] .(.Musiccity Co.Ltd. - MUZAoDApp Module.) -- C:\Windows\SysWOW64\muzapp.exe O87 - FAEL: "{300B22A2-DD4D-4FE5-9542-F2B20AD0852E}" [In-None-P17-TRUE] .(.Musiccity Co.Ltd. - MUZAoDApp Module.) -- C:\Windows\SysWOW64\muzapp.exe O87 - FAEL: "{75845776-CB22-4E1B-A9DD-63AE0D7B0D05}" [In-None-P6-TRUE] .(.Raptr, Inc - Raptr Desktop App.) -- C:\Program Files (x86)\Raptr\raptr.exe O87 - FAEL: "{A6546EC0-D76A-48E2-A2D0-2B24E1996E58}" [In-None-P17-TRUE] .(.Raptr, Inc - Raptr Desktop App.) -- C:\Program Files (x86)\Raptr\raptr.exe O87 - FAEL: "{FCB55362-472D-43F4-B556-8A2C24921B04}" [In-None-P6-TRUE] .(.Raptr, Inc - Raptr Desktop App.) -- C:\Program Files (x86)\Raptr\raptr_im.exe O87 - FAEL: "{466A47F4-80FB-488A-A8F4-B77C8A20B026}" [In-None-P17-TRUE] .(.Raptr, Inc - Raptr Desktop App.) -- C:\Program Files (x86)\Raptr\raptr_im.exe ---\\ Scan Additionnel (O88) (11) - 0s HKLM\SYSTEM\CurrentControlSet\Services\comyninu =>PUP.Optional.CrossRider HKLM\SYSTEM\CurrentControlSet\Services\hyverumu =>PUP.Optional.CrossRider HKLM\SYSTEM\CurrentControlSet\Services\wonipyqy =>PUP.Optional.CrossRider C:\Windows\Tasks\Bidaily Synchronize Task[pr].job =>PUP.Optional.BidailySync C:\Windows\System32\Tasks\Bidaily Synchronize Task[pr] =>PUP.Optional.BidailySync HKLM\SOFTWARE\Wow6432Node\WordShark_1.10.0.20 =>PUP.Optional.WordShark HKCU\SOFTWARE\CinemaPlus-3.2cV25.07-nv-ie =>PUP.Optional.CrossRider HKCU\SOFTWARE\Cinema_Plus-1.2V25.07-nv-ie =>PUP.Optional.CrossRider HKCU\SOFTWARE\tstamptoken =>PUP.Optional.MaxComputerCleaner C:\Users\Gerard\AppData\Local\CrashRpt =>.Legitimate.CrashReports C:\Windows\Prefetch\SPYHUNTER4.EXE-7BD5E907.pf =>.Enigma Software ---\\ Récapitulatif des éléments trouvées sur votre station (7) - 0s http://www.nicolascoolman.fr/blog =>PUP.Optional.SpaceSoundPro http://www.nicolascoolman.fr/pup-crossrider/ =>PUP.Optional.CrossRider http://www.nicolascoolman.fr/blog =>PUP.Optional.TomorrowGames http://www.nicolascoolman.fr/blog =>PUP.Optional.BidailySync http://www.nicolascoolman.fr/pup-wordshark/ =>PUP.Optional.WordShark http://www.nicolascoolman.fr/blog =>PUP.Optional.MaxComputerCleaner http://www.nicolascoolman.fr/blog =>.Legitimate.CrashReports ~ End of the scan, 44393 items in 118 seconds (969)(0)()