~ ZHPDiag v2015.11.23.173 Par Nicolas Coolman (2015/11/23) ~ Démarré par Nico30berges (Administrator) (2015/11/25 00:06:14) ~ Site: http://www.nicolascoolman.fr ~ Facebook: https://www.facebook.com/nicolascoolman1 ~ Etat de la version: Version OK ~ Mode: Scanner ~ Rapport: C:\Users\Nico30berges\Desktop\ZHPDiag.txt ~ Rapport: C:\Users\Nico30berges\AppData\Roaming\ZHP\ZHPDiag.txt ~ UAC: Activate ~ Démarrage du système: Normal (Normal boot) Windows 8.1, 64-bit (Build 9600) ---\\ Navigateurs Internet (2) - 0s GCIE: Google Chrome v34.0.1847.116 MSIE: Internet Explorer v11.0.9600.18098 ---\\ Informations sur les produits Windows (3) - 4s ~ Windows Server License Manager Script : OK ~ Licence Script File Génération : OK Windows Automatic Updates : OK ---\\ Logiciels de protection (3) - 8s Avast Free Antivirus v10.3.2223 Kaspersky Anti-Virus 2013 v13.0.1.4190 Windows Defender (Deactivate) ---\\ Logiciels d'optimisation (1) - 10s CCleaner v5.12 ---\\ Informations sur le système (6) - 0s ~ Operating System: Intel64 Family 6 Model 42 Stepping 7, GenuineIntel ~ Operating System: 64-bit ~ Boot mode: Normal (Normal boot) Total RAM: 4144.356 MB (42% free) System Restore: Activé (Enable) System drive C: has 119 GB () free of 704 GB ---\\ Mode de connexion au système (3) - 0s ~ Computer Name: PCNICO30ANS ~ User Name: Nico30berges ~ Logged in as Administrator ---\\ Enumération des unités disques (1) - 0s ~ Drive C: has 119 GB free of 704 GB (System) ---\\ Etat du Centre de Sécurité Windows (11) - 0s [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK [HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK ---\\ Recherche particulière de fichiers génériques (25) - 2s [MD5.C10A66189DC8C090E7C84873EDCEBC88] - 28/01/2015 - (.Microsoft Corporation - Explorateur Windows.) -- C:\WINDOWS\Explorer.exe [2501368] © [MD5.6C308D32AFA41D26CE2A0EA8F7B79565] - 29/10/2014 - (.Microsoft Corporation - Processus hôte Windows (Rundll32).) -- C:\WINDOWS\System32\rundll32.exe [54784] © [MD5.A570A64292214C43E0BA50E6A72A6380] - 29/10/2014 - (.Microsoft Corporation - Application de démarrage de Windows.) -- C:\WINDOWS\System32\Wininit.exe [145920] © [MD5.033E70DEEE5FED5E9A3E197A2DB1A618] - 30/10/2015 - (.Microsoft Corporation - Extensions Internet pour Win32.) -- C:\WINDOWS\System32\wininet.dll [2487808] © [MD5.EC498BAE1F0D3E0E401C963F8D76C437] - 29/10/2014 - (.Microsoft Corporation - Application d’ouverture de session Windows.) -- C:\WINDOWS\System32\Winlogon.exe [572416] © [MD5.AFCAB4DC692CCE37E283B00E2D7B438F] - 24/09/2014 - (.Microsoft Corporation - Bibliothèque de licences.) -- C:\WINDOWS\System32\sppcomapi.dll [447488] © [MD5.A5675939CF0F99B20B5A3CFCC3C1B46A] - 29/10/2014 - (.Microsoft Corporation - DNS DLL de l’API Client.) -- C:\WINDOWS\System32\dnsapi.dll [657920] © [MD5.BD9C7A068C46053F8747CEA73B5930AB] - 29/10/2014 - (.Microsoft Corporation - DNS DLL de l’API Client.) -- C:\WINDOWS\Syswow64\dnsapi.dll [498688] © [MD5.E37F897ED7B5AFF79B1398258DB96BD9] - 24/09/2014 - (.Microsoft Corporation - DLL client de l’API uilisateur de Windows m.) -- C:\WINDOWS\System32\fr-FR\user32.dll.mui [19456] © [MD5.A460C3AF3755A2A79A3C8EFE72E147B5] - 13/10/2015 - (.Microsoft Corporation - Pilote de fonction connexe pour WinSock.) -- C:\WINDOWS\System32\drivers\AFD.sys [559616] © [MD5.74B14192CF79A72F7536B27CB8814FBD] - 22/08/2013 - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) -- C:\WINDOWS\System32\drivers\atapi.sys [26464] © [MD5.2FA6510E33F7DEFEC03658B74101A9B9] - 22/08/2013 - (.Microsoft Corporation - CD-ROM File System Driver.) -- C:\WINDOWS\System32\drivers\Cdfs.sys [88576] © [MD5.C6796EA22B513E3457514D92DCDB1A3D] - 22/08/2013 - (.Microsoft Corporation - SCSI CD-ROM Driver.) -- C:\WINDOWS\System32\drivers\Cdrom.sys [164352] © [MD5.A03F362C5557E238CBFA914689C77248] - 24/09/2014 - (.Microsoft Corporation - DFS Namespace Client Driver.) -- C:\WINDOWS\System32\drivers\DfsC.sys [134144] © [MD5.D4B7ED39C7900384D9E5C1283F1E7926] - 24/09/2014 - (.Microsoft Corporation - High Definition Audio Bus Driver.) -- C:\WINDOWS\System32\drivers\HDAudBus.sys [76800] © [MD5.49EE0AE9E5B64FFBBD06D55C4984B598] - 04/11/2014 - (.Microsoft Corporation - Pilote de port i8042.) -- C:\WINDOWS\System32\drivers\i8042prt.sys [108544] © [MD5.B7342B3C58E91107F6E946A93D9D4EFD] - 24/09/2014 - (.Microsoft Corporation - IP Network Address Translator.) -- C:\WINDOWS\System32\drivers\IpNat.sys [142848] © [MD5.89DE71940A0E7F5BA617AE08321EF5C3] - 10/10/2015 - (.Microsoft Corporation - Minirdr SMB Windows NT.) -- C:\WINDOWS\System32\drivers\MRxSmb.sys [401408] © [MD5.0217532E19A748F0E5D569307363D5FD] - 22/08/2013 - (.Microsoft Corporation - MBT Transport driver.) -- C:\WINDOWS\System32\drivers\netBT.sys [282624] © [MD5.7F68063A5A0461E02BC860CE0E6BFDDC] - 15/10/2014 - (.Microsoft Corporation - Pilote du système de fichiers NT.) -- C:\WINDOWS\System32\drivers\ntfs.sys [2025792] © [MD5.764B1121867B2D9B31C491668AC72B2B] - 22/08/2013 - (.Microsoft Corporation - Pilote de port parallèle.) -- C:\WINDOWS\System32\drivers\Parport.sys [94208] © [MD5.BBB6272B7F46C4640A8CDB8A70C3450F] - 22/08/2013 - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) -- C:\WINDOWS\System32\drivers\Rasl2tp.sys [120832] © [MD5.680C1DAE268B6FB67FA21B389A8B79EF] - 24/09/2014 - (.Microsoft Corporation - Redirecteur de périphérique de Microsoft RD.) -- C:\WINDOWS\System32\drivers\rdpdr.sys [195584] © [MD5.E0BD2D83875464FEEEB242CBA8B7E073] - 13/10/2015 - (.Microsoft Corporation - TDI Translation Driver.) -- C:\WINDOWS\System32\drivers\tdx.sys [108032] © [MD5.64CA2B4A49A8EAF495E435623ECCE7DB] - 24/09/2014 - (.Microsoft Corporation - Pilote de cliché instantané du volume.) -- C:\WINDOWS\System32\drivers\volsnap.sys [310080] © ---\\ Liste des services NT non Microsoft et non désactivés (23) - 3s O23 - Service: Adobe Genuine Software Integrity Service (AGSService) . (.Adobe Systems, Incorporated - AGS Service.) - C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe © O23 - Service: (AMD External Events Utility) . (.AMD - AMD External Events Service Module.) - C:\Windows\System32\atiesrxx.exe © O23 - Service: Avast Antivirus (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe © O23 - Service: browser Update Service 2015.11.10.16.18.57 (browserServer_2015.11.10.16.18.57) . (...) - C:\Program Files (x86)\ghokswa Browser\ghokswa\bin\browserServer.exe O23 - Service: Epson Scanner Service (EpsonScanSvc) . (.Seiko Epson Corporation - Epson Scanner Service (64bit).) - C:\Windows\System32\escsvc64.exe © O23 - Service: F06DEFF2-5B9C-490D-910F-35D3A91196222 (F06DEFF2-5B9C-490D-910F-35D3A91196222) . (.Aztec Media Inc - SmdmFConfiguration.) - C:\Program Files (x86)\Assets Manager\smdmf\x64\smdmfmgrc3.cfg =>PUP.Optional.SystemK O23 - Service: GFNEX Service (GFNEXSrv) . (.All rights reserved - GFNEXSrv.) - C:\Program Files (x86)\TOSHIBA\Password Utility\GFNEXSrv.exe O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe © O23 - Service: IhPul (IhPul) . (.tsvr.com - tsvr.com.) - C:\Users\Nico30berges\AppData\Roaming\TSv\TSvr.exe =>PUP.Optional.Elex O23 - Service: Intel(R) Capability Licensing Service Interface (Intel(R) Capability Licensing Service Interface) . (.Intel(R) Corporation - Intel(R) Capability Licensing Service Inter.) - C:\Program Files\Intel\iCLS Client\HeciServer.exe © O23 - Service: Intel(R) ME Service (Intel(R) ME Service) . (.Intel Corporation - Intel(R) ME Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe © O23 - Service: YAC Service (iSafeService) . (.Elex do Brasil Participações Ltda - iSafeSvc.) - C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc.exe =>PUP.Optional.YetAnotherCleaner O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) . (.Intel Corporation - Intel(R) Dynamic Application Loader Host In.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe © O23 - Service: Intel(R) Management and Security Application Local Manageme (LMS) . (.Intel Corporation - Local Manageability Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe © O23 - Service: MyBZGny (MyBZGny) . (.Acute Angle Solutions Ltd - SafeWeb Service.) - C:\ProgramData\xYpovSIAPc\MyBZGny.exe =>PUP.Optional.Salus O23 - Service: Nero Update (NAUpdate) . (.Nero AG - NeroUpdate.) - C:\Program Files (x86)\Nero\Update\NASvc.exe © O23 - Service: PicexaService (PicexaService) . (.Taiwan Shui Mu Chih Ching Technology Limited - Picexa service.) - C:\Program Files (x86)\Picexa\PicexaSvc.exe =>PUP.Optional.Picexa O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files (x86)\Skype\Updater\Updater.exe © O23 - Service: SmdmF Service (SmdmFService) . (.Aztec Media Inc - SmdmF Service.) - C:\Program Files (x86)\Assets Manager\smdmf\SmdmFService.exe =>PUP.Optional.SystemK O23 - Service: SSFK (SSFK) . (.TODO: <公司名> - TODO: <文件说明>.) - C:\Program Files (x86)\SFK\SSFK.exe =>PUP.Optional.MyWebSearch O23 - Service: TOSHIBA Optical Disc Drive Service (TODDSrv) . (.TOSHIBA Corporation - TDCSrv Application.) - C:\Windows\System32\TODDSrv.exe © O23 - Service: TOSHIBA eco Utility Service (TOSHIBA eco Utility Service) . (.TOSHIBA Corporation - TOSHIBA eco Utility Service.) - C:\Program Files\TOSHIBA\Teco\TecoService.exe © O23 - Service: Intel(R) Management and Security Application User Notificat (UNS) . (.Intel Corporation - User Notification Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe © ---\\ Tâches planifiées en automatique (19) - 9s [MD5.B3B87E58466CE9B6662819820010106C] [APT] [avast! Emergency Update] (.AVAST Software.) -- C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [1373872] © [MD5.5C35525CEBE7B59FAFA05D5E98D7EDEF] [APT] [CCleanerSkipUAC] (.Piriform Ltd.) -- C:\Program Files\CCleaner\CCleaner.exe [6602152] © [MD5.A866F0579B81B7E0DADABB92026D5F7C] [APT] [ghokswaBrowserUpdateCore] (...) -- C:\Program Files (x86)\ghokswa Browser\ghokswa\bin\browserServer.exe [377440] [MD5.A866F0579B81B7E0DADABB92026D5F7C] [APT] [ghokswaBrowserUpdateUA] (...) -- C:\Program Files (x86)\ghokswa Browser\ghokswa\bin\browserServer.exe [377440] [MD5.053EEEE1ABAE53F044F1E386E22AE525] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200] © [MD5.053EEEE1ABAE53F044F1E386E22AE525] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200] © [MD5.0C7CF368F3C810C4982DDE08D3C50C45] [APT] [NetEngine] (.Copyright © 2015.) -- C:\ProgramData\NetEngine\bin\D10\netengine.exe [75776] =>PUP.Optional.NetEngine [MD5.00000000000000000000000000000000] [APT] [TaskUserUpdate_wp] (...) -- C:\Users\Nico30berges\AppData\Roaming\~kzsjqyq.exe (.not file.) [0] [MD5.2EBBBFC120593C683796092F2DDA0EFC] [APT] [{7658667E-5A42-4D20-96CB-66D7EAB55164}] (.Google Inc..) -- c:\program files (x86)\Google\Chrome\application\chrome.exe [841032] © O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job [1100] © O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job [1104] © O39 - APT: avast! Emergency Update - (.AVAST Software.) -- C:\WINDOWS\System32\Tasks\avast! Emergency Update [4182] © O39 - APT: CCleanerSkipUAC - (.Piriform Ltd.) -- C:\WINDOWS\System32\Tasks\CCleanerSkipUAC [2810] © O39 - APT: ghokswaBrowserUpdateCore - (...) -- C:\WINDOWS\System32\Tasks\ghokswaBrowserUpdateCore [4122] O39 - APT: ghokswaBrowserUpdateUA - (...) -- C:\WINDOWS\System32\Tasks\ghokswaBrowserUpdateUA [15086] O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore [3840] © O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA [4076] © O39 - APT: NetEngine - (.Copyright © 2015.) -- C:\WINDOWS\System32\Tasks\NetEngine [3424] =>PUP.Optional.NetEngine O39 - APT: TaskUserUpdate_wp - (...) -- C:\WINDOWS\System32\Tasks\TaskUserUpdate_wp [2928] ---\\ Processus lancés (41) - 5s [MD5.497D44465C4FD98FD8F2C5C951595AC7] - (.AMD - AMD External Events Service Module.) -- C:\Windows\System32\atiesrxx.exe [239616] [PID.1020] © [MD5.11F6F9216D8F77EAC196B07D66E819EA] - (.Elex do Brasil Participações Ltda - iSafeSvc.) -- C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc.exe [118048] [PID.392] =>PUP.Optional.Elex [MD5.A03A95B389479B2ADE3A288FA2EA11D1] - (.Elex do Brasil Participações Ltda - iSafeSvc2.) -- C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc2.exe [118048] [PID.524] =>PUP.Optional.Elex [MD5.2B7690544EC46C76809ED6F1DEC3BB52] - (.AMD - AMD External Events Client Module.) -- C:\Windows\System32\atieclxx.exe [571904] [PID.1196] © [MD5.A97E144E84A665B22AE6E6A93E4DD465] - (.AVAST Software - avast! Service.) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe [146600] [PID.1540] © [MD5.4E1D0A246E10CFDDBF856432418DE404] - (.All rights reserved - GFNEXSrv.) -- C:\Program Files (x86)\TOSHIBA\Password Utility\GFNEXSrv.exe [156672] [PID.1892] [MD5.5906AA054C3FE8760721C353A359C2BB] - (.Taiwan Shui Mu Chih Ching Technology Limited - Picexa service.) -- C:\Program Files (x86)\Picexa\PicexaSvc.exe [722400] [PID.1924] =>PUP.Optional.Picexa [MD5.0C7CF368F3C810C4982DDE08D3C50C45] - (.Copyright © 2015 - NetEngine.) -- C:\ProgramData\NetEngine\bin\D10\netengine.exe [75776] [PID.1432] =>PUP.Optional.NetEngine [MD5.D89DD60F108E6E5944029EF68E0438ED] - (.Adobe Systems, Incorporated - AGS Service.) -- C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2015936] [PID.2052] © [MD5.5C76D5C030CB4E692AA28E2FF76FF86D] - (.tsvr.com - tsvr.com.) -- C:\Users\Nico30berges\AppData\Roaming\TSv\TSvr.exe [396944] [PID.2236] =>PUP.Optional.Elex [MD5.C99F8E90DE4B8F0C7FE15BB1CBCD29DC] - (.Intel(R) Corporation - Intel(R) Capability Licensing Service Inter.) -- C:\Program Files\Intel\iCLS Client\HeciServer.exe [635104] [PID.2260] © [MD5.78ABBE558F57144047F10A0F50FE4B2F] - (.Intel Corporation - Intel(R) Dynamic Application Loader Host In.) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720] [PID.2300] © [MD5.792C31D38297E321D686DB43FCC7C2EE] - (.Aztec Media Inc - SmdmF Service.) -- C:\Program Files (x86)\Assets Manager\smdmf\SmdmFService.exe [3570704] [PID.2412] =>PUP.Optional.SystemK [MD5.D5FB37BC0C0A09030310DBCF8D8553FE] - (.TODO: <公司名> - TODO: <文件说明>.) -- C:\Program Files (x86)\SFK\SSFK.exe [458400] [PID.2464] [MD5.ED32035BDFECED1AD66D459FD9CC1140] - (.TOSHIBA Corporation - TDCSrv Application.) -- C:\Windows\System32\TODDSrv.exe [140632] [PID.2516] © [MD5.20ECD0A490A121CB34F553FAD1DBBD39] - (.Seiko Epson Corporation - Epson Scanner Service (64bit).) -- C:\Windows\System32\escsvc64.exe [135824] [PID.2592] © [MD5.BB33C2B49EAE9BB448E99B6381149A3D] - (.Acute Angle Solutions Ltd - SafeWeb Service.) -- C:\ProgramData\xYpovSIAPc\MyBZGny.exe [2726256] [PID.2624] =>PUP.Optional.Salus [MD5.4D7977197C3EC8C65F533E8A84DE229C] - (.TOSHIBA Corporation - TOSHIBA eco Utility Service.) -- C:\Program Files\TOSHIBA\Teco\TecoService.exe [291240] [PID.1884] © [MD5.053EEEE1ABAE53F044F1E386E22AE525] - (.Google Inc. - Programme d'installation de Google.) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200] [PID.4056] © [MD5.6ECE958639BB8C5944C494062D6263BB] - (.Elex do Brasil Participações Ltda - YACTray.) -- C:\Program Files (x86)\Elex-tech\YAC\iSafeTray.exe [369488] [PID.3272] =>PUP.Optional.Elex [MD5.A72BB48D9014A7D7C05F02F595F52D60] - (.Google Inc. - Google Crash Handler.) -- C:\Program Files (x86)\Google\Update\1.3.28.15\GoogleCrashHandler.exe [245576] [PID.472] © [MD5.CCC3FE1DDCCF99633539B3D7681EF7D7] - (.Avast Software - AvastVirtualBox Interface.) -- C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4047768] [PID.4152] © [MD5.E337785DA1958E9AB02DDB2369EF46E8] - (.Google Inc. - Google Crash Handler.) -- C:\Program Files (x86)\Google\Update\1.3.28.15\GoogleCrashHandler64.exe [307016] [PID.4248] © [MD5.57C4B4289DAB34CBAEEB92865C6BC022] - (.TOSHIBA Corporation - Resident module of eco Utility.) -- C:\Program Files\TOSHIBA\Teco\TecoResident.exe [169896] [PID.5636] © [MD5.E1F0D11AA7B9963AB155BAAAC17A4A77] - (.The Ghokswa Authors - Ghokswa.) -- C:\Program Files (x86)\ghokswa Browser\ghokswa\chrome.exe [905824] [PID.5644] [MD5.E1F0D11AA7B9963AB155BAAAC17A4A77] - (.The Ghokswa Authors - Ghokswa.) -- C:\Program Files (x86)\ghokswa Browser\ghokswa\chrome.exe [905824] [PID.6120] [MD5.9656F8E29F6C3161A3E99BCD3A472FF9] - (.Intel Corporation - Intel(R) ME Service.) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129856] [PID.3780] © [MD5.2C24DC448DBE8DB9BE1441B824C57E79] - (.Intel Corporation - Local Manageability Service.) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [277824] [PID.4308] © [MD5.E0E4A1F81A7D69C595A8A9DDAD084C19] - (.Nero AG - NeroUpdate.) -- C:\Program Files (x86)\Nero\Update\NASvc.exe [769432] [PID.5964] © [MD5.E1A119AD21F5AFE22EB516C549306D3D] - (.Intel Corporation - User Notification Service.) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [365376] [PID.5992] © [MD5.E1F0D11AA7B9963AB155BAAAC17A4A77] - (.The Ghokswa Authors - Ghokswa.) -- C:\Program Files (x86)\ghokswa Browser\ghokswa\chrome.exe [905824] [PID.3900] [MD5.E1F0D11AA7B9963AB155BAAAC17A4A77] - (.The Ghokswa Authors - Ghokswa.) -- C:\Program Files (x86)\ghokswa Browser\ghokswa\chrome.exe [905824] [PID.4196] [MD5.B7C0AC916884B05310E85E45C7FC2EDF] - (.TOSHIBA Corporation - TOSHIBA Service Station.) -- C:\Program Files\TOSHIBA\Toshiba Service Station\ToshibaServiceStation.exe [1295496] [PID.5980] © [MD5.8608681DC6E2975815A593209A6432CD] - (.TOSHIBA Corporation - TOSHIBA PC Health Monitor.) -- C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe [458152] [PID.5600] © [MD5.0C7CF368F3C810C4982DDE08D3C50C45] - (.Copyright © 2015 - NetEngine.) -- C:\ProgramData\NetEngine\bin\D10\netengine.exe [75776] [PID.4840] =>PUP.Optional.NetEngine [MD5.22FCD0750F598EFEAC2E438CD08FA0C6] - (.TOSHIBA Corporation - TOSHIBA PC Health Monitor.) -- C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe [518056] [PID.2508] © [MD5.5201342394DD42848027CE96A37043DB] - (.TOSHIBA Corporation - TSS TMachInfo Service.) -- C:\Program Files\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe [53384] [PID.3256] © [MD5.C6B8CB65A3AACABB00F3DAA371C46A3E] - (.Toshiba Europe GmbH - Toshiba TEMPRO.) -- C:\Program Files (x86)\Toshiba TEMPRO\Toshiba.Tempro.UI.CommonNotifier.exe [471416] [PID.2912] © [MD5.E1F0D11AA7B9963AB155BAAAC17A4A77] - (.The Ghokswa Authors - Ghokswa.) -- C:\Program Files (x86)\ghokswa Browser\ghokswa\chrome.exe [905824] [PID.5772] [MD5.E1F0D11AA7B9963AB155BAAAC17A4A77] - (.The Ghokswa Authors - Ghokswa.) -- C:\Program Files (x86)\ghokswa Browser\ghokswa\chrome.exe [905824] [PID.3244] [MD5.6A47DAC7CE1D527F3004DCB97FC4EBED] - (.Copyright (C) 2015 Nicolas Coolman - ZHPDiag.) -- C:\Users\Nico30berges\Desktop\ZHPDiag3.exe [1970176] [PID.6048] © ---\\ Google Chrome, Démarrage,Recherche,Extensions (4) - 0s G2 - GCE: Preference [User Data\Default] [cfhdojbkjhnklbpkdaibdccddilifddb] __MSG_name__ G2 - GCE: Preference [User Data\Default] [gighmmpiobklfepjocnamgkkbiglidom] AdBlock G2 - GCE: Preference [User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] Google Chrome manifest =>.Google Inc. G2 - GCE: Preference [User Data\Default] [ocifcklkibdehekfnmflempfgjhbedch] __MSG_name__ ---\\ Internet Explorer,Démarrage,Recherche,URLSearchHook (20) - 0s R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.v9.com/ R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.v9.com/ R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.v9.com/ R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://search.delta-homes.com/ =>PUP.Optional.Qvo6 R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.v9.com/ R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.delta-homes.com/ =>PUP.Optional.Qvo6 R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://fr.yahoo.com?fr=hp-avast&type=avastbcl R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.sweet-page.com/ =>PUP.Optional.SweetPage R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.v9.com/ R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.sweet-page.com/ =>PUP.Optional.SweetPage R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.sweet-page.com/ =>PUP.Optional.SweetPage R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.v9.com/ R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.sweet-page.com/ =>PUP.Optional.SweetPage R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphean =>.Microsoft Internet Explorer R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV9 = 1 R4 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\PhishingFilter,EnabledV9 = 1 ---\\ Internet Explorer,Proxy Management (4) - 0s R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll ---\\ Internet Explorer,IniFiles, Autoloading programs (3) - 0s F2 - REG:system.ini: UserInit=userinit.exe (.Microsoft Corporation.) © F2 - REG:system.ini: Shell=C:\WINDOWS\explorer.exe (.Microsoft Corporation.) © F2 - REG:system.ini: VMApplet=C:\WINDOWS\SysWOW64\SystemPropertiesPerformance.exe (.Microsoft Corporation.) © ---\\ Etude du fichier hosts (1) - 0s ~ Le fichier hôte est sain (The hosts file is clean) (21) ---\\ Browser Helper Object de navigateur (BHO) (8) - 0s O2 - BHO: Linkey [64Bits] - {4D9101D6-5BA0-4048-BDDE-7E2DF54C8C47} . (.Aztec Media Inc - Linkey.) -- C:\Users\Nico30berges\AppData\Local\Linkey\IEExtension\iedll.dll =>PUP.Optional.LinkeySearch O2 - BHO: ContentBlockerBrowserHelperObject [64Bits] - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} (Orphean) O2 - BHO: VirtualKeyboardBrowserHelperObject [64Bits] - {73455575-E40C-433C-9784-C78DC7761455} (Orphean) O2 - BHO: avast! Online Security [64Bits] - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - IE Webrep plugin.) -- C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll © O2 - BHO: Easy Photo Print [64Bits] - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} (Orphean) O2 - BHO: SkypeIEPluginBHO [64Bits] - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} . (.Microsoft Corporation - Skype Click to Call IE Add-on.) -- C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll © O2 - BHO: URLRedirectionBHO [64Bits] - {B4F3A835-0E21-4959-BA22-42B3008E02FF} . (.Microsoft Corporation - Microsoft Office Document Cache Handler.) -- C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL © O2 - BHO: link filter bho [64Bits] - {E33CF602-D945-461A-83F0-819F76A199F8} (Orphean) ---\\ Applications lancées au démarrage du système (27) - 1s O4 - HKLM\..\Run: [TCrdMain] C:\Program Files (x86)\TOSHIBA\Hotkey\TCrdMain_Win8.exe (.not file.) O4 - HKLM\..\Run: [TODDMain] . (.Copyright (C) 2012 TOSHIBA Corporation. All rights r - TOSHIBA System Settings Service.) -- C:\Program Files (x86)\TOSHIBA\System Setting\TODDMain.exe O4 - HKLM\..\Run: [TecoResident] . (.TOSHIBA Corporation - Resident module of eco Utility.) -- C:\Program Files\TOSHIBA\Teco\TecoResident.exe © O4 - HKLM\..\Run: [TosWaitSrv] C:\Program Files (x86)\TOSHIBA\TPHM\TosWaitSrv.exe (.not file.) O4 - HKLM\..\Run: [SRS Premium Sound HD] . (.SRS Labs, Inc. - SRS Control Panel.) -- C:\Program Files\SRS Labs\SRS Control Panel\SRSPanel_64.exe © O4 - HKLM\..\Run: [MRT] . (.Microsoft Corporation - Outil de suppression de logiciels malveilla.) -- C:\Windows\System32\MRT.exe © O4 - HKLM\..\Run: [AdobeAAMUpdater-1.0] . (.Adobe Systems Incorporated - Adobe Updater Startup Utility.) -- C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe © O4 - HKCU\..\Run: [EPLTarget\P0000000000000000] . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\Windows\System32\spool\drivers\x64\3\E_IATIIKE.EXE © O4 - HKCU\..\Run: [EPLTarget\P0000000000000001] . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\Windows\System32\spool\drivers\x64\3\E_IATIIKE.EXE © O4 - HKCU\..\Run: [SoftonicAssistant] . (.Copyright (C) 2014 - .) -- C:\Users\Nico30berges\AppData\Local\SoftonicAssistant\SoftonicAssistant.exe =>PUP.Optional.Softonic O4 - HKCU\..\Run: [cacaoweb] . (...) -- C:\Users\Nico30berges\AppData\Roaming\cacaoweb\cacaoweb.exe =>.Superfluous.CacaoWeb O4 - HKCU\..\Run: [BingSvc] . (.© 2015 Microsoft Corporation - Microsoft Bing Service.) -- C:\Users\Nico30berges\AppData\Local\Microsoft\BingSvc\BingSvc.exe © O4 - HKCU\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe © O4 - HKLM\..\Wow6432Node\Run: [Intel AppUp(SM) center] . (.Intel Corporation - Intel Services Manager.) -- C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe © O4 - HKLM\..\Wow6432Node\Run: [ToshibaDynamicIconUtility] . (.Toshiba - Toshiba Places Icon Utility.) -- C:\Program Files\TOSHIBA\TOSHIBA Places Icon Utility\TosDIMonitor.exe © O4 - HKLM\..\Wow6432Node\Run: [StartCCC] . (.Advanced Micro Devices, Inc. - Catalyst® Control Center Launcher.) -- C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe © O4 - HKLM\..\Wow6432Node\Run: [TPUReg] . (.Pegatron Corporation - TOSHIBA Password Utility.) -- C:\Program Files (x86)\TOSHIBA\Password Utility\TosPU.exe O4 - HKLM\..\Wow6432Node\Run: [EEventManager] . (.SEIKO EPSON CORPORATION - EEventManager Application.) -- C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe © O4 - HKLM\..\Wow6432Node\Run: [AvastUI.exe] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\avastui.exe © O4 - HKLM\..\Wow6432Node\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe © O4 - HKLM\..\Wow6432Node\Run: [Adobe Creative Cloud] . (.Adobe Systems Incorporated - Adobe Creative Cloud.) -- C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe © O4 - HKUS\S-1-5-21-2954284054-29274719-48499528-1001\..\Run: [EPLTarget\P0000000000000000] . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\Windows\System32\spool\drivers\x64\3\E_IATIIKE.EXE © O4 - HKUS\S-1-5-21-2954284054-29274719-48499528-1001\..\Run: [EPLTarget\P0000000000000001] . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\Windows\System32\spool\drivers\x64\3\E_IATIIKE.EXE © O4 - HKUS\S-1-5-21-2954284054-29274719-48499528-1001\..\Run: [SoftonicAssistant] . (.Copyright (C) 2014 - .) -- C:\Users\Nico30berges\AppData\Local\SoftonicAssistant\SoftonicAssistant.exe =>PUP.Optional.Softonic O4 - HKUS\S-1-5-21-2954284054-29274719-48499528-1001\..\Run: [cacaoweb] . (...) -- C:\Users\Nico30berges\AppData\Roaming\cacaoweb\cacaoweb.exe =>.Superfluous.CacaoWeb O4 - HKUS\S-1-5-21-2954284054-29274719-48499528-1001\..\Run: [BingSvc] . (.© 2015 Microsoft Corporation - Microsoft Bing Service.) -- C:\Users\Nico30berges\AppData\Local\Microsoft\BingSvc\BingSvc.exe © O4 - HKUS\S-1-5-21-2954284054-29274719-48499528-1001\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe © ---\\ Modification Domaine/Adresses DNS (4) - 0s O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254 O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpDomain = lan O17 - HKLM\System\CS1\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254 O17 - HKLM\System\CS1\Services\Tcpip\Parameters: DhcpDomain = lan ---\\ Protocole additionnel (22) - 1s O18 - Handler: about [64Bits] - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll © O18 - Handler: cdl [64Bits] - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll © O18 - Handler: dvd [64Bits] - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\SysWOW64\MSVidCtl.dll © O18 - Handler: file [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll © O18 - Handler: ftp [64Bits] - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll © O18 - Handler: http [64Bits] - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll © O18 - Handler: https [64Bits] - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll © O18 - Handler: its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\SysWOW64\itss.dll © O18 - Handler: javascript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll © O18 - Handler: local [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll © O18 - Handler: mailto [64Bits] - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll © O18 - Handler: mhtml [64Bits] - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\SysWOW64\inetcomm.dll © O18 - Handler: mk [64Bits] - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll © O18 - Handler: ms-its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\SysWOW64\itss.dll © O18 - Handler: res [64Bits] - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll © O18 - Handler: skypec2c [64Bits] - {91774881-D725-4E58-B298-07617B9B86A8} . (.Microsoft Corporation - Skype Click to Call IE Add-on.) -- C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll © O18 - Handler: tv [64Bits] - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\SysWOW64\MSVidCtl.dll © O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll © O18 - Filter: application/octet-stream [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\SysWOW64\mscoree.dll © O18 - Filter: application/x-complus [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\SysWOW64\mscoree.dll © O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\SysWOW64\mscoree.dll © O18 - Filter: text/xml [64Bits] - {807573E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL © ---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (1) - 0s O20 - AppInit_DLLs: . (...) - C:\Users\Nico30berges\AppData\Local\Linkey\IEExtension\ietlb64.dll =>PUP.Optional.LinkeySearch ---\\ Logiciels installés (87) - 20s O42 - Logiciel: µTorrent - (.BitTorrent Inc..) [HKCU][64Bits] -- uTorrent O42 - Logiciel: Adobe After Effects CC 2014 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {2B22C750-5C3B-4738-B621-BA786AC7A494} © O42 - Logiciel: Adobe Creative Cloud - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Creative Cloud © O42 - Logiciel: Adobe Media Encoder CC 2015 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {0FAC7130-BEC5-47A5-8813-1D339B8326ED} © O42 - Logiciel: Adobe Premiere Pro CC 2015 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {38C72D42-0672-43B1-9E05-E7631684F9A1} © O42 - Logiciel: AMD Accelerated Video Transcoding - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {A04B2417-373C-2BF9-D8C8-48FD027CAE14} © O42 - Logiciel: AMD APP SDK Runtime - (.Advanced Micro Devices Inc..) [HKLM][64Bits] -- {503F672D-6C84-448A-8F8F-4BC35AC83441} © O42 - Logiciel: AMD Catalyst Install Manager - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {95EF3DDB-27C8-CDA9-9E72-5EC3F02C1B02} © O42 - Logiciel: Audacity 2.1.0 - (.Audacity Team.) [HKLM][64Bits] -- Audacity_is1 © O42 - Logiciel: Avast Free Antivirus - (.AVAST Software.) [HKLM][64Bits] -- Avast © O42 - Logiciel: BrowseToSave - (...) [HKLM][64Bits] -- {018043D2-59C4-49E4-AB0F-11E6DA636124} =>PUP.Optional.Multiplug O42 - Logiciel: Catalyst Control Center - Branding - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {CF1F9079-DCB5-4AA3-9015-CAA18A2CFF35} © O42 - Logiciel: CCleaner - (.Piriform.) [HKLM][64Bits] -- CCleaner © O42 - Logiciel: Celtx (2.9.1) - (.Greyfirst.) [HKLM][64Bits] -- Celtx (2.9.1) © O42 - Logiciel: Dropbox - (.Dropbox, Inc..) [HKCU][64Bits] -- Dropbox © O42 - Logiciel: Epson Easy Photo Print 2 - (.SEIKO EPSON CORPORATION.) [HKLM][64Bits] -- {02A312B5-1542-47B6-BFE9-F51358C39E86} © O42 - Logiciel: Epson Easy Photo Print Plug-in for PMB(Picture Motion Browser) - (.SEIKO EPSON CORPORATION2.) [HKLM][64Bits] -- {B2D55EB8-32C5-4B43-9006-9E97DECBA178} © O42 - Logiciel: Epson Event Manager - (.Seiko Epson Corporation.) [HKLM][64Bits] -- {BECE9CCD-83F6-4BAA-9B26-227DF7D2E932} © O42 - Logiciel: Epson Guide réseau EPSON XP-302 303 305 306 Series - (...) [HKLM][64Bits] -- EPSON XP-302 303 305 306 Series Netg O42 - Logiciel: EPSON Scan - (.Seiko Epson Corporation.) [HKLM][64Bits] -- EPSON Scanner © O42 - Logiciel: EPSON XP-302 303 305 306 Series Printer Uninstall - (.SEIKO EPSON Corporation.) [HKLM][64Bits] -- EPSON XP-302 303 305 306 Series © O42 - Logiciel: EpsonNet Print - (.SEIKO EPSON CORPORATION.) [HKLM][64Bits] -- {3E31400D-274E-4647-916C-2CACC3741799} © O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM][64Bits] -- Google Chrome © O42 - Logiciel: Google Earth - (.Google.) [HKLM][64Bits] -- {817750FA-EC6A-485D-9901-0683AE6FFDF1} © O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {60EC980A-BDA2-4CB6-A427-B07A5498B4CA} © O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} © O42 - Logiciel: Guide des opérations de base EPSON XP-302 303 305 306 Series - (...) [HKLM][64Bits] -- EPSON XP-302 303 305 306 Series Bog O42 - Logiciel: Guide d'utilisation EPSON XP-302 303 305 306 Series - (...) [HKLM][64Bits] -- EPSON XP-302 303 305 306 Series Useg O42 - Logiciel: InqScribe 2.2.3.258 - (.Inquirium, LLC.) [HKLM][64Bits] -- InqScribe_is1 O42 - Logiciel: Intel AppUp(SM) center - (.Intel.) [HKLM][64Bits] -- Intel AppUp(SM) center 33268 © O42 - Logiciel: Intel(R) Management Engine Components - (.Intel Corporation.) [HKLM][64Bits] -- {65153EA5-8B6E-43B6-857B-C6E4FC25798A} © O42 - Logiciel: Intel(R) Rapid Storage Technology - (.Intel Corporation.) [HKLM][64Bits] -- {3E29EE6C-963A-4aae-86C1-DC237C4A49FC} © O42 - Logiciel: Intel® Trusted Connect Service Client - (.Intel Corporation.) [HKLM][64Bits] -- {F4404AFD-2EF3-40C1-8C09-29E5F3B6972B} © O42 - Logiciel: Java 7 Update 60 - (.Oracle.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F03217060FF} © O42 - Logiciel: Kaspersky Anti-Virus 2013 - (.Kaspersky Lab.) [HKLM][64Bits] -- {560985FB-4B76-4121-9189-7A2CDC7886D6} © O42 - Logiciel: Linkey - (.Aztec Media Inc.) [HKCU][64Bits] -- Linkey =>PUP.Optional.LinkeySearch O42 - Logiciel: MEGAsync - (.Mega Limited.) [HKLM][64Bits] -- MEGAsync © O42 - Logiciel: Nero 12 Essentials Toshiba - (.Nero AG.) [HKLM][64Bits] -- {BA8958DC-ADD7-41E5-8436-5883C7E871C7} © O42 - Logiciel: Nero BackItUp - (.Nero AG.) [HKLM][64Bits] -- {0071820F-09B0-4998-8320-F89629DCBC99} © O42 - Logiciel: Nero BackItUp Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {EF0D1292-8FC1-41BE-9740-DBC134F66415} © O42 - Logiciel: Nero Blu-ray Player - (.Nero AG.) [HKLM][64Bits] -- {A2FE691E-3F8E-4E30-AA7D-FF17AC77EA87} © O42 - Logiciel: Nero Blu-ray Player Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {5B79E730-D897-4B8F-A1AD-7BB2D1F22B96} © O42 - Logiciel: Nero BurnRights - (.Nero AG.) [HKLM][64Bits] -- {1001266B-D4BB-46D9-B023-2612A8CE3A31} © O42 - Logiciel: Nero BurnRights Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {8E7EABFA-BF37-4824-B792-4220C9E04233} © O42 - Logiciel: Nero ControlCenter - (.Nero AG.) [HKLM][64Bits] -- {ABC88553-8770-4B97-B43E-5A90647A5B63} © O42 - Logiciel: Nero ControlCenter Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {C994C746-C6D0-4EBA-B09E-DF7B18381B69} © O42 - Logiciel: Nero Core Components - (.Nero AG.) [HKLM][64Bits] -- {BEBEE34D-84A2-4EDD-8BEA-96CC54371263} © O42 - Logiciel: Nero Express - (.Nero AG.) [HKLM][64Bits] -- {848A7C68-0ADC-4193-8A89-2CEA78E56A0C} © O42 - Logiciel: Nero Express Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {0708FF30-78C0-47B0-81F0-C84604DC769C} © O42 - Logiciel: Nero Kwik Media - (.Nero AG.) [HKLM][64Bits] -- {052A1E34-A54B-458C-A4E3-24C3E054754A} © O42 - Logiciel: Nero Kwik Media Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {1F16820E-D0E7-4636-939E-45CBFEFB06E1} © O42 - Logiciel: Nero Kwik Themes Basic - (.Nero AG.) [HKLM][64Bits] -- {1B6F5E51-575E-4693-BCA2-7543570D076D} © O42 - Logiciel: Nero Launcher - (.Nero AG.) [HKLM][64Bits] -- {0E4630AF-0AB7-440E-A978-1A78FC4F43B9} © O42 - Logiciel: Nero RescueAgent - (.Nero AG.) [HKLM][64Bits] -- {B953732D-B623-4E84-B369-CFFF7B1AE06F} © O42 - Logiciel: Nero RescueAgent Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {0B311221-05A5-4766-8D03-7A6446794156} © O42 - Logiciel: Nero SharedVideoCodecs - (.Nero AG.) [HKLM][64Bits] -- {2432E589-6256-4513-B0BF-EFA8E325D5F0} © O42 - Logiciel: Nero Update - (.Nero AG.) [HKLM][64Bits] -- {65BB0407-4CC8-4DC7-952E-3EEFDF05602A} © O42 - Logiciel: OpenOffice.org 3.4.1 - (.Apache Software Foundation.) [HKLM][64Bits] -- {9F1F2AEA-C72A-4DD6-991E-C5506A5625E4} © O42 - Logiciel: Picexa - (.Taiwan Shui Mu Chih Ching Technology Limited.) [HKLM][64Bits] -- Picexa =>PUP.Optional.Picexa O42 - Logiciel: Pinnacle VideoSpin - (.Pinnacle Systems.) [HKLM][64Bits] -- {FEB15887-0932-4D2D-BB85-6AC03FBF1AA8} © O42 - Logiciel: Premium Sound HD - (.SRS Labs, Inc..) [HKLM][64Bits] -- {94F03B8E-CB73-4653-AFE9-79112C01FED2} © O42 - Logiciel: Safe Web - (.Acute Angle Solutions Ltd.) [HKLM][64Bits] -- SafeWeb =>PUP.Optional.Multiplug O42 - Logiciel: Settings Manager - (.Aztec Media Inc.) [HKLM][64Bits] -- Settings Manager =>PUP.Optional.SystemK O42 - Logiciel: Shared C Run-time for x64 - (.McAfee.) [HKLM][64Bits] -- {EF79C448-6946-4D71-8134-03407888C054} © O42 - Logiciel: Skype Click to Call - (.Microsoft Corporation.) [HKLM][64Bits] -- {6D1221A9-17BF-4EC0-81F2-27D30EC30701} © O42 - Logiciel: Skype™ 7.12 - (.Skype Technologies S.A..) [HKLM][64Bits] -- {6A0549A9-1B96-498C-ACBC-3943001FEB19} © O42 - Logiciel: Softonic Assistant - (.Softonic International S.A..) [HKCU][64Bits] -- SoftonicAssistant =>PUP.Optional.Softonic O42 - Logiciel: Software Updater - (.SEIKO EPSON CORPORATION.) [HKLM][64Bits] -- {A737E18A-5171-40D0-8034-7DD243420081} © O42 - Logiciel: sweet-page uninstall - (.sweet-page.) [HKLM][64Bits] -- sweet-page uninstall =>PUP.Optional.SweetPage O42 - Logiciel: TOSHIBA Desktop Assist - (.Toshiba Corporation.) [HKLM][64Bits] -- {95CCACF0-010D-45F0-82BF-858643D8BC02} © O42 - Logiciel: TOSHIBA eco Utility - (.Toshiba Corporation.) [HKLM][64Bits] -- {5944B9D4-3C2A-48DE-931E-26B31714A2F7} © O42 - Logiciel: TOSHIBA Function Key - (.Toshiba Corporation.) [HKLM][64Bits] -- {16562A90-71BC-41A0-B890-D91B0C267120} © O42 - Logiciel: TOSHIBA Manuals - (.TOSHIBA.) [HKLM][64Bits] -- {90FF4432-21B7-4AF6-BA6E-FB8C1FED9173} © O42 - Logiciel: Toshiba Password Utility - (.Toshiba Corporation.) [HKLM][64Bits] -- InstallShield_{6D35FF17-A8B3-43D3-917E-5A1F2C3FB628} © O42 - Logiciel: TOSHIBA PC Health Monitor - (.Toshiba Corporation.) [HKLM][64Bits] -- {9DECD0F9-D3E8-48B0-A390-1CF09F54E3A4} © O42 - Logiciel: Toshiba Places Icon Utility - (.TOSHIBA.) [HKLM][64Bits] -- {C991A8C4-307C-4FDD-8AAE-A1BF44881E95} © O42 - Logiciel: TOSHIBA Recovery Media Creator - (.Toshiba Corporation.) [HKLM][64Bits] -- {B65BBB06-1F8E-48F5-8A54-B024A9E15FDF} © O42 - Logiciel: TOSHIBA Resolution+ Plug-in for Windows Media Player - (.TOSHIBA Corporation.) [HKLM][64Bits] -- {6CB76C9D-80C2-4CB3-A4CD-D96B239E3F94} © O42 - Logiciel: TOSHIBA Service Station - (.TOSHIBA.) [HKLM][64Bits] -- {B8C8422F-01F1-4791-B084-047AAFF9BFCC} © O42 - Logiciel: TOSHIBA System Driver - (.Toshiba Corporation.) [HKLM][64Bits] -- {1E6A96A1-2BAB-43EF-8087-30437593C66C} © O42 - Logiciel: TOSHIBA System Settings - (.Toshiba Corporation.) [HKLM][64Bits] -- {05A55927-DB9B-4E26-BA44-828EBFF829F0} © O42 - Logiciel: Toshiba TEMPRO - (.Toshiba Europe GmbH.) [HKLM][64Bits] -- {F76F5214-83A8-4030-80C9-1EF57391D72A} © O42 - Logiciel: TOSHIBA VIDEO PLAYER - (.Toshiba Corporation.) [HKLM][64Bits] -- {FF07604E-C860-40E9-A230-E37FA41F103A} © O42 - Logiciel: VLC media player 2.0.4 - (.VideoLAN.) [HKLM][64Bits] -- VLC media player © O42 - Logiciel: Welcome App (Start-up experience) - (.Nero AG.) [HKLM][64Bits] -- {828175FA-7307-4DBF-95AD-9CEE086B6F45} © O42 - Logiciel: WinRAR 5.21 (64-bit) - (.win.rar GmbH.) [HKLM][64Bits] -- WinRAR archiver © O42 - Logiciel: YAC(Yet Another Cleaner!) - (.ELEX DO BRASIL PARTICIPAÇÕES LTDA.) [HKLM][64Bits] -- iSafe =>PUP.Optional.Elex ---\\ HKCU & HKLM Software Keys (113) - 20s HKLM\SOFTWARE\Wow6432Node\ABBYY HKLM\SOFTWARE\Wow6432Node\Adobe HKLM\SOFTWARE\Wow6432Node\ADSRemoval HKLM\SOFTWARE\Wow6432Node\AdwCleaner HKLM\SOFTWARE\Wow6432Node\Apple Computer, Inc. HKLM\SOFTWARE\Wow6432Node\ATI HKLM\SOFTWARE\Wow6432Node\ATI Technologies HKLM\SOFTWARE\Wow6432Node\AVAST Software HKLM\SOFTWARE\Wow6432Node\delta-homesSoftware =>PUP.Optional.DeltaHomes HKLM\SOFTWARE\Wow6432Node\DivX HKLM\SOFTWARE\Wow6432Node\dotNetInstaller HKLM\SOFTWARE\Wow6432Node\Elex-tech HKLM\SOFTWARE\Wow6432Node\EPSON HKLM\SOFTWARE\Wow6432Node\EpsonNet HKLM\SOFTWARE\Wow6432Node\FAST Multimedia HKLM\SOFTWARE\Wow6432Node\ghokswa HKLM\SOFTWARE\Wow6432Node\Google HKLM\SOFTWARE\Wow6432Node\Greyfirst HKLM\SOFTWARE\Wow6432Node\greyfirst.ca HKLM\SOFTWARE\Wow6432Node\hdcode HKLM\SOFTWARE\Wow6432Node\IHProtect =>PUP.Optional.AgentODR HKLM\SOFTWARE\Wow6432Node\IM Providers HKLM\SOFTWARE\Wow6432Node\InstallShield HKLM\SOFTWARE\Wow6432Node\Insyde HKLM\SOFTWARE\Wow6432Node\Intel HKLM\SOFTWARE\Wow6432Node\IObit HKLM\SOFTWARE\Wow6432Node\JavaSoft HKLM\SOFTWARE\Wow6432Node\JreMetrics HKLM\SOFTWARE\Wow6432Node\KasperskyLab HKLM\SOFTWARE\Wow6432Node\Khronos HKLM\SOFTWARE\Wow6432Node\Linkey =>PUP.Optional.LinkeySearch HKLM\SOFTWARE\Wow6432Node\Loader HKLM\SOFTWARE\Wow6432Node\Macromedia HKLM\SOFTWARE\Wow6432Node\Mozilla HKLM\SOFTWARE\Wow6432Node\mozilla.org HKLM\SOFTWARE\Wow6432Node\MozillaPlugins HKLM\SOFTWARE\Wow6432Node\Nero HKLM\SOFTWARE\Wow6432Node\Nuance HKLM\SOFTWARE\Wow6432Node\ODBC HKLM\SOFTWARE\Wow6432Node\Pegasus Imaging HKLM\SOFTWARE\Wow6432Node\Picexa =>PUP.Optional.Picexa HKLM\SOFTWARE\Wow6432Node\PicexaSvc =>PUP.Optional.Picexa HKLM\SOFTWARE\Wow6432Node\Pinnacle Systems HKLM\SOFTWARE\Wow6432Node\Piriform HKLM\SOFTWARE\Wow6432Node\Realtek HKLM\SOFTWARE\Wow6432Node\Realtek Semiconductor Corp. HKLM\SOFTWARE\Wow6432Node\SEIKO EPSON CORPORATION HKLM\SOFTWARE\Wow6432Node\SEIKO EPSON CORPORATION2 HKLM\SOFTWARE\Wow6432Node\Skype HKLM\SOFTWARE\Wow6432Node\SmdmF =>PUP.Optional.SettingsManager HKLM\SOFTWARE\Wow6432Node\sMedio HKLM\SOFTWARE\Wow6432Node\Sony Corporation HKLM\SOFTWARE\Wow6432Node\SupDp =>PUP.Optional.SupTab HKLM\SOFTWARE\Wow6432Node\supTab =>PUP.Optional.SupTab HKLM\SOFTWARE\Wow6432Node\supWindowsMangerProtect =>PUP.Optional.WpManager HKLM\SOFTWARE\Wow6432Node\sweet-pageSoftware =>PUP.Optional.SweetPage HKLM\SOFTWARE\Wow6432Node\Synaptics HKLM\SOFTWARE\Wow6432Node\TOSHIBA HKLM\SOFTWARE\Wow6432Node\Toshiba Corporation HKLM\SOFTWARE\Wow6432Node\TSv =>PUP.Optional.Elex HKLM\SOFTWARE\Wow6432Node\VideoLAN HKLM\SOFTWARE\Wow6432Node\Volatile HKLM\SOFTWARE\Wow6432Node\WildTangent HKLM\SOFTWARE\Wow6432Node\RegisteredApplications HKCU\SOFTWARE\Adobe HKCU\SOFTWARE\AppDataLow HKCU\SOFTWARE\ATI HKCU\SOFTWARE\AVAST Software HKCU\SOFTWARE\BitTorrent HKCU\SOFTWARE\cacaoweb =>.Superfluous.CacaoWeb HKCU\SOFTWARE\CDDB HKCU\SOFTWARE\Digital River Mso HKCU\SOFTWARE\DivXNetworks HKCU\SOFTWARE\Dnldstr_Aggregator HKCU\SOFTWARE\Dropbox HKCU\SOFTWARE\Epson HKCU\SOFTWARE\EPSON Software Updater HKCU\SOFTWARE\ghokswa HKCU\SOFTWARE\Google HKCU\SOFTWARE\Hewlett-Packard HKCU\SOFTWARE\IM Providers HKCU\SOFTWARE\InstallCore =>Adware.InstallCore HKCU\SOFTWARE\JavaSoft HKCU\SOFTWARE\KasperskyLab HKCU\SOFTWARE\Linkey =>PUP.Optional.LinkeySearch HKCU\SOFTWARE\Macromedia HKCU\SOFTWARE\Mine HKCU\SOFTWARE\mozilla HKCU\SOFTWARE\MozillaPlugins HKCU\SOFTWARE\Nero HKCU\SOFTWARE\Netscape HKCU\SOFTWARE\ODBC HKCU\SOFTWARE\OpenOffice.org HKCU\SOFTWARE\Pinnacle Systems HKCU\SOFTWARE\Piriform HKCU\SOFTWARE\RegisteredApplications HKCU\SOFTWARE\SEIKO EPSON CORPORATION HKCU\SOFTWARE\Skype HKCU\SOFTWARE\SmdmF =>PUP.Optional.SettingsManager HKCU\SOFTWARE\Softonic =>PUP.Optional.Softonic HKCU\SOFTWARE\Synaptics HKCU\SOFTWARE\teras games HKCU\SOFTWARE\Toggle HKCU\SOFTWARE\Toshiba HKCU\SOFTWARE\Trolltech HKCU\SOFTWARE\V9 =>PUP.Optional.V9Software HKCU\SOFTWARE\WinRAR HKCU\SOFTWARE\WinRAR SFX HKCU\SOFTWARE\Wow6432Node HKCU\SOFTWARE\ZebHelpProcess Helper HKCU\SOFTWARE\AppDataLow\Software HKCU\SOFTWARE\AppDataLow\Software\DynConIE =>PUP.Optional.DynConIE HKCU\SOFTWARE\AppDataLow\Software\JavaSoft ---\\ Contenu des dossiers Programmes (222) - 22s O43 - CFD: 15/10/2015 - [] D -- C:\Program Files (x86)\Adobe O43 - CFD: 03/11/2012 - [] D -- C:\Program Files (x86)\AMD APP O43 - CFD: 03/11/2012 - [] D -- C:\Program Files (x86)\AMD AVT O43 - CFD: 16/03/2015 - [] D -- C:\Program Files (x86)\Assets Manager =>PUP.Optional.SystemK O43 - CFD: 03/11/2012 - [] D -- C:\Program Files (x86)\ATI Technologies O43 - CFD: 12/05/2015 - [] D -- C:\Program Files (x86)\Audacity O43 - CFD: 20/12/2014 - [] D -- C:\Program Files (x86)\Celtx O43 - CFD: 15/10/2015 - [] D -- C:\Program Files (x86)\Common Files O43 - CFD: 06/09/2012 - [] D -- C:\Program Files (x86)\eBay O43 - CFD: 28/09/2015 - [] D -- C:\Program Files (x86)\Elex-tech =>PUP.Optional.Elex O43 - CFD: 10/07/2013 - [] D -- C:\Program Files (x86)\epson O43 - CFD: 23/08/2013 - [] D -- C:\Program Files (x86)\EPSON Software O43 - CFD: 18/11/2015 - [] D -- C:\Program Files (x86)\ghokswa Browser O43 - CFD: 25/09/2015 - [] D -- C:\Program Files (x86)\Google O43 - CFD: 21/04/2015 - [] D -- C:\Program Files (x86)\InqScribe O43 - CFD: 15/06/2014 - [] HD -- C:\Program Files (x86)\InstallShield Installation Information O43 - CFD: 03/11/2012 - [] D -- C:\Program Files (x86)\Intel O43 - CFD: 15/10/2015 - [] D -- C:\Program Files (x86)\Internet Explorer O43 - CFD: 05/02/2014 - [] D -- C:\Program Files (x86)\IObit O43 - CFD: 15/06/2014 - [] D -- C:\Program Files (x86)\Java O43 - CFD: 15/12/2014 - [] D -- C:\Program Files (x86)\Kaspersky Lab O43 - CFD: 28/01/2013 - [] D -- C:\Program Files (x86)\Microsoft Analysis Services O43 - CFD: 28/01/2013 - [] D -- C:\Program Files (x86)\Microsoft Office O43 - CFD: 15/12/2014 - [] D -- C:\Program Files (x86)\Microsoft.NET O43 - CFD: 09/10/2015 - [] D -- C:\Program Files (x86)\MiuiTab =>PUP.Optional.MiuiTab O43 - CFD: 06/02/2014 - [] D -- C:\Program Files (x86)\Mozilla Firefox O43 - CFD: 15/12/2014 - [] D -- C:\Program Files (x86)\MSBuild O43 - CFD: 06/09/2012 - [] D -- C:\Program Files (x86)\Nero O43 - CFD: 16/07/2013 - [] D -- C:\Program Files (x86)\OpenOffice.org 3 O43 - CFD: 24/11/2015 - [] D -- C:\Program Files (x86)\Picexa =>PUP.Optional.Picexa O43 - CFD: 15/10/2015 - [] D -- C:\Program Files (x86)\Pinnacle O43 - CFD: 15/12/2014 - [] D -- C:\Program Files (x86)\Reference Assemblies O43 - CFD: 04/02/2014 - [] D -- C:\Program Files (x86)\SearchProtect111202796 =>PUP.Optional.SearchProtect O43 - CFD: 20/12/2014 - [] D -- C:\Program Files (x86)\Settings Manager =>PUP.Optional.SettingsManager O43 - CFD: 24/11/2015 - [] D -- C:\Program Files (x86)\SFK =>PUP.Optional.MyWebSearch O43 - CFD: 14/10/2015 - [] RD -- C:\Program Files (x86)\Skype O43 - CFD: 07/04/2014 - [0] HD -- C:\Program Files (x86)\Temp O43 - CFD: 15/06/2014 - [] D -- C:\Program Files (x86)\TOSHIBA O43 - CFD: 19/08/2013 - [] D -- C:\Program Files (x86)\Toshiba TEMPRO O43 - CFD: 15/02/2013 - [] D -- C:\Program Files (x86)\VideoLAN O43 - CFD: 13/08/2015 - [] D -- C:\Program Files (x86)\Windows Defender O43 - CFD: 16/03/2015 - [] D -- C:\Program Files (x86)\Windows Mail O43 - CFD: 16/03/2015 - [] D -- C:\Program Files (x86)\Windows Media Player O43 - CFD: 16/03/2015 - [] D -- C:\Program Files (x86)\Windows Multimedia Platform O43 - CFD: 22/08/2013 - [] D -- C:\Program Files (x86)\Windows NT O43 - CFD: 16/03/2015 - [] D -- C:\Program Files (x86)\Windows Photo Viewer O43 - CFD: 16/03/2015 - [] D -- C:\Program Files (x86)\Windows Portable Devices O43 - CFD: 15/12/2014 - [] SHD -- C:\Program Files (x86)\Windows Sidebar O43 - CFD: 22/08/2013 - [] D -- C:\Program Files (x86)\WindowsPowerShell O43 - CFD: 17/06/2015 - [0] D -- C:\Program Files (x86)\XTab =>PUP.Optional.XTab O43 - CFD: 16/03/2015 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility O43 - CFD: 16/03/2015 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories O43 - CFD: 16/03/2015 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools O43 - CFD: 15/12/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Catalyst Control Center O43 - CFD: 20/12/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Celtx O43 - CFD: 24/09/2014 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Embedded Lockdown Manager O43 - CFD: 15/12/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON O43 - CFD: 15/12/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epson Software O43 - CFD: 15/12/2014 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games O43 - CFD: 15/12/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome O43 - CFD: 21/04/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\InqScribe O43 - CFD: 15/12/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel AppUp(SM) center O43 - CFD: 15/12/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java O43 - CFD: 22/08/2013 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance O43 - CFD: 15/12/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office O43 - CFD: 15/12/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero O43 - CFD: 23/09/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Picexa =>PUP.Optional.Picexa O43 - CFD: 15/10/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pinnacle VideoSpin O43 - CFD: 10/09/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype O43 - CFD: 15/12/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SRS Labs O43 - CFD: 22/08/2013 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp O43 - CFD: 16/03/2015 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools O43 - CFD: 24/09/2014 - [0] RHD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC O43 - CFD: 15/12/2014 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TOSHIBA O43 - CFD: 15/12/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN O43 - CFD: 15/10/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR O43 - CFD: 05/02/2014 - [] D -- C:\ProgramData\ABBYY O43 - CFD: 15/10/2015 - [] D -- C:\ProgramData\Adobe O43 - CFD: 03/11/2012 - [] D -- C:\ProgramData\AMD O43 - CFD: 22/08/2013 - [0] SHD -- C:\ProgramData\Application Data O43 - CFD: 03/11/2012 - [] D -- C:\ProgramData\ATI O43 - CFD: 15/06/2014 - [] D -- C:\ProgramData\AVAST Software O43 - CFD: 19/11/2015 - [] D -- C:\ProgramData\boost_interprocess O43 - CFD: 25/03/2015 - [] D -- C:\ProgramData\Browser =>PUP.Optional.SpeedBrowser O43 - CFD: 15/12/2014 - [0] SHD -- C:\ProgramData\Bureau O43 - CFD: 22/08/2013 - [0] SHD -- C:\ProgramData\Desktop O43 - CFD: 22/08/2013 - [0] SHD -- C:\ProgramData\Documents O43 - CFD: 29/09/2015 - [] D -- C:\ProgramData\Drocreiirsom O43 - CFD: 23/07/2013 - [] D -- C:\ProgramData\EPSON O43 - CFD: 04/12/2014 - [] D -- C:\ProgramData\Hewlett-Packard O43 - CFD: 12/02/2015 - [] D -- C:\ProgramData\IHProtectUpDate =>PUP.Optional.AgentODR O43 - CFD: 12/05/2013 - [] D -- C:\ProgramData\InstallMate =>PUP.Optional.Tarma O43 - CFD: 03/11/2012 - [] D -- C:\ProgramData\Intel O43 - CFD: 05/02/2014 - [] D -- C:\ProgramData\IObit O43 - CFD: 14/02/2013 - [] D -- C:\ProgramData\IsolatedStorage O43 - CFD: 15/06/2014 - [] D -- C:\ProgramData\Kaspersky Lab O43 - CFD: 29/01/2013 - [] D -- C:\ProgramData\McAfee O43 - CFD: 15/12/2014 - [0] SHD -- C:\ProgramData\Menu Démarrer O43 - CFD: 18/12/2014 - [] SD -- C:\ProgramData\Microsoft O43 - CFD: 11/11/2015 - [] D -- C:\ProgramData\Microsoft Help O43 - CFD: 15/12/2014 - [0] SHD -- C:\ProgramData\Modèles O43 - CFD: 02/11/2013 - [] D -- C:\ProgramData\Mozilla O43 - CFD: 06/09/2012 - [] D -- C:\ProgramData\Nero O43 - CFD: 02/04/2015 - [] D -- C:\ProgramData\NetEngine =>PUP.Optional.NetEngine O43 - CFD: 15/06/2014 - [0] D -- C:\ProgramData\Oracle O43 - CFD: 15/10/2015 - [] D -- C:\ProgramData\Package Cache O43 - CFD: 15/10/2015 - [] D -- C:\ProgramData\Pinnacle O43 - CFD: 15/10/2015 - [] D -- C:\ProgramData\Pinnacle VideoSpin O43 - CFD: 15/12/2014 - [] D -- C:\ProgramData\PRICache O43 - CFD: 04/12/2014 - [] D -- C:\ProgramData\ProductData =>PUP.Optional.Generic O43 - CFD: 19/04/2015 - [] D -- C:\ProgramData\Radio O43 - CFD: 15/10/2015 - [] D -- C:\ProgramData\regid.1986-12.com.adobe O43 - CFD: 16/03/2015 - [] D -- C:\ProgramData\regid.1991-06.com.microsoft O43 - CFD: 20/12/2014 - [] D -- C:\ProgramData\SafeWeb =>PUP.Optional.SafeWeb O43 - CFD: 19/11/2015 - [] D -- C:\ProgramData\Skype O43 - CFD: 24/11/2015 - [] D -- C:\ProgramData\smdmf =>PUP.Optional.SystemK O43 - CFD: 22/08/2013 - [0] SHD -- C:\ProgramData\Start Menu O43 - CFD: 09/03/2013 - [] D -- C:\ProgramData\Sun O43 - CFD: 08/04/2015 - [0] D -- C:\ProgramData\T122078ED O43 - CFD: 22/08/2013 - [0] SHD -- C:\ProgramData\Templates O43 - CFD: 20/01/2013 - [] D -- C:\ProgramData\Toshiba O43 - CFD: 14/02/2013 - [] D -- C:\ProgramData\TOSHIBA Tempro O43 - CFD: 20/01/2013 - [] D -- C:\ProgramData\ToshibaEurope O43 - CFD: 10/07/2013 - [] D -- C:\ProgramData\UDL O43 - CFD: 07/04/2014 - [] D -- C:\ProgramData\WildTangent O43 - CFD: 23/02/2015 - [] D -- C:\ProgramData\WindowsMangerProtect =>PUP.Optional.WpManager O43 - CFD: 20/12/2014 - [] D -- C:\ProgramData\xYpovSIAPc O43 - CFD: 05/02/2014 - [0] D -- C:\ProgramData\{3C5CBD7B-3D1D-411E-96C2-513FFCA84D2D} O43 - CFD: 15/10/2015 - [] D -- C:\Program Files (x86)\Common Files\Adobe O43 - CFD: 03/11/2012 - [] D -- C:\Program Files (x86)\Common Files\ATI Technologies O43 - CFD: 03/11/2012 - [] D -- C:\Program Files (x86)\Common Files\InstallShield O43 - CFD: 15/06/2014 - [] D -- C:\Program Files (x86)\Common Files\Java O43 - CFD: 15/12/2014 - [] D -- C:\Program Files (x86)\Common Files\Microsoft Shared O43 - CFD: 06/09/2012 - [] D -- C:\Program Files (x86)\Common Files\Nero O43 - CFD: 03/11/2012 - [] D -- C:\Program Files (x86)\Common Files\postureAgent O43 - CFD: 22/08/2013 - [] D -- C:\Program Files (x86)\Common Files\Services O43 - CFD: 10/09/2015 - [] D -- C:\Program Files (x86)\Common Files\Skype O43 - CFD: 16/03/2015 - [] D -- C:\Program Files (x86)\Common Files\System O43 - CFD: 15/06/2014 - [] D -- C:\Program Files (x86)\Common Files\Toshiba Shared O43 - CFD: 15/10/2015 - [] D -- C:\Program Files (x86)\Common Files\Yahoo! O43 - CFD: 15/10/2015 - [] D -- C:\Users\Nico30berges\AppData\Roaming\Adobe O43 - CFD: 05/02/2014 - [] D -- C:\Users\Nico30berges\AppData\Roaming\Apple Computer O43 - CFD: 20/01/2013 - [] D -- C:\Users\Nico30berges\AppData\Roaming\ATI O43 - CFD: 13/05/2015 - [] D -- C:\Users\Nico30berges\AppData\Roaming\Audacity O43 - CFD: 15/06/2014 - [] D -- C:\Users\Nico30berges\AppData\Roaming\AVAST Software O43 - CFD: 24/11/2015 - [] D -- C:\Users\Nico30berges\AppData\Roaming\cacaoweb =>.Superfluous.CacaoWeb O43 - CFD: 13/07/2014 - [] D -- C:\Users\Nico30berges\AppData\Roaming\Dropbox O43 - CFD: 13/07/2014 - [] D -- C:\Users\Nico30berges\AppData\Roaming\DropboxMaster O43 - CFD: 23/08/2015 - [] D -- C:\Users\Nico30berges\AppData\Roaming\dvdcss O43 - CFD: 16/10/2015 - [0] D -- C:\Users\Nico30berges\AppData\Roaming\eCyber =>PUP.Optional.Elex O43 - CFD: 28/09/2015 - [] D -- C:\Users\Nico30berges\AppData\Roaming\Elex-tech =>PUP.Optional.Elex O43 - CFD: 06/12/2013 - [] D -- C:\Users\Nico30berges\AppData\Roaming\Epson O43 - CFD: 20/12/2014 - [] D -- C:\Users\Nico30berges\AppData\Roaming\Greyfirst O43 - CFD: 15/12/2014 - [] D -- C:\Users\Nico30berges\AppData\Roaming\Identities O43 - CFD: 21/04/2015 - [] D -- C:\Users\Nico30berges\AppData\Roaming\InqScribe O43 - CFD: 05/02/2014 - [] D -- C:\Users\Nico30berges\AppData\Roaming\IObit O43 - CFD: 20/01/2013 - [] D -- C:\Users\Nico30berges\AppData\Roaming\Macromedia O43 - CFD: 23/09/2015 - [] SD -- C:\Users\Nico30berges\AppData\Roaming\Microsoft O43 - CFD: 02/11/2013 - [] D -- C:\Users\Nico30berges\AppData\Roaming\Mozilla O43 - CFD: 03/02/2014 - [] D -- C:\Users\Nico30berges\AppData\Roaming\Mychromium O43 - CFD: 22/01/2013 - [] D -- C:\Users\Nico30berges\AppData\Roaming\Nero O43 - CFD: 16/07/2013 - [] D -- C:\Users\Nico30berges\AppData\Roaming\OpenOffice.org O43 - CFD: 09/02/2015 - [] D -- C:\Users\Nico30berges\AppData\Roaming\PDAppFlex O43 - CFD: 28/09/2015 - [] D -- C:\Users\Nico30berges\AppData\Roaming\Picexa Viewer =>PUP.Optional.Picexa O43 - CFD: 24/11/2015 - [] D -- C:\Users\Nico30berges\AppData\Roaming\Skype O43 - CFD: 22/01/2013 - [] D -- C:\Users\Nico30berges\AppData\Roaming\sMedio O43 - CFD: 12/02/2015 - [] D -- C:\Users\Nico30berges\AppData\Roaming\sweet-page =>PUP.Optional.SweetPage O43 - CFD: 20/01/2013 - [] D -- C:\Users\Nico30berges\AppData\Roaming\Toshiba O43 - CFD: 23/09/2015 - [] D -- C:\Users\Nico30berges\AppData\Roaming\TSv =>PUP.Optional.Elex O43 - CFD: 16/09/2015 - [] D -- C:\Users\Nico30berges\AppData\Roaming\uTorrent O43 - CFD: 08/11/2015 - [] D -- C:\Users\Nico30berges\AppData\Roaming\vlc O43 - CFD: 07/04/2014 - [] D -- C:\Users\Nico30berges\AppData\Roaming\WildTangent O43 - CFD: 15/06/2014 - [] D -- C:\Users\Nico30berges\AppData\Roaming\WinBatch O43 - CFD: 15/10/2015 - [] D -- C:\Users\Nico30berges\AppData\Roaming\WinRAR O43 - CFD: 25/11/2015 - [] D -- C:\Users\Nico30berges\AppData\Roaming\ZHP O43 - CFD: 10/07/2013 - [] D -- C:\Users\Nico30berges\AppData\Local\ABBYY O43 - CFD: 24/11/2015 - [] D -- C:\Users\Nico30berges\AppData\Local\Adobe O43 - CFD: 15/12/2014 - [0] SHD -- C:\Users\Nico30berges\AppData\Local\Application Data O43 - CFD: 23/01/2013 - [] D -- C:\Users\Nico30berges\AppData\Local\Apps O43 - CFD: 20/01/2013 - [] D -- C:\Users\Nico30berges\AppData\Local\ATI O43 - CFD: 03/02/2014 - [] D -- C:\Users\Nico30berges\AppData\Local\Chromium O43 - CFD: 15/11/2015 - [] D -- C:\Users\Nico30berges\AppData\Local\Diagnostics O43 - CFD: 15/10/2015 - [] D -- C:\Users\Nico30berges\AppData\Local\Downloaded Installations O43 - CFD: 18/05/2015 - [0] D -- C:\Users\Nico30berges\AppData\Local\ElevatedDiagnostics O43 - CFD: 20/07/2015 - [0] SHD -- C:\Users\Nico30berges\AppData\Local\EmieBrowserModeList O43 - CFD: 20/07/2015 - [0] SHD -- C:\Users\Nico30berges\AppData\Local\EmieSiteList O43 - CFD: 20/07/2015 - [0] SHD -- C:\Users\Nico30berges\AppData\Local\EmieUserList O43 - CFD: 10/11/2015 - [] D -- C:\Users\Nico30berges\AppData\Local\ghokswa O43 - CFD: 23/01/2013 - [] D -- C:\Users\Nico30berges\AppData\Local\Google O43 - CFD: 20/12/2014 - [] D -- C:\Users\Nico30berges\AppData\Local\Greyfirst O43 - CFD: 14/06/2015 - [] D -- C:\Users\Nico30berges\AppData\Local\GWX O43 - CFD: 07/03/2013 - [] D -- C:\Users\Nico30berges\AppData\Local\Halite O43 - CFD: 15/12/2014 - [0] SHD -- C:\Users\Nico30berges\AppData\Local\Historique O43 - CFD: 23/07/2015 - [] D -- C:\Users\Nico30berges\AppData\Local\Linkey =>PUP.Optional.LinkeySearch O43 - CFD: 15/10/2015 - [] D -- C:\Users\Nico30berges\AppData\Local\Mega Limited O43 - CFD: 15/10/2015 - [] D -- C:\Users\Nico30berges\AppData\Local\MEGAsync O43 - CFD: 24/08/2015 - [] D -- C:\Users\Nico30berges\AppData\Local\Microsoft O43 - CFD: 31/01/2014 - [] D -- C:\Users\Nico30berges\AppData\Local\Microsoft Help O43 - CFD: 28/01/2013 - [] D -- C:\Users\Nico30berges\AppData\Local\MicrosoftStore O43 - CFD: 02/11/2013 - [] D -- C:\Users\Nico30berges\AppData\Local\Mozilla O43 - CFD: 11/02/2013 - [] D -- C:\Users\Nico30berges\AppData\Local\Nero O43 - CFD: 22/01/2013 - [] D -- C:\Users\Nico30berges\AppData\Local\Nero_AG O43 - CFD: 18/01/2015 - [] D -- C:\Users\Nico30berges\AppData\Local\Packages O43 - CFD: 05/02/2014 - [] D -- C:\Users\Nico30berges\AppData\Local\Programs O43 - CFD: 25/11/2015 - [] D -- C:\Users\Nico30berges\AppData\Local\SafeWeb =>PUP.Optional.SafeWeb O43 - CFD: 25/11/2014 - [] D -- C:\Users\Nico30berges\AppData\Local\Skype O43 - CFD: 19/11/2015 - [] D -- C:\Users\Nico30berges\AppData\Local\SoftonicAssistant =>PUP.Optional.Softonic O43 - CFD: 20/01/2013 - [] D -- C:\Users\Nico30berges\AppData\Local\SRS Labs O43 - CFD: 25/11/2015 - [] D -- C:\Users\Nico30berges\AppData\Local\Temp O43 - CFD: 15/12/2014 - [0] SHD -- C:\Users\Nico30berges\AppData\Local\Temporary Internet Files O43 - CFD: 28/03/2013 - [] D -- C:\Users\Nico30berges\AppData\Local\TOSHIBA O43 - CFD: 30/09/2015 - [] D -- C:\Users\Nico30berges\AppData\Local\VirtualStore O43 - CFD: 15/12/2014 - [] RD -- C:\Users\Nico30berges\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility O43 - CFD: 22/08/2013 - [] RD -- C:\Users\Nico30berges\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories O43 - CFD: 15/10/2015 - [] RD -- C:\Users\Nico30berges\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools O43 - CFD: 15/12/2014 - [] D -- C:\Users\Nico30berges\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox O43 - CFD: 22/08/2013 - [] D -- C:\Users\Nico30berges\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance O43 - CFD: 15/10/2015 - [] D -- C:\Users\Nico30berges\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MEGAsync O43 - CFD: 15/12/2014 - [] SD -- C:\Users\Nico30berges\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OpenOffice.org 3.4.1 O43 - CFD: 15/10/2015 - [] RD -- C:\Users\Nico30berges\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup O43 - CFD: 15/12/2014 - [] RD -- C:\Users\Nico30berges\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools O43 - CFD: 15/10/2015 - [] D -- C:\Users\Nico30berges\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR ---\\ Derniers fichiers créés dans Windows Prefetcher (5) - 29s O45 - LFCP:[MD5.545D09C9F8C2192CC97B704038AFB2DE] 19/11/2015 A -- C:\WINDOWS\Prefetch\CACAOWEB.EXE-FE7C8155.pf =>.Superfluous.CacaoWeb O45 - LFCP:[MD5.E988EC49CF058237596A35D742FC9D8C] 16/10/2015 A -- C:\WINDOWS\Prefetch\PICEXA.EXE-C5E58BD7.pf =>PUP.Optional.Picexa O45 - LFCP:[MD5.357AFA6D5B944E1C7F1216D945509B24] 19/11/2015 A -- C:\WINDOWS\Prefetch\SOFTONICASSISTANT.EXE-871EBB27.pf =>PUP.Optional.Softonic O45 - LFCP:[MD5.1061555F1B1C5D2919F27C922DC7DE54] 20/12/2014 A -- C:\WINDOWS\Prefetch\SOFTONICASSISTANT_V0-1-6.EXE-88FB5BF3.pf =>PUP.Optional.Softonic O45 - LFCP:[MD5.960D82D38458B88F6458FD51F90A94D9] 20/12/2014 A -- C:\WINDOWS\Prefetch\SOFTONICDOWNLOADER_FOR_CELTX.-6D641BBF.pf =>PUP.Optional.Softonic ---\\ ShellIconOverlayIdentifiers (SIOI) (4) - 2s O106 - SIOI: ###MegaShellExtPending [###MegaShellExtPending] - {056D528D-CE28-4194-9BA3-BA2E9197FF8C}. (...) -- C:\Users\Nico30berges\AppData\Local\MEGAsync\ShellExtX32.dll O106 - SIOI: ###MegaShellExtSynced [###MegaShellExtSynced] - {05B38830-F4E9-4329-978B-1DD28605D202}. (...) -- C:\Users\Nico30berges\AppData\Local\MEGAsync\ShellExtX32.dll O106 - SIOI: ###MegaShellExtSyncing [###MegaShellExtSyncing] - {0596C850-7BDD-4C9D-AFDF-873BE6890637}. (...) -- C:\Users\Nico30berges\AppData\Local\MEGAsync\ShellExtX32.dll O106 - SIOI: avast [00avast] - {472083B0-C522-11CF-8763-00608CC02F24}. (.AVAST Software - avast! Shell Extension.) -- C:\Program Files\AVAST Software\Avast\ashShell.dll © ---\\ Liste des pilotes du système (61) - 6s O58 - SDL:2013/08/22 13:43:41 A . (.LSI - LSI 3ware SCSI Storport Driver.) -- C:\WINDOWS\System32\drivers\3ware.sys [108896] © O58 - SDL:2013/08/22 13:43:41 A . (.PMC-Sierra - PMC-Sierra Storport Driver For SPC8x6G SAS.) -- C:\WINDOWS\System32\drivers\adp80xx.sys [782176] © O58 - SDL:2014/02/05 15:56:33 A . (.Advanced Micro Devices, Inc. - AMD Audio Bus Lower Filter.) -- C:\WINDOWS\System32\drivers\amdkmafd.sys [21160] © O58 - SDL:2013/08/22 13:43:41 A . (.Advanced Micro Devices - AHCI 1.3 Device Driver.) -- C:\WINDOWS\System32\drivers\amdsata.sys [79200] © O58 - SDL:2013/08/22 13:43:41 A . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller D.) -- C:\WINDOWS\System32\drivers\amdsbs.sys [259424] © O58 - SDL:2013/08/22 13:43:40 A . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\WINDOWS\System32\drivers\amdxata.sys [25952] © O58 - SDL:2013/08/22 13:43:41 A . (.PMC-Sierra, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\WINDOWS\System32\drivers\arcsas.sys [114016] © O58 - SDL:2015/07/21 22:37:17 A . (.AVAST Software - avast! HWID.) -- C:\WINDOWS\System32\drivers\aswHwid.sys [28656] © O58 - SDL:2015/07/21 22:37:17 A . (.AVAST Software - avast! File System Minifilter for Windows 2.) -- C:\WINDOWS\System32\drivers\aswMonFlt.sys [90968] © O58 - SDL:2015/07/21 22:37:15 A . (.AVAST Software - avast! WFP Redirect Driver.) -- C:\WINDOWS\System32\drivers\aswRdr2.sys [93528] © O58 - SDL:2015/07/21 22:37:17 A . (.AVAST Software - avast! Revert.) -- C:\WINDOWS\System32\drivers\aswRvrt.sys [65224] © O58 - SDL:2015/11/10 21:45:17 A . (.AVAST Software - avast! Virtualization Driver.) -- C:\WINDOWS\System32\drivers\aswsnx.sys [1059656] © O58 - SDL:2015/11/10 21:45:17 A . (.AVAST Software - avast! self protection module.) -- C:\WINDOWS\System32\drivers\aswsp.sys [449992] © O58 - SDL:2015/07/21 22:37:18 A . (.AVAST Software - Stream Filter.) -- C:\WINDOWS\System32\drivers\aswStm.sys [150160] © O58 - SDL:2015/07/21 22:37:18 A . (.AVAST Software - avast! VM Monitor.) -- C:\WINDOWS\System32\drivers\aswVmm.sys [274808] © O58 - SDL:2012/07/17 07:59:12 A . (.Advanced Micro Devices - AMD High Definition Audio Function Driver.) -- C:\WINDOWS\System32\drivers\AtihdW86.sys [98472] © O58 - SDL:2014/04/01 06:52:54 A . (.Advanced Micro Devices, Inc. - ATI Radeon Kernel Mode Driver.) -- C:\WINDOWS\System32\drivers\atikmdag.sys [12521472] © O58 - SDL:2014/04/01 06:52:54 A . (.Advanced Micro Devices, Inc. - AMD multi-vendor Miniport Driver.) -- C:\WINDOWS\System32\drivers\atikmpag.sys [617472] © O58 - SDL:2013/08/13 00:25:46 A . (.Windows (R) Win 7 DDK provider - BCM Function 2 Device Driver.) -- C:\WINDOWS\System32\drivers\bcmfn2.sys [17624] © O58 - SDL:2013/08/22 13:43:41 A . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.) -- C:\WINDOWS\System32\drivers\bxvbda.sys [531296] © O58 - SDL:2013/08/22 13:43:45 A . (.Broadcom Corporation - Broadcom NetXtreme II 10 GigE VBD.) -- C:\WINDOWS\System32\drivers\evbda.sys [3357024] © O58 - SDL:2012/07/02 23:16:02 A . (.Intel Corporation - Intel(R) Management Engine Interface.) -- C:\WINDOWS\System32\drivers\HECIx64.sys [62784] © O58 - SDL:2013/08/22 13:43:45 A . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Drive.) -- C:\WINDOWS\System32\drivers\HpSAMD.sys [64352] © O58 - SDL:2013/07/30 19:47:35 A . (.Intel Corporation - Intel(R) Serial IO GPIO Controller Driver.) -- C:\WINDOWS\System32\drivers\iaLPSSi_GPIO.sys [24568] © O58 - SDL:2013/07/25 20:05:39 A . (.Intel Corporation - Intel(R) Serial IO I2C Controller Driver.) -- C:\WINDOWS\System32\drivers\iaLPSSi_I2C.sys [99320] © O58 - SDL:2012/07/31 19:22:00 A . (.Intel Corporation - Intel Rapid Storage Technology driver - x64.) -- C:\WINDOWS\System32\drivers\iaStorA.sys [645952] © O58 - SDL:2013/08/10 01:39:30 A . (.Intel Corporation - Intel Rapid Storage Technology driver (inbo.) -- C:\WINDOWS\System32\drivers\iaStorAV.sys [651248] © O58 - SDL:2013/08/22 13:43:45 A . (.Intel Corporation - Intel Matrix Storage Manager driver - x64.) -- C:\WINDOWS\System32\drivers\iaStorV.sys [412000] © O58 - SDL:2015/08/19 08:02:04 A . (.Elex do Brasil Participações Ltda - iSafe Kernel Boot Driver.) -- C:\WINDOWS\System32\drivers\iSafeKrnlBoot.sys [55056] =>PUP.Optional.YetAnotherCleaner O58 - SDL:2015/06/30 03:50:17 A . (.Elex do Brasil Participações Ltda - iSafeNetFilter SDK WFP Driver (WPP).) -- C:\WINDOWS\System32\drivers\iSafeNetFilter.sys [52392] =>PUP.Optional.YetAnotherCleaner O58 - SDL:2013/08/22 13:43:44 A . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas.sys [109408] © O58 - SDL:2013/08/22 13:43:45 A . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas2.sys [93536] © O58 - SDL:2013/08/22 13:43:44 A . (.LSI Corporation - LSI SAS Gen3 Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas3.sys [81760] © O58 - SDL:2013/08/22 13:43:45 A . (.LSI Corporation - LSI SSS PCIe/Flash Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sss.sys [82784] © O58 - SDL:2013/08/22 13:43:45 A . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\megasas.sys [56672] © O58 - SDL:2013/08/22 13:43:45 A . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\WINDOWS\System32\drivers\megasr.sys [575840] © O58 - SDL:2013/08/22 13:43:49 A . (.Marvell Semiconductor, Inc. - Marvell Flash Controller Driver.) -- C:\WINDOWS\System32\drivers\mvumis.sys [63840] © O58 - SDL:2015/07/21 22:36:19 A . (.AVAST Software - avast! NG snapshot driver.) -- C:\WINDOWS\System32\drivers\ngvss.sys [115152] © O58 - SDL:2013/08/22 13:43:31 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\WINDOWS\System32\drivers\nvraid.sys [150368] © O58 - SDL:2013/08/22 13:43:32 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\WINDOWS\System32\drivers\nvstor.sys [168288] © O58 - SDL:2013/06/18 15:46:17 A . (.Realtek - Realtek 8101E/8168/8169 NDIS 6.30 64-bit Dr.) -- C:\WINDOWS\System32\drivers\Rt630x64.sys [591360] © O58 - SDL:2010/12/22 15:24:00 A . (.Realtek Semiconductor Corporation - Realtek RTL819xP NDIS Driverr.) -- C:\WINDOWS\System32\drivers\rtl819xp.sys [626792] © O58 - SDL:2014/02/05 15:59:09 A . (.Realtek Semiconductor Corp. - Realtek USB Mass Storage Driver for 2K/XP/V.) -- C:\WINDOWS\System32\drivers\RtsUStor.sys [266968] © O58 - SDL:2014/02/05 15:56:40 A . (.Realtek Semiconductor Corporation - Realtek PCIE NDIS Driverr.) -- C:\WINDOWS\System32\drivers\rtwlane.sys [2979544] © O58 - SDL:2013/08/22 16:35:09 A . (.Macrovision Corporation, Macrovision Europe Limited, - Macrovision SECURITY Driver.) -- C:\WINDOWS\System32\drivers\secdrv.sys [23040] © O58 - SDL:2013/08/22 13:43:31 A . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\WINDOWS\System32\drivers\sisraid2.sys [44896] © O58 - SDL:2013/08/22 13:43:32 A . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\WINDOWS\System32\drivers\sisraid4.sys [81760] © O58 - SDL:2014/01/22 08:52:10 A . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG USB Composite Device Driver (MSS Ve.) -- C:\WINDOWS\System32\drivers\ssudbus.sys [108800] © O58 - SDL:2014/01/22 08:52:10 A . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG Android Modem Device Driver (MSS Ve.) -- C:\WINDOWS\System32\drivers\ssudmdm.sys [206080] © O58 - SDL:2014/01/22 08:52:12 A . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG USB Mobile Logging Device Driver (M.) -- C:\WINDOWS\System32\drivers\ssudserd.sys [206080] © O58 - SDL:2013/08/22 13:43:32 A . (.Promise Technology, Inc. - Promise SuperTrak EX Series Driver for Wind.) -- C:\WINDOWS\System32\drivers\stexstor.sys [31072] © O58 - SDL:2012/07/25 00:54:00 A . (.TOSHIBA Corporation. - TOSHIBA ODD Writing Driver for x64..) -- C:\WINDOWS\System32\drivers\tdcmdpst.sys [31184] © O58 - SDL:2014/02/05 15:56:52 A . (.Intel Corporation - Intel(R) Management Engine Interface.) -- C:\WINDOWS\System32\drivers\TeeDriverx64.sys [99288] © O58 - SDL:2012/07/31 20:28:54 A . (.Windows (R) Win 7 DDK provider - Toshiba Hotkey Driver.) -- C:\WINDOWS\System32\drivers\Thotkey.sys [28632] © O58 - SDL:2013/11/01 03:22:28 A . (.TOSHIBA Corporation - TOSHIBA Bluetooth EC Driver.) -- C:\WINDOWS\System32\drivers\tosrfec.sys [27032] © O58 - SDL:2012/06/18 18:30:56 A . (.TOSHIBA Corporation - tos_sps64.) -- C:\WINDOWS\System32\drivers\tos_sps64.sys [499096] © O58 - SDL:2012/07/21 23:59:02 A . (.TOSHIBA Corporation - TOSHIBA TVALZ Filter Driver.) -- C:\WINDOWS\System32\drivers\TVALZFL.sys [16768] © O58 - SDL:2012/07/26 00:34:42 A . (.TOSHIBA Corporation - TOSHIBA ACPI-Based Value Added Logical and.) -- C:\WINDOWS\System32\drivers\TVALZ_O.SYS [32832] © O58 - SDL:2013/08/22 13:43:34 A . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\WINDOWS\System32\drivers\viaide.sys [19808] © O58 - SDL:2013/08/22 13:43:34 A . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\WINDOWS\System32\drivers\vsmraid.sys [168800] © O58 - SDL:2013/08/22 13:43:34 A . (.VIA Corporation - VIA StorX RAID Controller Driver.) -- C:\WINDOWS\System32\drivers\VSTXRAID.SYS [305504] © ---\\ Derniers fichiers modifiés ou crées (Utilisateur) (2) - 42s O61 - LFC: 2015/11/19 11:05:14 A . (..) -- C:\Users\Nico30berges\Desktop\cacaoweb.exe [554288] =>.Superfluous.CacaoWeb O61 - LFC: 2015/11/19 11:10:19 A . (..) -- C:\Users\Nico30berges\AppData\Local\ATI\ACE\Manifest.Bin [28165] ---\\ Associations Shell Spawning (10) - 0s O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe © O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Ob.) -- C:\Windows\System32\eventvwr.exe © O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe © O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\wscript.exe © O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe © O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S ---\\ Menu de démarrage Internet (8) - 0s O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe © O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- c:\program files\internet explorer\iexplore.exe © O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe © O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe © O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe © O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe © O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe © O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe © ---\\ Recherche d'infection sur les navigateurs (12) - 1s O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - http://do-search.com/ O69 - SBI: SearchScopes [HKCU] {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} - (Bing) - http://www.bing.com/ O69 - SBI: SearchScopes [HKCU] {33BB0A4E-99AF-4226-BDF6-49120163DE86} - (delta-homes) - http://do-search.com/ O69 - SBI: SearchScopes [HKCU] {425ED333-6083-428a-92C9-0CFC28B9D1BF} [DefaultScope] - (V9) - http://www.v9.com/ O69 - SBI: SearchScopes [HKCU] {4296B5F2-1933-4900-96CA-ED77F93BD749} - () - http://do-search.com/ O69 - SBI: SearchScopes [HKCU] {9BB47C17-9C68-4BB3-B188-DD9AF0FD2476} - (default-search.net) - http://do-search.com/ O69 - SBI: SearchScopes [HKCU] {E733165D-CBCF-4FDA-883E-ADEF965B476C} - (Google) - http://do-search.com/ O69 - SBI: SearchScopes [HKCU] {EADFF8B0-9ED8-4ECE-BFE4-A53AED8BC57D} - (Yahoo) - http://do-search.com/ O69 - SBI: SearchScopes [HKUS\.DEFAULT] {425ED333-6083-428a-92C9-0CFC28B9D1BF} [DefaultScope] - (V9) - http://www.v9.com/ O69 - SBI: SearchScopes [HKUS\S-1-5-18] {425ED333-6083-428a-92C9-0CFC28B9D1BF} [DefaultScope] - (V9) - http://www.v9.com/ O69 - SBI: SearchScopes [HKUS\S-1-5-19] {425ED333-6083-428a-92C9-0CFC28B9D1BF} [DefaultScope] - (V9) - http://www.v9.com/ O69 - SBI: SearchScopes [HKUS\S-1-5-20] {425ED333-6083-428a-92C9-0CFC28B9D1BF} [DefaultScope] - (V9) - http://www.v9.com/ ---\\ Enumère les services démarrés par Svchost (34) - 1s O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d’application.) -- C:\WINDOWS\System32\aelupsvc.dll [214528] © O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [156160] © O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [156160] © O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\System32\srvsvc.dll [329216] © O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\System32\gpsvc.dll [1360896] © O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\IKEEXT.DLL [1083904] © O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur u.) -- C:\Windows\System32\iphlpsvc.dll [926208] © O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d’ouverture de session secon.) -- C:\Windows\System32\seclogon.dll [31744] © O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll [110080] © O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\System32\iscsiexe.dll [151040] © O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll [110592] © O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\System32\schedsvc.dll [1265152] © O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll [230400] © O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédia.) -- C:\Windows\System32\mmcss.dll [71168] © O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\System32\browser.dll [135168] © O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll [228864] © O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à.) -- C:\Windows\System32\SessEnv.dll [339968] © O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll [84992] © O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\Windows\System32\KMSVC.DLL [101376] © O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\Windows\System32\bdesvc.dll [348672] © O83 - Search Svchost Services: lfsvc (lfsvc) . (.Microsoft Corporation - Service d’infrastructure de localisation Wi.) -- C:\Windows\System32\GeofenceMonitorService.dll [522240] © O83 - Search Svchost Services: wlidsvc (wlidsvc) . (.Microsoft Corporation - Service de compte Microsoft®.) -- C:\Windows\System32\wlidsvc.dll [1639424] © O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\Windows\System32\themeservice.dll [59392] © O83 - Search Svchost Services: DsmSvc (DsmSvc) . (.Microsoft Corporation - Gestionnaire d’installation de périphérique.) -- C:\Windows\System32\DeviceSetupManager.dll [206848] © O83 - Search Svchost Services: NcaSvc (NcaSvc) . (.Microsoft Corporation - Service Assistant Connectivité réseau Micro.) -- C:\Windows\System32\NcaSvc.dll [166400] © O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’.) -- C:\Windows\System32\rasauto.dll [102912] © O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire des connexions d’accès à dista.) -- C:\Windows\System32\rasmans.dll [542208] © O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll [226816] © O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements systèm.) -- C:\Windows\System32\Sens.dll [73728] © O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l’application d’assistance à.) -- C:\Windows\System32\ipnathlp.dll [452608] © O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM.) -- C:\Windows\System32\tapisrv.dll [313344] © O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Up.) -- C:\Windows\System32\wuaueng.dll [3705856] © O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière.) -- C:\Windows\System32\qmgr.dll [933376] © O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [640000] © ---\\ Liste des exceptions du parefeu Windows (13) - 5s O87 - FAEL: "{47B68929-C17A-4B51-896A-529BABEDA2B1}" [In-None-P6-TRUE] .(...) -- C:\ProgramData\eSafe\eGdpSvc.exe (.not file.) O87 - FAEL: "{422EF3E1-544B-4070-BC20-0A008B56A010}" [In-None-P17-TRUE] .(...) -- D:\Network\EpsonNetSetup\ENEasyApp.exe (.not file.) O87 - FAEL: "{4B2AD402-B3CC-4688-9155-F85E5AB81E86}" [In-None-P6-TRUE] .(...) -- D:\Network\EpsonNetSetup\ENEasyApp.exe (.not file.) O87 - FAEL: "UDP Query User{0F6F5166-5F6A-470C-979D-3DEFDCD5B7C9}C:\program files (x86)\mytorrentclient\halite.exe" [In-None-P17-TRUE] .(...) -- C:\program files (x86)\mytorrentclient\halite.exe (.not file.) O87 - FAEL: "TCP Query User{FDB39CC1-0F99-404A-9FC1-DBC760BE4699}C:\program files (x86)\mytorrentclient\halite.exe" [In-None-P6-TRUE] .(...) -- C:\program files (x86)\mytorrentclient\halite.exe (.not file.) O87 - FAEL: "TCP Query User{E0CF47B3-B3E3-4AF1-A68F-66FC56BD14EF}C:\users\nico30berges\appdata\roaming\utorrent\utorrent.exe" [In-None-P6-TRUE] .(.BitTorrent Inc. - µTorrent.) -- C:\users\nico30berges\appdata\roaming\utorrent\utorrent.exe O87 - FAEL: "UDP Query User{77163E5D-8BDB-4E57-BD7B-EEF6E27FA571}C:\users\nico30berges\appdata\roaming\utorrent\utorrent.exe" [In-None-P17-TRUE] .(.BitTorrent Inc. - µTorrent.) -- C:\users\nico30berges\appdata\roaming\utorrent\utorrent.exe O87 - FAEL: "TCP Query User{853DFE70-3F28-478A-B1A1-3F6590F5026F}C:\users\nico30berges\downloads\cacaoweb.exe" [In-None-P6-TRUE] .(...) -- C:\users\nico30berges\downloads\cacaoweb.exe =>.Superfluous.CacaoWeb O87 - FAEL: "UDP Query User{6E811BCB-7BC3-4B22-86C7-6D1258063158}C:\users\nico30berges\downloads\cacaoweb.exe" [In-None-P17-TRUE] .(...) -- C:\users\nico30berges\downloads\cacaoweb.exe =>.Superfluous.CacaoWeb O87 - FAEL: "TCP Query User{0707A5DD-9A52-4ECB-8C6D-F4BC372DED4F}C:\users\nico30berges\appdata\roaming\cacaoweb\cacaoweb.exe" [In-None-P6-TRUE] .(...) -- C:\users\nico30berges\appdata\roaming\cacaoweb\cacaoweb.exe =>.Superfluous.CacaoWeb O87 - FAEL: "UDP Query User{1759EF55-D767-4262-857C-846C5A22295E}C:\users\nico30berges\appdata\roaming\cacaoweb\cacaoweb.exe" [In-None-P17-TRUE] .(...) -- C:\users\nico30berges\appdata\roaming\cacaoweb\cacaoweb.exe =>.Superfluous.CacaoWeb O87 - FAEL: "TCP Query User{DE0AECE0-B694-4A24-8138-70CE28FEEB05}C:\users\nico30berges\appdata\roaming\cacaoweb\cacaoweb.exe" [In-None-P6-TRUE] .(...) -- C:\users\nico30berges\appdata\roaming\cacaoweb\cacaoweb.exe =>.Superfluous.CacaoWeb O87 - FAEL: "UDP Query User{8EDEE8A6-EF57-4282-BEE5-4A343AA52348}C:\users\nico30berges\appdata\roaming\cacaoweb\cacaoweb.exe" [In-None-P17-TRUE] .(...) -- C:\users\nico30berges\appdata\roaming\cacaoweb\cacaoweb.exe =>.Superfluous.CacaoWeb ---\\ Enumère les codes produits des logiciels (1) - 5s O90 - PUC: "E0BD057F254D8013369CEF61CB867614" . (.Webplayer.) =>PUP.Optional.WebPlayer ---\\ Services non Microsoft (SR=Démarré,SS=Stoppé) (29) - 61s SR - Auto [29/09/2015] [ 2015936] Adobe Genuine Software Integrity Service (AGSService) . (.Adobe Systems, Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe © SR - Auto [01/04/2014] [ 239616] (AMD External Events Utility) . (.AMD.) - C:\Windows\System32\atiesrxx.exe © SR - Auto [21/07/2015] [ 146600] Avast Antivirus (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe © SR - Demand [21/07/2015] [ 4047768] AvastVBox COM Service (AvastVBoxSvc) . (.Avast Software.) - C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe © SS - Auto [10/11/2015] [ 377440] browser Update Service 2015.11.10.16.18.57 (browserServer_2015.11.10.16.18.57) . (...) - C:\Program Files (x86)\ghokswa Browser\ghokswa\bin\browserServer.exe SR - Auto [11/12/2011] [ 135824] Epson Scanner Service (EpsonScanSvc) . (.Seiko Epson Corporation.) - C:\Windows\System32\escsvc64.exe © SS - System [28/01/2015] [ 45968] F06DEFF2-5B9C-490D-910F-35D3A91196222 (F06DEFF2-5B9C-490D-910F-35D3A91196222) . (.Aztec Media Inc.) - C:\Program Files (x86)\Assets Manager\smdmf\x64\smdmfmgrc3.cfg =>PUP.Optional.SystemK SR - Auto [13/10/2011] [ 156672] GFNEX Service (GFNEXSrv) . (.All rights reserved.) - C:\Program Files (x86)\TOSHIBA\Password Utility\GFNEXSrv.exe SS - Auto [25/09/2015] [ 144200] Service Google Update (gupdate) (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe © SS - Demand [25/09/2015] [ 144200] Service Google Update (gupdatem) (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe © SR - Auto [21/09/2015] [ 396944] IhPul (IhPul) . (.tsvr.com.) - C:\Users\Nico30berges\AppData\Roaming\TSv\TSvr.exe =>PUP.Optional.Elex SR - Auto [20/04/2012] [ 635104] Intel(R) Capability Licensing Service Interface (Intel(R) Capability Licensing Service Interface) . (.Intel(R) Corporation.) - C:\Program Files\Intel\iCLS Client\HeciServer.exe © SR - Auto [27/06/2012] [ 129856] Intel(R) ME Service (Intel(R) ME Service) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe © SR - Auto [19/08/2015] [ 118048] YAC Service (iSafeService) . (.Elex do Brasil Participações Ltda.) - C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc.exe =>PUP.Optional.YetAnotherCleaner SR - Auto [25/06/2012] [ 166720] Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe © SR - Auto [17/07/2012] [ 277824] Intel(R) Management and Security Application Local Manageme (LMS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe © SR - Auto [20/12/2014] [ 2726256] MyBZGny (MyBZGny) . (.Acute Angle Solutions Ltd.) - C:\ProgramData\xYpovSIAPc\MyBZGny.exe =>PUP.Optional.Meteoroids SR - Auto [13/07/2012] [ 769432] Nero Update (NAUpdate) . (.Nero AG.) - C:\Program Files (x86)\Nero\Update\NASvc.exe © SR - Auto [14/09/2015] [ 722400] PicexaService (PicexaService) . (.Taiwan Shui Mu Chih Ching Technology Limited.) - C:\Program Files (x86)\Picexa\PicexaSvc.exe =>PUP.Optional.Picexa SS - Auto [09/07/2015] [ 327296] Skype Updater (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe © SR - Auto [28/01/2015] [ 3570704] SmdmF Service (SmdmFService) . (.Aztec Media Inc.) - C:\Program Files (x86)\Assets Manager\smdmf\SmdmFService.exe =>PUP.Optional.SystemK SR - Auto [22/09/2015] [ 458400] SSFK (SSFK) . (.TODO: <公司名>.) - C:\Program Files (x86)\SFK\SSFK.exe =>PUP.Optional.MyWebSearch SS - Demand [18/07/2013] [ 116088] TEMPRO Service (TemproMonitoringService) . (.Toshiba Europe GmbH.) - C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe © SR - Demand [27/07/2012] [ 53384] TMachInfo (TMachInfo) . (.TOSHIBA Corporation.) - C:\Program Files\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe © SR - Auto [28/07/2009] [ 140632] TOSHIBA Optical Disc Drive Service (TODDSrv) . (.TOSHIBA Corporation.) - C:\Windows\System32\TODDSrv.exe © SR - Auto [25/08/2012] [ 291240] TOSHIBA eco Utility Service (TOSHIBA eco Utility Service) . (.TOSHIBA Corporation.) - C:\Program Files\TOSHIBA\Teco\TecoService.exe © SR - Demand [28/07/2012] [ 458152] TPCH Service (TPCHSrv) . (.TOSHIBA Corporation.) - C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe © SR - Auto [17/07/2012] [ 365376] Intel(R) Management and Security Application User Notificat (UNS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe © ---\\ Recherche de clés de registre Tracing (2) - 0s HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\MyBZGny_RASAPI32 =>PUP.Optional.Salus HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\MyBZGny_RASMANCS =>PUP.Optional.Salus ---\\ Scan Additionnel (91) - 1s HKLM\SYSTEM\CurrentControlSet\Services\F06DEFF2-5B9C-490D-910F-35D3A91196222 =>PUP.Optional.SystemK C:\Program Files (x86)\Assets Manager\smdmf\x64\smdmfmgrc3.cfg =>PUP.Optional.SystemK HKLM\SYSTEM\CurrentControlSet\Services\IhPul =>PUP.Optional.Elex C:\Users\Nico30berges\AppData\Roaming\TSv\TSvr.exe =>PUP.Optional.Elex HKLM\SYSTEM\CurrentControlSet\Services\iSafeService =>PUP.Optional.YetAnotherCleaner C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc.exe =>PUP.Optional.YetAnotherCleaner HKLM\SYSTEM\CurrentControlSet\Services\MyBZGny =>PUP.Optional.Salus C:\ProgramData\xYpovSIAPc\MyBZGny.exe =>PUP.Optional.Salus HKLM\SYSTEM\CurrentControlSet\Services\PicexaService =>PUP.Optional.Picexa C:\Program Files (x86)\Picexa\PicexaSvc.exe =>PUP.Optional.Picexa HKLM\SYSTEM\CurrentControlSet\Services\SmdmFService =>PUP.Optional.SystemK C:\Program Files (x86)\Assets Manager\smdmf\SmdmFService.exe =>PUP.Optional.SystemK HKLM\SYSTEM\CurrentControlSet\Services\SSFK =>PUP.Optional.MyWebSearch C:\Program Files (x86)\SFK\SSFK.exe =>PUP.Optional.MyWebSearch C:\ProgramData\NetEngine\bin\D10\netengine.exe =>PUP.Optional.NetEngine C:\WINDOWS\System32\Tasks\NetEngine =>PUP.Optional.NetEngine C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc.exe =>PUP.Optional.Elex C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc2.exe =>PUP.Optional.Elex C:\Program Files (x86)\Elex-tech\YAC\iSafeTray.exe =>PUP.Optional.Elex C:\Users\Nico30berges\AppData\Local\Linkey\IEExtension\iedll.dll =>PUP.Optional.LinkeySearch HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4D9101D6-5BA0-4048-BDDE-7E2DF54C8C47} =>PUP.Optional.LinkeySearch C:\Users\Nico30berges\AppData\Local\SoftonicAssistant\SoftonicAssistant.exe =>PUP.Optional.Softonic C:\Users\Nico30berges\AppData\Roaming\cacaoweb\cacaoweb.exe =>.Superfluous.CacaoWeb C:\Users\Nico30berges\AppData\Local\Linkey\IEExtension\ietlb64.dll =>PUP.Optional.LinkeySearch HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{018043D2-59C4-49E4-AB0F-11E6DA636124} =>PUP.Optional.Multiplug HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\iSafe =>PUP.Optional.Elex HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Picexa =>PUP.Optional.Picexa HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SafeWeb =>PUP.Optional.Multiplug HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Settings Manager =>PUP.Optional.SystemK HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\sweet-page uninstall =>PUP.Optional.SweetPage HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Linkey =>PUP.Optional.LinkeySearch HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SoftonicAssistant =>PUP.Optional.Softonic HKLM\SOFTWARE\Wow6432Node\delta-homesSoftware =>PUP.Optional.DeltaHomes HKLM\SOFTWARE\Wow6432Node\IHProtect =>PUP.Optional.AgentODR HKLM\SOFTWARE\Wow6432Node\Linkey =>PUP.Optional.LinkeySearch HKLM\SOFTWARE\Wow6432Node\Picexa =>PUP.Optional.Picexa HKLM\SOFTWARE\Wow6432Node\PicexaSvc =>PUP.Optional.Picexa HKLM\SOFTWARE\Wow6432Node\SmdmF =>PUP.Optional.SettingsManager HKLM\SOFTWARE\Wow6432Node\SupDp =>PUP.Optional.SupTab HKLM\SOFTWARE\Wow6432Node\supTab =>PUP.Optional.SupTab HKLM\SOFTWARE\Wow6432Node\supWindowsMangerProtect =>PUP.Optional.WpManager HKLM\SOFTWARE\Wow6432Node\sweet-pageSoftware =>PUP.Optional.SweetPage HKLM\SOFTWARE\Wow6432Node\TSv =>PUP.Optional.Elex HKCU\SOFTWARE\cacaoweb =>.Superfluous.CacaoWeb HKCU\SOFTWARE\InstallCore =>Adware.InstallCore HKCU\SOFTWARE\Linkey =>PUP.Optional.LinkeySearch HKCU\SOFTWARE\SmdmF =>PUP.Optional.SettingsManager HKCU\SOFTWARE\Softonic =>PUP.Optional.Softonic HKCU\SOFTWARE\V9 =>PUP.Optional.V9Software HKCU\SOFTWARE\AppDataLow\Software\DynConIE =>PUP.Optional.DynConIE C:\Program Files (x86)\Assets Manager =>PUP.Optional.SystemK C:\Program Files (x86)\Elex-tech =>PUP.Optional.Elex C:\Program Files (x86)\MiuiTab =>PUP.Optional.MiuiTab C:\Program Files (x86)\Picexa =>PUP.Optional.Picexa C:\Program Files (x86)\SearchProtect111202796 =>PUP.Optional.SearchProtect C:\Program Files (x86)\Settings Manager =>PUP.Optional.SettingsManager C:\Program Files (x86)\SFK =>PUP.Optional.MyWebSearch C:\Program Files (x86)\XTab =>PUP.Optional.XTab C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Picexa =>PUP.Optional.Picexa C:\ProgramData\Browser =>PUP.Optional.SpeedBrowser C:\ProgramData\IHProtectUpDate =>PUP.Optional.AgentODR C:\ProgramData\InstallMate =>PUP.Optional.Tarma C:\ProgramData\NetEngine =>PUP.Optional.NetEngine C:\ProgramData\ProductData =>PUP.Optional.Generic C:\ProgramData\SafeWeb =>PUP.Optional.SafeWeb C:\ProgramData\smdmf =>PUP.Optional.SystemK C:\ProgramData\WindowsMangerProtect =>PUP.Optional.WpManager C:\Users\Nico30berges\AppData\Roaming\cacaoweb =>.Superfluous.CacaoWeb C:\Users\Nico30berges\AppData\Roaming\eCyber =>PUP.Optional.Elex C:\Users\Nico30berges\AppData\Roaming\Elex-tech =>PUP.Optional.Elex C:\Users\Nico30berges\AppData\Roaming\Picexa Viewer =>PUP.Optional.Picexa C:\Users\Nico30berges\AppData\Roaming\sweet-page =>PUP.Optional.SweetPage C:\Users\Nico30berges\AppData\Roaming\TSv =>PUP.Optional.Elex C:\Users\Nico30berges\AppData\Local\Linkey =>PUP.Optional.LinkeySearch C:\Users\Nico30berges\AppData\Local\SafeWeb =>PUP.Optional.SafeWeb C:\Users\Nico30berges\AppData\Local\SoftonicAssistant =>PUP.Optional.Softonic C:\WINDOWS\Prefetch\CACAOWEB.EXE-FE7C8155.pf =>.Superfluous.CacaoWeb C:\WINDOWS\Prefetch\PICEXA.EXE-C5E58BD7.pf =>PUP.Optional.Picexa C:\WINDOWS\Prefetch\SOFTONICASSISTANT.EXE-871EBB27.pf =>PUP.Optional.Softonic C:\WINDOWS\Prefetch\SOFTONICASSISTANT_V0-1-6.EXE-88FB5BF3.pf =>PUP.Optional.Softonic C:\WINDOWS\Prefetch\SOFTONICDOWNLOADER_FOR_CELTX.-6D641BBF.pf =>PUP.Optional.Softonic C:\WINDOWS\System32\drivers\iSafeKrnlBoot.sys =>PUP.Optional.YetAnotherCleaner C:\WINDOWS\System32\drivers\iSafeNetFilter.sys =>PUP.Optional.YetAnotherCleaner C:\Users\Nico30berges\Desktop\cacaoweb.exe =>.Superfluous.CacaoWeb C:\users\nico30berges\downloads\cacaoweb.exe =>.Superfluous.CacaoWeb HKLM\Software\Classes\Installer\Products\E0BD057F254D8013369CEF61CB867614 =>PUP.Optional.WebPlayer HKLM\Software\Classes\Installer\Features\E0BD057F254D8013369CEF61CB867614 =>PUP.Optional.WebPlayer HKLM\SYSTEM\CurrentControlSet\Services\MyBZGny =>PUP.Optional.Meteoroids C:\ProgramData\xYpovSIAPc\MyBZGny.exe =>PUP.Optional.Meteoroids HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\MyBZGny_RASAPI32 =>PUP.Optional.Salus HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\MyBZGny_RASMANCS =>PUP.Optional.Salus ---\\ Récapitulatif des éléments trouvés sur votre station (30) - 0s http://www.nicolascoolman.fr/?p=56 =>PUP.Optional.SystemK http://www.nicolascoolman.fr/?p=996 =>PUP.Optional.Elex http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.YetAnotherCleaner http://www.nicolascoolman.fr/?p=2645 =>PUP.Optional.Salus http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.Picexa http://www.nicolascoolman.fr/?p=220 =>PUP.Optional.MyWebSearch http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.NetEngine http://www.nicolascoolman.fr/?p=721 =>PUP.Optional.Qvo6 http://www.nicolascoolman.fr/?p=596 =>PUP.Optional.SweetPage http://www.nicolascoolman.fr/?p=381 =>PUP.Optional.LinkeySearch http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.Softonic http://www.nicolascoolman.fr/?p=338 =>.Superfluous.CacaoWeb http://www.nicolascoolman.fr/?p=1402 =>PUP.Optional.Multiplug http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.DeltaHomes http://www.nicolascoolman.fr/?p=2429 =>PUP.Optional.AgentODR http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.SettingsManager http://www.nicolascoolman.fr/?p=297 =>PUP.Optional.SupTab http://www.nicolascoolman.fr/?p=173 =>PUP.Optional.WpManager http://www.nicolascoolman.fr/?p=279 =>Adware.InstallCore http://www.nicolascoolman.fr/?p=556 =>PUP.Optional.V9Software http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.DynConIE http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.MiuiTab http://www.nicolascoolman.fr/?p=1633 =>PUP.Optional.SearchProtect http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.XTab http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.SpeedBrowser http://www.nicolascoolman.fr/?p=259 =>PUP.Optional.Tarma http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.Generic http://www.nicolascoolman.fr/?p=2171 =>PUP.Optional.SafeWeb http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.WebPlayer http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.Meteoroids ~ End of the scan, 44985 items in 268 seconds (995)(0)