Rapport de ZHPDiag v1.29.31 par Nicolas Coolman, Update du 09/03/2012 Run by toto at 13/05/2015 11:06:35 Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html Web site : http://nicolascoolman.skyrock.com/ State : Problème connexion internet ---\\ Web Browser MSIE: Internet Explorer v MFIE: Mozilla Firefox 37.0.2 (Defaut) GCIE: Google Chrome ---\\ Windows Product Information ~ Langage: Français Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601) Windows Server License Manager Script : OK ~ Windows(R) 7, OEM_SLP channel System Locked Preinstallation (OEM_SLP) : OK Windows ID Activation : OK ~ Windows Partial Key : 3Q6C9 Windows License : OK ~ Windows Remaining Initializations Number : 3 Software Protection Service (Protection logicielle) : KO Windows Automatic Updates : OK Windows Activation Technologies : OK ---\\ System Information ~ Processor: Intel64 Family 6 Model 23 Stepping 10, GenuineIntel ~ Operating System: 64 Bits Boot mode: Normal (Normal boot) Total RAM: 4095 MB (46% free) System Restore: Inconnu (Unknown) System drive C: has 185 GB (40%) free of 452 GB ---\\ Logged in mode ~ Computer Name: TOTO-HP ~ User Name: toto ~ All Users Names: toto, Mcx1-TOTO-HP, HomeGroupUser$, Administrateur, ~ Unselected Option: O45,O61,O62,O65,O66,O82,O89 Logged in as Administrator ---\\ Environnement Variables ~ System Unit : C:\ ~ %AppData% : C:\Users\toto\AppData\Roaming\ ~ %Desktop% : C:\Users\toto\Desktop\ ~ %Favorites% : C:\Users\toto\Favorites\ ~ %LocalAppData% : C:\Users\toto\AppData\Local\ ~ %StartMenu% : C:\Users\toto\AppData\Roaming\Microsoft\Windows\Start Menu\ ~ %Windir% : C:\Windows\ ~ %System% : C:\Windows\system32\ ---\\ DOS/Devices C:\ Hard drive, Flash drive, Thumb drive (Free 185 Go of 452 Go) D:\ Hard drive, Flash drive, Thumb drive (Free 2 Go of 14 Go) E:\ CD-ROM drive (Not Inserted) I:\ Floppy drive, Flash card reader, USB Key (Not Inserted) J:\ Floppy drive, Flash card reader, USB Key (Not Inserted) K:\ Floppy drive, Flash card reader, USB Key (Not Inserted) L:\ Floppy drive, Flash card reader, USB Key (Not Inserted) Q:\ Hard drive, Flash drive, Thumb drive (Free 0 Go of 0 Go) ---\\ Security Center & Tools Informations [HKLM\SOFTWARE\Microsoft\Security Center] AntiSpywareOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center] UacDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] UpdatesDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] UacDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoDesktop: OK [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoFolderOptions: OK [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoDesktop: OK [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoStartMenuSubFolder: OK [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoResolveSearch: OK [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoClose: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] NoActiveDesktopChanges: OK [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] DisableTaskMgr: OK [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] DisableRegistryTools: OK [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] NoDispScrSavPage: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowSearch: OK [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowMyComputer: OK [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings] WarnOnHTTPSToHTTPRedirect: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK ~ Scan Security Center in 00mn 00s ---\\ Recherche particulière de fichiers génériques [MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorateur Windows.) (.25/02/2011 - 07:19:30.) -- C:\Windows\explorer.exe [2871808] [MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 - 02:39:52.) -- C:\Windows\System32\wininit.exe [129024] [MD5.77B35D0FC22A2D2EAC8D07C3F9784DBF] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.13/03/2015 - 03:45:57.) -- C:\Windows\System32\wininet.dll [2358784] [MD5.8CEBD9D0A0A879CDE9F36F4383B7CAEA] - (.Microsoft Corporation - Application d’ouverture de session Windows.) (.17/07/2014 - 03:07:24.) -- C:\Windows\system32\Winlogon.exe [455168] [MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Bibliothèque de licences.) (.20/11/2010 - 14:27:26.) -- C:\Windows\System32\sppcomapi.dll [232448] [MD5.FA886682CFC5D36718D3E436AACF10B9] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.30/05/2014 - 07:45:52.) -- C:\Windows\system32\drivers\AFD.sys [497152] [MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 - 02:52:21.) -- C:\Windows\system32\drivers\atapi.sys [24128] [MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/07/2009 - 00:19:47.) -- C:\Windows\system32\drivers\Cdfs.sys [92160] [MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.20/11/2010 - 10:19:21.) -- C:\Windows\system32\drivers\Cdrom.sys [147456] [MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.20/11/2010 - 10:26:32.) -- C:\Windows\system32\drivers\DfsC.sys [102400] [MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.20/11/2010 - 11:43:43.) -- C:\Windows\system32\drivers\HDAudBus.sys [122368] [MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) (.14/07/2009 - 00:19:57.) -- C:\Windows\system32\drivers\i8042prt.sys [105472] [MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.14/07/2009 - 01:10:03.) -- C:\Windows\system32\drivers\IpNat.sys [116224] [MD5.A5D9106A73DC88564C825D317CAC68AC] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.27/04/2011 - 03:40:40.) -- C:\Windows\system32\drivers\MRxSmb.sys [158208] [MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) (.20/11/2010 - 10:23:20.) -- C:\Windows\system32\drivers\netBT.sys [261632] [MD5.1A29A59A4C5BA6F8C85062A613B7E2B2] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.24/01/2014 - 03:37:55.) -- C:\Windows\system32\drivers\ntfs.sys [1684928] [MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/07/2009 - 01:00:41.) -- C:\Windows\system32\drivers\Parport.sys [97280] [MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.20/11/2010 - 11:52:35.) -- C:\Windows\system32\drivers\Rasl2tp.sys [129536] [MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.14/07/2009 - 01:09:09.) -- C:\Windows\system32\drivers\smb.sys [93184] [MD5.70988118145F5F10EF24720B97F35F65] - (.Microsoft Corporation - TDI Translation Driver.) (.11/11/2014 - 02:46:26.) -- C:\Windows\system32\drivers\tdx.sys [119296] [MD5.0D08D2F3B3FF84E433346669B5E0F639] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.20/11/2010 - 14:34:02.) -- C:\Windows\system32\drivers\volsnap.sys [295808] ~ Scan Generic Processes in 00mn 00s ---\\ Etat des fichiers cachés (Caché/Total) ~ Mes images (My Pictures) : 71/3725 ~ Mes musiques (My Musics) : 1287/7102 ~ Mes Videos (My Videos) : 17/252 ~ Mes Favoris (My Favorites) : 7/165 ~ Mes Documents (My Documents) : 8/4004 ~ Mon Bureau (My Desktop) : 10/18727 ~ Menu demarrer (Programs) : 8/34 ~ Scan Hidden Files in 00mn 48s ---\\ Processus lancés [MD5.554A50B5310E702029D3A675459108FF] - (.Hewlett-Packard - hpsysdrv.) -- C:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe [62768] [PID.] [MD5.63A648C5FEB5DE641E1174ACB6CF78C6] - (.Pas de propriétaire - SmartMenu.) -- C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe [568888] [PID.] [MD5.DCFD8420B3455B400A88DE28341DAC34] - (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe [30872672] [PID.] [MD5.EC58C1A9A3281CE0C8FCC05BDBFECB37] - (.Apple Inc. - iCloud.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [43816] [PID.] [MD5.C1626A1DEB684E044BBC2A03623A0F18] - (.Gadwin Systems, Inc - Gadwin PrintScreen.) -- C:\Program Files (x86)\Gadwin Systems\PrintScreen\PrintScreen.exe [493776] [PID.] [MD5.B2052C5EBB8001FD68149A6C747ECF39] - (.Garmin Ltd. or its subsidiaries - Garmin Express Tray.) -- C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe [1403224] [PID.] [MD5.5516C26A6AF8EB4E2CAB48EC98A74398] - (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files (x86)\Hp\HP Software Update\hpwuschd2.exe [54576] [PID.] [MD5.E0FC25157263DD6177AF313AE35DBFE8] - (.Adobe Systems Incorporated - Adobe Photo Downloader 3.0 component.) -- C:\Program Files (x86)\Adobe\Adobe Photoshop Lightroom 1.4\apdproxy.exe [61440] [PID.] [MD5.ED70821F65B120FDBD76FCFF746FE219] - (.Oracle Corporation - Java Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [335232] [PID.] [MD5.86C9088E2DB222E57EE069151FCA84CB] - (...) -- C:\Program Files (x86)\HomePlayer\HomePlayer.exe [294912] [PID.] [MD5.D9ED562A22474E673E86C0FFB0D89EB5] - (.Hewlett-Packard - HP Advisor.) -- C:\Program Files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe [1590840] [PID.] [MD5.5588A018C772DBD69FDE3DE255D2A328] - (.Oracle Corporation - Java Update Checker.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe [1058176] [PID.] [MD5.5B465508AFD03C9FB10CE0414591420E] - (...) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [4555776] [PID.] [MD5.345B45BE09381D2011EB7F9AC11D8AC4] - (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe [376944] [PID.] [MD5.4B88BF95F7C40E2EDD2B924E0111C456] - (.Mozilla Corporation - Plugin Container for Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe [267888] [PID.] [MD5.66F6B3894132CC3D347CB85FBAE48D57] - (.Adobe Systems, Inc. - Adobe Flash Player 17.0 r0.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_17_0_0_169.exe [1892528] [PID.] ~ Scan Processes Running in 00mn 00s ---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2) C:\Users\toto\AppData\Local\Google\Chrome\User Data\Default\Preferences G0 - GCSP: Preference [User Data\Default][HomePage] http://www.google.com G1 - GCS: Preference [User Data\Default] None G0 - GCSP: Preference [User Data\Default][HomePage] 336FE4E0D281DB09285D8E9592EA5FE18A0F85C658C599048CF4C618E1C30766 G2 - GCE: Preference [User Data\Default] [aohghmighlieiainnegkcijnfilokake] Google Docs v.0.9 (Activé) G2 - GCE: Preference [User Data\Default] [apdfllckaahabafndbhieahigkjlhalf] Google Drive v.6.4 (Activé) G2 - GCE: Preference [User Data\Default] [dpiecafonfminhngabegejbligdagjfc] Bookmarks Tagger v.110 (Activé) G2 - GCE: Preference [User Data\Default] [eemcgdkfndhakfknompkggombfjjjeno] Bookmark Manager v.0.1 (Activé) G2 - GCE: Preference [User Data\Default] [ennkphjdgehloodpbhlhldgbnhmacadg] Settings v.0.2 (Activé) G2 - GCE: Preference [User Data\Default] [mfffpogegjflfpflabcdkioaeobkgjik] GaiaAuthExtension v.0.0.1, (Activé) G2 - GCE: Preference [User Data\Default] [mgndgikekgjfcpckkfioiadnlibdjbkf] Chrome v.0.1 (Activé) G2 - GCE: Preference [User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] Google Wallet v.0.0.6.0 (Activé) G2 - GCE: Preference [User Data\Default] [noaneddfkdjfnfdakjjmocngnfkfehhd] Chrome Logger v.144 (Activé) ~ Scan Google Browser in 00mn 00s ---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3) M0 - MFSP: prefs.js [toto - ik7zq93g.default] http://www.google.fr M2 - MFEP: prefs.js [toto - ik7zq93g.default\P0f@s.com] [] RegularDDeals v7.2 (..) M2 - MFEP: prefs.js [toto - ik7zq93g.default\tRi@Y.org] [] EnjoyCouupone v3.4 (..) P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 5.1.30514.0.) -- C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ~ Scan Firefox Browser in 00mn 00s ---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4) R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = www.google.com R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = www.google.com R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs,Tabs = http://www.google.com R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com R3 - URLSearchHook: Microsoft Url Search Hook [64Bits] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (11.00.9600.17631 (winblue_r7.150111-1500)) -- C:\Windows\System32\ieframe.dll R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1 R4 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1 ~ Scan IE Browser in 00mn 00s ---\\ Internet Explorer, Proxy Management (R5) R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll ~ Scan Proxy management in 00mn 00s ---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2) F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe, F2 - REG:system.ini: VMApplet=C:\Windows\system32\SystemPropertiesPerformance.exe ~ Scan Keys in 00mn 00s ---\\ Redirection du fichier Hosts (O1) ~ Le fichier hosts est sain (The hosts file is clean). ~ Scan Hosts File in 00mn 00s ~ Nombre de lignes (Lines number): 0 ---\\ Browser Helper Objects de navigateur (O2) O2 - BHO: DiscountExttensi [64Bits] - {66a9c30f-d4fd-42c9-8dc2-0d8230d4b3fb} . (...) -- C:\Program Files (x86)\DiscountExttensi\qD511vwKIXgaP9.x64.dll O2 - BHO: Issaver [64Bits] - {8d0dbf3b-1e2e-4e20-b34d-b28f70533669} . (...) -- C:\Program Files (x86)\Issaver\suAMcBor0blcau.x64.dll O2 - BHO: Iusiaver [64Bits] - {9431d017-66f2-440b-ba05-f9cfa62c8220} . (...) -- C:\Program Files (x86)\Iusiaver\Le4vogJ1D3I8Wa.x64.dll O2 - BHO: CouuppExtensIOOn [64Bits] - {b79cc836-2bb4-4c96-8939-f94014d44f6f} . (...) -- C:\Program Files (x86)\CouuppExtensIOOn\nfNIR4GM828Efj.x64.dll O2 - BHO: BestSaoVeForYou [64Bits] - {bdfa0e06-dc00-4956-8ed1-640848fb5f2e} . (...) -- C:\Program Files (x86)\BestSaoVeForYou\iR9cYB7M9amqeS.x64.dll O2 - BHO: DiscountExttensi [64Bits] - {66a9c30f-d4fd-42c9-8dc2-0d8230d4b3fb} . (...) -- C:\Program Files (x86)\DiscountExttensi\qD511vwKIXgaP9.dll O2 - BHO: Issaver [64Bits] - {8d0dbf3b-1e2e-4e20-b34d-b28f70533669} . (...) -- C:\Program Files (x86)\Issaver\suAMcBor0blcau.dll O2 - BHO: Iusiaver [64Bits] - {9431d017-66f2-440b-ba05-f9cfa62c8220} . (...) -- C:\Program Files (x86)\Iusiaver\Le4vogJ1D3I8Wa.dll O2 - BHO: CouuppExtensIOOn [64Bits] - {b79cc836-2bb4-4c96-8939-f94014d44f6f} . (...) -- C:\Program Files (x86)\CouuppExtensIOOn\nfNIR4GM828Efj.dll O2 - BHO: BestSaoVeForYou [64Bits] - {bdfa0e06-dc00-4956-8ed1-640848fb5f2e} . (...) -- C:\Program Files (x86)\BestSaoVeForYou\iR9cYB7M9amqeS.dll ~ Scan BHO in 00mn 16s ---\\ Applications démarrées par registre & par dossier (O4) O4 - HKLM\..\Run: [hpsysdrv] . (.Hewlett-Packard - hpsysdrv.) -- C:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe O4 - HKLM\..\Run: [SmartMenu] . (.Pas de propriétaire - SmartMenu.) -- C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe O4 - HKLM\..\Run: [MSC] . (.Microsoft Corporation - Microsoft Security Client User Interface.) -- C:\Program Files\Microsoft Security Client\msseces.exe O4 - HKLM\..\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe O4 - HKLM\..\Run: [Greenshot] . (.Greenshot - Greenshot.) -- C:\Program Files\Greenshot\Greenshot.exe O4 - HKCU\..\Run: [HPAdvisorDock] . (.Hewlett-Packard - HP Advisor Dock.) -- C:\Program Files (x86)\Hewlett-Packard\HP Advisor\Dock\HPAdvisorDock.exe O4 - HKCU\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe O4 - HKCU\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe O4 - HKCU\..\Run: [ApplePhotoStreams] . (.Apple Inc. - iCloud Photos.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe O4 - HKCU\..\Run: [iCloudServices] . (.Apple Inc. - iCloud.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe O4 - HKCU\..\Run: [Gadwin PrintScreen] . (.Gadwin Systems, Inc - Gadwin PrintScreen.) -- C:\Program Files (x86)\Gadwin Systems\PrintScreen\PrintScreen.exe O4 - HKCU\..\Run: [CCleaner Monitoring] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner64.exe O4 - HKCU\..\Run: [GarminExpressTrayApp] . (.Garmin Ltd. or its subsidiaries - Garmin Express Tray.) -- C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe O4 - HKLM\..\Wow6432Node\Run: [PDF Complete] . (.PDF Complete Inc - Sentry for PDF.) -- C:\Program Files (x86)\PDF Complete\pdfsty.exe O4 - HKLM\..\Wow6432Node\Run: [HP Software Update] . (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files (x86)\Hp\HP Software Update\hpwuschd2.exe O4 - HKLM\..\Wow6432Node\Run: [Easybits Recovery] . (.EasyBits Software AS - Power off recovery for Magic Desktop.) -- C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe O4 - HKLM\..\Wow6432Node\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe O4 - HKLM\..\Wow6432Node\Run: [Adobe Photo Downloader] . (.Adobe Systems Incorporated - Adobe Photo Downloader 3.0 component.) -- C:\Program Files (x86)\Adobe\Adobe Photoshop Lightroom 1.4\apdproxy.exe O4 - HKLM\..\Wow6432Node\Run: [HomePlayer] . (...) -- C:\Program Files (x86)\HomePlayer\HomePlayer.exe O4 - HKLM\..\Wow6432Node\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe O4 - HKUS\S-1-5-21-1662047707-3924305311-2755576146-1000\..\Run: [HPAdvisorDock] . (.Hewlett-Packard - HP Advisor Dock.) -- C:\Program Files (x86)\Hewlett-Packard\HP Advisor\Dock\HPAdvisorDock.exe O4 - HKUS\S-1-5-21-1662047707-3924305311-2755576146-1000\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe O4 - HKUS\S-1-5-21-1662047707-3924305311-2755576146-1000\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe O4 - HKUS\S-1-5-21-1662047707-3924305311-2755576146-1000\..\Run: [ApplePhotoStreams] . (.Apple Inc. - iCloud Photos.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe O4 - HKUS\S-1-5-21-1662047707-3924305311-2755576146-1000\..\Run: [iCloudServices] . (.Apple Inc. - iCloud.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe O4 - HKUS\S-1-5-21-1662047707-3924305311-2755576146-1000\..\Run: [Gadwin PrintScreen] . (.Gadwin Systems, Inc - Gadwin PrintScreen.) -- C:\Program Files (x86)\Gadwin Systems\PrintScreen\PrintScreen.exe O4 - HKUS\S-1-5-21-1662047707-3924305311-2755576146-1000\..\Run: [CCleaner Monitoring] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner64.exe O4 - HKUS\S-1-5-21-1662047707-3924305311-2755576146-1000\..\Run: [GarminExpressTrayApp] . (.Garmin Ltd. or its subsidiaries - Garmin Express Tray.) -- C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe ~ Scan Application in 00mn 00s ---\\ Autres liens utilisateurs (O4) O4 - Global Startup: C:\Users\toto\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe O4 - Global Startup: C:\Users\toto\Desktop\comptes 2014 C.E. .ods - Raccourci.lnk . (...) -- C:\Users\toto\Documents\comptes 2014 C.E. .ods O4 - Global Startup: C:\Users\toto\Desktop\Disque local (M) - Raccourci.lnk . (...) -- M:\ (.not file.) O4 - Global Startup: C:\Users\toto\Desktop\Gadwin PrintScreen.lnk . (.Gadwin Systems, Inc.) -- C:\Program Files (x86)\Gadwin Systems\PrintScreen\PrintScreen.exe O4 - Global Startup: C:\Users\toto\Desktop\HP Support Assistant.lnk . (.Hewlett-Packard Company.) -- C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe O4 - Global Startup: C:\Users\toto\Desktop\internet explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe O4 - Global Startup: C:\Users\toto\Desktop\Malwarebytes Anti-Malware.lnk . (.Malwarebytes Corporation.) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe O4 - Global Startup: C:\Users\toto\Desktop\PeerBlock.lnk . (...) -- C:\Program Files (x86)\PeerBlock\peerblock.exe (.not file.) O4 - Global Startup: C:\Users\toto\Desktop\Popcorn Time.lnk . (...) -- C:\Users\toto\AppData\Local\Popcorn Time\node-webkit\Popcorn Time.exe O4 - Global Startup: C:\Users\toto\Desktop\toto - Raccourci.lnk . (...) -- C:\Users\toto O4 - Global Startup: C:\Users\toto\Desktop\VirtualDJ 8.lnk . (.Atomix Productions.) -- C:\Program Files (x86)\VirtualDJ\virtualdj8.exe O4 - Global Startup: C:\Users\toto\Desktop\µTorrent.lnk . (.BitTorrent Inc..) -- C:\Users\toto\AppData\Roaming\uTorrent\uTorrent.exe O4 - Global Startup: C:\Users\toto\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\EssentialPIM.lnk . (...) -- C:\Program Files (x86)\EssentialPIM\EssentialPIM.exe O4 - Global Startup: C:\Users\toto\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk . (.Google Inc..) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe O4 - Global Startup: C:\Users\toto\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe O4 - Global Startup: C:\Users\toto\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Picasa 3.lnk . (.Google Inc..) -- C:\Program Files (x86)\Google\Picasa3\Picasa3.exe O4 - Global Startup: C:\Users\toto\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\WildTangent Games App - hp.lnk . (.WildTangent.) -- C:\Program Files (x86)\WildTangent Games\App\GameConsole-wt.exe O4 - Global Startup: C:\Users\toto\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk . (.BitTorrent Inc..) -- C:\Users\toto\AppData\Roaming\uTorrent\uTorrent.exe ~ Scan Global Startup in 00mn 08s ---\\ Invisibilité de l'icône d'options IE dans le panneau de Configuration (O5) O5 - control.ini: [HKLM\..\Control Panel] inetcpl.cpl=no ~ Scan IE Control Panel in 00mn 00s ---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9) O9 - Extra button: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll,-102 [64Bits] - {25510184-5A38-4A99-B273-DCA8EEF6CD08} . (...) -- C:\Program Files (x86)\Hewlett-Packard\HP Support Frame ~ Scan IE Extra Buttons in 00mn 00s ---\\ Winsock hijacker (Layered Service Provider) (O10) O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\System32\nlaapi.dll O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d’affectation de noms de messagerie.) -- C:\Windows\System32\NapiNSP.dll O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\System32\pnrpnsp.dll O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\System32\pnrpnsp.dll O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\System32\mswsock.dll O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\System32\winrnr.dll O10 - WLSP:\000000000007\Winsock LSP File . (.Apple Inc. - Bonjour Namespace Provider.) -- C:\Program Files (x86)\Bonjour\mdnsNSP.dll O10 - WLSP:\000000000008\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WLIDNSP.dll O10 - WLSP:\000000000009\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WLIDNSP.dll ~ Scan Winsock in 00mn 00s ---\\ Modification Domaine/Adresses DNS (O17) O17 - HKLM\System\CCS\Services\Tcpip\..\{9EE483B8-D106-40A7-96CE-61B85E18CB6B}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\..\{C51A5358-B4F1-48A3-A87A-1D32E57A2A1F}: DhcpNameServer = 212.27.40.240 212.27.40.241 O17 - HKLM\System\CCS\Services\Tcpip\..\{E1A09C7D-81C3-44B8-8732-F81ED2C245A5}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS1\Services\Tcpip\..\{9EE483B8-D106-40A7-96CE-61B85E18CB6B}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS1\Services\Tcpip\..\{C51A5358-B4F1-48A3-A87A-1D32E57A2A1F}: DhcpNameServer = 212.27.40.240 212.27.40.241 O17 - HKLM\System\CS1\Services\Tcpip\..\{E1A09C7D-81C3-44B8-8732-F81ED2C245A5}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS2\Services\Tcpip\..\{9EE483B8-D106-40A7-96CE-61B85E18CB6B}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS2\Services\Tcpip\..\{C51A5358-B4F1-48A3-A87A-1D32E57A2A1F}: DhcpNameServer = 212.27.40.240 212.27.40.241 O17 - HKLM\System\CS2\Services\Tcpip\..\{E1A09C7D-81C3-44B8-8732-F81ED2C245A5}: DhcpNameServer = 192.168.1.1 ~ Scan Domain in 00mn 00s ---\\ Protocole additionnel (O18) O18 - Handler: about [64Bits] - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll O18 - Handler: cdl [64Bits] - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll O18 - Handler: dvd [64Bits] - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\MSVidCtl.dll O18 - Handler: file [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll O18 - Handler: ftp [64Bits] - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll O18 - Handler: http [64Bits] - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll O18 - Handler: https [64Bits] - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll O18 - Handler: its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll O18 - Handler: javascript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll O18 - Handler: livecall [64Bits] - {828030A1-22C1-4009-854F-8E305202313F} . (...) -- O18 - Handler: local [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll O18 - Handler: mailto [64Bits] - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll O18 - Handler: mhtml [64Bits] - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\System32\inetcomm.dll O18 - Handler: mk [64Bits] - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll O18 - Handler: ms-its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll O18 - Handler: msnim [64Bits] - {828030A1-22C1-4009-854F-8E305202313F} . (...) -- O18 - Handler: res [64Bits] - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll O18 - Handler: tv [64Bits] - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\MSVidCtl.dll O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll O18 - Handler: wlmailhtml [64Bits] - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} . (.Microsoft Corporation - Windows Live Mail.) -- C:\Program Files (x86)\Windows Live\Mail\mailcomm.dll O18 - Handler: wlpg [64Bits] - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (.Microsoft Corporation - Windows Live Album Download Protocol Handle.) -- C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll O18 - Handler: wot [64Bits] - {C2A44D6B-CB9F-4663-88A6-DF2F26E4D952} . (...) -- C:\Program Files\WOT\WOT.dll O18 - Filter: application/octet-stream [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll O18 - Filter: application/x-complus [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll ~ Scan Protocole Additionnel in 00mn 00s ---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21) O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. ~ Scan SSODL in 00mn 00s ---\\ Liste des services NT non Microsoft et non désactivés (O23) O23 - Service: (1394ohci) - Clé orpheline O23 - Service: (ACPI) - Clé orpheline O23 - Service: (AcpiPmi) - Clé orpheline O23 - Service: (AdobeARMservice) - Clé orpheline O23 - Service: (AdobeFlashPlayerUpdateSvc) - Clé orpheline O23 - Service: (adp94xx) - Clé orpheline O23 - Service: (adpahci) - Clé orpheline O23 - Service: (adpu320) - Clé orpheline O23 - Service: (AeLookupSvc) - Clé orpheline O23 - Service: (AFD) - Clé orpheline O23 - Service: (agp440) - Clé orpheline O23 - Service: (ALG) - Clé orpheline O23 - Service: (aliide) - Clé orpheline O23 - Service: (amdide) - Clé orpheline O23 - Service: (AmdK8) - Clé orpheline O23 - Service: (AmdPPM) - Clé orpheline O23 - Service: (amdsata) - Clé orpheline O23 - Service: (amdsbs) - Clé orpheline O23 - Service: (amdxata) - Clé orpheline O23 - Service: (AppID) - Clé orpheline O23 - Service: (AppIDSvc) - Clé orpheline O23 - Service: (Appinfo) - Clé orpheline O23 - Service: (Apple Mobile Device Service) - Clé orpheline O23 - Service: (arc) - Clé orpheline O23 - Service: (arcsas) - Clé orpheline O23 - Service: (aspnet_state) - Clé orpheline O23 - Service: (AsyncMac) - Clé orpheline O23 - Service: (atapi) - Clé orpheline O23 - Service: (AudioEndpointBuilder) - Clé orpheline O23 - Service: (AudioSrv) - Clé orpheline O23 - Service: (AxInstSV) - Clé orpheline O23 - Service: (b06bdrv) - Clé orpheline O23 - Service: (b57nd60a) - Clé orpheline O23 - Service: (BDESVC) - Clé orpheline O23 - Service: (BFE) - Clé orpheline O23 - Service: (BITS) - Clé orpheline O23 - Service: (blbdrive) - Clé orpheline O23 - Service: (Bonjour Service) - Clé orpheline O23 - Service: (bowser) - Clé orpheline O23 - Service: (BrFiltLo) - Clé orpheline O23 - Service: (BrFiltUp) - Clé orpheline O23 - Service: (Browser) - Clé orpheline O23 - Service: (Brserid) - Clé orpheline O23 - Service: (BrSerWdm) - Clé orpheline O23 - Service: (BrUsbMdm) - Clé orpheline O23 - Service: (BrUsbSer) - Clé orpheline O23 - Service: (BTHMODEM) - Clé orpheline O23 - Service: (bthserv) - Clé orpheline O23 - Service: (cdfs) - Clé orpheline O23 - Service: (cdrom) - Clé orpheline O23 - Service: (CertPropSvc) - Clé orpheline O23 - Service: (circlass) - Clé orpheline O23 - Service: (CLFS) - Clé orpheline O23 - Service: (clr_optimization_v2.0.50727_32) - Clé orpheline O23 - Service: (clr_optimization_v2.0.50727_64) - Clé orpheline O23 - Service: (clr_optimization_v4.0.30319_32) - Clé orpheline O23 - Service: (clr_optimization_v4.0.30319_64) - Clé orpheline O23 - Service: (CmBatt) - Clé orpheline O23 - Service: (cmdide) - Clé orpheline O23 - Service: (CNG) - Clé orpheline O23 - Service: (Compbatt) - Clé orpheline O23 - Service: (CompositeBus) - Clé orpheline O23 - Service: (COMSysApp) - Clé orpheline O23 - Service: (crcdisk) - Clé orpheline O23 - Service: (CryptSvc) - Clé orpheline O23 - Service: (cvhsvc) - Clé orpheline O23 - Service: (defragsvc) - Clé orpheline O23 - Service: (DfsC) - Clé orpheline O23 - Service: (dg_ssudbus) - Clé orpheline O23 - Service: (Dhcp) - Clé orpheline O23 - Service: (discache) - Clé orpheline O23 - Service: (Disk) - Clé orpheline O23 - Service: (Dnscache) - Clé orpheline O23 - Service: (dot3svc) - Clé orpheline O23 - Service: (drmkaud) - Clé orpheline O23 - Service: (DXGKrnl) - Clé orpheline O23 - Service: (EapHost) - Clé orpheline O23 - Service: (ebdrv) - Clé orpheline O23 - Service: (EFS) - Clé orpheline O23 - Service: (ehRecvr) - Clé orpheline O23 - Service: (ehSched) - Clé orpheline O23 - Service: (elxstor) - Clé orpheline O23 - Service: (ErrDev) - Clé orpheline O23 - Service: (eventlog) - Clé orpheline O23 - Service: (EventSystem) - Clé orpheline O23 - Service: (ezSharedSvc) - Clé orpheline O23 - Service: (Fax) - Clé orpheline O23 - Service: (fdc) - Clé orpheline O23 - Service: (fdPHost) - Clé orpheline O23 - Service: (FDResPub) - Clé orpheline O23 - Service: (FileInfo) - Clé orpheline O23 - Service: (Filetrace) - Clé orpheline O23 - Service: (flpydisk) - Clé orpheline O23 - Service: (FltMgr) - Clé orpheline O23 - Service: (FontCache) - Clé orpheline O23 - Service: (FontCache3.0.0.0) - Clé orpheline O23 - Service: (FsDepends) - Clé orpheline O23 - Service: (fvevol) - Clé orpheline O23 - Service: (gagp30kx) - Clé orpheline O23 - Service: (GamesAppService) - Clé orpheline O23 - Service: (Garmin Device Interaction Service) - Clé orpheline O23 - Service: (GEARAspiWDM) - Clé orpheline O23 - Service: (gpsvc) - Clé orpheline O23 - Service: (grmnusb) - Clé orpheline O23 - Service: (gupdate) - Clé orpheline O23 - Service: (gupdatem) - Clé orpheline O23 - Service: (gusvc) - Clé orpheline O23 - Service: (hcw85cir) - Clé orpheline O23 - Service: (HdAudAddService) - Clé orpheline O23 - Service: (HDAudBus) - Clé orpheline O23 - Service: (HidBatt) - Clé orpheline O23 - Service: (HidBth) - Clé orpheline O23 - Service: (HidIr) - Clé orpheline O23 - Service: (hidserv) - Clé orpheline O23 - Service: (HidUsb) - Clé orpheline O23 - Service: (hkmsvc) - Clé orpheline O23 - Service: (HomeGroupListener) - Clé orpheline O23 - Service: (HomeGroupProvider) - Clé orpheline O23 - Service: (HP Support Assistant Service) - Clé orpheline O23 - Service: (hpqwmiex) - Clé orpheline O23 - Service: (HpSAMD) - Clé orpheline O23 - Service: (HTTP) - Clé orpheline O23 - Service: (hwpolicy) - Clé orpheline O23 - Service: (i8042prt) - Clé orpheline O23 - Service: (iaStorV) - Clé orpheline O23 - Service: (idsvc) - Clé orpheline O23 - Service: (IEEtwCollectorService) - Clé orpheline O23 - Service: (iirsp) - Clé orpheline O23 - Service: (IKEEXT) - Clé orpheline O23 - Service: (IntcAzAudAddService) - Clé orpheline O23 - Service: (intelide) - Clé orpheline O23 - Service: (intelppm) - Clé orpheline O23 - Service: (IPBusEnum) - Clé orpheline O23 - Service: (IpFilterDriver) - Clé orpheline O23 - Service: (iphlpsvc) - Clé orpheline O23 - Service: (IPMIDRV) - Clé orpheline O23 - Service: (IPNAT) - Clé orpheline O23 - Service: (iPod Service) - Clé orpheline O23 - Service: (IRENUM) - Clé orpheline O23 - Service: (isapnp) - Clé orpheline O23 - Service: (iScsiPrt) - Clé orpheline O23 - Service: (kbdclass) - Clé orpheline O23 - Service: (kbdhid) - Clé orpheline O23 - Service: (KeyIso) - Clé orpheline O23 - Service: (KSecDD) - Clé orpheline O23 - Service: (KSecPkg) - Clé orpheline O23 - Service: (ksthunk) - Clé orpheline O23 - Service: (KtmRm) - Clé orpheline O23 - Service: (LanmanServer) - Clé orpheline O23 - Service: (LanmanWorkstation) - Clé orpheline O23 - Service: (LightScribeService) - Clé orpheline O23 - Service: (lltdio) - Clé orpheline O23 - Service: (lltdsvc) - Clé orpheline O23 - Service: (lmhosts) - Clé orpheline O23 - Service: (LSI_FC) - Clé orpheline O23 - Service: (LSI_SAS) - Clé orpheline O23 - Service: (LSI_SAS2) - Clé orpheline O23 - Service: (LSI_SCSI) - Clé orpheline O23 - Service: (luafv) - Clé orpheline O23 - Service: (Mcx2Svc) - Clé orpheline O23 - Service: (megasas) - Clé orpheline O23 - Service: (MegaSR) - Clé orpheline O23 - Service: (MMCSS) - Clé orpheline O23 - Service: (Modem) - Clé orpheline O23 - Service: (monitor) - Clé orpheline O23 - Service: (mouclass) - Clé orpheline O23 - Service: (mouhid) - Clé orpheline O23 - Service: (mountmgr) - Clé orpheline O23 - Service: (MozillaMaintenance) - Clé orpheline O23 - Service: (MpFilter) - Clé orpheline O23 - Service: (mpio) - Clé orpheline O23 - Service: (mpsdrv) - Clé orpheline O23 - Service: (MpsSvc) - Clé orpheline O23 - Service: (MRxDAV) - Clé orpheline O23 - Service: (mrxsmb) - Clé orpheline O23 - Service: (mrxsmb10) - Clé orpheline O23 - Service: (mrxsmb20) - Clé orpheline O23 - Service: (msahci) - Clé orpheline O23 - Service: (msdsm) - Clé orpheline O23 - Service: (MSDTC) - Clé orpheline O23 - Service: (mshidkmdf) - Clé orpheline O23 - Service: (msisadrv) - Clé orpheline O23 - Service: (MSiSCSI) - Clé orpheline O23 - Service: (msiserver) - Clé orpheline O23 - Service: (MSKSSRV) - Clé orpheline O23 - Service: (MsMpSvc) - Clé orpheline O23 - Service: (MSPCLOCK) - Clé orpheline O23 - Service: (MSPQM) - Clé orpheline O23 - Service: (mssmbios) - Clé orpheline O23 - Service: (MSTEE) - Clé orpheline O23 - Service: (MTConfig) - Clé orpheline O23 - Service: (Mup) - Clé orpheline O23 - Service: (napagent) - Clé orpheline O23 - Service: (NativeWifiP) - Clé orpheline O23 - Service: (NDIS) - Clé orpheline O23 - Service: (NdisCap) - Clé orpheline O23 - Service: (NdisTapi) - Clé orpheline O23 - Service: (Ndisuio) - Clé orpheline O23 - Service: (NdisWan) - Clé orpheline O23 - Service: (Netaapl) - Clé orpheline O23 - Service: (NetBIOS) - Clé orpheline O23 - Service: (NetBT) - Clé orpheline O23 - Service: (Netlogon) - Clé orpheline O23 - Service: (Netman) - Clé orpheline O23 - Service: (NetMsmqActivator) - Clé orpheline O23 - Service: (NetPipeActivator) - Clé orpheline O23 - Service: (netprofm) - Clé orpheline O23 - Service: (netr28x) - Clé orpheline O23 - Service: (NetTcpActivator) - Clé orpheline O23 - Service: (NetTcpPortSharing) - Clé orpheline O23 - Service: (nfrd960) - Clé orpheline O23 - Service: (NisDrv) - Clé orpheline O23 - Service: (NisSrv) - Clé orpheline O23 - Service: (NlaSvc) - Clé orpheline O23 - Service: (nsi) - Clé orpheline O23 - Service: (nsiproxy) - Clé orpheline O23 - Service: (NVHDA) - Clé orpheline O23 - Service: (nvlddmkm) - Clé orpheline O23 - Service: (nvraid) - Clé orpheline O23 - Service: (nvstor) - Clé orpheline O23 - Service: (nvsvc) - Clé orpheline O23 - Service: (nv_agp) - Clé orpheline O23 - Service: (ohci1394) - Clé orpheline O23 - Service: (ose) - Clé orpheline O23 - Service: (osppsvc) - Clé orpheline O23 - Service: (p2pimsvc) - Clé orpheline O23 - Service: (p2psvc) - Clé orpheline O23 - Service: (Parport) - Clé orpheline O23 - Service: (partmgr) - Clé orpheline O23 - Service: (PcaSvc) - Clé orpheline O23 - Service: (pci) - Clé orpheline O23 - Service: (pciide) - Clé orpheline O23 - Service: (pcmcia) - Clé orpheline O23 - Service: (pcw) - Clé orpheline O23 - Service: (pdfcDispatcher) - Clé orpheline O23 - Service: (PEAUTH) - Clé orpheline O23 - Service: (PerfHost) - Clé orpheline O23 - Service: (pla) - Clé orpheline O23 - Service: (PlugPlay) - Clé orpheline O23 - Service: (PNRPAutoReg) - Clé orpheline O23 - Service: (PNRPsvc) - Clé orpheline O23 - Service: (PolicyAgent) - Clé orpheline O23 - Service: (Power) - Clé orpheline O23 - Service: (PptpMiniport) - Clé orpheline O23 - Service: (Processor) - Clé orpheline O23 - Service: (ProfSvc) - Clé orpheline O23 - Service: (ProtectedStorage) - Clé orpheline O23 - Service: (Psched) - Clé orpheline O23 - Service: (ql2300) - Clé orpheline O23 - Service: (ql40xx) - Clé orpheline O23 - Service: (QWAVE) - Clé orpheline O23 - Service: (QWAVEdrv) - Clé orpheline O23 - Service: (RasAcd) - Clé orpheline O23 - Service: (RasAgileVpn) - Clé orpheline O23 - Service: (RasAuto) - Clé orpheline O23 - Service: (Rasl2tp) - Clé orpheline O23 - Service: (RasMan) - Clé orpheline O23 - Service: (RasPppoe) - Clé orpheline O23 - Service: (RasSstp) - Clé orpheline O23 - Service: (rdbss) - Clé orpheline O23 - Service: (rdpbus) - Clé orpheline O23 - Service: (RDPCDD) - Clé orpheline O23 - Service: (RDPENCDD) - Clé orpheline O23 - Service: (RDPREFMP) - Clé orpheline O23 - Service: (rdyboost) - Clé orpheline O23 - Service: (RemoteAccess) - Clé orpheline O23 - Service: (RemoteRegistry) - Clé orpheline O23 - Service: (RpcEptMapper) - Clé orpheline O23 - Service: (RpcLocator) - Clé orpheline O23 - Service: (RpcSs) - Clé orpheline O23 - Service: (rspndr) - Clé orpheline O23 - Service: (RTL8167) - Clé orpheline O23 - Service: (sbp2port) - Clé orpheline O23 - Service: (SCardSvr) - Clé orpheline O23 - Service: (scfilter) - Clé orpheline O23 - Service: (Schedule) - Clé orpheline O23 - Service: (SCPolicySvc) - Clé orpheline O23 - Service: (SDRSVC) - Clé orpheline O23 - Service: (seclogon) - Clé orpheline O23 - Service: (SENS) - Clé orpheline O23 - Service: (SensrSvc) - Clé orpheline O23 - Service: (Serenum) - Clé orpheline O23 - Service: (Serial) - Clé orpheline O23 - Service: (sermouse) - Clé orpheline O23 - Service: (SessionEnv) - Clé orpheline O23 - Service: (sffdisk) - Clé orpheline O23 - Service: (sffp_mmc) - Clé orpheline O23 - Service: (sffp_sd) - Clé orpheline O23 - Service: (sfloppy) - Clé orpheline O23 - Service: (Sftfs) - Clé orpheline O23 - Service: (sftlist) - Clé orpheline O23 - Service: (Sftplay) - Clé orpheline O23 - Service: (Sftredir) - Clé orpheline O23 - Service: (Sftvol) - Clé orpheline O23 - Service: (sftvsa) - Clé orpheline O23 - Service: (SharedAccess) - Clé orpheline O23 - Service: (ShellHWDetection) - Clé orpheline O23 - Service: (SiSRaid2) - Clé orpheline O23 - Service: (SiSRaid4) - Clé orpheline O23 - Service: (SkypeUpdate) - Clé orpheline O23 - Service: (Smb) - Clé orpheline O23 - Service: (SNMPTRAP) - Clé orpheline O23 - Service: (Spooler) - Clé orpheline O23 - Service: (sppsvc) - Clé orpheline O23 - Service: (sppuinotify) - Clé orpheline O23 - Service: (srv) - Clé orpheline O23 - Service: (srv2) - Clé orpheline O23 - Service: (srvnet) - Clé orpheline O23 - Service: (SstpSvc) - Clé orpheline O23 - Service: (ssudmdm) - Clé orpheline O23 - Service: (ssudserd) - Clé orpheline O23 - Service: (stexstor) - Clé orpheline O23 - Service: (stisvc) - Clé orpheline O23 - Service: (swenum) - Clé orpheline O23 - Service: (swprv) - Clé orpheline O23 - Service: (SysMain) - Clé orpheline O23 - Service: (TabletInputService) - Clé orpheline O23 - Service: (TapiSrv) - Clé orpheline O23 - Service: (TBS) - Clé orpheline O23 - Service: (Tcpip) - Clé orpheline O23 - Service: (TCPIP6) - Clé orpheline O23 - Service: (tcpipreg) - Clé orpheline O23 - Service: (TDPIPE) - Clé orpheline O23 - Service: (TDTCP) - Clé orpheline O23 - Service: (tdx) - Clé orpheline O23 - Service: (TermDD) - Clé orpheline O23 - Service: (TermService) - Clé orpheline O23 - Service: (Themes) - Clé orpheline O23 - Service: (THREADORDER) - Clé orpheline O23 - Service: (tssecsrv) - Clé orpheline O23 - Service: (TsUsbFlt) - Clé orpheline O23 - Service: (tunnel) - Clé orpheline O23 - Service: (uagp35) - Clé orpheline O23 - Service: (udfs) - Clé orpheline O23 - Service: (UI0Detect) - Clé orpheline O23 - Service: (uliagpkx) - Clé orpheline O23 - Service: (umbus) - Clé orpheline O23 - Service: (UmPass) - Clé orpheline O23 - Service: (upnphost) - Clé orpheline O23 - Service: (USBAAPL64) - Clé orpheline O23 - Service: (usbccgp) - Clé orpheline O23 - Service: (usbcir) - Clé orpheline O23 - Service: (usbehci) - Clé orpheline O23 - Service: (usbhub) - Clé orpheline O23 - Service: (usbohci) - Clé orpheline O23 - Service: (usbprint) - Clé orpheline O23 - Service: (usbscan) - Clé orpheline O23 - Service: (USBSTOR) - Clé orpheline O23 - Service: (usbuhci) - Clé orpheline O23 - Service: (UxSms) - Clé orpheline O23 - Service: (VaultSvc) - Clé orpheline O23 - Service: (vdrvroot) - Clé orpheline O23 - Service: (vds) - Clé orpheline O23 - Service: (vga) - Clé orpheline O23 - Service: (VgaSave) - Clé orpheline O23 - Service: (vhdmp) - Clé orpheline O23 - Service: (viaide) - Clé orpheline O23 - Service: (volmgr) - Clé orpheline O23 - Service: (volmgrx) - Clé orpheline O23 - Service: (volsnap) - Clé orpheline O23 - Service: (vsmraid) - Clé orpheline O23 - Service: (VSS) - Clé orpheline O23 - Service: (vwifibus) - Clé orpheline O23 - Service: (vwififlt) - Clé orpheline O23 - Service: (vwifimp) - Clé orpheline O23 - Service: (W32Time) - Clé orpheline O23 - Service: (WacomPen) - Clé orpheline O23 - Service: (WANARP) - Clé orpheline O23 - Service: (Wanarpv6) - Clé orpheline O23 - Service: (WatAdminSvc) - Clé orpheline O23 - Service: (wbengine) - Clé orpheline O23 - Service: (WbioSrvc) - Clé orpheline O23 - Service: (wcncsvc) - Clé orpheline O23 - Service: (WcsPlugInService) - Clé orpheline O23 - Service: (Wd) - Clé orpheline O23 - Service: (Wdf01000) - Clé orpheline O23 - Service: (WebClient) - Clé orpheline O23 - Service: (Wecsvc) - Clé orpheline O23 - Service: (wercplsupport) - Clé orpheline O23 - Service: (WerSvc) - Clé orpheline O23 - Service: (WfpLwf) - Clé orpheline O23 - Service: (WIMMount) - Clé orpheline O23 - Service: (WinDefend) - Clé orpheline O23 - Service: (WinHttpAutoProxySvc) - Clé orpheline O23 - Service: (Winmgmt) - Clé orpheline O23 - Service: (WinRM) - Clé orpheline O23 - Service: (WinUsb) - Clé orpheline O23 - Service: (Wlansvc) - Clé orpheline O23 - Service: (wlidsvc) - Clé orpheline O23 - Service: (WmiAcpi) - Clé orpheline O23 - Service: (wmiApSrv) - Clé orpheline O23 - Service: (WMPNetworkSvc) - Clé orpheline O23 - Service: (WPCSvc) - Clé orpheline O23 - Service: (WPDBusEnum) - Clé orpheline O23 - Service: (ws2ifsl) - Clé orpheline O23 - Service: (wscsvc) - Clé orpheline O23 - Service: (WSearch) - Clé orpheline O23 - Service: (wuauserv) - Clé orpheline O23 - Service: (WudfPf) - Clé orpheline O23 - Service: (WUDFRd) - Clé orpheline O23 - Service: (wudfsvc) - Clé orpheline O23 - Service: (WwanSvc) - Clé orpheline ~ Scan Services in 00mn 00s ---\\ Enumération Active Desktop & MHTML Editor (O24) O24 - Default MHTML Editor: Last - .(...) - (.not file.) ~ Scan Desktop Component in 00mn 00s ---\\ BootExecute (O34) O34 - HKLM BootExecute: () - File not found ~ Scan Keys in 00mn 00s ---\\ Tâches planifiées en automatique (O39) O39 - APT:Automatic Planified Task - C:\Windows\Tasks\Adobe Flash Player Updater.job O39 - APT:Automatic Planified Task - C:\Windows\Tasks\HPCeeScheduleFortoto.job [MD5.805210C8DB11D5799E7172923959BF98] [APT] [CCleanerSkipUAC] (.Piriform Ltd.) -- C:\Program Files\CCleaner\CCleaner.exe [MD5.BEAEC745256D3158495FEE10BA673E7C] [APT] [HPCeeScheduleFortoto] (.Hewlett-Packard.) -- C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [MD5.00000000000000000000000000000000] [APT] [{43FC6700-5F3E-4A52-8201-038873E0ED86}] (...) -- C:\Users\toto\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BDS9VU0V\Vuze_4710_windows.exe (.not file.) [MD5.00000000000000000000000000000000] [APT] [{DB499566-0A7F-41A5-BD53-C571AF117961}] (...) -- C:\Users\toto\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3PUMLSDK\ZHPDiag2.exe (.not file.) [MD5.587C7D1881B4D7236F7C29CFB84EBE6A] [APT] [{FF64FBC1-7C32-4E4E-852D-18C3F677D77F}] (.BitTorrent Inc..) -- C:\Users\toto\AppData\Roaming\uTorrent\uTorrent.exe [MD5.34EBD4FF6A24D86BB4716D6AFCC1A89B] [APT] [AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe ~ Scan Scheduled Task in 00mn 03s ---\\ Composants installés (ActiveSetup Installed Components) (O40) O40 - ASIC: Microsoft Windows Media Player 12.0 [64Bits] - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\System32\wmpdxm.dll O40 - ASIC: Internet Explorer [64Bits] - {2D46B6DC-2207-486B-B523-A557E6D54B47} . (.Microsoft Corporation - Interpréteur de commandes Windows.) -- C:\Windows\system32\cmd.exe O40 - ASIC: Microsoft Windows Media Player [64Bits] - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Windows Media Player.) -- C:\Windows\system32\wmp.dll O40 - ASIC: Disable SSL3 [64Bits] - {7D715857-A67C-4C2F-A929-038448584D63} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe O40 - ASIC: Web Platform Customizations [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe O40 - ASIC: (no name) [64Bits] - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\system32\mscories.dll ~ Scan Active Setup in 00mn 00s ---\\ Pilotes lancés au démarrage (O41) O41 - Driver: C:\Windows\system32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys O41 - Driver: (blbdrive) . (.Microsoft Corporation - BLB Drive Driver.) - C:\Windows\system32\DRIVERS\blbdrive.sys O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\system32\DRIVERS\cdrom.sys O41 - Driver: C:\Windows\system32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\system32\Drivers\dfsc.sys O41 - Driver: C:\Windows\system32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\system32\drivers\discache.sys O41 - Driver: (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\system32\drivers\mssmbios.sys O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\system32\DRIVERS\netbios.sys O41 - Driver: C:\Windows\system32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\system32\DRIVERS\netbt.sys O41 - Driver: C:\Windows\system32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\system32\drivers\nsiproxy.sys O41 - Driver: C:\Windows\system32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\system32\DRIVERS\pacer.sys O41 - Driver: C:\Windows\system32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) - C:\Windows\system32\DRIVERS\rdbss.sys O41 - Driver: C:\Windows\system32\DRIVERS\RDPCDD.sys (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\system32\DRIVERS\RDPCDD.sys O41 - Driver: C:\Windows\system32\drivers\RDPENCDD.sys (RDPENCDD) . (.Microsoft Corporation - RDP Encoder Miniport.) - C:\Windows\system32\drivers\rdpencdd.sys O41 - Driver: C:\Windows\system32\drivers\RdpRefMp.sys (RDPREFMP) . (.Microsoft Corporation - RDP Reflector Driver Miniport.) - C:\Windows\system32\drivers\rdprefmp.sys O41 - Driver: C:\Windows\system32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\system32\DRIVERS\tdx.sys O41 - Driver: (TermDD) . (.Microsoft Corporation - Remote Desktop Server Driver.) - C:\Windows\system32\drivers\termdd.sys O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys O41 - Driver: (vwififlt) . (.Microsoft Corporation - Virtual WiFi Filter Driver.) - C:\Windows\system32\DRIVERS\vwififlt.sys O41 - Driver: C:\Windows\system32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\system32\DRIVERS\wanarp.sys O41 - Driver: (WfpLwf) . (.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - C:\Windows\system32\DRIVERS\wfplwf.sys ~ Scan Drivers in 00mn 00s ---\\ Logiciels installés (O42) O42 - Logiciel: ANT Drivers Installer x64 - (.Garmin Ltd or its subsidiaries.) [HKLM] -- {E72458E7-8996-4D74-B178-3A3EE9095ACF} O42 - Logiciel: Adobe Flash Player 17 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX O42 - Logiciel: Adobe Flash Player 17 NPAPI - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player NPAPI O42 - Logiciel: Adobe Reader XI (11.0.10) - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-AB0000000001} O42 - Logiciel: Adobe Refresh Manager - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-0804-1033-1959-001802114130} O42 - Logiciel: Adobe Shockwave Player 11.5 - (.Adobe Systems, Inc..) [HKLM] -- Adobe Shockwave Player O42 - Logiciel: Agatha Christie - Death on the Nile - (.WildTangent.) [HKLM] -- WT087420 O42 - Logiciel: Apple Application Support (32 bits) - (.Apple Inc..) [HKLM] -- {447CDCE5-F555-429B-BFA6-642C3C6D684F} O42 - Logiciel: Apple Application Support (64 bits) - (.Apple Inc..) [HKLM] -- {0DF7096B-715A-4233-8633-C7A16ED6D616} O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM] -- {C4123106-B685-48E6-B9BD-E4F911841EB4} O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM] -- {789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE} O42 - Logiciel: Barbie(R) sauve les animaux - (.Pas de propriétaire.) [HKLM] -- {DFF99740-4BC7-4C80-8BA7-0201D3B91779} O42 - Logiciel: Bejeweled 2 Deluxe - (.WildTangent.) [HKLM] -- WT087428 O42 - Logiciel: BitSaveer - (."".) [HKLM] -- {A3FC46A0-9B62-0EF3-B475-743B3A2762B1} O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM] -- {6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D} O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner O42 - Logiciel: Chuzzle Deluxe - (.WildTangent.) [HKLM] -- WT087453 O42 - Logiciel: Complément Messenger - (.Microsoft Corporation.) [HKLM] -- {6E5324C1-84FC-4F76-9A3A-C65E07F80EE6} O42 - Logiciel: CyberLink DVD Suite Deluxe - (.CyberLink Corp..) [HKLM] -- InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79} O42 - Logiciel: CyberLink DVD Suite Deluxe - (.CyberLink Corp..) [HKLM] -- {1FBF6C24-C1FD-4101-A42B-0C564F9E8E79} O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF} O42 - Logiciel: DVD Menu Pack for HP MediaSmart Video - (.Hewlett-Packard.) [HKLM] -- InstallShield_{FB4BB287-37F9-4E27-9C4D-2D3882E08EFF} O42 - Logiciel: DVD Menu Pack for HP MediaSmart Video - (.Hewlett-Packard.) [HKLM] -- {FB4BB287-37F9-4E27-9C4D-2D3882E08EFF} O42 - Logiciel: Diner Dash 2 Restaurant Rescue - (.WildTangent.) [HKLM] -- WT087536 O42 - Logiciel: Elevated Installer - (.Garmin Ltd or its subsidiaries.) [HKLM] -- {0C262DA4-9A45-4154-976D-7AE94109DC4F} O42 - Logiciel: EssentialPIM - (.Astonsoft Ltd.) [HKLM] -- EssentialPIM O42 - Logiciel: FATE - (.WildTangent.) [HKLM] -- WT087361 O42 - Logiciel: Gadwin PrintScreen - (.Pas de propriétaire.) [HKLM] -- Gadwin PrintScreen O42 - Logiciel: Galerie de photos Windows Live - (.Microsoft Corporation.) [HKLM] -- {488F0347-C4A7-4374-91A7-30818BEDA710} O42 - Logiciel: Garmin Express - (.Garmin Ltd or its subsidiaries.) [HKLM] -- {3ee9d193-ab0b-47f1-a31c-cce4678679ce} O42 - Logiciel: Garmin Express - (.Garmin Ltd or its subsidiaries.) [HKLM] -- {A6227383-A4A9-4486-BB79-34AEBC34D987} O42 - Logiciel: Garmin Express Tray - (.Garmin Ltd or its subsidiaries.) [HKLM] -- {557486A3-48C6-426E-A717-358A75DD27D9} O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM] -- Google Chrome O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {18455581-E099-4BA8-BC6B-F34B2F06600C} O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {2318C2B1-4965-11d4-9B18-009027A5CD4F} O42 - Logiciel: Google Earth - (.Google.) [HKLM] -- {4286E640-B5FB-11DF-AC4B-005056C00008} O42 - Logiciel: Greenshot 1.1.9.13 - (.Greenshot.) [HKLM] -- Greenshot_is1 O42 - Logiciel: HP Advisor - (.Hewlett-Packard.) [HKLM] -- {40FB8D7C-6FF8-4AF2-BC8B-0B1DB32AF04B} O42 - Logiciel: HP Customer Experience Enhancements - (.Hewlett-Packard.) [HKLM] -- {07FA4960-B038-49EB-891B-9F95930AA544} O42 - Logiciel: HP Games - (.WildTangent.) [HKLM] -- WildTangent hp Master Uninstall O42 - Logiciel: HP MediaSmart DVD - (.Hewlett-Packard.) [HKLM] -- InstallShield_{DCCAD079-F92C-44DA-B258-624FC6517A5A} O42 - Logiciel: HP MediaSmart DVD - (.Hewlett-Packard.) [HKLM] -- {DCCAD079-F92C-44DA-B258-624FC6517A5A} O42 - Logiciel: HP MediaSmart Music - (.Hewlett-Packard.) [HKLM] -- InstallShield_{91A34181-9FAD-43AB-A35F-E7A8945B7E1C} O42 - Logiciel: HP MediaSmart Music - (.Hewlett-Packard.) [HKLM] -- {91A34181-9FAD-43AB-A35F-E7A8945B7E1C} O42 - Logiciel: HP MediaSmart Photo - (.Hewlett-Packard.) [HKLM] -- InstallShield_{6DAF8CDC-9B04-413B-A0F2-BCC13CF8A5BF} O42 - Logiciel: HP MediaSmart Photo - (.Hewlett-Packard.) [HKLM] -- {6DAF8CDC-9B04-413B-A0F2-BCC13CF8A5BF} O42 - Logiciel: HP MediaSmart SmartMenu - (.Hewlett-Packard.) [HKLM] -- {5B08AF35-B699-4A44-BB89-3E51E70611E8} O42 - Logiciel: HP MediaSmart Video - (.Hewlett-Packard.) [HKLM] -- InstallShield_{D12E3E7F-1B13-4933-A915-16C7DD37A095} O42 - Logiciel: HP MediaSmart Video - (.Hewlett-Packard.) [HKLM] -- {D12E3E7F-1B13-4933-A915-16C7DD37A095} O42 - Logiciel: HP Setup - (.Hewlett-Packard.) [HKLM] -- {72D90DB3-A16A-4545-B555-868471101833} O42 - Logiciel: HP Support Assistant - (.Hewlett-Packard Company.) [HKLM] -- {E35A3B13-78CD-4967-8AC8-AA9FDA693EDE} O42 - Logiciel: HP Update - (.Hewlett-Packard.) [HKLM] -- {DE77FE3F-A33D-499A-87AD-5FC406617B40} O42 - Logiciel: HP Vision Hardware Diagnostics - (.Hewlett-Packard.) [HKLM] -- {D79A02E9-6713-4335-9668-AAC7474C0C0E} O42 - Logiciel: Hewlett-Packard ACLM.NET v1.2.2.3 - (.Hewlett-Packard Company.) [HKLM] -- {6F340107-F9AA-47C6-B54C-C3A19F11553F} O42 - Logiciel: HomePlayer 1.5.9e - (.HomePlayer.) [HKLM] -- HomePlayer O42 - Logiciel: Insaniquarium Deluxe - (.WildTangent.) [HKLM] -- WT087480 O42 - Logiciel: Internet TV pour Windows Media Center - (.Microsoft Corporation.) [HKLM] -- {9D318C86-AF4C-409F-A6AC-7183FF4CF424} O42 - Logiciel: Java 8 Update 40 - (.Oracle Corporation.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83218040F0} O42 - Logiciel: Jewel Quest II - (.WildTangent.) [HKLM] -- WT087485 O42 - Logiciel: Jewel Quest Solitaire - (.WildTangent.) [HKLM] -- WT087490 O42 - Logiciel: John Deere Drive Green - (.WildTangent.) [HKLM] -- WT087380 O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM] -- {1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4} O42 - Logiciel: LabelPrint - (.CyberLink Corp..) [HKLM] -- InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243} O42 - Logiciel: LabelPrint - (.CyberLink Corp..) [HKLM] -- {C59C179C-668D-49A9-B6EA-0121CCFC1243} O42 - Logiciel: LightScribe System Software - (.LightScribe.) [HKLM] -- {46BA053F-57B3-4153-BDB6-D37EEC8B12D7} O42 - Logiciel: Lightroom - (.Adobe.) [HKLM] -- {D4134B0B-EA9B-4835-A77A-60BEE6277101} O42 - Logiciel: Logiciel d'archivage WinRAR - (.Pas de propriétaire.) [HKLM] -- WinRAR archiver O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F} O42 - Logiciel: MSVCRT_amd64 - (.Microsoft.) [HKLM] -- {D0B44725-3666-492D-BEF6-587A14BD9BD9} O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71} O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC} O42 - Logiciel: Magic Desktop - (.EasyBits Software AS.) [HKLM] -- EasyBits Magic Desktop O42 - Logiciel: Malwarebytes Anti-Malware version 2.0.4.1028 - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes Anti-Malware_is1 O42 - Logiciel: Media Player Codec Pack 4.2.5 - (.Media Player Codec Pack.) [HKLM] -- Media Player - Codec Pack O42 - Logiciel: Microsoft .NET Framework 4.5.1 (FRA) - (.Microsoft Corporation.) [HKLM] -- {C22759DB-BA8B-30E7-99EE-8B47DB43AE56} O42 - Logiciel: Microsoft .NET Framework 4.5.1 (Français) - (.Microsoft Corporation.) [HKLM] -- {92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1036 O42 - Logiciel: Microsoft .NET Framework 4.5.2 - (.Microsoft Corporation.) [HKLM] -- {26784146-6E05-3FF9-9335-786C7C0FB5BE} O42 - Logiciel: Microsoft .NET Framework 4.5.2 - (.Microsoft Corporation.) [HKLM] -- {92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033 O42 - Logiciel: Microsoft Office 2010 - (.Microsoft Corporation.) [HKLM] -- {95140000-0070-0000-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office Starter 2010 - Français - (.Microsoft Corporation.) [HKLM] -- {90140011-0066-040C-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office « Démarrer en un clic » 2010 - (.Microsoft Corporation.) [HKLM] -- Office14.Click2Run O42 - Logiciel: Microsoft Office « Démarrer en un clic » 2010 - (.Microsoft Corporation.) [HKLM] -- {90140000-006D-040C-1000-0000000FF1CE} O42 - Logiciel: Microsoft SQL Server 2005 Compact Edition [ENU] - (.Microsoft Corporation.) [HKLM] -- {F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8} O42 - Logiciel: Microsoft Security Client - (.Microsoft Corporation.) [HKLM] -- {996D32B6-F629-4764-894B-CB24D9C19051} O42 - Logiciel: Microsoft Security Essentials - (.Microsoft Corporation.) [HKLM] -- Microsoft Security Client O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00} O42 - Logiciel: Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 - (.Microsoft Corporation.) [HKLM] -- {B6E3757B-5E77-3915-866A-CCFC4B8D194C} O42 - Logiciel: Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 - (.Microsoft Corporation.) [HKLM] -- {770657D0-A123-3C07-8E44-1C83EC895118} O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable (x64) - (.Microsoft Corporation.) [HKLM] -- {071c9b48-7c32-4621-a0ac-3f809523288f} O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable (x64) - (.Microsoft Corporation.) [HKLM] -- {ad8a2fa1-06e7-4b0d-927d-6e54b3d31028} O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {710f4c1c-cc18-4c49-8cbf-51240c89a1a2} O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 - (.Microsoft Corporation.) [HKLM] -- {8220EEFE-38CD-377E-8595-13398D740ACE} O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {4B6C7001-C7D6-3710-913E-5BC23FCE91E6} O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 - (.Microsoft Corporation.) [HKLM] -- {5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4} O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 - (.Microsoft Corporation.) [HKLM] -- {9A25302D-30C0-39D9-BD6F-21E6EC160475} O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {1F1C2DFC-2D24-3E06-BCB8-725134ADF989} O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 - (.Microsoft Corporation.) [HKLM] -- {9BE518E6-ECC6-35A9-88E4-87755C07200F} O42 - Logiciel: Movie Theme Pack for HP MediaSmart Video - (.Hewlett-Packard.) [HKLM] -- InstallShield_{3023EBDA-BF1B-4831-B347-E5018555F26E} O42 - Logiciel: Movie Theme Pack for HP MediaSmart Video - (.Hewlett-Packard.) [HKLM] -- {3023EBDA-BF1B-4831-B347-E5018555F26E} O42 - Logiciel: Mozilla Firefox 37.0.2 (x86 fr) - (.Mozilla.) [HKLM] -- Mozilla Firefox 37.0.2 (x86 fr) O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM] -- MozillaMaintenanceService O42 - Logiciel: MusicStation - (.Hewlett-Packard.) [HKLM] -- MusicStationNetstaller O42 - Logiciel: NVIDIA Pilote audio HD : 1.3.18.0 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver O42 - Logiciel: NVIDIA Pilote graphique 268.45 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver O42 - Logiciel: OpenOffice.org 3.3 - (.OpenOffice.org.) [HKLM] -- {7E0610A2-E336-40B3-B685-C4905E97EC9A} O42 - Logiciel: PC Tools File Recover 9.0 - (.PC Tools.) [HKLM] -- File Recover_is1 O42 - Logiciel: PDF Complete Special Edition - (.PDF Complete, Inc.) [HKLM] -- PDF Complete O42 - Logiciel: PVSonyDll - (.NVIDIA Corporation.) [HKLM] -- {3D3E663D-4E7E-4577-A560-7ECDDD45548A} O42 - Logiciel: Package de pilotes Windows - Dynastream Innovations, Inc. ANT LibUSB Drivers (04/11/2012 1.2.40.201) - (.Dynastream Innovations, Inc..) [HKLM] -- F9D2A789F9CFF8CEC36B544F53877C80F1F73C46 O42 - Logiciel: Package de pilotes Windows - Silicon Labs Software (DSI_SiUSBXp_3_1) USB (02/06/2007 3.1) - (.Silicon Labs Software.) [HKLM] -- D1506E0025B5A3F9EB8270FE81C1EEDD9388B8A2 O42 - Logiciel: PeerBlock 1.2 (r693) - (.PeerBlock, LLC.) [HKLM] -- {015C5B35-B678-451C-9AEE-821E8D69621C}_is1 O42 - Logiciel: Penguins! - (.WildTangent.) [HKLM] -- WT087394 O42 - Logiciel: PhotoNow! - (.CyberLink Corp..) [HKLM] -- InstallShield_{D36DD326-7280-11D8-97C8-000129760CBE} O42 - Logiciel: PhotoNow! - (.CyberLink Corp..) [HKLM] -- {D36DD326-7280-11D8-97C8-000129760CBE} O42 - Logiciel: Picasa 3 - (.Google, Inc..) [HKLM] -- Picasa 3 O42 - Logiciel: Plants vs. Zombies - (.WildTangent.) [HKLM] -- WT087501 O42 - Logiciel: PlayReady PC Runtime amd64 - (.Microsoft Corporation.) [HKLM] -- {BCA9334F-B6C9-4F65-9A73-AC5A329A4D04} O42 - Logiciel: Polar Bowler - (.WildTangent.) [HKLM] -- WT087396 O42 - Logiciel: Power2Go - (.CyberLink Corp..) [HKLM] -- InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658} O42 - Logiciel: Power2Go - (.CyberLink Corp..) [HKLM] -- {40BF1E83-20EB-11D8-97C5-0009C5020658} O42 - Logiciel: PowerDirector - (.CyberLink Corp..) [HKLM] -- InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1} O42 - Logiciel: PowerDirector - (.CyberLink Corp..) [HKLM] -- {CB099890-1D5F-11D5-9EA9-0050BAE317E1} O42 - Logiciel: PressReader - (. NewspaperDirect Inc..) [HKLM] -- {912CED74-88D3-4C5B-ACB0-13231864975D} O42 - Logiciel: QuickTime 7 - (.Apple Inc..) [HKLM] -- {3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E} O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC} O42 - Logiciel: Recovery Manager - (.CyberLink Corp..) [HKLM] -- {44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5} O42 - Logiciel: Recuva - (.Piriform.) [HKLM] -- Recuva O42 - Logiciel: SAMSUNG Mobile Modem Driver Set - (.Pas de propriétaire.) [HKLM] -- SAMSUNG Mobile Modem O42 - Logiciel: SAMSUNG Mobile USB Modem 1.0 Software - (.Pas de propriétaire.) [HKLM] -- SAMSUNG Mobile USB Modem 1.0 O42 - Logiciel: SAMSUNG Mobile USB Modem Software - (.Pas de propriétaire.) [HKLM] -- SAMSUNG Mobile USB Modem O42 - Logiciel: Samsung Mobile phone USB driver Drive Software - (.Pas de propriétaire.) [HKLM] -- Samsung Mobile phone USB driver Drive O42 - Logiciel: Samsung PC Studio 3 USB Driver Installer - (.Samsung Electronics Co., Ltd..) [HKLM] -- {EBA29752-DDD2-4B62-B2E3-9841F92A3E3A} O42 - Logiciel: Security Update for Microsoft .NET Framework 4.5.2 (KB3037581) - (.Microsoft Corporation.) [HKLM] -- {92FB6C44-E685-45AD-9B20-CADF4CABA132}.KB3037581 O42 - Logiciel: Skype™ 7.0 - (.Skype Technologies S.A..) [HKLM] -- {24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7} O42 - Logiciel: Slingo Deluxe - (.WildTangent.) [HKLM] -- WT087510 O42 - Logiciel: StatMaker - (.Software Publisher.) [HKLM] -- {12DA0E6F-5543-440C-BAA2-28BF01070AFA}{78b2995} O42 - Logiciel: Un amour de chiot - (.Pas de propriétaire.) [HKLM] -- Un amour de chiot-Français O42 - Logiciel: Update Installer for WildTangent Games App - (.WildTangent.) [HKLM] -- {2FA94A64-C84E-49d1-97DD-7BF06C7BBFB2}.WildTangent Games App O42 - Logiciel: VLC media player - (.VideoLAN.) [HKLM] -- VLC media player O42 - Logiciel: Virtual Villagers - The Secret City - (.WildTangent.) [HKLM] -- WT087513 O42 - Logiciel: VirtualDJ 8 - (.Atomix Productions.) [HKLM] -- {9ADBBA93-4625-4898-BB0D-BCE7EA9F8B4A} O42 - Logiciel: Visionneuse Microsoft PowerPoint - (.Microsoft Corporation.) [HKLM] -- {95140000-00AF-040C-0000-0000000FF1CE} O42 - Logiciel: WOT for Internet Explorer - (.WOT Services Oy.) [HKLM] -- {373B90E1-A28C-434C-92B6-7281AFA6115A} O42 - Logiciel: Wedding Dash - (.WildTangent.) [HKLM] -- WT087519 O42 - Logiciel: WildTangent Games App (HP Games) - (.WildTangent.) [HKLM] -- {70B446D1-E03B-4ab0-9B3C-0832142C9AA8}.WildTangent Games App-hp O42 - Logiciel: Windows Live - (.Microsoft Corporation.) [HKLM] -- WinLiveSuite O42 - Logiciel: Windows Live - (.Microsoft Corporation.) [HKLM] -- {34319F1F-7CF2-4CC9-B357-1AE7D2FF3AC5} O42 - Logiciel: Windows Live Communications Platform - (.Microsoft Corporation.) [HKLM] -- {D45240D3-B6B3-4FF9-B243-54ECE3E10066} O42 - Logiciel: Windows Live FolderShare - (.Microsoft Corporation.) [HKLM] -- {2075CB0A-D26F-4DAA-B424-5079296B43BA} O42 - Logiciel: Windows Live ID Sign-in Assistant - (.Microsoft Corporation.) [HKLM] -- {1ACC8FFB-9D84-4C05-A4DE-D28A9BC91698} O42 - Logiciel: Windows Live Installer - (.Microsoft Corporation.) [HKLM] -- {0B0F231F-CE6A-483D-AA23-77B364F75917} O42 - Logiciel: Windows Live Language Selector - (.Microsoft Corporation.) [HKLM] -- {027E5FAB-1476-4C59-AAB4-32EF28520399} O42 - Logiciel: Windows Live MIME IFilter - (.Microsoft Corporation.) [HKLM] -- {DA54F80E-261C-41A2-A855-549A144F2F59} O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM] -- {9D56775A-93F3-44A3-8092-840E3826DE30} O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM] -- {9FAE6E8D-E686-49F5-A574-0A58DFD9580C} O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM] -- {AB61A2E9-37D3-485D-9085-19FBDF8CEF4A} O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM] -- {E5B21F11-6933-4E0B-A25C-7963E3C07D11} O42 - Logiciel: Windows Live Messenger Companion Core - (.Microsoft Corporation.) [HKLM] -- {78A96B4C-A643-4D0F-98C2-A8E16A6669F9} O42 - Logiciel: Windows Live Movie Maker - (.Microsoft Corporation.) [HKLM] -- {6DEC8BD5-7574-47FA-B080-492BBBE2FEA3} O42 - Logiciel: Windows Live Movie Maker - (.Microsoft Corporation.) [HKLM] -- {92EA4134-10D1-418A-91E1-5A0453131A38} O42 - Logiciel: Windows Live PIMT Platform - (.Microsoft Corporation.) [HKLM] -- {83C292B7-38A5-440B-A731-07070E81A64F} O42 - Logiciel: Windows Live Photo Common - (.Microsoft Corporation.) [HKLM] -- {A9BDCA6B-3653-467B-AC83-94367DA3BFE3} O42 - Logiciel: Windows Live Photo Common - (.Microsoft Corporation.) [HKLM] -- {C893D8C0-1BA0-4517-B11C-E89B65E72F70} O42 - Logiciel: Windows Live Photo Gallery - (.Microsoft Corporation.) [HKLM] -- {3336F667-9049-4D46-98B6-4C743EEBC5B1} O42 - Logiciel: Windows Live SOXE - (.Microsoft Corporation.) [HKLM] -- {682B3E4F-696A-42DE-A41C-4C07EA1678B4} O42 - Logiciel: Windows Live SOXE Definitions - (.Microsoft Corporation.) [HKLM] -- {200FEC62-3C34-4D60-9CE8-EC372E01C08F} O42 - Logiciel: Windows Live UX Platform - (.Microsoft Corporation.) [HKLM] -- {CE95A79E-E4FC-4FFF-8A75-29F04B942FF2} O42 - Logiciel: Windows Live UX Platform Language Pack - (.Microsoft Corporation.) [HKLM] -- {05E379CC-F626-4E7D-8354-463865B303BF} O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM] -- {3B9A92DA-6374-4872-B646-253F18624D5F} O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM] -- {A726AE06-AAA3-43D1-87E3-70F510314F04} O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM] -- {AAAFC670-569B-4A2F-82B4-42945E0DE3EF} O42 - Logiciel: Windows Live Writer Resources - (.Microsoft Corporation.) [HKLM] -- {62687B11-58B5-4A18-9BC3-9DF4CE03F194} O42 - Logiciel: Zuma Deluxe - (.WildTangent.) [HKLM] -- WT087533 O42 - Logiciel: eMule - (.Pas de propriétaire.) [HKLM] -- eMule O42 - Logiciel: iCloud - (.Apple Inc..) [HKLM] -- {309768A4-A2BB-4930-A5A2-8169678C9B4C} O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM] -- {D227565A-0033-40AD-89BA-653A205CDC11} O42 - Logiciel: µTorrent - (.BitTorrent Inc..) [HKCU] -- uTorrent ---\\ HKCU & HKLM Software Keys [HKCU\Software\49040InstEnd] [HKCU\Software\ACE Compression Software] [HKCU\Software\ALWIL Software] [HKCU\Software\AVAST Software] [HKCU\Software\Adobe Lightroom] [HKCU\Software\Adobe] [HKCU\Software\AppDataLow\Google] [HKCU\Software\AppDataLow\Software\Adobe] [HKCU\Software\AppDataLow\Software\Against Intuition] [HKCU\Software\AppDataLow\Software\JavaSoft] [HKCU\Software\AppDataLow\Software\Macromedia] [HKCU\Software\AppDataLow\Software\Microsoft] [HKCU\Software\AppDataLow\Software] [HKCU\Software\AppDataLow\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}] [HKCU\Software\AppDataLow] [HKCU\Software\Apple Computer, Inc.] [HKCU\Software\Apple Inc.] [HKCU\Software\BitTorrent] [HKCU\Software\Chromium] [HKCU\Software\Classes] [HKCU\Software\Clients] [HKCU\Software\CyberLink] [HKCU\Software\DriverTuner] [HKCU\Software\DriverTuner_Init] [HKCU\Software\EasyBits] [HKCU\Software\Ecommfactory] [HKCU\Software\GNU] [HKCU\Software\Gabest] [HKCU\Software\Gadwin Systems] [HKCU\Software\Garmin] [HKCU\Software\Google] [HKCU\Software\Haali] [HKCU\Software\Hewlett-Packard] [HKCU\Software\HookNetwork] [HKCU\Software\IM Providers] [HKCU\Software\JavaSoft] [HKCU\Software\LAV] [HKCU\Software\Licenses] [HKCU\Software\LogMeIn] [HKCU\Software\Macromedia] [HKCU\Software\Magic Desktop] [HKCU\Software\Media Player - Codec Pack] [HKCU\Software\Modern UI Test] [HKCU\Software\MozillaPlugins] [HKCU\Software\NVIDIA Corporation] [HKCU\Software\Netscape] [HKCU\Software\OpenOffice.org] [HKCU\Software\Opera Software] [HKCU\Software\PDFComplete] [HKCU\Software\Piriform] [HKCU\Software\Policies] [HKCU\Software\PressReader] [HKCU\Software\Realtek] [HKCU\Software\Safer Networking Limited] [HKCU\Software\Skype] [HKCU\Software\TeleCharger] [HKCU\Software\Trolltech] [HKCU\Software\UTNJYGD] [HKCU\Software\VideoLAN] [HKCU\Software\VirtualDJ] [HKCU\Software\WebApp] [HKCU\Software\WinRAR SFX] [HKCU\Software\WinRAR] [HKCU\Software\Wow6432Node] [HKCU\Software\ZebHelpProcess Helper] [HKCU\Software\eMule] [HKCU\Software\ej-technologies] [HKCU\Software\i-FunBox.com] [HKCU\Software\mozilla] [HKLM\Software\ALWIL Software] [HKLM\Software\ATI Technologies] [HKLM\Software\AVAST Software] [HKLM\Software\Adobe] [HKLM\Software\AdwCleaner] [HKLM\Software\AppDataLow] [HKLM\Software\Apple Computer, Inc.] [HKLM\Software\Apple Inc.] [HKLM\Software\BrowserChoice] [HKLM\Software\Bunndle] [HKLM\Software\Classes] [HKLM\Software\Clients] [HKLM\Software\CyberLink] [HKLM\Software\Cyberlink] [HKLM\Software\DivXNetworks] [HKLM\Software\EasyBits] [HKLM\Software\GEAR Software] [HKLM\Software\GNU] [HKLM\Software\Garmin] [HKLM\Software\Google] [HKLM\Software\HaaliMkx] [HKLM\Software\Hewlett-Packard] [HKLM\Software\IM Providers] [HKLM\Software\Intel] [HKLM\Software\InterVideo] [HKLM\Software\JavaSoft] [HKLM\Software\JreMetrics] [HKLM\Software\Khronos] [HKLM\Software\Licenses] [HKLM\Software\LightScribe] [HKLM\Software\LogMeInRescueCallingCard] [HKLM\Software\MCCI] [HKLM\Software\Macromedia] [HKLM\Software\Malwarebytes' Anti-Malware] [HKLM\Software\Mattel Interactive] [HKLM\Software\MimarSinan] [HKLM\Software\MozillaPlugins] [HKLM\Software\Mozilla] [HKLM\Software\NVIDIA Corporation] [HKLM\Software\NewspaperDirect] [HKLM\Software\ODBC] [HKLM\Software\OpenOffice.org] [HKLM\Software\PDFComplete] [HKLM\Software\Piriform] [HKLM\Software\Policies] [HKLM\Software\Realtek Semiconductor Corp.] [HKLM\Software\Realtek] [HKLM\Software\RegisteredApplications] [HKLM\Software\SRS Labs] [HKLM\Software\Safer Networking Limited] [HKLM\Software\Samsung Electronics Co., Ltd.] [HKLM\Software\SecureDigitalServices] [HKLM\Software\Skype] [HKLM\Software\Sonic] [HKLM\Software\VideoLAN] [HKLM\Software\VirtualDJ] [HKLM\Software\Volatile] [HKLM\Software\WildTangent] [HKLM\Software\Win32 Services] [HKLM\Software\WinRAR] [HKLM\Software\Wow6432Node] [HKLM\Software\b3507ca7-7b66-9312-3570-d217c27c3ceb] [HKLM\Software\dck] [HKLM\Software\ej-technologies] [HKLM\Software\emme] [HKLM\Software\emmegroups] [HKLM\Software\magnet] [HKLM\Software\mozilla.org] [HKLM\Software\mozilla] ~ Scan Softwares in 00mn 00s ---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43) O43 - CFD: 05/02/2014 - 21:31:16 - [259,642] ----D C:\Program Files (x86)\Adobe O43 - CFD: 20/01/2015 - 21:38:15 - [2,316] ----D C:\Program Files (x86)\Apple Software Update O43 - CFD: 13/05/2015 - 10:56:19 - [0,002] ----D C:\Program Files (x86)\Best of 3d Football Soccer Games 2013 O43 - CFD: 13/05/2015 - 10:56:19 - [1,659] ----D C:\Program Files (x86)\BestSaoVeForYou O43 - CFD: 11/05/2015 - 11:32:39 - [0,013] ----D C:\Program Files (x86)\BitSaveer O43 - CFD: 11/05/2015 - 11:32:39 - [0,012] ----D C:\Program Files (x86)\BiTSaver O43 - CFD: 20/10/2011 - 18:04:36 - [0,602] ----D C:\Program Files (x86)\Bonjour O43 - CFD: 12/02/2015 - 22:23:18 - [0,002] ----D C:\Program Files (x86)\Bookmarks Tagger O43 - CFD: 12/02/2015 - 22:23:55 - [0,001] ----D C:\Program Files (x86)\CheapMMe O43 - CFD: 13/05/2015 - 10:56:19 - [0,002] ----D C:\Program Files (x86)\Chrome Logger O43 - CFD: 16/04/2015 - 03:10:07 - [412,071] ----D C:\Program Files (x86)\Common Files O43 - CFD: 13/05/2015 - 10:56:19 - [1,659] ----D C:\Program Files (x86)\CouuppExtensIOOn O43 - CFD: 22/11/2010 - 21:26:37 - [1283,782] ----D C:\Program Files (x86)\CyberLink O43 - CFD: 13/05/2015 - 10:56:19 - [1,659] ----D C:\Program Files (x86)\DiscountExttensi O43 - CFD: 21/03/2014 - 19:52:15 - [126,709] ----D C:\Program Files (x86)\EasyBits For Kids O43 - CFD: 01/02/2012 - 15:10:56 - [105,593] ----D C:\Program Files (x86)\EasyBits For Kids - Backup O43 - CFD: 18/01/2015 - 11:29:22 - [10,401] ----D C:\Program Files (x86)\eMule O43 - CFD: 06/03/2015 - 03:01:25 - [0,011] ----D C:\Program Files (x86)\EnjOyCoupaon O43 - CFD: 13/05/2015 - 10:56:19 - [0,001] ----D C:\Program Files (x86)\EnjoyCouupone O43 - CFD: 25/11/2013 - 21:45:41 - [19,559] ----D C:\Program Files (x86)\EssentialPIM O43 - CFD: 13/05/2015 - 10:56:19 - [0,002] ----D C:\Program Files (x86)\ezAutoCorrect for GMail O43 - CFD: 06/03/2015 - 03:01:25 - [0,011] ----D C:\Program Files (x86)\FaunDealsa O43 - CFD: 28/04/2015 - 19:15:08 - [0,012] ----D C:\Program Files (x86)\FFIiNdaBeestDeal O43 - CFD: 01/03/2014 - 08:02:42 - [3,500] ----D C:\Program Files (x86)\Gadwin Systems O43 - CFD: 08/05/2015 - 11:00:18 - [75,958] ----D C:\Program Files (x86)\Garmin O43 - CFD: 24/01/2015 - 13:31:17 - [679,634] ----D C:\Program Files (x86)\Google O43 - CFD: 22/01/2014 - 14:13:19 - [1533,782] ----D C:\Program Files (x86)\Hewlett-Packard O43 - CFD: 28/02/2011 - 20:36:57 - [135,914] ----D C:\Program Files (x86)\HomePlayer O43 - CFD: 22/11/2010 - 21:21:49 - [2,979] ----D C:\Program Files (x86)\Hp O43 - CFD: 14/02/2012 - 20:39:05 - [581,850] ----D C:\Program Files (x86)\HP Games O43 - CFD: 22/01/2014 - 14:17:22 - [149,303] --H-D C:\Program Files (x86)\InstallShield Installation Information O43 - CFD: 16/04/2015 - 03:28:41 - [11,337] ----D C:\Program Files (x86)\Internet Explorer O43 - CFD: 13/05/2015 - 10:56:19 - [1,659] ----D C:\Program Files (x86)\Issaver O43 - CFD: 12/03/2015 - 19:17:43 - [0,180] ----D C:\Program Files (x86)\iTunes O43 - CFD: 13/05/2015 - 10:56:19 - [1,659] ----D C:\Program Files (x86)\Iusiaver O43 - CFD: 21/03/2015 - 18:33:23 - [137,592] ----D C:\Program Files (x86)\Java O43 - CFD: 23/01/2015 - 20:29:04 - [47,865] ----D C:\Program Files (x86)\Malwarebytes Anti-Malware O43 - CFD: 17/12/2011 - 13:05:08 - [190,033] ----D C:\Program Files (x86)\Mattel Interactive O43 - CFD: 16/10/2011 - 18:39:57 - [0] ----D C:\Program Files (x86)\Microsoft O43 - CFD: 14/10/2012 - 19:04:57 - [10,895] ----D C:\Program Files (x86)\Microsoft Application Virtualization Client O43 - CFD: 29/04/2011 - 17:24:56 - [39,130] ----D C:\Program Files (x86)\Microsoft Office O43 - CFD: 12/02/2015 - 04:08:37 - [1,571] ----D C:\Program Files (x86)\Microsoft Security Client O43 - CFD: 25/07/2014 - 17:05:04 - [40,879] ----D C:\Program Files (x86)\Microsoft Silverlight O43 - CFD: 20/02/2011 - 13:17:20 - [1,745] ----D C:\Program Files (x86)\Microsoft SQL Server Compact Edition O43 - CFD: 25/02/2011 - 04:01:02 - [0,023] ----D C:\Program Files (x86)\Microsoft.NET O43 - CFD: 23/04/2015 - 10:11:48 - [84,247] ----D C:\Program Files (x86)\Mozilla Firefox O43 - CFD: 10/05/2015 - 18:51:44 - [0,241] ----D C:\Program Files (x86)\Mozilla Maintenance Service O43 - CFD: 14/07/2009 - 07:32:38 - [0,025] ----D C:\Program Files (x86)\MSBuild O43 - CFD: 29/04/2011 - 17:24:31 - [63,464] ----D C:\Program Files (x86)\MSECache O43 - CFD: 22/02/2011 - 19:24:27 - [0] ----D C:\Program Files (x86)\MSXML 4.0 O43 - CFD: 22/11/2010 - 21:44:39 - [7,167] ----D C:\Program Files (x86)\NewspaperDirect O43 - CFD: 20/02/2011 - 13:18:03 - [19,342] R---D C:\Program Files (x86)\Online Services O43 - CFD: 27/07/2011 - 21:57:47 - [338,128] ----D C:\Program Files (x86)\OpenOffice.org 3 O43 - CFD: 20/01/2015 - 21:26:45 - [0] ----D C:\Program Files (x86)\Opera O43 - CFD: 19/01/2014 - 21:15:56 - [17,839] ----D C:\Program Files (x86)\PC Tools O43 - CFD: 22/11/2010 - 21:19:25 - [36,253] ----D C:\Program Files (x86)\PDF Complete O43 - CFD: 25/12/2014 - 17:10:24 - [70,197] ----D C:\Program Files (x86)\QuickTime O43 - CFD: 12/02/2015 - 22:22:35 - [0,001] ----D C:\Program Files (x86)\RAndomPrriice O43 - CFD: 22/11/2010 - 21:19:33 - [46,195] ----D C:\Program Files (x86)\Realtek O43 - CFD: 14/07/2009 - 07:32:38 - [37,357] ----D C:\Program Files (x86)\Reference Assemblies O43 - CFD: 13/05/2015 - 10:56:19 - [0,001] ----D C:\Program Files (x86)\RegularDDeals O43 - CFD: 25/04/2012 - 06:09:40 - [5,121] ----D C:\Program Files (x86)\Samsung O43 - CFD: 12/02/2015 - 22:23:18 - [0,001] ----D C:\Program Files (x86)\SAverExtenssiOna O43 - CFD: 16/04/2015 - 03:10:07 - [44,071] R---D C:\Program Files (x86)\Skype O43 - CFD: 22/11/2010 - 21:19:46 - [0] --H-D C:\Program Files (x86)\Temp O43 - CFD: 14/07/2009 - 06:57:06 - [0] --H-D C:\Program Files (x86)\Uninstall Information O43 - CFD: 28/07/2012 - 20:00:02 - [119,082] ----D C:\Program Files (x86)\VideoLAN O43 - CFD: 01/02/2015 - 10:16:20 - [39,722] ----D C:\Program Files (x86)\VirtualDJ O43 - CFD: 14/02/2012 - 20:38:54 - [9,609] ----D C:\Program Files (x86)\WildTangent Games O43 - CFD: 14/07/2013 - 13:37:07 - [0,500] ----D C:\Program Files (x86)\Windows Defender O43 - CFD: 25/04/2012 - 20:54:31 - [120,601] ----D C:\Program Files (x86)\Windows Live O43 - CFD: 26/02/2011 - 01:34:26 - [5,895] ----D C:\Program Files (x86)\Windows Mail O43 - CFD: 11/03/2015 - 04:30:15 - [4,791] ----D C:\Program Files (x86)\Windows Media Player O43 - CFD: 14/07/2009 - 07:32:38 - [11,632] ----D C:\Program Files (x86)\Windows NT O43 - CFD: 26/02/2011 - 01:34:26 - [4,213] ----D C:\Program Files (x86)\Windows Photo Viewer O43 - CFD: 26/02/2011 - 01:34:26 - [0,181] ----D C:\Program Files (x86)\Windows Portable Devices O43 - CFD: 26/02/2011 - 01:34:26 - [5,717] ----D C:\Program Files (x86)\Windows Sidebar O43 - CFD: 02/03/2011 - 20:05:17 - [3,706] ----D C:\Program Files (x86)\WinRAR O43 - CFD: 24/01/2015 - 14:48:05 - [1,651] ----D C:\Program Files (x86)\WOT O43 - CFD: 13/05/2015 - 11:06:18 - [12,330] ----D C:\Program Files (x86)\ZHPDiag O43 - CFD: 29/05/2013 - 15:45:39 - [8,188] ----D C:\Program Files (x86)\Common Files\Adobe O43 - CFD: 05/02/2015 - 20:31:33 - [162,544] ----D C:\Program Files (x86)\Common Files\Apple O43 - CFD: 14/10/2012 - 19:04:49 - [0,095] ----D C:\Program Files (x86)\Common Files\DESIGNER O43 - CFD: 17/12/2011 - 13:03:55 - [4,926] ----D C:\Program Files (x86)\Common Files\InstallShield O43 - CFD: 21/03/2015 - 18:34:07 - [1,587] ----D C:\Program Files (x86)\Common Files\Java O43 - CFD: 22/11/2010 - 21:34:11 - [36,729] ---AD C:\Program Files (x86)\Common Files\LightScribe O43 - CFD: 22/11/2010 - 21:33:19 - [0,049] ---AD C:\Program Files (x86)\Common Files\LS Getting Started O43 - CFD: 14/11/2013 - 19:43:02 - [142,939] ----D C:\Program Files (x86)\Common Files\microsoft shared O43 - CFD: 03/02/2012 - 20:22:07 - [3,756] ----D C:\Program Files (x86)\Common Files\PX Storage Engine O43 - CFD: 14/07/2009 - 05:20:08 - [0,003] ----D C:\Program Files (x86)\Common Files\Services O43 - CFD: 16/04/2015 - 03:10:07 - [2,289] ----D C:\Program Files (x86)\Common Files\Skype O43 - CFD: 14/07/2009 - 05:20:08 - [39,200] ----D C:\Program Files (x86)\Common Files\SpeechEngines O43 - CFD: 10/11/2011 - 04:15:21 - [9,767] ----D C:\Program Files (x86)\Common Files\System O43 - CFD: 20/02/2011 - 13:15:26 - [0] ----D C:\Program Files (x86)\Common Files\Windows Live O43 - CFD: 25/12/2014 - 17:07:05 - [0,006] ----D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 O43 - CFD: 11/05/2015 - 19:53:48 - [0,009] ----D C:\ProgramData\6893316354846272091 O43 - CFD: 05/09/2013 - 19:42:38 - [196,614] ----D C:\ProgramData\Adobe O43 - CFD: 20/02/2011 - 13:55:39 - [20,084] ----D C:\ProgramData\Alwil Software O43 - CFD: 06/02/2014 - 19:44:59 - [948,328] ----D C:\ProgramData\Apple O43 - CFD: 28/02/2011 - 10:40:59 - [95,127] ----D C:\ProgramData\Apple Computer O43 - CFD: 14/07/2009 - 07:08:56 - [0] --H-D C:\ProgramData\Application Data O43 - CFD: 04/03/2011 - 10:10:03 - [0,139] ----D C:\ProgramData\CyberLink O43 - CFD: 14/07/2009 - 07:08:56 - [0] --H-D C:\ProgramData\Desktop O43 - CFD: 14/07/2009 - 07:08:56 - [0] --H-D C:\ProgramData\Documents O43 - CFD: 12/03/2015 - 19:18:37 - [2,775] ----D C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7 O43 - CFD: 04/01/2014 - 20:07:50 - [0,000] ----D C:\ProgramData\Easybits O43 - CFD: 22/01/2014 - 19:03:16 - [0] ----D C:\ProgramData\eMule O43 - CFD: 14/07/2009 - 07:08:56 - [0] --H-D C:\ProgramData\Favorites O43 - CFD: 08/05/2015 - 10:59:47 - [25,153] ----D C:\ProgramData\Garmin O43 - CFD: 24/01/2015 - 13:31:22 - [0,519] ----D C:\ProgramData\Google O43 - CFD: 22/01/2014 - 14:11:09 - [116,444] ----D C:\ProgramData\Hewlett-Packard O43 - CFD: 11/03/2012 - 17:25:55 - [0] ----D C:\ProgramData\LogMeIn O43 - CFD: 11/10/2014 - 09:54:55 - [53,502] ----D C:\ProgramData\Malwarebytes O43 - CFD: 16/12/2014 - 20:49:20 - [-2021,193] -S--D C:\ProgramData\Microsoft O43 - CFD: 26/12/2013 - 13:57:06 - [0,037] ----D C:\ProgramData\Mozilla O43 - CFD: 22/11/2010 - 21:44:39 - [0] ----D C:\ProgramData\NewspaperDirect O43 - CFD: 22/02/2011 - 20:46:54 - [0,000] ----D C:\ProgramData\Norton O43 - CFD: 22/11/2010 - 21:49:36 - [15,699] ----D C:\ProgramData\NortonInstaller O43 - CFD: 02/05/2013 - 11:16:07 - [0,264] ----D C:\ProgramData\NVIDIA O43 - CFD: 22/02/2011 - 20:22:43 - [0,548] ----D C:\ProgramData\NVIDIA Corporation O43 - CFD: 21/03/2015 - 18:34:13 - [67,709] ----D C:\ProgramData\Oracle O43 - CFD: 08/05/2015 - 11:00:39 - [51,018] ----D C:\ProgramData\Package Cache O43 - CFD: 19/01/2014 - 21:14:08 - [0] ----D C:\ProgramData\PC Tools O43 - CFD: 08/05/2015 - 00:47:10 - [0] ----D C:\ProgramData\PDFC O43 - CFD: 20/01/2015 - 21:24:35 - [0,041] ----D C:\ProgramData\ppoofdhbaboeliknmkogpcgfgemkhogd O43 - CFD: 22/11/2010 - 21:20:39 - [3,376] ----D C:\ProgramData\Ralink Driver O43 - CFD: 16/04/2015 - 03:10:15 - [96,866] ----D C:\ProgramData\Skype O43 - CFD: 27/04/2011 - 17:31:38 - [1,243] ----D C:\ProgramData\Skype Extras O43 - CFD: 14/07/2009 - 07:08:56 - [0] --H-D C:\ProgramData\Start Menu O43 - CFD: 21/03/2015 - 18:34:08 - [0,000] ----D C:\ProgramData\Sun O43 - CFD: 20/01/2014 - 07:39:20 - [0,469] ---AD C:\ProgramData\Temp O43 - CFD: 14/07/2009 - 07:08:56 - [0] --H-D C:\ProgramData\Templates O43 - CFD: 14/10/2012 - 21:16:39 - [0] ----D C:\ProgramData\VirtualizedApplications O43 - CFD: 14/02/2012 - 20:39:00 - [1624,251] ----D C:\ProgramData\WildTangent O43 - CFD: 22/01/2014 - 14:12:08 - [43,420] ----D C:\ProgramData\{18165758-115C-4DC0-9EC2-FF89F725767F} O43 - CFD: 22/08/2011 - 08:22:20 - [4,438] ----D C:\ProgramData\{3C0AACBF-B491-4BE5-BAF9-AA46E0629E42} O43 - CFD: 25/04/2015 - 03:44:10 - [0,001] ----D C:\ProgramData\{60b3c33a-a9b3-95b0-60b3-3c33aa9b0cea} O43 - CFD: 28/02/2011 - 10:41:20 - [0] ----D C:\ProgramData\{93E26451-CD9A-43A5-A2FA-C42392EA4001} O43 - CFD: 14/06/2013 - 09:05:37 - [8,326] ----D C:\Users\toto\AppData\Roaming\Adobe O43 - CFD: 03/01/2015 - 10:40:23 - [-2026,868] ----D C:\Users\toto\AppData\Roaming\Apple Computer O43 - CFD: 10/05/2013 - 12:00:52 - [12,668] ----D C:\Users\toto\AppData\Roaming\Azureus O43 - CFD: 02/04/2013 - 19:46:50 - [0] ----D C:\Users\toto\AppData\Roaming\CyberLink O43 - CFD: 02/05/2015 - 23:23:12 - [0,000] ----D C:\Users\toto\AppData\Roaming\dvdcss O43 - CFD: 25/11/2013 - 21:46:09 - [3,492] ----D C:\Users\toto\AppData\Roaming\EssentialPIM O43 - CFD: 08/05/2015 - 11:00:08 - [0,056] ----D C:\Users\toto\AppData\Roaming\GARMIN O43 - CFD: 26/02/2011 - 21:23:33 - [0] ----D C:\Users\toto\AppData\Roaming\Google O43 - CFD: 25/03/2015 - 20:55:56 - [0,013] ----D C:\Users\toto\AppData\Roaming\Greenshot O43 - CFD: 01/03/2011 - 08:55:28 - [0,083] ----D C:\Users\toto\AppData\Roaming\Hewlett-Packard O43 - CFD: 21/01/2014 - 22:56:11 - [0,000] ----D C:\Users\toto\AppData\Roaming\HP Support Assistant O43 - CFD: 21/11/2012 - 09:05:12 - [0,181] ----D C:\Users\toto\AppData\Roaming\hpqLog O43 - CFD: 21/01/2014 - 22:56:11 - [0,067] ----D C:\Users\toto\AppData\Roaming\HpUpdate O43 - CFD: 20/02/2011 - 13:26:55 - [0] ----D C:\Users\toto\AppData\Roaming\Identities O43 - CFD: 31/08/2012 - 09:42:51 - [0,002] ----D C:\Users\toto\AppData\Roaming\iFunbox_UserCache O43 - CFD: 20/02/2011 - 13:30:32 - [0,001] ----D C:\Users\toto\AppData\Roaming\Macromedia O43 - CFD: 14/07/2009 - 09:44:38 - [0] ----D C:\Users\toto\AppData\Roaming\Media Center Programs O43 - CFD: 10/05/2013 - 12:00:52 - [0] ----D C:\Users\toto\AppData\Roaming\Media Player Classic O43 - CFD: 05/09/2014 - 11:59:33 - [9,829] -S--D C:\Users\toto\AppData\Roaming\Microsoft O43 - CFD: 17/02/2015 - 19:06:07 - [26,729] ----D C:\Users\toto\AppData\Roaming\Mozilla O43 - CFD: 14/02/2012 - 20:29:31 - [0,008] ----D C:\Users\toto\AppData\Roaming\NewspaperDirect O43 - CFD: 27/07/2011 - 21:58:43 - [3,195] ----D C:\Users\toto\AppData\Roaming\OpenOffice.org O43 - CFD: 19/01/2014 - 21:14:06 - [0,005] ----D C:\Users\toto\AppData\Roaming\Product_FR O43 - CFD: 08/07/2012 - 08:44:08 - [3,451] ----D C:\Users\toto\AppData\Roaming\redsn0w O43 - CFD: 13/05/2015 - 10:25:51 - [5,177] ----D C:\Users\toto\AppData\Roaming\Skype O43 - CFD: 27/04/2011 - 17:31:32 - [0,030] ----D C:\Users\toto\AppData\Roaming\skypePM O43 - CFD: 02/11/2014 - 12:45:18 - [0,029] ----D C:\Users\toto\AppData\Roaming\SMIGames O43 - CFD: 12/04/2015 - 21:09:55 - [1,229] ----D C:\Users\toto\AppData\Roaming\SoftGrid Client O43 - CFD: 14/10/2012 - 19:06:25 - [0] ----D C:\Users\toto\AppData\Roaming\TP O43 - CFD: 13/05/2015 - 08:07:43 - [6,353] ----D C:\Users\toto\AppData\Roaming\uTorrent O43 - CFD: 12/05/2015 - 22:09:25 - [0,381] ----D C:\Users\toto\AppData\Roaming\vlc O43 - CFD: 22/02/2011 - 23:24:25 - [0] ----D C:\Users\toto\AppData\Roaming\WinBatch O43 - CFD: 18/03/2011 - 14:02:24 - [0,000] ----D C:\Users\toto\AppData\Roaming\Windows Live Writer O43 - CFD: 02/03/2011 - 20:05:49 - [0,000] ----D C:\Users\toto\AppData\Roaming\WinRAR O43 - CFD: 01/11/2014 - 17:26:49 - [0,190] ----D C:\Users\toto\AppData\Roaming\_MDLogs O43 - CFD: 24/01/2015 - 13:32:52 - [0,249] ----D C:\Users\toto\AppData\Local\Adobe O43 - CFD: 25/12/2014 - 21:10:53 - [0] ----D C:\Users\toto\AppData\Local\Apple O43 - CFD: 13/11/2013 - 07:27:59 - [120,258] ----D C:\Users\toto\AppData\Local\Apple Computer O43 - CFD: 20/02/2011 - 13:15:03 - [0] ----D C:\Users\toto\AppData\Local\Application Data O43 - CFD: 21/03/2011 - 19:53:55 - [0,066] ----D C:\Users\toto\AppData\Local\CyberLink O43 - CFD: 27/04/2015 - 01:00:28 - [0] ----D C:\Users\toto\AppData\Local\Diagnostics O43 - CFD: 04/11/2013 - 20:32:12 - [0] ----D C:\Users\toto\AppData\Local\DriverTuner O43 - CFD: 19/10/2014 - 01:00:22 - [0] ----D C:\Users\toto\AppData\Local\ElevatedDiagnostics O43 - CFD: 12/11/2014 - 08:04:19 - [0] -SH-D C:\Users\toto\AppData\Local\EmieBrowserModeList O43 - CFD: 30/04/2014 - 13:59:47 - [0] -SH-D C:\Users\toto\AppData\Local\EmieSiteList O43 - CFD: 30/04/2014 - 13:59:47 - [0] -SH-D C:\Users\toto\AppData\Local\EmieUserList O43 - CFD: 20/01/2014 - 22:22:06 - [1,985] ----D C:\Users\toto\AppData\Local\eMule O43 - CFD: 15/08/2013 - 11:45:13 - [0,001] ----D C:\Users\toto\AppData\Local\Garmin O43 - CFD: 08/05/2015 - 11:01:09 - [0,002] ----D C:\Users\toto\AppData\Local\Garmin_Ltd._or_its_subsid O43 - CFD: 28/01/2015 - 16:55:07 - [709,351] ----D C:\Users\toto\AppData\Local\Google O43 - CFD: 25/03/2015 - 20:55:56 - [0,607] ----D C:\Users\toto\AppData\Local\Greenshot O43 - CFD: 27/09/2013 - 17:59:09 - [52,944] ----D C:\Users\toto\AppData\Local\Hewlett-Packard O43 - CFD: 20/02/2011 - 13:15:03 - [0] ----D C:\Users\toto\AppData\Local\Historique O43 - CFD: 06/06/2011 - 18:43:42 - [0] ----D C:\Users\toto\AppData\Local\HP MediaSmart Video O43 - CFD: 07/07/2012 - 22:12:26 - [0,442] ----D C:\Users\toto\AppData\Local\libimobiledevice O43 - CFD: 11/03/2012 - 17:25:55 - [0] ----D C:\Users\toto\AppData\Local\LogMeIn O43 - CFD: 27/12/2013 - 21:39:25 - [0] ----D C:\Users\toto\AppData\Local\Macromedia O43 - CFD: 20/09/2014 - 17:06:41 - [1923,659] ----D C:\Users\toto\AppData\Local\Microsoft O43 - CFD: 15/11/2013 - 21:17:09 - [0,882] ----D C:\Users\toto\AppData\Local\Microsoft Games O43 - CFD: 26/12/2013 - 13:57:54 - [6,845] ----D C:\Users\toto\AppData\Local\Mozilla O43 - CFD: 10/03/2015 - 16:15:46 - [0] ----D C:\Users\toto\AppData\Local\PDFC O43 - CFD: 19/09/2014 - 16:05:12 - [78,976] ----D C:\Users\toto\AppData\Local\Popcorn Time O43 - CFD: 19/09/2014 - 16:11:25 - [11,522] ----D C:\Users\toto\AppData\Local\Popcorn-Time O43 - CFD: 21/03/2011 - 19:53:53 - [0] ----D C:\Users\toto\AppData\Local\PowerCinema O43 - CFD: 14/04/2014 - 18:57:19 - [0] ----D C:\Users\toto\AppData\Local\Programs O43 - CFD: 11/01/2014 - 11:47:33 - [0,000] ----D C:\Users\toto\AppData\Local\Rainbow O43 - CFD: 16/04/2015 - 06:52:15 - [4,661] ----D C:\Users\toto\AppData\Local\Skype O43 - CFD: 14/10/2012 - 19:06:07 - [0,543] ----D C:\Users\toto\AppData\Local\SoftGrid Client O43 - CFD: 13/05/2015 - 11:07:40 - [821,659] ----D C:\Users\toto\AppData\Local\Temp O43 - CFD: 20/02/2011 - 13:15:03 - [0] ----D C:\Users\toto\AppData\Local\Temporary Internet Files O43 - CFD: 12/09/2012 - 14:42:12 - [3,929] ----D C:\Users\toto\AppData\Local\VirtualStore O43 - CFD: 22/02/2014 - 18:52:53 - [0,113] ----D C:\Users\toto\AppData\Local\Windows Live O43 - CFD: 01/03/2011 - 17:35:07 - [0,618] ----D C:\Users\toto\AppData\Local\Windows Live Writer O43 - CFD: 25/02/2015 - 18:24:07 - [0] ----D C:\Users\toto\AppData\Local\{01869930-C318-4854-809E-FC9E2BE2A7A6} O43 - CFD: 04/03/2015 - 10:21:16 - [0] ----D C:\Users\toto\AppData\Local\{03D492D0-54B8-4EE6-B7CF-C7451D0D2646} O43 - CFD: 09/02/2015 - 18:14:31 - [0] ----D C:\Users\toto\AppData\Local\{0B21840C-536B-4E88-A8B6-FF118E6BD316} O43 - CFD: 30/04/2015 - 08:20:26 - [0] ----D C:\Users\toto\AppData\Local\{0C7C86B4-1E36-4E35-82DA-FC9FC6FD7904} O43 - CFD: 11/02/2015 - 12:27:02 - [0] ----D C:\Users\toto\AppData\Local\{0D6F6C5F-73AA-4808-B4D7-9CE7D9D3CC43} O43 - CFD: 03/02/2015 - 18:51:34 - [0] ----D C:\Users\toto\AppData\Local\{123C3ECC-6B8B-4BA1-920C-493006ED6A27} O43 - CFD: 03/05/2015 - 21:10:54 - [0] ----D C:\Users\toto\AppData\Local\{140046D3-8CD5-4D90-8D16-72B36AD841B3} O43 - CFD: 12/03/2015 - 03:25:41 - [0] ----D C:\Users\toto\AppData\Local\{157EBAC6-9B50-421A-AE13-5C96B5CBAB15} O43 - CFD: 26/03/2015 - 19:07:59 - [0] ----D C:\Users\toto\AppData\Local\{16C8CD77-8B0C-4731-B398-B658809BE8B5} O43 - CFD: 22/04/2015 - 22:51:26 - [0] ----D C:\Users\toto\AppData\Local\{17673339-DF9C-4729-B08E-A76B02FF903F} O43 - CFD: 17/04/2015 - 16:23:24 - [0] ----D C:\Users\toto\AppData\Local\{18560A71-8208-46F2-AE81-4D41C16AF310} O43 - CFD: 11/04/2015 - 13:32:59 - [0] ----D C:\Users\toto\AppData\Local\{1C0334AB-B2E8-4D44-846F-E08F3B587DC7} O43 - CFD: 13/03/2015 - 19:05:01 - [0] ----D C:\Users\toto\AppData\Local\{239868D4-9544-4485-9D18-B3AC4C67585A} O43 - CFD: 27/02/2015 - 07:48:23 - [0] ----D C:\Users\toto\AppData\Local\{267ADBBF-95C1-4449-BA32-70107939F1AA} O43 - CFD: 31/03/2015 - 18:56:23 - [0] ----D C:\Users\toto\AppData\Local\{26B870E6-F3B5-4E7A-84AA-0A6ACB4669B2} O43 - CFD: 16/04/2015 - 16:22:06 - [0] ----D C:\Users\toto\AppData\Local\{26FD8115-BEB0-42C6-B884-52EA7A500F52} O43 - CFD: 27/03/2015 - 18:57:38 - [0] ----D C:\Users\toto\AppData\Local\{2FF44302-AE5C-44ED-9BAF-59E6FFE1359E} O43 - CFD: 05/05/2015 - 18:40:55 - [0] ----D C:\Users\toto\AppData\Local\{306119B7-89BB-490F-A2DE-A1502A9ACFFE} O43 - CFD: 23/02/2015 - 18:21:15 - [0] ----D C:\Users\toto\AppData\Local\{3191EB4A-DFCE-47B7-80F5-6C1329350E6A} O43 - CFD: 29/01/2015 - 18:45:40 - [0] ----D C:\Users\toto\AppData\Local\{322A3E73-D683-423C-B209-3375FFA4C273} O43 - CFD: 21/04/2015 - 10:49:56 - [0] ----D C:\Users\toto\AppData\Local\{335069AF-F6F4-4876-93B6-808EB3689D44} O43 - CFD: 20/02/2015 - 18:56:18 - [0] ----D C:\Users\toto\AppData\Local\{35EDFB53-F726-4790-8C73-9F4C5D8F3EF3} O43 - CFD: 27/04/2015 - 08:17:15 - [0] ----D C:\Users\toto\AppData\Local\{36815168-A3D9-49B1-89C3-50A40A66404A} O43 - CFD: 11/03/2015 - 03:24:11 - [0] ----D C:\Users\toto\AppData\Local\{3821D256-C51D-4135-949A-9CCD65CD4EDD} O43 - CFD: 12/05/2015 - 09:00:00 - [0] ----D C:\Users\toto\AppData\Local\{3826B90F-4280-4D34-9F45-E3714B028B0F} O43 - CFD: 20/03/2015 - 20:30:28 - [0] ----D C:\Users\toto\AppData\Local\{3B0A3986-D3DD-41E4-9EFF-7B525D3A3D44} O43 - CFD: 01/05/2015 - 20:21:19 - [0] ----D C:\Users\toto\AppData\Local\{3C96C315-1344-4C1F-B816-5A427AB38995} O43 - CFD: 15/03/2015 - 20:16:05 - [0] ----D C:\Users\toto\AppData\Local\{3D0B7A27-81C7-41FF-9AC4-89D66401A324} O43 - CFD: 28/04/2015 - 20:18:04 - [0] ----D C:\Users\toto\AppData\Local\{3D9FF045-D818-47AC-970E-CD95810B554B} O43 - CFD: 10/02/2015 - 18:15:43 - [0] ----D C:\Users\toto\AppData\Local\{3E0E34D2-FE3F-4E8E-BA13-796CBFBFF6BE} O43 - CFD: 25/02/2015 - 06:23:14 - [0] ----D C:\Users\toto\AppData\Local\{41B8DCAE-6332-4FAB-A324-B836F71A5E59} O43 - CFD: 11/05/2015 - 20:59:02 - [0] ----D C:\Users\toto\AppData\Local\{425E5B09-0123-412A-AD33-E9A3C3A765FA} O43 - CFD: 27/02/2015 - 19:48:35 - [0] ----D C:\Users\toto\AppData\Local\{44886AE0-285F-402F-A880-AC2D8736F0D8} O43 - CFD: 11/03/2015 - 15:25:22 - [0] ----D C:\Users\toto\AppData\Local\{45B60CB0-BC9A-415C-83B3-4FC0C325EC8A} O43 - CFD: 07/05/2015 - 06:42:12 - [0] ----D C:\Users\toto\AppData\Local\{479C21E0-388B-41D7-80E9-2E2F98378E1C} O43 - CFD: 30/03/2015 - 18:54:51 - [0] ----D C:\Users\toto\AppData\Local\{48F19088-2E18-439C-A088-981E592C5FAD} O43 - CFD: 19/03/2015 - 20:04:06 - [0] ----D C:\Users\toto\AppData\Local\{4A5C2E37-DB64-47B3-873F-2C9D43B577E9} O43 - CFD: 15/04/2015 - 21:53:23 - [0] ----D C:\Users\toto\AppData\Local\{4AF7E02F-6A26-4AB6-BC6F-02711D89658F} O43 - CFD: 18/04/2015 - 16:24:46 - [0] ----D C:\Users\toto\AppData\Local\{4AFA33F3-6C4F-4265-A7F6-9BFD33B77416} O43 - CFD: 26/02/2015 - 19:47:29 - [0] ----D C:\Users\toto\AppData\Local\{4B85ADAE-321E-4338-A9F2-4BB1BE43F53D} O43 - CFD: 20/04/2015 - 10:57:25 - [0] ----D C:\Users\toto\AppData\Local\{4D7DBAC7-6446-4C8F-B6CB-05DD5F0F9694} O43 - CFD: 02/05/2015 - 20:22:31 - [0] ----D C:\Users\toto\AppData\Local\{500E86F4-0347-4762-A376-EF24960D4F52} O43 - CFD: 01/02/2015 - 00:23:10 - [0] ----D C:\Users\toto\AppData\Local\{53BB6BBC-C1AB-4AD7-9ADE-C13F1D9B3A03} O43 - CFD: 03/05/2015 - 08:23:27 - [0] ----D C:\Users\toto\AppData\Local\{549D625A-7CE0-408B-AD51-037E5823F56B} O43 - CFD: 12/02/2015 - 00:27:15 - [0] ----D C:\Users\toto\AppData\Local\{569FC60D-3500-46B7-8D45-8CF5A7E870AE} O43 - CFD: 10/04/2015 - 01:30:20 - [0] ----D C:\Users\toto\AppData\Local\{56F11C54-843D-473E-ABB1-4140A83D4D50} O43 - CFD: 30/01/2015 - 12:02:41 - [0] ----D C:\Users\toto\AppData\Local\{56F51C83-FE57-49DE-A885-0B74E3DF6D11} O43 - CFD: 23/03/2015 - 03:22:53 - [0] ----D C:\Users\toto\AppData\Local\{5950A5A6-A4B8-4B73-91F5-45F32E18945F} O43 - CFD: 08/04/2015 - 19:21:56 - [0] ----D C:\Users\toto\AppData\Local\{5A085563-F28C-493C-B451-B1F1932E25D3} O43 - CFD: 07/04/2015 - 19:21:19 - [0] ----D C:\Users\toto\AppData\Local\{5AA5C82D-51B4-48F4-9183-10DD54C51E54} O43 - CFD: 11/04/2015 - 01:32:07 - [0] ----D C:\Users\toto\AppData\Local\{5AFE1D7F-81BE-46CC-A761-F435363C483D} O43 - CFD: 03/04/2015 - 18:55:34 - [0] ----D C:\Users\toto\AppData\Local\{60582DED-5188-494B-86C7-894622CAD8DD} O43 - CFD: 22/04/2015 - 10:50:33 - [0] ----D C:\Users\toto\AppData\Local\{6085B5F1-106D-4959-A7C5-9C4C0D3B79A0} O43 - CFD: 31/03/2015 - 06:55:58 - [0] ----D C:\Users\toto\AppData\Local\{61BC4536-65AA-4BC3-9B53-34B1DAAEF040} O43 - CFD: 08/05/2015 - 11:52:49 - [0] ----D C:\Users\toto\AppData\Local\{6386C729-0925-4480-8902-AACA28DE1A0D} O43 - CFD: 09/04/2015 - 13:30:08 - [0] ----D C:\Users\toto\AppData\Local\{652505C0-0151-4537-BFD7-FB30793BBCF8} O43 - CFD: 07/05/2015 - 19:01:48 - [0] ----D C:\Users\toto\AppData\Local\{68807FE3-E557-45A2-BF86-73A8BE55D621} O43 - CFD: 10/04/2015 - 13:31:13 - [0] ----D C:\Users\toto\AppData\Local\{6ED187B2-75CA-4F54-BCF2-FFC788437F58} O43 - CFD: 02/03/2015 - 07:51:51 - [0] ----D C:\Users\toto\AppData\Local\{6EF9A71C-B408-4752-84E8-4DBEA4D78E68} O43 - CFD: 01/03/2015 - 07:50:33 - [0] ----D C:\Users\toto\AppData\Local\{71B8AB55-3961-440F-9643-DED1F1E08F5C} O43 - CFD: 26/01/2015 - 19:58:42 - [0] ----D C:\Users\toto\AppData\Local\{752FE851-F9DA-4E6B-9B3C-4E341C530583} O43 - CFD: 08/04/2015 - 07:21:31 - [0] ----D C:\Users\toto\AppData\Local\{7B5FE58D-15C6-43D8-8CD5-34BA01ADC00B} O43 - CFD: 12/02/2015 - 12:28:21 - [0] ----D C:\Users\toto\AppData\Local\{7D059E25-DA00-47AE-B61C-CC7F84760AE8} O43 - CFD: 25/03/2015 - 03:25:44 - [0] ----D C:\Users\toto\AppData\Local\{80112506-4423-40E5-821E-99B15DA7CE07} O43 - CFD: 22/03/2015 - 15:22:40 - [0] ----D C:\Users\toto\AppData\Local\{80216D81-F53A-4918-AD9D-AC292D3BEF63} O43 - CFD: 24/03/2015 - 03:23:58 - [0] ----D C:\Users\toto\AppData\Local\{809C9B99-54CE-4CB8-87F8-179C71E68907} O43 - CFD: 04/02/2015 - 06:52:28 - [0] ----D C:\Users\toto\AppData\Local\{847BB458-507F-4662-972F-85E8ED2AB4CE} O43 - CFD: 30/04/2015 - 20:20:39 - [0] ----D C:\Users\toto\AppData\Local\{85B0A70F-D025-4AA5-82BA-798E8ABF0A23} O43 - CFD: 09/02/2015 - 06:13:28 - [0] ----D C:\Users\toto\AppData\Local\{85B8C816-8244-4DE5-BB4C-F5F871E115BC} O43 - CFD: 06/05/2015 - 06:41:07 - [0] ----D C:\Users\toto\AppData\Local\{864C8817-B29D-4805-B628-FA5E36CA1245} O43 - CFD: 03/03/2015 - 07:53:38 - [0] ----D C:\Users\toto\AppData\Local\{881BF624-245D-465B-B170-E10EBDC89634} O43 - CFD: 14/04/2015 - 21:51:37 - [0] ----D C:\Users\toto\AppData\Local\{8860130B-F546-4C20-92C7-9135D1A46F5E} O43 - CFD: 05/02/2015 - 20:00:53 - [0] ----D C:\Users\toto\AppData\Local\{8A1895CA-B7B6-4FD9-A053-F9E2D7BEA302} O43 - CFD: 12/04/2015 - 13:33:23 - [0] ----D C:\Users\toto\AppData\Local\{8AC2B3C6-7803-42FB-BFEC-2AD8C12EB7C7} O43 - CFD: 13/04/2015 - 21:50:18 - [0] ----D C:\Users\toto\AppData\Local\{8E92203C-57DD-472A-9C98-3E72FFE66C03} O43 - CFD: 26/04/2015 - 20:16:51 - [0] ----D C:\Users\toto\AppData\Local\{8E99193E-DB66-4427-A263-C77B5AA87099} O43 - CFD: 05/05/2015 - 06:40:02 - [0] ----D C:\Users\toto\AppData\Local\{8ED88AFA-6BDE-4266-9101-5B626EFD2EC1} O43 - CFD: 15/04/2015 - 09:52:30 - [0] ----D C:\Users\toto\AppData\Local\{907ED0B5-1388-4200-A214-901E073C1792} O43 - CFD: 24/02/2015 - 18:22:21 - [0] ----D C:\Users\toto\AppData\Local\{92D015B5-3297-4EE1-8AD2-878A1CF34F74} O43 - CFD: 13/02/2015 - 00:28:34 - [0] ----D C:\Users\toto\AppData\Local\{930DB857-745B-4728-BB11-B211805D7122} O43 - CFD: 19/04/2015 - 20:25:28 - [0] ----D C:\Users\toto\AppData\Local\{941A455F-4A92-409A-95CC-A84B4ECA39B5} O43 - CFD: 10/03/2015 - 15:22:56 - [0] ----D C:\Users\toto\AppData\Local\{946EFC39-DA26-49A7-9B3B-96AAAFDCBA3F} O43 - CFD: 04/05/2015 - 17:57:48 - [0] ----D C:\Users\toto\AppData\Local\{9531F209-11F3-45AC-B9A7-2674335B78DD} O43 - CFD: 31/01/2015 - 10:12:37 - [0] ----D C:\Users\toto\AppData\Local\{9573FFB3-D909-4402-86EC-0D50533A3324} O43 - CFD: 17/04/2015 - 04:22:19 - [0] ----D C:\Users\toto\AppData\Local\{98A74325-E629-444A-8C4F-925C2A25AF54} O43 - CFD: 29/03/2015 - 20:38:41 - [0] ----D C:\Users\toto\AppData\Local\{9A35ED2E-9C71-4A52-8C23-051C61AB671C} O43 - CFD: 10/02/2015 - 06:14:46 - [0] ----D C:\Users\toto\AppData\Local\{9A67A7D2-D170-46F4-B78E-B8F7CB4EE3A3} O43 - CFD: 06/02/2015 - 15:50:29 - [0] ----D C:\Users\toto\AppData\Local\{9AD35C3A-3CBC-4AB7-B1F4-56CC6721CD2F} O43 - CFD: 12/03/2015 - 15:27:19 - [0] ----D C:\Users\toto\AppData\Local\{9C662CA6-6BD8-4135-9BFA-5C39617901EA} O43 - CFD: 25/03/2015 - 16:49:58 - [0] ----D C:\Users\toto\AppData\Local\{9E190F56-D715-44C9-8F9C-F5A8D89D9C3F} O43 - CFD: 21/04/2015 - 22:50:21 - [0] ----D C:\Users\toto\AppData\Local\{A0445930-4412-48A9-94B0-39605BF153EA} O43 - CFD: 29/04/2015 - 20:19:21 - [0] ----D C:\Users\toto\AppData\Local\{A23456E3-33BA-4162-8D87-86526A2C1757} O43 - CFD: 28/03/2015 - 06:58:33 - [0] ----D C:\Users\toto\AppData\Local\{A3C7D2BF-0E23-4FDE-BBBD-516A3A244D22} O43 - CFD: 17/03/2015 - 21:05:20 - [0] ----D C:\Users\toto\AppData\Local\{A930B6C4-E5DE-44A3-850C-45B540D55249} O43 - CFD: 23/04/2015 - 10:52:19 - [0] ----D C:\Users\toto\AppData\Local\{AA515634-AA71-432B-9270-55230DA31F3D} O43 - CFD: 13/05/2015 - 07:21:53 - [0] ----D C:\Users\toto\AppData\Local\{AD01A348-B3F8-46C1-9FB0-E350FCAF6988} O43 - CFD: 27/04/2015 - 20:17:40 - [0] ----D C:\Users\toto\AppData\Local\{AFBBA56A-6962-4DDA-9958-97B5474D7D18} O43 - CFD: 12/04/2015 - 01:33:11 - [0] ----D C:\Users\toto\AppData\Local\{B2DB2880-9016-439D-8156-152FC4D8C1FF} O43 - CFD: 10/05/2015 - 20:58:22 - [0] ----D C:\Users\toto\AppData\Local\{B7656568-2EA5-464A-B3CA-2221D6B39BAF} O43 - CFD: 03/03/2015 - 19:54:31 - [0] ----D C:\Users\toto\AppData\Local\{B899A725-D18C-4D19-B3AD-597FB5F707C0} O43 - CFD: 05/04/2015 - 17:29:01 - [0] ----D C:\Users\toto\AppData\Local\{BCB916FD-EB07-4693-91CE-F72FC0890AC5} O43 - CFD: 02/03/2015 - 19:52:45 - [0] ----D C:\Users\toto\AppData\Local\{BD45E121-9617-4523-B6C6-63BD61492B9B} O43 - CFD: 08/02/2015 - 18:12:31 - [0] ----D C:\Users\toto\AppData\Local\{BFE4627F-FAF1-40B2-AE8B-916D026A7E99} O43 - CFD: 17/02/2015 - 19:00:28 - [0] ----D C:\Users\toto\AppData\Local\{C00E14BA-1845-4F02-B394-82F7581FCD38} O43 - CFD: 13/02/2015 - 19:01:36 - [0] ----D C:\Users\toto\AppData\Local\{C10E42F2-1763-418A-B3F8-7A06123C983F} O43 - CFD: 14/04/2015 - 09:50:31 - [0] ----D C:\Users\toto\AppData\Local\{C11390E6-B11D-449B-86D5-8E5FC1CA9F6D} O43 - CFD: 06/04/2015 - 10:16:30 - [0] ----D C:\Users\toto\AppData\Local\{C2EEA1CA-876F-4030-844B-AA5496D80E99} O43 - CFD: 01/05/2015 - 08:20:51 - [0] ----D C:\Users\toto\AppData\Local\{C64C26D2-4F80-4C7B-AFF2-E5A71ADC47D8} O43 - CFD: 11/05/2015 - 08:58:35 - [0] ----D C:\Users\toto\AppData\Local\{C812B5BE-C37C-4C4A-ADB0-A4BF03A9A48D} O43 - CFD: 01/04/2015 - 06:57:16 - [0] ----D C:\Users\toto\AppData\Local\{CA55406C-899B-4DF6-A91F-EE5E727CCAD7} O43 - CFD: 19/04/2015 - 04:25:01 - [0] ----D C:\Users\toto\AppData\Local\{CD13F186-BC6B-4D4A-8DF9-03D12E7CB105} O43 - CFD: 24/02/2015 - 06:21:28 - [0] ----D C:\Users\toto\AppData\Local\{CDAD10A1-94D5-4530-81F9-E71117F9036C} O43 - CFD: 06/05/2015 - 18:41:19 - [0] ----D C:\Users\toto\AppData\Local\{D13C2F11-60D0-49F1-AC8E-3B784402D0CC} O43 - CFD: 29/04/2015 - 08:18:57 - [0] ----D C:\Users\toto\AppData\Local\{D19C2738-C860-46E3-8968-39DF7A41F825} O43 - CFD: 27/01/2015 - 10:54:44 - [0] ----D C:\Users\toto\AppData\Local\{D2597292-40E2-450B-B684-670B4E7F4478} O43 - CFD: 28/02/2015 - 07:48:47 - [0] ----D C:\Users\toto\AppData\Local\{D446A140-4BE7-4ADA-9D2D-772156D2057A} O43 - CFD: 18/04/2015 - 04:23:49 - [0] ----D C:\Users\toto\AppData\Local\{D5FB12CD-1350-4C0F-85D2-9A81C0A06C6C} O43 - CFD: 04/04/2015 - 06:56:29 - [0] ----D C:\Users\toto\AppData\Local\{D7746290-6335-43F0-8766-1F29B1E22876} O43 - CFD: 03/04/2015 - 06:54:41 - [0] ----D C:\Users\toto\AppData\Local\{EC1F513E-5154-42FF-A6F7-4848BF107B3B} O43 - CFD: 24/04/2015 - 07:33:30 - [0] ----D C:\Users\toto\AppData\Local\{ECC5A0B9-55A9-4C3F-A965-8A1D2FC0F90F} O43 - CFD: 28/01/2015 - 18:45:02 - [0] ----D C:\Users\toto\AppData\Local\{EDD610FE-AD13-4F10-9FF7-FF03DBE6FCF8} O43 - CFD: 28/04/2015 - 08:17:52 - [0] ----D C:\Users\toto\AppData\Local\{EEE45F73-1558-42DA-886B-DD138E83C35C} O43 - CFD: 29/01/2015 - 06:45:14 - [0] ----D C:\Users\toto\AppData\Local\{F03B61D8-E4C8-4249-B04F-4F669EA7AB8C} O43 - CFD: 01/03/2015 - 19:50:58 - [0] ----D C:\Users\toto\AppData\Local\{F064F827-3BFC-4C92-BD04-2CE96BB7BD04} O43 - CFD: 24/03/2015 - 15:24:51 - [0] ----D C:\Users\toto\AppData\Local\{F0BB1B1E-EDB9-411B-96C0-F77FEB9FA579} O43 - CFD: 02/04/2015 - 18:54:28 - [0] ----D C:\Users\toto\AppData\Local\{F2043226-85EA-44A1-91C9-D1FE4220FB83} O43 - CFD: 02/05/2015 - 08:22:18 - [0] ----D C:\Users\toto\AppData\Local\{F2B18944-064E-451C-99D6-D1F451C69E25} O43 - CFD: 23/03/2015 - 15:23:46 - [0] ----D C:\Users\toto\AppData\Local\{F2B29CE8-5CCE-4722-9728-A25AB7ABBBCA} O43 - CFD: 09/03/2015 - 10:52:55 - [0] ----D C:\Users\toto\AppData\Local\{F5612007-23AE-46FB-BD2D-2926D349526C} O43 - CFD: 14/03/2015 - 14:37:19 - [0] ----D C:\Users\toto\AppData\Local\{F6A4CE96-52E0-4BCE-BB87-EE1E63D74D14} O43 - CFD: 28/02/2015 - 19:49:40 - [0] ----D C:\Users\toto\AppData\Local\{F8940D2A-4D35-41C1-A2A2-9246E1A216B2} O43 - CFD: 14/07/2009 - 06:54:32 - [0,014] R---D C:\Users\toto\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories O43 - CFD: 11/03/2015 - 15:12:33 - [0,000] R---D C:\Users\toto\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools O43 - CFD: 31/08/2011 - 20:29:42 - [0] ----D C:\Users\toto\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\emme O43 - CFD: 01/03/2014 - 08:02:43 - [0] ----D C:\Users\toto\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Gadwin Systems O43 - CFD: 28/02/2011 - 20:36:53 - [0] ----D C:\Users\toto\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HomePlayer O43 - CFD: 14/07/2009 - 06:49:38 - [0,001] R---D C:\Users\toto\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance O43 - CFD: 19/09/2014 - 16:05:12 - [0,004] ----D C:\Users\toto\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Popcorn Time O43 - CFD: 25/04/2015 - 03:44:08 - [0,000] R---D C:\Users\toto\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup O43 - CFD: 01/02/2015 - 09:50:56 - [0,005] ----D C:\Users\toto\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VirtualDJ O43 - CFD: 02/03/2011 - 20:05:17 - [0,003] ----D C:\Users\toto\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR O43 - CFD: 05/02/2014 - 21:31:16 - [259,642] ----D C:\Program Files (x86)\Adobe O43 - CFD: 20/01/2015 - 21:38:15 - [2,316] ----D C:\Program Files (x86)\Apple Software Update O43 - CFD: 13/05/2015 - 10:56:19 - [0,002] ----D C:\Program Files (x86)\Best of 3d Football Soccer Games 2013 O43 - CFD: 13/05/2015 - 10:56:19 - [1,659] ----D C:\Program Files (x86)\BestSaoVeForYou O43 - CFD: 11/05/2015 - 11:32:39 - [0,013] ----D C:\Program Files (x86)\BitSaveer O43 - CFD: 11/05/2015 - 11:32:39 - [0,012] ----D C:\Program Files (x86)\BiTSaver O43 - CFD: 20/10/2011 - 18:04:36 - [0,602] ----D C:\Program Files (x86)\Bonjour O43 - CFD: 12/02/2015 - 22:23:18 - [0,002] ----D C:\Program Files (x86)\Bookmarks Tagger O43 - CFD: 12/02/2015 - 22:23:55 - [0,001] ----D C:\Program Files (x86)\CheapMMe O43 - CFD: 13/05/2015 - 10:56:19 - [0,002] ----D C:\Program Files (x86)\Chrome Logger O43 - CFD: 16/04/2015 - 03:10:07 - [412,071] ----D C:\Program Files (x86)\Common Files O43 - CFD: 13/05/2015 - 10:56:19 - [1,659] ----D C:\Program Files (x86)\CouuppExtensIOOn O43 - CFD: 22/11/2010 - 21:26:37 - [1283,782] ----D C:\Program Files (x86)\CyberLink O43 - CFD: 13/05/2015 - 10:56:19 - [1,659] ----D C:\Program Files (x86)\DiscountExttensi O43 - CFD: 21/03/2014 - 19:52:15 - [126,709] ----D C:\Program Files (x86)\EasyBits For Kids O43 - CFD: 01/02/2012 - 15:10:56 - [105,593] ----D C:\Program Files (x86)\EasyBits For Kids - Backup O43 - CFD: 18/01/2015 - 11:29:22 - [10,401] ----D C:\Program Files (x86)\eMule O43 - CFD: 06/03/2015 - 03:01:25 - [0,011] ----D C:\Program Files (x86)\EnjOyCoupaon O43 - CFD: 13/05/2015 - 10:56:19 - [0,001] ----D C:\Program Files (x86)\EnjoyCouupone O43 - CFD: 25/11/2013 - 21:45:41 - [19,559] ----D C:\Program Files (x86)\EssentialPIM O43 - CFD: 13/05/2015 - 10:56:19 - [0,002] ----D C:\Program Files (x86)\ezAutoCorrect for GMail O43 - CFD: 06/03/2015 - 03:01:25 - [0,011] ----D C:\Program Files (x86)\FaunDealsa O43 - CFD: 28/04/2015 - 19:15:08 - [0,012] ----D C:\Program Files (x86)\FFIiNdaBeestDeal O43 - CFD: 01/03/2014 - 08:02:42 - [3,500] ----D C:\Program Files (x86)\Gadwin Systems O43 - CFD: 08/05/2015 - 11:00:18 - [75,958] ----D C:\Program Files (x86)\Garmin O43 - CFD: 24/01/2015 - 13:31:17 - [679,634] ----D C:\Program Files (x86)\Google O43 - CFD: 22/01/2014 - 14:13:19 - [1533,782] ----D C:\Program Files (x86)\Hewlett-Packard O43 - CFD: 28/02/2011 - 20:36:57 - [135,914] ----D C:\Program Files (x86)\HomePlayer O43 - CFD: 22/11/2010 - 21:21:49 - [2,979] ----D C:\Program Files (x86)\Hp O43 - CFD: 14/02/2012 - 20:39:05 - [581,850] ----D C:\Program Files (x86)\HP Games O43 - CFD: 22/01/2014 - 14:17:22 - [149,303] --H-D C:\Program Files (x86)\InstallShield Installation Information O43 - CFD: 16/04/2015 - 03:28:41 - [11,337] ----D C:\Program Files (x86)\Internet Explorer O43 - CFD: 13/05/2015 - 10:56:19 - [1,659] ----D C:\Program Files (x86)\Issaver O43 - CFD: 12/03/2015 - 19:17:43 - [0,180] ----D C:\Program Files (x86)\iTunes O43 - CFD: 13/05/2015 - 10:56:19 - [1,659] ----D C:\Program Files (x86)\Iusiaver O43 - CFD: 21/03/2015 - 18:33:23 - [137,592] ----D C:\Program Files (x86)\Java O43 - CFD: 23/01/2015 - 20:29:04 - [47,865] ----D C:\Program Files (x86)\Malwarebytes Anti-Malware O43 - CFD: 17/12/2011 - 13:05:08 - [190,033] ----D C:\Program Files (x86)\Mattel Interactive O43 - CFD: 16/10/2011 - 18:39:57 - [0] ----D C:\Program Files (x86)\Microsoft O43 - CFD: 14/10/2012 - 19:04:57 - [10,895] ----D C:\Program Files (x86)\Microsoft Application Virtualization Client O43 - CFD: 29/04/2011 - 17:24:56 - [39,130] ----D C:\Program Files (x86)\Microsoft Office O43 - CFD: 12/02/2015 - 04:08:37 - [1,571] ----D C:\Program Files (x86)\Microsoft Security Client O43 - CFD: 25/07/2014 - 17:05:04 - [40,879] ----D C:\Program Files (x86)\Microsoft Silverlight O43 - CFD: 20/02/2011 - 13:17:20 - [1,745] ----D C:\Program Files (x86)\Microsoft SQL Server Compact Edition O43 - CFD: 25/02/2011 - 04:01:02 - [0,023] ----D C:\Program Files (x86)\Microsoft.NET O43 - CFD: 23/04/2015 - 10:11:48 - [84,247] ----D C:\Program Files (x86)\Mozilla Firefox O43 - CFD: 10/05/2015 - 18:51:44 - [0,241] ----D C:\Program Files (x86)\Mozilla Maintenance Service O43 - CFD: 14/07/2009 - 07:32:38 - [0,025] ----D C:\Program Files (x86)\MSBuild O43 - CFD: 29/04/2011 - 17:24:31 - [63,464] ----D C:\Program Files (x86)\MSECache O43 - CFD: 22/02/2011 - 19:24:27 - [0] ----D C:\Program Files (x86)\MSXML 4.0 O43 - CFD: 22/11/2010 - 21:44:39 - [7,167] ----D C:\Program Files (x86)\NewspaperDirect O43 - CFD: 20/02/2011 - 13:18:03 - [19,342] R---D C:\Program Files (x86)\Online Services O43 - CFD: 27/07/2011 - 21:57:47 - [338,128] ----D C:\Program Files (x86)\OpenOffice.org 3 O43 - CFD: 20/01/2015 - 21:26:45 - [0] ----D C:\Program Files (x86)\Opera O43 - CFD: 19/01/2014 - 21:15:56 - [17,839] ----D C:\Program Files (x86)\PC Tools O43 - CFD: 22/11/2010 - 21:19:25 - [36,253] ----D C:\Program Files (x86)\PDF Complete O43 - CFD: 25/12/2014 - 17:10:24 - [70,197] ----D C:\Program Files (x86)\QuickTime O43 - CFD: 12/02/2015 - 22:22:35 - [0,001] ----D C:\Program Files (x86)\RAndomPrriice O43 - CFD: 22/11/2010 - 21:19:33 - [46,195] ----D C:\Program Files (x86)\Realtek O43 - CFD: 14/07/2009 - 07:32:38 - [37,357] ----D C:\Program Files (x86)\Reference Assemblies O43 - CFD: 13/05/2015 - 10:56:19 - [0,001] ----D C:\Program Files (x86)\RegularDDeals O43 - CFD: 25/04/2012 - 06:09:40 - [5,121] ----D C:\Program Files (x86)\Samsung O43 - CFD: 12/02/2015 - 22:23:18 - [0,001] ----D C:\Program Files (x86)\SAverExtenssiOna O43 - CFD: 16/04/2015 - 03:10:07 - [44,071] R---D C:\Program Files (x86)\Skype O43 - CFD: 22/11/2010 - 21:19:46 - [0] --H-D C:\Program Files (x86)\Temp O43 - CFD: 14/07/2009 - 06:57:06 - [0] --H-D C:\Program Files (x86)\Uninstall Information O43 - CFD: 28/07/2012 - 20:00:02 - [119,082] ----D C:\Program Files (x86)\VideoLAN O43 - CFD: 01/02/2015 - 10:16:20 - [39,722] ----D C:\Program Files (x86)\VirtualDJ O43 - CFD: 14/02/2012 - 20:38:54 - [9,609] ----D C:\Program Files (x86)\WildTangent Games O43 - CFD: 14/07/2013 - 13:37:07 - [0,500] ----D C:\Program Files (x86)\Windows Defender O43 - CFD: 25/04/2012 - 20:54:31 - [120,601] ----D C:\Program Files (x86)\Windows Live O43 - CFD: 26/02/2011 - 01:34:26 - [5,895] ----D C:\Program Files (x86)\Windows Mail O43 - CFD: 11/03/2015 - 04:30:15 - [4,791] ----D C:\Program Files (x86)\Windows Media Player O43 - CFD: 14/07/2009 - 07:32:38 - [11,632] ----D C:\Program Files (x86)\Windows NT O43 - CFD: 26/02/2011 - 01:34:26 - [4,213] ----D C:\Program Files (x86)\Windows Photo Viewer O43 - CFD: 26/02/2011 - 01:34:26 - [0,181] ----D C:\Program Files (x86)\Windows Portable Devices O43 - CFD: 26/02/2011 - 01:34:26 - [5,717] ----D C:\Program Files (x86)\Windows Sidebar O43 - CFD: 02/03/2011 - 20:05:17 - [3,706] ----D C:\Program Files (x86)\WinRAR O43 - CFD: 24/01/2015 - 14:48:05 - [1,651] ----D C:\Program Files (x86)\WOT O43 - CFD: 13/05/2015 - 11:06:18 - [12,330] ----D C:\Program Files (x86)\ZHPDiag O43 - CFD: 29/05/2013 - 15:45:39 - [8,188] ----D C:\Program Files (x86)\Common Files\Adobe O43 - CFD: 05/02/2015 - 20:31:33 - [162,544] ----D C:\Program Files (x86)\Common Files\Apple O43 - CFD: 14/10/2012 - 19:04:49 - [0,095] ----D C:\Program Files (x86)\Common Files\DESIGNER O43 - CFD: 17/12/2011 - 13:03:55 - [4,926] ----D C:\Program Files (x86)\Common Files\InstallShield O43 - CFD: 21/03/2015 - 18:34:07 - [1,587] ----D C:\Program Files (x86)\Common Files\Java O43 - CFD: 22/11/2010 - 21:34:11 - [36,729] ---AD C:\Program Files (x86)\Common Files\LightScribe O43 - CFD: 22/11/2010 - 21:33:19 - [0,049] ---AD C:\Program Files (x86)\Common Files\LS Getting Started O43 - CFD: 14/11/2013 - 19:43:02 - [142,939] ----D C:\Program Files (x86)\Common Files\microsoft shared O43 - CFD: 03/02/2012 - 20:22:07 - [3,756] ----D C:\Program Files (x86)\Common Files\PX Storage Engine O43 - CFD: 14/07/2009 - 05:20:08 - [0,003] ----D C:\Program Files (x86)\Common Files\Services O43 - CFD: 16/04/2015 - 03:10:07 - [2,289] ----D C:\Program Files (x86)\Common Files\Skype O43 - CFD: 14/07/2009 - 05:20:08 - [39,200] ----D C:\Program Files (x86)\Common Files\SpeechEngines O43 - CFD: 10/11/2011 - 04:15:21 - [9,767] ----D C:\Program Files (x86)\Common Files\System O43 - CFD: 20/02/2011 - 13:15:26 - [0] ----D C:\Program Files (x86)\Common Files\Windows Live ~ Scan Program Folder in 01mn 00s ---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44) O44 - LFC:[MD5.5C1C57C423E1F1A6F5F0DE642437CC03] - 13/05/2015 - 10:05:59 ---A- . (...) -- C:\Windows\WindowsUpdate.log [2045460] O44 - LFC:[MD5.040C6856BBD5C054730E13A64C6CACBD] - 13/05/2015 - 10:04:02 . (...) -- C:\Windows\system32\perfc009.dat [122336] O44 - LFC:[MD5.A06EB348AEB969B49F0F07E19A23FF37] - 13/05/2015 - 10:04:02 . (...) -- C:\Windows\system32\perfc00C.dat [150378] O44 - LFC:[MD5.43BF8836FA5C6F374C25A86832835367] - 13/05/2015 - 10:04:02 . (...) -- C:\Windows\system32\perfh009.dat [654722] O44 - LFC:[MD5.FEAB5F67F3655B083723CB3B9040F31C] - 13/05/2015 - 10:04:02 . (...) -- C:\Windows\system32\perfh00C.dat [748112] O44 - LFC:[MD5.12A59AB45205CC61B8A6D936CF66FA12] - 13/05/2015 - 10:04:02 ---A- . (...) -- C:\Windows\SysNative\PerfStringBackup.INI [1671272] O44 - LFC:[MD5.040C6856BBD5C054730E13A64C6CACBD] - 13/05/2015 - 10:04:02 ---A- . (...) -- C:\Windows\SysNative\perfc009.dat [122336] O44 - LFC:[MD5.A06EB348AEB969B49F0F07E19A23FF37] - 13/05/2015 - 10:04:02 ---A- . (...) -- C:\Windows\SysNative\perfc00C.dat [150378] O44 - LFC:[MD5.43BF8836FA5C6F374C25A86832835367] - 13/05/2015 - 10:04:02 ---A- . (...) -- C:\Windows\SysNative\perfh009.dat [654722] O44 - LFC:[MD5.FEAB5F67F3655B083723CB3B9040F31C] - 13/05/2015 - 10:04:02 ---A- . (...) -- C:\Windows\SysNative\perfh00C.dat [748112] O44 - LFC:[MD5.12A59AB45205CC61B8A6D936CF66FA12] - 13/05/2015 - 10:04:02 ---A- . (...) -- C:\Windows\system32\PerfStringBackup.INI [1671272] O44 - LFC:[MD5.AC849B99E032F4017BB1CE37934DD4AF] - 13/05/2015 - 09:57:19 ---A- . (...) -- C:\Windows\setupact.log [112] O44 - LFC:[MD5.F28B2F9467AB06477EAC07A8AE7D1660] - 13/05/2015 - 09:57:13 -S-A- . (...) -- C:\Windows\bootstat.dat [67584] O44 - LFC:[MD5.32F9588EFF13BD98CBC3F358F9103257] - 13/05/2015 - 09:57:08 ---A- . (...) -- C:\Windows\PFRO.log [5742] O44 - LFC:[MD5.26C43960C99EE861A5D0EDC4DCF3B1C3] - 13/05/2015 - 09:26:50 . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\system32\drivers\MBAMSwissArmy.sys [129752] O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 13/05/2015 - 09:24:20 ---A- . (...) -- C:\Windows\setuperr.log [0] O44 - LFC:[MD5.904C23D1006334301C1996E9815FFE3E] - 13/05/2015 - 09:23:02 ---A- . (...) -- C:\AdwCleaner[S1].txt [1602] O44 - LFC:[MD5.7775E0A9FF9DBF7D82A9554A436374B5] - 13/05/2015 - 09:22:29 ---A- . (...) -- C:\AdwCleaner[R2].txt [1659] O44 - LFC:[MD5.2CBD6D22499EB13A2666F62EF33D00E2] - 13/03/2015 - 02:58:14 ---A- . (...) -- C:\Windows\SysNative\ieuinit.inf [16303] O44 - LFC:[MD5.2CBD6D22499EB13A2666F62EF33D00E2] - 13/03/2015 - 02:58:14 ---A- . (...) -- C:\Windows\system32\ieuinit.inf [16303] ~ Scan Files in 00mn 17s ---\\ Déni du service (Local Security Authority) (O48) O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l’Éditeur de configuration de sécurité Windows.) -- C:\Windows\System32\scecli.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Package de sécurité Kerberos.) -- C:\Windows\System32\kerberos.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\Windows\System32\schannel.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Digest Access.) -- C:\Windows\System32\wdigest.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Web Service Security Package.) -- C:\Windows\System32\TSpkg.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Pku2u Security Package.) -- C:\Windows\System32\pku2u.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corp. - LiveSSP.) -- C:\Windows\System32\LIVESSP.dll ~ Scan Keys in 00mn 00s ---\\ Contrôle du Safe Boot (CSB) (O49) O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\system32\Drivers\sermouse.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\system32\Drivers\vga.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\Windows\system32\Drivers\vgasave.sys (.not file.) O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\system32\Drivers\volmgr.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgrx.sys . (.Microsoft Corporation - Pilote d’extension du gestionnaire de volumes.) -- C:\Windows\system32\Drivers\volmgrx.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\system32\Drivers\ipnat.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\nsiproxy.sys . (.Microsoft Corporation - NSI Proxy.) -- C:\Windows\system32\Drivers\nsiproxy.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpencdd.sys . (.Microsoft Corporation - RDP Encoder Miniport.) -- C:\Windows\system32\Drivers\rdpencdd.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\system32\Drivers\sermouse.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\system32\Drivers\vga.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\Windows\system32\Drivers\vgasave.sys (.not file.) O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\system32\Drivers\volmgr.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgrx.sys . (.Microsoft Corporation - Pilote d’extension du gestionnaire de volumes.) -- C:\Windows\system32\Drivers\volmgrx.sys ~ Scan CSB in 00mn 00s ---\\ MountPoints2 Shell Key (O51) (None) ---\\ Trojan Driver Search Data (HKLM) (O52) O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm O52 - TDSD: \Drivers32\"vidc.ffds"="ff_vfw.dll" . (.Pas de propriétaire - ffdshow VFW.) -- C:\Windows\System32\ff_vfw.dll O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm O52 - TDSD: \drivers.desc\"ff_vfw.dll"="ffdshow Video Codec" . (.Pas de propriétaire - ffdshow VFW.) -- C:\Windows\System32\ff_vfw.dll ~ Scan Keys in 00mn 00s ---\\ ShareTools MSconfig StartupReg (O53) O53 - SMSR:HKLM\...\startupreg\AnumanLive [Key] . (...) -- C:\Users\toto\AppData\Roaming\Anuman Interactive\AnumanLive\AnumanLive.exe (.not file.) O53 - SMSR:HKLM\...\startupreg\Skype [Key] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe ~ Scan SMSR Keys in 00mn 00s ---\\ Microsoft Control Security Providers (O54) O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\system32\credssp.dll O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\system32\credssp.dll ~ Scan Keys in 00mn 00s ---\\ Microsoft Windows Policies System (O55) O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=5 O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=3 O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1 O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=1 O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1 O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0 O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1 O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=1 O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0 O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0 O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"= O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"= O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0 O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1 O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1 O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0 O55 - MWPS:[HKLM\...\Policies\System] - "HideFastUserSwitching"=0 O55 - MWPS:[HKCU\...\Policies\System] - "DisableLockWorkstation"=0 O55 - MWPS:[HKCU\...\Policies\System] - "DisableChangePassword"=0 O55 - MWPS:[HKCU\...\Policies\System] - "DisableTaskMgr"=0 O55 - MWPS:[HKCU\...\Policies\System] - "DisableRegistryTools"=0 ~ Scan Keys in 00mn 00s ---\\ Microsoft Windows Policies Explorer (O56) O56 - MWPE:[HKCU\...\policies\Explorer] - "NoLogoff"=0 O56 - MWPE:[HKCU\...\policies\Explorer] - "NoClose"=0 O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktop"=1 O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=0 O56 - MWPE:[HKLM\...\policies\Explorer] - "ForceActiveDesktopOn"=0 O56 - MWPE:[HKLM\...\policies\Explorer] - "EnableShellExecuteHooks"=1 ~ Scan Keys in 00mn 00s ---\\ Liste des Drivers Système (O58) O58 - SDL:[MD5.2F6B34B83843F0C5118B63AC634F5BF4] - 14/07/2009 - 02:52:21 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\system32\drivers\adp94xx.sys [491088] O58 - SDL:[MD5.597F78224EE9224EA1A13D6350CED962] - 14/07/2009 - 02:52:21 . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\system32\drivers\adpahci.sys [339536] O58 - SDL:[MD5.E109549C90F62FB570B9540C4B148E54] - 14/07/2009 - 02:52:21 . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver (X64).) -- C:\Windows\system32\drivers\adpu320.sys [182864] O58 - SDL:[MD5.5812713A477A3AD7363C7438CA2EE038] - 14/07/2009 - 02:52:21 . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\Windows\system32\drivers\aliide.sys [15440] O58 - SDL:[MD5.D4121AE6D0C0E7E13AA221AA57EF2D49] - 11/03/2011 - 07:41:12 . (.Advanced Micro Devices - AHCI 1.2 Device Driver.) -- C:\Windows\system32\drivers\amdsata.sys [107904] O58 - SDL:[MD5.F67F933E79241ED32FF46A4F29B5120B] - 14/07/2009 - 02:52:20 . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller Driver for Windows -.) -- C:\Windows\system32\drivers\amdsbs.sys [194128] O58 - SDL:[MD5.540DAF1CEA6094886D72126FD7C33048] - 11/03/2011 - 07:41:12 . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\Windows\system32\drivers\amdxata.sys [27008] O58 - SDL:[MD5.C484F8CEB1717C540242531DB7845C4E] - 14/07/2009 - 02:52:21 . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\system32\drivers\arc.sys [87632] O58 - SDL:[MD5.019AF6924AEFE7839F61C830227FE79C] - 14/07/2009 - 02:52:21 . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\system32\drivers\arcsas.sys [97856] O58 - SDL:[MD5.B5ACE6968304A3900EEB1EBFD9622DF2] - 10/06/2009 - 21:34:23 . (.Broadcom Corporation - Broadcom NetXtreme Gigabit Ethernet NDIS6.x Unified Driver..) -- C:\Windows\system32\drivers\b57nd60a.sys [270848] O58 - SDL:[MD5.F09EEE9EDC320B5E1501F749FDE686C8] - 10/06/2009 - 21:41:06 . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower Filter Driver.) -- C:\Windows\system32\drivers\BrFiltLo.sys [18432] O58 - SDL:[MD5.B114D3098E9BDB8BEA8B053685831BE6] - 10/06/2009 - 21:41:06 . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper Filter Driver.) -- C:\Windows\system32\drivers\BrFiltUp.sys [8704] O58 - SDL:[MD5.43BEA8D483BF1870F018E2D02E06A5BD] - 14/07/2009 - 02:19:07 . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\system32\drivers\BrSerId.sys [286720] O58 - SDL:[MD5.A6ECA2151B08A09CACECA35C07F05B42] - 10/06/2009 - 21:41:10 . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\system32\drivers\BrSerWdm.sys [47104] O58 - SDL:[MD5.B79968002C277E869CF38BD22CD61524] - 10/06/2009 - 21:41:10 . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\system32\drivers\BrUsbMdm.sys [14976] O58 - SDL:[MD5.A87528880231C54E75EA7A44943B38BF] - 10/06/2009 - 21:41:10 . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\system32\drivers\BrUsbSer.sys [14720] O58 - SDL:[MD5.3E5B191307609F7514148C6832BB0842] - 10/06/2009 - 21:34:28 . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.) -- C:\Windows\system32\drivers\bxvbda.sys [468480] O58 - SDL:[MD5.192AA0324412C6ED8BD7B345706D8A66] - 01/04/2008 - 13:23:34 . (.Sonic Solutions - CDR4 64-bit CD and DVD Place Holder Driver (see PxHelp).) -- C:\Windows\system32\drivers\cdr4_xp.sys [10488] O58 - SDL:[MD5.9BDA54D19073AB1C2DBAFB13D989FE97] - 01/04/2008 - 13:23:34 . (.Sonic Solutions - CDRAL 64-bit Place Holder Driver (see PxHelp).) -- C:\Windows\system32\drivers\cdralw2k.sys [10488] O58 - SDL:[MD5.E19D3F095812725D88F9001985B94EDD] - 14/07/2009 - 02:52:31 . (.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) -- C:\Windows\system32\drivers\cmdide.sys [17488] O58 - SDL:[MD5.2285B31039611D509F6120D691CA661F] - 29/05/2012 - 14:53:30 . (.Windows (R) Codename Longhorn DDK provider - hpvhd 64bit support driver.) -- C:\Windows\system32\drivers\cpqdfw.sys [27456] O58 - SDL:[MD5.10FB0FF62AF6262BF88E3607E2AE2A69] - 27/04/2010 - 18:43:50 . (...) -- C:\Windows\system32\drivers\cqcpu.sys [24376] O58 - SDL:[MD5.0E5DA5369A0FCAEA12456DD852545184] - 14/07/2009 - 02:47:48 . (.Emulex - Storport Miniport Driver for LightPulse HBAs.) -- C:\Windows\system32\drivers\elxstor.sys [530496] O58 - SDL:[MD5.DC5D737F51BE844D8C82C695EB17372F] - 10/06/2009 - 21:34:33 . (.Broadcom Corporation - Broadcom NetXtreme II 10 GigE VBD.) -- C:\Windows\system32\drivers\evbda.sys [3286016] O58 - SDL:[MD5.8E98D21EE06192492A5671A6144D092F] - 21/08/2012 - 12:01:20 . (.GEAR Software Inc. - CD DVD Filter.) -- C:\Windows\system32\drivers\GEARAspiWDM.sys [33240] O58 - SDL:[MD5.7F8567803EDDD8814DE63F817E66FCE6] - 18/04/2012 - 14:05:06 . (.GARMIN Corp. - Generic WDM Support Driver.) -- C:\Windows\system32\drivers\grmngen.sys [30568] O58 - SDL:[MD5.B9893A68032A6D9ADDB5B98287C630F7] - 18/04/2012 - 14:05:16 . (.GARMIN Corp. - grmnusb.sys.) -- C:\Windows\system32\drivers\grmnusb.sys [19304] O58 - SDL:[MD5.F2523EF6460FC42405B12248338AB2F0] - 10/06/2009 - 21:31:59 . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for eHome.) -- C:\Windows\system32\drivers\hcw85cir.sys [31232] O58 - SDL:[MD5.39D2ABCD392F3D8A6DCE7B60AE7B8EFC] - 20/11/2010 - 14:33:35 . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Driver.) -- C:\Windows\system32\drivers\HpSAMD.sys [78720] O58 - SDL:[MD5.AAAF44DB3BD0B9D1FB6969B23ECC8366] - 11/03/2011 - 07:41:26 . (.Intel Corporation - Intel Matrix Storage Manager driver - x64.) -- C:\Windows\system32\drivers\iaStorV.sys [410496] O58 - SDL:[MD5.5C18831C61933628F5BB0EA2675B9D21] - 14/07/2009 - 02:48:04 . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\system32\drivers\iirsp.sys [44112] O58 - SDL:[MD5.1A93E54EB0ECE102495A51266DCDB6A6] - 14/07/2009 - 02:48:04 . (.LSI Corporation - LSI Fusion-MPT FC Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_fc.sys [114752] O58 - SDL:[MD5.1047184A9FDC8BDBFF857175875EE810] - 14/07/2009 - 02:48:04 . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_sas.sys [106560] O58 - SDL:[MD5.30F5C0DE1EE8B5BC9306C1F0E4A75F93] - 14/07/2009 - 02:48:04 . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_sas2.sys [65600] O58 - SDL:[MD5.0504EACAFF0D3C8AED161C4B0D369D4A] - 14/07/2009 - 02:48:04 . (.LSI Corporation - LSI Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_scsi.sys [115776] O58 - SDL:[MD5.CA43F8904E24BBE49982E4C0B29E6579] - 21/11/2014 - 06:14:08 . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\system32\drivers\mbam.sys [25816] O58 - SDL:[MD5.478CC94C937D235CB0A96AB8F2359D81] - 21/11/2014 - 06:14:12 . (.Malwarebytes Corporation - Malwarebytes Chameleon Protection Driver.) -- C:\Windows\system32\drivers\mbamchameleon.sys [93400] O58 - SDL:[MD5.26C43960C99EE861A5D0EDC4DCF3B1C3] - 13/05/2015 - 09:26:50 . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\system32\drivers\MBAMSwissArmy.sys [129752] O58 - SDL:[MD5.A55805F747C6EDB6A9080D7C633BD0F4] - 14/07/2009 - 02:48:04 . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows 7\Server 2008 R2 for.) -- C:\Windows\system32\drivers\megasas.sys [35392] O58 - SDL:[MD5.BAF74CE0072480C3B6B7C13B2A94D6B3] - 14/07/2009 - 02:48:04 . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\system32\drivers\MegaSR.sys [284736] O58 - SDL:[MD5.A646C2DDB8C46E9B20A326FAF566646C] - 21/11/2014 - 06:14:22 . (.Malwarebytes Corporation - Malwarebytes Web Access Control.) -- C:\Windows\system32\drivers\mwac.sys [63704] O58 - SDL:[MD5.EE00C544C025958AF50C7B199F3C8595] - 25/07/2013 - 15:53:46 . (.Apple Inc. - Apple Mobile Device Ethernet.) -- C:\Windows\system32\drivers\netaapl64.sys [23040] O58 - SDL:[MD5.10E4F746361C8A8511D9935E79F7E70A] - 25/08/2014 - 11:15:40 . (.Windows (R) Win 7 DDK provider - WFP driver platform.) -- C:\Windows\system32\drivers\netmon_wfp.sys [49880] O58 - SDL:[MD5.2EED549279D7FBD10B846B5397573967] - 06/12/2012 - 08:42:12 . (.Ralink Technology, Corp. - Ralink 802.11 Wireless Adapter Driver.) -- C:\Windows\system32\drivers\netr28x.sys [2350176] O58 - SDL:[MD5.77889813BE4D166CDAB78DDBA990DA92] - 14/07/2009 - 02:48:26 . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\system32\drivers\nfrd960.sys [51264] O58 - SDL:[MD5.1F07B814C0BB5AABA703ABFF1F31F2E8] - 18/02/2013 - 08:22:16 . (.NVIDIA Corporation - NVIDIA HDMI Audio Driver.) -- C:\Windows\system32\drivers\nvhda64v.sys [189288] O58 - SDL:[MD5.CE753E4A14CEE5A59ECD3D6588FEBF93] - 03/05/2011 - 05:14:00 . (.NVIDIA Corporation - NVIDIA Windows Kernel Mode Driver, Version 268.45.) -- C:\Windows\system32\drivers\nvlddmkm.sys [13034344] O58 - SDL:[MD5.0A92CB65770442ED0DC44834632F66AD] - 11/03/2011 - 07:41:34 . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\system32\drivers\nvraid.sys [148352] O58 - SDL:[MD5.DAB0E87525C10052BF65F06152F37E4A] - 11/03/2011 - 07:41:34 . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\system32\drivers\nvstor.sys [166272] O58 - SDL:[MD5.A6BF0A9B5A30D743623CA0D3BE35DF05] - 01/04/2008 - 13:23:34 . (.Sonic Solutions - Px Engine Device Driver for 64-bit Windows.) -- C:\Windows\system32\drivers\PxHlpa64.sys [52856] O58 - SDL:[MD5.A53A15A11EBFD21077463EE2C7AFEEF0] - 14/07/2009 - 02:45:46 . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\Windows\system32\drivers\ql2300.sys [1524816] O58 - SDL:[MD5.4F6D12B51DE1AAEFF7DC58C4D75423C8] - 14/07/2009 - 02:45:45 . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\Windows\system32\drivers\ql40xx.sys [128592] O58 - SDL:[MD5.7EA8D2EB9BBFD2AB8A3117A1E96D3B3A] - 04/03/2010 - 15:43:00 . (.Realtek - Realtek 8136/8168/8169 NDIS 6.20 64-bit Driver.) -- C:\Windows\system32\drivers\Rt64win7.sys [346144] O58 - SDL:[MD5.68E799ADC93086EA170D3314DF23BEDB] - 20/09/2011 - 10:53:34 . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function Driver.) -- C:\Windows\system32\drivers\RTKVHD64.sys [3074664] O58 - SDL:[MD5.3EA8A16169C26AFBEB544E0E48421186] - 10/06/2009 - 21:37:19 . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\Windows\system32\drivers\secdrv.sys [23040] O58 - SDL:[MD5.C1D8E28B2C2ADFAEC4BA89E9FDA69BD6] - 14/07/2009 - 01:00:40 . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\system32\drivers\serial.sys [94208] O58 - SDL:[MD5.843CAF1E5FDE1FFD5FF768F23A51E2E1] - 14/07/2009 - 02:45:45 . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\system32\drivers\sisraid2.sys [43584] O58 - SDL:[MD5.6A6C106D42E9FFFF8B9FCB4F754F6DA4] - 14/07/2009 - 02:45:46 . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\system32\drivers\sisraid4.sys [80464] O58 - SDL:[MD5.73BDD44A6088916964945886F9025409] - 22/01/2014 - 08:52:10 . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG USB Composite Device Driver (MSS Ver.3).) -- C:\Windows\system32\drivers\ssudbus.sys [108800] O58 - SDL:[MD5.5252D7BC56E5E0ED715AEA8FE173A455] - 22/01/2014 - 08:52:10 . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG Android Modem Device Driver (MSS Ver.3).) -- C:\Windows\system32\drivers\ssudmdm.sys [206080] O58 - SDL:[MD5.76F7D7217FBDAB77798A2A244ACD641F] - 22/01/2014 - 07:52:12 . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG USB Mobile Logging Device Driver (MSS Ver.3).) -- C:\Windows\system32\drivers\ssudserd.sys [206080] O58 - SDL:[MD5.F3817967ED533D08327DC73BC4D5542A] - 14/07/2009 - 02:45:55 . (.Promise Technology - Promise SuperTrak EX Series Driver for Windows.) -- C:\Windows\system32\drivers\stexstor.sys [24656] O58 - SDL:[MD5.5C3BE22E485B9BF11FCEFDC676C728D0] - 16/08/2014 - 23:35:00 . (.Apple, Inc. - Apple Mobile Device USB Driver.) -- C:\Windows\system32\drivers\usbaapl64.sys [54784] O58 - SDL:[MD5.E5689D93FFE4E5D66C0178761240DD54] - 14/07/2009 - 02:45:55 . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\system32\drivers\viaide.sys [17488] O58 - SDL:[MD5.5E2016EA6EBACA03C04FEAC5F330D997] - 14/07/2009 - 02:45:55 . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\Windows\system32\drivers\vsmraid.sys [161872] ~ Scan Drivers in 00mn 03s ---\\ Liste des outils de nettoyage (O63) O63 - Logiciel: ZHPDiag 1.29 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 ~ Scan ADS in 00mn 00s ---\\ Liste des services Legacy (O64) O64 - Services: CurCS - ??\??\???? - C:\Windows\system32\Drivers\secdrv.sys (secdrv) .(.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) - LEGACY_SECDRV ~ Scan Services in 00mn 00s ---\\ File Associations Shell Spawning (O67) O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\system32\control.exe O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d’événements.) -- C:\Windows\system32\eventvwr.exe O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe O67 - Shell Spawning: <.html> [HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe O67 - Shell Spawning: <.bat> [HKCR\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.cpl> [HKCR\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\system32\control.exe O67 - Shell Spawning: <.cmd> [HKCR\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.com> [HKCR\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.evt> [HKCR\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d’événements.) -- C:\Windows\system32\eventvwr.exe O67 - Shell Spawning: <.exe> [HKCR\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.html> [HKCR\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe O67 - Shell Spawning: <.js> [HKCR\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe O67 - Shell Spawning: <.reg> [HKCR\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe ~ Scan Keys in 00mn 00s ---\\ Start Menu Internet (O68) O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (...) -- C:\Program Files\Google\Chrome\Application\chrome.exe (.not file.) O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (...) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe ~ Scan Keys in 00mn 00s ---\\ Search Browser Infection (O69) O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - http://www.bing.com O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} - (Google) - http://www.google.com O69 - SBI: SearchScopes [HKCU] {80c554b9-c7f8-4a21-9471-06d606da78a2} - (Google) - http://www.google.com O69 - SBI: SearchScopes [HKCU] {87FEF901-D157-4404-AC2E-2516CDE27D8A} - (Google) - http://www.google.com O69 - SBI: SearchScopes [HKCU] {96481888-F0D2-4951-9097-393F5E0CE1ED} - (Google) - http://www.google.com O69 - SBI: SearchScopes [HKCU] {F3CF754A-CBCA-4CCF-8E39-153E7C3712E8} [DefaultScope] - (Google) - http://www.google.com ~ Scan Keys in 00mn 00s ---\\ Recherche des services démarrés par Svchost (O83) O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d’application.) -- C:\Windows\system32\aelupsvc.dll [72192] O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes à puce Microsoft.) -- C:\Windows\system32\certprop.dll [80384] O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes à puce Microsoft.) -- C:\Windows\system32\certprop.dll [80384] O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\system32\srvsvc.dll [236032] O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\system32\gpsvc.dll [777728] O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\system32\ikeext.dll [859648] O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Service Audio Windows.) -- C:\Windows\system32\Audiosrv.dll [680960] O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’accès distant.) -- C:\Windows\system32\rasauto.dll [99328] O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire de connexions d’accès distant.) -- C:\Windows\system32\rasmans.dll [344064] O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\system32\mprdim.dll [97792] O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements système (SENS).) -- C:\Windows\system32\sens.dll [64512] O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l’application d’assistance à Microsoft NAT.) -- C:\Windows\system32\ipnathlp.dll [359424] O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM).) -- C:\Windows\system32\tapisrv.dll [316928] O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gestionnaire des connexions distantes du serveur hôte de session Burea.) -- C:\Windows\system32\termsrv.dll [683520] O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Update.) -- C:\Windows\system32\wuaueng.dll [2553856] O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière-plan.) -- C:\Windows\system32\qmgr.dll [849920] O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\system32\shsvcs.dll [370688] O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur un réseau IPv4..) -- C:\Windows\system32\iphlpsvc.dll [569344] O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d’ouverture de session secondaire.) -- C:\Windows\system32\seclogon.dll [30720] O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\system32\appinfo.dll [70144] O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\system32\iscsiexe.dll [156672] O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédias.) -- C:\Windows\system32\mmcss.dll [67584] O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\system32\wbem\WMIsvc.dll [242688] O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à distance.) -- C:\Windows\system32\sessenv.dll [121856] O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\system32\browser.dll [136704] O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\system32\eapsvc.dll [111104] O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\system32\schedsvc.dll [1110016] O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\Windows\system32\kmsvc.dll [90624] O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\system32\wercplsupport.dll [84480] O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\system32\profsvc.dll [210432] O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\Windows\system32\themeservice.dll [44544] O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\Windows\system32\bdesvc.dll [100864] ~ Scan Services in 00mn 00s ---\\ Recherche particuliere à la racine de certains dossiers (O84) [MD5.DC93C406D46CE138848ACF484B406978] [SPRF][26/03/2015] (.Web - Software Setup.) -- C:\Users\toto\AppData\Local\Temp\ICReinstall_uTorrent-3.4.2-39586.exe [677912] [MD5.5697BF712DD51FFC00BD6828E6E5DC99] [SPRF][04/05/2015] (.Oracle Corporation - Java Platform SE binary.) -- C:\Users\toto\AppData\Local\Temp\jre-8u45-windows-au.exe [562272] [MD5.E7A71B6B4C5657CD8BB9882FEDF10FE4] [SPRF][13/05/2015] (...) -- C:\Users\toto\AppData\Local\Temp\Uninst.bat [479] [MD5.D28A49E254206C5BA240DEA746E3B540] [SPRF][26/03/2015] (...) -- C:\Users\toto\AppData\Local\Temp\utt1B24.tmp.bat [100] [MD5.B8C997E772BE343E1664FEE14C1FB9B7] [SPRF][08/05/2015] (...) -- C:\Users\toto\AppData\Local\Temp\vlc-2.2.1-win32.exe [28849904] [MD5.DECBFA8B18242E4750EF5C027A616970] [SPRF][11/04/2015] (...) -- C:\Users\toto\AppData\Roaming\appdataFr3.bin [20] [MD5.E45823AE0D754FC0206F14C1FC43EB74] [SPRF][24/01/2015] (.Piriform Ltd - CCleaner Installer.) -- C:\Users\toto\Desktop\ccsetup501.exe [5317104] [MD5.386F2EC5F2D5038AC37DA1A5DEB410F0] [SPRF][25/11/2013] (...) -- C:\Users\toto\Desktop\EssentialPIM5.exe [8060600] [MD5.2ACED503CF1DDA7BD1FA3FF4F89A06D4] [SPRF][09/05/2015] (.Thisisu - Junkware Removal Tool.) -- C:\Users\toto\Desktop\JRT_NEW.exe [2720307] [MD5.8DA935E5025B2503DF2C77967A711C6A] [SPRF][24/01/2015] (.Pas de propriétaire - Nettoyage des fichiers temporaires.) -- C:\Users\toto\Desktop\SFTGC.exe [1348096] [MD5.09561C776803B43BC3EA65241DAD578A] [SPRF][11/03/2012] (.LogMeIn, Inc. - LogMeIn, Inc. Remote Access Components.) -- C:\Windows\Downloaded Program Files\avutil-51.dll [160144] [MD5.4D930392BD13F448ED474CE2C41DFADA] [SPRF][03/02/2011] (.Adobe Systems, Inc. - Adobe® Flash® Player Installer/Uninstaller 10.2 r152.) -- C:\Windows\Downloaded Program Files\FP_AX_CAB_INSTALLER.exe [2871968] [MD5.EBE1F1D8FACC49606A9F9FFD3B2F58EA] [SPRF][11/03/2012] (.LogMeIn, Inc. - LogMeIn, Inc. Remote Access Components.) -- C:\Windows\Downloaded Program Files\LMIBroker.exe [120208] [MD5.11326ED84EBDDC08A8EE59D1BFAEA2A0] [SPRF][01/02/2012] (.LogMeIn, Inc. - LMIGuardianSvc.) -- C:\Windows\Downloaded Program Files\LMIGuardian.exe [374160] [MD5.FA415A68B979A50F279CDD8659481F3D] [SPRF][01/02/2012] (.LogMeIn, Inc. - LMIGuardianDll.) -- C:\Windows\Downloaded Program Files\LMIGuardianDll.dll [1021328] [MD5.5D6991638EAB8EEA4FC1F53A5E8C57F4] [SPRF][01/02/2012] (.LogMeIn, Inc. - LMIGuardianEvt.) -- C:\Windows\Downloaded Program Files\LMIGuardianEvt.dll [320912] [MD5.8F700DA1A1A75501D6EEF76BC866EB29] [SPRF][16/05/2011] (...) -- C:\Windows\Downloaded Program Files\LMIProxyHelper.exe [70984] [MD5.DA90C98F231E25FD87D7984A6831F8AE] [SPRF][01/02/2012] (...) -- C:\Windows\Downloaded Program Files\RACtrl.dll [4617616] [MD5.190040D02E6B16047D63E3BEBB2E174C] [SPRF][11/03/2012] (.LogMeIn, Inc. - LogMeIn, Inc. Remote Access Components.) -- C:\Windows\Downloaded Program Files\swscale-2.dll [239504] ~ Scan Files in 00mn 02s ---\\ Firewall Active Exception List (FirewallRules) (O87) O87 - FAEL: "WMPNSS-In-UDP-NoScope" |In - Domain - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) O87 - FAEL: "WMPNSS-Out-UDP-NoScope" |Out - Domain - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) O87 - FAEL: "WMPNSS-In-TCP-NoScope" |In - Domain - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) O87 - FAEL: "WMPNSS-Out-TCP-NoScope" |Out - Domain - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) O87 - FAEL: "WMPNSS-In-UDP" |In - Public - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) O87 - FAEL: "WMPNSS-Out-UDP" |Out - Public - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) O87 - FAEL: "WMPNSS-In-TCP" |In - Public - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) O87 - FAEL: "WMPNSS-Out-TCP" |Out - Public - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) O87 - FAEL: "NetPres-In-TCP-NoScope" |In - Domain - P6 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.) O87 - FAEL: "NetPres-Out-TCP-NoScope" |Out - Domain - P6 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.) O87 - FAEL: "NetPres-WSD-In-UDP" |In - None - P17 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.) O87 - FAEL: "NetPres-WSD-Out-UDP" |Out - None - P17 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.) O87 - FAEL: "NetPres-In-TCP" |In - Public - P6 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.) O87 - FAEL: "NetPres-Out-TCP" |Out - Public - P6 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.) O87 - FAEL: "{CF97BBFF-1B0A-429D-A429-AF730C85F480}" | In - None - P6 - TRUE | .(.CyberLink Corp. - PowerDirector.) -- C:\Program Files (x86)\CyberLink\PowerDirector\PDR8.exe O87 - FAEL: "{9674C069-0971-4419-8653-269FDD78BFE8}" |In - None - P6 - TRUE | .(...) -- C:\Program Files (x86)\Hewlett-Packard\Media\DVD\HPTouchSmartMusic.exe (.not file.) O87 - FAEL: "{2B5510F2-F5C3-4303-836B-35950E2913DA}" |In - None - P6 - TRUE | .(...) -- C:\Program Files (x86)\Hewlett-Packard\Media\DVD\HPTouchSmartPhoto.exe (.not file.) O87 - FAEL: "{183B762D-C83E-44CE-9B4C-A8F0F1D180BD}" |In - None - P6 - TRUE | .(...) -- C:\Program Files (x86)\Hewlett-Packard\Media\DVD\HPTouchSmartVideo.exe (.not file.) O87 - FAEL: "{EE62619B-BF74-4B51-8D44-4EAB17725454}" |In - None - P6 - TRUE | .(...) -- C:\Program Files (x86)\Hewlett-Packard\Media\DVD\TSMAgent.exe (.not file.) O87 - FAEL: "{4EB89518-8E09-4317-BA64-9619EB54081E}" |In - None - P6 - TRUE | .(...) -- C:\Program Files (x86)\Hewlett-Packard\Media\DVD\Kernel\CLML\CLMLSvc.exe (.not file.) O87 - FAEL: "{2B73F530-FC29-49F0-857B-182C149E3C8D}" | In - None - P6 - TRUE | .(.CyberLink Corp. - HP DVDSmart Main Program.) -- C:\Program Files (x86)\Hewlett-Packard\Media\DVD\HPDVDSmart.exe O87 - FAEL: "{954058BA-0547-4274-BFB6-154158860D66}" | In - None - P6 - TRUE | .(.CyberLink Corp. - HP MediaSmart Photo Main Program.) -- C:\Program Files (x86)\Hewlett-Packard\MediaSmart\Photo\HPMediaSmartPhoto.exe O87 - FAEL: "{E544A482-1983-434F-AECF-FC277213B625}" | In - None - P6 - TRUE | .(.CyberLink Corp. - HP MediaSmart Video.) -- C:\Program Files (x86)\Hewlett-Packard\MediaSmart\Video\HPMediaSmartVideo.exe O87 - FAEL: "{F98AEA5D-53D9-4B23-A5E5-94F2A4CD3375}" | In - None - P6 - TRUE | .(.CyberLink Corp. - HP MediaSmart Music Main Program.) -- C:\Program Files (x86)\Hewlett-Packard\TouchSmart\Music\HPTouchSmartMusic.exe O87 - FAEL: "{714E4591-6060-4C14-896D-BCA1ADC29983}" | In - Public - P6 - TRUE | .(.EasyBits Software AS - My First Browser.) -- C:\Program Files (x86)\EasyBits For Kids\Programs\My First Browser\MyFirstBrowser.exe O87 - FAEL: "{009CBC87-B2DB-4A75-83DB-B0274B1A3E81}" | In - Public - P17 - TRUE | .(.EasyBits Software AS - My First Browser.) -- C:\Program Files (x86)\EasyBits For Kids\Programs\My First Browser\MyFirstBrowser.exe O87 - FAEL: "{56A2A24F-FDD1-4C5D-B33D-06C7D52D124E}" |In - None - P17 - TRUE | .(...) -- C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe (.not file.) O87 - FAEL: "{E08486C4-8DBD-4AF3-BFAF-3DBACEA53816}" |Out - Private - P6 - TRUE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) O87 - FAEL: "{93FE17A5-AAB7-43FF-8DF7-73B98D2F3BAE}" |In - Private - P6 - TRUE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) O87 - FAEL: "{1021E557-699B-4AB0-B693-842B196E156F}" |Out - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) O87 - FAEL: "{4A5F704A-2B10-41A6-88FC-F0F724348F56}" |In - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) O87 - FAEL: "TCP Query User{22B83596-D384-4F58-8DD4-3ED63AAC0160}C:\program files (x86)\emule\emule.exe" | In - Public - P6 - TRUE | .(.http://www.emule-project.net - eMule.) -- C:\Program Files (x86)\eMule\emule.exe O87 - FAEL: "UDP Query User{1CCE02C5-7455-4CE0-BB49-EEAE07CA8D50}C:\program files (x86)\emule\emule.exe" | In - Public - P17 - TRUE | .(.http://www.emule-project.net - eMule.) -- C:\Program Files (x86)\eMule\emule.exe O87 - FAEL: "TCP Query User{E292AF3D-852A-4F9F-995F-AE615D3638D6}C:\program files (x86)\google\google earth\plugin\geplugin.exe" | In - Private - P6 - TRUE | .(.Google.) -- C:\Program Files (x86)\Google\Google Earth\plugin\geplugin.exe O87 - FAEL: "UDP Query User{7E6E2754-3BB2-4097-8B56-0AC5CF4F908F}C:\program files (x86)\google\google earth\plugin\geplugin.exe" | In - Private - P17 - TRUE | .(.Google.) -- C:\Program Files (x86)\Google\Google Earth\plugin\geplugin.exe O87 - FAEL: "{2C72D385-008C-4E22-AFD6-94DF80E10A27}" | In - Private - P6 - TRUE | .(...) -- C:\Program Files (x86)\HomePlayer\HomePlayer.exe O87 - FAEL: "{CDB4CE33-CD66-4B5D-A5F7-9028DA8EE49A}" | In - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\HomePlayer\HomePlayer.exe O87 - FAEL: "{D670D17F-6EA5-428D-AF5E-DA23A189A2A5}" | In - Private - P6 - TRUE | .(...) -- C:\Program Files (x86)\HomePlayer\VLC\vlc.exe O87 - FAEL: "{EAD3D055-D0C8-4F24-A4DD-982618C003BB}" | In - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\HomePlayer\VLC\vlc.exe O87 - FAEL: "TCP Query User{A71FB32D-36E6-40ED-B778-3193C2F369F5}C:\program files (x86)\google\google earth\client\googleearth.exe" | In - Private - P6 - TRUE | .(.Google.) -- C:\Program Files (x86)\Google\Google Earth\client\googleearth.exe O87 - FAEL: "UDP Query User{AA5C7DCD-DEDB-4E7A-A35C-3E201AF107E6}C:\program files (x86)\google\google earth\client\googleearth.exe" | In - Private - P17 - TRUE | .(.Google.) -- C:\Program Files (x86)\Google\Google Earth\client\googleearth.exe O87 - FAEL: "{C1BCFCBB-6BDC-445B-B030-AB1BD816E6EF}" | In - Private - P6 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files (x86)\Bonjour\mDNSResponder.exe O87 - FAEL: "{BB3A7500-235F-48A8-AF42-EA9A489FEE5B}" | In - Private - P17 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files (x86)\Bonjour\mDNSResponder.exe O87 - FAEL: "{81BA48C3-4D70-460F-A84B-64260F39C30D}" | In - None - P17 - TRUE | .(.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe O87 - FAEL: "TCP Query User{FF916AD2-E952-4507-B441-B48D8B5B260E}C:\program files (x86)\google\google earth\client\googleearth.exe" | In - Public - P6 - TRUE | .(.Google.) -- C:\Program Files (x86)\Google\Google Earth\client\googleearth.exe O87 - FAEL: "UDP Query User{386AA6F7-C352-4683-8DD6-891F0FDFB846}C:\program files (x86)\google\google earth\client\googleearth.exe" | In - Public - P17 - TRUE | .(.Google.) -- C:\Program Files (x86)\Google\Google Earth\client\googleearth.exe O87 - FAEL: "{8093C845-3306-4FA5-B65A-AF8C54C1686E}" | In - Public - P6 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe O87 - FAEL: "{21A9A9F1-151E-46ED-B990-33E2914A4280}" | In - Public - P17 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe O87 - FAEL: "{054BFD96-58C2-4217-A517-7CA3FF207452}" | In - Public - P6 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files (x86)\Bonjour\mDNSResponder.exe O87 - FAEL: "{F3C86B98-3CC1-4831-9716-016D03F3C04F}" | In - Public - P17 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files (x86)\Bonjour\mDNSResponder.exe O87 - FAEL: "TCP Query User{297558A8-99E0-42F1-A63B-3C76AB4884D7}C:\program files (x86)\google\google earth\plugin\geplugin.exe" | In - Public - P6 - TRUE | .(.Google - Google Earth.) -- C:\Program Files (x86)\Google\Google Earth\plugin\geplugin.exe O87 - FAEL: "UDP Query User{F7FDF2DD-C148-4A70-A177-03A385DC04C0}C:\program files (x86)\google\google earth\plugin\geplugin.exe" | In - Public - P17 - TRUE | .(.Google.) -- C:\Program Files (x86)\Google\Google Earth\plugin\geplugin.exe O87 - FAEL: "{61414363-950A-4746-BDE5-96CAE92ADED5}" | In - Public - P6 - TRUE | .(...) -- C:\Program Files (x86)\HomePlayer\HomePlayer.exe O87 - FAEL: "{374C304F-07B7-4526-989C-E978BBF87BEF}" | In - Public - P17 - TRUE | .(...) -- C:\Program Files (x86)\HomePlayer\HomePlayer.exe O87 - FAEL: "{588C2E28-ABD4-431D-84E6-58F4918D39A4}" | In - Public - P6 - TRUE | .(...) -- C:\Program Files (x86)\HomePlayer\VLC\vlc.exe O87 - FAEL: "{51BAD54F-B26C-44E4-9064-F0B5B1C5137E}" | In - Public - P17 - TRUE | .(...) -- C:\Program Files (x86)\HomePlayer\VLC\vlc.exe O87 - FAEL: "{355A0061-EAF1-416A-802E-A814E33A7565}" |In - Public - P6 - TRUE | .(...) -- C:\Program Files (x86)\Vuze\Azureus.exe (.not file.) O87 - FAEL: "{B565A3BF-56A8-458E-B620-9042F339D7CF}" |In - Public - P17 - TRUE | .(...) -- C:\Program Files (x86)\Vuze\Azureus.exe (.not file.) O87 - FAEL: "TCP Query User{D5366C43-2285-4218-A3E4-E5BB533A7695}C:\program files (x86)\dshappybox\dshappybox.exe" |In - Public - P6 - TRUE | .(...) -- C:\program files (x86)\dshappybox\dshappybox.exe (.not file.) O87 - FAEL: "UDP Query User{30C8445C-1724-4DBA-B08A-96E64D97665B}C:\program files (x86)\dshappybox\dshappybox.exe" |In - Public - P17 - TRUE | .(...) -- C:\program files (x86)\dshappybox\dshappybox.exe (.not file.) O87 - FAEL: "{C1322204-E766-41B5-88EB-7F4175734C6F}" |In - Domain - P17 - TRUE | .(...) -- C:\Windows\System32\ezSharedSvcHost.exe (.not file.) O87 - FAEL: "{D5E1278B-7547-4C30-A83F-DB4F6EA50035}" | In - Domain - P17 - TRUE | .(.EasyBits Software AS - EasyBits Magic Desktop for Kids.) -- C:\Program Files (x86)\EasyBits For Kids\ezDesktop.exe O87 - FAEL: "{3F873880-4BC8-45AA-BE19-E4BCF45EA2D1}" | In - None - P6 - TRUE | .(.BitTorrent Inc. - µTorrent.) -- C:\Users\toto\AppData\Roaming\uTorrent\uTorrent.exe O87 - FAEL: "{F4E92FE1-130D-42F6-A9F3-19E111046AD1}" | In - None - P17 - TRUE | .(.BitTorrent Inc. - µTorrent.) -- C:\Users\toto\AppData\Roaming\uTorrent\uTorrent.exe O87 - FAEL: "TCP Query User{510BB3C4-583D-4A9C-950D-2CA9A65C2EAD}C:\users\toto\appdata\local\popcorn time\node-webkit\popcorn time.exe" | In - Private - P6 - TRUE | .(...) -- C:\Users\toto\AppData\Local\Popcorn Time\node-webkit\Popcorn Time.exe O87 - FAEL: "UDP Query User{C228F38A-4767-4DB5-B86F-C3426169CD05}C:\users\toto\appdata\local\popcorn time\node-webkit\popcorn time.exe" | In - Private - P17 - TRUE | .(...) -- C:\Users\toto\AppData\Local\Popcorn Time\node-webkit\Popcorn Time.exe O87 - FAEL: "TCP Query User{AD57C669-45A5-4CFA-A047-DA4ADAECC54E}C:\users\toto\appdata\roaming\cacaoweb\cacaoweb.exe" |In - Private - P6 - TRUE | .(...) -- C:\users\toto\appdata\roaming\cacaoweb\cacaoweb.exe (.not file.) O87 - FAEL: "UDP Query User{317052BD-A058-4F06-9ABF-A8F467A59AAA}C:\users\toto\appdata\roaming\cacaoweb\cacaoweb.exe" |In - Private - P17 - TRUE | .(...) -- C:\users\toto\appdata\roaming\cacaoweb\cacaoweb.exe (.not file.) O87 - FAEL: "{E5C7D5A1-FD24-419F-92BD-70E6EBB98D05}" | In - None - P17 - TRUE | .(.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe O87 - FAEL: "TCP Query User{8C827AF2-5016-405D-9243-95B19B92B0BB}C:\users\toto\appdata\roaming\torntv.com\torntv downloader.exe" |In - Private - P6 - TRUE | .(...) -- C:\users\toto\appdata\roaming\torntv.com\torntv downloader.exe (.not file.) O87 - FAEL: "UDP Query User{4D33B9B0-B1A5-4996-8381-3DC84D452CC3}C:\users\toto\appdata\roaming\torntv.com\torntv downloader.exe" |In - Private - P17 - TRUE | .(...) -- C:\users\toto\appdata\roaming\torntv.com\torntv downloader.exe (.not file.) O87 - FAEL: "{137CA32D-1928-48BC-AA53-8EF0E76ECAB3}" | In - Private - P6 - TRUE | .(.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe O87 - FAEL: "{232C67A1-D192-4E2B-A465-6BD92DD3CD12}" | In - Private - P17 - TRUE | .(.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe O87 - FAEL: "{250AD570-48B1-4F00-A482-760E364181D6}" | In - None - P17 - TRUE | .(.Apple Inc. - iTunes.) -- C:\Program Files\iTunes\iTunes.exe O87 - FAEL: "{FBF01B69-D07C-4C22-AA36-8B5D12763923}" | In - None - P6 - TRUE | .(.BitTorrent Inc. - µTorrent.) -- C:\Users\toto\AppData\Roaming\uTorrent\uTorrent.exe O87 - FAEL: "{610A0506-6277-48BD-8F24-7F0C8C824109}" | In - None - P17 - TRUE | .(.BitTorrent Inc. - µTorrent.) -- C:\Users\toto\AppData\Roaming\uTorrent\uTorrent.exe O87 - FAEL: "{BF2A9DD1-6C55-4FD4-9EC6-A0DAF52A8A97}" | In - Private - P6 - TRUE | .(.BitTorrent Inc. - µTorrent.) -- C:\Users\toto\AppData\Roaming\uTorrent\uTorrent.exe O87 - FAEL: "{8382593F-1796-405D-A4FE-14915DEA963D}" | In - Private - P17 - TRUE | .(.BitTorrent Inc. - µTorrent.) -- C:\Users\toto\AppData\Roaming\uTorrent\uTorrent.exe O87 - FAEL: "{1BCA1547-3830-4551-9FB1-C7B49023009B}" | In - None - P17 - TRUE | .(.Hewlett-Packard Company - HP Device Detection.) -- C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPDeviceDetection3.exe ~ Scan Firewall in 00mn 02s ---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped) SS - | Auto 19/12/2014 81088 | (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe SS - | Demand 14/04/2015 268464 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe SS - | Auto 20/01/2015 77128 | (Apple Mobile Device Service) . (.Apple Inc..) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe SS - | Auto 30/08/2011 462184 | (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe SS - | Auto 30/12/1899 0 | (ezSharedSvc) . (.EasyBits Software AS.) - C:\Windows\System32\ezSharedSvcHost.exe SS - | Demand 12/10/2010 206072 | (GamesAppService) . (.WildTangent, Inc..) - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe SS - | Auto 23/04/2015 713736 | (Garmin Device Interaction Service) . (.Garmin Ltd. or its subsidiaries.) - C:\Program Files (x86)\Garmin\Device Interaction Service\GarminService.exe SS - | Auto 20/10/2014 107912 | (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe SS - | Demand 20/10/2014 107912 | (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe SS - | Demand 24/01/2015 194032 | (gusvc) . (.Google.) - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe SS - | Auto 04/11/2013 92160 | (HP Support Assistant Service) . (.Hewlett-Packard Company.) - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe SS - | Demand 13/05/2013 1129760 | (hpqwmiex) . (.Hewlett-Packard Company.) - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe SS - | Demand 13/02/2015 643880 | (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe SS - | Auto 19/05/2010 73728 | (LightScribeService) . (.Hewlett-Packard Company.) - C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe SS - | Demand 23/04/2015 148080 | (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe SS - | Auto 03/05/2011 1005160 | (nvsvc) . (.NVIDIA Corporation.) - C:\Windows\system32\nvvsvc.exe SS - | Auto 15/10/2009 635416 | (pdfcDispatcher) . (.PDF Complete Inc.) - C:\Program Files (x86)\PDF Complete\pdfsvc.exe SS - | Auto 11/12/2014 315496 | (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe SS - | Auto 0 | C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe SS - | Auto 14/07/2009 27136 | C:\Windows\system32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe ~ Scan Services in 00mn 13s ---\\ Recherche Master Boot Record Infection (MBR)(O80) (None) ---\\ Recherche Master Boot Record Infection (MBRCheck)(O80) (None) End of the scan (2037 lines in 03mn 19s)(0)