~ ZHPDiag v2016.3.8.67 Par Nicolas Coolman (2016/03/08) ~ Démarré par hamid-hp (Administrator) (2016/03/08 23:14:38) ~ Site: http://www.nicolascoolman.com ~ Facebook: https://www.facebook.com/nicolascoolman1 ~ Etat de la version: Version OK ~ Mode: Scanner ~ Rapport: C:\Users\hamid-hp\Desktop\ZHPDiag.txt ~ Rapport: C:\Users\hamid-hp\AppData\Roaming\ZHP\ZHPDiag.txt ~ UAC: Activate ~ Démarrage du système: Normal (Normal boot) Windows 8.1 Pro, 32-bit (Build 9600) ---\\ Navigateurs Internet (3) - 0s GCIE: Google Chrome v49.0.2623.75 MFIE: Mozilla Firefox 43.0.1 (x86 fr) MSIE: Internet Explorer v11.0.9600.18205 ---\\ Informations sur les produits Windows (9) - 3s ~ Windows Server License Manager Script : OK ~ Licence Script File Génération : OK ~ Windows(R) Operating System, VOLUME_KMSCLIENT channel Windows ID Activation : OK ~ Windows Partial Key : 9D6T9 Windows License : OK Expiration Licence Windows : 259193 minute(s) (180 jour(s)) ~ Windows Remaining Initializations Number : 999 Windows Automatic Updates : OK ---\\ Logiciels de protection (2) - 1s Avast Internet Security v11.1.2253 Windows Defender (Deactivate) ---\\ Surveillance de Logiciels (1) - 1s Adobe Flash Player 20 NPAPI ---\\ Informations sur le système (6) - 0s ~ Operating System: x86 Family 6 Model 69 Stepping 1, GenuineIntel ~ Operating System: 32-bit ~ Boot mode: Normal (Normal boot) Total RAM: 2564.396 MB (62% free) System Restore: Activé (Enable) System drive C: has 220 GB () free of 250 GB ---\\ Mode de connexion au système (3) - 0s ~ Computer Name: HAMID ~ User Name: hamid-hp ~ Logged in as Administrator ---\\ Enumération des unités disques (3) - 0s ~ Drive C: has 220 GB free of 250 GB (System) ~ Drive E: has 243 GB free of 250 GB ~ Drive F: has 197 GB free of 213 GB ---\\ Etat du Centre de Sécurité Windows (11) - 0s [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK [HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: OK [HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK ---\\ Recherche particulière de fichiers génériques (24) - 0s [MD5.9180E7A47852FC2EBDAEF0B1F0D146BD] - 14/11/2015 - (.Microsoft Corporation - Explorateur Windows.) -- C:\Windows\Explorer.exe [2414096] =>.Microsoft Windows® [MD5.8BFE805555CDAF6387912A34D7978DAA] - 14/11/2015 - (.Microsoft Corporation - Processus hôte Windows (Rundll32).) -- C:\Windows\System32\rundll32.exe [51200] =>.Microsoft Corporation [MD5.8A60D4136E37C3CCB1ECAE90D11618F4] - 05/10/2015 - (.Microsoft Corporation - Application de démarrage de Windows.) -- C:\Windows\System32\Wininit.exe [115712] =>.Microsoft Corporation [MD5.5CB71C6DB91BAC78E1F0E9953CAB8969] - 22/01/2016 - (.Microsoft Corporation - Extensions Internet pour Win32.) -- C:\Windows\System32\wininet.dll [2120704] =>.Microsoft Corporation [MD5.C7B38F105DFDD3231314EDDF7012D8AA] - 05/10/2015 - (.Microsoft Corporation - Application d’ouverture de session Windows.) -- C:\Windows\System32\Winlogon.exe [465920] =>.Microsoft Corporation [MD5.BFB9E1202225113991F981D29BFB9029] - 14/11/2015 - (.Microsoft Corporation - Bibliothèque de licences.) -- C:\Windows\System32\sppcomapi.dll [438272] =>.Microsoft Corporation [MD5.205BDB00F4C032AF45A6BFD18EA7886C] - 14/11/2015 - (.Microsoft Corporation - DNS DLL de l’API Client.) -- C:\Windows\System32\dnsapi.dll [498688] =>.Microsoft Corporation [MD5.E37F897ED7B5AFF79B1398258DB96BD9] - 14/11/2015 - (.Microsoft Corporation - DLL client de l’API uilisateur de Windows m.) -- C:\Windows\System32\fr-FR\user32.dll.mui [19456] =>.Microsoft Corporation [MD5.2B204EEC6A78BB9730927A28435DFEB4] - 14/11/2015 - (.Microsoft Corporation - Pilote de fonction connexe pour WinSock.) -- C:\Windows\System32\drivers\AFD.sys [462848] =>.Microsoft Corporation [MD5.72FCAE2CE6DFEAB2AB072435017F3417] - 22/08/2013 - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) -- C:\Windows\System32\drivers\atapi.sys [23392] =>.Microsoft Windows® [MD5.CE232BB0965C0C0B786C3F976CCBFB7D] - 22/08/2013 - (.Microsoft Corporation - CD-ROM File System Driver.) -- C:\Windows\System32\drivers\Cdfs.sys [73728] =>.Microsoft Corporation [MD5.E2FC132D48EA4E8B04432C33EFB77801] - 22/08/2013 - (.Microsoft Corporation - SCSI CD-ROM Driver.) -- C:\Windows\System32\drivers\Cdrom.sys [124928] =>.Microsoft Corporation [MD5.40E08049DA22B53A305B4ECB351DC8E8] - 14/11/2015 - (.Microsoft Corporation - DFS Namespace Client Driver.) -- C:\Windows\System32\drivers\DfsC.sys [103936] =>.Microsoft Corporation [MD5.7E0EDA9EE53E344D1604EB2A7E8DED47] - 14/11/2015 - (.Microsoft Corporation - High Definition Audio Bus Driver.) -- C:\Windows\System32\drivers\HDAudBus.sys [69632] =>.Microsoft Corporation [MD5.7A708934CC652100A94944EC808C3916] - 14/11/2015 - (.Microsoft Corporation - Pilote de port i8042.) -- C:\Windows\System32\drivers\i8042prt.sys [83456] =>.Microsoft Corporation [MD5.FA6C94C754A566EA8A61D658932F32DE] - 14/11/2015 - (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\System32\drivers\IpNat.sys [126976] =>.Microsoft Corporation [MD5.8F4479CAB37AA3C762BE8800626A976C] - 10/01/2016 - (.Microsoft Corporation - Minirdr SMB Windows NT.) -- C:\Windows\System32\drivers\MRxSmb.sys [328704] =>.Microsoft Corporation [MD5.58151EEE4B8F81ACCABC888A06D77F9D] - 14/11/2015 - (.Microsoft Corporation - MBT Transport driver.) -- C:\Windows\System32\drivers\netBT.sys [214528] =>.Microsoft Corporation [MD5.B3DB83802C5B2D144EC8F13C367F8726] - 14/11/2015 - (.Microsoft Corporation - Pilote du système de fichiers NT.) -- C:\Windows\System32\drivers\ntfs.sys [1688392] =>.Microsoft Windows® [MD5.4F30970F15ADCC382544B31D5D7E368E] - 22/08/2013 - (.Microsoft Corporation - Pilote de port parallèle.) -- C:\Windows\System32\drivers\Parport.sys [81408] =>.Microsoft Corporation [MD5.3255D128FDC28D6859303BF240991A0D] - 14/11/2015 - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) -- C:\Windows\System32\drivers\Rasl2tp.sys [82432] =>.Microsoft Corporation [MD5.67E91843B0344411820A012063E876B2] - 30/09/2013 - (.Microsoft Corporation - Redirecteur de périphérique de Microsoft RD.) -- C:\Windows\System32\drivers\rdpdr.sys [143872] =>.Microsoft Corporation [MD5.80A7F31C89C7752DFEC2A9CF28FFF291] - 14/11/2015 - (.Microsoft Corporation - TDI Translation Driver.) -- C:\Windows\System32\drivers\tdx.sys [86016] =>.Microsoft Corporation [MD5.9B3C092F74FE202A9BCCE03859A330C3] - 14/11/2015 - (.Microsoft Corporation - Pilote de cliché instantané du volume.) -- C:\Windows\System32\drivers\volsnap.sys [265048] =>.Microsoft Windows® ---\\ Liste des services NT non Microsoft et non désactivés (17) - 2s O23 - Service: Avast Antivirus (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe =>.AVAST Software a.s.® O23 - Service: Avast Firewall (avast! Firewall) . (.AVAST Software - avast! firewall service.) - C:\Program Files\AVAST Software\Avast\afwServ.exe =>.AVAST Software a.s.® O23 - Service: BTDevManager (BTDevManager) . (.Realtek All Rights Reserved - Realtek Bluetooth BTDevManager Service Appl.) - C:\Program Files\Realtek\Realtek Bluetooth\BTDevMgr.exe =>.Realtek Semiconductor Corp® O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe =>.Google Inc® O23 - Service: @oem25.inf,%hpservice_desc%;HP Service (hpsrv) . (.Hewlett-Packard Company - HpService.) - C:\Windows\System32\Hpservice.exe =>.Hewlett-Packard Company® O23 - Service: HP Support Solutions Framework Service (HPSupportSolutionsFrameworkService) . (.Hewlett-Packard Company - HP Support Solutions Framework Service.) - C:\Program Files\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe =>.Hewlett-Packard Company® O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService1.0.0.0) . (.Intel Corporation - igfxCUIService Module.) - C:\Windows\System32\igfxCUIService.exe =>.Intel Corporation - pGFX® O23 - Service: ihpmServer (ihpmServer) . (.RayDl - RayDl.) - C:\Program Files\RayDld\ihpmServer.exe =>PUP.Optional.CrossRider O23 - Service: Intel(R) Smart Connect Technology Agent (iSCTAgent) . (.Copyright© 2011-2013 Intel Corporation - ISCT Agent Application.) - C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe =>.Intel(R) Smart Connect software® O23 - Service: NVIDIA Network Service (NvNetworkService) . (.NVIDIA Corporation - NVIDIA Network Service.) - C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe =>.NVIDIA Corporation® O23 - Service: NVIDIA Streamer Service (NvStreamSvc) . (.NVIDIA Corporation - NVIDIA Streamer Service.) - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe =>.NVIDIA Corporation® O23 - Service: NVIDIA Display Driver Service (nvsvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 344.2.) - C:\Windows\System32\nvvsvc.exe =>.NVIDIA Corporation® O23 - Service: Realtek Audio Service (RtkAudioService) . (.Realtek Semiconductor - Realtek Audio Service.) - C:\Program Files\Realtek\Audio\HDA\RtkAudioService.exe =>.Realtek Semiconductor Corp® O23 - Service: Service KMSELDI (Service KMSELDI) . (. - Service_KMS.) - C:\Program Files\KMSpico\Service_KMS.exe =>HackTool.KMSpico O23 - Service: Service Mgr DiscoverTreasure (Service Mgr DiscoverTreasure) . (...) - C:\ProgramData\4f596ec3-77fb-4fc3-82cb-691c42c71d77\PluginContainer.exe =>PUP.Optional.DiscoverTreasure O23 - Service: SynTPEnh Caller Service (SynTPEnhService) . (.Synaptics Incorporated - 32-bit Synaptics Pointing Enhance Service.) - C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe =>.Synaptics Incorporated® O23 - Service: Update Mgr DiscoverTreasure (Update Mgr DiscoverTreasure) . (...) - C:\Program Files\Common Files\4f596ec3-77fb-4fc3-82cb-691c42c71d77\updater.exe =>PUP.Optional.DiscoverTreasure ---\\ Services non Microsoft (SR=Démarré,SS=Stoppé) (23) - 20s SS - Demand [15/02/2016] [ 269504] Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe =>.Adobe Systems Incorporated® SR - Auto [15/02/2016] [ 237096] Avast Antivirus (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe =>.AVAST Software a.s.® SR - Auto [15/02/2016] [ 119128] Avast Firewall (avast! Firewall) . (.AVAST Software.) - C:\Program Files\AVAST Software\Avast\afwServ.exe =>.AVAST Software a.s.® SR - Auto [20/07/2015] [ 98520] BTDevManager (BTDevManager) . (.Realtek All Rights Reserved.) - C:\Program Files\Realtek\Realtek Bluetooth\BTDevMgr.exe =>.Realtek Semiconductor Corp® SS - Demand [09/08/2015] [ 288688] Intel(R) Content Protection HECI Service (cphs) . (.Intel Corporation.) - C:\Windows\System32\IntelCpHeciSvc.exe =>.Intel Corporation - pGFX® SS - Auto [07/03/2016] [ 154440] Service Google Update (gupdate) (gupdate) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe =>.Google Inc® SS - Demand [07/03/2016] [ 154440] Service Google Update (gupdatem) (gupdatem) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe =>.Google Inc® SR - Auto [27/01/2015] [ 40584] @oem25.inf,%hpservice_desc%;HP Service (hpsrv) . (.Hewlett-Packard Company.) - C:\Windows\System32\Hpservice.exe =>.Hewlett-Packard Company® SR - Auto [20/12/2015] [ 26168] HP Support Solutions Framework Service (HPSupportSolutionsFrameworkService) . (.Hewlett-Packard Company.) - C:\Program Files\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe =>.Hewlett-Packard Company® SR - Auto [09/08/2015] [ 300976] Intel(R) HD Graphics Control Panel Service (igfxCUIService1.0.0.0) . (.Intel Corporation.) - C:\Windows\System32\igfxCUIService.exe =>.Intel Corporation - pGFX® SR - Auto [22/02/2016] [ 275184] ihpmServer (ihpmServer) . (.RayDl.) - C:\Program Files\RayDld\ihpmServer.exe =>PUP.Optional.CrossRider SR - Auto [04/12/2013] [ 179688] Intel(R) Smart Connect Technology Agent (iSCTAgent) . (.Copyright© 2011-2013 Intel Corporation.) - C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe =>.Intel(R) Smart Connect software® SS - Demand [08/06/2015] [ 509424] Lenovo EasyPlus Hotspot (Lenovo EasyPlus Hotspot) . (.Lenovo.) - C:\Program Files\Common Files\LENOVO\easyplussdk\bin\EPHotspot.exe =>.LENOVO® SR - Auto [08/09/2014] [ 1795912] NVIDIA Network Service (NvNetworkService) . (.NVIDIA Corporation.) - C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe =>.NVIDIA Corporation® SR - Auto [08/09/2014] [18043720] NVIDIA Streamer Service (NvStreamSvc) . (.NVIDIA Corporation.) - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe =>.NVIDIA Corporation® SR - Auto [27/09/2014] [ 669896] NVIDIA Display Driver Service (nvsvc) . (.NVIDIA Corporation.) - C:\Windows\System32\nvvsvc.exe =>.NVIDIA Corporation® SR - Auto [04/09/2014] [ 252632] Realtek Audio Service (RtkAudioService) . (.Realtek Semiconductor.) - C:\Program Files\Realtek\Audio\HDA\RtkAudioService.exe =>.Realtek Semiconductor Corp® SS - Auto [25/11/2013] [ 800536] Service KMSELDI (Service KMSELDI) . (...) - C:\Program Files\KMSpico\Service_KMS.exe =>HackTool.KMSpico SR - Auto [08/03/2016] [ 1403616] Service Mgr DiscoverTreasure (Service Mgr DiscoverTreasure) . (...) - C:\ProgramData\4f596ec3-77fb-4fc3-82cb-691c42c71d77\PluginContainer.exe =>PUP.Optional.DiscoverTreasure SS - Demand [02/02/2016] [ 31192] (ShareItSvc) . (.SHAREit Technologies Co.Ltd.) - e:\Program Files\Lenovo\SHAREit\Shareit.Service.exe =>.LENOVO® SR - Auto [16/06/2014] [ 169712] SynTPEnh Caller Service (SynTPEnhService) . (.Synaptics Incorporated.) - C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe =>.Synaptics Incorporated® SR - Auto [07/03/2016] [ 1273568] Update Mgr DiscoverTreasure (Update Mgr DiscoverTreasure) . (...) - C:\Program Files\Common Files\4f596ec3-77fb-4fc3-82cb-691c42c71d77\updater.exe =>PUP.Optional.DiscoverTreasure ---\\ Tâches planifiées en automatique (21) - 3s [MD5.785FD0E36CA75D90DD50042E2594BC63] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe [269504] =>.Adobe Systems Incorporated® [MD5.C746CD166372F3C6F364B62F2C2C8B20] [APT] [AutoKMS] (.CODYQX4.) -- C:\Windows\AutoKMS\AutoKMS.exe [3738624] =>HackTool.AutoKMS [MD5.CA189CB28ED318B44A2A89F0B35B1831] [APT] [AutoPico Daily Restart] (...) -- C:\Program Files\KMSpico\AutoPico.exe [801048] =>HackTool.KMSpico [MD5.BB19B7714F94DA4A34B40B484BE54739] [APT] [avast! Emergency Update] (.AVAST Software.) -- C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [1503200] =>.AVAST Software a.s.® [MD5.750446ED76A5D13E902174DDDDA1A62B] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe [154440] =>.Google Inc® [MD5.750446ED76A5D13E902174DDDDA1A62B] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe [154440] =>.Google Inc® [MD5.FC34703513AD8F32E103EAEE290CFD05] [APT] [SafeZone scheduled Autoupdate 1455535561] (.Avast Software.) -- C:\Program Files\AVAST Software\SZBrowser\launcher.exe [735736] =>.AVAST Software s.r.o.® [MD5.52DABAFBE381FE68F7073099C3AC4C3D] [APT] [WinTaske] (...) -- C:\Program Files\WinTaske\WinTaske\WinTaske.exe [342200] =>PUP.Optional.YesSearches [MD5.224EFC8B50E88D79DCEB19D658D5C41B] [APT] [AVAST Software\] (.AVAST Software.) -- C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [652816] =>.AVAST Software a.s.® [MD5.00000000000000000000000000000000] [APT] [Lenovo\] (...) -- C:\Program Files\Lenovo\Customer Feedback Program 35\Lenovo.TVT.CustomerFeedback.Agent35.exe (.not file.) [0] =>.Superfluous.Empty O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\Tasks\Adobe Flash Player Updater.job [1002] =>.Adobe Systems Incorporated® O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job [1068] =>.Google Inc® O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job [1072] =>.Google Inc® O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Tasks\Adobe Flash Player Updater [3890] =>.Adobe Systems Incorporated® O39 - APT: AutoKMS - (.CODYQX4.) -- C:\Windows\System32\Tasks\AutoKMS [3758] =>HackTool.AutoKMS O39 - APT: AutoPico Daily Restart - (...) -- C:\Windows\System32\Tasks\AutoPico Daily Restart [3710] =>HackTool.KMSpico O39 - APT: avast! Emergency Update - (.AVAST Software.) -- C:\Windows\System32\Tasks\avast! Emergency Update [4182] =>.AVAST Software a.s.® O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore [3808] =>.Google Inc® O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA [4044] =>.Google Inc® O39 - APT: SafeZone scheduled Autoupdate 1455535561 - (.Avast Software.) -- C:\Windows\System32\Tasks\SafeZone scheduled Autoupdate 1455535561 [3068] =>.AVAST Software s.r.o.® O39 - APT: WinTaske - (...) -- C:\Windows\System32\Tasks\WinTaske [15224] =>PUP.Optional.YesSearches ---\\ Processus lancés (47) - 2s [MD5.1A477EA7D023B5D082063B6B352B5FA2] - (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 344.2.) -- C:\Windows\System32\nvvsvc.exe [669896] [PID.996] =>.NVIDIA Corporation® [MD5.168EE73A19DEBDBB17FB665E7ECF0089] - (.NVIDIA Corporation - NVIDIA User Experience Driver Component.) -- C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe [942736] [PID.1032] =>.NVIDIA Corporation® [MD5.1A477EA7D023B5D082063B6B352B5FA2] - (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 344.2.) -- C:\Windows\System32\nvvsvc.exe [669896] [PID.1040] =>.NVIDIA Corporation® [MD5.E041B29CC257EAC62E31F4260920E78F] - (.Intel Corporation - igfxCUIService Module.) -- C:\Windows\System32\igfxCUIService.exe [300976] [PID.1204] =>.Intel Corporation - pGFX® [MD5.827EF232C2F5DD6EA13661BE29F80590] - (.Hewlett-Packard Company - HpService.) -- C:\Windows\System32\Hpservice.exe [40584] [PID.1476] =>.Hewlett-Packard Company® [MD5.D313E25114C6AE5D3E9764190725C04A] - (.Realtek Semiconductor - Realtek Audio Service.) -- C:\Program Files\Realtek\Audio\HDA\RtkAudioService.exe [252632] [PID.1500] =>.Realtek Semiconductor Corp® [MD5.2495C1C4E9ED2713F0945C15EBCCAF77] - (.Realtek Semiconductor - HD Audio Background Process.) -- C:\Program Files\Realtek\Audio\HDA\RtHDVBg.exe [1021808] [PID.1516] =>.Realtek Semiconductor Corp® [MD5.2495C1C4E9ED2713F0945C15EBCCAF77] - (.Realtek Semiconductor - HD Audio Background Process.) -- C:\Program Files\Realtek\Audio\HDA\RtHDVBg.exe [1021808] [PID.1524] =>.Realtek Semiconductor Corp® [MD5.501E11AE85EE28D305D228F5931AC76C] - (.AVAST Software - avast! Service.) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe [237096] [PID.1800] =>.AVAST Software a.s.® [MD5.64A66620BCD79A82DBC0A0B5005C24F2] - (.Intel Corporation - igfxEM Module.) -- C:\Windows\System32\igfxEM.exe [269744] [PID.1952] =>.Intel Corporation - pGFX® [MD5.1FE42C487612D1194172845E2647A25F] - (.Intel Corporation - igfxHK Module.) -- C:\Windows\System32\igfxHK.exe [219056] [PID.1960] =>.Intel Corporation - pGFX® [MD5.75D1D041B6DC25B9896DCFB432028B7F] - (...) -- C:\Windows\System32\igfxTray.exe [423344] [PID.1968] =>.Intel Corporation - pGFX® [MD5.468BBF1D3E62BE7A3A2C7A947BFB425F] - (.AVAST Software - avast! firewall service.) -- C:\Program Files\AVAST Software\Avast\afwServ.exe [119128] [PID.2176] =>.AVAST Software a.s.® [MD5.47480F4260DAE9AA589BCAF924B3767A] - (.Microsoft Corporation. - BingBar Service.) -- C:\Program Files\Microsoft\BingBar\7.1.362.0\BBSvc.EXE [193816] [PID.2568] =>.Microsoft Corporation® [MD5.C49383E281FA09A2094306162B6671DB] - (.Realtek All Rights Reserved - Realtek Bluetooth BTDevManager Service Appl.) -- C:\Program Files\Realtek\Realtek Bluetooth\BTDevMgr.exe [98520] [PID.2628] =>.Realtek Semiconductor Corp® [MD5.B2F6A1B0B77C1AB2761DD64A1FCE3306] - (.RayDl - RayDl.) -- C:\Program Files\RayDld\ihpmServer.exe [275184] [PID.2848] =>PUP.Optional.CrossRider [MD5.0BEF7FD7F12A144A96EDB8EA21650C62] - (.Copyright© 2011-2013 Intel Corporation - ISCT Agent Application.) -- C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe [179688] [PID.2948] =>.Intel(R) Smart Connect software® [MD5.449EEFEAF9DB110428AE262B1DE8A3B2] - (.NVIDIA Corporation - NVIDIA Settings.) -- C:\Program Files\NVIDIA Corporation\Display\nvtray.exe [1818440] [PID.3108] =>.NVIDIA Corporation® [MD5.ABF64234F3462571E66527828040219B] - (.Google Inc. - Google Crash Handler.) -- C:\Program Files\Google\Update\1.3.29.5\GoogleCrashHandler.exe [252232] [PID.3196] =>.Google Inc® [MD5.B6BF397F3AAE84A90B4AD2E5AC7E59E4] - (.NVIDIA Corporation - NVIDIA Network Service.) -- C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe [1795912] [PID.3204] =>.NVIDIA Corporation® [MD5.486540994B59298A3B39A5F3CBB30688] - (.NVIDIA Corporation - NVIDIA Streamer Service.) -- C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [18043720] [PID.3392] =>.NVIDIA Corporation® [MD5.8370179ACE961B0DAD1022C00ABCC3D7] - (.NVIDIA Corporation - NVIDIA GeForce Experience Backend.) -- C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe [2473800] [PID.3492] =>.NVIDIA Corporation® [MD5.486540994B59298A3B39A5F3CBB30688] - (.NVIDIA Corporation - NVIDIA Streamer Service.) -- C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [18043720] [PID.3744] =>.NVIDIA Corporation® [MD5.486540994B59298A3B39A5F3CBB30688] - (.NVIDIA Corporation - NVIDIA Streamer Service.) -- C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [18043720] [PID.3768] =>.NVIDIA Corporation® [MD5.FA73EDFE039C8F3CC1C024684D5FE86E] - (.Synaptics Incorporated - 32-bit Synaptics Pointing Enhance Service.) -- C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [169712] [PID.3976] =>.Synaptics Incorporated® [MD5.6A669B87C65EA74E80AF5DB1CF82A5CB] - (.Synaptics Incorporated - Synaptics TouchPad 32-bit Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2462448] [PID.4024] =>.Synaptics Incorporated® [MD5.32E3DCD5910C4196A1D7144DFAD5665D] - (...) -- C:\Program Files\Common Files\4f596ec3-77fb-4fc3-82cb-691c42c71d77\updater.exe [1273568] [PID.4032] =>PUP.Optional.DiscoverTreasure [MD5.B75014FD6F5A8EE94F28D7DBF7E8BA65] - (.Synaptics Incorporated - Synaptics Pointing Device Helper.) -- C:\PROGRAM FILES\SYNAPTICS\SynTP\SYNTPHELPER.EXE [185072] [PID.5444] =>.Synaptics Incorporated® [MD5.39F95EABC5FE4D1277376B7E7DB5620D] - (.HP - HP Radio Manager.) -- C:\Program Files\HP\HP Wireless Button Driver\HPRadioMgr86.exe [233000] [PID.4396] =>.Hewlett-Packard® [MD5.172926F33AD9C06624EBD5F1B3091D55] - (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RtkNGUI.exe [6745816] [PID.2600] =>.Realtek Semiconductor Corp® [MD5.EED665FF8003D08E3A0F16E3EA216BF3] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\avastui.exe [7139768] [PID.5440] =>.AVAST Software a.s.® [MD5.4D4DE41DA750649505E884CEC4A1422F] - (.Tonec Inc. - Internet Download Manager (IDM).) -- C:\Program Files\Internet Download Manager\IDMan.exe [3933392] [PID.4376] =>.Tonec Inc.® [MD5.B5622C1549F75A2E2312B59CE2293A09] - (...) -- E:\Program Files\WebcamMax\wcmmon.exe [1038848] [PID.1632] [MD5.ADB05D540C18876EC037FA698B8EFFF8] - (.Intel Corporation - ISCT SysTray.) -- C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe [5545448] [PID.4132] =>.Intel(R) Smart Connect software® [MD5.B26B610E68F862777C491227B9616271] - (.Tonec Inc. - Internet Download Manager agent for click m.) -- C:\Program Files\Internet Download Manager\IEMonitor.exe [275608] [PID.4616] =>.Tonec Inc.® [MD5.CB88188C53FA596927D2928DDE0B9C21] - (.Hewlett-Packard Company - HP Support Solutions Framework Service.) -- C:\Program Files\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [26168] [PID.2620] =>.Hewlett-Packard Company® [MD5.271CAC219A2ABE24A513AF942A4849EF] - (...) -- C:\ProgramData\4f596ec3-77fb-4fc3-82cb-691c42c71d77\PluginContainer.exe [1403616] [PID.4204] =>PUP.Optional.DiscoverTreasure [MD5.8511D9F210440BEAD89BB5AF43AC4932] - (...) -- C:\ProgramData\4f596ec3-77fb-4fc3-82cb-691c42c71d77\plugins\2\Plugin.exe [1584352] [PID.4612] =>PUP.Optional.DiscoverTreasure [MD5.32055E6AF31A5603E1A4FBE4A18FD6FC] - (...) -- C:\ProgramData\4f596ec3-77fb-4fc3-82cb-691c42c71d77\plugins\5\Plugin.exe [1045216] [PID.4712] =>PUP.Optional.DiscoverTreasure [MD5.952D55CDFDFD812511D98AA38A8223AA] - (...) -- C:\ProgramData\4f596ec3-77fb-4fc3-82cb-691c42c71d77\plugins\3\Plugin.exe [798432] [PID.4320] =>PUP.Optional.DiscoverTreasure [MD5.7EF298684DA2C8DDC2573BC0B34A08FD] - (...) -- C:\ProgramData\4f596ec3-77fb-4fc3-82cb-691c42c71d77\plugins\7\Plugin.exe [533216] [PID.4772] =>PUP.Optional.DiscoverTreasure [MD5.9B3E63B1BDCFCB659DA4D95D80B61019] - (...) -- C:\ProgramData\4f596ec3-77fb-4fc3-82cb-691c42c71d77\plugins\12\Plugin.exe [728288] [PID.3632] =>PUP.Optional.DiscoverTreasure [MD5.314832CB9D7244C3B6EE26E85DED860D] - (...) -- C:\ProgramData\4f596ec3-77fb-4fc3-82cb-691c42c71d77\plugins\8\Plugin.exe [1641184] [PID.6016] =>PUP.Optional.DiscoverTreasure [MD5.7EF298684DA2C8DDC2573BC0B34A08FD] - (...) -- C:\ProgramData\4f596ec3-77fb-4fc3-82cb-691c42c71d77\plugins\7\Plugin.exe [533216] [PID.3724] =>PUP.Optional.DiscoverTreasure [MD5.952D55CDFDFD812511D98AA38A8223AA] - (...) -- C:\ProgramData\4f596ec3-77fb-4fc3-82cb-691c42c71d77\plugins\3\Plugin.exe [798432] [PID.4528] =>PUP.Optional.DiscoverTreasure [MD5.9B3E63B1BDCFCB659DA4D95D80B61019] - (...) -- C:\ProgramData\4f596ec3-77fb-4fc3-82cb-691c42c71d77\plugins\12\Plugin.exe [728288] [PID.3704] =>PUP.Optional.DiscoverTreasure [MD5.A5A9C15C851F41E985E7C67FE7938E44] - (.Nicolas Coolman - ZHPDiag.) -- C:\Users\hamid-hp\Desktop\ZHPDiag3.exe [2148352] [PID.6080] =>.Nicolas Coolman ---\\ Google Chrome, Démarrage,Recherche,Extensions (13) - 16s G2 - GCE: Preference [User Data\Default] [aapocclcgogkmnckokdopfmhonfmgoek] Google Chrome manifest =>.Google Inc. G2 - GCE: Preference [User Data\Default] [aohghmighlieiainnegkcijnfilokake] Google Chrome manifest =>.Google Inc. G2 - GCE: Preference [User Data\Default] [apdfllckaahabafndbhieahigkjlhalf] Google Chrome manifest =>.Google Inc. G2 - GCE: Preference [User Data\Default] [blpcfgokakmgnkcojhhkbfbldkacnbeo] Google Chrome manifest =>.Google Inc. G2 - GCE: Preference [User Data\Default] [felcaaldnbdncclmgdcncolpebgiejap] Google Chrome manifest =>.Google Inc. G2 - GCE: Preference [User Data\Default] [ghbmnnjooekpmoecnnnilnnbdlolhkhi] Google Chrome manifest =>.Google Inc. G2 - GCE: Preference [User Data\Default] [gighmmpiobklfepjocnamgkkbiglidom] AdBlock G2 - GCE: Preference [User Data\Default] [gjndloejlcbpkholmagjbddfkjmmploh] __MSG_name__ G2 - GCE: Preference [User Data\Default] [gomekmidlodglbbmalcneegieacbdmki] Avast Online Security G2 - GCE: Preference [User Data\Default] [ngpampappnmepgilojfohadhhmbhlaek] IDM Integration Module G2 - GCE: Preference [User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] Google Chrome manifest =>.Google Inc. G2 - GCE: Preference [User Data\Default] [opnlofbefoejamblfkfemhphgllkdgmj] [{"background":{"scripts":["background.js"]},"conte] {background:{scripts:[background.js]}content_scrip =>Hijacker.Browser G2 - GCE: Preference [User Data\Default] [pjkljhegncpnkpknbcohdijeoejaedia] Google Chrome manifest =>.Google Inc. ---\\ Firefox, Plugins,Demarrage,Recherche,Extensions (22) - 2s M0 - MFSP: prefs.js [hamid-hp - ehmcmgcy.dev-edition-default] https://www.google.com/ M0 - MFSP: prefs.js [hamid-hp - 41A66E7E5EE1] http://searchinterneat-a.akamaihd.net/h?eq=U0EeCFZVBB8SRghFcgEMVgwQExhBJQ4BTA1DEQEOeQhdBRRHElMRJVsLUAsSElEFIk0FA18DB0VXfWFoKB8fHHFKM1pXF1wDdUdGIUpNE1w= =>PUP.Optional.Browser P2 - EXT FILE: (...) -- C:\Users\hamid-hp\AppData\Roaming\Mozilla\Firefox\Profiles\ehmcmgcy.dev-edition-default\extensions\myplaycitycom@gametab.xpi P2 - EXT FILE: (...) -- C:\Users\hamid-hp\AppData\Roaming\Mozilla\Firefox\Profiles\ehmcmgcy.dev-edition-default\extensions\vb@yandex.ru.xpi P2 - EXT FILE: (...) -- C:\Users\hamid-hp\AppData\Roaming\Mozilla\Firefox\Profiles\ehmcmgcy.dev-edition-default\extensions\yasearch@yandex.ru.xpi P2 - EXT FILE: (...) -- C:\Users\hamid-hp\AppData\Roaming\Mozilla\Firefox\Profiles\ehmcmgcy.dev-edition-default\extensions\{a6499a09-8c42-4a80-ab64-5e57210da802}.xpi P2 - EXT FILE: (...) -- C:\Users\hamid-hp\AppData\Roaming\Mozilla\Firefox\Profiles\ehmcmgcy.dev-edition-default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi P2 - EXT FILE: (...) -- C:\Users\hamid-hp\AppData\Roaming\Mozilla\Firefox\Profiles\ehmcmgcy.dev-edition-default\searchplugins\DD1B66D4.xml P2 - EXT FILE: (...) -- C:\Users\hamid-hp\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\extensions\loop@mozilla.org.xpi P2 - EXT FILE: (...) -- C:\Users\hamid-hp\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\extensions\myplaycitycom@gametab.xpi P2 - EXT FILE: (...) -- C:\Users\hamid-hp\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\extensions\vb@yandex.ru.xpi P2 - EXT FILE: (...) -- C:\Users\hamid-hp\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\extensions\yasearch@yandex.ru.xpi P2 - EXT FILE: (...) -- C:\Users\hamid-hp\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\extensions\{a6499a09-8c42-4a80-ab64-5e57210da802}.xpi P2 - EXT FILE: (...) -- C:\Users\hamid-hp\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi P2 - EXT FILE: (...) -- C:\Users\hamid-hp\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\searchplugins\DD1B66D4.xml P2 - EXT FILE: (...) -- C:\Users\hamid-hp\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\searchplugins\default.xml P2 - EXT FILE: (...) -- C:\Users\hamid-hp\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\searchplugins\yahoo.xml =>PUP.Optional.BDYahoo P2 - EXT: (.Mozilla & Android Open Source Project - ADB Helper.) -- C:\Users\hamid-hp\AppData\Roaming\Mozilla\Firefox\Profiles\ehmcmgcy.dev-edition-default\extensions\adbhelper@mozilla.org P2 - EXT: (.lightningnewtab.com - FirefixTab.) -- C:\Users\hamid-hp\AppData\Roaming\Mozilla\Firefox\Profiles\ehmcmgcy.dev-edition-default\extensions\deskCutv2@gmail.com =>PUP.Optional.LightningNewTab P2 - EXT: (.V@no - Cookies Manager+.) -- C:\Users\hamid-hp\AppData\Roaming\Mozilla\Firefox\Profiles\ehmcmgcy.dev-edition-default\extensions\{bb6bc1bb-f824-4702-90cd-35e2fb24f25d} =>.V@no P2 - EXT: (.V@no - Cookies Manager+.) -- C:\Users\hamid-hp\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\extensions\{bb6bc1bb-f824-4702-90cd-35e2fb24f25d} =>.V@no P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Macromed\Flash\NPSWF32_20_0_0_306.dll =>.Adobe Systems Incorporated ---\\ Internet Explorer,Démarrage,Recherche,URLSearchHook (10) - 1s R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/ R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/ R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/ R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphean =>.Microsoft Internet Explorer R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV9 = 0 ---\\ Internet Explorer,Proxy Management (4) - 0s R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll ---\\ Internet Explorer,IniFiles, Autoloading programs (3) - 0s F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe (.Microsoft Corporation.) =>.Microsoft Corporation F2 - REG:system.ini: Shell=C:\Windows\explorer.exe (.Microsoft Corporation.) =>.Microsoft Corporation F2 - REG:system.ini: VMApplet=C:\Windows\system32\SystemPropertiesPerformance.exe (.Microsoft Corporation.) =>.Microsoft Corporation ---\\ Etude du fichier hosts (1) - 0s ~ Le fichier hôte est sain (The hosts file is clean) (21) ---\\ Browser Helper Object de navigateur (BHO) (3) - 0s O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} . (.Internet Download Manager, Tonec Inc. - IDM Browser Helper Object.) -- C:\Program Files\Internet Download Manager\IDMIECC.dll =>.Tonec Inc.® O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - IE Webrep plugin.) -- C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll =>.AVAST Software a.s.® O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} . (.Microsoft Corporation. - Extensions du client Bing.) -- C:\Program Files\Microsoft\BingBar\7.1.362.0\BingExt.dll =>.Microsoft Corporation® ---\\ Applications lancées au démarrage du système (10) - 0s O4 - HKLM\..\Run: [HPRadioMgr] . (.HP - HP Radio Manager.) -- C:\Program Files\HP\HP Wireless Button Driver\HPRadioMgr86.exe =>.Hewlett-Packard® O4 - HKLM\..\Run: [RTHDVCPL] . (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RtkNGUI.exe =>.Realtek Semiconductor Corp® O4 - HKLM\..\Run: [SynTPEnh] . (.Synaptics Incorporated - Synaptics TouchPad 32-bit Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe =>.Synaptics Incorporated® O4 - HKLM\..\Run: [NvBackend] . (.NVIDIA Corporation - NVIDIA GeForce Experience Backend.) -- C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe =>.NVIDIA Corporation® O4 - HKLM\..\Run: [ShadowPlay] . (.NVIDIA Corporation - NVIDIA Capture Server Proxy.) -- C:\Windows\System32\nvspcap.dll =>.NVIDIA Corporation O4 - HKLM\..\Run: [AvastUI.exe] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\avastui.exe =>.AVAST Software a.s.® O4 - HKCU\..\Run: [IDMan] . (.Tonec Inc. - Internet Download Manager (IDM).) -- C:\Program Files\Internet Download Manager\IDMan.exe =>.Tonec Inc.® O4 - HKCU\..\Run: [WebcamMaxAutoRun] . (...) -- e:\Program Files\WebcamMax\wcmmon.exe O4 - HKUS\S-1-5-21-2449221417-146016851-1928103234-1001\..\Run: [IDMan] . (.Tonec Inc. - Internet Download Manager (IDM).) -- C:\Program Files\Internet Download Manager\IDMan.exe =>.Tonec Inc.® O4 - HKUS\S-1-5-21-2449221417-146016851-1928103234-1001\..\Run: [WebcamMaxAutoRun] . (...) -- e:\Program Files\WebcamMax\wcmmon.exe ---\\ Raccourcis Global Startup (28) - 3s O4 - GS\Desktop [Administrateur]: Internet Download Manager.lnk . (.Tonec Inc. - Internet Download Manager (IDM).) C:\Program Files\Internet Download Manager\IDMan.exe =>.Tonec Inc.® O4 - GS\Desktop [Administrateur]: QQplayer.lnk . (.腾讯科技（深圳）有限公司 - QQ影音.) E:\Program Files\Tencent\QQPlayer\QQPlayer.exe =>.Superfluous.Tencent O4 - GS\Desktop [Administrateur]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\hamid-hp\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman O4 - GS\Desktop [Administrateur]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) C:\Users\hamid-hp\AppData\Roaming\uTorrent\uTorrent.exe =>.BitTorrent Inc® O4 - GS\Quicklaunch [Administrateur]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc® O4 - GS\Quicklaunch [Administrateur]: QQ影音.lnk . (.腾讯科技（深圳）有限公司 - QQ影音.) E:\Program Files\Tencent\QQPlayer\QQPlayer.exe =>.Superfluous.Tencent O4 - GS\Quicklaunch [Administrateur]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) C:\Users\hamid-hp\AppData\Roaming\uTorrent\uTorrent.exe =>.BitTorrent Inc® O4 - GS\TaskBar [Administrateur]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc® O4 - GS\TaskBar [Administrateur]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) C:\Users\hamid-hp\AppData\Roaming\uTorrent\uTorrent.exe =>.BitTorrent Inc® O4 - GS\Desktop [hamid-hp]: Internet Download Manager.lnk . (.Tonec Inc. - Internet Download Manager (IDM).) C:\Program Files\Internet Download Manager\IDMan.exe =>.Tonec Inc.® O4 - GS\Desktop [hamid-hp]: QQplayer.lnk . (.腾讯科技（深圳）有限公司 - QQ影音.) E:\Program Files\Tencent\QQPlayer\QQPlayer.exe =>.Superfluous.Tencent O4 - GS\Desktop [hamid-hp]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\hamid-hp\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman O4 - GS\Desktop [hamid-hp]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) C:\Users\hamid-hp\AppData\Roaming\uTorrent\uTorrent.exe =>.BitTorrent Inc® O4 - GS\Quicklaunch [hamid-hp]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc® O4 - GS\Quicklaunch [hamid-hp]: QQ影音.lnk . (.腾讯科技（深圳）有限公司 - QQ影音.) E:\Program Files\Tencent\QQPlayer\QQPlayer.exe =>.Superfluous.Tencent O4 - GS\Quicklaunch [hamid-hp]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) C:\Users\hamid-hp\AppData\Roaming\uTorrent\uTorrent.exe =>.BitTorrent Inc® O4 - GS\TaskBar [hamid-hp]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc® O4 - GS\TaskBar [hamid-hp]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) C:\Users\hamid-hp\AppData\Roaming\uTorrent\uTorrent.exe =>.BitTorrent Inc® O4 - GS\CommonDesktop [Public]: Avast Internet Security.lnk . (.AVAST Software - avast! Antivirus.) C:\Program Files\AVAST Software\Avast\avastui.exe =>.AVAST Software a.s.® O4 - GS\CommonDesktop [Public]: Avast SafeZone Browser.lnk . (.Avast Software - Avast SafeZone Browser.) C:\Program Files\AVAST Software\SZBrowser\launcher.exe =>.AVAST Software s.r.o.® O4 - GS\CommonDesktop [Public]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc® O4 - GS\CommonDesktop [Public]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) E:\Program Files\Mozilla Firefox\firefox.exe =>.Mozilla Corporation® O4 - GS\CommonDesktop [Public]: Pro Evolution Soccer 2016.lnk . (.Konami Digital Entertainment Co., Ltd. - Pro Evolution Soccer 2016.) E:\Program Files\Pro Evolution Soccer 2016\PES2016.exe =>.Konami Digital Entertainment Co., Ltd. O4 - GS\CommonDesktop [Public]: SHAREit.lnk . (.SHAREit Technologies Co.Ltd - SHAREit.) E:\Program Files\Lenovo\SHAREit\SHAREit.exe =>.LENOVO® O4 - GS\CommonDesktop [Public]: WebcamMax.lnk . (.CoolwareMax - WebcamMax.) E:\Program Files\WebcamMax\WebcamMax.exe O4 - GS\Startup [Public]: ISCTSystray.lnk . (.Intel Corporation - ISCT SysTray.) C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe =>.Intel(R) Smart Connect software® O4 - GS\Programs [Public]: Documents.lnk . (...) C:\Users\hamid-hp\Documents O4 - GS\Programs [Public]: Pictures.lnk . (...) C:\Users\hamid-hp\Pictures ---\\ Modification Domaine/Adresses DNS (2) - 1s O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 0.0.0.0 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{CE72F943-D4D2-43B9-AD6B-A5EDA31DF80E}: DhcpNameServer = 192.168.1.1 0.0.0.0 ---\\ Protocole additionnel (17) - 0s O18 - Handler: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\MSVidCtl.dll =>.Microsoft Corporation O18 - Handler: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation O18 - Handler: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation O18 - Handler: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation O18 - Handler: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation O18 - Handler: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll =>.Microsoft Corporation O18 - Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation O18 - Handler: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation O18 - Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\System32\inetcomm.dll =>.Microsoft Corporation O18 - Handler: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation O18 - Handler: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll =>.Microsoft Corporation O18 - Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\MSVidCtl.dll =>.Microsoft Corporation O18 - Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation ---\\ Logiciels installés (49) - 7s O42 - Logiciel: µTorrent - (.BitTorrent Inc..) [HKCU] -- uTorrent =>.BitTorrent Inc® O42 - Logiciel: Adobe Flash Player 20 NPAPI - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player NPAPI =>.Adobe Systems Incorporated® O42 - Logiciel: Avast Internet Security - (.AVAST Software.) [HKLM] -- Avast =>.AVAST Software a.s.® O42 - Logiciel: Bing Bar - (.Microsoft Corporation.) [HKLM] -- {16793295-2366-40F7-A045-A3E42A81365E} =>.Microsoft Corporation O42 - Logiciel: DirectX Joystick 3.1 - (.Winsoft XE.) [HKLM] -- DirectX Joystick_is1 O42 - Logiciel: Discover Treasure - (.Discover Treasure.) [HKLM] -- Discover Treasure =>PUP.Optional.DiscoverTreasure O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM] -- Google Chrome =>.Google Inc® O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {60EC980A-BDA2-4CB6-A427-B07A5498B4CA} =>.Google Inc. O42 - Logiciel: HP Support Solutions Framework - (.HP.) [HKLM] -- {C18278AC-049A-4F02-A97F-4FD7294CC4F5} =>.HP O42 - Logiciel: HP Wireless Button Driver - (.HP.) [HKLM] -- {9C84FD3B-C0F3-40DE-80E6-F8EFFEF43BC1} =>.HP O42 - Logiciel: Intel(R) Chipset Device Software - (.Intel Corporation.) [HKLM] -- {DEAD86C1-C361-4285-904F-CEAC72409B3A} =>.Intel Corporation O42 - Logiciel: Intel(R) Processor Graphics - (.Intel Corporation.) [HKLM] -- {F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA} =>.Intel Corporation - pGFX® O42 - Logiciel: Intel(R) Smart Connect Technology - (.Intel Corporation.) [HKLM] -- {5A88E342-467E-429F-887D-6E7955858DD0} =>.Intel Corporation O42 - Logiciel: Internet Download Manager - (.Tonec Inc..) [HKLM] -- Internet Download Manager =>.Tonec Inc.® O42 - Logiciel: KMSpico v9.1.0.20131125 (Beta) - (...) [HKLM] -- KMSpico_is1 =>HackTool.KMSpico O42 - Logiciel: Logiciel pour périphérique à chipset Intel® - (.Intel(R) Corporation.) [HKLM] -- {f5d71765-7cd1-4e68-998f-5b379e725da3} =>.Intel Corporation - Software and Firmware Products® O42 - Logiciel: Metric Collection SDK 35 - (.Lenovo Group Limited.) [HKLM] -- {C2B5B5B0-2545-4E94-B4BA-548D4BF0B196} =>.Lenovo Group Limited O42 - Logiciel: Mises à jour NVIDIA 16.13.21 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update =>.NVIDIA Corporation O42 - Logiciel: Mozilla Firefox 43.0.1 (x86 fr) - (.Mozilla.) [HKLM] -- Mozilla Firefox 43.0.1 (x86 fr) =>.Mozilla Corporation® O42 - Logiciel: NVIDIA GeForce Experience 2.1.2 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience =>.NVIDIA Corporation O42 - Logiciel: NVIDIA Install Application - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer =>.NVIDIA Corporation O42 - Logiciel: NVIDIA LED Visualizer 1.0 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.LEDVisualizer =>.NVIDIA Corporation O42 - Logiciel: NVIDIA Logiciel système PhysX 9.14.0702 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX =>.NVIDIA Corporation O42 - Logiciel: NVIDIA Network Service - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Network.Service =>.NVIDIA Corporation O42 - Logiciel: NVIDIA Optimus Update 16.13.21 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Optimus =>.NVIDIA Corporation O42 - Logiciel: NVIDIA PhysX - (.NVIDIA Corporation.) [HKLM] -- {B455E95A-B804-439F-B533-336B1635AE97} =>.NVIDIA Corporation O42 - Logiciel: NVIDIA Pilote graphique 344.24 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver =>.NVIDIA Corporation O42 - Logiciel: NVIDIA ShadowPlay 16.13.21 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_ShadowPlay =>.NVIDIA Corporation O42 - Logiciel: NVIDIA Update Core - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Update.Core =>.NVIDIA Corporation O42 - Logiciel: NVIDIA Virtual Audio 1.2.25 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_VirtualAudio.Driver =>.NVIDIA Corporation O42 - Logiciel: Panneau de configuration NVIDIA 344.24 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel =>.NVIDIA Corporation O42 - Logiciel: Pro Evolution Soccer 2016 - (...) [HKLM] -- UHJvRXZvbHV0aW9uU29jY2VyMjAxNg==_is1 O42 - Logiciel: QQ影音3.9 - (.腾讯科技（深圳）有限公司.) [HKCU] -- QQPlayer O42 - Logiciel: REALTEK Bluetooth Driver - (.REALTEK Semiconductor Corp..) [HKLM] -- {9D3D8C60-A5EF-4123-B2B9-172095903AB} =>.Realtek Semiconductor Corp® O42 - Logiciel: Realtek Card Reader - (.Realtek Semiconductor Corp..) [HKLM] -- {5BC2B5AB-80DE-4E83-B8CF-426902051D0A} =>.Realtek Semiconductor Corp® O42 - Logiciel: Realtek Ethernet Controller Driver - (.Realtek.) [HKLM] -- {8833FFB6-5B0C-4764-81AA-06DFEED9A476} =>.Realtek Semiconductor Corp® O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC} =>.Realtek Semiconductor Corp. O42 - Logiciel: REALTEK Wireless LAN Driver - (.REALTEK Semiconductor Corp..) [HKLM] -- {A5107464-AA9B-4177-8129-5FF2F42DD322} =>.Realtek Semiconductor Corp® O42 - Logiciel: REALTEK Wireless LAN Driver - (.REALTEK Semiconductor Corp..) [HKLM] -- {D4EEC21C-04F0-4CF4-8078-82C11E38EF11} =>.Realtek Semiconductor Corp® O42 - Logiciel: SafeZone Stable 1.48.2066.44 - (.Avast Software.) [HKLM] -- SafeZone 1.48.2066.44 =>.AVAST Software s.r.o.® O42 - Logiciel: SHAREit - (.Lenovo.) [HKLM] -- SHAREit_is1 =>.Lenovo O42 - Logiciel: SHIELD Streaming - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.NvStreamSrv =>.NVIDIA Corporation O42 - Logiciel: SprgFiles - (.https://www.www.springfile.biz.) [HKCU] -- SprgFiles =>.Superfluous.SpringFiles O42 - Logiciel: Synaptics ClickPad Driver - (.Synaptics Incorporated.) [HKLM] -- SynTPDeinstKey =>.Synaptics Incorporated O42 - Logiciel: TAP-Windows 9.9.2 - (...) [HKLM] -- TAP-Windows O42 - Logiciel: WebcamMax - (.COOLWAREMAX.) [HKLM] -- WebcamMax O42 - Logiciel: WinRAR 5.10 beta 3 (32-bit) - (.win.rar GmbH.) [HKLM] -- WinRAR archiver =>.win.rar GmbH® O42 - Logiciel: yessearches Uninstall - (...) [HKLM] -- Uninstall wak =>PUP.Optional.YesSearches O42 - Logiciel: yoursearching - (...) [HKLM] -- yoursearching =>PUP.Optional.YourSearching ---\\ HKCU & HKLM Software Keys (83) - 7s HKLM\SOFTWARE\AGEIA Technologies HKLM\SOFTWARE\AVAST Software HKLM\SOFTWARE\CoreCodec HKLM\SOFTWARE\CyberLink HKLM\SOFTWARE\DiscoverTreasure =>PUP.Optional.DiscoverTreasure HKLM\SOFTWARE\Dropbox HKLM\SOFTWARE\DropboxUpdate HKLM\SOFTWARE\drpsu HKLM\SOFTWARE\GN2 HKLM\SOFTWARE\Google HKLM\SOFTWARE\Hewlett-Packard HKLM\SOFTWARE\ihpmserver =>PUP.Optional.CrossRider HKLM\SOFTWARE\InstalledOptions HKLM\SOFTWARE\Intel HKLM\SOFTWARE\Internet Download Manager HKLM\SOFTWARE\Khronos HKLM\SOFTWARE\Lenovo HKLM\SOFTWARE\Macromedia HKLM\SOFTWARE\Mozilla HKLM\SOFTWARE\mozilla.org HKLM\SOFTWARE\MozillaPlugins HKLM\SOFTWARE\Nuance HKLM\SOFTWARE\NVIDIA Corporation HKLM\SOFTWARE\ODBC HKLM\SOFTWARE\RayDld =>PUP.Optional.CrossRider HKLM\SOFTWARE\Realtek HKLM\SOFTWARE\Realtek Semiconductor Corp. HKLM\SOFTWARE\RegisteredApplications HKLM\SOFTWARE\RTLSetup HKLM\SOFTWARE\RtWLan HKLM\SOFTWARE\SHAREit HKLM\SOFTWARE\SonicFocus HKLM\SOFTWARE\SoundResearch HKLM\SOFTWARE\SprgFiles =>.Superfluous.SpringFiles HKLM\SOFTWARE\SRS Labs HKLM\SOFTWARE\Synaptics HKLM\SOFTWARE\TAP-Windows HKLM\SOFTWARE\Tencent =>.Superfluous.Tencent HKLM\SOFTWARE\Volatile HKLM\SOFTWARE\WebcamMax HKLM\SOFTWARE\WinRAR HKLM\SOFTWARE\WoW6432Node HKLM\SOFTWARE\yessearchesSoftware =>PUP.Optional.YesSearches HKCU\SOFTWARE\AppDataLow HKCU\SOFTWARE\AVAST Software HKCU\SOFTWARE\BcmSetup HKCU\SOFTWARE\BitTorrent HKCU\SOFTWARE\BoaSoftware HKCU\SOFTWARE\Borland HKCU\SOFTWARE\Camfrog HKCU\SOFTWARE\CodeGear HKCU\SOFTWARE\CoreAAC HKCU\SOFTWARE\CyberLink HKCU\SOFTWARE\DownloadManager HKCU\SOFTWARE\Dropbox HKCU\SOFTWARE\DropboxUpdate HKCU\SOFTWARE\drpsu HKCU\SOFTWARE\Embarcadero HKCU\SOFTWARE\Gabest HKCU\SOFTWARE\GN2 HKCU\SOFTWARE\Google HKCU\SOFTWARE\Hewlett-Packard HKCU\SOFTWARE\Intel HKCU\SOFTWARE\Lenovo HKCU\SOFTWARE\Macromedia HKCU\SOFTWARE\Mine HKCU\SOFTWARE\Mozilla HKCU\SOFTWARE\MozillaPlugins HKCU\SOFTWARE\NVIDIA Corporation HKCU\SOFTWARE\Realtek HKCU\SOFTWARE\RegisteredApplications HKCU\SOFTWARE\SHAREit HKCU\SOFTWARE\SprgFiles =>.Superfluous.SpringFiles HKCU\SOFTWARE\Synaptics HKCU\SOFTWARE\Temporary HKCU\SOFTWARE\Tencent =>.Superfluous.Tencent HKCU\SOFTWARE\undefined =>.Superfluous.Downloader HKCU\SOFTWARE\VB and VBA Program Settings HKCU\SOFTWARE\WinRAR HKCU\SOFTWARE\WinRAR SFX HKCU\SOFTWARE\Yahoo =>.Yahoo! HKCU\SOFTWARE\ZebHelpProcess Helper HKCU\SOFTWARE\AppDataLow\Software ---\\ Contenu des dossiers Programmes (147) - 21s O43 - CFD: 15/02/2016 - [0] D -- C:\Program Files\AGEIA Technologies O43 - CFD: 15/02/2016 - [] D -- C:\Program Files\AVAST Software =>.AVAST Software s.r.o.® O43 - CFD: 22/02/2016 - [] D -- C:\Program Files\Common Files O43 - CFD: 03/03/2016 - [] D -- C:\Program Files\Discover Treasure =>PUP.Optional.DiscoverTreasure O43 - CFD: 22/02/2016 - [] D -- C:\Program Files\Dropbox O43 - CFD: 15/02/2016 - [0] SHD -- C:\Program Files\Fichiers communs O43 - CFD: 07/03/2016 - [] D -- C:\Program Files\Google =>.Google Inc® O43 - CFD: 15/02/2016 - [] D -- C:\Program Files\Hewlett-Packard =>.Hewlett-Packard Company® O43 - CFD: 15/02/2016 - [] D -- C:\Program Files\HP =>.Hewlett-Packard® O43 - CFD: 22/02/2016 - [] HD -- C:\Program Files\InstallShield Installation Information =>.Macrovision Corporation® O43 - CFD: 15/02/2016 - [] D -- C:\Program Files\Intel =>.Intel(R) Smart Connect software® O43 - CFD: 15/02/2016 - [] D -- C:\Program Files\Internet Download Manager =>.Tonec Inc.® O43 - CFD: 21/02/2016 - [] D -- C:\Program Files\Internet Explorer O43 - CFD: 15/02/2016 - [] D -- C:\Program Files\KMSpico =>HackTool.KMSpico O43 - CFD: 16/02/2016 - [0] D -- C:\Program Files\Lenovo O43 - CFD: 24/02/2016 - [] D -- C:\Program Files\Microsoft =>.Microsoft Corporation® O43 - CFD: 22/08/2013 - [] D -- C:\Program Files\Microsoft.NET O43 - CFD: 15/02/2016 - [] D -- C:\Program Files\NVIDIA Corporation =>.NVIDIA Corporation® O43 - CFD: 22/02/2016 - [] D -- C:\Program Files\RayDld =>PUP.Optional.CrossRider O43 - CFD: 15/02/2016 - [] D -- C:\Program Files\Realtek =>.Realtek Semiconductor Corp® O43 - CFD: 18/02/2016 - [] D -- C:\Program Files\REALTEK RTL8187SE Wireless LAN Driver O43 - CFD: 21/02/2016 - [] D -- C:\Program Files\SearchesToYesbnd =>PUP.Optional.YesSearches O43 - CFD: 22/02/2016 - [] D -- C:\Program Files\SprgFiles =>.Superfluous.SpringFiles O43 - CFD: 15/02/2016 - [] D -- C:\Program Files\Synaptics =>.Synaptics Incorporated® O43 - CFD: 15/02/2016 - [] D -- C:\Program Files\TAP-Windows O43 - CFD: 15/02/2016 - [0] HD -- C:\Program Files\Temp O43 - CFD: 15/02/2016 - [] D -- C:\Program Files\Tencent =>.Superfluous.Tencent O43 - CFD: 22/08/2013 - [0] HD -- C:\Program Files\Uninstall Information O43 - CFD: 14/11/2015 - [] D -- C:\Program Files\Update Services O43 - CFD: 22/02/2016 - [] D -- C:\Program Files\USB Vibration =>.InstallShield Software Corporation® O43 - CFD: 14/11/2015 - [] D -- C:\Program Files\Windows Defender =>.Microsoft Corporation® O43 - CFD: 21/02/2016 - [] D -- C:\Program Files\Windows Journal O43 - CFD: 14/11/2015 - [] D -- C:\Program Files\Windows Mail O43 - CFD: 14/11/2015 - [] D -- C:\Program Files\Windows Media Player O43 - CFD: 14/11/2015 - [] D -- C:\Program Files\Windows Multimedia Platform O43 - CFD: 15/02/2016 - [] D -- C:\Program Files\Windows NT O43 - CFD: 14/11/2015 - [] D -- C:\Program Files\Windows Photo Viewer =>.Microsoft Corporation® O43 - CFD: 14/11/2015 - [] D -- C:\Program Files\Windows Portable Devices O43 - CFD: 22/08/2013 - [] SHD -- C:\Program Files\Windows Sidebar O43 - CFD: 18/02/2016 - [] HD -- C:\Program Files\WindowsApps O43 - CFD: 14/11/2015 - [] D -- C:\Program Files\WindowsPowerShell O43 - CFD: 15/02/2016 - [] D -- C:\Program Files\WinRAR =>.win.rar GmbH® O43 - CFD: 21/02/2016 - [] D -- C:\Program Files\Winsere =>PUP.Optional.YesSearches O43 - CFD: 22/02/2016 - [] D -- C:\Program Files\Winsoft O43 - CFD: 21/02/2016 - [] D -- C:\Program Files\WinTaske =>PUP.Optional.YesSearches O43 - CFD: 14/11/2015 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility O43 - CFD: 14/11/2015 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories O43 - CFD: 21/02/2016 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools O43 - CFD: 15/02/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software O43 - CFD: 22/02/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DirectX Joystick O43 - CFD: 07/03/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel O43 - CFD: 15/02/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Download Manager O43 - CFD: 15/02/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KMSpico =>HackTool.KMSpico O43 - CFD: 16/02/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LenovoSHAREit O43 - CFD: 22/08/2013 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance O43 - CFD: 15/02/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Music, Photos and Videos O43 - CFD: 15/02/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation O43 - CFD: 07/03/2016 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp O43 - CFD: 14/11/2015 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools O43 - CFD: 30/09/2013 - [0] RHD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC O43 - CFD: 20/02/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WebcamMax O43 - CFD: 15/02/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR O43 - CFD: 08/03/2016 - [] D -- C:\ProgramData\4f596ec3-77fb-4fc3-82cb-691c42c71d77 O43 - CFD: 22/08/2013 - [0] SHD -- C:\ProgramData\Application Data O43 - CFD: 15/02/2016 - [] D -- C:\ProgramData\AVAST Software O43 - CFD: 15/02/2016 - [0] SHD -- C:\ProgramData\Bureau O43 - CFD: 22/08/2013 - [0] SHD -- C:\ProgramData\Desktop O43 - CFD: 22/08/2013 - [0] SHD -- C:\ProgramData\Documents O43 - CFD: 22/02/2016 - [] D -- C:\ProgramData\Dropbox O43 - CFD: 15/02/2016 - [] D -- C:\ProgramData\HP O43 - CFD: 15/02/2016 - [0] D -- C:\ProgramData\IDM O43 - CFD: 15/02/2016 - [] D -- C:\ProgramData\Intel O43 - CFD: 22/02/2016 - [] D -- C:\ProgramData\KONAMI O43 - CFD: 16/02/2016 - [] D -- C:\ProgramData\Lenovo O43 - CFD: 15/02/2016 - [0] SHD -- C:\ProgramData\Menu Démarrer O43 - CFD: 24/02/2016 - [] SD -- C:\ProgramData\Microsoft O43 - CFD: 15/02/2016 - [] D -- C:\ProgramData\Microsoft Toolkit =>HackTool.AutoKMS O43 - CFD: 15/02/2016 - [0] SHD -- C:\ProgramData\Modèles O43 - CFD: 15/02/2016 - [] D -- C:\ProgramData\NVIDIA O43 - CFD: 15/02/2016 - [] D -- C:\ProgramData\NVIDIA Corporation O43 - CFD: 15/02/2016 - [] D -- C:\ProgramData\Package Cache O43 - CFD: 07/03/2016 - [] D -- C:\ProgramData\Realtek O43 - CFD: 14/11/2015 - [] D -- C:\ProgramData\regid.1991-06.com.microsoft O43 - CFD: 22/08/2013 - [0] SHD -- C:\ProgramData\Start Menu O43 - CFD: 22/02/2016 - [] D -- C:\ProgramData\Steam O43 - CFD: 15/02/2016 - [] D -- C:\ProgramData\Synaptics O43 - CFD: 22/08/2013 - [0] SHD -- C:\ProgramData\Templates O43 - CFD: 15/02/2016 - [] D -- C:\ProgramData\Tencent =>.Superfluous.Tencent O43 - CFD: 21/02/2016 - [] D -- C:\ProgramData\WebcamMax O43 - CFD: 08/03/2016 - [] D -- C:\Program Files\Common Files\4f596ec3-77fb-4fc3-82cb-691c42c71d77 O43 - CFD: 15/02/2016 - [] D -- C:\Program Files\Common Files\AV O43 - CFD: 15/02/2016 - [] D -- C:\Program Files\Common Files\InstallShield O43 - CFD: 15/02/2016 - [] D -- C:\Program Files\Common Files\Intel O43 - CFD: 15/02/2016 - [] D -- C:\Program Files\Common Files\LENOVO O43 - CFD: 15/02/2016 - [] D -- C:\Program Files\Common Files\microsoft shared O43 - CFD: 22/08/2013 - [] D -- C:\Program Files\Common Files\Services O43 - CFD: 14/11/2015 - [] D -- C:\Program Files\Common Files\System O43 - CFD: 15/02/2016 - [] D -- C:\Program Files\Common Files\Tencent =>.Superfluous.Tencent O43 - CFD: 15/02/2016 - [] D -- C:\Users\hamid-hp\AppData\Roaming\Adobe O43 - CFD: 15/02/2016 - [] D -- C:\Users\hamid-hp\AppData\Roaming\AVAST Software O43 - CFD: 08/03/2016 - [] D -- C:\Users\hamid-hp\AppData\Roaming\DMCache O43 - CFD: 22/02/2016 - [] D -- C:\Users\hamid-hp\AppData\Roaming\Dropbox O43 - CFD: 22/02/2016 - [] D -- C:\Users\hamid-hp\AppData\Roaming\DRPSu O43 - CFD: 07/03/2016 - [] D -- C:\Users\hamid-hp\AppData\Roaming\IDM O43 - CFD: 15/02/2016 - [] D -- C:\Users\hamid-hp\AppData\Roaming\Macromedia O43 - CFD: 15/02/2016 - [] SD -- C:\Users\hamid-hp\AppData\Roaming\Microsoft O43 - CFD: 15/02/2016 - [] D -- C:\Users\hamid-hp\AppData\Roaming\Mozilla O43 - CFD: 22/02/2016 - [0] D -- C:\Users\hamid-hp\AppData\Roaming\SpringFiles =>.Superfluous.SpringFiles O43 - CFD: 15/02/2016 - [] D -- C:\Users\hamid-hp\AppData\Roaming\Synaptics O43 - CFD: 15/02/2016 - [] D -- C:\Users\hamid-hp\AppData\Roaming\Tencent =>.Superfluous.Tencent O43 - CFD: 05/03/2016 - [] D -- C:\Users\hamid-hp\AppData\Roaming\uTorrent O43 - CFD: 20/02/2016 - [] D -- C:\Users\hamid-hp\AppData\Roaming\WebcamMax O43 - CFD: 15/02/2016 - [] D -- C:\Users\hamid-hp\AppData\Roaming\WinRAR O43 - CFD: 22/02/2016 - [] D -- C:\Users\hamid-hp\AppData\Roaming\yoursearching =>PUP.Optional.YourSearching O43 - CFD: 08/03/2016 - [] D -- C:\Users\hamid-hp\AppData\Roaming\ZHP O43 - CFD: 21/02/2016 - [0] D -- C:\Users\hamid-hp\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108 O43 - CFD: 15/02/2016 - [0] D -- C:\Users\hamid-hp\AppData\Local\Adobe O43 - CFD: 15/02/2016 - [0] SHD -- C:\Users\hamid-hp\AppData\Local\Application Data O43 - CFD: 08/03/2016 - [] D -- C:\Users\hamid-hp\AppData\Local\CrashDumps O43 - CFD: 22/02/2016 - [] D -- C:\Users\hamid-hp\AppData\Local\Dropbox O43 - CFD: 21/02/2016 - [0] D -- C:\Users\hamid-hp\AppData\Local\F727A298-4DB4-456A-AC54-A93EA5F8554D O43 - CFD: 07/03/2016 - [] D -- C:\Users\hamid-hp\AppData\Local\Google O43 - CFD: 15/02/2016 - [] D -- C:\Users\hamid-hp\AppData\Local\GWX O43 - CFD: 15/02/2016 - [] D -- C:\Users\hamid-hp\AppData\Local\Hewlett-Packard O43 - CFD: 15/02/2016 - [0] SHD -- C:\Users\hamid-hp\AppData\Local\Historique O43 - CFD: 15/02/2016 - [] D -- C:\Users\hamid-hp\AppData\Local\Intel_Corporation O43 - CFD: 15/02/2016 - [] D -- C:\Users\hamid-hp\AppData\Local\Lenovo O43 - CFD: 15/02/2016 - [] D -- C:\Users\hamid-hp\AppData\Local\Macromedia O43 - CFD: 25/02/2016 - [] D -- C:\Users\hamid-hp\AppData\Local\Microsoft O43 - CFD: 15/02/2016 - [] D -- C:\Users\hamid-hp\AppData\Local\Mozilla O43 - CFD: 15/02/2016 - [] D -- C:\Users\hamid-hp\AppData\Local\NVIDIA O43 - CFD: 15/02/2016 - [] D -- C:\Users\hamid-hp\AppData\Local\NVIDIA Corporation O43 - CFD: 18/02/2016 - [] D -- C:\Users\hamid-hp\AppData\Local\Packages O43 - CFD: 15/02/2016 - [] D -- C:\Users\hamid-hp\AppData\Local\Programs O43 - CFD: 16/02/2016 - [] D -- C:\Users\hamid-hp\AppData\Local\SHAREit O43 - CFD: 08/03/2016 - [] D -- C:\Users\hamid-hp\AppData\Local\Temp O43 - CFD: 15/02/2016 - [0] SHD -- C:\Users\hamid-hp\AppData\Local\Temporary Internet Files O43 - CFD: 15/02/2016 - [] D -- C:\Users\hamid-hp\AppData\Local\VirtualStore O43 - CFD: 14/11/2015 - [] RD -- C:\Users\hamid-hp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility O43 - CFD: 14/11/2015 - [] RD -- C:\Users\hamid-hp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories O43 - CFD: 21/02/2016 - [] RD -- C:\Users\hamid-hp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools O43 - CFD: 15/02/2016 - [] D -- C:\Users\hamid-hp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Download Manager O43 - CFD: 22/08/2013 - [] D -- C:\Users\hamid-hp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance O43 - CFD: 21/02/2016 - [] RD -- C:\Users\hamid-hp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup O43 - CFD: 14/11/2015 - [] RD -- C:\Users\hamid-hp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools O43 - CFD: 15/02/2016 - [] D -- C:\Users\hamid-hp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR O43 - CFD: 15/02/2016 - [] D -- C:\Users\hamid-hp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\腾讯软件 ---\\ Derniers fichiers créés dans Windows Prefetcher (12) - 30s O45 - LFCP:[MD5.CDDDFD846A7D213A5111CCEFEB1DCB48] 15/02/2016 A -- C:\Windows\Prefetch\AUTOPICO.EXE-EB7BC268.pf =>HackTool.KMSpico O45 - LFCP:[MD5.05AF3B4C621FBD66BA4608B3F22A93EE] 07/03/2016 A -- C:\Windows\Prefetch\IHPMSERVER.EXE-A2B90EFF.pf =>PUP.Optional.CrossRider O45 - LFCP:[MD5.9AEB2B28B9C69F46108CF382BBFFA2E5] 15/02/2016 A -- C:\Windows\Prefetch\KMSPICO_SETUP.EXE-7C5C1952.pf =>HackTool.KMSpico O45 - LFCP:[MD5.80ACBE26636624745FB99E52EEFE989F] 15/02/2016 A -- C:\Windows\Prefetch\KMSPICO_SETUP.TMP-172D151C.pf =>HackTool.KMSpico O45 - LFCP:[MD5.AC449F4673E9985C243AD87B8DB406E5] 27/02/2016 A -- C:\Windows\Prefetch\SPRGFILES.EXE-2A72404C.pf =>.Superfluous.SpringFiles O45 - LFCP:[MD5.3A63BFE992640F50919457AB118FAA92] 08/03/2016 A -- C:\Windows\Prefetch\TENCENTDL.EXE-16388A16.pf =>.Superfluous.Tencent O45 - LFCP:[MD5.9D13AAA0928F4C60999CB525A00FBCDC] 15/02/2016 A -- C:\Windows\Prefetch\TENCENTDL.EXE-5843037A.pf =>.Superfluous.Tencent O45 - LFCP:[MD5.CA7B58FB9A4567090EA6DDA2F1196486] 15/02/2016 A -- C:\Windows\Prefetch\TENCENTDL.EXE-59FBAB04.pf =>.Superfluous.Tencent O45 - LFCP:[MD5.08D127746FDF1027DFC21B47CC2CC594] 15/02/2016 A -- C:\Windows\Prefetch\TENCENTDL.EXE-674F7764.pf =>.Superfluous.Tencent O45 - LFCP:[MD5.A3CCDB232AA329B66E8A41A3E6D9B0E9] 21/02/2016 A -- C:\Windows\Prefetch\WINSERE.EXE-43D9B3D5.pf =>PUP.Optional.YesSearches O45 - LFCP:[MD5.410682C0B342EA9301405E5076591E2A] 21/02/2016 A -- C:\Windows\Prefetch\WINSERE.EXE-4AA701C5.pf =>PUP.Optional.YesSearches O45 - LFCP:[MD5.FB7166136293F38C706C4077B634B7F5] 21/02/2016 A -- C:\Windows\Prefetch\WINTASKE.EXE-A514EDAA.pf =>PUP.Optional.YesSearches ---\\ ShellIconOverlayIdentifiers (SIOI) (4) - 0s O106 - SIOI: IDM Shell Extension [ IDM Shell Extension] - {CDC95B92-E27C-4745-A8C5-64A52A78855D}. (.Tonec Inc. - Internet Download Manager module.) -- C:\Program Files\Internet Download Manager\IDMShellExt.dll =>.Tonec Inc.® O106 - SIOI: avast [00avast] - {472083B0-C522-11CF-8763-00608CC02F24}. (.AVAST Software - avast! Shell Extension.) -- C:\Program Files\AVAST Software\Avast\ashShell.dll =>.AVAST Software a.s.® O106 - SIOI: Enhanced Storage Icon Overlay Handler Class [EnhancedStorageShell] - {D9144DCD-E998-4ECA-AB6A-DCD83CCBA16D}. (.Microsoft Corporation - DLL d’extension d’environnement de stockage.) -- C:\Windows\System32\EhStorShell.dll =>.Microsoft Corporation O106 - SIOI: [Offline Files] - {4E77131D-3629-431c-9818-C5679DC83E81}. (.Microsoft Corporation - IU de cache côté client.) -- C:\Windows\System32\cscui.dll =>.Microsoft Corporation ---\\ Liste des pilotes du système (67) - 6s O58 - SDL:2013/08/22 06:33:26 A . (.LSI - LSI 3ware SCSI Storport Driver.) -- C:\Windows\System32\drivers\3ware.sys [86368] =>.Microsoft Windows® O58 - SDL:2015/01/27 08:08:44 A . (.Hewlett-Packard - HP Accelerometer.) -- C:\Windows\System32\drivers\Accelerometer.sys [38024] =>.Hewlett-Packard Company® O58 - SDL:2013/08/22 06:33:25 A . (.PMC-Sierra - PMC-Sierra Storport Driver For SPC8x6G SAS.) -- C:\Windows\System32\drivers\adp80xx.sys [773472] =>.Microsoft Windows® O58 - SDL:2013/08/22 06:33:25 A . (.Advanced Micro Devices - AHCI 1.3 Device Driver.) -- C:\Windows\System32\drivers\amdsata.sys [72544] =>.Microsoft Windows® O58 - SDL:2013/08/22 06:33:26 A . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller D.) -- C:\Windows\System32\drivers\amdsbs.sys [215392] =>.Microsoft Windows® O58 - SDL:2013/08/22 06:33:24 A . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\Windows\System32\drivers\amdxata.sys [22880] =>.Microsoft Windows® O58 - SDL:2013/08/22 06:33:26 A . (.PMC-Sierra, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\System32\drivers\arcsas.sys [101728] =>.Microsoft Windows® O58 - SDL:2016/02/15 01:54:54 A . (.AVAST Software - avast! HWID.) -- C:\Windows\System32\drivers\aswHwid.sys [32792] =>.AVAST Software a.s.® O58 - SDL:2016/02/15 12:03:45 A . (.AVAST Software - avast! Keyboard Filter Driver.) -- C:\Windows\System32\drivers\aswKbd.sys [35096] =>.AVAST Software a.s.® O58 - SDL:2016/02/15 01:54:54 A . (.AVAST Software - avast! File System Minifilter for Windows 2.) -- C:\Windows\System32\drivers\aswMonFlt.sys [91168] =>.AVAST Software a.s.® O58 - SDL:2016/02/23 22:51:49 A . (.AVAST Software - avast! Firewall Driver.) -- C:\Windows\System32\drivers\aswnetsec.sys [356640] =>.AVAST Software a.s.® O58 - SDL:2016/02/15 01:54:54 A . (.AVAST Software - avast! WFP Redirect Driver.) -- C:\Windows\System32\drivers\aswRdr2.sys [91232] =>.AVAST Software a.s.® O58 - SDL:2016/02/15 01:54:55 A . (.AVAST Software - avast! Revert.) -- C:\Windows\System32\drivers\aswRvrt.sys [58776] =>.AVAST Software a.s.® O58 - SDL:2016/02/15 01:54:49 A . (.AVAST Software - avast! Virtualization Driver.) -- C:\Windows\System32\drivers\aswSnx.sys [812720] =>.AVAST Software a.s.® O58 - SDL:2016/02/23 22:51:54 A . (.AVAST Software - avast! self protection module.) -- C:\Windows\System32\drivers\aswsp.sys [447848] =>.AVAST Software a.s.® O58 - SDL:2016/02/15 01:54:55 A . (.AVAST Software - Stream Filter.) -- C:\Windows\System32\drivers\aswStm.sys [127432] =>.AVAST Software a.s.® O58 - SDL:2016/02/15 01:58:45 A . (.AVAST Software - avast! VM Monitor.) -- C:\Windows\System32\drivers\aswVmm.sys [221240] =>.AVAST Software a.s.® O58 - SDL:2013/08/13 00:25:32 A . (.Windows (R) Win 7 DDK provider - BCM Function 2 Device Driver.) -- C:\Windows\System32\drivers\bcmfn2.sys [16088] =>.Broadcom Corporation® O58 - SDL:2015/01/27 08:10:26 A . (.Hewlett-Packard - HP Disk Filter - SATA/RAID.) -- C:\Windows\System32\drivers\hpdskflt.sys [27784] =>.Hewlett-Packard Company® O58 - SDL:2013/08/22 06:33:29 A . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Drive.) -- C:\Windows\System32\drivers\HpSAMD.sys [56672] =>.Microsoft Windows® O58 - SDL:2013/07/23 22:18:30 A . (.Intel Corporation - Intel(R) Atom(TM) Processor GPIO Controller.) -- C:\Windows\System32\drivers\iaiogpio.sys [22016] =>.Intel Corporation O58 - SDL:2013/07/23 22:18:30 A . (.Intel Corporation - Intel(R) Atom(TM) Processor I2C Controller.) -- C:\Windows\System32\drivers\iaioi2c.sys [61936] =>.Intel Corporation O58 - SDL:2013/08/10 01:39:44 A . (.Intel Corporation - Intel Rapid Storage Technology driver (inbo.) -- C:\Windows\System32\drivers\iaStorAV.sys [524784] =>.Intel Corporation - Intel® Rapid Storage Technology® O58 - SDL:2013/08/22 06:33:29 A . (.Intel Corporation - Intel Matrix Storage Manager driver - ia32.) -- C:\Windows\System32\drivers\iaStorV.sys [333664] =>.Microsoft Windows® O58 - SDL:2016/01/28 10:20:10 A . (.Tonec Inc. - Internet Download Manager WFP Driver.) -- C:\Windows\System32\drivers\idmwfp.sys [134248] =>.Tonec Inc.® O58 - SDL:2015/08/09 04:50:40 A . (.Intel Corporation - Intel Graphics Kernel Mode Driver.) -- C:\Windows\System32\drivers\igdkmd32.sys [4124432] =>.Intel Corporation - pGFX® O58 - SDL:2013/08/13 16:02:10 A . (.Copyright (C) 2011 - 2013 Intel Corporation - Intel Keyboard Class Upper Filter Driver.) -- C:\Windows\System32\drivers\ikbevent.sys [19360] =>.Intel(R) Smart Connect software® O58 - SDL:2013/08/13 16:02:12 A . (.Copyright (C) 2011 - 2013 Intel Corporation - Intel Mouse Class Upper Filter Driver.) -- C:\Windows\System32\drivers\imsevent.sys [19360] =>.Intel(R) Smart Connect software® O58 - SDL:2013/08/13 16:02:10 A . (...) -- C:\Windows\System32\drivers\INETMON.sys [25504] =>.Intel(R) Smart Connect software® O58 - SDL:2015/05/26 17:20:28 A . (.Intel Corporation - Intel® WiDi Solution.) -- C:\Windows\System32\drivers\intelaud.sys [36656] =>.Intel(R) Wireless Display® O58 - SDL:2013/08/13 16:02:12 A . (.Copyright (C) 2011-2012 - Intel(R) Smart Connect Technology Device Dr.) -- C:\Windows\System32\drivers\ISCTD.sys [40936] =>.Intel(R) Smart Connect software® O58 - SDL:2015/05/26 17:20:28 A . (.Intel Corporation - Intel® WiDi Solution.) -- C:\Windows\System32\drivers\iwdbus.sys [27496] =>.Intel(R) Wireless Display® O58 - SDL:2013/08/22 06:33:29 A . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas.sys [94048] =>.Microsoft Windows® O58 - SDL:2013/08/22 06:33:30 A . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas2.sys [79712] =>.Microsoft Windows® O58 - SDL:2013/08/22 06:33:30 A . (.LSI Corporation - LSI SAS Gen3 Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas3.sys [68960] =>.Microsoft Windows® O58 - SDL:2013/08/22 06:33:29 A . (.LSI Corporation - LSI SSS PCIe/Flash Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sss.sys [69472] =>.Microsoft Windows® O58 - SDL:2013/08/22 06:33:30 A . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows.) -- C:\Windows\System32\drivers\megasas.sys [51552] =>.Microsoft Windows® O58 - SDL:2013/08/22 06:33:29 A . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\System32\drivers\megasr.sys [464736] =>.Microsoft Windows® O58 - SDL:2013/08/22 06:33:32 A . (.Marvell Semiconductor, Inc. - Marvell Flash Controller Driver.) -- C:\Windows\System32\drivers\mvumis.sys [58208] =>.Microsoft Windows® O58 - SDL:2014/09/26 22:25:18 A . (.NVIDIA Corporation - NVIDIA Windows Kernel Mode Driver, Version.) -- C:\Windows\System32\drivers\nvlddmkm.sys [10885320] =>.NVIDIA Corporation® O58 - SDL:2013/08/22 06:33:32 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\System32\drivers\nvraid.sys [120160] =>.Microsoft Windows® O58 - SDL:2013/08/22 06:33:33 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\System32\drivers\nvstor.sys [141664] =>.Microsoft Windows® O58 - SDL:2014/09/04 12:14:38 A . (.NVIDIA Corporation - NVIDIA Virtual Audio Driver.) -- C:\Windows\System32\drivers\nvvad32v.sys [32928] =>.Nvidia Corporation® O58 - SDL:2014/05/08 19:26:14 A . (.Realtek - Realtek 8101E/8168/8169 NDIS 6.30 32-bit Dr.) -- C:\Windows\System32\drivers\Rt630x86.sys [730328] =>.Realtek Semiconductor Corp® O58 - SDL:2015/06/02 06:55:36 A . (.Realtek Semiconductor Corporation - Realtek Bluetooth Filter Driver.) -- C:\Windows\System32\drivers\RtkBtfilter.sys [525568] =>.Realtek Semiconductor Corp® O58 - SDL:2014/10/06 19:58:34 A . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function D.) -- C:\Windows\System32\drivers\RTKVHDA.sys [3318744] =>.Realtek Semiconductor Corp® O58 - SDL:2009/10/28 14:00:00 A . (.Realtek Semiconductor Corporation - Realtek RTL8187S PCIE NDIS Driverr.) -- C:\Windows\System32\drivers\rtl8187Se.sys [344576] =>.Realtek Semiconductor Corporation O58 - SDL:2014/07/05 13:38:06 A . (.Realtek Semiconductor Corp. - Realtek Pcie CardReader Driver for 2K/XP/Vi.) -- C:\Windows\System32\drivers\RtsBaStor.sys [235736] =>.Realtek Semiconductor Corp® O58 - SDL:2014/07/04 16:55:56 A . (.Realtek Semiconductor Corp. - Realtek Pcie CardReader Driver for 2K/XP/Vi.) -- C:\Windows\System32\drivers\RtsP2Stor.sys [221912] =>.Realtek Semiconductor Corp® O58 - SDL:2014/06/20 10:12:20 A . (.Realsil Semiconductor Corporation - RTS PCIE READER Driver.) -- C:\Windows\System32\drivers\RtsPer.sys [387800] =>.Realtek Semiconductor Corp® O58 - SDL:2014/07/05 13:42:40 A . (.Realtek Semiconductor Corp. - Realtek Pcie CardReader Driver for 2K/XP/Vi.) -- C:\Windows\System32\drivers\RtsPStor.sys [270552] =>.Realtek Semiconductor Corp® O58 - SDL:2014/06/24 13:47:16 A . (.Realtek Semiconductor Corp. - Realtek USB Mass Storage Driver for 2K/XP/V.) -- C:\Windows\System32\drivers\RtsUStor.sys [216792] =>.Realtek Semiconductor Corp® O58 - SDL:2014/05/28 16:22:28 A . (.Realtek Semiconductor Corp. - Realtek USB Mass Storage Driver for 2K/XP/V.) -- C:\Windows\System32\drivers\RtsUVStor.sys [247000] =>.Realtek Semiconductor Corp® O58 - SDL:2015/02/12 07:56:00 A . (.Realtek Semiconductor Corporation - Realtek PCIE NDIS Driver 34593.) -- C:\Windows\System32\drivers\rtwlane.sys [2901720] =>.Realtek Semiconductor Corp® O58 - SDL:2013/08/22 09:16:47 A . (.Macrovision Corporation, Macrovision Europe Limited, - Macrovision SECURITY Driver.) -- C:\Windows\System32\drivers\secdrv.sys [20480] =>.Macrovision Corporation, Macrovision Europe Limited, O58 - SDL:2013/08/22 06:32:56 A . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\System32\drivers\sisraid2.sys [41312] =>.Microsoft Windows® O58 - SDL:2013/08/22 06:32:57 A . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\System32\drivers\sisraid4.sys [79200] =>.Microsoft Windows® O58 - SDL:2014/06/16 17:11:54 A . (.Synaptics Incorporated - Synaptics SMBus Driver.) -- C:\Windows\System32\drivers\Smb_driver_Intel.sys [25328] =>.Synaptics Incorporated® O58 - SDL:2013/08/22 06:32:57 A . (.Promise Technology, Inc. - Promise SuperTrak EX Series Driver for Wind.) -- C:\Windows\System32\drivers\stexstor.sys [26976] =>.Microsoft Windows® O58 - SDL:2014/06/16 17:11:56 A . (.Synaptics Incorporated - Synaptics Touchpad Win32 Driver.) -- C:\Windows\System32\drivers\SynTP.sys [411888] =>.Synaptics Incorporated® O58 - SDL:2013/08/22 13:40:22 A . (.The OpenVPN Project - TAP-Windows Virtual Network Driver.) -- C:\Windows\System32\drivers\tap0901.sys [35288] =>.OpenVPN Technologies, Inc.® O58 - SDL:2013/09/12 21:22:10 A . (.Intel Corporation - Intel(R) Management Engine Interface.) -- C:\Windows\System32\drivers\TeeDriver.sys [85464] =>.Intel Corporation - Intel® Management Engine Firmware® O58 - SDL:2013/08/22 06:33:00 A . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\viaide.sys [18272] =>.Microsoft Windows® O58 - SDL:2013/08/22 06:33:01 A . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR X86-32.) -- C:\Windows\System32\drivers\vsmraid.sys [148832] =>.Microsoft Windows® O58 - SDL:2013/08/22 06:33:01 A . (.VIA Corporation - VIA StorX RAID Controller Driver.) -- C:\Windows\System32\drivers\VSTXRAID.SYS [276832] =>.Microsoft Windows® O58 - SDL:2012/04/15 22:32:14 A . (.Windows (R) Win 7 DDK provider - WebcamMax Capture.) -- C:\Windows\System32\drivers\wcmvcam.sys [1068216] {6E0A5E2C7C789BDA175F577FFD554961} =>.Windows (R) Win 7 DDK provider O58 - SDL:2015/08/12 21:59:32 A . (.HP - HP Wireless Button Driver.) -- C:\Windows\System32\drivers\WirelessButtonDriver86.sys [29688] =>.Hewlett-Packard Company® ---\\ Derniers fichiers modifiés ou crées (Utilisateur) (14) - 24s O61 - LFC: 2016/03/01 22:47:38 A . (..) -- C:\Users\hamid-hp\AppData\Roaming\Mozilla\Firefox\Profiles\ehmcmgcy.dev-edition-default\yandex-vb\backendStorage\logo\dropbox.com [1266] O61 - LFC: 2016/03/01 22:47:38 A . (..) -- C:\Users\hamid-hp\AppData\Roaming\Mozilla\Firefox\Profiles\ehmcmgcy.dev-edition-default\yandex-vb\backendStorage\logo\facebook.com [1429] O61 - LFC: 2016/03/01 22:47:38 A . (..) -- C:\Users\hamid-hp\AppData\Roaming\Mozilla\Firefox\Profiles\ehmcmgcy.dev-edition-default\yandex-vb\backendStorage\logo\vk.com [4134] O61 - LFC: 2016/03/01 22:47:39 A . (..) -- C:\Users\hamid-hp\AppData\Roaming\Mozilla\Firefox\Profiles\ehmcmgcy.dev-edition-default\yandex-vb\backendStorage\favicons\dropbox.com [579] O61 - LFC: 2016/03/01 22:47:39 A . (..) -- C:\Users\hamid-hp\AppData\Roaming\Mozilla\Firefox\Profiles\ehmcmgcy.dev-edition-default\yandex-vb\backendStorage\favicons\facebook.com [269] O61 - LFC: 2016/03/01 22:47:39 A . (..) -- C:\Users\hamid-hp\AppData\Roaming\Mozilla\Firefox\Profiles\ehmcmgcy.dev-edition-default\yandex-vb\backendStorage\favicons\vk.com [424] O61 - LFC: 2016/03/01 22:47:39 A . (..) -- C:\Users\hamid-hp\AppData\Roaming\Mozilla\Firefox\Profiles\ehmcmgcy.dev-edition-default\yandex-vb\backendStorage\favicons\yoursearching.com [380] O61 - LFC: 2016/03/07 12:01:45 A . (..) -- C:\Users\hamid-hp\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\yandex-vb\backendStorage\logo-sub\youtube.com [791] O61 - LFC: 2016/03/07 12:01:45 A . (..) -- C:\Users\hamid-hp\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\yandex-vb\backendStorage\logo\vk.com [4134] O61 - LFC: 2016/03/07 12:01:45 A . (..) -- C:\Users\hamid-hp\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\yandex-vb\backendStorage\logo\youtube.com [1351] O61 - LFC: 2016/03/07 12:01:45 A . (..) -- C:\Users\hamid-hp\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\yandex-vb\backendStorage\favicons\vk.com [424] O61 - LFC: 2016/03/07 12:01:45 A . (..) -- C:\Users\hamid-hp\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\yandex-vb\backendStorage\favicons\youtube.com [474] O61 - LFC: 2016/03/08 11:00:18 A . (..) -- C:\Users\hamid-hp\AppData\Local\NVIDIA\NvBackend\UMDShim\nvcoproc.bin [6214715] O61 - LFC: 2016/03/05 21:03:46 A . (..) -- C:\Users\hamid-hp\AppData\Local\Microsoft\Windows\INetCache\IE\RWO29DG6\urlblockindex[1].bin [16] ---\\ Associations Shell Spawning (11) - 0s O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe =>.Microsoft Corporation O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Ob.) -- C:\Windows\System32\eventvwr.exe =>.Microsoft Corporation O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe =>.Microsoft Corporation® O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\wscript.exe =>.Microsoft Corporation O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe =>.Microsoft Corporation O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S O67 - Shell Spawning: <.html> [HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- E:\Program Files\Mozilla Firefox\firefox.exe =>.Mozilla Corporation® ---\\ Menu de démarrage Internet (16) - 0s O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- e:\Program Files\Mozilla Firefox\firefox.exe =>.Mozilla Corporation® O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc® O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe =>.Microsoft Corporation® O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Avast Software - Avast SafeZone Browser.) -- C:\Program Files\AVAST Software\SZBrowser\Launcher.exe =>.AVAST Software s.r.o.® O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- e:\Program Files\Mozilla Firefox\uninstall\helper.exe =>.Mozilla Corporation O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc. O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Avast Software - Avast SafeZone Browser.) -- C:\Program Files\AVAST Software\SZBrowser\launcher.exe =>.AVAST Software O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Mozilla Corporation - Firefox Helper.) -- e:\Program Files\Mozilla Firefox\uninstall\helper.exe =>.Mozilla Corporation O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc. O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Avast Software - Avast SafeZone Browser.) -- C:\Program Files\AVAST Software\SZBrowser\launcher.exe =>.AVAST Software O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- e:\Program Files\Mozilla Firefox\uninstall\helper.exe =>.Mozilla Corporation O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc. O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Avast Software - Avast SafeZone Browser.) -- C:\Program Files\AVAST Software\SZBrowser\launcher.exe =>.AVAST Software ---\\ Recherche d'infection sur les navigateurs (9) - 12s O69 - SBI: prefs.js [hamid-hp - ehmcmgcy.dev-edition-default] user_pref("browser.newtab.url", "http://www.yoursearching.com/newtab/?type=nt&ts=1456146526&z=a164e74987148cac52f37abg9z6w2qbg4zfq[...] =>PUP.Optional.YourSearching O69 - SBI: prefs.js [hamid-hp - 41A66E7E5EE1] user_pref("browser.newtab.url", "http://searchinterneat-a.akamaihd.net/t?eq=U0EeFFhaR1oWHFMReA0PVFhDDFdGdwAVVQtBFRgacVxcTA9CRwdGIg[...] =>PUP.Optional.Browser O69 - SBI: prefs.js [hamid-hp - 41A66E7E5EE1] user_pref("browser.startup.homepage", "http://searchinterneat-a.akamaihd.net/h?eq=U0EeCFZVBB8SRghFcgEMVgwQExhBJQ4BTA1DEQEOeQhdBRRH[...] =>PUP.Optional.Browser O69 - SBI: prefs.js [hamid-hp - 41A66E7E5EE1] user_pref("extensions.DiscoverTreasure.cg", "f28475a2-be79-4204-91ed-63f2eb312c3d"); =>PUP.Optional.DiscoverTreasure O69 - SBI: prefs.js [hamid-hp - 41A66E7E5EE1] user_pref("extensions.quick_start.enable_search1", false); =>PUP.Optional.QuickStart O69 - SBI: prefs.js [hamid-hp - 41A66E7E5EE1] user_pref("extensions.quick_start.sd.closeWindowWithLastTab_prev_state", false); =>PUP.Optional.QuickStart O69 - SBI: prefs.js [hamid-hp - 41A66E7E5EE1] user_pref("keyword.URL", "http://searchinterneat-a.akamaihd.net/s?eq=U0EeE1xZE1oZB1ZEfV8KWQ1GFFQRbVtdVgBcFQcTdBQBUFwVDAMQJgtdAwpAE[...] =>PUP.Optional.Browser O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (Bing) - http://www.bing.com/ O69 - SBI: SearchScopes [HKLM] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (@ieframe.dll,-12512) - http://www.bing.com/ ---\\ Enumère les services démarrés par Svchost (36) - 1s O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d’application.) -- C:\Windows\System32\aelupsvc.dll [161792] =>.Microsoft Corporation O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [129536] =>.Microsoft Corporation O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [129536] =>.Microsoft Corporation O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\System32\srvsvc.dll [250368] =>.Microsoft Corporation O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\System32\gpsvc.dll [1207808] =>.Microsoft Corporation O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\IKEEXT.DLL [734208] =>.Microsoft Corporation O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur u.) -- C:\Windows\System32\iphlpsvc.dll [823808] =>.Microsoft Corporation O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d’ouverture de session secon.) -- C:\Windows\System32\seclogon.dll [24064] =>.Microsoft Corporation O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll [89600] =>.Microsoft Corporation O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\System32\iscsiexe.dll [115712] =>.Microsoft Corporation O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll [93696] =>.Microsoft Corporation O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\System32\schedsvc.dll [1015808] =>.Microsoft Corporation O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll [185856] =>.Microsoft Corporation O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédia.) -- C:\Windows\System32\mmcss.dll [74752] =>.Microsoft Corporation O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\System32\browser.dll [108032] =>.Microsoft Corporation O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll [191488] =>.Microsoft Corporation O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à.) -- C:\Windows\System32\SessEnv.dll [296960] =>.Microsoft Corporation O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll [64512] =>.Microsoft Corporation O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\Windows\System32\KMSVC.DLL [75264] =>.Microsoft Corporation O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\Windows\System32\themeservice.dll [41984] =>.Microsoft Corporation O83 - Search Svchost Services: wlidsvc (wlidsvc) . (.Microsoft Corporation - Service de compte Microsoft®.) -- C:\Windows\System32\wlidsvc.dll [1245184] =>.Microsoft Corporation O83 - Search Svchost Services: lfsvc (lfsvc) . (.Microsoft Corporation - Service d’infrastructure de localisation Wi.) -- C:\Windows\System32\GeofenceMonitorService.dll [367104] =>.Microsoft Corporation O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\Windows\System32\bdesvc.dll [297984] =>.Microsoft Corporation O83 - Search Svchost Services: DsmSvc (DsmSvc) . (.Microsoft Corporation - Gestionnaire d’installation de périphérique.) -- C:\Windows\System32\DeviceSetupManager.dll [167424] =>.Microsoft Corporation O83 - Search Svchost Services: NcaSvc (NcaSvc) . (.Microsoft Corporation - Service Assistant Connectivité réseau Micro.) -- C:\Windows\System32\NcaSvc.dll [142848] =>.Microsoft Corporation O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’.) -- C:\Windows\System32\rasauto.dll [95232] =>.Microsoft Corporation O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire des connexions d’accès à dista.) -- C:\Windows\System32\rasmans.dll [462336] =>.Microsoft Corporation O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll [187392] =>.Microsoft Corporation O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements systèm.) -- C:\Windows\System32\Sens.dll [58368] =>.Microsoft Corporation O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l’application d’assistance à.) -- C:\Windows\System32\ipnathlp.dll [390144] =>.Microsoft Corporation O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM.) -- C:\Windows\System32\tapisrv.dll [254464] =>.Microsoft Corporation O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Up.) -- C:\Windows\System32\wuaueng.dll [3067904] =>.Microsoft Corporation O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière.) -- C:\Windows\System32\qmgr.dll [734208] =>.Microsoft Corporation O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [576512] =>.Microsoft Corporation O83 - Search Svchost Services: AppMgmt (AppMgmt) . (.Microsoft Corporation - Service Installation de logiciels.) -- C:\Windows\System32\appmgmts.dll [155648] =>.Microsoft Corporation O83 - Search Svchost Services: MsKeyboardFilter (MsKeyboardFilter) . (.Microsoft Corporation - SvcHost Service for Microsoft Keyboard Filt.) -- C:\Windows\System32\KeyboardFilterSvc.dll [76096] =>.Microsoft Windows® ---\\ Liste des exceptions du parefeu Windows (21) - 4s O87 - FAEL: "{554AF64C-E2E5-4CB3-BABE-32A457CDDDEE}" [In-None-P6-TRUE] .(...) -- e:\Program Files\Firefox Developer Edition\firefox.exe (.not file.) O87 - FAEL: "{DB5EAB06-34A1-4A73-B944-05FEDE763FCD}" [In-None-P6-TRUE] .(...) -- C:\Users\hamid-hp\AppData\Local\Temp\nsnA583.tmp\QQPCDetector.exe (.not file.) O87 - FAEL: "{90E15178-C26C-45CA-8790-E6811E54E13A}" [In-None-P17-TRUE] .(...) -- C:\Users\hamid-hp\AppData\Local\Temp\nsnA583.tmp\QQPCDetector.exe (.not file.) O87 - FAEL: "{1FE6D5DE-6EE4-43D5-B8DC-89A4049445A9}" [In-None-P6-TRUE] .(.版权所有 (C) 2008 Tencent - QQDeskUpdate.) -- E:\Program Files\Tencent\QQPlayer\QQDeskUpdate.exe {7FC80871A66FE6B07D8CFCA5AF93014D} =>.Superfluous.Tencent O87 - FAEL: "{DE85DC73-CC9D-4287-AD94-DE420B53BB0B}" [In-None-P17-TRUE] .(.版权所有 (C) 2008 Tencent - QQDeskUpdate.) -- E:\Program Files\Tencent\QQPlayer\QQDeskUpdate.exe {7FC80871A66FE6B07D8CFCA5AF93014D} =>.Superfluous.Tencent O87 - FAEL: "{A02D4AB1-F7A6-43F9-BE7E-D6CBAA7E24DA}" [In-None-P6-TRUE] .(...) -- C:\Program Files\KMSpico\KMSELDI.exe =>HackTool.KMSpico O87 - FAEL: "{C6A5CFBA-B44F-40A9-94E1-814665C154C9}" [In-None-P17-TRUE] .(...) -- C:\Program Files\KMSpico\KMSELDI.exe =>HackTool.KMSpico O87 - FAEL: "{36B14DD4-861E-4024-94ED-A4E967BB9DDC}" [In-None-P6-TRUE] .(...) -- C:\Program Files\KMSpico\AutoPico.exe =>HackTool.KMSpico O87 - FAEL: "{77EF5DDF-5EB2-4821-B408-37EF6F92583A}" [In-None-P17-TRUE] .(...) -- C:\Program Files\KMSpico\AutoPico.exe =>HackTool.KMSpico O87 - FAEL: "{0AABC93A-AA48-49B0-90AE-296350785220}" [In-None-P6-TRUE] .(...) -- C:\Program Files\KMSpico\Service_KMS.exe =>HackTool.KMSpico O87 - FAEL: "{9955C364-E29F-4BE2-9CC0-41EE7E1A233B}" [In-None-P17-TRUE] .(...) -- C:\Program Files\KMSpico\Service_KMS.exe =>HackTool.KMSpico O87 - FAEL: "{7BDB5F13-EEB4-4621-8FDC-81E77EC268D2}" [In-None-P6-TRUE] .(...) -- C:\Program Files\KMSpico\AutoPico.exe =>HackTool.KMSpico O87 - FAEL: "{3D135047-6D0B-4A58-8C4F-10A1C913FF1A}" [In-None-P17-TRUE] .(...) -- C:\Program Files\KMSpico\AutoPico.exe =>HackTool.KMSpico O87 - FAEL: "{E2AF9F61-CE49-4213-8906-ACD8E86C2A02}" [In-None-P6-TRUE] .(...) -- C:\Program Files\Ralink\Common\RaUI.exe (.not file.) O87 - FAEL: "{78D6297B-D679-40CD-943B-EF84A09D1725}" [In-None-P17-TRUE] .(...) -- C:\Program Files\Ralink\Common\RaUI.exe (.not file.) O87 - FAEL: "TCP Query User{0A6CAFE9-7840-4F2E-B52C-88A93C3A032F}F:\driver 2015\sdi-drv.exe" [In-None-P6-TRUE] .(.GNU GPL v3 - Snappy Driver Installer.) -- F:\driver 2015\sdi-drv.exe O87 - FAEL: "UDP Query User{FA64E3BC-12CF-4B70-AEAC-86B7F7B5F3C7}F:\driver 2015\sdi-drv.exe" [In-None-P17-TRUE] .(.GNU GPL v3 - Snappy Driver Installer.) -- F:\driver 2015\sdi-drv.exe O87 - FAEL: "{7F3D08B6-11F2-41AD-82D7-110D7602EEB8}" [In-None-P6-TRUE] .(.New Unity Inc - SprgFiles Downloader Application.) -- C:\Program Files\SprgFiles\SprgFiles.exe =>.Superfluous.SpringFiles O87 - FAEL: "{4D31B18B-BB5B-4914-BE37-E08B083CF552}" [In-None-P17-TRUE] .(.New Unity Inc - SprgFiles Downloader Application.) -- C:\Program Files\SprgFiles\SprgFiles.exe =>.Superfluous.SpringFiles O87 - FAEL: "{C0D5DFA0-9131-446C-AA3A-C8ABEB2E0AB4}" [In-None-P6-TRUE] .(.New Unity Inc - SprgFiles Downloader Application.) -- C:\Program Files\SprgFiles\downloader.exe =>.Superfluous.SpringFiles O87 - FAEL: "{4A19E6F8-FC22-4B59-AA68-E82FEEC4FFB4}" [In-None-P17-TRUE] .(.New Unity Inc - SprgFiles Downloader Application.) -- C:\Program Files\SprgFiles\downloader.exe =>.Superfluous.SpringFiles ---\\ Recherche de clés de registre Tracing (1) - 1s HKLM\SOFTWARE\Microsoft\Tracing\tencentdl_RASAPI32 =>.Superfluous.Tencent ---\\ Scan Additionnel (54) - 0s HKLM\SYSTEM\CurrentControlSet\Services\Service KMSELDI =>HackTool.KMSpico C:\Program Files\KMSpico\Service_KMS.exe =>HackTool.KMSpico C:\Windows\AutoKMS\AutoKMS.exe =>HackTool.AutoKMS C:\Program Files\KMSpico\AutoPico.exe =>HackTool.KMSpico C:\Windows\System32\Tasks\AutoKMS =>HackTool.AutoKMS C:\Windows\System32\Tasks\AutoPico Daily Restart =>HackTool.KMSpico C:\Users\hamid-hp\AppData\Local\Google\Chrome\User Data\Default\Extensions\opnlofbefoejamblfkfemhphgllkdgmj =>Hijacker.Browser C:\Users\hamid-hp\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opnlofbefoejamblfkfemhphgllkdgmj =>Hijacker.Browser C:\Users\hamid-hp\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\searchplugins\yahoo.xml =>PUP.Optional.BDYahoo C:\Users\hamid-hp\AppData\Roaming\Mozilla\Firefox\Profiles\ehmcmgcy.dev-edition-default\extensions\deskCutv2@gmail.com =>PUP.Optional.LightningNewTab HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Discover Treasure =>PUP.Optional.DiscoverTreasure HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KMSpico_is1 =>HackTool.KMSpico HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\yoursearching =>PUP.Optional.YourSearching HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Discover Treasure =>PUP.Optional.DiscoverTreasure HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KMSpico_is1 =>HackTool.KMSpico HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\yoursearching =>PUP.Optional.YourSearching HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SprgFiles =>.Superfluous.SpringFiles HKLM\SOFTWARE\DiscoverTreasure =>PUP.Optional.DiscoverTreasure HKLM\SOFTWARE\ihpmserver =>PUP.Optional.CrossRider HKLM\SOFTWARE\RayDld =>PUP.Optional.CrossRider HKLM\SOFTWARE\SprgFiles =>.Superfluous.SpringFiles HKLM\SOFTWARE\Tencent =>.Superfluous.Tencent HKLM\SOFTWARE\yessearchesSoftware =>PUP.Optional.YesSearches HKCU\SOFTWARE\SprgFiles =>.Superfluous.SpringFiles HKCU\SOFTWARE\Tencent =>.Superfluous.Tencent HKCU\SOFTWARE\undefined =>.Superfluous.Downloader C:\Program Files\Discover Treasure =>PUP.Optional.DiscoverTreasure C:\Program Files\KMSpico =>HackTool.KMSpico C:\Program Files\SprgFiles =>.Superfluous.SpringFiles C:\Program Files\Tencent =>.Superfluous.Tencent C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KMSpico =>HackTool.KMSpico C:\ProgramData\Microsoft Toolkit =>HackTool.AutoKMS C:\ProgramData\Tencent =>.Superfluous.Tencent C:\Program Files\Common Files\Tencent =>.Superfluous.Tencent C:\Users\hamid-hp\AppData\Roaming\SpringFiles =>.Superfluous.SpringFiles C:\Users\hamid-hp\AppData\Roaming\Tencent =>.Superfluous.Tencent C:\Users\hamid-hp\AppData\Roaming\yoursearching =>PUP.Optional.YourSearching C:\Windows\Prefetch\AUTOPICO.EXE-EB7BC268.pf =>HackTool.KMSpico C:\Windows\Prefetch\IHPMSERVER.EXE-A2B90EFF.pf =>PUP.Optional.CrossRider C:\Windows\Prefetch\KMSPICO_SETUP.EXE-7C5C1952.pf =>HackTool.KMSpico C:\Windows\Prefetch\KMSPICO_SETUP.TMP-172D151C.pf =>HackTool.KMSpico C:\Windows\Prefetch\SPRGFILES.EXE-2A72404C.pf =>.Superfluous.SpringFiles C:\Windows\Prefetch\TENCENTDL.EXE-16388A16.pf =>.Superfluous.Tencent C:\Windows\Prefetch\TENCENTDL.EXE-5843037A.pf =>.Superfluous.Tencent C:\Windows\Prefetch\TENCENTDL.EXE-59FBAB04.pf =>.Superfluous.Tencent C:\Windows\Prefetch\TENCENTDL.EXE-674F7764.pf =>.Superfluous.Tencent C:\Windows\Prefetch\WINSERE.EXE-43D9B3D5.pf =>PUP.Optional.YesSearches C:\Windows\Prefetch\WINSERE.EXE-4AA701C5.pf =>PUP.Optional.YesSearches C:\Windows\Prefetch\WINTASKE.EXE-A514EDAA.pf =>PUP.Optional.YesSearches E:\Program Files\Tencent\QQPlayer\QQDeskUpdate.exe =>.Superfluous.Tencent C:\Program Files\KMSpico\KMSELDI.exe =>HackTool.KMSpico C:\Program Files\SprgFiles\SprgFiles.exe =>.Superfluous.SpringFiles C:\Program Files\SprgFiles\downloader.exe =>.Superfluous.SpringFiles HKLM\SOFTWARE\Microsoft\Tracing\tencentdl_RASAPI32 =>.Superfluous.Tencent ---\\ Récapitulatif des éléments trouvés sur votre station (14) - 0s http://www.nicolascoolman.fr/?p=180 =>PUP.Optional.CrossRider http://www.nicolascoolman.fr/?p=989 =>HackTool.KMSpico http://www.nicolascoolman.fr/link-661/ =>PUP.Optional.DiscoverTreasure http://www.nicolascoolman.fr/?p=1804 =>HackTool.AutoKMS http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.YesSearches http://www.nicolascoolman.fr/hijacker-browser/ =>Hijacker.Browser http://www.nicolascoolman.fr/?p=546 =>PUP.Optional.Browser http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.BDYahoo http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.LightningNewTab http://www.nicolascoolman.fr/?p=368 =>.Superfluous.Tencent http://www.nicolascoolman.fr/pup-optional-yoursearching =>PUP.Optional.YourSearching http://www.nicolascoolman.fr/?p=5145 =>.Superfluous.SpringFiles http://www.nicolascoolman.fr/?p=5145 =>.Superfluous.Downloader http://www.nicolascoolman.fr/?p=666 =>PUP.Optional.QuickStart ~ End of the scan, 22738 items in 00h02mn58s (860)(0)