~ ZHPDiag v2016.3.8.67 Par Nicolas Coolman (2016/03/08) ~ Démarré par Rafika (Administrator) (2016/03/09 12:37:05) ~ Site: http://www.nicolascoolman.com ~ Facebook: https://www.facebook.com/nicolascoolman1 ~ Etat de la version: Version OK ~ Mode: Scanner ~ Rapport: C:\Users\Rafika\Desktop\ZHPDiag.txt ~ Rapport: C:\Users\Rafika\AppData\Roaming\ZHP\ZHPDiag.txt ~ UAC: Activate ~ Démarrage du système: Normal (Normal boot) Windows 7 Home Premium, 32-bit (Build 7600) ---\\ Navigateurs Internet (2) - 0s MFIE: Mozilla Firefox 34.0 (x86 en-US) MSIE: Internet Explorer v8.0.7600.16385 ---\\ Informations sur les produits Windows (4) - 3s ~ Windows Server License Manager Script : OK ~ Licence Script File Génération : OK Windows Automatic Updates : KO Windows Activation Technologies : KO ---\\ Logiciels de protection (1) - 1s Avast Free Antivirus v11.1.2253 ---\\ Surveillance de Logiciels (2) - 1s Adobe Flash Player 20 NPAPI Adobe Reader XI MUI ---\\ Informations sur le système (6) - 0s ~ Operating System: x86 Family 6 Model 58 Stepping 9, GenuineIntel ~ Operating System: 32-bit ~ Boot mode: Normal (Normal boot) Total RAM: 2783.596 MB (39% free) System Restore: Activé (Enable) System drive C: has 120 GB () free of 149 GB ---\\ Mode de connexion au système (3) - 0s ~ Computer Name: RAFIKA-PC ~ User Name: Rafika ~ Logged in as Administrator ---\\ Enumération des unités disques (3) - 0s ~ Drive C: has 120 GB free of 149 GB (System) ~ Drive D: has GB free of 5 GB ~ Drive E: has 95 GB free of 99 GB ---\\ Etat du Centre de Sécurité Windows (10) - 0s [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: Modified [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK [HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: Modified [HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK ---\\ Recherche particulière de fichiers génériques (24) - 1s [MD5.15BC38A7492BEFE831966ADB477CF76F] - 14/07/2009 - (.Microsoft Corporation - Explorateur Windows.) -- C:\Windows\Explorer.exe [2613248] =>.Microsoft Corporation [MD5.51138BEEA3E2C21EC44D0932C71762A8] - 14/07/2009 - (.Microsoft Corporation - Processus hôte Windows (Rundll32).) -- C:\Windows\System32\rundll32.exe [44544] =>.Microsoft Corporation [MD5.B5C5DCAD3899512020D135600129D665] - 14/07/2009 - (.Microsoft Corporation - Application de démarrage de Windows.) -- C:\Windows\System32\Wininit.exe [96256] =>.Microsoft Corporation [MD5.0D874F3BC751CC2198AF2E6783FB8B35] - 14/07/2009 - (.Microsoft Corporation - Extensions Internet pour Win32.) -- C:\Windows\System32\wininet.dll [977920] =>.Microsoft Corporation [MD5.8EC6A4AB12B8F3759E21F8E3A388F2CF] - 14/07/2009 - (.Microsoft Corporation - Application d’ouverture de session Windows.) -- C:\Windows\System32\Winlogon.exe [285696] =>.Microsoft Corporation [MD5.58C94EAE54BF0C5E2B80B2E5E7744D4C] - 14/07/2009 - (.Microsoft Corporation - Bibliothèque de licences.) -- C:\Windows\System32\sppcomapi.dll [193024] =>.Microsoft Corporation [MD5.6D5A49D6479EB753C7879F73A4C35E0F] - 14/07/2009 - (.Microsoft Corporation - DNS DLL de l’API Client.) -- C:\Windows\System32\dnsapi.dll [269824] =>.Microsoft Corporation [MD5.D8714A5FB3141F8226D16861F20C5AC4] - 14/07/2009 - (.Microsoft Corporation - DLL client de l’API uilisateur de Windows m.) -- C:\Windows\System32\fr-FR\user32.dll.mui [19968] =>.Microsoft Corporation [MD5.DDC040FDB01EF1712A6B13E52AFB104C] - 14/07/2009 - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) -- C:\Windows\System32\drivers\AFD.sys [338944] =>.Microsoft Corporation [MD5.338C86357871C167A96AB976519BF59E] - 14/07/2009 - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) -- C:\Windows\System32\drivers\atapi.sys [21584] =>.Microsoft Windows® [MD5.77EA11B065E0A8AB902D78145CA51E10] - 14/07/2009 - (.Microsoft Corporation - CD-ROM File System Driver.) -- C:\Windows\System32\drivers\Cdfs.sys [70656] =>.Microsoft Corporation [MD5.BA6E70AA0E6091BC39DE29477D866A77] - 14/07/2009 - (.Microsoft Corporation - SCSI CD-ROM Driver.) -- C:\Windows\System32\drivers\Cdrom.sys [108544] =>.Microsoft Corporation [MD5.8E09E52EE2E3CEB199EF3DD99CF9E3FB] - 14/07/2009 - (.Microsoft Corporation - DFS Namespace Client Driver.) -- C:\Windows\System32\drivers\DfsC.sys [78336] =>.Microsoft Corporation [MD5.717A2207FD6F13AD3E664C7D5A43C7BF] - 14/07/2009 - (.Microsoft Corporation - High Definition Audio Bus Driver.) -- C:\Windows\System32\drivers\HDAudBus.sys [108544] =>.Microsoft Corporation [MD5.F151F0BDC47F4A28B1B20A0818EA36D6] - 14/07/2009 - (.Microsoft Corporation - Pilote de port i8042.) -- C:\Windows\System32\drivers\i8042prt.sys [80896] =>.Microsoft Corporation [MD5.A5FA468D67ABCDAA36264E463A7BB0CD] - 14/07/2009 - (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\System32\drivers\IpNat.sys [101888] =>.Microsoft Corporation [MD5.F4A054BE78AF7F410129C4B64B07DC9B] - 14/07/2009 - (.Microsoft Corporation - Windows NT SMB Minirdr.) -- C:\Windows\System32\drivers\MRxSmb.sys [123392] =>.Microsoft Corporation [MD5.DD52A733BF4CA5AF84562A5E2F963B91] - 14/07/2009 - (.Microsoft Corporation - MBT Transport driver.) -- C:\Windows\System32\drivers\netBT.sys [187904] =>.Microsoft Corporation [MD5.3795DCD21F740EE799FB7223234215AF] - 14/07/2009 - (.Microsoft Corporation - Pilote du système de fichiers NT.) -- C:\Windows\System32\drivers\ntfs.sys [1210432] =>.Microsoft Windows® [MD5.2EA877ED5DD9713C5AC74E8EA7348D14] - 14/07/2009 - (.Microsoft Corporation - Pilote de port parallèle.) -- C:\Windows\System32\drivers\Parport.sys [79360] =>.Microsoft Corporation [MD5.D9F91EAFEC2815365CBE6D167E4E332A] - 14/07/2009 - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) -- C:\Windows\System32\drivers\Rasl2tp.sys [78848] =>.Microsoft Corporation [MD5.3E21C083B8A01CB70BA1F09303010FCE] - 14/07/2009 - (.Microsoft Corporation - SMB Transport driver.) -- C:\Windows\System32\drivers\smb.sys [71168] =>.Microsoft Corporation [MD5.CB39E896A2A83702D1737BFD402B3542] - 14/07/2009 - (.Microsoft Corporation - TDI Translation Driver.) -- C:\Windows\System32\drivers\tdx.sys [74240] =>.Microsoft Corporation [MD5.58DF9D2481A56EDDE167E51B334D44FD] - 14/07/2009 - (.Microsoft Corporation - Pilote de cliché instantané du volume.) -- C:\Windows\System32\drivers\volsnap.sys [245328] =>.Microsoft Windows® ---\\ Liste des services NT non Microsoft et non désactivés (9) - 2s O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe =>.Adobe Systems, Incorporated® O23 - Service: Avast Antivirus (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe =>.AVAST Software a.s.® O23 - Service: BaiduHips (BaiduHips) . (...) - C:\Program Files\Common Files\Baidu\BaiduHips\1.2.0.892\BaiduHips.exe (.not file.) =>PUP.Optional.Salus O23 - Service: BDMRTP Service (BDMRTP) . (...) - C:\Program Files\Baidu\BaiduAn\4.0.0.8029\baiduAnSvc.exe (.not file.) O23 - Service: Broadcom Management Agent (BrcmMgmtAgent) . (.Broadcom Corporation - Broadcom Management Agent.) - C:\Program Files\Broadcom\MgmtAgent\BrcmMgmtAgent.exe =>.Broadcom Corporation O23 - Service: (QQRepair10cb) . (...) - C:\Windows\GJFix\QQRepair10cb =>.Superfluous.Tencent O23 - Service: (QQRepair163a) . (...) - C:\Windows\GJFix\QQRepair163a =>.Superfluous.Tencent O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files\Skype\Updater\Updater.exe =>.Skype Software Sarl® O23 - Service: SRepairDrv (SRepairDrv) . (...) - C:\Windows\GJFix\SRepairDrv (.not file.) ---\\ Services non Microsoft (SR=Démarré,SS=Stoppé) (10) - 49s SR - Auto [23/09/2012] [ 65192] Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe =>.Adobe Systems, Incorporated® SS - Disabl [21/01/2016] [ 269504] Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe =>.Adobe Systems Incorporated® SR - Auto [28/02/2016] [ 237096] Avast Antivirus (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe =>.AVAST Software a.s.® SR - Auto [01/04/2014] [ 165376] Broadcom Management Agent (BrcmMgmtAgent) . (.Broadcom Corporation.) - C:\Program Files\Broadcom\MgmtAgent\BrcmMgmtAgent.exe =>.Broadcom Corporation SS - Disabl [25/02/2016] [ 762880] CloudPrinter (CloudPrinter) . (...) - C:\ProgramData\CloudPrinter\CloudPrinter.exe SS - Disabl [06/12/2014] [ 114800] Mozilla Maintenance Service (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe =>.Mozilla Corporation® SS - Auto [25/02/2016] [ 129504] (QQRepair10cb) . (...) - C:\Windows\GJFix\QQRepair10cb =>.Superfluous.Tencent SS - Auto [25/02/2016] [ 129504] (QQRepair163a) . (...) - C:\Windows\GJFix\QQRepair163a =>.Superfluous.Tencent SS - Auto [03/06/2015] [ 327296] Skype Updater (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files\Skype\Updater\Updater.exe =>.Skype Software Sarl® ---\\ Tâches planifiées en automatique (33) - 9s [MD5.295A5BFCE8D225D014DB4E6E69336279] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe [269504] =>.Adobe Systems Incorporated® [MD5.07605ABEB10FC533881C91F19DECF69A] [APT] [AutoKMS] (.CODYQX4 & Bosh.) -- C:\Windows\AutoKMS\AutoKMS.exe [1923584] =>HackTool.AutoKMS [MD5.BB19B7714F94DA4A34B40B484BE54739] [APT] [avast! Emergency Update] (.AVAST Software.) -- C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [1503200] =>.AVAST Software a.s.® [MD5.00000000000000000000000000000000] [APT] [downibad] (...) -- C:\Windows\system32\config\systemprofile\AppData\Local\Villatouch /t 1958 4885 (.not file.) [0] =>.Superfluous.Empty [MD5.00000000000000000000000000000000] [APT] [DriverToolkit Autorun] (...) -- C:\Program Files\DriverToolkit\DriverToolkit.exe (.not file.) [0] =>.Superfluous.DriverToolkit [MD5.00000000000000000000000000000000] [APT] [psv_BlueLab] (...) -- C:\ProgramData\serfev\Volron.reg & del C:\ProgramData\serfev\Volron.reg & SCHTASKS /Delete /TN psv_BlueLab /F (.not file.) [0] =>.Superfluous.Empty [MD5.00000000000000000000000000000000] [APT] [psv_Lamstock] (...) -- C:\ProgramData\Ronzap\Saildom.reg & del C:\ProgramData\Ronzap\Saildom.reg & SCHTASKS /Delete /TN psv_Lamstock /F (.not file.) [0] =>.Superfluous.Empty [MD5.00000000000000000000000000000000] [APT] [psv_Salttam] (...) -- C:\ProgramData\Ronzap\OverFan.reg & del C:\ProgramData\Ronzap\OverFan.reg & SCHTASKS /Delete /TN psv_Salttam /F (.not file.) [0] =>.Superfluous.Empty [MD5.00000000000000000000000000000000] [APT] [psv_Spansollam] (...) -- C:\ProgramData\serfev\Singlam.reg & del C:\ProgramData\serfev\Singlam.reg & SCHTASKS /Delete /TN psv_Spansollam /F (.not file.) [0] =>.Superfluous.Empty [MD5.00000000000000000000000000000000] [APT] [psv_TampOttom] (...) -- C:\ProgramData\Ronzap\Una-Hold.reg & del C:\ProgramData\Ronzap\Una-Hold.reg & SCHTASKS /Delete /TN psv_TampOttom /F (.not file.) [0] =>.Superfluous.Empty [MD5.00000000000000000000000000000000] [APT] [psv_Triotough] (...) -- C:\ProgramData\Ronzap\Moveex.reg & del C:\ProgramData\Ronzap\Moveex.reg & SCHTASKS /Delete /TN psv_Triotough /F (.not file.) [0] =>.Superfluous.Empty [MD5.00000000000000000000000000000000] [APT] [psv_Voltplus] (...) -- C:\ProgramData\serfev\Dongbam.reg & del C:\ProgramData\serfev\Dongbam.reg & SCHTASKS /Delete /TN psv_Voltplus /F (.not file.) [0] =>.Superfluous.Empty [MD5.00000000000000000000000000000000] [APT] [psv_ZumSanplus] (...) -- C:\ProgramData\Ronzap\Geolux.reg & del C:\ProgramData\Ronzap\Geolux.reg & SCHTASKS /Delete /TN psv_ZumSanplus /F (.not file.) [0] =>.Superfluous.Empty [MD5.00000000000000000000000000000000] [APT] [{254A76AA-68B6-4FE5-B48F-370D7DB584B9}] (...) -- C:\Users\Rafika\Downloads\Intel-FORCED-Chipset-NTx86-1.2.3.2005-drp.exe (.not file.) [0] =>.Superfluous.Empty [MD5.00000000000000000000000000000000] [APT] [{317E936C-9BF0-4413-AEA6-C54F30BDD8D9}] (...) -- C:\Users\Rafika\Downloads\Intel-FORCED-Chipset-NTx86-1.2.3.2005-drp.exe (.not file.) [0] =>.Superfluous.Empty [MD5.619315CE65459CE35089A8946C69EDEF] [APT] [{CECFBB7C-5429-4F05-96C1-3D0DBD6AB080}] (...) -- C:\Users\Rafika\AppData\Local\Temp\ICReinstall_SUDOKU_INSTALL.exe [946576] [MD5.224EFC8B50E88D79DCEB19D658D5C41B] [APT] [AVAST Software\] (.AVAST Software.) -- C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [652816] =>.AVAST Software a.s.® O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\Tasks\Adobe Flash Player Updater.job [1002] =>.Adobe Systems Incorporated® O39 - APT: AutoKMS - (.CODYQX4 & Bosh.) -- C:\Windows\Tasks\AutoKMS.job [268] =>HackTool.AutoKMS O39 - APT: DriverToolkit Autorun - (...) -- C:\Windows\Tasks\DriverToolkit Autorun.job [348] (.Orphean.) =>.Superfluous.DriverToolkit O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Tasks\Adobe Flash Player Updater [3940] =>.Adobe Systems Incorporated® O39 - APT: AutoKMS - (.CODYQX4 & Bosh.) -- C:\Windows\System32\Tasks\AutoKMS [2898] =>HackTool.AutoKMS O39 - APT: avast! Emergency Update - (.AVAST Software.) -- C:\Windows\System32\Tasks\avast! Emergency Update [4182] =>.AVAST Software a.s.® O39 - APT: downibad - (...) -- C:\Windows\System32\Tasks\downibad [3244] (.Orphean.) =>.Superfluous.Orphean O39 - APT: DriverToolkit Autorun - (...) -- C:\Windows\System32\Tasks\DriverToolkit Autorun [2708] (.Orphean.) =>.Superfluous.DriverToolkit O39 - APT: psv_BlueLab - (...) -- C:\Windows\System32\Tasks\psv_BlueLab [3256] (.Orphean.) =>.Superfluous.Orphean O39 - APT: psv_Lamstock - (...) -- C:\Windows\System32\Tasks\psv_Lamstock [3262] (.Orphean.) =>.Superfluous.Orphean O39 - APT: psv_Salttam - (...) -- C:\Windows\System32\Tasks\psv_Salttam [3260] (.Orphean.) =>.Superfluous.Orphean O39 - APT: psv_Spansollam - (...) -- C:\Windows\System32\Tasks\psv_Spansollam [3266] (.Orphean.) =>.Superfluous.Orphean O39 - APT: psv_TampOttom - (...) -- C:\Windows\System32\Tasks\psv_TampOttom [3268] (.Orphean.) =>.Superfluous.Orphean O39 - APT: psv_Triotough - (...) -- C:\Windows\System32\Tasks\psv_Triotough [3260] (.Orphean.) =>.Superfluous.Orphean O39 - APT: psv_Voltplus - (...) -- C:\Windows\System32\Tasks\psv_Voltplus [3262] (.Orphean.) =>.Superfluous.Orphean O39 - APT: psv_ZumSanplus - (...) -- C:\Windows\System32\Tasks\psv_ZumSanplus [3262] (.Orphean.) =>.Superfluous.Orphean ---\\ Processus lancés (10) - 2s [MD5.501E11AE85EE28D305D228F5931AC76C] - (.AVAST Software - avast! Service.) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe [237096] [PID.1440] =>.AVAST Software a.s.® [MD5.B1EA9681502EE57F87DB71D726288A5B] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [65192] [PID.1964] =>.Adobe Systems, Incorporated® [MD5.921A94968CA90D218C96FC7F98EA9ADB] - (.Broadcom Corporation - Broadcom Management Agent.) -- C:\Program Files\Broadcom\MgmtAgent\BrcmMgmtAgent.exe [165376] [PID.1996] =>.Broadcom Corporation [MD5.BDDAFDB5F9517DFE97AD3750CF343819] - (.Intel Corporation - Intel(R) USB 3.0 Monitor.) -- C:\Program Files\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [290688] [PID.2532] =>.Intel Corporation® [MD5.30A09BC7916EEEA19DB2EADC26F9CB40] - (...) -- C:\Users\Rafika\AppData\Local\Temp\setup.exe [1115136] [PID.2540] [MD5.EED665FF8003D08E3A0F16E3EA216BF3] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\avastui.exe [7139768] [PID.2928] =>.AVAST Software a.s.® [MD5.29157E7FCBE92662DA8CC389C5FAF8EE] - (.Speedbit Ltd. - Download Accelerator Plus (DAP).) -- C:\Program Files\DAP\DAP.exe [4242064] [PID.2944] {699AEB21842CD56CA7A7FC71BB394361} =>.Speedbit Ltd. [MD5.7F0E061F5B6F311013968503D4C1D052] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe [392872] [PID.2688] =>.Mozilla Corporation® [MD5.C73E9C1B84D8F2D1FC03D661895E94E0] - (...) -- C:\Windows\Temp\tmp694C.tmp [172841] [PID.2336] [MD5.A5A9C15C851F41E985E7C67FE7938E44] - (.Nicolas Coolman - ZHPDiag.) -- C:\Users\Rafika\Downloads\ZHPDiag3.exe [2148352] [PID.1296] =>.Nicolas Coolman ---\\ Firefox, Plugins,Demarrage,Recherche,Extensions (8) - 2s M0 - MFSP: prefs.js [Rafika - ht63i2gx.default] https://www.google.com/?trackid=sp-006 P2 - EXT FILE: (...) -- C:\Users\Rafika\AppData\Roaming\Mozilla\Firefox\Profiles\ht63i2gx.default\extensions\langpack-fr@firefox.mozilla.org.xpi P2 - EXT FILE: (...) -- C:\Users\Rafika\AppData\Roaming\Mozilla\Firefox\Profiles\ht63i2gx.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi P2 - EXT FILE: (...) -- C:\Users\Rafika\AppData\Roaming\Mozilla\Firefox\Profiles\ht63i2gx.default\searchplugins\findit.xml =>PUP.Optional.SmartBar P2 - EXT FILE: (...) -- C:\Users\Rafika\AppData\Roaming\Mozilla\Firefox\Profiles\ht63i2gx.default\searchplugins\google-avast.xml P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\browser\searchplugins\findit.xml =>PUP.Optional.SmartBar P2 - EXT: (.Mozilla - Default.) -- C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} =>.Mozilla P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Macromed\Flash\NPSWF32_20_0_0_286.dll =>.Adobe Systems Incorporated ---\\ Internet Explorer,Démarrage,Recherche,URLSearchHook (8) - 0s R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://%66%65%65%64.%73%6E%61%70%64%6F.%63%6F%6D/?p=mKO_AwFzXIpYRYEqQao2TxTGptbOxpBNfqeE93ivyubfCQANQ9miw3Gl3Y9j65DgLf-t6KN4fDEhGM-vyK6_1pbf0b9an5-gZeuf0ayblIj4x8kugdH2YjI1bIV9pZ-deyP93Q-OzX3h0QmUKT2461LP0rasDTh8ZrsC8q4i2S9Gm-jP0TjohS_QXEUFu6_fqQr2BkkvtFc, =>PUP.Optional.Linkury R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.hao123.com/ =>PUP.Optional.Browser R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://%66%65%65%64.%73%6f%6e%69%63-%73%65%61%72%63%68.%63%6f%6d/?p=mko_awfzxipyryeqqao2txtgptboxpbnfqee93ivyubfcqanq9miw3gl3y9j65dglf-t6kn4fdehgm-vyk6_1pbf0b9an5-gzeuf0ayblij4x8xi0g2-ydj9myrzkpugbogvhmy-m1w7wnkp8nztanxj0hd-qaghp4javgfyjkgxy1vu2lnqjuzskwxr9xccde_lsa3xsfe,&q={searchterms} =>PUP.Optional.Linkury R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://%66%65%65%64.%73%6f%6e%69%63-%73%65%61%72%63%68.%63%6f%6d/?p=mko_awfzxipyryeqqao2txtgptboxpbnfqee93ivyubfcqanq9miw3gl3y9j65dglf-t6kn4fdehgm-vyk6_1pbf0b9an5-gzeuf0ayblij4x8xi0g2-ydj9myrzkpugbogvhmy-m1w7wnkp8nztanxj0hd-qaghp4javgfyjkgxy1vu2lnqjuzskwxr9xccde_lsa3xsfe,&q={searchterms} =>PUP.Optional.Linkury R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://%66%65%65%64.%73%6f%6e%69%63-%73%65%61%72%63%68.%63%6f%6d/?p=mko_awfzxipyryeqqao2txtgptboxpbnfqee93ivyubfcqanq9miw3gl3y9j65dglf-t6kn4fdehgm-vyk6_1pbf0b9an5-gzeuf0ayblij4x8xi0g2-ydj9myrzkpugbogvhmy-m1w7wnkp8nztanxj0hd-qaghp4javgfyjkgxy1vu2lnqjuzskwxr9xccde_lsa3xsfe,&q={searchterms} =>PUP.Optional.Linkury R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchUrl,Default = http://%66%65%65%64.%73%6f%6e%69%63-%73%65%61%72%63%68.%63%6f%6d/?p=mko_awfzxipyryeqqao2txtgptboxpbnfqee93ivyubfcqanq9miw3gl3y9j65dglf-t6kn4fdehgm-vyk6_1pbf0b9an5-gzeuf0ayblij4x8xi0g2-ydj9myrzkpugbogvhmy-m1w7wnkp8nztanxj0hd-qaghp4javgfyjkgxy1vu2lnqjuzskwxr9xccde_lsa3xsfe,&q={searchterms} =>PUP.Optional.Linkury R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphean =>.Microsoft Internet Explorer ---\\ Internet Explorer,Proxy Management (4) - 0s R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll ---\\ Internet Explorer,IniFiles, Autoloading programs (4) - 1s F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe (.Microsoft Corporation.) =>.Microsoft Corporation F2 - REG:system.ini: Shell=C:\Windows\explorer.exe (.Microsoft Corporation.) =>.Microsoft Corporation F2 - REG:system.ini: VMApplet=C:\Windows\system32\SystemPropertiesPerformance.exe (.Microsoft Corporation.) =>.Microsoft Corporation F3 - REG:win.ini: load=C:\ProgramData\msrdboyx.exe ---\\ Etude du fichier hosts (1) - 0s ~ Le fichier hôte est sain (The hosts file is clean) (21) ---\\ Browser Helper Object de navigateur (BHO) (7) - 0s O2 - BHO: BDHOOK - {15DEE173-1BE9-4424-81E0-58A87076E9B1} . (.百度在线网络技术(北京)有限公司 - 百度杀毒上网安全引擎.) -- C:\Program Files\Common Files\Baidu\WebSafe\WebMonBHO.dll =>.Baidu (China) Co., Ltd.® O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll =>.Adobe Systems, Incorporated® O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} . (.Microsoft Corporation - Microsoft SharePoint Workspace Extensions.) -- C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL =>.Microsoft Corporation® O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - IE Webrep plugin.) -- C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll =>.AVAST Software a.s.® O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} . (.Microsoft Corporation - Skype Click to Call IE Add-on.) -- C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll =>.Skype Software Sarl® O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} . (.Microsoft Corporation - Microsoft Office Document Cache Handler.) -- C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL =>.Microsoft Corporation® O2 - BHO: LinkVerifierBHO - {D5974A72-C81C-4DC3-BE77-A8A7BBC8864E} . (.Speedbit Ltd. - DAP Link Verification Extension.) -- C:\Program Files\DAP\LinkVerifier.dll {699AEB21842CD56CA7A7FC71BB394361} =>.Speedbit Ltd. ---\\ Applications lancées au démarrage du système (14) - 1s O4 - HKLM\..\Run: [USB3MON] . (.Intel Corporation - Intel(R) USB 3.0 Monitor.) -- C:\Program Files\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe =>.Intel Corporation® O4 - HKLM\..\Run: [setup] . (...) -- C:\Users\Rafika\AppData\Local\Temp\setup.exe O4 - HKLM\..\Run: [baiduAnTray] C:\Program Files\Baidu\BaiduAn\4.0.0.8029\baiduAnTray.exe (.not file.) O4 - HKLM\..\Run: [AvastUI.exe] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\avastui.exe =>.AVAST Software a.s.® O4 - HKCU\..\Run: [DriverFinder] . (.DriverFinder™ is a top-rated PC driver tool that scan - DriverFinder.) -- C:\Program Files\DriverFinder\DriverFinder.exe =>PUP.Optional.DriverFinder O4 - HKCU\..\Run: [DownloadAccelerator] . (.Speedbit Ltd. - Download Accelerator Plus (DAP).) -- C:\Program Files\DAP\DAP.exe {699AEB21842CD56CA7A7FC71BB394361} =>.Speedbit Ltd. O4 - HKCU\..\Run: [{2D483F38-FCE3-4967-A495-D969B77D1C9B}] . (.Microsoft Corporation - Windows PowerShell.) -- C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-21-1737816693-1521600698-4294802501-1000\..\Run: [DriverFinder] . (.DriverFinder™ is a top-rated PC driver tool that scan - DriverFinder.) -- C:\Program Files\DriverFinder\DriverFinder.exe =>PUP.Optional.DriverFinder O4 - HKUS\S-1-5-21-1737816693-1521600698-4294802501-1000\..\Run: [DownloadAccelerator] . (.Speedbit Ltd. - Download Accelerator Plus (DAP).) -- C:\Program Files\DAP\DAP.exe {699AEB21842CD56CA7A7FC71BB394361} =>.Speedbit Ltd. O4 - HKUS\S-1-5-21-1737816693-1521600698-4294802501-1000\..\Run: [{2D483F38-FCE3-4967-A495-D969B77D1C9B}] . (.Microsoft Corporation - Windows PowerShell.) -- C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe =>.Microsoft Corporation ---\\ Raccourcis Global Startup (21) - 7s O4 - GS\Desktop [Administrateur]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Users\Rafika\AppData\Local\Google\Chrome\Application\chrome.exe =>.Google Inc® O4 - GS\Desktop [Administrateur]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files\Mozilla Firefox\firefox.exe =>.Mozilla Corporation® O4 - GS\Desktop [Administrateur]: Revo Uninstaller.lnk . (.VS Revo Group - Revo Uninstaller.) C:\Program Files\VS Revo Group\Revo Uninstaller\Revouninstaller.exe =>.VS Revo Group® O4 - GS\Desktop [Administrateur]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\Rafika\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman O4 - GS\Quicklaunch [Administrateur]: ÃÀͼä¯ÀÀ.lnk . (.STA - MTview.) C:\Program Files\MTV20160128\MTView.exe =>.Superfluous.ZhuWeiqin O4 - GS\sendTo [Administrateur]: Skype.lnk . (.Skype Technologies S.A. - Skype.) C:\Program Files\Skype\Phone\Skype.exe =>.Skype Software Sarl® O4 - GS\TaskBar [Administrateur]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files\Mozilla Firefox\firefox.exe =>.Mozilla Corporation® O4 - GS\Desktop [Rafika]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Users\Rafika\AppData\Local\Google\Chrome\Application\chrome.exe =>.Google Inc® O4 - GS\Desktop [Rafika]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files\Mozilla Firefox\firefox.exe =>.Mozilla Corporation® O4 - GS\Desktop [Rafika]: Revo Uninstaller.lnk . (.VS Revo Group - Revo Uninstaller.) C:\Program Files\VS Revo Group\Revo Uninstaller\Revouninstaller.exe =>.VS Revo Group® O4 - GS\Desktop [Rafika]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\Rafika\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman O4 - GS\Quicklaunch [Rafika]: ÃÀͼä¯ÀÀ.lnk . (.STA - MTview.) C:\Program Files\MTV20160128\MTView.exe =>.Superfluous.ZhuWeiqin O4 - GS\sendTo [Rafika]: Skype.lnk . (.Skype Technologies S.A. - Skype.) C:\Program Files\Skype\Phone\Skype.exe =>.Skype Software Sarl® O4 - GS\TaskBar [Rafika]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files\Mozilla Firefox\firefox.exe =>.Mozilla Corporation® O4 - GS\CommonDesktop [Public]: Achat de consommables - HP Deskjet 2640 series.lnk . (.Hewlett-Packard Co. - DesktopSureSupply.) C:\Program Files\HP\HP Deskjet 2640 series\Bin\hpqDTSS.exe =>.Hewlett Packard® O4 - GS\CommonDesktop [Public]: Adobe Reader XI.lnk . (.Adobe Systems Incorporated - Adobe Reader.) C:\Program Files\Adobe\Reader 11.0\Reader\AcroRd32.exe =>.Adobe Systems, Incorporated® O4 - GS\CommonDesktop [Public]: Avast Free Antivirus.lnk . (.AVAST Software - avast! Antivirus.) C:\Program Files\AVAST Software\Avast\avastui.exe =>.AVAST Software a.s.® O4 - GS\CommonDesktop [Public]: HP Deskjet 2640 series.lnk . (.Hewlett-Packard Co. - HP Printer Assistant.) C:\Program Files\HP\HP Deskjet 2640 series\Bin\HP Deskjet 2640 series.exe =>.Hewlett Packard® O4 - GS\CommonDesktop [Public]: Skype.lnk . (...) C:\Windows\Installer\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}\SkypeIcon.exe O4 - GS\CommonDesktop [Public]: VLC media player.lnk . (.VideoLAN - VLC media player.) C:\Program Files\VideoLAN\VLC\vlc.exe =>.VideoLAN® O4 - GS\SystemTools [Public]: Task Scheduler.lnk . (...) C:\Windows\system32\taskschd.msc ---\\ Modification Domaine/Adresses DNS (6) - 0s O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpDomain = lan O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{5B817758-5A43-46AC-B925-5175C61BE716}: DhcpNameServer = 192.168.1.254 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{886E93D1-8B66-408E-902F-9D08C9324574}: DhcpNameServer = 192.168.1.254 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{5B817758-5A43-46AC-B925-5175C61BE716}: DhcpDomain = lan O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{886E93D1-8B66-408E-902F-9D08C9324574}: DhcpDomain = lan ---\\ Protocole additionnel (25) - 1s O18 - Handler: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\MSVidCtl.dll =>.Microsoft Corporation O18 - Handler: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation O18 - Handler: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation O18 - Handler: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation O18 - Handler: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation O18 - Handler: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll =>.Microsoft Corporation O18 - Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation O18 - Handler: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation O18 - Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\System32\inetcomm.dll =>.Microsoft Corporation O18 - Handler: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation O18 - Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} . (.Microsoft Corporation - Microsoft® Help Data Services Module.) -- C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll =>.Microsoft Corporation® O18 - Handler: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll =>.Microsoft Corporation O18 - Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation O18 - Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} . (.Microsoft Corporation - Skype Click to Call IE Add-on.) -- C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll =>.Skype Software Sarl® O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\MSVidCtl.dll =>.Microsoft Corporation O18 - Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation O18 - Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation® O18 - Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation® O18 - Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation® O18 - Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation O18 - Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation O18 - Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL =>.Microsoft Corporation® ---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (1) - 0s O20 - AppInit_DLLs: . (...) - C:\ProgramData\Ronzap\Indigotintech.dll ---\\ Logiciels installés (25) - 13s O42 - Logiciel: Acer System Information - (.Acer.) [HKLM] -- {72199E33-4F2A-4B7F-8E25-95DDDD50A678} =>.Acer O42 - Logiciel: Adobe Flash Player 20 NPAPI - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player NPAPI =>.Adobe Systems Incorporated® O42 - Logiciel: Adobe Reader XI MUI - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-FFFF-7B44-AB0000000001} =>.Adobe Systems Incorporated O42 - Logiciel: AppHelper - (.AppHelper.) [HKLM] -- AppHelper O42 - Logiciel: Avast Free Antivirus - (.AVAST Software.) [HKLM] -- Avast =>.AVAST Software a.s.® O42 - Logiciel: Broadcom NetXtreme-I Netlink Driver and Management Installer - (.Broadcom Corporation.) [HKLM] -- {47B8DBFC-2891-480C-92D6-92143AD0D027} =>.Broadcom Corporation O42 - Logiciel: Download Accelerator Plus (DAP) - (.Speedbit Ltd..) [HKLM] -- Download Accelerator Plus (DAP) {699AEB21842CD56CA7A7FC71BB394361} =>.Speedbit Ltd. O42 - Logiciel: DriverFinder - (.DeskToolsSoft.) [HKLM] -- DriverFinder =>PUP.Optional.DriverFinder O42 - Logiciel: Google Chrome - (.Google Inc..) [HKCU] -- Google Chrome =>.Google Inc® O42 - Logiciel: Intel(R) USB 3.0 eXtensible Host Controller Driver - (.Intel Corporation.) [HKLM] -- {240C3DDD-C5E9-4029-9DF7-95650D040CF2} =>.Intel Corporation® O42 - Logiciel: Logiciel de base du périphérique HP Deskjet 2640 series - (.Hewlett-Packard Co..) [HKLM] -- {19BAF8FE-41A5-45BC-83CF-3E7BA3399ED6} =>.Hewlett-Packard Co. O42 - Logiciel: Mozilla Firefox 34.0 (x86 en-US) - (.Mozilla.) [HKLM] -- Mozilla Firefox 34.0 (x86 en-US) =>.Mozilla Corporation® O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM] -- MozillaMaintenanceService =>.Mozilla O42 - Logiciel: Package de pilotes Windows - Broadcom (b57nd60x) Net (08/27/2012 15.4.0.16 - (.Broadcom.) [HKLM] -- 54557E97908EA80EA9A9B8416DE9AC7A21D0586C =>.Microsoft Windows® O42 - Logiciel: Package de pilotes Windows - Broadcom (k57nd60x) Net (08/25/2012 15.4.0.9) - (.Broadcom.) [HKLM] -- C243C214839DCEF03E0C8FAC89F057152E31A8C1 =>.Microsoft Windows® O42 - Logiciel: Package de pilotes Windows - Qualcomm Atheros, Inc. (Ak27x86) Net (09/04/2 - (.Qualcomm Atheros, Inc..) [HKLM] -- 2ECF437D11A40B116F7E140B4E1F9ECC003543AF =>.Microsoft Windows® O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC} =>.Realtek Semiconductor Corp. O42 - Logiciel: Revo Uninstaller 1.95 - (.VS Revo Group.) [HKLM] -- Revo Uninstaller =>.VS Revo Group O42 - Logiciel: Skype Click to Call - (.Microsoft Corporation.) [HKLM] -- {6D1221A9-17BF-4EC0-81F2-27D30EC30701} =>.Microsoft Corporation O42 - Logiciel: Skype™ 7.6 - (.Skype Technologies S.A..) [HKLM] -- {24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7} =>.Skype Technologies S.A. O42 - Logiciel: SnapDo - (.Resoft.) [HKLM] -- {01AFA975-4D21-4FBF-9768-020FA8F1947C} =>PUP.Optional.SmartBar O42 - Logiciel: TeraCopy 2.27 - (.Code Sector.) [HKLM] -- TeraCopy_is1 {27FDC908767179534AB3EBBA1D098533} =>.Code Sector O42 - Logiciel: Unlocker 1.9.2 - (.Cedrick Collomb.) [HKLM] -- Unlocker =>.Cedrick Collomb O42 - Logiciel: VLC media player - (.VideoLAN.) [HKLM] -- VLC media player =>.VideoLAN O42 - Logiciel: WinRAR 5.20 (32-bit) - (.win.rar GmbH.) [HKLM] -- WinRAR archiver =>.win.rar GmbH® ---\\ HKCU & HKLM Software Keys (77) - 13s HKLM\SOFTWARE\Adobe HKLM\SOFTWARE\ATI Technologies HKLM\SOFTWARE\AVAST Software HKLM\SOFTWARE\Baidu HKLM\SOFTWARE\Broadcom HKLM\SOFTWARE\BSD HKLM\SOFTWARE\Code Sector HKLM\SOFTWARE\Dell HKLM\SOFTWARE\DevID HKLM\SOFTWARE\Dolby HKLM\SOFTWARE\DriverFinder =>PUP.Optional.DriverFinder HKLM\SOFTWARE\DTS HKLM\SOFTWARE\Google HKLM\SOFTWARE\Hewlett-Packard HKLM\SOFTWARE\HP HKLM\SOFTWARE\IM Providers HKLM\SOFTWARE\Intel HKLM\SOFTWARE\Knowles HKLM\SOFTWARE\Licenses HKLM\SOFTWARE\Macromedia HKLM\SOFTWARE\Mozilla HKLM\SOFTWARE\mozilla.org HKLM\SOFTWARE\MozillaPlugins HKLM\SOFTWARE\mtRonzap HKLM\SOFTWARE\mtserfev HKLM\SOFTWARE\Nahimic HKLM\SOFTWARE\Nuance HKLM\SOFTWARE\ODBC HKLM\SOFTWARE\Realtek HKLM\SOFTWARE\Realtek Semiconductor Corp. HKLM\SOFTWARE\RegisteredApplications HKLM\SOFTWARE\Rtp HKLM\SOFTWARE\Skype HKLM\SOFTWARE\Sonic HKLM\SOFTWARE\SonicFocus HKLM\SOFTWARE\SpeedBit HKLM\SOFTWARE\SRS Labs HKLM\SOFTWARE\Tencent =>.Superfluous.Tencent HKLM\SOFTWARE\TOSHIBA HKLM\SOFTWARE\TweakBit HKLM\SOFTWARE\VideoLAN HKLM\SOFTWARE\Waves Audio HKLM\SOFTWARE\WinRAR HKCU\SOFTWARE\Acer HKCU\SOFTWARE\Adobe HKCU\SOFTWARE\AppDataLow HKCU\SOFTWARE\AVAST Software HKCU\SOFTWARE\Broadcom HKCU\SOFTWARE\BSD HKCU\SOFTWARE\Code Sector HKCU\SOFTWARE\DevID HKCU\SOFTWARE\DriverFinder =>PUP.Optional.DriverFinder HKCU\SOFTWARE\DriverToolkit =>.Superfluous.DriverToolkit HKCU\SOFTWARE\DRPSu Updater HKCU\SOFTWARE\Déesse Développements HKCU\SOFTWARE\Google HKCU\SOFTWARE\HP HKCU\SOFTWARE\IM Providers HKCU\SOFTWARE\KliSud HKCU\SOFTWARE\Macromedia HKCU\SOFTWARE\Mozilla HKCU\SOFTWARE\MozillaPlugins HKCU\SOFTWARE\mtRonzap HKCU\SOFTWARE\Netscape HKCU\SOFTWARE\ODBC HKCU\SOFTWARE\PC SOFT HKCU\SOFTWARE\Realtek HKCU\SOFTWARE\Rtp HKCU\SOFTWARE\Skype HKCU\SOFTWARE\SpeedBit HKCU\SOFTWARE\STA =>.Superfluous.ZhuWeiqin HKCU\SOFTWARE\TeleCharger =>.Superfluous.Downloader HKCU\SOFTWARE\Tencent =>.Superfluous.Tencent HKCU\SOFTWARE\VSRevoGroup HKCU\SOFTWARE\WinRAR HKCU\SOFTWARE\WinRAR SFX HKCU\SOFTWARE\ZebHelpProcess Helper ---\\ Contenu des dossiers Programmes (164) - 24s O43 - CFD: 06/12/2014 - [] D -- C:\Program Files\Acer O43 - CFD: 07/12/2014 - [] D -- C:\Program Files\Adobe =>.Adobe Systems, Incorporated® O43 - CFD: 06/12/2014 - [] D -- C:\Program Files\ATI O43 - CFD: 06/12/2014 - [0] D -- C:\Program Files\ATI Technologies O43 - CFD: 28/02/2016 - [] D -- C:\Program Files\AVAST Software =>.AVAST Software a.s.® O43 - CFD: 01/03/2016 - [] D -- C:\Program Files\BitTorrent O43 - CFD: 07/12/2014 - [] D -- C:\Program Files\Broadcom O43 - CFD: 28/02/2016 - [] D -- C:\Program Files\Common Files O43 - CFD: 28/02/2016 - [] D -- C:\Program Files\DAP {699AEB21842CD56CA7A7FC71BB394361} O43 - CFD: 05/12/2014 - [] D -- C:\Program Files\DIFX =>.Microsoft Windows® O43 - CFD: 07/12/2014 - [] D -- C:\Program Files\DriverFinder =>PUP.Optional.DriverFinder O43 - CFD: 05/12/2014 - [0] D -- C:\Program Files\DriverPack Solution Installer 13 O43 - CFD: 06/12/2014 - [] D -- C:\Program Files\DriverToolkit =>.Superfluous.DriverToolkit O43 - CFD: 14/07/2009 - [] D -- C:\Program Files\DVD Maker O43 - CFD: 04/12/2014 - [0] SHD -- C:\Program Files\Fichiers communs O43 - CFD: 09/03/2015 - [] D -- C:\Program Files\HP =>.Hewlett Packard® O43 - CFD: 07/12/2014 - [] HD -- C:\Program Files\InstallShield Installation Information =>.Macrovision Corporation® O43 - CFD: 07/12/2014 - [] D -- C:\Program Files\Intel =>.Intel Corporation® O43 - CFD: 07/12/2014 - [] D -- C:\Program Files\Internet Explorer O43 - CFD: 25/02/2016 - [] D -- C:\Program Files\Microsoft Analysis Services O43 - CFD: 07/12/2014 - [] D -- C:\Program Files\Microsoft Games O43 - CFD: 25/02/2016 - [] D -- C:\Program Files\Microsoft Office =>.Microsoft Corporation® O43 - CFD: 25/02/2016 - [] D -- C:\Program Files\Microsoft SQL Server Compact Edition O43 - CFD: 25/02/2016 - [] D -- C:\Program Files\Microsoft Sync Framework O43 - CFD: 25/02/2016 - [] D -- C:\Program Files\Microsoft Synchronization Services O43 - CFD: 25/02/2016 - [] D -- C:\Program Files\Microsoft Visual Studio 8 O43 - CFD: 25/02/2016 - [] D -- C:\Program Files\Microsoft.NET O43 - CFD: 28/02/2016 - [] D -- C:\Program Files\Mozilla Firefox =>.Mozilla Corporation® O43 - CFD: 07/12/2014 - [] D -- C:\Program Files\Mozilla Maintenance Service =>.Mozilla Corporation® O43 - CFD: 25/02/2016 - [] D -- C:\Program Files\MSBuild O43 - CFD: 25/02/2016 - [] D -- C:\Program Files\MTV20160128 =>.Superfluous.ZhuWeiqin O43 - CFD: 07/12/2014 - [] D -- C:\Program Files\Realtek =>.Realtek Semiconductor Corp® O43 - CFD: 14/07/2009 - [] D -- C:\Program Files\Reference Assemblies O43 - CFD: 20/01/2016 - [] RD -- C:\Program Files\Skype =>.Skype Software Sarl® O43 - CFD: 07/12/2014 - [0] HD -- C:\Program Files\Temp O43 - CFD: 25/02/2016 - [] D -- C:\Program Files\Tencent =>.Superfluous.Tencent O43 - CFD: 07/12/2014 - [] D -- C:\Program Files\TeraCopy {27FDC908767179534AB3EBBA1D098533} O43 - CFD: 14/07/2009 - [0] HD -- C:\Program Files\Uninstall Information O43 - CFD: 07/12/2014 - [] D -- C:\Program Files\Unlocker O43 - CFD: 07/12/2014 - [] D -- C:\Program Files\VideoLAN O43 - CFD: 25/02/2016 - [] D -- C:\Program Files\VS Revo Group =>.VS Revo Group® O43 - CFD: 14/07/2009 - [] D -- C:\Program Files\Windows Defender O43 - CFD: 14/07/2009 - [] D -- C:\Program Files\Windows Mail O43 - CFD: 14/07/2009 - [] D -- C:\Program Files\Windows Media Player O43 - CFD: 04/12/2014 - [] D -- C:\Program Files\Windows NT O43 - CFD: 14/07/2009 - [] D -- C:\Program Files\Windows Photo Viewer =>.Microsoft Corporation® O43 - CFD: 14/07/2009 - [] D -- C:\Program Files\Windows Portable Devices O43 - CFD: 14/07/2009 - [] D -- C:\Program Files\Windows Sidebar O43 - CFD: 06/12/2014 - [] D -- C:\Program Files\WinRAR =>.win.rar GmbH® O43 - CFD: 07/12/2014 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories O43 - CFD: 06/12/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer O43 - CFD: 14/07/2009 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools O43 - CFD: 28/02/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software O43 - CFD: 07/12/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Broadcom O43 - CFD: 06/12/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Download Accelerator Plus (DAP) O43 - CFD: 07/12/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriverFinder =>PUP.Optional.DriverFinder O43 - CFD: 07/12/2014 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games O43 - CFD: 09/03/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP O43 - CFD: 14/07/2009 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance O43 - CFD: 25/02/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office O43 - CFD: 25/02/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SharePoint O43 - CFD: 14/07/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype O43 - CFD: 14/07/2009 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup O43 - CFD: 07/12/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeraCopy O43 - CFD: 07/12/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN O43 - CFD: 06/12/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR O43 - CFD: 25/02/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ÃÀͼä¯ÀÀ O43 - CFD: 28/02/2016 - [] D -- C:\ProgramData\Adobe O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Application Data O43 - CFD: 28/02/2016 - [] D -- C:\ProgramData\AVAST Software O43 - CFD: 25/02/2016 - [] D -- C:\ProgramData\Baidu O43 - CFD: 05/12/2014 - [] D -- C:\ProgramData\BSD O43 - CFD: 04/12/2014 - [0] SHD -- C:\ProgramData\Bureau O43 - CFD: 25/02/2016 - [] D -- C:\ProgramData\CloudPrinter O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Desktop O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Documents O43 - CFD: 04/12/2014 - [0] SHD -- C:\ProgramData\Favoris O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Favorites O43 - CFD: 09/03/2015 - [] D -- C:\ProgramData\HP O43 - CFD: 04/12/2014 - [0] SHD -- C:\ProgramData\Menu Démarrer O43 - CFD: 25/02/2016 - [] SD -- C:\ProgramData\Microsoft O43 - CFD: 25/02/2016 - [] D -- C:\ProgramData\Microsoft Help O43 - CFD: 04/12/2014 - [0] SHD -- C:\ProgramData\Modèles O43 - CFD: 06/12/2014 - [] D -- C:\ProgramData\Mozilla O43 - CFD: 28/02/2016 - [] D -- C:\ProgramData\Ronzap O43 - CFD: 25/02/2016 - [] D -- C:\ProgramData\Ronzaps O43 - CFD: 28/02/2016 - [] D -- C:\ProgramData\serfev O43 - CFD: 25/02/2016 - [] D -- C:\ProgramData\serfevs O43 - CFD: 14/07/2015 - [] D -- C:\ProgramData\Skype O43 - CFD: 07/12/2014 - [] D -- C:\ProgramData\Sony Corporation O43 - CFD: 06/12/2014 - [] D -- C:\ProgramData\SpeedBit O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Start Menu O43 - CFD: 09/03/2016 - [0] AD -- C:\ProgramData\TEMP O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Templates O43 - CFD: 25/02/2016 - [] D -- C:\ProgramData\Tencent =>.Superfluous.Tencent O43 - CFD: 05/12/2014 - [] D -- C:\ProgramData\TweakBit O43 - CFD: 25/02/2016 - [] D -- C:\ProgramData\TXQMPC O43 - CFD: 04/03/2016 - [] D -- C:\Program Files\Common Files\3xfvkuf0 O43 - CFD: 07/12/2014 - [] D -- C:\Program Files\Common Files\Adobe O43 - CFD: 28/02/2016 - [] D -- C:\Program Files\Common Files\AV O43 - CFD: 25/02/2016 - [] D -- C:\Program Files\Common Files\Baidu O43 - CFD: 25/02/2016 - [] D -- C:\Program Files\Common Files\DESIGNER O43 - CFD: 04/03/2016 - [] D -- C:\Program Files\Common Files\fgoamzsw O43 - CFD: 07/12/2014 - [] D -- C:\Program Files\Common Files\InstallShield O43 - CFD: 04/03/2016 - [] D -- C:\Program Files\Common Files\inwhk3r2 O43 - CFD: 25/02/2016 - [] D -- C:\Program Files\Common Files\microsoft shared O43 - CFD: 03/03/2016 - [] D -- C:\Program Files\Common Files\nf022dma O43 - CFD: 06/03/2016 - [] D -- C:\Program Files\Common Files\pk0bvnei O43 - CFD: 14/07/2009 - [] D -- C:\Program Files\Common Files\Services O43 - CFD: 14/07/2015 - [] D -- C:\Program Files\Common Files\Skype O43 - CFD: 28/02/2016 - [] D -- C:\Program Files\Common Files\smt1rz4x O43 - CFD: 25/02/2016 - [] D -- C:\Program Files\Common Files\Soltone O43 - CFD: 14/07/2009 - [] D -- C:\Program Files\Common Files\SpeechEngines O43 - CFD: 25/02/2016 - [] D -- C:\Program Files\Common Files\System O43 - CFD: 25/02/2016 - [] D -- C:\Program Files\Common Files\Tencent =>.Superfluous.Tencent O43 - CFD: 06/03/2016 - [] D -- C:\Program Files\Common Files\ywvris3z O43 - CFD: 09/12/2014 - [] D -- C:\Users\Rafika\AppData\Roaming\Adobe O43 - CFD: 28/02/2016 - [] D -- C:\Users\Rafika\AppData\Roaming\AVAST Software O43 - CFD: 25/02/2016 - [] D -- C:\Users\Rafika\AppData\Roaming\Baidu O43 - CFD: 07/12/2014 - [] D -- C:\Users\Rafika\AppData\Roaming\DriverFinder =>PUP.Optional.DriverFinder O43 - CFD: 06/12/2014 - [] D -- C:\Users\Rafika\AppData\Roaming\driveridentifier O43 - CFD: 07/12/2014 - [0] D -- C:\Users\Rafika\AppData\Roaming\DRPSu O43 - CFD: 21/02/2016 - [] D -- C:\Users\Rafika\AppData\Roaming\dvdcss O43 - CFD: 04/12/2014 - [] D -- C:\Users\Rafika\AppData\Roaming\Identities O43 - CFD: 07/12/2014 - [] D -- C:\Users\Rafika\AppData\Roaming\Macromedia O43 - CFD: 14/07/2009 - [0] D -- C:\Users\Rafika\AppData\Roaming\Media Center Programs O43 - CFD: 25/02/2016 - [] SD -- C:\Users\Rafika\AppData\Roaming\Microsoft O43 - CFD: 06/12/2014 - [] D -- C:\Users\Rafika\AppData\Roaming\Mozilla O43 - CFD: 28/02/2016 - [0] D -- C:\Users\Rafika\AppData\Roaming\notepad O43 - CFD: 23/11/2015 - [] D -- C:\Users\Rafika\AppData\Roaming\Skype O43 - CFD: 06/12/2014 - [] D -- C:\Users\Rafika\AppData\Roaming\SpeedBit O43 - CFD: 25/02/2016 - [] D -- C:\Users\Rafika\AppData\Roaming\Tencent =>.Superfluous.Tencent O43 - CFD: 07/12/2014 - [] D -- C:\Users\Rafika\AppData\Roaming\TeraCopy O43 - CFD: 26/02/2016 - [] D -- C:\Users\Rafika\AppData\Roaming\vlc O43 - CFD: 07/12/2014 - [] D -- C:\Users\Rafika\AppData\Roaming\WinBatch O43 - CFD: 06/12/2014 - [] D -- C:\Users\Rafika\AppData\Roaming\WinRAR O43 - CFD: 09/03/2016 - [] D -- C:\Users\Rafika\AppData\Roaming\ZHP O43 - CFD: 31/05/2015 - [] D -- C:\Users\Rafika\AppData\Local\Adobe O43 - CFD: 04/12/2014 - [0] SHD -- C:\Users\Rafika\AppData\Local\Application Data O43 - CFD: 26/02/2016 - [] D -- C:\Users\Rafika\AppData\Local\Diagnostics O43 - CFD: 07/12/2014 - [] D -- C:\Users\Rafika\AppData\Local\Downloaded Installations O43 - CFD: 05/12/2014 - [0] D -- C:\Users\Rafika\AppData\Local\DriverToolkit =>.Superfluous.DriverToolkit O43 - CFD: 24/08/2015 - [] D -- C:\Users\Rafika\AppData\Local\Google O43 - CFD: 04/12/2014 - [0] SHD -- C:\Users\Rafika\AppData\Local\Historique O43 - CFD: 09/03/2015 - [] D -- C:\Users\Rafika\AppData\Local\HP O43 - CFD: 07/12/2014 - [] D -- C:\Users\Rafika\AppData\Local\Macromedia O43 - CFD: 24/03/2015 - [] D -- C:\Users\Rafika\AppData\Local\Microsoft O43 - CFD: 19/12/2014 - [] D -- C:\Users\Rafika\AppData\Local\Microsoft Games O43 - CFD: 25/02/2016 - [] D -- C:\Users\Rafika\AppData\Local\Microsoft Help O43 - CFD: 06/12/2014 - [] D -- C:\Users\Rafika\AppData\Local\Mozilla O43 - CFD: 05/12/2014 - [] D -- C:\Users\Rafika\AppData\Local\Programs O43 - CFD: 14/07/2015 - [] D -- C:\Users\Rafika\AppData\Local\Skype O43 - CFD: 09/03/2016 - [] D -- C:\Users\Rafika\AppData\Local\Temp O43 - CFD: 04/12/2014 - [0] SHD -- C:\Users\Rafika\AppData\Local\Temporary Internet Files O43 - CFD: 25/02/2016 - [] D -- C:\Users\Rafika\AppData\Local\VirtualStore O43 - CFD: 14/07/2009 - [] RD -- C:\Users\Rafika\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories O43 - CFD: 04/12/2014 - [] RD -- C:\Users\Rafika\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools O43 - CFD: 24/08/2015 - [] D -- C:\Users\Rafika\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome O43 - CFD: 14/07/2009 - [] RD -- C:\Users\Rafika\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance O43 - CFD: 25/02/2016 - [] D -- C:\Users\Rafika\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller O43 - CFD: 28/02/2016 - [] RD -- C:\Users\Rafika\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup O43 - CFD: 07/12/2014 - [] D -- C:\Users\Rafika\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Unlocker O43 - CFD: 06/12/2014 - [] D -- C:\Users\Rafika\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR O43 - CFD: 25/02/2016 - [0] D -- C:\Users\Rafika\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\腾讯软件 ---\\ Derniers fichiers créés dans Windows Prefetcher (1) - 14s O45 - LFCP:[MD5.B96DF8105C2AE01A1021E628D3E0FF0F] 04/03/2016 A -- C:\Windows\Prefetch\AUTOKMS.EXE-97B3D7D9.pf =>HackTool.AutoKMS ---\\ ShellIconOverlayIdentifiers (SIOI) (8) - 0s O106 - SIOI: avast [00avast] - {472083B0-C522-11CF-8763-00608CC02F24}. (.AVAST Software - avast! Shell Extension.) -- C:\Program Files\AVAST Software\Avast\ashShell.dll =>.AVAST Software a.s.® O106 - SIOI: Enhanced Storage Icon Overlay Handler Class [EnhancedStorageShell] - {D9144DCD-E998-4ECA-AB6A-DCD83CCBA16D}. (.Microsoft Corporation - DLL d’extension d’environnement de stockage.) -- C:\Windows\System32\EhStorShell.dll =>.Microsoft Corporation O106 - SIOI: Groove Explorer Icon Overlay 1 (GFS Unread Stub) [Groove Explorer Icon Overlay 1 (GFS Unread Stub)] - {99FD978C-D287-4F50-827F-B2C658EDA8E7}. (.Microsoft Corporation - Microsoft SharePoint Workspace Extensions.) -- C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL =>.Microsoft Corporation® O106 - SIOI: Groove Explorer Icon Overlay 2 (GFS Stub) [Groove Explorer Icon Overlay 2 (GFS Stub)] - {AB5C5600-7E6E-4B06-9197-9ECEF74D31CC}. (.Microsoft Corporation - Microsoft SharePoint Workspace Extensions.) -- C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL =>.Microsoft Corporation® O106 - SIOI: Groove Explorer Icon Overlay 2.5 (GFS Unread Folder) [Groove Explorer Icon Overlay 2.5 (GFS Unread Folder)] - {920E6DB1-9907-4370-B3A0-BAFC03D81399}. (.Microsoft Corporation - Microsoft SharePoint Workspace Extensions.) -- C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL =>.Microsoft Corporation® O106 - SIOI: Groove Explorer Icon Overlay 3 (GFS Folder) [Groove Explorer Icon Overlay 3 (GFS Folder)] - {16F3DD56-1AF5-4347-846D-7C10C4192619}. (.Microsoft Corporation - Microsoft SharePoint Workspace Extensions.) -- C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL =>.Microsoft Corporation® O106 - SIOI: Groove Explorer Icon Overlay 4 (GFS Unread Mark) [Groove Explorer Icon Overlay 4 (GFS Unread Mark)] - {2916C86E-86A6-43FE-8112-43ABE6BF8DCC}. (.Microsoft Corporation - Microsoft SharePoint Workspace Extensions.) -- C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL =>.Microsoft Corporation® O106 - SIOI: Sharing Overlay (Private) [SharingPrivate] - {08244EE6-92F0-47f2-9FC9-929BAA2E7235}. (.Microsoft Corporation - Extensions de l’interpréteur de commandes p.) -- C:\Windows\System32\ntshrui.dll =>.Microsoft Corporation ---\\ Enumération des clés StartupReg (9) - 2s O53 - SMSR:HKLM\...\startupreg\Adobe ARM [Key] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe =>.Adobe Systems Incorporated O53 - SMSR:HKLM\...\startupreg\BCSSync [Key] . (.Microsoft Corporation - Microsoft Office 2010 component.) -- C:\Program Files\Microsoft Office\Office14\BCSSync.exe =>.Microsoft Corporation O53 - SMSR:HKLM\...\startupreg\DevidAgent [Key] . (...) -- C:\Users\Rafika\Downloads\Dev_Agent_Setup.exe (.not file.) O53 - SMSR:HKLM\...\startupreg\DownloadAccelerator [Key] . (.Speedbit Ltd. - Download Accelerator Plus (DAP).) -- C:\Program Files\DAP\DAP.exe =>.Speedbit Ltd. O53 - SMSR:HKLM\...\startupreg\DriverFinder [Key] . (.DriverFinder™ is a top-rated PC driver tool that scan - DriverFinder.) -- C:\Program Files\DriverFinder\DriverFinder.exe =>PUP.Optional.DriverFinder O53 - SMSR:HKLM\...\startupreg\DrvUpdater [Key] . (...) -- C:\Users\Rafika\AppData\Roaming\DRPSu\DrvUpdater.exe (.not file.) O53 - SMSR:HKLM\...\startupreg\RTHDVCPL [Key] . (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe =>.Realtek Semiconductor O53 - SMSR:HKLM\...\startupreg\Skype [Key] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe =>.Skype Technologies S.A. O53 - SMSR:HKLM\...\startupreg\UnlockerAssistant [Key] . (...) -- C:\Program Files\Unlocker\UnlockerAssistant.exe ---\\ Liste des pilotes du système (74) - 12s O58 - SDL:2009/07/14 02:26:15 A . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\drivers\adp94xx.sys [422976] =>.Microsoft Windows® O58 - SDL:2009/07/14 02:26:17 A . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\System32\drivers\adpahci.sys [297552] =>.Microsoft Windows® O58 - SDL:2009/07/14 02:26:15 A . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver.) -- C:\Windows\System32\drivers\adpu320.sys [146512] =>.Microsoft Windows® O58 - SDL:2013/09/04 11:52:44 A . (.Qualcomm Atheros, Inc. - Killer Wireless-N 1100-N/1200-N Series LAN.) -- C:\Windows\System32\drivers\Ak27x86.sys [3268816] =>.Qualcomm Atheros, Inc.® O58 - SDL:2009/07/14 02:26:15 A . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\Windows\System32\drivers\aliide.sys [14400] =>.Microsoft Windows® O58 - SDL:2009/07/14 02:26:15 A . (.Advanced Micro Devices - AHCI 1.2 Device Driver.) -- C:\Windows\System32\drivers\amdsata.sys [79952] =>.Microsoft Windows® O58 - SDL:2009/07/14 02:26:15 A . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller D.) -- C:\Windows\System32\drivers\amdsbs.sys [159312] =>.Microsoft Windows® O58 - SDL:2009/07/14 02:26:15 A . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\Windows\System32\drivers\amdxata.sys [23616] =>.Microsoft Windows® O58 - SDL:2009/07/14 02:26:15 A . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\System32\drivers\arc.sys [76368] =>.Microsoft Windows® O58 - SDL:2009/07/14 02:26:15 A . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\System32\drivers\arcsas.sys [86608] =>.Microsoft Windows® O58 - SDL:2016/02/28 19:47:28 A . (.AVAST Software - avast! HWID.) -- C:\Windows\System32\drivers\aswHwid.sys [32792] =>.AVAST Software a.s.® O58 - SDL:2016/02/28 19:47:28 A . (.AVAST Software - avast! File System Minifilter for Windows 2.) -- C:\Windows\System32\drivers\aswMonFlt.sys [91168] =>.AVAST Software a.s.® O58 - SDL:2016/02/28 19:47:28 A . (.AVAST Software - avast! WFP Redirect Driver.) -- C:\Windows\System32\drivers\aswRdr2.sys [91232] =>.AVAST Software a.s.® O58 - SDL:2016/02/28 19:47:28 A . (.AVAST Software - avast! Revert.) -- C:\Windows\System32\drivers\aswRvrt.sys [58776] =>.AVAST Software a.s.® O58 - SDL:2016/02/28 19:47:24 A . (.AVAST Software - avast! Virtualization Driver.) -- C:\Windows\System32\drivers\aswSnx.sys [812720] =>.AVAST Software a.s.® O58 - SDL:2016/02/28 19:48:45 A . (.AVAST Software - avast! self protection module.) -- C:\Windows\System32\drivers\aswSP.sys [447848] =>.AVAST Software a.s.® O58 - SDL:2016/02/28 19:47:28 A . (.AVAST Software - Stream Filter.) -- C:\Windows\System32\drivers\aswStm.sys [127432] =>.AVAST Software a.s.® O58 - SDL:2016/02/28 19:48:25 A . (.AVAST Software - avast! VM Monitor.) -- C:\Windows\System32\drivers\aswVmm.sys [221240] =>.AVAST Software a.s.® O58 - SDL:2009/07/13 23:02:49 A . (.Broadcom Corporation - Pilote unifié NDIS6.x Broadcom NetXtreme Gi.) -- C:\Windows\System32\drivers\b57nd60x.sys [229888] =>.Broadcom Corporation O58 - SDL:2014/02/11 14:32:18 A . (.Broadcom Corporation - Broadcom NetXtreme Unified Crash Dump (x86).) -- C:\Windows\System32\drivers\bnxcd.sys [205520] =>.Broadcom Corporation® O58 - SDL:2009/07/13 23:53:28 A . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower.) -- C:\Windows\System32\drivers\BrFiltLo.sys [13568] =>.Brother Industries, Ltd. O58 - SDL:2009/07/13 23:53:28 A . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper.) -- C:\Windows\System32\drivers\BrFiltUp.sys [5248] =>.Brother Industries, Ltd. O58 - SDL:2009/07/14 01:57:25 A . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\System32\drivers\BrSerId.sys [272128] =>.Brother Industries Ltd. O58 - SDL:2009/07/13 23:53:32 A . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\System32\drivers\BrSerWdm.sys [62336] =>.Brother Industries Ltd. O58 - SDL:2009/07/13 23:53:33 A . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\System32\drivers\BrUsbMdm.sys [12160] =>.Brother Industries Ltd. O58 - SDL:2009/07/13 23:53:33 A . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\System32\drivers\BrUsbSer.sys [11904] =>.Brother Industries Ltd. O58 - SDL:2009/07/13 23:02:48 A . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.) -- C:\Windows\System32\drivers\bxvbdx.sys [430080] =>.Broadcom Corporation O58 - SDL:2009/07/14 02:26:21 A . (.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\cmdide.sys [15952] =>.Microsoft Windows® O58 - SDL:2009/07/14 02:20:28 A . (.Adaptec, Inc. - Adaptec Ultra SCSI miniport.) -- C:\Windows\System32\drivers\djsvs.sys [70720] =>.Microsoft Windows® O58 - SDL:2009/07/14 02:20:28 A . (.Emulex - Storport Miniport Driver for LightPulse HBA.) -- C:\Windows\System32\drivers\elxstor.sys [453712] =>.Microsoft Windows® O58 - SDL:2009/07/13 23:02:48 A . (.Broadcom Corporation - Broadcom NetXtreme II 10 GigE VBD.) -- C:\Windows\System32\drivers\evbdx.sys [3100160] =>.Broadcom Corporation O58 - SDL:2009/07/13 23:54:14 A . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for.) -- C:\Windows\System32\drivers\hcw85cir.sys [26624] =>.Hauppauge Computer Works, Inc. O58 - SDL:2009/07/14 02:20:28 A . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Drive.) -- C:\Windows\System32\drivers\HpSAMD.sys [67152] =>.Microsoft Windows® O58 - SDL:2009/07/14 02:20:36 A . (.Intel Corporation - Intel Matrix Storage Manager driver - ia32.) -- C:\Windows\System32\drivers\iaStorV.sys [332352] =>.Microsoft Windows® O58 - SDL:2009/07/14 02:20:36 A . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\System32\drivers\iirsp.sys [41040] =>.Microsoft Windows® O58 - SDL:2012/10/16 16:53:20 A . (.Intel Corporation - Intel(R) USB 3.0 Host Controller Switch Dri.) -- C:\Windows\System32\drivers\iusb3hcs.sys [16440] =>.Intel Corporation - Software and Firmware Products® O58 - SDL:2012/10/16 16:53:26 A . (.Intel Corporation - Intel(R) USB 3.0 Hub Driver.) -- C:\Windows\System32\drivers\iusb3hub.sys [351288] =>.Intel Corporation - Software and Firmware Products® O58 - SDL:2012/10/16 16:53:20 A . (.Intel Corporation - Intel(R) USB 3.0 eXtensible Host Controller.) -- C:\Windows\System32\drivers\iusb3xhc.sys [796216] =>.Intel Corporation - Software and Firmware Products® O58 - SDL:2013/10/29 23:15:16 A . (.Broadcom Corporation - Broadcom NetLink (TM) Gigabit Ethernet NDIS.) -- C:\Windows\System32\drivers\k57nd60x.sys [408272] =>.Broadcom Corporation® O58 - SDL:2009/07/14 02:20:36 A . (.LSI Corporation - LSI Fusion-MPT FC Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_fc.sys [95824] =>.Microsoft Windows® O58 - SDL:2009/07/14 02:20:37 A . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas.sys [89168] =>.Microsoft Windows® O58 - SDL:2009/07/14 02:20:36 A . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas2.sys [54864] =>.Microsoft Windows® O58 - SDL:2009/07/14 02:20:36 A . (.LSI Corporation - LSI Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_scsi.sys [96848] =>.Microsoft Windows® O58 - SDL:2009/07/14 02:20:36 A . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows.) -- C:\Windows\System32\drivers\megasas.sys [30800] =>.Microsoft Windows® O58 - SDL:2009/07/14 02:20:36 A . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\System32\drivers\MegaSR.sys [235584] =>.Microsoft Windows® O58 - SDL:2009/07/14 02:20:44 A . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\System32\drivers\nfrd960.sys [44624] =>.Microsoft Windows® O58 - SDL:2009/07/14 02:20:44 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\System32\drivers\nvraid.sys [117312] =>.Microsoft Windows® O58 - SDL:2009/07/14 02:20:44 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\System32\drivers\nvstor.sys [142416] =>.Microsoft Windows® O58 - SDL:2009/07/14 02:19:04 A . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\Windows\System32\drivers\ql2300.sys [1383488] =>.Microsoft Windows® O58 - SDL:2009/07/14 02:19:04 A . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\Windows\System32\drivers\ql40xx.sys [106064] =>.Microsoft Windows® O58 - SDL:2014/08/26 17:58:20 A . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function D.) -- C:\Windows\System32\drivers\RTKVHDA.sys [3295768] =>.Realtek Semiconductor Corp® O58 - SDL:2009/07/13 21:50:20 A . (.Macrovision Corporation, Macrovision Europe Limited, - Macrovision SECURITY Driver.) -- C:\Windows\System32\drivers\secdrv.sys [20480] =>.Macrovision Corporation, Macrovision Europe Limited, O58 - SDL:2009/07/14 02:19:04 A . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\System32\drivers\sisraid2.sys [40016] =>.Microsoft Windows® O58 - SDL:2009/07/14 02:19:04 A . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\System32\drivers\sisraid4.sys [77888] =>.Microsoft Windows® O58 - SDL:2009/07/14 02:19:04 A . (.Promise Technology - Promise SuperTrak EX Series Driver for Win.) -- C:\Windows\System32\drivers\stexstor.sys [21072] =>.Microsoft Windows® O58 - SDL:2014/03/20 11:43:02 A . (.Intel Corporation - Intel(R) Management Engine Interface.) -- C:\Windows\System32\drivers\TeeDriver.sys [102400] =>.Intel Corporation - Intel® Management Engine Firmware® O58 - SDL:2009/07/14 02:19:10 A . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\viaide.sys [16976] =>.Microsoft Windows® O58 - SDL:2009/07/14 02:19:11 A . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\Windows\System32\drivers\vsmraid.sys [141904] =>.Microsoft Windows® O58 - SDL:2009/07/13 22:40:41 A . (...) -- C:\Windows\System32\ANSI.SYS [9029] O58 - SDL:2009/07/13 22:40:44 A . (...) -- C:\Windows\System32\country.sys [27097] O58 - SDL:2009/07/13 22:40:40 A . (...) -- C:\Windows\System32\HIMEM.SYS [4768] O58 - SDL:2009/07/13 22:40:43 A . (...) -- C:\Windows\System32\KEY01.SYS [42809] O58 - SDL:2009/07/13 22:40:43 A . (...) -- C:\Windows\System32\KEYBOARD.SYS [42537] O58 - SDL:2009/07/13 22:40:23 A . (...) -- C:\Windows\System32\NTDOS.SYS [27866] O58 - SDL:2009/07/13 22:40:31 A . (...) -- C:\Windows\System32\NTDOS404.SYS [29146] O58 - SDL:2009/07/13 22:40:35 A . (...) -- C:\Windows\System32\NTDOS411.SYS [29370] O58 - SDL:2009/07/13 22:40:39 A . (...) -- C:\Windows\System32\NTDOS412.SYS [29274] O58 - SDL:2009/07/13 22:40:27 A . (...) -- C:\Windows\System32\NTDOS804.SYS [29146] O58 - SDL:2009/07/13 22:40:11 A . (...) -- C:\Windows\System32\NTIO.SYS [33952] O58 - SDL:2009/07/13 22:40:15 A . (...) -- C:\Windows\System32\NTIO404.SYS [34672] O58 - SDL:2009/07/13 22:40:17 A . (...) -- C:\Windows\System32\NTIO411.SYS [35776] O58 - SDL:2009/07/13 22:40:19 A . (...) -- C:\Windows\System32\NTIO412.SYS [35536] O58 - SDL:2009/07/13 22:40:13 A . (...) -- C:\Windows\System32\NTIO804.SYS [34672] O58 - SDL:2016/02/25 15:01:35 A . (.电脑管家 - 电脑管家-TSSK Driver.) -- C:\Windows\System32\TSSK.sys [74040] =>.Superfluous.Tencent ---\\ Associations Shell Spawning (10) - 1s O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe =>.Microsoft Corporation O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Ob.) -- C:\Windows\System32\eventvwr.exe =>.Microsoft Corporation O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\wscript.exe =>.Microsoft Corporation O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe =>.Microsoft Corporation O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S O67 - Shell Spawning: <.html> [HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe =>.Mozilla Corporation® ---\\ Menu de démarrage Internet (8) - 0s O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe =>.Mozilla Corporation® O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Users\Rafika\AppData\Local\Google\Chrome\Application\chrome.exe =>.Google Inc® O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe =>.Mozilla Corporation O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Users\Rafika\AppData\Local\Google\Chrome\Application\chrome.exe =>.Google Inc. O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe =>.Mozilla Corporation O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Google Inc. - Google Chrome.) -- C:\Users\Rafika\AppData\Local\Google\Chrome\Application\chrome.exe =>.Google Inc. O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe =>.Mozilla Corporation O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Users\Rafika\AppData\Local\Google\Chrome\Application\chrome.exe =>.Google Inc. ---\\ Recherche d'infection sur les navigateurs (6) - 18s O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - http://www.bing.com/ O69 - SBI: SearchScopes [HKCU] {4AD43A14-AA87-4d4b-A345-B0BC1C61BC76} - (谷歌) - http://www.google.cn/ O69 - SBI: SearchScopes [HKCU] {C3BBCD0B-9234-4d36-9151-EC49EE32FCE3} - (百度) - http://www.baidu.com/ O69 - SBI: SearchScopes [HKCU] {ielnksrch} [DefaultScope] - (Search the web) - http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRYEqQao2TxTGptbOxpBNfqeE93ivyubfCQANQ9miw3Gl3Y9j65DgLf-t6KN4fDEhGM-vyK6_1pbf0b9an5-gZeuf0ayblIj4x8XI0g2-ydj9MyrzkpUgbogVhMy-M1w7WNKp8NZTANXJ0hD-QaGHp4javgfyjkgXY1Vu2LnqJuzskWXR9xCCDE_LSa3xSfE,&q={searchTerms} =>PUP.Optional.Linkury O69 - SBI: SearchScopes [HKLM] ielnksrch - (Search the web) - http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRYEqQao2TxTGptbOxpBNfqeE93ivyubfCQANQ9miw3Gl3Y9j65DgLf-t6KN4fDEhGM-vyK6_1pbf0b9an5-gZeuf0ayblIj4x8XI0g2-ydj9MyrzkpUgbogVhMy-M1w7WNKp8NZTANXJ0hD-QaGHp4javgfyjkgXY1Vu2LnqJuzskWXR9xCCDE_LSa3xSfE,&q={searchTerms} =>PUP.Optional.Linkury O69 - SBI: SearchScopes [HKLM] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (@ieframe.dll,-12512) - http://www.bing.com/ ---\\ Enumère les services démarrés par Svchost (32) - 1s O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d’application.) -- C:\Windows\System32\aelupsvc.dll [62464] =>.Microsoft Corporation O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [67584] =>.Microsoft Corporation O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [67584] =>.Microsoft Corporation O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\System32\srvsvc.dll [168448] =>.Microsoft Corporation O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\System32\gpsvc.dll [591360] =>.Microsoft Corporation O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\IKEEXT.DLL [667136] =>.Microsoft Corporation O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Service Audio Windows.) -- C:\Windows\System32\audiosrv.dll [473088] =>.Microsoft Corporation O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’.) -- C:\Windows\System32\rasauto.dll [90624] =>.Microsoft Corporation O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire de connexions d’accès distant.) -- C:\Windows\System32\rasmans.dll [285184] =>.Microsoft Corporation O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll [75264] =>.Microsoft Corporation O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements systèm.) -- C:\Windows\System32\Sens.dll [49664] =>.Microsoft Corporation O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l’application d’assistance à.) -- C:\Windows\System32\ipnathlp.dll [300544] =>.Microsoft Corporation O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM.) -- C:\Windows\System32\tapisrv.dll [241664] =>.Microsoft Corporation O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gestionnaire des connexions distantes du se.) -- C:\Windows\System32\termsrv.dll [543232] =>.Microsoft Corporation O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Up.) -- C:\Windows\System32\wuaueng.dll [1912832] =>.Microsoft Corporation O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière.) -- C:\Windows\System32\qmgr.dll [589312] =>.Microsoft Corporation O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [328192] =>.Microsoft Corporation O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur u.) -- C:\Windows\System32\iphlpsvc.dll [497152] =>.Microsoft Corporation O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d’ouverture de session secon.) -- C:\Windows\System32\seclogon.dll [21504] =>.Microsoft Corporation O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll [46592] =>.Microsoft Corporation O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\System32\iscsiexe.dll [114688] =>.Microsoft Corporation O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédia.) -- C:\Windows\System32\mmcss.dll [49664] =>.Microsoft Corporation O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll [61440] =>.Microsoft Corporation O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll [98304] =>.Microsoft Corporation O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll [162816] =>.Microsoft Corporation O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\System32\schedsvc.dll [743424] =>.Microsoft Corporation O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\Windows\System32\KMSVC.DLL [71168] =>.Microsoft Corporation O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à.) -- C:\Windows\System32\SessEnv.dll [99328] =>.Microsoft Corporation O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll [168960] =>.Microsoft Corporation O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\System32\browser.dll [102400] =>.Microsoft Corporation O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\Windows\System32\themeservice.dll [37376] =>.Microsoft Corporation O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\Windows\System32\bdesvc.dll [76800] =>.Microsoft Corporation ---\\ Recherche de clés de registre Tracing (4) - 6s HKLM\SOFTWARE\Microsoft\Tracing\DriverFinder_RASAPI32 =>PUP.Optional.DriverFinder HKLM\SOFTWARE\Microsoft\Tracing\DriverFinder_RASMANCS =>PUP.Optional.DriverFinder HKLM\SOFTWARE\Microsoft\Tracing\tencentdl_RASAPI32 =>.Superfluous.Tencent HKLM\SOFTWARE\Microsoft\Tracing\tencentdl_RASMANCS =>.Superfluous.Tencent ---\\ Scan Additionnel (36) - 0s HKLM\SYSTEM\CurrentControlSet\Services\BaiduHips =>PUP.Optional.Salus C:\Windows\AutoKMS\AutoKMS.exe =>HackTool.AutoKMS C:\Windows\Tasks\AutoKMS.job =>HackTool.AutoKMS C:\Windows\Tasks\DriverToolkit Autorun.job =>.Superfluous.DriverToolkit C:\Windows\System32\Tasks\AutoKMS =>HackTool.AutoKMS C:\Windows\System32\Tasks\DriverToolkit Autorun =>.Superfluous.DriverToolkit C:\Users\Rafika\AppData\Roaming\Mozilla\Firefox\Profiles\ht63i2gx.default\searchplugins\findit.xml =>PUP.Optional.SmartBar C:\Program Files\Mozilla Firefox\browser\searchplugins\findit.xml =>PUP.Optional.SmartBar C:\Program Files\DriverFinder\DriverFinder.exe =>PUP.Optional.DriverFinder HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DriverFinder =>PUP.Optional.DriverFinder HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{01AFA975-4D21-4FBF-9768-020FA8F1947C} =>PUP.Optional.SmartBar HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DriverFinder =>PUP.Optional.DriverFinder HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{01AFA975-4D21-4FBF-9768-020FA8F1947C} =>PUP.Optional.SmartBar HKLM\SOFTWARE\DriverFinder =>PUP.Optional.DriverFinder HKLM\SOFTWARE\Tencent =>.Superfluous.Tencent HKCU\SOFTWARE\DriverFinder =>PUP.Optional.DriverFinder HKCU\SOFTWARE\DriverToolkit =>.Superfluous.DriverToolkit HKCU\SOFTWARE\STA =>.Superfluous.ZhuWeiqin HKCU\SOFTWARE\TeleCharger =>.Superfluous.Downloader HKCU\SOFTWARE\Tencent =>.Superfluous.Tencent C:\Program Files\DriverFinder =>PUP.Optional.DriverFinder C:\Program Files\DriverToolkit =>.Superfluous.DriverToolkit C:\Program Files\Tencent =>.Superfluous.Tencent C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriverFinder =>PUP.Optional.DriverFinder C:\ProgramData\Tencent =>.Superfluous.Tencent C:\Program Files\Common Files\Tencent =>.Superfluous.Tencent C:\Users\Rafika\AppData\Roaming\DriverFinder =>PUP.Optional.DriverFinder C:\Users\Rafika\AppData\Roaming\Tencent =>.Superfluous.Tencent C:\Users\Rafika\AppData\Local\DriverToolkit =>.Superfluous.DriverToolkit C:\Windows\Prefetch\AUTOKMS.EXE-97B3D7D9.pf =>HackTool.AutoKMS HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{ielnksrch} =>PUP.Optional.Linkury HKLM\Software\Microsoft\Internet Explorer\SearchScopes\ielnksrch =>PUP.Optional.Linkury HKLM\SOFTWARE\Microsoft\Tracing\DriverFinder_RASAPI32 =>PUP.Optional.DriverFinder HKLM\SOFTWARE\Microsoft\Tracing\DriverFinder_RASMANCS =>PUP.Optional.DriverFinder HKLM\SOFTWARE\Microsoft\Tracing\tencentdl_RASAPI32 =>.Superfluous.Tencent HKLM\SOFTWARE\Microsoft\Tracing\tencentdl_RASMANCS =>.Superfluous.Tencent ---\\ Récapitulatif des éléments trouvés sur votre station (10) - 0s http://www.nicolascoolman.fr/pup-salus/ =>PUP.Optional.Salus http://www.nicolascoolman.fr/?p=368 =>.Superfluous.Tencent http://www.nicolascoolman.fr/?p=1804 =>HackTool.AutoKMS http://www.nicolascoolman.fr/?p=5145 =>.Superfluous.DriverToolkit http://www.nicolascoolman.fr/?p=308 =>PUP.Optional.SmartBar http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.Linkury http://www.nicolascoolman.fr/?p=546 =>PUP.Optional.Browser http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.DriverFinder http://www.nicolascoolman.fr/?p=5145 =>.Superfluous.ZhuWeiqin http://www.nicolascoolman.fr/?p=5145 =>.Superfluous.Downloader ~ End of the scan, 12049 items in 00h04mn12s (718)(0)