~ ZHPDiag v2016.4.14.87 Par Nicolas Coolman (2016/04/14) ~ Démarré par chucky (Administrator) (2016/04/14 11:24:07) ~ Site: http://www.nicolascoolman.com ~ Facebook: https://www.facebook.com/nicolascoolman1 ~ Etat de la version: Version OK ~ Mode: Scanner ~ Rapport: C:\Users\chucky\Desktop\ZHPDiag.txt ~ Rapport: C:\Users\chucky\AppData\Roaming\ZHP\ZHPDiag.txt ~ UAC: Activate ~ Démarrage du système: Normal (Normal boot) Windows 8.1, 64-bit (Build 9600) ---\\ Navigateurs Internet (2) - 0s GCIE: Google Chrome v49.0.2623.112 MSIE: Internet Explorer v11.0.9600.18283 ---\\ Informations sur les produits Windows (8) - 0s ~ Windows Server License Manager Script : OK ~ Licence Script File Génération : OK ~ Windows(R) Operating System, OEM_DM channel Windows ID Activation : OK ~ Windows Partial Key : H2YCD Windows License : OK ~ Windows Remaining Initializations Number : 999 Windows Automatic Updates : OK ---\\ Logiciels de protection (4) - 1s Avira Antivirus v15.0.16.282 Avira Launcher v1.1.56.9119 Malwarebytes Anti-Malware version 2.2.1.1043 Windows Defender (Deactivate) ---\\ Surveillance de Logiciels (2) - 1s Adobe Flash Player 21 NPAPI Adobe Reader 9.4.0 - Français ---\\ Informations sur le système (6) - 0s ~ Operating System: Intel64 Family 6 Model 60 Stepping 3, GenuineIntel ~ Operating System: 64-bit ~ Boot mode: Normal (Normal boot) Total RAM: 4132.264 MB (65% free) System Restore: Activé (Enable) System drive C: has 380 GB () free of 466 GB ---\\ Mode de connexion au système (3) - 0s ~ Computer Name: PCSALON ~ User Name: chucky ~ Logged in as Administrator ---\\ Enumération des unités disques (2) - 0s ~ Drive C: has 380 GB free of 466 GB (System) ~ Drive D: has 466 GB free of 466 GB ---\\ Etat du Centre de Sécurité Windows (11) - 0s [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: Modified [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK [HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK ---\\ Recherche particulière de fichiers génériques (25) - 1s [MD5.B3541A5A20C6264781909B1B7FE54836] - 09/02/2016 - (.Microsoft Corporation - Explorateur Windows.) -- C:\Windows\Explorer.exe [2757616] =>.Microsoft Windows® [MD5.6C308D32AFA41D26CE2A0EA8F7B79565] - 29/10/2014 - (.Microsoft Corporation - Processus hôte Windows (Rundll32).) -- C:\Windows\System32\rundll32.exe [54784] =>.Microsoft Corporation [MD5.EC302D06155F8E3C383750993FCB6B27] - 05/10/2015 - (.Microsoft Corporation - Application de démarrage de Windows.) -- C:\Windows\System32\Wininit.exe [146432] =>.Microsoft Corporation [MD5.D2E3B1DEDF6F6177D8C32B2516703A93] - 31/03/2016 - (.Microsoft Corporation - Extensions Internet pour Win32.) -- C:\Windows\System32\wininet.dll [2596864] =>.Microsoft Corporation [MD5.B1102BBDDD9C87B3D609D6C08F7A3DBD] - 05/01/2016 - (.Microsoft Corporation - Application d’ouverture de session Windows.) -- C:\Windows\System32\Winlogon.exe [570880] =>.Microsoft Corporation [MD5.AFCAB4DC692CCE37E283B00E2D7B438F] - 18/03/2014 - (.Microsoft Corporation - Bibliothèque de licences.) -- C:\Windows\System32\sppcomapi.dll [447488] =>.Microsoft Corporation [MD5.A5675939CF0F99B20B5A3CFCC3C1B46A] - 29/10/2014 - (.Microsoft Corporation - DNS DLL de l’API Client.) -- C:\Windows\System32\dnsapi.dll [657920] =>.Microsoft Corporation [MD5.BD9C7A068C46053F8747CEA73B5930AB] - 29/10/2014 - (.Microsoft Corporation - DNS DLL de l’API Client.) -- C:\Windows\Syswow64\dnsapi.dll [498688] =>.Microsoft Corporation [MD5.E37F897ED7B5AFF79B1398258DB96BD9] - 31/01/2015 - (.Microsoft Corporation - DLL client de l’API uilisateur de Windows m.) -- C:\Windows\System32\fr-FR\user32.dll.mui [19456] =>.Microsoft Corporation [MD5.A460C3AF3755A2A79A3C8EFE72E147B5] - 13/10/2015 - (.Microsoft Corporation - Pilote de fonction connexe pour WinSock.) -- C:\Windows\System32\drivers\AFD.sys [559616] =>.Microsoft Corporation [MD5.74B14192CF79A72F7536B27CB8814FBD] - 22/08/2013 - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) -- C:\Windows\System32\drivers\atapi.sys [26464] =>.Microsoft Windows® [MD5.2FA6510E33F7DEFEC03658B74101A9B9] - 22/08/2013 - (.Microsoft Corporation - CD-ROM File System Driver.) -- C:\Windows\System32\drivers\Cdfs.sys [88576] =>.Microsoft Corporation [MD5.C6796EA22B513E3457514D92DCDB1A3D] - 22/08/2013 - (.Microsoft Corporation - SCSI CD-ROM Driver.) -- C:\Windows\System32\drivers\Cdrom.sys [164352] =>.Microsoft Corporation [MD5.A03F362C5557E238CBFA914689C77248] - 06/03/2014 - (.Microsoft Corporation - DFS Namespace Client Driver.) -- C:\Windows\System32\drivers\DfsC.sys [134144] =>.Microsoft Corporation [MD5.D4B7ED39C7900384D9E5C1283F1E7926] - 24/07/2014 - (.Microsoft Corporation - High Definition Audio Bus Driver.) -- C:\Windows\System32\drivers\HDAudBus.sys [76800] =>.Microsoft Corporation [MD5.49EE0AE9E5B64FFBBD06D55C4984B598] - 04/11/2014 - (.Microsoft Corporation - Pilote de port i8042.) -- C:\Windows\System32\drivers\i8042prt.sys [108544] =>.Microsoft Corporation [MD5.B7342B3C58E91107F6E946A93D9D4EFD] - 18/03/2014 - (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\System32\drivers\IpNat.sys [142848] =>.Microsoft Corporation [MD5.5F2BB54E0223E46646789E90BB4CCD81] - 10/03/2016 - (.Microsoft Corporation - Minirdr SMB Windows NT.) -- C:\Windows\System32\drivers\MRxSmb.sys [401920] =>.Microsoft Corporation [MD5.0217532E19A748F0E5D569307363D5FD] - 22/08/2013 - (.Microsoft Corporation - MBT Transport driver.) -- C:\Windows\System32\drivers\netBT.sys [282624] =>.Microsoft Corporation [MD5.9980B262DBE439AE6BDC91AA985F19EE] - 30/12/2015 - (.Microsoft Corporation - Pilote du système de fichiers NT.) -- C:\Windows\System32\drivers\ntfs.sys [2017624] =>.Microsoft Windows® [MD5.764B1121867B2D9B31C491668AC72B2B] - 22/08/2013 - (.Microsoft Corporation - Pilote de port parallèle.) -- C:\Windows\System32\drivers\Parport.sys [94208] =>.Microsoft Corporation [MD5.235624C147E3CB4C288D5D3D8E8D64A2] - 02/02/2016 - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) -- C:\Windows\System32\drivers\Rasl2tp.sys [112640] =>.Microsoft Corporation [MD5.680C1DAE268B6FB67FA21B389A8B79EF] - 18/03/2014 - (.Microsoft Corporation - Redirecteur de périphérique de Microsoft RD.) -- C:\Windows\System32\drivers\rdpdr.sys [195584] =>.Microsoft Corporation [MD5.E0BD2D83875464FEEEB242CBA8B7E073] - 13/10/2015 - (.Microsoft Corporation - TDI Translation Driver.) -- C:\Windows\System32\drivers\tdx.sys [108032] =>.Microsoft Corporation [MD5.D537962695CAFEC1301F3EB7C8C3A1D2] - 07/02/2016 - (.Microsoft Corporation - Pilote de cliché instantané du volume.) -- C:\Windows\System32\drivers\volsnap.sys [316760] =>.Microsoft Windows® ---\\ Liste des services NT non Microsoft et non désactivés (19) - 1s O23 - Service: Amazon 1Button App Service (Amazon 1Button App Service) . (.Amazon Inc. - The Amazon 1Button App.) - C:\Program Files (x86)\Amazon\Amazon1ButtonApp\Amazon1ButtonService64.Exe =>.Amazon Services LLC® O23 - Service: Avira Protection e-mail (AntiVirMailService) . (.Avira Operations GmbH & Co. KG - Antivirus MailScanner WFP Service.) - C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe =>.Avira Operations GmbH & Co. KG® O23 - Service: Avira Planificateur (AntiVirSchedulerService) . (.Avira Operations GmbH & Co. KG - Antivirus Host Framework Service.) - C:\Program Files (x86)\Avira\Antivirus\sched.exe =>.Avira Operations GmbH & Co. KG® O23 - Service: Avira Protection temps réel (AntiVirService) . (.Avira Operations GmbH & Co. KG - Antivirus Host Framework Service.) - C:\Program Files (x86)\Avira\Antivirus\avguard.exe =>.Avira Operations GmbH & Co. KG® O23 - Service: Avira Protection Web (AntiVirWebService) . (.Avira Operations GmbH & Co. KG - AntiVir WebGuard WFP Service.) - C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe =>.Avira Operations GmbH & Co. KG® O23 - Service: Avira Service Host (Avira.ServiceHost) . (.Avira Operations GmbH & Co. KG - Avira Service Host.) - C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe =>.Avira Operations GmbH & Co. KG® O23 - Service: CCDMonitorService (CCDMonitorService) . (.Acer Incorporated - CCD Monitor Service.) - C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe =>.Acer Incorporated® O23 - Service: GamesAppIntegrationService (GamesAppIntegrationService) . (.WildTangent - WildTangent Games App Integration Service.) - C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe =>.WildTangent Inc® O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google Inc® O23 - Service: HP Support Solutions Framework Service (HPSupportSolutionsFrameworkService) . (.Hewlett-Packard Company - HP Support Solutions Framework Service.) - C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe =>.Hewlett-Packard Company® O23 - Service: Intel(R) Capability Licensing Service Interface (Intel(R) Capability Licensing Service Interface) . (.Intel(R) Corporation - Intel(R) Capability Licensing Service Inter.) - C:\Program Files\Intel\iCLS Client\HeciServer.exe =>.Intel(R) Corporation O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) . (.Intel Corporation - Intel(R) Dynamic Application Loader Host In.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe =>.Intel Corporation - Intel® Management Engine Firmware® O23 - Service: Intel(R) Management and Security Application Local Manageme (LMS) . (.Intel Corporation - Intel(R) Local Management Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe =>.Intel Corporation - Software and Firmware Products® O23 - Service: NVIDIA Network Service (NvNetworkService) . (.NVIDIA Corporation - NVIDIA Network Service.) - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe =>.NVIDIA Corporation® O23 - Service: NVIDIA Display Driver Service (nvsvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 333.0.) - C:\Windows\System32\nvvsvc.exe =>.NVIDIA Corporation® O23 - Service: AMW Service (pbamw_service) . (.PLUMBYTES - Antimalware service.) - C:\Program Files\Plumbytes Software\Plumbytes Anti-Malware\AmwService.exe {0A801728CE51A218C22437A4AB4119C1} O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) . (.Copyright 2004 - RichVideo Module.) - C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe =>.CyberLink® O23 - Service: Service KMSELDI (Service KMSELDI) . (. - Service_KMS.) - C:\Program Files\KMSpico\Service_KMS.exe =>HackTool.KMSpico O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) . (.NVIDIA Corporation - Stereo Vision Control Panel API Server.) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe =>.NVIDIA Corporation® ---\\ Services non Microsoft (SR=Démarré,SS=Stoppé) (27) - 7s SS - Demand [07/04/2016] [ 269504] Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe =>.Adobe Systems Incorporated® SR - Auto [17/02/2016] [ 436032] Amazon 1Button App Service (Amazon 1Button App Service) . (.Amazon Inc..) - C:\Program Files (x86)\Amazon\Amazon1ButtonApp\Amazon1ButtonService64.Exe =>.Amazon Services LLC® SS - Auto [22/03/2016] [ 955736] Avira Protection e-mail (AntiVirMailService) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe =>.Avira Operations GmbH & Co. KG® SR - Auto [22/03/2016] [ 466504] Avira Planificateur (AntiVirSchedulerService) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files (x86)\Avira\Antivirus\sched.exe =>.Avira Operations GmbH & Co. KG® SR - Auto [22/03/2016] [ 466504] Avira Protection temps réel (AntiVirService) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files (x86)\Avira\Antivirus\avguard.exe =>.Avira Operations GmbH & Co. KG® SS - Auto [22/03/2016] [ 1424880] Avira Protection Web (AntiVirWebService) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe =>.Avira Operations GmbH & Co. KG® SR - Auto [27/01/2016] [ 260456] Avira Service Host (Avira.ServiceHost) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe =>.Avira Operations GmbH & Co. KG® SR - Auto [06/05/2015] [ 2839296] CCDMonitorService (CCDMonitorService) . (.Acer Incorporated.) - C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe =>.Acer Incorporated® SR - Auto [21/07/2015] [ 349728] GamesAppIntegrationService (GamesAppIntegrationService) . (.WildTangent.) - C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe =>.WildTangent Inc® SS - Demand [21/07/2015] [ 209952] GamesAppService (GamesAppService) . (.WildTangent, Inc..) - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe =>.WildTangent Inc® SS - Auto [28/07/2015] [ 144200] Service Google Update (gupdate) (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google Inc® SS - Demand [28/07/2015] [ 144200] Service Google Update (gupdatem) (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google Inc® SR - Auto [18/02/2016] [ 26680] HP Support Solutions Framework Service (HPSupportSolutionsFrameworkService) . (.Hewlett-Packard Company.) - C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe =>.Hewlett-Packard Company® SR - Auto [27/08/2013] [ 747520] Intel(R) Capability Licensing Service Interface (Intel(R) Capability Licensing Service Interface) . (.Intel(R) Corporation.) - C:\Program Files\Intel\iCLS Client\HeciServer.exe =>.Intel(R) Corporation SS - Demand [27/08/2013] [ 828376] Intel(R) Capability Licensing Service TCP IP Interface (Intel(R) Capability Licensing Service TCP IP Interface) . (.Intel(R) Corporation.) - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe =>.Intel® Trusted Connect Service® SR - Auto [16/09/2013] [ 169432] Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe =>.Intel Corporation - Intel® Management Engine Firmware® SR - Auto [16/09/2013] [ 390616] Intel(R) Management and Security Application Local Manageme (LMS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe =>.Intel Corporation - Software and Firmware Products® SR - Auto [30/04/2014] [ 1617696] NVIDIA Network Service (NvNetworkService) . (.NVIDIA Corporation.) - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe =>.NVIDIA Corporation® SR - Auto [08/04/2014] [ 925128] NVIDIA Display Driver Service (nvsvc) . (.NVIDIA Corporation.) - C:\Windows\system32\nvvsvc.exe =>.NVIDIA Corporation SR - Auto [04/04/2016] [ 89376] AMW Service (pbamw_service) . (.PLUMBYTES.) - C:\Program Files\Plumbytes Software\Plumbytes Anti-Malware\AmwService.exe {0A801728CE51A218C22437A4AB4119C1} SR - Demand [26/06/2014] [ 458984] Quick Access Service (QASvc) . (.Acer Incorporate.) - C:\Program Files\Acer\Acer Quick Access\QASvc.exe =>.Acer Incorporated® SR - Auto [24/04/2012] [ 254512] Cyberlink RichVideo Service(CRVS) (RichVideo) . (.Copyright 2004.) - C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe =>.CyberLink® SS - Demand [25/06/2010] [ 117264] Remote Packet Capture Protocol v.0 (experimental) (rpcapd) . (.CACE Technologies, Inc..) - C:\Program Files (x86)\WinPcap\rpcapd.exe =>.CACE Technologies, Inc.® SS - Auto [11/12/2013] [ 1050904] Service KMSELDI (Service KMSELDI) . (...) - C:\Program Files\KMSpico\Service_KMS.exe =>HackTool.KMSpico SR - Auto [08/04/2014] [ 413128] NVIDIA Stereoscopic 3D Driver Service (Stereo Service) . (.NVIDIA Corporation.) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe =>.NVIDIA Corporation® SR - Demand [23/06/2014] [ 233216] User Experience Improvement Program (UEIPSvc) . (.acer.) - C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe =>.Acer Incorporated® ---\\ Tâches planifiées en automatique (30) - 4s [MD5.192551432A694B27E9EEBDA5794CCB12] [APT] [ACCAgent] (.(C) All rights reserved.) -- C:\Program Files (x86)\Acer\Care Center\LiveUpdateAgent.exe [41728] (.Activate.) =>.Acer Incorporated® [MD5.E040BBE0E2802762071EAFF22CBF2DF5] [APT] [AcerCloud] (.Acer.) -- C:\Program Files (x86)\Acer\Acer Portal\AcerPortal.exe [2574080] (.Activate.) =>.Acer Incorporated® [MD5.28FFB14117CCEDD7D2F124596AA9B785] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [269504] (.Activate.) =>.Adobe Systems Incorporated® [MD5.E3FEA8060978EAB6FA5D40E74DE6308B] [APT] [AutoPico Daily Restart] (...) -- C:\Program Files\KMSpico\AutoPico.exe [1051416] (.Activate.) =>HackTool.KMSpico [MD5.C856B04ABD5A57CA688EF6CC2964DFBD] [APT] [CCleanerSkipUAC] (.Piriform Ltd.) -- C:\Program Files\CCleaner\CCleaner.exe [6638296] (.Activate.) =>.Piriform Ltd® [MD5.C6FF00DA1605982E616C03BE809FFE2D] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200] (.Activate.) =>.Google Inc® [MD5.C6FF00DA1605982E616C03BE809FFE2D] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200] (.Activate.) =>.Google Inc® [MD5.CC2F2EB3334D3DD6D4D66022B51E1159] [APT] [Hotkey Utility] (.Acer Incorporated.) -- C:\Program Files (x86)\Acer\Hotkey Utility\HotkeyUtility.exe [527616] (.Activate.) =>.Acer Incorporated® [MD5.3DA2B70325A5947E981387DB9A9BD843] [APT] [HPCeeScheduleForchucky] (.Hewlett-Packard.) -- C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [96568] (.Activate.) =>.Hewlett-Packard Company® [MD5.E88CD2B99BA576F98EC267E10101A979] [APT] [Quick Access] (.Acer Incorporate.) -- C:\Program Files\Acer\Acer Quick Access\QALauncher.exe [324328] (.Activate.) =>.Acer Incorporated® [MD5.E88CD2B99BA576F98EC267E10101A979] [APT] [Quick Access Quick Launcher] (.Acer Incorporate.) -- C:\Program Files\Acer\Acer Quick Access\QALauncher.exe [324328] (.Activate.) =>.Acer Incorporated® [MD5.6C531EBEFA4718C279D1C1729C77D230] [APT] [UbtFrameworkService] (.TODO: .) -- C:\Program Files\Acer\User Experience Improvement Program\Framework\TriggerFramework.exe [216296] (.Activate.) =>.Acer Incorporated® [MD5.00000000000000000000000000000000] [APT] [{3EB62017-F30E-47B9-92EE-0E312117028B}] (...) -- C:\Program Files (x86)\JDownloader\JDUninstall.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.9F7A389D3EFC533D57BB0530ED70E5A4] [APT] [Hewlett-Packard\] (.Hewlett-Packard.) -- C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe [192376] (.Activate.) =>.Hewlett-Packard Company® O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\Tasks\Adobe Flash Player Updater.job [1002] =>.Adobe Systems Incorporated® O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job [1088] =>.Google Inc® O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job [1092] =>.Google Inc® O39 - APT: HPCeeScheduleForchucky - (.Hewlett-Packard.) -- C:\Windows\Tasks\HPCeeScheduleForchucky.job [352] =>.Hewlett-Packard Company® O39 - APT: ACCAgent - (.(C) All rights reserved.) -- C:\Windows\System32\Tasks\ACCAgent [4562] =>.Acer Incorporated® O39 - APT: AcerCloud - (.Acer.) -- C:\Windows\System32\Tasks\AcerCloud [3334] =>.Acer Incorporated® O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Tasks\Adobe Flash Player Updater [3890] =>.Adobe Systems Incorporated® O39 - APT: AutoPico Daily Restart - (...) -- C:\Windows\System32\Tasks\AutoPico Daily Restart [3706] =>HackTool.KMSpico O39 - APT: CCleanerSkipUAC - (.Piriform Ltd.) -- C:\Windows\System32\Tasks\CCleanerSkipUAC [2790] =>.Piriform Ltd® O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore [3828] =>.Google Inc® O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA [4064] =>.Google Inc® O39 - APT: Hotkey Utility - (.Acer Incorporated.) -- C:\Windows\System32\Tasks\Hotkey Utility [2912] =>.Acer Incorporated® O39 - APT: HPCeeScheduleForchucky - (.Hewlett-Packard.) -- C:\Windows\System32\Tasks\HPCeeScheduleForchucky [3168] =>.Hewlett-Packard Company® O39 - APT: Quick Access - (.Acer Incorporate.) -- C:\Windows\System32\Tasks\Quick Access [2896] =>.Acer Incorporated® O39 - APT: Quick Access Quick Launcher - (.Acer Incorporate.) -- C:\Windows\System32\Tasks\Quick Access Quick Launcher [3016] =>.Acer Incorporated® O39 - APT: UbtFrameworkService - (.TODO: .) -- C:\Windows\System32\Tasks\UbtFrameworkService [3268] =>.Acer Incorporated® ---\\ Processus lancés (41) - 1s [MD5.8DB937BFD5F126419A26556746BF1013] - (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 333.0.) -- C:\Windows\System32\nvvsvc.exe [925128] [PID.948] =>.NVIDIA Corporation® [MD5.4089164CB953044BBCFF88F2D0733FD9] - (.NVIDIA Corporation - Stereo Vision Control Panel API Server.) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [413128] [PID.1000] =>.NVIDIA Corporation® [MD5.4DDB2F726B05ED634D0C3A48E5F5122E] - (.NVIDIA Corporation - NVIDIA User Experience Driver Component.) -- C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe [1195296] [PID.1008] =>.NVIDIA Corporation® [MD5.8DB937BFD5F126419A26556746BF1013] - (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 333.0.) -- C:\Windows\System32\nvvsvc.exe [925128] [PID.1016] =>.NVIDIA Corporation® [MD5.98C06275DB53A1E70AB8CB94013B20D4] - (.Avira Operations GmbH & Co. KG - Antivirus Host Framework Service.) -- C:\Program Files (x86)\Avira\Antivirus\sched.exe [466504] [PID.1496] =>.Avira Operations GmbH & Co. KG® [MD5.976966A13B587E2FEB883B516D868B6B] - (.Amazon Inc. - The Amazon 1Button App.) -- C:\Program Files (x86)\Amazon\Amazon1ButtonApp\Amazon1ButtonService64.Exe [436032] [PID.1812] =>.Amazon Services LLC® [MD5.98C06275DB53A1E70AB8CB94013B20D4] - (.Avira Operations GmbH & Co. KG - Antivirus Host Framework Service.) -- C:\Program Files (x86)\Avira\Antivirus\avguard.exe [466504] [PID.1828] =>.Avira Operations GmbH & Co. KG® [MD5.33D76C80BA71E8BA67DED7B5A9187895] - (.Acer Incorporated - CCD Monitor Service.) -- C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe [2839296] [PID.1880] =>.Acer Incorporated® [MD5.DAE6C3099D291EED8922A65C29ABCF52] - (.Intel(R) Corporation - Intel(R) Capability Licensing Service Inter.) -- C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520] [PID.1956] =>.Intel(R) Corporation [MD5.C22ADABFABBC2B7AC189C87D87B1ABD6] - (.NVIDIA Corporation - NVIDIA Network Service.) -- C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1617696] [PID.2020] =>.NVIDIA Corporation® [MD5.EF69914ED1A1133C68885C15AC9F9A16] - (.PLUMBYTES - Antimalware service.) -- C:\Program Files\Plumbytes Software\Plumbytes Anti-Malware\AmwService.exe [89376] [PID.620] {0A801728CE51A218C22437A4AB4119C1} [MD5.41DDCF1ADD1FB7DE23DCF671740DDBE6] - (.Copyright 2004 - RichVideo Module.) -- C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [254512] [PID.900] =>.CyberLink® [MD5.98BB62ABFD17F284C3C5DE40F8266F3C] - (.Avira Operations GmbH & Co. KG - Avira Service Host.) -- C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [260456] [PID.2248] =>.Avira Operations GmbH & Co. KG® [MD5.CC2F2EB3334D3DD6D4D66022B51E1159] - (.Acer Incorporated - Hotkey Utility.) -- C:\Program Files (x86)\Acer\Hotkey Utility\HotkeyUtility.exe [527616] [PID.2944] =>.Acer Incorporated® [MD5.10578A03586B8727D4B549351CAF4174] - (.Avira Operations GmbH & Co. KG - AntiVir shadow copy service.) -- C:\Program Files (x86)\Avira\Antivirus\avshadow.exe [1036576] [PID.2992] =>.Avira Operations GmbH & Co. KG® [MD5.2ACAB8C99FFCB2555A5979944D26EB50] - (.Acer Incorporate - QASvc.) -- C:\Program Files\Acer\Acer Quick Access\QASvc.exe [458984] [PID.2528] =>.Acer Incorporated® [MD5.0D1DF703F823DC9B93A0E8182AC67219] - (.Acer Incorporate - QAEvent.) -- C:\Program Files\Acer\Acer Quick Access\QAEvent.exe [521960] [PID.3320] =>.Acer Incorporated® [MD5.F1B23CCDFF34381C148DFF00C724858B] - (.Acer Incorporate - QAMsg.) -- C:\Program Files\Acer\Acer Quick Access\QAMsg.exe [447720] [PID.3660] =>.Acer Incorporated® [MD5.543611A6F137AD08B2C5806168628B12] - (.NVIDIA Corporation - NVIDIA Settings.) -- C:\Program Files\NVIDIA Corporation\Display\nvtray.exe [2448840] [PID.3776] =>.NVIDIA Corporation® [MD5.44FE94FCDF97E574B6986C5A81758628] - (.NVIDIA Corporation - NVIDIA GeForce Experience Backend.) -- C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2199840] [PID.4032] =>.NVIDIA Corporation® [MD5.3F6E7F06228159E86B2B69E358843DB8] - (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13650648] [PID.1348] =>.Realtek Semiconductor Corp® [MD5.CC436BB2A26391F3DEBE316F6FB0474F] - (.© 2015 Microsoft Corporation - Microsoft Bing Service.) -- C:\Users\chucky\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008] [PID.4144] =>.Microsoft Corporation® [MD5.0135CD003EAB7A904C371E682F6B393B] - (.Plex, Inc. - Plex Media Server.) -- C:\Program Files (x86)\Plex\Plex Media Server\Plex Media Server.exe [6538568] [PID.4340] =>.Plex, Inc.® [MD5.39087453472395A43A516F0695487343] - (.WinZip Computing, S.L. - WinZip Preloader.) -- C:\Program Files\WinZip\WzPreloader.exe [126176] [PID.4380] =>.WinZip Computing LLC® [MD5.75440878EB196899ADF91DB2B62B899D] - (.Nico Mak Computing - File Association Helper.) -- C:\Program Files\WinZip\FAH\FAHWindow64.exe [186544] [PID.4404] =>.WinZip Computing LLC® [MD5.1CE11C53E562D5F7EAFCF47E0E696516] - (.Avira Operations GmbH & Co. KG - Avira system tray application.) -- C:\Program Files (x86)\Avira\Antivirus\avgnt.exe [807392] [PID.4500] =>.Avira Operations GmbH & Co. KG® [MD5.6FE53879034CC120747C5505422573D8] - (.Avira Operations GmbH & Co. KG - Avira Launcher.) -- C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe [139928] [PID.4640] =>.Avira Operations GmbH & Co. KG® [MD5.C9B67BCB8E384064A8C2263740B0C437] - (.Oracle Corporation - Java Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [595480] [PID.4680] =>.Oracle America, Inc.® [MD5.B7F49D0B53D3B9301985AD77C0883D8F] - (.Python Software Foundation - Python.) -- C:\Program Files (x86)\Plex\Plex Media Server\PlexScriptHost.exe [45896] [PID.4368] =>.Plex, Inc.® [MD5.E93D62A6DB736AA82A3EEDDFDFE73311] - (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner64.exe [8641240] [PID.4732] =>.Piriform Ltd® [MD5.C18F505BCEA2C9FBCC390CB6962A451B] - (.Plex, Inc. - Plex Media Server DLNA Service.) -- C:\Program Files (x86)\Plex\Plex Media Server\PlexDlnaServer.exe [1948488] [PID.1144] =>.Plex, Inc.® [MD5.E040BBE0E2802762071EAFF22CBF2DF5] - (.Acer - Acer Portal.) -- C:\Program Files (x86)\Acer\Acer Portal\AcerPortal.exe [2574080] [PID.1080] =>.Acer Incorporated® [MD5.27ABAF76A03A8116D35BB991386550BE] - (.Acer Cloud Technology - AcerCloud Client.) -- C:\Program Files (x86)\Acer\AOP Framework\acer\ccd.exe [9467648] [PID.3296] =>.Acer Incorporated® [MD5.BADC3F3AAC5CE521D2CF88B14BFA3B29] - (.WildTangent - WildTangent Games App Integration Service.) -- C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [349728] [PID.4928] =>.WildTangent Inc® [MD5.2C884CBC1CC8804B771C845CD683BA84] - (.Hewlett-Packard Company - HP Support Solutions Framework Service.) -- C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [26680] [PID.1224] =>.Hewlett-Packard Company® [MD5.52069AEB42D3D0F97CBCA1085EBF55E6] - (.Intel Corporation - Intel(R) Dynamic Application Loader Host In.) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432] [PID.1696] =>.Intel Corporation - Intel® Management Engine Firmware® [MD5.08E2B577DB95156F9A658C988EE71F5D] - (.Intel Corporation - Intel(R) Local Management Service.) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [390616] [PID.3848] =>.Intel Corporation - Software and Firmware Products® [MD5.EE33325429532937D51AC3F54DC93589] - (.acer - UEIPSvc.) -- C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe [233216] [PID.2388] =>.Acer Incorporated® [MD5.CB6ECC7CC0CBBE79D305590C7112E152] - (.TODO: - AppMonitorPlugIn.) -- C:\Program Files\Acer\User Experience Improvement Program\Plugin\AppMonitor\AppMonitorPlugIn.exe [434944] [PID.1468] =>.Acer Incorporated® [MD5.8E98E3EC16D2641005B4748CD330FB45] - (.Malwarebytes - Malwarebytes Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe [9926112] [PID.1068] =>.Malwarebytes Corporation® [MD5.85EC7A6E8957C3B3E53ED53CEC027215] - (.Nicolas Coolman - ZHPDiag.) -- C:\Users\chucky\ZHPDiag3.exe [2187264] [PID.4188] =>.Nicolas Coolman ---\\ Google Chrome, Démarrage,Recherche,Extensions (19) - 1s G0 - GCSP: Preferences [User Data\Default][HomePage] http://accounts.google.com G0 - GCSP: Preferences [User Data\Default][HomePage] http://ajax.googleapis.com G0 - GCSP: Preferences [User Data\Default][HomePage] http://asrv-a.akamoihd.net G0 - GCSP: Preferences [User Data\Default][HomePage] http://cdncache-a.akamaihd.net =>PUP.Optional.Browser G0 - GCSP: Preferences [User Data\Default][HomePage] http://i_easyinjs_info.tlscdn.com G0 - GCSP: Preferences [User Data\Default][HomePage] http://infoclub.xyz G0 - GCSP: Preferences [User Data\Default][HomePage] http://lh6.googleusercontent.com G0 - GCSP: Preferences [User Data\Default][HomePage] http://s3.amazonaws.com G0 - GCSP: Preferences [User Data\Default][HomePage] http://ssl.gstatic.com G0 - GCSP: Preferences [User Data\Default][HomePage] http://www.google.fr G0 - GCSP: Secure Preferences [User Data\Default][HomePage] http://www.pmu.fr G0 - GCSP: Secure Preferences [User Data\Default][HomePage] http://www.google.fr/ G2 - GCE: Preference [User Data\Default] [ammbmbonbblnmjfhgldhbidimngfifpl] Virtual cat G2 - GCE: Preference [User Data\Default] [cfhdojbkjhnklbpkdaibdccddilifddb] __MSG_name__ =>.AdblocPlus Plugin G2 - GCE: Preference [User Data\Default] [flliilndjeohchalpbbcdekjklbdgfkk] Avira Browser Safety G2 - GCE: Preference [User Data\Default] [gighmmpiobklfepjocnamgkkbiglidom] AdBlock G2 - GCE: Preference [User Data\Default] [hfafbdnlcbmaagmfnilmmnlgnbldceip] Color change Cracked.com G2 - GCE: Preference [User Data\Default] [ijkagnjidigpdbojbdoghpeaalgnmneh] Easy self-stick notes G2 - GCE: Preference [User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] Google Chrome manifest =>.Google Inc. ---\\ Firefox, Plugins,Demarrage,Recherche,Extensions (6) - 1s P2 - EXT: (.Microsoft Corporation - The plugin allows you to have a better expe.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\npMeetingJoinPluginOC.dll =>.Microsoft Corporation® P2 - EXT FILE: (...) -- C:\Users\chucky\AppData\Roaming\Mozilla\Firefox\Profiles\67zklc5p.default\extensions\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34}.xpi P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_213.dll =>.Adobe Systems Incorporated P2 - FPN: [HKLM] [@foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf] - (...) -- C:\PROGRAM FILES (X86)\FOXIT PHANTOMPDF\plugins\npFoxitPhantomPDFPlugin.dll P2 - FPN: [HKLM] [@foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf] - (...) -- C:\PROGRAM FILES (X86)\FOXIT PHANTOMPDF\plugins\npFoxitPhantomPDFPlugin.dll P2 - FPN: [HKLM] [@WildTangent.com/GamesAppPresenceDetector,Version=1.0] - (.WildTangent.) -- C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll =>.WildTangent ---\\ Internet Explorer,Démarrage,Recherche,URLSearchHook (19) - 0s R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://google R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/ R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/ R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/ R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/ R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/ R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/ R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/ R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/ R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphean =>.Microsoft Internet Explorer R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV9 = 1 R4 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\PhishingFilter,EnabledV9 = 1 ---\\ Internet Explorer,Proxy Management (5) - 0s R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 ---\\ Internet Explorer,IniFiles, Autoloading programs (3) - 0s F2 - REG:system.ini: UserInit=C:\Windows\System32\Userinit.exe (.Microsoft Corporation.) =>.Microsoft Corporation F2 - REG:system.ini: Shell=C:\Windows\explorer.exe (.Microsoft Corporation.) =>.Microsoft Corporation F2 - REG:system.ini: VMApplet=C:\Windows\SysWOW64\SystemPropertiesPerformance.exe (.Microsoft Corporation.) =>.Microsoft Corporation ---\\ Etude du fichier hosts (1) - 0s ~ Le fichier hôte est sain (The hosts file is clean) (21) ---\\ Browser Helper Object de navigateur (BHO) (3) - 0s O2 - BHO: Lync Click to Call BHO [64Bits] - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} . (.Microsoft Corporation - Microsoft Lync.) -- C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll =>.Microsoft Corporation® O2 - BHO: URLRedirectionBHO [64Bits] - {B4F3A835-0E21-4959-BA22-42B3008E02FF} . (.Microsoft Corporation - Microsoft Office Document Cache Handler.) -- C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL =>.Microsoft Corporation® O2 - BHO: Microsoft SkyDrive Pro Browser Helper [64Bits] - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} . (.Microsoft Corporation - Microsoft SkyDrive Pro Extensions.) -- C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL =>.Microsoft Corporation® ---\\ Applications lancées au démarrage du système (19) - 1s O4 - HKLM\..\Run: [NvBackend] . (.NVIDIA Corporation - NVIDIA GeForce Experience Backend.) -- C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe =>.NVIDIA Corporation® O4 - HKLM\..\Run: [ShadowPlay] . (.NVIDIA Corporation - NVIDIA Capture Server Proxy.) -- C:\Windows\System32\nvspcap64.dll =>.NVIDIA Corporation O4 - HKLM\..\Run: [RTHDVCPL] . (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe =>.Realtek Semiconductor Corp® O4 - HKLM\..\Run: [Plumbytes Anti-Malware] . (. - Plumbytes.) -- C:\Program Files\Plumbytes Software\Plumbytes Anti-Malware\plumbytes.exe {0A801728CE51A218C22437A4AB4119C1} O4 - HKCU\..\Run: [Spotify Web Helper] . (.Spotify Ltd - SpotifyWebHelper.) -- C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe =>.Spotify AB® O4 - HKCU\..\Run: [BingSvc] . (.© 2015 Microsoft Corporation - Microsoft Bing Service.) -- C:\Users\chucky\AppData\Local\Microsoft\BingSvc\BingSvc.exe =>.Microsoft Corporation® O4 - HKCU\..\Run: [CCleaner Monitoring] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner64.exe =>.Piriform Ltd® O4 - HKCU\..\Run: [Plex Media Server] . (.Plex, Inc. - Plex Media Server.) -- C:\Program Files (x86)\Plex\Plex Media Server\Plex Media Server.exe =>.Plex, Inc.® O4 - HKLM\..\Wow6432Node\Run: [BacKGround Agent] . (.Acer Incorporated - Background Agent.) -- C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe =>.Acer Incorporated® O4 - HKLM\..\Wow6432Node\Run: [abDocsDllLoader] . (...) -- C:\Program Files (x86)\Acer\abDocs\abDocsDllLoader.exe =>.Acer Incorporated® O4 - HKLM\..\Wow6432Node\Run: [Avira SystrayStartTrigger] . (.Avira Operations GmbH & Co. KG - Avira Launcher.) -- C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe =>.Avira Operations GmbH & Co. KG® O4 - HKLM\..\Wow6432Node\Run: [avgnt] . (.Avira Operations GmbH & Co. KG - Avira system tray application.) -- C:\Program Files (x86)\Avira\Antivirus\avgnt.exe =>.Avira Operations GmbH & Co. KG® O4 - HKLM\..\Wow6432Node\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe =>.Adobe Systems, Incorporated® O4 - HKLM\..\Wow6432Node\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe =>.Adobe Systems, Incorporated® O4 - HKLM\..\Wow6432Node\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe =>.Oracle America, Inc.® O4 - HKUS\S-1-5-21-778808802-1970086714-4052149648-1001\..\Run: [Spotify Web Helper] . (.Spotify Ltd - SpotifyWebHelper.) -- C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe =>.Spotify AB® O4 - HKUS\S-1-5-21-778808802-1970086714-4052149648-1001\..\Run: [BingSvc] . (.© 2015 Microsoft Corporation - Microsoft Bing Service.) -- C:\Users\chucky\AppData\Local\Microsoft\BingSvc\BingSvc.exe =>.Microsoft Corporation® O4 - HKUS\S-1-5-21-778808802-1970086714-4052149648-1001\..\Run: [CCleaner Monitoring] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner64.exe =>.Piriform Ltd® O4 - HKUS\S-1-5-21-778808802-1970086714-4052149648-1001\..\Run: [Plex Media Server] . (.Plex, Inc. - Plex Media Server.) -- C:\Program Files (x86)\Plex\Plex Media Server\Plex Media Server.exe =>.Plex, Inc.® ---\\ Raccourcis Global Startup (23) - 1s O4 - GS\Desktop [Administrateur]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\chucky\ZHPDiag3.exe =>.Nicolas Coolman O4 - GS\Quicklaunch [Administrateur]: Google Chrome.lnk . (...) C:\Program Files (x86)\speed browser\Application\browser.exe =>PUP.Optional.SpeedBrowser O4 - GS\Quicklaunch [Administrateur]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc® O4 - GS\Quicklaunch [Administrateur]: Launch Internet Explorer Browser.lnk . (...) C:\Program Files (x86)\speed browser\Application\browser.exe =>PUP.Optional.SpeedBrowser O4 - GS\sendTo [Administrateur]: Format Factory.lnk . (.Free Time - FormatFactory.) C:\Program Files (x86)\FormatFactory\FormatFactory.exe =>.chen jun hao® O4 - GS\TaskBar [Administrateur]: Chromium.lnk . (...) C:\Program Files (x86)\speed browser\Application\LaunchBrowser_sb.exe =>PUP.Optional.SpeedBrowser O4 - GS\TaskBar [Administrateur]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc® O4 - GS\TaskBar [Administrateur]: JDownloader 2.lnk . (.AppWork GmbH - JDownloader 2 Launcher.) C:\Users\chucky\AppData\Local\JDownloader 2.0\JDownloader2.exe =>.Appwork GmbH® O4 - GS\Desktop [chucky]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\chucky\ZHPDiag3.exe =>.Nicolas Coolman O4 - GS\Quicklaunch [chucky]: Google Chrome.lnk . (...) C:\Program Files (x86)\speed browser\Application\browser.exe =>PUP.Optional.SpeedBrowser O4 - GS\Quicklaunch [chucky]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc® O4 - GS\Quicklaunch [chucky]: Launch Internet Explorer Browser.lnk . (...) C:\Program Files (x86)\speed browser\Application\browser.exe =>PUP.Optional.SpeedBrowser O4 - GS\sendTo [chucky]: Format Factory.lnk . (.Free Time - FormatFactory.) C:\Program Files (x86)\FormatFactory\FormatFactory.exe =>.chen jun hao® O4 - GS\TaskBar [chucky]: Chromium.lnk . (...) C:\Program Files (x86)\speed browser\Application\LaunchBrowser_sb.exe =>PUP.Optional.SpeedBrowser O4 - GS\TaskBar [chucky]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc® O4 - GS\TaskBar [chucky]: JDownloader 2.lnk . (.AppWork GmbH - JDownloader 2 Launcher.) C:\Users\chucky\AppData\Local\JDownloader 2.0\JDownloader2.exe =>.Appwork GmbH® O4 - GS\CommonDesktop [Public]: Malwarebytes Anti-Malware.lnk . (.Malwarebytes - Malwarebytes Anti-Malware.) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe =>.Malwarebytes Corporation® O4 - GS\Startup [Public]: FAH.lnk . (.Nico Mak Computing - .) C:\Program Files (x86)\WinZip\FAH\FAHConsole.exe =>.Nico Mak Computing O4 - GS\Startup [Public]: WinZip Préchargeur.lnk . (.WinZip Computing, S.L. - .) C:\Program Files (x86)\WinZip\WzPreloader.exe =>.WinZip Computing, S.L. O4 - GS\Programs [Public]: avast! antivirus.lnk . (...) C:\Program Files\AVAST Software\Avast\AvastUI.exe O4 - GS\Programs [Public]: chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc® O4 - GS\Programs [Public]: Documents.lnk . (...) C:\Users\chucky\Documents O4 - GS\Programs [Public]: Pictures.lnk . (...) C:\Users\chucky\Pictures ---\\ Modification Domaine/Adresses DNS (3) - 0s O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 89.2.0.10 O17 - HKLM\System\CCS\Services\Tcpip\..\{1571375F-2298-4B3F-BF36-18C7D44ABD34}: DhcpNameServer = 192.168.0.254 O17 - HKLM\System\CCS\Services\Tcpip\..\{DD5AA88C-116D-443C-92D7-633191864D99}: DhcpNameServer = 89.2.0.10 ---\\ Protocole additionnel (22) - 1s O18 - Handler: about [64Bits] - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation O18 - Handler: cdl [64Bits] - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation O18 - Handler: dvd [64Bits] - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\SysWOW64\MSVidCtl.dll =>.Microsoft Corporation O18 - Handler: file [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation O18 - Handler: ftp [64Bits] - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation O18 - Handler: http [64Bits] - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation O18 - Handler: https [64Bits] - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation O18 - Handler: its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\SysWOW64\itss.dll =>.Microsoft Corporation O18 - Handler: javascript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation O18 - Handler: local [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation O18 - Handler: mailto [64Bits] - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation O18 - Handler: mhtml [64Bits] - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\SysWOW64\inetcomm.dll =>.Microsoft Corporation O18 - Handler: mk [64Bits] - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation O18 - Handler: ms-its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\SysWOW64\itss.dll =>.Microsoft Corporation O18 - Handler: osf [64Bits] - {D924BDC6-C83A-4BD5-90D0-095128A113D1} . (.Microsoft Corporation - Microsoft Office 2013 component.) -- C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL =>.Microsoft Corporation® O18 - Handler: res [64Bits] - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation O18 - Handler: tv [64Bits] - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\SysWOW64\MSVidCtl.dll =>.Microsoft Corporation O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation O18 - Filter: application/octet-stream [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\SysWOW64\mscoree.dll =>.Microsoft Corporation O18 - Filter: application/x-complus [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\SysWOW64\mscoree.dll =>.Microsoft Corporation O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\SysWOW64\mscoree.dll =>.Microsoft Corporation O18 - Filter: text/xml [64Bits] - {807583E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL =>.Microsoft Corporation® ---\\ Logiciels installés (105) - 6s O42 - Logiciel: abDocs - (.Acer Incorporated.) [HKLM][64Bits] -- {CA4FE8B0-298C-4E5D-A486-F33B126D6A0A} =>.Acer Incorporated® O42 - Logiciel: abDocs Office AddIn - (.Acer Incorporated.) [HKLM][64Bits] -- {DCBF3379-246B-47E1-8173-639B63940838} =>.Acer Incorporated O42 - Logiciel: abFiles - (.Acer Incorporated.) [HKLM][64Bits] -- {13885028-098C-4799-9B71-27DAC96502D5} =>.Acer Incorporated® O42 - Logiciel: abMedia - (.Acer Incorporated.) [HKLM][64Bits] -- {E9AF1707-3F3A-49E2-8345-4F2D629D0876} =>.Acer Incorporated® O42 - Logiciel: abPhoto - (.Acer Incorporated.) [HKLM][64Bits] -- {B5AD89F2-03D3-4206-8487-018298007DD0} =>.Acer Incorporated® O42 - Logiciel: Acer Care Center - (.Acer Incorporated.) [HKLM][64Bits] -- {A424844F-CDB3-45E2-BB77-1DDE4A091E76} =>.Acer Incorporated O42 - Logiciel: Acer Explorer Agent - (.Acer Incorporated.) [HKLM][64Bits] -- {4D0F42CF-1693-43D9-BDC8-19141D023EE0} =>.Acer Incorporated O42 - Logiciel: Acer Portal - (.Acer Incorporated.) [HKLM][64Bits] -- {A5AD0B17-F34D-49BE-A157-C8B3D52ACD13} =>.Acer Incorporated® O42 - Logiciel: Acer Quick Access - (.Acer Incorporated.) [HKLM][64Bits] -- {C1FA525F-D701-4B31-9D32-504FC0CF0B98} =>.Acer Incorporated O42 - Logiciel: Acer Recovery Management - (.Acer Incorporated.) [HKLM][64Bits] -- {07F2005A-8CAC-4A4B-83A2-DA98A722CA61} =>.Acer Incorporated O42 - Logiciel: Acer User Experience Improvement Program App Monitor Plugin - (.Acer Incorporated.) [HKLM][64Bits] -- {978724F6-1863-4DD5-9E66-FB77F5AB5613} =>.Acer Incorporated O42 - Logiciel: Acer User Experience Improvement Program Framework - (.Acer Incorporated.) [HKLM][64Bits] -- {12A718F2-2357-4D41-9E1F-18583A4745F7} =>.Acer Incorporated O42 - Logiciel: Adobe Flash Player 21 NPAPI - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player NPAPI =>.Adobe Systems Incorporated® O42 - Logiciel: Adobe Reader 9.4.0 - Français - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-7AD7-1036-7B44-A94000000001} =>.Adobe Systems Incorporated O42 - Logiciel: AirParrot - (.Squirrels.) [HKLM][64Bits] -- {F4597448-E8EF-4260-B7D8-1DDD10FDC8B0} =>.Squirrels O42 - Logiciel: AirParrot 2 - (.Squirrels.) [HKLM][64Bits] -- {BD94F5A2-C881-4C39-A9B9-8BB46113A1B9} =>.Squirrels O42 - Logiciel: Aloha TriPeaks - (.WildTangent.) [HKLM][64Bits] -- WTA-bded3732-ca5d-445b-bb0e-952cacca4466 =>.WildTangent Inc® O42 - Logiciel: Amazon 1Button App - (.Amazon.) [HKLM][64Bits] -- {B6DCCCD3-520D-4485-B642-FCC136CE12C3} =>.Amazon O42 - Logiciel: AOP Framework - (.Acer Incorporated.) [HKLM][64Bits] -- {4A37A114-702F-4055-A4B6-16571D4A5353} =>.Acer Incorporated® O42 - Logiciel: Avira Antivirus v15.0.16.282 - (.Avira Operations GmbH & Co. KG.) [HKLM][64Bits] -- Avira Antivirus =>.Avira Operations GmbH & Co. KG® O42 - Logiciel: Avira Launcher v1.1.56.9119 - (.Avira Operations GmbH & Co. KG.) [HKLM][64Bits] -- {083E4B17-EF54-4FD6-A3C8-CA2069FC1315} =>.Avira Operations GmbH & Co. KG O42 - Logiciel: Avira Launcher v1.1.56.9119 - (.Avira Operations GmbH & Co. KG.) [HKLM][64Bits] -- {3b87484e-d70b-4b4f-ad59-2ae89571e2cf} =>.Avira Operations GmbH & Co. KG O42 - Logiciel: Bejeweled 2 Deluxe - (.WildTangent.) [HKLM][64Bits] -- WTA-935e91f3-0630-4c93-8a27-f7b57b3b8617 =>.WildTangent Inc® O42 - Logiciel: CCleaner - (.Piriform.) [HKLM][64Bits] -- CCleaner =>.Piriform Ltd® O42 - Logiciel: Chromium - (.Chromium.) [HKCU][64Bits] -- Chromium =>.Chromium O42 - Logiciel: Clementine - (.Clementine.) [HKLM][64Bits] -- Clementine =>.Clementine O42 - Logiciel: CyberLink PhotoDirector 3 - (.CyberLink Corp..) [HKLM][64Bits] -- {39337565-330E-4ab6-A9AE-AC81E0720B10} =>.CyberLink Corp.® O42 - Logiciel: CyberLink PhotoDirector 3 - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{39337565-330E-4ab6-A9AE-AC81E0720B10} =>.CyberLink Corp.® O42 - Logiciel: CyberLink Power Media Player 12 - (.CyberLink Corp..) [HKLM][64Bits] -- {B46BEA36-0B71-4A4E-AE41-87241643FA0A} =>.CyberLink Corp.® O42 - Logiciel: CyberLink Power Media Player 12 - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{B46BEA36-0B71-4A4E-AE41-87241643FA0A} =>.CyberLink Corp.® O42 - Logiciel: CyberLink PowerDirector 10 - (.CyberLink Corp..) [HKLM][64Bits] -- {B0B4F6D2-F2AE-451A-9496-6F2F6A897B32} =>.CyberLink Corp.® O42 - Logiciel: CyberLink PowerDirector 10 - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32} =>.CyberLink Corp.® O42 - Logiciel: eBay Worldwide - (.OEM.) [HKLM][64Bits] -- {91589413-6675-4C27-8AFC-EFB9103B90A5} =>.OEM O42 - Logiciel: Farm to Fork Collector's Edition - (.WildTangent.) [HKLM][64Bits] -- WTA-883d26fd-95a1-463f-a5a4-52b024e517a9 =>.WildTangent Inc® O42 - Logiciel: FormatFactory 3.7.0.0 - (.Format Factory.) [HKLM][64Bits] -- FormatFactory =>.Format Factory O42 - Logiciel: Foxit PhantomPDF - (.Foxit Corporation.) [HKLM][64Bits] -- {F74C595C-BEF2-4AF9-9C4E-68F3CD509C4D} =>.Foxit Corporation O42 - Logiciel: Game Explorer Categories - genres - (.WildTangent, Inc..) [HKLM][64Bits] -- WildTangentGameProvider-acer-genres =>.WildTangent, Inc. O42 - Logiciel: Game Explorer Categories - main - (.WildTangent, Inc..) [HKLM][64Bits] -- WildTangentGameProvider-acer-main =>.WildTangent, Inc. O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM][64Bits] -- Google Chrome =>.Google Inc® O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {60EC980A-BDA2-4CB6-A427-B07A5498B4CA} =>.Google Inc. O42 - Logiciel: Governor of Poker 2 Premium Edition - (.WildTangent.) [HKLM][64Bits] -- WTA-909091bb-ff7f-4812-ac12-c469311fde45 =>.WildTangent Inc® O42 - Logiciel: Hotkey Utility - (.Acer Incorporated.) [HKLM][64Bits] -- {A6DC88AD-501A-44BC-884D-57435F972E2C} =>.Acer Incorporated O42 - Logiciel: HP Customer Experience Enhancements - (.Hewlett-Packard.) [HKLM][64Bits] -- {C9EF1AAF-B542-41C8-A537-1142DA5D4AEC} =>.Hewlett-Packard O42 - Logiciel: HP Support Assistant - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {79C54A05-F146-4EA0-8A70-D4EFE6181E52} =>.Hewlett-Packard Company O42 - Logiciel: HP Support Solutions Framework - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {ED5CE45D-842B-4C18-A002-87E16EA39BB3} =>.Hewlett-Packard Company O42 - Logiciel: Intel(R) Control Center - (.Intel Corporation.) [HKLM][64Bits] -- {F8A9085D-4C7A-41a9-8A77-C8998A96C421} =>.Intel Corporation® O42 - Logiciel: Intel(R) Management Engine Components - (.Intel Corporation.) [HKLM][64Bits] -- {65153EA5-8B6E-43B6-857B-C6E4FC25798A} =>.Intel Corporation - Software and Firmware Products® O42 - Logiciel: Intel® Trusted Connect Service Client - (.Intel Corporation.) [HKLM][64Bits] -- {B5E06417-A4AC-4225-B36E-7E34C91616E7} =>.Intel Corporation O42 - Logiciel: Java 8 Update 77 - (.Oracle Corporation.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F83218077F0} =>.Oracle Corporation O42 - Logiciel: Java Auto Updater - (.Oracle Corporation.) [HKLM][64Bits] -- {4A03706F-666A-4037-7777-5F2748764D10} =>.Oracle Corporation O42 - Logiciel: JDownloader 2 - (.AppWork GmbH.) [HKLM][64Bits] -- jdownloader2 =>.Appwork GmbH® O42 - Logiciel: Jewel Match 3 - (.WildTangent.) [HKLM][64Bits] -- WTA-de2c86c8-f62a-481e-b621-1b985cc1ce9a =>.WildTangent Inc® O42 - Logiciel: King Oddball - (.WildTangent.) [HKLM][64Bits] -- WTA-4006aa71-983c-4005-9fe6-09089b850753 =>.WildTangent Inc® O42 - Logiciel: KMSpico v9.1.3 - (...) [HKLM][64Bits] -- KMSpico_is1 =>HackTool.KMSpico O42 - Logiciel: Logiciel de base du périphérique HP Deskjet 1050 J410 series - (.Hewlett-Packard Co..) [HKLM][64Bits] -- {635F63A6-9FC8-4101-B109-00698C6F3A91} =>.Hewlett-Packard Co. O42 - Logiciel: LUXOR Evolved - (.WildTangent.) [HKLM][64Bits] -- WTA-f6636480-d67a-4684-86db-b6023d18fd06 =>.WildTangent Inc® O42 - Logiciel: Magic Academy - (.WildTangent.) [HKLM][64Bits] -- WTA-41d93b97-4f03-4e06-85b0-eb6eef701b9d =>.WildTangent Inc® O42 - Logiciel: Malwarebytes Anti-Malware version 2.2.1.1043 - (.Malwarebytes.) [HKLM][64Bits] -- Malwarebytes Anti-Malware_is1 =>.Malwarebytes O42 - Logiciel: Manga Studio EX Demo 4.0 - (.Smith Micro.) [HKLM][64Bits] -- {EEE6B5FD-EA10-42F0-B15E-620DE927B53C} =>.Smith Micro O42 - Logiciel: Microsoft Access MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0015-040C-1000-0000000FF1CE} =>.Microsoft Corporation O42 - Logiciel: Microsoft DCF MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0090-040C-1000-0000000FF1CE} =>.Microsoft Corporation O42 - Logiciel: Microsoft Excel MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0016-040C-1000-0000000FF1CE} =>.Microsoft Corporation O42 - Logiciel: Microsoft Groove MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-00BA-040C-1000-0000000FF1CE} =>.Microsoft Corporation O42 - Logiciel: Microsoft InfoPath MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0044-040C-1000-0000000FF1CE} =>.Microsoft Corporation O42 - Logiciel: Microsoft Lync MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-012B-040C-1000-0000000FF1CE} =>.Microsoft Corporation O42 - Logiciel: Microsoft OneNote MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-00A1-040C-1000-0000000FF1CE} =>.Microsoft Corporation O42 - Logiciel: Microsoft Outlook MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-001A-040C-1000-0000000FF1CE} =>.Microsoft Corporation O42 - Logiciel: Microsoft PowerPoint MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0018-040C-1000-0000000FF1CE} =>.Microsoft Corporation O42 - Logiciel: Microsoft Publisher MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0019-040C-1000-0000000FF1CE} =>.Microsoft Corporation O42 - Logiciel: Microsoft Word MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-001B-040C-1000-0000000FF1CE} =>.Microsoft Corporation O42 - Logiciel: Mises à jour NVIDIA 12.4.67 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update =>.NVIDIA Corporation O42 - Logiciel: NVIDIA Install Application - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer =>.NVIDIA Corporation O42 - Logiciel: NVIDIA LED Visualizer 1.0 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.LEDVisualizer =>.NVIDIA Corporation O42 - Logiciel: NVIDIA Logiciel système PhysX 9.13.1220 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX =>.NVIDIA Corporation O42 - Logiciel: NVIDIA Network Service - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Network.Service =>.NVIDIA Corporation O42 - Logiciel: NVIDIA PhysX - (.NVIDIA Corporation.) [HKLM][64Bits] -- {80407BA7-7763-4395-AB98-5233F1B34E65} =>.NVIDIA Corporation O42 - Logiciel: NVIDIA Pilote 3D Vision 333.02 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision =>.NVIDIA Corporation O42 - Logiciel: NVIDIA Pilote audio HD : 1.3.30.1 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver =>.NVIDIA Corporation O42 - Logiciel: NVIDIA Pilote du contrôleur 3D Vision 331.82 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB =>.NVIDIA Corporation O42 - Logiciel: NVIDIA Pilote graphique 333.02 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver =>.NVIDIA Corporation O42 - Logiciel: NVIDIA ShadowPlay 12.4.67 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_ShadowPlay =>.NVIDIA Corporation O42 - Logiciel: NVIDIA Stereoscopic 3D Driver - (.NVIDIA Corporation.) [HKLM][64Bits] -- NVIDIAStereo =>.NVIDIA Corporation® O42 - Logiciel: NVIDIA Update Core - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Update.Core =>.NVIDIA Corporation O42 - Logiciel: NVIDIA Virtual Audio 1.2.23 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_VirtualAudio.Driver =>.NVIDIA Corporation O42 - Logiciel: Panneau de configuration NVIDIA 333.02 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel =>.NVIDIA Corporation O42 - Logiciel: PDF-Viewer - (.Tracker Software Products Ltd.) [HKLM][64Bits] -- {A278382D-4F1B-4D47-9885-8523F7261E8D}_is1 =>.Tracker Software Products (Canada) Ltd® O42 - Logiciel: Peggle Nights - (.WildTangent.) [HKLM][64Bits] -- WTA-fba5d25e-8d21-4686-9fc4-dfd167e8879b =>.WildTangent Inc® O42 - Logiciel: Plants vs. Zombies - Game of the Year - (.WildTangent.) [HKLM][64Bits] -- WTA-bc453792-b212-4a85-863d-462935248f5c =>.WildTangent Inc® O42 - Logiciel: Plex Media Server - (.Plex, Inc..) [HKLM][64Bits] -- {5850BC27-BB09-4B8E-B02A-9D9D50B0EDB3} =>.Plex, Inc. O42 - Logiciel: Plex Media Server - (.Plex, Inc..) [HKLM][64Bits] -- {858a1616-b2b2-4c74-abbe-ddbc8484b22f} =>.Plex, Inc. O42 - Logiciel: Plumbytes Anti-Malware 2016 - (.Plumbytes Software.) [HKLM][64Bits] -- Plumbytes Anti-Malware 2016 O42 - Logiciel: Polar Bowler 1st Frame - (.WildTangent.) [HKLM][64Bits] -- WTA-d2d913c0-fc45-44e4-985b-9ab4e52319a5 =>.WildTangent Inc® O42 - Logiciel: Realtek Card Reader - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {5BC2B5AB-80DE-4E83-B8CF-426902051D0A} =>.Realtek Semiconductor Corp® O42 - Logiciel: Realtek Ethernet Controller Driver - (.Realtek.) [HKLM][64Bits] -- {8833FFB6-5B0C-4764-81AA-06DFEED9A476} =>.Realtek Semiconductor Corp® O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC} =>.Realtek Semiconductor Corp. O42 - Logiciel: Spotify - (.Spotify AB.) [HKLM][64Bits] -- Spotify =>.Spotify AB® O42 - Logiciel: The Chronicles of Emerland Solitaire - (.WildTangent.) [HKLM][64Bits] -- WTA-f6ad2da2-10f1-4d1d-81f1-851c58a53ba3 =>.WildTangent Inc® O42 - Logiciel: Trinklit Supreme - (.WildTangent.) [HKLM][64Bits] -- WTA-9d4b0d8a-08cd-48eb-9176-ff7f93738629 =>.WildTangent Inc® O42 - Logiciel: Update Installer for WildTangent Games App - (.WildTangent.) [HKLM][64Bits] -- {2FA94A64-C84E-49d1-97DD-7BF06C7BBFB2}.WildTangent Games App =>.WildTangent Inc® O42 - Logiciel: WildTangent Games - (.WildTangent.) [HKLM][64Bits] -- WildTangent wildgames Master Uninstall =>.WildTangent Inc® O42 - Logiciel: WildTangent Games App - (.WildTangent.) [HKLM][64Bits] -- {70B446D1-E03B-4ab0-9B3C-0832142C9AA8}.WildTangent Games App-acer =>.WildTangent Inc® O42 - Logiciel: WinPcap 4.1.2 - (.CACE Technologies.) [HKLM][64Bits] -- WinPcapInst =>.CACE Technologies O42 - Logiciel: WinRAR 5.21 (32-bit) - (.win.rar GmbH.) [HKLM][64Bits] -- WinRAR archiver =>.win.rar GmbH® O42 - Logiciel: WinZip 19.5 - (.WinZip Computing, S.L. .) [HKLM][64Bits] -- {CD95F661-A5C4-44F5-A6AA-ECDD91C240ED} =>.WinZip Computing, S.L. O42 - Logiciel: Zuma's Revenge - (.WildTangent.) [HKLM][64Bits] -- WTA-521d287a-621d-4469-ac74-8687a1f74c9d =>.WildTangent Inc® ---\\ HKCU & HKLM Software Keys (103) - 6s HKLM\SOFTWARE\Wow6432Node\Adobe HKLM\SOFTWARE\Wow6432Node\AdwCleaner HKLM\SOFTWARE\Wow6432Node\AGEIA Technologies HKLM\SOFTWARE\Wow6432Node\AppDataLow HKLM\SOFTWARE\Wow6432Node\Avira HKLM\SOFTWARE\Wow6432Node\Clearfi HKLM\SOFTWARE\Wow6432Node\CyberLink HKLM\SOFTWARE\Wow6432Node\efasdfsadfasdf HKLM\SOFTWARE\Wow6432Node\ej-technologies HKLM\SOFTWARE\Wow6432Node\ES-Computing HKLM\SOFTWARE\Wow6432Node\Foxit Software HKLM\SOFTWARE\Wow6432Node\GNU HKLM\SOFTWARE\Wow6432Node\Google HKLM\SOFTWARE\Wow6432Node\HaaliMkx HKLM\SOFTWARE\Wow6432Node\Hewlett-Packard HKLM\SOFTWARE\Wow6432Node\IE5Tools HKLM\SOFTWARE\Wow6432Node\Intel HKLM\SOFTWARE\Wow6432Node\JavaSoft HKLM\SOFTWARE\Wow6432Node\JreMetrics HKLM\SOFTWARE\Wow6432Node\Khronos HKLM\SOFTWARE\Wow6432Node\Lake HKLM\SOFTWARE\Wow6432Node\LogMeInRescueCallingCard HKLM\SOFTWARE\Wow6432Node\Macromedia HKLM\SOFTWARE\Wow6432Node\Malwarebytes' Anti-Malware HKLM\SOFTWARE\Wow6432Node\MaxPower HKLM\SOFTWARE\Wow6432Node\McAfee HKLM\SOFTWARE\Wow6432Node\MOVAVI HKLM\SOFTWARE\Wow6432Node\Mozilla HKLM\SOFTWARE\Wow6432Node\mozilla.org HKLM\SOFTWARE\Wow6432Node\MozillaPlugins HKLM\SOFTWARE\Wow6432Node\Network Associates HKLM\SOFTWARE\Wow6432Node\Nico Mak Computing HKLM\SOFTWARE\Wow6432Node\Nuance HKLM\SOFTWARE\Wow6432Node\NVIDIA Corporation HKLM\SOFTWARE\Wow6432Node\ODBC HKLM\SOFTWARE\Wow6432Node\OEM HKLM\SOFTWARE\Wow6432Node\PowerPivot HKLM\SOFTWARE\Wow6432Node\Realtek HKLM\SOFTWARE\Wow6432Node\Realtek Semiconductor Corp. HKLM\SOFTWARE\Wow6432Node\REGISTEREDAPPLICATIONS HKLM\SOFTWARE\Wow6432Node\Skype HKLM\SOFTWARE\Wow6432Node\Software HKLM\SOFTWARE\Wow6432Node\SynergeticSoft HKLM\SOFTWARE\Wow6432Node\WildTangent HKLM\SOFTWARE\Wow6432Node\WinPcap HKLM\SOFTWARE\Wow6432Node\WinRAR HKLM\SOFTWARE\Wow6432Node\X-AVCSD HKCU\SOFTWARE\Acer HKCU\SOFTWARE\Adobe HKCU\SOFTWARE\AppDataLow HKCU\SOFTWARE\Avira HKCU\SOFTWARE\Chromium HKCU\SOFTWARE\Clementine HKCU\SOFTWARE\ej-technologies HKCU\SOFTWARE\ES-Computing HKCU\SOFTWARE\Foxit Corporation HKCU\SOFTWARE\Foxit Software HKCU\SOFTWARE\FreeDownloadManager.ORG HKCU\SOFTWARE\FreeTime HKCU\SOFTWARE\Gabest HKCU\SOFTWARE\GNU HKCU\SOFTWARE\Google HKCU\SOFTWARE\Guru HKCU\SOFTWARE\Haali HKCU\SOFTWARE\Hewlett-Packard HKCU\SOFTWARE\HP HKCU\SOFTWARE\IM Providers HKCU\SOFTWARE\InstallPath HKCU\SOFTWARE\JavaSoft HKCU\SOFTWARE\Local AppWizard-Generated Applications HKCU\SOFTWARE\Macromedia HKCU\SOFTWARE\Magix HKCU\SOFTWARE\MOVAVI HKCU\SOFTWARE\Mozilla HKCU\SOFTWARE\MozillaPlugins HKCU\SOFTWARE\Netscape HKCU\SOFTWARE\Nico Mak Computing HKCU\SOFTWARE\NVIDIA Corporation HKCU\SOFTWARE\ODBC HKCU\SOFTWARE\OEM HKCU\SOFTWARE\Opera Software HKCU\SOFTWARE\Piriform HKCU\SOFTWARE\Plex, Inc. HKCU\SOFTWARE\ProPCCleanerConfig =>.Superfluous.DoctorPC HKCU\SOFTWARE\QtProject HKCU\SOFTWARE\Realtek HKCU\SOFTWARE\RegisteredApplications HKCU\SOFTWARE\Settings HKCU\SOFTWARE\Skype HKCU\SOFTWARE\Software HKCU\SOFTWARE\Squirrels HKCU\SOFTWARE\SynergeticSoft HKCU\SOFTWARE\Tracker Software HKCU\SOFTWARE\Trolltech HKCU\SOFTWARE\UNO by Claude Toupin HKCU\SOFTWARE\WinRAR HKCU\SOFTWARE\WinRAR SFX HKCU\SOFTWARE\WinZip Computing HKCU\SOFTWARE\Wow6432Node HKCU\SOFTWARE\ZebHelpProcess Helper HKCU\SOFTWARE\AppDataLow\Software HKCU\SOFTWARE\AppDataLow\Software\Amazon HKCU\SOFTWARE\AppDataLow\Software\JavaSoft ---\\ Contenu des dossiers Programmes (241) - 31s O43 - CFD: 07/07/2015 - [] D -- C:\Program Files\Accessory Store =>.Acer Incorporated® O43 - CFD: 03/02/2015 - [] D -- C:\Program Files\Acer =>.Acer Incorporated® O43 - CFD: 22/10/2015 - [] D -- C:\Program Files\AirParrot 2 O43 - CFD: 08/03/2016 - [] D -- C:\Program Files\CCleaner =>.Piriform Ltd® O43 - CFD: 31/10/2015 - [] D -- C:\Program Files\Common Files O43 - CFD: 03/02/2015 - [] D -- C:\Program Files\Dropbox =>.Acer Incorporated® O43 - CFD: 07/07/2015 - [0] SHD -- C:\Program Files\Fichiers communs O43 - CFD: 24/11/2015 - [] D -- C:\Program Files\HP =>.Hewlett Packard® O43 - CFD: 03/02/2015 - [] D -- C:\Program Files\Intel O43 - CFD: 13/04/2016 - [] D -- C:\Program Files\Internet Explorer O43 - CFD: 12/08/2015 - [] D -- C:\Program Files\KMSpico =>HackTool.KMSpico O43 - CFD: 12/08/2015 - [] D -- C:\Program Files\Microsoft Analysis Services =>.Microsoft Corporation® O43 - CFD: 12/08/2015 - [] D -- C:\Program Files\Microsoft Office =>.Microsoft Corporation® O43 - CFD: 12/08/2015 - [] D -- C:\Program Files\Microsoft SQL Server O43 - CFD: 12/08/2015 - [] D -- C:\Program Files\Microsoft.NET O43 - CFD: 14/07/2014 - [] D -- C:\Program Files\MSBuild O43 - CFD: 03/02/2015 - [] D -- C:\Program Files\NVIDIA Corporation =>.NVIDIA Corporation® O43 - CFD: 14/04/2016 - [] D -- C:\Program Files\Plumbytes Software {0A801728CE51A218C22437A4AB4119C1} O43 - CFD: 03/02/2015 - [] D -- C:\Program Files\Realtek =>.Andrea Electronics® O43 - CFD: 14/07/2014 - [] D -- C:\Program Files\Reference Assemblies O43 - CFD: 30/12/2015 - [] D -- C:\Program Files\Tracker Software =>.Tracker Software Products (Canada) Ltd® O43 - CFD: 22/08/2013 - [0] HD -- C:\Program Files\Uninstall Information O43 - CFD: 04/09/2015 - [] D -- C:\Program Files\Windows Defender =>.Microsoft Corporation® O43 - CFD: 11/02/2016 - [] D -- C:\Program Files\Windows Journal O43 - CFD: 11/07/2015 - [] D -- C:\Program Files\Windows Mail O43 - CFD: 11/07/2015 - [] D -- C:\Program Files\Windows Media Player O43 - CFD: 11/07/2015 - [] D -- C:\Program Files\Windows Multimedia Platform O43 - CFD: 07/07/2015 - [] D -- C:\Program Files\Windows NT O43 - CFD: 11/07/2015 - [] D -- C:\Program Files\Windows Photo Viewer =>.Microsoft Corporation® O43 - CFD: 11/07/2015 - [] D -- C:\Program Files\Windows Portable Devices O43 - CFD: 22/08/2013 - [] SHD -- C:\Program Files\Windows Sidebar O43 - CFD: 09/03/2016 - [] HD -- C:\Program Files\WindowsApps O43 - CFD: 11/07/2015 - [] D -- C:\Program Files\WindowsPowerShell O43 - CFD: 29/09/2015 - [] D -- C:\Program Files\WinZip =>.Add-in Express® O43 - CFD: 09/07/2015 - [] D -- C:\Program Files (x86)\Acer =>.Acer Incorporated® O43 - CFD: 20/03/2016 - [] D -- C:\Program Files (x86)\Adobe =>.Adobe Systems, Incorporated® O43 - CFD: 22/10/2015 - [] D -- C:\Program Files (x86)\AirParrot {3026BA625D87CF1D5581430CEDC7DBA8} O43 - CFD: 01/04/2016 - [] D -- C:\Program Files (x86)\Amazon =>.Amazon Services LLC® O43 - CFD: 23/10/2015 - [] D -- C:\Program Files (x86)\Avira =>.Avira Operations GmbH & Co. KG® O43 - CFD: 11/10/2015 - [] D -- C:\Program Files (x86)\Clementine O43 - CFD: 01/04/2016 - [] D -- C:\Program Files (x86)\Common Files O43 - CFD: 03/02/2015 - [] D -- C:\Program Files (x86)\CyberLink =>.CyberLink® O43 - CFD: 30/07/2015 - [] D -- C:\Program Files (x86)\FormatFactory =>.chen jun hao® O43 - CFD: 03/02/2015 - [] D -- C:\Program Files (x86)\Foxit PhantomPDF =>.Foxit Corporation® O43 - CFD: 09/07/2015 - [] D -- C:\Program Files (x86)\Google =>.Google Inc® O43 - CFD: 24/11/2015 - [] D -- C:\Program Files (x86)\Hewlett-Packard =>.Hewlett-Packard Company® O43 - CFD: 24/11/2015 - [] D -- C:\Program Files (x86)\HP =>.Hewlett Packard® O43 - CFD: 24/11/2015 - [] HD -- C:\Program Files (x86)\InstallShield Installation Information =>.Macrovision Corporation® O43 - CFD: 03/02/2015 - [] D -- C:\Program Files (x86)\Intel =>.Intel Corporation - Software and Firmware Products® O43 - CFD: 13/04/2016 - [] D -- C:\Program Files (x86)\Internet Explorer O43 - CFD: 01/04/2016 - [] D -- C:\Program Files (x86)\Java =>.Oracle America, Inc.® O43 - CFD: 27/07/2015 - [] D -- C:\Program Files (x86)\JDownloader O43 - CFD: 14/04/2016 - [] D -- C:\Program Files (x86)\Malwarebytes Anti-Malware =>.Malwarebytes Corporation® O43 - CFD: 12/08/2015 - [] D -- C:\Program Files (x86)\Microsoft Analysis Services =>.Microsoft Corporation® O43 - CFD: 03/02/2015 - [] D -- C:\Program Files (x86)\Microsoft Office =>.Microsoft Corporation® O43 - CFD: 12/08/2015 - [] D -- C:\Program Files (x86)\Microsoft SQL Server O43 - CFD: 12/08/2015 - [] D -- C:\Program Files (x86)\Microsoft.NET O43 - CFD: 12/08/2015 - [] D -- C:\Program Files (x86)\Mozilla Firefox O43 - CFD: 14/07/2014 - [] D -- C:\Program Files (x86)\MSBuild O43 - CFD: 03/02/2015 - [] D -- C:\Program Files (x86)\NVIDIA Corporation =>.NVIDIA Corporation® O43 - CFD: 07/07/2015 - [] D -- C:\Program Files (x86)\OEM O43 - CFD: 02/04/2016 - [] D -- C:\Program Files (x86)\Plex =>.Plex, Inc.® O43 - CFD: 03/02/2015 - [] D -- C:\Program Files (x86)\Realtek =>.Realtek Semiconductor Corp® O43 - CFD: 14/07/2014 - [] D -- C:\Program Files (x86)\Reference Assemblies O43 - CFD: 12/01/2016 - [] D -- C:\Program Files (x86)\Smith Micro O43 - CFD: 03/02/2015 - [] D -- C:\Program Files (x86)\Spotify =>.Spotify AB® O43 - CFD: 03/02/2015 - [0] HD -- C:\Program Files (x86)\Temp O43 - CFD: 20/03/2016 - [] D -- C:\Program Files (x86)\TP-LINK O43 - CFD: 14/07/2014 - [] D -- C:\Program Files (x86)\WildGames =>.WildTangent Inc® O43 - CFD: 27/07/2015 - [] D -- C:\Program Files (x86)\WildTangent Games =>.WildTangent Inc® O43 - CFD: 04/09/2015 - [] D -- C:\Program Files (x86)\Windows Defender O43 - CFD: 11/07/2015 - [] D -- C:\Program Files (x86)\Windows Mail O43 - CFD: 11/07/2015 - [] D -- C:\Program Files (x86)\Windows Media Player O43 - CFD: 11/07/2015 - [] D -- C:\Program Files (x86)\Windows Multimedia Platform O43 - CFD: 22/08/2013 - [] D -- C:\Program Files (x86)\Windows NT O43 - CFD: 11/07/2015 - [] D -- C:\Program Files (x86)\Windows Photo Viewer =>.Microsoft Corporation® O43 - CFD: 11/07/2015 - [] D -- C:\Program Files (x86)\Windows Portable Devices O43 - CFD: 22/08/2013 - [] SHD -- C:\Program Files (x86)\Windows Sidebar O43 - CFD: 22/08/2013 - [] D -- C:\Program Files (x86)\WindowsPowerShell O43 - CFD: 20/03/2016 - [] D -- C:\Program Files (x86)\WinPcap =>.CACE Technologies, Inc.® O43 - CFD: 12/08/2015 - [] D -- C:\Program Files (x86)\WinRAR =>.win.rar GmbH® O43 - CFD: 11/07/2015 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility O43 - CFD: 11/07/2015 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories O43 - CFD: 09/07/2015 - [] SD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer O43 - CFD: 11/07/2015 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools O43 - CFD: 22/10/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AirParrot 2 O43 - CFD: 22/03/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira O43 - CFD: 08/03/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner O43 - CFD: 11/10/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Clementine O43 - CFD: 03/02/2015 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink PhotoDirector 3 O43 - CFD: 03/02/2015 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink Power Media Player 12 O43 - CFD: 03/02/2015 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink PowerDirector 10 O43 - CFD: 19/07/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\dfsasdfasdfasdf O43 - CFD: 03/02/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit PhantomPDF O43 - CFD: 09/07/2015 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games O43 - CFD: 24/11/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP O43 - CFD: 24/11/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP Help and Support O43 - CFD: 03/02/2015 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel O43 - CFD: 01/04/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java O43 - CFD: 12/08/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KMSpico =>HackTool.KMSpico O43 - CFD: 22/08/2013 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance O43 - CFD: 14/04/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware O43 - CFD: 12/01/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Manga Studio EX Demo 4.0 O43 - CFD: 12/08/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013 O43 - CFD: 30/12/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF-XChange PDF Viewer O43 - CFD: 23/08/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PI Free PC O43 - CFD: 02/04/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Plex Media Server O43 - CFD: 19/02/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pop up Blocker v6.0.6 O43 - CFD: 19/02/2016 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp O43 - CFD: 11/07/2015 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools O43 - CFD: 18/03/2014 - [0] RHD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC O43 - CFD: 20/03/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinPcap O43 - CFD: 12/08/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR O43 - CFD: 29/09/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip O43 - CFD: 02/08/2015 - [] D -- C:\ProgramData\Acer O43 - CFD: 20/03/2016 - [] D -- C:\ProgramData\Adobe O43 - CFD: 22/10/2015 - [] D -- C:\ProgramData\AirParrot 2 O43 - CFD: 22/08/2013 - [0] SHD -- C:\ProgramData\Application Data O43 - CFD: 31/10/2015 - [] D -- C:\ProgramData\AVAST Software O43 - CFD: 23/10/2015 - [] D -- C:\ProgramData\Avira O43 - CFD: 09/07/2015 - [] D -- C:\ProgramData\BlueStacks O43 - CFD: 07/07/2015 - [0] SHD -- C:\ProgramData\Bureau O43 - CFD: 03/02/2015 - [] D -- C:\ProgramData\CLSK O43 - CFD: 09/07/2015 - [] D -- C:\ProgramData\Comodo O43 - CFD: 03/02/2015 - [] D -- C:\ProgramData\CyberLink O43 - CFD: 22/08/2013 - [0] SHD -- C:\ProgramData\Desktop O43 - CFD: 22/08/2013 - [0] SHD -- C:\ProgramData\Documents O43 - CFD: 20/07/2015 - [] D -- C:\ProgramData\FreeDownloadManager.ORG O43 - CFD: 25/11/2015 - [] D -- C:\ProgramData\Hewlett-Packard O43 - CFD: 24/11/2015 - [] D -- C:\ProgramData\HP O43 - CFD: 03/02/2015 - [] D -- C:\ProgramData\install_clap O43 - CFD: 03/02/2015 - [] D -- C:\ProgramData\Intel O43 - CFD: 06/11/2015 - [] D -- C:\ProgramData\IsolatedStorage O43 - CFD: 30/07/2015 - [] D -- C:\ProgramData\MAGIX O43 - CFD: 12/07/2015 - [] D -- C:\ProgramData\Malwarebytes O43 - CFD: 07/02/2016 - [] D -- C:\ProgramData\McAfee O43 - CFD: 07/07/2015 - [0] SHD -- C:\ProgramData\Menu Démarrer O43 - CFD: 22/03/2016 - [] SD -- C:\ProgramData\Microsoft O43 - CFD: 12/08/2015 - [] D -- C:\ProgramData\Microsoft Help O43 - CFD: 07/07/2015 - [0] SHD -- C:\ProgramData\Modèles O43 - CFD: 07/02/2016 - [] D -- C:\ProgramData\Movavi Screen Capture Studio 7 O43 - CFD: 20/07/2015 - [] D -- C:\ProgramData\Mozilla O43 - CFD: 14/04/2016 - [] D -- C:\ProgramData\NVIDIA O43 - CFD: 03/02/2015 - [] D -- C:\ProgramData\NVIDIA Corporation O43 - CFD: 09/07/2015 - [] D -- C:\ProgramData\OEM O43 - CFD: 07/07/2015 - [] D -- C:\ProgramData\OEM_YAHOO O43 - CFD: 01/04/2016 - [] D -- C:\ProgramData\Oracle O43 - CFD: 12/08/2015 - [] D -- C:\ProgramData\regid.1991-06.com.microsoft O43 - CFD: 12/11/2015 - [] D -- C:\ProgramData\Skype O43 - CFD: 22/08/2013 - [0] SHD -- C:\ProgramData\Start Menu O43 - CFD: 03/02/2015 - [] D -- C:\ProgramData\Temp O43 - CFD: 22/08/2013 - [0] SHD -- C:\ProgramData\Templates O43 - CFD: 09/07/2015 - [] D -- C:\ProgramData\WildTangent O43 - CFD: 29/09/2015 - [] D -- C:\ProgramData\WinZip O43 - CFD: 20/03/2016 - [] D -- C:\Program Files (x86)\Common Files\Adobe O43 - CFD: 03/02/2015 - [] D -- C:\Program Files (x86)\Common Files\InstallShield O43 - CFD: 01/04/2016 - [] D -- C:\Program Files (x86)\Common Files\Java O43 - CFD: 31/10/2015 - [] D -- C:\Program Files (x86)\Common Files\mcafee O43 - CFD: 12/08/2015 - [] D -- C:\Program Files (x86)\Common Files\Microsoft Shared O43 - CFD: 03/02/2015 - [] D -- C:\Program Files (x86)\Common Files\Nikon O43 - CFD: 03/02/2015 - [] D -- C:\Program Files (x86)\Common Files\postureAgent O43 - CFD: 22/08/2013 - [] D -- C:\Program Files (x86)\Common Files\Services O43 - CFD: 11/07/2015 - [] D -- C:\Program Files (x86)\Common Files\System O43 - CFD: 20/03/2016 - [] D -- C:\Users\chucky\AppData\Roaming\Adobe O43 - CFD: 23/10/2015 - [] D -- C:\Users\chucky\AppData\Roaming\Avira O43 - CFD: 06/11/2015 - [] D -- C:\Users\chucky\AppData\Roaming\EditPlus 3 O43 - CFD: 22/11/2015 - [] D -- C:\Users\chucky\AppData\Roaming\Foxit Software O43 - CFD: 20/07/2015 - [] D -- C:\Users\chucky\AppData\Roaming\FreeDownloadManager.ORG O43 - CFD: 24/11/2015 - [] D -- C:\Users\chucky\AppData\Roaming\Hewlett-Packard O43 - CFD: 24/11/2015 - [] D -- C:\Users\chucky\AppData\Roaming\hpqLog O43 - CFD: 12/07/2015 - [] D -- C:\Users\chucky\AppData\Roaming\Identities O43 - CFD: 03/03/2016 - [] D -- C:\Users\chucky\AppData\Roaming\inkscape O43 - CFD: 06/11/2015 - [] D -- C:\Users\chucky\AppData\Roaming\IsolatedStorage O43 - CFD: 07/07/2015 - [] D -- C:\Users\chucky\AppData\Roaming\Macromedia O43 - CFD: 30/07/2015 - [] D -- C:\Users\chucky\AppData\Roaming\MAGIX O43 - CFD: 14/04/2016 - [] SD -- C:\Users\chucky\AppData\Roaming\Microsoft O43 - CFD: 20/07/2015 - [] D -- C:\Users\chucky\AppData\Roaming\Mozilla O43 - CFD: 09/07/2015 - [] D -- C:\Users\chucky\AppData\Roaming\NVIDIA O43 - CFD: 11/07/2015 - [] D -- C:\Users\chucky\AppData\Roaming\Opera Software O43 - CFD: 30/03/2016 - [] D -- C:\Users\chucky\AppData\Roaming\Serviio-Console-Wrapper O43 - CFD: 11/07/2015 - [] D -- C:\Users\chucky\AppData\Roaming\Shortcut O43 - CFD: 12/11/2015 - [] D -- C:\Users\chucky\AppData\Roaming\Skype O43 - CFD: 12/01/2016 - [] D -- C:\Users\chucky\AppData\Roaming\Smith Micro O43 - CFD: 09/07/2015 - [] D -- C:\Users\chucky\AppData\Roaming\Spotify O43 - CFD: 01/04/2016 - [] D -- C:\Users\chucky\AppData\Roaming\Sun O43 - CFD: 09/07/2015 - [] D -- C:\Users\chucky\AppData\Roaming\WildTangent O43 - CFD: 12/08/2015 - [] D -- C:\Users\chucky\AppData\Roaming\WinRAR O43 - CFD: 30/12/2015 - [] D -- C:\Users\chucky\AppData\Roaming\YCanPDF O43 - CFD: 14/04/2016 - [] D -- C:\Users\chucky\AppData\Roaming\ZHP O43 - CFD: 09/07/2015 - [] D -- C:\Users\chucky\AppData\Local\Acer Aspire R7 Tutorial O43 - CFD: 20/03/2016 - [] D -- C:\Users\chucky\AppData\Local\Adobe O43 - CFD: 22/10/2015 - [] D -- C:\Users\chucky\AppData\Local\AirParrot O43 - CFD: 22/10/2015 - [] D -- C:\Users\chucky\AppData\Local\AirParrot 2 O43 - CFD: 09/07/2015 - [] D -- C:\Users\chucky\AppData\Local\AOP SDK O43 - CFD: 07/07/2015 - [0] SHD -- C:\Users\chucky\AppData\Local\Application Data O43 - CFD: 09/07/2015 - [] D -- C:\Users\chucky\AppData\Local\Apps O43 - CFD: 29/09/2015 - [] D -- C:\Users\chucky\AppData\Local\assembly O43 - CFD: 11/07/2015 - [] D -- C:\Users\chucky\AppData\Local\Chromium O43 - CFD: 23/08/2015 - [] D -- C:\Users\chucky\AppData\Local\clear.fi O43 - CFD: 14/04/2016 - [] D -- C:\Users\chucky\AppData\Local\CrashDumps O43 - CFD: 09/07/2015 - [0] D -- C:\Users\chucky\AppData\Local\Deployment O43 - CFD: 20/03/2016 - [] D -- C:\Users\chucky\AppData\Local\Diagnostics O43 - CFD: 14/03/2016 - [] D -- C:\Users\chucky\AppData\Local\ElevatedDiagnostics O43 - CFD: 13/09/2015 - [] D -- C:\Users\chucky\AppData\Local\Google O43 - CFD: 31/07/2015 - [] D -- C:\Users\chucky\AppData\Local\GWX O43 - CFD: 24/11/2015 - [] D -- C:\Users\chucky\AppData\Local\Hewlett-Packard O43 - CFD: 07/07/2015 - [0] SHD -- C:\Users\chucky\AppData\Local\Historique O43 - CFD: 24/11/2015 - [] D -- C:\Users\chucky\AppData\Local\HP O43 - CFD: 10/04/2016 - [] D -- C:\Users\chucky\AppData\Local\JDownloader 2.0 O43 - CFD: 15/03/2016 - [] D -- C:\Users\chucky\AppData\Local\Microsoft O43 - CFD: 12/08/2015 - [0] D -- C:\Users\chucky\AppData\Local\Microsoft Help O43 - CFD: 07/02/2016 - [] D -- C:\Users\chucky\AppData\Local\Movavi O43 - CFD: 20/07/2015 - [] D -- C:\Users\chucky\AppData\Local\Mozilla O43 - CFD: 07/07/2015 - [] D -- C:\Users\chucky\AppData\Local\NVIDIA O43 - CFD: 07/07/2015 - [] D -- C:\Users\chucky\AppData\Local\OEM O43 - CFD: 11/07/2015 - [] D -- C:\Users\chucky\AppData\Local\Opera Software O43 - CFD: 30/03/2016 - [] D -- C:\Users\chucky\AppData\Local\Packages O43 - CFD: 02/04/2016 - [] D -- C:\Users\chucky\AppData\Local\Plex Media Server O43 - CFD: 12/07/2015 - [] D -- C:\Users\chucky\AppData\Local\Programs O43 - CFD: 07/02/2016 - [] D -- C:\Users\chucky\AppData\Local\screencapture O43 - CFD: 07/02/2016 - [] D -- C:\Users\chucky\AppData\Local\ScreenCaptureStudio O43 - CFD: 11/11/2015 - [] D -- C:\Users\chucky\AppData\Local\Skype O43 - CFD: 09/07/2015 - [] D -- C:\Users\chucky\AppData\Local\Spotify O43 - CFD: 14/04/2016 - [] D -- C:\Users\chucky\AppData\Local\Temp O43 - CFD: 07/07/2015 - [0] SHD -- C:\Users\chucky\AppData\Local\Temporary Internet Files O43 - CFD: 12/01/2016 - [] D -- C:\Users\chucky\AppData\Local\VirtualStore O43 - CFD: 06/11/2015 - [] D -- C:\Users\chucky\AppData\Local\WinZip O43 - CFD: 14/04/2016 - [] D -- C:\Users\chucky\AppData\Local\{698D0BA5-6E4B-44BD-9F9A-AA32F2E98D9A} O43 - CFD: 12/07/2015 - [0] D -- C:\Users\chucky\AppData\Local\Programs\Common O43 - CFD: 11/07/2015 - [] D -- C:\Users\chucky\AppData\Local\Programs\Opera O43 - CFD: 18/03/2014 - [] RD -- C:\Users\chucky\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility O43 - CFD: 22/08/2013 - [] RD -- C:\Users\chucky\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories O43 - CFD: 14/04/2016 - [] RD -- C:\Users\chucky\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools O43 - CFD: 22/10/2015 - [] D -- C:\Users\chucky\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AirParrot O43 - CFD: 30/07/2015 - [] D -- C:\Users\chucky\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FormatFactory O43 - CFD: 27/07/2015 - [] D -- C:\Users\chucky\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\JDownloader O43 - CFD: 22/08/2013 - [] D -- C:\Users\chucky\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance O43 - CFD: 14/04/2016 - [] D -- C:\Users\chucky\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Plumbytes Anti-Malware O43 - CFD: 14/04/2016 - [] RD -- C:\Users\chucky\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup O43 - CFD: 19/07/2015 - [] RD -- C:\Users\chucky\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools O43 - CFD: 12/08/2015 - [] D -- C:\Users\chucky\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR ---\\ Derniers fichiers créés dans Windows Prefetcher (1) - 8s O45 - LFCP:[MD5.73F6C299FCFEAD2269DEA6936993D401] 28/07/2015 A -- C:\Windows\Prefetch\CROSSBROWSE.EXE-6BE4601B.pf =>PUP.Optional.CrossBrowse ---\\ ShellIconOverlayIdentifiers (SIOI) (3) - 0s O106 - SIOI: Microsoft SkyDrive Pro Icon Overlay 1 (ErrorConflict) [ SkyDrivePro1 (ErrorConflict)] - {8BA85C75-763B-4103-94EB-9470F12FE0F7}. (.Microsoft Corporation - Microsoft SkyDrive Pro Extensions.) -- C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL =>.Microsoft Corporation® O106 - SIOI: Microsoft SkyDrive Pro Icon Overlay 2 (SyncInProgress) [ SkyDrivePro2 (SyncInProgress)] - {CD55129A-B1A1-438E-A425-CEBC7DC684EE}. (.Microsoft Corporation - Microsoft SkyDrive Pro Extensions.) -- C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL =>.Microsoft Corporation® O106 - SIOI: Microsoft SkyDrive Pro Icon Overlay 3 (InSync) [ SkyDrivePro3 (InSync)] - {E768CD3B-BDDC-436D-9C13-E1B39CA257B1}. (.Microsoft Corporation - Microsoft SkyDrive Pro Extensions.) -- C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL =>.Microsoft Corporation® ---\\ Liste des pilotes du système (54) - 6s O58 - SDL:2013/08/22 14:43:41 A . (.LSI - LSI 3ware SCSI Storport Driver.) -- C:\Windows\System32\drivers\3ware.sys [108896] =>.Microsoft Windows® O58 - SDL:2013/08/22 14:43:41 A . (.PMC-Sierra - PMC-Sierra Storport Driver For SPC8x6G SAS.) -- C:\Windows\System32\drivers\adp80xx.sys [782176] =>.Microsoft Windows® O58 - SDL:2013/08/22 14:43:41 A . (.Advanced Micro Devices - AHCI 1.3 Device Driver.) -- C:\Windows\System32\drivers\amdsata.sys [79200] =>.Microsoft Windows® O58 - SDL:2013/08/22 14:43:41 A . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller D.) -- C:\Windows\System32\drivers\amdsbs.sys [259424] =>.Microsoft Windows® O58 - SDL:2013/08/22 14:43:40 A . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\Windows\System32\drivers\amdxata.sys [25952] =>.Microsoft Windows® O58 - SDL:2013/08/22 14:43:41 A . (.PMC-Sierra, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\System32\drivers\arcsas.sys [114016] =>.Microsoft Windows® O58 - SDL:2016/03/22 21:23:57 A . (.Avira Operations GmbH & Co. KG - Avira Minifilter Driver.) -- C:\Windows\System32\drivers\avgntflt.sys [128664] =>.Avira Operations GmbH & Co. KG® O58 - SDL:2016/03/22 21:23:57 A . (.Avira Operations GmbH & Co. KG - Avira Driver for Security Enhancement.) -- C:\Windows\System32\drivers\avipbb.sys [137952] =>.Avira Operations GmbH & Co. KG® O58 - SDL:2015/12/15 16:44:13 A . (.Avira Operations GmbH & Co. KG - Avira Manager Driver.) -- C:\Windows\System32\drivers\avkmgr.sys [35488] =>.Avira Operations GmbH & Co. KG® O58 - SDL:2016/03/22 21:23:57 A . (.Avira Operations GmbH & Co. KG - Avira WFP Network Driver.) -- C:\Windows\System32\drivers\avnetflt.sys [68936] =>.Avira Operations GmbH & Co. KG® O58 - SDL:2013/08/13 01:25:46 A . (.Windows (R) Win 7 DDK provider - BCM Function 2 Device Driver.) -- C:\Windows\System32\drivers\bcmfn2.sys [17624] =>.Broadcom Corporation® O58 - SDL:2013/07/01 18:50:06 A . (.Broadcom Corporation - Broadcom 802.11 Network Adapter wireless dr.) -- C:\Windows\System32\drivers\BCMWL63a.SYS [8536752] =>.Broadcom Corporation® O58 - SDL:2013/08/22 14:43:41 A . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.) -- C:\Windows\System32\drivers\bxvbda.sys [531296] =>.Microsoft Windows® O58 - SDL:2016/04/11 20:24:26 A . (...) -- C:\Windows\System32\drivers\EsgScanner.sys [22704] =>.Enigma Software Group USA, LLC® O58 - SDL:2013/08/22 14:43:45 A . (.Broadcom Corporation - Broadcom NetXtreme II 10 GigE VBD.) -- C:\Windows\System32\drivers\evbda.sys [3357024] =>.Microsoft Windows® O58 - SDL:2013/08/22 14:43:45 A . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Drive.) -- C:\Windows\System32\drivers\HpSAMD.sys [64352] =>.Microsoft Windows® O58 - SDL:2013/07/30 20:47:35 A . (.Intel Corporation - Intel(R) Serial IO GPIO Controller Driver.) -- C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568] =>.Intel Corporation - Software and Firmware Products® O58 - SDL:2013/07/25 21:05:39 A . (.Intel Corporation - Intel(R) Serial IO I2C Controller Driver.) -- C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320] =>.Intel Corporation - Software and Firmware Products® O58 - SDL:2013/08/10 02:39:30 A . (.Intel Corporation - Intel Rapid Storage Technology driver (inbo.) -- C:\Windows\System32\drivers\iaStorAV.sys [651248] =>.Intel Corporation - Intel® Rapid Storage Technology® O58 - SDL:2013/08/22 14:43:45 A . (.Intel Corporation - Intel Matrix Storage Manager driver - x64.) -- C:\Windows\System32\drivers\iaStorV.sys [412000] =>.Microsoft Windows® O58 - SDL:2013/08/22 14:43:44 A . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas.sys [109408] =>.Microsoft Windows® O58 - SDL:2013/08/22 14:43:45 A . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas2.sys [93536] =>.Microsoft Windows® O58 - SDL:2013/08/22 14:43:44 A . (.LSI Corporation - LSI SAS Gen3 Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas3.sys [81760] =>.Microsoft Windows® O58 - SDL:2013/08/22 14:43:45 A . (.LSI Corporation - LSI SSS PCIe/Flash Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sss.sys [82784] =>.Microsoft Windows® O58 - SDL:2016/03/10 14:08:54 A . (.Malwarebytes - Malwarebytes Anti-Malware.) -- C:\Windows\System32\drivers\mbam.sys [27008] =>.Malwarebytes Corporation® O58 - SDL:2016/03/10 14:08:58 A . (.Malwarebytes - Malwarebytes Chameleon Protection Driver.) -- C:\Windows\System32\drivers\mbamchameleon.sys [140672] =>.Malwarebytes Corporation® O58 - SDL:2016/04/14 11:18:15 A . (.Malwarebytes - Malwarebytes Anti-Malware.) -- C:\Windows\System32\drivers\MBAMSwissArmy.sys [192216] =>.Malwarebytes Corporation® O58 - SDL:2013/08/22 14:43:45 A . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows.) -- C:\Windows\System32\drivers\megasas.sys [56672] =>.Microsoft Windows® O58 - SDL:2013/08/22 14:43:45 A . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\System32\drivers\megasr.sys [575840] =>.Microsoft Windows® O58 - SDL:2013/08/22 14:43:49 A . (.Marvell Semiconductor, Inc. - Marvell Flash Controller Driver.) -- C:\Windows\System32\drivers\mvumis.sys [63840] =>.Microsoft Windows® O58 - SDL:2016/03/10 14:09:10 A . (.Malwarebytes Corporation - Malwarebytes Web Access Control.) -- C:\Windows\System32\drivers\mwac.sys [65408] =>.Malwarebytes Corporation® O58 - SDL:2013/06/18 20:30:32 A . (.Ralink Technology Corp. - Ralink 802.11n Wireless Adapter Driver.) -- C:\Windows\System32\drivers\netr28ux.sys [2408208] =>.Mediatek Inc.® O58 - SDL:2010/06/25 19:07:26 A . (.CACE Technologies, Inc. - npf.sys (NT5/6 AMD64) Kernel Driver.) -- C:\Windows\System32\drivers\npf.sys [35344] =>.CACE Technologies, Inc.® O58 - SDL:2013/11/28 00:38:20 A . (.NVIDIA Corporation - NVIDIA HDMI Audio Driver.) -- C:\Windows\System32\drivers\nvhda64v.sys [197408] =>.NVIDIA Corporation® O58 - SDL:2014/04/08 10:11:20 A . (.NVIDIA Corporation - NVIDIA Windows Kernel Mode Driver, Version.) -- C:\Windows\System32\drivers\nvlddmkm.sys [12697032] =>.NVIDIA Corporation® O58 - SDL:2013/08/22 14:43:31 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\System32\drivers\nvraid.sys [150368] =>.Microsoft Windows® O58 - SDL:2013/08/22 14:43:32 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\System32\drivers\nvstor.sys [168288] =>.Microsoft Windows® O58 - SDL:2014/03/31 03:42:44 A . (.NVIDIA Corporation - NVIDIA Virtual Audio Driver.) -- C:\Windows\System32\drivers\nvvad64v.sys [40392] =>.NVIDIA Corporation® O58 - SDL:2013/06/21 11:35:14 A . (.Realtek - Realtek 8101E/8168/8169 NDIS 6.30 64-bit Dr.) -- C:\Windows\System32\drivers\Rt630x64.sys [816344] =>.Realtek Semiconductor Corp® O58 - SDL:2013/07/19 08:50:56 A . (.Realtek semiconductor corp - NDIS User mode I/O Driver.) -- C:\Windows\System32\drivers\RtkIOAC60.sys [29912] =>.Realtek Semiconductor Corp® O58 - SDL:2013/08/21 06:50:02 A . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function D.) -- C:\Windows\System32\drivers\RTKVHD64.sys [3591000] =>.Realtek Semiconductor Corp® O58 - SDL:2013/12/24 09:14:16 A . (.Realtek Semiconductor Corp. - Realtek USB Mass Storage Driver for 2K/XP/V.) -- C:\Windows\System32\drivers\RtsUStor.sys [269528] =>.Realtek Semiconductor Corp® O58 - SDL:2013/12/16 07:44:16 A . (.Realtek Semiconductor Corp. - Realtek USB Mass Storage Driver for 2K/XP/V.) -- C:\Windows\System32\drivers\RtsUVStor.sys [330968] =>.Realtek Semiconductor Corp® O58 - SDL:2013/08/22 17:35:09 A . (.Macrovision Corporation, Macrovision Europe Limited, - Macrovision SECURITY Driver.) -- C:\Windows\System32\drivers\secdrv.sys [23040] =>.Macrovision Corporation, Macrovision Europe Limited, O58 - SDL:2013/08/22 14:43:31 A . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\System32\drivers\sisraid2.sys [44896] =>.Microsoft Windows® O58 - SDL:2013/08/22 14:43:32 A . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\System32\drivers\sisraid4.sys [81760] =>.Microsoft Windows® O58 - SDL:2015/12/08 05:00:54 A . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG USB Composite Device Driver (MSS Ve.) -- C:\Windows\System32\drivers\ssudbus.sys [122160] =>.DEVGURU CO LTD® O58 - SDL:2015/12/08 05:00:58 A . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG Android Modem Device Driver (MSS Ve.) -- C:\Windows\System32\drivers\ssudmdm.sys [214832] =>.DEVGURU CO LTD® O58 - SDL:2013/08/22 14:43:32 A . (.Promise Technology, Inc. - Promise SuperTrak EX Series Driver for Wind.) -- C:\Windows\System32\drivers\stexstor.sys [31072] =>.Microsoft Windows® O58 - SDL:2013/09/16 06:19:22 A . (.Intel Corporation - Intel(R) Management Engine Interface.) -- C:\Windows\System32\drivers\TeeDriverx64.sys [99288] =>.Intel Corporation - Intel® Management Engine Firmware® O58 - SDL:2013/08/22 14:43:34 A . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\viaide.sys [19808] =>.Microsoft Windows® O58 - SDL:2013/08/22 14:43:34 A . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\Windows\System32\drivers\vsmraid.sys [168800] =>.Microsoft Windows® O58 - SDL:2013/08/22 14:43:34 A . (.VIA Corporation - VIA StorX RAID Controller Driver.) -- C:\Windows\System32\drivers\VSTXRAID.SYS [305504] =>.Microsoft Windows® O58 - SDL:2015/11/12 23:50:10 A . (.Western Digital Technologies, Inc. - Western Digital SCSI Architecture Model (SA.) -- C:\Windows\System32\drivers\wdcsam64.sys [26880] =>.WDKTestCert wdclab,130885612892544312® ---\\ Derniers fichiers modifiés ou crées (Utilisateur) (5) - 17s O61 - LFC: 2016/04/14 10:45:27 A . (.Plumbytes Software.) -- C:\Users\chucky\Downloads\antimalwaresetup.exe [613664] {0A801728CE51A218C22437A4AB4119C1} O61 - LFC: 2016/04/14 11:23:32 A . (..) -- C:\Users\chucky\AppData\Local\Microsoft\Windows\INetCache\IE\QLBYSUMJ\urlblockindex[1].bin [16] O61 - LFC: 2016/04/10 16:51:45 N . (.Java(TM) Native Access (JNA).) -- C:\Users\chucky\AppData\Local\JDownloader 2.0\tmp\jna\jna7207169467246055873.dll [198144] O61 - LFC: 2016/04/10 16:51:55 A . (..) -- C:\Users\chucky\AppData\Local\JDownloader 2.0\tmp\7zip\SevenZipJBinding-FKPz9\lib7-Zip-JBinding.dll [4078962] O61 - LFC: 2016/04/10 16:51:55 A . (..) -- C:\Users\chucky\AppData\Local\JDownloader 2.0\tmp\7zip\SevenZipJBinding-FKPz9\libgcc_s_sjlj-1.dll [566439] ---\\ Associations Shell Spawning (10) - 0s O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe =>.Microsoft Corporation O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Ob.) -- C:\Windows\System32\eventvwr.exe =>.Microsoft Corporation O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe =>.Microsoft Corporation® O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\wscript.exe =>.Microsoft Corporation O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe =>.Microsoft Corporation O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S ---\\ Menu de démarrage Internet (7) - 0s O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc® O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc. O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc. O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc. O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation ---\\ Recherche d'infection sur les navigateurs (3) - 2s O69 - SBI: SearchScopes [HKCU] {012E1000-F331-11DB-8314-0800200C9A66} - (Google) - http://www.google.com/ O69 - SBI: SearchScopes [HKCU] {3D94B885-D932-4D7B-B115-3D804490D3CA} [DefaultScope] - (Bing) - http://www.bing.com/ O69 - SBI: SearchScopes [HKLM] {3D94B885-D932-4D7B-B115-3D804490D3CA} - (Bing) - http://www.bing.com/ ---\\ Enumère les services démarrés par Svchost (34) - 2s O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d’application.) -- C:\Windows\System32\aelupsvc.dll [214528] =>.Microsoft Corporation O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [156160] =>.Microsoft Corporation O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [156160] =>.Microsoft Corporation O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\system32\srvsvc.dll [329216] =>.Microsoft Corporation O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\System32\gpsvc.dll [1360896] =>.Microsoft Corporation O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\ikeext.dll [1083904] =>.Microsoft Corporation O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur u.) -- C:\Windows\System32\iphlpsvc.dll [926208] =>.Microsoft Corporation O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d’ouverture de session secon.) -- C:\Windows\system32\seclogon.dll [31744] =>.Microsoft Corporation O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll [110080] =>.Microsoft Corporation O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\system32\iscsiexe.dll [151040] =>.Microsoft Corporation O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll [110592] =>.Microsoft Corporation O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\system32\schedsvc.dll [1265152] =>.Microsoft Corporation O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\system32\wbem\WMIsvc.dll [230400] =>.Microsoft Corporation O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédia.) -- C:\Windows\system32\mmcss.dll [71168] =>.Microsoft Corporation O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\System32\browser.dll [135168] =>.Microsoft Corporation O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\system32\profsvc.dll [228864] =>.Microsoft Corporation O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à.) -- C:\Windows\System32\SessEnv.dll [339968] =>.Microsoft Corporation O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll [84992] =>.Microsoft Corporation O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\Windows\system32\kmsvc.dll [101376] =>.Microsoft Corporation O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\Windows\System32\bdesvc.dll [348672] =>.Microsoft Corporation O83 - Search Svchost Services: lfsvc (lfsvc) . (.Microsoft Corporation - Service d’infrastructure de localisation Wi.) -- C:\Windows\System32\GeofenceMonitorService.dll [522240] =>.Microsoft Corporation O83 - Search Svchost Services: wlidsvc (wlidsvc) . (.Microsoft Corporation - Service de compte Microsoft®.) -- C:\Windows\system32\wlidsvc.dll [1639424] =>.Microsoft Corporation O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\Windows\system32\themeservice.dll [59392] =>.Microsoft Corporation O83 - Search Svchost Services: DsmSvc (DsmSvc) . (.Microsoft Corporation - Gestionnaire d’installation de périphérique.) -- C:\Windows\System32\DeviceSetupManager.dll [206848] =>.Microsoft Corporation O83 - Search Svchost Services: NcaSvc (NcaSvc) . (.Microsoft Corporation - Service Assistant Connectivité réseau Micro.) -- C:\Windows\System32\ncasvc.dll [166400] =>.Microsoft Corporation O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’.) -- C:\Windows\System32\rasauto.dll [102912] =>.Microsoft Corporation O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire des connexions d’accès à dista.) -- C:\Windows\System32\rasmans.dll [542208] =>.Microsoft Corporation O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll [226816] =>.Microsoft Corporation O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements systèm.) -- C:\Windows\System32\sens.dll [73728] =>.Microsoft Corporation O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l’application d’assistance à.) -- C:\Windows\System32\ipnathlp.dll [452608] =>.Microsoft Corporation O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM.) -- C:\Windows\System32\tapisrv.dll [313344] =>.Microsoft Corporation O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Up.) -- C:\Windows\system32\wuaueng.dll [3708416] =>.Microsoft Corporation O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière.) -- C:\Windows\System32\qmgr.dll [933376] =>.Microsoft Corporation O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [640000] =>.Microsoft Corporation ---\\ Liste des exceptions du parefeu Windows (14) - 2s O87 - FAEL: "{4049F2C4-0190-4112-8F18-FAE41619BD79}" [In-None-P6-TRUE] .(...) -- C:\Program Files\KMSpico\KMSELDI.exe =>HackTool.KMSpico O87 - FAEL: "{C0621C29-563D-46C9-AAEA-6F2458C87CD1}" [In-None-P17-TRUE] .(...) -- C:\Program Files\KMSpico\KMSELDI.exe =>HackTool.KMSpico O87 - FAEL: "{36325318-7DEB-4016-AA56-47EEB7AD0CA9}" [In-None-P6-TRUE] .(...) -- C:\Program Files\KMSpico\AutoPico.exe =>HackTool.KMSpico O87 - FAEL: "{842FE190-2C57-477F-B4D7-6F1A2D9240F0}" [In-None-P17-TRUE] .(...) -- C:\Program Files\KMSpico\AutoPico.exe =>HackTool.KMSpico O87 - FAEL: "{6BC7CE99-3973-46B1-A8D6-23A19CF932EF}" [In-None-P6-TRUE] .(...) -- C:\Program Files\KMSpico\Service_KMS.exe =>HackTool.KMSpico O87 - FAEL: "{EE3A42CF-B744-4680-B510-7EC427BC325A}" [In-None-P17-TRUE] .(...) -- C:\Program Files\KMSpico\Service_KMS.exe =>HackTool.KMSpico O87 - FAEL: "{6AE739C0-F9E3-4EB9-B1EB-A7223DB25B05}" [In-None-P6-TRUE] .(...) -- C:\Program Files\KMSpico\Service_KMS.exe =>HackTool.KMSpico O87 - FAEL: "{4F016E54-793D-4FE1-8A12-0F04F2887AB3}" [In-None-P17-TRUE] .(...) -- C:\Program Files\KMSpico\Service_KMS.exe =>HackTool.KMSpico O87 - FAEL: "{085F94E7-1B92-4FF6-B54B-3445444BBA85}" [In-None-P6-TRUE] .(...) -- C:\Program Files\KMSpico\AutoPico.exe =>HackTool.KMSpico O87 - FAEL: "{1C214890-94B7-4D04-A455-66C8DAB29B38}" [In-None-P17-TRUE] .(...) -- C:\Program Files\KMSpico\AutoPico.exe =>HackTool.KMSpico O87 - FAEL: "TCP Query User{CD2D37CB-1F05-4AF0-AB3D-906567262F8E}C:\program files\serviio\jre\bin\javaw.exe" [In-None-P6-TRUE] .(...) -- C:\program files\serviio\jre\bin\javaw.exe (.not file.) O87 - FAEL: "UDP Query User{2A17198F-C557-4217-B5FB-6630161F6D3E}C:\program files\serviio\jre\bin\javaw.exe" [In-None-P17-TRUE] .(...) -- C:\program files\serviio\jre\bin\javaw.exe (.not file.) O87 - FAEL: "TCP Query User{E79916F7-6418-4705-B949-7EE086ED2DCC}C:\users\chucky\desktop\serviio\jre\bin\javaw.exe" [In-None-P6-TRUE] .(...) -- C:\users\chucky\desktop\serviio\jre\bin\javaw.exe (.not file.) O87 - FAEL: "UDP Query User{50D740C7-4F52-48D5-B63E-4728292E0568}C:\users\chucky\desktop\serviio\jre\bin\javaw.exe" [In-None-P17-TRUE] .(...) -- C:\users\chucky\desktop\serviio\jre\bin\javaw.exe (.not file.) ---\\ Enumère les codes produits des logiciels (1) - 1s O90 - PUC: "93BAD29AC2E44034A96BCB446EB8552E" . (.Software Update Helper.) =>PUP.Optional.Boxore ---\\ Scan Additionnel (12) - 0s HKLM\SYSTEM\CurrentControlSet\Services\Service KMSELDI =>HackTool.KMSpico C:\Program Files\KMSpico\Service_KMS.exe =>HackTool.KMSpico C:\Program Files\KMSpico\AutoPico.exe =>HackTool.KMSpico C:\Windows\System32\Tasks\AutoPico Daily Restart =>HackTool.KMSpico HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KMSpico_is1 =>HackTool.KMSpico HKCU\SOFTWARE\ProPCCleanerConfig =>.Superfluous.DoctorPC C:\Program Files\KMSpico =>HackTool.KMSpico C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KMSpico =>HackTool.KMSpico C:\Windows\Prefetch\CROSSBROWSE.EXE-6BE4601B.pf =>PUP.Optional.CrossBrowse C:\Program Files\KMSpico\KMSELDI.exe =>HackTool.KMSpico HKLM\Software\Classes\Installer\Products\93BAD29AC2E44034A96BCB446EB8552E =>PUP.Optional.Boxore HKLM\Software\Classes\Installer\Features\93BAD29AC2E44034A96BCB446EB8552E =>PUP.Optional.Boxore ---\\ Récapitulatif des éléments trouvés sur votre station (5) - 0s http://www.nicolascoolman.fr/?p=989 =>HackTool.KMSpico http://www.nicolascoolman.fr/?p=546 =>PUP.Optional.Browser http://www.nicolascoolman.fr/?p=5145 =>.Superfluous.DoctorPC http://www.nicolascoolman.fr/pup-optional-crossbrowse =>PUP.Optional.CrossBrowse http://www.nicolascoolman.fr/?p=90 =>PUP.Optional.Boxore ~ End of the scan, 32203 items in 00h01mn52s (940)(0)