~ ZHPDiag v2016.6.2.101 Par Nicolas Coolman (2016/06/02) ~ Démarré par nizaro (Administrator) (2016/06/02 12:08:14) ~ Site: http://www.nicolascoolman.com ~ Facebook: https://www.facebook.com/nicolascoolman1 ~ Etat de la version: Version OK ~ Mode: Scanner ~ Rapport: D:\Documents and Settings\nizaro\Bureau\ZHPDiag.txt ~ Rapport: D:\Documents and Settings\nizaro\Application Data\ZHP\ZHPDiag.txt ~ UAC: Deactivate ~ Démarrage du système: Normal (Normal boot) Windows XP, 32-bit Service Pack 3 (Build 2600) ---\\ Navigateurs Internet (2) - 0s GCIE: Google Chrome v49.0.2623.112 MSIE: Internet Explorer v8.0.6001.18702 ---\\ Informations sur les produits Windows (3) - 0s Windows Automatic Updates : OK Windows Activation Technologies : KO Windows Genuine Advantage : KO ---\\ Surveillance de Logiciels (1) - 1s Adobe Flash Player 20 ActiveX ---\\ Logiciels de partage P2P (1) - 1s µTorrent v3.4.7.42330 ---\\ Informations sur le système (6) - 0s ~ Operating System: x86 Family 6 Model 15 Stepping 13, GenuineIntel ~ Operating System: 32-bit ~ Boot mode: Normal (Normal boot) Total RAM: 2086.88 MB (60% free) System Restore: Activé (Enable) System drive D: has 177 GB () free of 199 GB ---\\ Mode de connexion au système (3) - 0s ~ Computer Name: NIZARO-2B4FA336 ~ User Name: nizaro ~ Logged in as Administrator ---\\ Enumération des unités disques (5) - 0s ~ Drive C: has 0 GB free of 0 GB ~ Drive D: has 177 GB free of 199 GB (System) ~ Drive E: has 89 GB free of 89 GB ~ Drive F: has 12 GB free of 15 GB ~ Drive G: has GB free of 0 GB ---\\ Etat du Centre de Sécurité Windows (8) - 0s [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] XMLLookup: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Intl: OK [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK [HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: OK [HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK ---\\ Recherche particulière de fichiers génériques (23) - 1s [MD5.B45DA298E42C7A44BA96AED93B1D7359] - 14/04/2008 - (.Microsoft Corporation - Explorateur Windows.) -- D:\WINDOWS\Explorer.exe [1544704] =>.Microsoft Corporation [MD5.670558300C4116766363F843C2ABD37F] - 14/04/2008 - (.Microsoft Corporation - Exécuter une DLL en tant qu'application.) -- D:\WINDOWS\System32\rundll32.exe [35328] =>.Microsoft Corporation [MD5.002CBAB9042F76BA2A0E1BC50CFC30D4] - 09/06/2010 - (.Microsoft Corporation - Internet Extensions for Win32.) -- D:\WINDOWS\System32\wininet.dll [985600] =>.Microsoft Corporation [MD5.917C64008889003E6EA19CF0793CBD72] - 14/04/2008 - (.Microsoft Corporation - Application d'ouverture de session Windows.) -- D:\WINDOWS\System32\Winlogon.exe [551424] =>.Microsoft Corporation [MD5.38A68A246F50F01F0A3A0DAD39A3FA6B] - 11/03/2010 - (.Microsoft Corporation - DNS Client API DLL.) -- D:\WINDOWS\System32\dnsapi.dll [147968] =>.Microsoft Corporation [MD5.4D43E74F2A1239D53929B82600F1971C] - 11/03/2010 - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) -- D:\WINDOWS\System32\drivers\AFD.sys [138496] =>.Microsoft Corporation [MD5.9F3A2F5AA6875C72BF062C712CFA2674] - 13/04/2008 - (.Microsoft Corporation - IDE/ATAPI Port Driver.) -- D:\WINDOWS\System32\drivers\atapi.sys [96512] =>.Microsoft Corporation [MD5.C885B02847F5D2FD45A24E219ED93B32] - 14/04/2008 - (.Microsoft Corporation - CD-ROM File System Driver.) -- D:\WINDOWS\System32\drivers\Cdfs.sys [63744] =>.Microsoft Corporation [MD5.1F4260CC5B42272D71F79E570A27A4FE] - 14/04/2008 - (.Microsoft Corporation - SCSI CD-ROM Driver.) -- D:\WINDOWS\System32\drivers\Cdrom.sys [62976] =>.Microsoft Corporation [MD5.31F923EB2170FC172C81ABDA0045D18C] - 14/04/2008 - (.Microsoft Corporation - Pilote de cryptographie FIPS.) -- D:\WINDOWS\System32\drivers\Fips.sys [44672] =>.Microsoft Corporation [MD5.573C7D0A32852B48F3058CFD8026F511] - 14/04/2008 - (.Windows (R) Server 2003 DDK provider - High Definition Audio Bus Driver v1.0a.) -- D:\WINDOWS\System32\drivers\HDAudBus.sys [144384] [MD5.A09BDC4ED10E3B2E0EC27BB94AF32516] - 14/04/2008 - (.Microsoft Corporation - Pilote de port i8042.) -- D:\WINDOWS\System32\drivers\i8042prt.sys [54144] =>.Microsoft Corporation [MD5.083A052659F5310DD8B6A6CB05EDCF8E] - 14/04/2008 - (.Microsoft Corporation - IMAPI Kernel Driver.) -- D:\WINDOWS\System32\drivers\Imapi.sys [42112] =>.Microsoft Corporation [MD5.CC748EA12C6EFFDE940EE98098BF96BB] - 14/04/2008 - (.Microsoft Corporation - IP Network Address Translator.) -- D:\WINDOWS\System32\drivers\IpNat.sys [152832] =>.Microsoft Corporation [MD5.23C74D75E36E7158768DD63D92789A91] - 14/04/2008 - (.Microsoft Corporation - IPSec Driver.) -- D:\WINDOWS\System32\drivers\IPSec.sys [75264] =>.Microsoft Corporation [MD5.D09B9F0B9960DD41E73127B7814C115F] - 30/04/2010 - (.Microsoft Corporation - Windows NT SMB Minirdr.) -- D:\WINDOWS\System32\drivers\MRxSmb.sys [457216] =>.Microsoft Corporation [MD5.74B2B2F5BEA5E9A3DC021D685551BD3D] - 14/04/2008 - (.Microsoft Corporation - MBT Transport driver.) -- D:\WINDOWS\System32\drivers\netBT.sys [162816] =>.Microsoft Corporation [MD5.78A08DD6A8D65E697C18E1DB01C5CDCA] - 14/04/2008 - (.Microsoft Corporation - NT File System Driver.) -- D:\WINDOWS\System32\drivers\ntfs.sys [574976] =>.Microsoft Corporation [MD5.8FD0BDBEA875D06CCF6C945CA9ABAF75] - 30/04/2010 - (.Microsoft Corporation - Pilote de port parallèle.) -- D:\WINDOWS\System32\drivers\Parport.sys [80384] =>.Microsoft Corporation [MD5.11B4A627BC9614B885C4969BFA5FF8A6] - 14/04/2008 - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) -- D:\WINDOWS\System32\drivers\Rasl2tp.sys [51328] =>.Microsoft Corporation [MD5.15CABD0F7C00C47C70124907916AF3F1] - 13/04/2008 - (.Microsoft Corporation - Microsoft RDP Device redirector.) -- D:\WINDOWS\System32\drivers\rdpdr.sys [196224] =>.Microsoft Corporation [MD5.D8EB2A7904DB6C916EB5361878DDCBAE] - 13/04/2008 - (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) -- D:\WINDOWS\System32\drivers\redbook.sys [58752] =>.Microsoft Corporation [MD5.46DE1126684369BACE4849E4FC8C43CA] - 14/04/2008 - (.Microsoft Corporation - Pilote de cliché instantané du volume.) -- D:\WINDOWS\System32\drivers\volsnap.sys [53376] =>.Microsoft Corporation ---\\ Liste des services NT non Microsoft et non désactivés (6) - 0s O23 - Service: Apple Mobile Device (Apple Mobile Device) . (.Apple Inc. - MobileDeviceService.) - D:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe =>.Apple Inc.® O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - D:\Program Files\Bonjour\mDNSResponder.exe =>.Apple Inc.® O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - D:\Program Files\Google\Update\GoogleUpdate.exe =>.Google Inc® O23 - Service: ScsiAccess (ScsiAccess) . (...) - D:\Program Files\Photodex\ProShowProducer\ScsiAccess.exe =>.Photodex Corporation® O23 - Service: SigmaTel Audio Service (STacSV) . (.SigmaTel, Inc. - STacSV Module.) - D:\Program Files\SigmaTel\C-Major Audio\DellXPM_5515v133\WDM\stacsv.exe O23 - Service: Ulead Burning Helper (UleadBurningHelper) . (.Ulead Systems, Inc. - ULCDRSvr.) - D:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe =>.Corel Corporation® ---\\ Services non Microsoft (SR=Démarré,SS=Stoppé) (10) - 27s SS - Demand [02/06/2016] [ 269504] Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - D:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe =>.Adobe Systems Incorporated® SR - Auto [02/09/2015] [ 60720] Apple Mobile Device (Apple Mobile Device) . (.Apple Inc..) - D:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe =>.Apple Inc.® SR - Auto [30/08/2011] [ 390504] Service Bonjour (Bonjour Service) . (.Apple Inc..) - D:\Program Files\Bonjour\mDNSResponder.exe =>.Apple Inc.® SS - Auto [18/05/2016] [ 154440] Service Google Update (gupdate) (gupdate) . (.Google Inc..) - D:\Program Files\Google\Update\GoogleUpdate.exe =>.Google Inc® SS - Demand [18/05/2016] [ 154440] Service Google Update (gupdatem) (gupdatem) . (.Google Inc..) - D:\Program Files\Google\Update\GoogleUpdate.exe =>.Google Inc® SR - Demand [12/09/2015] [ 540944] Service de l’iPod (iPod Service) . (.Apple Inc..) - D:\Program Files\iPod\bin\iPodService.exe =>.Apple Inc.® SR - Auto [24/05/2016] [ 186760] ScsiAccess (ScsiAccess) . (...) - D:\Program Files\Photodex\ProShowProducer\ScsiAccess.exe =>.Photodex Corporation® SR - Auto [10/05/2007] [ 94208] SigmaTel Audio Service (STacSV) . (.SigmaTel, Inc..) - D:\Program Files\SigmaTel\C-Major Audio\DellXPM_5515v133\WDM\stacsv.exe SR - Auto [09/06/2008] [ 53392] Ulead Burning Helper (UleadBurningHelper) . (.Ulead Systems, Inc..) - D:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe =>.Corel Corporation® ---\\ Tâches planifiées en automatique (11) - 3s [MD5.00000000000000000000000000000000] [APT] [Adobe Flash Player Updater] (...) -- Chaque 1 heure(s) … partir de 00:40 pendant 24 heure(s) tous les jours (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.00000000000000000000000000000000] [APT] [AppleSoftwareUpdate] (...) -- … 20:41 tous les sam. de chaque semaine (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.00000000000000000000000000000000] [APT] [GoogleUpdateTaskMachineCore] (...) -- D‚marrer … l'ouverture de session (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.00000000000000000000000000000000] [APT] [GoogleUpdateTaskMachineCore] (...) -- SYSTEM (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.00000000000000000000000000000000] [APT] [GoogleUpdateTaskMachineUA] (...) -- SYSTEM (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.00000000000000000000000000000000] [APT] [klcp_update] (...) -- … 11:58 tous les 30 jours (.not file.) [0] (.Activate.) =>.Superfluous.Empty O39 - APT: Adobe Flash Player Updater - (...) -- D:\WINDOWS\Tasks\Adobe Flash Player Updater.job [1002] (.Orphean.) =>.Superfluous.Orphean O39 - APT: AppleSoftwareUpdate - (...) -- D:\WINDOWS\Tasks\AppleSoftwareUpdate.job [284] (.Orphean.) =>.Superfluous.Orphean O39 - APT: GoogleUpdateTaskMachineCore - (...) -- D:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job [1052] (.Orphean.) =>.Superfluous.Orphean O39 - APT: GoogleUpdateTaskMachineUA - (...) -- D:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job [1056] (.Orphean.) =>.Superfluous.Orphean O39 - APT: klcp_update - (...) -- D:\WINDOWS\Tasks\klcp_update.job [660] (.Orphean.) =>.Superfluous.Orphean ---\\ Processus lancés (22) - 2s [MD5.012844A8E13BE3941C9CAF1F91F47DF2] - (.SigmaTel, Inc. - Sigmatel Audio system tray application.) -- D:\Program Files\SigmaTel\C-Major Audio\WDM\stsystra.exe [405504] [PID.1856] [MD5.6513807FEE68E6C32E67437EE3FFB6C8] - (.Oracle Corporation - Java Update Scheduler.) -- D:\Program Files\Fichiers communs\Java\Java Update\jusched.exe [596504] [PID.1864] =>.Oracle America, Inc.® [MD5.627201AE01E87E730C70C6E256937E8D] - (.Apple Inc. - iTunesHelper.) -- D:\Program Files\iTunes\iTunesHelper.exe [157456] [PID.1880] =>.Apple Inc.® [MD5.59E1C9D2B944B6CC373047F325E5A910] - (.Tonec Inc. - Internet Download Manager (IDM).) -- D:\Program Files\Internet Download Manager\IDMan.exe [3961968] [PID.1904] {7828C7315808BC8717710E13FA3C0B24} =>.Tonec Inc. [MD5.FCB1F48FD4C2B0932FC43BFC55C387A9] - (.BitTorrent Inc. - µTorrent.) -- D:\Documents and Settings\nizaro\Application Data\uTorrent\uTorrent.exe [2530304] [PID.1924] =>.BitTorrent Inc® [MD5.475A2BC64E0FF011C8C9AFC418E8E40D] - (.ultracopier.first-world.info - Supercopier under GPL3.) -- D:\Program Files\Supercopier\supercopier.exe [178688] [PID.1952] =>.ultracopier.first-world.info [MD5.06FAA58219BF8B6D1BC25C2783763E11] - (.Google Inc. - Google Chrome.) -- D:\Program Files\Google\Chrome\Application\chrome.exe [874648] [PID.1276] =>.Google Inc® [MD5.06FAA58219BF8B6D1BC25C2783763E11] - (.Google Inc. - Google Chrome.) -- D:\Program Files\Google\Chrome\Application\chrome.exe [874648] [PID.1284] =>.Google Inc® [MD5.A9AE03362A846898368653E94B6DB1AA] - (.Apple Inc. - MobileDeviceService.) -- D:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe [60720] [PID.1824] =>.Apple Inc.® [MD5.DB5BEA73EDAF19AC68B2C0FAD0F92B1A] - (.Apple Inc. - Bonjour Service.) -- D:\Program Files\Bonjour\mDNSResponder.exe [390504] [PID.1840] =>.Apple Inc.® [MD5.958E956E119EB7B9ABA142AFED1B5FF4] - (...) -- D:\Program Files\Photodex\ProShowProducer\ScsiAccess.exe [186760] [PID.1212] =>.Photodex Corporation® [MD5.6F855B5625A47F3AC731A262FDC379A6] - (.SigmaTel, Inc. - STacSV Module.) -- D:\Program Files\SigmaTel\C-Major Audio\DellXPM_5515v133\WDM\stacsv.exe [94208] [PID.876] [MD5.810883E6225C0037F2553D964FC866E3] - (.Ulead Systems, Inc. - ULCDRSvr.) -- D:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe [53392] [PID.1264] =>.Corel Corporation® [MD5.C23748B33D431E4CD5CA2E62500545FF] - (.Apple Inc. - iPodService Module (32-bit).) -- D:\Program Files\iPod\bin\iPodService.exe [540944] [PID.528] =>.Apple Inc.® [MD5.D7B59C5C8C22101B50502AFB482A86FE] - (.BitTorrent Inc. - WebHelper.) -- D:\Documents and Settings\nizaro\Application Data\uTorrent\updates\3.4.7_42330\utorrentie.exe [387072] [PID.2824] =>.BitTorrent Inc. [MD5.D7B59C5C8C22101B50502AFB482A86FE] - (.BitTorrent Inc. - WebHelper.) -- D:\Documents and Settings\nizaro\Application Data\uTorrent\updates\3.4.7_42330\utorrentie.exe [387072] [PID.2856] =>.BitTorrent Inc. [MD5.06FAA58219BF8B6D1BC25C2783763E11] - (.Google Inc. - Google Chrome.) -- D:\Program Files\Google\Chrome\Application\chrome.exe [874648] [PID.3208] =>.Google Inc® [MD5.06FAA58219BF8B6D1BC25C2783763E11] - (.Google Inc. - Google Chrome.) -- D:\Program Files\Google\Chrome\Application\chrome.exe [874648] [PID.3216] =>.Google Inc® [MD5.B289C20C10B241F6016FECD92B267098] - (.Tonec Inc. - Internet Download Manager agent for click m.) -- D:\Program Files\Internet Download Manager\IEMonitor.exe [275512] [PID.3264] {7828C7315808BC8717710E13FA3C0B24} =>.Tonec Inc. [MD5.06FAA58219BF8B6D1BC25C2783763E11] - (.Google Inc. - Google Chrome.) -- D:\Program Files\Google\Chrome\Application\chrome.exe [874648] [PID.3392] =>.Google Inc® [MD5.06FAA58219BF8B6D1BC25C2783763E11] - (.Google Inc. - Google Chrome.) -- D:\Program Files\Google\Chrome\Application\chrome.exe [874648] [PID.3164] =>.Google Inc® [MD5.AD25BA039A4EA22521370C76F3C35F18] - (.Nicolas Coolman - ZHPDiag.) -- D:\Documents and Settings\nizaro\Mes documents\Downloads\ZHPDiag3.exe [2212352] [PID.2800] =>.Nicolas Coolman ---\\ Google Chrome, Démarrage,Recherche,Extensions (12) - 0s G0 - GCSP: Secure Preferences [User Data\Default][HomePage] http://search.babylon.com/ =>PUP.Optional.Babylon G2 - GCE: Preference [User Data\Default] [aapocclcgogkmnckokdopfmhonfmgoek] Google Chrome manifest =>.Google Inc. G2 - GCE: Preference [User Data\Default] [aohghmighlieiainnegkcijnfilokake] Google Chrome manifest =>.Google Inc. G2 - GCE: Preference [User Data\Default] [apdfllckaahabafndbhieahigkjlhalf] Google Chrome manifest =>.Google Inc. G2 - GCE: Preference [User Data\Default] [blpcfgokakmgnkcojhhkbfbldkacnbeo] Google Chrome manifest =>.Google Inc. G2 - GCE: Preference [User Data\Default] [felcaaldnbdncclmgdcncolpebgiejap] Google Chrome manifest =>.Google Inc. G2 - GCE: Preference [User Data\Default] [ghbmnnjooekpmoecnnnilnnbdlolhkhi] Google Chrome manifest =>.Google Inc. G2 - GCE: Preference [User Data\Default] [hegneaniplmfjcmohoclabblbahcbjoe] Video Ad Blocker Plus G2 - GCE: Preference [User Data\Default] [ngpampappnmepgilojfohadhhmbhlaek] IDM Integration Module G2 - GCE: Preference [User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] Google Chrome manifest =>.Google Inc. G2 - GCE: Preference [User Data\Default] [pbjikboenpfhbbejgkoklgkhjpfogcam] Google Chrome manifest =>.Google Inc. G2 - GCE: Preference [User Data\Default] [pjkljhegncpnkpknbcohdijeoejaedia] Google Chrome manifest =>.Google Inc. ---\\ Firefox, Plugins,Demarrage,Recherche,Extensions (2) - 1s P2 - FPN: [HKLM] [@Apple.com/iTunes,version=1.0] - (.Apple Inc..) -- D:\Program Files\iTunes\Mozilla Plugins\npitunes.dll =>.Apple Inc. P2 - FPN: [HKLM] [@photodex.com/PhotodexPresenter] - (.Photodex Corporation.) -- D:\Program Files\Photodex Presenter\npPxPlay.dll =>.Photodex Corporation ---\\ Internet Explorer,Démarrage,Recherche,URLSearchHook (10) - 0s R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = www.wana.ma R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/ R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/ R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/ R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphean =>.Microsoft Internet Explorer ---\\ Internet Explorer,Proxy Management (6) - 0s R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll ---\\ Internet Explorer,IniFiles, Autoloading programs (3) - 1s F2 - REG:system.ini: UserInit=D:\WINDOWS\system32\userinit.exe (.Microsoft Corporation.) =>.Microsoft Corporation F2 - REG:system.ini: Shell=D:\WINDOWS\explorer.exe (.Microsoft Corporation.) =>.Microsoft Corporation F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl" ---\\ Etude du fichier hosts (1) - 0s ~ Le fichier hôte est sain (The hosts file is clean) (20) ---\\ Browser Helper Object de navigateur (BHO) (3) - 0s O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} . (.Internet Download Manager, Tonec Inc. - IDM Browser Helper Object.) -- D:\Program Files\Internet Download Manager\IDMIECC.dll =>.Tonec Inc.® O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- D:\Program Files\Java\jre1.8.0_91\bin\ssv.dll =>.Oracle America, Inc.® O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- D:\Program Files\Java\jre1.8.0_91\bin\jp2ssv.dll =>.Oracle America, Inc.® ---\\ Applications lancées au démarrage du système (16) - 0s O4 - HKLM\..\Run: [SigmatelSysTrayApp] . (.SigmaTel, Inc. - Sigmatel Audio system tray application.) -- D:\Program Files\SigmaTel\C-Major Audio\WDM\stsystra.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java Update Scheduler.) -- D:\Program Files\Fichiers communs\Java\Java Update\jusched.exe =>.Oracle America, Inc.® O4 - HKLM\..\Run: [UVS12 Preload] . (.Ulead Systems, Inc. - Ulead VideoStudio.) -- D:\Program Files\Corel\Corel VideoStudio 12\uvPL.exe =>.Ulead Systems, Inc. O4 - HKLM\..\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- D:\Program Files\iTunes\iTunesHelper.exe =>.Apple Inc.® O4 - HKCU\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- D:\WINDOWS\system32\ctfmon.exe =>.Microsoft Corporation O4 - HKCU\..\Run: [IDMan] . (.Tonec Inc. - Internet Download Manager (IDM).) -- D:\Program Files\Internet Download Manager\IDMan.exe {7828C7315808BC8717710E13FA3C0B24} =>.Tonec Inc. O4 - HKCU\..\Run: [uTorrent] . (.BitTorrent Inc. - µTorrent.) -- D:\Documents and Settings\nizaro\Application Data\uTorrent\uTorrent.exe =>.BitTorrent Inc® O4 - HKCU\..\Run: [ultracopier] . (.ultracopier.first-world.info - Supercopier under GPL3.) -- D:\Program Files\Supercopier\supercopier.exe =>.ultracopier.first-world.info O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- D:\WINDOWS\system32\ctfmon.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- D:\WINDOWS\system32\ctfmon.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- D:\WINDOWS\system32\ctfmon.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- D:\WINDOWS\system32\ctfmon.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-21-527237240-1958367476-1417001333-1003\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- D:\WINDOWS\system32\ctfmon.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-21-527237240-1958367476-1417001333-1003\..\Run: [IDMan] . (.Tonec Inc. - Internet Download Manager (IDM).) -- D:\Program Files\Internet Download Manager\IDMan.exe {7828C7315808BC8717710E13FA3C0B24} =>.Tonec Inc. O4 - HKUS\S-1-5-21-527237240-1958367476-1417001333-1003\..\Run: [uTorrent] . (.BitTorrent Inc. - µTorrent.) -- D:\Documents and Settings\nizaro\Application Data\uTorrent\uTorrent.exe =>.BitTorrent Inc® O4 - HKUS\S-1-5-21-527237240-1958367476-1417001333-1003\..\Run: [ultracopier] . (.ultracopier.first-world.info - Supercopier under GPL3.) -- D:\Program Files\Supercopier\supercopier.exe =>.ultracopier.first-world.info ---\\ Raccourcis Global Startup (55) - 6s O4 - GS\Desktop [Administrateur]: 3D-Album PicturePro Platinum.lnk . (...) D:\Program Files\3D-Album-PicturePlatinum\3DAlbum.exe O4 - GS\Desktop [Administrateur]: 3D-Album-CS.lnk . (...) D:\Program Files\3D-Album-CS\3DAlbum.exe O4 - GS\Desktop [Administrateur]: Internet Download Manager.lnk . (.Tonec Inc. - Internet Download Manager (IDM).) D:\Program Files\Internet Download Manager\IDMan.exe {7828C7315808BC8717710E13FA3C0B24} =>.Tonec Inc. O4 - GS\Desktop [Administrateur]: Wedding Album Maker Gold.lnk . (.http://www.wedding-album-maker.com - Wedding Album Maker Gold.) D:\Program Files\Wedding Album Maker Gold\DVDPhotoMaker.exe O4 - GS\Desktop [Administrateur]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) D:\Documents and Settings\nizaro\Application Data\ZHP\ZHPDiag3.exe =>.Nicolas Coolman O4 - GS\Desktop [Administrateur]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) D:\Documents and Settings\nizaro\Application Data\uTorrent\uTorrent.exe =>.BitTorrent Inc® O4 - GS\Quicklaunch [Administrateur]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) D:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc® O4 - GS\Quicklaunch [Administrateur]: ProShow Producer.lnk . (.Photodex - ProShow.) D:\Program Files\Photodex\ProShowProducer\proshow.exe =>.Photodex Corporation® O4 - GS\Quicklaunch [Administrateur]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) D:\Documents and Settings\nizaro\Application Data\uTorrent\uTorrent.exe =>.BitTorrent Inc® O4 - GS\Desktop [ASPNET]: 3D-Album PicturePro Platinum.lnk . (...) D:\Program Files\3D-Album-PicturePlatinum\3DAlbum.exe O4 - GS\Desktop [ASPNET]: 3D-Album-CS.lnk . (...) D:\Program Files\3D-Album-CS\3DAlbum.exe O4 - GS\Desktop [ASPNET]: Internet Download Manager.lnk . (.Tonec Inc. - Internet Download Manager (IDM).) D:\Program Files\Internet Download Manager\IDMan.exe {7828C7315808BC8717710E13FA3C0B24} =>.Tonec Inc. O4 - GS\Desktop [ASPNET]: Wedding Album Maker Gold.lnk . (.http://www.wedding-album-maker.com - Wedding Album Maker Gold.) D:\Program Files\Wedding Album Maker Gold\DVDPhotoMaker.exe O4 - GS\Desktop [ASPNET]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) D:\Documents and Settings\nizaro\Application Data\ZHP\ZHPDiag3.exe =>.Nicolas Coolman O4 - GS\Desktop [ASPNET]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) D:\Documents and Settings\nizaro\Application Data\uTorrent\uTorrent.exe =>.BitTorrent Inc® O4 - GS\Quicklaunch [ASPNET]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) D:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc® O4 - GS\Quicklaunch [ASPNET]: ProShow Producer.lnk . (.Photodex - ProShow.) D:\Program Files\Photodex\ProShowProducer\proshow.exe =>.Photodex Corporation® O4 - GS\Quicklaunch [ASPNET]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) D:\Documents and Settings\nizaro\Application Data\uTorrent\uTorrent.exe =>.BitTorrent Inc® O4 - GS\Desktop [HelpAssistant]: 3D-Album PicturePro Platinum.lnk . (...) D:\Program Files\3D-Album-PicturePlatinum\3DAlbum.exe O4 - GS\Desktop [HelpAssistant]: 3D-Album-CS.lnk . (...) D:\Program Files\3D-Album-CS\3DAlbum.exe O4 - GS\Desktop [HelpAssistant]: Internet Download Manager.lnk . (.Tonec Inc. - Internet Download Manager (IDM).) D:\Program Files\Internet Download Manager\IDMan.exe {7828C7315808BC8717710E13FA3C0B24} =>.Tonec Inc. O4 - GS\Desktop [HelpAssistant]: Wedding Album Maker Gold.lnk . (.http://www.wedding-album-maker.com - Wedding Album Maker Gold.) D:\Program Files\Wedding Album Maker Gold\DVDPhotoMaker.exe O4 - GS\Desktop [HelpAssistant]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) D:\Documents and Settings\nizaro\Application Data\ZHP\ZHPDiag3.exe =>.Nicolas Coolman O4 - GS\Desktop [HelpAssistant]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) D:\Documents and Settings\nizaro\Application Data\uTorrent\uTorrent.exe =>.BitTorrent Inc® O4 - GS\Quicklaunch [HelpAssistant]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) D:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc® O4 - GS\Quicklaunch [HelpAssistant]: ProShow Producer.lnk . (.Photodex - ProShow.) D:\Program Files\Photodex\ProShowProducer\proshow.exe =>.Photodex Corporation® O4 - GS\Quicklaunch [HelpAssistant]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) D:\Documents and Settings\nizaro\Application Data\uTorrent\uTorrent.exe =>.BitTorrent Inc® O4 - GS\Desktop [nizaro]: 3D-Album PicturePro Platinum.lnk . (...) D:\Program Files\3D-Album-PicturePlatinum\3DAlbum.exe O4 - GS\Desktop [nizaro]: 3D-Album-CS.lnk . (...) D:\Program Files\3D-Album-CS\3DAlbum.exe O4 - GS\Desktop [nizaro]: Internet Download Manager.lnk . (.Tonec Inc. - Internet Download Manager (IDM).) D:\Program Files\Internet Download Manager\IDMan.exe {7828C7315808BC8717710E13FA3C0B24} =>.Tonec Inc. O4 - GS\Desktop [nizaro]: Wedding Album Maker Gold.lnk . (.http://www.wedding-album-maker.com - Wedding Album Maker Gold.) D:\Program Files\Wedding Album Maker Gold\DVDPhotoMaker.exe O4 - GS\Desktop [nizaro]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) D:\Documents and Settings\nizaro\Application Data\ZHP\ZHPDiag3.exe =>.Nicolas Coolman O4 - GS\Desktop [nizaro]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) D:\Documents and Settings\nizaro\Application Data\uTorrent\uTorrent.exe =>.BitTorrent Inc® O4 - GS\Quicklaunch [nizaro]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) D:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc® O4 - GS\Quicklaunch [nizaro]: ProShow Producer.lnk . (.Photodex - ProShow.) D:\Program Files\Photodex\ProShowProducer\proshow.exe =>.Photodex Corporation® O4 - GS\Quicklaunch [nizaro]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) D:\Documents and Settings\nizaro\Application Data\uTorrent\uTorrent.exe =>.BitTorrent Inc® O4 - GS\Desktop [SUPPORT_388945a0]: 3D-Album PicturePro Platinum.lnk . (...) D:\Program Files\3D-Album-PicturePlatinum\3DAlbum.exe O4 - GS\Desktop [SUPPORT_388945a0]: 3D-Album-CS.lnk . (...) D:\Program Files\3D-Album-CS\3DAlbum.exe O4 - GS\Desktop [SUPPORT_388945a0]: Internet Download Manager.lnk . (.Tonec Inc. - Internet Download Manager (IDM).) D:\Program Files\Internet Download Manager\IDMan.exe {7828C7315808BC8717710E13FA3C0B24} =>.Tonec Inc. O4 - GS\Desktop [SUPPORT_388945a0]: Wedding Album Maker Gold.lnk . (.http://www.wedding-album-maker.com - Wedding Album Maker Gold.) D:\Program Files\Wedding Album Maker Gold\DVDPhotoMaker.exe O4 - GS\Desktop [SUPPORT_388945a0]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) D:\Documents and Settings\nizaro\Application Data\ZHP\ZHPDiag3.exe =>.Nicolas Coolman O4 - GS\Desktop [SUPPORT_388945a0]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) D:\Documents and Settings\nizaro\Application Data\uTorrent\uTorrent.exe =>.BitTorrent Inc® O4 - GS\Quicklaunch [SUPPORT_388945a0]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) D:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc® O4 - GS\Quicklaunch [SUPPORT_388945a0]: ProShow Producer.lnk . (.Photodex - ProShow.) D:\Program Files\Photodex\ProShowProducer\proshow.exe =>.Photodex Corporation® O4 - GS\Quicklaunch [SUPPORT_388945a0]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) D:\Documents and Settings\nizaro\Application Data\uTorrent\uTorrent.exe =>.BitTorrent Inc® O4 - GS\CommonDesktop [Public]: Corel VideoStudio 12.lnk . (.Ulead Systems, Inc. - Corel VideoStudio.) D:\Program Files\Corel\Corel VideoStudio 12\vstudio.exe =>.Ulead Systems, Inc. O4 - GS\CommonDesktop [Public]: CPUID CPU-Z.lnk . (.CPUID - CPU-Z Application.) D:\Program Files\CPUID\CPU-Z\cpuz.exe =>.CPUID® O4 - GS\CommonDesktop [Public]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) D:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc® O4 - GS\CommonDesktop [Public]: HDM Connection Manager.lnk . (...) D:\Program Files\HDM Connection Manager\HDM Connection Manager.exe O4 - GS\CommonDesktop [Public]: iTunes.lnk . (.Apple Inc. - iTunes.) D:\Program Files\iTunes\iTunes.exe =>.Apple Inc.® O4 - GS\CommonDesktop [Public]: NiwradSoft.lnk . (...) D:\WINDOWS\NiwradSoft Shell Pack\Links\NiwradSoft.url O4 - GS\CommonDesktop [Public]: NS Welcome Center.lnk . (.NiwradSoft - Seven Remix XP Welcome Center.) D:\WINDOWS\NiwradSoft Shell Pack\Tools\NS Welcome.exe O4 - GS\CommonDesktop [Public]: ProShow Producer.lnk . (.Photodex - ProShow.) D:\Program Files\Photodex\ProShowProducer\proshow.exe =>.Photodex Corporation® O4 - GS\CommonDesktop [Public]: Send Feedback.lnk . (...) D:\WINDOWS\NiwradSoft Shell Pack\Links\NiwradSoft - Forum.url O4 - GS\CommonDesktop [Public]: VLC media player.lnk . (.VideoLAN - VLC media player.) D:\Program Files\VideoLAN\VLC\vlc.exe =>.VideoLAN® ---\\ Modification Domaine/Adresses DNS (2) - 0s O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\..\{FA63664D-9428-412A-8E4C-FFE035207FF4}: DhcpNameServer = 192.168.1.1 ---\\ Protocole additionnel (25) - 0s O18 - Handler: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- D:\WINDOWS\system32\mshtml.dll =>.Microsoft Corporation O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- D:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- D:\WINDOWS\system32\msvidctl.dll =>.Microsoft Corporation O18 - Handler: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- D:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation O18 - Handler: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- D:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation O18 - Handler: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- D:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation O18 - Handler: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- D:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation O18 - Handler: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- D:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation O18 - Handler: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- D:\WINDOWS\system32\itss.dll =>.Microsoft Corporation O18 - Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- D:\WINDOWS\system32\mshtml.dll =>.Microsoft Corporation O18 - Handler: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- D:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation O18 - Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- D:\WINDOWS\system32\mshtml.dll =>.Microsoft Corporation O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API.) -- D:\WINDOWS\system32\inetcomm.dll =>.Microsoft Corporation O18 - Handler: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- D:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation O18 - Handler: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- D:\WINDOWS\system32\itss.dll =>.Microsoft Corporation O18 - Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- D:\WINDOWS\system32\mshtml.dll =>.Microsoft Corporation O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- D:\WINDOWS\system32\msvidctl.dll =>.Microsoft Corporation O18 - Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- D:\WINDOWS\system32\mshtml.dll =>.Microsoft Corporation O18 - Handler: wia - {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} . (.Microsoft Corporation - WIA Scripting Layer.) -- D:\WINDOWS\system32\wiascr.dll =>.Microsoft Corporation O18 - Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- D:\WINDOWS\system32\mscoree.dll =>.Microsoft Corporation® O18 - Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- D:\WINDOWS\system32\mscoree.dll =>.Microsoft Corporation® O18 - Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- D:\WINDOWS\system32\mscoree.dll =>.Microsoft Corporation® O18 - Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- D:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation O18 - Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- D:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation O18 - Filter: text/webviewhtml - {733AC4CB-F1A4-11d0-B951-00A0C90312E1} . (.Microsoft Corporation - DLL commune du shell Windows.) -- D:\WINDOWS\system32\shell32.dll =>.Microsoft Corporation ---\\ Logiciels installés (31) - 16s O42 - Logiciel: µTorrent - (.BitTorrent Inc..) [HKCU] -- uTorrent =>.BitTorrent Inc. O42 - Logiciel: 3D-Album PicturePro Platinum - (...) [HKLM] -- 3D-Album-PL O42 - Logiciel: Adobe Flash Player 20 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- {D21D7AFD-8DF3-4EF0-B81B-A2AA5AEFE713} =>.Adobe Systems Incorporated O42 - Logiciel: Advanced Audio FX Engine - (...) [HKLM] -- Advanced Audio FX Engine O42 - Logiciel: Apple Application Support (32 bits) - (.Apple Inc..) [HKLM] -- {AFA1153A-F547-409B-B837-3A0D6C5A3FEC} =>.Apple Inc. O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM] -- {A75CA58D-DB9C-4D14-9428-E0C7B0F623DC} =>.Apple Inc. O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM] -- {FFD1F7F1-1AC9-4BC4-A908-0686D635ABAF} =>.Apple Inc. O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM] -- {79155F2B-9895-49D7-8612-D92580E0DE5B} =>.Apple Inc. O42 - Logiciel: Corel VideoStudio 12 - (.Corel Corporation.) [HKLM] -- InstallShield_{F0FDF9C9-1DDC-401F-B638-36F1CAE8A875} =>.Corel Corporation O42 - Logiciel: CPUID CPU-Z 1.76 - (...) [HKLM] -- CPUID CPU-Z_is1 O42 - Logiciel: DVD Menu Template Package 1.2 - (.AnvSoft Inc..) [HKLM] -- DVD Menu Template Package O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM] -- Google Chrome =>.Google Inc® O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {60EC980A-BDA2-4CB6-A427-B07A5498B4CA} =>.Google Inc. O42 - Logiciel: HDM Connection Manager - (.Huawei Technologies Co.,Ltd.) [HKLM] -- HDM Connection Manager =>.Huawei Technologies Co.,Ltd O42 - Logiciel: Internet Download Manager - (.Tonec Inc..) [HKLM] -- Internet Download Manager {7828C7315808BC8717710E13FA3C0B24} =>.Tonec Inc. O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM] -- {868B9974-4F23-494D-B6BC-4FAB92B2755D} =>.Apple Inc. O42 - Logiciel: Java 8 Update 91 - (.Oracle Corporation.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83218091F0} =>.Oracle Corporation O42 - Logiciel: Java Auto Updater - (.Oracle Corporation.) [HKLM] -- {4A03706F-666A-4037-7777-5F2748764D10} =>.Oracle Corporation O42 - Logiciel: K-Lite Mega Codec Pack 12.0.1 - (.KLCP.) [HKLM] -- KLiteCodecPack_is1 =>.KLCP O42 - Logiciel: Photodex Presenter - (.Photodex Corporation.) [HKLM] -- Photodex Presenter =>.Photodex Corporation® O42 - Logiciel: PlayReady PC Runtime x86 - (.Microsoft Corporation.) [HKLM] -- {CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61} =>.Microsoft Corporation O42 - Logiciel: ProShow Producer - (.Photodex Corporation.) [HKLM] -- ProShow Producer =>.Photodex Corporation® O42 - Logiciel: Seven Remix XP 2.5 - (.NiwradSoft.) [HKLM] -- Seven Remix XP O42 - Logiciel: SigmaTel Audio - (.SigmaTel.) [HKLM] -- {A462213D-EED4-42C2-9A60-7BDD4D4B0B17} =>.SigmaTel O42 - Logiciel: Supercopier 4.0.1.13 - (.Supercopier.) [HKLM] -- Supercopier =>.Supercopier O42 - Logiciel: VideoStudio - (.Corel Corporation.) [HKLM] -- {F0FDF9C9-1DDC-401F-B638-36F1CAE8A875} =>.Corel Corporation O42 - Logiciel: Visviva Animation Player - (...) [HKLM] -- Visviva Animation Player O42 - Logiciel: VLC media player - (.VideoLAN.) [HKLM] -- VLC media player =>.VideoLAN O42 - Logiciel: WebFldrs XP - (.Microsoft Corporation.) [HKLM] -- {350C940c-3D7C-4EE8-BAA9-00BCB3D54227} =>.Microsoft Corporation O42 - Logiciel: Wedding Album Maker Gold 3.32 - (.Anvsoft, Inc..) [HKLM] -- Wedding Album Maker Gold =>.Anvsoft, Inc. O42 - Logiciel: WinRAR 5.31 (32-bit) - (.win.rar GmbH.) [HKLM] -- WinRAR archiver =>.win.rar GmbH® ---\\ HKCU & HKLM Software Keys (71) - 16s HKLM\SOFTWARE\Apple Computer, Inc. HKLM\SOFTWARE\Apple Inc. HKLM\SOFTWARE\BlueStacks HKLM\SOFTWARE\Broadcom HKLM\SOFTWARE\C07ft5Y HKLM\SOFTWARE\CPUID HKLM\SOFTWARE\Creative Tech HKLM\SOFTWARE\GEAR Software HKLM\SOFTWARE\Gemplus HKLM\SOFTWARE\GNU HKLM\SOFTWARE\Google HKLM\SOFTWARE\HaaliMkx HKLM\SOFTWARE\Huawei technologies HKLM\SOFTWARE\Icaros HKLM\SOFTWARE\Intel HKLM\SOFTWARE\Internet Download Manager HKLM\SOFTWARE\InterVideo HKLM\SOFTWARE\JavaSoft HKLM\SOFTWARE\JreMetrics HKLM\SOFTWARE\KLCodecPack HKLM\SOFTWARE\LAV HKLM\SOFTWARE\Licenses HKLM\SOFTWARE\Macromedia HKLM\SOFTWARE\Mozilla HKLM\SOFTWARE\MozillaPlugins HKLM\SOFTWARE\NiwradSoft Shell Pack HKLM\SOFTWARE\ODBC HKLM\SOFTWARE\Photodex Media Sources HKLM\SOFTWARE\Photodex Presenter HKLM\SOFTWARE\Program Groups HKLM\SOFTWARE\RegisteredApplications HKLM\SOFTWARE\Schlumberger HKLM\SOFTWARE\Secure HKLM\SOFTWARE\SigmaTel HKLM\SOFTWARE\Ulead Systems HKLM\SOFTWARE\VideoLAN HKLM\SOFTWARE\Visviva HKLM\SOFTWARE\Windows 3.1 Migration Status HKLM\SOFTWARE\WinRAR HKCU\SOFTWARE\Anvsoft HKCU\SOFTWARE\AppDataLow HKCU\SOFTWARE\Apple Computer, Inc. HKCU\SOFTWARE\Apple Inc. HKCU\SOFTWARE\BitTorrent HKCU\SOFTWARE\BlueStacks HKCU\SOFTWARE\Distromatic HKCU\SOFTWARE\DivXNetworks HKCU\SOFTWARE\DownloadManager HKCU\SOFTWARE\GNU HKCU\SOFTWARE\Google HKCU\SOFTWARE\Haali HKCU\SOFTWARE\Icaros HKCU\SOFTWARE\Intel HKCU\SOFTWARE\JavaSoft HKCU\SOFTWARE\Macromedia HKCU\SOFTWARE\MainConcept HKCU\SOFTWARE\MediaInfo HKCU\SOFTWARE\Mozilla HKCU\SOFTWARE\MozillaPlugins HKCU\SOFTWARE\MPC-HC HKCU\SOFTWARE\Netscape HKCU\SOFTWARE\Pinnacle Systems HKCU\SOFTWARE\Ulead HKCU\SOFTWARE\Ulead Systems HKCU\SOFTWARE\Ultracopier HKCU\SOFTWARE\Visviva HKCU\SOFTWARE\Wedding Album Maker Gold HKCU\SOFTWARE\WinRAR HKCU\SOFTWARE\WinRAR SFX HKCU\SOFTWARE\ZebHelpProcess Helper HKCU\SOFTWARE\AppDataLow\Software ---\\ Contenu des dossiers Programmes (125) - 43s O43 - CFD: 28/05/2016 - [] D -- D:\Program Files\3D-Album-CS O43 - CFD: 24/05/2016 - [] D -- D:\Program Files\3D-Album-PicturePlatinum O43 - CFD: 31/05/2016 - [] D -- D:\Program Files\Apple Software Update =>.Apple Inc.® O43 - CFD: 31/05/2016 - [] D -- D:\Program Files\Bonjour =>.Apple Inc.® O43 - CFD: 18/05/2016 - [0] D -- D:\Program Files\ComPlus Applications O43 - CFD: 26/05/2016 - [] D -- D:\Program Files\Corel =>.Corel Corporation® O43 - CFD: 26/05/2016 - [] D -- D:\Program Files\CPUID =>.CPUID® O43 - CFD: 18/05/2016 - [] D -- D:\Program Files\Creative O43 - CFD: 31/05/2016 - [] D -- D:\Program Files\Fichiers communs O43 - CFD: 18/05/2016 - [] D -- D:\Program Files\Google =>.Google Inc® O43 - CFD: 25/05/2016 - [] D -- D:\Program Files\HDM Connection Manager O43 - CFD: 26/05/2016 - [] HD -- D:\Program Files\InstallShield Installation Information O43 - CFD: 31/05/2016 - [] D -- D:\Program Files\Internet Download Manager {7828C7315808BC8717710E13FA3C0B24} O43 - CFD: 24/05/2016 - [] D -- D:\Program Files\Internet Explorer O43 - CFD: 31/05/2016 - [] D -- D:\Program Files\iPod =>.Apple Inc.® O43 - CFD: 31/05/2016 - [] D -- D:\Program Files\iTunes =>.Apple Inc.® O43 - CFD: 24/05/2016 - [] D -- D:\Program Files\Java =>.Oracle America, Inc.® O43 - CFD: 24/05/2016 - [] D -- D:\Program Files\K-Lite Codec Pack O43 - CFD: 18/05/2016 - [] D -- D:\Program Files\Messenger O43 - CFD: 18/05/2016 - [] D -- D:\Program Files\microsoft frontpage O43 - CFD: 02/06/2016 - [] D -- D:\Program Files\Microsoft Silverlight O43 - CFD: 24/05/2016 - [] D -- D:\Program Files\Microsoft.NET O43 - CFD: 18/05/2016 - [] D -- D:\Program Files\Movie Maker O43 - CFD: 18/05/2016 - [] D -- D:\Program Files\MSN O43 - CFD: 18/05/2016 - [] D -- D:\Program Files\MSN Gaming Zone O43 - CFD: 18/05/2016 - [] D -- D:\Program Files\NetMeeting O43 - CFD: 18/05/2016 - [] D -- D:\Program Files\Online Services O43 - CFD: 24/05/2016 - [] D -- D:\Program Files\Outlook Express O43 - CFD: 24/05/2016 - [] D -- D:\Program Files\Photodex O43 - CFD: 24/05/2016 - [] D -- D:\Program Files\Photodex Presenter =>.Photodex Corporation® O43 - CFD: 02/06/2016 - [] D -- D:\Program Files\PlayReady O43 - CFD: 18/05/2016 - [] D -- D:\Program Files\Services en ligne O43 - CFD: 18/05/2016 - [] D -- D:\Program Files\SigmaTel O43 - CFD: 23/05/2016 - [] D -- D:\Program Files\Supercopier O43 - CFD: 18/05/2016 - [0] HD -- D:\Program Files\Uninstall Information O43 - CFD: 27/05/2016 - [] D -- D:\Program Files\VideoLAN O43 - CFD: 24/05/2016 - [] D -- D:\Program Files\visviva O43 - CFD: 25/05/2016 - [] D -- D:\Program Files\Wedding Album Maker Gold O43 - CFD: 26/05/2016 - [] D -- D:\Program Files\Windows Media Components O43 - CFD: 18/05/2016 - [] D -- D:\Program Files\Windows Media Connect 2 O43 - CFD: 24/05/2016 - [] D -- D:\Program Files\Windows Media Player O43 - CFD: 24/05/2016 - [] D -- D:\Program Files\Windows NT O43 - CFD: 18/05/2016 - [0] HD -- D:\Program Files\WindowsUpdate O43 - CFD: 23/05/2016 - [] D -- D:\Program Files\WinRAR =>.win.rar GmbH® O43 - CFD: 18/05/2016 - [] D -- D:\Program Files\xerox O43 - CFD: 24/05/2016 - [] D -- D:\Documents and Settings\All Users\Menu Démarrer\Programmes\3D-Album O43 - CFD: 18/05/2016 - [] RD -- D:\Documents and Settings\All Users\Menu Démarrer\Programmes\Accessoires O43 - CFD: 26/05/2016 - [] D -- D:\Documents and Settings\All Users\Menu Démarrer\Programmes\Corel VideoStudio 12 O43 - CFD: 26/05/2016 - [] D -- D:\Documents and Settings\All Users\Menu Démarrer\Programmes\CPUID O43 - CFD: 18/05/2016 - [] RD -- D:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage O43 - CFD: 25/05/2016 - [] D -- D:\Documents and Settings\All Users\Menu Démarrer\Programmes\HDM Connection Manager O43 - CFD: 23/05/2016 - [] D -- D:\Documents and Settings\All Users\Menu Démarrer\Programmes\Internet Download Manager O43 - CFD: 31/05/2016 - [] D -- D:\Documents and Settings\All Users\Menu Démarrer\Programmes\iTunes O43 - CFD: 24/05/2016 - [] D -- D:\Documents and Settings\All Users\Menu Démarrer\Programmes\Java O43 - CFD: 18/05/2016 - [] RD -- D:\Documents and Settings\All Users\Menu Démarrer\Programmes\Jeux O43 - CFD: 24/05/2016 - [] D -- D:\Documents and Settings\All Users\Menu Démarrer\Programmes\K-Lite Codec Pack O43 - CFD: 18/05/2016 - [] RD -- D:\Documents and Settings\All Users\Menu Démarrer\Programmes\Outils d'administration O43 - CFD: 24/05/2016 - [] D -- D:\Documents and Settings\All Users\Menu Démarrer\Programmes\ProShow Producer O43 - CFD: 24/05/2016 - [] D -- D:\Documents and Settings\All Users\Menu Démarrer\Programmes\Seven Remix XP O43 - CFD: 27/05/2016 - [] D -- D:\Documents and Settings\All Users\Menu Démarrer\Programmes\VideoLAN O43 - CFD: 24/05/2016 - [] D -- D:\Documents and Settings\All Users\Menu Démarrer\Programmes\Visviva O43 - CFD: 23/05/2016 - [] D -- D:\Documents and Settings\All Users\Menu Démarrer\Programmes\WinRAR O43 - CFD: 25/05/2016 - [0] D -- D:\Documents and Settings\All Users\Application Data\Anvsoft O43 - CFD: 31/05/2016 - [] D -- D:\Documents and Settings\All Users\Application Data\Apple O43 - CFD: 31/05/2016 - [] D -- D:\Documents and Settings\All Users\Application Data\Apple Computer O43 - CFD: 31/05/2016 - [] D -- D:\Documents and Settings\All Users\Application Data\B0FFCDD9-5261-4e59-B29A-17A4FABDEBAB O43 - CFD: 24/05/2016 - [0] D -- D:\Documents and Settings\All Users\Application Data\BlueStacksSetup O43 - CFD: 23/05/2016 - [0] D -- D:\Documents and Settings\All Users\Application Data\IDM O43 - CFD: 26/05/2016 - [] D -- D:\Documents and Settings\All Users\Application Data\InterVideo O43 - CFD: 24/05/2016 - [] SD -- D:\Documents and Settings\All Users\Application Data\Microsoft O43 - CFD: 24/05/2016 - [] D -- D:\Documents and Settings\All Users\Application Data\Oracle O43 - CFD: 24/05/2016 - [0] D -- D:\Documents and Settings\All Users\Application Data\Package Cache O43 - CFD: 24/05/2016 - [] D -- D:\Documents and Settings\All Users\Application Data\Photodex O43 - CFD: 23/05/2016 - [] D -- D:\Documents and Settings\All Users\Application Data\Pinnacle O43 - CFD: 24/05/2016 - [] D -- D:\Documents and Settings\All Users\Application Data\Sun O43 - CFD: 27/05/2016 - [0] AD -- D:\Documents and Settings\All Users\Application Data\TEMP O43 - CFD: 26/05/2016 - [] D -- D:\Documents and Settings\All Users\Application Data\Ulead Systems O43 - CFD: 27/05/2016 - [] D -- D:\Program Files\Fichiers communs\AnvSoft O43 - CFD: 31/05/2016 - [] D -- D:\Program Files\Fichiers communs\Apple O43 - CFD: 26/05/2016 - [] D -- D:\Program Files\Fichiers communs\InstallShield O43 - CFD: 24/05/2016 - [] D -- D:\Program Files\Fichiers communs\Java O43 - CFD: 18/05/2016 - [] D -- D:\Program Files\Fichiers communs\Microsoft Shared O43 - CFD: 18/05/2016 - [] D -- D:\Program Files\Fichiers communs\MSSoap O43 - CFD: 18/05/2016 - [] D -- D:\Program Files\Fichiers communs\ODBC O43 - CFD: 18/05/2016 - [] D -- D:\Program Files\Fichiers communs\Services O43 - CFD: 18/05/2016 - [] D -- D:\Program Files\Fichiers communs\SpeechEngines O43 - CFD: 24/05/2016 - [] D -- D:\Program Files\Fichiers communs\System O43 - CFD: 26/05/2016 - [] D -- D:\Program Files\Fichiers communs\Ulead Systems O43 - CFD: 24/05/2016 - [] D -- D:\Documents and Settings\nizaro\Application Data\3D-Album-PS O43 - CFD: 23/05/2016 - [] D -- D:\Documents and Settings\nizaro\Application Data\Adobe O43 - CFD: 31/05/2016 - [] D -- D:\Documents and Settings\nizaro\Application Data\Apple Computer O43 - CFD: 30/05/2016 - [] D -- D:\Documents and Settings\nizaro\Application Data\DMCache O43 - CFD: 18/05/2016 - [] D -- D:\Documents and Settings\nizaro\Application Data\Identities O43 - CFD: 30/05/2016 - [] D -- D:\Documents and Settings\nizaro\Application Data\IDM O43 - CFD: 26/05/2016 - [] D -- D:\Documents and Settings\nizaro\Application Data\InstallShield O43 - CFD: 27/05/2016 - [] D -- D:\Documents and Settings\nizaro\Application Data\Macromedia O43 - CFD: 18/05/2016 - [] SD -- D:\Documents and Settings\nizaro\Application Data\Microsoft O43 - CFD: 24/05/2016 - [] D -- D:\Documents and Settings\nizaro\Application Data\Mozilla O43 - CFD: 01/06/2016 - [] D -- D:\Documents and Settings\nizaro\Application Data\MPC-HC O43 - CFD: 24/05/2016 - [] D -- D:\Documents and Settings\nizaro\Application Data\Netscape O43 - CFD: 24/05/2016 - [] D -- D:\Documents and Settings\nizaro\Application Data\Oracle O43 - CFD: 24/05/2016 - [] D -- D:\Documents and Settings\nizaro\Application Data\Photodex O43 - CFD: 24/05/2016 - [] D -- D:\Documents and Settings\nizaro\Application Data\Sun O43 - CFD: 26/05/2016 - [] D -- D:\Documents and Settings\nizaro\Application Data\Ulead Systems O43 - CFD: 02/06/2016 - [] D -- D:\Documents and Settings\nizaro\Application Data\uTorrent O43 - CFD: 24/05/2016 - [] D -- D:\Documents and Settings\nizaro\Application Data\visviva O43 - CFD: 27/05/2016 - [] D -- D:\Documents and Settings\nizaro\Application Data\vlc O43 - CFD: 25/05/2016 - [] D -- D:\Documents and Settings\nizaro\Application Data\Wedding Album Maker O43 - CFD: 23/05/2016 - [] D -- D:\Documents and Settings\nizaro\Application Data\WinRAR O43 - CFD: 02/06/2016 - [] D -- D:\Documents and Settings\nizaro\Application Data\ZHP O43 - CFD: 31/05/2016 - [] D -- D:\Documents and Settings\nizaro\Local Settings\Application Data\Apple O43 - CFD: 31/05/2016 - [] D -- D:\Documents and Settings\nizaro\Local Settings\Application Data\Apple Computer O43 - CFD: 24/05/2016 - [] D -- D:\Documents and Settings\nizaro\Local Settings\Application Data\Bluestacks O43 - CFD: 28/05/2016 - [] D -- D:\Documents and Settings\nizaro\Local Settings\Application Data\Geckofx O43 - CFD: 23/05/2016 - [] D -- D:\Documents and Settings\nizaro\Local Settings\Application Data\Google O43 - CFD: 31/05/2016 - [] SD -- D:\Documents and Settings\nizaro\Local Settings\Application Data\Microsoft O43 - CFD: 28/05/2016 - [] D -- D:\Documents and Settings\nizaro\Local Settings\Application Data\Smart_PC_Soft O43 - CFD: 24/05/2016 - [] D -- D:\Documents and Settings\nizaro\Local Settings\Application Data\Sun O43 - CFD: 18/05/2016 - [] RD -- D:\Documents and Settings\nizaro\Menu Démarrer\Programmes\Accessoires O43 - CFD: 27/05/2016 - [] D -- D:\Documents and Settings\nizaro\Menu Démarrer\Programmes\AnvSoft O43 - CFD: 18/05/2016 - [] RD -- D:\Documents and Settings\nizaro\Menu Démarrer\Programmes\Démarrage O43 - CFD: 23/05/2016 - [] D -- D:\Documents and Settings\nizaro\Menu Démarrer\Programmes\Internet Download Manager O43 - CFD: 23/05/2016 - [] D -- D:\Documents and Settings\nizaro\Menu Démarrer\Programmes\Supercopier O43 - CFD: 25/05/2016 - [] D -- D:\Documents and Settings\nizaro\Menu Démarrer\Programmes\Wedding Album Maker Gold O43 - CFD: 23/05/2016 - [] D -- D:\Documents and Settings\nizaro\Menu Démarrer\Programmes\WinRAR ---\\ Derniers fichiers créés dans Windows Prefetcher (1) - 7s O45 - LFCP:[MD5.FDD0D257BEE8FD4B1040BB1EFEE1A5BE] 28/05/2016 A -- D:\WINDOWS\Prefetch\AMZNSEARCHPROTECT.EXE-02E7F31D.pf =>PUP.Optional.SearchProtect ---\\ ShellIconOverlayIdentifiers (SIOI) (2) - 0s O106 - SIOI: IDM Shell Extension [ IDM Shell Extension] - {CDC95B92-E27C-4745-A8C5-64A52A78855D}. (.Tonec Inc. - Internet Download Manager module.) -- D:\Program Files\Internet Download Manager\IDMShellExt.dll =>.Tonec Inc.® O106 - SIOI: Offline Files Menu [Fichiers hors connexion] - {750fdf0e-2a26-11d1-a3ea-080036587f03}. (.Microsoft Corporation - IU de cache côté client.) -- D:\WINDOWS\system32\cscui.dll =>.Microsoft Corporation ---\\ Liste des pilotes du système (44) - 4s O58 - SDL:2007/10/09 19:17:42 A . (.Broadcom Corp. - Broadcom 802.11 Network Adapter wireless dr.) -- D:\WINDOWS\System32\drivers\BCMWL5.SYS [1123328] =>.Broadcom Corp. O58 - SDL:2010/04/30 04:29:00 A . (.RAVISENT Technologies Inc. - Pilote principal CineMaster C 1.2 WDM.) -- D:\WINDOWS\System32\drivers\cinemst2.sys [262528] =>.RAVISENT Technologies Inc. O58 - SDL:2010/04/30 04:29:00 A . (.Compaq Computer Corporation - Compaq PA-1 Player Driver.) -- D:\WINDOWS\System32\drivers\cpqdap01.sys [11776] =>.Compaq Computer Corporation O58 - SDL:2008/04/14 21:00:00 A . (.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disq.) -- D:\WINDOWS\System32\drivers\dmboot.sys [800256] =>.Microsoft Corp., Veritas Software O58 - SDL:2008/04/14 21:00:00 A . (.Microsoft Corp., Veritas Software - Pilote E/S du Gestionnaire de disques NT.) -- D:\WINDOWS\System32\drivers\dmio.sys [154496] =>.Microsoft Corp., Veritas Software O58 - SDL:2008/04/14 21:00:00 A . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- D:\WINDOWS\System32\drivers\dmload.sys [5888] =>.Microsoft Corp., Veritas Software. O58 - SDL:2007/08/09 04:13:04 A . (.Huawei Tech. Co., Ltd. - HUAWEI USB Smart Card Driver.) -- D:\WINDOWS\System32\drivers\ewdcsc.sys [24448] =>.Huawei Tech. Co., Ltd. O58 - SDL:2009/10/12 15:21:54 A . (.Huawei Technologies Co., Ltd. - USB Modem/Serial Device Driver.) -- D:\WINDOWS\System32\drivers\ewusbdev.sys [100736] =>.Huawei Technologies Co., Ltd. O58 - SDL:2009/12/07 19:53:12 A . (.Huawei Technologies Co., Ltd. - USB Modem/Serial Device Driver.) -- D:\WINDOWS\System32\drivers\ewusbmdm.sys [102912] =>.Huawei Technologies Co., Ltd. O58 - SDL:2009/12/08 20:19:12 A . (.Huawei Technologies Co., Ltd. - USB NDIS Miniport Driver.) -- D:\WINDOWS\System32\drivers\ewusbnet.sys [114432] =>.Huawei Technologies Co., Ltd. O58 - SDL:2010/03/11 11:03:41 A . (.Promise Technology, Inc. - Promise Driver for Windows Server 2003.) -- D:\WINDOWS\System32\drivers\ftsata2.sys [173568] =>.Promise Technology, Inc. O58 - SDL:2010/03/11 11:03:29 A . (.Promise Technology, Inc. - Promise FastTRAK TX4200/TX4300 Driver for W.) -- D:\WINDOWS\System32\drivers\fttxr5_O.sys [176640] =>.Promise Technology, Inc. O58 - SDL:2012/10/03 16:14:58 A . (.GEAR Software Inc. - CD DVD Filter.) -- D:\WINDOWS\System32\drivers\GEARAspiWDM.sys [26840] =>.GEAR Software Inc.® O58 - SDL:2008/04/14 21:00:00 A . (.Windows (R) Server 2003 DDK provider - High Definition Audio Bus Driver v1.0a.) -- D:\WINDOWS\System32\drivers\hdaudbus.sys [144384] O58 - SDL:2010/03/11 11:01:37 A . (.Intel Corporation - Intel Matrix Storage Manager driver - ia32.) -- D:\WINDOWS\System32\drivers\iaStor.sys [331288] =>.Intel Corporation® O58 - SDL:2016/05/24 16:29:12 A . (.Tonec Inc. - Internet Download Manager TDI Driver.) -- D:\WINDOWS\System32\drivers\idmtdi.sys [138760] {7828C7315808BC8717710E13FA3C0B24} =>.Tonec Inc. O58 - SDL:2010/04/30 04:29:00 A . (.S3/Diamond Multimedia Systems - NikeDrv Usb Driver.) -- D:\WINDOWS\System32\drivers\nikedrv.sys [12032] =>.S3/Diamond Multimedia Systems O58 - SDL:2008/04/14 21:00:00 A . (.Parallel Technologies, Inc. - Parallel Technologies DirectParallel IO Lib.) -- D:\WINDOWS\System32\drivers\ptilink.sys [17792] =>.Parallel Technologies, Inc. O58 - SDL:2010/04/30 04:29:00 A . (.S3/Diamond Multimedia Systems - Rio8Drv.sys Usb Driver.) -- D:\WINDOWS\System32\drivers\rio8drv.sys [12032] =>.S3/Diamond Multimedia Systems O58 - SDL:2010/04/30 04:29:00 A . (.S3/Diamond Multimedia Systems - RioDrv Usb Driver.) -- D:\WINDOWS\System32\drivers\riodrv.sys [12032] =>.S3/Diamond Multimedia Systems O58 - SDL:2008/04/14 21:00:00 A . (.Macrovision Corporation, Macrovision Europe Limited, - Macrovision SECURITY Driver.) -- D:\WINDOWS\System32\drivers\secdrv.sys [20480] =>.Macrovision Corporation, Macrovision Europe Limited, O58 - SDL:2010/03/11 11:04:10 A . (.Silicon Image, Inc - SATA SoftRAID 5 miniport driver.) -- D:\WINDOWS\System32\drivers\Si3114r5.sys [211496] =>.Silicon Image, Inc.® O58 - SDL:2010/03/11 11:04:12 A . (.Silicon Image, Inc. - Serial ATA miniport driver.) -- D:\WINDOWS\System32\drivers\si3124.sys [76208] =>.Silicon Image, Inc.® O58 - SDL:2010/03/11 11:04:14 A . (.Silicon Image, Inc - SATA SoftRAID 5 miniport driver.) -- D:\WINDOWS\System32\drivers\Si3132r5.sys [217128] =>.Silicon Image, Inc.® O58 - SDL:2010/03/11 11:04:16 A . (.Silicon Image, Inc - SATA Controller miniport driver.) -- D:\WINDOWS\System32\drivers\Si3531.sys [210736] =>.Silicon Image, Inc.® O58 - SDL:2007/05/10 10:24:34 A . (.SigmaTel, Inc. - NDRC.) -- D:\WINDOWS\System32\drivers\sthda.sys [1222840] O58 - SDL:2010/04/30 04:29:00 A . (.Toshiba Corporation - WDM Toshiba Tecra Video Capture Driver.) -- D:\WINDOWS\System32\drivers\tsbvcap.sys [21376] =>.Toshiba Corporation O58 - SDL:2010/03/11 11:03:47 A . (.Promise Technology, Inc. - Promise SATAII150 Series Driver for Windows.) -- D:\WINDOWS\System32\drivers\ulsata2.sys [125952] =>.Promise Technology, Inc. O58 - SDL:2010/04/30 04:29:00 A . (.RAVISENT Technologies Inc. - CineMaster C WDM DVD Minidriver.) -- D:\WINDOWS\System32\drivers\vdmindvd.sys [58112] =>.RAVISENT Technologies Inc. O58 - SDL:2008/04/14 21:00:00 A . (...) -- D:\WINDOWS\System32\ansi.sys [9037] O58 - SDL:2008/04/14 21:00:00 A . (...) -- D:\WINDOWS\System32\country.sys [27097] O58 - SDL:2008/04/14 21:00:00 A . (...) -- D:\WINDOWS\System32\himem.sys [4912] O58 - SDL:2008/04/14 21:00:00 A . (...) -- D:\WINDOWS\System32\key01.sys [42809] O58 - SDL:2008/04/14 21:00:00 A . (...) -- D:\WINDOWS\System32\keyboard.sys [42537] O58 - SDL:2008/04/14 21:00:00 A . (...) -- D:\WINDOWS\System32\ntdos.sys [27916] O58 - SDL:2008/04/14 21:00:00 A . (...) -- D:\WINDOWS\System32\ntdos404.sys [29146] O58 - SDL:2008/04/14 21:00:00 A . (...) -- D:\WINDOWS\System32\ntdos411.sys [29370] O58 - SDL:2008/04/14 21:00:00 A . (...) -- D:\WINDOWS\System32\ntdos412.sys [29274] O58 - SDL:2008/04/14 21:00:00 A . (...) -- D:\WINDOWS\System32\ntdos804.sys [29146] O58 - SDL:2008/04/14 21:00:00 A . (...) -- D:\WINDOWS\System32\ntio.sys [34000] O58 - SDL:2008/04/14 21:00:00 A . (...) -- D:\WINDOWS\System32\ntio404.sys [34560] O58 - SDL:2008/04/14 21:00:00 A . (...) -- D:\WINDOWS\System32\ntio411.sys [35648] O58 - SDL:2008/04/14 21:00:00 A . (...) -- D:\WINDOWS\System32\ntio412.sys [35424] O58 - SDL:2008/04/14 21:00:00 A . (...) -- D:\WINDOWS\System32\ntio804.sys [34560] ---\\ Derniers fichiers modifiés ou crées (Utilisateur) (4) - 12s O61 - LFC: 2016/05/26 17:50:49 A . (..) -- D:\Documents and Settings\nizaro\Mes documents\Downloads\Programs\android-studio-bundle-143.2821654-windows.exe [1238569296] O61 - LFC: 2016/05/28 11:59:00 A . (..) -- D:\Documents and Settings\nizaro\Mes documents\Downloads\Programs\kodi-16.1-Jarvis_2.exe [87266194] O61 - LFC: 2016/05/28 12:24:49 A . (..) -- D:\Documents and Settings\nizaro\Mes documents\Downloads\Programs\xbmc-12.3.exe [59604731] O61 - LFC: 2016/05/28 12:04:05 A . (..) -- D:\Documents and Settings\nizaro\Mes documents\Downloads\Programs\xbmc_13-2_fr_400362.exe [63850156] ---\\ Associations Shell Spawning (9) - 0s O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- D:\WINDOWS\system32\shell32.dll =>.Microsoft Corporation O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- D:\Program Files\Internet Explorer\iexplore.exe =>.Microsoft Corporation O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft (R) Windows Based Script Host.) -- D:\WINDOWS\system32\wscript.exe =>.Microsoft Corporation O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- D:\WINDOWS\regedit.exe =>.Microsoft Corporation O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S ---\\ Menu de démarrage Internet (9) - 0s O68 - StartMenuInternet: <>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- D:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc® O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- D:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc® O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- D:\Program Files\Internet Explorer\iexplore.exe =>.Microsoft Corporation O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Google Inc. - Google Chrome.) -- D:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc. O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - IE Per-User Initialization Utility.) -- D:\WINDOWS\system32\ie4uinit.exe =>.Microsoft Corporation O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Google Inc. - Google Chrome.) -- D:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc. O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - IE Per-User Initialization Utility.) -- D:\WINDOWS\system32\ie4uinit.exe =>.Microsoft Corporation O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Google Inc. - Google Chrome.) -- D:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc. O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - IE Per-User Initialization Utility.) -- D:\WINDOWS\system32\ie4uinit.exe =>.Microsoft Corporation ---\\ Recherche d'infection sur les navigateurs (2) - 1s O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - () - http://search.live.com/ O69 - SBI: SearchScopes [HKLM] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (@ieframe.dll,-12512) - http://search.live.com/ ---\\ Enumère les services démarrés par Svchost (40) - 1s O83 - Search Svchost Services: AppMgmt (AppMgmt) . (.Microsoft Corporation - Service Installation de logiciels.) -- D:\WINDOWS\system32\appmgmts.dll [176640] =>.Microsoft Corporation O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Windows Audio Service.) -- D:\WINDOWS\system32\audiosrv.dll [42496] =>.Microsoft Corporation O83 - Search Svchost Services: Browser (Browser) . (.Microsoft Corporation - Computer Browser Service DLL.) -- D:\WINDOWS\system32\browser.dll [77824] =>.Microsoft Corporation O83 - Search Svchost Services: CryptSvc (CryptSvc) . (.Microsoft Corporation - Cryptographic Services.) -- D:\WINDOWS\system32\cryptsvc.dll [62464] =>.Microsoft Corporation O83 - Search Svchost Services: DMServer (DMServer) . (.Microsoft Corp. - DLL Service gestionnaire de disque logique.) -- D:\WINDOWS\system32\dmserver.dll [24576] =>.Microsoft Corp. O83 - Search Svchost Services: DHCP (DHCP) . (.Microsoft Corporation - Service client DHCP.) -- D:\WINDOWS\system32\dhcpcsvc.dll [127488] =>.Microsoft Corporation O83 - Search Svchost Services: ERSvc (ERSvc) . (.Microsoft Corporation - Windows Error Reporting Service.) -- D:\WINDOWS\system32\ersvc.dll [23040] =>.Microsoft Corporation O83 - Search Svchost Services: EventSystem (EventSystem) . (.Microsoft Corporation - .) -- D:\WINDOWS\system32\es.dll [253952] =>.Microsoft Corporation O83 - Search Svchost Services: FastUserSwitchingCompatibility (FastUserSwitchingCompatibility) . (.Microsoft Corporation - Dll des services Windows Shell.) -- D:\WINDOWS\system32\shsvcs.dll [135680] =>.Microsoft Corporation O83 - Search Svchost Services: HidServ (HidServ) . (.Microsoft Corporation - HID Audio Service.) -- D:\WINDOWS\system32\hidserv.dll [21504] =>.Microsoft Corporation O83 - Search Svchost Services: LanmanServer (LanmanServer) . (.Microsoft Corporation - Server Service DLL.) -- D:\WINDOWS\system32\srvsvc.dll [96768] =>.Microsoft Corporation O83 - Search Svchost Services: LanmanWorkstation (LanmanWorkstation) . (.Microsoft Corporation - Workstation Service DLL.) -- D:\WINDOWS\system32\wkssvc.dll [134144] =>.Microsoft Corporation O83 - Search Svchost Services: Messenger (Messenger) . (.Microsoft Corporation - NT Messenger Service.) -- D:\WINDOWS\system32\msgsvc.dll [33792] =>.Microsoft Corporation O83 - Search Svchost Services: Netman (Netman) . (.Microsoft Corporation - Gestionnaire de connexions réseau.) -- D:\WINDOWS\system32\netman.dll [198144] =>.Microsoft Corporation O83 - Search Svchost Services: Nla (Nla) . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Micro.) -- D:\WINDOWS\system32\mswsock.dll [247808] =>.Microsoft Corporation O83 - Search Svchost Services: Ntmssvc (Ntmssvc) . (.Microsoft Corporation - Gestionnaire de stockage amovible.) -- D:\WINDOWS\system32\ntmssvc.dll [438272] =>.Microsoft Corporation O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Remote Access AutoDial Manager.) -- D:\WINDOWS\system32\rasauto.dll [88576] =>.Microsoft Corporation O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Remote Access Connection Manager.) -- D:\WINDOWS\system32\rasmans.dll [186368] =>.Microsoft Corporation O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Dynamic Interface Manager.) -- D:\WINDOWS\system32\mprdim.dll [53248] =>.Microsoft Corporation O83 - Search Svchost Services: Schedule (Schedule) . (.Microsoft Corporation - Moteur du Planificateur de tâches.) -- D:\WINDOWS\system32\schedsvc.dll [194560] =>.Microsoft Corporation O83 - Search Svchost Services: Seclogon (Seclogon) . (.Microsoft Corporation - DLL de service d'ouverture de session secon.) -- D:\WINDOWS\system32\seclogon.dll [18944] =>.Microsoft Corporation O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - System Event Notification Service (SENS).) -- D:\WINDOWS\system32\sens.dll [39424] =>.Microsoft Corporation O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l'application d'assistance à.) -- D:\WINDOWS\system32\ipnathlp.dll [332800] =>.Microsoft Corporation O83 - Search Svchost Services: SRService (SRService) . (.Microsoft Corporation - Service de restauration du système.) -- D:\WINDOWS\system32\srsvc.dll [171520] =>.Microsoft Corporation O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM.) -- D:\WINDOWS\system32\tapisrv.dll [249856] =>.Microsoft Corporation O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - Dll des services Windows Shell.) -- D:\WINDOWS\system32\shsvcs.dll [135680] =>.Microsoft Corporation O83 - Search Svchost Services: TrkWks (TrkWks) . (.Microsoft Corporation - Distributed Link Tracking Client.) -- D:\WINDOWS\system32\trkwks.dll [90112] =>.Microsoft Corporation O83 - Search Svchost Services: W32Time (W32Time) . (.Microsoft Corporation - Service de temps Windows.) -- D:\WINDOWS\system32\w32time.dll [178176] =>.Microsoft Corporation O83 - Search Svchost Services: WZCSVC (WZCSVC) . (.Microsoft Corporation - Service configuration automatique sans fil.) -- D:\WINDOWS\system32\wzcsvc.dll [483840] =>.Microsoft Corporation O83 - Search Svchost Services: Wmi (Wmi) . (.Microsoft Corporation - API avancées Windows 32.) -- D:\WINDOWS\system32\advapi32.dll [685568] =>.Microsoft Corporation O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- D:\WINDOWS\system32\wbem\wmisvc.dll [145408] =>.Microsoft Corporation O83 - Search Svchost Services: wscsvc (wscsvc) . (.Microsoft Corporation - Windows Security Center Service.) -- D:\WINDOWS\system32\wscsvc.dll [80896] =>.Microsoft Corporation O83 - Search Svchost Services: xmlprov (xmlprov) . (.Microsoft Corporation - Network Provisioning Service.) -- D:\WINDOWS\system32\xmlprov.dll [129024] =>.Microsoft Corporation O83 - Search Svchost Services: napagent (napagent) . (.Microsoft Corporation - Exécution du service Agent de quarantaine.) -- D:\WINDOWS\system32\qagentrt.dll [293376] =>.Microsoft Corporation O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- D:\WINDOWS\system32\kmsvc.dll [61440] =>.Microsoft Corporation O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière.) -- D:\WINDOWS\system32\qmgr.dll [409088] =>.Microsoft Corporation O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Windows Update AutoUpdate Service.) -- D:\WINDOWS\system32\wuauserv.dll [6656] =>.Microsoft Corporation O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- D:\WINDOWS\system32\shsvcs.dll [135680] =>.Microsoft Corporation O83 - Search Svchost Services: helpsvc (helpsvc) . (.Microsoft Corporation - Microsoft PCHealth Service Holder.) -- D:\WINDOWS\pchealth\helpctr\binaries\pchsvc.dll [38400] =>.Microsoft Corporation O83 - Search Svchost Services: WmdmPmSN (WmdmPmSN) . (.Microsoft Corporation - Microsoft Media Device Service Provider.) -- D:\WINDOWS\system32\mspmsnsv.dll [27136] =>.Microsoft Corporation ---\\ Scan Additionnel (1) - 0s D:\WINDOWS\Prefetch\AMZNSEARCHPROTECT.EXE-02E7F31D.pf =>PUP.Optional.SearchProtect ---\\ Récapitulatif des éléments trouvés sur votre station (2) - 0s http://www.nicolascoolman.fr/?p=170 =>PUP.Optional.Babylon http://www.nicolascoolman.fr/?p=1633 =>PUP.Optional.SearchProtect ~ End of the scan, 12341 items in 00h02mn27s (614)(0)