~ ZHPDiag v2016.6.18.105 Par Nicolas Coolman (2016/06/18) ~ Démarré par PERSO (Administrator) (2016/06/20 11:44:58) ~ Site: http://www.nicolascoolman.com ~ Facebook: https://www.facebook.com/nicolascoolman1 ~ Etat de la version: Version OK ~ Mode: Scanner ~ Rapport: C:\Users\PERSO\Desktop\ZHPDiag.txt ~ Rapport: C:\Users\PERSO\AppData\Roaming\ZHP\ZHPDiag.txt ~ UAC: Activate ~ Démarrage du système: Normal (Normal boot) Windows 10 Home, 64-bit (Build 10586) ---\\ Navigateurs Internet (3) - 0s GCIE: Google Chrome v51.0.2704.103 MFIE: Mozilla Firefox 47.0 (x86 fr) MSIE: Internet Explorer v11.420.10586.0 ---\\ Informations sur les produits Windows (7) - 0s ~ Windows Server License Manager Script : OK ~ Licence Script File Génération : OK ~ Windows(R) Operating System, VOLUME_KMSCLIENT channel Windows ID Activation : OK ~ Windows Partial Key : H8Q99 ~ Windows Remaining Initializations Number : 1001 Windows Automatic Updates : OK ---\\ Logiciels de protection (1) - 6s Windows Defender (Deactivate) ---\\ Surveillance de Logiciels (2) - 7s Adobe Flash Player 22 NPAPI Adobe Acrobat Reader DC - Français ---\\ Logiciels de partage P2P (1) - 7s µTorrent v3.4.7.42330 ---\\ Informations sur le système (6) - 0s ~ Operating System: Intel64 Family 6 Model 37 Stepping 5, GenuineIntel ~ Operating System: 64-bit ~ Boot mode: Normal (Normal boot) Total RAM: 4054.124 MB (60% free) System Restore: Activé (Enable) System drive C: has 157 GB () free of 466 GB ---\\ Mode de connexion au système (3) - 0s ~ Computer Name: PERSO-PC ~ User Name: PERSO ~ Logged in as Administrator ---\\ Enumération des unités disques (2) - 0s ~ Drive C: has 157 GB free of 466 GB (System) ~ Drive D: has 466 GB free of 466 GB ---\\ Etat du Centre de Sécurité Windows (10) - 0s [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoFolderOptions: OK [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] DisableTaskMgr: OK [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] DisableRegistryTools: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK [HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK ---\\ Recherche particulière de fichiers génériques (25) - 1s [MD5.E15BEB03592BA12C5C99E2BA46146BDD] - 28/05/2016 - (.Microsoft Corporation - Explorateur Windows.) -- C:\WINDOWS\Explorer.exe [4515264] =>.Microsoft Windows® [MD5.0DCB89B1F3689BC6262FF30BBD603171] - 30/10/2015 - (.Microsoft Corporation - Processus hôte Windows (Rundll32).) -- C:\WINDOWS\System32\rundll32.exe [59392] =>.Microsoft Corporation [MD5.C1C81AAF533552B3C4D9F11A5FF97700] - 23/04/2016 - (.Microsoft Corporation - Application de démarrage de Windows.) -- C:\WINDOWS\System32\Wininit.exe [291360] =>.Microsoft Windows Publisher® [MD5.75CC21C976BFF286E706AA2D133EB9D4] - 28/05/2016 - (.Microsoft Corporation - Extensions Internet pour Win32.) -- C:\WINDOWS\System32\wininet.dll [2755584] =>.Microsoft Corporation [MD5.5C156EC4E44E30331BCC865A3B61D839] - 23/04/2016 - (.Microsoft Corporation - Application d’ouverture de session Windows.) -- C:\WINDOWS\System32\Winlogon.exe [585728] =>.Microsoft Corporation [MD5.9EEAA1B69DC3FD620AE576CC8F4147DC] - 30/10/2015 - (.Microsoft Corporation - Bibliothèque de licences.) -- C:\WINDOWS\System32\sppcomapi.dll [430592] =>.Microsoft Corporation [MD5.9A3E17CDB177913C2A111C80F3D0DBB4] - 10/05/2016 - (.Microsoft Corporation - DNS DLL de l’API Client.) -- C:\WINDOWS\System32\dnsapi.dll [686976] =>.Microsoft Windows® [MD5.6A7ACABAE92C837F5C1330188EAE36AE] - 10/05/2016 - (.Microsoft Corporation - DNS DLL de l’API Client.) -- C:\WINDOWS\Syswow64\dnsapi.dll [535080] =>.Microsoft Windows® [MD5.CE50037751671682D1FDBBE7C9B37F4A] - 13/02/2016 - (.Microsoft Corporation - DLL client de l’API uilisateur de Windows m.) -- C:\WINDOWS\System32\fr-FR\user32.dll.mui [20480] =>.Microsoft Corporation [MD5.70148EFA9A562E7185B75BBE7D376BF7] - 13/02/2016 - (.Microsoft Corporation - Pilote de fonction connexe pour WinSock.) -- C:\WINDOWS\System32\drivers\AFD.sys [578912] =>.Microsoft Windows® [MD5.492B99D2E3D5D7BFD5F0AE1BE7BD37DD] - 30/10/2015 - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) -- C:\WINDOWS\System32\drivers\atapi.sys [28512] =>.Microsoft Windows® [MD5.7F9C7226D743B232907ED2537B8A574F] - 30/10/2015 - (.Microsoft Corporation - CD-ROM File System Driver.) -- C:\WINDOWS\System32\drivers\Cdfs.sys [92672] =>.Microsoft Corporation [MD5.82D97776BF982AA143BDC7DFB5054EA8] - 30/10/2015 - (.Microsoft Corporation - SCSI CD-ROM Driver.) -- C:\WINDOWS\System32\drivers\Cdrom.sys [173568] =>.Microsoft Corporation [MD5.935823F79CBEDB91637B63D37E3A5A36] - 10/05/2016 - (.Microsoft Corporation - DFS Namespace Client Driver.) -- C:\WINDOWS\System32\drivers\DfsC.sys [148480] =>.Microsoft Corporation [MD5.84BC034B6BB763733C1949B7B9BAF976] - 30/10/2015 - (.Microsoft Corporation - High Definition Audio Bus Driver.) -- C:\WINDOWS\System32\drivers\HDAudBus.sys [79872] =>.Microsoft Corporation [MD5.53FDD9E69189E546DE4740F8C4D8AB2F] - 30/10/2015 - (.Microsoft Corporation - Pilote de port i8042.) -- C:\WINDOWS\System32\drivers\i8042prt.sys [114688] =>.Microsoft Corporation [MD5.9E5E8F2A1996F23B7E9687846AA81B01] - 30/10/2015 - (.Microsoft Corporation - IP Network Address Translator.) -- C:\WINDOWS\System32\drivers\IpNat.sys [143360] =>.Microsoft Corporation [MD5.0B3B0C1D86050355676640488FA897D3] - 10/05/2016 - (.Microsoft Corporation - Minirdr SMB Windows NT.) -- C:\WINDOWS\System32\drivers\MRxSmb.sys [430944] =>.Microsoft Windows® [MD5.C03E926B0E7D66D68994067231DC3246] - 28/05/2016 - (.Microsoft Corporation - MBT Transport driver.) -- C:\WINDOWS\System32\drivers\netBT.sys [278528] =>.Microsoft Corporation [MD5.19BD8A88AAC580592668B070AC0727D9] - 10/05/2016 - (.Microsoft Corporation - Pilote du système de fichiers NT.) -- C:\WINDOWS\System32\drivers\ntfs.sys [2152280] =>.Microsoft Windows® [MD5.7D0FC96264C0F8F2C1321E33E8EB646C] - 30/10/2015 - (.Microsoft Corporation - Pilote de port parallèle.) -- C:\WINDOWS\System32\drivers\Parport.sys [96768] =>.Microsoft Corporation [MD5.E3C82823B22463BC38AA4F8ADA852624] - 10/05/2016 - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) -- C:\WINDOWS\System32\drivers\Rasl2tp.sys [104960] =>.Microsoft Corporation [MD5.1DC2CC74B51E4DC4CD5A20C1021E4010] - 13/02/2016 - (.Microsoft Corporation - Redirecteur de périphérique de Microsoft RD.) -- C:\WINDOWS\System32\drivers\rdpdr.sys [173056] =>.Microsoft Corporation [MD5.91D3F2A6253EF83EFBD7903028F58C4D] - 13/02/2016 - (.Microsoft Corporation - TDI Translation Driver.) -- C:\WINDOWS\System32\drivers\tdx.sys [118624] =>.Microsoft Windows® [MD5.E1F91A727A04C9F8199D04FF3BBBF63C] - 30/10/2015 - (.Microsoft Corporation - Pilote de cliché instantané du volume.) -- C:\WINDOWS\System32\drivers\volsnap.sys [414560] =>.Microsoft Windows® ---\\ Liste des services NT non Microsoft et non désactivés (21) - 2s O23 - Service: Fix-It Utilities Process Monitor (.AVQWindowsMonitorService) . (.Avanquest Software - Avanquest PC Startup Analyzer Monitoring Se.) - C:\Program Files (x86)\Avanquest\Fix-It\AVQWinMonEngine.exe {167AE4BEC6B4B1D1BA0BC9D47BA75B67} =>.Avanquest Software O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe =>.Adobe Systems, Incorporated® O23 - Service: Apple Mobile Device (Apple Mobile Device) . (.Apple Inc. - MobileDeviceService.) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe =>.Apple Inc.® O23 - Service: AQFileRestoreSrv (AQFileRestoreSrv) . (.Avanquest Software - File Undeleter Service.) - C:\Program Files (x86)\Avanquest\Fix-It\AQFileRestoreSrv.exe {167AE4BEC6B4B1D1BA0BC9D47BA75B67} =>.Avanquest Software O23 - Service: Avast Antivirus (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe =>.AVAST Software a.s.® O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe =>.Apple Inc.® O23 - Service: Service Mise à jour Dropbox (dbupdate) (dbupdate) . (.Dropbox, Inc. - Dropbox Update.) - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe =>.Dropbox, Inc® O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google Inc® O23 - Service: Live Updater Service (Live Updater Service) . (.Acer Incorporated - Updater Service.) - C:\Program Files\Acer\Acer Updater\UpdaterService.exe =>.Acer Incorporated® O23 - Service: LiveUpdate (LiveUpdateSvc) . (.IObit - Product Updater.) - C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe =>.IObit Information Technology® O23 - Service: Ma-Config Agent (MaConfigAgent) . (.CybelSoft - Service de détection matériel.) - C:\Program Files\ma-config.com\MaConfigAgent.exe =>.Cybelsoft® O23 - Service: McAfee Validation Trust Protection Service (mfevtp) . (.McAfee, Inc. - McAfee Process Validation Service.) - C:\Windows\System32\mfevtps.exe =>.McAfee, Inc.® O23 - Service: Realtek8723AU (Realtek8723AU) . (.Realtek Semiconductor Corp. - Realtek RtlService Application.) - C:\Program Files (x86)\REALTEK\USB Wireless LAN Utility\RtlService.exe =>.Realtek Semiconductor Corp. O23 - Service: RunSwUSB (RunSwUSB) . (.Copyright (C) 2012-2013 - .) - C:\Windows\runSW.exe =>.Realtek Semiconductor Corp® O23 - Service: Samsung Network Fax Server (Samsung Network Fax Server) . (.Samsung Electronics Co., Ltd. - Samsung Network PC Fax (FaxServer).) - C:\Windows\System32\spool\drivers\x64\3\NetFaxServer64.exe =>.Samsung Electronics CO., LTD.® O23 - Service: Samsung Printer Dianostics Service (Samsung Printer Dianostics Service) . (...) - C:\WINDOWS\system32\spdsvc.exe (.not file.) O23 - Service: Samsung Cloud Print Service (SamsungCloudPrintSvc) . (.Copyright (C) 2014 - Samsung Cloud Print Service.) - C:\Program Files\Samsung\Samsung Cloud Print PC Agent\SCP_Svc.exe =>.Samsung Electronics CO., LTD.® O23 - Service: Samsung UPD Utility Service (SamsungUPDUtilSvc) . (.Copyright (C) 2014 - SecUPDUtil Service.) - C:\Windows\SysWOW64\SecUPDUtilSvc.exe =>.Samsung Electronics CO., LTD.® O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files (x86)\Skype\Updater\Updater.exe =>.Skype Software Sarl® O23 - Service: VCOM Cloud Agent (VCOMCloudAgent) . (.Avanquest Software North America - VCOM Device Agent.) - C:\Program Files (x86)\Avanquest\Fix-It\VcomCloudAgent.exe {167AE4BEC6B4B1D1BA0BC9D47BA75B67} O23 - Service: yahoochrome technology limit (yahoochrometechnology) . (.YahooChrome - .) - C:\ProgramData\yahoochrome\desktop25.exe =>.Superfluous.MustangBrowser ---\\ Services non Microsoft (SR=Démarré,SS=Stoppé) (28) - 24s SR - Auto [13/12/2013] [ 249192] Fix-It Utilities Process Monitor (.AVQWindowsMonitorService) . (.Avanquest Software.) - C:\Program Files (x86)\Avanquest\Fix-It\AVQWinMonEngine.exe {167AE4BEC6B4B1D1BA0BC9D47BA75B67} =>.Avanquest Software SR - Auto [22/04/2016] [ 82128] Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe =>.Adobe Systems, Incorporated® SS - Demand [17/06/2016] [ 270016] Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe =>.Adobe Systems Incorporated® SR - Auto [02/03/2016] [ 67384] Apple Mobile Device (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe =>.Apple Inc.® SR - Auto [13/12/2013] [ 82816] AQFileRestoreSrv (AQFileRestoreSrv) . (.Avanquest Software.) - C:\Program Files (x86)\Avanquest\Fix-It\AQFileRestoreSrv.exe {167AE4BEC6B4B1D1BA0BC9D47BA75B67} =>.Avanquest Software SR - Auto [11/05/2016] [ 243296] Avast Antivirus (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe =>.AVAST Software a.s.® SR - Auto [12/08/2015] [ 462096] Service Bonjour (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe =>.Apple Inc.® SS - Auto [20/08/2015] [ 136048] Service Mise à jour Dropbox (dbupdate) (dbupdate) . (.Dropbox, Inc..) - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe =>.Dropbox, Inc® SS - Demand [20/08/2015] [ 136048] Service Mise à jour Dropbox (dbupdatem) (dbupdatem) . (.Dropbox, Inc..) - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe =>.Dropbox, Inc® SR - Demand [18/06/2015] [ 1268568] Disc Soft Lite Bus Service (Disc Soft Lite Bus Service) . (.Disc Soft Ltd.) - C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe =>.Disc Soft Ltd® SS - Auto [26/11/2015] [ 144200] Service Google Update (gupdate) (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google Inc® SS - Demand [26/11/2015] [ 144200] Service Google Update (gupdatem) (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google Inc® SS - Demand [13/08/2014] [ 136120] Google Updater Service (gusvc) . (.Google.) - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe =>.Google Inc® SR - Auto [05/04/2012] [ 255376] Live Updater Service (Live Updater Service) . (.Acer Incorporated.) - C:\Program Files\Acer\Acer Updater\UpdaterService.exe =>.Acer Incorporated® SR - Auto [29/07/2015] [ 2909472] LiveUpdate (LiveUpdateSvc) . (.IObit.) - C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe =>.IObit Information Technology® SR - Auto [15/10/2014] [ 2820424] Ma-Config Agent (MaConfigAgent) . (.CybelSoft.) - C:\Program Files\ma-config.com\MaConfigAgent.exe =>.Cybelsoft® SR - Auto [09/12/2015] [ 250672] McAfee Validation Trust Protection Service (mfevtp) . (.McAfee, Inc..) - C:\Windows\System32\mfevtps.exe =>.McAfee, Inc. SS - Demand [05/06/2016] [ 146888] Mozilla Maintenance Service (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe =>.Mozilla Corporation® SR - Auto [10/05/2012] [ 36864] Realtek8723AU (Realtek8723AU) . (.Realtek Semiconductor Corp..) - C:\Program Files (x86)\REALTEK\USB Wireless LAN Utility\RtlService.exe =>.Realtek Semiconductor Corp. SR - Auto [14/05/2013] [ 44104] RunSwUSB (RunSwUSB) . (.Copyright (C) 2012-2013.) - C:\Windows\runSW.exe =>.Realtek Semiconductor Corp® SR - Auto [04/02/2015] [ 633024] Samsung Network Fax Server (Samsung Network Fax Server) . (.Samsung Electronics Co., Ltd..) - C:\Windows\System32\spool\drivers\x64\3\NetFaxServer64.exe =>.Samsung Electronics CO., LTD.® SR - Auto [28/01/2016] [ 907568] Samsung Cloud Print Service (SamsungCloudPrintSvc) . (.Copyright (C) 2014.) - C:\Program Files\Samsung\Samsung Cloud Print PC Agent\SCP_Svc.exe =>.Samsung Electronics CO., LTD.® SR - Auto [01/06/2016] [ 143664] Samsung UPD Utility Service (SamsungUPDUtilSvc) . (.Copyright (C) 2014.) - C:\Windows\SysWOW64\SecUPDUtilSvc.exe =>.Samsung Electronics CO., LTD.® SS - Demand [17/03/2016] [ 31176] ShareItSvc (ShareItSvc) . (.SHAREit Technologies Co.Ltd.) - C:\Program Files (x86)\SHAREit\SHAREit\Shareit.Service.exe =>.LENOVO® SS - Auto [23/05/2016] [ 324224] Skype Updater (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe =>.Skype Software Sarl® SR - Auto [13/12/2013] [ 133504] VCOM Cloud Agent (VCOMCloudAgent) . (.Avanquest Software North America.) - C:\Program Files (x86)\Avanquest\Fix-It\VcomCloudAgent.exe {167AE4BEC6B4B1D1BA0BC9D47BA75B67} SR - Auto [02/05/2016] [ 236768] yahoochrome technology limit (yahoochrometechnology) . (.YahooChrome.) - C:\ProgramData\yahoochrome\desktop25.exe =>.Superfluous.MustangBrowser ---\\ Tâches planifiées en automatique (63) - 5s [MD5.00000000000000000000000000000000] [APT] [0615pizUpdateInfo] (...) -- C:\ProgramData\Avg_Update_0615piz\0615piz_AVG-Secure-Search-Update.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.DE7BC28EAE6A62BC35754D1DCA4ECF38] [APT] [Adobe Acrobat Update Task] (.Adobe Systems Incorporated.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1107672] (.Activate.) =>.Adobe Systems, Incorporated® [MD5.E324D38B6CCF843ED4F6D521908AEE5B] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [270016] (.Activate.) =>.Adobe Systems Incorporated® [MD5.1282F8C897DBF180BCF3F6F6968DE2C3] [APT] [avast! Emergency Update] (.AVAST Software.) -- C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [1517200] (.Activate.) =>.AVAST Software a.s.® [MD5.00000000000000000000000000000000] [APT] [avast! Windows 10 Start Menu helper] (...) -- c:\program files\avast software\avast\asww10mon.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.E262E7DFCB6CBA006837E00E9DECEA94] [APT] [avastBCLRestartS-1-5-21-2405315038-1449255577-936545332-1000] (.Google Inc..) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [941720] (.Activate.) =>.Google Inc® [MD5.B458D331858CCD6C8A36E9167DBAFB2A] [APT] [CCleanerSkipUAC] (.Piriform Ltd.) -- C:\Program Files\CCleaner\CCleaner.exe [6690520] (.Activate.) =>.Piriform Ltd® [MD5.00000000000000000000000000000000] [APT] [Driver Booster SkipUAC (PERSO)] (...) -- C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.33BFEC2B102B196B62ABB9947C7D7E23] [APT] [DropboxUpdateTaskMachineCore] (.Dropbox, Inc..) -- C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [136048] (.Activate.) =>.Dropbox, Inc® [MD5.33BFEC2B102B196B62ABB9947C7D7E23] [APT] [DropboxUpdateTaskMachineUA] (.Dropbox, Inc..) -- C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [136048] (.Activate.) =>.Dropbox, Inc® [MD5.53DF260F0C8B5900883F9CF36CE315D3] [APT] [EPM Preload] (...) -- C:\Program Files (x86)\Samsung\Easy Printer Manager\EPM2DotNetHandler.exe [1328352] (.Activate.) =>.Samsung Electronics CO., LTD.® [MD5.88FBBB1C601A6BC42054E57C2897FA45] [APT] [Google Updater and Installer] (.Google Inc..) -- C:\Users\PERSO\AppData\Local\Google\Update\GoogleUpdate.exe [144200] (.Deactivate.) =>.Google Inc® [MD5.053EEEE1ABAE53F044F1E386E22AE525] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200] (.Activate.) =>.Google Inc® [MD5.053EEEE1ABAE53F044F1E386E22AE525] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200] (.Activate.) =>.Google Inc® [MD5.88FBBB1C601A6BC42054E57C2897FA45] [APT] [GoogleUpdateTaskUserS-1-5-21-2405315038-1449255577-936545332-1000Core] (.Google Inc..) -- C:\Users\PERSO\AppData\Local\Google\Update\GoogleUpdate.exe [144200] (.Activate.) =>.Google Inc® [MD5.88FBBB1C601A6BC42054E57C2897FA45] [APT] [GoogleUpdateTaskUserS-1-5-21-2405315038-1449255577-936545332-1000UA] (.Google Inc..) -- C:\Users\PERSO\AppData\Local\Google\Update\GoogleUpdate.exe [144200] (.Activate.) =>.Google Inc® [MD5.6513807FEE68E6C32E67437EE3FFB6C8] [APT] [Java Update Scheduler] (.Oracle Corporation.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [596504] (.Activate.) =>.Oracle America, Inc.® [MD5.2A5C656B0A364580E578B26EAE2EE889] [APT] [klcp_update] (...) -- C:\Program Files (x86)\K-Lite Codec Pack\Tools\CodecTweakTool.exe [1173504] (.Deactivate.) [MD5.2E696C90B2D1DD842F59E38FD212D225] [APT] [SafeZone scheduled Autoupdate 1462961633] (.Avast Software.) -- C:\Program Files\AVAST Software\SZBrowser\launcher.exe [735736] (.Activate.) =>.AVAST Software s.r.o.® [MD5.00000000000000000000000000000000] [APT] [Total Extension] (...) -- C:\Users\PERSO\AppData\Local\Total Extension\{AC85159B-D911-C628-30CF-1B15E0F740BD}\TotalExtension.dll (.not file.) [0] (.Activate.) =>PUP.Optional.TotalExtension [MD5.00000000000000000000000000000000] [APT] [Total Extension2] (...) -- C:\Users\PERSO\AppData\Local\Total Extension\{AC85159B-D911-C628-30CF-1B15E0F740BD}\xhqfd.dll (.not file.) [0] (.Activate.) =>PUP.Optional.TotalExtension [MD5.00000000000000000000000000000000] [APT] [{0562B7F5-91F3-426E-B362-32564E2C90D4}] (...) -- C:\Program Files\Alwil Software\Avast5\aswRunDll.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.00000000000000000000000000000000] [APT] [{0AA71E6D-4F17-418C-A42C-A3E543E0E9C9}] (...) -- C:\Users\PERSO\Downloads\[www.Cpasbien.pe] OO.Defrag.Professional.v17.0.504.Incl.Keymaker-ZWT\setup.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.00000000000000000000000000000000] [APT] [{0D133760-C0D5-4371-AF87-755C4B4BCECE}] (...) -- C:\Users\PERSO\AppData\Local\Kingsoft\WPS Office\9.1.0.5218\utility\uninst.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.00000000000000000000000000000000] [APT] [{14C9645F-747A-44E5-9CCD-D8A1BF48C8D2}] (...) -- C:\Program Files (x86)\Common Files\Unifax\uninstall.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.00000000000000000000000000000000] [APT] [{37F425B6-0BE6-4A5D-B308-48EBEFE769F5}] (...) -- C:\Users\PERSO\Downloads\PopImapTroubleshooterInstaller.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.00000000000000000000000000000000] [APT] [{3FF2CEFC-FA93-4748-8132-A3F6D5B5E821}] (...) -- C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe (.not file.) [0] (.Deactivate.) =>.Superfluous.Empty [MD5.00000000000000000000000000000000] [APT] [{95AAB5A4-4BAA-4294-918B-7694858B61AE}] (...) -- C:\Program Files\Alwil Software\Avast4\aswRunDll.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.00000000000000000000000000000000] [APT] [{AB0E2091-29E1-4BA7-99AA-F7E97CB38006}] (...) -- C:\Users\PERSO\Downloads\Foxit Reader Professional 3.1.4 Build 1125\FoxitReader_3.1.4_1125.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.00000000000000000000000000000000] [APT] [{C7D46022-0DFE-419F-AA99-AB317D9C91D5}] (...) -- I:\Autorun.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.00000000000000000000000000000000] [APT] [{F04BBEF6-971F-4C4F-8447-F060985A9E10}] (...) -- C:\Program Files (x86)\YouTube Accelerator\YTAUninstall.exe (.not file.) [0] (.Deactivate.) =>PUP.Optional.Goobzo [MD5.00000000000000000000000000000000] [APT] [{F7F43BA0-0027-43E6-A835-09194489A1B0}] (...) -- C:\Users\PERSO\Downloads\Business-in-a-Box\Business-in-a-Box.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.23985274780D27117C470AA259B79B30] [APT] [Apple] (.Apple Inc..) -- C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [569416] (.Activate.) =>.Apple Inc.® [MD5.00000000000000000000000000000000] [APT] [Lenovo] (...) -- C:\Program Files (x86)\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.00000000000000000000000000000000] [APT] [Lenovo] (...) -- C:\Program Files (x86)\Lenovo\REACHit\webAgent.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\WINDOWS\Tasks\Adobe Flash Player Updater.job [1002] =>.Adobe Systems Incorporated® O39 - APT: DropboxUpdateTaskMachineCore - (.Dropbox, Inc..) -- C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job [1180] =>.Dropbox, Inc® O39 - APT: DropboxUpdateTaskMachineUA - (.Dropbox, Inc..) -- C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job [1184] =>.Dropbox, Inc® O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job [1090] =>.Google Inc® O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job [1094] =>.Google Inc® O39 - APT: GoogleUpdateTaskUserS-1-5-21-2405315038-1449255577-936545332-1000Core - (.Google Inc..) -- C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2405315038-1449255577-936545332-1000Core.job [1044] =>.Google Inc® O39 - APT: GoogleUpdateTaskUserS-1-5-21-2405315038-1449255577-936545332-1000UA - (.Google Inc..) -- C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2405315038-1449255577-936545332-1000UA.job [1096] =>.Google Inc® O39 - APT: 0615pizUpdateInfo - (...) -- C:\WINDOWS\System32\Tasks\0615pizUpdateInfo [2328] (.Orphan.) =>.Superfluous.Orphan O39 - APT: Adobe Acrobat Update Task - (.Adobe Systems Incorporated.) -- C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task [3972] =>.Adobe Systems, Incorporated® O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater [3976] =>.Adobe Systems Incorporated® O39 - APT: avast! Emergency Update - (.AVAST Software.) -- C:\WINDOWS\System32\Tasks\avast! Emergency Update [4280] =>.AVAST Software a.s.® O39 - APT: avast! Windows 10 Start Menu helper - (...) -- C:\WINDOWS\System32\Tasks\avast! Windows 10 Start Menu helper [2440] (.Orphan.) =>.Superfluous.Orphan O39 - APT: avastBCLRestartS-1-5-21-2405315038-1449255577-936545332-1000 - (.Google Inc..) -- C:\WINDOWS\System32\Tasks\avastBCLRestartS-1-5-21-2405315038-1449255577-936545332-1000 [2556] =>.Google Inc® O39 - APT: CCleanerSkipUAC - (.Piriform Ltd.) -- C:\WINDOWS\System32\Tasks\CCleanerSkipUAC [2218] =>.Piriform Ltd® O39 - APT: Driver Booster SkipUAC (PERSO) - (...) -- C:\WINDOWS\System32\Tasks\Driver Booster SkipUAC (PERSO) [2264] (.Orphan.) =>.Superfluous.Orphan O39 - APT: DropboxUpdateTaskMachineCore - (.Dropbox, Inc..) -- C:\WINDOWS\System32\Tasks\DropboxUpdateTaskMachineCore [3492] =>.Dropbox, Inc® O39 - APT: DropboxUpdateTaskMachineUA - (.Dropbox, Inc..) -- C:\WINDOWS\System32\Tasks\DropboxUpdateTaskMachineUA [3720] =>.Dropbox, Inc® O39 - APT: EPM Preload - (...) -- C:\WINDOWS\System32\Tasks\EPM Preload [3496] =>.Samsung Electronics CO., LTD.® O39 - APT: Google Updater and Installer - (.Google Inc..) -- C:\WINDOWS\System32\Tasks\Google Updater and Installer [3362] =>.Google Inc® O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore [3920] =>.Google Inc® O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA [4152] =>.Google Inc® O39 - APT: GoogleUpdateTaskUserS-1-5-21-2405315038-1449255577-936545332-1000Core - (.Google Inc..) -- C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2405315038-1449255577-936545332-1000Core [3836] =>.Google Inc® O39 - APT: GoogleUpdateTaskUserS-1-5-21-2405315038-1449255577-936545332-1000UA - (.Google Inc..) -- C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2405315038-1449255577-936545332-1000UA [4212] =>.Google Inc® O39 - APT: Java Update Scheduler - (.Oracle Corporation.) -- C:\WINDOWS\System32\Tasks\Java Update Scheduler [3078] =>.Oracle America, Inc.® O39 - APT: klcp_update - (...) -- C:\WINDOWS\System32\Tasks\klcp_update [2982] O39 - APT: SafeZone scheduled Autoupdate 1462961633 - (.Avast Software.) -- C:\WINDOWS\System32\Tasks\SafeZone scheduled Autoupdate 1462961633 [4032] =>.AVAST Software s.r.o.® O39 - APT: Total Extension - (...) -- C:\WINDOWS\System32\Tasks\Total Extension [2504] (.Orphan.) =>PUP.Optional.TotalExtension O39 - APT: Total Extension2 - (...) -- C:\WINDOWS\System32\Tasks\Total Extension2 [2488] (.Orphan.) =>PUP.Optional.TotalExtension ---\\ Processus lancés (33) - 2s [MD5.A24AF1F8186B4B69D54DCC4B059CA695] - (.AVAST Software - avast! Service.) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe [243296] [PID.1736] =>.AVAST Software a.s.® [MD5.00617C4F0EC8B29E0D4B3831D28AC512] - (.YahooChrome - .) -- C:\ProgramData\yahoochrome\desktop25.exe [236768] [PID.2184] =>.Superfluous.MustangBrowser [MD5.B5C2F92EE1106DFE7BB1CCE4D35B6037] - (.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe [462096] [PID.2204] =>.Apple Inc.® [MD5.DF4BCFFB97625D6B44E8554BF83FCCA6] - (.CybelSoft - Service de détection matériel.) -- C:\Program Files\ma-config.com\MaConfigAgent.exe [2820424] [PID.2224] =>.Cybelsoft® [MD5.B4AA79A9EA910585A95ECFE595149BD0] - (.Avanquest Software - Avanquest PC Startup Analyzer Monitoring Se.) -- C:\Program Files (x86)\Avanquest\Fix-It\AVQWinMonEngine.exe [249192] [PID.2244] {167AE4BEC6B4B1D1BA0BC9D47BA75B67} =>.Avanquest Software [MD5.BEFFF4C63B953A1CAE9370D131113EC8] - (.Copyright (C) 2012-2013 - .) -- C:\Windows\runSW.exe [44104] [PID.2308] =>.Realtek Semiconductor Corp® [MD5.8F5B0003A49DBF93EDB3696F5AA490AD] - (.Apple Inc. - MobileDeviceService.) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [67384] [PID.2316] =>.Apple Inc.® [MD5.100817619F5AE04074D10427B3A7456A] - (.Realtek Semiconductor Corp. - Realtek RtlService Application.) -- C:\Program Files (x86)\REALTEK\USB Wireless LAN Utility\RtlService.exe [36864] [PID.2324] =>.Realtek Semiconductor Corp. [MD5.61E55195FCF3C7B04938E8DE7A3048E9] - (.Avanquest Software North America - VCOM Device Agent.) -- C:\Program Files (x86)\Avanquest\Fix-It\VcomCloudAgent.exe [133504] [PID.2360] {167AE4BEC6B4B1D1BA0BC9D47BA75B67} [MD5.6D6E490C65D2E222BF51B02D45C1C26A] - (.Samsung Electronics Co., Ltd. - Samsung Network PC Fax (FaxServer).) -- C:\Windows\System32\spool\drivers\x64\3\NetFaxServer64.exe [633024] [PID.2380] =>.Samsung Electronics CO., LTD.® [MD5.F416D2D4A95FB4D997E640B60F8DAD99] - (.Copyright (C) 2015 - SPDSvc Application.) -- C:\Windows\SysWOW64\spdsvc.exe [498488] [PID.2404] =>.Samsung Electronics CO., LTD.® [MD5.CDAFEA45CB69A1FB4D83F3A23F406B6C] - (.Copyright (C) 2014 - Samsung Cloud Print Service.) -- C:\Program Files\Samsung\Samsung Cloud Print PC Agent\SCP_Svc.exe [907568] [PID.2488] =>.Samsung Electronics CO., LTD.® [MD5.F9881B099DD511A9A53B0B9DB668EA9D] - (.McAfee, Inc. - McAfee Process Validation Service.) -- C:\Windows\System32\mfevtps.exe [250672] [PID.2572] =>.McAfee, Inc.® [MD5.93B73DED2BC688F140C6AE2FBAD45789] - (.Acer Incorporated - Updater Service.) -- C:\Program Files\Acer\Acer Updater\UpdaterService.exe [255376] [PID.2580] =>.Acer Incorporated® [MD5.324DC20555B46B769746B03EC6B465AD] - (.Avanquest Software - File Undeleter Service.) -- C:\Program Files (x86)\Avanquest\Fix-It\AQFileRestoreSrv.exe [82816] [PID.2608] {167AE4BEC6B4B1D1BA0BC9D47BA75B67} =>.Avanquest Software [MD5.36114214BF8D7C464D1E92E4EB6B2DD3] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [82128] [PID.2624] =>.Adobe Systems, Incorporated® [MD5.CCFCF96CB350DA48AFDCB221CA999ADA] - (.Copyright (C) 2014 - SecUPDUtil Service.) -- C:\Windows\SysWOW64\SecUPDUtilSvc.exe [143664] [PID.2656] =>.Samsung Electronics CO., LTD.® [MD5.337FA50FFDED5E2BC94B36BF625AB681] - (.IObit - Product Updater.) -- C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2909472] [PID.2792] =>.IObit Information Technology® [MD5.56FE3C885B0901601549E23E7A435984] - (.Google Inc. - Google Crash Handler.) -- C:\Program Files (x86)\Google\Update\1.3.30.3\GoogleCrashHandler.exe [250008] [PID.6472] =>.Google Inc® [MD5.91DF13EC831BDCFA36A7A12CD13D66B9] - (.Disc Soft Ltd - Disc Soft Bus Service.) -- C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [1268568] [PID.7100] =>.Disc Soft Ltd® [MD5.A425CDCEB9D26E9A5ABAFA259799D447] - (.Google Inc. - Google Crash Handler.) -- C:\Program Files (x86)\Google\Update\1.3.30.3\GoogleCrashHandler64.exe [312472] [PID.4864] =>.Google Inc® [MD5.3EAD380427D6128BF13E9F8ED545580D] - (.Realtek - Switch USB2.0/USB3.0 for WinXP SP2+ ~ Win8.) -- C:\Windows\SwUSB.exe [445512] [PID.6716] =>.Realtek Semiconductor Corp® [MD5.B3995D3D4693394CA1318A76B2AD9F13] - (.Realtek Semiconductor Corp. - RtWLan.) -- C:\Program Files (x86)\REALTEK\USB Wireless LAN Utility\RtWLan.exe [1961984] [PID.9112] =>.Realtek Semiconductor Corp. [MD5.BF225BCD0EC2D85719C382019B5B4250] - (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [14040792] [PID.3036] =>.Realtek Semiconductor Corp® [MD5.8CC5E4DB25E4C22A308E2820E69D4950] - (.Copyright © 2010. All rights reserved. - CDA Server.) -- C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [464608] [PID.8812] =>.Samsung Electronics CO., LTD.® [MD5.429DC63A30B5EF65F6422B50596F85C6] - (.Copyright (C) 2013 - Business-in-a-Box Launcher Application.) -- C:\Program Files (x86)\Business-in-a-Box\BIBLauncher.exe [3950440] [PID.8476] {0492232BC8EFD4} [MD5.936488E27D287C3E071EB540ED49597E] - (.Samsung Electronics Co., Ltd. - Samsung Network PC Fax (FaxTray).) -- C:\Windows\System32\spool\drivers\x64\3\NetFaxTray64.exe [383680] [PID.9528] =>.Samsung Electronics CO., LTD.® [MD5.D021C350B1CBF88611BA1408B4FABC8F] - (.Dropbox, Inc. - Dropbox.) -- C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [23972712] [PID.368] =>.Dropbox, Inc® [MD5.2D6800E17FEBB51E3C75CD935E2BA8F5] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\avastui.exe [7405752] [PID.7332] =>.AVAST Software a.s.® [MD5.63405C389EB81881D68AEEB0E05F3F7D] - (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner64.exe [8722136] [PID.7108] =>.Piriform Ltd® [MD5.C3EF139378171D8BB852BEB6E759B7F1] - (...) -- C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe [144384] [PID.9924] [MD5.E1490841AA080AA3978B401C967C0E78] - (.Nicolas Coolman - ZHPCleaner.) -- C:\Users\PERSO\ZHPCleaner.exe [1996288] [PID.10052] =>.Nicolas Coolman [MD5.FA59BB3FBF850907A676699B335C4271] - (.Nicolas Coolman - ZHPDiag.) -- C:\Users\PERSO\ZHPDiag3.exe [2219008] [PID.5916] =>.Nicolas Coolman ---\\ Firefox, Plugins,Demarrage,Recherche,Extensions (13) - 2s M0 - MFSP: prefs.js [PERSO - bvmxqoy5.default-1455109004688] http://d2ucfwpxlh3zh3.cloudfront.net/?ts=AHEqBHUnBHAlBU..&v=20160611&uid=03D3D200EE2350F628D894336FA3D434&ptid=isr&mode=loadm =>.Superfluous.CloudfrontNet M1 - SPR:Search Page Redirection - C:\Program Files (x86)\Mozilla Firefox\extensions\belgiumeid@eid.belgium.be P2 - EXT FILE: (...) -- C:\Users\PERSO\AppData\Roaming\Mozilla\Firefox\Profiles\bvmxqoy5.default-1455109004688\extensions\belgiumeid@eid.belgium.be.xpi P2 - EXT FILE: (...) -- C:\Users\PERSO\AppData\Roaming\Mozilla\Firefox\Profiles\bvmxqoy5.default-1455109004688\extensions\wrc@avast.com.xpi P2 - EXT FILE: (...) -- C:\Users\PERSO\AppData\Roaming\Mozilla\Firefox\Profiles\bvmxqoy5.default-1455109004688\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi P2 - EXT FILE: (...) -- C:\Users\PERSO\AppData\Roaming\Mozilla\Firefox\Profiles\bvmxqoy5.default-1455109004688\searchplugins\bing-avast.xml P2 - EXT FILE: (...) -- C:\Users\PERSO\AppData\Roaming\Mozilla\Firefox\Profiles\bvmxqoy5.default-1455109004688\searchplugins\google-avast.xml P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_22_0_0_192.dll =>.Adobe Systems Incorporated P2 - FPN: [HKLM] [@foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xdp] - (...) -- C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll P2 - FPN: [HKLM] [@foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xfdf] - (...) -- C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll P2 - FPN: [HKLM] [@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp] - (...) -- C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll P2 - FPN: [HKLM] [@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf] - (...) -- C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll P2 - FPN: [HKLM] [@microsoft.com/Lync,version=15.0] - (.Microsoft.) -- C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll =>.Microsoft ---\\ Internet Explorer,Démarrage,Recherche,URLSearchHook (21) - 0s R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = www.google.com R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://home.microsoft.com/ R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = preserve R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/ R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchUrl,Default = http://www.google.com R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/ R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk R1 - HKEY_USERS\S-1-5-21-2405315038-1449255577-936545332-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = preserve R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphan =>.Microsoft Internet Explorer ---\\ Internet Explorer,Proxy Management (5) - 0s R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll ---\\ Internet Explorer,IniFiles, Autoloading programs (3) - 0s F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe (.Microsoft Corporation.) =>.Microsoft Corporation F2 - REG:system.ini: Shell=C:\WINDOWS\explorer.exe (.Microsoft Corporation.) =>.Microsoft Corporation F2 - REG:system.ini: VMApplet= ---\\ Etude du fichier hosts (1) - 0s ~ Le fichier hôte est sain (The hosts file is clean) (31) ---\\ Browser Helper Object de navigateur (BHO) (1) - 0s O2 - BHO: Skype for Business Click to Call BHO [64Bits] - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} . (.Microsoft Corporation - Skype for Business.) -- C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll =>.Microsoft Corporation® ---\\ Applications lancées au démarrage du système (21) - 1s O4 - HKLM\..\Run: [RTHDVCPL] . (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe =>.Realtek Semiconductor Corp® O4 - HKLM\..\Run: [CDAServer] . (.Copyright © 2010. All rights reserved. - CDA Server.) -- C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe =>.Samsung Electronics CO., LTD.® O4 - HKCU\..\Run: [BIBLauncher] . (.Copyright (C) 2013 - Business-in-a-Box Launcher Application.) -- C:\Program Files (x86)\Business-in-a-Box\BIBLauncher.exe {0492232BC8EFD4} O4 - HKCU\..\Run: [OneDrive] . (.Microsoft Corporation - Microsoft OneDrive.) -- C:\Users\PERSO\AppData\Local\Microsoft\OneDrive\OneDrive.exe =>.Microsoft Corporation® O4 - HKCU\..\Run: [DAEMON Tools Lite Automount] . (.Disc Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files\DAEMON Tools Lite\DTAgent.exe =>.Disc Soft Ltd® O4 - HKCU\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Users\PERSO\AppData\Local\Google\Update\GoogleUpdate.exe =>.Google Inc® O4 - HKCU\..\Run: [STUISpeedLauncher] . (.Copyright (C) 2014 - TouchBasedUI Native Starter.) -- C:\Program Files\Samsung\Stylish UI Pack\TouchBasedUI.exe O4 - HKCU\..\Run: [CCleaner Monitoring] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner64.exe =>.Piriform Ltd® O4 - HKCU\..\RunOnce: [Uninstall C:\Users\PERSO\AppData\Local\Microsoft\OneDrive\17.3.6386.0412_1\amd64] C:\Users\PERSO\AppData\Local\Microsoft\OneDrive\17.3.6386.0412_1\amd64 (.not file.) O4 - HKLM\..\Wow6432Node\Run: [Dropbox] . (.Dropbox, Inc. - Dropbox.) -- C:\Program Files (x86)\Dropbox\Client\Dropbox.exe =>.Dropbox, Inc® O4 - HKLM\..\Wow6432Node\Run: [AvastUI.exe] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\avastui.exe =>.AVAST Software a.s.® O4 - HKLM\..\Wow6432Node\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe =>.Oracle America, Inc.® O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] . (.Microsoft Corporation - Microsoft OneDrive Setup.) -- C:\Windows\SysWOW64\OneDriveSetup.exe =>.Microsoft Corporation® O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] . (.Microsoft Corporation - Microsoft OneDrive Setup.) -- C:\Windows\SysWOW64\OneDriveSetup.exe =>.Microsoft Corporation® O4 - HKUS\S-1-5-21-2405315038-1449255577-936545332-1000\..\Run: [BIBLauncher] . (.Copyright (C) 2013 - Business-in-a-Box Launcher Application.) -- C:\Program Files (x86)\Business-in-a-Box\BIBLauncher.exe {0492232BC8EFD4} O4 - HKUS\S-1-5-21-2405315038-1449255577-936545332-1000\..\Run: [OneDrive] . (.Microsoft Corporation - Microsoft OneDrive.) -- C:\Users\PERSO\AppData\Local\Microsoft\OneDrive\OneDrive.exe =>.Microsoft Corporation® O4 - HKUS\S-1-5-21-2405315038-1449255577-936545332-1000\..\Run: [DAEMON Tools Lite Automount] . (.Disc Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files\DAEMON Tools Lite\DTAgent.exe =>.Disc Soft Ltd® O4 - HKUS\S-1-5-21-2405315038-1449255577-936545332-1000\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Users\PERSO\AppData\Local\Google\Update\GoogleUpdate.exe =>.Google Inc® O4 - HKUS\S-1-5-21-2405315038-1449255577-936545332-1000\..\Run: [STUISpeedLauncher] . (.Copyright (C) 2014 - TouchBasedUI Native Starter.) -- C:\Program Files\Samsung\Stylish UI Pack\TouchBasedUI.exe O4 - HKUS\S-1-5-21-2405315038-1449255577-936545332-1000\..\Run: [CCleaner Monitoring] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner64.exe =>.Piriform Ltd® O4 - HKUS\S-1-5-21-2405315038-1449255577-936545332-1000\..\RunOnce: [Uninstall C:\Users\PERSO\AppData\Local\Microsoft\OneDrive\17.3.6386.0412_1\amd64] C:\Users\PERSO\AppData\Local\Microsoft\OneDrive\17.3.6386.0412_1\amd64 (.not file.) ---\\ Raccourcis Global Startup (47) - 5s O4 - GS\Desktop [Administrateur]: BankPerfect.lnk . (.Fabio Chelly - Programme de gestion bancaire.) C:\BankPerfect\bankperfect.exe =>.Fabio Chelly O4 - GS\Desktop [Administrateur]: Dropbox.lnk . (.Dropbox, Inc. - Dropbox.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe =>.Dropbox, Inc® O4 - GS\Desktop [Administrateur]: MediaHuman YouTube to MP3 Converter.lnk . (...) C:\Program Files (x86)\MediaHuman\YouTube to MP3 Converter\YouTubeToMp3.exe =>.MediaHuman (Vyacheslav Anatolievich Parygin IP)® O4 - GS\Desktop [Administrateur]: ZHPCleaner.lnk . (.Nicolas Coolman - ZHPCleaner.) C:\Users\PERSO\AppData\Roaming\ZHP\ZHPCleaner.exe =>.Nicolas Coolman O4 - GS\Desktop [Administrateur]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\PERSO\ZHPDiag3.exe =>.Nicolas Coolman O4 - GS\Quicklaunch [Administrateur]: Business-in-a-Box.lnk . (.Copyright (C) 2014 - Business-in-a-Box Application.) C:\Program Files (x86)\Business-in-a-Box\BIB.exe {0492232BC8EFD4} O4 - GS\Quicklaunch [Administrateur]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc® O4 - GS\Quicklaunch [Administrateur]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) C:\Users\PERSO\AppData\Roaming\uTorrent\uTorrent.exe =>.BitTorrent Inc® O4 - GS\sendTo [Administrateur]: Dropbox.lnk . (...) C:\Users\PERSO\Dropbox O4 - GS\sendTo [Administrateur]: Skype.lnk . (.Skype Technologies S.A. - Skype.) C:\Program Files (x86)\Skype\Phone\Skype.exe =>.Skype Software Sarl® O4 - GS\TaskBar [Administrateur]: Access 2013.lnk . (...) C:\WINDOWS\Installer\{90150000-0011-0000-1000-0000000FF1CE}\accicons.exe =>.Microsoft Corporation® O4 - GS\TaskBar [Administrateur]: Excel 2013.lnk . (...) C:\WINDOWS\Installer\{90150000-0011-0000-1000-0000000FF1CE}\xlicons.exe =>.Microsoft Corporation® O4 - GS\TaskBar [Administrateur]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc® O4 - GS\TaskBar [Administrateur]: Outlook 2013.lnk . (...) C:\WINDOWS\Installer\{90150000-0011-0000-1000-0000000FF1CE}\outicon.exe =>.Microsoft Corporation® O4 - GS\TaskBar [Administrateur]: PowerPoint 2013.lnk . (...) C:\WINDOWS\Installer\{90150000-0011-0000-1000-0000000FF1CE}\pptico.exe =>.Microsoft Corporation® O4 - GS\TaskBar [Administrateur]: Publisher 2013.lnk . (...) C:\WINDOWS\Installer\{90150000-0011-0000-1000-0000000FF1CE}\pubs.exe =>.Microsoft Corporation® O4 - GS\TaskBar [Administrateur]: Word 2013.lnk . (...) C:\WINDOWS\Installer\{90150000-0011-0000-1000-0000000FF1CE}\wordicon.exe =>.Microsoft Corporation® O4 - GS\Desktop [PERSO]: BankPerfect.lnk . (.Fabio Chelly - Programme de gestion bancaire.) C:\BankPerfect\bankperfect.exe =>.Fabio Chelly O4 - GS\Desktop [PERSO]: Dropbox.lnk . (.Dropbox, Inc. - Dropbox.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe =>.Dropbox, Inc® O4 - GS\Desktop [PERSO]: MediaHuman YouTube to MP3 Converter.lnk . (...) C:\Program Files (x86)\MediaHuman\YouTube to MP3 Converter\YouTubeToMp3.exe =>.MediaHuman (Vyacheslav Anatolievich Parygin IP)® O4 - GS\Desktop [PERSO]: ZHPCleaner.lnk . (.Nicolas Coolman - ZHPCleaner.) C:\Users\PERSO\AppData\Roaming\ZHP\ZHPCleaner.exe =>.Nicolas Coolman O4 - GS\Desktop [PERSO]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\PERSO\ZHPDiag3.exe =>.Nicolas Coolman O4 - GS\Quicklaunch [PERSO]: Business-in-a-Box.lnk . (.Copyright (C) 2014 - Business-in-a-Box Application.) C:\Program Files (x86)\Business-in-a-Box\BIB.exe {0492232BC8EFD4} O4 - GS\Quicklaunch [PERSO]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc® O4 - GS\Quicklaunch [PERSO]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) C:\Users\PERSO\AppData\Roaming\uTorrent\uTorrent.exe =>.BitTorrent Inc® O4 - GS\sendTo [PERSO]: Dropbox.lnk . (...) C:\Users\PERSO\Dropbox O4 - GS\sendTo [PERSO]: Skype.lnk . (.Skype Technologies S.A. - Skype.) C:\Program Files (x86)\Skype\Phone\Skype.exe =>.Skype Software Sarl® O4 - GS\TaskBar [PERSO]: Access 2013.lnk . (...) C:\WINDOWS\Installer\{90150000-0011-0000-1000-0000000FF1CE}\accicons.exe =>.Microsoft Corporation® O4 - GS\TaskBar [PERSO]: Excel 2013.lnk . (...) C:\WINDOWS\Installer\{90150000-0011-0000-1000-0000000FF1CE}\xlicons.exe =>.Microsoft Corporation® O4 - GS\TaskBar [PERSO]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc® O4 - GS\TaskBar [PERSO]: Outlook 2013.lnk . (...) C:\WINDOWS\Installer\{90150000-0011-0000-1000-0000000FF1CE}\outicon.exe =>.Microsoft Corporation® O4 - GS\TaskBar [PERSO]: PowerPoint 2013.lnk . (...) C:\WINDOWS\Installer\{90150000-0011-0000-1000-0000000FF1CE}\pptico.exe =>.Microsoft Corporation® O4 - GS\TaskBar [PERSO]: Publisher 2013.lnk . (...) C:\WINDOWS\Installer\{90150000-0011-0000-1000-0000000FF1CE}\pubs.exe =>.Microsoft Corporation® O4 - GS\TaskBar [PERSO]: Word 2013.lnk . (...) C:\WINDOWS\Installer\{90150000-0011-0000-1000-0000000FF1CE}\wordicon.exe =>.Microsoft Corporation® O4 - GS\CommonDesktop [Public]: Avast Antivirus Gratuit.lnk . (.AVAST Software - .) C:\Program Files (x86)\AVAST Software\Avast\avastui.exe =>.AVAST Software O4 - GS\CommonDesktop [Public]: Avast SafeZone Browser.lnk . (.Avast Software - .) C:\Program Files (x86)\AVAST Software\SZBrowser\launcher.exe =>.AVAST Software O4 - GS\CommonDesktop [Public]: Business-in-a-Box.lnk . (.Copyright (C) 2014 - Business-in-a-Box Application.) C:\Program Files (x86)\Business-in-a-Box\BIB.exe {0492232BC8EFD4} O4 - GS\CommonDesktop [Public]: CCleaner.lnk . (.Piriform Ltd - .) C:\Program Files (x86)\CCleaner\CCleaner64.exe =>.Piriform Ltd O4 - GS\CommonDesktop [Public]: DAEMON Tools Lite.lnk . (.Disc Soft Ltd - .) C:\Program Files (x86)\DAEMON Tools Lite\DTLauncher.exe =>.Disc Soft Ltd O4 - GS\CommonDesktop [Public]: Diagnostics d'imprimante Samsung.lnk . (...) C:\Program Files (x86)\Samsung\Samsung Printer Diagnostics\SEInstall\SPD\ESM.exe =>.Samsung Electronics CO., LTD.® O4 - GS\CommonDesktop [Public]: eID Viewer.lnk . (.FedICT - Viewer for Belgian eID Cards.) C:\Program Files (x86)\Belgium Identity Card\EidViewer\eID Viewer.exe =>.Fedict O4 - GS\CommonDesktop [Public]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc® O4 - GS\CommonDesktop [Public]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files (x86)\Mozilla Firefox\firefox.exe =>.Mozilla Corporation® O4 - GS\CommonDesktop [Public]: QuickTime Player.lnk . (.Apple Inc. - QuickTime Player.) C:\Program Files (x86)\QuickTime\QuickTimePlayer.exe =>.Apple Inc.® O4 - GS\CommonDesktop [Public]: VLC media player.lnk . (.VideoLAN - VLC media player.) C:\Program Files (x86)\VideoLAN\VLC\vlc.exe =>.VideoLAN® O4 - GS\CommonDesktop [Public]: ZHPFix.lnk . (.Nicolas Coolman - ZHPDiag Setup.) C:\Program Files (x86)\ZHPFix\ZHPhep.exe =>.Nicolas Coolman O4 - GS\Startup [Public]: Samsung Network PC Fax.lnk . (.Samsung Electronics Co., Ltd. - Samsung Network PC Fax (FaxTray).) C:\Windows\System32\spool\drivers\x64\3\NetFaxTray64.exe =>.Samsung Electronics CO., LTD.® ---\\ Modification Domaine/Adresses DNS (5) - 0s O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 109.88.203.3 62.197.111.140 O17 - HKLM\System\CCS\Services\Tcpip\..\{2e5d8780-e455-4cb0-aa2c-db2924b6bb8a}: DhcpNameServer = 109.88.203.3 62.197.111.140 O17 - HKLM\System\CCS\Services\Tcpip\..\{346082d6-a6ea-4454-824a-4de081769a30}: DhcpNameServer = 192.168.42.129 O17 - HKLM\System\CCS\Services\Tcpip\..\{7625197e-83a7-4870-82df-8aa55b920118}: DhcpNameServer = 192.168.42.129 O17 - HKLM\System\CCS\Services\Tcpip\..\{9b44b691-1eb9-4289-af2c-c3df916e9bb8}: DhcpNameServer = 109.88.203.3 62.197.111.140 ---\\ Protocole additionnel (25) - 0s O18 - Handler: about [64Bits] - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation O18 - Handler: cdl [64Bits] - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation O18 - Handler: dvd [64Bits] - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\SysWOW64\MSVidCtl.dll =>.Microsoft Corporation O18 - Handler: file [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation O18 - Handler: ftp [64Bits] - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation O18 - Handler: http [64Bits] - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation O18 - Handler: https [64Bits] - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation O18 - Handler: its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\SysWOW64\itss.dll =>.Microsoft Corporation O18 - Handler: javascript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation O18 - Handler: local [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation O18 - Handler: mailto [64Bits] - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation O18 - Handler: mhtml [64Bits] - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\SysWOW64\inetcomm.dll =>.Microsoft Corporation O18 - Handler: mk [64Bits] - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation O18 - Handler: ms-its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\SysWOW64\itss.dll =>.Microsoft Corporation O18 - Handler: osf [64Bits] - {D924BDC6-C83A-4BD5-90D0-095128A113D1} . (.Microsoft Corporation - Microsoft Office 2013 component.) -- C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL =>.Microsoft Corporation® O18 - Handler: res [64Bits] - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation O18 - Handler: skype4com [64Bits] - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} . (.Skype Technologies - Skype4COM.) -- C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll =>.Skype Software Sarl® O18 - Handler: tbauth [64Bits] - {14654CA6-5711-491D-B89A-58E571679951} . (.Microsoft Corporation - TBAuth protocol handler.) -- C:\Windows\SysWOW64\tbauth.dll =>.Microsoft Corporation O18 - Handler: tv [64Bits] - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\SysWOW64\MSVidCtl.dll =>.Microsoft Corporation O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation O18 - Handler: windows.tbauth [64Bits] - {14654CA6-5711-491D-B89A-58E571679951} . (.Microsoft Corporation - TBAuth protocol handler.) -- C:\Windows\SysWOW64\tbauth.dll =>.Microsoft Corporation O18 - Filter: application/octet-stream [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\SysWOW64\mscoree.dll =>.Microsoft Corporation O18 - Filter: application/x-complus [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\SysWOW64\mscoree.dll =>.Microsoft Corporation O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\SysWOW64\mscoree.dll =>.Microsoft Corporation O18 - Filter: text/xml [64Bits] - {807583E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL =>.Microsoft Corporation® ---\\ Logiciels installés (87) - 15s O42 - Logiciel: µTorrent - (.BitTorrent Inc..) [HKCU][64Bits] -- uTorrent =>.BitTorrent Inc® O42 - Logiciel: Acer System Information - (.Acer.) [HKLM][64Bits] -- {72199E33-4F2A-4B7F-8E25-95DDDD50A678} =>.Acer O42 - Logiciel: Adobe Acrobat Reader DC - Français - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-7AD7-1036-7B44-AC0F074E4100} =>.Adobe Systems Incorporated O42 - Logiciel: Adobe Flash Player 22 NPAPI - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player NPAPI =>.Adobe Systems Incorporated® O42 - Logiciel: Adobe Refresh Manager - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-0804-1033-1959-001824184103} =>.Adobe Systems Incorporated O42 - Logiciel: Apple Application Support (32 bits) - (.Apple Inc..) [HKLM][64Bits] -- {FE5C2FAA-118D-4509-B51D-3F71CC9E1B3E} =>.Apple Inc. O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM][64Bits] -- {6F085FCD-4B6A-4F63-AF23-B74629C40797} =>.Apple Inc. O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM][64Bits] -- {56EC47AA-5813-4FF6-8E75-544026FBEA83} =>.Apple Inc. O42 - Logiciel: ASIO4ALL - (.Michael Tippach.) [HKLM][64Bits] -- ASIO4ALL =>.Michael Tippach O42 - Logiciel: Avast Antivirus Gratuit - (.AVAST Software.) [HKLM][64Bits] -- Avast =>.AVAST Software a.s.® O42 - Logiciel: BankPerfect 8.0 - (.Fabio Chelly.) [HKLM][64Bits] -- BankPerfect =>.Fabio Chelly O42 - Logiciel: Belgium e-ID middleware 4.1.18 (build 1730) - (.Belgian Government.) [HKLM][64Bits] -- {DB942AEA-93D6-4FE4-8862-180D35A71730} =>.Belgian Government O42 - Logiciel: bl - (.Your Company Name.) [HKLM][64Bits] -- {2A075BB4-E976-4278-BF3F-E5C6945D84C0} =>.Your Company Name O42 - Logiciel: BlueOcean - (.Resoft.) [HKLM][64Bits] -- {A3F838EA-48CF-482E-B378-4A4740C2AC6E} O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM][64Bits] -- {56DDDFB8-7F79-4480-89D5-25E1F52AB28F} =>.Apple Inc. O42 - Logiciel: Business-in-a-Box - (.Biztree Inc..) [HKLM][64Bits] -- Business-in-a-Box {0492232BC8EFD4} =>.Biztree Inc. O42 - Logiciel: CCleaner - (.Piriform.) [HKLM][64Bits] -- CCleaner =>.Piriform Ltd® O42 - Logiciel: Centre Souris et Claviers Microsoft - (.Microsoft Corporation.) [HKLM][64Bits] -- {FA945868-397C-44F2-A1A4-53244A1D64B3} =>.Microsoft Corporation O42 - Logiciel: Centre Souris et Claviers Microsoft - (.Microsoft Corporation.) [HKLM][64Bits] -- Microsoft Mouse and Keyboard Center =>.Microsoft Corporation® O42 - Logiciel: Common Desktop Agent - (.OEM.) [HKLM][64Bits] -- {031A0E14-0413-4C97-9772-2639B782F46F} =>.OEM O42 - Logiciel: DAEMON Tools Lite - (.Disc Soft Ltd.) [HKLM][64Bits] -- DAEMON Tools Lite =>.Disc Soft Ltd® O42 - Logiciel: Diagnostics d'imprimante Samsung - (.Samsung Electronics Co., Ltd..) [HKLM][64Bits] -- Samsung Printer Diagnostics =>.Samsung Electronics CO., LTD.® O42 - Logiciel: Dropbox - (.Dropbox, Inc..) [HKLM][64Bits] -- Dropbox =>.Dropbox, Inc® O42 - Logiciel: Dropbox Update Helper - (.Dropbox, Inc..) [HKLM][64Bits] -- {099218A5-A723-43DC-8DB5-6173656A1E94} =>.Dropbox, Inc. O42 - Logiciel: FL Studio ASIO - (.Image-Line.) [HKLM][64Bits] -- FL Studio ASIO =>.Image Line® O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM][64Bits] -- Google Chrome =>.Google Inc® O42 - Logiciel: Google Earth - (.Google.) [HKLM][64Bits] -- {817750FA-EC6A-485D-9901-0683AE6FFDF1} =>.Google O42 - Logiciel: Google Photos Backup - (.Google, Inc..) [HKCU][64Bits] -- Google Photos Backup =>.Google, Inc. O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {60EC980A-BDA2-4CB6-A427-B07A5498B4CA} =>.Google Inc. O42 - Logiciel: ImgBurn - (.LIGHTNING UK!.) [HKLM][64Bits] -- ImgBurn O42 - Logiciel: Java 8 Update 73 - (.Oracle Corporation.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F83218073F0} =>.Oracle Corporation O42 - Logiciel: Java 8 Update 74 - (.Oracle Corporation.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F83218074F0} =>.Oracle Corporation O42 - Logiciel: Java 8 Update 91 - (.Oracle Corporation.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F83218091F0} =>.Oracle Corporation O42 - Logiciel: Java Auto Updater - (.Oracle Corporation.) [HKLM][64Bits] -- {4A03706F-666A-4037-7777-5F2748764D10} =>.Oracle Corporation O42 - Logiciel: K-Lite Mega Codec Pack 10.9.5 - (...) [HKLM][64Bits] -- KLiteCodecPack_is1 O42 - Logiciel: Ma-Config.com (64 bits) - (.Cybelsoft.) [HKLM][64Bits] -- {E1322B8A-6F66-44ED-95D5-7FEBC50AC814} =>.CybelSoft O42 - Logiciel: MediaHuman YouTube to MP3 Converter version 3.8.2 - (...) [HKLM][64Bits] -- MediaHuman YouTube to MP3 Converter_is1 =>.MediaHuman (Vyacheslav Anatolievich Parygin IP)® O42 - Logiciel: Microsoft Access MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0015-040C-1000-0000000FF1CE} =>.Microsoft Corporation O42 - Logiciel: Microsoft DCF MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0090-040C-1000-0000000FF1CE} =>.Microsoft Corporation O42 - Logiciel: Microsoft DVD App Installation for Microsoft.WindowsDVDPlayer_2019.6.13291. - (.Microsoft Corporation.) [HKLM][64Bits] -- {25E80DAA-FD87-DCE5-202C-CC02F6673002} =>.Microsoft Corporation O42 - Logiciel: Microsoft Excel MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0016-040C-1000-0000000FF1CE} =>.Microsoft Corporation O42 - Logiciel: Microsoft Groove MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-00BA-040C-1000-0000000FF1CE} =>.Microsoft Corporation O42 - Logiciel: Microsoft InfoPath MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0044-040C-1000-0000000FF1CE} =>.Microsoft Corporation O42 - Logiciel: Microsoft Lync MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-012B-040C-1000-0000000FF1CE} =>.Microsoft Corporation O42 - Logiciel: Microsoft OneNote MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-00A1-040C-1000-0000000FF1CE} =>.Microsoft Corporation O42 - Logiciel: Microsoft Outlook MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-001A-040C-1000-0000000FF1CE} =>.Microsoft Corporation O42 - Logiciel: Microsoft PowerPoint MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0018-040C-1000-0000000FF1CE} =>.Microsoft Corporation O42 - Logiciel: Microsoft Publisher MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0019-040C-1000-0000000FF1CE} =>.Microsoft Corporation O42 - Logiciel: Microsoft Word MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-001B-040C-1000-0000000FF1CE} =>.Microsoft Corporation O42 - Logiciel: Mozilla Firefox 47.0 (x86 fr) - (.Mozilla.) [HKLM][64Bits] -- Mozilla Firefox 47.0 (x86 fr) =>.Mozilla Corporation® O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM][64Bits] -- MozillaMaintenanceService =>.Mozilla O42 - Logiciel: Pack de pilote stylé - (.Samsung Electronics Co., Ltd..) [HKLM][64Bits] -- Samsung Stylish UI Pack =>.Samsung Electronics Co., Ltd. O42 - Logiciel: Package de pilotes Windows - Fedict SmartCard (08/08/2015 4.1.5) - (.Fedict.) [HKLM][64Bits] -- 9F46F7AB1E3B1B5F5482EA8D97F401B04FBF7958 =>.Microsoft Windows® O42 - Logiciel: Paquet Eco Driver - (.Samsung Electronics Co., Ltd..) [HKLM][64Bits] -- Samsung Eco Driver Pack =>.Samsung Electronics Co., Ltd. O42 - Logiciel: ph - (.Your Company Name.) [HKLM][64Bits] -- {185F9795-9663-4F13-9EF9-307A282ADB5A} =>.Your Company Name O42 - Logiciel: Picasa 3 - (.Google, Inc..) [HKLM][64Bits] -- Picasa 3 =>.Google Inc® O42 - Logiciel: QuickTime 7 - (.Apple Inc..) [HKLM][64Bits] -- {FF59BD75-466A-4D5A-AD23-AAD87C5FD44C} =>Riskware.QuickTime O42 - Logiciel: Ralink RT2860 Wireless LAN Card - (.Ralink.) [HKLM][64Bits] -- {E883ECE4-1189-413A-894D-B7C4B17F0607} =>.Macrovision Corporation® O42 - Logiciel: REACHit - (.Lenovo.) [HKLM][64Bits] -- {4532E4C5-C84D-4040-A044-ECFCC5C6995B} =>.Lenovo O42 - Logiciel: Realtek Ethernet Controller Driver - (.Realtek.) [HKLM][64Bits] -- {8833FFB6-5B0C-4764-81AA-06DFEED9A476} =>.Realtek Semiconductor Corp® O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC} =>.Realtek Semiconductor Corp® O42 - Logiciel: REALTEK Wireless LAN Driver and Utility - (.REALTEK Semiconductor Corp..) [HKLM][64Bits] -- {9C049509-055C-4CFF-A116-1D12312225EB} =>.Realtek Semiconductor Corp® O42 - Logiciel: SafeZone Stable 1.48.2066.101 - (.Avast Software.) [HKLM][64Bits] -- SafeZone 1.48.2066.101 =>.AVAST Software s.r.o.® O42 - Logiciel: Samsung Cloud Print - (.Samsung Electronics Co., Ltd..) [HKLM][64Bits] -- Samsung Cloud Print =>.Samsung Electronics CO., LTD.® O42 - Logiciel: Samsung CLX-3300 Series - (.Samsung Electronics Co., Ltd..) [HKLM][64Bits] -- Samsung CLX-3300 Series =>.Samsung Electronics CO., LTD.® O42 - Logiciel: Samsung CLX-3300 Series XPS (Windows 8) - (.Samsung Electronics Co., Ltd..) [HKLM][64Bits] -- Samsung CLX-3300 Series XPS (Windows 8) =>.Samsung Electronics CO., LTD.® O42 - Logiciel: Samsung Easy Color Manager - (.Samsung Electronics Co., Ltd..) [HKLM][64Bits] -- {778EACF8-06C1-47AA-9284-91550E9BAD39} =>.Samsung Electronics Co., Ltd. O42 - Logiciel: Samsung Easy Document Creator - (.Samsung Electronics Co., Ltd..) [HKLM][64Bits] -- Samsung Easy Document Creator =>.Samsung Electronics Co., Ltd. O42 - Logiciel: Samsung Easy Printer Manager - (.Samsung Electronics Co., Ltd..) [HKLM][64Bits] -- Samsung Easy Printer Manager =>.Samsung Electronics Co., Ltd. O42 - Logiciel: Samsung i-Launcher 1.1.0.37 - (.Samsung Electronics Co., Ltd..) [HKLM][64Bits] -- Samsung i-Launcher =>.Samsung Electronics Co., Ltd. O42 - Logiciel: Samsung Network PC Fax - (.Samsung Electronics Co., Ltd..) [HKLM][64Bits] -- Samsung Network PC Fax =>.Samsung Electronics CO., LTD.® O42 - Logiciel: Samsung OCR Software - (.Samsung Electronics Co., Ltd..) [HKLM][64Bits] -- Samsung OCR Software =>.Samsung Electronics Co., Ltd. O42 - Logiciel: Samsung Printer Center - (.Samsung Electronics Co., Ltd..) [HKLM][64Bits] -- Samsung Printer Center =>.Samsung Electronics Co., Ltd. O42 - Logiciel: Samsung Printer Live Update - (.Samsung Electronics Co., Ltd..) [HKLM][64Bits] -- Samsung Printer Live Update =>.Samsung Electronics Co., Ltd. O42 - Logiciel: Samsung Scan Process Machine - (.Samsung Electronics Co., Ltd..) [HKLM][64Bits] -- Samsung Scan Process Machine =>.Samsung Electronics CO., LTD.® O42 - Logiciel: Samsung Universal Scan Driver - (.Samsung Electronics Co., Ltd..) [HKLM][64Bits] -- Samsung Universal Scan Driver =>.Samsung Electronics Co., Ltd. O42 - Logiciel: SHAREit - (.Lenovo.) [HKLM][64Bits] -- SHAREit_is1 =>.Lenovo O42 - Logiciel: Skype™ 7.25 - (.Skype Technologies S.A..) [HKLM][64Bits] -- {FC965A47-4839-40CA-B618-18F486F042C6} =>.Skype Technologies S.A. O42 - Logiciel: SNS Upload for Easy Document Creator - (.Samsung Electronics Co.,Ltd.) [HKLM][64Bits] -- {B6B5F07C-88D5-49D3-A1A7-A6D4BC37DCCC} =>.Samsung Electronics CO.,LTD O42 - Logiciel: Uninstall Samsung Printer Software - (.Samsung Electronics CO., LTD..) [HKLM][64Bits] -- TotalUninstaller =>.Samsung Electronics CO., LTD.® O42 - Logiciel: Update for Skype for Business 2015 (KB3039776) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90150000-012B-040C-1000-0000000FF1CE}_Office15.PROPLUS_{8B3A877E-1B73-464A-AD21-9F26A0682AC6} =>.Microsoft Corporation® O42 - Logiciel: Update for Skype for Business 2015 (KB3115033) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{F258B6E3-BF41-4FEE-BE45-D7518C3B7FC1} =>.Microsoft Corporation® O42 - Logiciel: Update for Skype for Business 2015 (KB3115033) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUS_{F258B6E3-BF41-4FEE-BE45-D7518C3B7FC1} =>.Microsoft Corporation® O42 - Logiciel: Update for Skype for Business 2015 (KB3115033) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90150000-012B-040C-1000-0000000FF1CE}_Office15.PROPLUS_{F258B6E3-BF41-4FEE-BE45-D7518C3B7FC1} =>.Microsoft Corporation® O42 - Logiciel: VLC media player - (.VideoLAN.) [HKLM][64Bits] -- VLC media player =>.VideoLAN O42 - Logiciel: WinRAR 5.31 (64-bit) - (.win.rar GmbH.) [HKLM][64Bits] -- WinRAR archiver =>.win.rar GmbH® O42 - Logiciel: ZHPFix 2015 - (.Nicolas Coolman.) [HKLM][64Bits] -- ZHPFix_is1 =>.Nicolas Coolman ---\\ HKCU & HKLM Software Keys (191) - 15s HKLM\SOFTWARE\Wow6432Node\Acoustica HKLM\SOFTWARE\Wow6432Node\Adobe HKLM\SOFTWARE\Wow6432Node\Apple Computer, Inc. HKLM\SOFTWARE\Wow6432Node\Apple Inc. HKLM\SOFTWARE\Wow6432Node\ASIO HKLM\SOFTWARE\Wow6432Node\ASIO4ALL HKLM\SOFTWARE\Wow6432Node\ATI Technologies HKLM\SOFTWARE\Wow6432Node\Avanquest HKLM\SOFTWARE\Wow6432Node\AVAST Software HKLM\SOFTWARE\Wow6432Node\Avg HKLM\SOFTWARE\Wow6432Node\Avg Secure Update HKLM\SOFTWARE\Wow6432Node\BEID HKLM\SOFTWARE\Wow6432Node\Business-in-a-Box HKLM\SOFTWARE\Wow6432Node\Canneverbe Limited HKLM\SOFTWARE\Wow6432Node\Caphyon HKLM\SOFTWARE\Wow6432Node\Common Desktop Agent HKLM\SOFTWARE\Wow6432Node\CurrentControlSet HKLM\SOFTWARE\Wow6432Node\Data Fellows HKLM\SOFTWARE\Wow6432Node\DivXNetworks HKLM\SOFTWARE\Wow6432Node\Dropbox HKLM\SOFTWARE\Wow6432Node\DropboxUpdate HKLM\SOFTWARE\Wow6432Node\F-Secure HKLM\SOFTWARE\Wow6432Node\Foxit Software HKLM\SOFTWARE\Wow6432Node\GlarySoft HKLM\SOFTWARE\Wow6432Node\GNU HKLM\SOFTWARE\Wow6432Node\Google HKLM\SOFTWARE\Wow6432Node\HTC HKLM\SOFTWARE\Wow6432Node\Icaros HKLM\SOFTWARE\Wow6432Node\IM Providers HKLM\SOFTWARE\Wow6432Node\Image-Line HKLM\SOFTWARE\Wow6432Node\ImgBurn HKLM\SOFTWARE\Wow6432Node\Intel HKLM\SOFTWARE\Wow6432Node\IObit HKLM\SOFTWARE\Wow6432Node\iSkysoft HKLM\SOFTWARE\Wow6432Node\JavaSoft HKLM\SOFTWARE\Wow6432Node\JreMetrics HKLM\SOFTWARE\Wow6432Node\KLCodecPack HKLM\SOFTWARE\Wow6432Node\L&H HKLM\SOFTWARE\Wow6432Node\LAV HKLM\SOFTWARE\Wow6432Node\Lenovo HKLM\SOFTWARE\Wow6432Node\Licenses HKLM\SOFTWARE\Wow6432Node\LogMeInRescueCallingCard HKLM\SOFTWARE\Wow6432Node\Macromedia HKLM\SOFTWARE\Wow6432Node\Macrovision HKLM\SOFTWARE\Wow6432Node\Malwarebytes' Anti-Malware HKLM\SOFTWARE\Wow6432Node\McAfee HKLM\SOFTWARE\Wow6432Node\MediaProSoft HKLM\SOFTWARE\Wow6432Node\Mozilla HKLM\SOFTWARE\Wow6432Node\mozilla.org HKLM\SOFTWARE\Wow6432Node\MozillaPlugins HKLM\SOFTWARE\Wow6432Node\Native Instruments HKLM\SOFTWARE\Wow6432Node\Nuance HKLM\SOFTWARE\Wow6432Node\ODBC HKLM\SOFTWARE\Wow6432Node\Opera Software HKLM\SOFTWARE\Wow6432Node\PCRecovery HKLM\SOFTWARE\Wow6432Node\PDF Architect 2 HKLM\SOFTWARE\Wow6432Node\PDF Architect 3 HKLM\SOFTWARE\Wow6432Node\Piriform HKLM\SOFTWARE\Wow6432Node\PowerPivot HKLM\SOFTWARE\Wow6432Node\Propellerhead Software HKLM\SOFTWARE\Wow6432Node\Ralink HKLM\SOFTWARE\Wow6432Node\RtWLan HKLM\SOFTWARE\Wow6432Node\Safer Networking Limited HKLM\SOFTWARE\Wow6432Node\Samsung HKLM\SOFTWARE\Wow6432Node\SHAREit HKLM\SOFTWARE\Wow6432Node\Skype HKLM\SOFTWARE\Wow6432Node\SoftVoice HKLM\SOFTWARE\Wow6432Node\SRS Labs HKLM\SOFTWARE\Wow6432Node\SSDIAG HKLM\SOFTWARE\Wow6432Node\SSPrint HKLM\SOFTWARE\Wow6432Node\SSScan HKLM\SOFTWARE\Wow6432Node\SwUSB HKLM\SOFTWARE\Wow6432Node\TOSHIBA HKLM\SOFTWARE\Wow6432Node\TuneUp HKLM\SOFTWARE\Wow6432Node\VideoLAN HKLM\SOFTWARE\Wow6432Node\Voice HKLM\SOFTWARE\Wow6432Node\Volatile HKLM\SOFTWARE\Wow6432Node\WinRAR HKLM\SOFTWARE\Wow6432Node\wrar390Install HKLM\SOFTWARE\Wow6432Node\Yahoo =>.Yahoo! HKLM\SOFTWARE\Wow6432Node\RegisteredApplications HKCU\SOFTWARE\03D3D200EE2350F628D894336FA3D434 =>PUP.Optional.CrossRider HKCU\SOFTWARE\7-Zip HKCU\SOFTWARE\Acer HKCU\SOFTWARE\Acoustica HKCU\SOFTWARE\Acro Software Inc HKCU\SOFTWARE\Adobe HKCU\SOFTWARE\AKCRZA HKCU\SOFTWARE\AppDataLow HKCU\SOFTWARE\Apple Computer, Inc. HKCU\SOFTWARE\Apple Inc. HKCU\SOFTWARE\Applied Acoustics Systems HKCU\SOFTWARE\Auslogics HKCU\SOFTWARE\Avanquest HKCU\SOFTWARE\AVAST Software HKCU\SOFTWARE\Avg HKCU\SOFTWARE\Avg Secure Update HKCU\SOFTWARE\BankPerfect HKCU\SOFTWARE\BEID HKCU\SOFTWARE\BitTorrent HKCU\SOFTWARE\Business-in-a-Box HKCU\SOFTWARE\Canneverbe Limited HKCU\SOFTWARE\Chromium HKCU\SOFTWARE\Clubic HKCU\SOFTWARE\Common Desktop Agent HKCU\SOFTWARE\Disc Soft HKCU\SOFTWARE\Driver Magician HKCU\SOFTWARE\Dropbox HKCU\SOFTWARE\DropboxUpdate HKCU\SOFTWARE\Foxit Software HKCU\SOFTWARE\FreeAudioVideo HKCU\SOFTWARE\GlarySoft HKCU\SOFTWARE\GNU HKCU\SOFTWARE\Google HKCU\SOFTWARE\Haali HKCU\SOFTWARE\Icaros HKCU\SOFTWARE\IM Providers HKCU\SOFTWARE\Image-Line HKCU\SOFTWARE\ImgBurn HKCU\SOFTWARE\InstallPath HKCU\SOFTWARE\Intel HKCU\SOFTWARE\iSkysoft HKCU\SOFTWARE\JavaSoft HKCU\SOFTWARE\JHVA HKCU\SOFTWARE\Kingsoft HKCU\SOFTWARE\Lenovo HKCU\SOFTWARE\Licenses HKCU\SOFTWARE\LKUKYUS HKCU\SOFTWARE\LogMeInRescueCallingCard HKCU\SOFTWARE\Macromedia HKCU\SOFTWARE\madshi HKCU\SOFTWARE\Malwarebytes' Anti-Malware HKCU\SOFTWARE\MediaHuman HKCU\SOFTWARE\MediaInfo HKCU\SOFTWARE\MiniTool Solution Ltd. HKCU\SOFTWARE\Mozilla HKCU\SOFTWARE\MozillaPlugins HKCU\SOFTWARE\MPC-HC HKCU\SOFTWARE\MultimediaTools HKCU\SOFTWARE\Netgate HKCU\SOFTWARE\Netscape HKCU\SOFTWARE\ODBC HKCU\SOFTWARE\Opera Software HKCU\SOFTWARE\PCRegistryShieldConfig =>PUP.Optional.PCRegistryShield HKCU\SOFTWARE\PCurVersion HKCU\SOFTWARE\PDF Architect 3 HKCU\SOFTWARE\Piriform HKCU\SOFTWARE\PlutoTV HKCU\SOFTWARE\Popcorn Time HKCU\SOFTWARE\PROject MT HKCU\SOFTWARE\QtProject HKCU\SOFTWARE\Realtek HKCU\SOFTWARE\RegisteredApplications HKCU\SOFTWARE\Rtp HKCU\SOFTWARE\Safer Networking Limited HKCU\SOFTWARE\Samsung HKCU\SOFTWARE\Serato HKCU\SOFTWARE\SHAREit HKCU\SOFTWARE\Skyhook Wireless HKCU\SOFTWARE\Skype HKCU\SOFTWARE\SkypePlugin HKCU\SOFTWARE\SNMP HKCU\SOFTWARE\SoftVoice HKCU\SOFTWARE\SSPrint HKCU\SOFTWARE\SSScan HKCU\SOFTWARE\Sysinternals HKCU\SOFTWARE\test HKCU\SOFTWARE\The Silicon Realms Toolworks HKCU\SOFTWARE\Thunderbird HKCU\SOFTWARE\ToolbarCleaner HKCU\SOFTWARE\ToolbarCleaneroptions HKCU\SOFTWARE\Traction HKCU\SOFTWARE\Trolltech HKCU\SOFTWARE\TuneUp HKCU\SOFTWARE\UDC HKCU\SOFTWARE\undefined =>.Superfluous.Downloader HKCU\SOFTWARE\UpdateChecker HKCU\SOFTWARE\uTorrentPlus HKCU\SOFTWARE\VB and VBA Program Settings HKCU\SOFTWARE\VSRevoGroup HKCU\SOFTWARE\WinRAR HKCU\SOFTWARE\WinRAR SFX HKCU\SOFTWARE\Wintertree HKCU\SOFTWARE\WJ HKCU\SOFTWARE\Wow6432Node HKCU\SOFTWARE\WSVCUPlugin HKCU\SOFTWARE\yahooskill HKCU\SOFTWARE\ZebHelpProcess Helper HKCU\SOFTWARE\AppDataLow\Software HKCU\SOFTWARE\AppDataLow\Software\JavaSoft HKCU\SOFTWARE\AppDataLow\Software\PROject MT ---\\ Contenu des dossiers Programmes (373) - 41s O43 - CFD: 20/04/2015 - [] D -- C:\Program Files\Acer =>.Acer Incorporated® O43 - CFD: 02/06/2015 - [] D -- C:\Program Files\AMD =>.Advanced Micro Devices, Inc.® O43 - CFD: 09/08/2015 - [] D -- C:\Program Files\ATI O43 - CFD: 11/05/2016 - [] D -- C:\Program Files\AVAST Software =>.AVAST Software s.r.o.® O43 - CFD: 05/04/2016 - [] D -- C:\Program Files\Bonjour =>.Apple Inc.® O43 - CFD: 18/06/2016 - [] D -- C:\Program Files\CCleaner =>.Piriform Ltd® O43 - CFD: 10/05/2016 - [] D -- C:\Program Files\Common Files O43 - CFD: 12/10/2015 - [] D -- C:\Program Files\DAEMON Tools Lite =>.Disc Soft Ltd® O43 - CFD: 30/03/2016 - [] D -- C:\Program Files\DIFX O43 - CFD: 24/08/2015 - [0] SHD -- C:\Program Files\Fichiers communs O43 - CFD: 22/04/2016 - [0] D -- C:\Program Files\Image-Line O43 - CFD: 15/06/2016 - [] D -- C:\Program Files\Internet Explorer O43 - CFD: 17/04/2016 - [] D -- C:\Program Files\iPod O43 - CFD: 22/12/2015 - [0] D -- C:\Program Files\log O43 - CFD: 06/12/2014 - [] AD -- C:\Program Files\ma-config.com =>.Cybelsoft® O43 - CFD: 06/12/2014 - [] D -- C:\Program Files\Microsoft Analysis Services =>.Microsoft Corporation® O43 - CFD: 10/05/2016 - [] D -- C:\Program Files\Microsoft Games O43 - CFD: 20/08/2015 - [] AD -- C:\Program Files\Microsoft Mouse and Keyboard Center =>.Microsoft Corporation® O43 - CFD: 17/04/2016 - [] AD -- C:\Program Files\Microsoft Office =>.Microsoft Corporation® O43 - CFD: 06/12/2014 - [] D -- C:\Program Files\Microsoft SQL Server O43 - CFD: 10/05/2016 - [] D -- C:\Program Files\Microsoft.NET O43 - CFD: 10/05/2016 - [] D -- C:\Program Files\MSBuild O43 - CFD: 10/05/2016 - [] D -- C:\Program Files\Realtek =>.Andrea Electronics® O43 - CFD: 10/05/2016 - [] D -- C:\Program Files\Reference Assemblies O43 - CFD: 16/04/2016 - [] D -- C:\Program Files\Reimage_AQT{13195CD9-944C-4587-BDF9-5E628F7F5CBF}_AQT{0C61C7AB-FA7F-4984-8D04-A433ABB46A4F} =>.Superfluous.ReimageRepair O43 - CFD: 01/06/2016 - [] D -- C:\Program Files\Samsung O43 - CFD: 10/05/2016 - [] D -- C:\Program Files\Synaptics O43 - CFD: 13/02/2016 - [0] HD -- C:\Program Files\Uninstall Information O43 - CFD: 31/03/2016 - [0] D -- C:\Program Files\VideoLAN O43 - CFD: 13/02/2016 - [] D -- C:\Program Files\Windows Defender O43 - CFD: 12/05/2016 - [] D -- C:\Program Files\Windows Journal O43 - CFD: 13/02/2016 - [] D -- C:\Program Files\Windows Mail O43 - CFD: 10/05/2016 - [] D -- C:\Program Files\Windows Media Player O43 - CFD: 10/05/2016 - [] D -- C:\Program Files\Windows Multimedia Platform O43 - CFD: 10/05/2016 - [] D -- C:\Program Files\Windows NT O43 - CFD: 13/02/2016 - [] D -- C:\Program Files\Windows Photo Viewer =>.Microsoft Corporation® O43 - CFD: 10/05/2016 - [] D -- C:\Program Files\Windows Portable Devices O43 - CFD: 10/05/2016 - [] SHD -- C:\Program Files\Windows Sidebar O43 - CFD: 18/06/2016 - [] HD -- C:\Program Files\WindowsApps O43 - CFD: 30/10/2015 - [] SD -- C:\Program Files\WindowsPowerShell O43 - CFD: 11/05/2016 - [] AD -- C:\Program Files\WinRAR =>.win.rar GmbH® O43 - CFD: 17/06/2016 - [0] D -- C:\Program Files (x86)\0o09su83 O43 - CFD: 17/06/2016 - [0] D -- C:\Program Files (x86)\5azfx59l O43 - CFD: 27/02/2015 - [] D -- C:\Program Files (x86)\Acer O43 - CFD: 21/03/2016 - [] D -- C:\Program Files (x86)\Adobe =>.Adobe Systems, Incorporated® O43 - CFD: 05/04/2016 - [] AD -- C:\Program Files (x86)\Apple Software Update =>.Apple Inc.® O43 - CFD: 22/04/2016 - [] D -- C:\Program Files (x86)\ASIO4ALL v2 O43 - CFD: 22/01/2015 - [] D -- C:\Program Files (x86)\Avanquest {167AE4BEC6B4B1D1BA0BC9D47BA75B67} O43 - CFD: 19/06/2016 - [] AD -- C:\Program Files (x86)\Belgium Identity Card O43 - CFD: 05/04/2016 - [] D -- C:\Program Files (x86)\Bonjour =>.Apple Inc.® O43 - CFD: 18/08/2015 - [] AD -- C:\Program Files (x86)\Business-in-a-Box {0492232BC8EFD4} O43 - CFD: 18/06/2016 - [] D -- C:\Program Files (x86)\Common Files O43 - CFD: 25/06/2015 - [] D -- C:\Program Files (x86)\DLLSuite O43 - CFD: 03/06/2016 - [] D -- C:\Program Files (x86)\Dropbox =>.Dropbox, Inc® O43 - CFD: 17/06/2016 - [0] D -- C:\Program Files (x86)\dx2ho28d O43 - CFD: 21/03/2016 - [] D -- C:\Program Files (x86)\Foxit Software O43 - CFD: 25/02/2016 - [] AD -- C:\Program Files (x86)\Glary Utilities =>.Glarysoft Ltd® O43 - CFD: 16/04/2016 - [] D -- C:\Program Files (x86)\Glary Utilities 5 O43 - CFD: 01/04/2016 - [] D -- C:\Program Files (x86)\Google =>.Google Inc® O43 - CFD: 22/04/2016 - [] D -- C:\Program Files (x86)\Image-Line =>.Image Line® O43 - CFD: 22/01/2015 - [] AD -- C:\Program Files (x86)\ImgBurn O43 - CFD: 09/08/2015 - [] D -- C:\Program Files (x86)\InstallShield Installation Information =>.Acer Incorporated® O43 - CFD: 24/08/2015 - [] D -- C:\Program Files (x86)\Intel =>.Intel Corporation - pGFX® O43 - CFD: 18/06/2016 - [] D -- C:\Program Files (x86)\Internet Explorer O43 - CFD: 15/06/2016 - [] D -- C:\Program Files (x86)\IObit =>.IObit Information Technology® O43 - CFD: 17/04/2016 - [] AD -- C:\Program Files (x86)\iTunes O43 - CFD: 11/05/2016 - [] D -- C:\Program Files (x86)\Java =>.Oracle America, Inc.® O43 - CFD: 05/02/2015 - [] AD -- C:\Program Files (x86)\K-Lite Codec Pack O43 - CFD: 18/06/2016 - [] AD -- C:\Program Files (x86)\Malwarebytes Anti-Malware O43 - CFD: 16/04/2015 - [] D -- C:\Program Files (x86)\MediaHuman O43 - CFD: 06/12/2014 - [] D -- C:\Program Files (x86)\Microsoft Analysis Services =>.Microsoft Corporation® O43 - CFD: 06/12/2014 - [] D -- C:\Program Files (x86)\Microsoft Office =>.Microsoft Corporation® O43 - CFD: 06/12/2014 - [] D -- C:\Program Files (x86)\Microsoft SQL Server O43 - CFD: 10/05/2016 - [] AD -- C:\Program Files (x86)\Microsoft.NET O43 - CFD: 19/06/2016 - [] D -- C:\Program Files (x86)\Mozilla Firefox =>.Mozilla Corporation® O43 - CFD: 19/06/2016 - [] D -- C:\Program Files (x86)\Mozilla Maintenance Service =>.Mozilla Corporation® O43 - CFD: 17/06/2016 - [] AD -- C:\Program Files (x86)\Mozilla Thunderbird O43 - CFD: 10/05/2016 - [] D -- C:\Program Files (x86)\MSBuild O43 - CFD: 25/02/2016 - [] AD -- C:\Program Files (x86)\QuickTime =>.Apple Inc.® O43 - CFD: 09/08/2015 - [] D -- C:\Program Files (x86)\REALTEK O43 - CFD: 10/05/2016 - [] D -- C:\Program Files (x86)\Reference Assemblies O43 - CFD: 01/06/2016 - [] D -- C:\Program Files (x86)\Samsung =>.Samsung Electronics CO., LTD.® O43 - CFD: 07/12/2014 - [] AD -- C:\Program Files (x86)\Samsung Easy Color Manager =>.Samsung Electronics CO., LTD.® O43 - CFD: 24/08/2015 - [] D -- C:\Program Files (x86)\SamsungPrinterLiveUpdate =>.Samsung Electronics CO., LTD.® O43 - CFD: 01/06/2016 - [] D -- C:\Program Files (x86)\SamsungPrinterLiveUpdateInstaller =>.Samsung Electronics CO., LTD.® O43 - CFD: 21/03/2016 - [] D -- C:\Program Files (x86)\SHAREit =>.LENOVO® O43 - CFD: 18/06/2016 - [] RD -- C:\Program Files (x86)\Skype =>.Skype Software Sarl® O43 - CFD: 31/03/2016 - [] D -- C:\Program Files (x86)\Spybot - Search & Destroy =>.Safer Networking Ltd.® O43 - CFD: 25/02/2016 - [] D -- C:\Program Files (x86)\Spybot - Search & Destroy 2 O43 - CFD: 09/08/2015 - [0] D -- C:\Program Files (x86)\Temp O43 - CFD: 14/07/2009 - [0] D -- C:\Program Files (x86)\Uninstall Information O43 - CFD: 26/02/2015 - [] D -- C:\Program Files (x86)\Use VLC for YouTube O43 - CFD: 07/03/2015 - [] D -- C:\Program Files (x86)\User Agent Selector O43 - CFD: 24/12/2015 - [] D -- C:\Program Files (x86)\VideoLAN O43 - CFD: 13/02/2016 - [] D -- C:\Program Files (x86)\Windows Defender O43 - CFD: 13/02/2016 - [] D -- C:\Program Files (x86)\Windows Mail O43 - CFD: 10/05/2016 - [] D -- C:\Program Files (x86)\Windows Media Player O43 - CFD: 10/05/2016 - [] D -- C:\Program Files (x86)\Windows Multimedia Platform O43 - CFD: 30/10/2015 - [] D -- C:\Program Files (x86)\Windows NT O43 - CFD: 13/02/2016 - [] D -- C:\Program Files (x86)\Windows Photo Viewer =>.Microsoft Corporation® O43 - CFD: 10/05/2016 - [] D -- C:\Program Files (x86)\Windows Portable Devices O43 - CFD: 10/05/2016 - [] SHD -- C:\Program Files (x86)\Windows Sidebar O43 - CFD: 30/10/2015 - [] SD -- C:\Program Files (x86)\WindowsPowerShell O43 - CFD: 17/06/2016 - [0] D -- C:\Program Files (x86)\z77bt9nt O43 - CFD: 18/06/2016 - [] AD -- C:\Program Files (x86)\ZHPFix O43 - CFD: 30/10/2015 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility O43 - CFD: 10/05/2016 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories O43 - CFD: 10/05/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer O43 - CFD: 30/10/2015 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools O43 - CFD: 19/06/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Belgium - eID O43 - CFD: 10/05/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Business-in-a-Box O43 - CFD: 18/06/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner O43 - CFD: 10/05/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Centre Souris et Claviers Microsoft O43 - CFD: 10/05/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite O43 - CFD: 03/06/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox O43 - CFD: 06/12/2014 - [0] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games O43 - CFD: 10/05/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glary Utilities 5 O43 - CFD: 22/04/2016 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Image-Line O43 - CFD: 10/05/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ImgBurn O43 - CFD: 11/05/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java O43 - CFD: 10/05/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack O43 - CFD: 10/05/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ma-config.com O43 - CFD: 30/10/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance O43 - CFD: 10/05/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MediaHuman O43 - CFD: 18/06/2016 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013 O43 - CFD: 10/05/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Picasa 3 O43 - CFD: 10/05/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime O43 - CFD: 10/05/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\REALTEK USB Wireless LAN Utility O43 - CFD: 10/05/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung O43 - CFD: 01/06/2016 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung Printers O43 - CFD: 10/05/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SHAREit O43 - CFD: 10/05/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype O43 - CFD: 01/06/2016 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp O43 - CFD: 30/10/2015 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools O43 - CFD: 13/02/2016 - [0] RHD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC O43 - CFD: 11/05/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN O43 - CFD: 11/05/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR O43 - CFD: 18/06/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP O43 - CFD: 20/04/2015 - [] D -- C:\ProgramData\Acer O43 - CFD: 11/06/2015 - [] D -- C:\ProgramData\Acoustica O43 - CFD: 21/03/2016 - [] D -- C:\ProgramData\Adobe O43 - CFD: 05/04/2016 - [] D -- C:\ProgramData\Apple O43 - CFD: 17/04/2016 - [] D -- C:\ProgramData\Apple Computer O43 - CFD: 10/05/2016 - [0] SHD -- C:\ProgramData\Application Data O43 - CFD: 22/01/2015 - [] D -- C:\ProgramData\Avanquest O43 - CFD: 11/05/2016 - [] D -- C:\ProgramData\AVAST Software O43 - CFD: 23/11/2015 - [] D -- C:\ProgramData\Avg O43 - CFD: 04/02/2015 - [] D -- C:\ProgramData\boost_interprocess O43 - CFD: 06/12/2014 - [0] SHD -- C:\ProgramData\Bureau O43 - CFD: 14/01/2016 - [] D -- C:\ProgramData\Caminova O43 - CFD: 24/08/2015 - [] HD -- C:\ProgramData\Common Files O43 - CFD: 30/10/2015 - [0] D -- C:\ProgramData\Comms O43 - CFD: 08/10/2015 - [] D -- C:\ProgramData\DAEMON Tools Lite O43 - CFD: 30/04/2015 - [] D -- C:\ProgramData\dmanmoigbgbaefmkjgolmffjalnnlloe O43 - CFD: 10/05/2016 - [0] SHD -- C:\ProgramData\Documents O43 - CFD: 18/06/2015 - [] D -- C:\ProgramData\Dropbox O43 - CFD: 03/12/2015 - [] D -- C:\ProgramData\F-Secure O43 - CFD: 06/12/2014 - [0] SHD -- C:\ProgramData\Favoris O43 - CFD: 21/03/2016 - [] D -- C:\ProgramData\FLEXnet O43 - CFD: 31/03/2016 - [] D -- C:\ProgramData\Foxit ContentPlatform O43 - CFD: 14/04/2016 - [] D -- C:\ProgramData\GlarySoft O43 - CFD: 03/12/2015 - [] D -- C:\ProgramData\IObit O43 - CFD: 18/08/2015 - [] D -- C:\ProgramData\iSkysoft O43 - CFD: 17/09/2015 - [] D -- C:\ProgramData\iSkysoft Video Converter Ultimate O43 - CFD: 24/12/2015 - [] D -- C:\ProgramData\kingsoft O43 - CFD: 21/03/2016 - [] D -- C:\ProgramData\Lenovo O43 - CFD: 31/03/2016 - [] D -- C:\ProgramData\Logs O43 - CFD: 03/12/2015 - [] AD -- C:\ProgramData\ma-config.com O43 - CFD: 05/03/2015 - [] D -- C:\ProgramData\Malwarebytes O43 - CFD: 06/12/2014 - [0] SHD -- C:\ProgramData\Menu Démarrer O43 - CFD: 23/11/2015 - [] D -- C:\ProgramData\MFAData O43 - CFD: 10/05/2016 - [] SD -- C:\ProgramData\Microsoft O43 - CFD: 16/06/2016 - [] D -- C:\ProgramData\Microsoft Help O43 - CFD: 13/02/2016 - [] D -- C:\ProgramData\Microsoft OneDrive O43 - CFD: 13/01/2016 - [] D -- C:\ProgramData\Microsoft Toolkit =>HackTool.AutoKMS O43 - CFD: 06/12/2014 - [0] SHD -- C:\ProgramData\Modèles O43 - CFD: 17/04/2016 - [] D -- C:\ProgramData\Oracle O43 - CFD: 03/12/2015 - [] D -- C:\ProgramData\PACE Anti-Piracy O43 - CFD: 21/03/2016 - [] D -- C:\ProgramData\Package Cache O43 - CFD: 15/06/2016 - [] D -- C:\ProgramData\ProductData O43 - CFD: 09/08/2015 - [] D -- C:\ProgramData\Ralink Driver O43 - CFD: 10/05/2016 - [] D -- C:\ProgramData\regid.1986-12.com.adobe O43 - CFD: 10/05/2016 - [] AD -- C:\ProgramData\regid.1991-06.com.microsoft O43 - CFD: 03/12/2015 - [] D -- C:\ProgramData\RogueKiller O43 - CFD: 01/06/2016 - [] D -- C:\ProgramData\Samsung O43 - CFD: 18/06/2016 - [] D -- C:\ProgramData\Skype O43 - CFD: 05/12/2015 - [] D -- C:\ProgramData\SmartCMS2 O43 - CFD: 10/05/2016 - [] D -- C:\ProgramData\SoftwareDistribution O43 - CFD: 31/03/2016 - [] D -- C:\ProgramData\Spybot - Search & Destroy O43 - CFD: 01/06/2016 - [] D -- C:\ProgramData\SSScan O43 - CFD: 03/12/2015 - [] D -- C:\ProgramData\TuneUp Software O43 - CFD: 13/02/2016 - [] D -- C:\ProgramData\USOPrivate O43 - CFD: 13/02/2016 - [] D -- C:\ProgramData\USOShared O43 - CFD: 25/06/2015 - [] D -- C:\ProgramData\Weskysoft O43 - CFD: 02/05/2016 - [] D -- C:\ProgramData\yahoochrome O43 - CFD: 03/12/2015 - [] HDC -- C:\ProgramData\~1 O43 - CFD: 21/03/2016 - [] AD -- C:\Program Files (x86)\Common Files\Adobe O43 - CFD: 17/04/2016 - [] D -- C:\Program Files (x86)\Common Files\Apple O43 - CFD: 01/06/2016 - [] D -- C:\Program Files (x86)\Common Files\Common Desktop Agent O43 - CFD: 21/10/2015 - [] D -- C:\Program Files (x86)\Common Files\IObit O43 - CFD: 11/02/2015 - [] D -- C:\Program Files (x86)\Common Files\iSkysoft O43 - CFD: 17/04/2016 - [] D -- C:\Program Files (x86)\Common Files\Java O43 - CFD: 10/05/2016 - [] AD -- C:\Program Files (x86)\Common Files\Microsoft Shared O43 - CFD: 22/04/2016 - [] D -- C:\Program Files (x86)\Common Files\Propellerhead Software O43 - CFD: 07/10/2015 - [] AD -- C:\Program Files (x86)\Common Files\PX Storage Engine O43 - CFD: 01/06/2016 - [] D -- C:\Program Files (x86)\Common Files\Samsung OCR Software O43 - CFD: 01/06/2016 - [] AD -- C:\Program Files (x86)\Common Files\Scan Process Machine O43 - CFD: 30/10/2015 - [] D -- C:\Program Files (x86)\Common Files\Services O43 - CFD: 11/05/2016 - [] AD -- C:\Program Files (x86)\Common Files\Skype O43 - CFD: 07/10/2015 - [] D -- C:\Program Files (x86)\Common Files\Sonic Shared O43 - CFD: 10/05/2016 - [] D -- C:\Program Files (x86)\Common Files\SpeechEngines O43 - CFD: 13/02/2016 - [] D -- C:\Program Files (x86)\Common Files\System O43 - CFD: 14/01/2016 - [] D -- C:\Users\PERSO\AppData\Roaming\Acapela Group O43 - CFD: 11/06/2015 - [] D -- C:\Users\PERSO\AppData\Roaming\Acoustica O43 - CFD: 07/10/2015 - [] D -- C:\Users\PERSO\AppData\Roaming\Adobe O43 - CFD: 05/04/2016 - [] D -- C:\Users\PERSO\AppData\Roaming\Apple Computer O43 - CFD: 11/06/2015 - [] D -- C:\Users\PERSO\AppData\Roaming\Applied Acoustics Systems O43 - CFD: 23/01/2015 - [] D -- C:\Users\PERSO\AppData\Roaming\Avanquest O43 - CFD: 16/02/2016 - [] D -- C:\Users\PERSO\AppData\Roaming\AVAST Software O43 - CFD: 29/10/2015 - [] D -- C:\Users\PERSO\AppData\Roaming\AVG O43 - CFD: 25/04/2016 - [] D -- C:\Users\PERSO\AppData\Roaming\BankPerfect O43 - CFD: 11/02/2015 - [0] D -- C:\Users\PERSO\AppData\Roaming\BitTorrent O43 - CFD: 18/12/2014 - [] D -- C:\Users\PERSO\AppData\Roaming\calculator-ef57a5ae3e94fefc999c9fa810d64b9b O43 - CFD: 06/12/2014 - [] D -- C:\Users\PERSO\AppData\Roaming\Canneverbe Limited O43 - CFD: 07/10/2015 - [] D -- C:\Users\PERSO\AppData\Roaming\chc O43 - CFD: 07/10/2015 - [] D -- C:\Users\PERSO\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1 O43 - CFD: 29/04/2015 - [] D -- C:\Users\PERSO\AppData\Roaming\com.adobe.formscentral.FormsCentralForAcrobat O43 - CFD: 17/04/2016 - [] D -- C:\Users\PERSO\AppData\Roaming\DAEMON Tools Lite O43 - CFD: 06/12/2014 - [0] D -- C:\Users\PERSO\AppData\Roaming\DiskDefrag O43 - CFD: 05/04/2016 - [] D -- C:\Users\PERSO\AppData\Roaming\Dropbox O43 - CFD: 03/08/2015 - [] D -- C:\Users\PERSO\AppData\Roaming\dvdcss O43 - CFD: 16/06/2015 - [0] D -- C:\Users\PERSO\AppData\Roaming\EncryptStick O43 - CFD: 11/02/2015 - [] D -- C:\Users\PERSO\AppData\Roaming\Eusing O43 - CFD: 31/01/2015 - [0] D -- C:\Users\PERSO\AppData\Roaming\FileAdvisor O43 - CFD: 28/04/2015 - [] D -- C:\Users\PERSO\AppData\Roaming\Foxit O43 - CFD: 31/03/2016 - [] D -- C:\Users\PERSO\AppData\Roaming\Foxit Software O43 - CFD: 03/12/2015 - [] D -- C:\Users\PERSO\AppData\Roaming\GlarySoft O43 - CFD: 06/12/2014 - [] D -- C:\Users\PERSO\AppData\Roaming\Identities O43 - CFD: 01/09/2015 - [] D -- C:\Users\PERSO\AppData\Roaming\iLauncher O43 - CFD: 22/04/2016 - [] D -- C:\Users\PERSO\AppData\Roaming\Image-Line O43 - CFD: 09/12/2015 - [] D -- C:\Users\PERSO\AppData\Roaming\InCode Solutions O43 - CFD: 07/12/2014 - [] D -- C:\Users\PERSO\AppData\Roaming\InstallShield O43 - CFD: 27/10/2015 - [] D -- C:\Users\PERSO\AppData\Roaming\IObit O43 - CFD: 24/12/2015 - [] D -- C:\Users\PERSO\AppData\Roaming\kingsoft O43 - CFD: 28/02/2015 - [] D -- C:\Users\PERSO\AppData\Roaming\Macromedia O43 - CFD: 05/03/2015 - [] D -- C:\Users\PERSO\AppData\Roaming\Malwarebytes O43 - CFD: 14/07/2009 - [0] D -- C:\Users\PERSO\AppData\Roaming\Media Center Programs O43 - CFD: 10/05/2016 - [] SD -- C:\Users\PERSO\AppData\Roaming\Microsoft O43 - CFD: 31/01/2015 - [] D -- C:\Users\PERSO\AppData\Roaming\Mozilla O43 - CFD: 24/01/2015 - [] D -- C:\Users\PERSO\AppData\Roaming\Mozilla Corporation O43 - CFD: 03/06/2015 - [0] D -- C:\Users\PERSO\AppData\Roaming\New Version Available O43 - CFD: 18/06/2015 - [] D -- C:\Users\PERSO\AppData\Roaming\opencl O43 - CFD: 06/12/2014 - [] D -- C:\Users\PERSO\AppData\Roaming\OpenOffice O43 - CFD: 08/12/2015 - [0] D -- C:\Users\PERSO\AppData\Roaming\Opera Software O43 - CFD: 07/10/2015 - [] D -- C:\Users\PERSO\AppData\Roaming\PACE Anti-Piracy O43 - CFD: 29/04/2015 - [] D -- C:\Users\PERSO\AppData\Roaming\PDAppFlex O43 - CFD: 28/04/2015 - [] D -- C:\Users\PERSO\AppData\Roaming\PDF Architect 3 O43 - CFD: 29/04/2015 - [0] D -- C:\Users\PERSO\AppData\Roaming\PDF Producer O43 - CFD: 19/02/2015 - [] D -- C:\Users\PERSO\AppData\Roaming\Petrax Software O43 - CFD: 18/06/2016 - [] D -- C:\Users\PERSO\AppData\Roaming\ProductData O43 - CFD: 13/06/2016 - [] D -- C:\Users\PERSO\AppData\Roaming\Profiles O43 - CFD: 24/06/2015 - [] D -- C:\Users\PERSO\AppData\Roaming\PROMT O43 - CFD: 21/03/2016 - [] D -- C:\Users\PERSO\AppData\Roaming\ProperSoft O43 - CFD: 02/06/2016 - [] D -- C:\Users\PERSO\AppData\Roaming\Samsung O43 - CFD: 19/06/2016 - [] D -- C:\Users\PERSO\AppData\Roaming\Skype O43 - CFD: 03/05/2015 - [] D -- C:\Users\PERSO\AppData\Roaming\SolidDocuments O43 - CFD: 04/10/2015 - [] D -- C:\Users\PERSO\AppData\Roaming\Sun O43 - CFD: 11/06/2015 - [0] D -- C:\Users\PERSO\AppData\Roaming\SynthMaker O43 - CFD: 29/10/2015 - [] D -- C:\Users\PERSO\AppData\Roaming\TeamViewer O43 - CFD: 22/09/2015 - [] D -- C:\Users\PERSO\AppData\Roaming\thecleaner O43 - CFD: 11/12/2014 - [] D -- C:\Users\PERSO\AppData\Roaming\Thunderbird O43 - CFD: 12/03/2015 - [] D -- C:\Users\PERSO\AppData\Roaming\TuneUp Software O43 - CFD: 21/05/2015 - [] D -- C:\Users\PERSO\AppData\Roaming\UDC Profiles O43 - CFD: 18/06/2016 - [] D -- C:\Users\PERSO\AppData\Roaming\uTorrent O43 - CFD: 11/12/2014 - [0] D -- C:\Users\PERSO\AppData\Roaming\WebTest O43 - CFD: 28/02/2015 - [] D -- C:\Users\PERSO\AppData\Roaming\WinBatch O43 - CFD: 06/12/2014 - [] D -- C:\Users\PERSO\AppData\Roaming\WinRAR O43 - CFD: 24/12/2015 - [] D -- C:\Users\PERSO\AppData\Roaming\wps O43 - CFD: 20/06/2016 - [] D -- C:\Users\PERSO\AppData\Roaming\ZHP O43 - CFD: 11/02/2015 - [0] D -- C:\Users\PERSO\AppData\Roaming\{950EB46C-6AC7-4ACC-AB36-9A6A77C08B6A} O43 - CFD: 05/02/2015 - [] D -- C:\Users\PERSO\AppData\Local\111 O43 - CFD: 13/12/2015 - [0] D -- C:\Users\PERSO\AppData\Local\ActiveSync O43 - CFD: 07/10/2015 - [0] AHD -- C:\Users\PERSO\AppData\Local\adjebR9pgNvE O43 - CFD: 21/03/2016 - [] D -- C:\Users\PERSO\AppData\Local\Adobe O43 - CFD: 08/10/2015 - [] D -- C:\Users\PERSO\AppData\Local\Apple O43 - CFD: 05/04/2016 - [] D -- C:\Users\PERSO\AppData\Local\Apple Computer O43 - CFD: 10/05/2016 - [0] SHD -- C:\Users\PERSO\AppData\Local\Application Data O43 - CFD: 24/01/2015 - [] D -- C:\Users\PERSO\AppData\Local\Apps O43 - CFD: 23/11/2015 - [] D -- C:\Users\PERSO\AppData\Local\AVAST Software O43 - CFD: 23/11/2015 - [] D -- C:\Users\PERSO\AppData\Local\Avg O43 - CFD: 03/06/2015 - [] D -- C:\Users\PERSO\AppData\Local\Avg2013 O43 - CFD: 23/11/2015 - [] D -- C:\Users\PERSO\AppData\Local\AvgSetupLog O43 - CFD: 24/12/2015 - [] D -- C:\Users\PERSO\AppData\Local\Balance Download O43 - CFD: 08/12/2015 - [] D -- C:\Users\PERSO\AppData\Local\Ball Web O43 - CFD: 18/12/2014 - [] D -- C:\Users\PERSO\AppData\Local\calculator-ef57a5ae3e94fefc999c9fa810d64b9b O43 - CFD: 14/01/2016 - [0] D -- C:\Users\PERSO\AppData\Local\Caminova O43 - CFD: 09/10/2015 - [] D -- C:\Users\PERSO\AppData\Local\CEF O43 - CFD: 24/08/2015 - [] D -- C:\Users\PERSO\AppData\Local\Comms O43 - CFD: 13/02/2016 - [0] D -- C:\Users\PERSO\AppData\Local\CrashDumps O43 - CFD: 31/05/2015 - [0] D -- C:\Users\PERSO\AppData\Local\CutePDF Writer O43 - CFD: 16/06/2016 - [0] D -- C:\Users\PERSO\AppData\Local\Deployment O43 - CFD: 18/06/2016 - [] D -- C:\Users\PERSO\AppData\Local\Diagnostics O43 - CFD: 08/10/2015 - [] D -- C:\Users\PERSO\AppData\Local\Disc_Soft_Ltd O43 - CFD: 03/12/2015 - [] D -- C:\Users\PERSO\AppData\Local\Downloaded Installations O43 - CFD: 07/10/2015 - [] HD -- C:\Users\PERSO\AppData\Local\dP6KabnD7eNhPsc O43 - CFD: 11/05/2016 - [] D -- C:\Users\PERSO\AppData\Local\Dropbox O43 - CFD: 24/06/2015 - [] D -- C:\Users\PERSO\AppData\Local\EBP O43 - CFD: 27/07/2015 - [0] SHD -- C:\Users\PERSO\AppData\Local\EmieBrowserModeList O43 - CFD: 27/07/2015 - [0] SHD -- C:\Users\PERSO\AppData\Local\EmieSiteList O43 - CFD: 27/07/2015 - [0] SHD -- C:\Users\PERSO\AppData\Local\EmieUserList O43 - CFD: 03/06/2015 - [] D -- C:\Users\PERSO\AppData\Local\F-Secure O43 - CFD: 14/01/2016 - [] D -- C:\Users\PERSO\AppData\Local\Foxit PhantomPDF O43 - CFD: 10/12/2015 - [] D -- C:\Users\PERSO\AppData\Local\Google O43 - CFD: 25/07/2015 - [] D -- C:\Users\PERSO\AppData\Local\GWX O43 - CFD: 10/05/2016 - [0] SHD -- C:\Users\PERSO\AppData\Local\Historique O43 - CFD: 11/02/2015 - [] D -- C:\Users\PERSO\AppData\Local\iSkysoft O43 - CFD: 24/12/2015 - [] D -- C:\Users\PERSO\AppData\Local\kingsoft O43 - CFD: 08/12/2015 - [] D -- C:\Users\PERSO\AppData\Local\Lenovo O43 - CFD: 25/01/2015 - [] D -- C:\Users\PERSO\AppData\Local\LogMeIn O43 - CFD: 04/01/2015 - [] D -- C:\Users\PERSO\AppData\Local\Macromedia O43 - CFD: 25/05/2015 - [] D -- C:\Users\PERSO\AppData\Local\MediaHuman O43 - CFD: 20/10/2015 - [] D -- C:\Users\PERSO\AppData\Local\Mega Limited O43 - CFD: 11/03/2015 - [] D -- C:\Users\PERSO\AppData\Local\MFAData O43 - CFD: 10/05/2016 - [] D -- C:\Users\PERSO\AppData\Local\Microsoft O43 - CFD: 27/02/2015 - [] D -- C:\Users\PERSO\AppData\Local\Microsoft Corporation O43 - CFD: 11/05/2016 - [] D -- C:\Users\PERSO\AppData\Local\Microsoft Help O43 - CFD: 24/08/2015 - [] D -- C:\Users\PERSO\AppData\Local\MicrosoftEdge O43 - CFD: 06/12/2014 - [] D -- C:\Users\PERSO\AppData\Local\Mozilla O43 - CFD: 08/12/2015 - [0] D -- C:\Users\PERSO\AppData\Local\Opera Software O43 - CFD: 07/10/2015 - [0] D -- C:\Users\PERSO\AppData\Local\PACE Anti-Piracy O43 - CFD: 15/06/2016 - [] D -- C:\Users\PERSO\AppData\Local\Packages O43 - CFD: 23/09/2015 - [] D -- C:\Users\PERSO\AppData\Local\PlutoTV O43 - CFD: 07/12/2014 - [] D -- C:\Users\PERSO\AppData\Local\PopcornTimeDesktop O43 - CFD: 24/04/2015 - [] D -- C:\Users\PERSO\AppData\Local\Programs O43 - CFD: 24/08/2015 - [] D -- C:\Users\PERSO\AppData\Local\Publishers O43 - CFD: 01/06/2016 - [] D -- C:\Users\PERSO\AppData\Local\Samsung O43 - CFD: 05/06/2015 - [] D -- C:\Users\PERSO\AppData\Local\Serato O43 - CFD: 14/01/2016 - [] D -- C:\Users\PERSO\AppData\Local\Setup Wizard O43 - CFD: 21/03/2016 - [] D -- C:\Users\PERSO\AppData\Local\SHAREit O43 - CFD: 13/01/2016 - [0] D -- C:\Users\PERSO\AppData\Local\Skype O43 - CFD: 21/03/2016 - [] D -- C:\Users\PERSO\AppData\Local\SkypePlugin O43 - CFD: 26/11/2015 - [] D -- C:\Users\PERSO\AppData\Local\SSScan O43 - CFD: 07/10/2015 - [0] AHD -- C:\Users\PERSO\AppData\Local\t80IQN2R O43 - CFD: 20/06/2016 - [] D -- C:\Users\PERSO\AppData\Local\Temp O43 - CFD: 10/05/2016 - [0] SHD -- C:\Users\PERSO\AppData\Local\Temporary Internet Files O43 - CFD: 11/12/2014 - [] D -- C:\Users\PERSO\AppData\Local\Thunderbird O43 - CFD: 24/08/2015 - [] D -- C:\Users\PERSO\AppData\Local\TileDataLayer O43 - CFD: 24/12/2015 - [] D -- C:\Users\PERSO\AppData\Local\Total Extension =>PUP.Optional.TotalExtension O43 - CFD: 08/12/2015 - [] D -- C:\Users\PERSO\AppData\Local\Touch Style O43 - CFD: 28/01/2015 - [] D -- C:\Users\PERSO\AppData\Local\TuneUp Software O43 - CFD: 21/12/2015 - [] D -- C:\Users\PERSO\AppData\Local\VirtualStore O43 - CFD: 07/10/2015 - [] HD -- C:\Users\PERSO\AppData\Local\WmdFinUIcI O43 - CFD: 18/10/2015 - [] D -- C:\Users\PERSO\AppData\Local\YouTubeToMp3 O43 - CFD: 06/12/2014 - [0] D -- C:\Users\PERSO\AppData\Local\Programs\Common O43 - CFD: 10/12/2015 - [] D -- C:\Users\PERSO\AppData\Local\Programs\Google O43 - CFD: 10/05/2016 - [] RD -- C:\Users\PERSO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility O43 - CFD: 10/05/2016 - [] RD -- C:\Users\PERSO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories O43 - CFD: 10/05/2016 - [] D -- C:\Users\PERSO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Acer O43 - CFD: 16/06/2016 - [] RD -- C:\Users\PERSO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools O43 - CFD: 10/05/2016 - [] D -- C:\Users\PERSO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASIO4ALL v2 O43 - CFD: 10/05/2016 - [] D -- C:\Users\PERSO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BankPerfect O43 - CFD: 10/05/2016 - [] D -- C:\Users\PERSO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Photos Backup O43 - CFD: 10/05/2016 - [] D -- C:\Users\PERSO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Image-Line O43 - CFD: 30/10/2015 - [] D -- C:\Users\PERSO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance O43 - CFD: 16/06/2016 - [] RD -- C:\Users\PERSO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup O43 - CFD: 25/08/2015 - [0] D -- C:\Users\PERSO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup-Disabled O43 - CFD: 10/05/2016 - [] RD -- C:\Users\PERSO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools O43 - CFD: 30/10/2015 - [] RSD -- C:\Users\PERSO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell O43 - CFD: 11/05/2016 - [] D -- C:\Users\PERSO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR O43 - CFD: 0 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\DataSharing O43 - CFD: 10/05/2016 - [] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\Microsoft O43 - CFD: 0 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\Packages O43 - CFD: 0 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\Samsung ---\\ ShellIconOverlayIdentifiers (SIOI) (17) - 1s O106 - SIOI: DropboxExt1 Class [ DropboxExt1] - {FB314ED9-A251-47B7-93E1-CDD82E34AF8B}. (.Dropbox, Inc. - Dropbox Shell Extension.) -- C:\Program Files (x86)\Dropbox\Client\DropboxExt.34.dll =>.Dropbox, Inc® O106 - SIOI: DropboxExt2 Class [ DropboxExt2] - {FB314EDA-A251-47B7-93E1-CDD82E34AF8B}. (.Dropbox, Inc. - Dropbox Shell Extension.) -- C:\Program Files (x86)\Dropbox\Client\DropboxExt.34.dll =>.Dropbox, Inc® O106 - SIOI: DropboxExt5 Class [ DropboxExt3] - {FB314EDD-A251-47B7-93E1-CDD82E34AF8B}. (.Dropbox, Inc. - Dropbox Shell Extension.) -- C:\Program Files (x86)\Dropbox\Client\DropboxExt.34.dll =>.Dropbox, Inc® O106 - SIOI: DropboxExt6 Class [ DropboxExt4] - {FB314EDE-A251-47B7-93E1-CDD82E34AF8B}. (.Dropbox, Inc. - Dropbox Shell Extension.) -- C:\Program Files (x86)\Dropbox\Client\DropboxExt.34.dll =>.Dropbox, Inc® O106 - SIOI: DropboxExt3 Class [ DropboxExt5] - {FB314EDB-A251-47B7-93E1-CDD82E34AF8B}. (.Dropbox, Inc. - Dropbox Shell Extension.) -- C:\Program Files (x86)\Dropbox\Client\DropboxExt.34.dll =>.Dropbox, Inc® O106 - SIOI: DropboxExt7 Class [ DropboxExt6] - {FB314EDF-A251-47B7-93E1-CDD82E34AF8B}. (.Dropbox, Inc. - Dropbox Shell Extension.) -- C:\Program Files (x86)\Dropbox\Client\DropboxExt.34.dll =>.Dropbox, Inc® O106 - SIOI: DropboxExt4 Class [ DropboxExt7] - {FB314EDC-A251-47B7-93E1-CDD82E34AF8B}. (.Dropbox, Inc. - Dropbox Shell Extension.) -- C:\Program Files (x86)\Dropbox\Client\DropboxExt.34.dll =>.Dropbox, Inc® O106 - SIOI: DropboxExt8 Class [ DropboxExt8] - {FB314EE0-A251-47B7-93E1-CDD82E34AF8B}. (.Dropbox, Inc. - Dropbox Shell Extension.) -- C:\Program Files (x86)\Dropbox\Client\DropboxExt.34.dll =>.Dropbox, Inc® O106 - SIOI: ErrorOverlayHandler Class [ OneDrive1] - {BBACC218-34EA-4666-9D7A-C78F2274A524}. (.Microsoft Corporation - Microsoft OneDrive Shell Extension.) -- C:\Users\PERSO\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\FileSyncShell.dll =>.Microsoft Corporation® O106 - SIOI: SharedOverlayHandler Class [ OneDrive2] - {5AB7172C-9C11-405C-8DD5-AF20F3606282}. (.Microsoft Corporation - Microsoft OneDrive Shell Extension.) -- C:\Users\PERSO\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\FileSyncShell.dll =>.Microsoft Corporation® O106 - SIOI: SharedSyncingOverlayHandler Class [ OneDrive3] - {A78ED123-AB77-406B-9962-2A5D9D2F7F30}. (.Microsoft Corporation - Microsoft OneDrive Shell Extension.) -- C:\Users\PERSO\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\FileSyncShell.dll =>.Microsoft Corporation® O106 - SIOI: UpToDateOverlayHandler Class [ OneDrive4] - {F241C880-6982-4CE5-8CF7-7085BA96DA5A}. (.Microsoft Corporation - Microsoft OneDrive Shell Extension.) -- C:\Users\PERSO\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\FileSyncShell.dll =>.Microsoft Corporation® O106 - SIOI: SyncingOverlayHandler Class [ OneDrive5] - {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}. (.Microsoft Corporation - Microsoft OneDrive Shell Extension.) -- C:\Users\PERSO\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\FileSyncShell.dll =>.Microsoft Corporation® O106 - SIOI: Microsoft SkyDrive Pro Icon Overlay 1 (ErrorConflict) [ SkyDrivePro1 (ErrorConflict)] - {8BA85C75-763B-4103-94EB-9470F12FE0F7}. (.Microsoft Corporation - Microsoft OneDrive for Business Extensions.) -- C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL =>.Microsoft Corporation® O106 - SIOI: Microsoft SkyDrive Pro Icon Overlay 2 (SyncInProgress) [ SkyDrivePro2 (SyncInProgress)] - {CD55129A-B1A1-438E-A425-CEBC7DC684EE}. (.Microsoft Corporation - Microsoft OneDrive for Business Extensions.) -- C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL =>.Microsoft Corporation® O106 - SIOI: Microsoft SkyDrive Pro Icon Overlay 3 (InSync) [ SkyDrivePro3 (InSync)] - {E768CD3B-BDDC-436D-9C13-E1B39CA257B1}. (.Microsoft Corporation - Microsoft OneDrive for Business Extensions.) -- C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL =>.Microsoft Corporation® O106 - SIOI: avast [00avast] - {472083B0-C522-11CF-8763-00608CC02F24}. (.AVAST Software - avast! Shell Extension.) -- C:\Program Files\AVAST Software\Avast\ashShell.dll =>.AVAST Software a.s.® ---\\ Enumération des clés StartupReg (1) - 0s O53 - SMSR:HKLM\...\startupreg\iSkysoft Helper Compact.exe [Key] . (.iSkySoft - iSkySoft Studio.) -- c:\program files (x86)\common files\iSkysoft\iskysoft helper compact\ISHelper.exe ---\\ Liste des pilotes du système (85) - 13s O58 - SDL:2015/10/30 09:17:22 A . (.LSI - LSI 3ware SCSI Storport Driver.) -- C:\WINDOWS\System32\drivers\3ware.sys [107360] =>.Microsoft Windows® O58 - SDL:2015/12/08 13:25:16 A . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\WINDOWS\System32\drivers\48230029.sys [122584] =>.Malwarebytes Corporation® (.Superfluous.Orphan) O58 - SDL:2015/10/30 09:17:22 A . (.PMC-Sierra - PMC-Sierra Storport Driver For SPC8x6G SAS.) -- C:\WINDOWS\System32\drivers\adp80xx.sys [1135456] =>.Microsoft Windows® O58 - SDL:2015/10/30 09:17:22 A . (.Advanced Micro Devices - AHCI 1.3 Device Driver.) -- C:\WINDOWS\System32\drivers\amdsata.sys [83296] =>.Microsoft Windows® O58 - SDL:2015/10/30 09:17:22 A . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller D.) -- C:\WINDOWS\System32\drivers\amdsbs.sys [259424] =>.Microsoft Windows® O58 - SDL:2015/10/30 09:17:22 A . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\WINDOWS\System32\drivers\amdxata.sys [26976] =>.Microsoft Windows® O58 - SDL:2013/12/13 12:31:46 A . (...) -- C:\WINDOWS\System32\drivers\AQFileRestore.sys [21584] {167AE4BEC6B4B1D1BA0BC9D47BA75B67} O58 - SDL:2015/10/30 09:17:22 A . (.PMC-Sierra, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\WINDOWS\System32\drivers\arcsas.sys [131936] =>.Microsoft Windows® O58 - SDL:2016/05/11 12:11:02 A . (.AVAST Software - avast! HWID.) -- C:\WINDOWS\System32\drivers\aswHwid(1918).sys [37656] =>.AVAST Software a.s.® (ALWIL Software) O58 - SDL:2016/05/11 12:11:02 A . (.AVAST Software - avast! HWID.) -- C:\WINDOWS\System32\drivers\aswHwid.sys [37656] =>.AVAST Software a.s.® (ALWIL Software) O58 - SDL:2016/05/11 12:10:37 A . (.AVAST Software - avast! Keyboard Filter Driver.) -- C:\WINDOWS\System32\drivers\aswKbd.sys [37144] =>.AVAST Software a.s.® O58 - SDL:2016/05/11 12:11:02 A . (.AVAST Software - avast! File System Minifilter for Windows 2.) -- C:\WINDOWS\System32\drivers\aswMonFlt(1919).sys [107792] =>.AVAST Software a.s.® O58 - SDL:2016/05/11 12:11:02 A . (.AVAST Software - avast! File System Minifilter for Windows 2.) -- C:\WINDOWS\System32\drivers\aswMonFlt.sys [107792] =>.AVAST Software a.s.® O58 - SDL:2016/05/11 12:11:02 A . (.AVAST Software - avast! WFP Redirect Driver.) -- C:\WINDOWS\System32\drivers\aswRdr2(1920).sys [103064] =>.AVAST Software a.s.® O58 - SDL:2016/05/11 12:11:02 A . (.AVAST Software - avast! WFP Redirect Driver.) -- C:\WINDOWS\System32\drivers\aswRdr2.sys [103064] =>.AVAST Software a.s.® O58 - SDL:2016/05/11 12:11:02 A . (.AVAST Software - avast! Revert.) -- C:\WINDOWS\System32\drivers\aswRvrt(1921).sys [74544] =>.AVAST Software a.s.® (ALWIL Software) O58 - SDL:2016/05/11 12:11:02 A . (.AVAST Software - avast! Revert.) -- C:\WINDOWS\System32\drivers\aswRvrt.sys [74544] =>.AVAST Software a.s.® (ALWIL Software) O58 - SDL:2016/05/11 12:10:37 A . (.AVAST Software - avast! Virtualization Driver.) -- C:\WINDOWS\System32\drivers\aswSnx(1922).sys [1070904] =>.AVAST Software a.s.® O58 - SDL:2016/05/11 12:10:37 A . (.AVAST Software - avast! Virtualization Driver.) -- C:\WINDOWS\System32\drivers\aswSnx.sys [1070904] =>.AVAST Software a.s.® O58 - SDL:2016/05/11 12:11:02 A . (.AVAST Software - avast! self protection module.) -- C:\WINDOWS\System32\drivers\aswSP(1923).sys [465792] =>.AVAST Software a.s.® O58 - SDL:2016/05/11 12:11:02 A . (.AVAST Software - avast! self protection module.) -- C:\WINDOWS\System32\drivers\aswSP.sys [465792] =>.AVAST Software a.s.® O58 - SDL:2016/05/11 12:11:03 A . (.AVAST Software - Stream Filter.) -- C:\WINDOWS\System32\drivers\aswStm(1924).sys [166432] =>.AVAST Software a.s.® O58 - SDL:2016/05/11 12:11:03 A . (.AVAST Software - Stream Filter.) -- C:\WINDOWS\System32\drivers\aswStm.sys [166432] =>.AVAST Software a.s.® O58 - SDL:2016/05/11 12:11:03 A . (.AVAST Software - avast! VM Monitor.) -- C:\WINDOWS\System32\drivers\aswVmm(1925).sys [287528] =>.AVAST Software a.s.® (ALWIL Software) O58 - SDL:2016/05/11 12:11:03 A . (.AVAST Software - avast! VM Monitor.) -- C:\WINDOWS\System32\drivers\aswVmm.sys [287528] =>.AVAST Software a.s.® (ALWIL Software) O58 - SDL:2015/10/30 09:17:22 A . (.Windows (R) Win 7 DDK provider - BCM Function 2 Device Driver.) -- C:\WINDOWS\System32\drivers\bcmfn.sys [9728] =>.Windows (R) Win 7 DDK provider O58 - SDL:2015/10/30 09:17:22 A . (.Windows (R) Win 7 DDK provider - BCM Function 2 Device Driver.) -- C:\WINDOWS\System32\drivers\bcmfn2.sys [9728] =>.Windows (R) Win 7 DDK provider O58 - SDL:2015/10/30 09:17:22 A . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.) -- C:\WINDOWS\System32\drivers\bxvbda.sys [531296] =>.Microsoft Windows® O58 - SDL:2011/10/17 03:00:00 A . (.Sonic Solutions - CDR4 64-bit CD and DVD Place Holder Driver.) -- C:\WINDOWS\System32\drivers\cdr4_xp.sys [10224] =>.Sonic Solutions® O58 - SDL:2011/10/17 03:00:00 A . (.Sonic Solutions - CDRAL 64-bit Place Holder Driver (see PxHel.) -- C:\WINDOWS\System32\drivers\cdralw2k.sys [10224] =>.Sonic Solutions® O58 - SDL:2015/10/08 18:44:56 A . (.Disc Soft Ltd - DAEMON Tools Lite Virtual SCSI Bus Driver.) -- C:\WINDOWS\System32\drivers\dtlitescsibus.sys [30264] =>.Disc Soft Ltd® O58 - SDL:2015/10/30 09:17:22 A . (.QLogic Corporation - QLogic 10 GigE VBD.) -- C:\WINDOWS\System32\drivers\evbda.sys [3436896] =>.Microsoft Windows® O58 - SDL:2009/03/06 20:38:24 A . (.Intel Corporation - BIOS Update Driver.) -- C:\WINDOWS\System32\drivers\flashud.sys [51712] =>.Intel Corporation O58 - SDL:2013/09/04 14:57:42 A . (.ThreatTrack Security - GFI Utility driver.) -- C:\WINDOWS\System32\drivers\gfiutil.sys [31264] =>.GFI Software (Florida) Inc.® O58 - SDL:2015/04/28 16:21:31 A . (.Glarysoft Ltd - The driver for the Startup Manager tool.) -- C:\WINDOWS\System32\drivers\GUBootStartup.sys [20160] =>.Glarysoft Ltd® O58 - SDL:2015/10/30 09:17:22 A . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Drive.) -- C:\WINDOWS\System32\drivers\HpSAMD.sys [64352] =>.Microsoft Windows® O58 - SDL:2013/10/17 16:27:02 A . (.Windows (R) Win 7 DDK provider - RawPacket NDIS Protocol Driver.) -- C:\WINDOWS\System32\drivers\htcnprot.sys [36928] =>.HTC Corp.® O58 - SDL:2015/10/30 09:17:18 A . (.Intel(R) Corporation - Intel(R) Serial IO I2C Driver.) -- C:\WINDOWS\System32\drivers\iai2c.sys [81408] =>.Intel(R) Corporation O58 - SDL:2015/10/30 09:17:18 A . (.Intel Corporation - Intel(R) Serial IO I2C Driver v2.) -- C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys [165888] =>.Intel Corporation O58 - SDL:2015/10/30 09:17:18 A . (.Intel Corporation - Intel(R) Serial IO GPIO Controller Driver.) -- C:\WINDOWS\System32\drivers\iaLPSSi_GPIO.sys [38128] =>.Intel Corporation - Client Components Group® O58 - SDL:2015/10/30 09:17:18 A . (.Intel Corporation - Intel(R) Serial IO I2C Controller Driver.) -- C:\WINDOWS\System32\drivers\iaLPSSi_I2C.sys [113152] =>.Intel Corporation O58 - SDL:2015/10/30 09:17:22 A . (.Intel Corporation - Intel(R) Rapid Storage Technology driver (i.) -- C:\WINDOWS\System32\drivers\iaStorAV.sys [673120] =>.Microsoft Windows® O58 - SDL:2015/10/30 09:17:22 A . (.Intel Corporation - Intel Matrix Storage Manager driver - x64.) -- C:\WINDOWS\System32\drivers\iaStorV.sys [412000] =>.Microsoft Windows® O58 - SDL:2015/10/30 09:17:23 A . (.Mellanox - InfiniBand Fabric Bus Driver.) -- C:\WINDOWS\System32\drivers\ibbus.sys [424800] =>.Microsoft Windows® O58 - SDL:2015/08/24 21:22:14 A . (.Intel Corporation - Intel Graphics Kernel Mode Driver.) -- C:\WINDOWS\System32\drivers\igdkmd64.sys [12311776] =>.Intel Corporation O58 - SDL:2011/08/23 23:12:57 A . (.Intel(R) Corporation - Intel(R) Display Audio Driver.) -- C:\WINDOWS\System32\drivers\IntcDAud.sys [317440] =>.Intel(R) Corporation O58 - SDL:2015/10/30 09:17:23 A . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas.sys [108888] =>.Microsoft Windows® O58 - SDL:2015/10/30 09:17:23 A . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas2i.sys [104800] =>.Microsoft Windows® O58 - SDL:2015/10/30 09:17:23 A . (.Avago Technologies - Avago SAS Gen3 Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas3i.sys [99168] =>.Microsoft Windows® O58 - SDL:2015/10/30 09:17:23 A . (.LSI Corporation - LSI SSS PCIe/Flash Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sss.sys [82784] =>.Microsoft Windows® O58 - SDL:2007/05/09 22:46:36 A . (.Logitech Inc. - Audio filter for Express Plus.) -- C:\WINDOWS\System32\drivers\lv302a64.sys [16032] =>.Logitech Inc® O58 - SDL:2007/05/09 22:46:48 A . (.Logitech Inc. - Logitech QuickCam Driver.) -- C:\WINDOWS\System32\drivers\LV302V64.SYS [1127328] =>.Logitech Inc® O58 - SDL:2007/05/09 22:50:48 A . (.Logitech Inc. - USB Statistic Driver.) -- C:\WINDOWS\System32\drivers\LVUSBS64.sys [50208] =>.Logitech Inc® O58 - SDL:2016/06/18 14:02:16 A . (.Malwarebytes - Malwarebytes Anti-Malware.) -- C:\WINDOWS\System32\drivers\MBAMSwissArmy.sys [192216] =>.Malwarebytes Corporation® O58 - SDL:2015/10/30 09:17:23 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\megasas.sys [59744] =>.Microsoft Windows® O58 - SDL:2015/10/30 09:17:23 A . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\WINDOWS\System32\drivers\megasr.sys [575840] =>.Microsoft Windows® O58 - SDL:2015/12/09 12:50:10 A . (.McAfee, Inc. - McAfee Link Driver.) -- C:\WINDOWS\System32\drivers\mfehidk.sys [864072] =>.McAfee, Inc.® O58 - SDL:2015/12/09 12:50:10 A . (.McAfee, Inc. - McAfee Code Analysis Driver.) -- C:\WINDOWS\System32\drivers\mferkdet.sys [106120] =>.McAfee, Inc.® O58 - SDL:2015/10/30 09:17:23 A . (.Mellanox - MLX4 Bus Driver.) -- C:\WINDOWS\System32\drivers\mlx4_bus.sys [705376] =>.Microsoft Windows® O58 - SDL:2013/10/24 15:03:00 A . (.UVNC BVBA - UltraVnc miniport driver2.) -- C:\WINDOWS\System32\drivers\mv2.sys [12904] {0100000000012ECA04F7A4} =>.uvnc bvba O58 - SDL:2015/10/30 09:17:23 A . (.Marvell Semiconductor, Inc. - Marvell Flash Controller Driver.) -- C:\WINDOWS\System32\drivers\mvumis.sys [63840] =>.Microsoft Windows® O58 - SDL:2015/10/30 09:17:23 A . (.Mellanox - NetworkDirect Support Filter Driver.) -- C:\WINDOWS\System32\drivers\ndfltr.sys [76128] =>.Microsoft Windows® O58 - SDL:2015/10/30 09:17:23 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\WINDOWS\System32\drivers\nvraid.sys [150368] =>.Microsoft Windows® O58 - SDL:2015/10/30 09:17:23 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\WINDOWS\System32\drivers\nvstor.sys [166240] =>.Microsoft Windows® O58 - SDL:2015/10/30 09:17:23 A . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\percsas2i.sys [58208] =>.Microsoft Windows® O58 - SDL:2015/10/30 09:17:23 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\percsas3i.sys [58720] =>.Microsoft Windows® O58 - SDL:2011/11/03 03:01:00 A . (.Rovi Corporation - Px Engine Device Driver for 64-bit Windows.) -- C:\WINDOWS\System32\drivers\PxHlpa64.sys [56208] =>.Sonic Solutions® O58 - SDL:2015/10/12 22:24:07 A . (.Realtek - Realtek 8101E/8168/8169 NDIS 6.40 64-bit Dr.) -- C:\WINDOWS\System32\drivers\rt640x64.sys [888064] =>.Realtek Semiconductor Corp® O58 - SDL:2015/10/12 22:24:45 A . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function D.) -- C:\WINDOWS\System32\drivers\RTKVHD64.sys [4514008] =>.Realtek Semiconductor Corp® O58 - SDL:2015/10/30 09:17:23 A . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\WINDOWS\System32\drivers\sisraid2.sys [44896] =>.Microsoft Windows® O58 - SDL:2015/10/30 09:17:23 A . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\WINDOWS\System32\drivers\sisraid4.sys [81760] =>.Microsoft Windows® O58 - SDL:2015/10/12 22:23:34 A . (.Synaptics Incorporated - Synaptics SMBus Driver.) -- C:\WINDOWS\System32\drivers\Smb_driver_Intel.sys [33960] =>.Synaptics Incorporated® O58 - SDL:2015/10/12 22:27:59 A . (.Samsung Electronics - Port Contention Driver.) -- C:\WINDOWS\System32\drivers\SSPORT.sys [11576] =>.Samsung Electronics CO., LTD.® O58 - SDL:2016/04/25 00:35:52 A . (.Samsung Electronics Co., Ltd. - SAMSUNG USB Composite Device Driver (MSS Ve.) -- C:\WINDOWS\System32\drivers\ssudbus.sys [129152] =>.Samsung Electronics CO., LTD.® O58 - SDL:2016/04/25 00:35:58 A . (.Samsung Electronics Co., Ltd. - SAMSUNG Android Modem Device Driver (MSS Ve.) -- C:\WINDOWS\System32\drivers\ssudmdm.sys [221824] =>.Samsung Electronics CO., LTD.® O58 - SDL:2015/10/30 09:17:23 A . (.Promise Technology, Inc. - Promise SuperTrak EX Series Driver for Wind.) -- C:\WINDOWS\System32\drivers\stexstor.sys [31072] =>.Microsoft Windows® O58 - SDL:2013/08/22 14:40:24 A . (.The OpenVPN Project - TAP-Windows Virtual Network Driver.) -- C:\WINDOWS\System32\drivers\tap0901.sys [40664] =>.OpenVPN Technologies, Inc.® O58 - SDL:2015/10/29 13:43:48 A . (...) -- C:\WINDOWS\System32\drivers\TrueSight.sys [37624] =>.Adlice® O58 - SDL:2015/11/05 16:23:52 A . (.Apple, Inc. - Apple Mobile Device USB Driver.) -- C:\WINDOWS\System32\drivers\usbaapl64.sys [54784] =>.Apple, Inc. O58 - SDL:2015/10/30 09:17:23 A . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\WINDOWS\System32\drivers\vsmraid.sys [166752] =>.Microsoft Windows® O58 - SDL:2015/10/30 09:17:23 A . (.VIA Corporation - VIA StorX RAID Controller Driver.) -- C:\WINDOWS\System32\drivers\VSTXRAID.SYS [305504] =>.Microsoft Windows® O58 - SDL:2015/10/30 09:17:23 A . (.Mellanox - Kernel WinMad.) -- C:\WINDOWS\System32\drivers\winmad.sys [26976] =>.Microsoft Windows® O58 - SDL:2015/10/30 09:17:23 A . (.Mellanox - Kernel WinVerbs.) -- C:\WINDOWS\System32\drivers\winverbs.sys [59232] =>.Microsoft Windows® O58 - SDL:2013/09/30 15:26:50 A . (...) -- C:\WINDOWS\System32\pwdrvio.sys [19152] =>.MiniTool Solution Ltd® O58 - SDL:2013/09/30 15:26:48 A . (...) -- C:\WINDOWS\System32\pwdspio.sys [12504] =>.MiniTool Solution Ltd® ---\\ Derniers fichiers modifiés ou crées (Utilisateur) (6) - 45s O61 - LFC: 2016/06/15 18:54:58 A . (..) -- C:\Users\PERSO\Downloads\UpdateChecker.exe [83360] {27D76F50DDF2FF} O61 - LFC: 2016/06/18 14:25:34 RA . (.Malwarebytes Anti-Malware.) -- C:\Users\PERSO\Downloads\Malwarebytes Anti-Malware Premium v2.2.0.1024-2016 (Pre-Activated)\Installer (Pre-Activated)\MBAM.v2.2.0.1024.Es.En.Setup.exe [20558953] O61 - LFC: 2016/06/20 10:36:38 A . (..) -- C:\Users\PERSO\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\LocalState\speech_onecorereg.bin [8192] O61 - LFC: 2016/06/19 21:10:38 A . (..) -- C:\Users\PERSO\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\UrlBlock\urlblock_636019567747026376.bin [125733] O61 - LFC: 2016/06/20 10:35:18 A . (..) -- C:\Users\PERSO\AppData\Local\Microsoft\Windows\UPPS\UPPS.bin [16148] O61 - LFC: 2016/06/18 13:55:52 A . (..) -- C:\Users\PERSO\AppData\Local\Microsoft\Internet Explorer\UrlBlock\urlblock_636018419538636718.bin [138089] ---\\ Associations Shell Spawning (10) - 0s O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe =>.Microsoft Corporation O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Ob.) -- C:\Windows\System32\eventvwr.exe =>.Microsoft Corporation O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe =>.Microsoft Corporation® O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\wscript.exe =>.Microsoft Corporation O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe =>.Microsoft Corporation O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S ---\\ Menu de démarrage Internet (16) - 0s O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe =>.Mozilla Corporation® O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc® O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe =>.Microsoft Corporation® O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Avast Software - Avast SafeZone Browser.) -- C:\Program Files\AVAST Software\SZBrowser\Launcher.exe =>.AVAST Software s.r.o.® O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe =>.Mozilla Corporation O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc. O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Avast Software - Avast SafeZone Browser.) -- C:\Program Files\AVAST Software\SZBrowser\launcher.exe =>.AVAST Software O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe =>.Mozilla Corporation O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc. O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Avast Software - Avast SafeZone Browser.) -- C:\Program Files\AVAST Software\SZBrowser\launcher.exe =>.AVAST Software O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe =>.Mozilla Corporation O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc. O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Avast Software - Avast SafeZone Browser.) -- C:\Program Files\AVAST Software\SZBrowser\launcher.exe =>.AVAST Software ---\\ Recherche d'infection sur les navigateurs (6) - 10s O69 - SBI: prefs.js [PERSO - bvmxqoy5.default-1455109004688] user_pref("browser.newtab.url", "http://d2ucfwpxlh3zh3.cloudfront.net/?ts=AHEqBHUnBHAlBU..&v=20160611&uid=03D3D200EE2350F628D89433[...] =>.Superfluous.CloudfrontNet O69 - SBI: prefs.js [PERSO - bvmxqoy5.default-1455109004688] user_pref("browser.startup.homepage", "http://d2ucfwpxlh3zh3.cloudfront.net/?ts=AHEqBHUnBHAlBU..&v=20160611&uid=03D3D200EE2350F628[...] =>.Superfluous.CloudfrontNet O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (Bing) - http://www.bing.com/ O69 - SBI: SearchScopes [HKLM] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (@ieframe.dll,-12512) - http://www.bing.com/ O69 - SBI: SearchScopes [HKLM] {33BB0A4E-99AF-4226-BDF6-49120163DE86} - (Bing) - http://www.bing.com/ O69 - SBI: SearchScopes [HKLM] {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} - (Google) - http://www.google.com/ ---\\ Enumère les fichiers Crack et Keygen (1) - 20s O82 - LFC: 2015/12/08 13:10:46 A . (.BRD Cult.) -- C:\Users\PERSO\Downloads\[www.Cpasbien.pe] Malwarebytes.Anti-Malware.Premium.v2.0.2.1012.Multilingual.Incl.Keygen-BRD\Keygen\Keygen.exe [0] =>.Crack,Keygen ---\\ Enumère les services démarrés par Svchost (41) - 1s O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\WINDOWS\System32\certprop.dll [192000] =>.Microsoft Corporation O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\WINDOWS\System32\certprop.dll [192000] =>.Microsoft Corporation O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\WINDOWS\system32\srvsvc.dll [283136] =>.Microsoft Corporation O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\WINDOWS\System32\gpsvc.dll [1339904] =>.Microsoft Corporation O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\WINDOWS\System32\ikeext.dll [957952] =>.Microsoft Corporation O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur u.) -- C:\WINDOWS\System32\iphlpsvc.dll [963072] =>.Microsoft Corporation O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d’ouverture de session secon.) -- C:\WINDOWS\system32\seclogon.dll [31232] =>.Microsoft Corporation O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\WINDOWS\System32\appinfo.dll [94720] =>.Microsoft Corporation O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\WINDOWS\system32\iscsiexe.dll [151040] =>.Microsoft Corporation O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\WINDOWS\System32\eapsvc.dll [112640] =>.Microsoft Corporation O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\WINDOWS\system32\schedsvc.dll [997376] =>.Microsoft Corporation O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\WINDOWS\system32\wbem\WMIsvc.dll [225280] =>.Microsoft Corporation O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\WINDOWS\System32\browser.dll [134656] =>.Microsoft Corporation O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\WINDOWS\system32\profsvc.dll [328192] =>.Microsoft Corporation O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à.) -- C:\Windows\System32\SessEnv.dll [372736] =>.Microsoft Corporation O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\WINDOWS\System32\wercplsupport.dll [96256] =>.Microsoft Corporation O83 - Search Svchost Services: DcpSvc (DcpSvc) . (.Microsoft Corporation - dcpsvc Task.) -- C:\WINDOWS\system32\dcpsvc.dll [186880] =>.Microsoft Corporation O83 - Search Svchost Services: wlidsvc (wlidsvc) . (.Microsoft Corporation - Service de compte Microsoft®.) -- C:\WINDOWS\system32\wlidsvc.dll [2057216] =>.Microsoft Corporation O83 - Search Svchost Services: NcaSvc (NcaSvc) . (.Microsoft Corporation - Service Assistant Connectivité réseau Micro.) -- C:\WINDOWS\System32\ncasvc.dll [168960] =>.Microsoft Corporation O83 - Search Svchost Services: NetSetupSvc (NetSetupSvc) . (.Microsoft Corporation - Service Configuration du réseau.) -- C:\WINDOWS\System32\NetSetupSvc.dll [207360] =>.Microsoft Corporation O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\WINDOWS\system32\themeservice.dll [59392] =>.Microsoft Corporation O83 - Search Svchost Services: RetailDemo (RetailDemo) . (.Microsoft Corporation - RDXService.) -- C:\WINDOWS\system32\RDXService.dll [1073152] =>.Microsoft Corporation O83 - Search Svchost Services: lfsvc (lfsvc) . (.Microsoft Corporation - Service de géolocalisation.) -- C:\Windows\System32\lfsvc.dll [27136] =>.Microsoft Corporation O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’.) -- C:\WINDOWS\System32\rasauto.dll [106496] =>.Microsoft Corporation O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire des connexions d’accès à dista.) -- C:\WINDOWS\System32\rasmans.dll [696320] =>.Microsoft Corporation O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll [507904] =>.Microsoft Corporation O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements systèm.) -- C:\WINDOWS\System32\sens.dll [73216] =>.Microsoft Corporation O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l’application d’assistance à.) -- C:\WINDOWS\System32\ipnathlp.dll [456704] =>.Microsoft Corporation O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM.) -- C:\Windows\System32\tapisrv.dll [311808] =>.Microsoft Corporation O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Up.) -- C:\WINDOWS\system32\wuaueng.dll [2281472] =>.Microsoft Corporation O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière.) -- C:\WINDOWS\System32\qmgr.dll [1144320] =>.Microsoft Corporation O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [608768] =>.Microsoft Corporation O83 - Search Svchost Services: dmwappushservice (dmwappushservice) . (.Microsoft Corporation - dmwappushsvc.) -- C:\WINDOWS\system32\dmwappushsvc.dll [57856] =>.Microsoft Corporation O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\WINDOWS\System32\bdesvc.dll [361472] =>.Microsoft Corporation O83 - Search Svchost Services: XboxNetApiSvc (XboxNetApiSvc) . (.Microsoft Corporation - Xbox Live Networking Service.) -- C:\WINDOWS\system32\XboxNetApiSvc.dll [1035776] =>.Microsoft Corporation O83 - Search Svchost Services: UsoSvc (UsoSvc) . (.Microsoft Corporation - Mettre à jour la session Orchestrator Core.) -- C:\WINDOWS\system32\usocore.dll [368640] =>.Microsoft Corporation O83 - Search Svchost Services: XblGameSave (XblGameSave) . (.Microsoft Corporation - Xbox Live Game Save Service.) -- C:\WINDOWS\System32\XblGameSave.dll [1139712] =>.Microsoft Corporation O83 - Search Svchost Services: DmEnrollmentSvc (DmEnrollmentSvc) . (.Microsoft Corporation - DLL Windows Management Service.) -- C:\Windows\System32\Windows.Internal.Management.dll [278016] =>.Microsoft Corporation O83 - Search Svchost Services: DsmSvc (DsmSvc) . (.Microsoft Corporation - Gestionnaire d’installation de périphérique.) -- C:\WINDOWS\System32\DeviceSetupManager.dll [205824] =>.Microsoft Corporation O83 - Search Svchost Services: UserManager (UserManager) . (.Microsoft Corporation - UserMgr.) -- C:\WINDOWS\System32\usermgr.dll [912384] =>.Microsoft Corporation O83 - Search Svchost Services: XblAuthManager (XblAuthManager) . (.Microsoft Corporation - Xbox Live Auth Manager.) -- C:\WINDOWS\System32\XblAuthManager.dll [948736] =>.Microsoft Corporation ---\\ Liste des exceptions du parefeu Windows (3) - 2s O87 - FAEL: "{08023ED7-B064-47B0-93FA-DD806D46D6E1}" [Out-None-P6-TRUE] .(...) -- C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe (.not file.) =>PUP.Optional.DllFilesFixer O87 - FAEL: "UDP Query User{2BCD3231-4F65-4A29-A4C0-56ABB8C08CDE}C:\users\perso\appdata\local\skypeplugin\7.12.0.55\pluginhost.exe" [In-None-P17-TRUE] .(...) -- C:\users\perso\appdata\local\skypeplugin\7.12.0.55\pluginhost.exe (.not file.) O87 - FAEL: "TCP Query User{ECAC3C1D-82C3-419C-8384-E38A947A9BA2}C:\users\perso\appdata\local\skypeplugin\7.12.0.55\pluginhost.exe" [In-None-P6-TRUE] .(...) -- C:\users\perso\appdata\local\skypeplugin\7.12.0.55\pluginhost.exe (.not file.) ---\\ Scan Additionnel (10) - 0s C:\WINDOWS\System32\Tasks\Total Extension =>PUP.Optional.TotalExtension C:\WINDOWS\System32\Tasks\Total Extension2 =>PUP.Optional.TotalExtension HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{FF59BD75-466A-4D5A-AD23-AAD87C5FD44C} =>Riskware.QuickTime HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{FF59BD75-466A-4D5A-AD23-AAD87C5FD44C} =>Riskware.QuickTime HKCU\SOFTWARE\03D3D200EE2350F628D894336FA3D434 =>PUP.Optional.CrossRider HKCU\SOFTWARE\PCRegistryShieldConfig =>PUP.Optional.PCRegistryShield HKCU\SOFTWARE\undefined =>.Superfluous.Downloader C:\Program Files\Reimage_AQT{13195CD9-944C-4587-BDF9-5E628F7F5CBF}_AQT{0C61C7AB-FA7F-4984-8D04-A433ABB46A4F} =>.Superfluous.ReimageRepair C:\ProgramData\Microsoft Toolkit =>HackTool.AutoKMS C:\Users\PERSO\AppData\Local\Total Extension =>PUP.Optional.TotalExtension ---\\ Récapitulatif des éléments trouvés sur votre station (12) - 0s http://www.nicolascoolman.fr/?p=5145 =>.Superfluous.MustangBrowser http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.TotalExtension http://www.nicolascoolman.fr/pup-goobzo/ =>PUP.Optional.Goobzo http://www.nicolascoolman.fr/?p=5145 =>.Superfluous.CloudfrontNet https://www.nicolascoolman.info/2016/04/21/riskware-quicktime/ =>Riskware.QuickTime https://www.nicolascoolman.info/2016/04/30/pup-optional-crossrider/ =>PUP.Optional.CrossRider http://www.nicolascoolman.fr/pup-pcregistryshield/ =>PUP.Optional.PCRegistryShield http://www.nicolascoolman.fr/?p=5145 =>.Superfluous.Downloader http://www.nicolascoolman.fr/?p=1075 =>.Superfluous.ReimageRepair https://www.nicolascoolman.info/2016/05/04/hacktool-autokms/ =>HackTool.AutoKMS http://www.nicolascoolman.fr/?p=5145 =>.Superfluous.Orphan http://www.nicolascoolman.fr/pup-optional-dllfilesfixer/ =>PUP.Optional.DllFilesFixer ~ End of the scan, 29849 items in 00h05mn07s (1245)(1)