~ ZHPDiag v2016.1.31.23 Par Nicolas Coolman (2016/01/30) ~ Démarré par Gilbert (Administrator) (2017/12/12 18:12:32) ~ Site: http://www.nicolascoolman.fr ~ Facebook: https://www.facebook.com/nicolascoolman1 ~ Etat de la version: Pas de fichier réseau ~ Mode: Scanner ~ Rapport: C:\Users\Gilbert\Desktop\ZHPDiag.txt ~ Rapport: C:\Users\Gilbert\AppData\Roaming\ZHP\ZHPDiag.txt ~ UAC: Activate ~ Démarrage du système: Normal (Normal boot) Windows VISTA, 32-bit Service Pack 2 (Build 6002) ---\\ Navigateurs Internet (2) - 0s MFIE: Mozilla Firefox 52.5.2 ESR (x86 fr) MSIE: Internet Explorer v7.0.6002.18005 ---\\ Informations sur les produits Windows (4) - 3s ~ Windows Server License Manager Script : OK ~ Licence Script File Génération : OK Windows Automatic Updates : OK Windows Activation Technologies : KO ---\\ Logiciels d'optimisation (1) - 4s CCleaner v5.37 ---\\ Surveillance de Logiciels (2) - 4s Adobe Flash Player ActiveX Adobe Reader 8.1.0 ---\\ Informations sur le système (6) - 0s ~ Operating System: x86 Family 6 Model 15 Stepping 13, GenuineIntel ~ Operating System: 32-bit ~ Boot mode: Normal (Normal boot) Total RAM: 3139.52 MB (37% free) System Restore: Activé (Enable) System drive C: has 105 GB () free of 147 GB ---\\ Mode de connexion au système (3) - 0s ~ Computer Name: PC-DE-GILBERT ~ User Name: Gilbert ~ Logged in as Administrator ---\\ Enumération des unités disques (2) - 0s ~ Drive C: has 105 GB free of 147 GB (System) ~ Drive D: has 143 GB free of 143 GB ---\\ Etat du Centre de Sécurité Windows (11) - 1s [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: Modified [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK [HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: OK [HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK ---\\ Recherche particulière de fichiers génériques (24) - 6s [MD5.D07D4C3038F3578FFCE1C0237F2A1253] - 11/04/2009 - (.Microsoft Corporation - Explorateur Windows.) -- C:\Windows\Explorer.exe [2926592] =>.Microsoft Corporation [MD5.4B555106290BD117334E9A08761C035A] - 02/11/2006 - (.Microsoft Corporation - Processus hôte Windows (Rundll32).) -- C:\Windows\System32\rundll32.exe [44544] =>.Microsoft Corporation [MD5.101BA3EA053480BB5D957EF37C06B5ED] - 21/01/2008 - (.Microsoft Corporation - Application de démarrage de Windows.) -- C:\Windows\System32\Wininit.exe [96768] =>.Microsoft Corporation [MD5.8777B44511D8BCCF47B5A7CBDC02DE11] - 11/04/2009 - (.Microsoft Corporation - Extensions Internet pour Win32.) -- C:\Windows\System32\wininet.dll [828416] =>.Microsoft Corporation [MD5.898E7C06A350D4A1A64A9EA264D55452] - 11/04/2009 - (.Microsoft Corporation - Application d'ouverture de session Windows.) -- C:\Windows\System32\Winlogon.exe [314368] =>.Microsoft Corporation [MD5.85E861D0B88DB2B54ACB0839654C09F7] - 02/03/2011 - (.Microsoft Corporation - DNS DLL de l'API Client.) -- C:\Windows\System32\dnsapi.dll [168448] =>.Microsoft Corporation [MD5.95F5FF73B076576C41740F1A842B9B57] - 21/01/2008 - (.Microsoft Corporation - DLL client de l'API uilisateur de Windows m.) -- C:\Windows\System32\fr-FR\user32.dll.mui [20480] =>.Microsoft Corporation [MD5.3911B972B55FEA0478476B2E777B29FA] - 21/04/2011 - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) -- C:\Windows\System32\drivers\AFD.sys [273408] =>.Microsoft Corporation [MD5.2D9C903DC76A66813D350A562DE40ED9] - 21/01/2008 - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) -- C:\Windows\System32\drivers\atapi.sys [21560] =>.Microsoft Windows® [MD5.7ADD03E75BEB9E6DD102C3081D29840A] - 21/01/2008 - (.Microsoft Corporation - CD-ROM File System Driver.) -- C:\Windows\System32\drivers\Cdfs.sys [70144] =>.Microsoft Corporation [MD5.6B4BFFB9BECD728097024276430DB314] - 11/04/2009 - (.Microsoft Corporation - SCSI CD-ROM Driver.) -- C:\Windows\System32\drivers\Cdrom.sys [67072] =>.Microsoft Corporation [MD5.622C41A07CA7E6DD91770F50D532CB6C] - 14/04/2011 - (.Microsoft Corporation - DFS Namespace Client Driver.) -- C:\Windows\System32\drivers\DfsC.sys [75264] =>.Microsoft Corporation [MD5.062452B7FFD68C8C042A6261FE8DFF4A] - 11/04/2009 - (.Microsoft Corporation - High Definition Audio Bus Driver.) -- C:\Windows\System32\drivers\HDAudBus.sys [561152] =>.Microsoft Corporation [MD5.22D56C8184586B7A1F6FA60BE5F5A2BD] - 21/01/2008 - (.Microsoft Corporation - Pilote de port i8042.) -- C:\Windows\System32\drivers\i8042prt.sys [54784] =>.Microsoft Corporation [MD5.8793643A67B42CEC66490B2A0CF92D68] - 21/01/2008 - (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\System32\drivers\IpNat.sys [100864] =>.Microsoft Corporation [MD5.1E94971C4B446AB2290DEB71D01CF0C2] - 29/04/2011 - (.Microsoft Corporation - Windows NT SMB Minirdr.) -- C:\Windows\System32\drivers\MRxSmb.sys [106496] =>.Microsoft Corporation [MD5.ECD64230A59CBD93C85F1CD1CAB9F3F6] - 11/04/2009 - (.Microsoft Corporation - MBT Transport driver.) -- C:\Windows\System32\drivers\netBT.sys [185856] =>.Microsoft Corporation [MD5.6A4A98CEE84CF9E99564510DDA4BAA47] - 11/04/2009 - (.Microsoft Corporation - Pilote du système de fichiers NT.) -- C:\Windows\System32\drivers\ntfs.sys [1083880] =>.Microsoft Windows® [MD5.0FA9B5055484649D63C303FE404E5F4D] - 02/11/2006 - (.Microsoft Corporation - Pilote de port parallèle.) -- C:\Windows\System32\drivers\Parport.sys [79360] =>.Microsoft Corporation [MD5.A214ADBAF4CB47DD2728859EF31F26B0] - 21/01/2008 - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) -- C:\Windows\System32\drivers\Rasl2tp.sys [76288] =>.Microsoft Corporation [MD5.FBC0BACD9C3D7F6956853F64A66E252D] - 21/01/2008 - (.Microsoft Corporation - Microsoft RDP Device redirector.) -- C:\Windows\System32\drivers\rdpdr.sys [248832] =>.Microsoft Corporation [MD5.7B75299A4D201D6A6533603D6914AB04] - 11/04/2009 - (.Microsoft Corporation - SMB Transport driver.) -- C:\Windows\System32\drivers\smb.sys [66560] =>.Microsoft Corporation [MD5.76B06EB8A01FC8624D699E7045303E54] - 11/04/2009 - (.Microsoft Corporation - TDI Translation Driver.) -- C:\Windows\System32\drivers\tdx.sys [72192] =>.Microsoft Corporation [MD5.147281C01FCB1DF9252DE2A10D5E7093] - 11/04/2009 - (.Microsoft Corporation - Pilote de cliché instantané du volume.) -- C:\Windows\System32\drivers\volsnap.sys [226280] =>.Microsoft Windows® ---\\ Liste des services NT non Microsoft et non désactivés (24) - 7s O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe =>.Apple Inc.® O23 - Service: NTI Backup Now 5 Agent Service (BUNAgentSvc) . (.NewTech Infosystems, Inc. - NTI Backup Now 5 Agent service..) - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe =>.NewTech InfoSystems, Inc. O23 - Service: CLHNService (CLHNService) . (.Copyright 2007 - CLHNService Module.) - C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe O23 - Service: eDataSecurity Service (eDataSecurity Service) . (.Egis Incorporated - Acer eDataSecurity Management Service.) - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe =>.EGIS TECHNOLOGY INC.® O23 - Service: Empowering Technology Service (ETService) . (.Copyright © 2007 - Acer Empowering Technology Framework Servic.) - C:\Program Files\Acer\Empowering Technology\Service\ETService.exe O23 - Service: Intel® PROSet/Wireless Event Log (EvtEng) . (.Intel(R) Corporation - Intel(R) PROSet/Wireless Event Log Service.) - C:\Program Files\Intel\WiFi\bin\EvtEng.exe =>.Intel(R) Corporation O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) . (.Intel Corporation - RAID Monitor.) - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe =>.Intel Corporation® O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) . (.Hewlett-Packard Company - .) - C:\Program Files\Common Files\LightScribe\LSSrvc.exe =>.Hewlett-Packard Company O23 - Service: Malwarebytes Service (MBAMService) . (.Malwarebytes - Malwarebytes Service.) - C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe {044E3BF58976880FFD074448A8F7A058} =>.Malwarebytes O23 - Service: McAfee Services (mcmscsvc) . (.McAfee, Inc. - McAfee Services.) - C:\Program Files\McAfee\MSC\mcmscsvc.exe {72F0EDBFF20CB89BDB3DDBF19D74D21A} =>.McAfee, Inc. O23 - Service: McAfee Network Agent (McNASvc) . (.McAfee, Inc. - McAfee Network Agent.) - c:\Program Files\Common Files\McAfee\MNA\McNASvc.exe =>.McAfee, Inc.® O23 - Service: McAfee Proxy Service (McProxy) . (.McAfee, Inc. - McAfee Proxy Service Module.) - c:\Program Files\Common Files\McAfee\McProxy\McProxy.exe {72F0EDBFF20CB89BDB3DDBF19D74D21A} =>.McAfee, Inc. O23 - Service: McAfee Real-time Scanner (McShield) . (.McAfee, Inc. - On-Access Scanner service.) - C:\Program Files\McAfee\VirusScan\Mcshield.exe {72F0EDBFF20CB89BDB3DDBF19D74D21A} =>.McAfee, Inc. O23 - Service: MobilityService (MobilityService) . (.Copyright (C) 2007 - app.) - C:\ACER\Mobility Center\MobilityService.exe O23 - Service: McAfee Personal Firewall Service (MpfService) . (.McAfee, Inc. - McAfee Personal Firewall Service.) - C:\Program Files\McAfee\MPF\MpfSrv.exe {72F0EDBFF20CB89BDB3DDBF19D74D21A} =>.McAfee, Inc. O23 - Service: McAfee Anti-Spam Service (MSK80Service) . (.McAfee, Inc. - McAfee Anti-Spam Server.) - C:\Program Files\McAfee\MSK\msksrver.exe {72F0EDBFF20CB89BDB3DDBF19D74D21A} =>.McAfee, Inc. O23 - Service: NTI Backup Now 5 Backup Service (NTIBackupSvc) . (.NewTech InfoSystems, Inc. - NTI Backup Now 5 BackupSvc Application.) - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe =>.NewTech InfoSystems, Inc. O23 - Service: NTI Backup Now 5 Scheduler Service (NTISchedulerSvc) . (...) - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe O23 - Service: NVIDIA Display Driver Service (nvsvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 176.2.) - C:\Windows\System32\nvvsvc.exe =>.NVIDIA Corporation O23 - Service: Intel® PROSet/Wireless Registry Service (RegSrvc) . (.Intel(R) Corporation - Intel(R) PROSet/Wireless Registry Service.) - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe =>.Intel(R) Corporation O23 - Service: Raw Socket Service (RS_Service) . (.Acer Incorporated - Raw Socket Service.) - C:\Program Files\Acer\Acer VCM\RS_Service.exe =>.Acer Incorporated O23 - Service: Service SiteAdvisor (SiteAdvisor Service) . (...) - C:\Program Files\SiteAdvisor\6172\SAService.exe {72F0EDBFF20CB89BDB3DDBF19D74D21A} O23 - Service: XAudioService (XAudioService) . (.Conexant Systems, Inc. - Modem Audio Service.) - C:\Windows\System32\drivers\XAudio.exe =>.Conexant Systems, Inc. O23 - Service: {49DE1C67-83F8-4102-99E0-C16DCC7EEC796} ({49DE1C67-83F8-4102-99E0-C16DCC7EEC796}) . (.Cyberlink Corp. - FCL Driver.) - C:\Program Files\Acer Arcade Deluxe\PlayMovie\000.fcl =>.CyberLink® ---\\ Services non Microsoft (SR=Démarré,SS=Stoppé) (29) - 43s SR - Auto [30/08/2011] [ 390504] Service Bonjour (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe =>.Apple Inc.® SR - Auto [03/03/2008] [ 16384] NTI Backup Now 5 Agent Service (BUNAgentSvc) . (.NewTech Infosystems, Inc..) - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe =>.NewTech InfoSystems, Inc. SR - Auto [16/01/2008] [ 81504] CLHNService (CLHNService) . (.Copyright 2007.) - C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe SR - Auto [14/05/2008] [ 500784] eDataSecurity Service (eDataSecurity Service) . (.Egis Incorporated.) - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe =>.EGIS TECHNOLOGY INC.® SR - Auto [02/06/2008] [ 24576] Empowering Technology Service (ETService) . (.Copyright © 2007.) - C:\Program Files\Acer\Empowering Technology\Service\ETService.exe SR - Auto [16/10/2008] [ 860160] Intel® PROSet/Wireless Event Log (EvtEng) . (.Intel(R) Corporation.) - C:\Program Files\Intel\WiFi\bin\EvtEng.exe =>.Intel(R) Corporation SS - Demand [06/12/2017] [ 24064] Google Desktop Manager 5.7.808.7150 (GoogleDesktopManager-080708-050100) . (.Google.) - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe =>.Google SR - Auto [20/07/2008] [ 354840] Intel(R) Matrix Storage Event Monitor (IAANTMON) . (.Intel Corporation.) - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe =>.Intel Corporation® SR - Auto [17/01/2007] [ 61440] LightScribeService Direct Disc Labeling Service (LightScribeService) . (.Hewlett-Packard Company.) - C:\Program Files\Common Files\LightScribe\LSSrvc.exe =>.Hewlett-Packard Company SS - Auto [01/11/2017] [ 4563920] Malwarebytes Service (MBAMService) . (.Malwarebytes.) - C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe {044E3BF58976880FFD074448A8F7A058} =>.Malwarebytes SR - Auto [04/08/2007] [ 749904] McAfee Services (mcmscsvc) . (.McAfee, Inc..) - C:\Program Files\McAfee\MSC\mcmscsvc.exe {72F0EDBFF20CB89BDB3DDBF19D74D21A} =>.McAfee, Inc. SR - Auto [20/03/2008] [ 2376992] McAfee Network Agent (McNASvc) . (.McAfee, Inc..) - c:\Program Files\Common Files\McAfee\MNA\McNASvc.exe =>.McAfee, Inc.® SS - Demand [25/07/2007] [ 378184] McAfee Scanner (McODS) . (.McAfee, Inc..) - C:\Program Files\McAfee\VirusScan\mcods.exe {72F0EDBFF20CB89BDB3DDBF19D74D21A} =>.McAfee, Inc. SR - Auto [15/08/2007] [ 359248] McAfee Proxy Service (McProxy) . (.McAfee, Inc..) - c:\Program Files\Common Files\McAfee\McProxy\McProxy.exe {72F0EDBFF20CB89BDB3DDBF19D74D21A} =>.McAfee, Inc. SR - Auto [24/07/2007] [ 144704] McAfee Real-time Scanner (McShield) . (.McAfee, Inc..) - C:\Program Files\McAfee\VirusScan\Mcshield.exe {72F0EDBFF20CB89BDB3DDBF19D74D21A} =>.McAfee, Inc. SR - Demand [25/07/2007] [ 695624] McAfee SystemGuards (McSysmon) . (.McAfee, Inc..) - C:\Program Files\McAfee\VirusScan\mcsysmon.exe {72F0EDBFF20CB89BDB3DDBF19D74D21A} =>.McAfee, Inc. SR - Auto [06/12/2007] [ 110592] MobilityService (MobilityService) . (.Copyright (C) 2007.) - C:\ACER\Mobility Center\MobilityService.exe SS - Demand [08/12/2017] [ 174032] Mozilla Maintenance Service (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe {0C5396DCB2949C70FAC48AB08A07338E} =>.Mozilla Foundation SR - Auto [18/07/2007] [ 856864] McAfee Personal Firewall Service (MpfService) . (.McAfee, Inc..) - C:\Program Files\McAfee\MPF\MpfSrv.exe {72F0EDBFF20CB89BDB3DDBF19D74D21A} =>.McAfee, Inc. SR - Auto [24/08/2007] [ 23880] McAfee Anti-Spam Service (MSK80Service) . (.McAfee, Inc..) - C:\Program Files\McAfee\MSK\msksrver.exe {72F0EDBFF20CB89BDB3DDBF19D74D21A} =>.McAfee, Inc. SR - Auto [25/04/2008] [ 45056] NTI Backup Now 5 Backup Service (NTIBackupSvc) . (.NewTech InfoSystems, Inc..) - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe =>.NewTech InfoSystems, Inc. SR - Auto [25/04/2008] [ 131072] NTI Backup Now 5 Scheduler Service (NTISchedulerSvc) . (...) - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe SR - Auto [18/07/2008] [ 196608] NVIDIA Display Driver Service (nvsvc) . (.NVIDIA Corporation.) - C:\Windows\System32\nvvsvc.exe =>.NVIDIA Corporation SR - Auto [16/10/2008] [ 466944] Intel® PROSet/Wireless Registry Service (RegSrvc) . (.Intel(R) Corporation.) - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe =>.Intel(R) Corporation SR - Auto [10/01/2008] [ 233472] Raw Socket Service (RS_Service) . (.Acer Incorporated.) - C:\Program Files\Acer\Acer VCM\RS_Service.exe =>.Acer Incorporated SR - Auto [25/07/2008] [ 341280] Service SiteAdvisor (SiteAdvisor Service) . (...) - C:\Program Files\SiteAdvisor\6172\SAService.exe {72F0EDBFF20CB89BDB3DDBF19D74D21A} SR - Auto [18/10/2007] [ 386560] XAudioService (XAudioService) . (.Conexant Systems, Inc..) - C:\Windows\System32\drivers\XAudio.exe =>.Conexant Systems, Inc. SS - Auto [18/07/2008] [ 61424] {49DE1C67-83F8-4102-99E0-C16DCC7EEC796} ({49DE1C67-83F8-4102-99E0-C16DCC7EEC796}) . (.Cyberlink Corp..) - C:\Program Files\Acer Arcade Deluxe\PlayMovie\000.fcl =>.CyberLink® ---\\ Tâches planifiées en automatique (11) - 3s [MD5.C3F336112905EFBD6B2AD24673452F1A] [APT] [CCleaner Update] (.Piriform Ltd.) -- C:\Program Files\CCleaner\CCUpdate.exe [498480] {3D3C455A5C7B7B2666915EB21857D7EA} =>.Piriform Ltd [MD5.2954A8E9E00E3AB786C9BA6C8C1C819D] [APT] [CCleanerSkipUAC] (.Piriform Ltd.) -- C:\Program Files\CCleaner\CCleaner.exe [7814600] {3D3C455A5C7B7B2666915EB21857D7EA} =>.Piriform Ltd [MD5.8694CA01D4740F3836D0CA7153D75B28] [APT] [McDefragTask] (.McAfee, Inc..) -- c:\Program Files\McAfee\MQC\QcConsol.exe [222496] {72F0EDBFF20CB89BDB3DDBF19D74D21A} =>.McAfee, Inc. [MD5.8694CA01D4740F3836D0CA7153D75B28] [APT] [McQcTask] (.McAfee, Inc..) -- c:\Program Files\McAfee\MQC\QcConsol.exe [222496] {72F0EDBFF20CB89BDB3DDBF19D74D21A} =>.McAfee, Inc. [MD5.BC41666FF68C364CD3EAA486E50C9270] [APT] [Apple\AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files\Apple Software Update\SoftwareUpdate.exe [563000] =>.Apple Inc.® O39 - APT: McDefragTask - (.McAfee, Inc..) -- C:\Windows\Tasks\McDefragTask.job [368] =>.McAfee, Inc. O39 - APT: McQcTask - (.McAfee, Inc..) -- C:\Windows\Tasks\McQcTask.job [348] =>.McAfee, Inc. O39 - APT: CCleaner Update - (.Piriform Ltd.) -- C:\Windows\System32\Tasks\CCleaner Update [3786] =>.Piriform Ltd O39 - APT: CCleanerSkipUAC - (.Piriform Ltd.) -- C:\Windows\System32\Tasks\CCleanerSkipUAC [2804] =>.Piriform Ltd O39 - APT: McDefragTask - (.McAfee, Inc..) -- C:\Windows\System32\Tasks\McDefragTask [3734] =>.McAfee, Inc. O39 - APT: McQcTask - (.McAfee, Inc..) -- C:\Windows\System32\Tasks\McQcTask [3800] =>.McAfee, Inc. ---\\ Processus lancés (46) - 4s [MD5.15315BB51E9025FE41B482681C6E7BA2] - (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 176.2.) -- C:\Windows\System32\nvvsvc.exe [196608] [PID.920] =>.NVIDIA Corporation [MD5.DB5BEA73EDAF19AC68B2C0FAD0F92B1A] - (.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe [390504] [PID.1812] =>.Apple Inc.® [MD5.09E6AFFAE6C0E9158BF05C7D08D0107A] - (.NewTech Infosystems, Inc. - NTI Backup Now 5 Agent service..) -- C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe [16384] [PID.1840] =>.NewTech InfoSystems, Inc. [MD5.5CA9B1062C0C3E3AE19C23AD9D8A5048] - (.Copyright 2007 - CLHNService Module.) -- C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe [81504] [PID.1852] [MD5.2CE2DDCB1A41ED4488A2A8B98D286B3D] - (.Egis Incorporated - Acer eDataSecurity Management Service.) -- C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe [500784] [PID.1884] =>.EGIS TECHNOLOGY INC.® [MD5.27D2754314D12EB27D81D462FD0D86C0] - (.Copyright © 2007 - Acer Empowering Technology Framework Servic.) -- C:\Program Files\Acer\Empowering Technology\Service\ETService.exe [24576] [PID.1984] [MD5.54B6E150BFF4A47EB0D204119D262E46] - (.Intel(R) Corporation - Intel(R) PROSet/Wireless Event Log Service.) -- C:\Program Files\Intel\WiFi\bin\EvtEng.exe [860160] [PID.316] =>.Intel(R) Corporation [MD5.3E42C4691AAD4B1E8D0466F9CBF05CBE] - (.Intel Corporation - RAID Monitor.) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe [354840] [PID.420] =>.Intel Corporation® [MD5.793FF718477345CD5D232C50BED1E452] - (.Hewlett-Packard Company - .) -- C:\Program Files\Common Files\LightScribe\LSSrvc.exe [61440] [PID.468] =>.Hewlett-Packard Company [MD5.8CF3DA0BE6094C34D7C4A85493E60547] - (.McAfee, Inc. - McAfee Proxy Service Module.) -- c:\Program Files\Common Files\McAfee\McProxy\McProxy.exe [359248] [PID.1080] {72F0EDBFF20CB89BDB3DDBF19D74D21A} =>.McAfee, Inc. [MD5.33734ABFA52EC8D096A1254D645E9B4F] - (.McAfee, Inc. - On-Access Scanner service.) -- C:\Program Files\McAfee\VirusScan\Mcshield.exe [144704] [PID.1644] {72F0EDBFF20CB89BDB3DDBF19D74D21A} =>.McAfee, Inc. [MD5.1E1A308F4229FAB0011A0745EE8377AE] - (.Copyright (C) 2007 - app.) -- C:\ACER\Mobility Center\MobilityService.exe [110592] [PID.2080] [MD5.346F30F1FF73553AA466F4AE7948DA00] - (.McAfee, Inc. - McAfee Personal Firewall Service.) -- C:\Program Files\McAfee\MPF\MpfSrv.exe [856864] [PID.2412] {72F0EDBFF20CB89BDB3DDBF19D74D21A} =>.McAfee, Inc. [MD5.3E7BE74C4088F18838A55A0F6AC2B6F1] - (.McAfee, Inc. - McAfee Anti-Spam Server.) -- C:\Program Files\McAfee\MSK\msksrver.exe [23880] [PID.2532] {72F0EDBFF20CB89BDB3DDBF19D74D21A} =>.McAfee, Inc. [MD5.A2B6583A5652A385DFF5E4F49AD48761] - (.NewTech InfoSystems, Inc. - NTI Backup Now 5 BackupSvc Application.) -- C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe [45056] [PID.2728] =>.NewTech InfoSystems, Inc. [MD5.40B87FE8A1A9A5AC9E5A91D96F212BCD] - (...) -- C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [131072] [PID.2808] [MD5.3FF45B7F17D5837216ABAE652CC61540] - (.Intel(R) Corporation - Intel(R) PROSet/Wireless Registry Service.) -- C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [466944] [PID.3024] =>.Intel(R) Corporation [MD5.73835C4F79ADC404EF39C8A9E2D4183B] - (.Acer Incorporated - Raw Socket Service.) -- C:\Program Files\Acer\Acer VCM\RS_Service.exe [233472] [PID.3080] =>.Acer Incorporated [MD5.DAEBFA1E3F7491F1C1F73F9451CB3D0E] - (...) -- C:\Program Files\SiteAdvisor\6172\SAService.exe [341280] [PID.3104] {72F0EDBFF20CB89BDB3DDBF19D74D21A} [MD5.CD5F291A1161F15896D1A4D63DAFF5DF] - (.Conexant Systems, Inc. - Modem Audio Service.) -- C:\Windows\System32\drivers\XAudio.exe [386560] [PID.3336] =>.Conexant Systems, Inc. [MD5.6309670BF9BF87C05F2C68DE2B73BA9E] - (.McAfee, Inc. - McAfee Services.) -- C:\Program Files\McAfee\MSC\mcmscsvc.exe [749904] [PID.3800] {72F0EDBFF20CB89BDB3DDBF19D74D21A} =>.McAfee, Inc. [MD5.9405B452064BFA6A0F78E2F177A988A4] - (.McAfee, Inc. - McAfee Integrated Security Platform.) -- c:\Program Files\McAfee.com\Agent\mcagent.exe [582992] [PID.3204] {72F0EDBFF20CB89BDB3DDBF19D74D21A} =>.McAfee, Inc. [MD5.D3804513FC9C11A4637392B4F0F43BC5] - (.Intel Corporation - Event Monitor User Notification Tool.) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe [182808] [PID.788] =>.Intel Corporation® [MD5.E6CB83FF2C098C6FFCF2D43A4AAC9B54] - (.Realtek Semiconductor - HD Audio Control Panel.) -- C:\Windows\RtHDVCpl.exe [6139904] [PID.1556] =>.Realtek Semiconductor [MD5.5C080C61235C74568C2978FC7E602AE0] - (.Synaptics, Inc. - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1049896] [PID.3684] =>.Synaptics Incorporated® [MD5.7C25BB17B1DEC6939EB510B6A5857809] - (...) -- C:\Program Files\SiteAdvisor\6172\SiteAdv.exe [36640] [PID.496] {72F0EDBFF20CB89BDB3DDBF19D74D21A} [MD5.A9E634BBEDC2B41162767ED7F7DD9646] - (.Egis Incorporated - Acer eDataSecurity Management Loader.) -- C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSLoader.exe [526896] [PID.3388] =>.EGIS TECHNOLOGY INC.® [MD5.5C1E89C623A710DDC6B7856CB98C82AE] - (.Acer Incorporated - Notification tool for RealTek audio chip.) -- C:\Program Files\Acer\Empowering Technology\eAudio\eAudio.exe [544768] [PID.3312] =>.Acer Incorporated [MD5.D7EE83A9257D508656172A2B9DD3C317] - (.Copyright (c)2005-2007, NewTech Infosystems, Inc. All - NTI Backup Now 5 Tray Module.) -- C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe [28672] [PID.3344] [MD5.2AC7F8B8BF0D5D327A3A2A00453222C4] - (.Copyright (C) 2007 - DefaultSettingEXE MFC Application.) -- C:\Windows\PLFSetI.exe [200704] [PID.932] [MD5.B2994EC6452DBD04E57828EEFEDFB93C] - (.Realtek Semiconductor Corp. - Realtek HD Audio Data Rerouter.) -- C:\Users\Gilbert\AppData\Local\Temp\RtkBtMnt.exe [204800] [PID.4576] =>.Realtek Semiconductor Corp. [MD5.545DE8DD46B9C4C20E84DE9532C39FF4] - (.Dritek System Inc. - Launch Manager.) -- C:\Program Files\Launch Manager\QtZgAcer.EXE [817672] [PID.5132] =>.Dritek System Inc.® [MD5.03726930815B2F8369C733315A298658] - (.Acer Inc. - Acer ePower Management - DMC.) -- C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe [405504] [PID.5144] =>.Acer Inc. [MD5.014F2D0F3CA9EE44CEEE85A50CB7C280] - (.CyberLink Corp. - Acer Arcade Deluxe Resident Program.) -- C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe [147456] [PID.5160] =>.CyberLink Corp. [MD5.F4CE6CAB2B114520B94ED3BC6FF10F21] - (.CyberLink - CyberLink MediaLibray Service.) -- C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMLSvc.exe [167936] [PID.5172] =>.CyberLink [MD5.9A4C3587A330CEAF6CFCF47FAFAEAB1A] - (.Acer Corp. - Acer Arcade Deluxe PlayMovie Resident Progr.) -- C:\Program Files\Acer Arcade Deluxe\PlayMovie\PMVService.exe [167936] [PID.5192] [MD5.255E405D801CF01247390F38F92D8042] - (...) -- C:\Program Files\Unlocker\UnlockerAssistant.exe [17408] [PID.5220] [MD5.65FF2F0B0AAFCA4720186C4C2F4822CE] - (.McAfee, Inc. - McAfee SystemGuards Service.) -- C:\Program Files\McAfee\VirusScan\mcsysmon.exe [695624] [PID.5996] {72F0EDBFF20CB89BDB3DDBF19D74D21A} =>.McAfee, Inc. [MD5.5E25F0B6F0BB3F2A880598AF1BA36174] - (.McAfee, Inc. - McAfee Network Agent.) -- c:\Program Files\Common Files\McAfee\MNA\McNASvc.exe [2376992] [PID.3680] =>.McAfee, Inc.® [MD5.D641DB524C3D9A1AB72F94BDC6FF27D7] - (.Synaptics, Inc. - Synaptics Pointing Device Helper.) -- C:\Program Files\Synaptics\SynTP\SynTPHelper.exe [103720] [PID.3264] =>.Synaptics Incorporated® [MD5.278FE7C13CF137961699DCA9F90C883B] - (.acer - Acer Empowering Technology Framework Notifi.) -- C:\Program Files\Acer\Empowering Technology\NotificationCenter\Framework.NotificationCenter.exe [376832] [PID.2196] =>.Acer [MD5.7F73B83E2C975B5057D36625FA3D1A71] - (.Microsoft Corp. - Module de défragmenteur de disque.) -- C:\Windows\System32\Defrag.exe [226816] [PID.2104] =>.Microsoft Corp. [MD5.5C58F73D55DB850C47A1A8B193BDBF1B] - (.Microsoft Corp. - Module NTFS du défragmenteur de disque.) -- C:\Windows\System32\DfrgNtfs.exe [163840] [PID.5016] =>.Microsoft Corp. [MD5.7980542A79DA567C75068056757F596F] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe [517072] [PID.3708] {0C5396DCB2949C70FAC48AB08A07338E} =>.Mozilla Corporation [MD5.7980542A79DA567C75068056757F596F] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe [517072] [PID.2112] {0C5396DCB2949C70FAC48AB08A07338E} =>.Mozilla Corporation [MD5.FF9CE0FC9E3B4BC22001764A9EFE4741] - (.Nicolas Coolman - ZHPDiag.) -- C:\Users\Gilbert\Downloads\ZHPDiag3.exe [2105344] [PID.5636] =>.Nicolas Coolman ---\\ Firefox, Plugins,Demarrage,Recherche,Extensions (2) - 1s P2 - EXT FILE: (...) -- C:\Users\Gilbert\AppData\Roaming\Mozilla\Firefox\Profiles\y5kac944.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi P2 - EXT: (...) -- C:\Users\Gilbert\AppData\Roaming\Mozilla\Firefox\Profiles\y5kac944.default\extensions\trash ---\\ Internet Explorer,Démarrage,Recherche,URLSearchHook (13) - 0s R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://homepage.acer.com/ R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/ R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://global.acer.com R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/ R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/ R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphean =>.Microsoft Internet Explorer R4 - HKCU\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,Enabled = 0 ---\\ Internet Explorer,Proxy Management (6) - 0s R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll ---\\ Internet Explorer,IniFiles, Autoloading programs (3) - 0s F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe (.Microsoft Corporation.) =>.Microsoft Corporation F2 - REG:system.ini: Shell=C:\Windows\explorer.exe (.Microsoft Corporation.) =>.Microsoft Corporation F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl" ---\\ Etude du fichier hosts (1) - 0s ~ Le fichier hôte est sain (The hosts file is clean) (20) ---\\ Browser Helper Object de navigateur (BHO) (6) - 0s O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} (Orphean) O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll =>.Adobe Systems, Incorporated® O2 - BHO: (no name) - {089FD14D-132B-48FC-8861-0048AE113215} . (...) -- C:\Program Files\SiteAdvisor\6172\SiteAdv.dll {72F0EDBFF20CB89BDB3DDBF19D74D21A} O2 - BHO: McAntiPhishingBHO - {377C180E-6F0E-4D4C-980F-F45BD3D40CF4} . (...) -- c:\Program Files\McAfee\MSK\mcapbho.dll {72F0EDBFF20CB89BDB3DDBF19D74D21A} O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} . (.McAfee, Inc. - VSCore Script Scanner.) -- C:\Program Files\McAfee\VirusScan\scriptsn.dll =>.McAfee, Inc.® O2 - BHO: ShowBarObj Class - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} . (.Egis - ActiveToolBand Module.) -- C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\ActiveToolBand.dll =>.EGIS TECHNOLOGY INC.® ---\\ Internet Explorer, Barre d'outil (1) - 0s O3 - Toolbar: McAfee SiteAdvisor - [HKLM]{0BF43445-2F28-4351-9252-17FE6E806AA0} . (...) -- C:\Program Files\SiteAdvisor\6172\SiteAdv.dll {72F0EDBFF20CB89BDB3DDBF19D74D21A} ---\\ Applications lancées au démarrage du système (29) - 1s O4 - HKLM\..\Run: [Windows Defender] . (.Microsoft Corporation - Windows Defender User Interface.) -- C:\Program Files\Windows Defender\MSASCui.exe =>.Microsoft Windows® O4 - HKLM\..\Run: [IAAnotif] . (.Intel Corporation - Event Monitor User Notification Tool.) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe =>.Intel Corporation® O4 - HKLM\..\Run: [RtHDVCpl] . (.Realtek Semiconductor - HD Audio Control Panel.) -- C:\Windows\RtHDVCpl.exe =>.Realtek Semiconductor O4 - HKLM\..\Run: [SynTPEnh] . (.Synaptics, Inc. - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe =>.Synaptics Incorporated® O4 - HKLM\..\Run: [mcagent_exe] . (.McAfee, Inc. - McAfee Integrated Security Platform.) -- C:\Program Files\McAfee.com\Agent\mcagent.exe {72F0EDBFF20CB89BDB3DDBF19D74D21A} =>.McAfee, Inc. O4 - HKLM\..\Run: [SiteAdvisor] . (...) -- C:\Program Files\SiteAdvisor\6172\SiteAdv.exe {72F0EDBFF20CB89BDB3DDBF19D74D21A} O4 - HKLM\..\Run: [eDataSecurity Loader] . (.Egis Incorporated - Acer eDataSecurity Management Loader.) -- C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe =>.EGIS TECHNOLOGY INC.® O4 - HKLM\..\Run: [eAudio] . (.Acer Incorporated - Notification tool for RealTek audio chip.) -- C:\Program Files\Acer\Empowering Technology\eAudio\eAudio.exe =>.Acer Incorporated O4 - HKLM\..\Run: [BkupTray] . (.Copyright (c)2005-2007, NewTech Infosystems, Inc. All - NTI Backup Now 5 Tray Module.) -- C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe =>.Adobe Systems, Incorporated® O4 - HKLM\..\Run: [WarReg_PopUp] . (.Acer Incorporated - WR_PopUp.) -- C:\Program Files\Acer\WR_PopUp\WarReg_PopUp.exe =>.Acer Incorporated O4 - HKLM\..\Run: [Google Desktop Search] . (.Google - Google Desktop.) -- C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe =>.Google O4 - HKLM\..\Run: [NvCplDaemon] . (.Microsoft Corporation - Processus hôte Windows (Rundll32).) -- C:\Windows\System32\RUNDLL32.EXE =>.Microsoft Corporation O4 - HKLM\..\Run: [NvMediaCenter] . (.Microsoft Corporation - Processus hôte Windows (Rundll32).) -- C:\Windows\System32\RUNDLL32.EXE =>.Microsoft Corporation O4 - HKLM\..\Run: [PLFSetI] . (.Copyright (C) 2007 - DefaultSettingEXE MFC Application.) -- C:\Windows\PLFSetI.exe O4 - HKLM\..\Run: [LManager] . (.Dritek System Inc. - Launch Manager.) -- C:\Program Files\Launch Manager\QtZgAcer.EXE =>.Dritek System Inc.® O4 - HKLM\..\Run: [eRecoveryService] (Orphean) O4 - HKLM\..\Run: [ePower_DMC] . (.Acer Inc. - Acer ePower Management - DMC.) -- C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe =>.Acer Inc. O4 - HKLM\..\Run: [ArcadeDeluxeAgent] . (.CyberLink Corp. - Acer Arcade Deluxe Resident Program.) -- C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe =>.CyberLink Corp. O4 - HKLM\..\Run: [CLMLServer] . (.CyberLink - CyberLink MediaLibray Service.) -- C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMLSvc.exe =>.CyberLink O4 - HKLM\..\Run: [PlayMovie] . (.Acer Corp. - Acer Arcade Deluxe PlayMovie Resident Progr.) -- C:\Program Files\Acer Arcade Deluxe\PlayMovie\PMVService.exe O4 - HKLM\..\Run: [Skytel] . (.Realtek Semiconductor Corp. - Realtek Voice Manager.) -- C:\Windows\Skytel.exe =>.Realtek Semiconductor Corp. O4 - HKLM\..\Run: [UnlockerAssistant] . (...) -- C:\Program Files\Unlocker\UnlockerAssistant.exe O4 - HKCU\..\Run: [CCleaner Monitoring] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner.exe {3D3C455A5C7B7B2666915EB21857D7EA} =>.Piriform Ltd O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] . (.Microsoft Corporation - Processus hôte Windows (Rundll32).) -- C:\Windows\System32\rundll32.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-20\..\Run: [WindowsWelcomeCenter] . (.Microsoft Corporation - Processus hôte Windows (Rundll32).) -- C:\Windows\System32\rundll32.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-21-4281881136-407548535-2616168793-1000\..\Run: [CCleaner Monitoring] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner.exe {3D3C455A5C7B7B2666915EB21857D7EA} =>.Piriform Ltd ---\\ Raccourcis Global Startup (7) - 2s O4 - GS\Desktop [Administrateur]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\Gilbert\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman O4 - GS\Quicklaunch [Administrateur]: Apple Safari.lnk . (...) C:\Windows\Installer\{C779648B-410E-4BBA-B75B-5815BCEFE71D}\SafariIco.exe O4 - GS\Quicklaunch [Administrateur]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files\Mozilla Firefox\firefox.exe {0C5396DCB2949C70FAC48AB08A07338E} =>.Mozilla Corporation O4 - GS\Desktop [Gilbert]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\Gilbert\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman O4 - GS\Quicklaunch [Gilbert]: Apple Safari.lnk . (...) C:\Windows\Installer\{C779648B-410E-4BBA-B75B-5815BCEFE71D}\SafariIco.exe O4 - GS\Quicklaunch [Gilbert]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files\Mozilla Firefox\firefox.exe {0C5396DCB2949C70FAC48AB08A07338E} =>.Mozilla Corporation O4 - GS\SystemTools [Public]: Task Scheduler.lnk . (...) C:\Windows\System32\taskschd.msc ---\\ Modification Domaine/Adresses DNS (2) - 0s O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{36DF85E5-0AB8-4A41-991C-B9A76F78DB07}: DhcpNameServer = 192.168.1.1 192.168.1.1 ---\\ Protocole additionnel (26) - 1s O18 - Handler: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\MSVidCtl.dll =>.Microsoft Corporation O18 - Handler: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation O18 - Handler: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation O18 - Handler: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation O18 - Handler: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation O18 - Handler: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll =>.Microsoft Corporation O18 - Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation O18 - Handler: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation O18 - Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\System32\inetcomm.dll =>.Microsoft Corporation O18 - Handler: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation O18 - Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} . (.Microsoft Corporation - Microsoft® Help Data Services Module.) -- C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll =>.Microsoft Corporation® O18 - Handler: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll =>.Microsoft Corporation O18 - Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- c:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll =>.Microsoft Corporation O18 - Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation O18 - Handler: siteadvisor - {3A5DC592-7723-4EAA-9EE6-AF4222BCF879} . (...) -- C:\Program Files\SiteAdvisor\6172\SiteAdv.dll {72F0EDBFF20CB89BDB3DDBF19D74D21A} O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\MSVidCtl.dll =>.Microsoft Corporation O18 - Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation O18 - Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation® O18 - Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation® O18 - Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation® O18 - Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation O18 - Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation O18 - Filter: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL =>.Microsoft Corporation® ---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (1) - 0s O20 - AppInit_DLLs: . (.Google - Google Desktop.) - C:\Program Files\Google\Google Desktop Search\GoogleDesktopNetwork3.dll ---\\ Logiciels installés (46) - 16s O42 - Logiciel: Acer Arcade Deluxe - (.CyberLink Corp..) [HKLM] -- {2637C347-9DAD-11D6-9EA2-00055D0CA761} =>.CyberLink® O42 - Logiciel: Acer Arcade Deluxe - (.CyberLink Corp..) [HKLM] -- InstallShield_{2637C347-9DAD-11D6-9EA2-00055D0CA761} =>.CyberLink® O42 - Logiciel: Acer Crystal Eye Webcam 2.0.8 - (.SuYin.) [HKLM] -- {A77255C4-AFCB-44A3-BF0F-2091A71FFD9E} =>.Macrovision Corporation® O42 - Logiciel: Acer eAudio Management - (.CyberLink Corp..) [HKLM] -- {57265292-228A-41FA-9AEC-4620CBCC2739} =>.CyberLink® O42 - Logiciel: Acer eDataSecurity Management - (.Egis Inc..) [HKLM] -- {A5633652-3795-4829-BB0B-644F0279E279} =>.EGIS TECHNOLOGY INC.® O42 - Logiciel: Acer Empowering Technology - (.Acer Incorporated.) [HKLM] -- {8F1B6239-FEA0-450A-A950-B05276CE177C} =>.Acer Incorporated® O42 - Logiciel: Acer ePower Management - (.Acer Incorporated.) [HKLM] -- {58E5844B-7CE2-413D-83D1-99294BF6C74F} =>.Acer Incorporated® O42 - Logiciel: Acer eRecovery Management - (.Acer Incorporated.) [HKLM] -- {7F811A54-5A09-4579-90E1-C93498E230D9} =>.Acer Incorporated® O42 - Logiciel: Acer eSettings Management - (.Acer Incorporated.) [HKLM] -- {13D85C14-2B85-419F-AC41-C7F21E68B25D} =>.Acer Incorporated® O42 - Logiciel: Acer GridVista - (...) [HKLM] -- GridVista =>.Dritek System Inc.® O42 - Logiciel: Acer Mobility Center Plug-In - (.Acer Inc..) [HKLM] -- {11316260-6666-467B-AC34-183FCB5D4335} =>.Acer Inc. O42 - Logiciel: Acer ScreenSaver - (.Acer Incorporated.) [HKLM] -- {79DD56FC-DB8B-47F5-9C80-78B62E05F9BC} =>.Acer Incorporated O42 - Logiciel: Acer VCM - (.Acer Incorporated.) [HKLM] -- {047F790A-7A2A-4B6A-AD02-38092BA63DAC} =>.Acer Incorporated O42 - Logiciel: Adobe Flash Player ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX =>.Adobe Systems Incorporated O42 - Logiciel: Adobe Reader 8.1.0 - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1033-7B44-A81000000003} =>.Adobe Systems Incorporated O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM] -- {FFD1F7F1-1AC9-4BC4-A908-0686D635ABAF} =>.Apple Inc. O42 - Logiciel: Atheros Communications Inc.(R) AR8121/AR8113/AR8114 Gigabit/Fast Ethernet D - (.Atheros Communications Inc..) [HKLM] -- {3108C217-BE83-42E4-AE9E-A56A2A92E549} =>.Atheros Communications Inc. O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM] -- {79155F2B-9895-49D7-8612-D92580E0DE5B} =>.Apple Inc. O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner {3D3C455A5C7B7B2666915EB21857D7EA} =>.Piriform O42 - Logiciel: Google Desktop - (.Google.) [HKLM] -- Google Desktop =>.Google O42 - Logiciel: HDAUDIO Soft Data Fax Modem with SmartCP - (.Conexant Systems.) [HKLM] -- CNXT_MODEM_HDA_HSF =>.Conexant Systems, Inc.® O42 - Logiciel: Intel PROSet Wireless - (...) [HKLM] -- ProInst O42 - Logiciel: Intel® Matrix Storage Manager - (.Intel Corporation.) [HKLM] -- {9068B2BE-D93A-4C0A-861C-5E35E2C0E09E} =>.Intel Corporation® O42 - Logiciel: Launch Manager - (...) [HKLM] -- LManager =>.Dritek System Inc.® O42 - Logiciel: LightScribe 1.4.142.1 - (.http://www.lightscribe.com.) [HKLM] -- {CE386A4E-D0DA-4208-8235-BCE43275C694} =>.http://www.lightscribe.com O42 - Logiciel: Logiciel Intel(R) PROSet/Wireless WiFi - (.Intel(R) Corporation.) [HKLM] -- {35C0A1E4-D02A-412C-841F-266DBB116ABB} =>.Intel(R) Corporation O42 - Logiciel: Malwarebytes version 3.3.1.2183 - (.Malwarebytes.) [HKLM] -- {35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1 {044E3BF58976880FFD074448A8F7A058} =>.Malwarebytes O42 - Logiciel: McAfee SecurityCenter - (.McAfee, Inc..) [HKLM] -- MSC {72F0EDBFF20CB89BDB3DDBF19D74D21A} =>.McAfee, Inc. O42 - Logiciel: Microsoft Works - (.Microsoft Corporation.) [HKLM] -- {6B1CB38D-E2E4-4a30-933D-EFDEBA76AD9C} =>.Microsoft Corporation O42 - Logiciel: Mozilla Firefox 52.5.2 ESR (x86 fr) - (.Mozilla.) [HKLM] -- Mozilla Firefox 52.5.2 ESR (x86 fr) {0C5396DCB2949C70FAC48AB08A07338E} =>.Mozilla O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM] -- MozillaMaintenanceService =>.Mozilla O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71} =>.Microsoft Corporation O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC} =>.Microsoft Corporation O42 - Logiciel: NTI Backup Now 5 - (.NewTech Infosystems.) [HKLM] -- InstallShield_{12EFA1A4-AC3B-443C-8143-237EDE760403} =>.NewTech Infosystems, Inc® O42 - Logiciel: NTI Backup Now Standard - (.NewTech Infosystems.) [HKLM] -- {12EFA1A4-AC3B-443C-8143-237EDE760403} =>.NewTech Infosystems O42 - Logiciel: NTI Media Maker 8 - (.NewTech Infosystems.) [HKLM] -- {2413930C-8309-47A6-BC61-5EF27A4222BC} =>.NewTech Infosystems O42 - Logiciel: NTI Media Maker 8 - (.NewTech Infosystems.) [HKLM] -- InstallShield_{2413930C-8309-47A6-BC61-5EF27A4222BC} =>.NewTech Infosystems O42 - Logiciel: NVIDIA Drivers - (...) [HKLM] -- NVIDIA Drivers O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC} =>.Realtek Semiconductor Corp. O42 - Logiciel: Realtek USB 2.0 Card Reader - (.Realtek Semiconductor Corp..) [HKLM] -- {DC24971E-1946-445D-8A82-CE685433FA7D} =>.Realtek Semiconductor Corp. O42 - Logiciel: Safari - (.Apple Inc..) [HKLM] -- {C779648B-410E-4BBA-B75B-5815BCEFE71D} =>.Apple Inc. O42 - Logiciel: Synaptics Pointing Device Driver - (.Synaptics.) [HKLM] -- SynTPDeinstKey =>.Synaptics O42 - Logiciel: Unlocker 1.9.2 - (.Cedrick Collomb.) [HKLM] -- Unlocker =>.Cedrick Collomb O42 - Logiciel: Update for Office 2007 (KB946691) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{A420F522-7395-4872-9882-C591B4B92278} =>.Microsoft O42 - Logiciel: VLC media player - (.VideoLAN.) [HKLM] -- VLC media player =>.VideoLAN O42 - Logiciel: Winbond CIR Device Drivers - (.Winbond Electronics Corporation.) [HKLM] -- {10F498FF-5392-4DF3-8F73-FE172A9F3800} =>.Winbond Electronics Corporation ---\\ HKCU & HKLM Software Keys (71) - 16s HKLM\SOFTWARE\Acer HKLM\SOFTWARE\Acer Inc. HKLM\SOFTWARE\Acer Incorporated HKLM\SOFTWARE\Adobe HKLM\SOFTWARE\America Online HKLM\SOFTWARE\Apple Computer, Inc. HKLM\SOFTWARE\Apple Inc. HKLM\SOFTWARE\Atheros Communications Inc. HKLM\SOFTWARE\Conexant HKLM\SOFTWARE\Conexant Systems HKLM\SOFTWARE\CXT HKLM\SOFTWARE\CyberLink HKLM\SOFTWARE\Google HKLM\SOFTWARE\InstalledOptions HKLM\SOFTWARE\Intel HKLM\SOFTWARE\LightScribe HKLM\SOFTWARE\Macromedia HKLM\SOFTWARE\McAfee HKLM\SOFTWARE\McAfee.com HKLM\SOFTWARE\MimarSinan HKLM\SOFTWARE\Mozilla HKLM\SOFTWARE\mozilla.org HKLM\SOFTWARE\MozillaPlugins HKLM\SOFTWARE\NewTech Infosystems HKLM\SOFTWARE\nSplitter HKLM\SOFTWARE\NVIDIA Corporation HKLM\SOFTWARE\ODBC HKLM\SOFTWARE\OemSetup HKLM\SOFTWARE\Piriform HKLM\SOFTWARE\Quanta HKLM\SOFTWARE\Realtek HKLM\SOFTWARE\Realtek Semiconductor Corp. HKLM\SOFTWARE\Realtek USB 2.0 Card Reader HKLM\SOFTWARE\RegisteredApplications HKLM\SOFTWARE\SiteAdvisor HKLM\SOFTWARE\Sonic HKLM\SOFTWARE\SRS Labs HKLM\SOFTWARE\SuYin HKLM\SOFTWARE\Synaptics HKLM\SOFTWARE\VideoLAN HKLM\SOFTWARE\Waves Audio HKLM\SOFTWARE\Winbond Electronics Corporation HKLM\SOFTWARE\WOW6432Node HKLM\SOFTWARE\XPeFlag HKCU\SOFTWARE\Acer HKCU\SOFTWARE\AcerUtil HKCU\SOFTWARE\Adobe HKCU\SOFTWARE\AppDataLow HKCU\SOFTWARE\Apple Computer, Inc. HKCU\SOFTWARE\Apple Inc. HKCU\SOFTWARE\CyberLink HKCU\SOFTWARE\Google HKCU\SOFTWARE\Local AppWizard-Generated Applications HKCU\SOFTWARE\Malwarebytes HKCU\SOFTWARE\McAfee HKCU\SOFTWARE\Mozilla HKCU\SOFTWARE\Netscape HKCU\SOFTWARE\nSplitter HKCU\SOFTWARE\NVIDIA Corporation HKCU\SOFTWARE\ODBC HKCU\SOFTWARE\Piriform HKCU\SOFTWARE\Quanta HKCU\SOFTWARE\Realtek HKCU\SOFTWARE\SiteAdvisor HKCU\SOFTWARE\Sonix HKCU\SOFTWARE\Synaptics HKCU\SOFTWARE\VB and VBA Program Settings HKCU\SOFTWARE\Widcomm HKCU\SOFTWARE\Yahoo =>.Yahoo! HKCU\SOFTWARE\ZebHelpProcess Helper HKCU\SOFTWARE\AppDataLow\Software ---\\ Contenu des dossiers Programmes (160) - 19s O43 - CFD: 06/12/2017 - [] D -- C:\Program Files\Acer O43 - CFD: 06/12/2017 - [] D -- C:\Program Files\Acer Arcade Deluxe =>.CyberLink® O43 - CFD: 06/12/2017 - [] D -- C:\Program Files\Acer GameZone O43 - CFD: 06/12/2017 - [] D -- C:\Program Files\Acer Inc =>.Dritek System Inc.® O43 - CFD: 06/12/2017 - [] D -- C:\Program Files\Acer Incorporated O43 - CFD: 25/07/2008 - [] D -- C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites O43 - CFD: 25/07/2008 - [] D -- C:\Program Files\Adobe =>.Adobe Systems, Incorporated® O43 - CFD: 12/12/2017 - [] D -- C:\Program Files\Apple Software Update =>.Apple Inc.® O43 - CFD: 12/12/2017 - [] D -- C:\Program Files\BDServices O43 - CFD: 25/07/2008 - [] D -- C:\Program Files\Big Kahuna Reef O43 - CFD: 08/12/2017 - [] D -- C:\Program Files\Bonjour =>.Apple Inc.® O43 - CFD: 07/12/2017 - [] D -- C:\Program Files\CCleaner {3D3C455A5C7B7B2666915EB21857D7EA} O43 - CFD: 06/12/2017 - [] D -- C:\Program Files\Cisco O43 - CFD: 11/12/2017 - [] D -- C:\Program Files\Common Files O43 - CFD: 25/07/2008 - [] D -- C:\Program Files\CONEXANT =>.Conexant Systems, Inc.® O43 - CFD: 12/12/2017 - [] D -- C:\Program Files\Cyberlink O43 - CFD: 06/12/2017 - [0] SHD -- C:\Program Files\Fichiers communs O43 - CFD: 06/12/2017 - [] D -- C:\Program Files\Google O43 - CFD: 12/12/2017 - [] HD -- C:\Program Files\InstallShield Installation Information =>.Macrovision Corporation® O43 - CFD: 06/12/2017 - [] D -- C:\Program Files\Intel =>.Microsoft Windows Component Publisher® O43 - CFD: 06/12/2017 - [] D -- C:\Program Files\Internet Explorer O43 - CFD: 06/12/2017 - [] D -- C:\Program Files\Launch Manager =>.Dritek System Inc.® O43 - CFD: 06/12/2017 - [] D -- C:\Program Files\Malwarebytes {044E3BF58976880FFD074448A8F7A058} O43 - CFD: 11/12/2017 - [] D -- C:\Program Files\McAfee {72F0EDBFF20CB89BDB3DDBF19D74D21A} O43 - CFD: 25/07/2008 - [] D -- C:\Program Files\McAfee.com {02FDE872EC2A7732EB10561F4BA15F2C} O43 - CFD: 02/11/2006 - [] D -- C:\Program Files\Microsoft Games O43 - CFD: 25/07/2008 - [] D -- C:\Program Files\Microsoft Office =>.Microsoft Corporation® O43 - CFD: 25/07/2008 - [] D -- C:\Program Files\Microsoft Works O43 - CFD: 06/12/2017 - [] D -- C:\Program Files\Microsoft.NET O43 - CFD: 06/12/2017 - [] D -- C:\Program Files\Movie Maker O43 - CFD: 08/12/2017 - [] D -- C:\Program Files\Mozilla Firefox {0C5396DCB2949C70FAC48AB08A07338E} O43 - CFD: 08/12/2017 - [] D -- C:\Program Files\Mozilla Maintenance Service {0C5396DCB2949C70FAC48AB08A07338E} O43 - CFD: 02/11/2006 - [] D -- C:\Program Files\MSBuild O43 - CFD: 06/12/2017 - [0] D -- C:\Program Files\MSXML 4.0 O43 - CFD: 25/07/2008 - [] D -- C:\Program Files\NewTech Infosystems =>.NewTech Infosystems, Inc® O43 - CFD: 12/12/2017 - [0] D -- C:\Program Files\ParetoLogic =>.Superfluous.Paretologic O43 - CFD: 07/12/2017 - [] D -- C:\Program Files\Realtek O43 - CFD: 02/11/2006 - [] D -- C:\Program Files\Reference Assemblies O43 - CFD: 08/12/2017 - [] D -- C:\Program Files\Safari =>.Apple Inc.® O43 - CFD: 25/07/2008 - [] D -- C:\Program Files\SiteAdvisor {72F0EDBFF20CB89BDB3DDBF19D74D21A} O43 - CFD: 25/07/2008 - [] D -- C:\Program Files\Synaptics =>.Synaptics Incorporated® O43 - CFD: 02/11/2006 - [0] HD -- C:\Program Files\Uninstall Information O43 - CFD: 08/12/2017 - [] D -- C:\Program Files\Unlocker O43 - CFD: 07/12/2017 - [] D -- C:\Program Files\VideoLAN O43 - CFD: 25/07/2008 - [] D -- C:\Program Files\Winbond Electronics Corporation O43 - CFD: 06/12/2017 - [] D -- C:\Program Files\Windows Calendar O43 - CFD: 06/12/2017 - [] D -- C:\Program Files\Windows Collaboration O43 - CFD: 06/12/2017 - [] D -- C:\Program Files\Windows Defender =>.Microsoft Windows® O43 - CFD: 06/12/2017 - [] D -- C:\Program Files\Windows Journal O43 - CFD: 06/12/2017 - [] D -- C:\Program Files\Windows Mail O43 - CFD: 06/12/2017 - [] D -- C:\Program Files\Windows Media Player O43 - CFD: 06/12/2017 - [] D -- C:\Program Files\Windows NT O43 - CFD: 06/12/2017 - [] D -- C:\Program Files\Windows Photo Gallery O43 - CFD: 06/12/2017 - [] D -- C:\Program Files\Windows Sidebar O43 - CFD: 06/12/2017 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories O43 - CFD: 06/12/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer O43 - CFD: 06/12/2017 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer Arcade Deluxe O43 - CFD: 06/12/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer Crystal Eye O43 - CFD: 06/12/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer GameZone O43 - CFD: 06/12/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer GridVista O43 - CFD: 09/12/2017 - [] AD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AcerSystem O43 - CFD: 06/12/2017 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools O43 - CFD: 07/12/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner O43 - CFD: 21/01/2008 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Extras and Upgrades O43 - CFD: 21/01/2008 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games O43 - CFD: 06/12/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Desktop O43 - CFD: 06/12/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel PROSet Wireless O43 - CFD: 06/12/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel® Matrix Storage Manager O43 - CFD: 06/12/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Launch Manager O43 - CFD: 02/11/2006 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance O43 - CFD: 06/12/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes O43 - CFD: 25/07/2008 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee O43 - CFD: 25/07/2008 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office O43 - CFD: 25/07/2008 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Works O43 - CFD: 25/07/2008 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NTI Backup Now 5 O43 - CFD: 25/07/2008 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NTI Media Maker 8 O43 - CFD: 08/12/2017 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup O43 - CFD: 02/11/2006 - [] RHD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC O43 - CFD: 07/12/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN O43 - CFD: 25/07/2008 - [] D -- C:\ProgramData\Adobe O43 - CFD: 08/12/2017 - [] D -- C:\ProgramData\Apple O43 - CFD: 08/12/2017 - [] D -- C:\ProgramData\Apple Computer O43 - CFD: 02/11/2006 - [0] SHD -- C:\ProgramData\Application Data O43 - CFD: 08/12/2017 - [0] D -- C:\ProgramData\Babylon =>PUP.Optional.Babylon O43 - CFD: 06/12/2017 - [0] SHD -- C:\ProgramData\Bureau O43 - CFD: 06/12/2017 - [] D -- C:\ProgramData\CyberLink O43 - CFD: 02/11/2006 - [0] SHD -- C:\ProgramData\Desktop O43 - CFD: 02/11/2006 - [0] SHD -- C:\ProgramData\Documents O43 - CFD: 25/07/2008 - [] D -- C:\ProgramData\eSobi O43 - CFD: 06/12/2017 - [0] SHD -- C:\ProgramData\Favoris O43 - CFD: 02/11/2006 - [0] SHD -- C:\ProgramData\Favorites O43 - CFD: 25/07/2008 - [] D -- C:\ProgramData\FloodLightGames O43 - CFD: 06/12/2017 - [] D -- C:\ProgramData\Google O43 - CFD: 06/12/2017 - [] D -- C:\ProgramData\Intel O43 - CFD: 08/12/2017 - [] D -- C:\ProgramData\IsolatedStorage O43 - CFD: 06/12/2017 - [] D -- C:\ProgramData\Malwarebytes O43 - CFD: 25/07/2008 - [] D -- C:\ProgramData\McAfee O43 - CFD: 06/12/2017 - [0] SHD -- C:\ProgramData\Menu Démarrer O43 - CFD: 08/12/2017 - [] SD -- C:\ProgramData\Microsoft O43 - CFD: 25/07/2008 - [] D -- C:\ProgramData\Microsoft Help O43 - CFD: 06/12/2017 - [0] SHD -- C:\ProgramData\Modèles O43 - CFD: 06/12/2017 - [] D -- C:\ProgramData\NVIDIA O43 - CFD: 12/12/2017 - [0] D -- C:\ProgramData\ParetoLogic =>.Superfluous.Paretologic O43 - CFD: 06/12/2017 - [] D -- C:\ProgramData\Roaming O43 - CFD: 25/07/2008 - [] D -- C:\ProgramData\SiteAdvisor O43 - CFD: 02/11/2006 - [0] SHD -- C:\ProgramData\Start Menu O43 - CFD: 06/12/2017 - [] D -- C:\ProgramData\Temp O43 - CFD: 02/11/2006 - [0] SHD -- C:\ProgramData\Templates O43 - CFD: 25/07/2008 - [] D -- C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3} O43 - CFD: 25/07/2008 - [] D -- C:\Program Files\Common Files\Adobe O43 - CFD: 25/07/2008 - [] D -- C:\Program Files\Common Files\DESIGNER O43 - CFD: 25/07/2008 - [] D -- C:\Program Files\Common Files\InstallShield O43 - CFD: 06/12/2017 - [] D -- C:\Program Files\Common Files\Intel O43 - CFD: 25/07/2008 - [] D -- C:\Program Files\Common Files\LightScribe O43 - CFD: 25/07/2008 - [] D -- C:\Program Files\Common Files\McAfee O43 - CFD: 25/07/2008 - [] D -- C:\Program Files\Common Files\microsoft shared O43 - CFD: 02/11/2006 - [] D -- C:\Program Files\Common Files\Services O43 - CFD: 02/11/2006 - [] D -- C:\Program Files\Common Files\SpeechEngines O43 - CFD: 06/12/2017 - [] D -- C:\Program Files\Common Files\System O43 - CFD: 06/12/2017 - [] D -- C:\Users\Gilbert\AppData\Roaming\Acer O43 - CFD: 25/07/2008 - [] D -- C:\Users\Gilbert\AppData\Roaming\Acer GameZone Console O43 - CFD: 07/12/2017 - [] D -- C:\Users\Gilbert\AppData\Roaming\Adobe O43 - CFD: 08/12/2017 - [] D -- C:\Users\Gilbert\AppData\Roaming\Apple Computer O43 - CFD: 08/12/2017 - [] D -- C:\Users\Gilbert\AppData\Roaming\Babylon =>PUP.Optional.Babylon O43 - CFD: 06/12/2017 - [] D -- C:\Users\Gilbert\AppData\Roaming\CyberLink O43 - CFD: 06/12/2017 - [] D -- C:\Users\Gilbert\AppData\Roaming\Google O43 - CFD: 06/12/2017 - [] D -- C:\Users\Gilbert\AppData\Roaming\Identities O43 - CFD: 06/12/2017 - [] D -- C:\Users\Gilbert\AppData\Roaming\InstallShield O43 - CFD: 06/12/2017 - [] D -- C:\Users\Gilbert\AppData\Roaming\Intel O43 - CFD: 08/12/2017 - [] D -- C:\Users\Gilbert\AppData\Roaming\IsolatedStorage O43 - CFD: 06/12/2017 - [] D -- C:\Users\Gilbert\AppData\Roaming\Macromedia O43 - CFD: 02/11/2006 - [0] D -- C:\Users\Gilbert\AppData\Roaming\Media Center Programs O43 - CFD: 10/12/2017 - [] SD -- C:\Users\Gilbert\AppData\Roaming\Microsoft O43 - CFD: 06/12/2017 - [] D -- C:\Users\Gilbert\AppData\Roaming\Mozilla O43 - CFD: 12/12/2017 - [0] D -- C:\Users\Gilbert\AppData\Roaming\ParetoLogic =>.Superfluous.Paretologic O43 - CFD: 06/12/2017 - [] D -- C:\Users\Gilbert\AppData\Roaming\SiteAdvisor O43 - CFD: 13/12/2017 - [] D -- C:\Users\Gilbert\AppData\Roaming\vlc O43 - CFD: 12/12/2017 - [] D -- C:\Users\Gilbert\AppData\Roaming\ZHP O43 - CFD: 06/12/2017 - [] D -- C:\Users\Gilbert\AppData\Local\Acer Arcade Deluxe O43 - CFD: 07/12/2017 - [] D -- C:\Users\Gilbert\AppData\Local\Adobe O43 - CFD: 08/12/2017 - [] D -- C:\Users\Gilbert\AppData\Local\Apple O43 - CFD: 08/12/2017 - [] D -- C:\Users\Gilbert\AppData\Local\Apple Computer O43 - CFD: 06/12/2017 - [0] SHD -- C:\Users\Gilbert\AppData\Local\Application Data O43 - CFD: 06/12/2017 - [] D -- C:\Users\Gilbert\AppData\Local\CyberLink O43 - CFD: 06/12/2017 - [] D -- C:\Users\Gilbert\AppData\Local\Google O43 - CFD: 06/12/2017 - [0] SHD -- C:\Users\Gilbert\AppData\Local\Historique O43 - CFD: 08/12/2017 - [] D -- C:\Users\Gilbert\AppData\Local\Microsoft O43 - CFD: 06/12/2017 - [] D -- C:\Users\Gilbert\AppData\Local\Mozilla O43 - CFD: 06/12/2017 - [] D -- C:\Users\Gilbert\AppData\Local\PlayMovie O43 - CFD: 06/12/2017 - [] D -- C:\Users\Gilbert\AppData\Local\PowerCinema O43 - CFD: 06/12/2017 - [] D -- C:\Users\Gilbert\AppData\Local\SoftDMA O43 - CFD: 12/12/2017 - [] D -- C:\Users\Gilbert\AppData\Local\Temp O43 - CFD: 06/12/2017 - [0] SHD -- C:\Users\Gilbert\AppData\Local\Temporary Internet Files O43 - CFD: 06/12/2017 - [] D -- C:\Users\Gilbert\AppData\Local\VirtualStore O43 - CFD: 06/12/2017 - [] D -- C:\Users\Gilbert\AppData\Local\WindowsUpdate O43 - CFD: 21/01/2008 - [] RD -- C:\Users\Gilbert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories O43 - CFD: 06/12/2017 - [] RD -- C:\Users\Gilbert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools O43 - CFD: 21/01/2008 - [] RD -- C:\Users\Gilbert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance O43 - CFD: 06/12/2017 - [] RD -- C:\Users\Gilbert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup O43 - CFD: 08/12/2017 - [] D -- C:\Users\Gilbert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Unlocker ---\\ ShellIconOverlayIdentifiers (SIOI) (2) - 0s O106 - SIOI: DragDropProtect Class [egisPSDP] - {30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}. (.Egis Inc. - Egis Inc. PSD DragDrop Protection.) -- C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\PSDProtect.dll =>.EGIS TECHNOLOGY INC.® O106 - SIOI: Enhanced Storage Icon Overlay Handler Class [EnhancedStorageShell] - {D9144DCD-E998-4ECA-AB6A-DCD83CCBA16D}. (.Microsoft Corporation - Extension d'environnement du périphérique d.) -- C:\Windows\System32\EhStorShell.dll =>.Microsoft Corporation ---\\ Liste des pilotes du système (96) - 30s O58 - SDL:2008/01/21 03:23:21 A . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\drivers\adp94xx.sys [422968] =>.Microsoft Windows® O58 - SDL:2008/01/21 03:23:25 A . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\System32\drivers\adpahci.sys [300600] =>.Microsoft Windows® O58 - SDL:2008/01/21 03:23:26 A . (.Adaptec, Inc. - Adaptec LH Ultra160 Driver (x86).) -- C:\Windows\System32\drivers\adpu160m.sys [101432] =>.Microsoft Windows® O58 - SDL:2008/01/21 03:23:27 A . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver.) -- C:\Windows\System32\drivers\adpu320.sys [149560] =>.Microsoft Windows® O58 - SDL:2008/01/21 03:23:00 A . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\Windows\System32\drivers\aliide.sys [17464] =>.Microsoft Windows® O58 - SDL:2008/01/21 03:23:23 A . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\System32\drivers\arc.sys [79416] =>.Microsoft Windows® O58 - SDL:2008/01/21 03:23:24 A . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\System32\drivers\arcsas.sys [79928] =>.Microsoft Windows® O58 - SDL:2008/05/19 12:42:56 A . (.Atheros Communications, Inc. - Atheros Extensible Wireless LAN device driv.) -- C:\Windows\System32\drivers\athr.sys [912384] =>.Atheros Communications, Inc. O58 - SDL:2006/11/02 09:24:45 A . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower.) -- C:\Windows\System32\drivers\BrFiltLo.sys [13568] =>.Brother Industries, Ltd. O58 - SDL:2006/11/02 09:24:46 A . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper.) -- C:\Windows\System32\drivers\BrFiltUp.sys [5248] =>.Brother Industries, Ltd. O58 - SDL:2006/11/02 09:25:24 A . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\System32\drivers\BrSerId.sys [71808] =>.Brother Industries Ltd. O58 - SDL:2006/11/02 09:24:44 A . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\System32\drivers\BrSerWdm.sys [62336] =>.Brother Industries Ltd. O58 - SDL:2006/11/02 09:24:44 A . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\System32\drivers\BrUsbMdm.sys [12160] =>.Brother Industries Ltd. O58 - SDL:2006/11/02 09:24:47 A . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\System32\drivers\BrUsbSer.sys [11904] =>.Brother Industries Ltd. O58 - SDL:2008/01/21 03:23:00 A . (.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\cmdide.sys [19000] =>.Microsoft Windows® O58 - SDL:2006/11/02 10:50:11 A . (.Adaptec, Inc. - Adaptec Ultra SCSI miniport.) -- C:\Windows\System32\drivers\djsvs.sys [71272] =>.Microsoft Windows® O58 - SDL:2006/11/02 14:29:38 A . (.Dritek System Inc. - Dritek PS2 Keyboard Filter Driver.) -- C:\Windows\System32\drivers\DKbFltr.sys [21264] =>.Dritek System Inc.® O58 - SDL:2008/01/21 03:23:24 A . (.Intel Corporation - Pilote désérialisé NDIS 6 de la carte Intel.) -- C:\Windows\System32\drivers\E1G60I32.sys [118784] =>.Intel Corporation O58 - SDL:2008/01/21 03:23:22 A . (.Emulex - Storport Miniport Driver for LightPulse HBA.) -- C:\Windows\System32\drivers\elxstor.sys [342584] =>.Microsoft Windows® O58 - SDL:2008/01/21 03:23:26 A . (.Hewlett-Packard Company - Smart Array Storport Driver.) -- C:\Windows\System32\drivers\HpCISSs.sys [40504] =>.Microsoft Windows® O58 - SDL:2008/03/25 23:39:20 A . (.Conexant Systems, Inc. - HSF_HWAZL WDM driver.) -- C:\Windows\System32\drivers\HSXHWAZL.sys [207872] =>.Conexant Systems, Inc. O58 - SDL:2008/03/25 23:38:32 A . (.Conexant Systems, Inc. - HSF_CNXT driver.) -- C:\Windows\System32\drivers\HSX_CNXT.sys [661504] =>.Conexant Systems, Inc. O58 - SDL:2008/03/25 23:41:30 A . (.Conexant Systems, Inc. - HSF_DP driver.) -- C:\Windows\System32\drivers\HSX_DPV.sys [980992] =>.Conexant Systems, Inc. O58 - SDL:2008/07/20 17:44:44 A . (.Intel Corporation - Intel Matrix Storage Manager driver - ia32.) -- C:\Windows\System32\drivers\iaStor.sys [324120] =>.Intel Corporation® O58 - SDL:2008/01/21 03:23:23 A . (.Intel Corporation - Intel Matrix Storage Manager driver (base).) -- C:\Windows\System32\drivers\iaStorV.sys [235064] =>.Microsoft Windows® O58 - SDL:2006/11/02 10:50:17 A . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\System32\drivers\iirsp.sys [41576] =>.Microsoft Windows® O58 - SDL:2008/06/02 09:20:12 A . (.Acer, Inc. - int15.) -- C:\Windows\System32\drivers\int15.sys [15392] =>.Acer Incorporated® O58 - SDL:2008/06/02 09:20:12 A . (.Acer, Inc. - int15.) -- C:\Windows\System32\drivers\int15_64.sys [17952] =>.Acer Incorporated® O58 - SDL:2006/11/02 10:50:07 A . (.Integrated Technology Express, Inc. - ITE IT8211 ATA/ATAPI SCSI miniport.) -- C:\Windows\System32\drivers\iteatapi.sys [35944] =>.Microsoft Windows® O58 - SDL:2006/11/02 10:50:09 A . (.Integrated Technology Express, Inc. - ITE IT8212 ATA RAID SCSI miniport.) -- C:\Windows\System32\drivers\iteraid.sys [35944] =>.Microsoft Windows® O58 - SDL:2009/08/05 06:18:22 A . (.Atheros Communications, Inc. - Atheros AR8121/AR8113/AR8114 PCI-E Ethernet.) -- C:\Windows\System32\drivers\L1E60x86.sys [48640] =>.Atheros Communications, Inc. O58 - SDL:2008/01/21 03:23:23 A . (.LSI Logic - LSI Logic Fusion-MPT FC Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_fc.sys [96312] =>.Microsoft Windows® O58 - SDL:2008/01/21 03:23:25 A . (.LSI Logic - LSI Logic Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas.sys [89656] =>.Microsoft Windows® O58 - SDL:2008/01/21 03:23:23 A . (.LSI Logic - LSI Logic Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_scsi.sys [96312] =>.Microsoft Windows® O58 - SDL:2017/12/06 19:48:19 A . (...) -- C:\Windows\System32\drivers\mbae.sys [59896] {044E3BF58976880FFD074448A8F7A058} O58 - SDL:2006/06/19 06:26:58 A . (.Conexant - Diagnostic Interface x86 Driver.) -- C:\Windows\System32\drivers\mdmxsdk.sys [12672] =>.Conexant O58 - SDL:2008/01/21 03:23:27 A . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows.) -- C:\Windows\System32\drivers\megasas.sys [31288] =>.Microsoft Windows® O58 - SDL:2008/01/21 03:23:27 A . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\System32\drivers\MegaSR.sys [386616] =>.Microsoft Windows® O58 - SDL:2007/07/24 06:40:36 A . (.McAfee, Inc. - Anti-Virus File System Filter Driver.) -- C:\Windows\System32\drivers\mfeavfk.sys [79304] {72F0EDBFF20CB89BDB3DDBF19D74D21A} =>.McAfee, Inc. O58 - SDL:2007/07/21 08:08:24 A . (.McAfee, Inc. - Buffer Overflow Protection Driver.) -- C:\Windows\System32\drivers\mfebopk.sys [35240] {72F0EDBFF20CB89BDB3DDBF19D74D21A} =>.McAfee, Inc. O58 - SDL:2007/07/21 08:08:24 A . (.McAfee, Inc. - Host Intrusion Detection Link Driver.) -- C:\Windows\System32\drivers\mfehidk.sys [201288] {72F0EDBFF20CB89BDB3DDBF19D74D21A} =>.McAfee, Inc. O58 - SDL:2007/07/24 11:02:36 A . (.McAfee, Inc. - VSCore Code Analysis Driver.) -- C:\Windows\System32\drivers\mferkdk.sys [33800] {72F0EDBFF20CB89BDB3DDBF19D74D21A} =>.McAfee, Inc. O58 - SDL:2007/07/21 08:08:24 A . (.McAfee, Inc. - System Monitor Filter Driver.) -- C:\Windows\System32\drivers\mfesmfk.sys [40488] {72F0EDBFF20CB89BDB3DDBF19D74D21A} =>.McAfee, Inc. O58 - SDL:2007/07/13 08:21:12 A . (.McAfee, Inc. - McAfee Personal Firewall Plus Driver.) -- C:\Windows\System32\drivers\Mpfp.sys [125728] {72F0EDBFF20CB89BDB3DDBF19D74D21A} =>.McAfee, Inc. O58 - SDL:2006/11/02 10:49:59 A . (.LSI Logic Corporation - MegaRAID RAID Controller Driver for Windows.) -- C:\Windows\System32\drivers\Mraid35x.sys [33384] =>.Microsoft Windows® O58 - SDL:2008/11/17 07:40:22 A . (.Intel Corporation - Intel® Wireless WiFi Link Driver.) -- C:\Windows\System32\drivers\NETw5v32.sys [3668480] =>.Intel Corporation O58 - SDL:2006/11/02 10:50:19 A . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\System32\drivers\nfrd960.sys [45160] =>.Microsoft Windows® O58 - SDL:2008/01/30 10:52:06 A . (.NewTech Infosystems, Inc. - NTI CD-ROM Filter Driver.) -- C:\Windows\System32\drivers\NTIDrvr.sys [14848] =>.NewTech Infosystems, Inc® O58 - SDL:2006/11/02 08:36:50 A . (.N-trig Innovative Technologies - Pilote intégré de digitalisateur de tablett.) -- C:\Windows\System32\drivers\ntrigdigi.sys [20608] =>.N-trig Innovative Technologies O58 - SDL:2008/06/25 06:05:06 A . (.NVIDIA Corporation - NVIDIA HDMI Audio Driver.) -- C:\Windows\System32\drivers\nvhda32v.sys [44064] =>.NVIDIA Corporation® O58 - SDL:2008/07/18 17:23:00 A . (.NVIDIA Corporation - NVIDIA Compatible Windows Vista Kernel Mode.) -- C:\Windows\System32\drivers\nvlddmkm.sys [7545824] =>.NVIDIA Corporation O58 - SDL:2008/01/21 03:23:21 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\System32\drivers\nvraid.sys [102968] =>.Microsoft Windows® O58 - SDL:2008/01/21 03:23:21 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\System32\drivers\nvstor.sys [45112] =>.Microsoft Windows® O58 - SDL:2008/05/14 16:05:42 A . (.Egis Incorporated - Acer eDataSecurity Management PSD Filter Dr.) -- C:\Windows\System32\drivers\psdfilter.sys [18992] =>.EGIS TECHNOLOGY INC.® O58 - SDL:2008/05/14 16:05:42 A . (.Egis Incorporated - Acer eDataSecurity Management PSD Named Pip.) -- C:\Windows\System32\drivers\PSDNServ.sys [16944] =>.EGIS TECHNOLOGY INC.® O58 - SDL:2008/05/14 16:05:44 A . (.Egis Incorporated - Acer eDataSecurity Management PSD Virtual D.) -- C:\Windows\System32\drivers\PSDVdisk.sys [60464] =>.EGIS TECHNOLOGY INC.® O58 - SDL:2008/01/21 03:23:24 A . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\Windows\System32\drivers\ql2300.sys [1122360] =>.Microsoft Windows® O58 - SDL:2006/11/02 10:50:35 A . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\Windows\System32\drivers\ql40xx.sys [106088] =>.Microsoft Windows® O58 - SDL:2005/03/04 16:41:18 N . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function D.) -- C:\Windows\System32\drivers\RtkHDAud.Sys [2528192] =>.Realtek Semiconductor Corp. O58 - SDL:2008/05/07 12:22:50 A . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function D.) -- C:\Windows\System32\drivers\RTKVHDA.sys [2134424] =>.Realtek Semiconductor Corp® O58 - SDL:2008/03/26 09:59:12 A . (.Realtek Semiconductor Corp. - Realtek USB Mass Storage Driver for Vista.) -- C:\Windows\System32\drivers\RTSTOR.sys [61440] =>.Realtek Semiconductor Corp. O58 - SDL:2006/11/02 07:37:21 A . (.Macrovision Corporation, Macrovision Europe Limited, - Macrovision SECURITY Driver.) -- C:\Windows\System32\drivers\secdrv.sys [20480] =>.Macrovision Corporation, Macrovision Europe Limited, O58 - SDL:2008/01/21 03:23:26 A . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\System32\drivers\sisraid4.sys [74808] =>.Microsoft Windows® O58 - SDL:2006/11/02 10:50:05 A . (.LSI Logic - LSI Logic 8XX SCSI Miniport Driver.) -- C:\Windows\System32\drivers\symc8xx.sys [35944] =>.Microsoft Windows® O58 - SDL:2006/11/02 10:49:56 A . (.LSI Logic - LSI Logic Hi-Perf SCSI Miniport Driver.) -- C:\Windows\System32\drivers\sym_hi.sys [31848] =>.Microsoft Windows® O58 - SDL:2006/11/02 10:50:03 A . (.LSI Logic - LSI Logic Ultra160 SCSI Miniport Driver.) -- C:\Windows\System32\drivers\sym_u3.sys [34920] =>.Microsoft Windows® O58 - SDL:2008/04/25 03:08:42 A . (.Synaptics, Inc. - Synaptics Touchpad Driver.) -- C:\Windows\System32\drivers\SynTP.sys [199472] =>.Synaptics Incorporated® O58 - SDL:2008/04/28 12:56:16 A . (.UPEK Inc. - TouchChip USB Kernel Driver.) -- C:\Windows\System32\drivers\tcusb.sys [50576] =>.UPEK Inc.® O58 - SDL:2008/02/25 15:29:24 A . (.EnTech Taiwan - TVicPort Driver for Windows NT/2000/XP.) -- C:\Windows\System32\drivers\TVicPort.sys [14544] =>.EnTech Taiwan O58 - SDL:2008/01/30 10:51:50 A . (.NewTech Infosystems Corporation - NTI CDROM Filter Driver.) -- C:\Windows\System32\drivers\UBHelper.sys [13824] =>.NewTech Infosystems, Inc® O58 - SDL:2008/01/21 03:23:20 A . (.ULi Electronics Inc. - ULi SATA Controller Driver.) -- C:\Windows\System32\drivers\uliahci.sys [238648] =>.Microsoft Windows® O58 - SDL:2006/11/02 10:50:35 A . (.Promise Technology, Inc. - Promise Ultra/Sata Series Driver for Win200.) -- C:\Windows\System32\drivers\ulsata.sys [98408] =>.Microsoft Windows® O58 - SDL:2008/01/21 03:23:23 A . (.Promise Technology, Inc. - Promise SATAII150 Series Windows Drivers.) -- C:\Windows\System32\drivers\ulsata2.sys [115816] =>.Microsoft Windows® O58 - SDL:2008/01/21 03:23:00 A . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\viaide.sys [20024] =>.Microsoft Windows® O58 - SDL:2008/01/21 03:23:23 A . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\Windows\System32\drivers\vsmraid.sys [130616] =>.Microsoft Windows® O58 - SDL:2008/01/21 03:23:22 A . (.Conexant Systems, Inc. - HSF_HWAZL WDM driver.) -- C:\Windows\System32\drivers\VSTAZL3.SYS [200704] =>.Conexant Systems, Inc. O58 - SDL:2008/01/21 03:23:23 A . (.Conexant Systems, Inc. - HSF_CNXT driver.) -- C:\Windows\System32\drivers\VSTCNXT3.SYS [654336] =>.Conexant Systems, Inc. O58 - SDL:2008/01/21 03:23:22 A . (.Conexant Systems, Inc. - HSF_DP driver.) -- C:\Windows\System32\drivers\VSTDPV3.SYS [987648] =>.Conexant Systems, Inc. O58 - SDL:2007/03/28 06:51:40 A . (.Winbond Electronics Corporation - Winbond MCE CIR Port Driver.) -- C:\Windows\System32\drivers\winbondcir.sys [43008] =>.Winbond Electronics Corporation O58 - SDL:2007/10/18 23:36:54 A . (.Conexant Systems, Inc. - Modem Audio Device Driver.) -- C:\Windows\System32\drivers\XAudio.sys [8704] =>.Conexant Systems, Inc. O58 - SDL:2008/02/25 15:29:24 A . (.Zeal SoftStudio - zntport.) -- C:\Windows\System32\drivers\zntport.sys [6080] =>.Zeal SoftStudio O58 - SDL:2006/11/02 08:09:42 A . (...) -- C:\Windows\System32\ANSI.SYS [9029] O58 - SDL:2006/11/02 08:09:45 A . (...) -- C:\Windows\System32\country.sys [27097] O58 - SDL:2006/11/02 08:09:41 A . (...) -- C:\Windows\System32\HIMEM.SYS [4768] O58 - SDL:2006/11/02 08:09:44 A . (...) -- C:\Windows\System32\KEY01.SYS [42809] O58 - SDL:2006/11/02 08:09:44 A . (...) -- C:\Windows\System32\KEYBOARD.SYS [42537] O58 - SDL:2006/11/02 08:09:29 A . (...) -- C:\Windows\System32\NTDOS.SYS [27866] O58 - SDL:2006/11/02 08:09:35 A . (...) -- C:\Windows\System32\NTDOS404.SYS [29146] O58 - SDL:2006/11/02 08:09:38 A . (...) -- C:\Windows\System32\NTDOS411.SYS [29370] O58 - SDL:2006/11/02 08:09:40 A . (...) -- C:\Windows\System32\NTDOS412.SYS [29274] O58 - SDL:2006/11/02 08:09:31 A . (...) -- C:\Windows\System32\NTDOS804.SYS [29146] O58 - SDL:2006/11/02 08:09:20 A . (...) -- C:\Windows\System32\NTIO.SYS [33952] O58 - SDL:2006/11/02 08:09:23 A . (...) -- C:\Windows\System32\NTIO404.SYS [34672] O58 - SDL:2006/11/02 08:09:24 A . (...) -- C:\Windows\System32\NTIO411.SYS [35776] O58 - SDL:2006/11/02 08:09:26 A . (...) -- C:\Windows\System32\NTIO412.SYS [35536] O58 - SDL:2006/11/02 08:09:22 A . (...) -- C:\Windows\System32\NTIO804.SYS [34672] ---\\ Derniers fichiers modifiés ou crées (Utilisateur) (4) - 7s O61 - LFC: 2017/12/09 10:44:15 A . (.Molotov.) -- C:\Users\Gilbert\Downloads\MolotovSetup-1.7.0.exe [63382136] {26C8AE1455BBAD7244EE509A290CFA6A} O61 - LFC: 2017/12/07 14:14:18 A . (..) -- C:\Users\Gilbert\Downloads\vlc-media-player_2-2-6_fr_10829_32.exe [30950664] {026AF2ADEA0AB3CF19D42A44A47426E8} O61 - LFC: 2017/12/07 12:02:24 A . (..) -- C:\Users\Gilbert\AppData\Roaming\Adobe\Acrobat\8.0\UserCache.bin [48821] O61 - LFC: 2017/12/06 15:04:53 A . (..) -- C:\Users\Gilbert\AppData\Local\Microsoft\Windows\1036\StructuredQuerySchema.bin [203537] ---\\ Associations Shell Spawning (11) - 0s O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe =>.Microsoft Corporation O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Ob.) -- C:\Windows\System32\eventvwr.exe =>.Microsoft Corporation O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe {610284A3000000000020} =>.Microsoft Corporation O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft (R) Windows Based Script Host.) -- C:\Windows\System32\wscript.exe =>.Microsoft Corporation O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe =>.Microsoft Corporation O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S O67 - Shell Spawning: <.html> [HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe {0C5396DCB2949C70FAC48AB08A07338E} =>.Mozilla Corporation ---\\ Menu de démarrage Internet (12) - 0s O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe {0C5396DCB2949C70FAC48AB08A07338E} =>.Mozilla Corporation O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe {610284A3000000000020} =>.Microsoft Corporation O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Apple Inc. - Safari.) -- C:\Program Files\Safari\Safari.exe =>.Apple Inc.® O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe =>.Mozilla Corporation O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - Utilitaire d’initialisation d’Internet Expl.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Apple Inc. - Safari.) -- C:\Program Files\Safari\Safari.exe =>.Apple Inc. O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe =>.Mozilla Corporation O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - Utilitaire d’initialisation d’Internet Expl.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Apple Inc. - Safari.) -- C:\Program Files\Safari\Safari.exe =>.Apple Inc. O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe =>.Mozilla Corporation O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - Utilitaire d’initialisation d’Internet Expl.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Apple Inc. - Safari.) -- C:\Program Files\Safari\Safari.exe =>.Apple Inc. ---\\ Recherche d'infection sur les navigateurs (3) - 13s O69 - SBI: SearchScopes [HKCU] {B3F31CD3-7B5C-4353-A1CA-A9509C642758} [DefaultScope] - (Google) - http://www.google.com/ O69 - SBI: SearchScopes [HKLM] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (@ieframe.dll,-12512) - http://search.live.com/ O69 - SBI: SearchScopes [HKLM] {67A2568C-7A0A-4EED-AECC-B5405DE63B64} [DefaultScope] - (Google) - http://www.google.com/ ---\\ Enumère les services démarrés par Svchost (31) - 1s O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d’application.) -- C:\Windows\System32\aelupsvc.dll [24576] =>.Microsoft Corporation O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll [62976] =>.Microsoft Corporation O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [247808] =>.Microsoft Corporation O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [40448] =>.Microsoft Corporation O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [40448] =>.Microsoft Corporation O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\System32\srvsvc.dll [125952] =>.Microsoft Corporation O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\System32\gpsvc.dll [576512] =>.Microsoft Corporation O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\IKEEXT.DLL [438784] =>.Microsoft Corporation O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Service Audio Windows.) -- C:\Windows\System32\audiosrv.dll [315392] =>.Microsoft Corporation O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’.) -- C:\Windows\System32\rasauto.dll [90624] =>.Microsoft Corporation O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire de connexions d'accès distant.) -- C:\Windows\System32\rasmans.dll [262144] =>.Microsoft Corporation O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll [68608] =>.Microsoft Corporation O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements systèm.) -- C:\Windows\System32\Sens.dll [47104] =>.Microsoft Corporation O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l'application d'assistance à.) -- C:\Windows\System32\ipnathlp.dll [288256] =>.Microsoft Corporation O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM.) -- C:\Windows\System32\tapisrv.dll [242688] =>.Microsoft Corporation O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gestionnaire des connexions distantes Termi.) -- C:\Windows\System32\termsrv.dll [449024] =>.Microsoft Corporation O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Up.) -- C:\Windows\System32\wuaueng.dll [1933848] =>.Microsoft Windows Component Publisher® O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière.) -- C:\Windows\System32\qmgr.dll [758784] =>.Microsoft Corporation O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [247808] =>.Microsoft Corporation O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur u.) -- C:\Windows\System32\iphlpsvc.dll [200704] =>.Microsoft Corporation O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d'ouverture de session secon.) -- C:\Windows\System32\seclogon.dll [19968] =>.Microsoft Corporation O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll [33280] =>.Microsoft Corporation O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\System32\iscsiexe.dll [111616] =>.Microsoft Corporation O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédia.) -- C:\Windows\System32\mmcss.dll [45056] =>.Microsoft Corporation O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll [153088] =>.Microsoft Corporation O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll [57344] =>.Microsoft Corporation O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll [162304] =>.Microsoft Corporation O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\System32\schedsvc.dll [601600] =>.Microsoft Corporation O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service de configuration des services Termi.) -- C:\Windows\System32\SessEnv.dll [84992] =>.Microsoft Corporation O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\System32\browser.dll [81920] =>.Microsoft Corporation O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\Windows\System32\KMSVC.DLL [68096] =>.Microsoft Corporation ---\\ Liste des exceptions du parefeu Windows (4) - 1s O87 - FAEL: "{89799D38-6725-4CE5-9D1E-6E30415FE623}" [In-None-P6-TRUE] .(...) -- C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe O87 - FAEL: "{57BDCF60-2235-4679-8101-B9BD26C60ED2}" [In-None-P17-TRUE] .(...) -- C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe O87 - FAEL: "{0BCE4EA2-BE2D-4752-8EB4-82D7B6549D14}" [In-None-P17-TRUE] .(.Acer Corp. - Acer Arcade Deluxe PlayMovie.) -- C:\Program Files\Acer Arcade Deluxe\PlayMovie\PlayMovie.exe O87 - FAEL: "{FC8F3A80-0638-4A1A-B088-EF9CB291EC01}" [In-None-P17-TRUE] .(.Acer Corp. - Acer Arcade Deluxe PlayMovie Resident Progr.) -- C:\Program Files\Acer Arcade Deluxe\PlayMovie\PMVService.exe ---\\ Scan Additionnel (5) - 0s C:\Program Files\ParetoLogic =>.Superfluous.Paretologic C:\ProgramData\Babylon =>PUP.Optional.Babylon C:\ProgramData\ParetoLogic =>.Superfluous.Paretologic C:\Users\Gilbert\AppData\Roaming\Babylon =>PUP.Optional.Babylon C:\Users\Gilbert\AppData\Roaming\ParetoLogic =>.Superfluous.Paretologic ---\\ Récapitulatif des éléments trouvés sur votre station (2) - 0s http://www.nicolascoolman.fr/?p=5145 =>.Superfluous.Paretologic http://www.nicolascoolman.fr/?p=170 =>PUP.Optional.Babylon ~ End of the scan, 15902 items in 00h08mn20s (747)(0)