1. ========================= SEAF 1.0.1.0 - C_XX 2. 3. Commencé à: 14:43:17 le 02/09/2014 4. 5. Valeur(s) recherchée(s): 6. SpyHunter 7. 8. Légende: TC => Date de création, TM => Date de modification, DA => Dernier accès 9. 10. (!) --- Recherche registre 11. 12. ====== Fichier(s) ====== 13. 14. 15. "C:\Documents and Settings\deondea2012\AppData\Roaming\ZHP\Quarantine\SpyHunter.DIR\SpyHunter Emergency Startup.lnk" [ NOT_CONTENT_INDEXED|ARCHIVE | 2 Ko ] 16. TC: 01/09/2014,19:01:16 | TM: 31/08/2014,12:20:00 | DA: 01/09/2014,19:01:16 17. 18. 19. ========================= 20. 21. 22. "C:\Documents and Settings\deondea2012\AppData\Roaming\ZHP\Quarantine\SpyHunter.DIR\SpyHunter.lnk" [ NOT_CONTENT_INDEXED|ARCHIVE | 2 Ko ] 23. TC: 01/09/2014,19:01:16 | TM: 31/08/2014,12:20:00 | DA: 01/09/2014,19:01:16 24. 25. 26. ========================= 27. 28. 29. "C:\Documents and Settings\deondea2012\AppData\Roaming\ZHP\Quarantine\SpyHunter.DIR\Uninstall SpyHunter.lnk" [ NOT_CONTENT_INDEXED|ARCHIVE | 994 o ] 30. TC: 01/09/2014,19:01:16 | TM: 31/08/2014,12:19:59 | DA: 01/09/2014,19:01:16 31. 32. 33. ========================= 34. 35. 36. "C:\Documents and Settings\deondea2012\AppData\Roaming\ZHP\Quarantine\spyhunter4.exe.VIR" [ NOT_CONTENT_INDEXED|ARCHIVE | 7539 Ko ] 37. TC: 01/09/2014,19:01:19 | TM: 09/01/2014,07:16:16 | DA: 01/09/2014,19:01:19 38. 39. 40. ========================= 41. 42. 43. "C:\Documents and Settings\Videos\FILMS\SpyHunter-Installer.exe" [ ARCHIVE | 729 Ko ] 44. TC: 31/08/2014,12:16:29 | TM: 31/08/2014,12:16:30 | DA: 01/09/2014,15:57:13 45. 46. 47. ========================= 48. 49. 50. "C:\Program Files\Enigma Software Group\SpyHunter\Log\SpyHunter4_20140831_122026.log" [ ARCHIVE | 528 Ko ] 51. TC: 31/08/2014,12:20:26 | TM: 31/08/2014,15:21:46 | DA: 31/08/2014,12:20:26 52. 53. 54. ========================= 55. 56. 57. "C:\Program Files\Enigma Software Group\SpyHunter\Log\SpyHunter4_20140831_152932.log" [ ARCHIVE | 435 Ko ] 58. TC: 31/08/2014,15:29:33 | TM: 31/08/2014,15:35:04 | DA: 31/08/2014,15:35:04 59. 60. 61. ========================= 62. 63. 64. "C:\Program Files\Enigma Software Group\SpyHunter\Log\SpyHunter4_20140831_181541.log" [ ARCHIVE | 436 Ko ] 65. TC: 31/08/2014,18:15:44 | TM: 31/08/2014,18:22:24 | DA: 31/08/2014,18:22:24 66. 67. 68. ========================= 69. 70. 71. "C:\Program Files\Enigma Software Group\SpyHunter\Log\SpyHunter4_20140831_182430.log" [ ARCHIVE | 437 Ko ] 72. TC: 31/08/2014,18:24:30 | TM: 31/08/2014,19:40:56 | DA: 31/08/2014,19:40:56 73. 74. 75. ========================= 76. 77. 78. "C:\Program Files\Enigma Software Group\SpyHunter\Log\SpyHunter4_20140901_142919.log" [ ARCHIVE | 437 Ko ] 79. TC: 01/09/2014,14:29:19 | TM: 01/09/2014,15:59:56 | DA: 01/09/2014,15:59:56 80. 81. 82. ========================= 83. 84. 85. "C:\Program Files\Enigma Software Group\SpyHunter\Log\SpyHunter4_20140901_160619.log" [ ARCHIVE | 438 Ko ] 86. TC: 01/09/2014,16:06:19 | TM: 01/09/2014,18:09:48 | DA: 01/09/2014,18:09:48 87. 88. 89. ========================= 90. 91. 92. "C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter4.exe" [ ARCHIVE | 7539 Ko ] 93. TC: 09/01/2014,07:16:16 | TM: 09/01/2014,07:16:16 | DA: 02/09/2014,10:46:17 94. 95. 96. ========================= 97. 98. 99. "C:\Users\deondea2012\AppData\Roaming\ZHP\Quarantine\SpyHunter.DIR\SpyHunter Emergency Startup.lnk" [ NOT_CONTENT_INDEXED|ARCHIVE | 2 Ko ] 100. TC: 01/09/2014,19:01:16 | TM: 31/08/2014,12:20:00 | DA: 01/09/2014,19:01:16 101. 102. 103. ========================= 104. 105. 106. "C:\Users\deondea2012\AppData\Roaming\ZHP\Quarantine\SpyHunter.DIR\SpyHunter.lnk" [ NOT_CONTENT_INDEXED|ARCHIVE | 2 Ko ] 107. TC: 01/09/2014,19:01:16 | TM: 31/08/2014,12:20:00 | DA: 01/09/2014,19:01:16 108. 109. 110. ========================= 111. 112. 113. "C:\Users\deondea2012\AppData\Roaming\ZHP\Quarantine\SpyHunter.DIR\Uninstall SpyHunter.lnk" [ NOT_CONTENT_INDEXED|ARCHIVE | 994 o ] 114. TC: 01/09/2014,19:01:16 | TM: 31/08/2014,12:19:59 | DA: 01/09/2014,19:01:16 115. 116. 117. ========================= 118. 119. 120. "C:\Users\deondea2012\AppData\Roaming\ZHP\Quarantine\spyhunter4.exe.VIR" [ NOT_CONTENT_INDEXED|ARCHIVE | 7539 Ko ] 121. TC: 01/09/2014,19:01:19 | TM: 09/01/2014,07:16:16 | DA: 01/09/2014,19:01:19 122. 123. 124. ========================= 125. 126. 127. "C:\Users\Videos\FILMS\SpyHunter-Installer.exe" [ ARCHIVE | 729 Ko ] 128. TC: 31/08/2014,12:16:29 | TM: 31/08/2014,12:16:30 | DA: 01/09/2014,15:57:13 129. 130. 131. ========================= 132. 133. 134. 135. ====== Entrée(s) du registre ====== 136. 137. 138. [HKLM\System\ControlSet001\services\esgiguard] 139. "ImagePath"="\??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys" (REG_EXPAND_SZ) 140. 141. [HKLM\System\ControlSet002\services\esgiguard] 142. "ImagePath"="\??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys" (REG_EXPAND_SZ) 143. 144. [HKLM\System\CurrentControlSet\services\esgiguard] 145. "ImagePath"="\??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys" (REG_EXPAND_SZ) 146. 147. [HKU\S-1-5-21-920044399-461695330-2779810461-1001\Software\Microsoft\Installer\Products\B1EF5FCA27738604B878D2A2E6DFA050] 148. "ProductName"="SpyHunter" (REG_SZ) 149. 150. [HKU\S-1-5-21-920044399-461695330-2779810461-1001\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Persisted] 151. "C:\Users\Videos\FILMS\SpyHunter-Installer.exe"="1" (REG_DWORD) 152. 153. [HKU\S-1-5-21-920044399-461695330-2779810461-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Installer\Products\B1EF5FCA27738604B878D2A2E6DFA050] 154. "ProductName"="SpyHunter" (REG_SZ) 155. 156. [HKU\S-1-5-21-920044399-461695330-2779810461-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Persisted] 157. "C:\Users\Videos\FILMS\SpyHunter-Installer.exe"="1" (REG_DWORD) 158. 159. ========================= 160. 161. Fin à: 14:46:54 le 02/09/2014 162. 1239695 Éléments analysés 163. 164. ========================= 165. E.O.F