Publicité
Publicité
Format du document : text/plain
Prévisualisation
~ ZHPDiag v2015.8.3.109 Par Nicolas Coolman (2015/08/3)
~ Démarré par Aurore (Administrator) (2015/08/04 10:18:56)
~ Site: http://www.nicolascoolman.fr
~ Facebook: https://www.facebook.com/nicolascoolman1
~ Etat de la version: Version OK
~ Mode: Scanner
~ Rapport: C:\Users\Aurore\Desktop\ZHPDiag.txt
~ Rapport: C:\Users\Aurore\AppData\Roaming\ZHP\ZHPDiag.txt
~ UAC: Activate
~ Démarrage du système: Normal (Normal boot)
~ Windows 8.1, 64-bit (Build 9600)
---\\ Navigateurs Internet (2) - 0s
GCIE: Google Chrome v44.0.2403.125
MSIE: Internet Explorer v11.0.9600.17905
---\\ Informations sur les produits Windows (4) - 7s
~ Windows Server License Manager Script : OK
~ Licence Script File Génération : OK
Windows Automatic Updates : OK (Demand)
Windows Activation Technologies : OK
---\\ Logiciels de protection (2) - 0s
Avira Antivirus v15.0.11.579
Malwarebytes Anti-Malware version 2.1.8.1057
---\\ Logiciels d'optimisation (1) - 0s
CCleaner v3.27
---\\ Surveillance de Logiciels (1) - 0s
Adobe Flash Player 11 Plugin
---\\ Informations sur le système (6) - 0s
~ Operating System: Intel64 Family 6 Model 58 Stepping 9, GenuineIntel
~ Operating System: 64-bit
~ Boot mode: Normal (Normal boot)
Total RAM: 4074.72 MB (36% free)
~ System Restore: Activé (Enable)
~ System drive C: has 257 GB free of 703 GB
---\\ Mode de connexion au système (3) - 0s
~ Computer Name: PCAURORE
~ User Name: Aurore
~ Logged in as Administrator
---\\ Enumération des unités disques (1) - 0s
~ Drive C: has 257 GB free of 703 GB (System)
---\\ Etat du Centre de Sécurité Windows (11) - 0s
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK
---\\ Recherche particulière de fichiers génériques (23) - 1s
[MD5.C10A66189DC8C090E7C84873EDCEBC88] - (.Microsoft Corporation - Explorateur Windows.) () -- C:\WINDOWS\Explorer.exe [2501368]
[MD5.6C308D32AFA41D26CE2A0EA8F7B79565] - (.Microsoft Corporation - Processus hôte Windows (Rundll32).) () -- C:\WINDOWS\System32\rundll32.exe [54784]
[MD5.A570A64292214C43E0BA50E6A72A6380] - (.Microsoft Corporation - Application de démarrage de Windows.) () -- C:\WINDOWS\System32\Wininit.exe [145920]
[MD5.98C6A46E9E2822BF83196C2EAE43DBD4] - (.Microsoft Corporation - Extensions Internet pour Win32.) () -- C:\WINDOWS\System32\wininet.dll [2427392]
[MD5.EC498BAE1F0D3E0E401C963F8D76C437] - (.Microsoft Corporation - Application dâouverture de session Windows.) () -- C:\WINDOWS\System32\Winlogon.exe [572416]
[MD5.AFCAB4DC692CCE37E283B00E2D7B438F] - (.Microsoft Corporation - Bibliothèque de licences.) () -- C:\WINDOWS\System32\sppcomapi.dll [447488]
[MD5.E37F897ED7B5AFF79B1398258DB96BD9] - (.Microsoft Corporation - DLL client de lâAPI uilisateur de Windows m.) () -- C:\WINDOWS\System32\fr-FR\user32.dll.mui [19456]
[MD5.374E27295F0A9DCAA8FC96370F9BEEA5] - (.Microsoft Corporation - Pilote de fonction connexe pour WinSock.) () -- C:\WINDOWS\System32\drivers\AFD.sys [563200]
[MD5.74B14192CF79A72F7536B27CB8814FBD] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) () -- C:\WINDOWS\System32\drivers\atapi.sys [26464]
[MD5.2FA6510E33F7DEFEC03658B74101A9B9] - (.Microsoft Corporation - CD-ROM File System Driver.) () -- C:\WINDOWS\System32\drivers\Cdfs.sys [88576]
[MD5.C6796EA22B513E3457514D92DCDB1A3D] - (.Microsoft Corporation - SCSI CD-ROM Driver.) () -- C:\WINDOWS\System32\drivers\Cdrom.sys [164352]
[MD5.A03F362C5557E238CBFA914689C77248] - (.Microsoft Corporation - DFS Namespace Client Driver.) () -- C:\WINDOWS\System32\drivers\DfsC.sys [134144]
[MD5.D4B7ED39C7900384D9E5C1283F1E7926] - (.Microsoft Corporation - High Definition Audio Bus Driver.) () -- C:\WINDOWS\System32\drivers\HDAudBus.sys [76800]
[MD5.49EE0AE9E5B64FFBBD06D55C4984B598] - (.Microsoft Corporation - Pilote de port i8042.) () -- C:\WINDOWS\System32\drivers\i8042prt.sys [108544]
[MD5.B7342B3C58E91107F6E946A93D9D4EFD] - (.Microsoft Corporation - IP Network Address Translator.) () -- C:\WINDOWS\System32\drivers\IpNat.sys [142848]
[MD5.6FBDF2B1B025A8E6E069234362FFFFB7] - (.Microsoft Corporation - Minirdr SMB Windows NT.) () -- C:\WINDOWS\System32\drivers\MRxSmb.sys [401408]
[MD5.0217532E19A748F0E5D569307363D5FD] - (.Microsoft Corporation - MBT Transport driver.) () -- C:\WINDOWS\System32\drivers\netBT.sys [282624]
[MD5.7F68063A5A0461E02BC860CE0E6BFDDC] - (.Microsoft Corporation - Pilote du système de fichiers NT.) () -- C:\WINDOWS\System32\drivers\ntfs.sys [2025792]
[MD5.764B1121867B2D9B31C491668AC72B2B] - (.Microsoft Corporation - Pilote de port parallèle.) () -- C:\WINDOWS\System32\drivers\Parport.sys [94208]
[MD5.1BD3022FD6E450B00DE560265638FD2A] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) () -- C:\WINDOWS\System32\drivers\Rasl2tp.sys [112640]
[MD5.680C1DAE268B6FB67FA21B389A8B79EF] - (.Microsoft Corporation - Redirecteur de périphérique de Microsoft RD.) () -- C:\WINDOWS\System32\drivers\rdpdr.sys [195584]
[MD5.FFF28F9F6823EB1756C60F1649560BBF] - (.Microsoft Corporation - TDI Translation Driver.) () -- C:\WINDOWS\System32\drivers\tdx.sys [107520]
[MD5.64CA2B4A49A8EAF495E435623ECCE7DB] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) () -- C:\WINDOWS\System32\drivers\volsnap.sys [310080]
---\\ Processus lancés (21) - 2s
[MD5.3BDBB0CBFB27FEF51B7574676D1C9F6A] - (.Realtek Semiconductor - Realtek Audio Service.) -- C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [201360] [PID.1052]
[MD5.4E1D0A246E10CFDDBF856432418DE404] - (.All rights reserved - GFNEXSrv.) -- C:\Program Files (x86)\TOSHIBA\Password Utility\GFNEXSrv.exe [156672] [PID.1272]
[MD5.C99F8E90DE4B8F0C7FE15BB1CBCD29DC] - (.Intel(R) Corporation - Intel(R) Capability Licensing Service Inter.) -- C:\Program Files\Intel\iCLS Client\HeciServer.exe [635104] [PID.1700]
[MD5.ED32035BDFECED1AD66D459FD9CC1140] - (.TOSHIBA Corporation - TDCSrv Application.) -- C:\Windows\system32\TODDSrv.exe [140632] [PID.2028]
[MD5.09E2679BC114A4B4CF99517CCA848F0D] - (.AVG Secure Search - ToolbarU Application.) -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.7.0\ToolbarUpdater.exe [1842576] [PID.1084] =>Toolbar.AVGSearch
[MD5.65C26928DEC067BD134B5634F9B24BA4] - (.Copyright (C) 2013 - loggings Application.) -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.7.0\loggingserver.exe [168336] [PID.744] =>Toolbar.AVGSearch
[MD5.4D7977197C3EC8C65F533E8A84DE229C] - (.TOSHIBA Corporation - TOSHIBA eco Utility Service.) -- C:\Program Files\TOSHIBA\Teco\TecoService.exe [291240] [PID.2076]
[MD5.8608681DC6E2975815A593209A6432CD] - (.TOSHIBA Corporation - TOSHIBA PC Health Monitor.) -- C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe [458152] [PID.3892]
[MD5.5201342394DD42848027CE96A37043DB] - (.TOSHIBA Corporation - TSS TMachInfo Service.) -- C:\Program Files\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe [53384] [PID.2196]
[MD5.6DF8171AE92EBB5C9ACBE6D9B4E30F7D] - (.Realtek Semiconductor - HD Audio Background Process.) -- C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1218704] [PID.5100]
[MD5.0C987A6C5C38543FFCE54EA28D418420] - (.Synaptics Incorporated - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2916152] [PID.7764]
[MD5.147628F2795EE5DE257C705945A0E2EA] - (.Synaptics Incorporated - Synaptics Pointing Device Helper.) -- C:\PROGRAM FILES\SYNAPTICS\SynTP\SYNTPHELPER.EXE [123704] [PID.900]
[MD5.B7C0AC916884B05310E85E45C7FC2EDF] - (.TOSHIBA Corporation - TOSHIBA Service Station.) -- C:\Program Files\TOSHIBA\Toshiba Service Station\ToshibaServiceStation.exe [1295496] [PID.5668]
[MD5.330A516D1B1ACCF74228EE33F8D19CEC] - (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13196432] [PID.4360]
[MD5.3C31B9D256D052E00B595818F15ED52F] - (.Copyright (C) 2012 - TCrdMain Application.) -- C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe [2611112] [PID.8140]
[MD5.57C4B4289DAB34CBAEEB92865C6BC022] - (.TOSHIBA Corporation - Resident module of eco Utility.) -- C:\Program Files\TOSHIBA\Teco\TecoResident.exe [169896] [PID.4032]
[MD5.22FCD0750F598EFEAC2E438CD08FA0C6] - (.TOSHIBA Corporation - TOSHIBA PC Health Monitor.) -- C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe [518056] [PID.7920]
[MD5.4DF11CDE53A5AF536178AEC3D4A053B1] - (.SRS Labs, Inc. - SRS Control Panel.) -- C:\Program Files\SRS Labs\SRS Control Panel\SRSPanel_64.exe [2170784] [PID.4128]
[MD5.749949494676218FFA99501F4AA22ECC] - (.OpenOffice.org - OpenOffice.org 3.4.1.) -- C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe [10376704] [PID.5796]
[MD5.4EE367B8B1964160A1F1B80095183D3A] - (.OpenOffice.org - OpenOffice.org 3.4.1.) -- C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin [10368512] [PID.3404]
[MD5.F92E855A150B9C6A9D19E1E4247EE1E2] - (.Copyright (C) 2012 - VProtect Application.) -- C:\Program Files (x86)\AVG Secure Search\vprot.exe [2563472] [PID.6180] =>Toolbar.AVGSearch
---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2) (9) - 1s
G0 - GCSP: Secure Preferences [User Data\Default][HomePage] http://www.doona.fr/
G2 - GCE: Preference [User Data\Default] [ahnnjaplikpdahggilhoeeoflaomdibf] ttes
G2 - GCE: Preference [User Data\Default] [dlgapghlfkpbjblkkbdpbdobkdhhbhlj] Translate
G2 - GCE: Preference [User Data\Default] [egekhjenodlmckpgpkkdpfnodobbgnkf] MusixLib Search
G2 - GCE: Preference [User Data\Default] [ffjkhaeogkeelkioellpgcebmekedpag] Barre de Confiance CM-CIC
G2 - GCE: Preference [User Data\Default] [flliilndjeohchalpbbcdekjklbdgfkk] Avira Browser Safety
G2 - GCE: Preference [User Data\Default] [ifhnjalcekbmmeknpgnkpghldbbhanen] MusixLib
G2 - GCE: Preference [User Data\Default] [lccekmodgklaepjeofjdjpbminllajkg] Chrome Hotword Shared Module
G2 - GCE: Preference [User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] Google Chrome manifest =>.Google Inc.
---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3) (4) - 0s
P2 - EXT: (.Avira - Segurança do navegador Avira.) -- C:\Users\Aurore\AppData\Roaming\Mozilla\Firefox\Profiles\kLqGub6h.default\extensions\abs@avira.com
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_502_149.dll
P2 - FPN: [HKLM] [@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin] - (...) -- C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\18.7.0\\npsitesafety.dll =>Toolbar.AVGSearch
P2 - FPN: [HKLM] [@WildTangent.com/GamesAppPresenceDetector,Version=1.0] - (.WildTangent.) -- C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll
---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4) (18) - 1s
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://toshiba13.msn.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphean =>.Microsoft Internet Explorer
R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV9 = 1
R4 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\PhishingFilter,EnabledV9 = 1
---\\ Internet Explorer, Proxy Management (R5) (3) - 0s
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs (3) - 0s
F2 - REG:system.ini: UserInit=userinit.exe (.Microsoft Corporation.)
F2 - REG:system.ini: Shell=C:\WINDOWS\explorer.exe (.Microsoft Corporation.)
F2 - REG:system.ini: VMApplet=C:\WINDOWS\SysWOW64\SystemPropertiesPerformance.exe (.Microsoft Corporation.)
---\\ Hosts file redirection (O1) (1) - 0s
~ Le fichier hôte est sain (The hosts file is clean) (21)
---\\ Browser Helper Object de navigateur (BHO) (O2) (1) - 0s
O2 - BHO: (no name) [64Bits] - {95B7759C-8C7F-4BF1-B163-73684A933233} (Orphean)
---\\ Internet Explorer Toolbars (O3) (1) - 0s
O3 - Toolbar: (no name) - [HKLM]{95B7759C-8C7F-4BF1-B163-73684A933233} (Orphean) (.not file.)
---\\ Applications lancées au démarrage du sytème (O4) (16) - 0s
O4 - HKLM\..\Run: [RtHDVCpl] . (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [TCrdMain] %ProgramFiles%\TOSHIBA\Hotkey\TCrdMain_Win8.exe
O4 - HKLM\..\Run: [TODDMain] . (.Copyright (C) 2012 TOSHIBA Corporation. All rights r - TOSHIBA System Settings Service.) -- C:\Program Files (x86)\TOSHIBA\System Setting\TODDMain.exe
O4 - HKLM\..\Run: [TecoResident] . (.TOSHIBA Corporation - Resident module of eco Utility.) -- C:\Program Files\TOSHIBA\Teco\TecoResident.exe
O4 - HKLM\..\Run: [TosWaitSrv] %ProgramFiles%\TOSHIBA\TPHM\TosWaitSrv.exe
O4 - HKLM\..\Run: [SRS Premium Sound HD] . (.SRS Labs, Inc. - SRS Control Panel.) -- C:\Program Files\SRS Labs\SRS Control Panel\SRSPanel_64.exe
O4 - HKLM\..\Run: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Wow6432Node\Run: [Intel AppUp(SM) center] . (.Intel Corporation - Intel Services Manager.) -- C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe
O4 - HKLM\..\Wow6432Node\Run: [TPUReg] . (.Pegatron Corporation - TOSHIBA Password Utility.) -- C:\Program Files (x86)\TOSHIBA\Password Utility\TosPU.exe
O4 - HKLM\..\Wow6432Node\Run: [TPUReg(x86)] C:\Program Files\TOSHIBA\Password Utility\TosPU.exe (.not file.)
O4 - HKLM\..\Wow6432Node\Run: [vProt] . (.Copyright (C) 2012 - VProtect Application.) -- C:\Program Files (x86)\AVG Secure Search\vprot.exe =>Toolbar.AVGSearch
O4 - HKLM\..\Wow6432Node\Run: [avgnt] . (.Avira Operations GmbH & Co. KG - Avira system tray application.) -- C:\Program Files (x86)\Avira\Antivirus\avgnt.exe
O4 - HKLM\..\Wow6432Node\Run: [Avira Systray] . (.Avira Operations GmbH & Co. KG - Avira.) -- C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe
---\\ Modification Domaine/Adresses DNS (O17) (4) - 0s
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 212.27.40.241 212.27.40.240
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.43.1
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: DhcpNameServer = 212.27.40.241 212.27.40.240
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: DhcpNameServer = 192.168.43.1
---\\ Liste des services NT non Microsoft et non désactivés (O23) (19) - 1s
O23 - Service: Avira Protection e-mail (AntiVirMailService) . (.Avira Operations GmbH & Co. KG - Antivirus MailScanner WFP Service.) - C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe
O23 - Service: Avira Planificateur (AntiVirSchedulerService) . (.Avira Operations GmbH & Co. KG - Antivirus Host Framework Service.) - C:\Program Files (x86)\Avira\Antivirus\sched.exe
O23 - Service: Avira Protection temps réel (AntiVirService) . (.Avira Operations GmbH & Co. KG - Antivirus Host Framework Service.) - C:\Program Files (x86)\Avira\Antivirus\avguard.exe
O23 - Service: Avira Protection Web (AntiVirWebService) . (.Avira Operations GmbH & Co. KG - AntiVir WebGuard WFP Service.) - C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe
O23 - Service: Avira Service Host (Avira.ServiceHost) . (.Avira Operations GmbH & Co. KG - Avira.ServiceHost.) - C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
O23 - Service: GFNEX Service (GFNEXSrv) . (.All rights reserved - GFNEXSrv.) - C:\Program Files (x86)\TOSHIBA\Password Utility\GFNEXSrv.exe
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Capability Licensing Service Interface (Intel(R) Capability Licensing Service Interface) . (.Intel(R) Corporation - Intel(R) Capability Licensing Service Inter.) - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) ME Service (Intel(R) ME Service) . (.Intel Corporation - Intel(R) ME Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) . (.Intel Corporation - Intel(R) Dynamic Application Loader Host In.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: Intel(R) Management and Security Application Local Manageme (LMS) . (.Intel Corporation - Local Manageability Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: MBAMScheduler (MBAMScheduler) . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService (MBAMService) . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: Nero Update (NAUpdate) . (.Nero AG - NeroUpdate.) - C:\Program Files (x86)\Nero\Update\NASvc.exe
O23 - Service: Realtek Audio Service (RtkAudioService) . (.Realtek Semiconductor - Realtek Audio Service.) - C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
O23 - Service: TOSHIBA Optical Disc Drive Service (TODDSrv) . (.TOSHIBA Corporation - TDCSrv Application.) - C:\Windows\system32\TODDSrv.exe
O23 - Service: TOSHIBA eco Utility Service (TOSHIBA eco Utility Service) . (.TOSHIBA Corporation - TOSHIBA eco Utility Service.) - C:\Program Files\TOSHIBA\Teco\TecoService.exe
O23 - Service: Intel(R) Management and Security Application User Notificat (UNS) . (.Intel Corporation - User Notification Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: (vToolbarUpdater18.7.0) . (.AVG Secure Search - ToolbarU Application.) - C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.7.0\ToolbarUpdater.exe =>Toolbar.AVGSearch
---\\ Tâches planifiées en automatique (O39) (12) - 3s
[MD5.9CE3B11704038F711481ACD6BD9A9A5A] [APT] [CCleanerSkipUAC] (.Piriform Ltd.) -- C:\Program Files\CCleaner\CCleaner.exe [3274008]
[MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [116648]
[MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [116648]
[MD5.0C987A6C5C38543FFCE54EA28D418420] [APT] [Synaptics TouchPad Enhancements] (.Synaptics Incorporated.) -- \Program Files\Synaptics\SynTP\SynTPEnh.exe [2916152]
O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job [1090]
O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job [1094]
O39 - APT: Synaptics TouchPad Enhancements - (.Synaptics Incorporated.) -- C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job [264]
O39 - APT: CCleanerSkipUAC - (.Piriform Ltd.) -- C:\WINDOWS\System32\Tasks\CCleanerSkipUAC [2774]
O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore [3830]
O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA [4066]
O39 - APT: Synaptics TouchPad Enhancements - (.Synaptics Incorporated.) -- C:\WINDOWS\System32\Tasks\Synaptics TouchPad Enhancements [2982]
O39 - APT: Orphean - (...) -- C:\WINDOWS\System32\Tasks\{CC5C1A9E-5DB0-43C5-BAA0-97809E67819F} [3272]
---\\ Logiciels installés (O42) (86) - 5s
O42 - Logiciel: CCleaner - (.Piriform.) [HKLM][64Bits] -- CCleaner
O42 - Logiciel: Synaptics Pointing Device Driver - (.Synaptics Incorporated.) [HKLM][64Bits] -- SynTPDeinstKey
O42 - Logiciel: WinRAR 4.00 (64-bit) - (.win.rar GmbH.) [HKLM][64Bits] -- WinRAR archiver
O42 - Logiciel: TOSHIBA Function Key - (.Toshiba Corporation.) [HKLM][64Bits] -- {16562A90-71BC-41A0-B890-D91B0C267120}
O42 - Logiciel: Visual Studio 2010 x64 Redistributables - (.AVG Technologies.) [HKLM][64Bits] -- {21B133D6-5979-47F0-BE1C-F6A6B304693F}
O42 - Logiciel: TOSHIBA eco Utility - (.Toshiba Corporation.) [HKLM][64Bits] -- {5944B9D4-3C2A-48DE-931E-26B31714A2F7}
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM][64Bits] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
O42 - Logiciel: Premium Sound HD - (.SRS Labs, Inc..) [HKLM][64Bits] -- {94F03B8E-CB73-4653-AFE9-79112C01FED2}
O42 - Logiciel: TOSHIBA Desktop Assist - (.Toshiba Corporation.) [HKLM][64Bits] -- {95CCACF0-010D-45F0-82BF-858643D8BC02}
O42 - Logiciel: TOSHIBA PC Health Monitor - (.Toshiba Corporation.) [HKLM][64Bits] -- {9DECD0F9-D3E8-48B0-A390-1CF09F54E3A4}
O42 - Logiciel: TOSHIBA Service Station - (.TOSHIBA.) [HKLM][64Bits] -- {B8C8422F-01F1-4791-B084-047AAFF9BFCC}
O42 - Logiciel: WinZip 16.0 - (.WinZip Computing, S.L. .) [HKLM][64Bits] -- {CD95F661-A5C4-44F5-A6AA-ECDD91C240CD}
O42 - Logiciel: Shared C Run-time for x64 - (.McAfee.) [HKLM][64Bits] -- {EF79C448-6946-4D71-8134-03407888C054}
O42 - Logiciel: HP Deskjet 1050 J410 series Basic Device Software - (.Hewlett-Packard Co..) [HKLM][64Bits] -- {F294770E-F869-400F-81C3-614B5F13CA54}
O42 - Logiciel: Intel® Trusted Connect Service Client - (.Intel Corporation.) [HKLM][64Bits] -- {F4404AFD-2EF3-40C1-8C09-29E5F3B6972B}
O42 - Logiciel: TOSHIBA VIDEO PLAYER - (.Toshiba Corporation.) [HKLM][64Bits] -- {FF07604E-C860-40E9-A230-E37FA41F103A}
O42 - Logiciel: Adobe Flash Player 11 Plugin - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player Plugin
O42 - Logiciel: AVG Security Toolbar - (.AVG Technologies.) [HKLM][64Bits] -- AVG Secure Search =>Toolbar.AVGSearch
O42 - Logiciel: Avira Antivirus v15.0.11.579 - (.Avira Operations GmbH & Co. KG.) [HKLM][64Bits] -- Avira Antivirus
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM][64Bits] -- Google Chrome
O42 - Logiciel: Toshiba Password Utility - (.Toshiba Corporation.) [HKLM][64Bits] -- InstallShield_{78931270-BC9E-441A-A52B-73ECD4ACFAB5}
O42 - Logiciel: Intel AppUp(SM) center - (.Intel.) [HKLM][64Bits] -- Intel AppUp(SM) center 33268
O42 - Logiciel: Malwarebytes Anti-Malware version 2.1.8.1057 - (.Malwarebytes Corporation.) [HKLM][64Bits] -- Malwarebytes Anti-Malware_is1
O42 - Logiciel: BenVista PhotoZoom Pro 4.0 - (.BenVista Ltd..) [HKLM][64Bits] -- PhotoZoom Pro 4
O42 - Logiciel: VLC media player 0.9.9 - (.VideoLAN Team.) [HKLM][64Bits] -- VLC media player
O42 - Logiciel: WildTangent Games - (.WildTangent.) [HKLM][64Bits] -- WildTangent wildgames Master Uninstall =>.WildTangent
O42 - Logiciel: Chuzzle Deluxe - (.WildTangent.) [HKLM][64Bits] -- WTA-00847893-b8a0-4e9f-bb38-07eace478127 =>.WildTangent
O42 - Logiciel: Magic Academy - (.WildTangent.) [HKLM][64Bits] -- WTA-24384cef-6b0d-4245-a56f-0564118e8346 =>.WildTangent
O42 - Logiciel: Virtual Villagers 4 - The Tree of Life - (.WildTangent.) [HKLM][64Bits] -- WTA-266be3bb-9c3b-4934-a5ab-1c4f6d3129ae =>.WildTangent
O42 - Logiciel: Island Tribe - (.WildTangent.) [HKLM][64Bits] -- WTA-2b455052-aaee-41e9-81b5-f028671f0fc5 =>.WildTangent
O42 - Logiciel: Empress of the Deep - The Darkest Secret - (.WildTangent.) [HKLM][64Bits] -- WTA-503acffe-e591-4c4c-a9db-079b29555b2a =>.WildTangent
O42 - Logiciel: Aloha TriPeaks - (.WildTangent.) [HKLM][64Bits] -- WTA-888d0abf-8465-4f0f-9fb2-a3daada64ab4 =>.WildTangent
O42 - Logiciel: Polar Bowler - (.WildTangent.) [HKLM][64Bits] -- WTA-89faf811-a825-4cab-8baf-b34be4056fc2 =>.WildTangent
O42 - Logiciel: Bejeweled 3 - (.WildTangent.) [HKLM][64Bits] -- WTA-95f5e18b-e561-4ff7-8fc0-80247bef97e4 =>.WildTangent
O42 - Logiciel: Jewel Quest Solitaire 2 - (.WildTangent.) [HKLM][64Bits] -- WTA-be7a3434-48b5-4997-83ce-8a838f78ccc1 =>.WildTangent
O42 - Logiciel: Plants vs. Zombies - Game of the Year - (.WildTangent.) [HKLM][64Bits] -- WTA-d52de5f0-9d6f-42ed-83fa-5b23de1b4ee1 =>.WildTangent
O42 - Logiciel: Peggle Nights - (.WildTangent.) [HKLM][64Bits] -- WTA-fb939c0f-e4ec-4f4d-852d-d204f0d37507 =>.WildTangent
O42 - Logiciel: xat.com JPEG Optimizer - (...) [HKLM][64Bits] -- xat.com JPEG Optimizer
O42 - Logiciel: PDFCreator - (.pdfforge.) [HKLM][64Bits] -- {0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}
O42 - Logiciel: Nero BackItUp - (.Nero AG.) [HKLM][64Bits] -- {0071820F-09B0-4998-8320-F89629DCBC99}
O42 - Logiciel: Nero Kwik Media - (.Nero AG.) [HKLM][64Bits] -- {052A1E34-A54B-458C-A4E3-24C3E054754A}
O42 - Logiciel: TOSHIBA System Settings - (.Toshiba Corporation.) [HKLM][64Bits] -- {05A55927-DB9B-4E26-BA44-828EBFF829F0}
O42 - Logiciel: Nero Express Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {0708FF30-78C0-47B0-81F0-C84604DC769C}
O42 - Logiciel: Nero RescueAgent Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {0B311221-05A5-4766-8D03-7A6446794156}
O42 - Logiciel: Nero Launcher - (.Nero AG.) [HKLM][64Bits] -- {0E4630AF-0AB7-440E-A978-1A78FC4F43B9}
O42 - Logiciel: Nero BurnRights - (.Nero AG.) [HKLM][64Bits] -- {1001266B-D4BB-46D9-B023-2612A8CE3A31}
O42 - Logiciel: Delta Chrome Toolbar - (.DeltaInstaller.) [HKLM][64Bits] -- {177586E7-E42E-4F38-83D1-D15B4AF5B714} =>Toolbar.DeltaSearch
O42 - Logiciel: Nero Kwik Themes Basic - (.Nero AG.) [HKLM][64Bits] -- {1B6F5E51-575E-4693-BCA2-7543570D076D}
O42 - Logiciel: TOSHIBA System Driver - (.Toshiba Corporation.) [HKLM][64Bits] -- {1E6A96A1-2BAB-43EF-8087-30437593C66C}
O42 - Logiciel: Nero Kwik Media Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {1F16820E-D0E7-4636-939E-45CBFEFB06E1}
O42 - Logiciel: Nero SharedVideoCodecs - (.Nero AG.) [HKLM][64Bits] -- {2432E589-6256-4513-B0BF-EFA8E325D5F0}
O42 - Logiciel: Nero 12 Essentials Toshiba - (.Nero AG.) [HKLM][64Bits] -- {2EF76291-8647-46F0-89D8-0AA8B72A5420}
O42 - Logiciel: Update Installer for WildTangent Games App - (.WildTangent.) [HKLM][64Bits] -- {2FA94A64-C84E-49d1-97DD-7BF06C7BBFB2}.WildTangent Games App =>.WildTangent
O42 - Logiciel: Intel(R) Rapid Storage Technology - (.Intel Corporation.) [HKLM][64Bits] -- {3E29EE6C-963A-4aae-86C1-DC237C4A49FC}
O42 - Logiciel: Elementals - The Magic Key - (...) [HKLM][64Bits] -- {5B3F8A4B-D576-4D83-BF72-00FC168F769D}
O42 - Logiciel: Nero Blu-ray Player Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {5B79E730-D897-4B8F-A1AD-7BB2D1F22B96}
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {60EC980A-BDA2-4CB6-A427-B07A5498B4CA}
O42 - Logiciel: Intel(R) Management Engine Components - (.Intel Corporation.) [HKLM][64Bits] -- {65153EA5-8B6E-43B6-857B-C6E4FC25798A}
O42 - Logiciel: Nero Update - (.Nero AG.) [HKLM][64Bits] -- {65BB0407-4CC8-4DC7-952E-3EEFDF05602A}
O42 - Logiciel: TOSHIBA Resolution+ Plug-in for Windows Media Player - (.TOSHIBA Corporation.) [HKLM][64Bits] -- {6CB76C9D-80C2-4CB3-A4CD-D96B239E3F94}
O42 - Logiciel: WildTangent Games App (Toshiba Games) - (.WildTangent.) [HKLM][64Bits] -- {70B446D1-E03B-4ab0-9B3C-0832142C9AA8}.WildTangent Games App-toshiba =>.WildTangent
O42 - Logiciel: OpenOffice.org 3.4.1 - (.Apache Software Foundation.) [HKLM][64Bits] -- {7DA1C06F-C913-46C7-8A0F-DA2CBA17EA1D}
O42 - Logiciel: Welcome App (Start-up experience) - (.Nero AG.) [HKLM][64Bits] -- {828175FA-7307-4DBF-95AD-9CEE086B6F45}
O42 - Logiciel: Avira v1.1.40.29239 - (.Avira Operations GmbH & Co. KG.) [HKLM][64Bits] -- {8467e01f-0496-42ce-b247-88ef205b4880}
O42 - Logiciel: Nero Express - (.Nero AG.) [HKLM][64Bits] -- {848A7C68-0ADC-4193-8A89-2CEA78E56A0C}
O42 - Logiciel: Realtek Ethernet Controller Driver - (.Realtek.) [HKLM][64Bits] -- {8833FFB6-5B0C-4764-81AA-06DFEED9A476}
O42 - Logiciel: Nero BurnRights Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {8E7EABFA-BF37-4824-B792-4220C9E04233}
O42 - Logiciel: TOSHIBA Manuals - (.TOSHIBA.) [HKLM][64Bits] -- {90FF4432-21B7-4AF6-BA6E-FB8C1FED9173}
O42 - Logiciel: Realtek USB 2.0 Card Reader - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {96AE7E41-E34E-47D0-AC07-1091A8127911}
O42 - Logiciel: Realtek WLAN Driver - (.REALTEK Semiconductor Corp..) [HKLM][64Bits] -- {9D3D8C60-A55F-4fed-B2B9-173001290E16}
O42 - Logiciel: Nero Blu-ray Player - (.Nero AG.) [HKLM][64Bits] -- {A2FE691E-3F8E-4E30-AA7D-FF17AC77EA87}
O42 - Logiciel: Avira v1.1.42.10415 - (.Avira Operations GmbH & Co. KG.) [HKLM][64Bits] -- {a5e00a72-db4a-4f77-8874-d1265b8fcd7e}
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
O42 - Logiciel: Nero ControlCenter - (.Nero AG.) [HKLM][64Bits] -- {ABC88553-8770-4B97-B43E-5A90647A5B63}
O42 - Logiciel: Avira v1.1.42.10415 - (.Avira Operations GmbH & Co. KG.) [HKLM][64Bits] -- {B4A68153-E9A2-4BC1-96C3-BEE5F56E788D}
O42 - Logiciel: TOSHIBA Recovery Media Creator - (.Toshiba Corporation.) [HKLM][64Bits] -- {B65BBB06-1F8E-48F5-8A54-B024A9E15FDF}
O42 - Logiciel: Nero RescueAgent - (.Nero AG.) [HKLM][64Bits] -- {B953732D-B623-4E84-B369-CFFF7B1AE06F}
O42 - Logiciel: Nero Core Components - (.Nero AG.) [HKLM][64Bits] -- {BEBEE34D-84A2-4EDD-8BEA-96CC54371263}
O42 - Logiciel: Nero ControlCenter Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {C994C746-C6D0-4EBA-B09E-DF7B18381B69}
O42 - Logiciel: Auslogics Disk Defrag - (.Auslogics Software Pty Ltd.) [HKLM][64Bits] -- {DF6A13C0-77DF-41FE-BD05-6D5201EB0CE7}_is1
O42 - Logiciel: Nero BackItUp Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {EF0D1292-8FC1-41BE-9740-DBC134F66415}
O42 - Logiciel: Intel(R) Processor Graphics - (.Intel Corporation.) [HKLM][64Bits] -- {F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}
O42 - Logiciel: Toshiba TEMPRO - (.Toshiba Europe GmbH.) [HKLM][64Bits] -- {F76F5214-83A8-4030-80C9-1EF57391D72A}
O42 - Logiciel: Intel(R) SDK for OpenCL - CPU Only Runtime Package - (.Intel Corporation.) [HKLM][64Bits] -- {FCB3772C-B7D0-4933-B1A9-3707EBACC573}
O42 - Logiciel: Adobe Reader XI Packages - (...) [HKCU][64Bits] -- Adobe Reader XI Packages
---\\ HKCU & HKLM Software Keys (79) - 5s
HKLM\SOFTWARE\Wow6432Node\1 Jeu par jour
HKLM\SOFTWARE\Wow6432Node\5e558ad0b16fe440
HKLM\SOFTWARE\Wow6432Node\Adobe
HKLM\SOFTWARE\Wow6432Node\Avanquest
HKLM\SOFTWARE\Wow6432Node\AVG Secure Search =>Toolbar.AVGSearch
HKLM\SOFTWARE\Wow6432Node\Avg Secure Update
HKLM\SOFTWARE\Wow6432Node\AVG Security Toolbar =>Toolbar.AVGSearch
HKLM\SOFTWARE\Wow6432Node\Avira
HKLM\SOFTWARE\Wow6432Node\Babylon =>PUP.Optional.Babylon
HKLM\SOFTWARE\Wow6432Node\BenVista
HKLM\SOFTWARE\Wow6432Node\Canon
HKLM\SOFTWARE\Wow6432Node\Delta =>Toolbar.DeltaSearch
HKLM\SOFTWARE\Wow6432Node\Google
HKLM\SOFTWARE\Wow6432Node\Hewlett-Packard
HKLM\SOFTWARE\Wow6432Node\InstallShield
HKLM\SOFTWARE\Wow6432Node\Intel
HKLM\SOFTWARE\Wow6432Node\Khronos
HKLM\SOFTWARE\Wow6432Node\Macromedia
HKLM\SOFTWARE\Wow6432Node\Malwarebytes' Anti-Malware
HKLM\SOFTWARE\Wow6432Node\Malwarebytes' Anti-Malware (Trial)
HKLM\SOFTWARE\Wow6432Node\Micro Application
HKLM\SOFTWARE\Wow6432Node\Mozilla
HKLM\SOFTWARE\Wow6432Node\MozillaPlugins
HKLM\SOFTWARE\Wow6432Node\Nero
HKLM\SOFTWARE\Wow6432Node\Nico Mak Computing
HKLM\SOFTWARE\Wow6432Node\ODBC
HKLM\SOFTWARE\Wow6432Node\OpenOffice.org
HKLM\SOFTWARE\Wow6432Node\PDFCreator
HKLM\SOFTWARE\Wow6432Node\Realtek
HKLM\SOFTWARE\Wow6432Node\Realtek Semiconductor Corp.
HKLM\SOFTWARE\Wow6432Node\sMedio
HKLM\SOFTWARE\Wow6432Node\TOSHIBA
HKLM\SOFTWARE\Wow6432Node\Toshiba Corporation
HKLM\SOFTWARE\Wow6432Node\VideoLAN
HKLM\SOFTWARE\Wow6432Node\Volatile
HKLM\SOFTWARE\Wow6432Node\WildTangent
HKLM\SOFTWARE\Wow6432Node\X-AVCSD
HKLM\SOFTWARE\Wow6432Node\RegisteredApplications
HKCU\SOFTWARE\5e558ad0b16fe440
HKCU\SOFTWARE\AppDataLow
HKCU\SOFTWARE\Auslogics
HKCU\SOFTWARE\Avanquest
HKCU\SOFTWARE\Avg
HKCU\SOFTWARE\AVG Secure Search =>Toolbar.AVGSearch
HKCU\SOFTWARE\Avira
HKCU\SOFTWARE\BenVista
HKCU\SOFTWARE\Delta =>Toolbar.DeltaSearch
HKCU\SOFTWARE\Google
HKCU\SOFTWARE\HP
HKCU\SOFTWARE\IM Providers
HKCU\SOFTWARE\Intel
HKCU\SOFTWARE\JEDI-VCL
HKCU\SOFTWARE\Macromedia
HKCU\SOFTWARE\Malwarebytes' Anti-Malware
HKCU\SOFTWARE\Micro Application
HKCU\SOFTWARE\Mine
HKCU\SOFTWARE\MozillaPlugins
HKCU\SOFTWARE\Netscape
HKCU\SOFTWARE\Nico Mak Computing
HKCU\SOFTWARE\ODBC
HKCU\SOFTWARE\OpenOffice.org
HKCU\SOFTWARE\PDF Architect
HKCU\SOFTWARE\PDFCreator
HKCU\SOFTWARE\Piriform
HKCU\SOFTWARE\Realtek
HKCU\SOFTWARE\RegisteredApplications
HKCU\SOFTWARE\Synaptics
HKCU\SOFTWARE\TeleCharger
HKCU\SOFTWARE\Toshiba
HKCU\SOFTWARE\TPUKey
HKCU\SOFTWARE\Trolltech
HKCU\SOFTWARE\VB and VBA Program Settings
HKCU\SOFTWARE\WinRAR
HKCU\SOFTWARE\WinRAR SFX
HKCU\SOFTWARE\WinZip Computing
HKCU\SOFTWARE\XA Tech
HKCU\SOFTWARE\xat.com
HKCU\SOFTWARE\ZebHelpProcess Helper
HKCU\SOFTWARE\AppDataLow\Software
---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43) (172) - 7s
O43 - CFD: 2015/06/30 08:37:16 - [] D -- C:\Program Files (x86)\1 Jeu par jour
O43 - CFD: 2013/02/09 10:04:56 - [] D -- C:\Program Files (x86)\Auslogics
O43 - CFD: 2015/07/15 23:27:40 - [] D -- C:\Program Files (x86)\AVG Secure Search =>Toolbar.AVGSearch
O43 - CFD: 2015/06/30 08:48:14 - [] D -- C:\Program Files (x86)\Avira
O43 - CFD: 2015/07/02 15:24:07 - [] D -- C:\Program Files (x86)\Common Files
O43 - CFD: 2015/06/29 21:12:50 - [0] D -- C:\Program Files (x86)\Delta
O43 - CFD: 2012/11/09 02:19:51 - [] D -- C:\Program Files (x86)\eBay
O43 - CFD: 2013/02/09 09:56:42 - [] D -- C:\Program Files (x86)\Google
O43 - CFD: 2013/03/25 21:30:16 - [] D -- C:\Program Files (x86)\HP
O43 - CFD: 2015/06/30 08:37:17 - [] HD -- C:\Program Files (x86)\InstallShield Installation Information
O43 - CFD: 2015/07/02 15:24:08 - [] D -- C:\Program Files (x86)\Intel
O43 - CFD: 2015/07/16 00:45:21 - [] D -- C:\Program Files (x86)\Internet Explorer
O43 - CFD: 2015/06/30 10:50:37 - [] D -- C:\Program Files (x86)\Malwarebytes Anti-Malware
O43 - CFD: 2015/06/29 14:13:57 - [0] D -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
O43 - CFD: 2013/06/29 16:00:08 - [] D -- C:\Program Files (x86)\Micro Application
O43 - CFD: 2015/02/13 21:51:41 - [] D -- C:\Program Files (x86)\Microsoft Office
O43 - CFD: 2015/06/29 13:52:06 - [] D -- C:\Program Files (x86)\Microsoft Silverlight
O43 - CFD: 2013/08/22 17:36:30 - [] D -- C:\Program Files (x86)\Microsoft.NET
O43 - CFD: 2013/02/09 14:43:11 - [] D -- C:\Program Files (x86)\Mozilla Firefox
O43 - CFD: 2015/07/02 15:40:00 - [] D -- C:\Program Files (x86)\MSBuild
O43 - CFD: 2015/02/13 21:50:41 - [] D -- C:\Program Files (x86)\MSECache
O43 - CFD: 2012/11/09 02:19:38 - [] D -- C:\Program Files (x86)\Nero
O43 - CFD: 2013/02/09 10:39:57 - [] D -- C:\Program Files (x86)\OpenOffice.org 3
O43 - CFD: 2013/02/09 10:41:48 - [] D -- C:\Program Files (x86)\PDFCreator
O43 - CFD: 2013/01/11 07:13:04 - [] D -- C:\Program Files (x86)\Realtek
O43 - CFD: 2013/01/11 07:12:36 - [] D -- C:\Program Files (x86)\Realtek WLAN Driver
O43 - CFD: 2015/07/02 15:40:00 - [] D -- C:\Program Files (x86)\Reference Assemblies
O43 - CFD: 2013/01/11 07:10:33 - [0] HD -- C:\Program Files (x86)\Temp
O43 - CFD: 2013/01/11 07:20:17 - [] D -- C:\Program Files (x86)\TOSHIBA
O43 - CFD: 2013/01/11 07:20:03 - [] D -- C:\Program Files (x86)\TOSHIBA Corporation
O43 - CFD: 2013/01/11 07:27:38 - [] D -- C:\Program Files (x86)\TOSHIBA Games
O43 - CFD: 2012/11/09 02:24:13 - [] D -- C:\Program Files (x86)\Toshiba TEMPRO
O43 - CFD: 2013/02/14 12:46:20 - [] D -- C:\Program Files (x86)\VLC
O43 - CFD: 2013/01/11 07:27:30 - [] D -- C:\Program Files (x86)\WildGames
O43 - CFD: 2013/01/11 07:25:55 - [] D -- C:\Program Files (x86)\WildTangent Games
O43 - CFD: 2015/07/02 15:54:42 - [] D -- C:\Program Files (x86)\Windows Defender
O43 - CFD: 2014/11/21 07:55:33 - [] D -- C:\Program Files (x86)\Windows Mail
O43 - CFD: 2015/07/02 15:24:13 - [] D -- C:\Program Files (x86)\Windows Media Player
O43 - CFD: 2014/11/21 07:55:33 - [] D -- C:\Program Files (x86)\Windows Multimedia Platform
O43 - CFD: 2013/08/22 17:36:30 - [] D -- C:\Program Files (x86)\Windows NT
O43 - CFD: 2014/11/21 07:55:33 - [] D -- C:\Program Files (x86)\Windows Photo Viewer
O43 - CFD: 2014/11/21 07:55:33 - [] D -- C:\Program Files (x86)\Windows Portable Devices
O43 - CFD: 2015/07/02 15:24:14 - [] SHD -- C:\Program Files (x86)\Windows Sidebar
O43 - CFD: 2013/08/22 17:36:30 - [] D -- C:\Program Files (x86)\WindowsPowerShell
O43 - CFD: 2013/02/09 11:15:49 - [] D -- C:\Program Files (x86)\xat.com JPEG Optimizer
O43 - CFD: 2015/07/02 15:24:16 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\1 Jeu par jour
O43 - CFD: 2014/11/21 07:56:04 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility
O43 - CFD: 2015/07/02 15:50:31 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 2015/07/06 16:31:36 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 2015/07/02 15:24:17 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Auslogics
O43 - CFD: 2015/07/29 11:09:36 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
O43 - CFD: 2015/07/02 15:29:02 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
O43 - CFD: 2015/07/02 15:29:02 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
O43 - CFD: 2015/07/02 15:29:02 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
O43 - CFD: 2015/07/02 15:24:17 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
O43 - CFD: 2015/07/02 15:29:02 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel AppUp(SM) center
O43 - CFD: 2013/08/22 17:36:33 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 2015/07/02 15:29:02 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
O43 - CFD: 2015/07/02 15:24:18 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
O43 - CFD: 2015/07/02 15:24:18 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
O43 - CFD: 2015/07/02 15:29:02 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
O43 - CFD: 2015/07/02 15:24:18 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero
O43 - CFD: 2015/07/02 15:29:02 - [] SD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice.org 3.4.1
O43 - CFD: 2015/07/02 15:29:02 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outils Microsoft Office
O43 - CFD: 2015/07/02 15:29:02 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator
O43 - CFD: 2015/07/02 15:29:02 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhotoZoom Pro 4
O43 - CFD: 2013/02/09 12:04:36 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SharePoint
O43 - CFD: 2015/07/02 15:29:02 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SRS Labs
O43 - CFD: 2015/07/02 15:29:02 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp
O43 - CFD: 2014/11/21 07:56:04 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools
O43 - CFD: 2014/11/21 00:27:29 - [0] RHD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC
O43 - CFD: 2015/07/02 15:24:20 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TOSHIBA
O43 - CFD: 2015/07/02 15:29:02 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
O43 - CFD: 2015/07/02 15:29:02 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
O43 - CFD: 2015/07/02 15:29:02 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip
O43 - CFD: 2015/07/02 15:29:02 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\xat.com JPEG Optimizer
O43 - CFD: 2013/02/09 15:11:58 - [] D -- C:\ProgramData\Adobe
O43 - CFD: 2013/08/22 16:45:52 - [0] SHD -- C:\ProgramData\Application Data
O43 - CFD: 2015/02/10 10:56:29 - [] D -- C:\ProgramData\AVG Secure Search =>Toolbar.AVGSearch
O43 - CFD: 2015/06/30 08:34:04 - [] D -- C:\ProgramData\AVG2013
O43 - CFD: 2015/06/30 08:36:23 - [] D -- C:\ProgramData\Avira
O43 - CFD: 2013/02/09 14:42:30 - [0] D -- C:\ProgramData\Babylon =>PUP.Optional.Babylon
O43 - CFD: 2013/02/09 14:43:39 - [] D -- C:\ProgramData\BrowserProtect =>PUP.Optional.SpeedBrowser
O43 - CFD: 2015/07/02 15:50:07 - [0] SHD -- C:\ProgramData\Bureau
O43 - CFD: 2013/06/30 17:32:23 - [] HD -- C:\ProgramData\CanonBJ
O43 - CFD: 2013/02/09 10:09:37 - [] HD -- C:\ProgramData\Common Files
O43 - CFD: 2013/08/22 16:45:52 - [0] SHD -- C:\ProgramData\Desktop
O43 - CFD: 2013/08/22 16:45:52 - [0] SHD -- C:\ProgramData\Documents
O43 - CFD: 2013/03/25 21:30:47 - [] D -- C:\ProgramData\HP
O43 - CFD: 2013/01/11 07:06:39 - [] D -- C:\ProgramData\Intel
O43 - CFD: 2015/06/29 14:13:57 - [] D -- C:\ProgramData\Malwarebytes
O43 - CFD: 2015/07/02 15:50:07 - [0] SHD -- C:\ProgramData\Menu Démarrer
O43 - CFD: 2015/06/30 08:34:35 - [] D -- C:\ProgramData\MFAData
O43 - CFD: 2013/06/30 19:15:10 - [] D -- C:\ProgramData\Micro Application
O43 - CFD: 2015/07/02 15:24:21 - [] SD -- C:\ProgramData\Microsoft
O43 - CFD: 2013/02/09 15:40:07 - [] D -- C:\ProgramData\Microsoft Help
O43 - CFD: 2015/07/02 15:50:07 - [0] SHD -- C:\ProgramData\Modèles
O43 - CFD: 2012/11/09 02:45:24 - [] D -- C:\ProgramData\Nero
O43 - CFD: 2015/07/29 11:09:13 - [] D -- C:\ProgramData\Package Cache
O43 - CFD: 2013/02/09 10:43:33 - [0] D -- C:\ProgramData\PDF Architect
O43 - CFD: 2015/07/02 15:24:21 - [] D -- C:\ProgramData\PRICache
O43 - CFD: 2014/11/21 07:55:33 - [] D -- C:\ProgramData\regid.1991-06.com.microsoft
O43 - CFD: 2013/08/22 16:45:52 - [0] SHD -- C:\ProgramData\Start Menu
O43 - CFD: 2013/02/12 03:08:34 - [] D -- C:\ProgramData\Synaptics
O43 - CFD: 2013/08/22 16:45:52 - [0] SHD -- C:\ProgramData\Templates
O43 - CFD: 2013/02/09 09:38:43 - [] D -- C:\ProgramData\Toshiba
O43 - CFD: 2013/02/09 09:41:54 - [] D -- C:\ProgramData\ToshibaEurope
O43 - CFD: 2013/12/16 17:08:15 - [] D -- C:\ProgramData\Western Digital
O43 - CFD: 2013/02/10 20:37:45 - [] D -- C:\ProgramData\WildTangent
O43 - CFD: 2013/02/09 11:07:05 - [] D -- C:\ProgramData\WinZip
O43 - CFD: 2015/04/02 09:33:56 - [] D -- C:\Program Files (x86)\Common Files\AVG Secure Search =>Toolbar.AVGSearch
O43 - CFD: 2013/02/09 15:50:07 - [] D -- C:\Program Files (x86)\Common Files\Designer
O43 - CFD: 2013/01/11 07:10:12 - [] D -- C:\Program Files (x86)\Common Files\InstallShield
O43 - CFD: 2013/01/11 07:07:32 - [] D -- C:\Program Files (x86)\Common Files\Intel
O43 - CFD: 2015/07/02 15:24:07 - [] D -- C:\Program Files (x86)\Common Files\Microsoft Shared
O43 - CFD: 2012/11/09 02:19:02 - [] D -- C:\Program Files (x86)\Common Files\Nero
O43 - CFD: 2013/01/11 07:06:18 - [] D -- C:\Program Files (x86)\Common Files\postureAgent
O43 - CFD: 2013/08/22 17:36:33 - [] D -- C:\Program Files (x86)\Common Files\Services
O43 - CFD: 2015/07/02 15:24:07 - [] D -- C:\Program Files (x86)\Common Files\System
O43 - CFD: 2013/01/11 07:20:04 - [] D -- C:\Program Files (x86)\Common Files\Toshiba Shared
O43 - CFD: 2013/02/09 14:48:05 - [] D -- C:\Users\Aurore\AppData\Roaming\0T1P1I1P0C1M1T1C1N1P1C =>PUP.Optional.InstallCore
O43 - CFD: 2013/02/09 09:36:46 - [] D -- C:\Users\Aurore\AppData\Roaming\Adobe
O43 - CFD: 2013/02/14 12:32:37 - [0] D -- C:\Users\Aurore\AppData\Roaming\ArchiFacile
O43 - CFD: 2013/02/09 10:04:59 - [] D -- C:\Users\Aurore\AppData\Roaming\Auslogics
O43 - CFD: 2013/02/09 10:19:55 - [] D -- C:\Users\Aurore\AppData\Roaming\AVG2013
O43 - CFD: 2015/06/30 08:35:32 - [] D -- C:\Users\Aurore\AppData\Roaming\Avira
O43 - CFD: 2013/02/09 14:42:30 - [] D -- C:\Users\Aurore\AppData\Roaming\Babylon =>PUP.Optional.Babylon
O43 - CFD: 2015/08/03 20:30:18 - [] D -- C:\Users\Aurore\AppData\Roaming\dvdcss
O43 - CFD: 2013/06/30 12:43:40 - [] D -- C:\Users\Aurore\AppData\Roaming\ElementalsTheMagicKey
O43 - CFD: 2015/06/29 21:12:50 - [0] D -- C:\Users\Aurore\AppData\Roaming\Funmoods
O43 - CFD: 2015/07/02 16:10:41 - [] D -- C:\Users\Aurore\AppData\Roaming\Identities
O43 - CFD: 2013/02/09 14:42:10 - [] D -- C:\Users\Aurore\AppData\Roaming\Macromedia
O43 - CFD: 2015/06/29 14:14:04 - [0] D -- C:\Users\Aurore\AppData\Roaming\Malwarebytes
O43 - CFD: 2015/07/02 15:43:19 - [] SD -- C:\Users\Aurore\AppData\Roaming\Microsoft
O43 - CFD: 2015/06/30 10:50:06 - [] D -- C:\Users\Aurore\AppData\Roaming\Mozilla
O43 - CFD: 2013/02/09 10:41:17 - [] D -- C:\Users\Aurore\AppData\Roaming\OpenOffice.org
O43 - CFD: 2013/02/09 10:41:14 - [] D -- C:\Users\Aurore\AppData\Roaming\pdfforge
O43 - CFD: 2013/02/09 12:51:52 - [] D -- C:\Users\Aurore\AppData\Roaming\sMedio
O43 - CFD: 2013/02/09 10:18:53 - [] D -- C:\Users\Aurore\AppData\Roaming\TuneUp Software
O43 - CFD: 2013/02/14 12:47:54 - [] D -- C:\Users\Aurore\AppData\Roaming\vlc
O43 - CFD: 2013/02/10 20:37:45 - [] D -- C:\Users\Aurore\AppData\Roaming\WildTangent
O43 - CFD: 2013/05/12 19:54:06 - [] D -- C:\Users\Aurore\AppData\Roaming\WinRAR
O43 - CFD: 2015/08/04 10:19:14 - [] D -- C:\Users\Aurore\AppData\Roaming\ZHP
O43 - CFD: 2015/07/02 15:20:32 - [0] SHD -- C:\Users\Aurore\AppData\Local\Application Data
O43 - CFD: 2013/02/09 09:53:04 - [] D -- C:\Users\Aurore\AppData\Local\Apps
O43 - CFD: 2014/07/05 15:03:55 - [] D -- C:\Users\Aurore\AppData\Local\AVG Secure Search =>Toolbar.AVGSearch
O43 - CFD: 2013/02/09 11:20:06 - [] D -- C:\Users\Aurore\AppData\Local\Avg2013
O43 - CFD: 2015/02/10 21:45:09 - [0] D -- C:\Users\Aurore\AppData\Local\Diagnostics
O43 - CFD: 2014/11/30 21:23:21 - [0] D -- C:\Users\Aurore\AppData\Local\ElevatedDiagnostics
O43 - CFD: 2013/02/09 09:56:50 - [] D -- C:\Users\Aurore\AppData\Local\Google
O43 - CFD: 2015/07/02 15:20:32 - [0] SHD -- C:\Users\Aurore\AppData\Local\Historique
O43 - CFD: 2013/03/25 21:33:13 - [] D -- C:\Users\Aurore\AppData\Local\HP
O43 - CFD: 2013/02/09 10:09:37 - [] D -- C:\Users\Aurore\AppData\Local\MFAData
O43 - CFD: 2015/07/04 10:58:36 - [] D -- C:\Users\Aurore\AppData\Local\Microsoft
O43 - CFD: 2013/02/09 10:33:46 - [0] D -- C:\Users\Aurore\AppData\Local\Microsoft Help
O43 - CFD: 2015/06/30 08:38:08 - [0] D -- C:\Users\Aurore\AppData\Local\Orange
O43 - CFD: 2015/07/04 13:18:37 - [] D -- C:\Users\Aurore\AppData\Local\Packages
O43 - CFD: 2013/02/09 10:08:31 - [] D -- C:\Users\Aurore\AppData\Local\Programs
O43 - CFD: 2013/07/27 18:48:49 - [] D -- C:\Users\Aurore\AppData\Local\SelfExtractible
O43 - CFD: 2013/02/09 09:37:30 - [] D -- C:\Users\Aurore\AppData\Local\SRS Labs
O43 - CFD: 2015/08/04 10:19:15 - [] D -- C:\Users\Aurore\AppData\Local\Temp
O43 - CFD: 2015/07/02 15:20:32 - [0] SHD -- C:\Users\Aurore\AppData\Local\Temporary Internet Files
O43 - CFD: 2013/02/10 20:41:42 - [] D -- C:\Users\Aurore\AppData\Local\TOSHIBA
O43 - CFD: 2015/04/05 17:50:46 - [] D -- C:\Users\Aurore\AppData\Local\VirtualStore
O43 - CFD: 2014/11/21 07:56:04 - [] RD -- C:\Users\Aurore\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
O43 - CFD: 2014/11/21 07:56:04 - [] RD -- C:\Users\Aurore\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 2015/07/02 16:11:21 - [] RD -- C:\Users\Aurore\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 2013/08/22 17:36:32 - [] D -- C:\Users\Aurore\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 2015/07/02 16:11:21 - [] RD -- C:\Users\Aurore\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
O43 - CFD: 2015/07/02 15:21:44 - [] RD -- C:\Users\Aurore\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
O43 - CFD: 2015/07/02 15:29:01 - [] D -- C:\Users\Aurore\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
O43 - CFD: 2013/02/09 11:15:48 - [0] D -- C:\Users\Aurore\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\xat.com JPEG Optimizer
---\\ Liste des pilotes du système (SDL) (O58) (61) - 10s
O58 - SDL:2013/08/22 14:43:41 A . (.LSI - LSI 3ware SCSI Storport Driver.) -- C:\WINDOWS\System32\drivers\3ware.sys [108896]
O58 - SDL:2013/08/22 14:43:41 A . (.PMC-Sierra - PMC-Sierra Storport Driver For SPC8x6G SAS.) -- C:\WINDOWS\System32\drivers\adp80xx.sys [782176]
O58 - SDL:2013/08/22 14:43:41 A . (.Advanced Micro Devices - AHCI 1.3 Device Driver.) -- C:\WINDOWS\System32\drivers\amdsata.sys [79200]
O58 - SDL:2013/08/22 14:43:41 A . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller D.) -- C:\WINDOWS\System32\drivers\amdsbs.sys [259424]
O58 - SDL:2013/08/22 14:43:40 A . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\WINDOWS\System32\drivers\amdxata.sys [25952]
O58 - SDL:2013/08/22 14:43:41 A . (.PMC-Sierra, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\WINDOWS\System32\drivers\arcsas.sys [114016]
O58 - SDL:2015/05/28 16:48:59 A . (.Avira Operations GmbH & Co. KG - Avira Minifilter Driver.) -- C:\WINDOWS\System32\drivers\avgntflt.sys [153256]
O58 - SDL:2015/05/28 16:49:00 A . (.Avira Operations GmbH & Co. KG - Avira Driver for Security Enhancement.) -- C:\WINDOWS\System32\drivers\avipbb.sys [132656]
O58 - SDL:2015/05/28 16:49:01 A . (.Avira Operations GmbH & Co. KG - Avira Manager Driver.) -- C:\WINDOWS\System32\drivers\avkmgr.sys [28600]
O58 - SDL:2015/05/28 16:49:03 A . (.Avira Operations GmbH & Co. KG - Avira WFP Network Driver.) -- C:\WINDOWS\System32\drivers\avnetflt.sys [43576]
O58 - SDL:2013/08/13 01:25:46 A . (.Windows (R) Win 7 DDK provider - BCM Function 2 Device Driver.) -- C:\WINDOWS\System32\drivers\bcmfn2.sys [17624]
O58 - SDL:2013/08/22 14:43:41 A . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.) -- C:\WINDOWS\System32\drivers\bxvbda.sys [531296]
O58 - SDL:2015/08/03 13:35:28 A . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\WINDOWS\System32\drivers\esypdbv.sys [79064]
O58 - SDL:2013/08/22 14:43:45 A . (.Broadcom Corporation - Broadcom NetXtreme II 10 GigE VBD.) -- C:\WINDOWS\System32\drivers\evbda.sys [3357024]
O58 - SDL:2011/06/23 14:27:20 A . (.Huawei Technologies Co., Ltd. - USB Modem/Serial Device Driver.) -- C:\WINDOWS\System32\drivers\ewusbmdm.sys [121600]
O58 - SDL:2011/06/23 14:27:20 A . (.Huawei Technologies Co., Ltd. - USB NDIS Miniport Driver.) -- C:\WINDOWS\System32\drivers\ewusbnet.sys [138752]
O58 - SDL:2011/06/23 14:27:20 A . (.Huawei Technologies Co., Ltd. - USB Modem/Serial Device Driver.) -- C:\WINDOWS\System32\drivers\ew_hwusbdev.sys [117248]
O58 - SDL:2012/07/03 01:16:02 A . (.Intel Corporation - Intel(R) Management Engine Interface.) -- C:\WINDOWS\System32\drivers\HECIx64.sys [62784]
O58 - SDL:2013/08/22 14:43:45 A . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Drive.) -- C:\WINDOWS\System32\drivers\HpSAMD.sys [64352]
O58 - SDL:2013/07/30 20:47:35 A . (.Intel Corporation - Intel(R) Serial IO GPIO Controller Driver.) -- C:\WINDOWS\System32\drivers\iaLPSSi_GPIO.sys [24568]
O58 - SDL:2013/07/25 21:05:39 A . (.Intel Corporation - Intel(R) Serial IO I2C Controller Driver.) -- C:\WINDOWS\System32\drivers\iaLPSSi_I2C.sys [99320]
O58 - SDL:2012/07/31 21:22:00 A . (.Intel Corporation - Intel Rapid Storage Technology driver - x64.) -- C:\WINDOWS\System32\drivers\iaStorA.sys [645952]
O58 - SDL:2013/08/10 02:39:30 A . (.Intel Corporation - Intel Rapid Storage Technology driver (inbo.) -- C:\WINDOWS\System32\drivers\iaStorAV.sys [651248]
O58 - SDL:2013/08/22 14:43:45 A . (.Intel Corporation - Intel Matrix Storage Manager driver - x64.) -- C:\WINDOWS\System32\drivers\iaStorV.sys [412000]
O58 - SDL:2013/11/04 19:22:32 A . (.Intel Corporation - Intel Graphics Kernel Mode Driver.) -- C:\WINDOWS\System32\drivers\igdkmd64.sys [4195840]
O58 - SDL:2012/06/19 08:40:50 A . (.Intel(R) Corporation - Intel(R) Display Audio Driver.) -- C:\WINDOWS\System32\drivers\IntcDAud.sys [342528]
O58 - SDL:2013/10/18 00:41:31 A . (.Intel Corporation - Intel® WiDi Solution.) -- C:\WINDOWS\System32\drivers\intelaud.sys [39320]
O58 - SDL:2013/10/18 00:41:31 A . (.Intel Corporation - Intel® WiDi Solution.) -- C:\WINDOWS\System32\drivers\iwdbus.sys [27032]
O58 - SDL:2013/08/22 14:43:44 A . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas.sys [109408]
O58 - SDL:2013/08/22 14:43:45 A . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas2.sys [93536]
O58 - SDL:2013/08/22 14:43:44 A . (.LSI Corporation - LSI SAS Gen3 Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas3.sys [81760]
O58 - SDL:2013/08/22 14:43:45 A . (.LSI Corporation - LSI SSS PCIe/Flash Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sss.sys [82784]
O58 - SDL:2015/06/18 08:41:40 A . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\WINDOWS\System32\drivers\mbam.sys [25816]
O58 - SDL:2015/06/18 08:41:44 A . (.Malwarebytes Corporation - Malwarebytes Chameleon Protection Driver.) -- C:\WINDOWS\System32\drivers\mbamchameleon.sys [109272]
O58 - SDL:2015/08/04 08:29:51 A . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\WINDOWS\System32\drivers\MBAMSwissArmy.sys [113880]
O58 - SDL:2013/08/22 14:43:45 A . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\megasas.sys [56672]
O58 - SDL:2013/08/22 14:43:45 A . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\WINDOWS\System32\drivers\megasr.sys [575840]
O58 - SDL:2013/08/22 14:43:49 A . (.Marvell Semiconductor, Inc. - Marvell Flash Controller Driver.) -- C:\WINDOWS\System32\drivers\mvumis.sys [63840]
O58 - SDL:2015/06/18 08:42:02 A . (.Malwarebytes Corporation - Malwarebytes Web Access Control.) -- C:\WINDOWS\System32\drivers\mwac.sys [64216]
O58 - SDL:2013/08/22 14:43:31 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\WINDOWS\System32\drivers\nvraid.sys [150368]
O58 - SDL:2013/08/22 14:43:32 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\WINDOWS\System32\drivers\nvstor.sys [168288]
O58 - SDL:2013/06/18 16:46:17 A . (.Realtek - Realtek 8101E/8168/8169 NDIS 6.30 64-bit Dr.) -- C:\WINDOWS\System32\drivers\Rt630x64.sys [591360]
O58 - SDL:2012/09/25 21:09:12 A . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function D.) -- C:\WINDOWS\System32\drivers\RTKVHD64.sys [4155536]
O58 - SDL:2010/12/22 17:24:00 A . (.Realtek Semiconductor Corporation - Realtek RTL819xP NDIS Driverr.) -- C:\WINDOWS\System32\drivers\rtl819xp.sys [626792]
O58 - SDL:2012/06/13 19:24:00 A . (.Realtek Semiconductor Corp. - Realtek USB Mass Storage Driver for 2K/XP/V.) -- C:\WINDOWS\System32\drivers\RtsUStor.sys [252048]
O58 - SDL:2013/07/31 20:25:43 A . (.Realtek Semiconductor Corporation - Realtek PCIE NDIS Driverr.) -- C:\WINDOWS\System32\drivers\rtwlane.sys [1936088]
O58 - SDL:2013/08/22 17:35:09 A . (.Macrovision Corporation, Macrovision Europe Limited, - Macrovision SECURITY Driver.) -- C:\WINDOWS\System32\drivers\secdrv.sys [23040]
O58 - SDL:2013/08/22 14:43:31 A . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\WINDOWS\System32\drivers\sisraid2.sys [44896]
O58 - SDL:2013/08/22 14:43:32 A . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\WINDOWS\System32\drivers\sisraid4.sys [81760]
O58 - SDL:2012/08/16 15:24:06 A . (.Synaptics Incorporated - Synaptics SMBus Driver.) -- C:\WINDOWS\System32\drivers\Smb_driver_Intel.sys [43832]
O58 - SDL:2013/08/22 14:43:32 A . (.Promise Technology, Inc. - Promise SuperTrak EX Series Driver for Wind.) -- C:\WINDOWS\System32\drivers\stexstor.sys [31072]
O58 - SDL:2012/08/16 15:24:06 A . (.Synaptics Incorporated - Synaptics Touchpad Driver.) -- C:\WINDOWS\System32\drivers\SynTP.sys [447800]
O58 - SDL:2012/07/25 02:54:00 A . (.TOSHIBA Corporation. - TOSHIBA ODD Writing Driver for x64..) -- C:\WINDOWS\System32\drivers\tdcmdpst.sys [31184]
O58 - SDL:2012/07/31 22:28:54 A . (.Windows (R) Win 7 DDK provider - Toshiba Hotkey Driver.) -- C:\WINDOWS\System32\drivers\Thotkey.sys [28632]
O58 - SDL:2013/11/01 04:22:28 A . (.TOSHIBA Corporation - TOSHIBA Bluetooth EC Driver.) -- C:\WINDOWS\System32\drivers\tosrfec.sys [27032]
O58 - SDL:2012/06/18 20:30:56 A . (.TOSHIBA Corporation - tos_sps64.) -- C:\WINDOWS\System32\drivers\tos_sps64.sys [499096]
O58 - SDL:2012/07/22 01:59:02 A . (.TOSHIBA Corporation - TOSHIBA TVALZ Filter Driver.) -- C:\WINDOWS\System32\drivers\TVALZFL.sys [16768]
O58 - SDL:2012/07/26 02:34:42 A . (.TOSHIBA Corporation - TOSHIBA ACPI-Based Value Added Logical and.) -- C:\WINDOWS\System32\drivers\TVALZ_O.SYS [32832]
O58 - SDL:2013/08/22 14:43:34 A . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\WINDOWS\System32\drivers\viaide.sys [19808]
O58 - SDL:2013/08/22 14:43:34 A . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\WINDOWS\System32\drivers\vsmraid.sys [168800]
O58 - SDL:2013/08/22 14:43:34 A . (.VIA Corporation - VIA StorX RAID Controller Driver.) -- C:\WINDOWS\System32\drivers\VSTXRAID.SYS [305504]
---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61) (1) - 28s
O61 - LFC: 2015/08/04 08:33:42 A . (..) -- C:\Users\Aurore\AppData\Local\Google\Chrome\User Data\ev_hashes_whitelist.bin [1113849]
---\\ Associations Shell Spawning (O67) (1) - 0s
O67 - Shell Spawning: <.evt>[HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Ob.) -- C:\Windows\System32\eventvwr.exe
---\\ Menu de démarrage Internet (SMI) (O68) (8) - 0s
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe
---\\ Recherche d'infection sur les navigateurs internet (SBI) (O69) (1) - 1s
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - http://www.bing.com/
---\\ Enumère les services démarrés par Svchost (SSS) (O83) (34) - 3s
O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience dâapplication.) -- C:\WINDOWS\System32\aelupsvc.dll [214528]
O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\WINDOWS\System32\certprop.dll [156160]
O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\WINDOWS\System32\certprop.dll [156160]
O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\WINDOWS\system32\srvsvc.dll [329216]
O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\WINDOWS\System32\gpsvc.dll [1360896]
O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\WINDOWS\System32\ikeext.dll [1084416]
O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur u.) -- C:\WINDOWS\System32\iphlpsvc.dll [926208]
O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service dâouverture de session secon.) -- C:\WINDOWS\system32\seclogon.dll [31744]
O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations dâapplication.) -- C:\WINDOWS\System32\appinfo.dll [110080]
O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\WINDOWS\system32\iscsiexe.dll [151040]
O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\WINDOWS\System32\eapsvc.dll [110592]
O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\WINDOWS\system32\schedsvc.dll [1265152]
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\WINDOWS\system32\wbem\WMIsvc.dll [230400]
O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédia.) -- C:\WINDOWS\system32\mmcss.dll [71168]
O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur dâordinateurs.) -- C:\WINDOWS\System32\browser.dll [135168]
O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\WINDOWS\system32\profsvc.dll [225280]
O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à .) -- C:\Windows\System32\SessEnv.dll [339968]
O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\WINDOWS\System32\wercplsupport.dll [84992]
O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\WINDOWS\system32\kmsvc.dll [101376]
O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\WINDOWS\System32\bdesvc.dll [348672]
O83 - Search Svchost Services: lfsvc (lfsvc) . (.Microsoft Corporation - Service dâinfrastructure de localisation Wi.) -- C:\Windows\System32\GeofenceMonitorService.dll [521728]
O83 - Search Svchost Services: wlidsvc (wlidsvc) . (.Microsoft Corporation - Service de compte Microsoft®.) -- C:\WINDOWS\system32\wlidsvc.dll [1639424]
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\WINDOWS\system32\themeservice.dll [59392]
O83 - Search Svchost Services: DsmSvc (DsmSvc) . (.Microsoft Corporation - Gestionnaire dâinstallation de périphérique.) -- C:\WINDOWS\System32\DeviceSetupManager.dll [206848]
O83 - Search Svchost Services: NcaSvc (NcaSvc) . (.Microsoft Corporation - Service Assistant Connectivité réseau Micro.) -- C:\WINDOWS\System32\ncasvc.dll [166400]
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique dâ.) -- C:\WINDOWS\System32\rasauto.dll [102912]
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire des connexions dâaccès à dista.) -- C:\WINDOWS\System32\rasmans.dll [542208]
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire dâinterface dynamique.) -- C:\Windows\System32\mprdim.dll [226816]
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification dâévénements systèm.) -- C:\WINDOWS\System32\sens.dll [73728]
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de lâapplication dâassistance à .) -- C:\WINDOWS\System32\ipnathlp.dll [452608]
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM.) -- C:\Windows\System32\tapisrv.dll [313344]
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Up.) -- C:\WINDOWS\system32\wuaueng.dll [3678720]
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière.) -- C:\WINDOWS\System32\qmgr.dll [933376]
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [640000]
---\\ Liste des exceptions du parefeu (FirewallRules) (O87) (8) - 2s
O87 - FAEL: "{5E3AE369-80FB-4BE6-A74A-D2BC4619BD2F}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\AVG\AVG2013\avgemca.exe (.not file.)
O87 - FAEL: "{3AF3ED6E-259A-45A8-BA58-B0E152AD6909}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\AVG\AVG2013\avgemca.exe (.not file.)
O87 - FAEL: "{253E028F-2138-4F30-BF86-7905CD00260B}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\AVG\AVG2013\avgdiagex.exe (.not file.)
O87 - FAEL: "{4A6C5B8F-B045-4E94-BE97-32C7645CF0CD}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\AVG\AVG2013\avgdiagex.exe (.not file.)
O87 - FAEL: "{EACF2EE1-31D6-4FE4-908E-85F538E9B9F5}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\AVG\AVG2013\avgnsa.exe (.not file.)
O87 - FAEL: "{2F0E874C-2CFD-47B5-BF5A-098C36882EE9}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\AVG\AVG2013\avgnsa.exe (.not file.)
O87 - FAEL: "{283CC8E1-949D-4734-B68A-D75B44394A61}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\AVG\AVG2013\avgmfapx.exe (.not file.)
O87 - FAEL: "{F0ED593C-19B9-49C4-9EFE-3EC0DCBD499D}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\AVG\AVG2013\avgmfapx.exe (.not file.)
---\\ Enumère les codes produits des logiciels (PUC) (O90) (1) - 1s
O90 - PUC: "7E685771E24E83F4381D1DB5A45F7B41" . (.Delta Chrome Toolbar.) -- C:\windows\Installer\{177586E7-E42E-4F38-83D1-D15B4AF5B714}\Delta.ico =>Toolbar.DeltaSearch
---\\ Scan Additionnel (O88) (23) - 0s
C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.7.0\ToolbarUpdater.exe =>Toolbar.AVGSearch
C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.7.0\loggingserver.exe =>Toolbar.AVGSearch
C:\Program Files (x86)\AVG Secure Search\vprot.exe =>Toolbar.AVGSearch
HKLM\SYSTEM\CurrentControlSet\Services\vToolbarUpdater18.7.0 =>Toolbar.AVGSearch
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\AVG Secure Search =>Toolbar.AVGSearch
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{177586E7-E42E-4F38-83D1-D15B4AF5B714} =>Toolbar.DeltaSearch
HKLM\SOFTWARE\Wow6432Node\AVG Secure Search =>Toolbar.AVGSearch
HKLM\SOFTWARE\Wow6432Node\AVG Security Toolbar =>Toolbar.AVGSearch
HKLM\SOFTWARE\Wow6432Node\Babylon =>PUP.Optional.Babylon
HKLM\SOFTWARE\Wow6432Node\Delta =>Toolbar.DeltaSearch
HKCU\SOFTWARE\AVG Secure Search =>Toolbar.AVGSearch
HKCU\SOFTWARE\Delta =>Toolbar.DeltaSearch
C:\Program Files (x86)\AVG Secure Search =>Toolbar.AVGSearch
C:\ProgramData\AVG Secure Search =>Toolbar.AVGSearch
C:\ProgramData\Babylon =>PUP.Optional.Babylon
C:\ProgramData\BrowserProtect =>PUP.Optional.SpeedBrowser
C:\Program Files (x86)\Common Files\AVG Secure Search =>Toolbar.AVGSearch
C:\Users\Aurore\AppData\Roaming\0T1P1I1P0C1M1T1C1N1P1C =>PUP.Optional.InstallCore
C:\Users\Aurore\AppData\Roaming\Babylon =>PUP.Optional.Babylon
C:\Users\Aurore\AppData\Local\AVG Secure Search =>Toolbar.AVGSearch
C:\windows\Installer\{177586E7-E42E-4F38-83D1-D15B4AF5B714}\Delta.ico =>Toolbar.DeltaSearch
HKLM\Software\Classes\Installer\Products\7E685771E24E83F4381D1DB5A45F7B41 =>Toolbar.DeltaSearch
HKLM\Software\Classes\Installer\Features\7E685771E24E83F4381D1DB5A45F7B41 =>Toolbar.DeltaSearch
---\\ Récapitulatif des éléments trouvées sur votre station (5) - 0s
http://www.nicolascoolman.fr/blog =>Toolbar.AVGSearch
http://www.nicolascoolman.fr/toolbar-deltasearch/ =>Toolbar.DeltaSearch
http://www.nicolascoolman.fr/pup-babylon/ =>PUP.Optional.Babylon
http://www.nicolascoolman.fr/blog =>PUP.Optional.SpeedBrowser
http://www.nicolascoolman.fr/adware-installcore/ =>PUP.Optional.InstallCore
~ End of the scan, 18321 items in 141 seconds (682)(0)()
~ Démarré par Aurore (Administrator) (2015/08/04 10:18:56)
~ Site: http://www.nicolascoolman.fr
~ Facebook: https://www.facebook.com/nicolascoolman1
~ Etat de la version: Version OK
~ Mode: Scanner
~ Rapport: C:\Users\Aurore\Desktop\ZHPDiag.txt
~ Rapport: C:\Users\Aurore\AppData\Roaming\ZHP\ZHPDiag.txt
~ UAC: Activate
~ Démarrage du système: Normal (Normal boot)
~ Windows 8.1, 64-bit (Build 9600)
---\\ Navigateurs Internet (2) - 0s
GCIE: Google Chrome v44.0.2403.125
MSIE: Internet Explorer v11.0.9600.17905
---\\ Informations sur les produits Windows (4) - 7s
~ Windows Server License Manager Script : OK
~ Licence Script File Génération : OK
Windows Automatic Updates : OK (Demand)
Windows Activation Technologies : OK
---\\ Logiciels de protection (2) - 0s
Avira Antivirus v15.0.11.579
Malwarebytes Anti-Malware version 2.1.8.1057
---\\ Logiciels d'optimisation (1) - 0s
CCleaner v3.27
---\\ Surveillance de Logiciels (1) - 0s
Adobe Flash Player 11 Plugin
---\\ Informations sur le système (6) - 0s
~ Operating System: Intel64 Family 6 Model 58 Stepping 9, GenuineIntel
~ Operating System: 64-bit
~ Boot mode: Normal (Normal boot)
Total RAM: 4074.72 MB (36% free)
~ System Restore: Activé (Enable)
~ System drive C: has 257 GB free of 703 GB
---\\ Mode de connexion au système (3) - 0s
~ Computer Name: PCAURORE
~ User Name: Aurore
~ Logged in as Administrator
---\\ Enumération des unités disques (1) - 0s
~ Drive C: has 257 GB free of 703 GB (System)
---\\ Etat du Centre de Sécurité Windows (11) - 0s
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK
---\\ Recherche particulière de fichiers génériques (23) - 1s
[MD5.C10A66189DC8C090E7C84873EDCEBC88] - (.Microsoft Corporation - Explorateur Windows.) () -- C:\WINDOWS\Explorer.exe [2501368]
[MD5.6C308D32AFA41D26CE2A0EA8F7B79565] - (.Microsoft Corporation - Processus hôte Windows (Rundll32).) () -- C:\WINDOWS\System32\rundll32.exe [54784]
[MD5.A570A64292214C43E0BA50E6A72A6380] - (.Microsoft Corporation - Application de démarrage de Windows.) () -- C:\WINDOWS\System32\Wininit.exe [145920]
[MD5.98C6A46E9E2822BF83196C2EAE43DBD4] - (.Microsoft Corporation - Extensions Internet pour Win32.) () -- C:\WINDOWS\System32\wininet.dll [2427392]
[MD5.EC498BAE1F0D3E0E401C963F8D76C437] - (.Microsoft Corporation - Application dâouverture de session Windows.) () -- C:\WINDOWS\System32\Winlogon.exe [572416]
[MD5.AFCAB4DC692CCE37E283B00E2D7B438F] - (.Microsoft Corporation - Bibliothèque de licences.) () -- C:\WINDOWS\System32\sppcomapi.dll [447488]
[MD5.E37F897ED7B5AFF79B1398258DB96BD9] - (.Microsoft Corporation - DLL client de lâAPI uilisateur de Windows m.) () -- C:\WINDOWS\System32\fr-FR\user32.dll.mui [19456]
[MD5.374E27295F0A9DCAA8FC96370F9BEEA5] - (.Microsoft Corporation - Pilote de fonction connexe pour WinSock.) () -- C:\WINDOWS\System32\drivers\AFD.sys [563200]
[MD5.74B14192CF79A72F7536B27CB8814FBD] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) () -- C:\WINDOWS\System32\drivers\atapi.sys [26464]
[MD5.2FA6510E33F7DEFEC03658B74101A9B9] - (.Microsoft Corporation - CD-ROM File System Driver.) () -- C:\WINDOWS\System32\drivers\Cdfs.sys [88576]
[MD5.C6796EA22B513E3457514D92DCDB1A3D] - (.Microsoft Corporation - SCSI CD-ROM Driver.) () -- C:\WINDOWS\System32\drivers\Cdrom.sys [164352]
[MD5.A03F362C5557E238CBFA914689C77248] - (.Microsoft Corporation - DFS Namespace Client Driver.) () -- C:\WINDOWS\System32\drivers\DfsC.sys [134144]
[MD5.D4B7ED39C7900384D9E5C1283F1E7926] - (.Microsoft Corporation - High Definition Audio Bus Driver.) () -- C:\WINDOWS\System32\drivers\HDAudBus.sys [76800]
[MD5.49EE0AE9E5B64FFBBD06D55C4984B598] - (.Microsoft Corporation - Pilote de port i8042.) () -- C:\WINDOWS\System32\drivers\i8042prt.sys [108544]
[MD5.B7342B3C58E91107F6E946A93D9D4EFD] - (.Microsoft Corporation - IP Network Address Translator.) () -- C:\WINDOWS\System32\drivers\IpNat.sys [142848]
[MD5.6FBDF2B1B025A8E6E069234362FFFFB7] - (.Microsoft Corporation - Minirdr SMB Windows NT.) () -- C:\WINDOWS\System32\drivers\MRxSmb.sys [401408]
[MD5.0217532E19A748F0E5D569307363D5FD] - (.Microsoft Corporation - MBT Transport driver.) () -- C:\WINDOWS\System32\drivers\netBT.sys [282624]
[MD5.7F68063A5A0461E02BC860CE0E6BFDDC] - (.Microsoft Corporation - Pilote du système de fichiers NT.) () -- C:\WINDOWS\System32\drivers\ntfs.sys [2025792]
[MD5.764B1121867B2D9B31C491668AC72B2B] - (.Microsoft Corporation - Pilote de port parallèle.) () -- C:\WINDOWS\System32\drivers\Parport.sys [94208]
[MD5.1BD3022FD6E450B00DE560265638FD2A] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) () -- C:\WINDOWS\System32\drivers\Rasl2tp.sys [112640]
[MD5.680C1DAE268B6FB67FA21B389A8B79EF] - (.Microsoft Corporation - Redirecteur de périphérique de Microsoft RD.) () -- C:\WINDOWS\System32\drivers\rdpdr.sys [195584]
[MD5.FFF28F9F6823EB1756C60F1649560BBF] - (.Microsoft Corporation - TDI Translation Driver.) () -- C:\WINDOWS\System32\drivers\tdx.sys [107520]
[MD5.64CA2B4A49A8EAF495E435623ECCE7DB] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) () -- C:\WINDOWS\System32\drivers\volsnap.sys [310080]
---\\ Processus lancés (21) - 2s
[MD5.3BDBB0CBFB27FEF51B7574676D1C9F6A] - (.Realtek Semiconductor - Realtek Audio Service.) -- C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [201360] [PID.1052]
[MD5.4E1D0A246E10CFDDBF856432418DE404] - (.All rights reserved - GFNEXSrv.) -- C:\Program Files (x86)\TOSHIBA\Password Utility\GFNEXSrv.exe [156672] [PID.1272]
[MD5.C99F8E90DE4B8F0C7FE15BB1CBCD29DC] - (.Intel(R) Corporation - Intel(R) Capability Licensing Service Inter.) -- C:\Program Files\Intel\iCLS Client\HeciServer.exe [635104] [PID.1700]
[MD5.ED32035BDFECED1AD66D459FD9CC1140] - (.TOSHIBA Corporation - TDCSrv Application.) -- C:\Windows\system32\TODDSrv.exe [140632] [PID.2028]
[MD5.09E2679BC114A4B4CF99517CCA848F0D] - (.AVG Secure Search - ToolbarU Application.) -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.7.0\ToolbarUpdater.exe [1842576] [PID.1084] =>Toolbar.AVGSearch
[MD5.65C26928DEC067BD134B5634F9B24BA4] - (.Copyright (C) 2013 - loggings Application.) -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.7.0\loggingserver.exe [168336] [PID.744] =>Toolbar.AVGSearch
[MD5.4D7977197C3EC8C65F533E8A84DE229C] - (.TOSHIBA Corporation - TOSHIBA eco Utility Service.) -- C:\Program Files\TOSHIBA\Teco\TecoService.exe [291240] [PID.2076]
[MD5.8608681DC6E2975815A593209A6432CD] - (.TOSHIBA Corporation - TOSHIBA PC Health Monitor.) -- C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe [458152] [PID.3892]
[MD5.5201342394DD42848027CE96A37043DB] - (.TOSHIBA Corporation - TSS TMachInfo Service.) -- C:\Program Files\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe [53384] [PID.2196]
[MD5.6DF8171AE92EBB5C9ACBE6D9B4E30F7D] - (.Realtek Semiconductor - HD Audio Background Process.) -- C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1218704] [PID.5100]
[MD5.0C987A6C5C38543FFCE54EA28D418420] - (.Synaptics Incorporated - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2916152] [PID.7764]
[MD5.147628F2795EE5DE257C705945A0E2EA] - (.Synaptics Incorporated - Synaptics Pointing Device Helper.) -- C:\PROGRAM FILES\SYNAPTICS\SynTP\SYNTPHELPER.EXE [123704] [PID.900]
[MD5.B7C0AC916884B05310E85E45C7FC2EDF] - (.TOSHIBA Corporation - TOSHIBA Service Station.) -- C:\Program Files\TOSHIBA\Toshiba Service Station\ToshibaServiceStation.exe [1295496] [PID.5668]
[MD5.330A516D1B1ACCF74228EE33F8D19CEC] - (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13196432] [PID.4360]
[MD5.3C31B9D256D052E00B595818F15ED52F] - (.Copyright (C) 2012 - TCrdMain Application.) -- C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe [2611112] [PID.8140]
[MD5.57C4B4289DAB34CBAEEB92865C6BC022] - (.TOSHIBA Corporation - Resident module of eco Utility.) -- C:\Program Files\TOSHIBA\Teco\TecoResident.exe [169896] [PID.4032]
[MD5.22FCD0750F598EFEAC2E438CD08FA0C6] - (.TOSHIBA Corporation - TOSHIBA PC Health Monitor.) -- C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe [518056] [PID.7920]
[MD5.4DF11CDE53A5AF536178AEC3D4A053B1] - (.SRS Labs, Inc. - SRS Control Panel.) -- C:\Program Files\SRS Labs\SRS Control Panel\SRSPanel_64.exe [2170784] [PID.4128]
[MD5.749949494676218FFA99501F4AA22ECC] - (.OpenOffice.org - OpenOffice.org 3.4.1.) -- C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe [10376704] [PID.5796]
[MD5.4EE367B8B1964160A1F1B80095183D3A] - (.OpenOffice.org - OpenOffice.org 3.4.1.) -- C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin [10368512] [PID.3404]
[MD5.F92E855A150B9C6A9D19E1E4247EE1E2] - (.Copyright (C) 2012 - VProtect Application.) -- C:\Program Files (x86)\AVG Secure Search\vprot.exe [2563472] [PID.6180] =>Toolbar.AVGSearch
---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2) (9) - 1s
G0 - GCSP: Secure Preferences [User Data\Default][HomePage] http://www.doona.fr/
G2 - GCE: Preference [User Data\Default] [ahnnjaplikpdahggilhoeeoflaomdibf] ttes
G2 - GCE: Preference [User Data\Default] [dlgapghlfkpbjblkkbdpbdobkdhhbhlj] Translate
G2 - GCE: Preference [User Data\Default] [egekhjenodlmckpgpkkdpfnodobbgnkf] MusixLib Search
G2 - GCE: Preference [User Data\Default] [ffjkhaeogkeelkioellpgcebmekedpag] Barre de Confiance CM-CIC
G2 - GCE: Preference [User Data\Default] [flliilndjeohchalpbbcdekjklbdgfkk] Avira Browser Safety
G2 - GCE: Preference [User Data\Default] [ifhnjalcekbmmeknpgnkpghldbbhanen] MusixLib
G2 - GCE: Preference [User Data\Default] [lccekmodgklaepjeofjdjpbminllajkg] Chrome Hotword Shared Module
G2 - GCE: Preference [User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] Google Chrome manifest =>.Google Inc.
---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3) (4) - 0s
P2 - EXT: (.Avira - Segurança do navegador Avira.) -- C:\Users\Aurore\AppData\Roaming\Mozilla\Firefox\Profiles\kLqGub6h.default\extensions\abs@avira.com
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_502_149.dll
P2 - FPN: [HKLM] [@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin] - (...) -- C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\18.7.0\\npsitesafety.dll =>Toolbar.AVGSearch
P2 - FPN: [HKLM] [@WildTangent.com/GamesAppPresenceDetector,Version=1.0] - (.WildTangent.) -- C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll
---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4) (18) - 1s
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://toshiba13.msn.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphean =>.Microsoft Internet Explorer
R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV9 = 1
R4 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\PhishingFilter,EnabledV9 = 1
---\\ Internet Explorer, Proxy Management (R5) (3) - 0s
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs (3) - 0s
F2 - REG:system.ini: UserInit=userinit.exe (.Microsoft Corporation.)
F2 - REG:system.ini: Shell=C:\WINDOWS\explorer.exe (.Microsoft Corporation.)
F2 - REG:system.ini: VMApplet=C:\WINDOWS\SysWOW64\SystemPropertiesPerformance.exe (.Microsoft Corporation.)
---\\ Hosts file redirection (O1) (1) - 0s
~ Le fichier hôte est sain (The hosts file is clean) (21)
---\\ Browser Helper Object de navigateur (BHO) (O2) (1) - 0s
O2 - BHO: (no name) [64Bits] - {95B7759C-8C7F-4BF1-B163-73684A933233} (Orphean)
---\\ Internet Explorer Toolbars (O3) (1) - 0s
O3 - Toolbar: (no name) - [HKLM]{95B7759C-8C7F-4BF1-B163-73684A933233} (Orphean) (.not file.)
---\\ Applications lancées au démarrage du sytème (O4) (16) - 0s
O4 - HKLM\..\Run: [RtHDVCpl] . (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [TCrdMain] %ProgramFiles%\TOSHIBA\Hotkey\TCrdMain_Win8.exe
O4 - HKLM\..\Run: [TODDMain] . (.Copyright (C) 2012 TOSHIBA Corporation. All rights r - TOSHIBA System Settings Service.) -- C:\Program Files (x86)\TOSHIBA\System Setting\TODDMain.exe
O4 - HKLM\..\Run: [TecoResident] . (.TOSHIBA Corporation - Resident module of eco Utility.) -- C:\Program Files\TOSHIBA\Teco\TecoResident.exe
O4 - HKLM\..\Run: [TosWaitSrv] %ProgramFiles%\TOSHIBA\TPHM\TosWaitSrv.exe
O4 - HKLM\..\Run: [SRS Premium Sound HD] . (.SRS Labs, Inc. - SRS Control Panel.) -- C:\Program Files\SRS Labs\SRS Control Panel\SRSPanel_64.exe
O4 - HKLM\..\Run: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Wow6432Node\Run: [Intel AppUp(SM) center] . (.Intel Corporation - Intel Services Manager.) -- C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe
O4 - HKLM\..\Wow6432Node\Run: [TPUReg] . (.Pegatron Corporation - TOSHIBA Password Utility.) -- C:\Program Files (x86)\TOSHIBA\Password Utility\TosPU.exe
O4 - HKLM\..\Wow6432Node\Run: [TPUReg(x86)] C:\Program Files\TOSHIBA\Password Utility\TosPU.exe (.not file.)
O4 - HKLM\..\Wow6432Node\Run: [vProt] . (.Copyright (C) 2012 - VProtect Application.) -- C:\Program Files (x86)\AVG Secure Search\vprot.exe =>Toolbar.AVGSearch
O4 - HKLM\..\Wow6432Node\Run: [avgnt] . (.Avira Operations GmbH & Co. KG - Avira system tray application.) -- C:\Program Files (x86)\Avira\Antivirus\avgnt.exe
O4 - HKLM\..\Wow6432Node\Run: [Avira Systray] . (.Avira Operations GmbH & Co. KG - Avira.) -- C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe
---\\ Modification Domaine/Adresses DNS (O17) (4) - 0s
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 212.27.40.241 212.27.40.240
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.43.1
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: DhcpNameServer = 212.27.40.241 212.27.40.240
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: DhcpNameServer = 192.168.43.1
---\\ Liste des services NT non Microsoft et non désactivés (O23) (19) - 1s
O23 - Service: Avira Protection e-mail (AntiVirMailService) . (.Avira Operations GmbH & Co. KG - Antivirus MailScanner WFP Service.) - C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe
O23 - Service: Avira Planificateur (AntiVirSchedulerService) . (.Avira Operations GmbH & Co. KG - Antivirus Host Framework Service.) - C:\Program Files (x86)\Avira\Antivirus\sched.exe
O23 - Service: Avira Protection temps réel (AntiVirService) . (.Avira Operations GmbH & Co. KG - Antivirus Host Framework Service.) - C:\Program Files (x86)\Avira\Antivirus\avguard.exe
O23 - Service: Avira Protection Web (AntiVirWebService) . (.Avira Operations GmbH & Co. KG - AntiVir WebGuard WFP Service.) - C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe
O23 - Service: Avira Service Host (Avira.ServiceHost) . (.Avira Operations GmbH & Co. KG - Avira.ServiceHost.) - C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
O23 - Service: GFNEX Service (GFNEXSrv) . (.All rights reserved - GFNEXSrv.) - C:\Program Files (x86)\TOSHIBA\Password Utility\GFNEXSrv.exe
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Capability Licensing Service Interface (Intel(R) Capability Licensing Service Interface) . (.Intel(R) Corporation - Intel(R) Capability Licensing Service Inter.) - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) ME Service (Intel(R) ME Service) . (.Intel Corporation - Intel(R) ME Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) . (.Intel Corporation - Intel(R) Dynamic Application Loader Host In.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: Intel(R) Management and Security Application Local Manageme (LMS) . (.Intel Corporation - Local Manageability Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: MBAMScheduler (MBAMScheduler) . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService (MBAMService) . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: Nero Update (NAUpdate) . (.Nero AG - NeroUpdate.) - C:\Program Files (x86)\Nero\Update\NASvc.exe
O23 - Service: Realtek Audio Service (RtkAudioService) . (.Realtek Semiconductor - Realtek Audio Service.) - C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
O23 - Service: TOSHIBA Optical Disc Drive Service (TODDSrv) . (.TOSHIBA Corporation - TDCSrv Application.) - C:\Windows\system32\TODDSrv.exe
O23 - Service: TOSHIBA eco Utility Service (TOSHIBA eco Utility Service) . (.TOSHIBA Corporation - TOSHIBA eco Utility Service.) - C:\Program Files\TOSHIBA\Teco\TecoService.exe
O23 - Service: Intel(R) Management and Security Application User Notificat (UNS) . (.Intel Corporation - User Notification Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: (vToolbarUpdater18.7.0) . (.AVG Secure Search - ToolbarU Application.) - C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.7.0\ToolbarUpdater.exe =>Toolbar.AVGSearch
---\\ Tâches planifiées en automatique (O39) (12) - 3s
[MD5.9CE3B11704038F711481ACD6BD9A9A5A] [APT] [CCleanerSkipUAC] (.Piriform Ltd.) -- C:\Program Files\CCleaner\CCleaner.exe [3274008]
[MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [116648]
[MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [116648]
[MD5.0C987A6C5C38543FFCE54EA28D418420] [APT] [Synaptics TouchPad Enhancements] (.Synaptics Incorporated.) -- \Program Files\Synaptics\SynTP\SynTPEnh.exe [2916152]
O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job [1090]
O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job [1094]
O39 - APT: Synaptics TouchPad Enhancements - (.Synaptics Incorporated.) -- C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job [264]
O39 - APT: CCleanerSkipUAC - (.Piriform Ltd.) -- C:\WINDOWS\System32\Tasks\CCleanerSkipUAC [2774]
O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore [3830]
O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA [4066]
O39 - APT: Synaptics TouchPad Enhancements - (.Synaptics Incorporated.) -- C:\WINDOWS\System32\Tasks\Synaptics TouchPad Enhancements [2982]
O39 - APT: Orphean - (...) -- C:\WINDOWS\System32\Tasks\{CC5C1A9E-5DB0-43C5-BAA0-97809E67819F} [3272]
---\\ Logiciels installés (O42) (86) - 5s
O42 - Logiciel: CCleaner - (.Piriform.) [HKLM][64Bits] -- CCleaner
O42 - Logiciel: Synaptics Pointing Device Driver - (.Synaptics Incorporated.) [HKLM][64Bits] -- SynTPDeinstKey
O42 - Logiciel: WinRAR 4.00 (64-bit) - (.win.rar GmbH.) [HKLM][64Bits] -- WinRAR archiver
O42 - Logiciel: TOSHIBA Function Key - (.Toshiba Corporation.) [HKLM][64Bits] -- {16562A90-71BC-41A0-B890-D91B0C267120}
O42 - Logiciel: Visual Studio 2010 x64 Redistributables - (.AVG Technologies.) [HKLM][64Bits] -- {21B133D6-5979-47F0-BE1C-F6A6B304693F}
O42 - Logiciel: TOSHIBA eco Utility - (.Toshiba Corporation.) [HKLM][64Bits] -- {5944B9D4-3C2A-48DE-931E-26B31714A2F7}
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM][64Bits] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
O42 - Logiciel: Premium Sound HD - (.SRS Labs, Inc..) [HKLM][64Bits] -- {94F03B8E-CB73-4653-AFE9-79112C01FED2}
O42 - Logiciel: TOSHIBA Desktop Assist - (.Toshiba Corporation.) [HKLM][64Bits] -- {95CCACF0-010D-45F0-82BF-858643D8BC02}
O42 - Logiciel: TOSHIBA PC Health Monitor - (.Toshiba Corporation.) [HKLM][64Bits] -- {9DECD0F9-D3E8-48B0-A390-1CF09F54E3A4}
O42 - Logiciel: TOSHIBA Service Station - (.TOSHIBA.) [HKLM][64Bits] -- {B8C8422F-01F1-4791-B084-047AAFF9BFCC}
O42 - Logiciel: WinZip 16.0 - (.WinZip Computing, S.L. .) [HKLM][64Bits] -- {CD95F661-A5C4-44F5-A6AA-ECDD91C240CD}
O42 - Logiciel: Shared C Run-time for x64 - (.McAfee.) [HKLM][64Bits] -- {EF79C448-6946-4D71-8134-03407888C054}
O42 - Logiciel: HP Deskjet 1050 J410 series Basic Device Software - (.Hewlett-Packard Co..) [HKLM][64Bits] -- {F294770E-F869-400F-81C3-614B5F13CA54}
O42 - Logiciel: Intel® Trusted Connect Service Client - (.Intel Corporation.) [HKLM][64Bits] -- {F4404AFD-2EF3-40C1-8C09-29E5F3B6972B}
O42 - Logiciel: TOSHIBA VIDEO PLAYER - (.Toshiba Corporation.) [HKLM][64Bits] -- {FF07604E-C860-40E9-A230-E37FA41F103A}
O42 - Logiciel: Adobe Flash Player 11 Plugin - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player Plugin
O42 - Logiciel: AVG Security Toolbar - (.AVG Technologies.) [HKLM][64Bits] -- AVG Secure Search =>Toolbar.AVGSearch
O42 - Logiciel: Avira Antivirus v15.0.11.579 - (.Avira Operations GmbH & Co. KG.) [HKLM][64Bits] -- Avira Antivirus
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM][64Bits] -- Google Chrome
O42 - Logiciel: Toshiba Password Utility - (.Toshiba Corporation.) [HKLM][64Bits] -- InstallShield_{78931270-BC9E-441A-A52B-73ECD4ACFAB5}
O42 - Logiciel: Intel AppUp(SM) center - (.Intel.) [HKLM][64Bits] -- Intel AppUp(SM) center 33268
O42 - Logiciel: Malwarebytes Anti-Malware version 2.1.8.1057 - (.Malwarebytes Corporation.) [HKLM][64Bits] -- Malwarebytes Anti-Malware_is1
O42 - Logiciel: BenVista PhotoZoom Pro 4.0 - (.BenVista Ltd..) [HKLM][64Bits] -- PhotoZoom Pro 4
O42 - Logiciel: VLC media player 0.9.9 - (.VideoLAN Team.) [HKLM][64Bits] -- VLC media player
O42 - Logiciel: WildTangent Games - (.WildTangent.) [HKLM][64Bits] -- WildTangent wildgames Master Uninstall =>.WildTangent
O42 - Logiciel: Chuzzle Deluxe - (.WildTangent.) [HKLM][64Bits] -- WTA-00847893-b8a0-4e9f-bb38-07eace478127 =>.WildTangent
O42 - Logiciel: Magic Academy - (.WildTangent.) [HKLM][64Bits] -- WTA-24384cef-6b0d-4245-a56f-0564118e8346 =>.WildTangent
O42 - Logiciel: Virtual Villagers 4 - The Tree of Life - (.WildTangent.) [HKLM][64Bits] -- WTA-266be3bb-9c3b-4934-a5ab-1c4f6d3129ae =>.WildTangent
O42 - Logiciel: Island Tribe - (.WildTangent.) [HKLM][64Bits] -- WTA-2b455052-aaee-41e9-81b5-f028671f0fc5 =>.WildTangent
O42 - Logiciel: Empress of the Deep - The Darkest Secret - (.WildTangent.) [HKLM][64Bits] -- WTA-503acffe-e591-4c4c-a9db-079b29555b2a =>.WildTangent
O42 - Logiciel: Aloha TriPeaks - (.WildTangent.) [HKLM][64Bits] -- WTA-888d0abf-8465-4f0f-9fb2-a3daada64ab4 =>.WildTangent
O42 - Logiciel: Polar Bowler - (.WildTangent.) [HKLM][64Bits] -- WTA-89faf811-a825-4cab-8baf-b34be4056fc2 =>.WildTangent
O42 - Logiciel: Bejeweled 3 - (.WildTangent.) [HKLM][64Bits] -- WTA-95f5e18b-e561-4ff7-8fc0-80247bef97e4 =>.WildTangent
O42 - Logiciel: Jewel Quest Solitaire 2 - (.WildTangent.) [HKLM][64Bits] -- WTA-be7a3434-48b5-4997-83ce-8a838f78ccc1 =>.WildTangent
O42 - Logiciel: Plants vs. Zombies - Game of the Year - (.WildTangent.) [HKLM][64Bits] -- WTA-d52de5f0-9d6f-42ed-83fa-5b23de1b4ee1 =>.WildTangent
O42 - Logiciel: Peggle Nights - (.WildTangent.) [HKLM][64Bits] -- WTA-fb939c0f-e4ec-4f4d-852d-d204f0d37507 =>.WildTangent
O42 - Logiciel: xat.com JPEG Optimizer - (...) [HKLM][64Bits] -- xat.com JPEG Optimizer
O42 - Logiciel: PDFCreator - (.pdfforge.) [HKLM][64Bits] -- {0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}
O42 - Logiciel: Nero BackItUp - (.Nero AG.) [HKLM][64Bits] -- {0071820F-09B0-4998-8320-F89629DCBC99}
O42 - Logiciel: Nero Kwik Media - (.Nero AG.) [HKLM][64Bits] -- {052A1E34-A54B-458C-A4E3-24C3E054754A}
O42 - Logiciel: TOSHIBA System Settings - (.Toshiba Corporation.) [HKLM][64Bits] -- {05A55927-DB9B-4E26-BA44-828EBFF829F0}
O42 - Logiciel: Nero Express Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {0708FF30-78C0-47B0-81F0-C84604DC769C}
O42 - Logiciel: Nero RescueAgent Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {0B311221-05A5-4766-8D03-7A6446794156}
O42 - Logiciel: Nero Launcher - (.Nero AG.) [HKLM][64Bits] -- {0E4630AF-0AB7-440E-A978-1A78FC4F43B9}
O42 - Logiciel: Nero BurnRights - (.Nero AG.) [HKLM][64Bits] -- {1001266B-D4BB-46D9-B023-2612A8CE3A31}
O42 - Logiciel: Delta Chrome Toolbar - (.DeltaInstaller.) [HKLM][64Bits] -- {177586E7-E42E-4F38-83D1-D15B4AF5B714} =>Toolbar.DeltaSearch
O42 - Logiciel: Nero Kwik Themes Basic - (.Nero AG.) [HKLM][64Bits] -- {1B6F5E51-575E-4693-BCA2-7543570D076D}
O42 - Logiciel: TOSHIBA System Driver - (.Toshiba Corporation.) [HKLM][64Bits] -- {1E6A96A1-2BAB-43EF-8087-30437593C66C}
O42 - Logiciel: Nero Kwik Media Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {1F16820E-D0E7-4636-939E-45CBFEFB06E1}
O42 - Logiciel: Nero SharedVideoCodecs - (.Nero AG.) [HKLM][64Bits] -- {2432E589-6256-4513-B0BF-EFA8E325D5F0}
O42 - Logiciel: Nero 12 Essentials Toshiba - (.Nero AG.) [HKLM][64Bits] -- {2EF76291-8647-46F0-89D8-0AA8B72A5420}
O42 - Logiciel: Update Installer for WildTangent Games App - (.WildTangent.) [HKLM][64Bits] -- {2FA94A64-C84E-49d1-97DD-7BF06C7BBFB2}.WildTangent Games App =>.WildTangent
O42 - Logiciel: Intel(R) Rapid Storage Technology - (.Intel Corporation.) [HKLM][64Bits] -- {3E29EE6C-963A-4aae-86C1-DC237C4A49FC}
O42 - Logiciel: Elementals - The Magic Key - (...) [HKLM][64Bits] -- {5B3F8A4B-D576-4D83-BF72-00FC168F769D}
O42 - Logiciel: Nero Blu-ray Player Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {5B79E730-D897-4B8F-A1AD-7BB2D1F22B96}
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {60EC980A-BDA2-4CB6-A427-B07A5498B4CA}
O42 - Logiciel: Intel(R) Management Engine Components - (.Intel Corporation.) [HKLM][64Bits] -- {65153EA5-8B6E-43B6-857B-C6E4FC25798A}
O42 - Logiciel: Nero Update - (.Nero AG.) [HKLM][64Bits] -- {65BB0407-4CC8-4DC7-952E-3EEFDF05602A}
O42 - Logiciel: TOSHIBA Resolution+ Plug-in for Windows Media Player - (.TOSHIBA Corporation.) [HKLM][64Bits] -- {6CB76C9D-80C2-4CB3-A4CD-D96B239E3F94}
O42 - Logiciel: WildTangent Games App (Toshiba Games) - (.WildTangent.) [HKLM][64Bits] -- {70B446D1-E03B-4ab0-9B3C-0832142C9AA8}.WildTangent Games App-toshiba =>.WildTangent
O42 - Logiciel: OpenOffice.org 3.4.1 - (.Apache Software Foundation.) [HKLM][64Bits] -- {7DA1C06F-C913-46C7-8A0F-DA2CBA17EA1D}
O42 - Logiciel: Welcome App (Start-up experience) - (.Nero AG.) [HKLM][64Bits] -- {828175FA-7307-4DBF-95AD-9CEE086B6F45}
O42 - Logiciel: Avira v1.1.40.29239 - (.Avira Operations GmbH & Co. KG.) [HKLM][64Bits] -- {8467e01f-0496-42ce-b247-88ef205b4880}
O42 - Logiciel: Nero Express - (.Nero AG.) [HKLM][64Bits] -- {848A7C68-0ADC-4193-8A89-2CEA78E56A0C}
O42 - Logiciel: Realtek Ethernet Controller Driver - (.Realtek.) [HKLM][64Bits] -- {8833FFB6-5B0C-4764-81AA-06DFEED9A476}
O42 - Logiciel: Nero BurnRights Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {8E7EABFA-BF37-4824-B792-4220C9E04233}
O42 - Logiciel: TOSHIBA Manuals - (.TOSHIBA.) [HKLM][64Bits] -- {90FF4432-21B7-4AF6-BA6E-FB8C1FED9173}
O42 - Logiciel: Realtek USB 2.0 Card Reader - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {96AE7E41-E34E-47D0-AC07-1091A8127911}
O42 - Logiciel: Realtek WLAN Driver - (.REALTEK Semiconductor Corp..) [HKLM][64Bits] -- {9D3D8C60-A55F-4fed-B2B9-173001290E16}
O42 - Logiciel: Nero Blu-ray Player - (.Nero AG.) [HKLM][64Bits] -- {A2FE691E-3F8E-4E30-AA7D-FF17AC77EA87}
O42 - Logiciel: Avira v1.1.42.10415 - (.Avira Operations GmbH & Co. KG.) [HKLM][64Bits] -- {a5e00a72-db4a-4f77-8874-d1265b8fcd7e}
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
O42 - Logiciel: Nero ControlCenter - (.Nero AG.) [HKLM][64Bits] -- {ABC88553-8770-4B97-B43E-5A90647A5B63}
O42 - Logiciel: Avira v1.1.42.10415 - (.Avira Operations GmbH & Co. KG.) [HKLM][64Bits] -- {B4A68153-E9A2-4BC1-96C3-BEE5F56E788D}
O42 - Logiciel: TOSHIBA Recovery Media Creator - (.Toshiba Corporation.) [HKLM][64Bits] -- {B65BBB06-1F8E-48F5-8A54-B024A9E15FDF}
O42 - Logiciel: Nero RescueAgent - (.Nero AG.) [HKLM][64Bits] -- {B953732D-B623-4E84-B369-CFFF7B1AE06F}
O42 - Logiciel: Nero Core Components - (.Nero AG.) [HKLM][64Bits] -- {BEBEE34D-84A2-4EDD-8BEA-96CC54371263}
O42 - Logiciel: Nero ControlCenter Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {C994C746-C6D0-4EBA-B09E-DF7B18381B69}
O42 - Logiciel: Auslogics Disk Defrag - (.Auslogics Software Pty Ltd.) [HKLM][64Bits] -- {DF6A13C0-77DF-41FE-BD05-6D5201EB0CE7}_is1
O42 - Logiciel: Nero BackItUp Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {EF0D1292-8FC1-41BE-9740-DBC134F66415}
O42 - Logiciel: Intel(R) Processor Graphics - (.Intel Corporation.) [HKLM][64Bits] -- {F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}
O42 - Logiciel: Toshiba TEMPRO - (.Toshiba Europe GmbH.) [HKLM][64Bits] -- {F76F5214-83A8-4030-80C9-1EF57391D72A}
O42 - Logiciel: Intel(R) SDK for OpenCL - CPU Only Runtime Package - (.Intel Corporation.) [HKLM][64Bits] -- {FCB3772C-B7D0-4933-B1A9-3707EBACC573}
O42 - Logiciel: Adobe Reader XI Packages - (...) [HKCU][64Bits] -- Adobe Reader XI Packages
---\\ HKCU & HKLM Software Keys (79) - 5s
HKLM\SOFTWARE\Wow6432Node\1 Jeu par jour
HKLM\SOFTWARE\Wow6432Node\5e558ad0b16fe440
HKLM\SOFTWARE\Wow6432Node\Adobe
HKLM\SOFTWARE\Wow6432Node\Avanquest
HKLM\SOFTWARE\Wow6432Node\AVG Secure Search =>Toolbar.AVGSearch
HKLM\SOFTWARE\Wow6432Node\Avg Secure Update
HKLM\SOFTWARE\Wow6432Node\AVG Security Toolbar =>Toolbar.AVGSearch
HKLM\SOFTWARE\Wow6432Node\Avira
HKLM\SOFTWARE\Wow6432Node\Babylon =>PUP.Optional.Babylon
HKLM\SOFTWARE\Wow6432Node\BenVista
HKLM\SOFTWARE\Wow6432Node\Canon
HKLM\SOFTWARE\Wow6432Node\Delta =>Toolbar.DeltaSearch
HKLM\SOFTWARE\Wow6432Node\Google
HKLM\SOFTWARE\Wow6432Node\Hewlett-Packard
HKLM\SOFTWARE\Wow6432Node\InstallShield
HKLM\SOFTWARE\Wow6432Node\Intel
HKLM\SOFTWARE\Wow6432Node\Khronos
HKLM\SOFTWARE\Wow6432Node\Macromedia
HKLM\SOFTWARE\Wow6432Node\Malwarebytes' Anti-Malware
HKLM\SOFTWARE\Wow6432Node\Malwarebytes' Anti-Malware (Trial)
HKLM\SOFTWARE\Wow6432Node\Micro Application
HKLM\SOFTWARE\Wow6432Node\Mozilla
HKLM\SOFTWARE\Wow6432Node\MozillaPlugins
HKLM\SOFTWARE\Wow6432Node\Nero
HKLM\SOFTWARE\Wow6432Node\Nico Mak Computing
HKLM\SOFTWARE\Wow6432Node\ODBC
HKLM\SOFTWARE\Wow6432Node\OpenOffice.org
HKLM\SOFTWARE\Wow6432Node\PDFCreator
HKLM\SOFTWARE\Wow6432Node\Realtek
HKLM\SOFTWARE\Wow6432Node\Realtek Semiconductor Corp.
HKLM\SOFTWARE\Wow6432Node\sMedio
HKLM\SOFTWARE\Wow6432Node\TOSHIBA
HKLM\SOFTWARE\Wow6432Node\Toshiba Corporation
HKLM\SOFTWARE\Wow6432Node\VideoLAN
HKLM\SOFTWARE\Wow6432Node\Volatile
HKLM\SOFTWARE\Wow6432Node\WildTangent
HKLM\SOFTWARE\Wow6432Node\X-AVCSD
HKLM\SOFTWARE\Wow6432Node\RegisteredApplications
HKCU\SOFTWARE\5e558ad0b16fe440
HKCU\SOFTWARE\AppDataLow
HKCU\SOFTWARE\Auslogics
HKCU\SOFTWARE\Avanquest
HKCU\SOFTWARE\Avg
HKCU\SOFTWARE\AVG Secure Search =>Toolbar.AVGSearch
HKCU\SOFTWARE\Avira
HKCU\SOFTWARE\BenVista
HKCU\SOFTWARE\Delta =>Toolbar.DeltaSearch
HKCU\SOFTWARE\Google
HKCU\SOFTWARE\HP
HKCU\SOFTWARE\IM Providers
HKCU\SOFTWARE\Intel
HKCU\SOFTWARE\JEDI-VCL
HKCU\SOFTWARE\Macromedia
HKCU\SOFTWARE\Malwarebytes' Anti-Malware
HKCU\SOFTWARE\Micro Application
HKCU\SOFTWARE\Mine
HKCU\SOFTWARE\MozillaPlugins
HKCU\SOFTWARE\Netscape
HKCU\SOFTWARE\Nico Mak Computing
HKCU\SOFTWARE\ODBC
HKCU\SOFTWARE\OpenOffice.org
HKCU\SOFTWARE\PDF Architect
HKCU\SOFTWARE\PDFCreator
HKCU\SOFTWARE\Piriform
HKCU\SOFTWARE\Realtek
HKCU\SOFTWARE\RegisteredApplications
HKCU\SOFTWARE\Synaptics
HKCU\SOFTWARE\TeleCharger
HKCU\SOFTWARE\Toshiba
HKCU\SOFTWARE\TPUKey
HKCU\SOFTWARE\Trolltech
HKCU\SOFTWARE\VB and VBA Program Settings
HKCU\SOFTWARE\WinRAR
HKCU\SOFTWARE\WinRAR SFX
HKCU\SOFTWARE\WinZip Computing
HKCU\SOFTWARE\XA Tech
HKCU\SOFTWARE\xat.com
HKCU\SOFTWARE\ZebHelpProcess Helper
HKCU\SOFTWARE\AppDataLow\Software
---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43) (172) - 7s
O43 - CFD: 2015/06/30 08:37:16 - [] D -- C:\Program Files (x86)\1 Jeu par jour
O43 - CFD: 2013/02/09 10:04:56 - [] D -- C:\Program Files (x86)\Auslogics
O43 - CFD: 2015/07/15 23:27:40 - [] D -- C:\Program Files (x86)\AVG Secure Search =>Toolbar.AVGSearch
O43 - CFD: 2015/06/30 08:48:14 - [] D -- C:\Program Files (x86)\Avira
O43 - CFD: 2015/07/02 15:24:07 - [] D -- C:\Program Files (x86)\Common Files
O43 - CFD: 2015/06/29 21:12:50 - [0] D -- C:\Program Files (x86)\Delta
O43 - CFD: 2012/11/09 02:19:51 - [] D -- C:\Program Files (x86)\eBay
O43 - CFD: 2013/02/09 09:56:42 - [] D -- C:\Program Files (x86)\Google
O43 - CFD: 2013/03/25 21:30:16 - [] D -- C:\Program Files (x86)\HP
O43 - CFD: 2015/06/30 08:37:17 - [] HD -- C:\Program Files (x86)\InstallShield Installation Information
O43 - CFD: 2015/07/02 15:24:08 - [] D -- C:\Program Files (x86)\Intel
O43 - CFD: 2015/07/16 00:45:21 - [] D -- C:\Program Files (x86)\Internet Explorer
O43 - CFD: 2015/06/30 10:50:37 - [] D -- C:\Program Files (x86)\Malwarebytes Anti-Malware
O43 - CFD: 2015/06/29 14:13:57 - [0] D -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
O43 - CFD: 2013/06/29 16:00:08 - [] D -- C:\Program Files (x86)\Micro Application
O43 - CFD: 2015/02/13 21:51:41 - [] D -- C:\Program Files (x86)\Microsoft Office
O43 - CFD: 2015/06/29 13:52:06 - [] D -- C:\Program Files (x86)\Microsoft Silverlight
O43 - CFD: 2013/08/22 17:36:30 - [] D -- C:\Program Files (x86)\Microsoft.NET
O43 - CFD: 2013/02/09 14:43:11 - [] D -- C:\Program Files (x86)\Mozilla Firefox
O43 - CFD: 2015/07/02 15:40:00 - [] D -- C:\Program Files (x86)\MSBuild
O43 - CFD: 2015/02/13 21:50:41 - [] D -- C:\Program Files (x86)\MSECache
O43 - CFD: 2012/11/09 02:19:38 - [] D -- C:\Program Files (x86)\Nero
O43 - CFD: 2013/02/09 10:39:57 - [] D -- C:\Program Files (x86)\OpenOffice.org 3
O43 - CFD: 2013/02/09 10:41:48 - [] D -- C:\Program Files (x86)\PDFCreator
O43 - CFD: 2013/01/11 07:13:04 - [] D -- C:\Program Files (x86)\Realtek
O43 - CFD: 2013/01/11 07:12:36 - [] D -- C:\Program Files (x86)\Realtek WLAN Driver
O43 - CFD: 2015/07/02 15:40:00 - [] D -- C:\Program Files (x86)\Reference Assemblies
O43 - CFD: 2013/01/11 07:10:33 - [0] HD -- C:\Program Files (x86)\Temp
O43 - CFD: 2013/01/11 07:20:17 - [] D -- C:\Program Files (x86)\TOSHIBA
O43 - CFD: 2013/01/11 07:20:03 - [] D -- C:\Program Files (x86)\TOSHIBA Corporation
O43 - CFD: 2013/01/11 07:27:38 - [] D -- C:\Program Files (x86)\TOSHIBA Games
O43 - CFD: 2012/11/09 02:24:13 - [] D -- C:\Program Files (x86)\Toshiba TEMPRO
O43 - CFD: 2013/02/14 12:46:20 - [] D -- C:\Program Files (x86)\VLC
O43 - CFD: 2013/01/11 07:27:30 - [] D -- C:\Program Files (x86)\WildGames
O43 - CFD: 2013/01/11 07:25:55 - [] D -- C:\Program Files (x86)\WildTangent Games
O43 - CFD: 2015/07/02 15:54:42 - [] D -- C:\Program Files (x86)\Windows Defender
O43 - CFD: 2014/11/21 07:55:33 - [] D -- C:\Program Files (x86)\Windows Mail
O43 - CFD: 2015/07/02 15:24:13 - [] D -- C:\Program Files (x86)\Windows Media Player
O43 - CFD: 2014/11/21 07:55:33 - [] D -- C:\Program Files (x86)\Windows Multimedia Platform
O43 - CFD: 2013/08/22 17:36:30 - [] D -- C:\Program Files (x86)\Windows NT
O43 - CFD: 2014/11/21 07:55:33 - [] D -- C:\Program Files (x86)\Windows Photo Viewer
O43 - CFD: 2014/11/21 07:55:33 - [] D -- C:\Program Files (x86)\Windows Portable Devices
O43 - CFD: 2015/07/02 15:24:14 - [] SHD -- C:\Program Files (x86)\Windows Sidebar
O43 - CFD: 2013/08/22 17:36:30 - [] D -- C:\Program Files (x86)\WindowsPowerShell
O43 - CFD: 2013/02/09 11:15:49 - [] D -- C:\Program Files (x86)\xat.com JPEG Optimizer
O43 - CFD: 2015/07/02 15:24:16 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\1 Jeu par jour
O43 - CFD: 2014/11/21 07:56:04 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility
O43 - CFD: 2015/07/02 15:50:31 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 2015/07/06 16:31:36 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 2015/07/02 15:24:17 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Auslogics
O43 - CFD: 2015/07/29 11:09:36 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
O43 - CFD: 2015/07/02 15:29:02 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
O43 - CFD: 2015/07/02 15:29:02 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
O43 - CFD: 2015/07/02 15:29:02 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
O43 - CFD: 2015/07/02 15:24:17 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
O43 - CFD: 2015/07/02 15:29:02 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel AppUp(SM) center
O43 - CFD: 2013/08/22 17:36:33 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 2015/07/02 15:29:02 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
O43 - CFD: 2015/07/02 15:24:18 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
O43 - CFD: 2015/07/02 15:24:18 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
O43 - CFD: 2015/07/02 15:29:02 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
O43 - CFD: 2015/07/02 15:24:18 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero
O43 - CFD: 2015/07/02 15:29:02 - [] SD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice.org 3.4.1
O43 - CFD: 2015/07/02 15:29:02 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outils Microsoft Office
O43 - CFD: 2015/07/02 15:29:02 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator
O43 - CFD: 2015/07/02 15:29:02 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhotoZoom Pro 4
O43 - CFD: 2013/02/09 12:04:36 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SharePoint
O43 - CFD: 2015/07/02 15:29:02 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SRS Labs
O43 - CFD: 2015/07/02 15:29:02 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp
O43 - CFD: 2014/11/21 07:56:04 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools
O43 - CFD: 2014/11/21 00:27:29 - [0] RHD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC
O43 - CFD: 2015/07/02 15:24:20 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TOSHIBA
O43 - CFD: 2015/07/02 15:29:02 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
O43 - CFD: 2015/07/02 15:29:02 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
O43 - CFD: 2015/07/02 15:29:02 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip
O43 - CFD: 2015/07/02 15:29:02 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\xat.com JPEG Optimizer
O43 - CFD: 2013/02/09 15:11:58 - [] D -- C:\ProgramData\Adobe
O43 - CFD: 2013/08/22 16:45:52 - [0] SHD -- C:\ProgramData\Application Data
O43 - CFD: 2015/02/10 10:56:29 - [] D -- C:\ProgramData\AVG Secure Search =>Toolbar.AVGSearch
O43 - CFD: 2015/06/30 08:34:04 - [] D -- C:\ProgramData\AVG2013
O43 - CFD: 2015/06/30 08:36:23 - [] D -- C:\ProgramData\Avira
O43 - CFD: 2013/02/09 14:42:30 - [0] D -- C:\ProgramData\Babylon =>PUP.Optional.Babylon
O43 - CFD: 2013/02/09 14:43:39 - [] D -- C:\ProgramData\BrowserProtect =>PUP.Optional.SpeedBrowser
O43 - CFD: 2015/07/02 15:50:07 - [0] SHD -- C:\ProgramData\Bureau
O43 - CFD: 2013/06/30 17:32:23 - [] HD -- C:\ProgramData\CanonBJ
O43 - CFD: 2013/02/09 10:09:37 - [] HD -- C:\ProgramData\Common Files
O43 - CFD: 2013/08/22 16:45:52 - [0] SHD -- C:\ProgramData\Desktop
O43 - CFD: 2013/08/22 16:45:52 - [0] SHD -- C:\ProgramData\Documents
O43 - CFD: 2013/03/25 21:30:47 - [] D -- C:\ProgramData\HP
O43 - CFD: 2013/01/11 07:06:39 - [] D -- C:\ProgramData\Intel
O43 - CFD: 2015/06/29 14:13:57 - [] D -- C:\ProgramData\Malwarebytes
O43 - CFD: 2015/07/02 15:50:07 - [0] SHD -- C:\ProgramData\Menu Démarrer
O43 - CFD: 2015/06/30 08:34:35 - [] D -- C:\ProgramData\MFAData
O43 - CFD: 2013/06/30 19:15:10 - [] D -- C:\ProgramData\Micro Application
O43 - CFD: 2015/07/02 15:24:21 - [] SD -- C:\ProgramData\Microsoft
O43 - CFD: 2013/02/09 15:40:07 - [] D -- C:\ProgramData\Microsoft Help
O43 - CFD: 2015/07/02 15:50:07 - [0] SHD -- C:\ProgramData\Modèles
O43 - CFD: 2012/11/09 02:45:24 - [] D -- C:\ProgramData\Nero
O43 - CFD: 2015/07/29 11:09:13 - [] D -- C:\ProgramData\Package Cache
O43 - CFD: 2013/02/09 10:43:33 - [0] D -- C:\ProgramData\PDF Architect
O43 - CFD: 2015/07/02 15:24:21 - [] D -- C:\ProgramData\PRICache
O43 - CFD: 2014/11/21 07:55:33 - [] D -- C:\ProgramData\regid.1991-06.com.microsoft
O43 - CFD: 2013/08/22 16:45:52 - [0] SHD -- C:\ProgramData\Start Menu
O43 - CFD: 2013/02/12 03:08:34 - [] D -- C:\ProgramData\Synaptics
O43 - CFD: 2013/08/22 16:45:52 - [0] SHD -- C:\ProgramData\Templates
O43 - CFD: 2013/02/09 09:38:43 - [] D -- C:\ProgramData\Toshiba
O43 - CFD: 2013/02/09 09:41:54 - [] D -- C:\ProgramData\ToshibaEurope
O43 - CFD: 2013/12/16 17:08:15 - [] D -- C:\ProgramData\Western Digital
O43 - CFD: 2013/02/10 20:37:45 - [] D -- C:\ProgramData\WildTangent
O43 - CFD: 2013/02/09 11:07:05 - [] D -- C:\ProgramData\WinZip
O43 - CFD: 2015/04/02 09:33:56 - [] D -- C:\Program Files (x86)\Common Files\AVG Secure Search =>Toolbar.AVGSearch
O43 - CFD: 2013/02/09 15:50:07 - [] D -- C:\Program Files (x86)\Common Files\Designer
O43 - CFD: 2013/01/11 07:10:12 - [] D -- C:\Program Files (x86)\Common Files\InstallShield
O43 - CFD: 2013/01/11 07:07:32 - [] D -- C:\Program Files (x86)\Common Files\Intel
O43 - CFD: 2015/07/02 15:24:07 - [] D -- C:\Program Files (x86)\Common Files\Microsoft Shared
O43 - CFD: 2012/11/09 02:19:02 - [] D -- C:\Program Files (x86)\Common Files\Nero
O43 - CFD: 2013/01/11 07:06:18 - [] D -- C:\Program Files (x86)\Common Files\postureAgent
O43 - CFD: 2013/08/22 17:36:33 - [] D -- C:\Program Files (x86)\Common Files\Services
O43 - CFD: 2015/07/02 15:24:07 - [] D -- C:\Program Files (x86)\Common Files\System
O43 - CFD: 2013/01/11 07:20:04 - [] D -- C:\Program Files (x86)\Common Files\Toshiba Shared
O43 - CFD: 2013/02/09 14:48:05 - [] D -- C:\Users\Aurore\AppData\Roaming\0T1P1I1P0C1M1T1C1N1P1C =>PUP.Optional.InstallCore
O43 - CFD: 2013/02/09 09:36:46 - [] D -- C:\Users\Aurore\AppData\Roaming\Adobe
O43 - CFD: 2013/02/14 12:32:37 - [0] D -- C:\Users\Aurore\AppData\Roaming\ArchiFacile
O43 - CFD: 2013/02/09 10:04:59 - [] D -- C:\Users\Aurore\AppData\Roaming\Auslogics
O43 - CFD: 2013/02/09 10:19:55 - [] D -- C:\Users\Aurore\AppData\Roaming\AVG2013
O43 - CFD: 2015/06/30 08:35:32 - [] D -- C:\Users\Aurore\AppData\Roaming\Avira
O43 - CFD: 2013/02/09 14:42:30 - [] D -- C:\Users\Aurore\AppData\Roaming\Babylon =>PUP.Optional.Babylon
O43 - CFD: 2015/08/03 20:30:18 - [] D -- C:\Users\Aurore\AppData\Roaming\dvdcss
O43 - CFD: 2013/06/30 12:43:40 - [] D -- C:\Users\Aurore\AppData\Roaming\ElementalsTheMagicKey
O43 - CFD: 2015/06/29 21:12:50 - [0] D -- C:\Users\Aurore\AppData\Roaming\Funmoods
O43 - CFD: 2015/07/02 16:10:41 - [] D -- C:\Users\Aurore\AppData\Roaming\Identities
O43 - CFD: 2013/02/09 14:42:10 - [] D -- C:\Users\Aurore\AppData\Roaming\Macromedia
O43 - CFD: 2015/06/29 14:14:04 - [0] D -- C:\Users\Aurore\AppData\Roaming\Malwarebytes
O43 - CFD: 2015/07/02 15:43:19 - [] SD -- C:\Users\Aurore\AppData\Roaming\Microsoft
O43 - CFD: 2015/06/30 10:50:06 - [] D -- C:\Users\Aurore\AppData\Roaming\Mozilla
O43 - CFD: 2013/02/09 10:41:17 - [] D -- C:\Users\Aurore\AppData\Roaming\OpenOffice.org
O43 - CFD: 2013/02/09 10:41:14 - [] D -- C:\Users\Aurore\AppData\Roaming\pdfforge
O43 - CFD: 2013/02/09 12:51:52 - [] D -- C:\Users\Aurore\AppData\Roaming\sMedio
O43 - CFD: 2013/02/09 10:18:53 - [] D -- C:\Users\Aurore\AppData\Roaming\TuneUp Software
O43 - CFD: 2013/02/14 12:47:54 - [] D -- C:\Users\Aurore\AppData\Roaming\vlc
O43 - CFD: 2013/02/10 20:37:45 - [] D -- C:\Users\Aurore\AppData\Roaming\WildTangent
O43 - CFD: 2013/05/12 19:54:06 - [] D -- C:\Users\Aurore\AppData\Roaming\WinRAR
O43 - CFD: 2015/08/04 10:19:14 - [] D -- C:\Users\Aurore\AppData\Roaming\ZHP
O43 - CFD: 2015/07/02 15:20:32 - [0] SHD -- C:\Users\Aurore\AppData\Local\Application Data
O43 - CFD: 2013/02/09 09:53:04 - [] D -- C:\Users\Aurore\AppData\Local\Apps
O43 - CFD: 2014/07/05 15:03:55 - [] D -- C:\Users\Aurore\AppData\Local\AVG Secure Search =>Toolbar.AVGSearch
O43 - CFD: 2013/02/09 11:20:06 - [] D -- C:\Users\Aurore\AppData\Local\Avg2013
O43 - CFD: 2015/02/10 21:45:09 - [0] D -- C:\Users\Aurore\AppData\Local\Diagnostics
O43 - CFD: 2014/11/30 21:23:21 - [0] D -- C:\Users\Aurore\AppData\Local\ElevatedDiagnostics
O43 - CFD: 2013/02/09 09:56:50 - [] D -- C:\Users\Aurore\AppData\Local\Google
O43 - CFD: 2015/07/02 15:20:32 - [0] SHD -- C:\Users\Aurore\AppData\Local\Historique
O43 - CFD: 2013/03/25 21:33:13 - [] D -- C:\Users\Aurore\AppData\Local\HP
O43 - CFD: 2013/02/09 10:09:37 - [] D -- C:\Users\Aurore\AppData\Local\MFAData
O43 - CFD: 2015/07/04 10:58:36 - [] D -- C:\Users\Aurore\AppData\Local\Microsoft
O43 - CFD: 2013/02/09 10:33:46 - [0] D -- C:\Users\Aurore\AppData\Local\Microsoft Help
O43 - CFD: 2015/06/30 08:38:08 - [0] D -- C:\Users\Aurore\AppData\Local\Orange
O43 - CFD: 2015/07/04 13:18:37 - [] D -- C:\Users\Aurore\AppData\Local\Packages
O43 - CFD: 2013/02/09 10:08:31 - [] D -- C:\Users\Aurore\AppData\Local\Programs
O43 - CFD: 2013/07/27 18:48:49 - [] D -- C:\Users\Aurore\AppData\Local\SelfExtractible
O43 - CFD: 2013/02/09 09:37:30 - [] D -- C:\Users\Aurore\AppData\Local\SRS Labs
O43 - CFD: 2015/08/04 10:19:15 - [] D -- C:\Users\Aurore\AppData\Local\Temp
O43 - CFD: 2015/07/02 15:20:32 - [0] SHD -- C:\Users\Aurore\AppData\Local\Temporary Internet Files
O43 - CFD: 2013/02/10 20:41:42 - [] D -- C:\Users\Aurore\AppData\Local\TOSHIBA
O43 - CFD: 2015/04/05 17:50:46 - [] D -- C:\Users\Aurore\AppData\Local\VirtualStore
O43 - CFD: 2014/11/21 07:56:04 - [] RD -- C:\Users\Aurore\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
O43 - CFD: 2014/11/21 07:56:04 - [] RD -- C:\Users\Aurore\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 2015/07/02 16:11:21 - [] RD -- C:\Users\Aurore\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 2013/08/22 17:36:32 - [] D -- C:\Users\Aurore\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 2015/07/02 16:11:21 - [] RD -- C:\Users\Aurore\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
O43 - CFD: 2015/07/02 15:21:44 - [] RD -- C:\Users\Aurore\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
O43 - CFD: 2015/07/02 15:29:01 - [] D -- C:\Users\Aurore\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
O43 - CFD: 2013/02/09 11:15:48 - [0] D -- C:\Users\Aurore\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\xat.com JPEG Optimizer
---\\ Liste des pilotes du système (SDL) (O58) (61) - 10s
O58 - SDL:2013/08/22 14:43:41 A . (.LSI - LSI 3ware SCSI Storport Driver.) -- C:\WINDOWS\System32\drivers\3ware.sys [108896]
O58 - SDL:2013/08/22 14:43:41 A . (.PMC-Sierra - PMC-Sierra Storport Driver For SPC8x6G SAS.) -- C:\WINDOWS\System32\drivers\adp80xx.sys [782176]
O58 - SDL:2013/08/22 14:43:41 A . (.Advanced Micro Devices - AHCI 1.3 Device Driver.) -- C:\WINDOWS\System32\drivers\amdsata.sys [79200]
O58 - SDL:2013/08/22 14:43:41 A . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller D.) -- C:\WINDOWS\System32\drivers\amdsbs.sys [259424]
O58 - SDL:2013/08/22 14:43:40 A . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\WINDOWS\System32\drivers\amdxata.sys [25952]
O58 - SDL:2013/08/22 14:43:41 A . (.PMC-Sierra, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\WINDOWS\System32\drivers\arcsas.sys [114016]
O58 - SDL:2015/05/28 16:48:59 A . (.Avira Operations GmbH & Co. KG - Avira Minifilter Driver.) -- C:\WINDOWS\System32\drivers\avgntflt.sys [153256]
O58 - SDL:2015/05/28 16:49:00 A . (.Avira Operations GmbH & Co. KG - Avira Driver for Security Enhancement.) -- C:\WINDOWS\System32\drivers\avipbb.sys [132656]
O58 - SDL:2015/05/28 16:49:01 A . (.Avira Operations GmbH & Co. KG - Avira Manager Driver.) -- C:\WINDOWS\System32\drivers\avkmgr.sys [28600]
O58 - SDL:2015/05/28 16:49:03 A . (.Avira Operations GmbH & Co. KG - Avira WFP Network Driver.) -- C:\WINDOWS\System32\drivers\avnetflt.sys [43576]
O58 - SDL:2013/08/13 01:25:46 A . (.Windows (R) Win 7 DDK provider - BCM Function 2 Device Driver.) -- C:\WINDOWS\System32\drivers\bcmfn2.sys [17624]
O58 - SDL:2013/08/22 14:43:41 A . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.) -- C:\WINDOWS\System32\drivers\bxvbda.sys [531296]
O58 - SDL:2015/08/03 13:35:28 A . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\WINDOWS\System32\drivers\esypdbv.sys [79064]
O58 - SDL:2013/08/22 14:43:45 A . (.Broadcom Corporation - Broadcom NetXtreme II 10 GigE VBD.) -- C:\WINDOWS\System32\drivers\evbda.sys [3357024]
O58 - SDL:2011/06/23 14:27:20 A . (.Huawei Technologies Co., Ltd. - USB Modem/Serial Device Driver.) -- C:\WINDOWS\System32\drivers\ewusbmdm.sys [121600]
O58 - SDL:2011/06/23 14:27:20 A . (.Huawei Technologies Co., Ltd. - USB NDIS Miniport Driver.) -- C:\WINDOWS\System32\drivers\ewusbnet.sys [138752]
O58 - SDL:2011/06/23 14:27:20 A . (.Huawei Technologies Co., Ltd. - USB Modem/Serial Device Driver.) -- C:\WINDOWS\System32\drivers\ew_hwusbdev.sys [117248]
O58 - SDL:2012/07/03 01:16:02 A . (.Intel Corporation - Intel(R) Management Engine Interface.) -- C:\WINDOWS\System32\drivers\HECIx64.sys [62784]
O58 - SDL:2013/08/22 14:43:45 A . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Drive.) -- C:\WINDOWS\System32\drivers\HpSAMD.sys [64352]
O58 - SDL:2013/07/30 20:47:35 A . (.Intel Corporation - Intel(R) Serial IO GPIO Controller Driver.) -- C:\WINDOWS\System32\drivers\iaLPSSi_GPIO.sys [24568]
O58 - SDL:2013/07/25 21:05:39 A . (.Intel Corporation - Intel(R) Serial IO I2C Controller Driver.) -- C:\WINDOWS\System32\drivers\iaLPSSi_I2C.sys [99320]
O58 - SDL:2012/07/31 21:22:00 A . (.Intel Corporation - Intel Rapid Storage Technology driver - x64.) -- C:\WINDOWS\System32\drivers\iaStorA.sys [645952]
O58 - SDL:2013/08/10 02:39:30 A . (.Intel Corporation - Intel Rapid Storage Technology driver (inbo.) -- C:\WINDOWS\System32\drivers\iaStorAV.sys [651248]
O58 - SDL:2013/08/22 14:43:45 A . (.Intel Corporation - Intel Matrix Storage Manager driver - x64.) -- C:\WINDOWS\System32\drivers\iaStorV.sys [412000]
O58 - SDL:2013/11/04 19:22:32 A . (.Intel Corporation - Intel Graphics Kernel Mode Driver.) -- C:\WINDOWS\System32\drivers\igdkmd64.sys [4195840]
O58 - SDL:2012/06/19 08:40:50 A . (.Intel(R) Corporation - Intel(R) Display Audio Driver.) -- C:\WINDOWS\System32\drivers\IntcDAud.sys [342528]
O58 - SDL:2013/10/18 00:41:31 A . (.Intel Corporation - Intel® WiDi Solution.) -- C:\WINDOWS\System32\drivers\intelaud.sys [39320]
O58 - SDL:2013/10/18 00:41:31 A . (.Intel Corporation - Intel® WiDi Solution.) -- C:\WINDOWS\System32\drivers\iwdbus.sys [27032]
O58 - SDL:2013/08/22 14:43:44 A . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas.sys [109408]
O58 - SDL:2013/08/22 14:43:45 A . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas2.sys [93536]
O58 - SDL:2013/08/22 14:43:44 A . (.LSI Corporation - LSI SAS Gen3 Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas3.sys [81760]
O58 - SDL:2013/08/22 14:43:45 A . (.LSI Corporation - LSI SSS PCIe/Flash Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sss.sys [82784]
O58 - SDL:2015/06/18 08:41:40 A . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\WINDOWS\System32\drivers\mbam.sys [25816]
O58 - SDL:2015/06/18 08:41:44 A . (.Malwarebytes Corporation - Malwarebytes Chameleon Protection Driver.) -- C:\WINDOWS\System32\drivers\mbamchameleon.sys [109272]
O58 - SDL:2015/08/04 08:29:51 A . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\WINDOWS\System32\drivers\MBAMSwissArmy.sys [113880]
O58 - SDL:2013/08/22 14:43:45 A . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\megasas.sys [56672]
O58 - SDL:2013/08/22 14:43:45 A . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\WINDOWS\System32\drivers\megasr.sys [575840]
O58 - SDL:2013/08/22 14:43:49 A . (.Marvell Semiconductor, Inc. - Marvell Flash Controller Driver.) -- C:\WINDOWS\System32\drivers\mvumis.sys [63840]
O58 - SDL:2015/06/18 08:42:02 A . (.Malwarebytes Corporation - Malwarebytes Web Access Control.) -- C:\WINDOWS\System32\drivers\mwac.sys [64216]
O58 - SDL:2013/08/22 14:43:31 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\WINDOWS\System32\drivers\nvraid.sys [150368]
O58 - SDL:2013/08/22 14:43:32 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\WINDOWS\System32\drivers\nvstor.sys [168288]
O58 - SDL:2013/06/18 16:46:17 A . (.Realtek - Realtek 8101E/8168/8169 NDIS 6.30 64-bit Dr.) -- C:\WINDOWS\System32\drivers\Rt630x64.sys [591360]
O58 - SDL:2012/09/25 21:09:12 A . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function D.) -- C:\WINDOWS\System32\drivers\RTKVHD64.sys [4155536]
O58 - SDL:2010/12/22 17:24:00 A . (.Realtek Semiconductor Corporation - Realtek RTL819xP NDIS Driverr.) -- C:\WINDOWS\System32\drivers\rtl819xp.sys [626792]
O58 - SDL:2012/06/13 19:24:00 A . (.Realtek Semiconductor Corp. - Realtek USB Mass Storage Driver for 2K/XP/V.) -- C:\WINDOWS\System32\drivers\RtsUStor.sys [252048]
O58 - SDL:2013/07/31 20:25:43 A . (.Realtek Semiconductor Corporation - Realtek PCIE NDIS Driverr.) -- C:\WINDOWS\System32\drivers\rtwlane.sys [1936088]
O58 - SDL:2013/08/22 17:35:09 A . (.Macrovision Corporation, Macrovision Europe Limited, - Macrovision SECURITY Driver.) -- C:\WINDOWS\System32\drivers\secdrv.sys [23040]
O58 - SDL:2013/08/22 14:43:31 A . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\WINDOWS\System32\drivers\sisraid2.sys [44896]
O58 - SDL:2013/08/22 14:43:32 A . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\WINDOWS\System32\drivers\sisraid4.sys [81760]
O58 - SDL:2012/08/16 15:24:06 A . (.Synaptics Incorporated - Synaptics SMBus Driver.) -- C:\WINDOWS\System32\drivers\Smb_driver_Intel.sys [43832]
O58 - SDL:2013/08/22 14:43:32 A . (.Promise Technology, Inc. - Promise SuperTrak EX Series Driver for Wind.) -- C:\WINDOWS\System32\drivers\stexstor.sys [31072]
O58 - SDL:2012/08/16 15:24:06 A . (.Synaptics Incorporated - Synaptics Touchpad Driver.) -- C:\WINDOWS\System32\drivers\SynTP.sys [447800]
O58 - SDL:2012/07/25 02:54:00 A . (.TOSHIBA Corporation. - TOSHIBA ODD Writing Driver for x64..) -- C:\WINDOWS\System32\drivers\tdcmdpst.sys [31184]
O58 - SDL:2012/07/31 22:28:54 A . (.Windows (R) Win 7 DDK provider - Toshiba Hotkey Driver.) -- C:\WINDOWS\System32\drivers\Thotkey.sys [28632]
O58 - SDL:2013/11/01 04:22:28 A . (.TOSHIBA Corporation - TOSHIBA Bluetooth EC Driver.) -- C:\WINDOWS\System32\drivers\tosrfec.sys [27032]
O58 - SDL:2012/06/18 20:30:56 A . (.TOSHIBA Corporation - tos_sps64.) -- C:\WINDOWS\System32\drivers\tos_sps64.sys [499096]
O58 - SDL:2012/07/22 01:59:02 A . (.TOSHIBA Corporation - TOSHIBA TVALZ Filter Driver.) -- C:\WINDOWS\System32\drivers\TVALZFL.sys [16768]
O58 - SDL:2012/07/26 02:34:42 A . (.TOSHIBA Corporation - TOSHIBA ACPI-Based Value Added Logical and.) -- C:\WINDOWS\System32\drivers\TVALZ_O.SYS [32832]
O58 - SDL:2013/08/22 14:43:34 A . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\WINDOWS\System32\drivers\viaide.sys [19808]
O58 - SDL:2013/08/22 14:43:34 A . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\WINDOWS\System32\drivers\vsmraid.sys [168800]
O58 - SDL:2013/08/22 14:43:34 A . (.VIA Corporation - VIA StorX RAID Controller Driver.) -- C:\WINDOWS\System32\drivers\VSTXRAID.SYS [305504]
---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61) (1) - 28s
O61 - LFC: 2015/08/04 08:33:42 A . (..) -- C:\Users\Aurore\AppData\Local\Google\Chrome\User Data\ev_hashes_whitelist.bin [1113849]
---\\ Associations Shell Spawning (O67) (1) - 0s
O67 - Shell Spawning: <.evt>
---\\ Menu de démarrage Internet (SMI) (O68) (8) - 0s
O68 - StartMenuInternet:
O68 - StartMenuInternet:
O68 - StartMenuInternet:
O68 - StartMenuInternet:
O68 - StartMenuInternet:
O68 - StartMenuInternet:
O68 - StartMenuInternet:
O68 - StartMenuInternet:
---\\ Recherche d'infection sur les navigateurs internet (SBI) (O69) (1) - 1s
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - http://www.bing.com/
---\\ Enumère les services démarrés par Svchost (SSS) (O83) (34) - 3s
O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience dâapplication.) -- C:\WINDOWS\System32\aelupsvc.dll [214528]
O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\WINDOWS\System32\certprop.dll [156160]
O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\WINDOWS\System32\certprop.dll [156160]
O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\WINDOWS\system32\srvsvc.dll [329216]
O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\WINDOWS\System32\gpsvc.dll [1360896]
O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\WINDOWS\System32\ikeext.dll [1084416]
O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur u.) -- C:\WINDOWS\System32\iphlpsvc.dll [926208]
O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service dâouverture de session secon.) -- C:\WINDOWS\system32\seclogon.dll [31744]
O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations dâapplication.) -- C:\WINDOWS\System32\appinfo.dll [110080]
O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\WINDOWS\system32\iscsiexe.dll [151040]
O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\WINDOWS\System32\eapsvc.dll [110592]
O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\WINDOWS\system32\schedsvc.dll [1265152]
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\WINDOWS\system32\wbem\WMIsvc.dll [230400]
O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédia.) -- C:\WINDOWS\system32\mmcss.dll [71168]
O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur dâordinateurs.) -- C:\WINDOWS\System32\browser.dll [135168]
O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\WINDOWS\system32\profsvc.dll [225280]
O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à .) -- C:\Windows\System32\SessEnv.dll [339968]
O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\WINDOWS\System32\wercplsupport.dll [84992]
O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\WINDOWS\system32\kmsvc.dll [101376]
O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\WINDOWS\System32\bdesvc.dll [348672]
O83 - Search Svchost Services: lfsvc (lfsvc) . (.Microsoft Corporation - Service dâinfrastructure de localisation Wi.) -- C:\Windows\System32\GeofenceMonitorService.dll [521728]
O83 - Search Svchost Services: wlidsvc (wlidsvc) . (.Microsoft Corporation - Service de compte Microsoft®.) -- C:\WINDOWS\system32\wlidsvc.dll [1639424]
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\WINDOWS\system32\themeservice.dll [59392]
O83 - Search Svchost Services: DsmSvc (DsmSvc) . (.Microsoft Corporation - Gestionnaire dâinstallation de périphérique.) -- C:\WINDOWS\System32\DeviceSetupManager.dll [206848]
O83 - Search Svchost Services: NcaSvc (NcaSvc) . (.Microsoft Corporation - Service Assistant Connectivité réseau Micro.) -- C:\WINDOWS\System32\ncasvc.dll [166400]
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique dâ.) -- C:\WINDOWS\System32\rasauto.dll [102912]
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire des connexions dâaccès à dista.) -- C:\WINDOWS\System32\rasmans.dll [542208]
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire dâinterface dynamique.) -- C:\Windows\System32\mprdim.dll [226816]
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification dâévénements systèm.) -- C:\WINDOWS\System32\sens.dll [73728]
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de lâapplication dâassistance à .) -- C:\WINDOWS\System32\ipnathlp.dll [452608]
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM.) -- C:\Windows\System32\tapisrv.dll [313344]
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Up.) -- C:\WINDOWS\system32\wuaueng.dll [3678720]
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière.) -- C:\WINDOWS\System32\qmgr.dll [933376]
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [640000]
---\\ Liste des exceptions du parefeu (FirewallRules) (O87) (8) - 2s
O87 - FAEL: "{5E3AE369-80FB-4BE6-A74A-D2BC4619BD2F}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\AVG\AVG2013\avgemca.exe (.not file.)
O87 - FAEL: "{3AF3ED6E-259A-45A8-BA58-B0E152AD6909}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\AVG\AVG2013\avgemca.exe (.not file.)
O87 - FAEL: "{253E028F-2138-4F30-BF86-7905CD00260B}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\AVG\AVG2013\avgdiagex.exe (.not file.)
O87 - FAEL: "{4A6C5B8F-B045-4E94-BE97-32C7645CF0CD}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\AVG\AVG2013\avgdiagex.exe (.not file.)
O87 - FAEL: "{EACF2EE1-31D6-4FE4-908E-85F538E9B9F5}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\AVG\AVG2013\avgnsa.exe (.not file.)
O87 - FAEL: "{2F0E874C-2CFD-47B5-BF5A-098C36882EE9}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\AVG\AVG2013\avgnsa.exe (.not file.)
O87 - FAEL: "{283CC8E1-949D-4734-B68A-D75B44394A61}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\AVG\AVG2013\avgmfapx.exe (.not file.)
O87 - FAEL: "{F0ED593C-19B9-49C4-9EFE-3EC0DCBD499D}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\AVG\AVG2013\avgmfapx.exe (.not file.)
---\\ Enumère les codes produits des logiciels (PUC) (O90) (1) - 1s
O90 - PUC: "7E685771E24E83F4381D1DB5A45F7B41" . (.Delta Chrome Toolbar.) -- C:\windows\Installer\{177586E7-E42E-4F38-83D1-D15B4AF5B714}\Delta.ico =>Toolbar.DeltaSearch
---\\ Scan Additionnel (O88) (23) - 0s
C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.7.0\ToolbarUpdater.exe =>Toolbar.AVGSearch
C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.7.0\loggingserver.exe =>Toolbar.AVGSearch
C:\Program Files (x86)\AVG Secure Search\vprot.exe =>Toolbar.AVGSearch
HKLM\SYSTEM\CurrentControlSet\Services\vToolbarUpdater18.7.0 =>Toolbar.AVGSearch
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\AVG Secure Search =>Toolbar.AVGSearch
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{177586E7-E42E-4F38-83D1-D15B4AF5B714} =>Toolbar.DeltaSearch
HKLM\SOFTWARE\Wow6432Node\AVG Secure Search =>Toolbar.AVGSearch
HKLM\SOFTWARE\Wow6432Node\AVG Security Toolbar =>Toolbar.AVGSearch
HKLM\SOFTWARE\Wow6432Node\Babylon =>PUP.Optional.Babylon
HKLM\SOFTWARE\Wow6432Node\Delta =>Toolbar.DeltaSearch
HKCU\SOFTWARE\AVG Secure Search =>Toolbar.AVGSearch
HKCU\SOFTWARE\Delta =>Toolbar.DeltaSearch
C:\Program Files (x86)\AVG Secure Search =>Toolbar.AVGSearch
C:\ProgramData\AVG Secure Search =>Toolbar.AVGSearch
C:\ProgramData\Babylon =>PUP.Optional.Babylon
C:\ProgramData\BrowserProtect =>PUP.Optional.SpeedBrowser
C:\Program Files (x86)\Common Files\AVG Secure Search =>Toolbar.AVGSearch
C:\Users\Aurore\AppData\Roaming\0T1P1I1P0C1M1T1C1N1P1C =>PUP.Optional.InstallCore
C:\Users\Aurore\AppData\Roaming\Babylon =>PUP.Optional.Babylon
C:\Users\Aurore\AppData\Local\AVG Secure Search =>Toolbar.AVGSearch
C:\windows\Installer\{177586E7-E42E-4F38-83D1-D15B4AF5B714}\Delta.ico =>Toolbar.DeltaSearch
HKLM\Software\Classes\Installer\Products\7E685771E24E83F4381D1DB5A45F7B41 =>Toolbar.DeltaSearch
HKLM\Software\Classes\Installer\Features\7E685771E24E83F4381D1DB5A45F7B41 =>Toolbar.DeltaSearch
---\\ Récapitulatif des éléments trouvées sur votre station (5) - 0s
http://www.nicolascoolman.fr/blog =>Toolbar.AVGSearch
http://www.nicolascoolman.fr/toolbar-deltasearch/ =>Toolbar.DeltaSearch
http://www.nicolascoolman.fr/pup-babylon/ =>PUP.Optional.Babylon
http://www.nicolascoolman.fr/blog =>PUP.Optional.SpeedBrowser
http://www.nicolascoolman.fr/adware-installcore/ =>PUP.Optional.InstallCore
~ End of the scan, 18321 items in 141 seconds (682)(0)()