cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

~ ZHPDiag v2015.8.23.124 Par Nicolas Coolman (2015/08/23)
~ Démarré par owner (Administrator) (2015/10/09 15:55:49)
~ Site: http://www.nicolascoolman.fr
~ Facebook: https://www.facebook.com/nicolascoolman1
~ Etat de la version: Pas de fichier réseau
~ Mode: Scanner
~ Rapport: C:\Users\owner\Desktop\ZHPDiag.txt
~ Rapport: C:\Users\owner\AppData\Roaming\ZHP\ZHPDiag.txt
~ UAC: Activate
~ Démarrage du système: Normal (Normal boot)
Windows 7 Professional, 32-bit Service Pack 1 (Build 7601)

---\\ Navigateurs Internet (4) - 0s
GCIE: Google Chrome v45.0.2454.101
MFIE: Mozilla Firefox 40.0.3 (x86 fr) v40.0.3
OPIE: Opera 32.0.1948.69 v32.0.1948.69
MSIE: Internet Explorer v11.0.9600.18015

---\\ Informations sur les produits Windows (4) - 18s
~ Windows Server License Manager Script : OK
~ Licence Script File Génération : OK
Windows Automatic Updates : OK (Auto)
Windows Activation Technologies : OK

---\\ Logiciels de protection (3) - 3s
Symantec Endpoint Protection v12.1.3001.165
Malwarebytes Anti-Malware version 2.1.8.1057
Windows Defender W7 (Deactivate)

---\\ Surveillance de Logiciels (2) - 4s
Adobe Flash Player 19 NPAPI
Adobe Reader XI

---\\ Logiciels de partage P2P (2) - 5s
qBittorrent 3.1.9.2 v3.1.9.2
Vuze v5.5.0.0

---\\ Informations sur le système (6) - 0s
~ Operating System: x86 Family 6 Model 42 Stepping 7, GenuineIntel
~ Operating System: 32-bit
~ Boot mode: Normal (Normal boot)
Total RAM: 3396.504 MB (30% free)
~ System Restore: Activé (Enable)
~ System drive C: has 24 GB free of 128 GB

---\\ Mode de connexion au système (3) - 0s
~ Computer Name: OWNER-PC
~ User Name: owner
~ Logged in as Administrator

---\\ Enumération des unités disques (2) - 0s
~ Drive C: has 24 GB free of 128 GB (System)
~ Drive D: has 18 GB free of 109 GB

---\\ Etat du Centre de Sécurité Windows (13) - 0s
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Intl: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] XMLLookup: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: OK
[HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK

---\\ Recherche particulière de fichiers génériques (24) - 2s
[MD5.8B88EBBB05A0E56B7DCC708498C02B3E] - (.Microsoft Corporation - Explorateur Windows.) () -- C:\Windows\Explorer.exe [2616320]
[MD5.51138BEEA3E2C21EC44D0932C71762A8] - (.Microsoft Corporation - Processus hôte Windows (Rundll32).) () -- C:\Windows\System32\rundll32.exe [44544]
[MD5.B5C5DCAD3899512020D135600129D665] - (.Microsoft Corporation - Application de démarrage de Windows.) () -- C:\Windows\System32\Wininit.exe [96256]
[MD5.A8C80A92549AFDD6891C8159D4C0A107] - (.Microsoft Corporation - Extensions Internet pour Win32.) () -- C:\Windows\System32\wininet.dll [1951232]
[MD5.52449FD429D6053B78AE564DEF303870] - (.Microsoft Corporation - Application d’ouverture de session Windows.) () -- C:\Windows\System32\Winlogon.exe [304128]
[MD5.E3AE23569749DE12D45BA3B489A036AE] - (.Microsoft Corporation - Bibliothèque de licences.) () -- C:\Windows\System32\sppcomapi.dll [193536]
[MD5.129F80D7868E30DF3E3DE33A1D3132B4] - (.Microsoft Corporation - DLL client de l’API uilisateur de Windows m.) () -- C:\Windows\System32\fr-FR\user32.dll.mui [20480]
[MD5.D0B388DA1D111A34366E04EB4A5DD156] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) () -- C:\Windows\System32\drivers\AFD.sys [338944]
[MD5.338C86357871C167A96AB976519BF59E] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) () -- C:\Windows\System32\drivers\atapi.sys [21584]
[MD5.77EA11B065E0A8AB902D78145CA51E10] - (.Microsoft Corporation - CD-ROM File System Driver.) () -- C:\Windows\System32\drivers\Cdfs.sys [70656]
[MD5.BE167ED0FDB9C1FA1133953C18D5A6C9] - (.Microsoft Corporation - SCSI CD-ROM Driver.) () -- C:\Windows\System32\drivers\Cdrom.sys [108544]
[MD5.F024449C97EC1E464AAFFDA18593DB88] - (.Microsoft Corporation - DFS Namespace Client Driver.) () -- C:\Windows\System32\drivers\DfsC.sys [78336]
[MD5.9036377B8A6C15DC2EEC53E489D159B5] - (.Microsoft Corporation - High Definition Audio Bus Driver.) () -- C:\Windows\System32\drivers\HDAudBus.sys [108544]
[MD5.F151F0BDC47F4A28B1B20A0818EA36D6] - (.Microsoft Corporation - Pilote de port i8042.) () -- C:\Windows\System32\drivers\i8042prt.sys [80896]
[MD5.A5FA468D67ABCDAA36264E463A7BB0CD] - (.Microsoft Corporation - IP Network Address Translator.) () -- C:\Windows\System32\drivers\IpNat.sys [101888]
[MD5.A6D93B0EAED452179B7A032CE9EEC4A1] - (.Microsoft Corporation - Windows NT SMB Minirdr.) () -- C:\Windows\System32\drivers\MRxSmb.sys [124416]
[MD5.280122DDCF04B378EDD1AD54D71C1E54] - (.Microsoft Corporation - MBT Transport driver.) () -- C:\Windows\System32\drivers\netBT.sys [187904]
[MD5.C8DFF8D07755A66C7A4A738930F0FEAC] - (.Microsoft Corporation - Pilote du système de fichiers NT.) () -- C:\Windows\System32\drivers\ntfs.sys [1212352]
[MD5.2EA877ED5DD9713C5AC74E8EA7348D14] - (.Microsoft Corporation - Pilote de port parallèle.) () -- C:\Windows\System32\drivers\Parport.sys [79360]
[MD5.D9F91EAFEC2815365CBE6D167E4E332A] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) () -- C:\Windows\System32\drivers\Rasl2tp.sys [78848]
[MD5.B973FCFC50DC1434E1970A146F7E3885] - (.Microsoft Corporation - Microsoft RDP Device redirector.) () -- C:\Windows\System32\drivers\rdpdr.sys [133632]
[MD5.3E21C083B8A01CB70BA1F09303010FCE] - (.Microsoft Corporation - SMB Transport driver.) () -- C:\Windows\System32\drivers\smb.sys [71168]
[MD5.7FE680A3DFA421C4A8E4879AE4C5AAB0] - (.Microsoft Corporation - TDI Translation Driver.) () -- C:\Windows\System32\drivers\tdx.sys [74752]
[MD5.F497F67932C6FA693D7DE2780631CFE7] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) () -- C:\Windows\System32\drivers\volsnap.sys [245632]

---\\ Processus lancés (38) - 6s
[MD5.ACD4AF1B9D6E6C0C5BE470E5CF313FE6] - (.IObit - Advanced SystemCare Service.) -- C:\Program Files\IObit\Advanced SystemCare 8\ASCService.exe [814880] [PID.848]
[MD5.82D84244506BE6EA6C3576CA7CEF9D01] - (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 353.6.) -- C:\Windows\System32\nvvsvc.exe [671048] [PID.928]
[MD5.A97FCA92BE4E62BC589371058CBC769E] - (.IDT, Inc. - IDT PC Audio.) -- C:\Program Files\IDT\WDM\stacsv.exe [274514] [PID.1184]
[MD5.5E3EA0AFFE518434ADD085D60997D949] - (.NVIDIA Corporation - NVIDIA User Experience Driver Component.) -- C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe [976528] [PID.1536]
[MD5.82D84244506BE6EA6C3576CA7CEF9D01] - (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 353.6.) -- C:\Windows\System32\nvvsvc.exe [671048] [PID.1608]
[MD5.F21FA9E662E8AE8A8DA26BEA193C709C] - (.IObit - IObit Malware Fighter Service.) -- C:\Program Files\IObit\IObit Malware Fighter\IMFsrv.exe [882464] [PID.1884]
[MD5.013697369EAFFA675D0671607F036020] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [82128] [PID.1992]
[MD5.827DBC22C96EECF6D36A13162FABAFD3] - (.Andrea Electronics Corporation - Andrea filters APO access service (32-bit).) -- C:\Program Files\IDT\WDM\AEstSrv.exe [81920] [PID.2012]
[MD5.2F2BD5EFFA8E91295F4DB493D85534B5] - (.Apple Inc. - MobileDeviceService.) -- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [60744] [PID.2044]
[MD5.1D0CF63DF5F1E7C7D2A89ACB417A5B21] - (.UPEK Inc. - Fingerprint Server Process for Vista.) -- C:\Program Files\Common Files\SPBA\upeksvr.exe [57168] [PID.120]
[MD5.DBA09047208D41E89AD0A7BBAFE0A2A7] - (.Cepstral, LLC - Cepstral License Server.) -- C:\Program Files\Cepstral\bin\CepstralLicSrv.exe [57344] [PID.1856]
[MD5.301E3FDFCF33640BB8763BA444BC5093] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160] [PID.2172]
[MD5.83C982A395D00BAFF6515FB38424EA76] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [1133880] [PID.2256]
[MD5.ED5F5504A99E92211B753E1815A34CBC] - (...) -- C:\Program Files\Real\UpdateService\RealPlayerUpdateSvc.exe [32880] [PID.2288]
[MD5.AF610CC6600953A3C236FDF41D322893] - (.RealNetworks, Inc. - RealTimes Desktop Service.) -- C:\Program Files\Real\RealPlayer\RPDS\Bin\rpdsvc.exe [1115736] [PID.2424]
[MD5.94E826672988FBCE0979F7800EB770C9] - (.Symantec Corporation - Symantec Service Framework.) -- C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.3001.165.105\Bin\ccSvcHst.exe [144368] [PID.2468]
[MD5.FE39F0650FCB8430D0882AF97A8ED5E9] - (.AVG Technologies - AVG PC TuneUp Service.) -- C:\Program Files\AVG\AVG PC TuneUp\TuneUpUtilitiesService32.exe [2449624] [PID.2572]
[MD5.75AE764759903F0F9B4A2DF45A70C014] - (.Symantec Corporation - Symantec CMC Smc.) -- C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.3001.165.105\Bin\Smc.exe [1804256] [PID.2824]
[MD5.ABFF2B3A80AA5348BE5E43EFD6B415D1] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files\Malwarebytes Anti-Malware\mbam.exe [6554424] [PID.1368]
[MD5.12C864E55D5ED1A4061FA18BCCD80AC5] - (.IDT, Inc. - IDT PC Audio.) -- C:\Program Files\IDT\WDM\sttray.exe [536668] [PID.3112]
[MD5.A3C70B18A44741DB0393750880AA73F1] - (.Copyright © RealNetworks, Inc. 1995-2012 - RealDownloader.) -- C:\Program Files\RealNetworks\RealDownloader\downloader2.exe [614464] [PID.2944]
[MD5.D192592FD0A99D9F360906D3F6DFBFF1] - (.Wondershare - Wondershare Studio.) -- C:\Program Files\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2072928] [PID.3388]
[MD5.422963B9386FD4052AA766A6575ED8DE] - (.IObit - Advanced SystemCare 8.) -- C:\Program Files\IObit\Advanced SystemCare 8\ASCTray.exe [2429728] [PID.3460]
[MD5.FBD407FFA18B89CAED9A196E2267B6DA] - (.RealNetworks, Inc. - RealTimes Service UI.) -- C:\Program Files\Real\RealPlayer\RPDS\Bin\rpsystray.exe [1133656] [PID.2244]
[MD5.94E826672988FBCE0979F7800EB770C9] - (.Symantec Corporation - Symantec Service Framework.) -- C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.3001.165.105\Bin\ccSvcHst.exe [144368] [PID.5364]
[MD5.460ADFA0BF47B7B9B2907A31831B1240] - (.AVG Technologies - AVG PC TuneUp.) -- C:\Program Files\AVG\AVG PC TuneUp\TuneUpUtilitiesApp32.exe [2344664] [PID.5516]
[MD5.363006ED1B459555B27D74A4B7EE4673] - (.IObit - IObit Malware Fighter.) -- C:\Program Files\IObit\IObit Malware Fighter\IMF.exe [5889824] [PID.4208]
[MD5.DD7423ABBE2913E70D50E9318AD57EE4] - (.Google Inc. - Programme d'installation de Google.) -- C:\Program Files\Google\Update\GoogleUpdate.exe [144200] [PID.5000]
[MD5.EB568B709E7170A9BE67A405644E8CBF] - (.IObit - Smart Defrag v4.) -- C:\Program Files\IObit\Smart Defrag 4\SmartDefrag.exe [4525344] [PID.1508]
[MD5.4E37455DB16AEC75862B1D0BC35B589E] - (.O2Micro International - O2 Flash Memory Service.) -- C:\Windows\System32\drivers\o2flash.exe [72296] [PID.5232]
[MD5.2B15967270AD018024286CBA9DA1E4E7] - (.IObit - .) -- C:\Program Files\IObit\IObit Uninstaller\UninstallMonitor.exe [188192] [PID.5240]
[MD5.87438B0C7DF32411CDC6E7D96B275B19] - (.RealNetworks, Inc. - RealDownloader.) -- C:\Program Files\RealNetworks\RealDownloader\recordingmanager.exe [343640] [PID.5036]
[MD5.E8B7FD67DA14A7BE57A5CB80E3139E60] - (.Google Inc. - Google Toolbar Broker.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbarUser_32.exe [309704] [PID.5064]
[MD5.4E19C3F4919A8ED4A5F955B100472AED] - (.BitTorrent Inc. - µTorrent.) -- C:\Users\owner\AppData\Roaming\uTorrent\uTorrent.exe [1821536] [PID.2148]
[MD5.40E63A7B9993496620D503AF6DDC92C3] - (.BitTorrent Inc. - WebHelper.) -- C:\Users\owner\AppData\Roaming\uTorrent\updates\3.4.5_41162\utorrentie.exe [336896] [PID.5160]
[MD5.40E63A7B9993496620D503AF6DDC92C3] - (.BitTorrent Inc. - WebHelper.) -- C:\Users\owner\AppData\Roaming\uTorrent\updates\3.4.5_41162\utorrentie.exe [336896] [PID.2792]
[MD5.E284663B1A5EA1132998AE53C10D49FF] - (.Symantec Corporation - Symantec Endpoint Protection.) -- C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.3001.165.105\Bin\SavUI.exe [201104] [PID.4928]
[MD5.84867350CFF4C8551E5F5A3D355D8CB3] - (.Nicolas Coolman - ZHPDiag.) -- C:\Users\owner\AppData\Roaming\ZHP\ZHPDiag3.exe [1901056] [PID.7504]

---\\ Google Chrome, Démarrage,Recherche,Extensions (8) - 1s
G0 - GCSP: Secure Preferences [User Data\Default][HomePage] http://www.malwarebytes.org/
G2 - GCE: Preference [User Data\Default] [aapocclcgogkmnckokdopfmhonfmgoek] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [aohghmighlieiainnegkcijnfilokake] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [apdfllckaahabafndbhieahigkjlhalf] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [blpcfgokakmgnkcojhhkbfbldkacnbeo] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [coobgpohoikkiipiblmjeljniedjpjpf] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [felcaaldnbdncclmgdcncolpebgiejap] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [pjkljhegncpnkpknbcohdijeoejaedia] Google Chrome manifest =>.Google Inc.

---\\ Firefox, Plugins,Demarrage,Recherche,Extensions (12) - 2s
P2 - EXT FILE: (...) -- C:\Users\owner\AppData\Roaming\Mozilla\Firefox\Profiles\6vgi1szp.default\extensions\fdm_ffext@freedownloadmanager.org
P2 - EXT FILE: (...) -- C:\Users\owner\AppData\Roaming\Mozilla\Firefox\Profiles\6vgi1szp.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi
P2 - EXT: (.Mozilla - Default.) -- C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Macromed\Flash\NPSWF32_19_0_0_185.dll
P2 - FPN: [HKLM] [@Apple.com/iTunes,version=1.0] - (.Apple Inc..) -- D:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
P2 - FPN: [HKLM] [@divx.com/DivX Browser Plugin,version=0.9.3] - (.DivX,Inc..) -- C:\Program Files\DivX\DivX Browser Plug-In\npdivx32.dll
P2 - FPN: [HKLM] [@itools.hk/npiTools, version=1.0.0] - (.itools.hk Copyright (C) 2012.) -- C:\Users\owner\Documents\iTools\Plugin\npiTools.dll
P2 - FPN: [HKLM] [@real.com/nppl3260;version=18.0.2.59] - (.RealNetworks, Inc..) -- C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll
P2 - FPN: [HKLM] [@real.com/nprpplugin;version=18.0.2.59] - (.RealTimes.) -- C:\Program Files\Real\RealPlayer\Netscape6\nprpplugin.dll
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=3] - (.Google Inc..) -- C:\Program Files\Google\Update\1.3.28.15\npGoogleUpdate3.dll
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=9] - (.Google Inc..) -- C:\Program Files\Google\Update\1.3.28.15\npGoogleUpdate3.dll
P2 - FPN: [HKLM] [Adobe Reader] - (.Adobe Systems Inc..) -- C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll

---\\ Opera, Démarrage,Recherche,Plugins (2) - 0s
B0 - OCSP: Preferences [owner][HomePage] http://www.istartsurf.com/?type=hp&ts=1437503583&z=fe23251dfb96e30b0312918g2z2c6mcw5e7c2wdw9e&from=cornl&uid=WDCXWD2500BEKT-75PVMT0_WD-WXB1A81K6904K6904
B2 - EXT: C:\Users\owner\AppData\Roaming\Opera Software\Opera Stable\Extensions\jhongheibdpfhdpfccheljfcabgliidh (Orphean)

---\\ Internet Explorer,Démarrage,Recherche,URLSearchHook (15) - 0s
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.symantec.com/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm
R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphean =>.Microsoft Internet Explorer

---\\ Internet Explorer,Proxy Management (8) - 0s
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer =
R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 0

---\\ Internet Explorer,IniFiles, Autoloading programs (3) - 0s
F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe (.Microsoft Corporation.)
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe (.Microsoft Corporation.)
F2 - REG:system.ini: VMApplet=C:\Windows\system32\SystemPropertiesPerformance.exe (.Microsoft Corporation.)

---\\ Etude du fichier hosts (1) - 0s
~ Le fichier hôte est sain (The hosts file is clean) (21)

---\\ Browser Helper Object de navigateur (BHO) (13) - 0s
O2 - BHO: ExplorerWnd Helper - {10921475-03CE-4E04-90CE-E2E7EF20C814} . (.IObit - Uninstall for explorer.) -- C:\Program Files\IObit\IObit Uninstaller\UninstallExplorer32.dll
O2 - BHO: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} . (.RealDownloader - RealTimes Video Downloader.) -- C:\Program Files\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll
O2 - BHO: Symantec Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} . (.Symantec Corporation - IPS Browser Helper DLL.) -- C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.3001.165.105\Bin\IPS\IPSBHO.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} . (.Microsoft Corporation - Microsoft SharePoint Workspace Extensions.) -- C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre1.8.0_60\bin\ssv.dll
O2 - BHO: Ads Removal - {9D974C8C-6D92-44FB-BEAF-B45A1C0CF17F} . (.Adblock - Helps you remove browser ads!.) -- C:\Program Files\IObit\IObit Malware Fighter\adsremoval\IE\Adblock.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} . (.Microsoft Corporation - Microsoft Office Document Cache Handler.) -- C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL
O2 - BHO: Advanced SystemCare Surfing Protection - {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} . (.IObit - Advanced SystemCare 8 ASCPlugin_Protection.) -- C:\Program Files\IObit\Surfing Protection\BrowerProtect\ASCPlugin_Protection.dll
O2 - BHO: Free Download Manager - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} . (.FreeDownloadManager.ORG - .) -- C:\Program Files\Free Download Manager\iefdm2.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre1.8.0_60\bin\jp2ssv.dll
O2 - BHO: iToolsBHO - {E1499FE7-129D-4B6E-B681-DDF21E14172C} . (.iTools.hk - .) -- C:\Users\owner\Documents\iTools\Plugin\iToolsBHO.dll
O2 - BHO: Adblock Plus for IE Browser Helper Object - {FFCB3198-32F3-4E8B-9539-4324694ED664} . (.Eyeo GmbH - Adblock Plus BHO for Internet Explorer.) -- C:\Program Files\Adblock Plus for IE\AdblockPlus32.dll

---\\ Internet Explorer, Barre d'outil (2) - 0s
O3 - Toolbar: 0xB1C218236549D4119B18009027A5CD4F - [HKCU]{2318C2B1-4965-11D4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: 0x00 - [HKLM]{2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

---\\ Applications lancées au démarrage du système (12) - 0s
O4 - HKLM\..\Run: [IObit Malware Fighter] . (.IObit - IObit Malware Fighter.) -- C:\Program Files\IObit\IObit Malware Fighter\IMF.exe
O4 - HKLM\..\Run: [SysTrayApp] . (.IDT, Inc. - IDT PC Audio.) -- C:\Program Files\IDT\WDM\sttray.exe
O4 - HKLM\..\Run: [RealDownloader] . (.Copyright © RealNetworks, Inc. 1995-2012 - RealDownloader.) -- C:\Program Files\RealNetworks\RealDownloader\downloader2.exe
O4 - HKLM\..\Run: [Wondershare Helper Compact.exe] . (.Wondershare - Wondershare Studio.) -- C:\Program Files\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
O4 - HKCU\..\Run: [Advanced SystemCare 8] . (.IObit - Advanced SystemCare 8.) -- C:\Program Files\IObit\Advanced SystemCare 8\ASCTray.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe
O4 - HKUS\.DEFAULT\..\RunOnce: [osk.exe] . (.Microsoft Corporation - Accessibilité au Clavier visuel.) -- C:\Windows\System32\osk.exe
O4 - HKUS\S-1-5-18\..\RunOnce: [osk.exe] . (.Microsoft Corporation - Accessibilité au Clavier visuel.) -- C:\Windows\System32\osk.exe
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe
O4 - HKUS\S-1-5-21-3945259090-883325794-3769175676-1000\..\Run: [Advanced SystemCare 8] . (.IObit - Advanced SystemCare 8.) -- C:\Program Files\IObit\Advanced SystemCare 8\ASCTray.exe

---\\ Modification Domaine/Adresses DNS (3) - 0s
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1

---\\ Protocole additionnel (22) - 0s
O18 - Handler: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll
O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll
O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\MSVidCtl.dll
O18 - Handler: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll
O18 - Handler: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll
O18 - Handler: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll
O18 - Handler: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll
O18 - Handler: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll
O18 - Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll
O18 - Handler: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll
O18 - Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll
O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\System32\inetcomm.dll
O18 - Handler: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll
O18 - Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} . (.Microsoft Corporation - Microsoft® Help Data Services Module.) -- C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O18 - Handler: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll
O18 - Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll
O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\MSVidCtl.dll
O18 - Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll
O18 - Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll
O18 - Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll
O18 - Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll
O18 - Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL

---\\ Liste des services NT non Microsoft et non désactivés (18) - 1s
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Advanced SystemCare Service 8 (AdvancedSystemCareService8) . (.IObit - Advanced SystemCare Service.) - C:\Program Files\IObit\Advanced SystemCare 8\ASCService.exe
O23 - Service: Andrea ST Filters Service (AESTFilters) . (.Andrea Electronics Corporation - Andrea filters APO access service (32-bit).) - C:\Program Files\IDT\WDM\AEstSrv.exe
O23 - Service: Apple Mobile Device (Apple Mobile Device) . (.Apple Inc. - MobileDeviceService.) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Cepstral License Server (Cepstral License Server) . (.Cepstral, LLC - Cepstral License Server.) - C:\Program Files\Cepstral\bin\CepstralLicSrv.exe
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: IMF Service (IMFservice) . (.IObit - IObit Malware Fighter Service.) - C:\Program Files\IObit\IObit Malware Fighter\IMFsrv.exe
O23 - Service: LiveUpdate (LiveUpdateSvc) . (.IObit - Product Updater.) - C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe
O23 - Service: (MBAMScheduler) . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe
O23 - Service: (MBAMService) . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 353.6.) - C:\Windows\System32\nvvsvc.exe
O23 - Service: O2FLASH (O2FLASH) . (.O2Micro International - O2 Flash Memory Service.) - C:\Windows\System32\drivers\o2flash.exe
O23 - Service: RealPlayer Update Service (RealPlayerUpdateSvc) . (...) - C:\Program Files\Real\UpdateService\RealPlayerUpdateSvc.exe
O23 - Service: RealTimes Desktop Service (RealTimes Desktop Service) . (.RealNetworks, Inc. - RealTimes Desktop Service.) - C:\Program Files\Real\RealPlayer\RPDS\Bin\rpdsvc.exe
O23 - Service: Symantec Endpoint Protection (SepMasterService) . (.Symantec Corporation - Symantec Service Framework.) - C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.3001.165.105\Bin\ccSvcHst.exe
O23 - Service: @C:\Windows\system32\stlang.dll,-10101 (STacSV) . (.IDT, Inc. - IDT PC Audio.) - C:\Program Files\IDT\WDM\stacsv.exe
O23 - Service: AVG PC TuneUp Service (TuneUp.UtilitiesSvc) . (.AVG Technologies - AVG PC TuneUp Service.) - C:\Program Files\AVG\AVG PC TuneUp\TuneUpUtilitiesService32.exe
O23 - Service: (WsAppService) . (.Wondershare - Wondershare AppService.) - C:\Program Files\Wondershare\WAF\WsAppService.exe

---\\ Tâches planifiées en automatique (50) - 7s
[MD5.E3FB05F33E1404AD606B1E1FE7C323C3] [APT] [Adobe Acrobat Update Task] (.Adobe Systems Incorporated.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [998104]
[MD5.C6D147C12C424373B016C0AB0A6C61EB] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe [269000]
[MD5.E3FB05F33E1404AD606B1E1FE7C323C3] [APT] [Adobe Reader and Acrobat Manager] (.Adobe Systems Incorporated.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [998104]
[MD5.E2405E793004B179C99D05331635CAF1] [APT] [ASC8_SkipUac_owner] (.IObit.) -- C:\Program Files\IObit\Advanced SystemCare 8\ASC.exe [5425440]
[MD5.DD7423ABBE2913E70D50E9318AD57EE4] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe [144200]
[MD5.DD7423ABBE2913E70D50E9318AD57EE4] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe [144200]
[MD5.F916BA0DA28A4B4F7B1ADE76EB42F088] [APT] [Java Platform SE Auto Updater] (.Oracle Corporation.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe [597552]
[MD5.C8E6653F8C6B9A92370541B632CCDCE2] [APT] [Opera scheduled Autoupdate 1434327507] (.Opera Software.) -- C:\Program Files\Opera\launcher.exe [955512]
[MD5.A3C70B18A44741DB0393750880AA73F1] [APT] [RealDownloader Update Check] (.Copyright © RealNetworks, Inc. 1995-2012.) -- C:\Program Files\RealNetworks\RealDownloader\downloader2.exe [614464]
[MD5.87438B0C7DF32411CDC6E7D96B275B19] [APT] [RealDownloaderDownloaderScheduledTaskS-1-5-21-3945259090-883325794-3769175676-1000] (.RealNetworks, Inc..) -- C:\Program Files\RealNetworks\RealDownloader\recordingmanager.exe [343640]
[MD5.1E9965A15818D621D9EBE79CDABC46BC] [APT] [RealDownloaderRealUpgradeLogonTaskS-1-5-21-3945259090-883325794-3769175676-1000] (.RealNetworks, Inc..) -- C:\Program Files\RealNetworks\RealDownloader\RealUpgrade.exe [143424]
[MD5.1E9965A15818D621D9EBE79CDABC46BC] [APT] [RealDownloaderRealUpgradeScheduledTaskS-1-5-21-3945259090-883325794-3769175676-1000] (.RealNetworks, Inc..) -- C:\Program Files\RealNetworks\RealDownloader\RealUpgrade.exe [143424]
[MD5.295B68F82C920B89BA390084EED333D2] [APT] [RealTimes (32-bit) ] (.RealNetworks, Inc..) -- C:\Program Files\Real\RealPlayer\Update\realsched.exe [286784]
[MD5.EB568B709E7170A9BE67A405644E8CBF] [APT] [SmartDefrag4_Startup] (.IObit.) -- C:\Program Files\IObit\Smart Defrag 4\SmartDefrag.exe [4525344]
[MD5.46573F4542E59BBC7BDDFB463CD52506] [APT] [SmartDefrag4_Update] (.IObit.) -- C:\Program Files\IObit\Smart Defrag 4\AutoUpdate.exe [2390816]
[MD5.5EDB796748C66806C97768EF3AE586C7] [APT] [TuneUpUtilities_Task_BkGndMaintenance2013] (.AVG Technologies.) -- C:\Program Files\AVG\AVG PC TuneUp\OneClick.exe [555736]
[MD5.0A6B46C7DF4CC23C106E7494321AE5F3] [APT] [Uninstaller_SkipUac_Administrator] (.IObit.) -- C:\Program Files\IObit\IObit Uninstaller\IObitUninstaler.exe [8032544]
[MD5.0A6B46C7DF4CC23C106E7494321AE5F3] [APT] [Uninstaller_SkipUac_owner] (.IObit.) -- C:\Program Files\IObit\IObit Uninstaller\IObitUninstaler.exe [8032544]
[MD5.34EBD4FF6A24D86BB4716D6AFCC1A89B] [APT] [Apple\AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files\Apple Software Update\SoftwareUpdate.exe [561984]
O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\Tasks\Adobe Flash Player Updater.job [1002] =>.Adobe Systems Incorporated
O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job [1054] =>.Google Inc.
O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job [1058] =>.Google Inc.
O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\0 [3202]
O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\4736 [3298]
O39 - APT: Adobe Acrobat Update Task - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Tasks\Adobe Acrobat Update Task [3874] =>.Adobe Systems Incorporated
O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Tasks\Adobe Flash Player Updater [3940] =>.Adobe Systems Incorporated
O39 - APT: Adobe Reader and Acrobat Manager - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Tasks\Adobe Reader and Acrobat Manager [3670] =>.Adobe Systems Incorporated
O39 - APT: ASC8_SkipUac_owner - (.IObit.) -- C:\Windows\System32\Tasks\ASC8_SkipUac_owner [2860] =>.IObit
O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore [3802] =>.Google Inc.
O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA [4054] =>.Google Inc.
O39 - APT: Java Platform SE Auto Updater - (.Oracle Corporation.) -- C:\Windows\System32\Tasks\Java Platform SE Auto Updater [3680] =>.Oracle Corporation
O39 - APT: Opera scheduled Autoupdate 1434327507 - (.Opera Software.) -- C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1434327507 [3844] =>.Opera Software
O39 - APT: RealDownloader Update Check - (.Copyright © RealNetworks, Inc. 1995-2012.) -- C:\Windows\System32\Tasks\RealDownloader Update Check [3412] =>.Copyright © RealNetworks, Inc. 1995-2012
O39 - APT: RealDownloaderDownloaderScheduledTaskS-1-5-21-3945259090-883325794-3769175676-1000 - (.RealNetworks, Inc..) -- C:\Windows\System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-3945259090-883325794-3769175676-1000 [3370] =>.RealNetworks, Inc.
O39 - APT: RealDownloaderRealUpgradeLogonTaskS-1-5-21-3945259090-883325794-3769175676-1000 - (.RealNetworks, Inc..) -- C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-3945259090-883325794-3769175676-1000 [3216] =>.RealNetworks, Inc.
O39 - APT: RealDownloaderRealUpgradeScheduledTaskS-1-5-21-3945259090-883325794-3769175676-1000 - (.RealNetworks, Inc..) -- C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-3945259090-883325794-3769175676-1000 [3350] =>.RealNetworks, Inc.
O39 - APT: RealTimes (32-bit) - (.RealNetworks, Inc..) -- C:\Windows\System32\Tasks\RealTimes (32-bit) [0] =>.RealNetworks, Inc.
O39 - APT: SmartDefrag4_Startup - (.IObit.) -- C:\Windows\System32\Tasks\SmartDefrag4_Startup [3172] =>.IObit
O39 - APT: SmartDefrag4_Update - (.IObit.) -- C:\Windows\System32\Tasks\SmartDefrag4_Update [3170] =>.IObit
O39 - APT: TuneUpUtilities_Task_BkGndMaintenance2013 - (.AVG Technologies.) -- C:\Windows\System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 [2750] =>.AVG Technologies
O39 - APT: Uninstaller_SkipUac_Administrator - (.IObit.) -- C:\Windows\System32\Tasks\Uninstaller_SkipUac_Administrator [2874] =>.IObit
O39 - APT: Uninstaller_SkipUac_owner - (.IObit.) -- C:\Windows\System32\Tasks\Uninstaller_SkipUac_owner [2892] =>.IObit
O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\{2F72CEA2-3074-4F06-A93A-8F2AF593CDC0} [3200]
O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\{72269998-1A7C-49EC-9791-7FD27DB93452} [3144]
O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\{75785A41-2137-4E0A-9E06-FD30ABE546B8} [3184]
O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\{8842F755-69D4-48D5-81BD-240E72B67B4E} [3412]
O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\{8E4B158B-A198-4F23-AE31-2C51979D81D4} [3124]
O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\{A0CC6C12-A6EB-477E-9EE3-0B77EF6C7925} [3152]
O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\{CDC641A0-4E08-491A-9D46-942BFB6FBD95} [3058]
O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\{CFA7F593-A7DC-4F04-A460-E0EDC0B0A35F} [3124]

---\\ Logiciels installés (102) - 8s
O42 - Logiciel: Windows Driver Package - Nokia pccsmcfd (08/22/2008 7.0.0.0) - (.Nokia.) [HKLM] -- 504244733D18C8F63FF584AEB290E3904E791693
O42 - Logiciel: Vuze - (.Azureus Software, Inc..) [HKLM] -- 8461-7759-5462-8226
O42 - Logiciel: Windows Driver Package - Dell Inc. PBADRV System (09/11/2009 1.0.1.6) - (.Dell Inc..) [HKLM] -- 9512AA21B791B05A54E27065C45BBC417AB282DF
O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM] -- Adobe AIR
O42 - Logiciel: Adobe Flash Player 19 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX
O42 - Logiciel: Adobe Flash Player 19 NPAPI - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player NPAPI
O42 - Logiciel: Advanced RAR Password Recovery (remove only) - (...) [HKLM] -- Advanced RAR Password Recovery
O42 - Logiciel: Advanced SystemCare 8 - (.IObit.) [HKLM] -- Advanced SystemCare 8_is1
O42 - Logiciel: Anvi AD Blocker Ultimate 3.2 - (.Anvisoft.) [HKLM] -- Anvi AD Blocker Ultimate
O42 - Logiciel: AVG PC TuneUp 2015 - (.AVG Technologies.) [HKLM] -- AVG PC TuneUp
O42 - Logiciel: Cheat Engine 6.2 - (.Dark Byte.) [HKLM] -- Cheat Engine 6.2_is1
O42 - Logiciel: Dell Webcam Central - (.Creative Technology Ltd.) [HKLM] -- Dell Webcam Central
O42 - Logiciel: DiskAid 6.5.1.0 - (.DigiDNA.) [HKLM] -- DiskAid_is1
O42 - Logiciel: Driver Booster 2.4 - (.IObit.) [HKLM] -- Driver Booster_is1
O42 - Logiciel: MathType 6 - (.Design Science, Inc..) [HKLM] -- DSMT6
O42 - Logiciel: FileHippo App Manager - (.FileHippo.com.) [HKLM] -- FileHippo.com
O42 - Logiciel: Free Download Manager 3.9.2 - (.FreeDownloadManager.ORG.) [HKLM] -- Free Download Manager_is1
O42 - Logiciel: GCompris Uninstall - (...) [HKLM] -- GCompris
O42 - Logiciel: GeoGebra - (.International GeoGebra Institute.) [HKLM] -- GeoGebra
O42 - Logiciel: GeoGebra 4.2 - (.International GeoGebra Institute.) [HKLM] -- GeoGebra 4.2
O42 - Logiciel: Golden Filter Premium 3.1 - (.Gsi Technologies.) [HKLM] -- Golden Filter Premium
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM] -- Google Chrome
O42 - Logiciel: O2Micro Flash Memory Card Windows Driver - (.O2Micro International LTD..) [HKLM] -- InstallShield_{1B7D35ED-B68B-479F-94D7-0D8DF2BBC90E}
O42 - Logiciel: Smart Switch - (.Samsung Electronics Co., Ltd..) [HKLM] -- InstallShield_{74FA5314-85C8-4E2A-907D-D9ECCCB770A7}
O42 - Logiciel: IObit Malware Fighter 3 - (.IObit.) [HKLM] -- IObit Malware Fighter_is1
O42 - Logiciel: Surfing Protection - (.IObit.) [HKLM] -- IObit Surfing Protection_is1
O42 - Logiciel: IObit Uninstaller - (.IObit.) [HKLM] -- IObitUninstall
O42 - Logiciel: Malwarebytes Anti-Malware version 2.1.8.1057 - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes Anti-Malware_is1
O42 - Logiciel: Microsoft Visionneuse de rapports 2005 redistribuable - (.Microsoft Corporation.) [HKLM] -- Microsoft Report Viewer Redistributable 2005
O42 - Logiciel: MiPony 2.1.0 - (...) [HKLM] -- MiPony
O42 - Logiciel: Mozilla Firefox 40.0.3 (x86 fr) - (.Mozilla.) [HKLM] -- Mozilla Firefox 40.0.3 (x86 fr)
O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM] -- MozillaMaintenanceService
O42 - Logiciel: Nero OEM - (...) [HKLM] -- Nero - Burning Rom!UninstallKey
O42 - Logiciel: NVIDIA nView Desktop Manager - (.NVIDIA Corporation.) [HKLM] -- NVIDIA nView Desktop Manager
O42 - Logiciel: Opera Stable 32.0.1948.69 - (.Opera Software.) [HKLM] -- Opera 32.0.1948.69
O42 - Logiciel: Intel PROSet Wireless - (...) [HKLM] -- ProInst
O42 - Logiciel: Intel(R) Network Connections Drivers - (.Intel.) [HKLM] -- PROSet
O42 - Logiciel: qBittorrent 3.1.9.2 - (.The qBittorrent project.) [HKLM] -- qbittorrent
O42 - Logiciel: RealTimes (RealPlayer) - (.RealNetworks.) [HKLM] -- RealPlayer 18.0
O42 - Logiciel: Smart Defrag 4 - (.IObit.) [HKLM] -- Smart Defrag 4_is1
O42 - Logiciel: Technitium MAC Address Changer v6.0.5 - (.Technitium.) [HKLM] -- TMACv6.0
O42 - Logiciel: TELL ME MORE - (...) [HKLM] -- TMM90
O42 - Logiciel: TELL ME MORE Communication - (...) [HKLM] -- TMMCOMMUNICATION
O42 - Logiciel: USB Disk Security - (.Zbshareware Lab.) [HKLM] -- USB Disk Security_is1
O42 - Logiciel: VLC media player - (.VideoLAN.) [HKLM] -- VLC media player
O42 - Logiciel: Web Page Maker V3.21 - (.Web Page Maker Software Company, Inc..) [HKLM] -- Web Page Maker_is1
O42 - Logiciel: WinPcap 4.1.1 - (.CACE Technologies.) [HKLM] -- WinPcapInst
O42 - Logiciel: WinRAR 5.30 beta 1 (32-bit) - (.win.rar GmbH.) [HKLM] -- WinRAR archiver
O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM] -- {0274D240-4D1D-4FDA-9A36-09F0BECD288F}
O42 - Logiciel: Cepstral David 5.1.0 - (.Cepstral LLC.) [HKLM] -- {048540B4-3497-432E-B03D-F4119A1AB257}
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {18455581-E099-4BA8-BC6B-F34B2F06600C}
O42 - Logiciel: O2Micro Flash Memory Card Windows Driver - (.O2Micro International LTD..) [HKLM] -- {1B7D35ED-B68B-479F-94D7-0D8DF2BBC90E}
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {2318C2B1-4965-11d4-9B18-009027A5CD4F}
O42 - Logiciel: Skype™ 7.7 - (.Skype Technologies S.A..) [HKLM] -- {24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}
O42 - Logiciel: Java 8 Update 25 - (.Oracle Corporation.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83218025F0}
O42 - Logiciel: Java 8 Update 51 - (.Oracle Corporation.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83218051F0}
O42 - Logiciel: Java 8 Update 60 - (.Oracle Corporation.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83218060F0}
O42 - Logiciel: RealUpgrade 1.1 - (.RealNetworks, Inc..) [HKLM] -- {28C2DED6-325B-4CC7-983A-1777C8F7FBAB}
O42 - Logiciel: SPBA 5.9 - (.UPEK Inc..) [HKLM] -- {2EECD5EF-5095-467C-B80C-4AB3096EFD60}
O42 - Logiciel: Smart Windows Installer Error Fixer Pro 4.4.0 - (.LionSea Software.) [HKLM] -- {39E548CD-57DF-E8F4-83EE-A42677215B5F}_is1
O42 - Logiciel: QuickTime 7 - (.Apple Inc..) [HKLM] -- {3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}
O42 - Logiciel: Nokia Connectivity Cable Driver - (.Nokia.) [HKLM] -- {4AA68A73-DB9C-439D-9481-981C82BD008B}
O42 - Logiciel: Intel(R) PROSet/Wireless WiFi Software - (.Intel Corporation.) [HKLM] -- {4C1CCA11-0D08-4D5E-8444-2D9FB48BCABF}
O42 - Logiciel: Symantec Endpoint Protection - (.Symantec Corporation.) [HKLM] -- {4C7E4901-324D-4FEC-907A-5AB4FE95B16D}
O42 - Logiciel: Dell Data Protection Access Drivers - (.Dell Inc..) [HKLM] -- {4E4E65EE-C456-45AC-B5AD-C62C3A325BD0}
O42 - Logiciel: Upek Touchchip Fingerprint Reader - (.Dell Inc..) [HKLM] -- {4E60E212-3177-4B16-BCB3-616CCC52357D}
O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM] -- {538227C6-C74B-4A74-99E1-2C0B4F9DA5E1}
O42 - Logiciel: Adblock Plus pour IE (32-bits) - (.Eyeo GmbH.) [HKLM] -- {568931B9-F1D1-4646-904C-8BDE897F50D3}
O42 - Logiciel: Conjugaison - (...) [HKLM] -- {5F82B545-AE13-45ED-A8A2-67E56F3165BC}
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {60EC980A-BDA2-4CB6-A427-B07A5498B4CA}
O42 - Logiciel: 3D English Dictionary - (.3D Computer Center.) [HKLM] -- {63DA793F-E504-4671-93B6-DCFD9442FC13}
O42 - Logiciel: Intel(R) Management Engine Components - (.Intel Corporation.) [HKLM] -- {65153EA5-8B6E-43B6-857B-C6E4FC25798A}
O42 - Logiciel: RealDownloader - (.RealNetworks.) [HKLM] -- {66fed0a4-7536-40b2-b830-382e37c0c32c}
O42 - Logiciel: RAR Password Unlocker - (.RAR Password Unlocker, Inc..) [HKLM] -- {69B77D45-F5AD-4AB9-933D-352703324469}_is1
O42 - Logiciel: Smart Switch - (.Samsung Electronics Co., Ltd..) [HKLM] -- {74FA5314-85C8-4E2A-907D-D9ECCCB770A7}
O42 - Logiciel: Samsung Kies - (.Samsung Electronics Co., Ltd..) [HKLM] -- {758C8301-2696-4855-AF45-534B1200980A}
O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM] -- {789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}
O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM] -- {79155F2B-9895-49D7-8612-D92580E0DE5B}
O42 - Logiciel: Apple Application Support (32 bits) - (.Apple Inc..) [HKLM] -- {7FE25256-B7C1-480D-B736-10A67A833AEA}
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
O42 - Logiciel: ExtremeCopy - (.Easersoft.) [HKLM] -- {9B4091A4-9556-402F-B703-31C203BDE889}
O42 - Logiciel: BioAPI Framework - (.Dell Inc..) [HKLM] -- {9DAED4FC-2B0E-4F3F-8141-F2ABF02CCFCB}
O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM] -- {A3875CED-8B9B-47F5-9AB9-0C36DD2D8D18}
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
O42 - Logiciel: Adobe Refresh Manager - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-0804-1033-1959-001824147215}
O42 - Logiciel: Adobe Reader XI (11.0.12) - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-AB0000000001}
O42 - Logiciel: MSVC90_x86 - (.Nokia.) [HKLM] -- {AF111648-99A1-453E-81DD-80DBBF6DAD0D}
O42 - Logiciel: RealDownloader - (.RealNetworks, Inc..) [HKLM] -- {B0235718-21E0-4A90-A42F-9C64C1B531CD}
O42 - Logiciel: NVIDIA nView 136.53 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NView
O42 - Logiciel: DivX Browser Plug-In - (.DivXNetworks, Inc..) [HKLM] -- {B7050CBDB2504B34BC2A9CA0A692CC29}
O42 - Logiciel: PC-CCID - (.Gemalto.) [HKLM] -- {BD3068DE-D53B-4CE8-B2BC-32E1323441CD}
O42 - Logiciel: Python 2.7.3 - (.Python Software Foundation.) [HKLM] -- {C0C31BCC-56FB-42A7-8766-D29E1BD74C7C}
O42 - Logiciel: PC Connectivity Solution - (.Nokia.) [HKLM] -- {DF95F1EE-9ECA-45C1-B02B-F56DDB8A3E83}
O42 - Logiciel: UpdateService - (.RealNetworks, Inc..) [HKLM] -- {E3AE96D6-E196-45B4-AF62-2B41998B9E37}
O42 - Logiciel: Cepstral Allison 5.1.0 - (.Cepstral LLC.) [HKLM] -- {F6E58077-E823-424A-943F-CBC66B4935E8}
O42 - Logiciel: Dell ControlVault Host Components Installer - (.Broadcom Corporation.) [HKLM] -- {FFFE5DAD-27EF-40C8-9C13-546224F9A2D3}
O42 - Logiciel: DMUninstaller - (...) [HKLM] -- DMUninstaller
O42 - Logiciel: CopyTrans Control Center désinstallation uniquement - (.WindSolutions.) [HKCU] -- CopyTrans Suite
O42 - Logiciel: µTorrent - (.BitTorrent Inc..) [HKCU] -- uTorrent
O42 - Logiciel: Viber - (.Viber Media Inc.) [HKCU] -- Viber

---\\ HKCU & HKLM Software Keys (196) - 8s
HKLM\SOFTWARE\120_31
HKLM\SOFTWARE\Adblock Plus for IE
HKLM\SOFTWARE\AdMuncher
HKLM\SOFTWARE\Adobe
HKLM\SOFTWARE\AdobeFlashPlayerUpdate
HKLM\SOFTWARE\ADSECURITY
HKLM\SOFTWARE\ADSRemoval
HKLM\SOFTWARE\AdwCleaner
HKLM\SOFTWARE\Ahead
HKLM\SOFTWARE\Anvisoft
HKLM\SOFTWARE\AppDataLow
HKLM\SOFTWARE\Apple Computer, Inc.
HKLM\SOFTWARE\Apple Inc.
HKLM\SOFTWARE\ATI Technologies
HKLM\SOFTWARE\Auralog
HKLM\SOFTWARE\AUTODATA
HKLM\SOFTWARE\Autodata Limited
HKLM\SOFTWARE\AVG
HKLM\SOFTWARE\Azureus
HKLM\SOFTWARE\Baidu
HKLM\SOFTWARE\BioAPI
HKLM\SOFTWARE\Btrieve Technologies
HKLM\SOFTWARE\CBSTEST
HKLM\SOFTWARE\CDDB
HKLM\SOFTWARE\Cepstral
HKLM\SOFTWARE\Code Sector
HKLM\SOFTWARE\Creative Tech
HKLM\SOFTWARE\CXT
HKLM\SOFTWARE\Dell
HKLM\SOFTWARE\Dell Computer Corporation
HKLM\SOFTWARE\Dell Inc.
HKLM\SOFTWARE\Design Science
HKLM\SOFTWARE\DVDVideoSoft
HKLM\SOFTWARE\ej-technologies
HKLM\SOFTWARE\Elcom
HKLM\SOFTWARE\EnigmaSoftwareGroup
HKLM\SOFTWARE\FreeDownloadManager.ORG
HKLM\SOFTWARE\FreeFallProtection
HKLM\SOFTWARE\g3n-h@ckm@n
HKLM\SOFTWARE\gcompris
HKLM\SOFTWARE\GEAR Software
HKLM\SOFTWARE\Google
HKLM\SOFTWARE\HaaliMkx
HKLM\SOFTWARE\IDT
HKLM\SOFTWARE\IM Providers
HKLM\SOFTWARE\Install Options
HKLM\SOFTWARE\Intel
HKLM\SOFTWARE\IObit
HKLM\SOFTWARE\JavaSoft
HKLM\SOFTWARE\JreMetrics
HKLM\SOFTWARE\KasperskyLab
HKLM\SOFTWARE\Khronos
HKLM\SOFTWARE\Lavasoft
HKLM\SOFTWARE\Licenses
HKLM\SOFTWARE\Macromedia
HKLM\SOFTWARE\magnet
HKLM\SOFTWARE\Malwarebytes' Anti-Malware
HKLM\SOFTWARE\McAfee.com
HKLM\SOFTWARE\Mozilla
HKLM\SOFTWARE\mozilla.org
HKLM\SOFTWARE\MozillaPlugins
HKLM\SOFTWARE\Nokia
HKLM\SOFTWARE\NVIDIA Corporation
HKLM\SOFTWARE\ODBC
HKLM\SOFTWARE\Opera Software
HKLM\SOFTWARE\PC Connectivity Solution
HKLM\SOFTWARE\PCDataApp
HKLM\SOFTWARE\PCSuite
HKLM\SOFTWARE\PJ
HKLM\SOFTWARE\Protector Suite
HKLM\SOFTWARE\Protector Suite QL
HKLM\SOFTWARE\qbittorrent
HKLM\SOFTWARE\RealNetworks
HKLM\SOFTWARE\RegisteredApplications
HKLM\SOFTWARE\RSA
HKLM\SOFTWARE\SimpleAdblock
HKLM\SOFTWARE\Skype
HKLM\SOFTWARE\SmartPCFixer
HKLM\SOFTWARE\Sonic
HKLM\SOFTWARE\SqueakyChocolate =>PUP.Optional.Squeaky
HKLM\SOFTWARE\ss u helper =>PUP.Optional.SaveShare
HKLM\SOFTWARE\STMicroelectronics
HKLM\SOFTWARE\Symantec
HKLM\SOFTWARE\TuneUp
HKLM\SOFTWARE\VDownloader
HKLM\SOFTWARE\VideoLAN
HKLM\SOFTWARE\Volatile
HKLM\SOFTWARE\WafCX
HKLM\SOFTWARE\WinPcap
HKLM\SOFTWARE\WinPj
HKLM\SOFTWARE\WinRAR
HKLM\SOFTWARE\Wise Solutions
HKLM\SOFTWARE\Wondershare
HKLM\SOFTWARE\WOW6432Node
HKLM\SOFTWARE\Xing Technology Corp.
HKCU\SOFTWARE\35499InstEnd
HKCU\SOFTWARE\AC3Filter
HKCU\SOFTWARE\ACE Compression Software
HKCU\SOFTWARE\AdblockPlus
HKCU\SOFTWARE\Adobe
HKCU\SOFTWARE\Ahead
HKCU\SOFTWARE\Alex Gordon
HKCU\SOFTWARE\AnchorFree
HKCU\SOFTWARE\Anvisoft
HKCU\SOFTWARE\AppDataLow
HKCU\SOFTWARE\Apple Computer, Inc.
HKCU\SOFTWARE\Apple Inc.
HKCU\SOFTWARE\Atlas Copco
HKCU\SOFTWARE\AVG
HKCU\SOFTWARE\Azureus
HKCU\SOFTWARE\Baidu Security
HKCU\SOFTWARE\BitTorrent
HKCU\SOFTWARE\Caislabs Software
HKCU\SOFTWARE\Cepstral
HKCU\SOFTWARE\Cheat Engine
HKCU\SOFTWARE\Chromium
HKCU\SOFTWARE\Code Sector
HKCU\SOFTWARE\Creative Tech
HKCU\SOFTWARE\Cucusoft, Inc.
HKCU\SOFTWARE\Dell Computer Corporation
HKCU\SOFTWARE\Design Science
HKCU\SOFTWARE\Digital River
HKCU\SOFTWARE\DivXNetworks
HKCU\SOFTWARE\DownloadManager
HKCU\SOFTWARE\DVDVideoSoft
HKCU\SOFTWARE\Easersoft
HKCU\SOFTWARE\ej-technologies
HKCU\SOFTWARE\Elcom
HKCU\SOFTWARE\Elecard
HKCU\SOFTWARE\file.org
HKCU\SOFTWARE\Filehippo.com
HKCU\SOFTWARE\FreeDownloadManager.ORG
HKCU\SOFTWARE\Froggie
HKCU\SOFTWARE\g3n-h@ckm@n
HKCU\SOFTWARE\gcompris
HKCU\SOFTWARE\Gemalto
HKCU\SOFTWARE\GNU
HKCU\SOFTWARE\Google
HKCU\SOFTWARE\Haali
HKCU\SOFTWARE\HookNetwork
HKCU\SOFTWARE\i-FunBox.com
HKCU\SOFTWARE\IM Providers
HKCU\SOFTWARE\Install
HKCU\SOFTWARE\Install Options
HKCU\SOFTWARE\Internet Cyclone
HKCU\SOFTWARE\IObit
HKCU\SOFTWARE\JavaSoft
HKCU\SOFTWARE\KasperskyLab
HKCU\SOFTWARE\KRyLack
HKCU\SOFTWARE\Licenses
HKCU\SOFTWARE\Macromedia
HKCU\SOFTWARE\Magnet
HKCU\SOFTWARE\malavida
HKCU\SOFTWARE\Malwarebytes' Anti-Malware
HKCU\SOFTWARE\MCAFEE
HKCU\SOFTWARE\Mozilla
HKCU\SOFTWARE\Netscape
HKCU\SOFTWARE\Northcode Inc
HKCU\SOFTWARE\NVIDIA Corporation
HKCU\SOFTWARE\Oberon Media
HKCU\SOFTWARE\ODBC
HKCU\SOFTWARE\Opera Software
HKCU\SOFTWARE\Participatory Culture Foundation
HKCU\SOFTWARE\PCDataApp
HKCU\SOFTWARE\PopCap
HKCU\SOFTWARE\Popcorn Time
HKCU\SOFTWARE\ProductSetup =>PUP.Optional.InstallCore
HKCU\SOFTWARE\Python
HKCU\SOFTWARE\QtProject
HKCU\SOFTWARE\RealNetworks
HKCU\SOFTWARE\Redemption
HKCU\SOFTWARE\redsn0w
HKCU\SOFTWARE\RegistryEasy
HKCU\SOFTWARE\Samsung
HKCU\SOFTWARE\Skype
HKCU\SOFTWARE\SkypeRS
HKCU\SOFTWARE\Symantec
HKCU\SOFTWARE\Sysinternals
HKCU\SOFTWARE\TeleCharger
HKCU\SOFTWARE\The Silicon Realms Toolworks
HKCU\SOFTWARE\Trolltech
HKCU\SOFTWARE\TuneUp
HKCU\SOFTWARE\undefined
HKCU\SOFTWARE\Unity
HKCU\SOFTWARE\VB and VBA Program Settings
HKCU\SOFTWARE\Viber
HKCU\SOFTWARE\WebApp
HKCU\SOFTWARE\WinRAR
HKCU\SOFTWARE\WinRAR SFX
HKCU\SOFTWARE\Wondershare
HKCU\SOFTWARE\Wow6432Node
HKCU\SOFTWARE\ZebHelpProcess Helper
HKCU\SOFTWARE\AppDataLow\Software
HKCU\SOFTWARE\AppDataLow\Software\amabupemim
HKCU\SOFTWARE\AppDataLow\Software\JavaSoft
HKCU\SOFTWARE\AppDataLow\Software\Unity

---\\ Contenu des dossiers Programmes (381) - 11s
O43 - CFD: 2015/06/20 01:48:17 - [0] D -- C:\Program Files\160cc9ca-e90c-47f9-9866-d5bd56ec2e6f =>PUP.Optional.CrossRider
O43 - CFD: 2015/06/22 14:19:56 - [0] D -- C:\Program Files\2f4a5618-5b83-4d7e-b5b9-168948cae389 =>PUP.Optional.CrossRider
O43 - CFD: 2015/08/26 16:29:28 - [] D -- C:\Program Files\3d_Dic
O43 - CFD: 2015/06/22 14:07:47 - [] D -- C:\Program Files\Ad Muncher
O43 - CFD: 2015/05/06 18:30:08 - [] D -- C:\Program Files\Adblock Plus for IE
O43 - CFD: 2013/12/06 01:14:51 - [] D -- C:\Program Files\Adobe
O43 - CFD: 2013/03/18 22:18:16 - [] D -- C:\Program Files\Ahead
O43 - CFD: 2011/11/29 15:01:40 - [] D -- C:\Program Files\Altiris
O43 - CFD: 2012/04/01 22:17:22 - [] D -- C:\Program Files\Apple Software Update
O43 - CFD: 2013/11/04 18:59:31 - [] D -- C:\Program Files\Auralog
O43 - CFD: 2015/07/12 18:10:06 - [] D -- C:\Program Files\AVG
O43 - CFD: 2012/12/17 15:02:40 - [] D -- C:\Program Files\Bonjour
O43 - CFD: 2011/11/29 14:52:27 - [] D -- C:\Program Files\Broadcom Corporation
O43 - CFD: 2015/05/04 23:37:04 - [0] D -- C:\Program Files\c4ac35d1-a9ea-4ed1-910c-54c37fc660ea =>PUP.Optional.CrossRider
O43 - CFD: 2015/08/26 16:26:56 - [] D -- C:\Program Files\Cepstral
O43 - CFD: 2012/11/15 21:05:21 - [] D -- C:\Program Files\Cheat Engine 6.2
O43 - CFD: 2015/05/06 19:07:40 - [] D -- C:\Program Files\Chromemote - Remote for Google TV
O43 - CFD: 2011/11/29 14:44:10 - [] D -- C:\Program Files\Cisco
O43 - CFD: 2015/08/23 22:08:55 - [] D -- C:\Program Files\Common Files
O43 - CFD: 2011/11/29 14:34:25 - [] D -- C:\Program Files\Creative
O43 - CFD: 2013/02/01 12:29:24 - [] D -- C:\Program Files\Cucusoft
O43 - CFD: 2011/11/29 14:56:13 - [] D -- C:\Program Files\Dell
O43 - CFD: 2011/11/29 14:34:12 - [] D -- C:\Program Files\Dell Webcam
O43 - CFD: 2012/04/11 14:52:59 - [] D -- C:\Program Files\DIFX
O43 - CFD: 2014/02/11 11:33:52 - [] D -- C:\Program Files\DigiDNA
O43 - CFD: 2013/11/09 00:20:30 - [] D -- C:\Program Files\DivX
O43 - CFD: 2013/03/04 22:59:22 - [] D -- C:\Program Files\DVD Maker
O43 - CFD: 2015/06/22 14:01:13 - [0] D -- C:\Program Files\e1e5e4ac-f7f9-44db-ace1-4e9bf1d89613 =>PUP.Optional.CrossRider
O43 - CFD: 2015/06/22 14:18:10 - [0] D -- C:\Program Files\e27f82c0-c97e-45d6-922f-59418b135241 =>PUP.Optional.CrossRider
O43 - CFD: 2015/02/16 19:24:23 - [] D -- C:\Program Files\Easersoft
O43 - CFD: 2014/04/07 20:15:20 - [] D -- C:\Program Files\Enigma Software Group =>.Enigma Software
O43 - CFD: 2015/02/17 18:23:39 - [] D -- C:\Program Files\Facebook Colors
O43 - CFD: 2015/07/21 22:36:13 - [] D -- C:\Program Files\FileHippo.com
O43 - CFD: 2013/06/01 13:17:42 - [] D -- C:\Program Files\Free Download Manager
O43 - CFD: 2011/11/29 14:52:46 - [] D -- C:\Program Files\Gemalto
O43 - CFD: 2012/05/12 22:25:45 - [] D -- C:\Program Files\GeoGebra
O43 - CFD: 2013/05/22 17:50:25 - [] D -- C:\Program Files\GeoGebra 4.2
O43 - CFD: 2015/03/10 22:30:25 - [] D -- C:\Program Files\Golden Filter Premium
O43 - CFD: 2015/07/28 20:26:41 - [] D -- C:\Program Files\Google
O43 - CFD: 2013/11/30 10:47:42 - [] D -- C:\Program Files\i-Funbox DevTeam
O43 - CFD: 2015/06/20 15:34:21 - [] D -- C:\Program Files\IDT
O43 - CFD: 2015/02/24 23:00:48 - [] D -- C:\Program Files\InoReader Notifier News and RSS Reader
O43 - CFD: 2015/07/05 19:03:45 - [] HD -- C:\Program Files\InstallShield Installation Information
O43 - CFD: 2015/06/25 01:22:02 - [] D -- C:\Program Files\Intel
O43 - CFD: 2015/09/12 20:01:19 - [] D -- C:\Program Files\Internet Explorer
O43 - CFD: 2015/06/20 14:59:06 - [] D -- C:\Program Files\IObit
O43 - CFD: 2015/07/05 15:31:53 - [] D -- C:\Program Files\iPod
O43 - CFD: 2015/08/23 19:15:00 - [] D -- C:\Program Files\Java
O43 - CFD: 2014/04/23 18:33:07 - [] D -- C:\Program Files\Kepard
O43 - CFD: 2015/10/09 14:41:17 - [] D -- C:\Program Files\Malwarebytes Anti-Malware
O43 - CFD: 2015/07/05 18:34:56 - [] D -- C:\Program Files\MarkAny
O43 - CFD: 2013/10/31 00:14:30 - [] D -- C:\Program Files\MathType
O43 - CFD: 2011/11/29 21:28:25 - [] D -- C:\Program Files\Microsoft Analysis Services
O43 - CFD: 2011/11/29 14:54:04 - [] D -- C:\Program Files\Microsoft ASP.NET
O43 - CFD: 2011/11/29 14:57:37 - [] D -- C:\Program Files\Microsoft Games
O43 - CFD: 2011/11/29 21:30:43 - [] D -- C:\Program Files\Microsoft Office
O43 - CFD: 2015/08/26 12:31:00 - [] D -- C:\Program Files\Microsoft Silverlight
O43 - CFD: 2011/11/29 21:30:42 - [] D -- C:\Program Files\Microsoft SQL Server Compact Edition
O43 - CFD: 2011/11/29 21:30:42 - [] D -- C:\Program Files\Microsoft Sync Framework
O43 - CFD: 2011/11/29 21:31:00 - [] D -- C:\Program Files\Microsoft Synchronization Services
O43 - CFD: 2011/11/29 21:29:02 - [] D -- C:\Program Files\Microsoft Visual Studio 8
O43 - CFD: 2012/05/23 18:32:48 - [] D -- C:\Program Files\Microsoft.NET
O43 - CFD: 2013/09/02 17:36:07 - [] D -- C:\Program Files\MiPony
O43 - CFD: 2015/10/08 09:03:00 - [] D -- C:\Program Files\Mozilla Firefox
O43 - CFD: 2015/10/08 09:03:01 - [] D -- C:\Program Files\Mozilla Maintenance Service
O43 - CFD: 2011/11/29 21:31:19 - [] D -- C:\Program Files\MSBuild
O43 - CFD: 2014/11/14 20:44:33 - [] D -- C:\Program Files\MyPlayCity.com
O43 - CFD: 2014/02/24 00:09:28 - [0] D -- C:\Program Files\NirSoft
O43 - CFD: 2012/05/19 11:01:20 - [] D -- C:\Program Files\Nokia
O43 - CFD: 2015/08/23 19:02:16 - [] D -- C:\Program Files\NVIDIA Corporation
O43 - CFD: 2011/11/29 14:40:03 - [] D -- C:\Program Files\O2Micro
O43 - CFD: 2015/10/06 00:19:53 - [] D -- C:\Program Files\Opera
O43 - CFD: 2012/04/11 14:52:07 - [] D -- C:\Program Files\PC Connectivity Solution
O43 - CFD: 2015/02/24 22:31:34 - [] D -- C:\Program Files\QuickTime
O43 - CFD: 2014/04/23 18:59:09 - [] D -- C:\Program Files\RAR Password Unlocker
O43 - CFD: 2015/08/23 22:09:55 - [] D -- C:\Program Files\Real
O43 - CFD: 2015/08/23 22:09:24 - [] D -- C:\Program Files\RealNetworks
O43 - CFD: 2009/07/14 06:52:30 - [] D -- C:\Program Files\Reference Assemblies
O43 - CFD: 2015/07/05 19:03:35 - [] D -- C:\Program Files\Samsung
O43 - CFD: 2015/07/13 14:41:40 - [0] D -- C:\Program Files\SEGA
O43 - CFD: 2015/07/21 22:57:22 - [] RD -- C:\Program Files\Skype
O43 - CFD: 2015/03/11 21:21:22 - [] D -- C:\Program Files\Smart Windows Installer Error Fixer Pro
O43 - CFD: 2011/11/29 14:42:03 - [] D -- C:\Program Files\STMicroelectronics
O43 - CFD: 2015/05/04 14:02:16 - [] D -- C:\Program Files\Symantec
O43 - CFD: 2015/02/16 19:30:54 - [0] D -- C:\Program Files\SystemPatch
O43 - CFD: 2014/02/01 16:28:31 - [] D -- C:\Program Files\Technitium
O43 - CFD: 2012/12/04 00:57:05 - [] D -- C:\Program Files\UltraISO
O43 - CFD: 2009/07/14 06:53:23 - [0] HD -- C:\Program Files\Uninstall Information
O43 - CFD: 2013/10/29 07:30:10 - [] D -- C:\Program Files\USB Disk Security
O43 - CFD: 2012/01/06 19:54:06 - [] D -- C:\Program Files\VideoLAN
O43 - CFD: 2015/07/12 18:57:49 - [] D -- C:\Program Files\Vuze
O43 - CFD: 2012/04/24 19:21:48 - [] D -- C:\Program Files\Web Page Maker
O43 - CFD: 2013/07/13 16:21:58 - [] D -- C:\Program Files\Windows Defender
O43 - CFD: 2015/09/12 20:01:26 - [] D -- C:\Program Files\Windows Journal
O43 - CFD: 2013/03/04 22:59:23 - [] D -- C:\Program Files\Windows Mail
O43 - CFD: 2015/06/15 02:46:42 - [] D -- C:\Program Files\Windows Media Player
O43 - CFD: 2009/07/14 06:52:30 - [] D -- C:\Program Files\Windows NT
O43 - CFD: 2013/03/04 22:59:22 - [] D -- C:\Program Files\Windows Photo Viewer
O43 - CFD: 2010/11/20 23:33:48 - [] D -- C:\Program Files\Windows Portable Devices
O43 - CFD: 2013/03/04 22:59:23 - [] D -- C:\Program Files\Windows Sidebar
O43 - CFD: 2013/02/25 11:46:26 - [] D -- C:\Program Files\WinPcap
O43 - CFD: 2015/07/22 00:24:14 - [] D -- C:\Program Files\WinRAR
O43 - CFD: 2015/10/09 15:45:24 - [] D -- C:\Program Files\Wondershare
O43 - CFD: 2015/08/26 16:29:28 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\3D English Dictionary
O43 - CFD: 2015/03/14 02:53:12 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 2015/10/08 21:24:01 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 2015/01/17 01:54:49 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced RAR Password Recovery
O43 - CFD: 2015/07/27 23:27:28 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare 8
O43 - CFD: 2015/02/16 18:54:44 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Anvisoft
O43 - CFD: 2015/07/12 18:11:25 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG PC TuneUp 2015
O43 - CFD: 2015/08/26 16:27:57 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cepstral
O43 - CFD: 2012/11/15 21:05:21 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cheat Engine 6.2
O43 - CFD: 2011/11/29 14:34:26 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dell Webcam
O43 - CFD: 2014/02/11 11:33:56 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DiskAid
O43 - CFD: 2013/11/09 00:20:30 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX
O43 - CFD: 2015/08/23 18:18:52 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster 2
O43 - CFD: 2015/02/16 19:24:24 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ExtremeCopy
O43 - CFD: 2013/06/01 13:16:37 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Download Manager
O43 - CFD: 2015/02/23 23:13:23 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free YouTube Downloader Converter
O43 - CFD: 2011/11/29 14:57:46 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
O43 - CFD: 2014/05/26 19:47:32 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GamesGoFree.com
O43 - CFD: 2015/02/04 21:37:18 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GCompris
O43 - CFD: 2012/05/12 22:25:44 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GeoGebra
O43 - CFD: 2013/05/22 17:50:24 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GeoGebra 4.2
O43 - CFD: 2013/05/26 22:16:30 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
O43 - CFD: 2011/11/29 14:44:11 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel PROSet Wireless
O43 - CFD: 2015/06/01 15:36:51 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Malware Fighter
O43 - CFD: 2015/07/27 23:27:46 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Uninstaller
O43 - CFD: 2015/10/09 14:02:43 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
O43 - CFD: 2015/08/23 20:10:58 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
O43 - CFD: 2009/07/14 06:42:30 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 2015/10/09 14:41:18 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
O43 - CFD: 2013/10/31 00:14:40 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MathType 6
O43 - CFD: 2014/02/18 00:09:36 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft ASP.NET 2.0 AJAX Extensions
O43 - CFD: 2011/11/29 21:31:49 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
O43 - CFD: 2015/08/24 19:41:24 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
O43 - CFD: 2013/09/02 17:36:06 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MiPony
O43 - CFD: 2014/09/03 21:08:05 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyPlayCity.com
O43 - CFD: 2013/03/18 22:18:40 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero
O43 - CFD: 2013/03/19 07:22:08 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
O43 - CFD: 2015/02/24 22:31:31 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
O43 - CFD: 2015/01/17 01:50:20 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RAR Password Unlocker
O43 - CFD: 2015/08/23 22:09:24 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RealNetworks
O43 - CFD: 2015/07/05 19:03:57 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung
O43 - CFD: 2011/11/29 21:31:49 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SharePoint
O43 - CFD: 2014/10/11 23:29:08 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
O43 - CFD: 2015/07/21 23:24:01 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Smart Defrag 4
O43 - CFD: 2015/03/11 21:21:24 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Smart Windows Installer Error Fixer Pro
O43 - CFD: 2015/10/09 15:45:21 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
O43 - CFD: 2015/05/04 14:02:22 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Symantec Endpoint Protection
O43 - CFD: 2010/11/21 02:47:05 - [0] RHD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC
O43 - CFD: 2014/01/22 18:38:54 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TELL ME MORE Communication
O43 - CFD: 2013/11/04 18:59:42 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TELL ME MORE Performance
O43 - CFD: 2013/10/29 07:30:10 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\USB Disk Security
O43 - CFD: 2013/12/03 00:29:01 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
O43 - CFD: 2015/02/04 22:28:01 - [] D -- C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1
O43 - CFD: 2014/02/18 15:52:47 - [] D -- C:\ProgramData\Ad Muncher
O43 - CFD: 2013/12/06 01:14:53 - [] D -- C:\ProgramData\Adobe
O43 - CFD: 2012/01/06 15:45:08 - [] D -- C:\ProgramData\Alex Gordon
O43 - CFD: 2015/01/23 17:56:15 - [] D -- C:\ProgramData\Anvisoft
O43 - CFD: 2014/02/02 09:54:38 - [] D -- C:\ProgramData\Apple
O43 - CFD: 2012/04/01 22:18:06 - [] D -- C:\ProgramData\Apple Computer
O43 - CFD: 2009/07/14 06:53:55 - [0] SHD -- C:\ProgramData\Application Data
O43 - CFD: 2012/04/28 20:11:15 - [] D -- C:\ProgramData\AutoHideIP
O43 - CFD: 2015/05/02 23:21:24 - [] D -- C:\ProgramData\AVAST Software
O43 - CFD: 2015/07/12 18:11:49 - [] D -- C:\ProgramData\AVG
O43 - CFD: 2015/07/05 15:31:40 - [] D -- C:\ProgramData\B0FFCDD9-5261-4e59-B29A-17A4FABDEBAB
O43 - CFD: 2013/12/18 00:42:02 - [] D -- C:\ProgramData\Caterpillar
O43 - CFD: 2012/11/30 22:45:17 - [] HD -- C:\ProgramData\Common Files
O43 - CFD: 2011/11/29 14:36:52 - [] D -- C:\ProgramData\Creative
O43 - CFD: 2012/04/28 21:40:54 - [] D -- C:\ProgramData\C__Users_owner_Desktop_Crk HideIPEasy By Mouad F(45.exe
O43 - CFD: 2011/11/29 14:48:14 - [] D -- C:\ProgramData\Dell
O43 - CFD: 2009/07/14 06:53:55 - [0] SHD -- C:\ProgramData\Desktop
O43 - CFD: 2009/07/14 06:53:55 - [0] SHD -- C:\ProgramData\Documents
O43 - CFD: 2009/07/14 06:53:55 - [0] SHD -- C:\ProgramData\Favorites
O43 - CFD: 2013/06/30 21:05:53 - [] D -- C:\ProgramData\Free Download Manager
O43 - CFD: 2015/07/28 20:26:46 - [] D -- C:\ProgramData\Google
O43 - CFD: 2014/07/19 20:14:24 - [] D -- C:\ProgramData\GRAW2
O43 - CFD: 2012/04/28 21:24:52 - [] D -- C:\ProgramData\HideIPEasy
O43 - CFD: 2012/04/11 14:50:46 - [] D -- C:\ProgramData\Installations
O43 - CFD: 2014/04/12 21:36:02 - [] D -- C:\ProgramData\InstallMate =>PUP.Optional.Tarma
O43 - CFD: 2011/11/29 14:44:08 - [] D -- C:\ProgramData\Intel
O43 - CFD: 2015/07/28 22:02:23 - [] D -- C:\ProgramData\IObit
O43 - CFD: 2015/03/12 20:44:05 - [] D -- C:\ProgramData\IsolatedStorage
O43 - CFD: 2015/02/16 20:41:08 - [] D -- C:\ProgramData\Kaspersky Lab
O43 - CFD: 2014/02/18 00:09:52 - [0] D -- C:\ProgramData\Logs
O43 - CFD: 2015/10/09 09:53:53 - [] D -- C:\ProgramData\Malwarebytes
O43 - CFD: 2015/07/28 20:21:58 - [] D -- C:\ProgramData\McAfee
O43 - CFD: 2015/04/21 14:55:31 - [] SD -- C:\ProgramData\Microsoft
O43 - CFD: 2015/09/11 14:21:14 - [] D -- C:\ProgramData\Microsoft Help
O43 - CFD: 2013/05/13 21:23:51 - [] D -- C:\ProgramData\Mozilla
O43 - CFD: 2015/08/23 19:04:08 - [] D -- C:\ProgramData\NVIDIA
O43 - CFD: 2011/11/29 14:58:39 - [] D -- C:\ProgramData\NVIDIA Corporation
O43 - CFD: 2013/12/18 00:42:37 - [] D -- C:\ProgramData\Offboard Information Products
O43 - CFD: 2015/08/23 20:11:46 - [] D -- C:\ProgramData\Oracle
O43 - CFD: 2015/08/23 22:09:36 - [] D -- C:\ProgramData\Package Cache
O43 - CFD: 2012/04/11 16:54:53 - [] D -- C:\ProgramData\PC Suite
O43 - CFD: 2014/02/24 15:09:58 - [] D -- C:\ProgramData\Playrix Entertainment
O43 - CFD: 2015/05/27 19:06:58 - [] D -- C:\ProgramData\PopCap Games
O43 - CFD: 2015/10/08 09:04:58 - [] D -- C:\ProgramData\ProductData
O43 - CFD: 2015/08/23 22:08:14 - [] D -- C:\ProgramData\Real
O43 - CFD: 2015/08/23 22:09:23 - [] D -- C:\ProgramData\RealNetworks
O43 - CFD: 2015/02/02 21:06:29 - [0] D -- C:\ProgramData\Reflection
O43 - CFD: 2015/02/02 21:06:29 - [0] D -- C:\ProgramData\Reflector
O43 - CFD: 2015/05/04 13:59:17 - [] D -- C:\ProgramData\regid.1992-12.com.symantec
O43 - CFD: 2015/07/05 18:51:53 - [] D -- C:\ProgramData\Samsung
O43 - CFD: 2015/10/09 14:00:48 - [] D -- C:\ProgramData\SaoMebno
O43 - CFD: 2015/07/23 08:17:00 - [] D -- C:\ProgramData\Skype
O43 - CFD: 2012/04/30 07:52:30 - [] D -- C:\ProgramData\Speedbit
O43 - CFD: 2009/07/14 06:53:55 - [0] SHD -- C:\ProgramData\Start Menu
O43 - CFD: 2012/04/28 19:49:25 - [] D -- C:\ProgramData\Sun
O43 - CFD: 2015/10/08 22:31:54 - [] D -- C:\ProgramData\Symantec
O43 - CFD: 2015/07/22 01:42:01 - [0] AD -- C:\ProgramData\TEMP
O43 - CFD: 2009/07/14 06:53:55 - [0] SHD -- C:\ProgramData\Templates
O43 - CFD: 2013/12/16 20:13:03 - [] D -- C:\ProgramData\TuneUp Software
O43 - CFD: 2013/11/04 19:22:24 - [] D -- C:\ProgramData\TVU Networks
O43 - CFD: 2012/04/24 19:21:54 - [0] D -- C:\ProgramData\Web Page Maker
O43 - CFD: 2015/02/02 20:05:43 - [] D -- C:\ProgramData\WindSolutions
O43 - CFD: 2015/07/05 16:43:43 - [] D -- C:\ProgramData\Wondershare
O43 - CFD: 2012/12/04 17:06:36 - [] D -- C:\ProgramData\Zbshareware Lab
O43 - CFD: 2013/06/28 00:32:06 - [] D -- C:\Program Files\Common Files\Adobe
O43 - CFD: 2015/07/21 22:57:39 - [] D -- C:\Program Files\Common Files\Adobe AIR
O43 - CFD: 2013/03/18 22:18:10 - [] D -- C:\Program Files\Common Files\Ahead
O43 - CFD: 2015/01/23 17:55:54 - [] D -- C:\Program Files\Common Files\Anvisoft
O43 - CFD: 2015/07/05 15:31:53 - [] D -- C:\Program Files\Common Files\Apple
O43 - CFD: 2013/12/18 00:40:39 - [] D -- C:\Program Files\Common Files\Caterpillar
O43 - CFD: 2011/11/29 21:31:26 - [] D -- C:\Program Files\Common Files\DESIGNER
O43 - CFD: 2013/11/30 12:49:02 - [] D -- C:\Program Files\Common Files\EagleGet
O43 - CFD: 2012/04/28 19:58:56 - [] D -- C:\Program Files\Common Files\i4j_jres
O43 - CFD: 2011/11/29 14:33:40 - [] D -- C:\Program Files\Common Files\InstallShield
O43 - CFD: 2011/11/29 14:44:09 - [] D -- C:\Program Files\Common Files\Intel
O43 - CFD: 2015/01/12 20:21:36 - [] D -- C:\Program Files\Common Files\IObit
O43 - CFD: 2015/08/23 19:16:53 - [] D -- C:\Program Files\Common Files\Java
O43 - CFD: 2011/11/29 21:31:26 - [] D -- C:\Program Files\Common Files\microsoft shared
O43 - CFD: 2011/11/29 14:49:44 - [] D -- C:\Program Files\Common Files\postureAgent
O43 - CFD: 2009/07/14 04:37:05 - [] D -- C:\Program Files\Common Files\Services
O43 - CFD: 2014/10/11 23:29:06 - [] D -- C:\Program Files\Common Files\Skype
O43 - CFD: 2011/11/29 14:59:12 - [] D -- C:\Program Files\Common Files\SPBA
O43 - CFD: 2009/07/14 04:37:05 - [] D -- C:\Program Files\Common Files\SpeechEngines
O43 - CFD: 2015/05/04 14:17:31 - [] D -- C:\Program Files\Common Files\Symantec Shared
O43 - CFD: 2013/03/04 22:59:22 - [] D -- C:\Program Files\Common Files\System
O43 - CFD: 2015/07/05 16:26:40 - [] D -- C:\Program Files\Common Files\Wondershare
O43 - CFD: 2015/08/23 22:08:55 - [] D -- C:\Program Files\Common Files\xing shared
O43 - CFD: 2014/11/26 23:47:40 - [] D -- C:\Users\owner\AppData\Roaming\Adobe
O43 - CFD: 2013/03/18 22:20:59 - [] D -- C:\Users\owner\AppData\Roaming\Ahead
O43 - CFD: 2013/12/16 20:19:49 - [] D -- C:\Users\owner\AppData\Roaming\Apple Computer
O43 - CFD: 2012/04/28 20:11:15 - [] D -- C:\Users\owner\AppData\Roaming\AutoHideIP
O43 - CFD: 2015/07/12 18:10:46 - [] D -- C:\Users\owner\AppData\Roaming\AVG
O43 - CFD: 2015/01/27 22:20:19 - [] D -- C:\Users\owner\AppData\Roaming\Azureus
O43 - CFD: 2013/12/10 21:24:02 - [] D -- C:\Users\owner\AppData\Roaming\BitLord =>PUP.Optional.WhenUSave
O43 - CFD: 2011/11/29 14:36:50 - [] D -- C:\Users\owner\AppData\Roaming\Creative
O43 - CFD: 2012/04/28 21:40:54 - [] D -- C:\Users\owner\AppData\Roaming\C__Users_owner_Desktop_Crk HideIPEasy By Mouad F(45.exe
O43 - CFD: 2013/10/31 00:15:19 - [] D -- C:\Users\owner\AppData\Roaming\Design Science
O43 - CFD: 2014/02/11 11:34:12 - [] D -- C:\Users\owner\AppData\Roaming\DiskAid
O43 - CFD: 2014/10/08 18:47:18 - [] D -- C:\Users\owner\AppData\Roaming\DMCache
O43 - CFD: 2015/09/18 11:41:24 - [] D -- C:\Users\owner\AppData\Roaming\dvdcss
O43 - CFD: 2015/02/23 23:10:13 - [] D -- C:\Users\owner\AppData\Roaming\DVDVideoSoft
O43 - CFD: 2013/05/18 18:44:39 - [] D -- C:\Users\owner\AppData\Roaming\EbkReader
O43 - CFD: 2015/02/23 23:13:27 - [] D -- C:\Users\owner\AppData\Roaming\Eusing
O43 - CFD: 2015/02/16 19:24:52 - [] D -- C:\Users\owner\AppData\Roaming\ExtremeCopy
O43 - CFD: 2014/09/02 14:25:21 - [] D -- C:\Users\owner\AppData\Roaming\FastCopy
O43 - CFD: 2013/12/16 21:33:08 - [] D -- C:\Users\owner\AppData\Roaming\Free Download Manager
O43 - CFD: 2013/03/31 19:20:42 - [] D -- C:\Users\owner\AppData\Roaming\Google
O43 - CFD: 2012/04/28 21:24:52 - [] D -- C:\Users\owner\AppData\Roaming\HideIPEasy
O43 - CFD: 2011/11/29 14:32:32 - [] D -- C:\Users\owner\AppData\Roaming\Identities
O43 - CFD: 2014/09/02 22:31:24 - [] D -- C:\Users\owner\AppData\Roaming\IDM
O43 - CFD: 2012/12/18 00:04:32 - [] D -- C:\Users\owner\AppData\Roaming\iFunbox_UserCache
O43 - CFD: 2013/10/08 22:44:38 - [] D -- C:\Users\owner\AppData\Roaming\ihelper
O43 - CFD: 2013/02/01 12:44:09 - [] D -- C:\Users\owner\AppData\Roaming\ImTOO
O43 - CFD: 2011/11/29 14:44:51 - [] D -- C:\Users\owner\AppData\Roaming\Intel
O43 - CFD: 2015/07/05 17:15:28 - [] D -- C:\Users\owner\AppData\Roaming\IObit
O43 - CFD: 2013/02/01 12:31:06 - [] D -- C:\Users\owner\AppData\Roaming\iPhone Tool Kits
O43 - CFD: 2014/04/12 13:56:04 - [] D -- C:\Users\owner\AppData\Roaming\KRyLack Software
O43 - CFD: 2014/11/15 20:51:01 - [] D -- C:\Users\owner\AppData\Roaming\Livestation
O43 - CFD: 2015/04/27 23:44:58 - [] D -- C:\Users\owner\AppData\Roaming\Macromedia
O43 - CFD: 2011/11/29 15:02:33 - [] D -- C:\Users\owner\AppData\Roaming\Malwarebytes
O43 - CFD: 2014/11/15 20:50:51 - [] D -- C:\Users\owner\AppData\Roaming\Mchid
O43 - CFD: 2010/11/21 02:47:05 - [0] D -- C:\Users\owner\AppData\Roaming\Media Center Programs
O43 - CFD: 2013/12/06 01:24:18 - [] SD -- C:\Users\owner\AppData\Roaming\Microsoft
O43 - CFD: 2013/12/12 19:40:59 - [] D -- C:\Users\owner\AppData\Roaming\Mipony
O43 - CFD: 2014/04/10 18:57:16 - [] D -- C:\Users\owner\AppData\Roaming\Mozilla
O43 - CFD: 2012/05/14 22:00:23 - [] D -- C:\Users\owner\AppData\Roaming\Nokia
O43 - CFD: 2014/04/10 19:14:01 - [] D -- C:\Users\owner\AppData\Roaming\NVIDIA
O43 - CFD: 2015/02/05 22:18:28 - [] D -- C:\Users\owner\AppData\Roaming\oess
O43 - CFD: 2015/06/15 02:19:12 - [] D -- C:\Users\owner\AppData\Roaming\Opera Software
O43 - CFD: 2015/01/16 20:41:00 - [] D -- C:\Users\owner\AppData\Roaming\Oracle
O43 - CFD: 2014/01/18 21:18:04 - [] D -- C:\Users\owner\AppData\Roaming\Participatory Culture Foundation
O43 - CFD: 2012/04/11 16:54:55 - [] D -- C:\Users\owner\AppData\Roaming\PC Suite
O43 - CFD: 2014/03/12 22:42:31 - [] D -- C:\Users\owner\AppData\Roaming\PCF-VLC
O43 - CFD: 2013/12/09 11:08:46 - [] D -- C:\Users\owner\AppData\Roaming\PowerISO
O43 - CFD: 2015/07/05 17:15:28 - [] D -- C:\Users\owner\AppData\Roaming\ProductData
O43 - CFD: 2013/12/10 19:51:39 - [] D -- C:\Users\owner\AppData\Roaming\Python-Eggs
O43 - CFD: 2015/05/02 22:48:21 - [] D -- C:\Users\owner\AppData\Roaming\qBittorrent
O43 - CFD: 2015/09/06 22:44:40 - [] D -- C:\Users\owner\AppData\Roaming\Real
O43 - CFD: 2015/08/23 22:09:40 - [] D -- C:\Users\owner\AppData\Roaming\RealNetworks
O43 - CFD: 2014/09/10 22:28:41 - [] D -- C:\Users\owner\AppData\Roaming\redsn0w
O43 - CFD: 2014/02/17 23:46:57 - [] D -- C:\Users\owner\AppData\Roaming\RegistryKeys
O43 - CFD: 2015/10/05 13:56:36 - [] D -- C:\Users\owner\AppData\Roaming\RPEng
O43 - CFD: 2015/07/05 19:03:50 - [] D -- C:\Users\owner\AppData\Roaming\Samsung
O43 - CFD: 2013/05/31 16:10:00 - [] D -- C:\Users\owner\AppData\Roaming\SanDisk SecureAccess
O43 - CFD: 2015/06/15 02:19:18 - [] D -- C:\Users\owner\AppData\Roaming\Shortcut
O43 - CFD: 2015/07/26 01:25:11 - [] D -- C:\Users\owner\AppData\Roaming\Skype
O43 - CFD: 2012/11/28 14:48:34 - [0] D -- C:\Users\owner\AppData\Roaming\Sony Corporation
O43 - CFD: 2015/09/03 10:59:21 - [] D -- C:\Users\owner\AppData\Roaming\Sun
O43 - CFD: 2014/02/25 19:09:17 - [] D -- C:\Users\owner\AppData\Roaming\TeraCopy
O43 - CFD: 2014/11/15 21:35:40 - [] D -- C:\Users\owner\AppData\Roaming\tmp
O43 - CFD: 2012/11/30 22:45:56 - [] D -- C:\Users\owner\AppData\Roaming\TuneUp Software
O43 - CFD: 2015/10/09 15:52:55 - [] D -- C:\Users\owner\AppData\Roaming\uTorrent
O43 - CFD: 2015/03/08 23:08:50 - [] D -- C:\Users\owner\AppData\Roaming\ViberPC
O43 - CFD: 2015/10/05 22:38:33 - [] D -- C:\Users\owner\AppData\Roaming\vlc
O43 - CFD: 2012/04/24 19:22:40 - [] D -- C:\Users\owner\AppData\Roaming\Web Page Maker
O43 - CFD: 2015/02/02 20:05:43 - [] D -- C:\Users\owner\AppData\Roaming\WindSolutions
O43 - CFD: 2012/04/03 23:53:03 - [] D -- C:\Users\owner\AppData\Roaming\WinRAR
O43 - CFD: 2015/10/09 15:45:18 - [0] D -- C:\Users\owner\AppData\Roaming\Wondershare
O43 - CFD: 2012/12/04 16:47:12 - [] D -- C:\Users\owner\AppData\Roaming\Zbshareware Lab
O43 - CFD: 2015/10/09 15:56:29 - [] D -- C:\Users\owner\AppData\Roaming\ZHP
O43 - CFD: 2014/11/15 20:16:42 - [] D -- C:\Users\owner\AppData\Local\41
O43 - CFD: 2015/08/23 18:48:14 - [] D -- C:\Users\owner\AppData\Local\Adobe
O43 - CFD: 2013/11/09 21:29:44 - [] D -- C:\Users\owner\AppData\Local\adslTV
O43 - CFD: 2012/04/01 22:17:23 - [] D -- C:\Users\owner\AppData\Local\Apple
O43 - CFD: 2013/10/02 11:28:01 - [] D -- C:\Users\owner\AppData\Local\Apple Computer
O43 - CFD: 2011/11/29 14:32:20 - [0] SHD -- C:\Users\owner\AppData\Local\Application Data
O43 - CFD: 2012/04/18 15:35:52 - [] D -- C:\Users\owner\AppData\Local\Apps
O43 - CFD: 2015/07/12 18:08:22 - [] D -- C:\Users\owner\AppData\Local\Avg
O43 - CFD: 2014/01/18 16:21:20 - [] D -- C:\Users\owner\AppData\Local\cache
O43 - CFD: 2015/05/02 22:25:16 - [] D -- C:\Users\owner\AppData\Local\CodecPerformer =>PUP.Optional.CodecPerformer
O43 - CFD: 2014/01/29 22:23:00 - [] D -- C:\Users\owner\AppData\Local\Comodo
O43 - CFD: 2015/06/16 20:19:00 - [] D -- C:\Users\owner\AppData\Local\CrashRpt =>.Legitimate.CrashReports
O43 - CFD: 2011/11/29 14:42:46 - [] D -- C:\Users\owner\AppData\Local\Dell
O43 - CFD: 2015/07/21 03:09:08 - [0] D -- C:\Users\owner\AppData\Local\Deployment
O43 - CFD: 2014/09/27 03:15:05 - [] D -- C:\Users\owner\AppData\Local\Diagnostics
O43 - CFD: 2014/02/11 11:34:12 - [] D -- C:\Users\owner\AppData\Local\DigiDNA
O43 - CFD: 2015/07/05 17:53:12 - [] D -- C:\Users\owner\AppData\Local\Downloaded Installations
O43 - CFD: 2014/11/28 14:13:40 - [] D -- C:\Users\owner\AppData\Local\ElevatedDiagnostics
O43 - CFD: 2015/06/15 21:32:44 - [0] SHD -- C:\Users\owner\AppData\Local\EmieBrowserModeList
O43 - CFD: 2015/06/15 21:32:44 - [0] SHD -- C:\Users\owner\AppData\Local\EmieSiteList
O43 - CFD: 2015/06/15 21:32:44 - [0] SHD -- C:\Users\owner\AppData\Local\EmieUserList
O43 - CFD: 2012/11/28 15:13:02 - [] D -- C:\Users\owner\AppData\Local\Facebook
O43 - CFD: 2015/10/07 23:02:36 - [] D -- C:\Users\owner\AppData\Local\Google
O43 - CFD: 2014/07/19 20:14:48 - [] D -- C:\Users\owner\AppData\Local\GRAW2
O43 - CFD: 2015/06/01 18:41:14 - [] D -- C:\Users\owner\AppData\Local\GWX
O43 - CFD: 2011/11/29 14:32:20 - [0] SHD -- C:\Users\owner\AppData\Local\History
O43 - CFD: 2015/07/05 17:55:29 - [0] D -- C:\Users\owner\AppData\Local\iexplorer
O43 - CFD: 2015/06/16 20:19:24 - [] D -- C:\Users\owner\AppData\Local\Installer =>PUP.Optional.InstallPedia
O43 - CFD: 2012/11/28 14:56:09 - [] D -- C:\Users\owner\AppData\Local\Macromedia
O43 - CFD: 2015/05/02 22:25:25 - [] D -- C:\Users\owner\AppData\Local\MatroskaSplitter
O43 - CFD: 2015/04/26 19:36:48 - [] D -- C:\Users\owner\AppData\Local\MegaDownloader
O43 - CFD: 2015/04/08 22:40:33 - [] D -- C:\Users\owner\AppData\Local\Microsoft
O43 - CFD: 2012/05/11 21:10:19 - [] D -- C:\Users\owner\AppData\Local\Microsoft Games
O43 - CFD: 2015/07/12 18:58:14 - [0] D -- C:\Users\owner\AppData\Local\Microsoft Help
O43 - CFD: 2014/02/09 22:31:46 - [] D -- C:\Users\owner\AppData\Local\Mozilla
O43 - CFD: 2015/06/15 02:19:13 - [] D -- C:\Users\owner\AppData\Local\Opera Software
O43 - CFD: 2015/03/14 11:52:46 - [0] D -- C:\Users\owner\AppData\Local\pangu
O43 - CFD: 2015/01/06 16:19:56 - [] D -- C:\Users\owner\AppData\Local\PopcornTimeDesktop
O43 - CFD: 2013/03/04 19:14:09 - [] D -- C:\Users\owner\AppData\Local\Programs
O43 - CFD: 2015/02/25 23:59:02 - [] D -- C:\Users\owner\AppData\Local\qBittorrent
O43 - CFD: 2015/08/23 22:10:22 - [] D -- C:\Users\owner\AppData\Local\Real
O43 - CFD: 2015/03/10 23:26:25 - [] D -- C:\Users\owner\AppData\Local\Reflector
O43 - CFD: 2015/07/05 18:33:41 - [] D -- C:\Users\owner\AppData\Local\Samsung
O43 - CFD: 2014/03/01 20:09:42 - [] D -- C:\Users\owner\AppData\Local\Skype
O43 - CFD: 2014/02/27 21:33:37 - [] D -- C:\Users\owner\AppData\Local\Spark
O43 - CFD: 2015/05/04 14:03:27 - [] D -- C:\Users\owner\AppData\Local\Symantec
O43 - CFD: 2015/10/09 15:55:31 - [] D -- C:\Users\owner\AppData\Local\Temp
O43 - CFD: 2011/11/29 14:32:20 - [0] SHD -- C:\Users\owner\AppData\Local\Temporary Internet Files
O43 - CFD: 2013/11/04 19:22:24 - [] D -- C:\Users\owner\AppData\Local\TVU Networks
O43 - CFD: 2014/01/07 16:24:54 - [] D -- C:\Users\owner\AppData\Local\Unity
O43 - CFD: 2015/03/08 22:38:38 - [] D -- C:\Users\owner\AppData\Local\Viber
O43 - CFD: 2014/05/26 20:05:30 - [] D -- C:\Users\owner\AppData\Local\VirtualStore
O43 - CFD: 2015/07/05 16:26:53 - [] D -- C:\Users\owner\AppData\Local\Wondershare
O43 - CFD: 2009/07/14 06:42:04 - [] RD -- C:\Users\owner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 2015/08/26 12:34:35 - [] RD -- C:\Users\owner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 2015/01/17 01:54:49 - [0] D -- C:\Users\owner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Advanced RAR Password Recovery
O43 - CFD: 2014/02/17 23:47:26 - [0] D -- C:\Users\owner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Apprender avec penny
O43 - CFD: 2015/07/05 17:15:28 - [] D -- C:\Users\owner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CopyTrans Control Center
O43 - CFD: 2015/02/23 23:13:23 - [0] D -- C:\Users\owner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Free YouTube Downloader Converter
O43 - CFD: 2015/10/09 14:01:41 - [] D -- C:\Users\owner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
O43 - CFD: 2009/07/14 06:37:42 - [] RD -- C:\Users\owner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 2013/09/02 17:36:05 - [0] D -- C:\Users\owner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MiPony
O43 - CFD: 2015/02/26 00:05:37 - [] D -- C:\Users\owner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Python 2.7
O43 - CFD: 2015/02/25 23:58:52 - [] D -- C:\Users\owner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\qBittorrent
O43 - CFD: 2015/08/26 12:34:31 - [] RD -- C:\Users\owner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

---\\ Liste des pilotes du système (110) - 6s
O58 - SDL:2009/07/14 03:26:15 A . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\drivers\adp94xx.sys [422976]
O58 - SDL:2009/07/14 03:26:17 A . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\System32\drivers\adpahci.sys [297552]
O58 - SDL:2009/07/14 03:26:15 A . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver.) -- C:\Windows\System32\drivers\adpu320.sys [146512]
O58 - SDL:2009/07/14 03:26:15 A . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\Windows\System32\drivers\aliide.sys [14400]
O58 - SDL:2011/03/11 07:38:37 A . (.Advanced Micro Devices - AHCI 1.2 Device Driver.) -- C:\Windows\System32\drivers\amdsata.sys [80256]
O58 - SDL:2009/07/14 03:26:15 A . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller D.) -- C:\Windows\System32\drivers\amdsbs.sys [159312]
O58 - SDL:2011/03/11 07:38:37 A . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\Windows\System32\drivers\amdxata.sys [22400]
O58 - SDL:2009/07/14 03:26:15 A . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\System32\drivers\arc.sys [76368]
O58 - SDL:2009/07/14 03:26:15 A . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\System32\drivers\arcsas.sys [86608]
O58 - SDL:2014/01/31 23:22:57 A . (.The OpenVPN Project - TAP-Windows Virtual Network Driver.) -- C:\Windows\System32\drivers\aswTap.sys [38472]
O58 - SDL:2009/07/14 00:02:49 A . (.Broadcom Corporation - Pilote unifié NDIS6.x Broadcom NetXtreme Gi.) -- C:\Windows\System32\drivers\b57nd60x.sys [229888]
O58 - SDL:2009/07/14 00:53:28 A . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower.) -- C:\Windows\System32\drivers\BrFiltLo.sys [13568]
O58 - SDL:2009/07/14 00:53:28 A . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper.) -- C:\Windows\System32\drivers\BrFiltUp.sys [5248]
O58 - SDL:2009/07/14 02:57:25 A . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\System32\drivers\BrSerId.sys [272128]
O58 - SDL:2009/07/14 00:53:32 A . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\System32\drivers\BrSerWdm.sys [62336]
O58 - SDL:2009/07/14 00:53:33 A . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\System32\drivers\BrUsbMdm.sys [12160]
O58 - SDL:2009/07/14 00:53:33 A . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\System32\drivers\BrUsbSer.sys [11904]
O58 - SDL:2009/07/14 00:02:48 A . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.) -- C:\Windows\System32\drivers\bxvbdx.sys [430080]
O58 - SDL:2009/09/26 09:50:04 A . (.Noregon Systems - CAN Protocol Driver.) -- C:\Windows\System32\drivers\CANNT.SYS [23584]
O58 - SDL:2009/09/26 09:50:04 A . (.Noregon Systems - Cat Link Protocol Driver.) -- C:\Windows\System32\drivers\CATLNKNT.SYS [23712]
O58 - SDL:2011/11/01 11:07:26 A . (.Nokia - Nokia USB Phone Bus Driver.) -- C:\Windows\System32\drivers\ccdcmb.sys [18176]
O58 - SDL:2011/11/01 11:07:24 A . (.Nokia - Nokia USB Phone Bus Driver.) -- C:\Windows\System32\drivers\ccdcmbo.sys [23168]
O58 - SDL:2009/07/14 03:26:21 A . (.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\cmdide.sys [15952]
O58 - SDL:2009/05/28 12:48:20 A . (.Creative Technology Ltd. - Advanced Audio FX Driver.) -- C:\Windows\System32\drivers\CtAudDrv.sys [134144]
O58 - SDL:2009/09/16 18:07:42 A . (.Creative Technology Ltd. - Video Class Upper Filter Driver.) -- C:\Windows\System32\drivers\CtClsFlt.sys [144576]
O58 - SDL:2010/08/24 16:46:00 A . (.Broadcom Corporation - Broadcom Credential Vault USB Driver.) -- C:\Windows\System32\drivers\cvusbdrv.sys [33832]
O58 - SDL:2009/07/14 03:20:28 A . (.Adaptec, Inc. - Adaptec Ultra SCSI miniport.) -- C:\Windows\System32\drivers\djsvs.sys [70720]
O58 - SDL:2009/09/26 09:50:04 A . (.Noregon Systems - VCOMM Port Driver.) -- C:\Windows\System32\drivers\DLADRVNT.SYS [32832]
O58 - SDL:2009/09/26 09:50:04 A . (.Noregon Systems - Serial Interface Protocol Driver.) -- C:\Windows\System32\drivers\DLASIPNT.SYS [82752]
O58 - SDL:2015/08/23 19:10:50 A . (.Intel Corporation - Intel(R) Gigabit Adapter NDIS 6.x driver.) -- C:\Windows\System32\drivers\e1c6232.sys [368392]
O58 - SDL:2009/07/14 03:20:28 A . (.Emulex - Storport Miniport Driver for LightPulse HBA.) -- C:\Windows\System32\drivers\elxstor.sys [453712]
O58 - SDL:2009/07/14 00:02:48 A . (.Broadcom Corporation - Broadcom NetXtreme II 10 GigE VBD.) -- C:\Windows\System32\drivers\evbdx.sys [3100160]
O58 - SDL:2012/08/21 14:01:22 A . (.GEAR Software Inc. - CD DVD Filter.) -- C:\Windows\System32\drivers\GEARAspiWDM.sys [26840]
O58 - SDL:2009/07/14 00:54:14 A . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for.) -- C:\Windows\System32\drivers\hcw85cir.sys [26624]
O58 - SDL:2013/12/24 00:12:39 A . (.Intel Corporation - Intel(R) Management Engine Interface.) -- C:\Windows\System32\drivers\HECI.sys [56432]
O58 - SDL:2009/07/14 03:20:28 A . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Drive.) -- C:\Windows\System32\drivers\HpSAMD.sys [67152]
O58 - SDL:2015/01/14 18:43:50 A . (.REALiX(tm) - HWiNFO x86 Kernel Driver.) -- C:\Windows\System32\drivers\HWiNFO32.SYS [23840]
O58 - SDL:2011/03/11 07:38:51 A . (.Intel Corporation - Intel Matrix Storage Manager driver - ia32.) -- C:\Windows\System32\drivers\iaStorV.sys [332160]
O58 - SDL:2009/07/14 03:20:36 A . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\System32\drivers\iirsp.sys [41040]
O58 - SDL:2009/09/26 09:50:04 A . (.Noregon Systems - J1708 Protocol Driver.) -- C:\Windows\System32\drivers\J1708NT.SYS [23296]
O58 - SDL:2009/09/26 09:50:04 A . (.Noregon Systems - J1939 Protocol Driver.) -- C:\Windows\System32\drivers\J1939NT.SYS [24320]
O58 - SDL:2009/07/14 03:20:36 A . (.LSI Corporation - LSI Fusion-MPT FC Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_fc.sys [95824]
O58 - SDL:2009/07/14 03:20:37 A . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas.sys [89168]
O58 - SDL:2009/07/14 03:20:36 A . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas2.sys [54864]
O58 - SDL:2009/07/14 03:20:36 A . (.LSI Corporation - LSI Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_scsi.sys [96848]
O58 - SDL:2015/06/18 08:41:36 A . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\drivers\mbam.sys [23256]
O58 - SDL:2015/06/18 08:41:42 A . (.Malwarebytes Corporation - Malwarebytes Chameleon Protection Driver.) -- C:\Windows\System32\drivers\mbamchameleon.sys [94936]
O58 - SDL:2015/10/09 15:51:32 A . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\drivers\MBAMSwissArmy.sys [98520]
O58 - SDL:2009/07/14 03:20:36 A . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows.) -- C:\Windows\System32\drivers\megasas.sys [30800]
O58 - SDL:2009/07/14 03:20:36 A . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\System32\drivers\MegaSR.sys [235584]
O58 - SDL:2015/06/18 08:41:54 A . (.Malwarebytes Corporation - Malwarebytes Web Access Control.) -- C:\Windows\System32\drivers\mwac.sys [51928]
O58 - SDL:2010/12/21 11:07:44 A . (.Intel Corporation - Intel® Wireless WiFi Link Driver.) -- C:\Windows\System32\drivers\NETwNs32.sys [7434240]
O58 - SDL:2014/10/08 19:00:02 A . (.Intel Corporation - Intel® Wireless WiFi Link Driver.) -- C:\Windows\System32\drivers\NETwsn00.sys [10381008]
O58 - SDL:2015/08/23 19:09:43 A . (.Intel Corporation - Intel® Wireless WiFi Link Driver.) -- C:\Windows\System32\drivers\NETwsn01.sys [10387216]
O58 - SDL:2009/07/14 03:20:44 A . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\System32\drivers\nfrd960.sys [44624]
O58 - SDL:2010/01/27 04:09:02 A . (.CACE Technologies, Inc. - npf.sys (NT5/6 x86) Kernel Driver.) -- C:\Windows\System32\drivers\npf.sys [50704]
O58 - SDL:2015/08/23 19:10:19 A . (.NVIDIA Corporation - NVIDIA HDMI Audio Driver.) -- C:\Windows\System32\drivers\nvhda32v.sys [171352]
O58 - SDL:2015/08/23 19:01:14 A . (.NVIDIA Corporation - NVIDIA Windows Kernel Mode Driver, Version.) -- C:\Windows\System32\drivers\nvlddmkm.sys [9168712]
O58 - SDL:2011/03/11 07:39:00 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\System32\drivers\nvraid.sys [117120]
O58 - SDL:2011/03/11 07:39:00 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\System32\drivers\nvstor.sys [143744]
O58 - SDL:2015/06/20 15:32:37 A . (.O2Micro - O2Micro SD Reader Driver.) -- C:\Windows\System32\drivers\O2FJ2w7.sys [140088]
O58 - SDL:2011/01/04 15:44:06 A . (.O2Micro - O2Micro Media Reader Driver.) -- C:\Windows\System32\drivers\o2mdfw7.sys [60904]
O58 - SDL:2013/12/24 00:15:49 A . (.O2Micro - O2Micro SD Reader Driver.) -- C:\Windows\System32\drivers\o2sdjw7.sys [64872]
O58 - SDL:2009/09/25 13:53:42 A . (.Dell Inc. - OMCI Device Driver.) -- C:\Windows\System32\drivers\omci.sys [20480]
O58 - SDL:2009/09/26 09:50:04 A . (.Noregon Systems\Vansco Electronics - 2K Port Driver for the CAII.) -- C:\Windows\System32\drivers\PARCAII.SYS [14602]
O58 - SDL:2008/06/04 15:14:00 A . (.Dell Inc - PBA Support Driver.) -- C:\Windows\System32\drivers\PBADRV.sys [26608]
O58 - SDL:2008/08/26 10:26:12 A . (.Nokia - PCCS Mode Change Filter Driver.) -- C:\Windows\System32\drivers\pccsmcfd.sys [18816]
O58 - SDL:2009/09/26 09:50:04 A . (.Noregon Systems - Handles All Memory and Transitions Between.) -- C:\Windows\System32\drivers\PCSMHNT.SYS [40000]
O58 - SDL:2006/12/26 14:30:20 RA . (.Windows (R) Codename Longhorn DDK provider - Generic Port I/O.) -- C:\Windows\System32\drivers\PortIo.sys [6656]
O58 - SDL:2015/06/17 09:54:36 A . (.FORGE Incorporated - USB Modem/Serial Device Driver.) -- C:\Windows\System32\drivers\qcusbser.sys [214080]
O58 - SDL:2009/07/14 03:19:04 A . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\Windows\System32\drivers\ql2300.sys [1383488]
O58 - SDL:2009/07/14 03:19:04 A . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\Windows\System32\drivers\ql40xx.sys [106064]
O58 - SDL:2009/07/13 22:50:20 A . (.Macrovision Corporation, Macrovision Europe Limited, - Macrovision SECURITY Driver.) -- C:\Windows\System32\drivers\secdrv.sys [20480]
O58 - SDL:2009/07/14 03:19:04 A . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\System32\drivers\sisraid2.sys [40016]
O58 - SDL:2009/07/14 03:19:04 A . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\System32\drivers\sisraid4.sys [77888]
O58 - SDL:2014/06/04 15:17:30 A . (.IObit - SmartDefrag Driver.) -- C:\Windows\System32\drivers\SmartDefragDriver.sys [18624]
O58 - SDL:2015/08/23 19:11:53 A . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG USB Composite Device Driver (MSS Ve.) -- C:\Windows\System32\drivers\ssudbus.sys [84248]
O58 - SDL:2010/08/20 13:04:38 A . (.ST Microelectronics - Disk Class Filter Driver for Accelerometer.) -- C:\Windows\System32\drivers\stdcfltn.sys [17648]
O58 - SDL:2009/07/14 03:19:04 A . (.Promise Technology - Promise SuperTrak EX Series Driver for Win.) -- C:\Windows\System32\drivers\stexstor.sys [21072]
O58 - SDL:2015/06/20 15:33:52 A . (.IDT, Inc. - IDT PC Audio.) -- C:\Windows\System32\drivers\stwrt.sys [435200]
O58 - SDL:2015/05/04 14:02:16 A . (.Symantec Corporation - Symantec Event Library.) -- C:\Windows\System32\drivers\SYMEVENT.SYS [142496]
O58 - SDL:2015/05/04 13:59:55 A . (.Symantec Corporation - Symantec CMC Firewall SysPlant.) -- C:\Windows\System32\drivers\SysPlant.sys [114080]
O58 - SDL:2014/02/07 01:50:56 A . (.The OpenVPN Project - TAP-Win32 Virtual Network Driver.) -- C:\Windows\System32\drivers\tap0901.sys [33608]
O58 - SDL:2014/10/08 19:00:40 A . (.Intel Corporation - Intel(R) Management Engine Interface.) -- C:\Windows\System32\drivers\TeeDriver.sys [86488]
O58 - SDL:2013/05/30 18:06:10 A . (.Symantec Corporation - Symantec CMC Firewall Teefer3.) -- C:\Windows\System32\drivers\Teefer.sys [72880]
O58 - SDL:2015/06/10 23:08:36 A . (.Apple, Inc. - Apple Mobile Device USB Driver.) -- C:\Windows\System32\drivers\usbaapl.sys [45056]
O58 - SDL:2011/11/01 11:07:26 A . (.Nokia - Filter Driver for Nokia USB Phone Bus Drive.) -- C:\Windows\System32\drivers\usbser_lowerflt.sys [8192]
O58 - SDL:2011/11/01 11:07:26 A . (.Nokia - Filter Driver for Nokia USB Phone Bus Drive.) -- C:\Windows\System32\drivers\usbser_lowerfltj.sys [8192]
O58 - SDL:2009/07/14 03:19:10 A . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\viaide.sys [16976]
O58 - SDL:2009/07/14 03:19:11 A . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\Windows\System32\drivers\vsmraid.sys [141904]
O58 - SDL:2009/07/14 00:13:45 A . (.Conexant Systems, Inc. - HSF_HWAZL WDM driver.) -- C:\Windows\System32\drivers\VSTAZL3.SYS [207360]
O58 - SDL:2009/07/14 00:13:45 A . (.Conexant Systems, Inc. - HSF_CNXT driver.) -- C:\Windows\System32\drivers\VSTCNXT3.SYS [661504]
O58 - SDL:2009/07/14 00:13:46 A . (.Conexant Systems, Inc. - HSF_DP driver.) -- C:\Windows\System32\drivers\VSTDPV3.SYS [980992]
O58 - SDL:2015/05/04 13:59:56 A . (.Symantec Corporation - Symantec Network Access Control Protocol Dr.) -- C:\Windows\System32\drivers\WGX.SYS [33264]
O58 - SDL:2009/07/13 23:40:41 A . (...) -- C:\Windows\System32\ANSI.SYS [9029]
O58 - SDL:2009/04/14 18:28:08 A . (...) -- C:\Windows\System32\Ckldrv.sys [20486]
O58 - SDL:2009/07/13 23:40:44 A . (...) -- C:\Windows\System32\country.sys [27097]
O58 - SDL:2009/07/13 23:40:40 A . (...) -- C:\Windows\System32\HIMEM.SYS [4768]
O58 - SDL:2009/07/13 23:40:43 A . (...) -- C:\Windows\System32\KEY01.SYS [42809]
O58 - SDL:2009/07/13 23:40:43 A . (...) -- C:\Windows\System32\KEYBOARD.SYS [42537]
O58 - SDL:2009/07/13 23:40:23 A . (...) -- C:\Windows\System32\NTDOS.SYS [27866]
O58 - SDL:2009/07/13 23:40:31 A . (...) -- C:\Windows\System32\NTDOS404.SYS [29146]
O58 - SDL:2009/07/13 23:40:35 A . (...) -- C:\Windows\System32\NTDOS411.SYS [29370]
O58 - SDL:2009/07/13 23:40:39 A . (...) -- C:\Windows\System32\NTDOS412.SYS [29274]
O58 - SDL:2009/07/13 23:40:27 A . (...) -- C:\Windows\System32\NTDOS804.SYS [29146]
O58 - SDL:2009/07/13 23:40:11 A . (...) -- C:\Windows\System32\NTIO.SYS [33952]
O58 - SDL:2009/07/13 23:40:15 A . (...) -- C:\Windows\System32\NTIO404.SYS [34672]
O58 - SDL:2009/07/13 23:40:17 A . (...) -- C:\Windows\System32\NTIO411.SYS [35776]
O58 - SDL:2009/07/13 23:40:19 A . (...) -- C:\Windows\System32\NTIO412.SYS [35536]
O58 - SDL:2009/07/13 23:40:13 A . (...) -- C:\Windows\System32\NTIO804.SYS [34672]

---\\ Derniers fichiers modifiés ou crées (Utilisateur) (5) - 186s
O61 - LFC: 2015/10/05 13:54:44 A . (.BitTorrent Inc..) -- C:\Users\owner\Desktop\uTorrent.exe [1821536]
O61 - LFC: 2015/10/05 13:54:44 A . (.BitTorrent Inc..) -- C:\Users\owner\AppData\Roaming\uTorrent\uTorrent.exe [1821536]
O61 - LFC: 2015/10/05 13:54:44 A . (.BitTorrent Inc..) -- C:\Users\owner\AppData\Roaming\uTorrent\updates\3.4.5_41162.exe [1821536]
O61 - LFC: 2015/10/09 15:45:27 A . (.BitTorrent Inc..) -- C:\Users\owner\AppData\Roaming\uTorrent\updates\3.4.5_41202.exe [1822048]
O61 - LFC: 2015/10/05 13:57:12 A . (.BitTorrent Inc..) -- C:\Users\owner\AppData\Roaming\uTorrent\updates\3.4.5_41162\utorrentie.exe [336896]

---\\ Associations Shell Spawning (10) - 1s
O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe
O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Ob.) -- C:\Windows\System32\eventvwr.exe
O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe
O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\wscript.exe
O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe
O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S

---\\ Menu de démarrage Internet (16) - 0s
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Opera Software - Opera Internet Browser.) -- C:\Program Files\Opera\Launcher.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Opera Software - Opera Internet Browser.) -- C:\Program Files\Opera\launcher.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Opera Software - Opera Internet Browser.) -- C:\Program Files\Opera\launcher.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Opera Software - Opera Internet Browser.) -- C:\Program Files\Opera\launcher.exe

---\\ Recherche d'infection sur les navigateurs (6) - 3s
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (@ieframe.dll,-12512) - http://www.bing.com/
O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} - (Google) - http://www.google.com/
O69 - SBI: SearchScopes [HKCU] {7D4715A0-49EA-450F-88B7-375D7F208512} - ((www.google.com) Google) - http://www.google.com/
O69 - SBI: SearchScopes [HKCU] {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} - (Google) - http://www.google.com/
O69 - SBI: SearchScopes [HKUS\.DEFAULT] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - http://www.bing.com/
O69 - SBI: SearchScopes [HKUS\S-1-5-18] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - http://www.bing.com/

---\\ Enumère les services démarrés par Svchost (34) - 2s
O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d’application.) -- C:\Windows\System32\aelupsvc.dll [62464]
O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [67584]
O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [67584]
O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\System32\srvsvc.dll [168960]
O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\System32\gpsvc.dll [593408]
O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\IKEEXT.DLL [679424]
O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Service Audio Windows.) -- C:\Windows\System32\audiosrv.dll [475136]
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’.) -- C:\Windows\System32\rasauto.dll [90624]
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire de connexions d’accès distant.) -- C:\Windows\System32\rasmans.dll [286208]
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll [75264]
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements systèm.) -- C:\Windows\System32\Sens.dll [49664]
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l’application d’assistance à.) -- C:\Windows\System32\ipnathlp.dll [300544]
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM.) -- C:\Windows\System32\tapisrv.dll [242176]
O83 - Search Svchost Services: UxTuneUp (UxTuneUp) . (.AVG Technologies - AVG Theme Extension.) -- C:\Windows\System32\uxtuneup.dll [36568]
O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gestionnaire des connexions distantes du se.) -- C:\Windows\System32\termsrv.dll [523776]
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Up.) -- C:\Windows\System32\wuaueng.dll [2061824]
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière.) -- C:\Windows\System32\qmgr.dll [585728]
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [328192]
O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur u.) -- C:\Windows\System32\iphlpsvc.dll [499712]
O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d’ouverture de session secon.) -- C:\Windows\System32\seclogon.dll [21504]
O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll [47104]
O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\System32\iscsiexe.dll [114688]
O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédia.) -- C:\Windows\System32\mmcss.dll [49664]
O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll [61440]
O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll [98304]
O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll [164864]
O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\System32\schedsvc.dll [751104]
O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\Windows\System32\KMSVC.DLL [71168]
O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à.) -- C:\Windows\System32\SessEnv.dll [113664]
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll [168960]
O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\System32\browser.dll [102912]
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\Windows\System32\themeservice.dll [37376]
O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\Windows\System32\bdesvc.dll [76800]
O83 - Search Svchost Services: AppMgmt (AppMgmt) . (.Microsoft Corporation - Service Installation de logiciels.) -- C:\Windows\System32\appmgmts.dll [149504]

---\\ Liste des exceptions du parefeu Windows (20) - 6s
O87 - FAEL: "TCP Query User{0C4EAEFD-13BF-4742-8DEF-115B2295BA1B}C:\program files\free download manager\fdm.exe" [In-None-P6-TRUE] .(.FreeDownloadManager.ORG - Free Download Manager.) -- C:\program files\free download manager\fdm.exe
O87 - FAEL: "UDP Query User{B412905E-8BF5-4386-90E1-874E0662AACD}C:\program files\free download manager\fdm.exe" [In-None-P17-TRUE] .(.FreeDownloadManager.ORG - Free Download Manager.) -- C:\program files\free download manager\fdm.exe
O87 - FAEL: "TCP Query User{5C25AFA8-84B3-4B4C-AB4B-5D5F054BA045}C:\users\owner\desktop\pp-pc\ihelper.exe" [In-None-P6-TRUE] .(.广州铁人网络科技有限公司 - PP助手.) -- C:\users\owner\desktop\pp-pc\ihelper.exe
O87 - FAEL: "UDP Query User{DF359281-C4C7-4072-8155-0711DCD0A96F}C:\users\owner\desktop\pp-pc\ihelper.exe" [In-None-P17-TRUE] .(.广州铁人网络科技有限公司 - PP助手.) -- C:\users\owner\desktop\pp-pc\ihelper.exe
O87 - FAEL: "{40207736-1A90-417B-AE45-FB9B632AC4F6}" [In-None-P6-TRUE] .(.BitTorrent Inc. - µTorrent.) -- C:\Users\owner\AppData\Roaming\uTorrent\uTorrent.exe
O87 - FAEL: "{AF94AB01-9149-458D-8053-92CD9D0C3B0D}" [In-None-P17-TRUE] .(.BitTorrent Inc. - µTorrent.) -- C:\Users\owner\AppData\Roaming\uTorrent\uTorrent.exe
O87 - FAEL: "{5C225F40-8C80-46B2-AE86-6D9B4B96959D}" [In-None-P6-TRUE] .(.Azureus Software, Inc - Vuze Launcher.) -- C:\Program Files\Vuze\Azureus.exe
O87 - FAEL: "{23E39374-59E0-48E0-B31E-20D2546E8E38}" [In-None-P17-TRUE] .(.Azureus Software, Inc - Vuze Launcher.) -- C:\Program Files\Vuze\Azureus.exe
O87 - FAEL: "{8645422C-1057-4DD8-9700-1AFE87B28E88}" [In-None-P6-TRUE] .(...) -- D:\Program Files\qBittorrent\qbittorrent.exe
O87 - FAEL: "{99C9D8C2-CF05-43A3-AF5A-588E5AA23381}" [In-None-P17-TRUE] .(...) -- D:\Program Files\qBittorrent\qbittorrent.exe
O87 - FAEL: "{09F47DF4-FFD3-4D4B-A7AA-EBF1AF1ABA48}" [In-None-P6-TRUE] .(.Musiccity Co.Ltd. - MUZAoDApp Module.) -- C:\Windows\System32\muzapp.exe
O87 - FAEL: "{48043DA4-0ED4-496E-B36E-BF3501171E1E}" [In-None-P17-TRUE] .(.Musiccity Co.Ltd. - MUZAoDApp Module.) -- C:\Windows\System32\muzapp.exe
O87 - FAEL: "{784DB939-34C2-40E8-ACD0-77916EFCB8D2}" [In-None-P6-TRUE] .(.RealNetworks, Inc. - RealTimes Desktop Service.) -- C:\Program Files\Real\RealPlayer\RPDS\Bin\rpdsvc.exe
O87 - FAEL: "{5603762E-E563-4E75-B9AF-E8323C9BC2B5}" [In-None-P17-TRUE] .(.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe
O87 - FAEL: "{59EDD8E6-21C6-4D45-B05F-E4D1E69D2E21}" [In-None-P6-TRUE] .(.BitTorrent Inc. - µTorrent.) -- C:\Users\owner\AppData\Roaming\uTorrent\uTorrent.exe
O87 - FAEL: "{80AF3570-A96B-4AAC-9F88-E0B1851AFCE3}" [Out-None-P6-TRUE] .(.BitTorrent Inc. - µTorrent.) -- C:\Users\owner\AppData\Roaming\uTorrent\uTorrent.exe
O87 - FAEL: "{E5A1BC6E-9E77-4391-91C1-CBC3D07BE940}" [In-None-P17-TRUE] .(.BitTorrent Inc. - µTorrent.) -- C:\Users\owner\AppData\Roaming\uTorrent\uTorrent.exe
O87 - FAEL: "{B0CB59DD-A097-4AF3-90AA-94D9A1EC279B}" [In-None-P6-TRUE] .(.BitTorrent Inc. - µTorrent.) -- C:\Users\owner\AppData\Roaming\uTorrent\uTorrent.exe
O87 - FAEL: "{30296324-A75E-4905-ACF9-1A8EE2D0061E}" [In-None-P17-TRUE] .(.BitTorrent Inc. - µTorrent.) -- C:\Users\owner\AppData\Roaming\uTorrent\uTorrent.exe
O87 - FAEL: "{A921FD6F-C8D7-474B-970B-5FD9A82883CE}" [Out-None-P17-TRUE] .(.BitTorrent Inc. - µTorrent.) -- C:\Users\owner\AppData\Roaming\uTorrent\uTorrent.exe

---\\ Enumère les codes produits des logiciels (1) - 1s
O90 - PUC: "E0BD057F254D8013369CEF61CB867614" . (.Webplayer.) =>PUP.Optional.WebPlayer

---\\ Recherche des packages WindowsInstaller (1) - 14s
[MD5.] [WIS][2013/12/06 01:14:48] (.Kreapixel - Adobe AIR.) -- C:\Windows\Installer\e10914.msi [21504] =>PUP.Optional.SocialSkinz

---\\ Services non Microsoft (SR=Démarré,SS=Stoppé) (10) - 96s
SR - Auto [2008/06/25 17:18:22] [ 57344] Cepstral License Server (Cepstral License Server) . (.Cepstral, LLC.) - C:\Program Files\Cepstral\bin\CepstralLicSrv.exe
SS - Disabled [2014/09/02 16:21:45] [ 67224] Microsoft .NET Framework NGEN v2.0.50727_X86 (clr_optimization_v2.0.50727_32) . (...) - C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
SS - Auto [2015/09/06 19:34:14] [ 144200] Service Google Update (gupdate) (gupdate) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe
SS - Demand [2015/09/06 19:34:14] [ 144200] Service Google Update (gupdatem) (gupdatem) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe
SR - Auto [2010/02/11 11:50:50] [ 72296] O2FLASH (O2FLASH) . (.O2Micro International.) - C:\Windows\System32\drivers\o2flash.exe
SS - Demand [2003/04/18 20:06:26] [ 8192] O2SDIOAssist (O2SDIOAssist) . (...) - C:\Windows\System32\srvany.exe
SR - Auto [2015/07/27 21:28:58] [ 32880] RealPlayer Update Service (RealPlayerUpdateSvc) . (...) - C:\Program Files\Real\UpdateService\RealPlayerUpdateSvc.exe
SR - Auto [2015/08/23 22:08:09] [ 1115736] RealTimes Desktop Service (RealTimes Desktop Service) . (.RealNetworks, Inc..) - C:\Program Files\Real\RealPlayer\RPDS\Bin\rpdsvc.exe
SR - Auto [2015/06/20 15:33:50] [ 274514] @C:\Windows\system32\stlang.dll,-10101 (STacSV) . (.IDT, Inc..) - C:\Program Files\IDT\WDM\stacsv.exe
SS - Auto [2015/09/09 13:42:34] [ 351744] (WsAppService) . (.Wondershare.) - C:\Program Files\Wondershare\WAF\WsAppService.exe

---\\ Recherche de clés de registre Tracing (2) - 0s
HKLM\SOFTWARE\Microsoft\Tracing\PerformanceOptimizer_RASAPI32 =>PUP.Optional.BProtector
HKLM\SOFTWARE\Microsoft\Tracing\PerformanceOptimizer_RASMANCS =>PUP.Optional.BProtector

---\\ Scan Additionnel (18) - 0s
HKLM\SOFTWARE\SqueakyChocolate =>PUP.Optional.Squeaky
HKLM\SOFTWARE\ss u helper =>PUP.Optional.SaveShare
HKCU\SOFTWARE\ProductSetup =>PUP.Optional.InstallCore
C:\Program Files\160cc9ca-e90c-47f9-9866-d5bd56ec2e6f =>PUP.Optional.CrossRider
C:\Program Files\2f4a5618-5b83-4d7e-b5b9-168948cae389 =>PUP.Optional.CrossRider
C:\Program Files\c4ac35d1-a9ea-4ed1-910c-54c37fc660ea =>PUP.Optional.CrossRider
C:\Program Files\e1e5e4ac-f7f9-44db-ace1-4e9bf1d89613 =>PUP.Optional.CrossRider
C:\Program Files\e27f82c0-c97e-45d6-922f-59418b135241 =>PUP.Optional.CrossRider
C:\ProgramData\InstallMate =>PUP.Optional.Tarma
C:\Users\owner\AppData\Roaming\BitLord =>PUP.Optional.WhenUSave
C:\Users\owner\AppData\Local\CodecPerformer =>PUP.Optional.CodecPerformer
C:\Users\owner\AppData\Local\CrashRpt =>.Legitimate.CrashReports
C:\Users\owner\AppData\Local\Installer =>PUP.Optional.InstallPedia
HKLM\Software\Classes\Installer\Products\E0BD057F254D8013369CEF61CB867614 =>PUP.Optional.WebPlayer
HKLM\Software\Classes\Installer\Features\E0BD057F254D8013369CEF61CB867614 =>PUP.Optional.WebPlayer
C:\Windows\Installer\e10914.msi =>PUP.Optional.SocialSkinz
HKLM\SOFTWARE\Microsoft\Tracing\PerformanceOptimizer_RASAPI32 =>PUP.Optional.BProtector
HKLM\SOFTWARE\Microsoft\Tracing\PerformanceOptimizer_RASMANCS =>PUP.Optional.BProtector

---\\ Récapitulatif des éléments trouvées sur votre station (13) - 0s
http://www.nicolascoolman.fr/pup-isstart/ =>PUP.Optional.IsStart
http://www.nicolascoolman.fr/blog =>PUP.Optional.Squeaky
http://www.nicolascoolman.fr/blog =>PUP.Optional.SaveShare
http://www.nicolascoolman.fr/adware-installcore/ =>PUP.Optional.InstallCore
http://www.nicolascoolman.fr/pup-crossrider/ =>PUP.Optional.CrossRider
http://www.nicolascoolman.fr/pup-tarma/ =>PUP.Optional.Tarma
http://www.nicolascoolman.fr/adware-whenusave/ =>PUP.Optional.WhenUSave
http://www.nicolascoolman.fr/blog =>PUP.Optional.CodecPerformer
http://www.nicolascoolman.fr/blog =>.Legitimate.CrashReports
http://www.nicolascoolman.fr/adware-installpedia/ =>PUP.Optional.InstallPedia
http://www.nicolascoolman.fr/blog =>PUP.Optional.WebPlayer
http://www.nicolascoolman.fr/adware-socialskinz/ =>PUP.Optional.SocialSkinz
http://www.nicolascoolman.fr/pup-bprotector/ =>PUP.Optional.BProtector

~ End of the scan, 27349 items in 547 seconds (1236)(0)()

Publicité


Signaler le contenu de ce document

Publicité