~ ZHPDiag v2015.10.22.154 Par Nicolas Coolman (2015/10/22)
~ Démarré par vanessa (Administrator) (2015/10/22 15:08:07)
~ Site: http://www.nicolascoolman.fr
~ Facebook: https://www.facebook.com/nicolascoolman1
~ Etat de la version: Version OK
~ Mode: Scanner
~ Rapport: C:\Users\vanessa\Desktop\ZHPDiag.txt
~ Rapport: C:\Users\vanessa\AppData\Roaming\ZHP\ZHPDiag.txt
~ UAC: Deactivate
~ Démarrage du système: Normal (Normal boot)
Windows VISTA, 64-bit Service Pack 2 (Build 6002)

---\\ Navigateurs Internet (1) - 0s
MSIE: Internet Explorer v8.0.6001.19690

---\\ Informations sur les produits Windows (9) - 0s
~ Windows Server License Manager Script : OK
~ Licence Script File Génération : OK
~ Windows Operating System - Vista, OEM_SLP channel
System Locked Preinstallation (OEM_SLP) : OK
Windows ID Activation : OK
~ Windows Partial Key : WQD8Q
Windows License : OK
Windows Automatic Updates : OK
Windows Activation Technologies : KO

---\\ Logiciels de protection (1) - 1s
Windows Defender VISTA (Activate)

---\\ Informations sur le système (6) - 0s
~ Operating System: Intel64 Family 6 Model 15 Stepping 13, GenuineIntel
~ Operating System: 64-bit
~ Boot mode: Normal (Normal boot)
Total RAM: 4191.504 MB (50% free)
~ System Restore: Activé (Enable)
~ System drive C: has 389 GB free of 596 GB

---\\ Mode de connexion au système (3) - 0s
~ Computer Name: PC-DE-VANESSA
~ User Name: vanessa
~ Logged in as Administrator

---\\ Enumération des unités disques (2) - 0s
~ Drive C: has 389 GB free of 596 GB (System)
~ Drive D: has 1 GB free of 13 GB

---\\ Etat du Centre de Sécurité Windows (14) - 0s
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoClose: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] DisableTaskMgr: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] DisableRegistryTools: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: Modified
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK

---\\ Recherche particulière de fichiers génériques (25) - 0s
[MD5.6B08E54A451B3F95E4109DBA7E594270] - (.Microsoft Corporation - Explorateur Windows.) () -- C:\Windows\Explorer.exe [3079168] ©
[MD5.10446646D128E580C46615338E74E672] - (.Microsoft Corporation - Processus hôte Windows (Rundll32).) () -- C:\Windows\System32\rundll32.exe [46592] ©
[MD5.117EA87DF785CA1B9D821F6F213DCE07] - (.Microsoft Corporation - Application de démarrage de Windows.) () -- C:\Windows\System32\Wininit.exe [123904] ©
[MD5.552D40E4399F7B5244C4457FDA2C04E4] - (.Microsoft Corporation - Extensions Internet pour Win32.) () -- C:\Windows\System32\wininet.dll [1147904] ©
[MD5.6D0773A3A65D28B663F334C90441D01A] - (.Microsoft Corporation - Application d'ouverture de session Windows.) () -- C:\Windows\System32\Winlogon.exe [405504] ©
[MD5.E4C283A98F118CEC9E087EAC4E9EFB6A] - (.Microsoft Corporation - DNS DLL de l'API Client.) () -- C:\Windows\System32\dnsapi.dll [221696] ©
[MD5.85E861D0B88DB2B54ACB0839654C09F7] - (.Microsoft Corporation - DNS DLL de l'API Client.) () -- C:\Windows\Syswow64\dnsapi.dll [168448] ©
[MD5.7C42D832F43C74A707E11AA6BB53F6D2] - (.Microsoft Corporation - DLL client de l'API uilisateur de Windows m.) () -- C:\Windows\System32\fr-FR\user32.dll.mui [19968] ©
[MD5.E58A17E945593544C707423F9772EEA0] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) () -- C:\Windows\System32\drivers\AFD.sys [404992] ©
[MD5.E68D9B3A3905619732F7FE039466A623] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) () -- C:\Windows\System32\drivers\atapi.sys [20952] ©
[MD5.B4D787DB8D30793A4D4DF9FEED18F136] - (.Microsoft Corporation - CD-ROM File System Driver.) () -- C:\Windows\System32\drivers\Cdfs.sys [90624] ©
[MD5.C025AA69BE3D0D25C7A2E746EF6F94FC] - (.Microsoft Corporation - SCSI CD-ROM Driver.) () -- C:\Windows\System32\drivers\Cdrom.sys [79872] ©
[MD5.8B722BA35205C71E7951CDC4CDBADE19] - (.Microsoft Corporation - DFS Namespace Client Driver.) () -- C:\Windows\System32\drivers\DfsC.sys [97792] ©
[MD5.F942C5820205F2FB453243EDFEC82A3D] - (.Microsoft Corporation - High Definition Audio Bus Driver.) () -- C:\Windows\System32\drivers\HDAudBus.sys [948736] ©
[MD5.CBB597659A2713CE0C9CC20C88C7591F] - (.Microsoft Corporation - Pilote de port i8042.) () -- C:\Windows\System32\drivers\i8042prt.sys [64000] ©
[MD5.B7E6212F581EA5F6AB0C3A6CEEEB89BE] - (.Microsoft Corporation - IP Network Address Translator.) () -- C:\Windows\System32\drivers\IpNat.sys [115712] ©
[MD5.B31DB7D6E624479EA20FEE17E712A44C] - (.Microsoft Corporation - Windows NT SMB Minirdr.) () -- C:\Windows\System32\drivers\MRxSmb.sys [136192] ©
[MD5.FC2C792EBDDC8E28DF939D6A92C83D61] - (.Microsoft Corporation - MBT Transport driver.) () -- C:\Windows\System32\drivers\netBT.sys [248320] ©
[MD5.2ACCAA3C3C55370A32F17B3595E1A217] - (.Microsoft Corporation - Pilote du système de fichiers NT.) () -- C:\Windows\System32\drivers\ntfs.sys [1513320] ©
[MD5.AECD57F94C887F58919F307C35498EA0] - (.Microsoft Corporation - Pilote de port parallèle.) () -- C:\Windows\System32\drivers\Parport.sys [96768] ©
[MD5.AC7BC4D42A7E558718DFDEC599BBFC2C] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) () -- C:\Windows\System32\drivers\Rasl2tp.sys [124928] ©
[MD5.C045D1FB111C28DF0D1BE8D4BDA22C06] - (.Microsoft Corporation - Microsoft RDP Device redirector.) () -- C:\Windows\System32\drivers\rdpdr.sys [314368] ©
[MD5.290B6F6A0EC4FCDFC90F5CB6D7020473] - (.Microsoft Corporation - SMB Transport driver.) () -- C:\Windows\System32\drivers\smb.sys [88064] ©
[MD5.458919C8C42E398DC4802178D5FFEE27] - (.Microsoft Corporation - TDI Translation Driver.) () -- C:\Windows\System32\drivers\tdx.sys [94720] ©
[MD5.582F710097B46140F5A89A19A6573D4B] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) () -- C:\Windows\System32\drivers\volsnap.sys [267648] ©

---\\ Processus lancés (47) - 2s
[MD5.BB7A2052EBB2E31080C0DA9FA3F4EA4A] - (.ATI Technologies Inc. - ATI External Event Utility EXE Module.) -- C:\Windows\system32\Ati2evxx.exe [932864] [PID.200] ©
[MD5.BB7A2052EBB2E31080C0DA9FA3F4EA4A] - (.ATI Technologies Inc. - ATI External Event Utility EXE Module.) -- C:\Windows\system32\Ati2evxx.exe [932864] [PID.1256] ©
[MD5.ADC420616C501B45D26C0FD3EF1E54E4] - (.ArcSoft Inc. - ArcSoft Connect Service.) -- C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152] [PID.1928] ©
[MD5.4FE5C6D40664AE07BE5105874357D2ED] - (.Apple Inc. - MobileDeviceService.) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [57008] [PID.1956] ©
[MD5.EBBCD5DFBB1DE70E8F4AF8FA59E401FD] - (.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe [462184] [PID.1224] ©
[MD5.BC3C53000ADCD440F1B23E46DAC302EF] - (.Devguru Co., Ltd. - Device Error Recovery SDK(x86).) -- C:\Windows\System32\dgdersvc.exe [119632] [PID.1428] ©
[MD5.83D8BE94E1CBCBE2EA8372DB1A95A159] - (.Hewlett-Packard Company - LightScribe Service.) -- C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [73728] [PID.2152] ©
[MD5.B3E5887095F1DE8737DA3441D29F60E4] - (.RealNetworks, Inc. - Online Games Manager.) -- C:\Program Files (x86)\Online Games Manager\ogmservice.exe [581568] [PID.2408] ©
[MD5.B2D01290C0E0465ACA54C2088E947823] - (...) -- C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39056] [PID.2540]
[MD5.4BC24AD1AF866EB21C09D837A8A017E7] - (.Copyright 2004 - CLCapSvc Module.) -- C:\Program Files (x86)\Hewlett-Packard\Media\TV\Kernel\TV\TVCapSvc.exe [296320] [PID.2676]
[MD5.56196A4FD34A9985AB93531DCDC07DCB] - (.Copyright 2004 - CLSched Module.) -- C:\Program Files (x86)\Hewlett-Packard\Media\TV\Kernel\TV\TVSched.exe [116104] [PID.2696]
[MD5.2BACD71123F42CEA603F4E205E1AE337] - (.Microsoft Corp. - Microsoft® Windows Live ID Service.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2292096] [PID.2772] ©
[MD5.2A46FFE841EC43001D5A293A54DB34DE] - (.Microsoft Corp. - Microsoft® Windows Live ID Service Monitor.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE [223104] [PID.2956] ©
[MD5.A168271E4AC1688C162534D412F283AE] - (.Hewlett-Packard - HP MediaSmart SmartMenu.) -- C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe [914224] [PID.1768] ©
[MD5.596C3DD487001E237CCE431EAE6F3EA0] - (.Hewlett-Packard - HP Advisor.) -- C:\Program Files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe [1689144] [PID.1492] ©
[MD5.CCF2234A35077CA217A61C9CACC48198] - (.Hewlett-Packard Company - .) -- C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe [2363392] [PID.476] ©
[MD5.04F13BB5995C286616D8F36392E90A73] - (.Megaupload Limited - Mega Manager.) -- C:\Program Files (x86)\Megaupload\Mega Manager\MegaManager.exe [2113024] [PID.2952]
[MD5.1D36E7F1E01C14CC534EDBDDE6ABE48A] - (.Samsung Electronics Co., Ltd. - Kies TrayAgent Application.) -- C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [3365176] [PID.2472] ©
[MD5.CF03C8F6F6B0D71F6E5BCE167FCF7CA6] - (.Hewlett-Packard Co. - HP Digital Imaging Monitor.) -- C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe [214360] [PID.2664] ©
[MD5.554A50B5310E702029D3A675459108FF] - (.Hewlett-Packard - hpsysdrv.) -- C:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe [62768] [PID.2492] ©
[MD5.AEEE57BB436ED3981D599B86A9AEA127] - (.Panasonic Corporation - AutoStartService.) -- C:\Program Files (x86)\Common Files\Panasonic\PHOTOfunSTUDIO AutoStart\AutoStartupService.exe [152048] [PID.3048] ©
[MD5.68BB0D0F31DAB67979C24218777F97EA] - (.CyberLink Corp. - CyberLink PowerCinema Resident Program.) -- C:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\TSMAgent.exe [1152296] [PID.220] ©
[MD5.309C7161F58C75EE88B07F55CA858280] - (.CyberLink - CyberLink MediaLibray Service.) -- C:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe [189736] [PID.2548] ©
[MD5.B93C4070F24E46B0097648C276B5039E] - (.Hewlett-Packard Co. - Hewlett-Packard Product Assistant.) -- C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe [49152] [PID.1004] ©
[MD5.B6F6228AB545E2819A60C0D63A84E52E] - (.CyberLink Corp. - HP DVDSmart Resident Program.) -- C:\Program Files (x86)\Hewlett-Packard\Media\DVD\DVDAgent.exe [1148200] [PID.1544] ©
[MD5.4334F0F2DDE36F1AF1B3200F88C1E155] - (.CyberLink Corp. - HP MediaSmart TV Resident Program.) -- C:\Program Files (x86)\Hewlett-Packard\Media\TV\TVAgent.exe [206120] [PID.1920] ©
[MD5.916A2C4EB028604783FD5EA169236C1D] - (.Apple Inc. - QuickTime Task.) -- C:\Program Files (x86)\QuickTime\QTTask.exe [421888] [PID.2228] ©
[MD5.6E3245DF783E58375B3465F03274743E] - (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254696] [PID.1084] ©
[MD5.8E2A7F1F62467A7DCB8AB2C0642F47CA] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392] [PID.804] ©
[MD5.225518F190EDBC37CA32197A3E94B498] - (.RealNetworks, Inc. - RealNetworks Scheduler.) -- C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe [295512] [PID.1296] ©
[MD5.A7810B302294793DE88542AAE177D1B1] - (.ArcSoft Inc. - ArcSoft Connect Daemon.) -- C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [207424] [PID.732] ©
[MD5.F400694D7D2785F60133C20F7F2F4F7A] - (.ArcSoft Inc. - ArcSoft Connect Notifier.) -- C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ArcCon.ac [309824] [PID.3268] ©
[MD5.4EFFC8FF6D349E971E94B1C670C0C66A] - (.Apple Inc. - iPodService Module (64-bit).) -- C:\Program Files\iPod\bin\iPodService.exe [641352] [PID.3320] ©
[MD5.80B8AE8E18FF57BE13FF4A5959DB0EC1] - (.Hewlett-Packard Co. - HP CUE Status Root.) -- C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe [184320] [PID.4016] ©
[MD5.E343E343581F6DAEAD48D412F5CE911A] - (.Hewlett-Packard Co. - HP CUE Alert Popup Window Objects.) -- C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe [569344] [PID.4064] ©
[MD5.33C014C1709F7222CEFF61B780EDC967] - (.Advanced Micro Devices Inc. - Catalyst Control Center: Monitoring program.) -- c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe [49152] [PID.3168] ©
[MD5.BA7D56C1F3DD385EE58ADDA14C6FFB54] - (.ATI Technologies Inc. - Catalyst Control Centre: Host application.) -- C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe [49152] [PID.3648] ©
[MD5.AA9EF0B395097F24D289F64445B2FD2E] - (.Hewlett-Packard - HP Health Check Service.) -- c:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe [94208] [PID.4296] ©
[MD5.BABBBDEF9DBB5E012EE5210FCB47C33B] - (.Malwarebytes - Malwarebytes Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe [9832760] [PID.3696] ©
[MD5.DDB1C559E36063532ED1CBC101C17DA3] - (.Hewlett-Packard Company - KBD EXE.) -- C:\Program Files (x86)\Hewlett-Packard\KBD\kbd.exe [94208] [PID.4292] ©
[MD5.7D04F8CF659D852BC8D7275BD92DC000] - (.Sun Microsystems, Inc. - Java(TM) Update Checker.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe [507624] [PID.3252] ©
[MD5.1CD59A498A850F58D0C01EB1E913929D] - (.Google Inc. - Google Chrome.) -- C:\Users\vanessa\AppData\Local\Google\Chrome\Application\chrome.exe [811848] [PID.4876] ©
[MD5.1CD59A498A850F58D0C01EB1E913929D] - (.Google Inc. - Google Chrome.) -- C:\Users\vanessa\AppData\Local\Google\Chrome\Application\chrome.exe [811848] [PID.4276] ©
[MD5.1CD59A498A850F58D0C01EB1E913929D] - (.Google Inc. - Google Chrome.) -- C:\Users\vanessa\AppData\Local\Google\Chrome\Application\chrome.exe [811848] [PID.2232] ©
[MD5.1CD59A498A850F58D0C01EB1E913929D] - (.Google Inc. - Google Chrome.) -- C:\Users\vanessa\AppData\Local\Google\Chrome\Application\chrome.exe [811848] [PID.2704] ©
[MD5.231AE3BE35DFA790FE484CCA354BCD15] - (.Nicolas Coolman - ZHPDiag.) -- C:\Users\vanessa\Downloads\ZHPDiag3 (1).exe [1958912] [PID.4244] ©
[MD5.8A48305D3E81C513DAC27690B5AA7FC0] - (.RealNetworks, Inc. - RealPlayer.) -- c:\program files (x86)\Real\realplayer\realplay.exe [501328] [PID.2004] ©

---\\ Google Chrome, Démarrage,Recherche,Extensions (2) - 0s
G2 - GCE: Preference [User Data\Default] [idhngdhcfkoamngbedgpaokgjbnpdiji] RealDownloader
G2 - GCE: Preference [User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] Google Chrome manifest =>.Google Inc.

---\\ Firefox, Plugins,Demarrage,Recherche,Extensions (4) - 1s
P2 - EXT: (. - translatordontfollowmenet.) -- C:\Users\vanessa\AppData\Roaming\Mozilla\Firefox\Profiles\c35r2w0g.default\extensions\translator@dontfollowme.net
P2 - EXT: (. - 7CEA821D3DAB4238B424BF7324531750.) -- C:\Users\vanessa\AppData\Roaming\Mozilla\Firefox\Profiles\c35r2w0g.default\extensions\{7CEA821D-3DAB-4238-B424-BF7324531750}
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Macromed\Flash\NPSWF32.dll ©
P2 - FPN: [HKLM] [@Apple.com/iTunes,version=1.0] - (.Apple Inc..) -- C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ©

---\\ Internet Explorer,Démarrage,Recherche,URLSearchHook (22) - 0s
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = preserve
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchUrl,Default = http://www.google.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphean =>.Microsoft Internet Explorer

---\\ Internet Explorer,Proxy Management (6) - 0s
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = <-loopback>
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll

---\\ Internet Explorer,IniFiles, Autoloading programs (3) - 0s
F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe (.Microsoft Corporation.) ©
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe (.Microsoft Corporation.) ©
F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"

---\\ Etude du fichier hosts (2) - 0s
0
~ Le fichier hôte est sain (The hosts file is clean) (2)

---\\ Browser Helper Object de navigateur (BHO) (2) - 1s
O2 - BHO: Windows Live ID Sign-in Helper [64Bits] - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corp. - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll ©
O2 - BHO: Google Toolbar Helper [64Bits] - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Google Toolbar.) -- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll ©

---\\ Internet Explorer, Barre d'outil (2) - 0s
O3 - Toolbar: 0x9F389CDE1633A741809BAA305ED9D922 - [HKCU]{DE9C389F-3316-41A7-809B-AA305ED9D922} . (...) -- (.not file.)
O3 - Toolbar: AOL Toolbar - [HKLM]{DE9C389F-3316-41A7-809B-AA305ED9D922} . (...) -- (.not file.)

---\\ Applications lancées au démarrage du système (22) - 0s
O4 - HKLM\..\Run: [Windows Defender] C:\Program Files (x86)\Windows Defender\MSASCui.exe (.not file.)
O4 - HKLM\..\Run: [SmartMenu] C:\Program Files (x86)\Hewlett-Packard\HP MediaSmart\SmartMenu.exe (.not file.)
O4 - HKCU\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe ©
O4 - HKCU\..\Run: [HPAdvisor] . (.Hewlett-Packard - HP Advisor.) -- C:\Program Files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe ©
O4 - HKCU\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Users\vanessa\AppData\Local\Google\Update\GoogleUpdate.exe ©
O4 - HKCU\..\Run: [LightScribe Control Panel] . (.Hewlett-Packard Company - .) -- C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe ©
O4 - HKCU\..\Run: [Mega Manager] . (.Megaupload Limited - Mega Manager.) -- C:\Program Files (x86)\Megaupload\Mega Manager\MegaManager.exe
O4 - HKCU\..\Run: [KiesTrayAgent] . (.Samsung Electronics Co., Ltd. - Kies TrayAgent Application.) -- C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe ©
O4 - HKCU\..\Run: [ehTray.exe] . (.Microsoft Corporation - Media Center Tray Applet.) -- C:\Windows\ehome\ehtray.exe ©
O4 - HKLM\..\Wow6432Node\Run: [Windows Defender] C:\Program Files (x86)\Windows Defender\MSASCui.exe (.not file.)
O4 - HKLM\..\Wow6432Node\Run: [SmartMenu] C:\Program Files (x86)\Hewlett-Packard\HP MediaSmart\SmartMenu.exe (.not file.)
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files (x86)\Windows Sidebar\sidebar.exe ©
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] . (.Microsoft Corporation - Processus hôte Windows (Rundll32).) -- C:\Windows\System32\rundll32.exe ©
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files (x86)\Windows Sidebar\sidebar.exe ©
O4 - HKUS\S-1-5-20\..\Run: [WindowsWelcomeCenter] . (.Microsoft Corporation - Processus hôte Windows (Rundll32).) -- C:\Windows\System32\rundll32.exe ©
O4 - HKUS\S-1-5-21-899872469-3401814819-3539772478-1000\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe ©
O4 - HKUS\S-1-5-21-899872469-3401814819-3539772478-1000\..\Run: [HPAdvisor] . (.Hewlett-Packard - HP Advisor.) -- C:\Program Files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe ©
O4 - HKUS\S-1-5-21-899872469-3401814819-3539772478-1000\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Users\vanessa\AppData\Local\Google\Update\GoogleUpdate.exe ©
O4 - HKUS\S-1-5-21-899872469-3401814819-3539772478-1000\..\Run: [LightScribe Control Panel] . (.Hewlett-Packard Company - .) -- C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe ©
O4 - HKUS\S-1-5-21-899872469-3401814819-3539772478-1000\..\Run: [Mega Manager] . (.Megaupload Limited - Mega Manager.) -- C:\Program Files (x86)\Megaupload\Mega Manager\MegaManager.exe
O4 - HKUS\S-1-5-21-899872469-3401814819-3539772478-1000\..\Run: [KiesTrayAgent] . (.Samsung Electronics Co., Ltd. - Kies TrayAgent Application.) -- C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe ©
O4 - HKUS\S-1-5-21-899872469-3401814819-3539772478-1000\..\Run: [ehTray.exe] . (.Microsoft Corporation - Media Center Tray Applet.) -- C:\Windows\ehome\ehtray.exe ©

---\\ Modification Domaine/Adresses DNS (4) - 0s
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpDomain = lan
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: DhcpDomain = lan

---\\ Protocole additionnel (27) - 0s
O18 - Handler: about [64Bits] - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll ©
O18 - Handler: cdl [64Bits] - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll ©
O18 - Handler: dvd [64Bits] - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\SysWOW64\MSVidCtl.dll ©
O18 - Handler: file [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll ©
O18 - Handler: ftp [64Bits] - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll ©
O18 - Handler: http [64Bits] - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll ©
O18 - Handler: https [64Bits] - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll ©
O18 - Handler: its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll ©
O18 - Handler: javascript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll ©
O18 - Handler: local [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll ©
O18 - Handler: mailto [64Bits] - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll ©
O18 - Handler: mhtml [64Bits] - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\System32\inetcomm.dll ©
O18 - Handler: mk [64Bits] - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll ©
O18 - Handler: ms-help [64Bits] - {314111c7-a502-11d2-bbca-00c04f8ec294} . (.Microsoft Corporation - Microsoft® Help Data Services Module.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Help\hxds.dll ©
O18 - Handler: ms-its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll ©
O18 - Handler: ms-itss [64Bits] - {0A9007C0-4076-11D3-8789-0000F8105754} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Information Retrieval\msitss.dll ©
O18 - Handler: res [64Bits] - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll ©
O18 - Handler: tv [64Bits] - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\SysWOW64\MSVidCtl.dll ©
O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll ©
O18 - Handler: wlmailhtml [64Bits] - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} . (.Microsoft Corporation - Windows Live Mail.) -- C:\Program Files (x86)\Windows Live\Mail\mailcomm.dll ©
O18 - Handler: wlpg [64Bits] - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (.Microsoft Corporation - Windows Live Album Download Protocol Handle.) -- C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll ©
O18 - Filter: application/octet-stream [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll ©
O18 - Filter: application/x-complus [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll ©
O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll ©
O18 - Filter: deflate [64Bits] - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll ©
O18 - Filter: gzip [64Bits] - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll ©
O18 - Filter: text/xml [64Bits] - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files (x86)\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL ©

---\\ Liste des services NT non Microsoft et non désactivés (14) - 1s
O23 - Service: ArcSoft Connect Daemon (ACDaemon) . (.ArcSoft Inc. - ArcSoft Connect Service.) - C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe ©
O23 - Service: Apple Mobile Device (Apple Mobile Device) . (.Apple Inc. - MobileDeviceService.) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe ©
O23 - Service: (Ati External Event Utility) . (.ATI Technologies Inc. - ATI External Event Utility EXE Module.) - C:\Windows\system32\Ati2evxx.exe ©
O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe ©
O23 - Service: Device Error Recovery Service (dgdersvc) . (.Devguru Co., Ltd. - Device Error Recovery SDK(x86).) - C:\Windows\System32\dgdersvc.exe ©
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ©
O23 - Service: HP Health Check Service (HP Health Check Service) . (.Hewlett-Packard - HP Health Check Service.) - c:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe ©
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) . (.Hewlett-Packard Company - LightScribe Service.) - C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe ©
O23 - Service: (MBAMService) . (.Malwarebytes - Malwarebytes Anti-Malware.) - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe ©
O23 - Service: Online Games Manager (ogmservice) . (.RealNetworks, Inc. - Online Games Manager.) - C:\Program Files (x86)\Online Games Manager\ogmservice.exe ©
O23 - Service: RealNetworks Downloader Resolver Service (RealNetworks Downloader Resolver Service) . (...) - C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
O23 - Service: TV Background Capture Service (TVBCS) (TVCapSvc) . (.Copyright 2004 - CLCapSvc Module.) - C:\Program Files (x86)\Hewlett-Packard\Media\TV\Kernel\TV\TVCapSvc.exe
O23 - Service: TV Task Scheduler (TVTS) (TVSched) . (.Copyright 2004 - CLSched Module.) - C:\Program Files (x86)\Hewlett-Packard\Media\TV\Kernel\TV\TVSched.exe
O23 - Service: Power Control [2009/06/20 20:54:37] ({55662437-DA8C-40c0-AADA-2C816A897A49}) . (.CyberLink Corp. - .) - C:\Program Files (x86)\Hewlett-Packard\Media\DVD\000.fcl ©

---\\ Tâches planifiées en automatique (48) - 5s
[MD5.73851EB949B54F197380A5E757BE3B98] [APT] [1hhsKIYZTrnMar2] (...) -- C:\Users\vanessa\AppData\Roaming\wS8C6RP\3ubhsdh.exe [18432]
[MD5.8C194A201698B4B4F77D974549819D1F] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [269000] ©
[MD5.DD7423ABBE2913E70D50E9318AD57EE4] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200] ©
[MD5.DD7423ABBE2913E70D50E9318AD57EE4] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200] ©
[MD5.DD7423ABBE2913E70D50E9318AD57EE4] [APT] [GoogleUpdateTaskUserS-1-5-21-899872469-3401814819-3539772478-1000Core] (.Google Inc..) -- C:\Users\vanessa\AppData\Local\Google\Update\GoogleUpdate.exe [144200] ©
[MD5.DD7423ABBE2913E70D50E9318AD57EE4] [APT] [GoogleUpdateTaskUserS-1-5-21-899872469-3401814819-3539772478-1000UA] (.Google Inc..) -- C:\Users\vanessa\AppData\Local\Google\Update\GoogleUpdate.exe [144200] ©
[MD5.0C8A70BC3BAAF7BF69DCA495C1E1AB79] [APT] [HP Health Check] (.Hewlett-Packard.) -- c:\Program Files (x86)\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe [75016] ©
[MD5.00000000000000000000000000000000] [APT] [itycCHUOs5WUsc] (...) -- C:\Users\vanessa\AppData\Roaming\itycCHUOs5WUsc.exe (.not file.) [0] =>PUP.Optional.CrossRider
[MD5.00000000000000000000000000000000] [APT] [PCDRScheduledMaintenance] (...) -- C:\Program Files\PC-Doctor for Windows\pcdr5cuiw32.exe (.not file.) [0]
[MD5.490D5ADBC56297DB10BC57496C14C357] [APT] [RealPlayerRealUpgradeLogonTaskS-1-5-21-899872469-3401814819-3539772478-1000] (.RealNetworks, Inc..) -- C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [187984] ©
[MD5.490D5ADBC56297DB10BC57496C14C357] [APT] [RealPlayerRealUpgradeScheduledTaskS-1-5-21-899872469-3401814819-3539772478-1000] (.RealNetworks, Inc..) -- C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [187984] ©
[MD5.490D5ADBC56297DB10BC57496C14C357] [APT] [RealUpgradeLogonTaskS-1-5-21-899872469-3401814819-3539772478-1000] (.RealNetworks, Inc..) -- C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [187984] ©
[MD5.490D5ADBC56297DB10BC57496C14C357] [APT] [RealUpgradeScheduledTaskS-1-5-21-899872469-3401814819-3539772478-1000] (.RealNetworks, Inc..) -- C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [187984] ©
[MD5.00000000000000000000000000000000] [APT] [VkohbGTDTCk8ud16giVyobOPq9l] (...) -- C:\Users\vanessa\AppData\Roaming\VkohbGTDTCk8ud16giVyobOPq9l.exe (.not file.) [0] =>PUP.Optional.CrossRider
[MD5.00000000000000000000000000000000] [APT] [WIN-fIGbfFfEGCfFGEGbfCfE] (...) -- C:\Users\vanessa\AppData\Roaming\~gpepdhp.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [WIN-GGfIfEGCfEGbGffIfCfEGC] (...) -- C:\Users\vanessa\AppData\Roaming\~evqxnmm.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [WIN-statsAdmin] (...) -- C:\Users\vanessa\AppData\Local\Microsoft\WinU\~gdfiole.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [WIN-statsSystem] (...) -- C:\Users\vanessa\AppData\Local\Microsoft\WinU\~rvnxwgw.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [ZCKCfKqSbesQo3jz0nPf4] (...) -- C:\Users\vanessa\AppData\Roaming\ZCKCfKqSbesQo3jz0nPf4.exe (.not file.) [0] =>PUP.Optional.CrossRider
[MD5.34EBD4FF6A24D86BB4716D6AFCC1A89B] [APT] [Apple\AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [561984] ©
O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\Tasks\Adobe Flash Player Updater.job [1002] ©
O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job [1064] ©
O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job [1068] ©
O39 - APT: GoogleUpdateTaskUserS-1-5-21-899872469-3401814819-3539772478-1000Core - (.Google Inc..) -- C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-899872469-3401814819-3539772478-1000Core.job [1034] ©
O39 - APT: GoogleUpdateTaskUserS-1-5-21-899872469-3401814819-3539772478-1000UA - (.Google Inc..) -- C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-899872469-3401814819-3539772478-1000UA.job [1086] ©
O39 - APT: itycCHUOs5WUsc - (...) -- C:\Windows\Tasks\itycCHUOs5WUsc.job [1008] =>PUP.Optional.CrossRider
O39 - APT: PCDRScheduledMaintenance - (...) -- C:\Windows\Tasks\PCDRScheduledMaintenance.job [456]
O39 - APT: VkohbGTDTCk8ud16giVyobOPq9l - (...) -- C:\Windows\Tasks\VkohbGTDTCk8ud16giVyobOPq9l.job [1034] =>PUP.Optional.CrossRider
O39 - APT: ZCKCfKqSbesQo3jz0nPf4 - (...) -- C:\Windows\Tasks\ZCKCfKqSbesQo3jz0nPf4.job [1022] =>PUP.Optional.CrossRider
O39 - APT: 1hhsKIYZTrnMar2 - (...) -- C:\Windows\System32\Tasks\1hhsKIYZTrnMar2 [3242]
O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Tasks\Adobe Flash Player Updater [3854] ©
O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore [3812] ©
O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA [4064] ©
O39 - APT: GoogleUpdateTaskUserS-1-5-21-899872469-3401814819-3539772478-1000Core - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-899872469-3401814819-3539772478-1000Core [3578] ©
O39 - APT: GoogleUpdateTaskUserS-1-5-21-899872469-3401814819-3539772478-1000UA - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-899872469-3401814819-3539772478-1000UA [3974] ©
O39 - APT: HP Health Check - (.Hewlett-Packard.) -- C:\Windows\System32\Tasks\HP Health Check [3578] ©
O39 - APT: itycCHUOs5WUsc - (...) -- C:\Windows\System32\Tasks\itycCHUOs5WUsc [4048] =>PUP.Optional.CrossRider
O39 - APT: PCDRScheduledMaintenance - (...) -- C:\Windows\System32\Tasks\PCDRScheduledMaintenance [3828]
O39 - APT: RealPlayerRealUpgradeLogonTaskS-1-5-21-899872469-3401814819-3539772478-1000 - (.RealNetworks, Inc..) -- C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-899872469-3401814819-3539772478-1000 [3224] ©
O39 - APT: RealPlayerRealUpgradeScheduledTaskS-1-5-21-899872469-3401814819-3539772478-1000 - (.RealNetworks, Inc..) -- C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-899872469-3401814819-3539772478-1000 [3354] ©
O39 - APT: RealUpgradeLogonTaskS-1-5-21-899872469-3401814819-3539772478-1000 - (.RealNetworks, Inc..) -- C:\Windows\System32\Tasks\RealUpgradeLogonTaskS-1-5-21-899872469-3401814819-3539772478-1000 [3224] ©
O39 - APT: RealUpgradeScheduledTaskS-1-5-21-899872469-3401814819-3539772478-1000 - (.RealNetworks, Inc..) -- C:\Windows\System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-899872469-3401814819-3539772478-1000 [3354] ©
O39 - APT: VkohbGTDTCk8ud16giVyobOPq9l - (...) -- C:\Windows\System32\Tasks\VkohbGTDTCk8ud16giVyobOPq9l [4074] =>PUP.Optional.CrossRider
O39 - APT: WIN-fIGbfFfEGCfFGEGbfCfE - (...) -- C:\Windows\System32\Tasks\WIN-fIGbfFfEGCfFGEGbfCfE [3188]
O39 - APT: WIN-GGfIfEGCfEGbGffIfCfEGC - (...) -- C:\Windows\System32\Tasks\WIN-GGfIfEGCfEGbGffIfCfEGC [3188]
O39 - APT: WIN-statsAdmin - (...) -- C:\Windows\System32\Tasks\WIN-statsAdmin [3310]
O39 - APT: WIN-statsSystem - (...) -- C:\Windows\System32\Tasks\WIN-statsSystem [3240]
O39 - APT: ZCKCfKqSbesQo3jz0nPf4 - (...) -- C:\Windows\System32\Tasks\ZCKCfKqSbesQo3jz0nPf4 [4062] =>PUP.Optional.CrossRider

---\\ Logiciels installés (99) - 13s
O42 - Logiciel: Windows Driver Package - LeapFrog (FlyUsb) USB (11/05/2008 1.1.1.0) - (.LeapFrog.) [HKLM][64Bits] -- 781745E87AFF80C0C1388CFF79D19ECAB2E9BB47 ©
O42 - Logiciel: HP Imaging Device Functions 8.0 - (.HP.) [HKLM][64Bits] -- HP Imaging Device Functions ©
O42 - Logiciel: HP Solution Center 8.0 - (.HP.) [HKLM][64Bits] -- HP Solution Center & Imaging Support Tools ©
O42 - Logiciel: HP Customer Participation Program 8.0 - (.HP.) [HKLM][64Bits] -- HPExtendedCapabilities ©
O42 - Logiciel: HP OCR Software 8.0 - (.HP.) [HKLM][64Bits] -- HPOCR ©
O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM][64Bits] -- {0225AD21-F3E2-4916-BFF3-65D3F9052582} ©
O42 - Logiciel: HP Photosmart.All-In-One Driver Software 8.0 .A - (.HP.) [HKLM][64Bits] -- {282E5AB2-8E47-4571-B6FA-6B512555B557} ©
O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM][64Bits] -- {2F72F540-1F60-4266-9506-952B21D6640D} ©
O42 - Logiciel: Driver pour mobile - (...) [HKLM][64Bits] -- {6CFADEA7-D909-405F-8B40-21DBFBBE0389}_is1
O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM][64Bits] -- {6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D} ©
O42 - Logiciel: 64 Bit HP CIO Components Installer - (.Hewlett-Packard.) [HKLM][64Bits] -- {78F697ED-EC97-4D8D-881D-838984EA9855} ©
O42 - Logiciel: Internet Explorer (Enable DEP) - (...) [HKLM][64Bits] -- {a9264802-8a7a-40fe-a135-5c6d204aed7a}.sdb
O42 - Logiciel: SAMSUNG USB Driver for Mobile Phones - (.SAMSUNG Electronics Co., Ltd..) [HKLM][64Bits] -- {D0795B21-0CDA-4a92-AB9E-6E92D8111E44} ©
O42 - Logiciel: HP MediaSmart SmartMenu - (.Hewlett-Packard.) [HKLM][64Bits] -- {F1568AA6-5982-4AFB-A871-C68E4328BC3B} ©
O42 - Logiciel: Adobe Flash Player 19 ActiveX - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player ActiveX ©
O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player Plugin ©
O42 - Logiciel: Adobe Shockwave Player 11.5 - (.Adobe Systems, Inc..) [HKLM][64Bits] -- Adobe Shockwave Player ©
O42 - Logiciel: AXIS Media Control Embedded - (...) [HKLM][64Bits] -- AXIS Media Control Embedded
O42 - Logiciel: CCleaner (remove only) - (.Piriform.) [HKLM][64Bits] -- CCleaner ©
O42 - Logiciel: CyberLink DVD Suite Deluxe - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79} ©
O42 - Logiciel: Power2Go - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658} ©
O42 - Logiciel: HP MediaSmart TV - (.Hewlett-Packard.) [HKLM][64Bits] -- InstallShield_{67626E09-5366-4480-8F1E-93FADF50CA15} ©
O42 - Logiciel: HP MediaSmart Music/Photo/Video - (.Hewlett-Packard.) [HKLM][64Bits] -- InstallShield_{B2EE25B9-5B00-4ACF-94F0-92433C28C39E} ©
O42 - Logiciel: LabelPrint - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243} ©
O42 - Logiciel: PowerDirector - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1} ©
O42 - Logiciel: Kies - (.Nom de votre société.) [HKLM][64Bits] -- InstallShield_{D6CD26FD-CD7F-4C86-96A3-EEBFABE5FE47}
O42 - Logiciel: HP MediaSmart DVD - (.Hewlett-Packard.) [HKLM][64Bits] -- InstallShield_{DCCAD079-F92C-44DA-B258-624FC6517A5A} ©
O42 - Logiciel: Kafeo V6.3.8 - (.Apiris.) [HKLM][64Bits] -- Kafeo_is1 ©
O42 - Logiciel: Solution de clavier multimédia amélioré - (.Hewlett-Packard.) [HKLM][64Bits] -- KBD ©
O42 - Logiciel: Dongle Sagem 760N - (...) [HKLM][64Bits] -- LIVEBOX_SAGEM_760N
O42 - Logiciel: Malwarebytes Anti-Malware version 2.2.0.1024 - (.Malwarebytes.) [HKLM][64Bits] -- Malwarebytes Anti-Malware_is1 ©
O42 - Logiciel: Netscape Browser (remove only) - (...) [HKLM][64Bits] -- Netscape Browser
O42 - Logiciel: Netscape Navigator (9.0.0.6) - (.Netscape.) [HKLM][64Bits] -- Netscape Navigator (9.0.0.6)
O42 - Logiciel: Online Games Manager v1.30 - (.Real Networks, Inc..) [HKLM][64Bits] -- Online Games Manager ©
O42 - Logiciel: Python 2.6 pywin32-212 - (.Python Software Foundation.) [HKLM][64Bits] -- pywin32-py2.6 ©
O42 - Logiciel: RealPlayer - (.RealNetworks.) [HKLM][64Bits] -- RealPlayer 16.0 ©
O42 - Logiciel: Sandlot Games Client Services 1.2.2 - (.Sandlot Games.) [HKLM][64Bits] -- Sandlot Games Client Services 1.2.2_is1
O42 - Logiciel: My HP Games - (.WildTangent.) [HKLM][64Bits] -- WildTangent hp Master Uninstall © =>.WildTangent
O42 - Logiciel: Logiciel d'archivage WinRAR - (...) [HKLM][64Bits] -- WinRAR archiver
O42 - Logiciel: HP Active Support Library - (.Hewlett-Packard.) [HKLM][64Bits] -- {0295F89F-F698-4101-9A7D-49F407EC2D82} ©
O42 - Logiciel: HP Picasso Media Center Add-In - (.Hewlett-Packard Development Company, L.P..) [HKLM][64Bits] -- {03BF5CB1-B72E-4CA6-A278-F65680F05420} ©
O42 - Logiciel: QuickTime - (.Apple Inc..) [HKLM][64Bits] -- {0E64B098-8018-4256-BA23-C316A43AD9B0} ©
O42 - Logiciel: LetsTunes - (.Secure Digital Services.) [HKLM][64Bits] -- {0F4CA3FF-B735-4933-9295-5B5052F63BD2} =>PUP.Optional.SPointer
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM][64Bits] -- {18455581-E099-4BA8-BC6B-F34B2F06600C} ©
O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM][64Bits] -- {1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4} ©
O42 - Logiciel: CyberLink DVD Suite Deluxe - (.CyberLink Corp..) [HKLM][64Bits] -- {1FBF6C24-C1FD-4101-A42B-0C564F9E8E79} ©
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM][64Bits] -- {2318C2B1-4965-11d4-9B18-009027A5CD4F} ©
O42 - Logiciel: ActiveCheck component for HP Active Support Library - (.Hewlett-Packard.) [HKLM][64Bits] -- {254C37AA-6B72-4300-84F6-98A82419187E} ©
O42 - Logiciel: Java(TM) 6 Update 29 - (.Sun Microsystems, Inc..) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F83216014FF} ©
O42 - Logiciel: RealUpgrade 1.1 - (.RealNetworks, Inc..) [HKLM][64Bits] -- {28C2DED6-325B-4CC7-983A-1777C8F7FBAB} ©
O42 - Logiciel: HP Product Assistant - (.Hewlett-Packard.) [HKLM][64Bits] -- {36FDBE6E-6684-462B-AE98-9A39A1B200CC} ©
O42 - Logiciel: Microsoft Works - (.Microsoft Corporation.) [HKLM][64Bits] -- {3B160861-7250-451E-B5EE-8B92BF30A710} ©
O42 - Logiciel: Mega Manager - (.Megaupload Limited.) [HKLM][64Bits] -- {3B6E3FC6-274C-4B6C-BC85-5C3B15DE18E2}
O42 - Logiciel: RealDownloader - (.RealNetworks, Inc..) [HKLM][64Bits] -- {3DC873BB-FFE3-46BF-9701-26B9AE371F9F} ©
O42 - Logiciel: Power2Go - (.CyberLink Corp..) [HKLM][64Bits] -- {40BF1E83-20EB-11D8-97C5-0009C5020658} ©
O42 - Logiciel: HP Advisor - (.Hewlett-Packard.) [HKLM][64Bits] -- {40FB8D7C-6FF8-4AF2-BC8B-0B1DB32AF04B} ©
O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM][64Bits] -- {45C56AA7-ED1B-4800-A97F-EDDF3F3520B1} ©
O42 - Logiciel: HP Update - (.Hewlett-Packard.) [HKLM][64Bits] -- {47F36D92-E58E-456D-B73C-3382737E4C42} ©
O42 - Logiciel: Google Earth - (.Google.) [HKLM][64Bits] -- {4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E} ©
O42 - Logiciel: ArcSoft Print Creations - Photo Book - (.ArcSoft.) [HKLM][64Bits] -- {56589DFE-0C29-4DFE-8E42-887B771ECD23} ©
O42 - Logiciel: Segoe UI - (.Microsoft Corp.) [HKLM][64Bits] -- {5DD4FCBD-A3C1-4155-9E17-4161C70AAABA} ©
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {60EC980A-BDA2-4CB6-A427-B07A5498B4CA} ©
O42 - Logiciel: HPAsset component for HP Active Support Library - (.Hewlett-Packard.) [HKLM][64Bits] -- {669D4A35-146B-4314-89F1-1AC3D7B88367} ©
O42 - Logiciel: HP MediaSmart TV - (.Hewlett-Packard.) [HKLM][64Bits] -- {67626E09-5366-4480-8F1E-93FADF50CA15} ©
O42 - Logiciel: Complément Messenger - (.Microsoft Corporation.) [HKLM][64Bits] -- {6E5324C1-84FC-4F76-9A3A-C65E07F80EE6} ©
O42 - Logiciel: Bing Bar - (.Microsoft Corporation.) [HKLM][64Bits] -- {77F8A71E-3515-4832-B8B2-2F1EDBD2E0F1} ©
O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM][64Bits] -- {789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE} ©
O42 - Logiciel: LightScribe System Software - (.LightScribe.) [HKLM][64Bits] -- {82EF29B1-9B60-4142-A155-0599216DD053} ©
O42 - Logiciel: ArcSoft Print Creations - (.ArcSoft.) [HKLM][64Bits] -- {85F1B81D-72C5-4357-81F9-B0A1D71DF59B} ©
O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM][64Bits] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71} ©
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM][64Bits] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00} ©
O42 - Logiciel: Mesh Runtime - (.Microsoft Corporation.) [HKLM][64Bits] -- {8C6D6116-B724-4810-8F2D-D047E6B7D68E} ©
O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM][64Bits] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F} ©
O42 - Logiciel: TomTom HOME Visual Studio Merge Modules - (.TomTom International B.V..) [HKLM][64Bits] -- {8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533} ©
O42 - Logiciel: HP Total Care Setup - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {95A747E0-DF19-46CB-A622-20A0107201BD} ©
O42 - Logiciel: IZArc 3.81 - (.Ivan Zahariev.) [HKLM][64Bits] -- {97C82B44-D408-4F14-9252-47FC1636D23E}_is1 ©
O42 - Logiciel: Python 2.6.1 - (.Python Software Foundation.) [HKLM][64Bits] -- {9CC89170-000B-457D-91F1-53691F85B223} ©
O42 - Logiciel: HP Recovery Manager RSS - (.Hewlet Packard Company.) [HKLM][64Bits] -- {A0640EC2-B97E-4FC1-AD14-227C9E386BB4} ©
O42 - Logiciel: Adobe Reader 9.5.5 - Français - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-7AD7-1036-7B44-A95000000001} ©
O42 - Logiciel: Spelling Dictionaries Support For Adobe Reader 9 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-7AD7-5464-3428-900000000004} ©
O42 - Logiciel: HP MediaSmart Music/Photo/Video - (.Hewlett-Packard.) [HKLM][64Bits] -- {B2EE25B9-5B00-4ACF-94F0-92433C28C39E} ©
O42 - Logiciel: PHOTOfunSTUDIO 6.3 HD Lite Edition - (.Panasonic Corporation.) [HKLM][64Bits] -- {BBCC9BEA-BC70-4D48-BF73-97E5250FC790} ©
O42 - Logiciel: LabelPrint - (.CyberLink Corp..) [HKLM][64Bits] -- {C59C179C-668D-49A9-B6EA-0121CCFC1243} ©
O42 - Logiciel: PowerDirector - (.CyberLink Corp..) [HKLM][64Bits] -- {CB099890-1D5F-11D5-9EA9-0050BAE317E1} ©
O42 - Logiciel: MSVCRT_amd64 - (.Microsoft.) [HKLM][64Bits] -- {D0B44725-3666-492D-BEF6-587A14BD9BD9} ©
O42 - Logiciel: Kies - (.Nom de votre société.) [HKLM][64Bits] -- {D6CD26FD-CD7F-4C86-96A3-EEBFABE5FE47}
O42 - Logiciel: muvee Reveal - (.muvee Technologies Pte Ltd.) [HKLM][64Bits] -- {D722CF4B-4B06-BF11-FDEA-BD1B319FEA57}
O42 - Logiciel: HP MediaSmart DVD - (.Hewlett-Packard.) [HKLM][64Bits] -- {DCCAD079-F92C-44DA-B258-624FC6517A5A} ©
O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM][64Bits] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF} ©
O42 - Logiciel: HP Customer Experience Enhancements - (.Hewlett-Packard.) [HKLM][64Bits] -- {E1591139-8B44-411B-A81B-D35F83A0565A} ©
O42 - Logiciel: ArcSoft Print Creations - Album Page - (.ArcSoft.) [HKLM][64Bits] -- {E6B4117F-AC59-4B13-9274-EB136E8897EE} ©
O42 - Logiciel: Catalyst Control Center - Branding - (.ATI.) [HKLM][64Bits] -- {E79945AB-C672-48F3-8BC3-E57FE021DFF9} ©
O42 - Logiciel: HP Photosmart Essential - (.HP.) [HKLM][64Bits] -- {EB21A812-671B-4D08-B974-2A347F0D8F70} ©
O42 - Logiciel: HPSSupply - (.Nom de votre société.) [HKLM][64Bits] -- {EB75DE50-5754-4F6F-875D-126EDF8E4CB3}
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC} ©
O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM][64Bits] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC} ©
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKCU][64Bits] -- Google Chrome ©
O42 - Logiciel: Notification de cadeaux MSN - (.Microsoft.) [HKCU][64Bits] -- Notification de cadeaux MSN ©
O42 - Logiciel: Unity Web Player - (.Unity Technologies ApS.) [HKCU][64Bits] -- UnityWebPlayer ©

---\\ HKCU & HKLM Software Keys (150) - 13s
HKLM\SOFTWARE\Wow6432Node\Adobe
HKLM\SOFTWARE\Wow6432Node\AdsFix
HKLM\SOFTWARE\Wow6432Node\AdwCleaner
HKLM\SOFTWARE\Wow6432Node\ALWIL Software
HKLM\SOFTWARE\Wow6432Node\America Online
HKLM\SOFTWARE\Wow6432Node\AppDataLow
HKLM\SOFTWARE\Wow6432Node\Apple Computer, Inc.
HKLM\SOFTWARE\Wow6432Node\Apple Inc.
HKLM\SOFTWARE\Wow6432Node\ArcSoft
HKLM\SOFTWARE\Wow6432Node\ATI
HKLM\SOFTWARE\Wow6432Node\ATI Technologies
HKLM\SOFTWARE\Wow6432Node\Boonty
HKLM\SOFTWARE\Wow6432Node\BVRP Software
HKLM\SOFTWARE\Wow6432Node\CCleaner
HKLM\SOFTWARE\Wow6432Node\CDDB
HKLM\SOFTWARE\Wow6432Node\CLSID
HKLM\SOFTWARE\Wow6432Node\CyberLink
HKLM\SOFTWARE\Wow6432Node\Debug
HKLM\SOFTWARE\Wow6432Node\EasyBits
HKLM\SOFTWARE\Wow6432Node\Google
HKLM\SOFTWARE\Wow6432Node\Hewlett-Packard
HKLM\SOFTWARE\Wow6432Node\Hewlett-Packard Company
HKLM\SOFTWARE\Wow6432Node\Intel
HKLM\SOFTWARE\Wow6432Node\JavaSoft
HKLM\SOFTWARE\Wow6432Node\JreMetrics
HKLM\SOFTWARE\Wow6432Node\LetsTunes
HKLM\SOFTWARE\Wow6432Node\Licenses
HKLM\SOFTWARE\Wow6432Node\LightScribe
HKLM\SOFTWARE\Wow6432Node\Macromedia
HKLM\SOFTWARE\Wow6432Node\Malwarebytes' Anti-Malware
HKLM\SOFTWARE\Wow6432Node\Megaupload
HKLM\SOFTWARE\Wow6432Node\Megaupload Limited
HKLM\SOFTWARE\Wow6432Node\MimarSinan
HKLM\SOFTWARE\Wow6432Node\Mozilla
HKLM\SOFTWARE\Wow6432Node\mozilla.org
HKLM\SOFTWARE\Wow6432Node\MozillaPlugins
HKLM\SOFTWARE\Wow6432Node\MusicNet
HKLM\SOFTWARE\Wow6432Node\Netscape
HKLM\SOFTWARE\Wow6432Node\ODBC
HKLM\SOFTWARE\Wow6432Node\Panasonic
HKLM\SOFTWARE\Wow6432Node\PDF Suite 2015
HKLM\SOFTWARE\Wow6432Node\PluginHp
HKLM\SOFTWARE\Wow6432Node\Preclick
HKLM\SOFTWARE\Wow6432Node\RealNetworks
HKLM\SOFTWARE\Wow6432Node\Realtek
HKLM\SOFTWARE\Wow6432Node\Realtek Semiconductor Corp.
HKLM\SOFTWARE\Wow6432Node\RegisteredApplications
HKLM\SOFTWARE\Wow6432Node\Samsung
HKLM\SOFTWARE\Wow6432Node\SecureDigitalServices
HKLM\SOFTWARE\Wow6432Node\Skype
HKLM\SOFTWARE\Wow6432Node\Symantec
HKLM\SOFTWARE\Wow6432Node\Sysinternals
HKLM\SOFTWARE\Wow6432Node\Techcity
HKLM\SOFTWARE\Wow6432Node\Volatile
HKLM\SOFTWARE\Wow6432Node\WildTangent
HKLM\SOFTWARE\Wow6432Node\Wilson WindowWare
HKLM\SOFTWARE\Wow6432Node\Windows
HKLM\SOFTWARE\Wow6432Node\WinRAR
HKLM\SOFTWARE\Wow6432Node\WinU
HKLM\SOFTWARE\Wow6432Node\Xing Technology Corp.
HKLM\SOFTWARE\Wow6432Node\ZalmanInstaller_otshot
HKCU\SOFTWARE\77-Zip
HKCU\SOFTWARE\Adobe
HKCU\SOFTWARE\AdsFix
HKCU\SOFTWARE\ALWIL Software
HKCU\SOFTWARE\AOL
HKCU\SOFTWARE\AppDataLow
HKCU\SOFTWARE\Apple Computer, Inc.
HKCU\SOFTWARE\Apple Inc.
HKCU\SOFTWARE\ArcSoft
HKCU\SOFTWARE\Astar Games
HKCU\SOFTWARE\ATI
HKCU\SOFTWARE\ATI Technologies Inc.
HKCU\SOFTWARE\BullGuard Ltd.
HKCU\SOFTWARE\BVRP Software
HKCU\SOFTWARE\Chromium
HKCU\SOFTWARE\CyberLink
HKCU\SOFTWARE\DivXNetworks
HKCU\SOFTWARE\DSS
HKCU\SOFTWARE\EasyBits
HKCU\SOFTWARE\ESET
HKCU\SOFTWARE\Gabest
HKCU\SOFTWARE\GameHouse
HKCU\SOFTWARE\GAMEON
HKCU\SOFTWARE\Google
HKCU\SOFTWARE\Hewlett-Packard
HKCU\SOFTWARE\HookNetwork
HKCU\SOFTWARE\IM Providers
HKCU\SOFTWARE\InstallPath
HKCU\SOFTWARE\Intenium
HKCU\SOFTWARE\itycCHUOs5WUsc
HKCU\SOFTWARE\IZSoftware
HKCU\SOFTWARE\JavaSoft
HKCU\SOFTWARE\JEDI-VCL
HKCU\SOFTWARE\JollyBear
HKCU\SOFTWARE\keyhole.com
HKCU\SOFTWARE\LetsTunes
HKCU\SOFTWARE\Licenses
HKCU\SOFTWARE\LightScribe
HKCU\SOFTWARE\Little Worlds Online
HKCU\SOFTWARE\Local AppWizard-Generated Applications
HKCU\SOFTWARE\LogiGear
HKCU\SOFTWARE\Macromedia
HKCU\SOFTWARE\Macrovision
HKCU\SOFTWARE\Magnet
HKCU\SOFTWARE\MainConcept (Muvee Consumer)
HKCU\SOFTWARE\MainConcept (Muvee)
HKCU\SOFTWARE\MainConcept (Muvee2)
HKCU\SOFTWARE\Malwarebytes' Anti-Malware
HKCU\SOFTWARE\Megaupload
HKCU\SOFTWARE\MimarSinan
HKCU\SOFTWARE\Mozilla
HKCU\SOFTWARE\MozillaPlugins
HKCU\SOFTWARE\Netscape
HKCU\SOFTWARE\Northcode Inc
HKCU\SOFTWARE\ODBC
HKCU\SOFTWARE\Opera Software
HKCU\SOFTWARE\Panasonic
HKCU\SOFTWARE\PDF Suite 2015
HKCU\SOFTWARE\Piriform
HKCU\SOFTWARE\QtProject
HKCU\SOFTWARE\RealNetworks
HKCU\SOFTWARE\Samsung
HKCU\SOFTWARE\Skype
HKCU\SOFTWARE\Software
HKCU\SOFTWARE\Sysinternals
HKCU\SOFTWARE\TeleCharger
HKCU\SOFTWARE\Test3D
HKCU\SOFTWARE\TomTom
HKCU\SOFTWARE\Trolltech
HKCU\SOFTWARE\tstamptoken =>PUP.Optional.MaxComputerCleaner
HKCU\SOFTWARE\Unity
HKCU\SOFTWARE\VkohbGTDTCk8ud16giVyobOPq9l
HKCU\SOFTWARE\WinRAR
HKCU\SOFTWARE\WinRAR SFX
HKCU\SOFTWARE\Wow6432Node
HKCU\SOFTWARE\wvqQMLwVuZ
HKCU\SOFTWARE\ZCKCfKqSbesQo3jz0nPf4
HKCU\SOFTWARE\ZebHelpProcess Helper
HKCU\SOFTWARE\Zylom
HKCU\SOFTWARE\ƒAƒvƒŠƒP[ƒVƒ‡ƒ“ ƒEƒBƒU[ƒh‚Ő¶¬‚³‚ꂽƒ[ƒJƒ‹ ƒAƒvƒŠƒP[ƒVƒ‡ƒ“
HKCU\SOFTWARE\AppDataLow\Aurigma
HKCU\SOFTWARE\AppDataLow\Software
HKCU\SOFTWARE\AppDataLow\Software\Adobe
HKCU\SOFTWARE\AppDataLow\Software\Google
HKCU\SOFTWARE\AppDataLow\Software\Macromedia
HKCU\SOFTWARE\AppDataLow\Software\MarkAny
HKCU\SOFTWARE\AppDataLow\Software\SpeedCheck =>PUP.Optional.SpeedCheck
HKCU\SOFTWARE\AppDataLow\Software\Unity
HKCU\SOFTWARE\AppDataLow\Software\Yahoo

---\\ Contenu des dossiers Programmes (506) - 24s
O43 - CFD: 2015/10/20 20:44:40 - [0] D -- C:\Program Files (x86)\6fcb1cab-aba1-444a-9c4f-fdaa667ac665 =>PUP.Optional.CrossRider
O43 - CFD: 2015/10/20 20:44:40 - [0] D -- C:\Program Files (x86)\8604e57e-5945-4d73-8b8c-862d49c7952e =>PUP.Optional.CrossRider
O43 - CFD: 2015/10/20 20:44:41 - [0] D -- C:\Program Files (x86)\8ca9f610-b9f7-4afe-a3b3-1325497c25a8 =>PUP.Optional.CrossRider
O43 - CFD: 2015/10/20 20:44:41 - [0] D -- C:\Program Files (x86)\918916a2-e42b-4617-a406-afefa2947eda =>PUP.Optional.CrossRider
O43 - CFD: 2015/10/20 20:44:41 - [0] D -- C:\Program Files (x86)\9aa9f672-7f6c-488d-bbb2-8160ba3d1f0b =>PUP.Optional.CrossRider
O43 - CFD: 2015/10/20 20:44:42 - [] D -- C:\Program Files (x86)\Activation Assistant for the 2007 Microsoft Office suites
O43 - CFD: 2015/10/20 20:44:42 - [] D -- C:\Program Files (x86)\Adobe
O43 - CFD: 2014/10/15 16:03:57 - [0] D -- C:\Program Files (x86)\AOL
O43 - CFD: 2012/06/17 13:47:57 - [] D -- C:\Program Files (x86)\Apple Software Update
O43 - CFD: 2015/10/20 10:52:36 - [] D -- C:\Program Files (x86)\ArcSoft
O43 - CFD: 2013/06/22 13:33:13 - [] D -- C:\Program Files (x86)\Ask(0).com
O43 - CFD: 2009/03/06 18:11:56 - [] D -- C:\Program Files (x86)\ATI Technologies
O43 - CFD: 2009/08/14 16:03:21 - [] D -- C:\Program Files (x86)\Axis Communications
O43 - CFD: 2013/02/24 11:23:15 - [] D -- C:\Program Files (x86)\Bonjour
O43 - CFD: 2012/10/03 09:48:10 - [] D -- C:\Program Files (x86)\BoontyGames
O43 - CFD: 2009/08/14 15:41:51 - [] D -- C:\Program Files (x86)\CCleaner
O43 - CFD: 2015/10/19 19:09:47 - [] D -- C:\Program Files (x86)\Common Files
O43 - CFD: 2009/03/06 18:26:31 - [] D -- C:\Program Files (x86)\Cyberlink
O43 - CFD: 2015/10/20 20:44:58 - [0] D -- C:\Program Files (x86)\e89fa6e9-da9c-4d6d-9eeb-37d5d65ba570 =>PUP.Optional.CrossRider
O43 - CFD: 2015/10/20 20:44:58 - [0] D -- C:\Program Files (x86)\fe792051-43c4-45c2-ae29-496784619430 =>PUP.Optional.CrossRider
O43 - CFD: 2013/12/11 10:46:35 - [] D -- C:\Program Files (x86)\Google
O43 - CFD: 2015/02/09 11:38:14 - [0] D -- C:\Program Files (x86)\GUMCA41.tmp
O43 - CFD: 2010/11/09 14:33:03 - [] D -- C:\Program Files (x86)\Hewlett-Packard
O43 - CFD: 2009/03/06 18:34:20 - [] D -- C:\Program Files (x86)\Hewlett-Packard Company
O43 - CFD: 2009/07/08 08:57:25 - [] D -- C:\Program Files (x86)\HP
O43 - CFD: 2009/03/06 18:40:11 - [] D -- C:\Program Files (x86)\HP Games
O43 - CFD: 2015/10/20 10:52:37 - [] HD -- C:\Program Files (x86)\InstallShield Installation Information
O43 - CFD: 2015/10/18 19:08:54 - [] D -- C:\Program Files (x86)\Internet Explorer
O43 - CFD: 2013/02/24 11:28:34 - [] D -- C:\Program Files (x86)\iTunes
O43 - CFD: 2011/03/11 09:49:37 - [] D -- C:\Program Files (x86)\IZArc
O43 - CFD: 2013/06/22 13:29:20 - [] D -- C:\Program Files (x86)\Java
O43 - CFD: 2013/12/03 18:45:38 - [] D -- C:\Program Files (x86)\LeapFrog
O43 - CFD: 2010/12/17 16:11:30 - [] D -- C:\Program Files (x86)\LetsTunes
O43 - CFD: 2015/10/22 14:18:37 - [] D -- C:\Program Files (x86)\Malwarebytes Anti-Malware
O43 - CFD: 2012/12/12 16:48:48 - [0] D -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
O43 - CFD: 2012/12/02 14:31:44 - [] D -- C:\Program Files (x86)\MarkAny
O43 - CFD: 2011/02/03 10:03:31 - [] D -- C:\Program Files (x86)\Megaupload
O43 - CFD: 2011/03/26 12:40:20 - [] D -- C:\Program Files (x86)\Microsoft
O43 - CFD: 2011/07/15 10:23:05 - [] D -- C:\Program Files (x86)\Microsoft Office
O43 - CFD: 2015/08/14 11:45:31 - [] D -- C:\Program Files (x86)\Microsoft Silverlight
O43 - CFD: 2013/06/22 09:54:30 - [] D -- C:\Program Files (x86)\Microsoft SQL Server Compact Edition
O43 - CFD: 2013/06/22 09:54:31 - [] D -- C:\Program Files (x86)\Microsoft Synchronization Services
O43 - CFD: 2012/10/11 07:44:15 - [] D -- C:\Program Files (x86)\Microsoft Works
O43 - CFD: 2010/06/25 14:52:49 - [] D -- C:\Program Files (x86)\Microsoft.NET
O43 - CFD: 2015/10/20 07:48:22 - [] D -- C:\Program Files (x86)\Mozilla Firefox
O43 - CFD: 2015/10/20 07:48:22 - [] D -- C:\Program Files (x86)\Mozilla Maintenance Service
O43 - CFD: 2006/11/02 17:07:27 - [] D -- C:\Program Files (x86)\MSBuild
O43 - CFD: 2015/09/25 12:27:32 - [] D -- C:\Program Files (x86)\MSECache
O43 - CFD: 2009/06/12 12:41:40 - [0] D -- C:\Program Files (x86)\MSXML 4.0
O43 - CFD: 2009/03/06 18:30:41 - [] D -- C:\Program Files (x86)\muvee Technologies
O43 - CFD: 2010/10/16 13:47:16 - [] D -- C:\Program Files (x86)\Netscape
O43 - CFD: 2009/12/09 15:22:02 - [] D -- C:\Program Files (x86)\Oberon Media
O43 - CFD: 2012/09/18 19:07:09 - [] D -- C:\Program Files (x86)\Online Games Manager
O43 - CFD: 2009/06/11 18:24:32 - [] RD -- C:\Program Files (x86)\Online Services
O43 - CFD: 2015/10/13 20:21:18 - [0] D -- C:\Program Files (x86)\Opera
O43 - CFD: 2011/05/13 08:59:39 - [] D -- C:\Program Files (x86)\Orange
O43 - CFD: 2013/06/22 09:56:15 - [] D -- C:\Program Files (x86)\Panasonic
O43 - CFD: 2012/12/21 16:01:10 - [] D -- C:\Program Files (x86)\PC Connectivity Solution
O43 - CFD: 2009/03/06 17:56:04 - [] D -- C:\Program Files (x86)\Python
O43 - CFD: 2012/06/17 13:50:58 - [] D -- C:\Program Files (x86)\QuickTime
O43 - CFD: 2013/07/09 08:50:40 - [] D -- C:\Program Files (x86)\Real
O43 - CFD: 2013/07/09 08:50:56 - [] D -- C:\Program Files (x86)\RealNetworks
O43 - CFD: 2009/03/06 18:13:19 - [] D -- C:\Program Files (x86)\Realtek
O43 - CFD: 2006/11/02 17:07:27 - [] D -- C:\Program Files (x86)\Reference Assemblies
O43 - CFD: 2013/03/31 17:42:05 - [] D -- C:\Program Files (x86)\RocketPDF
O43 - CFD: 2015/01/03 17:59:37 - [] D -- C:\Program Files (x86)\Samsung
O43 - CFD: 2015/10/20 12:43:47 - [] D -- C:\Program Files (x86)\SMINST
O43 - CFD: 2015/10/20 12:17:04 - [] D -- C:\Program Files (x86)\Software =>PUP.Optional.Boxore
O43 - CFD: 2011/05/13 08:56:48 - [] D -- C:\Program Files (x86)\Techcity
O43 - CFD: 2009/03/06 18:13:29 - [0] HD -- C:\Program Files (x86)\Temp
O43 - CFD: 2012/06/07 12:59:58 - [] D -- C:\Program Files (x86)\TomTom International B.V
O43 - CFD: 2013/03/31 17:44:22 - [] HD -- C:\Program Files (x86)\Uninstall Information
O43 - CFD: 2009/09/27 11:30:34 - [] D -- C:\Program Files (x86)\Windows Calendar
O43 - CFD: 2008/01/21 05:09:47 - [] D -- C:\Program Files (x86)\Windows Collaboration
O43 - CFD: 2009/03/07 01:42:10 - [] D -- C:\Program Files (x86)\Windows Defender
O43 - CFD: 2013/02/27 12:45:24 - [] D -- C:\Program Files (x86)\Windows Live
O43 - CFD: 2012/04/12 08:05:34 - [] D -- C:\Program Files (x86)\Windows Mail
O43 - CFD: 2015/06/14 18:50:42 - [] D -- C:\Program Files (x86)\Windows Media Player
O43 - CFD: 2006/11/02 17:07:27 - [] D -- C:\Program Files (x86)\Windows NT
O43 - CFD: 2009/09/27 11:30:34 - [] D -- C:\Program Files (x86)\Windows Photo Gallery
O43 - CFD: 2009/11/17 19:16:47 - [] D -- C:\Program Files (x86)\Windows Portable Devices
O43 - CFD: 2009/09/27 11:30:34 - [] D -- C:\Program Files (x86)\Windows Sidebar
O43 - CFD: 2010/01/04 12:33:15 - [] D -- C:\Program Files (x86)\WinRAR
O43 - CFD: 2015/10/21 11:48:35 - [] D -- C:\Program Files (x86)\Yahoo!
O43 - CFD: 2015/10/21 16:45:29 - [] D -- C:\Program Files (x86)\ZHPFix
O43 - CFD: 2011/02/25 09:41:33 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 2011/02/25 09:41:33 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 2014/01/08 15:45:02 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ArcSoft Connect
O43 - CFD: 2014/01/08 15:45:02 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ArcSoft Print Creations
O43 - CFD: 2012/12/13 13:44:37 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bitdefender 2013
O43 - CFD: 2012/10/03 09:48:07 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BoontyGames
O43 - CFD: 2009/03/06 18:11:58 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Catalyst Control Center
O43 - CFD: 2008/01/21 05:20:45 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Extras and Upgrades
O43 - CFD: 2009/03/06 18:40:13 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
O43 - CFD: 2013/12/11 10:46:41 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth
O43 - CFD: 2010/11/09 14:33:03 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
O43 - CFD: 2013/02/24 11:28:45 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
O43 - CFD: 2011/03/11 09:49:37 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IZArc
O43 - CFD: 2010/03/25 15:54:50 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Jeux sur Orange.fr
O43 - CFD: 2014/10/22 08:28:36 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kafeo
O43 - CFD: 2009/06/11 18:24:48 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Les manuels de l'utilisateur
O43 - CFD: 2010/12/17 16:11:30 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LetsTunes
O43 - CFD: 2010/12/01 13:25:34 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LightScribe Direct Disc Labeling
O43 - CFD: 2006/11/02 17:36:19 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 2015/10/22 14:18:37 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
O43 - CFD: 2012/12/12 13:32:28 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mega Manager
O43 - CFD: 2013/09/14 17:37:28 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
O43 - CFD: 2010/05/26 14:03:05 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Live Add-in
O43 - CFD: 2015/08/14 11:28:12 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
O43 - CFD: 2012/10/11 07:44:15 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Works
O43 - CFD: 2009/03/06 18:30:44 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\muvee
O43 - CFD: 2010/01/14 15:00:30 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\My HP Games
O43 - CFD: 2009/06/16 21:06:09 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Netscape
O43 - CFD: 2010/10/16 13:47:18 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Netscape Navigator
O43 - CFD: 2014/07/11 14:02:02 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Panasonic
O43 - CFD: 2013/06/22 21:22:41 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Help & Tools
O43 - CFD: 2012/06/17 13:50:07 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
O43 - CFD: 2013/07/09 08:50:56 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RealNetworks
O43 - CFD: 2015/01/03 17:59:31 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung
O43 - CFD: 2015/10/20 07:50:50 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
O43 - CFD: 2006/11/02 17:07:25 - [] RHD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC
O43 - CFD: 2012/06/21 17:56:27 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
O43 - CFD: 2010/01/04 12:33:15 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
O43 - CFD: 2012/10/03 09:48:18 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zylom
O43 - CFD: 2010/03/12 15:50:58 - [] D -- C:\ProgramData\1912 Titanic Mystery
O43 - CFD: 2012/10/02 09:23:02 - [] D -- C:\ProgramData\2109
O43 - CFD: 2013/02/24 11:28:36 - [] D -- C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
O43 - CFD: 2014/10/15 14:00:15 - [] D -- C:\ProgramData\Adobe
O43 - CFD: 2009/03/06 18:40:42 - [] D -- C:\ProgramData\AOL
O43 - CFD: 2013/02/24 11:25:37 - [] D -- C:\ProgramData\Apple
O43 - CFD: 2013/02/24 11:27:29 - [] D -- C:\ProgramData\Apple Computer
O43 - CFD: 2006/11/02 17:42:17 - [0] SHD -- C:\ProgramData\Application Data
O43 - CFD: 2014/10/21 20:59:30 - [] HD -- C:\ProgramData\ArcSoft
O43 - CFD: 2009/11/24 14:16:44 - [] D -- C:\ProgramData\Astar Games
O43 - CFD: 2009/03/06 18:15:58 - [] D -- C:\ProgramData\ATI
O43 - CFD: 2014/11/23 19:09:04 - [] D -- C:\ProgramData\atjs
O43 - CFD: 2012/12/12 17:56:24 - [] D -- C:\ProgramData\Bitdefender
O43 - CFD: 2012/12/08 12:48:43 - [] D -- C:\ProgramData\boost_interprocess
O43 - CFD: 2014/10/15 17:55:31 - [] D -- C:\ProgramData\BullGuard
O43 - CFD: 2009/06/11 18:22:56 - [0] SHD -- C:\ProgramData\Bureau
O43 - CFD: 2011/06/12 20:42:01 - [] D -- C:\ProgramData\BVRP Software
O43 - CFD: 2013/07/29 18:07:39 - [] D -- C:\ProgramData\CyberLink
O43 - CFD: 2006/11/02 17:42:17 - [0] SHD -- C:\ProgramData\Desktop
O43 - CFD: 2006/11/02 17:42:17 - [0] SHD -- C:\ProgramData\Documents
O43 - CFD: 2010/08/16 17:43:31 - [] D -- C:\ProgramData\Downloaded Installations
O43 - CFD: 2010/12/17 14:24:21 - [0] D -- C:\ProgramData\eMule
O43 - CFD: 2010/08/06 13:21:55 - [] D -- C:\ProgramData\FarmFrenzy3_Arctica
O43 - CFD: 2009/06/11 18:22:57 - [0] SHD -- C:\ProgramData\Favoris
O43 - CFD: 2006/11/02 17:42:17 - [0] SHD -- C:\ProgramData\Favorites
O43 - CFD: 2010/01/12 15:43:03 - [] D -- C:\ProgramData\Flood Light Games
O43 - CFD: 2009/12/14 15:49:08 - [] D -- C:\ProgramData\GameHouse
O43 - CFD: 2010/01/18 16:08:32 - [] D -- C:\ProgramData\GAMEON
O43 - CFD: 2012/10/04 11:39:36 - [] D -- C:\ProgramData\Google
O43 - CFD: 2009/07/08 08:52:54 - [] D -- C:\ProgramData\Hewlett-Packard
O43 - CFD: 2009/07/08 09:00:34 - [] D -- C:\ProgramData\HP
O43 - CFD: 2015/10/14 16:30:38 - [] D -- C:\ProgramData\HP Product Assistant
O43 - CFD: 2009/11/04 17:30:16 - [] D -- C:\ProgramData\HPSSUPPLY
O43 - CFD: 2009/12/11 15:07:04 - [] D -- C:\ProgramData\Intenium
O43 - CFD: 2010/04/30 15:27:38 - [] D -- C:\ProgramData\JollyBear
O43 - CFD: 2013/01/25 12:34:42 - [] D -- C:\ProgramData\Leapfrog
O43 - CFD: 2015/03/22 18:01:47 - [] D -- C:\ProgramData\Malwarebytes
O43 - CFD: 2010/08/02 13:45:19 - [] D -- C:\ProgramData\McAfee
O43 - CFD: 2009/06/11 18:22:57 - [0] SHD -- C:\ProgramData\Menu Démarrer
O43 - CFD: 2009/11/19 14:29:15 - [] D -- C:\ProgramData\Merscom
O43 - CFD: 2014/01/28 13:42:13 - [] SD -- C:\ProgramData\Microsoft
O43 - CFD: 2015/10/18 17:37:15 - [] D -- C:\ProgramData\Microsoft Help
O43 - CFD: 2009/06/11 18:22:57 - [0] SHD -- C:\ProgramData\Modèles
O43 - CFD: 2015/03/23 11:27:56 - [] D -- C:\ProgramData\Mozilla
O43 - CFD: 2009/12/10 14:27:01 - [] D -- C:\ProgramData\MythPeople
O43 - CFD: 2010/02/02 15:50:11 - [] D -- C:\ProgramData\Namco
O43 - CFD: 2010/08/10 13:57:17 - [] D -- C:\ProgramData\NannyMania
O43 - CFD: 2010/03/25 15:58:46 - [] D -- C:\ProgramData\Nevosoft
O43 - CFD: 2014/10/15 16:58:04 - [] D -- C:\ProgramData\Norton
O43 - CFD: 2011/10/25 17:12:23 - [] D -- C:\ProgramData\NortonInstaller
O43 - CFD: 2013/06/22 10:38:48 - [] D -- C:\ProgramData\Panasonic
O43 - CFD: 2012/09/20 13:14:45 - [] D -- C:\ProgramData\PlayFirst
O43 - CFD: 2009/12/20 19:43:15 - [] D -- C:\ProgramData\PoBros
O43 - CFD: 2010/07/15 13:59:58 - [] D -- C:\ProgramData\QuickTime
O43 - CFD: 2015/10/14 16:30:35 - [] D -- C:\ProgramData\Real
O43 - CFD: 2013/07/09 08:50:52 - [] D -- C:\ProgramData\RealNetworks
O43 - CFD: 2012/12/21 15:59:20 - [] D -- C:\ProgramData\Samsung
O43 - CFD: 2009/10/23 11:02:20 - [] D -- C:\ProgramData\Sandlot Games
O43 - CFD: 2013/11/18 20:28:37 - [] D -- C:\ProgramData\Skype
O43 - CFD: 2013/04/14 10:09:02 - [] D -- C:\ProgramData\Software =>PUP.Optional.Boxore
O43 - CFD: 2010/08/04 14:36:24 - [] D -- C:\ProgramData\SpinTop Games
O43 - CFD: 2006/11/02 17:42:17 - [0] SHD -- C:\ProgramData\Start Menu
O43 - CFD: 2010/04/01 15:14:23 - [] D -- C:\ProgramData\Sun
O43 - CFD: 2011/10/25 17:12:35 - [] D -- C:\ProgramData\Symantec
O43 - CFD: 2013/04/14 09:29:22 - [] AD -- C:\ProgramData\Temp
O43 - CFD: 2006/11/02 17:42:17 - [0] SHD -- C:\ProgramData\Templates
O43 - CFD: 2012/06/07 13:02:12 - [] D -- C:\ProgramData\TomTom
O43 - CFD: 2009/07/08 09:13:29 - [] D -- C:\ProgramData\WEBREG
O43 - CFD: 2009/11/02 15:32:29 - [] D -- C:\ProgramData\WildTangent
O43 - CFD: 2012/11/11 14:44:29 - [] D -- C:\ProgramData\WindowsSearch
O43 - CFD: 2010/01/04 15:55:10 - [0] D -- C:\ProgramData\WinZip
O43 - CFD: 2012/10/02 21:10:08 - [] D -- C:\ProgramData\ZalmanInstaller_otshot
O43 - CFD: 2010/08/10 13:57:30 - [] D -- C:\ProgramData\Zylom
O43 - CFD: 2011/09/04 20:59:20 - [] HDC -- C:\ProgramData\{145B6A8D-C3A8-4F62-BF1A-E616EBBDF2B2}
O43 - CFD: 2015/10/20 07:47:05 - [] D -- C:\ProgramData\{B3C2C1CD-6B77-4A96-B670-F734AC2A1CBC}
O43 - CFD: 2013/04/23 09:06:34 - [0] D -- C:\ProgramData\߈ď菰,rogramData
O43 - CFD: 2013/04/23 09:06:35 - [0] D -- C:\ProgramData\㞸˷㊠˷䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/09/01 18:46:58 - [0] D -- C:\ProgramData\䠸!⁘!䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/08/11 08:46:21 - [0] D -- C:\ProgramData\䠸#⁘#䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/06/19 18:51:36 - [0] D -- C:\ProgramData\䠸$⁘$䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/07/10 08:14:02 - [0] D -- C:\ProgramData\䠸&⁘&䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/05/27 10:10:24 - [0] D -- C:\ProgramData\䠸'⁘'䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/04/01 19:02:06 - [0] D -- C:\ProgramData\䠸(⁘(䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/05/02 09:36:26 - [0] D -- C:\ProgramData\䠸.⁘.䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/09/21 08:58:33 - [0] D -- C:\ProgramData\䠸1⁘1䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/05/12 13:47:04 - [0] D -- C:\ProgramData\䠸2⁘2䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/06/28 12:41:06 - [0] D -- C:\ProgramData\䠸4⁘4䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/06/26 14:02:02 - [0] D -- C:\ProgramData\䠸6⁘6䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/07/03 18:02:36 - [0] D -- C:\ProgramData\䠸;⁘;䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/06/14 11:41:28 - [0] D -- C:\ProgramData\䠸=⁘=䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/10/12 17:54:11 - [0] D -- C:\ProgramData\䠸D⁘D䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/07/23 14:54:43 - [0] D -- C:\ProgramData\䠸K⁘K䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/06/03 12:42:21 - [0] D -- C:\ProgramData\䠸L⁘L䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/09/15 11:52:14 - [0] D -- C:\ProgramData\䠸M⁘M䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/12/07 10:44:47 - [0] D -- C:\ProgramData\䠸O⁘O䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/12/09 12:12:29 - [0] D -- C:\ProgramData\䠸T⁘T䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/06/12 09:43:00 - [0] D -- C:\ProgramData\䠸V⁘V䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/07/12 08:04:31 - [0] D -- C:\ProgramData\䠸X⁘X䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/06/29 11:46:28 - [0] D -- C:\ProgramData\䠸Z⁘Z䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/04/11 17:11:00 - [0] D -- C:\ProgramData\䠸’⁘’䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/07/08 07:29:32 - [0] D -- C:\ProgramData\䠸¥⁘¥䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/04/14 08:39:43 - [0] D -- C:\ProgramData\䠸·⁘·䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/11/08 13:14:14 - [0] D -- C:\ProgramData\䠸ç⁘ç䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/10/07 09:13:36 - [0] D -- C:\ProgramData\䠸è⁘è䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/05/03 12:39:28 - [0] D -- C:\ProgramData\䠸é⁘é䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/07/05 12:33:42 - [0] D -- C:\ProgramData\䠸Ë⁘Ë䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/04/13 08:21:12 - [0] D -- C:\ProgramData\䠸Í⁘Í䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/07/01 12:40:00 - [0] D -- C:\ProgramData\䠸Ó⁘Ó䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/10/30 12:33:34 - [0] D -- C:\ProgramData\䠸Ô⁘Ô䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/07/09 08:38:12 - [0] D -- C:\ProgramData\䠸õ⁘õ䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/06/21 12:43:29 - [0] D -- C:\ProgramData\䠸×⁘×䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/09/24 12:38:15 - [0] D -- C:\ProgramData\䠸ø⁘ø䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/11/07 08:36:40 - [0] D -- C:\ProgramData\䠸Ù⁘Ù䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/12/07 10:51:14 - [0] D -- C:\ProgramData\䠸Û⁘Û䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/09/25 08:46:21 - [0] D -- C:\ProgramData\䠸ā⁘ā䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/04/21 10:42:11 - [0] D -- C:\ProgramData\䠸Ċ⁘Ċ䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/10/13 10:56:25 - [0] D -- C:\ProgramData\䠸Ė⁘Ė䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/11/13 13:17:11 - [0] D -- C:\ProgramData\䠸ę⁘ę䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/04/15 17:13:59 - [0] D -- C:\ProgramData\䠸ğ⁘ğ䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/06/13 18:33:34 - [0] D -- C:\ProgramData\䠸ī⁘ī䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/05/24 10:19:47 - [0] D -- C:\ProgramData\䠸Ĵ⁘Ĵ䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/04/14 09:32:19 - [0] D -- C:\ProgramData\䠸ɔ⁘ɔ䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/11/27 09:50:05 - [0] D -- C:\ProgramData\䠸ɖ⁘ɖ䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/10/26 13:04:03 - [0] D -- C:\ProgramData\䠸ɛ⁘ɛ䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/06/11 12:39:46 - [0] D -- C:\ProgramData\䠸ɩ⁘ɩ䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/04/17 08:48:08 - [0] D -- C:\ProgramData\䠸ɨ⁘ɨ䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/10/10 20:24:18 - [0] D -- C:\ProgramData\䠸ɲ⁘ɲ䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/09/09 11:27:20 - [0] D -- C:\ProgramData\䠸ʃ⁘ʃ䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/08/01 10:28:03 - [0] D -- C:\ProgramData\䠸ʈ⁘ʈ䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/04/24 08:45:57 - [0] D -- C:\ProgramData\䠸ʊ⁘ʊ䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/04/07 08:22:21 - [0] D -- C:\ProgramData\䠸ʋ⁘ʋ䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/05/08 12:45:39 - [0] D -- C:\ProgramData\䠸ʒ⁘ʒ䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/06/01 18:00:44 - [0] D -- C:\ProgramData\䠸Ƞ⁘Ƞ䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/10/09 09:22:00 - [0] D -- C:\ProgramData\䠸ȧ⁘ȧ䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/10/06 10:12:58 - [0] D -- C:\ProgramData\䠸ȱ⁘ȱ䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/05/31 10:33:48 - [0] D -- C:\ProgramData\䠸ȶ⁘ȶ䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/05/04 17:09:33 - [0] D -- C:\ProgramData\䠸ȿ⁘ȿ䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/07/04 20:41:27 - [0] D -- C:\ProgramData\䠸ʉ⁘ʉ䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/08/09 08:52:27 - [0] D -- C:\ProgramData\䠸Ɉ⁘Ɉ䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/06/17 18:44:20 - [0] D -- C:\ProgramData\䠸ɚ⁘ɚ䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/05/20 13:07:26 - [0] D -- C:\ProgramData\䠸ɟ⁘ɟ䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/05/23 12:19:30 - [0] D -- C:\ProgramData\䠸ɤ⁘ɤ䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/09/03 12:50:49 - [0] D -- C:\ProgramData\䠸ɥ⁘ɥ䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/06/05 08:46:01 - [0] D -- C:\ProgramData\䠸ɦ⁘ɦ䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/12/03 11:36:04 - [0] D -- C:\ProgramData\䠸ɧ⁘ɧ䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/06/30 13:37:02 - [0] D -- C:\ProgramData\䠸ɭ⁘ɭ䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/09/11 07:26:45 - [0] D -- C:\ProgramData\䠸ɰ⁘ɰ䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/08/08 13:44:45 - [0] D -- C:\ProgramData\䠸ɳ⁘ɳ䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/04/08 07:42:38 - [0] D -- C:\ProgramData\䠸ɴ⁘ɴ䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/06/23 09:53:34 - [0] D -- C:\ProgramData\䠸ɶ⁘ɶ䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/07/28 09:49:55 - [0] D -- C:\ProgramData\䠸ɸ⁘ɸ䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/09/13 10:50:37 - [0] D -- C:\ProgramData\䠸ɹ⁘ɹ䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/06/22 11:18:13 - [0] D -- C:\ProgramData\䠸ɺ⁘ɺ䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/05/25 16:27:57 - [0] D -- C:\ProgramData\䠸ɼ⁘ɼ䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/06/19 12:20:08 - [0] D -- C:\ProgramData\䠸ʁ⁘ʁ䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/05/29 08:42:07 - [0] D -- C:\ProgramData\䠸ʂ⁘ʂ䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/05/19 08:36:20 - [0] D -- C:\ProgramData\䠸ʅ⁘ʅ䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/06/25 12:38:09 - [0] D -- C:\ProgramData\䠸ʆ⁘ʆ䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/07/24 21:02:10 - [0] D -- C:\ProgramData\䠸ʇ⁘ʇ䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/11/18 14:15:26 - [0] D -- C:\ProgramData\䠸ʍ⁘ʍ䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/11/02 09:35:50 - [0] D -- C:\ProgramData\䠸ʏ⁘ʏ䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/05/17 14:12:10 - [0] D -- C:\ProgramData\䠸ʐ⁘ʐ䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/07/02 10:15:24 - [0] D -- C:\ProgramData\䠸ʓ⁘ʓ䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/10/16 08:11:38 - [0] D -- C:\ProgramData\䠸ʔ⁘ʔ䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/04/05 10:28:39 - [0] D -- C:\ProgramData\䠸ʕ⁘ʕ䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/05/18 09:02:01 - [0] D -- C:\ProgramData\䠸ʙ⁘ʙ䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/04/19 15:19:01 - [0] D -- C:\ProgramData\䠸ʛ⁘ʛ䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/10/27 12:56:40 - [0] D -- C:\ProgramData\䠸ʞ⁘ʞ䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/06/24 11:06:16 - [0] D -- C:\ProgramData\䠸ʟ⁘ʟ䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/09/12 11:44:18 - [0] D -- C:\ProgramData\䠸ʠ⁘ʠ䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/04/07 17:45:42 - [0] D -- C:\ProgramData\䠸ʢ⁘ʢ䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/09/06 09:49:37 - [0] D -- C:\ProgramData\䠸ʣ⁘ʣ䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/12/05 16:10:04 - [0] D -- C:\ProgramData\䠸ʭ⁘ʭ䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/06/22 13:59:29 - [0] D -- C:\ProgramData\䠸ʰ⁘ʰ䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/06/13 12:27:43 - [0] D -- C:\ProgramData\䠸ʳ⁘ʳ䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/12/02 11:04:54 - [0] D -- C:\ProgramData\䠸ʴ⁘ʴ䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/05/06 10:49:21 - [0] D -- C:\ProgramData\䠸ʼ⁘ʼ䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/09/18 15:00:43 - [0] D -- C:\ProgramData\䠸˃⁘˃䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/04/29 08:00:46 - [0] D -- C:\ProgramData\䠸˄⁘˄䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/07/24 14:09:07 - [0] D -- C:\ProgramData\䠸˜⁘˜䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/12/01 11:49:14 - [0] D -- C:\ProgramData\䠸˝⁘˝䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/05/05 11:06:18 - [0] D -- C:\ProgramData\䠸ɫ⁘ɫ䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/06/22 12:28:25 - [0] D -- C:\ProgramData\䠸ɽ⁘ɽ䱏䅌䕔䌽䰻彃呃偙㵅㭃䍌䵟乏呅剁㵙㭃䍌也䵕剅䍉䌽䰻彃䥔䕍䌽
O43 - CFD: 2013/12/05 17:00:25 - [] D -- C:\Program Files (x86)\Common Files\Adobe
O43 - CFD: 2013/02/24 11:27:30 - [] D -- C:\Program Files (x86)\Common Files\Apple
O43 - CFD: 2014/01/08 15:44:54 - [] D -- C:\Program Files (x86)\Common Files\ArcSoft
O43 - CFD: 2014/05/20 12:42:12 - [] D -- C:\Program Files (x86)\Common Files\DESIGNER
O43 - CFD: 2011/05/13 08:59:32 - [] D -- C:\Program Files (x86)\Common Files\France Telecom
O43 - CFD: 2009/07/08 08:54:29 - [] D -- C:\Program Files (x86)\Common Files\Hewlett-Packard
O43 - CFD: 2009/07/08 08:56:53 - [] D -- C:\Program Files (x86)\Common Files\HP
O43 - CFD: 2014/01/08 15:42:41 - [] D -- C:\Program Files (x86)\Common Files\InstallShield
O43 - CFD: 2013/06/22 13:53:09 - [] D -- C:\Program Files (x86)\Common Files\Java
O43 - CFD: 2013/06/22 13:30:07 - [] D -- C:\Program Files (x86)\Common Files\Java(1)
O43 - CFD: 2010/12/01 13:25:33 - [] AD -- C:\Program Files (x86)\Common Files\LightScribe
O43 - CFD: 2009/03/06 18:30:06 - [] AD -- C:\Program Files (x86)\Common Files\LS Getting Started
O43 - CFD: 2012/02/15 10:16:26 - [] D -- C:\Program Files (x86)\Common Files\microsoft shared
O43 - CFD: 2009/03/06 18:30:43 - [] D -- C:\Program Files (x86)\Common Files\muvee Technologies
O43 - CFD: 2009/11/18 15:15:11 - [] D -- C:\Program Files (x86)\Common Files\Oberon Media
O43 - CFD: 2013/06/22 09:56:39 - [] D -- C:\Program Files (x86)\Common Files\Panasonic
O43 - CFD: 2014/07/11 14:02:09 - [] D -- C:\Program Files (x86)\Common Files\PX Storage Engine
O43 - CFD: 2013/07/09 08:49:57 - [] D -- C:\Program Files (x86)\Common Files\Real
O43 - CFD: 2012/12/21 15:58:55 - [] D -- C:\Program Files (x86)\Common Files\Samsung
O43 - CFD: 2009/10/23 11:02:20 - [] D -- C:\Program Files (x86)\Common Files\Sandlot Shared
O43 - CFD: 2009/06/16 21:06:15 - [] D -- C:\Program Files (x86)\Common Files\Scanner
O43 - CFD: 2006/11/02 15:33:53 - [] D -- C:\Program Files (x86)\Common Files\Services
O43 - CFD: 2006/11/02 15:33:53 - [] D -- C:\Program Files (x86)\Common Files\SpeechEngines
O43 - CFD: 2015/10/19 19:09:47 - [0] D -- C:\Program Files (x86)\Common Files\SWF Studio
O43 - CFD: 2014/08/05 08:34:12 - [0] D -- C:\Program Files (x86)\Common Files\Symantec Shared
O43 - CFD: 2011/11/10 14:12:59 - [] D -- C:\Program Files (x86)\Common Files\System
O43 - CFD: 2009/06/14 09:07:51 - [] D -- C:\Program Files (x86)\Common Files\Windows Live
O43 - CFD: 2013/07/09 08:50:37 - [] D -- C:\Program Files (x86)\Common Files\xing shared
O43 - CFD: 2015/10/20 11:59:37 - [] SHD -- C:\Users\vanessa\AppData\Roaming\.#
O43 - CFD: 2013/04/13 18:59:55 - [] D -- C:\Users\vanessa\AppData\Roaming\0F0C1V0F1L1I1P0E2V2Z1C1T1R2Z1F1C =>Adware.InstallCore
O43 - CFD: 2015/03/22 18:05:10 - [] D -- C:\Users\vanessa\AppData\Roaming\1oDMYQo
O43 - CFD: 2015/03/22 18:05:10 - [] D -- C:\Users\vanessa\AppData\Roaming\1Pyb8cA
O43 - CFD: 2015/03/22 18:05:10 - [] D -- C:\Users\vanessa\AppData\Roaming\4DihbmG
O43 - CFD: 2015/03/22 18:05:10 - [] D -- C:\Users\vanessa\AppData\Roaming\4Flcgzr
O43 - CFD: 2015/02/03 18:31:15 - [] D -- C:\Users\vanessa\AppData\Roaming\4gLW79Z
O43 - CFD: 2015/03/19 16:18:42 - [] D -- C:\Users\vanessa\AppData\Roaming\7QIcPLH
O43 - CFD: 2015/02/09 11:19:25 - [] D -- C:\Users\vanessa\AppData\Roaming\9e564UJ
O43 - CFD: 2015/02/21 15:06:39 - [] D -- C:\Users\vanessa\AppData\Roaming\9h9rCNP
O43 - CFD: 2015/01/21 10:44:30 - [] D -- C:\Users\vanessa\AppData\Roaming\A0qdaJn
O43 - CFD: 2015/03/13 12:18:38 - [] D -- C:\Users\vanessa\AppData\Roaming\a5FZ6IG
O43 - CFD: 2014/10/15 14:00:07 - [] D -- C:\Users\vanessa\AppData\Roaming\Adobe
O43 - CFD: 2015/03/09 10:40:28 - [] D -- C:\Users\vanessa\AppData\Roaming\akVWKWA
O43 - CFD: 2014/11/25 13:38:14 - [] D -- C:\Users\vanessa\AppData\Roaming\Am9Ab4q
O43 - CFD: 2013/02/24 11:29:31 - [] D -- C:\Users\vanessa\AppData\Roaming\Apple Computer
O43 - CFD: 2014/10/21 20:59:36 - [] D -- C:\Users\vanessa\AppData\Roaming\Arcsoft
O43 - CFD: 2009/11/30 15:48:13 - [] D -- C:\Users\vanessa\AppData\Roaming\Artogon
O43 - CFD: 2009/06/11 18:31:46 - [] D -- C:\Users\vanessa\AppData\Roaming\ATI
O43 - CFD: 2009/12/22 21:24:37 - [] D -- C:\Users\vanessa\AppData\Roaming\Awem
O43 - CFD: 2010/01/06 15:24:53 - [] D -- C:\Users\vanessa\AppData\Roaming\Big Fish Games
O43 - CFD: 2015/01/03 17:53:45 - [] D -- C:\Users\vanessa\AppData\Roaming\brH2WMY
O43 - CFD: 2014/10/15 17:04:39 - [] D -- C:\Users\vanessa\AppData\Roaming\BullGuard
O43 - CFD: 2009/12/07 14:35:26 - [] D -- C:\Users\vanessa\AppData\Roaming\cerasus.media
O43 - CFD: 2015/08/14 15:11:38 - [] D -- C:\Users\vanessa\AppData\Roaming\CyberLink
O43 - CFD: 2015/01/21 10:55:40 - [] D -- C:\Users\vanessa\AppData\Roaming\detWmag
O43 - CFD: 2015/01/07 10:19:15 - [] D -- C:\Users\vanessa\AppData\Roaming\Dgd5bFK
O43 - CFD: 2015/02/24 13:26:26 - [] D -- C:\Users\vanessa\AppData\Roaming\dGhvgir
O43 - CFD: 2015/01/02 16:08:59 - [] D -- C:\Users\vanessa\AppData\Roaming\DkH9mPB
O43 - CFD: 2014/12/30 09:40:36 - [] D -- C:\Users\vanessa\AppData\Roaming\dtjoYWh
O43 - CFD: 2010/04/14 12:34:29 - [] D -- C:\Users\vanessa\AppData\Roaming\eMule
O43 - CFD: 2010/01/12 15:43:03 - [] D -- C:\Users\vanessa\AppData\Roaming\Flood Light Games
O43 - CFD: 2009/12/03 14:22:20 - [] D -- C:\Users\vanessa\AppData\Roaming\Friday's games
O43 - CFD: 2015/03/06 15:25:59 - [] D -- C:\Users\vanessa\AppData\Roaming\fRTKU8N
O43 - CFD: 2015/01/06 20:08:44 - [] D -- C:\Users\vanessa\AppData\Roaming\G34clsK
O43 - CFD: 2010/01/14 16:14:58 - [] D -- C:\Users\vanessa\AppData\Roaming\Go Go Gourmet
O43 - CFD: 2009/10/03 18:51:21 - [] D -- C:\Users\vanessa\AppData\Roaming\Google
O43 - CFD: 2015/01/13 20:50:01 - [] D -- C:\Users\vanessa\AppData\Roaming\h3tHDcy
O43 - CFD: 2015/03/09 11:32:18 - [] D -- C:\Users\vanessa\AppData\Roaming\hae3SOJ
O43 - CFD: 2009/06/11 18:31:05 - [] D -- C:\Users\vanessa\AppData\Roaming\hewlett-packard
O43 - CFD: 2014/11/23 19:08:35 - [] D -- C:\Users\vanessa\AppData\Roaming\Ho04fMO
O43 - CFD: 2013/06/22 16:16:48 - [] D -- C:\Users\vanessa\AppData\Roaming\HP
O43 - CFD: 2009/06/11 18:25:57 - [] D -- C:\Users\vanessa\AppData\Roaming\HP TCS
O43 - CFD: 2010/10/08 14:48:27 - [] D -- C:\Users\vanessa\AppData\Roaming\Identities
O43 - CFD: 2015/02/26 16:23:26 - [] D -- C:\Users\vanessa\AppData\Roaming\IGBQ8Dk
O43 - CFD: 2015/01/19 13:06:22 - [] D -- C:\Users\vanessa\AppData\Roaming\ikb7dlP
O43 - CFD: 2015/09/29 12:26:08 - [] D -- C:\Users\vanessa\AppData\Roaming\Image Zone Express
O43 - CFD: 2011/06/12 20:42:00 - [] D -- C:\Users\vanessa\AppData\Roaming\InstallShield
O43 - CFD: 2015/02/13 11:48:48 - [] D -- C:\Users\vanessa\AppData\Roaming\ITD3nE8
O43 - CFD: 2015/02/11 13:53:04 - [] D -- C:\Users\vanessa\AppData\Roaming\JDPvSeN
O43 - CFD: 2015/03/22 11:00:12 - [] D -- C:\Users\vanessa\AppData\Roaming\JWcSOmm
O43 - CFD: 2015/03/05 18:12:11 - [] D -- C:\Users\vanessa\AppData\Roaming\KhVQCaw
O43 - CFD: 2015/01/12 19:32:56 - [] D -- C:\Users\vanessa\AppData\Roaming\kRcA6Vq
O43 - CFD: 2015/03/02 11:21:19 - [] D -- C:\Users\vanessa\AppData\Roaming\KWUUv5N
O43 - CFD: 2015/01/20 13:01:12 - [] D -- C:\Users\vanessa\AppData\Roaming\L1QbVJp
O43 - CFD: 2015/03/13 11:27:15 - [] D -- C:\Users\vanessa\AppData\Roaming\L2XKpzS
O43 - CFD: 2014/12/31 08:56:56 - [] D -- C:\Users\vanessa\AppData\Roaming\L87T8hS
O43 - CFD: 2010/12/17 16:12:05 - [] D -- C:\Users\vanessa\AppData\Roaming\letstunes
O43 - CFD: 2015/03/04 15:32:31 - [] D -- C:\Users\vanessa\AppData\Roaming\lIQpeW8
O43 - CFD: 2009/12/09 14:59:35 - [] D -- C:\Users\vanessa\AppData\Roaming\Little Worlds Online
O43 - CFD: 2014/12/29 09:15:12 - [] D -- C:\Users\vanessa\AppData\Roaming\LOS4Enf
O43 - CFD: 2009/10/27 15:16:51 - [] D -- C:\Users\vanessa\AppData\Roaming\Macromedia
O43 - CFD: 2010/03/26 16:32:01 - [] D -- C:\Users\vanessa\AppData\Roaming\Malwarebytes
O43 - CFD: 2006/11/02 17:07:25 - [0] D -- C:\Users\vanessa\AppData\Roaming\Media Center Programs
O43 - CFD: 2011/02/03 10:05:58 - [] D -- C:\Users\vanessa\AppData\Roaming\Megaupload
O43 - CFD: 2009/11/19 14:29:15 - [] D -- C:\Users\vanessa\AppData\Roaming\Merscom
O43 - CFD: 2014/10/15 18:18:36 - [] SD -- C:\Users\vanessa\AppData\Roaming\Microsoft
O43 - CFD: 2014/10/15 19:02:41 - [] D -- C:\Users\vanessa\AppData\Roaming\Mozilla
O43 - CFD: 2015/02/01 10:40:55 - [] D -- C:\Users\vanessa\AppData\Roaming\mqeizLs
O43 - CFD: 2011/09/04 20:59:03 - [] D -- C:\Users\vanessa\AppData\Roaming\MusicNet
O43 - CFD: 2015/03/04 15:37:26 - [] D -- C:\Users\vanessa\AppData\Roaming\MxJsSJn
O43 - CFD: 2010/02/02 15:50:11 - [] D -- C:\Users\vanessa\AppData\Roaming\Namco
O43 - CFD: 2015/02/13 12:24:56 - [] D -- C:\Users\vanessa\AppData\Roaming\ndkNGrs
O43 - CFD: 2010/10/16 13:47:40 - [] D -- C:\Users\vanessa\AppData\Roaming\Netscape
O43 - CFD: 2010/08/06 13:10:20 - [] D -- C:\Users\vanessa\AppData\Roaming\NevoSoft Games
O43 - CFD: 2015/03/19 18:31:11 - [] D -- C:\Users\vanessa\AppData\Roaming\NG99ASP
O43 - CFD: 2015/02/03 18:26:21 - [] D -- C:\Users\vanessa\AppData\Roaming\o1aHcC3
O43 - CFD: 2015/01/31 11:33:33 - [] D -- C:\Users\vanessa\AppData\Roaming\oIzDy4X
O43 - CFD: 2015/01/02 16:06:09 - [] D -- C:\Users\vanessa\AppData\Roaming\OMHBRuw
O43 - CFD: 2014/12/27 20:08:19 - [] D -- C:\Users\vanessa\AppData\Roaming\otBiGtl
O43 - CFD: 2015/01/18 12:57:03 - [] D -- C:\Users\vanessa\AppData\Roaming\oXv4iSk
O43 - CFD: 2015/01/03 18:16:30 - [] D -- C:\Users\vanessa\AppData\Roaming\PDF Software
O43 - CFD: 2015/01/03 18:23:37 - [] D -- C:\Users\vanessa\AppData\Roaming\PDF Suite 2015
O43 - CFD: 2010/08/05 14:54:38 - [] D -- C:\Users\vanessa\AppData\Roaming\Peace Craft
O43 - CFD: 2015/10/20 12:45:58 - [0] D -- C:\Users\vanessa\AppData\Roaming\PeerNetworking
O43 - CFD: 2012/09/20 13:14:45 - [] D -- C:\Users\vanessa\AppData\Roaming\PlayFirst
O43 - CFD: 2009/12/20 19:43:15 - [] D -- C:\Users\vanessa\AppData\Roaming\PoBros
O43 - CFD: 2009/11/18 15:15:49 - [] D -- C:\Users\vanessa\AppData\Roaming\Princess Isabella
O43 - CFD: 2009/07/18 09:06:59 - [] D -- C:\Users\vanessa\AppData\Roaming\Printer Info Cache
O43 - CFD: 2015/01/25 10:34:57 - [] D -- C:\Users\vanessa\AppData\Roaming\qqDR8Er
O43 - CFD: 2012/12/12 10:57:42 - [0] D -- C:\Users\vanessa\AppData\Roaming\QuickScan
O43 - CFD: 2014/10/15 09:43:01 - [] D -- C:\Users\vanessa\AppData\Roaming\Real
O43 - CFD: 2013/07/09 08:51:42 - [] D -- C:\Users\vanessa\AppData\Roaming\RealNetworks
O43 - CFD: 2015/03/22 11:41:51 - [] D -- C:\Users\vanessa\AppData\Roaming\rJEttea
O43 - CFD: 2014/12/27 20:12:37 - [] D -- C:\Users\vanessa\AppData\Roaming\rmJ93NP
O43 - CFD: 2013/04/02 17:53:33 - [] D -- C:\Users\vanessa\AppData\Roaming\RocketPDF
O43 - CFD: 2015/03/02 11:49:09 - [] D -- C:\Users\vanessa\AppData\Roaming\rwmlVmm
O43 - CFD: 2014/07/29 22:17:03 - [] D -- C:\Users\vanessa\AppData\Roaming\Samsung
O43 - CFD: 2010/02/23 15:43:16 - [] D -- C:\Users\vanessa\AppData\Roaming\SerpentOfIsis
O43 - CFD: 2013/11/18 20:28:15 - [] D -- C:\Users\vanessa\AppData\Roaming\Skype
O43 - CFD: 2009/11/25 14:48:44 - [] D -- C:\Users\vanessa\AppData\Roaming\SprillBermudeFr
O43 - CFD: 2009/10/01 14:09:45 - [] D -- C:\Users\vanessa\AppData\Roaming\Template
O43 - CFD: 2010/03/12 15:51:48 - [] D -- C:\Users\vanessa\AppData\Roaming\TitanicMystery
O43 - CFD: 2015/01/06 20:05:30 - [] D -- C:\Users\vanessa\AppData\Roaming\toCDhXV
O43 - CFD: 2012/06/07 13:00:04 - [] D -- C:\Users\vanessa\AppData\Roaming\TomTom
O43 - CFD: 2014/12/29 09:19:00 - [] D -- C:\Users\vanessa\AppData\Roaming\Trbu9FE
O43 - CFD: 2015/01/25 10:31:52 - [] D -- C:\Users\vanessa\AppData\Roaming\TZyUqn7
O43 - CFD: 2015/02/09 12:14:56 - [] D -- C:\Users\vanessa\AppData\Roaming\uImvUdc
O43 - CFD: 2014/11/25 13:38:08 - [] D -- C:\Users\vanessa\AppData\Roaming\uxCW4Md
O43 - CFD: 2015/01/28 15:22:13 - [] D -- C:\Users\vanessa\AppData\Roaming\vkxaEG4
O43 - CFD: 2012/04/27 21:29:16 - [] D -- C:\Users\vanessa\AppData\Roaming\WildTangent
O43 - CFD: 2009/06/20 20:51:32 - [] D -- C:\Users\vanessa\AppData\Roaming\WinBatch
O43 - CFD: 2010/01/04 12:42:49 - [] D -- C:\Users\vanessa\AppData\Roaming\WinRAR
O43 - CFD: 2015/01/03 00:30:41 - [] D -- C:\Users\vanessa\AppData\Roaming\wPA0y5v
O43 - CFD: 2015/03/30 15:43:56 - [] D -- C:\Users\vanessa\AppData\Roaming\wS8C6RP
O43 - CFD: 2014/12/30 09:37:41 - [] D -- C:\Users\vanessa\AppData\Roaming\x1vbv0K
O43 - CFD: 2015/01/18 13:29:44 - [] D -- C:\Users\vanessa\AppData\Roaming\XRIEU5j
O43 - CFD: 2015/02/25 12:14:58 - [] D -- C:\Users\vanessa\AppData\Roaming\xyNBHST
O43 - CFD: 2015/03/11 10:32:40 - [] D -- C:\Users\vanessa\AppData\Roaming\Y8PbIhx
O43 - CFD: 2015/10/21 11:48:30 - [0] D -- C:\Users\vanessa\AppData\Roaming\Yahoo!
O43 - CFD: 2015/01/21 11:21:59 - [] D -- C:\Users\vanessa\AppData\Roaming\ymuhgRj
O43 - CFD: 2015/01/13 19:59:14 - [] D -- C:\Users\vanessa\AppData\Roaming\yoelTqN
O43 - CFD: 2015/03/06 23:10:01 - [] D -- C:\Users\vanessa\AppData\Roaming\yyePhL1
O43 - CFD: 2012/10/02 21:08:57 - [] D -- C:\Users\vanessa\AppData\Roaming\ZalmanInstaller_otshot
O43 - CFD: 2015/02/10 13:42:14 - [] D -- C:\Users\vanessa\AppData\Roaming\Zbs99fY
O43 - CFD: 2015/10/22 15:08:16 - [] D -- C:\Users\vanessa\AppData\Roaming\ZHP
O43 - CFD: 2015/10/20 15:45:58 - [] D -- C:\Users\vanessa\AppData\Roaming\zWs8MDJ
O43 - CFD: 2010/10/08 14:48:27 - [] D -- C:\Users\vanessa\AppData\Roaming\Zylom
O43 - CFD: 2009/12/18 15:48:08 - [] D -- C:\Users\vanessa\AppData\Roaming\Zylom 3 Days Zoo Mystery
O43 - CFD: 2015/05/01 11:18:35 - [] D -- C:\Users\vanessa\AppData\Local\Adobe
O43 - CFD: 2009/06/11 18:31:39 - [] D -- C:\Users\vanessa\AppData\Local\AOL
O43 - CFD: 2012/06/17 13:48:00 - [] D -- C:\Users\vanessa\AppData\Local\Apple
O43 - CFD: 2014/10/22 21:19:29 - [] D -- C:\Users\vanessa\AppData\Local\Apple Computer
O43 - CFD: 2009/06/11 18:23:04 - [0] SHD -- C:\Users\vanessa\AppData\Local\Application Data
O43 - CFD: 2009/06/12 16:23:28 - [] D -- C:\Users\vanessa\AppData\Local\Apps
O43 - CFD: 2014/01/08 15:45:03 - [] D -- C:\Users\vanessa\AppData\Local\ArcSoft
O43 - CFD: 2009/06/11 18:31:46 - [] D -- C:\Users\vanessa\AppData\Local\ATI
O43 - CFD: 2013/10/09 09:22:20 - [] D -- C:\Users\vanessa\AppData\Local\avgchrome
O43 - CFD: 2015/10/20 20:43:03 - [0] D -- C:\Users\vanessa\AppData\Local\DBFF6CA-4992-43E3-9940-A5637C65354A
O43 - CFD: 2009/06/12 16:23:37 - [0] D -- C:\Users\vanessa\AppData\Local\Deployment
O43 - CFD: 2013/04/13 19:00:38 - [0] D -- C:\Users\vanessa\AppData\Local\Downloaded Installations
O43 - CFD: 2015/03/23 11:15:35 - [] D -- C:\Users\vanessa\AppData\Local\ElevatedDiagnostics
O43 - CFD: 2010/12/17 14:24:21 - [] D -- C:\Users\vanessa\AppData\Local\eMule
O43 - CFD: 2015/10/20 14:35:47 - [] D -- C:\Users\vanessa\AppData\Local\ESET
O43 - CFD: 2015/10/21 13:10:37 - [] D -- C:\Users\vanessa\AppData\Local\Google
O43 - CFD: 2009/06/11 18:31:07 - [] D -- C:\Users\vanessa\AppData\Local\Hewlett-Packard
O43 - CFD: 2009/06/11 18:23:04 - [0] SHD -- C:\Users\vanessa\AppData\Local\Historique
O43 - CFD: 2010/04/30 15:27:38 - [] D -- C:\Users\vanessa\AppData\Local\JollyBear
O43 - CFD: 2015/10/21 11:48:34 - [] D -- C:\Users\vanessa\AppData\Local\Microsoft
O43 - CFD: 2009/06/12 12:37:58 - [0] D -- C:\Users\vanessa\AppData\Local\Microsoft Help
O43 - CFD: 2015/03/23 11:28:04 - [] D -- C:\Users\vanessa\AppData\Local\Mozilla
O43 - CFD: 2010/10/16 13:47:40 - [] D -- C:\Users\vanessa\AppData\Local\Netscape
O43 - CFD: 2009/11/22 20:10:12 - [] D -- C:\Users\vanessa\AppData\Local\Oberon Games
O43 - CFD: 2013/06/22 10:38:47 - [] D -- C:\Users\vanessa\AppData\Local\Panasonic
O43 - CFD: 2009/07/01 08:55:13 - [] D -- C:\Users\vanessa\AppData\Local\Seven Zip
O43 - CFD: 2015/10/22 15:08:44 - [] D -- C:\Users\vanessa\AppData\Local\Temp
O43 - CFD: 2009/06/11 18:23:04 - [0] SHD -- C:\Users\vanessa\AppData\Local\Temporary Internet Files
O43 - CFD: 2012/06/07 13:00:04 - [] D -- C:\Users\vanessa\AppData\Local\TomTom
O43 - CFD: 2012/11/25 17:03:13 - [] D -- C:\Users\vanessa\AppData\Local\Unity
O43 - CFD: 2009/07/08 09:00:41 - [] D -- C:\Users\vanessa\AppData\Local\VirtualStore
O43 - CFD: 2014/03/12 19:48:12 - [] D -- C:\Users\vanessa\AppData\Local\Windows Live
O43 - CFD: 2012/02/23 11:59:19 - [] D -- C:\Users\vanessa\AppData\Local\Zylom Games
O43 - CFD: 2008/01/21 05:20:45 - [] RD -- C:\Users\vanessa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 2009/06/11 18:30:36 - [] RD -- C:\Users\vanessa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 2009/08/14 15:41:43 - [] D -- C:\Users\vanessa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CCleaner
O43 - CFD: 2013/01/15 16:20:02 - [] D -- C:\Users\vanessa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
O43 - CFD: 2009/07/27 18:53:07 - [] D -- C:\Users\vanessa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HP
O43 - CFD: 2010/03/26 16:28:50 - [0] D -- C:\Users\vanessa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Jeux sur Orange.fr
O43 - CFD: 2008/01/21 05:20:45 - [] RD -- C:\Users\vanessa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 2015/10/21 11:46:01 - [] RD -- C:\Users\vanessa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
O43 - CFD: 2010/01/04 12:33:15 - [] D -- C:\Users\vanessa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR

---\\ ShellIconOverlayIdentifiers (SIOI) (1) - 0s
O106 - SIOI: Enhanced Storage Icon Overlay Handler Class [EnhancedStorageShell] - {D9144DCD-E998-4ECA-AB6A-DCD83CCBA16D}. (.Microsoft Corporation - Extension d'environnement du périphérique d.) -- C:\Windows\System32\EhStorShell.dll ©

---\\ Liste des pilotes du système (81) - 59s
O58 - SDL:2006/11/02 11:43:52 A . (...) -- C:\Windows\System32\drivers\1394bus.sys [65024]
O58 - SDL:2008/01/21 04:46:53 A . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\drivers\adp94xx.sys [486456] ©
O58 - SDL:2008/01/21 04:46:54 A . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\System32\drivers\adpahci.sys [342584] ©
O58 - SDL:2008/01/21 04:46:54 A . (.Adaptec, Inc. - Adaptec LH Ultra160 Driver (X64).) -- C:\Windows\System32\drivers\adpu160m.sys [126520] ©
O58 - SDL:2008/01/21 04:47:27 A . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver (X64).) -- C:\Windows\System32\drivers\adpu320.sys [185912] ©
O58 - SDL:2008/01/21 04:46:50 A . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\Windows\System32\drivers\aliide.sys [15976] ©
O58 - SDL:2008/01/21 04:46:52 A . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\System32\drivers\arc.sys [90680] ©
O58 - SDL:2008/01/21 04:47:00 A . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\System32\drivers\arcsas.sys [91192] ©
O58 - SDL:2007/05/16 19:43:52 A . (.Atheros Communications, Inc. - Atheros Extensible Wireless LAN device driv.) -- C:\Windows\System32\drivers\athrxu6.sys [1039360] ©
O58 - SDL:2008/12/01 19:15:04 A . (.ATI Technologies Inc. - ATI Radeon Kernel Mode Driver.) -- C:\Windows\System32\drivers\atikmdag.sys [5000192] ©
O58 - SDL:2008/01/21 04:47:30 A . (...) -- C:\Windows\System32\drivers\bdasup.sys [15616]
O58 - SDL:2006/09/18 23:30:15 A . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower.) -- C:\Windows\System32\drivers\BrFiltLo.sys [18432] ©
O58 - SDL:2006/09/18 23:30:15 A . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper.) -- C:\Windows\System32\drivers\BrFiltUp.sys [8704] ©
O58 - SDL:2006/11/02 10:43:25 A . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\System32\drivers\BrSerId.sys [86528] ©
O58 - SDL:2006/09/18 23:30:18 A . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\System32\drivers\BrSerWdm.sys [47104] ©
O58 - SDL:2006/09/18 23:30:18 A . (...) -- C:\Windows\System32\drivers\BrUsbMdm.sys [14976]
O58 - SDL:2006/09/19 13:42:33 A . (...) -- C:\Windows\System32\drivers\BrUsbSer.sys [14720]
O58 - SDL:2012/08/17 10:18:10 A . (...) -- C:\Windows\System32\drivers\btblan.sys [40320]
O58 - SDL:2009/10/20 03:00:00 N . (.Sonic Solutions - CDR4 64-bit CD and DVD Place Holder Driver.) -- C:\Windows\System32\drivers\cdr4_xp.sys [10224] ©
O58 - SDL:2009/10/20 03:00:00 N . (.Sonic Solutions - CDRAL 64-bit Place Holder Driver (see PxHel.) -- C:\Windows\System32\drivers\cdralw2k.sys [10224] ©
O58 - SDL:2008/01/21 04:46:50 A . (.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\cmdide.sys [18024] ©
O58 - SDL:2010/07/30 07:51:52 A . (.Devguru Co., Ltd - Device Error Recovery SDK(x86).) -- C:\Windows\System32\drivers\dgderdrv.sys [20552] ©
O58 - SDL:2006/11/02 13:50:06 A . (.Adaptec, Inc. - Adaptec Ultra SCSI miniport.) -- C:\Windows\System32\drivers\djsvs.sys [88168] ©
O58 - SDL:2008/01/21 04:46:56 A . (...) -- C:\Windows\System32\drivers\E1G6032E.sys [146176]
O58 - SDL:2008/01/21 04:46:59 A . (.Emulex - Storport Miniport Driver for LightPulse HBA.) -- C:\Windows\System32\drivers\elxstor.sys [397368] ©
O58 - SDL:2010/07/13 17:58:12 A . (.LeapFrog - FLY Fusion USB Driver.) -- C:\Windows\System32\drivers\FlyUsb.sys [24576] ©
O58 - SDL:2012/08/21 14:01:20 A . (...) -- C:\Windows\System32\drivers\GEARAspiWDM.sys [33240]
O58 - SDL:2012/09/04 13:49:40 A . (.HS Coporation - USB NDIS Miniport Driver.) -- C:\Windows\System32\drivers\ghsnet.sys [162816]
O58 - SDL:2014/03/17 10:29:40 A . (...) -- C:\Windows\System32\drivers\ghsser.sys [126080]
O58 - SDL:2012/08/29 18:24:10 A . (.BitDefender LLC - BitDefender Gonzales FileSystem Driver.) -- C:\Windows\System32\drivers\gzflt.sys [145696] ©
O58 - SDL:2013/07/03 04:22:30 A . (...) -- C:\Windows\System32\drivers\hidparse.sys [31616]
O58 - SDL:2008/01/21 04:46:59 A . (.Hewlett-Packard Company - Smart Array Storport Driver.) -- C:\Windows\System32\drivers\HpCISSs.sys [47672] ©
O58 - SDL:2008/01/21 04:46:59 A . (.Intel Corporation - Intel Matrix Storage Manager driver (base).) -- C:\Windows\System32\drivers\iaStorV.sys [290872] ©
O58 - SDL:2006/11/02 14:02:39 A . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\System32\drivers\iirsp.sys [44648] ©
O58 - SDL:2006/11/02 14:02:09 A . (.Integrated Technology Express, Inc. - ITE IT8211 ATA/ATAPI SCSI miniport.) -- C:\Windows\System32\drivers\iteatapi.sys [37480] ©
O58 - SDL:2006/11/02 14:02:09 A . (.Integrated Technology Express, Inc. - ITE IT8212 ATA RAID SCSI miniport.) -- C:\Windows\System32\drivers\iteraid.sys [37480] ©
O58 - SDL:2008/01/21 04:49:00 A . (...) -- C:\Windows\System32\drivers\ksthunk.sys [20864]
O58 - SDL:2008/01/21 04:46:51 A . (.LSI Logic - LSI Logic Fusion-MPT FC Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_fc.sys [113720] ©
O58 - SDL:2008/01/21 04:46:56 A . (.LSI Logic - LSI Logic Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas.sys [105016] ©
O58 - SDL:2008/01/21 04:47:01 A . (.LSI Logic - LSI Logic Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_scsi.sys [113720] ©
O58 - SDL:2012/06/20 11:51:34 A . (.HandSet Incorporated - HandSet CDROM Filter.) -- C:\Windows\System32\drivers\massfilter_hs.sys [20232]
O58 - SDL:2015/10/05 09:50:06 A . (.Malwarebytes - Malwarebytes Anti-Malware.) -- C:\Windows\System32\drivers\mbam.sys [25816] ©
O58 - SDL:2015/10/05 09:50:10 A . (...) -- C:\Windows\System32\drivers\mbamchameleon.sys [109272]
O58 - SDL:2015/10/22 14:56:53 A . (.Malwarebytes - Malwarebytes Anti-Malware.) -- C:\Windows\System32\drivers\MBAMSwissArmy.sys [192216] ©
O58 - SDL:2008/01/21 04:46:59 A . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows.) -- C:\Windows\System32\drivers\megasas.sys [35896] ©
O58 - SDL:2008/01/21 04:46:56 A . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\System32\drivers\MegaSR.sys [438328] ©
O58 - SDL:2006/11/02 14:02:24 A . (.LSI Logic Corporation - MegaRAID RAID Controller Driver for Windows.) -- C:\Windows\System32\drivers\Mraid35x.sys [39016] ©
O58 - SDL:2008/01/21 04:49:52 A . (...) -- C:\Windows\System32\drivers\mskssrv.sys [11008]
O58 - SDL:2006/11/02 11:37:30 A . (...) -- C:\Windows\System32\drivers\mspclock.sys [7040]
O58 - SDL:2006/11/02 11:37:30 A . (...) -- C:\Windows\System32\drivers\mspqm.sys [6656]
O58 - SDL:2008/01/21 04:49:52 A . (...) -- C:\Windows\System32\drivers\mstee.sys [7936]
O58 - SDL:2015/10/05 09:50:14 A . (...) -- C:\Windows\System32\drivers\mwac.sys [64216]
O58 - SDL:2006/11/02 14:03:03 A . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\System32\drivers\nfrd960.sys [51816] ©
O58 - SDL:2008/01/21 04:46:54 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\System32\drivers\nvraid.sys [128056] ©
O58 - SDL:2008/01/21 04:46:54 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\System32\drivers\nvstor.sys [54328] ©
O58 - SDL:2006/11/02 11:43:56 A . (...) -- C:\Windows\System32\drivers\ohci1394.sys [72192]
O58 - SDL:2006/09/07 17:49:04 A . (...) -- C:\Windows\System32\drivers\PS2.sys [21504]
O58 - SDL:2010/03/19 03:00:00 N . (.Sonic Solutions - Px Engine Device Driver for 64-bit Windows.) -- C:\Windows\System32\drivers\PxHlpa64.sys [55856] ©
O58 - SDL:2008/01/21 04:46:52 A . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\Windows\System32\drivers\ql2300.sys [1221176] ©
O58 - SDL:2006/11/02 13:50:27 A . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\Windows\System32\drivers\ql40xx.sys [124008] ©
O58 - SDL:2008/11/18 21:32:06 A . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function D.) -- C:\Windows\System32\drivers\RTKVHD64.sys [1566112] ©
O58 - SDL:2008/08/06 18:26:08 A . (.Realtek Corporation - Realtek 8101E/8168/8169 NDIS6 64-bit Driver.) -- C:\Windows\System32\drivers\Rtlh64.sys [174592] ©
O58 - SDL:2006/09/30 01:51:44 A . (.Macrovision Corporation, Macrovision Europe Limited, - Macrovision SECURITY Driver.) -- C:\Windows\System32\drivers\secdrv.sys [23040] ©
O58 - SDL:2008/01/21 04:47:26 A . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\System32\drivers\sisraid4.sys [78392] ©
O58 - SDL:2014/06/16 08:01:38 A . (...) -- C:\Windows\System32\drivers\ssudbus.sys [110336]
O58 - SDL:2014/06/16 08:01:38 A . (...) -- C:\Windows\System32\drivers\ssudmdm.sys [206080]
O58 - SDL:2009/04/11 07:39:31 A . (...) -- C:\Windows\System32\drivers\stream.sys [68224]
O58 - SDL:2006/11/02 14:02:52 A . (.LSI Logic - LSI Logic 8XX SCSI Miniport Driver.) -- C:\Windows\System32\drivers\symc8xx.sys [49256] ©
O58 - SDL:2006/11/02 14:02:37 A . (.LSI Logic - LSI Logic Hi-Perf SCSI Miniport Driver.) -- C:\Windows\System32\drivers\sym_hi.sys [44648] ©
O58 - SDL:2006/11/02 14:02:47 A . (.LSI Logic - LSI Logic Ultra160 SCSI Miniport Driver.) -- C:\Windows\System32\drivers\sym_u3.sys [48232] ©
O58 - SDL:2010/06/24 15:00:14 A . (.Teruten Inc - File System Mini Filter Drvier.) -- C:\Windows\System32\drivers\TFsExDisk.sys [16392] ©
O58 - SDL:2008/01/21 04:46:56 A . (.ULi Electronics Inc. - ULi SATA Controller Driver.) -- C:\Windows\System32\drivers\uliahci.sys [284728] ©
O58 - SDL:2006/11/02 13:50:54 A . (.Promise Technology, Inc. - Promise Ultra/Sata Series Driver for Win200.) -- C:\Windows\System32\drivers\ulsata.sys [148072] ©
O58 - SDL:2008/01/21 04:46:52 A . (.Promise Technology, Inc. - Promise SATAII150 Series x64 Windows Driver.) -- C:\Windows\System32\drivers\ulsata2.sys [174696] ©
O58 - SDL:2012/12/13 14:50:36 A . (.Apple, Inc. - Apple Mobile Device USB Driver.) -- C:\Windows\System32\drivers\usbaapl64.sys [54784] ©
O58 - SDL:2009/04/11 07:39:40 A . (...) -- C:\Windows\System32\drivers\USBCAMD2.sys [32640]
O58 - SDL:2013/06/29 04:25:14 A . (...) -- C:\Windows\System32\drivers\usbd.sys [7552]
O58 - SDL:2013/07/12 11:19:36 A . (...) -- C:\Windows\System32\drivers\usbvideo.sys [168960]
O58 - SDL:2008/01/21 04:46:50 A . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\viaide.sys [18024] ©
O58 - SDL:2008/01/21 04:47:25 A . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\Windows\System32\drivers\vsmraid.sys [149048] ©
O58 - SDL:2006/11/02 11:40:24 A . (...) -- C:\Windows\System32\drivers\wacompen.sys [26624]

---\\ Derniers fichiers modifiés ou crées (Utilisateur) (6) - 5s
O61 - LFC: 2015/10/22 08:44:18 A . (.SosVirus.) -- C:\Users\vanessa\Downloads\AdsFix.exe [2719744]
O61 - LFC: 2015/10/20 11:59:16 A . (..) -- C:\Users\vanessa\Downloads\bitdefender_antivirus.exe [7207408]
O61 - LFC: 2015/10/22 08:44:18 A . (.SosVirus.) -- C:\Users\vanessa\Desktop\AdsFix.exe [2719744]
O61 - LFC: 2015/10/22 15:06:36 A . (..) -- C:\Users\vanessa\AppData\Local\Google\Chrome\User Data\ev_hashes_whitelist.bin [674082]
O61 - LFC: 2015/10/15 13:20:48 A . (..) -- C:\Users\vanessa\AppData\Local\Google\Chrome\User Data\PepperFlash\19.0.0.226\pepflashplayer.dll [16493256]
O61 - LFC: 2015/10/22 14:56:16 A . (..) -- C:\Users\vanessa\AppData\Local\ATI\ACE\Manifest.Bin [15219]

---\\ Associations Shell Spawning (9) - 0s
O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe ©
O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Ob.) -- C:\Windows\System32\eventvwr.exe ©
O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft (R) Windows Based Script Host.) -- C:\Windows\System32\wscript.exe ©
O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe ©
O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S

---\\ Menu de démarrage Internet (17) - 0s
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- chrome.exe ©
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Users\vanessa\AppData\Local\Google\Chrome\Application\chrome.exe http://www.mystartsearch.com/ ©
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (...) -- iexplore.exe
O68 - StartMenuInternet: <>[HKLM\..\Shell\open\Command] (...) -- C:\Program Files (x86)\Orange\Launcher\Launcher.exe -appid browser
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (...) -- C:\Program Files (x86)\Netscape\Navigator 9\navigator.ex http://www.mystartsearch.com/ =>PUP.Optional.StartSearch
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Users\vanessa\AppData\Local\Google\Chrome\Application\chrome.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Users\vanessa\AppData\Local\Google\Chrome\Application\chrome.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - Utilitaire d’initialisation d’Internet Expl.) -- C:\Windows\SysWOW64\ie4uinit.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Netscape - Navigator Helper.) -- C:\Program Files (x86)\Netscape\Navigator 9\uninstall\helper.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Google Inc. - Google Chrome.) -- C:\Users\vanessa\AppData\Local\Google\Chrome\Application\chrome.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Google Inc. - Google Chrome.) -- C:\Users\vanessa\AppData\Local\Google\Chrome\Application\chrome.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - Utilitaire d’initialisation d’Internet Expl.) -- C:\Windows\SysWOW64\ie4uinit.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Netscape - Navigator Helper.) -- C:\Program Files (x86)\Netscape\Navigator 9\uninstall\helper.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Users\vanessa\AppData\Local\Google\Chrome\Application\chrome.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Users\vanessa\AppData\Local\Google\Chrome\Application\chrome.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - Utilitaire d’initialisation d’Internet Expl.) -- C:\Windows\SysWOW64\ie4uinit.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Netscape - Navigator Helper.) -- C:\Program Files (x86)\Netscape\Navigator 9\uninstall\helper.exe

---\\ Recherche d'infection sur les navigateurs (19) - 23s
O69 - SBI: prefs.js [vanessa - c35r2w0g.default] user_pref("extensions.a14fef81ee28d4335a493c2d6383fd42ff9b4872bccb5bcom70121.70121.description", "iWebar"); =>PUP.Optional.CrossRider
O69 - SBI: prefs.js [vanessa - c35r2w0g.default] user_pref("extensions.a14fef81ee28d4335a493c2d6383fd42ff9b4872bccb5bcom70121.70121.internaldb.monetization_plugin_bundledUrls.expi[...] =>PUP.Optional.Monetization
O69 - SBI: prefs.js [vanessa - c35r2w0g.default] user_pref("extensions.a14fef81ee28d4335a493c2d6383fd42ff9b4872bccb5bcom70121.70121.internaldb.monetization_plugin_bundledWithHash.[...] =>PUP.Optional.Monetization
O69 - SBI: prefs.js [vanessa - c35r2w0g.default] user_pref("extensions.a14fef81ee28d4335a493c2d6383fd42ff9b4872bccb5bcom70121.70121.internaldb.monetization_plugin_notBundledArr_.e[...] =>PUP.Optional.Monetization
O69 - SBI: prefs.js [vanessa - c35r2w0g.default] user_pref("extensions.a14fef81ee28d4335a493c2d6383fd42ff9b4872bccb5bcom70121.70121.internaldb.monetization_plugin_notBundledArr_.v[...] =>PUP.Optional.Monetization
O69 - SBI: prefs.js [vanessa - c35r2w0g.default] user_pref("extensions.a14fef81ee28d4335a493c2d6383fd42ff9b4872bccb5bcom70121.70121.internaldb.monetization_plugin_regBundledWithSo[...] =>PUP.Optional.Monetization
O69 - SBI: prefs.js [vanessa - c35r2w0g.default] user_pref("extensions.a14fef81ee28d4335a493c2d6383fd42ff9b4872bccb5bcom70121.70121.name", "iWebar V2.1"); =>PUP.Optional.CrossRider
O69 - SBI: prefs.js [vanessa - c35r2w0g.default] user_pref("extensions.a14fef81ee28d4335a493c2d6383fd42ff9b4872bccb5bcom70121.70121.publisher", "iWebar"); =>PUP.Optional.CrossRider
O69 - SBI: prefs.js [vanessa - c35r2w0g.default] user_pref("extensions.a9321b2762c2e4c5fbd04b8118e512707c0c8a2d632754caca0b252e936311db9com32850.32850.name", "Object Browser"); =>PUP.Optional.ObjectBrowser
O69 - SBI: prefs.js [vanessa - c35r2w0g.default] user_pref("extensions.a9321b2762c2e4c5fbd04b8118e512707c0c8a2d632754caca0b252e936311db9com32850.32850.publisher", "Object Browser"[...] =>PUP.Optional.ObjectBrowser
O69 - SBI: prefs.js [vanessa - c35r2w0g.default] user_pref("extensions.ad4db60df25f14dae9dd18185c395f9e794c9ab86be3ebcom72893.72893.internaldb.monetization_plugin_bundledUrls.expi[...] =>PUP.Optional.Monetization
O69 - SBI: prefs.js [vanessa - c35r2w0g.default] user_pref("extensions.ad4db60df25f14dae9dd18185c395f9e794c9ab86be3ebcom72893.72893.internaldb.monetization_plugin_bundledWithHash.[...] =>PUP.Optional.Monetization
O69 - SBI: prefs.js [vanessa - c35r2w0g.default] user_pref("extensions.ad4db60df25f14dae9dd18185c395f9e794c9ab86be3ebcom72893.72893.internaldb.monetization_plugin_notBundledArr_.e[...] =>PUP.Optional.Monetization
O69 - SBI: prefs.js [vanessa - c35r2w0g.default] user_pref("extensions.ad4db60df25f14dae9dd18185c395f9e794c9ab86be3ebcom72893.72893.internaldb.monetization_plugin_notBundledArr_.v[...] =>PUP.Optional.Monetization
O69 - SBI: prefs.js [vanessa - c35r2w0g.default] user_pref("extensions.ad4db60df25f14dae9dd18185c395f9e794c9ab86be3ebcom72893.72893.internaldb.monetization_plugin_regBundledWithSo[...] =>PUP.Optional.Monetization
O69 - SBI: prefs.js [vanessa - c35r2w0g.default] user_pref("extensions.ad4db60df25f14dae9dd18185c395f9e794c9ab86be3ebcom72893.72893.name", "CinemaPlus-3.2c"); =>PUP.Optional.CrossRider
O69 - SBI: prefs.js [vanessa - c35r2w0g.default] user_pref("extensions.ad4db60df25f14dae9dd18185c395f9e794c9ab86be3ebcom72893.72893.publisher", "Cinema Plus"); =>PUP.Optional.CrossRider
O69 - SBI: prefs.js [vanessa - c35r2w0g.default] user_pref("extensions.enabledAddons", "defsearchp%40gmail.com:1.0.0.1039,deskCutv2%40gmail.com:0.0.10,d4db60df25f14dae9dd18%40185c[...] =>PUP.Optional.DeskCut
O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} - (Google) - http://www.google.com/

---\\ Enumère les services démarrés par Svchost (31) - 0s
O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d’application.) -- C:\Windows\System32\aelupsvc.dll [26624] ©
O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll [85504] ©
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [302080] ©
O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [49664] ©
O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [49664] ©
O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\system32\srvsvc.dll [179712] ©
O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\System32\gpsvc.dll [719360] ©
O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\ikeext.dll [462848] ©
O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Service Audio Windows.) -- C:\Windows\System32\Audiosrv.dll [446976] ©
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’.) -- C:\Windows\System32\rasauto.dll [98304] ©
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire de connexions d'accès distant.) -- C:\Windows\System32\rasmans.dll [309760] ©
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll [88064] ©
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements systèm.) -- C:\Windows\System32\Sens.dll [61952] ©
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l'application d'assistance à.) -- C:\Windows\System32\ipnathlp.dll [342016] ©
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM.) -- C:\Windows\System32\tapisrv.dll [318976] ©
O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gestionnaire des connexions distantes Termi.) -- C:\Windows\System32\termsrv.dll [548352] ©
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Up.) -- C:\Windows\system32\wuaueng.dll [2428952] ©
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière.) -- C:\Windows\System32\qmgr.dll [1081856] ©
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [302080] ©
O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur u.) -- C:\Windows\System32\iphlpsvc.dll [225280] ©
O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d'ouverture de session secon.) -- C:\Windows\system32\seclogon.dll [28672] ©
O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll [45056] ©
O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\system32\iscsiexe.dll [154112] ©
O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédia.) -- C:\Windows\system32\mmcss.dll [37888] ©
O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\Windows\system32\kmsvc.dll [86528] ©
O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll [74752] ©
O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\system32\schedsvc.dll [855552] ©
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\system32\wbem\WMIsvc.dll [221696] ©
O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service de configuration des services Termi.) -- C:\Windows\System32\SessEnv.dll [74752] ©
O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\System32\browser.dll [103424] ©
O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\system32\profsvc.dll [178688] ©

---\\ Liste des exceptions du parefeu Windows (56) - 3s
O87 - FAEL: "{D14156DB-45A3-478A-BCB0-FDE7201127F0}" [In-None-P6-TRUE] .(...) -- c:\Program Files (x86)\Hewlett-Packard\Media\TV\QP.exe (.not file.)
O87 - FAEL: "{AB74550E-04D0-4BD1-998C-6FA309B150CE}" [In-None-P6-TRUE] .(...) -- c:\Program Files (x86)\Hewlett-Packard\Media\TV\QPService.exe (.not file.)
O87 - FAEL: "{882A590C-9B33-4861-9A04-FEDF29A510D8}" [In-None-P6-TRUE] .(...) -- c:\Program Files (x86)\Hewlett-Packard\Media\DVD\HPTouchSmartMusic.exe (.not file.)
O87 - FAEL: "{CB2F6E0F-EF71-4C09-AEDE-DEDEB03CD06D}" [In-None-P6-TRUE] .(...) -- c:\Program Files (x86)\Hewlett-Packard\Media\DVD\HPTouchSmartPhoto.exe (.not file.)
O87 - FAEL: "{B865F4AF-57B8-48A0-9EE8-6763F548F86B}" [In-None-P6-TRUE] .(...) -- c:\Program Files (x86)\Hewlett-Packard\Media\DVD\HPTouchSmartVideo.exe (.not file.)
O87 - FAEL: "{844528F6-7F8C-44E8-B21C-569A1AD4E966}" [In-None-P6-TRUE] .(...) -- c:\Program Files (x86)\Hewlett-Packard\Media\DVD\TSMAgent.exe (.not file.)
O87 - FAEL: "{2D4002F3-8125-466A-AD95-4EF53C965999}" [In-None-P6-TRUE] .(...) -- c:\Program Files (x86)\Hewlett-Packard\Media\DVD\Kernel\CLML\CLMLSvc.exe (.not file.)
O87 - FAEL: "{03B4673F-4887-4069-A2A5-AD9C4F3CFD8D}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\Hewlett-Packard\Media\DVD\HPTouchSmartMusic.exe (.not file.)
O87 - FAEL: "{67AAA0DE-1589-457A-95CF-0AD6D4E5E93A}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\Hewlett-Packard\Media\DVD\HPTouchSmartPhoto.exe (.not file.)
O87 - FAEL: "{252A312B-6735-4498-9A7A-19D3E81EEA0C}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\Hewlett-Packard\Media\DVD\HPTouchSmartVideo.exe (.not file.)
O87 - FAEL: "{7A55CD63-8633-4440-B318-24364553A91A}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\Hewlett-Packard\Media\DVD\TSMAgent.exe (.not file.)
O87 - FAEL: "{B75E4312-315C-47E5-A899-726D8E407DF5}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\Hewlett-Packard\Media\DVD\Kernel\CLML\CLMLSvc.exe (.not file.)
O87 - FAEL: "{37BFC9F7-7921-43A9-857A-4FFD7BDAB2D5}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\Hewlett-Packard\Media\TV\QP.exe (.not file.)
O87 - FAEL: "{E913858C-E190-4E48-B1B4-9E848B9E542A}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\Hewlett-Packard\Media\TV\QPService.exe (.not file.)
O87 - FAEL: "{AEAA2E67-21AC-422D-9947-1032F94C4651}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe (.not file.)
O87 - FAEL: "TCP Query User{6902838C-3D78-4C88-AF30-9A826402A8F0}C:\program files (x86)\emule\emule.exe" [In-None-P6-TRUE] .(...) -- C:\program files (x86)\emule\emule.exe (.not file.)
O87 - FAEL: "UDP Query User{86AC8D12-5A23-4E97-882A-101FBD77D9B4}C:\program files (x86)\emule\emule.exe" [In-None-P17-TRUE] .(...) -- C:\program files (x86)\emule\emule.exe (.not file.)
O87 - FAEL: "{6B6A41BF-83A6-46DC-9B8A-92F5EE6865E3}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\LimeWire\LimeWire.exe (.not file.)
O87 - FAEL: "{9F675B7E-279F-4A06-A716-F83E8F48F8D7}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\LimeWire\LimeWire.exe (.not file.)
O87 - FAEL: "TCP Query User{6AE69076-768A-4F09-B1DE-9C844021C832}C:\program files (x86)\imesh applications\imesh\imesh.exe" [In-None-P6-TRUE] .(...) -- C:\program files (x86)\imesh applications\imesh\imesh.exe (.not file.) =>PUP.Optional.iMesh
O87 - FAEL: "UDP Query User{C5485932-FE44-4E5B-8417-BC250CF999C2}C:\program files (x86)\imesh applications\imesh\imesh.exe" [In-None-P17-TRUE] .(...) -- C:\program files (x86)\imesh applications\imesh\imesh.exe (.not file.) =>PUP.Optional.iMesh
O87 - FAEL: "{86D3EA06-2F54-4E19-A0BF-C3F038D24D1F}" [In-None-P6-TRUE] .(...) -- E:\data\eSKernel.exe (.not file.)
O87 - FAEL: "{97C90A31-C489-4A3D-B60E-CE9F4336FFBC}" [In-None-P17-TRUE] .(...) -- E:\data\eSKernel.exe (.not file.)
O87 - FAEL: "{1BBD8787-C831-46A0-AAF4-FFE03698B9B1}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\Windows iLivid Toolbar\Datamngr\ToolBar\dtUser.exe (.not file.) =>PUP.Optional.Datamngr
O87 - FAEL: "{CC1C6BBE-7C13-4544-BF0E-9F75BE8998B6}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\Windows iLivid Toolbar\Datamngr\ToolBar\dtUser.exe (.not file.) =>PUP.Optional.Datamngr
O87 - FAEL: "{52AD2E06-B65B-4F59-9D55-3EF55B944000}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\iMesh Applications\iMesh\iMesh.exe (.not file.) =>PUP.Optional.iMesh
O87 - FAEL: "{A3A6717F-8750-4681-A399-68EEAF9237F1}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\iMesh Applications\iMesh\iMesh.exe (.not file.) =>PUP.Optional.iMesh
O87 - FAEL: "{F13FB351-8A86-43E3-8B8C-876BE58B4BE4}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\iMesh Applications\iMesh\iMesh.exe (.not file.) =>PUP.Optional.iMesh
O87 - FAEL: "{59AD693C-C176-4433-AAD5-856BAABDD3AA}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\iMesh Applications\iMesh\iMesh.exe (.not file.) =>PUP.Optional.iMesh
O87 - FAEL: "{7929B983-AEF9-40AF-AF7A-CBA641DB5F50}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\iMesh Applications\MediaBar\Datamngr\ToolBar\dtUser.exe (.not file.) =>PUP.Optional.iMesh
O87 - FAEL: "{3F001C3F-92EC-497E-A246-605CF57C181E}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\iMesh Applications\MediaBar\Datamngr\ToolBar\dtUser.exe (.not file.) =>PUP.Optional.iMesh
O87 - FAEL: "{B92DD127-EE24-4D60-A3CD-0F42D553E375}" [In-None-P6-TRUE] .(...) -- C:\Users\vanessa\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZX9YV1AK\SweetImSetup[1].exe (.not file.) =>PUP.Optional.SweetIM
O87 - FAEL: "{BE591CD3-38E7-47B9-80E7-485E0BE8FDBA}" [In-None-P17-TRUE] .(...) -- C:\Users\vanessa\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZX9YV1AK\SweetImSetup[1].exe (.not file.) =>PUP.Optional.SweetIM
O87 - FAEL: "{481B6059-0B5D-4BEE-ABBF-E6CCAD32353D}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\Searchqu Toolbar\Datamngr\ToolBar\dtUser.exe (.not file.) =>PUP.Optional.Datamngr
O87 - FAEL: "{452A5F36-956D-47EE-B533-9EA36FE9B4BB}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\Searchqu Toolbar\Datamngr\ToolBar\dtUser.exe (.not file.) =>PUP.Optional.Datamngr
O87 - FAEL: "{DBD83785-A9AB-4CB9-A57A-D4068BB8D926}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\dtUser.exe (.not file.) =>PUP.Optional.SearchResults
O87 - FAEL: "{FF5FEE24-2D72-4C48-8C1B-0737D2AA0057}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\dtUser.exe (.not file.) =>PUP.Optional.SearchResults
O87 - FAEL: "{798AD8C4-1C7B-435A-AAC5-E08E4580A2D7}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\LeapFrog\LeapFrog Connect Tag\bin\TAGMonitor.exe (.not file.)
O87 - FAEL: "{F8F053FC-B3D3-496C-AC7E-5E23D16A647D}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\LeapFrog\LeapFrog Connect Tag\bin\TAGMonitor.exe (.not file.)
O87 - FAEL: "{CCEB1E45-B158-413D-A20C-2F28EB25D176}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\LeapFrog\LeapFrog Connect Tag\bin\LeapFrogConnectTag.exe (.not file.)
O87 - FAEL: "{8B5000CD-D2A6-425A-AEEB-64259F2442B4}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\LeapFrog\LeapFrog Connect Tag\bin\LeapFrogConnectTag.exe (.not file.)
O87 - FAEL: "{7FC13A03-4FF5-45D9-AD74-41C41762696C}" [In-None-P17-FALSE] .(...) -- c:\Program Files (x86)\Hewlett-Packard\Media\TV\QP.exe (.not file.)
O87 - FAEL: "{B8C93CE0-01C5-4360-8A6F-82D504FF2DA8}" [In-None-P17-FALSE] .(...) -- C:\Program Files (x86)\Hewlett-Packard\Media\TV\QP.exe (.not file.)
O87 - FAEL: "{BE63974F-AAF3-4C19-B7F6-9C171E76577D}" [In-None-P17-FALSE] .(...) -- c:\Program Files (x86)\Hewlett-Packard\Media\TV\QPService.exe (.not file.)
O87 - FAEL: "{4128B7C2-31A5-440A-8F41-5BCB0312AC62}" [In-None-P17-FALSE] .(...) -- C:\Program Files (x86)\Hewlett-Packard\Media\TV\QPService.exe (.not file.)
O87 - FAEL: "{BBA1319C-438F-4C04-BED8-5BA2A711F95F}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\mystarttb\dtuser.exe (.not file.) =>PUP.Optional.StartSearch
O87 - FAEL: "{614329D1-6ADF-4D29-9F8C-35F80AD8D23B}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\mystarttb\dtuser.exe (.not file.) =>PUP.Optional.StartSearch
O87 - FAEL: "{B0871ACC-E393-447C-A277-ED59999CF35C}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\mystarttb\ToolbarCleaner.exe (.not file.) =>PUP.Optional.StartSearch
O87 - FAEL: "{637771AB-0F02-4912-8AAA-C4D7346BBA27}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\mystarttb\ToolbarCleaner.exe (.not file.) =>PUP.Optional.StartSearch
O87 - FAEL: "{9FA0F64C-451A-4DD9-A2EA-CF65B38EECBA}" [In-None-P6-TRUE] .(...) -- C:\ProgramData\EmailNotifier\EmailNotifier.exe (.not file.)
O87 - FAEL: "{E71D56CC-63C4-46FB-A7FF-823FD7729EC2}" [In-None-P17-TRUE] .(...) -- C:\ProgramData\EmailNotifier\EmailNotifier.exe (.not file.)
O87 - FAEL: "{6C1C7DA7-FAF5-40F2-AC42-50F694F03AE8}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (.not file.)
O87 - FAEL: "{3CAD3BF9-CF47-4EF2-BD5B-57377868A157}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (.not file.)
O87 - FAEL: "{35274C4D-B2CB-456F-96BE-D5ED4895CE2D}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe (.not file.) =>PUP.Optional.CrossBrowse
O87 - FAEL: "{70506DED-F83E-4B5A-91D3-524069F197BB}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\MyBrowser\MyBrowser\Application\mybrowser.exe (.not file.)
O87 - FAEL: "{07EFDB05-8902-4245-9D8B-76869B5D91B0}" [In-None-P17-TRUE] .(...) -- C:\Users\vanessa\AppData\Local\BrowserAir\Application\BrowserAir.exe (.not file.) =>PUP.Optional.BrowserAir

---\\ Services non Microsoft (SR=Démarré,SS=Stoppé) (20) - 24s

SR - Auto [2010/03/18 12:19:26] [ 113152] ArcSoft Connect Daemon (ACDaemon) . (.ArcSoft Inc..) - C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe ©
SS - Demand [2015/10/19 14:12:23] [ 269000] Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe ©
SR - Auto [2012/12/21 17:27:46] [ 57008] Apple Mobile Device (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe ©
SR - Auto [2008/12/01 17:45:18] [ 932864] (Ati External Event Utility) . (.ATI Technologies Inc..) - C:\Windows\system32\Ati2evxx.exe ©
SR - Auto [2011/08/31 00:05:32] [ 462184] Service Bonjour (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe ©
SR - Auto [2010/07/30 07:51:50] [ 119632] Device Error Recovery Service (dgdersvc) . (.Devguru Co., Ltd..) - C:\Windows\System32\dgdersvc.exe ©
SS - Demand [2008/06/23 20:51:28] [ 164600] GameConsoleService (GameConsoleService) . (.WildTangent, Inc..) - C:\Program Files (x86)\HP Games\My HP Game Console\GameConsoleService.exe ©
SS - Auto [2015/08/31 20:44:03] [ 144200] Service Google Update (gupdate) (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ©
SS - Demand [2015/08/31 20:44:03] [ 144200] Service Google Update (gupdatem) (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ©
SS - Demand [2012/10/04 11:39:16] [ 194032] Google Software Updater (gusvc) . (.Google.) - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe ©
SR - Auto [2008/12/04 09:12:10] [ 94208] HP Health Check Service (HP Health Check Service) . (.Hewlett-Packard.) - c:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe ©
SR - Demand [2013/02/20 13:35:32] [ 641352] Service de l’iPod (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe ©
SR - Auto [2009/06/17 13:21:20] [ 73728] LightScribeService Direct Disc Labeling Service (LightScribeService) . (.Hewlett-Packard Company.) - C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe ©
SS - Auto [2015/10/05 09:48:46] [ 1135416] (MBAMService) . (.Malwarebytes.) - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe ©
SR - Auto [2014/03/27 14:07:18] [ 581568] Online Games Manager (ogmservice) . (.RealNetworks, Inc..) - C:\Program Files (x86)\Online Games Manager\ogmservice.exe ©
SR - Auto [2013/04/16 03:07:06] [ 39056] RealNetworks Downloader Resolver Service (RealNetworks Downloader Resolver Service) . (...) - C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
SR - Auto [2009/04/22 22:53:22] [ 296320] TV Background Capture Service (TVBCS) (TVCapSvc) . (.Copyright 2004.) - C:\Program Files (x86)\Hewlett-Packard\Media\TV\Kernel\TV\TVCapSvc.exe
SR - Auto [2009/04/22 22:53:22] [ 116104] TV Task Scheduler (TVTS) (TVSched) . (.Copyright 2004.) - C:\Program Files (x86)\Hewlett-Packard\Media\TV\Kernel\TV\TVSched.exe
SS - Auto [2008/11/28 18:04:24] [ 146928] Power Control [2009/06/20 20:54:37] ({55662437-DA8C-40c0-AADA-2C816A897A49}) . (.CyberLink Corp..) - C:\Program Files (x86)\Hewlett-Packard\Media\DVD\000.fcl ©

---\\ Scan Additionnel (22) - 0s
HKCU\SOFTWARE\itycCHUOs5WUsc =>PUP.Optional.CrossRider
HKCU\SOFTWARE\VkohbGTDTCk8ud16giVyobOPq9l =>PUP.Optional.CrossRider
HKCU\SOFTWARE\ZCKCfKqSbesQo3jz0nPf4 =>PUP.Optional.CrossRider
C:\Windows\Tasks\itycCHUOs5WUsc.job =>PUP.Optional.CrossRider
C:\Windows\Tasks\VkohbGTDTCk8ud16giVyobOPq9l.job =>PUP.Optional.CrossRider
C:\Windows\Tasks\ZCKCfKqSbesQo3jz0nPf4.job =>PUP.Optional.CrossRider
C:\Windows\System32\Tasks\itycCHUOs5WUsc =>PUP.Optional.CrossRider
C:\Windows\System32\Tasks\VkohbGTDTCk8ud16giVyobOPq9l =>PUP.Optional.CrossRider
C:\Windows\System32\Tasks\ZCKCfKqSbesQo3jz0nPf4 =>PUP.Optional.CrossRider
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{0F4CA3FF-B735-4933-9295-5B5052F63BD2} =>PUP.Optional.SPointer
HKCU\SOFTWARE\tstamptoken =>PUP.Optional.MaxComputerCleaner
HKCU\SOFTWARE\AppDataLow\Software\SpeedCheck =>PUP.Optional.SpeedCheck
C:\Program Files (x86)\6fcb1cab-aba1-444a-9c4f-fdaa667ac665 =>PUP.Optional.CrossRider
C:\Program Files (x86)\8604e57e-5945-4d73-8b8c-862d49c7952e =>PUP.Optional.CrossRider
C:\Program Files (x86)\8ca9f610-b9f7-4afe-a3b3-1325497c25a8 =>PUP.Optional.CrossRider
C:\Program Files (x86)\918916a2-e42b-4617-a406-afefa2947eda =>PUP.Optional.CrossRider
C:\Program Files (x86)\9aa9f672-7f6c-488d-bbb2-8160ba3d1f0b =>PUP.Optional.CrossRider
C:\Program Files (x86)\e89fa6e9-da9c-4d6d-9eeb-37d5d65ba570 =>PUP.Optional.CrossRider
C:\Program Files (x86)\fe792051-43c4-45c2-ae29-496784619430 =>PUP.Optional.CrossRider
C:\Program Files (x86)\Software =>PUP.Optional.Boxore
C:\ProgramData\Software =>PUP.Optional.Boxore
C:\Users\vanessa\AppData\Roaming\0F0C1V0F1L1I1P0E2V2Z1C1T1R2Z1F1C =>Adware.InstallCore

---\\ Récapitulatif des éléments trouvées sur votre station (16) - 0s
http://www.nicolascoolman.fr/pup-crossrider/ =>PUP.Optional.CrossRider
http://www.nicolascoolman.fr/adware-spointer/ =>PUP.Optional.SPointer
http://www.nicolascoolman.fr/blog =>PUP.Optional.MaxComputerCleaner
http://www.nicolascoolman.fr/blog =>PUP.Optional.SpeedCheck
http://www.nicolascoolman.fr/adware-boxore/ =>PUP.Optional.Boxore
http://www.nicolascoolman.fr/adware-installcore/ =>Adware.InstallCore
http://www.nicolascoolman.fr/pup-optional-startsearch/ =>PUP.Optional.StartSearch
http://www.nicolascoolman.fr/blog =>PUP.Optional.Monetization
http://www.nicolascoolman.fr/pup-objectbrowser/ =>PUP.Optional.ObjectBrowser
http://www.nicolascoolman.fr/blog =>PUP.Optional.DeskCut
http://www.nicolascoolman.fr/pup-imesh/ =>PUP.Optional.iMesh
http://www.nicolascoolman.fr/pup-datamngr/ =>PUP.Optional.Datamngr
http://www.nicolascoolman.fr/pup-sweetim/ =>PUP.Optional.SweetIM
http://www.nicolascoolman.fr/pup-searchresults/ =>PUP.Optional.SearchResults
http://www.nicolascoolman.fr/blog =>PUP.Optional.CrossBrowse
http://www.nicolascoolman.fr/pup-optional-browserair =>PUP.Optional.BrowserAir

~ End of the scan, 21311 items in 179 seconds (1335)(0)()