~ ZHPDiag v2016.2.20.56 Par Nicolas Coolman (2016/02/20)
~ Démarré par Marie (Administrator) (2016/02/21 11:43:19)
~ Site: http://www.nicolascoolman.com
~ Facebook: https://www.facebook.com/nicolascoolman1
~ Etat de la version:
~ Mode: Scanner
~ Rapport: C:\Users\Marie\Desktop\ZHPDiag.txt
~ Rapport: C:\Users\Marie\AppData\Roaming\ZHP\ZHPDiag.txt
~ UAC: Activate
~ Démarrage du système: Normal (Normal boot)
Windows 10 Home, 64-bit (Build 10586)

---\\ Navigateurs Internet (2) - 1s
GCIE: Google Chrome v48.0.2564.116
MSIE: Internet Explorer v11.103.10586.0

---\\ Informations sur les produits Windows (8) - 3s
~ Windows Server License Manager Script : OK
~ Licence Script File Génération : OK
~ Windows(R) Operating System, RETAIL channel
Windows ID Activation : OK
~ Windows Partial Key : 8HVX7
Windows License : OK
~ Windows Remaining Initializations Number : 1001
Windows Automatic Updates : OK

---\\ Logiciels de protection (1) - 2s
Windows Defender (Deactivate)

---\\ Logiciels de protection et autres (Superflus) (1) - 3s
McAfee Security Scan Plus v3.11.266.3

---\\ Logiciels d'optimisation (1) - 3s
CCleaner v5.14

---\\ Surveillance de Logiciels (2) - 3s
Adobe Flash Player 18 PPAPI
Adobe Reader 9.1 - Français

---\\ Informations sur le système (6) - 0s
~ Operating System: Intel64 Family 6 Model 37 Stepping 5, GenuineIntel
~ Operating System: 64-bit
~ Boot mode: Normal (Normal boot)
Total RAM: 3985.968 MB (59% free)
System Restore: Activé (Enable)
System drive C: has 125 GB () free of 183 GB

---\\ Mode de connexion au système (3) - 0s
~ Computer Name: MARIE-PC
~ User Name: Marie
~ Logged in as Administrator

---\\ Enumération des unités disques (3) - 0s
~ Drive C: has 125 GB free of 183 GB (System)
~ Drive D: has 272 GB free of 273 GB
~ Drive F: has 14 GB free of 15 GB

---\\ Etat du Centre de Sécurité Windows (7) - 0s
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK

---\\ Recherche particulière de fichiers génériques (25) - 0s
[MD5.95D730526EF81792CD6848D8D10FAA1C] - 29/01/2016 - (.Microsoft Corporation - Explorateur Windows.) -- C:\WINDOWS\Explorer.exe [4502352] =>.Microsoft Windows®
[MD5.0DCB89B1F3689BC6262FF30BBD603171] - 30/10/2015 - (.Microsoft Corporation - Processus hôte Windows (Rundll32).) -- C:\WINDOWS\System32\rundll32.exe [59392] =>.Microsoft Corporation
[MD5.CAD491DD9EC00BB841EA407D9C498C4A] - 30/10/2015 - (.Microsoft Corporation - Application de démarrage de Windows.) -- C:\WINDOWS\System32\Wininit.exe [290856] =>.Microsoft Windows Publisher®
[MD5.E0D72868E01C22B985A9341F8295613B] - 27/01/2016 - (.Microsoft Corporation - Extensions Internet pour Win32.) -- C:\WINDOWS\System32\wininet.dll [2757120] =>.Microsoft Corporation
[MD5.7B24B823404D53DA4748F21AD2BF04C9] - 05/01/2016 - (.Microsoft Corporation - Application d’ouverture de session Windows.) -- C:\WINDOWS\System32\Winlogon.exe [584704] =>.Microsoft Corporation
[MD5.9EEAA1B69DC3FD620AE576CC8F4147DC] - 30/10/2015 - (.Microsoft Corporation - Bibliothèque de licences.) -- C:\WINDOWS\System32\sppcomapi.dll [430592] =>.Microsoft Corporation
[MD5.E7B524818100B0FDE2B057C74B0C0DCD] - 30/10/2015 - (.Microsoft Corporation - DNS DLL de l’API Client.) -- C:\WINDOWS\System32\dnsapi.dll [686984] =>.Microsoft Windows®
[MD5.2796C0957F6F05A528DD64B8591371B6] - 30/10/2015 - (.Microsoft Corporation - DNS DLL de l’API Client.) -- C:\WINDOWS\Syswow64\dnsapi.dll [535088] =>.Microsoft Windows®
[MD5.CE50037751671682D1FDBBE7C9B37F4A] - 30/10/2015 - (.Microsoft Corporation - DLL client de l’API uilisateur de Windows m.) -- C:\WINDOWS\System32\fr-FR\user32.dll.mui [20480] =>.Microsoft Corporation
[MD5.70148EFA9A562E7185B75BBE7D376BF7] - 05/11/2015 - (.Microsoft Corporation - Pilote de fonction connexe pour WinSock.) -- C:\WINDOWS\System32\drivers\AFD.sys [578912] =>.Microsoft Windows®
[MD5.492B99D2E3D5D7BFD5F0AE1BE7BD37DD] - 30/10/2015 - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) -- C:\WINDOWS\System32\drivers\atapi.sys [28512] =>.Microsoft Windows®
[MD5.7F9C7226D743B232907ED2537B8A574F] - 30/10/2015 - (.Microsoft Corporation - CD-ROM File System Driver.) -- C:\WINDOWS\System32\drivers\Cdfs.sys [92672] =>.Microsoft Corporation
[MD5.82D97776BF982AA143BDC7DFB5054EA8] - 30/10/2015 - (.Microsoft Corporation - SCSI CD-ROM Driver.) -- C:\WINDOWS\System32\drivers\Cdrom.sys [173568] =>.Microsoft Corporation
[MD5.C9478D7DB7BE5D7ACE65CB1167F07320] - 30/10/2015 - (.Microsoft Corporation - DFS Namespace Client Driver.) -- C:\WINDOWS\System32\drivers\DfsC.sys [148480] =>.Microsoft Corporation
[MD5.84BC034B6BB763733C1949B7B9BAF976] - 30/10/2015 - (.Microsoft Corporation - High Definition Audio Bus Driver.) -- C:\WINDOWS\System32\drivers\HDAudBus.sys [79872] =>.Microsoft Corporation
[MD5.53FDD9E69189E546DE4740F8C4D8AB2F] - 30/10/2015 - (.Microsoft Corporation - Pilote de port i8042.) -- C:\WINDOWS\System32\drivers\i8042prt.sys [114688] =>.Microsoft Corporation
[MD5.9E5E8F2A1996F23B7E9687846AA81B01] - 30/10/2015 - (.Microsoft Corporation - IP Network Address Translator.) -- C:\WINDOWS\System32\drivers\IpNat.sys [143360] =>.Microsoft Corporation
[MD5.61F9F27A8C3D7BCD287FE98A440421CE] - 30/10/2015 - (.Microsoft Corporation - Minirdr SMB Windows NT.) -- C:\WINDOWS\System32\drivers\MRxSmb.sys [430944] =>.Microsoft Windows®
[MD5.F51C02D992A8D6BC5EC4D990F227D4C7] - 30/10/2015 - (.Microsoft Corporation - MBT Transport driver.) -- C:\WINDOWS\System32\drivers\netBT.sys [279552] =>.Microsoft Corporation
[MD5.EFEFC245B884B1BE0401931398DCD707] - 01/12/2015 - (.Microsoft Corporation - Pilote du système de fichiers NT.) -- C:\WINDOWS\System32\drivers\ntfs.sys [2152800] =>.Microsoft Windows®
[MD5.7D0FC96264C0F8F2C1321E33E8EB646C] - 30/10/2015 - (.Microsoft Corporation - Pilote de port parallèle.) -- C:\WINDOWS\System32\drivers\Parport.sys [96768] =>.Microsoft Corporation
[MD5.381B8F2311A0375676B635EA5E7C8AB0] - 30/10/2015 - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) -- C:\WINDOWS\System32\drivers\Rasl2tp.sys [104960] =>.Microsoft Corporation
[MD5.1DC2CC74B51E4DC4CD5A20C1021E4010] - 30/10/2015 - (.Microsoft Corporation - Redirecteur de périphérique de Microsoft RD.) -- C:\WINDOWS\System32\drivers\rdpdr.sys [173056] =>.Microsoft Corporation
[MD5.91D3F2A6253EF83EFBD7903028F58C4D] - 05/11/2015 - (.Microsoft Corporation - TDI Translation Driver.) -- C:\WINDOWS\System32\drivers\tdx.sys [118624] =>.Microsoft Windows®
[MD5.E1F91A727A04C9F8199D04FF3BBBF63C] - 30/10/2015 - (.Microsoft Corporation - Pilote de cliché instantané du volume.) -- C:\WINDOWS\System32\drivers\volsnap.sys [414560] =>.Microsoft Windows®

---\\ Liste des services NT non Microsoft et non désactivés (27) - 3s
O23 - Service: Apple Mobile Device Service (Apple Mobile Device Service) . (.Apple Inc. - MobileDeviceService.) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe =>.Apple Inc.®
O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe =>.Apple Inc.®
O23 - Service: CeWWGhfsjE (CeWWGhfsjE) . (.Time Lapse Solutions - ZombieNews Service.) - C:\ProgramData\toWMQmgq\CeWWGhfsjE.exe =>PUP.Optional.Salus
O23 - Service: CloudPrinter (CloudPrinter) . (...) - C:\ProgramData\CloudPrinter\CloudPrinter.exe
O23 - Service: Ecois (Ecois) . (...) - C:\ProgramData\Ecois\Ecois.exe =>PUP.Optional.Salus
O23 - Service: GlobalUpdater (GlobalUpdater) . (.SIEN S.A. - IMGUpdater.) - C:\Program Files (x86)\Common Files\IMGUpdater\IMGUpdater.exe {514EA00D30C8C244C3E818890BF73967} =>PUP.Optional.1stBrowser
O23 - Service: Service Google Update (gupdate) (gupdate) . (...) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /svc (.not file.)
O23 - Service: ihpmServer (ihpmServer) . (.RayDl - RayDl.) - C:\Program Files (x86)\RayDld\ihpmServer.exe =>PUP.Optional.CrossRider
O23 - Service: IMService (IMService) . (.Iminent - Iminent Service.) - C:\Program Files (x86)\Common Files\Umbrella\Umbrella244.exe =>PUP.Optional.IMBooster
O23 - Service: McAfee SiteAdvisor Service (McAfee SiteAdvisor Service) . (.McAfee, Inc. - McAfee WebAdvisor.) - C:\Program Files (x86)\McAfee\SiteAdvisor\mcsacore.exe =>.McAfee, Inc.®
O23 - Service: McAfee Services (mcmscsvc) . (.McAfee, Inc. - McAfee Services.) - C:\Program Files (x86)\McAfee\MSC\mcmscsvc.exe =>.McAfee, Inc.®
O23 - Service: McAfee Network Agent (McNASvc) . (.McAfee, Inc. - McAfee Network Agent.) - C:\Program Files (x86)\Common Files\McAfee\MNA\McNASvc.exe =>.McAfee, Inc.®
O23 - Service: McAfee Proxy Service (McProxy) . (.McAfee, Inc. - McAfee Proxy Service Module.) - C:\Program Files (x86)\Common Files\McAfee\McProxy\McProxy.exe =>.McAfee, Inc.®
O23 - Service: McAfee Real-time Scanner (McShield) . (.McAfee, Inc. - On-Access Scanner service.) - C:\Program Files\McAfee\VirusScan\Mcshield.exe =>.McAfee, Inc.®
O23 - Service: McAfee Personal Firewall Service (MpfService) . (.McAfee, Inc. - McAfee Personal Firewall Service.) - C:\Program Files (x86)\McAfee\MPF\MpfSrv.exe =>.McAfee, Inc.®
O23 - Service: McAfee Anti-Spam Service (MSK80Service) . (.McAfee, Inc. - McAfee Anti-Spam Server.) - C:\Program Files (x86)\McAfee\MSK\msksrver.exe =>.McAfee, Inc.®
O23 - Service: Norton Online Backup (NOBU) . (...) - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe" SERVICE (.not file.)
O23 - Service: Black Multimedia (pomemepezbt) . (...) - C:\Program Files (x86)\2D335060-1455788721-11B2-8000-E5F2D93BC593\knsk3F60.tmpfs =>PUP.Optional.CrossRider
O23 - Service: Rehse (Rehse) . (...) - C:\Users\Marie\AppData\Roaming\RestelRaixko\Hurlokle.exe" -cms (.not file.)
O23 - Service: shopperz210220161100 Updater (shopperz210220161100 Updater) . (...) - C:\Program Files\shopperz210220161100\Mebga.exe {01} =>PUP.Optional.Shopperz
O23 - Service: Search Module Update (SMUpd) . (.Search Module Ltd. - Search Module Update Service.) - C:\Program Files\Common Files\Goobzo\GBUpdate\smu.exe =>PUP.Optional.YTDownloader
O23 - Service: SSFK (SSFK) . (...) - C:\Program Files (x86)\SFK\SSFK.exe {11215762B1081827C6FC1DACBB35812CCFFD} =>PUP.Optional.MyWebSearch
O23 - Service: WdMan Service (WdMan) . (.TU-Funs LIMITED - TU-Funs.) - C:\ProgramData\nWdMn\WdMan.exe {5E0B6377F33581B2B9F8E9C1C0BAB247} =>PUP.Optional.WdsManPro
O23 - Service: Free Space Decimal Point (wucotusy) . (...) - C:\Program Files (x86)\2D335060-1455182889-11B2-8000-E5F2D93BC593\hnsi845A.tmp =>PUP.Optional.CrossRider
O23 - Service: Page Orientation Keyword (wuvebevyzbt) . (...) - C:\Program Files (x86)\2D335060-1455182889-11B2-8000-E5F2D93BC593\knsi5274.tmpfs =>PUP.Optional.CrossRider
O23 - Service: Double Spaced Firewall (zigipyro) . (...) - C:\Users\Marie\AppData\Local\2D335060-1456053709-11B2-8000-E5F2D93BC593\qnsq807A.tmp =>PUP.Optional.CrossRider
O23 - Service: Replicate Exit (zutuzuni) . (...) - C:\Program Files (x86)\2D335060-1455182889-11B2-8000-E5F2D93BC593\jnse6D94.tmp =>PUP.Optional.CrossRider

---\\ Services non Microsoft (SR=Démarré,SS=Stoppé) (32) - 23s

SR - Demand [21/02/2016] [ 232296] 92C6E48B-7627-4268-8FE6-B46B60ABCD23 (92C6E48B-7627-4268-8FE6-B46B60ABCD23) . (...) - C:\Program Files\shopperz210220161100\Mahedole.exe {01} =>PUP.Optional.Shopperz
SS - Demand [18/02/2016] [ 268976] Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe =>.Adobe Systems Incorporated®
SR - Auto [07/10/2015] [ 77104] Apple Mobile Device Service (Apple Mobile Device Service) . (.Apple Inc..) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe =>.Apple Inc.®
SR - Auto [12/08/2015] [ 462096] Service Bonjour (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe =>.Apple Inc.®
SS - Auto [21/02/2016] [ 3001832] CeWWGhfsjE (CeWWGhfsjE) . (.Time Lapse Solutions.) - C:\ProgramData\toWMQmgq\CeWWGhfsjE.exe =>PUP.Optional.Salus
SS - Auto [21/02/2016] [ 667136] CloudPrinter (CloudPrinter) . (...) - C:\ProgramData\CloudPrinter\CloudPrinter.exe
SR - Demand [21/02/2016] [ 1496936] csrcc (csrcc) . (...) - C:\Program Files\shopperz210220161100\csrcc.exe {01} =>PUP.Optional.Shopper
SS - Auto [21/02/2016] [ 667136] Ecois (Ecois) . (...) - C:\ProgramData\Ecois\Ecois.exe =>PUP.Optional.Salus
SR - Auto [25/01/2016] [ 378152] GlobalUpdater (GlobalUpdater) . (.SIEN S.A..) - C:\Program Files (x86)\Common Files\IMGUpdater\IMGUpdater.exe {514EA00D30C8C244C3E818890BF73967} =>PUP.Optional.1stBrowser
SR - Auto [17/02/2016] [ 275184] ihpmServer (ihpmServer) . (.RayDl.) - C:\Program Files (x86)\RayDld\ihpmServer.exe =>PUP.Optional.CrossRider
SR - Auto [25/01/2016] [ 3808408] IMService (IMService) . (.Iminent.) - C:\Program Files (x86)\Common Files\Umbrella\Umbrella244.exe =>PUP.Optional.IMBooster
SS - Demand [16/10/2015] [ 644880] Service de l’iPod (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe =>.Apple Inc.®
SR - Auto [11/02/2016] [ 158952] McAfee SiteAdvisor Service (McAfee SiteAdvisor Service) . (.McAfee, Inc..) - C:\Program Files (x86)\McAfee\SiteAdvisor\mcsacore.exe =>.McAfee, Inc.®
SS - Demand [02/12/2015] [ 289256] McAfee Security Scan Component Host Service (McComponentHostService) . (.McAfee, Inc..) - C:\Program Files\McAfee Security Scan\3.11.266\McCHSvc.exe =>.McAfee, Inc.®
SR - Auto [01/05/2009] [ 865832] McAfee Services (mcmscsvc) . (.McAfee, Inc..) - C:\Program Files (x86)\McAfee\MSC\mcmscsvc.exe =>.McAfee, Inc.®
SR - Auto [09/04/2009] [ 2482848] McAfee Network Agent (McNASvc) . (.McAfee, Inc..) - C:\Program Files (x86)\Common Files\McAfee\MNA\McNASvc.exe =>.McAfee, Inc.®
SS - Demand [16/06/2009] [ 696848] McAfee Scanner (McODS) . (.McAfee, Inc..) - C:\Program Files\McAfee\VirusScan\mcods.exe =>.McAfee, Inc.®
SR - Auto [09/04/2009] [ 359952] McAfee Proxy Service (McProxy) . (.McAfee, Inc..) - C:\Program Files (x86)\Common Files\McAfee\McProxy\McProxy.exe =>.McAfee, Inc.®
SS - Auto [18/06/2009] [ 155456] McAfee Real-time Scanner (McShield) . (.McAfee, Inc..) - C:\Program Files\McAfee\VirusScan\Mcshield.exe =>.McAfee, Inc.®
SS - Disabl [16/06/2009] [ 606736] McAfee SystemGuards (McSysmon) . (.McAfee, Inc..) - C:\Program Files (x86)\McAfee\VirusScan\mcsysmon.exe =>.McAfee, Inc.®
SR - Auto [09/06/2009] [ 893112] McAfee Personal Firewall Service (MpfService) . (.McAfee, Inc..) - C:\Program Files (x86)\McAfee\MPF\MpfSrv.exe =>.McAfee, Inc.®
SR - Auto [09/04/2009] [ 26640] McAfee Anti-Spam Service (MSK80Service) . (.McAfee, Inc..) - C:\Program Files (x86)\McAfee\MSK\msksrver.exe =>.McAfee, Inc.®
SR - Auto [18/02/2016] [ 207872] Black Multimedia (pomemepezbt) . (...) - C:\Program Files (x86)\2D335060-1455788721-11B2-8000-E5F2D93BC593\knsk3F60.tmpfs =>PUP.Optional.CrossRider
SR - Auto [21/02/2016] [ 169832] shopperz210220161100 Updater (shopperz210220161100 Updater) . (...) - C:\Program Files\shopperz210220161100\Mebga.exe {01} =>PUP.Optional.Shopperz
SR - Auto [05/02/2016] [ 2453504] Search Module Update (SMUpd) . (.Search Module Ltd..) - C:\Program Files\Common Files\Goobzo\GBUpdate\smu.exe =>PUP.Optional.YTDownloader
SR - Auto [18/02/2016] [ 389312] SSFK (SSFK) . (...) - C:\Program Files (x86)\SFK\SSFK.exe {11215762B1081827C6FC1DACBB35812CCFFD} =>PUP.Optional.MyWebSearch
SR - Auto [18/02/2016] [ 794376] WdMan Service (WdMan) . (.TU-Funs LIMITED.) - C:\ProgramData\nWdMn\WdMan.exe {5E0B6377F33581B2B9F8E9C1C0BAB247} =>PUP.Optional.WdsManPro
SR - Auto [11/02/2016] [ 416256] Free Space Decimal Point (wucotusy) . (...) - C:\Program Files (x86)\2D335060-1455182889-11B2-8000-E5F2D93BC593\hnsi845A.tmp =>PUP.Optional.CrossRider
SR - Auto [11/02/2016] [ 185856] Page Orientation Keyword (wuvebevyzbt) . (...) - C:\Program Files (x86)\2D335060-1455182889-11B2-8000-E5F2D93BC593\knsi5274.tmpfs =>PUP.Optional.CrossRider
SR - Auto [26/12/2015] [ 158720] Double Spaced Firewall (zigipyro) . (...) - C:\Users\Marie\AppData\Local\2D335060-1456053709-11B2-8000-E5F2D93BC593\qnsq807A.tmp =>PUP.Optional.CrossRider
SR - Auto [11/02/2016] [ 307712] Replicate Exit (zutuzuni) . (...) - C:\Program Files (x86)\2D335060-1455182889-11B2-8000-E5F2D93BC593\jnse6D94.tmp =>PUP.Optional.CrossRider

---\\ Tâches planifiées en automatique (40) - 5s
[MD5.011BD8A49AF856E8A8EE32652D1CFC05] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [268976] =>.Adobe Systems Incorporated®
[MD5.167F9E5AF87B57763DAAA27D3144C2A0] [APT] [advSRS4] (.SEC.) -- C:\Program Files (x86)\Samsung\Samsung Recovery Solution 4\WCScheduler.exe [2201192] =>.SEC
[MD5.2FA49064294A3CF40B4C3EFA0B36ADEE] [APT] [BatteryLifeExtender] (.Samsung Electronics. Co. Ltd..) -- C:\Program Files (x86)\Samsung\BatteryLifeExtender\BatteryLifeExtender.exe [6644736] =>.Samsung Electronics. Co. Ltd.
[MD5.7E49CB7F9BB53542F2944A527BC4E24D] [APT] [CCleanerSkipUAC] (.Piriform Ltd.) -- C:\Program Files\CCleaner\CCleaner.exe [6628056] =>.Piriform Ltd®
[MD5.00000000000000000000000000000000] [APT] [DNSPAWCATUCK] (...) -- C:\Program Files (x86)\DNS Unlocker [0] =>PUP.Optional.DNSUnlocker
[MD5.7C63C9CD15239F941A0863CDDD521054] [APT] [EasyBatteryManager] (.SAMSUNG Electronics co., LTD..) -- C:\Program Files (x86)\Samsung\EasyBatteryManager\EasyBatteryMgr4.exe [356352] =>.Samsung Electronics Co., Ltd.
[MD5.326691EA3A6B5576A9DEFEF47AA6C327] [APT] [EasyDisplayMgr] (.Samsung Electronics Co., Ltd..) -- C:\Program Files (x86)\Samsung\Easy Display Manager\dmhkcore.exe [847360] =>.Samsung Electronics Co., Ltd.
[MD5.E1B44A75947137F4143308D566889837] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [107848] =>.Google Inc®
[MD5.E1B44A75947137F4143308D566889837] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [107848] =>.Google Inc®
[MD5.00000000000000000000000000000000] [APT] [IBUpd2] (.Google Inc..) -- C:\Users\Marie\AppData\Local\BrowserAir\47.0.0.5\updater.exe (.not file.) [0] =>.Google Inc.
[MD5.756530BBD7D5DDB2600F0975E230DF39] [APT] [Lsevewreesce] (.Copyright © 2015.) -- C:\ProgramData\Lsevewreesce\1.0.7.1\ohceidna.exe [157184] =>Heuristic.PullUpdate
[MD5.00000000000000000000000000000000] [APT] [Luupty] (.Copyright © 2015.) -- C:\PROGRA~1\SHOPPE~1\Kuhdef.bat (.not file.) [0] =>PUP.Optional.Shopper
[MD5.007E9A3E9D1CB99F29DE79A6B410BE66] [APT] [rdf3019] (...) -- C:\Program Files (x86)\QuickSearch\rdf3019.exe [58636]
[MD5.10760383AA50CCFC7DB9B5AB0D326AAF] [APT] [SamsungSupportCenter] (.SAMSUNG Electronics.) -- C:\Program Files (x86)\Samsung\Samsung Support Center\SSCKbdHk.exe [1749504] =>.SAMSUNG Electronics
[MD5.00000000000000000000000000000000] [APT] [SMW_UpdateTask_Time_3438323037363738382d454a2a415034412a4a6c575a] (.SAMSUNG Electronics.) -- C:\ProgramData\SearchModule\smhe.js smu.exe (.not file.) [0] =>.SAMSUNG Electronics
[MD5.00000000000000000000000000000000] [APT] [SUPBackground] (.SAMSUNG Electronics.) -- C:\Program Files\Samsung\Samsung Update Plus\SUPBackground.exe (.not file.) [0] =>.SAMSUNG Electronics
[MD5.81CA803DB59C6C7A0F87ECED3E36BB2D] [APT] [Uiuge] (...) -- C:\Program Files\shopperz210220161100\Esiolij.bat [76] =>PUP.Optional.Shopperz
[MD5.E5728FFF1D7425CC12A24934E7B81138] [APT] [updateTask] (...) -- c:/task.vbs [296]
[MD5.BC41666FF68C364CD3EAA486E50C9270] [APT] [Apple\] (.Apple Inc..) -- C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [563000] =>.Apple Inc.®
O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\WINDOWS\Tasks\Adobe Flash Player Updater.job [1002] =>.Adobe Systems Incorporated®
O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job [1090] =>.Google Inc®
O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job [1094] =>.Google Inc®
O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater [3976] =>.Adobe Systems Incorporated®
O39 - APT: advSRS4 - (.SEC.) -- C:\WINDOWS\System32\Tasks\advSRS4 [2656] =>.SEC
O39 - APT: BatteryLifeExtender - (.Samsung Electronics. Co. Ltd..) -- C:\WINDOWS\System32\Tasks\BatteryLifeExtender [2404] =>.Samsung Electronics. Co. Ltd.
O39 - APT: CCleanerSkipUAC - (.Piriform Ltd.) -- C:\WINDOWS\System32\Tasks\CCleanerSkipUAC [2856] =>.Piriform Ltd®
O39 - APT: DNSPAWCATUCK - (...) -- C:\WINDOWS\System32\Tasks\DNSPAWCATUCK [22226] =>PUP.Optional.DNSUnlocker
O39 - APT: EasyBatteryManager - (.SAMSUNG Electronics co., LTD..) -- C:\WINDOWS\System32\Tasks\EasyBatteryManager [2380] =>.Samsung Electronics Co., Ltd.
O39 - APT: EasyDisplayMgr - (.Samsung Electronics Co., Ltd..) -- C:\WINDOWS\System32\Tasks\EasyDisplayMgr [2472] =>.Samsung Electronics Co., Ltd.
O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore [3920] =>.Google Inc®
O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA [4152] =>.Google Inc®
O39 - APT: IBUpd2 - (.Google Inc..) -- C:\WINDOWS\System32\Tasks\IBUpd2 [3316] (.Orphean.) =>.Google Inc.
O39 - APT: Lsevewreesce - (.Copyright © 2015.) -- C:\WINDOWS\System32\Tasks\Lsevewreesce [3528] =>Heuristic.PullUpdate
O39 - APT: Luupty - (.Copyright © 2015.) -- C:\WINDOWS\System32\Tasks\Luupty [3404] (.Orphean.) =>PUP.Optional.Shopper
O39 - APT: rdf3019 - (...) -- C:\WINDOWS\System32\Tasks\rdf3019 [2044]
O39 - APT: SamsungSupportCenter - (.SAMSUNG Electronics.) -- C:\WINDOWS\System32\Tasks\SamsungSupportCenter [2570] =>.SAMSUNG Electronics
O39 - APT: SMW_UpdateTask_Time_3438323037363738382d454a2a415034412a4a6c575a - (.SAMSUNG Electronics.) -- C:\WINDOWS\System32\Tasks\SMW_UpdateTask_Time_3438323037363738382d454a2a415034412a4a6c575a [4404] (.Orphean.) =>.SAMSUNG Electronics
O39 - APT: SUPBackground - (.SAMSUNG Electronics.) -- C:\WINDOWS\System32\Tasks\SUPBackground [2462] (.Orphean.) =>.SAMSUNG Electronics
O39 - APT: Uiuge - (...) -- C:\WINDOWS\System32\Tasks\Uiuge [3404] =>PUP.Optional.Shopperz
O39 - APT: updateTask - (...) -- C:\WINDOWS\System32\Tasks\updateTask [3218]

---\\ Processus lancés (58) - 2s
[MD5.5839A8027D6D324A7CD494051A96628C] - (.Symantec Corporation - Norton Online Backup Service.) -- C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568] [PID.2040] =>.Symantec Corporation®
[MD5.B5C2F92EE1106DFE7BB1CCE4D35B6037] - (.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe [462096] [PID.1140] =>.Apple Inc.®
[MD5.447FA93BB3E0AD783B1AD39B60C843E8] - (.McAfee, Inc. - McAfee Proxy Service Module.) -- C:\Program Files (x86)\Common Files\McAfee\McProxy\McProxy.exe [359952] [PID.1520] =>.McAfee, Inc.®
[MD5.2D564BB1C4559A517B390A031955714D] - (.Apple Inc. - MobileDeviceService.) -- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77104] [PID.1688] =>.Apple Inc.®
[MD5.2873AD9CF174A0E9508E5D96FE95AA87] - (...) -- C:\Program Files (x86)\2D335060-1455788721-11B2-8000-E5F2D93BC593\knsk3F60.tmpfs [207872] [PID.2072] =>PUP.Optional.CrossRider
[MD5.6F25B0439AB219914E255C73B1F0D677] - (.RayDl - RayDl.) -- C:\Program Files (x86)\RayDld\ihpmServer.exe [275184] [PID.2168] =>PUP.Optional.CrossRider
[MD5.ACF5A739EAE55A7080B1699BDF901F18] - (...) -- C:\Users\Marie\AppData\Roaming\RestelRaixko\Hurlokle.exe [125800] [PID.2208] {01}
[MD5.7D38CFBFB7BC4F9DA8A12AB63D2408B6] - (.McAfee, Inc. - McAfee WebAdvisor.) -- C:\Program Files (x86)\McAfee\SiteAdvisor\mcsacore.exe [158952] [PID.2228] =>.McAfee, Inc.®
[MD5.91D1015685F88C5CB8938F6D1F7A8A11] - (.SIEN S.A. - IMGUpdater.) -- C:\Program Files (x86)\Common Files\IMGUpdater\IMGUpdater.exe [378152] [PID.2256] {514EA00D30C8C244C3E818890BF73967} =>PUP.Optional.IMGUpdater
[MD5.43D02972E39E3AE3386F1CAF8CCA7B0F] - (.Iminent - Iminent Service.) -- C:\Program Files (x86)\Common Files\Umbrella\Umbrella244.exe [3808408] [PID.2412] =>PUP.Optional.IMBooster
[MD5.C75E30539519B83CD041F8F057269D5C] - (.McAfee, Inc. - McAfee Anti-Spam Server.) -- C:\Program Files (x86)\McAfee\MSK\msksrver.exe [26640] [PID.2976] =>.McAfee, Inc.®
[MD5.DDF8E1BA0C7502BC02FB5F904D049E52] - (.McAfee, Inc. - McAfee Personal Firewall Service.) -- C:\Program Files (x86)\McAfee\MPF\MpfSrv.exe [893112] [PID.3004] =>.McAfee, Inc.®
[MD5.BC9DBFBC559E3FD5D4427CA5A316F8DB] - (...) -- C:\Program Files (x86)\2D335060-1455182889-11B2-8000-E5F2D93BC593\jnse6D94.tmp [307712] [PID.3012] =>PUP.Optional.CrossRider
[MD5.C70170CDB5E23B2A52C04348BC735E5E] - (...) -- C:\Program Files (x86)\2D335060-1455182889-11B2-8000-E5F2D93BC593\knsi5274.tmpfs [185856] [PID.3032] =>PUP.Optional.CrossRider
[MD5.542199EC8FAA7CB170B8F663D62ADA99] - (...) -- C:\Users\Marie\AppData\Local\2D335060-1456053709-11B2-8000-E5F2D93BC593\qnsq807A.tmp [158720] [PID.3056] =>PUP.Optional.CrossRider
[MD5.6CD6AF4F327CB03A3DA204FBF4E3CDA5] - (...) -- C:\Program Files (x86)\2D335060-1455182889-11B2-8000-E5F2D93BC593\hnsi845A.tmp [416256] [PID.1184] =>PUP.Optional.CrossRider
[MD5.7E539E82F1F72EC1970EF61D05F52781] - (...) -- C:\Program Files (x86)\SFK\SSFK.exe [389312] [PID.2300] {11215762B1081827C6FC1DACBB35812CCFFD}
[MD5.0D3B162C2EFA63AC0C4D208BFC34C3D1] - (...) -- C:\Program Files\shopperz210220161100\Mebga.exe [169832] [PID.1832] {01} =>PUP.Optional.Shopperz
[MD5.1295CE22D67A5363031AD9407CB8761E] - (.TU-Funs LIMITED - TU-Funs.) -- C:\ProgramData\nWdMn\WdMan.exe [794376] [PID.644] {5E0B6377F33581B2B9F8E9C1C0BAB247} =>PUP.Optional.WdsManPro
[MD5.652D2AFB3E0785C7158CD71496811A58] - (.McAfee, Inc. - McAfee Services.) -- C:\Program Files (x86)\McAfee\MSC\mcmscsvc.exe [865832] [PID.4152] =>.McAfee, Inc.®
[MD5.43D02972E39E3AE3386F1CAF8CCA7B0F] - (.Iminent - Iminent Service.) -- C:\Program Files (x86)\Common Files\Umbrella\Umbrella244.exe [3808408] [PID.4880] =>PUP.Optional.IMBooster
[MD5.9B6E0003258F8E3006C892AD51AC7036] - (.McAfee, Inc. - McAfee Integrated Security Platform.) -- C:\Program Files (x86)\McAfee.com\Agent\mcagent.exe [645328] [PID.532] =>.McAfee, Inc.®
[MD5.E1B44A75947137F4143308D566889837] - (.Google Inc. - Programme d'installation de Google.) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [107848] [PID.4772] =>.Google Inc®
[MD5.326691EA3A6B5576A9DEFEF47AA6C327] - (.Samsung Electronics Co., Ltd. - Easy Display Manager.) -- C:\Program Files (x86)\Samsung\Easy Display Manager\dmhkcore.exe [847360] [PID.3688] =>.Samsung Electronics Co., Ltd.
[MD5.167F9E5AF87B57763DAAA27D3144C2A0] - (.SEC - Samsung Recovery Solution 4.) -- C:\Program Files (x86)\Samsung\Samsung Recovery Solution 4\WCScheduler.exe [2201192] [PID.5012] =>.SEC
[MD5.10760383AA50CCFC7DB9B5AB0D326AAF] - (.SAMSUNG Electronics - SSCKbdHk.) -- C:\Program Files (x86)\Samsung\Samsung Support Center\SSCKbdHk.exe [1749504] [PID.5044] =>.SAMSUNG Electronics
[MD5.904CA475F6ADD4080B0EA5144D23FDF1] - (...) -- C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeHost.exe [144384] [PID.5288]
[MD5.E72115D70204C8791438A023222A4788] - (.Coca updater - Coca updater.) -- C:\Program Files (x86)\MaxDrivrUpdater_v153.12905\MaxDrivrUpdater_Service.exe [811008] [PID.5532] =>PUP.Optional.MaxDriverUpdater
[MD5.662F62FC76FE24AE8E3BD41ADD3E6996] - (...) -- C:\Users\Marie\AppData\Local\dply_en_015020241\updply_en_015020241.exe [3146928] [PID.5632] =>PUP.Optional.CrossRider
[MD5.267BC4EF16FD6192DE86590CE9711167] - (.Fanta updater - Fanta updater.) -- C:\Program Files (x86)\MaxDrivrUpdater_v153.12905\ioproduct.exe [905728] [PID.5760] =>PUP.Optional.MaxDriverUpdater
[MD5.2A58E8CBBF053B8BD2CD87B3DDAF734D] - (.ELAN Microelectronics Corp. - ETD Control Center.) -- C:\Program Files\Elantech\ETDCtrl.exe [2703752] [PID.6712] =>.ELAN Microelectronics Corporation®
[MD5.6A59AE2735639095CD93E58B0893914C] - (.Intel Corporation - igfxTray Module.) -- C:\Windows\System32\igfxtray.exe [168480] [PID.6732] =>.Intel Corporation - pGFX®
[MD5.4341A0AE66759EDC080D92DAA0D9B341] - (.Intel Corporation - hkcmd Module.) -- C:\Windows\System32\hkcmd.exe [393760] [PID.6868] =>.Intel Corporation - pGFX®
[MD5.6E216002F6B90EF13265BF9ED3EADC3D] - (.ELAN Microelectronics Corp. - ETD Control Center Helper.) -- C:\Program Files\Elantech\ETDCtrlHelper.exe [2364296] [PID.7008] =>.ELAN Microelectronics Corporation®
[MD5.5451A9DA41DA19CDD467616492D4096F] - (.Intel Corporation - persistence Module.) -- C:\Windows\System32\igfxpers.exe [418336] [PID.7060] =>.Intel Corporation - pGFX®
[MD5.C6992F5730886B6977313918583D13C7] - (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [14040296] [PID.7164] =>.Realtek Semiconductor Corp®
[MD5.13073D824242C492C5062ADEB7A96053] - (.Nosibay - Selection Tools.) -- C:\Users\Marie\AppData\Roaming\WTools\Selection Tools\Selection Tools.exe [3260144] [PID.6220] =>PUP.Optional.Nosibay
[MD5.484039B92DF4D87DADED4A8B0D4058B5] - (.Nosibay - Bubble Dock.) -- C:\Users\Marie\AppData\Roaming\Nosibay\Bubble Dock\LBubble Dock.exe [666384] [PID.308] =>PUP.Optional.CrossRider
[MD5.FCEC6F664FA7E5FE323165FBC9314470] - (.Oracle Corporation - Java Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [597040] [PID.4128] =>.Oracle America, Inc.®
[MD5.EDF4A2AB4AFEC101C8473158286E2024] - (...) -- C:\Program Files (x86)\rec_en_77\rec_en_77.exe [3957464] [PID.6080] {11219EC4C02D1E1878E59FED81CDA1E305F8} =>.Superfluous.Tuto4PC
[MD5.294C44C161624D039B704F4546083C1E] - (...) -- C:\Program Files (x86)\dply_en_015020241\dply_en_015020241.exe [3972784] [PID.6352] =>PUP.Optional.CrossRider
[MD5.BB569BD2A9F86D91F1163D2288D2FD02] - (.Intel Corporation - igfxext Module.) -- C:\Windows\System32\igfxext.exe [240672] [PID.3268] =>.Intel Corporation - pGFX®
[MD5.C15AF78C192CDFAEF65F731B1E27607C] - (.Nosibay - Bubble Dock.) -- C:\Users\Marie\AppData\Roaming\Nosibay\Bubble Dock\Bubble Dock.exe [5122832] [PID.564] =>PUP.Optional.CrossRider
[MD5.2DBD66025339C2540EFECFFBB5EB2380] - (.McAfee, Inc. - McAfee Network Agent.) -- C:\Program Files (x86)\Common Files\McAfee\MNA\McNASvc.exe [2482848] [PID.2236] =>.McAfee, Inc.®
[MD5.BD8067245BC953F5EC95612CB30DB1FF] - (...) -- C:\Program Files\shopperz210220161100\Mahedole.exe [232296] [PID.3836] {01} =>PUP.Optional.Shopperz
[MD5.99DF7C09B9D987A0B98482AC7F8D480F] - (...) -- C:\Program Files\shopperz210220161100\Fotoaas.exe [408064] [PID.5684] =>PUP.Optional.Shopperz
[MD5.0B086EC581F2AB3293677ADAFEE34997] - (...) -- C:\Program Files\shopperz210220161100\Fotoaas64.exe [467304] [PID.5588] {01} =>PUP.Optional.Shopperz
[MD5.0AD292268BEAE86F51A88805BB15D136] - (...) -- C:\Program Files\shopperz210220161100\csrcc.exe [1496936] [PID.6068] {01} =>PUP.Optional.Shopperz
[MD5.98922A57D0C8E46C3AB2AFA6A923A229] - (.Search Module Ltd. - Search Module Update Service.) -- C:\Program Files\Common Files\Goobzo\GBUpdate\smu.exe [2453504] [PID.7672] =>PUP.Optional.Goobzo
[MD5.5AFC1F763562C453C64B70886B460CDD] - (.Samsung Electronics Co., Ltd. - EasySpeedUpManager.) -- C:\Program Files (x86)\Samsung\EasySpeedUpManager\EasySpeedUpManager.exe [719360] [PID.3820] =>.Samsung Electronics Co., Ltd.
[MD5.756530BBD7D5DDB2600F0975E230DF39] - (.Copyright © 2015 - ohceidna.) -- C:\ProgramData\Lsevewreesce\1.0.7.1\ohceidna.exe [157184] [PID.5364] =>Heuristic.PullUpdate
[MD5.756530BBD7D5DDB2600F0975E230DF39] - (.Copyright © 2015 - ohceidna.) -- C:\ProgramData\Lsevewreesce\1.0.7.1\ohceidna.exe [157184] [PID.6308] =>Heuristic.PullUpdate
[MD5.1D47E04424F944337035C65E84BDA3D2] - (.Copyright ©2015 . - .) -- C:\Program Files (x86)\DNS Unlocker\dnspawcatuck.exe [538112] [PID.7456] =>PUP.Optional.DNSUnlocker
[MD5.6A7D18C7DF17EAD9ED0DD6278DBE22AA] - (.Oracle Corporation - Java Update Checker.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe [923184] [PID.6440] =>.Oracle America, Inc.®
[MD5.5EACAE406ADBF22C969602E6F3443A1D] - (.Adobe Systems Incorporated - Adobe® Flash® Player Utility.) -- C:\Windows\System32\Macromed\Flash\FlashUtil_ActiveX.exe [886264] [PID.5032] =>.Microsoft Windows Third Party Application Component®
[MD5.52F5D651B8E39F258C1C34272FEB1AB2] - (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner64.exe [8619224] [PID.7380] =>.Piriform Ltd®
[MD5.52F5D651B8E39F258C1C34272FEB1AB2] - (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner64.exe [8619224] [PID.2736] =>.Piriform Ltd®
[MD5.808A7BB8C03A3F52966AD06F42368343] - (.Nicolas Coolman - ZHPDiag.) -- F:\ZHPDiag3.exe [2126336] [PID.7612] =>.Nicolas Coolman

---\\ Google Chrome, Démarrage,Recherche,Extensions (5) - 1s
G0 - GCSP: Secure Preferences [User Data\Default][HomePage] http://www-searching.com/ =>PUP.Optional.SearchingCom
G2 - GCE: Preference [User Data\Default] [fheoggkfdfchfphceeifdbepaooicaho] SiteAdvisor
G2 - GCE: Preference [User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [nociobghckdhokecfeajdpimjeapnopn] __MSG_extensionName__
G2 - GCE: Preference [User Data\Default] [olghjjajidfdflkafeekiojnfmiolccp] __MSG_extensionName__

---\\ Firefox, Plugins,Demarrage,Recherche,Extensions (2) - 0s
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_245.dll =>.Adobe Systems Incorporated
P2 - FPN: [HKLM] [@Apple.com/iTunes,version=1.0] - (.Apple Inc..) -- C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll =>.Apple Inc.

---\\ Internet Explorer,Démarrage,Recherche,URLSearchHook (20) - 0s
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://%66%65%65%64.%73%6f%6e%69%63-%73%65%61%72%63%68.%63%6f%6d/?p=mko_awfzxipyrahdgkbsia1reaocn4pqucx_oqaxi0efkhrxobmbnpl8mollazvihqv-trq1btt5_tzc2o6iyq-lxdtvqs88knocducm6sfy-b6zhg4fwmrfgmzp1rn0ja674slqfvoao0w5vjsv9y-14somw8gt5xvgprg_fxu-frad1i1_f3b3p8yljekqak2bkooadw,,&q={searchterms} =>PUP.Optional.Linkury
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://samsung.msn.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://%66%65%65%64.%73%6f%6e%69%63-%73%65%61%72%63%68.%63%6f%6d/?p=mko_awfzxipyrahdgkbsia1reaocn4pqucx_oqaxi0efkhrxobmbnpl8mollazvihqv-trq1btt5_tzc2o6iyq-lxdtvqs88knocducm6sfy-b6zhg4fwmrfgmzp1rn0ja674slqfvoao0w5vjsv9y-14somw8gt5xvgprg_fxu-frad1i1_f3b3p8yljekqak2bkooadw,,&q={searchterms} =>PUP.Optional.Linkury
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://%66%65%65%64.%73%6f%6e%69%63-%73%65%61%72%63%68.%63%6f%6d/?p=mko_awfzxipyrahdgkbsia1reaocn4pqucx_oqaxi0efkhrxobmbnpl8mollazvihqv-trq1btt5_tzc2o6iyq-lxdtvqs88knocducm6sfy-b6zhg4fwmrfgmzp1rn0ja674slqfvoao0w5vjsv9y-14somw8gt5xvgprg_fxu-frad1i1_f3b3p8yljekqak2bkooadw,,&q={searchterms} =>PUP.Optional.Linkury
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchUrl,Default = http://%66%65%65%64.%73%6f%6e%69%63-%73%65%61%72%63%68.%63%6f%6d/?p=mko_awfzxipyrahdgkbsia1reaocn4pqucx_oqaxi0efkhrxobmbnpl8mollazvihqv-trq1btt5_tzc2o6iyq-lxdtvqs88knocducm6sfy-b6zhg4fwmrfgmzp1rn0ja674slqfvoao0w5vjsv9y-14somw8gt5xvgprg_fxu-frad1i1_f3b3p8yljekqak2bkooadw,,&q={searchterms} =>PUP.Optional.Linkury
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKEY_USERS\S-1-5-21-3838763673-1115839168-2840729140-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://%66%65%65%64.%73%6f%6e%69%63-%73%65%61%72%63%68.%63%6f%6d/?p=mko_awfzxipyrahdgkbsia1reaocn4pqucx_oqaxi0efkhrxobmbnpl8mollazvihqv-trq1btt5_tzc2o6iyq-lxdtvqs88knocducm6sfy-b6zhg4fwmrfgmzp1rn0ja674slqfvoao0w5vjsv9y-14somw8gt5xvgprg_fxu-frad1i1_f3b3p8yljekqak2bkooadw,,&q={searchterms} =>PUP.Optional.Linkury
R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphean =>.Microsoft Internet Explorer

---\\ Internet Explorer,Proxy Management (5) - 0s
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll

---\\ Internet Explorer,IniFiles, Autoloading programs (3) - 0s
F2 - REG:system.ini: UserInit=
F2 - REG:system.ini: Shell=C:\WINDOWS\explorer.exe (.Microsoft Corporation.) =>.Microsoft Corporation
F2 - REG:system.ini: VMApplet=

---\\ Etude du fichier hosts (2) - 0s
0
~ Le fichier hôte est sain (The hosts file is clean) (34)

---\\ Browser Helper Object de navigateur (BHO) (4) - 0s
O2 - BHO: shopperz210220161100 Helper [64Bits] - {03365380-5EE7-4832-9DCD-C245CA0E3D3A} . (...) -- C:\Program Files\shopperz210220161100\Naawhic.dll {01} =>PUP.Optional.Shopperz
O2 - BHO: McAfee Phishing Filter [64Bits] - {27B4851A-3207-45A2-B947-BE8AFE6163AB} . (...) -- C:\Program Files (x86)\McAfee\MSK\mskapbho.dll =>.McAfee, Inc.®
O2 - BHO: scriptproxy [64Bits] - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} . (.McAfee, Inc. - VSCore Script Scanner.) -- C:\Program Files (x86)\McAfee\VirusScan\scriptsn.dll =>.McAfee, Inc.®
O2 - BHO: IMinent WebBooster [64Bits] - {A09AB6EB-31B5-454C-97EC-9B294D92EE2A} . (.SIEN - Minibar.) -- C:\Program Files (x86)\Iminent\Minibar.InternetExplorer.BHOx86.dll =>PUP.Optional.IMBooster

---\\ Applications lancées au démarrage du système (35) - 1s
O4 - HKLM\..\Run: [ETDWare] . (.ELAN Microelectronics Corp. - ETD Control Center.) -- C:\Program Files\Elantech\ETDCtrl.exe =>.ELAN Microelectronics Corporation®
O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\Windows\System32\igfxtray.exe =>.Intel Corporation - pGFX®
O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\Windows\System32\hkcmd.exe =>.Intel Corporation - pGFX®
O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\Windows\System32\igfxpers.exe =>.Intel Corporation - pGFX®
O4 - HKLM\..\Run: [RtHDVCpl] . (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe =>.Realtek Semiconductor Corp®
O4 - HKLM\..\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe =>.Apple Inc.®
O4 - HKLM\..\Run: [SpaceSoundPro] C:\Program Files\SpaceSoundPro\SpaceSoundPro.exe (.not file.) =>PUP.Optional.SpaceSoundPro
O4 - HKCU\..\Run: [OneDrive] C:\Users\Marie\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background (.not file.)
O4 - HKCU\..\Run: [Steam] C:\Program Files (x86)\Steam\steam.exe" -silent (.not file.)
O4 - HKCU\..\Run: [CCleaner Monitoring] C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR (.not file.)
O4 - HKCU\..\Run: [WindApp] C:\Users\Marie\AppData\Roaming\Store\WindApp\WindApp.exe" /winstartup (.not file.) =>PUP.Optional.Nosibay
O4 - HKCU\..\Run: [Selection Tools] C:\Users\Marie\AppData\Roaming\WTools\Selection Tools\Selection Tools.exe" /winstartup (.not file.) =>PUP.Optional.Nosibay
O4 - HKCU\..\Run: [Bubble Dock] C:\Users\Marie\AppData\Roaming\Nosibay\Bubble Dock\LBubble Dock.exe" /winstartup (.not file.) =>PUP.Optional.BubbleDock
O4 - HKCU\..\RunOnce: [Uninstall C:\Users\Marie\AppData\Local\Microsoft\OneDrive\17.3.6201.1019_1\amd64] . (.Microsoft Corporation - Interpréteur de commandes Windows.) -- C:\Windows\System32\cmd.exe =>.Microsoft Corporation
O4 - HKLM\..\Wow6432Node\Run: [Norton Online Backup] . (.Symantec Corporation - Norton Online Backup Service.) -- C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe =>.Symantec Corporation®
O4 - HKLM\..\Wow6432Node\Run: [Microsoft Default Manager] C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" -resume (.not file.)
O4 - HKLM\..\Wow6432Node\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe =>.Adobe Systems, Incorporated®
O4 - HKLM\..\Wow6432Node\Run: [mcagent_exe] . (.McAfee, Inc. - McAfee Integrated Security Platform.) -- C:\Program Files (x86)\McAfee.com\Agent\mcagent.exe =>.McAfee, Inc.®
O4 - HKLM\..\Wow6432Node\Run: [UCam_Menu] . (.CyberLink Corp. - MUI StartMenu Application.) -- C:\Program Files (x86)\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe =>.CyberLink®
O4 - HKLM\..\Wow6432Node\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe =>.Oracle America, Inc.®
O4 - HKLM\..\Wow6432Node\Run: [rec_en_77] . (...) -- C:\Program Files (x86)\rec_en_77\rec_en_77.exe {11219EC4C02D1E1878E59FED81CDA1E305F8} =>.Superfluous.Tuto4PC
O4 - HKLM\..\Wow6432Node\Run: [dply_en_015020241] . (...) -- C:\Program Files (x86)\dply_en_015020241\dply_en_015020241.exe =>PUP.Optional.CrossRider
O4 - HKLM\..\Wow6432Node\Run: [gmsd_fr_005010241] (Orphean) =>PUP.Optional.CrossRider
O4 - HKLM\..\Wow6432Node\Run: [sun3] (Orphean)
O4 - HKLM\..\Wow6432Node\RunOnce: [IOPROTECT] . (...) -- C:\Program Files (x86)\MaxDrivrUpdater_v153.12905\ioproduct_service.bat =>PUP.Optional.MaxDriverUpdater
O4 - HKLM\..\Wow6432Node\RunOnce: [updply_en_015020241.exe] . (...) -- C:\Users\Marie\AppData\Local\dply_en_015020241\updply_en_015020241.exe =>PUP.Optional.CrossRider
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] . (.Microsoft Corporation - Microsoft OneDrive Setup.) -- C:\Windows\SysWOW64\OneDriveSetup.exe =>.Microsoft Corporation®
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] . (.Microsoft Corporation - Microsoft OneDrive Setup.) -- C:\Windows\SysWOW64\OneDriveSetup.exe =>.Microsoft Corporation®
O4 - HKUS\S-1-5-21-3838763673-1115839168-2840729140-1001\..\Run: [OneDrive] C:\Users\Marie\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background (.not file.)
O4 - HKUS\S-1-5-21-3838763673-1115839168-2840729140-1001\..\Run: [Steam] C:\Program Files (x86)\Steam\steam.exe" -silent (.not file.)
O4 - HKUS\S-1-5-21-3838763673-1115839168-2840729140-1001\..\Run: [CCleaner Monitoring] C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR (.not file.)
O4 - HKUS\S-1-5-21-3838763673-1115839168-2840729140-1001\..\Run: [WindApp] C:\Users\Marie\AppData\Roaming\Store\WindApp\WindApp.exe" /winstartup (.not file.) =>PUP.Optional.Nosibay
O4 - HKUS\S-1-5-21-3838763673-1115839168-2840729140-1001\..\Run: [Selection Tools] C:\Users\Marie\AppData\Roaming\WTools\Selection Tools\Selection Tools.exe" /winstartup (.not file.) =>PUP.Optional.Nosibay
O4 - HKUS\S-1-5-21-3838763673-1115839168-2840729140-1001\..\Run: [Bubble Dock] C:\Users\Marie\AppData\Roaming\Nosibay\Bubble Dock\LBubble Dock.exe" /winstartup (.not file.) =>PUP.Optional.BubbleDock
O4 - HKUS\S-1-5-21-3838763673-1115839168-2840729140-1001\..\RunOnce: [Uninstall C:\Users\Marie\AppData\Local\Microsoft\OneDrive\17.3.6201.1019_1\amd64] . (.Microsoft Corporation - Interpréteur de commandes Windows.) -- C:\Windows\System32\cmd.exe =>.Microsoft Corporation

---\\ Raccourcis Global Startup (35) - 4s
O4 - GS\Desktop [Administrateur]: Continue Last version Installation.lnk . (...) C:\Users\Marie\AppData\Local\Temp\ICReinstall_C7B.tmp.exe
O4 - GS\Desktop [Administrateur]: CyberLink YouCam.lnk . (.CyberLink Corp. - CyberLink YouCam.) C:\Program Files (x86)\CyberLink\YouCam\YouCam.exe =>.CyberLink®
O4 - GS\Desktop [Administrateur]: TheBrowser.lnk . (.Goobzo - TheBrowser.) C:\Users\Marie\AppData\Local\TheBrowser\Application\TheBrowser.exe =>PUP.Optional.Goobzo
O4 - GS\Desktop [Administrateur]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\Marie\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman
O4 - GS\Quicklaunch [Administrateur]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\Quicklaunch [Administrateur]: TheBrowser.lnk . (.Goobzo - TheBrowser.) C:\Users\Marie\AppData\Local\TheBrowser\Application\TheBrowser.exe =>PUP.Optional.Goobzo
O4 - GS\sendTo [Administrateur]: Skype.lnk . (...) C:\Program Files (x86)\Skype\Phone\Skype.exe
O4 - GS\TaskBar [Administrateur]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\Desktop [Marie]: Continue Last version Installation.lnk . (...) C:\Users\Marie\AppData\Local\Temp\ICReinstall_C7B.tmp.exe
O4 - GS\Desktop [Marie]: CyberLink YouCam.lnk . (.CyberLink Corp. - CyberLink YouCam.) C:\Program Files (x86)\CyberLink\YouCam\YouCam.exe =>.CyberLink®
O4 - GS\Desktop [Marie]: TheBrowser.lnk . (.Goobzo - TheBrowser.) C:\Users\Marie\AppData\Local\TheBrowser\Application\TheBrowser.exe =>PUP.Optional.Goobzo
O4 - GS\Desktop [Marie]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\Marie\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman
O4 - GS\Quicklaunch [Marie]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\Quicklaunch [Marie]: TheBrowser.lnk . (.Goobzo - TheBrowser.) C:\Users\Marie\AppData\Local\TheBrowser\Application\TheBrowser.exe =>PUP.Optional.Goobzo
O4 - GS\sendTo [Marie]: Skype.lnk . (...) C:\Program Files (x86)\Skype\Phone\Skype.exe
O4 - GS\TaskBar [Marie]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\CommonDesktop [Public]: Adobe Reader 9.lnk . (.Adobe Systems Incorporated - Adobe Reader 9.1.) C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe =>.Adobe Systems, Incorporated®
O4 - GS\CommonDesktop [Public]: CCleaner.lnk . (.Piriform Ltd - CCleaner.) C:\Program Files\CCleaner\CCleaner64.exe =>.Piriform Ltd®
O4 - GS\CommonDesktop [Public]: Easy Content Share.lnk . (.Macrovision Corporation - InstallShield.) C:\Windows\Installer\{2DDC70C1-C77A-4D08-89D2-9AB648504533}\EasyContentShare.e_0B20F9E1B3394ECDB2D2B14FF736BAD5.exe =>.Macrovision Corporation
O4 - GS\CommonDesktop [Public]: Easy Network Manager.lnk . (.Samsung Electronics Co. Ltd - Samsung Easy Network Manager.) C:\Program Files (x86)\Samsung\Easy Network Manager\ENM.exe
O4 - GS\CommonDesktop [Public]: EasyFileShare.lnk . (.SAMSUNG Electronics - Easy File Share.) C:\Program Files (x86)\Samsung\EasyFileShare\EasyFileShare.exe =>.Samsung Electronics CO., LTD.®
O4 - GS\CommonDesktop [Public]: Game Pack.lnk . (.Oberon Media Inc. - Game Park Game Console.) C:\Program Files (x86)\Game Pack\GameConsole\GamePack.exe =>.Oberon Media, Inc.®
O4 - GS\CommonDesktop [Public]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\CommonDesktop [Public]: Intel(R) Driver Update Utility.lnk . (.Intel - Intel Driver Update Utility.) C:\Program Files (x86)\Intel Driver Update Utility\DriverUpdateUI.exe =>.Intel(R) Driver Update Utility®
O4 - GS\CommonDesktop [Public]: iTunes.lnk . (.Apple Inc. - iTunes.) C:\Program Files\iTunes\iTunes.exe =>.Apple Inc.®
O4 - GS\CommonDesktop [Public]: McAfee Security Center.lnk . (.McAfee, Inc. - McAfee MISP Shell.) C:\Program Files (x86)\McAfee\MSC\mcshell.exe =>.McAfee, Inc.®
O4 - GS\CommonDesktop [Public]: McAfee Security Scan Plus.lnk . (.McAfee, Inc. - McAfee.) C:\Program Files\McAfee Security Scan\3.11.266\McUICnt.exe =>.McAfee, Inc.®
O4 - GS\CommonDesktop [Public]: OpenOffice 4.1.1.lnk . (.Apache Software Foundation - OpenOffice 4.1.1.) C:\Program Files (x86)\OpenOffice 4\program\soffice.exe =>.Apache Software Foundation
O4 - GS\CommonDesktop [Public]: Samsung Recovery Solution 4.lnk . (.SEC - Samsung Recovery Solution 4.) C:\Program Files (x86)\Samsung\Samsung Recovery Solution 4\Manager1.exe =>.SEC
O4 - GS\CommonDesktop [Public]: Samsung Support Center.lnk . (.SAMSUNG Electronics - Samsung Support Center.) C:\Program Files (x86)\Samsung\Samsung Support Center\SSCMain.exe =>.Samsung Electronics CO., LTD.®
O4 - GS\CommonDesktop [Public]: Samsung Update Plus.lnk . (...) C:\Program Files (x86)\Samsung\Samsung Update Plus\SupClientApp.exe =>.Samsung Electronics CO., LTD.®
O4 - GS\CommonDesktop [Public]: Steam.lnk . (.Valve Corporation - Steam Client Bootstrapper.) C:\Program Files (x86)\Steam\Steam.exe =>.Valve®
O4 - GS\CommonDesktop [Public]: User Guide.lnk . (.Samsung Electronics - Runmanual.) C:\Program Files\Samsung\SamsungManual\RunManual.exe =>.SAMSUNG Electronics
O4 - GS\Startup [Public]: McAfee Security Scan Plus.lnk . (.McAfee, Inc. - McAfee Security Scanner Scheduler.) C:\Program Files\McAfee Security Scan\3.11.266\SSScheduler.exe =>.McAfee, Inc.®
O4 - GS\Programs [Public]: Chrome .lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc®

---\\ Modification Domaine/Adresses DNS (11) - 0s
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{1ef09754-e649-4fb5-b594-02996d063fcd}: NameServer = 82.163.143.183,82.163.142.183
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{535c2219-a5d0-11e5-b238-806e6f6e6963}: NameServer = 104.197.191.4
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{8aadf6d4-ebc7-4b95-820e-12b1d9af826c}: NameServer = 104.197.191.4
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{9de8b9f5-2928-43ef-85c4-6f164baa8bcc}: NameServer = 104.197.191.4
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{a472971b-8435-4511-aead-907167eb2c85}: NameServer = 104.197.191.4
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{c3e4df46-8d88-4b9a-937a-b8f7fd520b24}: NameServer = 104.197.191.4
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{f2c91259-f1e2-474c-8b86-e8b86c28cd54}: NameServer = 104.197.191.4
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{f8cdd714-0bd7-4a3c-88cc-2193b5cfdb22}: NameServer = 104.197.191.4
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{1ef09754-e649-4fb5-b594-02996d063fcd}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{f2c91259-f1e2-474c-8b86-e8b86c28cd54}: DhcpNameServer = 192.168.0.1

---\\ Protocole additionnel (28) - 1s
O18 - Handler: about [64Bits] - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation
O18 - Handler: cdl [64Bits] - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation
O18 - Handler: dssrequest [64Bits] - {5513F07E-936B-4E52-9B00-067394E91CC5} . (.McAfee, Inc. - WebAdvisor.) -- c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll =>.McAfee, Inc.®
O18 - Handler: dvd [64Bits] - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\SysWOW64\MSVidCtl.dll =>.Microsoft Corporation
O18 - Handler: file [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation
O18 - Handler: ftp [64Bits] - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation
O18 - Handler: http [64Bits] - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation
O18 - Handler: https [64Bits] - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation
O18 - Handler: its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\SysWOW64\itss.dll =>.Microsoft Corporation
O18 - Handler: javascript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation
O18 - Handler: livecall [64Bits] - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll =>.Microsoft Corporation®
O18 - Handler: local [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation
O18 - Handler: mailto [64Bits] - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation
O18 - Handler: mhtml [64Bits] - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\SysWOW64\inetcomm.dll =>.Microsoft Corporation
O18 - Handler: mk [64Bits] - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation
O18 - Handler: ms-its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\SysWOW64\itss.dll =>.Microsoft Corporation
O18 - Handler: msnim [64Bits] - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll =>.Microsoft Corporation®
O18 - Handler: res [64Bits] - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation
O18 - Handler: sacore [64Bits] - {5513F07E-936B-4E52-9B00-067394E91CC5} . (.McAfee, Inc. - WebAdvisor.) -- c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll =>.McAfee, Inc.®
O18 - Handler: tbauth [64Bits] - {14654CA6-5711-491D-B89A-58E571679951} . (.Microsoft Corporation - TBAuth protocol handler.) -- C:\Windows\SysWOW64\tbauth.dll =>.Microsoft Corporation
O18 - Handler: tv [64Bits] - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\SysWOW64\MSVidCtl.dll =>.Microsoft Corporation
O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation
O18 - Handler: windows.tbauth [64Bits] - {14654CA6-5711-491D-B89A-58E571679951} . (.Microsoft Corporation - TBAuth protocol handler.) -- C:\Windows\SysWOW64\tbauth.dll =>.Microsoft Corporation
O18 - Handler: wlmailhtml [64Bits] - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} . (.Microsoft Corporation - Windows Live Mail.) -- C:\Program Files (x86)\Windows Live\Mail\mailcomm.dll =>.Microsoft Corporation®
O18 - Handler: wlpg [64Bits] - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (.Microsoft Corporation - Windows Live Album Download Protocol Handle.) -- C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll =>.Microsoft Corporation®
O18 - Filter: application/octet-stream [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\SysWOW64\mscoree.dll =>.Microsoft Corporation
O18 - Filter: application/x-complus [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\SysWOW64\mscoree.dll =>.Microsoft Corporation
O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\SysWOW64\mscoree.dll =>.Microsoft Corporation

---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (1) - 0s
O20 - AppInit_DLLs: . (...) - C:\ProgramData\Ecois\Uniis.dll =>PUP.Optional.Salus

---\\ Logiciels installés (117) - 11s
O42 - Logiciel: „Messenger“ pagalbinė priemonė - (.Microsoft Corporation.) [HKLM][64Bits] -- {7E274911-32ED-4489-9B04-4EF100D0E4D3} =>.Microsoft Corporation
O42 - Logiciel: Adobe Flash Player 18 PPAPI - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player PPAPI =>.Adobe Systems Incorporated®
O42 - Logiciel: Adobe Flash Player 19 NPAPI - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player NPAPI =>.Adobe Systems Incorporated®
O42 - Logiciel: Adobe Reader 9.1 - Français - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-7AD7-1036-7B44-A91000000001} =>.Adobe Systems Incorporated
O42 - Logiciel: Alice Greenfingers - (.Oberon Media.) [HKLM][64Bits] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-112920767} =>.Oberon Media
O42 - Logiciel: Apple Application Support (32 bits) - (.Apple Inc..) [HKLM][64Bits] -- {649A1FD9-5892-46AD-8DF0-C4A43FF61CB7} =>.Apple Inc.
O42 - Logiciel: Apple Application Support (64 bits) - (.Apple Inc..) [HKLM][64Bits] -- {0DE0A178-AC7B-4650-806C-CF226DE03766} =>.Apple Inc.
O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM][64Bits] -- {3540181E-340A-4E7A-B409-31663472B2F7} =>.Apple Inc.
O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM][64Bits] -- {FFD1F7F1-1AC9-4BC4-A908-0686D635ABAF} =>.Apple Inc.
O42 - Logiciel: Atheros Client Installation Program - (.Atheros.) [HKLM][64Bits] -- {D1434266-0486-4469-B338-A60082CC04E1} =>.Atheros
O42 - Logiciel: BatteryLifeExtender - (.Samsung.) [HKLM][64Bits] -- {74A579FB-EB06-497D-B194-01590D6FE51A} =>.Samsung
O42 - Logiciel: Bing Bar - (.Microsoft Corporation.) [HKLM][64Bits] -- {08234a0d-cf39-4dca-99f0-0c5cb496da81} =>.Microsoft Corporation®
O42 - Logiciel: Bing Bar Platform - (.Microsoft Corporation.) [HKLM][64Bits] -- {77C4850C-3592-4A2F-B652-ACB77A1EF77C} =>.Microsoft Corporation
O42 - Logiciel: Bing Rewards Client Installer - (.Microsoft Corporation.) [HKLM][64Bits] -- {61EDBE71-5D3E-4AB7-AD95-E53FEAF68C17} =>.Microsoft Corporation
O42 - Logiciel: Body Text Feathering - (.Body Text Feathering.) [HKLM][64Bits] -- PopupProduct
O42 - Logiciel: Bonbon Quest - (.Oberon Media.) [HKLM][64Bits] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111768557} =>.Oberon Media
O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM][64Bits] -- {56DDDFB8-7F79-4480-89D5-25E1F52AB28F} =>.Apple Inc.
O42 - Logiciel: Broadcom 802.11 Network Adapter - (.Broadcom Corporation.) [HKLM][64Bits] -- Broadcom 802.11 Network Adapter =>.Broadcom Corporation
O42 - Logiciel: Bubble Dock - (.Nosibay.) [HKCU][64Bits] -- Bubble Dock =>PUP.Optional.BubbleDock
O42 - Logiciel: Cake Mania - (.Oberon Media.) [HKLM][64Bits] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111199750} =>.Oberon Media
O42 - Logiciel: CCleaner - (.Piriform.) [HKLM][64Bits] -- CCleaner =>.Piriform Ltd®
O42 - Logiciel: Complément Messenger - (.Microsoft Corporation.) [HKLM][64Bits] -- {6E5324C1-84FC-4F76-9A3A-C65E07F80EE6} =>.Microsoft Corporation
O42 - Logiciel: Complemento Messenger - (.Microsoft Corporation.) [HKLM][64Bits] -- {3A09ED0F-8DDF-47BB-B53D-841AB9D1D3A7} =>.Microsoft Corporation
O42 - Logiciel: Counter-Strike: Global Offensive - (.Valve.) [HKLM][64Bits] -- Steam App 730 =>.SteamApp.Game
O42 - Logiciel: CyberLink YouCam - (.CyberLink Corp..) [HKLM][64Bits] -- {01FB4998-33C4-4431-85ED-079E3EEFE75D} =>.CyberLink Corp.
O42 - Logiciel: CyberLink YouCam - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D} =>.CyberLink Corp.
O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM][64Bits] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF} =>.Microsoft
O42 - Logiciel: Daycare Nightmare - (.Oberon Media.) [HKLM][64Bits] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-113128447} =>.Oberon Media
O42 - Logiciel: Desktop-play 000.015020241 - (.DESKTOPPLAY.) [HKLM][64Bits] -- dply_en_015020241_is1 =>PUP.Optional.CrossRider
O42 - Logiciel: DNS Unlocker version 1.4 - (.www.dnsunlocker.com.) [HKLM][64Bits] -- {E1527582-8509-4011-B922-29E3FB548882}_is1 =>PUP.Optional.DNSUnlocker
O42 - Logiciel: Doplnok programu Messenger - (.Microsoft Corporation.) [HKLM][64Bits] -- {6D2F0A26-ECEA-49CE-833C-9A6125F3D5E8} =>.Microsoft Corporation
O42 - Logiciel: Easy Content Share - (.Samsung Electronics Co., LTD.) [HKLM][64Bits] -- {2DDC70C1-C77A-4D08-89D2-9AB648504533} =>.Samsung Electronics Co., Ltd
O42 - Logiciel: Easy Display Manager - (.Samsung Electronics Co., Ltd..) [HKLM][64Bits] -- {17283B95-21A8-4996-97DA-547A48DB266F} =>.Samsung Electronics Co., Ltd.
O42 - Logiciel: Easy Network Manager - (.Samsung.) [HKLM][64Bits] -- {F9557866-B4C8-4CE5-8508-0E386BDC20B2} =>.Samsung
O42 - Logiciel: Easy SpeedUp Manager - (.Samsung Electronics Co.,Ltd..) [HKLM][64Bits] -- {EF367AA4-070B-493C-9575-85BE59D789C9} =>.Samsung Electronics Co.,Ltd.
O42 - Logiciel: EasyBatteryManager - (.Samsung.) [HKLM][64Bits] -- {4A331D24-A9E8-484F-835E-1BA7B139689C} =>.Samsung
O42 - Logiciel: EasyFileShare - (.Samsung.) [HKLM][64Bits] -- {C4582EED-A3FB-4358-8F3F-8C994460DF28} =>.Samsung
O42 - Logiciel: ETDWare PS/2-x64 7.0.7.0_WHQL - (.ELAN Microelectronics Corp..) [HKLM][64Bits] -- Elantech =>.ELAN Microelectronics Corporation®
O42 - Logiciel: Flip Words - (.Oberon Media.) [HKLM][64Bits] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-110109903} =>.Oberon Media
O42 - Logiciel: Galapago - (.Oberon Media.) [HKLM][64Bits] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111307457} =>.Oberon Media
O42 - Logiciel: Game Pack - (.Oberon Media, Inc..) [HKLM][64Bits] -- {D1F6FBBB-B204-459A-9BF8-D06FFAB96CCC}_is1 =>.Oberon Media, Inc.
O42 - Logiciel: Gem Shop - (.Oberon Media.) [HKLM][64Bits] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-110521483} =>.Oberon Media
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM][64Bits] -- Google Chrome =>.Google Inc.
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {60EC980A-BDA2-4CB6-A427-B07A5498B4CA} =>.Google Inc.
O42 - Logiciel: Iminent - (.Iminent.) [HKLM][64Bits] -- IMBoosterARP =>PUP.Optional.IMBooster
O42 - Logiciel: IminentToolbar - (.Iminent.) [HKLM][64Bits] -- IminentToolbar =>PUP.Optional.IMBooster
O42 - Logiciel: Insaniquarium Deluxe - (.Oberon Media.) [HKLM][64Bits] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-110245793} =>.Oberon Media
O42 - Logiciel: Intel Driver Update Utility - (.Intel.) [HKLM][64Bits] -- {fe92d390-13ee-4660-a2f8-39a066fdffe0} =>.Intel
O42 - Logiciel: Intel(R) Driver Update Utility 2.2.0.5 - (.Intel.) [HKLM][64Bits] -- {C4FB3CF4-C845-4746-A9F5-476908266433} =>.Intel
O42 - Logiciel: Intel(R) Graphics Media Accelerator Driver - (.Intel Corporation.) [HKLM][64Bits] -- {F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA} =>.Intel Corporation®
O42 - Logiciel: Intel(R) Rapid Storage Technology - (.Intel Corporation.) [HKLM][64Bits] -- {3E29EE6C-963A-4aae-86C1-DC237C4A49FC} =>.Intel Corporation®
O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM][64Bits] -- {E690A491-702F-4DEC-9977-C015D1DBB57C} =>.Apple Inc.
O42 - Logiciel: Java 8 Update 65 - (.Oracle Corporation.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F83218065F0} =>.Oracle Corporation
O42 - Logiciel: Java Auto Updater - (.Oracle Corporation.) [HKLM][64Bits] -- {4A03706F-666A-4037-7777-5F2748764D10} =>.Oracle Corporation
O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM][64Bits] -- {1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4} =>.Microsoft Corporation
O42 - Logiciel: Mahjong Escape Ancient China - (.Oberon Media.) [HKLM][64Bits] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111252743} =>.Oberon Media
O42 - Logiciel: Marvell Miniport Driver - (.Marvell.) [HKLM][64Bits] -- Marvell Miniport Driver =>.Marvell
O42 - Logiciel: MaxDriverUpdater Service - (.CSDI.) [HKLM][64Bits] -- zz.12905.mdu =>PUP.Optional.MaxDriverUpdater
O42 - Logiciel: McAfee Security Scan Plus - (.McAfee, Inc..) [HKLM][64Bits] -- McAfee Security Scan =>.McAfee, Inc.®
O42 - Logiciel: McAfee SecurityCenter - (.McAfee, Inc..) [HKLM][64Bits] -- MSC =>.McAfee, Inc.®
O42 - Logiciel: McAfee WebAdvisor - (.McAfee, Inc..) [HKLM][64Bits] -- {35ED3F83-4BDC-4c44-8EC6-6A8301C7413A} =>.McAfee, Inc.®
O42 - Logiciel: Mesh Runtime - (.Microsoft Corporation.) [HKLM][64Bits] -- {8C6D6116-B724-4810-8F2D-D047E6B7D68E} =>.Microsoft Corporation
O42 - Logiciel: Messenger Assistent - (.Microsoft Corporation.) [HKLM][64Bits] -- {56D42B00-572C-4AE9-BCFB-CD45A3B5D0E1} =>.Microsoft Corporation
O42 - Logiciel: Messenger Companion - (.Microsoft Corporation.) [HKLM][64Bits] -- {0481A2EA-DA1D-4D10-A7C3-F8237948F6B5} =>.Microsoft Corporation
O42 - Logiciel: Messenger Companion - (.Microsoft Corporation.) [HKLM][64Bits] -- {066219C8-4BE6-46D7-9E01-60FCFA6B32DC} =>.Microsoft Corporation
O42 - Logiciel: Messenger Companion - (.Microsoft Corporation.) [HKLM][64Bits] -- {082E37F5-3924-4168-A69A-1B6B1FEA587C} =>.Microsoft Corporation
O42 - Logiciel: Messenger Companion - (.Microsoft Corporation.) [HKLM][64Bits] -- {3889988F-762B-4B85-AB17-71C9CC3AE445} =>.Microsoft Corporation
O42 - Logiciel: Messenger Companion - (.Microsoft Corporation.) [HKLM][64Bits] -- {50816F92-1652-4A7C-B9BC-48F682742C4B} =>.Microsoft Corporation
O42 - Logiciel: Messenger Companion - (.Microsoft Corporation.) [HKLM][64Bits] -- {6DD3B54B-F0D0-4A69-8344-F52033225A02} =>.Microsoft Corporation
O42 - Logiciel: Messenger Companion - (.Microsoft Corporation.) [HKLM][64Bits] -- {781E0319-15CD-4A4C-A47E-D9FFF697E7A1} =>.Microsoft Corporation
O42 - Logiciel: Messenger Companion - (.Microsoft Corporation.) [HKLM][64Bits] -- {8142D25E-028A-4563-86ED-5755783C8029} =>.Microsoft Corporation
O42 - Logiciel: Messenger Companion - (.Microsoft Corporation.) [HKLM][64Bits] -- {847C879C-1467-4924-A491-1302B4C58F70} =>.Microsoft Corporation
O42 - Logiciel: Messenger Companion - (.Microsoft Corporation.) [HKLM][64Bits] -- {939C80FA-96C9-44A6-B318-8E7D8BD8481B} =>.Microsoft Corporation
O42 - Logiciel: Messenger Companion - (.Microsoft Corporation.) [HKLM][64Bits] -- {96403552-88D1-429F-9C92-388B814B885E} =>.Microsoft Corporation
O42 - Logiciel: Messenger Companion - (.Microsoft Corporation.) [HKLM][64Bits] -- {B44F3823-52DD-45CA-A916-8B320778715D} =>.Microsoft Corporation
O42 - Logiciel: Messenger Companion - (.Microsoft Corporation.) [HKLM][64Bits] -- {C7DAD22D-29D4-438F-B986-03B9ED582EA4} =>.Microsoft Corporation
O42 - Logiciel: Messenger Companion - (.Microsoft Corporation.) [HKLM][64Bits] -- {D4F81B27-4054-4AD6-A588-265508BAA17C} =>.Microsoft Corporation
O42 - Logiciel: Messenger Companion - (.Microsoft Corporation.) [HKLM][64Bits] -- {D58E381C-DE02-46A9-B9D1-A2CB807D2676} =>.Microsoft Corporation
O42 - Logiciel: Messenger kísérő - (.Microsoft Corporation.) [HKLM][64Bits] -- {F3ECEB0A-82A0-4DB9-BB44-393A66BA0871} =>.Microsoft Corporation
O42 - Logiciel: Messenger Pratilac - (.Microsoft Corporation.) [HKLM][64Bits] -- {902585EB-8FA3-43A5-AD1C-5C9821A77114} =>.Microsoft Corporation
O42 - Logiciel: Messenger Suradnik - (.Microsoft Corporation.) [HKLM][64Bits] -- {3FD1CB9F-807F-451B-926C-9D19C84CFC61} =>.Microsoft Corporation
O42 - Logiciel: Messenger 사이트 공유 - (.Microsoft Corporation.) [HKLM][64Bits] -- {AB067785-9646-456B-91C3-E71228132A4C} =>.Microsoft Corporation
O42 - Logiciel: Messenger 分享元件 - (.Microsoft Corporation.) [HKLM][64Bits] -- {CF088261-BC81-4FB9-9BA0-7B5B9602D01A} =>.Microsoft Corporation
O42 - Logiciel: Messenger 浏览器插件 - (.Microsoft Corporation.) [HKLM][64Bits] -- {7F061FA8-5A87-4758-876B-17EE28B358D0} =>.Microsoft Corporation
O42 - Logiciel: Messenger-kumppani - (.Microsoft Corporation.) [HKLM][64Bits] -- {D657CCB5-9F2F-4D3C-B93D-F77EBEF79B66} =>.Microsoft Corporation
O42 - Logiciel: Microsoft Application Error Reporting - (.Microsoft Corporation.) [HKLM][64Bits] -- {95120000-00B9-0409-1000-0000000FF1CE} =>.Microsoft Corporation
O42 - Logiciel: Microsoft Default Manager - (.Microsoft Corporation.) [HKLM][64Bits] -- {1CAC7A41-583B-4483-9FA5-3E5465AFF8C2} =>.Microsoft Corporation
O42 - Logiciel: Microsoft DVD App Installation for Microsoft.WindowsDVDPlayer_2019.6.13291. - (.Microsoft Corporation.) [HKLM][64Bits] -- {25E80DAA-FD87-DCE5-202C-CC02F6673002} =>.Microsoft Corporation
O42 - Logiciel: Microsoft Search Enhancement Pack - (.Microsoft Corporation.) [HKLM][64Bits] -- {928B06E4-DDAA-476A-926A-641620326327} =>.Microsoft Corporation
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM][64Bits] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00} =>.Microsoft Corporation
O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM][64Bits] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F} =>.Microsoft
O42 - Logiciel: MSVCRT_amd64 - (.Microsoft.) [HKLM][64Bits] -- {D0B44725-3666-492D-BEF6-587A14BD9BD9} =>.Microsoft
O42 - Logiciel: Norton Online Backup - (.Symantec Corporation.) [HKLM][64Bits] -- {40A66DF6-22D3-44B5-A7D3-83B118A2C0DC} =>.Symantec Corporation
O42 - Logiciel: OpenOffice 4.1.1 - (.Apache Software Foundation.) [HKLM][64Bits] -- {121727D5-FDF3-4723-BA57-EB383440ED72} =>.Apache Software Foundation
O42 - Logiciel: Pomocnik Messenger - (.Microsoft Corporation.) [HKLM][64Bits] -- {BD8DA595-F501-4ABE-85A0-5C23E82472A0} =>.Microsoft Corporation
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC} =>.Realtek Semiconductor Corp®
O42 - Logiciel: SafeFinder - (.Linkury.) [HKLM][64Bits] -- {06A0C70F-1F26-4BAF-A682-D9F3D7040E2F} =>PUP.Optional.SmartBar
O42 - Logiciel: SafeFinder - (.Linkury.) [HKLM][64Bits] -- {34C1B5D1-0732-460E-BA31-2D154EDC923F} =>PUP.Optional.SmartBar
O42 - Logiciel: Samsung Recovery Solution 4 - (.Samsung.) [HKLM][64Bits] -- {145DE957-0679-4A2A-BB5C-1D3E9808FAB2} =>.Samsung
O42 - Logiciel: Samsung Support Center - (.Samsung.) [HKLM][64Bits] -- {F687E657-F636-44DF-8125-9FEEA2C362F5} =>.Samsung
O42 - Logiciel: Samsung Update Plus - (.Samsung Electronics Co., Ltd..) [HKLM][64Bits] -- {D3F2FAA5-FEC4-42AA-9ABA-1F763919A2B5} =>.Samsung Electronics Co., Ltd.
O42 - Logiciel: Satellite Comma - (.Satellite Comma.) [HKLM][64Bits] -- SoftwareUpdater =>PUP.Optional.SoftwareUpdater
O42 - Logiciel: Search module - (.Goobzo.) [HKLM][64Bits] -- Search module =>PUP.Optional.Goobzo
O42 - Logiciel: Setup - (...) [HKLM][64Bits] -- {7ADF667E-E14D-4D2C-827C-B0108F0D93BC} =>PUP.Optional.DesktopPlay
O42 - Logiciel: Setup - (...) [HKLM][64Bits] -- {7ADF667E-E14D-4D2C-827C-B0108F0D93BC}
O42 - Logiciel: shopperz - (.shopperz.) [HKLM][64Bits] -- {B679FFBA-49C3-4B3E-b72B-DB31A1330CCF} =>PUP.Optional.Shopperz
O42 - Logiciel: Slingo - (.Oberon Media.) [HKLM][64Bits] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-110160733} =>.Oberon Media
O42 - Logiciel: Spremljevalec Messenger - (.Microsoft Corporation.) [HKLM][64Bits] -- {F14F9EE9-9B68-42B4-90F7-0924F7619281} =>.Microsoft Corporation
O42 - Logiciel: Steam - (.Valve Corporation.) [HKLM][64Bits] -- Steam =>.Valve®
O42 - Logiciel: SVH - (...) [HKLM][64Bits] -- rec_en_77_is1 =>.Superfluous.Tuto4PC
O42 - Logiciel: TheBrowser - (.TheBrowser.) [HKCU][64Bits] -- TheBrowser
O42 - Logiciel: User Guide - (...) [HKLM][64Bits] -- {BAE68339-B0F6-4D33-9554-5A3DB2DFF5DA}
O42 - Logiciel: yoursearching - (...) [HKLM][64Bits] -- yoursearching =>PUP.Optional.YourSearching
O42 - Logiciel: Zombie News - (.Time Lapse Solutions.) [HKLM][64Bits] -- ZombieNews =>PUP.Optional.Salus
O42 - Logiciel: Компаньон Messenger - (.Microsoft Corporation.) [HKLM][64Bits] -- {3705D53F-BB01-4BEE-8585-289E71CAC4B4} =>.Microsoft Corporation
O42 - Logiciel: Помощник на Messenger - (.Microsoft Corporation.) [HKLM][64Bits] -- {FEA0181F-3758-46DA-B7EC-F3CDFA7E0CE7} =>.Microsoft Corporation
O42 - Logiciel: מסייע Messenger - (.Microsoft Corporation.) [HKLM][64Bits] -- {AB5977C5-11AE-4003-BA7D-261C48F2BC35} =>.Microsoft Corporation

---\\ HKCU & HKLM Software Keys (93) - 11s
HKLM\SOFTWARE\Wow6432Node\5da059a482fd494db3f252126fbc3d5b =>PUP.Optional.CrossRider
HKLM\SOFTWARE\Wow6432Node\Adobe
HKLM\SOFTWARE\Wow6432Node\America Online
HKLM\SOFTWARE\Wow6432Node\Apple Inc.
HKLM\SOFTWARE\Wow6432Node\Atheros
HKLM\SOFTWARE\Wow6432Node\BcmSetup
HKLM\SOFTWARE\Wow6432Node\CHECKINSTALLER
HKLM\SOFTWARE\Wow6432Node\CyberLink
HKLM\SOFTWARE\Wow6432Node\DESKTOPPLAY =>PUP.Optional.CrossRider
HKLM\SOFTWARE\Wow6432Node\Google
HKLM\SOFTWARE\Wow6432Node\ihpmserver =>PUP.Optional.CrossRider
HKLM\SOFTWARE\Wow6432Node\IMGUpdater =>PUP.Optional.IMGUpdater
HKLM\SOFTWARE\Wow6432Node\Iminent =>PUP.Optional.IMBooster
HKLM\SOFTWARE\Wow6432Node\InstallShield
HKLM\SOFTWARE\Wow6432Node\Intel
HKLM\SOFTWARE\Wow6432Node\JavaSoft
HKLM\SOFTWARE\Wow6432Node\JreMetrics
HKLM\SOFTWARE\Wow6432Node\Macromedia
HKLM\SOFTWARE\Wow6432Node\Marvell
HKLM\SOFTWARE\Wow6432Node\MaxDrivrUpdater =>PUP.Optional.MaxDriverUpdater
HKLM\SOFTWARE\Wow6432Node\McAfee
HKLM\SOFTWARE\Wow6432Node\McAfee.com
HKLM\SOFTWARE\Wow6432Node\McAfeeInstaller
HKLM\SOFTWARE\Wow6432Node\mcafeeupdater
HKLM\SOFTWARE\Wow6432Node\Mozilla
HKLM\SOFTWARE\Wow6432Node\MozillaPlugins
HKLM\SOFTWARE\Wow6432Node\mtEcois =>PUP.Optional.Salus
HKLM\SOFTWARE\Wow6432Node\Nuance
HKLM\SOFTWARE\Wow6432Node\Oberon Media
HKLM\SOFTWARE\Wow6432Node\ODBC
HKLM\SOFTWARE\Wow6432Node\OpenOffice
HKLM\SOFTWARE\Wow6432Node\Piriform
HKLM\SOFTWARE\Wow6432Node\QuickSearch
HKLM\SOFTWARE\Wow6432Node\RayDld =>PUP.Optional.CrossRider
HKLM\SOFTWARE\Wow6432Node\Realtek
HKLM\SOFTWARE\Wow6432Node\Realtek Semiconductor Corp.
HKLM\SOFTWARE\Wow6432Node\Reg
HKLM\SOFTWARE\Wow6432Node\Samsung
HKLM\SOFTWARE\Wow6432Node\Samsung Electronics Co., Ltd.
HKLM\SOFTWARE\Wow6432Node\SearchModule =>PUP.Optional.SearchModule
HKLM\SOFTWARE\Wow6432Node\shopperz210220161100 =>PUP.Optional.Shopperz
HKLM\SOFTWARE\Wow6432Node\SiteAdvisor
HKLM\SOFTWARE\Wow6432Node\Skype
HKLM\SOFTWARE\Wow6432Node\SprgFiles
HKLM\SOFTWARE\Wow6432Node\SRS Labs
HKLM\SOFTWARE\Wow6432Node\SVH
HKLM\SOFTWARE\Wow6432Node\Systweak =>.Superfluous.Systweak
HKLM\SOFTWARE\Wow6432Node\Tutorials =>PUP.Optional.AgenceExclusive
HKLM\SOFTWARE\Wow6432Node\Umbrella
HKLM\SOFTWARE\Wow6432Node\Valve
HKLM\SOFTWARE\Wow6432Node\WdsManPro =>PUP.Optional.WdsManPro
HKLM\SOFTWARE\Wow6432Node\Yahoo =>.Yahoo!
HKLM\SOFTWARE\Wow6432Node\yoursearchingSoftware =>PUP.Optional.YourSearching
HKLM\SOFTWARE\Wow6432Node\RegisteredApplications
HKCU\SOFTWARE\Adobe
HKCU\SOFTWARE\AppDataLow
HKCU\SOFTWARE\Apple Computer, Inc.
HKCU\SOFTWARE\Apple Inc.
HKCU\SOFTWARE\CyberLink
HKCU\SOFTWARE\DailyPcClean =>PUP.Optional.DailyPCClean
HKCU\SOFTWARE\Elantech
HKCU\SOFTWARE\Google
HKCU\SOFTWARE\Iminent =>PUP.Optional.IMBooster
HKCU\SOFTWARE\InstallPath
HKCU\SOFTWARE\Intel
HKCU\SOFTWARE\JavaSoft
HKCU\SOFTWARE\Licenses
HKCU\SOFTWARE\Macromedia
HKCU\SOFTWARE\Mine
HKCU\SOFTWARE\MozillaPlugins
HKCU\SOFTWARE\Netscape
HKCU\SOFTWARE\Nosibay =>PUP.Optional.SPointer
HKCU\SOFTWARE\Oberon Media
HKCU\SOFTWARE\OpenOffice
HKCU\SOFTWARE\Piriform
HKCU\SOFTWARE\Realtek
HKCU\SOFTWARE\Reg
HKCU\SOFTWARE\RegisteredApplications
HKCU\SOFTWARE\Rtp
HKCU\SOFTWARE\Samsung
HKCU\SOFTWARE\Skype
HKCU\SOFTWARE\Store =>PUP.Optional.Generic
HKCU\SOFTWARE\systweak =>.Superfluous.Systweak
HKCU\SOFTWARE\tstamptoken =>PUP.Optional.MaxComputerCleaner
HKCU\SOFTWARE\Tutorials =>PUP.Optional.AgenceExclusive
HKCU\SOFTWARE\TutoTag =>PUP.Optional.AgenceExclusive
HKCU\SOFTWARE\Valve
HKCU\SOFTWARE\Wow6432Node
HKCU\SOFTWARE\WTools =>PUP.Optional.Nosibay
HKCU\SOFTWARE\ZebHelpProcess Helper
HKCU\SOFTWARE\AppDataLow\Software
HKCU\SOFTWARE\AppDataLow\Software\DynConIE =>PUP.Optional.DynConIE
HKCU\SOFTWARE\AppDataLow\Software\JavaSoft

---\\ Contenu des dossiers Programmes (206) - 23s
O43 - CFD: 21/02/2016 - [] D -- C:\Program Files (x86)\2D335060-1455182889-11B2-8000-E5F2D93BC593 =>PUP.Optional.CrossRider
O43 - CFD: 21/02/2016 - [] D -- C:\Program Files (x86)\2D335060-1455788721-11B2-8000-E5F2D93BC593 =>PUP.Optional.CrossRider
O43 - CFD: 24/06/2015 - [] D -- C:\Program Files (x86)\Adobe =>.Adobe Systems, Incorporated®
O43 - CFD: 27/10/2015 - [] AD -- C:\Program Files (x86)\Apple Software Update =>.Apple Inc.®
O43 - CFD: 06/11/2010 - [] AD -- C:\Program Files (x86)\Atheros Client Installation Program
O43 - CFD: 06/11/2010 - [] AD -- C:\Program Files (x86)\Bing Bar Installer =>.Microsoft Corporation®
O43 - CFD: 27/10/2015 - [] AD -- C:\Program Files (x86)\Bonjour =>.Apple Inc.®
O43 - CFD: 21/02/2016 - [] D -- C:\Program Files (x86)\Common Files
O43 - CFD: 24/06/2015 - [] D -- C:\Program Files (x86)\CyberLink =>.CyberLink®
O43 - CFD: 18/02/2016 - [] D -- C:\Program Files (x86)\DNS Unlocker =>PUP.Optional.DNSUnlocker
O43 - CFD: 18/02/2016 - [] D -- C:\Program Files (x86)\dply_en_015020241 =>PUP.Optional.CrossRider
O43 - CFD: 24/06/2015 - [] D -- C:\Program Files (x86)\Game Pack =>.Oberon Media Inc.®
O43 - CFD: 24/06/2015 - [] D -- C:\Program Files (x86)\Google =>.Google Inc®
O43 - CFD: 21/02/2016 - [] AD -- C:\Program Files (x86)\Iminent {11217828115F75B5C1745A67997DD6FB4F38} =>PUP.Optional.IMBooster
O43 - CFD: 24/06/2015 - [] HD -- C:\Program Files (x86)\InstallShield Installation Information =>.Macrovision Corporation®
O43 - CFD: 06/11/2010 - [] D -- C:\Program Files (x86)\Intel =>.Intel Corporation®
O43 - CFD: 28/10/2015 - [] AD -- C:\Program Files (x86)\Intel Driver Update Utility =>.Intel(R) Driver Update Utility®
O43 - CFD: 23/12/2015 - [] D -- C:\Program Files (x86)\Internet Explorer
O43 - CFD: 27/10/2015 - [] D -- C:\Program Files (x86)\iTunes
O43 - CFD: 28/10/2015 - [] D -- C:\Program Files (x86)\Java =>.Oracle America, Inc.®
O43 - CFD: 06/11/2010 - [] D -- C:\Program Files (x86)\Marvell
O43 - CFD: 11/02/2016 - [] D -- C:\Program Files (x86)\MaxDrivrUpdater =>PUP.Optional.MaxDriverUpdater
O43 - CFD: 11/02/2016 - [] D -- C:\Program Files (x86)\MaxDrivrUpdater_v153.12905 =>PUP.Optional.MaxDriverUpdater
O43 - CFD: 23/08/2015 - [] AD -- C:\Program Files (x86)\McAfee =>.McAfee, Inc.®
O43 - CFD: 06/11/2010 - [] D -- C:\Program Files (x86)\McAfee.com =>.McAfee, Inc.®
O43 - CFD: 04/10/2015 - [] D -- C:\Program Files (x86)\Microsoft =>.Microsoft Corporation®
O43 - CFD: 04/10/2015 - [] AD -- C:\Program Files (x86)\Microsoft Application Virtualization Client =>.Microsoft Corporation®
O43 - CFD: 30/09/2015 - [] D -- C:\Program Files (x86)\Microsoft Office =>.Microsoft Corporation®
O43 - CFD: 16/01/2016 - [] AD -- C:\Program Files (x86)\Microsoft Silverlight =>.Microsoft Corporation®
O43 - CFD: 06/11/2010 - [] AD -- C:\Program Files (x86)\Microsoft SQL Server Compact Edition
O43 - CFD: 30/10/2015 - [] D -- C:\Program Files (x86)\Microsoft.NET
O43 - CFD: 18/12/2015 - [] D -- C:\Program Files (x86)\MSBuild
O43 - CFD: 06/11/2010 - [] D -- C:\Program Files (x86)\MSN Toolbar =>.Microsoft Corporation®
O43 - CFD: 18/02/2016 - [0] D -- C:\Program Files (x86)\Oasis Space =>PUP.Optional.OasisSpace
O43 - CFD: 26/06/2015 - [] AD -- C:\Program Files (x86)\OpenOffice 4
O43 - CFD: 21/02/2016 - [] D -- C:\Program Files (x86)\QuickSearch
O43 - CFD: 18/02/2016 - [] D -- C:\Program Files (x86)\RayDld =>PUP.Optional.CrossRider
O43 - CFD: 06/11/2010 - [] D -- C:\Program Files (x86)\Realtek =>.Realtek Semiconductor Corp®
O43 - CFD: 11/02/2016 - [] D -- C:\Program Files (x86)\rec_en_77 =>.Superfluous.Tuto4PC
O43 - CFD: 18/12/2015 - [] D -- C:\Program Files (x86)\Reference Assemblies
O43 - CFD: 06/11/2010 - [] D -- C:\Program Files (x86)\Samsung =>.Samsung Electronics CO., LTD.®
O43 - CFD: 21/02/2016 - [] D -- C:\Program Files (x86)\SFK {11215762B1081827C6FC1DACBB35812CCFFD} =>PUP.Optional.MyWebSearch
O43 - CFD: 21/02/2016 - [] D -- C:\Program Files (x86)\Steam =>.Valve®
O43 - CFD: 06/11/2010 - [] D -- C:\Program Files (x86)\Symantec =>.Symantec Corporation®
O43 - CFD: 06/11/2010 - [0] HD -- C:\Program Files (x86)\Temp
O43 - CFD: 14/07/2009 - [0] HD -- C:\Program Files (x86)\Uninstall Information
O43 - CFD: 30/10/2015 - [] D -- C:\Program Files (x86)\Windows Defender
O43 - CFD: 06/11/2010 - [] AD -- C:\Program Files (x86)\Windows Live =>.Microsoft Corporation®
O43 - CFD: 18/12/2015 - [] D -- C:\Program Files (x86)\Windows Mail
O43 - CFD: 30/10/2015 - [] D -- C:\Program Files (x86)\Windows Media Player
O43 - CFD: 30/10/2015 - [] D -- C:\Program Files (x86)\Windows Multimedia Platform
O43 - CFD: 30/10/2015 - [] D -- C:\Program Files (x86)\Windows NT
O43 - CFD: 30/10/2015 - [] D -- C:\Program Files (x86)\Windows Photo Viewer =>.Microsoft Corporation®
O43 - CFD: 30/10/2015 - [] D -- C:\Program Files (x86)\Windows Portable Devices
O43 - CFD: 18/12/2015 - [] SHD -- C:\Program Files (x86)\Windows Sidebar
O43 - CFD: 30/10/2015 - [] SD -- C:\Program Files (x86)\WindowsPowerShell
O43 - CFD: 30/10/2015 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility
O43 - CFD: 18/12/2015 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 30/10/2015 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 18/02/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
O43 - CFD: 18/02/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DESKTOPPLAY =>PUP.Optional.CrossRider
O43 - CFD: 18/12/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Game Pack
O43 - CFD: 06/11/2010 - [0] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
O43 - CFD: 18/12/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel Driver Update Utility
O43 - CFD: 18/12/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
O43 - CFD: 18/12/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
O43 - CFD: 30/10/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 18/12/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee
O43 - CFD: 24/12/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus
O43 - CFD: 18/12/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Starter (Français)
O43 - CFD: 13/01/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
O43 - CFD: 18/12/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Online Backup
O43 - CFD: 18/12/2015 - [] SD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.1
O43 - CFD: 18/12/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung
O43 - CFD: 24/12/2015 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp
O43 - CFD: 23/12/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
O43 - CFD: 30/10/2015 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools
O43 - CFD: 30/10/2015 - [0] RHD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC
O43 - CFD: 18/12/2015 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
O43 - CFD: 24/06/2015 - [] D -- C:\ProgramData\Adobe
O43 - CFD: 24/06/2015 - [] D -- C:\ProgramData\Apple
O43 - CFD: 24/06/2015 - [] D -- C:\ProgramData\Apple Computer
O43 - CFD: 21/12/2015 - [0] SHD -- C:\ProgramData\Application Data
O43 - CFD: 18/02/2016 - [0] D -- C:\ProgramData\Boxore =>PUP.Optional.Boxore
O43 - CFD: 06/10/2015 - [0] SHD -- C:\ProgramData\Bureau
O43 - CFD: 21/02/2016 - [] D -- C:\ProgramData\CloudPrinter
O43 - CFD: 30/10/2015 - [0] D -- C:\ProgramData\Comms
O43 - CFD: 11/01/2016 - [] D -- C:\ProgramData\CyberLink
O43 - CFD: 21/12/2015 - [0] SHD -- C:\ProgramData\Documents
O43 - CFD: 27/10/2015 - [] D -- C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7
O43 - CFD: 21/02/2016 - [] D -- C:\ProgramData\Ecois =>PUP.Optional.Salus
O43 - CFD: 21/02/2016 - [] D -- C:\ProgramData\Ecoiss =>PUP.Optional.Salus
O43 - CFD: 06/10/2015 - [0] SHD -- C:\ProgramData\Favoris
O43 - CFD: 28/10/2015 - [] D -- C:\ProgramData\Intel
O43 - CFD: 21/02/2016 - [] D -- C:\ProgramData\Lsevewreesce =>Heuristic.PullUpdate
O43 - CFD: 26/06/2015 - [] D -- C:\ProgramData\McAfee
O43 - CFD: 31/08/2015 - [] D -- C:\ProgramData\McAfee Security Scan
O43 - CFD: 06/10/2015 - [0] SHD -- C:\ProgramData\Menu Démarrer
O43 - CFD: 21/12/2015 - [] SD -- C:\ProgramData\Microsoft
O43 - CFD: 10/09/2015 - [] D -- C:\ProgramData\Microsoft OneDrive
O43 - CFD: 06/10/2015 - [0] SHD -- C:\ProgramData\Modèles
O43 - CFD: 18/02/2016 - [] D -- C:\ProgramData\nWdMn
O43 - CFD: 24/06/2015 - [] D -- C:\ProgramData\OberonGameConsole
O43 - CFD: 28/10/2015 - [] D -- C:\ProgramData\Oracle
O43 - CFD: 28/10/2015 - [] D -- C:\ProgramData\Package Cache
O43 - CFD: 30/10/2015 - [] D -- C:\ProgramData\regid.1991-06.com.microsoft
O43 - CFD: 06/11/2010 - [] D -- C:\ProgramData\SAMSUNG
O43 - CFD: 18/02/2016 - [] D -- C:\ProgramData\SearchModule
O43 - CFD: 06/11/2010 - [] D -- C:\ProgramData\SiteAdvisor
O43 - CFD: 04/10/2015 - [] D -- C:\ProgramData\Skype
O43 - CFD: 18/02/2016 - [] D -- C:\ProgramData\SoftwareDistribution
O43 - CFD: 06/11/2010 - [] D -- C:\ProgramData\Symantec
O43 - CFD: 24/06/2015 - [] D -- C:\ProgramData\Temp
O43 - CFD: 21/02/2016 - [] D -- C:\ProgramData\toWMQmgq
O43 - CFD: 18/12/2015 - [] D -- C:\ProgramData\USOPrivate
O43 - CFD: 30/07/2015 - [] D -- C:\ProgramData\USOShared
O43 - CFD: 03/10/2015 - [] D -- C:\ProgramData\VirtualizedApplications
O43 - CFD: 24/06/2015 - [] D -- C:\ProgramData\WinClon
O43 - CFD: 21/02/2016 - [] D -- C:\ProgramData\ZombieNews =>PUP.Optional.ZombieNews
O43 - CFD: 24/06/2015 - [] AD -- C:\Program Files (x86)\Common Files\Adobe
O43 - CFD: 24/06/2015 - [] D -- C:\Program Files (x86)\Common Files\Apple
O43 - CFD: 04/10/2015 - [] AD -- C:\Program Files (x86)\Common Files\DESIGNER
O43 - CFD: 21/02/2016 - [] D -- C:\Program Files (x86)\Common Files\IMGUpdater =>PUP.Optional.IMGUpdater
O43 - CFD: 06/11/2010 - [] D -- C:\Program Files (x86)\Common Files\InstallShield
O43 - CFD: 06/11/2010 - [] D -- C:\Program Files (x86)\Common Files\Intel
O43 - CFD: 28/10/2015 - [] D -- C:\Program Files (x86)\Common Files\Java
O43 - CFD: 21/02/2016 - [] D -- C:\Program Files (x86)\Common Files\Matity
O43 - CFD: 06/11/2010 - [] D -- C:\Program Files (x86)\Common Files\McAfee
O43 - CFD: 18/12/2015 - [] AD -- C:\Program Files (x86)\Common Files\Microsoft Shared
O43 - CFD: 24/06/2015 - [] D -- C:\Program Files (x86)\Common Files\Oberon Media
O43 - CFD: 06/11/2010 - [] D -- C:\Program Files (x86)\Common Files\Samsung
O43 - CFD: 30/10/2015 - [] D -- C:\Program Files (x86)\Common Files\Services
O43 - CFD: 18/12/2015 - [] D -- C:\Program Files (x86)\Common Files\SpeechEngines
O43 - CFD: 21/02/2016 - [] D -- C:\Program Files (x86)\Common Files\Statdax
O43 - CFD: 06/02/2016 - [] D -- C:\Program Files (x86)\Common Files\Steam
O43 - CFD: 30/10/2015 - [] D -- C:\Program Files (x86)\Common Files\System
O43 - CFD: 21/02/2016 - [] D -- C:\Program Files (x86)\Common Files\Umbrella
O43 - CFD: 06/11/2010 - [] D -- C:\Program Files (x86)\Common Files\Windows Live
O43 - CFD: 28/10/2015 - [] D -- C:\Users\Marie\AppData\Roaming\.lifecraft
O43 - CFD: 28/10/2015 - [] D -- C:\Users\Marie\AppData\Roaming\.minecraft
O43 - CFD: 03/10/2015 - [] D -- C:\Users\Marie\AppData\Roaming\Adobe
O43 - CFD: 27/10/2015 - [] D -- C:\Users\Marie\AppData\Roaming\Apple Computer
O43 - CFD: 24/06/2015 - [] D -- C:\Users\Marie\AppData\Roaming\Identities
O43 - CFD: 28/10/2015 - [] D -- C:\Users\Marie\AppData\Roaming\java
O43 - CFD: 11/02/2016 - [] D -- C:\Users\Marie\AppData\Roaming\KomivuKappemb
O43 - CFD: 23/08/2015 - [] D -- C:\Users\Marie\AppData\Roaming\Macromedia
O43 - CFD: 06/11/2010 - [0] D -- C:\Users\Marie\AppData\Roaming\Media Center Programs
O43 - CFD: 18/02/2016 - [] SD -- C:\Users\Marie\AppData\Roaming\Microsoft
O43 - CFD: 21/02/2016 - [] D -- C:\Users\Marie\AppData\Roaming\Mozilla
O43 - CFD: 21/02/2016 - [] D -- C:\Users\Marie\AppData\Roaming\Nosibay =>PUP.Optional.BubbleDock
O43 - CFD: 26/06/2015 - [] D -- C:\Users\Marie\AppData\Roaming\OpenOffice
O43 - CFD: 21/02/2016 - [] D -- C:\Users\Marie\AppData\Roaming\RestelRaixko
O43 - CFD: 08/02/2016 - [] D -- C:\Users\Marie\AppData\Roaming\SoftGrid Client
O43 - CFD: 21/02/2016 - [] D -- C:\Users\Marie\AppData\Roaming\Store =>PUP.Optional.Nosibay
O43 - CFD: 28/10/2015 - [] D -- C:\Users\Marie\AppData\Roaming\Sun
O43 - CFD: 21/02/2016 - [0] D -- C:\Users\Marie\AppData\Roaming\systweak =>.Superfluous.Systweak
O43 - CFD: 30/09/2015 - [0] D -- C:\Users\Marie\AppData\Roaming\TP
O43 - CFD: 21/02/2016 - [] D -- C:\Users\Marie\AppData\Roaming\WTools =>PUP.Optional.Nosibay
O43 - CFD: 18/02/2016 - [0] D -- C:\Users\Marie\AppData\Roaming\yoursearching =>PUP.Optional.YourSearching
O43 - CFD: 21/02/2016 - [] D -- C:\Users\Marie\AppData\Roaming\ZHP
O43 - CFD: 11/02/2016 - [] D -- C:\Users\Marie\AppData\Local\2D335060-1455186614-11B2-8000-E5F2D93BC593
O43 - CFD: 18/02/2016 - [] D -- C:\Users\Marie\AppData\Local\2D335060-1455794504-11B2-8000-E5F2D93BC593
O43 - CFD: 21/02/2016 - [] D -- C:\Users\Marie\AppData\Local\2D335060-1456053709-11B2-8000-E5F2D93BC593
O43 - CFD: 21/12/2015 - [0] D -- C:\Users\Marie\AppData\Local\ActiveSync
O43 - CFD: 03/10/2015 - [] D -- C:\Users\Marie\AppData\Local\Adobe
O43 - CFD: 24/06/2015 - [] D -- C:\Users\Marie\AppData\Local\Apple
O43 - CFD: 24/06/2015 - [] D -- C:\Users\Marie\AppData\Local\Apple Computer
O43 - CFD: 18/12/2015 - [0] SHD -- C:\Users\Marie\AppData\Local\Application Data
O43 - CFD: 24/06/2015 - [] D -- C:\Users\Marie\AppData\Local\Apps
O43 - CFD: 18/02/2016 - [] D -- C:\Users\Marie\AppData\Local\Boxore =>PUP.Optional.Boxore
O43 - CFD: 18/02/2016 - [] D -- C:\Users\Marie\AppData\Local\BrowserAir =>PUP.Optional.BrowserAir
O43 - CFD: 23/12/2015 - [] D -- C:\Users\Marie\AppData\Local\CEF
O43 - CFD: 18/02/2016 - [] D -- C:\Users\Marie\AppData\Local\Chromium
O43 - CFD: 27/10/2015 - [] D -- C:\Users\Marie\AppData\Local\Comms
O43 - CFD: 21/02/2016 - [] D -- C:\Users\Marie\AppData\Local\dply_en_015020241 =>PUP.Optional.CrossRider
O43 - CFD: 15/09/2015 - [] D -- C:\Users\Marie\AppData\Local\Google
O43 - CFD: 21/09/2015 - [] D -- C:\Users\Marie\AppData\Local\GWX
O43 - CFD: 18/12/2015 - [0] SHD -- C:\Users\Marie\AppData\Local\Historique
O43 - CFD: 28/10/2015 - [] D -- C:\Users\Marie\AppData\Local\Intel
O43 - CFD: 18/02/2016 - [] D -- C:\Users\Marie\AppData\Local\Microsoft
O43 - CFD: 06/10/2015 - [] D -- C:\Users\Marie\AppData\Local\MicrosoftEdge
O43 - CFD: 06/10/2015 - [0] D -- C:\Users\Marie\AppData\Local\NetworkTiles
O43 - CFD: 21/12/2015 - [] D -- C:\Users\Marie\AppData\Local\Packages
O43 - CFD: 11/02/2016 - [] D -- C:\Users\Marie\AppData\Local\Programs
O43 - CFD: 06/10/2015 - [] D -- C:\Users\Marie\AppData\Local\Publishers
O43 - CFD: 11/02/2016 - [] D -- C:\Users\Marie\AppData\Local\rec_en_77 =>.Superfluous.Tuto4PC
O43 - CFD: 18/02/2016 - [] D -- C:\Users\Marie\AppData\Local\SearchModule =>PUP.Optional.Goobzo
O43 - CFD: 30/09/2015 - [] D -- C:\Users\Marie\AppData\Local\SoftGrid Client
O43 - CFD: 23/12/2015 - [] D -- C:\Users\Marie\AppData\Local\Steam
O43 - CFD: 21/02/2016 - [] D -- C:\Users\Marie\AppData\Local\Temp
O43 - CFD: 21/02/2016 - [0] D -- C:\Users\Marie\AppData\Local\Tempfolder
O43 - CFD: 18/12/2015 - [0] SHD -- C:\Users\Marie\AppData\Local\Temporary Internet Files
O43 - CFD: 18/02/2016 - [] D -- C:\Users\Marie\AppData\Local\TheBrowser =>PUP.Optional.TheBrowser
O43 - CFD: 06/10/2015 - [] D -- C:\Users\Marie\AppData\Local\TileDataLayer
O43 - CFD: 24/06/2015 - [0] D -- C:\Users\Marie\AppData\Local\VirtualStore
O43 - CFD: 21/02/2016 - [] D -- C:\Users\Marie\AppData\Local\ZombieNews =>PUP.Optional.ZombieNews
O43 - CFD: 30/10/2015 - [] RD -- C:\Users\Marie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
O43 - CFD: 21/12/2015 - [] RD -- C:\Users\Marie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 18/02/2016 - [] RD -- C:\Users\Marie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 21/02/2016 - [] D -- C:\Users\Marie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bubble Dock =>PUP.Optional.BubbleDock
O43 - CFD: 18/12/2015 - [] D -- C:\Users\Marie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink YouCam
O43 - CFD: 30/10/2015 - [] D -- C:\Users\Marie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 18/02/2016 - [] RD -- C:\Users\Marie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
O43 - CFD: 30/10/2015 - [] RD -- C:\Users\Marie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
O43 - CFD: 18/02/2016 - [] D -- C:\Users\Marie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TheBrowser
O43 - CFD: 30/10/2015 - [] RSD -- C:\Users\Marie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell

---\\ Derniers fichiers créés dans Windows Prefetcher (43) - 26s
O45 - LFCP:[MD5.041E9B588D81E33BF69E779281A23FE8] 18/02/2016 A -- C:\WINDOWS\Prefetch\62793.WINDAPP.MON001.NO.EXE-2AF46416.pf =>PUP.Optional.Nosibay
O45 - LFCP:[MD5.19BB585A450E43DA87F2F85D23BE2C0B] 21/02/2016 A -- C:\WINDOWS\Prefetch\62793.WINDAPP.MON001.NO.EXE-773D939B.pf =>PUP.Optional.Nosibay
O45 - LFCP:[MD5.B4D3CC11C6C2E3C13651965E5429A9E4] 18/02/2016 A -- C:\WINDOWS\Prefetch\ASPACKAGE.EXE-FFF33E68.pf =>PUP.Optional.ASPackage
O45 - LFCP:[MD5.0CD451DCF0B9E6CDAC43C616C0A0E633] 18/02/2016 A -- C:\WINDOWS\Prefetch\BOXORE.EXE-F2F46CD6.pf =>PUP.Optional.Boxore
O45 - LFCP:[MD5.0B6F6BF5DCF36D20A8F56862983C4248] 18/02/2016 A -- C:\WINDOWS\Prefetch\BOXORELSP.EXE-63C3174E.pf =>PUP.Optional.Boxore
O45 - LFCP:[MD5.6C1B7FAFDE09C7356CE84B9BBCC70C7E] 18/02/2016 A -- C:\WINDOWS\Prefetch\BOXORESERVICE.EXE-5400DB60.pf =>PUP.Optional.Boxore
O45 - LFCP:[MD5.B567EE6D9EFF2326ADD41D1D77C9E385] 18/02/2016 A -- C:\WINDOWS\Prefetch\BROWSERAIR.EXE-91BD721E.pf =>PUP.Optional.BrowserAir
O45 - LFCP:[MD5.3CAC47CA5D2F7396A606B3CC3D6160E0] 18/02/2016 A -- C:\WINDOWS\Prefetch\BUBBLE DOCK BSETUP.EXE-519C5554.pf =>PUP.Optional.BubbleDock
O45 - LFCP:[MD5.F33306F58A7C33340B636116E5793709] 21/02/2016 A -- C:\WINDOWS\Prefetch\BUBBLE DOCK BSETUP.EXE-5D0F5662.pf =>PUP.Optional.BubbleDock
O45 - LFCP:[MD5.84C3AB36D31B95E666F8BBCB10796421] 18/02/2016 A -- C:\WINDOWS\Prefetch\BUBBLE DOCK UNINSTALL.EXE-344E02E9.pf =>PUP.Optional.BubbleDock
O45 - LFCP:[MD5.40085C01CE39C78318F0CF0FA098654D] 18/02/2016 A -- C:\WINDOWS\Prefetch\BUBBLE DOCK UNINSTALL.EXE-5F69BCE9.pf =>PUP.Optional.BubbleDock
O45 - LFCP:[MD5.8EBEA0913DB4D151494FA62253BC321A] 18/02/2016 A -- C:\WINDOWS\Prefetch\BUBBLE DOCK UPDATE.EXE-9E0C6EE6.pf =>PUP.Optional.BubbleDock
O45 - LFCP:[MD5.C0760ED0036C82A7725FA8E85471FC29] 21/02/2016 A -- C:\WINDOWS\Prefetch\BUBBLE DOCK.EXE-A4AC16B7.pf =>PUP.Optional.BubbleDock
O45 - LFCP:[MD5.A8727CAA3451DF4AEC818C6B20F90829] 21/02/2016 A -- C:\WINDOWS\Prefetch\DPLY_EN_015020241.EXE-24EA9848.pf =>PUP.Optional.CrossRider
O45 - LFCP:[MD5.04B622E418D94510F1032FDDCDB229E2] 21/02/2016 A -- C:\WINDOWS\Prefetch\ECOIS.EXE-F3253D6C.pf =>PUP.Optional.Salus
O45 - LFCP:[MD5.DAE202B8E103B5A1623EA2737B6FCC01] 18/02/2016 A -- C:\WINDOWS\Prefetch\GMSD_FR_005010241 - UNINSTALL-FA1D0A5D.pf =>PUP.Optional.CrossRider
O45 - LFCP:[MD5.8D6AA0E22FCB1768E0A9122165EF1F1C] 18/02/2016 A -- C:\WINDOWS\Prefetch\GMSD_FR_005010241.EXE-F440DB0A.pf =>PUP.Optional.CrossRider
O45 - LFCP:[MD5.52A15ECEC4F482ED64ECE823B5E91334] 18/02/2016 A -- C:\WINDOWS\Prefetch\IHPMSERVER.EXE-00A606E7.pf =>PUP.Optional.CrossRider
O45 - LFCP:[MD5.1A66C2A1676A10C224E0E82C5EA34574] 21/02/2016 A -- C:\WINDOWS\Prefetch\IMGUPDATER.EXE-169D6CA2.pf =>PUP.Optional.IMGUpdater
O45 - LFCP:[MD5.12C0534ED27194740047365A9F833255] 21/02/2016 A -- C:\WINDOWS\Prefetch\LBUBBLE DOCK.EXE-7D68BCE3.pf =>PUP.Optional.BubbleDock
O45 - LFCP:[MD5.F1D4D4878E695C81A1B03A1274FE6DB5] 11/02/2016 A -- C:\WINDOWS\Prefetch\MAXDRIVERUPDATER.EXE-3CD34513.pf =>PUP.Optional.MaxDriverUpdater
O45 - LFCP:[MD5.0C91F95C9A6BDD3935A20AA75CF52A8B] 11/02/2016 A -- C:\WINDOWS\Prefetch\MAXDRIVERUPDATER.TMP-C0E2E3F3.pf =>PUP.Optional.MaxDriverUpdater
O45 - LFCP:[MD5.B3D6400C68C6FD168B12CB95B0B0CACE] 11/02/2016 A -- C:\WINDOWS\Prefetch\MAXDRIVRUPDATER_SERVICE.EXE-9AFE9CE3.pf =>PUP.Optional.MaxDriverUpdater
O45 - LFCP:[MD5.AC512F7C3C27C59F0FAF9A83AB402BA0] 18/02/2016 A -- C:\WINDOWS\Prefetch\OASISDPLY_EN_015020241.EXE-CAD93F86.pf =>PUP.Optional.CrossRider
O45 - LFCP:[MD5.92184BEFC84B482A3D983DC84FDD3C74] 18/02/2016 A -- C:\WINDOWS\Prefetch\OASISSPACEUNINSTALL.EXE-5DD4B5FE.pf =>PUP.Optional.OasisSpace
O45 - LFCP:[MD5.59D205DE7978013EFC442070181C0925] 18/02/2016 A -- C:\WINDOWS\Prefetch\OASISSPACE_SETUP.EXE-99B42F96.pf =>PUP.Optional.OasisSpace
O45 - LFCP:[MD5.BAF4AFE447A2A22C66B97D3CA59900EE] 18/02/2016 A -- C:\WINDOWS\Prefetch\PREDM.EXE-D109773C.pf =>PUP.Optional.Downware
O45 - LFCP:[MD5.911BD8F7176A332B86717397EB97A497] 18/02/2016 A -- C:\WINDOWS\Prefetch\PREDM.EXE-F97B736C.pf =>PUP.Optional.Downware
O45 - LFCP:[MD5.856042ED033AA6E1FDAB0D458EB766AB] 18/02/2016 A -- C:\WINDOWS\Prefetch\PREDM.TMP-0ED401C0.pf =>PUP.Optional.Downware
O45 - LFCP:[MD5.21E55D853DC0AB2230CF1E6DE9E9E04F] 18/02/2016 A -- C:\WINDOWS\Prefetch\PREDM.TMP-9EAD2959.pf =>PUP.Optional.Downware
O45 - LFCP:[MD5.F636161A33FE9A1289833FAF2293E584] 18/02/2016 A -- C:\WINDOWS\Prefetch\REC_EN_77.EXE-09BE8878.pf =>.Superfluous.Tuto4PC
O45 - LFCP:[MD5.3969CB5170918F0739D2AEE5835BA54C] 18/02/2016 A -- C:\WINDOWS\Prefetch\SELECTION TOOLS UNINSTALL.EXE-AC0E3794.pf =>PUP.Optional.Nosibay
O45 - LFCP:[MD5.C3A6CD9B4A14F194480BC8EBB40B7EF2] 18/02/2016 A -- C:\WINDOWS\Prefetch\SELECTION TOOLS UNINSTALL.EXE-B8616AE2.pf =>PUP.Optional.Nosibay
O45 - LFCP:[MD5.765D3A482936BA5727FB8A39D40E6A57] 18/02/2016 A -- C:\WINDOWS\Prefetch\SELECTION TOOLS.EXE-EBA45CD2.pf =>PUP.Optional.Nosibay
O45 - LFCP:[MD5.70C029223A51ADEB3A8BE6C6FECD3196] 21/02/2016 A -- C:\WINDOWS\Prefetch\SETUP_REC_FR_203.EXE-FC877DA0.pf =>PUP.Optional.CrossRider
O45 - LFCP:[MD5.36508CBE9EE12DA3D5A3B4D23A9B3AB0] 18/02/2016 A -- C:\WINDOWS\Prefetch\SPACESOUNDPRO.EXE-7088EC37.pf =>PUP.Optional.SpaceSoundPro
O45 - LFCP:[MD5.EA1E30277225B4C71CA3B64728BB7E74] 18/02/2016 A -- C:\WINDOWS\Prefetch\SUNNYDAY.EXE-AD481523.pf =>PUP.Optional.CrossRider
O45 - LFCP:[MD5.B4F7C195F1FD744D82F2F651A015FBC6] 21/02/2016 A -- C:\WINDOWS\Prefetch\UPDPLY_EN_015020241.EXE-7BB6CCE1.pf =>PUP.Optional.CrossRider
O45 - LFCP:[MD5.0BA259FCB93590FF9EC414C241D608AA] 18/02/2016 A -- C:\WINDOWS\Prefetch\UPGMSD_FR_005010241.EXE-52859B13.pf =>PUP.Optional.CrossRider
O45 - LFCP:[MD5.1E361CFECB4F28DD4ACA17099F11F49A] 18/02/2016 A -- C:\WINDOWS\Prefetch\UTILOASISSPACE.EXE-198A7B1B.pf =>PUP.Optional.OasisSpace
O45 - LFCP:[MD5.7512B4C8C466B33A1D03ABD25B66BFB8] 18/02/2016 A -- C:\WINDOWS\Prefetch\WPM_V20.0.0.2514.EXE-E5406B2F.pf =>PUP.Optional.WpManager
O45 - LFCP:[MD5.7F08A34E1F39E5E2B79CD6206E92D31B] 18/02/2016 A -- C:\WINDOWS\Prefetch\ZDENGINE.EXE-8D39F321.pf =>PUP.Optional.FastSearch
O45 - LFCP:[MD5.0E871AAC792BAF0DABCF49CDD917940D] 21/02/2016 A -- C:\WINDOWS\Prefetch\ZOMBIENEWSINSTALL.EXE-5F3829B2.pf =>PUP.Optional.ZombieNews

---\\ ShellIconOverlayIdentifiers (SIOI) (5) - 0s
O106 - SIOI: ErrorOverlayHandler Class [ OneDrive1] - {BBACC218-34EA-4666-9D7A-C78F2274A524}. (.Microsoft Corporation - Microsoft OneDrive Shell Extension.) -- C:\Users\Marie\AppData\Local\Microsoft\OneDrive\17.3.6301.0127\FileSyncShell.dll =>.Microsoft Corporation®
O106 - SIOI: SharedOverlayHandler Class [ OneDrive2] - {5AB7172C-9C11-405C-8DD5-AF20F3606282}. (.Microsoft Corporation - Microsoft OneDrive Shell Extension.) -- C:\Users\Marie\AppData\Local\Microsoft\OneDrive\17.3.6301.0127\FileSyncShell.dll =>.Microsoft Corporation®
O106 - SIOI: SharedSyncingOverlayHandler Class [ OneDrive3] - {A78ED123-AB77-406B-9962-2A5D9D2F7F30}. (.Microsoft Corporation - Microsoft OneDrive Shell Extension.) -- C:\Users\Marie\AppData\Local\Microsoft\OneDrive\17.3.6301.0127\FileSyncShell.dll =>.Microsoft Corporation®
O106 - SIOI: UpToDateOverlayHandler Class [ OneDrive4] - {F241C880-6982-4CE5-8CF7-7085BA96DA5A}. (.Microsoft Corporation - Microsoft OneDrive Shell Extension.) -- C:\Users\Marie\AppData\Local\Microsoft\OneDrive\17.3.6301.0127\FileSyncShell.dll =>.Microsoft Corporation®
O106 - SIOI: SyncingOverlayHandler Class [ OneDrive5] - {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}. (.Microsoft Corporation - Microsoft OneDrive Shell Extension.) -- C:\Users\Marie\AppData\Local\Microsoft\OneDrive\17.3.6301.0127\FileSyncShell.dll =>.Microsoft Corporation®

---\\ Liste des pilotes du système (58) - 11s
O58 - SDL:2015/10/30 08:17:22 A . (.LSI - LSI 3ware SCSI Storport Driver.) -- C:\WINDOWS\System32\drivers\3ware.sys [107360] =>.Microsoft Windows®
O58 - SDL:2015/10/30 08:17:22 A . (.PMC-Sierra - PMC-Sierra Storport Driver For SPC8x6G SAS.) -- C:\WINDOWS\System32\drivers\adp80xx.sys [1135456] =>.Microsoft Windows®
O58 - SDL:2015/10/30 08:17:22 A . (.Advanced Micro Devices - AHCI 1.3 Device Driver.) -- C:\WINDOWS\System32\drivers\amdsata.sys [83296] =>.Microsoft Windows®
O58 - SDL:2015/10/30 08:17:22 A . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller D.) -- C:\WINDOWS\System32\drivers\amdsbs.sys [259424] =>.Microsoft Windows®
O58 - SDL:2015/10/30 08:17:22 A . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\WINDOWS\System32\drivers\amdxata.sys [26976] =>.Microsoft Windows®
O58 - SDL:2015/10/30 08:17:22 A . (.PMC-Sierra, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\WINDOWS\System32\drivers\arcsas.sys [131936] =>.Microsoft Windows®
O58 - SDL:2015/10/30 08:17:18 A . (.Qualcomm Atheros Communications, Inc. - Qualcomm Atheros Extensible Wireless LAN de.) -- C:\WINDOWS\System32\drivers\athwnx.sys [4207104] =>.Qualcomm Atheros Communications, Inc.
O58 - SDL:2015/10/30 08:17:22 A . (.Windows (R) Win 7 DDK provider - BCM Function 2 Device Driver.) -- C:\WINDOWS\System32\drivers\bcmfn.sys [9728] =>.Windows (R) Win 7 DDK provider
O58 - SDL:2015/10/30 08:17:22 A . (.Windows (R) Win 7 DDK provider - BCM Function 2 Device Driver.) -- C:\WINDOWS\System32\drivers\bcmfn2.sys [9728] =>.Windows (R) Win 7 DDK provider
O58 - SDL:2016/02/11 10:40:26 A . (.Copyright (c) 2012 - .) -- C:\WINDOWS\System32\drivers\bsdriver.sys [34712] =>PUP.Optional.Shopperz
O58 - SDL:2015/10/30 08:17:22 A . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.) -- C:\WINDOWS\System32\drivers\bxvbda.sys [531296] =>.Microsoft Windows®
O58 - SDL:2016/02/21 11:21:08 A . (.Windows (R) Win 7 DDK provider - Cherimoya Ltd.) -- C:\WINDOWS\System32\drivers\cherimoya.sys [56728] =>PUP.Optional.Shopperz
O58 - SDL:2010/04/01 01:25:14 A . (.ELAN Microelectronics Corp. - ETD Control Center.) -- C:\WINDOWS\System32\drivers\ETD.sys [136192] =>.ELAN Microelectronics Corp.
O58 - SDL:2015/10/30 08:17:22 A . (.QLogic Corporation - QLogic 10 GigE VBD.) -- C:\WINDOWS\System32\drivers\evbda.sys [3436896] =>.Microsoft Windows®
O58 - SDL:2012/10/03 15:14:56 A . (.GEAR Software Inc. - CD DVD Filter.) -- C:\WINDOWS\System32\drivers\GEARAspiWDM.sys [33240] =>.GEAR Software Inc.®
O58 - SDL:2015/10/30 08:17:22 A . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Drive.) -- C:\WINDOWS\System32\drivers\HpSAMD.sys [64352] =>.Microsoft Windows®
O58 - SDL:2015/10/30 08:17:18 A . (.Intel(R) Corporation - Intel(R) Serial IO I2C Driver.) -- C:\WINDOWS\System32\drivers\iai2c.sys [81408] =>.Intel(R) Corporation
O58 - SDL:2015/10/30 08:17:18 A . (.Intel Corporation - Intel(R) Serial IO I2C Driver v2.) -- C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys [165888] =>.Intel Corporation
O58 - SDL:2015/10/30 08:17:18 A . (.Intel Corporation - Intel(R) Serial IO GPIO Controller Driver.) -- C:\WINDOWS\System32\drivers\iaLPSSi_GPIO.sys [38128] =>.Intel Corporation - Client Components Group®
O58 - SDL:2015/10/30 08:17:18 A . (.Intel Corporation - Intel(R) Serial IO I2C Controller Driver.) -- C:\WINDOWS\System32\drivers\iaLPSSi_I2C.sys [113152] =>.Intel Corporation
O58 - SDL:2010/04/27 08:57:04 A . (.Intel Corporation - Intel Rapid Storage Technology driver - x64.) -- C:\WINDOWS\System32\drivers\iaStor.sys [540696] =>.Intel Corporation®
O58 - SDL:2015/10/30 08:17:22 A . (.Intel Corporation - Intel(R) Rapid Storage Technology driver (i.) -- C:\WINDOWS\System32\drivers\iaStorAV.sys [673120] =>.Microsoft Windows®
O58 - SDL:2015/10/30 08:17:22 A . (.Intel Corporation - Intel Matrix Storage Manager driver - x64.) -- C:\WINDOWS\System32\drivers\iaStorV.sys [412000] =>.Microsoft Windows®
O58 - SDL:2015/10/30 08:17:23 A . (.Mellanox - InfiniBand Fabric Bus Driver.) -- C:\WINDOWS\System32\drivers\ibbus.sys [424800] =>.Microsoft Windows®
O58 - SDL:2012/11/26 23:26:12 A . (.Intel Corporation - Intel Graphics Kernel Mode Driver.) -- C:\WINDOWS\System32\drivers\igdkmd64.sys [12311776] =>.Intel Corporation
O58 - SDL:2010/02/27 01:32:12 A . (.Intel Corporation - Intel(R) Turbo Boost Technology Driver.) -- C:\WINDOWS\System32\drivers\Impcd.sys [158976] =>.Intel Corporation
O58 - SDL:2010/02/03 15:38:30 A . (.Intel(R) Corporation - Intel(R) Display Audio Driver.) -- C:\WINDOWS\System32\drivers\IntcDAud.sys [271872] =>.Intel(R) Corporation
O58 - SDL:2015/10/30 08:17:23 A . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas.sys [108888] =>.Microsoft Windows®
O58 - SDL:2015/10/30 08:17:23 A . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas2i.sys [104800] =>.Microsoft Windows®
O58 - SDL:2015/10/30 08:17:23 A . (.Avago Technologies - Avago SAS Gen3 Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas3i.sys [99168] =>.Microsoft Windows®
O58 - SDL:2015/10/30 08:17:23 A . (.LSI Corporation - LSI SSS PCIe/Flash Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sss.sys [82784] =>.Microsoft Windows®
O58 - SDL:2015/10/30 08:17:23 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\megasas.sys [59744] =>.Microsoft Windows®
O58 - SDL:2015/10/30 08:17:23 A . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\WINDOWS\System32\drivers\megasr.sys [575840] =>.Microsoft Windows®
O58 - SDL:2009/06/18 02:15:16 A . (.McAfee, Inc. - Anti-Virus File System Filter Driver.) -- C:\WINDOWS\System32\drivers\mfeavfk.sys [102600] =>.McAfee, Inc.®
O58 - SDL:2009/06/18 02:15:16 A . (.McAfee, Inc. - Host Intrusion Detection Link Driver.) -- C:\WINDOWS\System32\drivers\mfehidk.sys [307400] =>.McAfee, Inc.®
O58 - SDL:2009/06/18 02:08:50 A . (.McAfee, Inc. - VSCore Code Analysis Driver.) -- C:\WINDOWS\System32\drivers\mferkdk.sys [40904] =>.McAfee, Inc.®
O58 - SDL:2009/06/18 02:15:16 A . (.McAfee, Inc. - System Monitor Filter Driver.) -- C:\WINDOWS\System32\drivers\mfesmfk.sys [49480] =>.McAfee, Inc.®
O58 - SDL:2015/10/30 08:17:23 A . (.Mellanox - MLX4 Bus Driver.) -- C:\WINDOWS\System32\drivers\mlx4_bus.sys [705376] =>.Microsoft Windows®
O58 - SDL:2009/04/09 06:23:02 A . (.McAfee, Inc. - McAfee Personal Firewall Plus Driver.) -- C:\WINDOWS\System32\drivers\Mpfp.sys [176144] =>.McAfee, Inc.®
O58 - SDL:2015/10/30 08:17:23 A . (.Marvell Semiconductor, Inc. - Marvell Flash Controller Driver.) -- C:\WINDOWS\System32\drivers\mvumis.sys [63840] =>.Microsoft Windows®
O58 - SDL:2015/10/30 08:17:23 A . (.Mellanox - NetworkDirect Support Filter Driver.) -- C:\WINDOWS\System32\drivers\ndfltr.sys [76128] =>.Microsoft Windows®
O58 - SDL:2015/10/30 08:17:23 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\WINDOWS\System32\drivers\nvraid.sys [150368] =>.Microsoft Windows®
O58 - SDL:2015/10/30 08:17:23 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\WINDOWS\System32\drivers\nvstor.sys [166240] =>.Microsoft Windows®
O58 - SDL:2015/10/30 08:17:23 A . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\percsas2i.sys [58208] =>.Microsoft Windows®
O58 - SDL:2015/10/30 08:17:23 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\percsas3i.sys [58720] =>.Microsoft Windows®
O58 - SDL:2015/08/28 22:16:14 A . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function D.) -- C:\WINDOWS\System32\drivers\RTKVHD64.sys [4519144] =>.Realtek Semiconductor Corp®
O58 - SDL:2010/03/31 01:35:26 A . (.SAMSUNG ELECTRONICS - SAMSUNG Kernel Driver.) -- C:\WINDOWS\System32\drivers\SABI.sys [13824] =>.SAMSUNG Electronics
O58 - SDL:2016/02/18 10:31:28 A . (.Corporation - Activity Filter.) -- C:\WINDOWS\System32\drivers\sdfhgdf.sys [23208]
O58 - SDL:2015/10/30 08:17:23 A . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\WINDOWS\System32\drivers\sisraid2.sys [44896] =>.Microsoft Windows®
O58 - SDL:2015/10/30 08:17:23 A . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\WINDOWS\System32\drivers\sisraid4.sys [81760] =>.Microsoft Windows®
O58 - SDL:2015/10/30 08:17:23 A . (.Promise Technology, Inc. - Promise SuperTrak EX Series Driver for Wind.) -- C:\WINDOWS\System32\drivers\stexstor.sys [31072] =>.Microsoft Windows®
O58 - SDL:2015/06/17 17:04:24 A . (.Apple, Inc. - Apple Mobile Device USB Driver.) -- C:\WINDOWS\System32\drivers\usbaapl64.sys [54784] =>.Apple, Inc.
O58 - SDL:2015/10/30 08:17:23 A . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\WINDOWS\System32\drivers\vsmraid.sys [166752] =>.Microsoft Windows®
O58 - SDL:2015/10/30 08:17:23 A . (.VIA Corporation - VIA StorX RAID Controller Driver.) -- C:\WINDOWS\System32\drivers\VSTXRAID.SYS [305504] =>.Microsoft Windows®
O58 - SDL:2015/10/30 08:17:23 A . (.Mellanox - Kernel WinMad.) -- C:\WINDOWS\System32\drivers\winmad.sys [26976] =>.Microsoft Windows®
O58 - SDL:2015/10/30 08:17:23 A . (.Mellanox - Kernel WinVerbs.) -- C:\WINDOWS\System32\drivers\winverbs.sys [59232] =>.Microsoft Windows®
O58 - SDL:2015/10/30 08:17:23 A . (.Marvell - NDIS6.30 Miniport Driver for Marvell Yukon.) -- C:\WINDOWS\System32\drivers\yk63x64.sys [288768] =>.Marvell
O58 - SDL:2016/02/10 00:39:30 A . (.zdengine - WFP driver.) -- C:\WINDOWS\System32\drivers\zdwfp64.sys [46352] {0090B35CE5B6C9D9E98F1608C2B50F373D} =>PUP.Optional.FastSearch

---\\ Derniers fichiers modifiés ou crées (Utilisateur) (27) - 35s
O61 - LFC: 2016/02/21 11:25:17 A . (..) -- C:\Users\Marie\AppData\Roaming\Nimstrong.exe [667136]
O61 - LFC: 2016/02/21 11:25:48 A . (..) -- C:\Users\Marie\AppData\Roaming\Rantam.bin [848437]
O61 - LFC: 2016/02/21 11:25:17 A . (..) -- C:\Users\Marie\AppData\Roaming\Viait.exe [667136]
O61 - LFC: 2016/02/21 11:25:48 A . (..) -- C:\Users\Marie\AppData\Roaming\Zonstring.bin [848437]
O61 - LFC: 2016/02/21 11:25:17 A . (..) -- C:\Users\Marie\AppData\Roaming\Zoomhold.exe [667136]
O61 - LFC: 2016/02/21 11:25:17 A . (..) -- C:\Users\Marie\AppData\Roaming\Zun-Light.exe [667136]
O61 - LFC: 2016/02/21 10:02:12 A . (..) -- C:\Users\Marie\AppData\Roaming\RestelRaixko\Hurlokle.exe [125800] {01}
O61 - LFC: 2016/02/18 10:33:23 A . (.Goobzo.) -- C:\Users\Marie\AppData\Local\TheBrowser\Application\44.4.9.7\Installer\setup.exe [3717120] =>PUP.Optional.Goobzo
O61 - LFC: 2016/02/21 11:33:55 A . (..) -- C:\Users\Marie\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\LocalState\speech_onecorereg.bin [8192]
O61 - LFC: 2016/02/21 11:31:27 A . (..) -- C:\Users\Marie\AppData\Local\Microsoft\Windows\UPPS\UPPS.bin [16148]
O61 - LFC: 2016/02/18 10:37:10 A . (..) -- C:\Users\Marie\AppData\Local\Microsoft\Internet Explorer\UrlBlock\urlblock_635913794246354929.bin [66700]
O61 - LFC: 2016/02/18 10:30:44 A . (..) -- C:\Users\Marie\AppData\Local\dply_en_015020241\Download\setup_rec_fr_200.exe [651312] =>PUP.Optional.CrossRider
O61 - LFC: 2016/02/21 11:20:23 A . (..) -- C:\Users\Marie\AppData\Local\dply_en_015020241\Download\setup_rec_fr_203.exe [651312] =>PUP.Optional.CrossRider
O61 - LFC: 2016/02/21 11:20:31 A . (.TiTOs.) -- C:\Users\Marie\AppData\Local\dply_en_015020241\Download\wizzupdater.exe [2515968] =>PUP.Optional.CrossRider
O61 - LFC: 2016/02/15 17:57:21 A . (.Goobzo.) -- C:\Users\Marie\AppData\Local\BrowserAir\Application\47.0.0.5\chrome.dll [29381632] =>PUP.Optional.BrowserAir
O61 - LFC: 2016/02/15 17:57:21 A . (.Goobzo.) -- C:\Users\Marie\AppData\Local\BrowserAir\Application\47.0.0.5\chrome_child.dll [34335744] =>PUP.Optional.BrowserAir
O61 - LFC: 2016/02/15 17:57:21 A . (.Goobzo.) -- C:\Users\Marie\AppData\Local\BrowserAir\Application\47.0.0.5\chrome_elf.dll [123392] =>PUP.Optional.BrowserAir
O61 - LFC: 2016/02/15 17:57:21 A . (.Goobzo.) -- C:\Users\Marie\AppData\Local\BrowserAir\Application\47.0.0.5\delegate_execute.exe [1839616] =>PUP.Optional.BrowserAir
O61 - LFC: 2016/02/15 17:57:21 A . (..) -- C:\Users\Marie\AppData\Local\BrowserAir\Application\47.0.0.5\ffmpegsumo.dll [1726464] =>PUP.Optional.BrowserAir
O61 - LFC: 2016/02/15 17:57:21 A . (..) -- C:\Users\Marie\AppData\Local\BrowserAir\Application\47.0.0.5\libexif.dll [303616] =>PUP.Optional.BrowserAir
O61 - LFC: 2016/02/15 17:57:21 A . (.Goobzo.) -- C:\Users\Marie\AppData\Local\BrowserAir\Application\47.0.0.5\metro_driver.dll [481280] =>PUP.Optional.BrowserAir
O61 - LFC: 2016/02/15 17:57:21 A . (.Goobzo.) -- C:\Users\Marie\AppData\Local\BrowserAir\Application\47.0.0.5\nacl64.exe [1907200] =>PUP.Optional.BrowserAir
O61 - LFC: 2016/02/15 17:57:21 A . (.Copyright (C) 2010.) -- C:\Users\Marie\AppData\Local\BrowserAir\Application\47.0.0.5\pdf.dll [8503808] =>PUP.Optional.BrowserAir
O61 - LFC: 2016/02/15 17:57:21 A . (..) -- C:\Users\Marie\AppData\Local\BrowserAir\Application\47.0.0.5\ppgooglenaclpluginchrome.dll [340992] =>PUP.Optional.BrowserAir
O61 - LFC: 2016/02/18 11:10:50 A . (.Goobzo.) -- C:\Users\Marie\AppData\Local\BrowserAir\Application\47.0.0.5\Installer\setup.exe [3717632] =>PUP.Optional.BrowserAir
O61 - LFC: 2016/02/21 11:22:01 A . (..) -- C:\Users\Marie\AppData\Local\2D335060-1456053709-11B2-8000-E5F2D93BC593\Uninstall.exe [51270]
O61 - LFC: 2016/02/18 11:21:55 A . (..) -- C:\Users\Marie\AppData\Local\2D335060-1455794504-11B2-8000-E5F2D93BC593\Uninstall.exe [51270]

---\\ Associations Shell Spawning (10) - 0s
O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe =>.Microsoft Corporation
O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Ob.) -- C:\Windows\System32\eventvwr.exe =>.Microsoft Corporation
O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (...) -- C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1
O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\wscript.exe =>.Microsoft Corporation
O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe =>.Microsoft Corporation
O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S

---\\ Menu de démarrage Internet (8) - 0s
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc®
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (...) -- C:\Program Files\Internet Explorer\iexplore.ex http://www.yoursearching.com/ =>PUP.Optional.YourSearching
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (...) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --show-icons (.not file.)
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (...) -- C:\Windows\System32\ie4uinit.exe" -show (.not file.)
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (...) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --make-default-browser (.not file.)
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (...) -- C:\Windows\System32\ie4uinit.exe" -reinstall (.not file.)
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (...) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --hide-icons (.not file.)
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (...) -- C:\Windows\System32\ie4uinit.exe" -hide (.not file.)

---\\ Recherche d'infection sur les navigateurs (11) - 0s
O69 - SBI: SearchScopes [HKCU] OldSearch - (Bing.com) - http://www.trovi.com/ =>PUP.Optional.Trovigo
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (Bing) - http://www.bing.com/
O69 - SBI: SearchScopes [HKCU] {460C3D19-B3D4-4964-A550-77D263B0CCCB} - (Bing) - http://www.bing.com/
O69 - SBI: SearchScopes [HKCU] {92C47359-1D9D-416B-B584-D4D678F7CAFD} - (Bing) - http://www.bing.com/
O69 - SBI: SearchScopes [HKCU] {D69374DE-084F-4580-950A-AFD657C431B5} - (Recherche sécurisée) - http://fr.search.yahoo.com/ =>.Yahoo Search
O69 - SBI: SearchScopes [HKCU] {E989DB69-2BD6-4DC5-A0EE-BBEE8BEF5680} - (Default) - http://searchinterneat-a.akamaihd.net/ =>PUP.Optional.Browser
O69 - SBI: SearchScopes [HKCU] {F9DB56F3-690B-480D-8EC0-B06E7AE2E10D} - (Searching) - http://www-searching.com/ =>PUP.Optional.SearchingCom
O69 - SBI: SearchScopes [HKCU] {ielnksrch} - (Search the web) - http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBSiA1rEAocN4PQUCx_oQAxI0EFkhrXoBmBNpl8MOllaZViHQV-tRQ1bTt5_tzc2O6iYQ-lXdTVqS88KnOCducm6SFy-B6ZHg4fWMRfGmZp1Rn0JA674sLqfVoAO0w5vJSV9Y-14Somw8gt5XVgPRg_fXu-fRAd1I1_F3b3p8YljeKQAk2BKOoAdw,,&q={searchTerms} =>PUP.Optional.Linkury
O69 - SBI: SearchScopes [HKLM] ielnksrch - (Search the web) - http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBSiA1rEAocN4PQUCx_oQAxI0EFkhrXoBmBNpl8MOllaZViHQV-tRQ1bTt5_tzc2O6iYQ-lXdTVqS88KnOCducm6SFy-B6ZHg4fWMRfGmZp1Rn0JA674sLqfVoAO0w5vJSV9Y-14Somw8gt5XVgPRg_fXu-fRAd1I1_F3b3p8YljeKQAk2BKOoAdw,,&q={searchTerms} =>PUP.Optional.Linkury
O69 - SBI: SearchScopes [HKLM] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - http://www.bing.com/
O69 - SBI: SearchScopes [HKLM] {BFFED5CA-8BDF-47CC-AED0-23F4E6D77732} - (StartWeb) - http://start.iminent.com/ =>PUP.Optional.IMBooster

---\\ Enumère les services démarrés par Svchost (41) - 1s
O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\WINDOWS\System32\certprop.dll [192000] =>.Microsoft Corporation
O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\WINDOWS\System32\certprop.dll [192000] =>.Microsoft Corporation
O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\WINDOWS\system32\srvsvc.dll [283136] =>.Microsoft Corporation
O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\WINDOWS\System32\gpsvc.dll [1338368] =>.Microsoft Corporation
O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\WINDOWS\System32\ikeext.dll [957952] =>.Microsoft Corporation
O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur u.) -- C:\WINDOWS\System32\iphlpsvc.dll [958464] =>.Microsoft Corporation
O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d’ouverture de session secon.) -- C:\WINDOWS\system32\seclogon.dll [31232] =>.Microsoft Corporation
O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\WINDOWS\System32\appinfo.dll [94720] =>.Microsoft Corporation
O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\WINDOWS\system32\iscsiexe.dll [151040] =>.Microsoft Corporation
O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\WINDOWS\System32\eapsvc.dll [112640] =>.Microsoft Corporation
O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\WINDOWS\system32\schedsvc.dll [1012224] =>.Microsoft Corporation
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\WINDOWS\system32\wbem\WMIsvc.dll [225280] =>.Microsoft Corporation
O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\WINDOWS\System32\browser.dll [134656] =>.Microsoft Corporation
O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\WINDOWS\system32\profsvc.dll [328192] =>.Microsoft Corporation
O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à.) -- C:\Windows\System32\SessEnv.dll [372736] =>.Microsoft Corporation
O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\WINDOWS\System32\wercplsupport.dll [96256] =>.Microsoft Corporation
O83 - Search Svchost Services: DcpSvc (DcpSvc) . (.Microsoft Corporation - dcpsvc Task.) -- C:\WINDOWS\system32\dcpsvc.dll [186880] =>.Microsoft Corporation
O83 - Search Svchost Services: wlidsvc (wlidsvc) . (.Microsoft Corporation - Service de compte Microsoft®.) -- C:\WINDOWS\system32\wlidsvc.dll [2057216] =>.Microsoft Corporation
O83 - Search Svchost Services: NcaSvc (NcaSvc) . (.Microsoft Corporation - Service Assistant Connectivité réseau Micro.) -- C:\WINDOWS\System32\ncasvc.dll [168960] =>.Microsoft Corporation
O83 - Search Svchost Services: NetSetupSvc (NetSetupSvc) . (.Microsoft Corporation - Service Configuration du réseau.) -- C:\WINDOWS\System32\NetSetupSvc.dll [203776] =>.Microsoft Corporation
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\WINDOWS\system32\themeservice.dll [59392] =>.Microsoft Corporation
O83 - Search Svchost Services: RetailDemo (RetailDemo) . (.Microsoft Corporation - RDXService.) -- C:\WINDOWS\system32\RDXService.dll [1073152] =>.Microsoft Corporation
O83 - Search Svchost Services: lfsvc (lfsvc) . (.Microsoft Corporation - Service de géolocalisation.) -- C:\Windows\System32\lfsvc.dll [27136] =>.Microsoft Corporation
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’.) -- C:\WINDOWS\System32\rasauto.dll [106496] =>.Microsoft Corporation
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire des connexions d’accès à dista.) -- C:\WINDOWS\System32\rasmans.dll [696320] =>.Microsoft Corporation
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll [507904] =>.Microsoft Corporation
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements systèm.) -- C:\WINDOWS\System32\sens.dll [73216] =>.Microsoft Corporation
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l’application d’assistance à.) -- C:\WINDOWS\System32\ipnathlp.dll [457728] =>.Microsoft Corporation
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM.) -- C:\Windows\System32\tapisrv.dll [311808] =>.Microsoft Corporation
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Up.) -- C:\WINDOWS\system32\wuaueng.dll [2275328] =>.Microsoft Corporation
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière.) -- C:\WINDOWS\System32\qmgr.dll [1144320] =>.Microsoft Corporation
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [608768] =>.Microsoft Corporation
O83 - Search Svchost Services: dmwappushservice (dmwappushservice) . (.Microsoft Corporation - dmwappushsvc.) -- C:\WINDOWS\system32\dmwappushsvc.dll [57856] =>.Microsoft Corporation
O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\WINDOWS\System32\bdesvc.dll [360448] =>.Microsoft Corporation
O83 - Search Svchost Services: XboxNetApiSvc (XboxNetApiSvc) . (.Microsoft Corporation - Xbox Live Networking Service.) -- C:\WINDOWS\system32\XboxNetApiSvc.dll [1035776] =>.Microsoft Corporation
O83 - Search Svchost Services: UsoSvc (UsoSvc) . (.Microsoft Corporation - Mettre à jour la session Orchestrator Core.) -- C:\WINDOWS\system32\usocore.dll [360960] =>.Microsoft Corporation
O83 - Search Svchost Services: XblGameSave (XblGameSave) . (.Microsoft Corporation - Xbox Live Game Save Service.) -- C:\WINDOWS\System32\XblGameSave.dll [1130496] =>.Microsoft Corporation
O83 - Search Svchost Services: DmEnrollmentSvc (DmEnrollmentSvc) . (.Microsoft Corporation - DLL Windows Management Service.) -- C:\Windows\System32\Windows.Internal.Management.dll [278016] =>.Microsoft Corporation
O83 - Search Svchost Services: DsmSvc (DsmSvc) . (.Microsoft Corporation - Gestionnaire d’installation de périphérique.) -- C:\WINDOWS\System32\DeviceSetupManager.dll [205824] =>.Microsoft Corporation
O83 - Search Svchost Services: UserManager (UserManager) . (.Microsoft Corporation - UserMgr.) -- C:\WINDOWS\System32\usermgr.dll [912384] =>.Microsoft Corporation
O83 - Search Svchost Services: XblAuthManager (XblAuthManager) . (.Microsoft Corporation - Xbox Live Auth Manager.) -- C:\WINDOWS\System32\XblAuthManager.dll [948224] =>.Microsoft Corporation

---\\ Liste des exceptions du parefeu Windows (6) - 2s
O87 - FAEL: "{1291DC6B-C114-4F6F-82DC-E4347FB82B15}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe =>.Steam SteamApps Games
O87 - FAEL: "{DCA55646-EE23-4B0F-ADAF-1AE20C448792}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe =>.Steam SteamApps Games
O87 - FAEL: "{10C1A923-F202-4F7E-BA65-BC7596D2A6E3}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\Max Driver Updater\maxdu.exe (.not file.) =>PUP.Optional.MaxDriverUpdater
O87 - FAEL: "{761CD62A-7790-4B02-91E6-B670C66C8546}" [In-None-P6-TRUE] .(...) -- C:\ProgramData\Boxore\7.1\node.exe (.not file.) =>PUP.Optional.Boxore
O87 - FAEL: "{323E5FD6-68E5-4C89-BA4C-B0A3496150AB}" [In-None-P17-TRUE] .(...) -- C:\ProgramData\Boxore\7.1\node.exe (.not file.) =>PUP.Optional.Boxore
O87 - FAEL: "{C2A28594-ACC0-41D2-A3A3-78054C532083}" [In-None-P17-TRUE] .(.Goobzo - TheBrowser.) -- C:\Users\Marie\AppData\Local\TheBrowser\Application\TheBrowser.exe =>PUP.Optional.Goobzo

---\\ Recherche de clés de registre Tracing (2) - 0s
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Ecois_RASAPI32 =>PUP.Optional.Salus
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Ecois_RASMANCS =>PUP.Optional.Salus

---\\ Scan Additionnel (190) - 0s
HKLM\SYSTEM\CurrentControlSet\Services\Ecois =>PUP.Optional.Salus
C:\ProgramData\Ecois\Ecois.exe =>PUP.Optional.Salus
HKLM\SYSTEM\CurrentControlSet\Services\GlobalUpdater =>PUP.Optional.1stBrowser
C:\Program Files (x86)\Common Files\IMGUpdater\IMGUpdater.exe =>PUP.Optional.1stBrowser
HKLM\SYSTEM\CurrentControlSet\Services\pomemepezbt =>PUP.Optional.CrossRider
C:\Program Files (x86)\2D335060-1455788721-11B2-8000-E5F2D93BC593\knsk3F60.tmpfs =>PUP.Optional.CrossRider
HKLM\SYSTEM\CurrentControlSet\Services\shopperz210220161100 Updater =>PUP.Optional.Shopperz
C:\Program Files\shopperz210220161100\Mebga.exe =>PUP.Optional.Shopperz
HKLM\SYSTEM\CurrentControlSet\Services\SMUpd =>PUP.Optional.YTDownloader
C:\Program Files\Common Files\Goobzo\GBUpdate\smu.exe =>PUP.Optional.YTDownloader
HKLM\SYSTEM\CurrentControlSet\Services\SSFK =>PUP.Optional.MyWebSearch
C:\Program Files (x86)\SFK\SSFK.exe =>PUP.Optional.MyWebSearch
HKLM\SYSTEM\CurrentControlSet\Services\WdMan =>PUP.Optional.WdsManPro
C:\ProgramData\nWdMn\WdMan.exe =>PUP.Optional.WdsManPro
HKLM\SYSTEM\CurrentControlSet\Services\wucotusy =>PUP.Optional.CrossRider
C:\Program Files (x86)\2D335060-1455182889-11B2-8000-E5F2D93BC593\hnsi845A.tmp =>PUP.Optional.CrossRider
HKLM\SYSTEM\CurrentControlSet\Services\wuvebevyzbt =>PUP.Optional.CrossRider
C:\Program Files (x86)\2D335060-1455182889-11B2-8000-E5F2D93BC593\knsi5274.tmpfs =>PUP.Optional.CrossRider
HKLM\SYSTEM\CurrentControlSet\Services\zigipyro =>PUP.Optional.CrossRider
C:\Users\Marie\AppData\Local\2D335060-1456053709-11B2-8000-E5F2D93BC593\qnsq807A.tmp =>PUP.Optional.CrossRider
HKLM\SYSTEM\CurrentControlSet\Services\zutuzuni =>PUP.Optional.CrossRider
C:\Program Files (x86)\2D335060-1455182889-11B2-8000-E5F2D93BC593\jnse6D94.tmp =>PUP.Optional.CrossRider
HKLM\SYSTEM\CurrentControlSet\Services\92C6E48B-7627-4268-8FE6-B46B60ABCD23 =>PUP.Optional.Shopperz
C:\Program Files\shopperz210220161100\Mahedole.exe =>PUP.Optional.Shopperz
HKLM\SYSTEM\CurrentControlSet\Services\csrcc =>PUP.Optional.Shopper
C:\Program Files\shopperz210220161100\csrcc.exe =>PUP.Optional.Shopper
C:\Program Files (x86)\DNS Unlocker =>PUP.Optional.DNSUnlocker
C:\ProgramData\Lsevewreesce\1.0.7.1\ohceidna.exe =>Heuristic.PullUpdate
C:\Program Files\shopperz210220161100\Esiolij.bat =>PUP.Optional.Shopperz
C:\WINDOWS\System32\Tasks\DNSPAWCATUCK =>PUP.Optional.DNSUnlocker
C:\WINDOWS\System32\Tasks\Lsevewreesce =>Heuristic.PullUpdate
C:\WINDOWS\System32\Tasks\Luupty =>PUP.Optional.Shopper
C:\WINDOWS\System32\Tasks\Uiuge =>PUP.Optional.Shopperz
C:\Program Files (x86)\Common Files\IMGUpdater\IMGUpdater.exe =>PUP.Optional.IMGUpdater
C:\Program Files (x86)\MaxDrivrUpdater_v153.12905\MaxDrivrUpdater_Service.exe =>PUP.Optional.MaxDriverUpdater
C:\Program Files (x86)\MaxDrivrUpdater_v153.12905\ioproduct.exe =>PUP.Optional.MaxDriverUpdater
C:\Program Files (x86)\rec_en_77\rec_en_77.exe =>.Superfluous.Tuto4PC
C:\Program Files\shopperz210220161100\Fotoaas.exe =>PUP.Optional.Shopperz
C:\Program Files\shopperz210220161100\Fotoaas64.exe =>PUP.Optional.Shopperz
C:\Program Files\shopperz210220161100\csrcc.exe =>PUP.Optional.Shopperz
C:\Program Files\Common Files\Goobzo\GBUpdate\smu.exe =>PUP.Optional.Goobzo
C:\Program Files (x86)\DNS Unlocker\dnspawcatuck.exe =>PUP.Optional.DNSUnlocker
C:\Program Files\shopperz210220161100\Naawhic.dll =>PUP.Optional.Shopperz
HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{03365380-5EE7-4832-9DCD-C245CA0E3D3A} =>PUP.Optional.Shopperz
C:\Program Files (x86)\MaxDrivrUpdater_v153.12905\ioproduct_service.bat =>PUP.Optional.MaxDriverUpdater
C:\ProgramData\Ecois\Uniis.dll =>PUP.Optional.Salus
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\dply_en_015020241_is1 =>PUP.Optional.CrossRider
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IMBoosterARP =>PUP.Optional.IMBooster
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\rec_en_77_is1 =>.Superfluous.Tuto4PC
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Search module =>PUP.Optional.Goobzo
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SoftwareUpdater =>PUP.Optional.SoftwareUpdater
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\yoursearching =>PUP.Optional.YourSearching
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\zz.12905.mdu =>PUP.Optional.MaxDriverUpdater
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{06A0C70F-1F26-4BAF-A682-D9F3D7040E2F} =>PUP.Optional.SmartBar
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{34C1B5D1-0732-460E-BA31-2D154EDC923F} =>PUP.Optional.SmartBar
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7ADF667E-E14D-4D2C-827C-B0108F0D93BC} =>PUP.Optional.DesktopPlay
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{B679FFBA-49C3-4B3E-b72B-DB31A1330CCF} =>PUP.Optional.Shopperz
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{E1527582-8509-4011-B922-29E3FB548882}_is1 =>PUP.Optional.DNSUnlocker
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\dply_en_015020241_is1 =>PUP.Optional.CrossRider
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\IMBoosterARP =>PUP.Optional.IMBooster
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\rec_en_77_is1 =>.Superfluous.Tuto4PC
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Search module =>PUP.Optional.Goobzo
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SoftwareUpdater =>PUP.Optional.SoftwareUpdater
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\yoursearching =>PUP.Optional.YourSearching
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\zz.12905.mdu =>PUP.Optional.MaxDriverUpdater
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{06A0C70F-1F26-4BAF-A682-D9F3D7040E2F} =>PUP.Optional.SmartBar
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{34C1B5D1-0732-460E-BA31-2D154EDC923F} =>PUP.Optional.SmartBar
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{B679FFBA-49C3-4B3E-b72B-DB31A1330CCF} =>PUP.Optional.Shopperz
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{E1527582-8509-4011-B922-29E3FB548882}_is1 =>PUP.Optional.DNSUnlocker
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Bubble Dock =>PUP.Optional.BubbleDock
HKLM\SOFTWARE\Wow6432Node\5da059a482fd494db3f252126fbc3d5b =>PUP.Optional.CrossRider
HKLM\SOFTWARE\Wow6432Node\DESKTOPPLAY =>PUP.Optional.CrossRider
HKLM\SOFTWARE\Wow6432Node\ihpmserver =>PUP.Optional.CrossRider
HKLM\SOFTWARE\Wow6432Node\IMGUpdater =>PUP.Optional.IMGUpdater
HKLM\SOFTWARE\Wow6432Node\Iminent =>PUP.Optional.IMBooster
HKLM\SOFTWARE\Wow6432Node\MaxDrivrUpdater =>PUP.Optional.MaxDriverUpdater
HKLM\SOFTWARE\Wow6432Node\mtEcois =>PUP.Optional.Salus
HKLM\SOFTWARE\Wow6432Node\RayDld =>PUP.Optional.CrossRider
HKLM\SOFTWARE\Wow6432Node\SearchModule =>PUP.Optional.SearchModule
HKLM\SOFTWARE\Wow6432Node\shopperz210220161100 =>PUP.Optional.Shopperz
HKLM\SOFTWARE\Wow6432Node\Systweak =>.Superfluous.Systweak
HKLM\SOFTWARE\Wow6432Node\Tutorials =>PUP.Optional.AgenceExclusive
HKLM\SOFTWARE\Wow6432Node\WdsManPro =>PUP.Optional.WdsManPro
HKLM\SOFTWARE\Wow6432Node\yoursearchingSoftware =>PUP.Optional.YourSearching
HKCU\SOFTWARE\DailyPcClean =>PUP.Optional.DailyPCClean
HKCU\SOFTWARE\Iminent =>PUP.Optional.IMBooster
HKCU\SOFTWARE\Nosibay =>PUP.Optional.SPointer
HKCU\SOFTWARE\Store =>PUP.Optional.Generic
HKCU\SOFTWARE\systweak =>.Superfluous.Systweak
HKCU\SOFTWARE\tstamptoken =>PUP.Optional.MaxComputerCleaner
HKCU\SOFTWARE\Tutorials =>PUP.Optional.AgenceExclusive
HKCU\SOFTWARE\TutoTag =>PUP.Optional.AgenceExclusive
HKCU\SOFTWARE\WTools =>PUP.Optional.Nosibay
HKCU\SOFTWARE\AppDataLow\Software\DynConIE =>PUP.Optional.DynConIE
C:\Program Files (x86)\2D335060-1455182889-11B2-8000-E5F2D93BC593 =>PUP.Optional.CrossRider
C:\Program Files (x86)\2D335060-1455788721-11B2-8000-E5F2D93BC593 =>PUP.Optional.CrossRider
C:\Program Files (x86)\dply_en_015020241 =>PUP.Optional.CrossRider
C:\Program Files (x86)\Iminent =>PUP.Optional.IMBooster
C:\Program Files (x86)\MaxDrivrUpdater_v153.12905 =>PUP.Optional.MaxDriverUpdater
C:\Program Files (x86)\Oasis Space =>PUP.Optional.OasisSpace
C:\Program Files (x86)\rec_en_77 =>.Superfluous.Tuto4PC
C:\Program Files (x86)\SFK =>PUP.Optional.MyWebSearch
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DESKTOPPLAY =>PUP.Optional.CrossRider
C:\ProgramData\Boxore =>PUP.Optional.Boxore
C:\ProgramData\Ecois =>PUP.Optional.Salus
C:\ProgramData\Ecoiss =>PUP.Optional.Salus
C:\ProgramData\Lsevewreesce =>Heuristic.PullUpdate
C:\ProgramData\ZombieNews =>PUP.Optional.ZombieNews
C:\Program Files (x86)\Common Files\IMGUpdater =>PUP.Optional.IMGUpdater
C:\Users\Marie\AppData\Roaming\Nosibay =>PUP.Optional.BubbleDock
C:\Users\Marie\AppData\Roaming\Store =>PUP.Optional.Nosibay
C:\Users\Marie\AppData\Roaming\systweak =>.Superfluous.Systweak
C:\Users\Marie\AppData\Roaming\WTools =>PUP.Optional.Nosibay
C:\Users\Marie\AppData\Roaming\yoursearching =>PUP.Optional.YourSearching
C:\Users\Marie\AppData\Local\Boxore =>PUP.Optional.Boxore
C:\Users\Marie\AppData\Local\BrowserAir =>PUP.Optional.BrowserAir
C:\Users\Marie\AppData\Local\dply_en_015020241 =>PUP.Optional.CrossRider
C:\Users\Marie\AppData\Local\rec_en_77 =>.Superfluous.Tuto4PC
C:\Users\Marie\AppData\Local\SearchModule =>PUP.Optional.Goobzo
C:\Users\Marie\AppData\Local\TheBrowser =>PUP.Optional.TheBrowser
C:\Users\Marie\AppData\Local\ZombieNews =>PUP.Optional.ZombieNews
C:\Users\Marie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bubble Dock =>PUP.Optional.BubbleDock
C:\WINDOWS\Prefetch\62793.WINDAPP.MON001.NO.EXE-2AF46416.pf =>PUP.Optional.Nosibay
C:\WINDOWS\Prefetch\62793.WINDAPP.MON001.NO.EXE-773D939B.pf =>PUP.Optional.Nosibay
C:\WINDOWS\Prefetch\ASPACKAGE.EXE-FFF33E68.pf =>PUP.Optional.ASPackage
C:\WINDOWS\Prefetch\BOXORE.EXE-F2F46CD6.pf =>PUP.Optional.Boxore
C:\WINDOWS\Prefetch\BOXORELSP.EXE-63C3174E.pf =>PUP.Optional.Boxore
C:\WINDOWS\Prefetch\BOXORESERVICE.EXE-5400DB60.pf =>PUP.Optional.Boxore
C:\WINDOWS\Prefetch\BROWSERAIR.EXE-91BD721E.pf =>PUP.Optional.BrowserAir
C:\WINDOWS\Prefetch\BUBBLE DOCK BSETUP.EXE-519C5554.pf =>PUP.Optional.BubbleDock
C:\WINDOWS\Prefetch\BUBBLE DOCK BSETUP.EXE-5D0F5662.pf =>PUP.Optional.BubbleDock
C:\WINDOWS\Prefetch\BUBBLE DOCK UNINSTALL.EXE-344E02E9.pf =>PUP.Optional.BubbleDock
C:\WINDOWS\Prefetch\BUBBLE DOCK UNINSTALL.EXE-5F69BCE9.pf =>PUP.Optional.BubbleDock
C:\WINDOWS\Prefetch\BUBBLE DOCK UPDATE.EXE-9E0C6EE6.pf =>PUP.Optional.BubbleDock
C:\WINDOWS\Prefetch\BUBBLE DOCK.EXE-A4AC16B7.pf =>PUP.Optional.BubbleDock
C:\WINDOWS\Prefetch\DPLY_EN_015020241.EXE-24EA9848.pf =>PUP.Optional.CrossRider
C:\WINDOWS\Prefetch\ECOIS.EXE-F3253D6C.pf =>PUP.Optional.Salus
C:\WINDOWS\Prefetch\GMSD_FR_005010241 - UNINSTALL-FA1D0A5D.pf =>PUP.Optional.CrossRider
C:\WINDOWS\Prefetch\GMSD_FR_005010241.EXE-F440DB0A.pf =>PUP.Optional.CrossRider
C:\WINDOWS\Prefetch\IHPMSERVER.EXE-00A606E7.pf =>PUP.Optional.CrossRider
C:\WINDOWS\Prefetch\IMGUPDATER.EXE-169D6CA2.pf =>PUP.Optional.IMGUpdater
C:\WINDOWS\Prefetch\LBUBBLE DOCK.EXE-7D68BCE3.pf =>PUP.Optional.BubbleDock
C:\WINDOWS\Prefetch\MAXDRIVERUPDATER.EXE-3CD34513.pf =>PUP.Optional.MaxDriverUpdater
C:\WINDOWS\Prefetch\MAXDRIVERUPDATER.TMP-C0E2E3F3.pf =>PUP.Optional.MaxDriverUpdater
C:\WINDOWS\Prefetch\MAXDRIVRUPDATER_SERVICE.EXE-9AFE9CE3.pf =>PUP.Optional.MaxDriverUpdater
C:\WINDOWS\Prefetch\OASISDPLY_EN_015020241.EXE-CAD93F86.pf =>PUP.Optional.CrossRider
C:\WINDOWS\Prefetch\OASISSPACEUNINSTALL.EXE-5DD4B5FE.pf =>PUP.Optional.OasisSpace
C:\WINDOWS\Prefetch\OASISSPACE_SETUP.EXE-99B42F96.pf =>PUP.Optional.OasisSpace
C:\WINDOWS\Prefetch\PREDM.EXE-D109773C.pf =>PUP.Optional.Downware
C:\WINDOWS\Prefetch\PREDM.EXE-F97B736C.pf =>PUP.Optional.Downware
C:\WINDOWS\Prefetch\PREDM.TMP-0ED401C0.pf =>PUP.Optional.Downware
C:\WINDOWS\Prefetch\PREDM.TMP-9EAD2959.pf =>PUP.Optional.Downware
C:\WINDOWS\Prefetch\REC_EN_77.EXE-09BE8878.pf =>.Superfluous.Tuto4PC
C:\WINDOWS\Prefetch\SELECTION TOOLS UNINSTALL.EXE-AC0E3794.pf =>PUP.Optional.Nosibay
C:\WINDOWS\Prefetch\SELECTION TOOLS UNINSTALL.EXE-B8616AE2.pf =>PUP.Optional.Nosibay
C:\WINDOWS\Prefetch\SELECTION TOOLS.EXE-EBA45CD2.pf =>PUP.Optional.Nosibay
C:\WINDOWS\Prefetch\SETUP_REC_FR_203.EXE-FC877DA0.pf =>PUP.Optional.CrossRider
C:\WINDOWS\Prefetch\SPACESOUNDPRO.EXE-7088EC37.pf =>PUP.Optional.SpaceSoundPro
C:\WINDOWS\Prefetch\SUNNYDAY.EXE-AD481523.pf =>PUP.Optional.CrossRider
C:\WINDOWS\Prefetch\UPDPLY_EN_015020241.EXE-7BB6CCE1.pf =>PUP.Optional.CrossRider
C:\WINDOWS\Prefetch\UPGMSD_FR_005010241.EXE-52859B13.pf =>PUP.Optional.CrossRider
C:\WINDOWS\Prefetch\UTILOASISSPACE.EXE-198A7B1B.pf =>PUP.Optional.OasisSpace
C:\WINDOWS\Prefetch\WPM_V20.0.0.2514.EXE-E5406B2F.pf =>PUP.Optional.WpManager
C:\WINDOWS\Prefetch\ZDENGINE.EXE-8D39F321.pf =>PUP.Optional.FastSearch
C:\WINDOWS\Prefetch\ZOMBIENEWSINSTALL.EXE-5F3829B2.pf =>PUP.Optional.ZombieNews
C:\WINDOWS\System32\drivers\zdwfp64.sys =>PUP.Optional.FastSearch
C:\Users\Marie\AppData\Local\TheBrowser\Application\44.4.9.7\Installer\setup.exe =>PUP.Optional.Goobzo
C:\Users\Marie\AppData\Local\dply_en_015020241\Download\setup_rec_fr_200.exe =>PUP.Optional.CrossRider
C:\Users\Marie\AppData\Local\dply_en_015020241\Download\setup_rec_fr_203.exe =>PUP.Optional.CrossRider
C:\Users\Marie\AppData\Local\dply_en_015020241\Download\wizzupdater.exe =>PUP.Optional.CrossRider
C:\Users\Marie\AppData\Local\BrowserAir\Application\47.0.0.5\chrome.dll =>PUP.Optional.BrowserAir
C:\Users\Marie\AppData\Local\BrowserAir\Application\47.0.0.5\chrome_child.dll =>PUP.Optional.BrowserAir
C:\Users\Marie\AppData\Local\BrowserAir\Application\47.0.0.5\chrome_elf.dll =>PUP.Optional.BrowserAir
C:\Users\Marie\AppData\Local\BrowserAir\Application\47.0.0.5\delegate_execute.exe =>PUP.Optional.BrowserAir
C:\Users\Marie\AppData\Local\BrowserAir\Application\47.0.0.5\ffmpegsumo.dll =>PUP.Optional.BrowserAir
C:\Users\Marie\AppData\Local\BrowserAir\Application\47.0.0.5\libexif.dll =>PUP.Optional.BrowserAir
C:\Users\Marie\AppData\Local\BrowserAir\Application\47.0.0.5\metro_driver.dll =>PUP.Optional.BrowserAir
C:\Users\Marie\AppData\Local\BrowserAir\Application\47.0.0.5\nacl64.exe =>PUP.Optional.BrowserAir
C:\Users\Marie\AppData\Local\BrowserAir\Application\47.0.0.5\pdf.dll =>PUP.Optional.BrowserAir
C:\Users\Marie\AppData\Local\BrowserAir\Application\47.0.0.5\ppgooglenaclpluginchrome.dll =>PUP.Optional.BrowserAir
C:\Users\Marie\AppData\Local\BrowserAir\Application\47.0.0.5\Installer\setup.exe =>PUP.Optional.BrowserAir
HKCU\Software\Microsoft\Internet Explorer\SearchScopes\OldSearch =>PUP.Optional.Trovigo
HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{E989DB69-2BD6-4DC5-A0EE-BBEE8BEF5680} =>PUP.Optional.Browser
HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{F9DB56F3-690B-480D-8EC0-B06E7AE2E10D} =>PUP.Optional.SearchingCom
HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{ielnksrch} =>PUP.Optional.Linkury
HKLM\Software\Microsoft\Internet Explorer\SearchScopes\ielnksrch =>PUP.Optional.Linkury
HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{BFFED5CA-8BDF-47CC-AED0-23F4E6D77732} =>PUP.Optional.IMBooster
C:\Users\Marie\AppData\Local\TheBrowser\Application\TheBrowser.exe =>PUP.Optional.Goobzo
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Ecois_RASAPI32 =>PUP.Optional.Salus
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Ecois_RASMANCS =>PUP.Optional.Salus

---\\ Récapitulatif des éléments trouvés sur votre station (43) - 0s
http://www.nicolascoolman.fr/pup-salus/ =>PUP.Optional.Salus
http://www.nicolascoolman.fr/pup-optional-1stbrowser/ =>PUP.Optional.1stBrowser
http://www.nicolascoolman.fr/?p=180 =>PUP.Optional.CrossRider
http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.Shopperz
http://www.nicolascoolman.fr/?p=1780 =>PUP.Optional.YTDownloader
http://www.nicolascoolman.fr/?p=220 =>PUP.Optional.MyWebSearch
http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.WdsManPro
http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.Shopper
http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.DNSUnlocker
http://www.nicolascoolman.fr/?p=4664 =>Heuristic.PullUpdate
http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.Nosibay
http://www.nicolascoolman.fr/?p=1515 =>PUP.Optional.IMGUpdater
http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.MaxDriverUpdater
http://www.nicolascoolman.fr/pup-optional-tuto4pc/ =>.Superfluous.Tuto4PC
http://www.nicolascoolman.fr/pup-goobzo/ =>PUP.Optional.Goobzo
http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.SearchingCom
http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.Linkury
http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.SpaceSoundPro
http://www.nicolascoolman.fr/?p=177 =>PUP.Optional.BubbleDock
http://www.nicolascoolman.fr/?p=224 =>PUP.Optional.IMBooster
http://www.nicolascoolman.fr/?p=641 =>PUP.Optional.SoftwareUpdater
http://www.nicolascoolman.fr/pup-optional-yoursearching =>PUP.Optional.YourSearching
http://www.nicolascoolman.fr/?p=308 =>PUP.Optional.SmartBar
http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.DesktopPlay
http://www.nicolascoolman.fr/link-660/ =>PUP.Optional.SearchModule
http://www.nicolascoolman.fr/pup-systweak/ =>.Superfluous.Systweak
http://www.nicolascoolman.fr/?p=122 =>PUP.Optional.AgenceExclusive
http://www.nicolascoolman.fr/pup-optional-dailypcclean/ =>PUP.Optional.DailyPCClean
http://www.nicolascoolman.fr/?p=205 =>PUP.Optional.SPointer
http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.Generic
http://www.nicolascoolman.fr/pup-maxcomputercleaner/ =>PUP.Optional.MaxComputerCleaner
http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.DynConIE
http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.OasisSpace
http://www.nicolascoolman.fr/?p=90 =>PUP.Optional.Boxore
http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.ZombieNews
http://www.nicolascoolman.fr/pup-optional-browserair/ =>PUP.Optional.BrowserAir
http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.TheBrowser
http://www.nicolascoolman.fr/pup-optional-aspackage/ =>PUP.Optional.ASPackage
http://www.nicolascoolman.fr/?p=401 =>PUP.Optional.Downware
http://www.nicolascoolman.fr/?p=173 =>PUP.Optional.WpManager
http://www.nicolascoolman.fr/pup-optional-fastsearch/ =>PUP.Optional.FastSearch
http://www.nicolascoolman.fr/?p=1042 =>PUP.Optional.Trovigo
http://www.nicolascoolman.fr/?p=546 =>PUP.Optional.Browser

~ End of the scan, 76851 items in 00h04mn01s (1269)(0)