~ ZHPDiag v2017.3.11.43 Par Nicolas Coolman (2017/03/09)
~ Démarré par Theo le BG (Administrator) (2017/03/11 13:25:17)
~ Web: https://www.nicolascoolman.com
~ Blog: https://nicolascoolman.eu/
~ Facebook: https://www.facebook.com/nicolascoolman1
~ Etat de la version: Version OK
~ Mode: Scanner
~ Rapport: C:\Users\Theo le BG\Desktop\ZHPDiag.txt
~ Rapport: C:\Users\Theo le BG\AppData\Roaming\ZHP\ZHPDiag.txt
~ UAC: Deactivate
~ Démarrage du système: Normal (Normal boot)
Windows 7 Professional, 64-bit Service Pack 1 (Build 7601) =>.Microsoft Corporation

---\\ Navigateurs Internet (2) - 0s
~ MFIE: Mozilla Firefox 49.0.2 (x86 fr)
~ MSIE: Internet Explorer v9.0.8112.16421

---\\ Informations sur les produits Windows (4) - 3s
~ Windows Server License Manager Script : OK
System - VBScript Engine not found
Windows Automatic Updates : OK
Windows Activation Technologies : KO

---\\ Logiciels de protection (1) - 1s
Malwarebytes Anti-Malware version 2.2.1.1043 (Protection)

---\\ Surveillance de Logiciels (1) - 1s
~ Adobe Flash Player 24 NPAPI (Surveillance)

---\\ Logiciels de partage P2P (1) - 1s
~ µTorrent v3.4.9.43295 (P2P)

---\\ Informations sur le système (6) - 0s
~ Operating System: Intel64 Family 6 Model 30 Stepping 5, GenuineIntel
~ Operating System: 64-bit
~ Boot mode: Normal (Normal boot)
Total RAM: 3136.632 MB (39% free) : OK =>.RAM Value
System Restore: Activé (Enable)
System drive C: has 21 GB (18%) free of 114 GB : OK =>.Disk Space

---\\ Mode de connexion au système (3) - 0s
~ Computer Name: THEOLEBG-PC
~ User Name: Theo le BG
~ Logged in as Administrator

---\\ Enumération des unités disques (2) - 0s
~ Drive C: has 21 GB free of 114 GB (System)
~ Drive D: has 404 GB free of 953 GB

---\\ Etat du Centre de Sécurité Windows (11) - 0s
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoResolveSearch: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK

---\\ Recherche particulière de fichiers génériques (26) - 1s
[MD5.332FEAB1435662FC6C672E25BEB37BE3] - 25/02/2011 - (.Microsoft Corporation - Explorateur Windows.) -- C:\Windows\Explorer.exe [2871808] =>.Microsoft Corporation
[MD5.DD81D91FF3B0763C392422865C9AC12E] - 14/07/2009 - (.Microsoft Corporation - Processus hôte Windows (Rundll32).) -- C:\Windows\System32\rundll32.exe [45568] =>.Microsoft Corporation
[MD5.94355C28C1970635A31B3FE52EB7CEBA] - 14/07/2009 - (.Microsoft Corporation - Application de démarrage de Windows.) -- C:\Windows\System32\Wininit.exe [129024] =>.Microsoft Corporation
[MD5.5A45FA344F4AD99D903F4B20E43B89EC] - 11/07/2012 - (.Microsoft Corporation - Extensions Internet pour Win32.) -- C:\Windows\System32\wininet.dll [1392128] =>.Microsoft Corporation
[MD5.1151B1BAA6F350B1DB6598E0FEA7C457] - 21/11/2010 - (.Microsoft Corporation - Application d’ouverture de session Windows.) -- C:\Windows\System32\Winlogon.exe [390656] =>.Microsoft Corporation
[MD5.067FA52BFB59A56110A12312EF9AF243] - 21/11/2010 - (.Microsoft Corporation - Bibliothèque de licences.) -- C:\Windows\System32\sppcomapi.dll [232448] =>.Microsoft Corporation
[MD5.492D07D79E7024CA310867B526D9636D] - 03/03/2011 - (.Microsoft Corporation - DNS DLL de l’API Client.) -- C:\Windows\System32\dnsapi.dll [357888] =>.Microsoft Corporation
[MD5.B40420876B9288E0A1C8CCA8A84E5DC9] - 03/03/2011 - (.Microsoft Corporation - DNS DLL de l’API Client.) -- C:\Windows\Syswow64\dnsapi.dll [270336] =>.Microsoft Corporation
[MD5.0D57D091E06BB1E58E72E5D08479FDDF] - 21/11/2010 - (.Microsoft Corporation - DLL client de l’API uilisateur de Windows m.) -- C:\Windows\System32\fr-FR\user32.dll.mui [20480] =>.Microsoft Corporation
[MD5.1C7857B62DE5994A75B054A9FD4C3825] - 28/12/2011 - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) -- C:\Windows\System32\drivers\AFD.sys [498688] =>.Microsoft Corporation
[MD5.02062C0B390B7729EDC9E69C680A6F3C] - 14/07/2009 - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) -- C:\Windows\System32\drivers\atapi.sys [24128] =>.Microsoft Windows®
[MD5.B8BD2BB284668C84865658C77574381A] - 14/07/2009 - (.Microsoft Corporation - CD-ROM File System Driver.) -- C:\Windows\System32\drivers\Cdfs.sys [92160] =>.Microsoft Corporation
[MD5.F036CE71586E93D94DAB220D7BDF4416] - 21/11/2010 - (.Microsoft Corporation - SCSI CD-ROM Driver.) -- C:\Windows\System32\drivers\Cdrom.sys [147456] =>.Microsoft Corporation
[MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - 21/11/2010 - (.Microsoft Corporation - DFS Namespace Client Driver.) -- C:\Windows\System32\drivers\DfsC.sys [102400] =>.Microsoft Corporation
[MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - 21/11/2010 - (.Microsoft Corporation - High Definition Audio Bus Driver.) -- C:\Windows\System32\drivers\HDAudBus.sys [122368] =>.Microsoft Corporation
[MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - 14/07/2009 - (.Microsoft Corporation - Pilote de port i8042.) -- C:\Windows\System32\drivers\i8042prt.sys [105472] =>.Microsoft Corporation
[MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - 14/07/2009 - (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\System32\drivers\IpNat.sys [116224] =>.Microsoft Corporation
[MD5.A5D9106A73DC88564C825D317CAC68AC] - 27/04/2011 - (.Microsoft Corporation - Windows NT SMB Minirdr.) -- C:\Windows\System32\drivers\MRxSmb.sys [158208] =>.Microsoft Corporation
[MD5.09594D1089C523423B32A4229263F068] - 21/11/2010 - (.Microsoft Corporation - MBT Transport driver.) -- C:\Windows\System32\drivers\netBT.sys [261632] =>.Microsoft Corporation
[MD5.05D78AA5CB5F3F5C31160BDB955D0B7C] - 21/11/2010 - (.Microsoft Corporation - Pilote du système de fichiers NT.) -- C:\Windows\System32\drivers\ntfs.sys [1659776] =>.Microsoft Windows®
[MD5.0086431C29C35BE1DBC43F52CC273887] - 14/07/2009 - (.Microsoft Corporation - Pilote de port parallèle.) -- C:\Windows\System32\drivers\Parport.sys [97280] =>.Microsoft Corporation
[MD5.471815800AE33E6F1C32FB1B97C490CA] - 21/11/2010 - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) -- C:\Windows\System32\drivers\Rasl2tp.sys [129536] =>.Microsoft Corporation
[MD5.1B6163C503398B23FF8B939C67747683] - 21/11/2010 - (.Microsoft Corporation - Microsoft RDP Device redirector.) -- C:\Windows\System32\drivers\rdpdr.sys [165888] =>.Microsoft Corporation
[MD5.548260A7B8654E024DC30BF8A7C5BAA4] - 14/07/2009 - (.Microsoft Corporation - SMB Transport driver.) -- C:\Windows\System32\drivers\smb.sys [93184] =>.Microsoft Corporation
[MD5.DDAD5A7AB24D8B65F8D724F5C20FD806] - 21/11/2010 - (.Microsoft Corporation - TDI Translation Driver.) -- C:\Windows\System32\drivers\tdx.sys [119296] =>.Microsoft Corporation
[MD5.0D08D2F3B3FF84E433346669B5E0F639] - 21/11/2010 - (.Microsoft Corporation - Pilote de cliché instantané du volume.) -- C:\Windows\System32\drivers\volsnap.sys [295808] =>.Microsoft Windows®

---\\ Liste des services NT non Microsoft et non désactivés (15) - 0s
O23 - Service: (AdobeUpdateService) . (.Adobe Systems Incorporated - Adobe Update Service.) - C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe =>.Adobe Systems Incorporated®
O23 - Service: Adobe Genuine Software Integrity Service (AGSService) . (.Adobe Systems, Incorporated - Adobe Genuine Software Integrity Service.) - C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe =>.Adobe Systems Incorporated®
O23 - Service: (AMD External Events Utility) . (.AMD - AMD External Events Service Module.) - C:\Windows\system32\atiesrxx.exe =>.AMD
O23 - Service: ACP User Service (amdacpusrsvc) . (.Advanced Micro Devices - AMD ACP Binaries.) - C:\Program Files\AMD\{920DEC42-4CA5-4d1d-9487-67BE645CDDFC}\amdacpusrsvc.exe =>.Advanced Micro Devices
O23 - Service: Apple Mobile Device Service (Apple Mobile Device Service) . (.Apple Inc. - MobileDeviceService.) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe =>.Apple Inc.®
O23 - Service: BlueStacks Log Rotator Service (BstHdLogRotatorSvc) . (.BlueStack Systems, Inc. - BlueStacks Log Rotator Service.) - C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe =>.BlueStack Systems, Inc.®
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google Inc®
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) . (.LogMeIn Inc. - Hamachi Client Tunneling Engine.) - C:\Program Files (x86)\LogMeIn Hamachi\x64\hamachi-2.exe =>.LogMeIn, Inc.®
O23 - Service: Kiqerwardmider (Kiqerwardmider) . (...) - C:\Program Files (x86)\Votutionclibsh\fwgDbg.dll (.not file.) =>Adware.Suspect
O23 - Service: LMIGuardianSvc (LMIGuardianSvc) . (.LogMeIn, Inc. - LMIGuardianSvc.) - C:\Program Files (x86)\LogMeIn Hamachi\x64\LMIGuardianSvc.exe =>.LogMeIn, Inc.®
O23 - Service: Origin Web Helper Service (Origin Web Helper Service) . (.Electronic Arts - OriginWebHelperService.) - C:\Program Files (x86)\Origin\OriginWebHelperService.exe =>.Electronic Arts, Inc.®
O23 - Service: PnkBstrA (PnkBstrA) . (...) - C:\Windows\System32\PnkBstrA.exe (.not file.)
O23 - Service: Service KMSELDI (Service KMSELDI) . (.@ByELDI - Service_KMS.) - C:\Program Files\KMSpico\Service_KMS.exe =>HackTool.KMSpico
O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files (x86)\Skype\Updater\Updater.exe =>.Skype Software Sarl®
O23 - Service: TeamViewer 12 (TeamViewer) . (.TeamViewer GmbH - TeamViewer 12.) - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe =>.TeamViewer GmbH®

---\\ Services non Microsoft (SR=Démarré,SS=Stoppé) (22) - 8s
SS - Demand [15/02/2017] [ 270936] Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe =>.Adobe Systems Incorporated®
SR - Auto [25/10/2016] [ 744640] (AdobeUpdateService) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe =>.Adobe Systems Incorporated®
SR - Auto [27/02/2017] [ 2227312] Adobe Genuine Software Integrity Service (AGSService) . (.Adobe Systems, Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe =>.Adobe Systems Incorporated®
SS - Auto [24/11/2016] [ 289160] (AMD External Events Utility) . (.AMD.) - C:\Windows\system32\atiesrxx.exe =>.Advanced Micro Devices, Inc.®
SS - Auto [23/11/2016] [ 121856] ACP User Service (amdacpusrsvc) . (.Advanced Micro Devices.) - C:\Program Files\AMD\{920DEC42-4CA5-4d1d-9487-67BE645CDDFC}\amdacpusrsvc.exe =>.Advanced Micro Devices
SR - Auto [02/03/2016] [ 83768] Apple Mobile Device Service (Apple Mobile Device Service) . (.Apple Inc..) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe =>.Apple Inc.®
SS - Demand [02/12/2016] [ 1457160] BattlEye Service (BEService) . (...) - C:\Program Files (x86)\Common Files\BattlEye\BEService.exe =>.BattlEye Innovations e.K.®
SS - Demand [21/02/2017] [ 428056] BlueStacks Android Service (BstHdAndroidSvc) . (.BlueStack Systems, Inc..) - C:\Program Files (x86)\BlueStacks\HD-Service.exe =>.BlueStack Systems, Inc.®
SR - Auto [21/02/2017] [ 406040] BlueStacks Log Rotator Service (BstHdLogRotatorSvc) . (.BlueStack Systems, Inc..) - C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe =>.BlueStack Systems, Inc.®
SS - Demand [21/02/2017] [ 452632] BlueStacks Plus Android Service (BstHdPlusAndroidSvc) . (.BlueStack Systems, Inc..) - C:\Program Files (x86)\BlueStacks\HD-Plus-Service.exe =>.BlueStack Systems, Inc.®
SS - Auto [22/07/2016] [ 152216] Service Google Update (gupdate) (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google Inc®
SS - Demand [22/07/2016] [ 152216] Service Google Update (gupdatem) (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google Inc®
SS - Auto [02/03/2017] [ 3416584] LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) . (.LogMeIn Inc..) - C:\Program Files (x86)\LogMeIn Hamachi\x64\hamachi-2.exe =>.LogMeIn, Inc.®
SS - Demand [05/07/2016] [ 651576] Service de l’iPod (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe =>.Apple Inc.®
SR - Auto [27/02/2017] [ 419248] LMIGuardianSvc (LMIGuardianSvc) . (.LogMeIn, Inc..) - C:\Program Files (x86)\LogMeIn Hamachi\x64\LMIGuardianSvc.exe =>.LogMeIn, Inc.®
SS - Demand [19/10/2016] [ 172488] Mozilla Maintenance Service (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe =>.Mozilla Corporation®
SS - Demand [25/01/2017] [ 2121736] Origin Client Service (Origin Client Service) . (.Electronic Arts.) - C:\Program Files (x86)\Origin\OriginClientService.exe =>.Electronic Arts, Inc.®
SS - Auto [25/01/2017] [ 2183696] Origin Web Helper Service (Origin Web Helper Service) . (.Electronic Arts.) - C:\Program Files (x86)\Origin\OriginWebHelperService.exe =>.Electronic Arts, Inc.®
SR - Auto [11/01/2016] [ 745664] Service KMSELDI (Service KMSELDI) . (.@ByELDI.) - C:\Program Files\KMSpico\Service_KMS.exe =>HackTool.KMSpico
SS - Auto [25/07/2016] [ 324224] Skype Updater (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe =>.Skype Software Sarl®
SS - Demand [25/07/2016] [ 324224] Steam Client Service (Steam Client Service) . (.Valve Corporation.) - C:\Program Files (x86)\Common Files\Steam\SteamService.exe =>.Valve®
SR - Auto [25/07/2016] [ 324224] TeamViewer 12 (TeamViewer) . (.TeamViewer GmbH.) - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe =>.TeamViewer GmbH®

---\\ Tâches planifiées en automatique (20) - 3s
[MD5.89ECFB35517F62C3802B227F288B750E] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [324224] (.Activate.) =>.Adobe Systems Incorporated®
[MD5.48515EEA1608ECD83FE26C7490460F59] [APT] [AdobeAAMUpdater-1.0-TheoleBG-PC-Theo le BG] (.Adobe Systems Incorporated.) -- C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [324224] (.Activate.) =>.Adobe Systems Incorporated®
[MD5.98C550493A7BE0FFF04B4324347F0FB3] [APT] [AMD Updater] (.Advanced Micro Devices, Inc..) -- C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [324224] (.Activate.) =>.Advanced Micro Devices, Inc.®
[MD5.CFE1C391464C446099A5EB33276F6D57] [APT] [AutoPico Daily Restart] (.@ByELDI.) -- C:\Program Files\KMSpico\AutoPico.exe [324224] (.Activate.) =>HackTool.KMSpico
[MD5.C2C9E42D6C51E99C1BAB44F108E8851C] [APT] [CCleanerSkipUAC] (.Piriform Ltd.) -- C:\Program Files\CCleaner\CCleaner.exe [324224] (.Activate.) =>.Piriform Ltd®
[MD5.50FCC5C822A6B4FC6F377EE9F9F37C7B] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [324224] (.Activate.) =>.Google Inc®
[MD5.50FCC5C822A6B4FC6F377EE9F9F37C7B] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [324224] (.Activate.) =>.Google Inc®
[MD5.23985274780D27117C470AA259B79B30] [APT] [Apple\AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [324224] (.Activate.) =>.Apple Inc.®
[MD5.C72865DE00C0B7E4B4C3DEBCB347FC36] [APT] [AVAST Software\Avast settings backup] (.AVAST Software.) -- C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [324224] (.Activate.) =>.AVAST Software s.r.o.®
[MD5.6E9505C7364E725672271FA31118B3F2] [APT] [Microsoft\Windows\Multimedia\ReportSender] (.Copyright © 2014-2016.) -- C:\Users\Theo le BG\ReportSender\ReportSender.exe [324224] (.Activate.)
O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\Tasks\Adobe Flash Player Updater.job [324224] =>.Adobe Systems Incorporated®
O39 - APT: At1 - (...) -- C:\Windows\Tasks\At1.job [324224] (.Orphan.) =>.Superfluous.Orphan
O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Tasks\Adobe Flash Player Updater [324224] =>.Adobe Systems Incorporated®
O39 - APT: AdobeAAMUpdater-1.0-TheoleBG-PC-Theo le BG - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Tasks\AdobeAAMUpdater-1.0-TheoleBG-PC-Theo le BG [324224] =>.Adobe Systems Incorporated®
O39 - APT: AMD Updater - (.Advanced Micro Devices, Inc..) -- C:\Windows\System32\Tasks\AMD Updater [324224] =>.Advanced Micro Devices, Inc.®
O39 - APT: At1 - (...) -- C:\Windows\System32\Tasks\At1 [324224] (.Orphan.) =>.Superfluous.Orphan
O39 - APT: AutoPico Daily Restart - (.@ByELDI.) -- C:\Windows\System32\Tasks\AutoPico Daily Restart [324224] =>HackTool.KMSpico
O39 - APT: CCleanerSkipUAC - (.Piriform Ltd.) -- C:\Windows\System32\Tasks\CCleanerSkipUAC [324224] =>.Piriform Ltd®
O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore [324224] =>.Google Inc®
O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA [324224] =>.Google Inc®

---\\ Applications lancées au démarrage du système (19) - 1s
O4 - HKLM\..\Run: [StartCN] . (.Advanced Micro Devices, Inc. - Radeon Settings: Host Application.) -- C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe =>.Advanced Micro Devices, Inc.®
O4 - HKCU\..\Run: [CCleaner Monitoring] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner64.exe =>.Piriform Ltd®
O4 - HKCU\..\Run: [Spotify Web Helper] . (.Spotify Ltd - SpotifyWebHelper.) -- C:\Users\Theo le BG\AppData\Roaming\Spotify\SpotifyWebHelper.exe =>.Spotify AB®
O4 - HKCU\..\Run: [uTorrent] . (.BitTorrent Inc. - µTorrent.) -- C:\Users\Theo le BG\AppData\Roaming\uTorrent\uTorrent.exe =>.BitTorrent Inc®
O4 - HKCU\..\Run: [BlueStacks Agent] . (.BlueStack Systems, Inc. - BlueStacks Agent.) -- C:\Program Files (x86)\BlueStacks\HD-Agent.exe =>.BlueStack Systems, Inc.®
O4 - HKCU\..\Run: [cacaoweb] . (...) -- C:\Users\Theo le BG\AppData\Roaming\cacaoweb\cacaoweb.exe =>.Superfluous.CacaoWeb
O4 - HKLM\..\Wow6432Node\Run: [winpro] C:\Users\Theo le BG\AppData\Local\Temp\winpro.exe (.not file.)
O4 - HKLM\..\Wow6432Node\Run: [win_en_77] C:\Program Files (x86)\win_en_77\win_en_77.exe (.not file.) =>.Superfluous.CSDI
O4 - HKLM\..\Wow6432Node\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe =>.Oracle America, Inc.®
O4 - HKLM\..\Wow6432Node\Run: [LogMeIn Hamachi Ui] . (.LogMeIn Inc. - Hamachi Client Application.) -- C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe =>.LogMeIn, Inc.®
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-21-3776263589-1998821774-2548061867-1001\..\Run: [CCleaner Monitoring] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner64.exe =>.Piriform Ltd®
O4 - HKUS\S-1-5-21-3776263589-1998821774-2548061867-1001\..\Run: [Spotify Web Helper] . (.Spotify Ltd - SpotifyWebHelper.) -- C:\Users\Theo le BG\AppData\Roaming\Spotify\SpotifyWebHelper.exe =>.Spotify AB®
O4 - HKUS\S-1-5-21-3776263589-1998821774-2548061867-1001\..\Run: [uTorrent] . (.BitTorrent Inc. - µTorrent.) -- C:\Users\Theo le BG\AppData\Roaming\uTorrent\uTorrent.exe =>.BitTorrent Inc®
O4 - HKUS\S-1-5-21-3776263589-1998821774-2548061867-1001\..\Run: [BlueStacks Agent] . (.BlueStack Systems, Inc. - BlueStacks Agent.) -- C:\Program Files (x86)\BlueStacks\HD-Agent.exe =>.BlueStack Systems, Inc.®
O4 - HKUS\S-1-5-21-3776263589-1998821774-2548061867-1001\..\Run: [cacaoweb] . (...) -- C:\Users\Theo le BG\AppData\Roaming\cacaoweb\cacaoweb.exe =>.Superfluous.CacaoWeb

---\\ Processus lancés (27) - 1s
[MD5.8532B30A054D83614A90D24AD61A29DF] - (.Adobe Systems Incorporated - Adobe Update Service.) -- C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [744640] [PID.1516] =>.Adobe Systems Incorporated®
[MD5.A32EA26C90A47B2BC93D7B0B94994B11] - (.Adobe Systems, Incorporated - Adobe Genuine Software Integrity Service.) -- C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2227312] [PID.1548] =>.Adobe Systems Incorporated®
[MD5.D3279C4EA3721693D22F854C3AAC994C] - (.BlueStack Systems, Inc. - BlueStacks Log Rotator Service.) -- C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [406040] [PID.1684] =>.BlueStack Systems, Inc.®
[MD5.0554F3B69D39D175DD110D765C11347A] - (.LogMeIn, Inc. - LMIGuardianSvc.) -- C:\Program Files (x86)\LogMeIn Hamachi\x64\LMIGuardianSvc.exe [419248] [PID.1804] =>.LogMeIn, Inc.®
[MD5.3A2E85F7D90D15460C337CE80C2E3B29] - (...) -- C:\Windows\SysWOW64\PnkBstrA.exe [76888] [PID.2008] =>.Even Balance, Inc.®
[MD5.8D0C31D282CC9194791EA850041C6C45] - (.@ByELDI - Service_KMS.) -- C:\Program Files\KMSpico\Service_KMS.exe [745664] [PID.904] =>HackTool.KMSpico
[MD5.44449A0EB8EBD8DCBC3ED4BB62BA3A5F] - (.TeamViewer GmbH - TeamViewer 12.) -- C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [10351856] [PID.1908] =>.TeamViewer GmbH®
[MD5.7C8437CF2D7C6E72AA8570CFF18FB01F] - (.Advanced Micro Devices, Inc. - Radeon Settings: Host Application.) -- C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe [8029576] [PID.1312] =>.Advanced Micro Devices, Inc.®
[MD5.F0B461FB820595E8BAF1161F55BE3E74] - (.Spotify Ltd - SpotifyWebHelper.) -- C:\Users\Theo le BG\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1446000] [PID.2228] =>.Spotify AB®
[MD5.2A678FCE38F292ACC115977E9BD18664] - (.BlueStack Systems, Inc. - BlueStacks Agent.) -- C:\Program Files (x86)\BlueStacks\HD-Agent.exe [225816] [PID.2096] =>.BlueStack Systems, Inc.®
[MD5.0EC2A8704E1A73B31F23CE91A910303B] - (.Spotify Ltd - Spotify.) -- C:\Users\Theo le BG\AppData\Roaming\Spotify\Spotify.exe [7114352] [PID.5580] =>.Spotify AB®
[MD5.642D464F0EDE1B3C81BC20C3E3A3ECC6] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1116504] [PID.2732] =>.Google Inc®
[MD5.642D464F0EDE1B3C81BC20C3E3A3ECC6] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1116504] [PID.5948] =>.Google Inc®
[MD5.642D464F0EDE1B3C81BC20C3E3A3ECC6] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1116504] [PID.3016] =>.Google Inc®
[MD5.642D464F0EDE1B3C81BC20C3E3A3ECC6] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1116504] [PID.6096] =>.Google Inc®
[MD5.0EC2A8704E1A73B31F23CE91A910303B] - (.Spotify Ltd - Spotify.) -- C:\Users\Theo le BG\AppData\Roaming\Spotify\Spotify.exe [7114352] [PID.1376] =>.Spotify AB®
[MD5.642D464F0EDE1B3C81BC20C3E3A3ECC6] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1116504] [PID.4996] =>.Google Inc®
[MD5.642D464F0EDE1B3C81BC20C3E3A3ECC6] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1116504] [PID.1812] =>.Google Inc®
[MD5.642D464F0EDE1B3C81BC20C3E3A3ECC6] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1116504] [PID.5676] =>.Google Inc®
[MD5.0EC2A8704E1A73B31F23CE91A910303B] - (.Spotify Ltd - Spotify.) -- C:\Users\Theo le BG\AppData\Roaming\Spotify\Spotify.exe [7114352] [PID.5200] =>.Spotify AB®
[MD5.0EC2A8704E1A73B31F23CE91A910303B] - (.Spotify Ltd - Spotify.) -- C:\Users\Theo le BG\AppData\Roaming\Spotify\Spotify.exe [7114352] [PID.4472] =>.Spotify AB®
[MD5.642D464F0EDE1B3C81BC20C3E3A3ECC6] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1116504] [PID.3888] =>.Google Inc®
[MD5.642D464F0EDE1B3C81BC20C3E3A3ECC6] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1116504] [PID.4232] =>.Google Inc®
[MD5.3B3774C868868257533EC7E715BB6D53] - (.Apple Inc. - MobileDeviceService.) -- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768] [PID.3512] =>.Apple Inc.®
[MD5.642D464F0EDE1B3C81BC20C3E3A3ECC6] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1116504] [PID.5052] =>.Google Inc®
[MD5.8E250FADD558485AF6AD0DC33F40C09D] - (.Nicolas Coolman - ZHPDiag.) -- C:\Users\Theo le BG\Downloads\ZHPDiag3.exe [2708480] [PID.2316] =>.Nicolas Coolman
[MD5.642D464F0EDE1B3C81BC20C3E3A3ECC6] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1116504] [PID.4084] =>.Google Inc®

---\\ Google Chrome, Démarrage,Recherche,Extensions (10) - 0s
G2 - GCE: Preference [User Data\Default] [aapocclcgogkmnckokdopfmhonfmgoek] Google Chrome manifest =>.Google Inc. =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [aohghmighlieiainnegkcijnfilokake] Google Chrome manifest =>.Google Inc. =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [apdfllckaahabafndbhieahigkjlhalf] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [blpcfgokakmgnkcojhhkbfbldkacnbeo] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [cfhdojbkjhnklbpkdaibdccddilifddb] __MSG_name__ =>.AdblocPlus Plugin
G2 - GCE: Preference [User Data\Default] [felcaaldnbdncclmgdcncolpebgiejap] Google Chrome manifest =>.Google Inc. =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [ghbmnnjooekpmoecnnnilnnbdlolhkhi] Google Chrome manifest =>.Google Inc. =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [pjkljhegncpnkpknbcohdijeoejaedia] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [pkedcjkdefgpdelpbcmbmeomcjbeemfm] Chrome Media Router =>.Google Inc.

---\\ Firefox, Plugins,Demarrage,Recherche,Extensions (6) - 0s
M0 - MFSP: prefs.js [Theo le BG - qneyki4p.default] http://www.trotux.com/ =>.Superfluous.Trotux
P2 - EXT: (.http://www.cacaoweb.org/ - cacaoweb.) -- C:\Users\Theo le BG\AppData\Roaming\Mozilla\Firefox\Profiles\qneyki4p.default\extensions\cacaoweb@cacaoweb.org =>.Superfluous.CacaoWeb
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_24_0_0_221.dll =>.Adobe Systems Incorporated
P2 - FPN: [HKLM] [@Apple.com/iTunes,version=1.0] - (.Apple Inc..) -- C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll =>.Apple Inc.
P2 - FPN: [HKLM] [@esn.me/esnsonar,version=0.70.4] - (.ESN Social Software AB.) -- C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll =>.ESN Social Software AB
P2 - FPN: [HKLM] [@esn/esnlaunch,version=2.3.0] - (.ESN Social Software AB.) -- C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll =>.ESN Social Software AB

---\\ Internet Explorer,Démarrage,Recherche,URLSearchHook (18) - 0s
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/ =>.Microsoft Corporation
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/ =>.Microsoft Corporation
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = www.google.com =>.Google Inc.
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = www.google.com =>.Google Inc.
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = www.google.com =>.Google Inc.
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk =>.Microsoft Corporation
R1 - HKEY_USERS\S-1-5-21-3776263589-1998821774-2548061867-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = www.google.com =>.Google Inc.
R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphan =>.Microsoft Internet Explorer

---\\ Internet Explorer,Proxy Management (5) - 0s
R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
R5 - HKLM\SYSTEM\CurrentControlSet\services\NlaSvc\Parameters\Internet\ManualProxies [] =>.Microsoft

---\\ Internet Explorer,IniFiles, Autoloading programs (3) - 0s
F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe (.Microsoft Corporation.) =>.Microsoft Corporation
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe (.Microsoft Corporation.) =>.Microsoft Corporation
F2 - REG:system.ini: VMApplet=C:\Windows\SysWOW64\SystemPropertiesPerformance.exe (.Microsoft Corporation.) =>.Microsoft Corporation

---\\ Etude du fichier hosts (1) - 0s
~ Le fichier hôte est sain (The hosts file is clean) (21)

---\\ Browser Helper Object de navigateur (BHO) (4) - 1s
O2 - BHO: ExplorerBHO Class [64Bits] - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} . (.IvoSoft - Adds classic Windows Explorer features.) -- C:\Program Files\Classic Shell\ClassicExplorer32.dll =>.IvoSoft
O2 - BHO: Java(tm) Plug-In SSV Helper [64Bits] - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files (x86)\Java\jre1.8.0_111\bin\ssv.dll =>.Oracle America, Inc.®
O2 - BHO: Windows Live ID Sign-in Helper [64Bits] - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corporation - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll =>.Microsoft Corporation®
O2 - BHO: Java(tm) Plug-In 2 SSV Helper [64Bits] - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files (x86)\Java\jre1.8.0_111\bin\jp2ssv.dll =>.Oracle America, Inc.®

---\\ Raccourcis Global Startup (88) - 2s
O4 - GS\Desktop [Administrateur]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\Theo le BG\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman
O4 - GS\Quicklaunch [Administrateur]: CodeBlocks.lnk . (...) C:\Program Files (x86)\CodeBlocks\codeblocks.exe
O4 - GS\Quicklaunch [Administrateur]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files (x86)\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O4 - GS\Quicklaunch [Administrateur]: Oracle VM VirtualBox.lnk . (.Oracle Corporation - .) C:\Program Files (x86)\Oracle\VirtualBox\VirtualBox.exe =>.Oracle Corporation
O4 - GS\Quicklaunch [Administrateur]: Tunngle.lnk . (...) C:\Program Files (x86)\Tunngle\Tunngle.exe
O4 - GS\sendTo [Administrateur]: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\Windows\system32\WFS.exe /SendTo =>.Microsoft Corporation
O4 - GS\sendTo [Administrateur]: Skype.lnk . (.Skype Technologies S.A. - Skype.) C:\Program Files (x86)\Skype\Phone\Skype.exe /sendto: =>.Skype Software Sarl®
O4 - GS\sendTo [Administrateur]: TeamViewer.lnk . (.TeamViewer GmbH - TeamViewer 12.) C:\Program Files (x86)\TeamViewer\TeamViewer.exe --sendto =>.TeamViewer GmbH®
O4 - GS\sendTo [Administrateur]: Transfert de fichiers Bluetooth.LNK . (.Microsoft Corporation - .) C:\Windows\System32\fsquirt.exe =>.Microsoft Corporation
O4 - GS\sendTo [Administrateur]: WinSCP (pour envoi).lnk . (.Martin Prikryl - WinSCP: SFTP, FTP and SCP client.) C:\Program Files (x86)\WinSCP\WinSCP.exe /upload =>.Martin Prikryl®
O4 - GS\TaskBar [Administrateur]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe --disable-quic =>.Google Inc®
O4 - GS\TaskBar [Administrateur]: iTunes.lnk . (.Apple Inc. - .) C:\Program Files (x86)\iTunes\iTunes.exe =>.Apple Inc.
O4 - GS\TaskBar [Administrateur]: Windows Explorer.lnk . (.Microsoft Corporation - Explorateur Windows.) C:\Windows\explorer.exe =>.Microsoft Corporation
O4 - GS\Startup [Administrateur]: MEGAsync.lnk . (.Mega Limited - MEGAsync.) C:\Users\Theo le BG\AppData\Local\MEGAsync\MEGAsync.exe =>.Mega Limited®
O4 - GS\Programs [Administrateur]: Internet Explorer (64-bit).lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files (x86)\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O4 - GS\Programs [Administrateur]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files (x86)\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O4 - GS\Programs [Administrateur]: Spotify.lnk . (.Spotify Ltd - Spotify.) C:\Users\Theo le BG\AppData\Roaming\Spotify\Spotify.exe =>.Spotify AB®
O4 - GS\Programs [Administrateur]: TeamSpeak 3 Client.lnk . (.TeamSpeak Systems GmbH - TeamSpeak 3 Client.) C:\Users\Theo le BG\AppData\Local\TeamSpeak 3 Client\ts3client_win64.exe =>.TeamSpeak Systems GmbH®
O4 - GS\Desktop [Theo le BG]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\Theo le BG\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman
O4 - GS\Quicklaunch [Theo le BG]: CodeBlocks.lnk . (...) C:\Program Files (x86)\CodeBlocks\codeblocks.exe
O4 - GS\Quicklaunch [Theo le BG]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files (x86)\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O4 - GS\Quicklaunch [Theo le BG]: Oracle VM VirtualBox.lnk . (.Oracle Corporation - .) C:\Program Files (x86)\Oracle\VirtualBox\VirtualBox.exe =>.Oracle Corporation
O4 - GS\Quicklaunch [Theo le BG]: Tunngle.lnk . (...) C:\Program Files (x86)\Tunngle\Tunngle.exe
O4 - GS\sendTo [Theo le BG]: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\Windows\system32\WFS.exe /SendTo =>.Microsoft Corporation
O4 - GS\sendTo [Theo le BG]: Skype.lnk . (.Skype Technologies S.A. - Skype.) C:\Program Files (x86)\Skype\Phone\Skype.exe /sendto: =>.Skype Software Sarl®
O4 - GS\sendTo [Theo le BG]: TeamViewer.lnk . (.TeamViewer GmbH - TeamViewer 12.) C:\Program Files (x86)\TeamViewer\TeamViewer.exe --sendto =>.TeamViewer GmbH®
O4 - GS\sendTo [Theo le BG]: Transfert de fichiers Bluetooth.LNK . (.Microsoft Corporation - .) C:\Windows\System32\fsquirt.exe =>.Microsoft Corporation
O4 - GS\sendTo [Theo le BG]: WinSCP (pour envoi).lnk . (.Martin Prikryl - WinSCP: SFTP, FTP and SCP client.) C:\Program Files (x86)\WinSCP\WinSCP.exe /upload =>.Martin Prikryl®
O4 - GS\TaskBar [Theo le BG]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe --disable-quic =>.Google Inc®
O4 - GS\TaskBar [Theo le BG]: iTunes.lnk . (.Apple Inc. - .) C:\Program Files (x86)\iTunes\iTunes.exe =>.Apple Inc.
O4 - GS\TaskBar [Theo le BG]: Windows Explorer.lnk . (.Microsoft Corporation - Explorateur Windows.) C:\Windows\explorer.exe =>.Microsoft Corporation
O4 - GS\Startup [Theo le BG]: MEGAsync.lnk . (.Mega Limited - MEGAsync.) C:\Users\Theo le BG\AppData\Local\MEGAsync\MEGAsync.exe =>.Mega Limited®
O4 - GS\Programs [Theo le BG]: Internet Explorer (64-bit).lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files (x86)\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O4 - GS\Programs [Theo le BG]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files (x86)\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O4 - GS\Programs [Theo le BG]: Spotify.lnk . (.Spotify Ltd - Spotify.) C:\Users\Theo le BG\AppData\Roaming\Spotify\Spotify.exe =>.Spotify AB®
O4 - GS\Programs [Theo le BG]: TeamSpeak 3 Client.lnk . (.TeamSpeak Systems GmbH - TeamSpeak 3 Client.) C:\Users\Theo le BG\AppData\Local\TeamSpeak 3 Client\ts3client_win64.exe =>.TeamSpeak Systems GmbH®
O4 - GS\Programs [Public]: Internet Explorer (64-bit).lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files (x86)\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O4 - GS\Programs [Public]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files (x86)\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O4 - GS\Programs [Public]: Spotify.lnk . (.Spotify Ltd - Spotify.) C:\Users\Theo le BG\AppData\Roaming\Spotify\Spotify.exe =>.Spotify AB®
O4 - GS\Programs [Public]: TeamSpeak 3 Client.lnk . (.TeamSpeak Systems GmbH - TeamSpeak 3 Client.) C:\Users\Theo le BG\AppData\Local\TeamSpeak 3 Client\ts3client_win64.exe =>.TeamSpeak Systems GmbH®
O4 - GS\Accessories [Public]: Command Prompt.lnk . (.Microsoft Corporation - Interpréteur de commandes Windows.) C:\Windows\system32\cmd.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Notepad.lnk . (.Microsoft Corporation - .) C:\Windows\system32\notepad.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Windows Explorer.lnk . (.Microsoft Corporation - Explorateur Windows.) C:\Windows\explorer.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files (x86)\Internet Explorer\iexplore.exe -extoff =>.Microsoft Corporation®
O4 - GS\SystemTools [Public]: Private Character Editor.lnk . (.Microsoft Corporation - Éditeur de caractères privés.) C:\Windows\system32\eudcedit.exe =>.Microsoft Corporation
O4 - GS\Startup [Public]: TP-LINK Wireless Configuration Utility.lnk . (...) C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe -nogui
O4 - GS\Accessories [Public]: Bluetooth File Transfer Wizard.lnk . (.Microsoft Corporation - .) C:\Windows\System32\fsquirt.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Calculator.lnk . (.Microsoft Corporation - Calculatrice de Windows.) C:\Windows\system32\calc.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: displayswitch.lnk . (.Microsoft Corporation - Afficher le commutateur.) C:\Windows\system32\displayswitch.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Mobility Center.lnk . (.Microsoft Corporation - Centre de mobilité Windows.) C:\Windows\system32\mblctr.exe /open =>.Microsoft Corporation
O4 - GS\Accessories [Public]: NetworkProjection.lnk . (.Microsoft Corporation - Connect to a Network Projector.) C:\Windows\system32\NetProj.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Paint.lnk . (.Microsoft Corporation - Paint.) C:\Windows\system32\mspaint.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Remote Desktop Connection.lnk . (.Microsoft Corporation - Connexion Bureau à distance.) C:\Windows\system32\mstsc.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Snipping Tool.lnk . (.Microsoft Corporation - Outil Capture.) C:\Windows\system32\SnippingTool.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Sound Recorder.lnk . (.Microsoft Corporation - Magnétophone Windows.) C:\Windows\system32\SoundRecorder.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Sticky Notes.lnk . (.Microsoft Corporation - Pense-bête.) C:\Windows\system32\StikyNot.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Sync Center.lnk . (.Microsoft Corporation - Microsoft Sync Center.) C:\Windows\System32\mobsync.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Welcome Center.lnk . (.Microsoft Corporation - Processus hôte Windows (Rundll32).) C:\Windows\system32\rundll32.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Wordpad.lnk . (.Microsoft Corporation - Application Windows Wordpad.) C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: Character Map.lnk . (.Microsoft Corporation - Table des caractères.) C:\Windows\system32\charmap.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: dfrgui.lnk . (.Microsoft Corporation - Défragmenteur de disque Microsoft®.) C:\Windows\system32\dfrgui.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: Disk Cleanup.lnk . (.Microsoft Corporation - Gestionnaire de nettoyage de disque pour Wi.) C:\Windows\system32\cleanmgr.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: Resource Monitor.lnk . (.Microsoft Corporation - Moniteur de ressources et de performances.) C:\Windows\system32\perfmon.exe /res =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: System Information.lnk . (.Microsoft Corporation - Informations système.) C:\Windows\system32\msinfo32.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: System Restore.lnk . (.Microsoft Corporation - Restauration du système de Microsoft® Windo.) C:\Windows\system32\rstrui.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: Task Scheduler.lnk . (...) C:\Windows\system32\taskschd.msc /s =>..Microsoft Corporation
O4 - GS\SystemTools [Public]: Windows Easy Transfer Reports.lnk . (.Microsoft Corporation - Application post-migration de transfert de.) C:\Windows\system32\migwiz\postmig.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: Windows Easy Transfer.lnk . (.Microsoft Corporation - Application Transfert de fichiers et paramè.) C:\Windows\system32\migwiz\migwiz.exe =>.Microsoft Corporation
O4 - GS\ProgramsCommon [Public]: Adobe Creative Cloud.lnk . (.Adobe Systems Incorporated - Adobe Creative Cloud.) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe =>.Adobe Systems Incorporated®
O4 - GS\ProgramsCommon [Public]: Adobe Photoshop CC 2015.5.lnk . (.Adobe Systems, Incorporated - .) C:\Program Files (x86)\Adobe\Adobe Photoshop CC 2015.5\Photoshop.exe =>.Adobe Systems, Incorporated
O4 - GS\ProgramsCommon [Public]: Apple Software Update.lnk . (...) C:\Windows\Installer\{56EC47AA-5813-4FF6-8E75-544026FBEA83}\AppleSoftwareUpdateIco.exe =>.Apple Inc.
O4 - GS\ProgramsCommon [Public]: Audacity.lnk . (.The Audacity Team - Audacity®, the Free, Cross-Platform Sound E.) C:\Program Files (x86)\Audacity\audacity.exe =>.The Audacity Team
O4 - GS\ProgramsCommon [Public]: Dying Light.lnk . (...) D:\Dying Light\DyingLightGame.exe
O4 - GS\ProgramsCommon [Public]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe --disable-quic =>.Google Inc®
O4 - GS\ProgramsCommon [Public]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files (x86)\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O4 - GS\ProgramsCommon [Public]: Sidebar.lnk . (.Microsoft Corporation - Gadgets du Bureau Windows.) C:\Program Files (x86)\Windows Sidebar\sidebar.exe /showgadgets =>.Microsoft Corporation
O4 - GS\ProgramsCommon [Public]: Sublime Text 3.lnk . (...) C:\Program Files (x86)\Sublime Text 3\sublime_text.exe
O4 - GS\ProgramsCommon [Public]: SumatraPDF.lnk . (.Krzysztof Kowalczyk - SumatraPDF.) C:\Program Files (x86)\SumatraPDF\SumatraPDF.exe =>.Krzysztof Kowalczyk®
O4 - GS\ProgramsCommon [Public]: TeamViewer 12.lnk . (.TeamViewer GmbH - TeamViewer 12.) C:\Program Files (x86)\TeamViewer\TeamViewer.exe =>.TeamViewer GmbH®
O4 - GS\ProgramsCommon [Public]: The Sims 4 City Living.lnk . (.Electronic Arts Inc. - The Sims™ 4.) D:\Program Files\The Sims 4 City Living\Game\Bin\TS4_x64.exe =>.Electronic Arts Inc.
O4 - GS\ProgramsCommon [Public]: Unibet.fr.lnk . (.Playtech - Playtech Client Engine Application.) C:\Program Files (x86)\Unibet.fr\casino.exe =>.Playtech Software Ltd.®
O4 - GS\ProgramsCommon [Public]: Windows Anytime Upgrade.lnk . (.Microsoft Corporation - Interface utilisateur de Mise à niveau expr.) C:\Windows\system32\WindowsAnytimeUpgradeUI.exe =>.Microsoft Corporation
O4 - GS\ProgramsCommon [Public]: Windows DVD Maker.lnk . (.Microsoft Corporation - .) C:\Program Files (x86)\DVD Maker\DVDMaker.exe =>.Microsoft Corporation
O4 - GS\ProgramsCommon [Public]: Windows Fax and Scan.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\Windows\system32\WFS.exe =>.Microsoft Corporation
O4 - GS\ProgramsCommon [Public]: Windows Live ID.lnk . (.Microsoft Corporation - .) C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\SIGNINOPTIONS.EXE =>.Microsoft Corporation
O4 - GS\ProgramsCommon [Public]: Windows Media Player.lnk . (.Microsoft Corporation - Lecteur Windows Media.) C:\Program Files (x86)\Windows Media Player\wmplayer.exe /prefetch:1 =>.Microsoft Corporation
O4 - GS\ProgramsCommon [Public]: WinSCP.lnk . (.Martin Prikryl - WinSCP: SFTP, FTP and SCP client.) C:\Program Files (x86)\WinSCP\WinSCP.exe =>.Martin Prikryl®
O4 - GS\ProgramsCommon [Public]: XPS Viewer.lnk . (.Microsoft Corporation - Visionneuse XPS.) C:\Windows\system32\xpsrchvw.exe =>.Microsoft Corporation

---\\ Modification Domaine/Adresses DNS (9) - 0s
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 8.8.8.8,8.8.8.4 =>.Google Inc
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.254 =>.Local IP Adress
O17 - HKLM\System\CCS\Services\Tcpip\..\{31FD065B-CA5A-49E8-9286-3C3732ADB741}: NameServer = 45.32.152.160,45.32.155.235
O17 - HKLM\System\CCS\Services\Tcpip\..\{546C2183-15E7-4088-9CCF-5F5A98FBAB39}: NameServer = 45.32.152.160
O17 - HKLM\System\CCS\Services\Tcpip\..\{6540E975-D356-462B-9A16-1BEDB76D9360}: NameServer = 45.32.152.160,45.32.155.235
O17 - HKLM\System\CCS\Services\Tcpip\..\{A5357712-62E3-4108-A096-EB40DB4CFFBF}: NameServer = 188.120.239.115,8.8.8.8 =>.Google Inc
O17 - HKLM\System\CCS\Services\Tcpip\..\{546C2183-15E7-4088-9CCF-5F5A98FBAB39}: DhcpNameServer = 7.254.254.254 =>.USA Columbus Dod Network Information Center"
O17 - HKLM\System\CCS\Services\Tcpip\..\{9FF91134-BD16-483B-B3E5-D0D585799C3D}: DhcpNameServer = 172.20.10.1 =>.Private IP
O17 - HKLM\System\CCS\Services\Tcpip\..\{A5357712-62E3-4108-A096-EB40DB4CFFBF}: DhcpNameServer = 192.168.0.254 =>.Local IP Adress

---\\ Protocole additionnel (20) - 0s
O18 - Handler: about [64Bits] - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation
O18 - Handler: cdl [64Bits] - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation
O18 - Handler: dvd [64Bits] - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\SysWOW64\MSVidCtl.dll =>.Microsoft Corporation
O18 - Handler: file [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation
O18 - Handler: ftp [64Bits] - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation
O18 - Handler: http [64Bits] - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation
O18 - Handler: https [64Bits] - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation
O18 - Handler: its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll =>.Microsoft Corporation
O18 - Handler: javascript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation
O18 - Handler: local [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation
O18 - Handler: mailto [64Bits] - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation
O18 - Handler: mhtml [64Bits] - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\System32\inetcomm.dll =>.Microsoft Corporation
O18 - Handler: mk [64Bits] - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation
O18 - Handler: ms-its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll =>.Microsoft Corporation
O18 - Handler: res [64Bits] - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation
O18 - Handler: tv [64Bits] - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\SysWOW64\MSVidCtl.dll =>.Microsoft Corporation
O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation
O18 - Filter: application/octet-stream [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation®
O18 - Filter: application/x-complus [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation®
O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation®

---\\ Logiciels installés (108) - 10s
O42 - Logiciel: µTorrent - (.BitTorrent Inc..) [HKCU][64Bits] -- uTorrent =>.BitTorrent Inc®
O42 - Logiciel: 7-Zip 16.02 (x64) - (.Igor Pavlov.) [HKLM][64Bits] -- 7-Zip =>.Igor Pavlov
O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {F2E04A40-3EA7-42F8-B7CC-B6E7A39DC150} =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe AIR =>.Adobe Systems Incorporated®
O42 - Logiciel: Adobe Creative Cloud - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Creative Cloud =>.Adobe Systems Incorporated®
O42 - Logiciel: Adobe Flash Player 24 NPAPI - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player NPAPI =>.Adobe Systems Incorporated®
O42 - Logiciel: Adobe Photoshop CC 2015.5 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- PHSP_17_0_1 =>.Adobe Systems Incorporated®
O42 - Logiciel: Adobe Shockwave Player 12.2 - (.Adobe Systems, Inc..) [HKLM][64Bits] -- Adobe Shockwave Player =>.Adobe Systems, Inc.
O42 - Logiciel: amuleC - (.amuleC.) [HKLM][64Bits] -- {B2EFFD4E-D098-4845-9D56-DE75BEB35913} =>Adware.aMULEcustom
O42 - Logiciel: Android Studio - (.Google Inc..) [HKLM][64Bits] -- Android Studio =>.Google Inc®
O42 - Logiciel: Apple Application Support (32 bits) - (.Apple Inc..) [HKLM][64Bits] -- {D4B07658-F443-4445-A261-E643996E139D} =>.Apple Inc.
O42 - Logiciel: Apple Application Support (64 bits) - (.Apple Inc..) [HKLM][64Bits] -- {A6B0442B-E159-444B-B49D-6B9AC531EAE3} =>.Apple Inc.
O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM][64Bits] -- {2E4AF2A6-50EA-4260-9BA4-5E582D11879A} =>.Apple Inc.
O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM][64Bits] -- {56EC47AA-5813-4FF6-8E75-544026FBEA83} =>.Apple Inc.
O42 - Logiciel: Audacity 2.1.0 - (.Audacity Team.) [HKLM][64Bits] -- Audacity_is1 =>.Audacity Team
O42 - Logiciel: Battlefield 4™ - (.Electronic Arts.) [HKLM][64Bits] -- {ABADE36E-EC37-413B-8179-B432AD3FACE7} =>.Electronic Arts, Inc.®
O42 - Logiciel: Battlelog Web Plugins - (.EA Digital Illusions CE AB.) [HKLM][64Bits] -- Battlelog Web Plugins =>.EA Digital Illusions CE AB
O42 - Logiciel: Black & White® 2 - (.Lionhead Studios.) [HKLM][64Bits] -- {D9E52CD1-9DF1-4A8A-9BDC-1E5E53982F2B} =>.Lionhead Studios
O42 - Logiciel: BlueStacks App Player - (.BlueStack Systems, Inc..) [HKLM][64Bits] -- BlueStacks =>.BlueStack Systems, Inc.®
O42 - Logiciel: Call of Duty: Black Ops - Multiplayer - (.Treyarch.) [HKLM][64Bits] -- Steam App 42710 =>.Valve®
O42 - Logiciel: CCleaner - (.Piriform.) [HKLM][64Bits] -- CCleaner =>.Piriform Ltd®
O42 - Logiciel: CodeBlocks - (.The Code::Blocks Team.) [HKCU][64Bits] -- CodeBlocks =>.The Code::Blocks Team
O42 - Logiciel: Dishonored - (..) [HKLM][64Bits] -- Dishonored_is1
O42 - Logiciel: Dying Light - Patch FR 1.00 - (.TraductionJeux.com.) [HKLM][64Bits] -- Dying Light - Patch FR 1.00 =>.TraductionJeux.com
O42 - Logiciel: Dying Light Update v1.5.1 - (..) [HKLM][64Bits] -- RHlpbmdMaWdodA==_is1
O42 - Logiciel: Dying Light version Dying Light - (..) [HKLM][64Bits] -- Dying Light_is1
O42 - Logiciel: EA SPORTS™ FIFA 15 - (.Electronic Arts.) [HKLM][64Bits] -- {3D4ADA2B-F028-4307-ADF4-6F9AA44725DA} =>.Electronic Arts®
O42 - Logiciel: ESN Sonar - (.ESN Social Software AB.) [HKLM][64Bits] -- ESN Sonar-0.70.4 =>.ESN Social Software AB
O42 - Logiciel: Garry's Mod - (.Facepunch Studios.) [HKLM][64Bits] -- Steam App 4000 =>.Valve®
O42 - Logiciel: Google Chrome - (.Google, Inc..) [HKLM][64Bits] -- {A58EE139-F99A-3991-B9D2-EBB6A6E2F9AE} =>.Google, Inc.
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {60EC980A-BDA2-4CB6-A427-B07A5498B4CA} =>.Google Inc.
O42 - Logiciel: Grand Theft Auto: Episodes from Liberty City - (.Rockstar Games Inc..) [HKLM][64Bits] -- {5454083B-1308-4485-BF17-111000038701} =>.Rockstar Games Inc.
O42 - Logiciel: Grand Theft Auto: Episodes from Liberty City - (.Rockstar North / Toronto.) [HKLM][64Bits] -- Steam App 12220 =>.Valve®
O42 - Logiciel: H1Z1: King of the Kill - (.Daybreak Game Company.) [HKLM][64Bits] -- Steam App 433850 =>.Valve®
O42 - Logiciel: HITMAN™ - (.Io-Interactive.) [HKLM][64Bits] -- Steam App 236870 =>.Valve®
O42 - Logiciel: Intel® Hardware Accelerated Execution Manager - (.Intel Corporation.) [HKLM][64Bits] -- {27276DC1-66AA-4B16-918D-5AB1EEDF09C6} =>.Intel Corporation
O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM][64Bits] -- {E109B4A3-9883-4E6E-9A19-4D7E1A88AFE8} =>.Apple Inc.
O42 - Logiciel: Java 8 Update 111 - (.Oracle Corporation.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F32180111F0} =>.Oracle Corporation
O42 - Logiciel: Java 8 Update 111 (64-bit) - (.Oracle Corporation.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F64180111F0} =>.Oracle Corporation
O42 - Logiciel: Java 8 Update 121 (64-bit) - (.Oracle Corporation.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F64180121F0} =>.Oracle Corporation
O42 - Logiciel: Java Auto Updater - (.Oracle Corporation.) [HKLM][64Bits] -- {4A03706F-666A-4037-7777-5F2748764D10} =>.Oracle Corporation
O42 - Logiciel: Java SE Development Kit 8 Update 121 (64-bit) - (.Oracle Corporation.) [HKLM][64Bits] -- {64A3A4F4-B792-11D6-A78A-00B0D0180121} =>.Oracle Corporation
O42 - Logiciel: Kerbal Space Program - (.GOG.com.) [HKLM][64Bits] -- 1429864849_is1 =>.GOG.com
O42 - Logiciel: KMSpico - (..) [HKLM][64Bits] -- {8B29D47F-92E2-4C20-9EE0-F710991F5D7C}_is1 =>HackTool.KMSpico
O42 - Logiciel: L.A. Noire - (.Rockstar Games.) [HKLM][64Bits] -- {915726DF-7891-444A-AA03-0DF1D64F561A} {695043D68F15550FD5DB370FA8817B04} =>.Rockstar Games
O42 - Logiciel: LAME v3.99.3 (for Windows) - (.Audacity.) [HKLM][64Bits] -- LAME_is1 =>.Audacity
O42 - Logiciel: Les Sims™ 4 - (.Electronic Arts Inc..) [HKLM][64Bits] -- {48EBEBBF-B9F8-4520-A3CF-89A730721917} =>.Electronic Arts, Inc.®
O42 - Logiciel: LibreOffice 5.1.4.2 - (.The Document Foundation.) [HKLM][64Bits] -- {3D0938AC-CEED-48CF-9649-D433CE8A4AF7} =>.The Document Foundation
O42 - Logiciel: LogMeIn Hamachi - (.LogMeIn, Inc..) [HKLM][64Bits] -- {89E5827E-EAE7-47F2-A57F-52D92C671983} =>.LogMeIn, Inc.
O42 - Logiciel: LogMeIn Hamachi - (.LogMeIn, Inc..) [HKLM][64Bits] -- LogMeIn Hamachi =>.LogMeIn, Inc.
O42 - Logiciel: Malwarebytes Anti-Malware version 2.2.1.1043 - (.Malwarebytes.) [HKLM][64Bits] -- Malwarebytes Anti-Malware_is1 =>.Malwarebytes
O42 - Logiciel: MEGAsync - (.Mega Limited.) [HKLM][64Bits] -- MEGAsync =>.Mega Limited®
O42 - Logiciel: Microsoft Games for Windows - LIVE - (.Microsoft Corporation.) [HKLM][64Bits] -- {2C9EE786-1DDB-4C98-8FA4-B1B9B5A66B77} =>.Microsoft Corporation
O42 - Logiciel: Microsoft Games for Windows - LIVE Redistributable - (.Microsoft Corporation.) [HKLM][64Bits] -- {42AA4CA8-DCD8-4308-BCAB-0B6D75856A9D} =>.Microsoft Corporation
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM][64Bits] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00} =>.Microsoft Corporation
O42 - Logiciel: Minecraft - (.Mojang.) [HKLM][64Bits] -- {1C16BCA3-EBC1-49F6-8623-8FBFB9CCC872} =>.Mojang
O42 - Logiciel: Mozilla Firefox 49.0.2 (x86 fr) - (.Mozilla.) [HKLM][64Bits] -- Mozilla Firefox 49.0.2 (x86 fr) =>.Mozilla Corporation®
O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM][64Bits] -- MozillaMaintenanceService =>.Mozilla
O42 - Logiciel: MSVCRT Redists - (.Sony Creative Software Inc..) [HKLM][64Bits] -- {D10D0851-CCC6-11E3-9ED2-F04DA23A5C58} =>.Sony Creative Software Inc.
O42 - Logiciel: NVIDIA PhysX - (.NVIDIA Corporation.) [HKLM][64Bits] -- {8B922CF8-8A6C-41CE-A858-F1755D7F5D29} =>.NVIDIA Corporation
O42 - Logiciel: OpenOffice 4.1.2 - (.Apache Software Foundation.) [HKLM][64Bits] -- {DCB1B348-C94E-4D6D-8CE0-7D9DA5CF663E} =>.Apache Software Foundation
O42 - Logiciel: Oracle VM VirtualBox 5.1.14 - (.Oracle Corporation.) [HKLM][64Bits] -- {6AE61854-0F78-49E3-ABCC-586FB43CE709} =>.Oracle Corporation
O42 - Logiciel: Origin - (.Electronic Arts, Inc..) [HKLM][64Bits] -- Origin =>.Electronic Arts, Inc.®
O42 - Logiciel: PunkBuster Services - (.Even Balance, Inc..) [HKLM][64Bits] -- PunkBusterSvc =>.Even Balance, Inc.®
O42 - Logiciel: Python 3.5.2 (32-bit) - (.Python Software Foundation.) [HKCU][64Bits] -- {cf72a2ab-2f1d-49fd-a0d7-1065e6357e1e} =>.Python Software Foundation®
O42 - Logiciel: Python 3.5.2 Core Interpreter (32-bit) - (.Python Software Foundation.) [HKLM][64Bits] -- {EB0611B2-7F10-4D97-BCF2-DCAAB1199498} =>.Python Software Foundation
O42 - Logiciel: Python 3.5.2 Development Libraries (32-bit) - (.Python Software Foundation.) [HKLM][64Bits] -- {5DB2183B-62D3-407F-BBC1-EAD2F36283FA} =>.Python Software Foundation
O42 - Logiciel: Python 3.5.2 Documentation (32-bit) - (.Python Software Foundation.) [HKLM][64Bits] -- {1FBA5182-78DD-4940-9F06-96E5042B7061} =>.Python Software Foundation
O42 - Logiciel: Python 3.5.2 Executables (32-bit) - (.Python Software Foundation.) [HKLM][64Bits] -- {33B10015-A9B1-4210-B50A-26C6443979B0} =>.Python Software Foundation
O42 - Logiciel: Python 3.5.2 pip Bootstrap (32-bit) - (.Python Software Foundation.) [HKLM][64Bits] -- {9ADF9987-3327-48C6-91B3-B10900366491} =>.Python Software Foundation
O42 - Logiciel: Python 3.5.2 Standard Library (32-bit) - (.Python Software Foundation.) [HKLM][64Bits] -- {FCBB04F4-D2CF-4F55-BE92-B3898696B318} =>.Python Software Foundation
O42 - Logiciel: Python 3.5.2 Tcl/Tk Support (32-bit) - (.Python Software Foundation.) [HKLM][64Bits] -- {C1153533-FDC4-4922-892D-B71810F69566} =>.Python Software Foundation
O42 - Logiciel: Python 3.5.2 Test Suite (32-bit) - (.Python Software Foundation.) [HKLM][64Bits] -- {9D50A6D7-410A-4469-87B7-35FA84CBD479} =>.Python Software Foundation
O42 - Logiciel: Python 3.5.2 Utility Scripts (32-bit) - (.Python Software Foundation.) [HKLM][64Bits] -- {E6DEBF43-7ACF-4E88-9BBF-9B5945683281} =>.Python Software Foundation
O42 - Logiciel: Python Launcher - (.Python Software Foundation.) [HKLM][64Bits] -- {963ECCDD-F09F-4C24-9367-8B5D748AA7C8} =>.Python Software Foundation
O42 - Logiciel: Rockstar Games Social Club - (.Rockstar Games.) [HKLM][64Bits] -- Rockstar Games Social Club =>.Rockstar Games
O42 - Logiciel: Skype™ 7.27 - (.Skype Technologies S.A..) [HKLM][64Bits] -- {FC965A47-4839-40CA-B618-18F486F042C6} =>.Skype Technologies S.A.
O42 - Logiciel: Skyrim Creation Kit - (.bgs.bethsoft.com.) [HKLM][64Bits] -- Steam App 202480 =>.Valve®
O42 - Logiciel: Splinter Cell: Blacklist - (.Black Beard.) [HKLM][64Bits] -- Splinter Cell: Blacklist_is1
O42 - Logiciel: Spotify - (.Spotify AB.) [HKCU][64Bits] -- Spotify =>.Spotify AB®
O42 - Logiciel: Steam - (.Valve Corporation.) [HKLM][64Bits] -- Steam =>.Valve®
O42 - Logiciel: Stronghold 2 Deluxe - (.Firefly Studios.) [HKLM][64Bits] -- {16D2C649-CBA8-44EE-B730-12584667D487} =>.Firefly Studios
O42 - Logiciel: Sublime Text Build 3126 - (.Sublime HQ Pty Ltd.) [HKLM][64Bits] -- Sublime Text 3_is1 =>.Sublime HQ Pty Ltd®
O42 - Logiciel: SumatraPDF - (.Krzysztof Kowalczyk.) [HKLM][64Bits] -- SumatraPDF =>.Krzysztof Kowalczyk®
O42 - Logiciel: swMSM - (.Adobe Systems, Inc.) [HKLM][64Bits] -- {612C34C7-5E90-47D8-9B5C-0F717DD82726} =>.Adobe Systems, Inc
O42 - Logiciel: TDM-GCC - (.TDM.) [HKLM][64Bits] -- TDM-GCC
O42 - Logiciel: TeamSpeak 3 Client - (.TeamSpeak Systems GmbH.) [HKCU][64Bits] -- TeamSpeak 3 Client =>.TeamSpeak Systems GmbH
O42 - Logiciel: TeamViewer 12 - (.TeamViewer.) [HKLM][64Bits] -- TeamViewer =>.TeamViewer GmbH®
O42 - Logiciel: The Sims 4: City Living - (..) [HKLM][64Bits] -- dGhlc2ltczRjaXR5bGl2aW5n_is1
O42 - Logiciel: theHunter Call of the Wild - (..) [HKLM][64Bits] -- theHunter Call of the Wild_is1
O42 - Logiciel: Tom Clancy's Ghost Recon Phantoms - EU - (.Ubisoft Singapore.) [HKLM][64Bits] -- Steam App 272350 =>.Valve®
O42 - Logiciel: Tom Clancy's Rainbow Six Siege - (.Ubisoft Montreal.) [HKLM][64Bits] -- Uplay Install 635 =>.Ubisoft Entertainment Sweden AB®
O42 - Logiciel: Tom Clancy's Splinter Cell® Blacklist™ - (.Ubisoft.) [HKLM][64Bits] -- {A6356F2F-D3E1-4D83-9AA2-72871DD0C298} =>.Ubisoft
O42 - Logiciel: TP-LINK Wireless Configuration Utility - (.TP-LINK.) [HKLM][64Bits] -- {319D91C6-3D44-436C-9F79-36C0D22372DC} =>.TP-LINK
O42 - Logiciel: Tunngle - (.Tunngle.net GmbH.) [HKLM][64Bits] -- Tunngle_is1 =>.Tunngle.net GmbH
O42 - Logiciel: Unibet.fr - (.Unibet.) [HKLM][64Bits] -- Unibet.fr
O42 - Logiciel: Uplay - (.Ubisoft.) [HKLM][64Bits] -- Uplay =>.Ubisoft Entertainment Sweden AB®
O42 - Logiciel: Vegas Pro 13.0 (64-bit) - (.Sony.) [HKLM][64Bits] -- {D0360940-CCC6-11E3-B9C6-F04DA23A5C58} =>.Sony
O42 - Logiciel: VLC media player - (.VideoLAN.) [HKLM][64Bits] -- VLC media player =>.VideoLAN
O42 - Logiciel: Vulkan Run Time Libraries 1.0.17.0 - (.LunarG, Inc..) [HKLM][64Bits] -- VulkanRT1.0.17.0 =>.LunarG, Inc.
O42 - Logiciel: Vulkan Run Time Libraries 1.0.17.0 - (.LunarG, Inc..) [HKLM][64Bits] -- VulkanRT1.0.17.0-2 =>.LunarG, Inc.
O42 - Logiciel: Vulkan Run Time Libraries 1.0.17.0 - (.LunarG, Inc..) [HKLM][64Bits] -- VulkanRT1.0.17.0-3 =>.LunarG, Inc.
O42 - Logiciel: Vulkan Run Time Libraries 1.0.26.0 - (.LunarG, Inc..) [HKLM][64Bits] -- VulkanRT1.0.26.0 =>.LunarG, Inc.
O42 - Logiciel: Vulkan Run Time Libraries 1.0.26.0 - (.LunarG, Inc..) [HKLM][64Bits] -- VulkanRT1.0.26.0-2 =>.LunarG, Inc.
O42 - Logiciel: WinCDEmu - (.Bazis.) [HKLM][64Bits] -- WinCDEmu =>.Bazis
O42 - Logiciel: WinRAR 5.31 (64-bit) - (.win.rar GmbH.) [HKLM][64Bits] -- WinRAR archiver =>.win.rar GmbH®
O42 - Logiciel: WinSCP 5.7.4 - (.Martin Prikryl.) [HKLM][64Bits] -- winscp3_is1 =>.Martin Prikryl®
O42 - Logiciel: WinSnare - (.WinSnare.) [HKLM][64Bits] -- {C881D603-277F-4056-918D-654844EF2B37} =>.Superfluous.WinSnare

---\\ HKCU & HKLM Software Keys (158) - 10s
HKLM\SOFTWARE\Wow6432Node\6E52196E8CC33753EFFF03A7BEACB469 =>PUP.Optional.CrossRider
HKLM\SOFTWARE\Wow6432Node\activision =>.Activision
HKLM\SOFTWARE\Wow6432Node\Adobe =>.Adobe
HKLM\SOFTWARE\Wow6432Node\AGEIA Technologies =>.AGEIA Technologies
HKLM\SOFTWARE\Wow6432Node\AMD =>.AMD
HKLM\SOFTWARE\Wow6432Node\amule-custom =>Adware.aMULEcustom
HKLM\SOFTWARE\Wow6432Node\AppDataLow =>.Microsoft Corporation
HKLM\SOFTWARE\Wow6432Node\Apple Inc. =>.Apple Inc.
HKLM\SOFTWARE\Wow6432Node\ATI =>.ATI
HKLM\SOFTWARE\Wow6432Node\ATI Technologies =>.ATI Technologies
HKLM\SOFTWARE\Wow6432Node\atuhesy.exe
HKLM\SOFTWARE\Wow6432Node\Auslogics =>.Auslogics
HKLM\SOFTWARE\Wow6432Node\bethesda softworks =>.Bethesda Softworks
HKLM\SOFTWARE\Wow6432Node\BlueStacks =>.BlueStack Systems, Inc.
HKLM\SOFTWARE\Wow6432Node\CDDB =>.Cddb Software
HKLM\SOFTWARE\Wow6432Node\Clestlehacult
HKLM\SOFTWARE\Wow6432Node\co.ao.aio
HKLM\SOFTWARE\Wow6432Node\codemasters =>.Codemasters
HKLM\SOFTWARE\Wow6432Node\como
HKLM\SOFTWARE\Wow6432Node\Duwugh
HKLM\SOFTWARE\Wow6432Node\EA Games =>.EA Games
HKLM\SOFTWARE\Wow6432Node\EA Sports =>.Electronic Arts, Inc.
HKLM\SOFTWARE\Wow6432Node\Electronic Arts =>.Electronic Arts
HKLM\SOFTWARE\Wow6432Node\ESN Launcher =>.Electronic Arts, Inc.
HKLM\SOFTWARE\Wow6432Node\ESN Sonar-0.70.4 =>.Electronic Arts, Inc.
HKLM\SOFTWARE\Wow6432Node\Firefly Studios =>.Firefly Studios
HKLM\SOFTWARE\Wow6432Node\getrtr
HKLM\SOFTWARE\Wow6432Node\GN2
HKLM\SOFTWARE\Wow6432Node\GOG.com =>.GOG.com
HKLM\SOFTWARE\Wow6432Node\Google =>.Google
HKLM\SOFTWARE\Wow6432Node\IM Providers =>.IM Providers
HKLM\SOFTWARE\Wow6432Node\Intel =>.Intel
HKLM\SOFTWARE\Wow6432Node\JavaSoft =>.JavaSoft
HKLM\SOFTWARE\Wow6432Node\JreMetrics =>.JreMetrics
HKLM\SOFTWARE\Wow6432Node\Khronos =>.Khronos
HKLM\SOFTWARE\Wow6432Node\Lame For Audacity =>.Audacity
HKLM\SOFTWARE\Wow6432Node\LastPass =>.LastPass
HKLM\SOFTWARE\Wow6432Node\Lejespriha
HKLM\SOFTWARE\Wow6432Node\Lionhead Studios =>.Lionhead Studios
HKLM\SOFTWARE\Wow6432Node\LogMeIn Hamachi =>.LogMeIn Entreprise
HKLM\SOFTWARE\Wow6432Node\Macromedia =>.Macromedia
HKLM\SOFTWARE\Wow6432Node\Malwarebytes' Anti-Malware =>.Malwarebytes' Anti-Malware
HKLM\SOFTWARE\Wow6432Node\Martin Prikryl =>.Martin Prikryl
HKLM\SOFTWARE\Wow6432Node\Maxis =>.Maxis
HKLM\SOFTWARE\Wow6432Node\MicroRay
HKLM\SOFTWARE\Wow6432Node\Mojang =>.Mojang
HKLM\SOFTWARE\Wow6432Node\Mozilla =>.Mozilla
HKLM\SOFTWARE\Wow6432Node\mozilla.org =>.mozilla.org
HKLM\SOFTWARE\Wow6432Node\MozillaPlugin =>.MozillaPlugin
HKLM\SOFTWARE\Wow6432Node\MozillaPlugins =>.MozillaPlugins
HKLM\SOFTWARE\Wow6432Node\Mphphabution
HKLM\SOFTWARE\Wow6432Node\msitask
HKLM\SOFTWARE\Wow6432Node\NVIDIA Corporation =>.nVidia Corporation
HKLM\SOFTWARE\Wow6432Node\ODBC =>.DB Connectivity Solutions
HKLM\SOFTWARE\Wow6432Node\OpenOffice =>.SourceForge
HKLM\SOFTWARE\Wow6432Node\Origin =>.Electronic Arts, Inc.
HKLM\SOFTWARE\Wow6432Node\Origin Games =>.Electronic Arts, Inc.
HKLM\SOFTWARE\Wow6432Node\Overwolf =>.Overwolf
HKLM\SOFTWARE\Wow6432Node\Piriform =>.Piriform
HKLM\SOFTWARE\Wow6432Node\pnqous
HKLM\SOFTWARE\Wow6432Node\PTECH =>.Ptech
HKLM\SOFTWARE\Wow6432Node\Python =>.Python
HKLM\SOFTWARE\Wow6432Node\Reoutyckerkertion
HKLM\SOFTWARE\Wow6432Node\rockstar games =>.Rockstar Games
HKLM\SOFTWARE\Wow6432Node\Rtoryhovagh
HKLM\SOFTWARE\Wow6432Node\RtWlan =>.Realtek Semiconductor Corp.
HKLM\SOFTWARE\Wow6432Node\ScreenShot
HKLM\SOFTWARE\Wow6432Node\Skype =>.Skype
HKLM\SOFTWARE\Wow6432Node\Sony Creative Software =>.Sony Creative Software
HKLM\SOFTWARE\Wow6432Node\TeamViewer =>.TeamViewer
HKLM\SOFTWARE\Wow6432Node\Thijogh
HKLM\SOFTWARE\Wow6432Node\TP-LINK =>.TP-LINK
HKLM\SOFTWARE\Wow6432Node\Tunngle.net =>.Tunngle.net
HKLM\SOFTWARE\Wow6432Node\Ubisoft =>.Ubisoft
HKLM\SOFTWARE\Wow6432Node\Unibet.fr =>.Unibet
HKLM\SOFTWARE\Wow6432Node\Valve =>.Valve
HKLM\SOFTWARE\Wow6432Node\WebcamMax =>.WebcamMax
HKLM\SOFTWARE\Wow6432Node\WIN =>.Unknow
HKLM\SOFTWARE\Wow6432Node\Even Balance =>.Even Balance Inc
HKLM\SOFTWARE\Wow6432Node\RegisteredApplications =>.Microsoft Corporation
HKCU\SOFTWARE\6E52196E8CC33753EFFF03A7BEACB469 =>PUP.Optional.CrossRider
HKCU\SOFTWARE\7-Zip =>.Igor Pavlov
HKCU\SOFTWARE\7room
HKCU\SOFTWARE\Activision =>.Activision
HKCU\SOFTWARE\Adobe =>.Adobe
HKCU\SOFTWARE\AMD =>.AMD
HKCU\SOFTWARE\AppDataLow =>.Microsoft Corporation
HKCU\SOFTWARE\Apple Computer, Inc. =>.Apple Computer, Inc.
HKCU\SOFTWARE\Apple Inc. =>.Apple Inc.
HKCU\SOFTWARE\Arkane
HKCU\SOFTWARE\ATI =>.ATI
HKCU\SOFTWARE\Beam Team Games
HKCU\SOFTWARE\BitTorrent
HKCU\SOFTWARE\cacaoweb =>.Superfluous.CacaoWeb
HKCU\SOFTWARE\Cheat Engine =>.Dark Byte
HKCU\SOFTWARE\Chromium =>.Chromium
HKCU\SOFTWARE\CodeBlocks =>.CodeBlocks Team
HKCU\SOFTWARE\DarkSeas
HKCU\SOFTWARE\DirectShow =>.Microsoft Corporation
HKCU\SOFTWARE\dlr
HKCU\SOFTWARE\Electronic Arts =>.Electronic Arts
HKCU\SOFTWARE\Gaijin =>.Gaijin Entertainment
HKCU\SOFTWARE\GameSpy =>.GameSpy
HKCU\SOFTWARE\GN2
HKCU\SOFTWARE\GOG.com =>.GOG.com
HKCU\SOFTWARE\Google =>.Google
HKCU\SOFTWARE\GRE
HKCU\SOFTWARE\Haemimont Games =>.Haemimont Games
HKCU\SOFTWARE\IM Providers =>.IM Providers
HKCU\SOFTWARE\InstallPath =>.Legitimate
HKCU\SOFTWARE\Intel Corporation =>.Intel Corporation
HKCU\SOFTWARE\IO Interactive =>.IO Interactive
HKCU\SOFTWARE\IvoSoft =>.IvoSoft
HKCU\SOFTWARE\JavaSoft =>.JavaSoft
HKCU\SOFTWARE\Landfall Games
HKCU\SOFTWARE\Local AppWizard-Generated Applications =>.ZWCAD
HKCU\SOFTWARE\Macromedia =>.Macromedia
HKCU\SOFTWARE\Martin Prikryl =>.Martin Prikryl
HKCU\SOFTWARE\Mojang =>.Mojang
HKCU\SOFTWARE\MozillaPlugins =>.MozillaPlugins
HKCU\SOFTWARE\OpenAutomate =>.nVidia Corporation
HKCU\SOFTWARE\OpenOffice =>.SourceForge
HKCU\SOFTWARE\Oracle =>.Oracle
HKCU\SOFTWARE\Piriform =>.Piriform
HKCU\SOFTWARE\Python =>.Python
HKCU\SOFTWARE\QtProject =>.QtProject
HKCU\SOFTWARE\Raft
HKCU\SOFTWARE\Raptr =>.Raptr
HKCU\SOFTWARE\Rockstar Games =>.Rockstar Games
HKCU\SOFTWARE\Rtp =>.RTP Software
HKCU\SOFTWARE\SaurikIT =>.SaurikIT, LLC
HKCU\SOFTWARE\SecuROM =>.SecuROM
HKCU\SOFTWARE\Shining Rock Software LLC =>.Shining Rock Software LLC
HKCU\SOFTWARE\SKS =>.SKS Software
HKCU\SOFTWARE\Skype =>.Skype
HKCU\SOFTWARE\Sony Creative Software =>.Sony Creative Software
HKCU\SOFTWARE\Spotify =>.Spotify
HKCU\SOFTWARE\SysProgs =>.SysProgs
HKCU\SOFTWARE\TeamSpeak 3 Client =>.TeamSpeak
HKCU\SOFTWARE\TeamViewer =>.TeamViewer
HKCU\SOFTWARE\The Document Foundation =>.The Document Foundation
HKCU\SOFTWARE\Trolltech =>.Trolltech
HKCU\SOFTWARE\Tunngle.net =>.Tunngle.net
HKCU\SOFTWARE\Ubisoft =>.Ubisoft
HKCU\SOFTWARE\Unibet.fr =>.Unibet
HKCU\SOFTWARE\Unity =>.Unity
HKCU\SOFTWARE\Valve =>.Valve
HKCU\SOFTWARE\WinRAR =>.WinRAR
HKCU\SOFTWARE\WinRAR SFX =>.RarLab
HKCU\SOFTWARE\WinSnare =>.Superfluous.WinSnare
HKCU\SOFTWARE\Wintertree =>.Wintertree Software
HKCU\SOFTWARE\Wow6432Node =>.Microsoft Corporation
HKCU\SOFTWARE\ZHP =>.Nicolas Coolman
HKCU\SOFTWARE\AppDataLow\Software =>.Microsoft Corporation
HKCU\SOFTWARE\AppDataLow\Software\Adobe =>.Adobe
HKCU\SOFTWARE\AppDataLow\Software\Squad =>.Games Software
HKCU\SOFTWARE\AppDataLow\Software\SteelRaven7
HKCU\SOFTWARE\AppDataLow\Software\Unity =>.Unity

---\\ Contenu des dossiers Programmes (341) - 7s
O43 - CFD: 22/07/2016 - [] D -- C:\Program Files\7-Zip =>.Igor Pavlov
O43 - CFD: 22/08/2016 - [] D -- C:\Program Files\Adobe =>.Adobe Systems Incorporated®
O43 - CFD: 17/12/2016 - [] D -- C:\Program Files\AMD =>.AMD
O43 - CFD: 24/02/2017 - [] D -- C:\Program Files\Android =>.Android
O43 - CFD: 05/10/2016 - [] D -- C:\Program Files\CCleaner =>.Piriform Ltd
O43 - CFD: 28/05/2012 - [] D -- C:\Program Files\Classic Shell =>.Ivo Beltchev
O43 - CFD: 22/08/2016 - [] D -- C:\Program Files\Common Files =>.Microsoft Corporation
O43 - CFD: 21/11/2010 - [] D -- C:\Program Files\DVD Maker =>.Aone Software
O43 - CFD: 11/07/2012 - [0] SHD -- C:\Program Files\Fichiers communs =>.Microsoft Corporation
O43 - CFD: 24/02/2017 - [] D -- C:\Program Files\Intel =>.Intel Corporation
O43 - CFD: 11/07/2012 - [] D -- C:\Program Files\Internet Explorer =>.Microsoft Corporation
O43 - CFD: 22/07/2016 - [] D -- C:\Program Files\iPod =>.Apple Inc.®
O43 - CFD: 22/07/2016 - [] D -- C:\Program Files\iTunes =>.Apple Inc.
O43 - CFD: 19/01/2017 - [] D -- C:\Program Files\Java =>.Oracle
O43 - CFD: 17/12/2016 - [] D -- C:\Program Files\KMSpico =>HackTool.KMSpico
O43 - CFD: 22/07/2016 - [] D -- C:\Program Files\LibreOffice 5 =>.LibreOffice
O43 - CFD: 22/07/2016 - [] D -- C:\Program Files\Microsoft Silverlight =>.Microsoft Corporation
O43 - CFD: 14/07/2009 - [] D -- C:\Program Files\MSBuild =>.Microsoft Corporation
O43 - CFD: 18/02/2017 - [] D -- C:\Program Files\Oracle =>.Oracle
O43 - CFD: 14/07/2009 - [] D -- C:\Program Files\Reference Assemblies =>.Microsoft Corporation
O43 - CFD: 22/12/2016 - [] D -- C:\Program Files\Sony =>.Sony
O43 - CFD: 08/03/2017 - [] D -- C:\Program Files\Sublime Text 3 =>.Sublime HQ Pty Ltd®
O43 - CFD: 14/07/2009 - [0] HD -- C:\Program Files\Uninstall Information =>.Microsoft Corporation
O43 - CFD: 22/07/2016 - [] D -- C:\Program Files\VideoLAN =>.VideoLan Team
O43 - CFD: 21/11/2010 - [] D -- C:\Program Files\Windows Defender =>.Microsoft Corporation
O43 - CFD: 21/11/2010 - [] D -- C:\Program Files\Windows Mail =>.Microsoft Corporation
O43 - CFD: 21/11/2010 - [] D -- C:\Program Files\Windows Media Player =>.Microsoft Corporation
O43 - CFD: 11/07/2012 - [] D -- C:\Program Files\Windows NT =>.Microsoft Corporation
O43 - CFD: 21/11/2010 - [] D -- C:\Program Files\Windows Photo Viewer =>.Microsoft Corporation
O43 - CFD: 21/11/2010 - [] D -- C:\Program Files\Windows Portable Devices =>.Microsoft Corporation
O43 - CFD: 21/11/2010 - [] D -- C:\Program Files\Windows Sidebar =>.Microsoft Corporation
O43 - CFD: 22/07/2016 - [] D -- C:\Program Files\WinRAR =>.win.rar GmbH®
O43 - CFD: 14/12/2016 - [] D -- C:\Program Files (x86)\Adobe =>.Adobe Systems Incorporated®
O43 - CFD: 14/12/2016 - [0] D -- C:\Program Files (x86)\AGEIA Technologies =>.AGEIA Technologies
O43 - CFD: 14/12/2016 - [] D -- C:\Program Files (x86)\AMD =>.Advanced Micro Devices, Inc.®
O43 - CFD: 14/12/2016 - [] D -- C:\Program Files (x86)\Apple Software Update =>.Apple Inc.
O43 - CFD: 14/12/2016 - [] D -- C:\Program Files (x86)\Audacity =>.Audacity
O43 - CFD: 24/02/2017 - [] AD -- C:\Program Files (x86)\BlueStacks =>.BlueStack Systems, Inc.
O43 - CFD: 14/12/2016 - [] D -- C:\Program Files (x86)\CodeBlocks =>.CodeBlocks Team
O43 - CFD: 19/01/2017 - [] D -- C:\Program Files (x86)\Common Files =>.Microsoft Corporation
O43 - CFD: 14/12/2016 - [] D -- C:\Program Files (x86)\Google =>.Google Inc®
O43 - CFD: 14/12/2016 - [] HD -- C:\Program Files (x86)\InstallShield Installation Information =>.InstallShield Software
O43 - CFD: 14/12/2016 - [] D -- C:\Program Files (x86)\Internet Explorer =>.Microsoft Corporation
O43 - CFD: 14/12/2016 - [] D -- C:\Program Files (x86)\iTunes =>.Apple Inc.
O43 - CFD: 14/12/2016 - [] D -- C:\Program Files (x86)\Java =>.Oracle
O43 - CFD: 09/03/2017 - [] D -- C:\Program Files (x86)\LogMeIn Hamachi =>.LogMeIn Entreprise
O43 - CFD: 14/12/2016 - [] D -- C:\Program Files (x86)\Malwarebytes Anti-Malware =>.Malwarebytes
O43 - CFD: 14/12/2016 - [] D -- C:\Program Files (x86)\Microsoft Games for Windows - LIVE =>.Microsoft Corporation
O43 - CFD: 14/12/2016 - [] D -- C:\Program Files (x86)\Microsoft Silverlight =>.Microsoft Corporation
O43 - CFD: 14/12/2016 - [] D -- C:\Program Files (x86)\Microsoft.NET =>.Microsoft Corporation
O43 - CFD: 25/01/2017 - [] D -- C:\Program Files (x86)\Minecraft =>.Microsoft Corporation
O43 - CFD: 14/12/2016 - [] D -- C:\Program Files (x86)\Mozilla Firefox =>.Mozilla
O43 - CFD: 25/01/2017 - [] D -- C:\Program Files (x86)\Mozilla Maintenance Service =>.Mozilla
O43 - CFD: 14/12/2016 - [] D -- C:\Program Files (x86)\MSBuild =>.Microsoft Corporation
O43 - CFD: 14/12/2016 - [] D -- C:\Program Files (x86)\Notepad++ =>.Don Ho
O43 - CFD: 25/01/2017 - [] D -- C:\Program Files (x86)\NVIDIA Corporation =>.nVidia Corporation
O43 - CFD: 14/12/2016 - [] D -- C:\Program Files (x86)\OpenOffice 4 =>.OpenOffice.org
O43 - CFD: 25/01/2017 - [] D -- C:\Program Files (x86)\Origin =>.Electronic Arts, Inc.
O43 - CFD: 14/12/2016 - [0] D -- C:\Program Files (x86)\Origin Games =>.Electronic Arts, Inc.
O43 - CFD: 14/12/2016 - [] D -- C:\Program Files (x86)\Reference Assemblies =>.Microsoft Corporation
O43 - CFD: 14/12/2016 - [] RD -- C:\Program Files (x86)\Skype =>.Skype
O43 - CFD: 22/12/2016 - [] D -- C:\Program Files (x86)\Sony =>.Sony
O43 - CFD: 09/03/2017 - [] D -- C:\Program Files (x86)\Steam =>.Steam Games
O43 - CFD: 14/12/2016 - [] D -- C:\Program Files (x86)\SumatraPDF =>.Krzysztof Kowalczyk
O43 - CFD: 17/02/2017 - [] D -- C:\Program Files (x86)\TeamViewer =>.TeamViewer GmbH®
O43 - CFD: 14/12/2016 - [] D -- C:\Program Files (x86)\TP-LINK =>.TP-LINK
O43 - CFD: 23/02/2017 - [] D -- C:\Program Files (x86)\Unibet.fr =>.Unibet
O43 - CFD: 14/12/2016 - [0] HD -- C:\Program Files (x86)\Uninstall Information =>.Microsoft Corporation
O43 - CFD: 14/12/2016 - [] D -- C:\Program Files (x86)\WinCDEmu
O43 - CFD: 14/12/2016 - [] D -- C:\Program Files (x86)\Windows Defender =>.Microsoft Corporation
O43 - CFD: 14/12/2016 - [] D -- C:\Program Files (x86)\Windows Mail =>.Microsoft Corporation
O43 - CFD: 14/12/2016 - [] D -- C:\Program Files (x86)\Windows Media Player =>.Microsoft Corporation
O43 - CFD: 14/12/2016 - [] D -- C:\Program Files (x86)\Windows NT =>.Microsoft Corporation
O43 - CFD: 14/12/2016 - [] D -- C:\Program Files (x86)\Windows Photo Viewer =>.Microsoft Corporation
O43 - CFD: 14/12/2016 - [] D -- C:\Program Files (x86)\Windows Portable Devices =>.Microsoft Corporation
O43 - CFD: 14/12/2016 - [] D -- C:\Program Files (x86)\Windows Sidebar =>.Microsoft Corporation
O43 - CFD: 22/02/2017 - [] D -- C:\Program Files (x86)\WinSCP =>.Martin Prikryl®
O43 - CFD: 14/12/2016 - [] D -- C:\Program Files (x86)\XnView =>.Pierre-Emmanuel Gougelet
O43 - CFD: 22/07/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip =>.Igor Pavlov
O43 - CFD: 22/07/2016 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories =>.Microsoft Corporation
O43 - CFD: 11/07/2012 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools =>.Administrative Tools
O43 - CFD: 17/12/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Settings =>.Advanced Micro Devices Inc
O43 - CFD: 24/02/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Android Studio =>.Google Inc.
O43 - CFD: 08/12/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battlefield 4 =>.Electronic Arts, Inc.
O43 - CFD: 17/12/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bethesda Softworks =>.Bethesda Softworks
O43 - CFD: 08/09/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Black & White 2
O43 - CFD: 05/10/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner =>.Piriform Ltd
O43 - CFD: 17/11/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CodeBlocks =>.CodeBlocks Team
O43 - CFD: 16/12/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dying Light
O43 - CFD: 23/01/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FIFA 15 =>.Electronic Arts, Inc.
O43 - CFD: 21/09/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefly Studios =>.Firefly Studios
O43 - CFD: 06/02/2017 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games =>.Microsoft Corporation
O43 - CFD: 01/02/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com =>.GOG.com
O43 - CFD: 22/09/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes =>.Apple Inc.
O43 - CFD: 19/01/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java =>.Oracle
O43 - CFD: 19/01/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java Development Kit =>.Oracle
O43 - CFD: 17/12/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KMSpico =>HackTool.KMSpico
O43 - CFD: 22/07/2016 - [] SD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LibreOffice 5.1 =>.LibreOffice
O43 - CFD: 09/03/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi =>.LogMeIn Entreprise
O43 - CFD: 14/07/2009 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance =>.Microsoft Corporation
O43 - CFD: 22/07/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware =>.Malwarebytes
O43 - CFD: 18/08/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Games for Windows - LIVE =>.Microsoft Corporation
O43 - CFD: 22/07/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight =>.Microsoft Corporation
O43 - CFD: 23/10/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Minecraft =>.Microsoft Corporation
O43 - CFD: 22/07/2016 - [] SD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.2 =>.SourceForge
O43 - CFD: 18/02/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Oracle VM VirtualBox =>.Oracle
O43 - CFD: 22/09/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin =>.Electronic Arts, Inc.
O43 - CFD: 29/09/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rockstar Games =>.Rockstar Games
O43 - CFD: 22/07/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype =>.Skype
O43 - CFD: 08/05/2012 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Softs'Ium
O43 - CFD: 22/12/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony =>.Sony
O43 - CFD: 22/07/2016 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup =>.Microsoft Corporation
O43 - CFD: 22/07/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam =>.Steam Games
O43 - CFD: 17/11/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TDM-GCC-64
O43 - CFD: 23/02/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\theHunter Call of the Wild =>.Expansive Worlds
O43 - CFD: 01/08/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tom Clancy's Splinter Cell Blacklist
O43 - CFD: 22/07/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TP-LINK =>.TP-LINK
O43 - CFD: 19/08/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tunngle =>.Tunngle.net
O43 - CFD: 22/07/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN =>.VideoLan Team
O43 - CFD: 22/07/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Vulkan 1.0.3.1 =>.Kronos Group
O43 - CFD: 10/11/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WebcamMax =>.CoolwareMax
O43 - CFD: 22/07/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR =>.WinRAR
O43 - CFD: 22/08/2016 - [] D -- C:\ProgramData\Adobe =>.Adobe
O43 - CFD: 22/07/2016 - [] D -- C:\ProgramData\Apple =>.Apple Inc.
O43 - CFD: 22/07/2016 - [] D -- C:\ProgramData\Apple Computer =>.Apple Inc.
O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Application Data =>.Microsoft Corporation
O43 - CFD: 22/07/2016 - [] D -- C:\ProgramData\ATI =>.ATI
O43 - CFD: 21/09/2016 - [] D -- C:\ProgramData\AVAST Software =>.AVAST Software
O43 - CFD: 21/09/2016 - [] D -- C:\ProgramData\Avg =>.AVG Software
O43 - CFD: 14/12/2016 - [] D -- C:\ProgramData\Avira =>.Avira Software
O43 - CFD: 21/02/2017 - [] AD -- C:\ProgramData\BlueStacks =>.BlueStack Systems, Inc.
O43 - CFD: 25/01/2017 - [] D -- C:\ProgramData\boost_interprocess =>.boost.org
O43 - CFD: 11/07/2012 - [0] SHD -- C:\ProgramData\Bureau =>.Microsoft Corporation
O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Desktop =>.Microsoft Corporation
O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Documents =>.Microsoft Corporation
O43 - CFD: 11/07/2012 - [0] SHD -- C:\ProgramData\Favoris =>.Microsoft Corporation
O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Favorites =>.Microsoft Corporation
O43 - CFD: 21/12/2016 - [] D -- C:\ProgramData\LogMeIn =>.LogMeIn
O43 - CFD: 22/07/2016 - [] D -- C:\ProgramData\Malwarebytes =>.Malwarebytes
O43 - CFD: 11/07/2012 - [0] SHD -- C:\ProgramData\Menu Démarrer =>.Microsoft Corporation
O43 - CFD: 09/11/2016 - [] D -- C:\ProgramData\Microsoft =>.Microsoft Corporation
O43 - CFD: 11/07/2012 - [0] SHD -- C:\ProgramData\Modèles =>.Microsoft Corporation
O43 - CFD: 08/03/2017 - [] D -- C:\ProgramData\Oracle =>.Oracle
O43 - CFD: 08/03/2017 - [] D -- C:\ProgramData\Origin =>.Electronic Arts, Inc.
O43 - CFD: 01/03/2017 - [] D -- C:\ProgramData\Package Cache =>.Microsoft Corporation
O43 - CFD: 22/08/2016 - [] D -- C:\ProgramData\regid.1986-12.com.adobe =>.Adobe Inc.
O43 - CFD: 07/09/2016 - [] D -- C:\ProgramData\Skype =>.Skype
O43 - CFD: 22/12/2016 - [] D -- C:\ProgramData\Sony =>.Sony
O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Start Menu =>.Microsoft Corporation
O43 - CFD: 15/09/2016 - [] D -- C:\ProgramData\Steam =>.Steam Games
O43 - CFD: 17/11/2016 - [] D -- C:\ProgramData\TDM-GCC
O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Templates =>.Microsoft Corporation
O43 - CFD: 22/07/2016 - [] D -- C:\ProgramData\TP-LINK =>.TP-LINK
O43 - CFD: 21/12/2016 - [] D -- C:\ProgramData\Tunngle =>.Tunngle.net
O43 - CFD: 03/11/2016 - [] D -- C:\Program Files (x86)\Common Files\Adobe =>.Adobe
O43 - CFD: 22/07/2016 - [] D -- C:\Program Files (x86)\Common Files\Adobe AIR =>.Adobe Inc.
O43 - CFD: 22/07/2016 - [] D -- C:\Program Files (x86)\Common Files\Apple =>.Apple Inc.
O43 - CFD: 22/07/2016 - [] D -- C:\Program Files (x86)\Common Files\ATI Technologies =>.ATI Technologies
O43 - CFD: 22/07/2016 - [] D -- C:\Program Files (x86)\Common Files\AV =>.Avast
O43 - CFD: 11/03/2017 - [] D -- C:\Program Files (x86)\Common Files\BattlEye =>.BattlEye
O43 - CFD: 06/02/2017 - [] HD -- C:\Program Files (x86)\Common Files\EAInstaller =>.Electronic Arts, Inc.
O43 - CFD: 08/09/2016 - [] D -- C:\Program Files (x86)\Common Files\InstallShield =>.InstallShield
O43 - CFD: 19/01/2017 - [] D -- C:\Program Files (x86)\Common Files\Java =>.Oracle
O43 - CFD: 18/08/2016 - [] D -- C:\Program Files (x86)\Common Files\microsoft shared =>.Microsoft Corporation
O43 - CFD: 14/07/2009 - [] D -- C:\Program Files (x86)\Common Files\Services =>.Microsoft Corporation
O43 - CFD: 22/07/2016 - [] D -- C:\Program Files (x86)\Common Files\Skype =>.Skype
O43 - CFD: 14/07/2009 - [] D -- C:\Program Files (x86)\Common Files\SpeechEngines =>.Microsoft Corporation
O43 - CFD: 23/09/2016 - [] D -- C:\Program Files (x86)\Common Files\Steam =>.Steam Games
O43 - CFD: 11/07/2012 - [] D -- C:\Program Files (x86)\Common Files\System =>.Microsoft Corporation
O43 - CFD: 20/11/2016 - [] D -- C:\Users\Theo le BG\AppData\Roaming\.minecraft =>.Microsoft Corporation
O43 - CFD: 22/08/2016 - [] D -- C:\Users\Theo le BG\AppData\Roaming\Adobe =>.Adobe
O43 - CFD: 24/02/2017 - [] D -- C:\Users\Theo le BG\AppData\Roaming\aMule =>Adware.aMULEcustom
O43 - CFD: 23/08/2016 - [] D -- C:\Users\Theo le BG\AppData\Roaming\Apple Computer =>.Apple Inc.
O43 - CFD: 22/07/2016 - [] D -- C:\Users\Theo le BG\AppData\Roaming\ATI =>.ATI
O43 - CFD: 18/12/2016 - [] D -- C:\Users\Theo le BG\AppData\Roaming\Audacity =>.Audacity
O43 - CFD: 11/03/2017 - [] D -- C:\Users\Theo le BG\AppData\Roaming\cacaoweb =>.Superfluous.CacaoWeb
O43 - CFD: 11/01/2017 - [] D -- C:\Users\Theo le BG\AppData\Roaming\CodeBlocks =>.CodeBlocks Team
O43 - CFD: 16/12/2016 - [] D -- C:\Users\Theo le BG\AppData\Roaming\Frontier Developments =>.Frontier Developments
O43 - CFD: 22/07/2016 - [] D -- C:\Users\Theo le BG\AppData\Roaming\Identities =>.Microsoft Corporation
O43 - CFD: 02/01/2017 - [] D -- C:\Users\Theo le BG\AppData\Roaming\Io Interactive =>.IO Interactive
O43 - CFD: 23/10/2016 - [] D -- C:\Users\Theo le BG\AppData\Roaming\java =>.Oracle
O43 - CFD: 24/02/2017 - [] D -- C:\Users\Theo le BG\AppData\Roaming\JetBrains =>.JetBrains Inc
O43 - CFD: 22/07/2016 - [] D -- C:\Users\Theo le BG\AppData\Roaming\library_dir =>.library_dir
O43 - CFD: 21/08/2016 - [] D -- C:\Users\Theo le BG\AppData\Roaming\LibreOffice =>.LibreOffice
O43 - CFD: 22/07/2016 - [] D -- C:\Users\Theo le BG\AppData\Roaming\Macromedia =>.Macromedia
O43 - CFD: 22/02/2017 - [] SD -- C:\Users\Theo le BG\AppData\Roaming\Microsoft =>.Microsoft Corporation
O43 - CFD: 10/11/2016 - [] D -- C:\Users\Theo le BG\AppData\Roaming\Mozilla =>.Mozilla Corporation
O43 - CFD: 08/07/2012 - [] D -- C:\Users\Theo le BG\AppData\Roaming\Notepad++ =>.Don Ho
O43 - CFD: 22/07/2016 - [] D -- C:\Users\Theo le BG\AppData\Roaming\OBS =>.OBS
O43 - CFD: 21/08/2016 - [] D -- C:\Users\Theo le BG\AppData\Roaming\OpenOffice =>.SourceForge
O43 - CFD: 08/03/2017 - [] D -- C:\Users\Theo le BG\AppData\Roaming\Origin =>.Electronic Arts, Inc.
O43 - CFD: 25/01/2017 - [] D -- C:\Users\Theo le BG\AppData\Roaming\Profiles =>.Microsoft Corporation
O43 - CFD: 22/12/2016 - [0] D -- C:\Users\Theo le BG\AppData\Roaming\Publish Providers =>.Unknow
O43 - CFD: 21/09/2016 - [] D -- C:\Users\Theo le BG\AppData\Roaming\Raptr =>.Raptr
O43 - CFD: 18/08/2016 - [] RHD -- C:\Users\Theo le BG\AppData\Roaming\SecuROM =>.SecuROM
O43 - CFD: 25/01/2017 - [] D -- C:\Users\Theo le BG\AppData\Roaming\Skype =>.Skype
O43 - CFD: 14/12/2016 - [] D -- C:\Users\Theo le BG\AppData\Roaming\SmartSteamEmu =>.SmartSteam
O43 - CFD: 22/12/2016 - [] D -- C:\Users\Theo le BG\AppData\Roaming\Sony =>.Sony
O43 - CFD: 11/03/2017 - [] D -- C:\Users\Theo le BG\AppData\Roaming\Spotify =>.Spotify
O43 - CFD: 07/12/2016 - [] D -- C:\Users\Theo le BG\AppData\Roaming\Sublime Text 3
O43 - CFD: 30/07/2016 - [] D -- C:\Users\Theo le BG\AppData\Roaming\SumatraPDF =>.Krzysztof Kowalczyk
O43 - CFD: 22/07/2016 - [] D -- C:\Users\Theo le BG\AppData\Roaming\Sun =>.Oracle
O43 - CFD: 22/02/2017 - [0] D -- C:\Users\Theo le BG\AppData\Roaming\TaiG =>.TaiG JailbreakTeam
O43 - CFD: 17/02/2017 - [] D -- C:\Users\Theo le BG\AppData\Roaming\TeamViewer =>.TeamViewer
O43 - CFD: 22/07/2016 - [] D -- C:\Users\Theo le BG\AppData\Roaming\TP-LINK =>.TP-LINK
O43 - CFD: 14/12/2016 - [] D -- C:\Users\Theo le BG\AppData\Roaming\TS3Client =>.TeamSpeak
O43 - CFD: 21/12/2016 - [] D -- C:\Users\Theo le BG\AppData\Roaming\Tunngle =>.Tunngle.net
O43 - CFD: 11/03/2017 - [] D -- C:\Users\Theo le BG\AppData\Roaming\uTorrent
O43 - CFD: 07/09/2016 - [] D -- C:\Users\Theo le BG\AppData\Roaming\WebcamMax =>.CoolwareMax
O43 - CFD: 22/07/2016 - [] D -- C:\Users\Theo le BG\AppData\Roaming\WinRAR =>.WinRAR
O43 - CFD: 22/09/2016 - [0] D -- C:\Users\Theo le BG\AppData\Roaming\XnView =>.Pierre-Emmanuel Gougelet
O43 - CFD: 11/03/2017 - [] D -- C:\Users\Theo le BG\AppData\Roaming\ZHP =>.Nicolas Coolman
O43 - CFD: 12/01/2017 - [] D -- C:\Users\Theo le BG\AppData\Local\Activision =>.Activision
O43 - CFD: 11/03/2017 - [] D -- C:\Users\Theo le BG\AppData\Local\Adobe =>.Adobe
O43 - CFD: 17/12/2016 - [] D -- C:\Users\Theo le BG\AppData\Local\AMD =>.AMD
O43 - CFD: 24/02/2017 - [] D -- C:\Users\Theo le BG\AppData\Local\Android =>.Android
O43 - CFD: 22/07/2016 - [] D -- C:\Users\Theo le BG\AppData\Local\Apple =>.Apple Inc.
O43 - CFD: 22/07/2016 - [] D -- C:\Users\Theo le BG\AppData\Local\Apple Computer =>.Apple Inc.
O43 - CFD: 22/07/2016 - [0] SHD -- C:\Users\Theo le BG\AppData\Local\Application Data =>.Microsoft Corporation
O43 - CFD: 07/09/2016 - [] D -- C:\Users\Theo le BG\AppData\Local\Apps =>.Microsoft Corporation
O43 - CFD: 22/07/2016 - [] D -- C:\Users\Theo le BG\AppData\Local\ATI =>.ATI
O43 - CFD: 17/12/2016 - [] D -- C:\Users\Theo le BG\AppData\Local\Bilago
O43 - CFD: 24/02/2017 - [] D -- C:\Users\Theo le BG\AppData\Local\Bluestacks =>.BlueStack Systems, Inc.
O43 - CFD: 22/07/2016 - [] D -- C:\Users\Theo le BG\AppData\Local\CEF =>.CEF
O43 - CFD: 29/09/2016 - [] D -- C:\Users\Theo le BG\AppData\Local\Chromium =>.Chromium
O43 - CFD: 23/02/2017 - [] D -- C:\Users\Theo le BG\AppData\Local\CrashRpt =>.Superfluous.CrashReports
O43 - CFD: 01/03/2017 - [] D -- C:\Users\Theo le BG\AppData\Local\Daybreak Game Company =>.Daybreak Game Company
O43 - CFD: 29/07/2016 - [] D -- C:\Users\Theo le BG\AppData\Local\DeSmuME =>.DeSmuME Team
O43 - CFD: 24/02/2017 - [] D -- C:\Users\Theo le BG\AppData\Local\Eclipse =>.Eclipse
O43 - CFD: 01/09/2016 - [0] D -- C:\Users\Theo le BG\AppData\Local\ElevatedDiagnostics =>.Microsoft Corporation
O43 - CFD: 16/11/2016 - [0] D -- C:\Users\Theo le BG\AppData\Local\Fallout4 =>.Black Isle Studios
O43 - CFD: 16/12/2016 - [] D -- C:\Users\Theo le BG\AppData\Local\Frontier Developments =>.Frontier Developments
O43 - CFD: 09/11/2016 - [] D -- C:\Users\Theo le BG\AppData\Local\Google =>.Google
O43 - CFD: 22/07/2016 - [0] SHD -- C:\Users\Theo le BG\AppData\Local\Historique =>.Microsoft Corporation
O43 - CFD: 21/12/2016 - [] D -- C:\Users\Theo le BG\AppData\Local\LogMeIn =>.LogMeIn
O43 - CFD: 11/03/2017 - [] D -- C:\Users\Theo le BG\AppData\Local\LogMeIn Hamachi =>.LogMeIn Entreprise
O43 - CFD: 23/11/2016 - [] D -- C:\Users\Theo le BG\AppData\Local\Macromedia =>.Macromedia
O43 - CFD: 29/07/2016 - [] D -- C:\Users\Theo le BG\AppData\Local\Mega Limited =>.MEGA Limited
O43 - CFD: 17/11/2016 - [] D -- C:\Users\Theo le BG\AppData\Local\MEGAsync =>.MegaSystems
O43 - CFD: 25/01/2017 - [] D -- C:\Users\Theo le BG\AppData\Local\Microsoft =>.Microsoft Corporation
O43 - CFD: 10/11/2016 - [] D -- C:\Users\Theo le BG\AppData\Local\Mozilla =>.Mozilla Corporation
O43 - CFD: 22/09/2016 - [] D -- C:\Users\Theo le BG\AppData\Local\Origin =>.Electronic Arts, Inc.
O43 - CFD: 30/07/2016 - [] D -- C:\Users\Theo le BG\AppData\Local\Package Cache =>.Microsoft Corporation
O43 - CFD: 04/03/2017 - [] D -- C:\Users\Theo le BG\AppData\Local\PokerClient
O43 - CFD: 30/07/2016 - [] D -- C:\Users\Theo le BG\AppData\Local\Programs =>.Microsoft Corporation
O43 - CFD: 08/12/2016 - [] D -- C:\Users\Theo le BG\AppData\Local\PunkBuster =>.PunkBuster Games
O43 - CFD: 18/08/2016 - [] D -- C:\Users\Theo le BG\AppData\Local\Rockstar Games =>.Rockstar Games
O43 - CFD: 01/03/2017 - [] D -- C:\Users\Theo le BG\AppData\Local\SCE =>.SCE
O43 - CFD: 08/03/2017 - [] D -- C:\Users\Theo le BG\AppData\Local\SKIDROW =>.SKIDROW
O43 - CFD: 02/11/2016 - [] D -- C:\Users\Theo le BG\AppData\Local\Skyrim =>.Skyrim Games
O43 - CFD: 22/12/2016 - [] D -- C:\Users\Theo le BG\AppData\Local\Sony =>.Sony
O43 - CFD: 29/07/2016 - [] D -- C:\Users\Theo le BG\AppData\Local\Sports Interactive =>.Sports Interactive
O43 - CFD: 11/03/2017 - [] D -- C:\Users\Theo le BG\AppData\Local\Spotify =>.Spotify
O43 - CFD: 01/01/2017 - [] D -- C:\Users\Theo le BG\AppData\Local\Steam =>.Steam Games
O43 - CFD: 07/12/2016 - [] D -- C:\Users\Theo le BG\AppData\Local\Sublime Text 3
O43 - CFD: 09/11/2016 - [] D -- C:\Users\Theo le BG\AppData\Local\TeamSpeak 3 Client =>.TeamSpeak
O43 - CFD: 11/03/2017 - [] D -- C:\Users\Theo le BG\AppData\Local\Temp =>.Microsoft Corporation
O43 - CFD: 22/07/2016 - [0] SHD -- C:\Users\Theo le BG\AppData\Local\Temporary Internet Files =>.Microsoft Corporation
O43 - CFD: 07/09/2016 - [0] D -- C:\Users\Theo le BG\AppData\Local\Tempzxpsign0075d7b14b01b76c =>.Superfluous.Temporary
O43 - CFD: 13/10/2016 - [0] D -- C:\Users\Theo le BG\AppData\Local\Tempzxpsign04d9026ccf97c5df =>.Superfluous.Temporary
O43 - CFD: 24/11/2016 - [0] D -- C:\Users\Theo le BG\AppData\Local\Tempzxpsign0a16371b5d9fdfe2 =>.Superfluous.Temporary
O43 - CFD: 08/09/2016 - [0] D -- C:\Users\Theo le BG\AppData\Local\Tempzxpsign0d3d854c4b3c0715 =>.Superfluous.Temporary
O43 - CFD: 09/11/2016 - [0] D -- C:\Users\Theo le BG\AppData\Local\Tempzxpsign105bdb04587aa2bc =>.Superfluous.Temporary
O43 - CFD: 13/10/2016 - [0] D -- C:\Users\Theo le BG\AppData\Local\Tempzxpsign12dfe58a22c36560 =>.Superfluous.Temporary
O43 - CFD: 22/08/2016 - [0] D -- C:\Users\Theo le BG\AppData\Local\Tempzxpsign177b13450119937d =>.Superfluous.Temporary
O43 - CFD: 13/10/2016 - [0] D -- C:\Users\Theo le BG\AppData\Local\Tempzxpsign2179da4a6b5b0b2d =>.Superfluous.Temporary
O43 - CFD: 24/11/2016 - [0] D -- C:\Users\Theo le BG\AppData\Local\Tempzxpsign247ed33ee66be6ff =>.Superfluous.Temporary
O43 - CFD: 15/09/2016 - [0] D -- C:\Users\Theo le BG\AppData\Local\Tempzxpsign2b089cf7fa7c16a6 =>.Superfluous.Temporary
O43 - CFD: 08/09/2016 - [0] D -- C:\Users\Theo le BG\AppData\Local\Tempzxpsign3c07467ca3c5a177 =>.Superfluous.Temporary
O43 - CFD: 22/08/2016 - [0] D -- C:\Users\Theo le BG\AppData\Local\Tempzxpsign42ee2edd80395b55 =>.Superfluous.Temporary
O43 - CFD: 22/08/2016 - [0] D -- C:\Users\Theo le BG\AppData\Local\Tempzxpsign495509f0e0e9318b =>.Superfluous.Temporary
O43 - CFD: 10/11/2016 - [0] D -- C:\Users\Theo le BG\AppData\Local\Tempzxpsign4df90fc97e462f03 =>.Superfluous.Temporary
O43 - CFD: 14/09/2016 - [0] D -- C:\Users\Theo le BG\AppData\Local\Tempzxpsign608c0c1c1d314794 =>.Superfluous.Temporary
O43 - CFD: 07/09/2016 - [0] D -- C:\Users\Theo le BG\AppData\Local\Tempzxpsign64d88d777c724148 =>.Superfluous.Temporary
O43 - CFD: 22/09/2016 - [0] D -- C:\Users\Theo le BG\AppData\Local\Tempzxpsign6c0f9cb983ee02ad =>.Superfluous.Temporary
O43 - CFD: 15/02/2017 - [0] D -- C:\Users\Theo le BG\AppData\Local\Tempzxpsign728b8b301654f227 =>.Superfluous.Temporary
O43 - CFD: 22/09/2016 - [0] D -- C:\Users\Theo le BG\AppData\Local\Tempzxpsign7c93d5ee6465f446 =>.Superfluous.Temporary
O43 - CFD: 13/10/2016 - [0] D -- C:\Users\Theo le BG\AppData\Local\Tempzxpsign80cc753a1217e12a =>.Superfluous.Temporary
O43 - CFD: 22/08/2016 - [0] D -- C:\Users\Theo le BG\AppData\Local\Tempzxpsign8955ead93342573a =>.Superfluous.Temporary
O43 - CFD: 19/11/2016 - [0] D -- C:\Users\Theo le BG\AppData\Local\Tempzxpsign8a7de159791b87d8 =>.Superfluous.Temporary
O43 - CFD: 15/09/2016 - [0] D -- C:\Users\Theo le BG\AppData\Local\Tempzxpsign8b33a75aee7f1ef2 =>.Superfluous.Temporary
O43 - CFD: 13/10/2016 - [0] D -- C:\Users\Theo le BG\AppData\Local\Tempzxpsign8c8b512cbf76a278 =>.Superfluous.Temporary
O43 - CFD: 13/10/2016 - [0] D -- C:\Users\Theo le BG\AppData\Local\Tempzxpsign8dd4aa810cad2e0f =>.Superfluous.Temporary
O43 - CFD: 22/08/2016 - [0] D -- C:\Users\Theo le BG\AppData\Local\Tempzxpsign9115fa9a22381dc8 =>.Superfluous.Temporary
O43 - CFD: 22/08/2016 - [0] D -- C:\Users\Theo le BG\AppData\Local\Tempzxpsign92fc99c48618d43b =>.Superfluous.Temporary
O43 - CFD: 07/09/2016 - [0] D -- C:\Users\Theo le BG\AppData\Local\Tempzxpsign9c01459a0a3476bc =>.Superfluous.Temporary
O43 - CFD: 09/11/2016 - [0] D -- C:\Users\Theo le BG\AppData\Local\Tempzxpsign9e356f6bb0494544 =>.Superfluous.Temporary
O43 - CFD: 15/09/2016 - [0] D -- C:\Users\Theo le BG\AppData\Local\Tempzxpsign9ef227dc1c7e7c6c =>.Superfluous.Temporary
O43 - CFD: 11/01/2017 - [0] D -- C:\Users\Theo le BG\AppData\Local\Tempzxpsigna2759bad706330b7 =>.Superfluous.Temporary
O43 - CFD: 15/02/2017 - [0] D -- C:\Users\Theo le BG\AppData\Local\Tempzxpsigna8400df3d2e8931b =>.Superfluous.Temporary
O43 - CFD: 31/08/2016 - [0] D -- C:\Users\Theo le BG\AppData\Local\Tempzxpsigna9c1c954d6d7302e =>.Superfluous.Temporary
O43 - CFD: 22/09/2016 - [0] D -- C:\Users\Theo le BG\AppData\Local\Tempzxpsignad33d314aacb9002 =>.Superfluous.Temporary
O43 - CFD: 07/09/2016 - [0] D -- C:\Users\Theo le BG\AppData\Local\Tempzxpsignb84ac49c9445010c =>.Superfluous.Temporary
O43 - CFD: 31/08/2016 - [0] D -- C:\Users\Theo le BG\AppData\Local\Tempzxpsignba8640fcbf1fb026 =>.Superfluous.Temporary
O43 - CFD: 22/08/2016 - [0] D -- C:\Users\Theo le BG\AppData\Local\Tempzxpsignbfca164bea7b8f72 =>.Superfluous.Temporary
O43 - CFD: 13/10/2016 - [0] D -- C:\Users\Theo le BG\AppData\Local\Tempzxpsignc0d6c9d85524c44a =>.Superfluous.Temporary
O43 - CFD: 19/11/2016 - [0] D -- C:\Users\Theo le BG\AppData\Local\Tempzxpsignc8b5d94d0a190776 =>.Superfluous.Temporary
O43 - CFD: 07/09/2016 - [0] D -- C:\Users\Theo le BG\AppData\Local\Tempzxpsigncf77bd4ce073be58 =>.Superfluous.Temporary
O43 - CFD: 15/09/2016 - [0] D -- C:\Users\Theo le BG\AppData\Local\Tempzxpsignd4d6d6ecd0c0122f =>.Superfluous.Temporary
O43 - CFD: 07/09/2016 - [0] D -- C:\Users\Theo le BG\AppData\Local\Tempzxpsignd75ce8ccdbe77ab7 =>.Superfluous.Temporary
O43 - CFD: 11/01/2017 - [0] D -- C:\Users\Theo le BG\AppData\Local\Tempzxpsignd7d395f3b422e6c5 =>.Superfluous.Temporary
O43 - CFD: 22/08/2016 - [0] D -- C:\Users\Theo le BG\AppData\Local\Tempzxpsignebd007a612ac8033 =>.Superfluous.Temporary
O43 - CFD: 14/09/2016 - [0] D -- C:\Users\Theo le BG\AppData\Local\Tempzxpsignf492479b0baaf485 =>.Superfluous.Temporary
O43 - CFD: 13/10/2016 - [0] D -- C:\Users\Theo le BG\AppData\Local\Tempzxpsignfa4fc65677e5f3a0 =>.Superfluous.Temporary
O43 - CFD: 10/11/2016 - [0] D -- C:\Users\Theo le BG\AppData\Local\Tempzxpsignfba4d1b9b8dd647d =>.Superfluous.Temporary
O43 - CFD: 21/08/2016 - [] D -- C:\Users\Theo le BG\AppData\Local\Ubisoft =>.Ubisoft
O43 - CFD: 11/03/2017 - [] D -- C:\Users\Theo le BG\AppData\Local\Ubisoft Game Launcher =>.Ubisoft
O43 - CFD: 22/07/2016 - [0] D -- C:\Users\Theo le BG\AppData\Local\Programs\Common =>.Microsoft Corporation
O43 - CFD: 30/07/2016 - [] D -- C:\Users\Theo le BG\AppData\Local\Programs\Python =>.Python
O43 - CFD: 14/07/2009 - [] RD -- C:\Users\Theo le BG\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories =>.Microsoft Corporation
O43 - CFD: 22/07/2016 - [] RD -- C:\Users\Theo le BG\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools =>.Administrative Tools
O43 - CFD: 24/02/2017 - [] D -- C:\Users\Theo le BG\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\amuleC =>Adware.aMULEcustom
O43 - CFD: 07/12/2016 - [] D -- C:\Users\Theo le BG\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CodeBlocks =>.CodeBlocks Team
O43 - CFD: 17/11/2016 - [] D -- C:\Users\Theo le BG\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Eclipse =>.Eclipse
O43 - CFD: 22/09/2016 - [] D -- C:\Users\Theo le BG\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games =>.Microsoft Corporation
O43 - CFD: 14/07/2009 - [] RD -- C:\Users\Theo le BG\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance =>.Microsoft Corporation
O43 - CFD: 29/07/2016 - [] D -- C:\Users\Theo le BG\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MEGAsync =>.MegaSystems
O43 - CFD: 30/07/2016 - [] D -- C:\Users\Theo le BG\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Python 3.5 =>.Python
O43 - CFD: 01/02/2017 - [] RD -- C:\Users\Theo le BG\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup =>.Microsoft Corporation
O43 - CFD: 26/02/2017 - [] D -- C:\Users\Theo le BG\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam =>.Steam Games
O43 - CFD: 22/07/2016 - [] D -- C:\Users\Theo le BG\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft =>.Ubisoft
O43 - CFD: 22/07/2016 - [] D -- C:\Users\Theo le BG\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR =>.WinRAR
O43 - CFD: 14/07/2009 - [0] SHD -- C:\Users\Default\AppData\Local\Application Data =>.Microsoft Corporation
O43 - CFD: 11/07/2012 - [0] SHD -- C:\Users\Default\AppData\Local\Historique =>.Microsoft Corporation
O43 - CFD: 14/07/2009 - [0] SHD -- C:\Users\Default\AppData\Local\History =>.Microsoft Corporation
O43 - CFD: 09/03/2017 - [] D -- C:\Users\Default\AppData\Local\LogMeIn Hamachi =>.LogMeIn Entreprise
O43 - CFD: 14/07/2009 - [] D -- C:\Users\Default\AppData\Local\Microsoft =>.Microsoft Corporation
O43 - CFD: 22/09/2016 - [0] D -- C:\Users\Default\AppData\Local\Temp =>.Microsoft Corporation
O43 - CFD: 14/07/2009 - [0] SHD -- C:\Users\Default\AppData\Local\Temporary Internet Files =>.Microsoft Corporation
O43 - CFD: 14/07/2009 - [0] SHD -- C:\Users\Default User\AppData\Local\Application Data =>.Microsoft Corporation
O43 - CFD: 11/07/2012 - [0] SHD -- C:\Users\Default User\AppData\Local\Historique =>.Microsoft Corporation
O43 - CFD: 14/07/2009 - [0] SHD -- C:\Users\Default User\AppData\Local\History =>.Microsoft Corporation
O43 - CFD: 09/03/2017 - [] D -- C:\Users\Default User\AppData\Local\LogMeIn Hamachi =>.LogMeIn Entreprise
O43 - CFD: 14/07/2009 - [] D -- C:\Users\Default User\AppData\Local\Microsoft =>.Microsoft Corporation
O43 - CFD: 22/09/2016 - [0] D -- C:\Users\Default User\AppData\Local\Temp =>.Microsoft Corporation
O43 - CFD: 14/07/2009 - [0] SHD -- C:\Users\Default User\AppData\Local\Temporary Internet Files =>.Microsoft Corporation
O43 - CFD: 31/08/2016 - [] -- C:\Windows\System32\Config\systemprofile\AppData\Local\Adobe =>.Adobe
O43 - CFD: 14/07/2009 - [] D -- C:\Windows\System32\Config\systemprofile\AppData\Local\Microsoft =>.Microsoft Corporation
O43 - CFD: 14/07/2009 - [] SD -- C:\Windows\System32\Config\systemprofile\AppData\Roaming\Microsoft =>.Microsoft Corporation
O43 - CFD: 18/08/2016 - [] -- C:\Windows\System32\Config\systemprofile\AppData\Roaming\PlaysTV =>.PlaysTV
O43 - CFD: 18/08/2016 - [] -- C:\Windows\System32\Config\systemprofile\AppData\Roaming\Raptr =>.Raptr

---\\ ShellExecuteHook (2) - 0s
O46 - SEH:ShellExecuteHooks - (no name) - [HKLM] [64Bits] - {48877210-AAA2-11E6-B8D5-64006A5CFC23} . (...) -- (.not file.)
O46 - SEH:ShellExecuteHooks - (no name) - [HKLM] [64Bits] - {D1CD7500-DE3D-11E6-8016-64006A5CFC23} . (...) -- (.not file.)

---\\ ShellIconOverlayIdentifiers (SIOI) (6) - 1s
O106 - SIOI:
MEGA (Pending) [
MEGA (Pending)] - {056D528D-CE28-4194-9BA3-BA2E9197FF8C}. (...) -- C:\Users\Theo le BG\AppData\Local\MEGAsync\ShellExtX32.dll
O106 - SIOI:
MEGA (Synced) [
MEGA (Synced)] - {05B38830-F4E9-4329-978B-1DD28605D202}. (...) -- C:\Users\Theo le BG\AppData\Local\MEGAsync\ShellExtX32.dll
O106 - SIOI:
MEGA (Syncing) [
MEGA (Syncing)] - {0596C850-7BDD-4C9D-AFDF-873BE6890637}. (...) -- C:\Users\Theo le BG\AppData\Local\MEGAsync\ShellExtX32.dll
O106 - SIOI: Enhanced Storage Icon Overlay Handler Class [EnhancedStorageShell] - {D9144DCD-E998-4ECA-AB6A-DCD83CCBA16D}. (.Microsoft Corporation - DLL d’extension d’environnement de stockage.) -- C:\Windows\System32\EhStorShell.dll =>.Microsoft Corporation
O106 - SIOI: ShareOverlay Class [ShareOverlay] - {594D4122-1F87-41E2-96C7-825FB4796516}. (.IvoSoft - Adds classic Windows Explorer features.) -- C:\Program Files\Classic Shell\ClassicExplorer32.dll =>.IvoSoft
O106 - SIOI: Sharing Overlay (Private) [SharingPrivate] - {08244EE6-92F0-47f2-9FC9-929BAA2E7235}. (.Microsoft Corporation - Extensions de l’interpréteur de commandes p.) -- C:\Windows\System32\ntshrui.dll =>.Microsoft Corporation

---\\ Liste des pilotes du système (65) - 2s
O58 - SDL:2009/07/14 02:52:21 A . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\drivers\adp94xx.sys [324224] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:52:21 A . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\System32\drivers\adpahci.sys [324224] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:52:21 A . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver (X64).) -- C:\Windows\System32\drivers\adpu320.sys [324224] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:52:21 A . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\Windows\System32\drivers\aliide.sys [324224] =>.Microsoft Windows®
O58 - SDL:2016/11/24 01:13:54 A . (.Advanced Micro Devices - AMD ACP Binaries.) -- C:\Windows\System32\drivers\amdacpksd.sys [324224] =>.Advanced Micro Devices, Inc.®
O58 - SDL:2010/11/21 04:23:47 A . (.Advanced Micro Devices - AHCI 1.2 Device Driver.) -- C:\Windows\System32\drivers\amdsata.sys [324224] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:52:20 A . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller D.) -- C:\Windows\System32\drivers\amdsbs.sys [324224] =>.Microsoft Windows®
O58 - SDL:2010/11/21 04:23:47 A . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\Windows\System32\drivers\amdxata.sys [324224] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:52:21 A . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\System32\drivers\arc.sys [324224] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:52:21 A . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\System32\drivers\arcsas.sys [324224] =>.Microsoft Windows®
O58 - SDL:2016/03/30 06:00:36 A . (.Advanced Micro Devices - AMD High Definition Audio Function Driver.) -- C:\Windows\System32\drivers\AtihdW76.sys [324224] =>.Advanced Micro Devices
O58 - SDL:2016/11/24 01:12:12 A . (.Advanced Micro Devices, Inc. - ATI Radeon Kernel Mode Driver.) -- C:\Windows\System32\drivers\atikmdag.sys [324224] =>.Advanced Micro Devices, Inc.
O58 - SDL:2016/11/24 01:16:00 A . (.Advanced Micro Devices, Inc. - AMD multi-vendor Miniport Driver.) -- C:\Windows\System32\drivers\atikmpag.sys [324224] =>.Advanced Micro Devices, Inc.®
O58 - SDL:2009/06/10 21:34:23 A . (.Broadcom Corporation - Broadcom NetXtreme Gigabit Ethernet NDIS6.x.) -- C:\Windows\System32\drivers\b57nd60a.sys [324224] =>.Broadcom Corporation
O58 - SDL:2011/08/08 19:13:12 A . (.SysProgs.org - WinCDEmu virtual CDROM bus.) -- C:\Windows\System32\drivers\BazisVirtualCDBus.sys [324224] =>.Sysprogs UG (haftungsbeschraenkt)®
O58 - SDL:2009/06/10 21:41:06 A . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower.) -- C:\Windows\System32\drivers\BrFiltLo.sys [324224] =>.Brother Industries, Ltd.
O58 - SDL:2009/06/10 21:41:06 A . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper.) -- C:\Windows\System32\drivers\BrFiltUp.sys [324224] =>.Brother Industries, Ltd.
O58 - SDL:2009/07/14 02:19:07 A . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\System32\drivers\BrSerId.sys [324224] =>.Brother Industries Ltd.
O58 - SDL:2009/06/10 21:41:10 A . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\System32\drivers\BrSerWdm.sys [324224] =>.Brother Industries Ltd.
O58 - SDL:2009/06/10 21:41:10 A . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\System32\drivers\BrUsbMdm.sys [324224] =>.Brother Industries Ltd.
O58 - SDL:2009/06/10 21:41:10 A . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\System32\drivers\BrUsbSer.sys [324224] =>.Brother Industries Ltd.
O58 - SDL:2009/06/10 21:34:28 A . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.) -- C:\Windows\System32\drivers\bxvbda.sys [324224] =>.Broadcom Corporation
O58 - SDL:2009/07/14 02:52:31 A . (.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\cmdide.sys [324224] =>.Microsoft Windows®
O58 - SDL:2009/06/10 21:35:09 A . (.Intel Corporation - Intel(R) PRO/1000 Adapter NDIS 6 deserializ.) -- C:\Windows\System32\drivers\E1G6032E.sys [324224] =>.Intel Corporation
O58 - SDL:2009/07/14 02:47:48 A . (.Emulex - Storport Miniport Driver for LightPulse HBA.) -- C:\Windows\System32\drivers\elxstor.sys [324224] =>.Microsoft Windows®
O58 - SDL:2009/06/10 21:34:33 A . (.Broadcom Corporation - Broadcom NetXtreme II 10 GigE VBD.) -- C:\Windows\System32\drivers\evbda.sys [324224] =>.Broadcom Corporation
O58 - SDL:2017/03/02 13:26:12 AH . (.LogMeIn, Inc. - Hamachi Virtual Network Interface Driver.) -- C:\Windows\System32\drivers\hamachi.sys [324224] =>.LogMeIn, Inc.®
O58 - SDL:2009/06/10 21:31:59 A . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for.) -- C:\Windows\System32\drivers\hcw85cir.sys [324224] =>.Hauppauge Computer Works, Inc.
O58 - SDL:2010/11/21 04:23:47 A . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Drive.) -- C:\Windows\System32\drivers\HpSAMD.sys [324224] =>.Microsoft Windows®
O58 - SDL:2010/11/21 04:23:47 A . (.Intel Corporation - Intel Matrix Storage Manager driver - x64.) -- C:\Windows\System32\drivers\iaStorV.sys [324224] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:48:04 A . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\System32\drivers\iirsp.sys [324224] =>.Microsoft Windows®
O58 - SDL:2016/11/11 17:10:58 A . (.Intel Corporation - HAXM_Driver.) -- C:\Windows\System32\drivers\IntelHaxm.sys [324224] {330000B9C9D083266A357AB70400020000B9C9} =>.Intel Corporation
O58 - SDL:2009/07/14 02:48:04 A . (.LSI Corporation - LSI Fusion-MPT FC Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_fc.sys [324224] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:48:04 A . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas.sys [324224] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:48:04 A . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas2.sys [324224] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:48:04 A . (.LSI Corporation - LSI Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_scsi.sys [324224] =>.Microsoft Windows®
O58 - SDL:2016/03/10 13:08:54 A . (.Malwarebytes - Malwarebytes Anti-Malware.) -- C:\Windows\System32\drivers\mbam.sys [324224] =>.Malwarebytes Corporation®
O58 - SDL:2016/03/10 13:08:58 A . (.Malwarebytes - Malwarebytes Chameleon Protection Driver.) -- C:\Windows\System32\drivers\mbamchameleon.sys [324224] =>.Malwarebytes Corporation®
O58 - SDL:2017/02/26 22:53:50 A . (.Malwarebytes - Malwarebytes Anti-Malware.) -- C:\Windows\System32\drivers\MBAMSwissArmy.sys [324224] =>.Malwarebytes Corporation®
O58 - SDL:2009/07/14 02:48:04 A . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows.) -- C:\Windows\System32\drivers\megasas.sys [324224] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:48:04 A . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\System32\drivers\MegaSR.sys [324224] =>.Microsoft Windows®
O58 - SDL:2016/03/10 13:09:06 A . (.Malwarebytes Corporation - Malwarebytes Web Access Control.) -- C:\Windows\System32\drivers\mwac.sys [324224] =>.Malwarebytes Corporation®
O58 - SDL:2015/11/05 15:23:40 A . (.Apple Inc. - Apple Mobile Device Ethernet.) -- C:\Windows\System32\drivers\netaapl64.sys [324224] =>.Apple Inc.
O58 - SDL:2009/07/14 02:48:26 A . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\System32\drivers\nfrd960.sys [324224] =>.Microsoft Windows®
O58 - SDL:2010/11/21 04:23:47 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\System32\drivers\nvraid.sys [324224] =>.Microsoft Windows®
O58 - SDL:2010/11/21 04:23:47 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\System32\drivers\nvstor.sys [324224] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:45:46 A . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\Windows\System32\drivers\ql2300.sys [324224] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:45:45 A . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\Windows\System32\drivers\ql40xx.sys [324224] =>.Microsoft Windows®
O58 - SDL:2009/06/10 21:35:42 A . (.Realtek Corporation - Realtek 8101E/8168/8169 NDIS 6.20 64-bit Dr.) -- C:\Windows\System32\drivers\Rt64win7.sys [324224] =>.Realtek Corporation
O58 - SDL:2013/03/13 05:49:38 A . (.Realtek Semiconductor Corporation - Realtek RTL8192C USB NDIS Driver.) -- C:\Windows\System32\drivers\RTL8192cu.sys [324224] =>.Realtek Semiconductor Corp®
O58 - SDL:2009/06/10 21:37:19 A . (.Macrovision Corporation, Macrovision Europe Limited, - Macrovision SECURITY Driver.) -- C:\Windows\System32\drivers\secdrv.sys [324224] =>.Macrovision Corporation, Macrovision Europe Limited,
O58 - SDL:2009/07/14 02:45:45 A . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\System32\drivers\sisraid2.sys [324224] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:45:46 A . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\System32\drivers\sisraid4.sys [324224] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:45:55 A . (.Promise Technology - Promise SuperTrak EX Series Driver for Win.) -- C:\Windows\System32\drivers\stexstor.sys [324224] =>.Microsoft Windows®
O58 - SDL:2015/12/21 17:01:36 A . (.Tunngle.net - TAP-Win32 Virtual Network Driver.) -- C:\Windows\System32\drivers\tap0901t.sys [324224] =>.Tunngle.net GmbH®
O58 - SDL:2015/11/05 15:23:52 A . (.Apple, Inc. - Apple Mobile Device USB Driver.) -- C:\Windows\System32\drivers\usbaapl64.sys [324224] =>.Apple, Inc.
O58 - SDL:2017/01/16 17:38:54 A . (.Oracle Corporation - VirtualBox Support Driver.) -- C:\Windows\System32\drivers\VBoxDrv.sys [324224] =>.Oracle Corporation®
O58 - SDL:2017/01/16 17:38:36 A . (.Oracle Corporation - VirtualBox NDIS 6.0 Host-Only Network Adapt.) -- C:\Windows\System32\drivers\VBoxNetAdp6.sys [324224] =>.Oracle Corporation®
O58 - SDL:2017/01/16 17:38:38 A . (.Oracle Corporation - VirtualBox NDIS 6.0 Lightweight Filter Driv.) -- C:\Windows\System32\drivers\VBoxNetLwf.sys [324224] =>.Oracle Corporation®
O58 - SDL:2017/01/16 17:38:36 A . (.Oracle Corporation - VirtualBox USB Monitor Driver.) -- C:\Windows\System32\drivers\VBoxUSBMon.sys [324224] =>.Oracle Corporation®
O58 - SDL:2009/07/14 02:45:55 A . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\viaide.sys [324224] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:45:55 A . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\Windows\System32\drivers\vsmraid.sys [324224] =>.Microsoft Windows®
O58 - SDL:2012/04/15 22:32:14 A . (.Windows (R) Win 7 DDK provider - WebcamMax Capture.) -- C:\Windows\System32\drivers\wcmvcam64.sys [324224] =>.Superfluous.TenkiTechnology
O58 - SDL:2016/07/22 20:53:19 A . (.AVAST Software - avast! self protection module.) -- C:\Windows\System32\drivers\xokceepr.sys [324224] =>.AVAST Software a.s.®
O58 - SDL:2017/03/02 13:26:12 AH . (.LogMeIn, Inc. - Hamachi Virtual Network Interface Driver.) -- C:\Windows\System32\hamachi.sys [324224] =>.LogMeIn, Inc.®

---\\ Derniers fichiers modifiés ou crées (Utilisateur) (5) - 8s
O61 - LFC: 2017/03/08 17:56:54 A . (..) -- C:\Users\Theo le BG\AppData\Local\AMD\DxCache\04ad19f540aafe131941e53ced0834341d9dee56ecca6225..bin [65536] =>.Advanced Micro Devices Inc
O61 - LFC: 2017/03/08 17:57:33 A . (..) -- C:\Users\Theo le BG\AppData\Local\AMD\DxCache\64078f1ea5db2384bf6ae177f14bfb05e29d74de9508a250..bin [2097152] =>.Advanced Micro Devices Inc
O61 - LFC: 2017/03/08 18:57:03 A . (..) -- C:\Users\Theo le BG\AppData\Local\AMD\DxCache\fc0dabdbc13aa60f3eea7bf3a8697ea03735daaa48ff1ae8..bin [524288] =>.Advanced Micro Devices Inc
O61 - LFC: 2017/03/09 20:52:57 A . (..) -- C:\Users\Theo le BG\AppData\Roaming\Spotify\natives_blob.bin [342741] =>.Spotify
O61 - LFC: 2017/03/09 20:52:57 A . (..) -- C:\Users\Theo le BG\AppData\Roaming\Spotify\snapshot_blob.bin [814104] =>.Spotify

---\\ Associations Shell Spawning (10) - 0s
O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe =>.Microsoft Corporation
O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Ob.) -- C:\Windows\System32\eventvwr.exe =>.Microsoft Corporation
O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\wscript.exe =>.Microsoft Corporation
O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe =>.Microsoft Corporation
O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S

---\\ Menu de démarrage Internet (12) - 0s
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc®
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (...) -- iexplore.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe =>.Mozilla Corporation
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc.
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe =>.Mozilla Corporation
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc.
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe =>.Mozilla Corporation
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc.
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation

---\\ Recherche d'infection sur les navigateurs (8) - 0s
O69 - SBI: prefs.js [Theo le BG - qneyki4p.default] user_pref("browser.search.defaultenginename", "trotux"); =>.Superfluous.Trotux
O69 - SBI: prefs.js [Theo le BG - qneyki4p.default] user_pref("browser.search.searchengine.sp", "http://www.trotux.com/search/?from=opt&q={searchTerms}&type=sp&uid=ST31000528AS_9VP24[...] =>.Superfluous.Trotux
O69 - SBI: prefs.js [Theo le BG - qneyki4p.default] user_pref("browser.search.searchengine.url", "http://www.trotux.com/search/?from=opt&q={searchTerms}&type=sp&uid=ST31000528AS_9VP2[...] =>.Superfluous.Trotux
O69 - SBI: prefs.js [Theo le BG - qneyki4p.default] user_pref("browser.search.selectedEngine", "trotux"); =>.Superfluous.Trotux
O69 - SBI: prefs.js [Theo le BG - qneyki4p.default] user_pref("browser.startup.homepage", "http://www.trotux.com/?z=get_error&from=opt&uid=ST31000528AS_9VP2411KXXXX9VP2411K&type=hp")[...] =>.Superfluous.Trotux
O69 - SBI: SearchScopes [HKCU] {012E1000-F331-11DB-8314-0800200C9A66} - (Google) - http://www.google.com/ =>.Google Inc.
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (Bing) - http://www.bing.com/ =>.Bing.com
O69 - SBI: SearchScopes [HKLM] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (@ieframe.dll,-12512) - http://www.bing.com/ =>.Bing.com

---\\ Enumère les services démarrés par Svchost (33) - 1s
O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d’application.) -- C:\Windows\System32\aelupsvc.dll [324224] =>.Microsoft Corporation
O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [324224] =>.Microsoft Corporation
O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [324224] =>.Microsoft Corporation
O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\system32\srvsvc.dll [324224] =>.Microsoft Corporation
O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\System32\gpsvc.dll [324224] =>.Microsoft Corporation
O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\ikeext.dll [324224] =>.Microsoft Corporation
O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Service Audio Windows.) -- C:\Windows\System32\Audiosrv.dll [324224] =>.Microsoft Corporation
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’.) -- C:\Windows\System32\rasauto.dll [324224] =>.Microsoft Corporation
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire de connexions d’accès distant.) -- C:\Windows\System32\rasmans.dll [324224] =>.Microsoft Corporation
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll [324224] =>.Microsoft Corporation
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements systèm.) -- C:\Windows\System32\Sens.dll [324224] =>.Microsoft Corporation
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l’application d’assistance à.) -- C:\Windows\System32\ipnathlp.dll [324224] =>.Microsoft Corporation
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM.) -- C:\Windows\System32\tapisrv.dll [324224] =>.Microsoft Corporation
O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gestionnaire des connexions distantes du se.) -- C:\Windows\System32\termsrv.dll [324224] =>.Microsoft Corporation
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Up.) -- C:\Windows\system32\wuaueng.dll [324224] =>.Microsoft Windows Component Publisher®
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière.) -- C:\Windows\System32\qmgr.dll [324224] =>.Microsoft Corporation
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [324224] =>.Microsoft Corporation
O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur u.) -- C:\Windows\System32\iphlpsvc.dll [324224] =>.Microsoft Corporation
O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d’ouverture de session secon.) -- C:\Windows\system32\seclogon.dll [324224] =>.Microsoft Corporation
O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll [324224] =>.Microsoft Corporation
O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\system32\iscsiexe.dll [324224] =>.Microsoft Corporation
O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédia.) -- C:\Windows\system32\mmcss.dll [324224] =>.Microsoft Corporation
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\system32\wbem\WMIsvc.dll [324224] =>.Microsoft Corporation
O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à.) -- C:\Windows\System32\SessEnv.dll [324224] =>.Microsoft Corporation
O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\System32\browser.dll [324224] =>.Microsoft Corporation
O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll [324224] =>.Microsoft Corporation
O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\system32\schedsvc.dll [324224] =>.Microsoft Corporation
O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\Windows\system32\kmsvc.dll [324224] =>.Microsoft Corporation
O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll [324224] =>.Microsoft Corporation
O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\system32\profsvc.dll [324224] =>.Microsoft Corporation
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\Windows\system32\themeservice.dll [324224] =>.Microsoft Corporation
O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\Windows\System32\bdesvc.dll [324224] =>.Microsoft Corporation
O83 - Search Svchost Services: AppMgmt (AppMgmt) . (.Microsoft Corporation - Service Installation de logiciels.) -- C:\Windows\System32\appmgmts.dll [324224] =>.Microsoft Corporation

---\\ Liste des exceptions du parefeu Windows (44) - 9s
O87 - FAEL: "{73E42C50-2B41-40FC-8B16-7063D564689E}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\Steam\bin\steamwebhelper.exe (.not file.)
O87 - FAEL: "{EA548552-A2AA-4159-8258-3F6AE411F354}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\Steam\bin\steamwebhelper.exe (.not file.)
O87 - FAEL: "{009AD683-716E-460F-95E1-5D97C67B3D40}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\Tunngle\TnglCtrl.exe (.not file.)
O87 - FAEL: "{E51831C7-F536-4194-BD1E-D98AA63A9A48}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\Tunngle\TnglCtrl.exe (.not file.)
O87 - FAEL: "{04A2BF6F-381C-4AB0-A3E1-80546BFA7180}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\Tunngle\Tunngle.exe (.not file.)
O87 - FAEL: "{0CFF2547-A13B-462A-B4E8-08EE30E2BA4B}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\Tunngle\Tunngle.exe (.not file.)
O87 - FAEL: "{C9EC0399-260B-426D-91B8-B049AAAC1BCF}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\Raptr Inc\Raptr\raptr.exe (.not file.)
O87 - FAEL: "{A70EDC1D-8857-4AD9-8B0C-7629537347E2}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\Raptr Inc\Raptr\raptr.exe (.not file.)
O87 - FAEL: "{249D5E63-459C-4D5D-A920-4768694CD28D}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\Raptr Inc\Raptr\raptr_im.exe (.not file.)
O87 - FAEL: "{1D37772D-8891-4A55-933E-C728FEB92CC5}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\Raptr Inc\Raptr\raptr_im.exe (.not file.)
O87 - FAEL: "{23E50E05-F0F9-4AF0-A34A-9DE0A8A79517}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\webcam 7\webcam7.exe (.not file.)
O87 - FAEL: "{172BDD9E-B79F-4B3E-BA69-A415618C0A55}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\webcam 7\webcam7.exe (.not file.)
O87 - FAEL: "{B8768E19-2641-4840-93AB-5D122E9F7789}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\webcam 7\webcam7.Service.exe (.not file.)
O87 - FAEL: "{DF6B3B5B-77ED-4B08-B23B-9E5DF3F0A2C9}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\webcam 7\webcam7.Service.exe (.not file.)
O87 - FAEL: "{893DB969-665C-46D0-A708-03E9B9E3E8B4}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv.exe (.not file.)
O87 - FAEL: "{C6898B4D-DD5F-425C-BCBD-243E7D5386E9}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv.exe (.not file.)
O87 - FAEL: "TCP Query User{D65A86C6-6445-4FCA-A93B-F5CD7B5FB1F7}D:\lf2\left 4 dead 2\left4dead2.exe" [In-None-P6-TRUE] .(...) -- D:\lf2\left 4 dead 2\left4dead2.exe (.not file.)
O87 - FAEL: "UDP Query User{43BA5798-9B84-47FF-9239-9F4DB5164FE3}D:\lf2\left 4 dead 2\left4dead2.exe" [In-None-P17-TRUE] .(...) -- D:\lf2\left 4 dead 2\left4dead2.exe (.not file.)
O87 - FAEL: "{4C731F52-CEE2-4945-A6BF-D4CAC57ABB17}" [In-None-P6-TRUE] .(...) -- D:\Program Files (x86)\Firefly Studios\Stronghold 2\Stronghold2.exe (.not file.)
O87 - FAEL: "{3B0525A1-5E0D-4C5D-B33D-43CA78502BE1}" [In-None-P17-TRUE] .(...) -- D:\Program Files (x86)\Firefly Studios\Stronghold 2\Stronghold2.exe (.not file.)
O87 - FAEL: "TCP Query User{4EEDBBA1-70C3-48AE-8AFC-678A4242AF35}D:\program files (x86)\tom clancy's splinter cell blacklist\src\system\blacklist_dx11_game.exe" [In-None-P6-TRUE] .(...) -- D:\program files (x86)\tom clancy's splinter cell blacklist\src\system\blacklist_dx11_game.exe (.not file.)
O87 - FAEL: "UDP Query User{B3089E98-2F3E-42DC-A87B-FC4CC2A64749}D:\program files (x86)\tom clancy's splinter cell blacklist\src\system\blacklist_dx11_game.exe" [In-None-P17-TRUE] .(...) -- D:\program files (x86)\tom clancy's splinter cell blacklist\src\system\blacklist_dx11_game.exe (.not file.)
O87 - FAEL: "{79A93500-18EF-4DD9-9E82-5548AE332A4F}" [In-None-P6-TRUE] .(...) -- D:\Steam\SteamApps\common\PAYDAY 2\payday2_win32_release.exe =>.Steam Games
O87 - FAEL: "{644D6FAB-B3A4-4136-8DA8-039F97F2CAC8}" [In-None-P17-TRUE] .(...) -- D:\Steam\SteamApps\common\PAYDAY 2\payday2_win32_release.exe =>.Steam Games
O87 - FAEL: "{C7DAB0A4-96BE-41FA-8079-A8577007951D}" [In-None-P6-TRUE] .(...) -- D:\Steam\SteamApps\common\The Forest\TheForest.exe =>.Steam Games
O87 - FAEL: "{B705202A-62D7-4110-B327-9F7F8B549155}" [In-None-P17-TRUE] .(...) -- D:\Steam\SteamApps\common\The Forest\TheForest.exe =>.Steam Games
O87 - FAEL: "{72E5FB8C-D97C-472F-B2E8-95032D81E31F}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\SonarHost.exe (.not file.)
O87 - FAEL: "{9E4CF52F-1C68-4F6A-BCF1-FA08303D0C48}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\SonarHost.exe (.not file.)
O87 - FAEL: "TCP Query User{5A2A2D29-FB4D-495D-BBCD-CF359C88809A}D:\users\théo\downloads\ark survival evolved pc game beta ^^nosteam^^\ark survival evolved\shootergame\binaries\win64\shootergame.exe" [In-None-P6-TRUE] .(...) -- D:\users\théo\downloads\ark survival evolved pc game beta ^^nosteam^^\ark survival evolved\shootergame\binaries\win64\shootergame.exe (.not file.)
O87 - FAEL: "UDP Query User{88B78C64-786E-4B4F-87A6-0C989DC04ADB}D:\users\théo\downloads\ark survival evolved pc game beta ^^nosteam^^\ark survival evolved\shootergame\binaries\win64\shootergame.exe" [In-None-P17-TRUE] .(...) -- D:\users\théo\downloads\ark survival evolved pc game beta ^^nosteam^^\ark survival evolved\shootergame\binaries\win64\shootergame.exe (.not file.)
O87 - FAEL: "TCP Query User{377F1447-8473-4F2F-8BA9-7ACBEFAC2EBA}D:\dying light\dyinglightgame.exe" [In-None-P6-TRUE] .(...) -- D:\dying light\dyinglightgame.exe (.not file.)
O87 - FAEL: "UDP Query User{267A0B2C-4F8A-4D8F-AF06-92BD55F4EAC4}D:\dying light\dyinglightgame.exe" [In-None-P17-TRUE] .(...) -- D:\dying light\dyinglightgame.exe (.not file.)
O87 - FAEL: "{3A6CBE9E-92AD-44BF-954C-1A4F4F133E99}" [In-None-P6-TRUE] .(...) -- D:\Steam\SteamApps\common\GarrysMod\hl2.exe =>.Steam Games
O87 - FAEL: "{21D2ED57-F055-4F91-A313-D0B106AE0357}" [In-None-P17-TRUE] .(...) -- D:\Steam\SteamApps\common\GarrysMod\hl2.exe =>.Steam Games
O87 - FAEL: "{E73003C9-0E31-4EEF-B48D-DF625E2531DB}" [In-None-P6-TRUE] .(.© 2016 Io-Interactive A/S - HITMAN Launcher.) -- D:\Steam\SteamApps\common\Hitman™\Launcher.exe {1121D37F71DFEF698E6710EDDD398451F9F1}
O87 - FAEL: "{1A71C750-8824-419B-B816-17B922D03CA2}" [In-None-P17-TRUE] .(.© 2016 Io-Interactive A/S - HITMAN Launcher.) -- D:\Steam\SteamApps\common\Hitman™\Launcher.exe {1121D37F71DFEF698E6710EDDD398451F9F1}
O87 - FAEL: "{4BC7DD6F-CB93-4B56-A144-C96719F8120F}" [In-None-P6-TRUE] .(.Copyright (C) 2007-2008 - Engine.) -- D:\Steam\SteamApps\common\PAYDAY The Heist\payday_win32_release.exe
O87 - FAEL: "{90155457-D1F3-4D47-8F0E-EF88B84A6942}" [In-None-P17-TRUE] .(.Copyright (C) 2007-2008 - Engine.) -- D:\Steam\SteamApps\common\PAYDAY The Heist\payday_win32_release.exe
O87 - FAEL: "TCP Query User{D0BCF858-7584-4BFB-8C10-59AB02102E29}C:\users\theo le bg\desktop\eclipse\eclipse.exe" [In-None-P6-TRUE] .(...) -- C:\users\theo le bg\desktop\eclipse\eclipse.exe (.not file.)
O87 - FAEL: "UDP Query User{9CEEEE97-86A7-440E-99F5-7193ABBF5890}C:\users\theo le bg\desktop\eclipse\eclipse.exe" [In-None-P17-TRUE] .(...) -- C:\users\theo le bg\desktop\eclipse\eclipse.exe (.not file.)
O87 - FAEL: "TCP Query User{8C03E600-1297-40B1-A069-9B0537DC4214}D:\program files (x86)\thehunter call of the wild\thehuntercotw_f.exe" [In-None-P6-TRUE] .(...) -- D:\program files (x86)\thehunter call of the wild\thehuntercotw_f.exe (.not file.)
O87 - FAEL: "UDP Query User{C9E6AFBC-C258-43D3-B25A-15A3D7E29B5B}D:\program files (x86)\thehunter call of the wild\thehuntercotw_f.exe" [In-None-P17-TRUE] .(...) -- D:\program files (x86)\thehunter call of the wild\thehuntercotw_f.exe (.not file.)
O87 - FAEL: "TCP Query User{D3C2F229-6A56-4A43-B560-A540042DCA9A}C:\program files\android\android studio1\jre\bin\java.exe" [In-None-P6-TRUE] .(.N/A - OpenJDK Platform binary.) -- C:\program files\android\android studio1\jre\bin\java.exe
O87 - FAEL: "UDP Query User{ABCD39F4-C75B-449E-A27B-FE895C1C1856}C:\program files\android\android studio1\jre\bin\java.exe" [In-None-P17-TRUE] .(.N/A - OpenJDK Platform binary.) -- C:\program files\android\android studio1\jre\bin\java.exe

---\\ Enumère les codes produits des logiciels (1) - 2s
O90 - PUC: "306D188CF772650419D8568444FEB273" . (.WinSnare.) -- C:\Windows\Installer\{C881D603-277F-4056-918D-654844EF2B37}\_853F67D554F05449430E7E.exe =>.Superfluous.WinSnare

---\\ Recherche des packages WindowsInstaller (2) - 0s
[MD5.] [WIS][2017/02/22 10:44:10] (.amuleC - Windows Installer.) -- C:\Windows\Installer\4f2ac.msi [324224] =>Adware.aMULEcustom
[MD5.] [WIS][2017/02/24 14:42:36] (.WinSnare - Windows Installer.) -- C:\Windows\Installer\4f2b2.msi [324224] =>.Superfluous.WinSnare

---\\ Liste des émulateurs de CD/DVD (MBR Hook) (10) - 4s
HKLM\SOFTWARE\Microsoft\Tracing\diskpower-installer_RASAPI32 =>.Superfluous.DiskPower
HKLM\SOFTWARE\Microsoft\Tracing\diskpower-installer_RASMANCS =>.Superfluous.DiskPower
HKLM\SOFTWARE\Microsoft\Tracing\ReimageReminder_RASAPI32 =>.Superfluous.ReimageRepair
HKLM\SOFTWARE\Microsoft\Tracing\ReimageReminder_RASMANCS =>.Superfluous.ReimageRepair
HKLM\SOFTWARE\Microsoft\Tracing\Reimage_RASAPI32 =>.Superfluous.ReimageRepair
HKLM\SOFTWARE\Microsoft\Tracing\Reimage_RASMANCS =>.Superfluous.ReimageRepair
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\ReimagePackage_RASAPI32 =>.Superfluous.ReimageRepair
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\ReimagePackage_RASMANCS =>.Superfluous.ReimageRepair
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\ReimageRepair (1)_RASAPI32 =>.Superfluous.ReimageRepair
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\ReimageRepair (1)_RASMANCS =>.Superfluous.ReimageRepair

---\\ Scan Additionnel (81) - 0s
HKLM\SYSTEM\CurrentControlSet\Services\Kiqerwardmider =>Adware.Suspect
HKLM\SYSTEM\CurrentControlSet\Services\Service KMSELDI =>HackTool.KMSpico
C:\Program Files\KMSpico\Service_KMS.exe =>HackTool.KMSpico
C:\Program Files\KMSpico\AutoPico.exe =>HackTool.KMSpico
C:\Windows\System32\Tasks\AutoPico Daily Restart =>HackTool.KMSpico
C:\Users\Theo le BG\AppData\Roaming\cacaoweb\cacaoweb.exe =>.Superfluous.CacaoWeb
C:\Users\Theo le BG\AppData\Roaming\Mozilla\Firefox\Profiles\qneyki4p.default\extensions\cacaoweb@cacaoweb.org =>.Superfluous.CacaoWeb
HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{8B29D47F-92E2-4C20-9EE0-F710991F5D7C}_is1 =>HackTool.KMSpico
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{B2EFFD4E-D098-4845-9D56-DE75BEB35913} =>Adware.aMULEcustom
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{C881D603-277F-4056-918D-654844EF2B37} =>.Superfluous.WinSnare
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{B2EFFD4E-D098-4845-9D56-DE75BEB35913} =>Adware.aMULEcustom
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{C881D603-277F-4056-918D-654844EF2B37} =>.Superfluous.WinSnare
C:\Program Files\KMSpico =>HackTool.KMSpico
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KMSpico =>HackTool.KMSpico
C:\Users\Theo le BG\AppData\Roaming\aMule =>Adware.aMULEcustom
C:\Users\Theo le BG\AppData\Roaming\cacaoweb =>.Superfluous.CacaoWeb
C:\Users\Theo le BG\AppData\Local\CrashRpt =>.Superfluous.CrashReports
C:\Users\Theo le BG\AppData\Local\Tempzxpsign0075d7b14b01b76c =>.Superfluous.Temporary
C:\Users\Theo le BG\AppData\Local\Tempzxpsign04d9026ccf97c5df =>.Superfluous.Temporary
C:\Users\Theo le BG\AppData\Local\Tempzxpsign0a16371b5d9fdfe2 =>.Superfluous.Temporary
C:\Users\Theo le BG\AppData\Local\Tempzxpsign0d3d854c4b3c0715 =>.Superfluous.Temporary
C:\Users\Theo le BG\AppData\Local\Tempzxpsign105bdb04587aa2bc =>.Superfluous.Temporary
C:\Users\Theo le BG\AppData\Local\Tempzxpsign12dfe58a22c36560 =>.Superfluous.Temporary
C:\Users\Theo le BG\AppData\Local\Tempzxpsign177b13450119937d =>.Superfluous.Temporary
C:\Users\Theo le BG\AppData\Local\Tempzxpsign2179da4a6b5b0b2d =>.Superfluous.Temporary
C:\Users\Theo le BG\AppData\Local\Tempzxpsign247ed33ee66be6ff =>.Superfluous.Temporary
C:\Users\Theo le BG\AppData\Local\Tempzxpsign2b089cf7fa7c16a6 =>.Superfluous.Temporary
C:\Users\Theo le BG\AppData\Local\Tempzxpsign3c07467ca3c5a177 =>.Superfluous.Temporary
C:\Users\Theo le BG\AppData\Local\Tempzxpsign42ee2edd80395b55 =>.Superfluous.Temporary
C:\Users\Theo le BG\AppData\Local\Tempzxpsign495509f0e0e9318b =>.Superfluous.Temporary
C:\Users\Theo le BG\AppData\Local\Tempzxpsign4df90fc97e462f03 =>.Superfluous.Temporary
C:\Users\Theo le BG\AppData\Local\Tempzxpsign608c0c1c1d314794 =>.Superfluous.Temporary
C:\Users\Theo le BG\AppData\Local\Tempzxpsign64d88d777c724148 =>.Superfluous.Temporary
C:\Users\Theo le BG\AppData\Local\Tempzxpsign6c0f9cb983ee02ad =>.Superfluous.Temporary
C:\Users\Theo le BG\AppData\Local\Tempzxpsign728b8b301654f227 =>.Superfluous.Temporary
C:\Users\Theo le BG\AppData\Local\Tempzxpsign7c93d5ee6465f446 =>.Superfluous.Temporary
C:\Users\Theo le BG\AppData\Local\Tempzxpsign80cc753a1217e12a =>.Superfluous.Temporary
C:\Users\Theo le BG\AppData\Local\Tempzxpsign8955ead93342573a =>.Superfluous.Temporary
C:\Users\Theo le BG\AppData\Local\Tempzxpsign8a7de159791b87d8 =>.Superfluous.Temporary
C:\Users\Theo le BG\AppData\Local\Tempzxpsign8b33a75aee7f1ef2 =>.Superfluous.Temporary
C:\Users\Theo le BG\AppData\Local\Tempzxpsign8c8b512cbf76a278 =>.Superfluous.Temporary
C:\Users\Theo le BG\AppData\Local\Tempzxpsign8dd4aa810cad2e0f =>.Superfluous.Temporary
C:\Users\Theo le BG\AppData\Local\Tempzxpsign9115fa9a22381dc8 =>.Superfluous.Temporary
C:\Users\Theo le BG\AppData\Local\Tempzxpsign92fc99c48618d43b =>.Superfluous.Temporary
C:\Users\Theo le BG\AppData\Local\Tempzxpsign9c01459a0a3476bc =>.Superfluous.Temporary
C:\Users\Theo le BG\AppData\Local\Tempzxpsign9e356f6bb0494544 =>.Superfluous.Temporary
C:\Users\Theo le BG\AppData\Local\Tempzxpsign9ef227dc1c7e7c6c =>.Superfluous.Temporary
C:\Users\Theo le BG\AppData\Local\Tempzxpsigna2759bad706330b7 =>.Superfluous.Temporary
C:\Users\Theo le BG\AppData\Local\Tempzxpsigna8400df3d2e8931b =>.Superfluous.Temporary
C:\Users\Theo le BG\AppData\Local\Tempzxpsigna9c1c954d6d7302e =>.Superfluous.Temporary
C:\Users\Theo le BG\AppData\Local\Tempzxpsignad33d314aacb9002 =>.Superfluous.Temporary
C:\Users\Theo le BG\AppData\Local\Tempzxpsignb84ac49c9445010c =>.Superfluous.Temporary
C:\Users\Theo le BG\AppData\Local\Tempzxpsignba8640fcbf1fb026 =>.Superfluous.Temporary
C:\Users\Theo le BG\AppData\Local\Tempzxpsignbfca164bea7b8f72 =>.Superfluous.Temporary
C:\Users\Theo le BG\AppData\Local\Tempzxpsignc0d6c9d85524c44a =>.Superfluous.Temporary
C:\Users\Theo le BG\AppData\Local\Tempzxpsignc8b5d94d0a190776 =>.Superfluous.Temporary
C:\Users\Theo le BG\AppData\Local\Tempzxpsigncf77bd4ce073be58 =>.Superfluous.Temporary
C:\Users\Theo le BG\AppData\Local\Tempzxpsignd4d6d6ecd0c0122f =>.Superfluous.Temporary
C:\Users\Theo le BG\AppData\Local\Tempzxpsignd75ce8ccdbe77ab7 =>.Superfluous.Temporary
C:\Users\Theo le BG\AppData\Local\Tempzxpsignd7d395f3b422e6c5 =>.Superfluous.Temporary
C:\Users\Theo le BG\AppData\Local\Tempzxpsignebd007a612ac8033 =>.Superfluous.Temporary
C:\Users\Theo le BG\AppData\Local\Tempzxpsignf492479b0baaf485 =>.Superfluous.Temporary
C:\Users\Theo le BG\AppData\Local\Tempzxpsignfa4fc65677e5f3a0 =>.Superfluous.Temporary
C:\Users\Theo le BG\AppData\Local\Tempzxpsignfba4d1b9b8dd647d =>.Superfluous.Temporary
C:\Users\Theo le BG\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\amuleC =>Adware.aMULEcustom
C:\Windows\System32\drivers\wcmvcam64.sys =>.Superfluous.TenkiTechnology
C:\Windows\Installer\{C881D603-277F-4056-918D-654844EF2B37}\_853F67D554F05449430E7E.exe =>.Superfluous.WinSnare
HKLM\Software\Classes\Installer\Products\306D188CF772650419D8568444FEB273 =>.Superfluous.WinSnare
HKLM\Software\Classes\Installer\Features\306D188CF772650419D8568444FEB273 =>.Superfluous.WinSnare
C:\Windows\Installer\4f2ac.msi =>Adware.aMULEcustom
C:\Windows\Installer\4f2b2.msi =>.Superfluous.WinSnare
HKLM64\SOFTWARE\Microsoft\Tracing\diskpower-installer_RASAPI32 =>.Superfluous.DiskPower
HKLM64\SOFTWARE\Microsoft\Tracing\diskpower-installer_RASMANCS =>.Superfluous.DiskPower
HKLM64\SOFTWARE\Microsoft\Tracing\ReimageReminder_RASAPI32 =>.Superfluous.ReimageRepair
HKLM64\SOFTWARE\Microsoft\Tracing\ReimageReminder_RASMANCS =>.Superfluous.ReimageRepair
HKLM64\SOFTWARE\Microsoft\Tracing\Reimage_RASAPI32 =>.Superfluous.ReimageRepair
HKLM64\SOFTWARE\Microsoft\Tracing\Reimage_RASMANCS =>.Superfluous.ReimageRepair
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\ReimagePackage_RASAPI32 =>.Superfluous.ReimageRepair
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\ReimagePackage_RASMANCS =>.Superfluous.ReimageRepair
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\ReimageRepair (1)_RASAPI32 =>.Superfluous.ReimageRepair
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\ReimageRepair (1)_RASMANCS =>.Superfluous.ReimageRepair

---\\ Récapitulatif des éléments trouvés sur votre station (13) - 0s
https://nicolascoolman.eu/2017/03/02/adware-suspect/ =>Adware.Suspect
https://nicolascoolman.eu/2017/02/16/hacktool-kmspico/ =>HackTool.KMSpico
https://nicolascoolman.eu/2017/01/15/superfluous-cacaoweb/ =>.Superfluous.CacaoWeb
https://www.anti-malware.top/2016/05/03/superfluous-csdi/ =>.Superfluous.CSDI
https://www.anti-malware.top/2016/07/03/superfluous-trotux/ =>.Superfluous.Trotux
https://nicolascoolman.eu/2017/03/10/adware-amulecustom/ =>Adware.aMULEcustom
https://nicolascoolman.eu/2017/01/12/superfluous-winsnare/ =>.Superfluous.WinSnare
https://www.anti-malware.top/2016/04/30/pup-optional-crossrider/ =>PUP.Optional.CrossRider
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.Superfluous.CrashReports
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.Superfluous.Temporary
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.Superfluous.TenkiTechnology
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.Superfluous.DiskPower
https://nicolascoolman.eu/2017/01/27/superfluous-reimagerepair/ =>.Superfluous.ReimageRepair

~ Unselected Options: O82,
~ End of the scan, 39320 items in 01mn54s (1322)(0)