cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

~ ZHPDiag v2017.4.2.58 Par Nicolas Coolman (2017/04/02)
~ Démarré par laidani (Administrator) (2017/04/03 13:03:43)
~ Web: https://www.nicolascoolman.com
~ Blog: https://nicolascoolman.eu/
~ Facebook: https://www.facebook.com/nicolascoolman1
~ Etat de la version: Version OK
~ Mode: Scanner
~ Rapport: C:\Documents and Settings\laidani\Bureau\ZHPDiag.txt
~ Rapport: C:\Documents and Settings\laidani\Application Data\ZHP\ZHPDiag.txt
~ UAC: Deactivate
~ Démarrage du système: Normal (Normal boot)
Windows XP, 32-bit Service Pack 3 (Build 2600) =>.Microsoft Corporation

---\\ Navigateurs Internet (3) - 0s
~ GCIE: Google Chrome v49.0.2623.112
~ MFIE: Mozilla Firefox 52.0.1 (x86 en-US)
~ MSIE: Internet Explorer v6.0.2900.5512

---\\ Informations sur les produits Windows (3) - 0s
Windows Automatic Updates : OK
Windows Activation Technologies : KO
Windows Genuine Advantage : KO

---\\ Logiciels de protection (2) - 0s
Microsoft Security Client v4.4.0304.0 (Protection)
Microsoft Security Essentials v4.4.304.0 (Protection)

---\\ Surveillance de Logiciels (1) - 1s
~ Adobe Flash Player 21 NPAPI (Surveillance)

---\\ Informations sur le système (7) - 0s
~ Operating System: x86 Family 6 Model 15 Stepping 13, GenuineIntel
~ Operating System: 32-bit
~ Boot mode: Normal (Normal boot)
Total RAM: 3371.436 MB (60% free) : OK =>.RAM Value
System Restore: Activé (Enable)
System drive C: has 50 GB (71%) free of 70 GB : OK =>.Disk Space
Total RAM: 3371.436 MB (62% free) : OK =>.RAM Value

---\\ Mode de connexion au système (3) - 0s
~ Computer Name: LAIDANI-9D30927
~ User Name: laidani
~ Logged in as Administrator

---\\ Enumération des unités disques (5) - 0s
~ Drive C: has 50 GB free of 70 GB (System)
~ Drive D: has 132 GB free of 149 GB
~ Drive E: has 149 GB free of 176 GB
~ Drive F: has 34 GB free of 79 GB
~ Drive G: has 114 GB free of 152 GB

---\\ Etat du Centre de Sécurité Windows (9) - 0s
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] XMLLookup: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Intl: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: OK
[HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK

---\\ Recherche particulière de fichiers génériques (23) - 3s
[MD5.F2317622D29F9FF0F88AEECD5F60F0DD] - 14/04/2008 - (.Microsoft Corporation - Explorateur Windows.) -- C:\WINDOWS\Explorer.exe [1037824] =>.Microsoft Corporation
[MD5.93AD0B78C7357A05F50E594EC7C22300] - 14/04/2008 - (.Microsoft Corporation - Exécuter une DLL en tant qu'application.) -- C:\WINDOWS\System32\rundll32.exe [33792] =>.Microsoft Corporation
[MD5.4A6E04EA20F48D750D9BFED8600D516B] - 14/04/2008 - (.Microsoft Corporation - Extensions Internet pour Win32.) -- C:\WINDOWS\System32\wininet.dll [670208] =>.Microsoft Corporation
[MD5.DD73D6B9F6B4CB630CF35B438B540174] - 14/04/2008 - (.Microsoft Corporation - Application d'ouverture de session Windows.) -- C:\WINDOWS\System32\Winlogon.exe [512000] =>.Microsoft Corporation
[MD5.F640F61A063DD79BD4D2F6C9509FB958] - 14/04/2008 - (.Microsoft Corporation - DNS Client API DLL.) -- C:\WINDOWS\System32\dnsapi.dll [147968] =>.Microsoft Corporation
[MD5.322D0E36693D6E24A2398BEE62A268CD] - 14/04/2008 - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) -- C:\WINDOWS\System32\drivers\AFD.sys [138112] =>.Microsoft Corporation
[MD5.9F3A2F5AA6875C72BF062C712CFA2674] - 13/04/2008 - (.Microsoft Corporation - IDE/ATAPI Port Driver.) -- C:\WINDOWS\System32\drivers\atapi.sys [96512] =>.Microsoft Corporation
[MD5.C885B02847F5D2FD45A24E219ED93B32] - 14/04/2008 - (.Microsoft Corporation - CD-ROM File System Driver.) -- C:\WINDOWS\System32\drivers\Cdfs.sys [63744] =>.Microsoft Corporation
[MD5.1F4260CC5B42272D71F79E570A27A4FE] - 14/04/2008 - (.Microsoft Corporation - SCSI CD-ROM Driver.) -- C:\WINDOWS\System32\drivers\Cdrom.sys [62976] =>.Microsoft Corporation
[MD5.31F923EB2170FC172C81ABDA0045D18C] - 14/04/2008 - (.Microsoft Corporation - Pilote de cryptographie FIPS.) -- C:\WINDOWS\System32\drivers\Fips.sys [44672] =>.Microsoft Corporation
[MD5.573C7D0A32852B48F3058CFD8026F511] - 14/04/2008 - (.Windows (R) Server 2003 DDK provider - High Definition Audio Bus Driver v1.0a.) -- C:\WINDOWS\System32\drivers\HDAudBus.sys [144384]
[MD5.A09BDC4ED10E3B2E0EC27BB94AF32516] - 14/04/2008 - (.Microsoft Corporation - Pilote de port i8042.) -- C:\WINDOWS\System32\drivers\i8042prt.sys [54144] =>.Microsoft Corporation
[MD5.083A052659F5310DD8B6A6CB05EDCF8E] - 14/04/2008 - (.Microsoft Corporation - IMAPI Kernel Driver.) -- C:\WINDOWS\System32\drivers\Imapi.sys [42112] =>.Microsoft Corporation
[MD5.CC748EA12C6EFFDE940EE98098BF96BB] - 14/04/2008 - (.Microsoft Corporation - IP Network Address Translator.) -- C:\WINDOWS\System32\drivers\IpNat.sys [152832] =>.Microsoft Corporation
[MD5.23C74D75E36E7158768DD63D92789A91] - 14/04/2008 - (.Microsoft Corporation - IPSec Driver.) -- C:\WINDOWS\System32\drivers\IPSec.sys [75264] =>.Microsoft Corporation
[MD5.68755F0FF16070178B54674FE5B847B0] - 14/04/2008 - (.Microsoft Corporation - Windows NT SMB Minirdr.) -- C:\WINDOWS\System32\drivers\MRxSmb.sys [456576] =>.Microsoft Corporation
[MD5.74B2B2F5BEA5E9A3DC021D685551BD3D] - 14/04/2008 - (.Microsoft Corporation - MBT Transport driver.) -- C:\WINDOWS\System32\drivers\netBT.sys [162816] =>.Microsoft Corporation
[MD5.78A08DD6A8D65E697C18E1DB01C5CDCA] - 14/04/2008 - (.Microsoft Corporation - NT File System Driver.) -- C:\WINDOWS\System32\drivers\ntfs.sys [574976] =>.Microsoft Corporation
[MD5.8FD0BDBEA875D06CCF6C945CA9ABAF75] - 14/04/2008 - (.Microsoft Corporation - Pilote de port parallèle.) -- C:\WINDOWS\System32\drivers\Parport.sys [80384] =>.Microsoft Corporation
[MD5.11B4A627BC9614B885C4969BFA5FF8A6] - 14/04/2008 - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) -- C:\WINDOWS\System32\drivers\Rasl2tp.sys [51328] =>.Microsoft Corporation
[MD5.15CABD0F7C00C47C70124907916AF3F1] - 13/04/2008 - (.Microsoft Corporation - Microsoft RDP Device redirector.) -- C:\WINDOWS\System32\drivers\rdpdr.sys [196224] =>.Microsoft Corporation
[MD5.D8EB2A7904DB6C916EB5361878DDCBAE] - 13/04/2008 - (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) -- C:\WINDOWS\System32\drivers\redbook.sys [58752] =>.Microsoft Corporation
[MD5.46DE1126684369BACE4849E4FC8C43CA] - 14/04/2008 - (.Microsoft Corporation - Pilote de cliché instantané du volume.) -- C:\WINDOWS\System32\drivers\volsnap.sys [53376] =>.Microsoft Corporation

---\\ Liste des services NT non Microsoft et non désactivés (2) - 0s
O23 - Service: CodeMeter Runtime Server (CodeMeter.exe) . (.WIBU-SYSTEMS AG - CodeMeter Runtime Server.) - C:\Program Files\CodeMeter\Runtime\bin\CodeMeter.exe =>.WIBU-SYSTEMS AG®
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe =>.Google Inc®

---\\ Services non Microsoft (SR=Démarré,SS=Stoppé) (5) - 14s
SS - Demand [25/02/2017] [ 269504] Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe =>.Adobe Systems Incorporated®
SR - Auto [27/11/2013] [ 3105144] CodeMeter Runtime Server (CodeMeter.exe) . (.WIBU-SYSTEMS AG.) - C:\Program Files\CodeMeter\Runtime\bin\CodeMeter.exe =>.WIBU-SYSTEMS AG®
SS - Auto [04/03/2017] [ 153752] Service Google Update (gupdate) (gupdate) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe =>.Google Inc®
SS - Demand [04/03/2017] [ 153752] Service Google Update (gupdatem) (gupdatem) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe =>.Google Inc®
SS - Demand [27/03/2017] [ 172488] Mozilla Maintenance Service (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe =>.Mozilla Corporation®

---\\ Tâches planifiées en automatique (4) - 3s
O39 - APT: Adobe Flash Player Updater - (...) -- C:\WINDOWS\Tasks\Adobe Flash Player Updater.job [1002] (.Orphan.) =>.Superfluous.Orphan
O39 - APT: GoogleUpdateTaskMachineCore - (...) -- C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job [1052] (.Orphan.) =>.Superfluous.Orphan
O39 - APT: GoogleUpdateTaskMachineUA - (...) -- C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job [1056] (.Orphan.) =>.Superfluous.Orphan
O39 - APT: Microsoft Antimalware Scheduled Scan - (...) -- C:\WINDOWS\Tasks\Microsoft Antimalware Scheduled Scan.job [400] (.Orphan.) =>.Superfluous.Orphan

---\\ Applications lancées au démarrage du système (22) - 1s
O4 - HKLM\..\Run: [MSPY2002] . (...) -- C:\WINDOWS\system32\IME\PINTLGNT\IMSCINST.EXE
O4 - HKLM\..\Run: [RTHDCPL] . (.Realtek Semiconductor Corp. - Realtek HD Audio Control Panel.) -- C:\WINDOWS\RTHDCPL.EXE =>.Realtek Semiconductor Corp®
O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\WINDOWS\system32\igfxtray.exe =>.Intel Corporation
O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\WINDOWS\system32\hkcmd.exe =>.Intel Corporation
O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\WINDOWS\system32\igfxpers.exe =>.Intel Corporation
O4 - HKLM\..\Run: [MSC] . (.Microsoft Corporation - Microsoft Security Client User Interface.) -- C:\Program Files\Microsoft Security Client\msseces.exe =>.Microsoft Corporation®
O4 - HKLM\..\Run: [DriverPack Notifier] . (. - Software and Drivers.) -- C:\Program Files\DriverPack Notifier\DriverPackNotifier.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java Update Scheduler.) -- C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe =>.Oracle America, Inc.®
O4 - HKCU\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe =>.Microsoft Corporation
O4 - HKCU\..\Run: [DrvUpdater] . (.DriverPack Solution - DRP Su Updater.) -- C:\Documents and Settings\laidani\Application Data\DRPSu\DrvUpdater.exe =>.Kuzyakov Artur Vyacheslavovich IP®
O4 - HKCU\..\Run: [AvaFind] . (.Think Less Do More Services - Ava Find.) -- C:\Program Files\AvaFind\AvaFind.exe
O4 - HKCU\..\Run: [IDMan] . (.Tonec Inc. - Internet Download Manager (IDM).) -- C:\Program Files\Internet Download Manager\IDMan.exe =>.Tonec Inc.®
O4 - HKCU\..\Run: [GoogleChromeAutoLaunch_A11AFABD888E870FAC4B5D6D0062E7CB] . (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-21-861567501-1336601894-1801674531-1003\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-21-861567501-1336601894-1801674531-1003\..\Run: [DrvUpdater] . (.DriverPack Solution - DRP Su Updater.) -- C:\Documents and Settings\laidani\Application Data\DRPSu\DrvUpdater.exe =>.Kuzyakov Artur Vyacheslavovich IP®
O4 - HKUS\S-1-5-21-861567501-1336601894-1801674531-1003\..\Run: [AvaFind] . (.Think Less Do More Services - Ava Find.) -- C:\Program Files\AvaFind\AvaFind.exe
O4 - HKUS\S-1-5-21-861567501-1336601894-1801674531-1003\..\Run: [IDMan] . (.Tonec Inc. - Internet Download Manager (IDM).) -- C:\Program Files\Internet Download Manager\IDMan.exe =>.Tonec Inc.®
O4 - HKUS\S-1-5-21-861567501-1336601894-1801674531-1003\..\Run: [GoogleChromeAutoLaunch_A11AFABD888E870FAC4B5D6D0062E7CB] . (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc®

---\\ Processus lancés (28) - 1s
[MD5.F97961FD74E83E3E96DB45B69B33B157] - (.WIBU-SYSTEMS AG - CodeMeter Runtime Server.) -- C:\Program Files\CodeMeter\Runtime\bin\CodeMeter.exe [3105144] [PID.564] =>.WIBU-SYSTEMS AG®
[MD5.A846816E1C18A53BEBD02CB08F351552] - (.Realtek Semiconductor Corp. - Realtek HD Audio Control Panel.) -- C:\WINDOWS\RTHDCPL.EXE [20118088] [PID.1540] =>.Realtek Semiconductor Corp®
[MD5.04663A391E779815ACED5F071EA51B79] - (.Intel Corporation - igfxTray Module.) -- C:\WINDOWS\system32\igfxtray.exe [129536] [PID.1656] =>.Intel Corporation
[MD5.260440CBC6512C43B55F4AEBD45F3999] - (.Intel Corporation - hkcmd Module.) -- C:\WINDOWS\system32\hkcmd.exe [164352] [PID.1752] =>.Intel Corporation
[MD5.3760DFC12A4DDA6101EFAC4AA28BB5FC] - (.Intel Corporation - persistence Module.) -- C:\WINDOWS\system32\igfxpers.exe [141312] [PID.1532] =>.Intel Corporation
[MD5.5153C06FC9D4D094D1A785545928B134] - (.Oracle Corporation - Java Update Scheduler.) -- C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe [587288] [PID.1944] =>.Oracle America, Inc.®
[MD5.1DB3300FE6EF0D52ECABBB903FCA6A41] - (.DriverPack Solution - DRP Su Updater.) -- C:\Documents and Settings\laidani\Application Data\DRPSu\DrvUpdater.exe [195256] [PID.1972] =>.Kuzyakov Artur Vyacheslavovich IP®
[MD5.FD7D8380ABC9F03F201EC48891C31EEF] - (.Think Less Do More Services - Ava Find.) -- C:\Program Files\AvaFind\AvaFind.exe [660992] [PID.1904]
[MD5.986CAA388CB83B730C888B92B6F6D57C] - (.Tonec Inc. - Internet Download Manager (IDM).) -- C:\Program Files\Internet Download Manager\IDMan.exe [3462552] [PID.348] =>.Tonec Inc.®
[MD5.06FAA58219BF8B6D1BC25C2783763E11] - (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [874648] [PID.272] =>.Google Inc®
[MD5.701694C24C278F3D506284C4565ACFE1] - (.Copyright (C) 2003 - Sagem 802.11b USB Dongle Utility.) -- C:\Program Files\Sagem - Utilitaire pour Clé Wi-Fi USB 802.11b\WlanUtility.exe [618496] [PID.476]
[MD5.06FAA58219BF8B6D1BC25C2783763E11] - (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [874648] [PID.432] =>.Google Inc®
[MD5.06FAA58219BF8B6D1BC25C2783763E11] - (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [874648] [PID.3332] =>.Google Inc®
[MD5.06FAA58219BF8B6D1BC25C2783763E11] - (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [874648] [PID.3344] =>.Google Inc®
[MD5.06FAA58219BF8B6D1BC25C2783763E11] - (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [874648] [PID.3368] =>.Google Inc®
[MD5.06FAA58219BF8B6D1BC25C2783763E11] - (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [874648] [PID.3376] =>.Google Inc®
[MD5.06FAA58219BF8B6D1BC25C2783763E11] - (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [874648] [PID.3400] =>.Google Inc®
[MD5.06FAA58219BF8B6D1BC25C2783763E11] - (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [874648] [PID.3408] =>.Google Inc®
[MD5.06FAA58219BF8B6D1BC25C2783763E11] - (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [874648] [PID.3432] =>.Google Inc®
[MD5.06FAA58219BF8B6D1BC25C2783763E11] - (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [874648] [PID.3444] =>.Google Inc®
[MD5.207B16FA69F61D1895F8D8532F587E4B] - (.Tonec Inc. - Internet Download Manager agent for click m.) -- C:\Program Files\Internet Download Manager\IEMonitor.exe [263600] [PID.2148] =>.Tonec Inc.®
[MD5.7662E4CD9EB76F5E4189A104458A1427] - (.XK72 Ltd - Charles Web Debugging Proxy.) -- C:\Program Files\Charles\Charles.exe [1668608] [PID.3832] =>.XK72 Ltd
[MD5.06FAA58219BF8B6D1BC25C2783763E11] - (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [874648] [PID.664] =>.Google Inc®
[MD5.06FAA58219BF8B6D1BC25C2783763E11] - (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [874648] [PID.3584] =>.Google Inc®
[MD5.06FAA58219BF8B6D1BC25C2783763E11] - (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [874648] [PID.2368] =>.Google Inc®
[MD5.06FAA58219BF8B6D1BC25C2783763E11] - (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [874648] [PID.2316] =>.Google Inc®
[MD5.964130CB1FD0754CE803BCE672CA243A] - (.Nicolas Coolman - ZHPDiag.) -- C:\Documents and Settings\laidani\Mes documents\Downloads\ZHPDiag3.exe [2714624] [PID.1724] =>.Nicolas Coolman
[MD5.06FAA58219BF8B6D1BC25C2783763E11] - (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [874648] [PID.276] =>.Google Inc®

---\\ Google Chrome, Démarrage,Recherche,Extensions (10) - 1s
G2 - GCE: Preference [User Data\Default] [apmbifmmmgnophcfklgdoaibfohapoii] Frogs
G2 - GCE: Preference [User Data\Default] [dmimlnjnjnaopabbagdeodfajkpggiea] Lee Daniel Crocker
G2 - GCE: Preference [User Data\Default] [gighmmpiobklfepjocnamgkkbiglidom] __MSG_name__ =>.Wladimir Palant
G2 - GCE: Preference [User Data\Default] [ifkilpagenhmlcbkddcjbjjaebhfpkbb] Blog
G2 - GCE: Preference [User Data\Default] [lbdocnmjibghlmolimakffcibmehpfkm] Island
G2 - GCE: Preference [User Data\Default] [ldibmiofagdkgiphkcokpooepankmacl] Turbo.net Extension
G2 - GCE: Preference [User Data\Default] [nhfpgmpjeklikbbndmimokhfkhchhbao] story teller
G2 - GCE: Preference [User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] =>.Superfluous.Orphan
G2 - GCE: Preference [User Data\Default] [oihockaajhifkhmkfkdneakmpblfnpgm] Tic Tac Toe
G2 - GCE: Preference [User Data\Default] [pgjjikdiikihdfpoppgaidccahalehjh] Speedtest

---\\ Firefox, Plugins,Demarrage,Recherche,Extensions (4) - 1s
P2 - EXT FILE: (.MEGA - Secure Cloud Storage.) -- C:\Documents and Settings\laidani\Application Data\Mozilla\Firefox\Profiles\sr807kmy.default\extensions\firefox@mega.co.nz.xpi =>.MEGA
P2 - EXT FILE: (.Aaron Boodman; http://youngpup.net/ - A User Script Manager for Firefox.) -- C:\Documents and Settings\laidani\Application Data\Mozilla\Firefox\Profiles\sr807kmy.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi =>.Aaron Boodman; http://youngpup.net/
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Adobe Systems Incorporated.) -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32_21_0_0_197.dll =>.Adobe Systems Incorporated
C:\Documents and Settings\laidani\Application Data\Mozilla\Firefox\Profiles\sr807kmy.default\MyScrapNook_12 =>.Superfluous.MindSpark

---\\ Internet Explorer,Démarrage,Recherche,URLSearchHook (7) - 0s
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/ =>.Microsoft Corporation
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/ =>.Microsoft Corporation
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/ =>.Microsoft Corporation
R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphan =>.Microsoft Internet Explorer

---\\ Internet Explorer,Proxy Management (5) - 0s
R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:8888; https=127.0.0.1:8888 =>Hijacker.Proxy
R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 1
R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll

---\\ Internet Explorer,IniFiles, Autoloading programs (3) - 0s
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe (.Microsoft Corporation.) =>.Microsoft Corporation
F2 - REG:system.ini: Shell=C:\WINDOWS\explorer.exe (.Microsoft Corporation.) =>.Microsoft Corporation
F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"

---\\ Etude du fichier hosts (1) - 0s
~ Le fichier hôte est sain (The hosts file is clean) (46)

---\\ Browser Helper Object de navigateur (BHO) (3) - 0s
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} . (.Internet Download Manager, Tonec Inc. - IDM Browser Helper Object.) -- C:\Program Files\Internet Download Manager\IDMIECC.dll =>.Tonec Inc.®
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre1.8.0_111\bin\ssv.dll =>.Oracle America, Inc.®
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre1.8.0_111\bin\jp2ssv.dll =>.Oracle America, Inc.®

---\\ Raccourcis Global Startup (122) - 14s
O4 - GS\Desktop [Administrateur]: Ava Find.lnk . (...) C:\Documents and Settings\laidani\Application Data\Microsoft\Installer\{909577E9-BFB5-48E2-8237-71DCA373F147}\_18be6784.exe
O4 - GS\Desktop [Administrateur]: Core FTP LE.lnk . (.Core FTP - Core FTP client.) C:\Program Files\CoreFTP\coreftp.exe =>.Core FTP
O4 - GS\Desktop [Administrateur]: EveryonePiano.lnk . (.EveryonePiano Inc. - EveryonePiano.com.) C:\Program Files\EveryonePiano\EveryonePiano.exe {7C0834FEA1FB81534201B9F2C02516B1}
O4 - GS\Desktop [Administrateur]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\Desktop [Administrateur]: PhotoScape.lnk . (.Copyright (C) 2005 - PhotoScape.) C:\Program Files\PhotoScape\PhotoScape.exe =>.Mooii Tech®
O4 - GS\Desktop [Administrateur]: PHP Expert Editor.lnk . (.Ankord Development Group - PHP Expert Editor.) C:\Program Files\PHP Expert Editor 4.3\phpxedit.exe
O4 - GS\Desktop [Administrateur]: Pocket Tanks.lnk . (.Blitwise Productions, LLC - Pocket Tanks Loader.) C:\Program Files\Pocket Tanks\ptloader.exe {0096CE1C243B4AD34993778A34DE938E22}
O4 - GS\Desktop [Administrateur]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Documents and Settings\laidani\Application Data\ZHP\ZHPDiag3.exe =>.Nicolas Coolman
O4 - GS\Quicklaunch [Administrateur]: Démarrer Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files\Internet Explorer\IEXPLORE.EXE =>.Microsoft Corporation
O4 - GS\Quicklaunch [Administrateur]: EveryonePiano.lnk . (.EveryonePiano Inc. - EveryonePiano.com.) C:\Program Files\EveryonePiano\EveryonePiano.exe {7C0834FEA1FB81534201B9F2C02516B1}
O4 - GS\Quicklaunch [Administrateur]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\Quicklaunch [Administrateur]: Lecteur Windows Media.lnk . (.Microsoft Corporation - Lecteur Windows Media.) C:\Program Files\Windows Media Player\wmplayer.exe /prefetch:1 =>.Microsoft Corporation
O4 - GS\Quicklaunch [Administrateur]: MAMP.lnk . (.appsolute Gmbh - MAMP.) G:\MAMP\MAMP.exe =>.appsolute Gmbh
O4 - GS\Quicklaunch [Administrateur]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O4 - GS\Quicklaunch [Administrateur]: PhotoScape.lnk . (.Copyright (C) 2005 - PhotoScape.) C:\Program Files\PhotoScape\PhotoScape.exe =>.Mooii Tech®
O4 - GS\Quicklaunch [Administrateur]: PHP Expert Editor.lnk . (.Ankord Development Group - PHP Expert Editor.) C:\Program Files\PHP Expert Editor 4.3\phpxedit.exe
O4 - GS\Programs [Administrateur]: Assistance à distance.lnk . (.Microsoft Corporation - Assistance à distance Microsoft.) C:\WINDOWS\system32\rcimlby.exe -LaunchRA =>.Microsoft Corporation
O4 - GS\Programs [Administrateur]: Ava Find.lnk . (...) C:\Documents and Settings\laidani\Application Data\Microsoft\Installer\{909577E9-BFB5-48E2-8237-71DCA373F147}\_4ae13d6c.exe
O4 - GS\Programs [Administrateur]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files\Internet Explorer\IEXPLORE.EXE =>.Microsoft Corporation
O4 - GS\Programs [Administrateur]: Lecteur Windows Media.lnk . (.Microsoft Corporation - Lecteur Windows Media.) C:\Program Files\Windows Media Player\wmplayer.exe /prefetch:1 =>.Microsoft Corporation
O4 - GS\Programs [Administrateur]: Outlook Express.lnk . (.Microsoft Corporation - Outlook Express.) C:\Program Files\Outlook Express\msimn.exe =>.Microsoft Corporation
O4 - GS\Desktop [ASPNET]: Ava Find.lnk . (...) C:\Documents and Settings\laidani\Application Data\Microsoft\Installer\{909577E9-BFB5-48E2-8237-71DCA373F147}\_18be6784.exe
O4 - GS\Desktop [ASPNET]: Core FTP LE.lnk . (.Core FTP - Core FTP client.) C:\Program Files\CoreFTP\coreftp.exe =>.Core FTP
O4 - GS\Desktop [ASPNET]: EveryonePiano.lnk . (.EveryonePiano Inc. - EveryonePiano.com.) C:\Program Files\EveryonePiano\EveryonePiano.exe {7C0834FEA1FB81534201B9F2C02516B1}
O4 - GS\Desktop [ASPNET]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\Desktop [ASPNET]: PhotoScape.lnk . (.Copyright (C) 2005 - PhotoScape.) C:\Program Files\PhotoScape\PhotoScape.exe =>.Mooii Tech®
O4 - GS\Desktop [ASPNET]: PHP Expert Editor.lnk . (.Ankord Development Group - PHP Expert Editor.) C:\Program Files\PHP Expert Editor 4.3\phpxedit.exe
O4 - GS\Desktop [ASPNET]: Pocket Tanks.lnk . (.Blitwise Productions, LLC - Pocket Tanks Loader.) C:\Program Files\Pocket Tanks\ptloader.exe {0096CE1C243B4AD34993778A34DE938E22}
O4 - GS\Desktop [ASPNET]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Documents and Settings\laidani\Application Data\ZHP\ZHPDiag3.exe =>.Nicolas Coolman
O4 - GS\Quicklaunch [ASPNET]: Démarrer Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files\Internet Explorer\IEXPLORE.EXE =>.Microsoft Corporation
O4 - GS\Quicklaunch [ASPNET]: EveryonePiano.lnk . (.EveryonePiano Inc. - EveryonePiano.com.) C:\Program Files\EveryonePiano\EveryonePiano.exe {7C0834FEA1FB81534201B9F2C02516B1}
O4 - GS\Quicklaunch [ASPNET]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\Quicklaunch [ASPNET]: Lecteur Windows Media.lnk . (.Microsoft Corporation - Lecteur Windows Media.) C:\Program Files\Windows Media Player\wmplayer.exe /prefetch:1 =>.Microsoft Corporation
O4 - GS\Quicklaunch [ASPNET]: MAMP.lnk . (.appsolute Gmbh - MAMP.) G:\MAMP\MAMP.exe =>.appsolute Gmbh
O4 - GS\Quicklaunch [ASPNET]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O4 - GS\Quicklaunch [ASPNET]: PhotoScape.lnk . (.Copyright (C) 2005 - PhotoScape.) C:\Program Files\PhotoScape\PhotoScape.exe =>.Mooii Tech®
O4 - GS\Quicklaunch [ASPNET]: PHP Expert Editor.lnk . (.Ankord Development Group - PHP Expert Editor.) C:\Program Files\PHP Expert Editor 4.3\phpxedit.exe
O4 - GS\Programs [ASPNET]: Assistance à distance.lnk . (.Microsoft Corporation - Assistance à distance Microsoft.) C:\WINDOWS\system32\rcimlby.exe -LaunchRA =>.Microsoft Corporation
O4 - GS\Programs [ASPNET]: Ava Find.lnk . (...) C:\Documents and Settings\laidani\Application Data\Microsoft\Installer\{909577E9-BFB5-48E2-8237-71DCA373F147}\_4ae13d6c.exe
O4 - GS\Programs [ASPNET]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files\Internet Explorer\IEXPLORE.EXE =>.Microsoft Corporation
O4 - GS\Programs [ASPNET]: Lecteur Windows Media.lnk . (.Microsoft Corporation - Lecteur Windows Media.) C:\Program Files\Windows Media Player\wmplayer.exe /prefetch:1 =>.Microsoft Corporation
O4 - GS\Programs [ASPNET]: Outlook Express.lnk . (.Microsoft Corporation - Outlook Express.) C:\Program Files\Outlook Express\msimn.exe =>.Microsoft Corporation
O4 - GS\Desktop [HelpAssistant]: Ava Find.lnk . (...) C:\Documents and Settings\laidani\Application Data\Microsoft\Installer\{909577E9-BFB5-48E2-8237-71DCA373F147}\_18be6784.exe
O4 - GS\Desktop [HelpAssistant]: Core FTP LE.lnk . (.Core FTP - Core FTP client.) C:\Program Files\CoreFTP\coreftp.exe =>.Core FTP
O4 - GS\Desktop [HelpAssistant]: EveryonePiano.lnk . (.EveryonePiano Inc. - EveryonePiano.com.) C:\Program Files\EveryonePiano\EveryonePiano.exe {7C0834FEA1FB81534201B9F2C02516B1}
O4 - GS\Desktop [HelpAssistant]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\Desktop [HelpAssistant]: PhotoScape.lnk . (.Copyright (C) 2005 - PhotoScape.) C:\Program Files\PhotoScape\PhotoScape.exe =>.Mooii Tech®
O4 - GS\Desktop [HelpAssistant]: PHP Expert Editor.lnk . (.Ankord Development Group - PHP Expert Editor.) C:\Program Files\PHP Expert Editor 4.3\phpxedit.exe
O4 - GS\Desktop [HelpAssistant]: Pocket Tanks.lnk . (.Blitwise Productions, LLC - Pocket Tanks Loader.) C:\Program Files\Pocket Tanks\ptloader.exe {0096CE1C243B4AD34993778A34DE938E22}
O4 - GS\Desktop [HelpAssistant]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Documents and Settings\laidani\Application Data\ZHP\ZHPDiag3.exe =>.Nicolas Coolman
O4 - GS\Quicklaunch [HelpAssistant]: Démarrer Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files\Internet Explorer\IEXPLORE.EXE =>.Microsoft Corporation
O4 - GS\Quicklaunch [HelpAssistant]: EveryonePiano.lnk . (.EveryonePiano Inc. - EveryonePiano.com.) C:\Program Files\EveryonePiano\EveryonePiano.exe {7C0834FEA1FB81534201B9F2C02516B1}
O4 - GS\Quicklaunch [HelpAssistant]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\Quicklaunch [HelpAssistant]: Lecteur Windows Media.lnk . (.Microsoft Corporation - Lecteur Windows Media.) C:\Program Files\Windows Media Player\wmplayer.exe /prefetch:1 =>.Microsoft Corporation
O4 - GS\Quicklaunch [HelpAssistant]: MAMP.lnk . (.appsolute Gmbh - MAMP.) G:\MAMP\MAMP.exe =>.appsolute Gmbh
O4 - GS\Quicklaunch [HelpAssistant]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O4 - GS\Quicklaunch [HelpAssistant]: PhotoScape.lnk . (.Copyright (C) 2005 - PhotoScape.) C:\Program Files\PhotoScape\PhotoScape.exe =>.Mooii Tech®
O4 - GS\Quicklaunch [HelpAssistant]: PHP Expert Editor.lnk . (.Ankord Development Group - PHP Expert Editor.) C:\Program Files\PHP Expert Editor 4.3\phpxedit.exe
O4 - GS\Programs [HelpAssistant]: Assistance à distance.lnk . (.Microsoft Corporation - Assistance à distance Microsoft.) C:\WINDOWS\system32\rcimlby.exe -LaunchRA =>.Microsoft Corporation
O4 - GS\Programs [HelpAssistant]: Ava Find.lnk . (...) C:\Documents and Settings\laidani\Application Data\Microsoft\Installer\{909577E9-BFB5-48E2-8237-71DCA373F147}\_4ae13d6c.exe
O4 - GS\Programs [HelpAssistant]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files\Internet Explorer\IEXPLORE.EXE =>.Microsoft Corporation
O4 - GS\Programs [HelpAssistant]: Lecteur Windows Media.lnk . (.Microsoft Corporation - Lecteur Windows Media.) C:\Program Files\Windows Media Player\wmplayer.exe /prefetch:1 =>.Microsoft Corporation
O4 - GS\Programs [HelpAssistant]: Outlook Express.lnk . (.Microsoft Corporation - Outlook Express.) C:\Program Files\Outlook Express\msimn.exe =>.Microsoft Corporation
O4 - GS\Desktop [laidani]: Ava Find.lnk . (...) C:\Documents and Settings\laidani\Application Data\Microsoft\Installer\{909577E9-BFB5-48E2-8237-71DCA373F147}\_18be6784.exe
O4 - GS\Desktop [laidani]: Core FTP LE.lnk . (.Core FTP - Core FTP client.) C:\Program Files\CoreFTP\coreftp.exe =>.Core FTP
O4 - GS\Desktop [laidani]: EveryonePiano.lnk . (.EveryonePiano Inc. - EveryonePiano.com.) C:\Program Files\EveryonePiano\EveryonePiano.exe {7C0834FEA1FB81534201B9F2C02516B1}
O4 - GS\Desktop [laidani]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\Desktop [laidani]: PhotoScape.lnk . (.Copyright (C) 2005 - PhotoScape.) C:\Program Files\PhotoScape\PhotoScape.exe =>.Mooii Tech®
O4 - GS\Desktop [laidani]: PHP Expert Editor.lnk . (.Ankord Development Group - PHP Expert Editor.) C:\Program Files\PHP Expert Editor 4.3\phpxedit.exe
O4 - GS\Desktop [laidani]: Pocket Tanks.lnk . (.Blitwise Productions, LLC - Pocket Tanks Loader.) C:\Program Files\Pocket Tanks\ptloader.exe {0096CE1C243B4AD34993778A34DE938E22}
O4 - GS\Desktop [laidani]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Documents and Settings\laidani\Application Data\ZHP\ZHPDiag3.exe =>.Nicolas Coolman
O4 - GS\Quicklaunch [laidani]: Démarrer Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files\Internet Explorer\IEXPLORE.EXE =>.Microsoft Corporation
O4 - GS\Quicklaunch [laidani]: EveryonePiano.lnk . (.EveryonePiano Inc. - EveryonePiano.com.) C:\Program Files\EveryonePiano\EveryonePiano.exe {7C0834FEA1FB81534201B9F2C02516B1}
O4 - GS\Quicklaunch [laidani]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\Quicklaunch [laidani]: Lecteur Windows Media.lnk . (.Microsoft Corporation - Lecteur Windows Media.) C:\Program Files\Windows Media Player\wmplayer.exe /prefetch:1 =>.Microsoft Corporation
O4 - GS\Quicklaunch [laidani]: MAMP.lnk . (.appsolute Gmbh - MAMP.) G:\MAMP\MAMP.exe =>.appsolute Gmbh
O4 - GS\Quicklaunch [laidani]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O4 - GS\Quicklaunch [laidani]: PhotoScape.lnk . (.Copyright (C) 2005 - PhotoScape.) C:\Program Files\PhotoScape\PhotoScape.exe =>.Mooii Tech®
O4 - GS\Quicklaunch [laidani]: PHP Expert Editor.lnk . (.Ankord Development Group - PHP Expert Editor.) C:\Program Files\PHP Expert Editor 4.3\phpxedit.exe
O4 - GS\Programs [laidani]: Assistance à distance.lnk . (.Microsoft Corporation - Assistance à distance Microsoft.) C:\WINDOWS\system32\rcimlby.exe -LaunchRA =>.Microsoft Corporation
O4 - GS\Programs [laidani]: Ava Find.lnk . (...) C:\Documents and Settings\laidani\Application Data\Microsoft\Installer\{909577E9-BFB5-48E2-8237-71DCA373F147}\_4ae13d6c.exe
O4 - GS\Programs [laidani]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files\Internet Explorer\IEXPLORE.EXE =>.Microsoft Corporation
O4 - GS\Programs [laidani]: Lecteur Windows Media.lnk . (.Microsoft Corporation - Lecteur Windows Media.) C:\Program Files\Windows Media Player\wmplayer.exe /prefetch:1 =>.Microsoft Corporation
O4 - GS\Programs [laidani]: Outlook Express.lnk . (.Microsoft Corporation - Outlook Express.) C:\Program Files\Outlook Express\msimn.exe =>.Microsoft Corporation
O4 - GS\Desktop [SUPPORT_388945a0]: Ava Find.lnk . (...) C:\Documents and Settings\laidani\Application Data\Microsoft\Installer\{909577E9-BFB5-48E2-8237-71DCA373F147}\_18be6784.exe
O4 - GS\Desktop [SUPPORT_388945a0]: Core FTP LE.lnk . (.Core FTP - Core FTP client.) C:\Program Files\CoreFTP\coreftp.exe =>.Core FTP
O4 - GS\Desktop [SUPPORT_388945a0]: EveryonePiano.lnk . (.EveryonePiano Inc. - EveryonePiano.com.) C:\Program Files\EveryonePiano\EveryonePiano.exe {7C0834FEA1FB81534201B9F2C02516B1}
O4 - GS\Desktop [SUPPORT_388945a0]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\Desktop [SUPPORT_388945a0]: PhotoScape.lnk . (.Copyright (C) 2005 - PhotoScape.) C:\Program Files\PhotoScape\PhotoScape.exe =>.Mooii Tech®
O4 - GS\Desktop [SUPPORT_388945a0]: PHP Expert Editor.lnk . (.Ankord Development Group - PHP Expert Editor.) C:\Program Files\PHP Expert Editor 4.3\phpxedit.exe
O4 - GS\Desktop [SUPPORT_388945a0]: Pocket Tanks.lnk . (.Blitwise Productions, LLC - Pocket Tanks Loader.) C:\Program Files\Pocket Tanks\ptloader.exe {0096CE1C243B4AD34993778A34DE938E22}
O4 - GS\Desktop [SUPPORT_388945a0]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Documents and Settings\laidani\Application Data\ZHP\ZHPDiag3.exe =>.Nicolas Coolman
O4 - GS\Quicklaunch [SUPPORT_388945a0]: Démarrer Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files\Internet Explorer\IEXPLORE.EXE =>.Microsoft Corporation
O4 - GS\Quicklaunch [SUPPORT_388945a0]: EveryonePiano.lnk . (.EveryonePiano Inc. - EveryonePiano.com.) C:\Program Files\EveryonePiano\EveryonePiano.exe {7C0834FEA1FB81534201B9F2C02516B1}
O4 - GS\Quicklaunch [SUPPORT_388945a0]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\Quicklaunch [SUPPORT_388945a0]: Lecteur Windows Media.lnk . (.Microsoft Corporation - Lecteur Windows Media.) C:\Program Files\Windows Media Player\wmplayer.exe /prefetch:1 =>.Microsoft Corporation
O4 - GS\Quicklaunch [SUPPORT_388945a0]: MAMP.lnk . (.appsolute Gmbh - MAMP.) G:\MAMP\MAMP.exe =>.appsolute Gmbh
O4 - GS\Quicklaunch [SUPPORT_388945a0]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O4 - GS\Quicklaunch [SUPPORT_388945a0]: PhotoScape.lnk . (.Copyright (C) 2005 - PhotoScape.) C:\Program Files\PhotoScape\PhotoScape.exe =>.Mooii Tech®
O4 - GS\Quicklaunch [SUPPORT_388945a0]: PHP Expert Editor.lnk . (.Ankord Development Group - PHP Expert Editor.) C:\Program Files\PHP Expert Editor 4.3\phpxedit.exe
O4 - GS\Programs [SUPPORT_388945a0]: Assistance à distance.lnk . (.Microsoft Corporation - Assistance à distance Microsoft.) C:\WINDOWS\system32\rcimlby.exe -LaunchRA =>.Microsoft Corporation
O4 - GS\Programs [SUPPORT_388945a0]: Ava Find.lnk . (...) C:\Documents and Settings\laidani\Application Data\Microsoft\Installer\{909577E9-BFB5-48E2-8237-71DCA373F147}\_4ae13d6c.exe
O4 - GS\Programs [SUPPORT_388945a0]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files\Internet Explorer\IEXPLORE.EXE =>.Microsoft Corporation
O4 - GS\Programs [SUPPORT_388945a0]: Lecteur Windows Media.lnk . (.Microsoft Corporation - Lecteur Windows Media.) C:\Program Files\Windows Media Player\wmplayer.exe /prefetch:1 =>.Microsoft Corporation
O4 - GS\Programs [SUPPORT_388945a0]: Outlook Express.lnk . (.Microsoft Corporation - Outlook Express.) C:\Program Files\Outlook Express\msimn.exe =>.Microsoft Corporation
O4 - GS\CommonDesktop [Public]: FastStone Capture.lnk . (.FastStone Soft - FastStone Capture.) C:\Program Files\FastStone Capture\FSCapture.exe =>.FastStone Soft
O4 - GS\CommonDesktop [Public]: MAMP.lnk . (.appsolute Gmbh - MAMP.) G:\MAMP\MAMP.exe =>.appsolute Gmbh
O4 - GS\CommonDesktop [Public]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O4 - GS\CommonDesktop [Public]: SDFormatter.lnk . (.TRENDY Corporation - Format Tool for SD Card [Normal Area Only].) C:\Program Files\SDA\SD Formatter\SDFormatter.exe =>.TRENDY Co.®
O4 - GS\CommonDesktop [Public]: VLC media player.lnk . (...) C:\Program Files\VideoLAN\VLC\vlc.exe =>.VideoLan Team
O4 - GS\Programs [Public]: Assistance à distance.lnk . (.Microsoft Corporation - Assistance à distance Microsoft.) C:\WINDOWS\system32\rcimlby.exe -LaunchRA =>.Microsoft Corporation
O4 - GS\Programs [Public]: Ava Find.lnk . (...) C:\Documents and Settings\laidani\Application Data\Microsoft\Installer\{909577E9-BFB5-48E2-8237-71DCA373F147}\_4ae13d6c.exe
O4 - GS\Programs [Public]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files\Internet Explorer\IEXPLORE.EXE =>.Microsoft Corporation
O4 - GS\Programs [Public]: Lecteur Windows Media.lnk . (.Microsoft Corporation - Lecteur Windows Media.) C:\Program Files\Windows Media Player\wmplayer.exe /prefetch:1 =>.Microsoft Corporation
O4 - GS\Programs [Public]: Outlook Express.lnk . (.Microsoft Corporation - Outlook Express.) C:\Program Files\Outlook Express\msimn.exe =>.Microsoft Corporation
O4 - GS\ProgramsCommon [Public]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\ProgramsCommon [Public]: Microsoft Security Essentials.lnk . (.Microsoft Corporation - Microsoft Security Client User Interface.) C:\Program Files\Microsoft Security Client\msseces.exe =>.Microsoft Corporation®
O4 - GS\ProgramsCommon [Public]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O4 - GS\ProgramsCommon [Public]: MSN.lnk . (.Microsoft Corporation - Win32 Cabinet Self-Extractor.) C:\Program Files\MSN\MSNCoreFiles\Install\msnsusii.exe =>.Microsoft Corporation
O4 - GS\ProgramsCommon [Public]: Screen GIF.lnk . (...) C:\Program Files\David Esperalta\ScreenGif\ScreenGif.exe
O4 - GS\ProgramsCommon [Public]: Windows Messenger.lnk . (.Microsoft Corporation - Windows Messenger.) C:\Program Files\Messenger\msmsgs.exe =>.Microsoft Corporation
O4 - GS\ProgramsCommon [Public]: Windows Movie Maker.lnk . (.Microsoft Corporation - Windows Movie Maker.) C:\Program Files\Movie Maker\moviemk.exe =>.Microsoft Corporation

---\\ Modification Domaine/Adresses DNS (2) - 0s
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.8.1 192.168.8.1 =>.Local IP Adress
O17 - HKLM\System\CCS\Services\Tcpip\..\{200C9E82-695B-44B2-A5DA-A69539277530}: DhcpNameServer = 192.168.8.1 192.168.8.1 =>.Local IP Adress

---\\ Protocole additionnel (31) - 1s
O18 - Handler: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\WINDOWS\system32\mshtml.dll =>.Microsoft Corporation
O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\WINDOWS\system32\msvidctl.dll =>.Microsoft Corporation
O18 - Handler: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\WINDOWS\system32\itss.dll =>.Microsoft Corporation
O18 - Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\WINDOWS\system32\mshtml.dll =>.Microsoft Corporation
O18 - Handler: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\WINDOWS\system32\mshtml.dll =>.Microsoft Corporation
O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API.) -- C:\WINDOWS\system32\inetcomm.dll =>.Microsoft Corporation
O18 - Handler: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\WINDOWS\system32\itss.dll =>.Microsoft Corporation
O18 - Handler: mso-offdap - {3D9F03FA-7A94-11D3-BE81-0050048385D1} . (.Microsoft Corporation - Microsoft Office XP Web Components.) -- C:\Program Files\Fichiers communs\Microsoft Shared\Web Components\10\OWC10.DLL =>.Microsoft Corporation®
O18 - Handler: mso-offdap11 - {32505114-5902-49B2-880A-1F7738E5A384} . (.Microsoft Corporation - Microsoft Office Web Components 2003.) -- C:\Program Files\Fichiers communs\Microsoft Shared\Web Components\11\OWC11.DLL =>.Microsoft Corporation®
O18 - Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\WINDOWS\system32\mshtml.dll =>.Microsoft Corporation
O18 - Handler: sysimage - {76E67A63-06E9-11D2-A840-006008059382} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\WINDOWS\system32\mshtml.dll =>.Microsoft Corporation
O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\WINDOWS\system32\msvidctl.dll =>.Microsoft Corporation
O18 - Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\WINDOWS\system32\mshtml.dll =>.Microsoft Corporation
O18 - Handler: wia - {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} . (.Microsoft Corporation - WIA Scripting Layer.) -- C:\WINDOWS\system32\wiascr.dll =>.Microsoft Corporation
O18 - Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS\system32\mscoree.dll =>.Microsoft Corporation®
O18 - Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS\system32\mscoree.dll =>.Microsoft Corporation®
O18 - Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS\system32\mscoree.dll =>.Microsoft Corporation®
O18 - Filter: Class Install Handler - {32B533BB-EDAE-11d0-BD5A-00AA00B92AF1} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation
O18 - Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation
O18 - Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation
O18 - Filter: lzdhtml - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation
O18 - Filter: text/webviewhtml - {733AC4CB-F1A4-11d0-B951-00A0C90312E1} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\shell32.dll =>.Microsoft Corporation
O18 - Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE11\MSOXMLMF.DLL =>.Microsoft Corporation®

---\\ Logiciels installés (45) - 17s
O42 - Logiciel: Adobe Flash Player 11 ActiveX & Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX =>.Adobe Systems Incorporated®
O42 - Logiciel: Adobe Flash Player 21 NPAPI - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player NPAPI =>.Adobe Systems Incorporated®
O42 - Logiciel: Adobe Shockwave Player + Authorware Web Player - (.Adobe Systems, Inc..) [HKLM] -- Adobe Shockwave Player + Authorware Web Player =>.Adobe Systems, Inc.
O42 - Logiciel: Ava Find - (.Think Less Do More.) [HKLM] -- {909577E9-BFB5-48E2-8237-71DCA373F147}
O42 - Logiciel: Boost mode manager - (.RSUPPORT.) [HKLM] -- {17154B8D-5829-4ED5-A120-2E03DC6FB0C6} =>.RSUPPORT
O42 - Logiciel: ByteFence Anti-Malware - (.Byte Technologies LLC.) [HKLM] -- ByteFence =>.Byte Technologies LLC
O42 - Logiciel: Charles 3.6.3 - (.XK72 Ltd.) [HKLM] -- {98CD205B-7280-448E-AF5D-D6964A9A58A6} =>.XK72 Ltd
O42 - Logiciel: Core FTP LE - (..) [HKLM] -- CoreFTP
O42 - Logiciel: DriverPack Notifier - (.DriverPack Solution.) [HKLM] -- DriverPack Notifier =>.DriverPack Solution
O42 - Logiciel: DriverPack Solution Updater - (.DriverPack Solution.) [HKCU] -- DRPSu Updater =>.Kuzyakov Artur Vyacheslavovich IP®
O42 - Logiciel: Electronic Piano 2.6 - (.Maurيcio Antunes Oliveira.) [HKLM] -- Electronic Piano 2.6_is1
O42 - Logiciel: EveryonePiano 2.0 - (.EveryonePiano.com.) [HKLM] -- EveryonePiano_is1
O42 - Logiciel: FastStone Capture 8.4 - (.FastStone Soft.) [HKLM] -- FastStone Capture =>.FastStone Soft
O42 - Logiciel: FormatFactory 3.8.0.0 - (.Free Time.) [HKLM] -- FormatFactory =>.Free Time
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM] -- Google Chrome =>.Google Inc®
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {60EC980A-BDA2-4CB6-A427-B07A5498B4CA} =>.Google Inc.
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} =>Heuristic.Suspect
O42 - Logiciel: Intel(R) Graphics Media Accelerator Driver - (.Intel Corporation.) [HKLM] -- {F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA} =>.Intel Corporation®
O42 - Logiciel: Internet Download Manager - (..) [HKLM] -- Internet Download Manager =>.Tonec Inc.®
O42 - Logiciel: Java 8 Update 111 - (.Oracle Corporation.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F32180111F0} =>.Oracle Corporation
O42 - Logiciel: Java Auto Updater - (.Oracle Corporation.) [HKLM] -- {4A03706F-666A-4037-7777-5F2748764D10} =>.Oracle Corporation
O42 - Logiciel: Lagarith Lossless Codec (1.3.27) - (..) [HKLM] -- {F59AC46C-10C3-4023-882C-4212A92283B3}_is1
O42 - Logiciel: MAMP & MAMP PRO version 3.2.0 - (.appsolute Gmbh.) [HKLM] -- {A62E77D4-9B74-4CA0-A254-EFE711F7A298}_is1 =>.appsolute GmbH®
O42 - Logiciel: Microsoft Application Error Reporting - (.Microsoft Corporation.) [HKLM] -- {95120000-00B9-0409-0000-0000000FF1CE} =>.Microsoft Corporation
O42 - Logiciel: Microsoft Security Client - (.Microsoft Corporation.) [HKLM] -- {0CD47142-BA4F-46B0-AA92-2675864928B8} =>.Microsoft Corporation
O42 - Logiciel: Microsoft Security Essentials - (.Microsoft Corporation.) [HKLM] -- Microsoft Security Client =>.Microsoft Corporation®
O42 - Logiciel: Mozilla Firefox 52.0.1 (x86 en-US) - (.Mozilla.) [HKLM] -- Mozilla Firefox 52.0.1 (x86 en-US) =>.Mozilla Corporation®
O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM] -- MozillaMaintenanceService =>.Mozilla
O42 - Logiciel: Package de pilotes Windows - MediaTek, Inc. (rt2870) Net (08/11/2016 5.01. - (.MediaTek, Inc..) [HKLM] -- D5817F343E835652025EDB0070A8608B4788E04C {7994EBFBBB0DCCE61C0A286CFEA1A439}
O42 - Logiciel: PhotoScape - (.Mooii Tech Software.) [HKLM] -- PhotoScape =>.Mooii Tech Software
O42 - Logiciel: PHP Expert Editor 4.3 - (.Ankord Development Group.) [HKLM] -- PHPExpertEditor_is1
O42 - Logiciel: Pocket Tanks v1.6 - (.Blitwise Productions, LLC.) [HKLM] -- Pocket Tanks_is1
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC} =>.Realtek Semiconductor Corp.
O42 - Logiciel: Recover My Files - (.GetData Pty Ltd.) [HKLM] -- Recover My Files v5_is1 =>.GetData Pty Ltd
O42 - Logiciel: Recover My Files - (.GetData Pty Ltd.) [HKLM] -- Recover My Files_is1 =>.GetData Pty Ltd
O42 - Logiciel: Sagem - Utilitaire pour Clé Wi-Fi USB 802.11b - (.Sagem.) [HKLM] -- {FC6B9C7B-09C6-4896-AB0B-C6ECB9F4CA9D} =>.Sagem
O42 - Logiciel: Screen GIF - (.David Esperalta.) [HKLM] -- {459FD9F3-03A9-4732-8ACB-7AC2C9F33EC8}_is1 =>.David Esperalta
O42 - Logiciel: SDFormatter - (.SD Association.) [HKLM] -- {179324FF-7B16-4BA8-9836-055CAAEE4F08} =>.SD Association
O42 - Logiciel: USB Webcam - (.Legitimate.) [HKLM] -- USBWebcam
O42 - Logiciel: Ut Video Codec Suite - (.UMEZAWA Takeshi.) [HKLM] -- utvideo_is1 =>.UMEZAWA Takeshi
O42 - Logiciel: VLC media player 1.1.11 - (.VideoLAN.) [HKLM] -- VLC media player =>.VideoLAN
O42 - Logiciel: WebFldrs XP - (.Microsoft Corporation.) [HKLM] -- {350C940c-3D7C-4EE8-BAA9-00BCB3D54227} =>.Microsoft Corporation
O42 - Logiciel: WinRAR archiver - (.RarLab.) [HKLM] -- WinRAR archiver =>.RarLab
O42 - Logiciel: x264vfw - H.264/MPEG-4 AVC codec (remove only) - (..) [HKLM] -- x264vfw
O42 - Logiciel: Xvid MPEG-4 Video Codec - (..) [HKLM] -- Xvid_is1

---\\ HKCU & HKLM Software Keys (90) - 17s
HKLM\SOFTWARE\8322898 =>.FastStone Soft
HKLM\SOFTWARE\Adobe =>.Adobe
HKLM\SOFTWARE\appsolute =>.Appsolute GmbH
HKLM\SOFTWARE\AviSynth =>.Ben Rudiak-Gold
HKLM\SOFTWARE\Blitwise
HKLM\SOFTWARE\ByteFence =>.Superfluous.ByteFence
HKLM\SOFTWARE\C07ft5Y =>.Total War Game
HKLM\SOFTWARE\Creative Tech =>.Creative Tech
HKLM\SOFTWARE\drpsu =>.Driver PackSolution
HKLM\SOFTWARE\FTPWare
HKLM\SOFTWARE\Gemplus =>.Gemplus
HKLM\SOFTWARE\GNU =>.GNU
HKLM\SOFTWARE\Google =>.Google
HKLM\SOFTWARE\HaaliMkx =>.Haali Media
HKLM\SOFTWARE\INTEL =>.Intel
HKLM\SOFTWARE\Internet Download Manager =>.Tonec Inc
HKLM\SOFTWARE\JavaSoft =>.JavaSoft
HKLM\SOFTWARE\JreMetrics =>.JreMetrics
HKLM\SOFTWARE\KAONMEDIA
HKLM\SOFTWARE\Licenses =>.Microsoft Corporation
HKLM\SOFTWARE\Macromedia =>.Macromedia
HKLM\SOFTWARE\Mooii =>.Mooii
HKLM\SOFTWARE\Mozilla =>.Mozilla
HKLM\SOFTWARE\mozilla.org =>.mozilla.org
HKLM\SOFTWARE\MozillaPlugins =>.MozillaPlugins
HKLM\SOFTWARE\ODBC =>.DB Connectivity Solutions
HKLM\SOFTWARE\ProductName
HKLM\SOFTWARE\Program Groups =>.Program Groups
HKLM\SOFTWARE\RealNetworks =>.RealNetworks
HKLM\SOFTWARE\Realtek =>.Realtek Semiconductor Corp.
HKLM\SOFTWARE\RegisteredApplications =>.Microsoft Corporation
HKLM\SOFTWARE\Schlumberger =>.Schlumberger
HKLM\SOFTWARE\Secure =>.Superfluous.SecurePCCleaner
HKLM\SOFTWARE\Think Less Do More
HKLM\SOFTWARE\USBWebcam"
HKLM\SOFTWARE\VideoLAN =>.VideoLAN
HKLM\SOFTWARE\WIBU-SYSTEMS =>.Wibu-Systems
HKLM\SOFTWARE\Windows 3.1 Migration Status =>.Microsoft Corporation
HKLM\SOFTWARE\Wow6432Node =>.Microsoft Corporation
HKCU\SOFTWARE\3rd Eye Solutions
HKCU\SOFTWARE\7-Zip =>.Igor Pavlov
HKCU\SOFTWARE\AC3Filter =>.Vigovsky Alexander
HKCU\SOFTWARE\Ankord
HKCU\SOFTWARE\Appsolute =>.Appsolute GmbH
HKCU\SOFTWARE\ASProtect =>.ASPack Software
HKCU\SOFTWARE\Atheros =>.Qualcomm Atheros
HKCU\SOFTWARE\Cineform =>.CineForm
HKCU\SOFTWARE\csastats =>Adware.InstallCore
HKCU\SOFTWARE\David Esperalta =>.David Esperalta
HKCU\SOFTWARE\DownloadManager =>.DownloadManager
HKCU\SOFTWARE\drpsu =>.Driver PackSolution
HKCU\SOFTWARE\DRPSu Updater
HKCU\SOFTWARE\Dz4-EvEr
HKCU\SOFTWARE\FastStone
HKCU\SOFTWARE\FreeTime =>.FreeTime Inc
HKCU\SOFTWARE\FTPWare
HKCU\SOFTWARE\Gabest =>.Gabest
HKCU\SOFTWARE\GetData =>.GetData
HKCU\SOFTWARE\GNU =>.GNU
HKCU\SOFTWARE\Google =>.Google
HKCU\SOFTWARE\Haali =>.Haali Media
HKCU\SOFTWARE\Intel =>.Intel
HKCU\SOFTWARE\JavaSoft =>.JavaSoft
HKCU\SOFTWARE\Kernel for Outlook PST Repair DEMO_VERSION123
HKCU\SOFTWARE\Ligos =>.Ligos Corporation
HKCU\SOFTWARE\Local AppWizard-Generated Applications =>.ZWCAD
HKCU\SOFTWARE\LSoft Technologies =>.LSoft Technologies
HKCU\SOFTWARE\Macromedia =>.Macromedia
HKCU\SOFTWARE\MediaInfo =>.Jérôme Martinez
HKCU\SOFTWARE\Mooii =>.Mooii
HKCU\SOFTWARE\Mozilla =>.Mozilla
HKCU\SOFTWARE\MozillaPlugins =>.MozillaPlugins
HKCU\SOFTWARE\Netscape =>.Netscape
HKCU\SOFTWARE\Neuber GbR
HKCU\SOFTWARE\ODBC =>.DB Connectivity Solutions
HKCU\SOFTWARE\ProductSetup =>Adware.InstallCore
HKCU\SOFTWARE\RealNetworks =>.RealNetworks
HKCU\SOFTWARE\Realtek =>.Realtek Semiconductor Corp.
HKCU\SOFTWARE\RSUPPORT =>.RSUPPORT
HKCU\SOFTWARE\SamLab.ws
HKCU\SOFTWARE\SAMP
HKCU\SOFTWARE\Think Less Do More
HKCU\SOFTWARE\undefined =>.Superfluous.Downloader
HKCU\SOFTWARE\Ut Video Codec Suite
HKCU\SOFTWARE\VB and VBA Program Settings =>.Microsoft Corporation
HKCU\SOFTWARE\WinRAR =>.WinRAR
HKCU\SOFTWARE\WinRAR SFX =>.RarLab
HKCU\SOFTWARE\XK72 Ltd =>.XK72 Ltd
HKCU\SOFTWARE\ZHP =>.Nicolas Coolman
HKCU\SOFTWARE\س¦سأ³جذٍدٍµ¼ةْ³ةµؤ±¾µطس¦سأ³جذٍ

---\\ Contenu des dossiers Programmes (140) - 9s
O43 - CFD: 22/02/2017 - [] D -- C:\Program Files\Adobe =>.Adobe
O43 - CFD: 22/02/2017 - [] D -- C:\Program Files\AvaFind
O43 - CFD: 18/03/2017 - [] D -- C:\Program Files\ByteFence =>.Superfluous.ByteFence
O43 - CFD: 05/03/2017 - [] D -- C:\Program Files\Charles
O43 - CFD: 18/03/2017 - [] D -- C:\Program Files\CodeMeter =>.Legitimate
O43 - CFD: 22/02/2017 - [0] D -- C:\Program Files\ComPlus Applications =>.Microsoft Corporation
O43 - CFD: 20/03/2017 - [] D -- C:\Program Files\CoreFTP
O43 - CFD: 29/03/2017 - [] D -- C:\Program Files\David Esperalta =>.David Esperalta
O43 - CFD: 27/02/2017 - [] D -- C:\Program Files\DIFX =>.Microsoft Corporation
O43 - CFD: 27/02/2017 - [] D -- C:\Program Files\DriverPack Notifier =>.DriverPack Solution
O43 - CFD: 07/03/2017 - [] D -- C:\Program Files\Electronic Piano 2.6
O43 - CFD: 26/03/2017 - [] D -- C:\Program Files\EveryonePiano {7C0834FEA1FB81534201B9F2C02516B1}
O43 - CFD: 26/02/2017 - [] D -- C:\Program Files\FastStone Capture =>.FastStone Soft
O43 - CFD: 05/03/2017 - [] D -- C:\Program Files\Fichiers communs =>.Microsoft Corporation
O43 - CFD: 18/03/2017 - [] D -- C:\Program Files\FileZilla FTP Client =>.Tim Kosse
O43 - CFD: 02/03/2017 - [] D -- C:\Program Files\FormatFactory =>.FormatFactory
O43 - CFD: 18/03/2017 - [] D -- C:\Program Files\GetData =>.GetData Pty Ltd®
O43 - CFD: 04/03/2017 - [] D -- C:\Program Files\Google =>.Google Inc®
O43 - CFD: 22/02/2017 - [] D -- C:\Program Files\GUM128.tmp =>.Google Inc®
O43 - CFD: 27/02/2017 - [] HD -- C:\Program Files\InstallShield Installation Information =>.InstallShield Software
O43 - CFD: 22/02/2017 - [] D -- C:\Program Files\Intel =>.Intel Corporation
O43 - CFD: 23/03/2017 - [] D -- C:\Program Files\Internet Download Manager =>.Tonec Inc
O43 - CFD: 22/02/2017 - [] D -- C:\Program Files\Internet Explorer =>.Microsoft Corporation
O43 - CFD: 05/03/2017 - [] D -- C:\Program Files\Java =>.Oracle
O43 - CFD: 20/03/2017 - [] D -- C:\Program Files\Kernel for Outlook PST Repair - Evaluation Version {112123367A63FFD214397D34199FF4D6A7C6}
O43 - CFD: 18/03/2017 - [] D -- C:\Program Files\KKE+
O43 - CFD: 22/02/2017 - [] D -- C:\Program Files\Messenger =>.Microsoft Corporation
O43 - CFD: 22/02/2017 - [] D -- C:\Program Files\microsoft frontpage =>.Microsoft Corporation
O43 - CFD: 22/02/2017 - [] D -- C:\Program Files\Microsoft Office =>.Microsoft Corporation
O43 - CFD: 22/02/2017 - [] D -- C:\Program Files\Microsoft Security Client =>.Microsoft Corporation
O43 - CFD: 27/02/2017 - [] D -- C:\Program Files\Microsoft.NET =>.Microsoft Corporation
O43 - CFD: 22/02/2017 - [] D -- C:\Program Files\Movie Maker =>.Microsoft Corporation
O43 - CFD: 01/04/2017 - [] D -- C:\Program Files\Mozilla Firefox =>.Mozilla
O43 - CFD: 27/03/2017 - [] D -- C:\Program Files\Mozilla Maintenance Service =>.Mozilla
O43 - CFD: 22/02/2017 - [] D -- C:\Program Files\MSN =>.Microsoft Corporation
O43 - CFD: 22/02/2017 - [] D -- C:\Program Files\MSN Gaming Zone =>.Microsoft Corporation
O43 - CFD: 22/02/2017 - [] D -- C:\Program Files\NetMeeting =>.Microsoft Corporation
O43 - CFD: 22/02/2017 - [] D -- C:\Program Files\Online Services =>.Hewlett-Packard
O43 - CFD: 22/02/2017 - [] D -- C:\Program Files\Outlook Express =>.Microsoft Corporation
O43 - CFD: 28/03/2017 - [] D -- C:\Program Files\PhotoScape =>.Mooii Tech Software
O43 - CFD: 27/03/2017 - [] D -- C:\Program Files\PHP Expert Editor 4.3
O43 - CFD: 19/03/2017 - [] D -- C:\Program Files\Pocket Tanks {0096CE1C243B4AD34993778A34DE938E22}
O43 - CFD: 07/03/2017 - [] D -- C:\Program Files\RSUPPORT =>.RSUPPORT
O43 - CFD: 27/02/2017 - [] D -- C:\Program Files\Sagem - Utilitaire pour Clé Wi-Fi USB 802.11b =>.Sagem
O43 - CFD: 22/02/2017 - [] D -- C:\Program Files\SAM CoDeC Pack
O43 - CFD: 26/03/2017 - [] D -- C:\Program Files\SDA =>.TRENDY Co.®
O43 - CFD: 22/02/2017 - [] D -- C:\Program Files\Services en ligne =>.Hewlett-Packard
O43 - CFD: 22/02/2017 - [0] HD -- C:\Program Files\Uninstall Information =>.Microsoft Corporation
O43 - CFD: 07/03/2017 - [] D -- C:\Program Files\USBWebcam =>.Legitimate
O43 - CFD: 22/02/2017 - [] D -- C:\Program Files\utvideo
O43 - CFD: 22/02/2017 - [] D -- C:\Program Files\VideoLAN =>.VideoLan Team
O43 - CFD: 22/02/2017 - [] D -- C:\Program Files\Windows Media Player =>.Microsoft Corporation
O43 - CFD: 22/02/2017 - [] D -- C:\Program Files\Windows NT =>.Microsoft Corporation
O43 - CFD: 22/02/2017 - [0] HD -- C:\Program Files\WindowsUpdate =>.Microsoft Corporation
O43 - CFD: 22/02/2017 - [] D -- C:\Program Files\WinRAR =>.WinRAR
O43 - CFD: 18/03/2017 - [] D -- C:\Program Files\x264vfw
O43 - CFD: 22/02/2017 - [] D -- C:\Program Files\xerox =>.Xerox
O43 - CFD: 22/02/2017 - [] D -- C:\Program Files\Xvid =>.XviD
O43 - CFD: 28/03/2017 - [] RD -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Accessoires =>.Microsoft Corporation
O43 - CFD: 27/02/2017 - [] RD -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage =>.Microsoft Corporation
O43 - CFD: 07/03/2017 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Electronic Piano 2.6
O43 - CFD: 26/03/2017 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\EveryonePiano
O43 - CFD: 26/02/2017 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\FastStone Capture =>.FastStone Soft
O43 - CFD: 22/03/2017 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Internet Download Manager =>.Tonec Inc
O43 - CFD: 05/03/2017 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Java =>.Oracle
O43 - CFD: 22/02/2017 - [] RD -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Jeux =>.Games Software
O43 - CFD: 22/03/2017 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\MAMP
O43 - CFD: 01/03/2017 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Microsoft Office =>.Microsoft Corporation
O43 - CFD: 22/02/2017 - [] RD -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Outils d'administration =>.Microsoft Corporation
O43 - CFD: 28/03/2017 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\PhotoScape =>.Mooii Tech Software
O43 - CFD: 27/03/2017 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\PHP Expert Editor
O43 - CFD: 19/03/2017 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Pocket Tanks
O43 - CFD: 07/03/2017 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\RSUPPORT =>.RSUPPORT
O43 - CFD: 27/02/2017 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Sagem - Utilitaire pour Clé Wi-Fi USB 802.11b =>.Sagem
O43 - CFD: 22/02/2017 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\SAM CoDeC Pack
O43 - CFD: 26/03/2017 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\SDFormatter =>.SD Association
O43 - CFD: 22/02/2017 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\VideoLAN =>.VideoLan Team
O43 - CFD: 22/02/2017 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\WinRAR =>.WinRAR
O43 - CFD: 23/02/2017 - [] D -- C:\Documents and Settings\All Users\Application Data\Adobe =>.Adobe
O43 - CFD: 18/03/2017 - [] D -- C:\Documents and Settings\All Users\Application Data\CodeMeter =>.Legitimate
O43 - CFD: 26/02/2017 - [] D -- C:\Documents and Settings\All Users\Application Data\FastStone =>.FastStone Soft
O43 - CFD: 08/03/2017 - [0] D -- C:\Documents and Settings\All Users\Application Data\IDM =>.IDM
O43 - CFD: 28/03/2017 - [] SD -- C:\Documents and Settings\All Users\Application Data\Microsoft =>.Microsoft Corporation
O43 - CFD: 23/03/2017 - [0] D -- C:\Documents and Settings\All Users\Application Data\modloader
O43 - CFD: 05/03/2017 - [] D -- C:\Documents and Settings\All Users\Application Data\Oracle =>.Oracle
O43 - CFD: 20/03/2017 - [] D -- C:\Documents and Settings\All Users\Application Data\Package Cache =>.Microsoft Corporation
O43 - CFD: 19/03/2017 - [] D -- C:\Documents and Settings\All Users\Application Data\SecTaskMan
O43 - CFD: 18/03/2017 - [0] AD -- C:\Documents and Settings\All Users\Application Data\TEMP =>.Microsoft Corporation
O43 - CFD: 22/02/2017 - [] D -- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage =>.Microsoft Corporation
O43 - CFD: 22/02/2017 - [] D -- C:\Program Files\Fichiers communs\Adobe =>.Adobe
O43 - CFD: 22/02/2017 - [] D -- C:\Program Files\Fichiers communs\DESIGNER =>.Designer
O43 - CFD: 27/02/2017 - [] D -- C:\Program Files\Fichiers communs\InstallShield =>.InstallShield
O43 - CFD: 05/03/2017 - [] D -- C:\Program Files\Fichiers communs\Java =>.Oracle
O43 - CFD: 28/02/2017 - [] D -- C:\Program Files\Fichiers communs\Microsoft Shared =>.Microsoft Corporation
O43 - CFD: 22/02/2017 - [] D -- C:\Program Files\Fichiers communs\MSSoap =>.Microsoft Corporation
O43 - CFD: 22/02/2017 - [] D -- C:\Program Files\Fichiers communs\ODBC =>.DB Connectivity Solutions
O43 - CFD: 22/02/2017 - [] D -- C:\Program Files\Fichiers communs\Services =>.Microsoft Corporation
O43 - CFD: 22/02/2017 - [] D -- C:\Program Files\Fichiers communs\SpeechEngines =>.Microsoft Corporation
O43 - CFD: 22/02/2017 - [] D -- C:\Program Files\Fichiers communs\System =>.Microsoft Corporation
O43 - CFD: 22/02/2017 - [] D -- C:\Documents and Settings\laidani\Application Data\Adobe =>.Adobe
O43 - CFD: 03/04/2017 - [] D -- C:\Documents and Settings\laidani\Application Data\AvaFind Data
O43 - CFD: 05/03/2017 - [] D -- C:\Documents and Settings\laidani\Application Data\Charles
O43 - CFD: 22/03/2017 - [] D -- C:\Documents and Settings\laidani\Application Data\CoreFTP
O43 - CFD: 02/04/2017 - [] D -- C:\Documents and Settings\laidani\Application Data\DMCache =>.DMCache
O43 - CFD: 28/02/2017 - [] AD -- C:\Documents and Settings\laidani\Application Data\DriverPack Notifier =>.DriverPack Solution
O43 - CFD: 27/02/2017 - [] D -- C:\Documents and Settings\laidani\Application Data\DRPNano =>.DriverPack Solution
O43 - CFD: 04/03/2017 - [] D -- C:\Documents and Settings\laidani\Application Data\DRPSu =>.Driver PackSolution
O43 - CFD: 26/02/2017 - [] D -- C:\Documents and Settings\laidani\Application Data\FastStone =>.FastStone Soft
O43 - CFD: 22/02/2017 - [] D -- C:\Documents and Settings\laidani\Application Data\Identities =>.Microsoft Corporation
O43 - CFD: 22/03/2017 - [] D -- C:\Documents and Settings\laidani\Application Data\IDM =>.IDM
O43 - CFD: 22/02/2017 - [] D -- C:\Documents and Settings\laidani\Application Data\Macromedia =>.Macromedia
O43 - CFD: 29/03/2017 - [] SD -- C:\Documents and Settings\laidani\Application Data\Microsoft =>.Microsoft Corporation
O43 - CFD: 22/02/2017 - [] D -- C:\Documents and Settings\laidani\Application Data\Mozilla =>.Mozilla Corporation
O43 - CFD: 06/03/2017 - [] D -- C:\Documents and Settings\laidani\Application Data\Oracle =>.Oracle
O43 - CFD: 28/03/2017 - [] D -- C:\Documents and Settings\laidani\Application Data\PhotoScape =>.Mooii Tech Software
O43 - CFD: 05/03/2017 - [] D -- C:\Documents and Settings\laidani\Application Data\Sun =>.Oracle
O43 - CFD: 30/03/2017 - [] D -- C:\Documents and Settings\laidani\Application Data\Thinstall =>.VMare
O43 - CFD: 26/03/2017 - [] D -- C:\Documents and Settings\laidani\Application Data\vlc =>.VideoLan Team
O43 - CFD: 22/02/2017 - [] D -- C:\Documents and Settings\laidani\Application Data\WinRAR =>.WinRAR
O43 - CFD: 03/04/2017 - [] D -- C:\Documents and Settings\laidani\Application Data\ZHP =>.Nicolas Coolman
O43 - CFD: 23/02/2017 - [] D -- C:\Documents and Settings\laidani\Local Settings\Application Data\Adobe =>.Adobe
O43 - CFD: 26/03/2017 - [] D -- C:\Documents and Settings\laidani\Local Settings\Application Data\Downloaded Installations =>.Microsoft Corporation
O43 - CFD: 26/02/2017 - [] D -- C:\Documents and Settings\laidani\Local Settings\Application Data\FastStone =>.FastStone Soft
O43 - CFD: 04/03/2017 - [] D -- C:\Documents and Settings\laidani\Local Settings\Application Data\Google =>.Google
O43 - CFD: 22/02/2017 - [] D -- C:\Documents and Settings\laidani\Local Settings\Application Data\Identities =>.Microsoft Corporation
O43 - CFD: 20/03/2017 - [] D -- C:\Documents and Settings\laidani\Local Settings\Application Data\Microsoft =>.Microsoft Corporation
O43 - CFD: 13/03/2017 - [] D -- C:\Documents and Settings\laidani\Local Settings\Application Data\modloader
O43 - CFD: 22/02/2017 - [] D -- C:\Documents and Settings\laidani\Local Settings\Application Data\Mozilla =>.Mozilla Corporation
O43 - CFD: 05/03/2017 - [] D -- C:\Documents and Settings\laidani\Local Settings\Application Data\Sun =>.Oracle
O43 - CFD: 03/04/2017 - [] D -- C:\Documents and Settings\laidani\Local Settings\Application Data\ZHP =>.Nicolas Coolman
O43 - CFD: 22/02/2017 - [] RD -- C:\Documents and Settings\laidani\Menu Démarrer\Programmes\Accessoires =>.Microsoft Corporation
O43 - CFD: 05/03/2017 - [] D -- C:\Documents and Settings\laidani\Menu Démarrer\Programmes\Charles
O43 - CFD: 20/03/2017 - [] D -- C:\Documents and Settings\laidani\Menu Démarrer\Programmes\Core FTP =>.Core FTP
O43 - CFD: 22/02/2017 - [] RD -- C:\Documents and Settings\laidani\Menu Démarrer\Programmes\Démarrage =>.Microsoft Corporation
O43 - CFD: 02/03/2017 - [] D -- C:\Documents and Settings\laidani\Menu Démarrer\Programmes\FormatFactory =>.FormatFactory
O43 - CFD: 22/03/2017 - [] D -- C:\Documents and Settings\laidani\Menu Démarrer\Programmes\Internet Download Manager =>.Tonec Inc
O43 - CFD: 27/02/2017 - [] D -- C:\Documents and Settings\laidani\Menu Démarrer\Programmes\Sagem - Utilitaire pour Clé Wi-Fi USB 802.11b =>.Sagem
O43 - CFD: 29/03/2017 - [] D -- C:\Documents and Settings\laidani\Menu Démarrer\Programmes\San Andreas Multiplayer
O43 - CFD: 07/03/2017 - [] D -- C:\Documents and Settings\laidani\Menu Démarrer\Programmes\USBWebcam =>.Legitimate
O43 - CFD: 22/02/2017 - [] D -- C:\Documents and Settings\laidani\Menu Démarrer\Programmes\WinRAR =>.WinRAR

---\\ ShellIconOverlayIdentifiers (SIOI) (2) - 0s
O106 - SIOI: Offline Files Menu [Fichiers hors connexion] - {750fdf0e-2a26-11d1-a3ea-080036587f03}. (.Microsoft Corporation - IU de cache côté client.) -- C:\WINDOWS\system32\cscui.dll =>.Microsoft Corporation
O106 - SIOI: IDM Shell Extension [IDM Shell Extension] - {CDC95B92-E27C-4745-A8C5-64A52A78855D}. (.Tonec Inc. - Internet Download Manager module.) -- C:\Program Files\Internet Download Manager\IDMShellExt.dll =>.Tonec Inc.®

---\\ Image File Execution Options (4) - 0s
O50 - IFEO:C:\WINDOWS\system32\FlashPlayerApp.exe - (.Adobe Systems Incorporated - Adobe Flash Player Control Panel Applet.) [DisableExceptionChainValidation\\0] =>.Adobe Systems Incorporated®
O50 - IFEO:C:\WINDOWS\system32\mscoree.dll - (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) [CheckAppHelp\\1] =>.Microsoft Corporation®
O50 - IFEO:C:\WINDOWS\system32\setup.exe - (.Microsoft Corporation - Windows NT Setup Executable.) [ApplicationGoo\\0x000700005402000000020000840734000000560053005F00560045005200530049004F004E005F0049004E0046004F0000000000BD04EFFE00000100050005000700A807050005000700A8073F000000000000000400040001000000000000000000000000000000E4060000010053007400720069006E006700460069006C00650049006E0066006F00000060030000010030003400300039003000340042003000000018000000010043006F006D006D0065006E007400730000004C001600010043006F006D00700061006E0079004E0061006D006500000000004D006900630072006F0073006F0066007400200043006F00720070006F0072006100740069006F006E000000680020000100460069006C0065004400650073006300720069007000740069006F006E00000000004D006900630072006F0073006F00660074002000450078006300680061006E00670065002000530065007200760065007200200053006500740075007000000036000B000100460069006C006500560065007200730069006F006E000000000035002E0035002E0031003900360030002E003700000000002C000600010049006E007400650072006E0061006C004E0061006D00650000005300650074007500700000009E003D0001004C006500670061006C0043006F007000790072006900670068007400000043006F00700079007200690067006800740020000200000000000000010000004C0000003CFD0600050000000000000065050000020000000000000000000000530065007200760069006300650020005000610063006B0020003300000024005402000000020000A40834000000560053005F00560045005200530049004F004E005F0049004E0046004F0000000000BD04EFFE00000100050005000700A807050005000700A8073F00000000000000040004000100000000000000000000000000000004080000010053007400720069006E006700460069006C00650049006E0066006F000000F0030000010030003400300039003000340042003000000018000000010043006F006D006D0065006E007400730000004C001600010043006F006D00700061006E0079004E0061006D006500000000004D006900630072006F0073006F0066007400200043006F00720070006F0072006100740069006F006E000000680020000100460069006C0065004400650073006300720069007000740069006F006E00000000004D006900630072006F0073006F00660074002000450078006300680061006E00670065002000530065007200760065007200200053006500740075007000000036000B000100460069006C006500560065007200730069006F006E000000000035002E0035002E0031003900360030002E003700000000002C000600010049006E007400650072006E0061006C004E0061006D0065000000530065007400750070000000A600410001004C006500670061006C0043006F007000790072006900670068007400000043006F00700079007200690067006800740020000200000000000000010000004C0000003CFD0600050000000000000065050000020000000000000000000000530065007200760069006300650020005000610063006B0020003300000024005402000000020000180434000000560053005F00560045005200530049004F004E005F0049004E0046004F0000000000BD04EFFE00000100050005000700A807050005000700A8073F00000000000000040004000100000000000000000000000000000078030000010053007400720069006E006700460069006C00650049006E0066006F00000054030000010030003400300039003000340042003000000018000000010043006F006D006D0065006E007400730000004C001600010043006F006D00700061006E0079004E0061006D006500000000004D006900630072006F0073006F0066007400200043006F00720070006F0072006100740069006F006E000000680020000100460069006C0065004400650073006300720069007000740069006F006E00000000004D006900630072006F0073006F00660074002000450078006300680061006E00670065002000530065007200760065007200200053006500740075007000000036000B000100460069006C006500560065007200730069006F006E000000000035002E0035002E0031003900360030002E003700000000002C000600010049006E007400650072006E0061006C004E0061006D00650000005300650074007500700000009A003B0001004C006500670061006C0043006F007000790072006900670068007400000043006F00700079007200690067006800740020000200000000000000010000004C0000003CFD0600050000000000000065050000020000000000000000000000530065007200760069006300650020005000610063006B002000330000002400] =>.Microsoft Corporation
O50 - IFEO:C:\WINDOWS\system32\Vb40032.dll - (.Microsoft Corporation - Visual Basic 4.0 runtime library.) [CheckAppHelp\\1] =>.Microsoft Corporation

---\\ Liste des pilotes du système (39) - 1s
O58 - SDL:2009/11/18 01:16:00 A . (.Creative - Creative WDM 3D Audio Driver.) -- C:\WINDOWS\System32\drivers\Ambfilt.sys [1691480] =>.Creative Labs Inc®
O58 - SDL:2008/04/14 14:00:00 A . (.RAVISENT Technologies Inc. - Pilote principal CineMaster C 1.2 WDM.) -- C:\WINDOWS\System32\drivers\cinemst2.sys [262528] =>.RAVISENT Technologies Inc.
O58 - SDL:2008/04/14 14:00:00 A . (.Compaq Computer Corporation - Compaq PA-1 Player Driver.) -- C:\WINDOWS\System32\drivers\cpqdap01.sys [11776] =>.Compaq Computer Corporation
O58 - SDL:2008/04/14 14:00:00 A . (.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disq.) -- C:\WINDOWS\System32\drivers\dmboot.sys [800256] =>.Microsoft Corp., Veritas Software
O58 - SDL:2008/04/14 14:00:00 A . (.Microsoft Corp., Veritas Software - Pilote E/S du Gestionnaire de disques NT.) -- C:\WINDOWS\System32\drivers\dmio.sys [154496] =>.Microsoft Corp., Veritas Software
O58 - SDL:2008/04/14 14:00:00 A . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS\System32\drivers\dmload.sys [5888] =>.Microsoft Corp., Veritas Software.
O58 - SDL:2008/04/14 14:00:00 A . (.Windows (R) Server 2003 DDK provider - High Definition Audio Bus Driver v1.0a.) -- C:\WINDOWS\System32\drivers\hdaudbus.sys [144384] =>.Microsoft Corporation
O58 - SDL:2012/01/27 02:48:06 A . (.Tonec Inc. - Internet Download Manager TDI Driver.) -- C:\WINDOWS\System32\drivers\idmtdi.sys [104072] =>.Tonec Inc.®
O58 - SDL:2012/08/28 16:34:36 A . (.Intel Corporation - Intel Graphics Miniport Driver.) -- C:\WINDOWS\System32\drivers\igxpmp32.sys [2019200] =>.Intel Corporation
O58 - SDL:2009/11/18 01:17:00 A . (.Creative Technology Ltd. - Creative WDM Audio Driver (32-bit).) -- C:\WINDOWS\System32\drivers\Monfilt.sys [1395800] =>.Creative Labs Inc®
O58 - SDL:2008/04/14 14:00:00 A . (.S3/Diamond Multimedia Systems - NikeDrv Usb Driver.) -- C:\WINDOWS\System32\drivers\nikedrv.sys [12032] =>.S3/Diamond Multimedia Systems
O58 - SDL:2012/09/17 17:01:20 A . (. - Parallel driver for PCI Parallel Port..) -- C:\WINDOWS\System32\drivers\NmPar.sys [80896]
O58 - SDL:2012/09/17 14:28:46 A . (.Windows (R) Win 7 DDK provider - Serial Device Driver.) -- C:\WINDOWS\System32\drivers\NmSerial.sys [70656] =>.Windows (R) Win 7 DDK provider
O58 - SDL:2008/04/14 14:00:00 A . (.Parallel Technologies, Inc. - Parallel Technologies DirectParallel IO Lib.) -- C:\WINDOWS\System32\drivers\ptilink.sys [17792] =>.Parallel Technologies, Inc.
O58 - SDL:2008/04/14 14:00:00 A . (.S3/Diamond Multimedia Systems - Rio8Drv.sys Usb Driver.) -- C:\WINDOWS\System32\drivers\rio8drv.sys [12032] =>.S3/Diamond Multimedia Systems
O58 - SDL:2008/04/14 14:00:00 A . (.S3/Diamond Multimedia Systems - RioDrv Usb Driver.) -- C:\WINDOWS\System32\drivers\riodrv.sys [12032] =>.S3/Diamond Multimedia Systems
O58 - SDL:2016/08/12 20:22:32 A . (.MediaTek Inc. - MediaTek 802.11n Wireless Adapter Driver.) -- C:\WINDOWS\System32\drivers\rt2870.sys [2851288] =>.MEDIATEK INC.®
O58 - SDL:2012/12/19 17:30:00 A . (.Realtek Semiconductor Corporation - Realtek 10/100/1000 NDIS 5.1 Driver.) -- C:\WINDOWS\System32\drivers\Rtenicxp.sys [386528] =>.Realtek Semiconductor Corp®
O58 - SDL:2013/01/22 15:54:58 A . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function D.) -- C:\WINDOWS\System32\drivers\RtkHDAud.sys [5408328] =>.Realtek Semiconductor Corp®
O58 - SDL:2008/04/14 14:00:00 A . (.Macrovision Corporation, Macrovision Europe Limited, - Macrovision SECURITY Driver.) -- C:\WINDOWS\System32\drivers\secdrv.sys [20480] =>.Macrovision Corporation, Macrovision Europe Limited,
O58 - SDL:2008/04/14 14:00:00 A . (.Toshiba Corporation - WDM Toshiba Tecra Video Capture Driver.) -- C:\WINDOWS\System32\drivers\tsbvcap.sys [21376] =>.Toshiba Corporation
O58 - SDL:2008/04/14 14:00:00 A . (.RAVISENT Technologies Inc. - CineMaster C WDM DVD Minidriver.) -- C:\WINDOWS\System32\drivers\vdmindvd.sys [58112] =>.RAVISENT Technologies Inc.
O58 - SDL:2004/03/02 16:58:30 A . (.Z-Com - Wireless LAN Card NDIS 5.1 Driver.) -- C:\WINDOWS\System32\drivers\WLANUSB.sys [644096]
O58 - SDL:2008/04/14 14:00:00 A . (...) -- C:\WINDOWS\System32\ansi.sys [9037] =>.Microsoft Corporation
O58 - SDL:2008/04/14 14:00:00 A . (...) -- C:\WINDOWS\System32\country.sys [27097] =>.Microsoft Corporation
O58 - SDL:2008/04/14 14:00:00 A . (...) -- C:\WINDOWS\System32\himem.sys [4912] =>.Microsoft Corporation
O58 - SDL:2008/04/14 14:00:00 A . (...) -- C:\WINDOWS\System32\key01.sys [42809] =>.Microsoft Corporation
O58 - SDL:2008/04/14 14:00:00 A . (...) -- C:\WINDOWS\System32\keyboard.sys [42537] =>.Microsoft Corporation
O58 - SDL:2008/04/14 14:00:00 A . (...) -- C:\WINDOWS\System32\ntdos.sys [27916] =>.Microsoft Corporation
O58 - SDL:2008/04/14 14:00:00 A . (...) -- C:\WINDOWS\System32\ntdos404.sys [29146] =>.Microsoft Corporation
O58 - SDL:2008/04/14 14:00:00 A . (...) -- C:\WINDOWS\System32\ntdos411.sys [29370] =>.Microsoft Corporation
O58 - SDL:2008/04/14 14:00:00 A . (...) -- C:\WINDOWS\System32\ntdos412.sys [29274] =>.Microsoft Corporation
O58 - SDL:2008/04/14 14:00:00 A . (...) -- C:\WINDOWS\System32\ntdos804.sys [29146] =>.Microsoft Corporation
O58 - SDL:2008/04/14 14:00:00 A . (...) -- C:\WINDOWS\System32\ntio.sys [34000] =>.Microsoft Corporation
O58 - SDL:2008/04/14 14:00:00 A . (...) -- C:\WINDOWS\System32\ntio404.sys [34560] =>.Microsoft Corporation
O58 - SDL:2008/04/14 14:00:00 A . (...) -- C:\WINDOWS\System32\ntio411.sys [35648] =>.Microsoft Corporation
O58 - SDL:2008/04/14 14:00:00 A . (...) -- C:\WINDOWS\System32\ntio412.sys [35424] =>.Microsoft Corporation
O58 - SDL:2008/04/14 14:00:00 A . (...) -- C:\WINDOWS\System32\ntio804.sys [34560] =>.Microsoft Corporation
O58 - SDL:2004/03/02 16:58:28 A . (.Printing Communications Assoc., Inc. (PCAUSA) - PCAUSA NDIS 5.0 Protocol Driver.) -- C:\WINDOWS\System32\PCANDIS5.SYS [16292] =>.Printing Communications Assoc., Inc. (PCAUSA)

---\\ Associations Shell Spawning (9) - 0s
O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\shell32.dll =>.Microsoft Corporation
O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\IEXPLORE.EXE =>.Microsoft Corporation
O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft (R) Windows Based Script Host.) -- C:\WINDOWS\system32\wscript.exe =>.Microsoft Corporation
O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\WINDOWS\regedit.exe =>.Microsoft Corporation
O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S

---\\ Menu de démarrage Internet (13) - 0s
O68 - StartMenuInternet: <>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc®
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc®
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe =>.Microsoft Corporation
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe =>.Mozilla Corporation
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc.
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - Windows NT User Data Migration Tool.) -- C:\WINDOWS\system32\shmgrate.exe =>.Microsoft Corporation
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe =>.Mozilla Corporation
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc.
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - Windows NT User Data Migration Tool.) -- C:\WINDOWS\system32\shmgrate.exe =>.Microsoft Corporation
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe =>.Mozilla Corporation
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc.
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - Windows NT User Data Migration Tool.) -- C:\WINDOWS\system32\shmgrate.exe =>.Microsoft Corporation

---\\ Recherche d'infection sur les navigateurs (2) - 15s
O69 - SBI: prefs.js [laidani - sr807kmy.default] user_pref("extensions.toolbar.mindspark.hp.enabled", false); =>Adware.Bandoo
O69 - SBI: prefs.js [laidani - sr807kmy.default] user_pref("extensions.toolbar.mindspark.lastInstalled", "myscrapnook@mindspark.com"); =>Adware.Bandoo

---\\ Enumère les services démarrés par Svchost (40) - 1s
O83 - Search Svchost Services: AppMgmt (AppMgmt) . (.Microsoft Corporation - Service Installation de logiciels.) -- C:\WINDOWS\system32\appmgmts.dll [176640] =>.Microsoft Corporation
O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Windows Audio Service.) -- C:\WINDOWS\system32\audiosrv.dll [42496] =>.Microsoft Corporation
O83 - Search Svchost Services: Browser (Browser) . (.Microsoft Corporation - Computer Browser Service DLL.) -- C:\WINDOWS\system32\browser.dll [77824] =>.Microsoft Corporation
O83 - Search Svchost Services: CryptSvc (CryptSvc) . (.Microsoft Corporation - Cryptographic Services.) -- C:\WINDOWS\system32\cryptsvc.dll [62464] =>.Microsoft Corporation
O83 - Search Svchost Services: DMServer (DMServer) . (.Microsoft Corp. - DLL Service gestionnaire de disque logique.) -- C:\WINDOWS\system32\dmserver.dll [24576] =>.Microsoft Corp.
O83 - Search Svchost Services: DHCP (DHCP) . (.Microsoft Corporation - Service client DHCP.) -- C:\WINDOWS\system32\dhcpcsvc.dll [127488] =>.Microsoft Corporation
O83 - Search Svchost Services: ERSvc (ERSvc) . (.Microsoft Corporation - Windows Error Reporting Service.) -- C:\WINDOWS\system32\ersvc.dll [23040] =>.Microsoft Corporation
O83 - Search Svchost Services: EventSystem (EventSystem) . (.Microsoft Corporation - .) -- C:\WINDOWS\system32\es.dll [246272] =>.Microsoft Corporation
O83 - Search Svchost Services: FastUserSwitchingCompatibility (FastUserSwitchingCompatibility) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\system32\shsvcs.dll [135680] =>.Microsoft Corporation
O83 - Search Svchost Services: HidServ (HidServ) . (...) -- C:\WINDOWS\System32\hidserv.dll [0]
O83 - Search Svchost Services: LanmanServer (LanmanServer) . (.Microsoft Corporation - Server Service DLL.) -- C:\WINDOWS\system32\srvsvc.dll [96768] =>.Microsoft Corporation
O83 - Search Svchost Services: LanmanWorkstation (LanmanWorkstation) . (.Microsoft Corporation - Workstation Service DLL.) -- C:\WINDOWS\system32\wkssvc.dll [132096] =>.Microsoft Corporation
O83 - Search Svchost Services: Messenger (Messenger) . (.Microsoft Corporation - NT Messenger Service.) -- C:\WINDOWS\system32\msgsvc.dll [33792] =>.Microsoft Corporation
O83 - Search Svchost Services: Netman (Netman) . (.Microsoft Corporation - Gestionnaire de connexions réseau.) -- C:\WINDOWS\system32\netman.dll [198144] =>.Microsoft Corporation
O83 - Search Svchost Services: Nla (Nla) . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Micro.) -- C:\WINDOWS\system32\mswsock.dll [247808] =>.Microsoft Corporation
O83 - Search Svchost Services: Ntmssvc (Ntmssvc) . (.Microsoft Corporation - Gestionnaire de stockage amovible.) -- C:\WINDOWS\system32\ntmssvc.dll [438272] =>.Microsoft Corporation
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Remote Access AutoDial Manager.) -- C:\WINDOWS\system32\rasauto.dll [88576] =>.Microsoft Corporation
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Remote Access Connection Manager.) -- C:\WINDOWS\system32\rasmans.dll [186368] =>.Microsoft Corporation
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Dynamic Interface Manager.) -- C:\WINDOWS\system32\mprdim.dll [53248] =>.Microsoft Corporation
O83 - Search Svchost Services: Schedule (Schedule) . (.Microsoft Corporation - Moteur du Planificateur de tâches.) -- C:\WINDOWS\system32\schedsvc.dll [194560] =>.Microsoft Corporation
O83 - Search Svchost Services: Seclogon (Seclogon) . (.Microsoft Corporation - DLL de service d'ouverture de session secon.) -- C:\WINDOWS\system32\seclogon.dll [18944] =>.Microsoft Corporation
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - System Event Notification Service (SENS).) -- C:\WINDOWS\system32\sens.dll [39424] =>.Microsoft Corporation
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l'application d'assistance à.) -- C:\WINDOWS\system32\ipnathlp.dll [332800] =>.Microsoft Corporation
O83 - Search Svchost Services: SRService (SRService) . (.Microsoft Corporation - Service de restauration du système.) -- C:\WINDOWS\system32\srsvc.dll [171520] =>.Microsoft Corporation
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM.) -- C:\WINDOWS\system32\tapisrv.dll [249856] =>.Microsoft Corporation
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\system32\shsvcs.dll [135680] =>.Microsoft Corporation
O83 - Search Svchost Services: TrkWks (TrkWks) . (.Microsoft Corporation - Distributed Link Tracking Client.) -- C:\WINDOWS\system32\trkwks.dll [90112] =>.Microsoft Corporation
O83 - Search Svchost Services: W32Time (W32Time) . (.Microsoft Corporation - Service de temps Windows.) -- C:\WINDOWS\system32\w32time.dll [178176] =>.Microsoft Corporation
O83 - Search Svchost Services: WZCSVC (WZCSVC) . (.Microsoft Corporation - Service configuration automatique sans fil.) -- C:\WINDOWS\system32\wzcsvc.dll [483840] =>.Microsoft Corporation
O83 - Search Svchost Services: Wmi (Wmi) . (.Microsoft Corporation - API avancées Windows 32.) -- C:\WINDOWS\system32\advapi32.dll [685568] =>.Microsoft Corporation
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\WINDOWS\system32\wbem\wmisvc.dll [145408] =>.Microsoft Corporation
O83 - Search Svchost Services: wscsvc (wscsvc) . (.Microsoft Corporation - Windows Security Center Service.) -- C:\WINDOWS\system32\wscsvc.dll [80896] =>.Microsoft Corporation
O83 - Search Svchost Services: xmlprov (xmlprov) . (.Microsoft Corporation - Network Provisioning Service.) -- C:\WINDOWS\system32\xmlprov.dll [129024] =>.Microsoft Corporation
O83 - Search Svchost Services: napagent (napagent) . (.Microsoft Corporation - Exécution du service Agent de quarantaine.) -- C:\WINDOWS\system32\qagentrt.dll [293376] =>.Microsoft Corporation
O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\WINDOWS\system32\kmsvc.dll [61440] =>.Microsoft Corporation
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière.) -- C:\WINDOWS\system32\qmgr.dll [409088] =>.Microsoft Corporation
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Windows Update AutoUpdate Service.) -- C:\WINDOWS\system32\wuauserv.dll [6656] =>.Microsoft Corporation
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\system32\shsvcs.dll [135680] =>.Microsoft Corporation
O83 - Search Svchost Services: helpsvc (helpsvc) . (.Microsoft Corporation - Microsoft PCHealth Service Holder.) -- C:\WINDOWS\pchealth\helpctr\binaries\pchsvc.dll [38400] =>.Microsoft Corporation
O83 - Search Svchost Services: WmdmPmSN (WmdmPmSN) . (.Microsoft Corporation - Fournisseur de services de périphérique mul.) -- C:\WINDOWS\system32\mspmsnsv.dll [52736] =>.Microsoft Corporation

---\\ Scan Additionnel (14) - 17s
HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} =>Heuristic.Suspect
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} =>Heuristic.Suspect
C:\Documents and Settings\laidani\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\https_paidviewpoint.com_0.localstorage =>PUP.Optional.MetaStream
C:\Documents and Settings\laidani\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\https_paidviewpoint.com_0.localstorage-journal =>PUP.Optional.MetaStream
C:\Documents and Settings\laidani\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\https_pes-2013.ar.uptodown.com_0.localstorage =>PUP.Optional.UpToDown
C:\Documents and Settings\laidani\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\https_pes-2013.ar.uptodown.com_0.localstorage-journal =>PUP.Optional.UpToDown
C:\Documents and Settings\laidani\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\https_sd-card-formatter.ar.uptodown.com_0.localstorage =>PUP.Optional.UpToDown
C:\Documents and Settings\laidani\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\https_sd-card-formatter.ar.uptodown.com_0.localstorage-journal =>PUP.Optional.UpToDown
C:\Documents and Settings\laidani\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_couponxplorer.dl.myway.com_0.localstorage =>.Superfluous.MindSpark
C:\Documents and Settings\laidani\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_couponxplorer.dl.myway.com_0.localstorage-journal =>.Superfluous.MindSpark
C:\Documents and Settings\laidani\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_gamesbarq.com_0.localstorage =>PUP.Optional.GamesBar
C:\Documents and Settings\laidani\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_gamesbarq.com_0.localstorage-journal =>PUP.Optional.GamesBar
C:\Documents and Settings\laidani\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_mystartab.com_0.localstorage =>.Superfluous.MyStartab
C:\Documents and Settings\laidani\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_mystartab.com_0.localstorage-journal =>.Superfluous.MyStartab

---\\ Récapitulatif des éléments trouvés sur votre station (11) - 0s
https://nicolascoolman.eu/2017/01/15/superfluous-mindspark/ =>.Superfluous.MindSpark
https://nicolascoolman.eu/2017/01/28/heuristic-suspect/ =>Heuristic.Suspect
https://nicolascoolman.eu/2017/03/13/superfluous-bytefence/ =>.Superfluous.ByteFence
https://www.anti-malware.top/2016/06/08/superfluous-securepccleaner/ =>.Superfluous.SecurePCCleaner
https://nicolascoolman.eu/2017/03/12/adware-installcore-2/ =>Adware.InstallCore
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.Superfluous.Downloader
https://nicolascoolman.eu/2017/02/23/adware-bandoo/ =>Adware.Bandoo
https://www.nicolascoolman.com/fr/adware-metastream/ =>PUP.Optional.MetaStream
https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/ =>PUP.Optional.UpToDown
https://www.nicolascoolman.com/fr/adware-gamesbar/ =>PUP.Optional.GamesBar
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.Superfluous.MyStartab

~ Unselected Options: O82, O82,
~ End of the scan, 38661 items in 01mn58s (801)(0)

Publicité


Signaler le contenu de ce document

Publicité