cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

~ ZHPDiag v2017.8.26.145 Par Nicolas Coolman (2017/08/26)
~ Démarré par FredSteph (Administrator) (2017/08/27 15:50:26)
~ Web: https://www.nicolascoolman.com
~ Blog: https://nicolascoolman.eu/
~ Facebook: https://www.facebook.com/nicolascoolman1
~ Certificate ZHPDiag: Legal
~ Etat de la version: Version OK
~ Mode: Scanner
~ Rapport: C:\Users\FredSteph\Desktop\ZHPDiag.txt
~ Rapport: C:\Users\FredSteph\AppData\Roaming\ZHP\ZHPDiag.txt
~ UAC: Activate
~ Démarrage du système: Normal (Normal boot)
Windows VISTA, 64-bit Service Pack 2 (Build 6002) =>.Microsoft Corporation

---\\ Navigateurs Internet (1) - 0s
~ MSIE: Internet Explorer v9.0.8112.16421

---\\ Informations sur les produits Windows (9) - 0s
~ Windows Server License Manager Script : OK
~ Licence Script File Génération : OK
~ Windows Operating System - Vista, OEM_SLP channel
System Locked Preinstallation (OEM_SLP) : OK
Windows ID Activation : OK
~ Windows Partial Key : WQD8Q
Windows License : OK
Windows Automatic Updates : OK
Windows Activation Technologies : KO

---\\ Logiciels de protection (1) - 1s
Avast Antivirus Gratuit v17.5.2303 (Protection)

---\\ Surveillance de Logiciels (2) - 2s
~ Adobe Flash Player 25 PPAPI (Surveillance)
~ Adobe Reader 8.1.2 - Français (Surveillance)

---\\ Informations sur le système (6) - 0s
~ Operating System: Intel64 Family 6 Model 23 Stepping 7, GenuineIntel
~ Operating System: 64-bit
~ Boot mode: Normal (Normal boot)
Total RAM: 4192.592 MB (60% free) : OK =>.RAM Value
System Restore: Activé (Enable)
System drive C: has 130 GB () free of 325 GB : OK =>.Disk Space

---\\ Mode de connexion au système (3) - 0s
~ Computer Name: NOTRE_PC
~ User Name: FredSteph
~ Logged in as Administrator

---\\ Enumération des unités disques (3) - 0s
~ Drive C: has 130 GB free of 325 GB (System)
~ Drive D: has 1 GB free of 14 GB
~ Drive E: has 22 GB free of 137 GB

---\\ Etat du Centre de Sécurité Windows (11) - 0s
[HKLM\Software\WOW6432Node\Microsoft\Security Center] UacDisableNotify: OK
[HKLM\Software\WOW6432Node\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\Software\WOW6432Node\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\Software\WOW6432Node\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
[HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified
[HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\Software\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM64\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK

---\\ Recherche particulière de fichiers génériques (25) - 1s
[MD5.6B08E54A451B3F95E4109DBA7E594270] - 11/04/2009 - (.Microsoft Corporation - Explorateur Windows.) -- C:\WINDOWS\Explorer.exe [3079168] =>.Microsoft Corporation
[MD5.10446646D128E580C46615338E74E672] - 02/11/2006 - (.Microsoft Corporation - Processus hôte Windows (Rundll32).) -- C:\WINDOWS\System32\rundll32.exe [46592] =>.Microsoft Corporation
[MD5.117EA87DF785CA1B9D821F6F213DCE07] - 21/01/2008 - (.Microsoft Corporation - Application de démarrage de Windows.) -- C:\WINDOWS\System32\Wininit.exe [123904] =>.Microsoft Corporation
[MD5.CAD4D0017C54C250F537C4D281823716] - 20/06/2016 - (.Microsoft Corporation - Extensions Internet pour Win32.) -- C:\WINDOWS\System32\wininet.dll [1392640] =>.Microsoft Corporation
[MD5.6D0773A3A65D28B663F334C90441D01A] - 11/04/2009 - (.Microsoft Corporation - Application d'ouverture de session Windows.) -- C:\WINDOWS\System32\Winlogon.exe [405504] =>.Microsoft Corporation
[MD5.E4C283A98F118CEC9E087EAC4E9EFB6A] - 02/03/2011 - (.Microsoft Corporation - DNS DLL de l'API Client.) -- C:\WINDOWS\System32\dnsapi.dll [221696] =>.Microsoft Corporation
[MD5.85E861D0B88DB2B54ACB0839654C09F7] - 02/03/2011 - (.Microsoft Corporation - DNS DLL de l'API Client.) -- C:\WINDOWS\Syswow64\dnsapi.dll [168448] =>.Microsoft Corporation
[MD5.7C42D832F43C74A707E11AA6BB53F6D2] - 26/06/2009 - (.Microsoft Corporation - DLL client de l'API uilisateur de Windows m.) -- C:\WINDOWS\System32\fr-FR\user32.dll.mui [19968] =>.Microsoft Corporation
[MD5.8C771D6FBEE9D6F2E7DDE165940CB513] - 13/10/2015 - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) -- C:\WINDOWS\System32\drivers\AFD.sys [404992] =>.Microsoft Corporation
[MD5.1898FAE8E07D97F2F6C2D5326C633FAC] - 21/01/2008 - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) -- C:\WINDOWS\System32\drivers\atapi.sys [22584] =>.Microsoft Windows®
[MD5.B4D787DB8D30793A4D4DF9FEED18F136] - 21/01/2008 - (.Microsoft Corporation - CD-ROM File System Driver.) -- C:\WINDOWS\System32\drivers\Cdfs.sys [90624] =>.Microsoft Corporation
[MD5.C025AA69BE3D0D25C7A2E746EF6F94FC] - 11/04/2009 - (.Microsoft Corporation - SCSI CD-ROM Driver.) -- C:\WINDOWS\System32\drivers\Cdrom.sys [79872] =>.Microsoft Corporation
[MD5.8B722BA35205C71E7951CDC4CDBADE19] - 14/04/2011 - (.Microsoft Corporation - DFS Namespace Client Driver.) -- C:\WINDOWS\System32\drivers\DfsC.sys [97792] =>.Microsoft Corporation
[MD5.F942C5820205F2FB453243EDFEC82A3D] - 11/04/2009 - (.Microsoft Corporation - High Definition Audio Bus Driver.) -- C:\WINDOWS\System32\drivers\HDAudBus.sys [948736] =>.Microsoft Corporation
[MD5.CBB597659A2713CE0C9CC20C88C7591F] - 21/01/2008 - (.Microsoft Corporation - Pilote de port i8042.) -- C:\WINDOWS\System32\drivers\i8042prt.sys [64000] =>.Microsoft Corporation
[MD5.B7E6212F581EA5F6AB0C3A6CEEEB89BE] - 21/01/2008 - (.Microsoft Corporation - IP Network Address Translator.) -- C:\WINDOWS\System32\drivers\IpNat.sys [115712] =>.Microsoft Corporation
[MD5.B31DB7D6E624479EA20FEE17E712A44C] - 09/01/2015 - (.Microsoft Corporation - Windows NT SMB Minirdr.) -- C:\WINDOWS\System32\drivers\MRxSmb.sys [136192] =>.Microsoft Corporation
[MD5.2EE680D31D685C0DB4F6D5A68F418A96] - 10/05/2016 - (.Microsoft Corporation - MBT Transport driver.) -- C:\WINDOWS\System32\drivers\netBT.sys [248320] =>.Microsoft Corporation
[MD5.2ACCAA3C3C55370A32F17B3595E1A217] - 03/03/2013 - (.Microsoft Corporation - Pilote du système de fichiers NT.) -- C:\WINDOWS\System32\drivers\ntfs.sys [1513320] =>.Microsoft Windows®
[MD5.AECD57F94C887F58919F307C35498EA0] - 02/11/2006 - (.Microsoft Corporation - Pilote de port parallèle.) -- C:\WINDOWS\System32\drivers\Parport.sys [96768] =>.Microsoft Corporation
[MD5.AC7BC4D42A7E558718DFDEC599BBFC2C] - 11/04/2009 - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) -- C:\WINDOWS\System32\drivers\Rasl2tp.sys [124928] =>.Microsoft Corporation
[MD5.C045D1FB111C28DF0D1BE8D4BDA22C06] - 21/01/2008 - (.Microsoft Corporation - Microsoft RDP Device redirector.) -- C:\WINDOWS\System32\drivers\rdpdr.sys [314368] =>.Microsoft Corporation
[MD5.290B6F6A0EC4FCDFC90F5CB6D7020473] - 11/04/2009 - (.Microsoft Corporation - SMB Transport driver.) -- C:\WINDOWS\System32\drivers\smb.sys [88064] =>.Microsoft Corporation
[MD5.A47CD175CF72CA5EEDB47C79532A7622] - 13/10/2015 - (.Microsoft Corporation - TDI Translation Driver.) -- C:\WINDOWS\System32\drivers\tdx.sys [94720] =>.Microsoft Corporation
[MD5.582F710097B46140F5A89A19A6573D4B] - 21/08/2012 - (.Microsoft Corporation - Pilote de cliché instantané du volume.) -- C:\WINDOWS\System32\drivers\volsnap.sys [267648] =>.Microsoft Windows®

---\\ Liste des services NT non Microsoft et non désactivés (3) - 2s
O23 - Service: Avast Antivirus (avast! Antivirus) . (.AVAST Software - Avast Service.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe =>.AVAST Software s.r.o.®
O23 - Service: Easybits Shared Services for Windows (ezSharedSvc) . (...) - C:\WINDOWS\System32\ezsvc7.dll (.not file.) =>.EasyBits Sofware AS
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) . (.Intel Corporation - RAID Monitor.) - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe =>.Intel Corporation®

---\\ Services non Microsoft (SR=Démarré,SS=Stoppé) (9) - 34s
SS - Disabl [04/06/2017] [ 271864] Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe =>.Adobe Systems Incorporated®
SS - Demand [21/08/2017] [ 7430992] aswbIDSAgent (aswbIDSAgent) . (.AVAST Software s.r.o..) - C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe =>.AVAST Software s.r.o.®
SR - Auto [21/08/2017] [ 263312] Avast Antivirus (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe =>.AVAST Software s.r.o.®
SS - Disabl [02/06/2008] [ 94208] HP Health Check Service (HP Health Check Service) . (.Hewlett-Packard.) - c:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe =>.Hewlett-Packard
SR - Auto [11/06/2008] [ 354840] Intel(R) Matrix Storage Event Monitor (IAANTMON) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe =>.Intel Corporation®
SS - Demand [ 0] [ 0] @%SystemRoot%\system32\msimsg.dll,-27 (msiserver) . (...) - C:\WINDOWS\System32\msiexec
SS - Disabl [07/03/2012] [ 889664] NVIDIA Display Driver Service (nvsvc) . (.NVIDIA Corporation.) - C:\WINDOWS\System32\nvvsvc.exe =>.NVIDIA Corporation®
SS - Disabl [07/03/2012] [ 2458944] NVIDIA Update Service Daemon (nvUpdatusService) . (.NVIDIA Corporation.) - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe =>.NVIDIA Corporation®
SS - Disabl [24/05/2017] [ 1607968] Steam Client Service (Steam Client Service) . (.Valve Corporation.) - C:\Program Files (x86)\Common Files\Steam\SteamService.exe =>.Valve®

---\\ Tâches planifiées en automatique (Registre) (18) - 5s
O40 - TASK: {0CC56F26-D3DF-403D-8575-89B52A36486C} [64Bits][\SafeZone scheduled Autoupdate 1503337206] - (.Avast Software - Avast SafeZone Browser.) -- C:\Program Files\AVAST Software\SZBrowser\launcher.exe [735704] =>.AVAST Software s.r.o.®
O40 - TASK: {280C6EFB-A0E9-492B-8F17-80C66B616C49} [64Bits][\ExtendedServicePlan] - (.Copyright © 2006 - ESAdvRemIntegrator.) -- C:\Program Files (x86)\Hewlett-Packard\SDP\RemEngine.exe [19456]
O40 - TASK: {3D1AE433-9782-4CD2-825B-1FB6593E6580} [64Bits][\Microsoft\Windows\Tcpip\IpAddressConflict1] - (...) -- rundll32 [0]
O40 - TASK: {3E55057D-19B7-4234-901A-ED71F260176E} [64Bits][\Adobe Flash Player Updater] - (.Adobe Systems Incorporated - Adobe® Flash® Player Update Service 25.0 r0.) -- C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [271864] =>.Adobe Systems Incorporated®
O40 - TASK: {4277C1C9-94DB-46E7-8CEA-D58574B34C20} [64Bits][\CCleanerSkipUAC] - (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner.exe [7680216] =>.Piriform Ltd®
O40 - TASK: {581893F6-33F3-4579-9F02-B28AEC90B251} [64Bits][\ServicePlan] - (.Copyright © 2006 - ESAdvRemIntegrator.) -- C:\Program Files (x86)\Hewlett-Packard\SDP\RemEngine.exe [19456]
O40 - TASK: {6C9E5708-3444-4393-8D92-D21E8FC348EC} [64Bits][\Microsoft\Windows\Tcpip\IpAddressConflict2] - (...) -- rundll32 [0]
O40 - TASK: {712C6861-2B14-4E72-92BA-22B6921FE2B7} [64Bits][\Microsoft\Windows\Wired\GatherWiredInfo] - (...) -- C:\WINDOWS\system32\gatherWiredInfo.vbs [12198]
O40 - TASK: {74FE6883-53BE-4D4D-AF66-F238AA13B973} [64Bits][\PC-Doctor\Scheduled Maintenance Swap] - (.PC-Doctor, Inc. - Hardware Diagnostic Tools.) -- C:\Program Files (x86)\PC-Doctor for Windows\task_swap.exe [67946] =>.PC-Doctor, Inc.
O40 - TASK: {77280D04-7CE5-42CF-A597-971E556CB5C2} [64Bits][\Adobe Flash Player PPAPI Notifier] - (.Adobe Systems Incorporated - Adobe® Flash® Player Installer/Uninstaller.) -- C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_25_0_0_171_pepper.exe [1278456] =>.Adobe Systems Incorporated®
O40 - TASK: {8DB14753-9CB7-47D0-9693-D294B02CA172} [64Bits][\PC-Doctor\Scheduled Maintenance] - (.PC-Doctor, Inc. - Hardware Diagnostic Tools Profiler.) -- C:\Program Files (x86)\PC-Doctor for Windows\RunProfiler.exe [86016] =>.PC-Doctor, Inc.
O40 - TASK: {90A6FCAF-8598-46D0-9F19-57EE038F7DC5} [64Bits][\KMSAutoNet] - (...) -- C:\ProgramData\KMSAutoS\KMSAuto Net.exe (.not file.) [0] (.Orphan.) =>HackTool.AutoKMS
O40 - TASK: {A9250DA2-5046-450E-8E20-60DF804CB9EA} [64Bits][\RecoveryCD] - (.Copyright © 2006 - ESAdvRemIntegrator.) -- C:\Program Files (x86)\Hewlett-Packard\SDP\RemEngine.exe [19456]
O40 - TASK: {C9065F9D-883C-4BF0-A50E-179E65838A6B} [64Bits][\{4FFF545B-0579-4694-8484-87A90C295208}] - (...) -- C:\Users\FredSteph\AppData\Local\{5D496BF2-781B-0684-132D-2156CFFFDC68}\productupdate.exe [1875968]
O40 - TASK: {D846F56D-78D4-466D-814E-2B182E233089} [64Bits][\Avast Emergency Update] - (.AVAST Software - Avast Emergency Update.) -- C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [2319448] =>.AVAST Software s.r.o.®
O40 - TASK: {D922C961-EAF4-4D98-867F-519480317D06} [64Bits][\Opera scheduled Autoupdate 1478371092] - (.Opera Software - Opera Internet Browser.) -- C:\Users\FredSteph\AppData\Local\Programs\Opera\launcher.exe [695816] =>.Opera Software ASA®
O40 - TASK: {E91D6474-70CC-42BE-80FF-8BED8AF557ED} [64Bits][\Microsoft\Windows\Wireless\GatherWirelessInfo] - (...) -- C:\WINDOWS\system32\gatherWirelessInfo.vbs [15181]
O40 - TASK: {F27A700D-2399-4465-8225-F76ACCEAD52F} [64Bits][\Microsoft\Windows\Media Center\mcupdate] - (...) -- C:\WINDOWS\ehome\mcupdate (.not file.) [0] (.Orphan.) =>.SUP.Orphan

---\\ Applications lancées au démarrage du système (10) - 1s
O4 - HKLM\..\Run: [IAAnotif] . (.Intel Corporation - Event Monitor User Notification Tool.) -- C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe =>.Intel Corporation®
O4 - HKLM\..\Run: [AvastUI.exe] . (.AVAST Software - AvLaunch component.) -- C:\Program Files\AVAST Software\Avast\AvLaunch.exe =>.AVAST Software s.r.o.®
O4 - HKCU\..\Run: [SRS Audio Sandbox] . (.SRS Labs, Inc. - SRS Audio Sandbox control panel.) -- C:\Program Files\SRS Labs\Audio Sandbox\SRSSSC.exe =>.SRS Labs, Inc®
O4 - HKLM\..\Wow6432Node\Run: [IAAnotif] . (.Intel Corporation - Event Monitor User Notification Tool.) -- C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe =>.Intel Corporation®
O4 - HKLM\..\Wow6432Node\Run: [AvastUI.exe] . (.AVAST Software - AvLaunch component.) -- C:\Program Files\AVAST Software\Avast\AvLaunch.exe =>.AVAST Software s.r.o.®
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] -- oobefldr.dll
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-20\..\Run: [WindowsWelcomeCenter] -- oobefldr.dll
O4 - HKUS\S-1-5-21-1274196163-758811161-2793526061-1000\..\Run: [SRS Audio Sandbox] . (.SRS Labs, Inc. - SRS Audio Sandbox control panel.) -- C:\Program Files\SRS Labs\Audio Sandbox\SRSSSC.exe =>.SRS Labs, Inc®

---\\ Google Chrome, Démarrage,Recherche,Extensions (11) - 1s
G0 - GCSP: Secure Preferences [User Data\Default][HomePage] http://www.google.fr =>.Google Inc.
G2 - GCE: Preference [User Data\Default][aapocclcgogkmnckokdopfmhonfmgoek] =>.Google Inc. {Slides}
G2 - GCE: Preference [User Data\Default][aohghmighlieiainnegkcijnfilokake] =>.Google Inc. {Docs}
G2 - GCE: Preference [User Data\Default][eofcbnmajmjmplflapaojjnihcjkigck]
G2 - GCE: Preference [User Data\Default][felcaaldnbdncclmgdcncolpebgiejap] =>.Google Inc. {Sheets}
G2 - GCE: Preference [User Data\Default][ghbmnnjooekpmoecnnnilnnbdlolhkhi] =>.Google Inc. {Docs hors connexion}
G2 - GCE: Preference [User Data\Default][gomekmidlodglbbmalcneegieacbdmki]
G2 - GCE: Preference [User Data\Default] [apdfllckaahabafndbhieahigkjlhalf] http://drive.google.com/ =>.Google Inc. {Drive}
G2 - GCE: Preference [User Data\Default] [blpcfgokakmgnkcojhhkbfbldkacnbeo] http://www.youtube.com =>.Youtube {Youtube}
G2 - GCE: Preference [User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] =>.Google Inc. {Wallet}
G2 - GCE: Preference [User Data\Default] [pjkljhegncpnkpknbcohdijeoejaedia] http://mail.google.com/ =>.Google Inc. {Gmail}

---\\ Internet Explorer,Démarrage,Recherche,URLSearchHook (17) - 0s
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr =>.Google Inc.
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://fr.search.yahoo.com/ =>.Yahoo! Inc.
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://fr.search.yahoo.com/ =>.Yahoo! Inc.
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk =>.Microsoft Corporation
R3 - URLSearchHook: (no name)[HKCU] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (9.00.8112.16421 (WIN7_IE9_RTM.110308-0330)) -- C:\WINDOWS\SysWOW64\ieframe.dll =>.Microsoft Corporation
R4 - HKCU\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,Enabled = 1

---\\ Internet Explorer,Proxy Management (5) - 0s
R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
R5 - HKLM\SYSTEM\CurrentControlSet\services\NlaSvc\Parameters\Internet\ManualProxies [] =>.Microsoft

---\\ Internet Explorer,IniFiles, Autoloading programs (3) - 0s
F2 - REG:system.ini: UserInit=userinit.exe (.Microsoft Corporation.) =>.Microsoft Corporation
F2 - REG:system.ini: Shell=C:\WINDOWS\explorer.exe (.Microsoft Corporation.) =>.Microsoft Corporation
F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"

---\\ Etude du fichier hosts (1) - 0s
~ Le fichier hôte est sain (The hosts file is clean) (21)

---\\ Browser Helper Object de navigateur (BHO) (3) - 1s
O2 - BHO: Java(tm) Plug-In SSV Helper [64Bits] - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} (.Orphan.)
O2 - BHO: avast! Online Security [64Bits] - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - IE Webrep plugin.) -- C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll =>.AVAST Software s.r.o.®
O2 - BHO: Java(tm) Plug-In 2 SSV Helper [64Bits] - {DBC80044-A445-435b-BC74-9C25C1C588A9} (.Orphan.)

---\\ Raccourcis Global Startup (75) - 13s
O4 - GS\Desktop [Administrateur]: Disque dur (FREEBOX) - Raccourci.lnk . (...) \\FREEBOX\Disque dur
O4 - GS\Desktop [Administrateur]: FL Studio 9.lnk . (.Image-Line - FL Studio engine launcher.) C:\Program Files (x86)\Image-Line\FL Studio 9\FL.exe =>.Image-Line
O4 - GS\Desktop [Administrateur]: Musiques-Photos-Divers (E) - Raccourci.lnk . (...) E:\
O4 - GS\Desktop [Administrateur]: virtualdj - Raccourci.lnk . (.CRAZY BORIS - VirtualDJ.) C:\Program Files (x86)\VirtualDJ\virtualdj.exe
O4 - GS\Desktop [Administrateur]: WarRock.lnk . (.Copyright (C) 2005 - WRLauncher MFC Application.) C:\Program Files\warrockEU\WRLauncher.exe {3B13A1CFB185145112DA5D7BA0CBEECE}
O4 - GS\Desktop [Administrateur]: ZHPCleaner.lnk . (...) C:\Users\FredSteph\AppData\Roaming\ZHP\ZHPCleaner.exe =>.Nicolas Coolman
O4 - GS\Desktop [Administrateur]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\FredSteph\ZHPDiag3.exe =>.Nicolas Coolman
O4 - GS\Quicklaunch [Administrateur]: Google Chrome.lnk . (...) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O4 - GS\Quicklaunch [Administrateur]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O4 - GS\Quicklaunch [Administrateur]: Mozilla Firefox (3).lnk . (...) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
O4 - GS\Quicklaunch [Administrateur]: Opera (2).lnk . (.Opera Software - Opera Internet Browser.) C:\Users\FredSteph\AppData\Local\Programs\Opera\launcher.exe =>.Opera Software ASA®
O4 - GS\Quicklaunch [Administrateur]: Opera.lnk . (.Opera Software - Opera Internet Browser.) C:\Users\FredSteph\AppData\Local\Programs\Opera\launcher.exe =>.Opera Software ASA®
O4 - GS\Programs [Administrateur]: Internet Explorer (64-bit).lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files (x86)\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O4 - GS\Programs [Administrateur]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O4 - GS\Programs [Administrateur]: Opera.lnk . (.Opera Software - Opera Internet Browser.) C:\Users\FredSteph\AppData\Local\Programs\Opera\launcher.exe =>.Opera Software ASA®
O4 - GS\Programs [Administrateur]: Windows Mail.lnk . (.Microsoft Corporation - Windows Mail.) C:\Program Files (x86)\Windows Mail\WinMail.exe =>.Microsoft Corporation
O4 - GS\Programs [Administrateur]: Windows Media Player.lnk . (.Microsoft Corporation - Windows Media Player.) C:\Program Files (x86)\Windows Media Player\wmplayer.exe /prefetch:1 =>.Microsoft Corporation
O4 - GS\Desktop [FredSteph]: Disque dur (FREEBOX) - Raccourci.lnk . (...) \\FREEBOX\Disque dur
O4 - GS\Desktop [FredSteph]: FL Studio 9.lnk . (.Image-Line - FL Studio engine launcher.) C:\Program Files (x86)\Image-Line\FL Studio 9\FL.exe =>.Image-Line
O4 - GS\Desktop [FredSteph]: Musiques-Photos-Divers (E) - Raccourci.lnk . (...) E:\
O4 - GS\Desktop [FredSteph]: virtualdj - Raccourci.lnk . (.CRAZY BORIS - VirtualDJ.) C:\Program Files (x86)\VirtualDJ\virtualdj.exe
O4 - GS\Desktop [FredSteph]: WarRock.lnk . (.Copyright (C) 2005 - WRLauncher MFC Application.) C:\Program Files\warrockEU\WRLauncher.exe {3B13A1CFB185145112DA5D7BA0CBEECE}
O4 - GS\Desktop [FredSteph]: ZHPCleaner.lnk . (...) C:\Users\FredSteph\AppData\Roaming\ZHP\ZHPCleaner.exe =>.Nicolas Coolman
O4 - GS\Desktop [FredSteph]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\FredSteph\ZHPDiag3.exe =>.Nicolas Coolman
O4 - GS\Quicklaunch [FredSteph]: Google Chrome.lnk . (...) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O4 - GS\Quicklaunch [FredSteph]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O4 - GS\Quicklaunch [FredSteph]: Mozilla Firefox (3).lnk . (...) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
O4 - GS\Quicklaunch [FredSteph]: Opera (2).lnk . (.Opera Software - Opera Internet Browser.) C:\Users\FredSteph\AppData\Local\Programs\Opera\launcher.exe =>.Opera Software ASA®
O4 - GS\Quicklaunch [FredSteph]: Opera.lnk . (.Opera Software - Opera Internet Browser.) C:\Users\FredSteph\AppData\Local\Programs\Opera\launcher.exe =>.Opera Software ASA®
O4 - GS\Programs [FredSteph]: Internet Explorer (64-bit).lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files (x86)\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O4 - GS\Programs [FredSteph]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O4 - GS\Programs [FredSteph]: Opera.lnk . (.Opera Software - Opera Internet Browser.) C:\Users\FredSteph\AppData\Local\Programs\Opera\launcher.exe =>.Opera Software ASA®
O4 - GS\Programs [FredSteph]: Windows Mail.lnk . (.Microsoft Corporation - Windows Mail.) C:\Program Files (x86)\Windows Mail\WinMail.exe =>.Microsoft Corporation
O4 - GS\Programs [FredSteph]: Windows Media Player.lnk . (.Microsoft Corporation - Windows Media Player.) C:\Program Files (x86)\Windows Media Player\wmplayer.exe /prefetch:1 =>.Microsoft Corporation
O4 - GS\CommonDesktop [Public]: CCleaner.lnk . (.Piriform Ltd - CCleaner.) C:\Program Files\CCleaner\CCleaner64.exe =>.Piriform Ltd®
O4 - GS\CommonDesktop [Public]: Speccy.lnk . (.Piriform Ltd - Speccy.) C:\Program Files\Speccy\Speccy64.exe =>.Piriform Ltd®
O4 - GS\Programs [Public]: Internet Explorer (64-bit).lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files (x86)\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O4 - GS\Programs [Public]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O4 - GS\Programs [Public]: Opera.lnk . (.Opera Software - Opera Internet Browser.) C:\Users\FredSteph\AppData\Local\Programs\Opera\launcher.exe =>.Opera Software ASA®
O4 - GS\Programs [Public]: Windows Mail.lnk . (.Microsoft Corporation - Windows Mail.) C:\Program Files (x86)\Windows Mail\WinMail.exe =>.Microsoft Corporation
O4 - GS\Programs [Public]: Windows Media Player.lnk . (.Microsoft Corporation - Windows Media Player.) C:\Program Files (x86)\Windows Media Player\wmplayer.exe /prefetch:1 =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Command Prompt.lnk . (.Microsoft Corporation - Interpréteur de commandes Windows.) C:\WINDOWS\System32\cmd.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Notepad.lnk . (.Microsoft Corporation - Bloc-notes.) C:\WINDOWS\System32\notepad.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Windows Explorer.lnk . (.Microsoft Corporation - Explorateur Windows.) C:\WINDOWS\explorer.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files\Internet Explorer\iexplore.exe -extoff =>.Microsoft Corporation®
O4 - GS\Accessories [Public]: Calculator.lnk . (.Microsoft Corporation - Calculatrice de Windows.) C:\WINDOWS\System32\calc.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Mobility Center.lnk . (.Microsoft Corporation - Centre de mobilité Windows.) C:\WINDOWS\System32\mblctr.exe /open =>.Microsoft Corporation
O4 - GS\Accessories [Public]: NetworkProjection.lnk . (.Microsoft Corporation - Connect to a Network Projector.) C:\WINDOWS\System32\NetProj.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Paint.lnk . (.Microsoft Corporation - Paint.) C:\WINDOWS\System32\mspaint.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Remote Desktop Connection.lnk . (.Microsoft Corporation - Connexion Bureau à distance.) C:\WINDOWS\System32\mstsc.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Sidebar.lnk . (.Microsoft Corporation - Volet Windows.) C:\Program Files (x86)\Windows Sidebar\sidebar.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Snipping Tool.lnk . (.Microsoft Corporation - Outil Capture.) C:\WINDOWS\System32\SnippingTool.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Sound Recorder.lnk . (.Microsoft Corporation - Magnétophone Windows.) C:\WINDOWS\System32\SoundRecorder.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Sync Center.lnk . (.Microsoft Corporation - Microsoft Sync Center.) C:\WINDOWS\System32\mobsync.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Welcome Center.lnk . (.Microsoft Corporation - Windows Control Panel.) C:\WINDOWS\System32\control.exe /name Microsoft.WelcomeCenter =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Wordpad.lnk . (.Microsoft Corporation - Application Windows Wordpad.) C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: Backup.lnk . (.Microsoft Corporation - Sauvegarde Microsoft® Windows.) C:\WINDOWS\System32\sdclt.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: Character Map.lnk . (.Microsoft Corporation - Table des caractères.) C:\WINDOWS\System32\charmap.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: dfrgui.lnk . (.Microsoft Corporation - Défragmenteur de disque Microsoft®.) C:\WINDOWS\System32\dfrgui.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: Disk Cleanup.lnk . (.Microsoft Corporation - Gestionnaire de nettoyage de disque pour Wi.) C:\WINDOWS\SysWOW64\cleanmgr.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: migwiz.lnk . (.Microsoft Corporation - Transfert de fichiers et paramètres Windows.) C:\WINDOWS\System32\migwiz\migwiz.exe =>.Microsoft Windows®
O4 - GS\SystemTools [Public]: System Information.lnk . (.Microsoft Corporation - Informations système.) C:\WINDOWS\System32\msinfo32.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: System Restore.lnk . (.Microsoft Corporation - Restauration du système de Microsoft® Windo.) C:\WINDOWS\System32\rstrui.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: Task Scheduler.lnk . (...) C:\WINDOWS\System32\taskschd.msc /s =>..Microsoft Corporation
O4 - GS\ProgramsCommon [Public]: Adobe Reader 8.lnk . (...) C:\Windows\Installer\{AC76BA86-7AD7-1036-7B44-A81200000003}\SC_Reader.exe
O4 - GS\ProgramsCommon [Public]: Avast SafeZone Browser.lnk . (.Avast Software - Avast SafeZone Browser.) C:\Program Files\AVAST Software\SZBrowser\launcher.exe =>.AVAST Software s.r.o.®
O4 - GS\ProgramsCommon [Public]: Media Center.lnk . (.Microsoft Corporation - Media Center.) C:\WINDOWS\ehome\ehshell.exe =>.Microsoft Corporation
O4 - GS\ProgramsCommon [Public]: Windows Calendar.lnk . (.Microsoft Corporation - Calendrier Windows.) C:\Program Files (x86)\Windows Calendar\WinCal.exe =>.Microsoft Corporation
O4 - GS\ProgramsCommon [Public]: Windows Collaboration.lnk . (.Microsoft Corporation - .) C:\Program Files (x86)\Windows Collaboration\WinCollab.exe =>.Microsoft Corporation
O4 - GS\ProgramsCommon [Public]: Windows Contacts.lnk . (.Microsoft Corporation - Windows Contacts.) C:\Program Files (x86)\Windows Mail\wab.exe =>.Microsoft Corporation
O4 - GS\ProgramsCommon [Public]: Windows Defender.lnk . (.Microsoft Corporation - .) C:\Program Files (x86)\Windows Defender\MSASCui.exe =>.Microsoft Corporation
O4 - GS\ProgramsCommon [Public]: Windows DVD Maker.lnk . (.Microsoft Corporation - .) C:\Program Files (x86)\Movie Maker\DVDMaker.exe =>.Microsoft Corporation
O4 - GS\ProgramsCommon [Public]: Windows Mail.lnk . (.Microsoft Corporation - Windows Mail.) C:\Program Files (x86)\Windows Mail\WinMail.exe =>.Microsoft Corporation
O4 - GS\ProgramsCommon [Public]: Windows Movie Maker.lnk . (.Microsoft Corporation - .) C:\Program Files (x86)\Movie Maker\MOVIEMK.exe =>.Microsoft Corporation
O4 - GS\ProgramsCommon [Public]: Windows Photo Gallery.lnk . (.Microsoft Corporation - Galerie de photos Windows.) C:\Program Files (x86)\Windows Photo Gallery\WindowsPhotoGallery.exe =>.Microsoft Corporation

---\\ Modification Domaine/Adresses DNS (3) - 0s
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.254 =>.Local IP Adress
O17 - HKLM\System\CCS\Services\Tcpip\..\{61B6089D-439C-4572-AC09-EE4A10BCB338}: DhcpNameServer = 192.168.1.254 =>.Local IP Adress
O17 - HKLM\System\CCS\Services\Tcpip\..\{8E469426-8111-4820-BAF3-46B704601B9C}: DhcpNameServer = 192.168.0.254 =>.Local IP Adress

---\\ Protocole additionnel (20) - 1s
O18 - Handler: about [64Bits] - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\WINDOWS\SysWOW64\mshtml.dll =>.Microsoft Corporation
O18 - Handler: cdl [64Bits] - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\WINDOWS\SysWOW64\urlmon.dll =>.Microsoft Corporation
O18 - Handler: dvd [64Bits] - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\WINDOWS\SysWOW64\MSVidCtl.dll =>.Microsoft Corporation
O18 - Handler: file [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\WINDOWS\SysWOW64\urlmon.dll =>.Microsoft Corporation
O18 - Handler: ftp [64Bits] - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\WINDOWS\SysWOW64\urlmon.dll =>.Microsoft Corporation
O18 - Handler: http [64Bits] - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\WINDOWS\SysWOW64\urlmon.dll =>.Microsoft Corporation
O18 - Handler: https [64Bits] - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\WINDOWS\SysWOW64\urlmon.dll =>.Microsoft Corporation
O18 - Handler: its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\WINDOWS\System32\itss.dll =>.Microsoft Corporation
O18 - Handler: javascript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\WINDOWS\SysWOW64\mshtml.dll =>.Microsoft Corporation
O18 - Handler: local [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\WINDOWS\SysWOW64\urlmon.dll =>.Microsoft Corporation
O18 - Handler: mailto [64Bits] - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\WINDOWS\SysWOW64\mshtml.dll =>.Microsoft Corporation
O18 - Handler: mhtml [64Bits] - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\WINDOWS\System32\inetcomm.dll =>.Microsoft Corporation
O18 - Handler: mk [64Bits] - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\WINDOWS\SysWOW64\urlmon.dll =>.Microsoft Corporation
O18 - Handler: ms-its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\WINDOWS\System32\itss.dll =>.Microsoft Corporation
O18 - Handler: res [64Bits] - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\WINDOWS\SysWOW64\mshtml.dll =>.Microsoft Corporation
O18 - Handler: tv [64Bits] - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\WINDOWS\SysWOW64\MSVidCtl.dll =>.Microsoft Corporation
O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\WINDOWS\SysWOW64\mshtml.dll =>.Microsoft Corporation
O18 - Filter: application/octet-stream [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS\System32\mscoree.dll =>.Microsoft Corporation®
O18 - Filter: application/x-complus [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS\System32\mscoree.dll =>.Microsoft Corporation®
O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS\System32\mscoree.dll =>.Microsoft Corporation®

---\\ Logiciels installés (46) - 8s
O42 - Logiciel: AbiWord 2.8.6 - (.AbiSource Developers.) [HKLM][64Bits] -- AbiWord2 =>.AbiSource Developers
O42 - Logiciel: Adobe Flash Player 25 PPAPI - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player PPAPI =>.Adobe Systems Incorporated®
O42 - Logiciel: Adobe Reader 8.1.2 - Français - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-7AD7-1036-7B44-A81200000003} =>.Adobe Systems Incorporated
O42 - Logiciel: Avast Antivirus Gratuit - (.AVAST Software.) [HKLM][64Bits] -- Avast Antivirus =>.AVAST Software s.r.o.®
O42 - Logiciel: Call of Duty: Black Ops II - Multiplayer - (.Treyarch.) [HKLM][64Bits] -- Steam App 202990 =>.Valve®
O42 - Logiciel: CCleaner - (.Piriform.) [HKLM][64Bits] -- CCleaner =>.Piriform Ltd®
O42 - Logiciel: Chromium - (.Chromium.) [HKCU][64Bits] -- Chromium =>.Chromium
O42 - Logiciel: FL Studio 9 - (.Image-Line.) [HKLM][64Bits] -- FL Studio 9 =>.Image-Line
O42 - Logiciel: Hardcore - (.Image-Line.) [HKLM][64Bits] -- Hardcore =>.Image-Line
O42 - Logiciel: Hewlett-Packard Active Check for Health Check - (.Hewlett-Packard.) [HKLM][64Bits] -- {254C37AA-6B72-4300-84F6-98A82419187E} =>.Hewlett-Packard
O42 - Logiciel: Hewlett-Packard Asset Agent for Health Check - (.HP.) [HKLM][64Bits] -- {669D4A35-146B-4314-89F1-1AC3D7B88367} =>.HP
O42 - Logiciel: HP Active Support Library - (.Hewlett-Packard.) [HKLM][64Bits] -- {5DAA9C36-8F8B-462F-8CCA-E205BC3751F5} =>.Hewlett-Packard
O42 - Logiciel: HP Customer Feedback - (.Hewlett-Packard.) [HKLM][64Bits] -- {9DBA770F-BF73-4D39-B1DF-6035D95268FC} =>.Hewlett-Packard
O42 - Logiciel: HP Picasso Media Center Add-In - (.HP.) [HKLM][64Bits] -- {55979C41-7D6A-49CC-B591-64AC1BBE2C8B} =>.HP
O42 - Logiciel: HP Recovery Manager RSS - (.Hewlet Packard Company.) [HKLM][64Bits] -- {A0640EC2-B97E-4FC1-AD14-227C9E386BB4} =>.Hewlet Packard Company
O42 - Logiciel: IL Download Manager - (.Image-Line.) [HKLM][64Bits] -- IL Download Manager =>.Image-Line
O42 - Logiciel: Intel® Matrix Storage Manager - (.Intel Corporation.) [HKLM][64Bits] -- {9068B2BE-D93A-4C0A-861C-5E35E2C0E09E} =>.Intel Corporation®
O42 - Logiciel: Java 8 Update 131 (64-bit) - (.Oracle Corporation.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F64180131F0} =>.Oracle Corporation
O42 - Logiciel: Java 8 Update 144 (64-bit) - (.Oracle Corporation.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F64180144F0} =>.Oracle Corporation
O42 - Logiciel: Java Auto Updater - (.Oracle Corporation.) [HKLM][64Bits] -- {4A03706F-666A-4037-7777-5F2748764D10} =>.Oracle Corporation
O42 - Logiciel: Mises à jour NVIDIA 1.7.12 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update =>.NVIDIA Corporation
O42 - Logiciel: NFO viewer v 2.1 - (..) [HKLM][64Bits] -- NFO viewer_is1
O42 - Logiciel: NVIDIA Install Application - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer =>.NVIDIA Corporation
O42 - Logiciel: NVIDIA Pilote graphique 296.19 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver =>.NVIDIA Corporation
O42 - Logiciel: NVIDIA Update Components - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update =>.NVIDIA Corporation
O42 - Logiciel: Opera Stable 36.0.2130.80 - (.Opera Software.) [HKCU][64Bits] -- Opera 36.0.2130.80 =>.Opera Software ASA®
O42 - Logiciel: Outils de diagnostic du matériel - (.PC-Doctor, Inc..) [HKLM][64Bits] -- PC-Doctor for Windows =>.PC-Doctor, Inc.
O42 - Logiciel: Panneau de configuration NVIDIA 296.19 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel =>.NVIDIA Corporation
O42 - Logiciel: PoiZone - (.Image-Line.) [HKLM][64Bits] -- PoiZone =>.Image-Line
O42 - Logiciel: Power2Go - (.CyberLink Corp..) [HKLM][64Bits] -- {40BF1E83-20EB-11D8-97C5-0009C5020658} =>.CyberLink Corp.
O42 - Logiciel: Python 2.5.2 - (.Python Software Foundation.) [HKLM][64Bits] -- {6B976ADF-8AE8-434E-B282-A06C7F624D2F} =>.Python Software Foundation
O42 - Logiciel: Realtek Ethernet Controller Driver - (.Realtek.) [HKLM][64Bits] -- {8833FFB6-5B0C-4764-81AA-06DFEED9A476} =>.Realtek Semiconductor Corp®
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC} =>.Realtek Semiconductor Corp.
O42 - Logiciel: SafeZone Stable 1.48.2066.120 - (.Avast Software.) [HKLM][64Bits] -- SafeZone 1.48.2066.120 =>.AVAST Software s.r.o.®
O42 - Logiciel: Sawer - (.Image-Line.) [HKLM][64Bits] -- Sawer =>.Image-Line
O42 - Logiciel: Solution de clavier multimédia amélioré - (.Hewlett-Packard.) [HKLM][64Bits] -- KBD =>.Hewlett-Packard
O42 - Logiciel: Sonic Charge µTonic VSTi v2.0 - (.Sonic Solutions.) [HKLM][64Bits] -- Sonic Charge µTonic VSTi v2.0 =>.Sonic Solutions
O42 - Logiciel: Speccy - (.Piriform.) [HKLM][64Bits] -- Speccy =>.Piriform Ltd®
O42 - Logiciel: SRS Audio Sandbox - (.SRS Labs, Inc..) [HKLM][64Bits] -- {542C6F13-6861-4010-9EBC-6F068D397AD8} =>.SRS Labs, Inc.
O42 - Logiciel: Steam - (.Valve Corporation.) [HKLM][64Bits] -- {048298C9-A4D3-490B-9FF9-AB023A9238F3} =>.Valve Corporation
O42 - Logiciel: TL-WN725N_WN723N Pilote - (.TP-LINK.) [HKLM][64Bits] -- {3C3F9CEB-2C5A-4A47-8EAA-DA76037546BA} =>.TP-LINK
O42 - Logiciel: Toxic Biohazard - (.Image-Line.) [HKLM][64Bits] -- Toxic Biohazard =>.Image-Line
O42 - Logiciel: Virtual DJ - Atomix Productions - (.Atomix Production.) [HKLM][64Bits] -- Virtual DJ - Atomix Productions =>.Atomix Production
O42 - Logiciel: VLC media player - (.VideoLAN.) [HKLM][64Bits] -- VLC media player =>.VideoLAN
O42 - Logiciel: WhiteCap - (.SoundSpectrum.) [HKLM][64Bits] -- WhiteCap =>.SoundSpectrum
O42 - Logiciel: WinRAR archiver - (.RarLab.) [HKLM][64Bits] -- WinRAR archiver =>.RarLab

---\\ HKCU & HKLM Software Keys (92) - 8s
HKLM\SOFTWARE\Wow6432Node\AbiWord
HKLM\SOFTWARE\Wow6432Node\activision =>.Activision
HKLM\SOFTWARE\Wow6432Node\Adobe =>.Adobe
HKLM\SOFTWARE\Wow6432Node\America Online =>.America Online
HKLM\SOFTWARE\Wow6432Node\AVAST Software =>.AVAST Software
HKLM\SOFTWARE\Wow6432Node\Chromium =>.Chromium
HKLM\SOFTWARE\Wow6432Node\CLSID =>.Unknown
HKLM\SOFTWARE\Wow6432Node\CyberLink =>.CyberLink Corporation
HKLM\SOFTWARE\Wow6432Node\Debug =>.Legitimate
HKLM\SOFTWARE\Wow6432Node\DreamExe
HKLM\SOFTWARE\Wow6432Node\EasyAntiCheat =>.EasyAntiCheat
HKLM\SOFTWARE\Wow6432Node\Google =>.Google
HKLM\SOFTWARE\Wow6432Node\Hewlett-Packard =>.Hewlett-Packard
HKLM\SOFTWARE\Wow6432Node\Image-Line =>.Image-Line
HKLM\SOFTWARE\Wow6432Node\InstallShield =>.InstallShield
HKLM\SOFTWARE\Wow6432Node\Intel =>.Intel
HKLM\SOFTWARE\Wow6432Node\Interface
HKLM\SOFTWARE\Wow6432Node\JavaSoft =>.JavaSoft
HKLM\SOFTWARE\Wow6432Node\JreMetrics =>.JreMetrics
HKLM\SOFTWARE\Wow6432Node\Khronos =>.Khronos
HKLM\SOFTWARE\Wow6432Node\LightScribe =>.LightScribe
HKLM\SOFTWARE\Wow6432Node\Macromedia =>.Macromedia
HKLM\SOFTWARE\Wow6432Node\McAfee.com =>.McAfee Inc.
HKLM\SOFTWARE\Wow6432Node\mcafeeupdater =>.McAfee Inc.
HKLM\SOFTWARE\Wow6432Node\Mozilla =>.Mozilla
HKLM\SOFTWARE\Wow6432Node\mozilla.org =>.mozilla.org
HKLM\SOFTWARE\Wow6432Node\MozillaPlugins =>.MozillaPlugins
HKLM\SOFTWARE\Wow6432Node\muvee Technologies =>.muvee Technologies
HKLM\SOFTWARE\Wow6432Node\NuEdge Development =>.NuEdge Development
HKLM\SOFTWARE\Wow6432Node\NVIDIA Corporation =>.nVidia Corporation
HKLM\SOFTWARE\Wow6432Node\ODBC =>.DB Connectivity Solutions
HKLM\SOFTWARE\Wow6432Node\OldTimer Tools =>.OldTimer Tools
HKLM\SOFTWARE\Wow6432Node\Outsim =>.Outsim
HKLM\SOFTWARE\Wow6432Node\PC-Doctor =>.PC-Doctor Inc.
HKLM\SOFTWARE\Wow6432Node\Piriform =>.Piriform
HKLM\SOFTWARE\Wow6432Node\Propellerhead Software =>.Propellerhead Software
HKLM\SOFTWARE\Wow6432Node\Realtek =>.Realtek Semiconductor Corp.
HKLM\SOFTWARE\Wow6432Node\Realtek Semiconductor Corp. =>.Realtek Semiconductor Corp.
HKLM\SOFTWARE\Wow6432Node\RegisteredApplications =>.Microsoft Corporation
HKLM\SOFTWARE\Wow6432Node\SRS Labs =>.SRS Labs
HKLM\SOFTWARE\Wow6432Node\Supremus Corporation
HKLM\SOFTWARE\Wow6432Node\Symantec =>.Symantec
HKLM\SOFTWARE\Wow6432Node\TP-LINK =>.TP-LINK
HKLM\SOFTWARE\Wow6432Node\Valve =>.Valve
HKLM\SOFTWARE\Wow6432Node\VideoLAN =>.VideoLAN
HKLM\SOFTWARE\Wow6432Node\VirtualDJ =>.Atomix Production
HKLM\SOFTWARE\Wow6432Node\Volatile =>.Microsoft Corporation
HKLM\SOFTWARE\Wow6432Node\VST =>.Virtual Studio Technology
HKLM\SOFTWARE\Wow6432Node\Wilson WindowWare =>.Wilson WindowWare
HKLM\SOFTWARE\Wow6432Node\Windows =>.Microsoft Corporation
HKLM\SOFTWARE\Wow6432Node\WRUpdater
HKCU\SOFTWARE\AC1
HKCU\SOFTWARE\Adobe =>.Adobe
HKCU\SOFTWARE\AOL =>.America On Line Inc.
HKCU\SOFTWARE\AppDataLow =>.Microsoft Corporation
HKCU\SOFTWARE\Apple Inc. =>.Apple Inc.
HKCU\SOFTWARE\AudioComp
HKCU\SOFTWARE\AudioComparer
HKCU\SOFTWARE\Avast Software =>.AVAST Software
HKCU\SOFTWARE\BitComet =>.BitComet (P2P)
HKCU\SOFTWARE\Chromium =>.Chromium
HKCU\SOFTWARE\CyberLink =>.CyberLink Corporation
HKCU\SOFTWARE\geissplugin
HKCU\SOFTWARE\Google =>.Google
HKCU\SOFTWARE\Guillaume Lacasa =>.Guillaume Lacasa
HKCU\SOFTWARE\Hewlett-Packard =>.Hewlett-Packard
HKCU\SOFTWARE\Image-Line =>.Image-Line
HKCU\SOFTWARE\JavaSoft =>.JavaSoft
HKCU\SOFTWARE\Macromedia =>.Macromedia
HKCU\SOFTWARE\Mozilla =>.Mozilla
HKCU\SOFTWARE\MozillaPlugins =>.MozillaPlugins
HKCU\SOFTWARE\Netscape =>.Netscape
HKCU\SOFTWARE\Nexon =>.Nexon
HKCU\SOFTWARE\NuEdge Development =>.NuEdge Development
HKCU\SOFTWARE\NVIDIA Corporation =>.nVidia Corporation
HKCU\SOFTWARE\nwjs =>.NW.js
HKCU\SOFTWARE\Opera Software =>.Opera Software
HKCU\SOFTWARE\Piriform =>.Piriform
HKCU\SOFTWARE\Realtek =>.Realtek Semiconductor Corp.
HKCU\SOFTWARE\RegisteredApplications =>.Microsoft Corporation
HKCU\SOFTWARE\SoftVoice =>.SoftVoice
HKCU\SOFTWARE\Trolltech =>.Trolltech
HKCU\SOFTWARE\Valve =>.Valve
HKCU\SOFTWARE\VirtualDJ =>.Atomix Production
HKCU\SOFTWARE\Winamp =>.Nullsoft Inc.
HKCU\SOFTWARE\WinRAR =>.WinRAR
HKCU\SOFTWARE\WinRAR SFX =>.RarLab
HKCU\SOFTWARE\Wow6432Node =>.Microsoft Corporation
HKCU\SOFTWARE\ZebHelpProcess Helper =>.Nicolas Coolman
HKCU\SOFTWARE\ZHP =>.Nicolas Coolman
HKCU\SOFTWARE\AppDataLow\Software =>.Microsoft Corporation
HKCU\SOFTWARE\AppDataLow\Software\JavaSoft =>.JavaSoft

---\\ Contenu des dossiers Programmes (219) - 26s
O43 - CFD: 21/08/2017 - [] D -- C:\Program Files\AVAST Software =>.AVAST Software s.r.o.®
O43 - CFD: 22/08/2017 - [] D -- C:\Program Files\CCleaner =>.Piriform Ltd
O43 - CFD: 18/04/2016 - [] D -- C:\Program Files\Common Files =>.Microsoft Corporation
O43 - CFD: 18/04/2016 - [0] SHD -- C:\Program Files\Fichiers communs =>.Microsoft Corporation
O43 - CFD: 26/06/2009 - [0] D -- C:\Program Files\Hewlett-Packard =>.Hewlett-Packard
O43 - CFD: 17/07/2016 - [] D -- C:\Program Files\Internet Explorer =>.Microsoft Corporation
O43 - CFD: 23/08/2017 - [] D -- C:\Program Files\Java =>.Oracle
O43 - CFD: 02/11/2006 - [] D -- C:\Program Files\Microsoft Games =>.Microsoft Corporation
O43 - CFD: 18/04/2016 - [] D -- C:\Program Files\Movie Maker =>.Microsoft Corporation
O43 - CFD: 02/11/2006 - [] D -- C:\Program Files\MSBuild =>.Microsoft Corporation
O43 - CFD: 19/04/2016 - [] D -- C:\Program Files\NVIDIA Corporation =>.nVidia Corporation
O43 - CFD: 18/04/2016 - [] RD -- C:\Program Files\Online Services =>.Hewlett-Packard
O43 - CFD: 02/11/2006 - [] D -- C:\Program Files\Reference Assemblies =>.Microsoft Corporation
O43 - CFD: 22/08/2017 - [] D -- C:\Program Files\Speccy =>.Piriform
O43 - CFD: 24/04/2016 - [] D -- C:\Program Files\SRS Labs =>.SRS Labs, Inc®
O43 - CFD: 02/11/2006 - [0] HD -- C:\Program Files\Uninstall Information =>.Microsoft Corporation
O43 - CFD: 19/08/2017 - [] D -- C:\Program Files\warrockEU
O43 - CFD: 26/06/2009 - [] D -- C:\Program Files\Windows Calendar =>.Microsoft Corporation
O43 - CFD: 19/04/2016 - [] D -- C:\Program Files\Windows Collaboration =>.Microsoft Corporation
O43 - CFD: 18/04/2016 - [] D -- C:\Program Files\Windows Defender =>.Microsoft Corporation
O43 - CFD: 14/05/2016 - [] D -- C:\Program Files\Windows Journal =>.Microsoft Corporation
O43 - CFD: 19/04/2016 - [] D -- C:\Program Files\Windows Mail =>.Microsoft Corporation
O43 - CFD: 19/04/2016 - [] D -- C:\Program Files\Windows Media Player =>.Microsoft Corporation
O43 - CFD: 18/04/2016 - [] D -- C:\Program Files\Windows NT =>.Microsoft Corporation
O43 - CFD: 18/04/2016 - [] D -- C:\Program Files\Windows Photo Gallery =>.Microsoft Corporation
O43 - CFD: 19/04/2016 - [] D -- C:\Program Files\Windows Portable Devices =>.Microsoft Corporation
O43 - CFD: 18/04/2016 - [] D -- C:\Program Files\Windows Sidebar =>.Microsoft Corporation
O43 - CFD: 11/02/2017 - [] D -- C:\Program Files (x86)\AbiWord =>.SourceGear
O43 - CFD: 18/04/2016 - [] D -- C:\Program Files (x86)\Adobe =>.Adobe Systems, Incorporated®
O43 - CFD: 23/08/2017 - [] D -- C:\Program Files (x86)\Common Files =>.Microsoft Corporation
O43 - CFD: 19/04/2016 - [] D -- C:\Program Files (x86)\CyberLink =>.CyberLink Corporation
O43 - CFD: 25/09/2016 - [] D -- C:\Program Files (x86)\dumps
O43 - CFD: 26/06/2009 - [] D -- C:\Program Files (x86)\Hewlett-Packard =>.Hewlett-Packard
O43 - CFD: 18/04/2016 - [] D -- C:\Program Files (x86)\HP =>.Hewlett-Packard
O43 - CFD: 21/04/2016 - [] D -- C:\Program Files (x86)\Image-Line =>.Image-Line
O43 - CFD: 15/01/2017 - [] HD -- C:\Program Files (x86)\InstallShield Installation Information =>.InstallShield
O43 - CFD: 18/04/2016 - [] D -- C:\Program Files (x86)\Intel =>.Intel Corporation
O43 - CFD: 17/07/2016 - [] D -- C:\Program Files (x86)\Internet Explorer =>.Microsoft Corporation
O43 - CFD: 19/03/2017 - [] D -- C:\Program Files (x86)\Java =>.Oracle
O43 - CFD: 18/01/2017 - [0] D -- C:\Program Files (x86)\Microsoft Windows 7 Upgrade Advisor =>.Microsoft Corporation
O43 - CFD: 18/04/2016 - [] D -- C:\Program Files (x86)\Microsoft Works =>.Microsoft Corporation
O43 - CFD: 18/04/2016 - [] D -- C:\Program Files (x86)\Microsoft.NET =>.Microsoft Corporation
O43 - CFD: 02/11/2006 - [] D -- C:\Program Files (x86)\MSBuild =>.Microsoft Corporation
O43 - CFD: 16/11/2016 - [] D -- C:\Program Files (x86)\MSECache =>.Microsoft Corporation
O43 - CFD: 19/07/2017 - [0] D -- C:\Program Files (x86)\Nexon =>.Nexon
O43 - CFD: 19/04/2016 - [] D -- C:\Program Files (x86)\NFO viewer
O43 - CFD: 19/04/2016 - [] D -- C:\Program Files (x86)\NVIDIA Corporation =>.nVidia Corporation
O43 - CFD: 21/04/2016 - [] D -- C:\Program Files (x86)\Outsim =>.Outsim
O43 - CFD: 19/07/2017 - [] D -- C:\Program Files (x86)\PC-Doctor for Windows =>.PC-Doctor Inc.
O43 - CFD: 30/10/2016 - [] D -- C:\Program Files (x86)\Realtek =>.Realtek
O43 - CFD: 02/11/2006 - [] D -- C:\Program Files (x86)\Reference Assemblies =>.Microsoft Corporation
O43 - CFD: 18/02/2017 - [] D -- C:\Program Files (x86)\SoundSpectrum =>.SoundSpectrum
O43 - CFD: 25/05/2017 - [] D -- C:\Program Files (x86)\Steam =>.Steam Games
O43 - CFD: 02/11/2006 - [0] HD -- C:\Program Files (x86)\Uninstall Information =>.Microsoft Corporation
O43 - CFD: 27/07/2016 - [] D -- C:\Program Files (x86)\VideoLAN =>.VideoLan Team
O43 - CFD: 05/06/2017 - [] D -- C:\Program Files (x86)\VirtualDJ =>.Atomix Production
O43 - CFD: 18/04/2016 - [] D -- C:\Program Files (x86)\Windows Calendar =>.Microsoft Corporation
O43 - CFD: 21/01/2008 - [] D -- C:\Program Files (x86)\Windows Collaboration =>.Microsoft Corporation
O43 - CFD: 26/06/2009 - [] D -- C:\Program Files (x86)\Windows Defender =>.Microsoft Corporation
O43 - CFD: 19/04/2016 - [] D -- C:\Program Files (x86)\Windows Mail =>.Microsoft Corporation
O43 - CFD: 19/04/2016 - [] D -- C:\Program Files (x86)\Windows Media Player =>.Microsoft Corporation
O43 - CFD: 02/11/2006 - [] D -- C:\Program Files (x86)\Windows NT =>.Microsoft Corporation
O43 - CFD: 18/04/2016 - [] D -- C:\Program Files (x86)\Windows Photo Gallery =>.Microsoft Corporation
O43 - CFD: 19/04/2016 - [] D -- C:\Program Files (x86)\Windows Portable Devices =>.Microsoft Corporation
O43 - CFD: 18/04/2016 - [] D -- C:\Program Files (x86)\Windows Sidebar =>.Microsoft Corporation
O43 - CFD: 18/04/2016 - [] D -- C:\Program Files (x86)\WinRAR =>.WinRAR
O43 - CFD: 11/02/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AbiWord Word Processor =>.SourceGear
O43 - CFD: 29/10/2016 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories =>.Microsoft Corporation
O43 - CFD: 29/10/2016 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools =>.Administrative Tools
O43 - CFD: 21/08/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software =>.AVAST Software
O43 - CFD: 22/08/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner =>.Piriform Ltd
O43 - CFD: 29/10/2016 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Extras and Upgrades =>.Legitimate
O43 - CFD: 29/10/2016 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games =>.Microsoft Corporation
O43 - CFD: 29/10/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Image-Line =>.Image-Line
O43 - CFD: 29/10/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel® Matrix Storage Manager =>.Intel Corporation
O43 - CFD: 23/08/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java =>.Oracle
O43 - CFD: 29/10/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Les manuels de l'utilisateur =>.Les manuels de l'utilisateur
O43 - CFD: 29/10/2016 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LightScribe Direct Disc Labeling =>.LightScribe
O43 - CFD: 29/10/2016 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance =>.Microsoft Corporation
O43 - CFD: 19/03/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MicroTonic
O43 - CFD: 29/10/2016 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Online Services =>.Hewlett-Packard
O43 - CFD: 29/10/2016 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outils et Aide
O43 - CFD: 22/08/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Speccy =>.Piriform
O43 - CFD: 24/04/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SRS Labs =>.SRS Labs
O43 - CFD: 02/11/2006 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup =>.Microsoft Corporation
O43 - CFD: 01/11/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam =>.Steam Games
O43 - CFD: 02/11/2006 - [] RHD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC =>.Wacom Technology
O43 - CFD: 15/01/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TP-LINK =>.TP-LINK
O43 - CFD: 29/10/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN =>.VideoLan Team
O43 - CFD: 04/06/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Virtual DJ =>.Atomix Production
O43 - CFD: 19/07/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WarRock
O43 - CFD: 18/02/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WhiteCap =>.Andy O'Meara
O43 - CFD: 29/10/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR =>.WinRAR
O43 - CFD: 22/04/2016 - [] D -- C:\ProgramData\Adobe =>.Adobe
O43 - CFD: 16/09/2016 - [] D -- C:\ProgramData\Apple =>.Apple Inc.
O43 - CFD: 18/04/2016 - [0] SHD -- C:\ProgramData\Application Data =>.Microsoft Corporation
O43 - CFD: 21/08/2017 - [] D -- C:\ProgramData\AVAST Software =>.AVAST Software
O43 - CFD: 18/04/2016 - [0] SHD -- C:\ProgramData\Bureau =>.Microsoft Corporation
O43 - CFD: 15/09/2016 - [] D -- C:\ProgramData\clp
O43 - CFD: 23/10/2016 - [] D -- C:\ProgramData\CyberLink =>.CyberLink Corporation
O43 - CFD: 18/04/2016 - [0] SHD -- C:\ProgramData\Documents =>.Microsoft Corporation
O43 - CFD: 18/04/2016 - [0] SHD -- C:\ProgramData\Favoris =>.Microsoft Corporation
O43 - CFD: 18/04/2016 - [] D -- C:\ProgramData\Hewlett-Packard =>.Hewlett-Packard
O43 - CFD: 18/04/2016 - [] D -- C:\ProgramData\HP =>.Hewlett-Packard
O43 - CFD: 19/07/2017 - [] D -- C:\ProgramData\Kaspersky Lab Setup Files =>.Kaspersky Lab
O43 - CFD: 11/11/2016 - [] D -- C:\ProgramData\McAfee =>.McAfee
O43 - CFD: 12/11/2016 - [] D -- C:\ProgramData\MediaMonkey
O43 - CFD: 18/04/2016 - [0] SHD -- C:\ProgramData\Menu Démarrer =>.Microsoft Corporation
O43 - CFD: 30/12/2016 - [] SD -- C:\ProgramData\Microsoft =>.Microsoft Corporation
O43 - CFD: 18/04/2016 - [0] SHD -- C:\ProgramData\Modèles =>.Microsoft Corporation
O43 - CFD: 26/06/2009 - [] D -- C:\ProgramData\muvee Technologies =>.muvee Technologies
O43 - CFD: 18/03/2017 - [] D -- C:\ProgramData\Nexon =>.Nexon
O43 - CFD: 19/04/2016 - [] D -- C:\ProgramData\NVIDIA =>.nVidia Corporation
O43 - CFD: 19/04/2016 - [] D -- C:\ProgramData\NVIDIA Corporation =>.nVidia Corporation
O43 - CFD: 21/04/2017 - [] D -- C:\ProgramData\Oracle =>.Oracle
O43 - CFD: 18/03/2017 - [] D -- C:\ProgramData\Package Cache =>.Microsoft Corporation
O43 - CFD: 29/10/2016 - [] D -- C:\ProgramData\PC-Doctor for Windows =>.PC-Doctor Inc.
O43 - CFD: 15/09/2016 - [] D -- C:\ProgramData\RogueKiller =>.Adlice Software
O43 - CFD: 18/04/2016 - [] D -- C:\ProgramData\SRS Labs =>.SRS Labs
O43 - CFD: 18/04/2016 - [] D -- C:\ProgramData\Sun =>.Oracle
O43 - CFD: 18/04/2016 - [] D -- C:\ProgramData\Symantec =>.Symantec
O43 - CFD: 15/01/2017 - [] D -- C:\ProgramData\TP-LINK =>.TP-LINK
O43 - CFD: 18/04/2016 - [] D -- C:\ProgramData\WildTangent =>.WildTangent
O43 - CFD: 18/04/2016 - [] D -- C:\Program Files (x86)\Common Files\Adobe =>.Adobe
O43 - CFD: 26/06/2009 - [] D -- C:\Program Files (x86)\Common Files\InstallShield =>.InstallShield
O43 - CFD: 23/08/2017 - [] D -- C:\Program Files (x86)\Common Files\Java =>.Oracle
O43 - CFD: 18/04/2016 - [] AD -- C:\Program Files (x86)\Common Files\LightScribe =>.LightScribe
O43 - CFD: 26/06/2009 - [] AD -- C:\Program Files (x86)\Common Files\LS Getting Started =>.LightScribe
O43 - CFD: 11/02/2017 - [] D -- C:\Program Files (x86)\Common Files\microsoft shared =>.Microsoft Corporation
O43 - CFD: 02/11/2006 - [] D -- C:\Program Files (x86)\Common Files\Services =>.Microsoft Corporation
O43 - CFD: 02/11/2006 - [] D -- C:\Program Files (x86)\Common Files\SpeechEngines =>.Microsoft Corporation
O43 - CFD: 25/05/2017 - [] D -- C:\Program Files (x86)\Common Files\Steam =>.Steam Games
O43 - CFD: 18/04/2016 - [] D -- C:\Program Files (x86)\Common Files\Symantec Shared =>.Symantec Corporation
O43 - CFD: 19/04/2016 - [] D -- C:\Program Files (x86)\Common Files\System =>.Microsoft Corporation
O43 - CFD: 12/11/2016 - [] D -- C:\Users\FredSteph\AppData\Roaming\AC1
O43 - CFD: 22/04/2016 - [] D -- C:\Users\FredSteph\AppData\Roaming\Adobe =>.Adobe
O43 - CFD: 01/10/2016 - [] D -- C:\Users\FredSteph\AppData\Roaming\Apple Computer =>.Apple Inc.
O43 - CFD: 21/08/2017 - [] D -- C:\Users\FredSteph\AppData\Roaming\AVAST Software =>.AVAST Software
O43 - CFD: 06/05/2017 - [] D -- C:\Users\FredSteph\AppData\Roaming\BitComet =>.BitComet (P2P)
O43 - CFD: 23/10/2016 - [] D -- C:\Users\FredSteph\AppData\Roaming\CyberLink =>.CyberLink Corporation
O43 - CFD: 02/03/2017 - [] D -- C:\Users\FredSteph\AppData\Roaming\dclogs
O43 - CFD: 28/07/2017 - [] D -- C:\Users\FredSteph\AppData\Roaming\EasyAntiCheat
O43 - CFD: 21/02/2017 - [] D -- C:\Users\FredSteph\AppData\Roaming\enchant
O43 - CFD: 18/04/2016 - [] D -- C:\Users\FredSteph\AppData\Roaming\Hewlett-Packard =>.Hewlett-Packard
O43 - CFD: 18/04/2016 - [] D -- C:\Users\FredSteph\AppData\Roaming\Identities =>.Microsoft Corporation
O43 - CFD: 18/04/2016 - [] D -- C:\Users\FredSteph\AppData\Roaming\InstallShield =>.InstallShield
O43 - CFD: 11/03/2017 - [0] D -- C:\Users\FredSteph\AppData\Roaming\JAM Software =>.JAM Software
O43 - CFD: 18/04/2016 - [] D -- C:\Users\FredSteph\AppData\Roaming\Macromedia =>.Macromedia
O43 - CFD: 02/11/2006 - [0] D -- C:\Users\FredSteph\AppData\Roaming\Media Center Programs =>.Microsoft Corporation
O43 - CFD: 12/11/2016 - [] D -- C:\Users\FredSteph\AppData\Roaming\MediaMonkey
O43 - CFD: 17/11/2016 - [] SD -- C:\Users\FredSteph\AppData\Roaming\Microsoft =>.Microsoft Corporation
O43 - CFD: 16/09/2016 - [] D -- C:\Users\FredSteph\AppData\Roaming\Mozilla =>.Mozilla Corporation
O43 - CFD: 04/09/2016 - [] D -- C:\Users\FredSteph\AppData\Roaming\NVIDIA =>.nVidia Corporation
O43 - CFD: 05/11/2016 - [] D -- C:\Users\FredSteph\AppData\Roaming\Opera Software =>.Opera Software
O43 - CFD: 04/06/2017 - [0] D -- C:\Users\FredSteph\AppData\Roaming\PeerNetworking
O43 - CFD: 19/02/2017 - [] D -- C:\Users\FredSteph\AppData\Roaming\SoundSpectrum =>.SoundSpectrum
O43 - CFD: 19/03/2017 - [] D -- C:\Users\FredSteph\AppData\Roaming\Sun =>.Oracle
O43 - CFD: 18/04/2016 - [] D -- C:\Users\FredSteph\AppData\Roaming\Symantec =>.Symantec
O43 - CFD: 21/02/2017 - [0] D -- C:\Users\FredSteph\AppData\Roaming\TP =>.TP
O43 - CFD: 12/08/2017 - [] D -- C:\Users\FredSteph\AppData\Roaming\vlc =>.VideoLan Team
O43 - CFD: 18/04/2016 - [0] D -- C:\Users\FredSteph\AppData\Roaming\WinRAR =>.WinRAR
O43 - CFD: 05/11/2016 - [] D -- C:\Users\FredSteph\AppData\Roaming\Youtube Downloader HD =>.Regensoft
O43 - CFD: 27/08/2017 - [] D -- C:\Users\FredSteph\AppData\Roaming\ZHP =>.Nicolas Coolman
O43 - CFD: 04/06/2017 - [] D -- C:\Users\FredSteph\AppData\Local\Adobe =>.Adobe
O43 - CFD: 16/09/2016 - [] D -- C:\Users\FredSteph\AppData\Local\Apple =>.Apple Inc.
O43 - CFD: 22/09/2016 - [] D -- C:\Users\FredSteph\AppData\Local\Apple Computer =>.Apple Inc.
O43 - CFD: 18/04/2016 - [0] SHD -- C:\Users\FredSteph\AppData\Local\Application Data =>.Microsoft Corporation
O43 - CFD: 18/04/2016 - [] D -- C:\Users\FredSteph\AppData\Local\Apps =>.Microsoft Corporation
O43 - CFD: 22/04/2016 - [] D -- C:\Users\FredSteph\AppData\Local\CEF =>.CEF
O43 - CFD: 24/02/2017 - [] D -- C:\Users\FredSteph\AppData\Local\Crashpad =>.Unknown
O43 - CFD: 18/03/2017 - [] D -- C:\Users\FredSteph\AppData\Local\CSO
O43 - CFD: 20/08/2016 - [0] D -- C:\Users\FredSteph\AppData\Local\Deployment =>.Microsoft Corporation
O43 - CFD: 29/04/2016 - [] D -- C:\Users\FredSteph\AppData\Local\Google =>.Google
O43 - CFD: 20/11/2016 - [] D -- C:\Users\FredSteph\AppData\Local\Hewlett-Packard =>.Hewlett-Packard
O43 - CFD: 18/04/2016 - [0] SHD -- C:\Users\FredSteph\AppData\Local\Historique =>.Microsoft Corporation
O43 - CFD: 02/03/2017 - [] D -- C:\Users\FredSteph\AppData\Local\master131
O43 - CFD: 12/11/2016 - [] D -- C:\Users\FredSteph\AppData\Local\MediaMonkey
O43 - CFD: 17/11/2016 - [] D -- C:\Users\FredSteph\AppData\Local\Microsoft =>.Microsoft Corporation
O43 - CFD: 16/09/2016 - [] D -- C:\Users\FredSteph\AppData\Local\Microsoft Corporation =>.Microsoft Corporation
O43 - CFD: 16/09/2016 - [] D -- C:\Users\FredSteph\AppData\Local\Mozilla =>.Mozilla Corporation
O43 - CFD: 05/11/2016 - [] D -- C:\Users\FredSteph\AppData\Local\Opera Software =>.Opera Software
O43 - CFD: 05/11/2016 - [] D -- C:\Users\FredSteph\AppData\Local\Programs =>.Microsoft Corporation
O43 - CFD: 18/04/2016 - [] D -- C:\Users\FredSteph\AppData\Local\SRS Labs =>.SRS Labs
O43 - CFD: 25/11/2016 - [] D -- C:\Users\FredSteph\AppData\Local\Steam =>.Steam Games
O43 - CFD: 19/11/2016 - [] D -- C:\Users\FredSteph\AppData\Local\Supremus Corporation =>.Supremus Corporation
O43 - CFD: 27/08/2017 - [] D -- C:\Users\FredSteph\AppData\Local\Temp =>.Microsoft Corporation
O43 - CFD: 18/04/2016 - [0] SHD -- C:\Users\FredSteph\AppData\Local\Temporary Internet Files =>.Microsoft Corporation
O43 - CFD: 22/04/2016 - [] D -- C:\Users\FredSteph\AppData\Local\VirtualStore =>.Microsoft Corporation
O43 - CFD: 18/09/2016 - [] D -- C:\Users\FredSteph\AppData\Local\WindowsUpdate =>.Microsoft Corporation
O43 - CFD: 27/08/2017 - [] D -- C:\Users\FredSteph\AppData\Local\ZHP =>.Nicolas Coolman
O43 - CFD: 26/07/2016 - [] D -- C:\Users\FredSteph\AppData\Local\{5D146B48-79BC-07F0-1424-2218304CDE80}
O43 - CFD: 18/12/2016 - [] D -- C:\Users\FredSteph\AppData\Local\{5D496BF2-781B-0684-132D-2156CFFFDC68}
O43 - CFD: 27/08/2017 - [] D -- C:\Users\FredSteph\AppData\Local\Programs\Opera =>.Opera Software
O43 - CFD: 11/02/2017 - [0] D -- C:\Users\FredSteph\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AbiWord Word Processor =>.SourceGear
O43 - CFD: 29/10/2016 - [] RD -- C:\Users\FredSteph\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories =>.Microsoft Corporation
O43 - CFD: 18/04/2016 - [] RD -- C:\Users\FredSteph\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools =>.Administrative Tools
O43 - CFD: 21/04/2016 - [] D -- C:\Users\FredSteph\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Image-Line =>.Image-Line
O43 - CFD: 29/10/2016 - [] RD -- C:\Users\FredSteph\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance =>.Microsoft Corporation
O43 - CFD: 19/03/2017 - [0] D -- C:\Users\FredSteph\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MicroTonic
O43 - CFD: 24/02/2017 - [] D -- C:\Users\FredSteph\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Nexon =>.Nexon
O43 - CFD: 18/04/2016 - [] RD -- C:\Users\FredSteph\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup =>.Microsoft Corporation
O43 - CFD: 04/06/2017 - [0] D -- C:\Users\FredSteph\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Virtual DJ =>.Atomix Production
O43 - CFD: 15/07/2017 - [0] D -- C:\Users\FredSteph\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WarRock
O43 - CFD: 18/02/2017 - [] D -- C:\Users\FredSteph\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WhiteCap =>.Andy O'Meara
O43 - CFD: 29/10/2016 - [] D -- C:\Users\FredSteph\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR =>.WinRAR
O43 - CFD: 18/04/2016 - [0] SHD -- C:\Users\Default\AppData\Local\Application Data =>.Microsoft Corporation
O43 - CFD: 18/04/2016 - [0] SHD -- C:\Users\Default\AppData\Local\Historique =>.Microsoft Corporation
O43 - CFD: 02/11/2006 - [] D -- C:\Users\Default\AppData\Local\Microsoft =>.Microsoft Corporation
O43 - CFD: 02/11/2006 - [0] D -- C:\Users\Default\AppData\Local\Temp =>.Microsoft Corporation
O43 - CFD: 18/04/2016 - [0] SHD -- C:\Users\Default\AppData\Local\Temporary Internet Files =>.Microsoft Corporation
O43 - CFD: 18/04/2016 - [0] SHD -- C:\Users\Default User\AppData\Local\Application Data =>.Microsoft Corporation
O43 - CFD: 18/04/2016 - [0] SHD -- C:\Users\Default User\AppData\Local\Historique =>.Microsoft Corporation
O43 - CFD: 02/11/2006 - [] D -- C:\Users\Default User\AppData\Local\Microsoft =>.Microsoft Corporation
O43 - CFD: 02/11/2006 - [0] D -- C:\Users\Default User\AppData\Local\Temp =>.Microsoft Corporation
O43 - CFD: 18/04/2016 - [0] SHD -- C:\Users\Default User\AppData\Local\Temporary Internet Files =>.Microsoft Corporation
O43 - CFD: 21/08/2017 - [] -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\AVAST Software =>.AVAST Software
O43 - CFD: 19/04/2016 - [] -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\Google =>.Google
O43 - CFD: 21/01/2008 - [] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\Microsoft =>.Microsoft Corporation
O43 - CFD: 21/08/2017 - [] SD -- C:\WINDOWS\System32\Config\systemprofile\AppData\Roaming\Microsoft =>.Microsoft Corporation

---\\ ShellIconOverlayIdentifiers (SIOI) (3) - 1s
O106 - SIOI: avast [00asw] - {472083B0-C522-11CF-8763-00608CC02F24}. (.AVAST Software - Avast Shell Extension.) -- C:\Program Files\AVAST Software\Avast\ashShell.dll =>.AVAST Software s.r.o.®
O106 - SIOI: avast [00avast] - {472083B0-C522-11CF-8763-00608CC02F24}. (.AVAST Software - Avast Shell Extension.) -- C:\Program Files\AVAST Software\Avast\ashShell.dll =>.AVAST Software s.r.o.®
O106 - SIOI: Enhanced Storage Icon Overlay Handler Class [EnhancedStorageShell] - {D9144DCD-E998-4ECA-AB6A-DCD83CCBA16D}. (.Microsoft Corporation - Extension d'environnement du périphérique d.) -- C:\WINDOWS\System32\EhStorShell.dll =>.Microsoft Corporation

---\\ Enumération des clés StartupReg (11) - 0s
O53 - SMSR:HKLM\...\startupreg\Adobe Reader Speed Launcher [Key] [64Bits] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files (x86)\Adobe\Reader 8.0\Reader\Reader_sl.exe =>.Adobe Systems Incorporated
O53 - SMSR:HKLM\...\startupreg\GoogleChromeAutoLaunch_BFA812C1BCA1CE87AC39906385D95625 [Key] [64Bits] . (...) -- C:\Users\FredSteph\AppData\Local\Chromium\Application\chrome.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\HP Health Check Scheduler [Key] [64Bits] . (.Hewlett-Packard - HP Health Check Scheduler.) -- c:\Program Files (x86)\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe =>.Hewlett-Packard
O53 - SMSR:HKLM\...\startupreg\HPAdvisor [Key] [64Bits] . (...) -- C:\Program Files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\hpsysdrv [Key] [64Bits] . (.Hewlett-Packard Company - hpsysdrv.) -- c:\hp\support\hpsysdrv.exe =>.Hewlett-Packard Company
O53 - SMSR:HKLM\...\startupreg\KBD [Key] [64Bits] . (...) -- C:\hp\KBD\KbdStub.exe
O53 - SMSR:HKLM\...\startupreg\SRS Audio Sandbox [Key] [64Bits] . (.SRS Labs, Inc. - SRS Audio Sandbox control panel.) -- C:\Program Files\SRS Labs\Audio Sandbox\SRSSSC.exe =>.SRS Labs, Inc.
O53 - SMSR:HKLM\...\startupreg\Steam [Key] [64Bits] . (.Valve Corporation - Steam Client Bootstrapper.) -- C:\Program Files (x86)\Steam\Steam.exe =>.Valve Corporation
O53 - SMSR:HKLM\...\startupreg\SunJavaUpdateReg [Key] [64Bits] . (.Sun Microsystems, Inc. - .) -- C:\Windows\system32\jureg.exe (.not file.) =>.Sun Microsystems, Inc.
O53 - SMSR:HKLM\...\startupreg\SunJavaUpdateSched [Key] [64Bits] . (.Oracle Corporation - Java Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe =>.Oracle Corporation
O53 - SMSR:HKLM\...\startupreg\Windows Defender [Key] [64Bits] . (.Microsoft Corporation - Windows Defender User Interface.) -- C:\Program Files\Windows Defender\MSASCui.exe =>.Microsoft Corporation

---\\ Liste des pilotes du système (80) - 8s
O58 - SDL:2008/01/21 04:46:54 A . (. - 1394 Bus Device Driver.) -- C:\WINDOWS\System32\drivers\1394bus.sys [65280] =>.Microsoft Corporation
O58 - SDL:2008/01/21 04:46:53 A . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\WINDOWS\System32\drivers\adp94xx.sys [486456] =>.Microsoft Windows®
O58 - SDL:2008/01/21 04:46:54 A . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\WINDOWS\System32\drivers\adpahci.sys [342584] =>.Microsoft Windows®
O58 - SDL:2008/01/21 04:46:54 A . (.Adaptec, Inc. - Adaptec LH Ultra160 Driver (X64).) -- C:\WINDOWS\System32\drivers\adpu160m.sys [126520] =>.Microsoft Windows®
O58 - SDL:2008/01/21 04:47:27 A . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver (X64).) -- C:\WINDOWS\System32\drivers\adpu320.sys [185912] =>.Microsoft Windows®
O58 - SDL:2008/01/21 04:46:50 A . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\WINDOWS\System32\drivers\aliide.sys [15976] =>.Microsoft Windows®
O58 - SDL:2008/01/21 04:46:52 A . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\WINDOWS\System32\drivers\arc.sys [90680] =>.Microsoft Windows®
O58 - SDL:2008/01/21 04:47:00 A . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\WINDOWS\System32\drivers\arcsas.sys [91192] =>.Microsoft Windows®
O58 - SDL:2017/08/21 19:36:28 A . (.AVAST Software s.r.o. - IDS Application Activity Monitor Driver..) -- C:\WINDOWS\System32\drivers\aswbidsdrivera.sys [320008] =>.AVAST Software s.r.o.®
O58 - SDL:2017/08/21 19:36:28 A . (.AVAST Software s.r.o. - Application Activity Monitor Helper Driver.) -- C:\WINDOWS\System32\drivers\aswbidsha.sys [198976] =>.AVAST Software s.r.o.®
O58 - SDL:2017/08/21 19:36:28 A . (.AVAST Software s.r.o. - Logging Driver.) -- C:\WINDOWS\System32\drivers\aswbloga.sys [343288] =>.AVAST Software s.r.o.®
O58 - SDL:2017/08/21 19:36:28 A . (.AVAST Software s.r.o. - Universal Driver.) -- C:\WINDOWS\System32\drivers\aswbuniva.sys [57728] =>.AVAST Software s.r.o.®
O58 - SDL:2017/08/21 19:36:43 A . (.AVAST Software - Avast HWID.) -- C:\WINDOWS\System32\drivers\aswHwid.sys [46984] =>.AVAST Software s.r.o.® (.AVAST Software)
O58 - SDL:2017/08/21 19:39:27 A . (.AVAST Software - Avast Keyboard Filter Driver.) -- C:\WINDOWS\System32\drivers\aswKbd.sys [41800] =>.AVAST Software s.r.o.®
O58 - SDL:2017/08/21 19:37:12 A . (.AVAST Software - Avast File System Minifilter for Windows 20.) -- C:\WINDOWS\System32\drivers\aswmonflt.sys [146704] =>.AVAST Software s.r.o.®
O58 - SDL:2017/08/21 19:36:43 A . (.AVAST Software - Avast TDI Redirect Driver.) -- C:\WINDOWS\System32\drivers\aswRdr.sys [79208] =>.AVAST Software s.r.o.®
O58 - SDL:2017/08/21 19:36:43 A . (.AVAST Software - Avast Revert.) -- C:\WINDOWS\System32\drivers\aswRvrt.sys [84392] =>.AVAST Software s.r.o.® (.AVAST Software)
O58 - SDL:2017/08/21 19:37:12 A . (.AVAST Software - Avast Virtualization Driver.) -- C:\WINDOWS\System32\drivers\aswsnx.sys [1015880] =>.AVAST Software s.r.o.®
O58 - SDL:2017/08/21 19:36:43 A . (.AVAST Software - Avast self protection module.) -- C:\WINDOWS\System32\drivers\aswSP.sys [585608] =>.AVAST Software s.r.o.®
O58 - SDL:2017/08/21 19:36:43 A . (.AVAST Software - Avast Stream Filter.) -- C:\WINDOWS\System32\drivers\aswStmXP.sys [244368] =>.AVAST Software s.r.o.®
O58 - SDL:2017/08/21 19:36:43 A . (.AVAST Software - Avast VM Monitor.) -- C:\WINDOWS\System32\drivers\aswVmm.sys [361336] =>.AVAST Software s.r.o.® (.AVAST Software)
O58 - SDL:2013/06/28 15:49:20 A . (.Atheros Communications, Inc. - Atheros Extensible Wireless LAN device driv.) -- C:\WINDOWS\System32\drivers\athurx.sys [1732096] =>.Atheros Communications, Inc.
O58 - SDL:2008/01/21 04:47:30 A . (. - Microsoft BDA Driver Support Library.) -- C:\WINDOWS\System32\drivers\bdasup.sys [15616] =>.Microsoft Corporation
O58 - SDL:2006/09/18 23:30:15 A . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower.) -- C:\WINDOWS\System32\drivers\BrFiltLo.sys [18432] =>.Brother Industries, Ltd.
O58 - SDL:2006/09/18 23:30:15 A . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper.) -- C:\WINDOWS\System32\drivers\BrFiltUp.sys [8704] =>.Brother Industries, Ltd.
O58 - SDL:2006/11/02 10:43:25 A . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\WINDOWS\System32\drivers\BrSerId.sys [86528] =>.Brother Industries Ltd.
O58 - SDL:2006/09/18 23:30:18 A . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\WINDOWS\System32\drivers\BrSerWdm.sys [47104] =>.Brother Industries Ltd.
O58 - SDL:2006/09/18 23:30:18 A . (. - Brother USB MDM Driver.) -- C:\WINDOWS\System32\drivers\BrUsbMdm.sys [14976] =>.Brother Industries, Ltd.
O58 - SDL:2006/09/19 13:42:33 A . (. - Brother USB Serial Driver.) -- C:\WINDOWS\System32\drivers\BrUsbSer.sys [14720] =>.Brother Industries, Ltd.
O58 - SDL:2008/01/21 04:46:50 A . (.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) -- C:\WINDOWS\System32\drivers\cmdide.sys [18024] =>.Microsoft Windows®
O58 - SDL:2006/11/02 13:50:06 A . (.Adaptec, Inc. - Adaptec Ultra SCSI miniport.) -- C:\WINDOWS\System32\drivers\djsvs.sys [88168] =>.Microsoft Windows®
O58 - SDL:2008/01/21 04:46:56 A . (. - Intel(R) PRO/1000 Adapter NDIS 6 deserializ.) -- C:\WINDOWS\System32\drivers\E1G6032E.sys [146176] =>.Intel Corporation
O58 - SDL:2008/01/21 04:46:59 A . (.Emulex - Storport Miniport Driver for LightPulse HBA.) -- C:\WINDOWS\System32\drivers\elxstor.sys [397368] =>.Microsoft Windows®
O58 - SDL:2006/11/02 11:43:35 A . (. - Hid Parsing Library.) -- C:\WINDOWS\System32\drivers\hidparse.sys [31616]
O58 - SDL:2008/01/21 04:46:59 A . (.Hewlett-Packard Company - Smart Array Storport Driver.) -- C:\WINDOWS\System32\drivers\HpCISSs.sys [47672] =>.Microsoft Windows®
O58 - SDL:2008/12/04 20:48:52 A . (.Intel Corporation - Intel Matrix Storage Manager driver - x64.) -- C:\WINDOWS\System32\drivers\iaStor.sys [407064] =>.Intel Corporation®
O58 - SDL:2008/01/21 04:46:59 A . (.Intel Corporation - Intel Matrix Storage Manager driver (base).) -- C:\WINDOWS\System32\drivers\iaStorV.sys [290872] =>.Microsoft Windows®
O58 - SDL:2006/11/02 14:02:39 A . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\WINDOWS\System32\drivers\iirsp.sys [44648] =>.Microsoft Windows®
O58 - SDL:2006/11/02 14:02:09 A . (.Integrated Technology Express, Inc. - ITE IT8211 ATA/ATAPI SCSI miniport.) -- C:\WINDOWS\System32\drivers\iteatapi.sys [37480] =>.Microsoft Windows®
O58 - SDL:2006/11/02 14:02:09 A . (.Integrated Technology Express, Inc. - ITE IT8212 ATA RAID SCSI miniport.) -- C:\WINDOWS\System32\drivers\iteraid.sys [37480] =>.Microsoft Windows®
O58 - SDL:2008/01/21 04:49:00 A . (. - Kernel Streaming WOW Thunk Service.) -- C:\WINDOWS\System32\drivers\ksthunk.sys [20864]
O58 - SDL:2008/01/21 04:46:51 A . (.LSI Logic - LSI Logic Fusion-MPT FC Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_fc.sys [113720] =>.Microsoft Windows®
O58 - SDL:2008/01/21 04:46:56 A . (.LSI Logic - LSI Logic Fusion-MPT SAS Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas.sys [105016] =>.Microsoft Windows®
O58 - SDL:2008/01/21 04:47:01 A . (.LSI Logic - LSI Logic Fusion-MPT SCSI Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_scsi.sys [113720] =>.Microsoft Windows®
O58 - SDL:2008/01/21 04:46:59 A . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\megasas.sys [35896] =>.Microsoft Windows®
O58 - SDL:2008/01/21 04:46:56 A . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\WINDOWS\System32\drivers\MegaSR.sys [438328] =>.Microsoft Windows®
O58 - SDL:2006/11/02 14:02:24 A . (.LSI Logic Corporation - MegaRAID RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\Mraid35x.sys [39016] =>.Microsoft Windows®
O58 - SDL:2008/01/21 04:49:52 A . (. - MS KS Server.) -- C:\WINDOWS\System32\drivers\mskssrv.sys [11008] =>.Microsoft Corporation
O58 - SDL:2006/11/02 11:37:30 A . (. - MS Proxy Clock.) -- C:\WINDOWS\System32\drivers\mspclock.sys [7040] =>.Microsoft Corporation
O58 - SDL:2006/11/02 11:37:30 A . (. - MS Proxy Quality Manager.) -- C:\WINDOWS\System32\drivers\mspqm.sys [6656] =>.Microsoft Corporation
O58 - SDL:2008/01/21 04:49:52 A . (. - WDM Tee/Communication Transform Filter.) -- C:\WINDOWS\System32\drivers\mstee.sys [7936] =>.Microsoft Corporation
O58 - SDL:2006/11/02 14:03:03 A . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\WINDOWS\System32\drivers\nfrd960.sys [51816] =>.Microsoft Windows®
O58 - SDL:2012/03/07 01:08:00 A . (.NVIDIA Corporation - NVIDIA Windows Kernel Mode Driver, Version.) -- C:\WINDOWS\System32\drivers\nvlddmkm.sys [14340928] =>.NVIDIA Corporation®
O58 - SDL:2008/01/21 04:46:54 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\WINDOWS\System32\drivers\nvraid.sys [128056] =>.Microsoft Windows®
O58 - SDL:2008/01/21 04:46:54 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\WINDOWS\System32\drivers\nvstor.sys [54328] =>.Microsoft Windows®
O58 - SDL:2009/04/11 07:39:49 A . (. - 1394 OpenHCI Port Driver.) -- C:\WINDOWS\System32\drivers\ohci1394.sys [72448] =>.Microsoft Corporation
O58 - SDL:2006/09/07 17:49:04 A . (...) -- C:\WINDOWS\System32\drivers\PS2.sys [21504] =>.Microsoft Corporation
O58 - SDL:2008/01/21 04:46:52 A . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\WINDOWS\System32\drivers\ql2300.sys [1221176] =>.Microsoft Windows®
O58 - SDL:2006/11/02 13:50:27 A . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\WINDOWS\System32\drivers\ql40xx.sys [124008] =>.Microsoft Windows®
O58 - SDL:2008/07/03 19:03:48 A . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function D.) -- C:\WINDOWS\System32\drivers\RTKVHD64.sys [1477272] =>.Realtek Semiconductor Corp®
O58 - SDL:2015/05/19 20:39:58 A . (.Realtek - Realtek 8136/8168/8169 NDIS6 64-bit Driver.) -- C:\WINDOWS\System32\drivers\Rtlh64.sys [839424] =>.Realtek Semiconductor Corp®
O58 - SDL:2015/06/19 03:54:32 A . (.Realtek Semiconductor Corporation - Realtek WLAN USB NDIS Driver 34616.) -- C:\WINDOWS\System32\drivers\rtwlanu_Vista.sys [3126536] =>.Realtek Semiconductor Corp®
O58 - SDL:2015/06/19 04:54:32 A . (.Realtek Semiconductor Corporation - Realtek WLAN USB NDIS Driver 34616.) -- C:\WINDOWS\System32\drivers\rtwlanu_XP.sys [3767048] =>.Realtek Semiconductor Corp®
O58 - SDL:2006/09/30 01:51:44 A . (.Macrovision Corporation, Macrovision Europe Limited, - Macrovision SECURITY Driver.) -- C:\WINDOWS\System32\drivers\secdrv.sys [23040] =>.Macrovision Corporation, Macrovision Europe Limited,
O58 - SDL:2008/01/21 04:47:26 A . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\WINDOWS\System32\drivers\sisraid4.sys [78392] =>.Microsoft Windows®
O58 - SDL:2009/12/15 14:41:32 A . (.Copyright (C) 2006 SRS Labs, Inc. - SRS WOW HD, TSXT, CSII, Mobile HD Standalon.) -- C:\WINDOWS\System32\drivers\SRS_SSCFilter_amd64.sys [346992] =>.SRS Labs, Inc®
O58 - SDL:2009/04/11 07:39:31 A . (. - WDM CODEC Class Device Driver 2.0.) -- C:\WINDOWS\System32\drivers\stream.sys [68224] =>.Microsoft Corporation
O58 - SDL:2006/11/02 14:02:52 A . (.LSI Logic - LSI Logic 8XX SCSI Miniport Driver.) -- C:\WINDOWS\System32\drivers\symc8xx.sys [49256] =>.Microsoft Windows®
O58 - SDL:2006/11/02 14:02:37 A . (.LSI Logic - LSI Logic Hi-Perf SCSI Miniport Driver.) -- C:\WINDOWS\System32\drivers\sym_hi.sys [44648] =>.Microsoft Windows®
O58 - SDL:2006/11/02 14:02:47 A . (.LSI Logic - LSI Logic Ultra160 SCSI Miniport Driver.) -- C:\WINDOWS\System32\drivers\sym_u3.sys [48232] =>.Microsoft Windows®
O58 - SDL:2013/08/22 10:40:24 A . (.The OpenVPN Project - TAP-Windows Virtual Network Driver.) -- C:\WINDOWS\System32\drivers\tap0901.sys [40664] =>.OpenVPN Technologies, Inc.®
O58 - SDL:2008/01/21 04:46:56 A . (.ULi Electronics Inc. - ULi SATA Controller Driver.) -- C:\WINDOWS\System32\drivers\uliahci.sys [284728] =>.Microsoft Windows®
O58 - SDL:2006/11/02 13:50:54 A . (.Promise Technology, Inc. - Promise Ultra/Sata Series Driver for Win200.) -- C:\WINDOWS\System32\drivers\ulsata.sys [148072] =>.Microsoft Windows®
O58 - SDL:2008/01/21 04:46:52 A . (.Promise Technology, Inc. - Promise SATAII150 Series x64 Windows Driver.) -- C:\WINDOWS\System32\drivers\ulsata2.sys [174696] =>.Microsoft Windows®
O58 - SDL:2009/04/11 07:39:40 A . (. - Universal Serial Bus Camera Driver.) -- C:\WINDOWS\System32\drivers\USBCAMD2.sys [32640] =>.Microsoft Corporation
O58 - SDL:2013/06/29 04:25:14 A . (. - Universal Serial Bus Driver.) -- C:\WINDOWS\System32\drivers\usbd.sys [7552] =>.Microsoft Corporation
O58 - SDL:2008/01/21 04:46:50 A . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\WINDOWS\System32\drivers\viaide.sys [18024] =>.Microsoft Windows®
O58 - SDL:2008/01/21 04:47:25 A . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\WINDOWS\System32\drivers\vsmraid.sys [149048] =>.Microsoft Windows®
O58 - SDL:2006/11/02 11:40:24 A . (. - Wacom Serial Pen Tablet HID Driver.) -- C:\WINDOWS\System32\drivers\wacompen.sys [26624] =>.Wacom Technology
O58 - SDL:2015/06/19 03:54:32 A . (.Realtek Semiconductor Corporation - Realtek WLAN USB NDIS Driver 34616.) -- C:\WINDOWS\System32\rtwlanu_Vista.sys [3126536] =>.Realtek Semiconductor Corp®

---\\ Associations Shell Spawning (11) - 0s
O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\WINDOWS\System32\control.exe =>.Microsoft Corporation
O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Ob.) -- C:\WINDOWS\System32\eventvwr.exe =>.Microsoft Corporation
O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE =>.Microsoft Corporation®
O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (...) -- %1" %*
O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\WINDOWS\regedit.exe =>.Microsoft Corporation
O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S
O67 - Shell Spawning: <.html> [HKCU\..\open\Command] (.Opera Software - Opera Internet Browser.) -- C:\Users\FredSteph\AppData\Local\Programs\Opera\Launcher.exe =>.Opera Software ASA®

---\\ Menu de démarrage Internet (12) - 0s
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (...) -- C:\Users\FredSteph\AppData\Local\Chromium\Application\chrome.exe (.not file.)
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (...) -- iexplore.exe
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Avast Software - Avast SafeZone Browser.) -- C:\Program Files\AVAST Software\SZBrowser\Launcher.exe =>.AVAST Software s.r.o.®
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (...) -- C:\Users\FredSteph\AppData\Local\Chromium\Application\chrome.exe (.not file.)
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\SysWOW64\ie4uinit.exe =>.Microsoft Corporation
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Avast Software - Avast SafeZone Browser.) -- C:\Program Files\AVAST Software\SZBrowser\Launcher.exe =>.AVAST Software
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (...) -- C:\Users\FredSteph\AppData\Local\Chromium\Application\chrome.exe (.not file.)
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\SysWOW64\ie4uinit.exe =>.Microsoft Corporation
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Avast Software - Avast SafeZone Browser.) -- C:\Program Files\AVAST Software\SZBrowser\Launcher.exe =>.AVAST Software
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (...) -- C:\Users\FredSteph\AppData\Local\Chromium\Application\chrome.exe (.not file.)
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\SysWOW64\ie4uinit.exe =>.Microsoft Corporation
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Avast Software - Avast SafeZone Browser.) -- C:\Program Files\AVAST Software\SZBrowser\Launcher.exe =>.AVAST Software

---\\ Recherche d'infection sur les navigateurs (7) - 5s
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - http://www.bing.com/ =>.Bing.com
O69 - SBI: SearchScopes [HKCU] {2f23ab71-4ac6-41f2-a955-ea576e553146} - (AOL Recherche) - http://slirsredirect.search.aol.com/ =>.America On Line Inc.
O69 - SBI: SearchScopes [HKCU] {9A3DC9D3-0C48-42B7-9E18-EBCCEC423E55} - (Kelkoo) - http://fr.kelkoopartners.net/
O69 - SBI: SearchScopes [HKLM] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (@ieframe.dll,-12512) - http://www.bing.com/ =>.Bing.com
O69 - SBI: SearchScopes [HKLM] {2f23ab71-4ac6-41f2-a955-ea576e553146} - (AOL Recherche) - http://slirsredirect.search.aol.com/ =>.America On Line Inc.
O69 - SBI: SearchScopes [HKLM] {9A3DC9D3-0C48-42B7-9E18-EBCCEC423E55} - (Kelkoo) - http://fr.kelkoopartners.net/
O69 - SBI: SearchScopes [HKLM] {EE650CD7-04CB-4EA6-BE23-ED97383A8AC9} [DefaultScope] - (Yahoo! Powered) - http://fr.search.yahoo.com/ =>.Yahoo! Inc.

---\\ Enumère les services démarrés par Svchost (31) - 1s
O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d’application.) -- C:\WINDOWS\System32\aelupsvc.dll [26624] =>.Microsoft Corporation
O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\WINDOWS\System32\wercplsupport.dll [85504] =>.Microsoft Corporation
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\System32\shsvcs.dll [302080] =>.Microsoft Corporation
O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\WINDOWS\System32\certprop.dll [49664] =>.Microsoft Corporation
O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\WINDOWS\System32\certprop.dll [49664] =>.Microsoft Corporation
O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\WINDOWS\System32\srvsvc.dll [179712] =>.Microsoft Corporation
O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\WINDOWS\System32\gpsvc.dll [726016] =>.Microsoft Corporation
O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\WINDOWS\System32\ikeext.dll [462848] =>.Microsoft Corporation
O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Service Audio Windows.) -- C:\WINDOWS\System32\Audiosrv.dll [446976] =>.Microsoft Corporation
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’.) -- C:\WINDOWS\System32\rasauto.dll [98304] =>.Microsoft Corporation
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire de connexions d'accès distant.) -- C:\WINDOWS\System32\rasmans.dll [309760] =>.Microsoft Corporation
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\WINDOWS\System32\mprdim.dll [88064] =>.Microsoft Corporation
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements systèm.) -- C:\WINDOWS\System32\sens.dll [61952] =>.Microsoft Corporation
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l'application d'assistance à.) -- C:\WINDOWS\System32\ipnathlp.dll [342016] =>.Microsoft Corporation
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM.) -- C:\WINDOWS\System32\tapisrv.dll [318976] =>.Microsoft Corporation
O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gestionnaire des connexions distantes Termi.) -- C:\WINDOWS\System32\termsrv.dll [548352] =>.Microsoft Corporation
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Up.) -- C:\WINDOWS\system32\wuaueng.dll [2428952] =>.Microsoft Windows Component Publisher®
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière.) -- C:\WINDOWS\System32\qmgr.dll [1081856] =>.Microsoft Corporation
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\System32\shsvcs.dll [302080] =>.Microsoft Corporation
O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur u.) -- C:\WINDOWS\System32\iphlpsvc.dll [225280] =>.Microsoft Corporation
O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d'ouverture de session secon.) -- C:\WINDOWS\system32\seclogon.dll [28672] =>.Microsoft Corporation
O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\WINDOWS\System32\appinfo.dll [45056] =>.Microsoft Corporation
O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\WINDOWS\System32\iscsiexe.dll [154112] =>.Microsoft Corporation
O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédia.) -- C:\WINDOWS\System32\mmcss.dll [37888] =>.Microsoft Corporation
O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\WINDOWS\System32\kmsvc.dll [86528] =>.Microsoft Corporation
O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\WINDOWS\System32\eapsvc.dll [74752] =>.Microsoft Corporation
O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\WINDOWS\System32\schedsvc.dll [855552] =>.Microsoft Corporation
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\WINDOWS\System32\wbem\WMIsvc.dll [221696] =>.Microsoft Corporation
O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service de configuration des services Termi.) -- C:\WINDOWS\System32\sessenv.dll [74752] =>.Microsoft Corporation
O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\WINDOWS\System32\browser.dll [103424] =>.Microsoft Corporation
O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\WINDOWS\System32\profsvc.dll [178688] =>.Microsoft Corporation

---\\ Liste des exceptions du parefeu Windows (20) - 2s
O87 - FAEL: "{A695CAF8-4E18-4121-B276-FF944E718175}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\Steam\bin\steamwebhelper.exe (.not file.)
O87 - FAEL: "{DFC1188F-E7CD-452A-BB61-C257C64769BB}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\Steam\bin\steamwebhelper.exe (.not file.)
O87 - FAEL: "{34B9B4D9-77F7-448F-A31F-14D9B0D8505C}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6zm.exe (.not file.) =>.Steam Games
O87 - FAEL: "{D774B965-128B-40E4-88AE-BFE248B63A79}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6zm.exe (.not file.) =>.Steam Games
O87 - FAEL: "{336CD70F-16CB-4C1F-937B-2D7137DA8DD6}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6sp.exe (.not file.) =>.Steam Games
O87 - FAEL: "{C8739052-DC3C-4B38-B0A9-F81F5E93CFF6}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6sp.exe (.not file.) =>.Steam Games
O87 - FAEL: "{11C31C5B-FA95-431B-9E8A-731F15E66172}" [In-None-P6-TRUE] .(...) -- C:\Program Files\BitComet\BitComet.exe (.not file.)
O87 - FAEL: "{2F0B9DAD-7642-4376-AD71-D1D033B925BB}" [In-None-P17-TRUE] .(...) -- C:\Program Files\BitComet\BitComet.exe (.not file.)
O87 - FAEL: "{D7163A27-2EA8-44D9-B896-57CBECCCC52E}" [In-None-P17-TRUE] .(...) -- C:\Users\FredSteph\AppData\Local\Chromium\Application\chrome.exe (.not file.)
O87 - FAEL: "{807B4AF2-2B1E-4CE1-9EB1-E6737187E3B1}" [In-None-P17-FALSE] .(...) -- C:\Users\FredSteph\AppData\Local\Chromium\Application\chrome.exe (.not file.)
O87 - FAEL: "{E8C99F9D-3EF9-47DC-A3C3-4D4D9F0FB86E}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\Nexon\Nexon Launcher\nexon_launcher.exe (.not file.)
O87 - FAEL: "{8367B464-5837-4845-8941-F8B26B91FD8B}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\Nexon\Nexon Launcher\nexon_launcher.exe (.not file.)
O87 - FAEL: "{9D59B35B-A75B-4A0A-838D-B47917B1E043}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\Nexon\Nexon Launcher\nexon_updater.exe (.not file.)
O87 - FAEL: "{D42BFBAE-B656-4948-AF2E-48DB0E6D3036}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\Nexon\Nexon Launcher\nexon_updater.exe (.not file.)
O87 - FAEL: "{52F334B1-7907-4E60-A33B-BB1A77C587A7}" [In-None-P6-TRUE] .(...) -- C:\Nexon\Library\WarRock\appdata\WarRockLauncher.exe (.not file.)
O87 - FAEL: "{A391D940-3D58-4ECB-8E15-6530AC5C5838}" [In-None-P17-TRUE] .(...) -- C:\Nexon\Library\WarRock\appdata\WarRockLauncher.exe (.not file.)
O87 - FAEL: "{7E868717-0436-416F-9CD5-685A188C07FF}" [In-None-P6-TRUE] .(...) -- C:\Nexon\Library\WarRock\appdata\WRUpdater.exe (.not file.)
O87 - FAEL: "{E167DC4D-2358-4A22-B7CD-9E36D1000735}" [In-None-P17-TRUE] .(...) -- C:\Nexon\Library\WarRock\appdata\WRUpdater.exe (.not file.)
O87 - FAEL: "{408FB442-EC90-4C5A-9023-3E976AC0F454}" [In-None-P6-FALSE] .(...) -- C:\Program Files (x86)\Steam\SteamApps\common\CSNZ\Bin\cstrike-online.exe (.not file.) =>.Steam Games
O87 - FAEL: "{9CB8A7E2-7768-48D8-A0E2-C47C01C87126}" [In-None-P17-FALSE] .(...) -- C:\Program Files (x86)\Steam\SteamApps\common\CSNZ\Bin\cstrike-online.exe (.not file.) =>.Steam Games

---\\ Scan Additionnel (4) - 0s
C:\WINDOWS\System32\Tasks\KMSAutoNet =>HackTool.AutoKMS
HKLM64\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{90A6FCAF-8598-46D0-9F19-57EE038F7DC5} =>HackTool.AutoKMS
[HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}] =>.SUP.Orphan
[HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}] =>.SUP.Orphan

---\\ Récapitulatif des éléments trouvés sur votre station (1) - 0s
https://nicolascoolman.eu/2017/02/02/hacktool-autokms/ =>HackTool.AutoKMS

~ Unselected Options: O82,
~ End of the scan, 21501 items in 02mn17s (862)(0)

Publicité


Signaler le contenu de ce document

Publicité