~ ZHPDiag v2017.8.29.147 Par Nicolas Coolman (2017/08/29)
~ Démarré par Mairie (Administrator) (2017/09/03 09:40:25)
~ Web: https://www.nicolascoolman.com
~ Blog: https://nicolascoolman.eu/
~ Facebook: https://www.facebook.com/nicolascoolman1
~ Certificate ZHPDiag: Legal
~ Etat de la version: Version OK
~ Mode: Scanner
~ Rapport: C:\Users\Mairie\Desktop\ZHPDiag.txt
~ Rapport: C:\Users\Mairie\AppData\Roaming\ZHP\ZHPDiag.txt
~ UAC: Activate
~ Démarrage du système: Normal (Normal boot)
Windows 10 Home, 64-bit (Build 10586) =>.Microsoft Corporation

---\\ Navigateurs Internet (4) - 0s
~ GCIE: Google Chrome v60.0.3112.113
~ MFIE: Mozilla Firefox 54.0.1 (x86 fr)
~ MSIE: Microsoft Edge v40
~ MSIE: Internet Explorer v11.713.10586.0

---\\ Informations sur les produits Windows (8) - 1s
~ Windows Server License Manager Script : OK
~ Licence Script File Génération : OK
~ Windows(R) Operating System, RETAIL channel
Windows ID Activation : OK
~ Windows Partial Key : 8HVX7
Windows License : OK
~ Windows Remaining Initializations Number : 1001
Windows Automatic Updates : OK

---\\ Logiciels de protection (2) - 9s
Avast Antivirus Gratuit v17.6.2310 (Protection)
Windows Defender (Activate) (Protection)

---\\ Logiciels d'optimisation (1) - 12s
~ CCleaner Packages (Optimize)

---\\ Surveillance de Logiciels (2) - 12s
~ Adobe Flash Player 26 NPAPI (Surveillance)
~ Adobe Acrobat Reader DC - Français (Surveillance)

---\\ Informations sur le système (6) - 0s
~ Operating System: Intel64 Family 6 Model 42 Stepping 7, GenuineIntel
~ Operating System: 64-bit
~ Boot mode: Normal (Normal boot)
Total RAM: 4105.768 MB (42% free) : OK =>.RAM Value
System Restore: Activé (Enable)
System drive C: has 289 GB (63%) free of 452 GB : OK =>.Disk Space

---\\ Mode de connexion au système (3) - 0s
~ Computer Name: MAIRIE-PC
~ User Name: Mairie
~ Logged in as Administrator

---\\ Enumération des unités disques (2) - 0s
~ Drive C: has 289 GB free of 452 GB (System)
~ Drive E: has 5 GB free of 7 GB

---\\ Etat du Centre de Sécurité Windows (7) - 0s
[HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
[HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified
[HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\Software\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM64\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK

---\\ Recherche particulière de fichiers génériques (25) - 11s
[MD5.7A009B9036ECF89AB57011EB615D5E1B] - 01/06/2017 - (.Microsoft Corporation - Explorateur Windows.) -- C:\WINDOWS\Explorer.exe [4515256] =>.Microsoft Windows®
[MD5.0DCB89B1F3689BC6262FF30BBD603171] - 01/06/2017 - (.Microsoft Corporation - Processus hôte Windows (Rundll32).) -- C:\WINDOWS\System32\rundll32.exe [59392] =>.Microsoft Corporation
[MD5.C1C81AAF533552B3C4D9F11A5FF97700] - 01/06/2017 - (.Microsoft Corporation - Application de démarrage de Windows.) -- C:\WINDOWS\System32\Wininit.exe [291360] =>.Microsoft Windows Publisher®
[MD5.C2383C85AB4F8BBBA63F64DBC85658AE] - 01/06/2017 - (.Microsoft Corporation - Extensions Internet pour Win32.) -- C:\WINDOWS\System32\wininet.dll [3081216] =>.Microsoft Corporation
[MD5.5C156EC4E44E30331BCC865A3B61D839] - 01/06/2017 - (.Microsoft Corporation - Application d’ouverture de session Windows.) -- C:\WINDOWS\System32\Winlogon.exe [585728] =>.Microsoft Corporation
[MD5.9EEAA1B69DC3FD620AE576CC8F4147DC] - 01/06/2017 - (.Microsoft Corporation - Bibliothèque de licences.) -- C:\WINDOWS\System32\sppcomapi.dll [430592] =>.Microsoft Corporation
[MD5.9A3E17CDB177913C2A111C80F3D0DBB4] - 01/06/2017 - (.Microsoft Corporation - DNS DLL de l’API Client.) -- C:\WINDOWS\System32\dnsapi.dll [686976] =>.Microsoft Windows®
[MD5.6A7ACABAE92C837F5C1330188EAE36AE] - 01/06/2017 - (.Microsoft Corporation - DNS DLL de l’API Client.) -- C:\WINDOWS\Syswow64\dnsapi.dll [535080] =>.Microsoft Windows®
[MD5.CE50037751671682D1FDBBE7C9B37F4A] - 01/06/2017 - (.Microsoft Corporation - DLL client de l’API uilisateur de Windows m.) -- C:\WINDOWS\System32\fr-FR\user32.dll.mui [20480] =>.Microsoft Corporation
[MD5.70148EFA9A562E7185B75BBE7D376BF7] - 01/06/2017 - (.Microsoft Corporation - Pilote de fonction connexe pour WinSock.) -- C:\WINDOWS\System32\drivers\AFD.sys [578912] =>.Microsoft Windows®
[MD5.492B99D2E3D5D7BFD5F0AE1BE7BD37DD] - 01/06/2017 - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) -- C:\WINDOWS\System32\drivers\atapi.sys [28512] =>.Microsoft Windows®
[MD5.7F9C7226D743B232907ED2537B8A574F] - 01/06/2017 - (.Microsoft Corporation - CD-ROM File System Driver.) -- C:\WINDOWS\System32\drivers\Cdfs.sys [92672] =>.Microsoft Corporation
[MD5.82D97776BF982AA143BDC7DFB5054EA8] - 01/06/2017 - (.Microsoft Corporation - SCSI CD-ROM Driver.) -- C:\WINDOWS\System32\drivers\Cdrom.sys [173568] =>.Microsoft Corporation
[MD5.A4FC5B8A300394F7E219B173E2BF3A46] - 01/06/2017 - (.Microsoft Corporation - DFS Namespace Client Driver.) -- C:\WINDOWS\System32\drivers\DfsC.sys [148992] =>.Microsoft Corporation
[MD5.DB1409A2774DB8AD3611EA28C48CEB66] - 01/06/2017 - (.Microsoft Corporation - High Definition Audio Bus Driver.) -- C:\WINDOWS\System32\drivers\HDAudBus.sys [79872] =>.Microsoft Corporation
[MD5.53FDD9E69189E546DE4740F8C4D8AB2F] - 01/06/2017 - (.Microsoft Corporation - Pilote de port i8042.) -- C:\WINDOWS\System32\drivers\i8042prt.sys [114688] =>.Microsoft Corporation
[MD5.9E5E8F2A1996F23B7E9687846AA81B01] - 01/06/2017 - (.Microsoft Corporation - IP Network Address Translator.) -- C:\WINDOWS\System32\drivers\IpNat.sys [143360] =>.Microsoft Corporation
[MD5.E7D59C52DE0C19C3179114D028EAA4B7] - 01/06/2017 - (.Microsoft Corporation - Minirdr SMB Windows NT.) -- C:\WINDOWS\System32\drivers\MRxSmb.sys [430944] =>.Microsoft Windows®
[MD5.C03E926B0E7D66D68994067231DC3246] - 01/06/2017 - (.Microsoft Corporation - MBT Transport driver.) -- C:\WINDOWS\System32\drivers\netBT.sys [278528] =>.Microsoft Corporation
[MD5.19BD8A88AAC580592668B070AC0727D9] - 01/06/2017 - (.Microsoft Corporation - Pilote du système de fichiers NT.) -- C:\WINDOWS\System32\drivers\ntfs.sys [2152280] =>.Microsoft Windows®
[MD5.7D0FC96264C0F8F2C1321E33E8EB646C] - 01/06/2017 - (.Microsoft Corporation - Pilote de port parallèle.) -- C:\WINDOWS\System32\drivers\Parport.sys [96768] =>.Microsoft Corporation
[MD5.E3C82823B22463BC38AA4F8ADA852624] - 01/06/2017 - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) -- C:\WINDOWS\System32\drivers\Rasl2tp.sys [104960] =>.Microsoft Corporation
[MD5.1DC2CC74B51E4DC4CD5A20C1021E4010] - 01/06/2017 - (.Microsoft Corporation - Redirecteur de périphérique de Microsoft RD.) -- C:\WINDOWS\System32\drivers\rdpdr.sys [173056] =>.Microsoft Corporation
[MD5.91D3F2A6253EF83EFBD7903028F58C4D] - 01/06/2017 - (.Microsoft Corporation - TDI Translation Driver.) -- C:\WINDOWS\System32\drivers\tdx.sys [118624] =>.Microsoft Windows®
[MD5.E1F91A727A04C9F8199D04FF3BBBF63C] - 01/06/2017 - (.Microsoft Corporation - Pilote de cliché instantané du volume.) -- C:\WINDOWS\System32\drivers\volsnap.sys [414560] =>.Microsoft Windows®

---\\ Liste des services NT non Microsoft et non désactivés (12) - 10s
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe =>.Adobe Systems, Incorporated®
O23 - Service: Avast Antivirus (avast! Antivirus) . (.AVAST Software - Avast Service.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe =>.AVAST Software s.r.o.®
O23 - Service: Bluetooth Device Monitor (Bluetooth Device Monitor) . (.Intel Corporation - Bluetooth Device Monitor.) - C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe =>.Intel Corporation - Mobile Wireless Group®
O23 - Service: Bluetooth OBEX Service (Bluetooth OBEX Service) . (.Intel Corporation - Bluetooth OBEX Service.) - C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe =>.Intel Corporation - Mobile Wireless Group®
O23 - Service: Elan Service (ETDService) . (.ELAN Microelectronics Corp. - Elan Service.) - C:\Program Files\Elantech\ETDService.exe =>.ELAN Microelectronics Corporation®
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google Inc®
O23 - Service: Intel(R) Management and Security Application Local Manageme (LMS) . (.Intel Corporation - Local Manageability Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe =>.Intel Corporation®
O23 - Service: NVIDIA Display Container LS (NVDisplay.ContainerLocalSystem) . (.NVIDIA Corporation - NVIDIA Container.) - C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe =>.NVIDIA Corporation®
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) . (.NVIDIA Corporation - NVIDIA Settings Update Manager.) - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe =>.NVIDIA Corporation®
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) . (.Copyright 2004 - RichVideo Module.) - C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe =>.CyberLink Corporation
O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files (x86)\Skype\Updater\Updater.exe =>.Skype Software Sarl®
O23 - Service: Intel(R) Management and Security Application User Notificat (UNS) . (.Intel Corporation - User Notification Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe =>.Intel Corporation®

---\\ Services non Microsoft (SR=Démarré,SS=Stoppé) (23) - 60s
SR - Auto [01/06/2017] [ 317400] Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe =>.Adobe Systems, Incorporated®
SS - Demand [01/06/2017] [ 317400] Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe =>.Adobe Systems Incorporated®
SS - Demand [01/06/2017] [ 317400] aswbIDSAgent (aswbIDSAgent) . (.AVAST Software s.r.o..) - C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe =>.AVAST Software s.r.o.®
SS - Auto [01/06/2017] [ 317400] Avast Antivirus (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe =>.AVAST Software s.r.o.®
SS - Auto [01/06/2017] [ 317400] Bluetooth Device Monitor (Bluetooth Device Monitor) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe =>.Intel Corporation - Mobile Wireless Group®
SS - Demand [01/06/2017] [ 317400] Bluetooth Media Service (Bluetooth Media Service) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe =>.Intel Corporation - Mobile Wireless Group®
SS - Auto [01/06/2017] [ 317400] Bluetooth OBEX Service (Bluetooth OBEX Service) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe =>.Intel Corporation - Mobile Wireless Group®
SS - Demand [01/06/2017] [ 317400] Intel(R) Content Protection HECI Service (cphs) . (.Intel Corporation.) - C:\WINDOWS\SysWOW64\IntelCpHeciSvc.exe =>.Intel(R) pGFX®
SR - Auto [01/06/2017] [ 317400] Elan Service (ETDService) . (.ELAN Microelectronics Corp..) - C:\Program Files\Elantech\ETDService.exe =>.ELAN Microelectronics Corporation®
SS - Demand [01/06/2017] [ 317400] GameConsoleService (GameConsoleService) . (.WildTangent, Inc..) - C:\Program Files (x86)\WildGames\Game Console - WildGames\GameConsoleService.exe =>.WildTangent Inc®
SS - Auto [01/06/2017] [ 317400] Service Google Update (gupdate) (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google Inc®
SS - Demand [01/06/2017] [ 317400] Service Google Update (gupdatem) (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google Inc®
SR - Auto [01/06/2017] [ 317400] Intel(R) Management and Security Application Local Manageme (LMS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe =>.Intel Corporation®
SS - Demand [01/06/2017] [ 317400] Mozilla Maintenance Service (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe =>.Mozilla Corporation®
SR - Auto [01/06/2017] [ 317400] NVIDIA Display Container LS (NVDisplay.ContainerLocalSystem) . (.NVIDIA Corporation.) - C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe =>.NVIDIA Corporation®
SS - Auto [01/06/2017] [ 317400] NVIDIA Update Service Daemon (nvUpdatusService) . (.NVIDIA Corporation.) - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe =>.NVIDIA Corporation®
SS - Demand [01/06/2017] [ 317400] PDF Architect 2 (PDF Architect 2) . (.pdfforge GmbH.) - C:\Program Files (x86)\PDF Architect 2\ws.exe =>.pdfforge GmbH®
SS - Demand [01/06/2017] [ 317400] pdfforge CrashHandler (pdfforge CrashHandler) . (.pdfforge GmbH.) - C:\Program Files (x86)\PDF Architect 2\crash-handler-ws.exe =>.pdfforge GmbH®
SR - Auto [01/06/2017] [ 317400] Cyberlink RichVideo Service(CRVS) (RichVideo) . (.Copyright 2004.) - C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe =>.CyberLink Corporation
SS - Auto [01/06/2017] [ 317400] Skype Updater (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe =>.Skype Software Sarl®
SR - Auto [01/06/2017] [ 317400] Intel(R) Management and Security Application User Notificat (UNS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe =>.Intel Corporation®
SS - Demand [01/06/2017] [ 317400] wampapache (wampapache) . (.Apache Software Foundation.) - c:\wamp\bin\apache\apache2.4.4\bin\httpd.exe =>.Apache Software Foundation
SS - Demand [01/06/2017] [ 317400] wampmysqld (wampmysqld) . (...) - c:\wamp\bin\mysql\mysql5.6.12\bin\mysqld.exe =>.MySQL

---\\ Tâches planifiées en automatique (26) - 20s
[MD5.F2FF574F6F2211D9AAAE5E82A3AD553F] [APT] [Adobe Acrobat Update Task] (.Adobe Systems Incorporated.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1165920] (.Activate.) =>.Adobe Systems, Incorporated®
[MD5.C52B8980692CACB057742C450D734149] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [272384] (.Activate.) =>.Adobe Systems Incorporated®
[MD5.76F8706E03A1DAD137EBB06A615870E2] [APT] [Avast Emergency Update] (.AVAST Software.) -- C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [2388056] (.Activate.) =>.AVAST Software s.r.o.®
[MD5.594F91C5985AC402ECD2D7F1376AFFFD] [APT] [avastBCLRestartS-1-5-21-578327087-4110603385-1361986703-1001] (.Mozilla Corporation.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe [521160] (.Activate.) =>.Mozilla Corporation®
[MD5.00000000000000000000000000000000] [APT] [EasyPartitionManager] (...) -- C:\Windows\MSetup\BA46-12225A02\EPM.exe (.not file.) [0] (.Activate.) =>.SUP.Empty
[MD5.90B24DB608B5325C4EBB874BF3EBAB3E] [APT] [GlaryInitialize 5] (.Glarysoft Ltd.) -- C:\Program Files (x86)\Glary Utilities 5\Initialize.exe [125392] (.Activate.) =>.Glarysoft LTD®
[MD5.053EEEE1ABAE53F044F1E386E22AE525] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200] (.Activate.) =>.Google Inc®
[MD5.053EEEE1ABAE53F044F1E386E22AE525] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200] (.Activate.) =>.Google Inc®
[MD5.488837297DF353C9F31B65ED56DF1673] [APT] [GU5SkipUAC] (.Glarysoft Ltd.) -- C:\Program Files (x86)\Glary Utilities 5\Integrator.exe [898000] (.Activate.) =>.Glarysoft LTD®
[MD5.00000000000000000000000000000000] [APT] [Plus-HD-2.6-chromeinstaller] (...) -- C:\Program Files (x86)\Plus-HD-2.6\Plus-HD-2.6-chromeinstaller.exe (.not file.) [0] (.Activate.) =>Adware.CrossRider
[MD5.00000000000000000000000000000000] [APT] [Plus-HD-2.6-codedownloader] (...) -- C:\Program Files (x86)\Plus-HD-2.6\Plus-HD-2.6-codedownloader.exe (.not file.) [0] (.Activate.) =>Adware.CrossRider
[MD5.00000000000000000000000000000000] [APT] [Plus-HD-2.6-enabler] (...) -- C:\Program Files (x86)\Plus-HD-2.6\Plus-HD-2.6-enabler.exe (.not file.) [0] (.Activate.) =>Adware.CrossRider
[MD5.00000000000000000000000000000000] [APT] [Plus-HD-2.6-firefoxinstaller] (...) -- C:\Program Files (x86)\Plus-HD-2.6\Plus-HD-2.6-firefoxinstaller.exe (.not file.) [0] (.Activate.) =>Adware.CrossRider
[MD5.67CD9061E402B4E46F185A8C1AA2BA13] [APT] [SafeZone scheduled Autoupdate 1469275362] (.Avast Software.) -- C:\Program Files\AVAST Software\SZBrowser\launcher.exe [1057824] (.Activate.) =>.AVAST Software s.r.o.®
[MD5.00000000000000000000000000000000] [APT] [SamsungSupportCenter] (...) -- C:\Program Files (x86)\Samsung\Easy Support Center\SSCKbdHk.exe (.not file.) [0] (.Activate.) =>.SUP.Empty
[MD5.663392E75FD426EA94C75CDBF1916251] [APT] [{07239BFB-00DA-4D7D-9104-CC917B2E74E1}] (.Aestan Software.) -- C:\wamp\wampmanager.exe [1169920] (.Activate.) =>.Aestan Software
[MD5.663392E75FD426EA94C75CDBF1916251] [APT] [{16E77734-68EE-45B3-92B0-07DB880BEE7F}] (.Aestan Software.) -- C:\wamp\wampmanager.exe [1169920] (.Activate.) =>.Aestan Software
[MD5.00000000000000000000000000000000] [APT] [{1DB73754-2EC8-4128-B4DD-B02C51354ABA}] (...) -- C:\Users\Mairie\Desktop\sketchupwfr.exe (.not file.) [0] (.Activate.) =>.SUP.Empty
[MD5.A650671AF9A670F678F29FF212B4950C] [APT] [{523ACAC1-6004-404C-9F26-EBF3C38EC962}] (.Apache Software Foundation.) -- C:\wamp\bin\apache\Apache2.4.4\bin\httpd.exe [22016] (.Activate.) =>.Apache Software Foundation
[MD5.663392E75FD426EA94C75CDBF1916251] [APT] [{567E7415-B5D8-4C3E-BB67-741EC29068D2}] (.Aestan Software.) -- C:\wamp\wampmanager.exe [1169920] (.Activate.) =>.Aestan Software
[MD5.663392E75FD426EA94C75CDBF1916251] [APT] [{7470B696-279A-4D8C-838C-18FC6550FBDE}] (.Aestan Software.) -- C:\wamp\wampmanager.exe [1169920] (.Activate.) =>.Aestan Software
[MD5.663392E75FD426EA94C75CDBF1916251] [APT] [{8CC6AAE2-EA85-4CE4-AB8F-651F92B7E5B9}] (.Aestan Software.) -- C:\wamp\wampmanager.exe [1169920] (.Activate.) =>.Aestan Software
[MD5.663392E75FD426EA94C75CDBF1916251] [APT] [{D02CB0C6-346F-4691-9093-90CB36541D96}] (.Aestan Software.) -- C:\wamp\wampmanager.exe [1169920] (.Activate.) =>.Aestan Software
[MD5.663392E75FD426EA94C75CDBF1916251] [APT] [{D9686B3B-3031-4218-879E-3F0E6A132600}] (.Aestan Software.) -- C:\wamp\wampmanager.exe [1169920] (.Activate.) =>.Aestan Software
[MD5.663392E75FD426EA94C75CDBF1916251] [APT] [{F751EE13-B959-409C-BDDC-712D3DED70E4}] (.Aestan Software.) -- C:\wamp\wampmanager.exe [1169920] (.Activate.) =>.Aestan Software
[MD5.00000000000000000000000000000000] [APT] [AVAST Software\Avast settings backup] (...) -- C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe (.not file.) [0] (.Activate.) =>.SUP.Empty

---\\ Tâches planifiées en automatique (Registre) (50) - 26s
O40 - TASK: {083BD282-7CD3-4840-AFF6-6C98E5F694FF} [64Bits][\{07239BFB-00DA-4D7D-9104-CC917B2E74E1}] - (.Aestan Software - Aestan Tray Menu.) -- C:\wamp\wampmanager.exe [1169920] =>.Aestan Software
O40 - TASK: {0DE7CCC0-F0CD-4465-B0D4-17FBF2CDF074} [64Bits][\GoogleUpdateTaskMachineUA] - (.Google Inc. - Programme d'installation de Google.) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200] =>.Google Inc®
O40 - TASK: {10B453D3-BE55-40E3-86A0-77B550292727} [64Bits][\Plus-HD-2.6-chromeinstaller] - (.Mairie - .) -- C:\Program Files (x86)\Plus-HD-2.6\Plus-HD-2.6-chromeinstaller.exe (.not file.) [0] (.Orphan.) =>Adware.CrossRider
O40 - TASK: {11B54031-E165-4E24-97A6-4FD863EE0564} [64Bits][\Microsoft\Windows\Media Center\RegisterSearch] - (...) -- C:\WINDOWS\ehome\ehPrivJob.exe (.not file.) [0] (.Orphan.) =>.SUP.Orphan
O40 - TASK: {120BCC3C-0E70-4F4B-97B3-730C36063045} [64Bits][\MirageAgent] - (.CyberLink - YouCam Mirage.) -- C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe [136488] =>.CyberLink®
O40 - TASK: {15C98F60-C7A5-4A03-96F9-EEE90B76099E} [64Bits][\Microsoft\Windows\Media Center\PBDADiscovery] - (...) -- C:\WINDOWS\ehome\ehPrivJob.exe (.not file.) [0] (.Orphan.) =>.SUP.Orphan
O40 - TASK: {21B78250-A14E-42C8-8CF5-CF0032958D76} [64Bits][\GU5SkipUAC] - (.Glarysoft Ltd - Glary Utilities 5.) -- C:\Program Files (x86)\Glary Utilities 5\Integrator.exe [898000] =>.Glarysoft LTD®
O40 - TASK: {27A78CE0-B765-42F9-87D3-C4A7DC393AC4} [64Bits][\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask] - (...) -- C:\WINDOWS\ehome\mcupdate.exe (.not file.) [0] (.Orphan.) =>.SUP.Orphan
O40 - TASK: {27D13452-D77C-41DC-A5C8-9921FEEE4D19} [64Bits][\Adobe Flash Player Updater] - (.Adobe Systems Incorporated - Adobe® Flash® Player Update Service 26.0 r0.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [272384] =>.Adobe Systems Incorporated®
O40 - TASK: {2BC5A2FF-AC75-496C-A22D-F6E5E760B1AA} [64Bits][\SafeZone scheduled Autoupdate 1469275362] - (.Avast Software - Avast SafeZone Browser.) -- C:\Program Files\AVAST Software\SZBrowser\launcher.exe [1057824] =>.AVAST Software s.r.o.®
O40 - TASK: {3E2B22D6-A80B-4997-9F08-F21766DAB8CC} [64Bits][\Adobe Acrobat Update Task] - (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1165920] =>.Adobe Systems, Incorporated®
O40 - TASK: {4141E0B4-C81A-4966-847F-5E894DE1F058} [64Bits][\Microsoft\Windows\Media Center\OCURActivate] - (...) -- C:\WINDOWS\ehome\ehPrivJob.exe (.not file.) [0] (.Orphan.) =>.SUP.Orphan
O40 - TASK: {469E690B-035D-4EB5-BC3B-3CA2F4747123} [64Bits][\Microsoft\Windows\Media Center\UpdateRecordPath] - (...) -- C:\WINDOWS\ehome\ehPrivJob.exe (.not file.) [0] (.Orphan.) =>.SUP.Orphan
O40 - TASK: {498E8E4B-8071-4B95-BFEA-717F3F770621} [64Bits][\Microsoft\Windows\Media Center\StartRecording] - (...) -- C:\WINDOWS\ehome\ehrec (.not file.) [0] (.Orphan.) =>.SUP.Orphan
O40 - TASK: {49F21B94-C212-4D48-B18B-AAAA1894B7DE} [64Bits][\Plus-HD-2.6-codedownloader] - (.Mairie - .) -- C:\Program Files (x86)\Plus-HD-2.6\Plus-HD-2.6-codedownloader.exe (.not file.) [0] (.Orphan.) =>Adware.CrossRider
O40 - TASK: {4A4CC9BF-3602-4173-B091-659A29200FAA} [64Bits][\{7470B696-279A-4D8C-838C-18FC6550FBDE}] - (.Aestan Software - Aestan Tray Menu.) -- C:\wamp\wampmanager.exe [1169920] =>.Aestan Software
O40 - TASK: {4ED57FAB-EDBC-4E67-A12F-85A2E300F614} [64Bits][\GlaryInitialize 5] - (.Glarysoft Ltd - Glary Utilities Initialize.) -- C:\Program Files (x86)\Glary Utilities 5\Initialize.exe [125392] =>.Glarysoft LTD®
O40 - TASK: {54E16EF9-289B-4E43-80F7-92A9856B7F9D} [64Bits][\Microsoft\Windows\Media Center\PvrRecoveryTask] - (...) -- C:\WINDOWS\ehome\mcupdate.exe (.not file.) [0] (.Orphan.) =>.SUP.Orphan
O40 - TASK: {56D55F29-5DA6-42CB-A819-914B1E779278} [64Bits][\Microsoft\Windows\Media Center\RecordingRestart] - (...) -- C:\WINDOWS\ehome\ehrec (.not file.) [0] (.Orphan.) =>.SUP.Orphan
O40 - TASK: {5AA96302-B6C0-4AF5-B697-160DA7ED5EB6} [64Bits][\Microsoft\Windows\Media Center\PeriodicScanRetry] - (...) -- C:\WINDOWS\ehome\MCUpdate.exe (.not file.) [0] (.Orphan.) =>.SUP.Orphan
O40 - TASK: {618F80E5-A9A2-490B-BECF-992291F7674C} [64Bits][\{8CC6AAE2-EA85-4CE4-AB8F-651F92B7E5B9}] - (.Aestan Software - Aestan Tray Menu.) -- C:\wamp\wampmanager.exe [1169920] =>.Aestan Software
O40 - TASK: {66E7AFD5-4437-487C-A60C-EE4143AC09B7} [64Bits][\Avast Emergency Update] - (.AVAST Software - Avast Emergency Update.) -- C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [2388056] =>.AVAST Software s.r.o.®
O40 - TASK: {6EB49EB1-10C2-48A2-B5C4-3BAE84275F29} [64Bits][\Microsoft\Windows\Media Center\OCURDiscovery] - (...) -- C:\WINDOWS\ehome\ehPrivJob.exe (.not file.) [0] (.Orphan.) =>.SUP.Orphan
O40 - TASK: {7DCEA81C-7DB7-432E-8F66-ABF9C20A2C99} [64Bits][\Microsoft\Windows\Media Center\mcupdate_scheduled] - (. - Check for Media Center updates..) -- C:\WINDOWS\ehome\mcupdate (.not file.) [0] (.Orphan.) =>.SUP.Orphan
O40 - TASK: {7FA12C41-70E3-4D31-8069-9C2F2D10F915} [64Bits][\Microsoft\Windows\Media Center\PvrScheduleTask] - (...) -- C:\WINDOWS\ehome\mcupdate.exe (.not file.) [0] (.Orphan.) =>.SUP.Orphan
O40 - TASK: {86A0D974-5671-4F6D-A624-5FE8045FDEDD} [64Bits][\avastBCLRestartS-1-5-21-578327087-4110603385-1361986703-1001] - (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe [521160] =>.Mozilla Corporation®
O40 - TASK: {893DC672-E620-45BA-99EE-58995989F439} [64Bits][\Plus-HD-2.6-enabler] - (.Mairie - .) -- C:\Program Files (x86)\Plus-HD-2.6\Plus-HD-2.6-enabler.exe (.not file.) [0] (.Orphan.) =>Adware.CrossRider
O40 - TASK: {940ED2D2-F34C-4DDB-981C-C2ACA1CD2906} [64Bits][\{523ACAC1-6004-404C-9F26-EBF3C38EC962}] - (.Apache Software Foundation - Apache HTTP Server.) -- C:\wamp\bin\apache\Apache2.4.4\bin\httpd.exe [22016] =>.Apache Software Foundation
O40 - TASK: {943E534C-7732-439E-B3FF-67D5D79D3133} [64Bits][\{1DB73754-2EC8-4128-B4DD-B02C51354ABA}] - (...) -- C:\Users\Mairie\Desktop\sketchupwfr.exe (.not file.) [0] (.Orphan.) =>.SUP.Orphan
O40 - TASK: {953BE1D8-5F42-4114-A80F-44698ED581A1} [64Bits][\Microsoft\Windows\Media Center\ehDRMInit] - (...) -- C:\WINDOWS\ehome\ehPrivJob.exe (.not file.) [0] (.Orphan.) =>.SUP.Orphan
O40 - TASK: {9E08AC91-B59C-427D-B3A8-5032DE70473D} [64Bits][\Microsoft\Windows\Media Center\SqlLiteRecoveryTask] - (...) -- C:\WINDOWS\ehome\mcupdate.exe (.not file.) [0] (.Orphan.) =>.SUP.Orphan
O40 - TASK: {9F095188-DE0E-4853-B637-477C7C2D2C51} [64Bits][\Microsoft\Windows\Media Center\DispatchRecoveryTasks] - (...) -- C:\WINDOWS\ehome\ehPrivJob.exe (.not file.) [0] (.Orphan.) =>.SUP.Orphan
O40 - TASK: {A4CF5630-2D45-4D87-AC3D-98420472C3CA} [64Bits][\SamsungSupportCenter] - (.Administrators - SamsungSupportCenter.) -- C:\Program Files (x86)\Samsung\Easy Support Center\SSCKbdHk.exe (.not file.) [0] (.Orphan.) =>.SUP.Orphan
O40 - TASK: {A51CCAD6-4E6C-443B-9001-8F43BE34FE3F} [64Bits][\Microsoft\Windows\Media Center\ActivateWindowsSearch] - (...) -- C:\WINDOWS\ehome\ehPrivJob.exe (.not file.) [0] (.Orphan.) =>.SUP.Orphan
O40 - TASK: {ACCFFCD4-2EC0-4E28-8F9B-3793896D31F0} [64Bits][\Microsoft\Windows\Media Center\PBDADiscoveryW1] - (.Acer Inc. - .) -- C:\WINDOWS\ehome\ehPrivJob.exe (.not file.) [0] (.Orphan.) =>.SUP.Orphan
O40 - TASK: {AE38F69C-5268-40E9-BB6E-127C5732A77C} [64Bits][\EasyPartitionManager] - (.Administrator - .) -- C:\Windows\MSetup\BA46-12225A02\EPM.exe (.not file.) [0] (.Orphan.) =>.SUP.Orphan
O40 - TASK: {B6D5A47A-5985-4EA3-BB3B-53D1973FC3C1} [64Bits][\GoogleUpdateTaskMachineCore] - (.Google Inc. - Programme d'installation de Google.) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200] =>.Google Inc®
O40 - TASK: {B870EA4C-A1DD-4AA7-82A0-986B60FC3CC7} [64Bits][\Microsoft\Windows\Media Center\MediaCenterRecoveryTask] - (...) -- C:\WINDOWS\ehome\mcupdate.exe (.not file.) [0] (.Orphan.) =>.SUP.Orphan
O40 - TASK: {BAF2DC7C-DBEB-4242-8995-E960B4D49AB8} [64Bits][\Microsoft\Windows\Media Center\ReindexSearchRoot] - (...) -- C:\WINDOWS\ehome\ehPrivJob.exe (.not file.) [0] (.Orphan.) =>.SUP.Orphan
O40 - TASK: {C2D5D402-5058-4CDE-839B-C213269E06DC} [64Bits][\AVAST Software\Avast settings backup] - (.AVAST Software - .) -- C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe (.not file.) [0] (.Orphan.) =>.SUP.Orphan
O40 - TASK: {CACBFECA-6AB6-471F-9680-7D175AD4B16A} [64Bits][\Microsoft\Windows\Media Center\PBDADiscoveryW2] - (...) -- C:\WINDOWS\ehome\ehPrivJob.exe (.not file.) [0] (.Orphan.) =>.SUP.Orphan
O40 - TASK: {D022D9E6-74D5-4785-B909-6EAAB5F1DAB6} [64Bits][\{F751EE13-B959-409C-BDDC-712D3DED70E4}] - (.Aestan Software - Aestan Tray Menu.) -- C:\wamp\wampmanager.exe [1169920] =>.Aestan Software
O40 - TASK: {D155FC20-A524-4AB2-A3FB-151E40819F29} [64Bits][\{16E77734-68EE-45B3-92B0-07DB880BEE7F}] - (.Aestan Software - Aestan Tray Menu.) -- C:\wamp\wampmanager.exe [1169920] =>.Aestan Software
O40 - TASK: {E1474EE4-BC4B-4E4F-BB4C-708E09FC32AB} [64Bits][\Microsoft\Windows\Media Center\ConfigureInternetTimeService] - (...) -- C:\WINDOWS\ehome\ehPrivJob.exe (.not file.) [0] (.Orphan.) =>.SUP.Orphan
O40 - TASK: {E26615BD-220C-437E-8491-DD8459AB63B1} [64Bits][\Plus-HD-2.6-firefoxinstaller] - (.Mairie - .) -- C:\Program Files (x86)\Plus-HD-2.6\Plus-HD-2.6-firefoxinstaller.exe (.not file.) [0] (.Orphan.) =>Adware.CrossRider
O40 - TASK: {E39C9C19-616D-4ECC-AA25-8CBB8BD43F92} [64Bits][\Microsoft\Windows\Media Center\mcupdate] - (...) -- C:\WINDOWS\ehome\mcupdate (.not file.) [0] (.Orphan.) =>.SUP.Orphan
O40 - TASK: {E88078F1-CFCE-44B5-B9DF-04B39AD481EB} [64Bits][\{D02CB0C6-346F-4691-9093-90CB36541D96}] - (.Aestan Software - Aestan Tray Menu.) -- C:\wamp\wampmanager.exe [1169920] =>.Aestan Software
O40 - TASK: {F3DE320C-556D-46EC-9290-35FD1A511DE5} [64Bits][\{567E7415-B5D8-4C3E-BB67-741EC29068D2}] - (.Aestan Software - Aestan Tray Menu.) -- C:\wamp\wampmanager.exe [1169920] =>.Aestan Software
O40 - TASK: {F83F8FFA-E41E-4C09-9DAC-8D9AB8F56282} [64Bits][\{D9686B3B-3031-4218-879E-3F0E6A132600}] - (.Aestan Software - Aestan Tray Menu.) -- C:\wamp\wampmanager.exe [1169920] =>.Aestan Software
O40 - TASK: {FD9734C9-F545-40D1-87EA-A9B2BEFD3431} [64Bits][\Microsoft\Windows\Media Center\InstallPlayReady] - (...) -- C:\WINDOWS\ehome\ehPrivJob.exe (.not file.) [0] (.Orphan.) =>.SUP.Orphan

---\\ Applications lancées au démarrage du système (14) - 9s
O4 - HKLM\..\Run: [RtHDVCpl] . (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe =>.Realtek Semiconductor Corp®
O4 - HKLM\..\Run: [BTMTrayAgent] . (.Intel Corporation - Bluetooth Shell Extension.) -- C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll =>.Intel Corporation - Mobile Wireless Group®
O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\WINDOWS\system32\igfxtray.exe =>.Intel Corporation
O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\WINDOWS\system32\hkcmd.exe =>.Intel Corporation
O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\WINDOWS\system32\igfxpers.exe =>.Intel Corporation
O4 - HKLM\..\Run: [AvastUI.exe] . (.AVAST Software - AvLaunch component.) -- C:\Program Files\AVAST Software\Avast\AvLaunch.exe =>.AVAST Software s.r.o.®
O4 - HKCU\..\Run: [GoogleDriveSync] . (.Google - Google Drive.) -- C:\Program Files (x86)\Google\Drive\googledrivesync.exe =>.Google Inc®
O4 - HKCU\..\Run: [OneDrive] . (.Microsoft Corporation - Microsoft OneDrive.) -- C:\Users\Mairie\AppData\Local\Microsoft\OneDrive\OneDrive.exe =>.Microsoft Corporation®
O4 - HKCU\..\Run: [GUDelayStartup] . (.Glarysoft Ltd - Glary Utilities StartupManager.) -- C:\Program Files (x86)\Glary Utilities 5\StartupManager.exe =>.Glarysoft LTD®
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] . (.Microsoft Corporation - Microsoft OneDrive Setup.) -- C:\Windows\SysWOW64\OneDriveSetup.exe =>.Microsoft Corporation®
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] . (.Microsoft Corporation - Microsoft OneDrive Setup.) -- C:\Windows\SysWOW64\OneDriveSetup.exe =>.Microsoft Corporation®
O4 - HKUS\S-1-5-21-578327087-4110603385-1361986703-1001\..\Run: [GoogleDriveSync] . (.Google - Google Drive.) -- C:\Program Files (x86)\Google\Drive\googledrivesync.exe =>.Google Inc®
O4 - HKUS\S-1-5-21-578327087-4110603385-1361986703-1001\..\Run: [OneDrive] . (.Microsoft Corporation - Microsoft OneDrive.) -- C:\Users\Mairie\AppData\Local\Microsoft\OneDrive\OneDrive.exe =>.Microsoft Corporation®
O4 - HKUS\S-1-5-21-578327087-4110603385-1361986703-1001\..\Run: [GUDelayStartup] . (.Glarysoft Ltd - Glary Utilities StartupManager.) -- C:\Program Files (x86)\Glary Utilities 5\StartupManager.exe =>.Glarysoft LTD®

---\\ Processus lancés (1) - 10s
[MD5.1AF8676103C52796A90585F90007C711] - (...) -- C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17054.14711.0_x64__8wekyb3d8bbwe\Video.UI.exe [23624704] [PID.4108]

---\\ Google Chrome, Démarrage,Recherche,Extensions (7) - 3s
G2 - GCE: Preference [User Data\Default] [apdfllckaahabafndbhieahigkjlhalf] http://drive.google.com/ =>.Google Inc. {Drive}
G2 - GCE: Preference [User Data\Default] [gomekmidlodglbbmalcneegieacbdmki] Avast Online Security =>.Avast Software s.r.o
G2 - GCE: Preference [User Data\Default] [lccekmodgklaepjeofjdjpbminllajkg] Chrome Hotword Shared Module =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [lmjegmlicamnimmfhcmpkclmigmmcbeh] Application Launcher for Drive (by Google) =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] =>.Google Inc. {Wallet}
G2 - GCE: Preference [User Data\Default] [oilkkkefbalmbfppgjmgjoefbclebkce] Vosteran New Tab =>PUP.Optional.Vosteran
G2 - GCE: Preference [User Data\Default] [pbjikboenpfhbbejgkoklgkhjpfogcam] Amazon

---\\ Firefox, Plugins,Demarrage,Recherche,Extensions (23) - 12s
M0 - MFSP: prefs.js [Mairie - lh8efc09.default] http://www.google.com/ =>.Google Inc.
P2 - EXT FILE: (...) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\Myriad Music Plugin.rsr
P2 - EXT FILE: (.Myriad Software. - Myriad music plug-in.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\NPMyrMus.dll =>.Myriad SARL®
P2 - EXT FILE: (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\nppdf32.dll =>.Adobe Systems, Incorporated®
P2 - EXT FILE: (.Adobe Inc. - Acrobate Reader.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\nppdf32.FRA =>.Adobe Inc.
P2 - EXT FILE: (.Avast Online Security - Avast Browser Security and Web Reputat.) -- C:\Users\Mairie\AppData\Roaming\Mozilla\Firefox\Profiles\lh8efc09.default\extensions\wrc@avast.com.xpi =>.Avast Online Security
P2 - EXT FILE: (.ImTranslator - Run ImTranslator from the Firefox Tool.) -- C:\Users\Mairie\AppData\Roaming\Mozilla\Firefox\Profiles\lh8efc09.default\extensions\{9AA46F4F-4DC7-4c06-97AF-5035170634FE}.xpi =>.ImTranslator
P2 - EXT FILE: (.Adblock Plus - Ads were yesterday!.) -- C:\Users\Mairie\AppData\Roaming\Mozilla\Firefox\Profiles\lh8efc09.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi =>.Adblock Plus
P2 - EXT FILE: (.JavaScript Debugger - JavaScript debugger and profiler.) -- C:\Users\Mairie\AppData\Roaming\Mozilla\Firefox\Profiles\lh8efc09.default\extensions\{f13b157f-b174-47e7-a34d-4815ddfdfeb8}.xpi
P2 - EXT FILE: (.Amazon - Amazon Rechercher.) -- C:\Users\Mairie\AppData\Roaming\Mozilla\Firefox\Profiles\lh8efc09.default\searchplugins\amazon.xml =>.Amazon
P2 - EXT FILE: (.Mozilla Corporation - .) -- C:\Users\Mairie\AppData\Roaming\Mozilla\Firefox\Profiles\lh8efc09.default\searchplugins\default.xml =>.Mozilla Corporation
P2 - EXT FILE: (.Google (avast) - Google Search from avast.) -- C:\Users\Mairie\AppData\Roaming\Mozilla\Firefox\Profiles\lh8efc09.default\searchplugins\google-avast.xml =>.Google (avast)
P2 - EXT FILE: (...) -- C:\Users\Mairie\AppData\Roaming\Mozilla\Firefox\Profiles\lh8efc09.default\searchplugins\qtl.xml
P2 - EXT FILE: (...) -- C:\Users\Mairie\AppData\Roaming\Mozilla\Firefox\Profiles\lh8efc09.default\searchplugins\translatorbar-12-customized-web-search.xml
P2 - EXT FILE: (...) -- C:\Users\Mairie\AppData\Roaming\Mozilla\Firefox\Profiles\lh8efc09.default\searchplugins\Vosteran.xml =>PUP.Optional.Vosteran
P2 - EXT FILE: (.Default - Default.) -- C:\Users\Mairie\AppData\Roaming\Mozilla\Firefox\Profiles\lh8efc09.default\searchplugins\yahoo.xml =>PUP.Optional.BDYahoo
P2 - EXT FILE: (.Mozilla Corporation.) -- C:\Program Files (x86)\Mozilla Firefox\browser\features\aushelper@mozilla.org.xpi =>.Mozilla Corporation
P2 - EXT FILE: (.Mozilla Corporation.) -- C:\Program Files (x86)\Mozilla Firefox\browser\features\e10srollout@mozilla.org.xpi =>.Mozilla Corporation
P2 - EXT FILE: (.Mozilla Corporation.) -- C:\Program Files (x86)\Mozilla Firefox\browser\features\firefox@getpocket.com.xpi =>.Mozilla Corporation
P2 - EXT FILE: (.Mozilla Corporation.) -- C:\Program Files (x86)\Mozilla Firefox\browser\features\screenshots@mozilla.org.xpi =>.Mozilla Corporation
P2 - EXT FILE: (.Mozilla Corporation.) -- C:\Program Files (x86)\Mozilla Firefox\browser\features\webcompat@mozilla.org.xpi =>.Mozilla Corporation
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_26_0_0_151.dll =>.Adobe Systems Incorporated
P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (.Microsoft.) -- c:\Program Files (x86)\Microsoft Silverlight\5.1.50901.0\npctrl.dll =>.Microsoft

---\\ Internet Explorer,Démarrage,Recherche,URLSearchHook (19) - 0s
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://searchinterneat-a.akamaihd.net/ =>.SUP.AkamaiHD
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/ =>.Microsoft Corporation
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com/ =>.Google Inc.
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ =>.Google Inc.
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk =>.Microsoft Corporation
R1 - HKEY_USERS\S-1-5-21-578327087-4110603385-1361986703-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ =>.Google Inc.
R3 - URLSearchHook: (no name)[HKCU] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (11.00.10586.672 (th2_release_sec.161024-1825)) -- C:\Windows\SysWOW64\ieframe.dll =>.Microsoft Corporation
R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV9 = 1
R4 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\PhishingFilter,EnabledV9 = 1

---\\ Internet Explorer,Proxy Management (5) - 0s
R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
R5 - HKLM\SYSTEM\CurrentControlSet\services\NlaSvc\Parameters\Internet\ManualProxies [] =>.Microsoft

---\\ Internet Explorer,IniFiles, Autoloading programs (3) - 0s
F2 - REG:system.ini: UserInit=
F2 - REG:system.ini: Shell=C:\WINDOWS\explorer.exe (.Microsoft Corporation.) =>.Microsoft Corporation
F2 - REG:system.ini: VMApplet=

---\\ Etude du fichier hosts (1) - 0s
~ Le fichier hôte est sain (The hosts file is clean) (28)

---\\ Internet Explorer, Barre d'outil (1) - 0s
O3 - Toolbar: 0xE3EFEB7F196B494398D2FFB09D4B49CA0063000000 - [HKCU]{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} . (...) -- (.not file.)

---\\ Raccourcis Global Startup (184) - 23s
O4 - GS\Desktop [Administrateur]: adsl TV.lnk . (.adsl TV / FM - adsl TV.) C:\Program Files (x86)\adslTV\adsltv.exe =>.adsl TV/FM (adsl prod)®
O4 - GS\Desktop [Administrateur]: Assistant Mise à niveau de Windows 10.lnk . (.Microsoft Corporation - Assistant Mise à jour de Windows 10.) C:\Windows10Upgrade\Windows10UpgraderApp.exe /ClientID "Win10Upgrade:VNL:Hadron5:{}" =>.Microsoft Corporation®
O4 - GS\Desktop [Administrateur]: caisse.exe - Raccourci.lnk . (.witz - .) C:\Program Files (x86)\caisse\caisse.exe
O4 - GS\Desktop [Administrateur]: Client UltraVNC.lnk . (.UltraVNC - VNCViewer.) C:\Program Files (x86)\UltraVNC\vncviewer.exe =>.UltraVNC
O4 - GS\Desktop [Administrateur]: EditPlus 3.lnk . (.ES-Computing - EditPlus.) C:\Program Files (x86)\EditPlus 3\editplus.exe {4A11F156BEB964BC9ABC4B8ED79C51D2} =>.ES-Computing
O4 - GS\Desktop [Administrateur]: GIMP 2.lnk . (.Spencer Kimball, Peter Mattis and the GIMP Developmen - GNU Image Manipulation Program.) C:\Program Files\GIMP 2\bin\gimp-2.8.exe =>.Jernej Simončič - Open Source Developer®
O4 - GS\Desktop [Administrateur]: Google Drive.lnk . (...) C:\Users\Mairie\Google Drive
O4 - GS\Desktop [Administrateur]: KaraFun Player.lnk . (.RECISIO - KaraFun Player - Karaoke Player.) C:\Program Files (x86)\KaraFun Player\KaraFunPlayer.exe =>.Recisio
O4 - GS\Desktop [Administrateur]: Melody Assistant.lnk . (.Myriad - Melody Assistant - Win32.) C:\Program Files (x86)\Melody Assistant\melody.exe =>.Myriad SARL®
O4 - GS\Desktop [Administrateur]: ScanTool.net for Windows v1.13.lnk . (.ScanTool.net, LLC - ScanTool.net OBD-II Software for Windows.) C:\Program Files (x86)\ScanTool.net_win\ScanTool.exe =>.ScanTool.net, LLC
O4 - GS\Desktop [Administrateur]: Serveur UltraVNC.lnk . (.www.ultravnc.fr - Serveur VNC pour Win32.) C:\Program Files (x86)\UltraVNC\winvnc.exe
O4 - GS\Desktop [Administrateur]: Téléchargements - Raccourci.lnk . (...) C:\Users\Mairie\Downloads
O4 - GS\Desktop [Administrateur]: ViewPlayCap.lnk . (...) C:\Program Files (x86)\ViewPlayCap\ViewPlayCap.exe
O4 - GS\Desktop [Administrateur]: VirtualDub.lnk . (.Copyright © 1998-2009 by Avery Lee, Tous Droits Réser - www.virtualdub-fr.org.) C:\Program Files (x86)\VirtualDub\VirtualDub.exe
O4 - GS\Desktop [Administrateur]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\Mairie\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman
O4 - GS\Quicklaunch [Administrateur]: GAD Garage.lnk . (.GAD Garage - Logiciel Garage.) C:\GAD Garage\Garage.exe
O4 - GS\Quicklaunch [Administrateur]: Glary Utilities 5.lnk . (.Glarysoft Ltd - Glary Utilities 5.) C:\Program Files (x86)\Glary Utilities 5\Integrator.exe =>.Glarysoft LTD®
O4 - GS\Quicklaunch [Administrateur]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\Quicklaunch [Administrateur]: Inkscape.lnk . (.inkscape.org - Inkscape.) C:\Program Files (x86)\Inkscape\inkscape.exe =>.inkscape.org
O4 - GS\Quicklaunch [Administrateur]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files (x86)\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O4 - GS\Quicklaunch [Administrateur]: Mozilla Thunderbird.lnk . (.Mozilla Corporation - Thunderbird.) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe =>.Mozilla Corporation®
O4 - GS\Quicklaunch [Administrateur]: WampServer.lnk . (.Aestan Software - Aestan Tray Menu.) C:\wamp\wampmanager.exe =>.Aestan Software
O4 - GS\sendTo [Administrateur]: EditPlus 3.lnk . (.ES-Computing - EditPlus.) C:\Program Files (x86)\EditPlus 3\editplus.exe {4A11F156BEB964BC9ABC4B8ED79C51D2} =>.ES-Computing
O4 - GS\sendTo [Administrateur]: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\WINDOWS\system32\WFS.exe /SendTo =>.Microsoft Corporation
O4 - GS\sendTo [Administrateur]: Skype.lnk . (.Skype Technologies S.A. - Skype.) C:\Program Files (x86)\Skype\Phone\Skype.exe /sendto: =>.Skype Software Sarl®
O4 - GS\sendTo [Administrateur]: Transfert de fichiers Bluetooth.LNK . (.Microsoft Corporation - .) C:\Windows\System32\fsquirt.exe =>.Microsoft Corporation
O4 - GS\sendTo [Administrateur]: WinSCP (pour envoi).lnk . (.Martin Prikryl - WinSCP: SFTP, FTP and SCP client.) C:\Program Files (x86)\WinSCP\WinSCP.exe /upload =>.Martin Prikryl®
O4 - GS\TaskBar [Administrateur]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files (x86)\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O4 - GS\TaskBar [Administrateur]: Mozilla Thunderbird.lnk . (.Mozilla Corporation - Thunderbird.) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe =>.Mozilla Corporation®
O4 - GS\TaskBar [Administrateur]: Windows Media Player.lnk . (.Microsoft Corporation - Lecteur Windows Media.) C:\Program Files (x86)\Windows Media Player\wmplayer.exe /prefetch:1 =>.Microsoft Corporation
O4 - GS\Programs [Administrateur]: Fonctionnalités optionnelles.lnk . (.Microsoft Corporation - Assistance des fonctionnalités à la demande.) C:\Windows\System32\fodhelper.exe =>.Microsoft Corporation
O4 - GS\Programs [Administrateur]: OneDrive.lnk . (.Microsoft Corporation - Microsoft OneDrive.) C:\Users\Mairie\AppData\Local\Microsoft\OneDrive\OneDrive.exe =>.Microsoft Corporation®
O4 - GS\Programs [Administrateur]: ViewPlayCap.lnk . (...) C:\Program Files (x86)\ViewPlayCap\ViewPlayCap.exe
O4 - GS\Desktop [Mairie]: adsl TV.lnk . (.adsl TV / FM - adsl TV.) C:\Program Files (x86)\adslTV\adsltv.exe =>.adsl TV/FM (adsl prod)®
O4 - GS\Desktop [Mairie]: Assistant Mise à niveau de Windows 10.lnk . (.Microsoft Corporation - Assistant Mise à jour de Windows 10.) C:\Windows10Upgrade\Windows10UpgraderApp.exe /ClientID "Win10Upgrade:VNL:Hadron5:{}" =>.Microsoft Corporation®
O4 - GS\Desktop [Mairie]: caisse.exe - Raccourci.lnk . (.witz - .) C:\Program Files (x86)\caisse\caisse.exe
O4 - GS\Desktop [Mairie]: Client UltraVNC.lnk . (.UltraVNC - VNCViewer.) C:\Program Files (x86)\UltraVNC\vncviewer.exe =>.UltraVNC
O4 - GS\Desktop [Mairie]: EditPlus 3.lnk . (.ES-Computing - EditPlus.) C:\Program Files (x86)\EditPlus 3\editplus.exe {4A11F156BEB964BC9ABC4B8ED79C51D2} =>.ES-Computing
O4 - GS\Desktop [Mairie]: GIMP 2.lnk . (.Spencer Kimball, Peter Mattis and the GIMP Developmen - GNU Image Manipulation Program.) C:\Program Files\GIMP 2\bin\gimp-2.8.exe =>.Jernej Simončič - Open Source Developer®
O4 - GS\Desktop [Mairie]: Google Drive.lnk . (...) C:\Users\Mairie\Google Drive
O4 - GS\Desktop [Mairie]: KaraFun Player.lnk . (.RECISIO - KaraFun Player - Karaoke Player.) C:\Program Files (x86)\KaraFun Player\KaraFunPlayer.exe =>.Recisio
O4 - GS\Desktop [Mairie]: Melody Assistant.lnk . (.Myriad - Melody Assistant - Win32.) C:\Program Files (x86)\Melody Assistant\melody.exe =>.Myriad SARL®
O4 - GS\Desktop [Mairie]: ScanTool.net for Windows v1.13.lnk . (.ScanTool.net, LLC - ScanTool.net OBD-II Software for Windows.) C:\Program Files (x86)\ScanTool.net_win\ScanTool.exe =>.ScanTool.net, LLC
O4 - GS\Desktop [Mairie]: Serveur UltraVNC.lnk . (.www.ultravnc.fr - Serveur VNC pour Win32.) C:\Program Files (x86)\UltraVNC\winvnc.exe
O4 - GS\Desktop [Mairie]: Téléchargements - Raccourci.lnk . (...) C:\Users\Mairie\Downloads
O4 - GS\Desktop [Mairie]: ViewPlayCap.lnk . (...) C:\Program Files (x86)\ViewPlayCap\ViewPlayCap.exe
O4 - GS\Desktop [Mairie]: VirtualDub.lnk . (.Copyright © 1998-2009 by Avery Lee, Tous Droits Réser - www.virtualdub-fr.org.) C:\Program Files (x86)\VirtualDub\VirtualDub.exe
O4 - GS\Desktop [Mairie]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\Mairie\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman
O4 - GS\Quicklaunch [Mairie]: GAD Garage.lnk . (.GAD Garage - Logiciel Garage.) C:\GAD Garage\Garage.exe
O4 - GS\Quicklaunch [Mairie]: Glary Utilities 5.lnk . (.Glarysoft Ltd - Glary Utilities 5.) C:\Program Files (x86)\Glary Utilities 5\Integrator.exe =>.Glarysoft LTD®
O4 - GS\Quicklaunch [Mairie]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\Quicklaunch [Mairie]: Inkscape.lnk . (.inkscape.org - Inkscape.) C:\Program Files (x86)\Inkscape\inkscape.exe =>.inkscape.org
O4 - GS\Quicklaunch [Mairie]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files (x86)\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O4 - GS\Quicklaunch [Mairie]: Mozilla Thunderbird.lnk . (.Mozilla Corporation - Thunderbird.) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe =>.Mozilla Corporation®
O4 - GS\Quicklaunch [Mairie]: WampServer.lnk . (.Aestan Software - Aestan Tray Menu.) C:\wamp\wampmanager.exe =>.Aestan Software
O4 - GS\sendTo [Mairie]: EditPlus 3.lnk . (.ES-Computing - EditPlus.) C:\Program Files (x86)\EditPlus 3\editplus.exe {4A11F156BEB964BC9ABC4B8ED79C51D2} =>.ES-Computing
O4 - GS\sendTo [Mairie]: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\WINDOWS\system32\WFS.exe /SendTo =>.Microsoft Corporation
O4 - GS\sendTo [Mairie]: Skype.lnk . (.Skype Technologies S.A. - Skype.) C:\Program Files (x86)\Skype\Phone\Skype.exe /sendto: =>.Skype Software Sarl®
O4 - GS\sendTo [Mairie]: Transfert de fichiers Bluetooth.LNK . (.Microsoft Corporation - .) C:\Windows\System32\fsquirt.exe =>.Microsoft Corporation
O4 - GS\sendTo [Mairie]: WinSCP (pour envoi).lnk . (.Martin Prikryl - WinSCP: SFTP, FTP and SCP client.) C:\Program Files (x86)\WinSCP\WinSCP.exe /upload =>.Martin Prikryl®
O4 - GS\TaskBar [Mairie]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files (x86)\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O4 - GS\TaskBar [Mairie]: Mozilla Thunderbird.lnk . (.Mozilla Corporation - Thunderbird.) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe =>.Mozilla Corporation®
O4 - GS\TaskBar [Mairie]: Windows Media Player.lnk . (.Microsoft Corporation - Lecteur Windows Media.) C:\Program Files (x86)\Windows Media Player\wmplayer.exe /prefetch:1 =>.Microsoft Corporation
O4 - GS\Programs [Mairie]: Fonctionnalités optionnelles.lnk . (.Microsoft Corporation - Assistance des fonctionnalités à la demande.) C:\Windows\System32\fodhelper.exe =>.Microsoft Corporation
O4 - GS\Programs [Mairie]: OneDrive.lnk . (.Microsoft Corporation - Microsoft OneDrive.) C:\Users\Mairie\AppData\Local\Microsoft\OneDrive\OneDrive.exe =>.Microsoft Corporation®
O4 - GS\Programs [Mairie]: ViewPlayCap.lnk . (...) C:\Program Files (x86)\ViewPlayCap\ViewPlayCap.exe
O4 - GS\Desktop [mairie_2]: adsl TV.lnk . (.adsl TV / FM - adsl TV.) C:\Program Files (x86)\adslTV\adsltv.exe =>.adsl TV/FM (adsl prod)®
O4 - GS\Desktop [mairie_2]: Assistant Mise à niveau de Windows 10.lnk . (.Microsoft Corporation - Assistant Mise à jour de Windows 10.) C:\Windows10Upgrade\Windows10UpgraderApp.exe /ClientID "Win10Upgrade:VNL:Hadron5:{}" =>.Microsoft Corporation®
O4 - GS\Desktop [mairie_2]: caisse.exe - Raccourci.lnk . (.witz - .) C:\Program Files (x86)\caisse\caisse.exe
O4 - GS\Desktop [mairie_2]: Client UltraVNC.lnk . (.UltraVNC - VNCViewer.) C:\Program Files (x86)\UltraVNC\vncviewer.exe =>.UltraVNC
O4 - GS\Desktop [mairie_2]: EditPlus 3.lnk . (.ES-Computing - EditPlus.) C:\Program Files (x86)\EditPlus 3\editplus.exe {4A11F156BEB964BC9ABC4B8ED79C51D2} =>.ES-Computing
O4 - GS\Desktop [mairie_2]: GIMP 2.lnk . (.Spencer Kimball, Peter Mattis and the GIMP Developmen - GNU Image Manipulation Program.) C:\Program Files\GIMP 2\bin\gimp-2.8.exe =>.Jernej Simončič - Open Source Developer®
O4 - GS\Desktop [mairie_2]: Google Drive.lnk . (...) C:\Users\Mairie\Google Drive
O4 - GS\Desktop [mairie_2]: KaraFun Player.lnk . (.RECISIO - KaraFun Player - Karaoke Player.) C:\Program Files (x86)\KaraFun Player\KaraFunPlayer.exe =>.Recisio
O4 - GS\Desktop [mairie_2]: Melody Assistant.lnk . (.Myriad - Melody Assistant - Win32.) C:\Program Files (x86)\Melody Assistant\melody.exe =>.Myriad SARL®
O4 - GS\Desktop [mairie_2]: ScanTool.net for Windows v1.13.lnk . (.ScanTool.net, LLC - ScanTool.net OBD-II Software for Windows.) C:\Program Files (x86)\ScanTool.net_win\ScanTool.exe =>.ScanTool.net, LLC
O4 - GS\Desktop [mairie_2]: Serveur UltraVNC.lnk . (.www.ultravnc.fr - Serveur VNC pour Win32.) C:\Program Files (x86)\UltraVNC\winvnc.exe
O4 - GS\Desktop [mairie_2]: Téléchargements - Raccourci.lnk . (...) C:\Users\Mairie\Downloads
O4 - GS\Desktop [mairie_2]: ViewPlayCap.lnk . (...) C:\Program Files (x86)\ViewPlayCap\ViewPlayCap.exe
O4 - GS\Desktop [mairie_2]: VirtualDub.lnk . (.Copyright © 1998-2009 by Avery Lee, Tous Droits Réser - www.virtualdub-fr.org.) C:\Program Files (x86)\VirtualDub\VirtualDub.exe
O4 - GS\Desktop [mairie_2]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\Mairie\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman
O4 - GS\Quicklaunch [mairie_2]: GAD Garage.lnk . (.GAD Garage - Logiciel Garage.) C:\GAD Garage\Garage.exe
O4 - GS\Quicklaunch [mairie_2]: Glary Utilities 5.lnk . (.Glarysoft Ltd - Glary Utilities 5.) C:\Program Files (x86)\Glary Utilities 5\Integrator.exe =>.Glarysoft LTD®
O4 - GS\Quicklaunch [mairie_2]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\Quicklaunch [mairie_2]: Inkscape.lnk . (.inkscape.org - Inkscape.) C:\Program Files (x86)\Inkscape\inkscape.exe =>.inkscape.org
O4 - GS\Quicklaunch [mairie_2]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files (x86)\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O4 - GS\Quicklaunch [mairie_2]: Mozilla Thunderbird.lnk . (.Mozilla Corporation - Thunderbird.) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe =>.Mozilla Corporation®
O4 - GS\Quicklaunch [mairie_2]: WampServer.lnk . (.Aestan Software - Aestan Tray Menu.) C:\wamp\wampmanager.exe =>.Aestan Software
O4 - GS\sendTo [mairie_2]: EditPlus 3.lnk . (.ES-Computing - EditPlus.) C:\Program Files (x86)\EditPlus 3\editplus.exe {4A11F156BEB964BC9ABC4B8ED79C51D2} =>.ES-Computing
O4 - GS\sendTo [mairie_2]: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\WINDOWS\system32\WFS.exe /SendTo =>.Microsoft Corporation
O4 - GS\sendTo [mairie_2]: Skype.lnk . (.Skype Technologies S.A. - Skype.) C:\Program Files (x86)\Skype\Phone\Skype.exe /sendto: =>.Skype Software Sarl®
O4 - GS\sendTo [mairie_2]: Transfert de fichiers Bluetooth.LNK . (.Microsoft Corporation - .) C:\Windows\System32\fsquirt.exe =>.Microsoft Corporation
O4 - GS\sendTo [mairie_2]: WinSCP (pour envoi).lnk . (.Martin Prikryl - WinSCP: SFTP, FTP and SCP client.) C:\Program Files (x86)\WinSCP\WinSCP.exe /upload =>.Martin Prikryl®
O4 - GS\TaskBar [mairie_2]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files (x86)\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O4 - GS\TaskBar [mairie_2]: Mozilla Thunderbird.lnk . (.Mozilla Corporation - Thunderbird.) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe =>.Mozilla Corporation®
O4 - GS\TaskBar [mairie_2]: Windows Media Player.lnk . (.Microsoft Corporation - Lecteur Windows Media.) C:\Program Files (x86)\Windows Media Player\wmplayer.exe /prefetch:1 =>.Microsoft Corporation
O4 - GS\Programs [mairie_2]: Fonctionnalités optionnelles.lnk . (.Microsoft Corporation - Assistance des fonctionnalités à la demande.) C:\Windows\System32\fodhelper.exe =>.Microsoft Corporation
O4 - GS\Programs [mairie_2]: OneDrive.lnk . (.Microsoft Corporation - Microsoft OneDrive.) C:\Users\Mairie\AppData\Local\Microsoft\OneDrive\OneDrive.exe =>.Microsoft Corporation®
O4 - GS\Programs [mairie_2]: ViewPlayCap.lnk . (...) C:\Program Files (x86)\ViewPlayCap\ViewPlayCap.exe
O4 - GS\CommonDesktop [Public]: Acrobat Reader DC.lnk . (.Adobe Systems Incorporated - Adobe Acrobat Reader DC.) C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe =>.Adobe Systems, Incorporated®
O4 - GS\CommonDesktop [Public]: Acrobat Reader DC.lnk . (.Adobe Systems Incorporated - Adobe Acrobat Reader DC.) C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe =>.Adobe Systems, Incorporated®
O4 - GS\CommonDesktop [Public]: Advanced IP Scanner.lnk . (.Famatech Corp. - Advanced IP Scanner.) C:\Program Files (x86)\Advanced IP Scanner v2\advanced_ip_scanner.exe =>.Famatech Corp.®
O4 - GS\CommonDesktop [Public]: AeroAdmin.lnk . (.AeroAdmin Inc. - AeroAdmin Remote Desktop Software.) C:\GAD Garage\AeroAdmin.exe
O4 - GS\CommonDesktop [Public]: Audacity.lnk . (.The Audacity Team - Audacity®, the Free, Cross-Platform Sound E.) C:\Program Files (x86)\Audacity\audacity.exe =>.The Audacity Team
O4 - GS\CommonDesktop [Public]: Avast Antivirus Gratuit.lnk . (.AVAST Software - Avast Antivirus.) C:\Program Files\AVAST Software\Avast\AvastUI.exe =>.AVAST Software s.r.o.®
O4 - GS\CommonDesktop [Public]: Avast SafeZone Browser.lnk . (.Avast Software - Avast SafeZone Browser.) C:\Program Files\AVAST Software\SZBrowser\launcher.exe =>.AVAST Software s.r.o.®
O4 - GS\CommonDesktop [Public]: DesignSpark PCB 7.1.lnk . (.WestDev - Schematic Capture and PCB Layout Program.) C:\Program Files (x86)\DesignSpark\DesignSpark PCB 7.1\DesignSpark.exe
O4 - GS\CommonDesktop [Public]: FileZilla Client.lnk . (.FileZilla Project - FileZilla FTP Client.) C:\Program Files (x86)\FileZilla FTP Client\filezilla.exe =>.FileZilla Project
O4 - GS\CommonDesktop [Public]: Glary Utilities 5.lnk . (.Glarysoft Ltd - Glary Utilities 5.) C:\Program Files (x86)\Glary Utilities 5\Integrator.exe =>.Glarysoft LTD®
O4 - GS\CommonDesktop [Public]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\CommonDesktop [Public]: Google Docs.lnk . (.Google - Google Drive.) C:\Program Files (x86)\Google\Drive\googledrivesync.exe --new_document =>.Google Inc®
O4 - GS\CommonDesktop [Public]: Google Earth.lnk . (.Google - Google Earth.) C:\Program Files (x86)\Google\Google Earth\client\googleearth.exe =>.Google Inc®
O4 - GS\CommonDesktop [Public]: Google Sheets.lnk . (.Google - Google Drive.) C:\Program Files (x86)\Google\Drive\googledrivesync.exe --new_spreadsheet =>.Google Inc®
O4 - GS\CommonDesktop [Public]: Google Slides.lnk . (.Google - Google Drive.) C:\Program Files (x86)\Google\Drive\googledrivesync.exe --new_presentation =>.Google Inc®
O4 - GS\CommonDesktop [Public]: Inkscape.lnk . (.inkscape.org - Inkscape.) C:\Program Files (x86)\Inkscape\inkscape.exe =>.inkscape.org
O4 - GS\CommonDesktop [Public]: inSSIDer.lnk . (...) C:\windows\Installer\{65A5E87D-7A3F-4819-807D-B86990D5F369}\_C103A54796D0027EBD63FB.exe
O4 - GS\CommonDesktop [Public]: MozBackup.lnk . (...) C:\Program Files (x86)\MozBackup\MozBackup.exe
O4 - GS\CommonDesktop [Public]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files (x86)\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O4 - GS\CommonDesktop [Public]: Mozilla Thunderbird.lnk . (.Mozilla Corporation - Thunderbird.) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe =>.Mozilla Corporation®
O4 - GS\CommonDesktop [Public]: MPLAB IDE v8.87.lnk . (.Microchip Technology Inc. - MPLAB IDE.) C:\Program Files (x86)\Microchip\MPLAB IDE\Core\MPLAB.exe =>.Microchip Technology Inc.
O4 - GS\CommonDesktop [Public]: Multimedia POP.lnk . (.TODO: - TODO: .) C:\Program Files\Samsung\MultimediaPOP\MultimediaPOP.exe
O4 - GS\CommonDesktop [Public]: OGG Video Converter.lnk . (.Hoo Technologies - OGG Video Converter.) C:\Program Files (x86)\OGG Video Converter 5\oggvideo.exe =>.Hoo Technologies
O4 - GS\CommonDesktop [Public]: OpenOffice 4.1.3.lnk . (.Apache Software Foundation - OpenOffice 4.1.3.) C:\Program Files (x86)\OpenOffice 4\program\soffice.exe =>.Apache Software Foundation
O4 - GS\CommonDesktop [Public]: PDF Architect 2.lnk . (.pdfforge GmbH - PDF Architect 2.) C:\Program Files (x86)\PDF Architect 2\PDF Architect 2.exe =>.pdfforge GmbH®
O4 - GS\CommonDesktop [Public]: PDFCreator.lnk . (.pdfforge GmbH - PDFCreator.) C:\Program Files (x86)\PDFCreator\PDFCreator.exe =>.pdfforge GmbH
O4 - GS\CommonDesktop [Public]: Recuva.lnk . (.Piriform Ltd - Recuva.) C:\Program Files\Recuva\recuva64.exe =>.Piriform Ltd®
O4 - GS\CommonDesktop [Public]: SketchUp 8.lnk . (.Trimble Navigation Limited - SketchUp Application.) C:\Program Files (x86)\Google\Google SketchUp 8\SketchUp.exe =>.Trimble Navigation Limited
O4 - GS\CommonDesktop [Public]: Skype.lnk . (...) C:\WINDOWS\Installer\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}\SkypeIcon.exe =>.Skype Technologies
O4 - GS\CommonDesktop [Public]: User Guide.lnk . (.Samsung Electronics - Runmanual.) C:\Program Files\Samsung\SamsungManual\RunManual.exe =>.SAMSUNG Electronics
O4 - GS\CommonDesktop [Public]: VLC media player.lnk . (.VideoLAN - VLC media player.) C:\Program Files (x86)\adslTV\VLC\vlc.exe =>.VideoLAN®
O4 - GS\CommonDesktop [Public]: Win32DiskImager.lnk . (.Copyright (C) 2009-2014 Windows ImageWriter Team - DiskImager.) C:\Program Files (x86)\ImageWriter\Win32DiskImager.exe
O4 - GS\CommonDesktop [Public]: WinSCP.lnk . (.Martin Prikryl - WinSCP: SFTP, FTP and SCP client.) C:\Program Files (x86)\WinSCP\WinSCP.exe =>.Martin Prikryl®
O4 - GS\CommonDesktop [Public]: ZHP.lnk . (.Nicolas Coolman - ZHPDiag Setup.) C:\Program Files (x86)\ZebHelpProcess\ZHPHep.exe =>.Nicolas Coolman
O4 - GS\Programs [Public]: Fonctionnalités optionnelles.lnk . (.Microsoft Corporation - Assistance des fonctionnalités à la demande.) C:\Windows\System32\fodhelper.exe =>.Microsoft Corporation
O4 - GS\Programs [Public]: OneDrive.lnk . (.Microsoft Corporation - Microsoft OneDrive.) C:\Users\Mairie\AppData\Local\Microsoft\OneDrive\OneDrive.exe =>.Microsoft Corporation®
O4 - GS\Programs [Public]: ViewPlayCap.lnk . (...) C:\Program Files (x86)\ViewPlayCap\ViewPlayCap.exe
O4 - GS\Accessories [Public]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files (x86)\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O4 - GS\Accessories [Public]: Notepad.lnk . (.Microsoft Corporation - Bloc-notes.) C:\WINDOWS\system32\notepad.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: Private Character Editor.lnk . (.Microsoft Corporation - Éditeur de caractères privés.) C:\WINDOWS\system32\eudcedit.exe =>.Microsoft Corporation
O4 - GS\Startup [Public]: Microsoft Office.lnk . (.Microsoft Corporation - Microsoft Office 2000 component.) C:\Program Files (x86)\Microsoft Office\Office\OSA9.EXE -b -l =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Bluetooth File Transfer Wizard.lnk . (.Microsoft Corporation - .) C:\Windows\System32\fsquirt.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Math Input Panel.lnk . (.Microsoft Corporation - .) C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\mip.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Mobility Center.lnk . (.Microsoft Corporation - Centre de mobilité Windows.) C:\WINDOWS\system32\mblctr.exe /open =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Paint.lnk . (.Microsoft Corporation - Paint.) C:\WINDOWS\system32\mspaint.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Remote Desktop Connection.lnk . (.Microsoft Corporation - Connexion Bureau à distance.) C:\WINDOWS\system32\mstsc.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Snipping Tool.lnk . (.Microsoft Corporation - Outil Capture d’écran.) C:\WINDOWS\system32\SnippingTool.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Steps Recorder.lnk . (.Microsoft Corporation - Enregistreur d’actions.) C:\WINDOWS\system32\psr.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Sticky Notes.lnk . (.Microsoft Corporation - Pense-bête.) C:\WINDOWS\system32\StikyNot.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Windows Fax and Scan.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\WINDOWS\system32\WFS.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Windows Media Player.lnk . (.Microsoft Corporation - Lecteur Windows Media.) C:\Program Files (x86)\Windows Media Player\wmplayer.exe /prefetch:1 =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Wordpad.lnk . (.Microsoft Corporation - Application Windows Wordpad.) C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: XPS Viewer.lnk . (.Microsoft Corporation - Visionneuse XPS.) C:\WINDOWS\system32\xpsrchvw.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: Character Map.lnk . (.Microsoft Corporation - Table des caractères.) C:\WINDOWS\system32\charmap.exe =>.Microsoft Corporation
O4 - GS\ProgramsCommon [Public]: Acrobat Reader DC.lnk . (.Flexera Software LLC - InstallShield.) C:\WINDOWS\Installer\{AC76BA86-7AD7-1036-7B44-AC0F074E4100}\SC_Reader.ico =>.Flexera Software LLC
O4 - GS\ProgramsCommon [Public]: Acrobat Reader DC.lnk . (.Flexera Software LLC - InstallShield.) C:\WINDOWS\Installer\{AC76BA86-7AD7-1036-7B44-AC0F074E4100}\SC_Reader.ico =>.Flexera Software LLC
O4 - GS\ProgramsCommon [Public]: Amazon.lnk . (.Amazon - Amazon 1Button App For Taskbars.) C:\Program Files (x86)\Amazon\Amazon1ButtonApp\Amazon1ButtonTaskbarApp.exe =>.Amazon
O4 - GS\ProgramsCommon [Public]: Assistant Mise à niveau de Windows 10.lnk . (.Microsoft Corporation - Assistant Mise à jour de Windows 10.) C:\Windows10Upgrade\Windows10UpgraderApp.exe /ClientID "Win10Upgrade:VNL:Hadron5:{}" =>.Microsoft Corporation®
O4 - GS\ProgramsCommon [Public]: Audacity.lnk . (.The Audacity Team - Audacity®, the Free, Cross-Platform Sound E.) C:\Program Files (x86)\Audacity\audacity.exe =>.The Audacity Team
O4 - GS\ProgramsCommon [Public]: Avast SafeZone Browser.lnk . (.Avast Software - Avast SafeZone Browser.) C:\Program Files\AVAST Software\SZBrowser\launcher.exe =>.AVAST Software s.r.o.®
O4 - GS\ProgramsCommon [Public]: Devices Flow.lnk . (.Microsoft Corporation - Flux des périphériques.) C:\WINDOWS\DevicesFlow\DevicesFlow.exe =>.Microsoft Windows®
O4 - GS\ProgramsCommon [Public]: EditPlus 3.lnk . (.ES-Computing - EditPlus.) C:\Program Files (x86)\EditPlus 3\editplus.exe {4A11F156BEB964BC9ABC4B8ED79C51D2} =>.ES-Computing
O4 - GS\ProgramsCommon [Public]: EOBD-Facile.lnk . (.Outils OBD Facile SARL - EOBD-Facile Automotive Diagnostic.) C:\Program Files (x86)\EOBD-Facile\EOBD-Facile.exe =>.Outils OBD Facile sarl®
O4 - GS\ProgramsCommon [Public]: GIMP 2.lnk . (.Spencer Kimball, Peter Mattis and the GIMP Developmen - GNU Image Manipulation Program.) C:\Program Files\GIMP 2\bin\gimp-2.8.exe =>.Jernej Simončič - Open Source Developer®
O4 - GS\ProgramsCommon [Public]: Glary Utilities 5.lnk . (.Glarysoft Ltd - Glary Utilities 5.) C:\Program Files (x86)\Glary Utilities 5\Integrator.exe =>.Glarysoft LTD®
O4 - GS\ProgramsCommon [Public]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\ProgramsCommon [Public]: Immersive Control Panel.lnk . (.Microsoft Corporation - Windows Control Panel.) C:\WINDOWS\System32\Control.exe =>.Microsoft Corporation
O4 - GS\ProgramsCommon [Public]: Inkscape.lnk . (.inkscape.org - Inkscape.) C:\Program Files (x86)\Inkscape\inkscape.exe =>.inkscape.org
O4 - GS\ProgramsCommon [Public]: Microsoft Excel.lnk . (...) C:\windows\Installer\{0001040C-78E1-11D2-B60F-006097C998E7}\xlicons.exe =>.Microsoft Corporation
O4 - GS\ProgramsCommon [Public]: Microsoft Office 2010.lnk . (...) C:\windows\Installer\{95140000-0070-0000-0000-0000000FF1CE}\oobeicon.exe =>.Microsoft Corporation®
O4 - GS\ProgramsCommon [Public]: Microsoft PowerPoint.lnk . (...) C:\windows\Installer\{0001040C-78E1-11D2-B60F-006097C998E7}\pptico.exe =>.Microsoft Corporation
O4 - GS\ProgramsCommon [Public]: Microsoft Publisher.lnk . (...) C:\windows\Installer\{0004040C-78E1-11D2-B60F-006097C998E7}\pubs.exe
O4 - GS\ProgramsCommon [Public]: Microsoft Word.lnk . (...) C:\windows\Installer\{0001040C-78E1-11D2-B60F-006097C998E7}\wordicon.exe =>.Microsoft Corporation
O4 - GS\ProgramsCommon [Public]: MiracastView.lnk . (.Microsoft Corporation - MiracastView.) C:\WINDOWS\MiracastView\MiracastView.exe =>.Microsoft Windows®
O4 - GS\ProgramsCommon [Public]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files (x86)\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O4 - GS\ProgramsCommon [Public]: Mozilla Thunderbird.lnk . (.Mozilla Corporation - Thunderbird.) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe =>.Mozilla Corporation®
O4 - GS\ProgramsCommon [Public]: Net Scan.lnk . (.InstallShield Software Corp. - InstallShield.) C:\windows\Installer\{D522E0A8-2862-49A7-90DC-231179A3DD61}\NewShortcut1_D522E0A8286249A790DC231179A3DD61.exe =>.InstallShield Software Corp.
O4 - GS\ProgramsCommon [Public]: PrintDialog.lnk . (.Microsoft Corporation - Print Dialog.) C:\WINDOWS\PrintDialog\PrintDialog.exe =>.Microsoft Windows®
O4 - GS\ProgramsCommon [Public]: Search.lnk . (.Microsoft Corporation - Processus hôte Windows (Rundll32).) C:\WINDOWS\system32\rundll32.exe -sta {C90FB8CA-3295-4462-A721-2935E83694BA} =>..Microsoft Corporation
O4 - GS\ProgramsCommon [Public]: Windows Live Mail.lnk . (.Microsoft Corporation - Windows Live Mail.) C:\Program Files (x86)\Windows Live\Mail\wlmail.exe =>.Microsoft Corporation®
O4 - GS\ProgramsCommon [Public]: Windows Live Messenger.lnk . (.Microsoft Corporation - Windows Live Messenger.) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe =>.Microsoft Corporation®
O4 - GS\ProgramsCommon [Public]: Windows Live Movie Maker.lnk . (.Microsoft Corporation - Windows Live Movie Maker.) C:\Program Files (x86)\Windows Live\Photo Gallery\MovieMaker.exe =>.Microsoft Corporation®
O4 - GS\ProgramsCommon [Public]: Windows Live Photo Gallery.lnk . (.Microsoft Corporation - Windows Live Photo Gallery.) C:\Program Files (x86)\Windows Live\Photo Gallery\WLXPhotoGallery.exe =>.Microsoft Corporation®
O4 - GS\ProgramsCommon [Public]: Windows Media Player.lnk . (.Microsoft Corporation - Lecteur Windows Media.) C:\Program Files (x86)\Windows Media Player\wmplayer.exe /prefetch:1 =>.Microsoft Corporation
O4 - GS\ProgramsCommon [Public]: WinSCP.lnk . (.Martin Prikryl - WinSCP: SFTP, FTP and SCP client.) C:\Program Files (x86)\WinSCP\WinSCP.exe =>.Martin Prikryl®

---\\ Modification Domaine/Adresses DNS (3) - 0s
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 212.27.40.240 212.27.40.241 =>.France 9 Telecom, Free
O17 - HKLM\System\CCS\Services\Tcpip\..\{9274b2ba-c61c-40db-afdb-a537783d7394}: DhcpNameServer = 212.27.40.240 212.27.40.241 =>.France 9 Telecom, Free
O17 - HKLM\System\CCS\Services\Tcpip\..\{c586125c-3f47-4549-87ce-99763330b2e6}: DhcpNameServer = 212.27.40.240 212.27.40.241 =>.France 9 Telecom, Free

---\\ Protocole additionnel (26) - 0s
O18 - Handler: about [64Bits] - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation
O18 - Handler: cdl [64Bits] - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation
O18 - Handler: dvd [64Bits] - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\SysWOW64\MSVidCtl.dll =>.Microsoft Corporation
O18 - Handler: file [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation
O18 - Handler: ftp [64Bits] - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation
O18 - Handler: http [64Bits] - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation
O18 - Handler: https [64Bits] - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation
O18 - Handler: its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\SysWOW64\itss.dll =>.Microsoft Corporation
O18 - Handler: javascript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation
O18 - Handler: livecall [64Bits] - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll =>.Microsoft Corporation®
O18 - Handler: local [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation
O18 - Handler: mailto [64Bits] - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation
O18 - Handler: mhtml [64Bits] - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\SysWOW64\inetcomm.dll =>.Microsoft Corporation
O18 - Handler: mk [64Bits] - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation
O18 - Handler: ms-its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\SysWOW64\itss.dll =>.Microsoft Corporation
O18 - Handler: msnim [64Bits] - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll =>.Microsoft Corporation®
O18 - Handler: res [64Bits] - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation
O18 - Handler: tbauth [64Bits] - {14654CA6-5711-491D-B89A-58E571679951} . (.Microsoft Corporation - TBAuth protocol handler.) -- C:\Windows\SysWOW64\tbauth.dll =>.Microsoft Corporation
O18 - Handler: tv [64Bits] - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\SysWOW64\MSVidCtl.dll =>.Microsoft Corporation
O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation
O18 - Handler: windows.tbauth [64Bits] - {14654CA6-5711-491D-B89A-58E571679951} . (.Microsoft Corporation - TBAuth protocol handler.) -- C:\Windows\SysWOW64\tbauth.dll =>.Microsoft Corporation
O18 - Handler: wlmailhtml [64Bits] - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} . (.Microsoft Corporation - Windows Live Mail.) -- C:\Program Files (x86)\Windows Live\Mail\mailcomm.dll =>.Microsoft Corporation®
O18 - Handler: wlpg [64Bits] - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (.Microsoft Corporation - Windows Live Album Download Protocol Handle.) -- C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll =>.Microsoft Corporation®
O18 - Filter: application/octet-stream [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\SysWOW64\mscoree.dll =>.Microsoft Corporation
O18 - Filter: application/x-complus [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\SysWOW64\mscoree.dll =>.Microsoft Corporation
O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\SysWOW64\mscoree.dll =>.Microsoft Corporation

---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (1) - 0s
O20 - AppInit_DLLs: . (.NVIDIA Corporation - NVIDIA shim initialization dll, Version 376.) - C:\windows\system32\nvinitx.dll =>.NVIDIA Corporation

---\\ Logiciels installés (113) - 36s
O42 - Logiciel: 7-Zip 15.12 - (.Igor Pavlov.) [HKLM][64Bits] -- {23170F69-40C1-2701-1512-000001000000} =>.Igor Pavlov
O42 - Logiciel: 7-Zip 9.22beta - (.Igor Pavlov.) [HKLM][64Bits] -- 7-Zip =>.Igor Pavlov
O42 - Logiciel: Adobe Acrobat Reader DC - Français - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-7AD7-1036-7B44-AC0F074E4100} =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe Flash Player 26 NPAPI - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player NPAPI =>.Adobe Systems Incorporated®
O42 - Logiciel: Adobe Refresh Manager - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-0804-1033-1959-001824237067} =>.Adobe Systems Incorporated
O42 - Logiciel: adsl TV - (.adsl TV / FM.) [HKLM][64Bits] -- {3AFDD2C6-8663-46B5-B195-6CEB00D44768} =>.adsl TV / FM
O42 - Logiciel: Advanced IP Scanner - (.Famatech.) [HKLM][64Bits] -- {0DEDBFA6-2BD4-4FA7-BEF2-505ECBC9A838} =>.Famatech
O42 - Logiciel: Agatha Christie - Death on the Nile - (.WildTangent.) [HKLM][64Bits] -- WT085587 =>.WildTangent Inc
O42 - Logiciel: Amazon 1Button App - (.Amazon.) [HKLM][64Bits] -- {893CB813-4179-4BFE-8D33-ABCC38816B48} =>.SUP.Amazon1ButtonApp
O42 - Logiciel: Appli Amazon 1Button - (.Amazon.) [HKLM][64Bits] -- Amazon Browser Settings =>.Amazon
O42 - Logiciel: Audacity 2.0.5 - (.Audacity Team.) [HKLM][64Bits] -- Audacity_is1 =>.Audacity Team
O42 - Logiciel: Avast Antivirus Gratuit - (.AVAST Software.) [HKLM][64Bits] -- Avast Antivirus =>.AVAST Software s.r.o.®
O42 - Logiciel: AviSynth 2.6 - (.GPL Public release..) [HKLM][64Bits] -- AviSynth =>.GPL Public release.
O42 - Logiciel: Bejeweled 2 Deluxe - (.WildTangent.) [HKLM][64Bits] -- WT089286 =>.WildTangent Inc
O42 - Logiciel: Build-a-lot - (.WildTangent.) [HKLM][64Bits] -- WT085597 =>.WildTangent Inc
O42 - Logiciel: CCleaner Packages - (..) [HKCU][64Bits] -- CCleaner Packages =>Heuristique.InstallCore
O42 - Logiciel: Chuzzle Deluxe - (.WildTangent.) [HKLM][64Bits] -- WT085567 =>.WildTangent Inc
O42 - Logiciel: CyberLink Media Suite - (.CyberLink Corp..) [HKLM][64Bits] -- {1FBF6C24-C1FD-4101-A42B-0C564F9E8E79} =>.CyberLink®
O42 - Logiciel: CyberLink Media Suite - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79} =>.CyberLink®
O42 - Logiciel: CyberLink Media+ Player10 - (.CyberLink Corp..) [HKLM][64Bits] -- {34FBC7C4-CD31-4D93-A428-0E524EAC4586} =>.CyberLink®
O42 - Logiciel: CyberLink Media+ Player10 - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{34FBC7C4-CD31-4D93-A428-0E524EAC4586} =>.CyberLink®
O42 - Logiciel: CyberLink MediaShow - (.CyberLink Corp..) [HKLM][64Bits] -- {80E158EA-7181-40FE-A701-301CE6BE64AB} =>.CyberLink®
O42 - Logiciel: CyberLink MediaShow - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{80E158EA-7181-40FE-A701-301CE6BE64AB} =>.CyberLink®
O42 - Logiciel: CyberLink Power2Go - (.CyberLink Corp..) [HKLM][64Bits] -- {40BF1E83-20EB-11D8-97C5-0009C5020658} =>.CyberLink®
O42 - Logiciel: CyberLink Power2Go - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658} =>.CyberLink®
O42 - Logiciel: CyberLink PowerDirector - (.CyberLink Corp..) [HKLM][64Bits] -- {CB099890-1D5F-11D5-9EA9-0050BAE317E1} =>.CyberLink®
O42 - Logiciel: CyberLink PowerDirector - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1} =>.CyberLink®
O42 - Logiciel: CyberLink YouCam - (.CyberLink Corp..) [HKLM][64Bits] -- {01FB4998-33C4-4431-85ED-079E3EEFE75D} =>.CyberLink®
O42 - Logiciel: CyberLink YouCam - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D} =>.CyberLink®
O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM][64Bits] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF} =>.Microsoft
O42 - Logiciel: DesignSpark PCB 7.1 - (.RS Components.) [HKLM][64Bits] -- {D5071054-F5FC-4B09-B970-96F5DFEF0E83} =>.RS Components
O42 - Logiciel: DesignSpark PCB Version 7.1 - (.RS Components.) [HKLM][64Bits] -- InstallShield_{D5071054-F5FC-4B09-B970-96F5DFEF0E83} =>.RS Components
O42 - Logiciel: Diner Dash 2 Restaurant Rescue - (.WildTangent.) [HKLM][64Bits] -- WT085559 =>.WildTangent Inc
O42 - Logiciel: Dropbox - (.Dropbox, Inc..) [HKCU][64Bits] -- Dropbox =>.Dropbox®
O42 - Logiciel: Easy Migration - (.Samsung Electronics Co., Ltd..) [HKLM][64Bits] -- {AD86049C-3D9C-43E1-BE73-643F57D83D50} =>.Samsung Electronics Co., Ltd.
O42 - Logiciel: Easy Support Center 1.0 - (.Samsung.) [HKLM][64Bits] -- {F687E657-F636-44DF-8125-9FEEA2C362F5} =>.Samsung
O42 - Logiciel: EditPlus 3 - (.ES-Computing.) [HKLM][64Bits] -- EditPlus 3 {4A11F156BEB964BC9ABC4B8ED79C51D2} =>.ES-Computing
O42 - Logiciel: EOBD-Facile - (..) [HKLM][64Bits] -- EOBD-Facile
O42 - Logiciel: EOBD-Facile version 2.5.9.450 - (.Outils OBD Facile SAS.) [HKLM][64Bits] -- {02041959-1C0D-4116-8A4A-7DEDE06F433E}_is1
O42 - Logiciel: Farm Frenzy - (.WildTangent.) [HKLM][64Bits] -- WT085618 =>.WildTangent Inc
O42 - Logiciel: FileZilla Client 3.9.0.3 - (.Tim Kosse.) [HKLM][64Bits] -- FileZilla Client =>.Tim Kosse
O42 - Logiciel: GIMP 2.8.0 - (.The GIMP Team.) [HKLM][64Bits] -- GIMP-2_is1 =>.Jernej Simončič - Open Source Developer®
O42 - Logiciel: Glary Utilities 5.55 - (.Glarysoft Ltd.) [HKLM][64Bits] -- Glary Utilities 5 =>.Glarysoft LTD®
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM][64Bits] -- Google Chrome =>.Google Inc®
O42 - Logiciel: Google Drive - (.Google, Inc..) [HKLM][64Bits] -- {A90339B3-2C3F-492E-B3A7-0BDFC691E526} =>.Google, Inc.
O42 - Logiciel: Google Earth - (.Google.) [HKLM][64Bits] -- {F6430171-B86B-4639-839E-374913E7911D} =>.Google
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {60EC980A-BDA2-4CB6-A427-B07A5498B4CA} =>.Google Inc.
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} =>.Google Inc.
O42 - Logiciel: Inkscape 0.48.2 - (..) [HKLM][64Bits] -- Inkscape
O42 - Logiciel: Insaniquarium Deluxe - (.WildTangent.) [HKLM][64Bits] -- WT085622 =>.WildTangent Inc
O42 - Logiciel: inSSIDer - (.MetaGeek.) [HKLM][64Bits] -- {65A5E87D-7A3F-4819-807D-B86990D5F369} =>.MetaGeek
O42 - Logiciel: Intel PROSet Wireless - (.Intel Corporation.) [HKLM][64Bits] -- ProInst =>.Intel Corporation
O42 - Logiciel: Intel(R) Management Engine Components - (.Intel Corporation.) [HKLM][64Bits] -- {65153EA5-8B6E-43B6-857B-C6E4FC25798A} =>.Intel Corporation®
O42 - Logiciel: Intel(R) Processor Graphics - (.Intel Corporation.) [HKLM][64Bits] -- {F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA} =>.Intel(R) pGFX®
O42 - Logiciel: John Deere Drive Green - (.WildTangent.) [HKLM][64Bits] -- WT085580 =>.WildTangent Inc
O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM][64Bits] -- {1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4} =>.Microsoft Corporation
O42 - Logiciel: KaraFun Player - (.Recisio.) [HKLM][64Bits] -- KaraFun Player_is1 =>.Recisio
O42 - Logiciel: KB4023057 - (.Microsoft Corporation.) [HKLM][64Bits] -- {ED06689A-33B7-4D35-8F76-36A82CD03406} =>.Microsoft Corporation
O42 - Logiciel: LAME v3.99.3 (for Windows) - (.Audacity.) [HKLM][64Bits] -- LAME_is1 =>.Audacity
O42 - Logiciel: Melody Assistant - (.Myriad SARL.) [HKLM][64Bits] -- Melody Assistant =>.Myriad SARL®
O42 - Logiciel: Mesh Runtime - (.Microsoft Corporation.) [HKLM][64Bits] -- {8C6D6116-B724-4810-8F2D-D047E6B7D68E} =>.Microsoft Corporation
O42 - Logiciel: Microsoft Application Error Reporting - (.Microsoft Corporation.) [HKLM][64Bits] -- {95120000-00B9-0409-1000-0000000FF1CE} =>.Microsoft Corporation
O42 - Logiciel: Microsoft DVD App Installation for Microsoft.WindowsDVDPlayer_2019.6.13291. - (.Microsoft Corporation.) [HKLM][64Bits] -- {25E80DAA-FD87-DCE5-202C-CC02F6673002} =>.Microsoft Corporation
O42 - Logiciel: Microsoft OneDrive - (.Microsoft Corporation.) [HKCU][64Bits] -- OneDriveSetup.exe =>.Microsoft Corporation®
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM][64Bits] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00} =>.Microsoft Corporation
O42 - Logiciel: MozBackup 1.5.1 - (.Pavel Cvrcek.) [HKLM][64Bits] -- MozBackup =>.Pavel Cvrcek
O42 - Logiciel: Mozilla Firefox 54.0.1 (x86 fr) - (.Mozilla.) [HKLM][64Bits] -- Mozilla Firefox 54.0.1 (x86 fr) =>.Mozilla Corporation®
O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM][64Bits] -- MozillaMaintenanceService =>.Mozilla
O42 - Logiciel: Mozilla Thunderbird 38.5.0 (x86 fr) - (.Mozilla.) [HKLM][64Bits] -- Mozilla Thunderbird 38.5.0 (x86 fr) =>.Mozilla Corporation®
O42 - Logiciel: MPLAB Tools v8.87 - (.Microchip Technology Inc..) [HKLM][64Bits] -- {A7175A4F-EE34-4DC0-99EE-1B465B250690} =>.Microchip Technology Inc.
O42 - Logiciel: MPLAB Tools v8.87 - (.Microchip Technology Inc..) [HKLM][64Bits] -- InstallShield_{A7175A4F-EE34-4DC0-99EE-1B465B250690} =>.Microchip Technology Inc.
O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM][64Bits] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F} =>.Microsoft
O42 - Logiciel: MSVCRT_amd64 - (.Microsoft.) [HKLM][64Bits] -- {D0B44725-3666-492D-BEF6-587A14BD9BD9} =>.Microsoft
O42 - Logiciel: Multimedia POP - (..) [HKLM][64Bits] -- {331ECF61-69AF-4F57-AC35-AFED610231C3}
O42 - Logiciel: Net Scan - (.CreaSoftware.) [HKLM][64Bits] -- {D522E0A8-2862-49A7-90DC-231179A3DD61}
O42 - Logiciel: NVIDIA Display Container - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVDisplayContainer =>.NVIDIA Corporation
O42 - Logiciel: NVIDIA Display Container LS - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVDisplayContainerLS =>.NVIDIA Corporation
O42 - Logiciel: NVIDIA Install Application - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer =>.NVIDIA Corporation
O42 - Logiciel: NVIDIA Optimus 1.0.23 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Optimus =>.NVIDIA Corporation
O42 - Logiciel: NVIDIA Update Components - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update =>.NVIDIA Corporation
O42 - Logiciel: OGG Video Converter v5.6 build 2617 - (.Hoo Technologies.) [HKLM][64Bits] -- {14962706-0C85-4135-B7F2-13A519FF3C6B}_is1 =>.Hoo Technologies
O42 - Logiciel: OpenOffice 4.1.3 - (.Apache Software Foundation.) [HKLM][64Bits] -- {3E1679DA-5081-44AA-B4C2-BF8EE7E107E0} =>.Apache Software Foundation
O42 - Logiciel: Package de pilotes Windows - Silicon Laboratories Inc. (silabser) Ports (0 - (.Silicon Laboratories Inc..) [HKLM][64Bits] -- 9437A0D535B29915072FCF153C7CA9B5FD547A24 =>.Silicon Laboratories Inc.®
O42 - Logiciel: Panneau de configuration NVIDIA 376.54 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel =>.NVIDIA Corporation
O42 - Logiciel: PDF Architect 2 - (.pdfforge GmbH.) [HKLM][64Bits] -- PDF Architect 2 =>.pdfforge GmbH®
O42 - Logiciel: PDF Architect 2 View Module - (.pdfforge GmbH.) [HKLM][64Bits] -- {46889070-D447-4936-A5D3-246DB972FA2E} =>.pdfforge GmbH
O42 - Logiciel: PDFCreator - (.pdfforge.) [HKLM][64Bits] -- {0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D} =>.pdfforge
O42 - Logiciel: Peggle - (.WildTangent.) [HKLM][64Bits] -- WT085663 =>.WildTangent Inc
O42 - Logiciel: Penguins! - (.WildTangent.) [HKLM][64Bits] -- WT085581 =>.WildTangent Inc
O42 - Logiciel: Realtek Ethernet Controller Driver - (.Realtek.) [HKLM][64Bits] -- {8833FFB6-5B0C-4764-81AA-06DFEED9A476} =>.Realtek Semiconductor Corp®
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC} =>.Realtek Semiconductor Corp®
O42 - Logiciel: Recuva - (.Piriform.) [HKLM][64Bits] -- Recuva =>.Piriform Ltd®
O42 - Logiciel: SafeZone Stable 4.58.2552.909 - (.Avast Software.) [HKLM][64Bits] -- SafeZone 4.58.2552.909 =>.AVAST Software s.r.o.®
O42 - Logiciel: ScanMaster-ELM 6.0.0.3600 DEMO - (.WGSoft.de.) [HKLM][64Bits] -- {76E1EA66-989B-475A-92AF-F950B49E711E}_is1 =>.WGSoft.de
O42 - Logiciel: ScanTool.net for Windows v1.13 - (.ScanTool.net, LLC.) [HKLM][64Bits] -- ScanTool.net for Windows =>.ScanTool.net, LLC
O42 - Logiciel: SketchUp 8 - (.Trimble Navigation Limited.) [HKLM][64Bits] -- {00280C97-E028-4563-8435-2BCA2786D03F} =>.Trimble Navigation Limited
O42 - Logiciel: Skype™ 7.39 - (.Skype Technologies S.A..) [HKLM][64Bits] -- {3B7E914A-93D5-4A29-92BB-AF8C3F66C431} =>.Skype Technologies S.A.
O42 - Logiciel: Software Launcher - (.Samsung.) [HKLM][64Bits] -- {B750B5C2-CC17-4967-905B-29F4EB986131} =>.Samsung
O42 - Logiciel: TP-LINK TL-WN721N_TL-WN722N Pilote - (.TP-LINK.) [HKLM][64Bits] -- {38A1E3ED-D913-41D2-9953-A93D5ACE3ADF} =>.TP-LINK
O42 - Logiciel: UltraVNC v1.0.2 Fr - (.UltraVNC.) [HKLM][64Bits] -- {A8AD990E-355A-4413-8647-A9B168978423}_is1 =>.UltraVNC
O42 - Logiciel: UpdateAssistant - (.Microsoft Corporation.) [HKLM][64Bits] -- {4E67FF7F-C24E-4279-9AB2-C26D57B53742} =>.Microsoft Corporation
O42 - Logiciel: User Guide - (.Samsung Electronics.) [HKLM][64Bits] -- {BAE68339-B0F6-4D33-9554-5A3DB2DFF5DA} =>.SAMSUNG Electronics
O42 - Logiciel: VirtualDub 1.9.6 Fr - (.Trad-Fr.) [HKLM][64Bits] -- {1FF7993C-23B1-4C91-B1F6-09D13C57A06A}_is1 =>.Trad-Fr
O42 - Logiciel: VLC media player - (.VideoLAN.) [HKLM][64Bits] -- VLC media player =>.VideoLAN
O42 - Logiciel: WampServer 2.4 - (.Hervé Leclerc (HeL).) [HKLM][64Bits] -- WampServer 2_is1 =>.Hervé Leclerc (HeL)
O42 - Logiciel: WildTangent Games - (.WildTangent.) [HKLM][64Bits] -- WildTangent wildgames Master Uninstall =>.WildTangent Inc
O42 - Logiciel: WildTangent ORB Game Console - (.WildTangent.) [HKLM][64Bits] -- Game Console - WildGames =>.WildTangent Inc
O42 - Logiciel: Win32DiskImager version 0.9.5 - (.ImageWriter Developers.) [HKLM][64Bits] -- {D074CE74-912A-4AD3-A0BF-3937D9D01F17}_is1 =>.ImageWriter Developers
O42 - Logiciel: Win7codecs - (.Shark007.) [HKLM][64Bits] -- {8C0CAA7A-3272-4991-A808-2C7559DE3409} =>.Shark007
O42 - Logiciel: Windows 10 Update and Privacy Settings - (.Microsoft Corporation.) [HKLM][64Bits] -- {4DFCD818-036A-4229-A67D-CF17DC461D92} =>.Microsoft Corporation
O42 - Logiciel: WinPic800 - (..) [HKLM][64Bits] -- WinPic800
O42 - Logiciel: WinSCP 5.5.6 - (.Martin Prikryl.) [HKLM][64Bits] -- winscp3_is1 =>.Martin Prikryl®
O42 - Logiciel: ZebHelpProcess 2016 - (.Nicolas Coolman.) [HKLM][64Bits] -- ZebHelpProcess_is1 =>.Nicolas Coolman

---\\ HKCU & HKLM Software Keys (123) - 36s
HKLM\SOFTWARE\Wow6432Node\7-Zip =>.Igor Pavlov
HKLM\SOFTWARE\Wow6432Node\Adobe =>.Adobe
HKLM\SOFTWARE\Wow6432Node\AdwCleaner =>.Malwarebytes
HKLM\SOFTWARE\Wow6432Node\AppDataLow =>.Microsoft Corporation
HKLM\SOFTWARE\Wow6432Node\AVAST Software =>.AVAST Software
HKLM\SOFTWARE\Wow6432Node\AviSynth =>.Ben Rudiak-Gold
HKLM\SOFTWARE\Wow6432Node\Borland =>.Borland
HKLM\SOFTWARE\Wow6432Node\CyberLink =>.CyberLink Corporation
HKLM\SOFTWARE\Wow6432Node\Debug =>.Legitimate
HKLM\SOFTWARE\Wow6432Node\DesignSpark =>.Ignite Realtime
HKLM\SOFTWARE\Wow6432Node\dotNetInstaller =>.InstallShield
HKLM\SOFTWARE\Wow6432Node\FileZilla 3 =>.FileZilla
HKLM\SOFTWARE\Wow6432Node\FileZilla Client =>.Tim Kosse
HKLM\SOFTWARE\Wow6432Node\Gentee
HKLM\SOFTWARE\Wow6432Node\GlarySoft =>.Glarysoft
HKLM\SOFTWARE\Wow6432Node\GNU =>.GNU
HKLM\SOFTWARE\Wow6432Node\Google =>.Google
HKLM\SOFTWARE\Wow6432Node\HaaliMkx =>.Haali Media
HKLM\SOFTWARE\Wow6432Node\Icaros =>.Icaros
HKLM\SOFTWARE\Wow6432Node\IM Providers =>.IM Providers
HKLM\SOFTWARE\Wow6432Node\Intel =>.Intel
HKLM\SOFTWARE\Wow6432Node\InternetProgram =>PUP.Optional.InternetProgram
HKLM\SOFTWARE\Wow6432Node\Khronos =>.Khronos
HKLM\SOFTWARE\Wow6432Node\Lame For Audacity =>.Audacity
HKLM\SOFTWARE\Wow6432Node\Loader
HKLM\SOFTWARE\Wow6432Node\Macromedia =>.Macromedia
HKLM\SOFTWARE\Wow6432Node\Martin Prikryl =>.Martin Prikryl
HKLM\SOFTWARE\Wow6432Node\Microchip =>.Microchip
HKLM\SOFTWARE\Wow6432Node\Mozilla =>.Mozilla
HKLM\SOFTWARE\Wow6432Node\mozilla.org =>.mozilla.org
HKLM\SOFTWARE\Wow6432Node\MozillaPlugins =>.MozillaPlugins
HKLM\SOFTWARE\Wow6432Node\Myriad Software
HKLM\SOFTWARE\Wow6432Node\Nuance =>.Nuance
HKLM\SOFTWARE\Wow6432Node\NVIDIA Corporation =>.nVidia Corporation
HKLM\SOFTWARE\Wow6432Node\ODBC =>.DB Connectivity Solutions
HKLM\SOFTWARE\Wow6432Node\OpenOffice =>.SourceForge
HKLM\SOFTWARE\Wow6432Node\PassThruSupport.04.04
HKLM\SOFTWARE\Wow6432Node\PDF Architect 2 =>.pdfforge GmbH
HKLM\SOFTWARE\Wow6432Node\PDFCreator =>.pdfforge GmbH
HKLM\SOFTWARE\Wow6432Node\Piriform =>.Piriform
HKLM\SOFTWARE\Wow6432Node\Realtek =>.Realtek Semiconductor Corp.
HKLM\SOFTWARE\Wow6432Node\Realtek Semiconductor Corp. =>.Realtek Semiconductor Corp.
HKLM\SOFTWARE\Wow6432Node\RECISIO =>.Recisio
HKLM\SOFTWARE\Wow6432Node\Rene.E Laboratory =>.Rene.E Laboratory
HKLM\SOFTWARE\Wow6432Node\Samsung =>.Samsung Electronics
HKLM\SOFTWARE\Wow6432Node\Samsung Electronics Co., Ltd. =>.Samsung Electronics
HKLM\SOFTWARE\Wow6432Node\Skype =>.Skype
HKLM\SOFTWARE\Wow6432Node\SRS Labs =>.SRS Labs
HKLM\SOFTWARE\Wow6432Node\Symantec =>.Symantec
HKLM\SOFTWARE\Wow6432Node\TP-LINK =>.TP-LINK
HKLM\SOFTWARE\Wow6432Node\Trad-FR =>.Trad-Fr
HKLM\SOFTWARE\Wow6432Node\VideoLAN =>.VideoLAN
HKLM\SOFTWARE\Wow6432Node\WildTangent =>.WildTangent
HKLM\SOFTWARE\Wow6432Node\Wow6432Node =>.Microsoft Corporation
HKLM\SOFTWARE\Wow6432Node\RegisteredApplications =>.Microsoft Corporation
HKCU\SOFTWARE\.
HKCU\SOFTWARE\7-Zip =>.Igor Pavlov
HKCU\SOFTWARE\AC3filter =>.Vigovsky Alexander
HKCU\SOFTWARE\Adobe =>.Adobe
HKCU\SOFTWARE\AppDataLow =>.Microsoft Corporation
HKCU\SOFTWARE\Avast Software =>.AVAST Software
HKCU\SOFTWARE\Borland =>.Borland
HKCU\SOFTWARE\Bugsplat =>.Bugsplat Game
HKCU\SOFTWARE\Chromium =>.Chromium
HKCU\SOFTWARE\CyberLink =>.CyberLink Corporation
HKCU\SOFTWARE\DesignSpark =>.Ignite Realtime
HKCU\SOFTWARE\Distromatic =>PUP.Optional.AlexaTB
HKCU\SOFTWARE\DivX =>.DivX Inc.
HKCU\SOFTWARE\Dropbox =>.Dropbox
HKCU\SOFTWARE\Elantech =>.Elantech Inc.
HKCU\SOFTWARE\ES-Computing =>.ES-Computing
HKCU\SOFTWARE\famatech =>.Famatech
HKCU\SOFTWARE\FinalWire =>.FinalWire
HKCU\SOFTWARE\Freeware =>.VirtualDub.org
HKCU\SOFTWARE\Gabest =>.Gabest
HKCU\SOFTWARE\GAD Garage
HKCU\SOFTWARE\Glarysoft =>.Glarysoft
HKCU\SOFTWARE\GNU =>.GNU
HKCU\SOFTWARE\Google =>.Google
HKCU\SOFTWARE\Haali =>.Haali Media
HKCU\SOFTWARE\IM Providers =>.IM Providers
HKCU\SOFTWARE\InstallCore =>Adware.InstallCore
HKCU\SOFTWARE\Intel =>.Intel
HKCU\SOFTWARE\LAV =>.LAV Inc
HKCU\SOFTWARE\Local AppWizard-Generated Applications =>.ZWCAD
HKCU\SOFTWARE\Macromedia =>.Macromedia
HKCU\SOFTWARE\madFlac =>.Free-Codecs
HKCU\SOFTWARE\Martin Prikryl =>.Martin Prikryl
HKCU\SOFTWARE\Microchip =>.Microchip
HKCU\SOFTWARE\Mozilla =>.Mozilla
HKCU\SOFTWARE\Mozilla Backup =>.Mozilla Corporation
HKCU\SOFTWARE\MozillaPlugins =>.MozillaPlugins
HKCU\SOFTWARE\Netscape =>.Netscape
HKCU\SOFTWARE\Novell =>.Novell
HKCU\SOFTWARE\NVIDIA Corporation =>.nVidia Corporation
HKCU\SOFTWARE\ODBC =>.DB Connectivity Solutions
HKCU\SOFTWARE\OGG Video Converter 5
HKCU\SOFTWARE\OpenOffice =>.SourceForge
HKCU\SOFTWARE\PC SOFT =>.PC SOFT
HKCU\SOFTWARE\PDF Architect 2 =>.pdfforge GmbH
HKCU\SOFTWARE\PDFCreator =>.pdfforge GmbH
HKCU\SOFTWARE\Piriform =>.Piriform
HKCU\SOFTWARE\Psa_com
HKCU\SOFTWARE\QtProject =>.QtProject
HKCU\SOFTWARE\Realtek =>.Realtek Semiconductor Corp.
HKCU\SOFTWARE\RECISIO =>.Recisio
HKCU\SOFTWARE\RegisteredApplications =>.Microsoft Corporation
HKCU\SOFTWARE\RICOH =>.RICOH
HKCU\SOFTWARE\Samsung =>.Samsung Electronics
HKCU\SOFTWARE\Skype =>.Skype
HKCU\SOFTWARE\SYNCJM =>.SYNCJM
HKCU\SOFTWARE\Thunderbird =>.Thunderbird
HKCU\SOFTWARE\Trolltech =>.Trolltech
HKCU\SOFTWARE\VB and VBA Program Settings =>.Microsoft Corporation
HKCU\SOFTWARE\VirtualDub.org =>.VirtualDub.org
HKCU\SOFTWARE\WGSoft
HKCU\SOFTWARE\WinPic800
HKCU\SOFTWARE\Wow6432Node =>.Microsoft Corporation
HKCU\SOFTWARE\Yahoo =>.Yahoo! Inc.
HKCU\SOFTWARE\ZebHelpProcess Helper =>.Nicolas Coolman
HKCU\SOFTWARE\ZHP =>.Nicolas Coolman
HKCU\SOFTWARE\AppDataLow\Software =>.Microsoft Corporation
HKCU\SOFTWARE\AppDataLow\Software\Amazon =>.Amazon

---\\ Contenu des dossiers Programmes (287) - 62s
O43 - CFD: 23/07/2016 - [] D -- C:\Program Files\AVAST Software =>.AVAST Software s.r.o.®
O43 - CFD: 24/03/2016 - [] D -- C:\Program Files\Common Files =>.Microsoft Corporation
O43 - CFD: 24/03/2017 - [] D -- C:\Program Files\DIFX =>.Microsoft Corporation
O43 - CFD: 09/03/2017 - [] D -- C:\Program Files\Elantech =>.ELAN Microelectronics Corporation®
O43 - CFD: 24/03/2016 - [0] SHD -- C:\Program Files\Fichiers communs =>.Microsoft Corporation
O43 - CFD: 26/08/2012 - [] AD -- C:\Program Files\GIMP 2 =>.Jernej Simončič - Open Source Developer®
O43 - CFD: 24/03/2016 - [] D -- C:\Program Files\Intel =>.Intel Corporation
O43 - CFD: 09/03/2017 - [] D -- C:\Program Files\Internet Explorer =>.Microsoft Corporation
O43 - CFD: 16/12/2016 - [] D -- C:\Program Files\Microsoft Games =>.Microsoft Corporation
O43 - CFD: 22/06/2017 - [] AD -- C:\Program Files\Microsoft Silverlight =>.Microsoft Corporation
O43 - CFD: 24/03/2016 - [] D -- C:\Program Files\MSBuild =>.Microsoft Corporation
O43 - CFD: 07/03/2017 - [] D -- C:\Program Files\NVIDIA Corporation =>.nVidia Corporation
O43 - CFD: 24/03/2016 - [] D -- C:\Program Files\Realtek =>.Realtek
O43 - CFD: 16/12/2016 - [] AD -- C:\Program Files\Recuva =>.Piriform
O43 - CFD: 24/03/2016 - [] D -- C:\Program Files\Reference Assemblies =>.Microsoft Corporation
O43 - CFD: 02/09/2017 - [] AD -- C:\Program Files\rempl =>.Microsoft Corporation®
O43 - CFD: 11/10/2011 - [] D -- C:\Program Files\Samsung =>.Samsung Electronics
O43 - CFD: 13/02/2016 - [0] HD -- C:\Program Files\Uninstall Information =>.Microsoft Corporation
O43 - CFD: 02/09/2017 - [] D -- C:\Program Files\UNP =>.Microsoft Corporation
O43 - CFD: 09/03/2017 - [] D -- C:\Program Files\Windows Defender =>.Microsoft Corporation
O43 - CFD: 11/10/2011 - [] D -- C:\Program Files\Windows Live =>.Microsoft Corporation
O43 - CFD: 09/03/2017 - [] D -- C:\Program Files\Windows Mail =>.Microsoft Corporation
O43 - CFD: 09/03/2017 - [] D -- C:\Program Files\Windows Media Player =>.Microsoft Corporation
O43 - CFD: 24/03/2016 - [] D -- C:\Program Files\Windows Multimedia Platform =>.Microsoft Corporation
O43 - CFD: 24/03/2016 - [] D -- C:\Program Files\Windows NT =>.Microsoft Corporation
O43 - CFD: 09/03/2017 - [] D -- C:\Program Files\Windows Photo Viewer =>.Microsoft Corporation
O43 - CFD: 24/03/2016 - [] D -- C:\Program Files\Windows Portable Devices =>.Microsoft Corporation
O43 - CFD: 16/12/2016 - [] SHD -- C:\Program Files\Windows Sidebar =>.Microsoft Corporation
O43 - CFD: 02/09/2017 - [] HD -- C:\Program Files\WindowsApps =>.Microsoft Corporation
O43 - CFD: 30/10/2015 - [] SD -- C:\Program Files\WindowsPowerShell =>.Microsoft Corporation
O43 - CFD: 24/03/2016 - [] D -- C:\Program Files (x86)\7-Zip =>.Igor Pavlov
O43 - CFD: 05/08/2016 - [] D -- C:\Program Files (x86)\Adobe =>.Adobe Systems, Incorporated®
O43 - CFD: 17/07/2015 - [] AD -- C:\Program Files (x86)\adslTV =>.adslTV
O43 - CFD: 18/02/2013 - [] AD -- C:\Program Files (x86)\Advanced IP Scanner v2 =>.Famatech Corp.
O43 - CFD: 12/06/2014 - [] D -- C:\Program Files (x86)\Amazon =>.Amazon
O43 - CFD: 24/01/2015 - [] D -- C:\Program Files (x86)\Amazon Browser Bar {0091DFA40718D373BC38F0B0B236B66F51} =>PUP.Optional.VidSaver
O43 - CFD: 29/08/2014 - [] AD -- C:\Program Files (x86)\Audacity =>.Audacity
O43 - CFD: 18/08/2013 - [] D -- C:\Program Files (x86)\AviSynth 2.5 =>.AviSynth
O43 - CFD: 20/06/2014 - [] D -- C:\Program Files (x86)\caisse
O43 - CFD: 02/09/2017 - [] D -- C:\Program Files (x86)\Common Files =>.Microsoft Corporation
O43 - CFD: 29/04/2014 - [] D -- C:\Program Files (x86)\CreaSoftware
O43 - CFD: 11/10/2011 - [] D -- C:\Program Files (x86)\CyberLink =>.CyberLink Corporation
O43 - CFD: 29/09/2015 - [] D -- C:\Program Files (x86)\DesignSpark =>.Ignite Realtime
O43 - CFD: 18/09/2012 - [] D -- C:\Program Files (x86)\EditPlus 3 =>.ES-Computing
O43 - CFD: 24/03/2017 - [] AD -- C:\Program Files (x86)\EOBD-Facile =>.EOBD-Facile
O43 - CFD: 20/08/2014 - [] AD -- C:\Program Files (x86)\FileZilla FTP Client =>.Tim Kosse
O43 - CFD: 26/08/2012 - [] D -- C:\Program Files (x86)\GIMP 2 =>.Jernej Simoncic®
O43 - CFD: 03/09/2017 - [] D -- C:\Program Files (x86)\Glary Utilities 5 =>.GlarySoft
O43 - CFD: 24/03/2017 - [] D -- C:\Program Files (x86)\Google =>.Google Inc®
O43 - CFD: 11/10/2014 - [] AD -- C:\Program Files (x86)\ImageWriter =>.Legitimate
O43 - CFD: 16/12/2016 - [] AD -- C:\Program Files (x86)\Inkscape =>.inkscape.org
O43 - CFD: 06/07/2017 - [] HD -- C:\Program Files (x86)\InstallShield Installation Information =>.InstallShield
O43 - CFD: 24/03/2016 - [] D -- C:\Program Files (x86)\Intel =>.Intel Corporation
O43 - CFD: 09/03/2017 - [] D -- C:\Program Files (x86)\Internet Explorer =>.Microsoft Corporation
O43 - CFD: 21/12/2012 - [] AD -- C:\Program Files (x86)\KaraFun Player =>.Heaven Software
O43 - CFD: 29/08/2014 - [] AD -- C:\Program Files (x86)\Lame For Audacity =>.Audacity
O43 - CFD: 02/12/2014 - [] AD -- C:\Program Files (x86)\Melody Assistant =>.Myriad SARL®
O43 - CFD: 18/02/2013 - [] D -- C:\Program Files (x86)\MetaGeek =>.MetaGeek
O43 - CFD: 26/08/2012 - [] AD -- C:\Program Files (x86)\Microchip =>.Microchip
O43 - CFD: 22/08/2012 - [] AD -- C:\Program Files (x86)\Microsoft Office =>.Microsoft Corporation
O43 - CFD: 22/06/2017 - [] AD -- C:\Program Files (x86)\Microsoft Silverlight =>.Microsoft Corporation
O43 - CFD: 11/10/2011 - [] AD -- C:\Program Files (x86)\Microsoft SQL Server Compact Edition =>.Microsoft Corporation
O43 - CFD: 30/10/2015 - [] D -- C:\Program Files (x86)\Microsoft.NET =>.Microsoft Corporation
O43 - CFD: 21/08/2012 - [] D -- C:\Program Files (x86)\MozBackup =>.Mozilla
O43 - CFD: 02/09/2017 - [] AD -- C:\Program Files (x86)\Mozilla Firefox =>.Mozilla
O43 - CFD: 02/09/2017 - [] D -- C:\Program Files (x86)\Mozilla Maintenance Service =>.Mozilla
O43 - CFD: 16/12/2016 - [] AD -- C:\Program Files (x86)\Mozilla Thunderbird =>.Mozilla
O43 - CFD: 24/03/2016 - [] D -- C:\Program Files (x86)\MSBuild =>.Microsoft Corporation
O43 - CFD: 07/03/2017 - [] D -- C:\Program Files (x86)\NVIDIA Corporation =>.nVidia Corporation
O43 - CFD: 21/08/2013 - [] AD -- C:\Program Files (x86)\OGG Video Converter 5
O43 - CFD: 08/07/2017 - [] AD -- C:\Program Files (x86)\OpenOffice 4 =>.OpenOffice.org
O43 - CFD: 12/06/2014 - [] AD -- C:\Program Files (x86)\PDF Architect 2 =>.pdfforge GmbH
O43 - CFD: 14/01/2015 - [] D -- C:\Program Files (x86)\PDFCreator =>.Philip Chinery
O43 - CFD: 11/10/2011 - [] D -- C:\Program Files (x86)\Realtek =>.Realtek
O43 - CFD: 24/03/2016 - [] D -- C:\Program Files (x86)\Reference Assemblies =>.Microsoft Corporation
O43 - CFD: 24/03/2016 - [] D -- C:\Program Files (x86)\Samsung =>.Samsung Electronics
O43 - CFD: 13/04/2015 - [] D -- C:\Program Files (x86)\ScanTool.net_win
O43 - CFD: 02/09/2017 - [] RD -- C:\Program Files (x86)\Skype =>.Skype
O43 - CFD: 11/10/2011 - [0] HD -- C:\Program Files (x86)\Temp =>.Microsoft Corporation
O43 - CFD: 22/08/2012 - [] AD -- C:\Program Files (x86)\UltraVNC =>.UltraVNC
O43 - CFD: 14/07/2009 - [0] HD -- C:\Program Files (x86)\Uninstall Information =>.Microsoft Corporation
O43 - CFD: 07/03/2015 - [] D -- C:\Program Files (x86)\ViewPlayCap
O43 - CFD: 21/08/2013 - [] AD -- C:\Program Files (x86)\VirtualDub =>.Avery Lee
O43 - CFD: 21/08/2016 - [] D -- C:\Program Files (x86)\WGSoft
O43 - CFD: 13/04/2015 - [] D -- C:\Program Files (x86)\WGSoft1
O43 - CFD: 21/08/2016 - [] AD -- C:\Program Files (x86)\WildGames =>.WildGames
O43 - CFD: 19/08/2013 - [] AD -- C:\Program Files (x86)\Win7codecs =>.Shark007
O43 - CFD: 09/03/2017 - [] D -- C:\Program Files (x86)\Windows Defender =>.Microsoft Corporation
O43 - CFD: 11/10/2011 - [] AD -- C:\Program Files (x86)\Windows Live =>.Microsoft Corporation
O43 - CFD: 09/03/2017 - [] D -- C:\Program Files (x86)\Windows Mail =>.Microsoft Corporation
O43 - CFD: 26/10/2016 - [] D -- C:\Program Files (x86)\Windows Media Player =>.Microsoft Corporation
O43 - CFD: 24/03/2016 - [] D -- C:\Program Files (x86)\Windows Multimedia Platform =>.Microsoft Corporation
O43 - CFD: 30/10/2015 - [] D -- C:\Program Files (x86)\Windows NT =>.Microsoft Corporation
O43 - CFD: 09/03/2017 - [] D -- C:\Program Files (x86)\Windows Photo Viewer =>.Microsoft Corporation
O43 - CFD: 24/03/2016 - [] D -- C:\Program Files (x86)\Windows Portable Devices =>.Microsoft Corporation
O43 - CFD: 16/12/2016 - [0] SHD -- C:\Program Files (x86)\Windows Sidebar =>.Microsoft Corporation
O43 - CFD: 30/10/2015 - [] SD -- C:\Program Files (x86)\WindowsPowerShell =>.Microsoft Corporation
O43 - CFD: 30/08/2012 - [] D -- C:\Program Files (x86)\WinPic800
O43 - CFD: 31/10/2014 - [] AD -- C:\Program Files (x86)\WinSCP =>.Martin Prikryl®
O43 - CFD: 02/09/2017 - [] D -- C:\Program Files (x86)\ZebHelpProcess =>.Nicolas Coolman
O43 - CFD: 24/03/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip =>.Igor Pavlov
O43 - CFD: 09/03/2017 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility =>.Microsoft Corporation
O43 - CFD: 09/03/2017 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories =>.Microsoft Corporation
O43 - CFD: 09/03/2017 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools =>.Administrative Tools
O43 - CFD: 24/03/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced IP Scanner v2 =>.Famatech Corp.
O43 - CFD: 24/03/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AviSynth 2.5 =>.AviSynth
O43 - CFD: 24/03/2016 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink Media Suite =>.CyberLink Corporation
O43 - CFD: 24/03/2016 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink YouCam =>.CyberLink Corporation
O43 - CFD: 24/03/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DesignSpark =>.Ignite Realtime
O43 - CFD: 24/06/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EOBD-Facile =>.EOBD-Facile
O43 - CFD: 24/03/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client =>.Tim Kosse
O43 - CFD: 20/08/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GAD Garage
O43 - CFD: 21/08/2016 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games =>.Microsoft Corporation
O43 - CFD: 23/07/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glary Utilities 5 =>.GlarySoft
O43 - CFD: 02/09/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive =>.Google Inc.
O43 - CFD: 24/03/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth =>.Google Earth
O43 - CFD: 24/03/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Image Writer =>.Michael Casadevall
O43 - CFD: 24/03/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KaraFun Player =>.Heaven Software
O43 - CFD: 30/10/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance =>.Microsoft Corporation
O43 - CFD: 24/03/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MetaGeek =>.MetaGeek
O43 - CFD: 24/03/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microchip =>.Microchip
O43 - CFD: 24/06/2017 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight =>.Microsoft Corporation
O43 - CFD: 24/03/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MozBackup =>.Mozilla
O43 - CFD: 24/03/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OBD-II Software
O43 - CFD: 24/03/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OGG Video Converter
O43 - CFD: 08/07/2017 - [] SD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.3 =>.SourceForge
O43 - CFD: 24/03/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outils Microsoft Office =>.Microsoft Corporation
O43 - CFD: 24/03/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF Architect 2 =>.pdfforge GmbH
O43 - CFD: 24/03/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator =>.Philip Chinery
O43 - CFD: 16/12/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Recuva =>.Piriform
O43 - CFD: 16/12/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung =>.Samsung Electronics
O43 - CFD: 24/03/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ScanMaster-ELM DEMO
O43 - CFD: 24/03/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ScanMaster4-ELM DEMO
O43 - CFD: 24/03/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Shark007 Codecs =>.Shark007
O43 - CFD: 24/03/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SketchUp 8 =>.@Last Software
O43 - CFD: 02/09/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype =>.Skype
O43 - CFD: 24/03/2016 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp =>.Microsoft Corporation
O43 - CFD: 09/03/2017 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools =>.Microsoft Corporation
O43 - CFD: 06/07/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TP-LINK =>.TP-LINK
O43 - CFD: 24/03/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UltraVNC =>.UltraVNC
O43 - CFD: 24/03/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN =>.VideoLan Team
O43 - CFD: 24/03/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VirtualDub =>.Avery Lee
O43 - CFD: 24/03/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WampServer =>.WAMP Server
O43 - CFD: 21/08/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WildTangent Games =>.WildTangent Games
O43 - CFD: 24/03/2016 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live =>.Microsoft Corporation
O43 - CFD: 24/03/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinPic800
O43 - CFD: 02/09/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP =>.Nicolas Coolman
O43 - CFD: 05/08/2016 - [] D -- C:\ProgramData\Adobe =>.Adobe
O43 - CFD: 24/03/2016 - [0] SHD -- C:\ProgramData\Application Data =>.Microsoft Corporation
O43 - CFD: 02/09/2017 - [] D -- C:\ProgramData\AVAST Software =>.AVAST Software
O43 - CFD: 24/03/2016 - [0] SHD -- C:\ProgramData\Bureau =>.Microsoft Corporation
O43 - CFD: 16/12/2016 - [] D -- C:\ProgramData\CyberLink =>.CyberLink Corporation
O43 - CFD: 29/09/2015 - [] D -- C:\ProgramData\DesignSpark PCB =>.Ignite Realtime
O43 - CFD: 24/03/2016 - [0] SHD -- C:\ProgramData\Documents =>.Microsoft Corporation
O43 - CFD: 24/03/2016 - [0] SHD -- C:\ProgramData\Favoris =>.Microsoft Corporation
O43 - CFD: 16/12/2016 - [] D -- C:\ProgramData\GlarySoft =>.GlarySoft
O43 - CFD: 24/03/2016 - [0] SHD -- C:\ProgramData\Menu Démarrer =>.Microsoft Corporation
O43 - CFD: 07/03/2017 - [] SD -- C:\ProgramData\Microsoft =>.Microsoft Corporation
O43 - CFD: 02/01/2017 - [] D -- C:\ProgramData\Microsoft OneDrive =>.Microsoft Corporation
O43 - CFD: 24/03/2016 - [0] SHD -- C:\ProgramData\Modèles =>.Microsoft Corporation
O43 - CFD: 21/08/2012 - [] D -- C:\ProgramData\Mozilla =>.Mozilla Corporation
O43 - CFD: 30/08/2012 - [] D -- C:\ProgramData\Norton =>.Symantec Corporation
O43 - CFD: 11/10/2011 - [] D -- C:\ProgramData\NortonInstaller =>.Symantec
O43 - CFD: 03/09/2017 - [] D -- C:\ProgramData\NVIDIA =>.nVidia Corporation
O43 - CFD: 24/03/2016 - [] D -- C:\ProgramData\NVIDIA Corporation =>.nVidia Corporation
O43 - CFD: 02/09/2017 - [] D -- C:\ProgramData\Package Cache =>.Microsoft Corporation
O43 - CFD: 12/06/2014 - [] D -- C:\ProgramData\PDF Architect 2 =>.pdfforge GmbH
O43 - CFD: 21/12/2012 - [] D -- C:\ProgramData\Recisio =>.Recisio
O43 - CFD: 13/02/2016 - [] D -- C:\ProgramData\regid.1991-06.com.microsoft =>.Microsoft Corporation
O43 - CFD: 11/10/2011 - [] D -- C:\ProgramData\SAMSUNG =>.Samsung Electronics
O43 - CFD: 02/09/2017 - [] D -- C:\ProgramData\Skype =>.Skype
O43 - CFD: 03/09/2017 - [0] D -- C:\ProgramData\SWCUTemp
O43 - CFD: 11/10/2011 - [] D -- C:\ProgramData\Temp =>.Microsoft Corporation
O43 - CFD: 06/07/2017 - [] D -- C:\ProgramData\TP-LINK =>.TP-LINK
O43 - CFD: 13/02/2016 - [] D -- C:\ProgramData\USOPrivate =>.Microsoft Corporation
O43 - CFD: 13/02/2016 - [] D -- C:\ProgramData\USOShared =>.Microsoft Corporation
O43 - CFD: 21/08/2016 - [] D -- C:\ProgramData\WildTangent =>.WildTangent
O43 - CFD: 19/08/2013 - [] D -- C:\ProgramData\Win7codecs =>.Shark007
O43 - CFD: 24/03/2016 - [] D -- C:\ProgramData\WinClon =>.Clonix.com
O43 - CFD: 14/01/2015 - [] D -- C:\ProgramData\{A6814E42-F603-9FC4-4785-EF4697073CC8}
O43 - CFD: 05/08/2016 - [] AD -- C:\Program Files (x86)\Common Files\Adobe =>.Adobe
O43 - CFD: 18/04/2017 - [] D -- C:\Program Files (x86)\Common Files\AV =>.Avast
O43 - CFD: 02/09/2017 - [] D -- C:\Program Files (x86)\Common Files\Borland Shared =>.Borland
O43 - CFD: 11/10/2011 - [] D -- C:\Program Files (x86)\Common Files\CyberLink =>.CyberLink Corporation
O43 - CFD: 22/08/2012 - [] AD -- C:\Program Files (x86)\Common Files\Designer =>.Designer
O43 - CFD: 11/10/2011 - [] D -- C:\Program Files (x86)\Common Files\InstallShield =>.InstallShield
O43 - CFD: 11/10/2011 - [] D -- C:\Program Files (x86)\Common Files\Intel =>.Intel Corporation
O43 - CFD: 24/03/2016 - [] AD -- C:\Program Files (x86)\Common Files\Microsoft Shared =>.Microsoft Corporation
O43 - CFD: 11/10/2011 - [] D -- C:\Program Files (x86)\Common Files\postureAgent =>.Microsoft Corporation
O43 - CFD: 11/10/2011 - [] D -- C:\Program Files (x86)\Common Files\Samsung =>.Samsung Electronics
O43 - CFD: 30/10/2015 - [] D -- C:\Program Files (x86)\Common Files\Services =>.Microsoft Corporation
O43 - CFD: 02/09/2017 - [] D -- C:\Program Files (x86)\Common Files\Skype =>.Skype
O43 - CFD: 24/03/2016 - [] D -- C:\Program Files (x86)\Common Files\SpeechEngines =>.Microsoft Corporation
O43 - CFD: 30/08/2012 - [0] D -- C:\Program Files (x86)\Common Files\Symantec Shared =>.Symantec Corporation
O43 - CFD: 13/02/2016 - [] D -- C:\Program Files (x86)\Common Files\System =>.Microsoft Corporation
O43 - CFD: 11/10/2011 - [] D -- C:\Program Files (x86)\Common Files\Windows Live =>.Microsoft Corporation
O43 - CFD: 14/01/2015 - [] D -- C:\Users\Mairie\AppData\Roaming\1H1Q1V1N1N1S1R =>Adware.InstallCore
O43 - CFD: 03/12/2014 - [] D -- C:\Users\Mairie\AppData\Roaming\ACAMPREF =>.Myriad Software
O43 - CFD: 16/12/2016 - [] D -- C:\Users\Mairie\AppData\Roaming\Adobe =>.Adobe
O43 - CFD: 16/12/2016 - [] D -- C:\Users\Mairie\AppData\Roaming\Audacity =>.Audacity
O43 - CFD: 22/01/2014 - [] D -- C:\Users\Mairie\AppData\Roaming\AVAST Software =>.AVAST Software
O43 - CFD: 16/12/2016 - [] D -- C:\Users\Mairie\AppData\Roaming\CyberLink =>.CyberLink Corporation
O43 - CFD: 29/09/2015 - [] D -- C:\Users\Mairie\AppData\Roaming\DesignSpark PCB =>.Ignite Realtime
O43 - CFD: 04/06/2014 - [] D -- C:\Users\Mairie\AppData\Roaming\Dropbox =>.Dropbox
O43 - CFD: 04/06/2014 - [] D -- C:\Users\Mairie\AppData\Roaming\DropboxMaster =>.Dropbox Inc.
O43 - CFD: 03/09/2017 - [] D -- C:\Users\Mairie\AppData\Roaming\EditPlus 3 =>.ES-Computing
O43 - CFD: 06/01/2016 - [] D -- C:\Users\Mairie\AppData\Roaming\FileZilla =>.FileZilla
O43 - CFD: 23/07/2016 - [] D -- C:\Users\Mairie\AppData\Roaming\GlarySoft =>.GlarySoft
O43 - CFD: 16/12/2016 - [] D -- C:\Users\Mairie\AppData\Roaming\inkscape =>.inkscape.org
O43 - CFD: 21/08/2012 - [] D -- C:\Users\Mairie\AppData\Roaming\Macromedia =>.Macromedia
O43 - CFD: 24/07/2016 - [] D -- C:\Users\Mairie\AppData\Roaming\Microchip =>.Microchip
O43 - CFD: 24/03/2017 - [] SD -- C:\Users\Mairie\AppData\Roaming\Microsoft =>.Microsoft Corporation
O43 - CFD: 02/01/2017 - [] D -- C:\Users\Mairie\AppData\Roaming\Mozilla =>.Mozilla Corporation
O43 - CFD: 08/07/2017 - [] D -- C:\Users\Mairie\AppData\Roaming\OpenOffice =>.SourceForge
O43 - CFD: 12/06/2014 - [] D -- C:\Users\Mairie\AppData\Roaming\PDF Architect 2 =>.pdfforge GmbH
O43 - CFD: 12/06/2014 - [] D -- C:\Users\Mairie\AppData\Roaming\pdfforge =>.pdfforge
O43 - CFD: 24/03/2017 - [] D -- C:\Users\Mairie\AppData\Roaming\PsaCom
O43 - CFD: 21/08/2016 - [] D -- C:\Users\Mairie\AppData\Roaming\ScanMaster-ELM
O43 - CFD: 16/12/2016 - [] D -- C:\Users\Mairie\AppData\Roaming\Skype =>.Skype
O43 - CFD: 21/08/2012 - [] D -- C:\Users\Mairie\AppData\Roaming\Thunderbird =>.Thunderbird
O43 - CFD: 21/08/2016 - [] D -- C:\Users\Mairie\AppData\Roaming\vlc =>.VideoLan Team
O43 - CFD: 19/08/2013 - [] D -- C:\Users\Mairie\AppData\Roaming\Win7codecs =>.Shark007
O43 - CFD: 16/12/2016 - [] D -- C:\Users\Mairie\AppData\Roaming\WSE_Vosteran =>PUP.Optional.Vosteran
O43 - CFD: 03/09/2017 - [] D -- C:\Users\Mairie\AppData\Roaming\ZHP =>.Nicolas Coolman
O43 - CFD: 02/01/2017 - [0] D -- C:\Users\Mairie\AppData\Local\ActiveSync =>.Microsoft Corporation
O43 - CFD: 06/08/2016 - [] D -- C:\Users\Mairie\AppData\Local\Adobe =>.Adobe
O43 - CFD: 05/08/2016 - [] D -- C:\Users\Mairie\AppData\Local\adslTV =>.adslTV
O43 - CFD: 12/06/2014 - [] D -- C:\Users\Mairie\AppData\Local\Amazon Browser Bar =>PUP.Optional.VidSaver
O43 - CFD: 24/03/2016 - [0] SHD -- C:\Users\Mairie\AppData\Local\Application Data =>.Microsoft Corporation
O43 - CFD: 02/01/2017 - [] D -- C:\Users\Mairie\AppData\Local\CEF =>.CEF
O43 - CFD: 16/12/2016 - [] D -- C:\Users\Mairie\AppData\Local\Comms =>.Microsoft Corporation
O43 - CFD: 03/09/2017 - [] D -- C:\Users\Mairie\AppData\Local\CrashDumps =>.Microsoft Corporation
O43 - CFD: 16/09/2012 - [] D -- C:\Users\Mairie\AppData\Local\CyberLink =>.CyberLink Corporation
O43 - CFD: 29/09/2015 - [] D -- C:\Users\Mairie\AppData\Local\Downloaded Installations =>.Microsoft Corporation
O43 - CFD: 27/09/2015 - [0] SHD -- C:\Users\Mairie\AppData\Local\EmieSiteList =>.Enterprise mode Site List Mgr
O43 - CFD: 27/09/2015 - [0] SHD -- C:\Users\Mairie\AppData\Local\EmieUserList =>.Enterprise mode Site List Mgr
O43 - CFD: 26/08/2012 - [] D -- C:\Users\Mairie\AppData\Local\fontconfig =>.Portable Apps
O43 - CFD: 26/08/2012 - [] D -- C:\Users\Mairie\AppData\Local\gegl-0.2 =>.Portable Apps
O43 - CFD: 16/12/2016 - [] D -- C:\Users\Mairie\AppData\Local\Google =>.Google
O43 - CFD: 17/06/2015 - [] D -- C:\Users\Mairie\AppData\Local\GWX =>.GWX
O43 - CFD: 24/03/2016 - [0] SHD -- C:\Users\Mairie\AppData\Local\Historique =>.Microsoft Corporation
O43 - CFD: 20/02/2013 - [] D -- C:\Users\Mairie\AppData\Local\MetaGeek,_LLC =>.MetaGeek, LLC
O43 - CFD: 24/03/2017 - [] D -- C:\Users\Mairie\AppData\Local\Microsoft =>.Microsoft Corporation
O43 - CFD: 31/08/2013 - [] D -- C:\Users\Mairie\AppData\Local\Microsoft Games =>.Microsoft Corporation
O43 - CFD: 16/12/2016 - [] D -- C:\Users\Mairie\AppData\Local\MicrosoftEdge =>.Microsoft Corporation
O43 - CFD: 05/11/2013 - [] D -- C:\Users\Mairie\AppData\Local\Mozilla =>.Mozilla Corporation
O43 - CFD: 06/07/2017 - [0] D -- C:\Users\Mairie\AppData\Local\NetworkTiles =>.NetworkTiles
O43 - CFD: 24/06/2017 - [] D -- C:\Users\Mairie\AppData\Local\Packages =>.Microsoft Corporation
O43 - CFD: 21/08/2012 - [] D -- C:\Users\Mairie\AppData\Local\Power2Go =>.Power2Go
O43 - CFD: 24/03/2017 - [] D -- C:\Users\Mairie\AppData\Local\Programs =>.Microsoft Corporation
O43 - CFD: 25/01/2017 - [] D -- C:\Users\Mairie\AppData\Local\Publishers =>.Microsoft Corporation
O43 - CFD: 21/08/2012 - [] D -- C:\Users\Mairie\AppData\Local\Samsung =>.Samsung Electronics
O43 - CFD: 03/09/2017 - [] D -- C:\Users\Mairie\AppData\Local\Temp =>.Microsoft Corporation
O43 - CFD: 24/03/2016 - [0] SHD -- C:\Users\Mairie\AppData\Local\Temporary Internet Files =>.Microsoft Corporation
O43 - CFD: 21/08/2014 - [] D -- C:\Users\Mairie\AppData\Local\Thunderbird =>.Thunderbird
O43 - CFD: 24/03/2016 - [] D -- C:\Users\Mairie\AppData\Local\TileDataLayer =>.Microsoft Corporation
O43 - CFD: 02/09/2017 - [] D -- C:\Users\Mairie\AppData\Local\UNP =>.Microsoft Corporation
O43 - CFD: 24/08/2014 - [] D -- C:\Users\Mairie\AppData\Local\VirtualStore =>.Microsoft Corporation
O43 - CFD: 20/08/2016 - [] D -- C:\Users\Mairie\AppData\Local\WDSetup =>.WDSetup
O43 - CFD: 16/12/2016 - [] D -- C:\Users\Mairie\AppData\Local\Windows Live =>.Microsoft Corporation
O43 - CFD: 02/09/2017 - [] D -- C:\Users\Mairie\AppData\Local\ZHP =>.Nicolas Coolman
O43 - CFD: 24/03/2017 - [0] D -- C:\Users\Mairie\AppData\Local\Programs\Common =>.Microsoft Corporation
O43 - CFD: 30/10/2015 - [] RD -- C:\Users\Mairie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility =>.Microsoft Corporation
O43 - CFD: 16/12/2016 - [] RD -- C:\Users\Mairie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories =>.Microsoft Corporation
O43 - CFD: 09/03/2017 - [] RD -- C:\Users\Mairie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools =>.Administrative Tools
O43 - CFD: 24/03/2016 - [] D -- C:\Users\Mairie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\adsl TV =>.adslTV
O43 - CFD: 24/03/2016 - [] D -- C:\Users\Mairie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox =>.Dropbox
O43 - CFD: 24/03/2016 - [] D -- C:\Users\Mairie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\EditPlus 3 =>.ES-Computing
O43 - CFD: 30/10/2015 - [] D -- C:\Users\Mairie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance =>.Microsoft Corporation
O43 - CFD: 24/03/2016 - [] D -- C:\Users\Mairie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Melody Assistant
O43 - CFD: 24/03/2016 - [] D -- C:\Users\Mairie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OBD-II Software
O43 - CFD: 09/03/2017 - [] RD -- C:\Users\Mairie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup =>.Microsoft Corporation
O43 - CFD: 30/10/2015 - [] RD -- C:\Users\Mairie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools =>.Microsoft Corporation
O43 - CFD: 30/10/2015 - [] RSD -- C:\Users\Mairie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell =>.Microsoft Corporation
O43 - CFD: 24/03/2016 - [0] SHD -- C:\Users\Default\AppData\Local\Application Data =>.Microsoft Corporation
O43 - CFD: 24/03/2016 - [] D -- C:\Users\Default\AppData\Local\Google =>.Google
O43 - CFD: 24/03/2016 - [0] SHD -- C:\Users\Default\AppData\Local\Historique =>.Microsoft Corporation
O43 - CFD: 16/12/2016 - [] D -- C:\Users\Default\AppData\Local\Microsoft =>.Microsoft Corporation
O43 - CFD: 24/03/2016 - [0] SHD -- C:\Users\Default\AppData\Local\Temporary Internet Files =>.Microsoft Corporation
O43 - CFD: 24/03/2016 - [0] SHD -- C:\Users\Default User\AppData\Local\Application Data =>.Microsoft Corporation
O43 - CFD: 24/03/2016 - [] D -- C:\Users\Default User\AppData\Local\Google =>.Google
O43 - CFD: 24/03/2016 - [0] SHD -- C:\Users\Default User\AppData\Local\Historique =>.Microsoft Corporation
O43 - CFD: 16/12/2016 - [] D -- C:\Users\Default User\AppData\Local\Microsoft =>.Microsoft Corporation
O43 - CFD: 24/03/2016 - [0] SHD -- C:\Users\Default User\AppData\Local\Temporary Internet Files =>.Microsoft Corporation
O43 - CFD: 03/09/2017 - [] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\CrashDumps =>.Microsoft Corporation
O43 - CFD: 24/03/2016 - [] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\Microsoft =>.Microsoft Corporation
O43 - CFD: 23/07/2016 - [] SD -- C:\WINDOWS\System32\Config\systemprofile\AppData\Roaming\Microsoft =>.Microsoft Corporation

---\\ ShellIconOverlayIdentifiers (SIOI) (7) - 1s
O106 - SIOI: ErrorOverlayHandler Class [ OneDrive1] - {BBACC218-34EA-4666-9D7A-C78F2274A524}. (.Microsoft Corporation - Microsoft OneDrive Shell Extension.) -- C:\Users\Mairie\AppData\Local\Microsoft\OneDrive\17.3.6943.0625\FileSyncShell.dll =>.Microsoft Corporation®
O106 - SIOI: SharedOverlayHandler Class [ OneDrive2] - {5AB7172C-9C11-405C-8DD5-AF20F3606282}. (.Microsoft Corporation - Microsoft OneDrive Shell Extension.) -- C:\Users\Mairie\AppData\Local\Microsoft\OneDrive\17.3.6943.0625\FileSyncShell.dll =>.Microsoft Corporation®
O106 - SIOI: SharedSyncingOverlayHandler Class [ OneDrive3] - {A78ED123-AB77-406B-9962-2A5D9D2F7F30}. (.Microsoft Corporation - Microsoft OneDrive Shell Extension.) -- C:\Users\Mairie\AppData\Local\Microsoft\OneDrive\17.3.6943.0625\FileSyncShell.dll =>.Microsoft Corporation®
O106 - SIOI: UpToDateOverlayHandler Class [ OneDrive4] - {F241C880-6982-4CE5-8CF7-7085BA96DA5A}. (.Microsoft Corporation - Microsoft OneDrive Shell Extension.) -- C:\Users\Mairie\AppData\Local\Microsoft\OneDrive\17.3.6943.0625\FileSyncShell.dll =>.Microsoft Corporation®
O106 - SIOI: SyncingOverlayHandler Class [ OneDrive5] - {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}. (.Microsoft Corporation - Microsoft OneDrive Shell Extension.) -- C:\Users\Mairie\AppData\Local\Microsoft\OneDrive\17.3.6943.0625\FileSyncShell.dll =>.Microsoft Corporation®
O106 - SIOI: avast [00asw] - {472083B0-C522-11CF-8763-00608CC02F24}. (.AVAST Software - Avast Shell Extension.) -- C:\Program Files\AVAST Software\Avast\ashShell.dll =>.AVAST Software s.r.o.®
O106 - SIOI: avast [00avast] - {472083B0-C522-11CF-8763-00608CC02F24}. (.AVAST Software - Avast Shell Extension.) -- C:\Program Files\AVAST Software\Avast\ashShell.dll =>.AVAST Software s.r.o.®

---\\ Image File Execution Options (18) - 4s
O50 - IFEO:C:\Windows\System32\cscript.exe - (.Microsoft Corporation - Microsoft ® Console Based Script Host.) [DisableExceptionChainValidation\\3] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\dllhost.exe - (.Microsoft Corporation - COM Surrogate.) [DisableExceptionChainValidation\\3] =>.Microsoft Windows®
O50 - IFEO:C:\WINDOWS\System32\drvinst.exe - (.Microsoft Corporation - Module d’installation de pilotes.) [DisableExceptionChainValidation\\3] =>.Microsoft Corporation
O50 - IFEO:C:\WINDOWS\System32\ie4uinit.exe - (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) [MitigationOptions\\256] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\ieUnatt.exe - (.Microsoft Corporation - Outil d’installation sans assistance d’IE 7.) [MitigationOptions\\256] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\mmc.exe - (.Microsoft Corporation - Microsoft Management Console.) [DisableExceptionChainValidation\\3] =>.Microsoft Corporation
O50 - IFEO:C:\WINDOWS\System32\MRT.exe - (.Microsoft Corporation - Outil de suppression de logiciels malveilla.) [CFGOptions\\1] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\msfeedssync.exe - (.Microsoft Corporation - Microsoft Feeds Synchronization.) [MitigationOptions\\256] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\mshta.exe - (.Microsoft Corporation - Hôte des applications HTML de Microsoft(R).) [MitigationOptions\\256] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\PresentationHost.exe - (.Microsoft Corporation - Windows Presentation Foundation Host.) [MitigationOptions\\1118481] =>.Microsoft Corporation
O50 - IFEO:C:\WINDOWS\System32\PrintIsolationHost.exe - (.Microsoft Corporation - PrintIsolationHost.) [MitigationOptions\\2097152] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\rundll32.exe - (.Microsoft Corporation - Processus hôte Windows (Rundll32).) [DisableExceptionChainValidation\\3] =>.Microsoft Corporation
O50 - IFEO:C:\WINDOWS\System32\runtimebroker.exe - (.Microsoft Corporation - Runtime Broker.) [MitigationOptions\\4294967296] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\searchprotocolhost.exe - (.Microsoft Corporation - Microsoft Windows Search Protocol Host.) [DisableExceptionChainValidation\\3] =>.Microsoft Corporation
O50 - IFEO:C:\WINDOWS\System32\spoolsv.exe - (.Microsoft Corporation - Application sous-système spouleur.) [DisableExceptionChainValidation\\3] =>.Microsoft Corporation
O50 - IFEO:C:\WINDOWS\System32\spoolsv.exe - (.Microsoft Corporation - Application sous-système spouleur.) [MitigationOptions\\2097152] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\svchost.exe - (.Microsoft Corporation - Processus hôte pour les services Windows.) [MinimumStackCommitInBytes\\32768] =>.Microsoft Windows Publisher®
O50 - IFEO:C:\Windows\System32\wscript.exe - (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) [DisableExceptionChainValidation\\3] =>.Microsoft Corporation

---\\ Enumération des clés StartupReg (7) - 0s
O53 - SMSR:HKLM\...\startupreg\CLMLServer [Key] [64Bits] . (.CyberLink - CyberLink MediaLibray Service.) -- C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe =>.CyberLink
O53 - SMSR:HKLM\...\startupreg\ETDCtrl [Key] [64Bits] . (.ELAN Microelectronics Corp. - ETD Control Center.) -- C:\Program Files\Elantech\ETDCtrl.exe =>.ELAN Microelectronics Corp.
O53 - SMSR:HKLM\...\startupreg\HotKeysCmds [Key] [64Bits] . (.Intel Corporation - hkcmd Module.) -- C:\windows\system32\hkcmd.exe =>.Intel Corporation
O53 - SMSR:HKLM\...\startupreg\IgfxTray [Key] [64Bits] . (.Intel Corporation - igfxTray Module.) -- C:\windows\system32\igfxtray.exe =>.Intel Corporation
O53 - SMSR:HKLM\...\startupreg\Persistence [Key] [64Bits] . (.Intel Corporation - persistence Module.) -- C:\windows\system32\igfxpers.exe =>.Intel Corporation
O53 - SMSR:HKLM\...\startupreg\RemoteControl10 [Key] [64Bits] . (.CyberLink Corp. - Media+Player RC Service.) -- C:\Program Files (x86)\CyberLink\Media+Player10\Media+Player10Serv.exe =>.CyberLink Corp.
O53 - SMSR:HKLM\...\startupreg\Skype [Key] [64Bits] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe =>.Skype Technologies S.A.

---\\ Liste des pilotes du système (72) - 19s
O58 - SDL:2015/10/30 09:17:22 A . (.LSI - LSI 3ware SCSI Storport Driver.) -- C:\WINDOWS\System32\drivers\3ware.sys [107360] =>.Microsoft Windows®
O58 - SDL:2015/10/30 09:17:22 A . (.PMC-Sierra - PMC-Sierra Storport Driver For SPC8x6G SAS.) -- C:\WINDOWS\System32\drivers\adp80xx.sys [1135456] =>.Microsoft Windows®
O58 - SDL:2015/10/30 09:17:22 A . (.Advanced Micro Devices - AHCI 1.3 Device Driver.) -- C:\WINDOWS\System32\drivers\amdsata.sys [83296] =>.Microsoft Windows®
O58 - SDL:2015/10/30 09:17:22 A . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller D.) -- C:\WINDOWS\System32\drivers\amdsbs.sys [259424] =>.Microsoft Windows®
O58 - SDL:2015/10/30 09:17:22 A . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\WINDOWS\System32\drivers\amdxata.sys [26976] =>.Microsoft Windows®
O58 - SDL:2011/04/21 09:09:26 A . (.Windows (R) Win 7 DDK provider - Intel® Centrino® Bluetooth 3.0 + High Speed.) -- C:\WINDOWS\System32\drivers\AmpPal.sys [294912] =>.Windows (R) Win 7 DDK provider
O58 - SDL:2015/10/30 09:17:22 A . (.PMC-Sierra, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\WINDOWS\System32\drivers\arcsas.sys [131936] =>.Microsoft Windows®
O58 - SDL:2017/09/02 20:34:13 A . (.AVAST Software s.r.o. - IDS Application Activity Monitor Driver..) -- C:\WINDOWS\System32\drivers\aswbidsdrivera.sys [320528] =>.AVAST Software s.r.o.®
O58 - SDL:2017/09/02 20:34:14 A . (.AVAST Software s.r.o. - Application Activity Monitor Helper Driver.) -- C:\WINDOWS\System32\drivers\aswbidsha.sys [198976] =>.AVAST Software s.r.o.®
O58 - SDL:2017/09/02 20:34:14 A . (.AVAST Software s.r.o. - Logging Driver.) -- C:\WINDOWS\System32\drivers\aswbloga.sys [343296] =>.AVAST Software s.r.o.®
O58 - SDL:2017/09/02 20:34:14 A . (.AVAST Software s.r.o. - Universal Driver.) -- C:\WINDOWS\System32\drivers\aswbuniva.sys [57736] =>.AVAST Software s.r.o.®
O58 - SDL:2017/09/02 20:38:46 A . (.AVAST Software - Avast HWID.) -- C:\WINDOWS\System32\drivers\aswHwid.sys [47016] =>.AVAST Software s.r.o.® (.AVAST Software)
O58 - SDL:2017/09/02 20:35:06 A . (.AVAST Software - Avast Keyboard Filter Driver.) -- C:\WINDOWS\System32\drivers\aswKbd.sys [41832] =>.AVAST Software s.r.o.®
O58 - SDL:2017/09/02 20:38:46 A . (.AVAST Software - Avast File System Minifilter for Windows 20.) -- C:\WINDOWS\System32\drivers\aswMonFlt.sys [147784] =>.AVAST Software s.r.o.®
O58 - SDL:2017/09/02 20:38:44 A . (.AVAST Software - Avast WFP Redirect Driver.) -- C:\WINDOWS\System32\drivers\aswRdr2.sys [110376] =>.AVAST Software s.r.o.®
O58 - SDL:2017/09/02 20:38:46 A . (.AVAST Software - Avast Revert.) -- C:\WINDOWS\System32\drivers\aswRvrt.sys [84416] =>.AVAST Software s.r.o.® (.AVAST Software)
O58 - SDL:2017/09/02 20:35:10 A . (.AVAST Software - Avast Virtualization Driver.) -- C:\WINDOWS\System32\drivers\aswSnx.sys [1016384] =>.AVAST Software s.r.o.®
O58 - SDL:2017/09/02 20:38:47 A . (.AVAST Software - Avast self protection module.) -- C:\WINDOWS\System32\drivers\aswSP.sys [590880] =>.AVAST Software s.r.o.®
O58 - SDL:2017/09/02 20:38:49 A . (.AVAST Software - Stream Filter.) -- C:\WINDOWS\System32\drivers\aswStm.sys [199312] =>.AVAST Software s.r.o.®
O58 - SDL:2017/09/02 20:38:47 A . (.AVAST Software - Avast VM Monitor.) -- C:\WINDOWS\System32\drivers\aswVmm.sys [361336] =>.AVAST Software s.r.o.® (.AVAST Software)
O58 - SDL:2010/01/05 03:23:20 A . (.Atheros Communications, Inc. - Atheros Extensible Wireless LAN device driv.) -- C:\WINDOWS\System32\drivers\athurx.sys [1847296] =>.Atheros Communications, Inc.
O58 - SDL:2013/11/20 11:43:50 A . (.Qualcomm Atheros Communications, Inc. - Qualcomm Atheros USB Wireless LAN device dr.) -- C:\WINDOWS\System32\drivers\athuwbx.sys [2702336] =>.Qualcomm Atheros Communications, Inc.
O58 - SDL:2015/10/30 09:17:22 A . (.Windows (R) Win 7 DDK provider - BCM Function 2 Device Driver.) -- C:\WINDOWS\System32\drivers\bcmfn.sys [9728] =>.Windows (R) Win 7 DDK provider
O58 - SDL:2015/10/30 09:17:22 A . (.Windows (R) Win 7 DDK provider - BCM Function 2 Device Driver.) -- C:\WINDOWS\System32\drivers\bcmfn2.sys [9728] =>.Windows (R) Win 7 DDK provider
O58 - SDL:2013/10/15 12:42:24 A . (.Motorola Solutions, Inc. - Bluetooth Filter Driver.) -- C:\WINDOWS\System32\drivers\btmhsf.sys [1390904] =>.Motorola Solutions Inc.®
O58 - SDL:2015/10/30 09:17:22 A . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.) -- C:\WINDOWS\System32\drivers\bxvbda.sys [531296] =>.Microsoft Windows®
O58 - SDL:2011/08/17 09:19:38 A . (.CyberLink Corporation - CyberLink WebCam Virtual Driver.) -- C:\WINDOWS\System32\drivers\clwvd.sys [31216] =>.CyberLink®
O58 - SDL:2016/11/11 03:25:08 A . (.ELAN Microelectronics Corp. - ELAN KMDF Driver.) -- C:\WINDOWS\System32\drivers\ETD.sys [589392] =>.ELAN MICROELECTRONICS CORPORATION®
O58 - SDL:2015/09/23 21:00:16 A . (.ELAN Microelectronic Corp. - ELAN SMBus Driver.) -- C:\WINDOWS\System32\drivers\ETDSMBus.sys [41024] =>.ELAN MICROELECTRONICS CORPORATION®
O58 - SDL:2015/10/30 09:17:22 A . (.QLogic Corporation - QLogic 10 GigE VBD.) -- C:\WINDOWS\System32\drivers\evbda.sys [3436896] =>.Microsoft Windows®
O58 - SDL:2016/07/23 20:08:52 A . (.Glarysoft Ltd - The driver for the Startup Manager tool.) -- C:\WINDOWS\System32\drivers\GUBootStartup.sys [20160] =>.Glarysoft Ltd®
O58 - SDL:2010/10/20 00:34:26 A . (.Intel Corporation - Intel(R) Management Engine Interface.) -- C:\WINDOWS\System32\drivers\HECIx64.sys [56344] =>.Intel Corporation®
O58 - SDL:2015/10/30 09:17:22 A . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Drive.) -- C:\WINDOWS\System32\drivers\HpSAMD.sys [64352] =>.Microsoft Windows®
O58 - SDL:2015/10/30 09:17:18 A . (.Intel(R) Corporation - Intel(R) Serial IO I2C Driver.) -- C:\WINDOWS\System32\drivers\iai2c.sys [81408] =>.Intel(R) Corporation
O58 - SDL:2015/10/30 09:17:18 A . (.Intel Corporation - Intel(R) Serial IO I2C Driver v2.) -- C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys [165888] =>.Intel Corporation
O58 - SDL:2015/10/30 09:17:18 A . (.Intel Corporation - Intel(R) Serial IO GPIO Controller Driver.) -- C:\WINDOWS\System32\drivers\iaLPSSi_GPIO.sys [38128] =>.Intel Corporation - Client Components Group®
O58 - SDL:2015/10/30 09:17:18 A . (.Intel Corporation - Intel(R) Serial IO I2C Controller Driver.) -- C:\WINDOWS\System32\drivers\iaLPSSi_I2C.sys [113152] =>.Intel Corporation
O58 - SDL:2015/10/30 09:17:22 A . (.Intel Corporation - Intel(R) Rapid Storage Technology driver (i.) -- C:\WINDOWS\System32\drivers\iaStorAV.sys [673120] =>.Microsoft Windows®
O58 - SDL:2015/10/30 09:17:22 A . (.Intel Corporation - Intel Matrix Storage Manager driver - x64.) -- C:\WINDOWS\System32\drivers\iaStorV.sys [412000] =>.Microsoft Windows®
O58 - SDL:2015/10/30 09:17:23 A . (.Mellanox - InfiniBand Fabric Bus Driver.) -- C:\WINDOWS\System32\drivers\ibbus.sys [424800] =>.Microsoft Windows®
O58 - SDL:2013/10/15 12:42:10 A . (.Intel Corporation - Intel(R) Centrino(R) Wireless (Bluetooth Ad.) -- C:\WINDOWS\System32\drivers\iBtFltCoex.sys [69088] =>.Intel Corporation-Mobile Wireless Group®
O58 - SDL:2017/03/09 01:16:06 A . (.Intel Corporation - Intel Graphics Kernel Mode Driver.) -- C:\WINDOWS\System32\drivers\igdkmd64.sys [5382856] =>.Microsoft Windows Hardware Compatibility Publisher®
O58 - SDL:2010/10/14 19:28:16 A . (.Intel(R) Corporation - Intel(R) Display Audio Driver.) -- C:\WINDOWS\System32\drivers\IntcDAud.sys [317440] =>.Intel(R) Corporation
O58 - SDL:2017/09/02 20:44:44 A . (...) -- C:\WINDOWS\System32\drivers\lpsport.sys [61304] =>.AVG Technologies CZ, s.r.o.®
O58 - SDL:2015/10/30 09:17:23 A . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas.sys [108888] =>.Microsoft Windows®
O58 - SDL:2015/10/30 09:17:23 A . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas2i.sys [104800] =>.Microsoft Windows®
O58 - SDL:2015/10/30 09:17:23 A . (.Avago Technologies - Avago SAS Gen3 Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas3i.sys [99168] =>.Microsoft Windows®
O58 - SDL:2015/10/30 09:17:23 A . (.LSI Corporation - LSI SSS PCIe/Flash Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sss.sys [82784] =>.Microsoft Windows®
O58 - SDL:2015/10/30 09:17:23 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\megasas.sys [59744] =>.Microsoft Windows®
O58 - SDL:2015/10/30 09:17:23 A . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\WINDOWS\System32\drivers\megasr.sys [575840] =>.Microsoft Windows®
O58 - SDL:2015/10/30 09:17:23 A . (.Mellanox - MLX4 Bus Driver.) -- C:\WINDOWS\System32\drivers\mlx4_bus.sys [705376] =>.Microsoft Windows®
O58 - SDL:2015/10/30 09:17:23 A . (.Marvell Semiconductor, Inc. - Marvell Flash Controller Driver.) -- C:\WINDOWS\System32\drivers\mvumis.sys [63840] =>.Microsoft Windows®
O58 - SDL:2015/10/30 09:17:23 A . (.Mellanox - NetworkDirect Support Filter Driver.) -- C:\WINDOWS\System32\drivers\ndfltr.sys [76128] =>.Microsoft Windows®
O58 - SDL:2015/10/30 09:17:19 A . (.Intel Corporation - Intel® Wireless WiFi Link Driver.) -- C:\WINDOWS\System32\drivers\Netwsw00.sys [11518976] =>.Intel Corporation
O58 - SDL:2017/01/17 06:56:20 A . (.NVIDIA Corporation - NVIDIA Windows Kernel Mode Driver, Version.) -- C:\WINDOWS\System32\drivers\nvlddmkm.sys [14190520] =>.NVIDIA Corporation®
O58 - SDL:2017/01/17 06:56:42 A . (.NVIDIA Corporation - NVIDIA Windows Kernel Mode Driver, Version.) -- C:\WINDOWS\System32\drivers\nvpciflt.sys [48696] =>.NVIDIA Corporation®
O58 - SDL:2015/10/30 09:17:23 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\WINDOWS\System32\drivers\nvraid.sys [150368] =>.Microsoft Windows®
O58 - SDL:2015/10/30 09:17:23 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\WINDOWS\System32\drivers\nvstor.sys [166240] =>.Microsoft Windows®
O58 - SDL:2015/10/30 09:17:23 A . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\percsas2i.sys [58208] =>.Microsoft Windows®
O58 - SDL:2015/10/30 09:17:23 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\percsas3i.sys [58720] =>.Microsoft Windows®
O58 - SDL:2015/10/30 09:17:23 A . (.Realtek - Realtek 8136/8168/8169 NDIS 6.40 64-bit Dri.) -- C:\WINDOWS\System32\drivers\rt640x64.sys [589824] =>.Realtek
O58 - SDL:2015/08/29 00:16:14 A . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function D.) -- C:\WINDOWS\System32\drivers\RTKVHD64.sys [4519144] =>.Realtek Semiconductor Corp®
O58 - SDL:2011/07/30 00:47:20 A . (.SAMSUNG ELECTRONICS - SAMSUNG Kernel Driver.) -- C:\WINDOWS\System32\drivers\SABI.sys [13824] =>.SAMSUNG Electronics
O58 - SDL:2011/04/11 12:55:24 A . (.Phoenix Technologies Ltd. - SecureGuard Driver.) -- C:\WINDOWS\System32\drivers\SGDrv64.sys [7680] =>.Phoenix Technologies Ltd.
O58 - SDL:2015/10/30 09:17:23 A . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\WINDOWS\System32\drivers\sisraid2.sys [44896] =>.Microsoft Windows®
O58 - SDL:2015/10/30 09:17:23 A . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\WINDOWS\System32\drivers\sisraid4.sys [81760] =>.Microsoft Windows®
O58 - SDL:2015/10/30 09:17:23 A . (.Promise Technology, Inc. - Promise SuperTrak EX Series Driver for Wind.) -- C:\WINDOWS\System32\drivers\stexstor.sys [31072] =>.Microsoft Windows®
O58 - SDL:2015/10/30 09:17:23 A . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\WINDOWS\System32\drivers\vsmraid.sys [166752] =>.Microsoft Windows®
O58 - SDL:2015/10/30 09:17:23 A . (.VIA Corporation - VIA StorX RAID Controller Driver.) -- C:\WINDOWS\System32\drivers\VSTXRAID.SYS [305504] =>.Microsoft Windows®
O58 - SDL:2015/10/30 09:17:23 A . (.Mellanox - Kernel WinMad.) -- C:\WINDOWS\System32\drivers\winmad.sys [26976] =>.Microsoft Windows®
O58 - SDL:2015/10/30 09:17:23 A . (.Mellanox - Kernel WinVerbs.) -- C:\WINDOWS\System32\drivers\winverbs.sys [59232] =>.Microsoft Windows®
O58 - SDL:2013/11/20 11:43:50 A . (.Qualcomm Atheros Communications, Inc. - Qualcomm Atheros USB Wireless LAN device dr.) -- C:\WINDOWS\System32\athuwbx.sys [2702336] =>.Qualcomm Atheros Communications, Inc.

---\\ Associations Shell Spawning (11) - 0s
O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\WINDOWS\System32\control.exe =>.Microsoft Corporation
O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Ob.) -- C:\WINDOWS\System32\eventvwr.exe =>.Microsoft Corporation
O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc®
O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (...) -- %1" %*
O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe =>.Microsoft Corporation
O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S
O67 - Shell Spawning: <.html> [HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®

---\\ Menu de démarrage Internet (16) - 1s
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc®
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Avast Software - Avast SafeZone Browser.) -- C:\Program Files\AVAST Software\SZBrowser\Launcher.exe =>.AVAST Software s.r.o.®
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe =>.Mozilla Corporation
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc.
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Avast Software - Avast SafeZone Browser.) -- C:\Program Files\AVAST Software\SZBrowser\Launcher.exe =>.AVAST Software
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe =>.Mozilla Corporation
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc.
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Avast Software - Avast SafeZone Browser.) -- C:\Program Files\AVAST Software\SZBrowser\Launcher.exe =>.AVAST Software
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe =>.Mozilla Corporation
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc.
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Avast Software - Avast SafeZone Browser.) -- C:\Program Files\AVAST Software\SZBrowser\Launcher.exe =>.AVAST Software

---\\ Recherche d'infection sur les navigateurs (31) - 17s
O69 - SBI: prefs.js [Mairie - lh8efc09.default] user_pref("CT2391419./9b+7e3x305.from_oldbar.enc", "JH4vQT87NjM/R0Y/fUk+QS52MH4iJCE1LDdHS1lXS0pIWFhOXjdiVzpTXkkySzo9PztQR1JibGJddX[...] =>.SUP.Conduit
O69 - SBI: prefs.js [Mairie - lh8efc09.default] user_pref("CT2391419./9b+7ebx305.from_oldbar.enc", "JH4+OTFBMD0zRUA2Mn5KP0IvdzF7fSM1LDdWWUlITk9RUlxOTFVTW1RgWlo+aV5hTjdQOz1BVEtWdX[...] =>.SUP.Conduit
O69 - SBI: prefs.js [Mairie - lh8efc09.default] user_pref("extensions.InternetProgram.cg", "1b3ee7fc-1cf8-4bbe-ae0d-4cb277887ea7"); =>PUP.Optional.InternetProgram
O69 - SBI: prefs.js [Mairie - lh8efc09.default] user_pref("extensions.srchvstrn.AL", 4); =>PUP.Optional.Vosteran
O69 - SBI: prefs.js [Mairie - lh8efc09.default] user_pref("extensions.srchvstrn.aflt", "vst_ggbc_15_03_ff"); =>PUP.Optional.Vosteran
O69 - SBI: prefs.js [Mairie - lh8efc09.default] user_pref("extensions.srchvstrn.appId", "{4CB3598A-82E8-4D1F-983F-061238AE696E}"); =>PUP.Optional.Vosteran
O69 - SBI: prefs.js [Mairie - lh8efc09.default] user_pref("extensions.srchvstrn.cd", "2XzuyEtN2Y1L1Qzu0EzztCtCtAtB0DtBtB0B0B0DyCtB0DyCtN0D0Tzu0StCtCtDzytN1L2XzutAtFyBtFtCtFyEtN1L[...] =>PUP.Optional.Vosteran
O69 - SBI: prefs.js [Mairie - lh8efc09.default] user_pref("extensions.srchvstrn.cr", "760932124"); =>PUP.Optional.Vosteran
O69 - SBI: prefs.js [Mairie - lh8efc09.default] user_pref("extensions.srchvstrn.dfltSrch", true); =>PUP.Optional.Vosteran
O69 - SBI: prefs.js [Mairie - lh8efc09.default] user_pref("extensions.srchvstrn.dnsErr", true); =>PUP.Optional.Vosteran
O69 - SBI: prefs.js [Mairie - lh8efc09.default] user_pref("extensions.srchvstrn.hmpg", true); =>PUP.Optional.Vosteran
O69 - SBI: prefs.js [Mairie - lh8efc09.default] user_pref("extensions.srchvstrn.hmpgUrl", "http://vosteran.com/?f=1&a=vst_ggbc_15_03_ff&cd=2XzuyEtN2Y1L1Qzu0EzztCtCtAtB0DtBtB0B0B0[...] =>PUP.Optional.Vosteran
O69 - SBI: prefs.js [Mairie - lh8efc09.default] user_pref("extensions.srchvstrn.id", "E81132D22BBD62D6"); =>PUP.Optional.Vosteran
O69 - SBI: prefs.js [Mairie - lh8efc09.default] user_pref("extensions.srchvstrn.instlDay", "16449"); =>PUP.Optional.Vosteran
O69 - SBI: prefs.js [Mairie - lh8efc09.default] user_pref("extensions.srchvstrn.instlRef", "142905_s3"); =>PUP.Optional.Vosteran
O69 - SBI: prefs.js [Mairie - lh8efc09.default] user_pref("extensions.srchvstrn.newTabUrl", "http://vosteran.com/?f=2&a=vst_ggbc_15_03_ff&cd=2XzuyEtN2Y1L1Qzu0EzztCtCtAtB0DtBtB0B0[...] =>PUP.Optional.Vosteran
O69 - SBI: prefs.js [Mairie - lh8efc09.default] user_pref("extensions.srchvstrn.prdct", "srchvstrn"); =>PUP.Optional.Vosteran
O69 - SBI: prefs.js [Mairie - lh8efc09.default] user_pref("extensions.srchvstrn.prtnrId", "WSE_Vosteran"); =>PUP.Optional.Vosteran
O69 - SBI: prefs.js [Mairie - lh8efc09.default] user_pref("extensions.srchvstrn.srchPrvdr", "Vosteran"); =>PUP.Optional.Vosteran
O69 - SBI: prefs.js [Mairie - lh8efc09.default] user_pref("extensions.srchvstrn.tlbrSrchUrl", "http://vosteran.com/?f=3&a=vst_ggbc_15_03_ff&cd=2XzuyEtN2Y1L1Qzu0EzztCtCtAtB0DtBtB0[...] =>PUP.Optional.Vosteran
O69 - SBI: prefs.js [Mairie - lh8efc09.default] user_pref("extensions.srchvstrn.vrsn", ""); =>PUP.Optional.Vosteran
O69 - SBI: prefs.js [Mairie - lh8efc09.default] user_pref("extensions.srchvstrn.vrsni", ""); =>PUP.Optional.Vosteran
O69 - SBI: prefs.js [Mairie - lh8efc09.default] user_pref("extensions.srchvstrn_i.newTab", true); =>PUP.Optional.Vosteran
O69 - SBI: prefs.js [Mairie - lh8efc09.default] user_pref("extensions.srchvstrn_i.vrsnTs", "20:55:26"); =>PUP.Optional.Vosteran
O69 - SBI: SearchScopes [HKCU] OldSearch - (Google) - http://www.google.com/ =>.Google Inc.
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - http://www.bing.com/ =>.Bing.com
O69 - SBI: SearchScopes [HKCU] {B3B3A6AC-74EC-BD56-BCDB-EFA4799FB9DF} - (Vosteran) - http://vosteran.com/ =>PUP.Optional.Vosteran
O69 - SBI: SearchScopes [HKCU] {DC91FAFB-6CEA-49E5-BB74-9CEE75D09B77} - (Amazon) - http://www.amazon.fr/ =>.Amazon Corporation
O69 - SBI: SearchScopes [HKCU] {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} [DefaultScope] - (Default) - http://searchinterneat-a.akamaihd.net/ =>.SUP.AkamaiHD
O69 - SBI: SearchScopes [HKLM] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (@ieframe.dll,-12512) - http://www.bing.com/ =>.Bing.com
O69 - SBI: SearchScopes [HKLM] {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} [DefaultScope] - (Google) - http://www.google.com/ =>.Google Inc.

---\\ Enumère les services démarrés par Svchost (41) - 2s
O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\WINDOWS\System32\certprop.dll [192000] =>.Microsoft Corporation
O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\WINDOWS\System32\certprop.dll [192000] =>.Microsoft Corporation
O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\WINDOWS\System32\srvsvc.dll [283136] =>.Microsoft Corporation
O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\WINDOWS\System32\gpsvc.dll [1339904] =>.Microsoft Corporation
O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\WINDOWS\System32\ikeext.dll [957952] =>.Microsoft Corporation
O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur u.) -- C:\WINDOWS\System32\iphlpsvc.dll [963072] =>.Microsoft Corporation
O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d’ouverture de session secon.) -- C:\WINDOWS\system32\seclogon.dll [31232] =>.Microsoft Corporation
O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\WINDOWS\System32\appinfo.dll [94720] =>.Microsoft Corporation
O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\WINDOWS\System32\iscsiexe.dll [151040] =>.Microsoft Corporation
O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\WINDOWS\System32\eapsvc.dll [112640] =>.Microsoft Corporation
O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\WINDOWS\System32\schedsvc.dll [1001472] =>.Microsoft Corporation
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\WINDOWS\System32\wbem\WMIsvc.dll [225280] =>.Microsoft Corporation
O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\WINDOWS\System32\browser.dll [134656] =>.Microsoft Corporation
O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\WINDOWS\System32\profsvc.dll [328192] =>.Microsoft Corporation
O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à.) -- C:\WINDOWS\System32\sessenv.dll [372736] =>.Microsoft Corporation
O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\WINDOWS\System32\wercplsupport.dll [96256] =>.Microsoft Corporation
O83 - Search Svchost Services: DcpSvc (DcpSvc) . (.Microsoft Corporation - dcpsvc Task.) -- C:\WINDOWS\System32\dcpsvc.dll [186880] =>.Microsoft Corporation
O83 - Search Svchost Services: wlidsvc (wlidsvc) . (.Microsoft Corporation - Service de compte Microsoft®.) -- C:\WINDOWS\System32\wlidsvc.dll [2054144] =>.Microsoft Corporation
O83 - Search Svchost Services: NcaSvc (NcaSvc) . (.Microsoft Corporation - Service Assistant Connectivité réseau Micro.) -- C:\WINDOWS\System32\ncasvc.dll [168960] =>.Microsoft Corporation
O83 - Search Svchost Services: NetSetupSvc (NetSetupSvc) . (.Microsoft Corporation - Service Configuration du réseau.) -- C:\WINDOWS\System32\NetSetupSvc.dll [211456] =>.Microsoft Corporation
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\WINDOWS\System32\themeservice.dll [59392] =>.Microsoft Corporation
O83 - Search Svchost Services: RetailDemo (RetailDemo) . (.Microsoft Corporation - RDXService.) -- C:\WINDOWS\System32\RDXService.dll [1073152] =>.Microsoft Corporation
O83 - Search Svchost Services: lfsvc (lfsvc) . (.Microsoft Corporation - Service de géolocalisation.) -- C:\WINDOWS\System32\lfsvc.dll [27136] =>.Microsoft Corporation
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’.) -- C:\WINDOWS\System32\rasauto.dll [106496] =>.Microsoft Corporation
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire des connexions d’accès à dista.) -- C:\WINDOWS\System32\rasmans.dll [696320] =>.Microsoft Corporation
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\WINDOWS\System32\mprdim.dll [507904] =>.Microsoft Corporation
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements systèm.) -- C:\WINDOWS\System32\sens.dll [73216] =>.Microsoft Corporation
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l’application d’assistance à.) -- C:\WINDOWS\System32\ipnathlp.dll [456704] =>.Microsoft Corporation
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM.) -- C:\WINDOWS\System32\tapisrv.dll [311808] =>.Microsoft Corporation
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Up.) -- C:\WINDOWS\System32\wuaueng.dll [2280960] =>.Microsoft Corporation
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière.) -- C:\WINDOWS\System32\qmgr.dll [1132544] =>.Microsoft Corporation
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\System32\shsvcs.dll [608768] =>.Microsoft Corporation
O83 - Search Svchost Services: dmwappushservice (dmwappushservice) . (.Microsoft Corporation - dmwappushsvc.) -- C:\WINDOWS\System32\dmwappushsvc.dll [57856] =>.Microsoft Corporation
O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\WINDOWS\System32\bdesvc.dll [361472] =>.Microsoft Corporation
O83 - Search Svchost Services: XboxNetApiSvc (XboxNetApiSvc) . (.Microsoft Corporation - Xbox Live Networking Service.) -- C:\WINDOWS\System32\XboxNetApiSvc.dll [1035776] =>.Microsoft Corporation
O83 - Search Svchost Services: UsoSvc (UsoSvc) . (.Microsoft Corporation - Mettre à jour la session Orchestrator Core.) -- C:\WINDOWS\System32\usocore.dll [379392] =>.Microsoft Corporation
O83 - Search Svchost Services: XblGameSave (XblGameSave) . (.Microsoft Corporation - Xbox Live Game Save Service.) -- C:\WINDOWS\System32\XblGameSave.dll [1139712] =>.Microsoft Corporation
O83 - Search Svchost Services: DmEnrollmentSvc (DmEnrollmentSvc) . (.Microsoft Corporation - DLL Windows Management Service.) -- C:\WINDOWS\System32\Windows.Internal.Management.dll [278016] =>.Microsoft Corporation
O83 - Search Svchost Services: DsmSvc (DsmSvc) . (.Microsoft Corporation - Gestionnaire d’installation de périphérique.) -- C:\WINDOWS\System32\DeviceSetupManager.dll [205824] =>.Microsoft Corporation
O83 - Search Svchost Services: UserManager (UserManager) . (.Microsoft Corporation - UserMgr.) -- C:\WINDOWS\System32\usermgr.dll [912384] =>.Microsoft Corporation
O83 - Search Svchost Services: XblAuthManager (XblAuthManager) . (.Microsoft Corporation - Xbox Live Auth Manager.) -- C:\WINDOWS\System32\XblAuthManager.dll [948736] =>.Microsoft Corporation

---\\ Liste des exceptions du parefeu Windows (4) - 3s
O87 - FAEL: "UDP Query User{A5CF5AFF-529D-42D2-8FE3-7E709542B6AA}C:\program files (x86)\ultravnc\winvnc.exe" [In-None-P17-TRUE] .(.www.ultravnc.fr - Serveur VNC pour Win32.) -- C:\program files (x86)\ultravnc\winvnc.exe
O87 - FAEL: "TCP Query User{AFBF6629-4E4F-4B68-95EE-E654CE791BCE}C:\program files (x86)\ultravnc\winvnc.exe" [In-None-P6-TRUE] .(.www.ultravnc.fr - Serveur VNC pour Win32.) -- C:\program files (x86)\ultravnc\winvnc.exe
O87 - FAEL: "UDP Query User{3A223948-8897-4886-9374-8DA180228039}D:\easysetupassistant\easysetupassistant.exe" [In-None-P17-TRUE] .(...) -- D:\easysetupassistant\easysetupassistant.exe (.not file.)
O87 - FAEL: "TCP Query User{99DD0E38-E97F-4C20-BC15-82BB1C7DB281}D:\easysetupassistant\easysetupassistant.exe" [In-None-P6-TRUE] .(...) -- D:\easysetupassistant\easysetupassistant.exe (.not file.)

---\\ Recherche des packages WindowsInstaller (1) - 22s
[MD5.] [WIS][2013/02/14 13:03:13] (.Iminent - Windows Installer XML (3.5.2519.0).) -- C:\WINDOWS\Installer\a9a73e.msi [10149888] =>PUP.Optional.IMBooster

---\\ Scan Additionnel (17) - 1s
C:\WINDOWS\System32\Tasks\Plus-HD-2.6-chromeinstaller =>Adware.CrossRider
C:\WINDOWS\System32\Tasks\Plus-HD-2.6-codedownloader =>Adware.CrossRider
C:\WINDOWS\System32\Tasks\Plus-HD-2.6-enabler =>Adware.CrossRider
C:\WINDOWS\System32\Tasks\Plus-HD-2.6-firefoxinstaller =>Adware.CrossRider
C:\Users\Mairie\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oilkkkefbalmbfppgjmgjoefbclebkce =>PUP.Optional.Vosteran
C:\Users\Mairie\AppData\Roaming\Mozilla\Firefox\Profiles\lh8efc09.default\searchplugins\Vosteran.xml =>PUP.Optional.Vosteran
C:\Users\Mairie\AppData\Roaming\Mozilla\Firefox\Profiles\lh8efc09.default\searchplugins\yahoo.xml =>PUP.Optional.BDYahoo
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{893CB813-4179-4BFE-8D33-ABCC38816B48} =>.SUP.Amazon1ButtonApp
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{893CB813-4179-4BFE-8D33-ABCC38816B48} =>.SUP.Amazon1ButtonApp
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\CCleaner Packages =>Heuristique.InstallCore
C:\Program Files (x86)\Amazon Browser Bar =>PUP.Optional.VidSaver
C:\Users\Mairie\AppData\Roaming\1H1Q1V1N1N1S1R =>Adware.InstallCore
C:\Users\Mairie\AppData\Roaming\WSE_Vosteran =>PUP.Optional.Vosteran
C:\Users\Mairie\AppData\Local\Amazon Browser Bar =>PUP.Optional.VidSaver
HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{B3B3A6AC-74EC-BD56-BCDB-EFA4799FB9DF} =>PUP.Optional.Vosteran
HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{E9410C70-B6AE-41FF-AB71-32F4B279EA5F} =>.SUP.AkamaiHD
C:\WINDOWS\Installer\a9a73e.msi =>PUP.Optional.IMBooster

---\\ Récapitulatif des éléments trouvés sur votre station (12) - 0s
https://nicolascoolman.eu/2017/03/11/pup-optional-crossrider/ =>Adware.CrossRider
https://nicolascoolman.eu/2017/03/01/pup-optional-vosteran/ =>PUP.Optional.Vosteran
https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/ =>PUP.Optional.BDYahoo
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.SUP.AkamaiHD
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.SUP.Amazon1ButtonApp
https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/ =>Heuristique.InstallCore
https://www.anti-malware.top/2016/06/30/adware-internetprogram/ =>PUP.Optional.InternetProgram
https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/ =>PUP.Optional.AlexaTB
https://nicolascoolman.eu/2017/03/12/adware-installcore-2/ =>Adware.InstallCore
https://www.nicolascoolman.com/fr/adware-vidsaver/ =>PUP.Optional.VidSaver
https://nicolascoolman.eu/2017/02/06/superfluous-conduit/ =>.SUP.Conduit
https://www.nicolascoolman.com/fr/adware-imbooster/ =>PUP.Optional.IMBooster

~ Unselected Options: O82,
~ End of the scan, 139389 items in 07mn00s (1319)(0)