~ ZHPDiag v2017.12.24.220 Par Nicolas Coolman (2017/12/24)
~ Démarré par dadi (Administrator) (2017/12/24 17:20:18)
~ Web: https://www.nicolascoolman.com
~ Blog: https://nicolascoolman.eu/
~ Facebook: https://www.facebook.com/nicolascoolman1
~ Certificate ZHPDiag: Legal
~ Etat de la version: Version OK
~ Mode: Scanner
~ Rapport: C:\Users\dadi\Desktop\ZHPDiag.txt
~ Rapport: C:\Users\dadi\AppData\Roaming\ZHP\ZHPDiag.txt
~ UAC: Activate
~ Démarrage du système: Normal (Normal boot)
Windows 7 Professional, 32-bit (Build 7600) =>.Microsoft Corporation

---\\ Navigateurs Internet (2) - 0s
~ GCIE: Google Chrome v63.0.3239.84
~ MSIE: Internet Explorer v8.0.7600.16385

---\\ Informations sur les produits Windows (4) - 3s
~ Windows Server License Manager Script : OK
~ Licence Script File Génération : OK
Windows Automatic Updates : OK
Windows Activation Technologies : KO

---\\ Logiciels de protection (1) - 3s
ESET NOD32 Antivirus v10.1.219.1 (Protection)

---\\ Logiciels de protection et autres (Superflus) (1) - 3s
~ McAfee Security Scan Plus v3.11.163.2 (Superfluous)

---\\ Surveillance de Logiciels (2) - 3s
~ Adobe Flash Player 19 NPAPI (Surveillance)
~ Adobe Reader XI (Surveillance)

---\\ Logiciels de partage P2P (1) - 3s
~ µTorrent v3.5.0.44294 (P2P)

---\\ Informations sur le système (6) - 1s
~ Operating System: x86 Family 6 Model 23 Stepping 6, GenuineIntel
~ Operating System: 32-bit
~ Boot mode: Normal (Normal boot)
Total RAM: 1047.8 MB (5% free) : ATTENTION =>Warning RAM
System Restore: Activé (Enable)
System drive C: has 2 GB (4%) free of 49 GB : ATTENTION =>Warning Disk Space

---\\ Mode de connexion au système (3) - 0s
~ Computer Name: SAID
~ User Name: dadi
~ Logged in as Administrator

---\\ Enumération des unités disques (2) - 0s
~ Drive C: has 2 GB free of 49 GB (System)
~ Drive E: has 109 GB free of 188 GB

---\\ Etat du Centre de Sécurité Windows (11) - 0s
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: Modified
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: OK
[HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK

---\\ Recherche particulière de fichiers génériques (25) - 4s
[MD5.2626FC9755BE22F805D3CFA0CE3EE727] - 31/10/2009 - (.Microsoft Corporation - Explorateur Windows.) -- C:\Windows\Explorer.exe [2614272] =>.Microsoft Corporation
[MD5.51138BEEA3E2C21EC44D0932C71762A8] - 14/07/2009 - (.Microsoft Corporation - Processus hôte Windows (Rundll32).) -- C:\Windows\System32\rundll32.exe [44544] =>.Microsoft Corporation
[MD5.B5C5DCAD3899512020D135600129D665] - 14/07/2009 - (.Microsoft Corporation - Application de démarrage de Windows.) -- C:\Windows\System32\Wininit.exe [96256] =>.Microsoft Corporation
[MD5.0D874F3BC751CC2198AF2E6783FB8B35] - 14/07/2009 - (.Microsoft Corporation - Extensions Internet pour Win32.) -- C:\Windows\System32\wininet.dll [977920] =>.Microsoft Corporation
[MD5.37CDB7E72EB66BA85A87CBE37E7F03FD] - 28/10/2009 - (.Microsoft Corporation - Application d’ouverture de session Windows.) -- C:\Windows\System32\Winlogon.exe [285696] =>.Microsoft Corporation
[MD5.6DD03008047432CD4192DD869CBBC485] - 14/07/2009 - (.Microsoft Corporation - Microsoft Tablet PC Component.) -- C:\Windows\System32\sppcomapi.dll [1536] =>.Microsoft Corporation
[MD5.6D5A49D6479EB753C7879F73A4C35E0F] - 14/07/2009 - (.Microsoft Corporation - DNS DLL de l’API Client.) -- C:\Windows\System32\dnsapi.dll [269824] =>.Microsoft Corporation
[MD5.D8714A5FB3141F8226D16861F20C5AC4] - 14/07/2009 - (.Microsoft Corporation - DLL client de l’API uilisateur de Windows m.) -- C:\Windows\System32\fr-FR\user32.dll.mui [19968] =>.Microsoft Corporation
[MD5.DDC040FDB01EF1712A6B13E52AFB104C] - 14/07/2009 - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) -- C:\Windows\System32\drivers\AFD.sys [338944] =>.Microsoft Corporation
[MD5.338C86357871C167A96AB976519BF59E] - 14/07/2009 - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) -- C:\Windows\System32\drivers\atapi.sys [21584] =>.Microsoft Windows®
[MD5.77EA11B065E0A8AB902D78145CA51E10] - 14/07/2009 - (.Microsoft Corporation - CD-ROM File System Driver.) -- C:\Windows\System32\drivers\Cdfs.sys [70656] =>.Microsoft Corporation
[MD5.BA6E70AA0E6091BC39DE29477D866A77] - 14/07/2009 - (.Microsoft Corporation - SCSI CD-ROM Driver.) -- C:\Windows\System32\drivers\Cdrom.sys [108544] =>.Microsoft Corporation
[MD5.83D1ECEA8FAAE75604C0FA49AC7AD996] - 27/04/2011 - (.Microsoft Corporation - DFS Namespace Client Driver.) -- C:\Windows\System32\drivers\DfsC.sys [78336] =>.Microsoft Corporation
[MD5.717A2207FD6F13AD3E664C7D5A43C7BF] - 14/07/2009 - (.Microsoft Corporation - High Definition Audio Bus Driver.) -- C:\Windows\System32\drivers\HDAudBus.sys [108544] =>.Microsoft Corporation
[MD5.F151F0BDC47F4A28B1B20A0818EA36D6] - 14/07/2009 - (.Microsoft Corporation - Pilote de port i8042.) -- C:\Windows\System32\drivers\i8042prt.sys [80896] =>.Microsoft Corporation
[MD5.A5FA468D67ABCDAA36264E463A7BB0CD] - 14/07/2009 - (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\System32\drivers\IpNat.sys [101888] =>.Microsoft Corporation
[MD5.F4A054BE78AF7F410129C4B64B07DC9B] - 14/07/2009 - (.Microsoft Corporation - Windows NT SMB Minirdr.) -- C:\Windows\System32\drivers\MRxSmb.sys [123392] =>.Microsoft Corporation
[MD5.DD52A733BF4CA5AF84562A5E2F963B91] - 14/07/2009 - (.Microsoft Corporation - MBT Transport driver.) -- C:\Windows\System32\drivers\netBT.sys [187904] =>.Microsoft Corporation
[MD5.3795DCD21F740EE799FB7223234215AF] - 14/07/2009 - (.Microsoft Corporation - Pilote du système de fichiers NT.) -- C:\Windows\System32\drivers\ntfs.sys [1210432] =>.Microsoft Windows®
[MD5.2EA877ED5DD9713C5AC74E8EA7348D14] - 14/07/2009 - (.Microsoft Corporation - Pilote de port parallèle.) -- C:\Windows\System32\drivers\Parport.sys [79360] =>.Microsoft Corporation
[MD5.D9F91EAFEC2815365CBE6D167E4E332A] - 14/07/2009 - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) -- C:\Windows\System32\drivers\Rasl2tp.sys [78848] =>.Microsoft Corporation
[MD5.C5FF95883FFEF704D50C40D21CFB3AB5] - 14/07/2009 - (.Microsoft Corporation - Microsoft RDP Device redirector.) -- C:\Windows\System32\drivers\rdpdr.sys [133120] =>.Microsoft Corporation
[MD5.3E21C083B8A01CB70BA1F09303010FCE] - 14/07/2009 - (.Microsoft Corporation - SMB Transport driver.) -- C:\Windows\System32\drivers\smb.sys [71168] =>.Microsoft Corporation
[MD5.CB39E896A2A83702D1737BFD402B3542] - 14/07/2009 - (.Microsoft Corporation - TDI Translation Driver.) -- C:\Windows\System32\drivers\tdx.sys [74240] =>.Microsoft Corporation
[MD5.59F06B4968E58BC83DFC56CA4517960E] - 06/09/2012 - (.Microsoft Corporation - Pilote de cliché instantané du volume.) -- C:\Windows\System32\drivers\volsnap.sys [245616] =>.Microsoft Windows®

---\\ Liste des services NT non Microsoft et non désactivés (15) - 5s
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe =>.Adobe Systems, Incorporated®
O23 - Service: AppecivreSpA (AppecivreSpA) . (...) - C:\ProgramData\AppecivreSpA\AppecivreSpA.exe (.not file.) =>PUP.Optional.Youndoo
O23 - Service: Apple Mobile Device (Apple Mobile Device) . (.Apple Inc. - MobileDeviceService.) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe =>.Apple Inc.®
O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe =>.Apple Inc.®
O23 - Service: DCHP (DCHP) . (...) - C:\ProgramData\DCHP\DCHP.exe (.not file.) =>PUP.Optional.Salus
O23 - Service: ESET Service (ekrn) . (.ESET - ESET Service.) - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe =>.ESET, spol. s r.o.®
O23 - Service: globalUpdate Update Service (globalUpdate) (globalUpdate) . (...) - C:\Program Files\globalUpdate\Update\globalupdate.exe (.not file.) =>Adware.GlobalUpdate
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe =>.Google Inc®
O23 - Service: SettingsGuard (SettingsGuard) . (...) - C:\Users\dadi\AppData\Roaming\SettingsGuard\updater.exe (.not file.)
O23 - Service: spdfrmon (spdfrmon) . (...) - C:\Program Files\SpeedItup Free\spdfrmon.exe (.not file.) =>PUP.Optional.SpeeditUp
O23 - Service: Statity (Statity) . (...) - C:\ProgramData\Statity\Statity.exe (.not file.) =>PUP.Optional.Salus
O23 - Service: (TenorshareReibootService) . (...) - C:\Users\dadi\Desktop\ReiBoot\TenorshareReibootService.exe (.not file.)
O23 - Service: WinZip Smart Monitor Service (WinZip Smart Monitor Service) . (.Copyright © 1991-2017 Corel Corporation. All Rights R - WinZip Smart Monitor Service.) - C:\Program Files\WinZip Smart Monitor\WinZip Smart Monitor Service.exe
O23 - Service: Wondershare Application Framework Service (WsAppService) . (.Wondershare - Wondershare Passport.) - C:\Program Files\Wondershare\WAF\2.4.3.225\WsAppService.exe =>.Wondershare Technology Co.,Ltd®
O23 - Service: Wondershare Driver Install Service (WsDrvInst) . (.Wondershare - MobileGo Driver Installer.) - C:\Program Files\Wondershare\dr.fone toolkit for iOS\Library\DriverInstaller\DriverInstall.exe =>.Wondershare Technology Co.,Ltd®

---\\ Services non Microsoft (SR=Démarré,SS=Stoppé) (13) - 26s
SR - Auto [27/09/2017] [ 83984] Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe =>.Adobe Systems, Incorporated®
SS - Demand [21/10/2015] [ 269000] Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe =>.Adobe Systems Incorporated®
SR - Auto [22/09/2016] [ 67384] Apple Mobile Device (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe =>.Apple Inc.®
SR - Auto [12/08/2015] [ 390416] Service Bonjour (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe =>.Apple Inc.®
SR - Auto [13/06/2017] [ 2069936] ESET Service (ekrn) . (.ESET.) - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe =>.ESET, spol. s r.o.®
SS - Auto [05/03/2016] [ 154440] Service Google Update (gupdate) (gupdate) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe =>.Google Inc®
SS - Demand [05/03/2016] [ 154440] Service Google Update (gupdatem) (gupdatem) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe =>.Google Inc®
SR - Demand [07/04/2015] [ 540968] Service de l’iPod (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe =>.Apple Inc.®
SS - Demand [31/07/2015] [ 235696] McAfee Security Scan Component Host Service (McComponentHostService) . (.McAfee, Inc..) - C:\Program Files\McAfee Security Scan\3.11.163\McCHSvc.exe =>.McAfee, Inc.®
SS - Demand [19/11/2012] [ 489256] Steam Client Service (Steam Client Service) . (.Valve Corporation.) - C:\Program Files\Common Files\Steam\SteamService.exe =>.Valve®
SR - Auto [11/04/2017] [ 447488] WinZip Smart Monitor Service (WinZip Smart Monitor Service) . (.Copyright © 1991-2017 Corel Corporation. All Rights R.) - C:\Program Files\WinZip Smart Monitor\WinZip Smart Monitor Service.exe
SR - Auto [05/05/2017] [ 473824] Wondershare Application Framework Service (WsAppService) . (.Wondershare.) - C:\Program Files\Wondershare\WAF\2.4.3.225\WsAppService.exe =>.Wondershare Technology Co.,Ltd®
SR - Auto [28/06/2017] [ 119008] Wondershare Driver Install Service (WsDrvInst) . (.Wondershare.) - C:\Program Files\Wondershare\dr.fone toolkit for iOS\Library\DriverInstaller\DriverInstall.exe =>.Wondershare Technology Co.,Ltd®

---\\ Tâches planifiées en automatique (Registre) (47) - 11s
O38 - TASK: {018142FE-2875-4029-AC78-17B47627A8E4}[\Microsoft\Windows\Media Center\RecordingRestart] - (...) -- C:\Windows\ehome\ehrec (.not file.) [0] (.Orphan.) =>.SUP.Orphan
O38 - TASK: {05C48F77-AE3F-471D-BC6A-7E1BF8AE22FD}[\GoogleUpdateTaskMachineUA] - (.Google Inc. - Programme d'installation de Google.) -- C:\Program Files\Google\Update\GoogleUpdate.exe [154440] =>.Google Inc.
O38 - TASK: {05EBA29E-925C-48B9-A416-5CBF410D4E1D}[\{81B65187-F28A-41DB-A8E6-CE5C15DC9C8F}] - (...) -- C:\Users\dadi\Desktop\ReiBoot\ReiBoot.exe (.not file.) [0] (.Orphan.) =>.SUP.Orphan
O38 - TASK: {18621021-D747-492C-82F2-1BB61497B24F}[\GoogleUpdateTaskMachineCore] - (.Google Inc. - Programme d'installation de Google.) -- C:\Program Files\Google\Update\GoogleUpdate.exe [154440] =>.Google Inc.
O38 - TASK: {19FB1F71-BC11-4D6B-BE3A-667FF5F8F027}[\{B4AA00A1-4802-4B70-A317-1E18C4C4E5FF}] - (...) -- C:\Users\imahdouche\Downloads\iTunesSetup(1).exe (.not file.) [0] (.Orphan.) =>.SUP.Orphan
O38 - TASK: {1A5E03E2-8B47-4B9F-B7FD-3406B7A8D8B4}[\WinZip Update Notifier] - (.WinZip - WinZip Update Notifier.) -- C:\Program Files\WinZip\WZUpdateNotifier.exe [1580032] =>.WinZip
O38 - TASK: {201F2D0E-E994-47B6-B8D7-F1DBF02675D0}[\{27E17287-C362-42B6-BAB5-CC02BBAEA5B5}] - (...) -- E:\Nouveau dossier (3)\hitman5\Hitman Absolution\HMA.exe (.not file.) [0] (.Orphan.) =>.SUP.Orphan
O38 - TASK: {254CAD56-B4AB-40C6-83A8-5E51CD6FD443}[\{871ABC40-A7F2-43AD-BC47-FCBAFB097948}] - (...) -- E:\Nouveau dossier (3)\hitman5\Hitman Absolution\HMA.exe (.not file.) [0] (.Orphan.) =>.SUP.Orphan
O38 - TASK: {265A2397-9434-4118-BE66-0D7C03423FF1}[\{D4A9ADD3-A724-468D-B234-F734FE239D70}] - (...) -- E:\Disque local\Downloads\iTunesSetup (1).exe (.not file.) [0] (.Orphan.) =>.SUP.Orphan
O38 - TASK: {38C88039-DD3C-4774-B66B-B9774303DAE3}[\{72BB4C9B-EF58-457E-B431-4C5B3332B08C}] - (...) -- E:\Disque local\Downloads\iTunesSetup (1).exe (.not file.) [0] (.Orphan.) =>.SUP.Orphan
O38 - TASK: {3F84D383-9A66-4487-BD47-D2FE5DF94053}[\{49604084-9CCE-420E-B27E-483D2411B914}] - (...) -- C:\Users\dadi\Desktop\ReiBoot\ReiBoot.exe (.not file.) [0] (.Orphan.) =>.SUP.Orphan
O38 - TASK: {443D8EBE-24FA-4056-8398-7E9FBFF9912A}[\{F5276918-297B-45C3-89E5-358B027E5536}] - (...) -- E:\Nouveau dossier (2)\GTA\Rockstar Games\Grand Theft Auto IV\Regsetup.exe (.not file.) [0] (.Orphan.) =>.SUP.Orphan
O38 - TASK: {4AAFA7AE-9942-45CB-BE02-DA8957556044}[\Opera scheduled Autoupdate 1432732736] - (...) -- C:\Program Files\Opera\launcher.exe (.not file.) [0] (.Orphan.) =>.SUP.Orphan
O38 - TASK: {4ACB5587-F4C2-421B-A5D4-0D20869154DD}[\{6633D853-75E2-40A8-A903-9377D96AF918}] - (...) -- C:\Users\dadi\Desktop\frenchradeon\SMoKE 2d League Installer.exe (.not file.) [0] (.Orphan.) =>.SUP.Orphan
O38 - TASK: {4F3B8DD9-2464-46C0-AFD1-1FBB3191DEA4}[\{D5A973F0-E599-4ED5-8FF5-BD66E940B349}] - (...) -- E:\Nouveau dossier (3)\Nouveau dossier\pache6.0\Nouveau dossier\Smoke Datapack.exe (.not file.) [0] (.Orphan.) =>.SUP.Orphan
O38 - TASK: {54CA5948-EF49-448A-9486-2B1BB29F6458}[\{AED19244-48CA-4293-8239-E00A265C4736}] - (...) -- C:\Program Files\YTDownloader\YTDUninstall.exe (.not file.) [0] (.Orphan.) =>Adware.YTDownloader
O38 - TASK: {616A6EB5-908F-4D92-9396-AC8001605E50}[\0012F574] - (...) -- C:\Users\imahdouche\AppData\Roaming\SettingsGuard\updater.exe (.not file.) [0] (.Orphan.) =>.SUP.Orphan
O38 - TASK: {6DDE38BF-6A6A-4330-87A3-D30BF4BDF37B}[\Microsoft\Windows\Media Center\StartRecording] - (...) -- C:\Windows\ehome\ehrec (.not file.) [0] (.Orphan.) =>.SUP.Orphan
O38 - TASK: {740C6810-BC36-41E1-B8A5-6661C7A1A58A}[\Microsoft\Windows\Media Center\mcupdate_scheduled] - (...) -- C:\Windows\ehome\mcupdate (.not file.) [0] (.Orphan.) =>.SUP.Orphan
O38 - TASK: {8692CF2F-F88B-4E7B-9783-EB7BF5809D96}[\{57016114-B7BF-49FF-8284-21CCE14F0822}] - (...) -- C:\war\Men of War - Assault Squad 2\mowas_2.exe (.not file.) [0] (.Orphan.) =>.SUP.Orphan
O38 - TASK: {8840A0AE-50FE-4528-A03B-C5DEC70DDFD5}[\{FD6C6761-1984-4E54-A06B-66B416968202}] - (...) -- E:\Nouveau dossier (3)\Nouveau dossier\Assassin's Creed Liberation HD\GDFInstall.exe (.not file.) [0] (.Orphan.) =>.SUP.Orphan
O38 - TASK: {88C172E5-09A6-4965-B10E-8085D16E60F4}[\{3D364D1D-14D6-4C87-B647-8114561F72F0}] - (...) -- E:\Nouveau dossier (2)\Nouveau dossier\Rockstar Games\EFLC\Regsetup.exe (.not file.) [0] (.Orphan.) =>.SUP.Orphan
O38 - TASK: {90ABB541-15BB-4E46-B97D-DF8497D187EF}[\{6FC13727-2CCB-4B88-91D8-BDC9CA0CA94E}] - (...) -- C:\war\Men of War - Assault Squad 2\mowas_2.exe (.not file.) [0] (.Orphan.) =>.SUP.Orphan
O38 - TASK: {9AB96C3B-675E-4BE7-B3C0-A4165DAFDFE7}[\{75640B70-1BF8-4C5A-A8CB-E7CCAEF67210}] - (...) -- E:\Nouveau dossier (2)\Nouveau dossier\Carnage Racing\_CommonRedist\vcredist\2010\vcredist_x86.exe (.not file.) [0] (.Orphan.) =>.SUP.Orphan
O38 - TASK: {9B87A265-436A-4B97-94F1-3777A2AC0CE6}[\{512CA48F-D09F-4B2A-ACD9-A53C21687798}] - (...) -- C:\Users\dadi\AppData\Local\Temp\vcredist_x86.exe (.not file.) [0] (.Orphan.) =>.SUP.Orphan
O38 - TASK: {9EB3A7DC-B0DF-4AE0-B695-4C366ED1C6AA}[\{74ECD7CA-B928-40AE-9D92-27FC02A3393D}] - (...) -- C:\Users\dadi\Desktop\SMoKE 2d League Installer.exe (.not file.) [0] (.Orphan.) =>.SUP.Orphan
O38 - TASK: {AA2E765D-0209-443E-BE2E-91C9D1BC70C4}[\{5CC4BBBF-5E9A-45B1-9009-B056A05CA7AC}] - (...) -- F:\PESEdit_2013_Patch_1_0\Installer.exe (.not file.) [0] (.Orphan.) =>.SUP.Orphan
O38 - TASK: {AB516A1F-7ED3-4E09-8FA2-246B18BE1AD1}[\Start Registry Reviver for dadi-PC@dadi(logon)] - (...) -- C:\Program Files\ReviverSoft\Registry Reviver\RegistryReviver.exe (.not file.) [0] (.Orphan.) =>PUP.Optional.RegistryReviver
O38 - TASK: {ABB787ED-CF68-439B-92D1-C26B44D04828}[\Adobe Acrobat Update Task] - (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1171480] =>.Adobe Systems Incorporated
O38 - TASK: {B22CD51B-5312-4DE5-AD82-D7B09A5692DD}[\{7D08D6A3-D06E-4522-9B3C-923576510B14}] - (...) -- E:\Disque local\Downloads\iTunesSetup (1).exe (.not file.) [0] (.Orphan.) =>.SUP.Orphan
O38 - TASK: {BA00404C-949D-4EAC-99C3-22CD7B8E9EFA}[\{236301E7-8835-402D-8DDF-136413C8E854}] - (...) -- C:\war\Men of War - Assault Squad 2\mowas_2.exe (.not file.) [0] (.Orphan.) =>.SUP.Orphan
O38 - TASK: {BA44088D-9805-412F-8DCC-BABEB935A7F4}[\{3FF40CF3-FF69-4CFA-A1CA-BBCE7572AFE1}] - (...) -- C:\Users\dadi\Downloads\epson375865eu.exe (.not file.) [0] (.Orphan.) =>.SUP.Orphan
O38 - TASK: {BB757145-4D11-4D0A-B785-B1E8C9B97A76}[\Beach Builder] - (...) -- C:\Users\dadi\AppData\Local\Beach Builder\Bin\BeachBuilder.dll (.not file.) [0] (.Orphan.) =>.SUP.Orphan
O38 - TASK: {BE4915BC-63C1-402F-9633-464069481542}[\{620DEE6B-3B26-4319-B5CC-474423FE9066}] - (...) -- F:\Setup.exe (.not file.) [0] (.Orphan.) =>.SUP.Orphan
O38 - TASK: {C0EA483A-9DE3-431C-BE4B-776089094A5B}[\{30E62BA8-2580-47BC-BD21-953A658C4E90}] - (...) -- C:\war\Men of War - Assault Squad 2\mowas_2.exe (.not file.) [0] (.Orphan.) =>.SUP.Orphan
O38 - TASK: {C5584071-2533-48AA-A34E-F6D3D9A11C1B}[\{36EBA747-DEFA-4DBB-B957-C9F270F17D13}] - (...) -- C:\Users\dadi\Downloads\epson327610eu.exe (.not file.) [0] (.Orphan.) =>.SUP.Orphan
O38 - TASK: {CE1AF1EA-06EA-4614-BE5F-577FD9E38CC8}[\Microsoft\Windows\Media Center\mcupdate] - (...) -- C:\Windows\ehome\mcupdate (.not file.) [0] (.Orphan.) =>.SUP.Orphan
O38 - TASK: {CE7ED20D-2D2D-422B-A60B-4799509C5DF9}[\{31A84EAA-3D33-4273-830E-6B284C4B5DCE}] - (...) -- E:\Nouveau dossier (2)\GTA\Rockstar Games\EFLC\Regsetup.exe (.not file.) [0] (.Orphan.) =>.SUP.Orphan
O38 - TASK: {D035DBE6-A22D-4C1E-A21F-5FF28A616ED1}[\{6F74B50A-1D10-4C1F-911E-592843C4AAED}] - (...) -- C:\Users\imahdouche\Downloads\iTunesSetup(1).exe (.not file.) [0] (.Orphan.) =>.SUP.Orphan
O38 - TASK: {D75F3BD0-9286-4160-A42B-6189DD9B8CC1}[\Adobe Flash Player Updater] - (.Adobe Systems Incorporated - Adobe® Flash® Player Update Service 19.0 r0.) -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe [269000] =>.Adobe Systems Incorporated
O38 - TASK: {E4DC8C2C-69A4-4EE4-8605-5CE91033698B}[\{1B832634-C7B5-4828-9543-C25CEE7AB079}] - (...) -- F:\Redist\vcredist_x86.exe (.not file.) [0] (.Orphan.) =>.SUP.Orphan
O38 - TASK: {EAB25C32-C87C-468D-815C-292CD375467E}[\{74BC2630-3548-4FBE-8E5C-A7A2AA27F498}] - (...) -- E:\Program Files\KONAMI\Pro Evolution Soccer 2014\GOLD v6.0.exe (.not file.) [0] (.Orphan.) =>.SUP.Orphan
O38 - TASK: {ED5A0462-B778-4F6C-92BA-7AE77F16E6CB}[\{DCABEB26-8FD0-42A9-86DD-FB9D99EE7155}] - (...) -- C:\Users\imahdouche\Downloads\iTunesSetup(1).exe (.not file.) [0] (.Orphan.) =>.SUP.Orphan
O38 - TASK: {EEF17AC7-78D9-49DA-8044-7C60BE039D8A}[\{D4B2E7A2-A363-4AC7-8B62-166CEE77217E}] - (...) -- C:\Users\dadi\Downloads\epson375859eu.exe (.not file.) [0] (.Orphan.) =>.SUP.Orphan
O38 - TASK: {F46AA5A9-931E-4930-B107-C0AAA568A09C}[\{7018E5F4-3E8F-4F65-9F12-852635E68B1A}] - (...) -- C:\Users\imahdouche\Downloads\iTunesSetup(1).exe (.not file.) [0] (.Orphan.) =>.SUP.Orphan
O38 - TASK: {F4F973EC-D718-49C9-A2FC-8A3D07973356}[\{0CAF82D0-DDFB-4869-81B7-115243857ECD}] - (...) -- C:\Users\dadi\Desktop\ReiBoot\ReiBoot.exe (.not file.) [0] (.Orphan.) =>.SUP.Orphan
O38 - TASK: {FA4AE5F9-4BD6-4BB8-8269-51829286DAEA}[\{5DCA7247-14C1-4198-8427-7B67C7103B9F}] - (...) -- E:\Nouveau dossier\ôp\Hitman Absolution\HMA.exe (.not file.) [0] (.Orphan.) =>.SUP.Orphan

---\\ Applications lancées au démarrage du système (16) - 1s
O4 - HKLM\..\Run: [EPSON Stylus DX3800 Series] . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\Windows\System32\spool\drivers\w32x86\3\E_FATIACE.EXE =>.Seiko Epson Corporation
O4 - HKLM\..\Run: [WinZip UN] . (.WinZip - WinZip Update Notifier.) -- C:\Program Files\WinZip\WZUpdateNotifier.exe =>.WinZip
O4 - HKLM\..\Run: [WinZip FAH] . (.WinZip Computing, S.L. - File Association Helper.) -- C:\Program Files\WinZip\FAHConsole.exe =>.WinZip Computing LLC®
O4 - HKLM\..\Run: [WinZip PreLoader] . (.WinZip Computing, S.L. - WinZip Preloader.) -- C:\Program Files\WinZip\WzPreloader.exe =>.Corel Corporation®
O4 - HKLM\..\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe =>.Apple Inc.®
O4 - HKLM\..\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe =>.Oracle America, Inc.®
O4 - HKCU\..\Run: [DAEMON Tools Lite] . (.Disc Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files\DAEMON Tools Lite\DTLite.exe =>.Disc Soft Ltd®
O4 - HKCU\..\Run: [uTorrent] . (.BitTorrent Inc. - µTorrent.) -- C:\Users\dadi\AppData\Roaming\uTorrent\uTorrent.exe =>.BitTorrent Inc®
O4 - HKCU\..\Run: [ccleaner] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner.exe =>.Piriform Ltd®
O4 - HKCU\..\RunOnce: [Application Restart #1] . (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-21-1792745235-2251400947-1069589201-1000\..\Run: [DAEMON Tools Lite] . (.Disc Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files\DAEMON Tools Lite\DTLite.exe =>.Disc Soft Ltd®
O4 - HKUS\S-1-5-21-1792745235-2251400947-1069589201-1000\..\Run: [uTorrent] . (.BitTorrent Inc. - µTorrent.) -- C:\Users\dadi\AppData\Roaming\uTorrent\uTorrent.exe =>.BitTorrent Inc®
O4 - HKUS\S-1-5-21-1792745235-2251400947-1069589201-1000\..\Run: [ccleaner] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner.exe =>.Piriform Ltd®
O4 - HKUS\S-1-5-21-1792745235-2251400947-1069589201-1000\..\RunOnce: [Application Restart #1] . (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc®

---\\ Processus lancés (23) - 5s
[MD5.F33D2C0FA88E3857F6D7718368152935] - (.ESET - ESET Service.) -- C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2069936] [PID.684] =>.ESET, spol. s r.o.®
[MD5.38622FFE9369D3EC01C0097235BD9279] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [83984] [PID.1436] =>.Adobe Systems, Incorporated®
[MD5.82812A27B150D765D03B0074A8257259] - (.Apple Inc. - MobileDeviceService.) -- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [67384] [PID.1460] =>.Apple Inc.®
[MD5.5EA9C80F18CBC393EA7D9A2991DED4B5] - (.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe [390416] [PID.1764] =>.Apple Inc.®
[MD5.AB7D31DB100A8CF944914761B4E9CBFE] - (.Copyright © 1991-2017 Corel Corporation. All Rights R - WinZip Smart Monitor Service.) -- C:\Program Files\WinZip Smart Monitor\WinZip Smart Monitor Service.exe [447488] [PID.208]
[MD5.483AB8EFFAA0A38A93C2E2A754BB511C] - (.Wondershare - Wondershare Passport.) -- C:\Program Files\Wondershare\WAF\2.4.3.225\WsAppService.exe [473824] [PID.1792] =>.Wondershare Technology Co.,Ltd®
[MD5.900236357482B00944826354EEC6B93F] - (.Google Inc. - Google Crash Handler.) -- C:\Program Files\Google\Update\1.3.33.7\GoogleCrashHandler.exe [288848] [PID.1864] =>.Google Inc®
[MD5.EB0A56B369AA6B1836240A2CE61406AB] - (.ESET - ESET Main GUI.) -- C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [6587520] [PID.1580] =>.ESET, spol. s r.o.®
[MD5.073AB8D67473D80BBF4D8416F309BFA2] - (.Wondershare - MobileGo Driver Installer.) -- C:\Program Files\Wondershare\dr.fone toolkit for iOS\Library\DriverInstaller\DriverInstall.exe [119008] [PID.2216] =>.Wondershare Technology Co.,Ltd®
[MD5.21D563F83CD7D757846C6E4010AA4F6E] - (.WinZip Computing, S.L. - WinZip Preloader.) -- C:\Program Files\WinZip\WzPreloader.exe [124360] [PID.3020] =>.Corel Corporation®
[MD5.BEEE454B19807941236671EFE685DB1B] - (.WinZip Computing, S.L. - File Association Helper.) -- C:\Program Files\WinZip\FAHWindow32.exe [178368] [PID.3028] =>.WinZip Computing LLC®
[MD5.20769F05B2A6EBF78CF3D82ED0063236] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe [157480] [PID.3036] =>.Apple Inc.®
[MD5.AC581685C4CC890B42E9E9700014543D] - (.Oracle Corporation - Java Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe [587288] [PID.3052] =>.Oracle America, Inc.®
[MD5.AB910CE70C6FBCE9BE86C78B69B2AA23] - (.Corel Corporation - WinZip Smart Monitor.) -- C:\Program Files\WinZip Smart Monitor\WinZipSmartMonitor.exe [1824768] [PID.3340] =>.Corel Corporation
[MD5.FB7679FD086C60597F8C6929FF66FAC2] - (.Apple Inc. - iPodService Module (32-bit).) -- C:\Program Files\iPod\bin\iPodService.exe [540968] [PID.944] =>.Apple Inc.®
[MD5.A0DDE13E579F8350BFDF82CBB0E7982D] - (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [1367384] [PID.236] =>.Google Inc®
[MD5.A0DDE13E579F8350BFDF82CBB0E7982D] - (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [1367384] [PID.192] =>.Google Inc®
[MD5.A0DDE13E579F8350BFDF82CBB0E7982D] - (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [1367384] [PID.1108] =>.Google Inc®
[MD5.A0DDE13E579F8350BFDF82CBB0E7982D] - (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [1367384] [PID.5176] =>.Google Inc®
[MD5.A0DDE13E579F8350BFDF82CBB0E7982D] - (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [1367384] [PID.2800] =>.Google Inc®
[MD5.A0DDE13E579F8350BFDF82CBB0E7982D] - (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [1367384] [PID.4388] =>.Google Inc®
[MD5.A0DDE13E579F8350BFDF82CBB0E7982D] - (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [1367384] [PID.1556] =>.Google Inc®
[MD5.0C6F806E81EC1216404A52DCA2F017FB] - (.Nicolas Coolman - ZHPDiag.) -- E:\Disque local\Downloads\ZHPDiag3.exe [2955136] [PID.5996] =>.Nicolas Coolman

---\\ Google Chrome, Démarrage,Recherche,Extensions (17) - 0s
G0 - GCSP: Preferences [User Data\Default][HomePage] http://a.poki.com
G0 - GCSP: Preferences [User Data\Default][HomePage] http://b.scorecardresearch.com =>Hijacker.Browser
G0 - GCSP: Preferences [User Data\Default][HomePage] http://img.poki.com
G0 - GCSP: Preferences [User Data\Default][HomePage] http://poki.com
G0 - GCSP: Preferences [User Data\Default][HomePage] http://static.gamepilot.com
G0 - GCSP: Preferences [User Data\Default][HomePage] http://www.kidsafeseal.com
G0 - GCSP: Preferences [User Data\Default][HomePage] http://www.outbid.io
G0 - GCSP: Preferences [User Data\Default][HomePage] http://fonts.googleapis.com =>.Google Inc.
G0 - GCSP: Preferences [User Data\Default][HomePage] http://newtab.today
G0 - GCSP: Preferences [User Data\Default][HomePage] http://www.googletagmanager.com
G2 - GCE: Preference [dadi][User Data\Default] [aohghmighlieiainnegkcijnfilokake] =>.Google Inc. {Docs}
G2 - GCE: Preference [dadi][User Data\Default] [apdfllckaahabafndbhieahigkjlhalf] http://drive.google.com/ =>.Google Inc. {Drive}
G2 - GCE: Preference [dadi][User Data\Default] [blpcfgokakmgnkcojhhkbfbldkacnbeo] http://www.youtube.com =>.Youtube {Youtube}
G2 - GCE: Preference [dadi][User Data\Default] [ghbmnnjooekpmoecnnnilnnbdlolhkhi] =>.Google Inc. {Docs hors connexion}
G2 - GCE: Preference [dadi][User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] =>.Google Inc. {Wallet}
G2 - GCE: Preference [dadi][User Data\Default] [pjkljhegncpnkpknbcohdijeoejaedia] http://mail.google.com/ =>.Google Inc. {Gmail}
G2 - GCE: Preference [dadi][User Data\Default] [pkedcjkdefgpdelpbcmbmeomcjbeemfm] Chrome Media Router =>.Google Inc.

---\\ Firefox, Plugins,Demarrage,Recherche,Extensions (12) - 3s
P2 - EXT FILE: (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape.) -- C:\Program Files\Mozilla Firefox\Plugins\nppdf32.dll =>.Adobe Systems, Incorporated®
P2 - EXT FILE: (.Adobe Inc. - Acrobate Reader.) -- C:\Program Files\Mozilla Firefox\Plugins\nppdf32.FRA =>.Adobe Inc.
P2 - EXT FILE: (.Tracker Software Products Ltd. - PDF-XChange Viewer Netscape Gecko Plugin.) -- C:\Program Files\Mozilla Firefox\Plugins\npPDFXCviewNPPlugin.dll =>.Tracker Software Products (Canada) Ltd®
P2 - EXT FILE: (.findit - findit description.) -- C:\Users\dadi\AppData\Roaming\Mozilla\Firefox\Profiles\i6za124s.default\searchplugins\findit.xml =>PUP.Optional.SmartBar
P2 - EXT FILE: (...) -- C:\Users\dadi\AppData\Roaming\Mozilla\Firefox\Profiles\i6za124s.default\searchplugins\SearchAlgo.xml
P2 - EXT: (. - Cookie Cleaner.) -- C:\Users\dadi\AppData\Roaming\Mozilla\Firefox\Profiles\i6za124s.default\extensions\jid1-ieGDbvlarpkNNQ@jetpack
P2 - EXT: (. - jsonhandlegmailcom.) -- C:\Users\dadi\AppData\Roaming\Mozilla\Firefox\Profiles\i6za124s.default\extensions\jsonhandle@gmail.com
P2 - EXT: (. - prx24@fastprx.com.) -- C:\Users\dadi\AppData\Roaming\Mozilla\Firefox\Profiles\i6za124s.default\extensions\prx24@fastprx.com
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Macromed\Flash\NPSWF32_19_0_0_185.dll =>.Adobe Systems Incorporated
P2 - FPN: [HKLM] [@Apple.com/iTunes,version=1.0] - (.Apple Inc..) -- C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll =>.Apple Inc.
P2 - FPN: [HKLM] [@videolan.org/vlc,version=2.0.3] - (.VideoLAN.) -- C:\Program Files\VideoLAN\VLC\npvlc.dll =>.VideoLAN
P2 - FPN: [HKLM] [@videolan.org/vlc,version=2.0.5] - (.VideoLAN.) -- C:\Program Files\VideoLAN\VLC\npvlc.dll =>.VideoLAN

---\\ Opera, Démarrage,Recherche,Plugins (1) - 0s
B2 - EXT: [cihaednhfbocfdiflmpccekcmjepcnmb] C:\Users\dadi\AppData\Roaming\Opera Software\Opera Stable\Extensions\cihaednhfbocfdiflmpccekcmjepcnmb

---\\ Internet Explorer,Démarrage,Recherche,URLSearchHook (9) - 3s
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://%66%65%65%64.%68%65%6C%70%65%72%62%61%72.%63%6F%6D/?p=mKO_AwFzXIpYRYSttY34mamef947lyub11ECQdQoyJId6Uc4wSajfMMdB84kzFK8GXpf7yWPyqQS9U9wvFAmfbPSJeUfiL17Ca2x-FlFhPiN80TA0ojmacqExEjrx_YVZtvSVHtfBFjJsFjoKbm60RJKY85cYcQDab0-3n_JjF0ZXSaHmVGhKnbn5-90sM1en4r3Ti3V0w,, =>.SUP.Linkury
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://%66%65%65%64.%68%65%6c%70%65%72%62%61%72.%63%6f%6d/?p=mko_awfzxipyrystty34mamef947lyub11ecqdqoyjid6uc4wsajfmmdb84kzfk8gxpf7ywpyqqs9u9wvfamfbpsjeufil17ca2x-flfhpin_3rmnfnxxw8jo6fl1fkyypl9wqkasgo2_qrig2rtttpapy0zawvhentn5-dxquauhjtij7vor16o3yiphrjkftshapm7mw,,&q={searchterms} =>.SUP.Linkury
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = preserve =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk =>.Microsoft Corporation
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://%66%65%65%64.%68%65%6c%70%65%72%62%61%72.%63%6f%6d/?p=mko_awfzxipyrystty34mamef947lyub11ecqdqoyjid6uc4wsajfmmdb84kzfk8gxpf7ywpyqqs9u9wvfamfbpsjeufil17ca2x-flfhpin_3rmnfnxxw8jo6fl1fkyypl9wqkasgo2_qrig2rtttpapy0zawvhentn5-dxquauhjtij7vor16o3yiphrjkftshapm7mw,,&q={searchterms} =>.SUP.Linkury
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchUrl,Default = http://%66%65%65%64.%68%65%6c%70%65%72%62%61%72.%63%6f%6d/?p=mko_awfzxipyrystty34mamef947lyub11ecqdqoyjid6uc4wsajfmmdb84kzfk8gxpf7ywpyqqs9u9wvfamfbpsjeufil17ca2x-flfhpin_3rmnfnxxw8jo6fl1fkyypl9wqkasgo2_qrig2rtttpapy0zawvhentn5-dxquauhjtij7vor16o3yiphrjkftshapm7mw,,&q={searchterms} =>.SUP.Linkury
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = http://www.google.com =>.Google Inc.
R3 - URLSearchHook: (no name)[HKCU] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (8.00.7600.16385 (win7_rtm.090713-1255)) -- C:\Windows\System32\ieframe.dll =>.Microsoft Corporation

---\\ Internet Explorer,Proxy Management (7) - 0s
R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local;
R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 1
R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1
R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
R5 - HKLM\SYSTEM\CurrentControlSet\services\NlaSvc\Parameters\Internet\ManualProxies [] =>.Microsoft

---\\ Internet Explorer,IniFiles, Autoloading programs (3) - 0s
F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe (.Microsoft Corporation.) =>.Microsoft Corporation
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe (.Microsoft Corporation.) =>.Microsoft Corporation
F2 - REG:system.ini: VMApplet=C:\Windows\system32\SystemPropertiesPerformance.exe (.Microsoft Corporation.) =>.Microsoft Corporation

---\\ Etude du fichier hosts (1) - 0s
~ Le fichier hôte est sain (The hosts file is clean) (25)

---\\ Browser Helper Object de navigateur (BHO) (5) - 0s
O2 - BHO: CrossriderApp0048292 - {11111111-1111-1111-1111-110411821192} (.Orphan.) =>Adware.CrossRider
O2 - BHO: PXCIEaddin - {42DFA04F-0F16-418e-B80C-AB97A5AFAD39} . (.Tracker Softaware - .) -- C:\Program Files\Tracker Software\PDF-XChange 4\PXCIEAddin4.dll =>.Tracker Software Products (Canada) Ltd®
O2 - BHO: CostMin - {4F28A770-9A9A-4696-43F3-4551ED085B5C} (.Orphan.) =>PUP.Optional.Multiplug
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre1.8.0_40\bin\ssv.dll =>.Oracle America, Inc.®
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre1.8.0_40\bin\jp2ssv.dll =>.Oracle America, Inc.®

---\\ Internet Explorer, Barre d'outil (1) - 0s
O3 - Toolbar: PXCIEaddin - [HKLM]{42DFA04F-0F16-418e-B80C-AB97A5AFAD39} . (.Tracker Softaware - .) -- C:\Program Files\Tracker Software\PDF-XChange 4\PXCIEAddin4.dll =>.Tracker Software Products (Canada) Ltd®

---\\ Raccourcis Global Startup (75) - 7s
O4 - GS\Desktop [Administrateur]: Drakensang Online.lnk . (.Bigpoint GmbH - .) C:\Program Files\Drakensang Online\thinclient.exe =>.Bigpoint GmbH®
O4 - GS\Desktop [Administrateur]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\dadi\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman
O4 - GS\Quicklaunch [Administrateur]: dr.fone toolkit pour iOS.lnk . (.Wondershare - dr.fone toolkit loader.) C:\Program Files\Wondershare\dr.fone toolkit for iOS\DrFoneLoader.exe =>.Wondershare Technology Co.,Ltd®
O4 - GS\Quicklaunch [Administrateur]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\Quicklaunch [Administrateur]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files\Internet Explorer\iexplore.exe http://feed.helperbar.com =>PUP.Optional.Salus
O4 - GS\Quicklaunch [Administrateur]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) C:\Users\dadi\AppData\Roaming\uTorrent\uTorrent.exe =>.BitTorrent Inc®
O4 - GS\sendTo [Administrateur]: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\Windows\system32\WFS.exe /SendTo =>.Microsoft Corporation
O4 - GS\TaskBar [Administrateur]: imad+said+sarah (2).lnk . (.Google Inc. - Google Chrome.) C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\TaskBar [Administrateur]: imad+said+sarah.lnk . (.Google Inc. - Google Chrome.) C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\TaskBar [Administrateur]: Internet Explorer (2).lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files\Internet Explorer\iexplore.exe http://trustedsurf.com/ =>.Microsoft Corporation
O4 - GS\TaskBar [Administrateur]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files\Internet Explorer\iexplore.exe http://feed.helperbar.com =>PUP.Optional.Salus
O4 - GS\TaskBar [Administrateur]: PP助手5.0.lnk . (.广州爱禾网络技术有限公司 - PP助手.) C:\Program Files\PP助手5.0\pphelper5.exe
O4 - GS\TaskBar [Administrateur]: Start Zoom.lnk . (.Zoom Video Communications, Inc. - Zoom Meetings.) C:\Users\dadi\AppData\Roaming\Zoom\bin\Zoom.exe =>.Zoom Video Communications, Inc.®
O4 - GS\TaskBar [Administrateur]: Windows Explorer (2).lnk . (.Microsoft Corporation - Explorateur Windows.) C:\Windows\explorer.exe =>.Microsoft Corporation
O4 - GS\TaskBar [Administrateur]: Windows Explorer.lnk . (.Microsoft Corporation - Explorateur Windows.) C:\Windows\explorer.exe =>.Microsoft Corporation
O4 - GS\TaskBar [Administrateur]: Windows Media Player.lnk . (.Microsoft Corporation - Lecteur Windows Media.) C:\Program Files\Windows Media Player\wmplayer.exe /prefetch:1 =>.Microsoft Corporation
O4 - GS\Programs [Administrateur]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files\Internet Explorer\iexplore.exe http://feed.helperbar.com =>PUP.Optional.Salus
O4 - GS\Desktop [dadi]: Drakensang Online.lnk . (.Bigpoint GmbH - .) C:\Program Files\Drakensang Online\thinclient.exe =>.Bigpoint GmbH®
O4 - GS\Desktop [dadi]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\dadi\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman
O4 - GS\Quicklaunch [dadi]: dr.fone toolkit pour iOS.lnk . (.Wondershare - dr.fone toolkit loader.) C:\Program Files\Wondershare\dr.fone toolkit for iOS\DrFoneLoader.exe =>.Wondershare Technology Co.,Ltd®
O4 - GS\Quicklaunch [dadi]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\Quicklaunch [dadi]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files\Internet Explorer\iexplore.exe http://feed.helperbar.com =>PUP.Optional.Salus
O4 - GS\Quicklaunch [dadi]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) C:\Users\dadi\AppData\Roaming\uTorrent\uTorrent.exe =>.BitTorrent Inc®
O4 - GS\sendTo [dadi]: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\Windows\system32\WFS.exe /SendTo =>.Microsoft Corporation
O4 - GS\TaskBar [dadi]: imad+said+sarah (2).lnk . (.Google Inc. - Google Chrome.) C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\TaskBar [dadi]: imad+said+sarah.lnk . (.Google Inc. - Google Chrome.) C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\TaskBar [dadi]: Internet Explorer (2).lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files\Internet Explorer\iexplore.exe http://trustedsurf.com/ =>.Microsoft Corporation
O4 - GS\TaskBar [dadi]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files\Internet Explorer\iexplore.exe http://feed.helperbar.com =>PUP.Optional.Salus
O4 - GS\TaskBar [dadi]: PP助手5.0.lnk . (.广州爱禾网络技术有限公司 - PP助手.) C:\Program Files\PP助手5.0\pphelper5.exe
O4 - GS\TaskBar [dadi]: Start Zoom.lnk . (.Zoom Video Communications, Inc. - Zoom Meetings.) C:\Users\dadi\AppData\Roaming\Zoom\bin\Zoom.exe =>.Zoom Video Communications, Inc.®
O4 - GS\TaskBar [dadi]: Windows Explorer (2).lnk . (.Microsoft Corporation - Explorateur Windows.) C:\Windows\explorer.exe =>.Microsoft Corporation
O4 - GS\TaskBar [dadi]: Windows Explorer.lnk . (.Microsoft Corporation - Explorateur Windows.) C:\Windows\explorer.exe =>.Microsoft Corporation
O4 - GS\TaskBar [dadi]: Windows Media Player.lnk . (.Microsoft Corporation - Lecteur Windows Media.) C:\Program Files\Windows Media Player\wmplayer.exe /prefetch:1 =>.Microsoft Corporation
O4 - GS\Programs [dadi]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files\Internet Explorer\iexplore.exe http://feed.helperbar.com =>PUP.Optional.Salus
O4 - GS\Programs [Public]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files\Internet Explorer\iexplore.exe http://feed.helperbar.com =>PUP.Optional.Salus
O4 - GS\Accessories [Public]: Command Prompt.lnk . (.Microsoft Corporation - Interpréteur de commandes Windows.) C:\Windows\system32\cmd.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Notepad.lnk . (.Microsoft Corporation - Bloc-notes.) C:\Windows\system32\notepad.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Windows Explorer.lnk . (.Microsoft Corporation - Explorateur Windows.) C:\Windows\explorer.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files\Internet Explorer\iexplore.exe http://trustedsurf.com/ =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: Private Character Editor.lnk . (.Microsoft Corporation - Éditeur de caractères privés.) C:\Windows\system32\eudcedit.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Calculator.lnk . (.Microsoft Corporation - Calculatrice de Windows.) C:\Windows\system32\calc.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: displayswitch.lnk . (.Microsoft Corporation - Afficher le commutateur.) C:\Windows\system32\displayswitch.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Math Input Panel.lnk . (.Microsoft Corporation - Accessoire du panneau de saisie mathématiqu.) C:\Program Files\Common Files\Microsoft Shared\Ink\mip.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Mobility Center.lnk . (.Microsoft Corporation - Centre de mobilité Windows.) C:\Windows\system32\mblctr.exe /open =>.Microsoft Corporation
O4 - GS\Accessories [Public]: NetworkProjection.lnk . (.Microsoft Corporation - Connect to a Network Projector.) C:\Windows\system32\NetProj.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Paint.lnk . (.Microsoft Corporation - Paint.) C:\Windows\system32\mspaint.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Remote Desktop Connection.lnk . (.Microsoft Corporation - Connexion Bureau à distance.) C:\Windows\system32\mstsc.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Snipping Tool.lnk . (.Microsoft Corporation - Outil Capture.) C:\Windows\system32\SnippingTool.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Sound Recorder.lnk . (.Microsoft Corporation - Magnétophone Windows.) C:\Windows\system32\SoundRecorder.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Sticky Notes.lnk . (.Microsoft Corporation - Pense-bête.) C:\Windows\system32\StikyNot.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Sync Center.lnk . (.Microsoft Corporation - Microsoft Sync Center.) C:\Windows\System32\mobsync.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Welcome Center.lnk . (.Microsoft Corporation - Processus hôte Windows (Rundll32).) C:\Windows\system32\rundll32.exe %SystemRoot%\system32\OobeFldr.dll,ShowWelcomeCenter LaunchedBy_StartMenuShortcut =>..Microsoft Corporation
O4 - GS\Accessories [Public]: Wordpad.lnk . (.Microsoft Corporation - Application Windows Wordpad.) C:\Program Files\Windows NT\Accessories\wordpad.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: Character Map.lnk . (.Microsoft Corporation - Table des caractères.) C:\Windows\system32\charmap.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: dfrgui.lnk . (.Microsoft Corporation - Défragmenteur de disque Microsoft®.) C:\Windows\system32\dfrgui.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: Disk Cleanup.lnk . (.Microsoft Corporation - Gestionnaire de nettoyage de disque pour Wi.) C:\Windows\system32\cleanmgr.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: Resource Monitor.lnk . (.Microsoft Corporation - Moniteur de ressources et de performances.) C:\Windows\system32\perfmon.exe /res =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: System Information.lnk . (.Microsoft Corporation - Informations système.) C:\Windows\system32\msinfo32.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: System Restore.lnk . (.Microsoft Corporation - Restauration du système de Microsoft® Windo.) C:\Windows\system32\rstrui.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: Task Scheduler.lnk . (...) C:\Windows\system32\taskschd.msc /s =>..Microsoft Corporation
O4 - GS\SystemTools [Public]: Windows Easy Transfer Reports.lnk . (.Microsoft Corporation - Application post-migration de transfert de.) C:\Windows\system32\migwiz\postmig.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: Windows Easy Transfer.lnk . (.Microsoft Corporation - Application Transfert de fichiers et paramè.) C:\Windows\system32\migwiz\migwiz.exe =>.Microsoft Corporation
O4 - GS\ProgramsCommon [Public]: Adobe Reader XI.lnk . (...) C:\Windows\Installer\{AC76BA86-7AD7-1036-7B44-AB0000000001}\SC_Reader.ico =>.Adobe Inc.
O4 - GS\ProgramsCommon [Public]: Conseiller de mise à niveau vers Windows 7.lnk . (.Microsoft Corporation - Windows 7 Upgrade Advisor.) C:\Program Files\Microsoft Windows 7 Upgrade Advisor\WindowsUpgradeAdvisor.exe =>.Microsoft Corporation®
O4 - GS\ProgramsCommon [Public]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files\Google\Chrome\Application\chrome.exe http://feed.helperbar.com =>PUP.Optional.Salus
O4 - GS\ProgramsCommon [Public]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files\Internet Explorer\iexplore.exe http://feed.helperbar.com =>PUP.Optional.Salus
O4 - GS\ProgramsCommon [Public]: Media Center.lnk . (.Microsoft Corporation - Windows Media Center.) C:\Windows\ehome\ehshell.exe =>.Microsoft Corporation
O4 - GS\ProgramsCommon [Public]: Opera.lnk . (.Google Inc. - Google Chrome.) C:\Program Files\Google\Chrome\Application\chrome.exe http://feed.helperbar.com =>PUP.Optional.Salus
O4 - GS\ProgramsCommon [Public]: Sidebar.lnk . (.Microsoft Corporation - Gadgets du Bureau Windows.) C:\Program Files\Windows Sidebar\sidebar.exe /showgadgets =>.Microsoft Corporation
O4 - GS\ProgramsCommon [Public]: SumatraPDF.lnk . (.Krzysztof Kowalczyk - SumatraPDF.) C:\Program Files\SumatraPDF\SumatraPDF.exe =>.Krzysztof Kowalczyk®
O4 - GS\ProgramsCommon [Public]: Windows Anytime Upgrade.lnk . (.Microsoft Corporation - Interface utilisateur de Mise à niveau expr.) C:\Windows\system32\WindowsAnytimeUpgradeUI.exe =>.Microsoft Corporation
O4 - GS\ProgramsCommon [Public]: Windows DVD Maker.lnk . (.Microsoft Corporation - Création de DVD Windows.) C:\Program Files\DVD Maker\DVDMaker.exe =>.Microsoft Corporation
O4 - GS\ProgramsCommon [Public]: Windows Fax and Scan.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\Windows\system32\WFS.exe =>.Microsoft Corporation
O4 - GS\ProgramsCommon [Public]: Windows Media Player.lnk . (.Microsoft Corporation - Lecteur Windows Media.) C:\Program Files\Windows Media Player\wmplayer.exe /prefetch:1 =>.Microsoft Corporation
O4 - GS\ProgramsCommon [Public]: XPS Viewer.lnk . (.Microsoft Corporation - Visionneuse XPS.) C:\Windows\system32\xpsrchvw.exe =>.Microsoft Corporation

---\\ Modification Domaine/Adresses DNS (3) - 0s
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 =>.Local IP Adress
O17 - HKLM\System\CCS\Services\Tcpip\..\{77EEC478-849A-4BAF-852B-A23027729906}: DhcpNameServer = 192.168.1.1 =>.Local IP Adress
O17 - HKLM\System\CCS\Services\Tcpip\..\{D0C5F31D-12F7-4AD3-9218-5F5F9BB264D6}: DhcpNameServer = 172.20.10.1 =>.Private IP

---\\ Protocole additionnel (24) - 1s
O18 - Handler: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation
O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\MSVidCtl.dll =>.Microsoft Corporation
O18 - Handler: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll =>.Microsoft Corporation
O18 - Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation
O18 - Handler: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation
O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\System32\inetcomm.dll =>.Microsoft Corporation
O18 - Handler: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} . (.Microsoft Corporation - Microsoft® Help Data Services Module.) -- C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll =>.Microsoft Corporation®
O18 - Handler: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll =>.Microsoft Corporation
O18 - Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation
O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\MSVidCtl.dll =>.Microsoft Corporation
O18 - Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation
O18 - Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation®
O18 - Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation®
O18 - Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation®
O18 - Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation
O18 - Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation
O18 - Filter: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL =>.Microsoft Corporation®

---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (1) - 0s
O20 - AppInit_DLLs: . (...) - C:\ProgramData\AppecivreSpA\Jobflex.dll (.not file.)

---\\ Logiciels installés (32) - 13s
O42 - Logiciel: µTorrent - (.BitTorrent Inc..) [HKCU] -- uTorrent =>.BitTorrent Inc®
O42 - Logiciel: 18 WoS Across America - (.ValuSoft.) [HKLM] -- {BF9BA346-27AA-4EE0-8333-FEA5400D2AA0} =>.ValuSoft
O42 - Logiciel: 18 WoS Across America - (.ValuSoft.) [HKLM] -- InstallShield_{BF9BA346-27AA-4EE0-8333-FEA5400D2AA0} =>.ValuSoft
O42 - Logiciel: Adobe Flash Player 19 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX =>.Adobe Systems Incorporated®
O42 - Logiciel: Adobe Flash Player 19 NPAPI - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player NPAPI =>.Adobe Systems Incorporated®
O42 - Logiciel: Adobe Reader XI (11.0.23) - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-AB0000000001} =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe Refresh Manager - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-0804-1033-1959-001824245926} =>.Adobe Systems Incorporated
O42 - Logiciel: Apple Application Support (32 bits) - (.Apple Inc..) [HKLM] -- {9BA1A894-B42F-4805-BC8C-349C905A3930} =>.Apple Inc.
O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM] -- {D9F3D66A-9885-4DDD-A800-9DDF488359A1} =>.Apple Inc.
O42 - Logiciel: Beach Builder - (.Builder Food corp.) [HKCU] -- {9563BC59-9556-4805-8CD4-886781779D8D}
O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM] -- {D168AAD0-6686-47C1-B599-CDD4888B9D1A} =>.Apple Inc.
O42 - Logiciel: Citrix Online Launcher - (.Citrix.) [HKLM] -- {09DA5EE2-7E46-4DC4-96F9-BFEE50D40659} =>.Citrix
O42 - Logiciel: Commandos - (..) [HKLM] -- ComandoDeinstKey
O42 - Logiciel: Conseiller de mise à niveau vers Windows 7 - (.Microsoft Corporation.) [HKLM] -- {9D10CB57-B085-44c3-B435-2D193BA153F0} =>.Microsoft Corporation
O42 - Logiciel: dr.fone toolkit pour iOS (Version 8.5.0) - (.Wondershare Technology Co.,Ltd..) [HKLM] -- {A26F8BBD-EC10-4bdc-8AD8-F146825A8A63}_is1 =>.Wondershare Technology Co.,Ltd®
O42 - Logiciel: Drakensang Online - (.BigPoint.) [HKLM] -- Drakensang Online =>.BigPoint
O42 - Logiciel: ESET NOD32 Antivirus - (.ESET, spol. s r.o..) [HKLM] -- {6A9498CD-16D8-46AF-8246-B07729F4D072} =>.ESET, spol. s r.o.
O42 - Logiciel: FileViewPro - (.Solvusoft Corporation.) [HKLM] -- FileViewPro_is1 =>.SUP.WinThruster
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM] -- Google Chrome =>.Google Inc®
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {60EC980A-BDA2-4CB6-A427-B07A5498B4CA} =>.Google Inc.
O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM] -- {CE1F04C7-79BC-4219-BE6A-BA490224D4B5} =>.Apple Inc.
O42 - Logiciel: Java Auto Updater - (.Oracle Corporation.) [HKLM] -- {4A03706F-666A-4037-7777-5F2748764D10} =>.Oracle Corporation
O42 - Logiciel: McAfee Security Scan Plus - (.McAfee, Inc..) [HKLM] -- McAfee Security Scan =>.McAfee, Inc.
O42 - Logiciel: MegaMonsterFun - (..) [HKCU] -- MegaMonsterFun
O42 - Logiciel: PhoneClean 3.8.0 - (.iMobie Inc..) [HKLM] -- {2FAFFE02-4D6B-4C0A-906B-1B33DAF0DD14}}_is1 =>.iMobie Inc.®
O42 - Logiciel: PP助手5.0 - (.广州爱禾网络科技有限公司.) [HKLM] -- PP助手5.0
O42 - Logiciel: SrpnFiles - (.https://www.www.springfile.biz.) [HKCU] -- SrpnFiles =>.SUP.SpringFiles
O42 - Logiciel: SumatraPDF - (.Krzysztof Kowalczyk.) [HKLM] -- SumatraPDF =>.Krzysztof Kowalczyk®
O42 - Logiciel: Supercow - (..) [HKLM] -- Supercow
O42 - Logiciel: VLC media player - (.VideoLAN.) [HKLM] -- VLC media player =>.VideoLAN
O42 - Logiciel: WinZip 21.5 - (.WinZip Computing, S.L..) [HKLM] -- {CD95F661-A5C4-44F5-A6AA-ECDD91C2410E} =>.WinZip Computing, S.L.
O42 - Logiciel: Zoom - (.Zoom Video Communications, Inc..) [HKCU] -- ZoomUMX =>.Zoom Video Communications, Inc.®

---\\ HKCU & HKLM Software Keys (149) - 13s
HKLM\SOFTWARE\Adobe =>.Adobe
HKLM\SOFTWARE\AppDataLow =>.Microsoft Corporation
HKLM\SOFTWARE\Apple Computer, Inc. =>.Apple Computer, Inc.
HKLM\SOFTWARE\Apple Inc. =>.Apple Inc.
HKLM\SOFTWARE\ATI Technologies =>.ATI Technologies
HKLM\SOFTWARE\Attention To Detail
HKLM\SOFTWARE\BSD =>.Berkeley
HKLM\SOFTWARE\calibre =>.Kovid Goyal
HKLM\SOFTWARE\CCleaner =>.Piriform Ltd
HKLM\SOFTWARE\Cinem Plus 2.4cV27.05-nv =>Adware.CrossRider
HKLM\SOFTWARE\Cinem Plus 2.4cV27.05-nv-ie =>Adware.CrossRider
HKLM\SOFTWARE\Citrix =>.Citrix
HKLM\SOFTWARE\Common Toolkit Suite =>.SPAMfighter ApS
HKLM\SOFTWARE\Corel =>.Corel
HKLM\SOFTWARE\Disc Soft =>.Disc Soft
HKLM\SOFTWARE\Electronic Arts =>.Electronic Arts
HKLM\SOFTWARE\EPSON =>.EPSON
HKLM\SOFTWARE\ESET =>.ESET
HKLM\SOFTWARE\GameHouse =>.GameHouse
HKLM\SOFTWARE\GEAR Software =>.GEAR Software
HKLM\SOFTWARE\Google =>.Google
HKLM\SOFTWARE\GuidGuid13
HKLM\SOFTWARE\InstallShield =>.InstallShield
HKLM\SOFTWARE\Intel =>.Intel
HKLM\SOFTWARE\JavaSoft =>.JavaSoft
HKLM\SOFTWARE\JreMetrics =>.JreMetrics
HKLM\SOFTWARE\Macromedia =>.Macromedia
HKLM\SOFTWARE\McAfee.com =>.McAfee Inc.
HKLM\SOFTWARE\MimarSinan =>.Mimar Sinan
HKLM\SOFTWARE\Mozilla =>.Mozilla
HKLM\SOFTWARE\mozilla.org =>.mozilla.org
HKLM\SOFTWARE\MozillaPlugins =>.MozillaPlugins
HKLM\SOFTWARE\mtAppecivreSpA
HKLM\SOFTWARE\mtApService =>PUP.Optional.Salus
HKLM\SOFTWARE\mtStatity =>PUP.Optional.Salus
HKLM\SOFTWARE\NCH Software =>.NCH Software
HKLM\SOFTWARE\NCH Swift Sound =>.NCH Swift Sound
HKLM\SOFTWARE\Nico Mak Computing =>.Nico Mak Computing
HKLM\SOFTWARE\ODBC =>.DB Connectivity Solutions
HKLM\SOFTWARE\Opera Software =>.Opera Software
HKLM\SOFTWARE\PCDataApp
HKLM\SOFTWARE\PopCap =>.Popcap Games
HKLM\SOFTWARE\Pyro
HKLM\SOFTWARE\Reflexive Entertainment =>.Reflexive Entertainment
HKLM\SOFTWARE\ReflexiveArcade =>.Games Software
HKLM\SOFTWARE\RegisteredApplications =>.Microsoft Corporation
HKLM\SOFTWARE\RegistryReviver =>PUP.Optional.RegistryReviver
HKLM\SOFTWARE\Rockstar Games =>.Rockstar Games
HKLM\SOFTWARE\Skype =>.Skype
HKLM\SOFTWARE\Software =>.Unknown
HKLM\SOFTWARE\Solvusoft Corporation =>.SUP.Solvusoft
HKLM\SOFTWARE\Sonic =>.Sonic
HKLM\SOFTWARE\SrpnFiles =>.SUP.SpringFiles
HKLM\SOFTWARE\Tracker Software =>.Tracker Software
HKLM\SOFTWARE\Trolltech =>.Trolltech
HKLM\SOFTWARE\ValuSoft =>.ValuSoft
HKLM\SOFTWARE\Valve =>.Valve
HKLM\SOFTWARE\VideoLAN =>.VideoLAN
HKLM\SOFTWARE\Volatile =>.Microsoft Corporation
HKLM\SOFTWARE\WafCX =>.WafCX
HKLM\SOFTWARE\WinRAR =>.WinRAR
HKLM\SOFTWARE\Wondershare =>.Wondershare
HKLM\SOFTWARE\Wow6432Node =>.Microsoft Corporation
HKCU\SOFTWARE\4shared =>.4shared
HKCU\SOFTWARE\Acclaim
HKCU\SOFTWARE\Adobe =>.Adobe
HKCU\SOFTWARE\Alawar =>.Alawar
HKCU\SOFTWARE\AppDataLow =>.Microsoft Corporation
HKCU\SOFTWARE\Apple Computer, Inc. =>.Apple Computer, Inc.
HKCU\SOFTWARE\Apple Inc. =>.Apple Inc.
HKCU\SOFTWARE\Bigpoint GmbH =>.Bigpoint GmbH
HKCU\SOFTWARE\BitTorrent
HKCU\SOFTWARE\Bohemia Interactive =>.Bohemia Interactive
HKCU\SOFTWARE\BSD =>.Berkeley
HKCU\SOFTWARE\CatalinaGroup =>.SUP.CatalinaMarketing
HKCU\SOFTWARE\Cinem Plus 2.4cV27.05-nv =>Adware.CrossRider
HKCU\SOFTWARE\Cinem Plus 2.4cV27.05-nv-ie =>Adware.CrossRider
HKCU\SOFTWARE\Citrix =>.Citrix
HKCU\SOFTWARE\CoolROM
HKCU\SOFTWARE\Corel =>.Corel
HKCU\SOFTWARE\Disc Soft =>.Disc Soft
HKCU\SOFTWARE\DSS =>.DSS Software
HKCU\SOFTWARE\Ecommfactory =>.SUP.Downloader
HKCU\SOFTWARE\EPSON =>.EPSON
HKCU\SOFTWARE\ESET =>.ESET
HKCU\SOFTWARE\GameXzone
HKCU\SOFTWARE\Google =>.Google
HKCU\SOFTWARE\ihelper =>.Legitimate
HKCU\SOFTWARE\IM Providers =>.IM Providers
HKCU\SOFTWARE\Imobie =>.iMobie Inc
HKCU\SOFTWARE\Intenium
HKCU\SOFTWARE\IO Interactive =>.IO Interactive
HKCU\SOFTWARE\Jagex Ltd =>.Jagex Ltd
HKCU\SOFTWARE\JavaSoft =>.JavaSoft
HKCU\SOFTWARE\KasperskyLabSetup =>.Kaspersky Labs
HKCU\SOFTWARE\kde.org =>.kde.org
HKCU\SOFTWARE\Link_2004
HKCU\SOFTWARE\Macromedia =>.Macromedia
HKCU\SOFTWARE\malavida =>.Maladiva.com
HKCU\SOFTWARE\Math Problem Solver =>PUP.Optional.MathProblemSolver
HKCU\SOFTWARE\MCAFEE =>.McAfee Inc.
HKCU\SOFTWARE\MegaMonsterFun
HKCU\SOFTWARE\Mozilla =>.Mozilla
HKCU\SOFTWARE\MozillaPlugins =>.MozillaPlugins
HKCU\SOFTWARE\mtAppecivreSpA
HKCU\SOFTWARE\mtApService =>PUP.Optional.Salus
HKCU\SOFTWARE\NCH Software =>.NCH Software
HKCU\SOFTWARE\NCH Swift Sound =>.NCH Swift Sound
HKCU\SOFTWARE\Netscape =>.Netscape
HKCU\SOFTWARE\NeutronGames =>.Neutron Games
HKCU\SOFTWARE\Nico Mak Computing =>.Nico Mak Computing
HKCU\SOFTWARE\NoVooIT =>PUP.Optional.Vonteera
HKCU\SOFTWARE\ODBC =>.DB Connectivity Solutions
HKCU\SOFTWARE\Opera Software =>.Opera Software
HKCU\SOFTWARE\PCDataApp
HKCU\SOFTWARE\Piriform =>.Piriform
HKCU\SOFTWARE\PopCap =>.Popcap Games
HKCU\SOFTWARE\Popper =>PUP.Optional.Vonteera
HKCU\SOFTWARE\ProductSetup =>Adware.InstallCore
HKCU\SOFTWARE\QtProject =>.QtProject
HKCU\SOFTWARE\redsn0w =>.Jailbreak
HKCU\SOFTWARE\ReflexiveArcade =>.Games Software
HKCU\SOFTWARE\Rockstar Games =>.Rockstar Games
HKCU\SOFTWARE\Rtp =>.RTP Software
HKCU\SOFTWARE\Rumbic Studio
HKCU\SOFTWARE\SecuROM =>.SecuROM
HKCU\SOFTWARE\Skype =>.Skype
HKCU\SOFTWARE\SmallGamesInfo
HKCU\SOFTWARE\SrpnFiles =>.SUP.SpringFiles
HKCU\SOFTWARE\Teiron =>.Teiron
HKCU\SOFTWARE\TeleCharger =>.SUP.Downloader
HKCU\SOFTWARE\Test3D
HKCU\SOFTWARE\Tracker Software =>.Tracker Software
HKCU\SOFTWARE\TreeCardGames =>.TreeCardGames
HKCU\SOFTWARE\Trolltech =>.Trolltech
HKCU\SOFTWARE\UnknownFile
HKCU\SOFTWARE\ValuSoft =>.ValuSoft
HKCU\SOFTWARE\Valve =>.Valve
HKCU\SOFTWARE\WinRAR =>.WinRAR
HKCU\SOFTWARE\WinRAR SFX =>.RarLab
HKCU\SOFTWARE\WinZip Computing, S.L. =>.WinZip Computing, S.L.
HKCU\SOFTWARE\WoGInstaller
HKCU\SOFTWARE\Wondershare =>.Wondershare
HKCU\SOFTWARE\Wow6432Node =>.Microsoft Corporation
HKCU\SOFTWARE\ZebHelpProcess Helper =>.Nicolas Coolman
HKCU\SOFTWARE\ZHP =>.Nicolas Coolman
HKCU\SOFTWARE\zylom =>.Zylom
HKCU\SOFTWARE\AppDataLow\Software =>.Microsoft Corporation
HKCU\SOFTWARE\AppDataLow\Software\JavaSoft =>.JavaSoft

---\\ Contenu des dossiers Programmes (311) - 19s
O43 - CFD: 16/09/2017 - [] D -- C:\Program Files\18 WoS Across America
O43 - CFD: 24/10/2016 - [] D -- C:\Program Files\18 WoS Pedal to the Metal
O43 - CFD: 09/05/2014 - [] D -- C:\Program Files\Adobe =>.Adobe Systems, Incorporated®
O43 - CFD: 12/09/2017 - [] D -- C:\Program Files\Bonjour =>.Apple Inc.
O43 - CFD: 23/09/2014 - [0] D -- C:\Program Files\Browser Tab Search by Ask =>PUP.Optional.BrowserTabSearch
O43 - CFD: 23/03/2015 - [] D -- C:\Program Files\Calibre2 =>.Kovid Goyal
O43 - CFD: 15/05/2014 - [] D -- C:\Program Files\CCleaner =>.Piriform Ltd
O43 - CFD: 29/11/2016 - [0] D -- C:\Program Files\Citrix =>.Citrix
O43 - CFD: 16/12/2017 - [] D -- C:\Program Files\Common Files =>.Microsoft Corporation
O43 - CFD: 12/05/2014 - [] D -- C:\Program Files\DAEMON Tools Lite =>.DAEMON Tools
O43 - CFD: 05/12/2017 - [] D -- C:\Program Files\Drakensang Online =>.BigPoint
O43 - CFD: 24/10/2016 - [] D -- C:\Program Files\Ducati World 1
O43 - CFD: 14/07/2009 - [] D -- C:\Program Files\DVD Maker =>.Aone Software
O43 - CFD: 16/10/2016 - [] D -- C:\Program Files\Eidos Interactive =>.Eidos Interactive
O43 - CFD: 29/04/2015 - [] D -- C:\Program Files\EPSON =>.EPSON
O43 - CFD: 23/09/2017 - [] D -- C:\Program Files\ESET =>.ESET, spol. s r.o.®
O43 - CFD: 08/05/2014 - [0] SHD -- C:\Program Files\Fichiers communs =>.Microsoft Corporation
O43 - CFD: 30/11/2016 - [] D -- C:\Program Files\FileViewPro =>.Microsoft Corporation®
O43 - CFD: 05/03/2016 - [] D -- C:\Program Files\Google =>.Google Inc®
O43 - CFD: 12/09/2017 - [] HD -- C:\Program Files\InstallShield Installation Information =>.InstallShield
O43 - CFD: 14/07/2009 - [] D -- C:\Program Files\Internet Explorer =>.Microsoft Corporation
O43 - CFD: 14/09/2017 - [] D -- C:\Program Files\iPod =>.Apple Inc.®
O43 - CFD: 14/09/2017 - [] D -- C:\Program Files\iTunes =>.Apple Inc.
O43 - CFD: 10/04/2015 - [] D -- C:\Program Files\Java =>.Oracle
O43 - CFD: 15/11/2015 - [] D -- C:\Program Files\McAfee Security Scan =>.McAfee
O43 - CFD: 30/11/2016 - [0] D -- C:\Program Files\Microsoft =>.Microsoft Corporation
O43 - CFD: 15/05/2014 - [] D -- C:\Program Files\Microsoft Office =>.Microsoft Corporation
O43 - CFD: 15/05/2014 - [] D -- C:\Program Files\Microsoft Visual Studio =>.Microsoft Corporation
O43 - CFD: 15/05/2014 - [] D -- C:\Program Files\Microsoft Visual Studio 8 =>.Microsoft Corporation
O43 - CFD: 16/09/2017 - [] D -- C:\Program Files\Microsoft Windows 7 Upgrade Advisor =>.Microsoft Corporation
O43 - CFD: 28/08/2017 - [] D -- C:\Program Files\Microsoft Works =>.Microsoft Corporation
O43 - CFD: 15/05/2014 - [] D -- C:\Program Files\Microsoft.NET =>.Microsoft Corporation
O43 - CFD: 05/03/2016 - [] D -- C:\Program Files\Mozilla Firefox =>.Mozilla
O43 - CFD: 15/05/2014 - [] D -- C:\Program Files\MSBuild =>.Microsoft Corporation
O43 - CFD: 16/09/2015 - [] D -- C:\Program Files\NCH Software =>.NCH Software
O43 - CFD: 08/05/2014 - [] D -- C:\Program Files\Paragon Software =>.Paragon Software
O43 - CFD: 15/09/2017 - [] D -- C:\Program Files\PP助手5.0
O43 - CFD: 03/07/2016 - [] D -- C:\Program Files\R.G. Mechanics =>.R.G. Mechanics
O43 - CFD: 14/07/2009 - [] D -- C:\Program Files\Reference Assemblies =>.Microsoft Corporation
O43 - CFD: 03/08/2015 - [] D -- C:\Program Files\ReflexiveArcade
O43 - CFD: 14/02/2017 - [] D -- C:\Program Files\ReiBoot =>.Tenorshare Co.,Ltd.®
O43 - CFD: 16/05/2014 - [0] D -- C:\Program Files\SpeedItup Free =>PUP.Optional.SpeeditUp
O43 - CFD: 04/02/2017 - [] D -- C:\Program Files\SrpnFiles =>.SUP.SpringFiles
O43 - CFD: 18/09/2015 - [] D -- C:\Program Files\SumatraPDF =>.Krzysztof Kowalczyk
O43 - CFD: 15/05/2014 - [] D -- C:\Program Files\Tracker Software =>.Tracker Software
O43 - CFD: 16/10/2016 - [] HD -- C:\Program Files\Uninstall Information =>.Microsoft Corporation
O43 - CFD: 15/05/2014 - [] D -- C:\Program Files\VideoLAN =>.VideoLan Team
O43 - CFD: 14/07/2009 - [] D -- C:\Program Files\Windows Defender =>.Microsoft Corporation
O43 - CFD: 14/07/2009 - [] D -- C:\Program Files\Windows Journal =>.Microsoft Corporation
O43 - CFD: 28/08/2017 - [] D -- C:\Program Files\Windows Mail =>.Microsoft Corporation
O43 - CFD: 28/08/2017 - [] D -- C:\Program Files\Windows Media Player =>.Microsoft Corporation
O43 - CFD: 08/05/2014 - [] D -- C:\Program Files\Windows NT =>.Microsoft Corporation
O43 - CFD: 14/07/2009 - [] D -- C:\Program Files\Windows Photo Viewer =>.Microsoft Corporation
O43 - CFD: 14/07/2009 - [] D -- C:\Program Files\Windows Portable Devices =>.Microsoft Corporation
O43 - CFD: 14/07/2009 - [] D -- C:\Program Files\Windows Sidebar =>.Microsoft Corporation
O43 - CFD: 02/10/2016 - [] D -- C:\Program Files\WinRAR =>.win.rar GmbH®
O43 - CFD: 17/07/2017 - [] D -- C:\Program Files\WinZip =>.Add-in Express®
O43 - CFD: 17/07/2017 - [] D -- C:\Program Files\WinZip Smart Monitor
O43 - CFD: 09/09/2017 - [] D -- C:\Program Files\Wondershare =>.Wondershare
O43 - CFD: 12/09/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\18 WoS Across America
O43 - CFD: 31/07/2017 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\18 WoS Pedal to the Metal
O43 - CFD: 04/09/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\1C Company =>.1C Company
O43 - CFD: 30/11/2016 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\1CVPRO
O43 - CFD: 08/05/2014 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories =>.Microsoft Corporation
O43 - CFD: 08/05/2014 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools =>.Administrative Tools
O43 - CFD: 23/03/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\calibre - E-book Management =>.Kovid Goyal
O43 - CFD: 12/05/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite =>.DAEMON Tools
O43 - CFD: 16/10/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Eidos Interactive =>.Eidos Interactive
O43 - CFD: 02/04/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON =>.EPSON
O43 - CFD: 02/04/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON Creativity Suite =>.Epson/Seico
O43 - CFD: 29/04/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON Scan =>.Epson/Seico
O43 - CFD: 23/09/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET =>.ESET
O43 - CFD: 31/07/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileViewPro =>.SUP.Solvusoft
O43 - CFD: 23/09/2014 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games =>.Microsoft Corporation
O43 - CFD: 23/03/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Icecream Ebook Reader =>.Icecream App
O43 - CFD: 02/11/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iMobie =>.iMobie Inc
O43 - CFD: 14/09/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes =>.Apple Inc.
O43 - CFD: 10/04/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java =>.Oracle
O43 - CFD: 09/12/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KONAMI =>.Konami
O43 - CFD: 31/07/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogPerr38Log
O43 - CFD: 14/07/2009 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance =>.Microsoft Corporation
O43 - CFD: 04/09/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus =>.McAfee Inc.
O43 - CFD: 31/07/2017 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Metal Gear Solid V Ground Zeroes
O43 - CFD: 31/07/2017 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Games for Windows Marketplace =>.Microsoft Corporation
O43 - CFD: 15/05/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office =>.Microsoft Corporation
O43 - CFD: 05/01/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Neutron Games =>.Neutron Games
O43 - CFD: 15/05/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF-XChange 4 Pro
O43 - CFD: 31/07/2017 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PESEdit.com 2014 Patch
O43 - CFD: 10/01/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PP助手5.0
O43 - CFD: 12/05/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ReviverSoft =>.ReviverSoft
O43 - CFD: 30/08/2014 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Square Enix =>.Square Enix
O43 - CFD: 31/07/2017 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup =>.Microsoft Corporation
O43 - CFD: 26/08/2017 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Super Mario Blue Twilight DX
O43 - CFD: 03/08/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Supercow
O43 - CFD: 14/07/2009 - [0] RHD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC =>.Wacom Technology
O43 - CFD: 16/10/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The Hell in Vietnam
O43 - CFD: 15/10/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN =>.VideoLan Team
O43 - CFD: 08/05/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR =>.WinRAR
O43 - CFD: 17/07/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip 21.5
O43 - CFD: 30/08/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wondershare =>.Wondershare
O43 - CFD: 05/10/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of Goo
O43 - CFD: 16/05/2015 - [] D -- C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1 =>.GEAR Software, Inc.
O43 - CFD: 05/08/2015 - [] D -- C:\ProgramData\2DBoy =>.2DBoy
O43 - CFD: 09/05/2014 - [] D -- C:\ProgramData\Adobe =>.Adobe
O43 - CFD: 06/07/2015 - [] D -- C:\ProgramData\AlawarWrapper =>.Alawar Entertainment
O43 - CFD: 23/12/2017 - [] D -- C:\ProgramData\AppecivreSpA
O43 - CFD: 25/09/2016 - [] D -- C:\ProgramData\AppecivreSpAs
O43 - CFD: 15/09/2017 - [] D -- C:\ProgramData\Apple =>.Apple Inc.
O43 - CFD: 03/06/2015 - [] D -- C:\ProgramData\Apple Computer =>.Apple Inc.
O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Application Data =>.Microsoft Corporation
O43 - CFD: 21/03/2016 - [] D -- C:\ProgramData\AVAST Software =>.AVAST Software
O43 - CFD: 04/07/2015 - [] D -- C:\ProgramData\Awem =>.Awem Studio
O43 - CFD: 14/09/2017 - [] D -- C:\ProgramData\B0FFCDD9-5261-4e59-B29A-17A4FABDEBAB
O43 - CFD: 28/10/2014 - [] D -- C:\ProgramData\Bohemia Interactive =>.Bohemia Interactive
O43 - CFD: 08/05/2014 - [0] SHD -- C:\ProgramData\Bureau =>.Microsoft Corporation
O43 - CFD: 08/05/2014 - [] D -- C:\ProgramData\createpart
O43 - CFD: 13/05/2014 - [] D -- C:\ProgramData\DAEMON Tools Lite =>.DAEMON Tools
O43 - CFD: 30/08/2017 - [] D -- C:\ProgramData\DCHP =>PUP.Optional.Salus
O43 - CFD: 08/05/2014 - [] D -- C:\ProgramData\deletepart
O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Desktop =>.Microsoft Corporation
O43 - CFD: 04/07/2015 - [] D -- C:\ProgramData\DigitalChocolate
O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Documents =>.Microsoft Corporation
O43 - CFD: 02/04/2015 - [] D -- C:\ProgramData\EPSON =>.EPSON
O43 - CFD: 23/09/2017 - [] D -- C:\ProgramData\ESET =>.ESET
O43 - CFD: 08/05/2014 - [] D -- C:\ProgramData\explauncher =>.Legitimate
O43 - CFD: 04/07/2015 - [] D -- C:\ProgramData\FarmFrenzy3_Arctica
O43 - CFD: 08/05/2014 - [0] SHD -- C:\ProgramData\Favoris =>.Microsoft Corporation
O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Favorites =>.Microsoft Corporation
O43 - CFD: 04/07/2015 - [] D -- C:\ProgramData\Funny Bear Studio
O43 - CFD: 04/07/2015 - [] D -- C:\ProgramData\GameXzone
O43 - CFD: 18/05/2014 - [] D -- C:\ProgramData\IconCache
O43 - CFD: 04/07/2015 - [] D -- C:\ProgramData\Intenium =>.Intenium GmbH
O43 - CFD: 11/11/2016 - [] D -- C:\ProgramData\IsolatedStorage =>.id Software
O43 - CFD: 30/11/2016 - [] D -- C:\ProgramData\Kaspersky Lab Setup Files =>.Kaspersky Lab
O43 - CFD: 15/01/2016 - [] D -- C:\ProgramData\KONAMI =>.Konami
O43 - CFD: 08/05/2014 - [] D -- C:\ProgramData\launcher =>.Unknown
O43 - CFD: 09/05/2014 - [] D -- C:\ProgramData\McAfee =>.McAfee
O43 - CFD: 21/08/2015 - [] D -- C:\ProgramData\McAfee Security Scan =>.McAfee
O43 - CFD: 02/09/2014 - [] D -- C:\ProgramData\Media Center Programs =>.Microsoft Corporation
O43 - CFD: 08/05/2014 - [0] SHD -- C:\ProgramData\Menu Démarrer =>.Microsoft Corporation
O43 - CFD: 08/05/2014 - [] D -- C:\ProgramData\mergeparts
O43 - CFD: 02/08/2017 - [] SD -- C:\ProgramData\Microsoft =>.Microsoft Corporation
O43 - CFD: 28/08/2017 - [] D -- C:\ProgramData\Microsoft Help =>.Microsoft Corporation
O43 - CFD: 08/05/2014 - [0] SHD -- C:\ProgramData\Modèles =>.Microsoft Corporation
O43 - CFD: 08/05/2014 - [] D -- C:\ProgramData\Mozilla =>.Mozilla Corporation
O43 - CFD: 06/08/2015 - [] D -- C:\ProgramData\MumboJumbo =>.MumboJumbo
O43 - CFD: 04/07/2015 - [] D -- C:\ProgramData\MythPeople
O43 - CFD: 13/09/2015 - [] D -- C:\ProgramData\NCH Software =>.NCH Software
O43 - CFD: 10/04/2015 - [] D -- C:\ProgramData\Oracle =>.Oracle
O43 - CFD: 18/08/2014 - [0] D -- C:\ProgramData\Origin =>.Electronic Arts, Inc.
O43 - CFD: 21/04/2017 - [] D -- C:\ProgramData\Package Cache =>.Microsoft Corporation
O43 - CFD: 07/12/2015 - [] D -- C:\ProgramData\PixelPlanet =>.PixelPlanet
O43 - CFD: 04/07/2015 - [] D -- C:\ProgramData\Playrix Entertainment =>.Playrix Entertainment
O43 - CFD: 14/01/2016 - [] D -- C:\ProgramData\PopCap Games =>.PopCap Games
O43 - CFD: 04/07/2015 - [] D -- C:\ProgramData\QB9 S.R.L
O43 - CFD: 08/05/2014 - [] D -- C:\ProgramData\redistpart
O43 - CFD: 12/05/2014 - [] D -- C:\ProgramData\RegistryReviver.exe =>PUP.Optional.RegistryReviver
O43 - CFD: 12/05/2014 - [] D -- C:\ProgramData\ReviverSoft =>.ReviverSoft
O43 - CFD: 04/07/2015 - [] D -- C:\ProgramData\Rumbic Studio
O43 - CFD: 17/09/2015 - [0] D -- C:\ProgramData\SafetyNut =>PUP.Optional.MoviesToolbar
O43 - CFD: 31/07/2014 - [] SHD -- C:\ProgramData\SecuROM =>.SecuROM
O43 - CFD: 29/11/2016 - [] D -- C:\ProgramData\Skype =>.Skype
O43 - CFD: 11/11/2016 - [] D -- C:\ProgramData\Solvusoft =>.SUP.Solvusoft
O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Start Menu =>.Microsoft Corporation
O43 - CFD: 29/10/2014 - [] D -- C:\ProgramData\Steam =>.Steam Games
O43 - CFD: 10/04/2015 - [] D -- C:\ProgramData\Sun =>.Oracle
O43 - CFD: 05/07/2017 - [0] AD -- C:\ProgramData\TEMP =>.Microsoft Corporation
O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Templates =>.Microsoft Corporation
O43 - CFD: 17/07/2017 - [] D -- C:\ProgramData\UniqueId =>.Microsoft Corporation
O43 - CFD: 17/07/2017 - [] D -- C:\ProgramData\WinZip =>.WinZip
O43 - CFD: 30/08/2017 - [] D -- C:\ProgramData\Wondershare =>.Wondershare
O43 - CFD: 17/09/2017 - [] HD -- C:\ProgramData\{B96EB44A-7860-4F13-BC9A-0A73CA5F11C2}
O43 - CFD: 09/05/2014 - [] D -- C:\Program Files\Common Files\Adobe =>.Adobe
O43 - CFD: 15/09/2017 - [] D -- C:\Program Files\Common Files\Apple =>.Apple Inc.
O43 - CFD: 15/05/2014 - [] D -- C:\Program Files\Common Files\DESIGNER =>.Designer
O43 - CFD: 02/04/2015 - [] D -- C:\Program Files\Common Files\InstallShield =>.InstallShield
O43 - CFD: 16/12/2017 - [] D -- C:\Program Files\Common Files\Java =>.Oracle
O43 - CFD: 28/08/2017 - [] D -- C:\Program Files\Common Files\microsoft shared =>.Microsoft Corporation
O43 - CFD: 14/07/2009 - [] D -- C:\Program Files\Common Files\Services =>.Microsoft Corporation
O43 - CFD: 04/02/2017 - [] D -- C:\Program Files\Common Files\Silkaydex
O43 - CFD: 14/07/2009 - [] D -- C:\Program Files\Common Files\SpeechEngines =>.Microsoft Corporation
O43 - CFD: 19/08/2014 - [] D -- C:\Program Files\Common Files\Steam =>.Steam Games
O43 - CFD: 20/09/2014 - [] D -- C:\Program Files\Common Files\System =>.Microsoft Corporation
O43 - CFD: 30/11/2016 - [] D -- C:\Program Files\Common Files\XPressUpdate =>.PixelPlanet
O43 - CFD: 11/05/2014 - [] D -- C:\Users\dadi\AppData\Roaming\Adobe =>.Adobe
O43 - CFD: 10/01/2017 - [] D -- C:\Users\dadi\AppData\Roaming\ahelper
O43 - CFD: 16/09/2015 - [] D -- C:\Users\dadi\AppData\Roaming\Apple Computer =>.Apple Inc.
O43 - CFD: 05/08/2015 - [] D -- C:\Users\dadi\AppData\Roaming\Arkadium =>.Arkadium
O43 - CFD: 05/07/2017 - [] D -- C:\Users\dadi\AppData\Roaming\BlackBean =>.BlackBean Games
O43 - CFD: 23/08/2015 - [] D -- C:\Users\dadi\AppData\Roaming\calibre =>.Kovid Goyal
O43 - CFD: 19/11/2016 - [] D -- C:\Users\dadi\AppData\Roaming\CVitae 5
O43 - CFD: 13/05/2014 - [] D -- C:\Users\dadi\AppData\Roaming\DAEMON Tools Lite =>.DAEMON Tools
O43 - CFD: 22/12/2016 - [] D -- C:\Users\dadi\AppData\Roaming\dvdcss =>.VideoLan Team
O43 - CFD: 03/04/2015 - [] D -- C:\Users\dadi\AppData\Roaming\EPSON =>.EPSON
O43 - CFD: 29/05/2015 - [] D -- C:\Users\dadi\AppData\Roaming\EurekaLab s.a.s =>.EurekaLab
O43 - CFD: 08/05/2014 - [] D -- C:\Users\dadi\AppData\Roaming\Identities =>.Microsoft Corporation
O43 - CFD: 11/11/2016 - [] D -- C:\Users\dadi\AppData\Roaming\IsolatedStorage =>.id Software
O43 - CFD: 16/05/2014 - [] D -- C:\Users\dadi\AppData\Roaming\Macromedia =>.Macromedia
O43 - CFD: 14/07/2009 - [0] D -- C:\Users\dadi\AppData\Roaming\Media Center Programs =>.Microsoft Corporation
O43 - CFD: 30/08/2017 - [] SD -- C:\Users\dadi\AppData\Roaming\Microsoft =>.Microsoft Corporation
O43 - CFD: 08/05/2014 - [] D -- C:\Users\dadi\AppData\Roaming\Mozilla =>.Mozilla Corporation
O43 - CFD: 06/08/2015 - [] D -- C:\Users\dadi\AppData\Roaming\MumboJumbo =>.MumboJumbo
O43 - CFD: 13/09/2015 - [] D -- C:\Users\dadi\AppData\Roaming\NCH Software =>.NCH Software
O43 - CFD: 04/08/2015 - [] D -- C:\Users\dadi\AppData\Roaming\Nicalis
O43 - CFD: 27/05/2015 - [] D -- C:\Users\dadi\AppData\Roaming\Opera Software =>.Opera Software
O43 - CFD: 02/08/2014 - [] D -- C:\Users\dadi\AppData\Roaming\Origin =>.Electronic Arts, Inc.
O43 - CFD: 07/12/2015 - [] D -- C:\Users\dadi\AppData\Roaming\PixelPlanet =>.PixelPlanet
O43 - CFD: 16/12/2014 - [0] D -- C:\Users\dadi\AppData\Roaming\Popper =>PUP.Optional.Vonteera
O43 - CFD: 18/06/2015 - [] D -- C:\Users\dadi\AppData\Roaming\Prison Break
O43 - CFD: 03/07/2016 - [] D -- C:\Users\dadi\AppData\Roaming\Prison Break The Conspiracy =>.nSpira
O43 - CFD: 04/06/2015 - [] D -- C:\Users\dadi\AppData\Roaming\redsn0w
O43 - CFD: 16/12/2014 - [0] D -- C:\Users\dadi\AppData\Roaming\rickos
O43 - CFD: 04/07/2015 - [] D -- C:\Users\dadi\AppData\Roaming\Rovio =>.Rovio
O43 - CFD: 02/09/2014 - [] RHD -- C:\Users\dadi\AppData\Roaming\SecuROM =>.SecuROM
O43 - CFD: 29/11/2016 - [] D -- C:\Users\dadi\AppData\Roaming\Skype =>.Skype
O43 - CFD: 12/11/2016 - [] D -- C:\Users\dadi\AppData\Roaming\Solvusoft =>.SUP.Solvusoft
O43 - CFD: 16/12/2014 - [0] D -- C:\Users\dadi\AppData\Roaming\SPK
O43 - CFD: 27/05/2016 - [0] D -- C:\Users\dadi\AppData\Roaming\SpringFiles =>.SUP.SpringFiles
O43 - CFD: 18/09/2015 - [] D -- C:\Users\dadi\AppData\Roaming\SumatraPDF =>.Krzysztof Kowalczyk
O43 - CFD: 03/08/2015 - [] D -- C:\Users\dadi\AppData\Roaming\Super-Cow
O43 - CFD: 20/01/2017 - [] D -- C:\Users\dadi\AppData\Roaming\Teiron =>.Teiron
O43 - CFD: 14/02/2017 - [] D -- C:\Users\dadi\AppData\Roaming\Tenorshare =>.Tenorshare
O43 - CFD: 07/12/2016 - [] D -- C:\Users\dadi\AppData\Roaming\UnknownFile
O43 - CFD: 24/12/2017 - [] D -- C:\Users\dadi\AppData\Roaming\uTorrent
O43 - CFD: 18/12/2017 - [] D -- C:\Users\dadi\AppData\Roaming\vlc =>.VideoLan Team
O43 - CFD: 08/05/2014 - [] D -- C:\Users\dadi\AppData\Roaming\WinRAR =>.WinRAR
O43 - CFD: 30/08/2017 - [] D -- C:\Users\dadi\AppData\Roaming\Wondershare =>.Wondershare
O43 - CFD: 04/07/2015 - [] D -- C:\Users\dadi\AppData\Roaming\YoudaGames =>.Youdagames
O43 - CFD: 24/12/2017 - [] D -- C:\Users\dadi\AppData\Roaming\ZHP =>.Nicolas Coolman
O43 - CFD: 30/10/2017 - [] D -- C:\Users\dadi\AppData\Roaming\Zoom =>.ZOOM
O43 - CFD: 05/08/2015 - [] D -- C:\Users\dadi\AppData\Local\2DBoy =>.2DBoy
O43 - CFD: 04/07/2015 - [] D -- C:\Users\dadi\AppData\Local\7Wonders2
O43 - CFD: 12/05/2016 - [] D -- C:\Users\dadi\AppData\Local\Adobe =>.Adobe
O43 - CFD: 14/05/2015 - [] D -- C:\Users\dadi\AppData\Local\Apple =>.Apple Inc.
O43 - CFD: 20/04/2015 - [] D -- C:\Users\dadi\AppData\Local\Apple Computer =>.Apple Inc.
O43 - CFD: 25/08/2015 - [] D -- C:\Users\dadi\AppData\Local\Apps =>.Microsoft Corporation
O43 - CFD: 20/07/2017 - [] D -- C:\Users\dadi\AppData\Local\assembly =>.Assembly
O43 - CFD: 31/07/2015 - [] D -- C:\Users\dadi\AppData\Local\Beach Builder
O43 - CFD: 15/07/2015 - [] D -- C:\Users\dadi\AppData\Local\calibre-cache =>.Kovid Goyal
O43 - CFD: 29/08/2016 - [] D -- C:\Users\dadi\AppData\Local\Citrix =>.Citrix
O43 - CFD: 16/09/2015 - [0] D -- C:\Users\dadi\AppData\Local\Deployment =>.Microsoft Corporation
O43 - CFD: 24/12/2017 - [] D -- C:\Users\dadi\AppData\Local\Diagnostics =>.Microsoft Corporation
O43 - CFD: 07/12/2015 - [] D -- C:\Users\dadi\AppData\Local\Downloaded Installations =>.Microsoft Corporation
O43 - CFD: 04/12/2017 - [0] D -- C:\Users\dadi\AppData\Local\ElevatedDiagnostics =>.Microsoft Corporation
O43 - CFD: 23/09/2017 - [] D -- C:\Users\dadi\AppData\Local\ESET =>.ESET
O43 - CFD: 11/11/2016 - [] D -- C:\Users\dadi\AppData\Local\FileViewPro =>.SUP.Solvusoft
O43 - CFD: 06/11/2016 - [] D -- C:\Users\dadi\AppData\Local\Google =>.Google
O43 - CFD: 17/09/2017 - [] D -- C:\Users\dadi\AppData\Local\IIIQF =>.Scrabblo
O43 - CFD: 13/05/2014 - [] D -- C:\Users\dadi\AppData\Local\Installer
O43 - CFD: 16/09/2017 - [] D -- C:\Users\dadi\AppData\Local\iTunes =>.Apple Inc.
O43 - CFD: 18/09/2015 - [] D -- C:\Users\dadi\AppData\Local\Macromedia =>.Macromedia
O43 - CFD: 17/09/2015 - [0] D -- C:\Users\dadi\AppData\Local\Math Problem Solver =>PUP.Optional.MathProblemSolver
O43 - CFD: 13/05/2014 - [] D -- C:\Users\dadi\AppData\Local\MegaMonsterFun
O43 - CFD: 03/03/2017 - [] D -- C:\Users\dadi\AppData\Local\Menge
O43 - CFD: 28/08/2017 - [] D -- C:\Users\dadi\AppData\Local\Microsoft =>.Microsoft Corporation
O43 - CFD: 20/04/2016 - [] D -- C:\Users\dadi\AppData\Local\Microsoft Help =>.Microsoft Corporation
O43 - CFD: 15/05/2014 - [] DC -- C:\Users\dadi\AppData\Local\MigWiz =>.MigWiz
O43 - CFD: 08/05/2014 - [] D -- C:\Users\dadi\AppData\Local\Mozilla =>.Mozilla Corporation
O43 - CFD: 27/05/2015 - [] D -- C:\Users\dadi\AppData\Local\Opera Software =>.Opera Software
O43 - CFD: 29/08/2017 - [0] D -- C:\Users\dadi\AppData\Local\pangu =>.Pangu Team
O43 - CFD: 13/05/2014 - [] D -- C:\Users\dadi\AppData\Local\Programs =>.Microsoft Corporation
O43 - CFD: 29/07/2014 - [] D -- C:\Users\dadi\AppData\Local\Rockstar Games =>.Rockstar Games
O43 - CFD: 25/06/2014 - [] D -- C:\Users\dadi\AppData\Local\SKIDROW =>.SKIDROW
O43 - CFD: 09/06/2014 - [] D -- C:\Users\dadi\AppData\Local\Skype =>.Skype
O43 - CFD: 02/03/2017 - [] D -- C:\Users\dadi\AppData\Local\Sniper3
O43 - CFD: 24/12/2017 - [] D -- C:\Users\dadi\AppData\Local\Temp =>.Microsoft Corporation
O43 - CFD: 13/05/2014 - [] D -- C:\Users\dadi\AppData\Local\Unify3D
O43 - CFD: 29/11/2016 - [] D -- C:\Users\dadi\AppData\Local\Viber =>.Viber
O43 - CFD: 04/07/2015 - [] D -- C:\Users\dadi\AppData\Local\VirtualStore =>.Microsoft Corporation
O43 - CFD: 20/07/2017 - [] D -- C:\Users\dadi\AppData\Local\WinZip =>.WinZip
O43 - CFD: 24/12/2017 - [] D -- C:\Users\dadi\AppData\Local\ZHP =>.Nicolas Coolman
O43 - CFD: 30/08/2017 - [] D -- C:\Users\dadi\AppData\Local\Zylom Games =>.Zylom Games
O43 - CFD: 13/05/2014 - [0] D -- C:\Users\dadi\AppData\Local\Programs\Common =>.Microsoft Corporation
O43 - CFD: 19/12/2017 - [0] DC -- C:\Users\dadi\Desktop\1962
O43 - CFD: 19/12/2017 - [] DC -- C:\Users\dadi\Desktop\2007
O43 - CFD: 19/12/2017 - [] D -- C:\Users\dadi\Desktop\imad
O43 - CFD: 24/12/2017 - [0] D -- C:\Users\dadi\Desktop\imahdouche
O43 - CFD: 19/12/2017 - [] D -- C:\Users\dadi\Desktop\said
O43 - CFD: 19/12/2017 - [] D -- C:\Users\dadi\Desktop\sarah
O43 - CFD: 14/07/2009 - [] RD -- C:\Users\dadi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories =>.Microsoft Corporation
O43 - CFD: 15/05/2014 - [] RD -- C:\Users\dadi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools =>.Administrative Tools
O43 - CFD: 15/05/2014 - [] D -- C:\Users\dadi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CCleaner =>.Piriform Ltd
O43 - CFD: 05/12/2017 - [] D -- C:\Users\dadi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Drakensang Online =>.BigPoint
O43 - CFD: 16/10/2016 - [] D -- C:\Users\dadi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Eidos Interactive =>.Eidos Interactive
O43 - CFD: 09/02/2017 - [] D -- C:\Users\dadi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games =>.Microsoft Corporation
O43 - CFD: 05/10/2017 - [0] D -- C:\Users\dadi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Hitman 2 Silent Assassin
O43 - CFD: 02/04/2015 - [0] D -- C:\Users\dadi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LogPerr38Log
O43 - CFD: 14/07/2009 - [] RD -- C:\Users\dadi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance =>.Microsoft Corporation
O43 - CFD: 16/12/2017 - [0] D -- C:\Users\dadi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ReiBoot
O43 - CFD: 04/12/2014 - [] RD -- C:\Users\dadi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup =>.Microsoft Corporation
O43 - CFD: 03/08/2015 - [0] D -- C:\Users\dadi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Supercow
O43 - CFD: 08/05/2014 - [] D -- C:\Users\dadi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR =>.WinRAR
O43 - CFD: 17/07/2017 - [0] D -- C:\Users\dadi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinZip 21.5
O43 - CFD: 30/10/2017 - [] D -- C:\Users\dadi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zoom =>.ZOOM
O43 - CFD: 14/07/2009 - [0] SHD -- C:\Users\Default\AppData\Local\Application Data =>.Microsoft Corporation
O43 - CFD: 08/05/2014 - [0] SHD -- C:\Users\Default\AppData\Local\Historique =>.Microsoft Corporation
O43 - CFD: 14/07/2009 - [0] SHD -- C:\Users\Default\AppData\Local\History =>.Microsoft Corporation
O43 - CFD: 14/07/2009 - [] D -- C:\Users\Default\AppData\Local\Microsoft =>.Microsoft Corporation
O43 - CFD: 28/08/2017 - [0] D -- C:\Users\Default\AppData\Local\Microsoft Help =>.Microsoft Corporation
O43 - CFD: 14/07/2009 - [0] D -- C:\Users\Default\AppData\Local\Temp =>.Microsoft Corporation
O43 - CFD: 14/07/2009 - [0] SHD -- C:\Users\Default\AppData\Local\Temporary Internet Files =>.Microsoft Corporation
O43 - CFD: 25/08/2015 - [] D -- C:\Windows\System32\Config\systemprofile\AppData\Local\Apps =>.Microsoft Corporation
O43 - CFD: 14/04/2017 - [] D -- C:\Windows\System32\Config\systemprofile\AppData\Local\CrashRpt
O43 - CFD: 25/09/2017 - [] D -- C:\Windows\System32\Config\systemprofile\AppData\Local\ESET =>.ESET
O43 - CFD: 15/07/2015 - [] D -- C:\Windows\System32\Config\systemprofile\AppData\Local\Microsoft =>.Microsoft Corporation
O43 - CFD: 21/05/2014 - [] D -- C:\Windows\System32\Config\systemprofile\AppData\Roaming\Apple Computer =>.Apple Inc.
O43 - CFD: 06/10/2017 - [] D -- C:\Windows\System32\Config\systemprofile\AppData\Roaming\ESET =>.ESET
O43 - CFD: 03/04/2015 - [] D -- C:\Windows\System32\Config\systemprofile\AppData\Roaming\McAfee =>.McAfee
O43 - CFD: 31/08/2017 - [] SD -- C:\Windows\System32\Config\systemprofile\AppData\Roaming\Microsoft =>.Microsoft Corporation
O43 - CFD: 02/11/2015 - [] D -- C:\Windows\System32\Config\systemprofile\AppData\Roaming\Mozilla =>.Mozilla Corporation
O43 - CFD: 15/02/2017 - [] D -- C:\Windows\System32\Config\systemprofile\AppData\Roaming\Tenorshare =>.Tenorshare

---\\ ShellIconOverlayIdentifiers (SIOI) (3) - 1s
O106 - SIOI: Enhanced Storage Icon Overlay Handler Class [EnhancedStorageShell] - {D9144DCD-E998-4ECA-AB6A-DCD83CCBA16D}. (.Microsoft Corporation - DLL d’extension d’environnement de stockage.) -- C:\Windows\System32\EhStorShell.dll =>.Microsoft Corporation
O106 - SIOI: [Offline Files] - {4E77131D-3629-431c-9818-C5679DC83E81}. (.Microsoft Corporation - IU de cache côté client.) -- C:\Windows\System32\cscui.dll =>.Microsoft Corporation
O106 - SIOI: Sharing Overlay (Private) [SharingPrivate] - {08244EE6-92F0-47f2-9FC9-929BAA2E7235}. (.Microsoft Corporation - Extensions de l’interpréteur de commandes p.) -- C:\Windows\System32\ntshrui.dll =>.Microsoft Corporation

---\\ Raccourcis de menus conceptuels (SCMH) (30) - 0s
O108 - CMH1: BriefcaseMenu - {85BBD920-42A0-1069-A2E4-08002B30309D} . (.Microsoft Corporation - Porte-documents Windows.) -- C:\Windows\System32\syncui.dll =>.Microsoft Corporation
O108 - CMH1: ESET Smart Security - Context Menu Shell Extension - {B089FE88-FB52-11D3-BDF1-0050DA34150D} . (.ESET - ESET Shell Extension.) -- C:\Program Files\ESET\ESET NOD32 Antivirus\shellExt.dll =>.ESET, spol. s r.o.®
O108 - CMH1: Open With - {09799AFB-AD67-11d1-ABCD-00C04FC30936} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll =>.Microsoft Corporation
O108 - CMH1: Open With EncryptionMenu - {A470F8CF-A1E8-4f65-8335-227475AA5C46} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll =>.Microsoft Corporation
O108 - CMH1: Sharing - {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} . (.Microsoft Corporation - Extensions de l’interpréteur de commandes p.) -- C:\Windows\System32\ntshrui.dll =>.Microsoft Corporation
O108 - CMH1: WinRAR - {B41DB860-8EE4-11D2-9906-E49FADC173CA} . (.Alexander Roshal - WinRAR shell extension.) -- C:\Program Files\WinRAR\RarExt.dll =>.win.rar GmbH®
O108 - CMH1: WinZip - {E0D79304-84BE-11CE-9641-444553540000} . (.WinZip Computing, S.L. - WinZip Shell Extension DLL.) -- C:\Program Files\WinZip\WZSHLSTB.dll =>.Corel Corporation®
O108 - CMH2: Compatibility - {1d27f844-3a1f-4410-85ac-14651078412d} . (.Microsoft Corporation - Bibliothèque d’extension de l’onglet Compat.) -- C:\Windows\System32\acppage.dll =>.Microsoft Corporation
O108 - CMH2: ESET Smart Security - Context Menu Shell Extension - {B089FE88-FB52-11D3-BDF1-0050DA34150D} . (.ESET - ESET Shell Extension.) -- C:\Program Files\ESET\ESET NOD32 Antivirus\shellExt.dll =>.ESET, spol. s r.o.®
O108 - CMH2: OpenContainingFolderMenu - {37ea3a21-7493-4208-a011-7f9ea79ce9f5} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll =>.Microsoft Corporation
O108 - CMH2: WinZip - {E0D79304-84BE-11CE-9641-444553540000} . (.WinZip Computing, S.L. - WinZip Shell Extension DLL.) -- C:\Program Files\WinZip\WZSHLSTB.dll =>.Corel Corporation®
O108 - CMH3: CopyAsPathMenu - {f3d06e7c-1e45-4a26-847e-f9fcdee59be0} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll =>.Microsoft Corporation
O108 - CMH3: SendTo - {7BA4C740-9E81-11CF-99D3-00AA004AE837} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll =>.Microsoft Corporation
O108 - CMH4: EncryptionMenu - {A470F8CF-A1E8-4f65-8335-227475AA5C46} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll =>.Microsoft Corporation
O108 - CMH4: Offline Files - {474C98EE-CF3D-41f5-80E3-4AAB0AB04301} . (.Microsoft Corporation - IU de cache côté client.) -- C:\Windows\System32\cscui.dll =>.Microsoft Corporation
O108 - CMH4: Sharing - {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} . (.Microsoft Corporation - Extensions de l’interpréteur de commandes p.) -- C:\Windows\System32\ntshrui.dll =>.Microsoft Corporation
O108 - CMH4: WinRAR - {B41DB860-8EE4-11D2-9906-E49FADC173CA} . (.Alexander Roshal - WinRAR shell extension.) -- C:\Program Files\WinRAR\RarExt.dll =>.win.rar GmbH®
O108 - CMH4: WinZip - {E0D79304-84BE-11CE-9641-444553540000} . (.WinZip Computing, S.L. - WinZip Shell Extension DLL.) -- C:\Program Files\WinZip\WZSHLSTB.dll =>.Corel Corporation®
O108 - CMH5: Gadgets - {6B9228DA-9C15-419e-856C-19E768A13BDC} . (.Microsoft Corporation - Zone de déposé du Volet Windows.) -- C:\Program Files\Windows Sidebar\sbdrop.dll =>.Microsoft Corporation
O108 - CMH5: New - {D969A300-E7FF-11d0-A93B-00A0C90F2719} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll =>.Microsoft Corporation
O108 - CMH5: Sharing - {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} . (.Microsoft Corporation - Extensions de l’interpréteur de commandes p.) -- C:\Windows\System32\ntshrui.dll =>.Microsoft Corporation
O108 - CMH6: BriefcaseMenu - {85BBD920-42A0-1069-A2E4-08002B30309D} . (.Microsoft Corporation - Porte-documents Windows.) -- C:\Windows\System32\syncui.dll =>.Microsoft Corporation
O108 - CMH6: ESET Smart Security - Context Menu Shell Extension - {B089FE88-FB52-11D3-BDF1-0050DA34150D} . (.ESET - ESET Shell Extension.) -- C:\Program Files\ESET\ESET NOD32 Antivirus\shellExt.dll =>.ESET, spol. s r.o.®
O108 - CMH6: Library Location - {3dad6c5d-2167-4cae-9914-f99e41c12cfa} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll =>.Microsoft Corporation
O108 - CMH6: Offline Files - {474C98EE-CF3D-41f5-80E3-4AAB0AB04301} . (.Microsoft Corporation - IU de cache côté client.) -- C:\Windows\System32\cscui.dll =>.Microsoft Corporation
O108 - CMH6: WinRAR - {B41DB860-8EE4-11D2-9906-E49FADC173CA} . (.Alexander Roshal - WinRAR shell extension.) -- C:\Program Files\WinRAR\RarExt.dll =>.win.rar GmbH®
O108 - CMH6: WinZip - {E0D79304-84BE-11CE-9641-444553540000} . (.WinZip Computing, S.L. - WinZip Shell Extension DLL.) -- C:\Program Files\WinZip\WZSHLSTB.dll =>.Corel Corporation®
O108 - CMH7: EnhancedStorageShell - {2854F705-3548-414C-A113-93E27C808C85} . (.Microsoft Corporation - DLL d’extension d’environnement de stockage.) -- C:\Windows\System32\EhStorShell.dll =>.Microsoft Corporation
O108 - CMH7: ESET Smart Security - Context Menu Shell Extension - {B089FE88-FB52-11D3-BDF1-0050DA34150D} . (.ESET - ESET Shell Extension.) -- C:\Program Files\ESET\ESET NOD32 Antivirus\shellExt.dll =>.ESET, spol. s r.o.®
O108 - CMH7: Sharing - {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} . (.Microsoft Corporation - Extensions de l’interpréteur de commandes p.) -- C:\Windows\System32\ntshrui.dll =>.Microsoft Corporation

---\\ Image File Execution Options (1) - 0s
O50 - IFEO:C:\Windows\System32\FlashPlayerApp.exe - (.Adobe Systems Incorporated - Adobe Flash Player Control Panel Applet.) [DisableExceptionChainValidation\\0] =>.Adobe Systems Incorporated®

---\\ Enumération des clés StartupReg (3) - 1s
O53 - SMSR:HKLM\...\startupreg\DAEMON Tools Lite [Key] . (.Disc Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files\DAEMON Tools Lite\DTLite.exe =>.Disc Soft Ltd
O53 - SMSR:HKLM\...\startupreg\Sidebar [Key] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe =>.Microsoft Corporation
O53 - SMSR:HKLM\...\startupreg\YTDownloader [Key] . (...) -- C:\Program Files\YTDownloader\YTDownloader.exe (.not file.) =>Adware.YTDownloader

---\\ Liste des pilotes du système (71) - 8s
O58 - SDL:2009/07/14 02:26:15 A . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\drivers\adp94xx.sys [422976] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:26:17 A . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\System32\drivers\adpahci.sys [297552] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:26:15 A . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver.) -- C:\Windows\System32\drivers\adpu320.sys [146512] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:26:15 A . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\Windows\System32\drivers\aliide.sys [14400] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:26:15 A . (.Advanced Micro Devices - AHCI 1.2 Device Driver.) -- C:\Windows\System32\drivers\amdsata.sys [79952] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:26:15 A . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller D.) -- C:\Windows\System32\drivers\amdsbs.sys [159312] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:26:15 A . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\Windows\System32\drivers\amdxata.sys [23616] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:26:15 A . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\System32\drivers\arc.sys [76368] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:26:15 A . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\System32\drivers\arcsas.sys [86608] =>.Microsoft Windows®
O58 - SDL:2009/07/13 23:02:49 A . (.Broadcom Corporation - Pilote unifié NDIS6.x Broadcom NetXtreme Gi.) -- C:\Windows\System32\drivers\b57nd60x.sys [229888] =>.Broadcom Corporation
O58 - SDL:2009/07/13 23:53:28 A . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower.) -- C:\Windows\System32\drivers\BrFiltLo.sys [13568] =>.Brother Industries, Ltd.
O58 - SDL:2009/07/13 23:53:28 A . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper.) -- C:\Windows\System32\drivers\BrFiltUp.sys [5248] =>.Brother Industries, Ltd.
O58 - SDL:2009/07/14 01:57:25 A . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\System32\drivers\BrSerId.sys [272128] =>.Brother Industries Ltd.
O58 - SDL:2009/07/13 23:53:32 A . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\System32\drivers\BrSerWdm.sys [62336] =>.Brother Industries Ltd.
O58 - SDL:2009/07/13 23:53:33 A . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\System32\drivers\BrUsbMdm.sys [12160] =>.Brother Industries Ltd.
O58 - SDL:2009/07/13 23:53:33 A . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\System32\drivers\BrUsbSer.sys [11904] =>.Brother Industries Ltd.
O58 - SDL:2009/07/13 23:02:48 A . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.) -- C:\Windows\System32\drivers\bxvbdx.sys [430080] =>.Broadcom Corporation
O58 - SDL:2009/07/14 02:26:21 A . (.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\cmdide.sys [15952] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:20:28 A . (.Adaptec, Inc. - Adaptec Ultra SCSI miniport.) -- C:\Windows\System32\drivers\djsvs.sys [70720] =>.Microsoft Windows®
O58 - SDL:2014/05/12 09:56:30 A . (.Disc Soft Ltd - DAEMON Tools Virtual Bus Driver.) -- C:\Windows\System32\drivers\dtsoftbus01.sys [243128] =>.Disc Soft Ltd®
O58 - SDL:2017/06/22 16:01:02 A . (.ESET - Amon monitor.) -- C:\Windows\System32\drivers\eamonm.sys [113512] =>.ESET, spol. s r.o.®
O58 - SDL:2017/05/04 13:18:04 A . (.ESET - Devmon monitor.) -- C:\Windows\System32\drivers\edevmon.sys [90656] =>.ESET, spol. s r.o.®
O58 - SDL:2017/05/04 13:18:04 A . (.ESET - ESET Helper driver.) -- C:\Windows\System32\drivers\ehdrv.sys [139384] =>.ESET, spol. s r.o.®
O58 - SDL:2009/07/14 02:20:28 A . (.Emulex - Storport Miniport Driver for LightPulse HBA.) -- C:\Windows\System32\drivers\elxstor.sys [453712] =>.Microsoft Windows®
O58 - SDL:2016/10/13 15:39:14 A . (.ESET - Epfw NDIS LightWeight Filter.) -- C:\Windows\System32\drivers\EpfwLWF.sys [51848] =>.ESET, spol. s r.o.®
O58 - SDL:2017/05/04 13:18:04 A . (.ESET - ESET Personal Firewall driver.) -- C:\Windows\System32\drivers\epfwwfpr.sys [67712] =>.ESET, spol. s r.o.®
O58 - SDL:2009/07/13 23:02:48 A . (.Broadcom Corporation - Broadcom NetXtreme II 10 GigE VBD.) -- C:\Windows\System32\drivers\evbdx.sys [3100160] =>.Broadcom Corporation
O58 - SDL:2012/08/21 12:01:22 A . (.GEAR Software Inc. - CD DVD Filter.) -- C:\Windows\System32\drivers\GEARAspiWDM.sys [26840] =>.GEAR Software Inc.®
O58 - SDL:2009/07/13 23:54:14 A . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for.) -- C:\Windows\System32\drivers\hcw85cir.sys [26624] =>.Hauppauge Computer Works, Inc.
O58 - SDL:2009/03/18 11:57:10 A . (.Paragon Software Group - A part of Paragon System Utilities.) -- C:\Windows\System32\drivers\hotcore3.sys [40560] =>.Paragon Technologie GmbH®
O58 - SDL:2009/07/14 02:20:28 A . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Drive.) -- C:\Windows\System32\drivers\HpSAMD.sys [67152] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:20:36 A . (.Intel Corporation - Intel Matrix Storage Manager driver - ia32.) -- C:\Windows\System32\drivers\iaStorV.sys [332352] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:20:36 A . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\System32\drivers\iirsp.sys [41040] =>.Microsoft Windows®
O58 - SDL:2017/01/12 11:45:58 A . (.http://libusb-win32.sourceforge.net - LibUSB-Win32 - Kernel Driver.) -- C:\Windows\System32\drivers\libusb0.sys [42592] =>.Travis Lee Robinson®
O58 - SDL:2009/07/14 02:20:36 A . (.LSI Corporation - LSI Fusion-MPT FC Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_fc.sys [95824] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:20:37 A . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas.sys [89168] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:20:36 A . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas2.sys [54864] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:20:36 A . (.LSI Corporation - LSI Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_scsi.sys [96848] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:20:36 A . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows.) -- C:\Windows\System32\drivers\megasas.sys [30800] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:20:36 A . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\System32\drivers\MegaSR.sys [235584] =>.Microsoft Windows®
O58 - SDL:2013/07/25 15:53:46 A . (.Apple Inc. - Apple Mobile Device Ethernet.) -- C:\Windows\System32\drivers\netaapl.sys [18944] =>.Apple Inc.
O58 - SDL:2009/07/14 02:20:44 A . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\System32\drivers\nfrd960.sys [44624] =>.Microsoft Windows®
O58 - SDL:2009/06/10 22:19:48 A . (.NVIDIA Corporation - NVIDIA Windows Kernel Mode Driver, Version.) -- C:\Windows\System32\drivers\nvlddmkm.sys [9853248] =>.NVIDIA Corporation
O58 - SDL:2009/07/14 02:20:44 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\System32\drivers\nvraid.sys [117312] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:20:44 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\System32\drivers\nvstor.sys [142416] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:19:04 A . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\Windows\System32\drivers\ql2300.sys [1383488] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:19:04 A . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\Windows\System32\drivers\ql40xx.sys [106064] =>.Microsoft Windows®
O58 - SDL:2009/07/13 23:02:52 A . (.Realtek Corporation - Realtek 8101E/8168/8169 NDIS 6.20 32-bit Dr.) -- C:\Windows\System32\drivers\Rt86win7.sys [139776] =>.Realtek Corporation
O58 - SDL:2009/07/13 21:50:20 A . (.Macrovision Corporation, Macrovision Europe Limited, - Macrovision SECURITY Driver.) -- C:\Windows\System32\drivers\secdrv.sys [20480] =>.Macrovision Corporation, Macrovision Europe Limited,
O58 - SDL:2009/07/14 02:19:04 A . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\System32\drivers\sisraid2.sys [40016] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:19:04 A . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\System32\drivers\sisraid4.sys [77888] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:19:04 A . (.Promise Technology - Promise SuperTrak EX Series Driver for Win.) -- C:\Windows\System32\drivers\stexstor.sys [21072] =>.Microsoft Windows®
O58 - SDL:2017/03/24 13:43:16 A . (.Anchorfree Inc. - Anchorfree HSS VPN Adapter.) -- C:\Windows\System32\drivers\taphss6.sys [36944] =>.AnchorFree Inc®
O58 - SDL:2016/03/28 12:41:34 A . (.Apple, Inc. - Apple Mobile Device USB Driver.) -- C:\Windows\System32\drivers\usbaapl.sys [45056] =>.Apple, Inc.
O58 - SDL:2009/07/14 02:19:10 A . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\viaide.sys [16976] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:19:11 A . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\Windows\System32\drivers\vsmraid.sys [141904] =>.Microsoft Windows®
O58 - SDL:2009/07/13 22:40:41 A . (...) -- C:\Windows\System32\ANSI.SYS [9029] =>.Microsoft Corporation
O58 - SDL:2009/07/13 22:40:44 A . (...) -- C:\Windows\System32\country.sys [27097] =>.Microsoft Corporation
O58 - SDL:2009/07/13 22:40:40 A . (...) -- C:\Windows\System32\HIMEM.SYS [4768] =>.Microsoft Corporation
O58 - SDL:2009/07/13 22:40:43 A . (...) -- C:\Windows\System32\KEY01.SYS [42809] =>.Microsoft Corporation
O58 - SDL:2009/07/13 22:40:43 A . (...) -- C:\Windows\System32\KEYBOARD.SYS [42537] =>.Microsoft Corporation
O58 - SDL:2009/07/13 22:40:23 A . (...) -- C:\Windows\System32\NTDOS.SYS [27866] =>.Microsoft Corporation
O58 - SDL:2009/07/13 22:40:31 A . (...) -- C:\Windows\System32\NTDOS404.SYS [29146] =>.Microsoft Corporation
O58 - SDL:2009/07/13 22:40:35 A . (...) -- C:\Windows\System32\NTDOS411.SYS [29370] =>.Microsoft Corporation
O58 - SDL:2009/07/13 22:40:39 A . (...) -- C:\Windows\System32\NTDOS412.SYS [29274] =>.Microsoft Corporation
O58 - SDL:2009/07/13 22:40:27 A . (...) -- C:\Windows\System32\NTDOS804.SYS [29146] =>.Microsoft Corporation
O58 - SDL:2009/07/13 22:40:11 A . (...) -- C:\Windows\System32\NTIO.SYS [33952] =>.Microsoft Corporation
O58 - SDL:2009/07/13 22:40:15 A . (...) -- C:\Windows\System32\NTIO404.SYS [34672] =>.Microsoft Corporation
O58 - SDL:2009/07/13 22:40:17 A . (...) -- C:\Windows\System32\NTIO411.SYS [35776] =>.Microsoft Corporation
O58 - SDL:2009/07/13 22:40:19 A . (...) -- C:\Windows\System32\NTIO412.SYS [35536] =>.Microsoft Corporation
O58 - SDL:2009/07/13 22:40:13 A . (...) -- C:\Windows\System32\NTIO804.SYS [34672] =>.Microsoft Corporation

---\\ Associations Shell Spawning (9) - 0s
O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe =>.Microsoft Corporation
O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Ob.) -- C:\Windows\System32\eventvwr.exe =>.Microsoft Corporation
O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (...) -- %1" %*
O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe =>.Microsoft Corporation
O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S

---\\ Menu de démarrage Internet (12) - 1s
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc®
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (...) -- C:\Program Files\Opera\Launcher.exe (.not file.)
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc.
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - Utilitaire d’initialisation d’Internet Expl.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (...) -- C:\Program Files\Opera\Launcher.exe (.not file.)
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc.
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - Utilitaire d’initialisation d’Internet Expl.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (...) -- C:\Program Files\Opera\Launcher.exe (.not file.)
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc.
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - Utilitaire d’initialisation d’Internet Expl.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (...) -- C:\Program Files\Opera\Launcher.exe (.not file.)

---\\ Recherche d'infection sur les navigateurs (3) - 0s
O69 - SBI: SearchScopes [HKCU]{ielnksrch} [DefaultScope] - (Search the web) - http://%66%65%65%64.%68%65%6C%70%65%72%62%61%72.%63%6F%6D/?p=mKO_AwFzXIpYRYSttY34mamef947lyub11ECQdQoyJId6Uc4wSajfMMdB84kzFK8GXpf7yWPyqQS9U9wvFAmfbPSJeUfiL17Ca2x-FlFhPiN_3rmNFNxxW8JO6fL1fKyyPL9wQKaSgo2_qrIg2RTttPApY0ZAWvhEnTn5-DXqUAUHJTIJ7vor16O3YIPHRJKFtshaPm7Mw,,&q={searchTerms} =>.SUP.Linkury
O69 - SBI: SearchScopes [HKLM]ielnksrch - (Search the web) - http://%66%65%65%64.%68%65%6C%70%65%72%62%61%72.%63%6F%6D/?p=mKO_AwFzXIpYRYSttY34mamef947lyub11ECQdQoyJId6Uc4wSajfMMdB84kzFK8GXpf7yWPyqQS9U9wvFAmfbPSJeUfiL17Ca2x-FlFhPiN_3rmNFNxxW8JO6fL1fKyyPL9wQKaSgo2_qrIg2RTttPApY0ZAWvhEnTn5-DXqUAUHJTIJ7vor16O3YIPHRJKFtshaPm7Mw,,&q={searchTerms} =>.SUP.Linkury
O69 - SBI: SearchScopes [HKLM]{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (@ieframe.dll,-12512) - http://www.bing.com/ =>.Bing.com

---\\ Enumère les services démarrés par Svchost (33) - 1s
O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d’application.) -- C:\Windows\System32\aelupsvc.dll [62464] =>.Microsoft Corporation
O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [67584] =>.Microsoft Corporation
O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [67584] =>.Microsoft Corporation
O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\System32\srvsvc.dll [168448] =>.Microsoft Corporation
O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\System32\gpsvc.dll [591360] =>.Microsoft Corporation
O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\IKEEXT.DLL [667136] =>.Microsoft Corporation
O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Service Audio Windows.) -- C:\Windows\System32\audiosrv.dll [473088] =>.Microsoft Corporation
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’.) -- C:\Windows\System32\rasauto.dll [90624] =>.Microsoft Corporation
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire de connexions d’accès distant.) -- C:\Windows\System32\rasmans.dll [285184] =>.Microsoft Corporation
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll [75264] =>.Microsoft Corporation
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements systèm.) -- C:\Windows\System32\Sens.dll [49664] =>.Microsoft Corporation
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l’application d’assistance à.) -- C:\Windows\System32\ipnathlp.dll [300544] =>.Microsoft Corporation
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM.) -- C:\Windows\System32\tapisrv.dll [241664] =>.Microsoft Corporation
O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gestionnaire des connexions distantes du se.) -- C:\Windows\System32\termsrv.dll [543232] =>.Microsoft Corporation
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Up.) -- C:\Windows\System32\wuaueng.dll [1933848] =>.Microsoft Windows Component Publisher®
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière.) -- C:\Windows\System32\qmgr.dll [589312] =>.Microsoft Corporation
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [328192] =>.Microsoft Corporation
O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur u.) -- C:\Windows\System32\iphlpsvc.dll [497152] =>.Microsoft Corporation
O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d’ouverture de session secon.) -- C:\Windows\System32\seclogon.dll [21504] =>.Microsoft Corporation
O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll [46592] =>.Microsoft Corporation
O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\System32\iscsiexe.dll [114688] =>.Microsoft Corporation
O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédia.) -- C:\Windows\System32\mmcss.dll [49664] =>.Microsoft Corporation
O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll [61440] =>.Microsoft Corporation
O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll [98304] =>.Microsoft Corporation
O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll [162816] =>.Microsoft Corporation
O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\System32\schedsvc.dll [749056] =>.Microsoft Corporation
O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\Windows\System32\KMSVC.DLL [71168] =>.Microsoft Corporation
O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à.) -- C:\Windows\System32\SessEnv.dll [99328] =>.Microsoft Corporation
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll [168960] =>.Microsoft Corporation
O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\System32\browser.dll [102400] =>.Microsoft Corporation
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\Windows\System32\themeservice.dll [37376] =>.Microsoft Corporation
O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\Windows\System32\bdesvc.dll [76800] =>.Microsoft Corporation
O83 - Search Svchost Services: AppMgmt (AppMgmt) . (.Microsoft Corporation - Service Installation de logiciels.) -- C:\Windows\System32\appmgmts.dll [149504] =>.Microsoft Corporation

---\\ Liste des exceptions du parefeu Windows (56) - 6s
O87 - FAEL: "{1D8F4A13-372D-45AE-926C-BFE79EF8C5BA}" [In-None-P6-TRUE] .(...) -- C:\Program Files\PCDApp\dgen.exe (.not file.)
O87 - FAEL: "{278D7589-7B08-4C20-B402-F8154E4508A6}" [In-None-P17-TRUE] .(...) -- C:\Program Files\PCDApp\dgen.exe (.not file.)
O87 - FAEL: "{38DC2DAC-3406-4A5E-8E5D-0BB253A8529D}" [In-None-P6-TRUE] .(...) -- C:\Program Files\PCDApp\cudaminer.exe (.not file.)
O87 - FAEL: "{F349BDE2-94D4-4237-AE47-AC92D30FE6D3}" [In-None-P17-TRUE] .(...) -- C:\Program Files\PCDApp\cudaminer.exe (.not file.)
O87 - FAEL: "{5698DEC9-5CAB-4948-B865-01CC3A20E225}" [In-None-P6-TRUE] .(...) -- E:\Nouveau dossier\pes2013.exe (.not file.)
O87 - FAEL: "{E0FBC566-562D-4161-91FC-7828430637EA}" [In-None-P17-TRUE] .(...) -- E:\Nouveau dossier\pes2013.exe (.not file.)
O87 - FAEL: "{40F6D0D6-9B00-4314-A45F-3E76B7C20028}" [In-None-P6-TRUE] .(...) -- E:\Nouveau dossier (3)\pes2013.exe (.not file.)
O87 - FAEL: "{04D69F65-83C2-41EA-8CF8-6EC9EE9CBD00}" [In-None-P17-TRUE] .(...) -- E:\Nouveau dossier (3)\pes2013.exe (.not file.)
O87 - FAEL: "{8F7FC077-B260-4CAA-ABE9-BBB4A352E17D}" [In-None-P6-TRUE] .(...) -- C:\Program Files\konami\pes2013.exe (.not file.)
O87 - FAEL: "{EFAAD18E-160A-42CA-BCF1-19B83ED33A97}" [In-None-P17-TRUE] .(...) -- C:\Program Files\konami\pes2013.exe (.not file.)
O87 - FAEL: "{D6CBD148-ADC2-4614-9626-A1CFFA5929CD}" [In-None-P6-TRUE] .(...) -- E:\Nouveau dossier\Pro Evolution Soccer 2013\pes2013.exe (.not file.)
O87 - FAEL: "{DD08C4D9-7C80-4497-B99E-7EB6401777DF}" [In-None-P17-TRUE] .(...) -- E:\Nouveau dossier\Pro Evolution Soccer 2013\pes2013.exe (.not file.)
O87 - FAEL: "TCP Query User{72273E85-843F-4C8A-9C91-8F522175F379}E:\nouveau dossier (3)\nouveau dossier\assassin's creed liberation hd\ac3lhd_32.exe" [In-None-P6-TRUE] .(...) -- E:\nouveau dossier (3)\nouveau dossier\assassin's creed liberation hd\ac3lhd_32.exe (.not file.)
O87 - FAEL: "UDP Query User{C3AC2A6F-196F-4D0F-A19E-5B661D23DDA9}E:\nouveau dossier (3)\nouveau dossier\assassin's creed liberation hd\ac3lhd_32.exe" [In-None-P17-TRUE] .(...) -- E:\nouveau dossier (3)\nouveau dossier\assassin's creed liberation hd\ac3lhd_32.exe (.not file.)
O87 - FAEL: "TCP Query User{FDED5A33-6AE9-49E1-A088-457546C58807}E:\program files\konami\pro evolution soccer 2014\pes2014.exe" [In-None-P6-TRUE] .(...) -- E:\program files\konami\pro evolution soccer 2014\pes2014.exe (.not file.)
O87 - FAEL: "UDP Query User{529188CB-7824-4DEF-975B-D6BFDB7E80D3}E:\program files\konami\pro evolution soccer 2014\pes2014.exe" [In-None-P17-TRUE] .(...) -- E:\program files\konami\pro evolution soccer 2014\pes2014.exe (.not file.)
O87 - FAEL: "{24789018-CE12-4781-AB5D-798DECF7204A}" [In-None-P6-TRUE] .(...) -- C:\Program Files\Steam\Steam.exe (.not file.)
O87 - FAEL: "{9B72FAD8-6F3E-4237-8CA0-FB3DA4B2917C}" [In-None-P17-TRUE] .(...) -- C:\Program Files\Steam\Steam.exe (.not file.)
O87 - FAEL: "{A041805B-41C3-436C-A499-B45B3DCC3C40}" [In-None-P6-TRUE] .(...) -- C:\Program Files\Steam\Steam.exe (.not file.)
O87 - FAEL: "{4A7D3F70-0B5B-4E1D-AC2E-7790F802F572}" [In-None-P17-TRUE] .(...) -- C:\Program Files\Steam\Steam.exe (.not file.)
O87 - FAEL: "TCP Query User{80A9AC8A-C525-4A3C-9969-FF1525D9A500}E:\nouveau dossier (2)\oop\arma 3\arma3server.exe" [In-None-P6-TRUE] .(...) -- E:\nouveau dossier (2)\oop\arma 3\arma3server.exe (.not file.)
O87 - FAEL: "UDP Query User{4578A594-2827-474A-87B5-EBD119994922}E:\nouveau dossier (2)\oop\arma 3\arma3server.exe" [In-None-P17-TRUE] .(...) -- E:\nouveau dossier (2)\oop\arma 3\arma3server.exe (.not file.)
O87 - FAEL: "TCP Query User{8FCB2BD1-A501-4D5C-9524-11D332271014}E:\nouveau dossier (2)\oop\arma 3\arma3.exe" [In-None-P6-TRUE] .(...) -- E:\nouveau dossier (2)\oop\arma 3\arma3.exe (.not file.)
O87 - FAEL: "UDP Query User{0BDE29BC-4E42-4179-989C-81414005B127}E:\nouveau dossier (2)\oop\arma 3\arma3.exe" [In-None-P17-TRUE] .(...) -- E:\nouveau dossier (2)\oop\arma 3\arma3.exe (.not file.)
O87 - FAEL: "TCP Query User{C9D50B68-71E1-48BC-8691-37D740C5B5A7}E:\nouveau dossier (3)\gghj,\pes\pro evolution soccer 2015\pes2015.exe" [In-None-P6-TRUE] .(...) -- E:\nouveau dossier (3)\gghj,\pes\pro evolution soccer 2015\pes2015.exe (.not file.)
O87 - FAEL: "UDP Query User{B66D6A59-849B-4E13-BC96-D3C0E6CCB990}E:\nouveau dossier (3)\gghj,\pes\pro evolution soccer 2015\pes2015.exe" [In-None-P17-TRUE] .(...) -- E:\nouveau dossier (3)\gghj,\pes\pro evolution soccer 2015\pes2015.exe (.not file.)
O87 - FAEL: "TCP Query User{F4C70FDB-5517-4701-951E-CE3D0BB4111E}E:\new directory\real boxing\binaries\win32\realboxing.exe" [In-None-P6-TRUE] .(...) -- E:\new directory\real boxing\binaries\win32\realboxing.exe (.not file.)
O87 - FAEL: "UDP Query User{70A45A74-6FCA-42DF-90BF-288464FE54C5}E:\new directory\real boxing\binaries\win32\realboxing.exe" [In-None-P17-TRUE] .(...) -- E:\new directory\real boxing\binaries\win32\realboxing.exe (.not file.)
O87 - FAEL: "{9289F039-334E-45E2-9117-AF9CD4BF307B}" [In-None-P6-TRUE] .(...) -- E:\IHF Handball Challenge 12\IHF_HC12.exe (.not file.)
O87 - FAEL: "{FEEDC519-8696-407E-A7C9-2B16A076B0C8}" [In-None-P17-TRUE] .(...) -- E:\IHF Handball Challenge 12\IHF_HC12.exe (.not file.)
O87 - FAEL: "{1B8838DB-783E-44BF-8E2C-E10011AB7060}" [In-None-P6-TRUE] .(...) -- E:\IHF Handball Challenge 12\updater\Updater.exe (.not file.)
O87 - FAEL: "{9D5297E9-1517-4916-91D2-D83BC2C64867}" [In-None-P17-TRUE] .(...) -- E:\IHF Handball Challenge 12\updater\Updater.exe (.not file.)
O87 - FAEL: "TCP Query User{766E7EF2-ED43-4D15-AC70-1DED4E59FD70}E:\nouveau dossier (3)\gghj,\pes\pro evolution soccer 2015\pes2015.exe" [In-None-P6-TRUE] .(...) -- E:\nouveau dossier (3)\gghj,\pes\pro evolution soccer 2015\pes2015.exe (.not file.)
O87 - FAEL: "UDP Query User{D36653C0-910C-4E44-801A-B3DA5CF2A6CE}E:\nouveau dossier (3)\gghj,\pes\pro evolution soccer 2015\pes2015.exe" [In-None-P17-TRUE] .(...) -- E:\nouveau dossier (3)\gghj,\pes\pro evolution soccer 2015\pes2015.exe (.not file.)
O87 - FAEL: "TCP Query User{464EA687-6D08-4E82-B679-6CC3B335113A}E:\nouveau dossier (6)\pro evolution soccer 2016\pes2016.exe" [In-None-P6-TRUE] .(...) -- E:\nouveau dossier (6)\pro evolution soccer 2016\pes2016.exe (.not file.)
O87 - FAEL: "UDP Query User{9575AEEB-1FAF-4348-8416-7DD9A04D2188}E:\nouveau dossier (6)\pro evolution soccer 2016\pes2016.exe" [In-None-P17-TRUE] .(...) -- E:\nouveau dossier (6)\pro evolution soccer 2016\pes2016.exe (.not file.)
O87 - FAEL: "{231A5EBB-B98C-4A4B-AE78-24528A21169B}" [In-None-P6-TRUE] .(...) -- C:\Program Files\SrpnFiles\SrpnFiles.exe (.not file.) =>.SUP.SpringFiles
O87 - FAEL: "{8928E89C-85A1-418C-A00B-F5F0FEBE8A67}" [In-None-P17-TRUE] .(...) -- C:\Program Files\SrpnFiles\SrpnFiles.exe (.not file.) =>.SUP.SpringFiles
O87 - FAEL: "{E30F3F63-D06B-4363-8B32-B886E6D45621}" [In-None-P6-TRUE] .(.New Unity Inc - SprgFiles Downloader Application.) -- C:\Program Files\SrpnFiles\downloader.exe =>.SUP.SpringFiles
O87 - FAEL: "{6A53B64D-4438-4CAB-B35D-D9CF606A9E09}" [In-None-P17-TRUE] .(.New Unity Inc - SprgFiles Downloader Application.) -- C:\Program Files\SrpnFiles\downloader.exe =>.SUP.SpringFiles
O87 - FAEL: "TCP Query User{096346F1-15DE-4559-8F61-0504D86A3390}G:\pes2015.exe" [In-None-P6-TRUE] .(...) -- G:\pes2015.exe (.not file.)
O87 - FAEL: "UDP Query User{281FD569-92AA-4947-8970-C07CEADFF579}G:\pes2015.exe" [In-None-P17-TRUE] .(...) -- G:\pes2015.exe (.not file.)
O87 - FAEL: "TCP Query User{62D6D41B-B3E8-48E4-8C94-340FC74E09D0}C:\program files\pp助手5.0\pphelper5.exe" [In-None-P6-TRUE] .(.广州爱禾网络技术有限公司 - PP助手.) -- C:\program files\pp助手5.0\pphelper5.exe
O87 - FAEL: "UDP Query User{D23F4A6E-C92E-4E17-A471-A9A40C99F705}C:\program files\pp助手5.0\pphelper5.exe" [In-None-P17-TRUE] .(.广州爱禾网络技术有限公司 - PP助手.) -- C:\program files\pp助手5.0\pphelper5.exe
O87 - FAEL: "TCP Query User{5BBA0771-6869-4324-8847-6DC96E5CE24C}C:\program files\pp助手5.0\adevicehelpermon.exe" [In-None-P6-TRUE] .(.广州铁人网络科技有限公司 - PP助手连接模块.) -- C:\program files\pp助手5.0\adevicehelpermon.exe
O87 - FAEL: "UDP Query User{B79954E5-68F1-4E20-A978-B84F6DDAD858}C:\program files\pp助手5.0\adevicehelpermon.exe" [In-None-P17-TRUE] .(.广州铁人网络科技有限公司 - PP助手连接模块.) -- C:\program files\pp助手5.0\adevicehelpermon.exe
O87 - FAEL: "TCP Query User{24A459CF-B459-453F-8C06-521D747F8673}G:\nouveau dossier (2)\comandos\comandos\mpserver.exe" [In-None-P6-TRUE] .(...) -- G:\nouveau dossier (2)\comandos\comandos\mpserver.exe (.not file.)
O87 - FAEL: "UDP Query User{C3591B3F-4FE9-49CE-8506-67156967B7A3}G:\nouveau dossier (2)\comandos\comandos\mpserver.exe" [In-None-P17-TRUE] .(...) -- G:\nouveau dossier (2)\comandos\comandos\mpserver.exe (.not file.)
O87 - FAEL: "TCP Query User{6FFDF11C-2774-45F7-891F-5FC497EBFBAD}C:\program files\pp助手5.0\pphelper5.exe" [In-None-P6-TRUE] .(.广州爱禾网络技术有限公司 - PP助手.) -- C:\program files\pp助手5.0\pphelper5.exe
O87 - FAEL: "UDP Query User{538138FD-0A22-450D-9C60-D0C7789AD449}C:\program files\pp助手5.0\pphelper5.exe" [In-None-P17-TRUE] .(.广州爱禾网络技术有限公司 - PP助手.) -- C:\program files\pp助手5.0\pphelper5.exe
O87 - FAEL: "TCP Query User{AB67F0C1-4E59-42D3-A598-D4233CA2A352}C:\program files\pp助手5.0\adevicehelpermon.exe" [In-None-P6-TRUE] .(.广州铁人网络科技有限公司 - PP助手连接模块.) -- C:\program files\pp助手5.0\adevicehelpermon.exe
O87 - FAEL: "UDP Query User{F763F672-A49B-47E9-86D5-47D1195DAD0A}C:\program files\pp助手5.0\adevicehelpermon.exe" [In-None-P17-TRUE] .(.广州铁人网络科技有限公司 - PP助手连接模块.) -- C:\program files\pp助手5.0\adevicehelpermon.exe
O87 - FAEL: "TCP Query User{8B230F7B-6D89-46A8-BB6B-B40B6507D362}C:\war\men of war - assault squad 2\mowas_2.exe" [In-None-P6-TRUE] .(...) -- C:\war\men of war - assault squad 2\mowas_2.exe (.not file.)
O87 - FAEL: "UDP Query User{CD4BDE7D-79E0-49DE-A505-6BB42B7DA8E4}C:\war\men of war - assault squad 2\mowas_2.exe" [In-None-P17-TRUE] .(...) -- C:\war\men of war - assault squad 2\mowas_2.exe (.not file.)
O87 - FAEL: "TCP Query User{2332079E-5369-4FFA-8BF1-D536348BD1EC}C:\users\dadi\desktop\imad\imad.exe" [In-None-P6-TRUE] .(...) -- C:\users\dadi\desktop\imad\imad.exe (.not file.)
O87 - FAEL: "UDP Query User{C725FA65-FA70-440B-9A52-A761D5565F74}C:\users\dadi\desktop\imad\imad.exe" [In-None-P17-TRUE] .(...) -- C:\users\dadi\desktop\imad\imad.exe (.not file.)

---\\ Recherche des packages WindowsInstaller (21) - 18s
[MD5.E398BDE08879A89EA7AD414157BAD086] [WIS][2012/09/24 04:48:11] (.Adobe Systems Incorporated.) -- C:\Windows\Installer\106b53.msi [2398208] =>.Adobe Systems Incorporated
[MD5.C934AB7226240A120C14FF98206ABFEF] [WIS][2004/09/22 22:32:58] (.SEIKO EPSON corp. - Attach To Email.) -- C:\Windows\Installer\136ca55.msi [1132232] =>.SEIKO EPSON corp.
[MD5.C628361575B915468D4C1B1BC04E320D] [WIS][2015/03/23 14:01:40] (.Kovid Goyal - calibre Installer.) -- C:\Windows\Installer\14c31f2.msi [64163840] =>.Kovid Goyal
[MD5.F0EE2E7F283866A2A0FEA9BE2D12A979] [WIS][2017/11/12 11:28:36] (.Google Inc. - Google Update Helper.) -- C:\Windows\Installer\17c141b.msi [40960] =>.Google Inc.
[MD5.C7C123AC88BD716D2CD368A65FC101B2] [WIS][2013/11/02 01:24:40] (.Apple Inc. - iTunes Installer.) -- C:\Windows\Installer\18593.msi [70705152] =>.Apple Inc.
[MD5.7C422F66BFC8DD04C1DF8F660366A358] [WIS][2015/04/07 01:14:58] (.Apple Inc. - iTunes Installer.) -- C:\Windows\Installer\1ebafe7.msi [67964928] =>.Apple Inc.
[MD5.567458D78F51A6975F409E7B9EB54B31] [WIS][2016/07/28 15:47:06] (.Apple Inc. - iTunes Installer.) -- C:\Windows\Installer\240188e.msi [71827456] =>.Apple Inc.
[MD5.DDD21464D13EC1EFA75AA086F438254A] [WIS][2017/09/23 12:08:10] (.ESET, spol. s r.o. - ESET NOD32 Antivirus.) -- C:\Windows\Installer\24d9d0.msi [105361408] =>.ESET, spol. s r.o.
[MD5.FE167CDD26D09BB444034C8276F7BFF0] [WIS][2015/12/18 07:00:08] (.Apple Inc. - [ProductName] Installer.) -- C:\Windows\Installer\26e5b4.msi [2404352] =>.Apple Inc.
[MD5.567458D78F51A6975F409E7B9EB54B31] [WIS][2016/07/28 15:47:06] (.Apple Inc. - iTunes Installer.) -- C:\Windows\Installer\26e5c4.msi [71827456] =>.Apple Inc.
[MD5.1A8AFDACC78CF66661F3DEC21B8E700C] [WIS][2016/03/19 03:21:40] (.Apple Inc. - iTunes Installer.) -- C:\Windows\Installer\26e5cf.msi [71245824] =>.Apple Inc.
[MD5.7B335EFF5590892BC32E9769A53FDECF] [WIS][2003/08/28 07:41:30] (.ValuSoft - 18 WoS Across America.) -- C:\Windows\Installer\26e5da.msi [7934784] =>.ValuSoft
[MD5.1F985FD462BC59026BC54E4E01B275C0] [WIS][2015/08/13 03:24:12] (.Apple Inc. - iTunes Installer.) -- C:\Windows\Installer\26e5db.msi [69619712] =>.Apple Inc.
[MD5.7BE533EBFFE51DE1E52977E0A544609F] [WIS][2017/09/15 15:20:15] (.Apple Inc. - Apple Application Support Installer.) -- C:\Windows\Installer\324669.msi [42618880] =>.Apple Inc.
[MD5.11C8E125818DFA89FD1CD326658ECCF2] [WIS][2017/09/15 15:20:15] (.Apple Inc. - Apple Mobile Device Support Installer.) -- C:\Windows\Installer\324670.msi [10604544] =>.Apple Inc.
[MD5.D5154D51B461E06944F5BF503AF747D4] [WIS][2015/04/10 12:41:35] (.Oracle Corporation - Java SE Runtime Environment 8.0.) -- C:\Windows\Installer\348480.msi [36503552] =>.Oracle Corporation
[MD5.7C422F66BFC8DD04C1DF8F660366A358] [WIS][2015/04/07 01:14:58] (.Apple Inc. - iTunes Installer.) -- C:\Windows\Installer\73f489.msi [67964928] =>.Apple Inc.
[MD5.5608502E8D38BD8ABC6F94ED91F50526] [WIS][2016/08/29 17:46:22] (.Citrix Online, LLC - Citrix Online Launcher 1.0.0.408.) -- C:\Windows\Installer\8bb67.msi [114688]
[MD5.D181C3EC418B36FD41F61937E31C66A1] [WIS][2017/12/16 21:08:30] (.Oracle Corporation - Java Auto Updater.) -- C:\Windows\Installer\a8016.msi [761856] =>.Oracle Corporation
[MD5.A666B14C461CC7207C0C9B3D0D2D28F3] [WIS][2017/11/10 02:23:07] (.Adobe Systems Incorporated - Adobe ARM Installer.) -- C:\Windows\Installer\ac972.msi [880128] =>.Adobe Systems Incorporated
[MD5.58C67C83DB76C726133FE286FFCFF0A2] [WIS][2017/07/17 20:11:49] (.Copyright (c) 1991-2017 Corel Corporation. All rights - WinZip Compression Utility.) -- C:\Windows\Installer\fe9f06.msi [78486528]

---\\ Recherche de clés de registre Tracing (4) - 5s
HKLM\SOFTWARE\Microsoft\Tracing\BackupStack_RASAPI32 =>PUP.Optional.MyPCBackup
HKLM\SOFTWARE\Microsoft\Tracing\BackupStack_RASMANCS =>PUP.Optional.MyPCBackup
HKLM\SOFTWARE\Microsoft\Tracing\DCHP_RASAPI32 =>PUP.Optional.Salus
HKLM\SOFTWARE\Microsoft\Tracing\DCHP_RASMANCS =>PUP.Optional.Salus

---\\ Scan Additionnel (37) - 2s
HKLM\SYSTEM\CurrentControlSet\Services\AppecivreSpA =>PUP.Optional.Youndoo
HKLM\SYSTEM\CurrentControlSet\Services\DCHP =>PUP.Optional.Salus
HKLM\SYSTEM\CurrentControlSet\Services\globalUpdate =>Adware.GlobalUpdate
HKLM\SYSTEM\CurrentControlSet\Services\spdfrmon =>PUP.Optional.SpeeditUp
HKLM\SYSTEM\CurrentControlSet\Services\Statity =>PUP.Optional.Salus
C:\Windows\System32\Tasks\{AED19244-48CA-4293-8239-E00A265C4736} =>Adware.YTDownloader
C:\Windows\System32\Tasks\Start Registry Reviver for dadi-PC@dadi(logon) =>PUP.Optional.RegistryReviver
C:\Users\dadi\AppData\Roaming\Mozilla\Firefox\Profiles\i6za124s.default\searchplugins\findit.xml =>PUP.Optional.SmartBar
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110411821192} =>Adware.CrossRider
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110411821192} =>Adware.CrossRider
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110411821192} =>Adware.CrossRider
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4F28A770-9A9A-4696-43F3-4551ED085B5C} =>PUP.Optional.Multiplug
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4F28A770-9A9A-4696-43F3-4551ED085B5C} =>PUP.Optional.Multiplug
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{4F28A770-9A9A-4696-43F3-4551ED085B5C} =>PUP.Optional.Multiplug
[HKEY_USERS\S-1-5-18\Environment]:SNP =>PUP.Optional.Salus
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SrpnFiles =>.SUP.SpringFiles
C:\Program Files\Browser Tab Search by Ask =>PUP.Optional.BrowserTabSearch
C:\Program Files\SpeedItup Free =>PUP.Optional.SpeeditUp
C:\Program Files\SrpnFiles =>.SUP.SpringFiles
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileViewPro =>.SUP.Solvusoft
C:\ProgramData\DCHP =>PUP.Optional.Salus
C:\ProgramData\RegistryReviver.exe =>PUP.Optional.RegistryReviver
C:\ProgramData\SafetyNut =>PUP.Optional.MoviesToolbar
C:\ProgramData\Solvusoft =>.SUP.Solvusoft
C:\Users\dadi\AppData\Roaming\Popper =>PUP.Optional.Vonteera
C:\Users\dadi\AppData\Roaming\Solvusoft =>.SUP.Solvusoft
C:\Users\dadi\AppData\Roaming\SpringFiles =>.SUP.SpringFiles
C:\Users\dadi\AppData\Local\FileViewPro =>.SUP.Solvusoft
C:\Users\dadi\AppData\Local\Math Problem Solver =>PUP.Optional.MathProblemSolver
HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\YTDownloader =>Adware.YTDownloader
HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{ielnksrch} =>.SUP.Linkury
HKLM\Software\WOW6432Node\Microsoft\Internet Explorer\SearchScopes\ielnksrch =>.SUP.Linkury
C:\Program Files\SrpnFiles\downloader.exe =>.SUP.SpringFiles
HKLM\SOFTWARE\Microsoft\Tracing\BackupStack_RASAPI32 =>PUP.Optional.MyPCBackup
HKLM\SOFTWARE\Microsoft\Tracing\BackupStack_RASMANCS =>PUP.Optional.MyPCBackup
HKLM\SOFTWARE\Microsoft\Tracing\DCHP_RASAPI32 =>PUP.Optional.Salus
HKLM\SOFTWARE\Microsoft\Tracing\DCHP_RASMANCS =>PUP.Optional.Salus

---\\ Récapitulatif des éléments trouvés sur votre station (22) - 0s
https://nicolascoolman.eu/2017/03/11/superfluous-youndoo/ =>PUP.Optional.Youndoo
https://nicolascoolman.eu/2017/09/07/pup-optional-salus/ =>PUP.Optional.Salus
https://nicolascoolman.eu/2017/09/20/adware-globalupdate/ =>Adware.GlobalUpdate
https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/ =>PUP.Optional.SpeeditUp
https://nicolascoolman.eu/2017/09/12/origine-lignes-orphelines/ =>.SUP.Orphan
https://nicolascoolman.eu/2017/09/12/adware-ytdownloader/ =>Adware.YTDownloader
https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/ =>PUP.Optional.RegistryReviver
https://nicolascoolman.eu/2017/11/10/hijacker-browser-3/ =>Hijacker.Browser
https://nicolascoolman.eu/2017/09/09/pup-optional-smartbar/ =>PUP.Optional.SmartBar
https://nicolascoolman.eu/2017/09/07/pup-optional-salus/ =>.SUP.Linkury
https://nicolascoolman.eu/2017/03/11/pup-optional-crossrider/ =>Adware.CrossRider
https://www.anti-malware.top/2016/04/28/pup-optional-multiplug/ =>PUP.Optional.Multiplug
https://www.anti-malware.top/2016/04/26/superfluous-springfiles/ =>.SUP.SpringFiles
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.SUP.Solvusoft
https://nicolascoolman.eu/2017/09/16/sup-catalinamarketing/ =>.SUP.CatalinaMarketing
https://nicolascoolman.eu/2017/12/22/sup-downloader/ =>.SUP.Downloader
https://nicolascoolman.eu/2017/01/08/pup-optional-mathproblemsolver/ =>PUP.Optional.MathProblemSolver
https://www.nicolascoolman.com/fr/trojan-vonteera/ =>PUP.Optional.Vonteera
https://nicolascoolman.eu/2017/09/19/adware-installcore-3/ =>Adware.InstallCore
https://www.nicolascoolman.com/fr/pup-browsertabsearch/ =>PUP.Optional.BrowserTabSearch
https://www.nicolascoolman.com/fr/pup-moviestoolbar/ =>PUP.Optional.MoviesToolbar
https://nicolascoolman.eu/2017/09/23/adware-mypcbackup/ =>PUP.Optional.MyPCBackup

~ Unselected Options: O82,
~ End of the scan, 19530 items in 06mn41s (1236)(0)