~ ZHPDiag v2018.5.25.119 Par Nicolas Coolman (2018/05/25)
~ Démarré par Joshua (Administrator) (2018/05/27 12:29:34)
~ Web: https://www.nicolascoolman.com
~ Blog: https://nicolascoolman.eu/
~ Facebook: https://www.facebook.com/nicolascoolman1
~ Certificate ZHPDiag: Legal
~ Etat de la version: Version OK
~ Mode: Scanner
~ Rapport: C:\Users\Joshua\Desktop\ZHPDiag.txt
~ Rapport: C:\Users\Joshua\AppData\Roaming\ZHP\ZHPDiag.txt
~ UAC: Activate
~ Démarrage du système: Normal (Normal boot)
Windows 10 Home, 64-bit (Build 17134) =>.Microsoft Corporation

---\\ NAVIGATEURS INTERNET (3) - 0s
~ MFIE: Mozilla Firefox 59.0.3 (x64 en-US)
~ MSIE: Microsoft Edge v40
~ MSIE: Internet Explorer v11.48.17134.0

---\\ INFORMATIONS SUR LES PRODUITS WINDOWS (3) - 3s
~ Windows Server License Manager Script : OK
~ Licence Script File Génération : OK
Windows Automatic Updates : OK

---\\ LOGICIELS DE PROTECTION (1) - 6s
Windows Defender W10 (Activate) (Protection)

---\\ INFORMATIONS SUR LE SYSTÈME (6) - 0s
~ Operating System: Intel64 Family 6 Model 55 Stepping 8, GenuineIntel
~ Operating System: 64-bit
~ Boot mode: Normal (Normal boot)
Total RAM: 4073.448 MB (46% free) : OK =>.RAM Value
System Restore: Activé (Enable)
System drive C: has 192 GB (63%) free of 303 GB : OK =>.Disk Space

---\\ MODE DE CONNEXION AU SYSTÈME (3) - 0s
~ Computer Name: JOSH
~ User Name: Joshua
~ Logged in as Administrator

---\\ ÉNUMÉRATION DES UNITÉS DE STOCKAGE (1) - 0s
~ Drive C: has 192 GB free of 303 GB (System)

---\\ ÉTAT DU CENTRE DE SÉCURITÉ WINDOWS (7) - 0s
[HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
[HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified
[HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\Software\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM64\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK

---\\ RECHERCHE PARTICULIÈRE DE FICHIERS GÉNÉRIQUES (25) - 3s
[MD5.AD5296B280E8F522A8A897C96BAB0E1D] - 12/04/2018 - (.Microsoft Corporation - Explorateur Windows.) -- C:\WINDOWS\Explorer.exe [3933184] =>.Microsoft Windows®
[MD5.73C519F050C20580F8A62C849D49215A] - 12/04/2018 - (.Microsoft Corporation - Processus hôte Windows (Rundll32).) -- C:\WINDOWS\System32\rundll32.exe [69632] =>.Microsoft Corporation
[MD5.A58B0CB069DA7840B935872ADCD7F0C2] - 12/04/2018 - (.Microsoft Corporation - Application de démarrage de Windows.) -- C:\WINDOWS\System32\Wininit.exe [366792] =>.Microsoft Corporation
[MD5.8D9494F632B97BBA4786946B251A0562] - 28/04/2018 - (.Microsoft Corporation - Extensions Internet pour Win32.) -- C:\WINDOWS\System32\wininet.dll [3440640] =>.Microsoft Corporation
[MD5.F9017F2DC455AD373DF036F5817A8870] - 12/04/2018 - (.Microsoft Corporation - Application d’ouverture de session Windows.) -- C:\WINDOWS\System32\Winlogon.exe [677376] =>.Microsoft Corporation
[MD5.7A377800FF15426B7D89768A8727CFEF] - 12/04/2018 - (.Microsoft Corporation - Bibliothèque de licences.) -- C:\WINDOWS\System32\sppcomapi.dll [415232] =>.Microsoft Corporation
[MD5.912DDBEC210B4B47941319BF991CFD98] - 12/04/2018 - (.Microsoft Corporation - DNS DLL de l’API Client.) -- C:\WINDOWS\System32\dnsapi.dll [766608] =>.Microsoft Windows®
[MD5.E393B53837F6778C8FE0B27B58478B37] - 12/04/2018 - (.Microsoft Corporation - DNS DLL de l’API Client.) -- C:\WINDOWS\Syswow64\dnsapi.dll [573392] =>.Microsoft Windows®
[MD5.80BC3B8D2055BC38ECD84769C074C18F] - 12/04/2018 - (.Microsoft Corporation - DLL client de l’API uilisateur de Windows m.) -- C:\WINDOWS\System32\fr-FR\user32.dll.mui [19968] =>.Microsoft Corporation
[MD5.4DCCC3E02A22ED4A4ADB11386F226071] - 12/04/2018 - (.Microsoft Corporation - Pilote de fonction connexe pour WinSock.) -- C:\WINDOWS\System32\drivers\AFD.sys [626592] =>.Microsoft Corporation
[MD5.90AB4ED8EBD72A1C096A40CC35404B91] - 12/04/2018 - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) -- C:\WINDOWS\System32\drivers\atapi.sys [28568] =>.Microsoft Corporation
[MD5.D3CBC6DE5955D014407C7BD1FFE80F00] - 12/04/2018 - (.Microsoft Corporation - CD-ROM File System Driver.) -- C:\WINDOWS\System32\drivers\Cdfs.sys [93696] =>.Microsoft Corporation
[MD5.AD4D24434C058AFAFD5AB319B4BF5B66] - 12/04/2018 - (.Microsoft Corporation - SCSI CD-ROM Driver.) -- C:\WINDOWS\System32\drivers\Cdrom.sys [159744] =>.Microsoft Corporation
[MD5.9E74A900CCCA3EA6C8533CF94B3F8223] - 12/04/2018 - (.Microsoft Corporation - DFS Namespace Client Driver.) -- C:\WINDOWS\System32\drivers\DfsC.sys [141312] =>.Microsoft Corporation
[MD5.DED74127C7A2266715C0B8EA2EE75214] - 12/04/2018 - (.Microsoft Corporation - High Definition Audio Bus Driver.) -- C:\WINDOWS\System32\drivers\HDAudBus.sys [86016] =>.Microsoft Corporation
[MD5.DA179667B8CEC22E4ECBBF4210DC0E35] - 12/04/2018 - (.Microsoft Corporation - Pilote de port i8042.) -- C:\WINDOWS\System32\drivers\i8042prt.sys [105984] =>.Microsoft Corporation
[MD5.7408B83959A4B8271EF67FD06A6B366B] - 12/04/2018 - (.Microsoft Corporation - IP Network Address Translator.) -- C:\WINDOWS\System32\drivers\IpNat.sys [214528] =>.Microsoft Corporation
[MD5.3C0FA2ED75875481D00F3D77B1A3E336] - 12/04/2018 - (.Microsoft Corporation - Minirdr SMB Windows NT.) -- C:\WINDOWS\System32\drivers\MRxSmb.sys [500632] =>.Microsoft Corporation
[MD5.045A018E0BA5F9B75C5928A31C0E822C] - 12/04/2018 - (.Microsoft Corporation - MBT Transport driver.) -- C:\WINDOWS\System32\drivers\netBT.sys [311296] =>.Microsoft Corporation
[MD5.2B98586D5D7D536E8BDD33E276A1EE16] - 28/04/2018 - (.Microsoft Corporation - Pilote du système de fichiers NT.) -- C:\WINDOWS\System32\drivers\ntfs.sys [2422168] =>.Microsoft Corporation
[MD5.13B175715A4391E4E5D2AB2EBC8CDBB5] - 12/04/2018 - (.Microsoft Corporation - Pilote de port parallèle.) -- C:\WINDOWS\System32\drivers\Parport.sys [98816] =>.Microsoft Corporation
[MD5.775ED7E51B58CF9EB415A1DBA540DACF] - 12/04/2018 - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) -- C:\WINDOWS\System32\drivers\Rasl2tp.sys [106496] =>.Microsoft Corporation
[MD5.52A6CC99F5934CFAE88353C47B6193E7] - 12/04/2018 - (.Microsoft Corporation - Redirecteur de périphérique de Microsoft RD.) -- C:\WINDOWS\System32\drivers\rdpdr.sys [182784] =>.Microsoft Corporation
[MD5.16071C42E21CE3378FA449322FB9AB1D] - 12/04/2018 - (.Microsoft Corporation - TDI Translation Driver.) -- C:\WINDOWS\System32\drivers\tdx.sys [121248] =>.Microsoft Corporation
[MD5.F0EE4E6028CCA58BEA9A04E7BEAB7DB4] - 12/04/2018 - (.Microsoft Corporation - Pilote de cliché instantané du volume.) -- C:\WINDOWS\System32\drivers\volsnap.sys [398240] =>.Microsoft Corporation

---\\ LISTE DES SERVICES (Non Microsoft et non désactivés) (7) - 4s
O23 - Service: Adobe Genuine Software Integrity Service (AGSService) . (.Adobe Systems, Incorporated - Adobe Genuine Software Integrity Service.) - C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe =>.Adobe Systems Incorporated®
O23 - Service: AtherosSvc (AtherosSvc) . (. - Windows Setup API.) - C:\Program Files (x86)\Bluetooth Suite\AdminService.exe =>.Qualcomm Atheros®
O23 - Service: Elan Service (ETDService) . (.ELAN Microelectronics Corp. - Elan Service.) - C:\Program Files\Elantech\ETDService.exe =>.ELAN Microelectronics Corporation®
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google Inc®
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService1.0.0.0) . (.Intel Corporation - igfxCUIService Module.) - C:\WINDOWS\System32\igfxCUIService.exe =>.Intel Corporation
O23 - Service: TeamViewer 13 (TeamViewer) . (.TeamViewer GmbH - TeamViewer 13.) - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe =>.TeamViewer GmbH®
O23 - Service: Wondershare Application Framework Service (WsAppService) . (.Wondershare - Wondershare Passport.) - C:\Program Files (x86)\Wondershare\WAF\2.4.3.236\WsAppService.exe =>.Wondershare Technology Co.,Ltd®

---\\ SERVICES NON MICROSOFT (SR=Démarré,SS=Stoppé) (13) - 18s
SR - Auto [05/01/2018] [ 2319848] Adobe Genuine Software Integrity Service (AGSService) . (.Adobe Systems, Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe =>.Adobe Systems Incorporated®
SR - Auto [19/06/2017] [ 338920] AtherosSvc (AtherosSvc) . (...) - C:\Program Files (x86)\Bluetooth Suite\AdminService.exe =>.Qualcomm Atheros®
SS - Demand [07/10/2015] [ 290224] Intel(R) Content Protection HECI Service (cphs) . (.Intel Corporation.) - C:\Windows\SysWOW64\IntelCpHeciSvc.exe =>.Intel Corporation - pGFX®
SR - Demand [22/02/2018] [ 3480720] Disc Soft Lite Bus Service (Disc Soft Lite Bus Service) . (.Disc Soft Ltd.) - C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe =>.Disc Soft Ltd®
SR - Auto [22/03/2016] [ 144616] Elan Service (ETDService) . (.ELAN Microelectronics Corp..) - C:\Program Files\Elantech\ETDService.exe =>.ELAN Microelectronics Corporation®
SS - Auto [04/11/2017] [ 153168] Service Google Update (gupdate) (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google Inc®
SS - Demand [04/11/2017] [ 153168] Service Google Update (gupdatem) (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google Inc®
SR - Auto [07/10/2015] [ 328624] Intel(R) HD Graphics Control Panel Service (igfxCUIService1.0.0.0) . (.Intel Corporation.) - C:\WINDOWS\System32\igfxCUIService.exe =>.Intel Corporation - pGFX®
SS - Demand [09/05/2018] [ 194512] Mozilla Maintenance Service (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe =>.Mozilla Corporation®
SS - Demand [19/05/2018] [ 1672992] Steam Client Service (Steam Client Service) . (.Valve Corporation.) - C:\Program Files (x86)\Common Files\Steam\SteamService.exe =>.Valve®
SS - Demand [19/02/2010] [ 517096] (SwitchBoard) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe =>.Adobe Systems Incorporated
SR - Auto [15/12/2017] [10945776] TeamViewer 13 (TeamViewer) . (.TeamViewer GmbH.) - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe =>.TeamViewer GmbH®
SR - Auto [26/01/2018] [ 495840] Wondershare Application Framework Service (WsAppService) . (.Wondershare.) - C:\Program Files (x86)\Wondershare\WAF\2.4.3.236\WsAppService.exe =>.Wondershare Technology Co.,Ltd®

---\\ TÂCHES PLANIFIÉES EN AUTOMATIQUE (Registre) (20) - 13s
O38 - TASK: {0665B5B6-C72B-4859-9D56-7643993DCC17} [64Bits][\GoogleUpdateTaskMachineUA] - (.Google Inc. - Programme d'installation de Google.) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168] =>.Google Inc.
O38 - TASK: {0F5643E6-9853-4C88-9AAD-88D5BE505DA4} [64Bits][\GoogleUpdateTaskUserS-1-5-21-3533943287-3022136098-1270729976-1001UA] - (.Google Inc. - Programme d'installation de Google.) -- C:\Users\Joshua\AppData\Local\Google\Update\GoogleUpdate.exe [153168] =>.Google Inc.
O38 - TASK: {1209F5D0-719B-487C-A6DC-3389AAD3258D} [64Bits][\AdobeAAMUpdater-1.0-MicrosoftAccount-joshua.lanson.galien@gmail.com] - (.Adobe Systems Incorporated - Adobe Updater Startup Utility.) -- C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936] =>.Adobe Systems Incorporated
O38 - TASK: {774FCCB2-7D1D-4CB8-8181-57EBB1C530F8} [64Bits][\AdobeAAMUpdater-1.0-JOSH-Joshua] - (.Adobe Systems Incorporated - Adobe Updater Startup Utility.) -- C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936] =>.Adobe Systems Incorporated
O38 - TASK: {810F27F4-3E7C-41BD-BC7C-022F74CD80DD} [64Bits][\Java Platform SE Auto Updater] - (.Oracle Corporation - Java Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [588704] =>.Oracle Corporation
O38 - TASK: {B4560E7E-F667-40C1-941B-AF817662D481} [64Bits][\klcp_update] - (.KLite Inc - Setup/Uninstall.) -- C:\Program Files (x86)\K-Lite Codec Pack\Tools\CodecTweakTool.exe [1179648] =>.KLite Inc
O38 - TASK: {BA8D399B-86F0-464C-BDB1-3EC58BCF3FFF} [64Bits][\GoogleUpdateTaskUserS-1-5-21-3533943287-3022136098-1270729976-1001Core] - (.Google Inc. - Programme d'installation de Google.) -- C:\Users\Joshua\AppData\Local\Google\Update\GoogleUpdate.exe [153168] =>.Google Inc.
O38 - TASK: {BF5B163E-4ACE-414F-A086-9161BEF07396} [64Bits][\GoogleUpdateTaskMachineCore] - (.Google Inc. - Programme d'installation de Google.) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168] =>.Google Inc.
O38 - TASK: {C0DB4655-390E-4E6D-BCB3-5F265FE9BA4E} [64Bits][\AdobeGCInvoker-1.0-JOSH-Joshua] - (.Adobe Systems, Incorporated - Adobe GC Invoker Utility.) -- C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [315880] =>.Adobe Systems, Incorporated
O38 - TASK: {CC3409ED-C303-4973-8F0F-45145235EBFF} [64Bits][\AVG EUpdate Task] - (.AVG Technologies CZ, s.r.o. - AVG Setup Process.) -- C:\Program Files (x86)\AVG\Setup\avgsetupx.exe [4071992] =>.AVG Technologies CZ, s.r.o.
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [/ua] =>.Google Inc.
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3533943287-3022136098-1270729976-1001UA - (.Google Inc..) -- C:\Users\Joshua\AppData\Local\Google\Update\GoogleUpdate.exe [/ua] =>.Google Inc.
C:\WINDOWS\System32\Tasks\AdobeAAMUpdater-1.0-MicrosoftAccount-joshua.lanson.galien@gmail.com - (.Adobe Systems Incorporated.) -- C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [-mode=scheduled] =>.Adobe Systems Incorporated
C:\WINDOWS\System32\Tasks\AdobeAAMUpdater-1.0-JOSH-Joshua - (.Adobe Systems Incorporated.) -- C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [-mode=scheduled] =>.Adobe Systems Incorporated
C:\WINDOWS\System32\Tasks\Java Platform SE Auto Updater - (.Oracle Corporation.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [] =>.Oracle Corporation
C:\WINDOWS\System32\Tasks\klcp_update - (.KLite Inc.) -- C:\Program Files (x86)\K-Lite Codec Pack\Tools\CodecTweakTool.exe [/verysilent] =>.KLite Inc
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3533943287-3022136098-1270729976-1001Core - (.Google Inc..) -- C:\Users\Joshua\AppData\Local\Google\Update\GoogleUpdate.exe [/c] =>.Google Inc.
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [/c] =>.Google Inc.
C:\WINDOWS\System32\Tasks\AdobeGCInvoker-1.0-JOSH-Joshua - (.Adobe Systems, Incorporated.) -- C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [] =>.Adobe Systems, Incorporated
C:\WINDOWS\System32\Tasks\AVG EUpdate Task - (.AVG Technologies CZ, s.r.o..) -- C:\Program Files (x86)\AVG\Setup\avgsetupx.exe [/eu] =>.AVG Technologies CZ, s.r.o.

---\\ APPLICATIONS LANCÉES AU DÉMARRAGE DU SYSTÈME (23) - 4s
O4 - HKLM\..\Run: [SecurityHealth] . (.Microsoft Corporation - Windows Defender notification icon.) -- C:\Program Files\Windows Defender\MSASCuiL.exe =>.Microsoft Windows®
O4 - HKLM\..\Run: [ETDCtrl] . (.ELAN Microelectronics Corp. - ETD Control Center.) -- C:\Program Files\Elantech\ETDCtrl.exe =>.ELAN Microelectronics Corporation®
O4 - HKLM\..\Run: [AdobeGCInvoker-1.0] . (.Adobe Systems, Incorporated - Adobe GC Invoker Utility.) -- C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe =>.Adobe Systems Incorporated®
O4 - HKLM\..\Run: [XMouseButtonControl] . (.Highresolution Enterprises - X-Mouse Button Control.) -- C:\Program Files\Highresolution Enterprises\X-Mouse Button Control\XMouseButtonControl.exe =>.Open Source Developer, Phillip Gibbons®
O4 - HKLM\..\Run: [RTHDVCPL] . (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe =>.Realtek Semiconductor Corp.®
O4 - HKLM\..\Run: [AdobeAAMUpdater-1.0] . (.Adobe Systems Incorporated - Adobe Updater Startup Utility.) -- C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe =>.Adobe Systems Incorporated®
O4 - HKCU\..\Run: [OneDrive] . (.Microsoft Corporation - Microsoft OneDrive.) -- C:\Users\Joshua\AppData\Local\Microsoft\OneDrive\OneDrive.exe =>.Microsoft Corporation®
O4 - HKCU\..\Run: [Steam] . (.Valve Corporation - Steam Client Bootstrapper.) -- C:\Program Files (x86)\Steam\Steam.exe =>.Valve®
O4 - HKCU\..\Run: [DAEMON Tools Lite Automount] . (.Disc Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files\DAEMON Tools Lite\DTAgent.exe =>.Disc Soft Ltd®
O4 - HKCU\..\Run: [Discord] . (.Discord Inc. - Discord.) -- C:\Users\Joshua\AppData\Local\Discord\app-0.0.301\Discord.exe =>.Discord Inc.®
O4 - HKCU\..\Run: [MouseServer] . (. - .) -- C:\Program Files (x86)\Mouse Server\MouseServer.exe (.Not File.) =>.SUP.Orphan
O4 - HKLM\..\Wow6432Node\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe =>.Oracle America, Inc.®
O4 - HKLM\..\Wow6432Node\Run: [SwitchBoard] . (.Adobe Systems Incorporated - SwitchBoard Server (32 bit).) -- C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe =>.Adobe Systems Incorporated
O4 - HKLM\..\Wow6432Node\Run: [AdobeCS6ServiceManager] . (.Adobe Systems Incorporated - Adobe CS6 Service Manager.) -- C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe =>.Adobe Systems Incorporated®
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] . (.Microsoft Corporation - Microsoft OneDrive Setup.) -- C:\Windows\SysWOW64\OneDriveSetup.exe =>.Microsoft Windows®
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] . (.Microsoft Corporation - Microsoft OneDrive Setup.) -- C:\Windows\SysWOW64\OneDriveSetup.exe =>.Microsoft Windows®
O4 - HKUS\S-1-5-19\..\RunOnce: [WAB Migrate] . (.Microsoft Corporation - Windows Contacts.) -- C:\Program Files\Windows Mail\wab.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-20\..\RunOnce: [WAB Migrate] . (.Microsoft Corporation - Windows Contacts.) -- C:\Program Files\Windows Mail\wab.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-21-3533943287-3022136098-1270729976-1001\..\Run: [OneDrive] . (.Microsoft Corporation - Microsoft OneDrive.) -- C:\Users\Joshua\AppData\Local\Microsoft\OneDrive\OneDrive.exe =>.Microsoft Corporation®
O4 - HKUS\S-1-5-21-3533943287-3022136098-1270729976-1001\..\Run: [Steam] . (.Valve Corporation - Steam Client Bootstrapper.) -- C:\Program Files (x86)\Steam\Steam.exe =>.Valve®
O4 - HKUS\S-1-5-21-3533943287-3022136098-1270729976-1001\..\Run: [DAEMON Tools Lite Automount] . (.Disc Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files\DAEMON Tools Lite\DTAgent.exe =>.Disc Soft Ltd®
O4 - HKUS\S-1-5-21-3533943287-3022136098-1270729976-1001\..\Run: [Discord] . (.Discord Inc. - Discord.) -- C:\Users\Joshua\AppData\Local\Discord\app-0.0.301\Discord.exe =>.Discord Inc.®
O4 - HKUS\S-1-5-21-3533943287-3022136098-1270729976-1001\..\Run: [MouseServer] . (. - .) -- C:\Program Files (x86)\Mouse Server\MouseServer.exe (.Not File.) =>.SUP.Orphan

---\\ PROCESSUS LANCÉS (24) - 16s
[MD5.CD4815866A54609462B197503E381F86] - (.Intel Corporation - igfxCUIService Module.) -- C:\Windows\System32\igfxCUIService.exe [328624] [PID.1460] =>.Intel Corporation
[MD5.8A95661E59E3A2FA6C992AE3A07B6271] - (. - Windows Setup API.) -- C:\Program Files (x86)\Bluetooth Suite\AdminService.exe [338920] [PID.3860] =>.Qualcomm Atheros®
[MD5.58A5D48F16E89575C21C0B14A15D4383] - (.Adobe Systems, Incorporated - Adobe Genuine Software Integrity Service.) -- C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2319848] [PID.3868] =>.Adobe Systems Incorporated®
[MD5.244A5BC376A5C819998B99FEDFD1C19C] - (.ELAN Microelectronics Corp. - Elan Service.) -- C:\Program Files\Elantech\ETDService.exe [144616] [PID.3908] =>.ELAN Microelectronics Corporation®
[MD5.7139743C088045BA6BE0B7CCE6FA2D8F] - (.TeamViewer GmbH - TeamViewer 13.) -- C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [10945776] [PID.3524] =>.TeamViewer GmbH®
[MD5.1D446EE17A76D3462E5A3C2202414DE1] - (.Wondershare - Wondershare Passport.) -- C:\Program Files (x86)\Wondershare\WAF\2.4.3.236\WsAppService.exe [495840] [PID.4112] =>.Wondershare Technology Co.,Ltd®
[MD5.9866F8BCB925FE7DE08D9C3AC7B5EF09] - (.ELAN Microelectronics Corp. - ETD Control Center.) -- C:\Program Files\Elantech\ETDCtrl.exe [3366624] [PID.4552] =>.ELAN Microelectronics Corporation®
[MD5.96700D45E727D3A0266F49FE839A78C5] - (.ELAN Microelectronics Corp. - ETDTouch.) -- C:\Program Files\Elantech\ETDTouch.exe [134376] [PID.6008] =>.ELAN Microelectronics Corporation®
[MD5.1B954E7A7FCB8CE8D848EE52AFAB1B86] - (.Intel Corporation - igfxEM Module.) -- C:\Windows\System32\igfxEM.exe [540080] [PID.5160] =>.Intel Corporation
[MD5.A032CC3282E61DB68C45CA8B9FD4CB3F] - (.Intel Corporation - igfxHK Module.) -- C:\WINDOWS\system32\igfxHK.exe [256936] [PID.5220] =>.Intel Corporation
[MD5.F85E1C890C8E189D0D0A2C6C169D6A3F] - (.Intel Corporation - igfxTray Module.) -- C:\WINDOWS\system32\igfxTray.exe [393640] [PID.5064] =>.Intel Corporation
[MD5.D6FA9210374E77669C1FA60B100792EB] - (.ELAN Microelectronics Corp. - ETD Control Center Helper.) -- C:\Program Files\Elantech\ETDCtrlHelper.exe [2580200] [PID.6436] =>.ELAN Microelectronics Corporation®
[MD5.4C11592078BC3C092B50C472224D1521] - (.Highresolution Enterprises - X-Mouse Button Control.) -- C:\Program Files\Highresolution Enterprises\X-Mouse Button Control\XMouseButtonControl.exe [1570512] [PID.7260] =>.Open Source Developer, Phillip Gibbons®
[MD5.29C74BFDB61FBFBEEA6EAB7AFE81EDDA] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1586008] [PID.6460] =>.Google Inc®
[MD5.29C74BFDB61FBFBEEA6EAB7AFE81EDDA] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1586008] [PID.7604] =>.Google Inc®
[MD5.29C74BFDB61FBFBEEA6EAB7AFE81EDDA] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1586008] [PID.7804] =>.Google Inc®
[MD5.29C74BFDB61FBFBEEA6EAB7AFE81EDDA] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1586008] [PID.7236] =>.Google Inc®
[MD5.29C74BFDB61FBFBEEA6EAB7AFE81EDDA] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1586008] [PID.7736] =>.Google Inc®
[MD5.29C74BFDB61FBFBEEA6EAB7AFE81EDDA] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1586008] [PID.6720] =>.Google Inc®
[MD5.867630D98F2AB2E5DE67B2A951845CCC] - (.Disc Soft Ltd - DAEMON Tools Shell Extensions Helper.) -- C:\Program Files\DAEMON Tools Lite\DTShellHlp.exe [3920016] [PID.8388] =>.Disc Soft Ltd®
[MD5.1A4320CBCA0275BE9DB45E499BF8A780] - (.Disc Soft Ltd - Disc Soft Bus Service Lite.) -- C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [3480720] [PID.2012] =>.Disc Soft Ltd®
[MD5.29C74BFDB61FBFBEEA6EAB7AFE81EDDA] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1586008] [PID.940] =>.Google Inc®
[MD5.20FC225059E2D5DF661A90E32D7AB9A8] - (.Nicolas Coolman - ZHPDiag.) -- C:\Users\Joshua\Downloads\ZHPDiag3.exe [3098496] [PID.1836] =>.Nicolas Coolman
[MD5.29C74BFDB61FBFBEEA6EAB7AFE81EDDA] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1586008] [PID.8776] =>.Google Inc®

---\\ CHROME, Démarrage, Recherche, Extensions (23) - 2s
G0 - GCSP: Preferences [User Data\Default][HomePage] http://loadr.exelator.com
G0 - GCSP: Preferences [User Data\Default][HomePage] http://pagead2.googlesyndication.com =>.Google Inc.
G0 - GCSP: Preferences [User Data\Default][HomePage] http://s7.addthis.com
G0 - GCSP: Preferences [User Data\Default][HomePage] http://st3.igstatic.com
G0 - GCSP: Preferences [User Data\Default][HomePage] http://static.bfmtv.com
G0 - GCSP: Preferences [User Data\Default][HomePage] http://www.01net.com
G0 - GCSP: Preferences [User Data\Default][HomePage] http://www.bfmtv.com
G0 - GCSP: Preferences [User Data\Default][HomePage] http://a-ssl.ligatus.com
G0 - GCSP: Preferences [User Data\Default][HomePage] http://code.jquery.com
G0 - GCSP: Preferences [User Data\Default][HomePage] http://maxcdn.bootstrapcdn.com
G2 - GCE: Preference [Joshua][User Data\Default] [aapocclcgogkmnckokdopfmhonfmgoek] =>.Google Inc. {Slides}
G2 - GCE: Preference [Joshua][User Data\Default] [aohghmighlieiainnegkcijnfilokake] =>.Google Inc. {Docs}
G2 - GCE: Preference [Joshua][User Data\Default] [apdfllckaahabafndbhieahigkjlhalf] http://drive.google.com/ =>.Google Inc. {Drive}
G2 - GCE: Preference [Joshua][User Data\Default] [blpcfgokakmgnkcojhhkbfbldkacnbeo] http://www.youtube.com =>.Youtube {Youtube}
G2 - GCE: Preference [Joshua][User Data\Default] [cfhdojbkjhnklbpkdaibdccddilifddb] eyeo GmbH =>.eyeo GmbH {AdBlock Plus}
G2 - GCE: Preference [Joshua][User Data\Default] [felcaaldnbdncclmgdcncolpebgiejap] =>.Google Inc. {Sheets}
G2 - GCE: Preference [Joshua][User Data\Default] [gbchcmhmhahfdphkhkmpfmihenigjmpp] =>.Google Inc. {Bureau à distance}
G2 - GCE: Preference [Joshua][User Data\Default] [ghbmnnjooekpmoecnnnilnnbdlolhkhi] =>.Google Inc. {Docs hors connexion}
G2 - GCE: Preference [Joshua][User Data\Default] [gojamcfopckidlocpkbelmpjcgmbgjcl] No Coin =>.Keraf
G2 - GCE: Preference [Joshua][User Data\Default] [jpjlkkaalgfbbegfnjoclhfidancjpch] Black red shards
G2 - GCE: Preference [Joshua][User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] =>.Google Inc. {Wallet}
G2 - GCE: Preference [Joshua][User Data\Default] [pjkljhegncpnkpknbcohdijeoejaedia] http://mail.google.com/ =>.Google Inc. {Gmail}
G2 - GCE: Preference [Joshua][User Data\Default] [pkedcjkdefgpdelpbcmbmeomcjbeemfm] Chrome Media Router =>.Google Inc.

---\\ FIREFOX, Plugins,Démarrage,Recherche,Extensions (9) - 4s
P2 - EXT FILE: (.Mozilla Corporation.) -- C:\Program Files\Mozilla Firefox\browser\features\activity-stream@mozilla.org.xpi =>.Mozilla Corporation
P2 - EXT FILE: (.Mozilla Corporation.) -- C:\Program Files\Mozilla Firefox\browser\features\aushelper@mozilla.org.xpi =>.Mozilla Corporation
P2 - EXT FILE: (.Mozilla Corporation.) -- C:\Program Files\Mozilla Firefox\browser\features\firefox@getpocket.com.xpi =>.Mozilla Corporation
P2 - EXT FILE: (.Mozilla Corporation.) -- C:\Program Files\Mozilla Firefox\browser\features\followonsearch@mozilla.com.xpi =>.Mozilla Corporation
P2 - EXT FILE: (.Mozilla Corporation.) -- C:\Program Files\Mozilla Firefox\browser\features\formautofill@mozilla.org.xpi =>.Mozilla Corporation
P2 - EXT FILE: (.Mozilla Corporation.) -- C:\Program Files\Mozilla Firefox\browser\features\onboarding@mozilla.org.xpi =>.Mozilla Corporation
P2 - EXT FILE: (.Mozilla Corporation.) -- C:\Program Files\Mozilla Firefox\browser\features\screenshots@mozilla.org.xpi =>.Mozilla Corporation
P2 - EXT FILE: (.Mozilla Corporation.) -- C:\Program Files\Mozilla Firefox\browser\features\shield-recipe-client@mozilla.org.xpi =>.Mozilla Corporation
P2 - EXT FILE: (.Mozilla Corporation.) -- C:\Program Files\Mozilla Firefox\browser\features\webcompat@mozilla.org.xpi =>.Mozilla Corporation

---\\ INTERNET EXPLORER,Démarrage,Recherche,URLSearchHook (15) - 0s
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/ =>.Microsoft Corporation
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/ =>.Microsoft Corporation
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk =>.Microsoft Corporation
R3 - URLSearchHook: (no name)[HKCU] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (11.00.17134.103 (WinBuild.160101.0800)) -- C:\Windows\System32\ieframe.dll =>.Microsoft Corporation

---\\ INTERNET EXPLORER, Site de confiance et site sensible (1) - 0s
~ Microsoft Internet Explorer Restricted Site(s) Domains: 0(Good) / 0(Bad)

---\\ INTERNET EXPLORER,Proxy Management (3) - 0s
R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 =>.Default.Value
R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 =>.Default.Value
R5 - HKLM\SYSTEM\CurrentControlSet\services\NlaSvc\Parameters\Internet\ManualProxies [] =>.Microsoft

---\\ INTERNET EXPLORER,IniFiles, Autoloading Programs (3) - 0s
F2 - REG:system.ini: UserInit=
F2 - REG:system.ini: Shell=C:\WINDOWS\explorer.exe (.Microsoft Corporation.) =>.Microsoft Corporation
F2 - REG:system.ini: VMApplet=

---\\ ÉTUDE DU FICHIER HOSTS (1) - 0s
~ Le fichier hôte est sain (The hosts file is clean) (21)

---\\ BROWSER HELPER OBJECT DE NAVIGATEUR (BHO) (3) - 1s
O2 - BHO: Lync Click to Call BHO [64Bits] - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} . (.Microsoft Corporation - Skype for Business.) -- C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll =>.Microsoft Corporation®
O2 - BHO: Java(tm) Plug-In SSV Helper [64Bits] - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre1.8.0_171\bin\ssv.dll =>.Oracle America, Inc.®
O2 - BHO: Java(tm) Plug-In 2 SSV Helper [64Bits] - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre1.8.0_171\bin\jp2ssv.dll =>.Oracle America, Inc.®

---\\ RACCOURCIS GLOBAL STARTUP (133) - 47s
O4 - GS\Desktop [Administrateur]: Adobe Photoshop CS6.lnk . (.Adobe Systems, Incorporated - Adobe Photoshop CS6.) C:\Program Files (x86)\Adobe\Adobe Photoshop CS6\Photoshop.exe =>.Adobe Systems Incorporated®
O4 - GS\Desktop [Administrateur]: CrystalDiskInfo.lnk . (.Crystal Dew World - CrystalDiskInfo.) C:\Program Files (x86)\CrystalDiskInfo\DiskInfo32.exe =>.Noriyuki Miyazaki®
O4 - GS\Desktop [Administrateur]: Deezer.lnk . (.Deezer - Deezer.) C:\Users\Joshua\AppData\Local\Programs\deezer-desktop\Deezer.exe =>.Deezer®
O4 - GS\Desktop [Administrateur]: Discord.lnk . (.GitHub - Update.) C:\Users\Joshua\AppData\Local\Discord\Update.exe --processStart Discord.exe =>.Discord Inc.®
O4 - GS\Desktop [Administrateur]: Excel 2016.lnk . (.Microsoft Corporation - Microsoft Excel.) C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE =>.Microsoft Corporation®
O4 - GS\Desktop [Administrateur]: Far Cry 2 - Fortunes Edition.lnk . (...) D:\farcry2\Far Cry 2 - Fortunes Edition\bin\farcry2.exe
O4 - GS\Desktop [Administrateur]: Far Cry.cmd - Raccourci.lnk . (...) C:\Users\Joshua\Downloads\FarCry_1.4_portable\Far_Cry\Far Cry.cmd
O4 - GS\Desktop [Administrateur]: Google Chrome Canary.lnk . (.Google Inc. - Google Chrome.) C:\Users\Joshua\AppData\Local\Google\Chrome SxS\Application\chrome.exe =>.Google Inc®
O4 - GS\Desktop [Administrateur]: Molotov.lnk . (.GitHub - Update.) C:\Users\Joshua\AppData\Local\Molotov\Update.exe --processStart "Molotov.exe" =>.GitHub
O4 - GS\Desktop [Administrateur]: PowerPoint 2016.lnk . (.Microsoft Corporation - Microsoft PowerPoint.) C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE =>.Microsoft Corporation®
O4 - GS\Desktop [Administrateur]: RagnoTech™ Low Specs Experience.lnk . (.RagnoTech™ Software Solutions - RagnoTech™ Software Solutions (Low Specs Ex.) C:\RagnoTech (TM) Software Solutions\Low Specs Experience\bootstrapper.exe (TM) Software Solutions\Low Specs Experience\bootstrapper.exe =>.RagnoTech™ Software Solutions
O4 - GS\Desktop [Administrateur]: RagnoTech™ ReSwitch.lnk . (.RagnoTech™ Software Solutions - RagnoTech™ Software Solutions (ReSwitch Too.) C:\RagnoTech (TM) Software Solutions\Low Specs Experience\ReSwitchGUI.exe =>.RagnoTech™ Software Solutions
O4 - GS\Desktop [Administrateur]: Sublime Text 3.lnk . (.Sublime HQ Pty Ltd - Sublime Text.) C:\Program Files (x86)\Sublime Text 3\sublime_text.exe =>.Sublime HQ Pty Ltd®
O4 - GS\Desktop [Administrateur]: Word 2016.lnk . (.Microsoft Corporation - Microsoft Word.) C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE =>.Microsoft Corporation®
O4 - GS\Desktop [Administrateur]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\Joshua\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman
O4 - GS\Quicklaunch [Administrateur]: Foxit Reader.lnk . (.Foxit Software Inc. - Foxit Reader 9.0.) C:\Program Files (x86)\Foxit Software\Foxit Reader\FoxitReader.exe =>.Foxit Software Incorporated®
O4 - GS\Quicklaunch [Administrateur]: Google Chrome Canary.lnk . (.Google Inc. - Google Chrome.) C:\Users\Joshua\AppData\Local\Google\Chrome SxS\Application\chrome.exe =>.Google Inc®
O4 - GS\sendTo [Administrateur]: Destinataire de télécopie.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\Windows\System32\WFS.exe /SendTo =>.Microsoft Corporation
O4 - GS\sendTo [Administrateur]: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\WINDOWS\system32\WFS.exe /SendTo =>.Microsoft Corporation
O4 - GS\sendTo [Administrateur]: TeamViewer.lnk . (.TeamViewer GmbH - TeamViewer 13.) C:\Program Files (x86)\TeamViewer\TeamViewer.exe --sendto =>.TeamViewer GmbH®
O4 - GS\sendTo [Administrateur]: Transfert de fichiers Bluetooth.LNK . (.Microsoft Corporation - .) C:\Windows\System32\fsquirt.exe =>.Microsoft Corporation
O4 - GS\TaskBar [Administrateur]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\Programs [Administrateur]: Deezer.lnk . (.Deezer - Deezer.) C:\Users\Joshua\AppData\Local\Programs\deezer-desktop\Deezer.exe =>.Deezer®
O4 - GS\Programs [Administrateur]: Google Chrome Canary.lnk . (.Google Inc. - Google Chrome.) C:\Users\Joshua\AppData\Local\Google\Chrome SxS\Application\chrome.exe =>.Google Inc®
O4 - GS\Programs [Administrateur]: OneDrive.lnk . (.Microsoft Corporation - Microsoft OneDrive.) C:\Users\Joshua\AppData\Local\Microsoft\OneDrive\OneDrive.exe =>.Microsoft Corporation®
O4 - GS\Desktop [Joshua]: Adobe Photoshop CS6.lnk . (.Adobe Systems, Incorporated - Adobe Photoshop CS6.) C:\Program Files (x86)\Adobe\Adobe Photoshop CS6\Photoshop.exe =>.Adobe Systems Incorporated®
O4 - GS\Desktop [Joshua]: CrystalDiskInfo.lnk . (.Crystal Dew World - CrystalDiskInfo.) C:\Program Files (x86)\CrystalDiskInfo\DiskInfo32.exe =>.Noriyuki Miyazaki®
O4 - GS\Desktop [Joshua]: Deezer.lnk . (.Deezer - Deezer.) C:\Users\Joshua\AppData\Local\Programs\deezer-desktop\Deezer.exe =>.Deezer®
O4 - GS\Desktop [Joshua]: Discord.lnk . (.GitHub - Update.) C:\Users\Joshua\AppData\Local\Discord\Update.exe --processStart Discord.exe =>.Discord Inc.®
O4 - GS\Desktop [Joshua]: Excel 2016.lnk . (.Microsoft Corporation - Microsoft Excel.) C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE =>.Microsoft Corporation®
O4 - GS\Desktop [Joshua]: Far Cry 2 - Fortunes Edition.lnk . (...) D:\farcry2\Far Cry 2 - Fortunes Edition\bin\farcry2.exe
O4 - GS\Desktop [Joshua]: Far Cry.cmd - Raccourci.lnk . (...) C:\Users\Joshua\Downloads\FarCry_1.4_portable\Far_Cry\Far Cry.cmd
O4 - GS\Desktop [Joshua]: Google Chrome Canary.lnk . (.Google Inc. - Google Chrome.) C:\Users\Joshua\AppData\Local\Google\Chrome SxS\Application\chrome.exe =>.Google Inc®
O4 - GS\Desktop [Joshua]: Molotov.lnk . (.GitHub - Update.) C:\Users\Joshua\AppData\Local\Molotov\Update.exe --processStart "Molotov.exe" =>.GitHub
O4 - GS\Desktop [Joshua]: PowerPoint 2016.lnk . (.Microsoft Corporation - Microsoft PowerPoint.) C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE =>.Microsoft Corporation®
O4 - GS\Desktop [Joshua]: RagnoTech™ Low Specs Experience.lnk . (.RagnoTech™ Software Solutions - RagnoTech™ Software Solutions (Low Specs Ex.) C:\RagnoTech (TM) Software Solutions\Low Specs Experience\bootstrapper.exe (TM) Software Solutions\Low Specs Experience\bootstrapper.exe =>.RagnoTech™ Software Solutions
O4 - GS\Desktop [Joshua]: RagnoTech™ ReSwitch.lnk . (.RagnoTech™ Software Solutions - RagnoTech™ Software Solutions (ReSwitch Too.) C:\RagnoTech (TM) Software Solutions\Low Specs Experience\ReSwitchGUI.exe =>.RagnoTech™ Software Solutions
O4 - GS\Desktop [Joshua]: Sublime Text 3.lnk . (.Sublime HQ Pty Ltd - Sublime Text.) C:\Program Files (x86)\Sublime Text 3\sublime_text.exe =>.Sublime HQ Pty Ltd®
O4 - GS\Desktop [Joshua]: Word 2016.lnk . (.Microsoft Corporation - Microsoft Word.) C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE =>.Microsoft Corporation®
O4 - GS\Desktop [Joshua]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\Joshua\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman
O4 - GS\Quicklaunch [Joshua]: Foxit Reader.lnk . (.Foxit Software Inc. - Foxit Reader 9.0.) C:\Program Files (x86)\Foxit Software\Foxit Reader\FoxitReader.exe =>.Foxit Software Incorporated®
O4 - GS\Quicklaunch [Joshua]: Google Chrome Canary.lnk . (.Google Inc. - Google Chrome.) C:\Users\Joshua\AppData\Local\Google\Chrome SxS\Application\chrome.exe =>.Google Inc®
O4 - GS\sendTo [Joshua]: Destinataire de télécopie.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\Windows\System32\WFS.exe /SendTo =>.Microsoft Corporation
O4 - GS\sendTo [Joshua]: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\WINDOWS\system32\WFS.exe /SendTo =>.Microsoft Corporation
O4 - GS\sendTo [Joshua]: TeamViewer.lnk . (.TeamViewer GmbH - TeamViewer 13.) C:\Program Files (x86)\TeamViewer\TeamViewer.exe --sendto =>.TeamViewer GmbH®
O4 - GS\sendTo [Joshua]: Transfert de fichiers Bluetooth.LNK . (.Microsoft Corporation - .) C:\Windows\System32\fsquirt.exe =>.Microsoft Corporation
O4 - GS\TaskBar [Joshua]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\Programs [Joshua]: Deezer.lnk . (.Deezer - Deezer.) C:\Users\Joshua\AppData\Local\Programs\deezer-desktop\Deezer.exe =>.Deezer®
O4 - GS\Programs [Joshua]: Google Chrome Canary.lnk . (.Google Inc. - Google Chrome.) C:\Users\Joshua\AppData\Local\Google\Chrome SxS\Application\chrome.exe =>.Google Inc®
O4 - GS\Programs [Joshua]: OneDrive.lnk . (.Microsoft Corporation - Microsoft OneDrive.) C:\Users\Joshua\AppData\Local\Microsoft\OneDrive\OneDrive.exe =>.Microsoft Corporation®
O4 - GS\Desktop [WDAGUtilityAccount]: Adobe Photoshop CS6.lnk . (.Adobe Systems, Incorporated - Adobe Photoshop CS6.) C:\Program Files (x86)\Adobe\Adobe Photoshop CS6\Photoshop.exe =>.Adobe Systems Incorporated®
O4 - GS\Desktop [WDAGUtilityAccount]: CrystalDiskInfo.lnk . (.Crystal Dew World - CrystalDiskInfo.) C:\Program Files (x86)\CrystalDiskInfo\DiskInfo32.exe =>.Noriyuki Miyazaki®
O4 - GS\Desktop [WDAGUtilityAccount]: Deezer.lnk . (.Deezer - Deezer.) C:\Users\Joshua\AppData\Local\Programs\deezer-desktop\Deezer.exe =>.Deezer®
O4 - GS\Desktop [WDAGUtilityAccount]: Discord.lnk . (.GitHub - Update.) C:\Users\Joshua\AppData\Local\Discord\Update.exe --processStart Discord.exe =>.Discord Inc.®
O4 - GS\Desktop [WDAGUtilityAccount]: Excel 2016.lnk . (.Microsoft Corporation - Microsoft Excel.) C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE =>.Microsoft Corporation®
O4 - GS\Desktop [WDAGUtilityAccount]: Far Cry 2 - Fortunes Edition.lnk . (...) D:\farcry2\Far Cry 2 - Fortunes Edition\bin\farcry2.exe
O4 - GS\Desktop [WDAGUtilityAccount]: Far Cry.cmd - Raccourci.lnk . (...) C:\Users\Joshua\Downloads\FarCry_1.4_portable\Far_Cry\Far Cry.cmd
O4 - GS\Desktop [WDAGUtilityAccount]: Google Chrome Canary.lnk . (.Google Inc. - Google Chrome.) C:\Users\Joshua\AppData\Local\Google\Chrome SxS\Application\chrome.exe =>.Google Inc®
O4 - GS\Desktop [WDAGUtilityAccount]: Molotov.lnk . (.GitHub - Update.) C:\Users\Joshua\AppData\Local\Molotov\Update.exe --processStart "Molotov.exe" =>.GitHub
O4 - GS\Desktop [WDAGUtilityAccount]: PowerPoint 2016.lnk . (.Microsoft Corporation - Microsoft PowerPoint.) C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE =>.Microsoft Corporation®
O4 - GS\Desktop [WDAGUtilityAccount]: RagnoTech™ Low Specs Experience.lnk . (.RagnoTech™ Software Solutions - RagnoTech™ Software Solutions (Low Specs Ex.) C:\RagnoTech (TM) Software Solutions\Low Specs Experience\bootstrapper.exe (TM) Software Solutions\Low Specs Experience\bootstrapper.exe =>.RagnoTech™ Software Solutions
O4 - GS\Desktop [WDAGUtilityAccount]: RagnoTech™ ReSwitch.lnk . (.RagnoTech™ Software Solutions - RagnoTech™ Software Solutions (ReSwitch Too.) C:\RagnoTech (TM) Software Solutions\Low Specs Experience\ReSwitchGUI.exe =>.RagnoTech™ Software Solutions
O4 - GS\Desktop [WDAGUtilityAccount]: Sublime Text 3.lnk . (.Sublime HQ Pty Ltd - Sublime Text.) C:\Program Files (x86)\Sublime Text 3\sublime_text.exe =>.Sublime HQ Pty Ltd®
O4 - GS\Desktop [WDAGUtilityAccount]: Word 2016.lnk . (.Microsoft Corporation - Microsoft Word.) C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE =>.Microsoft Corporation®
O4 - GS\Desktop [WDAGUtilityAccount]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\Joshua\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman
O4 - GS\Quicklaunch [WDAGUtilityAccount]: Foxit Reader.lnk . (.Foxit Software Inc. - Foxit Reader 9.0.) C:\Program Files (x86)\Foxit Software\Foxit Reader\FoxitReader.exe =>.Foxit Software Incorporated®
O4 - GS\Quicklaunch [WDAGUtilityAccount]: Google Chrome Canary.lnk . (.Google Inc. - Google Chrome.) C:\Users\Joshua\AppData\Local\Google\Chrome SxS\Application\chrome.exe =>.Google Inc®
O4 - GS\sendTo [WDAGUtilityAccount]: Destinataire de télécopie.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\Windows\System32\WFS.exe /SendTo =>.Microsoft Corporation
O4 - GS\sendTo [WDAGUtilityAccount]: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\WINDOWS\system32\WFS.exe /SendTo =>.Microsoft Corporation
O4 - GS\sendTo [WDAGUtilityAccount]: TeamViewer.lnk . (.TeamViewer GmbH - TeamViewer 13.) C:\Program Files (x86)\TeamViewer\TeamViewer.exe --sendto =>.TeamViewer GmbH®
O4 - GS\sendTo [WDAGUtilityAccount]: Transfert de fichiers Bluetooth.LNK . (.Microsoft Corporation - .) C:\Windows\System32\fsquirt.exe =>.Microsoft Corporation
O4 - GS\TaskBar [WDAGUtilityAccount]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\Programs [WDAGUtilityAccount]: Deezer.lnk . (.Deezer - Deezer.) C:\Users\Joshua\AppData\Local\Programs\deezer-desktop\Deezer.exe =>.Deezer®
O4 - GS\Programs [WDAGUtilityAccount]: Google Chrome Canary.lnk . (.Google Inc. - Google Chrome.) C:\Users\Joshua\AppData\Local\Google\Chrome SxS\Application\chrome.exe =>.Google Inc®
O4 - GS\Programs [WDAGUtilityAccount]: OneDrive.lnk . (.Microsoft Corporation - Microsoft OneDrive.) C:\Users\Joshua\AppData\Local\Microsoft\OneDrive\OneDrive.exe =>.Microsoft Corporation®
O4 - GS\CommonDesktop [Public]: Arduino.lnk . (.Arduino LLC - Arduino IDE.) C:\Program Files (x86)\Arduino\arduino.exe =>.Arduino LLC
O4 - GS\CommonDesktop [Public]: CASIO FA-124.lnk . (.CASIO COMPUTER CO., LTD - FA-124.) C:\Program Files (x86)\CASIO\CASIO FA-124\FA124.exe =>.CASIO COMPUTER CO., LTD
O4 - GS\CommonDesktop [Public]: CDBurnerXP.lnk . (.Canneverbe Limited - CDBurnerXP.) C:\Program Files\CDBurnerXP\cdbxpp.exe =>.Canneverbe Limited®
O4 - GS\CommonDesktop [Public]: DAEMON Tools Lite.lnk . (.Disc Soft Ltd - DAEMON Tools Lite.) C:\Program Files\DAEMON Tools Lite\DTLauncher.exe =>.Disc Soft Ltd®
O4 - GS\CommonDesktop [Public]: DriversCloud.com - Démarrer la détection.lnk . (.CybelSoft - .) C:\Program Files (x86)\DriversCloud.com\DriversCloud.exe =>.CybelSoft
O4 - GS\CommonDesktop [Public]: Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O4 - GS\CommonDesktop [Public]: Foxit Reader.lnk . (.Foxit Software Inc. - Foxit Reader 9.0.) C:\Program Files (x86)\Foxit Software\Foxit Reader\FoxitReader.exe =>.Foxit Software Incorporated®
O4 - GS\CommonDesktop [Public]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\CommonDesktop [Public]: Media Player Classic.lnk . (.MPC-HC Team - MPC-HC x64.) C:\Program Files (x86)\K-Lite Codec Pack\MPC-HC64\mpc-hc64.exe =>.MPC-HC Team
O4 - GS\CommonDesktop [Public]: MindView 7.0.lnk . (.MatchWare A/S - MatchWare MindView.) C:\Program Files (x86)\MatchWare\MindView 7.0\MindView.exe "%1" =>.MatchWare A/S®
O4 - GS\CommonDesktop [Public]: OpenOffice 4.1.4.lnk . (.Apache Software Foundation - OpenOffice 4.1.4.) C:\Program Files (x86)\OpenOffice 4\program\soffice.exe =>.Apache Software Foundation
O4 - GS\CommonDesktop [Public]: PDFCreator.lnk . (.pdfforge - PDFCreator.) C:\Program Files\PDFCreator\PDFCreator.exe =>.pdfforge GmbH®
O4 - GS\CommonDesktop [Public]: scilab-6.0.1 (64-bit) Desktop.lnk . (.Scilab Enterprises - Scilab 6.0.1 (GUI).) C:\Program Files\scilab-6.0.1\bin\WScilex.exe =>.Scilab Enterprises
O4 - GS\CommonDesktop [Public]: Steam.lnk . (.Valve Corporation - Steam Client Bootstrapper.) C:\Program Files (x86)\Steam\Steam.exe =>.Valve®
O4 - GS\CommonDesktop [Public]: TeamViewer 13.lnk . (.TeamViewer GmbH - TeamViewer 13.) C:\Program Files (x86)\TeamViewer\TeamViewer.exe =>.TeamViewer GmbH®
O4 - GS\CommonDesktop [Public]: VLC media player.lnk . (.VideoLAN - VLC media player.) C:\Program Files\VideoLAN\VLC\vlc.exe =>.VideoLAN®
O4 - GS\CommonDesktop [Public]: yEd Graph Editor.lnk . (.yWorks GmbH - yEd Graph Editor.) C:\Program Files (x86)\yWorks\yEd\yEd.exe {6E7C8A879EE7646FEA5625972695908F} =>.yWorks GmbH
O4 - GS\Programs [Public]: Deezer.lnk . (.Deezer - Deezer.) C:\Users\Joshua\AppData\Local\Programs\deezer-desktop\Deezer.exe =>.Deezer®
O4 - GS\Programs [Public]: Google Chrome Canary.lnk . (.Google Inc. - Google Chrome.) C:\Users\Joshua\AppData\Local\Google\Chrome SxS\Application\chrome.exe =>.Google Inc®
O4 - GS\Programs [Public]: OneDrive.lnk . (.Microsoft Corporation - Microsoft OneDrive.) C:\Users\Joshua\AppData\Local\Microsoft\OneDrive\OneDrive.exe =>.Microsoft Corporation®
O4 - GS\Accessories [Public]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files (x86)\internet explorer\iexplore.exe =>.Microsoft Corporation®
O4 - GS\Accessories [Public]: Notepad.lnk . (.Microsoft Corporation - Bloc-notes.) C:\WINDOWS\system32\notepad.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Math Input Panel.lnk . (.Microsoft Corporation - .) C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\mip.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Paint.lnk . (.Microsoft Corporation - Paint.) C:\WINDOWS\system32\mspaint.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Quick Assist.lnk . (.Microsoft Corporation - Quick Assist.) C:\WINDOWS\system32\quickassist.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Remote Desktop Connection.lnk . (.Microsoft Corporation - Connexion Bureau à distance.) C:\WINDOWS\system32\mstsc.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Snipping Tool.lnk . (.Microsoft Corporation - Outil Capture d’écran.) C:\WINDOWS\system32\SnippingTool.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Steps Recorder.lnk . (.Microsoft Corporation - Enregistreur d’actions.) C:\WINDOWS\system32\psr.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Windows Fax and Scan.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\WINDOWS\system32\WFS.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Windows Media Player.lnk . (.Microsoft Corporation - Lecteur Windows Media.) C:\Program Files (x86)\Windows Media Player\wmplayer.exe /prefetch:1 =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Wordpad.lnk . (.Microsoft Corporation - Application Windows Wordpad.) C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: XPS Viewer.lnk . (.Microsoft Corporation - Visionneuse XPS.) C:\WINDOWS\system32\xpsrchvw.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: Character Map.lnk . (.Microsoft Corporation - Table des caractères.) C:\WINDOWS\system32\charmap.exe =>.Microsoft Corporation
O4 - GS\ProgramsCommon [Public]: Access.lnk . (.Microsoft Corporation - Microsoft Access.) C:\Program Files (x86)\Microsoft Office\root\Office16\MSACCESS.EXE =>.Microsoft Corporation®
O4 - GS\ProgramsCommon [Public]: Adobe Bridge CS6 (64bit).lnk . (.Adobe Systems, Inc. - Adobe Bridge CS6.) C:\Program Files\Adobe\Adobe Bridge CS6 (64 Bit)\Bridge.exe =>.Adobe Systems Incorporated®
O4 - GS\ProgramsCommon [Public]: Adobe Bridge CS6.lnk . (.Adobe Systems, Inc. - Adobe Bridge CS6.) C:\Program Files (x86)\Adobe\Adobe Bridge CS6\Bridge.exe =>.Adobe Systems Incorporated®
O4 - GS\ProgramsCommon [Public]: Adobe ExtendScript Toolkit CS6.lnk . (.Adobe Systems Incorporated - ExtendScript Toolkit CS6 and Debugger (32 b.) C:\Program Files (x86)\Adobe\Adobe Utilities - CS6\ExtendScript Toolkit CS6\ExtendScript Toolkit.exe =>.Adobe Systems Incorporated®
O4 - GS\ProgramsCommon [Public]: Adobe Extension Manager CS6.lnk . (.Adobe Systems Incorporated - Adobe Extension Manager CS6.) C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\Adobe Extension Manager CS6.exe =>.Adobe Systems Incorporated®
O4 - GS\ProgramsCommon [Public]: Adobe Photoshop CS6 (64 Bit).lnk . (.Adobe Systems, Incorporated - Adobe Photoshop CS6.) C:\Program Files\Adobe\Adobe Photoshop CS6 (64 Bit)\Photoshop.exe =>.Adobe Systems Incorporated®
O4 - GS\ProgramsCommon [Public]: Adobe Photoshop CS6.lnk . (.Adobe Systems, Incorporated - Adobe Photoshop CS6.) C:\Program Files (x86)\Adobe\Adobe Photoshop CS6\Photoshop.exe =>.Adobe Systems Incorporated®
O4 - GS\ProgramsCommon [Public]: Arduino.lnk . (.Arduino LLC - Arduino IDE.) C:\Program Files (x86)\Arduino\arduino.exe =>.Arduino LLC
O4 - GS\ProgramsCommon [Public]: Blend pour Visual Studio 2017 (2).lnk . (.Microsoft Corporation - Blend for Visual Studio.) C:\Program Files (x86)\Microsoft Visual Studio\2017\Professional\Common7\IDE\Blend.exe =>.Microsoft Corporation®
O4 - GS\ProgramsCommon [Public]: CDBurnerXP.lnk . (.Canneverbe Limited - CDBurnerXP.) C:\Program Files\CDBurnerXP\cdbxpp.exe =>.Canneverbe Limited®
O4 - GS\ProgramsCommon [Public]: Excel.lnk . (.Microsoft Corporation - Microsoft Excel.) C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE =>.Microsoft Corporation®
O4 - GS\ProgramsCommon [Public]: Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O4 - GS\ProgramsCommon [Public]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\ProgramsCommon [Public]: Immersive Control Panel.lnk . (.Microsoft Corporation - Windows Control Panel.) C:\WINDOWS\System32\Control.exe =>.Microsoft Corporation
O4 - GS\ProgramsCommon [Public]: OneNote 2016.lnk . (.Microsoft Corporation - Microsoft OneNote.) C:\Program Files (x86)\Microsoft Office\root\Office16\ONENOTE.EXE =>.Microsoft Corporation®
O4 - GS\ProgramsCommon [Public]: Outlook.lnk . (.Microsoft Corporation - Microsoft Outlook.) C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE =>.Microsoft Corporation®
O4 - GS\ProgramsCommon [Public]: PowerPoint.lnk . (.Microsoft Corporation - Microsoft PowerPoint.) C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE =>.Microsoft Corporation®
O4 - GS\ProgramsCommon [Public]: Publisher.lnk . (.Microsoft Corporation - Microsoft Publisher.) C:\Program Files (x86)\Microsoft Office\root\Office16\MSPUB.EXE =>.Microsoft Corporation®
O4 - GS\ProgramsCommon [Public]: Sublime Text 3.lnk . (.Sublime HQ Pty Ltd - Sublime Text.) C:\Program Files (x86)\Sublime Text 3\sublime_text.exe =>.Sublime HQ Pty Ltd®
O4 - GS\ProgramsCommon [Public]: TeamViewer 13.lnk . (.TeamViewer GmbH - TeamViewer 13.) C:\Program Files (x86)\TeamViewer\TeamViewer.exe =>.TeamViewer GmbH®
O4 - GS\ProgramsCommon [Public]: Visual Studio 2017 (2).lnk . (.Microsoft Corporation - Microsoft Visual Studio 2017.) C:\Program Files (x86)\Microsoft Visual Studio\2017\Professional\Common7\IDE\devenv.exe =>.Microsoft Corporation®
O4 - GS\ProgramsCommon [Public]: Visual Studio 2017.lnk . (.Microsoft Corporation - Microsoft Visual Studio 2017.) C:\Program Files (x86)\Microsoft Visual Studio\2017\Community\Common7\IDE\devenv.exe =>.Microsoft Corporation®
O4 - GS\ProgramsCommon [Public]: Visual Studio Installer.lnk . (.Microsoft Corporation - Visual Studio Installer.) C:\Program Files (x86)\Microsoft Visual Studio\Installer\vs_installer.exe =>.Microsoft Corporation®
O4 - GS\ProgramsCommon [Public]: Windows Media Player.lnk . (.Microsoft Corporation - Lecteur Windows Media.) C:\Program Files (x86)\Windows Media Player\wmplayer.exe /prefetch:1 =>.Microsoft Corporation
O4 - GS\ProgramsCommon [Public]: Word.lnk . (.Microsoft Corporation - Microsoft Word.) C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE =>.Microsoft Corporation®

---\\ MODIFICATION DOMAINE/ADRESSES (DNS) (4) - 0s
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 =>.Local IP Adress
O17 - HKLM\System\CCS\Services\Tcpip\..\{1772a300-8c31-4f7c-9920-53f851a203d5}: DhcpNameServer = 192.168.1.1 =>.Local IP Adress
O17 - HKLM\System\CCS\Services\Tcpip\..\{f5e7009c-9c5e-4694-a113-f6d146e2f894}: DhcpNameServer = 172.23.192.1 172.23.192.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{f5e7009c-9c5e-4694-a113-f6d146e2f894}: DhcpDomain = etab.local =>.Local Domain

---\\ PROTOCOLE ADDITIONNEL (22) - 2s
O18 - Handler: about [64Bits] - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation
O18 - Handler: cdl [64Bits] - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: dvd [64Bits] - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\MSVidCtl.dll =>.Microsoft Corporation
O18 - Handler: file [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: ftp [64Bits] - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: http [64Bits] - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: https [64Bits] - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll =>.Microsoft Corporation
O18 - Handler: javascript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation
O18 - Handler: local [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: mailto [64Bits] - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation
O18 - Handler: mhtml [64Bits] - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\System32\inetcomm.dll =>.Microsoft Corporation
O18 - Handler: mk [64Bits] - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: ms-its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll =>.Microsoft Corporation
O18 - Handler: res [64Bits] - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation
O18 - Handler: tbauth [64Bits] - {14654CA6-5711-491D-B89A-58E571679951} . (.Microsoft Corporation - TBAuth protocol handler.) -- C:\Windows\System32\tbauth.dll =>.Microsoft Corporation
O18 - Handler: tv [64Bits] - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\MSVidCtl.dll =>.Microsoft Corporation
O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation
O18 - Handler: windows.tbauth [64Bits] - {14654CA6-5711-491D-B89A-58E571679951} . (.Microsoft Corporation - TBAuth protocol handler.) -- C:\Windows\System32\tbauth.dll =>.Microsoft Corporation
O18 - Filter: application/octet-stream [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation
O18 - Filter: application/x-complus [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation
O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation

---\\ REGISTRE AppInit_DLLs et Winlogon Notify (1) - 0s
O20 - Winlogon : UserInit . (.Microsoft Corporation - Application d’ouverture de session Userinit.) - C:\Windows\system32\userinit.exe =>.Microsoft Corporation

---\\ COMPOSANTS ACTIVESETUP INSTALLÉS (ASIC) (5) - 5s
O40 - ASIC: Microsoft Windows Media Player 12.0 [64Bits] - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\System32\wmpdxm.dll =>.Microsoft Corporation
O40 - ASIC: Microsoft Windows Media Player [64Bits] - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Utilitaire d’installation du Lecteur Window.) -- C:\Windows\System32\unregmp2.exe =>.Microsoft Corporation
O40 - ASIC: Web Platform Customizations [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation
O40 - ASIC: (no name) [64Bits] - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\System32\mscories.dll =>.Microsoft Corporation®
O40 - ASIC: Google Chrome [64Bits] - {8A69D345-D564-463c-AFF1-A69D9E530F96} . (.Google Inc. - Google Chrome Installer.) -- C:\Program Files (x86)\Google\Chrome\Application\66.0.3359.181\Installer\chrmstp.exe =>.Google Inc®

---\\ LOGICIELS INSTALLÉS (141) - 51s
O42 - Logiciel: 7-Zip 18.05 (x64) - (.Igor Pavlov.) [HKLM][64Bits] -- 7-Zip =>.Igor Pavlov
O42 - Logiciel: Active Directory Authentication Library pour SQL Server - (.Microsoft Corporation.) [HKLM][64Bits] -- {C1D40364-88C8-4B47-91B2-CA0146ED0393} =>.Microsoft Corporation
O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {10166660-0C51-4355-BD74-D4700EFDB83B} =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe AIR =>.Adobe Systems Incorporated®
O42 - Logiciel: Adobe Photoshop CS6 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {74EB3499-8B95-4B5C-96EB-7B342F3FD0C6} =>.Adobe Systems Incorporated®
O42 - Logiciel: Application Verifier x64 External Package - (.Microsoft.) [HKLM][64Bits] -- {D9908CED-5ABB-FEE9-FC84-743F4D38637C} =>.Microsoft
O42 - Logiciel: Arduino - (.Arduino LLC.) [HKLM][64Bits] -- Arduino =>.Arduino LLC
O42 - Logiciel: CASIO FA-124 - (.CASIO COMPUTER CO., LTD..) [HKLM][64Bits] -- {FB47E710-6249-4EFA-BE36-E922B0612AF4} =>.CASIO COMPUTER CO., LTD.
O42 - Logiciel: CDBurnerXP - (.CDBurnerXP.) [HKLM][64Bits] -- {7E265513-8CDA-4631-B696-F40D983F3B07}_is1 =>.CDBurnerXP
O42 - Logiciel: CrystalDiskInfo 7.6.0 - (.Crystal Dew World.) [HKLM][64Bits] -- CrystalDiskInfo_is1 =>.Crystal Dew World
O42 - Logiciel: DAEMON Tools Lite - (.Disc Soft Ltd.) [HKLM][64Bits] -- DAEMON Tools Lite =>.Disc Soft Ltd®
O42 - Logiciel: Deezer 0.5.4 (only current user) - (.Deezer.) [HKCU][64Bits] -- 67490f87-0893-5593-ae76-b1e5d0acd13f =>.Deezer®
O42 - Logiciel: DiagnosticsHub_CollectionService - (.Microsoft Corporation.) [HKLM][64Bits] -- {5FC8BCBB-3408-48B0-BAF0-839490F7AE65} =>.Microsoft Corporation
O42 - Logiciel: Discord - (.Discord Inc..) [HKCU][64Bits] -- Discord =>.Discord Inc.®
O42 - Logiciel: DriversCloud.com (64 bits) - (.Cybelsoft.) [HKLM][64Bits] -- {29DC4128-CF89-49D9-A524-B4430F036F14} =>.CybelSoft
O42 - Logiciel: ELAN Touchpad 15.6.5.4_X64_WHQL - (.ELAN Microelectronic Corp..) [HKLM][64Bits] -- Elantech =>.ELAN Microelectronics Corporation®
O42 - Logiciel: Entity Framework 6.1.3 Tools for Visual Studio 15 - (.Microsoft Corporation.) [HKLM][64Bits] -- {F8C0447E-D45C-4E52-94E8-C6340AAC9DB8} =>.Microsoft Corporation
O42 - Logiciel: Far Cry 2 - Fortunes Edition - (.Seraph1.) [HKLM][64Bits] -- Far Cry 2 - Fortunes Edition_Seraph1_is1
O42 - Logiciel: FileZilla Client 3.31.0 - (.Tim Kosse.) [HKLM][64Bits] -- FileZilla Client =>.Tim Kosse
O42 - Logiciel: Foxit Reader - (.Foxit Software Inc..) [HKLM][64Bits] -- Foxit Reader_is1 =>.Foxit Software Incorporated®
O42 - Logiciel: Google Chrome - (.Google, Inc..) [HKLM][64Bits] -- {8D7A6D0E-DDDB-3FA9-A5BD-F6B60DED3C6C} =>.Google, Inc.
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {60EC980A-BDA2-4CB6-A427-B07A5498B4CA} =>.Google Inc.
O42 - Logiciel: Google Chrome Canary - (.Google Inc..) [HKCU][64Bits] -- Google Chrome SxS =>.Google Inc®
O42 - Logiciel: Hacknet - (.Team Fractal Alligator.) [HKLM][64Bits] -- Steam App 365450 =>.Valve®
O42 - Logiciel: icecap_collection_neutral - (.Microsoft Corporation.) [HKLM][64Bits] -- {12C1EC05-F936-4A80-821E-7AAC64C4E6FF} =>.Microsoft Corporation
O42 - Logiciel: icecap_collection_x64 - (.Microsoft Corporation.) [HKLM][64Bits] -- {C8E22DF4-5498-4B61-93CF-3081BE95A1BA} =>.Microsoft Corporation
O42 - Logiciel: icecap_collectionresources - (.Microsoft Corporation.) [HKLM][64Bits] -- {28DF1F5F-0F71-426B-8FFF-C05F8D5F1D9E} =>.Microsoft Corporation
O42 - Logiciel: icecap_collectionresourcesx64 - (.Microsoft Corporation.) [HKLM][64Bits] -- {CA8785AE-1C26-4F65-98D4-C6BDF70FE712} =>.Microsoft Corporation
O42 - Logiciel: IIS 10.0 Express - (.Microsoft Corporation.) [HKLM][64Bits] -- {63E2B575-D6F7-4572-8EA9-3DAC4208AA2A} =>.Microsoft Corporation
O42 - Logiciel: IIS Express Application Compatibility Database for x64 - (.Microsoft Corporation.) [HKLM][64Bits] -- {08274920-8908-45c2-9258-8ad67ff77b09}.sdb =>.Microsoft Corporation
O42 - Logiciel: IIS Express Application Compatibility Database for x86 - (.Microsoft Corporation.) [HKLM][64Bits] -- {ad846bae-d44b-4722-abad-f7420e08bcd9}.sdb =>.Microsoft Corporation
O42 - Logiciel: Intel(R) Processor Graphics - (.Intel Corporation.) [HKLM][64Bits] -- {F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA} =>.Intel Corporation - pGFX®
O42 - Logiciel: IntelliTraceProfilerProxy - (.Microsoft Corporation.) [HKLM][64Bits] -- {5F42C347-0A33-4BCE-B9D7-CCD1082C3187} =>.Microsoft Corporation
O42 - Logiciel: IntelliTraceProfilerProxy - (.Microsoft Corporation.) [HKLM][64Bits] -- {ACBAA378-519A-441D-9349-C0AAD8DEAD04} =>.Microsoft Corporation
O42 - Logiciel: Java 8 Update 171 - (.Oracle Corporation.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F32180171F0} =>.Oracle Corporation
O42 - Logiciel: Java 8 Update 171 (64-bit) - (.Oracle Corporation.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F64180171F0} =>.Oracle Corporation
O42 - Logiciel: Java Auto Updater - (.Oracle Corporation.) [HKLM][64Bits] -- {4A03706F-666A-4037-7777-5F2748764D10} =>.Oracle Corporation
O42 - Logiciel: Kits Configuration Installer - (.Microsoft.) [HKLM][64Bits] -- {86E59C8F-61D5-1782-A3CE-60AE7E4D7791} =>.Microsoft
O42 - Logiciel: K-Lite Codec Pack 13.6.0 Full - (.KLCP.) [HKLM][64Bits] -- KLiteCodecPack_is1 =>.KLCP
O42 - Logiciel: MatchWare MindView 7.0 - (.MatchWare.) [HKLM][64Bits] -- MindView 7.0 7.0.11522.0 =>.MatchWare A/S®
O42 - Logiciel: Microsoft .NET Core Host - 2.0.6 (x64) - (.Microsoft Corporation.) [HKLM][64Bits] -- {8C770748-3020-4D1D-ADEB-5828560CFAA0} =>.Microsoft Corporation
O42 - Logiciel: Microsoft .NET Core Host FX Resolver - 2.0.6 (x64) - (.Microsoft Corporation.) [HKLM][64Bits] -- {AA6880B4-C4C2-406A-BFB9-4E1DE17A8552} =>.Microsoft Corporation
O42 - Logiciel: Microsoft .NET Core Runtime - 2.0.6 (x64) - (.Microsoft Corporation.) [HKLM][64Bits] -- {D4927218-8080-49B4-9660-07594F1D7C72} =>.Microsoft Corporation
O42 - Logiciel: Microsoft .NET Core SDK - 2.1.104 (x64) - (.Microsoft Corporation.) [HKLM][64Bits] -- {9D74F95A-D776-4A75-BE4A-DE80D09E8C09} =>.Microsoft Corporation
O42 - Logiciel: Microsoft .NET Core SDK - 2.1.104 (x64) - (.Microsoft Corporation.) [HKLM][64Bits] -- {c04edb8b-6996-4308-979c-972ea46acb7f} =>.Microsoft Corporation®
O42 - Logiciel: Microsoft .NET CoreRuntime For CoreCon - (.Microsoft Corporation.) [HKLM][64Bits] -- {48A8F171-52F2-372B-8414-EA50617708BE} =>.Microsoft Corporation
O42 - Logiciel: Microsoft .NET CoreRuntime SDK - (.Microsoft Corporation.) [HKLM][64Bits] -- {3E1C90EB-DAB6-39C8-82EC-3B8C1EE5BA66} =>.Microsoft Corporation
O42 - Logiciel: Microsoft .NET Native SDK - (.Microsoft Corporation.) [HKLM][64Bits] -- {13F79D3A-88C2-3A1C-9035-6A99EE478DF2} =>.Microsoft Corporation
O42 - Logiciel: Microsoft Azure Authoring Tools - v2.9.5.3 - (.Microsoft Corporation.) [HKLM][64Bits] -- {086C537B-DE1A-4A11-8441-6AAF076174B8} =>.Microsoft Corporation
O42 - Logiciel: Microsoft Azure Compute Emulator - v2.9.5.3 - (.Microsoft Corporation.) [HKLM][64Bits] -- {BB44C8F9-C555-45CF-B6DA-80131B139165} =>.Microsoft Corporation
O42 - Logiciel: Microsoft Azure Compute Emulator - v2.9.5.3 - (.Microsoft Corporation.) [HKLM][64Bits] -- Microsoft Azure Compute Emulator - v2.9.5.3 =>.Microsoft Corporation
O42 - Logiciel: Microsoft Azure Libraries for .NET – v2.9 - (.Microsoft Corporation.) [HKLM][64Bits] -- {C5C91AA6-3E83-430E-8B7A-6B790083F28D} =>.Microsoft Corporation
O42 - Logiciel: Microsoft Azure Storage Emulator - v5.4 - (.Microsoft Corporation.) [HKLM][64Bits] -- {F22A95A5-6882-4C6E-9A05-A1CC77DAF0A5} =>.Microsoft Corporation
O42 - Logiciel: Microsoft Azure Storage Emulator - v5.4 - (.Microsoft Corporation.) [HKLM][64Bits] -- Microsoft Azure Storage Emulator - v5.4 =>.Microsoft Corporation
O42 - Logiciel: Microsoft Expression Web 4 - (.Microsoft Corporation.) [HKLM][64Bits] -- {5F8D931D-B230-47F3-A9C0-0C8CA459A332} =>.Microsoft Corporation
O42 - Logiciel: Microsoft Expression Web 4 - (.Microsoft Corporation.) [HKLM][64Bits] -- Web_4.0.1460.0 =>.Microsoft Corporation
O42 - Logiciel: Microsoft NetStandard SDK - (.Microsoft Corporation.) [HKLM][64Bits] -- {737FDDA7-B944-4CB5-92D9-3D56373BD301} =>.Microsoft Corporation
O42 - Logiciel: Microsoft OneDrive - (.Microsoft Corporation.) [HKCU][64Bits] -- OneDriveSetup.exe =>.Microsoft Corporation®
O42 - Logiciel: Microsoft Portable Library Multi-Targeting Pack - (.Microsoft Corporation.) [HKLM][64Bits] -- {812F31DC-FAA6-3979-B3D6-5D6BAAF2945D} =>.Microsoft Corporation
O42 - Logiciel: Microsoft Portable Library Multi-Targeting Pack Language Pack - fra - (.Microsoft Corporation.) [HKLM][64Bits] -- {CA68042E-86E1-3340-A4C2-A5D02B7FF98F} =>.Microsoft Corporation
O42 - Logiciel: Microsoft System CLR Types pour SQL Server 2017 - (.Microsoft Corporation.) [HKLM][64Bits] -- {63CFF19D-6260-44AB-9496-154E194D1776} =>.Microsoft Corporation
O42 - Logiciel: Microsoft System CLR Types pour SQL Server 2017 - (.Microsoft Corporation.) [HKLM][64Bits] -- {7B14CAB1-5559-4032-B0AA-0BA794066025} =>.Microsoft Corporation
O42 - Logiciel: Microsoft TestPlatform SDK Local Feed - (.Microsoft.) [HKLM][64Bits] -- {257ECCBA-D50F-477A-8EF1-B886F5AD0606} =>.Microsoft
O42 - Logiciel: Microsoft UniversalWindowsPlatform SDK - (.Microsoft.) [HKLM][64Bits] -- {D0A8534E-6F17-4C45-822A-FA403C223CF0} =>.Microsoft
O42 - Logiciel: Microsoft Web Deploy 4.0 - (.Microsoft Corporation.) [HKLM][64Bits] -- {1ED7F328-5789-44D8-A9BA-C352B8E4018D} =>.Microsoft Corporation
O42 - Logiciel: Microsoft Windows Communication Foundation Diagnostic Pack for x86 - (.Microsoft.) [HKLM][64Bits] -- {B4A4856F-7A4F-3BC4-A469-690D3CA52894} =>.Microsoft
O42 - Logiciel: Microsoft XNA Framework Redistributable 4.0 Refresh - (.Microsoft Corporation.) [HKLM][64Bits] -- {D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F} =>.Microsoft Corporation
O42 - Logiciel: MindView 7.0 - (.MatchWare.) [HKLM][64Bits] -- {197544FD-E289-4B04-A890-A10BB0A9F4D4} =>.MatchWare
O42 - Logiciel: Molotov - (.Molotov.) [HKCU][64Bits] -- Molotov =>.Molotov
O42 - Logiciel: Mozilla Firefox 59.0.3 (x64 en-US) - (.Mozilla.) [HKLM][64Bits] -- Mozilla Firefox 59.0.3 (x64 en-US) =>.Mozilla Corporation®
O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM][64Bits] -- MozillaMaintenanceService =>.Mozilla
O42 - Logiciel: MSI Development Tools - (.Microsoft Corporation.) [HKLM][64Bits] -- {973CACA2-E018-065B-0580-F2784802E299} =>.Microsoft Corporation
O42 - Logiciel: Notepad++ (32-bit x86) - (.Notepad++ Team.) [HKLM][64Bits] -- Notepad++ =>.Notepad++ Team
O42 - Logiciel: Office 16 Click-to-Run Extensibility Component - (.Microsoft Corporation.) [HKLM][64Bits] -- {90160000-008C-0000-0000-0000000FF1CE} =>.Microsoft Corporation
O42 - Logiciel: Office 16 Click-to-Run Extensibility Component 64-bit Registration - (.Microsoft Corporation.) [HKLM][64Bits] -- {90160000-00DD-0000-1000-0000000FF1CE} =>.Microsoft Corporation
O42 - Logiciel: Office 16 Click-to-Run Licensing Component - (.Microsoft Corporation.) [HKLM][64Bits] -- {90160000-008F-0000-1000-0000000FF1CE} =>.Microsoft Corporation
O42 - Logiciel: Office 16 Click-to-Run Localization Component - (.Microsoft Corporation.) [HKLM][64Bits] -- {90160000-008C-040C-0000-0000000FF1CE} =>.Microsoft Corporation
O42 - Logiciel: OpenOffice 4.1.4 - (.Apache Software Foundation.) [HKLM][64Bits] -- {DAEDCAF7-E42C-41E1-822C-33658A2C6EAD} =>.Apache Software Foundation
O42 - Logiciel: Package de pilotes Windows - Google, Inc. (WinUSB) AndroidUsbDeviceClass ( - (.Google, Inc..) [HKLM][64Bits] -- 092555911492C6959D2596D612F52DCA71881CA2 =>.Google, Inc.
O42 - Logiciel: PDF Settings CS6 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {BFEAAE77-BD7F-4534-B286-9C5CB4697EB1} =>.Adobe Systems Incorporated
O42 - Logiciel: PDFCreator - (.pdfforge GmbH.) [HKLM][64Bits] -- {0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D} =>.pdfforge GmbH
O42 - Logiciel: Qualcomm Atheros Bluetooth Suite (64) - (.Qualcomm Atheros.) [HKLM][64Bits] -- {A84A4FB1-D703-48DB-89E0-68B6499D2801} =>.Qualcomm Atheros
O42 - Logiciel: Realtek Card Reader - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {5BC2B5AB-80DE-4E83-B8CF-426902051D0A} =>.Realtek Semiconductor Corp®
O42 - Logiciel: Realtek Ethernet Controller Driver - (.Realtek.) [HKLM][64Bits] -- {8833FFB6-5B0C-4764-81AA-06DFEED9A476} =>.Realtek Semiconductor Corp.®
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC} =>.Realtek Semiconductor Corp.®
O42 - Logiciel: scilab-6.0.1 (64-bit) - (.Scilab Enterprises.) [HKLM][64Bits] -- scilab-6.0.1 (64-bit)_is1 =>.Scilab Enterprises
O42 - Logiciel: SDK ARM Additions - (.Microsoft Corporation.) [HKLM][64Bits] -- {7922BB77-0B59-840A-AC80-D560A34D75C5} =>.Microsoft Corporation
O42 - Logiciel: SDK ARM Redistributables - (.Microsoft Corporation.) [HKLM][64Bits] -- {C87DF65C-A672-7E08-A083-E7D48FE8DB70} =>.Microsoft Corporation
O42 - Logiciel: Steam - (.Valve Corporation.) [HKLM][64Bits] -- Steam =>.Valve®
O42 - Logiciel: Sublime Text Build 3143 - (.Sublime HQ Pty Ltd.) [HKLM][64Bits] -- Sublime Text 3_is1 =>.Sublime HQ Pty Ltd®
O42 - Logiciel: TeamViewer 13 - (.TeamViewer.) [HKLM][64Bits] -- TeamViewer =>.TeamViewer GmbH®
O42 - Logiciel: The Darkness II - (.Digital Extremes.) [HKLM][64Bits] -- Steam App 67370 =>.Valve®
O42 - Logiciel: The Expendabros - (.Free Lives.) [HKLM][64Bits] -- Steam App 312990 =>.Valve®
O42 - Logiciel: Tom Clancy's Rainbow Six - (..) [HKLM][64Bits] -- Tom Clancy's Rainbow Six
O42 - Logiciel: TypeScript SDK - (.Microsoft Corporation.) [HKLM][64Bits] -- {4185E5A6-374B-4F53-B11C-630F750BC3CD} =>.Microsoft Corporation
O42 - Logiciel: UE4 Prerequisites (x64) - (.Epic Games, Inc..) [HKLM][64Bits] -- {2890ae6b-90e9-448d-b3e6-97e43c21e2fd} =>.Epic Games Inc.®
O42 - Logiciel: UE4 Prerequisites (x64) - (.Epic Games, Inc..) [HKLM][64Bits] -- {36EAD5CF-44EF-4FCF-8BE1-D96C4835D7A4} =>.Epic Games, Inc.
O42 - Logiciel: Universal General MIDI DLS Extension SDK - (.Microsoft Corporation.) [HKLM][64Bits] -- {D261CEA1-AB8D-9CFA-4407-BCEFC78661AC} =>.Microsoft Corporation
O42 - Logiciel: vcpp_crt.redist.clickonce - (.Microsoft Corporation.) [HKLM][64Bits] -- {DE620579-8057-4DC7-B041-2B1A1B3C837D} =>.Microsoft Corporation
O42 - Logiciel: Visual C++ Library CRT Appx Package - (.Microsoft Corporation.) [HKLM][64Bits] -- {3388536C-631E-3A6C-B103-E61EF1C228CF} =>.Microsoft Corporation
O42 - Logiciel: Visual C++ Library CRT Appx Package - (.Microsoft Corporation.) [HKLM][64Bits] -- {AC4BA43D-9EC2-3E14-BEDC-64211D707906} =>.Microsoft Corporation
O42 - Logiciel: Visual C++ Library CRT Appx Resource Package - (.Microsoft Corporation.) [HKLM][64Bits] -- {0AAAB1C0-C9E5-3A1F-B4FC-D017257E4BF6} =>.Microsoft Corporation
O42 - Logiciel: Visual C++ Library CRT Desktop Appx Package - (.Microsoft Corporation.) [HKLM][64Bits] -- {37086900-8BC3-33C9-9646-42FF099703FA} =>.Microsoft Corporation
O42 - Logiciel: Visual C++ Library CRT Desktop Appx Package - (.Microsoft Corporation.) [HKLM][64Bits] -- {845ED63C-4E8A-37C2-8A05-97BD5CB036A7} =>.Microsoft Corporation
O42 - Logiciel: Visual C++ Library CRT Desktop Appx Package - (.Microsoft Corporation.) [HKLM][64Bits] -- {C4F2FB9B-4C3C-3DFC-9ECF-CAFB385772A1} =>.Microsoft Corporation
O42 - Logiciel: Visual F# 10.1 SDK - (.Microsoft Corporation.) [HKLM][64Bits] -- {0EB761A8-3C0A-4504-8C8A-15118F859D79} =>.Microsoft Corporation
O42 - Logiciel: Visual F# 10.1 SDK - (.Microsoft Corporation.) [HKLM][64Bits] -- {93B1F888-981F-4FFF-87CC-E925EA43D45F} =>.Microsoft Corporation
O42 - Logiciel: Visual Studio Community 2017 - (.Microsoft Corporation.) [HKLM][64Bits] -- 5363fb37 =>.Microsoft Corporation®
O42 - Logiciel: Visual Studio Professional 2017 (2) - (.Microsoft Corporation.) [HKLM][64Bits] -- cf2c0857 =>.Microsoft Corporation®
O42 - Logiciel: VLC media player - (.VideoLAN.) [HKLM][64Bits] -- VLC media player =>.VideoLAN
O42 - Logiciel: VS Immersive Activate Helper - (.Microsoft Corporation.) [HKLM][64Bits] -- {8A2BDA07-3417-46C1-9058-CB32BC63E30E} =>.Microsoft Corporation
O42 - Logiciel: VS JIT Debugger - (.Microsoft Corporation.) [HKLM][64Bits] -- {F8F52853-A1A7-42C7-A082-5A6D5853BB0B} =>.Microsoft Corporation
O42 - Logiciel: VS Script Debugging Common - (.Microsoft Corporation.) [HKLM][64Bits] -- {0EE5749D-2DC0-460F-AB1C-06B3EDB42426} =>.Microsoft Corporation
O42 - Logiciel: VS WCF Debugging - (.Microsoft Corporation.) [HKLM][64Bits] -- {209A1A84-1A06-4954-9D73-7E654C5F8D7A} =>.Microsoft Corporation
O42 - Logiciel: vs_BlendMsi - (.Microsoft Corporation.) [HKLM][64Bits] -- {C5D83E0F-12E7-4BA3-98E6-DAE0E73B5BF9} =>.Microsoft Corporation
O42 - Logiciel: vs_clickoncebootstrappermsi - (.Microsoft Corporation.) [HKLM][64Bits] -- {A68D7884-F036-4A0D-AE1A-410E0311E135} =>.Microsoft Corporation
O42 - Logiciel: vs_clickoncebootstrappermsires - (.Microsoft Corporation.) [HKLM][64Bits] -- {91DDDFB5-1782-48C2-BA2A-8F4D9DE39D27} =>.Microsoft Corporation
O42 - Logiciel: vs_clickoncesigntoolmsi - (.Microsoft Corporation.) [HKLM][64Bits] -- {6A1ECF65-2CBF-4B33-9D4A-D1C0A0E5FE45} =>.Microsoft Corporation
O42 - Logiciel: vs_communitymsi - (.Microsoft Corporation.) [HKLM][64Bits] -- {C2749223-157E-48F0-9410-A510361D6803} =>.Microsoft Corporation
O42 - Logiciel: vs_communitymsires - (.Microsoft Corporation.) [HKLM][64Bits] -- {1A7B945D-ACF2-447F-AF55-A9351F2A70AB} =>.Microsoft Corporation
O42 - Logiciel: vs_devenvmsi - (.Microsoft Corporation.) [HKLM][64Bits] -- {BFFA2FFB-1095-4ADD-A352-368806D2412B} =>.Microsoft Corporation
O42 - Logiciel: vs_filehandler_amd64 - (.Microsoft Corporation.) [HKLM][64Bits] -- {02DD895F-089F-4A63-81A9-78D00142AF20} =>.Microsoft Corporation
O42 - Logiciel: vs_filehandler_x86 - (.Microsoft Corporation.) [HKLM][64Bits] -- {E6A92308-33DF-494B-A91A-3B80FBC97F2B} =>.Microsoft Corporation
O42 - Logiciel: vs_FileTracker_Singleton - (.Microsoft Corporation.) [HKLM][64Bits] -- {8EB2C670-04C2-482D-BACD-B4095E27FD39} =>.Microsoft Corporation
O42 - Logiciel: vs_minshellinteropmsi - (.Microsoft Corporation.) [HKLM][64Bits] -- {6B45EEA3-85F8-4B26-B952-6830A45F2688} =>.Microsoft Corporation
O42 - Logiciel: vs_minshellmsi - (.Microsoft Corporation.) [HKLM][64Bits] -- {13E08AD0-D6AC-44C4-9F5B-0AE2EB56B105} =>.Microsoft Corporation
O42 - Logiciel: vs_minshellmsires - (.Microsoft Corporation.) [HKLM][64Bits] -- {853FD6F3-0BC9-414A-986B-90EF538DBAA1} =>.Microsoft Corporation
O42 - Logiciel: vs_professionalmsi - (.Microsoft Corporation.) [HKLM][64Bits] -- {C135A30B-7258-4E11-8660-87C5642A4AAE} =>.Microsoft Corporation
O42 - Logiciel: vs_SQLClickOnceBootstrappermsi - (.Microsoft Corporation.) [HKLM][64Bits] -- {5779B6DD-604A-41CE-BC3D-9D4BDDA22AD2} =>.Microsoft Corporation
O42 - Logiciel: vs_tipsmsi - (.Microsoft Corporation.) [HKLM][64Bits] -- {1AC6CC3D-7724-4D84-9270-798A2191AB1C} =>.Microsoft Corporation
O42 - Logiciel: WinAppDeploy - (.Microsoft Corporation.) [HKLM][64Bits] -- {9690D51C-4435-1C20-7819-66CCAB0F03F9} =>.Microsoft Corporation
O42 - Logiciel: Windows IP Over USB - (.Microsoft Corporation.) [HKLM][64Bits] -- {8CBFAC58-3058-B2AD-10E2-9E2A859B554B} =>.Microsoft Corporation
O42 - Logiciel: Windows Phone SDK 8.0 Assemblies for Visual Studio 2017 - (.Microsoft Corporation.) [HKLM][64Bits] -- {AB5C32AD-ED85-331B-B8AF-B499E77DACD0} =>.Microsoft Corporation
O42 - Logiciel: Windows Simulator - (.Microsoft Corporation.) [HKLM][64Bits] -- {53249A16-77EB-4149-B0B6-0F6A04C97CE2} =>.Microsoft Corporation
O42 - Logiciel: Windows Simulator - ENU - (.Microsoft Corporation.) [HKLM][64Bits] -- {9CC35CDA-E79F-470B-9685-CF6971624444} =>.Microsoft Corporation
O42 - Logiciel: Windows Software Development Kit - Windows 10.0.16299.15 - (.Microsoft Corporation.) [HKLM][64Bits] -- {6195c203-b53c-4bb7-983a-6070a902e704} =>.Microsoft Corporation®
O42 - Logiciel: windows_toolscorepkg - (.Microsoft Corporation.) [HKLM][64Bits] -- {1EDBC5BD-5FF7-4DD4-8A28-401054E63CF6} =>.Microsoft Corporation
O42 - Logiciel: XAMPP - (.Bitnami.) [HKLM][64Bits] -- xampp =>.BitNami
O42 - Logiciel: X-Mouse Button Control 2.17 - (.Highresolution Enterprises.) [HKLM][64Bits] -- X-Mouse Button Control =>.Open Source Developer, Phillip Gibbons®
O42 - Logiciel: yEd Graph Editor 3.17.2 - (.yWorks GmbH.) [HKLM][64Bits] -- 3309-7404-0599-8908 {6E7C8A879EE7646FEA5625972695908F} =>.yWorks GmbH
O42 - Logiciel: yEd Graph Editor 3.18.0.2 - (.yWorks GmbH.) [HKLM][64Bits] -- 3309-7404-0599-8908 {6E7C8A879EE7646FEA5625972695908F} =>.yWorks GmbH

---\\ CLÉ DE REGISTRE SOFTWARE HKCU & HKLM (155) - 52s
HKCU\Software\undefined =>.SUP.Downloader
HKLM\SOFTWARE\Adobe =>.Adobe
HKLM\SOFTWARE\Apple Inc. =>.Apple Inc.
HKLM\SOFTWARE\Arduino =>.Arduino
HKLM\SOFTWARE\AVG =>.AVG Software
HKLM\SOFTWARE\dotnet
HKLM\SOFTWARE\EaseUS =>.EaseUS Software
HKLM\SOFTWARE\ej-technologies =>.ej-technologies
HKLM\SOFTWARE\FileZilla 3 =>.FileZilla
HKLM\SOFTWARE\FileZilla Client =>.Tim Kosse
HKLM\SOFTWARE\Foxit Software =>.Foxit Software
HKLM\SOFTWARE\Google =>.Google
HKLM\SOFTWARE\Icaros =>.Icaros
HKLM\SOFTWARE\InstallShield =>.InstallShield
HKLM\SOFTWARE\Intel =>.Intel
HKLM\SOFTWARE\JavaSoft =>.JavaSoft
HKLM\SOFTWARE\JreMetrics =>.JreMetrics
HKLM\SOFTWARE\Khronos =>.Khronos
HKLM\SOFTWARE\KLCodecPack =>.KLite Inc
HKLM\SOFTWARE\LAV =>.LAV Inc
HKLM\SOFTWARE\Macromedia =>.Macromedia
HKLM\SOFTWARE\MatchWare =>.MatchWare
HKLM\SOFTWARE\Mozilla =>.Mozilla
HKLM\SOFTWARE\MozillaPlugins =>.MozillaPlugins
HKLM\SOFTWARE\MWas
HKLM\SOFTWARE\MXDevice
HKLM\SOFTWARE\Notepad++ =>.Don Ho
HKLM\SOFTWARE\Nuance =>.Nuance
HKLM\SOFTWARE\Nuget =>.Microsoft Corporation
HKLM\SOFTWARE\ODBC =>.DB Connectivity Solutions
HKLM\SOFTWARE\OpenOffice =>.SourceForge
HKLM\SOFTWARE\Oracle =>.Oracle
HKLM\SOFTWARE\Realtek =>.Realtek Semiconductor Corp.
HKLM\SOFTWARE\Realtek Semiconductor Corp. =>.Realtek Semiconductor Corp.
HKLM\SOFTWARE\Red Storm Entertainment =>.Red Storm
HKLM\SOFTWARE\SRS Labs =>.SRS Labs
HKLM\SOFTWARE\TeamViewer =>.TeamViewer
HKLM\SOFTWARE\Tencent =>.SUP.Tencent
HKLM\SOFTWARE\TVInstallTemp =>.TeamViewer GmbH
HKLM\SOFTWARE\Ubisoft =>.Ubisoft
HKLM\SOFTWARE\Valve =>.Valve
HKLM\SOFTWARE\Volatile =>.Microsoft Corporation
HKLM\SOFTWARE\WafCX =>.WafCX
HKLM\SOFTWARE\Wondershare =>.Wondershare
HKLM\SOFTWARE\WOW6432Node =>.Microsoft Corporation
HKLM\SOFTWARE\xampp =>.Apache Inc.
HKLM\SOFTWARE\RegisteredApplications =>.Microsoft Corporation
HKLM\SOFTWARE\WOW6432Node\Adobe =>.Adobe
HKLM\SOFTWARE\WOW6432Node\Apple Inc. =>.Apple Inc.
HKLM\SOFTWARE\WOW6432Node\Arduino =>.Arduino
HKLM\SOFTWARE\WOW6432Node\AVG =>.AVG Software
HKLM\SOFTWARE\WOW6432Node\dotnet
HKLM\SOFTWARE\WOW6432Node\EaseUS =>.EaseUS Software
HKLM\SOFTWARE\WOW6432Node\ej-technologies =>.ej-technologies
HKLM\SOFTWARE\WOW6432Node\FileZilla 3 =>.FileZilla
HKLM\SOFTWARE\WOW6432Node\FileZilla Client =>.Tim Kosse
HKLM\SOFTWARE\WOW6432Node\Foxit Software =>.Foxit Software
HKLM\SOFTWARE\WOW6432Node\Google =>.Google
HKLM\SOFTWARE\WOW6432Node\Icaros =>.Icaros
HKLM\SOFTWARE\WOW6432Node\InstallShield =>.InstallShield
HKLM\SOFTWARE\WOW6432Node\Intel =>.Intel
HKLM\SOFTWARE\WOW6432Node\JavaSoft =>.JavaSoft
HKLM\SOFTWARE\WOW6432Node\JreMetrics =>.JreMetrics
HKLM\SOFTWARE\WOW6432Node\Khronos =>.Khronos
HKLM\SOFTWARE\WOW6432Node\KLCodecPack =>.KLite Inc
HKLM\SOFTWARE\WOW6432Node\LAV =>.LAV Inc
HKLM\SOFTWARE\WOW6432Node\Macromedia =>.Macromedia
HKLM\SOFTWARE\WOW6432Node\MatchWare =>.MatchWare
HKLM\SOFTWARE\WOW6432Node\Mozilla =>.Mozilla
HKLM\SOFTWARE\WOW6432Node\MozillaPlugins =>.MozillaPlugins
HKLM\SOFTWARE\WOW6432Node\MWas
HKLM\SOFTWARE\WOW6432Node\MXDevice
HKLM\SOFTWARE\WOW6432Node\Notepad++ =>.Don Ho
HKLM\SOFTWARE\WOW6432Node\Nuance =>.Nuance
HKLM\SOFTWARE\WOW6432Node\Nuget =>.Microsoft Corporation
HKLM\SOFTWARE\WOW6432Node\ODBC =>.DB Connectivity Solutions
HKLM\SOFTWARE\WOW6432Node\OpenOffice =>.SourceForge
HKLM\SOFTWARE\WOW6432Node\Oracle =>.Oracle
HKLM\SOFTWARE\WOW6432Node\Realtek =>.Realtek Semiconductor Corp.
HKLM\SOFTWARE\WOW6432Node\Realtek Semiconductor Corp. =>.Realtek Semiconductor Corp.
HKLM\SOFTWARE\WOW6432Node\Red Storm Entertainment =>.Red Storm
HKLM\SOFTWARE\WOW6432Node\SRS Labs =>.SRS Labs
HKLM\SOFTWARE\WOW6432Node\TeamViewer =>.TeamViewer
HKLM\SOFTWARE\WOW6432Node\Tencent =>.SUP.Tencent
HKLM\SOFTWARE\WOW6432Node\TVInstallTemp =>.TeamViewer GmbH
HKLM\SOFTWARE\WOW6432Node\Ubisoft =>.Ubisoft
HKLM\SOFTWARE\WOW6432Node\Valve =>.Valve
HKLM\SOFTWARE\WOW6432Node\Volatile =>.Microsoft Corporation
HKLM\SOFTWARE\WOW6432Node\WafCX =>.WafCX
HKLM\SOFTWARE\WOW6432Node\Wondershare =>.Wondershare
HKLM\SOFTWARE\WOW6432Node\WOW6432Node =>.Microsoft Corporation
HKLM\SOFTWARE\WOW6432Node\xampp =>.Apache Inc.
HKLM\SOFTWARE\WOW6432Node\RegisteredApplications =>.Microsoft Corporation
HKCU\SOFTWARE\67490f87-0893-5593-ae76-b1e5d0acd13f =>Adware.CrossRider
HKCU\SOFTWARE\7-Zip =>.Igor Pavlov
HKCU\SOFTWARE\Adobe =>.Adobe
HKCU\SOFTWARE\AGS
HKCU\SOFTWARE\AppDataLow =>.Microsoft Corporation
HKCU\SOFTWARE\AVAST Software =>.AVAST Software
HKCU\SOFTWARE\Avg =>.AVG Software
HKCU\SOFTWARE\Browser Cleanup =>.Avast Software s.r.o
HKCU\SOFTWARE\Canneverbe Limited =>.Canneverbe Limited
HKCU\SOFTWARE\CASIO =>.CASIO
HKCU\SOFTWARE\Chromium =>.Chromium
HKCU\SOFTWARE\Disc Soft =>.Disc Soft
HKCU\SOFTWARE\DriverUpdater
HKCU\SOFTWARE\DuoDianApp =>.DuoDianApp
HKCU\SOFTWARE\ej-technologies =>.ej-technologies
HKCU\SOFTWARE\Elantech =>.Elantech Inc.
HKCU\SOFTWARE\Epic Games =>.Epic Games
HKCU\SOFTWARE\FonePaw =>.FonePaw
HKCU\SOFTWARE\Foxit Software =>.Foxit Software
HKCU\SOFTWARE\Free Lives =>.Free Lives
HKCU\SOFTWARE\Fritzing =>.Fritzing
HKCU\SOFTWARE\Google =>.Google
HKCU\SOFTWARE\Highresolution Enterprises =>.Highresolution Enterprises
HKCU\SOFTWARE\Icaros =>.Icaros
HKCU\SOFTWARE\IMDownloader =>.Legitimate
HKCU\SOFTWARE\Intel =>.Intel
HKCU\SOFTWARE\JavaSoft =>.JavaSoft
HKCU\SOFTWARE\madshi =>.madshi.net
HKCU\SOFTWARE\MatchWare =>.MatchWare
HKCU\SOFTWARE\MediaInfo =>.Jérôme Martinez
HKCU\SOFTWARE\Mojang =>.Mojang
HKCU\SOFTWARE\MONOGRAM =>.MOO Software
HKCU\SOFTWARE\Mozilla =>.Mozilla
HKCU\SOFTWARE\MozillaPlugins =>.MozillaPlugins
HKCU\SOFTWARE\MPC-HC =>.MPC-HC Team
HKCU\SOFTWARE\Netscape =>.Netscape
HKCU\SOFTWARE\ODBC =>.DB Connectivity Solutions
HKCU\SOFTWARE\OpenOffice =>.SourceForge
HKCU\SOFTWARE\PDF Architect 5 =>.pdfforge GmbH
HKCU\SOFTWARE\pdfforge =>.pdfforge
HKCU\SOFTWARE\QtProject =>.QtProject
HKCU\SOFTWARE\RDUtility
HKCU\SOFTWARE\Realtek =>.Realtek Semiconductor Corp.
HKCU\SOFTWARE\RegisteredApplications =>.Microsoft Corporation
HKCU\SOFTWARE\Scilab
HKCU\SOFTWARE\Smallpdf
HKCU\SOFTWARE\Soda PDF Desktop =>.Lulu Software
HKCU\SOFTWARE\SteelRaven7
HKCU\SOFTWARE\SubSystems =>.Sub Systems Inc
HKCU\SOFTWARE\SUPERHOT_Team
HKCU\SOFTWARE\SYNCJM =>.SYNCJM
HKCU\SOFTWARE\SysInternals =>.Sysinternals
HKCU\SOFTWARE\TeamViewer =>.TeamViewer
HKCU\SOFTWARE\TechWorld
HKCU\SOFTWARE\Tencent =>.SUP.Tencent
HKCU\SOFTWARE\Ubisoft =>.Ubisoft
HKCU\SOFTWARE\Unity =>.Unity
HKCU\SOFTWARE\Valve =>.Valve
HKCU\SOFTWARE\Wondershare =>.Wondershare
HKCU\SOFTWARE\Wow6432Node =>.Microsoft Corporation
HKCU\SOFTWARE\ZHP =>.Nicolas Coolman
HKCU\SOFTWARE\AppDataLow\Software =>.Microsoft Corporation

---\\ CONTENU DES DOSSIERS PROGRAMMES (215) - 157s
O43 - CFD: 09/05/2018 - [] D -- C:\Program Files\7-Zip =>.Igor Pavlov
O43 - CFD: 23/05/2018 - [] D -- C:\Program Files\Adobe =>.Adobe Systems Incorporated®
O43 - CFD: 04/11/2017 - [] AD -- C:\Program Files\CDBurnerXP =>.Stefan Haglund
O43 - CFD: 05/03/2018 - [] D -- C:\Program Files\DAEMON Tools Lite =>.DAEMON Tools
O43 - CFD: 11/04/2018 - [] D -- C:\Program Files\dotnet =>.Microsoft Corporation®
O43 - CFD: 05/01/2018 - [] D -- C:\Program Files\DriversCloud.com =>.Cybelsoft
O43 - CFD: 02/05/2018 - [] D -- C:\Program Files\Elantech =>.ELAN Microelectronics Corporation®
O43 - CFD: 02/04/2018 - [] D -- C:\Program Files\FileZilla FTP Client =>.Tim Kosse
O43 - CFD: 08/03/2018 - [] D -- C:\Program Files\Highresolution Enterprises =>.Open Source Developer, Phillip Gibbons®
O43 - CFD: 11/04/2018 - [] D -- C:\Program Files\IIS Express =>.Microsoft Corporation®
O43 - CFD: 02/05/2018 - [] D -- C:\Program Files\Intel =>.Intel Corporation
O43 - CFD: 21/05/2018 - [] D -- C:\Program Files\Java =>.Oracle
O43 - CFD: 09/05/2018 - [] AD -- C:\Program Files\Mozilla Firefox =>.Mozilla
O43 - CFD: 03/02/2018 - [] D -- C:\Program Files\PDFCreator =>.Philip Chinery
O43 - CFD: 02/05/2018 - [] D -- C:\Program Files\Realtek =>.Realtek
O43 - CFD: 23/03/2018 - [] D -- C:\Program Files\scilab-6.0.1
O43 - CFD: 04/11/2017 - [] D -- C:\Program Files\VideoLAN =>.VideoLan Team
O43 - CFD: 11/04/2018 - [] D -- C:\Program Files\VS2010Schemas
O43 - CFD: 11/04/2018 - [] D -- C:\Program Files\VS2012Schemas
O43 - CFD: 23/05/2018 - [] D -- C:\Program Files (x86)\Adobe =>.Adobe Systems Incorporated®
O43 - CFD: 04/11/2017 - [] D -- C:\Program Files (x86)\Arduino =>.Arduino LLC
O43 - CFD: 19/05/2018 - [] D -- C:\Program Files (x86)\AVG =>.AVG Software
O43 - CFD: 09/03/2018 - [] D -- C:\Program Files (x86)\Bluetooth Suite =>.ASUSTeK
O43 - CFD: 27/03/2018 - [] D -- C:\Program Files (x86)\CASIO =>.CASIO
O43 - CFD: 26/05/2018 - [] D -- C:\Program Files (x86)\CrystalDiskInfo =>.Crystal Dew World
O43 - CFD: 11/04/2018 - [] D -- C:\Program Files (x86)\Entity Framework Tools =>.Microsoft Corporation®
O43 - CFD: 01/04/2018 - [] D -- C:\Program Files (x86)\FonePaw =>.FonePaw
O43 - CFD: 19/02/2018 - [] D -- C:\Program Files (x86)\Foxit Software =>.Foxit Software
O43 - CFD: 13/12/2017 - [] D -- C:\Program Files (x86)\Google =>.Google Inc®
O43 - CFD: 27/05/2018 - [] D -- C:\Program Files (x86)\HD Tune =>.EFD Software
O43 - CFD: 11/04/2018 - [] D -- C:\Program Files (x86)\IIS Express =>.Microsoft Corporation®
O43 - CFD: 09/03/2018 - [] HD -- C:\Program Files (x86)\InstallShield Installation Information =>.InstallShield
O43 - CFD: 03/11/2017 - [] D -- C:\Program Files (x86)\Intel =>.Intel Corporation
O43 - CFD: 21/05/2018 - [] D -- C:\Program Files (x86)\Java =>.Oracle
O43 - CFD: 04/11/2017 - [] AD -- C:\Program Files (x86)\K-Lite Codec Pack =>.KLite Inc
O43 - CFD: 18/12/2017 - [] D -- C:\Program Files (x86)\MatchWare =>.MatchWare A/S®
O43 - CFD: 09/05/2018 - [] D -- C:\Program Files (x86)\Mozilla Maintenance Service =>.Mozilla
O43 - CFD: 27/11/2017 - [] D -- C:\Program Files (x86)\Notepad++ =>.Don Ho
O43 - CFD: 04/11/2017 - [] AD -- C:\Program Files (x86)\OpenOffice 4 =>.OpenOffice.org
O43 - CFD: 05/02/2018 - [0] D -- C:\Program Files (x86)\PDF Architect 5 Manager =>.pdfforge GmbH
O43 - CFD: 09/03/2018 - [] D -- C:\Program Files (x86)\Realtek =>.Realtek
O43 - CFD: 30/03/2018 - [] D -- C:\Program Files (x86)\Red Storm Entertainment =>.Red Storm
O43 - CFD: 27/05/2018 - [] D -- C:\Program Files (x86)\Steam =>.Steam Games
O43 - CFD: 22/12/2017 - [] D -- C:\Program Files (x86)\Sublime Text 3 =>.Sublime HQ Pty Ltd®
O43 - CFD: 10/05/2018 - [] D -- C:\Program Files (x86)\TeamViewer =>.TeamViewer GmbH
O43 - CFD: 07/03/2018 - [0] D -- C:\Program Files (x86)\Ubisoft =>.Ubisoft
O43 - CFD: 04/04/2018 - [] D -- C:\Program Files (x86)\Wondershare =>.Wondershare
O43 - CFD: 18/12/2017 - [] D -- C:\Program Files (x86)\yWorks {6E7C8A879EE7646FEA5625972695908F} =>.yWorks
O43 - CFD: 08/05/2018 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip =>.Igor Pavlov
O43 - CFD: 12/04/2018 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools =>.Administrative Tools
O43 - CFD: 02/05/2018 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CASIO =>.CASIO
O43 - CFD: 26/05/2018 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CrystalDiskInfo =>.Crystal Dew World
O43 - CFD: 02/05/2018 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite =>.DAEMON Tools
O43 - CFD: 02/05/2018 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriversCloud.com =>.Cybelsoft
O43 - CFD: 02/05/2018 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Far Cry 2 - Fortunes Edition
O43 - CFD: 02/05/2018 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client =>.Tim Kosse
O43 - CFD: 02/05/2018 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit Reader =>.Foxit Corporation
O43 - CFD: 27/05/2018 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HD Tune =>.EFD Software
O43 - CFD: 02/05/2018 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Highresolution Enterprises =>.Highresolution Enterprises
O43 - CFD: 21/05/2018 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java =>.Oracle
O43 - CFD: 02/05/2018 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack =>.KLite Inc
O43 - CFD: 02/05/2018 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MindView 7.0
O43 - CFD: 02/05/2018 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++ =>.Don Ho
O43 - CFD: 02/05/2018 - [] SD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.4 =>.SourceForge
O43 - CFD: 02/05/2018 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator =>.Philip Chinery
O43 - CFD: 02/05/2018 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\scilab-6.0.1 (64-bit)
O43 - CFD: 02/05/2018 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam =>.Steam Games
O43 - CFD: 23/05/2018 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tencent Software =>.SUP.Tencent
O43 - CFD: 02/05/2018 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tom Clancy's Rainbow Six
O43 - CFD: 02/05/2018 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN =>.VideoLan Team
O43 - CFD: 02/05/2018 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visual Studio 2017 =>.Pinnacle Systems, Inc.
O43 - CFD: 04/04/2018 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wondershare =>.Wondershare
O43 - CFD: 02/05/2018 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XAMPP =>.Apache Inc.
O43 - CFD: 02/05/2018 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\yEd Graph Editor =>.yWorks GmbH
O43 - CFD: 21/05/2018 - [] D -- C:\ProgramData\Adobe =>.Adobe
O43 - CFD: 07/12/2017 - [] D -- C:\ProgramData\Adobe-Backup
O43 - CFD: 19/05/2018 - [] AD -- C:\ProgramData\Avg =>.AVG Software
O43 - CFD: 30/03/2018 - [] D -- C:\ProgramData\Canneverbe Limited =>.Canneverbe Limited
O43 - CFD: 18/12/2017 - [] D -- C:\ProgramData\Caphyon =>.Caphyon
O43 - CFD: 25/02/2018 - [] D -- C:\ProgramData\CASIO =>.CASIO
O43 - CFD: 23/05/2018 - [] D -- C:\ProgramData\DAEMON Tools Lite =>.DAEMON Tools
O43 - CFD: 11/04/2018 - [] D -- C:\ProgramData\dftmp
O43 - CFD: 05/01/2018 - [] D -- C:\ProgramData\DriversCloud.com =>.Cybelsoft
O43 - CFD: 04/11/2017 - [] D -- C:\ProgramData\Foxit ContentPlatform =>.Foxit Corporation
O43 - CFD: 23/02/2018 - [] D -- C:\ProgramData\Foxit Software =>.Foxit Software
O43 - CFD: 13/12/2017 - [] D -- C:\ProgramData\Google =>.Google
O43 - CFD: 18/12/2017 - [] D -- C:\ProgramData\mwas =>.MWas
O43 - CFD: 04/11/2017 - [] D -- C:\ProgramData\Oracle =>.Oracle
O43 - CFD: 06/04/2018 - [] D -- C:\ProgramData\Orbit =>.Orbit
O43 - CFD: 05/02/2018 - [] D -- C:\ProgramData\PDF Architect 5 =>.pdfforge GmbH
O43 - CFD: 23/05/2018 - [] D -- C:\ProgramData\regid.1986-12.com.adobe =>.Adobe Inc.
O43 - CFD: 25/02/2018 - [] D -- C:\ProgramData\SafeNet Sentinel =>.SafeNet
O43 - CFD: 04/04/2018 - [] D -- C:\ProgramData\Wondershare =>.Wondershare
O43 - CFD: 31/03/2018 - [] D -- C:\ProgramData\wsr
O43 - CFD: 23/05/2018 - [] D -- C:\Program Files (x86)\Common Files\Adobe =>.Adobe
O43 - CFD: 23/12/2017 - [] D -- C:\Program Files (x86)\Common Files\Adobe AIR =>.Adobe Inc.
O43 - CFD: 05/11/2017 - [] D -- C:\Program Files (x86)\Common Files\Atheros =>.Qualcomm Atheros
O43 - CFD: 19/05/2018 - [] D -- C:\Program Files (x86)\Common Files\DESIGNER =>.Designer
O43 - CFD: 04/03/2018 - [] D -- C:\Program Files (x86)\Common Files\InstallShield =>.InstallShield
O43 - CFD: 02/05/2018 - [] D -- C:\Program Files (x86)\Common Files\Intel =>.Intel Corporation
O43 - CFD: 21/05/2018 - [] D -- C:\Program Files (x86)\Common Files\Java =>.Oracle
O43 - CFD: 21/05/2018 - [] D -- C:\Program Files (x86)\Common Files\Oracle =>.Oracle
O43 - CFD: 26/05/2018 - [] D -- C:\Program Files (x86)\Common Files\Steam =>.Steam Games
O43 - CFD: 21/05/2018 - [] D -- C:\Users\Joshua\AppData\Roaming\Adobe =>.Adobe
O43 - CFD: 07/12/2017 - [] D -- C:\Users\Joshua\AppData\Roaming\Adobe-Backup
O43 - CFD: 19/05/2018 - [] D -- C:\Users\Joshua\AppData\Roaming\AndroidTbox
O43 - CFD: 08/04/2018 - [] D -- C:\Users\Joshua\AppData\Roaming\BatteryBar
O43 - CFD: 04/11/2017 - [] D -- C:\Users\Joshua\AppData\Roaming\Canneverbe Limited =>.Canneverbe Limited
O43 - CFD: 25/02/2018 - [] D -- C:\Users\Joshua\AppData\Roaming\CASIO =>.CASIO
O43 - CFD: 05/03/2018 - [] D -- C:\Users\Joshua\AppData\Roaming\DAEMON Tools Lite =>.DAEMON Tools
O43 - CFD: 28/03/2018 - [] D -- C:\Users\Joshua\AppData\Roaming\DarknessII
O43 - CFD: 27/04/2018 - [] D -- C:\Users\Joshua\AppData\Roaming\Deezer =>.Deezer
O43 - CFD: 03/05/2018 - [] D -- C:\Users\Joshua\AppData\Roaming\discord =>.GitHub
O43 - CFD: 23/12/2017 - [] D -- C:\Users\Joshua\AppData\Roaming\edu.media.mit.Scratch2Editor =>.MIT Media Lab
O43 - CFD: 31/03/2018 - [] D -- C:\Users\Joshua\AppData\Roaming\Far Cry 2 - Fortunes Edition_unistall
O43 - CFD: 23/04/2018 - [] D -- C:\Users\Joshua\AppData\Roaming\FileZilla =>.FileZilla
O43 - CFD: 04/11/2017 - [] D -- C:\Users\Joshua\AppData\Roaming\Foxit AgentInformation =>.Foxit Corporation
O43 - CFD: 19/02/2018 - [] D -- C:\Users\Joshua\AppData\Roaming\Foxit Software =>.Foxit Software
O43 - CFD: 13/04/2018 - [] D -- C:\Users\Joshua\AppData\Roaming\Fritzing =>.Fritzing
O43 - CFD: 25/04/2018 - [] D -- C:\Users\Joshua\AppData\Roaming\Google =>.Google
O43 - CFD: 08/03/2018 - [] D -- C:\Users\Joshua\AppData\Roaming\Highresolution Enterprises =>.Highresolution Enterprises
O43 - CFD: 23/12/2017 - [] D -- C:\Users\Joshua\AppData\Roaming\Macromedia =>.Macromedia
O43 - CFD: 18/12/2017 - [] D -- C:\Users\Joshua\AppData\Roaming\MatchWare =>.MatchWare
O43 - CFD: 31/03/2018 - [] D -- C:\Users\Joshua\AppData\Roaming\MobileBackupForeverIni
O43 - CFD: 25/05/2018 - [] D -- C:\Users\Joshua\AppData\Roaming\Molotov =>.Molotov
O43 - CFD: 13/05/2018 - [] D -- C:\Users\Joshua\AppData\Roaming\MouseServer =>.Necta Co
O43 - CFD: 06/01/2018 - [] D -- C:\Users\Joshua\AppData\Roaming\Mozilla =>.Mozilla Corporation
O43 - CFD: 19/02/2018 - [0] D -- C:\Users\Joshua\AppData\Roaming\MPC-HC =>.MPC-HC Team
O43 - CFD: 01/05/2018 - [] D -- C:\Users\Joshua\AppData\Roaming\Notepad++ =>.Don Ho
O43 - CFD: 07/12/2017 - [] D -- C:\Users\Joshua\AppData\Roaming\OpenOffice =>.SourceForge
O43 - CFD: 31/01/2018 - [] D -- C:\Users\Joshua\AppData\Roaming\PDF Architect 5 =>.pdfforge GmbH
O43 - CFD: 23/03/2018 - [] D -- C:\Users\Joshua\AppData\Roaming\Scilab
O43 - CFD: 23/12/2017 - [] D -- C:\Users\Joshua\AppData\Roaming\Skype =>.Skype
O43 - CFD: 29/01/2018 - [] D -- C:\Users\Joshua\AppData\Roaming\Smallpdf
O43 - CFD: 10/12/2017 - [] D -- C:\Users\Joshua\AppData\Roaming\SmartSteamEmu =>.SmartSteam
O43 - CFD: 31/01/2018 - [] D -- C:\Users\Joshua\AppData\Roaming\Soda PDF Desktop =>.Lulu Software
O43 - CFD: 22/12/2017 - [] D -- C:\Users\Joshua\AppData\Roaming\Sublime Text 3
O43 - CFD: 04/11/2017 - [] D -- C:\Users\Joshua\AppData\Roaming\Sun =>.Oracle
O43 - CFD: 19/02/2018 - [] D -- C:\Users\Joshua\AppData\Roaming\TeamViewer =>.TeamViewer GmbH
O43 - CFD: 25/04/2018 - [] D -- C:\Users\Joshua\AppData\Roaming\Visual Studio Setup =>.Pinnacle Systems, Inc.
O43 - CFD: 04/04/2018 - [] D -- C:\Users\Joshua\AppData\Roaming\vstelemetry =>.Legitimate
O43 - CFD: 31/03/2018 - [] D -- C:\Users\Joshua\AppData\Roaming\Wondershare =>.Wondershare
O43 - CFD: 18/12/2017 - [] D -- C:\Users\Joshua\AppData\Roaming\yWorks =>.yWorks
O43 - CFD: 27/05/2018 - [] D -- C:\Users\Joshua\AppData\Roaming\ZHP =>.Nicolas Coolman
O43 - CFD: 07/12/2017 - [] D -- C:\Users\Joshua\AppData\Roaming\ྶAdobe
O43 - CFD: 11/04/2018 - [] D -- C:\Users\Joshua\AppData\Local\.IdentityService
O43 - CFD: 24/05/2018 - [] D -- C:\Users\Joshua\AppData\Local\Adobe =>.Adobe
O43 - CFD: 07/12/2017 - [] D -- C:\Users\Joshua\AppData\Local\Adobe-Backup
O43 - CFD: 25/05/2018 - [] D -- C:\Users\Joshua\AppData\Local\Arduino15 =>.Arduino
O43 - CFD: 19/05/2018 - [] D -- C:\Users\Joshua\AppData\Local\Avg =>.AVG Software
O43 - CFD: 27/03/2018 - [] D -- C:\Users\Joshua\AppData\Local\AvgSetupLog =>.AVG Software
O43 - CFD: 04/11/2017 - [] D -- C:\Users\Joshua\AppData\Local\CEF =>.CEF
O43 - CFD: 26/05/2018 - [] D -- C:\Users\Joshua\AppData\Local\D3DSCache
O43 - CFD: 11/11/2017 - [0] D -- C:\Users\Joshua\AppData\Local\DBG =>.DBG
O43 - CFD: 02/05/2018 - [] D -- C:\Users\Joshua\AppData\Local\Discord =>.GitHub
O43 - CFD: 05/03/2018 - [] D -- C:\Users\Joshua\AppData\Local\Disc_Soft_Ltd =>.Disc Soft Ltd
O43 - CFD: 22/01/2018 - [] D -- C:\Users\Joshua\AppData\Local\FileZilla =>.FileZilla
O43 - CFD: 01/04/2018 - [] D -- C:\Users\Joshua\AppData\Local\FonePaw =>.FonePaw
O43 - CFD: 25/04/2018 - [] D -- C:\Users\Joshua\AppData\Local\Google =>.Google
O43 - CFD: 18/12/2017 - [] D -- C:\Users\Joshua\AppData\Local\MatchWare =>.MatchWare
O43 - CFD: 13/04/2018 - [] D -- C:\Users\Joshua\AppData\Local\Molotov =>.Molotov
O43 - CFD: 08/11/2017 - [] D -- C:\Users\Joshua\AppData\Local\Mozilla =>.Mozilla Corporation
O43 - CFD: 17/01/2018 - [] D -- C:\Users\Joshua\AppData\Local\mpress =>.MPress
O43 - CFD: 31/03/2018 - [] D -- C:\Users\Joshua\AppData\Local\My Games =>.My Games
O43 - CFD: 27/11/2017 - [0] D -- C:\Users\Joshua\AppData\Local\Notepad++ =>.Don Ho
O43 - CFD: 04/04/2018 - [] D -- C:\Users\Joshua\AppData\Local\Nox =>.FFmpeg Project
O43 - CFD: 31/01/2018 - [0] D -- C:\Users\Joshua\AppData\Local\PDFCreator =>.Philip Chinery
O43 - CFD: 21/05/2018 - [] D -- C:\Users\Joshua\AppData\Local\PlaceholderTileLogoFolder
O43 - CFD: 06/04/2018 - [] D -- C:\Users\Joshua\AppData\Local\PunkBuster =>.PunkBuster Games
O43 - CFD: 29/03/2018 - [] D -- C:\Users\Joshua\AppData\Local\RageSimulator3
O43 - CFD: 30/11/2017 - [] D -- C:\Users\Joshua\AppData\Local\Rage_Simulator
O43 - CFD: 05/11/2017 - [] D -- C:\Users\Joshua\AppData\Local\Recovery =>.Recovery Labs
O43 - CFD: 04/04/2018 - [] D -- C:\Users\Joshua\AppData\Local\ServiceHub
O43 - CFD: 29/01/2018 - [] D -- C:\Users\Joshua\AppData\Local\Smallpdf
O43 - CFD: 13/04/2018 - [] D -- C:\Users\Joshua\AppData\Local\SquirrelTemp =>.Squirrels
O43 - CFD: 08/01/2018 - [] D -- C:\Users\Joshua\AppData\Local\Steam =>.Steam Games
O43 - CFD: 21/03/2018 - [] D -- C:\Users\Joshua\AppData\Local\Sublime Text 3
O43 - CFD: 06/12/2017 - [] D -- C:\Users\Joshua\AppData\Local\SUPERHOT_Sp_z_o.o
O43 - CFD: 19/02/2018 - [] D -- C:\Users\Joshua\AppData\Local\TeamViewer =>.TeamViewer GmbH
O43 - CFD: 29/03/2018 - [] D -- C:\Users\Joshua\AppData\Local\UnrealEngine =>.Unreal Software
O43 - CFD: 31/03/2018 - [] D -- C:\Users\Joshua\AppData\Local\WonderShare =>.Wondershare
O43 - CFD: 27/05/2018 - [] D -- C:\Users\Joshua\AppData\Local\ZHP =>.Nicolas Coolman
O43 - CFD: 10/05/2018 - [] D -- C:\Users\Joshua\AppData\Local\__SHARED
O43 - CFD: 02/04/2018 - [] D -- C:\Users\Joshua\AppData\Local\{482B7E77-6C83-12CF-011B-37272573CBBF}
O43 - CFD: 14/04/2018 - [] D -- C:\Users\Joshua\AppData\Local\Programs\deezer-desktop =>.Deezer
O43 - CFD: 06/12/2017 - [] D -- C:\Users\Joshua\AppData\LocalLow\Adobe =>.Adobe
O43 - CFD: 10/12/2017 - [] D -- C:\Users\Joshua\AppData\LocalLow\AGS
O43 - CFD: 09/05/2018 - [0] D -- C:\Users\Joshua\AppData\LocalLow\Mozilla =>.Mozilla Corporation
O43 - CFD: 23/01/2018 - [] D -- C:\Users\Joshua\AppData\LocalLow\Oracle =>.Oracle
O43 - CFD: 06/12/2017 - [] D -- C:\Users\Joshua\AppData\LocalLow\SteelRaven7
O43 - CFD: 23/01/2018 - [] D -- C:\Users\Joshua\AppData\LocalLow\Sun =>.Oracle
O43 - CFD: 06/12/2017 - [] D -- C:\Users\Joshua\AppData\LocalLow\SUPERHOT_Team
O43 - CFD: 16/04/2018 - [] D -- C:\Users\Joshua\Desktop\allemand
O43 - CFD: 01/03/2018 - [] D -- C:\Users\Joshua\Desktop\Cassou
O43 - CFD: 21/05/2018 - [] D -- C:\Users\Joshua\Desktop\cs6
O43 - CFD: 14/03/2018 - [] D -- C:\Users\Joshua\Desktop\fear the walking dead
O43 - CFD: 21/03/2018 - [] D -- C:\Users\Joshua\Desktop\hello world 2.0
O43 - CFD: 13/04/2018 - [] D -- C:\Users\Joshua\Desktop\hello_world
O43 - CFD: 21/03/2018 - [] D -- C:\Users\Joshua\Desktop\hello_world1
O43 - CFD: 13/04/2018 - [] D -- C:\Users\Joshua\Desktop\josh
O43 - CFD: 25/05/2018 - [] D -- C:\Users\Joshua\Desktop\prgrm_ensemble_moi_v2
O43 - CFD: 30/11/2017 - [] D -- C:\Users\Joshua\Desktop\Rage Simulator
O43 - CFD: 17/01/2018 - [] D -- C:\Users\Joshua\Desktop\sketch_jan15a
O43 - CFD: 05/02/2018 - [] D -- C:\Users\Joshua\Desktop\sketch_jan29a
O43 - CFD: 31/01/2018 - [] D -- C:\Users\Joshua\Desktop\sketch_jan31a
O43 - CFD: 22/11/2017 - [] D -- C:\Users\Joshua\Desktop\WebServer
O43 - CFD: 09/05/2018 - [] RD -- C:\Users\Joshua\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools =>.Administrative Tools
O43 - CFD: 02/05/2018 - [] D -- C:\Users\Joshua\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Applications Chrome =>.Google Inc.
O43 - CFD: 02/05/2018 - [] D -- C:\Users\Joshua\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Applications Chrome Canary
O43 - CFD: 02/05/2018 - [] D -- C:\Users\Joshua\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discord Inc =>.Discord Inc
O43 - CFD: 02/05/2018 - [] D -- C:\Users\Joshua\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Molotov =>.Molotov
O43 - CFD: 05/02/2018 - [0] D -- C:\Users\Joshua\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Smallpdf
O43 - CFD: 02/05/2018 - [] -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\Avg =>.AVG Software
O43 - CFD: 02/05/2018 - [] -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\AvgSetupLog =>.AVG Software
O43 - CFD: 14/05/2018 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\DBG =>.DBG

---\\ ShellIconOverlayIdentifiers (SIOI) (1) - 1s
O106 - SIOI: [EnhancedStorageShell] - {D9144DCD-E998-4ECA-AB6A-DCD83CCBA16D}. (.Microsoft Corporation - DLL d’extension d’environnement de stockage.) -- C:\Windows\System32\EhStorShell.dll =>.Microsoft Corporation

---\\ RACCOURCIS DES MENUS CONCEPTUELS (SCMH) (30) - 5s
O108 - CMH1: 7-Zip [64Bits] - {23170F69-40C1-278A-1000-000100020000} . (.Igor Pavlov - 7-Zip Shell Extension.) -- C:\Program Files\7-Zip\7-zip.dll =>.Igor Pavlov
O108 - CMH1: ANotepad++64 [64Bits] - {B298D29A-A6ED-11DE-BA8C-A68E55D89593} . (. - ShellHandler for Notepad++ (64 bit).) -- C:\Program Files (x86)\Notepad++\NppShell_06.dll =>.Notepad++®
O108 - CMH1: EPP [64Bits] - {09A47860-11B0-4DA5-AFA5-26D86198A780} . (.Microsoft Corporation - Extension Microsoft Security Client Shell.) -- C:\Program Files\Windows Defender\shellext.dll =>.Microsoft Windows®
O108 - CMH1: Foxit_ConvertToPDF_Reader [64Bits] - {A94757A0-0226-426F-B4F1-4DF381C630D3} . (.Foxit Software Inc. - ConvertToPDFShellExtension.) -- C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\ConvertToPDFShellExtension_x64.dll =>.Foxit Software Incorporated®
O108 - CMH1: ModernSharing [64Bits] - {e2bf9676-5f8f-435c-97eb-11607a5bedf7} . (.Microsoft Corporation - Extensions de l’interpréteur de commandes p.) -- C:\Windows\System32\ntshrui.dll =>.Microsoft Corporation
O108 - CMH1: Open With [64Bits] - {09799AFB-AD67-11d1-ABCD-00C04FC30936} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll =>.Microsoft Windows®
O108 - CMH1: Open With EncryptionMenu [64Bits] - {A470F8CF-A1E8-4f65-8335-227475AA5C46} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll =>.Microsoft Windows®
O108 - CMH1: Sharing [64Bits] - {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} . (.Microsoft Corporation - Extensions de l’interpréteur de commandes p.) -- C:\Windows\System32\ntshrui.dll =>.Microsoft Corporation
O108 - CMH1: WorkFolders [64Bits] - {E61BF828-5E63-4287-BEF1-60B1A4FDE0E3} . (.Microsoft Corporation - Extension d’environnement de Dossiers de tr.) -- C:\Windows\System32\WorkfoldersShell.dll =>.Microsoft Corporation
O108 - CMH2: OpenContainingFolderMenu [64Bits] - {37ea3a21-7493-4208-a011-7f9ea79ce9f5} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll =>.Microsoft Windows®
O108 - CMH3: CopyAsPathMenu [64Bits] - {f3d06e7c-1e45-4a26-847e-f9fcdee59be0} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll =>.Microsoft Windows®
O108 - CMH3: DaemonShellExtImageLite [64Bits] - {1D1B5D7B-0FC9-452E-902C-12BACD4FBC20} . (.Disc Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files\DAEMON Tools Lite\DTShl64.dll =>.Disc Soft Ltd®
O108 - CMH3: SendTo [64Bits] - {7BA4C740-9E81-11CF-99D3-00AA004AE837} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll =>.Microsoft Windows®
O108 - CMH4: 7-Zip [64Bits] - {23170F69-40C1-278A-1000-000100020000} . (.Igor Pavlov - 7-Zip Shell Extension.) -- C:\Program Files\7-Zip\7-zip.dll =>.Igor Pavlov
O108 - CMH4: EncryptionMenu [64Bits] - {A470F8CF-A1E8-4f65-8335-227475AA5C46} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll =>.Microsoft Windows®
O108 - CMH4: EPP [64Bits] - {09A47860-11B0-4DA5-AFA5-26D86198A780} . (.Microsoft Corporation - Extension Microsoft Security Client Shell.) -- C:\Program Files\Windows Defender\shellext.dll =>.Microsoft Windows®
O108 - CMH4: Sharing [64Bits] - {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} . (.Microsoft Corporation - Extensions de l’interpréteur de commandes p.) -- C:\Windows\System32\ntshrui.dll =>.Microsoft Corporation
O108 - CMH4: WorkFolders [64Bits] - {E61BF828-5E63-4287-BEF1-60B1A4FDE0E3} . (.Microsoft Corporation - Extension d’environnement de Dossiers de tr.) -- C:\Windows\System32\WorkfoldersShell.dll =>.Microsoft Corporation
O108 - CMH5: igfxDTCM [64Bits] - {9B5F5829-A529-4B12-814A-E81BCB8D93FC} . (.Intel Corporation - igfxDTCM Module.) -- C:\WINDOWS\system32\igfxDTCM.dll =>.Intel Corporation
O108 - CMH5: New [64Bits] - {D969A300-E7FF-11d0-A93B-00A0C90F2719} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll =>.Microsoft Windows®
O108 - CMH5: Sharing [64Bits] - {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} . (.Microsoft Corporation - Extensions de l’interpréteur de commandes p.) -- C:\Windows\System32\ntshrui.dll =>.Microsoft Corporation
O108 - CMH5: WorkFolders [64Bits] - {E61BF828-5E63-4287-BEF1-60B1A4FDE0E3} . (.Microsoft Corporation - Extension d’environnement de Dossiers de tr.) -- C:\Windows\System32\WorkfoldersShell.dll =>.Microsoft Corporation
O108 - CMH6: 7-Zip [64Bits] - {23170F69-40C1-278A-1000-000100020000} . (.Igor Pavlov - 7-Zip Shell Extension.) -- C:\Program Files\7-Zip\7-zip.dll =>.Igor Pavlov
O108 - CMH6: Foxit_ConvertToPDF_Reader [64Bits] - {A94757A0-0226-426F-B4F1-4DF381C630D3} . (.Foxit Software Inc. - ConvertToPDFShellExtension.) -- C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\ConvertToPDFShellExtension_x64.dll =>.Foxit Software Incorporated®
O108 - CMH6: Library Location [64Bits] - {3dad6c5d-2167-4cae-9914-f99e41c12cfa} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll =>.Microsoft Windows®
O108 - CMH6: PintoStartScreen [64Bits] - {470C0EBD-5D73-4d58-9CED-E91E22E23282} . (.Microsoft Corporation - Programme de résolution d’applications.) -- C:\Windows\System32\appresolver.dll =>.Microsoft Windows®
O108 - CMH7: DaemonShellExtDriveLite [64Bits] - {C06369D6-E77D-4626-9656-1256312BD576} . (.Disc Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files\DAEMON Tools Lite\DTShl64.dll =>.Disc Soft Ltd®
O108 - CMH7: EnhancedStorageShell [64Bits] - {2854F705-3548-414C-A113-93E27C808C85} . (.Microsoft Corporation - DLL d’extension d’environnement de stockage.) -- C:\Windows\System32\EhStorShell.dll =>.Microsoft Corporation
O108 - CMH7: EPP [64Bits] - {09A47860-11B0-4DA5-AFA5-26D86198A780} . (.Microsoft Corporation - Extension Microsoft Security Client Shell.) -- C:\Program Files\Windows Defender\shellext.dll =>.Microsoft Windows®
O108 - CMH7: Sharing [64Bits] - {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} . (.Microsoft Corporation - Extensions de l’interpréteur de commandes p.) -- C:\Windows\System32\ntshrui.dll =>.Microsoft Corporation

---\\ IMAGE FILE EXECUTION OPTIONS (IFEO) (19) - 25s
O50 - IFEO:C:\Windows\System32\appverif.exe - (.Microsoft Corporation - Application Verifier User Interface Utility.) [CfgOptions\\0] =>.Microsoft Corporation®
O50 - IFEO:C:\Windows\System32\cscript.exe - (.Microsoft Corporation - Microsoft ® Console Based Script Host.) [DisableExceptionChainValidation\\3] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\dllhost.exe - (.Microsoft Corporation - COM Surrogate.) [DisableExceptionChainValidation\\3] =>.Microsoft Windows®
O50 - IFEO:C:\WINDOWS\System32\drvinst.exe - (.Microsoft Corporation - Module d’installation de pilotes.) [DisableExceptionChainValidation\\3] =>.Microsoft Corporation
O50 - IFEO:C:\WINDOWS\System32\ie4uinit.exe - (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) [MitigationOptions\\256] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\ieUnatt.exe - (.Microsoft Corporation - Outil d’installation sans assistance d’IE 7.) [MitigationOptions\\256] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\mmc.exe - (.Microsoft Corporation - Microsoft Management Console.) [DisableExceptionChainValidation\\3] =>.Microsoft Corporation
O50 - IFEO:C:\WINDOWS\System32\MRT.exe - (.Microsoft Corporation - Outil de suppression de logiciels malveilla.) [CFGOptions\\1] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\msfeedssync.exe - (.Microsoft Corporation - Microsoft Feeds Synchronization.) [MitigationOptions\\256] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\mshta.exe - (.Microsoft Corporation - Hôte des applications HTML de Microsoft(R).) [MitigationOptions\\256] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\PresentationHost.exe - (.Microsoft Corporation - Windows Presentation Foundation Host.) [MitigationOptions\\1118481] =>.Microsoft Corporation
O50 - IFEO:C:\WINDOWS\System32\PrintIsolationHost.exe - (.Microsoft Corporation - PrintIsolationHost.) [MitigationOptions\\2097152] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\rundll32.exe - (.Microsoft Corporation - Processus hôte Windows (Rundll32).) [DisableExceptionChainValidation\\3] =>.Microsoft Corporation
O50 - IFEO:C:\WINDOWS\System32\runtimebroker.exe - (.Microsoft Corporation - Runtime Broker.) [MitigationOptions\\4294967296] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\searchprotocolhost.exe - (.Microsoft Corporation - Microsoft Windows Search Protocol Host.) [DisableExceptionChainValidation\\3] =>.Microsoft Corporation
O50 - IFEO:C:\WINDOWS\System32\spoolsv.exe - (.Microsoft Corporation - Application sous-système spouleur.) [MitigationOptions\\2097152] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\svchost.exe - (.Microsoft Corporation - Processus hôte pour les services Windows.) [MinimumStackCommitInBytes\\32768] =>.Microsoft Windows Publisher®
O50 - IFEO:C:\Windows\System32\svchost.exe - (.Microsoft Corporation - Processus hôte pour les services Windows.) [MitigationAuditOptions\\17660905521152] =>.Microsoft Windows Publisher®
O50 - IFEO:C:\Windows\System32\wscript.exe - (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) [DisableExceptionChainValidation\\3] =>.Microsoft Corporation

---\\ LISTE DES PILOTES DU SYSTÈME (77) - 45s
O58 - SDL:2018/04/12 01:33:48 A . (.LSI - LSI 3ware SCSI Storport Driver.) -- C:\WINDOWS\System32\drivers\3ware.sys [107416] =>.Microsoft Windows®
O58 - SDL:2018/04/12 01:33:48 A . (.PMC-Sierra - PMC-Sierra Storport Driver For SPC8x6G SAS.) -- C:\WINDOWS\System32\drivers\adp80xx.sys [1135520] =>.Microsoft Windows®
O58 - SDL:2018/04/12 01:33:48 A . (.Advanced Micro Devices - AHCI 1.3 Device Driver.) -- C:\WINDOWS\System32\drivers\amdsata.sys [83360] =>.Microsoft Windows®
O58 - SDL:2018/04/12 01:33:48 A . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller D.) -- C:\WINDOWS\System32\drivers\amdsbs.sys [259480] =>.Microsoft Windows®
O58 - SDL:2018/04/12 01:33:48 A . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\WINDOWS\System32\drivers\amdxata.sys [27032] =>.Microsoft Windows®
O58 - SDL:2018/04/12 01:33:48 A . (.PMC-Sierra, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\WINDOWS\System32\drivers\arcsas.sys [132000] =>.Microsoft Windows®
O58 - SDL:2016/11/27 19:22:14 A . (.Qualcomm Atheros Communications, Inc. - Qualcomm Atheros Extensible Wireless LAN de.) -- C:\WINDOWS\System32\drivers\athw10x.sys [4320176] =>.Qualcomm Atheros®
O58 - SDL:2018/04/12 01:33:48 A . (. - BCM Function 2 Device Driver.) -- C:\WINDOWS\System32\drivers\bcmfn2.sys [9728] =>.Broadcom Corporation
O58 - SDL:2015/12/17 18:15:28 A . (.Broadcom Corporation. - Broadcom SMBus Controller Driver.) -- C:\WINDOWS\System32\drivers\bcmsmbsp.sys [54552] =>.Broadcom Corporation®
O58 - SDL:2016/11/28 20:45:32 A . (.Qualcomm - Qualcomm BtFilter Driver.) -- C:\WINDOWS\System32\drivers\btfilter.sys [608656] =>.Qualcomm Atheros®
O58 - SDL:2018/04/12 01:33:48 A . (.QLogic Corporation - QLogic Gigabit Ethernet VBD.) -- C:\WINDOWS\System32\drivers\bxvbda.sys [533912] =>.Microsoft Windows®
O58 - SDL:2015/02/06 07:39:20 A . (.www.winchiphead.com - WDM_64 for CH341 serial, by W.ch.) -- C:\WINDOWS\System32\drivers\CH341S64.SYS [59904] =>.www.winchiphead.com
O58 - SDL:2018/04/12 01:33:49 A . (.Chelsio Communications - Chelsio iSCSI Crash Dump Driver.) -- C:\WINDOWS\System32\drivers\cht4dx64.sys [143768] =>.Microsoft Windows®
O58 - SDL:2018/04/12 01:33:49 A . (.Chelsio Communications - Chelsio iSCSI VMiniport Driver.) -- C:\WINDOWS\System32\drivers\cht4sx64.sys [321432] =>.Microsoft Windows®
O58 - SDL:2018/04/12 01:33:49 A . (.Chelsio Communications - VF library for Chelsio ® T5/T6 Chipset.) -- C:\WINDOWS\System32\drivers\cht4vfx.sys [29184] =>.Chelsio Communications
O58 - SDL:2018/04/12 01:33:49 A . (.Chelsio Communications - Virtual Bus Driver for Chelsio ® T5/T6 Chip.) -- C:\WINDOWS\System32\drivers\cht4vx64.sys [1836952] =>.Microsoft Windows®
O58 - SDL:2018/03/05 11:49:27 A . (.Disc Soft Ltd - DAEMON Tools Lite Virtual SCSI Bus Driver.) -- C:\WINDOWS\System32\drivers\dtlitescsibus.sys [30264] =>.Disc Soft Ltd®
O58 - SDL:2018/03/05 11:49:38 A . (.Disc Soft Ltd - DAEMON Tools Lite Virtual USB Bus Driver.) -- C:\WINDOWS\System32\drivers\dtliteusbbus.sys [47672] =>.Disc Soft Ltd®
O58 - SDL:2016/03/22 11:48:26 A . (.ELAN Microelectronics Corp. - ELAN KMDF Driver.) -- C:\WINDOWS\System32\drivers\ETD.sys [484952] =>.ELAN MICROELECTRONICS CORPORATION®
O58 - SDL:2018/04/12 01:33:48 A . (.QLogic Corporation - QLogic 10 GigE VBD.) -- C:\WINDOWS\System32\drivers\evbda.sys [3419032] =>.Microsoft Windows®
O58 - SDL:2017/09/19 12:38:16 A . (.Future Technology Devices International Ltd. - D2XX Driver.) -- C:\WINDOWS\System32\drivers\ftdibus.sys [129448] =>.Future Technology Devices International Ltd®
O58 - SDL:2017/08/24 07:19:12 A . (.Future Technology Devices International Ltd. - D2XX Serial Device Driver.) -- C:\WINDOWS\System32\drivers\ftser2k.sys [89800] =>.Future Technology Devices International Ltd®
O58 - SDL:2018/04/12 01:33:48 A . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Drive.) -- C:\WINDOWS\System32\drivers\HpSAMD.sys [64408] =>.Microsoft Windows®
O58 - SDL:2018/04/12 01:33:45 A . (.Intel(R) Corporation - Intel(R) Serial IO GPIO Controller Driver.) -- C:\WINDOWS\System32\drivers\iagpio.sys [36864] =>.Intel(R) Corporation
O58 - SDL:2018/04/12 01:33:45 A . (.Intel(R) Corporation - Intel(R) Serial IO I2C Driver.) -- C:\WINDOWS\System32\drivers\iai2c.sys [91648] =>.Intel(R) Corporation
O58 - SDL:2015/06/24 09:41:08 A . (.Intel Corporation - GPIO Controller Driver E.) -- C:\WINDOWS\System32\drivers\iaiogpioe.sys [51128] =>.WDKTestCert sys_dpebuild,130674149657513416®
O58 - SDL:2018/04/12 01:33:45 A . (.Intel Corporation - Intel(R) Serial IO GPIO Driver v2.) -- C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2.sys [79360] =>.Intel Corporation
O58 - SDL:2018/04/12 01:33:45 A . (.Intel Corporation - Intel(R) Serial IO GPIO Driver v2.) -- C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_BXT_P.sys [88576] =>.Intel Corporation
O58 - SDL:2018/04/12 01:33:45 A . (.Intel Corporation - Intel(R) Serial IO I2C Driver v2.) -- C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys [171520] =>.Intel Corporation
O58 - SDL:2018/04/12 01:33:45 A . (.Intel Corporation - Intel(R) Serial IO I2C Driver v2.) -- C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_BXT_P.sys [174592] =>.Intel Corporation
O58 - SDL:2018/04/12 01:33:48 A . (.Intel Corporation - Intel(R) Serial IO GPIO Controller Driver.) -- C:\WINDOWS\System32\drivers\iaLPSSi_GPIO.sys [38128] =>.Intel Corporation - Client Components Group®
O58 - SDL:2018/04/12 01:33:45 A . (.Intel Corporation - Intel(R) Serial IO I2C Controller Driver.) -- C:\WINDOWS\System32\drivers\iaLPSSi_I2C.sys [113152] =>.Intel Corporation
O58 - SDL:2018/04/12 01:33:49 A . (.Intel Corporation - Intel(R) Rapid Storage Technology driver (i.) -- C:\WINDOWS\System32\drivers\iaStorAVC.sys [885144] =>.Microsoft Windows®
O58 - SDL:2018/04/12 01:33:49 A . (.Intel Corporation - Intel Matrix Storage Manager driver - x64.) -- C:\WINDOWS\System32\drivers\iaStorV.sys [412064] =>.Microsoft Windows®
O58 - SDL:2018/04/12 01:33:49 A . (.Mellanox - InfiniBand Fabric Bus Driver.) -- C:\WINDOWS\System32\drivers\ibbus.sys [526232] =>.Microsoft Windows®
O58 - SDL:2015/10/07 12:29:10 A . (.Intel Corporation - Intel Graphics Kernel Mode Driver.) -- C:\WINDOWS\System32\drivers\igdkmd64.sys [3797424] =>.Intel Corporation - pGFX®
O58 - SDL:2015/09/17 11:42:04 A . (.Intel(R) Corporation - Intel(R) Display Audio Driver.) -- C:\WINDOWS\System32\drivers\IntcDAud.sys [463112] =>.Intel Corporation - Client Components Group®
O58 - SDL:2018/04/12 01:33:48 A . (.Avago Technologies - Avago SAS Gen3.5 Driver (StorPort).) -- C:\WINDOWS\System32\drivers\ItSas35i.sys [145816] =>.Microsoft Windows®
O58 - SDL:2015/07/20 21:45:04 A . (.Intel Corporation - Intel® WiDi Solution.) -- C:\WINDOWS\System32\drivers\iwdbus.sys [38976] =>.Intel(R) Wireless Display®
O58 - SDL:2018/04/12 01:33:48 A . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas.sys [108952] =>.Microsoft Windows®
O58 - SDL:2018/04/12 01:33:48 A . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas2i.sys [124312] =>.Microsoft Windows®
O58 - SDL:2018/04/12 01:33:48 A . (.Avago Technologies - Avago SAS Gen3 Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas3i.sys [128408] =>.Microsoft Windows®
O58 - SDL:2018/04/12 01:33:48 A . (.LSI Corporation - LSI SSS PCIe/Flash Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sss.sys [82848] =>.Microsoft Windows®
O58 - SDL:2018/04/12 01:33:48 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\megasas.sys [59800] =>.Microsoft Windows®
O58 - SDL:2018/04/12 01:33:48 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\MegaSas2i.sys [75160] =>.Microsoft Windows®
O58 - SDL:2018/04/12 01:33:48 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\megasas35i.sys [82328] =>.Microsoft Windows®
O58 - SDL:2018/04/12 01:33:48 A . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\WINDOWS\System32\drivers\megasr.sys [575896] =>.Microsoft Windows®
O58 - SDL:2018/04/12 01:33:49 A . (.Mellanox - MLX4 Bus Driver.) -- C:\WINDOWS\System32\drivers\mlx4_bus.sys [842648] =>.Microsoft Windows®
O58 - SDL:2018/04/12 01:33:48 A . (.Marvell Semiconductor, Inc. - Marvell Flash Controller Driver.) -- C:\WINDOWS\System32\drivers\mvumis.sys [63904] =>.Microsoft Windows®
O58 - SDL:2018/04/12 01:33:49 A . (.Mellanox - NetworkDirect Support Filter Driver.) -- C:\WINDOWS\System32\drivers\ndfltr.sys [108952] =>.Microsoft Windows®
O58 - SDL:2018/04/12 01:33:48 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\WINDOWS\System32\drivers\nvraid.sys [150424] =>.Microsoft Windows®
O58 - SDL:2018/04/12 01:33:48 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\WINDOWS\System32\drivers\nvstor.sys [166304] =>.Microsoft Windows®
O58 - SDL:2018/04/12 01:33:49 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\percsas2i.sys [58776] =>.Microsoft Windows®
O58 - SDL:2018/04/12 01:33:49 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\percsas3i.sys [61848] =>.Microsoft Windows®
O58 - SDL:2018/01/25 20:32:38 A . (.Realtek - Realtek 8101E/8168/8169 NDIS 6.40 64-bit Dr.) -- C:\WINDOWS\System32\drivers\rt640x64.sys [1026896] =>.Realtek Semiconductor Corp.®
O58 - SDL:2018/04/12 01:33:53 RA . (.Realtek - Realtek PCIe GBE Family Controller Flight.) -- C:\WINDOWS\System32\drivers\rteth.sys [65536] =>.Realtek
O58 - SDL:2017/06/29 19:52:00 A . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function D.) -- C:\WINDOWS\System32\drivers\RTKVHD64.sys [5826560] =>.Realtek Semiconductor Corp.®
O58 - SDL:2017/04/20 04:04:59 A . (.Realtek Semiconductor Corp. - Realtek Pcie CardReader Driver for 2K/XP/Vi.) -- C:\WINDOWS\System32\drivers\RtsBaStor.sys [338400] =>.Realtek Semiconductor Corp.®
O58 - SDL:2017/04/14 04:12:58 A . (.Realtek Semiconductor Corp. - Realtek Pcie CardReader Driver for 2K/XP/Vi.) -- C:\WINDOWS\System32\drivers\RtsP2Stor.sys [329184] =>.Realtek Semiconductor Corp.®
O58 - SDL:2017/06/26 10:16:27 A . (.Realsil Semiconductor Corporation - RTS PCIE READER Driver.) -- C:\WINDOWS\System32\drivers\RtsPer.sys [783808] =>.Realtek Semiconductor Corp.®
O58 - SDL:2017/04/19 04:01:20 A . (.Realtek Semiconductor Corp. - Realtek Pcie CardReader Driver for 2K/XP/Vi.) -- C:\WINDOWS\System32\drivers\RtsPStor.sys [400352] =>.Realtek Semiconductor Corp.®
O58 - SDL:2017/04/27 08:02:56 A . (.Realsil Semiconductor Corporation - RTS USB READER Driver.) -- C:\WINDOWS\System32\drivers\RtsUer.sys [420832] =>.Realtek Semiconductor Corp.®
O58 - SDL:2018/04/12 01:33:49 A . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\WINDOWS\System32\drivers\sisraid2.sys [44952] =>.Microsoft Windows®
O58 - SDL:2018/04/12 01:33:49 A . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\WINDOWS\System32\drivers\sisraid4.sys [81816] =>.Microsoft Windows®
O58 - SDL:2017/05/18 23:17:28 A . (.Samsung Electronics Co., Ltd. - SAMSUNG USB Composite Device Driver.) -- C:\WINDOWS\System32\drivers\ssudbus.sys [131984] =>.Samsung Electronics Co., Ltd.®
O58 - SDL:2017/05/18 23:17:30 A . (.Samsung Electronics Co., Ltd. - SAMSUNG Android Modem Device Driver.) -- C:\WINDOWS\System32\drivers\ssudmdm.sys [166288] =>.Samsung Electronics Co., Ltd.®
O58 - SDL:2018/04/12 01:33:49 A . (.Promise Technology, Inc. - Promise SuperTrak EX Series Driver for Wind.) -- C:\WINDOWS\System32\drivers\stexstor.sys [31128] =>.Microsoft Windows®
O58 - SDL:2015/12/02 02:13:00 A . (.Intel Corporation - Intel(R) Trusted Execution Engine Interface.) -- C:\WINDOWS\System32\drivers\TXEIx64.sys [146200] =>.Intel Corporation - Embedded Subsystems and IP Blocks Group®
O58 - SDL:2016/07/15 21:10:44 A . (.MBB - USB Modem/Serial Device Driver.) -- C:\WINDOWS\System32\drivers\usb2ser.sys [151184] =>.NGO®
O58 - SDL:2018/04/12 01:34:14 A . (...) -- C:\WINDOWS\System32\drivers\UsbPmApi.sys [39936]
O58 - SDL:2018/02/26 17:45:32 A . (.Oracle Corporation - VirtualBox NDIS 6.0 Host-Only Network Adapt.) -- C:\WINDOWS\System32\drivers\VBoxNetAdp6.sys [203328] =>.Oracle Corporation®
O58 - SDL:2018/02/26 17:45:40 A . (.Oracle Corporation - VirtualBox NDIS 6.0 Lightweight Filter Driv.) -- C:\WINDOWS\System32\drivers\VBoxNetLwf.sys [213632] =>.Oracle Corporation®
O58 - SDL:2018/02/26 17:45:32 A . (.Oracle Corporation - VirtualBox USB Driver.) -- C:\WINDOWS\System32\drivers\VBoxUSB.sys [146624] =>.Oracle Corporation®
O58 - SDL:2018/04/12 01:33:49 A . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\WINDOWS\System32\drivers\vsmraid.sys [166808] =>.Microsoft Windows®
O58 - SDL:2018/04/12 01:33:49 A . (.VIA Corporation - VIA StorX RAID Controller Driver.) -- C:\WINDOWS\System32\drivers\VSTXRAID.SYS [305560] =>.Microsoft Windows®
O58 - SDL:2018/04/12 01:33:49 A . (.Mellanox - Kernel WinMad.) -- C:\WINDOWS\System32\drivers\winmad.sys [32152] =>.Microsoft Windows®
O58 - SDL:2018/04/12 01:33:49 A . (.Mellanox - Kernel WinVerbs.) -- C:\WINDOWS\System32\drivers\winverbs.sys [64920] =>.Microsoft Windows®

---\\ ASSOCIATION Shell Spawning (10) - 2s
O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %* =>.Default.Value
O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe =>.Microsoft Corporation
O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %* =>.Default.Value
O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %* =>.Default.Value
O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Ob.) -- C:\Windows\System32\eventvwr.exe =>.Microsoft Corporation
O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %* =>.Default.Value
O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (...) -- C:\Windows\System32\WScript.exe "%1" %* =>.Default.Value
O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe =>.Microsoft Corporation
O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S =>.Default.Value

---\\ MENU DE DÉMARRAGE INTERNET (12) - 0s
O68 - StartMenuInternet: [64Bits][HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O68 - StartMenuInternet: [64Bits][HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc®
O68 - StartMenuInternet: [64Bits][HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O68 - StartMenuInternet: [64Bits][HKLM\..\InstallInfo\ShowIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe =>.Mozilla Corporation
O68 - StartMenuInternet: [64Bits][HKLM\..\InstallInfo\ShowIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc.
O68 - StartMenuInternet: [64Bits][HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation
O68 - StartMenuInternet: [64Bits][HKLM\..\InstallInfo\ReinstallCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe =>.Mozilla Corporation
O68 - StartMenuInternet: [64Bits][HKLM\..\InstallInfo\ReinstallCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc.
O68 - StartMenuInternet: [64Bits][HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation
O68 - StartMenuInternet: [64Bits][HKLM\..\InstallInfo\HideIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe =>.Mozilla Corporation
O68 - StartMenuInternet: [64Bits][HKLM\..\InstallInfo\HideIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc.
O68 - StartMenuInternet: [64Bits][HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation

---\\ RECHERCHE D'INFECTION SUR LES NAVIGATEURS (2) - 13s
O69 - SBI: SearchScopes [HKCU] [64Bits]{0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (Bing) - http://www.bing.com/ =>.Bing.com
O69 - SBI: SearchScopes [HKLM] [64Bits]{0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (@ieframe.dll,-12512) - http://www.bing.com/ =>.Bing.com

---\\ ÉNUMÈRE LES SERVICES DÉMARRÉS PAR Svchost (49) - 3s
O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\WINDOWS\System32\certprop.dll [188928] =>.Microsoft Corporation
O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [188928] =>.Microsoft Corporation
O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\System32\srvsvc.dll [271360] =>.Microsoft Corporation
O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\System32\gpsvc.dll [1267712] =>.Microsoft Corporation
O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\IKEEXT.DLL [990208] =>.Microsoft Corporation
O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur u.) -- C:\Windows\System32\iphlpsvc.dll [786432] =>.Microsoft Corporation
O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d’ouverture de session secon.) -- C:\Windows\System32\seclogon.dll [30720] =>.Microsoft Corporation
O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\System32\iscsiexe.dll [150528] =>.Microsoft Corporation
O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll [109568] =>.Microsoft Corporation
O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\System32\schedsvc.dll [889344] =>.Microsoft Corporation
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll [224256] =>.Microsoft Corporation
O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll [394240] =>.Microsoft Corporation
O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à.) -- C:\Windows\System32\SessEnv.dll [397312] =>.Microsoft Corporation
O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll [119808] =>.Microsoft Corporation
O83 - Search Svchost Services: InstallService (InstallService) . (.Microsoft Corporation - InstallService.) -- C:\Windows\System32\InstallService.dll [1485312] =>.Microsoft Corporation
O83 - Search Svchost Services: LxpSvc (LxpSvc) . (.Microsoft Corporation - Fournit une prise en charge de l'infrastruc.) -- C:\Windows\System32\LanguageOverlayServer.dll [199680] =>.Microsoft Corporation
O83 - Search Svchost Services: shpamsvc (shpamsvc) . (.Microsoft Corporation - SharedPC.AccountManager.) -- C:\Windows\System32\Windows.SharedPC.AccountManager.dll [195584] =>.Microsoft Corporation
O83 - Search Svchost Services: PushToInstall (PushToInstall) . (.Microsoft Corporation - PushToInstall.) -- C:\Windows\System32\PushToInstall.dll [262144] =>.Microsoft Corporation
O83 - Search Svchost Services: XblGameSave (XblGameSave) . (.Microsoft Corporation - Xbox Live Game Save Service.) -- C:\Windows\System32\XblGameSave.dll [1308672] =>.Microsoft Corporation
O83 - Search Svchost Services: NcaSvc (NcaSvc) . (.Microsoft Corporation - Service Assistant Connectivité réseau Micro.) -- C:\Windows\System32\NcaSvc.dll [167936] =>.Microsoft Corporation
O83 - Search Svchost Services: DmEnrollmentSvc (DmEnrollmentSvc) . (.Microsoft Corporation - DLL Windows Management Service.) -- C:\Windows\System32\Windows.Internal.Management.dll [824320] =>.Microsoft Corporation
O83 - Search Svchost Services: XblAuthManager (XblAuthManager) . (.Microsoft Corporation - Xbox Live Auth Manager.) -- C:\Windows\System32\XblAuthManager.dll [1115648] =>.Microsoft Corporation
O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\Windows\System32\bdesvc.dll [402944] =>.Microsoft Corporation
O83 - Search Svchost Services: NaturalAuthentication (NaturalAuthentication) . (.Microsoft Corporation - Service d’authentification naturelle.) -- C:\Windows\System32\NaturalAuth.dll [824832] =>.Microsoft Corporation
O83 - Search Svchost Services: NetSetupSvc (NetSetupSvc) . (.Microsoft Corporation - Service Configuration du réseau.) -- C:\Windows\System32\NetSetupSvc.dll [335360] =>.Microsoft Corporation
O83 - Search Svchost Services: wlidsvc (wlidsvc) . (.Microsoft Corporation - Service de compte Microsoft®.) -- C:\Windows\System32\wlidsvc.dll [2248192] =>.Microsoft Corporation
O83 - Search Svchost Services: DsmSvc (DsmSvc) . (.Microsoft Corporation - Gestionnaire d’installation de périphérique.) -- C:\Windows\System32\DeviceSetupManager.dll [235008] =>.Microsoft Corporation
O83 - Search Svchost Services: UserManager (UserManager) . (.Microsoft Corporation - UserMgr.) -- C:\Windows\System32\usermgr.dll [1027584] =>.Microsoft Corporation
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\Windows\System32\themeservice.dll [69632] =>.Microsoft Corporation
O83 - Search Svchost Services: XboxGipSvc (XboxGipSvc) . (.Microsoft Corporation - Xbox Gip Management Service.) -- C:\Windows\System32\XboxGipSvc.dll [58880] =>.Microsoft Corporation
O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll [166912] =>.Microsoft Corporation
O83 - Search Svchost Services: TokenBroker (TokenBroker) . (.Microsoft Corporation - Broker à jetons.) -- C:\Windows\System32\TokenBroker.dll [1395200] =>.Microsoft Corporation
O83 - Search Svchost Services: lfsvc (lfsvc) . (.Microsoft Corporation - Service de géolocalisation.) -- C:\Windows\System32\lfsvc.dll [44544] =>.Microsoft Corporation
O83 - Search Svchost Services: Irmon (Irmon) . (.Microsoft Corporation - Moniteur infrarouge.) -- C:\Windows\System32\irmon.dll [24576] =>.Microsoft Corporation
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’.) -- C:\Windows\System32\rasauto.dll [104960] =>.Microsoft Corporation
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire des connexions d’accès à dista.) -- C:\Windows\System32\rasmans.dll [932352] =>.Microsoft Corporation
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll [497664] =>.Microsoft Corporation
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements systèm.) -- C:\Windows\System32\Sens.dll [73216] =>.Microsoft Corporation
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l’application d’assistance à.) -- C:\Windows\System32\ipnathlp.dll [604672] =>.Microsoft Corporation
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM.) -- C:\Windows\System32\tapisrv.dll [308224] =>.Microsoft Corporation
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Up.) -- C:\Windows\System32\wuaueng.dll [2902528] =>.Microsoft Corporation
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière.) -- C:\Windows\System32\qmgr.dll [1374208] =>.Microsoft Corporation
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [613376] =>.Microsoft Corporation
O83 - Search Svchost Services: dmwappushservice (dmwappushservice) . (.Microsoft Corporation - dmwappushsvc.) -- C:\Windows\System32\dmwappushsvc.dll [57856] =>.Microsoft Corporation
O83 - Search Svchost Services: wisvc (wisvc) . (.Microsoft Corporation - Paramètres de vol.) -- C:\Windows\System32\flightsettings.dll [858624] =>.Microsoft Corporation
O83 - Search Svchost Services: WpnService (WpnService) . (.Microsoft Corporation - Service du système de notifications Push Wi.) -- C:\Windows\System32\WpnService.dll [280576] =>.Microsoft Corporation
O83 - Search Svchost Services: XboxNetApiSvc (XboxNetApiSvc) . (.Microsoft Corporation - Xbox Live Networking Service.) -- C:\Windows\System32\XboxNetApiSvc.dll [1148928] =>.Microsoft Corporation
O83 - Search Svchost Services: UsoSvc (UsoSvc) . (.Microsoft Corporation - Mettre à jour la session Orchestrator Core.) -- C:\Windows\System32\usocore.dll [1371648] =>.Microsoft Corporation
O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\System32\browser.dll [133632] =>.Microsoft Corporation

---\\ LISTE DES EXCEPTIONS DU PAREFEU WINDOWS (18) - 30s
O87 - FAEL: "{CEE643B3-0FC6-4E28-A369-3E3EB50DB9D4}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\Bignox\BigNoxVM\RT\NoxVMHandle.exe (.not file.) =>.SUP.Orphan
O87 - FAEL: "{22B9D8FC-85FD-4247-974A-705B86B4CCD2}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\Nox\bin\Nox.exe (.not file.) =>.SUP.Orphan
O87 - FAEL: "UDP Query User{E78C92F2-3B1D-421D-A62C-E58591304B9E}D:\jeux\unrealtournament\system\unrealtournament.exe" [In-None-P17-TRUE] .(...) -- D:\jeux\unrealtournament\system\unrealtournament.exe (.not file.) =>.SUP.Orphan
O87 - FAEL: "TCP Query User{9A5EF743-FDD3-47DB-994F-E2C25E5CCABF}D:\jeux\unrealtournament\system\unrealtournament.exe" [In-None-P6-TRUE] .(...) -- D:\jeux\unrealtournament\system\unrealtournament.exe (.not file.) =>.SUP.Orphan
O87 - FAEL: "{20F71D04-3E03-4981-B022-16557D59D8A5}" [In-None-P17-TRUE] .(...) -- D:\jeux\Steam\steamapps\common\Broforce The Expendables Missions\Expendabros.exe (.not file.) =>.Steam Games
O87 - FAEL: "{5254DF66-0CB8-4435-8434-FF0AA2B13EED}" [In-None-P6-TRUE] .(...) -- D:\jeux\Steam\steamapps\common\Broforce The Expendables Missions\Expendabros.exe (.not file.) =>.Steam Games
O87 - FAEL: "UDP Query User{30508688-C1B0-4D5B-9CBD-0973AF676BE6}D:\jeux\badass hero\badass.hero.v9\skidrowgamesreloaded.com\bh.exe" [In-None-P17-TRUE] .(...) -- D:\jeux\badass hero\badass.hero.v9\skidrowgamesreloaded.com\bh.exe (.not file.) =>.SUP.Orphan
O87 - FAEL: "TCP Query User{277B6EAF-A44C-42FE-ADD2-FF2F6745CD61}D:\jeux\badass hero\badass.hero.v9\skidrowgamesreloaded.com\bh.exe" [In-None-P6-TRUE] .(...) -- D:\jeux\badass hero\badass.hero.v9\skidrowgamesreloaded.com\bh.exe (.not file.) =>.SUP.Orphan
O87 - FAEL: "UDP Query User{78CB6FDB-8056-45F9-8F17-C063229F5848}D:\jeux\broforce\[www.mpc-g.com]brfrc3903lgthstrkstwcupdt\broforce_beta.exe" [In-None-P17-TRUE] .(...) -- D:\jeux\broforce\[www.mpc-g.com]brfrc3903lgthstrkstwcupdt\broforce_beta.exe (.not file.) =>.SUP.Orphan
O87 - FAEL: "TCP Query User{4081A66C-58AB-4276-A212-EBC10D61EF49}D:\jeux\broforce\[www.mpc-g.com]brfrc3903lgthstrkstwcupdt\broforce_beta.exe" [In-None-P6-TRUE] .(...) -- D:\jeux\broforce\[www.mpc-g.com]brfrc3903lgthstrkstwcupdt\broforce_beta.exe (.not file.) =>.SUP.Orphan
O87 - FAEL: "UDP Query User{FF15550B-3B5C-4EA4-94EF-A71A4785AD26}D:\jeux\broforce\[www.mpc-g.com]brfrc3903lgthstrkstwcupdt\broforce_beta.exe" [In-None-P17-TRUE] .(...) -- D:\jeux\broforce\[www.mpc-g.com]brfrc3903lgthstrkstwcupdt\broforce_beta.exe (.not file.) =>.SUP.Orphan
O87 - FAEL: "TCP Query User{ADA8E819-15F1-4D76-A9E9-B43FCF96AF85}D:\jeux\broforce\[www.mpc-g.com]brfrc3903lgthstrkstwcupdt\broforce_beta.exe" [In-None-P6-TRUE] .(...) -- D:\jeux\broforce\[www.mpc-g.com]brfrc3903lgthstrkstwcupdt\broforce_beta.exe (.not file.) =>.SUP.Orphan
O87 - FAEL: "UDP Query User{2E795241-DC1F-45C0-9C87-583080449021}C:\xampp\mysql\bin\mysqld.exe" [In-None-P17-TRUE] .(...) -- C:\xampp\mysql\bin\mysqld.exe {03498E828081693140DAE8DCBD1D723D} =>.Legitimate
O87 - FAEL: "TCP Query User{70DAA3CF-5315-4018-8EFA-1FA3145E43AB}C:\xampp\mysql\bin\mysqld.exe" [In-None-P6-TRUE] .(...) -- C:\xampp\mysql\bin\mysqld.exe {03498E828081693140DAE8DCBD1D723D} =>.Legitimate
O87 - FAEL: "TCP Query User{8BA1FEDA-FB20-46EF-9A20-1C695491DBE2}D:\sdi_x64_r535.exe" [In-None-P6-TRUE] .(...) -- D:\sdi_x64_r535.exe (.not file.) =>.SUP.Orphan
O87 - FAEL: "UDP Query User{053DC771-12AF-477F-9A7E-B61E1B3B5CB0}D:\sdi_x64_r535.exe" [In-None-P17-TRUE] .(...) -- D:\sdi_x64_r535.exe (.not file.) =>.SUP.Orphan
O87 - FAEL: "{A9900C89-3F67-4AF9-A5E8-2EE7D921B28B}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\Steam\steamapps\common\Hacknet\Hacknet.exe =>.Steam Games
O87 - FAEL: "{CB26BF1B-C215-46D3-B3B3-0BFB4084A0FE}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\Steam\steamapps\common\Hacknet\Hacknet.exe =>.Steam Games

---\\ CODES PRODUITS LOGICIELS (13) - 2s
O90 - PUC: "017E74BF9426AFE4EB639E220B16A24F" [HKLM] . (.CASIO FA-124.) -- C:\WINDOWS\Installer\{FB47E710-6249-4EFA-BE36-E922B0612AF4}\ARPPRODUCTICON.exe
O90 - PUC: "35825F8F7A1A7C240A28A5D68535BBB0" [HKLM] . (.VS JIT Debugger.)
O90 - PUC: "48A1A90260A14594D937E756C4F5D8A7" [HKLM] . (.VS WCF Debugging.)
O90 - PUC: "575B2E367F6D2754E89AD3CA2480AAA2" [HKLM] . (.IIS 10.0 Express.) -- C:\WINDOWS\Installer\{63E2B575-D6F7-4572-8EA9-3DAC4208AA2A}\Icon_IisExpress
O90 - PUC: "70ADB2A871431C640985BC23CB363EE0" [HKLM] . (.VS Immersive Activate Helper.)
O90 - PUC: "77BB229795B0A048CA085D063AD4575C" [HKLM] . (.SDK ARM Additions.)
O90 - PUC: "888F1B39F189FFF478CC9E52AE344DF5" [HKLM] . (.Visual F# 10.1 SDK.)
O90 - PUC: "8A167BE0A0C34054C8A85111F858D997" [HKLM] . (.Visual F# 10.1 SDK.)
O90 - PUC: "975026ED75087CD40B14B2A1B1C338D7" [HKLM] . (.vcpp_crt.redist.clickonce.)
O90 - PUC: "BBCB8CF580430B84AB0F3849097FEA56" [HKLM] . (.DiagnosticsHub_CollectionService.)
O90 - PUC: "C56FD78C276A80E70A387E4DF88EBD07" [HKLM] . (.SDK ARM Redistributables.)
O90 - PUC: "DB5CBDE17FF54DD4A8820401456EC36F" [HKLM] . (.windows_toolscorepkg.)
O90 - PUC: "DF445791982E40B48A091AB00B9A4F4D" [HKLM] . (.MindView 7.0.) -- C:\WINDOWS\Installer\{197544FD-E289-4B04-A890-A10BB0A9F4D4}\MindView.exe

---\\ PACKAGES WINDOWS INSTALLER (16) - 64s
[MD5.9EE546BA5D3C349FF94B1A763EA13AD7] [WIS][2016/01/12 18:51:46] (.Epic Games, Inc. - UE4 Prerequisites (x64).) -- C:\WINDOWS\Installer\111d6cb2.msi [12226560] =>.Epic Games, Inc.
[MD5.E8A09B086B1A79FB9FB36EDB93CB6070] [WIS][2017/12/18 16:42:58] (.MatchWare - MindView 7.0.) -- C:\WINDOWS\Installer\19de2d81.msi [157937664] =>.MatchWare
[MD5.3AEFA488BAB918BB39386EC566892CB4] [WIS][2017/12/23 16:07:24] (.Adobe Systems Incorporated - Adobe AIR Installer.) -- C:\WINDOWS\Installer\337b031a.msi [45056] =>.Adobe Systems Incorporated
[MD5.06B8E457FA28727AAD1A0A36E56557E8] [WIS][2018/05/21 12:53:41] (.Oracle Corporation - Java SE Runtime Environment 8 Update 171.) -- C:\WINDOWS\Installer\4ae08aa.msi [35319808] =>.Oracle Corporation
[MD5.536A7A1F384F85DE40D8B6E00107598E] [WIS][2018/05/21 12:53:32] (.Oracle Corporation - Java SE Runtime Environment 8 Update 171.) -- C:\WINDOWS\Installer\4ae08ae.msi [39620608] =>.Oracle Corporation
[MD5.EFAFE089C4933ED9F788AD68EEA4FE57] [WIS][2018/05/21 12:53:32] (.Oracle Corporation - Java Auto Updater.) -- C:\WINDOWS\Installer\4ae08b7.msi [761856] =>.Oracle Corporation
[MD5.2FACC32EC4F5CF7BF0DC3C221580F3DD] [WIS][2018/03/09 16:42:51] (.InstallShield.) -- C:\WINDOWS\Installer\552265b.msi [3903488] =>.InstallShield
[MD5.50EA7A4D9481B12A97070942F474D918] [WIS][2018/05/19 11:44:24] (.Google Inc. - Google Update Helper.) -- C:\WINDOWS\Installer\55f91.msi [40960] =>.Google Inc.
[MD5.2FACC32EC4F5CF7BF0DC3C221580F3DD] [WIS][2018/03/09 17:25:53] (.InstallShield.) -- C:\WINDOWS\Installer\56ca2eb.msi [3903488] =>.InstallShield
[MD5.33849E896416335E9F90BAB6979FCC08] [WIS][2017/12/14 12:55:00] (.Cybelsoft - Hardware Detection DriversCloud.com.) -- C:\WINDOWS\Installer\772985ee.msi [9240576] =>.Cybelsoft
[MD5.E4AF16B0574B2598AADD353A35A3722B] [WIS][2012/04/25 04:03:00] (.Adobe.) -- C:\WINDOWS\Installer\77947.msi [2211328] =>.Adobe
[MD5.78B41A323699DAF1C25265890733BE26] [WIS][2012/04/25 04:03:00] (.Adobe.) -- C:\WINDOWS\Installer\7794b.msi [1997312] =>.Adobe
[MD5.5EE609A2EEC40D710274413D4DD40ABB] [WIS][2012/04/25 04:03:00] (.Adobe Systems Incorporated - PDF Settings CS6.) -- C:\WINDOWS\Installer\7796e.msi [2259968] =>.Adobe Systems Incorporated
[MD5.F81C778CF598C6E072BE54605E5262F2] [WIS][2017/11/04 02:11:31] (.Google, Inc. - Google Chrome Installer.) -- C:\WINDOWS\Installer\9faaf3.msi [51527680] =>.Google, Inc.
[MD5.DB40057B2100D3AD08F91EDC932560C8] [WIS][2017/11/22 11:27:50] (.CASIO COMPUTER CO., LTD. - CASIO FA-124.) -- C:\WINDOWS\Installer\db32645.msi [20263424] =>.CASIO COMPUTER CO., LTD.
[MD5.1767C96A39D75002CB410248A1D68EB5] [WIS][2017/10/12 06:54:46] (.OpenOffice - OpenOffice 4.1.4.) -- C:\WINDOWS\Installer\fb9436.msi [2314240] =>.OpenOffice

---\\ SCAN ADDITIONNEL (11) - 83s
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tencent Software =>.SUP.Tencent
C:\Users\Joshua\AppData\Local\Google\Chrome\User Data\Default\File System\004 =>.SUP.Temporary.Chrome
C:\Users\Joshua\AppData\Local\Google\Chrome\User Data\Default\File System\007 =>.SUP.Temporary.Chrome
C:\Users\Joshua\AppData\Local\Google\Chrome\User Data\Default\File System\017 =>.SUP.Temporary.Chrome
C:\Users\Joshua\AppData\Local\Google\Chrome\User Data\Default\File System\027 =>.SUP.Temporary.Chrome
C:\Users\Joshua\AppData\Local\Google\Chrome\User Data\Default\File System\028 =>.SUP.Temporary.Chrome
C:\Users\Joshua\AppData\Local\Google\Chrome\User Data\Default\File System\029 =>.SUP.Temporary.Chrome
C:\Users\Joshua\AppData\Local\Google\Chrome\User Data\Default\File System\030 =>.SUP.Temporary.Chrome
C:\Users\Joshua\AppData\Local\Google\Chrome\User Data\Default\File System\031 =>.SUP.Temporary.Chrome
C:\Users\Joshua\AppData\Local\Google\Chrome\User Data\Default\File System\032 =>.SUP.Temporary.Chrome
C:\Users\Joshua\AppData\Local\Google\Chrome\User Data\Default\File System\Plugins =>.SUP.Temporary.Chrome

---\\ RÉCAPITULATIF DES ÉLÉMENTS TROUVÉS SUR VOTRE STATION (5) - 0s
https://nicolascoolman.eu/2017/09/12/origine-lignes-orphelines/ =>.SUP.Orphan
https://nicolascoolman.eu/2017/12/22/sup-downloader/ =>.SUP.Downloader
https://nicolascoolman.eu/2017/02/23/tencentadressbar/ =>.SUP.Tencent
https://nicolascoolman.eu/2017/03/11/pup-optional-crossrider/ =>Adware.CrossRider
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.SUP.Temporary.Chrome

~ Unselected Options: O82,
~ End of the scan, 25446 items in 13mn39s (1233)(0)